Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?)

[Andrei POPESCU]

On Vi, 31 mai 19, 08:51:20, Greg Wooledge wrote:
> On Fri, May 31, 2019 at 11:47:26AM +0200, Pascal Hambourg wrote:
> > > https://wiki.debian.org/MergedUsr
> > 
> > The wiki says this page does not exist yet.
> 
> It's actually .
 
Right, thanks (again) Greg for correcting my mistakes.

My current setup doesn't allow for easy copy-pasting so I wrote that by 
hand and misremembered it :(

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature

Re: openjdk-8-jre for buster

[Gian Uberto Lauri]

> "BR" == Brad Rogers  writes:

BR> Not from Debian.  See https://tracker.debian.org/pkg/openjdk-8

BR> Short version: It's been removed and (to me it looks like) won't
BR> be back.

Do they run IcedTea against the OpenJDK 11 ?

-- 
 /\   ___Ubuntu: ancient
/___/\_|_|\_|__|___Gian Uberto Lauri_   African word
  //--\| | \|  |   Integralista GNUslamicomeaning "I can
\/ coltivatore diretto di software   not install
 già sistemista a tempo (altrui) perso...Debian"

Warning: gnome-config-daemon considered more dangerous than GOTO

Differences in the reported value of the Provides field in apt-cache

[aprekates]

I noticed the following difference in the reported
'Provides' value.

$ sudo apt-cache show python3
Package: python3

Provides: python3-profiler

$ sudo apt-cache showpkg python3
...
Provides:
3.5.3-1 - python3-profiler:i386 (= ) python3:any (= 3.5.3-1) 
python3-profiler (= ) python3-profiler:any (= )


I cant make sense of all those 'virtual' packages:
python3-profiler:i386 (= ) python3:any (= 3.5.3-1) python3-profiler (= ) 
python3-profiler:any (= )


The control file of python3_3.5.3-1_amd64.deb outputs only:
Provides: python3-profiler

Obviously those 'produced' Provides values declare sth related to 
architectures.But i dont

understand the logic.

We have a package : Architecture: amd64
That package provides python3:any ?  It'd made more sense to me to 
provide python3:amd64 , assuming

that there are other packages providing 'python3' 'functionality'.

Also i think that there is not other package 'providing' python3. So i 
cant understand why even that virtual package exists (if we assume that 
showpkg reports is also true).


Alexandros.

Re: netinst bad display after first screen

[Felix Miata]

Blair, Charles E III composed on 2019-05-31 20:40 (UTC):

>I have downloaded the current netinst and
> burned it to a DVD. 

I burned mine to CD. :p

>When I boot it, the first screen I see shows
> the usual beginning with choices "Graphics Install,"
> "Install," "Advanced".

>I choose "Install" and press F10. 

I chose Install, then pressed F10, and absolutely nothing happened, on both an
ancient PC, and a UEFI PC.  does produce a response, as does E.

>The monitor then shows a row of what look like
> tiny screen images at the top, with the rest of
> the monitor all black.  Crtl-Alt-F1, etc makes
> changes in the tiny images at the top, but the
> all-black rest of screen is unchanged.

>At this point, I'm just guessing.  I tried
> repeating the process, except that I changed

>> linux /install.amd/vmlinuz vga=788 --- quiet

> to

>> linux /install.amd/vmlinuz vga=normal fb=false --- quiet

> and pressing F10.  This gave me an all-black screen,
> no tiny row.

>I really hope somebody can tell me what "magic words"
> I should be using. (I tried "nomodeset" but that didn't help)

I'd try removing vga=788, allowing kernel to decide an appropriate screen mode 
to
use, and whether or not to employ a framebuffer, and if so, which type.

How old is your PC? Is it booting in UEFI mode? On the initial screen, do

E: Edit Selection and C: Grub Command line

appear? Is there already an OS on your PC? If yes, and it's Linux, please 
provide
output from:

inxi -GxxSM

Otherwise, please provide PC and/or motherboard model and brand.
-- 
Evolution as taught in public schools is religion, not science.

 Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!

Felix Miata  ***  http://fm.no-ip.com/

KVM snapshot management

[Gary Dale]

I'm running a VM host server with Debian/Stable on AMD64.

I recently converted an important VM over to qcow2 so I could take 
advantage of snapshots. I don't think I need to be able to revert back 
more than a week, so I thought that naming each snapshot with the day of 
week number would be reasonable as it is easy to implement and to 
understand which day it is for. I established a bash script to be run 
from /etc/crontab to handle this.


After shutting down the VM, I delete the previous week's snapshot, which 
should be the oldest. My understanding is this merges it back into the 
base image while the new snapshot that I create next is now 6 snapshots 
away from the base. I think this gives me the ability to revert back up 
to a week if needed.


Since the snapshots are named using the DOW, the new snapshot has the 
same name as the one I just deleted. The names also cycle over a period 
of a week.


Is my understanding of the way snapshots work correct and is my approach 
reasonable?


The core part of my script is below. This is working in that it does 
what I described above WRT handling snapshots (for the first week, of 
course, the snapshot-delete fails since there isn't one).


virsh shutdown $VM
state=$(virsh list --all | grep " $VM " | awk '{ print $3}')
while ([ "$state" != "" ] && [ "$state" == "running" ]); do
  sleep 10
  state=$(virsh list --all | grep " $VM " | awk '{ print $3}')
done;
DOW=$(date +%u)
virsh snapshot-delete    --domain $VM --snapshotname ${VM}S$DOW
virsh snapshot-create-as --domain $VM --name ${VM}S$DOW
virsh start $VM

Re: netinst bad display after first screen

[Gary Dale]

On 2019-05-31 4:40 p.m., Blair, Charles E III wrote:

I have downloaded the current netinst and
burned it to a DVD.

When I boot it, the first screen I see shows
the usual beginning with choices "Graphics Install,"
"Install," "Advanced".

I choose "Install" and press F10.

The monitor then shows a row of what look like
tiny screen images at the top, with the rest of
the monitor all black.  Crtl-Alt-F1, etc makes
changes in the tiny images at the top, but the
all-black rest of screen is unchanged.

At this point, I'm just guessing.  I tried
repeating the process, except that I changed


linux /install.amd/vmlinuz vga=788 --- quiet

to


linux /install.amd/vmlinuz vga=normal fb=false --- quiet

and pressing F10.  This gave me an all-black screen,
no tiny row.

I really hope somebody can tell me what "magic words"
I should be using. (I tried "nomodeset" but that didn't help)

  
Did you check the sha256 code against the netinst.iso file? Also did you 
verify that the DVD burned correctly?


Finally, why did you select "Install" then press F10? You should just 
hit "enter".

netinst bad display after first screen

[Blair, Charles E III]

   I have downloaded the current netinst and
burned it to a DVD.

   When I boot it, the first screen I see shows
the usual beginning with choices "Graphics Install,"
"Install," "Advanced".

   I choose "Install" and press F10.

   The monitor then shows a row of what look like
tiny screen images at the top, with the rest of
the monitor all black.  Crtl-Alt-F1, etc makes
changes in the tiny images at the top, but the
all-black rest of screen is unchanged.

   At this point, I'm just guessing.  I tried
repeating the process, except that I changed

> linux /install.amd/vmlinuz vga=788 --- quiet

to

> linux /install.amd/vmlinuz vga=normal fb=false --- quiet

and pressing F10.  This gave me an all-black screen,
no tiny row.

   I really hope somebody can tell me what "magic words"
I should be using. (I tried "nomodeset" but that didn't help)

 

Re: Gmail problems (was Re: Ping as normal user)

[Brian]

On Fri 31 May 2019 at 14:33:42 +0100, mick crane wrote:

> On 2019-05-31 14:01, rhkra...@gmail.com wrote:
> > I guess I have to learn more about google
> > mail, maybe either disabling their spam filter, or deciding to switch to
> > an
> > email provider (ideally free or cheap) who doesn't filter email for me.
> > (I
> > guess when others mark something as spam, at least sometimes it affects
> > me or
> > everybody -- very annoying.)
> > 
> posteo.de has been mentioned if you don't mind using 100% green electricity

The mind boggles!

-- 
Brian.

