Vlan and DHCP

[basti]

Hello,

maybe a bit off topic.

The goal is to have a central DHCP/DNS server for multiple IP ranges in 
the same network.


- LAN has 192.168.30.0/24
- guest should have 10.10.10.0/24

At the moment LAN and guest has different interfaces but i have to 
change this.


A new wifi repeater / AP is needed, that have to had both, LAN and guest.
The wifi repeater has openwrt so that should work, to have multiple 
SSID's and vlan


I try to get dhcp working with vlan/macvlan.

I have configures kea-dhcp with multiple ranges on multiple interfaces.
But the dhcp request is seen on both, the lan and the macvlan interface 
and the macvlan interface send the wrong address.


A similar problem is there 
https://gitlab.isc.org/isc-projects/kea/-/issues/1117


Whats wrong there?
Can someone put me in the wright direction?

Best regards

Re: Mixing HDD and SSD in lvm

[Basti]

If you use mdadm for RAID you can mark the slower disk as 'write-mostly' 
to get more read speed.


On 06.02.24 09:23, Marco Moock wrote:

Am 06.02.2024 um 08:54:18 Uhr schrieb Kamil Jońca:


Marco Moock  writes:


Am 06.02.2024 um 07:17:02 Uhr schrieb Kamil Jońca:
  

Should I worry about anything (speed differences or sth)?

Speed differences will occur because reading and writing from/to the
SSD will be much faster.

Of course, but can it make any data damage to lvm?

I am asking because some time ago was a (different) story  about SMR
drives whose can make problem when in RAID. And I am wondering if
here I can similar problems.

That was because they have a significant decrease in writing
performance when shingled data needs to be rewritten.
Some RAID controllers treated that as a drive failure.
SSDs normally have a constant write speed, so I don't think this
problem occurs here.

Re: Hardware Advice Wanted: Router

[basti]

On 16.11.23 16:49, Stefan Monnier wrote:

My current favourites are RK3588 based CPU SBC devices which have an
exceptionally fast set of CPUs, high speed networking, and options for
Debian or Ubuntu or OpenWRT or Armbian.


Are these the usual SBC setup where you have to run the vendor kernel,
plus possibly other custom bits, or would pure Debian including kernel
run on them?


A good source of info to find out is to check the device tree files in
the official kernel source code:

 https://github.com/torvalds/linux/tree/master/arch/arm64/boot/dts/rockchip

you'll see lots of rk3588 boards are supported and if you look inside
that board's `.dts` file you can see which parts of its hardware are
actually supported by the vanilla kernel (tho this is not written in
natural language, so if you're not familiar with the technical details
of devicetree files it can be somewhat challenging to interpret, YMMV).


I'm currently running a Globalscale SheevaPlug and a DreamPlugs but
Debian support for the old ARM architecture is likely to end soon.
(Dropping it seems to come up each release, but so far they're still
releasing for it.)


If these can run the `armhf` port you should be fine for a few
more years.  For `armel` the writing is on the wall, tho.


 Stefan



I wouldn't recommend an ARM CPU. amd64 architecture is also quite energy 
efficient and you may avoid a lot of trouble.


My thinclient needs around 10W (with 1x 2.5" SSD and 1x 2.5" HDD)

Re: Hardware Advice Wanted: Router

[basti]

On 14.11.23 10:45, Anssi Saari wrote:

Charles Curley  writes:


My FIT-PCs that provide network services are getting old, and i386
Linux is slowly fading away. So I would like to replace them with a
router/gateway computer.


I built a router with an APUD4D board and case from
pcengines.ch. They're going out of production but are currently
available.

I put Debian on mine and love it to bits. It's been quite some fun too
setting up failover via LTE and enabling IPv6 using 6rd tunneling but
that stuff is extra.

To your specs, there's no video, just serial console and ethernet of
course. Wifi and LTE are optional, storage is mSATA SSD. From memory,
power consumption is about 9W, the case is used as a heat sink to
dissipate that.



I have a Fujitsu Futro s920 (the model with 2x2.2 GHz)
with a 4-port Gbit NIC and a Mini PCIE to SATA adapter for RAID
and 16GB RAM.

Round about 170€ without HDD/SSD

Re: Lenovo E16 Gen1 with Intel Iris adjust brightness, get Fn-Keys working

[basti]

On 24.10.23 06:18, David Wright wrote:

On Mon 23 Oct 2023 at 20:03:50 (+0200), basti wrote:

I have a Lenovo E16 Gen1 with Intel Iris and try to adjust brightness
via Fn-Keys.
All other Fn-Keys are working.

basti@thinkpad:~$ xbacklight -set 50
No outputs have backlight property

I also try to create a xorg.conf:

|Section "Device" Identifier "Intel Graphics" Driver "intel" Option
"Backlight" "intel_backlight" EndSection But after that X is not
start. [ 20.735] (II) LoadModule: "intel" [ 20.735] (WW) Warning,
couldn't open module intel [ 20.735] (EE) Failed to load module
"intel" (module does not exist, 0) [ 20.735] (EE) No drivers
available. I use LXDE as Desktop. How can I get it working.


Do you have the following file:

   $ cat /sys/class/backlight/intel_backlight/brightness
   40
   $

If so, do you get brightness changes when you write values
into it:

   # printf '%s' "60" > /sys/class/backlight/intel_backlight/brightness

Cheers,
David.



OK, I can write the values ​​to 
/sys/class/backlight/intel_backlight/brightness


The default is 15040, which seems to be the maximum.
Nothing visible changes between 15040 and 13000.
60 is very dark.
It therefore looks like an exponential function.

I have to see how I can represent this in a function to use it with the 
fn-keys.

Lenovo E16 Gen1 with Intel Iris adjust brightness, get Fn-Keys working

[basti]

Hello,
I have a Lenovo E16 Gen1 with Intel Iris and try to adjust brightness 
via Fn-Keys.

All other Fn-Keys are working.

basti@thinkpad:~$ xbacklight -set 50
No outputs have backlight property

I also try to create a xorg.conf:

|Section "Device" Identifier "Intel Graphics" Driver "intel" Option 
"Backlight" "intel_backlight" EndSection But after that X is not start. 
[ 20.735] (II) LoadModule: "intel" [ 20.735] (WW) Warning, couldn't open 
module intel [ 20.735] (EE) Failed to load module "intel" (module does 
not exist, 0) [ 20.735] (EE) No drivers available. I use LXDE as 
Desktop. How can I get it working. Best Regards |

Re: HPE Dynamic Smart Array B140i

[basti]

Thx

William and Dan

On 18.10.23 16:52, William Porter wrote:
Should be in the "Enabling the Controller" section here: 
https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-c04441385 , 
pages 6 and 7


I think you're looking for AHCI mode, not HBA/IT mode as this seems to 
be a SATA device, not a conventional SAS RAID controller


William

On 10/18/23 08:05, basti wrote:

Hello everyone,

i have read the docs for the HP B140i but i#am not sure.
Can the controller be run in HBA mode so that I can see every single 
drive in debian and use md-raid?


best regards

Re: HPE Dynamic Smart Array B140i

[basti]

Thx

William and Dan

On 18.10.23 16:52, William Porter wrote:
Should be in the "Enabling the Controller" section here: 
https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-c04441385 , 
pages 6 and 7


I think you're looking for AHCI mode, not HBA/IT mode as this seems to 
be a SATA device, not a conventional SAS RAID controller


William

On 10/18/23 08:05, basti wrote:

Hello everyone,

i have read the docs for the HP B140i but i#am not sure.
Can the controller be run in HBA mode so that I can see every single 
drive in debian and use md-raid?


best regards

HPE Dynamic Smart Array B140i

[basti]

Hello everyone,

i have read the docs for the HP B140i but i#am not sure.
Can the controller be run in HBA mode so that I can see every single 
drive in debian and use md-raid?


best regards

Re: pppoe ipv6 PD

[basti]

On 07.09.23 13:56, Anssi Saari wrote:

basti  writes:


My changes where attached in my last mail. Did you seen it?
Have a look at the mailing archive:

https://lists.debian.org/debian-user/2023/09/msg00157.html


No, you posted only your new versions so I can't know what you
actually changed. You posted originally that you have:

[Network]
IPv6SendRA=yes
DHCPv6PrefixDelegation=yes

On the LAN side. And now you have:

[Match]
Name=enp1s0f0

[Network]
IPv6SendRA=yes
IPv6AcceptRA=no
DHCPPrefixDelegation=yes

[IPv6SendRA]
EmitDNS=no
EmitDomains=no

So was it IPv6AcceptRA=no that fixed it? Or something else?

I only have post the relevant options, so you need all of them, 
depending on you environment. I don't know if you want to use the DNS 
Server of your ISP.


For more info's about the options see 'man systemd.network'

You also need to accept RA on the ppp interface and start a dhcpv6 
client there, if your ISP distribute IPv6 via dhcp.

Re: pppoe ipv6 PD

[basti]

On 07.09.23 10:27, Anssi Saari wrote:

basti  writes:


Am 06.09.23 um 09:37 schrieb Marco:

Am 06.09.2023 09:24 schrieb Anssi Saari:


That should be enough but I don't really know how pppoe works, I've
only used IPv6 with tunneling, 6rd and 6in4 with the late route48.org.

With PPP IPv6CP (RFC 2472 is being used.
It negotiates a 64 bit interface identifier to create the link-local
address.
The rest is being done with router advertisement and optionally with
DHCPv6.



I get it working.


What did you change to make it work though?



My changes where attached in my last mail. Did you seen it?
Have a look at the mailing archive:

https://lists.debian.org/debian-user/2023/09/msg00157.html

Re: pppoe ipv6 PD

[basti]

Am 06.09.23 um 09:37 schrieb Marco:

Am 06.09.2023 09:24 schrieb Anssi Saari:


That should be enough but I don't really know how pppoe works, I've
only used IPv6 with tunneling, 6rd and 6in4 with the late route48.org.


With PPP IPv6CP (RFC 2472 is being used.
It negotiates a 64 bit interface identifier to create the link-local
address.
The rest is being done with router advertisement and optionally with
DHCPv6.



I get it working.
Some options are renamed in different systemd versions. I use 252.
FYI.

root@s920:/etc/systemd/network# cat 60-ppp.network
[Match]
Type=ppp

[Network]
IPv6AcceptRA=yes
DHCP=ipv6

root@s920:/etc/systemd/network# cat enp1s0f0.network
[Match]
Name=enp1s0f0

[Network]
IPv6SendRA=yes
IPv6AcceptRA=no
DHCPPrefixDelegation=yes

[IPv6SendRA]
EmitDNS=no
EmitDomains=no

enp1s0f0 is my LAN interface and I don't want to use the DNS Server of 
my ISP.

pppoe ipv6 PD

[basti]

Hello,

I have switch my network config from ifup to systemd-networkd.

IPv4 is working well but IPv6 is broken now.

In the past I used dhcpcd to delegate the ipv6 prefix to my LAN 
interface. It seems not working with systemd.


On my PPP interface I get an IPv4 and a IPv6 Address.

On my LAN interface I have to to set:

[Network]
IPv6SendRA=yes
DHCPv6PrefixDelegation=yes

When this is the LAN interface is up but

root@s920:~# networkctl
IDX LINK TYPE OPERATIONAL SETUP
  1 lo   loopback carrier unmanaged
  2 enp1s0f0 etherroutableconfiguring
...
  4 enp1s0f1 etherroutableconfigured
...
 81 ppp0 ppp  routableunmanaged

and I get no IPv6 Address here.

enp1s0f0 is LAN
enp1s0f1 connect to modem

dhcpcd and radvd are disabled, I think systemd should to that with the 
config above?


LAN interface without IPv6SendRA and DHCPv6PrefixDelegation in config

root@s920:~# networkctl
IDX LINK TYPE OPERATIONAL SETUP
  1 lo   loopback carrier unmanaged
  2 enp1s0f0 etherroutableconfigured
...

Can someone give me I tip how it should work?

Re: php 7.4 and bookworm

[basti]

https://packages.sury.org/php/README.txt

after add the repo install your needed php7.4-* packages
if you use mod-php in apache you can use only one php version.
if you use php-fpm you can run multiple php version at the same time.
test your app with a phpinfo side.
but that was not the topic

Am 28.06.23 um 22:01 schrieb John Covici:

OK, so php was upgraded from 7.4 to 8.2 -- how to get 7.4 back after
upgrading to bookworm?  How would I use  https://deb.sury.org ?

