softraid crypto root with serial console?

2014-11-05 Thread John Merriam
o do with the softraid crypto root setup but I don't know. Is there a bit that needs flipping somewhere to get the serial console to work with crypto root? Any info or pointers on this would be greatly appreciated. Thanks. -- John Merriam

Re: softraid crypto root with serial console?

2014-11-06 Thread John Merriam
. Note that I am not expecting that it be fixed, just wondering if it is planned. It is a bit of a conundrum. I like not having a /boot hanging out there like they do in other OSes, but how to change the boot parameters without access to a filesystem... Thanks! -- John Merriam

pkg_add update checker?

2014-11-21 Thread John Merriam
rough searching either. This is one of those things I'd like to set up in a cron job to run once a day then forget about it until a message pops up in my Inbox so I'd like to get it right the first time. Thanks! -- John Merriam

Re: pkg_add update checker?

2014-11-21 Thread John Merriam
On Fri, 21 Nov 2014, Comète wrote: > 21 novembre 2014 23:00 "John Merriam" a écrit: >> Hello. I am trying to write a script to check for updates to the binary >> packages by checking the output of pkg_add then sending an e-mail if >> something is found. ... &g

Re: pkg_add update checker?

2014-11-22 Thread John Merriam
On Sat, 22 Nov 2014, bodie wrote: > On 22.11.2014 03:40, John Merriam wrote: >> On Fri, 21 Nov 2014, Comète wrote: >>> 21 novembre 2014 23:00 "John Merriam" a écrit: >>>> Hello. I am trying to write a script to check for updates to the binary >>

Re: pkg_add update checker?

2014-11-23 Thread John Merriam
updates' which does describe the situation. Anyway, thanks again! -- John Merriam

Apache2 - intermittent ssl_error_rx_record_too_long

2014-12-04 Thread John Merriam
many possible places where this problem could be residing. Has anyone here ever run in to this before? Anyone have any suggestions/hints/hunches/etc. as to where to start looking? Thanks! -- John Merriam

Re: Apache2 - intermittent ssl_error_rx_record_too_long

2014-12-05 Thread John Merriam
On 12/4/2014 8:46 PM, John Merriam wrote: Hello. I am experiencing a strange problem with Apache 2.2.27p4 on OpenBSD 5.6-stable amd64. I am _intermittently_ getting this error: SSL received a record that exceeded the maximum permissible length. (Error code: ssl_error_rx_record_too_long) in

Re: simple way to block one word domains?

2014-12-09 Thread John Merriam
putting that in place on a few machines. Probably the best solution would be a patch to the resolver library that adds an option to resolv.conf(5) that allows it to easily be turned on/off. The only question is would this break things? Maybe it would require a bypass list of TLDs in a file like /etc/resolv_tlds.conf? -- John Merriam j...@johnmerriam.net

Re: Hide VM data from customer

2014-12-09 Thread John Merriam
the way I see it. Your best bet is probably encryption combined with some good obfuscation as to what the key is/where to get it. Not moving your data to a VM would make some of these attacks harder but not impossible for a determined attacker. -- John Merriam

Re: simple way to block one word domains?

2014-12-18 Thread John Merriam
On 2014-12-09 11:33, John Merriam wrote: On Tue, 9 Dec 2014, Ted Unangst wrote: Curious if anyone knows a simple way to prevent resolution of one word hostnames. Either via resolv.conf or unbound.conf. *snip* I'm by no means a DNS expert but I've been dealing with it for a long

Re: [probably solved] Re: Openbsd broke my hard drive twice! Getting frustrated

2014-12-23 Thread John Merriam
cratch with them. When I recently changed my home server to OpenBSD I upgraded the motherboard BIOS before starting the process even though I was not experiencing any problems with the previous BIOS with Linux installed on the machine. I don't have any UFEI machines except at work (thank goodn

Re: Getting the right image, to install via USB

2014-12-23 Thread John Merriam
e you are using to prepare the USB drive. There might or might not be a better alternative to the dd program at chrysocome.net out there on the internet. -- John Merriam

OpenBSD + OptiPlex 320 = frozen clock?

