Solène :flan

Solène :flan_hacker:

The OpenBSD webzine issue 17 is now available in Spanish

https://webzine.puffy.cafe/es_issue-17.html

Translated by @quobit :flan_thumbs:

Like 28 September at 14:42 | Open on bsd.network

Solène :flan_hacker:

and now in Russian!

https://webzine.puffy.cafe/ru_issue-17.html

29 September at 8:02 | Open on bsd.network

Solène :flan_hacker:

The digital versions of the books

- The book of PF by @pitrh
- Absolute OpenBSD by @mwl
- Absolute FreeBSD also by @mwl

are available as a bundle for 1€ at https://www.humblebundle.com/books/dive-into-dev-ops-no-starch-books , click on "5 item bundle".

This bundle is available until June 10th 2024, there are no way to know when they will appear again.

Like 25 May at 10:13 | Open on bsd.network

Peter N. M. Hansteen

@solene @mwl It's worth mentioning that this bundle is available until June 10th 2024 only.

It's possible one or more of those titles will appear in future bundles too, but I for one have no way to tell.

25 May at 10:47 | Open on mastodon.social

Show 1 reply

Daniele Tricoli

@solene thanks, got it! I was planning to install FreeBSD soon: this bundle happened at a perfect time! :flan_hurrah:

@pitrh @mwl

25 May at 11:15 | Open on akko.mornie.org

Solène :flan_hacker:

It's now officially possible to use the #IPFS protocol to pull / push #Nix packages :flan_hurrah:

https://github.com/NixOS/rfcs/pull/133

Like 12 Jul 2023 at 19:17 | Open on bsd.network

Show previous comments

Sojourn :coffefiedyellow:

@solene gross, crypto garbage

12 Jul 2023 at 22:29 | Open on mastodon.coffee

Show 10 replies

Tomodachi94

@solene How can I take advantage of Nix over IPFS?

13 Jul 2023 at 0:05 | Open on floss.social

Show 1 reply

🚲

@solene sadly IPFS couldn’t start consistently after the latest update for me :blobpensive:

13 Jul 2023 at 8:16 | Open on outerheaven.club

Solène :flan_hacker:

Any idea how to make an OpenVPN in Network Manager work with #SELinux ?

I have this in audit.log

type=AVC msg=audit(1680707456.828:170): avc: denied { search } for pid=5839 comm="openvpn" name="home" dev="dm-1" ino=256 scontext=system_u:system_r:openvpn_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0

and this error in journalctl

Apr 05 17:11:20 t470 nm-openvpn[5907]: Cannot pre-load keyfile (/home/solene/.cert/ta.key)

if I disable SELinux it works well...

Like 5 Apr 2023 at 15:12 | Open on bsd.network

Show previous comments

Roberto Alfieri

@solene mmh, try with `sudo setsebool -P openvpn_enable_homedirs 1`

5 Apr 2023 at 15:28 | Open on social.rebtoor.com

Show 1 reply

swagg boi :mastoiddong_gold:

@solene audit2allow returns this policy: https://paste.lgts.xyz/?f398718e8c2ddd19#44Kr3ioS9bA3mJ9bygRTLyPvQ1WfCYRm5PqKtRGGoPLv

5 Apr 2023 at 16:21 | Open on fedi.seriousbusiness.international

zoidb3rg

@solene I had in 2015 a similar issue. Here are my old notes, which solved the problem on Fedora.

-copy ca.crt, client.crt and client.key to ~/.cert
- restorecon -R -v ~/.cert

alternative: setenforce 0

source: https://ask.fedoraproject.org/en/question/31989/there-is-a-conflict-between-selinux-and-openvpn-connection/

5 Apr 2023 at 18:03 | Open on bsd.network

Show 1 reply

Solène :flan_hacker:

I just donated a little something to the OpenBSD foundation fundraising

https://www.openbsdfoundation.org/donations.html

As SSH server OpenSSH is developed as a part of OpenBSD, one may want to support its development through funding :flan_thumbs:

Like 2 Dec 2022 at 8:55 | Open on bsd.network

Solène :flan_hacker:

Yesterday, the OpenBSD webzine celebrated its first year! 🥳

https://webzine.puffy.cafe/

Like 1 Oct 2022 at 16:47 | Open on bsd.network

Andy Alderwick

@solene Aw, congrats! I do enjoy each publication when it comes out 😊

1 Oct 2022 at 16:51 | Open on merveilles.town

Show 1 reply

Solène :flan_hacker:

#NixOS people are serious about testing :flan_ooh:

Their testing automation is impressive! :flan_hearts:

Firefix is tested by opening a page (from valgrind man page), playing some sound, verifying some sound is played, closing a tab, display the developer tools. If anything fail, then the test fails

https://github.com/NixOS/nixpkgs/blob/master/nixos/tests/firefox.nix

Openarena (Quake 3 open source reimplementation) is tested by running a server, connecting two players, verifying the clients connect to the server

https://github.com/NixOS/nixpkgs/blob/master/nixos/tests/openarena.nix

Minecraft client is tested by running the client in a VM and use OCR to detect if it asks for creating an account

https://github.com/NixOS/nixpkgs/blob/master/nixos/tests/minecraft.nix

#NixOS people are serious about testing :flan_ooh:

Their testing automation is impressive! :flan_hearts:

Firefix is tested by opening a page (from valgrind man page), playing some sound, verifying some sound is played, closing a tab, display the developer tools. If anything fail, then the test fails

Expand text...

Like 21 Sep 2022 at 13:28 | Open on bsd.network

Solène :flan_hacker:

So, I switched my main server from a dual core atom + 4 GB of memory and 900 GB of disk, to an @OpenBSDAms VM with 1 Xeon core + 1 GB of memory and 50 GB of disk

I had to change a few things...

I thought munin was a lightweight monitoring solution, but not really.

- getting data requires running many commands for each value
- gathering data requires a lot of process on the server and take a lot of time and ~40 MB of memory per process
- rendering the graphs costs a lot of CPU and memory every 5 minutes
- using fast cgi for the graphs is a huge pain

I switched to collectd for collecting data, it uses nearly no CPU and 1 MB of memory :flan_aww:

sending data to a victoria metrics server using the graphite API, it doesn't use much data to transfer things as they can be transferred in bulk

victoria metrics uses like 20 MB of memory to handle 3 systems sending metrics, and almost no CPU

and data can be visualized with grafana which is the worse part of the stack, it draws 52 MB of memory and uses nearly no CPU.

The most boring thing was to create the dashboards on grafana, and that I can't find how to automatically detect the different instances in the datasets...

In the end, this stack is a lot more lightweight and scalable than munin :flan_disappointed:

So, I switched my main server from a dual core atom + 4 GB of memory and 900 GB of disk, to an @OpenBSDAms VM with 1 Xeon core + 1 GB of memory and 50 GB of disk

I had to change a few things...

I thought munin was a lightweight monitoring solution, but not really.

- getting data requires running many commands for each value
- gathering data requires a lot of process on the server and take a lot of time and ~40 MB of memory per process
- rendering the graphs costs a lot of CPU and memory every 5 minutes

Expand text...