Re: Having trouble installing Debian on brand new hard drive

[kaye n]

*The (U)EFI partition seems far to small, I think mine was about 200 MB
originaly and I extended it to 700 MB, so I was able to make UEFI updates.*Are
UEFI updates necessary? What's the smallest allowable size I can make for
UEFI partition? Or is that not a wise thing to do?


*PXE Boot is booting over network (TFTP) and not want you want.*
I honestly don't know how I got that because I was not trying to boot over
network.  Never had this problem installing other distros.

*Created how? Did you do it yourself prior to beginning installation of
Debian?*
I believe I created the GPT partition using GParted from a live USB of
another distro.

*That's unusually small for a /home partition.*
I just figured that the /home partition is where config files of apps are
kept, correct? And they're just small files?  When I install an app, most
of it goes into / , and not /home, therefore I usually make /home a
separate partition and at 2GB only.



*If you rarely use Windows, that may be a perfectly good size, but because
you haven't created a Windows Reserved partition, Windows will divide it in
order that it have one (16MB IIRC).*
Windows will automatically create a partition out of the 50GB partition
that I made for it?


*For the future, you could paste the (relevant part from) the output of
'parted -l'.*
Just curious, never encountered that command before.
kaye@laptop:~$ parted -l
bash: parted: command not found

Thank you for your time!

Re: The nightmare of Intel Integrated GPUs under Linux in general and Debian in particular

[elvis]

On 12/2/20 8:25 am, Miguel A. Vallejo wrote:

Are you sure this is not coming from a software you are using?

For every problem I had / have with Intel GPU I can find other users
on any distribution's bug tracker with exactly the very same errors in
the kernel log, so I'm pretty sure I'm not the only one suffering from
Intel GPUs. In fact I am surprised by the small number of people here
with that problem.

But it's true there are some programs that are very prone to hang the
GPU when used, like Chrome, Chromium, Firefox, Google Earth, KDE's
taskbar, Virtualbox... all of them use some kind of 3D acceleration



Have you tried a live CD of a different distribution? Fedora, Mint, Suse 
etc?




--
If you are important people will wait for you.

Re: FOSS-compatible smartwatch?

[der.hans]

Am 11. Feb, 2020 schwätzte Carl Fink so:

moin moin,

So, I've owned two smartwatches. Both of them required a proprietary Android 
or iOS app to use many of their features.


Is there such a thing as a Free Software API for smartwatches/personal 
fitness devices? With maybe a FOSS app, and a way to use them with a 
Linux-based PC?


Seems like a pipe dream, but I can hope, right?


Shouldn't be a pipe dream.

Have you seen GadgetBridge?

"Gadgetbridge is an Android (4.4+) application which will allow you to use
your Pebble, Mi Band, Amazfit Bip and HPlus device (and more) without the
vendor's closed source application and without the need to create an
account and transmit any of your data to the vendor's servers."

https://gadgetbridge.org/

ciao,

der.hans
--
#  https://www.LuftHans.com   https://www.PhxLinux.org
#  Southern California Linux Expo March 5th - 8th in Pasadena
#  https://socallinuxexpo.org/
#  "So the environment is not a luxury ... It is an economically important
#  insurance policy whose wisdom we ignore at our peril."
#  -- Klaus Toepfer, U.N. environment agency Executive Director

Re: FOSS-compatible smartwatch?

[Carl Fink]

On 2/11/20 12:24 PM, Curt wrote:

On 2020-02-11, Andrei POPESCU  wrote:

Some work-in-progress:
https://www.pine64.org/pinetime/

Kind regards,
Andrei

There's also AsteroidOS (watch not included).

https://asteroidos.org/



So three suggestions so far. I'm surprised there are that many.

PineTime isn't a product yet, just a dev kit.

AsteroidOS also can't be purchased as a watch.

Bangle.js has a projected release date of next month. And it's amazingly 
inexpensive. I am definitely going to keep track of that.


Thanks, all.

--
Carl Fink   nitpick...@nitpicking.com

Read my blog at blog.nitpicking.com.  Reviews!  Observations!

Re: Modifier mot de passe user mysql : Access denied for user root

[G2PC]

> # mysql -u root -p
>
> J'ai toujours cette réponse :
> ERROR 1045 (28000): Access denied for user 'root'@'localhost' 
> (using password: YES)
>
> J'ai tenté via moteur de recherche, rien ne marche,
> dont "dpkg-reconfigure mysql-server".
>
> Merci d'une aide, d'une piste...

Le mode sans échec de MySQL ?
https://www.debian-fr.xyz/viewtopic.php?t=210

Re: Comment interdire la consultation de son serveur web sur son IP directe et le port 443?

[G2PC]

> Sur le port 80 c'est plutôt un chemin très normal et tu risque surtout de
> pénaliser les non-bidouilleurs justement.

Bah oui et non, mais le vrai chemin normal, c'est de consulter le
contenu en passant par le nom de domaine.

> Si tu ne veux pas servir de http mais que du https, tu peux configurer ton
> serveur pour ça, ou faire une bête redirection vers tes pages https.


Mes domaines sont déjà tous en HTTPS avec lets encrypt.


> Sinon un index.html sans contenu ça affiche une page blanche... mais ça sert à
> quoi ? Autant faire une redirection dans ta page avec un petit message et un
> lien si le navigateur bloque la redirection automatique.

J'avais une redirection effectivement, vers l'un de mes sites, mais, je
ne trouve pas ça très propre.
J'ai donc effectivement créé un index.html qui ne sert plus finalement,
car, j'ai interdit la consultation de tout le dossier /var/www/ip depuis
le VHost.
Une redirection est faite vers la page erreur 403, donc, oui, c'est
géré, pour le port 80 ;
https://wiki.visionduweb.fr/index.php?title=VirtualHosts_des_domaines_enregistr%C3%A9s#139.99.173.195_.C3.A9coute_du_port_HTTP_80

Par contre, si j'appelle mon IP:443 alors, je suis redirigé vers le
premier nom de domaine de ma liste ( ethernium.fun ) :
https://wiki.visionduweb.fr/index.php?title=VirtualHosts_des_domaines_enregistr%C3%A9s#139.99.173.195_.C3.A9coute_du_port_HTTP_80
De plus, le site ne va pas afficher les images correctement, à cause de
la protection anti hotlinking.
Seul la consultation depuis le domaine est autorisée. ( Je pourrais
autoriser l'IP du serveur dans la protection anti hotlinking ... mais ...)
J'ai l'impression qu'il y a un soucis de configuration, car, je devrais
pouvoir obtenir le même résultat que pour le port 80, c'est à dire,
rediriger IP:443 vers une page d'interdiction, mais alors, je n'arrive
plus à consulter mes domaines.



> J'ai l'impression que tu cherche des choses compliquées là ou c'est simple. Je
> suis souvent un peu comme ça aussi, mais chut!

La première chose compliquée, c'est d'arriver à écrire une règle
fonctionnelle pour Fail2ban pour bloquer les clients qui vont sur IP:80
En fait, c'est déjà le cas de la règle apache-auth

Par contre, je n'arrive pas à ce que ma propre règle apache-ipserveur
fasse le travail, avec la valeur par défaut pour le maxretry, de 1, au
lieu de 3 par défaut pour apache-auth. C'est le jail apache-auth qui
travail, et, apache-ipserveur semble activé, mais, ne rien faire.


Le plus compliqué étant de faire alors la même chose pour IP:443 sans
créer une panne de consultation pour mes domaines.

Re: The nightmare of Intel Integrated GPUs under Linux in general and Debian in particular

[Nicholas Geovanis]

On Tue, Feb 11, 2020, 7:36 PM Felix Miata

I do no virtualization except for DOS on an OS/2 derivative.
>

I have to say this remark made my day :-)
As a former OS/2 app developer.

>

Re: Comment interdire la consultation de son serveur web sur son IP directe et le port 443?

[G2PC]

> Excuses, je ne comprends tjrs pas :
> "que l'adresse IP sur un navigateur, n'affiche rien".
> Merci de bien le ré-exprimer.
>
> On peut empêcher bien des connexions avec les
> scripts PHP et Iptables.

Actuellement, j'ai interdit la consultation d'un contenu, si on utilise
mon IP, à l'aide de mon VHost de Apache.
Je redirige vers une page erreur 403.

Ce que je voudrais maintenant, c'est une règle Fail2ban pour automatiser
les bans, si un client cherche à consulter un contenu web en utilisant
l'adresse IP du serveur plutôt que l'un des noms de domaines.

Je constate que la règle apache-auth de fail2ban se charge déjà de
bannir les clients qui répondent aux logs " La configuration du serveur
n'autorise pas à consulter cette page ", cela après 3 essais infructueux.

J'ai tenté de créer ma propre règle pour HTTP, en autorisant 1 seul
essai infructueux, mais, elle ne fonctionne pas.


Et, je me demandais si je peux obtenir un équivalent, pour HTTPS.

Re: Comment interdire la consultation de son serveur web sur son IP directe et le port 443?

[G2PC]

> PS: c'est peut etre pas une bonne idee de mettre ta config apache sur un
> site.
>
> amicalement
> patrick

Oui mais bon, contrairement à d'autres, je ne commercialise rien.
D'ailleurs, quand on voit les VHosts de nombreux sites marchands, je
pense que je n'ai pas à rougir du mien.
Quant à la sécurité, elle n'existe pas, ou, pour les autres.

Re: [HS] recherche script batch pour doublons !

[TScholler]

Merci pour cette réponse (fslint).
Mais quelle serait en ligne de commande l'équivalent pour rechercher , 
rélectionner puis effacer les doublons?

Merci.
TS

Le 10/02/2020 à 07:59, Contact a écrit :

Bonjour

fslint (dans les dépôts) vient avec un utilitaire nommé findup

je n'ai jamais utilisé findup (mais j'ai utilisé fslint : ça marche bien)



Fslint est une boîte à outils pour nettoyer la charpie du système de
  fichiers. Il comprend une interface graphique GTK+ ainsi qu'une interface
en ligne de commande et peut être utilisé pour récupérer l'espace disque.
Il possède une interface pour la désinstallation des paquets, et il peut
trouver des choses comme :

    - les fichiers en double
  - les noms de fichiers problématiques
  - les fichiers temporaires
  - les mauvais liens symboliques
  - les répertoires vides
  - les binaires non dénudés




si ça peut aider


Le 10/02/2020 à 06:52, ptilou a écrit :

Bonjour,


J'ai plus de deux terra de données, du à une administration à la 
"légere" je me retrouve avec des doubles voir plus, ne portant pas les 
même: nom, date, etc ...


J'ai fait des sauvegardes, et je cherche un script batch libre, mais 
je peut utiliser perl, aussi, pour avoir un disque de travail plus 
petit !


Quelqu'un peut me donner le script ?

Merci

Re: W: Possible missing firmware

[TScholler]

Bonjour,
Merci de ta réponse Jerem.
Le paquet : firmware-amd-graphics, était déjà installé.
TS

Le 09/02/2020 à 23:25, Jérémy Prego a écrit :

bonjour,

Le 09/02/2020 à 19:33, TScholler a écrit :

Bonjour, je viens de faire un update/upgrade sur ma debian buster et
je me retrouve avec les lignes ci-dessous.
Je crois comprendre qu'il doit s'agir d'un bogue mais je n'en connais
pas trop la raison ni quoi faire.


il faut installer le paquet: firmware-amd-graphics, qui contient ses
firmware.

dans un pareil cas, apt-file peut aider afin de savoir quel(s) paquet(s)
installer :)
Jerem


Merci d'avance de votre aide.
TS

update-initramfs: Generating /boot/initrd.img-4.19.0-6-amd64
W: Possible missing firmware /lib/firmware/amdgpu/vega20_asd.bin for
module amdgpu
W: Possible missing firmware /lib/firmware/amdgpu/vega20_sos.bin for
module amdgpu
W: Possible missing firmware /lib/firmware/amdgpu/vega20_rlc.bin for
module amdgpu
W: Possible missing firmware /lib/firmware/amdgpu/vega20_mec2.bin for
module amdgpu
W: Possible missing firmware /lib/firmware/amdgpu/vega20_mec.bin for
module amdgpu
W: Possible missing firmware /lib/firmware/amdgpu/vega20_me.bin for
module amdgpu
W: Possible missing firmware /lib/firmware/amdgpu/vega20_pfp.bin for
module amdgpu
W: Possible missing firmware /lib/firmware/amdgpu/vega20_ce.bin for
module amdgpu
W: Possible missing firmware /lib/firmware/amdgpu/vega20_sdma1.bin for
module amdgpu
W: Possible missing firmware /lib/firmware/amdgpu/vega20_sdma.bin for
module amdgpu
W: Possible missing firmware /lib/firmware/amdgpu/vega20_uvd.bin for
module amdgpu
W: Possible missing firmware /lib/firmware/amdgpu/vega20_vce.bin for
module amdgpu
W: Possible missing firmware /lib/firmware/amdgpu/vega20_smc.bin for
module amdgpu

Re: Comment interdire la consultation de son serveur web sur son IP directe et le port 443?

[Haricophile]

Le mardi 11 février 2020 à 15:48 +0100, G2PC a écrit :
> Oui, je voudrais que l'adresse IP sur un navigateur, n'affiche rien, et,
> éventuellement bannir toutes personnes ou robots qui voudraient utiliser
> l'IP directement sur le port 80 pour tenter d'accéder à un contenu web,
> puisque ce n'est pas le chemin normal, donc, fort à parier que ce soit des
> bidouilleurs.

Sur le port 80 c'est plutôt un chemin très normal et tu risque surtout de
pénaliser les non-bidouilleurs justement.

Si tu ne veux pas servir de http mais que du https, tu peux configurer ton
serveur pour ça, ou faire une bête redirection vers tes pages https.

Sinon un index.html sans contenu ça affiche une page blanche... mais ça sert à
quoi ? Autant faire une redirection dans ta page avec un petit message et un
lien si le navigateur bloque la redirection automatique.

J'ai l'impression que tu cherche des choses compliquées là ou c'est simple. Je
suis souvent un peu comme ça aussi, mais chut!

Re: The nightmare of Intel Integrated GPUs under Linux in general and Debian in particular

[Felix Miata]

Miguel A. Vallejo composed on 2020-02-11 20:07 (UTC+0100):

> What are your recommendations / experiences?