Re: Using ISO image of installer DVD as repository - How?

[Brian]

On Fri 31 May 2019 at 08:30:35 -0400, Dan Ritter wrote:

> Richard Owlett wrote: 
> > With the first DVD of Debian 9.8.0 I did:
> >dd if=/dev/cdrom of=dvd.iso bs=4M
> > I edited sources.list to read
> >deb file:///home/richard/dvd.iso stretch main contrib trusted=yes
> > 
> > When running Synaptic's
> > Edit->Reload Package Information
> > I receive an error message:
> > > The repository 'file:/home/richard/dvd.iso stretch Release'
> > > does not have a Release file.
> > 
> > What is the problem?
> 
> The problem is that the .iso is not a mounted filesystem.

Indeed.

> You could:
> 
> $ mkdir /home/richard/dvdmount
> $ sudo mount /home/richard/dvd.iso /home/richard/dvdmount

That command leaves users without root privileges out in the cold.
udevil is one remedy on the command line to stop them shivering.

Along the same lines - I imagine a modern DE can mount an ISO for a
user without the need for her to become root.

-- 
Brian.

Re: Using ISO image of installer DVD as repository - How?

[Brian]

On Fri 31 May 2019 at 09:08:52 -0500, Richard Owlett wrote:

> On 05/31/2019 08:53 AM, Thomas Schmitt wrote:
> > Hi,
> > 
> > Dan Ritter wrote:
> > > > >deb file:///home/richard/dvdmount stretch main contrib
> > 
> > Richard Owlett wrote:
> > > > I now get a different error message:
> > 
> > How about adding "/pool" to the URI ?
> > 
> >deb file:///home/richard/dvdmount/pool stretch main contrib
> > 
> > because i see in a mounted 9.4.0-amd64-DVD-1.iso
> > 
> >/mnt/iso/pool/main/a/a2ps/a2ps_4.14-2_amd64.deb
> > 
> > (The man page and wiki are remarkably diffuse about "file:".)
> > 
> 
> Error message now:
> > The repository 'file:/home/richard/dvdmount/pool stretch Release'
> > does not have a Release file.
> 
> I've been using Synaptic primarily for current convenience.
> Would I be better off using one of the apt family of command line tools?

You would be better off with a bit of lateral thinking.

Your declared problem is to use the files on the ISO image of an
installer DVD as repository. So, you could create a package archive
from them as described at

https://wiki.debian.org/Installation+Archive+USBStick

and go from there.

But, you say, the ISO is not being directly accessed. Quite possibly.
However, the method advocated has the advantage of working and (up
'til now) nobody has come up with a working something to satisfy you.

-- 
Brian.

Re: Using ISO image of installer DVD as repository - How?

[Thomas Schmitt]

Hi,

new idea after googling and finding several examples like Dan Ritter's
proposal:

Try the "exact path" form of "suite":

  deb file:///home/richard/dvdmount pool/main/
  deb file:///home/richard/dvdmount pool/contrib/

or the usual form without mentioning (demanding ?) "stretch":

  deb file:///home/richard/dvdmount pool main contrib

Reasoning:

You report this program message:
> The repository 'file:/home/richard/dvdmount/pool stretch Release'
> does not have a Release file.

/mnt/iso/pool has "main" and "contrib" but no "stretch".

man 5 sources.list says:

   deb [ options ] uri suite [component1] [component2] [...]
[...]
can specify an exact path, in which case the components must be omitted
and suite must end with a slash (/). This is useful for the case when
only a particular sub-section of the archive denoted by the URI is of
interest. If suite does not specify an exact path, at least one
component must be present.

Suite "stretch" is neither "exact path" nor does it appear in the pool
tree of DVD 1.

Further for the "exact path" case:

In the traditional style sources.list format since only one
distribution can be specified per line it may be necessary to have
multiple lines for the same URI, if a subset of all available
distributions or components at that location is desired.


Thomas

Re: Snipping and quoting: Re: Wifi not working in Lenovo laptop/Ideapad/Atheros QCA9377

[tv.deb...@googlemail.com]

On 31/05/2019 23:22, rhkra...@gmail.com wrote:

On Friday, May 31, 2019 01:32:20 PM tv.deb...@googlemail.com wrote:

Hi, most people on this list prefer bottom-posting rather than
top-posting, so I'll stick with the convention and post my answer at the
bottom of the message, suggesting you do the same in the future to avoid
potential nasty comments. ;-) vvv


Thanks for the consideration!

I think another part of it for most of us (I take myself as a sample of one
representing most of us ;-) ...

.. is that we like quotes of previous emails to be snipped to the relevant
part and then the response to that relevant part be underneath that quote.

If you are replying to more than one relevant part, snip  irrelevant parts,
and intersperse your comments within the email, under the relevant part.

If anyone wants to chime in and agree (or disagree), please do!

Hi there, I mostly agree but I also have to say that I don't really give 
a damn about netiquette as a whole as long as the problem is solved, and 
it is still possible with minimum efforts to make head or tail from the 
thread. Now this thread is already mangled beyond recognition twice, 
sent all over the place and back, from several different addresses, and 
I don't have time to fix it today.
I also feel the need to say that meta-discussions about style or 
off-topic and/or personal matters on this list is seriously putting me 
off lately. I personally feel much more problematic to scroll through 
several unrelated messages scratching personal itches much more painful 
that any formatting bias.
Maybe it would be better to send a polite message to the original 
"offending" party(ies) once (off-list?), and if they don't comply just 
stop helping at all if one feels strongly about it.


Taking my own advice, I won't argue on the subject of style anymore in 
this thread ;-) .

Snipping and quoting: Re: Wifi not working in Lenovo laptop/Ideapad/Atheros QCA9377

[rhkramer]

On Friday, May 31, 2019 01:32:20 PM tv.deb...@googlemail.com wrote:
> Hi, most people on this list prefer bottom-posting rather than
> top-posting, so I'll stick with the convention and post my answer at the
> bottom of the message, suggesting you do the same in the future to avoid
> potential nasty comments. ;-) vvv

Thanks for the consideration!

I think another part of it for most of us (I take myself as a sample of one 
representing most of us ;-) ...

.. is that we like quotes of previous emails to be snipped to the relevant 
part and then the response to that relevant part be underneath that quote.

If you are replying to more than one relevant part, snip  irrelevant parts, 
and intersperse your comments within the email, under the relevant part.

If anyone wants to chime in and agree (or disagree), please do!

Re: Wifi not working in Lenovo laptop/Ideapad/Atheros QCA9377

[tv.deb...@googlemail.com]

Hi, most people on this list prefer bottom-posting rather than 
top-posting, so I'll stick with the convention and post my answer at the 
bottom of the message, suggesting you do the same in the future to avoid 
potential nasty comments. ;-) vvv


On 31/05/2019 22:38, senthil kosapeta wrote:

Hi,

Earlier my system got stuck after firmware-atheros installation.
Now i have freshly installed debian 9.9.

So it does not have following
/lib/firmware/ath10k/QCA9377/hw1.0/

Shall i retry installing "firmware-atheros" and proceed as per your
suggestion?






On Fri, May 31, 2019 at 9:10 PM idiotei...@gmail.com 
wrote:


Putting thread back on list, this was sent to me directly. Answer is at
bottom.

