Daniel Jakots

souvenirs

- On Linux and macOS, this is converted to minutes and
  rounded down. If less than 60, it will be set to 0.
- On Solaris and FreeBSD, this will be seconds.

---
- name: Upgrade OpenBSD
  hosts: apu-root
  vars:
    arch: amd64
    date: "{{ lookup('pipe', 'date +%Y-%m-%d') }}"
    disk: "sd0"
    mirror: "fastly.cdn.openbsd.org"
    path_sets: "/home/danj/sets"

  tasks:
    - name: fetch sets
      command: /home/danj/bin/fetch-sets
      when: path_sets is defined
    - name: create answer file for upobsd
      template:
        src: answer.j2
        dest: answer
      delegate_to: localhost
    - name: create kernel with upobsd
      command: "upobsd -v -a {{ arch }} -u ./answer -m https://{{ mirror }}/pub/OpenBSD -V snapshots"
      delegate_to: localhost
    - name: copy bsd.rd created by upobsd
      copy:
        src: bsd.rd
        dest: /bsd
    - name: reboot host
      reboot:
        msg: "rebooting into bsd.rd to upgrade"
        reboot_timeout: 900
    - name: archive kernel
      copy:
        src: "/bsd"
        dest: "/bsd-{{ date }}"
        mode: 0700
        remote_src: "yes"
    - name: upgrade all packages
      command: "pkg_add -u -Dsnap"

Which disk is the root disk = sd0
Force checking of clean non-root filesystems = no
{% if path_sets is defined %}
Location of sets = disk
Is the disk partition already mounted = yes
Pathname to the sets = {{ path_sets }}
{% else %}
Location of sets = http
HTTP proxy URL = none
HTTP Server = {{ mirror }}
Server directory = pub/OpenBSD/snapshots/{{ arch }}
{% endif %}
Set name(s) = done
Location of sets = done

FILES
     /etc/apm/suspend
     /etc/apm/hibernate
     /etc/apm/standby
     /etc/apm/resume
     /etc/apm/powerup
     /etc/apm/powerdown    These files contain the host's customized actions.
                           Each file must be an executable binary or shell
                           script.  A single program or script can be used to
                           control all transitions by examining the name by
                           which it was called, which is one of suspend,
                           hibernate, standby, resume, powerup, or powerdown.

1
2
#!/bin/sh
doas -u danj env DISPLAY=:0 XAUTHORITY=/home/danj/.Xauthority xlock &

# pkg_add login_oath

$ openssl rand -hex 20 > ~/.totp-key
$ chmod 400 ~/.totp-key

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
#!/usr/bin/env python

#           DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
#                   Version 2, December 2004

# Copyright (C) 2018 Daniel Jakots

import binascii
import base64
import sys

try:
    import qrcode
except ModuleNotFoundError:
    print("pkg_add py3-qrcode")
    sys.exit(1)

seed_hex = input("Key in hex format ")

binary_string = binascii.unhexlify(seed_hex)
seed_b32 = base64.b32encode(binary_string).decode('utf-8')

print("The secret in a base32 encoded format")
print(seed_b32)

print("The same, but with a space every three letters for readability")
print(' '.join([seed_b32[i:i+3] for i in range(0, len(seed_b32), 3)]))

print("Let's create a QR code to import it into an app")
issuer = input("'Issuer' (can be the server name) ")
username = input("Username ")

uri = f"otpauth://totp/{username}?secret={seed_b32}&issuer={issuer}"
img = qrcode.make(uri)
image_file = open(f"qrcode-otp-{issuer}.jpg", "wb")
img.save(image_file)

$ oathtool --totp 0123456789abcdef0123
054640
$ oathtool --totp -b AERUKZ4JVPG66AJD
054640

Some tokens (e.g. Google Authenticator) require secrets in base32 format;
you can convert them with p5-Convert-Base32:

use Convert::Base32;
my $s = pack('H*', '99d12448129d1e8192e063d64714209137a13864');
print encode_base32($s)."\n";

# Default allowed authentication styles for authentication type ftp
auth-ftp-defaults:auth-ftp=passwd:

# Default allowed authentication styles for authentication type ssh
auth-ssh-defaults:auth-ssh=-totp:

staff:\
        :datasize-cur=1536M:\
        :datasize-max=infinity:\
        :maxproc-max=512:\
        :maxproc-cur=256:\
        :ignorenologin:\
        :requirehome@:\
        :tc=auth-ssh-defaults:\
        :tc=default:

-debug1: Authentication succeeded (publickey).
+Authenticated with partial success.
+debug1: Authentications that can continue: password
+debug1: Next authentication method: password
+danj@198.51.100.12's password:
+debug1: Authentication succeeded (password).

Match User git
    AuthenticationMethods publickey

Match Address 203.0.113.47 # VPN
    AuthenticationMethods publickey

danj@pancake:/etc/openvpn$ ls
client-ca.conf  client-fr.conf  private-stuff/

danj@pancake:/etc/openvpn$ grep dev *.conf
client-ca.conf:dev tun1
client-fr.conf:dev tun0

openvpn_fr_flags="--config /etc/openvpn/client-fr.conf"
openvpn_ca_flags="--config /etc/openvpn/client-ca.conf"

vpnfr_if = "tun0"
vpnca_if = "tun1"

lan_net = $lan_if:network
wifilap_net = $wifilap_if:network
wifitel_net = $wifitel_if:network
windows_net = $windows_if:network
tel_net = $tel_if:network

table <softvpnfr> { 10.20.20.20 } persist
table <vpnfr> { $phone } persist
table <vpnca> { 10.10.10.60 } persist
table <bypassfr> { 129.128.197.20, 129.128.5.191, 185.19.29.62, 167.114.216.84 } persist
table <forcevpnfr> { $mrs-fw2 }
table <nousautres> { 10.0.0.0/8, $home_ip } persist

pass in     on $lan_if     from $lan_net     to ! <nousautres>
pass in     on $wifilap_if from $wifilap_net to ! <nousautres>
pass in     on $wifitel_if from $wifitel_net to ! <nousautres>
pass in     on $tel_if     from $tel         to ! <nousautres>
pass in log on $windows_if proto { tcp, udp } from $windows_net to ! <nousautres>

pass out log on $ext_if proto { tcp, udp } all modulate state
pass out on $vpnfr_if proto { tcp, udp } all modulate state
pass out on $vpnca_if proto { tcp, udp } all modulate state

# disable the use of the routes if you're not in <softvpn>
pass in on { $lan_if, $wifilap_if, $wifitel_if, $atlas_if } \
     from !<softvpnfr> to ! <nousautres>  route-to ($ext_if $home_ip)

# force traffic through the French VPN
pass in on { $lan_if, $wifilap_if, $wifitel_if, $tel_if } \
     from <vpnfr> to ! <nousautres> route-to ($vpnfr_if 192.168.125.61)

# traffic to hosts in <bypass> must not go through the VPN
pass in on { $lan_if, $wifilap_if, $wifitel_if, $tel_if } \
     from <vpnfr> to <bypassfr> route-to ($ext_if $home_ip)

# force traffic through the Canadian VPN
pass in on { $lan_if, $wifilap_if, $wifitel_if, $tel_if } \
     from <vpnca> to ! <nousautres> route-to ($vpnca_if 192.168.251.10)

# traffic from <softvpnfr> to hosts in <forcevpnfr> should really go through the VPN
pass in on { $lan_if, $wifilap_if, $wifitel_if } \
     from <softvpnfr> to <forcevpnfr> route-to ($vpnfr_if 192.168.125.61)

# if I want everything to go through the Canadian VPN
root@pancake:~# pfctl -t vpnca -Ta 10.1.2.3
# or not
root@pancake:~# pfctl -t vpnca -Td 10.1.2.3
# through the French VPN
root@pancake:~# pfctl -t vpnfr -Ta 10.1.2.3
# ok not everything, just use the route pushed by the VPN
root@pancake:~# pfctl -t vpnfr -Td 10.1.2.3
root@pancake:~# pfctl -t softvpn -Ta 10.1.2.3

$ cu -dl /dev/cuaU0 -s 115200

INFO:    PSCI Affinity Map:
INFO:      AffInst: Level 0, MPID 0x0, State ON
INFO:      AffInst: Level 0, MPID 0x1, State OFF
INFO:      AffInst: Level 0, MPID 0x2, State OFF
INFO:      AffInst: Level 0, MPID 0x3, State OFF

