Re: 1U / 2 Computers? For redundant FW pair

2015-01-21 Thread Christian Weisgerber
On 2015-01-21, Marco Prause wrote: > Also when using ipsec in this test-setup, iperf was able to push ~60Mbps > through the tunnel (ase-128). ^^^ That's pretty useless without specifying which MAC algorithm you used. -- Christian "naddy" Weisgerber

Re: Hannover BSD meetup

2015-01-22 Thread Christian Weisgerber
On 2015-01-22, Jason Adams wrote: > I can see Jan not wanting to sit 4 hours on the train, but I'd > be tempted to sit two hours on a train from Berlin. What does that > trip cost these days? 136 EUR regular. Special offers may be available. -- Christian "naddy" Weisgerber

Re: Best filesystem & options for large drive

2015-02-10 Thread Christian Weisgerber
On 2015-02-10, yary wrote: > I know FFS2 can handle that size easily, but I'm worried about fsck > taking forever. This machine will have 1.5GB RAM, from what I've read > that's not enough memory to fsck a 4TB volume without painful > swapping. It vastly depends on the number of files you have o

The CDs have signatures, too

2015-02-17 Thread Christian Weisgerber
Remember, the official OpenBSD CDs carry signatures, too. https://securelist.com/files/2015/02/Equation_group_questions_and_answers.pdf | The attacks that use physical media (CD-ROMs) are particularly | interesting because they indicate the use of a technique known as | "interdiction", where the

Re: Maintaining your system with snapshots

2015-02-21 Thread Christian Weisgerber
On 2015-02-21, Stuart Henderson wrote: > Do you mean that you have mirrored a complete snapshots/packages/(arch) > locally to use as a source for pkg_add? If so, make sure your mirror > is all from the same package snapshot. Basically, check that dates on > the upstream mirror are consistent and

Listening to a CD over the net

2015-03-07 Thread Christian Weisgerber
Since I seem to be the only person using this feature (with the possible exception of ratchov@ himself), here's a periodic reminder that you can use sndio OVER THE NETWORK. Optical drives are kind of passé, but I still keep a working USB one around. I hooked it up to a convenient machine--an old

Re: Console overrun with SPARC64 on Sun V210

2015-03-11 Thread Christian Weisgerber
On 2015-03-11, John Long wrote: > I just installed 5.6 on a Sun V210. The console doesn't seem to know how big > the terminal emulator screen is. Whether I use cu or minicom too many lines > are displayed. By default TERM is set to "sun", which is for an 80x34 Sun video console. If you connect

Re: Console overrun with SPARC64 on Sun V210

2015-03-11 Thread Christian Weisgerber
On 2015-03-11, John Long wrote: >> If you connect from, say, an xterm, you'll need TERM=xterm. > > I tried TERM=xterm and TERM=vt100 before I sent my initial mailing list > post. Nothing changed. Probably you had already run tset(1) before, which had set the tty rows/columns to the values from

Re: Why generate SSH keys at startup?

2015-03-11 Thread Christian Weisgerber
On 2015-03-11, Nick Holland wrote: > As for the general premise of thinking you know more than the OpenSSH > developers...I just have memories of certain Debian devs who thought the > same thing once ... Crypto is hard, have some trust in the > professionals, or you will probably create far bi

Re: Why generate SSH keys at startup?

2015-03-11 Thread Christian Weisgerber
On 2015-03-10, John Long wrote: > What's the reason for generating all the various SSH key types every > startup? The idea is to generate keys (1) the very first time the machine boots and (2) when a new algorithm is added. > Given the source of all the new elliptical crypto I don't want to > u

Re: Why generate SSH keys at startup?

2015-03-12 Thread Christian Weisgerber
On 2015-03-12, John Long wrote: >> You can simply configure HostKey in /etc/ssh/sshd_config. > > With that done a client can still do pubkey auth with a DSA key. (How) can I > stop sshd from accepting client keys a user might include in > ~/.ssh/authorized_keys other than RSA keys? By setting Pu

Re: Why generate SSH keys at startup?

2015-03-12 Thread Christian Weisgerber
On 2015-03-12, John Long wrote: >> By setting PubkeyAcceptedKeyTypes accordingly in sshd_config. > > Thanks, I looked and looked and could not find it in the man page. It > appears to be only in -current? Is this possible in prior versions > (i.e. undocumented but works) or is it totally new? U

Re: tadpole sparc64 notebook running OpenBSD 5.1 dmesg

2012-10-12 Thread Christian Weisgerber
David Coppa wrote: > I'm feeling quite envious ;) Well, that machine is essentially a Blade 100. -- Christian "naddy" Weisgerber na...@mips.inka.de

Re: Slow VPN Performance

2012-10-23 Thread Christian Weisgerber
Michael Sideris wrote: > It seems that changing to hmac-md5 boosted network throughput from > ~50Mbit/s to ~100Mbit/s which is decent and reasonable. I am going to > experiment a bit further with `scrub` options in pf.conf to see if I > can squeeze more performance out of the link. The question n

Re: How to delete this partial package?

