Re: HS: iptables interface de sortie par la même que l'entrée.

[Pascal Hambourg]

Le 16/04/2019 à 03:48, Jérémy Prego a écrit :


Le 15/04/2019 à 20:18, Pascal Hambourg a écrit :

Si je comprends bien tu veux marquer seulement les paquets des
connexions sortantes. Une solution consiste à utiliser le marquage de
connexion avec la cible CONNMARK et la correspondance connmark.


pourrais-tu m'éclaircir sur cette partie en me fournissant un exemple de
règle ? je trouve rien qui correspond vraiment après avoir testé
plusieurs règles trouvé et adapté ici et là ...

par exemple j'ai trouvé et adapté une règles comme ça:
iptables -t mangle -A ROUTING-POLICY -d jeremy.domain.net -m conntrack
--ctstate NEW -j CONNMARK --set-mark 0x3
iptables -t mangle -A ROUTING-POLICY -j CONNMARK --restore-mark

vu que ça ne correspond pas tout à fait à ce que tu indiques plus haut
et que le résultat n'est pas vraiment celui attendu je suppose que je
suis pas bon. Un peu d'aide afin de comprendre comment former ma règle
ne serait pas de refus.


La seconde règle ne doit marquer que les paquets à destination de 
l'adresse distante. Il ne faut pas rerouter les paquets provenant de 
cette adresse.

Re: just mail forwarding to smart mailer

[Celejar]

On Mon, 15 Apr 2019 18:42:57 +0200
Wim  wrote:

> Hi Bonno,
> 
> On Sunday, 14 April at 08:00, Bonno Bloksma wrote:
> 
> > 
> > All along I just installed the standard system on a Debian machine. Created 
> > an alias for the root user with the email address of our servicedesk to 
> > have it send any mails to my servicedesk account and that was it.
> > The last Debian installations no longer have a default mailserver installed 
> > and frankly, I do not need a full blown mailserver but I do want mails 
> > generated on the local machine forwarded to our on-site smart relay server.
> > I could install all of Exim again and do the standard dpkg-reconfigure 
> > exim4-config I did before where I tell it where the smarthost is, but 
> > is there a "better" way that does not need the full Exim package?
> > I am looking for an "easy light weight just empty the local queue and send 
> > it to the smart host" setup.
> > I don't mind experimenting and it doesn not need to be Exim but the info I 
> > get Googling is just too diverse and does not get me much closer to what I 
> > want. :-(
> > Who can help me and point me to some relevant info?
> > 
> 
> The program 'msmtp' might be what you're looking for. It's an easy to
> use smtp client. The Arch Linux wiki has some good info on 'mstmp'.

I've had trouble with a bunch of the simple SMTP agents that I tried,
so I finally gave up and configured Postfix. With msmtp, we're
currently trying to figure out whether it sends malformed email only in
artificial situations, or in real world cases as well ;/

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=917260

Celejar

Re: Cannot re-install synaptic on Buster.

[Keith Bainbridge]

On 15/4/19 8:59 pm, Brad Rogers wrote:

On Mon, 15 Apr 2019 20:12:34 +1000
Keith Bainbridge  wrote:

Hello Keith,


So if I don't install Wayland, I should not loose synaptic - for those
odd times I need it to help me find something?


That /would/ have been the case, yes.  Not so now; Synaptic is no longer
available in testing.  You can, of course, d/l synaptic (the version
in sid is currently the same as the one that's been deleted from
testing) and install using dpkg.

If you're happy to use snapshot.debian, you can re-install Synaptic that
way.  Be sure to disable the relevant repo entry as soon as you've
performed the installation.


And the manual installation I did on my vbox test machine should be OK?


That I have no idea about.  Sorry.




Thanks Brad

At least 1 friend and I will be watching with interest



Keith Bainbridge

ke1th3...@gmail.com
+61 (0)447 667 468

Re: Problem loading Debian 9.8.0

[Keith Bainbridge]

Patrick


I've never found that setting.

Interesting.

Keith Bainbridge

ke1th3...@gmail.com
+61 (0)447 667 468

On 15/4/19 9:51 pm, Patrick Gallagher wrote:

Hi Keith, Liam,

I got it working. It was a simple setting in Virtual box I had to enable 
to load other os's.


Thanks for your help with it

Patrick

Re: HS: iptables interface de sortie par la même que l'entrée.

[Jérémy Prego]

Le 15/04/2019 à 20:18, Pascal Hambourg a écrit :
> Si je comprends bien tu veux marquer seulement les paquets des
> connexions sortantes. Une solution consiste à utiliser le marquage de
> connexion avec la cible >CONNMARK et la correspondance connmark.

pourrais-tu m'éclaircir sur cette partie en me fournissant un exemple de
règle ? je trouve rien qui correspond vraiment après avoir testé
plusieurs règles trouvé et adapté ici et là ...

par exemple j'ai trouvé et adapté une règles comme ça:
iptables -t mangle -A ROUTING-POLICY -d jeremy.domain.net -m conntrack
--ctstate NEW -j CONNMARK --set-mark 0x3
iptables -t mangle -A ROUTING-POLICY -j CONNMARK --restore-mark

vu que ça ne correspond pas tout à fait à ce que tu indiques plus haut
et que le résultat n'est pas vraiment celui attendu je suppose que je
suis pas bon. Un peu d'aide afin de comprendre comment former ma règle
ne serait pas de refus.

Merci beaucoup.

Jerem

Re: Cannot re-install synaptic on Buster.

[Thomas D Dial]

On Mon, 2019-04-15 at 13:10 -0400, Kieran Smyth wrote:
> Thanks everyone for all the responses. The package gnome-packagekit
> seems like a good alternative for now, but ultimately I think
> reverting to stable rather than testing may be the way forward for me.
> 
> Although i'm going to explore other desktop environments, too. Not
> sure i'll be able to move away from MATE, though.
> 
> Lesson here is to pay attention when installing updates. Using
> synaptic, i missed that synaptic itself was going to be uninstalled
> after updating haha.

I know I'm pretty late to this party, but it took a little time to run
down my quite different experience with Buster, Wayland, and Synaptic,
which on this system seems to me to work just fine.
The original install was on 2018/06/27, from the Stretch 9.3.0 DVD-1
image. It was pretty much a vanilla installation, with Gnome (now mostly
3.30.1)  and, it appears, Wayland (now mostly 1.16.0-1, but xwayland is
1.20.3-1).
All repository references were changed to Buster and and the system
upgraded on 2018/07/08.
Sid repositories were added on 2018/10/02 to upgrade Firefox ESR to the
later version. Buster was kept as the default target by specifying
'APT::Default-Release "buster";' in /etc/apt/apt.conf.d/15preferences. I
also installed the Sid version of Chromium several months later.
It appears Synaptic was installed from the beginning and at some point
upgraded to the Sid version (presently 0.84.6, upgraded at 20:03 UDT
today from 0.84.5). 
With this configuration, synaptic works either when accessed directly
from the DE (by uprivileged user, but won't install) and from an ssh
session, started using "ssh -X -l root." I don't use things like gksu,
so can't comment on that.
Now, hearing about the correction underway, I worry a bit that what I
see as a highly workable solution will be undone and replaced by an
error message. I always have leaned strongly toward accepting
installation defaults and so learned to get along reasonably with Gnome,
several network managers that mostly work (and when they do, make setup
fairly painless), and even systemd, although I do not love it and think
sysv-init was quite ok.
Regards,Tom Dial
>  
> On Mon, Apr 15, 2019 at 2:04 AM Reco  wrote:
> > Hi.
> > 
> > 
> > 
> > On Mon, Apr 15, 2019 at 01:24:32AM -0400, Kieran Smyth wrote:
> > 
> > > For reasons unknown to me, synaptic uninstalled itself about three
> > weeks
> > 
> > > ago. I am using Buster on the desktop, with MATE as my desktop
> > environment.
> > 
> > 
> > 
> > Synaptic was removed from testing two weeks ago, see #818366.
> > 
> > 
> > 
> > > I like using a GUI frontend to apt, and if anyone can help me get
> > it back
> > 
> > > on my system i'd really appreciate it.
> > 
> > 
> > 
> > You're not supposed to use synaptic in Wayland session anymore.
> > Consider
> > 
> > using gnome-packagekit instead.
> > 
> > 
> > 
> > Reco
> > 
> > 
> > 

Re: How could I install ecryptfs-utils on Buster

[Celejar]

On Thu, 11 Apr 2019 20:56:04 -0700
David Christensen  wrote:

...

> If I remember encfs correctly, encfs is designed to provide exclusive 
> access to the user who mounts an encrypted folder -- no other user, 
> including root, can see the plaintext.

My understanding is that while this is technically correct, it must be
understood that any protection against a malicious root user is
nevertheless mostly illusory, since root can simply do 'su
username' (not to mention run a password sniffer, or directly examine
kernel data structures, bypassing the filesystem):

https://unix.stackexchange.com/questions/94170/use-encfs-to-encrypt-files-so-that-a-particular-user-or-process-can-access-them
https://unix.stackexchange.com/questions/47018/encfs-with-expect-access-denied
https://www.linuxquestions.org/questions/linux-security-4/can-i-protect-against-root-592947/
https://askubuntu.com/questions/316197/password-protect-files-folders-using-cli

Celejar

Re: Stretch with MATE DE - odd new file association problem

[Alexander V. Makartsev]

On 16.04.2019 2:05, Richard Owlett wrote:
> On 04/15/2019 01:14 PM, Alexander V. Makartsev wrote:
>> On 15.04.2019 18:09, Richard Owlett wrote:
>>> Somehow I had messed up preferred application to open a file.
>>> I fixed by selecting a file of appropriate type, selecting
>>> Properties, and setting preferred application.
>>>
>>> That solved almost all my problems.
>>>
>>> The only exception is when using Synaptic.
>>> When I click on "Visit Homepage" it insists on using Firefox :<
>>> It used to open properly with my preferred browser SeaMonkey.
>>> All other HTML open correctly with SeaMonkey.
>>>
>>> Is another place I need to set preferences?
>>> TIA 
>> You can check what is set as default in "update-alternatives" configs
>> for browsers available in your system:
>>  $ sudo update-alternatives --config x-www-browser
>> and
>>  $ sudo update-alternatives --config gnome-www-browser
>
>
> I avoid "sudo" [with prejudice]
>
> I did
>> richard@fromdell:~$ su
>> Password: root@fromdell:/home/richard# update-alternatives --config
>> x-www-browser
>> There is only one alternative in link group x-www-browser (providing
>> /usr/bin/x-www-browser): /usr/bin/firefox-esr
>> Nothing to configure.
>> root@fromdell:/home/richard# root@fromdell:/home/richard#
>> root@fromdell:/home/richard# update-alternatives --config
>> gnome-www-browser
>> There is only one alternative in link group gnome-www-browser
>> (providing /usr/bin/gnome-www-browser): /usr/bin/firefox-esr
>> Nothing to configure.
>> root@fromdell:/home/richard#
>
> That tells me "something"   P.S  but what?
> Educate me -- What should I be reading?
Here is the output from one of my systems:
    $ sudo update-alternatives --config x-www-browser
    There are 3 choices for the alternative x-www-browser (providing
/usr/bin/x-www-browser).
   
      Selection    Path  Priority   Status
    
      0    /usr/bin/opera 120   auto mode
    * 1    /opt/firefox/firefox   100   manual mode
      2    /usr/bin/firefox-esr   70    manual mode
      3    /usr/bin/opera 120   manual mode
   
    Press  to keep the current choice[*], or type selection number:

I have 3 browsers installed and I've chosen the default one (#1) manually.
My web browser is set to "x-www-browser" in "Preferred Applications"
applet (Xfce), so I can switch between default browsers on demand by
setting it up in one place.

Since you have to use Synaptic as root, it will launch "x-www-browser"
(or "gnome-www-browser" depending on your DE) when you click on
"Homepage" button.
As you already discovered, your "x-www-browser" config has only one
option, so Synaptic executes "firefox-esr".
It looks like "SeaMonkey" browser doesn't provide "update-alternatives"
config for itself on installation, which is probably a bug.

You can add SeaMonkey config manually if you want, but you will have to
track the changes after that.
    $ sudo update-alternatives --install /usr/bin/x-www-browser
x-www-browser /your/path/to/seamonkey 100


-- 
With kindest regards, Alexander.

⢀⣴⠾⠻⢶⣦⠀ 
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org
⠈⠳⣄ 

Re: Stretch with MATE DE - odd new file association problem

[Richard Owlett]

On 04/15/2019 01:14 PM, Alexander V. Makartsev wrote:

On 15.04.2019 18:09, Richard Owlett wrote:

Somehow I had messed up preferred application to open a file.
I fixed by selecting a file of appropriate type, selecting Properties, 
and setting preferred application.


That solved almost all my problems.

The only exception is when using Synaptic.
When I click on "Visit Homepage" it insists on using Firefox :<
It used to open properly with my preferred browser SeaMonkey.
All other HTML open correctly with SeaMonkey.

Is another place I need to set preferences?
TIA 
You can check what is set as default in "update-alternatives" configs 
for browsers available in your system:

     $ sudo update-alternatives --config x-www-browser
and
     $ sudo update-alternatives --config gnome-www-browser



I avoid "sudo" [with prejudice]

I did

richard@fromdell:~$ su
Password: 
root@fromdell:/home/richard# update-alternatives --config x-www-browser

There is only one alternative in link group x-www-browser (providing 
/usr/bin/x-www-browser): /usr/bin/firefox-esr
Nothing to configure.
root@fromdell:/home/richard# 
root@fromdell:/home/richard# 
root@fromdell:/home/richard# update-alternatives --config gnome-www-browser

There is only one alternative in link group gnome-www-browser (providing 
/usr/bin/gnome-www-browser): /usr/bin/firefox-esr
Nothing to configure.
root@fromdell:/home/richard# 



That tells me "something"   P.S  but what?
Educate me -- What should I be reading?

TIA

P.S. " *ONLY* dumb question is *1* not asked ;/

Re: INFO: task blocked for more than 120 seconds

[Étienne Mollier]

Bonjour,

steve, au 2019-04-15 :
> Vraiment désolé, à l'envoi ça semblait correct.

Ce n'est pas très grave; on a qu'a dire que ça a justifié le
démarrage de mon éditeur de texte préféré.  :)

> Le 12-04-2019, à 20:01:17 +0200, Étienne Mollier a écrit :
> > steve, au 2019-04-12 :
> > > 1 box kernel: [ 3988.692314]   Tainted: P   OE ...
> >  ^~~
> > Le noyau est teinté, quelle en est la cause ?  (ce devrait être
> > indiqué quelque part dans la sortie de `dmesg`.)
>
>
> driver nvidia proprio.

Bon, au moins on en a le cœur net, la teinture n'avait rien de
vraiment pertinent, sauf malchance.

> > Si un sous système corrompt le noyau, alors il n'est peut-être
> > pas nécessaire de chercher plus loin, et juste de le
> > désactiver.
>
> Je pourrais en effet essayer le driver libre « nouveau ». Mais la
> dernière fois que j'ai essayé, ce n'était vraiment pas très concluant.

Ça vaudrait peut-être quand même le coup de voir si le noyau est
toujours teinté sans ce pilote, et si le problème se pose à
nouveau.

Sinon, plus prosaïquement, dans quel état se trouve le Raid
actuellement ?  Est-il toujours partiel ou bien le remplacement
du disque en panne a eu lieu ?  (cat /proc/mdstat)


> Le 15-04-2019, à 17:11:22 +0200, Daniel Caillibaud a écrit :
> > Il faudrait demander à mdadm d'être plus bavard quand il a un pb, mais je
> > sais pas trop comment.
>
> Rien dans la page man.

L'essentiel du verbe provient surtout de la sortie de `dmesg`.
Peut-être que des messages intéressants apparaissent au moment
de l'assemblage ?

Amicalement,
-- 
Étienne Mollier 

Re: but it's not going to be installed

[mick crane]

On 2019-04-15 21:00, Cindy Sue Causey wrote:

On 4/15/19, mick crane  wrote:

I typed
"apt install mypaint"
mypaint depends on mypaint-data but it's not going to be installed
seen that mypaint-data was there so
"apt install mypaint-data"
...installs OK
"apt install mypaint"
no complaints
what's that all about then ?