U-Boot SPL 2017.09 (Sep 13 2017 - 04:48:58)
DRAM: 2048 MiB
Trying to boot from MMC1
NOTICE:  BL3-1: Running on A64/H64 (1689) in SRAM A2 (@0x44000)
NOTICE:  Configuring SPC Controller
NOTICE:  BL3-1: v1.0(debug):20170702
NOTICE:  BL3-1: Built : 04:34:32, Sep 13 2017
NOTICE:  Configuring AXP PMIC
NOTICE:  PMIC: setup successful
NOTICE:  SCPI: dummy stub handler, implementation level: 000000
INFO:    BL3-1: Initializing runtime services
INFO:    BL3-1: Preparing for EL3 exit to normal world
INFO:    BL3-1: Next image address: 0x4a000000, SPSR: 0x3c9

U-Boot 2017.09 (Sep 13 2017 - 04:48:58 -0600) Allwinner Technology

CPU:   Allwinner A64 (SUN50I)
Model: Pine64+
DRAM:  2 GiB
MMC:   SUNXI SD/MMC: 0
*** Warning - bad CRC, using default environment

In:    serial
Out:   serial
Err:   serial
Net:   phy interface7
eth0: ethernet@01c30000
starting USB...
USB0:   USB EHCI 1.00
USB1:   USB OHCI 1.0
scanning bus 0 for devices... 1 USB Device(s) found
       scanning usb for storage devices... 0 Storage Device(s) found
Hit any key to stop autoboot:  0 
switch to partitions #0, OK
mmc0 is current device
Scanning mmc 0:1...
Found EFI removable media binary efi/boot/bootaa64.efi
reading efi/boot/bootaa64.efi
78335 bytes read in 36 ms (2.1 MiB/s)
libfdt fdt_check_header(): FDT_ERR_BADMAGIC
## Starting EFI application at 40080000 ...
Scanning disks on usb...
Scanning disks on mmc...
MMC Device 1 not found
MMC Device 2 not found
MMC Device 3 not found
Found 5 disks
>> OpenBSD/arm64 BOOTAA64 0.8
boot> 
booting sd0a:/bsd: 3861360+574928+511472+807968 [285863+96+451944+239980]=0x831130
type 0x2 pa 0x40000000 va 0x40000000 pages 0x4000 attr 0x8
type 0x7 pa 0x44000000 va 0x40000000 pages 0x4000 attr 0x8
type 0x4 pa 0x48000000 va 0x48000000 pages 0x4 attr 0x8   
type 0x7 pa 0x48005000 va 0x40000000 pages 0x70832 attr 0x8
type 0x2 pa 0xb8837000 va 0xb8837000 pages 0x4 attr 0x8    
type 0x2 pa 0xb883b000 va 0xb883b000 pages 0x4 attr 0x8
type 0x2 pa 0xb883f000 va 0xb883f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8843000 va 0xb8843000 pages 0x4 attr 0x8
type 0x2 pa 0xb8847000 va 0xb8847000 pages 0x4 attr 0x8
type 0x2 pa 0xb884b000 va 0xb884b000 pages 0x4 attr 0x8
type 0x2 pa 0xb884f000 va 0xb884f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8853000 va 0xb8853000 pages 0x4 attr 0x8
type 0x2 pa 0xb8857000 va 0xb8857000 pages 0x4 attr 0x8
type 0x2 pa 0xb885b000 va 0xb885b000 pages 0x4 attr 0x8
type 0x2 pa 0xb885f000 va 0xb885f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8863000 va 0xb8863000 pages 0x4 attr 0x8
type 0x2 pa 0xb8867000 va 0xb8867000 pages 0x4 attr 0x8
type 0x2 pa 0xb886b000 va 0xb886b000 pages 0x4 attr 0x8
type 0x2 pa 0xb886f000 va 0xb886f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8873000 va 0xb8873000 pages 0x4 attr 0x8
type 0x2 pa 0xb8877000 va 0xb8877000 pages 0x4 attr 0x8
type 0x2 pa 0xb887b000 va 0xb887b000 pages 0x4 attr 0x8
type 0x2 pa 0xb887f000 va 0xb887f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8883000 va 0xb8883000 pages 0x4 attr 0x8
type 0x2 pa 0xb8887000 va 0xb8887000 pages 0x4 attr 0x8
type 0x2 pa 0xb888b000 va 0xb888b000 pages 0x4 attr 0x8
type 0x2 pa 0xb888f000 va 0xb888f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8893000 va 0xb8893000 pages 0x4 attr 0x8
type 0x2 pa 0xb8897000 va 0xb8897000 pages 0x4 attr 0x8
type 0x2 pa 0xb889b000 va 0xb889b000 pages 0x4 attr 0x8
type 0x2 pa 0xb889f000 va 0xb889f000 pages 0x4 attr 0x8
type 0x2 pa 0xb88a3000 va 0xb88a3000 pages 0x4 attr 0x8
type 0x2 pa 0xb88a7000 va 0xb88a7000 pages 0x4 attr 0x8
type 0x2 pa 0xb88ab000 va 0xb88ab000 pages 0x4 attr 0x8
type 0x2 pa 0xb88af000 va 0xb88af000 pages 0x4 attr 0x8
type 0x2 pa 0xb88b3000 va 0xb88b3000 pages 0x4 attr 0x8
type 0x2 pa 0xb88b7000 va 0xb88b7000 pages 0x4 attr 0x8
type 0x2 pa 0xb88bb000 va 0xb88bb000 pages 0x4 attr 0x8
type 0x2 pa 0xb88bf000 va 0xb88bf000 pages 0x4 attr 0x8
type 0x2 pa 0xb88c3000 va 0xb88c3000 pages 0x4 attr 0x8
type 0x2 pa 0xb88c7000 va 0xb88c7000 pages 0x4 attr 0x8
type 0x2 pa 0xb88cb000 va 0xb88cb000 pages 0x4 attr 0x8
type 0x2 pa 0xb88cf000 va 0xb88cf000 pages 0x4 attr 0x8
type 0x2 pa 0xb88d3000 va 0xb88d3000 pages 0x4 attr 0x8
type 0x2 pa 0xb88d7000 va 0xb88d7000 pages 0x4 attr 0x8
type 0x2 pa 0xb88db000 va 0xb88db000 pages 0x4 attr 0x8
type 0x2 pa 0xb88df000 va 0xb88df000 pages 0x4 attr 0x8
type 0x2 pa 0xb88e3000 va 0xb88e3000 pages 0x4 attr 0x8
type 0x2 pa 0xb88e7000 va 0xb88e7000 pages 0x4 attr 0x8
type 0x2 pa 0xb88eb000 va 0xb88eb000 pages 0x4 attr 0x8
type 0x2 pa 0xb88ef000 va 0xb88ef000 pages 0x4 attr 0x8
type 0x2 pa 0xb88f3000 va 0xb88f3000 pages 0x4 attr 0x8
type 0x2 pa 0xb88f7000 va 0xb88f7000 pages 0x4 attr 0x8
type 0x2 pa 0xb88fb000 va 0xb88fb000 pages 0x4 attr 0x8
type 0x2 pa 0xb88ff000 va 0xb88ff000 pages 0x4 attr 0x8
type 0x2 pa 0xb8903000 va 0xb8903000 pages 0x4 attr 0x8
type 0x2 pa 0xb8907000 va 0xb8907000 pages 0x4 attr 0x8
type 0x2 pa 0xb890b000 va 0xb890b000 pages 0x4 attr 0x8
type 0x2 pa 0xb890f000 va 0xb890f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8913000 va 0xb8913000 pages 0x4 attr 0x8
type 0x2 pa 0xb8917000 va 0xb8917000 pages 0x4 attr 0x8
type 0x2 pa 0xb891b000 va 0xb891b000 pages 0x4 attr 0x8
type 0x2 pa 0xb891f000 va 0xb891f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8923000 va 0xb8923000 pages 0x4 attr 0x8
type 0x2 pa 0xb8927000 va 0xb8927000 pages 0x4 attr 0x8
type 0x2 pa 0xb892b000 va 0xb892b000 pages 0x4 attr 0x8
type 0x2 pa 0xb892f000 va 0xb892f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8933000 va 0xb8933000 pages 0x4 attr 0x8
type 0x2 pa 0xb8937000 va 0xb8937000 pages 0x4 attr 0x8
type 0x2 pa 0xb893b000 va 0xb893b000 pages 0x4 attr 0x8
type 0x2 pa 0xb893f000 va 0xb893f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8943000 va 0xb8943000 pages 0x4 attr 0x8
type 0x2 pa 0xb8947000 va 0xb8947000 pages 0x4 attr 0x8
type 0x2 pa 0xb894b000 va 0xb894b000 pages 0x4 attr 0x8
type 0x2 pa 0xb894f000 va 0xb894f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8953000 va 0xb8953000 pages 0x4 attr 0x8
type 0x2 pa 0xb8957000 va 0xb8957000 pages 0x4 attr 0x8
type 0x2 pa 0xb895b000 va 0xb895b000 pages 0x4 attr 0x8
type 0x2 pa 0xb895f000 va 0xb895f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8963000 va 0xb8963000 pages 0x4 attr 0x8
type 0x2 pa 0xb8967000 va 0xb8967000 pages 0x4 attr 0x8
type 0x2 pa 0xb896b000 va 0xb896b000 pages 0x4 attr 0x8
type 0x2 pa 0xb896f000 va 0xb896f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8973000 va 0xb8973000 pages 0x4 attr 0x8
type 0x2 pa 0xb8977000 va 0xb8977000 pages 0x4 attr 0x8
type 0x2 pa 0xb897b000 va 0xb897b000 pages 0x4 attr 0x8
type 0x2 pa 0xb897f000 va 0xb897f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8983000 va 0xb8983000 pages 0x4 attr 0x8
type 0x2 pa 0xb8987000 va 0xb8987000 pages 0x4 attr 0x8
type 0x2 pa 0xb898b000 va 0xb898b000 pages 0x4 attr 0x8
type 0x2 pa 0xb898f000 va 0xb898f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8993000 va 0xb8993000 pages 0x4 attr 0x8
type 0x2 pa 0xb8997000 va 0xb8997000 pages 0x4 attr 0x8
type 0x2 pa 0xb899b000 va 0xb899b000 pages 0x4 attr 0x8
type 0x2 pa 0xb899f000 va 0xb899f000 pages 0x4 attr 0x8
type 0x2 pa 0xb89a3000 va 0xb89a3000 pages 0x4 attr 0x8
type 0x2 pa 0xb89a7000 va 0xb89a7000 pages 0x4 attr 0x8
type 0x2 pa 0xb89ab000 va 0xb89ab000 pages 0x4 attr 0x8
type 0x2 pa 0xb89af000 va 0xb89af000 pages 0x4 attr 0x8
type 0x2 pa 0xb89b3000 va 0xb89b3000 pages 0x4 attr 0x8
type 0x2 pa 0xb89b7000 va 0xb89b7000 pages 0x4 attr 0x8
type 0x2 pa 0xb89bb000 va 0xb89bb000 pages 0x4 attr 0x8
type 0x2 pa 0xb89bf000 va 0xb89bf000 pages 0x4 attr 0x8
type 0x2 pa 0xb89c3000 va 0xb89c3000 pages 0x4 attr 0x8
type 0x2 pa 0xb89c7000 va 0xb89c7000 pages 0x4 attr 0x8
type 0x2 pa 0xb89cb000 va 0xb89cb000 pages 0x4 attr 0x8
type 0x2 pa 0xb89cf000 va 0xb89cf000 pages 0x4 attr 0x8
type 0x2 pa 0xb89d3000 va 0xb89d3000 pages 0x4 attr 0x8
type 0x2 pa 0xb89d7000 va 0xb89d7000 pages 0x4 attr 0x8
type 0x2 pa 0xb89db000 va 0xb89db000 pages 0x4 attr 0x8
type 0x2 pa 0xb89df000 va 0xb89df000 pages 0x4 attr 0x8
type 0x2 pa 0xb89e3000 va 0xb89e3000 pages 0x4 attr 0x8
type 0x2 pa 0xb89e7000 va 0xb89e7000 pages 0x4 attr 0x8
type 0x2 pa 0xb89eb000 va 0xb89eb000 pages 0x4 attr 0x8
type 0x2 pa 0xb89ef000 va 0xb89ef000 pages 0x4 attr 0x8
type 0x2 pa 0xb89f3000 va 0xb89f3000 pages 0x4 attr 0x8
type 0x2 pa 0xb89f7000 va 0xb89f7000 pages 0x4 attr 0x8
type 0x2 pa 0xb89fb000 va 0xb89fb000 pages 0x4 attr 0x8
