manpage for gpioctl(8) missing?

2008-12-08 Thread Lars D . Noodén
gpioctl(8) seems to be missing from the web version: http://www.openbsd.org/cgi-bin/man.cgi?query=gpioctl it is present in 4.4-current on i386 and 4.3 on i386 Regards, -Lars Lars NoodC)n ([EMAIL PROTECTED])

securelevel(7) and gpioctl(8)

2008-12-09 Thread Lars D . Noodén
On Mon, 8 Dec 2008, Marc Balmer wrote: NB: not all arches have GPIO. Thanks. Ok. I see now. The online pages return a result only for items present in all architectures. The need for Securelevel 0 was mentioned. Does that mean the device must operate in securelevel 0 in order to turn on

Re: Capturing kernel debugger output without serial console

2008-12-18 Thread Lars D . Noodén
On Wed, 17 Dec 2008, Stuart Henderson wrote: Are your userland and kernel in sync? I update bsd and bsd.rd along with the other sets from each snapshot, so if that works, then yes. Regards, -Lars

Re: Capturing kernel debugger output without serial console

2008-12-18 Thread Lars D . Noodén
Thanks! On Wed, 17 Dec 2008, Josh Grosse wrote: ... * ddb> boot crash The ddb output can be found in the dmesg saved in the core dump. See the -M and -N options of dmesg(8). That puts the dumps in /var/crash. crash(8) mentions a little about how to retrieve information from the dump:

Re: Capturing kernel debugger output without serial console

2008-12-18 Thread Lars D . Noodén
On Wed, 17 Dec 2008, Josh Grosse wrote: ... * ddb> boot crash The ddb output can be found in the dmesg saved in the core dump. ... It may be useful to add that setting systctl ddb.panic=0 will automatically save the core dump, saving a step and some time. Regards, -Lars

jails in openbsd

2007-03-01 Thread Lars D . Noodén
I'd like to look at some virtualization options for openbsd. The ultimate goal would be to get several isolated Debian systems running inside some kind of enironment for virtualization. Can you point me to an openbsd package, port or source code for the freebsd jail or an equivalent? -Lars Lars

Re: jails in openbsd

2007-03-02 Thread Lars D . Noodén
Yes. I want to run several separate instances of Debian under OpenBSD. I've started looking at sysjail and can look at qemu. Would there be any special reasons to choose qemu over others, besides that it's available in ports? -Lars Lars Nooden ([EMAIL PROTECTED]) On the Internet, no

Mounting ext2 in a loopback device

2007-03-02 Thread Lars D . Noodén
How does OpenBSD handle mounting ext2 filesystems? What's wrong or missing from the attempt below? $ sudo vnconfig svnd0 debian.img $ sudo vnconfig -l vnd0: covering debian.dmg on wd0h, inode 41670 vnd1: not in use vnd2: not in use vnd3: not in use $ mkdir debian $ sudo mount -t ex

Re: Mounting ext2 in a loopback device

2007-03-02 Thread Lars D . Noodén
On Fri, 2 Mar 2007, Paul de Weerd wrote: > [snip] You might want to check out chapter 9 of the very nice FAQ > OpenBSD has, find it on http://www.openbsd.org/faq/faq9.html ... [snip] Thanks. It's useful, but neither ch 9 nor ch 14 explicitly show an OpenBSD analog to this from the other system:

Re: Mounting ext2 in a loopback device

2007-03-02 Thread Lars D . Noodén
On Fri, 2 Mar 2007, [EMAIL PROTECTED] wrote: > A "See fstab(5) for types of supported filesystems" in the already > excellent man page would have been helpful. Or is this seen as > already overly obvious? It was one of the first things I checked. From fstab's man page: "ext2fs A loca

qemu disk images

2007-03-04 Thread Lars D . Noodén
How can I create disk images that I can use in qemu on OpenBSD to install debian as a guest system? I've got qemu installed on openbsd and have been trying to install some guest systems but there is difficulty mounting any of the disk images. The installation process seems to progess nicely, r