Nothing like yours or all those bug reports. I've been using Intel, Nvidia and
AMD/ATI since over 15 years ago, but more with Intel than the others in recent
years, and across several distros other than just Debian. This PC is a (MSI)
Haswell, with HD Graphics 4400 (but only openSUSE). I have two with HD Graphics
630 and Buster on Kaby Lake, i3-7100t and G4600. On neither of these latter two
are any cmdline options re graphics necessary, nor is anything in xorg.conf*. My
trouble with Intel to the exclusion of the other two brands disappeared what now
seems like a decade or more. All mine supported by the modesetting DDX are using
it. The two Kaby Lake GPUs are supporting 3 displays simultaneously on stock
Buster 4.19 kernels. I spend very little time running Chrom*. Mostly I use 
latest
SeaMonkey, Firefox ESR, and New (Pale) Moon. I don't have any Debian 
installations
running KDE, only TDE (current, next, & devel) and IceWM on those. And, I do no
virtualization except for DOS on an OS/2 derivative.

I do get no working Xorg from some installations, but those are mostly worked
around by not disabling compositing globally in /etc/X11/xorg.conf.d/.

OTOH, support forums I frequent seem to have far more complaints about NVidia 
than
the other two combined, out of proportion to each's installed base, very roughly
split between tainting driver installation, and maintenance (laptop and 
desktop),
and multi-GPU problems (Optimus laptops mostly).

If you want a solution with absence of reverse-engineering or kernel tainting, I
suggest keeping after the devs and making sure to answer any requests you might
get there promptly in https://gitlab.freedesktop.org/drm/intel/issues/673, and
offer additional testing and logs on the intel-...@lists.freedesktop.org mailing
list referencing that bug report. This has obviously been going on much too long
for (against) you. :-(

Until this thread and that bug report, I was completely unaware of the extent of
recent Intel GPU complaints that that bug represents.

Have you ever run several hours (4-10, or overnight) of memtest86 (not
memtest86+)? Intel GPUs all run on shared RAM. All mine are running paired RAM
sticks in dual channel, and with equally balanced CAS ratings, e.g. 15-15-15-36 
or
17-17-17-39 vs. 15-17-17-35 or 16-15-15-37.
-- 
Evolution as taught in public schools is religion, not science.

 Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!

Felix Miata  ***  http://fm.no-ip.com/

Re: info

[JavierDebian]

El 11/2/20 a las 17:14, JavierDebian escribió:



El 11/2/20 a las 13:06, José Luis Durán Mujica escribió:
Buenas tardes, saludos a todo los compañeros Debianistas... tengo una 
curiosidad, tengo un equipo con q4os con kde que pasaria si cambiara 
los archivos de los repositorios a solamente los de debian, mejor 
dicho ¿como la paso a debian original sin tener que reinstalar el 
sistema? GRACIAS!


--

*José Luis Durán*




Instalar un Debian desde cero, sin tocar los archivos de usuarios:
3 horas y NINGÚN problemas.

Hacer una mezcla.

¡¡¡FRANKENDEBIAN

Y te vas a volver loco.

Q4OS está basado en Debin, por lo que la estructura de /home es la 
misma, con lo que borrar el sistema operativo y reemplazarlo, no 
presenta ningún inconveniente.


La pregunta matadora: ¿tenés TODO en una sola partición o tenés, por lo 
menos /home, en una partición distinta?


Si es lo segundo, el asunto se complica, pero no es imposible.

JAP.


CORRIJO (escribí al revés):

Si es lo primero, el asunto se complica, pero no es imposible.

JAP

Re: ufw and iptables not playing nice in testing with recent upgrade

[tv.deb...@googlemail.com]

On 12/02/2020 05:03, riveravaldez wrote:

On 2/11/20, songbird  wrote:

   something in there didn't work today when i applied
the upgrade.

   i don't have time to debug or file reports at the moment,
so was able to partially downgrade to get a working connection
again.

   put my hold back on iptables.  i'd had a hold on it for
a while due to reported errors.  no idea why i decided i
should try to let it go through this morning.  i'm kinda
tied up for a few weeks...


Maybe similar. Yesterday, after dist-upgrade and reboot the network
interface seemed not to be working (for instance, none ping
worked/responded), it gave me the impression of a driver issue so
rebooted and tried with a previous kernel, that seemed to solve
partially the situation.

Right now:

$ uname -a
Linux debian 5.4.0-2-amd64 #1 SMP Debian 5.4.8-1 (2020-01-05) x86_64 GNU/Linux

The first symptom (with the more recent kernel) was a message at boot
about UFW not being able to start (or something similar). That message
didn't appeared when I booted with the previous kernel (the one I'm
using right now).

Not sure of anything. Let me know if I can do something to diagnose
this situation properly.

Just informing in the hope it's of some utility.

Regards!

Hi, running a 5.4 and 5.5 self compiled kernels for a while and it is my 
experience too that ufw/gufw are broken. I switched to firewalld and 
associated graphical config utilities on the affected machines, purging 
iptables in the process.
On the other hand shorewall + iptables seems to work fine so far. From 
what I remember reading iptables is on it's way out anyway (correct me 
if i am wrong).


Hope it helps.

Re: The nightmare of Intel Integrated GPUs under Linux in general and Debian in particular

[Miguel A. Vallejo]

> My advice: put an nvidia card in there. That's what I did, and have had no
> problems since.

Thank you for the advice. That's my plan if kernel 5.5 doesn't work well.

Re: The nightmare of Intel Integrated GPUs under Linux in general and Debian in particular

[Miguel A. Vallejo]

> I think it is important to find the appropriate kernel version for your
> system - the one that has all the bits and bolts for your hardware. I doubt
> I will move to newer kernel. This one seems to have all the fixes at least
> for the hardware I am using now and especially the gpu part. I also had
> freezes few years ago and followed the kernel releases until 4.9.25.

That makes me wonder: What is the right way to do that in Debian? In
stable releases there is no way to use another kernel except from
backports (and they are newer, not older). And in testing / unstable
the kernels disapears as new kernels get into. How to install and keep
an old kernel in a new instalation?

Thanks

Re: ufw and iptables not playing nice in testing with recent upgrade

[riveravaldez]

On 2/11/20, songbird  wrote:
>   something in there didn't work today when i applied
> the upgrade.
>
>   i don't have time to debug or file reports at the moment,
> so was able to partially downgrade to get a working connection
> again.
>
>   put my hold back on iptables.  i'd had a hold on it for
> a while due to reported errors.  no idea why i decided i
> should try to let it go through this morning.  i'm kinda
> tied up for a few weeks...

Maybe similar. Yesterday, after dist-upgrade and reboot the network
interface seemed not to be working (for instance, none ping
worked/responded), it gave me the impression of a driver issue so
rebooted and tried with a previous kernel, that seemed to solve
partially the situation.

Right now:

$ uname -a
Linux debian 5.4.0-2-amd64 #1 SMP Debian 5.4.8-1 (2020-01-05) x86_64 GNU/Linux

The first symptom (with the more recent kernel) was a message at boot
about UFW not being able to start (or something similar). That message
didn't appeared when I booted with the previous kernel (the one I'm
using right now).

Not sure of anything. Let me know if I can do something to diagnose
this situation properly.

Just informing in the hope it's of some utility.

Regards!

Re: FOSS friendly PDA?

[Jeremy Nicoll]

On Tue, 11 Feb 2020, at 16:09, Richard Owlett wrote:
> I wish to enter/store data while away from home. The data will then be 
> transferred to my laptop via a USB cable. [Think the capability of one 
> of the old Palm Pilots in a smartphone(sic) form factor]

You might want to skim through the discussions at 

https://www.oesf.org/forum

- which discuss various PDA and similar machines.  

Eg there's lots of Gemini PDAs available ro likely to be because their
manufacturer has brought out a new model - a thing called the 
Cosmo Communicator.

They're not cheap, new, but second hand ones might be more 
affordable.

My impression is that a lot of these machines although theoretically
able to run linux don't have sufficient developers able to work on 
them for all the wrinkles to be fixed.  That is, other OSes may be 
bootable but it's strictly "enthusiasts only" territory.


> It must use a standard Linux (Debian preferred).

Why?  Surely all you need is a decent text editor, and a file manager.


> The manufacturer should ship with the Linux installed.
> Android is *UNACCEPTABLE*!

Why?  If you only use the machine to write data to an SD
card, why is the OS a problem?

-- 
Jeremy Nicoll - my opinions are my own.

Re: The nightmare of Intel Integrated GPUs under Linux in general and Debian in particular

[D. R. Evans]

Miguel A. Vallejo wrote on 2/11/20 12:07 PM:

> 
> What are my alternatives? nVidia cards? I've never used an nVidia card
> but I have read also tons of problems with them in the past. How about
> now? And how about AMD cards?
> 
> What are your recommendations / experiences?
> 

My advice: put an nvidia card in there. That's what I did, and have had no
problems since.

(I also had to tell the BIOS to affirmatively disable the Intel GPU, otherwise
insanity resulted, with two desktop sessions both being sent to the nvidia
chip; it seemed that if the kernel could see two chips, it was determined to
create two sessions, even if only one chip was actually attached to a monitor,
and then it would send the two sessions to that chip/monitor.)

  Doc

-- 
Web:  http://enginehousebooks.com/drevans



signature.asc
Description: OpenPGP digital signature

Re: Modifier mot de passe user mysql : Access denied for user root

[ajh . valmer]

On Tuesday 11 February 2020 15:53:02 G2PC wrote:
> 
www.it-connect.fr/changer-de-mot-de-passe-mysql%EF%BB%BF/#III_Changer_le_mot_de_passe_utilisateur_avec_une_commande_SQL
> www.laurentsanselme.com/changer-le-mot-de-passe-dun-utilisateur-mysql/

# mysql -u root -p

J'ai toujours cette réponse :
ERROR 1045 (28000): Access denied for user 'root'@'localhost' 
(using password: YES)

J'ai tenté via moteur de recherche, rien ne marche,
dont "dpkg-reconfigure mysql-server".

Merci d'une aide, d'une piste...

Re: The nightmare of Intel Integrated GPUs under Linux in general and Debian in particular

[deloptes]

Miguel A. Vallejo wrote:

> For every problem I had / have with Intel GPU I can find other users
> on any distribution's bug tracker with exactly the very same errors in
> the kernel log, so I'm pretty sure I'm not the only one suffering from
> Intel GPUs. In fact I am surprised by the small number of people here
> with that problem.
> 

perhaps it is the way your system is set up. Indeed like 10y ago Intel did
some sh*t and sold it bundled to outcome AMD and NVidea, but since then
they improved and indeed there were issues back then.

I think it is important to find the appropriate kernel version for your
system - the one that has all the bits and bolts for your hardware. I doubt
I will move to newer kernel. This one seems to have all the fixes at least
for the hardware I am using now and especially the gpu part. I also had
freezes few years ago and followed the kernel releases until 4.9.25.

I also have
cat /etc/modprobe.d/i915-kms.conf
options i915 modeset=1

> But it's true there are some programs that are very prone to hang the
> GPU when used, like Chrome, Chromium, Firefox, Google Earth, KDE's
> taskbar, Virtualbox... all of them use some kind of 3D acceleration

well ... depends also on the middle layer, but I use TDE and even VM with 3D
enabled does not cause freezes such that I had from time to time few years
ago.

Re: FOSS friendly PDA?

[Dan Ritter]

David Wright wrote: 
> It might still track you when you omit the SIM card.
> You might be able to disconnect the aerial if you open it up.

Ah, you didn't read it either.

The PinePhone has 6 physical killswitches:

 Modem: On enables 2G/3G/4G communication and GNSS hardware,
off disables.

WiFi/BT: On enables Wi-Fi and Bluetooth communication
hardware, off disables.

Microphone: On enables audio input from on-board microphones
(not 3.5mm jack), off disables.

Rear camera: On enables the rear camera, off disables.

Front camera: On enables the front camera, off disables.

Headphone: On enables audio input and output via the 3.5mm
audio jack, off switches the jack to hardware UART mode.

Just in case you need a serial port, of course.

-dsr-

Re: The nightmare of Intel Integrated GPUs under Linux in general and Debian in particular

[Miguel A. Vallejo]

> Are you sure this is not coming from a software you are using?

For every problem I had / have with Intel GPU I can find other users
on any distribution's bug tracker with exactly the very same errors in
the kernel log, so I'm pretty sure I'm not the only one suffering from
Intel GPUs. In fact I am surprised by the small number of people here
with that problem.

But it's true there are some programs that are very prone to hang the
GPU when used, like Chrome, Chromium, Firefox, Google Earth, KDE's
taskbar, Virtualbox... all of them use some kind of 3D acceleration

Re: The nightmare of Intel Integrated GPUs under Linux in general and Debian in particular

[Miguel A. Vallejo]

Interesting very interesting.

> (On what GPU?)

The same as yours:

VGA compatible controller: Intel Corporation HD Graphics 530 (rev 06)

in a I5-6500 CPU.

> For whatever it's worth, I do *not* see any problems like this.  Not
> even close.  Intel integrated graphics of this generation have been
> rock solid for me on Debian 10, with non-free firmware + microcode.

You are lucky. Very lucky. For the last 5 years this have been a
constant pain, one problem after problem. When a problem got fixed by
a new kernel a new problem appeared, for every single kernel version I
tested. It even affected my ability to get the work done: yesterday I
had 3 complete system freezes in less than an hour. But I use KDE, I
use 3D acceleration, and I use programs who uses 3D acceleration so I
constantly hit these kind of bugs.

One of the less buggy kernels for me in the one in Debian Buster
(4.19.0-8-amd64). Hangs are not so frequent with this kernel but the
text consoles are corrupted:

https://bugs.freedesktop.org/show_bug.cgi?id=107951

This capture is from my own computer:

https://bugs.freedesktop.org/attachment.cgi?id=143903

The problem was solved in later kernels but the fix never reached Debian Buster.

> The web page you linked also talks about "transition to idle", which
> I'm guessing is related to CPU power management...?

I'm using a desktop, so power saving is not a problem. Of course one
of the multiple tests I made was disable GPU power saving, limit the C
states...all the proposed workarounds that works for some users but
none of them worked for me.

I will try kernel 5.5 when available in unstable and if I still get
hangs, I will try a different graphics card.

Thank you.

Re: The nightmare of Intel Integrated GPUs under Linux in general and Debian in particular

[deloptes]

Miguel A. Vallejo wrote:

> I always ran the intel microcode package, tried every bios update, and
> I even changed the whole computer, so this is not the solution.

Using 4.9.25 since it came out - no issue on any of the PCs I have and they
all are with intel integrated GPU.

Are you sure this is not coming from a software you are using?

Re: FOSS friendly PDA?