2012-10-24 Thread Christian Weisgerber
Marc Espie wrote: > As far as removing the package, since it's just trying to checksum the file > before removing it, pkg_delete -c will take care of that... That's pkg_delete -q -- Christian "naddy" Weisgerber na...@mips.inka.de

Re: Building OpenConnect with libintl

2012-11-08 Thread Christian Weisgerber
Woodhouse, David wrote: > It seems that libintl *is* present, but it's installed in /usr/local and > the compiler doesn't find it by default. [...] > surely I shouldn't have to advise users to build things that way when > using the platform's stock libintl? I would like to clarify that libintl i

Re: Low latency High Frequency Trading

2012-11-09 Thread Christian Weisgerber
Ryan McBride wrote: > Also, remember to use the shortest patch cables possible, to reduce > signal propagation latency. More seriously, is there an appreciable latency difference between copper and fiber PHYs? -- Christian "naddy" Weisgerber na...@mips.inka.de

Re: Thinkpad choice? -Is Nvidia tolerable for generic X?

2012-11-12 Thread Christian Weisgerber
Rod Whitworth wrote: > >I have a Thinkpad T430s with sandybridge (or ivybridge, I can never > >remember), and life isn't too bad. I can suspend/resume, watch > >(smaller) movies and dvds, and generally use it. > > Thanks for replying Peter. > > Can you switch from X to a virtual console and ba

Re: Hardware hunting

2012-11-16 Thread Christian Weisgerber
Chris McGee wrote: > The Soekris Net4x series uses an anonymous ethernet chip that you can't > quite read in the photos and it's not listed in the spec sheet. I am > pretty sure the Net4501-30 has a "VM552RR" chip, but I don't know who makes That's just the transformer. The net45xx and net48xx

Re: Hardware hunting

2012-11-16 Thread Christian Weisgerber
Forman, Jeffrey wrote: > I mainly bought the machine because I liked being able to throw a cheap > huge PATA hard drive in there, and not be concerned with flash's supposed > write-limit, or mucking about with read-only filesystem, among other things. Funny. I'd rather throw in a flash than a f

Re: Hardware hunting

2012-11-17 Thread Christian Weisgerber
Maurice Janssen wrote: > >http://blog.bytemine.net/2012/08/15/bytemine-appliance-6a16e/ > >https://shop.bytemine.net/startseitenprodukte/bytemine-appliance-6a16e.html > > Does anyone know the dimensions of it? Can't find them on the website It's an Axiomtek NA-320FL, and according to the data

Re: openbsd 5.2 i38 migrate to amd64

2012-11-24 Thread Christian Weisgerber
bofh wrote: > Thanks! Out of curiousity, are there executables that are in i386 but > not amd64 or vice versa? I can see issues with libraries. Am just > curious. Here's how to check: $ cd /usr/src/distrib/sets/lists $ for i in [a-z]*; do diff -u $i/md.amd64 $i/md.i386; done -- Christian "

Re: OpenBSD support for Lenovo ThinkPad X230?

2012-12-11 Thread Christian Weisgerber
Jonathan Gray wrote: > Not sure on what causes the display noise when coming back from dpms, > the xbacklight control part should work with the following diff: Yes, that fixes it. (Previously, xbacklight would only work once you had dimmed the display at least one step while in the BIOS.) --

net6501 and hw.ncpufound

2012-12-11 Thread Christian Weisgerber
The Atom E6xx CPUs used in the Soekris net6501 are described by Intel as having "1 core" and "2 threads". When you boot GENERIC.MP on them, you get two cpu(4)s: cpu0 at mainbus0: apid 0 (boot processor) cpu0: Genuine Intel(R) CPU @ 1.60GHz, 1600.20 MHz ... cpu1 at mainbus0: apid 1 (application pr

Re: [OpenBSD 5.2] Bug in fileutils from ports/misc

2012-12-13 Thread Christian Weisgerber
Francois Pussault wrote: > from /usr/ports/misc/fileutils, we cannot make install This port doesn't exist any longer in 5.2. Well, it does, because I forgot to delete it, but it had already been unhooked from the bulk builds. It has been superseded by sysutils/coreutils. > I was looking for "

Re: Wireless WPA and crypto hardware

2012-12-15 Thread Christian Weisgerber
Martin Kjær Jørgensen wrote: > Do you think an AMD Elan 133 Mhz is "modern" enough for at 54/mbit > wireless WPA2 throughput? WPA2, that's what? AES-CCM? A 1 GHz Atom as in the Soekris net6501-50 should be able to do it. (My net6501-70, the 1.6 GHz model, is about 80% busy saturating an .11g