Thanks.

On Wed, 28 Jun 2023 04:57:42 -0400,
basti wrote:


Hello,

you can hold the packages or you can use https://deb.sury.org/

On 28.06.23 10:46, John Covici wrote:

Hi.  So, I want to upgrade to bookworm, but I have an application
which needs php 7.4 and I guess they are not yet ready to fix.  So,
how can I keep that version, even if its just for that app?

Thanks in advance for any suggestions.

Re: php 7.4 and bookworm

[basti]

Hello,

you can hold the packages or you can use https://deb.sury.org/

On 28.06.23 10:46, John Covici wrote:

Hi.  So, I want to upgrade to bookworm, but I have an application
which needs php 7.4 and I guess they are not yet ready to fix.  So,
how can I keep that version, even if its just for that app?

Thanks in advance for any suggestions.

Re: ssh-add after graphical login

[basti]

The ssh config inside ~/.ssh/ has an option 'AddKeysToAgent'.
Why you don't use this?

For example:

Host *
   ControlMaster auto
   ControlPath /run/user/%i/%r@%h-%p
   IdentityFile ~/.ssh/id_rsa
   ControlPersist 3600
   User root
   AddKeysToAgent yes

See man ssh_config

On 23.03.23 09:42, Yassine Chaouche wrote:

Hello all,

I'd like something to run ssh-add right after I login to my desktop
(KDE).
ssh-add needs to prompt me for my passphrase,
and doesn't need any privileges.

What are my options?

Best,

Re: No keyboard on ttyS0

[basti]

Disconnect an reconnect the cable fixed it.

On 28.02.23 09:26, basti wrote:
I didn't change anything in /etc/default/grub but even if there is no 
usbserial_pl2303.mod in core image it should work when the system was 
booted.


The cable should be OK, I have test it before I upgrade the system.

On 28.02.23 00:24, David Wright wrote:

On Mon 27 Feb 2023 at 14:06:08 (+0100), basti wrote:


we have a PC Engines APU. This PC has only a Serial-Console.

After the upgrade from buster to bullseye I see the kernel output on
ttyS0 but there is no keyboard input available, neither in Grub.

Getty is startet on ttyS0, I see a login prompt.

Did anyone has had a similar problem?


Yourself, perhaps. Is this the machine that required
usbserial_pl2303.mod in Grub's core image? How did
you upgrade? Did you preserve /etc/default/grub or
has it been overwritten?

Cheers,
David.

Re: No keyboard on ttyS0

[basti]

I didn't change anything in /etc/default/grub but even if there is no 
usbserial_pl2303.mod in core image it should work when the system was 
booted.


The cable should be OK, I have test it before I upgrade the system.

On 28.02.23 00:24, David Wright wrote:

On Mon 27 Feb 2023 at 14:06:08 (+0100), basti wrote:


we have a PC Engines APU. This PC has only a Serial-Console.

After the upgrade from buster to bullseye I see the kernel output on
ttyS0 but there is no keyboard input available, neither in Grub.

Getty is startet on ttyS0, I see a login prompt.

Did anyone has had a similar problem?


Yourself, perhaps. Is this the machine that required
usbserial_pl2303.mod in Grub's core image? How did
you upgrade? Did you preserve /etc/default/grub or
has it been overwritten?

Cheers,
David.

No keyboard on ttyS0

[basti]

Hello,

we have a PC Engines APU. This PC has only a Serial-Console.

After the upgrade from buster to bullseye I see the kernel output on 
ttyS0 but there is no keyboard input available, neither in Grub.


Getty is startet on ttyS0, I see a login prompt.

Did anyone has had a similar problem?

Best regards,

Initramfs/ Initrd Resolution

[basti]

Hello,

I have setup a Laptop with 3K display (2880 x 1800 pixels).
In Grub I can set the Resolution with gfxmode.

Is there an option to setup the resolution in the Initramfs (initrd)?

Best regards

Re: Cheap NAS

[basti]

Am 16.10.22 um 20:19 schrieb pa...@quillandmouse.com:

On Sun, 16 Oct 2022 10:11:50 -0400
Wayne Sallee  wrote:


What about just putting some drives in a desktop, and installing some
free nas software like https://linuxhint.com/best-nas-software-linux



It's possible, but it sort of violates the size and power requirements
in my scenario.

Paul



What's about to use a (old) ThinClient with space for 1 or 2 2,5" drives?

I use a old FSC Futro 920 as router and LAN storage server with soft raid.

My setup:

- FSC Futro 920 (with AMD GX-222GC 2x2,2Ghz)
- mSATA to SATA adapter (ASM1062) to get more SATA ports
- 4 Port NIC (not need for your setup I think)
- The drives are stacked with https://www.ryang3d.com/shop/ssd-stackers/

power consumption is round about 15-20 W more than a Raspberry or 
similar hardware but not more than a (in Germany very popular) fritzbox.

Re: Cheap NAS

[basti]

Am 13.10.22 um 23:34 schrieb pa...@quillandmouse.com:

Actually, the most important requirement is that I can install my own
Linux OS on it, rather than put up with some proprietary NAS software.


Paul


Have a look to NAS boxes with x86/ amd64 CPU should be a good choice to 
get it working. ARM boxes are too differently, even within the same 
manufacturer.

OT: apache in shared environment

[basti]

Hello,

my question is a bit OT but perhaps someone can help.

We use apache mpm_prefork and mod_itk in shared environment for 
privilege separation.


Now we want to use http2.

As I understod:

- mod_itk need mpm_prefork
- mpm_prefork is not compatibe with mod_http2

We have try to use mpm_event with PHP-fpm and different pools, but this 
separate the php stack only.


Is there a way to get http2 work with mod_itk?

Best regards

Re: Allocate tty1 for kernel messages

[basti]

Am 25.09.22 um 17:25 schrieb David Wright:

On Sun 25 Sep 2022 at 17:01:23 (+0200), Dmitry Katsubo wrote:

I am trying to make a following setup on Debian bullseye:

* tty1 is used to display kernel messages only
* tty[2-5] are allocated for login

I have modified /etc/default/console-setup so that it reads:

ACTIVE_CONSOLES="/dev/tty[2-5]"

and rebooted. What I observe is that tty1 displays kernel messages during the 
boot (OK) but also ends with an invitation for login on tty1 (WRONG).

How can I force that tty1 is not used for login?


I think you still need to run:

# dpkg-reconfigure console-setup

to get that variable enacted. Then check that the file
/etc/console-setup/cached_setup_keyboard.sh, which AIUI
is what does the work, has been modified.

That's similar for a lot of configuration parameters
in /etc/default/.

Cheers,
David.



Hello,

first of all disable login on tty1:

systemctl disable getty@tty1.service

Then in /etc/systemd/journald.conf:
(or in one of the conf.d folders, see man journald.conf.d)

ForwardToConsole=yes
TTYPath=/dev/tty1

Will do it.

Best regards

Re: USB WiFi Adapter

[basti]

https://elinux.org/RPi_USB_Wi-Fi_Adapters#Working_USB_Wi-Fi_Adapters

Am 24.08.22 um 01:55 schrieb Timothy M Butterworth:

All,

Can anyone recommend a USB WiFi adapter that will work without binary 
blob proprietary drivers?


Thanks

Tim

--
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/ 
⠈⠳⣄⠀⠀

Re: USB WiFi Adapter

[basti]

https://elinux.org/RPi_USB_Wi-Fi_Adapters#Working_USB_Wi-Fi_Adapters

Am 24.08.22 um 01:55 schrieb Timothy M Butterworth:

All,

Can anyone recommend a USB WiFi adapter that will work without binary 
blob proprietary drivers?


Thanks

Tim

--
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/ 
⠈⠳⣄⠀⠀

OT HP Laser 408 Firmware

[basti]

Hello,
I need the HP Laser 408 Firmware Version lp408dn_v4.00.01.25_ver_DS.zip 
to fix Paper Jam from Tray 2.


In the Download area there is only the latest one.

Re: setting path for root after "sudo su" and "sudo" for Debian Bullseye (11)

[basti]

Am 20.05.22 um 02:24 schrieb Kenneth Parker:



On Thu, May 19, 2022, 4:14 AM 황병희 > wrote:


Tom Browder mailto:tom.brow...@gmail.com>>
writes:

 > I need a special path setting for root after both "sudo" and "sudo
 > su." (...)

Just you try like as "sudo su -". Sometimes i use it that way.

Sincerely, Linux fan Byung-Hee

-- 
^고맙습니다 _白衣從軍_ 감사합니다_^))//



When I need Root on a Desktop, I bring up a shell, enter "su -" and give 
it the Root Password.


Note, Debian (at least in the Expert Installation Mode) lets me set a 
Root Password.   Ubuntu doesn't, so one of my early actions after the 
Install is to enter "sudo su -" and, on the resulting Root Shell, type 
"passwd root".


On a Virtual Terminal, I simply login as Root on one terminal, and on 
the next one, sign on as my "Normal User" (and then do most of my work 
there).


I know there have been Discussions here about sudo vs "su -". They both 
work, but both can get you in trouble (but possibly in different ways).


Kenneth Parker

Kenneth Parker



https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=918754#41

or use su -l

Re: Can an NAS appliance be used as a regular computer?

[basti]

I would prefer a system with x86 CPU. But be aware that GPU is not the 
best.


I have a x86 QNAP NAS running Debian, I use it a file server. So I can't 
say much about Desktop computing.


00:02.0 VGA compatible controller: Intel Corporation 
Atom/Celeron/Pentium Processor x5-E8000/J3xxx/N3xxx Integrated Graphics 
Controller (rev 35)



On 28.04.22 12:42, Tom Browder wrote:
All I want is a small PC able to host multiple drives for redundant 
storage. Can a typical NAS appliance be used for that?


Thanks.

-Tom

multiple systemd-nspawn container name resolution

[basti]

Hello,

i have setup multiple systemd-nspawn container with virtualEthernet=yes.
Inside the container systemd-networkd and systemd-resolved are enabled.
So far so good.

Is there a way to disable the 169.254... networking for systemd?
The problem is as followed:

ip r

169.254.0.0/16 dev ve-test3 proto kernel scope link src 169.254.144.44
169.254.0.0/16 dev ve-test2 proto kernel scope link src 169.254.38.46
169.254.0.0/16 dev ve-test proto kernel scope link src 169.254.80.104

So I only can ping test3.
The same problem is with name resolution.

best regards

Predictable Network Interface Names

[basti]

Hello,

as I can read here [1] network names should be stable.
(Stable interface names even when hardware is added or removed)

First of all I have multiple PCIe NIC in a server.

What I see now is:

When I add or remove a PCIe card (USB card) the name is changed from 
enp5s3 to enp6s3 and back for example.


This is not what I understand with "Stable interface names", especially
when it rename multiple nic's.

I guess an empty PCI / PCIe slot is ignored.

Is there a way to not ignore empty slots?

[1] 
https://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/

Add GRUB modules to core-Image

[basti]

Hello,

I try to use a USB Serial-Converter to output the grub menu on a Serial 
port.


By the way the output is working at kernel boot time. (I See it on the 
remote host)


How can I add usbserial_pl2303.mod to the GRUB core image?

The file is located in /boot/grub/i386-pc/ on the root partition but I 
can't see it in /boot/grub/i386-pc/ in the grub shell.