[David Wright]

On Tue 11 Feb 2020 at 14:00:51 (-0600), Richard Owlett wrote:
> On 02/11/2020 10:24 AM, Dan Ritter wrote:
> > Richard Owlett wrote:
> > > I wish to enter/store data while away from home. The data will then be
> > > transferred to my laptop via a USB cable. [Think the capability of one of
> > > the old Palm Pilots in a smartphone(sic) form factor]
> > > 
> > > It must use a standard Linux (Debian preferred).
> > > The manufacturer should ship with the Linux installed.
> > > Android is *UNACCEPTABLE*!
> > > It should NOT have cell connectivity.
> > > If it has WiFi, I must be able to disable it.
> > 
> > You want a PinePhone.
> > 
> > https://www.pine64.org/pinephone/
> > 
> > Based on your history, you are now going to tell me that it's
> > unacceptable, because it's a phone.
> 
> ROFL
> I had said "should NOT have cell connectivity."
> It indeed can meet that preference in two ways:
>  1. omit SIM card
>  2. set switch to disable the cell modem

It might still track you when you omit the SIM card.
You might be able to disconnect the aerial if you open it up.

Cheers,
David.

Re: Looking for FOSS supported PCIe x4 SATA 6 Gb/s HBA with 4 or 8 ports

[deloptes]

Steve McIntyre wrote:

>>I have this one for may be 7y already.
>>
>>08:00.0 SCSI storage controller: LSI Logic / Symbios Logic SAS1068E
>>PCI-Express Fusion-MPT SAS (rev 08)
>>
>>https://wiki.pdl.cmu.edu/pub/OpenCloud/CloudManuals/SCG_LSISAS1068E_PB_040407.pdf
>>
>>It is 3Gb/s - don't know about the newer ones, but this one is working
>>perfectly well for all those years 24/7.
> 
> That particular model is limited on supported disk sizes, to 2T IIRC -
> I bought one from ebay and it was no use at all.
> 

I don't know. I stick to 2TB, because the WG RED >2TB are having issues.

> My own choice for more SATA/SAS ports is a Highpoint RocketRAID 2720 -
> 8 ports on a PCIe 2.0 x8 connector. Supported out of the box using the
> mvsas mainline driver.

I doubt that my demand will reach that point, having 6x2TB + 2x1TB drives in
RAID which makes around 7TB. I have still a lot of free space and another 4
empty slots to fill.

Re: The nightmare of Intel Integrated GPUs under Linux in general and Debian in particular

[Greg Wooledge]

On Tue, Feb 11, 2020 at 10:15:29PM +0100, Miguel A. Vallejo wrote:
> Because everytime my system hangs / freezes I found something like
> this in syslog:

(On what GPU?)

> [  135.116721] i915 :00:02.0: GPU HANG: ecode 9:1:0x, hang on rcs0
> [  135.116724] GPU hangs can indicate a bug anywhere in the entire gfx
> stack, including userspace.
> [  135.116725] Please file a _new_ bug report on bugs.freedesktop.org
> against DRI -> DRM/Intel
> [  135.116726] drm/i915 developers can then reassign to the right
> component if it's not a kernel issue.
> [  135.116727] The GPU crash dump is required to analyze GPU hangs, so
> please always attach it.
> [  135.116729] GPU crash dump saved to /sys/class/drm/card0/error
> [  135.117739] i915 :00:02.0: Resetting rcs0 for hang on rcs0
> [  135.118508] [drm:gen8_reset_engines [i915]] *ERROR* rcs0 reset
> request timed out: {request: 0001, RESET_CTL: 0001}
[...]

> More people with my very same experience here:
> 
> https://gitlab.freedesktop.org/drm/intel/issues/673

Hmm.  "Paul" in that thread reports having
"Gpu: HD Graphics 530 (Skylake GT2 / 0x1912 / mesa: 19.2.7)"

My workstation here, the one I'm typing on, has:

00:02.0 VGA compatible controller [0300]: Intel Corporation HD Graphics 530 
[8086:1912] (rev 06)

I'm guessing the 0x1912 in Paul's report matches the 8086:1912 in my
PCI ID.

For whatever it's worth, I do *not* see any problems like this.  Not
even close.  Intel integrated graphics of this generation have been
rock solid for me on Debian 10, with non-free firmware + microcode.

The web page you linked also talks about "transition to idle", which
I'm guessing is related to CPU power management...?  I'm not using
a laptop, and I'm not doing anything related to power management,
apart from whatever defaults Linux and Debian are doing.

I suspect there's some triggering event/bug that only some users
are encountering due to different installed packages or usage patterns.

I'm probably a fairly nontypical user by today's standards (desktop PC
with fvwm, no desktop environment, limited or no 3D graphics stuff),
but I might match pretty closely against the usage patterns of
the *developers* of some of this stuff... maybe they just don't use
the things that trigger the bugs, so they never see the bugs, so they
never fix the bugs.

Re: The nightmare of Intel Integrated GPUs under Linux in general and Debian in particular

[Miguel A. Vallejo]

> Hi, Miguel
> The computer I'm typing on is a Lenovo Z570. I7-2670 processor, 8 gigs
> ram, 480 gig ssd. Snappy as hell. Running Debian Bullseye. I've made
> it usable by:
> Adding a 20-intel.config file to /etc/X11/xorg.conf.d
> Adding the Ubuntu graphics PPA
> Modifying the /etc/default/grub file
> Modifying the grub command line to disable modesetting. This one you
> have to get just right or
>   you'll end up with a black screen.

This is exactly the kind of things I was afraid of...

> If you are OK with much more fan running and slightly poorer 2D and 3D
> graphics, with substantially poorer battery life, just do the
> 20-intel.config with, instead of "intel" as the driver, make the
> driver line "modesetting".

I always used modesetting, because the xserver-xorg-video-intel
doesn't work at all for me: Flashing screens, big rectangles
blinking... totally unusable. Anyway I will look for the Ubuntu
graphics PPA and how it differs from the Debian packages.

Thank you!

Re: The nightmare of Intel Integrated GPUs under Linux in general and Debian in particular

[Miguel A. Vallejo]

> I have had perfectly reasonable experiences with:
>
> nvidia 8400
> nvidia 720
> nvidia 730
> nvidia 1030
> nvidia 1050

I made a quick search and some of these cards are under 50 euros, so I
will try if I do not get a solution. Thank you for the advice!

Re: FOSS friendly PDA?

[Richard Owlett]

On 02/11/2020 02:54 PM, Gene Heskett wrote:

On Tuesday 11 February 2020 15:00:51 Richard Owlett wrote:


On 02/11/2020 10:24 AM, Dan Ritter wrote:

Richard Owlett wrote:

I wish to enter/store data while away from home. The data will then
be transferred to my laptop via a USB cable. [Think the capability
of one of the old Palm Pilots in a smartphone(sic) form factor]

It must use a standard Linux (Debian preferred).
The manufacturer should ship with the Linux installed.
Android is *UNACCEPTABLE*!
It should NOT have cell connectivity.
If it has WiFi, I must be able to disable it.


You want a PinePhone.

https://www.pine64.org/pinephone/

Based on your history, you are now going to tell me that it's
unacceptable, because it's a phone.


ROFL
I had said "should NOT have cell connectivity."
It indeed can meet that preference in two ways:
   1. omit SIM card
   2. set switch to disable the cell modem

I can see practical procurement problems.
The site you gave hasn't updated to report on impact of Coronavirus.
There isn't any indication of any U.S. importer - I don't want to have
the hassle of handling any duties or FCC type acceptance of the
included RF components. My commercial operator license expired decades
ago and have no idea what current rigamarole is now.


FWIW Richard, when the Friendly Candy Commish threw us all under the bus
and burned rubber leaving, they also grandfathered existing licenses for
life.


I only had a 2nd phone. Took the exam in mid/late 60's and never renewed 
it. I was a member of the Cornell student run station which had a full 
commercial FM license. With that time frame what's the likelihood I was 
grandfathered?




I saw that comeing in the later 60's, which is why my card case also
contains a Journeyman CET card. Cost me 20 bucks to sit for that back
in '72, and has paid for itself several thousand times over since. I
didn't crack a book for the earlier 1st phone in 62, nor for the later
CET.

So If you can find your old ticket, its probably still good. If not ask
the Commish for a duplicate. My last pocket copy says it expires in '88
but I've signed papers for station applications using it till now. And
nobody at the commission has ever fussed about it.

Cheers Richard, Gene Heskett

Re: The nightmare of Intel Integrated GPUs under Linux in general and Debian in particular

[Miguel A. Vallejo]

> I was under impression that Intel GPUs are supported quite well.
>
> How exactly did you reach the conclusion that the freezes are related to
> the GPU?

Because everytime my system hangs / freezes I found something like
this in syslog:

[  135.116721] i915 :00:02.0: GPU HANG: ecode 9:1:0x, hang on rcs0
[  135.116724] GPU hangs can indicate a bug anywhere in the entire gfx
stack, including userspace.
[  135.116725] Please file a _new_ bug report on bugs.freedesktop.org
against DRI -> DRM/Intel
[  135.116726] drm/i915 developers can then reassign to the right
component if it's not a kernel issue.
[  135.116727] The GPU crash dump is required to analyze GPU hangs, so
please always attach it.
[  135.116729] GPU crash dump saved to /sys/class/drm/card0/error
[  135.117739] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  135.118508] [drm:gen8_reset_engines [i915]] *ERROR* rcs0 reset
request timed out: {request: 0001, RESET_CTL: 0001}
[  135.118620] i915 :00:02.0: Resetting chip for hang on rcs0
[  135.120388] [drm:gen8_reset_engines [i915]] *ERROR* rcs0 reset
request timed out: {request: 0001, RESET_CTL: 0001}
[  135.121147] [drm:gen8_reset_engines [i915]] *ERROR* rcs0 reset
request timed out: {request: 0001, RESET_CTL: 0001}
[  159.118357] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  159.119128] [drm:gen8_reset_engines [i915]] *ERROR* rcs0 reset
request timed out: {request: 0001, RESET_CTL: 0001}
[  159.119221] i915 :00:02.0: Resetting chip for hang on rcs0
[  159.120990] [drm:gen8_reset_engines [i915]] *ERROR* rcs0 reset
request timed out: {request: 0001, RESET_CTL: 0001}
[  159.121748] [drm:gen8_reset_engines [i915]] *ERROR* rcs0 reset
request timed out: {request: 0001, RESET_CTL: 0001}
[  163.341488] Asynchronous wait on fence i915:kwin_x11[909]:1326
timed out (hint:intel_atomic_commit_ready+0x0/0x50 [i915])
[  167.118543] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  167.119314] [drm:gen8_reset_engines [i915]] *ERROR* rcs0 reset
request timed out: {request: 0001, RESET_CTL: 0001}
[  167.119412] i915 :00:02.0: Resetting chip for hang on rcs0
[  167.121181] [drm:gen8_reset_engines [i915]] *ERROR* rcs0 reset
request timed out: {request: 0001, RESET_CTL: 0001}
[  167.121938] [drm:gen8_reset_engines [i915]] *ERROR* rcs0 reset
request timed out: {request: 0001, RESET_CTL: 0001}
[  175.118708] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  183.118916] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  185.102909] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  187.118943] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  189.102987] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  191.119032] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  193.103069] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  195.123083] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  197.103126] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  199.123155] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  201.103201] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  203.119230] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  205.103272] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  207.119305] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  209.103334] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  211.119366] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  213.103400] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  215.119433] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  217.103471] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  219.119496] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  221.103531] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  223.119560] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  225.103594] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  227.119629] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  229.103659] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  231.123662] i915 :00:02.0: Resetting rcs0 for hang on rcs0
[  233.103737] i915 :00:02.0: Resetting rcs0 for hang on rcs0
...
etc, etc, etc, until I got tired and shutdown the computer using the
power button.

More people with my very same experience here:

https://gitlab.freedesktop.org/drm/intel/issues/673

> Other things to try:
> - update the microcode (package intel-microcode in non-free)
> - try with different, known good RAM
> - try with a different, known good and generously sized power source
> - update the motherboard BIOS

I always ran the intel microcode package, tried every bios update, and
I even changed the whole computer, so this is not the solution.

Thank you

Re: Comment interdire la consultation de son serveur web sur son IP directe et le port 443?

[ajh . valmer]

> Le 11/02/2020 à 14:53, ajh.val...@free.fr a écrit :
> > On Tuesday 11 February 2020 05:36:16 G2PC wrote:
> >> Comment interdire la consultation de son serveur web sur son IP directe
> >> et le port 443 ?
> >> Est ce que ça a du sens ?
> > Je ne comprends pas :
> > le port 443 = https,
> > et que veut dire ? :
> > "interdire la consultation sur son IP direct".
> > Enfin, ce n'est pas la consultation d'un serveur web,
> > mais d'un site Web ?

> Oui, je voudrais que l'adresse IP sur un navigateur, n'affiche rien, et,
> éventuellement bannir toutes personnes ou robots qui voudraient utiliser
> l'IP directement sur le port 80 pour tenter d'accéder à un contenu web,
> puisque ce n'est pas le chemin normal, donc, fort à parier que ce soit
> des bidouilleurs.

Excuses, je ne comprends tjrs pas :
"que l'adresse IP sur un navigateur, n'affiche rien".
Merci de bien le ré-exprimer.

On peut empêcher bien des connexions avec les
scripts PHP et Iptables.

Re: FOSS friendly PDA?

[Gene Heskett]

On Tuesday 11 February 2020 15:00:51 Richard Owlett wrote:

> On 02/11/2020 10:24 AM, Dan Ritter wrote:
> > Richard Owlett wrote:
> >> I wish to enter/store data while away from home. The data will then
> >> be transferred to my laptop via a USB cable. [Think the capability
> >> of one of the old Palm Pilots in a smartphone(sic) form factor]
> >>
> >> It must use a standard Linux (Debian preferred).
> >> The manufacturer should ship with the Linux installed.
> >> Android is *UNACCEPTABLE*!
> >> It should NOT have cell connectivity.
> >> If it has WiFi, I must be able to disable it.
> >
> > You want a PinePhone.
> >
> > https://www.pine64.org/pinephone/
> >
> > Based on your history, you are now going to tell me that it's
> > unacceptable, because it's a phone.
>
> ROFL
> I had said "should NOT have cell connectivity."
> It indeed can meet that preference in two ways:
>   1. omit SIM card
>   2. set switch to disable the cell modem
>
> I can see practical procurement problems.
> The site you gave hasn't updated to report on impact of Coronavirus.
> There isn't any indication of any U.S. importer - I don't want to have
> the hassle of handling any duties or FCC type acceptance of the
> included RF components. My commercial operator license expired decades
> ago and have no idea what current rigamarole is now.

