Re: Users of Opera -- Stability?

2008-12-18 Thread Marc Espie
On Thu, Dec 18, 2008 at 08:41:05AM +0530, Amarendra Godbole wrote: > On Wed, Dec 17, 2008 at 7:25 AM, Aaron W. Hsu wrote: > > Hey All, > > > > I wanted to check with any users here that are using the opera web > > browser. Can you please mention what Window Manager you use? I > > am trying to un

Re: package integrity, security and checks. .... where are they ?

2008-12-18 Thread Marc Espie
On Wed, Dec 17, 2008 at 10:46:10AM -0600, Matthew Weigel wrote: > Like Marc said, signing packages when the process doesn't protect the > integrity of the signatures, the source used to compile the binaries > that are signed, and the binaries themselves, you are providing a

Re: gd without xbase?

2008-12-19 Thread Marc Espie
On Fri, Dec 19, 2008 at 12:40:38PM -0600, Aaron Martinez wrote: > I am running 4.4 stable on i386 for the sole purpose of running nagios. > So that I could get visualizations on the statusmap, nagios docs say that > gd is required. > > I have performed just a minimal install, bsd, base44, etc44

Re: pppoe not reconnecting

2008-12-20 Thread Marc Balmer
all these use fix IP addresses. > > -- > Christian "naddy" Weisgerber na...@mips.inka.de > -- Marc Balmer, Micro Systems, Wiesendamm 2a, Postfach, CH-4019 Basel, Switzerland http://www.msys.ch/ http://www.vnode.ch/ "In God we trust, in C we code."

Re: 4.4 apachectl configtest segfaul

2008-12-22 Thread Marc Balmer
e said. Even deleted > the php5 packages and reainstalled them. > > -- > Gabri Mate > gabrim...@ippimail.com > -- Marc Balmer, Micro Systems, Wiesendamm 2a, Postfach, CH-4019 Basel, Switzerland http://www.msys.ch/ http://www.vnode.ch/ "In God we trust, in C we code."

Re: Trouble ticket system suggestions

2008-12-23 Thread Marc Balmer
ndup, and maybe OTRS. for otrs I have a port. we use it since years, it is nice. > > > Kind regards, > --Toni++ > -- Marc Balmer, Micro Systems, Wiesendamm 2a, Postfach, CH-4019 Basel, Switzerland http://www.msys.ch/ http://www.vnode.ch/ "In God we trust, in C we code."

Re: Trouble ticket system suggestions

2008-12-23 Thread Marc Balmer
* Jason Dixon wrote: > On Tue, Dec 23, 2008 at 08:23:16PM +0100, Marc Balmer wrote: > > * Toni Mueller wrote: > > > Hi, > > > > > > On Tue, 23.12.2008 at 19:44:57 +0200, open...@bgone.net > > > wrote: > > > > I would like to get your su

Re: emul.linux not playing well with bsd.mp

2009-01-17 Thread Marc Espie
On Sat, Jan 17, 2009 at 03:55:33AM -0500, Predrag Punosevac wrote: > I was just wonderinig if people have noticed that kernel emulator for > linux binaries > is not playing well with bsd.mp kernel. It was previously observed by > Aron Tsu that > Opera was locking on bsd.mp. In my experience this is

Need help with OpenBGP 4.4

2009-01-20 Thread Marc Runkel
est environments. The error causes sessions to be torn down anytime a 4.4 bgpd is used. (ie 4.4 -> 4.4 and 4.4 -> 4.3). Please let me know if you need any additional information from me. Thanks so much, Marc Runkel Technical Operations Manger Untangle, Inc. The two machines in question ar

Re: Survey on the usage of IPv6

2009-01-30 Thread Marc Balmer
ng how much it is used. >> >> You find the survey online at >> >> http://ilias.msys.ch/goto.php?target=svy_41&client_id=ipv6 >> >> and you start the survey by pressing the button on the top left. >> >> Many thanks, >> Marc & Clau

Re: fetch package dependencies

2009-02-02 Thread Marc Espie
On Mon, Feb 02, 2009 at 02:02:59PM +0100, Hannah Schroeter wrote: > Hi! > > On Sun, Feb 01, 2009 at 02:01:03PM +0100, Dorian B|ttner wrote: > >is there an easy way to fetch a package along with it's recursive > >dependencies? Scenario is: > >eee904ha does not have network access at all right now.

