Deploy a VM in Amsterdam

OpenBSD in Amsterdam is running dedicated vmd(8) servers to host opinionated VMs.

Send your name, email address, hostname, username, and public SSH key to OpenBSDAms via contact form, Twitter, or Mastodon, before you pay.

For example:

Roman Zolotarev
hi@romanzolotarev.com
www.romanzolotarev.com
romanzolotarev
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIqh7BmO... 1500469202

You'll get IPv4 (and IPv6) address as soon as your VM is deployed.

$ ssh username@XXX.XXX.XXX.XXX
OpenBSD 6.3 (GENERIC) #4: Sun Jun 17 11:09:51 CEST 2018

Welcome to OpenBSD: The proactively secure Unix-like operating
system.

Please use the sendbug(1) utility to report bugs in the system.
Before reporting a bug, please try to reproduce it with the
latest version of the code. With bug reports, please try to
ensure that enough information to reproduce the problem is
enclosed, and if a known fix for it exists, include that as
well.

$

Get a password from ~/pass.txt and switch to root.

$ cat pass.txt
XXXXXXXXXXXXXXXXXXXXXXXXXX
$ su -
password:
#

Run sysctl to set the time counter:

# sysctl kern.timecounter.hardware=tsc
kern.timecounter.hardware: i8254 -> tsc
# echo 'kern.timecounter.hardware=tsc' > /etc/sysctl.conf
#

Run ntpd to set the local clock and terminate it by pressing ^C.

# ntpd -sd
/var/db/ntpd.drift is empty
ntp engine ready
...
sensor vmmci0: offset 44.961541
set local clock to Sat Jun 30 21:15:05 CEST 2018 (offset 44.961541s)
...
^Cntp engine exiting
Terminating
#

Edit /etc/ssh/sshd_config:

PermitRootLogin no
PasswordAuthentication no

Verify the new sshd config:

# sshd -t
#

Restart sshd:

# rcctl restart sshd
sshd(ok)
sshd(ok)
#

Stop and disable sndiod:

# rcctl stop sndiod
sndiod(ok)
# rcctl disable sndiod
#

Add your username to /etc/doas.conf:

# echo 'permit username' > /etc/doas.conf

Don't forget to check 6.3 errata and apply available patches.

# syspatch
...
Get/Verify syspatch63-011_perl.tgz 100% |***************| 24401       00:00
Installing patch 011_perl
Relinking to create unique kernel... done.
# reboot
Connection to XXX.XXX.XXX.XXX closed.

Now you may want to setup a web server.

Tested on OpenBSD 6.3