Re: Assorted arm-buster problems - network configuration

2019-07-07 Thread andreimpopescu
On Sb, 06 iul 19, 20:30:02, Gene Heskett wrote:
> 
> Its part of the buster-rc2 installed image, 

Is this an image you downloaded from somewhere (where?) or of your own 
creation (what method? Debian Installer, debootstrap, etc.)

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Assorted arm-buster problems - network configuration

2019-07-07 Thread andreimpopescu
On Sb, 06 iul 19, 18:14:04, Gene Heskett wrote:
> 
> If you read the full thread, you will find where I found and fixed that 
> problem, by killing dhcpd5 with htop, and restarting networking, and 
> the problem was fixed, everything then worked correctly, 

Did you ever find out why dhcpcd5 was even starting?

As far as I know DHCP clients start only when called by network managing 
software (ifupdown, network-manager, etc.), or some custom networking 
scripts on your system. In this case it might show up again on the next 
reboot.

BTW, it's still not clear to me whether this is about a clean buster 
install or some image based on buster.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Assorted arm-buster problems - network configuration

2019-07-07 Thread andreimpopescu
On Sb, 06 iul 19, 15:36:37, Lee wrote:
> 
> "an accident waiting to happen" was from me and I also gave the rfc
> for mdns, so that's hardly "nothing of substance to support that
> view."  If you're having trouble finding the rfc, it's here
>   https://tools.ietf.org/html/rfc6762

Care to elaborate though?

The dangers are not at all obvious to me, possibly because I haven't 
used it much (if at all).
 
Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Assorted arm-buster problems - network configuration

2019-07-05 Thread andreimpopescu
On Vi, 05 iul 19, 06:35:53, Gene Heskett wrote:
> On Thursday 04 July 2019 23:54:21 andreimpope...@gmail.com wrote:
> >
> > Just the fact that you are running Raspbian instead of pure Debian is
> > already an important clue and possibly a major hindrance in helping
> > you (we don't know what other customizations have been done to that).
> >
> Humm, someplace, in the last week, I read on a debian site, that raspian 
> was the officially supported armhf version of debian ???  Or was that my 
> imagination, out to play without a chaperone?

The clue is in the name: if it's not Debian it's not called Debian.

Raspbian was initially created because Debian's armhf port did not work 
on the Raspberry Pi model B. It was basically just recompiling official 
Debian packages to work on the Raspberry Pi.

Various parties started creating images based on Raspbian, including the 
Raspberry Pi foundation. What *other* changes they did to those images 
one can only guess.

This is the same with all other images provided by various projects 
and/or manufacturers and/or community members.

I've seen customizations starting from changing the default bash prompt 
up to proprietary kernels (with serious security bugs) and libraries, or 
custom scripts to resize your partitions and configure your network.

It was a very happy moment for me when I could use pure Debian on my 
Pine A64 ;)

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Assorted arm-buster problems - network configuration

2019-07-05 Thread andreimpopescu
On Vi, 05 iul 19, 21:19:29, Gene Heskett wrote:
> On Friday 05 July 2019 12:08:45 David Wright wrote:
> 
> > As I've said, though, I'll go no further in looking at the problems
> > you have because I think that many of them are of your own making.
> 
> Thats also true, simply because I'm the last one on the planet using 
> hosts files and no dhcpd's of any kind.

Because many home networks do have a working DHCP server (typically the 
internet modem/router) it makes sense to have this as a *default* 
configuration. It just works for so many users.

I'm using as static network right now, as I'm sure many other 
debian-user readers do. It is a basic functionality of every software 
designed to manage your network, including Network Manager.

In order to switch to static one has to figure out:

 1. How is networking configured on this particular device

If you can't figure it out ask the ones providing the 
device/software. In case of Raspbian / Armbian it is *not* Debian 
(the clue is in the name).

 2. What is the *correct* method to alter its configuration

   This is usually quite straightforward once you figured out 1.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Assorted arm-buster problems - network configuration

2019-07-05 Thread andreimpopescu
On Vi, 05 iul 19, 15:17:16, Reco wrote:
> 
> Debian may or may not get there - for instance, I heard some good news
> about Raspberry Pi support in buster (not to be confused with Raspbian).

Care to submit an entry for the Release Notes, similar to the one for 
Allwinner A64 based boards?

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Assorted arm-buster problems - network configuration

2019-07-04 Thread andreimpopescu
On Jo, 04 iul 19, 04:42:40, Gene Heskett wrote:
> On Thursday 04 July 2019 03:16:31 andreimpope...@gmail.com wrote:
> >
> > 3. Information on anything (and I do mean anything) else you might
> > have done to your network configuration after installing buster,
> > including but not limited to:
> >  * installing stuff, especially if from source
> First, on a u-booting raspi you don't "install". You either download an 
> image and put it on a u-sd card with dd, or you generate your own image.
> 
> Which is what I have done by using a utility from guysoft called 
> RealtimePi, which takes the June 20th version of raspian buster lite 
> apart, and supposedly puts it back together with a realtime patched 
> version of a compatible kernel, which should have been a 4.19.50-rt-v7 
> kernel, but when put on a u-sd, and the u-sd booted, turns out to have 
> the unpatched kernel in it.  Why I watched it spend an hour building the 
> older 4.4.114-rt-v7 kernel and then it didn't use it is something I have 
> not found yet in the build.log. Which I can't get to ATM because ssh 
> isn't working either.