Re: Wireless WPA and crypto hardware

2012-12-17 Thread Christian Weisgerber
Stuart Henderson wrote: > > Do you think an AMD Elan 133 Mhz is "modern" enough for at 54/mbit > > wireless WPA2 throughput? > > No but neither will it be quick enough that pumping the data to > a PCI-based crypto accelerator is going to work well. Indeed. Also, we don't support any PCI-based

Re: net6501 and hw.ncpufound

2012-12-18 Thread Christian Weisgerber
Mihai Popescu wrote: > > The Atom E6xx CPUs used in the Soekris net6501 ... but judging from > people's inability to realize that the 1.0 and 1.6 > GHz models they had > bought were only running at 0.6 GHz by default ... > > Could you tell a little bit more about this, please? It concerns the

Re: Locale

2012-12-30 Thread Christian Weisgerber
Peter Hessler wrote: > export LC_CTYPE="en_US.UTF-8" > in my .xinitrc / .xsession tells programs To Do The Right Thing. > Of course, not everything supports UTF8, so your milage may vary. If Matias is only concerned about Spanish, LC_CTYPE=en_US.ISO8859-1 might be better advice, in particular si

Re: Unused swap

2013-01-11 Thread Christian Weisgerber
Constantine A. Murenin wrote: > plus, last i checked, firefox was not even 64-bit friendly anyways Bullshit. -- Christian "naddy" Weisgerber na...@mips.inka.de

Re: Use pax instead of cpio in FAQ 14.4 (Adding extra disks)

2013-01-11 Thread Christian Weisgerber
Jeremy Evans wrote: > 1) Switch from cpio -pdum to pax -rw -p e. Seems fine to me. > I'm not sure if there are other reasons to use cpio over pax. Nope. On OpenBSD, tar/cpio/pax are all frontends to the same program anyway. > However, when I replaced I disk last night and tried to use cpio >

Re: any special trick to use hwfeatures on em ?

2013-01-22 Thread Christian Weisgerber
Ilya Shipitsin wrote: > "ifconfig em0 hwfeatures" does not show nothing on rx/tx checksum, neither > man pages on "ifconfig" and "em" explain how to do that. There is nothing to "do". If the chip offers the feature and the driver can take advantage of it, it will do so automatically. RX checks

Re: two equal filenames in one dir

2013-01-27 Thread Christian Weisgerber
Stefan Sperling wrote: > However, it is entirely possible to have two filenames in a directory > that look the same, at least when rendered as text, if you use unicode: > http://en.wikipedia.org/wiki/Precomposed_character#Comparing_precomposed_and_decomposed_characters You don't need to go that

Re: syncing hardware clock

2013-02-07 Thread Christian Weisgerber
Lars Nooden wrote: > I've got a small system running 5.2-stable and the clock seems off. NTP > is making entries like this on startup: > > Jan 31 10:15:31 net5501 ntpd[20060]: adjusting local clock by 93.846882s > > I've looked around in the mail archives for various mailing lists and have

Re: USB repeater cable on Soekris net5501

2013-03-03 Thread Christian Weisgerber
Ingo Feinerer wrote: > I have a problem with a Digitus USB 2.0 repeater cable in combination with a > Soekris net5501 running OpenBSD 5.2 (see full dmesg at the very end of this > mail). Is this an active device? Essentially a single-port hub? > However, the problem occurs when I attach the re

Re: A slight twist on the OpenBSD laptop question

2013-03-06 Thread Christian Weisgerber
Otto Moerbeek wrote: > vga1 at pci0 dev 2 function 0 "Intel HD Graphics 4000" rev 0x09 > > I'm pretty happy with it. So is this one not recent or am I missing something? Doesn't have hardware acceleration or Xv support. -- Christian "naddy" Weisgerber na...@mips.inka.

Re: renaming name of interfaces

2013-03-14 Thread Christian Weisgerber
Peter N. M. Hansteen wrote: > Me neither. For most use cases I can think of, interface groups (a feature we > do have, see ifconfig(8) and possibly other references elsewhere) will give > you what others have implemented interface renaming for. There are also interface descriptions. -- Chris

delete-old

2013-03-28 Thread Christian Weisgerber
Those who also update FreeBSD machines from source may know "make delete-old", which offers to delete obsolete files and directories. Here's the same as a shell script. 8< #!/bin/sh ARCH=$(uname -m) BASE=-rOPENBSD_5_3_BASE list=$( cd /usr/src/distrib/sets/lists &&

