From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=DKIM_ADSP_CUSTOM_MED, DKIM_SIGNED,DKIM_VALID,FREEMAIL_FROM,HTML_MESSAGE,MAILING_LIST_MULTI, RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H4,RCVD_IN_MSPIKE_WL autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 2076 invoked from network); 21 Jul 2021 17:16:56 -0000 Received: from tb-ob20.topicbox.com (173.228.157.66) by inbox.vuxu.org with ESMTPUTF8; 21 Jul 2021 17:16:56 -0000 Received: from tb-mx1.topicbox.com (tb-mx1.nyi.icgroup.com [10.90.30.61]) by tb-ob20.topicbox.com (Postfix) with ESMTP id 0CB88238AB for ; Wed, 21 Jul 2021 13:16:55 -0400 (EDT) (envelope-from bounce.mM19bbcae898047761677de240.r522be890-2105-11eb-b15e-8d699134e1fa@9fans.bounce.topicbox.com) Received: by tb-mx1.topicbox.com (Postfix, from userid 1132) id BEBBD2E38133; Wed, 21 Jul 2021 13:16:54 -0400 (EDT) ARC-Authentication-Results: i=2; topicbox.com; arc=pass; dkim=pass (2048-bit rsa key sha256) header.d=gmail.com header.i=@gmail.com header.b=FEeIXOgR header.a=rsa-sha256 header.s=20161025 x-bits=2048; dmarc=pass policy.published-domain-policy=none policy.published-subdomain-policy=quarantine policy.applied-disposition=none policy.evaluated-disposition=none (p=none,sp=quarantine,d=none,d.eval=none) policy.policy-from=p header.from=gmail.com; spf=pass smtp.mailfrom=crossd@gmail.com smtp.helo=mail-oi1-f182.google.com; x-internal-arc=fail (as.1.topicbox.com=pass, ams.1.topicbox.com=fail (body has been altered)) (Message modified while forwarding at Topicbox) ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d= topicbox.com; h=mime-version:references:in-reply-to:from:date :message-id:subject:to:content-type:list-help:list-id:list-post :list-subscribe:reply-to:content-transfer-encoding :list-unsubscribe; s=sysmsg-1; t=1626887814; bh=a0cruKRHY6UuZWCp Twx5hXoaEaQSTNunSj/BvzuWFm8=; b=Eq1TbD7jQSKWFVqjmCJAF3D1rTHz1dtJ 3huRv6w3363+AYxfazuaYY2sX081CyrFkG/r6q4GTJ+gudEuOe7FFi0Egb9DZzPB 5amXHx1hCUicA+Bmxgsua2o6+ndZEarH2TChq/o394W5hPza5o/EpBaB2zF5C0Q1 5LQl22ODDUo= ARC-Seal: i=2; a=rsa-sha256; cv=pass; d=topicbox.com; s=sysmsg-1; t= 1626887814; b=TPcPJ+oqCPZb81zZB0P3LznYox2TsWfvX42sxIUxCjnDoS/5+x cFglm7s54HvUe2F7wZHyp5NNjHVIGmoG1GreszFPDPyDg0IXA6Mrdidn5fDAlxwH ZWEmZ+4rP8u11Z/RsmTFiRsX26YJXdVSu7CheAP1EKHNGTlFwZUculFOE= Authentication-Results: topicbox.com; arc=pass; dkim=pass (2048-bit rsa key sha256) header.d=gmail.com header.i=@gmail.com header.b=FEeIXOgR header.a=rsa-sha256 header.s=20161025 x-bits=2048; dmarc=pass policy.published-domain-policy=none policy.published-subdomain-policy=quarantine policy.applied-disposition=none policy.evaluated-disposition=none (p=none,sp=quarantine,d=none,d.eval=none) policy.policy-from=p header.from=gmail.com; spf=pass smtp.mailfrom=crossd@gmail.com smtp.helo=mail-oi1-f182.google.com; x-internal-arc=fail (as.1.topicbox.com=pass, ams.1.topicbox.com=fail (body has been altered)) (Message modified while forwarding at Topicbox) X-Received-Authentication-Results: tb-mx1.topicbox.com; arc=none (no signatures found); bimi=skipped (DMARC Policy is not at enforcement); dkim=pass (2048-bit