From a3628fc49db4d88ff3e4067268650710d1da3f6f Mon Sep 17 00:00:00 2001 From: Silvino Silva Date: Fri, 12 Feb 2021 03:59:34 +0000 Subject: initial openbsd support --- dev/c/debugging.html | 2 +- dev/git/branch.html | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) (limited to 'dev') diff --git a/dev/c/debugging.html b/dev/c/debugging.html index e721d07..2128911 100644 --- a/dev/c/debugging.html +++ b/dev/c/debugging.html @@ -9,7 +9,7 @@

Debugging

Check if the system have restrictions to attach to other processes or other hardening measures, check sysctl settings such as; kernel.yama.ptrace_scope;

kernel.yama.ptrace_scope=0

C Index -

diff --git a/dev/c/debugging.html b/dev/c/debugging.html index 2128911..d146d80 100644 --- a/dev/c/debugging.html +++ b/dev/c/debugging.html @@ -136,9 +136,9 @@ C Index

- This is part of the Tribu System Documentation. - Copyright (C) 2020 - Tribu Team. + This is part of the LeetIO System Documentation. + Copyright (C) 2021 + LeetIO Team. See the file Gnu Free Documentation License for copying conditions.

diff --git a/dev/c/elements.html b/dev/c/elements.html index 78829d2..fb968b7 100644 --- a/dev/c/elements.html +++ b/dev/c/elements.html @@ -54,9 +54,9 @@ C Index

diff --git a/dev/c/hello.html b/dev/c/hello.html index f4b7039..948bbe5 100644 --- a/dev/c/hello.html +++ b/dev/c/hello.html @@ -125,9 +125,9 @@ C Index

diff --git a/dev/c/index.html b/dev/c/index.html index 0935866..1622cc1 100644 --- a/dev/c/index.html +++ b/dev/c/index.html @@ -80,9 +80,9 @@ Development Index

diff --git a/dev/c/lib.html b/dev/c/lib.html index f5f6acc..6cd1fca 100644 --- a/dev/c/lib.html +++ b/dev/c/lib.html @@ -246,9 +246,9 @@ C Index

diff --git a/dev/c/system.html b/dev/c/system.html index de9dab5..eedf242 100644 --- a/dev/c/system.html +++ b/dev/c/system.html @@ -171,9 +171,9 @@ C Index

diff --git a/dev/git/branch.html b/dev/git/branch.html index c92da99..89ac8a9 100644 --- a/dev/git/branch.html +++ b/dev/git/branch.html @@ -306,9 +306,9 @@ Git Index -

diff --git a/dev/git/index.html b/dev/git/index.html index 198db7c..2939401 100644 --- a/dev/git/index.html +++ b/dev/git/index.html @@ -59,9 +59,9 @@ Development Index -

diff --git a/dev/git/install.html b/dev/git/install.html index 923fc4c..3e5dbfb 100644 --- a/dev/git/install.html +++ b/dev/git/install.html @@ -46,9 +46,9 @@ Git Index -

diff --git a/dev/git/work.html b/dev/git/work.html index 993b413..b72cfae 100644 --- a/dev/git/work.html +++ b/dev/git/work.html @@ -162,9 +162,9 @@ Git Index -

diff --git a/dev/index.html b/dev/index.html index 461b99e..bacfe6c 100644 --- a/dev/index.html +++ b/dev/index.html @@ -35,9 +35,9 @@ Documentation Index

diff --git a/dev/js/index.html b/dev/js/index.html index ef89879..8e44637 100644 --- a/dev/js/index.html +++ b/dev/js/index.html @@ -19,9 +19,9 @@ Development Index

diff --git a/dev/perl/index.html b/dev/perl/index.html index dd4c857..94937a9 100644 --- a/dev/perl/index.html +++ b/dev/perl/index.html @@ -21,9 +21,9 @@ Development Index

diff --git a/dev/php/hello.html b/dev/php/hello.html index e7cdd62..320ce68 100644 --- a/dev/php/hello.html +++ b/dev/php/hello.html @@ -74,9 +74,9 @@ PHP Index

diff --git a/dev/php/index.html b/dev/php/index.html index a44b102..e9ad5c6 100644 --- a/dev/php/index.html +++ b/dev/php/index.html @@ -33,9 +33,9 @@ Development Index

diff --git a/dev/python/index.html b/dev/python/index.html index dea4d63..5ccffe3 100644 --- a/dev/python/index.html +++ b/dev/python/index.html @@ -19,9 +19,9 @@ Development Index

diff --git a/dev/shell/dash.html b/dev/shell/dash.html index 4511584..229a1ce 100644 --- a/dev/shell/dash.html +++ b/dev/shell/dash.html @@ -15,9 +15,9 @@

Conditions

Development Index -

diff --git a/dev/shell/index.html b/dev/shell/index.html index 1b742a9..8e2be1b 100644 --- a/dev/shell/index.html +++ b/dev/shell/index.html @@ -24,9 +24,9 @@ Documentation Index

diff --git a/linux/apparmor.html b/linux/apparmor.html index fcb34fe..6cd6d4f 100644 --- a/linux/apparmor.html +++ b/linux/apparmor.html @@ -6,7 +6,7 @@ - Core OS Index + GNU/Linux Index

2.6.1. AppArmor

@@ -244,10 +244,10 @@ chache-loc=/var/cache/apparmor - Core OS Index -

diff --git a/linux/bash.html b/linux/bash.html index f49d27e..1a7edb2 100644 --- a/linux/bash.html +++ b/linux/bash.html @@ -5,7 +5,7 @@ 2.5.2. Bash - Core OS Index + GNU/Linux Index

2.5.2. Bash

@@ -152,11 +152,11 @@ fi - Core OS Index + GNU/Linux Index

diff --git a/linux/configure.html b/linux/configure.html index a548e5d..2e72c90 100644 --- a/linux/configure.html +++ b/linux/configure.html @@ -6,7 +6,7 @@ - Core OS Index + GNU/Linux Index

1.2. Configure

@@ -273,10 +273,10 @@ # End of file - Core OS Index -

diff --git a/linux/dash.html b/linux/dash.html index a9aebee..8da34a3 100644 --- a/linux/dash.html +++ b/linux/dash.html @@ -6,7 +6,7 @@ - Core OS Index + GNU/Linux Index

2.5.1. Dash

@@ -18,10 +18,10 @@ - Core OS Index -

diff --git a/linux/exim.html b/linux/exim.html index 028bfce..5cfed62 100644 --- a/linux/exim.html +++ b/linux/exim.html @@ -5,7 +5,7 @@ 2.5. Exim - Core OS Index + GNU/Linux Index

2.5. Exim

2.5.1. Exim Configuration

@@ -222,11 +222,11 @@ poll pop.remote.com protocol POP3 user "drbob@remote.com" there with password "secretpass" is "bob@box" here - Core OS Index + GNU/Linux Index

diff --git a/linux/hardening.html b/linux/hardening.html index 041f999..0fd13e3 100644 --- a/linux/hardening.html +++ b/linux/hardening.html @@ -6,7 +6,7 @@ - Core OS Index + GNU/Linux Index

2.6. Hardening

@@ -177,10 +177,10 @@

Add unnecessary tests to profile to have less noise.