Apparently for one thing, it's about some kind of package
conflicts'ISH with GIMP GNU Image Manipulation Program. Via "apt-get
install --dry-run" mypaint-data, I received the following:

The following packages will be REMOVED:
  gimp gimp-ufraw libmypaint-1.3-0 libmypaint-common
The following NEW packages will be installed:
  mypaint-data
0 upgraded, 1 newly installed, 4 to remove and [yada-yada large
packages] not upgraded.

If you didn't have GIMP installed, that wouldn't have hit your radar.

Speaking as a GIMP fan nearly since their first days, OUCH!! :)

Cindy :)


Ah Ok, I do have gimp installed but wanted to try mypaint, didn't notice 
any warning about gimp. I guess it'll put itself back together.

Suppose apt thought well they asked, I'll install it.
might use --dry-run in future.
mick
--
Key ID4BFEBB31

Re: but it's not going to be installed

[Cindy Sue Causey]

On 4/15/19, mick crane  wrote:
> I typed
> "apt install mypaint"
> mypaint depends on mypaint-data but it's not going to be installed
> seen that mypaint-data was there so
> "apt install mypaint-data"
> ...installs OK
> "apt install mypaint"
> no complaints
> what's that all about then ?


Apparently for one thing, it's about some kind of package
conflicts'ISH with GIMP GNU Image Manipulation Program. Via "apt-get
install --dry-run" mypaint-data, I received the following:

The following packages will be REMOVED:
  gimp gimp-ufraw libmypaint-1.3-0 libmypaint-common
The following NEW packages will be installed:
  mypaint-data
0 upgraded, 1 newly installed, 4 to remove and [yada-yada large
packages] not upgraded.

If you didn't have GIMP installed, that wouldn't have hit your radar.

Speaking as a GIMP fan nearly since their first days, OUCH!! :)

Cindy :)
-- 
Cindy-Sue Causey
Talking Rock, Pickens County, Georgia, USA

* runs with birdseed *

Re: Cannot re-install synaptic on Buster.

[Brad Rogers]

On Mon, 15 Apr 2019 09:13:37 -0400
Greg Wooledge  wrote:

Hello Greg,

>As end users, we don't know how the synaptic situation is going to play
>out.  It may be removed permanently, or the bug that caused its removal

Look up the bug report.  Sure, it's not possible to say for definite
what will happen, but the aim is clearly to get Synaptic back into
testing.

-- 
 Regards  _
 / )   "The blindingly obvious is
/ _)radnever immediately apparent"
People stare like they've seen a ghost
Titanic (My Over) Reaction - 999


pgp5VNhgX5hJx.pgp
Description: OpenPGP digital signature

but it's not going to be installed

[mick crane]

I typed
"apt install mypaint"
mypaint depends on mypaint-data but it's not going to be installed
seen that mypaint-data was there so
"apt install mypaint-data"
...installs OK
"apt install mypaint"
no complaints
what's that all about then ?

mick

--
Key ID4BFEBB31

Re: HS: iptables interface de sortie par la même que l'entrée.

[Jérémy Prego]

Le 15/04/2019 à 20:18, Pascal Hambourg a écrit :
> Je n'ai rien compris. Et pourtant j'ai la prétention de m'y connaître
> un peu.
>
oups, je n'utilise pas les bon termes.
>> est-ce qu'une solution existe pour que si ça arrive par l'interface
>> wan0, ça reparte par la même interface et que ça ne passe pas par les
>> règle que j'ai mis pour l'output ?
>
>
>> pour rappel, un petit exemple de ce que je fais:
>> ##routage alternatif
>> iptables -t mangle -N ROUTING-POLICY
>> iptables -t mangle -A OUTPUT -j ROUTING-POLICY
>> iptables -t mangle -A PREROUTING -j ROUTING-POLICY
>> iptables -t mangle -D ROUTING-POLICY -d jeremy.domain.net -j MARK
>> --set-mark 0x3
>
> -D, vraiment ?

non, -A bien entendu. erreur de copier / coller.
>
> C'est du routage avancé, pas de la redirection. Pas étonnant que je
> n'ai rien compris.

oui, routage avancé, pardon. au temps pour moi.

>
> Si je comprends bien tu veux marquer seulement les paquets des
> connexions sortantes. Une solution consiste à utiliser le marquage de
> connexion avec la cible CONNMARK et la correspondance connmark.

oui, exactement. du coup je vais tester ça, merci.

> Une autre possibilité plus simple mais probablement incomplète
> consiste à discriminer l'adresse source originelle de la connexion
> avec l'option --ctorigsrc de la correspondance conntrack, en ajoutant
> à la règle de marquage :
>
> -m conntrack ! --ctorigsrc jeremy.domain.net
>

ça pour le coup j'ai pas trop compris, mais je relierai ça si la
solution 1 ne fonctionne pas :)

Merci Pascal.

Jerem

Re: HS: iptables interface de sortie par la même que l'entrée.

[Pascal Hambourg]

Le 15/04/2019 à 00:43, Jérémy Prego a écrit :


en ce Dimanche nocturne je me décide à poser ma question ici. En effet,
je fais de la redirection d'IP en OUTPUT et en PREROUTING avec iptables.
depuis la machine routeur et le réseau local derrière c'est parfait la
machine jeremy.domain.net passe bien par la connexion que j'ai demandé a
Iptables.
Le souci est quand de la machine jeremy.domain.net qui se trouve donc
sur internet je cherche à contacter le routeur par son interface
principale, il se passe un truc très embêtant, Iptables renvoie les
réponses par l'interface que j'ai choisi pour ma redirection de
l'OUTPUT. Du coup, ça ne peut pas fonctionner, forcément.


Je n'ai rien compris. Et pourtant j'ai la prétention de m'y connaître un 
peu.



est-ce qu'une solution existe pour que si ça arrive par l'interface
wan0, ça reparte par la même interface et que ça ne passe pas par les
règle que j'ai mis pour l'output ?


Qu'entends-tu par "ça" ? Si tu parles de paquets, ce ne sont pas les 
mêmes qui arrivent et qui partent.



pour rappel, un petit exemple de ce que je fais:
##routage alternatif
iptables -t mangle -N ROUTING-POLICY
iptables -t mangle -A OUTPUT -j ROUTING-POLICY
iptables -t mangle -A PREROUTING -j ROUTING-POLICY
iptables -t mangle -D ROUTING-POLICY -d jeremy.domain.net -j MARK
--set-mark 0x3


-D, vraiment ?

C'est du routage avancé, pas de la redirection. Pas étonnant que je n'ai 
rien compris.


Si je comprends bien tu veux marquer seulement les paquets des 
connexions sortantes. Une solution consiste à utiliser le marquage de 
connexion avec la cible CONNMARK et la correspondance connmark.
Une autre possibilité plus simple mais probablement incomplète consiste 
à discriminer l'adresse source originelle de la connexion avec l'option 
--ctorigsrc de la correspondance conntrack, en ajoutant à la règle de 
marquage :


-m conntrack ! --ctorigsrc jeremy.domain.net

Re: Stretch with MATE DE - odd new file association problem

[Alexander V. Makartsev]

On 15.04.2019 18:09, Richard Owlett wrote:
> Somehow I had messed up preferred application to open a file.
> I fixed by selecting a file of appropriate type, selecting Properties,
> and setting preferred application.
>
> That solved almost all my problems.
>
> The only exception is when using Synaptic.
> When I click on "Visit Homepage" it insists on using Firefox :<
> It used to open properly with my preferred browser SeaMonkey.
> All other HTML open correctly with SeaMonkey.
>
> Is another place I need to set preferences?
> TIA 
You can check what is set as default in "update-alternatives" configs
for browsers available in your system:
    $ sudo update-alternatives --config x-www-browser
and
    $ sudo update-alternatives --config gnome-www-browser

-- 
With kindest regards, Alexander.

⢀⣴⠾⠻⢶⣦⠀ 
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org
⠈⠳⣄ 

Re: New laptop: need advice on choice of file system types

[Felix Miata]

Jonathan Dowland composed on 2019-04-15 10:28 (UTC-0400):

> On Fri, Apr 12, 2019 at 05:36:00PM -0400, Felix Miata wrote:

>>LVM's extra layer(s) would render my backup/restore system that depends in 
>>large
>>part on cloning useless.

> I don't quite understand this, would you care to elaborate? Thanks! 

My system's inception dates back more than two decades, before I ever installed
Linux, before I became conscious of FOSS. I began then using cross-platform 
DFSee
exclusively as my partitioner and IBM Boot Manager manager when its only 
binaries
were DOS, OS/2 & Windows. Later were added Linux, then MacOS. Both DFSee and IBM
BM use the last sector on the first track for data storage, including useful
cataloging data. Even when not having IBM BM installed, its data sector is
(optionally) used by DFSee, by me, always. As DFSee evolved, so did my system, 
and
PC collection. Portions of DFSee's automatic logging double as my inventory 
system
for dozens of multi- multiboot PCs, some with upwards of 30 operating systems.
DFSee is a lot of things, but GNU LVM manager from an OS/2 or floppy boot isn't
one of them.
-- 
Evolution as taught in public schools is religion, not science.

 Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!

Felix Miata  ***  http://fm.no-ip.com/

Re: Pb de scanner brother [RÉSOLU]

[Daniel Caillibaud]

Le 15/04/19 à 10:51, MERLIN Philippe  a
écrit :
> Le dimanche 14 avril 2019, 18:25:00 CEST Daniel Caillibaud a écrit :
> > Bonjour,
> > 
> > J'ai un souci sur un PC avec une imprimante / scanner brother DCP-7010.
> > 
> > Ça marchait très bien sur un vieux PC 32 i386 sous lenny/squeeze/jessie,
> > mais sur un nouveau PC installé en stretch amd64 pas moyen de lui
> > faire reconnaître le scanner.
> > 
> 
> > Bref, je vois plus trop où chercher… si qqun a une idée je suis
> > preneur ;-)

> En faisant une recherche sur le net pour t'aider j'ai trouvé cela sur le
> net qui semble correspondre à ton problème, par contre je n'ai pas vu la
> solution. pb scanner DCP 7010[1] 
> Mes deux sous.
> Philippe Merlin
> 
> 
> [1] https://forum.ubuntu-fr.org/viewtopic.php?id=2012288

Merci d'avoir cherché, effectivement je suis pas le seul, mais ça règle pas
mon souci :-/

J'ai fait un paquet d'essais et de recherches, et c'est
https://wiki.debian.org/fr/Brother/DCP130C (de 2013) qui m'a mis sur la voie 
(j'ai pas de /usr/lib/sane mais un /usr/lib/x86_64-linux-gnu/sane/), donc
pour résumer, ce qui marche chez moi, sous stretch, pour un DCP-7010

- installer brscan2-0.2.5-1.amd64.deb (en plus de sane, xsane & co)

- dans /lib/udev/rules.d/60-libsane.rules ajouter une ligne
  ATTRS{idVendor}=="04f9", ATTRS{idProduct}=="0182", ENV{libsane_matched}="yes"

- cp -a /usr/lib64/sane/libsane-brother2.so* /usr/lib/x86_64-linux-gnu/sane/

- systemctl restart udev

C'est surtout le cp qui manquait, je suppose qu'installer le paquet
brother-udev-rule-type1-1.0.2-0.all.deb (qui installe
un /etc/udev/rules.d/60-brother-libsane-type1.rules) remplace l'ajout manuel 
de la ligne dans /lib/udev/rules.d/60-libsane.rules, mais vu que la syntaxe
utilisée n'est pas la même j'ai préféré conserver la syntaxe de 
60-libsane.rules 
avec les infos de sane-find-scanner :
  found USB scanner (vendor=0x04f9, product=0x0182) at libusb:004:002

Je comprends pas trop pourquoi sane-find-scanner voyait le scanner 
mais pas `scanadf -l` ni `scanimage -L`, mais ça fonctionne désormais.

-- 
Daniel

L'inconnaissable est connaissable puisque
je peux connaître qu'il est inconnaissable.
Aristote, Poétique.

Re: Cannot re-install synaptic on Buster.

[tomas]

On Mon, Apr 15, 2019 at 11:45:07AM -0500, David Wright wrote:

[...]

> > Watch again systemd: while the default in Debian, it is perfectly
> > possible to install a Debian system without it [...]

> I've always assumed that there are Developers who, like us,
> avoid various types of software, like DEs, and so there will
> always remain possible methods of circumventihg them.

That's my take too. The point I wanted to make, though, is that
even those who voted for systemd are trying to keep SysV viable.
So my warmest thanks to them!

> > [...] That's why
> > I tend to go berserk every time I see mud being slung at them.

> Yes, but sometimes the mud appears from nowhere, just through poor
> attributions and excessive snipping (removing the context). For
> purely technical comments, it's less important, but for opinions
> it's vital to know who's actually saying what.

Some of it is definitely due to imperfect communication channels
(including their endpoints, i.e. we, humans). Some of it seems
to come with some strange lust for destruction, which I find
deeply disturbing.

[...]

> Never left fvwm in two decades!

Yah, we oldtimers :-)

[...]

> > Now let me step down from my soapbox.
> 
> I agree. We have to accept that we depend on people scratching their
> itch, and we can't dictate to them, only suggest, help or persuade.
> Or even just help other users to realise they need time to change
> things. In the case in point, I feel sure that the people who
> developed synaptic will think about how to separate privileges so
> that the well-liked GUI can run as a user, communicating with a
> administrative daemon that does the privileged work.

Thanks for your wise words. We are on the same page, it seems. As far
as synaptic is concerned, it seems the problem is being worked on
(#818366). It's a serious bug, but hey, that's what testing is for,
isn't it?

Cheers
-- tomás


signature.asc
Description: Digital signature

Re: Cannot re-install synaptic on Buster.

[Kieran Smyth]

Thanks everyone for all the responses. The package gnome-packagekit seems
like a good alternative for now, but ultimately I think reverting to stable
rather than testing may be the way forward for me.

Although i'm going to explore other desktop environments, too. Not sure
i'll be able to move away from MATE, though.

Lesson here is to pay attention when installing updates. Using synaptic, i
missed that synaptic itself was going to be uninstalled after updating haha.

On Mon, Apr 15, 2019 at 2:04 AM Reco  wrote:

> Hi.
>
> On Mon, Apr 15, 2019 at 01:24:32AM -0400, Kieran Smyth wrote:
> > For reasons unknown to me, synaptic uninstalled itself about three weeks
> > ago. I am using Buster on the desktop, with MATE as my desktop
> environment.
>
> Synaptic was removed from testing two weeks ago, see #818366.
>
> > I like using a GUI frontend to apt, and if anyone can help me get it back
> > on my system i'd really appreciate it.
>
> You're not supposed to use synaptic in Wayland session anymore. Consider
> using gnome-packagekit instead.
>
> Reco
>
>

Re: just mail forwarding to smart mailer

[Wim]

Hi Bonno,

On Sunday, 14 April at 08:00, Bonno Bloksma wrote:

> 
> All along I just installed the standard system on a Debian machine. Created 
> an alias for the root user with the email address of our servicedesk to have 
> it send any mails to my servicedesk account and that was it.
> The last Debian installations no longer have a default mailserver installed 
> and frankly, I do not need a full blown mailserver but I do want mails 
> generated on the local machine forwarded to our on-site smart relay server.
> I could install all of Exim again and do the standard dpkg-reconfigure 
> exim4-config I did before where I tell it where the smarthost is, but is 
> there a "better" way that does not need the full Exim package?
> I am looking for an "easy light weight just empty the local queue and send it 
> to the smart host" setup.
> I don't mind experimenting and it doesn not need to be Exim but the info I 
> get Googling is just too diverse and does not get me much closer to what I 
> want. :-(
> Who can help me and point me to some relevant info?
> 

The program 'msmtp' might be what you're looking for. It's an easy to
use smtp client. The Arch Linux wiki has some good info on 'mstmp'.

-- 
All the best
Wim

Re: Cannot re-install synaptic on Buster.

