Re: [arch-general] pam_faillock -- can we just remove it from /etc/pam.d/login?

2020-09-11 Thread Jan Alexander Steffens via arch-general
On Sat, Sep 12, 2020 at 5:41 AM David C. Rankin
 wrote:
>
> Following the [arch-dev-public] Pam lockout thread,
>
>   Can we just remove the faillock entries from /etc/pam.d/login without
> breaking anything if we don't need it at all (like for home computers, etc..)
>
>   The any 3 attempts in 15 minutes which is the default under faillock.conf:
>
> # The default is 900 (15 minutes).
> # fail_interval = 900
>
> means that if I mistype a password on login, then 10 minutes later mess up
> with sudo, and then 14 minutes later have another slip with sudo, I'm locked
> out by faillock. That seems like overkill for home users. It should be limited
> to 3 failed logins at a single prompt, not any 3 in 15 minutes.
>
> # admin_group = 
>
> is another option -- but at this point, I'd rather just remove it from the pam
> stack. Is that doable?
>
> --
> David C. Rankin, J.D.,P.E.

Succeeding even once should clear the log of failures, thus giving you
another three attempts. This seems reasonable to me. Is this not
working as advertised?


Re: [arch-general] ArchLinux in Open Invention Network

2019-09-27 Thread Jan Alexander Steffens via arch-general
On Fri, Sep 27, 2019 at 10:43 PM David C. Rankin <
drankina...@suddenlinkmail.com> wrote:

>
> For open-source software, what possible benefit is there for distributions
> like Archlinux to "sign up" to some represented patent non-aggression pact
> pushed by some Virginia marketing group (atigro.com)?
>

They employed a marketing firm to create their website. That doesn't mean
they are "being pushed".


Re: [arch-general] Hardware video acceleration

2019-07-21 Thread Jan Alexander Steffens via arch-general
On Sun, Jul 21, 2019 at 4:01 PM Ralf Mardorf via arch-general
 wrote:
>
> Hi,
>
> when playing youtube videos hardware video acceleration seems to gain
> absolutely nothing on my machine or I've done something wrong ;).
>
> Am I missing something?

Neither Chrome nor Firefox support accelerated video decoding on Linux.

We briefly patched it into chromium a while back, but retracted those
patches because they were buggy.


Re: [arch-general] gnupg: systemd enable in post_install

2017-06-09 Thread Jan Alexander Steffens via arch-general
On Fri, Jun 9, 2017 at 12:13 PM Damjan Georgievski via arch-general <
arch-general@archlinux.org> wrote:

> what's the rationale to enable the gnupg sockets in post_install of the
> package?
>
> https://git.archlinux.org/svntogit/packages.git/tree/trunk/install?h=packages/gnupg#n21
>
> I don't disagree that the sockets maybe should be enabled (I have them
> enabled for me), it's just a strange way to enable them in
> post_install, and linking them in /etc/
>
> Why doesn't the PKGBUILD make the symlinks in
> /usr/lib/systemd/user/sockets.target.wants/ ?
>

I did that in the pulseaudio package at first and people complained that
they couldn't "disable" the pulseaudio socket and "mask" also prevented a
manual start.

Hence I moved pulseaudio from static symlinks to enable/disable
post_install.

GnuPG follows this.


> dbus does that for ex.
>

The DBus `make install` sets it up that way; it wasn't a downstream
decision.


Re: [arch-general] [arch-dev-public] Test repository with gcc7

2017-05-23 Thread Jan Alexander Steffens via arch-general
On Tue, May 23, 2017 at 9:42 PM Eli Schwartz via arch-general <
arch-general@archlinux.org> wrote:

> On 05/15/2017 07:33 AM, Bartłomiej Piotrowski wrote:
> > I will push new gcc to [testing] this week.
>
> Terrible things happened to my firefox and thunderbird-gtk2 builds when
> I used what turned out to be a testing-enabled build chroot to build them.
>
> The builds succeeded but the UI elements blinked in and out constantly
> and it was uncooperative switching tabs... basically everything fritzed.
> No idea why... but disabling testing and `pacman -Syuu` allowed the
> rebuilds to work as expected.
>
> Quickly googling gets me this, which looks like the same issue:
> https://bugzilla.redhat.com/show_bug.cgi?id=1422532


No, this particular bug should have been fixed since 52.0...

In any case, you can try CXXFLAGS+=" -fno-lifetime-dse
-fno-delete-null-pointer-checks -fno-schedule-insns2" ; these were the
optimization steps that used to cause trouble with GCC 6.


Re: [arch-general] [arch-dev-public] Test repository with gcc7

2017-05-15 Thread Jan Alexander Steffens via arch-general
On Mon, May 15, 2017 at 9:30 PM Hao Zhang via arch-general <
arch-general@archlinux.org> wrote:

> Thank you very much! I also tried building retroarch and have no problem
> building it with GCC 7. Now we found the reason why MariaDB fails to build,
> there are two ways of fixing it and I have verified both methods work:
> 1) patch gcc to remove line 197-203 from gcc-ar.c (these lines are not
> present
> in gcc 6.3.1)
> 2) make a symlink of the files ar, nm and ranlib in /usr/local/bin.
>

These lines were introduced in this commit:
https://github.com/gcc-mirror/gcc/commit/eeb6872bfdfd1e71b27de6f62a5f5c08a2efb015

What a weird bug. This looks like the MariaDB compilation uses gcc-ar
instead of binutils ar. Based on what I can tell from the code, gcc-ar here
expects to be in a non-standard path and named "ar" in order to wrap the
binutils ar, similar to how ccache works. But gcc-ar is named "gcc-ar" and
located in the same dir as the binutils ar, so things break.

