selinux causing problems

[Alex King]

Does anyone know how to disable selinux?

I had selinux installed on this system a long time ago.  Recently I 
believe apparmor was active (and therefore selinux not active).  Today I 
upgraded to Debian 12.


apparmor was preventing named (bind9) from running; whatever I did, it 
was denying read to a file (/usr/share/dns/root.hints).  So I disabled 
apparmor by setting apparmor=0 on the boot command line.


Now it seems that selinux is active again, and even when I try to set 
selinux=0 to disable it, it is still running and spamming the logs with 
messages like


logrotate.service: Failed to read SELinux context of 
'/lib/systemd/system/logrotate.service', ignoring: Operation not permitted



How should I disable selinux?  I followed the suggestion in the man page 
(man selinux: To properly disable SELinux, it is recommended to use the 
selinux=0 kernel boot option).  This does not seem to work.


Any help greatly appreciated.

Thanks,
Alex


# lsb_release  -a
No LSB modules are available.
Distributor ID: Debian
Description:Debian GNU/Linux 12 (bookworm)
Release:12
Codename:   bookworm

# cat /proc/version
Linux version 6.1.0-13-686-pae (debian-ker...@lists.debian.org) (gcc-12 
(Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40) #1 SMP 
PREEMPT_DYNAMIC Debian 6.1.55-1 (2023-09-29)


# cat /proc/cmdline
BOOT_IMAGE=/boot/vmlinuz-6.1.0-13-686-pae root=/dev/mapper/main-root ro 
quiet apparmor=0 selinux=0


# sestatus
SELinux status: enabled
SELinuxfs mount:/sys/fs/selinux
SELinux root directory: /etc/selinux
Loaded policy name: default
Current mode:   permissive
Mode from config file:  disabled
Policy MLS status:  disabled
Policy deny_unknown status: denied
Memory protection checking: actual (secure)
Max kernel policy version:  33

Re: Performance of my computer

[Mike Castle]

On Mon, Oct 30, 2023 at 5:14 PM Van Snyder  wrote:
> On Mon, 2023-10-30 at 19:40 +, piorunz wrote:
> On 30/10/2023 18:56, Van Snyder wrote:
> Firefox, in every version I've used so far, appears to have memory
>
> leaks. If I kill it, not by clicking its little "X" or Alt-F4, but with
>
> "kill -9", so that it reopens everything when I restart it, my memory
>
> usage immediately drops by 75%. Then it creeps back up.
>
>
> Firefox doesn't have any memory leaks. It actively uses buffers, cache,
>
> filling available memory. I have Firefox running for days, sometimes
>
> weeks. On slow laptop, and fast workstation PC. Same result, no crashes,
>
> no memory leaks.
>
>
> Then why does it use 1/3 as much memory to display the same pages and tabs 
> when I kill it and restart it? That's a symptom of memory leakage.

Do you happen to keep the Web Developer Tools open?  Or console logs
set to persistent?  Those will keep lots of things in memory just in
case you need them as a developer trying to debug an issue.
Generally, if I notice my memory usage going up, I will be sure to
close the Dev Tools and reload the tab a couple of times.  Then,
eventually, the JavaScript garbage collector will kick in and start
releasing the items the Dev Tools have stopped tracking.

FF also has built in performance tools that can be used to determine
what may be using resources.  Menu -> More tools -> Task Manager (aka,
shift-esc or about:processes).

Nothing Debian specific here.
https://support.mozilla.org/en-US/kb/task-manager-tabs-or-extensions-are-slowing-firefox#w_task-manager
has more details.

mrc

Re: Default DNS lookup command?

[Max Nikulin]

On 30/10/2023 14:03, Richard Hector wrote:

On 24/10/23 06:01, Max Nikulin wrote:

getent -s dns hosts zircon

Ah, thanks. But I don't feel too bad about not finding that ... 
'service' is not defined in that file, 'dns' doesn't occur, and 
searching for 'hosts' doesn't give anything useful either. I guess 
reading nsswitch.conf(5) is required.


Do you mean that "hosts" entry in your /etc/nsswitch.conf lacks "dns"? 
Even systemd nss plugins recommend to keep it as a fallback. If you get 
no results then your resolver or DNS server may not be configured to 
resolve single-label names. Try some full name


getent -s dns ahosts debian.org

kill -9 firefox (Re: Performance of my computer)

[Max Nikulin]

On 31/10/2023 01:56, Van Snyder wrote:
Firefox, in every version I've used so far, appears to have memory 
leaks. If I kill it, not by clicking its little "X" or Alt-F4, but with 
"kill -9", so that it reopens everything when I restart it, my memory 
usage immediately drops by 75%. Then it creeps back up.


It may be leaks in JavaScript code running by particular web pages, not 
Firefox fault.


Firefox has the "restore previous session" feature. My expectation is 
that it should work more reliable than "kill -9". The latter may cause 
inconsistency in data saved to disk. I see nothing wrong with "close 
window" (Alt+F4). An alternative is "quit" that closes all windows at once.

Re: Changing host name and domain name on Debian; was: Domain nametouse on home networks

[Max Nikulin]

On 30/10/2023 00:00, gene heskett wrote:
Somebody who /can/ report it. I changed ISP's over a decade back, so I 
am not me to bugzilla, and because I am known also by name, I can't 
re-register. I can't even get a pw reset cuz it (I'm guessing here) is 
sending it to my earlier ISP's


Sorry, it is not clear what particular bugzilla instance you are writing 
about. You are sending e-mails and you should be able to register a new 
account. Do you mean that you have managed to upset developers to the 
degree when they decide to ban your active mail address?

Re: Domain name to use on home networks

[Max Nikulin]

On 31/10/2023 01:43, Greg Wooledge wrote:
for Gene's systems I would recommend traditional Debian ifupdown 
(/etc/network/interfaces). It's by far the simplest, and the most widely 
supported among the community, in case he has questions.


Notice that in the default configuration NetworkManager refrains from 
controlling of interfaces added to /etc/network/interfaces. So it does 
not even necessary to remove packages.

Re: Domain name to use on home networks

[Max Nikulin]

On 30/10/2023 23:09, gene heskett wrote:
Making resolv.conf immutable seems to be the way to permanently insulate 
me from NM's broken idea of whats right.


Gene, from what you have written in this thread I see nothing wrong in 
behavior of NetworkManager. Certainly it is easier to continue barking 
at NetworkManager instead of getting rid of gibberish you put into its 
config.


Reread this thread from its start. NetworkManager is flexible enough and 
recipes for tuning of DNS settings have been posted here.

Re: Performance of my computer

[Stefan Monnier]

> Then why does it use 1/3 as much memory to display the same pages and
> tabs when I kill it and restart it? That's a symptom of memory leakage.

Not necessarily, no.  It may consciously decide to hold on memory that
was used in the past in order to avoid having to re-allocate and
re-initialize it next time.
Some of that is simply "the cache", but there are all kinds of things
like that.

A leak would be if the amount of memory use increases each time you
visit a given page, even though that page always has exactly the
same content.


Stefan

Re: Populating IPv6 DNS addresses in resolv.conf

[Max Nikulin]

On 31/10/2023 04:02, Pocket wrote:

On 10/30/23 15:50, Timothy M Butterworth wrote:


I know it is using dhclient because I typod the domain name supersede 
domain-name "home.apra"; and it populated .apra in resolv.conf.


Sorry, it is not clear for me what did you do and what result you got. 
There is a script that may run ifupdown hooks:

/etc/NetworkManager/dispatcher.d/01-ifupdown
I hope, dhclient settings do not conflict with NetworkManager connection 
properties.



/etc/NetworkManager/NetworkManager.conf (lib: no-mac-addr-change.conf)

[main]
# rc-manager=
# auth-polkit=true
# dhcp=internal

^^

This states that you are running two DHCP clients as I suspected.


I would not be so sure. Notice "[ifupdown] managed=false". It is better 
to have a look into "ps axuwwf" for DHCP-related stuff (dhclient, 
udhcpcd). I hope, systemd-networkd does not try to manage interfaces


networkctl

should report "unmanaged". I assume that NetworkManager uses its 
internal DHCP client and it is OK.


Timothy, are you sure that "Pixel5" sends a DHCP lease? I have almost no 
experience with IPv6. I would try other methods for IPv6. I hope,


nmcli connection show Pixel5

may shed more light on IPv6 configuration state. Finally, do not neglect 
"journalctl -b" messages (even though I find NetworkManager log messages 
rather noisy).

Re: Domain name to use on home networks

[Charles Curley]

On Mon, 30 Oct 2023 14:43:43 -0400
Greg Wooledge  wrote:

> …but for Gene's systems I would recommend
> traditional Debian ifupdown (/etc/network/interfaces).  It's by far
> the simplest, and the most widely supported among the community, in
> case he has questions.

It has the further advantage that Network Manager will not manage
interfaces described in /e/n/i, so Gene can leave NM alone.


-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Re: Performance of my computer

[John Hasler]

Piotr writes:
> No, it's just buffering everything it can to satisfy hunger for speed,
> set by Chrome and other competitors. Launch Chrome on your computer,
> you will experience similar behaviour, memory hogging. It's not a
> leak, it's new modern "design" for the browsers.

I believe you can adjust memory usage in about:config in Firefox.
-- 
John Hasler 
j...@sugarbit.com
Elmwood, WI USA

Re: Performance of my computer

[piorunz]

On 30/10/2023 19:49, Michael Kjörling wrote:

On 30 Oct 2023 13:36 -0600, from willitc9...@gmail.com (William Torrez Corea):

model name : Intel(R) Core(TM) i7-4500U CPU @ 1.80GHz

cpu MHz : 798.205
cpu MHz : 798.173
cpu MHz : 798.250
cpu MHz : 798.223


There's something. You have a 4 x 1.8 GHz CPU but it's actually
running at 800 MHz across all cores. 1.8 GHz is already at the slow
end by modern standards but 800 MHz is definitely slow. If you
actually did this while doing something which you felt was slow, it
should have stepped up the frequency.


CPU is idling and there is nothing to do, I don't know why you want to
investigate normal CPU behaviour. This is absolutely normal. Going down
all the way to 0.80 GHz is actually great, that is definitely conserving
power.

Here's another example:

neofetch | grep CPU
CPU: AMD Ryzen 7 5800X (16) @ 3.800GHz [47.3°C]

$ grep -e '^cpu MHz' /proc/cpuinfo
cpu MHz : 2627.848
cpu MHz : 2880.186
cpu MHz : 2660.697
cpu MHz : 2874.974
cpu MHz : 2878.375
cpu MHz : 2879.568
cpu MHz : 3800.000
cpu MHz : 2200.000
cpu MHz : 2200.000
cpu MHz : 2878.822
cpu MHz : 2879.274
cpu MHz : 2824.946
cpu MHz : 2200.000
cpu MHz : 2200.000
cpu MHz : 3596.336
cpu MHz : 2869.524

Oh look my Ryzen is broken because it's only delivering 2800 MHz instead
of advertised 3800 MHz, yes? No. It's power saving because there is
nothing to do, processor is not busy, so frequency is scaling down. This
is all by default, no tweaks required.

--
With kindest regards, Piotr.

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/
⠈⠳⣄

Re: Performance of my computer

[piorunz]

On 30/10/2023 22:19, Van Snyder wrote:

Then why does it use 1/3 as much memory to display the same pages and
tabs when I kill it and restart it? That's a symptom of memory leakage.


No, it's just buffering everything it can to satisfy hunger for speed,
set by Chrome and other competitors. Launch Chrome on your computer, you
will experience similar behaviour, memory hogging. It's not a leak, it's
new modern "design" for the browsers.

--
With kindest regards, Piotr.

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/
⠈⠳⣄

Re: Performance of my computer

[David Christensen]

On 10/30/23 12:04, David Christensen wrote:

On 10/30/23 11:45, William Torrez Corea wrote:

How can improve the performance of my computer?

