Re: Unresponding maintainer on out-of-date package
Hi, > > I have been trying to get in contact with the maintainer of a package, but > > they have not answered at all since my last mail a month ago. What should I > > do about that? > > I'd probably wait another month and then contact the MIA team pointing > them to the bug(s) I filed in the Debian bug tracking system > (bugs.debian.org) that have gone unanswered for those two months. > > https://wiki.debian.org/Teams/MIA > > However, just to set your expectations, unless the updates needed are highly > important (not just new features) the best you could hope for would be a > very long process to get the package declared orphaned. Then you'd be > hoping that some other Debian developer would take it on and be more > open to applying your patches. The ultimate goal being to get things for Debian users, what I usually try in such cases (leaving some time between steps): 1) Report a bug describing the problem 2) Provide a patch that fixes that bug (and use the fixed package in a private build) in the bug report or as a salsa MR 3) Offer to prepare an upload ready to sponsor with the fix included, in the bug report. 4) Prepare an upload and ask for sponsorship on mentors.d.o If this a of interest for another Debian Developper, this usually gets sponsored. Thanks, Alex
Re: speaker-test: no correct sound output on LFE and others speakers
Hi, > > My understanding is that pulseaudio uses alsa for kernel interface and > > that speaker-test uses alsa directly. So if one cannot get speaker-test > > to sound right, it cannot work with pulseaudio. That why I suggest > > workarounds > > in alsa conf (asoundrc). > > I tried several configurations of ~/.asoundrc in these days but nothing > works with "speaker-test". Well some configurations let "aplay" to use > rear-left, rear-right, front-center speakers but "speaker-test" never sends > sound to front-center, rear-left, rear-right and LFE with this command: > [...] > Just now, checking the ALSA configuration in /etc/alsa/conf.d/ I found the > 99-pulse.conf file: > > ~# cat /etc/alsa/conf.d/99-pulse.conf > # PulseAudio alsa plugin configuration file to set the pulseaudio plugin as > # default output for applications using alsa when pulseaudio is running. > [...] > > Does Debian use Pulseaudio daemon as default output for ALSA applications? > Could it be a Pulseaudio misconfiguration? Should I try to uninstall it or > how can I stop Pulseaudio? If I do "killall pulseaudio" it re-spawns > immediately and "systemctl" doesn't work: My hypothesis: speaker-test outputs directly to ALSA (kernel) but ALSA redirects to pulseaudio (the 99-pulse.conf file) and pulseaudio Output profile is stereo. Therefore, pulseaudio downmixes 5.1 to stereo. That would explain why only front-left and front-right output sound. To confirm, you can either: - move away that 99-pulse.conf file so that speaker-test use directly and only ALSA - configure pulseaudio output profile for surround5.1 (you can use command line $ pacmd set-card-profile 0 output:output:analog-surround-51 or pavucontrol (graphical) > ~# systemctl stop pulseaudio > Failed to stop pulseaudio.service: Unit pulseaudio.service not loaded. pulseaudio is usually a *user* service and socket activated (starts automatically if some app wants to use it). To stop it, the following should work: $ systemctl --user stop pulseaudio.socket # stop the socket to prevent auto start $ systemctl --user stop pulseaudio.service # stop the daemon Cheers, Alex
Re: speaker-test: no correct sound output on LFE and others speakers
Hi, > > > The issue is that speaker-test doesn't play sound to the correct speaker. > > > If > > > I run: > > > > > > ~$ speaker-test -Dplug:surround51 -c6 -s3 -f75 > > > > > > The sound comes from (Center), (Front right), (Rear left) and (Rear right) > > > speakers instead (Front right) only. > > > > What's bothering me is that you get sound from multiple speakers while > > instructing out on only one. > > > > The usual issues of these setups with surround analog out are: > > - channel mapping issues (driver/hardware mismatch) > > - software downmixing to stereo > > > > There are other usual issues with surrount digital out but this is not > > your setup. > > > > You can have a look at [1] for software fixes on this. > > > > [1] https://alsa.opensrc.org/SurroundSound > > The link you posted it shows rather outdated fixes, it talked about Jackd > daemon and surround, but I have pulseaudio daemon, maybe I've pulseaudio > daemon misconfiguration My understanding is that pulseaudio uses alsa for kernel interface and that speaker-test uses alsa directly. So if one cannot get speaker-test to sound right, it cannot work with pulseaudio. That why I suggest workarounds in alsa conf (asoundrc). Alex
Re: speaker-test: no correct sound output on LFE and others speakers
Hi, > Basically I've the same issue described here: > https://askubuntu.com/questions/1180389/speaker-test-returns-all-6-channels-to-front-speakers > > The speaker-test program is provided by the alsa-utils package. I'm using > Debian 12 Bookworm, I've no ~/.asoundrc file. My /proc/asound/cards returns: > > ~$ cat /proc/asound/cards > 0 [SB ]: HDA-Intel - HDA ATI SB > HDA ATI SB at 0xfe40 irq 16 > 1 [NVidia ]: HDA-Intel - HDA NVidia > HDA NVidia at 0xfe08 irq 57 > > I've 5.1 speakers the LOGITECH Z906 audio system plugged to the PC via 3 > jacks (left/right), (Center/Subwoofer), (Rear left/ Rear right). I assume your cabling is right and your SB soundcard has surround out (3 jacks as you describe it, and not mic and line out for instance). The labels on the jacks would confirm that, so would the user manual of your motherboard or sound card. > The issue is that speaker-test doesn't play sound to the correct speaker. If > I run: > > ~$ speaker-test -Dplug:surround51 -c6 -s3 -f75 > > The sound comes from (Center), (Front right), (Rear left) and (Rear right) > speakers instead (Front right) only. What's bothering me is that you get sound from multiple speakers while instructing out on only one. The usual issues of these setups with surround analog out are: - channel mapping issues (driver/hardware mismatch) - software downmixing to stereo There are other usual issues with surrount digital out but this is not your setup. You can have a look at [1] for software fixes on this. [1] https://alsa.opensrc.org/SurroundSound Thanks, Alex
Re: Current best practices for system configuration management?
Hi, > > and so on, it is time to explore solutions. I only have four systems > > at the moment (two physical and two virtual), so I don't think I need > > something too fancy. I am in the same situation with an extra constraint: some are laptops and not always connected. > > My first thought was to simply add a `Files:` section to *.control > > files I use for my metapackages. After all, for configs going into > > *.d directories, they are usually easy to just drop in and remove, no > > editing in place required. But, that is when I discovered that all > > files under `/etc` are treated specially. The limitation of this is that you cannot modify existing configuration files, which is required sometimes. > > Anyway, suggestions based upon actually experience would be appreciated. > > The easy end of single-machine is etckeeper, which just checks > your /etc (and whatever else you specify) into a local git. The > high end of single machine is Nix, which has a complete language > designed to capture the complete configuration of a system (and > has spawned NixOS, a complete distribution). > > The easy end of multi-machine systems is cdist and itamae. You might be > quite happy with those, and itamae is reputedly very Chef-like. I can also mention ansible which is ubiquitous nowadays and is relevant even for a single machine. I've worked around my laptop deployment requirement with a wrapper script around ansible-pull and a systemd timer to regularly pull the conf from a git repository. It works well but the complete configuration is known to all machines. The Nix mention is highly relevant, but I did not get the chance to play with it yet. The big advantage over ansible and probably many others is that if you remove a package installation from your configuration, it will get removed from the host upon configuration deployment. Whereas with ansible, you must add a explicit uninstallation rule. This is fine for cloud host deployment where you always start from scratch, but for physical machines and user laptops, Nix enforces consistency (but then you need to learn something that is not Debian...). Cheers, Alex
Re: Building binary package, howto enable init.d/systemd start
Hi, > i am trying to build a binary debian package consisting of a python > script, shell scripts and a config file as daemon with either init.d or > systemd start. > > The init.d script gets installed also the systemd file, but both are not > enabled. [...] > In debian/rules is: > > #!/usr/bin/make -f > > DH_VERBOSE=1 > > %: > dh $@ > clean: > @# Do nothing > > build: > @# Do nothing > > binary: [...] I suggest you use override_dh_auto_install instead or better use debian/install (man dh_install) for what you do in this target. > I have the strange feeling the entire postinstall stuff is missing. > Is there a significant typo somewhere so obvious I am to stupid to see? I think that overriding the binary target breaks debhelper. [...] > If there is a distribution like Mint Tessa for example, how does the > system decide which startmethod to choose, if init.d and systemd are > enabled successfully? I see a mix of init.d and systemd there regading > starting stuff. Your package will support both and the magic will happen at package install phase. I think dh_installinit and dh_installsystemd generate the postinst scripts that make this happen. Cheers, Alex
Re: laptop freezes randomly - please help!! dell xps 15 with debian testing
Hi, > In the past week my laptop freezes randomly, I can say it happens every 2-3 > hours. but there are actions that consistently always cause a freeze, like > opening Zoom or executing lspci in Terminator. I would suggest: - try to get more debugging info using SysRQ keys [1] - try to get more debugging info using netconsole[2] (needs wired connection) - try another OS (Ubuntu live CD, Windows) to rule out hardware problem [1] https://www.kernel.org/doc/html/latest/admin-guide/sysrq.html [2] https://debamax.com/blog/2019/01/03/debugging-with-netconsole/ Alex
Re: rsync copyed systemd-nspawn container won't start
Hi, [...] > Jan 11 15:22:55 dhanna systemd-nspawn[21268]: Failed to create > /init.scope control group: Operation not permitted [...] > Then I try it with > > debootstrap --variant=minbase --include > systemd,vim,libterm-readline-gnu-perl,iproute2,dialog,dbus stretch > /var/lib/machines/foo > > it work as expected. > > Any ideas? This may be related to systemd<236 in the container. I would try one of the workarounds mentionned in https://github.com/systemd/systemd/issues/9563 : - passing systemd.legacy_systemd_cgroup_controller=yes to systemd via Parameters= - try with systemd-nspawn ... --private-users=0 --private-users-chown Alex
Re: Working for free [was: Offensive variable names]
Le mardi 13 juillet 2021, 16:09:50 CEST Celejar a écrit : > On Tue, 13 Jul 2021 16:08:53 +0300 > > Reco wrote: > > On Tue, Jul 13, 2021 at 08:01:58AM -0400, Celejar wrote: > > > > Github (Gitlab, Sourceforge, etc) were and are non-free (as in - > > > > non-gratis) services, so it's only reasonable to stay away from > > > > them > > > > regardless of whom is controlling them. > > > > > > What do you mean by calling them non-gratis services? I know that > > > some > > > of their services are non-gratis, but basic code hosting certainly > > > is > > > gratis. > > > > You do not pay for these services, yet they provide them to you and > > everyone else (with certain exclusions). > > Guess who is the product here? The answer is - you are the product. > > Payment involving money is not the only kind of payment that you can > > make today. > > I think that's an unreasonable definition of gratis and non-gratis. If > a FLOSS dev gets an ego boost, or even some sort of spiritual > satisfaction, from people using his software, does that mean it's > non-gratis? An ego-boost doesn’t grant power, that is, possibility of action of your will on the actions of others. But github as a platform provides a great deal of power to microsoft. They litterally own your data. Maybe not your programs, but maybe all your metadata + what was listed later (bugreports, etc.). The mail you answer to sadly didn’t explain concretely what is the payement, and how you can make money from it. The answer is: selling personal data. Both what you output, what comes from you, and what is inputted to you, what to see. Knowing what you say, what you see, what you like to see, and deciding it sells very profitably nowadays, agueably more than oil.
Re: Working for free [was: Offensive variable names]
Le mardi 13 juillet 2021, 20:00:44 CEST Celejar a écrit : > On Tue, 13 Jul 2021 19:28:39 +0200 > Alexandre Garreau wrote: > > Le mardi 13 juillet 2021, 14:01:58 CEST Celejar a écrit : > > > On Tue, 13 Jul 2021 11:54:43 +0300 > > > Reco wrote: > > > > Github (Gitlab, Sourceforge, etc) were and are non-free (as in - > > > > non-gratis) services, so it's only reasonable to stay away from > > > > them > > > > regardless of whom is controlling them. > > > > > > What do you mean by calling them non-gratis services? I know that > > > some > > > of their services are non-gratis, but basic code hosting certainly > > > is > > > gratis. > > > > Maybe we could say that you pay with your personal data, or with the, > > per network effect, power you give to microsoft to organize a social > > networking platform that’s very important for finding work, a lot > > more than their shitty linkedin > > Fair enough. But by the same logic, things like Matrix and Signal are > not gratis, since by using them, you empower their controlling > foundations via the network effect. Signal is not a lucrative company (yet… who knows, looking at their bad faith), but you’re right there, because since they’re centralized and depending on proprietary OSes, you indeed grant power by using them. But Signal is not so powerful, so it’s not a so big problem, it’s only sad given their stated goal, and its ideological proximity with software freedom and net decentralization… Matrix is meant to be decentralized, so network effect shouldn’t apply. But maybe your message is a critic of good faith of matrix people and their network, because of instability (hence unstandardness) of their protocol, asymetry in their gateways (remembering a bit discord…), big asymetries in development of their clients, official non-free client, and total (wilingful?) blindness about existing implementations such as xmpp u.u Same can be argued about Twitter, Facebook, etc. One one hand, they’re gratis of charges, no money is required to enter, on the other hand “if it’s gratis, you are the product”, and indeed these are companies that make actual money. Big money, GAFAM are among the richest in the world u.u And Twitter is pretty powerful (even and especially politically) after all. > Hey, for that matter, Debian is not gratis, since by using it, we grant > considerable power to the DDs, their committees, and the DPL! No, they’re not submitted to network effect, Debian is not a social network. Moreover, Debian is non-lucrative. Currently nobody can get *power* from it.
Re: Working for free [was: Offensive variable names]
Le mardi 13 juillet 2021, 14:01:58 CEST Celejar a écrit : > On Tue, 13 Jul 2021 11:54:43 +0300 > > Reco wrote: > > Hi. > > > > On Tue, Jul 13, 2021 at 09:20:12AM +0200, to...@tuxteam.de wrote: > > > > > Working for free. > > > > > > > > Yes. This aspect was always annoying to Microsoft and alike. > > > > > > Times have changed. Now Microsoft *loves* free work... done for > > > them [1]. > > > > Nothing had changed in this regard. Every software corporation always > > adored enthusiasts doing their job for them. No exceptions. > > > > > Not that this enhances my love for Microsoft, mind you. It rather > > > confirms my initial gut feeling to stay out of Githubs way wherever > > > I can. > > > > Github (Gitlab, Sourceforge, etc) were and are non-free (as in - > > non-gratis) services, so it's only reasonable to stay away from them > > regardless of whom is controlling them. > > What do you mean by calling them non-gratis services? I know that some > of their services are non-gratis, but basic code hosting certainly is > gratis. Maybe we could say that you pay with your personal data, or with the, per network effect, power you give to microsoft to organize a social networking platform that’s very important for finding work, a lot more than their shitty linkedin
Re: Offensive variable names [was: Cool down ...]
