Fwd: Re: sound problem debian wheezy

2014-07-30 Thread Ric Moore




 Original Message 
Subject: Re: sound problem debian wheezy
Date: Wed, 30 Jul 2014 21:52:46 -0400
From: Ric Moore 
To: tom arnall 

On 07/30/2014 12:37 AM, tom arnall wrote:

Ric,

thanks for getting back to me? rest of message inline to yours.

Tom


On 7/29/14, Ric Moore  wrote:

On 07/29/2014 01:39 AM, tom arnall wrote:

Two weeks ago I installed Debian wheezy and was using pulse audio with
good results. Then suddenly the external mic wasn't working. I removed
pulse from the system and the process seemed to have made alsa the
sound system. I also added some alsa stuff. The commands for this:

sudo apt-get purge pulseaudio pulseaudio-utils
gstreamer0.10-pulseaudio libpulse-browse0 paman pavumeter pavucontrol

sudo rm /etc/asound.conf

rm ~/.pulse-cookie

rm -fR ~/.pulse

sudo apt-get install alsa-base alsa-tools\
   alsa-tools-gui alsa-utils alsa-oss\
   alsamixergui libalsaplayer0

Still no external mic. By 'external mic' I mean the one I plug into
the round port, not a USB mic.

The machine is a lenovo t400

I checked that the hardware is ok by using it under windows dual-boot.

I am sure that people need more info than this, but I have no idea
what that info might be.


Several pulse packages were long ago deprecated.


how cd this lead to pulse working for at least two weeks and then
suddenly failing?


I just use the stock
pulse install and pavucontrol.


you seem to think that reinstalling pulse wd be a good idea. cd you
tell me more of yr thinking on this?  i see a lot of stuff on the
internet about debian+pulse problems and so am hesitant.


]Did you configure your sound card to have
X number of speakers AND mike (mono or stereo) input?


how do i configure the sound card?


Did you run
alsamixer to be sure it wasn't muted??


yes


Pulse rides on top of alsa, so if
alsa has the mike muted, pulse can not overrule alsa. Package upgrades
can break things once in awhile.


what kind of upgrade cd have caused pulse microphone to suddenly stop working?

thanks again for helping me.


No problem! I've used pulse for sometime. and with some strange audio
adapters.

First, again pulse is on top of alsa, so if alsa fails, pulse fails harder.

Second, plain-jane audio uses that work with alsa, works just peachy
with alsa, unless you start using settings like .asound which call
directly to alsa, then pulse is shoved under the bus. No setting files
at all when using pulse.

Third, pavucontrol will show you your audio sources live. If there is
sound input then the input tab page will show the audio level with a
volume level meter. IF you see no movement, then sound is not appearing
to pulse for you to use. You can use that to set the volume level too.

IF your application uses OSS then there is a pulse module to convert OSS
to alsa/pulse. OR, launch your program in a terminal window with padsp
 and it will FORCE sound to be directed to alsa/pulse.
Kino will only run now with the command: padsp kino

Same with output sound, you should have configured your outputs with the
configuration tab, and then select the output device on the playback
page. I have USB stereo output headphone with mono mike input. And, I
have a USB 7.1 audio device which is connected to a 7.1 speaker setup.
So, when I playback through a program, like VLC, I can change between
the two ON THE FLY! with pavucontrol playback tab. I just click and change.

I have my onboard sound device turned OFF in the bios, as I don't use
it. If you use your's make sure it is ON in the bios. This should be
enough to have pulse and alsa setup and ready to go. Again, if you see
no sound level, during playback or recording, something is muted in alsa
or the stream is in another format. If it's Skype then google up on what
module needs to be added to pulse. Enjoy! Ric






--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/53d9e4e9.4010...@gmail.com



Re: hp server hardware monitoring

2014-07-30 Thread Claudio Kuenzler
On Wed, Jul 30, 2014 at 9:50 PM, Bonno Bloksma  wrote:

> Hi,
> >> [...]
> >> What may be relevant too is that on the g6 server Debian uses the
> >> CCISS drivers for the raid hardware, the volume shows up as
> >> /dev/cciss/c0d0
> >> On the g7 and g8 hardware the raid volume simply shows up as /dev/sda
> >
> > cciss has been superseded by hpsa, "The hpsa driver is intended to
> supplant the cciss driver for newer Smart Array controllers.", cf.
> > .
>
> Ok, thanks for the heads up.
>
> >> How can I get this to work under a g7 or g8 server. Do I need a newer
> >> version of the package of do I need a different package?
> >
> > I generally avoid installing third-party tools on the bulk of my
> servers, and for simple monitoring the packages cciss-vol-status and
> nagios-plugins-standard from Debian will suffice:
>
> I will try that too.  But
>
> >root@vz02:~# lsmod | grep -e cciss -e hpsa
> >hpsa   50787  2
>
> Ok, I have that too
> linein:~# lsmod | grep -e hpsa -e cciss
> hpsa   40765  2
> scsi_mod  162269  5 hpsa,libata,sd_mod,sg,sr_mod
>
> > root@vz02:~# cciss_vol_status /dev/sda
> > /dev/sda: (Smart Array P420i) RAID 5 Volume 0 status: OK.
>
> But I get...
> linein:~# cciss_vol_status /dev/sda
> cciss_vol_status: /dev/sda: Unknown SCSI device.
>
> Which is weird because I have (copy from iLO):
>   Model: HP Smart Array P420i Controller
>   Firmware: Version 3.22
>
> Now what?
>
> Bonno Bloksma
>
>
Did you give the plugin check_ilo2_health.pl a shot?
The plugin uses ILO to get the status of the hardware. It works fine for
servers running with at least ILO2.
Everything you see in ILO is exported and the plugin checks the state. On
some older server generations, some hardware parts were missing in ILO
(e.g. disks) but in recent servers/ILO versions (G7 and Gen8) the disks are
also being checked in ILO.