I have problems when I have a lot of tabs opened in my browser, i am 
using

the libreoffice or playing on Steam. The system blew up.

My browser: Firefox Browser 115.4.0esr (64 bit)
My system: Linux 5.10.0-26-amd64 1 SMP Debian 5.10.197-1 (2023-09-29)
x86_64 GNU/Linux

My browser consumes 655MB of memory and uses 34% of the CPU.

The system uses 30% CPU, 265 Process, 50% memory and swap 9%.

I haven't partitioned my hard disk.

I have Toshiba L200 Laptop PC Hard drive 1 TB, 5400 rpm, 128 MB/8MB 
buffer



Please run the following command and reply with the console session 
(prompt, command entered, output displayed):


# cat /etc/debian_version ; uname -a



On 10/30/23 12:38, William Torrez Corea wrote:
> 11.8
> Linux  5.10.0-26-amd64 #1 SMP Debian 5.10.197-1 (2023-09-29) x86_64
> GNU/Linux


While that does appear to be console output for the command I suggested, 
your post is incomplete -- you did not post the prompt and the command.



This is an example of what I was requesting:

2023-10-30 15:43:45 root@taz ~
# cat /etc/debian_version ; uname -a
11.8
Linux taz 5.10.0-26-amd64 #1 SMP Debian 5.10.197-1 (2023-09-29) x86_64 
GNU/Linux



Note that I have set the environment variable "PS1" in the shell 
start-up file ".profile" so that the shell prompt provides useful 
information -- date, time, username, hostname, and current working 
directory:


2023-10-30 15:44:35 root@taz ~
# grep PS1 .profile
export PS1='\n\D{%Y-%m-%d %H:%M:%S} ${USER}@\h \w\n\$ '


Providing good context in your posts will make your posts more useful.



What is the make and model of the computer?



If you answer this question, we can explore options such as upgrading 
the processor, memory, storage, graphics card, etc..




What processor does it have?


On 10/30/23 12:36, William Torrez Corea wrote:
> model name : Intel(R) Core(TM) i7-4500U CPU @ 1.80GHz


Again, posting the prompt and command would help us understand the output.


Looking up the specifications on the Intel web site:


https://ark.intel.com/content/www/us/en/ark/products/75460/intel-core-i74500u-processor-4m-cache-up-to-3-00-ghz.html


That is a 10-year old ultra-low power laptop processor.  It should be 
adequate for light to moderate desktop use, but heavy web sites, heavy 
office documents, and especially games are going to crush it.




What memory modules are installed?


If you answer this question, we can explore options such as upgrading 
the memory modules.




STFW "Toshiba L200" I see:

https://www.toshiba-storage.com/products/toshiba-internal-hard-drives-l200/

Replacing a HDD with an SSD would improve responsiveness when booting, 
starting applications, opening and saving files, backing up, imaging, etc..



David

Re: Performance of my computer

[Dan Purgert]

On Oct 30, 2023, Van Snyder wrote:
> On Mon, 2023-10-30 at 19:40 +, piorunz wrote:
> > On 30/10/2023 18:56, Van Snyder wrote:
> > > Firefox, in every version I've used so far, appears to have
> > > memoryleaks. If I kill it, not by clicking its little "X" or Alt-
> > > F4, but with"kill -9", so that it reopens everything when I restart
> > > it, my memoryusage immediately drops by 75%. Then it creeps back
> > > up.
> > 
> > Firefox doesn't have any memory leaks. It actively uses buffers,
> > cache,filling available memory. I have Firefox running for days,
> > sometimesweeks. On slow laptop, and fast workstation PC. Same result,
> > no crashes,no memory leaks.
> 
> Then why does it use 1/3 as much memory to display the same pages and
> tabs when I kill it and restart it? That's a symptom of memory leakage.

Or is it a plugin that leaks (or crap scripts on the sites)?

-- 
|_|O|_|
|_|_|O| Github: https://github.com/dpurgert
|O|O|O| PGP: DDAB 23FB 19FA 7D85 1CC1  E067 6D65 70E5 4CE7 2860


signature.asc
Description: PGP signature

Re: Debian installer refuses to setup IP address if gateway is no in the same subnet

[Dan Ritter]

Mihamina RKTMB wrote: 
> Hi all,
> 
> I rent a dedicated server where I installed an hypervisor and purchased
> failover public IPv4 IPs routed to that server.
> 
> When configuring the Debian VMs to use those failover IPs, I have to
> 
> - set the address to /32: "ip addr add $IP/32 dev eth0"
> 
> - set the traffic to the gateway to go through the NIC: "ip route add $GW
> dev eth0"
> 
> - set the default route to go via the gateway: "ip route add default via
> $GW"
> 
> As I set the IP address to a /32, the gateway is not (never) in the subnet
> of the VM.
> 
> When using the Debian installer, at the networking setup, the installer
> refuses that setting: the gateway is not in the subnet of the set IP
> address.
> 
> The workaround I use is either to
> 
> - finish the installation without network and then at reboot, setup the
> network
> 
> - manually setup the network during installation in another console
> 
> But isn't there a way to make the Debian installer accept that the gateway
> is not in the subnet of the set IP address?

No.

I presume that your server rental includes an address on an IPv4 or IPv6
network via DHCP or as a static assignment. That is how the
server reaches everything else, the default.

You can add more IPs to that interface. If your upstream network
sends traffic there, your machine can recognize it as
appropriate. How should responses go out?

If the IPs are v4 /32 each, the response cannot go out that way.
There is no "way" there. If your upstream network allows it,
your server can use the v4 /32 as the return address, while
sending out to the default router. But you must have an
interface which sits on the same network as the default router.

Note that you are never deleting the IP that your upstream
assigned you. 

Here's what to do after install:

ip addr add $IP/32 dev eth0

that should be all you need, unless there are other things you
aren't telling us.

-dsr-

Re: Performance of my computer

[Van Snyder]

On Mon, 2023-10-30 at 19:40 +, piorunz wrote:
> On 30/10/2023 18:56, Van Snyder wrote:
> > Firefox, in every version I've used so far, appears to have
> > memoryleaks. If I kill it, not by clicking its little "X" or Alt-
> > F4, but with"kill -9", so that it reopens everything when I restart
> > it, my memoryusage immediately drops by 75%. Then it creeps back
> > up.
> 
> Firefox doesn't have any memory leaks. It actively uses buffers,
> cache,filling available memory. I have Firefox running for days,
> sometimesweeks. On slow laptop, and fast workstation PC. Same result,
> no crashes,no memory leaks.

Then why does it use 1/3 as much memory to display the same pages and
tabs when I kill it and restart it? That's a symptom of memory leakage.
> --With kindest regards, Piotr.
> ⢀⣴⠾⠻⢶⣦⠀⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system⢿⡄⠘⠷⠚⠋⠀ 
> https://www.debian.org/
> ⠈⠳⣄

Re: Debian live boot corrupting secure boot

[Valerio Vanni]

With Fedora Live I could see the difference, using
# mokutil --list-sbat-revocations.

When the system is in one of these states:
-new
-reflashed
-after old clonezilla (grub entries) load
-after Fedora live load or Fedora install

This list is
sbat,1,202103218

After load of grub page of a new Clonezilla (or live Debian) the list
becomes:

sbat,1,2022052400
grub,2


In addition to firmware reflash, I found this way to restore previous 
condition:


-in bios settings, disable secure boot
-load new clonezilla live (tried with the version that updated the 
blacklist)
-open shell, and run "mokutil --set-sbat-policy delete" (with "mokutil 
--set-sbat-policy previous" nothing changes)
-reboot with same clonezilla live (it's enough to reach boot grub 
entries, the "mokutil --set-sbat-policy delete" is run at this stage, 
just as blacklist update)

-shutdown
-in bios settings, enable secure boot

But I haven't find, so far, a way to prevent blacklist update.

Re: Debian installer refuses to setup IP address if gateway is no in the same subnet

[Jeffrey Walton]

On Mon, Oct 30, 2023 at 5:53 PM Mihamina RKTMB  wrote:
>
> I rent a dedicated server where I installed an hypervisor and purchased
> failover public IPv4 IPs routed to that server.
>
> When configuring the Debian VMs to use those failover IPs, I have to
>
> - set the address to /32: "ip addr add $IP/32 dev eth0"
>
> - set the traffic to the gateway to go through the NIC: "ip route add
> $GW dev eth0"
>
> - set the default route to go via the gateway: "ip route add default via
> $GW"
>
> As I set the IP address to a /32, the gateway is not (never) in the
> subnet of the VM.
>
> When using the Debian installer, at the networking setup, the installer
> refuses that setting: the gateway is not in the subnet of the set IP
> address.
>
> The workaround I use is either to
>
> - finish the installation without network and then at reboot, setup the
> network
>
> - manually setup the network during installation in another console
>
> But isn't there a way to make the Debian installer accept that the
> gateway is not in the subnet of the set IP address?

It should not matter, if I recall correctly. Anything the machine does
not know how to route goes out on the default interface. That should
be the 0.0.0.0 entry in the routing table.

Maybe you need to help the installer along, and set the default route
for the machine? Perhaps using an alternate virtual terminal, like
FN+F5. I believe the command is `route add default gw {IP-ADDRESS}
{INTERFACE-NAME}`.

Jeff

Debian installer refuses to setup IP address if gateway is no in the same subnet

[Mihamina RKTMB]

Hi all,

I rent a dedicated server where I installed an hypervisor and purchased 
failover public IPv4 IPs routed to that server.


When configuring the Debian VMs to use those failover IPs, I have to

- set the address to /32: "ip addr add $IP/32 dev eth0"

- set the traffic to the gateway to go through the NIC: "ip route add 
$GW dev eth0"


- set the default route to go via the gateway: "ip route add default via 
$GW"


As I set the IP address to a /32, the gateway is not (never) in the 
subnet of the VM.


When using the Debian installer, at the networking setup, the installer 
refuses that setting: the gateway is not in the subnet of the set IP 
address.


The workaround I use is either to

- finish the installation without network and then at reboot, setup the 
network


- manually setup the network during installation in another console

But isn't there a way to make the Debian installer accept that the 
gateway is not in the subnet of the set IP address?


Regards

Re: Domain name to use on home networks

[gene heskett]

On 10/30/23 14:44, Greg Wooledge wrote:

On Mon, Oct 30, 2023 at 06:37:48PM +, Andrew M.A. Cater wrote:

On Mon, Oct 30, 2023 at 02:29:37PM -0400, gene heskett wrote:

On 10/30/23 13:40, John Hasler wrote:

I wrote:

Why do you have NetworkManager installed at all?


Gene writes:

Std image dd'd to u-sd card install on the arm64 stuff, can't get away
from it.


Why won't "sudo apt remove --purge network-manager" work for you?

It did, but took the network down too after a reboot.  To make sure I do it
right, whats next?



systemd-networkd, maybe - see, for example, the Arch wiki at
https://wiki.archlinux.org/title/systemd-networkd

Andy


That's not a wrong answer, but for Gene's systems I would recommend
traditional Debian ifupdown (/etc/network/interfaces).  It's by far the
simplest, and the most widely supported among the community, in case
he has questions.

I did that, worked a treat.  Didn't even have to fix one of my fat 
fingered typu's. ;o)>

.


Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis

Re: Domain name to use on home networks

[Pocket]

On 10/30/23 14:43, Greg Wooledge wrote:

On Mon, Oct 30, 2023 at 06:37:48PM +, Andrew M.A. Cater wrote:

On Mon, Oct 30, 2023 at 02:29:37PM -0400, gene heskett wrote:

On 10/30/23 13:40, John Hasler wrote:

I wrote:

Why do you have NetworkManager installed at all?

Gene writes:

Std image dd'd to u-sd card install on the arm64 stuff, can't get away
from it.

Why won't "sudo apt remove --purge network-manager" work for you?

