Re: new camera

[deloptes]

Gene Heskett wrote:

> On Friday 26 June 2020 18:51:04 deloptes wrote:
> 
>> Gene Heskett wrote:
>> > Doesn't have a card, usb only, and worthless as machine vision if
>> > you can't see what the machine is doing in very close to real time.
>>
>> Do you have /dev/video
>>
>> ls -al /dev/video*
>> crw-rw+ 1 root video 81, 0 May 30 10:38 /dev/video0
>> crw-rw+ 1 root video 81, 1 May 30 10:38 /dev/video1
> yes
> 
> Thanks
> 
> Cheers, Gene Heskett

this is what I use from time to time

mplayer tv:// -tv driver=v4l2:width=768:height=576:device=/dev/video0 -vo xv

Re: Advice on encrypted filesystem

[David Christensen]

On 2020-06-26 18:25, David Wright wrote:


There's still the problem of what one does about sensitive data if
one has been rash enough to write it unencrypted onto an SSD. Would
shred -n 1   be preferable? Not really, because that doesn't hit the
ex-file areas. What then?


The best option is to command the SSD firmware to do a "secure delete". 
Some SSD manufacturers provide utilities for doing this.  Alternatively, 
it can be done from the command line with Linux.



David

Re: Disable touchpad completely in KDE

[Dan Ritter]

Paul Johnson wrote: 
> On Fri, Jun 26, 2020 at 9:21 AM Dan Ritter  wrote:
> 
> > Paul Johnson wrote:
> > xinput will tell you about the I/O devices you have, giving you
> > numbers.
> >
> > xinput list followed by one of those device numbers will give
> > you lots of output, so you can be sure you've got the right one.
> >
> > xinput disable followed by that device number should, in fact,
> > disable it.
> >
> > Let us know if you aren't using xinput.
> 
> 
>  I'm not seeing the touchpad listed.
> 
> baloo@wojtek:~$ xinput
> ???   ??? SynPS/2 Synaptics TouchPadid=15   [slave  pointer
>  (2)]


There you go. id=15.

Try 
xinput disable 15
and see if it makes you happy.

-dsr-

Re: Disable touchpad completely in KDE

[David Wright]

On Fri 26 Jun 2020 at 20:07:46 (-0500), Paul Johnson wrote:
> On Fri, Jun 26, 2020 at 9:21 AM Dan Ritter  wrote:
> > Paul Johnson wrote:
> > > I'm trying to work out where I can disable the touchpad completely in
> > KDE.
> > > I can seem to do it when certain devices are plugged in, but there
> > doesn't
> > > seem to be a way to make it always off.  I've got a trackpoint and the
> > > touchpad just exists to get in the way.
> >
> > If your system is using xinput:
> >
> > xinput will tell you about the I/O devices you have, giving you
> > numbers.
> >
> > xinput list followed by one of those device numbers will give
> > you lots of output, so you can be sure you've got the right one.
> >
> > xinput disable followed by that device number should, in fact,
> > disable it.
> >
> > Let us know if you aren't using xinput.
> 
> 
>  I'm not seeing the touchpad listed.
> 
> baloo@wojtek:~$ xinput
> ⎡ Virtual core pointer  id=2[master pointer (3)]
> ⎜   ↳ Virtual core XTEST pointerid=4[slave  pointer (2)]
> ⎜   ↳ SynPS/2 Synaptics TouchPadid=15   [slave  pointer (2)]
  
> ⎜   ↳ TPPS/2 IBM TrackPoint id=16   [slave  pointer (2)]
> ⎜   ↳ PixArt USB Optical Mouse  id=11   [slave  pointer (2)]
> ⎜   ↳ CHICONY USB Keyboard  id=12   [slave  pointer (2)]
> ⎣ Virtual core keyboard id=3[master keyboard (2)]
> ↳ Virtual core XTEST keyboard   id=5[slave  keyboard (3)]
> ↳ Power Button  id=6[slave  keyboard (3)]
> ↳ Video Bus id=7[slave  keyboard (3)]
> ↳ Video Bus id=8[slave  keyboard (3)]
> ↳ Sleep Button  id=9[slave  keyboard (3)]
> ↳ Integrated Camera: Integrated C   id=13   [slave  keyboard (3)]
> ↳ AT Translated Set 2 keyboard  id=14   [slave  keyboard (3)]
> ↳ ThinkPad Extra Buttonsid=17   [slave  keyboard (3)]
> ↳ CHICONY USB Keyboard  id=10   [slave  keyboard (3)]

Cheers,
David.

Re: How long will this take?

[David Christensen]

On 2020-06-26 18:25, David Wright wrote:

On Fri 26 Jun 2020 at 15:06:31 (-0700), David Christensen wrote:

On 2020-06-26 06:07, David Wright wrote:



On this slow machine with an oldish PATA disk,
I can get about 75% speed from urandom, 15MB/s vs 20MB/s on a 29GiB
partition (no encryption). There's a noticeable slowdown because,
I presume, the machine runs a bit short of entropy after a while.


I think you are noticing a slowdown when the Linux write buffer fills.


I'm not sure where these write buffers might be hiding: the
2000-vintage PC has 512MB memory, and the same size swap partition,
though the latter is on a disk constructed one month earlier than the
target disk (Feb/Mar 2008). The target disk has 8MB of cache.
With a leisurely determination of dd's PID, my first USR1 poke
occurred no earlier than after 4GB of copying, over three minutes in.


I seem to recall that most of my EIDE interfaces and drives were 100 
MB/s.  (A few were 133 MB/s.)  So, bulk reads or writes can completely 
use an 8 MB cache in a fraction of a second.



top(1) reports memory statistics on line 4.  I believe "buff/cache" is 
the amount of memory being used for I/O write buffering and read 
caching.  Line 5 has statics for swap.  I do not know if memory write 
buffer / read cache usage interacts with swap usage, but it would not 
surprise me.  top(1) should be able to show you.



Perhaps I misinterpreted your "slowdown" statement.  I assumed you ran a 
command similar to:


# dd if=/dev/urandom of=/dev/sdxn bs=1M status=progress


dd(1) is copying PRN data from the CPU to the kernel write buffer (in 
memory) and the kernel input/ output stack is copying from the write 
buffer to the HDD (likely via direct memory access, DMA).  The 
'status=progress' option will cause dd(1) to display the rate at which 
the write buffer is being filled.  I am not sure how to monitor the rate 
at which the write buffer is being drained.  Assuming the write buffer 
is initially empty, the filling process is "fast", and the draining 
process is "slow" when the above command is started, dd(1) should show 
fast throughput until the write buffer fills and then show slow 
throughput for the remainder of the transfer.  And, without a 'sync' 
option to dd(1), dd(1) will exit and the shell will display the next 
prompt as the final write buffer contents are being written to the HDD 
(e.g. the HDD will be busy for a short while after dd(1) is finished).



Another possibility -- magnetic disk drives have more sectors in outer 
tracks (lower sector number) than they have in inner tracks (higher 
sector number).  When filling an entire drive, I have seen the transfer 
rate drop by 40~50% over the duration of the transfer.  This is normal. 
Is this what you are referring to?



David

Re: Newbie

[황병희]

On Thu, 25 Jun 2020 14:26:00 -0700, Arun Mathai wrote:

> Hello Guys,
> 
> I am a total newbie for debian.
> 
> I have some technical difficulties and questions that i want to ask.
> 
> Could anyone please tell me how to proceed.

Hi Arun,

Yes this is question place.

Sincerely, Byung-Hee

-- 
/home/soyeomul/__SIG__

Echo on Realtek ALC662 soundcard

[Seeds Notoneofmy]

Thanks for your help.

I've looked into alsamixer and nothing I do there has fixed the echo I 
get on Debian buster with this card.


 0 [Intel  ]: HDA-Intel - HDA Intel
  HDA Intel at 0xfdefc000 irq 28
I got the  Realtek ALC662 rev1   from Alsamixer

Thanks for your considered response.

Re: How long will this take?

[Seeds Notoneofmy]

On 6/27/20 3:20 AM, rhkra...@gmail.com wrote:

This (the above) subject line is not very good, but at least it gives a hint
that it  probably is, or at least could be, computer related.


Would you please explain the computer related "hint" in "How long will
this take?"

For starters, I could end that sentence in so many ways, just use your
imagination.

In much the same way I could end,  'have you seen this inside...'

We can drop the subjective statements and look objectively at things.

Re: How long will this take?

[David Wright]

On Fri 26 Jun 2020 at 15:06:31 (-0700), David Christensen wrote:
> On 2020-06-26 06:07, David Wright wrote:
> > On Fri 19 Jun 2020 at 14:52:11 (-0700), David Christensen wrote:
> 
> > > Benchmark is one thing.  But, from a security viewpoint, writing zeros
> > > to an encrypted volume amounts to providing blocks of plaintext for
> > > corresponding blocks of cyphertext, thereby facilitating
> > > cryptanalysis.
> > 
> > So in view of the unlikelihood of badblocks actually logging something
> > more useful than SMART (where available) or normal disk write errors,
> > perhaps a compromise (for my use case) is to just write /dev/urandom
> > rather than /dev/zero.
> 
> Copying random data to a partition while creating an encrypted
> filesystem provides a high-entropy backdrop to conceal ciphertext
> blocks.  This is a form of steganography.  The Debian Installer manual
> partitioning page has an option to do this.

I presume you meet this option when you select "Configure encrypted volumes",
something that I've never done. Because currently I only encrypt /home
and swap, I set these up after installation, if they're not already there.

I must admit that I prefer to partition disks and set up encryption
outside the d-i, usually capturing the process with script.

> As the storage is used, the initial random blocks will be overwritten
> by ciphertext blocks.  Depending upon filesystem, encryption, volume
> management, and/or device details, the steganography degrades and may
> eventually disappear.
> 
> Copying random data to storage will add fresh nearly-random blocks on
> the device, improving the steganography.  (The canonical example is to
> copy /dev/urandom to a file until the filesystem fills up, and then
> delete the file.  But, this takes time and adds wear to the device.)

Yes, SSD caveat taken on board.

> > On this slow machine with an oldish PATA disk,
> > I can get about 75% speed from urandom, 15MB/s vs 20MB/s on a 29GiB
> > partition (no encryption). There's a noticeable slowdown because,
> > I presume, the machine runs a bit short of entropy after a while.
> 
> I think you are noticing a slowdown when the Linux write buffer fills.

I'm not sure where these write buffers might be hiding: the
2000-vintage PC has 512MB memory, and the same size swap partition,
though the latter is on a disk constructed one month earlier than the
target disk (Feb/Mar 2008). The target disk has 8MB of cache.
With a leisurely determination of dd's PID, my first USR1 poke
occurred no earlier than after 4GB of copying, over three minutes in.

Cheers,
David.