type 0x2 pa 0xb89ff000 va 0xb89ff000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a03000 va 0xb8a03000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a07000 va 0xb8a07000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a0b000 va 0xb8a0b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a0f000 va 0xb8a0f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a13000 va 0xb8a13000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a17000 va 0xb8a17000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a1b000 va 0xb8a1b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a1f000 va 0xb8a1f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a23000 va 0xb8a23000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a27000 va 0xb8a27000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a2b000 va 0xb8a2b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a2f000 va 0xb8a2f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a33000 va 0xb8a33000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a37000 va 0xb8a37000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a3b000 va 0xb8a3b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a3f000 va 0xb8a3f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a43000 va 0xb8a43000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a47000 va 0xb8a47000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a4b000 va 0xb8a4b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a4f000 va 0xb8a4f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a53000 va 0xb8a53000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a57000 va 0xb8a57000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a5b000 va 0xb8a5b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a5f000 va 0xb8a5f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a63000 va 0xb8a63000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a67000 va 0xb8a67000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a6b000 va 0xb8a6b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a6f000 va 0xb8a6f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a73000 va 0xb8a73000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a77000 va 0xb8a77000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a7b000 va 0xb8a7b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a7f000 va 0xb8a7f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a83000 va 0xb8a83000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a87000 va 0xb8a87000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a8b000 va 0xb8a8b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a8f000 va 0xb8a8f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a93000 va 0xb8a93000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a97000 va 0xb8a97000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a9b000 va 0xb8a9b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8a9f000 va 0xb8a9f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8aa3000 va 0xb8aa3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8aa7000 va 0xb8aa7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8aab000 va 0xb8aab000 pages 0x4 attr 0x8
type 0x2 pa 0xb8aaf000 va 0xb8aaf000 pages 0x4 attr 0x8
type 0x2 pa 0xb8ab3000 va 0xb8ab3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8ab7000 va 0xb8ab7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8abb000 va 0xb8abb000 pages 0x4 attr 0x8
type 0x2 pa 0xb8abf000 va 0xb8abf000 pages 0x4 attr 0x8
type 0x2 pa 0xb8ac3000 va 0xb8ac3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8ac7000 va 0xb8ac7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8acb000 va 0xb8acb000 pages 0x4 attr 0x8
type 0x2 pa 0xb8acf000 va 0xb8acf000 pages 0x4 attr 0x8
type 0x2 pa 0xb8ad3000 va 0xb8ad3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8ad7000 va 0xb8ad7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8adb000 va 0xb8adb000 pages 0x4 attr 0x8
type 0x2 pa 0xb8adf000 va 0xb8adf000 pages 0x4 attr 0x8
type 0x2 pa 0xb8ae3000 va 0xb8ae3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8ae7000 va 0xb8ae7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8aeb000 va 0xb8aeb000 pages 0x4 attr 0x8
type 0x2 pa 0xb8aef000 va 0xb8aef000 pages 0x4 attr 0x8
type 0x2 pa 0xb8af3000 va 0xb8af3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8af7000 va 0xb8af7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8afb000 va 0xb8afb000 pages 0x4 attr 0x8
type 0x2 pa 0xb8aff000 va 0xb8aff000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b03000 va 0xb8b03000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b07000 va 0xb8b07000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b0b000 va 0xb8b0b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b0f000 va 0xb8b0f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b13000 va 0xb8b13000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b17000 va 0xb8b17000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b1b000 va 0xb8b1b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b1f000 va 0xb8b1f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b23000 va 0xb8b23000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b27000 va 0xb8b27000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b2b000 va 0xb8b2b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b2f000 va 0xb8b2f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b33000 va 0xb8b33000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b37000 va 0xb8b37000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b3b000 va 0xb8b3b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b3f000 va 0xb8b3f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b43000 va 0xb8b43000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b47000 va 0xb8b47000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b4b000 va 0xb8b4b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b4f000 va 0xb8b4f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b53000 va 0xb8b53000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b57000 va 0xb8b57000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b5b000 va 0xb8b5b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b5f000 va 0xb8b5f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b63000 va 0xb8b63000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b67000 va 0xb8b67000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b6b000 va 0xb8b6b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b6f000 va 0xb8b6f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b73000 va 0xb8b73000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b77000 va 0xb8b77000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b7b000 va 0xb8b7b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b7f000 va 0xb8b7f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b83000 va 0xb8b83000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b87000 va 0xb8b87000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b8b000 va 0xb8b8b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b8f000 va 0xb8b8f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b93000 va 0xb8b93000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b97000 va 0xb8b97000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b9b000 va 0xb8b9b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8b9f000 va 0xb8b9f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8ba3000 va 0xb8ba3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8ba7000 va 0xb8ba7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8bab000 va 0xb8bab000 pages 0x4 attr 0x8
type 0x2 pa 0xb8baf000 va 0xb8baf000 pages 0x4 attr 0x8
type 0x2 pa 0xb8bb3000 va 0xb8bb3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8bb7000 va 0xb8bb7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8bbb000 va 0xb8bbb000 pages 0x4 attr 0x8
type 0x2 pa 0xb8bbf000 va 0xb8bbf000 pages 0x4 attr 0x8
type 0x2 pa 0xb8bc3000 va 0xb8bc3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8bc7000 va 0xb8bc7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8bcb000 va 0xb8bcb000 pages 0x4 attr 0x8
type 0x2 pa 0xb8bcf000 va 0xb8bcf000 pages 0x4 attr 0x8
type 0x2 pa 0xb8bd3000 va 0xb8bd3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8bd7000 va 0xb8bd7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8bdb000 va 0xb8bdb000 pages 0x4 attr 0x8
type 0x2 pa 0xb8bdf000 va 0xb8bdf000 pages 0x4 attr 0x8
type 0x2 pa 0xb8be3000 va 0xb8be3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8be7000 va 0xb8be7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8beb000 va 0xb8beb000 pages 0x4 attr 0x8
type 0x2 pa 0xb8bef000 va 0xb8bef000 pages 0x4 attr 0x8
type 0x2 pa 0xb8bf3000 va 0xb8bf3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8bf7000 va 0xb8bf7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8bfb000 va 0xb8bfb000 pages 0x4 attr 0x8