It did, but took the network down too after a reboot.  To make sure I do it
right, whats next?


systemd-networkd, maybe - see, for example, the Arch wiki at
https://wiki.archlinux.org/title/systemd-networkd

Andy

That's not a wrong answer, but for Gene's systems I would recommend
traditional Debian ifupdown (/etc/network/interfaces).  It's by far the
simplest, and the most widely supported among the community, in case
he has questions.


I concur





--
It's not easy to be me

Re: Populating IPv6 DNS addresses in resolv.conf

[Pocket]

On 10/30/23 15:50, Timothy M Butterworth wrote:



On Mon, Oct 30, 2023 at 1:18 PM Pocket  wrote:


On 10/30/23 09:04, Timothy M Butterworth wrote:

Hello All,

I have been following the recent emails regarding resolv.conf. I
almost have my system running perfectly. The only thing I am
missing is the population of IPv6 DNS addresses.

sudo less /etc/dhcp/dhclient.conf
supersede domain-name "home.arpa";
supersede dhcp6.domain-search "home.arpa";
supersede dhcp6.name-servers 2001:4860:4860::,
2001:4860:4860::8844;
supersede domain-name-servers 8.8.8.8, 8.8.4.4;

sudo less /etc/NetworkManager/NetworkManager.conf
[main]
plugins=ifupdown,keyfile

[ifupdown]
managed=false

[global-dns]
searches=home.arpa

sudo less /etc/NetworkManager/system-connections/Pixel5.nmconnection

[ipv4]
dns=8.8.4.4,8.8.8.8;
dns-search=home.arpa;
ignore-auto-dns=true #I tried with this on, commented out and set
to false
may-fail=false
method=auto

[ipv6]
addr-gen-mode=stable-privacy
dns=2001:4860:4860::,2001:4860:4860::8844;
dns-search=home.arpa;
ignore-auto-dns=true #I tried with this on, commented out and set
to false
may-fail=false
method=auto

sudo less /etc/resolv.conf
domain home.arpa
search home.arpa
nameserver 8.8.8.8
nameserver 8.8.4.4

For some reason I am not getting any IPv6 Name Servers populated.

Any thoughts are appreciated.

Tim



Why not use NetworkManagers internal DHCP client.

That is what I have done and then I don't need dhclient or dhcpcd.

I am not sure that you are really using dhclient as NetworkManager
has not been set to use dhclient from the configuration that you
have posted.


I know it is using dhclient because I typod the domain name supersede 
domain-name "home.apra"; and it populated .apra in resolv.conf.


What is the output from:

NetworkManager --print-config

Notice in the following dhcp=internal in my configuration

NetworkManager --print-config


sudo NetworkManager --print-config
# NetworkManager configuration: 
/etc/NetworkManager/NetworkManager.conf (lib: no-mac-addr-change.conf)


[main]
# rc-manager=
# auth-polkit=true
# dhcp=internal


^^

This states that you are running two DHCP clients as I suspected.

That is probably why you have the results you have.


From the docs page: 
https://networkmanager.dev/docs/api/latest/NetworkManager.conf.html


||




This key sets up what DHCP client NetworkManager will use. Allowed 
values are |dhclient|, |dhcpcd|, and |internal|. The |dhclient| and 
|dhcpcd| options require the indicated clients to be installed. The 
|internal| option uses a built-in DHCP client which is not currently as 
featureful as the external clients.


If this key is missing, it defaults to |internal|. If the chosen plugin 
is not available, clients are looked for in this order: |dhclient|, 
|dhcpcd|, |internal|.


The commented entries are the defaults if not explicitly set

--

It's not easy to be me

Re: Populating IPv6 DNS addresses in resolv.conf

[Timothy M Butterworth]

On Mon, Oct 30, 2023 at 1:18 PM Pocket  wrote:

>
> On 10/30/23 09:04, Timothy M Butterworth wrote:
>
> Hello All,
>
> I have been following the recent emails regarding resolv.conf. I almost
> have my system running perfectly. The only thing I am missing is the
> population of IPv6 DNS addresses.
>
> sudo less /etc/dhcp/dhclient.conf
> supersede domain-name "home.arpa";
> supersede dhcp6.domain-search "home.arpa";
> supersede dhcp6.name-servers 2001:4860:4860::, 2001:4860:4860::8844;
> supersede domain-name-servers 8.8.8.8, 8.8.4.4;
>
> sudo less /etc/NetworkManager/NetworkManager.conf
> [main]
> plugins=ifupdown,keyfile
>
> [ifupdown]
> managed=false
>
> [global-dns]
> searches=home.arpa
>
> sudo less /etc/NetworkManager/system-connections/Pixel5.nmconnection
>
> [ipv4]
> dns=8.8.4.4,8.8.8.8;
> dns-search=home.arpa;
> ignore-auto-dns=true #I tried with this on, commented out and set to false
> may-fail=false
> method=auto
>
> [ipv6]
> addr-gen-mode=stable-privacy
> dns=2001:4860:4860::,2001:4860:4860::8844;
> dns-search=home.arpa;
> ignore-auto-dns=true #I tried with this on, commented out and set to false
> may-fail=false
> method=auto
>
> sudo less /etc/resolv.conf
> domain home.arpa
> search home.arpa
> nameserver 8.8.8.8
> nameserver 8.8.4.4
>
> For some reason I am not getting any IPv6 Name Servers populated.
>
> Any thoughts are appreciated.
>
> Tim
>
>
> Why not use NetworkManagers internal DHCP client.
>
> That is what I have done and then I don't need dhclient or dhcpcd.
>
> I am not sure that you are really using dhclient as NetworkManager has not
> been set to use dhclient from the configuration that you have posted.
>

I know it is using dhclient because I typod the domain name supersede
domain-name "home.apra"; and it populated .apra in resolv.conf.


> What is the output from:
>
> NetworkManager --print-config
>
> Notice in the following dhcp=internal in my configuration
>
> NetworkManager --print-config
>

sudo NetworkManager --print-config
# NetworkManager configuration: /etc/NetworkManager/NetworkManager.conf
(lib: no-mac-addr-change.conf)

[main]
# rc-manager=
# auth-polkit=true
# dhcp=internal
# iwd-config-path=
plugins=ifupdown,keyfile
configure-and-quit=no

[global-dns]
searches=home.arpa

[ifupdown]
managed=false

[logging]
# backend=journal
# audit=true

[device]
# wifi.backend=wpa_supplicant

[device-31-mac-addr-change]
match-device=driver:eagle_sdio,driver:wl
wifi.scan-rand-mac-address=no



> # NetworkManager configuration: /etc/NetworkManager/NetworkManager.conf
> (lib: no-mac-addr-change.conf)
>
> [main]
> # rc-manager=
> # auth-polkit=true
> # dhcp=internal
> # iwd-config-path=
> plugins=ifupdown,keyfile
> configure-and-quit=no
>
> [global-dns]
> options=ends0 trust-ad
>
> [ifupdown]
> managed=false
>
> [logging]
> # backend=journal
> # audit=true
>
> [device]
> # wifi.backend=wpa_supplicant
> wifi.scan-rand-mac-address=no
>
> [device-31-mac-addr-change]
> match-device=driver:eagle_sdio,driver:wl
> wifi.scan-rand-mac-address=no
>
> # no-auto-default file "/var/lib/NetworkManager/no-auto-default.state"--
>
> --
>
> It's not easy to be me
>
>

-- 
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/
⠈⠳⣄⠀⠀

Re: Performance of my computer

[Jeffrey Walton]

> On Mon, Oct 30, 2023 at 12:45:38PM -0600, William Torrez Corea wrote:
> > I have problems when I have a lot of tabs opened in my browser, i am using
> > the libreoffice or playing on Steam. The system blew up.
>
> ...
> > My browser: Firefox Browser 115.4.0esr (64 bit)
> > My system: Linux 5.10.0-26-amd64 1 SMP Debian 5.10.197-1 (2023-09-29)
> > x86_64 GNU/Linux
> >
> > My browser consumes 655MB of memory and uses 34% of the CPU.

OP might try another browser that is not so resource hungry:
.

Sorry to hang this of GW's post. I cannot find the original in my Inbox.

Jeff

Re: Performance of my computer

[Michael Kjörling]

On 30 Oct 2023 13:36 -0600, from willitc9...@gmail.com (William Torrez Corea):
> model name : Intel(R) Core(TM) i7-4500U CPU @ 1.80GHz
> 
> cpu MHz : 798.205
> cpu MHz : 798.173
> cpu MHz : 798.250
> cpu MHz : 798.223

There's something. You have a 4 x 1.8 GHz CPU but it's actually
running at 800 MHz across all cores. 1.8 GHz is already at the slow
end by modern standards but 800 MHz is definitely slow. If you
actually did this while doing something which you felt was slow, it
should have stepped up the frequency.

This _might_ be different on an older kernel but I'm curious what the
CPU frequency governor is set to. Please try:

for policy in /sys/devices/system/cpu/cpufreq/policy*/; do echo $policy ; cat 
$policy/scaling_governor ; cat $policy/scaling_max_freq ; done

(note: all on one line)

and show us the output.

-- 
Michael Kjörling  https://michael.kjorling.se
“Remember when, on the Internet, nobody cared that you were a dog?”

Re: Populating IPv6 DNS addresses in resolv.conf

[Timothy M Butterworth]

On Mon, Oct 30, 2023 at 11:09 AM Max Nikulin  wrote:

> On 30/10/2023 20:04, Timothy M Butterworth wrote:
> > sudo less /etc/resolv.conf
> > domain home.arpa
> > search home.arpa
> > nameserver 8.8.8.8
> > nameserver 8.8.4.4
>
> I do not see "# Generated by NetworkManager" here.
>
>  nmcli connection
>
NAMEUUID  TYPE  DEVICE
Pixel5  e70d426b-3a26-4b29-bf59-edb3dcdfdbc3  wifi  wlo1


>  nmcli device
>
DEVICE  TYPE  STATE   CONNECTION
wlo1wifi  connected   Pixel5



>  NetworkManager --print-config
>
sudo NetworkManager --print-config
# NetworkManager configuration: /etc/NetworkManager/NetworkManager.conf
(lib: no-mac-addr-change.conf)

[main]
# rc-manager=
# auth-polkit=true
# dhcp=internal # Am I correct in thinking that this setting enables the
internal DHCP client.
# iwd-config-path=
plugins=ifupdown,keyfile
configure-and-quit=no

[global-dns]
searches=home.arpa

[ifupdown]
managed=false

[logging]
# backend=journal
# audit=true

[device]
# wifi.backend=wpa_supplicant

[device-31-mac-addr-change]
match-device=driver:eagle_sdio,driver:wl
wifi.scan-rand-mac-address=no

# no-auto-default file "/var/lib/NetworkManager/no-auto-default.state"


>  ls -l /etc/resolv.conf
>
 lsattr /etc/resolv.conf
>

I just changed this back to using chattr +i with the IPv6 addresses added.



> As to /etc/dhcp/dhclient.conf and /etc/network/interfaces, I may be
> wrong, but perhaps independent instances for IPv4 and IPv6 may be
> running (if actual connection is managed through ifupdown)
>
>

-- 
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/
⠈⠳⣄⠀⠀

Re: Performance of my computer

[piorunz]

On 30/10/2023 18:56, Van Snyder wrote:

Firefox, in every version I've used so far, appears to have memory
leaks. If I kill it, not by clicking its little "X" or Alt-F4, but with
"kill -9", so that it reopens everything when I restart it, my memory
usage immediately drops by 75%. Then it creeps back up.


Firefox doesn't have any memory leaks. It actively uses buffers, cache,
filling available memory. I have Firefox running for days, sometimes
weeks. On slow laptop, and fast workstation PC. Same result, no crashes,
no memory leaks.

--
With kindest regards, Piotr.