Just the fact that you are running Raspbian instead of pure Debian is 
already an important clue and possibly a major hindrance in helping you 
(we don't know what other customizations have been done to that).

I will bet you this though: that image has usable dpkg and apt. If I'm 
right, do you promise to put the "shotgun" away? :)

If I'm wrong I offer to dig up my Raspberry Pi and try to reproduce your 
problems.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: armv7 vs buster sudo complains about hostname or something

2019-07-04 Thread andreimpopescu
On Jo, 04 iul 19, 03:30:55, Gene Heskett wrote:
> On Thursday 04 July 2019 02:47:50 Andrei POPESCU wrote:
> >
> > I seem to recall sudo cares about /etc/hosts.
> 
> But I have that address TAB hostname.domain.name TAB alias in the hosts 
> file. No errors there.

How about showing us (attaching) the complete file ;)

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Assorted arm-buster problems - network configuration

2019-07-04 Thread andreimpopescu
On Jo, 04 iul 19, 11:40:30, Gene Heskett wrote:
> >
> > 1. content of /etc/network/interfaces and all files under
> > /etc/network/interfaces.d/
> pi@picnc:~ $ cat /etc/network/interfaces.d/*

Is below the literal output of the cat above?

Please post also /etc/network/interfaces.

> auto eth0
> 
> iface eth0 inet static
> address 192.168.71.12/24
> gateway 192.168.71.1
> post-up echo 1 > /proc/sysy/ipv6/conf/$IFACE/disable_ipv6
> 
> Which the last line disables ipv6  on this machines mostly stretch install.

It doesn't, but IPv6 is not your problem anyway.

> > (I seem to recall you are using ifupdown)
> What ever works. More often than not, a reboot.

'ifupdown' is the name of the package providing /etc/network/interfaces.

> But if I reboot it from
> here, I'll have to go to that machine and restart ssh, so lets start 
> with fixing that.
> >
> > 2. Full output of:
> > apt list --installed 'network-manager*' # might be empty
> pi@picnc:~ $ sudo apt list --installed 'network-manager*'
> Listing... Done
> 
> > apt list --installed 'avahi*' # might be empty
> pi@picnc:~ $ sudo apt list --installed 'avahi*'
> Listing... Done
> avahi-daemon/testing,now 0.7-4+b1 armhf [installed]

In my understanding 169.254.*.* addresses are configured by 
avahi-autoipd, not avahi-daemon, so this is also not your problem.

> > systemctl status systemd-networkd
> pi@picnc:~ $ sudo systemctl status systemd-networkd
> ● systemd-networkd.service - Network Service
>Loaded: loaded (/lib/systemd/system/systemd-networkd.service; disabled; 
> vendor preset: enabled)
>Active: inactive (dead)
>  Docs: man:systemd-networkd.service(8)
 
systemd-networkd is also not running, so you can stop blaming systemd.

> > ip a # short for 'ip address'
> pi@picnc:~ $ ip a
> 1: lo:  mtu 65536 qdisc noqueue state UNKNOWN group 
> default qlen 1000
> link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
> inet 127.0.0.1/8 scope host lo
>valid_lft forever preferred_lft forever
> inet6 ::1/128 scope host
>valid_lft forever preferred_lft forever
> 2: eth0:  mtu 1500 qdisc pfifo_fast state UP 
> group default qlen 1000
> link/ether b8:27:eb:d3:47:2d brd ff:ff:ff:ff:ff:ff
> inet 192.168.71.12/24 brd 192.168.71.255 scope global eth0
>valid_lft forever preferred_lft forever
> inet 169.254.163.253/16 brd 169.254.255.255 scope global noprefixroute 
> eth0
>valid_lft forever preferred_lft forever

This is not a problem.

> inet6 fe80::1445:918c:cf73:6a79/64 scope link
>valid_lft forever preferred_lft forever
> 3: wlan0:  mtu 1500 qdisc pfifo_fast state 
> DOWN group default qlen 1000
> link/ether b8:27:eb:86:12:78 brd ff:ff:ff:ff:ff:ff
> 
> > ip r # short for 'ip route'
> pi@picnc:~ $ ip r
> default dev eth0 scope link src 169.254.163.253 metric 202

But this is...