Re: Advice on encrypted filesystem

[David Wright]

On Fri 26 Jun 2020 at 15:45:09 (-0400), Michael Stone wrote:
> On Fri, Jun 26, 2020 at 02:06:57PM -0500, David Wright wrote:
> > Agreed. But I wouldn't be writing any sensitive information to an SSD
> > in the first place without encrypting it. (Not that I own any yet.)
> 
> SSDs are more common than not in new computers so it's probably best
> to assume that people reading stuff like this might be trying to apply
> it to an SSD.

Fair enough. No doubt when I acquire one, it'll enter my notes if need
be. There's still the problem of what one does about sensitive data if
one has been rash enough to write it unencrypted onto an SSD. Would
shred -n 1   be preferable? Not really, because that doesn't hit the
ex-file areas. What then?

> > > > # cryptsetup --align-payload 2048 luksFormat /dev/sdz9
> > > 
> > > I also would not add this align-payload option. (If you don't,
> > > cryptsetup will query the kernel for optimal parameters.)
> > 
> > You're right, but the problem comes when the kernel feeds LUKS a value
> > that it isn't designed to handle correctly. As elsewhere on my systems,
> > I tend to gravitate towards recipes/solutions that I can use across
> > all of them, rather than having to deal with lots of exceptions.
> 
> Well, the problem is that magic numbers get cargo culted without
> knowing why they are there or whether they're the right number, and
> eventually they aren't.
> 
> Per the manual:
> WARNING: This option is DEPRECATED and has often unexpected impact to
> the data offset and keyslot area size (for LUKS2) due to the complex
> rounding.
> 
> The best option IMO (especially for crypto related stuff) is to stick
> with the defaults and deal with exceptions if they come up rather than
> blindly carry forward things that were once necessary on some
> configuration sometime. If you want to be complete you might reference
> a past issue so someone can deal with it if it arises, but it
> shouldn't be the starting point.

Ironically, 2048 is neither cargo cult nor magic, but *is* the default
used by LUKS when the kernel does not supply one, as documented two
paragraphs earlier. Are you suggesting a 1MB alignment might be
insufficient? If one were to specify NxMB, LUKS will still use 1MB
(again as documented).

I don't know about completeness: I wrote that my post was taken "from
my notes". As for a starting point, I left 24 hours after the OP
posted clarifications for others to respond with their own recipes.
I haven't noticed any yet.¹

> > In this case, it's the "Optimal transfer size" which catches it
> > out, when the commonly occurring value of 33553920 bytes is
> > received. In plain speaking, that's 512*(2**16-1); which might be
> > fine for the kernel transferring over USB with 32MB buffers, but
> > unfortunately isn't actually divisible by 2048.
> 
> In this case, the kernel was updated to ignore transfer sizes which
> aren't a multiple of the drive's physical sector size because some
> drives were reporting seemingly bogus values. Hardcoding a workaround
> for older kernels means not taking advantage of the fix on newer
> kernels.

Apologies for not asking the OP which kernel version they were running
in their jessie. The 3.16 kernel on my one remaining jessie system
doesn't have this patch (sd_validate_opt_xfer_size).

¹BTW when I first posted the symptoms caused by this problem, there
were no responses in five months.

Cheers,
David.

Re: How long will this take?

[rhkramer]

Quoted lines resequenced for my convenience in responding.

On Friday, June 26, 2020 07:37:57 PM Seeds Notoneofmy wrote:
> I struggle to understand the difference between the two subject lines
> that merits their different treatment.


> The subject line in this thread is: "How long will this take?"

This (the above) subject line is not very good, but at least it gives a hint 
that it  probably is, or at least could be, computer related.

> Recently I posted here with the subject line: "have you seen this
> inside..."

This gives no hint that it is computer related, and sounds very spammy, like 
the subject lines that many of us run into, trying to get us to open an email 
that has subject matter we are absolutely not interested in.
 
> And I was lectured by no fewer than three people.

Not I, said the spider to the fly

Re: Disable touchpad completely in KDE

[Paul Johnson]

On Fri, Jun 26, 2020 at 9:21 AM Dan Ritter  wrote:

> Paul Johnson wrote:
> > I'm trying to work out where I can disable the touchpad completely in
> KDE.
> > I can seem to do it when certain devices are plugged in, but there
> doesn't
> > seem to be a way to make it always off.  I've got a trackpoint and the
> > touchpad just exists to get in the way.
>
> If your system is using xinput:
>
> xinput will tell you about the I/O devices you have, giving you
> numbers.
>
> xinput list followed by one of those device numbers will give
> you lots of output, so you can be sure you've got the right one.
>
> xinput disable followed by that device number should, in fact,
> disable it.
>
> Let us know if you aren't using xinput.


 I'm not seeing the touchpad listed.

baloo@wojtek:~$ xinput
⎡ Virtual core pointer  id=2[master pointer
 (3)]
⎜   ↳ Virtual core XTEST pointerid=4[slave  pointer
 (2)]
⎜   ↳ SynPS/2 Synaptics TouchPadid=15   [slave  pointer
 (2)]
⎜   ↳ TPPS/2 IBM TrackPoint id=16   [slave  pointer
 (2)]
⎜   ↳ PixArt USB Optical Mouse  id=11   [slave  pointer
 (2)]
⎜   ↳ CHICONY USB Keyboard  id=12   [slave  pointer
 (2)]
⎣ Virtual core keyboard id=3[master keyboard
(2)]
↳ Virtual core XTEST keyboard   id=5[slave  keyboard
(3)]
↳ Power Button  id=6[slave  keyboard
(3)]
↳ Video Bus id=7[slave  keyboard
(3)]
↳ Video Bus id=8[slave  keyboard
(3)]
↳ Sleep Button  id=9[slave  keyboard
(3)]
↳ Integrated Camera: Integrated C   id=13   [slave  keyboard
(3)]
↳ AT Translated Set 2 keyboard  id=14   [slave  keyboard
(3)]
↳ ThinkPad Extra Buttonsid=17   [slave  keyboard
(3)]
↳ CHICONY USB Keyboard  id=10   [slave  keyboard
(3)]

Re: Monitorar trabalho home office

[Sinval Júnior]

É importante primeiro definir o que deseja monitorar, no mercado irá
encontrar diversos softwares, que prometem tal tarefa, contudo, quais são
seus requisitos?



Ao encaminhar esta mensagem, por favor:
1 - Apague meu endereço eletrônico;
2 - Encaminhe como Cópia Oculta (Cco ou BCc) aos seus destinatários.
Dificulte assim a disseminação de vírus, spams e banners.

#=+
#!/usr/bin/env python
nome = 'Sinval Júnior'
email = 'sinvalju arroba gmail ponto com'
print nome
print email
#==+


Em qui., 25 de jun. de 2020 às 16:15, Unicred do Estado de Sao Paulo -
Maiko Akihito Takemoto  escreveu:

> Bom dia.
> Devido, a muito trabalho remoto precisamos de um software, para controle.
> Alguém conhece?
> Tempo de utilização da máquina, aplicativos rodados, etc...
> Att.
>
> Maiko Akihito Takemoto
> Supervisor de Desenvolvimento e TI
> maiko.takem...@unicred.com.br
>
> UNICRED DO ESTADO DE SÃO PAULO – SEDE
> Av. Barão de Itapura, 950 – 1º Andar - Guanabara
> CEP: 13.020-431 – Campinas/SP
> Tel + 55 19 3731-2810 – FAX 19 3731-2724
> Visite nosso site: www.unicred.com.br/estadodesaopaulo
>
> Antes de imprimir, pense em sua responsabilidade e compromisso com o Meio
> Ambiente.
> A mensagem e seus anexos têm caráter confidencial. Qualquer uso integral
> ou parcial desta mensagem é proibido, sendo passível das ações judiciais
> cabíveis.  A Unicred informa que a responsabilidade pela mensagem acima é
> exclusivamente de seu autor e não se responsabiliza pelo seu conteúdo.
>

Re: How long will this take?

[Seeds Notoneofmy]

On 6/8/20 10:22 PM, Matthew Campbell wrote:


I bought a new 4 terrabyte hard drive that is connected with a USB
cable using USB2. It took about 32 hours to read every sector on the
drive to look for bad sectors. I started blanking the sectors using
/dev/zero last Friday night. It still isn't done. Is there a way I can
find out how much data a particular process has written to the disk?
I'm using Debian 10.4.

dd if=/dev/zero of=/dev/sdb ibs=4096 count=976754646

name=Matthew%20Campbell=trenix25%40pm.me


Recently I posted here with the subject line: "have you seen this inside..."

And I was lectured by no fewer than three people.

The subject line in this thread is: "How long will this take?"

I struggle to understand the difference between the two subject lines
that merits their different treatment.

Thanks.

Re: new camera

[Gene Heskett]

On Friday 26 June 2020 18:51:04 deloptes wrote:

> Gene Heskett wrote:
> > Doesn't have a card, usb only, and worthless as machine vision if
> > you can't see what the machine is doing in very close to real time.
>
> Do you have /dev/video
>
> ls -al /dev/video*
> crw-rw+ 1 root video 81, 0 May 30 10:38 /dev/video0
> crw-rw+ 1 root video 81, 1 May 30 10:38 /dev/video1
yes

Thanks

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: new camera

[Gene Heskett]

On Friday 26 June 2020 18:26:26 deloptes wrote:

> Gene Heskett wrote:
> > [598961.999017] uvcvideo: Found UVC 1.00 device SPCA2650 AV Camera
> > [(1bcf:284c) 598962.015747] uvcvideo 1-12.4.4.4:1.0: Entity type for
> > [entity Extension 4 was not initialized! 598962.015756] uvcvideo
> > [1-12.4.4.4:1.0: Entity type for entity Extension 3 was not
> > initialized! [598962.015760] uvcvideo 1-12.4.4.4:1.0: Entity type
> > for entity Processing [2 was not initialized! 598962.015764]
> > uvcvideo 1-12.4.4.4:1.0: Entity [type for entity Camera 1 was not
> > initialized! 598962.015987] input: [SPCA2650 AV Camera as
>
> [/devices/pci:00/:00:14.0/usb1/1-12/1-12.4/1-12.4.4/1-12.4.4.4
>/1-12.4.4.4:1.0/input/input20
>
> > [598962.016163] usbcore: registered new interface driver uvcvideo
> >
> > Anybody have an idea of what driver this camera needs?
>
> it is obviously UVC, but I think might be your driver does not support
> the device yet
>
> http://www.ideasonboard.org/uvc/#devices
>
> It might be I am wrong

Its not in that list, darnit.

Your google-foo is better than mine.

Thanks Deloptes
Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: new camera

[deloptes]

Gene Heskett wrote:

> Doesn't have a card, usb only, and worthless as machine vision if you
> can't see what the machine is doing in very close to real time.

