Re: Advice on encryption of external disk

2015-02-04 Thread Florent Peterschmitt
On 02/04/2015 02:20 PM, Celejar wrote:
> Hi,
> 
> I am preparing a USB external HDD for use with my T61 ThinkPad (Core 2
> Duo CPU T7300 @ 2.00GHz). The disk will fulfill two, very different
> functions: general backup for files (mail, documents, etc.) via
> rsnapshot (rsync type backup), and overflow storage for my full main
> HDD ("big" files such as media: audio, video, PDFs).
> 
> For the backups, I need encryption; the media storage doesn't require
> it. Currently, I use different partitions on my external disks: plain
> for storage, and encrypted (dmcrypt / LUKS) for the backups (and
> storage of sensitive information). This obviously adds complexity, so
> I'm thinking of going to one encrypted partition for everything. The
> obvious possible downside is performance: everything I read indicates
> that there is a significant hit, even on modern hardware, but I don't
> really know if it's current, accurate, or relevant to my use case.
> 
> What would the experts recommend: one partition for everything for
> simplicity, or separate ones for a possible performance advantage?
> 
> Celejar
> 
> 

Hello,

Personaly, I use full encryption and each partition is on a logical
volume, with LVM physical volume encrypted.

Say I have /dev/sda2 of 100GB, it is encrypted with luks.

I open this luks volume and setup LVM with pvcreate on
/dev/mapper/luks_sda2, then create my LV.

About performance downside, if you have a recent processor with aesni
instructions (for intel, dunno for AMD but they have the same feature
too), the Linux kernel does have a module to handle hardware encryption,
which speeds up the job.


But, in both cases (with or without instructions), you will not really
notice any difference even with a quite old processor, like core i2. You
may find it a little slower at machine's first boot. If we speak about
Desktop computers. Never tried to setup encryption on loaded servers.


Also, I dont really understand why you want to do "half encryption".
Only backups and not other things? Sounds strange to me.

But you're free to do so of course.



signature.asc
Description: OpenPGP digital signature


Re: Glibc 2.15 not found?

2015-01-29 Thread Florent Peterschmitt
On 01/29/2015 07:59 PM, Stephen wrote:
> 
> On 01/29/2015 10:46 AM, Florent Peterschmitt wrote:
>> Or a custom glibc installed in an isolated prefix, then playing with
>> LD_LIBRARY_PATH to load the new glibc.
> 
>> Or if you don't want to build it by hand, you may do something tricky:
>> extracting the Jessie package by hand in, again, an isolated prefix.
>> But i'm not that sure it would work.
> 
> I wouldn't mind building it by hand, I'm trying to get more 'hands on'
> (pun completely intended) with Debian. I am just a novice user though so
> I have a very faint clue what your talking about...

I understand.

Well, you don't have much choices. Force-install a newer glibc in the
base system will break your entire system, so here are the options:

 * install another version of Debian containing the required glibc version

 * install another distro if you don't want to use "unstable" softwares.
if you want to stay on a debian-like and are a novice, can I suggest you
Ubuntu or LinuxMint?

 * build your glibc by hand (see LFS pages[0], they can be helpful) but
install files (not configuration) in, say, /opt/glibc-. Then to
use you'll need to play with some environment variables. At least you
know how to run a program from command line, so env variables are just
the next step :-)

 * download the newer, packaged, version of glibc from unstable or
testing Debian, extract it by hand and put files in a prefix, like
before. Then use env vars an pray for it to work.



[0]
http://www.linuxfromscratch.org/lfs/view/development/chapter06/glibc.html



signature.asc
Description: OpenPGP digital signature


Re: Glibc 2.15 not found?

2015-01-29 Thread Florent Peterschmitt
On 01/29/2015 07:31 PM, Sven Hartge wrote:
> Stephen  wrote:
> 
>> I'm trying to run the game VV on my system but whenever I try and
>> launch it I get the following error: "./x86/vv.x86:
>> /lib/i386-linux-gnu/i686/cmov/libc.so.6: version `GLIBC_2.15' not
>> found (required by ./x86/libSDL2-2.0.so.0)"
> 
>> I tried looking for glibc 2.15 in the software repository but could
>> find no such package. How do I satisfy this dependency then?
> 
> You need at least Debian Jessie/Testing für a glibc new enough.
> 
> Grüße,
> Sven.
> 

Or a custom glibc installed in an isolated prefix, then playing with
LD_LIBRARY_PATH to load the new glibc.