- Core OS Index -

diff --git a/linux/index.html b/linux/index.html index 089d143..33578f7 100644 --- a/linux/index.html +++ b/linux/index.html @@ -2,15 +2,15 @@ - Core OS + GNU/Linux Documentation Index -

Core OS

GNU/Linux

Core OS covers installation and configuration of +

GNU/Linux covers installation and configuration of basic functionality of Crux 3.5 Gnu\Linux operating system. This documentation try's to follow Crux HandBook installation method diverges, for example, by only installing and @@ -162,9 +162,9 @@ Documentation Index

diff --git a/linux/install.html b/linux/install.html index 64fbe02..f42f4a2 100644 --- a/linux/install.html +++ b/linux/install.html @@ -6,7 +6,7 @@ - Core OS Index + GNU/Linux Index

1.1. Install Crux 3.5

@@ -397,10 +397,10 @@ $ sudo cp -R conf/skel $CHROOT/etc/ - Core OS Index -

diff --git a/linux/linux.html b/linux/linux.html index 9d568e9..3d992e9 100644 --- a/linux/linux.html +++ b/linux/linux.html @@ -6,7 +6,7 @@ - Core OS Index + GNU/Linux Index

2.1. Kernel Linux

@@ -855,10 +855,10 @@ $ sudo rm /boot/System.map-4.9.86-gnu - Core OS Index -

diff --git a/linux/network.html b/linux/network.html index 0d359f3..ec33b25 100644 --- a/linux/network.html +++ b/linux/network.html @@ -5,7 +5,7 @@ 2.2. Network - Core OS Index + GNU/Linux Index

2.2. Network

@@ -425,11 +425,11 @@ nmcli> save persistent - Core OS Index + GNU/Linux Index

diff --git a/linux/package.html b/linux/package.html index 5235d01..4b68b6a 100644 --- a/linux/package.html +++ b/linux/package.html @@ -6,7 +6,7 @@ - Core OS Index + GNU/Linux Index

2.3. Package Management

@@ -179,10 +179,10 @@ prt-get printf "%p %i %n %v\n" | grep "/usr/ports/contrib yes" - Core OS Index -

diff --git a/linux/ports.html b/linux/ports.html index 78607bd..28047c5 100644 --- a/linux/ports.html +++ b/linux/ports.html @@ -6,7 +6,7 @@ - Core OS Index + GNU/Linux Index

1.4. Ports

@@ -254,11 +254,11 @@ DISTCC_LOG_LEVEL="info" - Core OS Index + GNU/Linux Index

diff --git a/linux/reboot.html b/linux/reboot.html index 1a4783b..f8ab278 100644 --- a/linux/reboot.html +++ b/linux/reboot.html @@ -6,7 +6,7 @@ - Core OS Index + GNU/Linux Index

1.3. Boot

@@ -222,10 +222,10 @@ 36875 blocks - Core OS Index -

diff --git a/linux/samhain.html b/linux/samhain.html index 4c940ef..f679749 100644 --- a/linux/samhain.html +++ b/linux/samhain.html @@ -6,7 +6,7 @@ - Core OS Index + GNU/Linux Index

2.6.4. Samhain

@@ -253,11 +253,11 @@ # samhain -t update -l none --listfile=/root/list_of_files - Core OS Index + GNU/Linux Index

diff --git a/linux/sysctl.html b/linux/sysctl.html index 3b1d492..9940d43 100644 --- a/linux/sysctl.html +++ b/linux/sysctl.html @@ -6,7 +6,7 @@ - Core OS Index + GNU/Linux Index

2.6.2. Sysctl

@@ -166,10 +166,10 @@ # sysctl --system - Core OS Index -

diff --git a/linux/toolchain.html b/linux/toolchain.html index 23f5655..1ee7c89 100644 --- a/linux/toolchain.html +++ b/linux/toolchain.html @@ -6,7 +6,7 @@ - Core OS Index + GNU/Linux Index

2.6.3. Toolchain

@@ -176,10 +176,10 @@ - Core OS Index -

diff --git a/linux/tty-terminal.html b/linux/tty-terminal.html index 4da3798..77c7b9d 100644 --- a/linux/tty-terminal.html +++ b/linux/tty-terminal.html @@ -6,7 +6,7 @@ - Core OS Index + GNU/Linux Index

2.4. Consoles, terminals and shells

@@ -71,10 +71,10 @@ - Core OS Index -

diff --git a/tools/dnsmasq.html b/tools/dnsmasq.html index 7c923dd..4d738e4 100644 --- a/tools/dnsmasq.html +++ b/tools/dnsmasq.html @@ -83,9 +83,9 @@ Tools Index

diff --git a/tools/fail2ban.html b/tools/fail2ban.html index 38be371..71bbdf9 100644 --- a/tools/fail2ban.html +++ b/tools/fail2ban.html @@ -46,9 +46,9 @@ Tools Index

diff --git a/tools/gitolite.html b/tools/gitolite.html index ea07129..fd9ad8c 100644 --- a/tools/gitolite.html +++ b/tools/gitolite.html @@ -826,9 +826,9 @@ Tools Index -

diff --git a/tools/gnupg.html b/tools/gnupg.html index 89dfe84..a0da5d2 100644 --- a/tools/gnupg.html +++ b/tools/gnupg.html @@ -51,7 +51,7 @@

         $ gpg2 --full-gen-key
-        gpg (GnuPG) 2.1.11; Copyright (C) 2020 Free Software Foundation, Inc.
+        gpg (GnuPG) 2.1.11; Copyright (C) 2021 Free Software Foundation, Inc.
         This is free software: you are free to change and redistribute it.
         There is NO WARRANTY, to the extent permitted by law.
 
@@ -295,9 +295,9 @@
         Tools Index
 
         
-        This is part of the Tribu System Documentation.
-        Copyright (C) 2020
-        Tribu Team.
+        This is part of the LeetIO System Documentation.
+        Copyright (C) 2021
+        LeetIO Team.
         See the file Gnu Free Documentation License for copying conditions.
     
 
diff --git a/tools/index.html b/tools/index.html
index dc11f57..1febb5e 100644
--- a/tools/index.html
+++ b/tools/index.html
@@ -201,9 +201,9 @@
 	Documentation Index
 
 	
-	This is part of the Tribu System Documentation.
-	Copyright (C) 2020
-	Tribu Team.
+	This is part of the LeetIO System Documentation.
+	Copyright (C) 2021
+	LeetIO Team.
 	See the file Gnu Free Documentation License
 	for copying conditions.
     
diff --git a/tools/irssi.html b/tools/irssi.html
index bcf714e..fc958d7 100644
--- a/tools/irssi.html
+++ b/tools/irssi.html
@@ -57,9 +57,9 @@
 
         Tools Index
         
-        This is part of the Tribu System Documentation.
-        Copyright (C) 2020
-        Tribu Team.
+        This is part of the LeetIO System Documentation.
+        Copyright (C) 2021
+        LeetIO Team.
         See the file Gnu Free Documentation License
         for copying conditions.
     
diff --git a/tools/logrotate.html b/tools/logrotate.html
index fc07169..4f58aa1 100644
--- a/tools/logrotate.html
+++ b/tools/logrotate.html
@@ -361,9 +361,9 @@
         # logrotate -f /etc/logrotate.conf

diff --git a/tools/logwatch.html b/tools/logwatch.html index 20d1801..9718763 100644 --- a/tools/logwatch.html +++ b/tools/logwatch.html @@ -129,9 +129,9 @@ Tools Index

diff --git a/tools/lvm.html b/tools/lvm.html index 4e25b10..211b181 100644 --- a/tools/lvm.html +++ b/tools/lvm.html @@ -158,9 +158,9 @@ Tools Index

diff --git a/tools/lynx.html b/tools/lynx.html index b26e660..f800fcc 100644 --- a/tools/lynx.html +++ b/tools/lynx.html @@ -16,7 +16,7 @@

         # Description: Text-based web browser.
         # URL: http://lynx.isc.org/
-        # Packager: Tribu Team, silvino at bk dot ru
+        # Packager: LeetIO Team, silvino at bk dot ru
         # Depends on: ncurses openssl zlib
 
         name=lynx
@@ -51,9 +51,9 @@
 
         Tools Index
         
-        This is part of the Tribu System Documentation.
-        Copyright (C) 2020
-        Tribu Team.
+        This is part of the LeetIO System Documentation.
+        Copyright (C) 2021
+        LeetIO Team.
         See the file Gnu Free Documentation License
         for copying conditions.
     