Do you have /dev/video

ls -al /dev/video*
crw-rw+ 1 root video 81, 0 May 30 10:38 /dev/video0
crw-rw+ 1 root video 81, 1 May 30 10:38 /dev/video1

Re: new camera

[deloptes]

Gene Heskett wrote:

> [598961.999017] uvcvideo: Found UVC 1.00 device SPCA2650 AV Camera
> [(1bcf:284c) 598962.015747] uvcvideo 1-12.4.4.4:1.0: Entity type for
> [entity Extension 4 was not initialized! 598962.015756] uvcvideo
> [1-12.4.4.4:1.0: Entity type for entity Extension 3 was not initialized!
> [598962.015760] uvcvideo 1-12.4.4.4:1.0: Entity type for entity Processing
> [2 was not initialized! 598962.015764] uvcvideo 1-12.4.4.4:1.0: Entity
> [type for entity Camera 1 was not initialized! 598962.015987] input:
> [SPCA2650 AV Camera as
>
[/devices/pci:00/:00:14.0/usb1/1-12/1-12.4/1-12.4.4/1-12.4.4.4/1-12.4.4.4:1.0/input/input20
> [598962.016163] usbcore: registered new interface driver uvcvideo
> 
> Anybody have an idea of what driver this camera needs?

it is obviously UVC, but I think might be your driver does not support the
device yet

http://www.ideasonboard.org/uvc/#devices

It might be I am wrong

Re: new camera

[Weaver]

On 27-06-2020 06:20, Gene Heskett wrote:
> Greetings all;
> 
> Just got a new camera, fawcny endoscope, I intend to use for machine.
> 
> Moderately high priced, 5 Megapixel, autofocus.
> 
> But this stretch machine can't find it amongst all the other usb stuff.
> It doesn't have cheese, and vlc doesn't recognize it.
> 
> From dmesg:
> [598961.717093] usb 1-12.4.4.4: new high-speed USB device number 18
> using xhci_hcd
> [598961.869828] usb 1-12.4.4.4: New USB device found, idVendor=1bcf,
> idProduct=284c
> [598961.869837] usb 1-12.4.4.4: New USB device strings: Mfr=1,
> Product=2, SerialNumber=3
> [598961.869844] usb 1-12.4.4.4: Product: SPCA2650 AV Camera
> [598961.869848] usb 1-12.4.4.4: Manufacturer: SunplusIT Inc
> [598961.869852] usb 1-12.4.4.4: SerialNumber: 01.00.00
> [598961.954556] media: Linux media interface: v0.10
> [598961.973982] Linux video capture interface: v2.00
> [598961.999017] uvcvideo: Found UVC 1.00 device SPCA2650 AV Camera (1bcf:284c)
> [598962.015747] uvcvideo 1-12.4.4.4:1.0: Entity type for entity
> Extension 4 was not initialized!
> [598962.015756] uvcvideo 1-12.4.4.4:1.0: Entity type for entity
> Extension 3 was not initialized!
> [598962.015760] uvcvideo 1-12.4.4.4:1.0: Entity type for entity
> Processing 2 was not initialized!
> [598962.015764] uvcvideo 1-12.4.4.4:1.0: Entity type for entity Camera
> 1 was not initialized!
> [598962.015987] input: SPCA2650 AV Camera as
> /devices/pci:00/:00:14.0/usb1/1-12/1-12.4/1-12.4.4/1-12.4.4.4/1-12.4.4.4:1.0/input/input20
> [598962.016163] usbcore: registered new interface driver uvcvideo
> 
> Anybody have an idea of what driver this camera needs?

Recently, I was unable to access a camera through Shotwell, but was able
to with gwenview through /run.
Looking at the readout, I don't think this is workable, but it may be
worth a try.

-- 
`Religion is regarded by the common people as true,
by the wise as false,
and by the rulers as useful'.

— Lucius Annæus Seneca.

Terrorism, the new religion.

Registered Linux User: 554515

Re: Advice on hardware server to use for small a dedicated data center

[ghe]

‐‐‐ Original Message ‐‐‐
On Friday, June 26, 2020 12:34 PM, echo test  wrote:

> Then, I want to build a small data center for my company for hosting 
a web app and a mail server. It's the first time I'm going to buy some 
hardware for this. I tried looking for it on the web in order to compare 
them but it seems that hardware vendors never want to talk about Debian 
on their websites.


Well, this might be heresy, but at that size, consider a Raspberry Pi 
running Raspian (Debian (sorta) recompiled for its CPU -- questions are 
accepted on this list).


I'm on a T1, and I've been running them as Internet servers for almost a 
decade (replaced a genuine server). I suspect you could do RAID with a 
couple USB drives, and you could get the Ethernet ports you're looking 
for with a 4-hole switch.


I use a 3+ because I want to give the 4 a couple years to get its 
hardware and software debugged. The disadvantage of the 3+ is the 100M 
Ethernet speed (the 4 claims 1G, but I doubt it). Check the speed of 
your 'Net connection. 100M is plenty fast for most installations.


Keep a spare on hand, ready to replace the server when #1 dies. But I've 
been using them for years, on a good UPS, with no probs at all.


--
Glenn English

Re: How long will this take?

[David Christensen]

On 2020-06-26 06:07, David Wright wrote:

On Fri 19 Jun 2020 at 14:52:11 (-0700), David Christensen wrote:



Benchmark is one thing.  But, from a security viewpoint, writing zeros
to an encrypted volume amounts to providing blocks of plaintext for
corresponding blocks of cyphertext, thereby facilitating
cryptanalysis.


So in view of the unlikelihood of badblocks actually logging something
more useful than SMART (where available) or normal disk write errors,
perhaps a compromise (for my use case) is to just write /dev/urandom
rather than /dev/zero. 


Copying random data to a partition while creating an encrypted 
filesystem provides a high-entropy backdrop to conceal ciphertext 
blocks.  This is a form of steganography.  The Debian Installer manual 
partitioning page has an option to do this.



As the storage is used, the initial random blocks will be overwritten by 
ciphertext blocks.  Depending upon filesystem, encryption, volume 
management, and/or device details, the steganography degrades and may 
eventually disappear.



Copying random data to storage will add fresh nearly-random blocks on 
the device, improving the steganography.  (The canonical example is to 
copy /dev/urandom to a file until the filesystem fills up, and then 
delete the file.  But, this takes time and adds wear to the device.)




On this slow machine with an oldish PATA disk,
I can get about 75% speed from urandom, 15MB/s vs 20MB/s on a 29GiB
partition (no encryption). There's a noticeable slowdown because,
I presume, the machine runs a bit short of entropy after a while.


I think you are noticing a slowdown when the Linux write buffer fills.


David

Re: dpms control?

[rhkramer]

On Friday, June 26, 2020 04:33:58 PM Gene Heskett wrote:
> And I'm now alone, they finally found a rest home for my missus, but she
> is quarantined for 2 weeks. At nearly 8g's a month.  Out in the sticks,
> at least a 1:20 drive from here.  And getting sick of my own cooking,
> but I've been doing all that since she fell and broke a hip nearly 4
> years ago.

It's probably good for your missus, but I'm sorry for your difficulties.

Re: new camera

[Dan Ritter]

Gene Heskett wrote: 
> On Friday 26 June 2020 16:44:32 Georgi Naplatanov wrote:
> 
> > On 6/26/20 11:20 PM, Gene Heskett wrote:
> > > initialized! [598962.015987] input: SPCA2650 AV Camera as
> > > /devices/pci:00/:00:14.0/usb1/1-12/1-12.4/1-12.4.4/1-12.4.4.
> > >4/1-12.4.4.4:1.0/input/input20 [598962.016163] usbcore: registered
> > > new interface driver uvcvideo
> > >
> > > Anybody have an idea of what driver this camera needs?
> >
> > try to use your camera with mpv player. Just use something like this:
> >
> > $ mpv av://v4l2:/dev/video0
> >
> That sorta works, video refresh rate at 640x480 is about 1 frame a 
> second, and if any camera motion, has severe window shade effects.
> Not plugged directly into a usb3 mobo port however.  Color etc seems good 
> though.

The v4l2ucp (video for linux 2 usb control panel) should be able to
tune this for you. Packaged under that name.

-dsr-

Re: new camera

[Gene Heskett]

On Friday 26 June 2020 16:44:32 Georgi Naplatanov wrote:

> On 6/26/20 11:20 PM, Gene Heskett wrote:
> > Greetings all;
> >
> > Just got a new camera, fawcny endoscope, I intend to use for
> > machine.
> >
> > Moderately high priced, 5 Megapixel, autofocus.
> >
> > But this stretch machine can't find it amongst all the other usb
> > stuff. It doesn't have cheese, and vlc doesn't recognize it.
> >
> > From dmesg:
> > [598961.717093] usb 1-12.4.4.4: new high-speed USB device number 18
> > using xhci_hcd [598961.869828] usb 1-12.4.4.4: New USB device found,
> > idVendor=1bcf, idProduct=284c [598961.869837] usb 1-12.4.4.4: New
> > USB device strings: Mfr=1, Product=2, SerialNumber=3 [598961.869844]
> > usb 1-12.4.4.4: Product: SPCA2650 AV Camera [598961.869848] usb
> > 1-12.4.4.4: Manufacturer: SunplusIT Inc [598961.869852] usb
> > 1-12.4.4.4: SerialNumber: 01.00.00
> > [598961.954556] media: Linux media interface: v0.10
> > [598961.973982] Linux video capture interface: v2.00
> > [598961.999017] uvcvideo: Found UVC 1.00 device SPCA2650 AV Camera
> > (1bcf:284c) [598962.015747] uvcvideo 1-12.4.4.4:1.0: Entity type for
> > entity Extension 4 was not initialized! [598962.015756] uvcvideo
> > 1-12.4.4.4:1.0: Entity type for entity Extension 3 was not
> > initialized! [598962.015760] uvcvideo 1-12.4.4.4:1.0: Entity type
> > for entity Processing 2 was not initialized! [598962.015764]
> > uvcvideo 1-12.4.4.4:1.0: Entity type for entity Camera 1 was not
> > initialized! [598962.015987] input: SPCA2650 AV Camera as
> > /devices/pci:00/:00:14.0/usb1/1-12/1-12.4/1-12.4.4/1-12.4.4.
> >4/1-12.4.4.4:1.0/input/input20 [598962.016163] usbcore: registered
> > new interface driver uvcvideo
> >
> > Anybody have an idea of what driver this camera needs?
> >
> > Cheers, Gene Heskett
>
> Hi Gene,
>
> try to use your camera with mpv player. Just use something like this:
>
> $ mpv av://v4l2:/dev/video0
>
That sorta works, video refresh rate at 640x480 is about 1 frame a 
second, and if any camera motion, has severe window shade effects.
Not plugged directly into a usb3 mobo port however.  Color etc seems good 
though.