Fully networked

2013-04-03 Thread Christian Weisgerber
Just because, I have recreated a configuration similar to what I actually used for a while, years ago. I'm running XMMS on a machine that has neither video nor audio. XMMS is happily running on hostA, playing a remote stream from the Internet. Video? X11 is forwarded to hostB. Audio? sndio is

Re: Fully networked

2013-04-03 Thread Christian Weisgerber
Christian Weisgerber wrote: > hostA$ DISPLAY=hostB:0.0 AUDIODEVICE=snd@hostC/0 xmms I've been asked for the relevant configuration. For the client, the line quoted above is all there is to it. See sndio(7) for an explanation of the AUDIODEVICE syntax. For the sndio server, add

Re: up/down in pdksh-history with "set -o vi"

2013-04-12 Thread Christian Weisgerber
Ted Unangst wrote: > On the other hand, strictly speaking, vi doesn't support arrow keys. > vim in compatible mode or the stock vi on hpux (shudder) will just dump > control characters in your file for example. Traditional vi does support arrow keys in command mode, just not in insert mode. (If

Re: Why does OpenBSD use CVS?

2013-04-20 Thread Christian Weisgerber
Alokat MacMoneysack wrote: > I find it a little bit difficult to see the commits from the developers. > Because I have to check out the single files and not a single commit. You might find the cvsps package useful. -- Christian "naddy" Weisgerber na...@mips.inka.de

rtl_sdr (was: Re: CVS: cvs.openbsd.org: ports)

2013-04-27 Thread Christian Weisgerber
Stuart Henderson wrote: > CVSROOT: /cvs > Module name: ports > Changes by: st...@cvs.openbsd.org 2013/04/23 08:50:19 > > Modified files: > comms/rtl-sdr : Makefile > comms/rtl-sdr/pkg: DESCR PLIST > Added files: > comms/rtl-sdr/patches: patch-src_rtl_fm_c > > Log

Re: Tux cups

2013-05-03 Thread Christian Weisgerber
Michael W. Lucas wrote: > > To my astonishment: when printing a test page from cups, it outputs an > > image of Tux!?! > > Cups is Linux-ware, ported to OpenBSD. > The name claims to be "common," but no, it's Linux-centric. Actually... "CUPS is the standards-based, open source printing system

Re: Thinkpad X230t convertible and openbsd

2013-05-08 Thread Christian Weisgerber
Edd Barrett wrote: > It's not the availability of the firmware that bothers me about Intel > wireless. I have had laptops with iwi and iwn cards (thinkpads) and > I found that the firmware crashes frequently. I have always swapped > them out for ral, ath or urtwn. FWIW, the "Intel Centrino Ultim

Re: USB temperature sensors

2013-05-10 Thread Christian Weisgerber
Stuart Henderson wrote: > TemperNTC (http://www.pcsensor.com/index.php?_a=product&product_id=7) > uses uthum(4) but has a problem where the sensor drops out occasionally; > diff I posted to tech@ improves (but doesn't totally fix) this. > This seems specific to TemperNTC, I don't have any other u

Re: SHA256 fingerprints on AnonCVS web page

2015-03-28 Thread Christian Weisgerber
On 2015-03-28, Bernd Schoeller wrote: > > The authenticity of host 'openbsd.cs.fau.de (131.188.40.91)' can't be > established. > ECDSA key fingerprint is SHA256:gcWYMCjQHnmA97RT53MGCKp2kZ3pk5TZPFdYTJQl9/w. > > Unfortunately, the SHA256 fingerprints are not published on > http://www.openbsd.org/an

Re: problem with key exchange

2015-04-03 Thread Christian Weisgerber
On 2015-04-03, Stuart Henderson wrote: >> I run query on localhost this way: >> $ ssh -Q kex localhost > > http://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/www/faq/current.html?rev=1.521&content-type=text/html#20140603 > > ssh permits a wider range of ciphers/kex/MACs than sshd does by default

Re: Question on Serial Ports

2015-04-04 Thread Christian Weisgerber
On 2015-04-04, hru...@gmail.com wrote: > I can speak with the "Elsa Microlink 33.6TQV" with almost any > speed (using "cu" command), also similar speeds, in which one is > not exact multiple of the other. > > With the "Sony Ericsson GM29" only with a speed of 9600bps. If I give it > the two comma

Re: ssh help with X11Forwarding

2015-04-15 Thread Christian Weisgerber
On 2015-04-15, "Ulises M. Alvarez" wrote: > Did you update your pf rules? By default, X is allowed only for localhost. That concerns only raw X11 over the wire and does not interfere with X11 forwarding over SSH. -- Christian "naddy" Weisgerber na...@mips.inka.de

Whatever happened to reop?