diff --git a/tools/mutt.html b/tools/mutt.html
index 7edac42..4cb5599 100644
--- a/tools/mutt.html
+++ b/tools/mutt.html
@@ -311,9 +311,9 @@
 
         Tools Index
         
-        This is part of the Tribu System Documentation.
-        Copyright (C) 2020
-        Tribu Team.
+        This is part of the LeetIO System Documentation.
+        Copyright (C) 2021
+        LeetIO Team.
         See the file Gnu Free Documentation License
         for copying conditions.
     
diff --git a/tools/network.html b/tools/network.html
index 16549e8..080ba05 100644
--- a/tools/network.html
+++ b/tools/network.html
@@ -72,9 +72,9 @@

Tools Index -

diff --git a/tools/nginx.html b/tools/nginx.html index 937be15..32685b9 100644 --- a/tools/nginx.html +++ b/tools/nginx.html @@ -446,9 +446,9 @@ Tools Index -

diff --git a/tools/openssh.html b/tools/openssh.html index 271d919..aab5218 100644 --- a/tools/openssh.html +++ b/tools/openssh.html @@ -315,9 +315,9 @@ Tools Index -

diff --git a/tools/postgresql.html b/tools/postgresql.html index f27b7d4..a87c0b9 100644 --- a/tools/postgresql.html +++ b/tools/postgresql.html @@ -350,9 +350,9 @@ Tools Index

diff --git a/tools/qemu.html b/tools/qemu.html index 1ceb969..04c367d 100644 --- a/tools/qemu.html +++ b/tools/qemu.html @@ -401,9 +401,9 @@ Tools Index -

diff --git a/tools/squid.html b/tools/squid.html index 25fb12e..d19494a 100644 --- a/tools/squid.html +++ b/tools/squid.html @@ -65,9 +65,9 @@ ssl_bump bump all Tools Index -

diff --git a/tools/storage.html b/tools/storage.html index 430b735..03e24ef 100644 --- a/tools/storage.html +++ b/tools/storage.html @@ -149,9 +149,9 @@ Tools Index

diff --git a/tools/syslog-ng.html b/tools/syslog-ng.html index 70dc994..f192fa5 100644 --- a/tools/syslog-ng.html +++ b/tools/syslog-ng.html @@ -374,9 +374,9 @@ Tools Index -

diff --git a/tools/tar.html b/tools/tar.html index dfcd3a0..32fe945 100644 --- a/tools/tar.html +++ b/tools/tar.html @@ -122,9 +122,9 @@ Tools Index

diff --git a/tools/tmux.html b/tools/tmux.html index d6bf7a0..c00b046 100644 --- a/tools/tmux.html +++ b/tools/tmux.html @@ -7,7 +7,7 @@ - Core OS Index + GNU/Linux Index

2.5.3. Tmux

Install tmux, improves cli work efficiency;

@@ -106,11 +106,11 @@

Before pasting on vim, set paste mode and then set nopaste.

- Core OS Index + GNU/Linux Index

diff --git a/tools/vim.html b/tools/vim.html index b76c111..6d34312 100644 --- a/tools/vim.html +++ b/tools/vim.html @@ -267,9 +267,9 @@ Tools Index -

diff --git a/tools/wireless.html b/tools/wireless.html index 0696cd5..e15b112 100644 --- a/tools/wireless.html +++ b/tools/wireless.html @@ -124,9 +124,9 @@ Tools Index -

diff --git a/tools/x.html b/tools/x.html index 2172a56..0e9a4eb 100644 --- a/tools/x.html +++ b/tools/x.html @@ -216,9 +216,9 @@ Tools Index

-- cgit 1.4.1-2-gfad0 From 452477a2635d85ecf772a5242ce97d9479503bb3 Mon Sep 17 00:00:00 2001 From: Silvino Date: Wed, 3 Mar 2021 03:07:44 +0000 Subject: OpenBSD documentation dev/c system dev rev --- dev/c/index.html | 15 +- dev/c/src/basic/Makefile | 4 +- dev/c/src/basic/shell.c | 57 ++++++++ dev/c/src/fork/Makefile | 11 ++ dev/c/src/fork/fork.c | 38 +++++ dev/c/src/fork/fork_exec.c | 40 +++++ dev/c/src/hello/Makefile | 3 +- dev/c/src/hello/hello.c | 6 +- dev/c/src/linux/Makefile | 13 ++ dev/c/src/linux/init.c | 8 + dev/c/src/linux/rungdb.sh | 12 ++ dev/c/system.html | 101 +++++++++++-- openbsd/conf/skel/.Xdefaults | 4 - openbsd/conf/skel/.Xresources | 25 ++++ openbsd/conf/skel/.kshrc | 3 +- openbsd/conf/skel/.lynx.cfg | 5 + openbsd/conf/skel/.lynxrc | 333 ++++++++++++++++++++++++++++++++++++++++++ openbsd/index.html | 36 +++++ openbsd/install.html | 124 ++++++++++++++++ openbsd/network.html | 25 ++++ openbsd/partitions.html | 27 ++++ openbsd/pf.html | 151 +++++++++++++++++++ openbsd/sources.html | 79 ++++++++++ tools/index.html | 1 + tools/qemu.html | 32 ++-- tools/tar.html | 2 +- 26 files changed, 1106 insertions(+), 49 deletions(-) create mode 100644 dev/c/src/basic/shell.c create mode 100644 dev/c/src/fork/Makefile create mode 100644 dev/c/src/fork/fork.c create mode 100644 dev/c/src/fork/fork_exec.c create mode 100644 dev/c/src/linux/Makefile create mode 100644 dev/c/src/linux/init.c create mode 100644 dev/c/src/linux/rungdb.sh create mode 100644 openbsd/conf/skel/.Xresources create mode 100644 openbsd/conf/skel/.lynx.cfg create mode 100644 openbsd/conf/skel/.lynxrc create mode 100644 openbsd/install.html create mode 100644 openbsd/network.html create mode 100644 openbsd/partitions.html create mode 100644 openbsd/pf.html create mode 100644 openbsd/sources.html (limited to 'dev') diff --git a/dev/c/index.html b/dev/c/index.html index 1622cc1..eaf54a8 100644 --- a/dev/c/index.html +++ b/dev/c/index.html @@ -14,6 +14,7 @@