Re: KVM max CPU speed to guest

[basti]

On 13.01.22 01:41, Igor Cicimov wrote:
> Hi,
> 
> On 13 Jan 2022 07:33, basti  wrote:
> 
> Hello,
> 
> first of all the most modern CPU in the last 10 years (I gues) use so
> called speed-stepping.
> 
> As I can see I was wondering why that speed stepping is not set in a
> KVM
> guest, even if I use "host-passthrough" in the cpu config of the guest.
> 
> virsh dumpxml almalinux | grep -i cpu
>   2
>   
> 
> The cpu on the "host" is:
> 
> root@q2:~# lscpu
> Architecture:    x86_64
> CPU op-mode(s):  32-bit, 64-bit
> Byte Order:  Little Endian
> Address sizes:   36 bits physical, 48 bits virtual
> CPU(s):  4
> On-line CPU(s) list: 0-3
> Thread(s) per core:  1
> Core(s) per socket:  4
> Socket(s):   1
> NUMA node(s):    1
> Vendor ID:   GenuineIntel
> CPU family:  6
> Model:   76
> Model name:  Intel(R) Celeron(R) CPU  N3160  @
> 1.60GHz
> Stepping:    4
> CPU MHz: 480.096
> CPU max MHz: 2240.
> CPU min MHz: 480.
> BogoMIPS:    3200.00
> Virtualization:  VT-x
> L1d cache:   96 KiB
> L1i cache:   128 KiB
> L2 cache:    2 MiB
> NUMA node0 CPU(s):   0-3
> Vulnerability Itlb multihit: Not affected
> Vulnerability L1tf:  Not affected
> Vulnerability Mds:   Vulnerable: Clear CPU buffers
> attempted, no microcode; SMT disabled
> Vulnerability Meltdown:  Mitigation; PTI
> Vulnerability Spec store bypass: Not affected
> Vulnerability Spectre v1:    Mitigation; usercopy/swapgs barriers
> and __user pointer sanitization
> Vulnerability Spectre v2:    Mitigation; Full generic retpoline,
> STIBP disabled, RSB filling
> Vulnerability Srbds: Not affected
> Vulnerability Tsx async abort:   Not affected
> Flags:   fpu vme de pse tsc msr pae mce cx8
> apic
> sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2
> ss ht
> tm pbe syscall nx rdtsc
>  p lm constant_tsc arch_perfmon pebs
> bts
> rep_good nopl xtopology tsc_reliable nonstop_tsc cpuid aperfmperf
> tsc_known_freq pni pclmulqdq d
>  tes64 monitor ds_cpl vmx est tm2 ssse3
> cx16 xtpr pdcm sse4_1 sse4_2 movbe popcnt tsc_deadline_timer aes rdrand
> lahf_lm 3dnowprefetch epb
>   pti tpr_shadow vnmi flexpriority ept
> vpid tsc_adjust smep erms dtherm ida arat
> root@q2:~#
> 
> So the max cpu speed should be 2240 MHz.
> 
> On the guest it is:
> 
> [root@almalinux ~]# lscpu
> Architektur: x86_64
> CPU Operationsmodus: 32-bit, 64-bit
> Byte-Reihenfolge:    Little Endian
> CPU(s):  2
> Liste der Online-CPU(s): 0,1
> Thread(s) pro Kern:  1
> Kern(e) pro Socket:  1
> Sockel:  2
> NUMA-Knoten: 1
> Anbieterkennung: GenuineIntel
> BIOS Vendor ID:  QEMU
> Prozessorfamilie:    6
> Modell:  76
> Modellname:  Intel(R) Celeron(R) CPU  N3160  @ 1.60GHz
> BIOS Model name: pc-i440fx-3.1
> Stepping:    4
> CPU MHz: 1600.000
> BogoMIPS:    3200.00
> Virtualisierung: VT-x
> Hypervisor-Anbieter: KVM
> Virtualisierungstyp: voll
> L1d Cache:   32K
> L1i Cache:   32K
> L2 Cache:    4096K
> L3 Cache:    16384K
> NUMA-Knoten0 CPU(s): 0,1
> Markierungen:    fpu vme de pse tsc msr pae mce cx8 apic sep
> mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss syscall nx
> rdtscp lm constant_tsc arch_perfmon rep_good nopl xtopology cpuid
> tsc_known_freq pni pclmulqdq vmx ssse3 cx16 pdcm sse4_1 sse4_2 x2apic
> movbe popcnt tsc_deadline_timer aes rdrand hypervisor lahf_lm
> 3dnowprefetch cpuid_fault pti tpr_shadow vnmi flexpriority ept vpid
> tsc_adjust smep erms arat umip arch_capabilities
> 
>

KVM max CPU speed to guest

[basti]

Hello,

first of all the most modern CPU in the last 10 years (I gues) use so
called speed-stepping.

As I can see I was wondering why that speed stepping is not set in a KVM
guest, even if I use "host-passthrough" in the cpu config of the guest.

virsh dumpxml almalinux | grep -i cpu
  2
  

The cpu on the "host" is:

root@q2:~# lscpu
Architecture:x86_64
CPU op-mode(s):  32-bit, 64-bit
Byte Order:  Little Endian
Address sizes:   36 bits physical, 48 bits virtual
CPU(s):  4
On-line CPU(s) list: 0-3
Thread(s) per core:  1
Core(s) per socket:  4
Socket(s):   1
NUMA node(s):1
Vendor ID:   GenuineIntel
CPU family:  6
Model:   76
Model name:  Intel(R) Celeron(R) CPU  N3160  @ 1.60GHz
Stepping:4
CPU MHz: 480.096
CPU max MHz: 2240.
CPU min MHz: 480.
BogoMIPS:3200.00
Virtualization:  VT-x
L1d cache:   96 KiB
L1i cache:   128 KiB
L2 cache:2 MiB
NUMA node0 CPU(s):   0-3
Vulnerability Itlb multihit: Not affected
Vulnerability L1tf:  Not affected
Vulnerability Mds:   Vulnerable: Clear CPU buffers
attempted, no microcode; SMT disabled
Vulnerability Meltdown:  Mitigation; PTI
Vulnerability Spec store bypass: Not affected
Vulnerability Spectre v1:Mitigation; usercopy/swapgs barriers
and __user pointer sanitization
Vulnerability Spectre v2:Mitigation; Full generic retpoline,
STIBP disabled, RSB filling
Vulnerability Srbds: Not affected
Vulnerability Tsx async abort:   Not affected
Flags:   fpu vme de pse tsc msr pae mce cx8 apic
sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht
tm pbe syscall nx rdtsc
 p lm constant_tsc arch_perfmon pebs bts
rep_good nopl xtopology tsc_reliable nonstop_tsc cpuid aperfmperf
tsc_known_freq pni pclmulqdq d
 tes64 monitor ds_cpl vmx est tm2 ssse3
cx16 xtpr pdcm sse4_1 sse4_2 movbe popcnt tsc_deadline_timer aes rdrand
lahf_lm 3dnowprefetch epb
  pti tpr_shadow vnmi flexpriority ept
vpid tsc_adjust smep erms dtherm ida arat
root@q2:~#

So the max cpu speed should be 2240 MHz.

On the guest it is:

[root@almalinux ~]# lscpu
Architektur: x86_64
CPU Operationsmodus: 32-bit, 64-bit
Byte-Reihenfolge:Little Endian
CPU(s):  2
Liste der Online-CPU(s): 0,1
Thread(s) pro Kern:  1
Kern(e) pro Socket:  1
Sockel:  2
NUMA-Knoten: 1
Anbieterkennung: GenuineIntel
BIOS Vendor ID:  QEMU
Prozessorfamilie:6
Modell:  76
Modellname:  Intel(R) Celeron(R) CPU  N3160  @ 1.60GHz
BIOS Model name: pc-i440fx-3.1
Stepping:4
CPU MHz: 1600.000
BogoMIPS:3200.00
Virtualisierung: VT-x
Hypervisor-Anbieter: KVM
Virtualisierungstyp: voll
L1d Cache:   32K
L1i Cache:   32K
L2 Cache:4096K
L3 Cache:16384K
NUMA-Knoten0 CPU(s): 0,1
Markierungen:fpu vme de pse tsc msr pae mce cx8 apic sep
mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss syscall nx
rdtscp lm constant_tsc arch_perfmon rep_good nopl xtopology cpuid
tsc_known_freq pni pclmulqdq vmx ssse3 cx16 pdcm sse4_1 sse4_2 x2apic
movbe popcnt tsc_deadline_timer aes rdrand hypervisor lahf_lm
3dnowprefetch cpuid_fault pti tpr_shadow vnmi flexpriority ept vpid
tsc_adjust smep erms arat umip arch_capabilities

So I can't use the 2240 MHz in the guest.
When I set the cpu governor to "performance" on the host, it doesn't
matter. The host only see 1600 MHz.

What's wrong there and how should I fix this?

rsync copyed systemd-nspawn container won't start

[basti]

Hello,

i have copy a running systemd-nspawn container via rsync.
The container won't start in the destination:

Jan 11 15:22:55 dhanna systemd[1]: Started Container foo.
Jan 11 15:22:55 dhanna systemd-nspawn[21268]: systemd 232 running in
system mode. (+PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP
+LIBCRYPTSETUP +GC
Jan 11 15:22:55 dhanna systemd-nspawn[21268]: Detected virtualization
systemd-nspawn.
Jan 11 15:22:55 dhanna systemd-nspawn[21268]: Detected architecture x86-64.
Jan 11 15:22:55 dhanna systemd-nspawn[21268]: [1B blob data]
Jan 11 15:22:55 dhanna systemd-nspawn[21268]: Welcome to Debian
GNU/Linux 9 (stretch)!
Jan 11 15:22:55 dhanna systemd-nspawn[21268]: [1B blob data]
Jan 11 15:22:55 dhanna systemd-nspawn[21268]: Set hostname to .
Jan 11 15:22:55 dhanna systemd-nspawn[21268]: Failed to install release
agent, ignoring: No such file or directory
Jan 11 15:22:55 dhanna systemd-nspawn[21268]: Failed to create
/init.scope control group: Operation not permitted
Jan 11 15:22:55 dhanna systemd-nspawn[21268]: Failed to allocate manager
object: Operation not permitted
Jan 11 15:22:55 dhanna systemd-nspawn[21268]: [!!] Failed to
allocate manager object, freezing.
Jan 11 15:22:55 dhanna systemd-nspawn[21268]: Freezing execution.


Then I try it with

debootstrap --variant=minbase --include
systemd,vim,libterm-readline-gnu-perl,iproute2,dialog,dbus stretch
/var/lib/machines/foo

it work as expected.

Any ideas?

Best regards

Re: LVM passphrase

[basti]

you can add a key to swap. and place this somewhere in the root
partition. the key must known by /etc/crypttab, so it should ask only once.

Am 28.12.21 um 07:39 schrieb Polyna-Maude Racicot-Summerside:
> Hi,
> I got two logical volume on my hard disk.
> One is the swap
> Other is the root
> Both have the same passphrase.
> How can I make grub ask only once ?
> Thanks
> 

Re: replacement of sqsh for debian 11

[basti]

if you need a mssql-cli

https://docs.microsoft.com/en-us/sql/tools/mssql-cli?view=sql-server-ver15

or build your own sqsh-cli from debian-testing.

Am 28.10.21 um 03:10 schrieb Michael Castellon:
> sqsh > sql server database
> 
> sqlite3 > sqlite3 database
> 
> I need to connect to the sql server.
> 
> Thanks
> 
> On Wed, Oct 27, 2021 at 5:38 AM Махно  > wrote:
> 
> Hello. I think sqlite3 is a good alternative.
> 
> 
> 2021-10-27, tr, 00:55 Michael Castellon  > rašė:
> >
> > replacement of sqsh for debian 11?
> >
> > thanks.
> > regards.
> 

Re: replacement of sqsh for debian 11

[basti]

sqlite is *not* T-SQL.
sqlite generally follows PostgreSQL syntax (see
https://en.wikipedia.org/wiki/SQLite)

Am 28.10.21 um 03:10 schrieb Michael Castellon:
> sqsh > sql server database
> 
> sqlite3 > sqlite3 database
> 
> I need to connect to the sql server.
> 
> Thanks
> 
> On Wed, Oct 27, 2021 at 5:38 AM Махно  > wrote:
> 
> Hello. I think sqlite3 is a good alternative.
> 
> 
> 2021-10-27, tr, 00:55 Michael Castellon  > rašė:
> >
> > replacement of sqsh for debian 11?
> >
> > thanks.
> > regards.
> 

Re: Sata Hard drive testing

[basti]

Have a look at "smartctl". It will print some info about the drive and
can also "test" your drive known as S.M.A.R.T-test.

First of all i would have a look what "smartctl -a /dev/sdX" will say.

Am 18.10.21 um 18:25 schrieb Thomas Anderson:
> Hello Gurus,
> 
> I have been having problems with a drive (non-SSD) for a while now, but
> I would like to "identify" the problem specifically, so that I may
> perhaps be able to get the drive replaced.
> 
> Essentially, I have been experienced data loss, where nodes become
> unreadable, when I try to "fix it" with fdisk, it says it moves
> unreadable to the trash, basically deleting data.
> 
> I have tried reformatting the drive, writing zeros to it, and then
> temporarily the drive looks fine; but it's not! it's as if the drive is
> some how decaying: where it looks good, but then when you go to use it,
> the data later becomes unreadable.
> 
> Is there any kind of test I can execute on this drive to show it needs
> to be replaced??
> 
> Thanks!
> 

Add btdu to debian repo

[basti]

Hello,

what is the right way to get btdu (a ncdu like command line tool for 
btrfs) to the debian repo?


