From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-0.1 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,FREEMAIL_FROM,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 5021 invoked from network); 21 Jun 2022 12:33:21 -0000 Received: from 9front.inri.net (168.235.81.73) by inbox.vuxu.org with ESMTPUTF8; 21 Jun 2022 12:33:21 -0000 Received: from mail-vk1-f176.google.com ([209.85.221.176]) by 9front; Tue Jun 21 08:31:56 -0400 2022 Received: by mail-vk1-f176.google.com with SMTP id s141so3378109vks.0 for <9front@9front.org>; Tue, 21 Jun 2022 05:31:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=w/c1oYTlHYVs6GXb2td0HPCujHGKP7Nt5IgHqFR4jxQ=; b=Z1e4x0xsk6G/cjj1rzt2sdIqKBM2qep0D+Or6+pNwUwRuJ4JSSC0XsAf35JjWXTjVl ZARe46eI5IvI6XwU+FuSR3MEH18kU0dNpXOVIbiNVpx6BBZoOffA3SC0HFcAyvneIVcv v/TGrRoT9M19qylrC/bTEu/bWfzsTY/dzxLLttZGUwg1IEgSsvh4Qx4UHMpfLokhKaJw +Xcc8rUwqzBQ4t1X7vqwRSW/SY9J729fNJsxdKJ0FL7zijcfQdsWvpVXySwQKZy5GhUX hacCTnCeUGYXb9npKyJdCNQq/H2Jfksso3O+F17NGZUCwZAiuf+rL6oNo8Zu34Yr7GGN 6+CA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=w/c1oYTlHYVs6GXb2td0HPCujHGKP7Nt5IgHqFR4jxQ=; b=vtTh095HYQ3b9DZnFsRhlKMNpOaeLIqDWwIIm1t8NW9AWinIf/mm16hgkjMpm1frxP ARanrA9fLMmtR3cPDk+G5PFmRslwX+rhd5uNNcLF8MCm0J1WYD7RdPfiSFkra/+KTiZT k3nLCYGYAR452wP/VNxkNkW/wDBa6cW6XEtZ9qY9GacUiC8/Dx4S2T0/Pl1X+hodJZCg yr0a2rrrRvBVy9hNz4uacmbofEzQdHRJ1N8Mq60AqBONykIBvXv995RnP8w/euNAqJ8U hueXZSthg2SU8vOKDq9KZcHWK4X07I1ykyE/mD2svMXldr9MaPIkw0ewVGvHRxtq2uyL WUSA== X-Gm-Message-State: AJIora9AI5dZ0hLpbGp3gbzq1MagJ+XlB0TeAbRaQadt1SSfuRNjb00S Yc4d2+Rar7Kj2XsQmdeqBbxoU9eBuhgezDsUW7HS868uoKQ= X-Google-Smtp-Source: AGRyM1sQ1pdBayjXCFHWOEbbua9SR2q44wdLzTCvUKMCFMnCoOIBhVKcyJHHV2/0JkKavJsMQisjji1ojiiaA49JmMA= X-Received: by 2002:a1f:724a:0:b0:36c:309b:9a08 with SMTP id n71-20020a1f724a000000b0036c309b9a08mr2879605vkc.7.1655814711899; Tue, 21 Jun 2022 05:31:51 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:ab0:6caa:0:0:0:0:0 with HTTP; Tue, 21 Jun 2022 05:31:51 -0700 (PDT) In-Reply-To: References: From: hiro <23hiro@gmail.com> Date: Tue, 21 Jun 2022 14:31:51 +0200 Message-ID: To: 9front@9front.org Content-Type: text/plain; charset="UTF-8" List-ID: <9front.9front.org> List-Help: X-Glyph: ➈ X-Bullshit: wrapper SSL over WEB2.0 dependency blockchain-scale layer Subject: Re: [9front] httpd minimal configuration Reply-To: 9front@9front.org Precedence: bulk the most important documentation that will be useful for you to understand namespaces in practice will be the man page: fork(2) rc supports "rfork" command, so you can test it all out in your shell interactively. grep for rfork in rc man page. On 6/21/22, hiro <23hiro@gmail.com> wrote: >> My preference would be httpd, however I can't find any documentation for >> it >> apart from the man page > > that's as intended. if there is important stuff missing in the man > page, please send a patch. > >> expected in the web root. Is it possible to put static html pages >> directly >> in it, or is a cgi expected? > > httpd doesn't do cgi, only static html. feel free to read the code to > find the implementation details. > >> Is there perhaps a simple example that I missed >> in my search on the wiki, fqa and via search engine? > > no. > >> I haven't quite figured out namespaces yet either, but the default >> configuration under /lib/namespace.httpd doesn't look to me like it would >> be >> usable without customization. (This is probably me, but I can't place >> "/usr/mike/www" "/n/emelieother" and "/srv/alice" or find the users and >> directories in my base system). > > you are correct. > > namespaces on the highest level might be a neat concept, but our > implementation sadly doesn't include an overall system security > concept. > >> What would be the minimum namespace configuration needed to display a >> static >> page? > > sorry. > >> The namespace concept makes it safe to run both a web server and a mail >> server on one physical device, right? > > no, practically right now, just spawn another cpu server instead. > physical separation is safer than user or namespace separation. > > i'd trust the fileserver's user separation a bit more, so that's the > only place where i'd share ressources. >