Elements @@ -48,12 +49,7 @@

Control Flow

Functions

Input & Output

Basic -

Multiple sources

Libraries +

Libraries

+#include +#include +#include +#include +#include +#include +#include +#include + +char *getinput(char *buffer, size_t buflen) { + printf("$$ "); + return fgets(buffer, buflen, stdin); +} + +void sig_int(int signo) { + printf("\nCaught SIGINT (Signal #%d)!\n$$ ", signo); + (void)fflush(stdout); +} + +int main(int argc, char **argv) { + char buf[BUFSIZ]; + pid_t pid; + int status; + + /* cast to void to silence compiler warnings */ + (void)argc; + (void)argv; + + if (signal(SIGINT, sig_int) == SIG_ERR) { + fprintf(stderr, "signal error: %s\n", strerror(errno)); + exit(1); + } + + while (getinput(buf, sizeof(buf))) { + buf[strlen(buf) - 1] = '\0'; + + if((pid=fork()) == -1) { + fprintf(stderr, "shell: can't fork: %s\n", + strerror(errno)); + continue; + } else if (pid == 0) { /* child */ + execlp(buf, buf, (char *)0); + fprintf(stderr, "shell: couldn't exec %s: %s\n", buf, + strerror(errno)); + exit(EX_UNAVAILABLE); + } + + /* parent waits */ + if ((pid=waitpid(pid, &status, 0)) < 0) { + fprintf(stderr, "shell: waitpid error: %s\n", + strerror(errno)); + } + } + + exit(EX_OK); +} diff --git a/dev/c/src/fork/Makefile b/dev/c/src/fork/Makefile new file mode 100644 index 0000000..a737794 --- /dev/null +++ b/dev/c/src/fork/Makefile @@ -0,0 +1,11 @@ + +progs=fork fork_exec +all: $(progs) + +fork: fork.c + +fork_exec: fork_exec.c + + +clean: + rm $(progs) diff --git a/dev/c/src/fork/fork.c b/dev/c/src/fork/fork.c new file mode 100644 index 0000000..25e4909 --- /dev/null +++ b/dev/c/src/fork/fork.c @@ -0,0 +1,38 @@ + +#include +#include +#include +#include +#include +#include +#include + +int main(){ + + pid_t cpid,ppid; + char errbuf[1024]; + + cpid = fork(); + if (cpid == -1) { + (void) snprintf(errbuf, sizeof(errbuf), + "fork: %s", strerror(errno)); + printf("%s\n", errbuf); + exit(1); + } + + if (cpid == 0) { + //child + ppid = getppid(); + if(ppid == 1){ + printf("parent died ?\n"); + _exit(1); + } + printf("I'm child with %i, parent %i\n", getpid(), ppid); + _exit(0); + } +/* parent */ + wait(NULL); + printf("Child id: %i\n", cpid); + return 0; +} + diff --git a/dev/c/src/fork/fork_exec.c b/dev/c/src/fork/fork_exec.c new file mode 100644 index 0000000..7f87c84 --- /dev/null +++ b/dev/c/src/fork/fork_exec.c @@ -0,0 +1,40 @@ +#include +#include +#include +#include +#include +#include +#include + +int main(){ + + pid_t cpid,ppid; + char errbuf[1024]; + + char *prog = "vim"; + char *const args[3]= {"vim", "fork_exec.c", NULL}; + + cpid = fork(); + if (cpid == -1) { + (void) snprintf(errbuf, sizeof(errbuf), + "fork: %s", strerror(errno)); + printf("%s\n", errbuf); + exit(1); + } + + if (cpid == 0) { + //child + ppid = getppid(); + if(ppid == 1){ + printf("parent died ?\n"); + _exit(1); + } + execvp(prog, args); + _exit(0); + } +/* parent */ + wait(NULL); + printf("Child id: %i\n", cpid); + return 0; +} + diff --git a/dev/c/src/hello/Makefile b/dev/c/src/hello/Makefile index a6d9f07..2c0ff2d 100644 --- a/dev/c/src/hello/Makefile +++ b/dev/c/src/hello/Makefile @@ -1,7 +1,6 @@ -CC=gcc CFLAGS=-Wall -hello: hello.o +hello: hello.c clean: rm -f *.o hello diff --git a/dev/c/src/hello/hello.c b/dev/c/src/hello/hello.c index df66493..092efa5 100644 --- a/dev/c/src/hello/hello.c +++ b/dev/c/src/hello/hello.c @@ -1,6 +1,10 @@ #include +#include int main() { - printf("hello World!"); + char *name; + name = getlogin(); + + printf("hello %s!\n", name); return 0; } diff --git a/dev/c/src/linux/Makefile b/dev/c/src/linux/Makefile new file mode 100644 index 0000000..e026551 --- /dev/null +++ b/dev/c/src/linux/Makefile @@ -0,0 +1,13 @@ +CC=gcc +CFLAGS=-Wall -static +#LDFLAGS=-lc -lnss_files -lnss_dns -lresolv + +all: init ramdisk + +init: init.c + +ramdisk: + find . | cpio -o -H newc | gzip > rootfs.cpio.gz + +clean: + rm -f *.o init rootfs.cpio.gz diff --git a/dev/c/src/linux/init.c b/dev/c/src/linux/init.c new file mode 100644 index 0000000..10af0be --- /dev/null +++ b/dev/c/src/linux/init.c @@ -0,0 +1,8 @@ +#include +#include + +int main() { + printf("FOOBAR FOOBAR FOOBAR FOOBAR FOOBAR FOOBAR FOOBAR\n"); + sleep(0xFFFFFFFF); + return 0; +} diff --git a/dev/c/src/linux/rungdb.sh b/dev/c/src/linux/rungdb.sh new file mode 100644 index 0000000..9408d7f --- /dev/null +++ b/dev/c/src/linux/rungdb.sh @@ -0,0 +1,12 @@ +#!/bin/bash + +gdb \ + -ex "add-auto-load-safe-path $(pwd)" \ + -ex "file vmlinux" \ + -ex 'set arch i386:x86-64:intel' \ + -ex 'target remote localhost:1234' \ + -ex 'hbreak start_kernel' \ + -ex 'continue' \ + -ex 'disconnect' \ + -ex 'set arch i386:x86-64' \ + -ex 'target remote localhost:1234' diff --git a/dev/c/system.html b/dev/c/system.html index eedf242..d1d6558 100644 --- a/dev/c/system.html +++ b/dev/c/system.html @@ -15,35 +15,87 @@ will run on and GDB will connect to it to help us understand how things tick.

Kernel Build

Build Kernel

-        $ tar xf linux-4.9.48.tar.xz
-        $ cd linux-4.9.48
+        $ tar xf linux-4.9.258.tar.xz
+        $ cd linux-4.9.258

Default configuration disable some security configurations that allow us to debug (random memory - layout).

+ layout KALSR), CONFIG_COMPAT_BRK don't randomize + position of the programs (randomize_va_space) useful when + debugging a program (tracing). + Configuration flags to enable;

+ +

CONFIG_64BIT
CONFIG_DEBUG_KERNEL
CONFIG_HAVE_ARCH_KGDB
CONFIG_FTRACE
CONFIG_PRINTK
CONFIG_BLK_DEV_INITRD
CONFIG_BINFMT_ELF
CONFIG_TTY
CONFIG_DEBUG_INFO
CONFIG_DEBUG_INFO_DWARF4
CONFIG_GDB_SCRIPTS
CONFIG_READABLE_ASM
CONFIG_FRAME_POINTER
CONFIG_KGDB
CONFIG_KGDB_LOW_LEVEL_TRAP
CONFIG_EARLY_PRINTK
CONFIG_COMPAT_BRK

+ +

And to disable;

+ +

CONFIG_CC_OPTIMIZE_FOR_SIZE

+ + +

This changes can be achieved by creating a config-fragment and then + merge it with the configuration.