FWIW Richard, when the Friendly Candy Commish threw us all under the bus 
and burned rubber leaving, they also grandfathered existing licenses for 
life.

I saw that comeing in the later 60's, which is why my card case also 
contains a Journeyman CET card. Cost me 20 bucks to sit for that back 
in '72, and has paid for itself several thousand times over since. I 
didn't crack a book for the earlier 1st phone in 62, nor for the later 
CET.

So If you can find your old ticket, its probably still good. If not ask 
the Commish for a duplicate. My last pocket copy says it expires in '88
but I've signed papers for station applications using it till now. And 
nobody at the commission has ever fussed about it.

Cheers Richard, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: The nightmare of Intel Integrated GPUs under Linux in general and Debian in particular

[Dan Ritter]

Miguel A. Vallejo wrote: 
> What are my alternatives? nVidia cards? I've never used an nVidia card
> but I have read also tons of problems with them in the past. How about
> now? And how about AMD cards?

I have had perfectly reasonable experiences with:

nvidia 8400
nvidia 720
nvidia 730
nvidia 1030
nvidia 1050

radeon R7 360
radeon RX 480
radeon RX 560
radeon 5700

(I don't recommend the 5700 unless you have a serious gaming
habit, but I can confirm that it works well in Debian)

The thing is, I've also had perfectly reasonable experiences
with the Intel GPU built into:

laptop Core 2
Pentium G3258
Pentium G4560
Core i5-2500

as long as I only asked them to run 1 or 2 1080P screens.

-dsr-

Re: The nightmare of Intel Integrated GPUs under Linux in general and Debian in particular

[Andrei POPESCU]

On Ma, 11 feb 20, 20:07:49, Miguel A. Vallejo wrote:
> Around the end of 2014 I moved to Debian as my primary operating
> system. In that year my computer was a Dual Core CPU with integrated
> GPU. It worked just fine with the previous operating system but as
> soon I started to use Debian every day I got system freezes that I
> quickly diagnose as GPU bugs. Those days Wheezy was the current stable
> release. Few months later Jessie was out, and the system freezes still
> where there. And they were related to the Intel GPU.

I was under impression that Intel GPUs are supported quite well.

How exactly did you reach the conclusion that the freezes are related to 
the GPU?

Other things to try:
- update the microcode (package intel-microcode in non-free)
- try with different, known good RAM
- try with a different, known good and generously sized power source
- update the motherboard BIOS

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature

Re: info

[Deiby Herrera]

Que situación la que planteas amigo...

Si no quieres reintalar pon los repositorios estables y usa aptitude
update, luego upgrade y de ultimo dist-upgrade...

Pero

El mar., 11 feb. 2020 2:24 p. m., JavierDebian <
javier.debian.bb...@gmail.com> escribió:

>
>
> El 11/2/20 a las 13:06, José Luis Durán Mujica escribió:
> > Buenas tardes, saludos a todo los compañeros Debianistas... tengo una
> > curiosidad, tengo un equipo con q4os con kde que pasaria si cambiara los
> > archivos de los repositorios a solamente los de debian, mejor dicho
> > ¿como la paso a debian original sin tener que reinstalar el sistema?
> > GRACIAS!
> >
> > --
> >
> > *José Luis Durán*
> >
>
>
> Instalar un Debian desde cero, sin tocar los archivos de usuarios:
> 3 horas y NINGÚN problemas.
>
> Hacer una mezcla.
>
> ¡¡¡FRANKENDEBIAN
>
> Y te vas a volver loco.
>
> Q4OS está basado en Debin, por lo que la estructura de /home es la
> misma, con lo que borrar el sistema operativo y reemplazarlo, no
> presenta ningún inconveniente.
>
> La pregunta matadora: ¿tenés TODO en una sola partición o tenés, por lo
> menos /home, en una partición distinta?
>
> Si es lo segundo, el asunto se complica, pero no es imposible.
>
> JAP.
>
>

Re: Viewer for html files

[Andrei POPESCU]

On Ma, 11 feb 20, 12:26:38, Thomas George wrote:
> 
> It would be nice to have an html viewer which opens a file in the current
> directory with auto-completion of the initial word of the filename.

It's not clear where that "current directory" is, a shell, file manager, 
etc.?

In a shell you can just run your preferred browser and take advantage 
for the shell autocomplete, in a GUI file manager you can double-click 
the html file and it should open it in the default browser.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature

Re: Ansible recommendations?

[Tom Browder]

On Tue, Feb 11, 2020 at 13:58 Mike Oliver  wrote:
...

> > Mike, thanks for your help. I just ordered the eBook you suggested.


The book is very helpful. The cookbook approach is my favorite for these
kind of topics.

After you get your feet wet, be sure to check out Ansible Galaxy
> (https://galaxy.ansible.com/), which is a repository of use contributed
> roles for a variety of tasks.


I have already looked at it briefly. Unfortunately I didn't find exactly
what I was looking for, but some pieces look very useful.

Thanks, Mike.

-Tom

Re: Minor problems with PPPoE

[Andrei POPESCU]

On Ma, 11 feb 20, 17:14:35, John wrote:
> I run a small LAN (currently about 10 active members) all connected to
> the Internet via a Debian Buster firewall and PPPoE.  Most of the time
> this is stable and transparent but just on occasion (like last night)
> the PPP link goes down and I have to restart it manually when I notice
> the issue.  

In case you can't convince pppd to re-establish the connection by itself 
you might try running it with systemd.

Something like 'Restart=on-failure' or similar should be able to do the 
trick.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature

Re: info

[JavierDebian]

El 11/2/20 a las 13:06, José Luis Durán Mujica escribió:
Buenas tardes, saludos a todo los compañeros Debianistas... tengo una 
curiosidad, tengo un equipo con q4os con kde que pasaria si cambiara los 
archivos de los repositorios a solamente los de debian, mejor dicho 
¿como la paso a debian original sin tener que reinstalar el sistema? 
GRACIAS!


--

*José Luis Durán*




Instalar un Debian desde cero, sin tocar los archivos de usuarios:
3 horas y NINGÚN problemas.

Hacer una mezcla.

¡¡¡FRANKENDEBIAN

Y te vas a volver loco.

Q4OS está basado en Debin, por lo que la estructura de /home es la 
misma, con lo que borrar el sistema operativo y reemplazarlo, no 
presenta ningún inconveniente.


La pregunta matadora: ¿tenés TODO en una sola partición o tenés, por lo 
menos /home, en una partición distinta?


Si es lo segundo, el asunto se complica, pero no es imposible.

JAP.

Re: Reply to a message in the Web presentation.

[Andrei POPESCU]

On Ma, 11 feb 20, 10:53:45, pe...@easthope.ca wrote:
> 
> Thanks for challenging my claim.  Without your reply I probably 
> wouldn't have made the test.

That was certainly not my intention, so I apologize to the list for the 
additional traffic.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature

Re: Reply to a message in the Web presentation.

[David Wright]

On Tue 11 Feb 2020 at 07:36:49 (-0800), pe...@easthope.ca wrote:
> 
> * From: Andrei POPESCU 
> * Date: Mon, 10 Feb 2020 21:43:11 +0200
> > Without In-Reply-To a mail reader has no way to which message the reply 
> > belongs, so it's more important than References.
> 
> Please look at the Web view of your reply.  (If your mailer linkifies 
> this URL, click on it.  Otherwise open your browser and copy-paste 
> this URL.) https://lists.debian.org/debian-user/2020/02/msg00375.html
> 
> In-reply-to and References identifiers are identical. 
> Both are E1j1Dus-00018Y-T8@dalton.invalid.  Correct?
> 
> A Web page isn't email but the Web presentation is consistent with 
> https://tools.ietf.org/html/rfc5322#section-3.6.4 , Identification Fields. [*]
> Here is an excerpt.
> > The "In-Reply-To:" field will contain the contents of the
> > "Message-ID:" field of the message to which this one is a reply (the
> >  parent message"). ...
> > 
> > The "References:" field will contain the contents of the parent's
> > "References:" field (if any) followed by the contents of the parent's
> > "Message-ID:" field (if any). 
> 
> The RFC also mentions the unusual case of a reply to multiple parents.
> > If there is more than one parent message, then the "In-Reply-To:" 
> > field will contain the contents of all of the parents' "Message-ID:" 
> > fields.
> But the paragraph for References neglects that case. ("parents'" vs. 
> "parent's")  >8~(  In debian lists, I've never noticed an instance of 
> multiple identifiers for the In-reply-to field.  If you find one, 
> please post a link.  (For my taste, one parent per reply is enough.  
> Multiple replies for multiple parents.) So, provided a reply is to 
> only one parent, the last identifier of References is identical to the 
> identifier of In-Reply-To.

Er, there was at least one posted here within the last week:
https://lists.debian.org/debian-user/2020/02/msg00189.html
That's just one that happened to still be in my inbox.

> OK, I'll rise to the bait.  Will send a variant of this reply with the 
> In-Reply-To field omitted from the header.  If the list software 
> parses References cleverly, it will thread both cases the same.  =8~)  
> If the software requires In-Reply-To, the thread will be broken in the 
> variant.  >8~(
> 
> Regards, ... P.
> 
> [*] Except that the mailing list has "In-reply-to" whereas the RFC 
> sticks to "In-Reply-To".  Not too harmful.

Case-sensitivity is a harmless myth that's always being perpetuated,
it seems.

RFC 5322 §1.2.2.  Syntactic Notation

   This specification uses the Augmented Backus-Naur Form (ABNF)
   [RFC5234] notation for the formal definitions of the syntax of
   messages.  Characters will be specified either by a decimal value
   (e.g., the value %d65 for uppercase A and %d97 for lowercase A) or by
   a case-insensitive literal value enclosed in quotation marks (e.g.,
   "A" for either uppercase or lowercase A).

§ 3.6.4. Identification fields

in-reply-to =   "In-Reply-To:" 1*msg-id CRLF

RFC 5322 § 2.3.

   NOTE:
  ABNF strings are case insensitive and the character set for these
  strings is US-ASCII.

   Hence:
 rulename = "abc"
   and:
 rulename = "aBc"

   will match "abc", "Abc", "aBc", "abC", "ABc", "aBC", "AbC", and
   "ABC".

  To specify a rule that is case sensitive, specify the characters
  individually.

   For example:
 rulename=  %d97 %d98 %d99
   or
 rulename=  %d97.98.99

   will match only the string that comprises only the lowercase
   characters, abc.

Cheers,
David.

Re: FOSS friendly PDA?

[Richard Owlett]

On 02/11/2020 10:24 AM, Dan Ritter wrote:

Richard Owlett wrote:

I wish to enter/store data while away from home. The data will then be
transferred to my laptop via a USB cable. [Think the capability of one of
the old Palm Pilots in a smartphone(sic) form factor]

It must use a standard Linux (Debian preferred).
The manufacturer should ship with the Linux installed.
Android is *UNACCEPTABLE*!
It should NOT have cell connectivity.
If it has WiFi, I must be able to disable it.


You want a PinePhone.

https://www.pine64.org/pinephone/

Based on your history, you are now going to tell me that it's
unacceptable, because it's a phone.


ROFL
I had said "should NOT have cell connectivity."
It indeed can meet that preference in two ways:
 1. omit SIM card
 2. set switch to disable the cell modem

I can see practical procurement problems.
The site you gave hasn't updated to report on impact of Coronavirus.
There isn't any indication of any U.S. importer - I don't want to have 
the hassle of handling any duties or FCC type acceptance of the included 
RF components. My commercial operator license expired decades ago and 
have no idea what current rigamarole is now.


It does have a nice set of specs.






Go read about it before you do that.


-dsr-

Re: Ansible recommendations?

[Mike Oliver]

Tom Browder writes:

> On Tue, Feb 11, 2020 at 9:46 AM Mike Oliver  wrote:
>> Tom Browder writes:
> ...
>
> Mike, thanks for your help. I just ordered the eBook you suggested.
> And, after looking at Rex, I think I'll try the Ansible route for now
> (although porting it to Raku would be an interesting project).
>
After you get your feet wet, be sure to check out Ansible Galaxy
(https://galaxy.ansible.com/), which is a repository of use contributed
roles for a variety of tasks.

> Cheers!
>
> -Tom

--
Mike Oliver

Re: Dúvida com mate desktop

[Helio Loureiro]

https://helio.loureiro.eng.br/index.php/linux/357-arrumando-a-barra-de-rolagem-em-aplicativos-gtk

./helio

On Mon, Feb 10, 2020, 15:37 P. J.  wrote:

> > Hoje postei mais um rant sobre GTK.  Treco lixo dos infernos.
>
> opa... seria possível mandar o link? abs
>
> Em 07/02/2020, Helio Loureiro escreveu:
> > Hoje postei mais um rant sobre GTK.  Treco lixo dos infernos.
> >
> > ./helio
> >
> > On Fri, Feb 7, 2020, 16:40 Leandro Guimarães Faria Corcete DUTRA <
> > l...@dutras.org> wrote:
> >
> >> Le vendredi 07 février 2020 à 15:29 +0100, Helio Loureiro a écrit :
> >> > Jamais será.
> >>
> >> Para idiotas como eu, é há tempos.
> >>
> >>
> >> > KDE rulez.
> >>
> >> Acho que se eu tivesse de abandonar o Gnome, voltaria ao StumpWM, que
> >> combina com o GNU Emacs e o Conkeror.  Preguiça do KDE.
> >>
> >>
> >>
> >> --
> >> +55 (61) 3546 7191  gTalk: xmpp:leand...@jabber.org
> >> +55 (61) 99302 2691   http://en.dutras.org/
> >> BRAZIL GMT−3
> >> https://useplaintext.email/#why-plaintext
> >>
> >>
> >
>
>
> --
> |  .''`.   A fé não dá respostas. Só impede perguntas.
> | : :'  :
> | `. `'`
> |   `-   Je vois tout
>
>

Re: Reply to a message in the Web presentation.

[David Wright]

On Tue 11 Feb 2020 at 10:53:45 (-0800), pe...@easthope.ca wrote:
> 
> Now we can see the result of the test.  
> 
> Messages
> https://lists.debian.org/debian-user/2020/02/msg00416.html
> and
> https://lists.debian.org/debian-user/2020/02/msg00420.html
> both thread back to your reply which threads back to my original 
> message.  They have the same References.  416 was issued with an 
> In-Reply-To field; 420 was issued without In-Reply-To.
> 
> So, for a 2nd reply at least, the list software maintains the thread 
> without In-Reply-To.  Consistent with casual observations a few years 
> back.
> 
> We might hypothesize a problem in a later generation. Then do further 
> tests or study the source.  =8~(  At present I'm not so eager.