On 31/05/2019 19:07, senthil kosapeta wrote:


Hi,

These are the logs that i got, it says "firmware loading failed"



*May 31 12:58:48 debian kernel: [0.048770] Spectre V2 : Enabling
Restricted Speculation for firmware calls*
*May 31 12:58:48 debian kernel: [7.671866] i915 :00:02.0: Direct
firmware load for i915/kbl_dmc_ver1_01.bin failed with error -2May 31
12:58:48 debian kernel: [7.671873] i915 :00:02.0: Failed to load
DMC firmware [

https://01.org/linuxgraphics/intel-linux-graphics-firmwares

],

disabling

runtime power management.May 31 12:58:48 debian kernel: [7.677946]
[drm] GuC firmware load skippedMay 31 12:58:48 debian kernel: [
  8.226104] ath10k_pci :03:00.0: Direct firmware load for
ath10k/pre-cal-pci-:03:00.0.bin failed with error -2May 31 12:58:48
debian kernel: [8.226118] ath10k_pci :03:00.0: Direct firmware

load

for ath10k/cal-pci-:03:00.0.bin failed with error -2May 31 12:58:48
debian kernel: [8.226129] ath10k_pci :03:00.0: Direct firmware

load

for ath10k/QCA9377/hw1.0/firmware-5.bin failed with error -2May 31

12:58:48

debian kernel: [8.226143] ath10k_pci :03:00.0: Direct firmware

load

for ath10k/QCA9377/hw1.0/firmware-4.bin failed with error -2May 31

12:58:48

debian kernel: [8.226156] ath10k_pci :03:00.0: Direct firmware

load

for ath10k/QCA9377/hw1.0/firmware-3.bin failed with error -2May 31

12:58:48

debian kernel: [8.226168] ath10k_pci :03:00.0: Direct firmware

load

for ath10k/QCA9377/hw1.0/firmware-2.bin failed with error -2May 31

12:58:50

debian NetworkManager[559]:   [1559287730.5479]
manager[0x5578b9b35040]: monitoring kernel firmware directory
'/lib/firmware'.May 31 12:58:50 debian kernel: [   16.179299] r8169
:02:00.0: Direct firmware load for rtl_nic/rtl8168g-3.fw failed with
error -2May 31 12:58:50 debian kernel: [   16.179307] r8169 :02:00.0
enp2s0: unable to load firmware patch rtl_nic/rtl8168g-3.fw (-2)May 31
14:37:49 debian kernel: [ 5323.527328] [drm] GuC firmware load skippedMay
31 18:44:53 debian kernel: [11230.812795] [drm] GuC firmware load

skipped*


On Fri, May 31, 2019 at 4:46 PM tv.deb...@googlemail.com <
tv.deb...@googlemail.com> wrote:


On 31/05/2019 15:46, senthil kosapeta wrote:

Dear Debians,

I have purchased Lenovo laptop around 6 months back. (Lenovo ideapad)
I had installed ubuntu earlier and Wifi used to work fine.
Somehow it got crashed a month back.

I have decided to switch over to debian 9.9 and installed it.
Internet via Ethernet port is working. But wifi is not working and not
showing available wireless networks.
I searched/googled certain topic related to Debian wifi and tried
installing firmware-atheros earlier.
It did not work. When i tried restart, shutdown is stuck.
If i force shutdown and restart, It will be stuck again.
When i tried to do recover mode, msg displays that
"ath10k_pci ** failed recieve control reponse completion, polling "

Please let me know how to proceed.

   Thanks
Senthil



Hi, can you check for firmware loading information in your logs ?

"grep firmware /var/log/messages" or "journalctl -b" and look for info
related to the wifi chip.

Given the "shutdown stuck" issue I would try disabling interrupts and
see if it solves the problem, "modinfo" says ath10k_pci accepts three
irq options:

"parm:   irq_mode:0: auto, 1: legacy, 2: msi"

Maybe try "legacy" mode first, that may be what Ubuntu is doing as a
default. You will need elevated privileges to run the next commands
("sudo command" or "su -" and then type commands).

First two commands unload the driver module:


modprobe -r ath10k_pci
modprobe -r ath10k_core

Then reload it with proper option:

modprobe -v ath10k_core
modprobe -v ath10k_pci irq_mode=1

If it solves the problem you can make the change permanent.

Hope it helps.




The error message is very generic (ignore the message regarding the
graphic chip, it's unrelated and mostly harmless).

First look into the firmware directory to make sure you do have the
needed firmware binary:

ls -l /lib/firmware/ath10k/QCA9377/hw1.0/

You should see a "firmware-6.bin" file in the output.

Then try the commands I suggested before in a terminal window,

Re: Buster/lightdm - after locking screen, unlock prompt not visible

[Cindy Sue Causey]

On 5/31/19, Raj Kiran Grandhi  wrote:
> Hi,
>
> In a fresh install of Buster with XFCE desktop, locking the screen
> blanks the monitor and the monitor enters a power save state. After
> that, neither moving the mouse nor typing on the keyboard would turn
> the monitor back on.
>
> Typing the password without any visual feedback (while the monitor
> continues to be in the power save state) unlocks the screen and my
> session is displayed normally.
>
> Also, switching to another VT when the monitor turns off and switching
> back displays the unlock prompt normally.
>
> The closest I could find online was this:
> https://bbs.archlinux.org/viewtopic.php?id=240200 wherein installing
> the nouveau video driver appeared to have fixed the issue. However,
> that solution is not applicable in my case as I have an integrated
> intel graphics controller.
>
> Is anybody else experiencing this bug? Any workaround?


Hi, sorry, no direct answer, BUT... #1 this just came up fairly
recently. If it was you, never mind, grin.

If not, it was the same deal where they had the presence of mind to
try that trick of typing in the password anyway... and #ItWORKS (as a
temporary work-around). Maybe that thread's easily findable in the
archive if it was not you previously? I don't remember the outcome for
that one.

#2 A WEIRD coincidence of a stumbled upon late last night. I was
wanting to commiserate with a different thread related to Wifi and
failed modules "polling". That landed me at /var/log/syslog and
friends. While scouring that, I noticed this ODD message in there:

linux intel_powerclamp: No package C-state available

*hm!* Um.. *hm?* :D

Researching it landed the following among a lot of other things
(*waving at kernel[newbies]):

https://www.kernel.org/doc/Documentation/thermal/intel_powerclamp.txt

I THINK that just kind of talks about it. WHY I'm not hesitating to
post it at this point is because I'm seeing references like "sleep
state" in the various blurbs that pulled up for my own search last
night. "Sleep" and "wakeups" do get a head nod in that Kernel doc
there.

Oh, and that word "intel" in mine and then you mentioned it, too, is
why I went ahead and shared this here. May not be directly related,
but it *does* seem to be in the nearby sleep and hibernate and
*successfully (emphasis on "fully")* resume, yada-yada ballpark. If
not appropriate for this, it's a thought seed planted as a checkpoint
for past and future threads of this type. :)

If nothing else, it's like what happened with mine last night. Go
poking around at one thing... like just how DOES C-state get addressed
under the hood... and maybe in the meantime, someone accidentally
trips on the trigger line of code that's causing an occasional
sleep/hibernate session to not bring that password prompt GUI back
into view..

Could that be a line of code residing in each, our personal CHOICE of
login manager?

As I'm still thinking on this before sending: Lockscreen doesn't
necessarily imply hibernate/sleep state. Maybe that's a place for a
glitch to occur.

Maybe... there's a missing line of code that would tell it that hey,
you weren't asleep but let's pretend you were so we need to do what we
do if you HAD been asleep > push this button/release that one so that
yada-yada is freed up enough to trigger that password prompt GUI to
squeeze its way through and back onto the screen...

PS For newbies'ish wondering what you might learn next about your own
setups, if you haven't found it already, check out that..
/var/log/syslog in its various forms (.1, .gz, etc). Never know what
you might find in there that could lead to more learning about how
your own system works. I forget to peek in there when I'm bored, but
it's been a helpful self-education trigger for me over time.

Cindy :)
-- 
Cindy-Sue Causey
Talking Rock, Pickens County, Georgia, USA

* runs with birdseed *

Re: Wifi not working in Lenovo laptop/Ideapad/Atheros QCA9377

[senthil kosapeta]

Hi,

Earlier my system got stuck after firmware-atheros installation.
Now i have freshly installed debian 9.9.

So it does not have following
/lib/firmware/ath10k/QCA9377/hw1.0/

Shall i retry installing "firmware-atheros" and proceed as per your
suggestion?