Best regards

Re: Debian Security

[basti]

hello,

what are your intentions?
would an apt-cacher be an option?
so you can download it once and distribute it several times.

Am 24.07.21 um 07:07 schrieb Polyna-Maude Racicot-Summerside:
> Hi !
> How would you copy the debian security update repository ?
> I know it's not recommended.
> But I'd like to do so.
> 

pppoe ipv6

[basti]

Hello,

i use pppoe to connect to the Internet.
My ISP support IPv6 and I get a /56.
I get a static IPv4 from my ISP but no IPv6, so I ask my ISP how to do.

The Answer in short:
- do not use RA
- the IPv6 is send via ppp but my router does not accept them


/etc/ppp/options look like:

#+ipv6 ipv6cp-use-persistent
#+ipv6 ipv6cp-use-ipaddr
+ipv6

I have also try the commended options above

journal:

Jul 14 16:19:31 rtr-002 pppd[30035]: pppd 2.4.7 started by root, uid 0
Jul 14 16:19:31 rtr-002 pppd[30035]: PPP session is 9348
Jul 14 16:19:31 rtr-002 pppd[30035]: Connected to  via 
interface enp1s0

Jul 14 16:19:31 rtr-002 pppd[30035]: Using interface ppp0
Jul 14 16:19:31 rtr-002 pppd[30035]: Connect: ppp0 <--> enp1s0
Jul 14 16:19:31 rtr-002 systemd-udevd[30036]: link_config: 
autonegotiation is unset or enabled, the speed and duplex are not writable.

Jul 14 16:19:31 rtr-002 pppd[30035]: PAP authentication succeeded
Jul 14 16:19:31 rtr-002 pppd[30035]: peer from calling number  
authorized
Jul 14 16:19:31 rtr-002 named[12555]: listening on IPv4 interface ppp0, 
#53

Jul 14 16:19:31 rtr-002 pppd[30035]: local  IP address 
Jul 14 16:19:31 rtr-002 pppd[30035]: remote IP address 
Jul 14 16:19:31 rtr-002 pppd[30035]: local  LL address 
fe80:::::0002
Jul 14 16:19:31 rtr-002 pppd[30035]: remote LL address 
fe80::5aac:78ff:fefb:9000



Best regards

Re: pppoe performance on debian and debian as router / firewall

[basti]

Hello,
you can use PPPoE with rp-pppoe (kernel-modul). On my RPi 3 it has a
better performance as run PPPoE in userspace.

I do not know if it multiple cores.

Am 05.06.21 um 20:07 schrieb Antonio:
> Hi,
> 
> I'm planning to setup a router and firewall based on debian for my home
> lab.
> 
> I know there are better (I mean, easier...) choices for this type of
> machine (have tried some of them, currently using pfsense) but I do want
> to find out if I could use debian.
> 
> The problem is my ISP uses pppoe for my symmetric 1 gbps connection and
> I know this type of connection requires a quite performant cpu, as it is
> single-threaded and uses only one cpu core. I'm currently using a
> supermicro motherboard with a (four core) N3710 and setting up ipfire,
> pfsense, opnsense or similar to use all my bandwidth is a real pain (if
> even possible...)
> 
> I've been looking for reports on pppoe performance in debian on similar
> hardware but have found none (most people seem to be using freebsd-based
> firewalls these days), so my questions are:
> 
> Does anyone here have any experience using debian as of router and
> firewall on such hardware as mine using pppoe?
> 
> Is there any way debian could use the four cores of my cpu to handle
> pppoe traffic? Or any other way to improve pppoe performance...
> 
> And finally, I am planning on using shorewall for the firewall. I have
> been looking at the docs but have found no examples for a 4 nic machine.
> I guess that's possible, isn't it?
> 
> 
> Cheers!
> 

Re: Creating my first LAN

[basti]

Am 24.03.21 um 19:38 schrieb Brian:
> On Wed 24 Mar 2021 at 12:05:38 -0500, Richard Owlett wrote:
> 
>> On 03/24/2021 11:37 AM, Andrew M.A. Cater wrote:
>>> On Wed, Mar 24, 2021 at 10:34:53AM -0500, Richard Owlett wrote:
 This is essentially a reading list request.
 I have never administered a LAN and believe in "learning by doing".
 I have two laptops with clean installs of Buster. During installation 
 server
 software was installed on *ONE* of them. Communication will be via WiFi. 
 The
 MATE panel's network connection icon for each laptop shows the existence of
 WiFi sources in the neighborhood.

 Any specific suggestions for reading?
 What internet search terms will lead to productive results?
 TIA


>>>
>>> Back to the 20 questions email:
>>>
>>
>> Not at all related!
>> If not mentioned in current post - it does *NOT* exist.
>> IOW the _current_ "Universe of Discourse" consists of EXACTLY two laptops
>> communicating via WiFi. If that not a minimalists idea of a LAN, I don't
>> know what is ;/
> 
> Minimalist? I suppose it is and, after it takes only two to tango; Reco
> has outlined the steps.
> 
> However, when Donald T. and Kim J. got together for a quick chin-wag, the
> minimalist concept fell apart because communication was a barrier. The
> problem was solved by increasing the number of participants on their
> network by at least one, a translator.
> 
> I strongly suggest you do the same and revise your action plan. Using a
> wireless router as part of your minimalist LAN would be so much easier to
> get the laptops talking to each other.
> 

To connect 2 PCs Laptops or whatever why you don't use a LAN cable?
Keep in mind that modern Intel Wifi Cards do not support AP mode.
Use a wifi router or Range expander that can be used as AP.

sphinxsearch on debian

[basti]

Hello,

as I can See Sphinx 3.0.1 released on Dec 18, 2017.
(http://sphinxsearch.com/blog/2017/12/18/sphinx-3-0-1-released/)

Why Debian is still use 2.2.11 ?
(https://metadata.ftp-master.debian.org/changelogs//main/s/sphinxsearch/sphinxsearch_2.2.11-2_changelog)

Best Regards

Re: timedatectl DHCP NTP Server

[basti]

OK thanks John,

I don't know what was wrong here. I move the option from global to the 
subnet and backup to global and for now it works on Debian Buster.



On 05.02.21 07:24, john doe wrote:

On 2/5/2021 4:10 AM, Charles Curley wrote:

On Thu, 4 Feb 2021 22:16:12 +0100
basti  wrote:


I use a up to date debian. As I can see now timedatectl seems *not*
using the NTP Server provide by DHCP. I have configure a NTP server
in  LAN.

timedatectl  timesync-status
    Server: 167.86.86.192 (0.debian.pool.ntp.org)
Poll interval: 1min 4s (min: 32s; max 34min 8s)


I see the same, on a Bullseye system.

root@dragon:~# timedatectl  timesync-status
    Server: 198.74.51.125 (2.debian.pool.ntp.org)
Poll interval: 34min 8s (min: 32s; max 34min 8s)
  Leap: normal
...

This box is running systemd, and ntp is not present.

The dhcp server shows:


subnet 192.168.100.0 netmask 255.255.255.0 {
 option subnet-mask 255.255.255.0;
 option broadcast-address 192.168.100.255;
 option routers 192.168.100.31;
 option domain-name-servers 192.168.100.30, 192.168.100.6, 
192.168.100.31; # chaffee, hawk, freeman

 option domain-search "localdomain", "virtual", "yen";

 option domain-name "localdomain";
 option ntp-servers 192.168.100.31; # freeman, AKA ntp.localdomain
 # range 192.168.100.1 192.168.100.254;

...



It does work fine for me, is the lease showing the ntp server?

Note that systemd is using a sntp client and not a ntp client.

Does 'systemctl restart systemd-timesyncd' help?

--
John Doe

timedatectl DHCP NTP Server

[basti]

Hello,
I use a up to date debian. As I can see now timedatectl seems *not*
using the NTP Server provide by DHCP. I have configure a NTP server in  LAN.

timedatectl  timesync-status
   Server: 167.86.86.192 (0.debian.pool.ntp.org)
Poll interval: 1min 4s (min: 32s; max 34min 8s)
 Leap: normal
  Version: 4
  Stratum: 2
Reference: CD2EB2A9
Precision: 1us (-24)
Root distance: 45.645ms (max: 5s)
   Offset: +7.949ms
Delay: 36.328ms
   Jitter: 0
 Packet count: 1
Frequency: +79.117ppm


ntpdate -bu raspi
 4 Feb 22:15:53 ntpdate[21025]: step time server 192.168.30.5 offset
-0.016785 sec

Can someone confirm that?

Best Regards

Re: [OT] Wifi AP for Gigabit LAN/WAN

[basti]

Am 26.01.21 um 17:25 schrieb Stefan Monnier:
>> I mean wifi 802.11n so I get round about 4 MB/s if I would get 30-40
>> MB/s its ok.
> 
> Thanks!  I see so few reports of wifi rates with which I can relate,
> that it's like a breath of fresh air.
> 
> I have seen 25MB/s actual download rate on my smartphone when connected
> over wifi in a coffeehouse, but here in my house, I've never seen more
> than 6MB/s actual transfer rate even when my AP says that the
> connection is currently using "300Mb/s").
> 
> 
> Stefan

Hello Stefan,

it depent on more than the wifi standard,
- what mimo ?
- enviroment (walls, other wifi in the neighbourhood, distance
sender/receiver)

wifi is a shared media, so you can devide the max datarate/2
(client must ack there received packages)

Is in german but the table can give you an overview.
https://de.wikipedia.org/wiki/Datendurchsatz

Re: [OT] Wifi AP for Gigabit LAN/WAN

[basti]

On 26.01.21 16:31, Henning Follmann wrote:
> On Tue, Jan 26, 2021 at 01:59:43PM +0100, basti wrote:
> [...]
>>
>> Yes I know, Wifi can't get 1Gbit at the moment, I would only get close
>> to it. 500Mbit/s are also OK (the TP-link Archer C7) seems to get it and
>> this is much more than my 300Mbit that I have at the moment.
>>
> If 300MBit/s is what you really get right now, you are OK.
> Most likely whatever you will change will not get much higher than that.
> Sure the specs will always claim more , but real life effective
> throughput of 300 MBits/s is pretty much great bordering on awesome.
> 
> 
>> The possibility to run openWRT at the TP-link Archer C7 sounds good,
>> I will have a look at.
>>
>>
> 
> 
> -H
> 
I mean wifi 802.11n so I get round about 4 MB/s if I would get 30-40
MB/s its ok.

Re: [OT] Wifi AP for Gigabit LAN/WAN

[basti]

> Well,
> judging by your e-mail address you are from Germany.
> Check your local magazines for some reviews (C't might be one).
> If you really think you can get a 1Gbit stream via Wifi you
> are fantazing. If you have a decent router connect via cable.
> And if you are connecting multiple machines invest in
> a decent switch.
> Your best guess to get high throughput whicg doesn't
> degrate in real life (other AP in the area, multiple
> clients...) is wifi 6. There are not many available,
> and even less devices available for a linux machine,
> 
> While I use a ubiquity AP, I do not recomment those.
> In most cases you are stuck with their managing software
> or some Apps on Android/ios.
> It's not an issue here , because wifi is mainly for
> the Misses' ipad. I ran cat6 cable when we bought the 
> place.

Yes I know, Wifi can't get 1Gbit at the moment, I would only get close
to it. 500Mbit/s are also OK (the TP-link Archer C7) seems to get it and
this is much more than my 300Mbit that I have at the moment.

The possibility to run openWRT at the TP-link Archer C7 sounds good,
I will have a look at.