type 0x2 pa 0xb8bff000 va 0xb8bff000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c03000 va 0xb8c03000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c07000 va 0xb8c07000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c0b000 va 0xb8c0b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c0f000 va 0xb8c0f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c13000 va 0xb8c13000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c17000 va 0xb8c17000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c1b000 va 0xb8c1b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c1f000 va 0xb8c1f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c23000 va 0xb8c23000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c27000 va 0xb8c27000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c2b000 va 0xb8c2b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c2f000 va 0xb8c2f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c33000 va 0xb8c33000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c37000 va 0xb8c37000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c3b000 va 0xb8c3b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c3f000 va 0xb8c3f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c43000 va 0xb8c43000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c47000 va 0xb8c47000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c4b000 va 0xb8c4b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c4f000 va 0xb8c4f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c53000 va 0xb8c53000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c57000 va 0xb8c57000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c5b000 va 0xb8c5b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c5f000 va 0xb8c5f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c63000 va 0xb8c63000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c67000 va 0xb8c67000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c6b000 va 0xb8c6b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c6f000 va 0xb8c6f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c73000 va 0xb8c73000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c77000 va 0xb8c77000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c7b000 va 0xb8c7b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c7f000 va 0xb8c7f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c83000 va 0xb8c83000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c87000 va 0xb8c87000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c8b000 va 0xb8c8b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c8f000 va 0xb8c8f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c93000 va 0xb8c93000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c97000 va 0xb8c97000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c9b000 va 0xb8c9b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8c9f000 va 0xb8c9f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8ca3000 va 0xb8ca3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8ca7000 va 0xb8ca7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8cab000 va 0xb8cab000 pages 0x4 attr 0x8
type 0x2 pa 0xb8caf000 va 0xb8caf000 pages 0x4 attr 0x8
type 0x2 pa 0xb8cb3000 va 0xb8cb3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8cb7000 va 0xb8cb7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8cbb000 va 0xb8cbb000 pages 0x4 attr 0x8
type 0x2 pa 0xb8cbf000 va 0xb8cbf000 pages 0x4 attr 0x8
type 0x2 pa 0xb8cc3000 va 0xb8cc3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8cc7000 va 0xb8cc7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8ccb000 va 0xb8ccb000 pages 0x4 attr 0x8
type 0x2 pa 0xb8ccf000 va 0xb8ccf000 pages 0x4 attr 0x8
type 0x2 pa 0xb8cd3000 va 0xb8cd3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8cd7000 va 0xb8cd7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8cdb000 va 0xb8cdb000 pages 0x4 attr 0x8
type 0x2 pa 0xb8cdf000 va 0xb8cdf000 pages 0x4 attr 0x8
type 0x2 pa 0xb8ce3000 va 0xb8ce3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8ce7000 va 0xb8ce7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8ceb000 va 0xb8ceb000 pages 0x4 attr 0x8
type 0x2 pa 0xb8cef000 va 0xb8cef000 pages 0x4 attr 0x8
type 0x2 pa 0xb8cf3000 va 0xb8cf3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8cf7000 va 0xb8cf7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8cfb000 va 0xb8cfb000 pages 0x4 attr 0x8
type 0x2 pa 0xb8cff000 va 0xb8cff000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d03000 va 0xb8d03000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d07000 va 0xb8d07000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d0b000 va 0xb8d0b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d0f000 va 0xb8d0f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d13000 va 0xb8d13000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d17000 va 0xb8d17000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d1b000 va 0xb8d1b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d1f000 va 0xb8d1f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d23000 va 0xb8d23000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d27000 va 0xb8d27000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d2b000 va 0xb8d2b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d2f000 va 0xb8d2f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d33000 va 0xb8d33000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d37000 va 0xb8d37000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d3b000 va 0xb8d3b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d3f000 va 0xb8d3f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d43000 va 0xb8d43000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d47000 va 0xb8d47000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d4b000 va 0xb8d4b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d4f000 va 0xb8d4f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d53000 va 0xb8d53000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d57000 va 0xb8d57000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d5b000 va 0xb8d5b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d5f000 va 0xb8d5f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d63000 va 0xb8d63000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d67000 va 0xb8d67000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d6b000 va 0xb8d6b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d6f000 va 0xb8d6f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d73000 va 0xb8d73000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d77000 va 0xb8d77000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d7b000 va 0xb8d7b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d7f000 va 0xb8d7f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d83000 va 0xb8d83000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d87000 va 0xb8d87000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d8b000 va 0xb8d8b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d8f000 va 0xb8d8f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d93000 va 0xb8d93000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d97000 va 0xb8d97000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d9b000 va 0xb8d9b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8d9f000 va 0xb8d9f000 pages 0x4 attr 0x8
type 0x2 pa 0xb8da3000 va 0xb8da3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8da7000 va 0xb8da7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8dab000 va 0xb8dab000 pages 0x4 attr 0x8
type 0x2 pa 0xb8daf000 va 0xb8daf000 pages 0x4 attr 0x8
type 0x2 pa 0xb8db3000 va 0xb8db3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8db7000 va 0xb8db7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8dbb000 va 0xb8dbb000 pages 0x4 attr 0x8
type 0x2 pa 0xb8dbf000 va 0xb8dbf000 pages 0x4 attr 0x8
type 0x2 pa 0xb8dc3000 va 0xb8dc3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8dc7000 va 0xb8dc7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8dcb000 va 0xb8dcb000 pages 0x4 attr 0x8
type 0x2 pa 0xb8dcf000 va 0xb8dcf000 pages 0x4 attr 0x8
type 0x2 pa 0xb8dd3000 va 0xb8dd3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8dd7000 va 0xb8dd7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8ddb000 va 0xb8ddb000 pages 0x4 attr 0x8
type 0x2 pa 0xb8ddf000 va 0xb8ddf000 pages 0x4 attr 0x8
type 0x2 pa 0xb8de3000 va 0xb8de3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8de7000 va 0xb8de7000 pages 0x4 attr 0x8
type 0x2 pa 0xb8deb000 va 0xb8deb000 pages 0x4 attr 0x8
type 0x2 pa 0xb8def000 va 0xb8def000 pages 0x4 attr 0x8
type 0x2 pa 0xb8df3000 va 0xb8df3000 pages 0x4 attr 0x8
type 0x2 pa 0xb8df7000 va 0xb8df7000 pages 0x1 attr 0x8
type 0x2 pa 0xb8df8000 va 0xb8df8000 pages 0x4 attr 0x8
type 0x2 pa 0xb8dfc000 va 0xb8dfc000 pages 0x2 attr 0x8
type 0x2 pa 0xb8dfe000 va 0xb8dfe000 pages 0x1 attr 0x8
type 0x2 pa 0xb8dff000 va 0xb8dff000 pages 0x1 attr 0x8
type 0x2 pa 0xb8e00000 va 0xb8e00000 pages 0x1 attr 0x8
type 0x2 pa 0xb8e01000 va 0xb8e01000 pages 0x4 attr 0x8
type 0x2 pa 0xb8e05000 va 0xb8e05000 pages 0x1 attr 0x8
type 0x2 pa 0xb8e06000 va 0xb8e06000 pages 0x4 attr 0x8
type 0x2 pa 0xb8e0a000 va 0xb8e0a000 pages 0x1 attr 0x8
type 0x2 pa 0xb8e0b000 va 0xb8e0b000 pages 0x4 attr 0x8
type 0x2 pa 0xb8e0f000 va 0xb8e0f000 pages 0x2 attr 0x8
type 0x2 pa 0xb8e11000 va 0xb8e11000 pages 0x1 attr 0x8
type 0x2 pa 0xb8e12000 va 0xb8e12000 pages 0x1 attr 0x8
type 0x2 pa 0xb8e13000 va 0xb8e13000 pages 0x1 attr 0x8
type 0x2 pa 0xb8e14000 va 0xb8e14000 pages 0x4 attr 0x8
type 0x2 pa 0xb8e18000 va 0xb8e18000 pages 0x1 attr 0x8
type 0x2 pa 0xb8e19000 va 0xb8e19000 pages 0x4 attr 0x8
type 0x2 pa 0xb8e1d000 va 0xb8e1d000 pages 0x2 attr 0x8
type 0x2 pa 0xb8e1f000 va 0xb8e1f000 pages 0x1 attr 0x8
type 0x2 pa 0xb8e20000 va 0xb8e20000 pages 0x1 attr 0x8
type 0x2 pa 0xb8e21000 va 0xb8e21000 pages 0x100 attr 0x8
type 0x6 pa 0xb8f21000 va 0xb8f21000 pages 0x1 attr 0x8000000000000008
type 0x2 pa 0xb8f22000 va 0xb8f22000 pages 0x13 attr 0x8              
type 0x2 pa 0xb8f35000 va 0xb8f35000 pages 0x5085 attr 0x8
type 0x5 pa 0xbdfba000 va 0xbdfba000 pages 0x1 attr 0x8000000000000008
type 0x2 pa 0xbdfbb000 va 0xb8f35000 pages 0x2045 attr 0x8            
[ using 978720 bytes of bsd ELF symbol table ]            
Copyright (c) 1982, 1986, 1989, 1991, 1993    
    The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2017 OpenBSD. All rights reserved.  https://www.OpenBSD.org