On Fri, May 31, 2019 at 9:10 PM idiotei...@gmail.com 
wrote:

> Putting thread back on list, this was sent to me directly. Answer is at
> bottom.
>
> On 31/05/2019 19:07, senthil kosapeta wrote:
>
> > Hi,
> >
> > These are the logs that i got, it says "firmware loading failed"
> >
> >
> >
> > *May 31 12:58:48 debian kernel: [0.048770] Spectre V2 : Enabling
> > Restricted Speculation for firmware calls*
> > *May 31 12:58:48 debian kernel: [7.671866] i915 :00:02.0: Direct
> > firmware load for i915/kbl_dmc_ver1_01.bin failed with error -2May 31
> > 12:58:48 debian kernel: [7.671873] i915 :00:02.0: Failed to load
> > DMC firmware [
> https://01.org/linuxgraphics/intel-linux-graphics-firmwares
> > ],
> disabling
> > runtime power management.May 31 12:58:48 debian kernel: [7.677946]
> > [drm] GuC firmware load skippedMay 31 12:58:48 debian kernel: [
> >  8.226104] ath10k_pci :03:00.0: Direct firmware load for
> > ath10k/pre-cal-pci-:03:00.0.bin failed with error -2May 31 12:58:48
> > debian kernel: [8.226118] ath10k_pci :03:00.0: Direct firmware
> load
> > for ath10k/cal-pci-:03:00.0.bin failed with error -2May 31 12:58:48
> > debian kernel: [8.226129] ath10k_pci :03:00.0: Direct firmware
> load
> > for ath10k/QCA9377/hw1.0/firmware-5.bin failed with error -2May 31
> 12:58:48
> > debian kernel: [8.226143] ath10k_pci :03:00.0: Direct firmware
> load
> > for ath10k/QCA9377/hw1.0/firmware-4.bin failed with error -2May 31
> 12:58:48
> > debian kernel: [8.226156] ath10k_pci :03:00.0: Direct firmware
> load
> > for ath10k/QCA9377/hw1.0/firmware-3.bin failed with error -2May 31
> 12:58:48
> > debian kernel: [8.226168] ath10k_pci :03:00.0: Direct firmware
> load
> > for ath10k/QCA9377/hw1.0/firmware-2.bin failed with error -2May 31
> 12:58:50
> > debian NetworkManager[559]:   [1559287730.5479]
> > manager[0x5578b9b35040]: monitoring kernel firmware directory
> > '/lib/firmware'.May 31 12:58:50 debian kernel: [   16.179299] r8169
> > :02:00.0: Direct firmware load for rtl_nic/rtl8168g-3.fw failed with
> > error -2May 31 12:58:50 debian kernel: [   16.179307] r8169 :02:00.0
> > enp2s0: unable to load firmware patch rtl_nic/rtl8168g-3.fw (-2)May 31
> > 14:37:49 debian kernel: [ 5323.527328] [drm] GuC firmware load skippedMay
> > 31 18:44:53 debian kernel: [11230.812795] [drm] GuC firmware load
> skipped*
> >
> > On Fri, May 31, 2019 at 4:46 PM tv.deb...@googlemail.com <
> > tv.deb...@googlemail.com> wrote:
> >
> >> On 31/05/2019 15:46, senthil kosapeta wrote:
> >>> Dear Debians,
> >>>
> >>> I have purchased Lenovo laptop around 6 months back. (Lenovo ideapad)
> >>> I had installed ubuntu earlier and Wifi used to work fine.
> >>> Somehow it got crashed a month back.
> >>>
> >>> I have decided to switch over to debian 9.9 and installed it.
> >>> Internet via Ethernet port is working. But wifi is not working and not
> >>> showing available wireless networks.
> >>> I searched/googled certain topic related to Debian wifi and tried
> >>> installing firmware-atheros earlier.
> >>> It did not work. When i tried restart, shutdown is stuck.
> >>> If i force shutdown and restart, It will be stuck again.
> >>> When i tried to do recover mode, msg displays that
> >>> "ath10k_pci ** failed recieve control reponse completion, polling "
> >>>
> >>> Please let me know how to proceed.
> >>>
> >>>   Thanks
> >>> Senthil
> >>>
> >>
> >> Hi, can you check for firmware loading information in your logs ?
> >>
> >> "grep firmware /var/log/messages" or "journalctl -b" and look for info
> >> related to the wifi chip.
> >>
> >> Given the "shutdown stuck" issue I would try disabling interrupts and
> >> see if it solves the problem, "modinfo" says ath10k_pci accepts three
> >> irq options:
> >>
> >> "parm:   irq_mode:0: auto, 1: legacy, 2: msi"
> >>
> >> Maybe try "legacy" mode first, that may be what Ubuntu is doing as a
> >> default. You will need elevated privileges to run the next commands
> >> ("sudo command" or "su -" and then type commands).
> >>
> >> First two commands unload the driver module:
> >>
> >>
> >> modprobe -r ath10k_pci
> >> modprobe -r ath10k_core
> >>
> >> Then reload it with proper option:
> >>
> >> modprobe -v ath10k_core
> >> modprobe -v ath10k_pci irq_mode=1
> >>
> >> If it solves the problem you can make the change permanent.
> >>
> >> Hope it helps.
> >>
> >>
>
> The error message is very generic (ignore the message regarding the
> graphic chip, it's unrelated and mostly harmless).
>
> First look into the firmware directory to make sure you do have the
> needed firmware binary:
>
> ls -l /lib/firmware

Re: Buster/lightdm - after locking screen, unlock prompt not visible

[Jape Person]

On 5/31/19 11:16 AM, Raj Kiran Grandhi wrote:
> Hi,
> 
> In a fresh install of Buster with XFCE desktop, locking the screen
> blanks the monitor and the monitor enters a power save state. After
> that, neither moving the mouse nor typing on the keyboard would turn
> the monitor back on.
> 
> Typing the password without any visual feedback (while the monitor
> continues to be in the power save state) unlocks the screen and my
> session is displayed normally.
> 
> Also, switching to another VT when the monitor turns off and switching
> back displays the unlock prompt normally.
> 
> The closest I could find online was this:
> https://bbs.archlinux.org/viewtopic.php?id=240200 wherein installing
> the nouveau video driver appeared to have fixed the issue. However,
> that solution is not applicable in my case as I have an integrated
> intel graphics controller.
> 
> Is anybody else experiencing this bug? Any workaround?
> 
> Thanks,
> Raj Kiran
> 
> 
Hi, Raj.

Behavior on my testing systems with Xfce desktop environment is exactly
as you describe. I didn't think of it as a bug. There are lots of
lightweight lockers which behave similarly -- presenting a blank screen,
or perhaps a colored screen and awaiting password input without any kind
of feedback until the correct password is entered and the desktop
returns to normal.

I'm grateful for your post. I had never bothered to switch terminals to
see if it would have an effect. When I do so on these systems, I'm
presented with a screen with a message which says that the system is
locked and that I will be redirected to a login prompt in a few seconds.

I hope this is useful. Thank you for your post, as I prefer using a
prompt to typing my password at a blank screen.

Regards,
jp

Re: openjdk-8-jre for buster

[Brad Rogers]

On Fri, 31 May 2019 11:20:58 -0400
Larry Martell  wrote:

Hello Larry,

>Is it possible to get openjdk-8-jre for buster?

Not from Debian.  See https://tracker.debian.org/pkg/openjdk-8

Short version:  It's been removed and (to me it looks like) won't be
back.

-- 
 Regards  _
 / )   "The blindingly obvious is
/ _)radnever immediately apparent"
Do you want to play?
Play With Me - Extreme


pgpc5NZ0C_axw.pgp
Description: OpenPGP digital signature

Re: openjdk-8-jre for buster

[Roberto C . Sánchez]

On Fri, May 31, 2019 at 11:20:58AM -0400, Larry Martell wrote:
>Is it possible to get openjdk-8-jre for buster? 

If you specifically want to install the Debian packages, you will have
to add 'unstable' sources to your sources.list and install from there.
Note that you will want to make careful use of apt pinning [0] to ensure
that you don't bring in a whole bunch of packages from unstable that you
don't really want.

Aside from that, it is probably better (from a long term sustainability
perspective) to consider upgrading your application or process to use
openjdk-11.  Another possible solution is to manually install openjdk-8
from upstream tarballs.

Regards,

-Roberto

[0] https://wiki.debian.org/AptPreferences
-- 
Roberto C. Sánchez

Re: Wifi not working in Lenovo laptop/Ideapad/Atheros QCA9377

[idiotei...@gmail.com]

Putting thread back on list, this was sent to me directly. Answer is at 
bottom.