In addition to the full /etc/network/interfaces please post also the 
output of

pgrep -a dhcp

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Assorted arm-buster problems - network configuration

2019-07-04 Thread andreimpopescu
On Mi, 03 iul 19, 21:03:19, Gene Heskett wrote:
> On Wednesday 03 July 2019 16:12:31 Reco wrote:
> 
> And Gene moved. Question unanswered yet.
> > Hi.
> >
> > On Wed, Jul 03, 2019 at 02:57:35PM -0400, Gene Heskett wrote:
> > > Regardless of what I do, I cannot get rid of the avahi junk in an ip
> > > a report, so my local 192.168.xx.nn/24 net is the only thing that
> > > works. pinging a net name like yahoo.com gets me a successful
> > > address. But no response from yahoo because its sending the ping
> > > from an avahi based address, which since thats outside of my /24
> > > netmask, doesn't get thru the router.
> > >
> > > So, how do I get rid of the avahi stuff?
> > >
> > > I've a nominally 10 machine 192.168.nn.xx that is 100% static based
> > > on host files so I want avahi absolutely and totally neutered,
> > > emasculated, gone Forever plus 100 years at least.
> > >
> > > How can I do that?

It's not necessarily avahi doing that. A DHCP client might also 
configure a 169.254.*.* address for you if it doesn't receive a reply.

In order to have the slightest chance of helping you it is necessary for 
you to provide the information as per below.

Files should preferably be attached, to avoid issues with copy-paste. 

Please do not edit anything except to obscure private information (e.g. 
passwords or a public IP you don't want to post).


1. content of /etc/network/interfaces and all files under 
/etc/network/interfaces.d/

(I seem to recall you are using ifupdown)

2. Full output of:
apt list --installed 'network-manager*' # might be empty
apt list --installed 'avahi*' # might be empty
systemctl status systemd-networkd
ip a # short for 'ip address'
ip r # short for 'ip route'

3. Information on anything (and I do mean anything) else you might have 
done to your network configuration after installing buster, including 
but not limited to:
 * installing stuff, especially if from source
 * removing stuff (especially if not 'purged', dpkg -l would tell)
 * manual changes to files (deletions/permissions/etc.
 (especially those unnecessary "fixes" you call "neutering")

For the record/archives: other users are not seeing your problems.

Buster is - at least for me - the best Debian release yet.

The problems you are seeing are, at least partially, of your own doing, 
most likely due to wrong configuration and an approach of using the 
equivalent of a shotgun to kill a fly and then complaining your walls 
are full of holes.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Oldest Usable x86 CPU for Stretch (Was: Choice of VMs under i386 Stretch?)

2019-07-04 Thread andreimpopescu
On Jo, 04 iul 19, 01:47:58, Matthew Crews wrote:
> 
> You know, this got me thinking. What *is* the oldest 32-bit x86 CPU that
> we can use in Stretch for a VM host? And assuming we are talking
> out-of-the-box experience, ie I download a standard ISO and fire it up.

This might get you started:
https://www.debian.org/releases/stretch/i386/release-notes/ch-information.en.html#i386-is-now-almost-i686

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: [OT] send all email from certain From: addresses into a spam

2019-07-03 Thread andreimpopescu
On Mi, 03 iul 19, 11:53:11, Michael Stone wrote:
> 
> maildrop is definitely recommended these days (especially for anyone still
> running procmail).

imapfilter works fine if you use IMAP and your server has poor or no 
filtering (exposed to users).

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: How to have password shown?

2019-07-03 Thread andreimpopescu
On Mi, 03 iul 19, 14:17:34, Rodolfo Medina wrote:
> 
> Thanks for your suggestion...  No, it's very simple and familiar with him...

A keyboard with a different layout (e.g. alphabetic) might also help 
with the password.

> it's just that he's at his really first experiences with a computer machine 
> and
> a computer keyboard...  He passes most of his time in front of TV and maybe
> using a computer may help him and be interesting for him...

This usually needs some "killer app".
https://en.wikipedia.org/wiki/Killer_application

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: ncurses?

2019-07-02 Thread andreimpopescu
On Ma, 02 iul 19, 17:45:32, ghe wrote:
> Buster, Supermicro 5036T (aka sbox), Radeon HD 6450/7450/8450 according
> to lspci, RME Hammerfall sound card
 
[...]
 
> The problem is that, on sbox, alsamixer and aptitude are badly displayed

Apparently "sbox" is the host name (or how you refer to it). It would be 
useful to be explicit about this, to avoid confusions.

> -- alsamixer so bad that it's not usable. The vertical lines in
> alsamixer are broken into pieces and the pieces are offset a quarter of
> an inch or so. The horizontals aren't broken, but their positions are
> offset like the vertical pieces. Some of them.

Is this in an terminal window under X or on the console?
Is "regular" shell output fine otherwise (e.g. 'ls -l') in xterms and/or 
console?

My first recommendation is to make sure your locale and console is 
properly configured.

dpkg-reconfigure locales
dpkg-reconfigure console-setup

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous?