See
https://www.monitoringexchange.org/inventory/Check-Plugins/Hardware/Server/HP-%2528Compaq%2529/check_ilo2_health

I'm monitoring the hardware of 168 HP servers with this plugin.


Re: New 64bit Installation--Next Round: /var

2014-07-30 Thread Lisi Reisz
On Wednesday 30 July 2014 08:05:32 David Baron wrote:
> 1. Now that I have / on a large enough place to not worry over it (and /opt
> and /usr/local are bound to folders on the over-sized home partition), now
> time to deal with /var. Given a mere 2.7g, enough for a couple of KDE users
> and a number of apt downloads. Can easily go over 90% for large upgrades.
>
> So I tried moving it as well to the home and binding. Rebooted, system came
> up just fine(?) but I could not log into KDE. Got the error box about not
> able to access some tmp ... may space is full. This is usually caused by
> permission problems. Did sudo rsync -ax foul me up somehow? Or is there a
> problem accessing the tmp areas in this manner? Anyway, reverted, luckily
> without any problems. Ideas?
>
> Other alternative here is to move /usr to a nice partition waiting for it
> and then use the now free partition for a 3x larger area for /var. If
> moving the filesystem was problematic, might still be so.
>
> 2. Those mount --bind and some mount loops to squashfs data are now on my
> /etc/rc.local. The might be better served on /etc/fstab? Syntax?
>
> 3. Noticed more postings about grief with that little / partition from the
> install--the partition sizes are just those. Please, whoever is setting up
> the Debian install, take note.

If this is a new installation, as the subject says that it is, I cannot 
understand why it is not easier just to reinstall?

Why not try using the text version of the installer?  I don't use the 
graphical installer, and I have also never had a problem with the 
partitioner.  Maybe there is a connection.

Lisi


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201407310604.47948.lisi.re...@gmail.com



Re: laptop with two-finger gestures with a free OS

2014-07-30 Thread Bzzzz
On Wed, 30 Jul 2014 19:28:32 -0700
Dan Hitt  wrote:

> So . . . i'd like to get a laptop for my personal use, but of
> course running a free OS.
> 
> Does this exist, with the two finger gesture use?

MSI has such machines (at least in EU); it uses a synaptics
touchpad with this feature (strange when you're used to old
ones with a scroll zone on the right).

Here, you find at least 2 models without any OS, one with
a i3, the other with a i5-4210M @ 2.6GHz (3.6GHz boost)
(€500 4GB RAM, 500GB HD, LCD 1366x768, ~4H normal work).
Full support of all features w/ sid + TLP.

-- 
 If I would die in 5 minutes, what would you want to say to me?
 "What's your root password?"


signature.asc
Description: PGP signature


Re: Pin package to "any version, don't remove"?

2014-07-30 Thread The Wanderer
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 07/30/2014 04:05 AM, Andrei POPESCU wrote:

> On Ma, 29 iul 14, 22:52:15, The Wanderer wrote:
> 
>> 
>> Package: removal-prevention
>> Pin: version 1.0
>> Pin-Priority: 1001
>> 
>> 
>> produces no change in behavior; dist-upgrade still wants to remove
>> removal-prevention, and the packages it depends on.
>> 
>> Similar things happen with "Pin: version *" on fglrx-driver or on
>> other such packages; that's what I tried before even starting this
>> thread.
>> 
>> If it weren't for the fact that the iceweasel and icedove pins (in
>> the same file) are being respected, I'd be tempted to wonder
>> whether my preferences file was even being read...
> 
> 'apt-cache policy removal-prevention' will tell.

Ah, so that's what that was about.

Yes, that confirms it, showing '1.0 1001' instead of '1.0 0'. So the
problem is somewhere else, or there's something we're missing, or this
just plain can't be done with current tools...

- --
   The Wanderer

Secrecy is the beginning of tyranny.

A government exists to serve its citizens, not to control them.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=Oipr
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/53d9acfd.9080...@fastmail.fm



laptop with two-finger gestures with a free OS

2014-07-30 Thread Dan Hitt
Hi Debian List,

At work, i've got a mac book pro laptop, which for the first time in
my life is a laptop that i can use like a serious computer.  Prior to
this, i refused to use a laptop because they are so much worse than
desktops.

Part of the appeal for me is the two-finger gestures for scrolling.

It's still a little worse than a desktop because of the crummy laptop
keyboard, but good enough to use on transit.

So . . . i'd like to get a laptop for my personal use, but of course
running a free OS.

Does this exist, with the two finger gesture use?

TIA for any info.

dan


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/caophizjtb8jnrrdqsxkrejyhxbp0snr+6evp+ww4doowpfw...@mail.gmail.com



Packagekitd

2014-07-30 Thread David Baron
This baby seems to start up for no reason, slowing whatever was being done at 
the time. Have to manually kill it.

Somewhere to set its priorities, i.e. nice it?