On 31/05/2019 19:07, senthil kosapeta wrote:


Hi,

These are the logs that i got, it says "firmware loading failed"



*May 31 12:58:48 debian kernel: [0.048770] Spectre V2 : Enabling
Restricted Speculation for firmware calls*
*May 31 12:58:48 debian kernel: [7.671866] i915 :00:02.0: Direct
firmware load for i915/kbl_dmc_ver1_01.bin failed with error -2May 31
12:58:48 debian kernel: [7.671873] i915 :00:02.0: Failed to load
DMC firmware [https://01.org/linuxgraphics/intel-linux-graphics-firmwares
], disabling
runtime power management.May 31 12:58:48 debian kernel: [7.677946]
[drm] GuC firmware load skippedMay 31 12:58:48 debian kernel: [
 8.226104] ath10k_pci :03:00.0: Direct firmware load for
ath10k/pre-cal-pci-:03:00.0.bin failed with error -2May 31 12:58:48
debian kernel: [8.226118] ath10k_pci :03:00.0: Direct firmware load
for ath10k/cal-pci-:03:00.0.bin failed with error -2May 31 12:58:48
debian kernel: [8.226129] ath10k_pci :03:00.0: Direct firmware load
for ath10k/QCA9377/hw1.0/firmware-5.bin failed with error -2May 31 12:58:48
debian kernel: [8.226143] ath10k_pci :03:00.0: Direct firmware load
for ath10k/QCA9377/hw1.0/firmware-4.bin failed with error -2May 31 12:58:48
debian kernel: [8.226156] ath10k_pci :03:00.0: Direct firmware load
for ath10k/QCA9377/hw1.0/firmware-3.bin failed with error -2May 31 12:58:48
debian kernel: [8.226168] ath10k_pci :03:00.0: Direct firmware load
for ath10k/QCA9377/hw1.0/firmware-2.bin failed with error -2May 31 12:58:50
debian NetworkManager[559]:   [1559287730.5479]
manager[0x5578b9b35040]: monitoring kernel firmware directory
'/lib/firmware'.May 31 12:58:50 debian kernel: [   16.179299] r8169
:02:00.0: Direct firmware load for rtl_nic/rtl8168g-3.fw failed with
error -2May 31 12:58:50 debian kernel: [   16.179307] r8169 :02:00.0
enp2s0: unable to load firmware patch rtl_nic/rtl8168g-3.fw (-2)May 31
14:37:49 debian kernel: [ 5323.527328] [drm] GuC firmware load skippedMay
31 18:44:53 debian kernel: [11230.812795] [drm] GuC firmware load skipped*

On Fri, May 31, 2019 at 4:46 PM tv.deb...@googlemail.com <
tv.deb...@googlemail.com> wrote:


On 31/05/2019 15:46, senthil kosapeta wrote:

Dear Debians,

I have purchased Lenovo laptop around 6 months back. (Lenovo ideapad)
I had installed ubuntu earlier and Wifi used to work fine.
Somehow it got crashed a month back.

I have decided to switch over to debian 9.9 and installed it.
Internet via Ethernet port is working. But wifi is not working and not
showing available wireless networks.
I searched/googled certain topic related to Debian wifi and tried
installing firmware-atheros earlier.
It did not work. When i tried restart, shutdown is stuck.
If i force shutdown and restart, It will be stuck again.
When i tried to do recover mode, msg displays that
"ath10k_pci ** failed recieve control reponse completion, polling "

Please let me know how to proceed.

  Thanks
Senthil



Hi, can you check for firmware loading information in your logs ?

"grep firmware /var/log/messages" or "journalctl -b" and look for info
related to the wifi chip.

Given the "shutdown stuck" issue I would try disabling interrupts and
see if it solves the problem, "modinfo" says ath10k_pci accepts three
irq options:

"parm:   irq_mode:0: auto, 1: legacy, 2: msi"

Maybe try "legacy" mode first, that may be what Ubuntu is doing as a
default. You will need elevated privileges to run the next commands
("sudo command" or "su -" and then type commands).

First two commands unload the driver module:


modprobe -r ath10k_pci
modprobe -r ath10k_core

Then reload it with proper option:

modprobe -v ath10k_core
modprobe -v ath10k_pci irq_mode=1

If it solves the problem you can make the change permanent.

Hope it helps.




The error message is very generic (ignore the message regarding the 
graphic chip, it's unrelated and mostly harmless).


First look into the firmware directory to make sure you do have the 
needed firmware binary:


ls -l /lib/firmware/ath10k/QCA9377/hw1.0/

You should see a "firmware-6.bin" file in the output.

Then try the commands I suggested before in a terminal window, you need 
to do this as root, either by using "sudo" in front of the commands or 
by doing "su -" and ater providing the root password type the actual 
commands one line at a time:


modprobe -r ath10k_pci
modprobe -r ath10k_core

modprobe -v ath10k_core
modprobe -v ath10k_pci irq_mode=1

and report back to the list the outcome.

openjdk-8-jre for buster

[Larry Martell]

Is it possible to get openjdk-8-jre for buster?

Buster/lightdm - after locking screen, unlock prompt not visible

[Raj Kiran Grandhi]

Hi,

In a fresh install of Buster with XFCE desktop, locking the screen
blanks the monitor and the monitor enters a power save state. After
that, neither moving the mouse nor typing on the keyboard would turn
the monitor back on.

Typing the password without any visual feedback (while the monitor
continues to be in the power save state) unlocks the screen and my
session is displayed normally.

Also, switching to another VT when the monitor turns off and switching
back displays the unlock prompt normally.

The closest I could find online was this:
https://bbs.archlinux.org/viewtopic.php?id=240200 wherein installing
the nouveau video driver appeared to have fixed the issue. However,
that solution is not applicable in my case as I have an integrated
intel graphics controller.

Is anybody else experiencing this bug? Any workaround?

Thanks,
Raj Kiran

Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?)

[Andy Smith]

Hello,

On Fri, May 31, 2019 at 08:48:36AM -0500, Jason wrote:
> On Wed, May 29, 2019 at 11:46:50PM +, Andy Smith wrote:
> > How did you install this system?

[…]

> > One other person in this thread said they used (a script which
> > ultimately uses) debootstrap.
> 
> This system was installed on an SBC (similar to RPi) from a zipped 
> filesystem image, dd'd to the onboard eMMC chip.

It sounds likely that something in that process failed to copy
across file capabilities. As previously mentioned, some care has to
be used with tar for example, if you want to (re)store these. So
that's something to be aware of I guess…

Cheers,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?)

[Jason]

On Wed, May 29, 2019 at 11:46:50PM +, Andy Smith wrote:
> Hi Jason,
> 
> On Wed, May 29, 2019 at 04:18:51PM -0500, Jason wrote:
> > On Mon, May 27, 2019 at 08:12:32AM +0300, Andrei POPESCU wrote:
> > > While I didn't mention it in this thread, ping had indeed somehow lost 
> > > its capabilities on my system. 'dpkg-reconfigure iputils-ping' fixed it.
> > 
> > That worked for me (I'm not the OP) with Stretch on an ARM board. Before 
> > running the above command, I could only ping as root or using sudo, now 
> > I can ping as a normal user. Thanks!
> 
> How did you install this system? Because /bin/ping is supposed to
> come with file capabilities such that the user can allow it to do
> what it needs to do (this is part of what 'dpkg-reconfigure
> iputils-ping' restores). So it would be interesting to know how the
> system was installed in case there is a general theme for those who
> never got those capabilities.
> 
> One other person in this thread said they used (a script which
> ultimately uses) debootstrap.

This system was installed on an SBC (similar to RPi) from a zipped 
filesystem image, dd'd to the onboard eMMC chip.

Thanks,
-- 
Jason

Re: Using ISO image of installer DVD as repository - How?

[Richard Owlett]

On 05/31/2019 08:53 AM, Thomas Schmitt wrote:

Hi,

Dan Ritter wrote:

   deb file:///home/richard/dvdmount stretch main contrib


Richard Owlett wrote:

I now get a different error message:


How about adding "/pool" to the URI ?

   deb file:///home/richard/dvdmount/pool stretch main contrib

because i see in a mounted 9.4.0-amd64-DVD-1.iso

   /mnt/iso/pool/main/a/a2ps/a2ps_4.14-2_amd64.deb

(The man page and wiki are remarkably diffuse about "file:".)