2019-07-02 Thread andreimpopescu
On Mi, 19 iun 19, 11:06:59, Bagas Sanjaya wrote:
> Hello all Debian Users,
> 
> Consider the hypothetical scenario below.

Your hypothetical scenario is not relevant for what you are asking.

Context for the list:
https://lists.debian.org/debian-devel/2019/06/msg00371.html
 
> I often encountered cases on systems in television stations when they
> configured sudoers like this snippet below:
> 
> %remaja ALL=(ALL:ALL) ALL
> 
> The rationale for above is most programs on such systems can only be
> accessed by users which are member of remaja (teens) group via sudo, so
> their sysadmins giving remaja user group full administrator privileges. Is
> it dangerous?

Knives are dangerous when used improperly, but we still have them at 
home.

Instead of locking them away we teach children to use them safely.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: An Ounce of Prevention

2019-07-02 Thread andreimpopescu
On Lu, 17 iun 19, 14:20:33, Bob Bernstein wrote:
> For a change, I want to proceed with a tad of caution 
> rather than follow Don't RTFM - Wing That Sucker.
> 
> I have an old Jessie running:
> 
> Linux debian.localdomain 3.16.0-7-amd64 #1 SMP Debian 3.16.59-1 (2018-10-03) 
> x86_64 GNU/Linux
> 
> ...and it has been borne in on me that my kernel needs to 
> be retired. This old Jessie dates back to the Bad Old Days 
> of the systemd wars and has no systemd onboard. I am of a 
> mood though to take a Great Leap Forward and install 
> Stretch -- systemd 'n all.

Just for the archives, upgrading to stretch (or buster) does not 
necessarily involve switching to systemd.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: IPv4 v IPv6

2019-07-02 Thread andreimpopescu
On Lu, 17 iun 19, 10:05:11, mick crane wrote:
> hello,
> I know nothing about IPv6.

Then you don't have any prejudices ;) (no, IPv6 doesn't break your 
network).

> Can somebody point to a good explanation ?
> Without knowing anything about it I'm wondering if I should request an IPv6
> range from my ISP to use locally.

If it's free (cost) and you have the time to set it up properly.

> A network card have IPv4 and IPv6 addresses that are different, not the same
> address in different notation ?
> Then with firewalling do you need to specify both IPv4 and IPv6 ranges ?

Yes, as others have pointed out.

What I didn't see mentioned in this thread is that IPv6 does not 
need/use NAT. Some users rely on NAT in IPv4 as some sort of protection 
(it is not, you still need a firewall).

When properly configured[1] with IPv6 all devices on your home network 
supporting it will be directly accessible from the internet (by design).

Your firewall rules may need to be adjusted to account for this.

[1] depending on your ISP and/or modem you might not need to do anything 
at all with most recent OSes in their default configuration.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: [fixed] Re: Numeric keypad not working on Gnome lock screen

2019-07-02 Thread andreimpopescu
On Lu, 01 iul 19, 17:23:41, Steven Post wrote:
> 
> The issue disappeared after removing 'zoom' (a meeting application) and
> its dependency ibus.

This would be worth a bug report against ibus.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Problem: Slow boot -- Mounts fail.

2019-07-01 Thread andreimpopescu
On Du, 30 iun 19, 20:48:21, Dennis Wicks wrote:
> 
> OK! Be my guest!!
> 
> One thing I have noticed is that it seems to do everything 2 or 3 times
> while it is booting, and it takes about 30 mins before my desktop (xfce) is
> up and functioning.

On a first/quick look nothing unusual stands out, but I'll have more 
time for this tomorrow.

Please post also the outputs of

journalctl -alb
systemd-analyze blame
systemd-analyze critical-chain

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: What is agetty, and why can't it be stopped?

2019-06-29 Thread andreimpopescu
On Sb, 08 iun 19, 10:22:54, Jonathan Dowland wrote:
> On Sat, Jun 08, 2019 at 11:04:54AM +0200, Étienne Mollier wrote:
> > I count 182 systemd related manual pages on my Sid machine.
> > Fortunately, among the lot, there is :
> > 
> > systemd.index (7)- List all manpages from the systemd project
> > 
> > Sadly, it is not referenced in the systemd(1) SEE ALSO section,
> > which I would tend to consider the intuitive starting point of
> > any person interested in knowing more about how to handled the
> > arcane of this init process.
> 
> I agree with both: it should probably be added to the main entry
> point's SEE ALSO section. That would likely be a very simple patch,
> which I might attempt myself if I have some time.

Maybe someone here with a GitHub account could open an issue upstream. 
It might be enough.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Problem: Slow boot -- Mounts fail.