[David Wright]

On Mon 15 Apr 2019 at 13:31:04 (+0200), to...@tuxteam.de wrote:
> On Mon, Apr 15, 2019 at 11:15:48AM +0300, Reco wrote:
> > On Mon, Apr 15, 2019 at 09:56:04AM +0200, to...@tuxteam.de wrote:
> > > On Mon, Apr 15, 2019 at 10:42:19AM +0300, Reco wrote:
> > > > On Mon, Apr 15, 2019 at 09:14:30AM +0200, to...@tuxteam.de wrote:
[...]
> > > > A short-term solution at best, although I'll avoid Wayland in buster.
> > > 
> > > Why do you think it is a short term solution?
> > 
> > Because GNOME. GNOME's upstream said their word loud and clear, and that
> > word is - 'thou shall use Wayland for it is our favorite toy now'.
> 
> Yes, for GNOME users that's right. And GNOME is Debian's default DE.
> But not the only one, and you don't even have to have a DE (I haven't
> one, for example).
> 
> > A modern GNOME project is known for feature removal [...]
> 
> I don't like myself many of the choices GNOME has taken. Nevertheless,
> its intention is to make user's lives more enjoyable [1], and that
> is commendable. For "my" end users (i.e. those for whom I play
> "local friendly hacker") I tend to help them taking their choices.
> Some are fine with modern GNOME (that means I have to have some
> working knowledge of that), others run away, screaming in horror
> (they usually settle on something like Mate or XFCE).
> 
> Myself? As I already said: to me, a desktop environment is an
> abomination. Give me a "classical" window manager and I'm your
> guest.
> 
> As elsewhere, I'd say: diversity rocks!
> 
> > Luckily for us, Debian stable users, we're promised a lack of behaviour
> > changes during the lifecycle of a stable release. And Debian keeps that
> > promise most of the time [...]
> 
> You make it sound as if there were some cabal behind Debian. I think
> Debian (folks) will be happy to keep alternatives viable as long as
> there is someone around willing to do the legwork.
> 
> Watch again systemd: while the default in Debian, it is perfectly
> possible to install a Debian system without it (mine is SysV, and
> I do play around with installers for raspi). And quite a bit of
> the necessary legwork (SysV init scripts for packages et al) *is
> being done by the respective package maintainers, many of whom may
> be systemd proponents... just because they think your choice is
> important!*

I've always assumed that there are Developers who, like us,
avoid various types of software, like DEs, and so there will
always remain possible methods of circumventihg them.

> For me, that's awesome. That is how civilisation works. That's why
> I tend to go berserk every time I see mud being slung at them.
> We might disagree, but we shouldn't sling mud at people giving us
> software for free. Discussion, Bug reports, patches, all fine.
> But no mud.

Yes, but sometimes the mud appears from nowhere, just through poor
attributions and excessive snipping (removing the context). For
purely technical comments, it's less important, but for opinions
it's vital to know who's actually saying what.

> > > This is more or less my situation. After a detour through Gnome I
> > > finally came back to fvwm, and glad I did.

Never left fvwm in two decades!

> > Ah, that's the thing. They give you mutter (it's a GNOME thing) and they
> > give you weston (a reference 'window manager').
> > Both lose in usability to my openbox setup.
> 
> Hey. It's free software. Shouldn't we be rather saying "we give
> ourselves [2] this and that?" Who's "they" anyway
> 
> Now let me step down from my soapbox.

I agree. We have to accept that we depend on people scratching their
itch, and we can't dictate to them, only suggest, help or persuade.
Or even just help other users to realise they need time to change
things. In the case in point, I feel sure that the people who
developed synaptic will think about how to separate privileges so
that the well-liked GUI can run as a user, communicating with a
administrative daemon that does the privileged work.

> [1] I'm applying some amount of Hanlon's razor here
> [2] In the reciprocal, not in the egocentric sense

Cheers,
David.

Re: Buster presentation info

[Paul Sutton]

On 15/04/2019 09:27, Reco wrote:
>   Hi.
>
> On Mon, Apr 15, 2019 at 08:38:15AM +0100, Paul Sutton wrote:
>> Does anyone know the version of Wayland being used?
> $ dpkg -s libwayland-server0 | grep Version
> Version: 1.16.0-1
>
>> and what other basic info could be included in a technical overview without
>> overwhelming the viewer ?
> A shipped browser(s) version, maybe? Firefox, Chromium, those things.
>
> Reco

I have made a few updates. I am trying to write this for the Default
options so Wayland and Gnome,  so the parts about Synaptic need a few
adjustments but I am sort of getting there.   If the default or
preferred package manager (gui) is gnome-packagekit for gnome and
wayland then this is fine. 

If we were to fork and write this for xfce or lxde, then I guess the
default window back end is X and the preferred option for package
manager is synaptic. and the technical info would change accordingly. 

(I am getting confused just trying to write this)

https://github.com/zleap/DebianPresentation/blob/master/README.md

Is work so far,  please feel free to e-mail over any word / text
changes.  So far I am editing in Overleaf, downloading the zip(source)
and pdf files and uploading to github, which is not an ideal situation. 
I have not figured out how to do more advanced things in github, I can
sort of handle pull requests but end up in a right mess. 

Main issue is that netbook runs Debian10 + LXDE (not my main one as I
have one for testing buster on),  so I am going by information I can
find.   I am not too sure if my netbook would handle wayland anyway.

Hope this helps

Regards

Paul


-- 
Paul Sutton
http://www.zleap.net
https://www.linkedin.com/in/zleap/
gnupg : 7D6D B682 F351 8D08 1893  1E16 F086 5537 D066 302D

Re: Exploring package interrelationships

[Curt]

On 2019-04-15, Richard Owlett  wrote:
>> 
>
> Neither
>> $ dot -Tps -o APT::Cache::GivenOnly=1 dependency-graph.dot > owl2.ps
> Nor
>> $ dot -o APT::Cache::GivenOnly=1 dependency-graph.dot
> gave useful output.
>
> I'll do some reading and try on something simpler.
> Thanks
>
>

That doesn't seem to be how you're supposed to do it.

I'm reading

Create the graph (with no package given all packages in the cache are
graphed):

 apt-cache dotty apache2 > apache-dependency-graph.dot

Visualize the graph:

 dot -Tpng apache-dependency-grap.dot

But there's still too much stuff in there maybe to be legible. DW
suggests a restriction of the graph to only the packages given on the
command line. 

 apt-cache -o APT::Cache::GivenOnly=1 dotty apache2 apache2-common (etc.).

http://www.macfreek.nl/memory/Dependency_Graph_Debian_Packages

Re: Remplacement de amarok sous KDE (player de musique)

[Sylvain Caselli]

Le 15/04/2019 à 12:14, Erwan David a écrit :


avec les dernières mises à jour de Buster, il y a des problèmes de 
dépendances sur amarok.


Le bug ayant été signalé en février sans aucune réponse ça fait penser 
que le soft risque d'être abandonné.


Je cherche donc un autre player pour le remplacer.

Les features indispensables pour moi : le player prend la musique là 
où JE lui dit dans la configuration, pas ailleurs.


Possibilité de jouer des albums entiers dans un ordre aléatoire (quand 
on écoute du classique ou des concerts l'aléatoire par morceau c'est 
pas beau).


Quelqu'un a des idées de soft à essayer ?

Merci


clementine, juk, jajuk.

Sylvain

Re: Cannot re-install synaptic on Buster.

[Francisco M Neto]

On Mon, 2019-04-15 at 11:06 +0100, Dominic Knight wrote:
> The good news is that someone has filed a patch that works around these
> issues with Wayland. So it should be back for other GUI users with a
> failure message for Wayland users once it is passed through
> experimental (in time for Buster release).

Apparently the fix is moving forward and Synaptic might make it back
into testing, according to what I've seen in the release mailing list[1].

[1]https://lists.debian.org/debian-release/2019/04/msg00635.html


-- 
[]'s,

Francisco M Neto 

GPG: 4096R/D692FBF0


signature.asc
Description: This is a digitally signed message part

Re: Need help analyzing (kernel?) memory usage and reclaiming RAM (Debian Stretch)

[Reco]

Hi.

On Mon, Apr 15, 2019 at 04:40:56PM +0200, Martin Schwarz wrote:
> The system from my previous example has already been rebooted, sorry!

Kind of expected. It's useful nevertheless.


> But here's from another system that currently starts showing the same
> problem and has an equally small workload:
> 
> root@rad-wgv-srv01:~# free -thwl

Nothing out of the ordinary here.

> root@rad-wgv-srv01:~# cat /proc/meminfo
> MemTotal:1010976 kB
> MemFree:   73980 kB
> MemAvailable:  38756 kB
> Buffers:9964 kB
> Cached:50340 kB

It's not the file cache who ate the memory.

> SwapCached: 2728 kB

And it's not the swap caching.

> Active(anon):  11068 kB
> Inactive(anon): 3696 kB

Memory consumption cannot be attributed to tmpfs.
I know, you've posted 'df' output earlier, but it does not take mount
namespaces into the account.

> Mapped:19904 kB

To my biggest disappointment, the problem cannot be explained by
excessive use of mmap(2) syscall. Would be easy otherwise.


> Shmem:  1120 kB

It's not the shared memory segments.


> Slab:  90744 kB
> SReclaimable:  13100 kB
> SUnreclaim:77644 kB

And it's not dentries cache (saw the thing grown once or twice. was
ugly).


> AnonHugePages: 0 kB
> ShmemHugePages:0 kB
> ShmemPmdMapped:0 kB
> HugePages_Total:   0
> HugePages_Free:0
> HugePages_Rsvd:0
> HugePages_Surp:0

And last, but not the least, there are no hugepages in use.


> root@rad-wgv-srv01:~# smem -tm | tail
> /bin/bash3  358 1076 
> /lib/systemd/systemd 3  386 1158 
> /lib/x86_64-linux-gnu/libc-2.24.so  33   54 1783 
> /usr/lib/x86_64-linux-gnu/libcrypto.so.1 5  386 1933 
> /usr/bin/python2.7   1 2220 2220 
> /lib/systemd/libsystemd-shared-232.so5  544 2723 
>  33  146 4848 
> [heap]  33  30410060 
> -
> 179922041011 

Moreover, no current running visible process consume the memory.
I suspect that this host does not utilize them anyway.


In short. I do believe that this is happening, but I never seen anything
like this. I cannot imagine the scenario that can lead to this, as long
as we're talking real hardware aka big iron.

What I suspect is happening here is runaway memory allocation by a
kernel module (at least one of them), and said kernel module is likely
to be VMWare-specific.
It could be vmxnet3 (network). It could be that LSI kernel module or
whatever they're using for SCSI these days (vmw_pvscsi?).


And that means - 'perf top', or better yet - 'perf record'.

Reco

Re: Remplacement de amarok sous KDE (player de musique)

[Alexandre Goethals]

Le 15/04/2019 à 12:14, Erwan David a écrit :
>
> avec les dernières mises à jour de Buster, il y a des problèmes de
> dépendances sur amarok.
>
> Le bug ayant été signalé en février sans aucune réponse ça fait penser
> que le soft risque d'être abandonné.
>
> Je cherche donc un autre player pour le remplacer.
>
> Les features indispensables pour moi : le player prend la musique là
> où JE lui dit dans la configuration, pas ailleurs.
>
> Possibilité de jouer des albums entiers dans un ordre aléatoire (quand
> on écoute du classique ou des concerts l'aléatoire par morceau c'est
> pas beau).
>
> Quelqu'un a des idées de soft à essayer ?
>
> Merci
>

J'utilise rhythmbox.

Pour les features:

- on peut dire à rhythmbox quel(s) répertoire(s) importer

- pas testé l'ordre aléatoire des albums

Re: Exploring package interrelationships

[David Wright]

On Mon 15 Apr 2019 at 10:13:31 (-0500), Richard Owlett wrote:
> On 04/15/2019 09:15 AM, David Wright wrote:
> > [snip]
> > 
> > > Using "dot -Tps  dependency-graph.dot > owl.ps" I got a displayable,
> > > if not readable, graph. There was a warning in what I had read about
> > > "dotty" about viewablity issues if the graph was too complex. Suspect
> > > that is problem.
> > 
> > Add   -o APT::Cache::GivenOnly=1   to the commandline, and you'll get
> > a much smaller graph. I haven't figured out why python and
> > python-requests are missng from the graph, or is this a stretch/buster
> > difference. (I'm comparing the graph with the Packages entry:
> > 
> 
> Neither
>   > $ dot -Tps -o APT::Cache::GivenOnly=1 dependency-graph.dot > owl2.ps
> Nor
>   > $ dot -o APT::Cache::GivenOnly=1 dependency-graph.dot
> gave useful output.

I'm not sure how you expect to progress if you expect people here,
following your blow by blow account, to write each commandline for
you in full.

It's fairly obvious that APT::Cache::GivenOnly applies to the
apt-cache command, given the words it has in common. In fact,
it's likely you have some options like this in your /etc/apt/
tree, eg:

/etc/apt/apt.conf.d/00trustcdrom :
APT::Authentication::TrustCDROM "true";

Cheers,
David.

Re: INFO: task blocked for more than 120 seconds

[steve]

Le 15-04-2019, à 17:11:22 +0200, Daniel Caillibaud a écrit :


Le 12/04/19 à 10:41, steve  a écrit :

Bonjour à tous,

Depuis que j'ai changé de machine, j'ai des problèmes de freeze
intempestifs. Mais tout n'est pas gelé. Un 'ls' gèle alors que d'autres
processus fonctionne normalement. La souris n'est pas touchée ni le
clavier.


C'est l'accès au disque qui bloque ls, mais ni la souris ni le clavier.


C'est ça. Avec un message du style (ça vient d'arriver à nouveau):

INFO: task kworker/u56:4:379 blocked for more than 120 seconds


On voit que plusieurs processus bloquent (md1_raid1, md0_raid1, uptimed,
fetchmail, kworker, lpqd et systemd).


C'est effectivement mdadm qui semble coincer, et du coup bloque tous ceux
qui veulent accéder au disque à ce moment là.


Je pensais à un disque défectueux
dans une grappe RAID 1, alors je l'ai enlevé, ce qui a eu pour effet de
d'augmenter la durée entre deux freeze. J'ai également essayé avec des
versions de noyaux inférieurs, mais même résultat.


Il faudrait demander à mdadm d'être plus bavard quand il a un pb, mais je
sais pas trop comment.


Rien dans la page man.


mdadm --detail --scan --verbose
ne remonte rien d'anormal ?


Non.


smartctl non plus ?
# lister les disques
smartctl --scan
# afficher les infos le concernant
smartctl --all /dev/sdX


Déjà essayé tout ça. J'ai également lancé des fsck depuis un OS live qui
a détecté quelques problèmes (et corrigés), mais le freeze apparaît
encore, à des intervalles totalement irréguliers. 


Tu utilises quel filesystem ?


ext4.

Re: Liquorix kernel?

[Francisco M Neto]

On Mon, 2019-04-15 at 14:42 +0500, Alexander V. Makartsev wrote:
>  A quick glance at tests [1] makes me not bother with Liquorix yet.
> As you can see, performance is a double edged sword, you gain a little more
> responsiveness, but loose on throughput.
> Of course it should be tested for your workload and probably also perform a
> security audit check of all modifications in Liquorix.

Thanks for the input. To be honest, I'm ok with that trade-off; my
intention is to boot Liquorix for gaming only. For regular workloads I'd stick
with the vanilla kernel.

Also, I'm sorry for the noobish question, but it's been a really long
time since I've done any kind of kernel work. How do I perform a security check?

> [1] 
> https://www.phoronix.com/scan.php?page=news_item=Liquorix-Linux-4.17-Kernel

Thanks again.

Cheers,
Francisco
-- 
[]'s,

Francisco M Neto

GPG: 4096R/D692FBF0


signature.asc
Description: This is a digitally signed message part

Re: [sbuild] how to create chroot environment

[tomas]

On Mon, Apr 15, 2019 at 05:05:53PM +0200, Markus Schönhaber wrote:
> Tomas, 15.4.2019 16:38 +0200:
> 
> >   --chroot-mode=schroot|sudo|autopkgtest
> > Select the desired chroot mode. Four values are possible:
> > schroot [...], sudo [...] and autopkgtest [...]
> 
> Out of curiosity: am I missing something or are there only three of the
> "Four values" which "are possible" documented? What might be the fourth?