Re: qemu disk images

2007-03-05 Thread Lars D . Noodén
How do you start qemu AFTER the install is completed? Something like this? qemu -k fi -hda debian.ext2.dmg -hdb debian.swap.dmg I can't get that far: It's not possible to complete the installation because the drives used in -hda -hdb cannot be partitioned or mounted by the installtio

Re: qemu disk images -- resolved

2007-03-05 Thread Lars D . Noodén
Ok. I figured out how to resolve the problem, but through a work-around. One main difference was I had to use qemu-img instead of dd to create the disk images. The other was during the guest system install to make logical partitions *not* primary partitions. qemu-img create -f qcow d4.debian.

ssh in to a qemu guest

2007-03-05 Thread Lars D . Noodén
qemu is now running on an OpenBSD host, with Debian as the guest system. I can reach the net from inside the guest systems. What changes must be made to the networking on the host so that I can ssh *into* the guest systems from outside? -Lars Lars NoodC)n ([EMAIL PROTECTED]) Ensure acces

tun/tap + bridge (was: ssh in to a qemu guest)

2007-03-06 Thread Lars D . Noodén
On Mon, 5 Mar 2007, Tobias Weisserth wrote: > You are posting to the wrong list. This is OpenBSD misc, not qemu users. What > you are trying to solve is perfectly described on the qemu homepage in the > qemu manual... It looks from the qemu docs (which mostly use linux in their examples) like I ha

Patching and/or updating

2007-03-10 Thread Lars D . Noodén
I've the stable branch of OpenBSD 4.0 on an i386 and am searching for a concise description of how to apply a patch and how to upgrade a specific application. Currently the FAQ[1] and "Following Stable"[2] have no concrete examples. (At least nothing that jumps out and bites me.) So what steps wou

Re: Patching and/or updating

2007-03-10 Thread Lars D . Noodén
Thanks. On Sat, 10 Mar 2007, Nico Meijer wrote: > Read release(8) and follow that procedure. Build once, deploy at will. Building my own release looks useful when I deal with more machines later. I didn't this time so, so there is no /usr/src directory to work with. ie. The first step in that doc

OpenSSH ciphers

2007-03-10 Thread Lars D . Noodén
Hopefully this is not too off topic, but I wonder where I can find the authoritative 'homepages' for the ciphers used in OpenSSH: AES, 3DES, Blowfish, Arcfour, and CAST128 The search engines turn out lame references to wikipedia or wikipedia clones or to marketeering non-information. I'm

Re: Patching and/or updating

2007-03-11 Thread Lars D . Noodén
On Sun, 11 Mar 2007, Nico Meijer wrote: > To speed things up, download src.tar.gz and sys.tar.gz from a local > mirror; cd *into* /usr/src/ and untar: tar zxf /path/to/both/files.tar.gz. Yeah, I noticed that it would take a long time and a lot of disk space to download the whole works. So, I just

Re: Contradictory statement on vulnerability

2007-03-16 Thread Lars D . Noodén
On Fri, 16 Mar 2007, Tobias Weisserth wrote: > A nice newbie site explaining this with examples is www.openbsd101.com, if you > don't understand the OpenBSD FAQ. Thanks for posting that one. It hadn't turned up in any of my searches and if it was in any documents I already looked at, I must have

verification of downloads - signature, checksums, fingerprints

2007-03-17 Thread Lars D . Noodén
What's the best practice for ensuring that the correct files are downloaded and that they are unmodified either at the mirror, in transit, or by someone masquerading as a mirror? The CD images seem to come with some checksums, but is there some certificate or key that can be acquired to ensure tha

Re: No Blob without Puffy

2007-03-19 Thread Lars D . Noodén
On Mon, 19 Mar 2007, Dave Anderson wrote: > You've left out the extremely important fact that many vendors > interpret acceptance of blobs by any "free" OS as validating their > position of not releasing adequate documentation -- so accepting blobs > (even when "there's no other choice") actively h

adding X11 libraries after the fact

2007-03-20 Thread Lars D . Noodén
I excluded X11 from an installation of OpenBSD 4.0 and now find that some packages I would use seem to depend on some of the X11 libraries. What is the best way to resolve package dependencies and/or install X11? I recall in the installation there were some sets that could be chosen. Or else, how