2019-06-29 Thread andreimpopescu
On Vi, 28 iun 19, 11:26:43, Dennis Wicks wrote:
> andreimpope...@gmail.com wrote on 6/24/19 2:09 AM:
> > On Ma, 14 mai 19, 16:38:37, Dennis Wicks wrote:
> > > 
> > > How do I prevent the mounts from failing and make the system continue on
> > > with the boot process?
> > 
> > You could start by attaching your /etc/fstab and copy-pasting the output
> > of 'lsblk -f' with all partitions mounted.
> > 
> > It would also be useful to know what init system you are using
> > (ls -l /sbin/init) and if your mounts have any specials (LVM, encrypted,
> > NFS, RAID, etc.) basically anything besides plain extX filesystems
> > mounted from internal drives.
> > 
> > Kind regards,
> > Andrei
> > 
> No need for all that!

Hmm...
 
> All my mounts are local PATA and SATA drives. The SATA drives are on an
> adapter card. All the file systems are xfs, ext2, ext4 or swap and use
> either /dir/dir, LABEL= or UUID=.
> All very vanilla. No LVM, encrypted, NFS, RAID, etc. Doesn't make any
> difference as *all* of the mounts are failing on the first pass!
> 
> I found a work around on a forum. Put "nofail" in the options field of
> fstab. So now my entries contain "defaults,nofail" or "sw,pri=100,nofail" in
> the options field.
> 
> Doesn't make any difference though. All the
>Dependency failed for ...
> Timeout waiting for ...
> messages still occur, they just don't stop the boot process and the mounts
> get done successfully later on.(??)
> 
> I can't tell what might have caused this as I don't re-boot after every
> update, just when an update to the kernel occurs. I think it was about the
> time that systemd was implemented as the boot screen looked different when
> the mount failures started happening.

There are a lot of eyes on this list and someone might spot something 
that you don't even think might have an impact.

But then it's your system, your rules ;)

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: tftp problem

2019-06-28 Thread andreimpopescu
On Ma, 04 iun 19, 16:45:39, ghe wrote:
> > 
> > 
> > I edited its config file (/etc/default/atftpd) to point it at /tftpboot
> > and not to use inetd, but a restart of the server didn't seem to make
> > any difference. Rebooting the computer did, though, and it showed up in
> > ps with the options I'd written in the config.

"restarting the server" usually means restarting the whole system, you 
probably meant "service" here?

How were you restarting it (the service)?
 
> > It might also be nice if systemd wouldn't ignore the echo commands in
> > the init shell script -- some of them have been put there to try to
> > figure why something's not working.

Maybe you weren't looking into the right place?

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


intel-microcode highly recommended [was: Re: kvm errors with 4.9.0-9 kernel.]

2019-06-27 Thread andreimpopescu
On Du, 19 mai 19, 09:34:06, John J. Rushford wrote:
> 
> Thanks very much for the response.  No, I did not have the intel-microcode
> package installed but, I decided to try it.  After reading through the
> debian microcode wiki, I installed the package while running on and using
> the 4.9.0-9 kernel.  After rebooting, I found that this did not help at all
> and ended up backing out the package.  

That package is a very good idea, regardless if it fixes your kvm 
problems or not.

From https://wiki.debian.org/Microcode

Processors from Intel and AMD may need updates to their microcode to 
operate correctly. These updates fix bugs/errata that can cause 
anything from incorrect processing, to code and data corruption, and 
system lockups. 

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Debian Getting started

2019-06-26 Thread andreimpopescu
On Vi, 17 mai 19, 22:04:32, Paul Sutton wrote:
> Hi

Hi Paul,

> Following on from Francisco post, I had been thinking about writing
> something about getting started for a while.  So decided to just get on
> and do it.
> 
> http://zleap.net/debian-getting-started/
> 
> I am trying to write this from my own view point of being new and
> explain how I got started and how others can.  Lot of references to
> parts of the Debian Website. 

Please do link to ESR's How To Ask Questions The Smart Way.
http://www.catb.org/~esr/faqs/smart-questions.html

Regarding Salsa vs. Gihub, please note Salsa is using the Gitlab 
software. While quite similar to Github there are two important 
differeneces:

 1. It's Free (Libre) Software
 2. It is hosted by Debian

There was another discussion on this list why these two points matter.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Debian Releases

2019-06-26 Thread andreimpopescu
On Vi, 17 mai 19, 17:05:40, Francisco M Neto wrote:
> As the first in a series of (maybe 2) posts about Debian's release cycle, 
> I'vecreated the following post. 
> 
> I would love to receive any feedback on it.
> 
> http://fmneto.com.br/en/en/archives/2019/tracking-busters-release/

Disclaimer: below is based on lurking around Debian (including Developer 
lists) for the past 10 years or so. Feel free to copy-paste whatever you 
need without attribution.

The Release Team is choosing the freeze date after consulting with 
package maintainers. Whenever possible it is chosen to account for the 
different release schedules of the major upstream projects (Linux, 
glibc, etc.).

Considering the amount of software included in Debian this is quite 
challenging. An upstream project may or may not have a (predictable) 
release cycle, stable / long term support / bugfixes only branch, etc. 
which makes it even more difficult.

Depending on the complexity of upstream projects it may take significant 
time to package a new (major) release (think Gnome, KDE, etc.).