Yes, this looks like an error. I'd venture that there are just three
values.

Cheers
-- t


signature.asc
Description: Digital signature

Re: Exploring package interrelationships

[Richard Owlett]

On 04/15/2019 09:15 AM, David Wright wrote:

[snip]


Using "dot -Tps  dependency-graph.dot > owl.ps" I got a displayable,
if not readable, graph. There was a warning in what I had read about
"dotty" about viewablity issues if the graph was too complex. Suspect
that is problem.


Add   -o APT::Cache::GivenOnly=1   to the commandline, and you'll get
a much smaller graph. I haven't figured out why python and
python-requests are missng from the graph, or is this a stretch/buster
difference. (I'm comparing the graph with the Packages entry:



Neither
  > $ dot -Tps -o APT::Cache::GivenOnly=1 dependency-graph.dot > owl2.ps
Nor
  > $ dot -o APT::Cache::GivenOnly=1 dependency-graph.dot
gave useful output.

I'll do some reading and try on something simpler.
Thanks

Re: INFO: task blocked for more than 120 seconds

[Daniel Caillibaud]

Le 12/04/19 à 10:41, steve  a écrit :
> Bonjour à tous,
> 
> Depuis que j'ai changé de machine, j'ai des problèmes de freeze
> intempestifs. Mais tout n'est pas gelé. Un 'ls' gèle alors que d'autres
> processus fonctionne normalement. La souris n'est pas touchée ni le
> clavier. 

C'est l'accès au disque qui bloque ls, mais ni la souris ni le clavier.

> On voit que plusieurs processus bloquent (md1_raid1, md0_raid1, uptimed,
> fetchmail, kworker, lpqd et systemd). 

C'est effectivement mdadm qui semble coincer, et du coup bloque tous ceux
qui veulent accéder au disque à ce moment là.

> Je pensais à un disque défectueux
> dans une grappe RAID 1, alors je l'ai enlevé, ce qui a eu pour effet de
> d'augmenter la durée entre deux freeze. J'ai également essayé avec des
> versions de noyaux inférieurs, mais même résultat.

Il faudrait demander à mdadm d'être plus bavard quand il a un pb, mais je
sais pas trop comment.

mdadm --detail --scan --verbose
ne remonte rien d'anormal ?

smartctl non plus ?
# lister les disques
smartctl --scan
# afficher les infos le concernant
smartctl --all /dev/sdX

Tu utilises quel filesystem ? Car j'ai régulièrement des freeze sur un
serveur de backup en btrfs, après une suppression de snapshot, mais comme il
a bcp de snapshots de qq To je lui pardonne… (pas trop le choix, c'est pas
une anomalie mais le fonctionnement "normal" de btrfs dans ce cas, dixit un
bon connaisseur de btrfs qui s'est penché sur ma conf).

-- 
Daniel

Mieux vaux fermer sa gueule et passer pour un con 
que de l'ouvrir et ne laisser aucun doute à ce sujet.
Coluche

Re: [sbuild] how to create chroot environment

[Markus Schönhaber]

Tomas, 15.4.2019 16:38 +0200:

>   --chroot-mode=schroot|sudo|autopkgtest
> Select the desired chroot mode. Four values are possible:
> schroot [...], sudo [...] and autopkgtest [...]

Out of curiosity: am I missing something or are there only three of the
"Four values" which "are possible" documented? What might be the fourth?

-- 
Regards
  mks

Re: Need help analyzing (kernel?) memory usage and reclaiming RAM (Debian Stretch)

[Martin Schwarz]

On Mon, Apr 15, 2019 at 10:44:26AM -0400, Kenneth Parker wrote:
> I had a Symptom like this a few years ago, which was tracked to something
> called "zram", which tries to use "excess RAM" as Swap Space.

thanks for your input!

We do not use zram. (I assume that would also show up in `lsmod`?)

/proc/swap shows only one "normal" swap partition (on a LVM logical
volume in this case):


root@rad-wgv-srv01:~# cat /proc/swaps
FilenameTypeSizeUsedPriority
/dev/dm-3   partition   2097148 70876   -1
root@rad-wgv-srv01:~# fgrep swap /etc/fstab 
/dev/mapper/vg0-lv_swap noneswapsw  0   0
root@rad-wgv-srv01:~# ls -l /dev/mapper/vg0-lv_swap
lrwxrwxrwx 1 root root 7 Mär 29 08:33 /dev/mapper/vg0-lv_swap -> ../dm-3
root@rad-wgv-srv01:~# ls -l /dev/dm-3
brw-rw 1 root disk 254, 3 Mär 29 08:33 /dev/dm-3
root@rad-wgv-srv01:~# lvs /dev/mapper/vg0-lv_swap
  LV  VG  Attr   LSize Pool Origin Data%  Meta%  Move Log Cpy%Sync 
Convert
  lv_swap vg0 -wi-ao 2,00g  
  
root@rad-wgv-srv01:~# lsmod | fgrep z
Module  Size  Used by
root@rad-wgv-srv01:~# 

-- 
Martin Schwarz * Karlsruhe, Germany * http://kuroi.de/

Re: Need help analyzing (kernel?) memory usage and reclaiming RAM (Debian Stretch)

[Kenneth Parker]

I had a Symptom like this a few years ago, which was tracked to something
called "zram", which tries to use "excess RAM" as Swap Space.

If so, it would show up on /proc/swaps

Verify that.

Best regards,

Kenneth Parker

Re: Need help analyzing (kernel?) memory usage and reclaiming RAM (Debian Stretch)

[Martin Schwarz]

On Mon, Apr 15, 2019 at 04:35:27PM +0300, Reco wrote:
> Can you please provide unsorted outputs of /proc/meminfo? It's easier to
> compare them if they are unsorted.
> And "smem -tm | tail" would be helpful too.

Thanks for your input!

The system from my previous example has already been rebooted, sorry!
But here's from another system that currently starts showing the same
problem and has an equally small workload:


root@rad-wgv-srv01:~# free -thwl
  totalusedfree  shared buffers   cache 
  available
Mem:   987M843M 72M1,1M9,7M 61M 
37M
Low:   987M914M 72M
High:0B  0B  0B
Swap:  2,0G 75M1,9G
Total: 3,0G919M2,0G
root@rad-wgv-srv01:~# cat /proc/meminfo
MemTotal:1010976 kB
MemFree:   73980 kB
MemAvailable:  38756 kB
Buffers:9964 kB
Cached:50340 kB
SwapCached: 2728 kB
Active:58776 kB
Inactive:  15164 kB
Active(anon):  11068 kB
Inactive(anon): 3696 kB
Active(file):  47708 kB
Inactive(file):11468 kB
Unevictable:   0 kB
Mlocked:   0 kB
SwapTotal:   2097148 kB
SwapFree:2019416 kB
Dirty:   104 kB
Writeback: 0 kB
AnonPages: 13048 kB
Mapped:19904 kB
Shmem:  1120 kB
Slab:  90744 kB
SReclaimable:  13100 kB
SUnreclaim:77644 kB
KernelStack:2700 kB
PageTables: 3764 kB
NFS_Unstable:  0 kB
Bounce:0 kB
WritebackTmp:  0 kB
CommitLimit: 2602636 kB
Committed_AS: 155208 kB
VmallocTotal:   34359738367 kB
VmallocUsed:   0 kB
VmallocChunk:  0 kB
HardwareCorrupted: 0 kB
AnonHugePages: 0 kB
ShmemHugePages:0 kB
ShmemPmdMapped:0 kB
HugePages_Total:   0
HugePages_Free:0
HugePages_Rsvd:0
HugePages_Surp:0
Hugepagesize:   2048 kB
DirectMap4k:  925568 kB
DirectMap2M:  122880 kB
root@rad-wgv-srv01:~# smem -tm | tail
/bin/bash3  358 1076 
/lib/systemd/systemd 3  386 1158 
/lib/x86_64-linux-gnu/libc-2.24.so  33   54 1783 
/usr/lib/x86_64-linux-gnu/libcrypto.so.1 5  386 1933 
/usr/bin/python2.7   1 2220 2220 
/lib/systemd/libsystemd-shared-232.so5  544 2723 
 33  146 4848 
[heap]  33  30410060 
-
179922041011 
root@rad-wgv-srv01:~# ps aux --sort=-rss | head -15
USER   PID %CPU %MEMVSZ   RSS TTY  STAT START   TIME COMMAND
root 61714  0.0  0.6  95180  6676 ?Ss   16:35   0:00 sshd: msch 
[priv]
msch 61716  0.0  0.5  64832  5852 ?Ss   16:35   0:00 
/lib/systemd/systemd --user
msch 61723  0.0  0.4  95452  4996 ?S16:35   0:00 sshd: 
msch@pts/0
msch 61724  0.2  0.4  23636  4924 pts/0Ss   16:35   0:00 -bash
root 62015  1.0  0.4  23740  4892 pts/0S16:36   0:00 -bash
root 1  0.0  0.4  57128  4440 ?Ss   Mär29  14:30 
/lib/systemd/systemd --system --deserialize 19
root 62014  0.0  0.3  51964  3836 pts/0S16:36   0:00 sudo -i
root 62040  0.0  0.3  41164  3584 pts/0R+   16:37   0:00 ps aux 
--sort=-rss
root   228  0.1  0.2 136620  2884 ?Ss   Mär29  31:20 
/usr/bin/vmtoolsd
root   224  0.0  0.2  6  2560 ?Ss   Mär29  13:48 
/lib/systemd/systemd-journald
root   411  0.0  0.2  46520  2408 ?Ss   Mär29   6:40 
/lib/systemd/systemd-logind
message+   419  0.0  0.1  45200  1332 ?Ss   Mär29   6:39 
/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile 
--systemd-activation
msch 61717  0.0  0.1  82652  1268 ?S16:35   0:00 (sd-pam)
_chrony531  0.0  0.1  29980  1184 ?SMär29   0:52 
/usr/sbin/chronyd
root@rad-wgv-srv01:~# uname -a
Linux rad-wgv-srv01 4.9.0-8-amd64 #1 SMP Debian 4.9.144-3 (2019-02-02) x86_64 
GNU/Linux
root@rad-wgv-srv01:~# 


(any other commands I should repeat on the new system?)

Thanks
Martin

-- 
Martin Schwarz * Karlsruhe, Germany * http://kuroi.de/

Re: New laptop: need advice on choice of file system types

[Tom Browder]

On Fri, Apr 12, 2019 at 9:50 AM Tom Browder  wrote:
>
> I have used ext4 for many years while I have been watching zfs and
...

Thanks to all who have given me advice on selecting the file system
for a new laptop. After considering all suggestions and my use of the
laptop, I have decided to use the Deb installer and select LVM during
the clean installation, and accept the FS default (I assume it will be
ext4, but if not, I will select it).

Warm regards, and many thanks, to all.

-Tom

Re: [sbuild] how to create chroot environment

[tomas]

On Mon, Apr 15, 2019 at 03:26:04PM +0100, Jonathan Dowland wrote:
> On Mon, Apr 15, 2019 at 02:30:33PM +0300, Alexei Fedotov wrote:
> >it seems schroot package is somehow missed in my repository, I will
> >look into it.
> 
> schroot is merely recommended by sbuild, and not depended upon by it:
> presumably sbuild can be used in some other way without schroot. When
> you installed sbuild your package manager must have been configured
> not to install Recommends; the default behaviour (for apt, at least)
> is to install Recommends.

Yes, sbuild defaults to schroot, but can use other methods. From
sbuild's man page:

  --chroot-mode=schroot|sudo|autopkgtest
Select the desired chroot mode. Four values are possible:
schroot (the default), sudo (which uses sudo to execute
chroot in a directory from  /etc/sbuild/chroot or ./chroot)
and autopkgtest which uses the autopkgtest-virt-* binaries
(selectable via the --autopkgtest-virt-server option). 
This command line option sets the CHROOT_MODE configuration
variable. See sbuild.conf(5) for more information.

So at first sight it seems that sbuild doesn't check whether schroot
is available, and if not, it runs aground by trying to use it, as
it is its default.

OP has installed schroot already, which is generally a Good Thing
anyway -- but whenever there are reasons not to use it, perhaps
the command-line option "--chroot-mode=sudo" (or its equivalent
config item) might be of help.

Cheers
-- tomás


signature.asc
Description: Digital signature

Re: New laptop: need advice on choice of file system types

[Jonathan Dowland]

On Fri, Apr 12, 2019 at 09:50:23AM -0500, Tom Browder wrote:

I have used ext4 for many years while I have been watching zfs and
btrfs being developed. I am now considering using one or both on at
least one partion during my upcoming new Debian installation.


What in particular do you find attractive about them?


Can anyone recommend either one for a normal (non-developer,
non-hobbyiest) user who does backups and values his data and wants
reasonable reliability?


Ext4 on top of LVM.

If you want to play around with new tech then I'd give ZFS on Linux
a try, but if you just want your machine to work stick to what you
know. I'd avoid BTRFS entirely unless you are an aspiring BTRFS
developer.

--

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Jonathan Dowland
⢿⡄⠘⠷⠚⠋⠀ https://jmtd.net
⠈⠳⣄ Please do not CC me, I am subscribed to the list.

Re: New laptop: need advice on choice of file system types

[Jonathan Dowland]

On Fri, Apr 12, 2019 at 05:36:00PM -0400, Felix Miata wrote:

LVM's extra layer(s) would render my backup/restore system that depends in large
part on cloning useless.


I don't quite understand this, would you care to elaborate? Thanks!

--

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Jonathan Dowland
⢿⡄⠘⠷⠚⠋⠀ https://jmtd.net
⠈⠳⣄ Please do not CC me, I am subscribed to the list.

Re: [sbuild] how to create chroot environment

[Jonathan Dowland]

On Mon, Apr 15, 2019 at 02:30:33PM +0300, Alexei Fedotov wrote:

it seems schroot package is somehow missed in my repository, I will
look into it.


schroot is merely recommended by sbuild, and not depended upon by it:
presumably sbuild can be used in some other way without schroot. When
you installed sbuild your package manager must have been configured
not to install Recommends; the default behaviour (for apt, at least)
is to install Recommends.

--

Jonathan Dowland

Re: Cannot re-install synaptic on Buster.

[Jonathan Dowland]

On Mon, Apr 15, 2019 at 11:15:48AM +0300, Reco wrote:

Debian project, like the most distributions, ships GNOME as a
primary/default Desktop Envirionment. Therefore one can expect that this
GNOME's "feature"-to-be will be included in Debian sooner or later, and
once done the "feature" can affect other, seemingly unrelated packages.
A synaptic comes to mind here ☺.


The decision to ship GNOME as the default desktop is regularly revisited: And
if a future GNOME release dropped X support altogether, you can be sure that
would be a factor in the re-evaluation that would follow.

--

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Jonathan Dowland
⢿⡄⠘⠷⠚⠋⠀ https://jmtd.net
⠈⠳⣄ Please do not CC me, I am subscribed to the list.

Re: Exploring package interrelationships

[David Wright]

On Mon 15 Apr 2019 at 08:50:12 (-0500), Richard Owlett wrote:
> On 04/15/2019 03:39 AM, Peter Wiersig wrote:
> > Richard Owlett  writes:
> > > Long term goal: *personal* definition of a minimalist Debian
> > > 
> > > current goal: grok how packages interact
> > 
> > http://www.macfreek.nl/memory/Dependency_Graph_Debian_Packages
> > TLDR:
> > $ apt-cache dotty mate-desktop > dependency-graph.dot
> > $ dot -Tpng  dependency-graph.dot
> 
> After I posted I found a reference using Graphiz with "apt-cache dotty"
> I haven't read the documentation yet.
> 
> I tried you example and got a command not found at second line.
> I found a man page for "dot" then went looking for a package to
> provide it -- found/installed xdot.

