[00:06] *** Tadaka has quit IRC (Quit: leaving) [01:15] *** nakano_ is now known as nakano [01:17] *** LT has joined #arpnetworks [01:23] *** schmir has joined #arpnetworks [02:41] *** mjp has quit IRC (Quit: leaving) [03:49] *** hsbt has quit IRC (Ping timeout: 255 seconds) [04:05] *** hsbt has joined #arpnetworks [05:12] *** ziyourenxiang has joined #arpnetworks [05:19] *** dxtr has quit IRC (Changing host) [05:19] *** dxtr has joined #arpnetworks [08:15] *** schmir has quit IRC (Remote host closed the connection) [08:34] *** nakano is now known as nakano_ [08:34] *** nakano_ is now known as nakano [08:48] *** nakano is now known as nakano_ [09:02] *** nakano_ is now known as nakano [09:19] *** LT has quit IRC (Quit: Leaving) [09:28] *** ElectricBill has quit IRC (Quit: Leaving) [09:35] *** nakano is now known as nakano_ [09:37] *** nakano_ is now known as nakano [09:46] *** Tadaka has joined #arpnetworks [09:54] *** nakano is now known as nakano_ [09:55] *** schmir has joined #arpnetworks [10:05] *** schmir has quit IRC (Remote host closed the connection) [10:12] *** ziyourenxiang has quit IRC (Quit: ziyourenxiang) [10:46] *** heavysixer has joined #arpnetworks [10:46] *** ChanServ sets mode: +o heavysixer [12:57] *** nakano_ is now known as nakano [13:01] *** schmir has joined #arpnetworks [13:05] *** schmir has quit IRC (Ping timeout: 240 seconds) [13:23] *** schmir has joined #arpnetworks [14:02] *** schmir` has joined #arpnetworks [14:02] *** nerdd_ has joined #arpnetworks [14:03] *** nerdd has quit IRC (Ping timeout: 245 seconds) [14:03] *** schmir has quit IRC (Ping timeout: 252 seconds) [14:05] *** schmir` is now known as schmir [14:12] *** tinono has joined #arpnetworks [14:28] *** schmir` has joined #arpnetworks [14:31] *** schmir has quit IRC (Ping timeout: 252 seconds) [14:39] *** schmir` is now known as schmir [15:22] *** schmir has quit IRC (Ping timeout: 252 seconds) [15:23] *** schmir has joined #arpnetworks [15:39] *** heavysixer has quit IRC (Quit: heavysixer) [16:56] *** tuv has joined #arpnetworks [16:58] who up* [16:59] i'm debating whether i should get my new vps from linode or arpnetworks. the major attraction to linode (compared to arp) is backup [16:59] so, do you offer backup? [16:59] *** dytra has joined #arpnetworks [17:00] *** dytra has quit IRC (Client Quit) [17:22] *** fink has joined #arpnetworks [17:25] *** heavysixer has joined #arpnetworks [17:25] *** ChanServ sets mode: +o heavysixer [17:25] tuv: we don't, sorry [17:37] *** LucasWilcox has quit IRC (Quit: leaving) [18:08] *** schmir has quit IRC (Remote host closed the connection) [18:09] tuv: I looked at linode, it doesn't hardly even compare to arp .. unless you want a cheap vps with a single ipv4 IP and a limit on the os you can run [18:09] lol @ 2 ip limmit [18:10] and having to run linux? [18:10] :| [18:10] Yuck. [18:10] lol [18:10] I have to run Linux all day at work. Why would I want to run Linux on my VPS. [18:10] Im not saying linux sucks [18:10] I am. :p [18:10] obviously arp runs with a linux backend (KVM) [18:11] i am saying it sucks HAVING to use it [18:11] when free/openbsd are better at most server related tasks [18:11] and more secure [18:11] up_the_irons: Speaking of KVM, are your PPM up to date or have you been keeping KVM up to date and not your PPM? [18:12] when it comes to a VPS where there are no hardware compatibility constraints as well as no need for virtualization [18:12] i see very few incentives to run linux [18:12] Er, PPA. [18:13] mhoran: the KVM in my PPA is what I use currently. I have not upgraded because 1) it works very well, so if it ain't broke, don't fix it 2) it would cause downtime to perform the dist-upgrade [18:13] gotta bail, cd $home [18:13] I like that reasoning [18:14] up_the_irons: Cool. I've finally got some time to possibly move us off our deprecated Xen setup, and am looking into KVM. Tried setting up an installation based off your PPA but wanted to make sure there wasn't anything more recent before I went too far. [18:24] *** sentabi has quit IRC (Ping timeout: 272 seconds) [18:32] *** sentabi has joined #arpnetworks [18:35] *** Dougy_ has joined #arpnetworks [18:36] *** Dougy has quit IRC (Read error: Connection reset by peer) [19:17] i'm a debian die hard, so the option of not running linux is not very relevant to me [19:18] pshaw@debian [19:18] ;) [19:19] fink: there is a kfreebsd in debian, if your beef is with linux [19:19] if it's with debian though, it's a lost cause [19:20] tuv: i bet you're one of those vi* lovers, as well? [19:20] fink: nah.. never got vi. emacs [19:21] tuv: ah cool, well then at least we have something in common [19:23] i have no beef with linux [19:23] i just hate being restricted to only linux :) [19:24] love rms, hate linux? [19:24] haha [19:25] I just hate how linux makes me jump through so many hoops [19:25] to have a good default system vs 0days [19:25] seems like the is no interest in proactive security in most linux distros [19:25] or nothing that is effective anyway [19:27] linux is great dont get me wrong [19:28] but for systems where security counts, i dont have time to spend a few days locking down a system good [19:29] for the desktop, it cant be beat [19:30] vcs: out of curiosity, what is it that you need to lock down in linux? [19:30] say i run debian [19:30] I would need to patch the kernel with grsecurity to add more secure chroot + SSP and memory randomization [19:31] i would need to chroot alot of notoriously insecure daemons [19:31] i dont have time to do that [19:32] say i ran a more enterprisey linux, like RHEL [19:32] i would need to disable like 30 services and tweak selinux so it did not break stuff [19:33] what are some examples of 'notoriously insecure daemons' that you can't replace? [19:33] also chroot daemons [19:33] well, bind has a bad record [19:33] it can be replaced yes [19:33] but i prefer to run all network services in chroot [19:33] besides stuff that needs root and cant be chrooted realistically, like OpenSSH [19:34] also, chroot in linux is too easy to break out of by default [19:34] so i need to apply grsecurity to basically any kernel that comes with a distro [19:35] but its not just about track records, its about proactive measures against future exploits [19:35] that may already be present in code [19:36] I can jail stuff easily with FreeBSD, and OpenBSD comes with most network services chrooted by default [19:36] the downside is of course hardware support and virtualization [19:36] but since we are running them in VPS, that does not even matter [19:37] and for linux only binary programs, OpenBSD, FreeBSD, solaris etc support emulation [19:38] i love linux, i just wish more measures were taken by default in distros to be secure by default or with little effort [19:38] thats really my only complaint with linux ;) [19:38] distros like debian get so much right [19:38] vcs: you use jails? [19:39] fink: when I am working with a freebsd box yes [19:45] tuv: both linode and arp are great providers, but i feel less boxed in at arp because one can get additional ipv4 addresss (linode limits 2 per vm) and a full /48 block of ipv6 which will be nice in the future [19:45] and being able to run whatever OS i want with arp is great [20:38] you know what I want now? DragoflyBSD with HAMMER :-p [20:58] hehe [20:58] Hammer sounds cool [21:23] *** fink has quit IRC (Quit: fink) [21:47] *** tinono has quit IRC (Quit: leaving) [23:24] *** Tadaka has quit IRC (Quit: Computer has gone to sleep)