From the terminal:
gene@coyote:/etc/init.d$ mpv av://v4l2:/dev/video0
Playing: av://v4l2:/dev/video0
 (+) Video --vid=1 (rawvideo)
libEGL warning: DRI2: failed to authenticate
[vo/opengl] Suspected software renderer or indirect context.
[vo/opengl] Suspected software renderer or indirect context.
Failed to open VDPAU backend libvdpau_nvidia.so: cannot open shared 
object file: No such file or directory
[vo/vdpau] Error when calling vdp_device_create_x11: 1
[vo/xv] No Xvideo support found.
[vo/sdl] Using opengl
Using conversion filter.
VO: [sdl] 640x480 yuv420p
V: 00:02:06
[ffmpeg/demuxer] video4linux2,v4l2: Some buffers are still owned by the 
caller on close.
[ffmpeg] ioctl(VIDIOC_QBUF): Bad file descriptor
[ffmpeg] ioctl(VIDIOC_QBUF): Bad file descriptor
[ffmpeg] ioctl(VIDIOC_QBUF): Bad file descriptor


Exiting... (Quit)


> My camera works just fine with Skype, Zoom and Hangouts but it doesn't
> work with VLC.
>
> Kind regards
> Georgi

Thanks Georgi.

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: Advice on hardware server to use for small a dedicated data center

[Reco]

Hi.

On Fri, Jun 26, 2020 at 04:43:15PM -0400, Dan Ritter wrote:
> > > Note: I will need some RAID solution hard or soft.
> > 
> > Anything that's made by LSI if you need a hardware RAID controller.
> > Mdraid if whatever they sold you is not made by LSI.
> 
> Counterpoint: mdadm on LSI controllers flashed to "IT" mode,
> i.e. just give all the disks to mdadm.

That's something one should do for these Adaptecs :) And that thing they
are putting into Proliants instead of the RAID controller.
If it's fast *and* does not drop disks from the array for no reason (HP,
I'm looking at you here) - stick with hardware RAID, always said that.
YMMV.
Your approach gives portability, nothing wrong with that.


> LSI controllers are fast but have a ridiculous control
> interface.

I agree with you. MEGACli was designed for Matrians, and storcli can be
hardly called an improvement over it. But at least you can monitor
separate disks via smartd/smartctl, so it's not that bad.

Reco

Re: I can't figure it out

[Anders Andersson]

1. Don't top-post.

On Fri, Jun 26, 2020 at 5:39 PM Peter Ehlert  wrote:
>
> 1. use a Subject that indicates your actual Question.
>
> 2. add comments to that original post
>
> 3. give some actual details about the Hardware and Software you are using.
>
> *if I was not really bored this morning I would completely ignore some
> wild "I can't figure it out" post.
>
> I Suggest you start over with a Fresh post
>
> (this is my only effort I will make to drag it out of you, that kind of
> statement tells me you are being a PRICK)
>
> Peter
>
> On 6/25/20 4:58 PM, bw wrote:
> > I've posted 5,000 messages on this list about how to hook up my
> > refrigerator to my ancient 386sx computer with 512k of ram.  I don't
> > understand why I keep posting and everybody gets mad.  I say I use debian
> > but I admit I cheat a little and install some other crap and I'm not gonna
> > tell you what unless you drag it out of me.
> >
> > Can anybody yhelp fix it?

2. I can't even comprehend how you can read the text and believe that
the author has an actual question.

3. Read the post again and then realize what you're trying to do.

Re: new camera

[Georgi Naplatanov]

On 6/26/20 11:20 PM, Gene Heskett wrote:
> Greetings all;
> 
> Just got a new camera, fawcny endoscope, I intend to use for machine.
> 
> Moderately high priced, 5 Megapixel, autofocus.
> 
> But this stretch machine can't find it amongst all the other usb stuff.
> It doesn't have cheese, and vlc doesn't recognize it.
> 
> From dmesg:
> [598961.717093] usb 1-12.4.4.4: new high-speed USB device number 18 using 
> xhci_hcd
> [598961.869828] usb 1-12.4.4.4: New USB device found, idVendor=1bcf, 
> idProduct=284c
> [598961.869837] usb 1-12.4.4.4: New USB device strings: Mfr=1, Product=2, 
> SerialNumber=3
> [598961.869844] usb 1-12.4.4.4: Product: SPCA2650 AV Camera
> [598961.869848] usb 1-12.4.4.4: Manufacturer: SunplusIT Inc
> [598961.869852] usb 1-12.4.4.4: SerialNumber: 01.00.00
> [598961.954556] media: Linux media interface: v0.10
> [598961.973982] Linux video capture interface: v2.00
> [598961.999017] uvcvideo: Found UVC 1.00 device SPCA2650 AV Camera (1bcf:284c)
> [598962.015747] uvcvideo 1-12.4.4.4:1.0: Entity type for entity Extension 4 
> was not initialized!
> [598962.015756] uvcvideo 1-12.4.4.4:1.0: Entity type for entity Extension 3 
> was not initialized!
> [598962.015760] uvcvideo 1-12.4.4.4:1.0: Entity type for entity Processing 2 
> was not initialized!
> [598962.015764] uvcvideo 1-12.4.4.4:1.0: Entity type for entity Camera 1 was 
> not initialized!
> [598962.015987] input: SPCA2650 AV Camera as 
> /devices/pci:00/:00:14.0/usb1/1-12/1-12.4/1-12.4.4/1-12.4.4.4/1-12.4.4.4:1.0/input/input20
> [598962.016163] usbcore: registered new interface driver uvcvideo
> 
> Anybody have an idea of what driver this camera needs?
> 
> Cheers, Gene Heskett
> 

Hi Gene,

try to use your camera with mpv player. Just use something like this:

$ mpv av://v4l2:/dev/video0

My camera works just fine with Skype, Zoom and Hangouts but it doesn't
work with VLC.

Kind regards
Georgi

Re: Advice on hardware server to use for small a dedicated data center

[Dan Ritter]

Reco wrote: 
>   Hi.
> 
> On Fri, Jun 26, 2020 at 08:34:07PM +0200, echo test wrote:
> > So, I want to know if It's a good idea to try using Debian in an enterprise
> > context, with hardwares like Dell EMC PowerEdge or Lenovo ThinkCenter which
> > seems to never mention that they support Debian.
> 
> I'll be original here. Try SunFire X-series (aka SunServer X). Somewhat
> costly, and the hardware quality is a hit or miss in newer models, but
> runs Debian stable like it was designed for it.
> 
> 
> > Note: I will need some RAID solution hard or soft.
> 
> Anything that's made by LSI if you need a hardware RAID controller.
> Mdraid if whatever they sold you is not made by LSI.

Counterpoint: mdadm on LSI controllers flashed to "IT" mode,
i.e. just give all the disks to mdadm.

LSI controllers are fast but have a ridiculous control
interface.

-dsr-

Re: new camera

[Gene Heskett]

On Friday 26 June 2020 16:31:28 James H. H. Lampert wrote:

> On 6/26/20 1:20 PM, Gene Heskett wrote:
> > But this stretch machine can't find it amongst all the other usb
> > stuff. It doesn't have cheese, and vlc doesn't recognize it.
>
> . . .
>
> > Anybody have an idea of what driver this camera needs?
>
> Would transferring images on memory cards be a workable solution?
>
Doesn't have a card, usb only, and worthless as machine vision if you 
can't see what the machine is doing in very close to real time.

> --
> JHHL


Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: dpms control?

[Gene Heskett]

On Friday 26 June 2020 15:46:15 davidson wrote:

> On Sat, 20 Jun 2020 Gene Heskett wrote:
> > On Saturday 20 June 2020 20:57:38 David Wright wrote:
> >> On Sat 20 Jun 2020 at 20:37:09 (-0400), Gene Heskett wrote:
> >>> On Saturday 20 June 2020 20:13:08 davidson wrote:
>  On Sat, 20 Jun 2020, Gene Heskett wrote:
> > On Saturday 20 June 2020 18:22:56 davidson wrote:
> >> On Sat, 20 Jun 2020, Gene Heskett wrote:
> >>> Greetings all;
> >>> I am running an app that gets messed up if the screen blanker
> >>> kicks in, so I used xset to shut off dpms. Has no effect.  So
> >>> how do I shut the screen blanker down for the jobs duration?
> 
>  Since we seem to be troubleshooting, what is the output of
> 
>    $ xset q
> >>>
> >>> gene@coyote:/media$ xset q
> >>> Keyboard Control:
> >>>   auto repeat:  onkey click percent:  10LED mask: 
> >>>  XKB indicators:
> >>> 00: Caps Lock:   off01: Num Lock:off02: Scroll
> >>> Lock: off 03: Compose: off04: Kana:off05:
> >>> Sleep: off 06: Suspend: off07: Mute:off08:
> >>> Misc: off 09: Mail:off10: Charging:off11:
> >>> Shift Lock: off 12: Group 2: off13: Mouse Keys:  off
> >>>   auto repeat delay:  594repeat rate:  14
> >>>   auto repeating keys:  00ffdbbf
> >>> fadfffefffed
> >>> 9fff
> >>> fff7
> >>>   bell percent:  50bell pitch:  400bell duration:  100
> >>> Pointer Control:
> >>>   acceleration:  20/10threshold:  4
> >>> Screen Saver:
> >>>   prefer blanking:  noallow exposures:  yes
> >>>   timeout:  0cycle:  0
> >>> Colors:
> >>>   default colormap:  0x20BlackPixel:  0x0WhitePixel:
> >>> 0xff Font Path:
> >>>
> >>> /usr/share/fonts/X11/misc,/usr/share/fonts/X11/100dpi/:unscaled,/u
> >>>sr
> >>> /share/fonts/X11/75dpi/:unscaled,/usr/share/fonts/X11/Type1,/usr/s
> >>>har e/fonts/X11/100dpi,/usr/share/fonts/X11/75dpi,built-ins DPMS
> >>> (Energy Star):
> >>>   Standby: 450Suspend: 600Off: 900
> >>>   DPMS is Disabled
> >>>
> >>> But if I repeat that query half san hour later, something has
> >>> re-enabled dpms.  Murphy?
> >>
> >> If the system insists on setting dpms, can you change those three
> >> numbers with   dpms 1 2 3   only using some *very* large numbers.
> >>
> >> (DE stuff is beyond me.)
> >>
> >> Cheers,
> >> David.
> >
> > I just gave that a try, with 3000 6000 and 9000
>
> How did that go?

I can turn it off, once, then its back to the 7.5 minute defaults. I've 
given up. I cannot force it on for more than 7.5 minutes by anything but 
a mouse wiggler.

And I'm now alone, they finally found a rest home for my missus, but she 
is quarantined for 2 weeks. At nearly 8g's a month.  Out in the sticks, 
at least a 1:20 drive from here.  And getting sick of my own cooking, 
but I've been doing all that since she fell and broke a hip nearly 4 
years ago.


> > But ISTR doing that once before, quite a ways up the log and having
> > it reset to 450 300 600 in a half hour.
> >
> > I'll track it and see in the night when I'm up to water the daisys.
>
> How were the daisies holding up?