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/10450683.DjGLZfCStZ@dovidhalevi



Re: iptables firewall

2014-07-30 Thread Joe
On Wed, 30 Jul 2014 21:34:07 +0200
Pascal Hambourg  wrote:

> Joe a écrit :
> > 
> > Something else you might do now is to place temporary logging rules
> > before your 'DROP' rules, to confirm whether it is indeed iptables
> > which is blocking those packets.
> 
> Or just run tcpdump while the port scan is running.

I like iptables, it's simple, and it tells you exactly what you want to
know, in real time, without needing to wade through man pages.
> 
> > No logs, it's somebody or something
> > else. And if you have anything other than just a bare modem between
> > you and the outside world, which is not really best practice, then
> > the first place to look is the Net router.
> > 
> > And as someone else asked, why are you worried about this
> > 'stealth'? As long as the bad packets don't get in, what does it
> > matter?
> 
> He may have believed the claim by GRC et al. that "not stealth=at
> risk". But that's just some kind of security by obscurity, isn't it ?
> 
> 

On the whole, I think Mr Gibson knows what he is talking about, but
all the melodrama on his site is for the benefit of Windows users. If
you don't hugely exaggerate risks these days, nobody pays you any
attention. He may well have played a part in getting a firewall put
into XP, I don't think Microsoft was ever very bothered about home
users' security.

I'm not a security expert, but I read a bit now and then, and I think
if a competent Black Hat thinks there's a computer on a particular
address, he'll find it, and what OS it runs, and what its owner had for
breakfast... there's a lot more to life than well-formed TCP and UDP
packets, and everything incoming has to be handled by the networking
code, every protocol, every invalid packet, even when it pretends it's
not there. Iptables and suchlike will keep out the bots, and that's all
the small people need to do.

-- 
Joe


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140730212540.314e4...@jretrading.com



Re: iptables firewall

2014-07-30 Thread Pascal Hambourg
Joe a écrit :
> 
> Something else you might do now is to place temporary logging rules
> before your 'DROP' rules, to confirm whether it is indeed iptables
> which is blocking those packets.

Or just run tcpdump while the port scan is running.

> No logs, it's somebody or something
> else. And if you have anything other than just a bare modem between you
> and the outside world, which is not really best practice, then the first
> place to look is the Net router.
> 
> And as someone else asked, why are you worried about this 'stealth'? As
> long as the bad packets don't get in, what does it matter?

He may have believed the claim by GRC et al. that "not stealth=at risk".
But that's just some kind of security by obscurity, isn't it ?


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/53d948af.4090...@plouf.fr.eu.org



RE: hp server hardware monitoring

2014-07-30 Thread Bonno Bloksma
Hi,
>> [...]
>> What may be relevant too is that on the g6 server Debian uses the 
>> CCISS drivers for the raid hardware, the volume shows up as
>> /dev/cciss/c0d0
>> On the g7 and g8 hardware the raid volume simply shows up as /dev/sda
>
> cciss has been superseded by hpsa, "The hpsa driver is intended to supplant 
> the cciss driver for newer Smart Array controllers.", cf.
> .

Ok, thanks for the heads up.

>> How can I get this to work under a g7 or g8 server. Do I need a newer 
>> version of the package of do I need a different package?
>
> I generally avoid installing third-party tools on the bulk of my servers, and 
> for simple monitoring the packages cciss-vol-status and 
> nagios-plugins-standard from Debian will suffice:

I will try that too.  But

>root@vz02:~# lsmod | grep -e cciss -e hpsa
>hpsa   50787  2

Ok, I have that too
linein:~# lsmod | grep -e hpsa -e cciss
hpsa   40765  2
scsi_mod  162269  5 hpsa,libata,sd_mod,sg,sr_mod

> root@vz02:~# cciss_vol_status /dev/sda
> /dev/sda: (Smart Array P420i) RAID 5 Volume 0 status: OK.

But I get...
linein:~# cciss_vol_status /dev/sda
cciss_vol_status: /dev/sda: Unknown SCSI device.

Which is weird because I have (copy from iLO):
  Model: HP Smart Array P420i Controller 
  Firmware: Version 3.22

Now what?

Bonno Bloksma


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/89d1798a7351d040b4e74e0a043c69d79a904...@hglexch-01.tio.nl



Re: Threading using digest and KMail (was Re: Exim4 not routing local mail ... )

2014-07-30 Thread Lisi Reisz
On Wednesday 30 July 2014 08:14:20 David Baron wrote:
> I do not understand the difference. If I hit reply, so I get the title of
> the digest which I replace with the desired re:  Should not this be OK.

No.  It gives rise to a new thread, with the digest data, which is not the 
same as the header data for the individual mails.

This is a perennial problem.  Is there no way you could subscribe properly?

Lisi


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201407301956.47292.lisi.re...@gmail.com



Re: iptables firewall

2014-07-30 Thread Nemeth Gyorgy
2014-07-30 09:18 keltezéssel, Joe írta:
> Something else you might do now is to place temporary logging rules
> before your 'DROP' rules, to confirm whether it is indeed iptables
> which is blocking those packets. No logs, it's somebody or something
> else.

Perhaps it is not needed.
iptables -L -v command shows the ruleset with packet counter. You can
see whether the rule was used or not.


-- 
--- Friczy ---
'Death is not a bug, it's a feature'


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/53d93a94.5000...@freemail.hu



Re: iptables firewall

2014-07-30 Thread Nemeth Gyorgy
2014-07-30 17:33 keltezéssel, Mike McClain írta:
>> And as someone else asked, why are you worried about this 'stealth'? As
>> long as the bad packets don't get in, what does it matter?
> 
> Why is there a DROP instruction in iptables as well as REJECT?