Re: [OT] Wifi AP for Gigabit LAN/WAN

[basti]

On 26.01.21 00:39, David Christensen wrote:
>> Am 25.01.21 um 20:16 schrieb basti:
>>> Hello,
>>> at the moment I use 802.11n /2.4GHz wifi. I get 1 Gbit down/250 Mbit up
>>> WAN in 2 months.
>>> I'm search for wifi AP to get the best out of my WAN connection.
>>> I know I need 5GHz wifi.
>>>
>>> Are there any recommends?
> 
> 
> On 2021-01-25 13:11, Frank Michael Dienst wrote:
> 
>> have a look to ubiquiti-AP.
>>
>> https://www.ui.com/unifi/unifi-ap-ac-pro/
>>
>> The AP-AC-Pro systems with two RJ45-connectors work with bonding up to
>> 2,5 Gbit.
> 
> 
> +1 for Ubiquiti UniFi products:
> 
> https://help.ui.com/hc/en-us/articles/360050130353-UniFi-UniFi-Overview
> 
> 
> I started with one UniFi AP AC Lite and set it up with the built-in web
> interface.  It has worked flawlessly ever since.
> 
> 
> But what I really wanted was the UniFi Network Controller.  The
> controller is what provides the "Uni" in UniFi.  It available as
> free-as-in-beer software, bundled in certain UniFi hardware products,
> and via third-party hosting providers.  I got a VPS (linode.com) and
> installed the Debian package.
> 
> 
> I soon added a UniFi Security Gateway (USG).  This integrates with the
> controller and adds network control and monitoring capabilities.  It has
> also worked flawlessly.
> 
> 
> If and when I want to set up a multi-site network and/or VPN's, I can
> add USG's at the remote site(s).
> 
> 
> David
> 

Can I manage my device without the UniFi software via browser or cli?

Re: [OT] Wifi AP for Gigabit LAN/WAN

[basti]

On 26.01.21 09:28, Andrei POPESCU wrote:
> On Lu, 25 ian 21, 20:16:21, basti wrote:
>> Hello,
>> at the moment I use 802.11n /2.4GHz wifi. I get 1 Gbit down/250 Mbit up
>> WAN in 2 months.
>> I'm search for wifi AP to get the best out of my WAN connection.
>> I know I need 5GHz wifi.
>>
>> Are there any recommends?
> 
> A device *fully* supported by OpenWrt.
> 
> Read the device specific information carefully, e.g. some devices rely 
> on hardware NAT to reach the full 1Gbit/s and it works only with the 
> proprietary firmware[1] (which is generally crap).
> 
> [1] e.g. the TP-Link Archer C7
> https://openwrt.org/toh/tp-link/archer-c5-c7-wdr7500#nat_performance
> 
> Kind regards,
> Andrei
> 

As I understand it, NAT performance is relevant when I use it as a router?
I have a separate Router/Firewall device, so I should get "gbit wifi"?

[OT] Wifi AP for Gigabit LAN/WAN

[basti]

Hello,
at the moment I use 802.11n /2.4GHz wifi. I get 1 Gbit down/250 Mbit up
WAN in 2 months.
I'm search for wifi AP to get the best out of my WAN connection.
I know I need 5GHz wifi.

Are there any recommends?

best regards

Re: new harddrive degraded speed

[basti]

Am 21.01.21 um 22:01 schrieb David Christensen:
> On 2021-01-20 15:21, brainf...@posteo.net wrote:
>> i bought a new harddrive
>> western digital red plus 6tb
>>
>> === START OF INFORMATION SECTION ===
>> Model Family: Western Digital Red
>> Device Model: WDC WD60EFRX-68L0BN1
>> Serial Number:    WD-WX62D60C9L6X
>> LU WWN Device Id: 5 0014ee 212e6b9ad
>> Firmware Version: 82.00A82
>> User Capacity:    6,001,175,126,016 bytes [6.00 TB]
>> Sector Sizes: 512 bytes logical, 4096 bytes physical
>> Rotation Rate:    5700 rpm
>> Device is:    In smartctl database [for details use: -P show]
>> ATA Version is:   ACS-2, ACS-3 T13/2161-D revision 3b
>> SATA Version is:  SATA 3.1, 6.0 Gb/s (current: 3.0 Gb/s)
>> Local Time is:    Wed Jan 20 17:12:52 2021 CST
>> SMART support is: Available - device has SMART capability.
>> SMART support is: Enabled
>>
>> why is the speed 3.0 gbs
>> i have 4 other drive i have tested with this device and they all  use
>> 6.0 gbs
>>

3.0 gbs is round about 300 MB/s,  WD60EFRX is much slower ... don't pull
out your hair

Re: megacli help

[basti]

Am 06.01.21 um 19:45 schrieb Greg Wooledge:
> On Wed, Jan 06, 2021 at 05:28:24PM +0100, basti wrote:
>> "megacli help" have the following options:
>>
>> MegaCli -CfgEachDskRaid0 [WT|WB] [NORA|RA] [Direct|Cached] [-enblPI]
>> [CachedBadBBU|NoCachedBadBBU] [-strpszM]|[FDE|CtrlBased] [-Default|
>> -Automatic| -None| -Maximum| -MaximumWithoutCaching] [-Cache]
>> -aN|-a0,1,2|-aALL
> 
>> what mean:
>> [WT|WB] ?
>> [NORA|RA] ?
>> [Direct|Cached] ?
>> [CachedBadBBU|NoCachedBadBBU] ?
> 
> One or the other.  Mutually exclusive.  Either A or B, possibly neither
> one, but not both.
>
I found the options explaint in https://docs.broadcom.com/doc/12352476

[WT|WB] Write through /  Write back
[NORA|RA]  No read ahead / Read ahead
[Direct|Cached] Sets the logical drive cache policy
[CachedBadBBU|NoCachedBadBBU] Enables caching when BBU is not functioning

So I would say:

storcli -CfgEachDskRaid0 WT RA direct nocachedbadbbu -a0

is the best for use with mdadm?

Re: megacli help

[basti]

I'm new on LSI raid adapters.
OK i will try storcli. Don't know that megacli is deprecated.
THX


Am 06.01.21 um 17:45 schrieb Reco:
>   Hi.
> 
> On Wed, Jan 06, 2021 at 05:28:24PM +0100, basti wrote:
>> Hello, I want to set all my drives to RAID0 to use mdadm.
>> "megacli help" have the following options:
> 
> Is there any particular reason you're using megacli instead of storcli?
> MegaCli is deprecated. If it's possible - stay away from MegaCli.
> Especially if you value your sanity.
> 
> 
>> There is no man page for megacli.
> 
> Yes, there's no man page for megacli. See below.
> 
> 
>> Is there a docu where the single parameter is explained?
> 
> No, and there's good reason for it - think of the most horrible,
> disgusting and amoral thing you can imagine. Doing that thing is an
> experience that's superior to using megacli.
> 
> But, [1], [2] and [3] contain nearly anything that's a sane human being
> can comprehend.
> 
> 
> Reco
> 
> [1] http://www.vmwareadmins.com/megacli-working-examples-cheat-sheet/
> [2] 
> https://help.serversaustralia.com.au/s/article/megacli-megacli64-cheatsheet
> [3] http://erikimh.com/megacli-cheatsheet/
> 

megacli help

[basti]

Hello, I want to set all my drives to RAID0 to use mdadm.

"megacli help" have the following options:

MegaCli -CfgEachDskRaid0 [WT|WB] [NORA|RA] [Direct|Cached] [-enblPI]
[CachedBadBBU|NoCachedBadBBU] [-strpszM]|[FDE|CtrlBased] 
[-Default| -Automatic| -None| -Maximum| -MaximumWithoutCaching] [-Cache] 
-aN|-a0,1,2|-aALL


There is no man page for megacli.

Is there a docu where the single parameter is explained?

what mean:
[WT|WB] ?
[NORA|RA] ?
[Direct|Cached] ?
[CachedBadBBU|NoCachedBadBBU] ?

best regards

Re: HBA or SATA PCIe card FSC TX150 S7 Server

[basti]

On 06.01.21 15:37, Andrei POPESCU wrote:

On Ma, 05 ian 21, 19:46:38, basti wrote:

Hello,
we have a old FSC TX150 S7 Server and need more disk space.
So we want to by a https://www.icydock.com/goods.php?id=153.
The diskspace is used as fileserver / simple HDD no SSD and the network
connection is 1Gbit round about 100mb/s.
So I think sata 3.0 is just more speed then needed.
I want to use it as software raid.


If the drives support it also doesn't hurt to have a SATA 3 connection
for them, since it is used also for the RAID internal stuff, not only
for serving files over the network.

Consider also future upgrades, the card could be useful in another
system.

Kind regards,
Andrei



I have buy a Fujitsu D2616 / LSI Megaraid SAS 9260-8i.
Now I'am searching for firmware to get it in IT (JBOD) mode.

Re: HBA or SATA PCIe card FSC TX150 S7 Server

[basti]

Am 05.01.21 um 19:46 schrieb basti:
> Hello,
> we have a old FSC TX150 S7 Server and need more disk space.
> So we want to by a https://www.icydock.com/goods.php?id=153.
> The diskspace is used as fileserver / simple HDD no SSD and the network
> connection is 1Gbit round about 100mb/s.
> So I think sata 3.0 is just more speed then needed.
> I want to use it as software raid.
> 
> So far so good.
> 
> The LSI 1068e (aka FSC D2607-A11) is offical supported by FSC but not in
> IT-mode (JBOD).
> 
> So I'am not sure if I use the LSI 1068e and flash a unoffical firmware
> (the original LSI one) or to use a simple SATA extension card.
> 
> Can someone recommend a SATA extension card for server usage?
> What's about performence?
> I'am not sure if a SATA extension card for lets say 50€ can have the
> same read/write speed as a LSI HBA card in JBOD / software raid mode?
> 
> Best regards
> 
Sorry,

LSI 1068e is FSC D2507-C11   (SAS/SATA 3Gb)
LSI SAS2008 is FSC D2607-A11 (SAS/SATA 6Gb)

HBA or SATA PCIe card FSC TX150 S7 Server

[basti]

Hello,
we have a old FSC TX150 S7 Server and need more disk space.
So we want to by a https://www.icydock.com/goods.php?id=153.
The diskspace is used as fileserver / simple HDD no SSD and the network
connection is 1Gbit round about 100mb/s.
So I think sata 3.0 is just more speed then needed.
I want to use it as software raid.

So far so good.

The LSI 1068e (aka FSC D2607-A11) is offical supported by FSC but not in
IT-mode (JBOD).

So I'am not sure if I use the LSI 1068e and flash a unoffical firmware
(the original LSI one) or to use a simple SATA extension card.

Can someone recommend a SATA extension card for server usage?
What's about performence?
I'am not sure if a SATA extension card for lets say 50€ can have the
same read/write speed as a LSI HBA card in JBOD / software raid mode?

Best regards

Re: mdadm usage

[basti]

On a file server in a production environment I would prefer raid 6.

Am 29.12.20 um 08:45 schrieb Felix Miata:
> Thomas A. Anderson composed on 2020-12-29 07:58 (UTC+0100):
> 
>> I have been "using" mdadm to run software raid1 (stripping) on a file
>> server i have been running.
> 
> RAID 1 is two devices that are mirrors of each other, redundancy, with some 
> loss
> in speed. Loose one device, and you still have all your data.
> 
> RAID 0 is striping. One device failing means all data lost from two devices, 
> but
> twice as much space as RAID 1, and some extra speed.
> 

Re: i386 debian to 64bit intel

[basti]

Hello,

install 64bit over 32 is a bit tricky.
If you have a separate /home partion you do not need to backup your data
but it is always recommented.

When you have a backup of your data I would recomment to use LVM and
create lv's not to large, they can grow online.

LVM is a more flexeble way to manage your disk space then "classic"
partition layout.

Best Regards

Am 03.12.20 um 23:39 schrieb Jerry Mellon:
> Hi,
> I am new to linux and made the mistake of loading the i386 Debian
> release 10 onto my 64bit intel system. I now want to put the 64bit
> version for intel on the system. 
> Do I have to backup the data I have in my $HOME directory to load after
> loading the 64bit version or can I in someway just load the the OS over
> the i386 OS and retain the $HOME contents?
> 
> Jerry
> jfmel...@netscape.net
> 
> I am a user on the lists.
> Thanks for your attention to this.
> 

M.2 2230 key e wifi 6 card

[basti]

Hello,
I want to use my old intel nuc as router/AP and plan to replace the wifi
card (Intel 3165). As I can see
(https://www.intel.com/content/www/us/en/support/articles/30429/network-and-i-o/wireless.html)
Intel does not support AP mode anymore.

So I search for a non Intel M.2 2230 key e wifi 6 card mimo 2x2.

Rsync / rsnapshot via NFS

[basti]

Hello,

I try to backup my imap folder (140 GB in 1 000 000 files).
I use rsnapshot on a mounted nfs share.

The initial sync transfer in 1 hour only 2 GB.
Iotop on the destination show 512kb/s.

Network between source and destination is 1 GBit.

Is the a way to speedup rsync?

Disable TTY login

[basti]

Hello,
i try to disable TYY1 login via /etc/security/access.conf.
I have add -:ALL:tty1 but it does not work.