Not well. ;-)

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: Monitorar trabalho home office

[China]

O assunto é muito complexo.  Depende do que o empregador quer,  se for
apenas contabilizar horas trabalhadas os logs da vpn são mais que
suficientes. Se quer assegurar o uso dos recursos da empresa apenas para o
trabalho terá de ter algum tipo de limitação no perfil do usuário,  aí pode
usar desde as configurações de usuário até software de gestão de
identidade. Mas se quer camadas de sigilo pra,  por exemplo,  evitar do
empregado cometer alguma má conduta tipo vazar coisa pra concorrência,  já
é tarefa pra consultoria especializada.

Seria fundamental o autor da postagem detalhar melhor pra gente tentar
ajudar. Se não tiver conhecimento técnico basta descrever um cenário
hipotético.

Em sex, 26 de jun de 2020 17:06, Jack Jr.  escreveu:

> Software proprietário tem muitos. De software livre não conheço.
>
> Seria bem interessante se alguém indicasse algum.
>
> Jack Pogorelsky Jr.
> Engenheiro Mecânico
> Tel/WhatsApp: +55 (51) 982017877
> E-mail: j...@sulmail.com
> Website: sulmail.com/pogorelsky
> Em 25/06/2020 11:25, Unicred do Estado de Sao Paulo - Maiko Akihito
> Takemoto escreveu:
> > Bom dia.
> > Devido, a muito trabalho remoto precisamos de um software, para controle.
> > Alguém conhece?
> > Tempo de utilização da máquina, aplicativos rodados, etc...
> > Att.
> >
> > Maiko Akihito Takemoto
> > Supervisor de Desenvolvimento e TI
> > maiko.takem...@unicred.com.br
> >
> > UNICRED DO ESTADO DE SÃO PAULO – SEDE
> > Av. Barão de Itapura, 950 – 1º Andar - Guanabara
> > CEP: 13.020-431 – Campinas/SP
> > Tel + 55 19 3731-2810 – FAX 19 3731-2724
> > Visite nosso site: www.unicred.com.br/estadodesaopaulo
> >
> > Antes de imprimir, pense em sua responsabilidade e compromisso com o
> Meio Ambiente.
> > A mensagem e seus anexos têm caráter confidencial. Qualquer uso integral
> ou parcial desta mensagem é proibido, sendo passível das ações judiciais
> cabíveis.  A Unicred informa que a responsabilidade pela mensagem acima é
> exclusivamente de seu autor e não se responsabiliza pelo seu conteúdo.
>
>

Re: new camera

[James H. H. Lampert]

On 6/26/20 1:20 PM, Gene Heskett wrote:

But this stretch machine can't find it amongst all the other usb stuff.
It doesn't have cheese, and vlc doesn't recognize it.

. . .

Anybody have an idea of what driver this camera needs?


Would transferring images on memory cards be a workable solution?

--
JHHL

new camera

[Gene Heskett]

Greetings all;

Just got a new camera, fawcny endoscope, I intend to use for machine.

Moderately high priced, 5 Megapixel, autofocus.

But this stretch machine can't find it amongst all the other usb stuff.
It doesn't have cheese, and vlc doesn't recognize it.

From dmesg:
[598961.717093] usb 1-12.4.4.4: new high-speed USB device number 18 using 
xhci_hcd
[598961.869828] usb 1-12.4.4.4: New USB device found, idVendor=1bcf, 
idProduct=284c
[598961.869837] usb 1-12.4.4.4: New USB device strings: Mfr=1, Product=2, 
SerialNumber=3
[598961.869844] usb 1-12.4.4.4: Product: SPCA2650 AV Camera
[598961.869848] usb 1-12.4.4.4: Manufacturer: SunplusIT Inc
[598961.869852] usb 1-12.4.4.4: SerialNumber: 01.00.00
[598961.954556] media: Linux media interface: v0.10
[598961.973982] Linux video capture interface: v2.00
[598961.999017] uvcvideo: Found UVC 1.00 device SPCA2650 AV Camera (1bcf:284c)
[598962.015747] uvcvideo 1-12.4.4.4:1.0: Entity type for entity Extension 4 was 
not initialized!
[598962.015756] uvcvideo 1-12.4.4.4:1.0: Entity type for entity Extension 3 was 
not initialized!
[598962.015760] uvcvideo 1-12.4.4.4:1.0: Entity type for entity Processing 2 
was not initialized!
[598962.015764] uvcvideo 1-12.4.4.4:1.0: Entity type for entity Camera 1 was 
not initialized!
[598962.015987] input: SPCA2650 AV Camera as 
/devices/pci:00/:00:14.0/usb1/1-12/1-12.4/1-12.4.4/1-12.4.4.4/1-12.4.4.4:1.0/input/input20
[598962.016163] usbcore: registered new interface driver uvcvideo

Anybody have an idea of what driver this camera needs?

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: Advice on hardware server to use for small a dedicated data center

[ghe2001]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256






‐‐‐ Original Message ‐‐‐
On Friday, June 26, 2020 12:34 PM, echo test  wrote:

> Then, I want to build a small data center for my company for hosting a web 
> app and a mail server. It's the first time I'm going to buy some hardware for 
> this. I tried looking for it on the web in order to compare them but it seems 
> that hardware vendors never want to talk about Debian on their websites. 

Well, this might be heresy, but at that size, consider a Raspberry Pi running 
Raspian (Debian (sorta) recompiled for its CPU -- questions are accepted on 
this list). 

I'm on a T1, and I've been running them as Internet servers for almost a decade 
(replaced a genuine server). I suspect you could do RAID with a couple USB 
drives, and you could get the Ethernet ports you're looking for with a 4-hole 
switch.

I use a 3+ because I want to give the 4 a couple years to get its hardware and 
software debugged. The disadvantage of the 3+ is the 100M Ethernet speed (the 4 
claims 1G, but I doubt it). Check the speed of your 'Net connection. 100M is 
plenty fast for most installations.

Keep a spare on hand, ready to replace the server when #1 dies. But I've been 
using them for years, on a good UPS, with no probs at all.

--
Glenn English


-BEGIN PGP SIGNATURE-
Version: ProtonMail

wsBcBAEBCAAGBQJe9lWvAAoJEJ/XhjGCrIwyw/AIALmPVZ1FIpYW023wC2Be
zAON+RSq5kAvfx//Qyjsr/6e9WsFzJtgTGDE0nrrLoaeHriyRjD4AFVKD5qh
nvzIxe+J/J7XYYQABpGYxISRqm8EA5YKAzOHxNceNJBF43E8Wi3BNbVxRd3x
yhrAgge2RC4ngjEpVopKGQMKALxnKD9sz4PndX6nEsAvWpxPqF+Dp9n7gYhC
FVIekMJRlqd5N6x7hnncBZY6rO0gRajnB43Xug4aHxEI7R2u1cGebCljBOv0
am2h9gOpzeRcECDvbbe5fZt7Rtgv5RODkQtS+5jyzney4vapSplm77NeWhgQ
kBpCP8vXTm3HQ9Qrdqud4Mc=
=MAA7
-END PGP SIGNATURE-

Re: Monitorar trabalho home office

[Leandro Guimarães Faria Corcete DUTRA]

Le jeudi 25 juin 2020 à 14:25 +, Unicred do Estado de Sao Paulo -
Maiko Akihito Takemoto a écrit :
> precisamos de um software, para controle.

¿De quê precisamente?  Debian?


> Tempo de utilização da máquina, aplicativos rodados

GLPI e Fusion inventory podem ser um ponto de partida.


-- 
/¯\
\ / +55 (61) 3546 7191 xmpp:leand...@jabber.org
 X  +55 (61) 99302 2691
/ \ BRAZIL GMT−3  https://useplaintext.email/#why-plaintext

Re: Monitorar trabalho home office

[Jack Jr.]

Software proprietário tem muitos. De software livre não conheço.

Seria bem interessante se alguém indicasse algum.

Jack Pogorelsky Jr.
Engenheiro Mecânico
Tel/WhatsApp: +55 (51) 982017877
E-mail: j...@sulmail.com
Website: sulmail.com/pogorelsky
Em 25/06/2020 11:25, Unicred do Estado de Sao Paulo - Maiko Akihito 
Takemoto escreveu:

Bom dia.
Devido, a muito trabalho remoto precisamos de um software, para controle.
Alguém conhece?
Tempo de utilização da máquina, aplicativos rodados, etc...
Att.

Maiko Akihito Takemoto
Supervisor de Desenvolvimento e TI
maiko.takem...@unicred.com.br
  
UNICRED DO ESTADO DE SÃO PAULO – SEDE

Av. Barão de Itapura, 950 – 1º Andar - Guanabara
CEP: 13.020-431 – Campinas/SP
Tel + 55 19 3731-2810 – FAX 19 3731-2724
Visite nosso site: www.unicred.com.br/estadodesaopaulo

Antes de imprimir, pense em sua responsabilidade e compromisso com o Meio 
Ambiente.
A mensagem e seus anexos têm caráter confidencial. Qualquer uso integral ou 
parcial desta mensagem é proibido, sendo passível das ações judiciais cabíveis. 
 A Unicred informa que a responsabilidade pela mensagem acima é exclusivamente 
de seu autor e não se responsabiliza pelo seu conteúdo.

Re: Advice on hardware server to use for small a dedicated data center

[Reco]

Hi.

On Fri, Jun 26, 2020 at 08:34:07PM +0200, echo test wrote:
> So, I want to know if It's a good idea to try using Debian in an enterprise
> context, with hardwares like Dell EMC PowerEdge or Lenovo ThinkCenter which
> seems to never mention that they support Debian.

I'll be original here. Try SunFire X-series (aka SunServer X). Somewhat
costly, and the hardware quality is a hit or miss in newer models, but
runs Debian stable like it was designed for it.


> Note: I will need some RAID solution hard or soft.

Anything that's made by LSI if you need a hardware RAID controller.
Mdraid if whatever they sold you is not made by LSI.

Reco

Re: Advice on hardware server to use for small a dedicated data center

[Nicholas Geovanis]

On Fri, Jun 26, 2020, 2:41 PM Dan Ritter  wrote:

> echo test wrote:
> > Then, I want to build a small data center for my company for hosting a
> web
> > app and a mail server. It's the first time I'm going to buy some hardware
> > for this. I tried looking for it on the web in order to compare them but
> it
> > seems that hardware vendors never want to talk about Debian on their
> > websites.
>
> > So, I want to know if It's a good idea to try using Debian in an
> enterprise
> > context, with hardwares like Dell EMC PowerEdge or Lenovo ThinkCenter
> which
> > seems to never mention that they support Debian. What kind of issues can
> I
> > encounter with such hardwares except simple cases like having to install
> > missing drivers with some already available firmwares.
> >
> > Can you give me some alternative hardwares in case this idea may take me
> to
> > much time to solve ?
>
> My employer runs more than a hundred Debian servers, mostly on
> Supermicro hardware, but some HP as well.
>
> We have very few hardware problems.
>

Ditto. Ive worked for firms that run hundreds of Debian servers on hardware
and cloud. Both Dell and Lenovo/IBM have supported linux on their hardware
at various times. There is also an IBM Poweredge linux email  list that Im
still on.