rsa key sha256) header.d=gmail.com header.i=@gmail.com header.b=FEeIXOgR header.a=rsa-sha256 header.s=20161025 x-bits=2048; dmarc=pass policy.published-domain-policy=none policy.published-subdomain-policy=quarantine policy.applied-disposition=none policy.evaluated-disposition=none (p=none,sp=quarantine,d=none,d.eval=none) policy.policy-from=p header.from=gmail.com; iprev=pass smtp.remote-ip=209.85.167.182 (mail-oi1-f182.google.com); spf=pass smtp.mailfrom=crossd@gmail.com smtp.helo=mail-oi1-f182.google.com; x-aligned-from=pass (Address match); x-google-dkim=pass (2048-bit rsa key) header.d=1e100.net header.i=@1e100.net header.b=k0xyutga; x-me-sender=none; x-ptr=pass smtp.helo=mail-oi1-f182.google.com policy.ptr=mail-oi1-f182.google.com; x-return-mx=pass header.domain=gmail.com policy.is_org=yes (MX Records found: gmail-smtp-in.l.google.com,alt3.gmail-smtp-in.l.google.com,alt2.gmail-smtp-in.l.google.com,alt1.gmail-smtp-in.l.google.com,alt4.gmail-smtp-in.l.google.com); x-return-mx=pass smtp.domain=gmail.com policy.is_org=yes (MX Records found: gmail-smtp-in.l.google.com,alt3.gmail-smtp-in.l.google.com,alt2.gmail-smtp-in.l.google.com,alt1.gmail-smtp-in.l.google.com,alt4.gmail-smtp-in.l.google.com); x-tls=pass smtp.version=TLSv1.2 smtp.cipher=ECDHE-RSA-AES256-GCM-SHA384 smtp.bits=256/256; x-vs=clean score=0 state=0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=9fans.net; h= mime-version:references:in-reply-to:from:date:message-id:subject :to:content-type:list-help:list-id:list-post:list-subscribe :reply-to:content-transfer-encoding:list-unsubscribe; s=dkim-1; bh=Lfklzi3HrRTP1XoKNj9da9ThcWVueWzT+emPtN+4tTU=; b=qDHmA5/pmwXd 0u4qKT7is/eWHfB+1ldiRLETxNW2zrQ3QxZOHmY+KNRM6//vE7JFECKejzDP9zF2 QDIgXc57WMlrbCeFrVJmqSBWh6/ftYRhV5ml5BzVhWhULJs0DC7U0byv8PeXmsp6 JkIPmR5f9QsaJoQHa3/jqN3YZYRlDLE= Received: from tb-mx1.topicbox.com (localhost.local [127.0.0.1]) by tb-mx1.topicbox.com (Postfix) with ESMTP id 34C632E37D27 for <9fans@9fans.net>; Wed, 21 Jul 2021 13:16:45 -0400 (EDT) (envelope-from crossd@gmail.com) Received: from tb-mx1.topicbox.com (localhost [127.0.0.1]) by tb-mx1.topicbox.com (Authentication Milter) with ESMTP id 49581B6E606; Wed, 21 Jul 2021 13:16:45 -0400 ARC-Seal: i=1; a=rsa-sha256; cv=none; d=topicbox.com; s=arcseal; t= 1626887805; b=hzJpZqrgYzWYtyhxauhVEKAqAPIxivQwPnCS9UGuq2ahba0rzj 92BYKTsjQ6moyJ2MoMnev95O4Q9jOWG6hwnTWdgiDCVf3pTD21D2MaUCisaCGdi+ GDuJVX6jWdvOsSAzO7RIWU67R4DDit5LG6PXT8ghtbDhc05hPIs1hvo7V3WnoyvA 7bfCUI7f8VNJ0fWUjO6cT2iPgxsys0tUjfI1gjmKz8yFwlsCbgEj1OUX5WlmLa8P roUNv7gn7zOtbJx46VmQUk0VNqIK4MJHCO01el4XwzkytGKB5xIiPLbV+iv4qqxl Hznio93I0RYDNO548vRUq/siJmw+3yMTFBjA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d= topicbox.com; h=mime-version:references:in-reply-to:from:date :message-id:subject:to:content-type; s=arcseal; t=1626887805; bh=jFRN2Ts/VzWyRECCWHZcopU8my6yZiUg2SUWZeokfaU=; b=U263jOaXgayc odeXnL+U7Fks2oag2+aIN8KixxA8mhrjnXFP7Dn1ylCCubuyjk5ynTgAOqrXCqLh 4gNnBq9fjrTVhnM83kDrSBKf/eHwHM4932y+we7QqAZqqKhBiI7Yehlpj4Q0CkJf P7tSE2P91peQahBjzVW7QmXWahgD5xt9C5cRa8f2rOSNRUtjblDZsZ53Yr3e8QKM