Re: force apt (apt-get) to use ipv4

[basti]

Am 21.08.20 um 06:52 schrieb Georgi Naplatanov:
> On 8/20/20 4:53 PM, Bonno Bloksma wrote:
>> Hi,
>>
>> I know I have a problem with ipv6 on one machine where ipv6 is enabled but 
>> cannot reach outside the local network and ipv4 has a proper working network 
>> connection to the outside world.
>>
>> Trying to get apt (or apt-get) to update results in :
>> Ign:1 http://ftp.nl.debian.org/debian stretch InRelease
>> Ign:2 http://ftp.nl.debian.org/debian stretch-updates InRelease
>> Err:3 http://ftp.nl.debian.org/debian stretch Release
>>   Cannot initiate the connection to ftp.nl.debian.org:80 
>> (2001:67c:2564:a120::21). - connect (101: Network is unreachable) [IP: 
>> 2001:67c:2564:a120::21 80]
>> Err:4 http://ftp.nl.debian.org/debian stretch-updates Release
>>   Cannot initiate the connection to ftp.nl.debian.org:80 
>> (2001:67c:2564:a120::21). - connect (101: Network is unreachable) [IP: 
>> 2001:67c:2564:a120::21 80]
>> [...]
>> Etc.
>>
>> How can I force apt and apt-get to use IPv4 to update my Debian softwarem of 
>> this machine?
>>
>> Bonno Bloksma
>>
> 
> Hi,
> 
> if you use network manager try to disable IPv6 through GUI.
> 
> if your network interface is configured with /etc/network/interfaces
> just remove IPv6 configuration.
> 
> HTH
> 
> Kind regards
> Georgi
> 

ForceIPv4 see man apt.conf for syntax

Re: Find latest netinstall iso

[basti]

Thanks, I get it.

FYI:

curl -sl
ftp://cdimage.debian.org/cdimage/unofficial/non-free/cd-including-firmware/current/amd64/iso-cd/
| grep -m 1 -Po "[0-9.]{1,}(?=-amd64-netinst\.iso)"


On 06.08.20 12:36, Reco wrote:
>   Hi.
> 
> On Thu, Aug 06, 2020 at 12:14:23PM +0200, basti wrote:
>> Hello,
>> I try to setup a service that build a headless netinstall iso.
>> Is there a way to find the latest version number?
>>
>> I think grep the https://www.debian.org/CD/netinst/ site is not the best
>> option.
> 
> Will parsing [1] do, for instance searching kernel-image?
> 
> Reco
> 
> [1] 
> http://ftp.debian.org/debian/dists/stable/main/installer-amd64/current/images/udeb.list
> 

Find latest netinstall iso

[basti]

Hello,
I try to setup a service that build a headless netinstall iso.
Is there a way to find the latest version number?

I think grep the https://www.debian.org/CD/netinst/ site is not the best
option.

Best regards

Re: IP traffic counter

[basti]

>> I need to Monitor my monthly traffic, send and receive from my ISP.
>> In the datacenter we used nfdump. but this is a bit over killed i
>> think. I will try to use vnstat.
>> It's just to make a rough estimate how much traffic is used all over a
>> month.
>>
> 
> Can you not just look at your router? The large majority record
> traffic, you just have to remember to look every month and then clear it
> manually.
> 
> Some routers allow a fair bit to be done remotely, either through http
> or ssh, though it's often difficult to get documentation.
> 

No, I would not like depend on vendor software updates, so my router is
 raspi behind a modem

Re: IP traffic counter

[basti]

On 21.07.20 11:34, Reco wrote:
>   Hi.
> 
> On Tue, Jul 21, 2020 at 11:09:04AM +0200, basti wrote:
>> Hello, I need some kind of software for ip accounting and record my
>> traffic rx and tx. I need to know how much Gigabyte I used over a month.
> 
> nfacct, ulogd2, possibly iptables-netflow, "ip -s a l" if you need it
> quick. Good old cacti can be used for this, although it's probably an
> overkill in your case.
> Your question is too general to suggest something specific.
> 
> Reco
> 

I need to Monitor my monthly traffic, send and receive from my ISP.
In the datacenter we used nfdump. but this is a bit over killed i think.
I will try to use vnstat.
It's just to make a rough estimate how much traffic is used all over a
month.

IP traffic counter

[basti]

Hello, I need some kind of software for ip accounting and record my
traffic rx and tx. I need to know how much Gigabyte I used over a month.

any suggestions?
Best regards

lxde + ligthdm Shutdown

[basti]

Hello, when i try to shutdown from my lxde session i get:|

GDBus.Error:org.freedesktop.DBus.Error.InteractiveAuthorizationRequired:
Interactive authentication required.

When i frist logout then I can Shutdown from ligthdm.

OS: Debian Buster

Best Regards
|

Re: Is there a Debian oriented Rasberry Pi list

[basti]

Hello,

maybe https://lists.debian.org/debian-arm/

Am 03.05.20 um 13:43 schrieb Richard Owlett:

I've been thinking about what a handheld computer COULD be.
My image is heavily influenced by my recollection of Palm Pilot.

My needs include:
  >2 hours battery life
  4" by 7" nominal form factor
  touch screen input using a stylus
  display will be entirely character mode (40 chars/line would be OK)
  OS GUI not required except to say where stylus is
  OS shall be Debian {possibly with non-free drivers}

I've not found found user friendly selection guides.
A typical problem was not being able to know if a selection of 
components had mutually compatible I/O (electrical and physical).


A Debian oriented mailing list or USENET group where this would be on 
topic?

TIA

Re: Advice on upgrading to SSD

[basti]

On 02.03.20 16:39, Dan Ritter wrote:
> Tony van der Hoff wrote: 
>> Hi,
>> I'm currently running Buster on a 5 year old GigaByte motherboard with a
>> 10-year old Raid-1 array on 2 500GB disks. Although it is running fine, I'm
>> becoming a bit concerned about the longevity of this storage, so I'm
>> planning to upgrade it to a 500GB or maybe 1TB SSD from Crucial.
>>
>> My plan would be to install the SSD in the cage, and dd the contents of the
>> array onto the SSD. I would then change the BIOS to boot from the SSD,
>> making the RAID array redundant.
>>
>> Can someone please tell me whether this plan is feasible, and what pitfalls
>> I might encounter?
>>
> 
> I would recommend:
> 
> - install SSD
> - partition SSD, aligning partitions with new block sizes
> - create filesystems in SSD partitions
> - copy over filesystems with rsync
> - make changes to new /etc/fstab
> - make changes to bootloader to set new root filesystem
> - shut down machine
> - disconnect old disks
> - start machine, make BIOS changes if necessary
> - boot
> - test for functionality
> 
> file-level copying is better than block-level copying when going
> between drives of different technologies.
> 
> -dsr-
> 

Why you do not simply prepare the SSD (partition/align) and after that
add the SSD as 3rd drive to the raid?

When all is synced you can kick off the HDD's or that them to "Write
mostly".

Re: Planning a Debian NAS

[basti]

we use IPU boards as firewall in raid mode 
(https://www.ipu-system.de/index.html) with a raid.


with a big smata it could also be used as NAS. not shure if it's selled 
in other countrys.


Am 27.01.20 um 22:27 schrieb to...@tuxteam.de:

On Mon, Jan 27, 2020 at 10:23:49PM +0100, Jonas Smedegaard wrote:

[...]


A quite cheap (but not too cheap like RPi) option is Olimex LIME2 with
native SATA port:
https://www.olimex.com/Products/OLinuXino/A20/A20-OLinuXino-LIME2/


This one actually looks nice. But just one SATA port, right?

So no RAID for you ;-)

Cheers
-- t

Re: Planning a Debian NAS

[basti]

Am 27.01.20 um 21:42 schrieb deloptes:

basti wrote:


Yes a rpi can run software raid with mdadm. In this case I would use a
rpi4b with USB3 and USB to SATA adapter but be aware that the rpi is at
the moment not fully supportet by debian
(https://github.com/lategoodbye/rpi-zero/issues/43). If raspian is good
enough for your needs it would be an option. With the restrictions I
explained before.



I tried many years ago SATA adapter with USB2 and the performance was very
poor. Might be better with USB3 though, but I am still not convinced.

I saw some time ago there was extention board with SATA 2 or 4, which was
promising. Interesting to know if someone have used such thing with debian.

It depents on the Ports, ho they are connected to the host. A USB2 host 
has ma speed of 480 Mbit/s (60 MByte/s), if both HDD's/ USB Ports are 
connected to the same USB host it's a half of that, minus overhead.
Many USB to SATA adapter has a very poor performence, thats right, but 
this depents on the adapter chip.


I have test a single HDD drive with sata to USB3 adapter on the rpi4 and 
get transfer rates round about 90-100 MB/s so a RAID with 2 drives can 
have write speeds about a half of them and read speed even more I guess.


Perhaps with a SSD it can be more, USB3 specs are round about 600 MB/s.
The gigabit Ethernet has 125 MB/s in theory so it would be still enough.

But I have not test this and this is not the topic there.

Re: Planning a Debian NAS

[basti]

Am 27.01.20 um 20:43 schrieb deloptes:

Aidan Gauland wrote:


Can a r-pi be set up with RAID easily?


perhaps yes as it is more or less normal linux, but where do you attach the
disks - do you think of using a SATA extention?

I do not know what is the throughput of such extentions, but should be
considered.


Yes a rpi can run software raid with mdadm. In this case I would use a 
rpi4b with USB3 and USB to SATA adapter but be aware that the rpi is at 
the moment not fully supportet by debian 
(https://github.com/lategoodbye/rpi-zero/issues/43). If raspian is good 
enough for your needs it would be an option. With the restrictions I 
explained before.


If you are loking for a ARM NAS have a look at https://kobol.io/ it has 
SATA ports.


I have a old QNAP TS-219P II NAS but if I would build a new one I would 
looking for a bord with Atom CPU or somethink like that to minimize the 
energy costs.

Re: Planning a Debian NAS

[basti]

On 27.01.20 16:29, Klaus Singvogel wrote:
> 황병희 wrote:
>>> Mine are all RPi3+.
>>
>> +1, also i think RPi is good.
> 
> Please think about installation of a 64-bit distribution too.
> 
> As soon as your NAS stores large files, and they should become avail via
> webinterface/php, the 64-bit will become necessary.
> 
> In my case: I was running my OwnCloud on an Raspberry Pi 2 first. But as
> soon as I stored the map update pack for my car navigation on the disk
> (16 GB), php stumbles. Then I bought a 64-bit capable SBC and was happy.
> 
> RPi3 is capable of 64-bit, so my advice: be careful with installation.
> 
> Best regards,
>   Klaus.
> 

RPI3 also support "real" debian install. In my opinion it's the better
choice especially if you need initramfs and do updates.
Raspian has a horrible kernel version scheme in that case.

Best regards

Re: Debian 8

[basti]

Hello,

this should do the job.

http://archive.debian.org/README

On 02.01.20 17:53, Hector Leon wrote:
> Good Morning;
> 
>  
> 
> Is there a way to get a copy of Debian 8? Thank you !
> 
>  
> 
>  
> 
> Very Respectfully;
> 
>  
> 
> Hector M Leon
> 
>  
> 

Re: Debian 8

[basti]

Hello,

this should do the job.

http://archive.debian.org/README

On 02.01.20 17:53, Hector Leon wrote:
> Good Morning;
> 
>  
> 
> Is there a way to get a copy of Debian 8? Thank you !
> 
>  
> 
>  
> 
> Very Respectfully;
> 
>  
> 
> Hector M Leon
> 
>  
> 

Re: Build Kernel 5.5 RC1 for Raspberry4

[basti]

On 20.12.19 20:41, mick crane wrote:
> On 2019-12-20 19:28, deloptes wrote:
>> Nigel Sollars wrote:
>>
>>> You might want to run make menuconfig after copying the config ..
>>> perhaps do the same with the 4.19 kernel also and do a compare of
>>> 'what is' and 'what is not' there in the 5.5 perhaps things have been
>>> moved around a bit in the kconfig stuff.
>>>
>>
>> Not sure if this is still true, but I always run make oldconfig and then
>> make menuconfig
> 
> I seem to remember things like
> "make dist-clean"
> and
> "make mrproper"
> or something if you wanted to try it twice
> 

i have done make menuconfig and / or make dist-clean and so on.
build the kernel does not seem the problem. it looks like rpi4 cant boot
this. but i have no rpi3 at the moment to test if it runs on it.

some days ago i read on a place i cant remember that the boot process on
rpi4 is different to the older versions. perhaps this is the goal to fix?

ubuntu for example use u-boot on rpi. for me its not clear why they do
so, instead of booting the kernel direct?