> Note: I will need some RAID solution hard or soft.
>
> We are firmly of the opinion that mdadm or ZFS are the best
> solutions here.
>

I prefer ZFS but I find that lots of corps prefer mdadm. I really think
that's simply because ZFS came from Sun and they lack Solaris backgrounds.
Now, in a low-RAM environment with simpler disc needs, I would probably go
with mdadm. Anything else I would choose ZFS. It's ability to take care of
itself is surprisingly strong. Less work for me after the set up and
installation.

-dsr-
>
>

Re: Advice on hardware server to use for small a dedicated data center

[deloptes]

Hi,
I can only share what I did when taking similar decision

echo test wrote:

> So, I want to know if It's a good idea to try using Debian in an
> enterprise context, with hardwares like Dell EMC PowerEdge or Lenovo
> ThinkCenter which seems to never mention that they support Debian. What
> kind of issues can I encounter with such hardwares except simple cases
> like having to install missing drivers with some already available
> firmwares.
> 

I decided to not spend money on server hardware (data volume and load are
really minimal), because this hardware is 
a) more expensive than desktop hardware
b) it consumes more power (costs more)

Of course it depends on your use case - you mention webapp server - this
means 
a) at least enough broadband - and I mean professional quality (up/down)
b) also probably you need a backup line - good to check when ordering
c) calculate load/capacity and compare cost between desktop and server
solution

> Can you give me some alternative hardwares in case this idea may take me
> to much time to solve ?
> 

When you answer the questions above and probably other questions that pop up
you will have found the answer here.

> Note: I will need some RAID solution hard or soft.

I use LSI cards on ASUS M5A97 EVO R2.0 with 3.4GHz CPU and 32GB RAM. Problem
is these LSI cards are 3Gbps with WD RED, which is sufficient for me, but
if it were to serve 1000 web requests per minute, I believe it would die.
There are faster cards on the market recently, but the point is you need
definitely two (for redundancy). Think always about redundancy. I would buy
also 2 servers and make a plan regarding disaster recovery. I have RAID1
and RAID6 in use. 
What is better for you, you decide alone. Good Servers cost around 2-3K -
make it double(for redundancy), rack, pdus, ups, air conditioning, switch
and firewall belongs in the basket - 10K to start with at pro level.
All depends on the numbers. My solution cost 3.8K in 2012 - and it is not
the pro one - but never regret it.

Alternatively you can consider renting a server or server space for your own
hardware in professional data center - could be better option (will save
you the troubles with the power supply and air conditioning) - again
depends on costs and calculations.

Another alternative would be to buy second hand - but again buy redundant.

As for pro hardware, I had good experience with HP DL360 and 380 and
PowerEdge (different models).
I think all of them are good.

I hope it helps - regards

Re: dpms control?

[davidson]

On Sat, 20 Jun 2020 Gene Heskett wrote:

On Saturday 20 June 2020 20:57:38 David Wright wrote:


On Sat 20 Jun 2020 at 20:37:09 (-0400), Gene Heskett wrote:

On Saturday 20 June 2020 20:13:08 davidson wrote:

On Sat, 20 Jun 2020, Gene Heskett wrote:

On Saturday 20 June 2020 18:22:56 davidson wrote:

On Sat, 20 Jun 2020, Gene Heskett wrote:

Greetings all;
I am running an app that gets messed up if the screen blanker
kicks in, so I used xset to shut off dpms. Has no effect.  So
how do I shut the screen blanker down for the jobs duration?


Since we seem to be troubleshooting, what is the output of

  $ xset q


gene@coyote:/media$ xset q
Keyboard Control:
  auto repeat:  onkey click percent:  10LED mask:  
  XKB indicators:
00: Caps Lock:   off01: Num Lock:off02: Scroll Lock:
off 03: Compose: off04: Kana:off05: Sleep:
off 06: Suspend: off07: Mute:off08: Misc:
off 09: Mail:off10: Charging:off11: Shift Lock:
off 12: Group 2: off13: Mouse Keys:  off
  auto repeat delay:  594repeat rate:  14
  auto repeating keys:  00ffdbbf
fadfffefffed
9fff
fff7
  bell percent:  50bell pitch:  400bell duration:  100
Pointer Control:
  acceleration:  20/10threshold:  4
Screen Saver:
  prefer blanking:  noallow exposures:  yes
  timeout:  0cycle:  0
Colors:
  default colormap:  0x20BlackPixel:  0x0WhitePixel:
0xff Font Path:

/usr/share/fonts/X11/misc,/usr/share/fonts/X11/100dpi/:unscaled,/usr
/share/fonts/X11/75dpi/:unscaled,/usr/share/fonts/X11/Type1,/usr/shar
e/fonts/X11/100dpi,/usr/share/fonts/X11/75dpi,built-ins DPMS (Energy
Star):
  Standby: 450Suspend: 600Off: 900
  DPMS is Disabled

But if I repeat that query half san hour later, something has
re-enabled dpms.  Murphy?


If the system insists on setting dpms, can you change those three
numbers with   dpms 1 2 3   only using some *very* large numbers.

(DE stuff is beyond me.)

Cheers,
David.



I just gave that a try, with 3000 6000 and 9000


How did that go?


But ISTR doing that once before, quite a ways up the log and having
it reset to 450 300 600 in a half hour.

I'll track it and see in the night when I'm up to water the daisys.


How were the daisies holding up?

--
What do you want to take off? [hrzF or ?*] F
You were wearing a +0 robe.  The frost giant turns to flee.

Re: Advice on encrypted filesystem

[Michael Stone]

On Fri, Jun 26, 2020 at 02:06:57PM -0500, David Wright wrote:

Agreed. But I wouldn't be writing any sensitive information to an SSD
in the first place without encrypting it. (Not that I own any yet.)


SSDs are more common than not in new computers so it's probably best to 
assume that people reading stuff like this might be trying to apply it 
to an SSD.



> # cryptsetup --align-payload 2048 luksFormat /dev/sdz9

I also would not add this align-payload option. (If you don't,
cryptsetup will query the kernel for optimal parameters.)


You're right, but the problem comes when the kernel feeds LUKS a value
that it isn't designed to handle correctly. As elsewhere on my systems,
I tend to gravitate towards recipes/solutions that I can use across
all of them, rather than having to deal with lots of exceptions.


Well, the problem is that magic numbers get cargo culted without knowing 
why they are there or whether they're the right number, and eventually 
they aren't.


Per the manual:
WARNING: This option is DEPRECATED and has often unexpected impact to 
the data offset and keyslot area size (for LUKS2) due to the complex  
rounding.


The best option IMO (especially for crypto related stuff) is to stick 
with the defaults and deal with exceptions if they come up rather than 
blindly carry forward things that were once necessary on some 
configuration sometime. If you want to be complete you might reference a 
past issue so someone can deal with it if it arises, but it shouldn't be 
the starting point.


In this case, it's the "Optimal transfer size" which catches it out, 
when the commonly occurring value of 33553920 bytes is received. In 
plain speaking, that's 512*(2**16-1); which might be fine for the 
kernel transferring over USB with 32MB buffers, but unfortunately 
isn't actually divisible by 2048.


In this case, the kernel was updated to ignore transfer sizes which 
aren't a multiple of the drive's physical sector size because some 
drives were reporting seemingly bogus values. Hardcoding a workaround 
for older kernels means not taking advantage of the fix on newer 
kernels.

Re: Advice on hardware server to use for small a dedicated data center

[Dan Ritter]

echo test wrote: 
> Then, I want to build a small data center for my company for hosting a web
> app and a mail server. It's the first time I'm going to buy some hardware
> for this. I tried looking for it on the web in order to compare them but it
> seems that hardware vendors never want to talk about Debian on their
> websites.

> So, I want to know if It's a good idea to try using Debian in an enterprise
> context, with hardwares like Dell EMC PowerEdge or Lenovo ThinkCenter which
> seems to never mention that they support Debian. What kind of issues can I
> encounter with such hardwares except simple cases like having to install
> missing drivers with some already available firmwares.
> 
> Can you give me some alternative hardwares in case this idea may take me to
> much time to solve ?

My employer runs more than a hundred Debian servers, mostly on
Supermicro hardware, but some HP as well.

We have very few hardware problems.

> Note: I will need some RAID solution hard or soft.

We are firmly of the opinion that mdadm or ZFS are the best
solutions here.

To give an idea of what you might buy:

a firewall/router
a switch
a load-balancer
2 web servers
a database server
a mail server
a general utility box with lots of storage to handle backups

All of those duties except the switch can reasonable be run on
Debian servers. 

a firewall/router - nftables. You will want at least 3 ethernet
  ports. CPU is not usually an issue. RAM is never an issue.
  Disk space can be tiny.

a load-balancer - ldirectord, or haproxy, or possibly nginx. You
  won't need much CPU unless you run SSL on nginx. You won't
  need very much RAM, or disk space.

2 web servers - nginx or apache or whatever makes your
  developers happy. These probably need CPU and a fair amount of
  RAM, but not much disk space

a database server - postgresql. This will be your biggest box,
  with large disk arrays and lots of RAM and fast CPUs.

a mail server - postfix. This might need lots of disk, depending
  on what you're doing, but even a terabyte is actually a
  ridiculous amount of mail storage for a small company.

a general utility box with lots of storage to handle backups -
  on which you might run your DNS server, NTP server, store
  logs, and run borg or rsync backups of the other machines.

You might consider a git server, too.

-dsr-

Re: Advice on encrypted filesystem

[David Wright]

On Fri 26 Jun 2020 at 11:47:34 (-0400), Michael Stone wrote:
> On Fri, Jun 26, 2020 at 08:25:49AM -0500, David Wright wrote:
> > If encrypting an entire disk, scramble the disk first, then partition.
> > If only encrypting a partition, partition the disk first.
> > Alignments should be at least 2M (4096 x 512B sectors).
> > Scramble any sensitive pre-existing contents:
> > 
> > # dd bs=1M if=/dev/urandom of=/dev/sdz[9]
> 
> I personally wouldn't do this. It's slow and doesn't gain much.

As I posted in https://lists.debian.org/debian-user/2020/06/msg01109.html
I get about 75% speed from /dev/urandom compared with /dev/zero (as
suggested by your good self, except that I'm writing directly to
/dev/sdXN, not to an encrypted device, which would itself be slower).

> I
> definitely wouldn't do it on an SSD.

Agreed. But I wouldn't be writing any sensitive information to an SSD
in the first place without encrypting it. (Not that I own any yet.)

> > # cryptsetup --align-payload 2048 luksFormat /dev/sdz9
> 
> I also would not add this align-payload option. (If you don't,
> cryptsetup will query the kernel for optimal parameters.)