To allow you to do what you want. e.g DROP can slow down portscans and
if your host does not reply to ping either sometimes it will not be
found by scanners.
> 
> If a hacker gets no response he's less likely to dig further.

REJECT is actually a response :)


-- 
--- Friczy ---
'Death is not a bug, it's a feature'


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/53d93bb2.7020...@freemail.hu



Re: iptables firewall

2014-07-30 Thread Sven Hartge
Mike McClain  wrote:
> On Wed, Jul 30, 2014 at 08:18:51AM +0100, Joe wrote:

>> And as someone else asked, why are you worried about this 'stealth'?
>> As long as the bad packets don't get in, what does it matter?

> Why is there a DROP instruction in iptables as well as REJECT?

Sometimes you want to DROP packets, if you know what you are doing. For
example in combination with a rate limit. REJECT 3 packets every second,
DROP the rest, to counter any flooding attack but provide normal
operations for normal connection attempts.

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/casdolq96...@mids.svenhartge.de



Re: iptables firewall

2014-07-30 Thread Sven Hartge
Sven Hartge  wrote:

> If I try to connect to a system on (for example) IP 192.168.40.60 and
> port 80 and there is no system with that IP, the router for the
> network will tell me via an "ICMP host unreachable" package.

Erm, please replace "package" with "packet" while reading, thanks.

Grüße,
Sven

-- 
Sigmentation fault. Core dumped.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/basdoi596...@mids.svenhartge.de



Re: iptables firewall

2014-07-30 Thread Sven Hartge
Mike McClain  wrote:
> On Wed, Jul 30, 2014 at 01:09:24AM +0200, Pascal Hambourg wrote:

> 
>> You can safely ignore that "stealth" FUD.

> block:REJECT::Stealth:DROP
> Why do you say it can be ignored?

If I try to connect to a system on (for example) IP 192.168.40.60 and
port 80 and there is no system with that IP, the router for the network
will tell me via an "ICMP host unreachable" package.

When my request just "vanishes" and I get no response back, I will
suspect that there is indeed a device at that IP which tries to be in
"stealth" mode.

The only way to be really stealthy and hide ones network existance is to
configure the router _before_ your device to reject the packages with
the correct ICMP. 

Doing on the device you want to stealth is futile.

And it will increase the traffic you receive, because normal TCP stacks
will assume a lost package and retry sending it multiple times.

If your device justs RSTs the connection or sends an "ICMP admin
prohibited" then the sending device will know what to do and stop trying
to resend.

Summary: DROP does not do what you think it does.

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/aasdo1h96...@mids.svenhartge.de



Re: iptables firewall

2014-07-30 Thread Mike McClain
On Wed, Jul 30, 2014 at 08:18:51AM +0100, Joe wrote:

> Something else you might do now is to place temporary logging rules
> before your 'DROP' rules, to confirm whether it is indeed iptables
> which is blocking those packets. No logs, it's somebody or something
> else. And if you have anything other than just a bare modem between you
> and the outside world, which is not really best practice, then the first
> place to look is the Net router.

The temporary logging rules is a good idea, I'll do that.

> And as someone else asked, why are you worried about this 'stealth'? As
> long as the bad packets don't get in, what does it matter?

Why is there a DROP instruction in iptables as well as REJECT?

If a hacker gets no response he's less likely to dig further.

Thanks for your thoughts.
Mike
--
Who knows what evil lurks in the hearts of men?


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140730153335.GE14982@playground



Re: iptables firewall

2014-07-30 Thread Mike McClain
On Wed, Jul 30, 2014 at 01:09:24AM +0200, Pascal Hambourg wrote:


> You can safely ignore that "stealth" FUD.

block:REJECT::Stealth:DROP
Why do you say it can be ignored?


> Use iptables-save instead.

I do.
Thanks for your thoughts,
Mike
--
Who knows what evil lurks in the hearts of men?


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140730151532.GD14982@playground



Re: iptables firewall

2014-07-30 Thread Mike McClain
On Tue, Jul 29, 2014 at 10:20:57PM +0100, Mark Carroll wrote:
>
> Use iptables --list-rules to check what rules are actually in force,
> applying in what order.
>
> -- Mark

I've been using iptables-save which gives nearly the same output but
fails to explain why 2 online scanners show those ports blocked.
nmap reports the first 1024 ports filtered which is the same as
stealthed.
Thanks for the thought,
Mike
--
Who knows what evil lurks in the hearts of men?


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140730150546.GC14982@playground



Re: iptables firewall

2014-07-30 Thread Mike McClain
On Tue, Jul 29, 2014 at 11:19:18PM +0200, Sven Hartge wrote:
>
> Maybe your ISP already filters those ports?
>
Now that's a thought I hadn't considered.
If the ISP is REJECTing those ports that would explain the responces
I'm seeing.
Thanks I'll look into it.
Mike
--
Who knows what evil lurks in the hearts of men?


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140730145828.GB14982@playground



Ignoring the Release 'Valid_Until' option in the preseed file

2014-07-30 Thread Alvaro Alonso Jiménez
Hi all,

I have just configured a preseed file to include a local repository.

# Debian mirrors
d-i apt-setup/local0/comment string local mirror
d-i apt-setup/local0/repository string http://
d-i apt-setup/local0/key string http://

The main issue I am facing here is that the repo is not added to the
sources.list, as the Releases file expired some days ago, so I am not able
to grab some packages I need.