I'm not sure we need the blow by blow account.

> Using "dot -Tps  dependency-graph.dot > owl.ps" I got a displayable,
> if not readable, graph. There was a warning in what I had read about
> "dotty" about viewablity issues if the graph was too complex. Suspect
> that is problem.

Add   -o APT::Cache::GivenOnly=1   to the commandline, and you'll get
a much smaller graph. I haven't figured out why python and
python-requests are missng from the graph, or is this a stretch/buster
difference. (I'm comparing the graph with the Packages entry:

Package: mate-desktop
Version: 1.16.2-2
Architecture: amd64
Replaces: mate-desktop-gnome
Depends: hicolor-icon-theme, libmate-desktop-2-17 (>= 1.10.0),
 mate-desktop-common (= 1.16.2-2), python, python-requests, libatk1.0-0
 (>= 1.12.4), libc6 (>= 2.4), libcairo-gobject2 (>= 1.10.0), libcairo2
 (>= 1.2.4), libgdk-pixbuf2.0-0 (>= 2.22.0), libglib2.0-0 (>= 2.28.0),
 libgtk-3-0 (>= 3.0.0), libpango-1.0-0 (>= 1.14.0), libpangocairo-1.0-0
 (>= 1.14.0), libstartup-notification0 (>= 0.2), libxrandr2
Recommends: mate-user-guide
Breaks: mate-desktop-gnome

[edited].)

> > That either creates files named after the input or at least shows a
> > graphic of the package you specified.
> > 
> > I think I remember and older planet.debian.org post where someone else
> > had done similar.  Have not found it in a very short research session.
> > 
> > 
> > Alternatively explore interactive with aptitude when you disable the
> > solver there and pick the resulting installation by hand, and decide
> > which suggest/recommend you follow, and which non-essential package you
> > might even not install.
> 
> I can't parse that sentence. By context I suspect I can do some
> searching which will clarify.

Yes, it's often difficult to follow explanations of GUI processes
because they're interactive by nature. Sometimes a video is more
help than written instructions. The modern world …

Cheers,
David.

Re: Exploring package interrelationships

[Gene Heskett]

On Monday 15 April 2019 09:28:12 Cindy Sue Causey wrote:

> On 4/15/19, to...@tuxteam.de  wrote:
> > Debootstrap is a harsh mistress (yeah, stolen from somewhere). But
> > you might end up liking it once you get the hang of it...
>
Somewhat off topic, but your reading material in your formative years 
Cindy, is sadly lacking in familiarity with the output of one of the 
last century's most prolific  Sci Fi authors named Robert A. Heinlein. 
Specifically his treatise on living on or "in" the moon.  Go to your 
public library and check out "The moon is a harsh mistress" and remedy 
that lack. ;-)  I think you'll go back and get some more of his output.

> Don't know if I ever heard that, at least not that I can remember that
> topic specifically. I just know that debootstrap always *WORKS FOR
> ME*.
>
> Well, *IT WORKS* except for that one time that root kept yelling, "I
> HAVE NO NAME!" That eventually turned out to be caused by symlinking
> /debootstrap-directory/var/cache/apt/archives to an offline dotDEB
> file hoard. Accidentally discovered that using "mount -B" instead of
> "ln -s" solved root's identity crisis.
>
> I've been "bored" lately and so was going to spend some time nosing
> around to see if any other methods are dialup friendly. What you
> said... I'll have to poke around at that, too. Something in the very
> back of my head is nagging that I may have read some disgruntled
> chatter LONG before it ever made enough sense to find a more permanent
> spot toward the front of the class where its topic would remain more..
> [conscionable]. :)
>
> Cindy :)

I had forgotten there was still diakup country Cindy, my sympathies. But 
with Pi at the FCC, its not going to be fixed on his watch, he is in big 
telecom's pocket. "A Republic, Mam, if we can keep it", but we've not 
been doing that good a job.

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 

Re: INFO: task blocked for more than 120 seconds

[steve]

Le 15-04-2019, à 10:59:21 +0200, Stephane Ascoet a écrit :


Le 12/04/2019 à 10:41, steve a écrit :

Et vous ?


Bonjour, tu n'aurais pas une recherche Ldap qui serait lancee lors de 
certains acces? J'avais le meme souci sur mon portable du travail, 


Nope. Ou alors planqué sous un autre nom.


Merci

Re: INFO: task blocked for more than 120 seconds

[steve]

Hello,

Le 12-04-2019, à 20:01:17 +0200, Étienne Mollier a écrit :


Bonjour,

C'est dommage que chaque sortie de noyau soit sur une seule
ligne:  ça rend la lecture des listings vraiment très
désagréable.  :(


Vraiment désolé, à l'envoi ça semblait correct.


Ceci étant, j'ai cru voir un truc peut-être intéressant (ou
peut-être impertinent, dépendant de la causes.)

steve, au 2019-04-12 :

1 box kernel: [ 3988.692314]   Tainted: P   OE ...

^~~
Le noyau est teinté, quelle en est la cause ?  (ce devrait être
indiqué quelque part dans la sortie de `dmesg`.)



driver nvidia proprio.



Si un sous système corrompt le noyau, alors il n'est peut-être
pas nécessaire de chercher plus loin, et juste de le désactiver.


Je pourrais en effet essayer le driver libre « nouveau ». Mais la
dernière fois que j'ai essayé, ce n'était vraiment pas très concluant.

Merci.

Re: Exploring package interrelationships

[Richard Owlett]

On 04/15/2019 03:39 AM, Peter Wiersig wrote:

Richard Owlett  writes:

Long term goal: *personal* definition of a minimalist Debian

current goal: grok how packages interact


http://www.macfreek.nl/memory/Dependency_Graph_Debian_Packages
TLDR:
$ apt-cache dotty mate-desktop > dependency-graph.dot
$ dot -Tpng  dependency-graph.dot



After I posted I found a reference using Graphiz with "apt-cache dotty"
I haven't read the documentation yet.

I tried you example and got a command not found at second line.
I found a man page for "dot" then went looking for a package to provide 
it -- found/installed xdot.


Using "dot -Tps  dependency-graph.dot > owl.ps" I got a displayable, if 
not readable, graph. There was a warning in what I had read about 
"dotty" about viewablity issues if the graph was too complex. Suspect 
that is problem.






That either creates files named after the input or at least shows a
graphic of the package you specified.

I think I remember and older planet.debian.org post where someone else
had done similar.  Have not found it in a very short research session.


Alternatively explore interactive with aptitude when you disable the
solver there and pick the resulting installation by hand, and decide
which suggest/recommend you follow, and which non-essential package you
might even not install.


I can't parse that sentence. By context I suspect I can do some 
searching which will clarify.




Peter

Re: Need help analyzing (kernel?) memory usage and reclaiming RAM (Debian Stretch)

[Reco]

Hi.

On Mon, Apr 15, 2019 at 02:21:16PM +0200, Martin Schwarz wrote:
> I need help debugging/solving a weird memory problem. The symptoms are
> the usual ones for high memory usage: free/available memory is getting
> low, systems start swapping, disk I/O increases, performance drops.

Can you please provide unsorted outputs of /proc/meminfo? It's easier to
compare them if they are unsorted.
And "smem -tm | tail" would be helpful too.

Reco

Re: Exploring package interrelationships

[Cindy Sue Causey]

On 4/15/19, to...@tuxteam.de  wrote:
>
> Debootstrap is a harsh mistress (yeah, stolen from somewhere). But
> you might end up liking it once you get the hang of it...


Don't know if I ever heard that, at least not that I can remember that
topic specifically. I just know that debootstrap always *WORKS FOR
ME*.

Well, *IT WORKS* except for that one time that root kept yelling, "I
HAVE NO NAME!" That eventually turned out to be caused by symlinking
/debootstrap-directory/var/cache/apt/archives to an offline dotDEB
file hoard. Accidentally discovered that using "mount -B" instead of
"ln -s" solved root's identity crisis.

I've been "bored" lately and so was going to spend some time nosing
around to see if any other methods are dialup friendly. What you
said... I'll have to poke around at that, too. Something in the very
back of my head is nagging that I may have read some disgruntled
chatter LONG before it ever made enough sense to find a more permanent
spot toward the front of the class where its topic would remain more..
[conscionable]. :)

Cindy :)
-- 
Cindy-Sue Causey
Talking Rock, Pickens County, Georgia, USA

* runs with birdseed *

falten 150 bugs crítics per la Debian 10 estable

[Àlex]

https://lists.debian.org/debian-devel-announce/2019/04/msg3.html

Re: Cannot re-install synaptic on Buster.

[Greg Wooledge]

On Mon, Apr 15, 2019 at 08:18:20AM +0100, Paul Sutton wrote:
> I get info on what is in buster from this page
> 
> https://wiki.debian.org/NewInBuster
> 
> Would it be worth updating this page so others know to use
> gnome-packagekit instead, even if this information is elsewhere.

As end users, we don't know how the synaptic situation is going to play
out.  It may be removed permanently, or the bug that caused its removal
may be fixed/closed in any of several possible ways.

So for us, it's wait and see.

Recommending a vastly inferior GNOME substitute isn't what I consider a
proper, permanent solution.  But it's a wiki, and you have just as much
right to edit it as I do, if you think the advice will be useful.

Stretch with MATE DE - odd new file association problem

[Richard Owlett]

Somehow I had messed up preferred application to open a file.
I fixed by selecting a file of appropriate type, selecting Properties, 
and setting preferred application.


That solved almost all my problems.

The only exception is when using Synaptic.
When I click on "Visit Homepage" it insists on using Firefox :<
It used to open properly with my preferred browser SeaMonkey.
All other HTML open correctly with SeaMonkey.

Is another place I need to set preferences?
TIA

Need help analyzing (kernel?) memory usage and reclaiming RAM (Debian Stretch)

[Martin Schwarz]

Hello,

(please let me know if this is more appropriate somewhere else, e.g. on
ebian-kernel)

I need help debugging/solving a weird memory problem. The symptoms are
the usual ones for high memory usage: free/available memory is getting
low, systems start swapping, disk I/O increases, performance drops.

However, from what I can see, the memory is not used up by user space
processes but from the Kernel (NOT caches/buffers), see commands output
at the end.

I'm still puzzled about what exactly eats all the RAM and how to reclaim
it (without rebooting the machine, of course!). Any help would be highly
appreciated!

Some findings so far:

- same problem on many systems, all Debian 9 Stretch, all running stock
  4.9 kernel from the official package, all amd64 virtual machines on
  several (different) VMware ESXi hosts.
- not all Stretch systems seem to be affected, but we haven't yet found
  the common ground.
- problem can occur after some days or some weeks, not at the same time
  on all affected machines. And not at the same time for all VMs on the
  same host
- problem only occurs on Stretch systems, not Jessie, even running on
  the same host.
- we haven't yet seen the problem on real hardware machines, only VMs
  (but since the vast majority of our systems are VMs, this may not be
  relevant)
- problem seems not directly related to the machine's load. it occurs on
  machines that are mostly idle as well as on more heavily-loaded
  systems
- problem occurs the same on single-core VMs as well as on multi-core
  VMs
- problem occurs the same on VMs running on single-socket hosts as well
  as on multi-socket hosts
- problem occurs the same on VMs running on hosts with different
  hypervisor releases, both VMware ESXi 5.5 and 6.5, both standalone and
  in a vSphere cluster.

Here's the output from some commands I hope to be helpful:

The machine in this example is a RADIUS server but has not even gone
productive ... no incoming client requests yet.  (But the problem is not
related to the RADIUS server software - OSC Radiator - since the same
symptoms show on different machines: not only RADIUS servers but also
nameservers, shell servers or jumphosts, etc.)

[values while the problem persists:]

root@rad-m2m-srv02:~# free -thwl
  totalusedfree  shared buffers   cache 
  available
Mem:   987M910M 59M  0B704K 16M 
13M
Low:   987M927M 59M
High:0B  0B  0B
Swap:  2,0G345M1,7G
Total: 3,0G1,2G1,7G
root@rad-m2m-srv02:~# smem -twk
Area   Used  Cache   Noncache 
firmware/hardware 0  0  0 
kernel image  0  0  0 
kernel dynamic memory914.9M  11.1M 903.8M 
userspace memory  13.0M   5.5M   7.4M 
free memory   59.4M  59.4M  0 
--
 987.3M  76.1M 911.2M 
root@rad-m2m-srv02:~# smem -uktr
User Count Swap  USS  PSS  RSS 
root39   332.8M10.4M12.4M44.7M 
msch 6 7.0M0   607.0K 8.3M 
_chrony  1   360.0K 4.0K20.0K   572.0K 
messagebus 1   580.0K 4.0K17.0K   480.0K 
postfix  2 1.6M013.0K   568.0K 
daemon   1   208.0K 4.0K 6.0K72.0K 
---
50   342.5M10.4M13.0M54.7M 
root@rad-m2m-srv02:~# sort -k2,2nr /proc/meminfo
VmallocTotal:   34359738367 kB
CommitLimit: 2602636 kB
SwapTotal:   2097148 kB
SwapFree:1741028 kB
MemTotal:1010976 kB
DirectMap4k: 1007488 kB
Committed_AS: 465128 kB
Slab:  79680 kB
SUnreclaim:69268 kB
MemFree:   61068 kB
DirectMap2M:   40960 kB
SReclaimable:  10412 kB
Active: 6944 kB
Inactive:   6660 kB
AnonPages:  6608 kB
PageTables: 5804 kB
Cached: 5748 kB
Mapped: 4660 kB
SwapCached: 3988 kB
Active(file):   3920 kB
Inactive(anon): 3828 kB
Active(anon):   3024 kB
KernelStack:2992 kB
Inactive(file): 2832 kB
Hugepagesize:   2048 kB
Buffers:1020 kB
Dirty: 8 kB
AnonHugePages: 0 kB
Bounce:0 kB
HardwareCorrupted: 0 kB
HugePages_Free:0
HugePages_Rsvd:0
HugePages_Surp:0
HugePages_Total:   0
MemAvailable:  0 kB
Mlocked:   0 kB
NFS_Unstable:  0 kB
Shmem: 0 kB
ShmemHugePages:0 kB
ShmemPmdMapped:0 kB
Unevictable:   0 kB
VmallocChunk:  0 kB
VmallocUsed:   0 kB
Writeback: 0 kB
WritebackTmp: 

Problème avec gnome-maps

[Pierre-André BOSSENNEC]

Bonjour Utilisateurs Debian,

Je viens de réinstaller une distribution Debian 9 avec un formatage
complet du HDD de mon portable et de mon PC.

Or un programme du bureau gnome que j'utilise régulièrement ne
fonctionne plus. C'est le programme Cartes cf. https://wiki.gnome.org/A
pps/Maps
Il me semble que c'est le paquet gnome-maps...?

Lorsque je clique sur l’icône de démarrage du programme, celui-ci
démarre en ouvrant une fenêtre où on visualise une carte et puis le
programme plante et la fenêtre se ferme.

J'ai désinstallé ce programme pour l'ai réinstallé mais rien n'y fait.

Ce problème est le même sur chacun de mes deux ordinateurs que je viens
de réinstaller.

Merci pour votre aide et à votre disposition pour fournir les
renseignements qui s'avéreraient nécessaires

Bien cordialement

Re: Buster presentation info

[Curt]

On 2019-04-15, Paul Sutton  wrote:
>
> Following the topic here on Synaptic in Buster being replaced with
> gnome-packagekit

Synaptic is not being replaced. That notion is completely erroneous
AFAIK.  It has now been patched (package in unstable) so that it
provides "visual feedback while starting" (or, I suppose one might say
more pertinently, not starting) as per Paul Gevers comment on April 9 in
the synaptic Bug #818366 thread.

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=818366

https://tracker.debian.org/news/1038187/accepted-synaptic-0846-source-amd64-into-unstable/

Re: Cannot re-install synaptic on Buster.

[tomas]

On Mon, Apr 15, 2019 at 02:52:37PM +0300, Reco wrote:

[...]

> I'm not a part of Debian project, I'm just a user.