2015-04-27 Thread Christian Weisgerber
A year ago, tedu@ published reop, which "does everything you’d expect a PGP program to do". http://www.tedunangst.com/flak/post/reop There's GitHub site that's still active and there is ports/security/reop, maintained by jturner@, but generally it has been awfully silent. If anybody uses reop, th

Re: What bad things could happen if we don't use sudoedit?

2015-04-27 Thread Christian Weisgerber
On 2015-04-27, "whynot sudo" wrote: > Cmnd_Alias FOO = /bin/ed, /usr/bin/ed, /usr/bin/vi > foouser LOCALHOST = NOPASSWD: NOEXEC: FOO > > Can the "foouser" escape to root prompt? Let's try! $ sudo ed !sh # id uid=0(root) gid=0(wheel) groups=0(wheel), 2(kmem), 3(sys), 4(tty), 5(operator), 20(sta

Re: OpenSSH AESNI support

2015-05-07 Thread Christian Weisgerber
On 2015-05-07, Hugo Osvaldo Barrera wrote: > I've finally decided to replace that CPU, but I'm wondering: Does OpenSSH > support/use the AESNI instruction set if available? Yes, by way of OpenSSL/LibreSSL, which make use of AESNI if available. > if AESNI access is done via crypto(9) or some oth

Re: HP LaserJet 1100 lpr printing?

2015-05-15 Thread Christian Weisgerber
On 2015-05-15, Craig Skinner wrote: > Any pointers on printing with an HP LaserJet 1100? > lp|local line printer:\ > :lp=/dev/ulpt0:\ > :sd=/var/spool/output:\ > :lf=/var/log/lpd-errs:\ > :if=/usr/libexec/lpr/lpf: > #:sf:\ > #:sh:\ > #:tr=^D: > $ file /

Re: what happened to the encap address_family

2015-05-15 Thread Christian Weisgerber
On 2015-05-14, Boris Goldberg wrote: > The encap address_family isn't in the netstat man page anymore. > The "netstat -nrf encap" gives an error, the "netstat -nr" doesn't have the > "Encap" section. Yes, this has been excised from netstat(1). > How do I check VPN related routing besides "ip

Re: Updating SSH fingerprints for anoncvs.fr.openbsd.org

2015-05-17 Thread Christian Weisgerber
On 2015-05-17, Denis Fondras wrote: > Because I had to check them. For obvious reasons we need to get those from the mirror operators themselves and not from third parties. -- Christian "naddy" Weisgerber na...@mips.inka.de

Re: Adding a NIC into cramped micro itx board for firewall

2015-05-21 Thread Christian Weisgerber
On 2015-05-20, Armin Tanzarian wrote: > The other option is to use the onboard PCI Express Mini slot (it's > horizontally flush with mobo) and maybe run some sort of extender off of > there. But I can't find any. I definately can't find any intel nics that > would fit the bill. Definately want to

Re: Intel i217-LM Ethernet not working in -current

2015-05-28 Thread Christian Weisgerber
On 2015-05-28, Sonic wrote: > More than just a DHCP issue as previously reported. The Intel i217-LM > is not functional running -current. Yeah, something is wrong there. My em0 at pci0 dev 25 function 0 "Intel I217-LM" rev 0x04: msi doesn't work either on -current/amd64. At least in a VLAN c

Re: Intel i217-LM Ethernet not working in -current

2015-06-02 Thread Christian Weisgerber
Sonic: > However as it was reported earlier in the thread by Paulo to be > working in 5.6 but not in 5.7 I reverted the following files back to > their 5.6 release states (keeping the rest of the kernel at -current): > [...] > Then rebuilt the kernel and the i217-LM now works. My i217-LM does not

Re: Package for taking a picture

2015-06-15 Thread Christian Weisgerber
On 2015-06-15, "STeve Andre'" wrote: > I'm looking in the ports tree for something to test a camera that shows up > as uvideo0. > > Something to take a pic and put it in a file would be OK. I haven't used it myself, but I'd first try video(1), which is included in the X11 sets. -- Christian "

Re: "when SSDs are not so solid" or why no TRIM support can be a good thing :)

2015-06-18 Thread Christian Weisgerber
On 2015-06-18, Nick Holland wrote: > The SSD has some number of spare storage blocks. When it finds a bad > block, it locks out the bad block and swaps in a good block. > > Curiously -- this is EXACTLY how modern "spinning rust" hard disks have > worked for about ... 20 years Easily 25, for SCS

Re: Chromium in the latest snapshot packages

2015-06-22 Thread Christian Weisgerber
On 2015-06-22, "Bryan C. Everly" wrote: > I wiped and re-loaded my laptop over the weekend with the latest > snapshots and noticed that Chromium isn't in the amd64 snapshot > package directory on any of the mirrors I checked. Is there currently > a problem with the build on that or should I bit

Re: Chromium in the latest snapshot packages

2015-06-25 Thread Christian Weisgerber
On 2015-06-22, Christian Weisgerber wrote: > The chromium build is very brittle and fails frequently in quasi-random > ways. During the latest amd64 snapshot build, chromium errored out > twice, in slightly different ways. I've uploaded new amd64 packages (Jun 25) that includ

Re: Any books about OpenBSD ARM programming?