I know there is this option which can be added to the apt.conf file:

Acquire::Check-Valid-Until "false"

which will ignore the fact that the Releases file expired some time ago.
However, I really need a way to include this same option in the preseed
file. For such purpose, I have been looking for possible solutions:

1. There is this german developer which seemed to be suffered from the same
(https://lists.debian.org/debian-user-german/2012/04/msg00382.html).
Basically, he is suggested to try adding:

d-i apt-setup/check_valid_until boolean false

but I have tried that option, and it was not successful.

2. I thought about including something in the late_command stage to update
the sources.list accordingly (i.e. executing

in-target echo  >>
/etc/apt/sources.list.d/custom.list
in-target apt-get -o Acquire::Check-Valid-Until="false" update
in-target apt-get upgrade

However, I do believe this is not the proper way of solving the issue,
since there is an apt-setup section prepared to deal with these issues.

Is there any other solution which I can use in the preseed?

Thank you very much!

Alvaro


Re: Threading using digest and kmail (was Re: Exim4 not routing local mail ... )

2014-07-30 Thread Brad Rogers
On Wed, 30 Jul 2014 08:26:04 -0400
The Wanderer  wrote:

Hello The,

>(References: and In-Reply-To:, surely?)

You are, of course, right.  My brain was waaay ahead of my fingers at
the time.  My apologies for any confusion caused.

-- 
 Regards  _
 / )   "The blindingly obvious is
/ _)radnever immediately apparent"
I don't believe you have to be an idiot to get somewhere these days
Bombsite Boy - The Adverts


signature.asc
Description: PGP signature


Re: Threading using digest and kmail (was Re: Exim4 not routing local mail ... )

2014-07-30 Thread The Wanderer
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 07/30/2014 04:42 AM, Brad Rogers wrote:

> On Wed, 30 Jul 2014 10:14:20 +0300 David Baron 
> wrote:
> 
> Hello David,
> 
>> Or is there some header or marker I should be hitting as well?
> 
> Reference and/or Reply-To headers.

(References: and In-Reply-To:, surely?)

There was a somewhat more detailed, albeit considerably less concise,
thread discussing this on this list just over a month ago. See here:

https://lists.debian.org/debian-user/2014/06/msg01552.html

- --
   The Wanderer

Secrecy is the beginning of tyranny.

A government exists to serve its citizens, not to control them.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=SUDK
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/53d8e45c.50...@fastmail.fm



Re: 'strictatime' vs. 'relatime' for /tmp

2014-07-30 Thread Tom H
On Wed, Jul 30, 2014 at 4:12 AM, Andrei POPESCU
 wrote:
>
> When mounting a tmpfs on /tmp systemd sets 'strictatime'. I was
> wondering whether this is really needed. Does anybody know of software
> that would break with 'relatime' (the default) or even 'noatime'?
>
> I'd be happy to RTFM if anybody can point me to the relevant FM.

Perhaps because it cleans "/tmp" every 10 days (possibly not on Debian
but I only have access to Fedora at the moment) and therefore needs
files' atime fully updated.




/lib/systemd/system/systemd-tmpfiles-clean.timer

[Unit]
Description=Daily Cleanup of Temporary Directories
Documentation=man:tmpfiles.d(5) man:systemd-tmpfiles(8)

[Timer]
OnBootSec=15min
OnUnitActiveSec=1d




/lib/systemd/system/systemd-tmpfiles-clean.service

[Unit]
Description=Cleanup of Temporary Directories
Documentation=man:tmpfiles.d(5) man:systemd-tmpfiles(8)
DefaultDependencies=no
Conflicts=shutdown.target
After=systemd-readahead-collect.service
systemd-readahead-replay.service local-fs.target time-sync.target
Before=shutdown.target

[Service]
Type=oneshot
ExecStart=/usr/bin/systemd-tmpfiles --clean
IOSchedulingClass=idle




/lib/tmpfiles.d/tmp.conf

# Clear tmp directories separately, to make them easier to override
d /tmp 1777 root root 10d
d /var/tmp 1777 root root 30d

# Exclude namespace mountpoints created with PrivateTmp=yes
x /tmp/systemd-private-%b-*
X /tmp/systemd-private-%b-*/tmp
x /var/tmp/systemd-private-%b-*
X /var/tmp/systemd-private-%b-*/tmp


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAOdo=sxjzocwdmcpxzwndzjb2beeq2zz20g6ytcyj1qzovu...@mail.gmail.com



Re: 'strictatime' vs. 'relatime' for /tmp

2014-07-30 Thread Henrique de Moraes Holschuh
On Wed, 30 Jul 2014, B wrote:
> > When mounting a tmpfs on /tmp systemd sets 'strictatime'. I was 
> > wondering whether this is really needed.
> 
> From what I found on the web, it seems to be related to busybox
> that apparently needs it.

They added it to BusyBox *because* systemd passes strictatime to 'mount',
and BusyBox can implement 'mount', and it would cause issues on systems that
use BusyBox-provided mount with systemd.

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140730090439.ga25...@khazad-dum.debian.net



Re: 'strictatime' vs. 'relatime' for /tmp

2014-07-30 Thread Bzzzz
On Wed, 30 Jul 2014 11:12:09 +0300
Elvire POPESCU  wrote:

> When mounting a tmpfs on /tmp systemd sets 'strictatime'. I was 
> wondering whether this is really needed.