You're right, but the problem comes when the kernel feeds LUKS a value
that it isn't designed to handle correctly. As elsewhere on my systems,
I tend to gravitate towards recipes/solutions that I can use across
all of them, rather than having to deal with lots of exceptions.

In this case, it's the "Optimal transfer size" which catches it out,
when the commonly occurring value of 33553920 bytes is received.
In plain speaking, that's 512*(2**16-1); which might be fine for
the kernel transferring over USB with 32MB buffers, but unfortunately
isn't actually divisible by 2048.

Cheers,
David.

Advice on hardware server to use for small a dedicated data center

[echo test]

Hello,

First of all, please don't ask me why I simply don't want to use aws or gcp.

Then, I want to build a small data center for my company for hosting a web
app and a mail server. It's the first time I'm going to buy some hardware
for this. I tried looking for it on the web in order to compare them but it
seems that hardware vendors never want to talk about Debian on their
websites.

Seriously, I prefer using my money for donating to the Debian foundation
than having to pay for Ubuntu or Red Hat Enterprise because I love Debian
and ...

So, I want to know if It's a good idea to try using Debian in an enterprise
context, with hardwares like Dell EMC PowerEdge or Lenovo ThinkCenter which
seems to never mention that they support Debian. What kind of issues can I
encounter with such hardwares except simple cases like having to install
missing drivers with some already available firmwares.

Can you give me some alternative hardwares in case this idea may take me to
much time to solve ?

Note: I will need some RAID solution hard or soft.

Sorry if my English is bad, it's not my mother language.

Thank you.

Re: Advice on encrypted filesystem

[Michael Stone]

On Fri, Jun 26, 2020 at 08:25:49AM -0500, David Wright wrote:

If encrypting an entire disk, scramble the disk first, then partition.
If only encrypting a partition, partition the disk first.
Alignments should be at least 2M (4096 x 512B sectors).
Scramble any sensitive pre-existing contents:

# dd bs=1M if=/dev/urandom of=/dev/sdz[9]


I personally wouldn't do this. It's slow and doesn't gain much. I 
definitely wouldn't do it on an SSD.



# cryptsetup --align-payload 2048 luksFormat /dev/sdz9


I also would not add this align-payload option. (If you don't, 
cryptsetup will query the kernel for optimal parameters.)

Re: I can't figure it out

[Peter Ehlert]

please Read and absorb this: https://www.debian.org/code_of_conduct

On 6/26/20 8:20 AM, Peter Ehlert wrote:

1. use a Subject that indicates your actual Question.

2. add comments to that original post

3. give some actual details about the Hardware and Software you are 
using.


*if I was not really bored this morning I would completely ignore some 
wild "I can't figure it out" post.


I Suggest you start over with a Fresh post

(this is my only effort I will make to drag it out of you, that kind 
of statement tells me you are being a PRICK)


Peter

On 6/25/20 4:58 PM, bw wrote:

I've posted 5,000 messages on this list about how to hook up my
refrigerator to my ancient 386sx computer with 512k of ram.  I don't
understand why I keep posting and everybody gets mad.  I say I use 
debian
but I admit I cheat a little and install some other crap and I'm not 
gonna

tell you what unless you drag it out of me.

Can anybody yhelp fix it?

Re: I can't figure it out

[Peter Ehlert]

1. use a Subject that indicates your actual Question.

2. add comments to that original post

3. give some actual details about the Hardware and Software you are using.

*if I was not really bored this morning I would completely ignore some 
wild "I can't figure it out" post.


I Suggest you start over with a Fresh post

(this is my only effort I will make to drag it out of you, that kind of 
statement tells me you are being a PRICK)


Peter

On 6/25/20 4:58 PM, bw wrote:

I've posted 5,000 messages on this list about how to hook up my
refrigerator to my ancient 386sx computer with 512k of ram.  I don't
understand why I keep posting and everybody gets mad.  I say I use debian
but I admit I cheat a little and install some other crap and I'm not gonna
tell you what unless you drag it out of me.

Can anybody yhelp fix it?

Re: Advice on encrypted filesystem

[rhkramer]

Thanks -- very helpful!  I mayb have some more questions as I triy to digest 
this, but can't spend time on it today.

Nothing new below this line.

On Friday, June 26, 2020 09:25:49 AM David Wright wrote:
> On Thu 25 Jun 2020 at 07:40:43 (-0400), rhkra...@gmail.com wrote:
> > On Wednesday, June 24, 2020 10:20:55 PM David Wright wrote:
> > > On Wed 24 Jun 2020 at 21:28:38 (-0400), rhkra...@gmail.com wrote:
> > > > On my Wheezy system, I used cryptsetup to set up a LUKs  encrypted
> > > > file system on a dedicated partition
> > > 
> > > What were the contents of this partition: the OS itself, or /home,
> > > or an independent filesystem that you'd probably mount under /media?
> > 
> > an independent filesystem mounted as a top level directory
> 
> Then I can't see any point in involving the Debian installer.
> Some of the details depend on what scripts you use to unlock
> and mount. My own method for creating a filesystem is
> (from my notes):
> 
> --✄
> 
> If encrypting an entire disk, scramble the disk first, then partition.
> If only encrypting a partition, partition the disk first.
> Alignments should be at least 2M (4096 x 512B sectors).
> Scramble any sensitive pre-existing contents:
> 
> # dd bs=1M if=/dev/urandom of=/dev/sdz[9]
> 
> Partitioning is conventional.
> 
> # gdisk /dev/sdz
> 
> [… etc …]
> 
> Creating the encrypted partition.
> 
> # cryptsetup --align-payload 2048 luksFormat /dev/sdz9
> 
> WARNING!
> 
> This will overwrite data on /dev/sdb1 irrevocably.
> 
> [… etc …]
> 
> Add more passphrases:
> 
> # cryptsetup luksAddKey /dev/sdz9
> 
> [… etc …]
> 
> Create the filesystem:
> 
> # cryptsetup open --type luks /dev/sdz9 thename
> 
> # mkfs.ext4 -L name09 /dev/mapper/thename
> 
> [… etc …]
> 
> # e2label /dev/mapper/thename name09 (if forgotten above).
> 
> Finally:
> 
> # cryptsetup luksClose thename
> 
> --✄
> 
> (I mangle the device names to make copy/paste less dangerous.)
> 
> > (I have some scripts to allow me to easily open (and close) those
> > filesystems -- when they open, the unencrypted content is put on a
> > ramdisk (with the intent if somebody gets physical possession of the
> > device (which is a desktop, not a laptop), the enencrypted data
> > disappears on power off.)
> 
> As I encrypt /home, it wouldn't make sense for me to copy it all.
> I assume that nobody's going to freeze my PC when they steal it.
> 
> My scripts use LABELled filesystems (as seen above), so there's nothing
> unusual about /etc/fstab; and I unlock with udisksctl, using the
> /dev/disk/by-partlabel value, so there's no entry in /etc/crypttab.
> 
> > Well, the Buster system is a laptop, Jessie is a desktop.  I don't plan
> > to put much, if any, sensitive data on the laptop.  (I don't really even
> > intend to take the laptop out of the house, especially during this Covid
> > thing -- I installed Buster on it because I needed GCC 7+ and couldn't
> > (easily) do that on the Wheezy or Jessie systems.
> > 
> > > Do you use suspend?
> > 
> > No.
> 
> Then you could encrypt swap with a random key. My method for that
> is unusual, in that the swap partition is specified in fstab by
> its (tiny) filesystem's LABEL. Its /etc/crypttab is thus fixed:
> 
> swap  LABEL=cryptswap /dev/urandomswap,offset=2048,cipher=aes-xts-
plain64,s
> ize=512
> 
> > > Desktops?
> > 
> > See above.
> > 
> > > Do you boot them remotely?
> > 
> > No, but they do stay up 24/7 unless there is a (longer that 2 minute
> > (power is UPS supported)) power outage, or a (very rare) reboot.
> 
> OK. This only really matters if you're encrypting /home (as I do)
> or the system itself, as you then need a method of supplying the
> passphrase before any users can login. (I use a pseudo-user whose
> ~ is in /var/local/home/ with a crafted .bash_profile.)
> 
> Cheers,
> David.

Re: Disable touchpad completely in KDE

[Dan Ritter]

Paul Johnson wrote: 
> I'm trying to work out where I can disable the touchpad completely in KDE.
> I can seem to do it when certain devices are plugged in, but there doesn't
> seem to be a way to make it always off.  I've got a trackpoint and the
> touchpad just exists to get in the way.

If your system is using xinput:

xinput will tell you about the I/O devices you have, giving you
numbers.

xinput list followed by one of those device numbers will give
you lots of output, so you can be sure you've got the right one.

xinput disable followed by that device number should, in fact,
disable it.

Let us know if you aren't using xinput.

-dsr-

Disable touchpad completely in KDE

[Paul Johnson]

I'm trying to work out where I can disable the touchpad completely in KDE.
I can seem to do it when certain devices are plugged in, but there doesn't
seem to be a way to make it always off.  I've got a trackpoint and the
touchpad just exists to get in the way.

Operating System: Debian GNU/Linux 10
KDE Plasma Version: 5.14.5
Qt Version: 5.11.3
KDE Frameworks Version: 5.54.0
Kernel Version: 4.19.0-9-amd64
OS Type: 64-bit
Processors: 4 × Intel® Core™ i7-7500U CPU @ 2.70GHz
Memory: 30.9 GiB of RAM

Re: Advice on encrypted filesystem

[David Wright]

On Thu 25 Jun 2020 at 07:40:43 (-0400), rhkra...@gmail.com wrote:
> On Wednesday, June 24, 2020 10:20:55 PM David Wright wrote:
> > On Wed 24 Jun 2020 at 21:28:38 (-0400), rhkra...@gmail.com wrote:
> > > On my Wheezy system, I used cryptsetup to set up a LUKs  encrypted file
> > > system on a dedicated partition
> > 
> > What were the contents of this partition: the OS itself, or /home,
> > or an independent filesystem that you'd probably mount under /media?
> 
> an independent filesystem mounted as a top level directory

Then I can't see any point in involving the Debian installer.
Some of the details depend on what scripts you use to unlock
and mount. My own method for creating a filesystem is
(from my notes):

--✄

If encrypting an entire disk, scramble the disk first, then partition.
If only encrypting a partition, partition the disk first.
Alignments should be at least 2M (4096 x 512B sectors).
Scramble any sensitive pre-existing contents:

# dd bs=1M if=/dev/urandom of=/dev/sdz[9]

Partitioning is conventional.

# gdisk /dev/sdz

[… etc …]

Creating the encrypted partition.

# cryptsetup --align-payload 2048 luksFormat /dev/sdz9

WARNING!

This will overwrite data on /dev/sdb1 irrevocably.