Or if you don't want to build it by hand, you may do something tricky:
extracting the Jessie package by hand in, again, an isolated prefix. But
i'm not that sure it would work.



signature.asc
Description: OpenPGP digital signature


Re: C++ compiler g++-4.9

2014-12-10 Thread Florent Peterschmitt
 

Le 2014-12-10 13:23, Nick Mpallas a écrit : 

> Hi guys, 
> I am building a platform and I need to compile apache mesos from sources. The 
> issue is that the guys the require support for specific c++11 features that 
> in the 4.7 compiler currently supported by debian aren't there. Will the g++ 
> compiler will be updated?We would like to use debian as the backbone 
> operating system for our cluster. 
> 
> regards 
> 
> -- 
> 
> nm
> "camel is a horse made up in a laboratory"

Stop me if I'm wrong, but: no major updates in a release. GCC 4.9 should
be in Jessie, and is in Sid, but Jessie isn't yet released and Sid is
not a release. 
-- 

Florent Peterschmitt | Please:
flor...@peterschmitt.fr | * Avoid HTML/RTF in E-mail.
http://florent.peterschmitt.fr | * Send PDF for documents.
Proudly powered by FLOSS | * Trim your quotations. Really.
 | Thank you 
 

Re: Debian by default / Debian jessie

2014-12-05 Thread Florent Peterschmitt

Le 2014-12-05 11:47, Frederic Robert a écrit :

Hello,

How are you? Pulseaudio is used by default. I'm using debian jessie.
I'd like to use Alsa by default. I removed pulseaudio (apt-get remove
pulseaudio) and installed alsa-base. When i reboot the computer, i
don't have sound :(

Greetings,

--
Frederic Robert


You may use alsamixer to manage sound levels and unmute channels. Or any 
other application like kmix or XFCE|GNOME's volume control…


--
Florent Peterschmitt | Please:
flor...@peterschmitt.fr | * Avoid HTML/RTF in E-mail.
http://florent.peterschmitt.fr | * Send PDF for documents.
Proudly powered by FLOSS | * Trim your quotations. Really.
 | Thank you


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: 
https://lists.debian.org/46661569a6b6d7500fde5e1ffcc69...@peterschmitt.fr



Re: ALSA - Multiple Sources...?

2014-11-27 Thread Florent Peterschmitt
On 11/27/2014 10:53 AM, ho...@rumormillnews.com wrote:
[snip]
> Agreed. :)  dpkg -l says:
> 
>  dpkg -l |grep pulseaudio
> ii  gstreamer0.10-pulseaudio:amd64 
> 0.10.31-3+nmu4+b1  amd64GStreamer plugin for
> PulseAudio
> ii  gstreamer1.0-pulseaudio:amd64   1.4.4-2   
> amd64GStreamer plugin for PulseAudio
> rc  pulseaudio  2.0-3 
> amd64PulseAudio sound server
> 
> Maybe the 'rc' at the start of that line has a meaning I don't know? 
> Anyway - it looks like pulseaudio is not actually present.  I agree, too,
> that ALSA should allow mixing without extra configuration.  That's what it
> had been doing for years, until a recent update apparently changed
> something.
> 
> --hobie
> 
> 


"rc" means you have some configuration files lying around your system.

apt-get purge pulseaudio will remove them.



signature.asc
Description: OpenPGP digital signature


Re: Kernel crash 3.17.2 unable to use kvm

2014-11-04 Thread Florent Peterschmitt
Le 03/11/2014 17:03, Bhasker C V a écrit :
> Hi,
> 
>  I tried to compile the latest kernel 3.17.2 and when loading
> kvm_intel, the kernel crashes (not catastrophically but as below) and
> kvm_intel never works.
> The old kernel 3.14.x works fine but I dont want to use an older
> kernel as a solution to the current issue.
> 
> Can somebody help to tell me if this is an environment issue or a real
> kernel bug ?
> This is a DELL D620 with core2duo T5520 (vmx enabled)
> Thanks
> 
> ---
> 
> [  349.007575] general protection fault:  [#1] SMP
[snip]
> 

You have a 3.17 kernel config based on a previous working kernel
version, or you made it from scratch?



signature.asc
Description: OpenPGP digital signature


Re: Debian fork

2014-10-21 Thread Florent Peterschmitt
Le 21/10/2014 18:46, Peter Nieman a écrit :
> On 21/10/14 17:53, Doug wrote:
>> What do you suggest instead of cups? Or do you not print?
> 
> I'm using good old lpr with a self-made GUI. I consider cups an obese
> replacement of something I never had a problem with.
> But even though I don't have cups, I can't get rid of libcups2. If I try
> to remove it, aptitude wants to remove 32 other packages. Crazy, isn't it?
> 
> p.
> 
> 
That's the "problem" of packages. If other users want to use CUPS with
their softwares, *shared* libraries are needed.