2015-06-25 Thread Christian Weisgerber
On 2015-06-25, andrew fabbro wrote: > There was a 2nd edition of "The Design and Implementation of the FreeBSD > Operating System" released September 2014. I haven't looked at it - was it > updated to reflect current design? It was, but how is any of this relevant for OpenBSD? -- Christian "n

Re: IPV6 routing issue

2015-06-26 Thread Christian Weisgerber
On 2015-06-26, Giancarlo Razzolini wrote: > I've recently changed my ISP and they have native IPv6. My customer > premises equipment, which is a GPON, supports both stateless as DHCPv6 > on it's LAN interface. I want to put a OpenBSD firewall between this CPE > and my internal network. S

Re: IPV6 routing issue

2015-06-26 Thread Christian Weisgerber
On 2015-06-26, Giancarlo Razzolini wrote: > I don't know if OpenBSD does have any NDP proxying functionality, > besides the one in ndp(8). But it seems to me that, besides a bridge, a > NDP proxy is the only viable solution (besides my ISP allowing me to > change my router configuration). Wel

Re: FFS snapshoting/softupdates status

2015-06-26 Thread Christian Weisgerber
On 2015-06-20, Karel Gardas wrote: > just going thorough papers/presentations and surprisingly found that > kind of snapshoting is already supported in UFS since '99, FreeBSD > probably supports that, Yes, FreeBSD has had snapshots on UFS for a long time. It doesn't support the combination of s

Leap second

2015-06-27 Thread Christian Weisgerber
As you may have heard, a leap second will be upon us at 23:59:60 UTC on June 30. The sky will fall, civilization will end, and dinosaurs will roam the earth again. Well, maybe not. Neither the OpenBSD kernel nor OpenNTPD handle leap seconds in any way. So what will happen? After the leap secon

Re: Leap second

2015-07-01 Thread Christian Weisgerber
On 2015-06-27, Christian Weisgerber wrote: > After the leap second, your OpenBSD system's time will be off by, > well, one second. Gasp, shock. Let's say you synchronize your > clock with ntpd against a server that does have the correct time. > At the next poll, i.e. wit

Re: SOHO IPv6 router problems

2015-07-06 Thread Christian Weisgerber
On 2015-06-30, Patrik Lundin wrote: > The setup looks like this: We are supposed to get a default route on the > outside interface (em0), using autoconf, and then recieve an IPv6 prefix > on the inside (em1) using DHCP6-PD (prefix delegation). FWIW, this scheme is specified here: TR-187: IPv6 f

Re: SOHO IPv6 router problems

2015-07-13 Thread Christian Weisgerber
On 2015-07-02, Patrik Lundin wrote: > In summary, using the following commands (together with ip6 forwarding > enabled) > allows us to have a working setup without any other manual intervention: >=== > # ifconfig em0 inet6 autoconf > # ifconfig em1 inet6 autoconf > # dhcp6c -Df -c /etc/dhcp6c.co

Re: Thinkpad Batteries

2015-07-13 Thread Christian Weisgerber
On 2015-07-13, Walter Alejandro Iglesias wrote: > About Thinkpad's batteries. I think very little can be said. Too much depends on the model, the condition of the batteries, and your usage pattern. There's a big difference whether you run make -j4 build or stare at vi in an xterm. Apart from

Re: SPARC minimum hardware specification

2015-07-17 Thread Christian Weisgerber
On 2015-07-17, BSD wrote: > As a new user, I find myself in the same position as the OP: very > interested in non-Intel products. But there seems to be a vacuum of > information around this topic. You're 15 years too late. x86 has won. -- Christian "naddy" Weisgerber

Re: SPARC minimum hardware specification

2015-07-19 Thread Christian Weisgerber
On 2015-07-19, John Long wrote: > OpenBSD mips64el runs oustandingly well on the Lemote boxes. See here: > http://www.openbsd.org/loongson.html Given that only about 2/3 of the ports tree can be built on loongson, I'm questioning this "outstandingly well". -- Christian "naddy" Weisgerber

Re: SPARC minimum hardware specification

2015-07-20 Thread Christian Weisgerber
Let's cut through some of this crap. If you want a reasonably quiet sparc64 designed to be put on a desk, your fastest choices are a Sun Blade 100 or Sun Blade 150 (~20% faster) Of course these machines are 15+ years old and something like Pentium II speed. There are also Sun Blade [12]xxx