2015-01-02 Thread John Merriam
led to load firmware! error: [drm:pid0:rs400_startup] *ERROR* failed initializing CP (-2). error: [drm:pid0:rs400_init] *ERROR* Disabling GPU acceleration drm: radeon: cp finalized radeondrm0: 1280x1024 wsdisplay0 at radeondrm0 mux 1: console (std, vt100 emulation), using wskbd0 wskbd1: connecting to wsdisplay0 wsdisplay0: screen 1-5 added (std, vt100 emulation) -- John Merriam

Re: OpenBSD + OptiPlex 320 = frozen clock?

2015-01-03 Thread John Merriam
On 1/2/2015 2:00 PM, Nathan Wheeler wrote: Try changing the value for the sysctl variable "kern.timecounter.hardware"? Its just a guess, but its helped me when I had problems with the clock before. On Fri, Jan 2, 2015 at 7:47 AM, John Merriam wrote: Hello. I have a strange issue wi

Re: OpenBSD + OptiPlex 320 = frozen clock?

2015-01-05 Thread John Merriam
On Mon, 5 Jan 2015, Stuart Henderson wrote: > On 2015-01-03, John Merriam wrote: > > > > Is it worth messing around with to try to get HPET working on the > > OptiPlex 320 in OpenBSD or would it be written off as buggy hardware? I > > guess that assumes it could w

Updating Ports Question

2015-01-05 Thread John Merriam
doing something wrong or missing another step I should be doing but I'm not sure what it is. I haven't found any answers through searching. Any suggestions would be appreciated. Thanks! PS - devel/quirks is always there and I am assuming it should be? -- John Merriam

Re: Updating Ports Question

2015-01-05 Thread John Merriam
On 1/5/2015 7:46 PM, Stuart Henderson wrote: On 2015-01-05, trondd wrote: On Mon, Jan 5, 2015 at 4:00 PM, John Merriam wrote: If I then do another /usr/ports/infrastructure/bin/out-of-date I still see this: Collecting installed packages: ok Collecting port versions: ok Collecting port

Re: man -m: Bad argument

2015-02-12 Thread John Merriam
that in the error message there is no space between -m and the path. That seems a bit odd. Your `test -d $HOME/man && alias man="man -m $HOME/man"` works fine for me in ksh when I put it in a .profile on 5.6 -stable. -- John Merriam

Re: man -m: Bad argument

2015-02-12 Thread John Merriam
27; gave me the error above. > > > Also, which version of OpenBSD are you running on this machine? > > 5.6 or -current? > > current/amd64 > > Jan > > Hmmm. There was one small change to man.c on January 16th but it doesn't look like that should be the problem I wouldn't think. Previous change was back in 2013. It is also possible it is something funny with shell expansion or something. Which shell are you using? I just blew away my -current machine the other day. I don't have -current running any more so I can't try to duplicate it for you. If no one else answers the thread on misc I would recommend sumitting a bug with sendbug. -- John Merriam

Re: Patching X in BASE without X

2015-03-07 Thread John Merriam
when you installed OpenBSD I would recommend not patching X. -- John Merriam

Re: Broadcom NIC issues

2015-03-13 Thread John Merriam
east allow you to run CentOS again. I have seen strange things happen in the past when switching between OSes but that was a very long time ago. -- John Merriam

Re: Broadcom NIC issues

2015-03-13 Thread John Merriam
On Fri, 13 Mar 2015, Miguel Barbosa Gon?alves wrote: > 2015-03-13 15:56 GMT+00:00 John Merriam : > On Fri, 13 Mar 2015, Miguel Barbosa Gon?alves wrote: > > Hi! > > > > I recently installed OpenBSD 5.6 on an amd64 platform. > Everything wen

Re: Executable signing - a proposal

2015-03-31 Thread John Merriam
enough people would be willing to accept the large slow down that would result. So, you probably won't end up with enough interested people needed to gain any momentum. And, as others have mentioned, it will only protect against certain attacks, and determined attackers will be able to get around it. -- John Merriam