Error message now:

The repository 'file:/home/richard/dvdmount/pool stretch Release'
does not have a Release file.


I've been using Synaptic primarily for current convenience.
Would I be better off using one of the apt family of command line tools?

Re: Using ISO image of installer DVD as repository - How?

[Thomas Schmitt]

Hi,

Dan Ritter wrote:
> > >   deb file:///home/richard/dvdmount stretch main contrib

Richard Owlett wrote:
> > I now get a different error message:

How about adding "/pool" to the URI ?

  deb file:///home/richard/dvdmount/pool stretch main contrib

because i see in a mounted 9.4.0-amd64-DVD-1.iso

  /mnt/iso/pool/main/a/a2ps/a2ps_4.14-2_amd64.deb

(The man page and wiki are remarkably diffuse about "file:".)


Have a nice day :)

Thomas

Re: Using ISO image of installer DVD as repository - How?

[Richard Owlett]

On 05/31/2019 08:30 AM, Dan Ritter wrote:

Richard Owlett wrote:

On 05/31/2019 07:30 AM, Dan Ritter wrote:

Richard Owlett wrote:

With the first DVD of Debian 9.8.0 I did:
 dd if=/dev/cdrom of=dvd.iso bs=4M
I edited sources.list to read
 deb file:///home/richard/dvd.iso stretch main contrib trusted=yes

When running Synaptic's
  Edit->Reload Package Information
I receive an error message:

The repository 'file:/home/richard/dvd.iso stretch Release'
does not have a Release file.


What is the problem?


The problem is that the .iso is not a mounted filesystem.

You could:

$ mkdir /home/richard/dvdmount
$ sudo mount /home/richard/dvd.iso /home/richard/dvdmount

If it complains about the filetype, try -t udf or -t iso9660.


It did not complain.



and then you can use this sources.list line:

  deb file:///home/richard/dvdmount stretch main contrib trusted=yes

(or similar; I don't recall if the debian repository on disc
starts in the root of the disc)


I now get a different error message:

The repository 'file:/home/richard/dvdmount stretch Release' is not signed.


I also added "allow-insecure=yes" to sources.list with the same result.


Try [trusted=yes] and/or [allow-insecure=yes]  --- the brackets
are part of the syntax.



Same message using each separately and using both.

Re: Gmail problems (was Re: Ping as normal user)

[mick crane]

On 2019-05-31 14:01, rhkra...@gmail.com wrote:

I guess I have to learn more about google
mail, maybe either disabling their spam filter, or deciding to switch 
to an
email provider (ideally free or cheap) who doesn't filter email for me. 
 (I
guess when others mark something as spam, at least sometimes it affects 
me or

everybody -- very annoying.)

posteo.de has been mentioned if you don't mind using 100% green 
electricity


mick
--
Key ID4BFEBB31

Re: Using ISO image of installer DVD as repository - How?

[Dan Ritter]

Richard Owlett wrote: 
> On 05/31/2019 07:30 AM, Dan Ritter wrote:
> > Richard Owlett wrote:
> > > With the first DVD of Debian 9.8.0 I did:
> > > dd if=/dev/cdrom of=dvd.iso bs=4M
> > > I edited sources.list to read
> > > deb file:///home/richard/dvd.iso stretch main contrib trusted=yes
> > > 
> > > When running Synaptic's
> > >  Edit->Reload Package Information
> > > I receive an error message:
> > > > The repository 'file:/home/richard/dvd.iso stretch Release'
> > > > does not have a Release file.
> > > 
> > > What is the problem?
> > 
> > The problem is that the .iso is not a mounted filesystem.
> > 
> > You could:
> > 
> > $ mkdir /home/richard/dvdmount
> > $ sudo mount /home/richard/dvd.iso /home/richard/dvdmount
> > 
> > If it complains about the filetype, try -t udf or -t iso9660.
> 
> It did not complain.
> 
> > 
> > and then you can use this sources.list line:
> > 
> >  deb file:///home/richard/dvdmount stretch main contrib trusted=yes
> > 
> > (or similar; I don't recall if the debian repository on disc
> > starts in the root of the disc)
> 
> I now get a different error message:
> > The repository 'file:/home/richard/dvdmount stretch Release' is not signed.
> 
> I also added "allow-insecure=yes" to sources.list with the same result.

Try [trusted=yes] and/or [allow-insecure=yes]  --- the brackets
are part of the syntax.

-dsr-

Re: Using ISO image of installer DVD as repository - How?

[Richard Owlett]

On 05/31/2019 07:30 AM, Dan Ritter wrote:

Richard Owlett wrote:

With the first DVD of Debian 9.8.0 I did:
dd if=/dev/cdrom of=dvd.iso bs=4M
I edited sources.list to read
deb file:///home/richard/dvd.iso stretch main contrib trusted=yes

When running Synaptic's
 Edit->Reload Package Information
I receive an error message:

The repository 'file:/home/richard/dvd.iso stretch Release'
does not have a Release file.


What is the problem?


The problem is that the .iso is not a mounted filesystem.

You could:

$ mkdir /home/richard/dvdmount
$ sudo mount /home/richard/dvd.iso /home/richard/dvdmount

If it complains about the filetype, try -t udf or -t iso9660.


It did not complain.



and then you can use this sources.list line:

 deb file:///home/richard/dvdmount stretch main contrib trusted=yes

(or similar; I don't recall if the debian repository on disc
starts in the root of the disc)


I now get a different error message:

The repository 'file:/home/richard/dvdmount stretch Release' is not signed.


I also added "allow-insecure=yes" to sources.list with the same result.

Gmail problems (was Re: Ping as normal user)

[rhkramer]

On Friday, May 31, 2019 07:26:54 AM Pascal Hambourg wrote:
> Le 31/05/2019 à 13:16, rhkra...@gmail.com a écrit :
> > I wanted to learn at least a little more about that, starting by looking
> > back at the original post that mentioned that.  I looked back about 10
> > posts but couldn't find it  -- can you point me to the original post
> 
> 3 posts back.

Thanks -- looks like google mail decided that was spam and didn't send it to 
me (via their version of pop3).  I guess I have to learn more about google 
mail, maybe either disabling their spam filter, or deciding to switch to an 
email provider (ideally free or cheap) who doesn't filter email for me.  (I 
guess when others mark something as spam, at least sometimes it affects me or 
everybody -- very annoying.)

 
> From: Andy Smith
> Date: Thu, 30 May 2019 02:44:58 +
> Message-ID: <20190530024458.ga4...@bitfolk.com>

Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?)

[Greg Wooledge]

On Fri, May 31, 2019 at 11:47:26AM +0200, Pascal Hambourg wrote:
> > https://wiki.debian.org/MergedUsr
> 
> The wiki says this page does not exist yet.

It's actually .

Re: Using ISO image of installer DVD as repository - How?

[Brian]

On Fri 31 May 2019 at 07:20:24 -0500, Richard Owlett wrote:

> With the first DVD of Debian 9.8.0 I did:
>dd if=/dev/cdrom of=dvd.iso bs=4M
> I edited sources.list to read
>deb file:///home/richard/dvd.iso stretch main contrib trusted=yes
> 
> When running Synaptic's
> Edit->Reload Package Information
> I receive an error message:
> > The repository 'file:/home/richard/dvd.iso stretch Release'
> > does not have a Release file.
> 
> What is the problem?

>From sources.list(5):

   The currently recognized URI types are:

   file
   The file scheme allows an arbitrary directory in the file
   system to be considered an archive.

An ISO is not an "arbitrary directory".

-- 
Brian.

Re: Using ISO image of installer DVD as repository - How?

[Dan Ritter]

Richard Owlett wrote: 
> With the first DVD of Debian 9.8.0 I did:
>dd if=/dev/cdrom of=dvd.iso bs=4M
> I edited sources.list to read
>deb file:///home/richard/dvd.iso stretch main contrib trusted=yes
> 
> When running Synaptic's
> Edit->Reload Package Information
> I receive an error message:
> > The repository 'file:/home/richard/dvd.iso stretch Release'
> > does not have a Release file.
> 
> What is the problem?