Then you are part, somehow. The one thing I appreciate about the
Debian project is precisely that it doesn't treat their users as
a merchandise (something less and less common these days).

> While I can build a package or two if a need arises, I'm too lazy to
> play this "maintainer for myself" role too often.
> So I (the user) use the packages they (maintainers) give me.

Yup. But they're listening. And they tend to be nice and civilised
people.

> And I use "they" as a way of referring the group of people I'm not
> acquainted with, or whose identities are not relevant to the question
> discussed. Fits here, IMO.

Do you a favour. Next time there's a Debconf near you, do attend (if
at all possible). It's totally worth it, and perhaps, after that,
"their" identities will be relevant [1].

Cheers

[1] I understand that you used this "identities aren't relevant" in
   a slightly different sense, by your restriction of context "to the
   question discussed". But I took the freedom to misinterpret you
   (just a little bit) to make the point, that yes, those Debian
   developers are people, each one which their character, each one
   different, but whom I trust _a lot_ (the functioning of my work
   computer depends on many of them, and they've let me down very
   rarely), and whom, in a somewhat abstract way I love, because
   they do their stuff with dedication, and often for no pay.
   So at some undefined meta level it is relevant again :-)

-- t 


signature.asc
Description: Digital signature

Re: Cannot re-install synaptic on Buster.

[Reco]

Hi.

On Mon, Apr 15, 2019 at 01:31:04PM +0200, to...@tuxteam.de wrote:
> > > > A short-term solution at best, although I'll avoid Wayland in buster.
> > > 
> > > Why do you think it is a short term solution?
> > 
> > Because GNOME. GNOME's upstream said their word loud and clear, and that
> > word is - 'thou shall use Wayland for it is our favorite toy now'.
> 
> Yes, for GNOME users that's right. And GNOME is Debian's default DE.
> But not the only one, and you don't even have to have a DE (I haven't
> one, for example).

There are users that are installing Debian from the first install DVD.
Some of those come to this maillist from time to time.
There are users that are installing Debian from the Live DVD.
These are also coming to this maillist.

Never underestimate the power of the defaults. If they give it by
default - people will use it even given the alternatives.


> > Luckily for us, Debian stable users, we're promised a lack of behaviour
> > changes during the lifecycle of a stable release. And Debian keeps that
> > promise most of the time [...]
> 
> You make it sound as if there were some cabal behind Debian.

One can call them that. But officially they are called Debian
Developers ☺. I meant nothing sinister, I assure you.

'Most of the time' referenced certain packages (samba, wireshark for
instance), which versions was changed during stretch's lifecycle
because backporting security fixes was not feasible.
Oh, and *browsers*. Let's not forget *those*.


> I think Debian (folks) will be happy to keep alternatives viable as
> long as there is someone around willing to do the legwork.

#818366 convinces me otherwise.


> Watch again systemd: while the default in Debian, it is perfectly
> possible to install a Debian system without it (mine is SysV, and
> I do play around with installers for raspi). And quite a bit of
> the necessary legwork (SysV init scripts for packages et al) *is
> being done by the respective package maintainers, many of whom may
> be systemd proponents... just because they think your choice is
> important!*

I'm not going to touch *this*. We have enough threads about s*d here
already. A good example nevertheless.


> > > This is more or less my situation. After a detour through Gnome I
> > > finally came back to fvwm, and glad I did.
> > 
> > Ah, that's the thing. They give you mutter (it's a GNOME thing) and they
> > give you weston (a reference 'window manager').
> > Both lose in usability to my openbox setup.
> 
> Hey. It's free software. Shouldn't we be rather saying "we give
> ourselves [2] this and that?" Who's "they" anyway

I'm not a part of Debian project, I'm just a user.
While I can build a package or two if a need arises, I'm too lazy to
play this "maintainer for myself" role too often.
So I (the user) use the packages they (maintainers) give me.

And I use "they" as a way of referring the group of people I'm not
acquainted with, or whose identities are not relevant to the question
discussed. Fits here, IMO.

Reco

Re: Re: Problem loading Debian 9.8.0

[Patrick Gallagher]

Hi Keith, Liam,

I got it working. It was a simple setting in Virtual box I had to enable to
load other os's.

Thanks for your help with it

Patrick

Re: Remplacement de amarok sous KDE (player de musique)

[didier gaumet]

il y a un comparatif sur Wikipedia, ça te donnera peut-être des idées:
 https://en.wikipedia.org/wiki/Comparison_of_audio_player_software

Re: [sbuild] how to create chroot environment

[Alexei Fedotov]

I've installed schroot from http://deb.debian.org/debian and it
worked. Thanks again for your help.
--
Carry a towel
http://dataved.ru/
+7 916 562 8095

[1] Join Alexei Fedotov @linkedin, http://ru.linkedin.com/in/dataved/
[2] Join Alexei Fedotov @facebook, http://www.facebook.com/openmeetings
[3] Start using Apache Openmeetings today, http://openmeetings.apache.org/

On Mon, Apr 15, 2019 at 2:30 PM Alexei Fedotov  wrote:
>
> Georgi, thanks!
> it seems schroot package is somehow missed in my repository, I will
> look into it.
>
> --
> Carry a towel
> http://dataved.ru/
> +7 916 562 8095
>
> [1] Join Alexei Fedotov @linkedin, http://ru.linkedin.com/in/dataved/
> [2] Join Alexei Fedotov @facebook, http://www.facebook.com/openmeetings
> [3] Start using Apache Openmeetings today, http://openmeetings.apache.org/
>
> On Mon, Apr 15, 2019 at 2:23 PM Georgi Naplatanov  wrote:
> >
> > On 4/15/19 2:02 PM, Alexei Fedotov wrote:
> > > Hello,
> > > I've installed sbuild ver 0.73.0-4 and tried creating chroot environment
> > >
> > > I used the following command and get an error.
> > >
> > > devops@devops:~/git/docker.io$ sudo sbuild-createchroot
> > > --include=eatmydata,ccache,gnupg unstable
> > > /srv/chroot/unstable-amd64-sbuild http://deb.debian.org/debian
> > > open3: exec of schroot -l --all-source-chroots failed: No such file or
> > > directory at /usr/sbin/sbuild-createchroot line 217.
> > >
> > > It seems "schroot" chommand is called, and it is nowhere to be found.
> >
> > "schroot" is a Debian package and you can install it easily.
> >
> > > How could I create the chroot env?
> >
> > There are other ways (debootstrap for example) but if you want to use
> > "sbuild" then "schroot" is the preferred way I think.
> >
> > Kind regards
> > Georgi
> >

Re: Correct way to install Intermediate certificates in Debian

[Alexander V. Makartsev]

On 13.04.2019 23:21, Tyler A wrote:
> I found a temporary solution that at least lets me visit the sites in Firefox.
>
> However this doesn't fix OpenSSL (thus things like curl, wget).
>
> #!/usr/bin/env bash
>
> sudo apt-get install libnss3-tools
>
> downloadCerts=(http://cacerts.thawte.com/ThawteRSACA2018.crt
>http://cacerts.geotrust.com/GeoTrustRSACA2018.crt)
>
> wget -c "${downloadCerts[@]}"
>
> for f in *.crt; do
> fbasename=${f%.crt}
> openssl x509 -inform der -outform pem -in "$f" -out "$fbasename".pem
> find ~ -name cert9.db -printf '%h\0' |
> while IFS= read -rd '' certDir; do
> certutil -A -n "${fbasename}" -t "TCu,Cuw,Tuw" -i "${fbasename}".pem 
> -d sql:"$certDir"
> done
> done
>
This script imports certificates into Mozilla Firefox own NSS DB.
You can do the same procedure more easily in Firefox GUI with
"Certificate Manager". ("Preferences" >> "Privacy & Security", click
"View Certificates")

-- 
With kindest regards, Alexander.

⢀⣴⠾⠻⢶⣦⠀ 
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org
⠈⠳⣄ 

Re: [sbuild] how to create chroot environment

[Alexei Fedotov]

Georgi, thanks!
it seems schroot package is somehow missed in my repository, I will
look into it.

--
Carry a towel
http://dataved.ru/
+7 916 562 8095

[1] Join Alexei Fedotov @linkedin, http://ru.linkedin.com/in/dataved/
[2] Join Alexei Fedotov @facebook, http://www.facebook.com/openmeetings
[3] Start using Apache Openmeetings today, http://openmeetings.apache.org/

On Mon, Apr 15, 2019 at 2:23 PM Georgi Naplatanov  wrote:
>
> On 4/15/19 2:02 PM, Alexei Fedotov wrote:
> > Hello,
> > I've installed sbuild ver 0.73.0-4 and tried creating chroot environment
> >
> > I used the following command and get an error.
> >
> > devops@devops:~/git/docker.io$ sudo sbuild-createchroot
> > --include=eatmydata,ccache,gnupg unstable
> > /srv/chroot/unstable-amd64-sbuild http://deb.debian.org/debian
> > open3: exec of schroot -l --all-source-chroots failed: No such file or
> > directory at /usr/sbin/sbuild-createchroot line 217.
> >
> > It seems "schroot" chommand is called, and it is nowhere to be found.
>
> "schroot" is a Debian package and you can install it easily.
>
> > How could I create the chroot env?
>
> There are other ways (debootstrap for example) but if you want to use
> "sbuild" then "schroot" is the preferred way I think.
>
> Kind regards
> Georgi
>

Re: Cannot re-install synaptic on Buster.

[tomas]

On Mon, Apr 15, 2019 at 11:15:48AM +0300, Reco wrote:
>   Hi.
> 
> On Mon, Apr 15, 2019 at 09:56:04AM +0200, to...@tuxteam.de wrote:
> > On Mon, Apr 15, 2019 at 10:42:19AM +0300, Reco wrote:
> > > 
> > > On Mon, Apr 15, 2019 at 09:14:30AM +0200, to...@tuxteam.de wrote:

[...]

> > This was admittedly a bit provocative -- no offense intended.
> 
> None taken. I saw the smiley ☺.

Phew :)

> > > A short-term solution at best, although I'll avoid Wayland in buster.
> > 
> > Why do you think it is a short term solution?
> 
> Because GNOME. GNOME's upstream said their word loud and clear, and that
> word is - 'thou shall use Wayland for it is our favorite toy now'.

Yes, for GNOME users that's right. And GNOME is Debian's default DE.
But not the only one, and you don't even have to have a DE (I haven't
one, for example).

> A modern GNOME project is known for feature removal [...]

I don't like myself many of the choices GNOME has taken. Nevertheless,
its intention is to make user's lives more enjoyable [1], and that
is commendable. For "my" end users (i.e. those for whom I play
"local friendly hacker") I tend to help them taking their choices.
Some are fine with modern GNOME (that means I have to have some
working knowledge of that), others run away, screaming in horror
(they usually settle on something like Mate or XFCE).

Myself? As I already said: to me, a desktop environment is an
abomination. Give me a "classical" window manager and I'm your
guest.

As elsewhere, I'd say: diversity rocks!

> Luckily for us, Debian stable users, we're promised a lack of behaviour
> changes during the lifecycle of a stable release. And Debian keeps that
> promise most of the time [...]

You make it sound as if there were some cabal behind Debian. I think
Debian (folks) will be happy to keep alternatives viable as long as
there is someone around willing to do the legwork.

Watch again systemd: while the default in Debian, it is perfectly
possible to install a Debian system without it (mine is SysV, and
I do play around with installers for raspi). And quite a bit of
the necessary legwork (SysV init scripts for packages et al) *is
being done by the respective package maintainers, many of whom may
be systemd proponents... just because they think your choice is
important!*

For me, that's awesome. That is how civilisation works. That's why
I tend to go berserk every time I see mud being slung at them.
We might disagree, but we shouldn't sling mud at people giving us
software for free. Discussion, Bug reports, patches, all fine.
But no mud.

> > This is more or less my situation. After a detour through Gnome I
> > finally came back to fvwm, and glad I did.
> 
> Ah, that's the thing. They give you mutter (it's a GNOME thing) and they
> give you weston (a reference 'window manager').
> Both lose in usability to my openbox setup.

Hey. It's free software. Shouldn't we be rather saying "we give
ourselves [2] this and that?" Who's "they" anyway

Now let me step down from my soapbox.

Cheers

[1] I'm applying some amount of Hanlon's razor here
[2] In the reciprocal, not in the egocentric sense

-- t


signature.asc
Description: Digital signature

Re: Correct way to install Intermediate certificates in Debian

[Alexander V. Makartsev]

On 13.04.2019 21:20, Tyler A wrote:
> On 13/4/19 3:57 pm, Alexander V. Makartsev wrote:
>> On 13.04.2019 19:40, Tyler A wrote:
>>> Hi,
>>>
>>> I had trouble visiting these two websites in Firefox, Epiphany and
>>> verifying with OpenSSL.
>>>
>>> - Births Deaths and Marriages (Government of South Australia)
>>>   https://bdm.cbs.sa.gov.au/bdmsaonline/dbweb.asp?dbcgm=1=oac
>>>
>>> - Hostplus Superannuation Fund
>>>   https://hostplus.com.au/
>>>
>>> ...
>> I can access both sites without any problems with my browser (Firefox).
> Keep in mind, you must do this in a new profile. If you've ever visited
> a website which has used the certificate it will be cached, and the site
> will work. 
Yes, my mistake, I've neglected that and now was able to repro your issue.
As for your question about certificate installation. Apparently (I hope
somebody will correct me on that),
p11-kit doesn't provide a writable software pkcs#11 token for user to
add/remove CA certificates, but
'gnome-keyring' does, and you should use it if you want to work with
personal certificates, private keys, etc.
However, most applications won't recognize the objects from
gnome-keyring pkcs#11 module automatically and
should be configured to use it by providing correct pkcs#11 module URI.

So, that aside, in order to add CA certificates to "System Trust" token,
provided by "p11-kit-trust" pkcs#11 module,
you have to use "update-ca-certificates" utility.
1. Download CA certificates.
2. Process them with "openssl" to make them trusted and put them in
special folder recognized by "update-ca-certificates" utility.
    $ sudo openssl x509 -inform der -in ./ThawteRSACA2018.crt -trustout
-out /usr/local/share/ca-certificates/ThawteRSACA2018.crt
    $ sudo openssl x509 -inform der -in ./GeoTrustRSACA2018.crt
-trustout -out /usr/local/share/ca-certificates/GeoTrustRSACA2018.crt

3. Start "update-ca-certificates" utility
    $ sudo update-ca-certificates -f

4. Check that certificates were added with "trust" utility.
    $ trust list --filter=ca-anchors --purpose=server-auth | egrep
"GeoTrust RSA CA 2018|Thawte RSA CA 2018"
        label: GeoTrust RSA CA 2018
        label: Thawte RSA CA 2018

That is it. Now a few remarks. Mozilla Firefox uses it's own NSS DB to
store certificates and don't use other pkcs#11 modules and tokens, such
as "System Trust", by default, so you have to configure it.
In Firefox browser, open "Preferences" >> "Privacy & Security", click
"Security Devices" and click "Load".
Type in module name and module path:
    Name: "p11-kit-trust PKCS#11 Module"
    Path: "/usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so"
New module should appear on the left pane with "System Trust" token. If
you select it, it will have "/etc/ssl/certs/ca-certificates.crt" in its
Description.
After that, problem sites should work without any additional actions.

Any program that automatically uses compiled certificates in
"/etc/ssl/certs/ca-certificates.crt" (updated by
"update-ca-certificates"), like curl, wget, openssl, etc, should work
with those sites too.
Additionally you can specify a pkcs#11 token URI to use in their command
line parameters:
    $ p11tool --list-tokens
    Token 0:
            URL:
pkcs11:model=p11-kit-trust;manufacturer=PKCS%2311%20Kit;serial=1;token=System%20Trust
        Label: System Trust
        Type: Trust module
        Manufacturer: PKCS#11 Kit
        Model: p11-kit-trust
        Serial: 1
        Module: p11-kit-trust.so
>
> I got the same certificates from a European VPN as I did from in
> Australia (not what you got) which appears to be a CDN.
>

-- 
With kindest regards, Alexander.