Re: adding X11 libraries after the fact

2007-03-20 Thread Lars D . Noodén
Thanks. That's it. I was even looking in right part (#4) of the FAQ, but needed that direct pointer. -Lars On Tue, 20 Mar 2007, Josh Grosse wrote: > FAQ 4.10, "Adding a fileset after install" is what you're looking for. > Here's a handy link: http://openbsd.rt.fm/faq/faq4.html#AddFileSet On Tu

Re: Does anyone know a good file manager for OpenBSD?

2007-03-21 Thread Lars D . Noodén
Others have recommended wget. I strongly recommend it as well, there are loads of ways to use it: http://www.die.net/doc/linux/man/man1/wget.1.html curl also is quite useful. I also highly recommend ncftp. -Lars Lars NoodC)n ([EMAIL PROTECTED]) Ensure access to your data now a

Re: Microsoft gets the Most Secure Operating Systems award

2007-03-22 Thread Lars D . Noodén
On Thu, 22 Mar 2007, RedShift wrote: > Siju George wrote: >> http://www.internetnews.com/security/article.php/3667201 >> Just for some entertainment, no troll :-) > > IMHO it's not a fair comparison, most linux distributions ship with alot more > software than microsoft windows does, and most bugre

Re: VPN

2007-03-26 Thread Lars D . Noodén
Is the VPN using IPsec or SSL? -Lars Lars NoodC)n ([EMAIL PROTECTED]) Ensure access to your data now and in the future http://opendocumentfellowship.org/about_us/contribute

Re: sshd.config and AllowUsers

2007-03-26 Thread Lars D . Noodén
Others have mentioned the correct syntax already. One suggestion which helps administration is to assign or revoke access (or other privileges) based on groups rather than individual users. In otherwords, make the users members of a group and grant that group access. It helps scalability, mainte

Re: VPN

2007-03-26 Thread Lars D . Noodén
It may not be the wisest thing to be trying PPTP. In addition to the technical problems you are encountering, there seem to be some grave issues with the protocol itself, http://www.schneier.com/pptp-faq.html which are apparently not resolved entirely even in later versions. IPsec and SS

Re: cron doesn't run commands in /etc/crontab?

2007-03-28 Thread Lars D . Noodén
Feel free to laugh if this is a stupid question, but have you made sure to leave an extra empty line at the end of the crontab? Are you in /var/cron/cron.allow ? Also, I usually pack everything into a script and then have cron call the script. It makes verbose comments and multi-line commands le

Audio for OpenAFS presentations

2007-04-17 Thread Lars D . Noodén
While we're on the topic of OpenAFS ... are there any good conference workshops, presentations or interviews online (MP3 / Vorbis / AAC) covering OpenAFS on OpenBSD? Or failing that, on OpenAFS security or OpenAFS in general? -Lars Lars NoodC)n ([EMAIL PROTECTED]) Ensure access to your

Re: Openbsd ipsec with cisco vpn client

2007-04-20 Thread Lars D . Noodén
On Fri, 20 Apr 2007, Claer wrote: > On Thu, Apr 19 2007 at 53:12, carlopmart wrote: >> Somebody have tried to use cisco vpn client to connect to openbsd ipsec >> gateway using user and pass or x509 certificates? Can somebody sends me >> some examples ? > It's explicitely forbidden in the license.

Re: Openbsd ipsec with cisco vpn client

2007-04-20 Thread Lars D . Noodén
IANAL, but sounds quite suspiscious. IPsec is an IETF standard and such a restriction doesn't make sense unless there are shortcomings to be hidden. -Lars On Fri, 20 Apr 2007, Claer wrote: > Exactly. The license obliges Cisco VPN Clients to connect to Cisco > equipments only. > It is written on

Re: OT: GUI programming languages

2007-05-08 Thread Lars D . Noodén
> On Mon, May 07, 2007 at 11:34:55AM -0500, Jacob Yocom-Piatt wrote: ... >> the applications in question are "click here, prints something in a text >> box, etc" ones that are not very complex. a language that allows me to >> generate GUIs quickly and securely would be nice. Python and ruby are ge

Re: Chances of this hardware running OpenBSD?