zZwg0OKSx0BbQAKOPgzXZ4gQcPaeHL8rWDat0wwcDry2hhT7xqNs/vvehD7YyE4X oX+sOm3NxYrtN1LNyuEi3FZa5a5cJjrsNKPW6xaNOYQSlgdxnqu//Uk+ImEvc2Yk UcyZVKT4IA== ARC-Authentication-Results: i=1; tb-mx1.topicbox.com; arc=none (no signatures found); bimi=skipped (DMARC Policy is not at enforcement); dkim=pass (2048-bit rsa key sha256) header.d=gmail.com header.i=@gmail.com header.b=FEeIXOgR header.a=rsa-sha256 header.s=20161025 x-bits=2048; dmarc=pass policy.published-domain-policy=none policy.published-subdomain-policy=quarantine policy.applied-disposition=none policy.evaluated-disposition=none (p=none,sp=quarantine,d=none,d.eval=none) policy.policy-from=p header.from=gmail.com; iprev=pass smtp.remote-ip=209.85.167.182 (mail-oi1-f182.google.com); spf=pass smtp.mailfrom=crossd@gmail.com smtp.helo=mail-oi1-f182.google.com; x-aligned-from=pass (Address match); x-google-dkim=pass (2048-bit rsa key) header.d=1e100.net header.i=@1e100.net header.b=k0xyutga; x-me-sender=none; x-ptr=pass smtp.helo=mail-oi1-f182.google.com policy.ptr=mail-oi1-f182.google.com; x-return-mx=pass header.domain=gmail.com policy.is_org=yes (MX Records found: gmail-smtp-in.l.google.com,alt3.gmail-smtp-in.l.google.com,alt2.gmail-smtp-in.l.google.com,alt1.gmail-smtp-in.l.google.com,alt4.gmail-smtp-in.l.google.com); x-return-mx=pass smtp.domain=gmail.com policy.is_org=yes (MX Records found: gmail-smtp-in.l.google.com,alt3.gmail-smtp-in.l.google.com,alt2.gmail-smtp-in.l.google.com,alt1.gmail-smtp-in.l.google.com,alt4.gmail-smtp-in.l.google.com); x-tls=pass smtp.version=TLSv1.2 smtp.cipher=ECDHE-RSA-AES256-GCM-SHA384 smtp.bits=256/256; x-vs=clean score=0 state=0 X-ME-VSCause: gggruggvucftvghtrhhoucdtuddrgedvtddrfeeggdektdculddtuddrgeduhedrtddtmd cutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpggftfghn shhusghstghrihgsvgdpuffrtefokffrpgfnqfghnecuuegrihhlohhuthemuceftddtne cunecujfgurhepgghfjgfhfffkuffvtgesrgdtreertddtjeenucfhrhhomhepffgrnhcu vehrohhsshcuoegtrhhoshhsugesghhmrghilhdrtghomheqnecuggftrfgrthhtvghrnh epfeefvefgfedvueevhfffvdfhffeuvdevgfffgffgleegieeiveduleegieevgeejnecu kfhppedvtdelrdekhedrudeijedrudekvdenucevlhhushhtvghrufhiiigvpedtnecurf grrhgrmhepihhnvghtpedvtdelrdekhedrudeijedrudekvddphhgvlhhopehmrghilhdq ohhiuddqfhdukedvrdhgohhoghhlvgdrtghomhdpmhgrihhlfhhrohhmpeeotghrohhssh gusehgmhgrihhlrdgtohhmqe X-ME-VSScore: 0 X-ME-VSCategory: clean Received-SPF: pass (gmail.com ... _spf.google.com: Sender is authorized to use 'crossd@gmail.com' in 'mfrom' identity (mechanism 'include:_netblocks.google.com' matched)) receiver=tb-mx1.topicbox.com; identity=mailfrom; envelope-from="crossd@gmail.com"; helo=mail-oi1-f182.google.com; client-ip=209.85.167.182 Received: from mail-oi1-f182.google.com (mail-oi1-f182.google.com [209.85.167.182]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by tb-mx1.topicbox.com (Postfix) with ESMTPS for <9fans@9fans.net>; Wed, 21 Jul 2021 13:16:44 -0400 (EDT) (envelope-from crossd@gmail.com) Received: by mail-oi1-f182.google.com with SMTP id t143so3591934oie.8 for <9fans@9fans.net>; Wed, 21 Jul 2021 10:16:44 