Projects on which other software depends (libraries, programming 
languages, etc.) will trigger transitions, which require a rebuild of 
all depending packages at a minimum, but sometimes even a complete 
rewrite of other software (e.g. Python 2 -> 3).

Hope this helps,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Numeric keypad not working on Gnome lock screen

2019-06-25 Thread andreimpopescu
On Ma, 25 iun 19, 14:56:28, Steven Post wrote:
> 
> Update, I noticed that it shows the same issue when entering a wi-fi
> password, or root password.

Such dialog boxes are kind of special, e.g. to prevent other programs 
from stealing the focus.

This seems to suggest a bug/feature in Gnome/GTK libraries. You might 
want to check the upstream bug reports.

Hope this helps,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Install backport during netinstall installation process

2019-06-24 Thread andreimpopescu
On Jo, 16 mai 19, 14:01:43, Rory Campbell-Lange wrote:
> I've been struggling to fully setup some machines with A2SDi-8C-HLN4F
> motherboards and Intel x553 NICs (which require recent ixgbe support) as
> Debian stable machines.
> 
> Thanks to considerable help from this list, I've been able to
> successfully setup the machines over the net using buster/testing
> netinstall images, which allow one to select stretch/stable at install
> time, then reboot into rescue mode on the netinstaller and install
> kernel-image-4.19.0-0.bpo from backports to provide a stable system and
> kernel with ixgbe support.
> 
> However this doesn't work when running root off a RAID1 array with
> dm_crypt on top. Rescue mode can't both reassemble the array and decrypt
> the volume. While I can do that from the rescue shell I don't know how
> to pivot to make the decrypted volume root so I can install the backport
> kernel. **

I seem to recall the installer in expert mode offering a choice of 
kernels to install. Try pressing 'Back' and check the menu.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Problem: Slow boot -- Mounts fail.

2019-06-24 Thread andreimpopescu
On Ma, 14 mai 19, 16:38:37, Dennis Wicks wrote:
> 
> How do I prevent the mounts from failing and make the system continue on
> with the boot process?

You could start by attaching your /etc/fstab and copy-pasting the output 
of 'lsblk -f' with all partitions mounted.

It would also be useful to know what init system you are using
(ls -l /sbin/init) and if your mounts have any specials (LVM, encrypted, 
NFS, RAID, etc.) basically anything besides plain extX filesystems 
mounted from internal drives.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: How to make networking dependent on firewall configuration?

2019-06-23 Thread andreimpopescu
On Lu, 13 mai 19, 15:31:45, Martin T wrote:
> Hi Reco!
> 
> Thanks for reply! I changed from
> /lib/systemd/system/networking.service.d/networking.service.conf to
> /etc/systemd/system/networking.service.d/networking.service.conf.

It might be easier to do

systemctl edit .

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Numeric keypad not working on Gnome lock screen

2019-06-23 Thread andreimpopescu
On Lu, 13 mai 19, 11:29:10, Steven Post wrote:
> 
> Recently the numeric keypad stopped working on the Gnome lock screen.

More information would be necessary here, e.g. what Debian version you 
are running, if you upgraded any packages recently, etc.

> When booting, the numlock is in the 'off' state and I can simply turn
> it on by pressing the numlock key'. When I lock the screen (Super+L),
> the numlock light is still on, but pressing a number activates the
> second function (arrow, pg up, etc.), I can get numbers by holding the
> 'shift' key, but not by setting the numlock in either ON of OFF.

Is your keypad working correctly everywhere outside the lock screen?

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Testing netinstall, but use stable release?

2019-06-23 Thread andreimpopescu
On Jo, 09 mai 19, 07:29:49, Rory Campbell-Lange wrote:
> 
> Are you referring to "It is not possible to install sid from a netinst
> or full CD. Please use the netboot installation method". I certainly
> missed that. My apologies.
> 
> Setting up a tftp server in a remote data centre rack is something I'd
> like to avoid, but I certainly can if the ability to downgrade the
> installation is unique to the netboot method.

The netboot image works fine if written (cp) to a USB stick or even to 
the disk you intend to install to ;)

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: List attachments (was: Undelivered Mail Returned to Sender)

2019-06-22 Thread andreimpopescu
On Lu, 06 mai 19, 14:16:13, Celejar wrote:
> On Mon, 6 May 2019 17:18:31 +0200 (CEST)
> Pierre Frenkiel  wrote:
> 
> > On Mon, 6 May 2019, Celejar wrote:
> > 
> > > I once looked into ProtonMail, but IIUC, there's no POP3 / IMAP / SMTP
> > > support in the free tier, and even in the paid tiers, standards-based
> > > email requires running some sort of proprietary application called
> > > "ProtonMail Bridge" on my machine. Correct me if I'm wrong, but if this
> > > is correct, I'll pass.
> > 
> >thank you for this useful information. It will avoid loosing time.
> >Have you any idea of something else?
> 
> I'm no expert, but I struck out in my search for a free,
> standards-based email service beyond the giants. I have a number of GMX
> accounts, and while they're not quite Google / Yahoo / Microsoft,
> they're still too big, scary and ad-centric for me.
> 
> My favorite is a Zoho account that I have, but when I checked recently
> into adding further accounts, I think that new free accounts don't get
> POP / IMAP / SMTP service (my old account seems to be grandfathered in).