From what I found on the web, it seems to be related to busybox
that apparently needs it.
I've found a post about adding the BB strictatime patch:
http://lists.openembedded.org/pipermail/openembedded-core/2013-March/076243.html

(as you can see here: http://zurlinux.com/?p=1940, there are
other people that think systemd is not really a good idea; watch
the header;).

> Does anybody know of
> software that would break with 'relatime' (the default) or even
> 'noatime'?

Not at all, except apparently for BB.

What is quite odd is systemd conf files are distributed anywhere
but into /etc…

-- 
ptinou: the only thing that surprised me with vi$ta
was when it told me it was going to deactivate my
keyboard to improve the stability of my system


signature.asc
Description: PGP signature


Re: In dire need of assistant desperate lively hood involved.

2014-07-30 Thread berenger . morel



Le 29.07.2014 22:32, Joe a écrit :

On Tue, 29 Jul 2014 16:16:44 +0100
Lisi Reisz  wrote:


On Tuesday 29 July 2014 15:11:38 Zenaan Harkness wrote:
> i also downloaded a creative cloud setup-exe. from photo shop and
>
> > it wont install

You can't install Windows programs directly on Linux - nor Linux 
ones
on Windows!  If you are for real, you really need to go back right 
to

the beginning.



Someone who has installed Debian is not that ignorant, so there are
two alternatives, both of which spell 't-r-o-l-l', though possibly in
different fonts. And I don't mean that it's intrinsically difficult,
but it's outside the experience of the typical gamer, and I know that
because my son is one. Anything is difficult if you don't understand
the concepts.

--
Joe


Well, it  might simply be that someone spoke to that person about a 
wonderful alternative to Windows which is named Debian... and 
considering how Windows 8 is considered, even by Windows' fans (heh, I 
just understood where comes that word from: fans, people which just 
produce wind :-D ). But, yes, it's quite strange, usually it's the 
*buntu's name which is summoned to convince windows users.



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/12080e8d11592acc3354ff7788a91...@neutralite.org



Re: /var partition seems locked or read only

2014-07-30 Thread berenger . morel



Le 29.07.2014 18:22, Paul E Condon a écrit :

On Tue, Jul 29, 2014 at 11:08:41AM +0200,
berenger.mo...@neutralite.org wrote:



Le 28.07.2014 22:36, Andrei POPESCU a écrit :
>On Lu, 28 iul 14, 11:24:31, berenger.mo...@neutralite.org wrote:
>>Le 27.07.2014 01:42, PaulNM a écrit :
>>
>>>Inodes are files/folders, files/folders are inodes. (1-to-1)
>>Anything
>>>that has a bunch of files/folders will use a bunch of inodes. 
Same

>>>number in fact.
>>
>>Hum... is it accurate?
>>Files can use more than one inode, with ln
>
>Are you talking about hard links? As far as I understand (but I'm
>sure
>someone will correct me if I'm wrong) the file itself is always
>just one
>inode, but there are one or more directory entries (links)
>pointing to
>it. If you remove all of them the file is deleted.
>
>>Folders can not, AFAIK, since
>>symlinks are simply pointers to inodes (which are themselves
>>pointers --with
>>reference counter I guess, std::shared_ptr in c++11?-- to data).
>>I'm simply asking, I might be completely wrong or inaccurate...
>
>Symbolic links, a.k.a. soft links, a.k.a. "symlinks" are files
>themselves (i.e. each using one inode) that contain a pointer to
>one of
>the directory entries of another file or directory.

That was what I thought, yesterday before trying to ask those
questions. While asking them, I did some quick research, because I
had doubt.
What I learned is that the kind of symlinks you speak about, is slow
(for various reasons. I've discovered that on the French version of
this article:
http://en.wikipedia.org/wiki/Symlink#Storage_of_symbolic_links), and
that there are now another kind of symlinks, much faster, which are
not files since they do not use clusters: all informations are
contained in the inode. So, less disk space, and it seems that it
avoid keeping open more than one inode, which was a problem of the
file approach.


I think, but not sure, that the situation is more complicated than
either/or :
If the path from the location of the symlink in the file system
is short enough to be contained in the 256char limit of file names,
there is no extra node (and the access to the target file is fast
because one less disk access). But if the path requires cross file
system path, or is to long to fit in a filename slot in a directory,
then another inode is allocated. Or maybe I have made a total botch
of describing what is actually happening. This amounts to a situation
dependent either/or instead of a simple design decision either/or
YMMV or not ;-)


You might be true, I have strictly no idea about how things work. I 
wish I would have good occasions to work on low level programs, that 
kind of stuff is so interesting to me, unlike just throwing random 
queries to a damned sgbdr...



It's hard for me to believe that symlinks could be so numerous as to
exhaust the supply, but maybe if there is a deamon running a script
that assigns synlinks and the script has a bug.


Well, this part of the discussion is totally out of topic, in facts. It 
is just some discussion about inodes, files, folders and sym/hard links. 
Only me trying to learn from other's knowledge and wisdom.



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/41e0f0f1016a8d6a76e25cc9833b2...@neutralite.org



Re: Threading using digest and kmail (was Re: Exim4 not routing local mail ... )

2014-07-30 Thread Brad Rogers
On Wed, 30 Jul 2014 10:14:20 +0300
David Baron  wrote:

Hello David,

>Or is there some header or marker I should be hitting as well?

Reference and/or Reply-To headers.  The digest, depending on /exactly/
how it as constructed and /exactly/ how you reply, won't necessarily
carry the right headers to put your response into the original thread.
In fact, more often than not, they don't.