The problem is that the .iso is not a mounted filesystem.

You could:

$ mkdir /home/richard/dvdmount
$ sudo mount /home/richard/dvd.iso /home/richard/dvdmount

If it complains about the filetype, try -t udf or -t iso9660.

and then you can use this sources.list line:

deb file:///home/richard/dvdmount stretch main contrib trusted=yes

(or similar; I don't recall if the debian repository on disc
starts in the root of the disc)


-dsr-

Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?)

[Thomas Schmitt]

Hi,

i wrote:
> > Currently the Default User depends on assumptions about local package
> > management which are not obviously related to security.
> > That's a future pitfall which just needs its unintentional cover removed.

Reco wrote:
> The way I see it, the "problematic" package got that Important priority
> already. A potential pitfall is closed.

The priority in debian/control (and thus .dsc) is scheduled on salsa to be
lowered to "optional" by the next package release.

Whatever, the priority is not the problem with security. The lack of
dependency of iputils-ping on libcap2-bin is the problem.
This lack was justified by policy as of 2016. Soon later the priority of
libcap2-bin was raised to "important", but iputils-ping never made use of
this move.


> Replacing a working fallback mechanism with one-size-fits-all "everyone
> are using ext4 on amd64 and Linux" is hardly an improvement.

The proposal in the bug report would not disable the fallback mechanism
for situations where it is needed. It would only make sure that capable
kernels and filesystems would be able use upstream improvements of iptools.

The installation code in
  
https://sources.debian.org/src/iputils/3:20180629-2/debian/iputils-ping.postinst
adapts itself to effective success of an attempt to set capabilities:

if command -v setcap > /dev/null; then
if setcap cap_net_raw+ep /bin/ping; then
chmod u-s /bin/ping
else
echo "Setcap failed on /bin/ping, falling back to setuid" >&2
chmod u+s /bin/ping
fi
else
echo "Setcap is not installed, falling back to setuid" >&2
chmod u+s /bin/ping
fi

Safe for Default Users.

My best theory for the problem reported in bug 780721 that a normal user
cannot ping, is that setuid was disabled by mount -o nosuid or -o owner
and that setcap did not work because of his sparse installation.


Have a nice day :)

Thomas

Using ISO image of installer DVD as repository - How?

[Richard Owlett]

With the first DVD of Debian 9.8.0 I did:
   dd if=/dev/cdrom of=dvd.iso bs=4M
I edited sources.list to read
   deb file:///home/richard/dvd.iso stretch main contrib trusted=yes

When running Synaptic's
Edit->Reload Package Information
I receive an error message:

The repository 'file:/home/richard/dvd.iso stretch Release'
does not have a Release file.


What is the problem?
TIA

Re: Ping as normal user

[Pascal Hambourg]

Le 31/05/2019 à 13:16, rhkra...@gmail.com a écrit :

On Thursday, May 30, 2019 10:55:57 PM Stefan Monnier wrote:

$ getcap /bin/ping
/bin/ping = cap_net_raw+ep


I wanted to learn at least a little more about that, starting by looking back
at the original post that mentioned that.  I looked back about 10 posts but
couldn't find it  -- can you point me to the original post


3 posts back.

From: Andy Smith
Date: Thu, 30 May 2019 02:44:58 +
Message-ID: <20190530024458.ga4...@bitfolk.com>

Re: Wifi not working in Lenovo laptop/Ideapad/Atheros QCA9377

[tv.deb...@googlemail.com]

On 31/05/2019 15:46, senthil kosapeta wrote:

Dear Debians,

I have purchased Lenovo laptop around 6 months back. (Lenovo ideapad)
I had installed ubuntu earlier and Wifi used to work fine.
Somehow it got crashed a month back.

I have decided to switch over to debian 9.9 and installed it.
Internet via Ethernet port is working. But wifi is not working and not
showing available wireless networks.
I searched/googled certain topic related to Debian wifi and tried
installing firmware-atheros earlier.
It did not work. When i tried restart, shutdown is stuck.
If i force shutdown and restart, It will be stuck again.
When i tried to do recover mode, msg displays that
"ath10k_pci ** failed recieve control reponse completion, polling "

Please let me know how to proceed.

  Thanks
Senthil



Hi, can you check for firmware loading information in your logs ?

"grep firmware /var/log/messages" or "journalctl -b" and look for info 
related to the wifi chip.


Given the "shutdown stuck" issue I would try disabling interrupts and 
see if it solves the problem, "modinfo" says ath10k_pci accepts three 
irq options:


"parm:   irq_mode:0: auto, 1: legacy, 2: msi"

Maybe try "legacy" mode first, that may be what Ubuntu is doing as a 
default. You will need elevated privileges to run the next commands 
("sudo command" or "su -" and then type commands).


First two commands unload the driver module:


modprobe -r ath10k_pci
modprobe -r ath10k_core

Then reload it with proper option:

modprobe -v ath10k_core
modprobe -v ath10k_pci irq_mode=1

If it solves the problem you can make the change permanent.

Hope it helps.

Re: Ping as normal user

[rhkramer]

On Thursday, May 30, 2019 10:55:57 PM Stefan Monnier wrote:
> > $ getcap /bin/ping
> > /bin/ping = cap_net_raw+ep

I wanted to learn at least a little more about that, starting by looking back 
at the original post that mentioned that.  I looked back about 10 posts but 
couldn't find it  -- can you point me to the original post (and, in the future, 
could you include the line that mentions when and who posted it (as the first 
line in this post).

Aside: I saw some other posts in this thread that either didn't quote anything 
or didn't properly attribute the quote -- I truly appreciate appropriate 
snipping of quotes, and encourage that, but, on the other hand, I also 
encourage quoting for context and proper attribution.

> BTW, if these caps are missing you can recover them with:
> 
> dpkg-reconfigure iputils-ping
> 
> 
> -- Stefan

Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?)

[Reco]

On Fri, May 31, 2019 at 12:09:19PM +0200, Thomas Schmitt wrote:
> > Not every filesystem supported by Debian
> > implements extended attributes needed for capabilities.
> > Off the top of my head it's NFS and JFFS2.
> 
> It is about the filesystem which holds the /bin directory. I would deem it
> extra-expert to use a partly incapable filesystem for that.

Please. NFS-for-root is decades old. JFFS2 is wildly popular for DIY solutions.
Calling everyone who bought $20 ARM board on AliExpress an 'expert'
seems overstretched.


> Whatever, the maintainer's reasoning was a then valid quote from the
> policy manual
...
> It became not a decisive argument against dependency.

It's really sad to see a maintainer who resorts to lawyering instead of
considering real technical limitations of the "solution" proposed.


> > Upgrading this particular dependency leads
> > only to a dependency bloat, and Default Users™ (i.e. ones that are
> > installing Recommends by default) aren't affected anyway.
> 
> Currently the Default User depends on assumptions about local package
> management which are not obviously related to security.

So? The end result justifies a current situation.


> That's a future pitfall which just needs its unintentional cover removed.

The way I see it, the "problematic" package got that Important priority
already. A potential pitfall is closed.


> To skip a security improvement in order to save 111 kB of installed size
> seems daring. (Size for amd64 taken from end of
>   https://packages.debian.org/unstable/libcap2-bin
> )

Replacing a working fallback mechanism with one-size-fits-all "everyone
are using ext4 on amd64 and Linux" is hardly an improvement.

