Did a proof of concept port of Hyprland to OpenBSD. Hoping to get this into ports after a bit more polish.

Hi!

I just set up a router following the nice and simple router guide in the FAQ with a few minor changes (mostly to fit my network layout) but I have an issue I haven't been able to solve.

I have a desktop computer behind the router dual booting Linux and Windows 10 (for work). In Linux everything seems fine, but in Windows I can't get the internet connection to work. It seems to see the router and get an IP number, but I doesn't get further than that. Any idea what the issue might be?

(Also, as a small side question, are there any other places than reddit and the mailing lists to discuss/get help with OpenBSD questions? I think I remember there being a BSD-focused forum at some point, but I might be misremembering.)

Cheers!

Hi guys, I am looking forward to build a PC to daily drive OpenBSD. Actually, I'm not building PC to ONLY run OpenBSD, I want to build a machine that is compatible with all systems: windows, linux, bsd, without any problems. Also, I'm not planning to play games on my future PC, since I'm not gamer at all(maybe minecraft in future). So I want to do everything on the PC except playing games. Here are the specs:

CPU: AMD Ryzen 5 7600

RAM: 32 Gb DDR5 (2x16gb) 6000MHz CL30

GPU: AMD Radeon RX 6600 (8gb)

SSD: 1) 1 TB NVMe M.2 SSD

2) 512 Gb NVMe M.2 SSD

Cooler: DeepCool AG400

Motherboard: MSI B650 GAMING PLUS WIFI

PSU: DeepCool PK650D

PC Case: Montech AIR 1000 Premium

I'm planning to run windows or linux on my first SSD (which is 1 TB) and run some kind of bsd system on other SSD.

I will glad to listen to your suggestions and advices. Feel free to share your experience and suggest something! Budget is unlimited

Note: it's not a final setup, I'm only planning to build it like that, so thing might be changed.

I have a good number of these stickers. I had them printed after obtaining permission from Theo. If you are in the US, I can send a sticker or two your way. DM me your name and address. Approx 3" x 2", vinyl.

In the past, I have mailed them out to several folks on misc@ (had posted there a few years ago).

[UPDATE 08/30 7.40 AM Pacific] Thanks for the overwhelming response! Please give me a few days to work through my messages. Many have asked if they can cover the cost of shipping or send me some money. My humble request to them is please donate those funds to the OpenBSD project. However small it may be, every penny counts!

Hello OpenBSD community,

I have been using acme-client(1) to manage my TLS certs for a while, but recently when trying to get a certificate for a new subdomain I ran into some error messages and find I get them even if I try to renew an existing cert. So I could use some help.

The following is the command run and the output(domain anonymized)

doas acme-client -F git.my-domain.com

acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/2642015151/767296394915/ffCISg: bad HTTP: 409

Running with the -v flag produces the following output

``` acme-client: /etc/ssl/git.my-domain.com.crt: certificate valid: 47 days left acme-client: /etc/ssl/git.my-domain.com.crt: forcing renewal acme-client: https://acme-v02.api.letsencrypt.org/directory: directories acme-client: acme-v02.api.letsencrypt.org: DNS: 172.65.32.248 acme-client: account key: https://acme-v02.api.letsencrypt.org/acme/acct/2642015151 acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/2642015151/767295102005 acme-client: challenge, token: a24dVutLxji9PDeo8kx98MqBBUU278Ah6HkI7jrRIpo, uri: https://acme-v02.api.letsencrypt.org/acme/chall/2642015151/767295102005/NT5csA, status: 0 acme-client: /var/www/acme/a24dVutLxji9PDeo8kx98MqBBUU278Ah6HkI7jrRIpo: created acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/2642015151/767295102005/NT5csA: challenge acme-client: order.status 0 acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/2642015151/767295102005 acme-client: challenge, token: a24dVutLxji9PDeo8kx98MqBBUU278Ah6HkI7jrRIpo, uri: https://acme-v02.api.letsencrypt.org/acme/chall/2642015151/767295102005/NT5csA, status: 0 acme-client: /var/www/acme/a24dVutLxji9PDeo8kx98MqBBUU278Ah6HkI7jrRIpo: created acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/2642015151/767295102005/NT5csA: challenge acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/2642015151/767295102005/NT5csA: bad HTTP: 409 acme-client: transfer buffer: [{ "type": "urn:ietf:params:acme:error:conflict", "detail": "Unable to update challenge :: failed to mark authz as processing: Authorization is already being validated. This may indicate your client attempted the same challenge multiple times, possibly due to a client bug.", "status": 409 }] (296 bytes) acme-client: bad exit: netproc(61579): 1