Unfortunately, simply changing the Subject to the correct one is rarely
enough.   :-(

-- 
 Regards  _
 / )   "The blindingly obvious is
/ _)radnever immediately apparent"
Now I found you out, I don't think you're so smart
Who Are You - Black Sabbath


signature.asc
Description: PGP signature


Re: tune2fs: last write time is weeks or even months ago, moreover before last reboot

2014-07-30 Thread David Guyot
Le vendredi 25 juillet 2014 à 15:46:29 +0200, Jörg-Volker Peetz a écrit:
> This version is a little bit outdated (Feb 2013). At least concerning ext4.
> I would try if a newer version shows something different.
> Have you tried smartctl (smartmontools) and seen anything striking?
Yes, I tried smartctl ; in fact, that's one of the first things I tried,
as I told in my first message. tl; dr : SMART seems OK, except a brief
variation of read error rate on one disk, but these variations don't
seem unexpected as this value is vendor specific. In addition, my provider
didn't show startled by this variation, so I think this is unrelated.

I'll try a newer version of e2fsprogs to see if this changes readings,
and monitor I/O more precisely to see if I can get more info. Do you see
anything else to try ?

Thanks in advance.

Regards.
-- 
David Guyot
Administrateur système, réseau et télécommunications / Sysadmin
Europe Camions Interactive / Stockway
Moulin Collot
F-88500 Ambacourt
Tel: +33 (0)3 29 30 47 85
Fax : +33 (0)3 29 31 31 31


signature.asc
Description: Digital signature


'strictatime' vs. 'relatime' for /tmp

2014-07-30 Thread Andrei POPESCU
On Ma, 29 iul 14, 18:20:42, Rick Thomas wrote:
> 
> On Jul 29, 2014, at 2:05 AM, Andrei POPESCU wrote:
> 
> > Sure, it's a tmpfs, and the penalty for updating atime is probably much 
> > lower than any other conventional storage (though /tmp contents might 
> > end up being swapped), but is there any software that actually relies on 
> > atime for files in /tmp?
> 
> I didn't know that the default had been changed to "relatime".  I can 
> see the logic, of course.  There certainly is no harm in specifying 
> "strictatime" (and it's cheap) for tmpfs.  You're right that tmpfs may 
> get swapped, but I think the metadata would be the last thing to be 
> forced out to swap, since it's very frequently updated.
> 
> PS: This is an interesting discussion, but it has wandered a bit OT.  So I 
> added [OT] to the subject.

Off-topic? I don't think so, it's very much relevant for Debian, but a 
change of subject would be useful to attract more attention to it ;)

So the question again:

When mounting a tmpfs on /tmp systemd sets 'strictatime'. I was 
wondering whether this is really needed. Does anybody know of software 
that would break with 'relatime' (the default) or even 'noatime'?

I'd be happy to RTFM if anybody can point me to the relevant FM.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature


Re: [SOLVED] /root is full

2014-07-30 Thread Joe
On Tue, 29 Jul 2014 23:10:48 -0400
The Wanderer  wrote:

 once every few years, and nothing
> seems to do it automatically.)
> 
> Admittedly I have ridiculous amounts of local storage space, but even
> when I install Debian in a VM on a 40GB virtual hard disk, I wouldn't
> consider allocating less than 4GB for the root partition without
> *very* strong reason.

Which is *now* correct practice. It wasn't just a few years ago, when
only a workstation would be likely to have a 'one partition'
installation, and a few hundred meg was the advised size for /.
> 
> I don't think my current 2GB of system-consumed space on / is an
> unreasonable total, all things considered... I boggled briefly at
> seeing a few hundred megabytes of usage on / considered "huge".
> 

Not huge, but normal, and in a new stable installation today, only about
150MB would be used. Google for 'recommended partition sizes' and see
how the advice has changed over the years. Pretty much everyone until
three or four years ago, and some later, thought a separate /usr was
essential. Around the time of Red Hat 6.2, about 15 years ago, 200MB
was considered generous for / (HP server advice), 100MB more normal.

Many of us today with a stable installation upgraded from sarge, or
even earlier, stayed with original partitioning except when it was
obviously too small, even when replacing drives. It is only within the
lifetime of squeeze and wheezy that /lib/modules grew to its current
size from a few tens of MB. Some people put a lot of stuff in /root,
some hardly use it. I've always been conscious that it's in /, and
followed the latter course, putting almost nothing there but cron
scripts.

-- 
Joe


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140730090728.200dc...@jretrading.com



Re: Pin package to "any version, don't remove"?

2014-07-30 Thread Andrei POPESCU
On Ma, 29 iul 14, 22:52:15, The Wanderer wrote:
> 
> 
> Package: removal-prevention
> Pin: version 1.0
> Pin-Priority: 1001
> 
> 
> produces no change in behavior; dist-upgrade still wants to remove
> removal-prevention, and the packages it depends on.
> 
> Similar things happen with "Pin: version *" on fglrx-driver or on other
> such packages; that's what I tried before even starting this thread.
> 
> If it weren't for the fact that the iceweasel and icedove pins (in the
> same file) are being respected, I'd be tempted to wonder whether my
> preferences file was even being read...