And so you've tested one feature of one piece of software on the Internet.
Out of … ? A long way to go.

Mail clients are at liberty to truncate the list of references whose
length can get out of hand. How they prune it is not specified. So
robustness of threading is improved by including both, even though
the in-reply-to is usually duplicated by the last item in the references.

Also, some mailers put human-friendly information into the in-reply-to,
which has a freer format than the references.

> This is a nice example of "Less is More".
> https://en.wikipedia.org/wiki/Minimalism_(computing)

But not of the robustness principle. Other email clients might not
behave in the way you expect them to.

> Thanks for challenging my claim.  Without your reply I probably 
> wouldn't have made the test.

Cheers,
David.

Re: Minor problems with PPPoE

[Tixy]

On Tue, 2020-02-11 at 17:14 +, John wrote:
> I run a small LAN (currently about 10 active members) all connected to
> the Internet via a Debian Buster firewall and PPPoE.  Most of the time
> this is stable and transparent but just on occasion (like last night)
> the PPP link goes down and I have to restart it manually when I notice
> the issue.  This brings up two problems.
> 
> 1: 
[...]
> 2:  Ideally I would like PPP to restart after a break without manual
> intervention.  Following advice earlier I have in the
> /etc/ppp/peers/dsl-provider file the lines
> persist
> holdoff 1
> which used to give some resilience but at 4am today it did not.  Is
> there a simple way to restart automatically that works?

I don't have to restart my ppp manually. Looking at the notes I made
when I set this up many, many years ago I have...

  Edit /etc/ppp/peers/dsl-provider to add a line saying "maxfail 0",
  after the 'persist' entry is a good place. This should stop pppd from
  timing out when it can't connect.

Also, my 'pppd' logging goes to /var/log/messages, so if you're trying
to debug your connection you could try looking there.

-- 
Tixy

Re: usb Confusion

[Martin McCormick]

Things are much better here.  Tech Support at Crucial insisted
that every drive they ship out contains 1 usb-C to usb-C cable
and an adapter to make it fit a usb-A port.  I figure it had
accidentally been discarded as trash or was really left out but I
kept looking and found the little box the drive came in.

There is a small pocket in the tray containing a pamflet
that one suddenly realizes is too deep to be just the booklet.

Everything was there and I do believe that is the first
usb-C cable I have ever encountered.

Again, thanks for clearing up the confusion.

Martin McCormick

The nightmare of Intel Integrated GPUs under Linux in general and Debian in particular

[Miguel A. Vallejo]

Around the end of 2014 I moved to Debian as my primary operating
system. In that year my computer was a Dual Core CPU with integrated
GPU. It worked just fine with the previous operating system but as
soon I started to use Debian every day I got system freezes that I
quickly diagnose as GPU bugs. Those days Wheezy was the current stable
release. Few months later Jessie was out, and the system freezes still
where there. And they were related to the Intel GPU.

Someone told me my CPU was too old and nobody will look for a solution
in such old hardware, so in 2018 I upgraded my computer to a i5 with
HD530 Intel GPU. Things worked fine for one or two weeks, until a new
Intel GPU system freeze happend. I tried testing and unstable, but the
freezes where still happening. Stretch went out and the freezes
continued. Buster was out, and the problems with Intel GPUs are still
causing complete system freezes. My last complete system freeze was
yesterday: three complete system freezes in less than an hour.

My first bug report about a system freeze was in 2015 (see Debian bug
#787267) and my last report was only a few days ago. I went from
Wheezy to Buster, from kernel 3.16 up to kernel 5.4, and with all of
them I had serious GPU issues (system hangs/freezes/display
corruptions).

Almost five years suffering this day after day is just too much for
me. I need a solution. Kernels 5.5 just seems as buggy as all the
previous ones at least related to the Intel GPUs and according to the
new bug reports at Freedesktop's Gitlab.

What are my alternatives? nVidia cards? I've never used an nVidia card
but I have read also tons of problems with them in the past. How about
now? And how about AMD cards?

What are your recommendations / experiences?

Thanks in advance.

Re: Reply to a message in the Web presentation.

[peter]

Andrei,

Now we can see the result of the test.  

Messages
https://lists.debian.org/debian-user/2020/02/msg00416.html
and
https://lists.debian.org/debian-user/2020/02/msg00420.html
both thread back to your reply which threads back to my original 
message.  They have the same References.  416 was issued with an 
In-Reply-To field; 420 was issued without In-Reply-To.

So, for a 2nd reply at least, the list software maintains the thread 
without In-Reply-To.  Consistent with casual observations a few years 
back.

We might hypothesize a problem in a later generation. Then do further 
tests or study the source.  =8~(  At present I'm not so eager.

This is a nice example of "Less is More".
https://en.wikipedia.org/wiki/Minimalism_(computing)

Thanks for challenging my claim.  Without your reply I probably 
wouldn't have made the test.

Regards,   ... P.
   



-- 
https://en.wikibooks.org/wiki/Medical_Machines
https://en.wikibooks.org/wiki/Oberon
Tel: +1 604 670 0140Bcc: peter at easthope. ca

Re: Ansible recommendations?

[Tom Browder]

On Tue, Feb 11, 2020 at 12:09 PM Yvan Masson
 wrote:
...
> I can only answer this question: I use Ansible regularly, and I am
> satisfied because it works :-) and the setup is really easy compared to
> what I understood from other tools (did'nt know Rex). Push mode also
> seems the way to go if your laptop needs to be the "master" (I suppose
...

Thanks, Yvan, and you're right, the push mode is just what I need,
whete it be Ansible or Rex.

Cheers!


-Tom

Re: Ansible recommendations?

[Tom Browder]

On Tue, Feb 11, 2020 at 9:46 AM Mike Oliver  wrote:
> Tom Browder writes:
...

Mike, thanks for your help. I just ordered the eBook you suggested.
And, after looking at Rex, I think I'll try the Ansible route for now
(although porting it to Raku would be an interesting project).

Cheers!

-Tom

Re: Viewer for html files

[Greg Wooledge]

On Tue, Feb 11, 2020 at 12:26:38PM -0500, Thomas George wrote:
> 
> file:///home/user/directory/long file name.html
> 
> It would be nice to have an html viewer which opens a file in the current
> directory with auto-completion of the initial word of the filename.
> 
> Is there such a thing?

Not that I'm aware of, but you could write a shell function to do it
for you.  Exact details will depend on which browser you intend to
launch.

Let's say you want to call your function "hv", and you're in the directory
where the HTML file is.  You can type "hv ", and then the first part of
the filename, and then press Tab to have your shell (bash, I'm assuming)
tab-complete the filename for you.  You'll see something like this:

prompt:$ hv long\ file\ name.html

This will pass "long file name.html" as a single argument to the "hv"
command.  Now all we have to do is write that command.

Let's also assume that your browser wants you to convert the spaces to
%20 strings.  Some browsers may not require it, but bash can do it
easily enough, so we might as well add that.

hv() {
mybrowser "file://$PWD/${1// /%20}"
}

Of course, you'll need to replace "mybrowser" with whatever command
and options are required to launch a browser, or to send a URL to an
already-running instance of a browser.

This particular function may be perfectly suited to your needs, but it
doesn't gracefully handle pathnames with slashes in them, e.g. if you
tried to do hv ../foobar.html.  To handle that, you'd need to
canonicalize the pathname with $PWD/ prefixed to it.  There are
shell commands that can do it, but I'd prefer not to pursue that
goal unless absolutely necessary.

There are also other URL-encoding steps that may be required if you
use special characters other than spaces in your filenames.  Again,
I'm choosing to let that goal go unpursued unless absolutely necessary.

Re: Minor problems with PPPoE

[Greg Wooledge]

On Tue, Feb 11, 2020 at 05:14:35PM +, John wrote:
> 1: Since upgrading from Stretch to Buster the plog command does not
> work, showing only pre-Buster output.  This is clearly because
> /var/log/ppp.log is not being written to.   The man page for plog says
> that it would be if /etc/syslog.conf has a particular line in it; but
> there is no /etc/syslog.conf file.  There is a /etc/rsyslog.conf file
> with the recommended line in it but it is not working.  How do I get
> plog and /var/log/ppp.log back?
>  local2.*   -/var/log/ppp.log

First, make sure rsyslog is running.  "systemctl status rsyslog" should
be a good start.  I suspect you'll get some sort of error here, and
the next steps will depend on what it is.

If it's running, you should be able to test whether this logging rule
is working, by sending a log request with that "facility".  For
example,

logger -p local2.info "hello world"

Re: Viewer for html files

[john doe]

On 2/11/2020 6:26 PM, Thomas George wrote:
> Obviously I can view html files with any of the browsers. It is not
> always convenient. If I save an interesting web page by right clicking
> on save as the result is a often a very long file name containing
> spaces. I save these html files in various directories according to
> subject. if I subsequently want to view the file I must type something like
>
> file:///home/user/directory/long file name.html
>
> My browsers have no auto-complete and do not like file names with
> included spaces.
>
> The solution, of course, to rename the file as foo.html
>
> It would be nice to have an html viewer which opens a file in the
> current directory with auto-completion of the initial word of the filename.
>
> Is there such a thing?
>

$ python3 -m http.server

then point your browser to localhost:8000


Also, you could make firefox open the file when you click on it.

--
John Doe

Re: Reply to a message in the Web presentation.

[Henning Follmann]

On Tue, Feb 11, 2020 at 07:49:42AM -0800, pe...@easthope.ca wrote:
> This is a deliberate 2nd copy of a message.  In-Reply-To is omitted 
> from the header to test threading.
> 
>

Well you've proven your point. My MUA does indeed thread this in
the correct order.
However, what actually is your point here?
Is there some Don Quixote quest in the coming?

-H

-- 
Henning Follmann   | hfollm...@itcfollmann.com

Re: Ansible recommendations?

[Yvan Masson]

Hi,

Le 11/02/2020 à 16:08, Tom Browder a écrit :
I'm considering using Ansible (from Debian packages) for maintaining 
multiple remote Debian servers. The master server will be my Debian laptop.


I have three questions:

1. If you have experience with Debian ansible, are you or were you 
satisfied with the experience?
I can only answer this question: I use Ansible regularly, and I am 
satisfied because it works :-) and the setup is really easy compared to 
what I understood from other tools (did'nt know Rex). Push mode also 
seems the way to go if your laptop needs to be the "master" (I suppose 
that in pull-mode your servers will complain they can't find your laptop 
when it is online). Another interesting thing: learning Ansible is 
useful to manage Linux boxes, but also Windows hosts, switches…


2. There are many published books in print about Ansible. Can you 
recommend one for an experienced sysadmin who is an Ansible newbie?


3. If you don't recommend Ansible, can you recommend any other similar 
system?


Thanks.

-Tom

Minor problems with PPPoE

[John]

I run a small LAN (currently about 10 active members) all connected to
the Internet via a Debian Buster firewall and PPPoE.  Most of the time
this is stable and transparent but just on occasion (like last night)
the PPP link goes down and I have to restart it manually when I notice
the issue.  This brings up two problems.

1: Since upgrading from Stretch to Buster the plog command does not
work, showing only pre-Buster output.  This is clearly because
/var/log/ppp.log is not being written to.   The man page for plog says
that it would be if /etc/syslog.conf has a particular line in it; but
there is no /etc/syslog.conf file.  There is a /etc/rsyslog.conf file
with the recommended line in it but it is not working.  How do I get
plog and /var/log/ppp.log back?
 local2.*   -/var/log/ppp.log

2:  Ideally I would like PPP to restart after a break without manual
intervention.  Following advice earlier I have in the
/etc/ppp/peers/dsl-provider file the lines
persist
holdoff 1
which used to give some resilience but at 4am today it did not.  Is
there a simple way to restart automatically that works?  I could wrie
code to view /var/log/messages for pppd but that seems over complex.

==John ffitch

Viewer for html files

[Thomas George]

Obviously I can view html files with any of the browsers. It is not 
always convenient. If I save an interesting web page by right clicking 
on save as the result is a often a very long file name containing 
spaces. I save these html files in various directories according to 
subject. if I subsequently want to view the file I must type something like


file:///home/user/directory/long file name.html

My browsers have no auto-complete and do not like file names with 
included spaces.


The solution, of course, to rename the file as foo.html

It would be nice to have an html viewer which opens a file in the 
current directory with auto-completion of the initial word of the filename.


Is there such a thing?

Re: FOSS-compatible smartwatch?

[Curt]

On 2020-02-11, Andrei POPESCU  wrote:
>
> Some work-in-progress:
> https://www.pine64.org/pinetime/
>
> Kind regards,
> Andrei

There's also AsteroidOS (watch not included).

https://asteroidos.org/ 

-- 
"J'ai pour me guérir du jugement des autres toute la distance qui me sépare de
moi." Antonin Artaud

Re: retirar meu e-mail da lista de e-mail

[Carlos Donizete Froes]

Acesse este link.

https://www.debian.org/MailingLists/unsubscribe

Selecione a lista, coloque o seu email e desinscreva-se.Em 11 de fev de 2020 
13:51, joao mauricio machado de arujo  escreveu:
>
> Prezados,
>
> favor retirar meu e-mail da lista de e-mail 
> debian-user-portuguese@lists.debian.org
>
> Agradeço antecipadamente a atenção dispensada.
>
> João Maurício Machado de Araújo
> Contato: (61) 9 9315-1984 (Claro)/ 3318-7600(Trab)

Re: Comment interdire la consultation de son serveur web sur son IP directe et le port 443?

[Patrick CAO HUU THIEN]

Le 11 févr. 2020 a 05:36:16 +0100, G2PC a écrit :

bonjour a toi,

> Comment interdire la consultation de son serveur web sur son IP directe
> et le port 443 ?
> Est ce que ça a du sens ?

si ce n' est pas un server web oui.
si tu ne veux pas utiliser https, oui.
:)

Le plus simple me semble est iptables.
Tu interdis tout sauf ce que tu veux.

Si c'est une histoire de vhost je ne suis pas specialiste d'apache
(nginx c'est mieux :))





> 
> J'ai modifié ma configuration pour interdire la consultation directe du
> serveur web sur sont IP directe et le port 80.
> 
> Si je tente de modifier le VHost pour ajouter une règle 443, je n'arrive
> à rien, je suis redirigé vers le premier site que j'héberge, dans
> l'ordre alphabétique.
> /var/www/ethernium.fun
> 
> En même temps, je n'ai pas de certificat pour l'ip seule pour le serveur.
> Je note également que certains sites ont été validé et enregistrés pour
> HSTS.
> 
> Si quelqu'un a un conseil à donner, pour gérer ça ( IP:443 ) à peu près
> correctement, si cela est nécessaire ?
> Faut t'il s'occuper de la mise en place d'une règle pour bloquer le
> trafic sur IP:443 ?
> 
> 
> Voilà la conf actuelle, si quelque chose d'anormal SAUTE aux yeux ?
> https://wiki.visionduweb.fr/index.php?title=VirtualHosts_des_domaines_enregistrés

PS: c'est peut etre pas une bonne idee de mettre ta config apache sur un
site.

amicalement
patrick

Re: Ansible recommendations?