Is MariaDB using LTO?


Re: [arch-general] Package signing on soyuz

2017-01-18 Thread Jan Alexander Steffens via arch-general
On Wed, Jan 18, 2017 at 8:21 PM Lukas Jirkovsky via arch-general <
arch-general@archlinux.org> wrote:

> I use only the ssh agent forwarding ("ForwardAgent yes" in
> .ssh/config). On pkgbuild.com I build packages using the *-*-build as
> always. When a package is built, I use a script [1] that downloads the
> binary packages, signs them and uploads the signatures back to
> pkgbuild.com. That way I can use communitypkg on pkgbuild.com to
> upload everything.
>

I've got something very similar, except:

I only check out the trunks on soyuz. I change the PKGBUILD, build and
commit there.

A local script then runs archco, rsyncs the packages from soyuz to local,
rsyncs the packages from soyuz to orion, then locally runs commitpkg to
sign and release the packages.


Re: [arch-general] Cannot no longer resolve local hostname with the new nsswitch.conf

2016-11-08 Thread Jan Alexander Steffens via arch-general
On Tue, Nov 8, 2016 at 1:37 PM Chi-Hsuan Yen via arch-general <
arch-general@archlinux.org> wrote:

> Hi Arch enthuasiasts,
>
> With testing/filesystem 2016.11-2, I can no longer use my local hostname to
> acess services on the local machine. For example:
>
> $ hostname
> PC12574
>
> $ ping PC12574
> ping: PC12574: Name or service not known
>
> Seems changes in nsswitch.conf [1] does the effect. If I change the hosts:
> line in nsswitch.conf back to the old configuration "files resolve
> mymachines myhostname", or remove the [!UNAVAIL=return] part from this
> line, ping works fine:
>
> $ ping PC12574
> PING PC12574(PC12574 (fe80::ae22:bff:fe77:e20b%enp3s0)) 56 data bytes
> 64 bytes from PC12574 (fe80::ae22:bff:fe77:e20b%enp3s0): icmp_seq=1 ttl=64
> time=0.025 ms
> 64 bytes from PC12574 (fe80::ae22:bff:fe77:e20b%enp3s0): icmp_seq=2 ttl=64
> time=0.078 ms
>
> Is it a bug? Or such a usage is just a non-standard coincidence?
>
> Thanks for any help.
>
> Yen Chi Hsuan
>
> [1]
>
> https://git.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/filesystem&id=f1cd9f7fb4cdf7617a1b875e14be212733f9c67a


This is an effect of putting "myhostname" at the end of the list. If you
don't want your network to be able to override lookup for your hostname
move "myhostname" to after "files".

It seems this only happens when you're part of a domain. AFAICT resolve/dns
won't ask upstream for unqualified names.


Re: [arch-general] Almost system crash, users getting logged out

2016-11-05 Thread Jan Alexander Steffens via arch-general
On Sat, Nov 5, 2016, 10:45 J. C.  wrote:

> Hi list,
> I had an "almost crash" last night. When I got up in the morning, the
> session
> on the first six TTYs were closed, but the sessions on TTY 8-10 were still
> open. Having taken a look at the journal, I found a lot of activity around
> 4AM. That may have been preceeded by something around midnight, when my
> music
> player suddenly quit, the system informing me, that there was not enough
> memory. A restart of the music player was successful though.
>
> I don't have any remote login services active and this sort of thing hasn't
> happened before, not on Arch since my installation a few weeks ago nor on
> the
> previous system.
>
> My kernel version is 4.8.2, not having rebooted since the last upgrade.
>
> The journal excerpt with the potential problem is here:
> https://freeshell.de/~silvain/journal.log
>
> I'd be grateful for any help and of course eagre to supply any further
> info to
> solve this issue.
>
> Thank you and
>
> best wishes
>
> Jeanette
>
> 
> When you need someone, you just turn around and I will be there <3
>

Do you have any tmpfs mounted that's larger than half your RAM? Your system
repeatedly ran out of memory, but I can't spot any directly responsible
process, so my next thought is that the memory was consumed by files on one
or more tmpfs mounts.

>


Re: [arch-general] Browsers crashing

2016-10-28 Thread Jan Alexander Steffens via arch-general
On Fri, Oct 28, 2016, 21:36 Zorro via arch-general <
arch-general@archlinux.org> wrote:

> Op 28-10-2016 om 18:17 schreef Alex Theotokatos via arch-general:
> > Then, lets start from the basics...
> > Run memtest.
> Just installed it but if I understand it well I need to boot with it.
> Need to figure out how.
>
> > If you use wayland, use Xorg.
> I am using LXDE.
>
> > What is your graphics card?
> 00:02.0 VGA compatible controller: Intel Corporation Mobile 945GSE
> Express Integrated Graphics Controller (rev 03) (prog-if 00 [VGA
> controller])
>
> > uname -a
> Linux Juergen 4.8.3-1-ARCH #1 SMP PREEMPT Thu Oct 20 20:19:42 CEST 2016
> i686 GNU/Linux
>
> > Test if there is a bug on gpu driver.
>
> How ?
>
>
> Regards, Harm-Jan
>

Does your processor support SSE2? It's required for WebKit's JavaScript
compiler. If you're missing it, browsers will crash with SIGILL.

>