Build Kernel 5.5 RC1 for Raspberry4

[basti]

Hello,

i have try as follows:

- export ARCH=arm ; export CROSS_COMPILE=aarch64-linux-gnu-
- copy config-4.19.0-6-arm64 to .config
- run make olddefconfig
- make menuconfig to add cpu-freq driver for bcm2711
- make -j'nproc' bindeb-pkg
- copy content of package to sd-card
- use Image to boot instead of vmlinuz

When i try to use the dtb from build process the following is shown on uart:

��>���p�p���|p�|�|��p�pp�ppp�p|p�|���p�p||p�p�|pp�p�p|p�pp�p�pp|pp�pp�ppp�p�p�pp�pp�p|p�p��p��|�pp�|ppp��p�|pp��pp

I don't know what this mean.

When i try to boot via u-boot with the original rasbian
bcm2711-rpi-4-b.dtb the following in shown on uart:

U-Boot 2020.01-rc4-g85432c69 (Dec 14 2019 - 20:08:51 +0100)

DRAM: 3.9 GiB
RPI 4 Model B (0xc03111)
MMC: emmc2@7e34: 0, mmcnr@7e30: 1
Loading Environment from FAT... *** Warning - bad CRC, using default
environment

In: serial
Out: serial
Err: serial
Net: Net Initialization Skipped
No ethernet found.
Hit any key to stop autoboot: 0
U-Boot> fatload mmc 0:1 ${fdt_addr_r} bcm2711-rpi-4-b.dtb
40559 bytes read in 30 ms (1.3 MiB/s)
U-Boot> fatload mmc 0:1 ${kernel_addr_r} Image.5.5
20996608 bytes read in 1374 ms (14.6 MiB/s)
U-Boot> setenv bootargs console=ttyS0,115200 root=/dev/mmcblk0p2
rootfstype=ext4 rootwait rw
U-Boot> booti ${kernel_addr_r} - ${fdt_addr_r}
## Flattened Device Tree blob at 0260
Booting using the fdt blob at 0x260
Using Device Tree in place at 0260, end 0260ce6e

Starting kernel ...

it hangs here.

I try to boot directly via kernel=Image in config.txt bit nothing is shown.
I have compare vmlinuz-4.19.0-2-arm64 (from
https://wiki.debian.org/RaspberryPiImages) and my build Image with
'file' both are MS-DOS executable.

My config.txt looks like:

arm_64bit=1
enable_uart=1
#kernel=u-boot.bin
kernel=Image5.5

Has someone try to build upstream kernel 5.5-rc1 for raspi4?

best regards

Re: Serial port software

[basti]

Hello,

use minicom or screen for example.

screen -t 'ttyUSB0 115200 8n1' /dev/ttyUSB0 115200,-ixoff,-ixon

On 27.11.19 09:43, Paul Sutton wrote:
> Hi
> 
> We have need, at the South Devon Tech Jam to gain access to a switch
> that has a serial port, but using the serial port, (having issues using
> the switch ip address).
> 
> I have a netbook running debian along with a usb -> 9 pin serial
> connector cable. and have been asked to install software to allow serial
> connection.
> 
> "Something that gives as close to a proper RS232 serial port operation
> as possible."
> 
> As there seems to be a wide range of options presented by 'apt search
> serial' I decided to ask here for recommendations please.
> 
> Thanks
> 
> Paul
> 

systemd-nspwan ipvlan

[basti]

hello list,

i have a server with a systemd container and ipvlan to get a public ip
inside of this. so far so good.

the host has for example 1.1.1.1 as IP
the container has for example 1.1.1.2 as IP

when I send packages from container to host c I see IP 1.1.1.1 as remote.

Is there a way by ipvlan to set the "outgoing" IP in this case 1.1.1.2?

macvlan s not an option because this is a hosted server and I can't get
an 2'nd mac address.

Best Regards

Re: raspberry pi installation with debian installer

[basti]

Hello,
the reason to use the way I explain was the for the current project I
need a crypt rootfs and LVM and didn't find a proper way todo this with
pre installed image.

Next to it, I try to copy all the files from d-i image to the vfat blob
partition but the installer didn't find the "cdrom" with installation
packages. Perhaps the problem that Pete explain? The vfat partition also
didn't support symlinks like d-i images need this.
I have also try to include the wlan firmware to the usb stick but d-i
installer stick/image is only ro and a wasn't able to mount it rw.

Pete thanks for this info, I did not know that a UEFI is available for
RPi3. I will try it, but at the moment a didn't have one to test.

@gunnar: has everyoneone write access to the debian wiki? I have no wiki
with public access for my own.
 
On 05.11.19 13:35, Pete Batard wrote:
> Hi All,
>
> I'm just going to point out that there exists another way to boot into
> the UI installer on RPi3, and perform an ARM64 Debian install in a
> manner that is very close to what a user would perform on an x86 PC.
>
> This is accomplished through the use of the official UEFI firmware
> that now exists for the RPi3 [1], which greatly simplifies things and
> ensures that you can get niceties such as a full UI GRUB on boot
> (where you can edit boot options for instance) and other features that
> you'd expect to find on a PC-like install.
>
> Full installation of Debian 10 is actually documented in the official
> EDK2 firmware repository [2] and you can find a ready to use UEFI
> binary archive (that also includes the WLAN firmware binaries for use
> with Linux) at [3].
>
> The only gotchas that exist at the moment are that:
> - The CD-ROM mount scripts have not been designed for FAT partition
> usage on MMC (they don't look for install media on /dev/mmcblk# as
> they do for /dev/sd# for instance, and they also appear to force the
> file system type to read-only mount, which is a bit problematic)
> - The installer partition manager is very picky with regards to what
> it considers an ESP, whereas Raspberry Pi's can't use GPT partition
> scheme or type 0xef with MBR due to the SoC's embedded bootloader
> limitations, which may require a post-install fix if you don't create
> the ESP in a manner that partition manager can be happy with.
>
> Apart from that however, the installation process is fairly
> straightforward and does provide a user experience that is almost
> identical to the one you would see when installing Debian on a UEFI
> x86 PC.
>
> So I just wanted to mention that the method being exposed below is not
> the only one that currently exists to get to a fully working Debian 10
> installer on the Raspberry Pi 3.
>
> If you are interested in the UEFI installation method, you can also
> additional walkthroughs at [4] (which is probably the most complete)
> and [5].
>
> Regards,
>
> /Pete
>
> PS: There is work currently going on to bring an UEFI firmware to the
> RPI4, so that hopefully the same process can eventually be applied
> there too.
>
> [1]
> https://github.com/tianocore/edk2-platforms/tree/master/Platform/RaspberryPi/RPi3
> [2]
> https://github.com/tianocore/edk2-platforms/blob/master/Platform/RaspberryPi/RPi3/Systems.md
> [3] https://github.com/pbatard/RPi3/releases
> [4]
> https://pete.akeo.ie/2019/07/installing-debian-arm64-on-raspberry-pi.html
> [5]
> https://www.raspberrypi.org/forums/viewtopic.php?f=50=249449=e7e3dcb4c42da263bdbe1c9661f21e61#p1523007
>
> On 2019.11.05 05:20, Gunnar Wolf wrote:
>> basti dijo [Thu, Oct 31, 2019 at 09:58:11PM +0100]:
>>> Hello Mailinglist,
>>> Hello Gunnar,
>>
>> Hi, and thanks for the explicit mention :-]
>>
>>> I get the debian installer running on my rpi3.
>>> This post is just to inform about the general possibility and for
>>> documentation propose on debian wiki.
>>
>> OK, this is quite exciting news! It's great to see the Raspberries
>> being closer to a first-tier architecture in Debian. TBH, I believe
>> for almost all RPi users it will be easier to use the installed images
>> — But yes, I can perfectly understand many will feel this to be better
>> and more official.
>>
>> Given you already did all this legwork... Could you add this
>> information to the Wiki yourself? It's always better if the person
>> that did the work and has the hands-on knowledge does it.
>>
>>> test with arm64 mode on rpi3b+
>>>
>>> you need:
>>> - sdcard with binary blob vfat partition (I use it from
>>> https://wiki.debian.org/RaspberryPiImages)
>>> - usb stick for arm64 installer
>>>
>>> todo:
>>> - download arm64-net

raspberry pi installation with debian installer

[basti]

Hello Mailinglist,
Hello Gunnar,

I get the debian installer running on my rpi3.
This post is just to inform about the general possibility and for
documentation propose on debian wiki.

test with arm64 mode on rpi3b+

you need:
- sdcard with binary blob vfat partition (I use it from
https://wiki.debian.org/RaspberryPiImages)
- usb stick for arm64 installer

todo:
- download arm64-netinstall iso
- copy iso to usb stick (cp debian-10.1.0-arm64-netinst.iso /dev/sdx)
- copy vmlinuz and initrd.gz from stick to sdcard
- edit config.txt to boot vmlinuz and initrd.gz
- insert sdcard and usb stick to raspi and start
- follow the installer
- ignore missing firmware, brcmfmac43455-sdio.bin is wlan, can be
installed later (firmware-brcm80211)
- after installation is finished edit config.txt and cmdline.txt for
your needs and copy vmlinuz and initrd
from your root to first partition of sdcard (mmcblk0p1) that the binary
blob can boot this
- edit fstab (mmcblk0p1 mount as /boot/firmware)
- install raspi3-firmware (raspi-firmware since deb11) from non-free
(edit apt source list)

toto:
- not all languages are shown correctly in installer


Best Regards,

Re: Raspberry Pi with Debian and LUKS

[basti]

OK on the serial console I'am ask for passphrase.
I found this:
https://www.linuxquestions.org/questions/linux-server-73/serial-console-and-luks-passphrase-638474/

as I understand is only the last console is able to read input.

Is the a workaround for input passphrase in serial and tty0 without
change the console order in cmdline.txt ?


On 30.10.19 19:44, basti wrote:
> Hello,
> I try to setup Raspberry Pi with Debian and LUKS.
> Pi and Debian works well with this Image
> (https://wiki.debian.org/RaspberryPiImages). Many thanks to gunar wolf.
> 
> When I try to setup luks the next boot hangs on device-mapper.
> 
> what I have done:
> 
> - do not expand the rootfs and create a 3rd partition
> - setup luks on 3rd partition and edit cryptfs
> - update initramfs included crptsetup, lvm, busybox, dm_crypt, dm_mod
> - reboot
> 
> I'm not ask for passphrase. Boot hangs on "device-mapper"
> Alt-Ctrl-Del does nothink.
> 
> I don't know how I can start busybox for debuging in this state.
> 

Re: Raspberry Pi with Debian and LUKS

[basti]

OK on the serial console I'am ask for passphrase.
I found this:
https://www.linuxquestions.org/questions/linux-server-73/serial-console-and-luks-passphrase-638474/

as I understand is only the last console is able to read input.

Is the a workaround for input passphrase in serial and tty0 without
change the console order in cmdline.txt ?


On 30.10.19 20:51, Pascal Hambourg wrote:
> Le 30/10/2019 à 19:44, basti a écrit :
>>
>> - setup luks on 3rd partition and edit cryptfs
> 
> Can you describe the setup ?
> What is cryptfs ? Do you mean /etc/crypttab ?
> 
>> - update initramfs included crptsetup, lvm, busybox, dm_crypt, dm_mod
>> - reboot
> 
> What it the point in including crypto and LVM support in the initramfs
> if the root filesystem does not use them ?
> If Debian 10, is cryptsetup-initramfs installed ?
> 
>> I'm not ask for passphrase. Boot hangs on "device-mapper"
> 
> Please post the complete messages.
> 
>> I don't know how I can start busybox for debuging in this state.
> 
> Add "break" to the kernelcommand line.
> 

Raspberry Pi with Debian and LUKS

[basti]

Hello,
I try to setup Raspberry Pi with Debian and LUKS.
Pi and Debian works well with this Image
(https://wiki.debian.org/RaspberryPiImages). Many thanks to gunar wolf.

When I try to setup luks the next boot hangs on device-mapper.

what I have done:

- do not expand the rootfs and create a 3rd partition
- setup luks on 3rd partition and edit cryptfs
- update initramfs included crptsetup, lvm, busybox, dm_crypt, dm_mod
- reboot

I'm not ask for passphrase. Boot hangs on "device-mapper"
Alt-Ctrl-Del does nothink.