2007-05-08 Thread Lars D . Noodén
It's been an awfully long time since the last model. What's the expected timeline on the release date for the hardware? It looks interesting. I'd be even more interested in a PPC-based equivalent of the MacMini. -Lars Lars NoodC)n ([EMAIL PROTECTED]) Ensure access to your data now and

Re: vpn in OBSD 4.1

2007-05-11 Thread Lars D . Noodén
On Fri, 11 May 2007, Adam Hawes wrote: > You're well advised to go do some reading on your own. If you had > you would have discovered that OpenVPN ahs a tutorial page for > configuring the server, as does the readily available PPTP server. It's not a funny joke to be recommending PPTP to anybody

Re: vpn in OBSD 4.1

2007-05-11 Thread Lars D . Noodén
On Fri, 11 May 2007, sonjaya wrote: > so i must using ipsec for security reason , IPsec or SSL. You may wish to try IPsec with IPv6. That will future-proof your VPN, at least in theory, and raise the bar slightly for intrusion. > how about the client ( such us Microsoft ) can they use ipsec too

Re: Linux and Novell article in Linux Journal

2007-05-31 Thread Lars D . Noodén
Admirable sentiment. However, problem is with the methods, which are in the US governed by software patents. Don't get that confused with copyright which governs distribution. In the case of the software patents, it doesn't matter how the code is made or even if the code is visisble, only what t

Re: alternatives to sendmail

2007-06-04 Thread Lars D . Noodén
Exim and postfix are probably your two easiest options. http://www.postfix.org/ http://www.exim.org/ -Lars Lars NoodC)n ([EMAIL PROTECTED]) Ensure access to your data now and in the future http://opendocumentfellowship.org/about_us/contribute On Mon, 4 Jun 2007,

Comments inside /etc/pf.conf

2008-08-26 Thread Lars D . Noodén
Since pf.conf must be in a specific order, it might help to have comments marking out this order in the sample confguraton file. Below is a diff from the current file. Regards, -Lars 6a7,9 ## ## MACROS 9a13,15 ## ## TABLES 11a18,20 ## ## OPTIONS 13a23,25 ## NORMALIZATION 15a28,33

Re: ssh-keygen not reading stdin as expected

2008-06-16 Thread Lars D . Noodén
On Sun, 15 Jun 2008, Philip Guenther wrote: > ssh-keygen's -l option is not designed for operation with pipes. In > particular, depending on the key type in the file, it generally needs > to open and read the file multiple times. That is, it first passes > the filename to the "read file as RSA1 p

Re: developer laptop choices

2008-06-16 Thread Lars D . Noodén
On Mon, 16 Jun 2008, Michiel van Baak wrote: > On 09:33, Mon 16 Jun 08, Michael Gale wrote: >> I just picked up a IBM Thinkpad T61p. > I have the same and really love it. How were either of you able to get one without the Windows tax? EU reports last autumn showed that is about half the cost.

Re: developer laptop choices

2008-06-16 Thread Lars D . Noodén
On Mon, 16 Jun 2008, Ted Unangst wrote: > Woah. I can get a two grand notebook for only one grand without windows? Varies depending on overall prices, and only if the savings are not pocketed entirely. http://www.cybersource.com.au/users/conz/why_the_unbundling_windows_sceptics_ are_wrong.html

Re: bundling the speed of two ADSL lines with OpenBSD

2008-07-04 Thread Lars D . Noodén
On Thu, 3 Jul 2008, Vinicius Vianna wrote: > ... take a look at > http://www.openbsd.org/faq/faq6.html#Multipath ... > ... Remember that you will be splitting the outgoing connections > between the two gateways (adsl lines in your case), so a single > connection will have the bandwidth of only one