-        $ make x86_64_defconfig
+        $ cat <<EOF >.config-fragment
+        CONFIG_64BIT=y
+        CONFIG_DEBUG_KERNEL=y
+        CONFIG_HAVE_ARCH_KGDB=y
+        CONFIG_COMPAT_BRK=y
+        CONFIG_FTRACE=y
+        CONFIG_PRINTK=y
+        CONFIG_BLK_DEV_INITRD=y
+        CONFIG_BINFMT_ELF=y
+        CONFIG_TTY=y
+        CONFIG_DEBUG_INFO=y
+        CONFIG_DEBUG_INFO_DWARF4=y
+        CONFIG_GDB_SCRIPTS=y
+        CONFIG_READABLE_ASM=y
+        CONFIG_FRAME_POINTER=y
+        CONFIG_KGDB=y
+        CONFIG_KGDB_LOW_LEVEL_TRAP=y
+        CONFIG_EARLY_PRINTK=y
+        CONFIG_CC_OPTIMIZE_FOR_SIZE=n
+        EOF

Enable CONFIG_DEBUG_INFO, CONFIG_DEBUG_INFO_DWARF4 - and CONFIG_GDB_SCRIPTS in the kernel;

Create a tiny config;

-        make x86_64_defconfig
-        cat <<EOF >.config-fragment
-        CONFIG_DEBUG_INFO=y
-        CONFIG_DEBUG_KERNEL=y
-        CONFIG_GDB_SCRIPTS=y
-        EOF
-        ./scripts/kconfig/merge_config.sh .config .config-fragment
+        $ make ARCH=x86_64 tinyconfig

Check or change to your needs the configuration;

Merge config with the following script;

+ +

+        $ ./scripts/kconfig/merge_config.sh .config .config-fragment
+

+ +

Check or change the configuration according to your needs;

         $ make nconfig

@@ -138,7 +190,7 @@ -ex "file vmlinux" \ -ex 'set arch i386:x86-64:intel' \ -ex 'target remote localhost:1234' \ - -ex 'break start_kernel' \ + -ex 'hbreak start_kernel' \ -ex 'continue' \ -ex 'disconnect' \ -ex 'set arch i386:x86-64' \ @@ -169,6 +221,23 @@ (gdb) +

lx-symbols allows to debug kernel modules, after starting the vm and loading + the module use lx-symbols to load the symbols from all the modules loaded in + the kernel.

+ +

+        (gdb) apropos lx
+        (gdb) lx-symbols
+

+ +

It's useful to set conditional breakpoints or a break point can be trigger + by unrelated tasks, example of a break point on do_exit function but only by + the process with pid 1;