'apt-cache policy removal-prevention' will tell.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature


Re: hp server hardware monitoring

2014-07-30 Thread Florian Ernst
Hello,

On Wed, Jul 30, 2014 at 05:28:10AM +, Bonno Bloksma wrote:
> [...]
> What may be relevant too is that on the g6 server Debian uses the
> CCISS drivers for the raid hardware, the volume shows up as
> /dev/cciss/c0d0
> On the g7 and g8 hardware the raid volume simply shows up as /dev/sda

cciss has been superseded by hpsa, "The hpsa driver is intended to supplant the
cciss driver for newer Smart Array controllers.", cf.
.

> How can I get this to work under a g7 or g8 server. Do I need a newer
> version of the package of do I need a different package?

I generally avoid installing third-party tools on the bulk of my
servers, and for simple monitoring the packages cciss-vol-status and
nagios-plugins-standard from Debian will suffice:

root@vz02:~# lsmod | grep -e cciss -e hpsa
hpsa   50787  2
root@vz02:~# cciss_vol_status /dev/sda
/dev/sda: (Smart Array P420i) RAID 5 Volume 0 status: OK.
root@vz02:~# /usr/lib/nagios/plugins/check_raid
WARNING: cciss: No Smart Array Adapters were found on this machine
root@vz02:~# modprobe sg
root@vz02:~# /usr/lib/nagios/plugins/check_raid
OK: cciss:[/dev/sda: (Smart Array P420i) RAID 5 Volume 0 status: OK, /dev/sda: 
(Smart Array P420i) RAID 5 Volume 0 status: OK]; 
smartctl:[/dev/sg0#0,/dev/sg0#1,/dev/sg0#2,/dev/sg0#3,/dev/sg0#4,/dev/sg0#5,/dev/sg0#6,/dev/sg1#0,/dev/sg1#1,/dev/sg1#2,/dev/sg1#3,/dev/sg1#4,/dev/sg1#5,/dev/sg1#6:
 OK]

HTH,
Flo


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140730075116.ge26...@fernst.no-ip.org



Re: iptables firewall

2014-07-30 Thread Joe
On Tue, 29 Jul 2014 14:04:23 -0700
Mike McClain  wrote:

> I've run into a difficulty with iptables in that both GRC.com and
> PCFlank.com's firewall scans show ports 137-139 and 445 as blocked but
> not stealthed in spite of the fact that I have these statements in my
> firewall script:
> iptables -A INPUT -p udp --dport 137:138 -j DROP
> iptables -A INPUT -p tcp --dport 137:138 -j DROP
> iptables -A INPUT -p tcp --dport 139 -j DROP
> iptables -A INPUT -p tcp --dport 445 -j DROP
> iptables -A OUTPUT -p udp --dport 137:138 -j DROP
> iptables -A OUTPUT -p tcp --dport 137:138 -j DROP
> iptables -A OUTPUT -p tcp --dport 139 -j DROP
> iptables -A OUTPUT -p tcp --dport 445 -j DROP
> 
> Both scans report all else stealthed.
> Suggestions?

Apart from the suggestions others have offered, why are you listing
these ports at all? Your iptables rules should block everything
everywhere by default, and only permit in what you want. And if you
are hoping to be invisible from the Net, as you imply, then you won't
be letting in anything at all except that which is related to previous
outward messages.

Something else you might do now is to place temporary logging rules
before your 'DROP' rules, to confirm whether it is indeed iptables
which is blocking those packets. No logs, it's somebody or something
else. And if you have anything other than just a bare modem between you
and the outside world, which is not really best practice, then the first
place to look is the Net router.

And as someone else asked, why are you worried about this 'stealth'? As
long as the bad packets don't get in, what does it matter?

-- 
Joe


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140730081851.70446...@jretrading.com



Re: Threading using digest and kmail (was Re: Exim4 not routing local mail ... )

2014-07-30 Thread David Baron
On Wednesday 30 July 2014 02:52:38 debian-user-digest-requ...@lists.debian.org 
wrote:
> > When you reply threading is broken. Surely you can see that. Could be
> > kmail of course.
> 
> Replying from the digest breaks threads.  I eschew KDE 4, so I don't know 
> about KMail in KDE4, but KDE3 KMail does not break threads.

I do not understand the difference. If I hit reply, so I get the title of the 
digest which I replace with the desired re:  Should not this be OK.

Or is there some header or marker I should be hitting as well?


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/2739965.9pxbZbNjM1@dovidhalevi



New 64bit Installation--Next Round: /var

2014-07-30 Thread David Baron
1. Now that I have / on a large enough place to not worry over it (and /opt 
and /usr/local are bound to folders on the over-sized home partition), now 
time to deal with /var. Given a mere 2.7g, enough for a couple of KDE users 
and a number of apt downloads. Can easily go over 90% for large upgrades.

So I tried moving it as well to the home and binding. Rebooted, system came up 
just fine(?) but I could not log into KDE. Got the error box about not able to 
access some tmp ... may space is full. This is usually caused by permission 
problems. Did sudo rsync -ax foul me up somehow? Or is there a problem 
accessing the tmp areas in this manner? Anyway, reverted, luckily without any 
problems. Ideas?

Other alternative here is to move /usr to a nice partition waiting for it and 
then use the now free partition for a 3x larger area for /var. If moving the 
filesystem was problematic, might still be so.

2. Those mount --bind and some mount loops to squashfs data are now on my 
/etc/rc.local. The might be better served on /etc/fstab? Syntax?

3. Noticed more postings about grief with that little / partition from the 
install--the partition sizes are just those. Please, whoever is setting up the 
Debian install, take note.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/1507672.6BOLkDaXXB@dovidhalevi