Re: differences between pk_add -u and building from source at stable

2015-04-01 Thread John Merriam
x27;t tried OpenBSD on the desktop yet (routers/firewalls and servers so far). Compiling huge stuff that updates often like Firefox could be kind of a pain I would guess. -- John Merriam

Re: differences between pk_add -u and building from source at stable

2015-04-02 Thread John Merriam
On Thu, 2 Apr 2015, Kevin Chadwick wrote: > On Wed, 01 Apr 2015 22:34:06 -0400 > John Merriam wrote: > > > I don't mind using ports instead of packages myself. But, I haven't > > tried OpenBSD on the desktop yet (routers/firewalls and servers so far). > >

Re: What happens to OpenBSD when Secure Boot becomes manditory?

2015-04-02 Thread John Merriam
e 'secure boot' is something that I have complete control over. I would rather use a typewriter... -- John Merriam

Re: Tips & tricks about using mysql under OpenBSD

2015-04-03 Thread John Merriam
ou should have some guess as to how it will work. If not I would say start with the my-huge.cnf MySQL config and go from there. Try to do some testing, particularly try to simulate the load before you go to production. I'm thinking fast CPUs and fast disks will be your best friends on this project. -- John Merriam

Re: differences between pk_add -u and building from source at stable

2015-04-05 Thread John Merriam
ould be soon). With regards to mtier specifically, I didn't see a mention of it anywhere on openbsd.org. So my initial reaction was thanks but no thanks. If it really is considered trustworthy by core OpenBSD developers then maybe I'll take another look. -- John Merriam

Re: .kshrc Definitions under X

2015-04-10 Thread John Merriam
ograms, etc.) in which case you wouldn't want login shell type things being set up. -- John Merriam

Apache2 on 5.7 = certificate error

2015-05-18 Thread John Merriam
and dovecot on the same server and it is working fine with those two daemons. Any ideas or suggestions as to what the problem may be or where I should start digging? Thanks! -- John Merriam

Re: Apache2 on 5.7 = certificate error

2015-05-18 Thread John Merriam
On Mon, 18 May 2015, Stefan Sperling wrote: > On Mon, May 18, 2015 at 10:04:03AM -0400, John Merriam wrote: > > I get the following error in the error_log when I try to start Apache2: > > > > [Mon May 18 09:51:43 2015] [error] Failed to configure CA certificate &g

Re: df(1) shows strange Avail and Capacity info

2015-05-19 Thread John Merriam
rtition with: tunefs -N / You can also see a description of this feature in the notes for the -m option in the tunefs(8) man page. -- John Merriam

Re: Openbsd 5.7 and sendmail

2015-05-26 Thread John Merriam
sendmail fixed my problem. > You may need to edit your /etc/mailer.conf file. See the mailer.conf(5) man page and /usr/local/share/doc/pkg-readmes/sendmail-* -- John Merriam

Re: OpenBSD 5.7 & Asterisk & sendmail & voice mail as email

2015-05-28 Thread John Merriam
/doc/pkg-readmes/sendmail-* Particularly the 'Tweaking /etc/mailer.conf' and 'Client mail queue ownership' sections. I would bet that either your /var/spool/clientmqueue isn't owned by _smmsp:_smmsp or your submit.cf is using the old smmsp user/group. -- John Merriam

Staus of stacked softraid root (RAID1C for root)?

2014-10-20 Thread John Merriam
k the development of stacked softraid for the root partition? Any information you can provide would be greatly appreciated. -- John Merriam - refugee from the land of systemd

Re: Staus of stacked softraid root (RAID1C for root)?

2014-10-20 Thread John Merriam
OpenBSD. Like what I'm seeing, keep up the great work! As you can see in my sig, I'm migrating away from one of those other operating systems... -- John Merriam - refugee from the land of systemd

Re: Staus of stacked softraid root (RAID1C for root)?

2014-10-21 Thread John Merriam
rypt the passwords on it since there isn't any other possibly interesting infomation on it. Not like I have much interesting information on my server either but I still don't want to worry if my machines are stolen or something. Hmmm. Thanks again for helping me think through my o