I don't know how I can start busybox for debuging in this state.

Re: missing /sys/devices/system/cpu/cpu0/cpufreq/scaling_cur_freq on rasbperry pi 3b

[basti]

Hello Reco,

after some searching i have found this post
https://lkml.org/lkml/2019/6/11/965

It look like that is in the "next" branch of linux kernel:

https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/tree/arch/arm64/configs/defconfig?h=next-20190904

I hope this would be in bulleseye.

On 08.09.19 17:48, Reco wrote:
>   Hi.
> 
> On Sun, Sep 08, 2019 at 05:39:36PM +0200, basti wrote:
>> Hello,
>> has someone run debian on rpi 3b or 3b+?
>> can anybody confirm this
>> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=939284 bug?
>> kernel  4.19.0-6-arm64 does not solve this problem.
> 
> Confirming. And it's not going to change unless someone ports
> bcm2835-cpufreq.c [1] to the mainline kernel.
> 
> Reco
> 
> [1] 
> https://github.com/raspberrypi/linux/blob/rpi-4.1.y/drivers/cpufreq/bcm2835-cpufreq.c
> 

missing /sys/devices/system/cpu/cpu0/cpufreq/scaling_cur_freq on rasbperry pi 3b

[basti]

Hello,
has someone run debian on rpi 3b or 3b+?
can anybody confirm this
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=939284 bug?
kernel  4.19.0-6-arm64 does not solve this problem.

Best Regards

systemd-nspawn container with non systemd system

[basti]

Hello,

in the past i use systemd-nspawn containers with different debian/
raspbian versions. so far so good.
now i try to use alpine linux (a non systemd OS) in the container.

systemd-nspawn -b --directory=/var/lib/machines/...

can start and i can login. but "machinectl shell" or "machinectl login"
does not work

(Failed to get shell PTY: The name org.freedesktop.systemd1 was not
provided by any .service files)

Is there an other way to get a shell besides ssh ?

best regards

Re: DKIM, multiple domains, same server -- want to always sign, not just for remote delivery

[basti]

> Hi,
> 
> I have DKIM setup, however, it only signs messages that are being
> delivered via SMTP to another server.
> 
> Why is it not valid to sign to the same domain name and/or other
> domain names served by the same mail server and NOT having to make an
> SMTP outgoing connection?
> 
> How can I adjust exim4 so that it will sign ALL outgoing emails, even
> if "outgoing" is only to the same server to another within the same
> and/or different domain name(s) ... ?
> 
> As this email is going external, it will be signed, but a local bcc
> copy to myself will not be signed.
> 
> btw all external tests for the signature work fine, but the list
> interferes with the email headers in such a way that checking the DKIM
> signature fails... (as evidenced from an older incoming email sent by
> myself to the list and coming in via the list).
> 
> Thanks and Kind Regards
> AndrewM
> 
Hello, I think the exim mailing list is a better place for answer this
question. I also prefer a "simple" exim4.conf without all the debian stuff.

/usr/share/doc/exim4-base/spec.txt.gz is a very good manual page

In my opinion is enough to sign mails send via SMTP.

Best Regards

Re: slow wireless connection

[basti]

Fist of all a 150 MBit/s Wireless N is MIMO 1x1 (1 antenna).
Intel(R) Dual Band Wireless-AC 8265 is 300 Mbit/s with MIMO 2x2
see
https://ark.intel.com/content/www/us/en/ark/products/94150/intel-dual-band-wireless-ac-8265.html

150 MBit/s = 18,75 MB/s
300 MBit/s = simply the double

There is also some overhead, transmission errors, signal quality and so
on that have influence. As I can remember the are also  20 MHz and 40
MHz mode, I do not known at the moment if this is relevant there.

Sometimes Segmentation Offload can be a problem, I have not check if one
or both of than support it.

Last but not least do not mix mbit/s with mb/s.

Hope that help.
Best Regards

On 11.08.19 19:11, kamaraju kusumanchi wrote:
> The internet download speed as measured by (speedtest.net) is ~15 Mbps
> when I try to connect from my desktop. From a different machine (my
> laptop), I get around ~30-40 Mbps. Could you please tell me how to fix
> this?
> 
> Network connection:
> {desktop or laptop) connected wireless to -> linksys wrt54g router ->
> ISP (optimum)
> 
> On the desktop, I am using "Panda Ultra 150Mbps Wireless N USB
> Adapter"  to connect to
> the router.
> 
> The laptop has a builtin wifi adapter, Intel(R) Dual Band Wireless-AC 8265.
> 
> The desktop is running Debian stretch. The laptop is running Windows 10 Home.
> 
> Network adapter information on the desktop using lshw:
> % sudo lshw -C network
>   *-network DISABLED
>description: Ethernet interface
>product: NetXtreme BCM5722 Gigabit Ethernet PCI Express
>vendor: Broadcom Limited
>physical id: 0
>bus info: pci@:01:00.0
>logical name: eth0
>version: 00
>serial: 00:10:18:ea:76:12
>capacity: 1Gbit/s
>width: 64 bits
>clock: 33MHz
>capabilities: pm vpd msi pciexpress bus_master cap_list
> ethernet physical tp 10bt 10bt-fd 100bt 100bt-fd 100
> 0bt 1000bt-fd autonegotiation
>configuration: autonegotiation=on broadcast=yes driver=tg3
> driverversion=3.137 firmware=5722-v3.09 latency=0
>  link=no multicast=yes port=twisted pair
>resources: irq:26 memory:f3ef-f3ef
>   *-network DISABLED
>description: Ethernet interface
>product: NetXtreme BCM5761 Gigabit Ethernet PCIe
>vendor: Broadcom Limited
>physical id: 0
>bus info: pci@:05:00.0
>logical name: eth1
>version: 10
>serial: d4:ae:52:c2:bc:e3
>capacity: 1Gbit/s
>width: 64 bits
>clock: 33MHz
>capabilities: pm vpd msi pciexpress bus_master cap_list
> ethernet physical tp 10bt 10bt-fd 100bt 100bt-fd 100
> 0bt 1000bt-fd autonegotiation
>configuration: autonegotiation=on broadcast=yes driver=tg3
> driverversion=3.137 firmware=5761-v3.68 latency=0
>  link=no multicast=yes port=twisted pair
>resources: irq:17 memory:f3de-f3de
> memory:f3df-f3df
>   *-network
>description: Wireless interface
>physical id: 1
>bus info: usb@7:3
>logical name: wlan0
>serial: 7c:dd:90:8b:a1:14
>capabilities: ethernet physical wireless
>configuration: broadcast=yes driver=rt2800usb
> driverversion=4.9.0-9-amd64 firmware=0.36 ip=192.168.0.12 link
> =yes multicast=yes wireless=IEEE 802.11
> 

Re: kernel 5.2.x and firmware-iwlwifi: incompatibilities?

[basti]

Migual has you update to 4.19.37-5+deb10u1 ?

With previews version of 4.19 I had problems after suspend to disk.
Now it seems to be fixed.

There are several Bug Reports with "iwlwifi 4.19 suspend" when you
search in on google.

Best Regards

On 11.08.19 14:43, Miguel A. Vallejo wrote:
> Same problem here. Kernel 5.2.x makes my MT76x2 wifi very unstable,
> with bad performance and lot of dropouts. Running 4.19.x for now.
> 
>> I am using Sid on my laptop (HP ZBook 15) and since first 
>> linux-image-5.2.0-1 and then linux-image-5.2.0-2
>> the wifi is not stable and goes down after few seconds.
> 

Re: Buster installer on USB searches for CDROM instead of using USB drive

[basti]

Hello,
I have the same problem, with netinstall iso on usb stick it search for
cd at hatdware detection step ab abort this with an error.

usb stick is create with unetbootin an test in kvm.

On 20.07.19 14:20, Thomas Schmitt wrote:
> Hi,
> 
> TomK/Brian_S  wrote:
>> I disabled all boot devices in the BIOS, except the USB drive. It works
>> now.
> 
> This is surprising and unplausible even within the usual range of firmware
> madness.
> 
> I understand that the "mount CDROM step" is performed by a Linux kernel
> on behalf of software in the initial RAM disk. The boot device settings of
> the firmware should have no influence on the Linux kernel.
> 
> Since i suspect a race condition between kernel device assessment and
> assessment requests by the initrd, your success might be pure luck.
> Or your failure might have been pure bad luck.
> Not many others complain about problems with Debian 10 ISOs on USB stick.
> 
> Well, it will hardly be fixed unless somebody can make it reproducible
> and perform experiments to find ways to make it non-reproducible.
> 
> 
> Have a nice day :)
> 
> Thomas
> 

Re: Buster installer on USB searches for CDROM instead of using USB drive

[basti]

Hello,
I have the same problem, with netinstall iso on usb stick it search for
cd at hatdware detection step ab abort this with an error.

usb stick is create with unetbootin an test in kvm.

On 20.07.19 14:20, Thomas Schmitt wrote:
> Hi,
> 
> TomK/Brian_S  wrote:
>> I disabled all boot devices in the BIOS, except the USB drive. It works
>> now.
> 
> This is surprising and unplausible even within the usual range of firmware
> madness.
> 
> I understand that the "mount CDROM step" is performed by a Linux kernel
> on behalf of software in the initial RAM disk. The boot device settings of
> the firmware should have no influence on the Linux kernel.
> 
> Since i suspect a race condition between kernel device assessment and
> assessment requests by the initrd, your success might be pure luck.
> Or your failure might have been pure bad luck.
> Not many others complain about problems with Debian 10 ISOs on USB stick.
> 
> Well, it will hardly be fixed unless somebody can make it reproducible
> and perform experiments to find ways to make it non-reproducible.
> 
> 
> Have a nice day :)
> 
> Thomas
> 

Re: Debian Buster RC 2 wont start GUI on a Radeon HD 5750

[basti]

Hello,
you need:

firmware-amd-graphics *and*
firmware-linux-nonfree

I had a similar Problem last week.

Best Regards,

On 01.07.19 12:19, aprekates wrote:
> I used the installer with the firmware included.
> 
> I had to search it for an hour and the package
> that was needed is: firmware-linux-nonfree
> 
> Alexandros
> 

Hddtemp vs smartctl

[basti]

Hello,
I have a toshiba usb drive. With smartctl i can see some values, hddtemp
show nothing:

smartctl -i /dev/sdc; smartctl -a /dev/sdc | grep 194
smartctl 6.6 2016-05-31 r4324 [i686-linux-4.9.0-9-686-pae] (local build)
Copyright (C) 2002-16, Bruce Allen, Christian Franke, www.smartmontools.org

=== START OF INFORMATION SECTION ===
Device Model: TOSHIBA MQ01ACF050
Serial Number:xxx
LU WWN Device Id: 5 39 653f02365
Firmware Version: AV001U
User Capacity:500.107.862.016 bytes [500 GB]
Sector Sizes: 512 bytes logical, 4096 bytes physical
Rotation Rate:7200 rpm
Form Factor:  2.5 inches
Device is:Not in smartctl database [for details use: -P showall]
ATA Version is:   ATA8-ACS (minor revision not indicated)
SATA Version is:  SATA 3.0, 3.0 Gb/s (current: 3.0 Gb/s)
Local Time is:Tue Jun 25 09:29:26 2019 CEST
SMART support is: Available - device has SMART capability.
SMART support is: Enabled

194 Temperature_Celsius 0x0022   100   100   000Old_age   Always
  -   39 (Min/Max 18/48)


hddtemp /dev/sdc --debug

= hddtemp 0.3-beta15 ==
Modell: TOSHIBA


I also try to add the drive to database, with the same result.

hddtemp /dev/sdc --debug --drivebase| grep Tos

MK4313MAT   |   220 | Toshiba MK4313MAT
TOSHIBA MK1517GAP   | 0 | Toshiba MK1517GAP
TOSHIBA MK2018GAS   |   226 | Toshiba MK2018GAS
TOSHIBA MK3017GAP   | 0 | Toshiba MK3017GAP
TOSHIBA MQ01ACF050  |   194 | Toshiba MQ01ACF050

java browser plugin on buster

[basti]

Hello, i have an old Server with HP ILO2. The remote console on this
version of ilo need an java browser Plugin (not webstart).

in stretch there was no problem i have used an old firefox 36 or so in
"portable" mode.

now the icedtea plugin seem not available anymore.
does someone konw how to get it working?