[Tom Browder]

On Tue, Feb 11, 2020 at 09:25 Dan Ritter  wrote:

> Tom Browder wrote:

...

> If you have flocks of nearly identical servers in several
> flavors, you want Puppet or Chef or something similar.
>
...

> Puppet has its own language for configuration.
>
> Both take the approach that a long-running client on each
> machine will periodically reach out to your central config
> server and get an updated set of instructions, then execute
> those instructions. That's a pull mechanism.
>
> Ansible, on the other hand, relies on your laptop to reach out
> to the client machines and do things to them. That's a push


Good point.  Maybe using Ansible or Rex to control my main server and use
Puppet from it as control for the other, very similar servers might be the
way to go.

Thanks, Dan!

-Tom

retirar meu e-mail da lista de e-mail

[joao mauricio machado de arujo]

Prezados,

favor retirar meu e-mail da lista de e-mail
debian-user-portuguese@lists.debian.org

Agradeço antecipadamente a atenção dispensada.

*João Maurício Machado de Araújo*
*Contato: (61) 9 9315-1984 (Claro)/ 3318-7600(Trab)*

Re: usb Confusion

[Martin McCormick]

Dan Ritter  writes:
> If I recall correctly, Martin doesn't see well, which explains a
> chunk of the confusion here.

Well, my wife has excellent vision and we were talking
about how pictures can be almost worthless after a certain point.
Several of those small connectors look similar.  A Lightning
connector is about the same size as a microusb but the microusb
has 2 little key ways on one side that insure it can only be put
in facing one way.
> 
> Martin: Crucial is probably describing the other end of the
> cable they supplied -- assuming they supplied a cable. It might
> be proprietary at one end and USB type A at the other. But what
> you are describing could also be USB type C at one end.

There was nothing in the box except the drive which is
the reason for the confusion.

I thought the microusb with the 2 key ways was a type C
and that's when I learned it wasn't when one of those wouldn't
fit either way.

> 
> >   What is the correct nomenclature for the most common usb
> > connector that has been around for 25 or 30 years and fits the
> > vast majority of devices using usb?
> 
> USB type A is rectangular and common on PC ends.
> 
> USB type B is trapezoidal, almost square, and common on printers
> and other largish peripherals.

That's what I always thought.  This makes all the sense
in the world.

> 
> USB type B-mini is trapezoidal, very small, and has distinct
> indentations on the top left and right sides. It was common for
> small peripherals like MP3 players.
> 
> USB type B-micro is flatter than B-mini and does not have
> indentations. It is common for cell phones and small
> peripherals.
> 
> USB type C is about the size of a lightning connector, rounded
> on both sides, and is designed to go in upside down or rightside
> up without causing problems.

I guess I was confused about the microusb versus the usb-C.

I am about to call Crucial Tech Support and get straight
on the end that goes in the drive.

Anyway, I appreciate the information.  Thank you.

Martin

Re: usb Confusion

[Andrei POPESCU]

On Ma, 11 feb 20, 09:47:50, Jude DaShiell wrote:
> That sounds like a Micro usb port.  If you have a connector like that
> try inserting it very gently.  If it doesn't go in easily, flip the
> cable and try the other side.

The regular Micro-B connector supports only USB 2.0. The USB 3.0 Micro-B 
connector is almost twice as long.

Considering this is an external SSD drive it's much more likely a Type-C 
connector.

As a side-note, when buying new stuff I would recommend staying away 
from Type-B connectors and even Type-A if possible.


Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature

Re: Ansible recommendations?

[Tom Browder]

On Tue, Feb 11, 2020 at 09:38 Alex Mestiashvili 
wrote:

> On 2/11/20 4:08 PM, Tom Browder wrote:

...

> > 1. If you have experience with Debian ansible, are you or were you
> > satisfied with the experience?
>
...

> I won't say much about ansible since I didn't use it long enough.
> If you need a simple and flexible push based automation framework have a
> look on rex - rexify.org, apt-get install rex :)


Okay, that looks very interesting, especially since Perl (and Raku!) are my
goto scripting languages!

Thanks, Alex.

-Tom

Re: Reply to a message in the Web presentation.

[peter]

This is a deliberate 2nd copy of a message.  In-Reply-To is omitted 
from the header to test threading.

Andrei,

*   From: Andrei POPESCU 
*   Date: Mon, 10 Feb 2020 21:43:11 +0200
> Without In-Reply-To a mail reader has no way to which message the reply 
> belongs, so it's more important than References.

Please look at the Web view of your reply.  (If your mailer linkifies 
this URL, click on it.  Otherwise open your browser and copy-paste 
this URL.) https://lists.debian.org/debian-user/2020/02/msg00375.html

In-reply-to and References identifiers are identical. 
Both are E1j1Dus-00018Y-T8@dalton.invalid.  Correct?

A Web page isn't email but the Web presentation is consistent with 
https://tools.ietf.org/html/rfc5322#section-3.6.4 , Identification Fields. [*]
Here is an excerpt.
> The "In-Reply-To:" field will contain the contents of the
> "Message-ID:" field of the message to which this one is a reply (the
>  parent message"). ...
> 
> The "References:" field will contain the contents of the parent's
> "References:" field (if any) followed by the contents of the parent's
> "Message-ID:" field (if any). 

The RFC also mentions the unusual case of a reply to multiple parents.
> If there is more than one parent message, then the "In-Reply-To:" 
> field will contain the contents of all of the parents' "Message-ID:" 
> fields.
But the paragraph for References neglects that case. ("parents'" vs. 
"parent's")  >8~(  In debian lists, I've never noticed an instance of 
multiple identifiers for the In-reply-to field.  If you find one, 
please post a link.  (For my taste, one parent per reply is enough.  
Multiple replies for multiple parents.) So, provided a reply is to 
only one parent, the last identifier of References is identical to the 
identifier of In-Reply-To.

OK, I'll rise to the bait.  Will send a variant of this reply with the 
In-Reply-To field omitted from the header.  If the list software 
parses References cleverly, it will thread both cases the same.  =8~)  
If the software requires In-Reply-To, the thread will be broken in the 
variant.  >8~(

Regards, ... P.

[*] Except that the mailing list has "In-reply-to" whereas the RFC 
sticks to "In-Reply-To".  Not too harmful.
-- 
https://en.wikibooks.org/wiki/Medical_Machines
https://en.wikibooks.org/wiki/Oberon
Tel: +1 604 670 0140Bcc: peter at easthope. ca

Re: Using a Debian Live image to Invoke a Rescue Shell

[Andrei POPESCU]

On Ma, 11 feb 20, 06:50:58, Martin McCormick wrote:
> I don't know if things have changed or I forgot how to do this
> but I want to boot in to a Debian image and not install it but
> invoke a shell so as to clone the hard drive on a Windows machine
> to an external hard drive.

From memory, I'm aware of two methods:

1. Any time after starting the installer, press Ctrl+F2 and there will 
be a prompt to press Enter to enable the console. Ctrl+F1 returns to the 
installer.

If using the graphical installer you will need Ctrl+Alt+F2 and Ctrl+F5 
will should get you back to the installer.

2. Start the installer in "rescue mode". After doing some basic 
configuration it will ask you about the root and will offer to start a 
shell. For your purposes chose "open a shell in the installer 
environment", because you don't want to touch your system.

As mentioned above, this is all from memory, it's been a while since I 
used the installer.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature

Re: FOSS friendly PDA?

[Dan Ritter]

Richard Owlett wrote: 
> I wish to enter/store data while away from home. The data will then be
> transferred to my laptop via a USB cable. [Think the capability of one of
> the old Palm Pilots in a smartphone(sic) form factor]
> 
> It must use a standard Linux (Debian preferred).
> The manufacturer should ship with the Linux installed.
> Android is *UNACCEPTABLE*!
> It should NOT have cell connectivity.
> If it has WiFi, I must be able to disable it.

You want a PinePhone.

https://www.pine64.org/pinephone/

Based on your history, you are now going to tell me that it's
unacceptable, because it's a phone.

Go read about it before you do that.


-dsr-

Re: Ansible recommendations?

[Thomas Pircher]

Mike Oliver wrote:
> Managing Debian with Ansible is pretty similar to managing
> just about every other Linux distribution,

This is my experience as well.

> with a few minor tweaks
> (e.g. using the 'apt' module for managing packages instead of yum/dnf).

For simple tasks one can use the package module [1], which is
independent of the underlying package manager.

> I've also used SaltStack. It's also very good. Anecdotally, I've found
> it to be significantly faster than Ansible.

I have had good results using ssh multiplexing (ControlMaster) to speed
up Ansible, as it doesn't need to re-establish a new ssh session for
each task.

One slight annoyance is that Ansible can be quite noisy in the log
files, if this is something you care about.

Thomas

[1] https://docs.ansible.com/ansible/latest/modules/package_module.html

Re: info

[Paynalton]

El mar., 11 feb. 2020 a las 10:07, José Luis Durán Mujica (<
chelike...@gmail.com>) escribió:

> Buenas tardes, saludos a todo los compañeros Debianistas... tengo una
> curiosidad, tengo un equipo con q4os con kde que pasaria si cambiara los
> archivos de los repositorios a solamente los de debian, mejor dicho ¿como
> la paso a debian original sin tener que reinstalar el sistema? GRACIAS!
>
>
No es tarea sencilla. Tienes que cambiar el sourceslist en la carpeta
/etc/apt/

Tendrás un serio problema de dependencias, tras hacer un "apt update"
revisa los paquetes que se van a desinstalar y cuales no tienen candidatos,
conflictos con otros paquetes instalados... En fin, una maraña de cosas.
Solo puedo darte mis buenos deseos con esta empresa.

Si por el contrario sólo quieres conservar tu usuario y carpeta Home con
todo su contenido, primero mueve la carpeta Home a otra partición. Al
momento de instalar, usa el particionamiento personalizado y elige dicha
partición para montarse en /home sin formatear. Con esto conservarás tus
configuraciones, archivos, fondo de pantalla, etc. en la gran mayoría de
aplicaciones.


> --
>
> *José Luis Durán*
>
>

Re: Reply to a message in the Web presentation.

[peter]

Andrei,

*   From: Andrei POPESCU 
*   Date: Mon, 10 Feb 2020 21:43:11 +0200
> Without In-Reply-To a mail reader has no way to which message the reply 
> belongs, so it's more important than References.

Please look at the Web view of your reply.  (If your mailer linkifies 
this URL, click on it.  Otherwise open your browser and copy-paste 
this URL.) https://lists.debian.org/debian-user/2020/02/msg00375.html

In-reply-to and References identifiers are identical. 
Both are E1j1Dus-00018Y-T8@dalton.invalid.  Correct?

A Web page isn't email but the Web presentation is consistent with 
https://tools.ietf.org/html/rfc5322#section-3.6.4 , Identification Fields. [*]
Here is an excerpt.
> The "In-Reply-To:" field will contain the contents of the
> "Message-ID:" field of the message to which this one is a reply (the
>  parent message"). ...
> 
> The "References:" field will contain the contents of the parent's
> "References:" field (if any) followed by the contents of the parent's
> "Message-ID:" field (if any). 

The RFC also mentions the unusual case of a reply to multiple parents.
> If there is more than one parent message, then the "In-Reply-To:" 
> field will contain the contents of all of the parents' "Message-ID:" 
> fields.
But the paragraph for References neglects that case. ("parents'" vs. 
"parent's")  >8~(  In debian lists, I've never noticed an instance of 
multiple identifiers for the In-reply-to field.  If you find one, 
please post a link.  (For my taste, one parent per reply is enough.  
Multiple replies for multiple parents.) So, provided a reply is to 
only one parent, the last identifier of References is identical to the 
identifier of In-Reply-To.

OK, I'll rise to the bait.  Will send a variant of this reply with the 
In-Reply-To field omitted from the header.  If the list software 
parses References cleverly, it will thread both cases the same.  =8~)  
If the software requires In-Reply-To, the thread will be broken in the 
variant.  >8~(

Regards, ... P.

[*] Except that the mailing list has "In-reply-to" whereas the RFC 
sticks to "In-Reply-To".  Not too harmful.
-- 
https://en.wikibooks.org/wiki/Medical_Machines
https://en.wikibooks.org/wiki/Oberon
Tel: +1 604 670 0140Bcc: peter at easthope. ca

Re: Having trouble installing Debian on brand new hard drive

[Andrei POPESCU]

On Ma, 11 feb 20, 21:07:05, kaye n wrote:
> Thank you guys for telling me the email got lost.  I'll just describe it.
> 
> The partition table is GPT.
> 
> Imagine you're looking at the graphical presentation of my hdd in GParted.
> 
> Starting from the left:

For the future, you could paste the (relevant part from) the output of 
'parted -l'.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature

FOSS friendly PDA?

[Richard Owlett]

I wish to enter/store data while away from home. The data will then be 
transferred to my laptop via a USB cable. [Think the capability of one 
of the old Palm Pilots in a smartphone(sic) form factor]


It must use a standard Linux (Debian preferred).
The manufacturer should ship with the Linux installed.
Android is *UNACCEPTABLE*!
It should NOT have cell connectivity.
If it has WiFi, I must be able to disable it.

When I looked a few years ago there were some open source hardware 
projects in the prototype stage but I don't recall any that reached 
production.


There was something with similar functionality based on Raspberry Pi but 
in ended up much to thick as the touch screen was "top hat" based.


Any suggestions or survey articles I should read.

TIA

info

[José Luis Durán Mujica]

Buenas tardes, saludos a todo los compañeros Debianistas... tengo una
curiosidad, tengo un equipo con q4os con kde que pasaria si cambiara los
archivos de los repositorios a solamente los de debian, mejor dicho ¿como
la paso a debian original sin tener que reinstalar el sistema? GRACIAS!

-- 

*José Luis Durán*

Re: Ansible recommendations?