⢀⣴⠾⠻⢶⣦⠀ 
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org
⠈⠳⣄ 

Re: [sbuild] how to create chroot environment

[Georgi Naplatanov]

On 4/15/19 2:02 PM, Alexei Fedotov wrote:
> Hello,
> I've installed sbuild ver 0.73.0-4 and tried creating chroot environment
> 
> I used the following command and get an error.
> 
> devops@devops:~/git/docker.io$ sudo sbuild-createchroot
> --include=eatmydata,ccache,gnupg unstable
> /srv/chroot/unstable-amd64-sbuild http://deb.debian.org/debian
> open3: exec of schroot -l --all-source-chroots failed: No such file or
> directory at /usr/sbin/sbuild-createchroot line 217.
> 
> It seems "schroot" chommand is called, and it is nowhere to be found.

"schroot" is a Debian package and you can install it easily.

> How could I create the chroot env?

There are other ways (debootstrap for example) but if you want to use
"sbuild" then "schroot" is the preferred way I think.

Kind regards
Georgi

Re: Remplacement de amarok sous KDE (player de musique)

[Tulum]

Le lundi 15 avril 2019, 12:14:47 CEST Erwan David a écrit :
> avec les dernières mises à jour de Buster, il y a des problèmes de
> dépendances sur amarok.
> 
> Le bug ayant été signalé en février sans aucune réponse ça fait penser
> que le soft risque d'être abandonné.
> 
> Je cherche donc un autre player pour le remplacer.
> 
> Les features indispensables pour moi : le player prend la musique là où
> JE lui dit dans la configuration, pas ailleurs.
> 
> Possibilité de jouer des albums entiers dans un ordre aléatoire (quand
> on écoute du classique ou des concerts l'aléatoire par morceau c'est pas
> beau).
> 
> Quelqu'un a des idées de soft à essayer ?
> 
> Merci
Clementine

[sbuild] how to create chroot environment

[Alexei Fedotov]

Hello,
I've installed sbuild ver 0.73.0-4 and tried creating chroot environment

I used the following command and get an error.

devops@devops:~/git/docker.io$ sudo sbuild-createchroot
--include=eatmydata,ccache,gnupg unstable
/srv/chroot/unstable-amd64-sbuild http://deb.debian.org/debian
open3: exec of schroot -l --all-source-chroots failed: No such file or
directory at /usr/sbin/sbuild-createchroot line 217.

It seems "schroot" chommand is called, and it is nowhere to be found.
How could I create the chroot env?

--
Carry a towel
http://dataved.ru/
+7 916 562 8095

[1] Join Alexei Fedotov @linkedin, http://ru.linkedin.com/in/dataved/
[2] Join Alexei Fedotov @facebook, http://www.facebook.com/openmeetings
[3] Start using Apache Openmeetings today, http://openmeetings.apache.org/

Re: Cannot re-install synaptic on Buster.

[Brad Rogers]

On Mon, 15 Apr 2019 20:12:34 +1000
Keith Bainbridge  wrote:

Hello Keith,

>So if I don't install Wayland, I should not loose synaptic - for those 
>odd times I need it to help me find something?

That /would/ have been the case, yes.  Not so now; Synaptic is no longer
available in testing.  You can, of course, d/l synaptic (the version
in sid is currently the same as the one that's been deleted from
testing) and install using dpkg.

If you're happy to use snapshot.debian, you can re-install Synaptic that
way.  Be sure to disable the relevant repo entry as soon as you've
performed the installation. 

>And the manual installation I did on my vbox test machine should be OK?

That I have no idea about.  Sorry.

-- 
 Regards  _
 / )   "The blindingly obvious is
/ _)radnever immediately apparent"
No you can't hop into my shower
Leave Me Alone (I'm Lonely) - P!nk


pgpUhx7QlUjxr.pgp
Description: OpenPGP digital signature

Re: Problem loading Debian 9.8.0

[Keith Bainbridge]

On 13/4/19 2:55 pm, Liam O'Toole wrote:

On 2019-04-10, Patrick Gallagher  wrote:

--9c7f3b05862d2a11
Content-Type: text/plain; charset="UTF-8"

Hi Suppot,


This is not support. This is a mailing list for users of debian, just like you.


I installed Debian 9.8.0 on my laptop using an iso DVD image and Virtualbox
6.0.4

https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/

I create a virtual drive of 50GB and loaded the ISO from a local folder on
my Laptop.

The installation went fine but when it went to boot the Virtual box
software but the Debian OS didn't load.


[...]


Any suggestions would be welcome.

Thanks,
Patrick


I don't use debian as a guest OS on virtualbox, but I know that there
are various prebuilt debian images[1] for that platform. You might have
better luck with one of those.

1: https://www.osboxes.org/debian/




I do, as a way of testing my 'odd' ideas at times.

The process generally just works.  Most common problem is that sometimes 
vbox tries to boot the .iso again, so try removing that and floppy from 
the boot options.


Are you using vbox 6.04? A couple of us found minor issues with one of 
the recent minor updates which have now disappeared.



I'm not very patient when trying to fix something as new as a fresh 
install. If it fails, I try again - watching everything I do and I end 
up happy.



Keep trying


Keith Bainbridge

keithr...@gmail.com
+61 (0)447 667 468

Re: Exploring package interrelationships

[Richard Owlett]

On 04/15/2019 02:12 AM, to...@tuxteam.de wrote:

On Sun, Apr 14, 2019 at 08:38:48AM -0500, Richard Owlett wrote:

[...]


In past conversations it has been suggested that I do a typical
install and just un-install the un-desired elements:


Start with what debootstrap [1] gives you and work up from there.
This is what any regular Debian installer does to get itself started.
That's what I do when trying to get a minimal install.


Brings back memories. I had tried to do something similar years ago when 
I first got started with Linux. I didn't have enough background and got 
thoroughly *lost*. THANKS for the reminder. IIRC Multistrap may match my 
mindset better. I've a lot of re-reading to do (jessie was current last 
time ;)




But beware: debootstrap is perhaps more minimal than what you might
consider minimal. No GUI. Not even an SSH daemon. But apt.


ROFL I once said there was no need for floppies larger than 1.44M - does 
that date me?




Debootstrap is a harsh mistress (yeah, stolen from somewhere). But
you might end up liking it once you get the hang of it...


I liked it bu NEVER did get the hang of it ;)




[1] Apart from having (of course) its extensive manual page,
   it has an entry in the Debian wiki:
   https://wiki.debian.org/Debootstrap

-- t

Re: terminal with right-click = paste?

[Vincent Lefevre]

On 2019-04-15 12:53:03 +0200, Vincent Lefevre wrote:
> If you want to replace the system default X11 session, do this
> with a .xinitrc script. By default, it is /etc/X11/xinit/xinitrc,
> which does: . /etc/X11/Xsession

Actually startx (via xinit) honors .xinitrc, but not the graphical
login managers. See also

  https://lists.debian.org/debian-user/2013/12/msg00903.html

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Re: terminal with right-click = paste?

[Vincent Lefevre]

On 2019-04-11 08:19:13 -0400, Greg Wooledge wrote:
> On Thu, Apr 11, 2019 at 01:28:18AM -0400, Lee wrote:
> > so another package I need to install..
> > 
> > .. which breaks the login process for me :(
> > 
> > $ echo xinput > ~/.xsession
> 
> If you use a .xsession file, you have to go all in.  Your ~/.xsession
> file will completely replace the system default X11 session.

No, it just replaces the session manager or window manager
(see /etc/X11/Xsession.d/50x11-common_determine-startup).
But /etc/X11/Xsession runs as normal.

In short, /etc/X11/Xsession defines USERXSESSION=$HOME/.xsession
which is used by /etc/X11/Xsession.d/50x11-common_determine-startup
to set the STARTUP variable, and this variable is used at the end
of the X session init, in /etc/X11/Xsession.d/99x11-common_start,
which does: exec $STARTUP

If you want to replace the system default X11 session, do this
with a .xinitrc script. By default, it is /etc/X11/xinit/xinitrc,
which does: . /etc/X11/Xsession

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Re: Remplacement de amarok sous KDE (player de musique)

[Bernard Schoenacker]

- Mail original - 

> De: "Erwan David" 
> À: "Liste Debian francophone" 
> Envoyé: Lundi 15 Avril 2019 12:14:47
> Objet: Remplacement de amarok sous KDE (player de musique)

> avec les dernières mises à jour de Buster, il y a des problèmes de
> dépendances sur amarok.
> Le bug ayant été signalé en février sans aucune réponse ça fait
> penser que le soft risque d'être abandonné.
> Je cherche donc un autre player pour le remplacer.

> Les features indispensables pour moi : le player prend la musique là
> où JE lui dit dans la configuration, pas ailleurs.
> Possibilité de jouer des albums entiers dans un ordre aléatoire
> (quand on écoute du classique ou des concerts l'aléatoire par
> morceau c'est pas beau) .
> Quelqu'un a des idées de soft à essayer ?
> Merci

bonjour,

pour la partie audio : audacious

pour plus de détail :
https://audacious-media-player.org/

merci

slt
bernard

Re: Cannot re-install synaptic on Buster.

[Keith Bainbridge]

On 15/4/19 6:12 pm, Brad Rogers wrote:

On Mon, 15 Apr 2019 17:32:47 +1000
Keith Bainbridge  wrote:

Hello Keith,


I'm more intrigued that synaptic reportedly removed itself.
How is this possible, or did some other package force its removal?


Removal occurred because of otherwise unresolvable conflicts. In this
case, with Wayland.  OP apparently didn't notice Synaptic was to be
removed, and proceeded with the upgrade.




So if I don't install Wayland, I should not loose synaptic - for those 
odd times I need it to help me find something?


And the manual installation I did on my vbox test machine should be OK?


Thanks



Keith Bainbridge

ke1th3...@gmail.com
+61 (0)447 667 468

Remplacement de amarok sous KDE (player de musique)

[Erwan David]

avec les dernières mises à jour de Buster, il y a des problèmes de
dépendances sur amarok.

Le bug ayant été signalé en février sans aucune réponse ça fait penser
que le soft risque d'être abandonné.

Je cherche donc un autre player pour le remplacer.

Les features indispensables pour moi : le player prend la musique là où
JE lui dit dans la configuration, pas ailleurs.

Possibilité de jouer des albums entiers dans un ordre aléatoire (quand
on écoute du classique ou des concerts l'aléatoire par morceau c'est pas
beau).

Quelqu'un a des idées de soft à essayer ?

Merci

Re: install par copie

[hamster]

Le 04/04/2019 à 20:30, ajh-valmer a écrit :
> Après, je copie Debian à partir d'un de mes 3 ordinateurs,
> et j'adapte fstab, toujours sous slitaz et grub avec Super Grub Disk .
> Reboot, et je me retrouve avec un système Debian complet prêt à l'emploi.

Ca veut dire que tu a un nom d'utilisateur identique sur tous les ordis
que tu installe ? Si non, comment tu gère le renommage ?

Re: Cannot re-install synaptic on Buster.

[Dominic Knight]

On Mon, 2019-04-15 at 01:24 -0400, Kieran Smyth wrote:
> Hi,
>
> For reasons unknown to me, synaptic uninstalled itself about three
> weeks ago. I am using Buster on the desktop, with MATE as my desktop
> environment.
>
> When i open up a terminal and try to re-install it, i get the
> following-
> SNIP
>
> I like using a GUI frontend to apt, and if anyone can help me get it
> back on my system i'd really appreciate it.
>
> Thank you in advance for any help that may be provided.
>
> - Kieran

The good news is that someone has filed a patch that works around these
issues with Wayland. So it should be back for other GUI users with a
failure message for Wayland users once it is passed through
experimental (in time for Buster release).

Re: Liquorix kernel?

[Alexander V. Makartsev]

On 15.04.2019 5:37, Francisco M Neto wrote:
> Greetings!
>
>   I have just now heard about this custom kernel directed to
> performance and I was wondering - anyone here has any experience with
> that?
>   I'd rather just download their .config and compile the kernel
> from a deb src package, any thoughts?
>
> Thanks in advance.
> Francisco
>
A quick glance at tests [1] makes me not bother with Liquorix yet.
As you can see, performance is a double edged sword, you gain a little
more responsiveness, but loose on throughput.
Of course it should be tested for your workload and probably also
perform a security audit check of all modifications in Liquorix.


[1]
https://www.phoronix.com/scan.php?page=news_item=Liquorix-Linux-4.17-Kernel

-- 
With kindest regards, Alexander.

⢀⣴⠾⠻⢶⣦⠀ 
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org
⠈⠳⣄ 

Re: HS: iptables interface de sortie par la même que l'entrée.

[Jérémy Prego]

Le 15/04/2019 à 09:19, daniel huhardeaux a écrit :
> Il faut compléter par le routage genre
>
> # marked packets go out through there route
> ip rule add fwmark $markISP1 table isp1
> ip rule add fwmark $markISP2 table isp2
>

oui oui c'est fait :) j'ai oublié de le préciser dans mon premier message
ip rule:
32760:    from all fwmark 0x3 lookup 103
ip route show table 103
default via 145.239.153.11 dev ppp0

> Daniel
>
Jerem

Re: INFO: task blocked for more than 120 seconds

[Stephane Ascoet]

Le 12/04/2019 à 10:41, steve a écrit :

Et vous ?


Bonjour, tu n'aurais pas une recherche Ldap qui serait lancee lors de 
certains acces? J'avais le meme souci sur mon portable du travail, 
j'avais trouve une solution de contournement sur le Web. Un patch a ete 
fait mais n'a toujours pas ete implemente, il faut donc faire les 
modifications dans le code par nous memes(il y a deux conditions a 
modifier).
J'aurais du mal a te donner des indications plus precises car le 
portable en question a ete vole et j'etais tombe sur ces forums en 
cherchant autre chose...

--
Cordialement, Stephane Ascoet

Re: Pb de scanner brother

[MERLIN Philippe]

Le dimanche 14 avril 2019, 18:25:00 CEST Daniel Caillibaud a écrit :
> Bonjour,
> 
> J'ai un souci sur un PC avec une imprimante / scanner brother DCP-7010.
> 
> Ça marchait très bien sur un vieux PC 32 i386 sous lenny/squeeze/jessie,
> mais sur un nouveau PC installé en stretch amd64 pas moyen de lui
> faire reconnaître le scanner.
> 

> Bref, je vois plus trop où chercher… si qqun a une idée je suis preneur ;-)
En faisant une recherche sur le net pour t'aider j'ai trouvé cela sur le net 
qui semble 
correspondre à ton problème, par contre je n'ai pas vu la solution.
pb scanner DCP 7010[1] 
Mes deux sous.
Philippe Merlin



[1] https://forum.ubuntu-fr.org/viewtopic.php?id=2012288

Re: Exploring package interrelationships

[Peter Wiersig]

Richard Owlett  writes:
> Long term goal: *personal* definition of a minimalist Debian
>
> current goal: grok how packages interact

http://www.macfreek.nl/memory/Dependency_Graph_Debian_Packages
TLDR:
$ apt-cache dotty mate-desktop > dependency-graph.dot
$ dot -Tpng  dependency-graph.dot

That either creates files named after the input or at least shows a
graphic of the package you specified.

I think I remember and older planet.debian.org post where someone else
had done similar.  Have not found it in a very short research session.


Alternatively explore interactive with aptitude when you disable the
solver there and pick the resulting installation by hand, and decide
which suggest/recommend you follow, and which non-essential package you
might even not install.

Peter

Re: Cannot re-install synaptic on Buster.

[Rick Thomas]

> On Apr 14, 2019, at 11:03 PM, Reco  wrote:
> 
> On Mon, Apr 15, 2019 at 01:24:32AM -0400, Kieran Smyth wrote:
>> For reasons unknown to me, synaptic uninstalled itself about three weeks
>> ago. I am using Buster on the desktop, with MATE as my desktop environment.
> 
> Synaptic was removed from testing two weeks ago, see #818366.
> 
>> I like using a GUI frontend to apt, and if anyone can help me get it back
>> on my system i'd really appreciate it.
> 
> You're not supposed to use synaptic in Wayland session anymore. Consider
> using gnome-packagekit instead.