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/
⠈⠳⣄

Re: Performance of my computer

[piorunz]

On 30/10/2023 19:36, William Torrez Corea wrote:

total        used        free      shared  buff/cache   available
Mem:           7.7Gi       4.3Gi       2.6Gi       373Mi       830Mi 
   2.7Gi

Swap:          8.8Gi       1.4Gi       7.4Gi


Last step: Run command:
sudo inxi -m

And paste the result, then we will know what are your options to expand RAM.

--
With kindest regards, Piotr.

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/
⠈⠳⣄

Re: Performance of my computer

[Michael Kjörling]

On 30 Oct 2023 12:04 -0700, from dpchr...@holgerdanske.com (David Christensen):
> # cat /etc/debian_version ; uname -a

The kernel and Firefox version specified in the original question
match current Bullseye, so that seems a likely guess.

-- 
Michael Kjörling  https://michael.kjorling.se
“Remember when, on the Internet, nobody cared that you were a dog?”

Re: Performance of my computer

[Michael Kjörling]

On 30 Oct 2023 12:45 -0600, from willitc9...@gmail.com (William Torrez Corea):
> I have problems when I have a lot of tabs opened in my browser, i am using
> the libreoffice or playing on Steam. The system blew up.

I'm fairly certain that when you say that "the system blew up", you do
not mean that it literally exploded. Do you mean crashed, or slowed
down considerably?


> My browser: Firefox Browser 115.4.0esr (64 bit)
> My system: Linux 5.10.0-26-amd64 1 SMP Debian 5.10.197-1 (2023-09-29)
> x86_64 GNU/Linux
> 
> My browser consumes 655MB of memory and uses 34% of the CPU.

Unfortunately modern browsers as a rule are quite memory-hungry. My
current Firefox instance (same version) is using ~1GB of memory, and I
don't even have a lot of tabs open or have had it running for
particularly long. Still, 7-8 GB of RAM (as indicated in your response
to Greg) and only half of it in use should be enough for most everyday
needs.


> The system uses 30% CPU, 265 Process, 50% memory and swap 9%.

None of those are particularly high; and you certainly aren't
bottlenecked on any of them. It's normal to see some swap usage even
if you aren't actually using all RAM, especially if the system was
under memory pressure earlier (since the most recent reboot).

Searching for "Toshiba L200" doesn't really tell me anything about
your computer, but since it has a 1 TB 5400 rpm HDD, I would guess
that your computer is not the most up-to-date model. That's fine;
Linux in generally tends to be a good choice for slightly older
computers. However, if you have a processor with few cores (maybe even
just two or four cores), it's entirely possible that something is
bottlenecking on a _single core_. Given your figure of 30% CPU usage,
I wouldn't be surprised if your system has a 4-core CPU and some
single-thread process is bottlenecking on single-core performance.
Depending on the exact tool, you'd see either a single core fully
utilized and all others idle as 25% utilization, or as 100%
utilization (with all four cores being fully utilized then being shown
as 100% or 400% CPU usage, respectively).

Could you show us the output of these four commands executed in a
terminal _while you're doing something which you feel is slow_?

grep -m 1 -e '^model name' /proc/cpuinfo

grep -e '^cpu MHz' /proc/cpuinfo

free -m

grep -c '^processor' /proc/cpuinfo 

That will tell us what CPU and how much memory and swap your computer
has.

-- 
Michael Kjörling  https://michael.kjorling.se
“Remember when, on the Internet, nobody cared that you were a dog?”

Re: Performance of my computer

[David Christensen]

On 10/30/23 11:45, William Torrez Corea wrote:

How can improve the performance of my computer?

I have problems when I have a lot of tabs opened in my browser, i am using
the libreoffice or playing on Steam. The system blew up.

My browser: Firefox Browser 115.4.0esr (64 bit)
My system: Linux 5.10.0-26-amd64 1 SMP Debian 5.10.197-1 (2023-09-29)
x86_64 GNU/Linux

My browser consumes 655MB of memory and uses 34% of the CPU.

The system uses 30% CPU, 265 Process, 50% memory and swap 9%.

I haven't partitioned my hard disk.

I have Toshiba L200 Laptop PC Hard drive 1 TB, 5400 rpm, 128 MB/8MB buffer



Please run the following command and reply with the console session 
(prompt, command entered, output displayed):


# cat /etc/debian_version ; uname -a


What is the make and model of the computer?


What processor does it have?


What memory modules are installed?


STFW "Toshiba L200" I see:


https://www.toshiba-storage.com/products/toshiba-internal-hard-drives-l200/

Replacing a HDD with an SSD would improve responsiveness when booting, 
starting applications, opening and saving files, backing up, imaging, etc..



David

Re: Performance of my computer

[Greg Wooledge]

On Mon, Oct 30, 2023 at 12:45:38PM -0600, William Torrez Corea wrote:
> I have problems when I have a lot of tabs opened in my browser, i am using
> the libreoffice or playing on Steam. The system blew up.

Sounds like you want more memory.

> My browser: Firefox Browser 115.4.0esr (64 bit)
> My system: Linux 5.10.0-26-amd64 1 SMP Debian 5.10.197-1 (2023-09-29)
> x86_64 GNU/Linux
> 
> My browser consumes 655MB of memory and uses 34% of the CPU.
> 
> The system uses 30% CPU, 265 Process, 50% memory and swap 9%.
> 
> I haven't partitioned my hard disk.
> 
> I have Toshiba L200 Laptop PC Hard drive 1 TB, 5400 rpm, 128 MB/8MB buffer

That doesn't sound right.  128 MB of RAM?  I think you must have more
than that, or else you wouldn't have been able to run all those programs
*at all*, never mind worrying about performance.

What does "free -m" say?

Re: Performance of my computer

[Van Snyder]

On Mon, 2023-10-30 at 12:45 -0600, William Torrez Corea wrote:
> How can improve the performance of my computer?
> 
> 
> I have problems when I have a lot of tabs opened in my browser, i am
> using the libreoffice or playing on Steam. The system blew up.
> 
> My browser: Firefox Browser 115.4.0esr (64 bit)
> My system: Linux 5.10.0-26-amd64 1 SMP Debian 5.10.197-1 (2023-09-29) 
> x86_64 GNU/Linux

Firefox, in every version I've used so far, appears to have memory
leaks. If I kill it, not by clicking its little "X" or Alt-F4, but with
"kill -9", so that it reopens everything when I restart it, my memory
usage immediately drops by 75%. Then it creeps back up.
> My browser consumes 655MB of memory and uses 34% of the CPU.
> 
> The system uses 30% CPU, 265 Process, 50% memory and swap 9%. 
> 
> I haven't partitioned my hard disk.  
> 
> I have Toshiba L200 Laptop PC Hard drive 1 TB, 5400 rpm, 128 MB/8MB
> buffer
> 
> -- 
> 
> With kindest regards, William.
> 
> ⢀⣴⠾⠻⢶⣦⠀ 
> ⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
> ⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org
> ⠈⠳⣄ 
> 
> 
> 

Re: Domain name to use on home networks

[gene heskett]

On 10/30/23 14:30, gene heskett wrote:

On 10/30/23 13:40, John Hasler wrote:

I wrote:

Why do you have NetworkManager installed at all?


Gene writes:

Std image dd'd to u-sd card install on the arm64 stuff, can't get away
from it.


Why won't "sudo apt remove --purge network-manager" work for you?
It did, but took the network down too after a reboot.  To make sure I do 
it right, whats next?


Thanks John.


I made /e/n/interfaces look like this:
gene@bananapim55:~$ cat /etc/network/interfaces
source /etc/network/interfaces.d/*
# Network is managed by Gene Heskett
auto lo eth0
iface lo inet loopback
iface eth0 inet static
address 192.168.71.55/24
gateway 192.168.71.1
gene@bananapim55:~$
and restarted /etc/init.d/networking.
And it all works.

Cheers, Gene Heskett.


Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis

Re: sauvegarder le carnet d'adresse d'un telephone Android sur Debian Sid

[Th.A.C]

Le 30/10/2023 à 12:02, Luc Schimpf a écrit :

Bonjour,
Dans l'appli Contacts, sélectionner tous puis partager, vous obtenez un 
fichier *.vcf que vous pouvez enregistrer sur le PC et, le moment venu, 
réimporter dans le téléphone via la même appli.


Cordialement


c'est certainement la meilleur solution, en plus c'est un standard et ca 
existe sur tous les android, donc facilement transférable sur d'autres 
appareils.

Re: Domain name to use on home networks

[Greg Wooledge]

On Mon, Oct 30, 2023 at 06:37:48PM +, Andrew M.A. Cater wrote:
> On Mon, Oct 30, 2023 at 02:29:37PM -0400, gene heskett wrote:
> > On 10/30/23 13:40, John Hasler wrote:
> > > I wrote:
> > > > Why do you have NetworkManager installed at all?
> > > 
> > > Gene writes:
> > > > Std image dd'd to u-sd card install on the arm64 stuff, can't get away
> > > > from it.
> > > 
> > > Why won't "sudo apt remove --purge network-manager" work for you?
> > It did, but took the network down too after a reboot.  To make sure I do it
> > right, whats next?
> > 
> 
> systemd-networkd, maybe - see, for example, the Arch wiki at
> https://wiki.archlinux.org/title/systemd-networkd
> 
> Andy

That's not a wrong answer, but for Gene's systems I would recommend
traditional Debian ifupdown (/etc/network/interfaces).  It's by far the
simplest, and the most widely supported among the community, in case
he has questions.

Re: Domain name to use on home networks

[Andrew M.A. Cater]

On Mon, Oct 30, 2023 at 02:29:37PM -0400, gene heskett wrote:
> On 10/30/23 13:40, John Hasler wrote:
> > I wrote:
> > > Why do you have NetworkManager installed at all?
> > 
> > Gene writes:
> > > Std image dd'd to u-sd card install on the arm64 stuff, can't get away
> > > from it.
> > 
> > Why won't "sudo apt remove --purge network-manager" work for you?
> It did, but took the network down too after a reboot.  To make sure I do it
> right, whats next?
> 

systemd-networkd, maybe - see, for example, the Arch wiki at
https://wiki.archlinux.org/title/systemd-networkd

Andy

> Thanks John.
> 
> Cheers, Gene Heskett.
> -- 
> "There are four boxes to be used in defense of liberty:
>  soap, ballot, jury, and ammo. Please use in that order."
> -Ed Howdershelt (Author, 1940)
> If we desire respect for the law, we must first make the law respectable.
>  - Louis D. Brandeis
> 

Re: Domain name to use on home networks

[gene heskett]

On 10/30/23 13:40, John Hasler wrote:

I wrote:

Why do you have NetworkManager installed at all?


Gene writes:

Std image dd'd to u-sd card install on the arm64 stuff, can't get away
from it.


Why won't "sudo apt remove --purge network-manager" work for you?
It did, but took the network down too after a reboot.  To make sure I do 
it right, whats next?


Thanks John.

Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis

Re: Domain name to use on home networks

[John Hasler]

I wrote:
> Why do you have NetworkManager installed at all?

Gene writes:
> Std image dd'd to u-sd card install on the arm64 stuff, can't get away
> from it.

Why won't "sudo apt remove --purge network-manager" work for you?
-- 
John Hasler 
j...@sugarbit.com
Elmwood, WI USA

Re: Domain name to use on home networks

[Pocket]

On 10/30/23 13:29, gene heskett wrote:

On 10/30/23 12:48, Pocket wrote:


On 10/30/23 12:43, gene heskett wrote:

On 10/30/23 12:16, John Hasler wrote:

Why do you have NetworkManager installed at all?
Std image dd'd to u-sd card install on the arm64 stuff, can't get 
away from it. You can only make it somewhere near right and sudo 
chattr +i the files before networkmangler discovers you've fixed it.



upon first boot

apt purge --autoremove network-manager

Then don't fight the feeling...