[Mike Oliver]

Tom Browder writes:

> I'm considering using Ansible (from Debian packages) for maintaining
> multiple remote Debian servers. The master server will be my Debian laptop.
>
> I have three questions:
>
> 1. If you have experience with Debian ansible, are you or were you
> satisfied with the experience?
I've use Ansible with Debian for about 5 years. I don't have any
complaints. Managing Debian with Ansible is pretty similar to managing
just about every other Linux distribution, with a few minor tweaks
(e.g. using the 'apt' module for managing packages instead of yum/dnf).

> 2. There are many published books in print about Ansible. Can you recommend
> one for an experienced sysadmin who is an Ansible newbie?
The documentation is quite good. It might be all you need. For a more
narrative introduction, Jeff Geerling's "Ansible for DevOps" is pretty
good: https://leanpub.com/ansible-for-devops

> 3. If you don't recommend Ansible, can you recommend any other similar
> system?
I've also used SaltStack. It's also very good. Anecdotally, I've found
it to be significantly faster than Ansible. I find that Ansible can
be less free-form than SaltStack, but that's not necessarily a bad
thing (take a glance at how looping/iteration works to get a sense for
what I mean). I preferred working with SaltCloud for initial provisioning of
servers, though. Really, either one would be perfectly adequate for the
needs you describe.

> Thanks.
>
> -Tom


--
Mike Oliver

Re: Ansible recommendations?

[Mike Oliver]

Tom Browder writes:

> I'm considering using Ansible (from Debian packages) for maintaining
> multiple remote Debian servers. The master server will be my Debian laptop.
>
> I have three questions:
>
> 1. If you have experience with Debian ansible, are you or were you
> satisfied with the experience?
>
I've use Ansible with Debian for about 5 years. I don't have any
complaints. Managing Debian with Ansible is pretty similar to managing
just about every other Linux distribution, with a few minor tweaks
(e.g. using the 'apt' module for managing packages instead of yum/dnf).

> 2. There are many published books in print about Ansible. Can you recommend
> one for an experienced sysadmin who is an Ansible newbie?
>
The documentation is quite good. It might be all you need. For a more
narrative introduction, Jeff Geerling's "Ansible for DevOps" is pretty
good: https://leanpub.com/ansible-for-devops

> 3. If you don't recommend Ansible, can you recommend any other similar
> system?
>
I've also used SaltStack. It's also very good. Anecdotally, I've found
it to be significantly faster than Ansible. I find that Ansible can
be less free-form than SaltStack, but that's not necessarily a bad
thing (take a glance at how looping/iteration works to get a sense for
what I mean). I preferred working with SaltCloud for initial provisioning of
servers, though. Really, either one would be perfectly adequate for the
needs you describe.

> Thanks.
>
> -Tom


--
Mike Oliver

Re: Ansible recommendations?

[Alex Mestiashvili]

On 2/11/20 4:08 PM, Tom Browder wrote:
I'm considering using Ansible (from Debian packages) for maintaining 
multiple remote Debian servers. The master server will be my Debian laptop.


I have three questions:

1. If you have experience with Debian ansible, are you or were you 
satisfied with the experience?


3. If you don't recommend Ansible, can you recommend any other similar 
system?


Thanks.

-Tom


I won't say much about ansible since I didn't use it long enough.
If you need a simple and flexible push based automation framework have a 
look on rex - rexify.org, apt-get install rex :)


Ansible is way more popular, but also has a lot of issues, just have a 
look on their github page...

Re: Ansible recommendations?

[Dan Ritter]

Tom Browder wrote: 
> I'm considering using Ansible (from Debian packages) for maintaining
> multiple remote Debian servers. The master server will be my Debian laptop.

If you have a few, mostly different servers, Ansible is a
reasonable choice.

If you have flocks of nearly identical servers in several
flavors, you want Puppet or Chef or something similar.

Puppet has its own language for configuration.

Chef uses Ruby for its configuration language.

Both take the approach that a long-running client on each
machine will periodically reach out to your central config
server and get an updated set of instructions, then execute
those instructions. That's a pull mechanism. 

Ansible, on the other hand, relies on your laptop to reach out
to the client machines and do things to them. That's a push
mechanism.

-dsr-

Re: Comment savoir si un vieux portable est compatible linux ?

[David_dev Dev]

Merci à tous.

Je vais tester dès qu'ils auront migré toutes leurs install et données sur
le nouveau portable (vais m'amuser à rechercher si leur Microsoft Office
Suite est migrable ou pas en sachant qu'ils retrouvent aucun papier, et que
LibreOffice n'est pas une option...).

J'ai déjà installé souvent ma config sur des vieux PC de bureau pour les
faire revivre (y compris un plexmediaserveur en plus de poste utilisateur
sur un core 2 duo :) ), mais rarement sur des portables (le dernier, un HP
de 5-7 ans, j'avais bcp galéré pour le wifi, notamment pour les
commutateurs physiques qui n'étaient pas bien pris en compte et il a fallu
ruser et chercher assez loin).



Le mar. 11 févr. 2020 à 14:27, djomentunes  a écrit :

>
> Bonjour David,
>
> Normalement il y a aucune raison d'incompatibilité avec une configuration
> matérielle et l'installation d'un système d'exploitation GNU/Linux.
>
> Quelques liens pourront probablement t'aider :
> https://dflinux.frama.io/lescahiersdudebutant/lcdd05-installation/
>
> Avant de franchir le pas :
>
> https://www.google.fr/amp/s/lecrabeinfo.net/creer-image-systeme-windows-10-8-7.html%3famp
>
> Le système d'exploitation demandé :
>
> https://www.google.fr/amp/s/lecrabeinfo.net/installer-linux-debian-le-guide-complet.html%3famp
>
> En souhaitant avoir pu vous aider.
>
> Cordialement,
>
>
> Envoyé depuis mon smartphone Samsung Galaxy.
>
>
>  Message d'origine 
> De : David_dev Dev 
> Date : 11/02/2020 09:32 (GMT+01:00)
> À : "debian-user-fr." 
> Objet : Comment savoir si un vieux portable est compatible linux ?
>
> Bonjour,
>
> Les parents ont un vieux Portable Acer de 5-6 ans au moins qui fatigue
> avec un Windows obsolète. J'aimerais tenter de leur mettre un linux pour
> voir si ça passe.
>
> Y a-t-il moyen de vérifier avant s'il est compatible pour un debian 10
> Cinnamon par ex ?
>
> Le modèle est un E5-771, mais il me faut encore la variante exacte.
>
> Merci d'avance,
> David
>

Re: Looking for FOSS supported PCIe x4 SATA 6 Gb/s HBA with 4 or 8 ports

[Steve McIntyre]

delop...@gmail.com wrote:
>> My research thus far:
>> 
>> 1.  LSI products are popular, but:
>> 
>>  a.  Most seem to be PCIe x8.
>> 
>>  b.  STFW I see more than a few posts complaining about changing
>> firmware from RAID to non-RAID, buggy firmware releases, and/or
>> motherboard BIOS/UEFI incompatibilities with the flash tools.

Yup. The story here is a major pain, in my experience. Add in the
massive list of unclear vendor-branded cards and it's not something I
could recommend,

>I have this one for may be 7y already.
>
>08:00.0 SCSI storage controller: LSI Logic / Symbios Logic SAS1068E
>PCI-Express Fusion-MPT SAS (rev 08)
>
>https://wiki.pdl.cmu.edu/pub/OpenCloud/CloudManuals/SCG_LSISAS1068E_PB_040407.pdf
>
>It is 3Gb/s - don't know about the newer ones, but this one is working
>perfectly well for all those years 24/7.

That particular model is limited on supported disk sizes, to 2T IIRC -
I bought one from ebay and it was no use at all.

My own choice for more SATA/SAS ports is a Highpoint RocketRAID 2720 -
8 ports on a PCIe 2.0 x8 connector. Supported out of the box using the
mvsas mainline driver.

-- 
Steve McIntyre, Cambridge, UK.st...@einval.com
  Armed with "Valor": "Centurion" represents quality of Discipline,
  Honor, Integrity and Loyalty. Now you don't have to be a Caesar to
  concord the digital world while feeling safe and proud.

Re: usb Confusion

[Dan Ritter]

Martin McCormick wrote: 
>   After recently ordering and receiving a new 1 TB external
> SSD drive, I realized I had no way to connect it.  It has a small
> rectangular slot about 8 MM or a quarter of an inch long.  A Mac
> lightning connector is almost exactly the same size but
> fortunately doesn't plug in but that's the size of whatever fits.
> Crucial says it is usb-A .

If I recall correctly, Martin doesn't see well, which explains a
chunk of the confusion here.

Martin: Crucial is probably describing the other end of the
cable they supplied -- assuming they supplied a cable. It might
be proprietary at one end and USB type A at the other. But what
you are describing could also be USB type C at one end.

>   What is the correct nomenclature for the most common usb
> connector that has been around for 25 or 30 years and fits the
> vast majority of devices using usb?

USB type A is rectangular and common on PC ends.

USB type B is trapezoidal, almost square, and common on printers
and other largish peripherals.

USB type B-mini is trapezoidal, very small, and has distinct
indentations on the top left and right sides. It was common for
small peripherals like MP3 players.

USB type B-micro is flatter than B-mini and does not have
indentations. It is common for cell phones and small
peripherals.

USB type C is about the size of a lightning connector, rounded
on both sides, and is designed to go in upside down or rightside
up without causing problems.

>   I'll need a cable that fits the old standard usb port on
> one end and the disk drive on the other.

If you know the exact model number of the drive, I'll look it
up for you. 80% chance it's USB C to USB A.

>   There's an old saying:  "Standards are great.  Everybody
> should have one."

Let's take the best of all the standards and make a new one!

And then there were N+1 standards.

-dsr-

Ansible recommendations?

[Tom Browder]

I'm considering using Ansible (from Debian packages) for maintaining
multiple remote Debian servers. The master server will be my Debian laptop.

I have three questions:

1. If you have experience with Debian ansible, are you or were you
satisfied with the experience?

2. There are many published books in print about Ansible. Can you recommend
one for an experienced sysadmin who is an Ansible newbie?

3. If you don't recommend Ansible, can you recommend any other similar
system?

Thanks.

-Tom

Re: Using a Debian Live image to Invoke a Rescue Shell

[Jude DaShiell]

Hit the < key until a numbered debian menu comes up.  Execute a shell
will be one of your options.  Key in that number and you'll get the ash
shell up and can go from there.

On Tue, 11 Feb 2020, john doe wrote:

> Date: Tue, 11 Feb 2020 09:21:52
> From: john doe 
> To: debian-user@lists.debian.org
> Subject: Re: Using a Debian Live image to Invoke a Rescue Shell
> Resent-Date: Tue, 11 Feb 2020 14:22:12 + (UTC)
> Resent-From: debian-user@lists.debian.org
>
> On 2/11/2020 1:50 PM, Martin McCormick wrote:
> > I don't know if things have changed or I forgot how to do this
> > but I want to boot in to a Debian image and not install it but
> > invoke a shell so as to clone the hard drive on a Windows machine
> > to an external hard drive.
> >
> > For computer users who are blind, this is a real boon in
> > situations like this because most Linux systems these days can be
> > made to boot talking by striking S when the OS starts to boot.
> >
> > You hear, in English first, "Choose your language."
> >
> > It is, of course, the same setup screen everybody sees so
> > one needs to set language, keyboard and general location to get
> > started.
> >
> > If one wants, they can go through the setup and install
> > the whole works but, in this case, I am doing this because I had
> > a stupid moment and wiped out my Windows home directory
> > after a batch file (shell script) got away from me and zapped
> > every file in my home directory instead of one folder I was
> > trying to zero out.  Go ahead and laugh.
> >
> > The idea is to clone the internal drive and then try
> > recovering the deleted files.  If something further goes wrong,
> > I've still got all the pieces.
> >
> > I remember doing this same thing a few years ago and
> > there is some way to break out of the setup screen and invoke a
> > bash-like shell in order to run mount/umount and dd.  Since I
> > boot it talking, all these applications still talk.  After all,
> > it's unix and the speech synthesizer was patched in to standard
> > output right from boot.  I don't remember exactly what special
> > key sequence I hit to invoke the shell but need to refresh my
> > memory or learn the new procedure.
> >
> > After learning how to get a relatively new HP Pavilion to
> > boot from a usb device, I think that most all the UFI-bootable
> > images will boot.  The one I just tried which did boot is
> > debian-10.2.0-amd64-DVD-1.iso
> >
> > I've also got
> >
> > debian-live-10.2.0-amd64-mate.iso and debian-10.3.0-amd64-netinst.iso
> >
> > The netinst image is only 350 MB while the dvd-1 image is
> > about 4 GB.  The mate image is around 2.5 GB.
> >
> > Thanks for any and all constructive suggestions as to how
> > to go from Setup to recovery shell.
> >
> > Martin McCormick
> >
>
> Some hints:
>
> https://wiki.debian.org/accessibility#Debian_installer_accessibility
>
> https://grml.org/faq/#toc
>
> HTH.
>
> --
> John Doe
>
>

-- 

Re: Modifier mot de passe user mysql

[G2PC]

> Peut-on modifier le mot de passe d'un user MySQL,
> via phpmyadmin ou faut-il passer par les commandes console ?
>
> Si phpmyadmin sait le faire, comment ?
> J'ai tenté, ça marche pas, mot de passe non reconnu,
> quel encryptage choisir : "password", "md5" ou "sha1" ?
>
> Merci par avance et bonne journée.

Ce n'est pas un problème de PHPMyAdmin mais de SQL, et, il faut que ton
utilisateur ait le droit de changer de mot de passe.

UPDATE mysql.user SET password=PASSWORD("nouveau_mdp") where User="root ou mon 
simple utilisateur";

|FLUSH ||PRIVILEGES||;|
|
|

Source :
https://www.it-connect.fr/changer-de-mot-de-passe-mysql%EF%BB%BF/#III_Changer_le_mot_de_passe_utilisateur_avec_une_commande_SQL
http://www.laurentsanselme.com/changer-le-mot-de-passe-dun-utilisateur-mysql/

Re: usb Confusion

[Jude DaShiell]

I've never held a firewire connector though my computer has one on its
top, so can't say if what you need is a usb to firewire cable.