Re: fetch package dependencies

2009-02-02 Thread Marc Espie
On Mon, Feb 02, 2009 at 02:28:57PM -0500, Ted Unangst wrote: > On Mon, Feb 2, 2009 at 2:00 PM, Marc Espie wrote: > > As far as shared libs go, there's nothing wrong with adding the new shared > > libs > > in your soekris /usr/lib: grab base*.tgz xbase*tgz, > > unt

Re: fetch package dependencies

2009-02-03 Thread Marc Espie
On Tue, Feb 03, 2009 at 05:57:39PM +0100, Hannah Schroeter wrote: > Hi! > > On Mon, Feb 02, 2009 at 08:00:21PM +0100, Marc Espie wrote: > >On Mon, Feb 02, 2009 at 02:02:59PM +0100, Hannah Schroeter wrote: > >> On Sun, Feb 01, 2009 at 02:01:03PM +0100, Dorian B|ttner wrote

Re: ssl v2 question

2009-02-04 Thread Marc Espie
On Wed, Feb 04, 2009 at 09:21:49AM -0500, Stuart VanZee wrote: > I am sorry if this seems like a dumb question. > > Recently my boss has been informed that supporting SSL Version 2 > would make us non-compliant with PCI (Payment Card Industry) > certification. My guess would be that (being on top

Re: Thinkpad R61 support

2009-02-08 Thread Marc Espie
On Sun, Feb 08, 2009 at 08:37:43AM -0500, Kenneth R Westerback wrote: > On Sat, Feb 07, 2009 at 07:39:24PM -0200, Christiano Farina Haesbaert wrote: > > Hello there, I'm considering buying a thinkpad R61, if someone has any > > information on the hardware support for it I would appreciate. > > > >

Re: usr.sbin/wake removal

2009-02-10 Thread Marc Balmer
asted from the old wake(8), written by Marc Balmer/Eugene M. Kim. wake was added to the tree for some reason. it was then removed for some reason. now we look at what is the best place for this functionality. I'd honestly prefer if we could close the wake discussion for now. we will eventu

Re: Thinkpad R61 support

2009-02-11 Thread Marc Espie
On Mon, Feb 09, 2009 at 01:08:33PM -0500, STeve Andre' wrote: > On Monday 09 February 2009 01:59:56 Michiel van Baak wrote: > > On 01:04, Mon 09 Feb 09, Marc Espie wrote: > > > On Sun, Feb 08, 2009 at 08:37:43AM -0500, Kenneth R Westerback wrote: > > > > On Sa

Re: Assistance OpenBSD

2009-02-21 Thread Marc Runkel
Based on this email, I'd recommend you spend some of the money you've made in the market and hire some computer expertise in your neighborhood. The fact that you're getting stuck at adding packages and "run executable files" is a big red flag for me. It shouldn't cost more than a few hundred doll

EuroBSDCon 2009, Cambridge, UK

2009-02-22 Thread Marc Balmer
EuroBSDCon 2009 - Cambridge, UK 18-20 September 2009 The Berkeley Software Distribution (BSD) family of computer operating systems is derived from software developed at the University of California at Berkeley. The various family members

Re: user-friendliness and netbsd

2009-02-23 Thread Marc Espie
On Mon, Feb 23, 2009 at 09:56:18PM +0100, Matthias Kilian wrote: > Next time when I'm in a condition similar to that in vienna after > p2k8, I'll test *all* installers of *all* existing operation systems. > I'm sure I'd managed to do a perfect installation of OpenBSD; but > pirofti@ may disagree ;-

Re: TNC Packet Radio for OpenBSD

2009-02-24 Thread Marc Balmer
m with the HW being detected correctly, although having both work with be nice. Any suggestions are welcome. A decent TNC uses a serial port or USB, I am using such a thingie and it works nicely. OpenBSD does not directly support AX.25. Thanks Dan N2VQV Marc HB9SSB

Re: TNC Packet Radio for OpenBSD

2009-02-24 Thread Marc Balmer
Am 24.02.2009 um 19:41 schrieb Dan Colish: On Tue, Feb 24, 2009 at 05:50:55PM +0100, Marc Balmer wrote: Am 24.02.2009 um 16:23 schrieb Dan Colish: I just got a radio for my car and it is capable to handling TNC tranceiver traffic. So, now I'm on a search for a decent packet radio,

Re: TNC Packet Radio for OpenBSD

2009-02-25 Thread Marc Balmer
Am 26.02.2009 um 00:27 schrieb ropers: 2009/2/25 Joseph C. Bender : Marc Balmer wrote: I am using a TNC7multi. http://nt-g.de/de/tnc7multi/tnc7multi.php5 The venerable KPC-3 from Kantronics is always a good choice as well. http://www.kantronics.com/products/kpc3.html Apologies if this

Re: Using ldap everywhere ...

2009-03-04 Thread Marc Balmer
Am 04.03.2009 um 15:15 schrieb Alexander Hall: Since you seem to get few responses to this, I'll give you my $.02 here: After years of using OpenBSD, I've come to the conclusion that OpenBSD is best served with as little fuzz as possible (using what's in the base system if at all possible

Re: Using ldap everywhere ...