Re: SPARC minimum hardware specification

2015-07-21 Thread Christian Weisgerber
On 2015-07-21, Karel Gardas wrote: > Does that mean that lying on desk, Sun Blade 150 is more noisy than > M3000? Coincidently, we yesterday lugged two M3000s into the hackroom here at c2k15. When turned on, these make a hellish noise and you want them in an insulated server room far away. The

Re: SPARC minimum hardware specification

2015-07-21 Thread Christian Weisgerber
On 2015-07-21, Graham Stephens wrote: > These machines were not fast when new, but I will say that if you do try > one of these you *need* the proper memory for them (IIRC, registered). You need the proper memory for _any_ machine. And you misremember. spdmem0 at iic0 addr 0x50: 512MB SDRAM

Re: SPARC minimum hardware specification

2015-07-21 Thread Christian Weisgerber
On 2015-07-20, Joel Rees wrote: > I know I'm persona non-grata on the list these days, and I doubt I'm > going to make much sense in an argument, but it's the way Intel won > that has some of use willing to take a small hit on performance or > price. The irony is that I've probably run more non-

Re: bgpd and friends

2015-07-24 Thread Christian Weisgerber
On 2015-07-24, Gregory Edigarov wrote: > Just curious if the message passing "framework" developed by claudio@ > and henning@ is documented somehow. imsg_init(3) -- Christian "naddy" Weisgerber na...@mips.inka.de

Re: Play mono mp3s in stereo?

2015-07-26 Thread Christian Weisgerber
On 2015-07-26, Craig Skinner wrote: > A set of mp3 recordings has been made in mono (right channel only), > which is irritating to listen to with only one speaker/headphone. > Is there a way to play these through both left & right equally? If I had such a file, I'd investigate mpg123's options.

Re: Firewall question: is using a NIC with multiple jacks considered insecure?

2015-07-27 Thread Christian Weisgerber
On 2015-07-27, Quartz wrote: > Some years ago I remember reading that when using OpenBSD (or any OS, > really) as a router+firewall it was considered inadvisable from a > security standpoint to have the different networks all attached to a > single network card with multiple ethernet ports. Th

Re: SPARC minimum hardware specification

2015-07-27 Thread Christian Weisgerber
We're hurtling towards the 5.8 release and, as usual, ports and packages on non-x86 platforms are in dire shape. If you want to put your money where your mouth is, take a look at recent build logs and start fixing some of those problems. http://build-failures.rhaalovely.net/ sparc64, powerpc, alph

Re: Sluggish/laggy browser behaviour

2015-07-28 Thread Christian Weisgerber
On 2015-07-28, Maurice McCarthy wrote: >> I have never seen fluent browser HTML5 video on any OpenBSD machine. > > Same here. I always download any video content first and play it in vlc or > mplayer. The chaps at Jondo reckon it is a little safer too. > https://anonymous-proxy-servers.net/en/faq

Re: Intel C61X / C22X Chipset Support

2015-07-31 Thread Christian Weisgerber
On 2015-07-31, Joe Crivello wrote: > Does anyone have any experience with running OpenBSD on the Intel C61X or > C22X series chipsets? My main amd64 box at home is a Dell PowerEdge T20 with a C226 chipset. > In particular I am also curious if the SATA ports would be > supported in AHCI mode. a

Re: Show us your /etc/profile

2015-08-01 Thread Christian Weisgerber
On 2015-07-31, listas...@dna.uba.ar wrote: > What aliases or custom functions do you use? Nothing exciting. Here's a useful one not everybody might know about: alias doas='doas ' Also, just for kicks I keep these around, although they aren't terribly useful in a windowing environment where you

Re: cdio(1) cdrip (error correction / why WAVE).

2015-08-23 Thread Christian Weisgerber
On 2015-08-23, n...@nawi.is wrote: > I have here many audio cd's which I plan to rip - ripping with cdio(1)'s > cdrip works without problems. Now I ask myself, whether cdio(1) does some > error correction for scratched discs or, if the drive produces some errors cdio does not perform any error c

Re: icmp block/pass rules in PF

2015-09-04 Thread Christian Weisgerber
On 2015-09-04, Joseph Borg wrote: > this doesn’t work: > pass out on $DMZ_if inet proto icmp icmp-type echoreq from 192.168.2.1 > these work: > pass out on $DMZ_if inet proto icmp from 192.168.2.1 > pass out on $DMZ_if inet proto icmp icmp-type echoreq Simply searching for "ic

Re: 2^64 - 39 ...