Le dimanche 11 juillet 2021, 22:58:55 CEST Polyna-Maude Racicot-Summerside a écrit : > Hi, > > > Whatever, the use of controversial words in publicly visible code is > > not an indication of a professional attitude. Overdoing juvenile > > enthusiasm for provocation might lead to a result like with the > > "weboob" package which got removed from Debian > > > > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=907199 > > Just took a look at this. > It was a real time consuming job only to "try" fixing something done > because a kid had too much free time ! > > It's really childish to gratify oneself by putting offensive comments in > a software. I think it is bad policy of morally judging the frustration, anger or tone of people because of their oppressors. I think being mad or offensive, at least not even face-to-face, against your boss, bank, etc. is normal and sane (at least it is in our country). On the other hand, tone policing looks a bad idea to me, because it blocks debate while maybe discouraging people to contribute their ideas u.u
Re: Web log analysis
Hi, > In this case, Richard seems to be looking for analysis of the > web server logs he has already collected. > > analog > awfful > awstats > goaccess > logstalgia > logswan > visitors > webalizer analog, awfful, awstats, visitors and webalizer seem unmaintained. logstalgia is an Xorg app that displays log stats in retro videogame fashion. logswan only outputs JSON so needs to be fed into somtehing else to produce graphs. Of those, only goaccess seems to be maintained. It complies with many of your requirements, although analysing data over long periods is not straightforward. I use it to produce one static report per month and it suits my basic needs. Cheers, Alex
Re: trouble with sbuild
Hi, > $ sbuild-createchroot --chroot-mode=unshare --make-sbuild-tarball ~/.cache/ > sbuild/unstable-amd64.tar.gz unstable $(mktemp -d) > https://deb.debian.org/debian/ > [...] > If I understand well, it is a Perl script that tries to execute some > 'newuidmap' command that is part of the uidmap package and is not currently > installed, neither present in the sbuild depends. > I am trying to follow /u/s/d/sbuild/README.Debian that does not mention > anything on this. > What did I miss? In the source upstream changelog: * Major changes in 0.77.0: 1) core: New chroot mode "unshare" which allows unprivileged package builds by using Linux user namespaces. Only requires lightweight newuidmap and newgidmap suid binaries. Chroots can be created and updated without needing sudo and are stored in ~/.cache/sbuild or an arbitrary absolute path given via the --chroot option. Installing the uidmap should fix your problem. Maybe sbuild should recommend uidmap. Alex
libselenium-remote-driver-perl Bugs: 839...@bugs.debian.org
Hello, Will trying to install OpenQA on Debian, I discovered a bugs opened on bugs.debian.org. I tried to make the driver, it's seem to work but i've been stuck, how i can help DD on this paquages, it's been 5 years old now. Thanks
Re: systemd-nspawn networking inside VirtualBox VM
Hi, > > since I am not well educated about macvlan, ipvlan, I could not get the > > networking working at all. I would like to avoid using > > "systemd-networkd/systemd-resolvd" especially on the Buster host - using > > those > > it seems should make everything work automagically. > > If you realy want to do the networking yourself, you will need to create > the bridge based on the examples found in '/lib/systemd/network'. I've had success declaring a bridge in /etc/network/interfaces: iface br0 inet dhcp bridge_ports eth0 # this is your VM Ethernet and launching my containers with: $ cat /etc/systemd/nspawn/container.nspawn [Exec] Boot=yes [Network] Bridge=br0 $ sudo machinectl start container Alex
Re: ActiveSync Postfix
Hi, > I am using Postfix. (Postfix, OpenLdap, Dovecot, Squirrelmail) My goal > is to synchronize contacts and calendars. I have to do ActiveSync for > this. How can I resolve ActiveSync ? Is there an open source solution > ? Postfix does not support this. ActiveSync is a Microsoft protocol. If you want an open source server providing ActiveSync, I known about https://sogo.nu/ , although I have never used it. https://sogo.nu/files/docs/SOGoInstallationGuide.html#_microsoft_enterprise_activesync There are other resources in an old serverfault question. https://serverfault.com/questions/5282/is-there-any-open-source-exchange-server Cheers, Alex
Re: unable to update
shirish शिरीष a écrit : > addition at bottom :- > > On 06/01/2020, shirish शिरीष wrote: >> Dear all, >> >> This is my /etc/apt/sources.list - >> >> >> Debian testing ### >> deb http://cdn-fastly.deb.debian.org/debian/ testing main contrib >> non-free >> deb-src http://cdn-fastly.deb.debian.org/debian testing main contrib >> non-free >> #deb http://cdn-fastly.deb.debian.org/debian-security testing/updates >> main >> #deb-src http://cdn-fastly.deb.debian.org/debian-security >> testing/updates main >> >> >> Debian unstable # >>deb http://cdn-fastly.deb.debian.org/debian/ unstable main >> contrib non-free >> deb-src http://cdn-fastly.deb.debian.org/debian/ unstable main >> contrib non-free >> >> >> Debian experimental # >> deb http://cdn-fastly.deb.debian.org/debian experimental main contrib >>deb-src http://cdn-fastly.deb.debian.org/debian experimental main >> contrib >> >> # Debian Debug packages ### >> deb http://debug.mirrors.debian.org/debian-debug/ testing-debug main >> deb http://debug.mirrors.debian.org/debian-debug/ unstable-debug main >> deb http://debug.mirrors.debian.org/debian-debug/ experimental-debug >> main >> >> >> Third party repos ### >>deb https://riot.im/packages/debian/ buster main >> #deb https://lxqt.debian.net/debian experimental-snapshots main >> #deb-src https://lxqt.debian.net/debian experimental-snapshots main >> >> ## Non-free >> #deb http://www.deb-multimedia.org stretch main non-free >> Hello, According to [0], please remove : cdn-fastly. On each lines ! Why do you mix stable, unstable, experimental ? Which message do you have ? Thanks. Alex. [0] https://wiki.debian.org/DebianGeoMirror
Re: Running a music player via cron
Hi, > >> Playing: http://direct.franceinfo.fr/live/franceinfo-midfi.mp3 > >> (+) Audio --aid=1 (mp3 1ch 44100Hz) > >> ALSA lib pcm_dmix.c:1108:(snd_pcm_dmix_open) unable to open slave > >> [ao/alsa] Playback open error: Device or resource busy > >> [ao/oss] Can't open audio device /dev/dsp: Device or resource busy > > > > Either another process is still acessing your speakers or may you're > > not logged in. > > I am logged in. I suspect a pulseauio issue. Me too. What does it say with -ao pulse ? I suspect $PULSE_SERVER is not set and mpv cannot find the server started in your graphical session. I would find its contents in my graphical session, put it in the crontab and if it works, come up with a script to guess it. Thanks, Alex
Re: apt-offline
Hi, > > I see that apt-offline is not part of buster. Is there any plan to add it? > > Only the maintainer would know about that. It is unlikely he reads this > list. https://bugs.debian.org/871656 is what keeps apt-offline out of testing and thus stable. Alex
Re: How to use adminer?
Hi, > I installed adminer in debian 10 by sudo apt install adminer. > Now I am unsure how to use it on web browser. Note I installed LAMP and > already run a local setup for Wordpress. If your LAMP webroot is /var/www/html do, one way is to do the following. $ ln -s /usr/share/adminer/adminer /var/www/html and you should find adminer at http://server.example.com/adminer Alex
Re: nft 'modules'
Hi, > In ipchains, there were a lot of modules that I used a few of, like > recent and the one that put comments on the end of a rule. I can't find > anything, one way or the other, discussing these add-ons with nft. > > Is there such a thing in nft? Is nft so new that they just haven't been > written yet? Is there no plan to have these available? Although I'm not a firewalling expert, it looks about the same[1]. For instance, I was recently bitten by nft not seing in the forward chain the traffic on the bridge interface connecting some containers until I had loaded the br_netfilter kernel module. For comments, it seems to be built in because I set some and not obvious corresponding module is loaded. $ lsmod | grep "nft\|netfilter" nft_compat 20480 412 nft_log16384 4 nft_counter16384 429 nft_ct 20480 3 nf_conntrack 163840 2 xt_conntrack,nft_ct nf_tables 143360 1471 nft_ct,nft_compat,nft_log,nft_counter,nf_tables_set nfnetlink 16384 4 nfnetlink_queue,nft_compat,nf_tables,nfnetlink_log br_netfilter 24576 0 bridge188416 1 br_netfilter x_tables 45056 7 xt_conntrack,nft_compat,xt_multiport,xt_tcpudp,ipt_REJECT,ip_tables,ip6t_REJECT Cheers, Alex [1] grep "NETFILTER\|NFT" /boot/config-4.19.0-5-amd64 CONFIG_NETFILTER=y CONFIG_NETFILTER_ADVANCED=y CONFIG_BRIDGE_NETFILTER=m CONFIG_NETFILTER_INGRESS=y CONFIG_NETFILTER_NETLINK=m CONFIG_NETFILTER_FAMILY_BRIDGE=y CONFIG_NETFILTER_FAMILY_ARP=y CONFIG_NETFILTER_NETLINK_ACCT=m CONFIG_NETFILTER_NETLINK_QUEUE=m CONFIG_NETFILTER_NETLINK_LOG=m CONFIG_NETFILTER_NETLINK_OSF=m CONFIG_NETFILTER_CONNCOUNT=m CONFIG_NETFILTER_NETLINK_GLUE_CT=y CONFIG_NETFILTER_SYNPROXY=m CONFIG_NFT_NUMGEN=m CONFIG_NFT_CT=m CONFIG_NFT_FLOW_OFFLOAD=m CONFIG_NFT_COUNTER=m CONFIG_NFT_CONNLIMIT=m CONFIG_NFT_LOG=m CONFIG_NFT_LIMIT=m CONFIG_NFT_MASQ=m CONFIG_NFT_REDIR=m CONFIG_NFT_NAT=m CONFIG_NFT_TUNNEL=m CONFIG_NFT_OBJREF=m CONFIG_NFT_QUEUE=m CONFIG_NFT_QUOTA=m CONFIG_NFT_REJECT=m CONFIG_NFT_REJECT_INET=m CONFIG_NFT_COMPAT=m CONFIG_NFT_HASH=m CONFIG_NFT_FIB=m CONFIG_NFT_FIB_INET=m CONFIG_NFT_SOCKET=m CONFIG_NFT_OSF=m CONFIG_NFT_TPROXY=m CONFIG_NFT_DUP_NETDEV=m CONFIG_NFT_FWD_NETDEV=m CONFIG_NFT_FIB_NETDEV=m CONFIG_NETFILTER_XTABLES=m CONFIG_NETFILTER_XT_MARK=m CONFIG_NETFILTER_XT_CONNMARK=m CONFIG_NETFILTER_XT_SET=m CONFIG_NETFILTER_XT_TARGET_AUDIT=m CONFIG_NETFILTER_XT_TARGET_CHECKSUM=m CONFIG_NETFILTER_XT_TARGET_CLASSIFY=m CONFIG_NETFILTER_XT_TARGET_CONNMARK=m CONFIG_NETFILTER_XT_TARGET_CONNSECMARK=m CONFIG_NETFILTER_XT_TARGET_CT=m CONFIG_NETFILTER_XT_TARGET_DSCP=m CONFIG_NETFILTER_XT_TARGET_HL=m CONFIG_NETFILTER_XT_TARGET_HMARK=m CONFIG_NETFILTER_XT_TARGET_IDLETIMER=m CONFIG_NETFILTER_XT_TARGET_LED=m CONFIG_NETFILTER_XT_TARGET_LOG=m CONFIG_NETFILTER_XT_TARGET_MARK=m CONFIG_NETFILTER_XT_NAT=m CONFIG_NETFILTER_XT_TARGET_NETMAP=m CONFIG_NETFILTER_XT_TARGET_NFLOG=m CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m # CONFIG_NETFILTER_XT_TARGET_NOTRACK is not set CONFIG_NETFILTER_XT_TARGET_RATEEST=m CONFIG_NETFILTER_XT_TARGET_REDIRECT=m CONFIG_NETFILTER_XT_TARGET_TEE=m CONFIG_NETFILTER_XT_TARGET_TPROXY=m CONFIG_NETFILTER_XT_TARGET_TRACE=m CONFIG_NETFILTER_XT_TARGET_SECMARK=m CONFIG_NETFILTER_XT_TARGET_TCPMSS=m CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m CONFIG_NETFILTER_XT_MATCH_BPF=m CONFIG_NETFILTER_XT_MATCH_CGROUP=m CONFIG_NETFILTER_XT_MATCH_CLUSTER=m CONFIG_NETFILTER_XT_MATCH_COMMENT=m CONFIG_NETFILTER_XT_MATCH_CONNBYTES=m CONFIG_NETFILTER_XT_MATCH_CONNLABEL=m CONFIG_NETFILTER_XT_MATCH_CONNLIMIT=m CONFIG_NETFILTER_XT_MATCH_CONNMARK=m CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m CONFIG_NETFILTER_XT_MATCH_CPU=m CONFIG_NETFILTER_XT_MATCH_DCCP=m CONFIG_NETFILTER_XT_MATCH_DEVGROUP=m CONFIG_NETFILTER_XT_MATCH_DSCP=m CONFIG_NETFILTER_XT_MATCH_ECN=m CONFIG_NETFILTER_XT_MATCH_ESP=m CONFIG_NETFILTER_XT_MATCH_HASHLIMIT=m CONFIG_NETFILTER_XT_MATCH_HELPER=m CONFIG_NETFILTER_XT_MATCH_HL=m CONFIG_NETFILTER_XT_MATCH_IPCOMP=m CONFIG_NETFILTER_XT_MATCH_IPRANGE=m CONFIG_NETFILTER_XT_MATCH_IPVS=m CONFIG_NETFILTER_XT_MATCH_L2TP=m CONFIG_NETFILTER_XT_MATCH_LENGTH=m CONFIG_NETFILTER_XT_MATCH_LIMIT=m CONFIG_NETFILTER_XT_MATCH_MAC=m CONFIG_NETFILTER_XT_MATCH_MARK=m CONFIG_NETFILTER_XT_MATCH_MULTIPORT=m CONFIG_NETFILTER_XT_MATCH_NFACCT=m CONFIG_NETFILTER_XT_MATCH_OSF=m CONFIG_NETFILTER_XT_MATCH_OWNER=m CONFIG_NETFILTER_XT_MATCH_POLICY=m CONFIG_NETFILTER_XT_MATCH_PHYSDEV=m CONFIG_NETFILTER_XT_MATCH_PKTTYPE=m CONFIG_NETFILTER_XT_MATCH_QUOTA=m CONFIG_NETFILTER_XT_MATCH_RATEEST=m CONFIG_NETFILTER_XT_MATCH_REALM=m CONFIG_NETFILTER_XT_MATCH_RECENT=m CONFIG_NETFILTER_XT_MATCH_SCTP=m CONFIG_NETFILTER_XT_MATCH_SOCKET=m CONFIG_NETFILTER_XT_MATCH_STATE=m CONFIG_NETFILTER_XT_MATCH_STATISTIC=m CONFIG_NETFILTER_XT_MATCH_STRING=m CONFIG_NETFILTER_XT_MATCH_TCPMSS=m CONFIG_NETFILTER_XT_MATCH_TIME=m CONFIG_NETFILTER_XT_MATCH_U32=m CONFIG_NFT_CHAIN_ROUTE_IPV4=m CONFIG_NFT_REJECT_IPV4=m
Re: I Can't use adminer
> > You must also install and setup a php-enabled web server for it to > > work. > > > > The simplest way to get it running is: > > $ cd /usr/share/adminer > > $ php -S localhost:8000 > > > > and you'll find adminer at http://localhost:8000/adminer/ > > > > (There are many other ways to run a php app) > > > > Alex > > Thanks. I make a file in /etc/apache2/conf-available/adminer.conf And > place > Alias /adminer.php /usr/share/adminer/adminer/index.phpthis. Is > it allright? You must also enable some php runtime to process the scripts. In your case, maybe libapache2-mod-php is the simplest. There are numerous tutorials about how to do this. Feel free to get back here if you get stuck somewhere in the process. Alex
Re: I Can't use adminer
Hi, > I want to use adminer for php operations. I installed it via apt install > adminer. > But I am not able to open it on localhost. Can anyone help me? You must also install and setup a php-enabled web server for it to work. The simplest way to get it running is: $ cd /usr/share/adminer $ php -S localhost:8000 and you'll find adminer at http://localhost:8000/adminer/ (There are many other ways to run a php app) Alex
Re: systemd-nspawn + systemd-networkd
Hi, For the container I need a static address, I know in can be configured on container side. Is there a way to do this config only on host side? Edit a file to bind mac address and ip for example. Like kvm network or "real" dhcp can do? There does not seem to be any other option than running a full featured DHCP server or configuring networking in the container. Alex
Re: VPN client for CheckPoint VPN
Le 2019-05-20 16:16, Jim Popovitch a écrit : Is there a VPN endpoint client that works with "CheckPoint EndPoint Security VPN". I have been assigned an IP address of the VPN server, a username, and a password. Vpnc seems to think I need a Group name and password, and won't accept leaving them blank. Halp! tia, -Jim P. Hello, Maybe the openvpn client ? Some (almost all, i think) rebadge openvpn with theirs name. Regards.