I mostly read this list, and I see most of people who should use Gentoo
or Slackware rather than Debian…



signature.asc
Description: OpenPGP digital signature


About chromium in Jessie - "API keys missing" and Clang

2014-10-13 Thread Florent Peterschmitt
Hello,

I'm curious about two thing in the chromium browser package in Debian
Jessie:

 - I (we?) get a message about Chromium API keys missing. Does that
avoid Chromium being able to speak with google for sync and so on? (If
yes, it's a good idea, for me)

 - In the changelog, I don't see anything about that, but I see "build
with clang instead of gcc". Does this augurs some packages being built
with clang in Debian, or it is just for Chromium?


Thanks

-- 
Florent Peterschmitt   | Please:
flor...@peterschmitt.fr|  * Avoid HTML/RTF in E-mail.
http://florent.peterschmitt.fr |  * Send PDF for documents.
Proudly powered by FLOSS   |  * Trim your quotations. Really.
   | Thank you :)



signature.asc
Description: OpenPGP digital signature


Re: vlc

2014-09-11 Thread Florent Peterschmitt
You should also try to change video output in preferences, and disable
hardware acceleration if no change.

Le 11/09/2014 22:05, Frank McCormick a écrit :
> On my Sid installation VLC is broken. It does not display mpegs or mkvs.
> I have tried all the output modules and none make any difference. All I
> get is a black screen. Audio does work however.
> 
> How can I track down the problem?
> 
> Thanks
> 
> 
> 
> 



signature.asc
Description: OpenPGP digital signature


Re: vlc

2014-09-11 Thread Florent Peterschmitt
Hi.

It's ok for me.

It may depends on contained formats. It sounds like a video problem
rather than an container format.

Find what is the video format you are reading.

Le 11/09/2014 22:05, Frank McCormick a écrit :
> On my Sid installation VLC is broken. It does not display mpegs or mkvs.
> I have tried all the output modules and none make any difference. All I
> get is a black screen. Audio does work however.
> 
> How can I track down the problem?
> 
> Thanks
> 
> 
> 
> 



signature.asc
Description: OpenPGP digital signature


Re: anyone knows this errors ?

2014-08-22 Thread Florent Peterschmitt
Hi,

I had almost the same problem of segfault with my machine, after I
changed the RAM.

You should run a memtest, then try to cleanup your RAM and slots, the
re-run the memtest.

You can also connect one memory module and run memtest on each one.

For me, I think I had some dust of bad contacts in slots. (it's a quite
old hardware so…)

Le 22/08/2014 17:06, laurent debian a écrit :
> I have this in my syslog and I am wondering what it is
> pool[1655]: segfault at 72200 ip 7fa419598200 sp 7fa4149d30c0
> error 4 in libc-2.19.so[7fa41955+19f000]
> 
> and
> kernel: [  507.759144] perf samples too long (2509 > 2500), lowering
> kernel.perf_event_max_sample_rate to 5
> kernel:[ 3696.866261] perf samples too long (5006 > 5000), lowering
> kernel.perf_event_max_sample_rate to 25000
> 
> 

-- 
Florent Peterschmitt   | Please:
flor...@peterschmitt.fr|  * Avoid HTML/RTF in E-mail.
http://florent.peterschmitt.fr |  * Send PDF for documents.
Proudly powered by FLOSS   |  * Trim your quotations. Really.
   | Thank you :)



signature.asc
Description: OpenPGP digital signature


Re: 3.13 Kernel

2014-02-25 Thread Florent Peterschmitt
When the 3.13.0 was out, some problems with filesystems seems to get in[0].

But in general I don't see any improvement, I run VMs and heavy things
and it still seems as long as usual :)

So it might be a very subjective impression ;) If you want, you should
make some benchmarks to get more formal results.

Run a database, 3D rendering, filesystem&cpu stress and so on…

[0]
http://www.phoronix.com/scan.php?page=article&item=linux_313ssd_filesystems&num=1

On 25/02/2014 08:38, David Baron wrote:
> Is it just my very subjective impression or are these significantly faster 
> than 
> 3.12??



signature.asc
Description: OpenPGP digital signature


Re: Debian Users list - signal to noise... is this normal?

2014-01-19 Thread Florent Peterschmitt
Le 19/01/2014 06:43, Артур Истомин a écrit :
> On Sat, Jan 18, 2014 at 09:31:21AM -0500, Tanstaafl wrote:
>> Hi all,
>>
>> If this garbage OT crap ('sad but true Linux sucks', and 'Hey Humans
>> I'm a machine') is typical of this list, is there a debian related
>> list that doesn't allow such crap to go on and on and on and on and
>> on and on ad nauseum?
>>
>> If it is typical, and there is no other option for list based debian
>> support, I guess its time to start building another kill file.
> 
> It is normal. I think you do not understand the sense and mechanics of
> open source community. So I think you need immediately reinstall
> Microsoft Windows 7 or 8 on your computer and those bastards will no
> longer get you.