+ +

+        (gdb) br do_exit if $lx_current()->pid == 1
+

+ C Index

This is part of the LeetIO System Documentation. diff --git a/openbsd/conf/skel/.Xdefaults b/openbsd/conf/skel/.Xdefaults index 8594a7c..2f7b5bc 100644 --- a/openbsd/conf/skel/.Xdefaults +++ b/openbsd/conf/skel/.Xdefaults @@ -1,6 +1,2 @@ ! $OpenBSD: dot.Xdefaults,v 1.3 2014/07/10 10:22:59 jasper Exp $ XTerm*loginShell:true -XTerm*vt100.faceName: terminus:pixelsize=14 -XTerm*vt100.scrollBar: false -*.foreground: #bbbbbb -*.background: #222222 diff --git a/openbsd/conf/skel/.Xresources b/openbsd/conf/skel/.Xresources new file mode 100644 index 0000000..46b58d2 --- /dev/null +++ b/openbsd/conf/skel/.Xresources @@ -0,0 +1,25 @@ +XTerm*faceName:DeJavuMono +XTerm*faceSize:11 +XTerm*allowBoldFonts:false +XTerm*scrollBar:false +XTerm*loginShell:true +XTerm*eightBitInput:false +XTerm*internalBorder:2 +XTerm*foreground:white +XTerm*background:black +XTerm*color0:#2e3436 +XTerm*color8:#888A85 +XTerm*color1:#cc0000 +XTerm*color9:#ef2929 +XTerm*color2:#4e9a06 +XTerm*color10:#8ae234 +XTerm*color3:#edd400 +XTerm*color11:#fce94f +XTerm*color4:#3465a4 +XTerm*color12:#729fcf +XTerm*color5:#92659a +XTerm*color13:#c19fbe +XTerm*color6:#07c7ca +XTerm*color14:#63e9e9 +XTerm*color7:#d3d7cf +XTerm*color15:#eeeeee diff --git a/openbsd/conf/skel/.kshrc b/openbsd/conf/skel/.kshrc index 9c83cd7..7ce4d45 100644 --- a/openbsd/conf/skel/.kshrc +++ b/openbsd/conf/skel/.kshrc @@ -2,4 +2,5 @@ alias glog='git log --stat --decorate'; export glog alias gloga='git log --graph --abbrev-commit --decorate --date=relative --all'; export gloga - +# When dealing with CVS in ports +export CVSROOT="anoncvs@anoncvs.fr.openbsd.org:/cvs" diff --git a/openbsd/conf/skel/.lynx.cfg b/openbsd/conf/skel/.lynx.cfg new file mode 100644 index 0000000..35e51bb --- /dev/null +++ b/openbsd/conf/skel/.lynx.cfg @@ -0,0 +1,5 @@ +#INCLUDE:~./lynx.cfg for COLOR VIEWER KEYMAP STARTFILE DEFAULT_INDEX_FILE +STARTFILE:gopher://localhost +#HELPFILE:https://lynx.invisible-island.net/lynx_help/lynx_help_main.html +#.ex +#DEFAULT_INDEX_FILE:http://scout.wisc.edu/ diff --git a/openbsd/conf/skel/.lynxrc b/openbsd/conf/skel/.lynxrc new file mode 100644 index 0000000..a28eaa1 --- /dev/null +++ b/openbsd/conf/skel/.lynxrc @@ -0,0 +1,333 @@ +# Lynx User Defaults File +# +# This file contains options saved from the Lynx Options Screen (normally +# with the 'o' key). To save options with that screen, you must select the +# checkbox: +# Save options to disk +# +# You must then save the settings using the link on the line above the +# checkbox: +# Accept Changes +# +# You may also use the command-line option "-forms_options", which displays +# the simpler Options Menu instead. Save options with that using the '>' key. +# +# There is normally no need to edit this file manually, since the defaults +# here can be controlled from the Options Screen, and the next time options +# are saved from the Options Screen this file will be completely rewritten. +# You have been warned... +# +# If you are looking for the general configuration file - it is normally +# called "lynx.cfg". It has different content and a different format. +# It is not this file. + +# accept_all_cookies allows the user to tell Lynx to automatically +# accept all cookies if desired. The default is "FALSE" which will +# prompt for each cookie. Set accept_all_cookies to "TRUE" to accept +# all cookies. +accept_all_cookies=off + +# anonftp_password allows the user to tell Lynx to use the personal +# email address as the password for anonymous ftp. If no value is given, +# Lynx will use the personal email address. Set anonftp_password +# to a different value if you choose. +anonftp_password= + +# bookmark_file specifies the name and location of the default bookmark +# file into which the user can paste links for easy access at a later +# date. +bookmark_file=lynx_bookmarks.html + +# If case_sensitive_searching is "on" then when the user invokes a search +# using the 's' or '/' keys, the search performed will be case sensitive +# instead of case INsensitive. The default is usually "off". +case_sensitive_searching=off + +# The character_set definition controls the representation of 8 bit +# characters for your terminal. If 8 bit characters do not show up +# correctly on your screen you may try changing to a different 8 bit +# set or using the 7 bit character approximations. +# Current valid characters sets are: +# Western (ISO-8859-1) +# 7 bit approximations (US-ASCII) +# Western (ISO-8859-15) +# Western (cp850) +# Western (windows-1252) +# IBM PC US codepage (cp437) +# DEC Multinational +# Macintosh (8 bit) +# NeXT character set +# HP Roman8 +# Chinese +# Japanese (EUC-JP) +# Japanese (Shift_JIS) +# Korean +# Taipei (Big5) +# Vietnamese (VISCII) +# Transparent +# Eastern European (ISO-8859-2) +# Eastern European (cp852) +# Eastern European (windows-1250) +# Latin 3 (ISO-8859-3) +# Latin 4 (ISO-8859-4) +# Baltic Rim (ISO-8859-13) +# Baltic Rim (cp775) +# Baltic Rim (windows-1257) +# Cyrillic (ISO-8859-5) +# Cyrillic (cp866) +# Cyrillic (windows-1251) +# Cyrillic (KOI8-R) +# Arabic (ISO-8859-6) +# Arabic (cp864) +# Arabic (windows-1256) +# Celtic (ISO-8859-14) +# Greek (ISO-8859-7) +# Greek (cp737) +# Greek2 (cp869) +# Greek (windows-1253) +# Hebrew (ISO-8859-8) +# Hebrew (cp862) +# Hebrew (windows-1255) +# Turkish (ISO-8859-9) +# Turkish (cp857) +# North European (ISO-8859-10) +# UNICODE (UTF-8) +# RFC 1345 w/o Intro +# RFC 1345 Mnemonic +# Ukrainian Cyrillic (cp866u) +# Ukrainian Cyrillic (KOI8-U) +# Cyrillic-Asian (PT154) +character_set=Western (ISO-8859-1) + +# cookie_accept_domains and cookie_reject_domains are comma-delimited +# lists of domains from which Lynx should automatically accept or reject +# all cookies. If a domain is specified in both options, rejection will +# take precedence. The accept_all_cookies parameter will override any +# settings made here. +cookie_accept_domains= + +# cookie_file specifies the file from which to read persistent cookies. +# The default is ~/.lynx_cookies. +cookie_file= + +# cookie_loose_invalid_domains, cookie_strict_invalid_domains, and +# cookie_query_invalid_domains are comma-delimited lists of which domains +# should be subjected to varying degrees of validity checking. If a +# domain is set to strict checking, strict conformance to RFC2109 will +# be applied. A domain with loose checking will be allowed to set cookies +# with an invalid path or domain attribute. All domains will default to +# querying the user for an invalid path or domain. +cookie_loose_invalid_domains= + +cookie_query_invalid_domains= + +cookie_reject_domains= + +cookie_strict_invalid_domains= + +# If emacs_keys is to "on" then the normal EMACS movement keys: +# ^N = down ^P = up +# ^B = left ^F = right +# will be enabled. +emacs_keys=off + +# file_editor specifies the editor to be invoked when editing local files +# or sending mail. If no editor is specified, then file editing is disabled +# unless it is activated from the command line, and the built-in line editor +# will be used for sending mail. +file_editor=vim + +# The file_sorting_method specifies which value to sort on when viewing +# file lists such as FTP directories. The options are: +# BY_FILENAME -- sorts on the name of the file +# BY_TYPE -- sorts on the type of the file +# BY_SIZE -- sorts on the size of the file +# BY_DATE -- sorts on the date of the file +file_sorting_method=BY_FILENAME + +# If keypad_mode is set to "NUMBERS_AS_ARROWS", then the numbers on +# your keypad when the numlock is on will act as arrow keys: +# 8 = Up Arrow +# 4 = Left Arrow 6 = Right Arrow +# 2 = Down Arrow +# and the corresponding keyboard numbers will act as arrow keys, +# regardless of whether numlock is on. +# If keypad_mode is set to "LINKS_ARE_NUMBERED", then numbers will +# appear next to each link and numbers are used to select links. +# If keypad_mode is set to "LINKS_AND_FORM_FIELDS_ARE_NUMBERED", then +# numbers will appear next to each link and visible form input field. +# Numbers are used to select links, or to move the "current link" to a +# form input field or button. In addition, options in popup menus are +# indexed so that the user may type an option number to select an option in +# a popup menu, even if the option isn't visible on the screen. Reference +# lists and output from the list command also enumerate form inputs. +# NOTE: Some fixed format documents may look disfigured when +# "LINKS_ARE_NUMBERED" or "LINKS_AND_FORM_FIELDS_ARE_NUMBERED" are +# enabled. +keypad_mode=LINKS_ARE_NOT_NUMBERED + +# lineedit_mode specifies the key binding used for inputting strings in +# prompts and forms. If lineedit_mode is set to "Default Binding" then +# the following control characters are used for moving and deleting: +# +# Prev Next Enter = Accept input +# Move char: <- -> ^G = Cancel input +# Move word: ^P ^N ^U = Erase line +# Delete char: ^H ^R ^A = Beginning of line +# Delete word: ^B ^F ^E = End of line +# +# Current lineedit modes are: +# Default Binding +# Alternate Bindings +# Bash-like Bindings +lineedit_mode=Default Binding + +# The following allow you to define sub-bookmark files and descriptions. +# The format is multi_bookmark=, +# Up to 26 bookmark files (for the English capital letters) are allowed. +# We start with "multi_bookmarkB" since 'A' is the default (see above). +multi_bookmarkB= +multi_bookmarkC= +multi_bookmarkD= +multi_bookmarkE= +multi_bookmarkF= +multi_bookmarkG= +multi_bookmarkH= +multi_bookmarkI= +multi_bookmarkJ= +multi_bookmarkK= +multi_bookmarkL= +multi_bookmarkM= +multi_bookmarkN= +multi_bookmarkO= +multi_bookmarkP= +multi_bookmarkQ= +multi_bookmarkR= +multi_bookmarkS= +multi_bookmarkT= +multi_bookmarkU= +multi_bookmarkV= +multi_bookmarkW= +multi_bookmarkX= +multi_bookmarkY= +multi_bookmarkZ= + +# personal_mail_address specifies your personal mail address. The +# address will be sent during HTTP file transfers for authorization and +# logging purposes, and for mailed comments. +# If you do not want this information given out, set the NO_FROM_HEADER +# to TRUE in lynx.cfg, or use the -nofrom command line switch. You also +# could leave this field blank, but then you won't have it included in +# your mailed comments. +personal_mail_address= + +# personal_mail_name specifies your personal name, for mail. The +# name is sent for mailed comments. Lynx will prompt for this, +# showing the configured value as a default when sending mail. +# This is not necessarily the same as a name provided as part of the +# personal_mail_address. +# Lynx does not save your changes to that default value as a side-effect +# of sending email. To update the default value, you must use the options +# menu, or modify this file directly. +personal_mail_name= + +# preferred_charset specifies the character set in MIME notation (e.g., +# ISO-8859-2, ISO-8859-5) which Lynx will indicate you prefer in requests +# to http servers using an Accept-Charset header. The value should NOT +# include ISO-8859-1 or US-ASCII, since those values are always assumed +# by default. May be a comma-separated list. +# If a file in that character set is available, the server will send it. +# If no Accept-Charset header is present, the default is that any +# character set is acceptable. If an Accept-Charset header is present, +# and if the server cannot send a response which is acceptable +# according to the Accept-Charset header, then the server SHOULD send +# an error response, though the sending of an unacceptable response +# is also allowed. +preferred_charset= + +# preferred_language specifies the language in MIME notation (e.g., en, +# fr, may be a comma-separated list in decreasing preference) +# which Lynx will indicate you prefer in requests to http servers. +# If a file in that language is available, the server will send it. +# Otherwise, the server will send the file in its default language. +preferred_language=en + +# select_popups specifies whether the OPTIONs in a SELECT block which +# lacks a MULTIPLE attribute are presented as a vertical list of radio +# buttons or via a popup menu. Note that if the MULTIPLE attribute is +# present in the SELECT start tag, Lynx always will create a vertical list +# of checkboxes for the OPTIONs. A value of "on" will set popup menus +# as the default while a value of "off" will set use of radio boxes. +# The default can be overridden via the -popup command line toggle. +select_popups=on + +# show_color specifies how to set the color mode at startup. A value of +# "never" will force color mode off (treat the terminal as monochrome) +# at startup even if the terminal appears to be color capable. A value of +# "always" will force color mode on even if the terminal appears to be +# monochrome, if this is supported by the library used to build lynx. +# A value of "default" will yield the behavior of assuming +# a monochrome terminal unless color capability is inferred at startup +# based on the terminal type, or the -color command line switch is used, or +# the COLORTERM environment variable is set. The default behavior always is +# used in anonymous accounts or if the "option_save" restriction is set. +# The effect of the saved value can be overridden via +# the -color and -nocolor command line switches. +# The mode set at startup can be changed via the "show color" option in +# the 'o'ptions menu. If the option settings are saved, the "on" and +# "off" "show color" settings will be treated as "default". +show_color=default + +# show_cursor specifies whether to 'hide' the cursor to the right (and +# bottom, if possible) of the screen, or to place it to the left of the +# current link in documents, or current option in select popup windows. +# Positioning the cursor to the left of the current link or option is +# helpful for speech or braille interfaces, and when the terminal is +# one which does not distinguish the current link based on highlighting +# or color. A value of "on" will set positioning to the left as the +# default while a value of "off" will set 'hiding' of the cursor. +# The default can be overridden via the -show_cursor command line toggle. +show_cursor=off + +# show_dotfiles specifies that the directory listing should include +# "hidden" (dot) files/directories. If set "on", this will be +# honored only if enabled via userdefs.h and/or lynx.cfg, and not +# restricted via a command line switch. If display of hidden files +# is disabled, creation of such files via Lynx also is disabled. +show_dotfiles=off + +# If sub_bookmarks is not turned "off", and multiple bookmarks have +# been defined (see below), then all bookmark operations will first +# prompt the user to select an active sub-bookmark file. If the default +# Lynx bookmark_file is defined (see above), it will be used as the +# default selection. When this option is set to "advanced", and the +# user mode is advanced, the 'v'iew bookmark command will invoke a +# statusline prompt instead of the menu seen in novice and intermediate +# user modes. When this option is set to "standard", the menu will be +# presented regardless of user mode. +sub_bookmarks=OFF + +# user_mode specifies the users level of knowledge with Lynx. The +# default is "NOVICE" which displays two extra lines of help at the +# bottom of the screen to aid the user in learning the basic Lynx +# commands. Set user_mode to "INTERMEDIATE" to turn off the extra info. +# Use "ADVANCED" to see the URL of the currently selected link at the +# bottom of the screen. +user_mode=NOVICE + +# If verbose_images is "on", lynx will print the name of the image +# source file in place of [INLINE], [LINK] or [IMAGE] +# See also VERBOSE_IMAGES in lynx.cfg +verbose_images=on + +# If vi_keys is set to "on", then the normal VI movement keys: +# j = down k = up +# h = left l = right +# will be enabled. These keys are only lower case. +# Capital 'H', 'J' and 'K will still activate help, jump shortcuts, +# and the keymap display, respectively. +vi_keys=on + +# The visited_links setting controls how Lynx organizes the information +# in the Visited Links Page. +visited_links=LAST_REVERSED diff --git a/openbsd/index.html b/openbsd/index.html index 8b13789..f220b01 100644 --- a/openbsd/index.html +++ b/openbsd/index.html @@ -1 +1,37 @@ + + + + + OpenBSD + + + Documentation Index + +

