Posts tagged "OpenBSD":

Automate OpenBSD anonymous public wifi log in

Security is somewhat cat and mouse game. This does not mean however you be careless or just live with what you are handed to when it comes to protecting yourself from ill-intentioned actors out in the wild. Generally, I recommend choosing security over convenience, speed or shiny features for your offline and online computing needs. To start with, you are much better protected if you start using secure defaults of the system you are using. For example, Firefox has HTTPS-Only Mode that you can enable especially if you find yourself using public wifi. If you happen to use OpenBSD, you are in a treat :). Below bash script will allow you to log in to public wifi using random MAC addresses each time you connect to it: NOTE: iwm0 is the wireless card name on my laptop and you need to replace it with yours.

#!/usr/bin/env bash

ssid="$1"
pass="$2"
doas ifconfig iwm0 up
sleep 3
echo Wireless card is up

if [[ -z "$pass" ]]; then
    doas ifconfig iwm0 nwid "$ssid" lladdr random
    echo Joining public $ssid
else
    doas ifconfig iwm0 nwid "$ssid" wpakey "$pass"
    echo Joining private $ssid
fi

sleep 3

doas dhcpleasectl iwm0

echo Renewing inet address
sleep 3

echo Visiting google.com to test connection
proxy=$(curl -s -L -I -o /dev/null -w '%{url_effective}' google.com)

firefox $proxy

OpenBSD 7 Xfce Desktop

I blogged previously about why one should use OpenBSD and this time I would like to document steps to have a fully working Xfce Desktop with default installation. My goal is to keep the changes minimal only to absolutely required steps, nothing more nothing less. If you find steps missing (or did not work as expected) or not necessary, please drop me a line via k tuman at acm dot org so I can address and update this blog if needed.

1. Download the img and make USB boot disk:

   curl -O https://cdn.openbsd.org/pub/OpenBSD/7.0/amd64/install70.img
   sudo dd if=~/Downloads/install70.img of=/path/to/usb
   

2. Boot from USB disk. Press I and hit enter when you see the `Welcome to the OpenBSD/amd64 7.0 installation program.` and follow the prompt. It is pretty straightforward. Once it is done, just reboot, which will automatically downloads and installs needed firmwares for your laptop. --NOTE:– You can select whole disk and auto layout if you are not sure. Using wired connection for network interface is highly recommended.

3. Once you login, switch to root account, add needed packages and needed configs like this:

   su  ## prompts for root password
   pkg_add xfce xfce-extras ## install xfce desktop
   sed -i 's/xconsole/#xconsole/' /etc/X11/xenodm/Xsetup_0 # no xconcole
   usermod -G operator <user name> # so you can use xfce to log out, reboot etc
   usermod -G wheel <user name> # so you can use doas
   echo "permit persist :wheel" >> /etc/doas.conf # doas = sudo
   rcctl enable messagebus ## enable dbus
   rcctl start messagebus ## start dbus
   rcctl enable apmd ## enable power daemon
   rcctl start apmd  ## start power daemon
   exit # switch to your user account
   echo "exec startxfce4" > ~/.xsession ## auto launchs xfce4 desktop
   doas reboot ## restart to have a xfce default desktop
   

Bonus Tips and Tricks

• Your wifi most likely will just work. In case if you get unlucky, here is how you can get it working:

  doas ifconfig # lists all supported interfaces
  doas fw_update # to install missing driver for your card
  dmesg | grep pci | grep <wifi card model> # report if not supported
  doas ifconfig # again to check if your card listed
  doas ifconfig join <Wifi name> wpakey <password> # to join your wifi
  # Run following 2 lines if you want to auto join your wifi:
  doas echo "join wifiname wpakey password" >> /etc/hostname.<wificardname>
  doas echo "dhcp" >> /etc/hostname.<wificardname>
  doas sh /etc/netstart # to restart the network
  ping openbsd.org # to test your network
  

• While default Xfce4 desktop is fully functional out of the box, I recommend following packages:

  doas pkg_add xfce4-power-manager xfce4-whiskermenu
  ln -s -f yourloginpics ~/.face # profile in whiskermenu and in lock screen
  

  Add them to the panel and tweak them to your liking. One setting I highly recommend enabling following in `Window Manager Tweaks`:

  • [✓] Hide title of windows when maximized

OpenBSD laptop for the paranoid

Disclaimer: This is not a post about UNIX variants flame war. It is not my intention to recruit OpenBSD converts either as no one has influenced me to switch to it after 10 years of distro hopping. The main reasons I am using OpenBSD as my daily driver on both of my laptops (Thinkpad X220 and XPS 13 9365) are: Security, Stability, and Frugality.