Live data from Hacker News

OpenBSD 6.5

openbsd.org

191–200 of 208 posts

Re: OpenBSD 6.5

#191
post #171
post #159

Earlier quoted context omitted.

I, like you, am quite curious about it. I've given OpenBSD a few tries and it runs quite well in a VM, but I've never managed to get it running properly with wifi. I guess it's time to give it a new go, considering there's a bunch of wifi-improvements listed.

Make sure you have a supported chipset, e.g. an intel one. Some cards need extra firmware, which you'll get in the first boot, so until that a network cable is needed. One of the best things about OpenBSD is how connecting to the WiFi is done with ifconfig and how trivial it is compared to wpa_supplicant or NetworkManager.

Oh yeah. The docs make the process look very easy and simple. I simply don't have a well-supported card in any of my laptops. I guess I'll have to order a new one. :D

Re: OpenBSD 6.5

#193

As a long time Linux user, I keep thinking about trying a BSD variant, but I get hung up on two things. 1) Which do I pick? NetBSD? OpenBSD? 2) Hardware? I'm thinking about an old ThinkPad for programming, and it looks like OpenBSD at least should run fine on that. What's hardware support like overall?

You won't know until you try them out. My best advice is to download them all and fire up some virtual machines and get installing. Build each of the systems to meet your needs and see how you feel about the admin process. For my more basic needs which is development I chose OpenBSD based on their simple, pragmatic design coupled with tight security practices in coding. Their documentation is excellent and their man…

TrueOS Desktop has become Project Trident now.

* https://project-trident.org/

Re: OpenBSD 6.5

#194
post #43

The pvclock driver seems neat. https://www.mail-archive.com/tech@openbsd.org/msg49128.html Does anyone know if that driver eliminates the need for doing NTP sync in the guest VM?

On Linux, for information, the systemd people aim for guest services that synchronize to the host clock to prevent the use of (S)NTP clients.

* https://unix.stackexchange.com/a/467632/5132

Re: OpenBSD 6.5

#195

Earlier quoted context omitted.

What coherence is lacking? OpenBSD supports msync(2), which is the only POSIX mechanism I know of for ensuring coherency between read(2) and shared file mappings. Otherwise relying on unspecified behavior sounds dangerous.

Oh, come on. Every other system in common use is fully coherent. POSIX allowing OpenBSD's behavior doesn't make that behavior a good idea or a quality implementation.

OpenBSD's choice is arguably reasonable, given their prioritization of security, since it reduces opportunities for user programs to corrupt kernel memory.

What is the problem with OpenBSD's plan for coherency? Why is the burden of explicitly calling msync(2) too much?

Re: OpenBSD 6.5

#196
post #88
post #66

Earlier quoted context omitted.

I like simplicity. I use i3, Firefox with enough privacy extensions, Emacs and terminal. And I love to be able to have a great keyboard, where sadly the ThinkPads are the only choice nowadays. Using Mac OS X or Windows will give me a headache. I just don't like their user interface. And I've used both of them a lot; I had my G4 iMac with 10.0.0 back in the days, and kind of liked 10.3.0 until Linux won me over again.

(P.S. why every OS thread in HN always turns into discussion about Apple?)

I'm just amazed that you are calling an interface you need to set up yourself / configure / tweak a bunch of things to get working is "simple" in your eyes compared to Mac OS X, which is simple to lots of people (which would explain why they sell so many MacBooks, in my eyes?)

Re: OpenBSD 6.5

#197

Earlier quoted context omitted.

Oh, come on. Every other system in common use is fully coherent. POSIX allowing OpenBSD's behavior doesn't make that behavior a good idea or a quality implementation.

OpenBSD's choice is arguably reasonable, given their prioritization of security, since it reduces opportunities for user programs to corrupt kernel memory. What is the problem with OpenBSD's plan for coherency? Why is the burden of explicitly calling msync(2) too much?

> reduces opportunities for user programs to corrupt kernel memory

I don't see how it could. Kernel data structures don't go on pagecache pages.

> OpenBSD's choice is arguably reasonable

At a human level, the OpenBSD people have spent way too much time coming up with rationalizations for their obsolete VM design to back down now. Whether OpenBSD's VM subsystem is good or not, their pride will force them to keep claiming that it's good, practically forever.

Re: OpenBSD 6.5

#198
post #88

Earlier quoted context omitted.

(P.S. why every OS thread in HN always turns into discussion about Apple?)

I'm just amazed that you are calling an interface you need to set up yourself / configure / tweak a bunch of things to get working is "simple" in your eyes compared to Mac OS X, which is simple to lots of people (which would explain why they sell so many MacBooks, in my eyes?)

I'm just a different crowd! I live in UNIX and for me editing a few text files is much simpler than having a bloated OS.

And why I said the thing about Apple originally is that it seems to be almost a meme that every single thread about Linux or *BSD gets a discussion about Apple products. It's so weird :)

Re: OpenBSD 6.5

#199

Earlier quoted context omitted.

The assumption here is that the machine you're using to do the log analysis is also a Linux machine that uses systemd (and thus has a journalctl binary). This is not necessarily true. A lot of the annoyance that some people have with the systemd crowd is that these kind of assumptions are made all over the place. The actual software is not bad (I really do prefer dealing with systemd units than writing shell scripts…

I'm not sure I see the problem. At scale, you're logging into an aggregator anyway. If part of your job is log recovery/analysis then you need to get the right tools working (docker works almost everywhere now, so that should solve it). In a small environment, I'm you can find a way to run a VM somewhere temporarily.

I was doing security on a VM image. I wasn't doing anything at scale, and wasn't doing the initial deployment. Log recovery/analysis wasn't the job, it was a necessary component thereof. Docker makes no sense when I'm doing OS-level hardening on a VM.

Re: OpenBSD 6.5

#200

Earlier quoted context omitted.

OpenBSD's choice is arguably reasonable, given their prioritization of security, since it reduces opportunities for user programs to corrupt kernel memory. What is the problem with OpenBSD's plan for coherency? Why is the burden of explicitly calling msync(2) too much?

> reduces opportunities for user programs to corrupt kernel memory I don't see how it could. Kernel data structures don't go on pagecache pages. > OpenBSD's choice is arguably reasonable At a human level, the OpenBSD people have spent way too much time coming up with rationalizations for their obsolete VM design to back down now. Whether OpenBSD's VM subsystem is good or not, their pride will force them to keep claim…

> I don't see how it could. Kernel data structures don't go on pagecache pages.

Kernel data structures could end up on a pagecache page: all it takes is a reference counting bug and the page could be reallocated in the kernel heap, which is directly mapped by user space. Keeping user-mapped pages and pagecache pages distinct makes this less likely.

I am otherwise not convinced that there is an actual problem with OpenBSD's coherency plan.

Post reply on HN