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=jFRN2Ts/VzWyRECCWHZcopU8my6yZiUg2SUWZeokfaU=; b=k0xyutgar1rOjo8BO3MyM9cDvFZmUd8hzlwI9hykBgse2cO8hcnep78cIG4eDtCk3I iUBbjK5lp9YkdTseY0aErdbIBzZd0isZdI16RVlB703yDK7EskMxPeXqnLxyZdAwAPki JSyvy3nTQYxbD1Np7EPPeVptqmJi8KUqGf7Goe7ehD889dWT79BfbgM2fsbguTTQbpIl 1lJ2HrPGBeOjOc91PY91HT79adK5BoRI3jse3NxeSI5UeMcJCGOOx1P0w/KVOsApbb1i wSNM5FK+9jaRIUR5ZKAl9gBTeZHHdp/Pf6i8k0XYcZl3sFZuV3QW41OzilmCenqf9rT5 Jlng== X-Gm-Message-State: AOAM532sdxoqoaZdAi5zlIwrhUkPmkCQjKy9bQLEFXDs270DCiPA8OjI aP/tu5Sj2YMt1WsrbzcthQXz6xXoz0Ce/zBj5+EOH8A6oT4= X-Google-Smtp-Source: ABdhPJzLKhIfjrNUYtih+P5uOrcIAym3NR1nwUmUmtIUyqneDCKVPUvFSUD/its1vTd4dRbqV3m6kwhVHvQlMS5rp38= X-Received: by 2002:a05:6808:216:: with SMTP id l22mr9995228oie.24.1626887803824; Wed, 21 Jul 2021 10:16:43 -0700 (PDT) MIME-Version: 1.0 References: <3880761E-8F58-4CAD-ABA6-A1012EB671F3@gmail.com> <58F110E7-8E32-4338-80E7-CEE6431C62B6@quintile.net> <26D9126B-8033-4729-8D61-955A92DA7343@gmail.com> In-Reply-To: From: Dan Cross Date: Wed, 21 Jul 2021 13:16:07 -0400 Message-ID: Subject: Re: Posix implementation of Plan 9 cpu(1) (Was: [9fans] Command to set samterm label) To: 9fans <9fans@9fans.net> Content-Type: multipart/alternative; boundary="000000000000a2eebe05c7a5550b" Topicbox-Policy-Reasoning: allow: sender is a member Topicbox-Message-UUID: 6f17cc06-ea47-11eb-959a-aeb64d991570 Archived-At: =?UTF-8?B?PGh0dHBzOi8vOWZhbnMudG9waWNib3guY29tL2dyb3Vwcy85?= =?UTF-8?B?ZmFucy9UMDlmY2RlYzljODdiZmRlNC1NMTliYmNhZTg5ODA0Nzc2MTY3N2Rl?= =?UTF-8?B?MjQwPg==?= List-Help: List-Id: "9fans" <9fans.9fans.net> List-Post: List-Software: Topicbox v0 List-Subscribe: Precedence: list Reply-To: 9fans <9fans@9fans.net> Content-Transfer-Encoding: 7bit List-Unsubscribe: , Topicbox-Delivery-ID: 2:9fans:437d30aa-c441-11e9-8a57-d036212d11b0:522be890-2105-11eb-b15e-8d699134e1fa:M19bbcae898047761677de240:1:5h6fj32O8teQn48VC6qs7VRdb7-c798Uut3iFG7RzfU --000000000000a2eebe05c7a5550b Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Wed, Jul 21, 2021 at 1:09 PM Xiao-Yong Jin wrote: > > On Jul 21, 2021, at 11:42 AM, Dan Cross wrote: > > > > On Wed, Jul 21, 2021 at 12:17 PM Xiao-Yong Jin > wrote: > > > On Jul 21, 2021, at 11:08 AM, Dan Cross wrote: > > > > ssh linuxpc drawterm -c srvdev.rc > > > > > > > > yes it's a lot of back and forth, but ssh only is needed for running > > > > the process, the data afterwards can use 9p directly. > > > > > > What's the difference between that and using something like u9fs? > > > > auth? > > > > This is using ssh to attach to the Linux machine to import it's > filesystem into the plan9 namespace? Wouldn't authenticating from plan9 to > Linux over SSH be independent of drawterm vs u9fs? > > Drawterm does the proper auth and connect to the plan9 system. > U9fs needs plan9 srv to auth and connect to it. > > If you are running a plan9 system, you probably have your auth > setup. If you have access to a posix system, you probably have ssh > setup and you have access as a normal user, and that enables you > to do ssh and drawterm back. No additional setup required. > > U9fs, on the contrary, states > > It is typically invoked on a Unix