2009-03-05 Thread Marc Balmer
Am 05.03.2009 um 19:24 schrieb a. e.: But It seems that serving ns zones over ldap is not possible on OpenBSD... The sdb-ldap backend is not in the OpenBSD ports... You can add dlz-ldap backend to OpenBSD's bind. All you need to do (assuming that you've got OpenBSD's sources in / usr/src

Re: Where is "Secure by default" ?

2009-03-10 Thread Marc Espie
On Tue, Mar 10, 2009 at 10:11:12AM +0100, Artur Grabowski wrote: > Always attribute to malice even that which has been explained by > stupidity. Stupidity is easy to fake. Surprisingly enough, most often it's not. I've met more actual stupidity than faked one.

Re: autoconf 2.62 build problem

2009-03-10 Thread Marc Espie
On Tue, Mar 10, 2009 at 02:24:04PM +, Stuart Henderson wrote: > On 2009-03-10, Sebastian Anding wrote: > > I tried to build subversion and ruby from ports current. While building > > autoconf 2.62 > > autoconf 2.62 needs newer m4 (in base). you have two choices: > > 1. run an unsupported

Re: creating release and kernels

2009-03-13 Thread Marc Espie
So what you actually want is create a ramdisk that recognizes NTFS. you're not interested in a running kernel, but a boot kernel, right ? Look around in distrib, that's where the instructions to build boot kernels happen. You need to tweak/clone the right ramdisk for your purpose. Of course, ther

Re: Makefile .SUFFIXES

2009-03-17 Thread Marc Espie
On Mon, Mar 16, 2009 at 01:10:33PM -0400, Stuart Cassoff wrote: > Must .SUFFIXES declarations come before targets? Yes. That's one of the many subtleties of Makefiles. There are a few things which must occur in a specific order to work. For a line such as: .c.o: to be parsed as a SUFFIX rule, y

Re: openbsd in virtualization

2009-03-18 Thread Marc Balmer
Am 18.03.2009 um 09:13 schrieb sonjaya: Hi... My boss ask how to move current obsd server to virtualiaztion ( such as openvz, vmare , etc ) . anyone in here sucsess moving obsd to Environment virtualization ( openvz , vmware etc ) , may be want share to me ? So obsd become guest OS ? I am

Re: PF and CLamAV "Integration" - how to do it?

2009-03-19 Thread Marc Balmer
Am 19.03.2009 um 15:27 schrieb Protocol Six Consulting: Hi, I was wondering if anyone here knows how to integrate the PF firewall with ClamAV. smtp-vilter, which is in ports, does that, I am planning on putting into production an OpenBSD firewall and would like to do virus scanning at

Re: PF and CLamAV "Integration" - how to do it?

2009-03-21 Thread Marc Balmer
Am 20.03.2009 um 12:15 schrieb jmc: --- Marc Balmer [Thu, Mar 19, 2009 at 07:36:18PM +0100]: --- Am 19.03.2009 um 15:27 schrieb Protocol Six Consulting: Hi, I was wondering if anyone here knows how to integrate the PF firewall with ClamAV. smtp-vilter, which is in ports, does that, i

Re: Parallel build in ports - make -j4

2009-03-24 Thread Marc Espie
On Mon, Mar 23, 2009 at 10:44:43AM +, Stuart Henderson wrote: > On 2009-03-23, Pedro de Oliveira wrote: > > Thanks for that, it worked! > > > > I added the following to my root .profile: > > export PARALLEL_BUILD=Yes > > export MAKE_JOBS=4 > > N.B. this does not work with all ports. > > If y

Re: Parallel build in ports - make -j4

2009-03-24 Thread Marc Espie
On Tue, Mar 24, 2009 at 09:40:33AM -, Pedro de Oliveira wrote: > Yes, both the kernel and userland compile with make -j. Works 99% of the time. There are still races in make build, some times it can fail...

Re: fetching packages from mirrors with pkg_add uses uninitialized value

2009-03-26 Thread Marc Espie
On Thu, Mar 26, 2009 at 10:03:57AM +0100, soko.tica wrote: > Hello list, > > I am encountering a strange behavior during the attempts to fetch > packages by pkg_add from ftp and http main servers and several > mirrors, both for 4.3 and 4.4 (releases). > > FTP connection is refused both from main

Re: Parallel build in ports - make -j4

2009-03-26 Thread Marc Espie
On Thu, Mar 26, 2009 at 03:18:40PM +, Christian Weisgerber wrote: > Marc Espie wrote: > > > > > export PARALLEL_BUILD=Yes > > > > export MAKE_JOBS=4 > > > > > > N.B. this does not work with all ports. > > > > Yep, does not work

Re: HowTo gpio with com-port?

2009-03-29 Thread Marc Balmer
driver during system auto configuration and that provides the modem control lines as GPIO. While I think such a driver would be fairly easy to write, it does not yet exist to my best knowledge. You can, however, open the serial port's tty device and query the modem control signals. - Marc Balmer [...]