On Tue, 11 Feb 2020, Jude DaShiell wrote:

> Date: Tue, 11 Feb 2020 09:47:50
> From: Jude DaShiell 
> To: Martin McCormick , debian-user@lists.debian.org
> Subject: Re: usb Confusion
> Resent-Date: Tue, 11 Feb 2020 14:48:04 + (UTC)
> Resent-From: debian-user@lists.debian.org
>
> That sounds like a Micro usb port.  If you have a connector like that
> try inserting it very gently.  If it doesn't go in easily, flip the
> cable and try the other side.
>
> On Tue, 11 Feb 2020, Martin McCormick wrote:
>
> > Date: Tue, 11 Feb 2020 08:31:37
> > From: Martin McCormick 
> > To: debian-user@lists.debian.org
> > Subject: usb Confusion
> > Resent-Date: Tue, 11 Feb 2020 13:31:55 + (UTC)
> > Resent-From: debian-user@lists.debian.org
> >
> > After recently ordering and receiving a new 1 TB external
> > SSD drive, I realized I had no way to connect it.  It has a small
> > rectangular slot about 8 MM or a quarter of an inch long.  A Mac
> > lightning connector is almost exactly the same size but
> > fortunately doesn't plug in but that's the size of whatever fits.
> > Crucial says it is usb-A .
> >
> > What is the correct nomenclature for the most common usb
> > connector that has been around for 25 or 30 years and fits the
> > vast majority of devices using usb?
> >
> > I'll need a cable that fits the old standard usb port on
> > one end and the disk drive on the other.
> >
> > There's an old saying:  "Standards are great.  Everybody
> > should have one."
> >
> > Thanks.
> >
> > Martin McCormick
> >
> >
>
>

-- 

Re: Comment interdire la consultation de son serveur web sur son IP directe et le port 443?

[G2PC]

Le 11/02/2020 à 14:53, ajh.val...@free.fr a écrit :
> On Tuesday 11 February 2020 05:36:16 G2PC wrote:
>> Comment interdire la consultation de son serveur web sur son IP directe
>> et le port 443 ?
>> Est ce que ça a du sens ?
> Je ne comprends pas :
> le port 443 = https,
> et que veut dire ? :
> "interdire la consultation sur son IP direct".
>
> Enfin, ce n'est pas la consultation d'un serveur web,
> mais d'un site Web ?

Oui, je voudrais que l'adresse IP sur un navigateur, n'affiche rien, et,
éventuellement bannir toutes personnes ou robots qui voudraient utiliser
l'IP directement sur le port 80 pour tenter d'accéder à un contenu web,
puisque ce n'est pas le chemin normal, donc, fort à parier que ce soit
des bidouilleurs.

J'ai lu un article dans ce sens mais la règle ne fonctionne pas comme
attendue.

https://www.majorxtrem.be/2009/05/01/bloquer-les-scans-de-dossier-par-dictionnaire-sur-votre-serveur-web/


Comme dit, dans mon cas, j'ai eu plusieurs problèmes, déjà, la règle
n'était même pas du tout reconnue, ensuite, c'est la configuration par
défaut de fail2ban qui est utilisée ( via apache-auth ) ( et pas
apache-ipserveur que j'ai créé ).


Finalement, j'ai pu avoir le apache-ipserveur d'activé mais il ne
travail pas, c'est toujours la configuration de apache-auth qui est pris
en compte.


Le tout dernier essai que j'ai mis en place consiste à remplacer le
filtre proposé par le tutoriel précédent

failregex = [[]client []] client denied by server configuration: 
/var/www/139.99.173.195/.*
Par
failregex = ^[[][^]]+[]] [[]error[]] [[]client []] client denied by 
server configuration: /var/www/139.99.173.195/.*

Je ne suis ABSOLUMENT pas sur de ce que j'ai fais ici.


J'ai également corrigé mon VHost concernant mon IP, pour bien renvoyer
une erreur 403 et la page correspondante depuis le dossier
/var/www/139.99.173.195/403-erreur.php  tout en comprenant que le VHost
interdit déjà la consultation directe par IP. J'ai donc simplement
autorisé ici l'affichage de la page 403-erreur.php + L'image + le
favicon.ico qui sont autorisés exceptionnellement, dans le VHost, sinon,
tout est interdit ( client denied by server configuration )

https://wiki.visionduweb.fr/index.php?title=Installer_et_utiliser_Fail2ban#Interdire_la_navigation_via_l.27adresse_IP_du_serveur


J'en suis au même point, la règle semble être active mais ne fonctionne pas.
Si je tente de me connecter à Tor Browser, et, de naviguer avec mon IP,
il faudra 3 essais avant d'être banni, et, pas 1 unique essai.
Je suis donc toujours sur la configuration par défaut, et, c'est
apache-auth qui travail et pas apache-ipserveur.

Re: usb Confusion

[Jude DaShiell]

That sounds like a Micro usb port.  If you have a connector like that
try inserting it very gently.  If it doesn't go in easily, flip the
cable and try the other side.

On Tue, 11 Feb 2020, Martin McCormick wrote:

> Date: Tue, 11 Feb 2020 08:31:37
> From: Martin McCormick 
> To: debian-user@lists.debian.org
> Subject: usb Confusion
> Resent-Date: Tue, 11 Feb 2020 13:31:55 + (UTC)
> Resent-From: debian-user@lists.debian.org
>
>   After recently ordering and receiving a new 1 TB external
> SSD drive, I realized I had no way to connect it.  It has a small
> rectangular slot about 8 MM or a quarter of an inch long.  A Mac
> lightning connector is almost exactly the same size but
> fortunately doesn't plug in but that's the size of whatever fits.
> Crucial says it is usb-A .
>
>   What is the correct nomenclature for the most common usb
> connector that has been around for 25 or 30 years and fits the
> vast majority of devices using usb?
>
>   I'll need a cable that fits the old standard usb port on
> one end and the disk drive on the other.
>
>   There's an old saying:  "Standards are great.  Everybody
> should have one."
>
> Thanks.
>
> Martin McCormick
>
>

-- 

ufw and iptables not playing nice in testing with recent upgrade

[songbird]

  something in there didn't work today when i applied
the upgrade.

  i don't have time to debug or file reports at the moment,
so was able to partially downgrade to get a working connection
again.

  put my hold back on iptables.  i'd had a hold on it for
a while due to reported errors.  no idea why i decided i
should try to let it go through this morning.  i'm kinda
tied up for a few weeks...


  songbird

Re: usb Confusion

[Thomas Schmitt]

Hi,

Martin McCormick wrote:
> After recently ordering and receiving a new 1 TB external
> SSD drive, I realized I had no way to connect it. It has a small
> rectangular slot about 8 MM or a quarter of an inch long.  A Mac
> lightning connector is almost exactly the same size but
> fortunately doesn't plug in but that's the size of whatever fits.
> Crucial says it is usb-A .

6.5 to 8 mm is too small for USB Type A (12 mm), which is about the only
clearly rectangular shape on
  https://en.wikipedia.org/wiki/USB#Receptacle_%28socket%29_identification
All others have protrusions or chamfers instead of corners or rounded edges.

Mac Lightning resembles Type C. 8 mm width, 2.4 mm height, half circles
where a rectangle would have its small vertical edges.
A look into the offers at Amazon shows that Type C is quite usual with
portable SSDs.

The typical USB socket at computers is Type A. 12 mm x 4.5 mm.
Rectangular with a plastic tongue at about half height of the socket.
But the drives at sale often offer a cable for C-to-C too.


Have a nice day :)

Thomas

Re: Having trouble installing Debian on brand new hard drive

[Felix Miata]

kaye n composed on 2020-02-11 21:07 (UTC+0800):

> The partition table is GPT.

Created how? Did you do it yourself prior to beginning installation of Debian?

> Imagine you're looking at the graphical presentation of my hdd in GParted.

> Starting from the left:

> 858GB NTFS partition (intended for storing all kinds of data)

> then

> 20GB ext4 partition, with mount point /

> then

> 2GB ext4 partition, with mount point /home

That's unusually small for a /home partition. If you're going to use the big 
NTFS
partition as your functional /home, you may be better off with /home just being 
a
subdirectory on / for the purpose of saving Linux-specific settings, but not 
your
personal data kept on the NTFS.

> then

> 1GB swap partition

> then

> 50GB NTFS partition (intended for windows)

If you rarely use Windows, that may be a perfectly good size, but because you
haven't created a Windows Reserved partition, Windows will divide it in order 
that
it have one (16MB IIRC).

> then, finally

> only 10MB FAT32 partition because debian installer says I need an efi but I
> don't know how big it should be.  Mount point at /boot/efi

Most likely the installer doesn't cope properly with this tiny size. Windows 
will
create one of size 100MB if it doesn't find one that already exists. With 16TB
drives that use 4k sectors both logically and physically, 260MB is the minimum.
Most Linux users seem to create one sized somewhere between 260MB and 500MB. 
Even
though formatted as FAT32, it's called ESP.

> If I boot from the hard drive, I ge this message:

> Realtek PCIe GBE Family Controller Series v2.43 (08/25/11)
> PXE-E61: Media test failure, check cable

> PXE-M0F: Exiting PXE ROM

> Reboot and Select proper Boot device
> or Insert Boot Media in selected Boot device and press a key

Because of boot configuration failure on your HDD, it's trying to fall back to 
PXE
(network) boot, which since you don't have an available PXE server, is also 
failing.

I can only guess that DI doesn't know how to cope with the tiny ESP partition, 
so
Grub installation either simply didn't occur at all, or is incomplete or 
otherwise
failed.
-- 
Evolution as taught in public schools is religion, not science.

 Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!

Felix Miata  ***  http://fm.no-ip.com/

Re: Using a Debian Live image to Invoke a Rescue Shell

[john doe]

On 2/11/2020 1:50 PM, Martin McCormick wrote:
> I don't know if things have changed or I forgot how to do this
> but I want to boot in to a Debian image and not install it but
> invoke a shell so as to clone the hard drive on a Windows machine
> to an external hard drive.
>
>   For computer users who are blind, this is a real boon in
> situations like this because most Linux systems these days can be
> made to boot talking by striking S when the OS starts to boot.
>
>   You hear, in English first, "Choose your language."
>
>   It is, of course, the same setup screen everybody sees so
> one needs to set language, keyboard and general location to get
> started.
>
>   If one wants, they can go through the setup and install
> the whole works but, in this case, I am doing this because I had
> a stupid moment and wiped out my Windows home directory
> after a batch file (shell script) got away from me and zapped
> every file in my home directory instead of one folder I was
> trying to zero out.  Go ahead and laugh.
>
>   The idea is to clone the internal drive and then try
> recovering the deleted files.  If something further goes wrong,
> I've still got all the pieces.
>
>   I remember doing this same thing a few years ago and
> there is some way to break out of the setup screen and invoke a
> bash-like shell in order to run mount/umount and dd.  Since I
> boot it talking, all these applications still talk.  After all,
> it's unix and the speech synthesizer was patched in to standard
> output right from boot.  I don't remember exactly what special
> key sequence I hit to invoke the shell but need to refresh my
> memory or learn the new procedure.
>
>   After learning how to get a relatively new HP Pavilion to
> boot from a usb device, I think that most all the UFI-bootable
> images will boot.  The one I just tried which did boot is
> debian-10.2.0-amd64-DVD-1.iso
>
>   I've also got
>
> debian-live-10.2.0-amd64-mate.iso and debian-10.3.0-amd64-netinst.iso
>
>   The netinst image is only 350 MB while the dvd-1 image is
> about 4 GB.  The mate image is around 2.5 GB.
>
>   Thanks for any and all constructive suggestions as to how
> to go from Setup to recovery shell.
>
> Martin McCormick
>

Some hints:

https://wiki.debian.org/accessibility#Debian_installer_accessibility

https://grml.org/faq/#toc

HTH.

--
John Doe

Re: usb Confusion

[Sarunas Burdulis]

On 2/11/20 8:31 AM, Martin McCormick wrote:
>   After recently ordering and receiving a new 1 TB external
> SSD drive, I realized I had no way to connect it.  It has a small
> rectangular slot about 8 MM or a quarter of an inch long.  A Mac
> lightning connector is almost exactly the same size but
> fortunately doesn't plug in but that's the size of whatever fits.
> Crucial says it is usb-A .
> 
>   What is the correct nomenclature for the most common usb
> connector that has been around for 25 or 30 years and fits the
> vast majority of devices using usb?

Here is a nice table, in which you perhaps can identify the connector on
your drive:
https://en.wikipedia.org/wiki/USB#Receptacle_(socket)_identification

There is no such thing as usb-A. They probably mean USB Type-A. Also
note the table says Connectors where it should say Standards...

-- 
Sarunas Burdulis
Systems Administrator, Dartmouth Mathematics
math.dartmouth.edu/~sarunas

· https://useplaintext.email ·



signature.asc
Description: OpenPGP digital signature

Re: usb Confusion

[Felix Miata]

Martin McCormick composed on 2020-02-11 07:31 (UTC-0600):

>   After recently ordering and receiving a new 1 TB external
> SSD drive, I realized I had no way to connect it.  It has a small
> rectangular slot about 8 MM or a quarter of an inch long.  A Mac
> lightning connector is almost exactly the same size but
> fortunately doesn't plug in but that's the size of whatever fits.
> Crucial says it is usb-A .

>   What is the correct nomenclature for the most common usb
> connector that has been around for 25 or 30 years and fits the
> vast majority of devices using usb?

>   I'll need a cable that fits the old standard usb port on
> one end and the disk drive on the other.

>   There's an old saying:  "Standards are great.  Everybody
> should have one."

Pick the one that matches from:
https://en.wikipedia.org/wiki/USB

Mini A
Mini B
Micro B
Micro AB

I probably have 3 or more of each, and also have one of Micro B, only 8 or so
inches long that came with a 2.5" drive enclosure.
-- 
Evolution as taught in public schools is religion, not science.

 Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!

Felix Miata  ***  http://fm.no-ip.com/

Modifier mot de passe user mysql

[ajh . valmer]

Bonjour,

Peut-on modifier le mot de passe d'un user MySQL,
via phpmyadmin ou faut-il passer par les commandes console ?

Si phpmyadmin sait le faire, comment ?
J'ai tenté, ça marche pas, mot de passe non reconnu,
quel encryptage choisir : "password", "md5" ou "sha1" ?

Merci par avance et bonne journée.

Re: Comment interdire la consultation de son serveur web sur son IP directe et le port 443?

[ajh . valmer]

On Tuesday 11 February 2020 05:36:16 G2PC wrote:
> Comment interdire la consultation de son serveur web sur son IP directe
> et le port 443 ?
> Est ce que ça a du sens ?

Je ne comprends pas :
le port 443 = https,
et que veut dire ? :
"interdire la consultation sur son IP direct".

Enfin, ce n'est pas la consultation d'un serveur web,
mais d'un site Web ?

Re: FOSS-compatible smartwatch?

[Dominik George]

Hi,

>Is there such a thing as a Free Software API for smartwatches/personal 
>fitness devices? With maybe a FOSS app, and a way to use them with a 
>Linux-based PC?

At FOSDEM, I learned about Bangle.JS.

-nik