OpenBSD 6.2-current (GENERIC) #47: Wed Oct 18 11:56:57 MDT 2017
    deraadt@arm64.openbsd.org:/usr/src/sys/arch/arm64/compile/GENERIC
real mem  = 2021859328 (1928MB)                                      
avail mem = 1935818752 (1846MB)
mainbus0 at root: Pine64+      
cpu0 at mainbus0: ARM Cortex-A53 r0p4
psci0 at mainbus0                    
agtimer0 at mainbus0: tick rate 24000 KHz
simplebus0 at mainbus0: "soc"            
sxiccmu0 at simplebus0       
sxipio0 at simplebus0: 103 pins
sximmc0 at simplebus0          
sdmmc0 at sximmc0: 4-bit, sd high-speed, mmc high-speed, dma
ehci0 at simplebus0                                         
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 configuration 1 interface 0 "Generic EHCI root hub" rev 2.00/1.00 addr 1
com0 at simplebus0: ns16550, no working fifo                                          
com0: console                               
ampintc0 at simplebus0 nirq 224, ncpu 4: "interrupt-controller"
sxirtc0 at simplebus0                                          
dwxe0 at simplebus0: address 02:ba:b0:1b:de:88
rgephy0 at dwxe0 phy 0: RTL8169S/8110S/8211 PHY, rev. 5
rgephy1 at dwxe0 phy 1: RTL8169S/8110S/8211 PHY, rev. 5
gpio0 at sxipio0: 32 pins                              
gpio1 at sxipio0: 32 pins
gpio2 at sxipio0: 32 pins
gpio3 at sxipio0: 32 pins
gpio4 at sxipio0: 32 pins
gpio5 at sxipio0: 32 pins
gpio6 at sxipio0: 32 pins
gpio7 at sxipio0: 32 pins
scsibus0 at sdmmc0: 2 targets, initiator 0
sd0 at scsibus0 targ 1 lun 0: <SD/MMC, USD00, 0010> SCSI2 0/direct removable
sd0: 15080MB, 512 bytes/sector, 30883840 sectors                            
vscsi0 at root                                  
scsibus1 at vscsi0: 256 targets
softraid0 at root              
scsibus2 at softraid0: 256 targets
bootfile: sd0a:/bsd               
boot device: sd0   
root on sd0a (aad98897a9859bd0.a) swap on sd0b dump on sd0b
Automatic boot in progress: starting file system checks.   
/dev/sd0a (aad98897a9859bd0.a): file system is clean; not checking
/dev/sd0l (aad98897a9859bd0.l): file system is clean; not checking
/dev/sd0d (aad98897a9859bd0.d): file system is clean; not checking
/dev/sd0f (aad98897a9859bd0.f): file system is clean; not checking
/dev/sd0g (aad98897a9859bd0.g): file system is clean; not checking
/dev/sd0h (aad98897a9859bd0.h): file system is clean; not checking
/dev/sd0k (aad98897a9859bd0.k): file system is clean; not checking
/dev/sd0j (aad98897a9859bd0.j): file system is clean; not checking
/dev/sd0e (aad98897a9859bd0.e): file system is clean; not checking
setting tty flags
pf enabled
starting network
dwxe0: DHCPREQUEST to 255.255.255.255
dwxe0: DHCPNACK from 10.20.20.254 (00:0d:b9:43:9f:fc)
dwxe0: DHCPDISCOVER - interval 1
dwxe0: DHCPOFFER from 10.20.20.254 (00:0d:b9:43:9f:fc)
dwxe0: DHCPREQUEST to 255.255.255.255
dwxe0: DHCPACK from 10.20.20.254 (00:0d:b9:43:9f:fc)
dwxe0: bound to 10.20.20.15 -- renewal in 21600 seconds
reordering libraries: done.
openssl: generating isakmpd/iked RSA keys... done.
ssh-keygen: generating new host keys: RSA DSA ECDSA ED25519 
starting early daemons: syslogd pflogd ntpd.
starting RPC daemons:.
savecore: no core dump
checking quotas: done.
clearing /tmp
kern.securelevel: 0 -> 1
creating runtime link editor directory cache.
preserving editor files.
starting network daemons: sshd smtpd sndiod.
running rc.firsttime
Path to firmware: http://firmware.openbsd.org/firmware/snapshots/
No devices found which need firmware files to be downloaded.
starting local daemons: cron.
Wed Oct 18 17:52:37 MDT 2017

