Hírolvasó

Introducing an OpenBSD LLDP daemon

OpenBSD Journal
2 hónap 1 hét óta
Our favorite operating system may be on the verge of having a LLDP (Link Layer Discovery Protocol) daemon added to the base system. David Gwynne (dlg@) is circulating a patch on tech@ that introduces the daemon,

List: openbsd-tech Subject: LLDP daemon and display tool From: David Gwynne <david () gwynne ! id ! au> Date: 2025-04-24 3:49:53 this adds a small daemon and command line tool for receiving and displaying LLDP messages from neighbors connected to Ethernet interfaces. the daemon is called olldpd(8) to avoid colliding with the existing lldpd from ports. the command line tool is lldp(8). it uses the AF_FRAME sockets that were recently added rather than BPF. this means it retains fewer privileges while it's running because it doesn't have to open and configure BPF devices when new interfaces appear in the system. avoiding BPF means it has basically 0 impact on the kernel packet path because AF_FRAME is handled as a last resort for packets rather than up front for every packet on an interface.

Read more…

Introducing bpflogd(8): capture packets via BPF to log files

OpenBSD Journal
2 hónap 1 hét óta
In a recent post to tech@, David Gwynne (dlg@) introduced a new daemon to log packets from BPF.

The message reads

List: openbsd-tech Subject: bpflogd(8): capture packets via BPF to log files From: David Gwynne <david () gwynne ! id ! au> Date: 2025-04-24 5:44:53 this is basically pflogd(8), but different. the reason it exists is because i needed to continously log some packets from span ports coming from multiple switches to try and help debug a network issue that only seems to occur every couple of months. pflogd provides that for a single pflog interface, but i needed it on multiple ethernet interfaces.

Read more…

[$] Some __nonstring__ turbulence

Linux Weekly News
2 hónap 1 hét óta
New compiler releases often bring with them new warnings; those warnings are usually welcome, since they help developers find problems before they turn into nasty bugs. Adapting to new warnings can also create disruption in the development process, though, especially when an important developer upgrades to a new compiler at an unfortunate time. This is just the scenario that played out with the 6.15-rc3 kernel release and the implementation of -Wunterminated-string-initialization in GCC 15.
corbet

[$] Freezing filesystems for suspend

Linux Weekly News
2 hónap 1 hét óta
Sometimes worms have a tendency to multiply once their can is opened. James Bottomley recently encountered that situation; he led a session in the filesystem track at the 2025 Linux Storage, Filesystem, Memory Management, and BPF Summit (LSFMM+BPF) to discuss filesystem behavior with respect to suspending and resuming the system. As he noted in his topic proposal, he came at the problem because he needed a way to resynchronize the contents of efivarfs after a system resume and thought there should be an API available to use. But, as the resulting thread shows, the filesystem freeze and thaw code had never been used by the system-wide suspend and resume code. Due to a scheduling mixup, though, several of us missed Bottomley's session, including Luis Chamberlain who has been working on hooking those two pieces up; what follows is largely from a second session that Chamberlain led, with some background information from the topic-proposal discussion and an email exchange with Bottomley.
jake

Security updates for Thursday

Linux Weekly News
2 hónap 1 hét óta
Security updates have been issued by Debian (haproxy and openrazer), Fedora (c-ares and mingw-poppler), Red Hat (thunderbird), SUSE (epiphany, ffmpeg-6, gopass, and libsoup-3_0-0), and Ubuntu (erlang, haproxy, libapache2-mod-auth-openidc, libarchive, linux, linux-aws, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oracle, linux-raspi, linux, linux-aws, linux-azure, linux-azure-6.8, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oem-6.8, linux-oracle, linux-oracle-6.8, linux-aws-6.8, linux-aws-fips, linux-fips, linux-gcp-fips, linux-azure-fips, linux-gcp, linux-gke, linux-gkeop, linux-gcp-6.8, linux-ibm-5.15, linux-intel-iot-realtime, linux-realtime, linux-intel-iotg-5.15, linux-realtime, perl, and yelp, yelp-xsl).
jake

Game of Trees 0.111 released

OpenBSD Journal
2 hónap 1 hét óta

Version 0.111 of Game of Trees has been released (and the port updated, with additional useful information in the commit message):

  • introduce gotsysd: configure gotd servers by committing to gotsys.git repo
  • make gotd run 'gotsys check' on gotsys.conf commits before accepting them
  • make gotd run 'gotsys apply' when the gotsys.git repo receives changes
  • add a missing malloc failure check to gotd's repo_write process
  • make got clone/fetch work against Git servers which do not speak English
  • stop processing more messages upon error in gotd repo_write process
  • close file descriptors passed to gotd_imsg_compose_event() on failure
  • potential fix for use-after-free in lib/repository.c's match_packed_object()
  • make gotd return an informative error when the connection limit is exceeded
  • in gotctl info, display the time when a client connection was created
  • add reload support to gotd, triggered via 'gotctl reload', not via SIGHUP!
  • test S_ISREG in parse_ref_file() explicitly rather than via getline(3)
  • release ref-file lock when fstat fails in parse_ref_file()
  • do not treat unhandled signals as a fatal error in gotwebd
  • fix an edge case of tog spinning when 'B' is pressed in log view
  • stop using got_repo_map_path() in gotwebd to fix spurious realpath(3) errors
  • avoid creation of pack_fds array when not needed, saving file descriptors
  • gotwebd now runs as the _gotwebd user by default, rather than "www"
  • gotwebd can now serve repositories outside the /var/www chroot directory
  • the gotwebd.conf repos_path directive is no longer relative to the chroot
  • get rid of the gotwebd-specific libexec helpers in /var/www/bin/gotwebd
  • improve gotwebd behaviour when sending data to already disconnected clients
  • plug some memory leaks in got-send-pack and got-fetch-pack
  • fix got-fetch-http performance when server sends chunked HTTP responses