Anyone using munin?

2009-04-02 Thread Marc Runkel
Trying to set up munin work with OpenBSD and was wondering if anyone had some plugins pre-written? In particular interface statistics but I'll take just about anything. Thanks, Marc

Re: pkg_add via proxy

2009-04-04 Thread Marc Espie
A few months ago, we added the ability for ftp to handle proxies with password, so this ought to work more or less... Of course, you need to be able to get a package list, so you will have to use http mirrors (since the nlist command won't go through proxies, as far as I know).

Re: [semi-OT] Can anyone recommend an OpenBSD-compatible colour laser printer?

2009-04-05 Thread Marc Balmer
Am 05.04.2009 um 19:44 schrieb ropers: I'm looking for a colour laser printer that's so cheap that I can put it on my birthday wish list and stand a chance of getting it (too broke to buy one myself). - The printer should work with OpenBSD without a hitch, and by that I don't mean "can sometime

Re: Boot reboot issue after upgrade to 6.4 on amd64

2018-11-27 Thread Marc Peters
enabled and disabled it. > > And now? Please check, that you don't use only one big a partition, and if you do, please backup and rearrange your disklabels. This approach is not working with 6.4 anymore and was already discussed several times recently on this very ML. hth, Marc

Re: why thread is not usable in perl5 of OpenBSD6.4?

2018-11-27 Thread Marc Espie
On Sun, Nov 25, 2018 at 09:32:33PM -0800, Philip Guenther wrote: > On Sun, Nov 25, 2018 at 1:57 AM 岡本健二 wrote: > > > I have to use thread on the perl5 of OpenBSD 6.4. > > However, it was disabled on the distribution. > > > > Hmm, is this something that worked in previous releases, or is somethin

Re: Core Dev?

2018-12-04 Thread Marc Espie
On Tue, Dec 04, 2018 at 12:17:20AM +, Ahmad Bilal wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Can anyone tell me, > Is Antoine Jacoutot a core openbsd developer? > > And this is his account (not a impersonator?) > https://github.com/ajacoutot/aws-openbsd > > Should I take

Re: Core Dev?

2018-12-04 Thread Marc Espie
On Tue, Dec 04, 2018 at 09:52:09AM +, Ahmad Bilal wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Thanks guys. I did see a reference of his name here and there. I just wanted > to make sure (and thus asked it here). You're probably a *very* occasional user of OpenBSD. (note t

Re: Core Dev?

2018-12-05 Thread Marc Espie
On Tue, Dec 04, 2018 at 07:29:31PM -0800, Philip Guenther wrote: > On Tue, Dec 4, 2018 at 2:47 AM Marc Espie wrote: > > > (note that Antoine is the 2nd most prolific contributor to OpenBSD in terms > > of # of commits) > > > > Sure, Marc, but that's just bec

Re: Core Dev?

2018-12-05 Thread Marc Espie
On Wed, Dec 05, 2018 at 02:30:50PM +, Ahmad Bilal wrote: > - I honestly didn't intend to call him (Antoine) or anyone else for the > record, bad in anyway. I think my homework was lacking, that is the issue > here. But please don't bash me, for not knowing who Antoine is. You know I > could

Re: install portslist?

2018-12-14 Thread Marc Espie
On Fri, Dec 14, 2018 at 03:40:05PM +0100, Rudolf Sykora wrote: > Hello, > > I now see this: > > odin$ pwd > /usr/ports > > odin$ make search key=texmacs > Please install portslist > pkg_add portslist > *** Error 1 in /usr/ports (Makefile:80 '/usr/local/share/ports-INDEX': @exit > 1) > > odi

Re: pkg_add source code modification

2018-12-16 Thread Marc Espie
On Sat, Dec 15, 2018 at 07:31:48PM +0100, Ingo Schwarze wrote: > That's typical for pkg_add(1). There are few programs in the tree - > even including unmaintained legacy stuff - where it is harder to > find anything. In pkg_add(1), code for each object is typically > scattered across many files,

Re: is there anything like pdfnup or pdfjam?

2019-01-22 Thread Marc Espie
On Mon, Jan 21, 2019 at 04:50:08PM +, rsyk...@disroot.org wrote: > Dear list, > > I want to print a pdf, but with two pages put > on one physical page. > > On linux, pdfnup or pdfjam can do it. On OpenBSD they do as well. > I cannot find these for OpenBSD. Because you don't know how to loo

Re: sound volume reduction - chromium

2019-03-08 Thread Marc Espie
On Fri, Mar 08, 2019 at 09:09:59AM -0600, joshua stein wrote: > On Fri, 08 Mar 2019 at 10:46:24 +0200, Mihai Popescu wrote: > > Hello, > > > > Does anyone observe some sound volume reduction when chromium is > > displaying some specific tabs? > > > > I am using mpv in xterm with some internet rad