OpenBSD/arm64 (alpaga.chown.me) (console)

login:

$ oathtool --totp -b deafcafe
405723

otpauth://totp/Example:foo@example.com?secret=DEAFCAFE&issuer=Example

SUDO=/usr/bin/doas
PATCH_DEBUG=Yes

cd /usr/ports && mkdir mystuff

cd /usr/ports/mystuff && mkdir devel && cd devel
# copy the ports directory
cp -R /usr/ports/devel/foo .
cd foo

make patch

make fake

make update-plist

make REVISION=999 plist

portspy3plist

portsldc

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
#!/bin/sh
PATH='/bin:/usr/bin:/usr/local/bin'

# needs https://github.com/diafygi/acme-tiny/

# if it's the first time
# openssl genrsa 4096 > master.key
# ftp -o - https://letsencrypt.org/certs/lets-encrypt-x1-cross-signed.pem \
#       > intermediate.pem

LEdir=/home/danj/LE
ACME_TINY=/home/danj/acme-tiny/acme_tiny.py

_date=$(date "+%Y-%m-%d")

if [[ -z ${1} || -z ${2} ]]; then
        echo "usage: ${0##*/} FQDN new"
        echo "       ${0##*/} FQDN update"
        exit 1
fi

_FQDN="${1}"
_mode="${2}"

if [[ "${_mode}" = new ]]; then
        echo "new domain"

        # generate a domain private key (if you haven't already)
        openssl genrsa 4096 > "${LEdir}/key/${_FQDN}.key"

        # for a single domain
        openssl req -new -sha256 \
                -key "${LEdir}/key/${_FQDN}.key" \
                -subj "/CN=${_FQDN}" > "${LEdir}/csr/${_FQDN}.csr"

elif [[ "${_mode}" = update ]]; then
        echo "update"
else
        echo "which mode?"
        exit 1
fi

# make some challenge folder (modify to suit your needs)
mkdir -p "/var/www/${_FQDN}/.well-known/acme-challenge/"

# run the script on your server
python2.7 "${ACME_TINY}" \
        --account-key "${LEdir}/key/master.key" \
        --csr "${LEdir}/csr/${_FQDN}.csr" \
        --acme-dir "/var/www/${_FQDN}/.well-known/acme-challenge/" \
        > "${LEdir}/cert/${_FQDN}-${_date}.crt"

[[ -d "/var/www/${_FQDN}/.well-known" ]] \
        && rm -rf "/var/www/${_FQDN}/.well-known"

if [[ ${_mode} = update ]]; then
        cp "${LEdir}/pem/${_FQDN}.pem" "${LEdir}/pem/${_FQDN}.pem.old"
fi

cat "${LEdir}/cert/${_FQDN}-${_date}.crt" \
        "${LEdir}/pem/intermediate.pem" \
        "${LEdir}/key/${_FQDN}.key" \
        > "${LEdir}/pem/${_FQDN}-${_date}.pem"

$ ksh script.sh chown.me new
new domain
Generating RSA private key, 4096 bit long modulus
.............++
..................................................++
e is 65537 (0x10001)
Parsing account key...
Parsing CSR...
Registering account...
Already registered!
Verifying chown.me...
chown.me verified!
Signing certificate...
Certificate signed!

[req]
distinguished_name = req_distinguished_name
req_extensions = v3_req
default_md = sha256
default_bits = 4096

[req_distinguished_name]
countryName = FR
countryName_default = FR
stateOrProvinceName = France
stateOrProvinceName_default = France
localityName = France
localityName_default = France
organizationalUnitName  = Vigdis
organizationalUnitName_default  = Vigdis
commonName = chown.me
commonName_default = chown.me
commonName_max  = 64

[ v3_req ]
basicConstraints = CA:FALSE
keyUsage = digitalSignature, keyEncipherment

openssl genrsa -out chown.key 4096
openssl req -new -out chown.csr -key chown.key -config chown.cnf
openssl req -in chown.csr -noout -text |less

    location "/blog*" {
            root "/blog"
            root strip 1
    }

    location "/iota*" {
            root "/iota"
            root strip 1
            directory auto index
    }

    location "/obsd*" {
            root "/obsd/www"
            root strip 1
    }

global
        log 127.0.0.1   local0 debug
        maxconn 1024
        chroot /var/haproxy
        uid 604
        gid 604
        daemon
        pidfile /var/run/haproxy.pid
        tune.ssl.default-dh-param 2048
        ssl-default-bind-options no-sslv3 no-tls-tickets
        ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
        ssl-default-server-options no-sslv3 no-tls-tickets
        ssl-default-server-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS

defaults
        log     global
        mode    http
        option  httplog
        log-format %ci:%cp\ %ft\ %b/%s\ %ST\ %hr\ %hs\ %{+Q}r
        option  dontlognull
        option  redispatch
        retries 3
        maxconn 2000

      80    +                        +------------+       +----------+
            |                     80 |            |  8080 |          |
   +--------------------------------->            +------->  httpd   |
            |                        |  haproxy   |       |          |
            |  +--------------+      |            |       |          |
            |  |              | 8443 |            |       +----------+
   +----------->     sslh     +------>            |                   
            |  |              |      |            |                   
      443   +  +-----+--------+      +------------+                   
                     |                                                
                  22 |                                                
                +----v-----+                                          
                |          |                                          
                |  sshd    |                                          
                |          |                                          
                |          |                                          
                +----------+                                          

frontend http
        bind *:80
        bind 2001:910:1322:1:dead:beef:cafe:1:80
        http-request redirect scheme https if { hdr(host) -i somesikritdomain.chown.me } !{ ssl_fc }
        default_backend httpd

frontend https
        bind *:8443 ssl crt /etc/ssl/pki/server-haproxy.pem crt /etc/ssl/pki/wild-haproxy.pem accept-proxy
        rspadd Strict-Transport-Security:\ max-age=31536000
        default_backend httpd

backend httpd
        option forwardfor
        option httpchk GET /check/index.html HTTP/1.0
        server www 127.0.0.1:8080 check

   80  +           +------------+       +----------+
       |           |            |  8080 |          |
+------------------>            +------->  httpd   |
       |           |  haproxy   |       |          |
       |           |            |       |          |
       |           |            |       +----------+
+------------------>            |                   
       |           |            |                   
  443  +           +------+-----+                   
                          |                         
                       22 |                         
                   +------+------+                  
                   |             |                  
                   |    sshd     |                  
                   |             |                  
                   +-------------+    

listen front
        bind *:443
        bind 2001:910:1322:1:dead:beef:cafe:1:443
        mode tcp
        option tcplog
        tcp-request inspect-delay 2s
        acl is_ssl req.ssl_ver gt 0
        tcp-request content accept if is_ssl
        use_backend loop_ssl if is_ssl
        server local 127.0.0.1:22

backend loop_ssl
        mode tcp
        server ssl 127.0.0.1:1443 send-proxy

frontend http
        bind *:80
        bind 2001:910:1322:1:dead:beef:cafe:1:80
        http-request redirect scheme https if { hdr(host) -i somesikritdomain.chown.me } !{ ssl_fc }
        default_backend httpd

frontend https
        bind 127.0.0.1:1443 ssl crt /etc/ssl/pki/server-haproxy.pem crt /etc/ssl/pki/wild-haproxy.pem accept-proxy
        rspadd Strict-Transport-Security:\ max-age=31536000
        default_backend httpd

backend httpd
        option forwardfor
        option httpchk GET /check/index.html HTTP/1.0
        server www 127.0.0.1:8080 check

location "/check/*" {
    no log
}

cu -s 115200 -l /dev/ttyU0

stty com0 115200
set tty com0

# ls hostname*
hostname.pppoe0 hostname.re0    hostname.re1    hostname.re2    hostname.trunk0 hostname.vlan10 hostname.vlan20 hostname.vlan30

trunkproto lacp trunkport re0 trunkport re2
up

vlandev trunk0
inet 10.250.250.1/24
inet6 2001:910:1322:250::1 64

$ fdisk -e wd1
$ disklabel -E wd1 # on créé juste la partition p en RAID
$ bioctl -c C -l /dev/wd1p softraid0

$ dd if=/dev/zero of=/dev/rsd1c bs=1m count=1
$ fdisk -e sd1 # on créé la partition a
$ disklabel -E sd1

$ echo "92915934093122c04f4711291f8fae282ef56022" > /etc/passphrase

-rw-------  1 root  wheel    123 Nov  8 17:59 /etc/passphrase

$ disklabel wd1 | grep duid
duid: 4d498d4248c8d056
$ disklabel sd1 | grep duid
duid: 384c27964f6e987d