Re: Kodi Bluray support.
Hello Brad, Hello Alexandre, Thanks for the clue but as you stated i already using this is the file with VLC. In case you are not aware; KEYDB.cfg is a moving target. You have to update it every now and then. I aware of that, the bluray is already inside this file KEYDB.cfg and that why i can play it on VLC. Thanks.
Re: Kodi Bluray support.
Le 29/03/2019 à 17:47, Curt a écrit :
> On 2019-03-29, Alexandre GRIVEAUX wrote:
>> Hello,
>>
>> Do anybody play bluray with kodi ?
>>
>> Its work well with VLC on the same machine with:
>>
>> - libaacs
>> - libdplus
>> - some others related
>>
>> But i'm unable to play it with kodi, kodi detect a DVD instead of
>> bluray.
> Then what happens? Because a cursory reading of the internets indicates
> this ('detecting' a dvd rather than a bluray) isn't a show-stopper.
>
> I also read that you need a KEYBD.cfg file in ~/.config/aacs in order to
> play (decode) bluray discs with kodi.
>
> That file seems to be here:
>
> https://vlc-bluray.whoknowsmy.name/files/KEYDB.cfg
>
> Maybe you have that file already.
>
> Good luck.
>
>> I'm using paquages from debian repos.
>>
>> Thanks
>>
>>
>
Hello,
Thanks for the clue but as you stated i already using this is the file
with VLC.
Kodi Bluray support.
Hello, Do anybody play bluray with kodi ? Its work well with VLC on the same machine with: - libaacs - libdplus - some others related But i'm unable to play it with kodi, kodi detect a DVD instead of bluray. I'm using paquages from debian repos. Thanks
Re: GIMP Crash
Le 17/03/2019 à 01:27, Adam Haas a écrit : > I was working with the Gnu Image Manipulation Program yesterday when a > segmentation fault occurred. Attached is the information spit out in > association with the event. Please let me know what additional > information you need from me and I will pass it along. > > - Adam Haas Hello, Can you send the content of your /etc/apt/sources.list ? Thanks.
Re: P2V Debian 9 with VMware Converter
Le 2019-02-13 14:58, Adam Weremczuk a écrit : Short answer - because it will take significantly longer and potentially lead to more errors. Especially if I have a number of servers with different structures and purposes. It's hard to beat 20-30 seconds it takes to click and type into VMware Converter and leave it running. It works well for Debian 7, probably 8 as well but not 9 :( On 13/02/19 13:09, Alexandre GRIVEAUX wrote: Hello, Why did you use a vmware converter instead configuring a VM and copy your data ? Regards, Hello, Maybe you can do dd HDD clonning of Pysical to Virtual HDD and correct udev rules inside /etc/rules.d/ for the network card. Regards.
Re: P2V Debian 9 with VMware Converter
Le 2019-02-13 10:14, Adam Weremczuk a écrit : Hi all, I persistently get "The destination does not support EFI firmware" . Apparently the latest Converter doesn't support Debian 9 (yet?). More details on my issue here: https://communities.vmware.com/message/2837600 Has anybody had success tricking Converter to perform a migration? Any other P2V tools you would recommend? Thanks, Adam Hello, Why did you use a vmware converter instead configuring a VM and copy your data ? Regards,
Re: iptables issue with ASP.Net Core Port 5000
Le 2019-02-13 11:43, Patrick Kirk a écrit :
Hi all,
I have a simple asp.net core site that runs with Postgres which works
fine if I login as root and set it to run on port 80. SSL is done by
cloudflare. I would prefer to use nginx or at least have an iptable
rule to redirect the port 80 traffic. Both have the same failure so
for now I am trying with iptables.
I don't believe this is an issue with asp.net but the line I use to
set ports is:
public static IWebHostBuilder CreateWebHostBuilder(string[] args) =>
WebHost.CreateDefaultBuilder(args).UseUrls("http://localhost:5000";,
"http://*:80";)
.UseStartup();
To run the program on port 80, I have to run as root which I want to
get away from. So I remove the port 80 from Program.cs and then run
the program. Output of nmap is:
Starting Nmap 7.40 ( https://nmap.org ) at 2019-02-13 10:35 UTC
Nmap scan report for localhost (127.0.0.1)
Host is up (0.080s latency).
Not shown: 997 closed ports
PORT STATE SERVICE
22/tcp open ssh
5000/tcp open upnp
5432/tcp open postgresql
If I try the iptables route the command I use is:
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port
5000
This works fine for Lynx http://localhost but for my url I get
"Alert!: HTTP/1.1 521 Origin Down"
If I try to use nginx, which I believe is configured correctly, I get
the exact same issue.
Has anyone any idea what's wrong with my setup?
Patrick
Hello,
Did you want ASP.net and apache or nginx to use the same 80 port ?
Regards,
Re: Windows 10 & Debian 9: Win 10 not updating
Hi, >Problem: Neither Win 10 OS has been able to successfully update since >about last April. I have tried all the things I have found in an >Internet search, including making sure the Win partition is marked >boot-able, and downloading and running the Win 10 trouble shooter--all >to no avail. A while ago I had found out that bypassing grub, that is boot to Windows using the bios boot menu, helped some specific win7 updates get installed. Maybe this is the same here. Good luck. Alex
Source-specific routing
Hi,
I don’t know if this is the right place to ask, if my problem is not too
specific or something.
Is source-specific routing possible under debian? I think this is what
I need in my case ("multihoming" I think): on my laptop I'm generally
connected too zero up to two differents networks (from different ISP),
and therefore have from 0 to 6-7 different IP addresses (currently: two
local IPv4 addresses and two public IPv6 addresses from my physical home
ISP (possibly counting the public IPv4 whose my NATed network is behind
and that I could use modulo some config and negotiations with flatmate),
and two public IP addresses (v6 and v4) from a VPN: misleadingly, that's
3 network interfaces: one (tun0) for my VPN ISP, and two (enp0s25 and
wlp2s0) for my physical home ISP).
I host my mail server on this machine (my laptop yes, though it is not
always up (it stays on during night, but is offline when I travel
sometimes, between two different places with internet access, but this
wasn't the case at the time I had an unlimited 3G data access through a
WWAN card (I need to get and fit another one now)).
I'd like my computer to be able to receive mail from all network
interfaces (including local networks) at any time, and preferably send
from the VPN (tun0, openvpn, and I connect through Network Manager), but
possibly also from my home physical ISP when available (without
disconnecting from my VPN, if I'm ever connected to it), and to be able
to change the default route for opening connections (for exemple
accessing web or FTP services from a local network (intranet), as I need
to in my college).
So I guess source-specific routing is what I need, so that for any
connection using any IP my computer send the packet on the right
interface with the right IP.
I feel like that's an interesting networking problem for learning
networking stuff as I'd like ^^
So any idea? place to find information?
Re: Oracle VM VirtualBox on MS Windows 10
Le 2018-11-05 13:12, s.mol...@sbcglobal.net a écrit : I have encountered an unusual (at least for me) problem. The only platform that I own that does not run Debian, is my new 64-bit HP laptop. I had VirtualBox installed on my old 64-bit laptop. I just downloaded VirtualBox-5.2.20-125813-Win.exe and installed it on my new HP Laptop without any warning or error messages. When I ran VirtualBox to install the 64-bit Debian Stretch iso the installer only showed 32-bit Linux applications. What is going on here? Thanks in advance. Stephen P. Molnar, Ph.D. Life is a fuzzy set Consultant Stochastic and multiavaiant www.molecular-modeling.net [1] Skype: smolnar1 Links: -- [1] http://www.molecular-modeling.net/ Hello, Maybe you need to turn ON virtualization from the BIOS/UEFI menu ? Thanks.