Re: XSS vuln in cvsweb

2019-03-15 Thread Marc Espie
and the > > second one was on software I got from OpenBSD ports. Not sure if I should > > be writing this to the ports mailing list though. > > > > I have written Marc Espie with a patch that I produced for cvsweb, but > > haven't heard from him in 11 hours so

Re: httpd: need root privileges

2019-03-20 Thread Marc Espie
On Wed, Mar 20, 2019 at 08:38:18PM +1300, worik wrote: > Yes. > > But is the error message: > > httpd: need root privileges > > Accurate? This is the paradox of modern secure code. You need to start stuff as root because you want to do stuff in startup code that you can only do as root, namel

Re: Determining if a package is installed (regardless of version)

2019-04-06 Thread Marc Espie
On Wed, Mar 27, 2019 at 09:05:37AM -0700, Thomas Frohwein wrote: > On Wed, Mar 27, 2019 at 07:27:15AM +, Adam Steen wrote: > [...] > > I should have been more specific, my use case completes the check in two > > steps > > > > 1. find out whats installed, builds a list of packages > > 2. insta

Re: how run pkg_check with a trusted kernel (a bit of forensics) and how to check kernel integrity.

2019-04-06 Thread Marc Espie
On Sun, Mar 31, 2019 at 03:24:58PM +, Cord wrote: > Hi, > I'd like to run pkg_check but from a live usb stick. This because I want to > run a trusted kernel. > Maybe I just need to mount the root, mount the other slices and chroot > /bin/ksh ? > Also¹, is there a way to download all the insta

Re: Malloc config became global sysctl in 6.5

2019-04-27 Thread Marc Espie
On Sat, Apr 27, 2019 at 12:34:01PM +0700, Igor Podlesny wrote: > On Sat, 27 Apr 2019 at 12:26, Sebastien Marie wrote: > > On Sat, Apr 27, 2019 at 12:17:21PM +0700, Igor Podlesny wrote: > > > Previously users could have different behaviour of malloc simultaneously: > > > one in > > > global FS, ot

Re: headphone volume levels cannot be manipulated by mixerctl

2019-04-27 Thread Marc Espie
If you want to be read, configure your email to send normal messages. All I see is "Signed data", and I'm not necessarily going to open attachments to see what you're saying on a public mailing-list.

Re: Blind OpenBSD users

2019-05-14 Thread Marc Espie
As far as I know, the only software we have for blind people (and not just people with very poor eye sight) is misc/brltty. misc/screen also has support in the form of the shm flavor, which hooks to misc/brltty The main issue for this kind of thing is of course testing. This was done over 10 ye

Re: Missing file and Man page for out-of-date

2019-05-25 Thread Marc Espie
As for the full story, this is a whole sequence of events. Committee decided ports/infrastructure/man didn't belong in default manpath, because it's not part of sacro-sanct base. Fine, let's move the man pages to base. And then, Theo said some of those names are way too generic, we can't have m

Re: Prefered manpage idioms?

2019-05-30 Thread Marc Espie
On Thu, May 30, 2019 at 07:29:55PM +0100, Jason McIntyre wrote: > i think any of man page, manual page, or manual is fine. > > > 2. Standard output > > > > Is it: > > Print to standard output/error > > tee(1) > > Print to the standard output/error > > cat(1), echo(1) > > Print to st

Re: Prefered manpage idioms?

2019-05-30 Thread Marc Espie
On Thu, May 30, 2019 at 01:37:41PM -0600, Theo de Raadt wrote: > Jason McIntyre wrote: > > > i don;t think we can (or should) attempt to police this. > > Ouch, that typo really triggered my ADD, let's hope you don't make > similar errors in our manual pages. Yep, let's stick to seperate or impl

Re: Filesystem corruption on OpenBSD routers after power outage?

2019-06-05 Thread Marc Espie
On Wed, Jun 05, 2019 at 05:12:20AM +, Roderick wrote: > > "-o union" was last in 3.7, disappeared in 3.8. Was there a reason? > > https://man.openbsd.org/OpenBSD-3.7/mount Yes, the developers felt we couldn't make it work without bugs in a sane way. Locks over locks is insanely hard to get

[mark.kette...@xs4all.nl: Check your machdep.allowaperture setting]

2019-06-11 Thread Marc Espie
I think this is generic enough to belong on misc@ - Forwarded message from Mark Kettenis - Date: Tue, 11 Jun 2019 19:54:04 +0200 (CEST) From: Mark Kettenis To: t...@openbsd.org Subject: Check your machdep.allowaperture setting These days most OpenBSD users should have the machdep.allowa

Re: [mark.kette...@xs4all.nl: Check your machdep.allowaperture setting]