$ tail -n 1 /etc/fstab
b1e264fc29000110.a /dataporn ffs rw,nodev,nosuid,softdep,noauto 0 0

bioctl -c C -l 4d498d4248c8d056.p -p /etc/passphrase  softraid0
echo "check /dataporn"; fsck -p /dataporn; mount -s /dataporn

 “Encryption works. Properly implemented strong crypto systems are
 one of the few things that you can rely on. Unfortunately,
 endpoint security is so terrifically weak that NSA can frequently
 find ways around it.”

pkg_add go mercurial

export GOPATH=/home/myuser/gocode

go get github.com/agl/xmpp-client

$ ls gocode/
bin/ pkg/ src/

"Password": "f6fab8747331ca8fc8b7fdabf81f822f256d647e",

ServerCertificateSHA256 string `json:",omitempty"`

"ServerCertificateSHA256": "5c5f28ea20b09c71fca7442569b8d56f11907a1ab0ce2ada998755b1d755b207"

> /help
* (9:51PM) /add <user>                            Request a subscription to another user's presence
* (9:51PM) /away                                  Set your status to Away
* (9:51PM) /chat                                  Set your status to Available for Chat
* (9:51PM) /confirm <user>                        Confirm an inbound subscription request
* (9:51PM) /deny <user>                           Deny an inbound subscription request
* (9:51PM) /dnd                                   Set your status to Busy / Do Not Disturb
* (9:51PM) /help                                  List known commands
* (9:51PM) /nopaste                               Stop interpreting text verbatim
* (9:51PM) /online                                Set your status to Available / Online
* (9:51PM) /otr-auth <user> <secret>              Authenticate a secure peer with a mutual, shared secret
* (9:51PM) /otr-authoob <user> <fingerprint>      Authenticate a secure peer with out-of-band fingerprint verification
* (9:51PM) /otr-authqa <user> <question> <secret> Authenticate a secure peer with a question and answer
* (9:51PM) /otr-end <user>                        End an OTR session
* (9:51PM) /otr-info                              Print OTR information such as OTR fingerprint
* (9:51PM) /otr-start <user>                      Start an OTR session with the given user
* (9:51PM) /paste                                 Start interpreting text verbatim
* (9:51PM) /quit                                  Quit the program
* (9:51PM) /rostereditdone                        Load the edited roster from disk
* (9:51PM) /rosteredit                            Write the roster to disk
* (9:51PM) /roster [--online]                     Display the current roster
* (9:51PM) /statusupdates                         Toggle if status updates are displayed
* (9:51PM) /version <user>                        Ask a Jabber client for its version
* (9:51PM) /xa                                    Set your status to Extended Away

 The trunk interface allows aggregation of multiple network interfaces as
 one virtual trunk interface.

 failover     Sends and receives traffic only through the master port.  If
              the master port becomes unavailable, the next active port is
              used.  The first interface added is the master port; any
              interfaces added after that are used as failover devices.

 The driver currently supports the trunk protocols broadcast, failover,
 lacp, loadbalance, none, and roundrobin (the default).

$ ifconfig trunk0 
trunk0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        lladdr f0:de:f1:09:c7:94
        priority: 0
        trunk: trunkproto failover
                trunkport iwn0 
                trunkport em0 master,active
        groups: trunk egress

$ ifconfig trunk0
trunk0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        lladdr f0:de:f1:09:c7:94
        priority: 0
        trunk: trunkproto failover
                trunkport iwn0 active
                trunkport em0 master
        groups: trunk egress

# cat /etc/hostname.em0 # l'interface filaire
up

# cat /etc/hostname.iwn0
nwid puffynet
wpakey mysecretkey
up

# cat /etc/hostname.trunk0
trunkproto failover trunkport em0
trunkport iwn0
dhcp
rtsol # on est en 2014 quand même

dmesg | grep wd
dmesg | grep sd
fdisk -i sd0

disklabel -E sd0
a # on crée un nouvelle partition
p # on prend la lettre p
# on laisse l'offset par défaut
# on prend tout le disque
RAID
w
q

bioctl -c C -l sd0p softraid0

pkg_add xfce xfce-extras

pkg_add claws-mail emacs evince firefox keepassx libreoffice mplayer mumble nmap pidgin pidgin-otr vim vlc youtube-dl

echo "apmd_flags=\"-C\"" >> /etc/rc.conf.local

canouan@ardoine:/etc/apm$ ls -l
total 4
-rwxr--r--  1 canouan  canouan  86 Mar 26 07:44 suspend*
canouan@ardoine:/etc/apm$ cat suspend
#!/bin/sh
sudo -u canouan env DISPLAY=:0 XAUTHORITY=/home/canouan/.Xauthority xlock &

sudo openvpn /root/ovpn.fdn

ifconfig tun0 inet6 2001:910:1322::1/128
route add -inet6 -iface default 2001:910:1322::1

ifconfig vr2 inet6 2001:910:1322:1::1/64

rtadvd vr2 # vr2 aka $int_if

pass on $int_if proto icmp6

 rtsold should be used on IPv6 hosts (non-router nodes) only.  The
 net.inet6.ip6.forwarding sysctl(8) should be set to zero and the
 net.inet6.ip6.accept_rtadv and net.inet6.icmp6.rediraccept sysctl(8)
 should be set to a non-zero value (see also the -F option below).

ifconfig jme0 inet6 2001:910:1322:1:dead:beef:cafe:1
route add -inet6  default 2001:910:1322:1::1

 family      Specify which type of Internet protocol family to prefer, if
             a host is reachable using different address families.  By
             default IPv4 addresses are queried first, and then IPv6
             addresses.  The syntax is:

                   family family [family]

             A maximum of two families can be specified, where family can
             be any of:

                   inet4     IPv4 queries.
                   inet6     IPv6 queries.

family inet6 inet4

zone "2.2.3.1.0.1.9.0.1.0.0.2.ip6.arpa" {
    type master;
    file "master/db.rev.vpn6";
    allow-transfer {adresse.ip.du.ns2;};
    allow-query{any;};
    notify yes;
};

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

This is a uselesss text.

- -- 
Vigdis
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=yvt4
-----END PGP SIGNATURE-----

pki chown.me certificate "/etc/mail/certs/chown.me.crt" 
pki chown.me key "/etc/mail/certs/chown.me.key"

listen on lo0
listen on egress tls pki chown.me
listen on egress port submission tls pki chown.me auth

table aliases db:/etc/mail/aliases.db

accept for local alias <aliases> deliver to maildir
accept from any for domain chown.me alias <aliases> deliver to maildir
accept for any relay

spamd_flags="-v -G 3:4:864"

_smtpq:*:103:103::0:0:SMTP Daemon:/var/empty:/sbin/nologin

_smtpq:*:103:

cd /var/spool/smtpd
chown -R _smtpq corrupt incoming purge queue temporary

/etc/rc.d/smtpd restart

Mozilla/5.0 (X11; OpenBSD amd64; rv:25.0) Gecko/20100101 Firefox/25.0

openssl genrsa -out /etc/ssl/private/server.key 2048

openssl req -new -key /etc/ssl/private/server.key -out /etc/ssl/private/server.csr

openssl x509 -sha256 -req -days 365 -in /etc/ssl/private/server.csr \
   -signkey /etc/ssl/private/server.key -out /etc/ssl/server.crt

#HiddenServiceDir /var/lib/tor/hidden_service/
#HiddenServicePort 22 127.0.0.1:22

/var/lib/tor/hidden_service# ls
hostname  private_key

# cat hostname 
l4dr3ss3duH5.onion

socat TCP4-LISTEN:4252,fork SOCKS4A:127.0.0.1:l4dr3ss3duH5.onion:22,socksport=9050

ssh user@127.0.0.1 -p 4252

$ man ssh
[...]
     -R [bind_address:]port:host:hostport
         Specifies that the given port on the remote (server) host is to be forwarded to the given host
         and port on the local side.  This works by allocating a socket to listen to port on the remote
         side, and whenever a connection is made to this port, the connection is forwarded over the
         secure channel, and a connection is made to host port hostport from the local machine.
[...]