Re: Upgrading with a low data cap
Hi, > Something just brought to mind apt-offline. The introductory paragraph > in the man page states: > > apt-offline brings offline package management functionality to Debian > based system. It can be used to download packages and its dependencies > to be installed later on (or required to update) a disconnected machine. > Packages can be downloaded from a different connected machine. > > Don't know how suitable it would be FOR ME. However studying its use may > prompt questions &/or answers I haven't thought about. >From looking at the source[1], apt-offline seems to be looking in the local cache first before fetching files from the Web. [1] https://github.com/rickysarraf/apt-offline/blob/master/apt_offline_core/AptOfflineCoreLib.py#L1231 Alex
Re: Autologin not working (lightdm, openbox)
Hi, > Before anyone asks, i've looked all over the wiki and every other post online > so i'm not sure why this isn't working. When I start up my machine X starts > up fine. and it goes to the lightdm login screen, but it still makes me put > in the password. > > My user is in the autologin and nopasswdlogin groups, i've made the right > changes to both the files listed below as A and B sources. I've always had no problem with autologin with lightdm, all I ever had to do was to set autologin-user in the [Seat:*] in /etc/lightdm/lightdm.conf . Another option that I have used successfuly is using lightdm-autologin-greeter and setting up autologin-user in /etc/lightdm/lightdm.conf.d/lightdm-autologin-greeter.conf I guess you already checked this but double check you are able to login with that user using a password. Alex
Re: Cannot start davmail service
Hi, > I have a problem with davmail package in debian testing and need some advise. > > If I install it I can start and stop the service via systemctl without any > problem and it works flawlessly. > > However, after a reboot, the service does not start. I get the following > error: > > abr 26 10:51:00 localhot systemd[17207]: davmail.service: Failed to execute > command: Exec format error > abr 26 10:51:00 localhot systemd[17207]: davmail.service: Failed at step EXEC > spawning /usr/bin/davmail: Exec format error davmail is an executable jar which uses jarwrapper which uses binfmt_misc[1] to make arbitrary files executable. It seems the binfmt-support service has not run properly on your machine. Does restarting it fix the problem? [1] https://en.wikipedia.org/wiki/Binfmt_misc Alex
Re: on-screen artifacts (red pixels) at high resolution with Intel HD 630 (Kaby Lake)
>> Two other PCs (Linux and Windows) going through the same HDMI cable to >> the same TV and same TV port using the same 1920x1080 resolution work >> perfectly. > > How long is the cable? Do you have access to another to try? ~20% of the HDMI > cables I have are either useless or flaky with at least one device. Same symptoms with another cable. > Does the TV label any of its HDMI ports differently from the others? One of > mine > does, labeling one HDMI-3/DVI. It does behave differently than the others. Same symptoms with the other TV ports, some being worse than others. >> Outputting to another 1920x1080 monitor works well. > > Do you have another, to which you could connect using DisplayPort or HDMI? Yes, another screen is working perfectly through the same HDMI cable. >> I've tried multiple combinations of Xorg setup with no working setup : >> - modesetting Xorg driver with glamor or none as AccelMethod >> - intel Xorg driver with sna or uxa as AccelMethod, DRI 2 or 3. >> I've also tried with i915.enable_rc6=0 and this does not change anything. > > The log you previously attached reports "Indeterminate output size" from the > Samsung 659's EDID. I wonder if it would change anything to include an output > size in xorg.conf? > > Same log shows both 60.0 and 59.9 1920x1080 modes. You could try forcing to > use > the other, or 50.0, at least to see if the problem remains. $ xrandr # bad picture Screen 0: minimum 320 x 200, current 1920 x 1080, maximum 8192 x 8192 DP-1 disconnected primary (normal left inverted right x axis y axis) HDMI-1 disconnected (normal left inverted right x axis y axis) HDMI-2 connected 1920x1080+0+0 (normal left inverted right x axis y axis) 160mm x 90mm 1920x1080 60.00*+ 50.0059.9430.0025.0024.00 29.9723.98 1920x1080i60.0050.0059.94 1600x1200 60.00 1680x1050 59.88 1280x1024 75.0260.02 1440x900 74.9859.90 1280x960 60.00 1360x768 60.02 1280x800 59.91 1152x864 75.00 1280x720 60.0050.0059.94 1024x768 75.0370.0760.00 832x624 74.55 800x600 72.1975.0060.32 720x576 50.00 720x480 60.0059.94 640x480 75.0072.8166.6760.0059.94 720x400 70.08 DP-2 disconnected (normal left inverted right x axis y axis) HDMI-3 disconnected (normal left inverted right x axis y axis) $ xrandr -s 1920x1080 -r 30 # good picture, yeah! thanks! $ xrandr # seems like I switched to 1080i [...] 1920x1080 60.00 + 50.0059.9430.0025.0024.00 29.9723.98 1920x1080i60.00* 50.0059.94 [...] The problem remains using xrandr -s 1920x1080 -r 50. What I do not understand is : $ xrandr -s 1920x1080 -r 59.94 Rate 59.94 Hz not available for this size Because the refresh rate is listed. Seems like a rounded output? Also, documentation is lacking for xorg.conf.d (or I could not find it) because the following does not seem to be taken into account : $ cat /etc/X11/xorg.conf.d/20-samsung.conf Section "Monitor" Identifier "SAMSUNG" Option "PreferredMode" "1920x1080i" # or whatever value EndSection so I'm stuck with the xrandr call in ~/.xsession . >> I would also love >> to get any other idea or pointer regarding solving this. > > Bring it up on: > http://lists.freedesktop.org/mailman/listinfo/intel-gfx Will do when I understand refresh rate manipulation a bit more. Thanks _a lot_ for the pointers. Alex
Re: on-screen artifacts (red pixels) at high resolution with Intel HD 630 (Kaby Lake)
>> I'm experiencing red blinking pixels in dark areas in the displayed >> Xorg picture on my TV connected using a HDMI cable. > > can you test with another HDMI cable? Just because the HDMI cable works > under Windows or Linux with a different GPU does not mean it will work under > Linux with your HD Graphics 630. I am no expert, but there are all sorts of > complications like HDMI clock frequency and colour depths. Linux with your > 630 might be negotiating an HDMI connection that almost works but that your > cable cannot reliably support. I would try another HDMI cable to eliminate > it as an issue. Bad or marginal HDMI cables are a common problem. With another HDMI cable, I have the same symptoms. With the same cable, TV, and computer, under Windows, picture is perfect. Alex
Re: on-screen artifacts (red pixels) at high resolution with Intel HD 630 (Kaby Lake)
Hi, I finally got some time to investigate further. Setup I'm running Debian Stretch with a backported 4.13 Linux kernel on an Intel Kaby Lake (chipset H110 and HD graphics 630) machine. I've installed firmware-misc-nonfree and updated my BIOS to fix the Kavy Lake HT bug. Problem I'm experiencing red blinking pixels in dark areas in the displayed Xorg picture on my TV connected using a HDMI cable. Looking more closely, I also see blue pixels. Those anomalies seem to follow colors in the displayed picture. They occur on the root window, in mpv, vlc, at least, it seems color based and not app based. Hardware tests Two other PCs (Linux and Windows) going through the same HDMI cable to the same TV and same TV port using the same 1920x1080 resolution work perfectly. The same PC when using Windows 10 also displays a perfect picture. Using a HDMI port multiplier makes the problem worse. Outputting to another 1920x1080 monitor works well. Software tests Ubuntu 17.10 on a live CD show the same symptoms. I've tried multiple combinations of Xorg setup with no working setup : - modesetting Xorg driver with glamor or none as AccelMethod - intel Xorg driver with sna or uxa as AccelMethod, DRI 2 or 3. I've also tried with i915.enable_rc6=0 and this does not change anything. Lowering the resolution to 1280x720 works around the problem. My conclusion Windows 10 manage to setup the video GPU to input a stronger HDMI signal and my TV is sensitive to this. I was wondering if there was anything I could investigate further regarding this. I would also love to get any other idea or pointer regarding solving this. Thanks for reading, Alex
Re: on-screen artifacts (red pixels) at high resolution with Intel HD 630 (Kaby Lake)
> could you show your Xorg.0.log files? Here it is attached. > The Kaby Lake GPU needs some firmware. Therefore, what is the print out of > grep firmware /var/log/dmesg $ sudo dmesg | grep firmware [9.165601] i915 :00:02.0: firmware: direct-loading firmware i915/kbl_dmc_ver1_01.bin [9.166202] [drm] Finished loading DMC firmware i915/kbl_dmc_ver1_01.bin (v1.1) Xorg.0.0.log.gz Description: GNU Zip compressed data
Re: on-screen artifacts (red pixels) at high resolution with Intel HD 630 (Kaby Lake)
> The image with errors looks as it was manipulated in a photoeditor, eg. > Gamma/levels curves ... Does the driver have some image adjustment enabled? I use defaults everywhere, and the behavior is the same with a ubuntu live image. $ xgamma -> Red 1.000, Green 1.000, Blue 1.000
Re: on-screen artifacts (red pixels) at high resolution with Intel HD 630 (Kaby Lake)
> Screenshot [1] looks normal to me, but on screenphoto [2] I clearly see > red-ish stripes and pink spots in the middle. > > Now it looks like your LCD could be faulty not PC hardware\software. Can you > test it with another LCD monitor, or connect it to TV via HDMI cable if it's > possible? The same TV and cable work fine at the same resolution with another PC and another laptop. The same TV, cable and same computer work fine if using Windows 10. So the problem only happens with that PC _AND_ Linux/Xorg. Alex
Re: on-screen artifacts (red pixels) at high resolution with Intel HD 630 (Kaby Lake)
(please CC me as I am not subscribed to the list) > A screenshot would be helpful. Does these artifacts appear every single time > or sporadically? The artifact appear at the same place every single time and seem to follow (in videos) a single set of colors (dark brownish areas). You can look at a screenshot[1] of the root window image as taken by imagemagick and the photo[2] of the result on the screen. [1] https://sml.zincube.net/~niol/tmp/screenshot.jpg [2] https://sml.zincube.net/~niol/tmp/screenphoto.jpg > I'd suggest to check RAM first of all with `memtest86+` and let it run > overnight. Not sure if test will get into memory area used as video memory > though. The system is otherwise quite stable, and also brand new. I have two RAM banks, and I tried with both alone with no improvement. I'll test the memtest but chances both of the RAM sticks are not good seem unlikely. > There was a microcode bug discovered recently in Kabylake-Skylake CPUs. It > causes memory corruption if I remember it correctly. It could be fixed for > certain CPUs by updating firmware for your motherboard or installing > "intel-microcode" package. It could be the cause for your issue. I had updated the BIOS/UEFI for this fix, but installed intel-microcode to be sure and this did not change anything (microcode version is the same and artifacts still present). Thanks for your advice, Alex
on-screen artifacts (red pixels) at high resolution with Intel HD 630 (Kaby Lake)
(please CC me as I am not subscribed to the list) Hi, I am experiencing on-screen artifacts (red dots) when running at 1920x1080 on HDMI out. I've ruled out a hardware (cable, TV or GPU) issue by installing win10 which does not show those problems. This is by using stretch, issue occurs with both kernel 4.9 or 4.13 available in the backports. The hardware is intel HD 630 (Kaby Lake). Xorg uses the modeset driver. I was wondering where to get help regarding whether this is a bug : - xorg? - kernel i915? - kernel drm? - other component? Thanks, Alex
Re: Firefox Future and Config [WAS: Re: Password managers [WAS: Re: when do I get a browsere that will do internet purchases?]]
On 20/10/2017 at 18:22, The Wanderer wrote: > (Please learn to quote properly. Failure to quote at all is arguably > even worse than top-posting.) Sorry, when I’m answering to all or the main part of a message completely I find it clearer to try to begin answering with a sole mail, but thank for the remind of the public convention > simply because the stress of knowing that I'm going to be left behind > anyway is not good for my psychological health. I understand quite well :/ happens often for me… > Plus, part of the reason why Mozilla has decided to drop XUL support > (part and parcel of the WebExtensions move) is that they find that the > work involved in maintaining it and keeping up further development based > on it is unsustainable - and that's Mozilla, which if I'm not mistaken > is a much larger and better-funded organization than Debian is. Damn, Firefox is really that kind of gigantic never-stable software that’s horrible for that kind of thing (recall me the concept forged by some french librist about “liberator software”, complementar to the “free software” concept but about sociomaterial constraints limiting material freedom of the users), quite the opposite of software such as TeX and their symbolic tangential versionning… Maybe it is even intrinsic to the web…
Firefox Future and Config [WAS: Re: Password managers [WAS: Re: when do I get a browsere that will do internet purchases?]]
Wait, do you mean overriding password manager, and TreeStyleTabs will certainly and definitely stop to work? Would it be realistic to find some way to make Debian maintain patches/a fork (or package GNU IceCat and work with them? why isn’t any fork packaged into Debian? ’cause Firefox isn’t known to be that cool for their decisions) that could still do that? Possibly still supporting XUL plus WebExtensions of course, but also maybe some extended version of WebExtensions that allow this kind of stuff?
Re: Password managers [WAS: Re: when do I get a browsere that will do internet purchases?]
Maybe these extensions will be remade and repackaged with web-extensions then (afaik it’s a good move, yet breaking all the old apps forever is bad, they should re-integrate it after I while I’d personally prefer). Waiting for this, XUL extensions I install through Debian on stable are perfectly working (maybe if they, dunno, keep easy for distros like debian to patch firefox in order to keep XUL support some time that’d help?), so that’s probably for a too recent, or even future, version that XUL doesn’t work anymore…
Password managers [WAS: Re: when do I get a browsere that will do internet purchases?]
On 19/10/2017 at 22:24, Peter Hillier-Brook wrote: > I had similar problems and switched to Chromium, however I would never > trust *any* browser to store passwords I don’t especially like or trust fully Firefox, but I wouldn’t trust Chromium more (yet my bank website too doesn’t work with firefox, that’s why I do everything from commandline with boobank (which does), yet once I used to use Chromium only for that). I’d especially like to notice that there are the packages *xul-ext-gnome-keyring* and *xul-ext-kwallet5* which make both Firefox and Thunderbird use respectively GNOME and KDE’s password managers. That’s way more secure imho, and especially with the package xul-ext-pwdhash. Waiting for the beautiful day where you’ll have only one passphrase to remember, update and type for both grub/libreboot, luks, PAM/login, password manager, and gpg-agent… Would that difficult to achieve? Would require intensive hack on packages grub, luks, shadow, Linux-PAM, Gnome-Keyring/KWallet and gnupg2 right? There are also the solution on allowing that unique passphrase per a usb token, a pgp card, or no passphrase at all (when you have memory problems and if you’re old and poor enough for example). Makes computers way more accessible…
Re: Thinkpad X220 working suspiciously well (except some stuff, like webcam, bluetooth, phonecalls, jack buttons…) (Re: thinkpad mute button not working since upgrade to stretch)
Oh, sorry, actually my suspend to disk/hibernate button isn’t recognized by xev currently :/
Thinkpad X220 working suspiciously well (except some stuff, like webcam, bluetooth, phonecalls, jack buttons…) (Re: thinkpad mute button not working since upgrade to stretch)