More than the open source community, the popularity of a project is for
something (can we say that?) about this noise…

-- 
Florent Peterschmitt   | Please:
flor...@peterschmitt.fr|  * Avoid HTML/RTF in E-mail.
http://florent.peterschmitt.fr |  * Send PDF for documents.
Proudly powered by Open Source |  * Trim your quotations. Really.
   | Thank you :)



signature.asc
Description: OpenPGP digital signature


Re: sudo 1.8.9p3-1 in Debian sid - infinite loop?

2014-01-14 Thread Florent Peterschmitt
Le 14/01/2014 19:24, Florent Peterschmitt a écrit :
> Hi,
> 
> I think there is something like an infinite loop in the latest sudo in
> Debian sid.
> 
> Issuing a sudo -s make sudo consuming 100% CPU.
> 
> An strace gives:
> 
> recvfrom(3, "", 8, MSG_WAITALL, NULL, NULL) = 0
> poll([{fd=6, events=POLLIN}, {fd=3, events=POLLIN}], 2, 4294967295) = 1
> ([{fd=3, revents=POLLIN|POLLHUP}])
> recvfrom(3, "", 8, MSG_WAITALL, NULL, NULL) = 0
> poll([{fd=6, events=POLLIN}, {fd=3, events=POLLIN}], 2, 4294967295) = 1
> ([{fd=3, revents=POLLIN|POLLHUP}])
> recvfrom(3, "", 8, MSG_WAITALL, NULL, NULL) = 0
> poll([{fd=6, events=POLLIN}, {fd=3, events=POLLIN}], 2, 4294967295) = 1
> ([{fd=3, revents=POLLIN|POLLHUP}])
> recvfrom(3, "", 8, MSG_WAITALL, NULL, NULL) = 0
> poll([{fd=6, events=POLLIN}, {fd=3, events=POLLIN}], 2, 4294967295) = 1
> ([{fd=3, revents=POLLIN|POLLHUP}])
> recvfrom(3, "", 8, MSG_WAITALL, NULL, NULL) = 0
> poll([{fd=6, events=POLLIN}, {fd=3, events=POLLIN}], 2, 4294967295) = 1
> ([{fd=3, revents=POLLIN|POLLHUP}])

Here is the bug:

http://www.sudo.ws/bugs/show_bug.cgi?id=631

And workaround:

In /etc/sudoers, add:

Defaults use_pty


-- 
Florent Peterschmitt   | Please:
flor...@peterschmitt.fr|  * Avoid HTML/RTF in E-mail.
http://florent.peterschmitt.fr |  * Send PDF for documents.
Proudly powered by Open Source |  * Trim your quotations. Really.
   | Thank you :)



signature.asc
Description: OpenPGP digital signature


sudo 1.8.9p3-1 in Debian sid - infinite loop?

2014-01-14 Thread Florent Peterschmitt
Hi,

I think there is something like an infinite loop in the latest sudo in
Debian sid.

Issuing a sudo -s make sudo consuming 100% CPU.

An strace gives:

recvfrom(3, "", 8, MSG_WAITALL, NULL, NULL) = 0
poll([{fd=6, events=POLLIN}, {fd=3, events=POLLIN}], 2, 4294967295) = 1
([{fd=3, revents=POLLIN|POLLHUP}])
recvfrom(3, "", 8, MSG_WAITALL, NULL, NULL) = 0
poll([{fd=6, events=POLLIN}, {fd=3, events=POLLIN}], 2, 4294967295) = 1
([{fd=3, revents=POLLIN|POLLHUP}])
recvfrom(3, "", 8, MSG_WAITALL, NULL, NULL) = 0
poll([{fd=6, events=POLLIN}, {fd=3, events=POLLIN}], 2, 4294967295) = 1
([{fd=3, revents=POLLIN|POLLHUP}])
recvfrom(3, "", 8, MSG_WAITALL, NULL, NULL) = 0
poll([{fd=6, events=POLLIN}, {fd=3, events=POLLIN}], 2, 4294967295) = 1
([{fd=3, revents=POLLIN|POLLHUP}])
recvfrom(3, "", 8, MSG_WAITALL, NULL, NULL) = 0
poll([{fd=6, events=POLLIN}, {fd=3, events=POLLIN}], 2, 4294967295) = 1
([{fd=3, revents=POLLIN|POLLHUP}])



-- 
Florent Peterschmitt   | Please:
flor...@peterschmitt.fr|  * Avoid HTML/RTF in E-mail.
http://florent.peterschmitt.fr |  * Send PDF for documents.
Proudly powered by Open Source |  * Trim your quotations. Really.
   | Thank you :)



signature.asc
Description: OpenPGP digital signature