machinenatée$ ssh -R 19999:localhost:22 user@pclocal

pclocal$ ssh user@localhost -p 19999

Why are we interested in HTTP ?
Because nearly everything a typical user does on the Internet uses HTTP

/usr/ports$ make search key=gopher
Port:   gophernicus-1.4p0
Path:   net/gophernicus
Info:   modern gopher server

cd net/gophernicus
make install

pkg_add gophernicus

 The pfstatd daemon queries statistics from the packet filter device pf(4)
 and returns them in text form to network clients (like pfstat) connecting
 through TCP.

pfstatd_flags="-a 10.19.18.1"

set loginterface pppoe0

pfstat -q -d /var/db/pfstat.db -r 10.19.18.1
pfstat -p -d /var/db/pfstat.db

*       *       *       *       *       /usr/local/bin/pfstat -q -d /var/db/pfstat.db -r 10.19.18.1
*/5     *       *       *       *       /usr/local/bin/pfstat -p -d /var/db/pfstat.db
25      3       *       *       *       /usr/local/bin/pfstat -t 30 -d /var/db/pfstat.db

up mediaopt hostap mode 11g chan 1 nwid ILovePuffy
inet 10.19.19.1/24

subnet 10.19.19.0 netmask 255.255.255.0 {
        option routers 10.19.19.1;

        range 10.19.19.101 10.19.19.221;
        host laptopwifi {
                hardware ethernet 00:11:22:33:44:55;
                fixed-address 10.19.19.40;
        }
}

match out on $ext_if inet from <authpf_users> nat-to $ip_publique
pass in on $wifi_if proto tcp from !<authpf_users> to any rdr-to $server port 9050
pass in on $wifi_if proto tcp from !<authpf_users> to any port { 80, 443 } rdr-to (self) port 80
pass in on $wifi_if proto tcp to 10.19.19.1 port ssh
pass in on $wifi_if proto { tcp, udp } to $server port domain
pass on $wifi_if from <authpf_users>

SocksPort 9050 
SocksPort 10.19.18.17:9050 
SocksPolicy accept 10.19.18.0/23

Login class authpf bgpd daemon default staff [default]:

$ cat /etc/authpf/users/wifi/authpf.message  
Attention au cresson !!

$ ssh wifi@10.19.19.1
Last login: Sun Jul 14 18:04:07 2013 from 10.19.19.40

Hello wifi. You are authenticated from host "10.19.19.40"
Attention au cresson !!

server {
    listen       8443;
    server_name  blog.chown.me;
    root         /var/www/pelican;

   ssl                  on;
   ssl_certificate      /etc/ssl/server.crt;
   ssl_certificate_key  /etc/ssl/private/server.key;

    ssl_session_timeout  5m;

    ssl_protocols  SSLv2 SSLv3 TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers  HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers   on;
}

cd /usr/port/net/sslh
make install

   sslh comes in two versions: sslh-fork forks a new process for each
   incoming connection. It is well-tested and very reliable, but incurs
   the overhead of many processes. sslh-select uses only one thread, which
   monitors all connections at once.  It is more recent and less tested,
   but only incurs a 16 byte overhead per connection. Also, if it stops,
   you'll lose all connections, which means you can't upgrade it remotely.

sslh_fork_flags="--user=_sslh --listen :::443 --listen 0.0.0.0:443 --ssh 127.0.0.1:22 --ssl 127.0.0.1:8443"

!sslh-fork
*.*                                                     /var/log/sslh

14:18:05 <vpm> Par contre, pourquoi est-ce que ça rend caduque l'anti ddos ? Tu ne filtres pas sur l'if externe ?

pass in on $ext_if proto tcp to $ext_if port { www, https } rdr-to $server \
keep state (max-src-conn 100, max-src-conn-rate 15/5, overload <brutewww> flush global)

pip install pelican

pip install Markdown

git clone https://github.com/getpelican/pelican-themes

mkdir blog ; cd blog

pelican-quickstart

THEME = "/répertoire-où-vous-avez-passé-la-commande-git-clone/pelican-themes/dev-random"

blog/content/pages/apropos.md

blog/content/premierarticle.md

make html

blog/output/

inet 0.0.0.0 255.255.255.255 NONE \
    pppoedev vr0 authproto pap \
    authname 'login' authkey 'password' up
dest 0.0.0.1
!/sbin/route add default -ifp pppoe0 0.0.0.1

inet 10.19.18.1 255.255.255.0
up

sh /etc/netstart

option  domain-name "chown.me";
option  domain-name-servers 10.19.18.17, 8.8.8.8;

subnet 10.19.18.0 netmask 255.255.255.0 {
        option routers 10.19.18.1;

        range 10.19.18.201 10.19.18.221;

        host pcfixe {
             hardware ethernet 00:aa:bb:cc:dd:ee;
             fixed-address 10.19.18.30;
    }
 }

dhcpd_flags=""

/etc/rc.d/dhcpd start

match out on $ext_if inet from $lan_net nat-to $ip_publique

block all
pass in on $int_if from $lan_net
pass out on $int_if to $lan_net
pass out on $ext_if

pass in on $ext_if proto tcp to $ext_if port $redirection_port rdr-to $server
pass in on $ext_if proto udp to $ext_if port domain rdr-to $server

net.inet.ip.redirect=0

alice:~$ uptime
10:23PM  up 32 days,  3:55, 2 users, load averages: 0.19, 0.16, 0.16

auth-defaults:auth=passwd,yubikey:
auth-ssh-defaults:auth-ssh=yubikey:
auth-su-defaults:auth-su=yubikey,passwd:
auth-sudo-defaults:auth-sudo=passwd,yubikey:

:tc=auth-defaults:\
:tc=auth-ftp-defaults:\
:tc=auth-su-defaults:\
:tc=auth-ssh-defaults:\
:tc=auth-sudo-defaults:

Jun 28 12:38:41 manoir yubikey: user monuser: counter 300.0 > 299.0
Jun 28 12:38:41 manoir yubikey: user monuser: authorize
Jun 28 12:38:41 manoir sshd[1405]: Accepted password for monuser from ip.src.v.4 port 34567 ssh2

Jun 29 20:28:21 manoir yubikey: user monuser: counter 306.0 <= 306.0 (REPLAY ATTACK!)
Jun 29 20:28:21 manoir yubikey: user monuser: reject
Jun 29 20:28:21 manoir sshd[640]: Failed password for monuser from 10.19.18.1 port 55526 ssh2

Daniel Jakots

How I accidentally wrote a static site generator

Some context first

Looking for some FOSS

Writing my own - the process

The result

My infrastructure as of 2019

Goal for this infrastructure

Machines

ns3.chown.me (OpenBSD)

virtie.chown.me (OpenBSD)

pancake.chown.me (OpenBSD)

kvm1, and sometimes kvm2 (Ubuntu)

manicouagan1 (OpenBSD)

db1 (OpenBSD)

web1 (OpenBSD)

docker2 (Ubuntu, obviously)

That's it for now

Launching my newsletter

Social media

Blogging...

...and micro-blogging

In between

Why?

What?

How can I subscribe?

Upgrading OpenBSD with Ansible

My router runs OpenBSD -current

Ansible Reboot Module

The Playbook

The playbook itself

The answer file

The explanations

The result

Locking OpenBSD when it's sleeping

Locking the machine when it is put to sleep

Locking it further

Beware of the cat

2FA with ssh on OpenBSD

Seed configuration

System configuration

sshd configuration

Improving security without impacting UX

The Effective Manager

The Checklist Manifesto

Hackathon report - p2k18

New design

Routing traffic with multiple OpenVPN

Why OpenVPN?

What did I need?

Follow the pushed routes, not always and not for all the hosts

Default route sometimes, sometimes not

Even with a default route, bypassing the VPN for some servers

Multiple VPN

Don't touch the server side

Suiting all the needs \o/

OpenVPN infrastructure

routing

Dumping pics

Playing with the pine64

Finding something to install on it

Getting OpenBSD on it

That's it

Hackathon report - t2k17

My recent journey with 2FA

2FA

How it works

One Time Password

tl;dr

Wait, did you just say sha1?!?1?

How to use it

Don't be locked out

Backuping shared secrets and backup codes

Clients

Android phone

OpenBSD

Activating it

My Feedback

Voir Morlaix et mourir

2015