OpenBSD

+ +

OpenBSD is a Unix system forked from NetBSD with the highest coding standards, as such there is no space for deprecated code, code is constantly audited, and, all the procedures that goes along with high software quality project such as documentation.

+ +

1. Install notes

Install
Partitions

+ +

2. System administration

+ Documentation Index + +

+ + + diff --git a/openbsd/install.html b/openbsd/install.html new file mode 100644 index 0000000..eb6ec78 --- /dev/null +++ b/openbsd/install.html @@ -0,0 +1,124 @@ + + + + + 1.1. Install OpenBSD notes + + + + OpenBSD Index + +

1.1. Install OpenBSD notes

+ + +

OpenBSD bsd.rd is ram file system meant for installation or recovery procedures;

+ +

+        # mount -o loop /srv/qemu/iso/install68.iso /media/
+        # cp /media/6.8/amd64/bsd.rd /boot
+

+ +

Reboot machine and press c on grub menu, and set partition root, kernel location and boot, example;

+ +

+        grub> set root=(hd0,gpt3)
+        grub> kopenbsd /bsd.rd
+        grub> boot
+

+ +

Press enter and follow the instructions, OpenBSD installation is known to be one of the most easy of all operating systems. Read OpenBSD documentation.

+ +

Don't enable xenodm, enable after install and post install procedures.

+ +

Don't skip network configuration, it will need to fetch updates and synchronize clock.

+ +

Don't skip user creation, will be default administrator

+ +

When formatting the disk select auto and then resize of auto created partitions that shrink the last one (home). After install it will run syspatch and fw_update.

+ +

Post-Install

+ +

After install reboot, by default it will run syspatch and fw_updateo to check and install updates.

+ +

Install your favorite tools, example of a minimal setup;

+ +

+        # pkg_add vim git lynx irssi
+        # pkg_add xsel spectrwm
+

+ +

User created during install is part of wheel group by default, copy /etc/example/doas.conf to /etc/ to enable doas command;

+ +

+        # cp /etc/examples/doas.conf /etc/
+

+ +

Copy skeleton files;

+ +

+        # cp -r ~/doc/openbsd/conf/skel /etc/skel
+

+ +

Add regular user not part of wheel group

+ +

+        # useradd -m user_name
+

+ +

X

+ +

+        ~/.Xresources
+        XTerm*faceName:DeJavuMono
+        XTerm*faceSize:11
+        XTerm*allowBoldFonts:false
+        XTerm*scrollBar:false
+        XTerm*loginShell:true
+        XTerm*eightBitInput:false
+        XTerm*internalBorder:2
+        XTerm*foreground:white
+        XTerm*background:black
+        XTerm*color0:#2e3436
+        XTerm*color8:#888A85
+        XTerm*color1:#cc0000
+        XTerm*color9:#ef2929
+        XTerm*color2:#4e9a06
+        XTerm*color10:#8ae234
+        XTerm*color3:#edd400
+        XTerm*color11:#fce94f
+        XTerm*color4:#3465a4
+        XTerm*color12:#729fcf
+        XTerm*color5:#92659a
+        XTerm*color13:#c19fbe
+        XTerm*color6:#07c7ca
+        XTerm*color14:#63e9e9
+        XTerm*color7:#d3d7cf
+        XTerm*color15:#eeeeee
+

+ +

+        ~/.xsession
+        export ENV=$HOME/.kshrc
+        xrdb -merge "$HOME/.Xresources"
+        spectrwm
+

+ +

Mouse tap

+ +

+        libernaut# wsconsctl mouse.tp.tapping=1
+        mouse.tp.tapping -> 1
+        libernaut# cat /etc/wsconsctl.conf
+        mouse.tp.tapping=1
+        libernaut#
+

+ + OpenBSD Index +

+ + + diff --git a/openbsd/network.html b/openbsd/network.html new file mode 100644 index 0000000..446f112 --- /dev/null +++ b/openbsd/network.html @@ -0,0 +1,25 @@ + + + + + 2.0. Network + + + + OpenBSD Index + +

2.0. Network

+ +

+        # ifconfig iwn0 nwid ID wpakey pass
+

+ + OpenBSD Index +

+ + + diff --git a/openbsd/partitions.html b/openbsd/partitions.html new file mode 100644 index 0000000..ac78cea --- /dev/null +++ b/openbsd/partitions.html @@ -0,0 +1,27 @@ + + + + + 1.2. Partitions + + + OpenBSD Index + +

Partitions

+ +

+        fdisk
+        dislabel
+        newfs
+        sysctl hw.disknames
+

+ + OpenBSD Index +

+ + + diff --git a/openbsd/pf.html b/openbsd/pf.html new file mode 100644 index 0000000..88ec76a --- /dev/null +++ b/openbsd/pf.html @@ -0,0 +1,151 @@ + + + + + 1.1. Install OpenBSD notes + + + + OpenBSD Index + +

1.1. Install OpenBSD notes

+ +

Quick introduction to Packet Filter

+ +

Packet filter

+ +

Packet filter or pf is the system that controls the flow of packets, read more about it on OpenBSD faq and it's man page.