I just did that to one of my arm64 boards, its took about 8 or 9 other 
accessory files to NM with it, but no net after a reboot which looks 
otherwise normal..  Now where it the RIGHT place to put the net info? 
ip a says its DOWN. /e/n/interfaces has only lo info in it.


Thank you, Pocket.

Cheers, Gene Heskett.



Try these links/docs

I think you want ifupdown configuration with/out DNS resolution as you 
have a manually set /etc/resolv.conf.


just the parts about bringing up the interface(s)

https://wiki.debian.org/NetworkConfiguration

Section: Configuring the interface manually

and this, general network setup on debian

https://www.debian.org/doc/manuals/debian-handbook/sect.network-config




--
It's not easy to be me

Re: Domain name to use on home networks

[gene heskett]

On 10/30/23 13:29, Pocket wrote:


On 10/30/23 13:21, Pocket wrote:

apt purge network-manager


This is what I get running the above

sudo apt purge network-manager
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following packages were automatically installed and are no longer 
required:
   dns-root-data libmbim-glib4 libmbim-proxy libmbim-utils libmm-glib0 
libndp0

   libqmi-glib5 libqmi-proxy libqmi-utils libqrtr-glib0 libteamdctl0
   modemmanager
Use 'sudo apt autoremove' to remove them.
The following packages will be REMOVED:
   network-manager*
0 upgraded, 0 newly installed, 2 to remove and 0 not upgraded.
After this operation, 16.1 MB disk space will be freed.
Do you want to continue? [Y/n]


That worked autoremove worked differently but the end results were 
similar. And eth0 is DOWN on reboot.


Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis

Re: Domain name to use on home networks

[gene heskett]

On 10/30/23 13:21, Pocket wrote:


On 10/30/23 13:09, gene heskett wrote:

On 10/30/23 12:40, Pocket wrote:


On 10/30/23 12:15, John Hasler wrote:

Why do you have NetworkManager installed at all?


That is an interesting question for Gene.

apt purge --autoremove network-manager will fix that.

I can do that?  The last 3 or 4 times I tried that, dependencies took 
the rest of the system down to bare metal and I had to re-install, so 
excuse me if I seem gun shy...  Apt or aptitude, same results.  I have 
rm'd the executable a few times but chattr fixes it better. That or 
once I removed the execute bits from the executable. That seemed to 
work too.



Then do this

apt purge network-manager

That will only remove networkmanager


And about  or 9 helpers dependent on NM.




Thank you, Pocket.  TAke care & stay well.

I take a bit different opinion from Gene, instead of chattr +i 
/etc/resolv.conf I work to figure out how to setup the software.


setting files to immutable is not how to do things in my opinion

If it doesn't work either I am doing something wrong or don't 
understand how to set it up or all the above, that includes 
understanding or not the docs


I agree whole heartedly with this attitude. But we've got man pages in 
some cases 25 damned years old that can't be brought up to what the 
code does today. Or to save space on the install dvd, man pages are 
heavily culled.


Even on this list examples of how to do it correctly are similar to 
pulling teeth. You tell me I'm wrong, and I likely am, but only a few 
will tell me how to do it /right/ by this weeks code. That is what I'm 
hoping to get, not this endless thread.



I am painfully aware of that, but I also know that there isn't anything 
I can do to fix that







In my case NetworkManager got installed by my "default" installation 
method, (I don't know why and don't really care) so in my mind I need 
to work with it.


I want to manage ip addresses/dns server addresses on my network 
using DHCP.


Having to setup things using static addressing is not my cup of tea, 
been there, done that and got the scars from it.


https://www.redhat.com/sysadmin/becoming-friends-networkmanager

https://www.baeldung.com/linux/network-manager


Thank you for taking the time to reply, Pocket.
Take care & stay well.

Cheers, Gene Heskett.



Hey, it's me what could go wrong?




Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis

Re: Domain name to use on home networks

[gene heskett]

On 10/30/23 12:48, Pocket wrote:


On 10/30/23 12:43, gene heskett wrote:

On 10/30/23 12:16, John Hasler wrote:

Why do you have NetworkManager installed at all?
Std image dd'd to u-sd card install on the arm64 stuff, can't get away 
from it. You can only make it somewhere near right and sudo chattr +i 
the files before networkmangler discovers you've fixed it.



upon first boot

apt purge --autoremove network-manager

Then don't fight the feeling...

I just did that to one of my arm64 boards, its took about 8 or 9 other 
accessory files to NM with it, but no net after a reboot which looks 
otherwise normal..  Now where it the RIGHT place to put the net info? 
ip a says its DOWN. /e/n/interfaces has only lo info in it.


Thank you, Pocket.

Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis

Re: Domain name to use on home networks

[Pocket]

On 10/30/23 13:21, Pocket wrote:

apt purge network-manager


This is what I get running the above

sudo apt purge network-manager
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following packages were automatically installed and are no longer 
required:
  dns-root-data libmbim-glib4 libmbim-proxy libmbim-utils libmm-glib0 
libndp0

  libqmi-glib5 libqmi-proxy libqmi-utils libqrtr-glib0 libteamdctl0
  modemmanager
Use 'sudo apt autoremove' to remove them.
The following packages will be REMOVED:
  network-manager*
0 upgraded, 0 newly installed, 2 to remove and 0 not upgraded.
After this operation, 16.1 MB disk space will be freed.
Do you want to continue? [Y/n]


--
It's not easy to be me

Re: Domain name to use on home networks

[Pocket]

On 10/30/23 13:09, gene heskett wrote:

On 10/30/23 12:40, Pocket wrote:


On 10/30/23 12:15, John Hasler wrote:

Why do you have NetworkManager installed at all?


That is an interesting question for Gene.

apt purge --autoremove network-manager will fix that.

I can do that?  The last 3 or 4 times I tried that, dependencies took 
the rest of the system down to bare metal and I had to re-install, so 
excuse me if I seem gun shy...  Apt or aptitude, same results.  I have 
rm'd the executable a few times but chattr fixes it better. That or 
once I removed the execute bits from the executable. That seemed to 
work too.



Then do this

apt purge network-manager

That will only remove networkmanager




Thank you, Pocket.  TAke care & stay well.

I take a bit different opinion from Gene, instead of chattr +i 
/etc/resolv.conf I work to figure out how to setup the software.


setting files to immutable is not how to do things in my opinion

If it doesn't work either I am doing something wrong or don't 
understand how to set it up or all the above, that includes 
understanding or not the docs


I agree whole heartedly with this attitude. But we've got man pages in 
some cases 25 damned years old that can't be brought up to what the 
code does today. Or to save space on the install dvd, man pages are 
heavily culled.


Even on this list examples of how to do it correctly are similar to 
pulling teeth. You tell me I'm wrong, and I likely am, but only a few 
will tell me how to do it /right/ by this weeks code. That is what I'm 
hoping to get, not this endless thread.



I am painfully aware of that, but I also know that there isn't anything 
I can do to fix that







In my case NetworkManager got installed by my "default" installation 
method, (I don't know why and don't really care) so in my mind I need 
to work with it.


I want to manage ip addresses/dns server addresses on my network 
using DHCP.


Having to setup things using static addressing is not my cup of tea, 
been there, done that and got the scars from it.


https://www.redhat.com/sysadmin/becoming-friends-networkmanager

https://www.baeldung.com/linux/network-manager


Thank you for taking the time to reply, Pocket.
Take care & stay well.

Cheers, Gene Heskett.



Hey, it's me what could go wrong?


--
It's not easy to be me

Re: Populating IPv6 DNS addresses in resolv.conf

[Pocket]

On 10/30/23 09:04, Timothy M Butterworth wrote:

Hello All,

I have been following the recent emails regarding resolv.conf. I 
almost have my system running perfectly. The only thing I am missing 
is the population of IPv6 DNS addresses.


sudo less /etc/dhcp/dhclient.conf
supersede domain-name "home.arpa";
supersede dhcp6.domain-search "home.arpa";
supersede dhcp6.name-servers 2001:4860:4860::, 2001:4860:4860::8844;
supersede domain-name-servers 8.8.8.8, 8.8.4.4;

sudo less /etc/NetworkManager/NetworkManager.conf
[main]
plugins=ifupdown,keyfile

[ifupdown]
managed=false

[global-dns]
searches=home.arpa

sudo less /etc/NetworkManager/system-connections/Pixel5.nmconnection

[ipv4]
dns=8.8.4.4,8.8.8.8;
dns-search=home.arpa;
ignore-auto-dns=true #I tried with this on, commented out and set to false
may-fail=false
method=auto

[ipv6]
addr-gen-mode=stable-privacy
dns=2001:4860:4860::,2001:4860:4860::8844;
dns-search=home.arpa;
ignore-auto-dns=true #I tried with this on, commented out and set to false
may-fail=false
method=auto

sudo less /etc/resolv.conf
domain home.arpa
search home.arpa
nameserver 8.8.8.8
nameserver 8.8.4.4

For some reason I am not getting any IPv6 Name Servers populated.

Any thoughts are appreciated.

Tim



Why not use NetworkManagers internal DHCP client.

That is what I have done and then I don't need dhclient or dhcpcd.

I am not sure that you are really using dhclient as NetworkManager has 
not been set to use dhclient from the configuration that you have posted.


What is the output from:

NetworkManager --print-config

Notice in the following dhcp=internal in my configuration

NetworkManager --print-config
# NetworkManager configuration: /etc/NetworkManager/NetworkManager.conf 
(lib: no-mac-addr-change.conf)


[main]
# rc-manager=
# auth-polkit=true
# dhcp=internal
# iwd-config-path=
plugins=ifupdown,keyfile
configure-and-quit=no

[global-dns]
options=ends0 trust-ad

[ifupdown]
managed=false

[logging]
# backend=journal
# audit=true

[device]
# wifi.backend=wpa_supplicant
wifi.scan-rand-mac-address=no

[device-31-mac-addr-change]
match-device=driver:eagle_sdio,driver:wl
wifi.scan-rand-mac-address=no

# no-auto-default file "/var/lib/NetworkManager/no-auto-default.state"--

--

It's not easy to be me

Re: Domain name to use on home networks

[gene heskett]

On 10/30/23 12:40, Pocket wrote:


On 10/30/23 12:15, John Hasler wrote:

Why do you have NetworkManager installed at all?


That is an interesting question for Gene.

apt purge --autoremove network-manager will fix that.

I can do that?  The last 3 or 4 times I tried that, dependencies took 
the rest of the system down to bare metal and I had to re-install, so 
excuse me if I seem gun shy...  Apt or aptitude, same results.  I have 
rm'd the executable a few times but chattr fixes it better. That or once 
I removed the execute bits from the executable. That seemed to work too.


Thank you, Pocket.  TAke care & stay well.

I take a bit different opinion from Gene, instead of chattr +i 
/etc/resolv.conf I work to figure out how to setup the software.


setting files to immutable is not how to do things in my opinion

If it doesn't work either I am doing something wrong or don't understand 
how to set it up or all the above, that includes understanding or not 
the docs


I agree whole heartedly with this attitude. But we've got man pages in 
some cases 25 damned years old that can't be brought up to what the code 
does today. Or to save space on the install dvd, man pages are heavily 
culled.


Even on this list examples of how to do it correctly are similar to 
pulling teeth. You tell me I'm wrong, and I likely am, but only a few 
will tell me how to do it /right/ by this weeks code. That is what I'm 
hoping to get, not this endless thread.




In my case NetworkManager got installed by my "default" installation 
method, (I don't know why and don't really care) so in my mind I need to 
work with it.


I want to manage ip addresses/dns server addresses on my network using 
DHCP.


Having to setup things using static addressing is not my cup of tea, 
been there, done that and got the scars from it.


https://www.redhat.com/sysadmin/becoming-friends-networkmanager

https://www.baeldung.com/linux/network-manager


Thank you for taking the time to reply, Pocket.
Take care & stay well.

Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis

Re: Domain name to use on home networks

[Pocket]

On 10/30/23 12:43, gene heskett wrote:

On 10/30/23 12:16, John Hasler wrote:

Why do you have NetworkManager installed at all?
Std image dd'd to u-sd card install on the arm64 stuff, can't get away 
from it. You can only make it somewhere near right and sudo chattr +i 
the files before networkmangler discovers you've fixed it.



upon first boot

apt purge --autoremove network-manager

Then don't fight the feeling...

--
It's not easy to be me

Re: Domain name to use on home networks

[gene heskett]

On 10/30/23 12:16, John Hasler wrote:

Why do you have NetworkManager installed at all?
Std image dd'd to u-sd card install on the arm64 stuff, can't get away 
from it. You can only make it somewhere near right and sudo chattr +i 
the files before networkmangler discovers you've fixed it.


Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis

Re: Domain name to use on home networks

[Pocket]

On 10/30/23 12:15, John Hasler wrote:

Why do you have NetworkManager installed at all?


That is an interesting question for Gene.

apt purge --autoremove network-manager will fix that.

I take a bit different opinion from Gene, instead of chattr +i 
/etc/resolv.conf I work to figure out how to setup the software.


setting files to immutable is not how to do things in my opinion

If it doesn't work either I am doing something wrong or don't understand 
how to set it up or all the above, that includes understanding or not 
the docs


In my case NetworkManager got installed by my "default" installation 
method, (I don't know why and don't really care) so in my mind I need to 
work with it.


I want to manage ip addresses/dns server addresses on my network using DHCP.

Having to setup things using static addressing is not my cup of tea, 
been there, done that and got the scars from it.


https://www.redhat.com/sysadmin/becoming-friends-networkmanager

https://www.baeldung.com/linux/network-manager

--

It's not easy to be me

Re: Domain name to use on home networks

[gene heskett]

On 10/30/23 10:57, Max Nikulin wrote:

On 29/10/2023 23:24, gene heskett wrote:
finally solved by editing resolv.conf to put the nameserver address 
into it, followed by a chattr +i resolv.conf. I have no d clue where 
mangler


I have realized that it is a nice stance taking into account that the 
topic of the original thread was configuring DNS plugins of 
NetworkManager...


.

Thank you Max. Take care and stay well.

Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis

Re: Domain name to use on home networks

[gene heskett]

On 10/30/23 08:25, Greg Wooledge wrote:

On Mon, Oct 30, 2023 at 08:19:24AM -0400, Pocket wrote:

On 10/30/23 03:54, gene heskett wrote:

[ipv4]
address1=192.168.71.55/24,192.168.71.1
dns=192.168.71.1;
dns-search=hosts;nameserver;



^

this is incorrect

nmcli connection modify Network_InterfaceName ipv4.dns-search
(searchDomainname- for multiple entry you can use comma)

That needs to be the domain you want to search ie

home.arpa in your case

Not the order of domain resolution, that is what /etc/nsswitch.conf is for.

dns-search=home.arpa;


Oh.  Wow.  We finally found out where that completely broken line in
Gene's /etc/resolv.conf came from!

Worse Greg, I don't ever recall editing any of that stuff, so its been 
like that since the 23rd or 24th bookworm install, when someone 
suggested I unplug all the usb stuff to do the install. That installer 
was busted as it did not ask me what to do, it just did it, because it 
found a usb-serial converter which I have two of here and just assumed I 
was blind! Which I was forced to do repeatedly because it would not 
reboot once I'd put a hot potatoe in orca's mouth and did away with 
brltty.  So everytime I had to reboot, I had to reinstall.


That and my home raid10 which worked in real time on buster, now takes 
30 seconds to 5 minutes just to draw a file requestor accessing this 
raid10. Once that is done, it works in real time. I've repeatedly fussed 
about that and been ignored. Am I the only one on the planet with that 
problem?  Access list problem or what, no one has made a single try this 
suggestion. But its sure a PITA to me.


And you all wonder why I seem to be short tempered...

Thanks Greg, take care & stay well.

.


Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis

Re: Domain name to use on home networks

[John Hasler]

Why do you have NetworkManager installed at all?
-- 
John Hasler 
j...@sugarbit.com
Elmwood, WI USA

Re: Populating IPv6 DNS addresses in resolv.conf

[Marco M.]

Am 30.10.2023 um 22:08:46 Uhr schrieb Max Nikulin:

> On 30/10/2023 20:04, Timothy M Butterworth wrote:
> > sudo less /etc/resolv.conf
> > domain home.arpa
> > search home.arpa
> > nameserver 8.8.8.8
> > nameserver 8.8.4.4  
> 
> I do not see "# Generated by NetworkManager" here.

That is because NM manages the file. Some users use other managers
(resolvconf, systemd-resolve) or create the file manually.
The content of the file is relevant, which software created it is
secondary.

Re: Domain name to use on home networks

[gene heskett]

On 10/30/23 08:20, Pocket wrote:


On 10/30/23 03:54, gene heskett wrote:

On 10/29/23 22:17, Max Nikulin wrote:

On 30/10/2023 00:08, Pocket wrote:

On 10/29/23 12:24, gene heskett wrote:
I have also made a very painfull attempt to change my domainname 
from coyote.den to home.arpa, and finally reverted that,


Gene, have you posted what exactly you did to switch from coyote.den 
to home.arpa? You have been told that setting NIS domainname was a 
wrong direction since you do not manage your hosts through NIS.


NetworkManager keeps updating the /etc/resolv.conf file in my 
opinion because it is querying the DHCP server.

[ ... ]> cat /etc/NetworkManager/system-connections/GREMLIN.nmconnection

[ipv4]
method=auto
gene@coyote:/etc$  cat 
/etc/NetworkManager/system-connections/GREMLIN.nmconnection
cat: /etc/NetworkManager/system-connections/GREMLIN.nmconnection: No 
such file or directory


Thats this machine, but applied to the problematic machine it becomes
sudo cat /etc/NetworkManager/system-connections/'Wired connection 
1.nmconnection'

which returns:
==
gene@bananapim55:/etc/systemd$ sudo cat 
/etc/NetworkManager/system-connections/'Wired connection 1.nmconnection'

[connection]
id=Wired connection 1
uuid=14621305-9887-3c6c-9e50-50894877ab68
type=ethernet
autoconnect-priority=999
interface-name=eth0
timestamp=1698571927

[ethernet]
cloned-mac-address=BE:63:9C:35:DD:4F
duplex=full
speed=1000

[ipv4]
address1=192.168.71.55/24,192.168.71.1
dns=192.168.71.1;
dns-search=hosts;nameserver;



^

this is incorrect

nmcli connection modify Network_InterfaceName ipv4.dns-search 
(searchDomainname- for multiple entry you can use comma)


That needs to be the domain you want to search ie

home.arpa in your case

Not the order of domain resolution, that is what /etc/nsswitch.conf is for.

dns-search=home.arpa;


Please have a look at the working example I posted,


That msg now tagged FFR, thank you




Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis

Re: Domain name to use on home networks

[gene heskett]

On 10/30/23 05:15, Timothy M Butterworth wrote:



On Mon, Oct 30, 2023 at 3:55 AM gene heskett > wrote:


On 10/29/23 22:17, Max Nikulin wrote:
 > On 30/10/2023 00:08, Pocket wrote:
 >> On 10/29/23 12:24, gene heskett wrote:
 >>> I have also made a very painfull attempt to change my
domainname from
 >>> coyote.den to home.arpa, and finally reverted that,
 >
 > Gene, have you posted what exactly you did to switch from
coyote.den to
 > home.arpa? You have been told that setting NIS domainname was a
wrong
 > direction since you do not manage your hosts through NIS.
 >
 >> NetworkManager keeps updating the /etc/resolv.conf file in my
opinion
 >> because it is querying the DHCP server.
 > [ ... ]> cat
/etc/NetworkManager/system-connections/GREMLIN.nmconnection
 >> [ipv4]
 >> method=auto
gene@coyote:/etc$  cat
/etc/NetworkManager/system-connections/GREMLIN.nmconnection
cat: /etc/NetworkManager/system-connections/GREMLIN.nmconnection: No
such file or directory

Thats this machine, but applied to the problematic machine it becomes
sudo cat /etc/NetworkManager/system-connections/'Wired connection
1.nmconnection'
which returns:
==
gene@bananapim55:/etc/systemd$ sudo cat
/etc/NetworkManager/system-connections/'Wired connection 1.nmconnection'
[connection]
id=Wired connection 1
uuid=14621305-9887-3c6c-9e50-50894877ab68
type=ethernet
autoconnect-priority=999
interface-name=eth0
timestamp=1698571927

[ethernet]
cloned-mac-address=BE:63:9C:35:DD:4F
duplex=full
speed=1000

[ipv4]
address1=192.168.71.55/24,192.168.71.1

dns=192.168.71.1;
dns-search=hosts;nameserver;
ignore-auto-routes=true
may-fail=false
method=manual
route1=192.168.71.1/24,192.168.71.1



Try adding ignore-auto-dns=true with this setting you should not need to 
make resolv.conf immutable. You may also want to add a default gateway 
route.


Thank you Timothy, I appreciate the advice and the msg is tagged FFR, 
but I've no clue as to the "proper" way to edit that. Making resolv.conf 
immutable seems to be the way to permanently insulate me from NM's 
broken idea of whats right. Gateway is set in the edit pulldown that 
opens from the status icon at the top right corner of the screen. Which 
works but upsets me because it has no "about" info anyplace to identify 
the src of that whole shebang.  And as I explained in another post, I 
can't file bugzilla stuff. And I am not seeing anything indicating there 
is a way to fix that. IOW, nobody cares.


[ipv6]
addr-gen-mode=stable-privacy
method=disabled

[proxy]

All of which now looks totally legit once /etc/resolv.conf was made
immutable.  As an aside, I have yet to see a complaint from modern NM
when it finds that file cannot be changed. When it was new, many
generations ago, it had a cow quite regularly. Then the only way to
clean up the logs was to rm the executable. It, when new, was not
removable by apt as it took the rest of the system with it. So I've
always looked at NM as something looking for a problem I didn't
have.  A
Karen to be removed by whatever means worked.  A root rm usually solved
it all. So for me, its still, in the year of our lord 2023, a PITA.  A
hosts file for local lookups, with anything not found there
forwarded to
my ISP's dns server is all I've ever needed. And it has not changed in
25 years. To me, dhcp is a total waste of cpu cycles.
 >
 > Gene has no DHCP server, so it should be method=manual. Frankly
 > speaking, I see almost no advantages of NetworkManager over
ifupdown in
 > a purely static network. E.g. cable plug/unplug events should not
matter
 > since there is no need to update configuration in response.
 >
 > .

Cheers, Gene Heskett.
-- 
"There are four boxes to be used in defense of liberty:

   soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law
respectable.
   - Louis D. Brandeis



--
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/ 
⠈⠳⣄⠀⠀


Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis

Re: Populating IPv6 DNS addresses in resolv.conf

[Max Nikulin]

On 30/10/2023 20:04, Timothy M Butterworth wrote:

sudo less /etc/resolv.conf
domain home.arpa
search home.arpa
nameserver 8.8.8.8
nameserver 8.8.4.4


I do not see "# Generated by NetworkManager" here.

nmcli connection
nmcli device
NetworkManager --print-config
ls -l /etc/resolv.conf
lsattr /etc/resolv.conf

As to /etc/dhcp/dhclient.conf and /etc/network/interfaces, I may be 
wrong, but perhaps independent instances for IPv4 and IPv6 may be 
running (if actual connection is managed through ifupdown)

Re: Domain name to use on home networks

[Max Nikulin]

On 29/10/2023 23:24, gene heskett wrote:
finally solved by editing resolv.conf to put the nameserver address into 
it, followed by a chattr +i resolv.conf. I have no d clue where mangler


I have realized that it is a nice stance taking into account that the 
topic of the original thread was configuring DNS plugins of 
NetworkManager...