You want an "eierlegende Wollmilchsau"[1], i.e. a free (as in beer), 
quality, privacy conscious e-mail service, that offers IMAP and SMTP. 

Please do let us know if you ever find it... (I mean it).

For those willing to pay Kolab Now seems interesting. 

[1] https://en.wiktionary.org/wiki/eierlegende_Wollmilchsau

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: List attachments (was: Undelivered Mail Returned to Sender)

2019-06-22 Thread andreimpopescu
On Lu, 06 mai 19, 10:28:12, Brad Rogers wrote:
> On Mon, 6 May 2019 18:37:36 +1000
> David  wrote:
> 
> >I think the proportion of people providing answers here who do care
> >would be significantly higher than the general population though.
> >That's why I was concerned enough to respond, and why I wrote
> >people *here* :)
> 
> Fair point.
> 
> I would contend though, that the number of people that do care is still
> less than 50%, even if not by much.  I have no data to support that, it's
> just my gut feeling based on the number of gmail (and similar) email
> addresses that are in use here.

The lists are publicly archived, so the privacy benefits would be 
minimal.

I also don't want to expose my other e-mail addresses, for privacy and 
spam reasons ;)

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: List attachments

2019-06-22 Thread andreimpopescu
On Lu, 06 mai 19, 08:57:36, Stefan Monnier wrote:
> 
> > For pastebin purposes within Debian, please use: https://paste.debian.net/
> 
> FWIW, I simply dislike all those "put your attachment on the web and
> a URL to it": when I later search the web and find a match in
> paste.debian.net or pastebin or whatnot the match is kind of worthless
> unless I can find the message that references it (which all too often
> fails, for some reason).
> 
> So I'm left with the knowledge that "someone had the same problem" but
> I can't find the corresponding discussion (and possible
> explanation/solution).  Frustrating.
 
pastebins also expire. Unless someone quotes the interesting part in a 
reply it's often difficult to know whether you are experiencing the same 
problem.

Whenever possible please do keep messages self-contained.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: linux-kernel needs dist-upgrade (again)

2019-06-22 Thread andreimpopescu
On Vi, 03 mai 19, 15:40:09, john doe wrote:
> On 5/3/2019 3:32 PM, Greg Wooledge wrote:
> > On Fri, May 03, 2019 at 06:10:45AM +, Bonno Bloksma wrote:
> >> I would like to understand why apt-get upgrade holds backup the upgrade of 
> >> the Linux kernel.
> >
> > Because the kernel ABI changed, and a new package has to be installed.
> > It's not just an upgrade of an existing package.
> >
> > By default, "apt upgrade" will allow new packages to be installed, but
> > "apt-get upgrade" will not.
> >
> > You can use "apt-get dist-upgrade".  Or you can use
> > "apt-get --with-new-pkgs upgrade".  Or you can (maybe?) tweak some variable
> > in apt.conf to make --with-new-pkgs the default behavior.
> >
> 
> Or to install the package without using dist-upgrade:
> 
> $ apt-get install 

Which package?

If the kernel image package (and not the meta-package) this would also 
set it as "manually installed", which may not be what the OP wants.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Bug? Can not set clock in plasma5

2019-06-22 Thread andreimpopescu
On Mi, 01 mai 19, 11:33:23, Hans wrote:
> Hi folks,
> 
> I am running into the little issue, that I can not set the clock in plasma5 
> (KDE). Neither as a normal user nor as root.
> 
> I want to set the clock using systemd to set the time automatically, but when 
> ever I want set the hook and confirmed the correct password of root, the 
> settting is not saved.
 
Not sure what "hook" you mean, but systemd should automatically set the 
time at boot. What does

systemctl status systemd-timesyncd

say?

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Net::DNS::Nameserver

2019-06-22 Thread andreimpopescu
On Vi, 26 apr 19, 16:25:43, Cindy Sue Causey wrote:
> 
> I just happened to start noticing the same format being used within
> "apt-cache show" query feedback, too. Took a second to find a good
> example. This is for "openshot" (video editor):
> 
> Tag: implemented-in::python, interface::graphical, interface::x11,
>  role::program, scope::application, use::editing, works-with::audio,
>  works-with::video, x11::application
> 
> I THOUGHT I had searched "apt-cache" using those tags when I first
> noticed them. It's not working that way now. It must have been that
> the description's author had used the same categories as keywords in
> their product description.
> 
> Am "feeling like" I've seen something where we could search by tags.
> Sounds like a handy place for something like that to work.

apt show debtags

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Liquorix kernel?