I don’t have tpb installed, and got a thinkpad X220 (really nice btw, fingerprint reader, mobile 3G+sms+calls working out of the box and stuff (sad there’s no IrDA…)) on which I installed debian stable (that is 9.2 currently), and the mute button (and its ability to switch on its led when my system is muted, including when I do it from software) works perfectly (same for the microphone mute button and its led too), even when resuming from suspend to ram, with screen lock activated, and mpv playing stuff… that is: couldn’t reproduce. Have some friend with Thinkpad X60 who strangely didn’t got all the nice stuff I have now under XFCE/KDE when upgrading to 9.2: why upgrading instead of reinstalling always ends up with such problems? isn’t there some way to stop that behavior (like automatic “purge” instead of “remove” when upgrading packages?)? Btw what package/program does manage these buttons? I suppose the event comes from the normal keyboard events, but what does control the led? what does save the state of it? Why does it work without tpb? What is tpb for if it works out of the box? Why doesn’t it install itself on thinkpads when debian installs? Why should we guess/know already that this package exist and we should theorically install it on thinkpad in order to make them work? So yet ThinkVantage button is recognized by xev (as XF86Launch1, but it seems to do nothing by default), the button for ThinkLight works correctly, same thing for luminosity and sound +/- (which is recognized by KDE and display its progress bar (how is it called this bar you see when you change these settings?), caps lock (and its led), num lock (yet there seem to be no led for it on this laptop), and all the Fn buttons : screen lock, “battery” is recognized although it seems to do nothing under KDE (what is it supposed to do?), suspend, toggle WLAN, webcam (recognized but does nothing, I think I have no webcam recognized… normally it has one right? with free driver?), “external display”, “disable trackpad” (wait! how do you re-enable it?! …except by reboot I mean), suspend to disk/hibernate, and the multimedia buttons of the arrow keys. There’s still bluetooth which when used always switch on/off (hardware fault?), seemingly unrecognized/inexistant webcam, that battery fn button I ignore the purpose, this really really low-precision trackpad (it “jumps” over several pixel for any small enough movement that’s really ugly so I never use it while it’s really comfortable and quick and precise with multitouch), I don’t know if I can make and hear/talk through audio call with my sierra usb gsm modem (is that possible? for now I can make phones ring, and check if I’m called, and hang up, and also “accept” but the correspondant don’t hear anything), the combined micro+headphone port doesn’t seem to support buttons (like for “accept call/prev/next/pause”), oh, and the worst, that ethernet port can’t get an ethernet cable clipsed in! if it moves a bit, bam, disconnected (had that with my precedent thinkpad though)! Oh also wifi doesn’t work of course because of Intel, so once it will be supported by libreboot, when it will be installed or when I’ll have to open it I will change the wifi card for one of those atheros wifi pci card that still need manual installation of the free firmware (ath9k afaik, or ath10k forgot) under debian because it’s packaged altogether with non-free atheros firmware (any advice for cheap (some dollars) wifi pci cards of good quality with free firmware supported by debian? have some AR9271) Oh maybe I should really split that in some separate mails with relevant subject to the list… althought maybe too much hardware questions… maybe outsubject… maybe too much issues for those it is normal not to have any solution currently…
Re: Je présume que je ne suis pas trop ton type – qui aimerait une fille avec de gros ballons… Jessica
Et non j'aime les petits ballons. Alexandre Le 6 août 2017 11:02, "Jessica Srichaiyont" a écrit : > > > Bon, peut-être que tu aimerais les voir pour me répondre sur ça > http://bit.ly/2vBGf9k >
Re: Question about wifi web service with debian
Le 12/02/2017 à 05:55, Doug a écrit : > > > > On 02/11/2017 11:02 PM, Billy O wrote: >> hello my name is William O'Brien >> >> I have been using and researching debian for alittle while now and >> have been trying to access wifi I have tried several different ways >> and researched many tutorials and help sections with very little >> success and was wondering if you might be able to assist me with my >> problem. >> >> so currently the computer I am trying to gain access with is a dell 1521 >> with Broadcom 4311 >> >> the debian os works fine. however the few ways I have tried don't >> seem to give me any closer to accessing wifi and may end up re >> installing the os >> >> but am wondering if theres any expert advice you might be able to >> give on this subject. >> >> -- >> William O'Brien > The Broadcom wifi boards are notorious! Windows has drivers for them, > and in my experience Mint 7 KDE 64-bit LTE also does. (Both work "out > of the box.") PCLinuxOS does not, and it is a > bitch to get it to work under PCLOS, altho possible. It may be more > difficult now, because I believe that Broadcom has been bought out by > another outfit. There is a large batch of comments > on the PCLINUXOS FORUMS, dating back to 2014, and some from 2015 and > 2016, many involving me. (dougmack) > > Seeing that you are using Deb, you might find it easier to switch to > Mint, which also uses the deb install system, and is filewise > compatible with Ubuntu, which as you probably know, was > a spinoff from Debian. > > To some extent at least, Google is your friend. Put in Linux and > Broadcom 4311 and you may find some help there. I'm sure you can > access the PCLOS Forum without registering or signing > in, altho you can't post unless you do register. It is a pretty > friendly user interface, with a search feature, so you should be able > to find most of the Broadcom correspondence there. > > Good luck! You're going to need it! > > --doug > > PS: If you can find a wifi board that's directly supported by Debian, > it may be worth your while to buy one and plug it in. I think they're > all pretty interchangeable. That would save you > hours of grief. I almost did that, but finally got it to work before I > went to that extreme. > -- > Blessed are the peacemakers...for they shall be shot at from both > sides.--A.M.Greeley Hello, Try with packages firmware-b43-installer from debian non-free repository( you need to add this repository either in synaptic or via /etc/apt/sources.list) , this package take care of downloading the firmware, see: https://wireless.wiki.kernel.org/en/users/drivers/b43?s[]=bcm4311 @+Alex
Re: arm people distributing images with user 1000 already allocated, please stop that
Le 01/12/2016 à 18:45, Gene Heskett a écrit : > Greetings; Hello, > > The arm folks, like unbuntu and raspian, are distribution for > installation usually on an micro-sd card, install images with the first > user pre-configured. He is in the sudoers file, but the ability to > install other software to actually DO something is restricted to a root > pw only, and that is unknown/unpublished. You talk about HAL ? > > I just spent 2 days (and I still have one more item to fix, probably no > biggie, but it won't let ME run raspi.config, has a hissy because it > can't even find pi's home directory) with the sd card mounted > intermittently in a reader, removing the user pi from the > debian-jessie-full image, making it so that I was user 1000 and COULD > install what I needed onto an raspberry pi 3b. That SW was linuxcnc, > last nights bleeding edge version, supplied in a deb from the > buildbot.linuxcnc.org. I expected the raspi to have problems with that > SW because of its heavy, and time critical IRQ response requirements. > But not a single instance of an out of range delay was recorded while it > ran a virtual lathe to make half a dozen chess pawns on that lathe. So > we have a new, in-expensive machine controller lashup. > > This existing situation is very discouraging to potential new users who > expect to be able to do these things from his own account. And finds > out quickly that there are many things that even user 1000 still cannot > do on the raspi, or an odroid64-c2, an even more powerfull SBC thats > still stuck in kernel 3.14 days. And that kernel, while running on it, > has NO support for its 4 gpu's, nor working support for spi, which would > appear to be the future interface to a machine controller of choice as > it gives 72 gpio lines, quite some number of which can become useful > functions like a PWM generator to control things that need an analog > voltage control, or a stepper motor pulse generator, even a quadrature > encoder receiver capable of tracking spindle position to a 1.5 degree > accuracy at 12,000 rpms in the encoder I've built. All that in an fpga > card that sells for $53 and can be field re-programmed with one of many > supplied fpga bit files. If the maker of the board and/or SoC doesn't help the board can be forever on old kernel with unknown source. > > Thats the bragging. But the pre-allocation of user 1000 in the > distributed image, instead of that being part of the normal first login > procedure is a PAIN IN THE A$$ to fix so that the first user can > actually install what he needs to get his job done while logging in as > himself, using his normal pw. > > Please exert what ever influence you may have to make the first user a > first login function again for the arm distributions that port your Like you write it's distributed image he as nothing to do with the source, the distro maker choose to use that, you should talk to them. > source. > > Thank you Debian for a great, stable (I'm still on wheezy with this old, > slow, Phenom powered machine) os. Its a place of familiarity that Just > Works(TM) if one doesn't want to be a lab rat. > > Cheers, Gene Heskett Thanks.
Re: Dual Boot
Hello, You can try, running in terminal: sudo update-grub2 Le 25/11/2016 à 16:15, Dan Norton a écrit : > Net install noticed that Windows 7 was present, said it would provide > a choice to select it in the boot menu, but failed to do that. The > boot menu has Debian Jessie and the advanced boot option. Thinking I > must have screwed something up, I deleted the Debian partition and > re-installed carefully - same result. I am a Linux novice. > > The windows partition can be mounted and files can be copied from it. > Hardware is HP 3400 with 1.0 TB and the hardware boot menu states: > > UEFI Boot Sources > Legacy Boot Sources > ATAPI CD/DVD Drive > SATA2 > Hard Drive > SATA0 > Network Controller (etc.) > > The heading on the boot menu says: > > GNU GRUB version 2.02~beta2-22+deb8u1 > > How can the boot menu be changed to include Windows? >
Re: How to mount a LVM?
Hello Try using lvscan ? Le 24/11/2016 à 19:35, Robert Latest a écrit : > Hey all, > > I got it to work ONCE, but for the life of me I can't figure out how > to do it again. > > This is what I think I did the first time, but for the second time it > just doesn't work. > > root@dotcom:~# mdadm --assemble --scan > mdadm: /dev/md/2 has been started with 1 drive. > mdadm: /dev/md/3 has been started with 1 drive. > > ---OK, good so far. Now let's find the LVs > > root@dotcom:~# lvmdiskscan > /dev/loop0 [ 213.51 MiB] > /dev/loop1 [ 206.55 MiB] > /dev/sda1 [ 30.00 GiB] > /dev/loop2 [ 220.89 MiB] > /dev/md2 [ 926.91 GiB] LVM physical volume > /dev/loop3 [ 208.05 MiB] > /dev/md3 [ 926.91 GiB] LVM physical volume > /dev/sda5 [ 2.00 GiB] > /dev/sda6 [ 30.00 GiB] > /dev/sda7 [ 200.00 GiB] > /dev/sda8 [ 203.76 GiB] > /dev/sdb1 [ 2.37 GiB] > /dev/sdb2 [ 2.00 GiB] > /dev/sdc1 [ 2.37 GiB] > /dev/sdc2 [ 2.00 GiB] > /dev/sdd1 [ 465.76 GiB] > /dev/sde1 [ 149.05 GiB] > 0 disks > 15 partitions > 0 LVM physical volume whole disks > 2 LVM physical volumes > > ---Still looking good. Now I'm supposed to find the logical volumes, > ---but lvdisplay simply doesn't show anything. > > root@dotcom:~# lvdisplay > root@dotcom:~# > > ---Now I'm stuck. All LVM instructions I find on the Internet say that > I find the path of the LVM device by using lvdisplay. Also I know that > one hour ago I had my volumes mounted and was copying data from them. > After properly syncing and unmounting them, and stopping the LVM and > md thingys, I'm stuck now. > > Any suggestions? > > robert
Re: WINS - name resolution error
Hello, Why did you use WINS instead DNS ? Are you inside a WINS network ? Thanks Le 09/11/2016 à 19:50, Felipe Salvador a écrit : > Hi, > starting from 2016-11-07 whit the daily upgrade (detail attached) I > spot these errors: > > ~$ ping google.com > ping: debian.com: Errore di sistema # literally "System error" > > and, in the attempt to download email: > > mpop: cannot locate host pop.*.com: File o directory non esistente # > file or directory not found > > > These errors seems to be related to wins, a workaround I found is to > remove or move back "wins" in /etc/nsswitch.conf, form: > > hosts: files wins dns mdns4_minimal [NOTFOUND=continue] mdns4 > > to > > hosts: files dns mdns4_minimal [NOTFOUND=continue] wins mdns4 > > I have tired, without success, to edit STATUS>ACTION field as follow: > > hosts: files wins [UNAVAIL=continue] dns mdns4_minimal > [NOTFOUND=continue] mdns4 > > > I would open a bug report but cannot figure out who is the culprit, it must > be among the upgraded > packages, among these I suspect libwbclient0, I've done some tests > whit strace and ldd, but I'm not sure. > > Regards >
Re: how to make vlc to default videoplayer in gnome
Hello, A easy fix: Try a right click on the files you want to open, select tab 'open with' and choose VLC Le 10/11/2016 à 12:40, Fekete Tamás a écrit : > Dear all, > > I have problems with setting up the default video player program in GNOME. > > I tried to vi /etc/gnome/defaults.list as root. > > I modified a line first like this: > video/flv=vlc.Totem > > I quit from my gnome session, than started the X again. > > The default app still wasn't vlc, so I tried to edit > /etc/gnome/defaults.list like this: > video/flv=vlc.Totem.desktop > > A repeated the gnome restart procedure, but the default player still > hasn't change. > > Can anyone help me, what is the correct text has to be in > defaults.list to make vlc to my default player? > Or is there any other file I have to modify? > > I use debian 8.6 amd64 version which is upgraded from debian 8.5 > > - Tamas Fekete >
Re: First hint as to why kaffeine won't rx tv
Hi, Maybe a firmware you need ? Maybe found inside firmware-linux-nonfree. Le 05/06/2016 05:16, Gene Heskett a écrit : > Greetings all; > > Running it from the cli, I fand a channel scan is 100% errors because it > cannot tune a tuner it knows nothing about, in this case the "Oren > OR51132 VSB/QAM Frontend", and there apparently is nothing of that > package even installed. Nor is it findable in the repo's. > > This is the support stuff for the pcHDTV3000 tv card. > > This is not in the package supplied with the card, and never was, but its > been part of the kernel since Hectors grandpa was a puppy! > > Is there some reason it is not part of the kernel install on debian? It > has been present and usable in every distro I had installed for at least > a decade. > > Why not debian? > > Cheers, Gene Heskett
Re: apt-get error messages
> Hi, > > due to a typing error - I wanted to say 'dpkg --add-architecture i386' > but wrote 'i368' - > I get the following error messages when running apt-get update: > > > ... > > W: Failed to fetch > http://download.virtualbox.org/virtualbox/debian/dists/vivid/Release > Unable to find expected entry 'contrib/binary-i368/Packages' in Release > file (Wrong sources.list entry or malformed file) > > W: Failed to fetch > http://ftp-stud.hs-esslingen.de/debian/dists/wheezy-updates/Release > Unable to find expected entry 'main/binary-i368/Packages' in Release > file (Wrong sources.list entry or malformed file) > > W: Failed to fetch > http://security.debian.org/dists/wheezy/updates/Release Unable to find > expected entry 'main/binary-i368/Packages' in Release file (Wrong > sources.list entry or malformed file) > > ... > > > Where is the information for these erroneous requests stored? > How can I remove it? > > Thanks for any hint. Hi, Have you tried to remove i368 architecture ?
Re: Debian on Dlink DNS-320
Le 28/09/2015 21:54, Andrew McGlashan a écrit : > Hi, > > On 28/09/2015 7:32 PM, Alexandre GRIVEAUX wrote: >> I want to install debian on DNS-320, i can start debian installer but at >> the end i'm stuck at installing the kernel. >> I'm missing a partition scheme, i guess the file system is on sda(sata >> or usb) and the kernel on nand but the last is not show on screen. >> This Dlink DNS-320 having a broken firmware (unable to upgrade from >> dlink or debian). >> If you have a working Debian on Dlink DNS-320 with denx uboot please >> send me the printenv values. > IIRC, Debian won't work on these older devices any longer; there was > something in release notes about it. I could be wrong though, not about > to search out the reference. > > The problem, from memory, was that the installation needed more space > than which is available on that very old device. > > I was running funplug on some old DNS-343 units, actually one is still > running; but I haven't done any update for a long time on it. > > Kind Regards > AndrewM > Hello, Yes, i know it doesn't have enough space on NAND (128Mib~) but enough for /boot and / on external (SATA, USB, NFS ...). The funplug script not work because the NAS have a bad firmware in my case. At this time: wget http://jamie.lentin.co.uk/devices/dlink-dns325/replacing-firmware/dns-320.kwb *<- save into a usb key* printenv *<- to show MAC for exemple* usb reset ; ext2load usb 0:1 0x100 /dns-320.kwb nand erase.chip nand write 0x100 0x00 0xe reset setenv ethaddr "xx:xx:xx:xx:xx:xx" *<- to set mac* setenv mtdparts "mtdparts=orion_nand:896k(u-boot),128k(u-boot-env),-(rootfs)" *<- to set partition**ing* saveenv reset on other machine wget http://ftp.nl.debian.org/debian/dists/jessie/main/installer-armel/current/images/kirkwood/network-console/d-link/dns-320/netboot.img apt-get install dns323-firmware-tools && splitdns323fw -k ukernel -i uImage netboot.img *<- save uImage & uKernel **into a usb key* usb reset ; ext2load usb 0:1 0x200 /uKernel ; ext2load usb 0:1 0x300 /uRamdisk ; bootm 0x200 0x300 After that, the debian installer boot and show only my usb key:*SCSI3 (0,0,0) (sda) - 3.9 GB USB DISK At the end it can't install the kernel I'm stuck here. ***
Re: Debian on Dlink DNS-320
Le 28/09/2015 14:36, Sven Arvidsson a écrit : > On Mon, 2015-09-28 at 11:32 +0200, Alexandre GRIVEAUX wrote: >> Hello, >> >> I want to install debian on DNS-320, i can start debian installer but >> at >> the end i'm stuck at installing the kernel. >> I'm missing a partition scheme, i guess the file system is on >> sda(sata >> or usb) and the kernel on nand but the last is not show on screen. >> This Dlink DNS-320 having a broken firmware (unable to upgrade from >> dlink or debian). >> If you have a working Debian on Dlink DNS-320 with denx uboot please >> send me the printenv values. >> Thanks. > Hi, > > Have you tried asking this guy? > http://jamie.lentin.co.uk/devices/dlink-dns325/ > > Or asking on this forum? http://dns323.kood.org/dns-320 > Hi, No, because it's no related to debian installer stuff: https://www.debian.org/devel/debian-installer/News/2014/20140813 http://ftp.nl.debian.org/debian/dists/jessie/main/installer-armel/current/images/kirkwood/network-console/d-link/dns-320/ Thanks.
Debian on Dlink DNS-320
Hello, I want to install debian on DNS-320, i can start debian installer but at the end i'm stuck at installing the kernel. I'm missing a partition scheme, i guess the file system is on sda(sata or usb) and the kernel on nand but the last is not show on screen. This Dlink DNS-320 having a broken firmware (unable to upgrade from dlink or debian). If you have a working Debian on Dlink DNS-320 with denx uboot please send me the printenv values. Thanks. Greetings.
Re: Resources/tools for server hardening?
Le 19/10/2014 09:27, Rafał Radecki a écrit : Hi All :) What resources or tools do you use for server hardening/checking servers' security? I currently am checking Nessus, it looks good :) I found some info also about Bastille but it seems to be dead. Which other tools do you recommend? I am thinking about applying some common sense security rules through puppet and then use Nessus to check servers. Can you recommend a different approach? Thanks for all help :) BR, Rafal. Hi, Like you, Nessus is my core's app. for checking security of services on a box but I think Nmap and Its script ability can help you in the task. You can check out Metasploit too, a security framework used to exploit/check vulnerabilities for real. Kind regards, -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/54439bf1.3020...@gmail.com
Re: Network speed drop down to 10MBPS for unknown reason.
On Tuesday, September 2, 2014 3:50:02 PM UTC+2, Muhammad Yousuf Khan wrote: > i am using wheezy 7.x and for some unknown reason my network speed drop down > to 10MBPS. > i can see anything in /var/log/messages and /var/log/syslog related to the > issue. when i restart the server it back to normal and shows above 50MBPS > while transferring file. > any idea what is happening . When you say "my network speed", are you referring to the average bandwidth of a TCP transfer ? sending or receiving ? Can you post somewhere a pair of pcap files (one in the fast case, one in the slow case) ? (capture taken on the sender side in each case; must include SYN/SYNACK) -Alex -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/03951b1d-1fa2-42d8-b773-97abbc14d...@googlegroups.com
Re: sysvinit->systemd transition details
On Sunday, August 24, 2014 9:40:01 AM UTC+2, Joe wrote: > On Sat, 23 Aug 2014 14:24:59 -0700 (PDT) > > Alexandre Ferrieux wrote: > > > systemd allows to continue using sysvinit scripts, service per > > service. It just doesn't preserve the integrity at the system level. > > On the whole, it does. Yes, that's the point. Has backwards compatibility just been dismissed as an old-fashioned concept, or is it just me ? Imagine: glibc, between x.y.z and x.y.(z+1), deciding to *remove* select() and poll() since there's epoll(). The analogy is deeper than it seems: - everybody admits that epoll() is superior to select/poll beyond a few tens of monitored fds. - everybody will happily use epoll() in new programs (except when the extra fd is an issue) - still, nobody will tolerate that "evolution" as it instantly disables a huge population of existing software. To pursue the analogy, the "smooth transition" packages I've seen here and there for sysvinit->systemd, e.g. in Debian, look like an LD_PRELOAD hack reinstating select() for those who really want it. The problem is that none of this is done by default, and of course that does not apply everywhere (think of setuid binaries). Again, I'm not here to blame systemd in itself. Despite being from the "old guard" and well in line with many arguments of the sysvinit defenders, I know that innovation needs some space. I also acknowledge the fact that supporting *two* init systems simultaneously is an hefty burden, so I understand the move that forcibly enables the new system at one point. What I do regret though, is the apparent lack of care for *perfect* backwards compatibility, in the sense of "existing systems still work after upgrade". There is a *huge* difference between 99% and 100% here. -Alex -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/d2661757-4433-48ee-83f2-ad0e419da...@googlegroups.com
Re: sysvinit->systemd transition details
On Saturday, August 23, 2014 3:00:02 PM UTC+2, Brian wrote: > On Fri 22 Aug 2014 at 17:20:03 -0700, Alexandre Ferrieux wrote: > > > I have a Jessie-based system, which up to the last upgrade used > > sysvinit of course, and where I had added sysv-rc-conf, and was > > happily juggling with a few runlevels. > > > But after an upgrade (still in Jessie), systemd rules. No problem > > about this, but what degree of compatibility should I expect ? > > Specifically, is there some automated mechanism that would: > > > - extract initdefault from inittab and do a "systemctl set-default > > runlevelX.target" > > - scan /etc/rcX.d and do the appropriate "systemctl enable" for all S > > scripts > > Systemd doesn't use /etc/inittab. Sure, but if the systemd packaged by Debian goes through the hassle of defining runlevelX.target, it might have made sense to carry the initdefault along. > > If the answer is "no", why is sysv-rc-conf still tolerated under > > systemd ? > > For backwards compatibilty? Well, it's a strange form of backwards compatibility. The net result is that the upgrade instantly broke my system. I am not talking about switching from wheezy to jessie, I was already in jessie. > The sysvinit concept of runlevels is > obsolete under systemd. I am well aware of the big improvement that systemd is over sysvinit. When I design new things, I am happy to use targets and dependencies instead of runlevels and fixed total orderings. But that's not the point: it is about the claimed backwards compatibility. Agreed, systemd allows to continue using sysvinit scripts, service per service. It just doesn't preserve the integrity at the system level. So I was expecting an transition-helping package... -Alex -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/201eb69c-5ab1-42fc-83dd-de7beb4f2...@googlegroups.com
sysvinit->systemd transition details
Hello, I have a Jessie-based system, which up to the last upgrade used sysvinit of course, and where I had added sysv-rc-conf, and was happily juggling with a few runlevels. But after an upgrade (still in Jessie), systemd rules. No problem about this, but what degree of compatibility should I expect ? Specifically, is there some automated mechanism that would: - extract initdefault from inittab and do a "systemctl set-default runlevelX.target" - scan /etc/rcX.d and do the appropriate "systemctl enable" for all S scripts If the answer is "no", why is sysv-rc-conf still tolerated under systemd ? -Alex -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/70e5a101-a1cb-4a1e-95bc-aaddefa8b...@googlegroups.com
Re: CPU frequency and custom kernel
On Fri, Nov 22, 2013 at 03:03:33AM -0500, ken wrote: > I've found cpuspeed to be buggy... the speed at which the cpu runs > seems to have little to do with the conditions specified in the > config file. Recent kernel upgrades have improved cpuspeed somewhat > (without any changes to the config file), but it's still nonsensical > at times. I think that was it. I upgraded to most recent stable kernel (3.12.1) [1] and no longer see the problem. I took a look at the 3.2 changelog [2] to see if I could tell what particular change Debian developers made to get this working. There are quite a few cpufreq related changes, but it wasn't clear to me which fixes the problem I was seeing. [1] https://www.kernel.org/ [2] http://ftp-master.metadata.debian.org/changelogs//main/l/linux/linux_3.2.51-1_changelog -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20131122115430.GA7395@tuzo
Re: CPU frequency and custom kernel
On Fri, Nov 22, 2013 at 11:06:14AM +0100, Jochen Spieker wrote: > Check the files in this directory: > > /sys/devices/system/cpu/cpu0/cpufreq > > Especially scaling_available_frequencies, scaling_max_freq and > scaling_min_freq. I've been using the cpufreq-info, which I think reports what's in those files. For the Debian kernel I get: cpufrequtils 008: cpufreq-info (C) Dominik Brodowski 2004-2009 Report errors and bugs to cpuf...@vger.kernel.org, please. analyzing CPU 0: driver: acpi-cpufreq CPUs which run at the same hardware frequency: 0 1 2 3 CPUs which need to have their frequency coordinated by software: 0 maximum transition latency: 10.0 us. hardware limits: 800 MHz - 2.30 GHz available frequency steps: 2.30 GHz, 2.00 GHz, 1.80 GHz, 1.60 GHz, 1.40 GHz, 1.20 GHz, 1000 MHz, 800 MHz available cpufreq governors: conservative, powersave, userspace, ondemand, performance current policy: frequency should be within 800 MHz and 2.30 GHz. The governor "ondemand" may decide which speed to use within this range. current CPU frequency is 800 MHz (asserted by call to hardware). cpufreq stats: 2.30 GHz:5.20%, 2.00 GHz:0.14%, 1.80 GHz:0.16%, 1.60 GHz:0.20%, 1.40 GHz:0.28%, 1.20 GHz:0.44%, 1000 MHz:0.49%, 800 MHz:93.09% (39552) And then for the custom kernel I get: cpufrequtils 008: cpufreq-info (C) Dominik Brodowski 2004-2009 Report errors and bugs to cpuf...@vger.kernel.org, please. analyzing CPU 0: driver: acpi-cpufreq CPUs which run at the same hardware frequency: 0 1 2 3 CPUs which need to have their frequency coordinated by software: 0 maximum transition latency: 10.0 us. hardware limits: 800 MHz - 2.30 GHz available frequency steps: 2.30 GHz, 2.00 GHz, 1.80 GHz, 1.60 GHz, 1.40 GHz, 1.20 GHz, 1000 MHz, 800 MHz available cpufreq governors: conservative, powersave, userspace, ondemand, performance current policy: frequency should be within 800 MHz and 2.30 GHz. The governor "ondemand" may decide which speed to use within this range. current CPU frequency is 1.80 GHz (asserted by call to hardware). cpufreq stats: 2.30 GHz:11.32%, 2.00 GHz:1.27%, 1.80 GHz:0.94%, 1.60 GHz:0.59%, 1.40 GHz:1.17%, 1.20 GHz:0.60%, 1000 MHz:1.12%, 800 MHz:82.99% (713) That last line for the custom kernel says the CPU runs at 800 MHz most of the time, but I think that's because the stats don't roll over on reboot. It shows I'm using the Debian kernel most of the time. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20131122111329.GA5843@tuzo
CPU frequency and custom kernel
I've built my own kernel, but the CPU runs faster (hotter, more fan noise, etc.) I can't figure out why it's faster. Everything I've checked is the same between the two kernels. If I boot to the Debian provided kernel the CPU runs at 800 MHz, but if I boot to my custom kernel it runs at 1.8 GHz. (These are baseline speeds, after boot without running anything else.) Here's what I've checked so far: * Kernel versions are the same. The Debian version is 3.2.0-4-amd64 and the version I got from kernel.org is 3.2.52. * The boot command line has the same paremeters for both: linux /vmlinuz-3.2.0-4-amd64 root=/dev/mapper/tuzo-root ro quiet * Both boot to the same root file system, and use the same configuration files. * The .config file used to build the custom kernel is the same as the one used to build the Debian kernel. (I'm going to pare it down to just what I need once I figure out this problem.) * Both use the ondemand cpufreq governor. Is there anything else I should check? My next step would be to try and build the kernel source from the Debian package instead of from kernel.org. Maybe this is a code difference? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20131122004241.GA13986@tuzo
Re: ssh tunnel delay
On Tue, Sep 10, 2013 at 02:28:37PM +0200, Juan Sierra Pons wrote: > 2013/9/10 Sean Alexandre > > > > On Tue, Sep 10, 2013 at 01:11:17PM +0200, Juan Sierra Pons wrote: > > > Hi, > > > > > > I don't see anything strange in the logs provided. Do you see anything > > > strange in your dmesg, /var/log/daemon.log, etc? > > > > > > Is the DNS on the server's side working properly? Sometimes when the > > > reverse DNS is not properly configure some TCP based services get some > > > delay on first connection: ssh, mysql, etc > > > > > > Can a network issue be discarded. Please check with mtr: mtr remote > > > server > > > > > > Not a solution but a very tiny improvement , launch the tunnel with the -C > > > (compression) parameter. > > > > Thanks for looking at this. The other things you list look fine. I did > > notice > > something else with the log, though. Below I type the line "hello". Then > > there's the 80 second delay. And then there's the log messages after the > > "hello": > > > > debug1: Entering interactive session. > > client> nc localhost 1110 > > hello > > debug1: Connection to port 1110 forwarding to localhost port 1212 requested. > > debug2: fd 6 setting TCP_NODELAY > > debug2: fd 6 setting O_NONBLOCK > > debug3: fd 6 is O_NONBLOCK > > debug1: channel 2: new [direct-tcpip] > > debug2: channel 2: open confirm rwindow 2097152 rmax 32768 > > > > I think the delay no longer happens, with subsequent lines, because > > TCP_NODELAY and O_NONBLOCK get set. I wonder if there's a way to configure > > things to set those from the start? > > > Hi, > > I have found a kind of workaround: > http://www.gossamer-threads.com/lists/openssh/bugs/56042 > If the ssh client is invoked with: > ssh -N host -R port # TCP_NODELAY is not set > ssh -n host -R port sleep 1d # TCP_NODELAY is set - this is a workaround > > Can you try to launch the tunnel without the -N parameter (maybe you > can send later the tunnel to background) I get the same thing, unfortunately, with this: ssh -o IPQoS="lowdelay lowdelay" -o ExitOnForwardFailure=yes -f -L1110:localhost:1212 skoki3 sleep 1d I've also added this line to /etc/ssh/sshd_config on the server, and restarted ssh there: IPQoS lowdelay lowdelay This bug report makes it sound like the bug's been fixed on Debian 7.0, but maybe not: Debian Bug report logs - #643312 openssh-client: IPQoS option ignored for AF_INET since 5.9p1-1 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=643312 I've got version 1:6.0p1-4 of openssh-client. The bug report says the problems fixed there, but maybe not. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130910130754.GA14913@tuzo
Re: ssh tunnel delay
On Tue, Sep 10, 2013 at 01:11:17PM +0200, Juan Sierra Pons wrote: > Hi, > > I don't see anything strange in the logs provided. Do you see anything > strange in your dmesg, /var/log/daemon.log, etc? > > Is the DNS on the server's side working properly? Sometimes when the > reverse DNS is not properly configure some TCP based services get some > delay on first connection: ssh, mysql, etc > > Can a network issue be discarded. Please check with mtr: mtr remote server > > Not a solution but a very tiny improvement , launch the tunnel with the -C > (compression) parameter. Thanks for looking at this. The other things you list look fine. I did notice something else with the log, though. Below I type the line "hello". Then there's the 80 second delay. And then there's the log messages after the "hello": debug1: Entering interactive session. client> nc localhost 1110 hello debug1: Connection to port 1110 forwarding to localhost port 1212 requested. debug2: fd 6 setting TCP_NODELAY debug2: fd 6 setting O_NONBLOCK debug3: fd 6 is O_NONBLOCK debug1: channel 2: new [direct-tcpip] debug2: channel 2: open confirm rwindow 2097152 rmax 32768 I think the delay no longer happens, with subsequent lines, because TCP_NODELAY and O_NONBLOCK get set. I wonder if there's a way to configure things to set those from the start? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130910120513.GA14348@tuzo
Re: ssh tunnel delay
On Tue, Sep 10, 2013 at 12:25:59PM +0200, Juan Sierra Pons wrote: > Can you launch the tunnel in verbose (-vvv) mode and send the logs? > ssh -vvv -o ExitOnForwardFailure=yes -fN -L1110:localhost:1212 server Here's what I'm seeing with -vvv: http://paste.debian.net/37873/ -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130910104403.GA13329@tuzo
ssh tunnel delay
I'm seeing a delay when I attempt a connection through an ssh tunnel. The connection's fast without the tunnel, but has an inital 80 second delay with it. Here's the case that works, without the tunnel. I see lines I type echoed immediately: server> nc -l -p 1212 client> nc server 1212 But if instead I do this, the first line isn't seen for about 80 seconds. After that, everything's fine and lines appear immediately: server> nc -l -p 1212 client> ssh -o ExitOnForwardFailure=yes -fN -L1110:localhost:1212 server client> nc localhost 1110 I can ssh to the server fine, with no delay. Any ideas why the tunnel has the delay? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130910101005.GA13051@tuzo
Re: dhcpdump not seeing dhclient messages
On Mon, Aug 26, 2013 at 01:28:44PM -0300, Luther Blissett wrote: > I do not know if this is the case, but ISP's usually record its > customers MAC address which is universally unique. Maybe, just maybe, > when you switched from your tp-link router to direct wan link, the ISP > machine noticed that there was an unknown MAC attempting to connect and > refused connection. Then your dhcp discover packets would reach ISP > hardware, but would not receive any responses. I've checked with my ISP and they say to just power down the cable modem for 30 seconds before attaching a machine with a new MAC. And, I've been able to switch between two other machines, both with different MAC addresses. It's just this third machine that's given me problems. What I'm really stuck on right now is why does the dhclient log show that it's sending DHCPDISCOVER messages, but dhcpdump isn't seeing them? It's like something is sitting between dhclient and my NIC. I've disabled all firewall rules, though, so know it's not that. (All tables and chains have a default policy of ACCEPT, and no rules.) > BTW, you should notice that dchp communications are not held with the > same machines when you have a direct link as opposed to routed link. > When routed through some gateway, you have two sets of dhcp ISP <--> > router <--> pc. Thanks. All my connections right now are direct, like this: [ISP]---[cable modem]---[my machine] The cable modem is just a modem, and not a router. But I know what you mean. My final configuration will be: [ISP]---[cable modem]---[my machine, a router]---[LAN machines] -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130826170716.GA7349@tuzo
Re: dhcpdump not seeing dhclient messages
On Mon, Aug 26, 2013 at 02:54:27PM +0530, Arun Khan wrote: > On Mon, Aug 26, 2013 at 2:01 PM, Sean Alexandre wrote: > > I have a machine that's not acquiring a DHCP lease from my ISP. I can see > > that > > dhclient is sending DHCPDISCOVER messages. My system log has: > > > > Aug 25 17:36:41 athabasca dhclient: DHCPDISCOVER on eth-wan to > > 255.255.255.255 port 67 interval 7 > > -8<-8<-8<-8<-8<-8<-8<- > > > The odd thing is if I do the exact same thing with this machine connected to > > a local TP-LINK router instead of my ISP cable modem, dhcpdump sees the > > DHCPDISCOVER, and the machine acquires a DHCP lease. > > Is your cable modem setup in bridge mode? (bridge between it's > ethernet (RJ45) and the 'wan' ports with cable coming in from ISP. Yes, bridge mode. (It's just a cable modem, and not a router. Bridge mode is the only way it works.) > > > Any ideas why would dhclient be sending a DHCPDISCOVER, but dhcpdump not > > see it? > > Try tcpdump with dest port 67 OK, thanks. I just tried that now, and it got a DHCP lease this time, for some reason. So it's working again. I'll do a tcpdump next time, if I see the problem again, and hopefully that will tell me what's going on. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130826104607.GA5205@tuzo
dhcpdump not seeing dhclient messages
I have a machine that's not acquiring a DHCP lease from my ISP. I can see that dhclient is sending DHCPDISCOVER messages. My system log has: Aug 25 17:36:41 athabasca dhclient: DHCPDISCOVER on eth-wan to 255.255.255.255 port 67 interval 7 Aug 25 17:36:48 athabasca dhclient: DHCPDISCOVER on eth-wan to 255.255.255.255 port 67 interval 13 Aug 25 17:37:01 athabasca dhclient: DHCPDISCOVER on eth-wan to 255.255.255.255 port 67 interval 12 Aug 25 17:37:13 athabasca dhclient: DHCPDISCOVER on eth-wan to 255.255.255.255 port 67 interval 12 Aug 25 17:37:25 athabasca dhclient: DHCPDISCOVER on eth-wan to 255.255.255.255 port 67 interval 5 Aug 25 17:37:30 athabasca dhclient: No DHCPOFFERS received. Aug 25 17:37:30 athabasca dhclient: No working leases in persistent database - sleeping. But for some reason the DHCPDISCOVER messages aren't making it out over the NIC. I'm running dhcpdump and see no traffic. This is with no firewall rules. All tables and chains are set to ACCEPT. The odd thing is if I do the exact same thing with this machine connected to a local TP-LINK router instead of my ISP cable modem, dhcpdump sees the DHCPDISCOVER, and the machine acquires a DHCP lease. Any ideas why would dhclient be sending a DHCPDISCOVER, but dhcpdump not see it? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130826083131.GA6922@tuzo
Re: owncloud no longer in wheezy
On Fri, Aug 09, 2013 at 06:07:04AM -0400, Sean Alexandre wrote: > I see owncloud is no longer in wheezy, and I'm trying to understand why. Where > can I find information on why a package was pulled from a release? > > I see this, but it only seems to say when it was pulled: > http://packages.qa.debian.org/o/owncloud.html > > It was pulled from testing to unstable on 2013-05-14. I'd like to understand > why, > (and how this works in general.) > > Is there somewhere else I can check? > > I'm trying to understand the Debian development process as much as anything. > > (I had installed owncloud on a wheezy box when wheezy was testing. I want to > install it again, but this time on wheezy stable.) I think I just found the answer to my question, here: http://bugs.debian.org/cgi-bin/pkgreport.cgi?repeatmerged=no&src=owncloud#_4_2_5 owncloud 4.0 (the version that was in wheezy testing) had a serious bug. It's been fixed, but in the next release: owncloud 5.0. But, wheezy had already been frozen by that time and so owncloud got pulled. So next time I'll check the "Bugs in source package" link to understand why a package got pulled from a release: http://bugs.debian.org/cgi-bin/pkgreport.cgi?repeatmerged=no&src=owncloud -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130809103357.GA28387@tuzo
owncloud no longer in wheezy
I see owncloud is no longer in wheezy, and I'm trying to understand why. Where can I find information on why a package was pulled from a release? I see this, but it only seems to say when it was pulled: http://packages.qa.debian.org/o/owncloud.html It was pulled from testing to unstable on 2013-05-14. I'd like to understand why, (and how this works in general.) Is there somewhere else I can check? I'm trying to understand the Debian development process as much as anything. (I had installed owncloud on a wheezy box when wheezy was testing. I want to install it again, but this time on wheezy stable.) -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130809100704.GA28285@tuzo
Re: dhclient "No DHCPOFFERS received"
On Wed, Aug 07, 2013 at 09:29:57PM +0200, Slavko wrote: > is your network like this, please: > >- >|ISP| >- > | > | >- >| modem | >- > | >-- >| | | > - - - > | Debian I | | Debian II | | TP-Link | > - - - > > > or like this? > >- >|ISP| >- > | > | >- >| modem | >- > | > | >- >| TP-Link | >- > | > -- > || > - - > | Debian I | | Debian II | > - - My network is like your first diagram, but with only one machine connected to the modem at a time. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130807205320.GB9875@tuzo
Re: dhclient "No DHCPOFFERS received"
On Wed, Aug 07, 2013 at 08:29:53PM +0100, Klaus wrote: > On 07/08/13 20:19, Sean Alexandre wrote: > >On Wed, Aug 07, 2013 at 07:16:45PM +0100, Klaus wrote: > >>On 07/08/13 18:24, Andy Hawkins wrote: > >>>In article <20130807164822.GA7727@tuzo>, > >>>Sean Alexandre wrote: > >>>>No, unfortunately. I know it's not a MAC address issue. Both my TP-LINK > >>>>home > >>>>router and the Debian Wheezy machine that works get DHCP leases without > >>>>any > >>>>problems, and have different MAC addresses. > >>>> > >>>>I also asked my ISP about this, when I had them on the line to bring up my > >>>>new cable modem. They said any MAC address is fine. Just power the cable > >>>>modem down for 30 seconds first. > >>> > >>>Ok, I did say I was kind of stating the obvious! > >>> > >>>Next thing I'd be doing is using tshark or similar to sniff the traffic > >>>being seen on the Debian box. > >>> > >>>Andy > >>> > >>> > >>Just more of the obvious stuff: > >>You say it's a new cable modem, there is a home router, and there is > >>at least one other Debian Wheezy box. > >>Does your ISP provide you with one, or more than one IP address? If > >>one, the router probably translates this "public" IP address to your > >>"private" LAN. Does the router function as a DHCP server, or do you > >>have a dedicated box on your LAN? Can you check the logs of your LAN > >>DHCP server for entries matching the non-functioning box? > > > >There's no NAT in what I'm doing, no. The boxes in each case get a public > >IP address from my ISP (or try to.) The different cases are: > > > >CASE 1, works: > >[cable modem]---[TP-LINK router] > > > >CASE 2, works: > >[cable modem]---[wheezy box that works] > > > >CASE 3, doesn't work: > >[cable modem]---[wheezy box that doesn't work] > > > >I attach a laptop to the TP-LINK router to see that it got an IP address, so > >there's NAT there. But, NAT doens't come into play for the larger problem, if > >that's what you're asking. > > > > > Have you checked for DHCP client entries in /var/log/daemon.log ? > I'm running the standard dhclient, from the isc-dhcp-client package > (though my box is running SID), and there are log messages like > > /var/log/daemon.log:Aug 5 08:48:29 myhostname dhclient: > DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 7 > /var/log/daemon.log:Aug 5 08:48:29 myhostname dhclient: DHCPREQUEST > on eth0 to 255.255.255.255 port 67 > /var/log/daemon.log:Aug 5 08:48:29 myhostname dhclient: DHCPOFFER > from 192.168.0.1 > /var/log/daemon.log:Aug 5 08:48:29 myhostname dhclient: DHCPACK > from 192.168.0.1 > On the wheezy box that works I get: Aug 6 17:46:13 tuzo dhclient: Internet Systems Consortium DHCP Client 4.2.2 Aug 6 17:46:13 tuzo dhclient: Copyright 2004-2011 Internet Systems Consortium. Aug 6 17:46:13 tuzo dhclient: All rights reserved. Aug 6 17:46:13 tuzo dhclient: For info, please visit https://www.isc.org/software/dhcp/ Aug 6 17:46:13 tuzo dhclient: Aug 6 17:46:13 tuzo dhclient: Listening on LPF/eth0/10:0b:a9:8b:33:f8 Aug 6 17:46:13 tuzo dhclient: Sending on LPF/eth0/10:0b:a9:8b:33:f8 Aug 6 17:46:13 tuzo dhclient: Sending on Socket/fallback Aug 6 17:46:13 tuzo dhclient: DHCPREQUEST on eth0 to 255.255.255.255 port 67 Aug 6 17:46:20 tuzo dhclient: DHCPREQUEST on eth0 to 255.255.255.255 port 67 Aug 6 17:46:20 tuzo dhclient: DHCPNAK from 10.132.192.1 Aug 6 17:46:20 tuzo dhclient: DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 5 Aug 6 17:46:20 tuzo dhclient: DHCPREQUEST on eth0 to 255.255.255.255 port 67 Aug 6 17:46:20 tuzo dhclient: DHCPOFFER from 10.132.192.1 Aug 6 17:46:20 tuzo dhclient: DHCPACK from 10.132.192.1 Aug 6 17:46:21 tuzo dhclient: bound to 66.26.64.22 -- renewal in 1705 seconds. On the wheezy box that doesn't work I get: Aug 7 06:28:25 moose dhclient: Internet Systems Consortium DHCP Client 4.2.2 Aug 7 06:28:25 moose dhclient: Copyright 2004-2011 Internet Systems Consortium. Aug 7 06:28:25 moose dhclient: All rights reserved. Aug 7 06:28:25 moose dhclient: For info, please visit https://www.isc.org/software/dhcp/ Aug 7 06:28:25 moose dhclient: Aug 7 06:28:25 moose kernel: [ 208.409987] ADDRCONF(NETDEV_UP): eth-wan: link is not ready Aug 7 06:28:25 moose dhclient: Listening on LPF/eth-wan/00:25:90:39:de:08 Aug 7 06:28:25 moose dhclient: Sending on LPF/eth-wan/00:25:90:39:de:08 Aug 7 06:28:25 moose dhclient: Sending on Sock
Re: dhclient "No DHCPOFFERS received"
On Wed, Aug 07, 2013 at 07:16:45PM +0100, Klaus wrote: > On 07/08/13 18:24, Andy Hawkins wrote: > >In article <20130807164822.GA7727@tuzo>, > > Sean Alexandre wrote: > >>No, unfortunately. I know it's not a MAC address issue. Both my TP-LINK home > >>router and the Debian Wheezy machine that works get DHCP leases without any > >>problems, and have different MAC addresses. > >> > >>I also asked my ISP about this, when I had them on the line to bring up my > >>new cable modem. They said any MAC address is fine. Just power the cable > >>modem down for 30 seconds first. > > > >Ok, I did say I was kind of stating the obvious! > > > >Next thing I'd be doing is using tshark or similar to sniff the traffic > >being seen on the Debian box. > > > >Andy > > > > > Just more of the obvious stuff: > You say it's a new cable modem, there is a home router, and there is > at least one other Debian Wheezy box. > Does your ISP provide you with one, or more than one IP address? If > one, the router probably translates this "public" IP address to your > "private" LAN. Does the router function as a DHCP server, or do you > have a dedicated box on your LAN? Can you check the logs of your LAN > DHCP server for entries matching the non-functioning box? There's no NAT in what I'm doing, no. The boxes in each case get a public IP address from my ISP (or try to.) The different cases are: CASE 1, works: [cable modem]---[TP-LINK router] CASE 2, works: [cable modem]---[wheezy box that works] CASE 3, doesn't work: [cable modem]---[wheezy box that doesn't work] I attach a laptop to the TP-LINK router to see that it got an IP address, so there's NAT there. But, NAT doens't come into play for the larger problem, if that's what you're asking. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130807191905.GB8969@tuzo
Re: dhclient "No DHCPOFFERS received"
On Wed, Aug 07, 2013 at 05:24:57PM +, Andy Hawkins wrote: > In article <20130807164822.GA7727@tuzo>, > Sean Alexandre wrote: > > No, unfortunately. I know it's not a MAC address issue. Both my TP-LINK home > > router and the Debian Wheezy machine that works get DHCP leases without any > > problems, and have different MAC addresses. > > > > I also asked my ISP about this, when I had them on the line to bring up my > > new cable modem. They said any MAC address is fine. Just power the cable > > modem down for 30 seconds first. > > Ok, I did say I was kind of stating the obvious! > > Next thing I'd be doing is using tshark or similar to sniff the traffic > being seen on the Debian box. OK, thanks, that's where I was headed, but was hoping it was something more obvious. I can get a tcpdump, but don't know DHCP very well. I'll take a look, though, and see what I can figure out. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130807191154.GA8969@tuzo
Re: dhclient "No DHCPOFFERS received"
On Wed, Aug 07, 2013 at 02:57:58PM +, Andy Hawkins wrote: > Sean Alexandre wrote: > > I've got two Debian Wheezy machines. One can connect to my cable modem fine, > > and gets an IP address. The other can't. They're both configured the same. > > Any > > ideas why this might be? > > Apologies for suggesting something obvious you might already have thought > of, but I seem to recall my Cable provider's modem will only provide DHCP > addresses to a single MAC unless it's been correctly release (or perhaps the > Cable Modem re-powered). > > Could it be as simple as that? No, unfortunately. I know it's not a MAC address issue. Both my TP-LINK home router and the Debian Wheezy machine that works get DHCP leases without any problems, and have different MAC addresses. I also asked my ISP about this, when I had them on the line to bring up my new cable modem. They said any MAC address is fine. Just power the cable modem down for 30 seconds first. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130807164822.GA7727@tuzo
dhclient "No DHCPOFFERS received"
I've got two Debian Wheezy machines. One can connect to my cable modem fine, and gets an IP address. The other can't. They're both configured the same. Any ideas why this might be? The log message I get on the machine that doesn't work is: Aug 7 06:29:26 moose dhclient: No DHCPOFFERS received. The configuration on both machines looks the same. I've checked: * /etc/dhcp/dhclient.conf * /etc/sysctl.conf * iptables What's mysterious about this is that both machines can connect fine to my TP-LINK home router, and get DHCP leases and IP addresses. It's only when I try to connect the problem machine to my cable modem that it gets the "No DHCPOFFERS received." I know it's not a MAC address issue. Both my TP-LINK home router and the Debian Wheezy machine that works get DHCP leases without any problems, and have different MAC addresses. Any ideas? Thanks! -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130807133856.GA6733@tuzo
Re: SSHD Keys
On Sat, Aug 03, 2013 at 10:16:08PM -0400, Jerry Stuckle wrote: > I was just renewing my SSHD keys (dpkg-reconfigure openssh-server) > and noticed it is generating 512 bit RSA keys. This isn't all that > secure. > > How can I get it to generate better keys? As root: rm /etc/ssh/ssh_host* ssh-keygen -N '' -b 4096 -t rsa -f /etc/ssh/ssh_host_rsa_key -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130804081950.GA23754@tuzo
Problems with util-linux in Debian Sid
ng .../util-linux_2.20.1-5.5_i386.deb containing util-linux, pre-dependency problem: util-linux pre-depends on libslang2 (>= 2.2.4) dpkg: regarding .../util-linux_2.20.1-5.5_i386.deb containing util-linux, pre-dependency problem: util-linux pre-depends on libtinfo5 dpkg: regarding .../util-linux_2.20.1-5.5_i386.deb containing util-linux, pre-dependency problem: util-linux pre-depends on libuuid1 (>= 2.16) dpkg: regarding .../util-linux_2.20.1-5.5_i386.deb containing util-linux, pre-dependency problem: util-linux pre-depends on zlib1g (>= 1:1.1.4) Unpacking util-linux (from .../util-linux_2.20.1-5.5_i386.deb) ... dpkg: error processing /var/cache/apt/archives/util-linux_2.20.1-5.5_i386.deb (--unpack): /var/cache/apt/archives/util-linux_2.20.1-5.5_i386.deb e2fsprogs pre-depends on util-linux (>= 2.15~rc1-1) dpkg: regarding .../util-linux_2.20.1-5.5_i386.deb containing util-linux, pre-dependency problem: util-linux pre-depends on libblkid1 (>= 2.20.1) dpkg: regarding .../util-linux_2.20.1-5.5_i386.deb containing util-linux, pre-dependency problem: util-linux pre-depends on libncurses5 (>= 5.5-5~) dpkg: regarding .../util-linux_2.20.1-5.5_i386.deb containing util-linux, pre-dependency problem: util-linux pre-depends on libselinux1 (>= 1.32) dpkg: regarding .../util-linux_2.20.1-5.5_i386.deb containing util-linux, pre-dependency problem: util-linux pre-depends on libslang2 (>= 2.2.4) dpkg: regarding .../util-linux_2.20.1-5.5_i386.deb containing util-linux, pre-dependency problem: util-linux pre-depends on libtinfo5 dpkg: regarding .../util-linux_2.20.1-5.5_i386.deb containing util-linux, pre-dependency problem: util-linux pre-depends on libuuid1 (>= 2.16) dpkg: regarding .../util-linux_2.20.1-5.5_i386.deb containing util-linux, pre-dependency problem: util-linux pre-depends on zlib1g (>= 1:1.1.4) Unpacking util-linux (from .../util-linux_2.20.1-5.5_i386.deb) ... dpkg: error processing /var/cache/apt/archives/util-linux_2.20.1-5.5_i386.deb (--unpack): /var/cache/apt/archives/util-linux_2.20.1-5.5_i386.deb I think that this package is broken but, who knows? Can you help me with this? I tried to send a bug report but "bugreport" is giving me a segmentation fault. Thank you for your help! *Alexandre Teles* Bacharelando Interdisciplinar em Ciência e Tecnologia - UFBA Gerente de Infraestrutura Auxiliar - Projeto Ekaaty Linux AIESEC OGX GIP Team Member Tel: (71)9214-8614 (TIM) - (71)9722-8403 (VIVO) - (71)8830-4286 (OI) - (71)8237-9748 (CLARO) Skype: kabbalista Facebook: http://fb.com/alex.kabbal Website: http://messisquidemmulta.org
Re: server log centalized
On Mon, Jul 15, 2013 at 03:18:52PM +0200, Pol Hallen wrote: > I need setting up a server log centralized over internet (using rsyslog). > What is better? Using a vpn or crypt log files? stunnel is good for this. It creates encrypted SSL tunnels between machines, for network daemons. Here are some links: stunnel package in wheezy http://packages.debian.org/wheezy/stunnel4 Article about using stunnel with rsyslog http://freecode.com/articles/ssl-encrypting-syslog-with-stunnel Wikipedia article on stunnel https://en.wikipedia.org/wiki/Stunnel Official site https://www.stunnel.org/ -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130715144828.GA19958@tuzo
Deterministic Builds (was [Re: wacky question])
On Wed, Jun 19, 2013 at 10:44:12PM -0400, Greg wrote: > Does anyone think that debian could participate in any programs like > PRISM? Or could a lone (or group of) sympathetic DD or DM slip a > backdoor or something that could collect private info in the binary > packages distributed by debian? There was an interesting post on this the other day on the liberationtech mailing list by Mike Perry from the Tor Project: Deterministic builds and software trust https://mailman.stanford.edu/pipermail/liberationtech/2013-June/009257.html To quote: > For the past several years, we've been seeing a steady increase in the > weaponization, stockpiling, and the use of exploits by multiple > governments, and by multiple *areas* of multiple governments. This > includes weaponized exploits specifically designed to "bridge the air > gap", by attacking software/hardware USB stacks, disconnected Bluetooth > interfaces, disconnected Wifi interfaces, etc. Even if these exploits > themselves don't leak (ha!), the fact that they are known to exist means > that other parties can begin looking for them. > In this brave new world, without the benefit of anonymity to protect > oneself from such targeted attacks, I don't believe it is possible to > keep a software-based GPG key secure anymore, nor do I believe it is > possible to keep even an offline build machine secure from malware > injection anymore, especially against the types of adversaries that Tor > has to contend with. > This means that software development has to evolve beyond the simple > models of "Trust my gpg-signed apt archive from my trusted build > machine", or even projects like Debian going to end up distributing > state-sponsored malware in short order. > This is where deterministic builds come in... He goes on to explain what "deterministc builds" are, how Tor has started using them, and how hopefully Linux distros will as well. Also related, Bruce Scheier just wrote an interesting piece on weaponized exploits, on how the NSA is planting logic bombs and backdoors in machines and routers around the world: Has U.S. started an Internet war? www.cnn.com/2013/06/18/opinion/schneier-cyberwar-policy -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130620073240.GA29135@tuzo
Re: Openvpn, network manager and resolv.conf
On Mon, Jun 17, 2013 at 08:31:41PM -0700, Erwan David wrote: > Le 17/06/2013 19:40, Sean Alexandre a écrit : > >Your openvpn config file may be missing these two lines: > > > >up /etc/openvpn/update-resolv-conf > >down /etc/openvpn/update-resolv-conf > > > >You should be seeing a log file entry like this, that shows resolv.conf has > >been updated: > > > >Sun June 16 08:18:10 2013 us=8295 /etc/openvpn/update-resolv-conf tun0 1500 > >1562 10.0.122.114 10.0.122.113 init > > > > > That would mazke the config file on client not only linux but even > debian specific. And good security dictates that such decision > should be forced by server. > I remember it once worked this way... I see your point. I don't know if there's a way to do that -- to configure the OpenVPN server to update resolv.conf for all clients without the clients needing to configure anything. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130618034814.GA11868@tuzo
Re: Openvpn, network manager and resolv.conf
On Mon, Jun 17, 2013 at 05:42:19PM -0700, Erwan David wrote: > Le 17/06/2013 09:25, Sean Alexandre a écrit : > >It sounds like you may not have the resolvconf package installed. > > I have... > > And I see in my resolv.conf > > # Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8) > # DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN > nameserver 8.8.8.8 > search key.chillispot.info > > And in /var/log/daemon.log > > Jun 17 17:35:27 bibi ovpn-dedibox[4076]: PUSH: Received control > message: 'PUSH_REPLY,ifconfig-ipv6 2a01:e0b:2070:1::1001/64 > 2a01:e0b:2070:1::1,tun-ipv6,route-ipv6 2000::/3 > 2a01:0e0b:2070:1::1,redirect-gateway def1 bypass-dhcp,dhcp-option > DNS 10.8.0.1,dhcp-option DOMAIN rail.eu.org,tun-ipv6,route > 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.10 > 10.8.0.9' > > which shows that the openvpn server pushed the DNS Your openvpn config file may be missing these two lines: up /etc/openvpn/update-resolv-conf down /etc/openvpn/update-resolv-conf You should be seeing a log file entry like this, that shows resolv.conf has been updated: Sun June 16 08:18:10 2013 us=8295 /etc/openvpn/update-resolv-conf tun0 1500 1562 10.0.122.114 10.0.122.113 init -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130618024004.GA10498@tuzo
Re: Openvpn, network manager and resolv.conf
On Mon, Jun 17, 2013 at 08:58:51AM -0700, Erwan David wrote: > I am in holidays going from hotel to hotel and I see that > resolv.conf stays the same, i.e. the one networkmanager writes from > the hotel DHCP. It sounds like you may not have the resolvconf package installed. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130617162546.GA5716@tuzo
Re: Debian/Linux tutorials.
On Thu, Jun 06, 2013 at 02:11:21PM +0300, atar wrote: > I wanted to know please where can I enrich my knowledge about Linux > at general and especially about Debian Linode's got some great tutorials: https://library.linode.com/ -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130606144811.GA24390@tuzo
Re: avahi-daemon: Is it *really* needed?
On Thu, May 23, 2013 at 12:39:16PM -0700, David Guntner wrote: > I'm still running Squeeze for a while longer before I finally upgrade to > Wheezy - want to let it shake out a bit before taking the plunge. :-) > > A question that I've been pondering for a while now: Is the > avahi-daemon *really* needed? I've disabled it, and haven't needed it. Here's more on what it's for: http://packages.debian.org/wheezy/avahi-daemon So it seems you'd only need it if you want auto-discovery for printers and other devices on your network. You should be able to disable it with: update-rc.d avahi-daemon disable This leaves it installed, to satisfy the dependencies you're seeing, but causes it not to start when you reboot. To stop it before rebooting: service avahi-daemon stop -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130523204656.GA29320@tuzo
Re: Debugging a Wheezy Hang
On Mon, May 20, 2013 at 03:47:13PM -0400, staticsafe wrote: > Didn't you post this earlier this week? > I will repost my answer and CC you as well: I just joined the list, but apparently not in time to get your earlier response. I'm seeing responses now. Thanks for resending. I'll take a look at those logs, and the other things people are suggesting. Would there any way to trigger a core dump, of the entire system, and would that be in any way useful? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130520212738.GA18144@tuzo
Debugging a Wheezy Hang
I've installed Wheezy on a laptop. Every few days it hangs. (I can't even ctl+alt+f2 to get a console.) I'd like to report this. How do I capture debug info that would be useful in a bug report? (And, where do I file a bug report?) Thanks! -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130520194008.GA16983@tuzo
Reporting Wheezy Freeze
I've installed Wheezy on my laptop and it's freezing every so often. (I can't even to get a console.) I'd like to report a bug, but don't know where to start. What can I run to capture info on the bug the next time it happens? Where/how do I report it? Thanks for any pointers! -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130519221724.GA6955@tuzo