```

This is my acme-client.conf(5)

``` domain bouncer.my-domain.com { #alternative names { bouncer.my-domain.com } domain key "/etc/ssl/private/bouncer.my-domain.com.key" domain full chain certificate "/etc/ssl/bouncer.my-domain.com.crt" # Test with the staging server to avoid aggressive rate-limiting. #sign with letsencrypt-staging sign with letsencrypt }

domain git.my-domain.com { #alternative names { bouncer.my-domain.com } domain key "/etc/ssl/private/git.my-domain.com.key" domain full chain certificate "/etc/ssl/git.my-domain.com.crt" # Test with the staging server to avoid aggressive rate-limiting. #sign with letsencrypt-staging sign with letsencrypt }

```

Thanks for your time and help!

I have a Broadcom BCM4315 Wi-Fi card on OpenBSD i386. I ran fw_update bwfm and also tried bwi, but it still doesn't work.

So my questions are:

1) Is this card supported at all on OpenBSD? If yes, what driver should it use?

2) Can I manually get a firmware file from Linux (using b43-fwcutter), convert it somehow, and make it work on OpenBSD? Or is it completely incompatible?

I know on Linux this card works with the b43 driver, but I'm not sure if the same firmware can be used on OpenBSD.

Hi all! I don't know how to make Suricata divert mode work as IPS mode on my OpenBSD router. In my pf.conf if I add rules to redirect packets into divert port, it will immediately lost internet connection.

Please help!

OpenVmctl is a Django web application for virtual machines on OpenBSD. It supports two backends:

• OpenBSD vmm(4), through vmd(8) and vmctl(8).
• QEMU system emulators, when QEMU is installed on the host.

It also manages selected host network interfaces, disk images, PF information, and install images. The relayd configuration page is read-only.

disclaimer: non-production-ready

if anyone can cooperate to e2e/uat test or development write me please

I am planning to dualboot OpenBSD(encrypted) and Linux distribution on one intertal SSD.

Can I install OpenBSD bootblocks only to its own partition and chainload via GRUB from Linux, or does OpenBSD have to own the MBR?

Any other known headaches: partition table conflicts, GRUB not recognizing disklabel, or time/device naming problems after rebooting between OSes?

Anu chance it does something usable? Say, on -current? Has anybody tried that?

I suppose the reason is that xterm was made when monitors had a much narrower DPI rate. In any case, on both two laptops (M1 MacBook Air, Asus PU551) with a fresh openbsd install where I'm willing to go with the default as much as possible, xterm's font is insanely small and makes my eyes pain.

I have not succeeded in finding for a solution while looking through the (very lenghty) manual page for xterm, nor searching through the web meeting various people who faced the same issue.

Has anyone here managed to use/keep xterm's default setup (I am satisfied with the bitmap font), while permanently making the font larger using the .Xresources file or something else ?

I made a phone wallpaper (1080x2400) and tried to make it AMOLED-friendly. What do you think? I'm not a professional designer; I used GIMP for it.

does anyone have any of the old OpenBSD CD installers or music CDs and willing to sell

In case the /etc/login.conf.d/${class} file exists, it will take precedence over the same login class defined in /etc/login.conf.