Reco

Re: Wifi not working in Lenovo laptop/Ideapad/Atheros QCA9377

[An Liu]

Hi，

Can you see your wireless interface by excuting /sbin/ifconfig -a

should have device wlan0 or wlo0 or wls0p0 listed there

if not，you missed driver for that device，either look non-free repository or
download source code compile yourself



On Fri, May 31, 2019 at 12:17 senthil kosapeta 
wrote:

> Dear Debians,
>
> I have purchased Lenovo laptop around 6 months back. (Lenovo ideapad)
> I had installed ubuntu earlier and Wifi used to work fine.
> Somehow it got crashed a month back.
>
> I have decided to switch over to debian 9.9 and installed it.
> Internet via Ethernet port is working. But wifi is not working and not
> showing available wireless networks.
> I searched/googled certain topic related to Debian wifi and tried
> installing firmware-atheros earlier.
> It did not work. When i tried restart, shutdown is stuck.
> If i force shutdown and restart, It will be stuck again.
> When i tried to do recover mode, msg displays that
> "ath10k_pci ** failed recieve control reponse completion, polling "
>
> Please let me know how to proceed.
>
>  Thanks
>
> Senthil
>
> --
Liu An

Wifi not working in Lenovo laptop/Ideapad/Atheros QCA9377

[senthil kosapeta]

Dear Debians,

I have purchased Lenovo laptop around 6 months back. (Lenovo ideapad)
I had installed ubuntu earlier and Wifi used to work fine.
Somehow it got crashed a month back.

I have decided to switch over to debian 9.9 and installed it.
Internet via Ethernet port is working. But wifi is not working and not
showing available wireless networks.
I searched/googled certain topic related to Debian wifi and tried
installing firmware-atheros earlier.
It did not work. When i tried restart, shutdown is stuck.
If i force shutdown and restart, It will be stuck again.
When i tried to do recover mode, msg displays that
"ath10k_pci ** failed recieve control reponse completion, polling "

Please let me know how to proceed.

 Thanks
Senthil

Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?)

[Thomas Schmitt]

Hi,

i wrote:
> > "d/control: Drop Priority of libcap2"
> > https://salsa.debian.org/debian/libcap2/commit/5386335db24bfff5cc85bda69dbcda6ab2d7d20d

Reco wrote:
> Ah, that's what is was. That change made into the stable, I've just checked.

Not according to the package tracker:

oldstable has 1:2.24-8 of march 2015, i.e. before bug 780721.
  https://tracker.debian.org/media/packages/libc/libcap2/control-1%3A2.24-8
No particular Priority set on lbibcap2-bin

stable has 1:2.25-1 of october 2017, i.e. after bug 780721 went to sleep.
  https://tracker.debian.org/media/packages/libc/libcap2/control-1%3A2.25-1
libcap2-bin gets "Priority: important".

testing has 1:2.25-2 of february 2019.
  https://tracker.debian.org/media/packages/libc/libcap2/control-12.25-2
libcap2-bin still gets "Priority: important".
It was accepted in unstable at the very same day as the commit was made
which removed the particular Priority in the salsa git repo.
The package tracker's source browser says it is still in:
  https://sources.debian.org/src/libcap2/1:2.25-2/debian/control/#L17

But not to forget, the packages on the Debian mirrors get their priority
from the uploading procedure, not necessarily from the debian/control file
or the derived .dsc file.
All this forth and back might be independent of the maintainer of libcap2.


> Not every filesystem supported by Debian
> implements extended attributes needed for capabilities.
> Off the top of my head it's NFS and JFFS2.

It is about the filesystem which holds the /bin directory. I would deem it
extra-expert to use a partly incapable filesystem for that.

Whatever, the maintainer's reasoning was a then valid quote from the
policy manual

  "Packages must not depend on packages with lower priority values
   (excluding build-time dependencies). In order to ensure this, the
   priorities of one or more packages may need to be adjusted."

which is now replaced by a contrary statement

  "The priority of a package should
   not be increased merely because another higher-priority package depends
   on it; instead, the tools used to construct Debian installations will
   correctly handle package dependencies. In particular, this means that
   C-like libraries will almost never have a priority above optional [...]"

The issue of incapable systems was addressed in bug 780721 by maintainer:

  "The iputils-ping postinst script takes care to handle the case where
   setcap is either not available or not functional (due e.g. to running on
   a filesystem that doesn't support capabilities."

and bug reporter:

  "I'm aware we can't use capabilities on the non-Linux kernels yet, but
   since dpkg allows us to set dependencies per arch or per kernel, I don't
   see any particular problem adding libcap2-bin as to Depends for Linux."

It became not a decisive argument against dependency.


> Upgrading this particular dependency leads
> only to a dependency bloat, and Default Users™ (i.e. ones that are
> installing Recommends by default) aren't affected anyway.

Currently the Default User depends on assumptions about local package
management which are not obviously related to security. That's a future
pitfall which just needs its unintentional cover removed.

To skip a security improvement in order to save 111 kB of installed size
seems daring. (Size for amd64 taken from end of
  https://packages.debian.org/unstable/libcap2-bin
)
We can expect that the bug reporter, who is working on a colorful bunch
of elderly CPU arches, has a different idea of a Default User than us.
But shortage of memory and disk capacity surely belong to his considerations.


Have a nice day :)

Thomas

Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?)

[Pascal Hambourg]

Le 31/05/2019 à 08:38, Andrei POPESCU a écrit :

On Mi, 29 mai 19, 23:29:21, Gene Heskett wrote:


the default $PATH the installer sets up for $users, apparently does not
include any of the sbin's, only /usr/bin and /bin. I've been fixing that
for several generations of debian installs.


It won't be necessary if you switch to merged /usr.


AFAIK, the /usr merge does not merge sbin and bin together.


https://wiki.debian.org/MergedUsr


The wiki says this page does not exist yet.

kamailio 5 modules missing on latest buster

[Renato Gallo]

Hello, 

I need all Kamailio 5 modules to be present in the repo (first of all the 
app-java built with openjdk 11.0.3 2019-04-16 
OpenJDK Runtime Environment (build 11.0.3+1-Debian-1 OpenJDK 64-Bit Server VM 
(build 11.0.3+1-Debian-1, mixed mode, sharing) 


please help 
Renato Gallo 

Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?)

[Reco]

Hi.

On Fri, May 31, 2019 at 09:08:55AM +0200, Thomas Schmitt wrote:
> Andrei POPESCU wrote:
> > The other way would be if the archive priority was changed between
> > different installs.
> 
> This has happened in april 2016 (maybe related to bug 780721 ?)
> 
>   "d/control: Increase Priority of libcap2{,-bin} to important"
>   
> https://salsa.debian.org/debian/libcap2/commit/a3f0fbccfa946b6895da1b3521849d04ccf8da0f
> 
> and again four months ago
> 
>   "d/control: Drop Priority of libcap2"
>   
> https://salsa.debian.org/debian/libcap2/commit/5386335db24bfff5cc85bda69dbcda6ab2d7d20d
> 
> (The latter is not yet in the released package's control file.)
> 
> So one maintainer already adapted to the new policy rules.

Ah, that's what is was. That change made into the stable, I've just checked.


> But
>   https://salsa.debian.org/debian/iputils/raw/master/debian/control
> still has the hunchbacked gesture of recommending an actually necessary
> dependency:

No, maintainer is correct. Not every filesystem supported by Debian
implements extended attributes needed for capabilities. Off the top of
my head it's NFS and JFFS2. Upgrading this particular dependency leads
only to a dependency bloat, and Default Users™ (i.e. ones that are
installing Recommends by default) aren't affected anyway.

Reco

Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?)

[Thomas Schmitt]

Hi,

Andrei POPESCU wrote:
> The other way would be if the archive priority was changed between
> different installs.

This has happened in april 2016 (maybe related to bug 780721 ?)

  "d/control: Increase Priority of libcap2{,-bin} to important"
  
https://salsa.debian.org/debian/libcap2/commit/a3f0fbccfa946b6895da1b3521849d04ccf8da0f

and again four months ago

  "d/control: Drop Priority of libcap2"
  
https://salsa.debian.org/debian/libcap2/commit/5386335db24bfff5cc85bda69dbcda6ab2d7d20d

(The latter is not yet in the released package's control file.)

So one maintainer already adapted to the new policy rules.

But
  https://salsa.debian.org/debian/iputils/raw/master/debian/control
still has the hunchbacked gesture of recommending an actually necessary
dependency:

  Package: iputils-ping
  ...
  Recommends: libcap2-bin
  ...
  Package: iputils-arping
  ...
  Recommends: libcap2-bin

(I understand that this suffices if your local package management is set
 to automatically install recommendations.
 I also understand that there is a coarse workaround if libcap2 is missing.)

So bug 780721 is still valid and could now be fixed.


Have a nice day :)

Thomas