+ +

As a service can be enable or disable with rcctl or by pfctl program. PF uses /etc/pf.conf as it's main configuration file, after boot can load more rules from other files if needed.

+ + +

Configuration

+ +

To setup a simple firewall edit /etc/pf.conf, default comes with very simple rules;

+ +

+        # $OpenBSD: pf.conf,v 1.55 2017/12/03 20:40:04 sthen Exp $
+        #
+        # See pf.conf(5) and /etc/examples/pf.conf
+
+        set skip on lo
+
+        block return	# block stateless traffic
+        pass		# establish keep-state
+
+        # By default, do not permit remote connections to X11
+        block return in on ! lo0 proto tcp to port 6000:6010
+
+        # Port build user does not need network
+        block return out log proto {tcp udp} user _pbuild
+

+ +

This configuration allows incoming connections and outgoing connections except for was is commented such as X11 or user that port system runs under when building.

+ +

Control

+ +

After boot PF operation can be managed using pfctl;

+ +

+        pfctl -f  /etc/pf.conf    Load the pf.conf file
+        pfctl -nf /etc/pf.conf    Parse the file, but don't load it
+        pfctl -sr                 Show the current ruleset
+        pfctl -ss                 Show the current state table
+        pfctl -si                 Show filter stats and counters
+        pfctl -sa                 Show EVERYTHING it can show
+

+ +

Logs

+ +

Documentation tells that when logging a packet a copy of it's header is sent to pflog interface with additional data such as the interface, action pf took, etc.

+ +

pflog interface allows user space applications to receive this data from the kernel. At boot when pf is enabled pflogd is also started and by default listens on pflog0 and writes to /var/log/pflog file.

+ +

To read log file;

+ +

+        # tcpdum -n -e -ttt -r /var/log/pflog
+

+ +

To read log in real time;

+ +

+        # tcpdump -n -e -ttt -i pflog0
+

+ + +

Simple firewall

+ +

Simplified syntax for filter rules is;

+ +

+        action [direction] [log] [quick] [on interface] [af]
+        [proto protocol] [from src_addr [port src_port]]
+        [to dst_addr [port dst_port]] [flags tcp_flags] [state]
+

+ +

Start changing default configuration by setting "default policy to deny" and to log all packets. Change configuration file to contain first filter rule;

+ +

+        int_if  = "re0"
+        lan_net = "10.0.0.0/24"
+
+        set skip on lo
+
+        # scrub incoming packets
+        match in all scrub (no-df)
+
+        set block-policy drop # block silenty 
+        block drop log all    # block and log everything
+
+        # activate spoofing protection for all interfaces
+        block in quick from urpf-failed
+
+        # allow out dns
+        pass out on $int_if proto udp to 10.0.0.254 port domain
+
+        # allow out ntp
+        pass out on $int_if proto udp to any port ntp
+
+        # allow out https
+        pass out on $int_if proto tcp to any port 443
+
+        # allow out ssh
+        pass out on $int_if proto tcp to any port { 22, 2222 }
+
+        # allow in ssh
+        pass in log on $int_if proto tcp from any to 10.0.0.10 port 22
+
+        # do not permit remote connections to X11
+        block in on ! lo0 proto tcp to port 6000:6010
+
+        # port build user does not need network
+        block out log proto {tcp udp} user _pbuild    
+

+ +

To reload configuration file;

+ +

+        # pfctl -f /etc/pf.conf
+

+ +

See what ports are open;

+ +

+        # netstat -na -f inet | grep LISTEN
+

+ +

Check rules;

+ +

+        # pfctl -sr
+

+ + OpenBSD Index +

+ + diff --git a/openbsd/sources.html b/openbsd/sources.html new file mode 100644 index 0000000..019044d --- /dev/null +++ b/openbsd/sources.html @@ -0,0 +1,79 @@ + + + + + 2.1. Sources + + + + OpenBSD Index + +

2.1. Sources

+ +

Allows to fetch sources;

+ +

+        # usermod -G wsrc exampleuser
+

+ +

Allows to build from ports;

+ +

+        # usermod -G wobj exampleuser
+

+ +

Create directory xenocara and ports

+ +

+        cd /usr
+        mkdir -p   xenocara ports
+        chgrp wsrc xenocara ports
+        chmod 775  xenocara ports
+

+ +

Group wobj should have rwx

+ +

+        /usr/obj
+

+ +

Get sources

+ +

+        ftp https://cdn.openbsd.org/pub/OpenBSD/$(uname -r)/{ports.tar.gz,SHA256.sig}
+
+signify -Cp /etc/signify/openbsd-$(uname -r | cut -c 1,3)-base.pub -x SHA256.sig ports.tar.gz
+

+ +

+        $ cd /usr/src
+        $ tar xzf ~/src.tar.gz
+        $ tar xzf ~/sys.tar.gz
+        $ cd /usr
+        $ tar xzf ~/ports.tar.gz
+        $ cd /usr/xenocara
+        $ tar xzf ~/xenocara.tar.gz
+

+ + +

+        echo 'export CVSROOT="anoncvs@anoncvs.fr.openbsd.org:/cvs"' >> .kshrc
+        $ cd /usr/ports
+        $ cvs -d anoncvs@anoncvs.fr.openbsd.org:/cvs -q up -Pd -rOPENBSD_6_8
+

+ +

Repeat above to the other sources, to update the ports tree later:

+ +

+        $ cd /usr/ports
+        $ cvs -q up -Pd -rOPENBSD_6_8
+

+ + OpenBSD Index +

+ + diff --git a/tools/index.html b/tools/index.html index 991a1b5..dd73571 100644 --- a/tools/index.html +++ b/tools/index.html @@ -97,6 +97,7 @@

6. Logs

Nginx

Gitolite

1. Install Gitolite

-        $ qemu-img create -f qcow2 crux-img.qcow2 15G
+        $ qemu-img create -f qcow2 crux-img.qcow2 20G

2.1. Mount images

@@ -89,12 +85,20 @@
 
         Use /dev/mapper/$(name_of_device) to assign correct blocks;
 
+        +	pvcreate           /dev/mapper/${DEV_NAME}p4
+        vgcreate vg_system /dev/mapper/${DEV_NAME}p4
+        lvcreate -L 15G -n lv_root vg_system
+        lvcreate -L 2G -n lv_var vg_system
+        lvcreate -l 100%FREE -n lv_home vg_system
+        
+
          	mkfs.fat -F 32  /dev/mapper/${DEV_NAME}p2
 	mkfs.ext4       /dev/mapper/${DEV_NAME}p3
-	mkfs.ext4       /dev/mapper/${DEV_NAME}p4
-	mkfs.ext4       /dev/mapper/${DEV_NAME}p5
-	pvcreate        /dev/mapper/${DEV_NAME}p6
+	mkfs.ext4       /dev/vg_system/lv_root
+	mkfs.ext4       /dev/vg_system/lv_var
+	mkfs.ext4       /dev/vg_system/lv_home
         
 
 	Read lvm documentation on how to setup
@@ -103,7 +107,7 @@
         
Mount partition;
 
         -	mount /dev/mapper/${DEV_NAME}p4 $CHROOT
+	mount /dev/vg_system/
 	mkdir -p $CHROOT/proc
 	mkdir -p $CHROOT/sys
 	mkdir -p $CHROOT/dev
diff --git a/tools/tar.html b/tools/tar.html
index 32fe945..02c7c73 100644
--- a/tools/tar.html
+++ b/tools/tar.html
@@ -15,7 +15,7 @@
         To create a simple compressed tar;
 
         -        $ tar -czvf tar_name.tar.gz /path/to/archive
+        $ tar -czpvf tar_name.tar.gz /path/to/archive
         
 
         Script
-- 
cgit 1.4.1-2-gfad0