2006-03-27

What I've been doing lately

Xen

I'm playing with Xen again, this time more seriously now that NetBSD/xen supports IPv6. [:Quicksand] is now two machines in one; a NetBSD dom0 with a Debian domU to do OpenWrt work in. I for one welcome our new virutalized overlords.

OpenWrt

The OpenWrt Kamikaze branch (well it's not a branch yet) is coming along nicely. I recently got three more WGT634U boxes to replace some workstations. [:Voreg] is a OpenVPN server and client, replacing that function of [:Router-2]/[:Viltvodle]. [:Viltvodle] itself will eventually be totally replaced by two WGT634U boxes.

Getting IPsec on Kamikaze has been as much of an adventure as trying to get Heimdal to cross compile. I've sucessfully gotten IPsec-IPv4 to work (through a NAT even (without using NAT-T)), but ipsec-tools for some reason or another is not getting compiled with the ability to parse IPv6. BTW, you need to un-disable most of the disabled functionality of the OpenWrt libopenssl package to get ipsec-tools to even compile. I hope to make kmod ipkgs to enable the use of ipsec-tools someday soon.

Project Asimov

No real news on this front. [:Kerberos-1] is slated for conversion to a WGT634U as soon as I get Heimdal to cross compile; but that won't be easy. If only Shishi were considered production quality. Or else I may convert the KDC to a Xen domU, if the dom0 doesn't listen to the Internets, the keys should be safe.

Misc

The AAAA site needs some updates, I'll get to it; someday. I'm trying to learn Docbook for some reason, perhaps I'll format an old sci-fi book from Project Gutenberg.