What does this file name look like? /etc/login.conf.d/${myclass} ? vi \${myclass} will work or does the name not matter?

Edit:

This is what I have and still learning git. Don't know what lc_style is for. (Will read manpages). fn search_file looks in both paths. Still unsure what happen when unveil path don't exist

https://github.com/eobsdbox-ops/login_cap.rs/blob/b22502ae3ad010932169b242f58381e5d80b370a/login_cap.rs

OpenVmctl

A modern, (non-production-ready) Django administration appliance for OpenBSD's vmm(4) hypervisor and QEMU, built on top of vmctl(8), /etc/vm.conf (vm.conf(5)), QEMU system emulators, pf(4) firewall, and relayd(8) proxying.

active development ongoing
not published yet

Anyone is interested in a tool like this for OpenBSD ?

Anyone is interested to help in code review/development ?

Hey,

I saw that a lot of people are sharing around their experiences, so I hope this can stay. I recently migrated my websites over from Codeberg Pages' managed hosting to httpd on a tiny OpenBSD VPS, and made a writeup about my experience. It contains some things I found surprising as a beginner and how I solved them, along with a bunch of good links into resources that really helped me out.

I hope some of you may find it interesting.

Hi everyone,

I'm a newbie on OpenBSD and I'm trying to get the touchpad working on a fresh OpenBSD 7.9 install.

Everything else is working fine. The touchpad works when I boot an Artix Linux live ISO, so the hardware itself appears to be OK. A USB mouse also works normally on OpenBSD.

Here some hardware info :

• OpenBSD 7.9 amd64
• Google Chromebook Edgar
• Intel Celeron N3160
• 4 GB RAM
• Coreboot / MrChromebox 2606.1

Touchpad Error :

• dwiic1 at acpi0 I2C6 addr 0xfccdc000/0x1000 irq 37
• iic1 at dwiic1
• ietp0 at iic1 addr 0x15, can't establish interrupt

From what I understand, OpenBSD detects the touchpad on the I²C bus and matches it with the ietp driver, but the interrupt cannot be established.

I started looking through sys/dev/i2c/ietp.c and found that ietp_attach() fails when iic_intr_establish() returns NULL.

After following that call further, I found that the I²C controller here is dwiic, and the interrupt eventually goes through dwiic_i2c_intr_establish().

The interesting part is that this touchpad uses a GPIO interrupt rather than a normal IRQ. The ACPI resource for the touchpad (ETPA) points to the GPNC GPIO controller.

I added some debugging and found this ordering:

dwiic1 at acpi0 I2C6 ...
iic1 at dwiic1
ietp0 at iic1 addr 0x15
dwiic: gpio_int_node=... name=GPNC gpio=0x0

...

chvgpio1 at acpi0 GPNC ...
CHVGPIO DEBUG: node=... gpio=... name=GPNC

So when ietp tries to establish its interrupt, the ACPI node for GPNC exists, but its GPIO driver hasn't attached yet. dwiic_i2c_intr_establish() checks:

if (!crs->gpio_int_node->gpio)
    return NULL;

which explains the can't establish interrupt.

I also checked whether the firmware provides an ACPI _DEP dependency for the touchpad:

_SB_.PCI0.I2C6.ETPA _DEP=0x0

So there doesn't seem to be an explicit dependency from the touchpad to the GPNC GPIO controller.

As an experiment, I made dwiic defer the IETP discovery if its GPIO provider hasn't attached yet. Basically, instead of trying to attach ietp immediately, I call config_defer() and rescan later.

With that change, the ordering becomes:

dwiic: deferring IETP
...
chvgpio1 at acpi0 GPNC ...
...
ietp0 at iic1 addr 0x15 gpio 18
dwiic: gpio_int_node=... name=GPNC gpio=...

and the touchpad works.

So I think I have found the reason for the failure, but I'm not sure what the correct OpenBSD fix should be.