machine by > inetd with its standard input and output connected to a net- > work connection, typically TCP on an Ethernet. It typically > runs as user root and multiplexes access to multiple Plan 9 > clients over the single wire. It assumes Plan 9 uids match > Unix login names, and changes to the corresponding Unix > effective uid when processing requests. > > I'm not going to run this and listen on a public interface even if > it does not run as root. > > There are issues with the auth method that u9fs uses, which I'm not > going to discuss here. Nothing prevents you from invoking u9fs over an SSH connection; one needn't run it from inetd, and I doubt anyone has in 20 years. - Dan C. ------------------------------------------ 9fans: 9fans Permalink: https://9fans.topicbox.com/groups/9fans/T09fcdec9c87bfde4-M19bbc= ae898047761677de240 Delivery options: https://9fans.topicbox.com/groups/9fans/subscription --000000000000a2eebe05c7a5550b Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
On Wed, Jul 21, 2021 at 1:09 = PM Xiao-Yong Jin <meta.jxy@gmail.c= om> wrote:
> On Jul 21, 2021, at 11:42 AM, Dan Cro= ss <crossd@gmail.c= om> wrote:
>
> On Wed, Jul 21, 2021 at 12:17 PM Xiao-Yong Jin <meta.jxy@gmail.com> wrote:
> > On Jul 21, 2021, at 11:08 AM, Dan Cross <crossd@gmail.com> wrote:
> > > ssh linuxpc drawterm -c srvdev.rc
> > >
> > > yes it's a lot of back and forth, but ssh only is needed= for running
> > > the process, the data afterwards can use 9p directly.
> >
> > What's the difference between that and using something like u= 9fs?
>
> auth?
>
> This is using ssh to attach to the Linux machine to import it's fi= lesystem into the plan9 namespace? Wouldn't authenticating from plan9 t= o Linux over SSH be independent of drawterm vs u9fs?

Drawterm does the proper auth and connect to the plan9 system.
U9fs needs plan9 srv to auth and connect to it.

If you are running a plan9 system, you probably have your auth
setup.  If you have access to a posix system, you probably have ssh setup and you have access as a normal user, and that enables you
to do ssh and drawterm back.  No additional setup required.

U9fs, on the contrary, states

          It is typically invoked on a Unix machin= e by
          inetd with its standard input and output= connected to a net-
          work connection, typically TCP on an Eth= ernet.  It typically
          runs as user root and multiplexes access= to multiple Plan 9
          clients over the single wire.  It a= ssumes Plan 9 uids match
          Unix login names, and changes to the cor= responding Unix
          effective uid when processing requests.<= br />
I'm not going to run this and listen on a public interface even if
it does not run as root.

There are issues with the auth method that u9fs uses, which I'm not
going to discuss here.

Nothing prevents y= ou from invoking u9fs over an SSH connection; one needn't run it from i= netd, and I doubt anyone has in 20 years.

 =       - Dan C.

9fans / 9fans / see discussions + participants + delivery&n= bsp;options Permalink = --000000000000a2eebe05c7a5550b--