Populating IPv6 DNS addresses in resolv.conf

[Timothy M Butterworth]

Hello All,

I have been following the recent emails regarding resolv.conf. I almost
have my system running perfectly. The only thing I am missing is the
population of IPv6 DNS addresses.

sudo less /etc/dhcp/dhclient.conf
supersede domain-name "home.arpa";
supersede dhcp6.domain-search "home.arpa";
supersede dhcp6.name-servers 2001:4860:4860::, 2001:4860:4860::8844;
supersede domain-name-servers 8.8.8.8, 8.8.4.4;

sudo less /etc/NetworkManager/NetworkManager.conf
[main]
plugins=ifupdown,keyfile

[ifupdown]
managed=false

[global-dns]
searches=home.arpa

sudo less /etc/NetworkManager/system-connections/Pixel5.nmconnection

[ipv4]
dns=8.8.4.4,8.8.8.8;
dns-search=home.arpa;
ignore-auto-dns=true #I tried with this on, commented out and set to false
may-fail=false
method=auto

[ipv6]
addr-gen-mode=stable-privacy
dns=2001:4860:4860::,2001:4860:4860::8844;
dns-search=home.arpa;
ignore-auto-dns=true #I tried with this on, commented out and set to false
may-fail=false
method=auto

sudo less /etc/resolv.conf
domain home.arpa
search home.arpa
nameserver 8.8.8.8
nameserver 8.8.4.4

For some reason I am not getting any IPv6 Name Servers populated.

Any thoughts are appreciated.

Tim


-- 
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/
⠈⠳⣄⠀⠀

Re: sauvegarder le carnet d'adresse d'un telephone Android sur Debian Sid

[Samy (Zaclys)]

Bonjour,

Le 30/10/2023 à 11:23, Basile Starynkevitch a écrit :

Je souhaiterais sauvargder le carnet d'adresses du téléphone sur l'ordinateur. 
Et peut-être réinitialiser complètement le téléphone, puis (si nécessaire) 
reintroduire le carnet d'adresses dans celui-ci.




Si le but est juste de copier les contacts sur l'ordinateur pour les 
réintégrer a posteriori sur le smartphone, autant sauvegarder 
directement la base de données SQLite avec adb (paquet éponyme) :
adb pull 
/data/data/com.android.providers.contacts/databases/contacts2.db 
/chemin/vers/dossier/ordi/



De mémoire il faut au préalable démarrer le smartphone en mode recovery 
(ou sinon être root ?)



Et pour les réintégrer :
adb push /chemin/vers/contacts2.db 
/data/data/com.android.providers.contacts/databases/



Attention, le nom et le chemin vers la base de données peuvent être 
légèrement différents dans votre cas.



Samy

Re: Domain name to use on home networks

[Pocket]

On 10/30/23 08:24, Greg Wooledge wrote:

On Mon, Oct 30, 2023 at 08:19:24AM -0400, Pocket wrote:

On 10/30/23 03:54, gene heskett wrote:

[ipv4]
address1=192.168.71.55/24,192.168.71.1
dns=192.168.71.1;
dns-search=hosts;nameserver;


^

this is incorrect

nmcli connection modify Network_InterfaceName ipv4.dns-search
(searchDomainname- for multiple entry you can use comma)

That needs to be the domain you want to search ie

home.arpa in your case

Not the order of domain resolution, that is what /etc/nsswitch.conf is for.

dns-search=home.arpa;

Oh.  Wow.  We finally found out where that completely broken line in
Gene's /etc/resolv.conf came from!


Sometimes I even amaze myself

--
It's not easy to be me

Re: Domain name to use on home networks

[Greg Wooledge]

On Mon, Oct 30, 2023 at 08:19:24AM -0400, Pocket wrote:
> On 10/30/23 03:54, gene heskett wrote:
> > [ipv4]
> > address1=192.168.71.55/24,192.168.71.1
> > dns=192.168.71.1;
> > dns-search=hosts;nameserver;
> 
> 
> ^
> 
> this is incorrect
> 
> nmcli connection modify Network_InterfaceName ipv4.dns-search
> (searchDomainname- for multiple entry you can use comma)
> 
> That needs to be the domain you want to search ie
> 
> home.arpa in your case
> 
> Not the order of domain resolution, that is what /etc/nsswitch.conf is for.
> 
> dns-search=home.arpa;

Oh.  Wow.  We finally found out where that completely broken line in
Gene's /etc/resolv.conf came from!

Re: Domain name to use on home networks

[Pocket]

On 10/30/23 08:19, Pocket wrote:


On 10/30/23 03:54, gene heskett wrote:

On 10/29/23 22:17, Max Nikulin wrote:

On 30/10/2023 00:08, Pocket wrote:

On 10/29/23 12:24, gene heskett wrote:
I have also made a very painfull attempt to change my domainname 
from coyote.den to home.arpa, and finally reverted that,


Gene, have you posted what exactly you did to switch from coyote.den 
to home.arpa? You have been told that setting NIS domainname was a 
wrong direction since you do not manage your hosts through NIS.


NetworkManager keeps updating the /etc/resolv.conf file in my 
opinion because it is querying the DHCP server.
[ ... ]> cat 
/etc/NetworkManager/system-connections/GREMLIN.nmconnection

[ipv4]
method=auto
gene@coyote:/etc$  cat 
/etc/NetworkManager/system-connections/GREMLIN.nmconnection
cat: /etc/NetworkManager/system-connections/GREMLIN.nmconnection: No 
such file or directory


Thats this machine, but applied to the problematic machine it becomes
sudo cat /etc/NetworkManager/system-connections/'Wired connection 
1.nmconnection'

which returns:
==
gene@bananapim55:/etc/systemd$ sudo cat 
/etc/NetworkManager/system-connections/'Wired connection 1.nmconnection'

[connection]
id=Wired connection 1
uuid=14621305-9887-3c6c-9e50-50894877ab68
type=ethernet
autoconnect-priority=999
interface-name=eth0
timestamp=1698571927

[ethernet]
cloned-mac-address=BE:63:9C:35:DD:4F
duplex=full
speed=1000

[ipv4]
address1=192.168.71.55/24,192.168.71.1
dns=192.168.71.1;
dns-search=hosts;nameserver;



^

this is incorrect

nmcli connection modify Network_InterfaceName ipv4.dns-search 
(searchDomainname- for multiple entry you can use comma)


That needs to be the domain you want to search ie

home.arpa in your case

Not the order of domain resolution, that is what /etc/nsswitch.conf is 
for.


dns-search=home.arpa;



|ipv4.dns-search|



List of DNS search domains. Domains starting with a tilde ('~') are 
considered 'routing' domains and are used only to decide the interface 
over which a query must be forwarded; they are not used to complete 
unqualified host names.


When using a DNS plugin that supports Conditional Forwarding or Split 
DNS, then the search domains specify which name servers to query. This 
makes the behavior different from running with plain /etc/resolv.conf. 
For more information see also the dns-priority setting.


When set on a profile that also enabled DHCP, the DNS search list 
received automatically (option 119 for DHCPv4 and option 24 for DHCPv6) 
gets merged with the manual list. This can be prevented by setting 
"ignore-auto-dns". Note that if no DNS searches are configured, the 
fallback will be derived from the domain from DHCP (option 15).


Format: array of string



https://networkmanager.dev/docs/api/latest/nm-settings-nmcli.html

--

It's not easy to be me

Re: Domain name to use on home networks

[Pocket]

On 10/30/23 03:54, gene heskett wrote:

On 10/29/23 22:17, Max Nikulin wrote:

On 30/10/2023 00:08, Pocket wrote:

On 10/29/23 12:24, gene heskett wrote:
I have also made a very painfull attempt to change my domainname 
from coyote.den to home.arpa, and finally reverted that,


Gene, have you posted what exactly you did to switch from coyote.den 
to home.arpa? You have been told that setting NIS domainname was a 
wrong direction since you do not manage your hosts through NIS.


NetworkManager keeps updating the /etc/resolv.conf file in my 
opinion because it is querying the DHCP server.

[ ... ]> cat /etc/NetworkManager/system-connections/GREMLIN.nmconnection

[ipv4]
method=auto
gene@coyote:/etc$  cat 
/etc/NetworkManager/system-connections/GREMLIN.nmconnection
cat: /etc/NetworkManager/system-connections/GREMLIN.nmconnection: No 
such file or directory


Thats this machine, but applied to the problematic machine it becomes
sudo cat /etc/NetworkManager/system-connections/'Wired connection 
1.nmconnection'

which returns:
==
gene@bananapim55:/etc/systemd$ sudo cat 
/etc/NetworkManager/system-connections/'Wired connection 1.nmconnection'

[connection]
id=Wired connection 1
uuid=14621305-9887-3c6c-9e50-50894877ab68
type=ethernet
autoconnect-priority=999
interface-name=eth0
timestamp=1698571927

[ethernet]
cloned-mac-address=BE:63:9C:35:DD:4F
duplex=full
speed=1000

[ipv4]
address1=192.168.71.55/24,192.168.71.1
dns=192.168.71.1;
dns-search=hosts;nameserver;



^

this is incorrect

nmcli connection modify Network_InterfaceName ipv4.dns-search 
(searchDomainname- for multiple entry you can use comma)


That needs to be the domain you want to search ie

home.arpa in your case

Not the order of domain resolution, that is what /etc/nsswitch.conf is for.

dns-search=home.arpa;


Please have a look at the working example I posted,

--
It's not easy to be me

Re: sauvegarder le carnet d'adresse d'un telephone Android sur Debian Sid

[Luc Schimpf]

Bonjour,
Dans l'appli Contacts, sélectionner tous puis partager, vous obtenez un 
fichier *.vcf que vous pouvez enregistrer sur le PC et, le moment venu, 
réimporter dans le téléphone via la même appli.


Cordialement



Le 30/10/2023 à 11:40, momo a écrit :

Le 30/10/2023 à 11:23, Basile Starynkevitch a écrit :

Bonjour,


Je dispose de plusieurs ordinateurs (sous Debian/Sid ou Ubuntu 23.10) 
avec des ports USB (avec accès à root, et pas mal de disque libre) et 
d'un téléphone portable Galaxy A12 SM A127F/DS sous Android 13.


J'ai bien sûr un cable USB-C pour brancher le téléphone portable sur 
l'un de mes ordinateurs


Je souhaiterais sauvargder le carnet d'adresses du téléphone sur 
l'ordinateur. Et peut-être réinitialiser complètement le téléphone, 
puis (si nécessaire) reintroduire le carnet d'adresses dans celui-ci.


D'après ce que j'en sais, ce carnet est une base de données Sqlite.

Comment procéder?


Merci

Librement



J'utilise syncthing pour échanger des fichiers téléphone <-> ordi

Voilà

Re: sauvegarder le carnet d'adresse d'un telephone Android sur Debian Sid

[momo]

Le 30/10/2023 à 11:23, Basile Starynkevitch a écrit :

Bonjour,


Je dispose de plusieurs ordinateurs (sous Debian/Sid ou Ubuntu 23.10) 
avec des ports USB (avec accès à root, et pas mal de disque libre) et 
d'un téléphone portable Galaxy A12 SM A127F/DS sous Android 13.


J'ai bien sûr un cable USB-C pour brancher le téléphone portable sur 
l'un de mes ordinateurs


Je souhaiterais sauvargder le carnet d'adresses du téléphone sur 
l'ordinateur. Et peut-être réinitialiser complètement le téléphone, puis 
(si nécessaire) reintroduire le carnet d'adresses dans celui-ci.


D'après ce que j'en sais, ce carnet est une base de données Sqlite.

Comment procéder?