Or try muon.  (apt install muon)

I don’t know if it is fully wayland compatible, or if it’s just not well enough 
known to show up on the remover’s radar screens.

In any case, I find it’s a good substitute for synaptic.

Rick

Re: Buster presentation info

[Reco]

Hi.

On Mon, Apr 15, 2019 at 08:38:15AM +0100, Paul Sutton wrote:
> Does anyone know the version of Wayland being used?

$ dpkg -s libwayland-server0 | grep Version
Version: 1.16.0-1

> and what other basic info could be included in a technical overview without
> overwhelming the viewer ?

A shipped browser(s) version, maybe? Firefox, Chromium, those things.

Reco

Re: Cannot re-install synaptic on Buster.

[Paul Sutton]

On 15/04/2019 09:15, Reco wrote:
>   Hi.
> 
> On Mon, Apr 15, 2019 at 09:56:04AM +0200, to...@tuxteam.de wrote:
>> On Mon, Apr 15, 2019 at 10:42:19AM +0300, Reco wrote:
>>>
>>> On Mon, Apr 15, 2019 at 09:14:30AM +0200, to...@tuxteam.de wrote:
>>
>> [...]
>>
 Or just ditch Wayland (/me runs for cover ;-)
>>
>> This was admittedly a bit provocative -- no offense intended.
> 
> None taken. I saw the smiley ☺.
> 
> 
>>> A short-term solution at best, although I'll avoid Wayland in buster.
>>
>> Why do you think it is a short term solution?
> 
> Because GNOME. GNOME's upstream said their word loud and clear, and that
> word is - 'thou shall use Wayland for it is our favorite toy now'.
> 
> A modern GNOME project is known for feature removal. There was no single
> GNOME release since the 3.0 version which lacked "we've removed A and
> we've removed your ability to do B, because reasons" in the changelog.
> 
> Therefore one can expect the removal of the ability to run GNOME with
> plain X (it's possible for now), and in GNOME speak it's will be a
> "feature".
> 
> Debian project, like the most distributions, ships GNOME as a
> primary/default Desktop Envirionment. Therefore one can expect that this
> GNOME's "feature"-to-be will be included in Debian sooner or later, and
> once done the "feature" can affect other, seemingly unrelated packages.
> A synaptic comes to mind here ☺.
> 
> Luckily for us, Debian stable users, we're promised a lack of behaviour
> changes during the lifecycle of a stable release. And Debian keeps that
> promise most of the time.
> 
> 
> So, I'll keep using X in buster, as I stopped using GNOME long time ago
> (etch was the testing, grass was greener etc).
> 
> 
>>> Tried the thing, did not like all two 'window managers' from the main
>>> archive that come with the Wayland.
>>
>> This is more or less my situation. After a detour through Gnome I
>> finally came back to fvwm, and glad I did.
> 
> Ah, that's the thing. They give you mutter (it's a GNOME thing) and they
> give you weston (a reference 'window manager').
> Both lose in usability to my openbox setup.
> 
> Reco
> 

Hi

I prefer and will stick to lxde,  however with this presentation it is
probably better to stick to the default options,  which I am guesing
will be wayland + gnome 3.  Of course I want to also make it simple
enough so people can easily edit it for their needs.

If I select desktop environment + Lxde,  I would assume that the system
will go back to X + lxde.

Paul

-- 
Paul Sutton
http://www.zleap.net
https://www.linkedin.com/in/zleap/
gnupg : 7D6D B682 F351 8D08 1893  1E16 F086 5537 D066 302D

Re: Cannot re-install synaptic on Buster.

[Reco]

Hi.

On Mon, Apr 15, 2019 at 09:56:04AM +0200, to...@tuxteam.de wrote:
> On Mon, Apr 15, 2019 at 10:42:19AM +0300, Reco wrote:
> > 
> > On Mon, Apr 15, 2019 at 09:14:30AM +0200, to...@tuxteam.de wrote:
> 
> [...]
> 
> > > Or just ditch Wayland (/me runs for cover ;-)
> 
> This was admittedly a bit provocative -- no offense intended.

None taken. I saw the smiley ☺.


> > A short-term solution at best, although I'll avoid Wayland in buster.
> 
> Why do you think it is a short term solution?

Because GNOME. GNOME's upstream said their word loud and clear, and that
word is - 'thou shall use Wayland for it is our favorite toy now'.

A modern GNOME project is known for feature removal. There was no single
GNOME release since the 3.0 version which lacked "we've removed A and
we've removed your ability to do B, because reasons" in the changelog.

Therefore one can expect the removal of the ability to run GNOME with
plain X (it's possible for now), and in GNOME speak it's will be a
"feature".

Debian project, like the most distributions, ships GNOME as a
primary/default Desktop Envirionment. Therefore one can expect that this
GNOME's "feature"-to-be will be included in Debian sooner or later, and
once done the "feature" can affect other, seemingly unrelated packages.
A synaptic comes to mind here ☺.

Luckily for us, Debian stable users, we're promised a lack of behaviour
changes during the lifecycle of a stable release. And Debian keeps that
promise most of the time.


So, I'll keep using X in buster, as I stopped using GNOME long time ago
(etch was the testing, grass was greener etc).


> > Tried the thing, did not like all two 'window managers' from the main
> > archive that come with the Wayland.
> 
> This is more or less my situation. After a detour through Gnome I
> finally came back to fvwm, and glad I did.

Ah, that's the thing. They give you mutter (it's a GNOME thing) and they
give you weston (a reference 'window manager').
Both lose in usability to my openbox setup.

Reco

Re: Cannot re-install synaptic on Buster.

[Brad Rogers]

On Mon, 15 Apr 2019 17:32:47 +1000
Keith Bainbridge  wrote:

Hello Keith,

>I'm more intrigued that synaptic reportedly removed itself.
>How is this possible, or did some other package force its removal?

Removal occurred because of otherwise unresolvable conflicts. In this
case, with Wayland.  OP apparently didn't notice Synaptic was to be
removed, and proceeded with the upgrade.

-- 
 Regards  _
 / )   "The blindingly obvious is
/ _)radnever immediately apparent"
I must be hallucinating, watching angels celebrating
There Must Be An Angel (Playing With My Heart) - Eurythmics


pgpAv1lQRW05l.pgp
Description: OpenPGP digital signature

Re: Cannot re-install synaptic on Buster.

[tomas]

On Mon, Apr 15, 2019 at 10:42:19AM +0300, Reco wrote:
> 
> On Mon, Apr 15, 2019 at 09:14:30AM +0200, to...@tuxteam.de wrote:

[...]

> > Or just ditch Wayland (/me runs for cover ;-)

This was admittedly a bit provocative -- no offense intended.

> A short-term solution at best, although I'll avoid Wayland in buster.

Why do you think it is a short term solution?

> Tried the thing, did not like all two 'window managers' from the main
> archive that come with the Wayland.

This is more or less my situation. After a detour through Gnome I
finally came back to fvwm, and glad I did.

I deeply dislike the Wayland approach and hope I die of old age
before I have to switch.

Cheers
-- t


signature.asc
Description: Digital signature

Re: Cannot re-install synaptic on Buster.

[Reco]

Hi.

On Mon, Apr 15, 2019 at 08:18:20AM +0100, Paul Sutton wrote:
> Thanks for your reply, as, on a related note, this helps me with the
> basic presentation that I an working on.  I was aware that synaptic is
> now removed, but I wasn't aware what it it had been replaced with

Not 'replaced' per se. gnome-packagekit is not a new software - as far
as Debian concerned - it predates jessie. Its features are inferior to
synaptic, which is what one can expect from the GNOME software, so its
no wonder that its popularity was low in Debian. Until now, that is, as
gnome-packagekit seem to be the only viable alternative to synaptic
assuming the user will run a Wayland session.
And said session is the default with GNOME, as of buster.


> I get info on what is in buster from this page
> https://wiki.debian.org/NewInBuster

As I wrote, gnome-packagekit ain't new. I expect that [1] will be
updated sooner or later though.


> Would it be worth updating this page so others know to use
> gnome-packagekit instead, even if this information is elsewhere.

I suggest you to update [2]. After all, they made this page for a
reason, and it provides obsolete information as of buster.

Reco

[1] https://www.debian.org/doc/books
[2] https://wiki.debian.org/QuickPackageManagement

Re: Cannot re-install synaptic on Buster.

[Keith Bainbridge]

Good afternoon All


I'm more intrigued that synaptic reportedly removed itself.


How is this possible, or did some other package force its removal?



Keith Bainbridge

keithr...@gmail.com
+61 (0)447 667 468
On 15/4/19 3:24 pm, Kieran Smyth wrote:


For reasons unknown to me, synaptic uninstalled itself about three weeks 
ago. I am using Buster on the desktop, with MATE as my desktop environment.

Re: Cannot re-install synaptic on Buster.

[Reco]

Hi.

On Mon, Apr 15, 2019 at 09:14:30AM +0200, to...@tuxteam.de wrote:
> On Mon, Apr 15, 2019 at 09:03:47AM +0300, Reco wrote:
> > On Mon, Apr 15, 2019 at 01:24:32AM -0400, Kieran Smyth wrote:
> > > For reasons unknown to me, synaptic uninstalled itself about three weeks
> > > ago. I am using Buster on the desktop, with MATE as my desktop 
> > > environment.
> > 
> > Synaptic was removed from testing two weeks ago, see #818366.
> > 
> > > I like using a GUI frontend to apt, and if anyone can help me get it back
> > > on my system i'd really appreciate it.
> > 
> > You're not supposed to use synaptic in Wayland session anymore. Consider
> > using gnome-packagekit instead.
> 
> Or just ditch Wayland (/me runs for cover ;-)

A short-term solution at best, although I'll avoid Wayland in buster.
Tried the thing, did not like all two 'window managers' from the main
archive that come with the Wayland.

Reco

Buster presentation info

[Paul Sutton]

Hi

As previously mentioned, I am working on a basic (not too technical)
presentation for Buster.

Following the topic here on Synaptic in Buster being replaced with
gnome-packagekit

I am using LaTeX beamer for this and have included part of the table
source for a technical overview below:

Kernel & 4.x.x & supports smb encrypted shared \\
Wayland & xxx & xx \\
Gnome & 3.x  & Default Window Manager \\
gnome-packagekit & xx  & Default Package Manager \\

Does anyone know the version of Wayland being used? and what other
basic info could be included in a technical overview without
overwhelming the viewer ?

Once completed I can upload to the wiki or make generally available.

Thanks

Regards

Paul

-- 
Paul Sutton
http://www.zleap.net
https://www.linkedin.com/in/zleap/
gnupg : 7D6D B682 F351 8D08 1893  1E16 F086 5537 D066 302D

Re: HS: iptables interface de sortie par la même que l'entrée.

[daniel huhardeaux]

Le 15/04/2019 à 00:43, Jérémy Prego a écrit :

Bonjour,

en ce Dimanche nocturne je me décide à poser ma question ici. En effet,
je fais de la redirection d'IP en OUTPUT et en PREROUTING avec iptables.
depuis la machine routeur et le réseau local derrière c'est parfait la
machine jeremy.domain.net passe bien par la connexion que j'ai demandé a
Iptables.
Le souci est quand de la machine jeremy.domain.net qui se trouve donc
sur internet je cherche à contacter le routeur par son interface
principale, il se passe un truc très embêtant, Iptables renvoie les
réponses par l'interface que j'ai choisi pour ma redirection de
l'OUTPUT. Du coup, ça ne peut pas fonctionner, forcément.

est-ce qu'une solution existe pour que si ça arrive par l'interface
wan0, ça reparte par la même interface et que ça ne passe pas par les
règle que j'ai mis pour l'output ?

pour rappel, un petit exemple de ce que je fais:
##routage alternatif
iptables -t mangle -N ROUTING-POLICY
iptables -t mangle -A OUTPUT -j ROUTING-POLICY
iptables -t mangle -A PREROUTING -j ROUTING-POLICY
iptables -t mangle -D ROUTING-POLICY -d jeremy.domain.net -j MARK
--set-mark 0x3

une règle que j'ai testé mais sans succès vu que j'avais plus de
redirection vers 0x3 sur le routeur lui même:
iptables -t mangle -A ROUTING-POLICY -d jeremy.domain.tld ! -o wan0 -j
MARK --set-mark 0x3

merci beaucoup pour votre réponse :)


Il faut compléter par le routage genre

# marked packets go out through there route
ip rule add fwmark $markISP1 table isp1
ip rule add fwmark $markISP2 table isp2

en ayant créer les tables isp1 et isp2.

Supposant que tu as bien mis à jour /etc/iproute2/rt_tables ...

Daniel

Re: Cannot re-install synaptic on Buster.

[Paul Sutton]

On 15/04/2019 07:03, Reco wrote:
>   Hi.
> 
> On Mon, Apr 15, 2019 at 01:24:32AM -0400, Kieran Smyth wrote:
>> For reasons unknown to me, synaptic uninstalled itself about three weeks
>> ago. I am using Buster on the desktop, with MATE as my desktop environment.
> 
> Synaptic was removed from testing two weeks ago, see #818366.
> 
>> I like using a GUI frontend to apt, and if anyone can help me get it back
>> on my system i'd really appreciate it.
> 
> You're not supposed to use synaptic in Wayland session anymore. Consider
> using gnome-packagekit instead.
> 
> Reco
> 

Hi Reco,


Thanks for your reply, as, on a related note, this helps me with the
basic presentation that I an working on.  I was aware that synaptic is
now removed, but I wasn't aware what it it had been replaced with

I get info on what is in buster from this page

https://wiki.debian.org/NewInBuster

Would it be worth updating this page so others know to use
gnome-packagekit instead, even if this information is elsewhere.

Regards

Paul

-- 
Paul Sutton
http://www.zleap.net
https://www.linkedin.com/in/zleap/
gnupg : 7D6D B682 F351 8D08 1893  1E16 F086 5537 D066 302D

Re: Cannot re-install synaptic on Buster.

[tomas]

On Mon, Apr 15, 2019 at 09:03:47AM +0300, Reco wrote:
>   Hi.
> 
> On Mon, Apr 15, 2019 at 01:24:32AM -0400, Kieran Smyth wrote:
> > For reasons unknown to me, synaptic uninstalled itself about three weeks
> > ago. I am using Buster on the desktop, with MATE as my desktop environment.
> 
> Synaptic was removed from testing two weeks ago, see #818366.
> 
> > I like using a GUI frontend to apt, and if anyone can help me get it back
> > on my system i'd really appreciate it.
> 
> You're not supposed to use synaptic in Wayland session anymore. Consider
> using gnome-packagekit instead.

Or just ditch Wayland (/me runs for cover ;-)

Cheers
-- t


signature.asc
Description: Digital signature

Re: Exploring package interrelationships

[tomas]

On Sun, Apr 14, 2019 at 08:38:48AM -0500, Richard Owlett wrote:

[...]

> >>>In past conversations it has been suggested that I do a typical
> >>>install and just un-install the un-desired elements:

Start with what debootstrap [1] gives you and work up from there.
This is what any regular Debian installer does to get itself started.
That's what I do when trying to get a minimal install.

But beware: debootstrap is perhaps more minimal than what you might
consider minimal. No GUI. Not even an SSH daemon. But apt.

Debootstrap is a harsh mistress (yeah, stolen from somewhere). But
you might end up liking it once you get the hang of it...

Cheers

[1] Apart from having (of course) its extensive manual page,
  it has an entry in the Debian wiki:
  https://wiki.debian.org/Debootstrap

-- t


signature.asc
Description: Digital signature

Re: Cannot re-install synaptic on Buster.

[Reco]

Hi.

On Mon, Apr 15, 2019 at 01:24:32AM -0400, Kieran Smyth wrote:
> For reasons unknown to me, synaptic uninstalled itself about three weeks
> ago. I am using Buster on the desktop, with MATE as my desktop environment.

Synaptic was removed from testing two weeks ago, see #818366.

> I like using a GUI frontend to apt, and if anyone can help me get it back
> on my system i'd really appreciate it.

You're not supposed to use synaptic in Wayland session anymore. Consider
using gnome-packagekit instead.

Reco