2019-06-13 Thread Marc Espie
On Wed, Jun 12, 2019 at 06:20:55PM +0200, Stephane HUC "PengouinBSD" wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > Hi, > > In the french documentation on obsd4a's wiki, I wrote: > > "When to add this option? > When you see into xorg.log: > $ head /var/log/Xorg.0.log > [33.83

Re: The su manual doesn't mention use root account by default

2019-06-13 Thread Marc Espie
On Thu, Jun 13, 2019 at 08:55:09AM +0100, Andrew Luke Nesbit wrote: > On 13/06/2019 07:17, Theo de Raadt wrote: > > Mihai Popescu wrote: > > > >>> ... if no account is provided, root is the default > >> > >> I always considered that su is coming from _s_uper _u_ser. But maybe I > >> am wrong, I a

Re: 6.5 pkg_add "Fatal error: Can't write session into tmp directory"

2019-07-03 Thread Marc Espie
On Tue, Jul 02, 2019 at 08:58:12AM -, Stuart Henderson wrote: > On 2019-06-30, Jonathan Thornburg wrote: > > I have 6.5/i386 installed on a PC Engines alix board (hostname 'sodium'), > > acting as a home firewall and router. I'd like to install some packages > > the firewall it to make system

Re: When will OpenBSD become a friendly place for bug reporters?

2019-07-09 Thread Marc Espie
iling-list. I don't want to have anything to do with a condescending idiot who sends disparaging comments my way 100% out of the blue. Fuck you very much, -- Marc

Re: TCP wrapper alternative?

2019-07-09 Thread Marc Espie
On Tue, Jul 09, 2019 at 11:03:36AM -0700, Thomas Smith wrote: > Hi, > > I'm considering an option to evaluate connecting IPs before they're evaluated > by `pf` in order to make some decisions about the "reputation" of a > connecting IP. Then if that reputation is low enough, some action could >

Re: 4GB RAM too little for Firefox?

2019-07-09 Thread Marc Espie
On Tue, Jul 09, 2019 at 11:16:24PM +0200, ropers wrote: > On 09/07/2019, Stuart Henderson wrote: > > The lsof port didn't display filenames. That information is not > > available on OpenBSD (and is not trustworthy on other OS either; > > files could have been moved/replaced since opening). > > In

Re: 4GB RAM too little for Firefox?

2019-07-10 Thread Marc Espie
On Wed, Jul 10, 2019 at 09:52:02AM +0200, ropers wrote: > I wouldn't say the file name information is "meaningless". On Linux, > if a program opened and then unlinked a file, but you still remember > the file name, > then you can still find the file by grepping for its former name, > because the sy

Re: What is doas doing??

2016-09-28 Thread Marc Espie
On Wed, Sep 28, 2016 at 02:45:26PM +0200, Murk Fletcher wrote: > Hi, > > Anybody ever been in a similar situation? > > % myscript_start > /etc/rc.d/myscript: need root privileges > % doas myscript_start > doas: myscript_start: command not found > % su > Password: > you are not in group wheel > So

Re: Forget mod_perl. I'm going to try to move to FastCGI and base http

2016-10-04 Thread Marc Espie
On Thu, Sep 29, 2016 at 12:45:10PM -0700, Andrew Fresh wrote: > I gave a talk about moving from mod_perl to Plack and FastCGI at the local > perlmonger group. It was fairly straight forward and there are a fair number > of options on the CPAN, although I'm unsure which have ports. > > http://cvs.a

some more info on pkg_add/fw_update changes

2016-10-04 Thread Marc Espie
About a week ago, we switched to the new signing scheme by default. There are good reasons to bury the old signing scheme completely, so this is what's currently happening, there are some rough edges. Technically speaking, the new signatures are "outside", they're in the gzip header, and the only

Re: some more info on pkg_add/fw_update changes

2016-10-05 Thread Marc Espie
On Tue, Oct 04, 2016 at 03:15:18PM +0200, Marc Espie wrote: > - the new scheme is slightly more unflexible with respect to unsigned > data: by default, every .tgz is piped thru signify -Zs, so > pkg_add/pkg_info/fw_update WON'T even see any data if it's not signed. &

Re: quirks "unsigned package," "Can't find CONTENTS"

2016-10-12 Thread Marc Espie
On Fri, Oct 07, 2016 at 08:47:31AM -0400, yary wrote: > On Thu, Oct 6, 2016 at 11:48 PM, Foo74 wrote: > > > > Thanks for posting the response. Do you know what from the error message > > shows that it was a -current build? I think I would have spent days > > figuring that out. :) > > Replying t

Re: 4th nic for pcengines apu2

2016-10-20 Thread Marc Peters
additional ports. Afair, they don't have a raid controller onboard, but we use softraid with RAID1 on them. I don't know if they have an IPMI, but you get they idea :). hth, Marc