[… etc …]

Add more passphrases:

# cryptsetup luksAddKey /dev/sdz9

[… etc …]

Create the filesystem:

# cryptsetup open --type luks /dev/sdz9 thename

# mkfs.ext4 -L name09 /dev/mapper/thename

[… etc …]

# e2label /dev/mapper/thename name09 (if forgotten above).

Finally:

# cryptsetup luksClose thename

--✄

(I mangle the device names to make copy/paste less dangerous.)

> (I have some scripts to allow me to easily open (and close) those filesystems 
> -- when they open, the unencrypted content is put on a ramdisk (with the 
> intent if somebody gets physical possession of the device (which is a 
> desktop, 
> not a laptop), the enencrypted data disappears on power off.) 

As I encrypt /home, it wouldn't make sense for me to copy it all.
I assume that nobody's going to freeze my PC when they steal it.

My scripts use LABELled filesystems (as seen above), so there's nothing
unusual about /etc/fstab; and I unlock with udisksctl, using the
/dev/disk/by-partlabel value, so there's no entry in /etc/crypttab.

> Well, the Buster system is a laptop, Jessie is a desktop.  I don't plan to 
> put 
> much, if any, sensitive data on the laptop.  (I don't really even intend to 
> take the laptop out of the house, especially during this Covid thing -- I 
> installed Buster on it because I needed GCC 7+ and couldn't (easily) do that 
> on the Wheezy or Jessie systems.
> 
> > Do you use suspend? 
> 
> No.

Then you could encrypt swap with a random key. My method for that
is unusual, in that the swap partition is specified in fstab by
its (tiny) filesystem's LABEL. Its /etc/crypttab is thus fixed:

swapLABEL=cryptswap /dev/urandom
swap,offset=2048,cipher=aes-xts-plain64,size=512

> > Desktops? 
> 
> See above.
> 
> > Do you boot them remotely?
> 
> No, but they do stay up 24/7 unless there is a (longer that 2 minute (power 
> is 
> UPS supported)) power outage, or a (very rare) reboot.

OK. This only really matters if you're encrypting /home (as I do)
or the system itself, as you then need a method of supplying the
passphrase before any users can login. (I use a pseudo-user whose
~ is in /var/local/home/ with a crafted .bash_profile.)

Cheers,
David.

Re: How long will this take?

[David Wright]

On Fri 19 Jun 2020 at 14:52:11 (-0700), David Christensen wrote:
> On 2020-06-18 19:13, David Wright wrote:
> > On Fri 12 Jun 2020 at 07:51:30 (-0400), Michael Stone wrote:
> > > On Thu, Jun 11, 2020 at 08:52:10PM -0500, David Wright wrote:
> > 
> > > > The only unaddressed point in my use case is the prevention of a
> > > > high-water mark, because zeroing the drive achieves precisely the
> > > > opposite. What ought I to be running, instead of badblocks -w -t random,
> > > > to achieve that goal?
> > > 
> > > Create the encrypted volume first, then write zeros to it. :)
> > 
> > Duh! That should work a treat. My posting that example bore me fruit.
> 
> Benchmark is one thing.  But, from a security viewpoint, writing zeros
> to an encrypted volume amounts to providing blocks of plaintext for
> corresponding blocks of cyphertext, thereby facilitating
> cryptanalysis.

So in view of the unlikelihood of badblocks actually logging something
more useful than SMART (where available) or normal disk write errors,
perhaps a compromise (for my use case) is to just write /dev/urandom
rather than /dev/zero. On this slow machine with an oldish PATA disk,
I can get about 75% speed from urandom, 15MB/s vs 20MB/s on a 29GiB
partition (no encryption). There's a noticeable slowdown because,
I presume, the machine runs a bit short of entropy after a while.

Cheers,
David.

Jitsi, authentification, host et guest

[BERTRAND Joël]

Bonjour à tous,

Je pose ma question ici, peut-être des gens ont-ils été ou sont-ils
confrontés au même problème.

J'ai indiqué il y a quelque temps ma configuration de jitsi avec
authentification pour les hôtes et les invités. Il y a en revanche un
petit quelque chose gênant que je n'arrive pas à corriger.

L'hôte peut créer un salon de discussion et des invités peuvent s'y
connecter (en s'authentifiant). Problème : si tous les invités se voient
entre eux, ils ne voient pas l'hôte. L'hôte, quant à lui, voit tout le
monde. Je ne sais plus où chercher. Mon installation est actuellement la
suivante :

rayleigh:[~] > dpkg-query -l | grep jitsi
ii  jitsi-meet2.0.4627-1
all  WebRTC JavaScript video conferences
ii  jitsi-meet-prosody1.0.4127-1
all  Prosody configuration for Jitsi Meet
ii  jitsi-meet-web1.0.4127-1
all  WebRTC JavaScript video conferences
ii  jitsi-meet-web-config 1.0.4127-1
all  Configuration for web serving of Jitsi Meet
rc  jitsi-videobridge 1126-1
amd64WebRTC compatible Selective Forwarding Unit (SFU)
ii  jitsi-videobridge22.1-202-g5f9377b9-1
all  WebRTC compatible Selective Forwarding Unit (SFU)

Je n'ai rien de particulier dans les logs. Même lorsque l'hôte coche
"tout le monde me suit", rien n'y fait.

Des idées ? J'ai bien remonté le problème au suppor de jitsi, mais
celui-ci est muet. Aujourd'hui, pour que cela fonctionne, je me connecte
en tant qu'hôte (sans caméra ni micro) pour créer le salon et je me
reconnecte à partir de la même machine en invité. Pas très pratique.

Bien cordialement,

JKB

Re: [HS] L'Etat choisit Microsoft pour ses données de santé

[didier . gaumet]

Le vendredi 26 juin 2020 09:00:03 UTC+2, Mathieu Rossi a écrit :
> Bonjour,
> 
> Il me semble - mais je n'ai plus les références sous les yeux - que la 
> situation est différente selon que le serveur est hébergé en Europe ou aux US.

je connais très mal le sujet mais de ce que je comprends, ce que tu décris 
était le fonctionnement sous le Stored Communication Act de 1986 et la 
promulgation aux USA en 2018 du Cloud Act avait justement pour but de corriger 
cet état de fait. Ceci concernant les citoyens des USA.

Concernant les citoyens des pays membres de l'UE, de ce que je comprends 
(mal?), pour que leur données soient communiquées à la justice américaine, 
celles-ci étant protégées par le RPGD même aux USA, il faudrait que la demande 
américaine soit conforme aux standards européens pour être recevable.

D'où l'intérêt de ne pas beugler à la "forfaiture" avant d'en avoir établi 
l'existence. Je ne suis pas pro-américain, je ne suis pas ultra-libéral. 
J'aimerais juste qu'on me présente des éléments factuels, en posant la question 
des risques perçus associés à ces faits, ceci d'une manière non-tendancieuse.

cf (les articles wikipedia en anglais):  
 https://en.wikipedia.org/wiki/Stored_Communications_Act
 https://en.wikipedia.org/wiki/CLOUD_Act
 
https://en.wikipedia.org/wiki/General_Data_Protection_Regulation#Third_countries

Re: [HS] L'Etat choisit Microsoft pour ses données de santé

[didier . gaumet]

il semble que ce soit bien l'article en question.Simplement, seul le début est 
en lecture libre, la suite est payante...

Re: Newbie

[Andrei POPESCU]

On Jo, 25 iun 20, 05:06:30, Weaver wrote:
> (2) There are a lot of people around who prefer to use your mind, and
> not their own. It's a good gauge in determining if someone is worth
> helping or not.

Anyone deserves a chance.

Gently pointing them towards the fine manuals is also help.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature

Re: [HS] L'Etat choisit Microsoft pour ses données de santé

[Mathieu Rossi]

Bonjour,

Il me semble - mais je n'ai plus les références sous les yeux - que la 
situation est différente selon que le serveur est hébergé en Europe ou aux US.



Le 25 juin 2020 19:11:49 GMT+02:00, Bureau LxVx  
a écrit :
>Bonjour Benoît,
>
>Le lien n'aboutit pas à l'article dont tu parles :-(
>
>Librement,
>
>Sylvie
>
>Le 25/06/2020 à 18:40, benoit a écrit :
>> Citation d'un article du monde diplomatique :
>>
>> « Petit détail : cette plate-forme, qui contient à la fois les
>dossiers de l’assurance-maladie, des facturations hospitalières, des
>causes médicales de décès, des données médico-sociales des personnes
>handicapées et un échantillon de factures de remboursement des
>organismes complémentaires, est hébergée sur le cloud (le « nuage »,
>lieu de stockage des données informatiques) de Microsoft, entreprise
>américaine qui a été certifiée « hébergeur de données » en France, fin
>2018. En vertu du Cloud Act (« loi sur le nuage »), les forces de
>l’ordre ou les agences de renseignement des États-Unis pourront donc
>avoir accès aux informations contenues sur le serveur »
>>
>> https://www.monde-diplomatique.fr/2020/06/BRYGO/61870
>>
>> :-(
>>
>>
>> --
>> Benoit
>>
>>
>> Sent with ProtonMail Secure Email.
>>
>> ‐‐‐ Original Message ‐‐‐
>> Le mercredi 17 juin 2020 09:11, Jean Bernon  a
>écrit :
>>
>>> https://lists.riseup.net/www/info/interhop
>>>
 Y a-t-il une initiative pour protester contre cette forfaiture ?
>>

Mathieu Rossi 
+33 6 80 95 66 82

Re: why foxit hasn't been included in buster?

[kaye n]

I use Evince to print pdf's. It's really good. I think you can press
alt+enter and see the paper size, i.e. what type of paper you should use to
print - short bond, legal, A4

I think it shows up as "Document Viewer" in the menu.

On Thu, Jun 25, 2020 at 8:05 PM Klaus Singvogel 
wrote:

> Celejar wrote:
> > On Thu, 25 Jun 2020 10:07:34 +0200
> > Erwan David  wrote:
> >
> > > Le 25/06/2020 à 09:41, Klaus Singvogel a écrit :
> > > >
> > > > Btw, if you know a Form capable PDF viewer, which is FOSS, let me
> know.
> > > >
> > >
> > > Okular does (KDE document viewer, not only PDF)
> >
> > As does Gnome's Evince / Document Viewer. I don't know if it works with
> > all PDF forms, but I just tested it with this one, and it seems to work
> > fine:
> >
> > http://foersom.com/net/HowTo/data/OoPdfFormExample.pdf
>
> Thanks for the input.
>
> I'm sorry that I forgot the important part: the calculation via JavaScript.
>
> There exists PDF Forms, which can calculate, and I'm sure that evince
> Version 3.30.2-3+deb10u1, which is shipped with Debian Buster, is not
> able.
>
> I'm not sure about Okular, but will find out later. :-)
>
> Best regards,
> Klaus.
> --
> Klaus Singvogel
> GnuPG-Key-ID: 1024R/5068792D  1994-06-27
>
>