summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2018-09-27Add vmctl stop -a [-fw] option to stop or terminate all running VMs.Reyk Floeter
This is also be used to simplify the vmd rc stop script. OK mlarkin@ ccardenas@
2018-09-23add 6.5 syspatch public keyRobert Nagy
2018-09-216.5 firmware keyStuart Henderson
2018-09-20grow alpha and hppa media to accomodate some recent growthTheo de Raadt
2018-09-20Import updated moduli.Darren Tucker
2018-09-186.5 packages keyChristian Weisgerber
2018-09-186.5 base keyTheo de Raadt
2018-09-18grow arm64 ramdiskTheo de Raadt
2018-09-10Adjust the config to -current bgpd which makes it a lot more readable.Claudio Jeker
OK phessler@
2018-09-09update example bgpd.conf to use new config language features:Sebastian Benoit
network prefix-set ... and filters with prefix-set ... or-longer. ok claudio@
2018-09-08Remove optional commas from example config. In the future these optionalClaudio Jeker
commas may become a syntax error.
2018-08-31syncJoshua Stein
2018-08-31Add more uhid devices, 8 totalJoshua Stein
ok deraadt
2018-08-29Historically /etc/netstart (and the equivalent code in the installKenneth R Westerback
script) did 'ifconfig <if> down' before starting dhclient(8). This was a way of ensuring old running copies of dhclient were killed before a new one started. Current dhclient does not need this assist, so change "ifconfig <if> down" to "ifconfig <if> up" pending further script optimizations. Similar to a 2014 attempt by halex@. Prompted by a misc@ report from Kristjan Komlosi reporting hanging diskless setups. ok halex@ kn@
2018-08-28Unclutter bgpd.conf example config filejob
We're aiming to work towards an examples/bgpd.conf file that is a good starting point for real world deployments rather than a showcase of all capabilities bgpd(8) has. OK deraadt@ claudio@
2018-08-20syncMark Kettenis
2018-08-20Add /dev/drm[0-3].Mark Kettenis
ok deraadt@, jsg@, mpi@
2018-08-19syncanton
2018-08-19Add kcov(4), a kernel code coverage tracing driver. It's used in conjunctionanton
with the syzkaller kernel fuzzer. So far, 8 distinct panics have been found and fixed. This effort will continue. kcov is limited to architectures using Clang as their default compiler and is not enabled by default. With help from mpi@, thanks! ok kettenis@ mpi@ visa@
2018-08-16Switch nsd control socket from localhost to a unix domain socket.Florian Obser
OK sthen
2018-08-16The zoneinfo directories can be mode 755 just like everything else.Todd C. Miller
OK deraadt@
2018-08-11don't need 61 keys anymoreTheo de Raadt
2018-08-10crank to 6.4-betaTheo de Raadt
2018-08-07Similar to the ldpd.conf change don't use a macro of the secret.Claudio Jeker
Macros get sometimes logged so we should not encurage to use them for sensitive data.
2018-08-06Correct example file since reserved words cannot be used as macros. Not onlyRicardo Mestre
that, the macro used was password and if we changed it to something like pass="secret" it would log it if the daemon was ran in verbose mode. Hint and OK claudio@
2018-07-28syncAlexandre Ratchov
2018-07-28Remove unused /dev/audio and /dev/audioctl symlinks.Alexandre Ratchov
ok deraadt
2018-07-25s/resolver/nameserver/ to match parse.y -r1.4Jasper Lievisse Adriaanse
2018-07-24add rad.conf exampleJasper Lievisse Adriaanse
ok florian@
2018-07-23add _rad userFlorian Obser
OK tb, claudio
2018-07-23Remove rtadvd(8) rc script.Florian Obser
2018-07-23Remove rtadvd(8) leftovers in etc.Florian Obser
OK deraadt, phessler
2018-07-23It's time to switch to rad(8); tested by many.Florian Obser
Unhook rtadvd from build. OK deraadt, phessler
2018-07-23It's time to switch to rad(8); tested by many.Florian Obser
Remove rtadvd(8) from rc(8). OK deraadt, phessler
2018-07-22document method=https, and use it in the example config;Jason McIntyre
from lauri tirkkonen; ok sthen beck
2018-07-13add rad.conf; from semarie; tweak & OK tbFlorian Obser
2018-07-12rc(8) infrastructure for radFlorian Obser
2018-07-12Add _rad user and group for rad(8).Florian Obser
This recycles the _btd uid/gid that have been removed in 2013. Discussed in the hackroom.
2018-07-11Explicitly call "/etc/rc.d/vmd stop". This issues graceful shutdown commandsStuart Henderson
to running VMs (at least for OpenBSD ones), but the stop routine for system daemons is not usually called at shutdown. Earlier version with just "vmd stop" ok reyk@ kn@, ajacoutot@ reminded me to hide the contextless "vmd(ok)" text which looks bad, I did so and wrapped it with a "stopping VMs" message (it can take some time, especially when you have multiple VMs, so better to have some clear feedback).
2018-07-11Add -w option to vmctl stop to wait for completion of VM termination.Reyk Floeter
Use it in /etc/rc.d/vmd accordingly. OK sthen@
2018-07-11Don't hide errors when IPv6 forwarding is not enabled.Florian Obser
OK(failed) phessler OK deraadt
2018-07-10we were refering to 10k states by default here as well, pt out by claudioHenning Brauer
2018-07-08netstart is used during system start, but also interactively.Theo Buehler
Show proper error message if a regular user executes netstart. Only do the privilege check if the id binary is available, which might not be the case during diskless system startup. ok deraadt, jasper, jca, krw, rpe (who wrote the same diff), sthen
2018-07-03list the ports for gre in udp, as per rfc8086 and iana assignments.David Gwynne
ok benno@ deraadt@
2018-06-27a mirror URLs -> a mirror URLTheo Buehler
From Raf Czlonka
2018-06-21Add 6to4 anycast prefixes to bogon filterjob
Globally anycasted 6to4 has outlived its usefulness. Operational discussion: http://seclists.org/nanog/2018/Jun/268 OK deraadt@
2018-06-13Rename httpd.conf "root strip" option to "request strip".Reyk Floeter
"root strip" was semantically incorrect and did cause some confusion as it never stripped the root but the client's request path. Discussed with many. Heads up: this is a grammar change that also affects acme-client(1) configurations (see current.html). OK claudio@
2018-06-13Adjust example after the announce (all|self|...) change.Claudio Jeker
Adjust filters and comment them to explain the basic operation. Use large-community and a prefix-set to ensure no bad prefixes are leaked to eBGP speakers. With and OK job@
2018-06-07prepare for dri3protoMatthieu Herrb
2018-06-04remove "from local" (the default) from one of the match rules: the lineJason McIntyre
immediately above also uses this notation, it's shorter, and it keeps two examples in the man page which claim to be the same as the default config (but with exceptions) in sync; ok gilles