Merci

Librement



J'utilise syncthing pour échanger des fichiers téléphone <-> ordi

Voilà

Re: [OT] Aerc - Console Email client

[N4ch0]

On Mon Oct 30, 2023 at 4:53 AM -03, Camaleón wrote:
> El 2023-10-29 a las 23:48 -0300, N4ch0 escribió:
>
> > Hola. Me he llevado una grata sorpresa con este cliente de correo para
> > consola, parecido a Mutt pero muy fácil su uso, por lo menos la
> > configuración.
> > 
> > Alguien lo usa? Me parece bueno sugerirlo, es simple configurar y usar.
>
> https://aerc-mail.org/
>
> Yo no lo conocía, muchas gracias. 
> Tiene 4 años, parece modernito y está escrito en Go.
> Me gusta que tenga pocas dependencias en Debian, lo tendré en mi radar.
> Mutt es una navaja suiza, pero cierto que es complejo de configurar y 
> usar.
>
> Saludos,

Como te digo, probalo, no te llevarám�s de 2 minutos configurarlo y
tenerlo ya funcionando.

Hay algunas cositas que todavia me falta configurarle, pero es cuesti�n
de ver como se hace.

La realidad es que es poco conocido y por ello hay poca referencia en
inet. Lo único que tenemos es su web pr�cticamente para ayudarno y su
man.

sauvegarder le carnet d'adresse d'un telephone Android sur Debian Sid

[Basile Starynkevitch]

Bonjour,


Je dispose de plusieurs ordinateurs (sous Debian/Sid ou Ubuntu 23.10)  
avec des ports USB (avec accès à root, et pas mal de disque libre) et 
d'un téléphone portable Galaxy A12 SM A127F/DS sous Android 13.


J'ai bien sûr un cable USB-C pour brancher le téléphone portable sur 
l'un de mes ordinateurs


Je souhaiterais sauvargder le carnet d'adresses du téléphone sur 
l'ordinateur. Et peut-être réinitialiser complètement le téléphone, puis 
(si nécessaire) reintroduire le carnet d'adresses dans celui-ci.


D'après ce que j'en sais, ce carnet est une base de données Sqlite.

Comment procéder?


Merci

Librement

--
Basile Starynkevitch
 
(only mine opinions / les opinions sont miennes uniquement)
92340 Bourg-la-Reine, France
web page: starynkevitch.net/Basile/

Re: Une VM libvirt démarre et s'arrête dans l'état Suspendu [RESOLU]

[Olivier]

Le lun. 30 oct. 2023 à 10:03, Dethegeek  a écrit :
>
> Bonjour
>
> Ça peut arriver si le volume contenant une des images disque est saturé.
>
C'était exactement ça ! Merci infiniment du tuyau !

Re: Domain name to use on home networks

[Timothy M Butterworth]

On Mon, Oct 30, 2023 at 3:55 AM gene heskett  wrote:

> On 10/29/23 22:17, Max Nikulin wrote:
> > On 30/10/2023 00:08, Pocket wrote:
> >> On 10/29/23 12:24, gene heskett wrote:
> >>> I have also made a very painfull attempt to change my domainname from
> >>> coyote.den to home.arpa, and finally reverted that,
> >
> > Gene, have you posted what exactly you did to switch from coyote.den to
> > home.arpa? You have been told that setting NIS domainname was a wrong
> > direction since you do not manage your hosts through NIS.
> >
> >> NetworkManager keeps updating the /etc/resolv.conf file in my opinion
> >> because it is querying the DHCP server.
> > [ ... ]> cat /etc/NetworkManager/system-connections/GREMLIN.nmconnection
> >> [ipv4]
> >> method=auto
> gene@coyote:/etc$  cat
> /etc/NetworkManager/system-connections/GREMLIN.nmconnection
> cat: /etc/NetworkManager/system-connections/GREMLIN.nmconnection: No
> such file or directory
>
> Thats this machine, but applied to the problematic machine it becomes
> sudo cat /etc/NetworkManager/system-connections/'Wired connection
> 1.nmconnection'
> which returns:
> ==
> gene@bananapim55:/etc/systemd$ sudo cat
> /etc/NetworkManager/system-connections/'Wired connection 1.nmconnection'
> [connection]
> id=Wired connection 1
> uuid=14621305-9887-3c6c-9e50-50894877ab68
> type=ethernet
> autoconnect-priority=999
> interface-name=eth0
> timestamp=1698571927
>
> [ethernet]
> cloned-mac-address=BE:63:9C:35:DD:4F
> duplex=full
> speed=1000
>
> [ipv4]
> address1=192.168.71.55/24,192.168.71.1
> dns=192.168.71.1;
> dns-search=hosts;nameserver;
> ignore-auto-routes=true
> may-fail=false
> method=manual
> route1=192.168.71.1/24,192.168.71.1
>

Try adding ignore-auto-dns=true with this setting you should not need to
make resolv.conf immutable. You may also want to add a default gateway
route.


> [ipv6]
> addr-gen-mode=stable-privacy
> method=disabled
>
> [proxy]
> 
> All of which now looks totally legit once /etc/resolv.conf was made
> immutable.  As an aside, I have yet to see a complaint from modern NM
> when it finds that file cannot be changed. When it was new, many
> generations ago, it had a cow quite regularly. Then the only way to
> clean up the logs was to rm the executable. It, when new, was not
> removable by apt as it took the rest of the system with it. So I've
> always looked at NM as something looking for a problem I didn't have.  A
> Karen to be removed by whatever means worked.  A root rm usually solved
> it all. So for me, its still, in the year of our lord 2023, a PITA.  A
> hosts file for local lookups, with anything not found there forwarded to
> my ISP's dns server is all I've ever needed. And it has not changed in
> 25 years. To me, dhcp is a total waste of cpu cycles.
> >
> > Gene has no DHCP server, so it should be method=manual. Frankly
> > speaking, I see almost no advantages of NetworkManager over ifupdown in
> > a purely static network. E.g. cable plug/unplug events should not matter
> > since there is no need to update configuration in response.
> >
> > .
>
> Cheers, Gene Heskett.
> --
> "There are four boxes to be used in defense of liberty:
>   soap, ballot, jury, and ammo. Please use in that order."
> -Ed Howdershelt (Author, 1940)
> If we desire respect for the law, we must first make the law respectable.
>   - Louis D. Brandeis
>
>

-- 
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/
⠈⠳⣄⠀⠀

Libreoffice in Debian bookworm-backports starts with 1 pixel wide window

[Rainer Dorsch]

Hi,

just FYI:

I hit

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1019423

with Debian bookworm-backports

rd@h370:~/.config/libreoffice/4/user$ apt-cache policy libreoffice
libreoffice:
  Installiert:   4:7.5.6-1~bpo12+1
  Installationskandidat: 4:7.5.6-1~bpo12+1
  Versionstabelle:
 4:7.5.8~rc1-2 100
100 http://deb.debian.org/debian sid/main amd64 Packages
 *** 4:7.5.6-1~bpo12+1 110
110 http://ftp.de.debian.org/debian bookworm-backports/main amd64 
Packages
100 /var/lib/dpkg/status
 4:7.4.7-1 500
500 http://deb.debian.org/debian bookworm/main amd64 Packages
rd@h370:~/.config/libreoffice/4/user$

again.

The same procedure as in 

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1019423#91

solved the problem again.

Rainer

-- 
Rainer Dorsch
http://bokomoko.de/

Re: Une VM libvirt démarre et s'arrête dans l'état Suspendu

[Dethegeek]

Bonjour

Ça peut arriver si le volume contenant une des images disque est saturé.

Le lun. 30 oct. 2023 à 09:47, Olivier  a écrit :

> Bonjour,
>
> Ce vendredi et ce lundi matin, j'ai deux VM libvirt sur deux hes
> indépendants qui après démarrage, se sont arrêtées pendant le
> démarrage et affichent un état suspendu.
>
> Une piste ?
> Comment accéder au texte qui défile pendant le démarrage ?
>
> Slts
>
>

Une VM libvirt démarre et s'arrête dans l'état Suspendu

[Olivier]

Bonjour,

Ce vendredi et ce lundi matin, j'ai deux VM libvirt sur deux hes
indépendants qui après démarrage, se sont arrêtées pendant le
démarrage et affichent un état suspendu.

Une piste ?
Comment accéder au texte qui défile pendant le démarrage ?

Slts

Re: Domain name to use on home networks

[gene heskett]

On 10/29/23 22:17, Max Nikulin wrote:

On 30/10/2023 00:08, Pocket wrote:

On 10/29/23 12:24, gene heskett wrote:
I have also made a very painfull attempt to change my domainname from 
coyote.den to home.arpa, and finally reverted that,


Gene, have you posted what exactly you did to switch from coyote.den to 
home.arpa? You have been told that setting NIS domainname was a wrong 
direction since you do not manage your hosts through NIS.


NetworkManager keeps updating the /etc/resolv.conf file in my opinion 
because it is querying the DHCP server.

[ ... ]> cat /etc/NetworkManager/system-connections/GREMLIN.nmconnection

[ipv4]
method=auto
gene@coyote:/etc$  cat 
/etc/NetworkManager/system-connections/GREMLIN.nmconnection
cat: /etc/NetworkManager/system-connections/GREMLIN.nmconnection: No 
such file or directory


Thats this machine, but applied to the problematic machine it becomes
sudo cat /etc/NetworkManager/system-connections/'Wired connection 
1.nmconnection'

which returns:
==
gene@bananapim55:/etc/systemd$ sudo cat 
/etc/NetworkManager/system-connections/'Wired connection 1.nmconnection'

[connection]
id=Wired connection 1
uuid=14621305-9887-3c6c-9e50-50894877ab68
type=ethernet
autoconnect-priority=999
interface-name=eth0
timestamp=1698571927

[ethernet]
cloned-mac-address=BE:63:9C:35:DD:4F
duplex=full
speed=1000

[ipv4]
address1=192.168.71.55/24,192.168.71.1
dns=192.168.71.1;
dns-search=hosts;nameserver;
ignore-auto-routes=true
may-fail=false
method=manual
route1=192.168.71.1/24,192.168.71.1

[ipv6]
addr-gen-mode=stable-privacy
method=disabled

[proxy]

All of which now looks totally legit once /etc/resolv.conf was made 
immutable.  As an aside, I have yet to see a complaint from modern NM 
when it finds that file cannot be changed. When it was new, many 
generations ago, it had a cow quite regularly. Then the only way to 
clean up the logs was to rm the executable. It, when new, was not 
removable by apt as it took the rest of the system with it. So I've 
always looked at NM as something looking for a problem I didn't have.  A 
Karen to be removed by whatever means worked.  A root rm usually solved 
it all. So for me, its still, in the year of our lord 2023, a PITA.  A 
hosts file for local lookups, with anything not found there forwarded to 
my ISP's dns server is all I've ever needed. And it has not changed in 
25 years. To me, dhcp is a total waste of cpu cycles.


Gene has no DHCP server, so it should be method=manual. Frankly 
speaking, I see almost no advantages of NetworkManager over ifupdown in 
a purely static network. E.g. cable plug/unplug events should not matter 
since there is no need to update configuration in response.


.


Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis

Re: Default DNS lookup command?

[Richard Hector]

On 24/10/23 06:01, Max Nikulin wrote:

On 22/10/2023 18:39, Richard Hector wrote:

But not strictly a DNS lookup tool:

richard@zircon:~$ getent hosts zircon
127.0.1.1   zircon.lan.walnut.gen.nz zircon

That's from my /etc/hosts file, and overrides DNS. I didn't see an 
option in the manpage to ignore /etc/hosts.


getent -s dns hosts zircon

However /etc/resolv.conf may point to local systemd-resolved server or 
to dnsmasq started by NetworkManager and they read /etc/hosts by default.


Ah, thanks. But I don't feel too bad about not finding that ... 
'service' is not defined in that file, 'dns' doesn't occur, and 
searching for 'hosts' doesn't give anything useful either. I guess 
reading nsswitch.conf(5) is required.


Thanks,
Richard