Posts in category www.undeadly.org
Default compiler switched to clang on...
With this commit, the default compiler for (-current base system on the) amd64 and i386 platforms has been changed to clang(1):
CVSROOT: /cvs
Module name: src
Changes by: robert@cvs.openbsd.org 2017/07/26 13:44:42
Modified files:
share/mk : bsd.own.mk
Log message:
switch the default compiler on amd64 and i386 to clang,
[...]
Add vmctl send and vmctl receive
As we see from the commit message, new developer Pratik Vyas (pd@) adds the ability to do paused VM migrations for VMM.
Mike Larkin also writes on Twitter:
#OpenBSD vmctl(8) : vmctl send myvm | ssh mlarkin@somewhere.com vmctl receive Yes, it's that easy.
Ed: this is *paused* migrations, not live migrations.
OpenBSD and the modern laptop
Over at his blog, Undeadly co-editor Peter Hansteen describes the experience of installing OpenBSD-current on a new laptop.
The article, OpenBSD and the modern laptop, goes into some detail on the install procedure, and hits only minor snags even when using modern and recent additions such as UEFI boot.
The conclusion is that OpenBSD i [...]
Request for testing: https://beta.und...
TL;DR - A modernised version of Undeadly is available for testing at <https://beta.undeadly.org/>.
Broken features of the current site have been fixed, removed, or replaced.
The new software supports - and, where appropriate, requires - HTTPS. Testing, contributions, and constructive feedback would be appreciated.
An effort to mo [...]
Ted Unangst on notable recent changes...
The flak reports by Ted Unangst (tedu@) continue with part 624.
Update - part 625
Kernel relinking status from Theo de ...
As you may have heard (and as was mentioned in an earlier article), on recent OpenBSD snapshots we have KARL, which means that the kernel is relinked so each boot comes with a new kernel where all .o files are linked in random order and with random offsets. Theo de Raadt summarized the status in a message to the (Read more...)
On the Insecurity of TIOCSTI
Theo de Raadt (deraadt@) provided some history on the insecurity of TIOCSTI [simulate typed input on terminal], with a proposal to disable it on OpenBSD:
[...] there\'s always been the risk
that a program manages to retain tty association beyond it\'s intended
lifetime, and then it can perform injections with TIOCSTI.
So I\'ve always w [...]
BSDCan 2017 – Trip report doubl...
The OpenBSD presence at the just concluded BSDCan was quite strong, and here is the first trip report, from Phillipp Buehler:
Prologue
Most overheard in Tokyo was "see you in Ottawaaaaah", so with additional "personal item" being Groff I returned home to plan the trip to BSDCan.
Dan was very helpful with getting al [...]
d2k17 hackathon report: Martin Pieuch...
Our next report from the d2k17 hackathon comes from Martin Pieuchot, who writes:
Hackathons are generally good to start or finish something, at Starnberg
I managed to do both.
I came to unlock the forwarding path and thanks to the multiple reviews
from bluhm@, sashan@ and claudio@ it happened! It started as a boring
hackathon b [...]
d2k17 Hackathon Report: Alexander Blu...
Alexander Bluhm (bluhm@) wrote in with a hackathon report:
As usual hackathons are a great time to get things commited. All
the other developers are around, you can discuss ideas and get code
reviewed quickly.
To move towards network input without big kernel lock, I have looked
at the protocol functions and refactored them. Especial [...]
OpenBSD now has Trapsleds to make lif...
You heard it here (or on tech@) first: Trapsleds are in, and it makes OpenBSD even safer. Work done by Todd Mortimer and submitted to tech@ in the Trapsleds thread was later committed by Theo de Raadt.
Todd\'s message to tech says,
I have attached a patch that converts NOP padding from the assembler
into INT3 padding on amd64. The [...]
KARL – kernel address randomize...
In a
message to the tech@ mailing list,
Theo de Raadt (deraadt@) has announced a new randomization feature for
kernel protection:
Over the last three weeks I\'ve been working on a new randomization
feature which will protect the kernel.
[...]
Recently I moved all our kernels to a new mapping model, with patrick
and visa taking ca [...]
OpenBSD Daily, code review, and you
OpenBSD developer Adam Wolk (awolk@) talks about a community effort to read at least one C source file from OpenBSD every day at https://blog.tintagel.pl/2017/06/09/openbsd-daily.html.
I made a new years resolution to read at least one C source file from OpenBSD daily. The goal was to both get better at C and to contribute more to the b [...]
Running OpenBSD on Azure
A new Microsoft Azure blog entry, Running OpenBSD on Azure, describes OpenBSD support:
Today we are happy to share you that Azure supports OpenBSD 6.1 with the collaboration effort from Esdenera and Microsoft. Meanwhile Esdenera brings their firewall product based on OpenBSD on board Azure Marketplace now.
[Esdenera is Reyk (reyk@) Fl& [...]
d2k17 Hackathon Report: Florian Obser...
Florian Obser (florian@) kindly supplied a report on his d2k17 activities:
I wanted to take an overnight train from Amsterdam to Munich
but that service had been cancelled sometime last year. So I had
to fly to not lose too much time.
Read more...
d2k17 Hackathon Report: Antoine Jacou...
Our next d2k17 report comes from Antoine Jacoutot (ajacoutot@), who writes:
My name is Antoine Jacoutot. After five hours on a hellish train ride, I have
come to Starnberg with only one goal: to fix rc.d. But to do that, I can\'t be
the OpenBSD developer I once was. To honor systemd\'s memory, I must be someone else. (Read more...)
d2k17 Hackathon Report: Ken Westerbac...
Our second d2k17 report is from Ken Westerback (krw@), who writes:
I arrived at Starnberg with a clear and overriding focus -- to
finally expunge the obsolete XS_NO_CCB construct from our SCSI
code. In fact I was so focused on this issue I walked right past my
pre-d2k17 hotel and wandered the streets of Starnberg for 30 minutes
(Read [...]
d2k17 Hackathon Report: Stefan Sperli...
The first report from the recently completed d2k17 hackathon comes from Stefan Sperling, who writes:
This hackathon I took time to kick off a project I have been wanting
to try for some time but never got around to: Adding sound support for
my laptop which uses an internal USB audio device wired to xhci(4).
Our xhci(4) driver lacks [...]
Ted Unangst on notable recent changes...
The flak reports by Ted Unangst (tedu@) continue with parts 620, 621, and 622.
As always, there are plenty of interesting developments.
Update: part 623
MWL’s “Relayd and Httpd M...
Relayd and Httpd Mastery, the latest book in the "Mastery" series by Michael W Lucas, is now available.
From the author\'s page for the book:
The httpd web server provides a fast, stable, secure environment for your web applications. The relayd load balancer lets you distribute Internet application load across multiple hosts. B [...]