Re: 4th nic for pcengines apu2

2016-10-21 Thread Marc Peters
Am 10/20/16 um 18:26 schrieb Stuart Henderson: > > You should find out if they have IPMI. Standard config on many Supermicros > is to have it enabled, sharing the first main network port if you don't have > anything plugged into the dedicated one, with the same password on every > machine. You d

Re: Oddness with pkg_add

2016-11-04 Thread Marc Espie
On Thu, Nov 03, 2016 at 09:26:43PM -0400, trondd wrote: > On Thu, November 3, 2016 9:19 pm, trondd wrote: > > On Thu, November 3, 2016 9:07 pm, Chris Huxtable wrote: > >> Same as before unfortunately. > >> > >> # pkg_add -v nano > >> Error from http://ftp.openbsd.org/pub/OpenBSD/6.0/packages/am

Re: softraid(4) full-disk encryption on SSD

2016-11-16 Thread Marc Peters
Am 11/16/16 um 17:07 schrieb Ax0n: > I'm less concerned about swap, and more concerned about how a fully > encrypted softraid Solid State Disk is going to act. I can't find a lot > about FDE on SSD. > It acts as a normal harddisk would, just faster :). I had one in my worklaptop i used before for

Re: pkg_add: signify broken pipe when running from script

2016-11-19 Thread Marc Espie
Wondering if your script isn't passing some weird signal handling (such as ignoring some signals) through. I've had a few reports related to signify broken pipes, but I haven't been able to reproduce anything, so I'm not quite up to debugging problems I can't see...

Re: pkg_add: signify broken pipe when running from script

2016-11-22 Thread Marc Espie
http://marc.info/?l=openbsd-misc&m=147544336719598&w=2 for details. > > > > I know this is not a final solution but you seem to have a deeper > > understanding of this than I have. > > > > Nice to know it was be helpful for someone else, I was only > followi

Re: IPv6 Setup not working on Hetzner server

2016-12-05 Thread Marc Peters
Am 12/02/16 um 13:39 schrieb Leo Unglaub: > I just found out that since i changed my mygate up to your suggestion > that i now have to ping6 fe80::1%em0 first and then i am able to > connecto to other hosts via IPv6. But not before i pinged the > fe80::1%em0. WTF? i have the same setup at hetzner

Re: Manual update

2016-12-20 Thread Marc Peters
mp;arch=default&manpath=OpenBSD-current As this already works for me on several systems, i assume that something with your process is wrong here. Or you messed up your upgrade (yes, i upgraded some of the machines). Hth, Marc

Re: https for pkg_add?

2017-01-11 Thread Marc Espie
On Mon, Jan 09, 2017 at 03:47:42PM +0100, Kamil Cholewi??ski wrote: > On Mon, 09 Jan 2017, Stuart Henderson wrote: > > Performance won't be ideal though, there's no pipelining or session > > resumption - it needs to do a full TLS negotiation for each package > > fetched (note that pkg_add -u fetch

Re: pkg_add: ftp: connect: Invalid argument

2017-02-06 Thread Marc Espie
On Sat, Feb 04, 2017 at 08:31:45PM -0800, jungle boogie wrote: > On 02/04/2017 05:45 PM, Philip Guenther wrote: > >On Sat, 4 Feb 2017, jungle boogie wrote: > >>What's happening here? > >> > >>$ doas pkg_add -u > >>Error from http://ftp.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/ > >>ftp: conn

HEADS UP: pkg_add supports installpath

2017-02-06 Thread Marc Espie
just committed, will be in the next series of snapshots. so, basic installs create /etc/installurl now, pkg_add uses it "by default" to create an installpath. pkg.conf(5) takes precedence (user defines are stronger than automatic defines): installpath = anything in pkg.conf will replace the inst

Re: pkg_add: ftp: connect: Invalid argument

2017-02-06 Thread Marc Espie
On Mon, Feb 06, 2017 at 09:18:09AM -0800, jungle Boogie wrote: > On 6 February 2017 at 04:41, Marc Espie wrote: > > On Sat, Feb 04, 2017 at 08:31:45PM -0800, jungle boogie wrote: > >> On 02/04/2017 05:45 PM, Philip Guenther wrote: > >> >On Sat, 4 Feb 2017, jung

Re: Is OpenBSD using SHA1 anywhere?

2017-02-23 Thread Marc Espie
On Thu, Feb 23, 2017 at 03:44:13PM +0100, minek van wrote: > fyi, > > https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html > https://shattered.it/ Talking from the ports side, ports and packages moved to SHA256 back in 2007/2008. Ports distinfo made it the only default

Re: Is OpenBSD using SHA1 anywhere?

2017-02-23 Thread Marc Espie
On Thu, Feb 23, 2017 at 04:06:25PM +0100, Marc Espie wrote: > On Thu, Feb 23, 2017 at 03:44:13PM +0100, minek van wrote: > > fyi, > > > > https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html > > https://shattered.it/ > > Talking from t

Re: Please: Is there ANY chance that Linux binaries might run again???

