OpenBSD 6.3 released • Hacker News Board

Re: OpenBSD 6.3 released

#11

Post by MaupitiBlue » Mon, Apr 02, 2018, 6:59 PM UTC

If only they could find a way to support Wine.

Re: OpenBSD 6.3 released

#12

Post by tedunangst » Mon, Apr 02, 2018, 7:05 PM UTC

rob-olmos wrote: post #9

sshd(8): Add "expiry-time" option for authorized_keys files to allow for expiring keys. -- hooray! Can someone help explain what the "routing domain" is?

man rdomain to start, though unfortunately you kind of need to already understand rdomains to fully understand the docs. Basically it's a network partitioning/virtualization tool. Two computers can have two routing tables. rdomains lets one computer have two routing tables. Each process is in one rdomain or another which determines where its traffic goes and how it sees the network.

Re: OpenBSD 6.3 released

#13

Post by equalunique » Mon, Apr 02, 2018, 7:08 PM UTC

From the release notes:

> o Support the sun4v hypervisor interrupt cookie API, adding support for SPARC T7-1/2/4 machines.

Who is running OpenBSD on a big expensive SPARC T7 and why? I'm genuinely curious as to what possible use cases there are which make this a desirable combination.

Re: OpenBSD 6.3 released

#14

Post by brynet » Mon, Apr 02, 2018, 7:25 PM UTC

equalunique wrote: post #13

From the release notes: > o Support the sun4v hypervisor interrupt cookie API, adding support for SPARC T7-1/2/4 machines. Who is running OpenBSD on a big expensive SPARC T7 and why? I'm genuinely curious as to what possible use cases there are which make this a desirable combination.

It was probably for testing, but that platform supports partitioning up the hardware through LDOMs, which OpenBSD supports as both a host and guest.

https://www.tedunangst.com/flak/post/OpenBSD-on-a-Sun-T5120 (Not expired, Ted runs his own CA)

http://man.openbsd.org/man8/sparc64/ldomctl.8

Re: OpenBSD 6.3 released

#15

Post by INTPenis » Mon, Apr 02, 2018, 7:26 PM UTC

I actually searched the release notes for ipv4 due to that awful april fools gag. That wasn't funny. ;)

Re: OpenBSD 6.3 released

#16

Post by josteink » Mon, Apr 02, 2018, 7:31 PM UTC

INTPenis wrote: post #15

I actually searched the release notes for ipv4 due to that awful april fools gag. That wasn't funny. ;)

That was NetBSD :)

Re: OpenBSD 6.3 released

#17

Post by zdw » Mon, Apr 02, 2018, 7:34 PM UTC

equalunique wrote: post #13

From the release notes: > o Support the sun4v hypervisor interrupt cookie API, adding support for SPARC T7-1/2/4 machines. Who is running OpenBSD on a big expensive SPARC T7 and why? I'm genuinely curious as to what possible use cases there are which make this a desirable combination.

In general, OpenBSD support for Sparc helps with testing - the Sparc is architecturally quite a bit different from other CPUs:

https://www.openbsd.org/sparc64.html

"The other architectures that OpenBSD supports have benefited because some kinds of bugs are exposed more often by the 64-bit big endian nature of UltraSPARC."

Re: OpenBSD 6.3 released

#18

Post by krylon » Mon, Apr 02, 2018, 7:37 PM UTC

INTPenis wrote: post #15

I actually searched the release notes for ipv4 due to that awful april fools gag. That wasn't funny. ;)

I don't get it, Sorry. Can you elaborate? Thanks!

EDIT: Nevermind: https://marc.info/?l=openbsd-cvs&m=152256582629837&w=2

Re: OpenBSD 6.3 released

#19

Post by rob-olmos » Mon, Apr 02, 2018, 7:38 PM UTC

jlgaddis wrote: post #10

rob-olmos wrote: post #9

sshd(8): Add "expiry-time" option for authorized_keys files to allow for expiring keys. -- hooray! Can someone help explain what the "routing domain" is?

You can have multiple routing tables (similar to VRFs on networking gear) which are classified into routing domains and assign different rdomains to different applications. See rdomain(4): https://man.openbsd.org/rdomain.4

Thanks! And for the VRF tip.

Re: OpenBSD 6.3 released

#20

Post by rob-olmos » Mon, Apr 02, 2018, 7:39 PM UTC

tedunangst wrote: post #12

rob-olmos wrote: post #9

sshd(8): Add "expiry-time" option for authorized_keys files to allow for expiring keys. -- hooray! Can someone help explain what the "routing domain" is?

man rdomain to start, though unfortunately you kind of need to already understand rdomains to fully understand the docs. Basically it's a network partitioning/virtualization tool. Two computers can have two routing tables. rdomains lets one computer have two routing tables. Each process is in one rdomain or another which determines where its traffic goes and how it sees the network.

Thanks!