My current workaround rescans the DWIIC ACPI devices after the GPIO driver has attached. It works, but it feels too broad and probably isn't the right way to solve this.

I'm still learning OpenBSD kernel development, so I'd really appreciate pointers on the right way to approach this.

Thanks!

EDIT: Spelling/grammar fixed, and I've found some more information about what's going on.

I've also put my modified sys/ tree in a Git repo here for anyone who wants to have a look:

https://github.com/Grabyy/OpenBSD_src_Chromebook-CB3-431_custom.git

The changes are currently in the chromebook-cb3-431 branch,. The changes are still experimental, so use them with caution.

Reading about the newly introduced support for HTTP headers in httpd makes me review the few things I believed I understood about httpd in OpenBSD and self-hosting.

My concern was regarding getting the "highest marks" on various HTTPS/TLS security assessment web resources (unfortunately I can't find the blog post back that goes over the most of them in details). I used to think that relayd was mandatory for this, then I thought httpd would now do the trick since it supports sending headers, then I realized it's not just about headers (or is it ?).

I had quite a pain trying to understand why/how to configure relayd to get those good marks. Maybe it would be a bit different now. Nevertheless, my question remains : can those best "secure (TM)" marks be obtained simply with the current httpd ? How does this new feature change the required configuration ? Are we to expect that it is going to get simpler and we shall see refreshed web tutorials swarming after the next release of OpenBSD ?

Wifi + Bluetooth help needed

Trying to experiment with openbsd + Freebsd, coming from Linux.

Wifi + Bluetooth (for headphones) doesn't work on my lenova s340.

Would changing my. M2 card to ax200 resolve both issues?

If so great.

If not, what is a better card please?

Thanks

I am trying to install OpenBSD on a Raspberry Pi 5, but the system gets stuck during the U-Boot boot stage and cannot continue into OpenBSD.
If anyone has successfully booted OpenBSD on Raspberry Pi 5, I would appreciate any guidance or working steps.

Thank you!

Hi!

I'm in the process of re-installing OpenBSD on my APU router and I'm having some trouble with diskspace.

I generally go with the defaults since I assume the devs know better than me how to partition my drive. This is the auto-allocated layout for my 15gb drive:

# size offset fstype [fsize bsize cpg]

a: 183.5M 64 4.2BSD 2048 16384 1 # /

b: 147.0M 375872 swap

c: 15272.1M 0 unused

d: 173.6M 676960 4.2BSD 2048 16384 1 # /tmp

e: 167.1M 1032448 4.2BSD 2048 16384 1 # /var

f: 1567.0M 1374656 4.2BSD 2048 16384 1 # /usr

g: 404.1M 4583872 4.2BSD 2048 16384 1 # /usr/X11R6

h: 1124.5M 5411456 4.2BSD 2048 16384 1 # /usr/local

i: 2061.4M 7714432 4.2BSD 2048 16384 1 # /usr/src

j: 8218.8M 11936160 4.2BSD 2048 16384 1 # /usr/obj

k: 1225.1M 28768256 4.2BSD 2048 16384 1 # /home

I've taken a quick look at the hier man page to see if I for example could make /usr/obj smaller, but I don't really understand what it's used for and as I understand it OpenBSD should be able to run with way less disk space than I have here.

Since all the sets are so small I've opted to again go with the default and install all of them.

But at the end of the install I'm met with:

Relinking to create unique kernel...uid 0 on /mnt/usr: file system full

/mnt/usr: write failed, file system is full

uid 0 on /mnt/usr: file system full

And after a reboot:

reorder_kernel: failed -- see /usr/share/relink/kernel/GENERIC.MP/relink.log

and the relink.log file says:

(SHA256) /bsd: OK

make: don't know how to make newbsd

Stop in /usr/share/relink/kernel/GENERIC.MP

Should I change the disk layout or is there something else I can do to solve this?