2017-03-07 Thread Marc Peters
t inconvenient to take a second laptop with me. > Have you considered Office 365? I used it to do my works Travel Expense, because they are only providing an Excel File with a ton of Macros. Had to upload it to OneDrive to open it, but it worked quite well. Marc

Re: Please: Is there ANY chance that Linux binaries might run again???

2017-03-09 Thread Marc Espie
To clarify, from what I remember, killing linux compat was not a political decision per-se ("emulation is bad"). Rather, it is that the emulation was 32 bits-only, and more and more out-of-date so completelely useless, and also not really very maintained, so it amounted to more code with possible

Re: pkg_create ignores flags obsd 6.0

2017-03-14 Thread Marc Espie
On Tue, Mar 14, 2017 at 07:48:09PM +0200, Panagiotis Atmatzidis wrote: > Hello, > > I'm trying to use "pkg_create" under OpenBSD to distribute a precompiled > binary along with linked libraries. > > I have a python script which I inherited, that creates a "+CONTENTS" > file containing the list of

HEADS up: how to cope with pre-release testing with pkg_add(1)

2017-03-31 Thread Marc Espie
Just so that the subject makes it clear. This info already made it in various messages ont the mailing list. Right now, if you install OpenBSD, it says 6.1 without beta. So pkg_add will look for the release directory, and not find it yet because it's not out yet. pkg_add -Dsnap will make pkg_ad

Re: HEADS up: how to cope with pre-release testing with pkg_add(1)

2017-03-31 Thread Marc Espie
On Fri, Mar 31, 2017 at 10:28:42PM +0300, Mihai Popescu wrote: > > So pkg_add will look for the release directory, and not find it yet because > > it's not out > yet. > > Is PKG_PATH ignored then? RTFM, I'm just making people aware of recent stuff that's fully documented. > > until the release

Re: How does dpb sign packages in 6.1 ?

2017-04-05 Thread Marc Espie
dpb no longer does. Use pkg_sign(1) directly like sthen says. Before, signing directly during pkg_create(1) made some sense, since the archive was built just once with the signature inside. Now that the signature is outside, there is no gain to having pkg_create(1) sign directly, so that was scra

Output of netstat -m shows lower value with higher kern.maxclusters

2017-04-12 Thread Marc Peters
denied 0 requests for memory delayed 0 calls to protocol drain routines Is this just an output issue, or are the numbers now related to other values? Cheers, Marc dmesg: OpenBSD 6.1 (GENERIC.MP) #20: Sat Apr 1 13:45:56 MDT 2017 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile

Re: pf.conf: best practice for IP address lookup?

2017-04-16 Thread Marc Peters
Am 04/16/17 um 16:49 schrieb Florian Ermisch: > But then I couldn't even say if an address change would trigger > ifstated(8)… In this case it would, because an IPv6 address change at Deutsche Telekom is triggered by a reconnect. I use ifstated to trigger an asterisk and pf reload. > > Regards,

Re: Python and wxallow in 6.1

2017-04-17 Thread Marc Espie
On Mon, Apr 17, 2017 at 08:01:29AM -0400, Steve Shockley wrote: > After upgrading my OpenNMS box to 6.1 (from 6.0) I noticed that the polling > scripts weren't running. I tracked it down to needing wxallow on /usr/local > so python2.7 would run (otherwise "access denied"). I think python2.7 > was

Re: Broken ipsecctl validation in 6.1 ("-n -f " flags) - illegal transform aes-256-gcm

2017-04-18 Thread Marc Peters
s-256-gcm group modp8192 lifetime 14400 hth, Marc > srcid 198.51.100.15 dstid 203.0.113.114 \ > psk “MY_SECRET” \ > tag MY_TAG > > Running "doas ipsecctl -nf /etc/ipsec.conf " (to validate the config) > yields no errors. > > But runnin

Re: Adding default IPv6 route fails on 6.1

2017-04-19 Thread Marc Peters
Am 04/19/17 um 08:47 schrieb Harald Dunkel: > On 04/18/17 17:05, Stuart Henderson wrote: > >> Mine is in the pkg-readme. > > > > A pkg-readme? Is this included in the binary package? Try $ less /usr/local/share/doc/pkg-readmes/dhcpcd-6.11.5 signature.asc Description: OpenPGP digital signat

Re: Performance Clang

2017-04-24 Thread Marc Espie
On Thu, Apr 20, 2017 at 11:14:24PM +0200, Heiko wrote: > Thank you for the info. So you expect a lower time in future. If we eventually remove gcc 4.2.1, yes, the time will go down from clang+gcc to clang without gcc :) Apparently, it seems that lld might be better behaved than binutils ld in *so

<    1   2   3   4   5   6   7   8   9   10   >