OpenBSD

Last thread reached reply limit: >>32855 >I'm thinking of converting them to an "OpenBSD for normal people" tutorial site >>55769 I made a WIP: https://draft.websteading.net/ User: lainchan Pass: Present day. Present time! I wanted to draft the vps, setup, and firewall pages before sharing this, but I had to prioritize real life, so I figured I'd get some feedback for when I can work on this again. >VPS The only VPS provider I found that supports OpenBSD 7.0 first-party was Vultr. Any other recommendations? I don't want this website to be tightly coupled to a single provider.

>>56883 >The only VPS provider I found that supports OpenBSD 7.0 first-party was Vultr. There is openbsd.amsterdam, they host openbsd vps on openbsd. Some people managed to host openbsd on digitalocean, https://www.going-flying.com/blog/openbsd-on-digitalocean.html >>56900 Steal an openbsd machine from another person and host your stuff for free!

>>56900 you keep spamming this. People like using different things, do you really need to keep posting the same dumb wage slave meme day in and day out ? >>56883 >dont want tight coupling with single provider it looks like just an openbsd tutorial, so outside of a tiny bit of vps provider specific stuff it will be pretty widely useable and I wouldnt worry about it. Just make sure you use OS level things prefferentially to vps provider control stuff, but it looks like you're already doing that. Some of us own our own servers, too.

>>56911 fuarrrk1ng wordswap, shi// does not mean wageslave

>>56883 >>56907 >>56911 In my experience, VPS providers allow you to install with your own iso. I use https://incognet.io right now, it doesn't support openbsd first-party (but it supports netbsd and hardenedbsd for some readon), but after I installed it, just werks.

>>56883 >Any other recommendations? I have a VirMach macine that allows 6.4. I was thinking that I could just get into that, run sysupgrade, and have that work for me. Also, fuarrrk vultr for [REDACTED REASONS]

>>58209 > Also, fuarrk vultr for [REDACTED REASONS] Hmm?

>>56883 >The only VPS provider I found that supports OpenBSD 7.0 openbsd.amsterdam

>>58618 follow up to this: There is a neat talk commercial for this service from EuroBSDCon: https://www.youtube.com/watch?v=9TuWCR9X-wY

>>56883 Hey when are you going to update your draft? Seems really well made. It has a lot of potential!

https://webzine.puffy.cafe/issue-9.html OpenBSD 7.1 released >Support for Apple Silicon Macs has improved and is ready for general use. >Switched to using long filenames by default with mount_msdos(8). >Updated drm(4) to Linux 5.15.26 >inteldrm(4): support for Elkhart Lake, Jasper Lake, Rocket Lake >amdgpu(4): support for Van Gogh APU, Rembrandt "Yellow Carp" Ryzen 6000 APU, Navi 22 "Navy Flounder", Navi 23 "Dimgrey Cavefish", Navi 24 "Beige Goby" >Implemented poll(2), select(2), ppoll(2) and pselect(2) on top of kqueue. >Added a gzip-static option to httpd.conf(5), allowing delivery of precompressed files with content-encoding gzip. >Enabled support for displaying an estimated battery recharge time in apm(8) and apmd(8). >Added rcctl(8) "ls rogue" to show daemons which are running but not set as "enabled" in rc.conf.local(8). https://www.openbsd.org/71.html https://marc.info/?l=openbsd-announce&m=165054715122282&w=2 How to upgrade? https://www.openbsd.org/faq/upgrade71.html tl;dr use sysupgrade(8) Article: Let's install OpenBSD/riscv64 on QEMU https://briancallahan.net/blog/20220418.html

>>59127 FINALLY gzip compression

>>59127 Well, time to update the ol' server. Hope this goes well.

>>59130 My update went great.sysupgrade, sysmerge, pkg-add -u and I'm good. I've had this install since 6.8 and it's gone well each time!

>>59123 Hi, I had to drop this after February to make room for work-life commitments. I was able to knock out a GoAccess tutorial today, and after I found about the new release, I felt inspired to write the Upgrading OpenBSD page and a new section in httpd advertising the new gzip-static feature.

>>56883 >>59141 New additions to the tutorial site since February: - GoAccess access log reader tutorial (plus example of mailing weekly HTML reports) - httpd password protecting, (new 7.1 feature) gzipping - Using CGI, FastCGI with httpd - Upgrading, OpenBSD releases & patches - Packet Filter introduction

I wrote a paste about *BSD and other operating systems: https://pst.moe/paste/butcjl

>>59174 Looking at the CGI examples, they appear to be vulnerable to HTML injection.

>>59185 Good catch, thanks. I'm tempted to put in a tag that it's insecure and input sanitation isn't part of the tutorial, though I know too well that copypastelets are going to take it verbatim anyways, so I should instill good habits.

>>59184 Nice! Under other operating systems you could add: >Collapse OS - collapseos.org >ToaruOS - toaruos.org

>>59410 >ToaruOS Didn't notice it's already there, sorry

Found "A reckless guide to OpenBSD": https://www.exoticsilicon.com/jay/reckless_guide_to_openbsd It covers a lot of interesting stuff that's not normally covered by guides.

>>59184 >9front http://9front.org (it is like kicking dead whales down the beach a CoC, too...?) Have you tried refreshing the page?

Calling all OpenBSD heads. Is there anywhere I can get a full list of all loaded firmware? I'm not talking about the firmware managed by fw_update, I'm talking about the ones distributed with the base system, and managed automatically.

>>59891 Probably not a full list, but check /etc/firmware.

>>59739 I like the anti-nazi flag right next to the ukraine flag.

That folder only contains firmware installed by fw_update, manually or automatically. It doesn't have anything to do with the firmwares included in the base install.

>>59927 Then examine the installer. Get a copy of your architecture's install71.iso, vnconfig that, mount that, gunzip its /bsd, rdsetroot -x that, vnconfig that, and mount that. The first mountpoint should contain the filesets, which you could in turn gunzip and examine. The second mountpoint should contain the installers, which you could just examine as is. When you're done, umount and vnconfig -u everything in between. Please post your findings.

>>59927 I forgot to mention that the installer has a nonempty /etc/firmware, which is why I initially suggested /etc/firmware. Check the installer's /etc/firmware too.

>>59921 Knowing them, it's probably a tongue-in-cheek "i support the current thing" joke. Probably.

>>59959 >Knowing them, it's probably a tongue-in-cheek "i support the current thing" joke. Probably. It does link to some weird WW2 book I don't understand the implications of.

>>59952 Thank you, that sounds like it could actually work. A bit of work though, but I'm going to save this instruction and do it when I have time for it. If someone else is quicker to do it than me then dont hesitate to post your findings here. >>59954 Oh I didn't know that, that is very good info too.