2015-09-08 Thread Christian Weisgerber
On 2015-09-07, Otto Moerbeek wrote: > The game is to fix the bugs FWIW, FreeBSD has changed factor(6) to use libcrypto's BN functions. -- Christian "naddy" Weisgerber na...@mips.inka.de

Re: Question - test lab

2015-09-11 Thread Christian Weisgerber
On 2015-09-09, "Bryan C. Everly" wrote: > I'm trying to put together a multiple CPU architecture test lab for > work I'm doing on some ports and I have the following: > > * Thinkpad T21 (i386) > * Powerbook G4 (32-bit PPC) > * Sun Blade 100 (sparc64) > * Thinkpad x220 (amd64) > > I'm wondering if

Re: edit UTF-8 text files under vi or mg?

2015-09-12 Thread Christian Weisgerber
On 2015-09-12, Jiri Navratil wrote: > Is it possible to edit UTF-8 text files under vi or mg? The editors in base do not support UTF-8 yet. -- Christian "naddy" Weisgerber na...@mips.inka.de

Re: Soekris 4501 and OpenBSd 5.7

2015-09-16 Thread Christian Weisgerber
On 2015-09-16, Devin Reade wrote: > I don't know about the 4501, but the 5501 works fine. Also, lunch was okay. Since we are talking about totally different things. -- Christian "naddy" Weisgerber na...@mips.inka.de

Re: Cheap hardware for router, perhaps fileserver?

2015-09-19 Thread Christian Weisgerber
On 2015-09-19, Mark Carroll wrote: > For instance, around the USD100 mark the Ubiquiti ERLite-3 looks > reasonable [...] Also, the SolidRun CuBox series looks more powerful Don't buy new non-x86 hardware unless you want to write code to improve OpenBSD's support for it. If you just want to use

Re: update/upgrade

2015-09-20 Thread Christian Weisgerber
On 2015-09-20, Quartz wrote: > We have a bunch of low power embedded devices that we'd like to keep > reasonably up to date, but the disk space and cpu overhead of tracking > -stable is kind of a nonstarter. You do that part on a bigger box, build releases there, and use these to update the lo

Re: What's good safe PPC/MIPS/SPARC networking hardware with open firmware that works well with OpenBSD? Many ethernet plugs and 1U rack mount = bonus.

2016-02-28 Thread Christian Weisgerber
On 2016-02-28, Tinker wrote: >> Open firmware? What do you mean by that precisely? > > Or just as little firmware as possible, just to minimize that as attack > vector. Remember that your brain architecture and firmware isn't open either. Who knows what's hiding there. Just looking at a random

Re: wireshark illegal instruction on older systems

2016-03-15 Thread Christian Weisgerber
On 2016-03-15, Stuart Henderson wrote: > Looks like Qt autodetects at build time, we probably want to configure > on i386 with no-avx, no-avx2, no-sse4.1, no-sse4.2, maybe no-ssse3. > (SSE2 is probably reasonable to expect for Qt5 apps, it's present on > Netburst, Pentium-M, Atom, C7 etc. which s

Re: wireshark illegal instruction on older systems

2016-03-19 Thread Christian Weisgerber
Peter Kay: > Not wishing to be a dick about this, but what sort of notification is > in place to stop time being wasted trying to run programs on > incompatible CPUs? None. The general policy is that packages must run on all CPUs supported by the base system. That said, we now do have a few port

Re: OT: True hardware UNIX terminal

2016-03-29 Thread Christian Weisgerber
On 2016-03-29, Mihai Popescu wrote: > This question is somehow off topic but I know there are some readers > here old enough to shade some light in this matter. > I want to get and idea of what was or is an old true hardware UNIX > terminal. Start here: https://en.wikipedia.org/wiki/Computer_ter

Re: ncurses and ncursesw share same header?

2016-03-31 Thread Christian Weisgerber
On 2016-03-31, Carsten Kunze wrote: > curses, ncurses and ncursesw library seem to be hard links to one > file. So that means that with the -l option I decide which functions > I use and always simply include ? It is all the same library and it uses the same header header file. Just include a

Quick APU2 review

2016-04-15 Thread Christian Weisgerber
I bought a PC Engines APU2 this week and thought I'd write up my impressions. TL;DR: Recommended. The obvious point of reference is the Soekris net6501. Now, that comparison isn't really fair since the net6501 is several years old and the APU2 is a new design. Then again, Soekris canceled their

Re: Odd (incorrect?) zsh output

2016-04-16 Thread Christian Weisgerber
On 2016-04-16, Geoff Wozniak wrote: > How can I go about determining why this is happening? That is, > what are some good techniques on OpenBSD that let me debug this? > And are there any clues that anyone can recommend I keep an eye > out for? My first guess would be different shell initial

<    1   2   3   4   5   6   7   8   9   >