2019-06-21 Thread andreimpopescu
On Lu, 15 apr 19, 12:27:39, Francisco M Neto wrote:
> 
>   Also, I'm sorry for the noobish question, but it's been a really long
> time since I've done any kind of kernel work. How do I perform a security 
> check?

Review the patches :)

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: just mail forwarding to smart mailer

2019-06-20 Thread andreimpopescu
On Sb, 13 apr 19, 10:14:04, Bonno Bloksma wrote:
> I am looking for an "easy light weight just empty the local queue and 
> send it to the smart host" setup.
> I don't mind experimenting and it doesn not need to be Exim but the 
> info I get Googling is just too diverse and does not get me much 
> closer to what I want. :-(
> Who can help me and point me to some relevant info?

dma was not mentioned in this thread.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Wondering how long it usually takes for a package to move from stable-p-u

2019-06-14 Thread andreimpopescu
On Jo, 11 apr 19, 08:20:18, Jerome BENOIT wrote:
> Hello,
> 
> On 11/04/2019 05:59, Luke Picciau wrote:
> > I have been tracking this package 
> > https://tracker.debian.org/pkg/ca-certificates-java for about a month 
> > because the package version 20170929~deb9u1 which is in stable has a bug 
> > which is blocking my docker image builds. Version 20170929~deb9u2 should 
> > fix it but the package has been in stable-p-u for a while now. How long 
> > usually does it take for a package to move from stable-p-u to stable?
> 
> You have to bear in mind that currently Debian is terminating a cycle.

stable-proposed-updates is currently just a link to 
stretch-proposed-updates.

When buster is released the link will be changed to point to 
buster-proposed-updates instead, it won't affect the contents of the 
archive.

This is just another way of recommending to always use code-names in 
sources.list, as it avoids surprises on releases.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Promotional material (presentations)

2019-06-14 Thread andreimpopescu
On Mi, 10 apr 19, 18:03:39, Paul Sutton wrote:
> Hi
> 
> I have sent a message to pr...@debian.org with regard to submitting a
> presentation on Debian for review, while I got a successful delivery
> report, I then got another e-mail saying it had failed.
> dnorw...@portalus.com (generated from pr...@debian.org)
> 
> I don't know if this e-mail has reached its destination or not.

Debian is using aliases for the official contact addresses. The failed 
delivery is only from one of the addresses behind the alias 
(assuming/hoping there is more than one person behind it).
 
> I just wondered if anyone here perhaps deals with publicity materials
> and would be able to advise or review a submission please. The latest
> presentation here (
> https://wiki.debian.org/Presentations#For_latex-beamer ) is dated 2013.
> 
> Just thought I would ask here for some advice.

If this is still an issue you might want to ask for help on 
debian-project. Someone (TM) should know the status of the Press Team 
and might be able to guide you further.

I would suggest you expand your subject to include "Debian" or so. The 
current one looks a lot like what spammers are using.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: How could I install ecryptfs-utils on Buster

2019-06-10 Thread andreimpopescu
On Mi, 10 apr 19, 15:40:13, Pierre Fourès wrote:
> 
> I did the test and all went as expected. I got ecryptfs-utils being
> installed with the four of its dependencies. One of them, keyutils, is
> in 1.5.9-9 in stretch and 1.6.6 in buster. As expected, apt installed
> the one from buster. After the install, I then had precisely the same
> packages installed in the same versions as what it was before
> ecryptfs-utils was removed from buster. This kind of satisfy my «
> simple and easy » solution requirement.

Your solution (mix stretch with buster) is pretty safe.

Just for your peace of mind, you could provide additional hints to APT 
like setting Default-Release to "buster".
 
> I just have one minor consideration about this. It was about adding
> stretch-security on top of it. In the case ecryptfs would be updated,
> I would like to take this upgrade. But I'm not sure this would play
> well regarding other packages being in the same version number between
> stretch and buster. 

Version numbers in release-security are specifically chosen to "play 
nice" with version numbers in release+1 (otherwise full/dist-upgrades 
wouldn't work), so updating from stretch-security should be safe, even 
more so with the Default-Release setting proposed above.

As an additional safeguard you could also use pinning to tell APT that 
you only want encryptfs (and dependencies) from stretch (priority 100), 
and pin the rest of stretch to a lower priority (e.g. 1).

One other possibility that I didn't see mentioned in this thread would 
be to make a forward port to buster of the stretch encryptfs package in 
case buster diverges too much from stretch and makes it uninstallable.

Considering that buster is in deep freeze the probability for this to 
happen is quite low though.


Hope this helps,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: Getting amd64 stretch netinstall to work.

2019-06-09 Thread andreimpopescu
On Vi, 05 apr 19, 13:05:56, David Wright wrote:
> 
> A solution might be to install over a serial link, but I don't
> think you can do that with the d-i itself, only with 3rd-party
> mangled versions.

Sure it can, it's how most ARM boards are installed.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature