Re: QEMU: Run a container of a different architecture

[Markus Schönhaber]

21.08.24, 16:56 +0200, Steve Keller:

> Can I run a container for a different CPU architecture using
> systemd-nspawn?

No. systemd-nspawn does indeed simply run a container. You can think of
that as a chroot on steroids. This means, everything inside the
container is run using the host kernel. Or to put it the other way
round: what the host kernel can't execute won't run.

If you want to run stuff for an architecture the host kernel cannot cope
with, you need a virtual machine (manager like QEMU). You can run one
using something like
qemu-system-aarch64 [...]
but it's probably much easier to use some helper like libvirt.

>  I can easily install on my amd64 host a Debian
> container of the same architecture and run that:
> 
>   # debootstrap stable deb12-amd64
>   # systemd-nspawn -D deb12-amd64
> 
> and get a shell running in that container.  I can also install a
> Debian system of a different architecture and run binaries from it
> like this (using qemu-user-binfmt):
> 
>   # debootstrap --arch=arm64 --foreign stable deb-arm64
>   # QEMU_LD_PREFIX=/usr/aarch64-linux-gnu deb-arm64/bin/date
>   Wed Aug 21 16:43:40 CEST 2024
> 
> But the following doesn't work
> 
>   # QEMU_LD_PREFIX=/usr/aarch64-linux-gnu systemd-nspawn -D deb-arm64
>   Spawning container deb-arm64 on /usr/local/deb-arm64.
>   Press ^] three times within 1s to kill container.
>   execv(/bin/bash, /bin/bash, /bin/sh) failed: No such file or directory
>   Container deb-arm64 failed with error code 1.
> 
> I'd like to know if it's also possible to run the whole container in
> arm64 architecture using systemd-nspawn like above for amd64.
As said above: no.

-- 
Regards
  mks

Re: resolv.conf (was Re: electrons/the Internet [racism redacted])

[Markus Schönhaber]

04.03.24, 22:11 +0100, Greg Wooledge:

> Instead,
> we will have another hundred-message argument, in which half the
> participants will have no idea what the issue is (but will chime in loudly
> anyway), and the second half will simply attack whatever strategies the
> third half have selected.

You made my day :-)

-- 
Regards
  mks

Re: Error: Failed to start Apache2 service on boot

[Markus Schönhaber]

01.03.24, 16:36 +0100, Stephen P. Molnar:

> I am running up to date Bookworm and get the 'Failed to start Apache2
> service on boot' error message.
> 
> I searched Google and found
> https://forums.debian.net/voew.top9c,php?t=14419s which didn't solve the
> problem.
> 
> I then tried sudo systemctl status apache2.service resulting in:
> 
> × apache2.service - The Apache HTTP Server
>  Loaded: loaded (/lib/systemd/system/apache2.service; enabled;
> preset: enabled)
>  Active: failed (Result: exit-code) since Fri 2024-03-01 10:14:07
> EST; 20min ago
>    Docs: https://httpd.apache.org/docs/2.4/
>     Process: 4474 ExecStart=/usr/sbin/apachectl start (code=exited,
> status=1/FAILURE)
>     CPU: 41ms
> 
> Mar 01 10:14:07 AbNormal systemd[1]: Starting apache2.service - The
> Apache HTTP Server...

> Mar 01 10:14:07 AbNormal apachectl[4477]: AH00526: Syntax error on line
> 11 of /etc/apache2/mods-enabled/userdir.conf:
[1] ^^

> Mar 01 10:14:07 AbNormal apachectl[4477]: Illegal option ExecCG
[2] ^^

> Mar 01 10:14:07 AbNormal apachectl[4474]: Action 'start' failed.
> Mar 01 10:14:07 AbNormal apachectl[4474]: The Apache error log may have
> more information.
> Mar 01 10:14:07 AbNormal systemd[1]: apache2.service: Control process
> exited, code=exited, status=1/FAILURE
> Mar 01 10:14:07 AbNormal systemd[1]: apache2.service: Failed with result
> 'exit-code'.
> Mar 01 10:14:07 AbNormal systemd[1]: Failed to start apache2.service -
> The Apache HTTP Server.
> 
> Unfortunately, I am not conversant in ancient Greek and wold very
> appreciative of assistance.
Hm, to me it seems that the problem description in the log is written in
pretty plain English:

[1] Look at /etc/apache2/mods-enabled/userdir.conf line 11
there you should see something like
[2] "ExecCG" which probably should read "ExecCGI" instead.

-- 
Regards
  mks

Re: IMPORTANT: do NOT upgrade to new stable point release

[Markus Schönhaber]

09.12.23, 19:09 +0100, Dan Ritter:

> https://fulda.social/@Ganneff/111551628003050712
> 
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057843
> 
> The new kernel release is reported to contain an ext4 data
> corruption bug. It's prudent not to upgrade, or if you have
> started to upgrade, not to reboot, until a new kernel release
> is prepared.

Thank you very much for the hint, Dan!

-- 
Regards
  mks

Re: locate question

[Markus Schönhaber]

Am 07.11.23 um 17:32 schrieb gene heskett:

> Greetings all;
> I dunno if I've forgot how to use it, or it broken by the same bug that
> killing me with the lagging access to my home raid10.
> 
> Fact: there are probably over 100 files in my /home/gene directory and
> all its subs with assorted names ending in ".scad", made by OpenSCAD
> Fact: I just ran "sudo updatedb" and generated a new date just now,
> /var/cache/locate/locatedb.n
> so that s/b uptodate.
> Al of those files should be spit out by:
> "locate *.scad" issued from an xfce terminal
> but I get:
> gene@coyote:~$ locate *.scad

Since you're not escaping the '*' you (i. e. the shell) implicitly did:

gene@coyote:~$ locate vac_ctrl_box.scad xhome_cable.scad

instead, try

gene@coyote:~$ locate .scad

> /home/gene/vac_ctrl_box.scad
> /home/gene/xhome_cable.scad
> 
> Acc an ls -R|wc -l  there are
> 433179
> files in my /home/gene directory
> 
> so locate isn't working as I think it should.
> try find but it finds the whole my whole local net:

No, it searches starting at ".scad" and ".". The former doesn't exist
and the latter is your home directory (because that is the $CWD when you
issued the command) which find recursively searches for everything,
since you didn't specify what to search for.

> gene@coyote:~$ find .scad .  |wc -l
> find: ‘.scad’: No such file or directory
> 1176532
>>
> What am I doing wrong?

Try

gene@coyote:~$ find . -name '*.scad'

-- 
Regards
  mks

Re: Hidden UUID?

[Markus Schönhaber]

18.10.23, 09:01 +0200, Hans:

> My swap partition is a logical partition on an extended partition.
> This swap was formerly luks encrypted and got an UUID beginning with 
> UUID=30e885.
> 
> Then I deciced, to format the swap partitition and use it as a normal swap 
> partition. So I erased all keys (using cryptsetup erase /dev/sda5) and then 
> reformatted it with swapon.
> 
> Additionally I removed the entry from /etc/crypttab and edited /etc/fstab.
> 
> So far, everything worked fine, except next boot. 
> 
> When booting, cryptsetup wants to open my other encrypted partitions and then 
> it is hanging, saying "searching for encrypted device UUID=30e885".
> 
> I looked everywhere, but I found no entry, where the system gets this UUID.
> 
> Of course my swap partition now got another UUID, but why is cryptsetup still 
> knowing of the old UUID? What did I miss?

If you haven't re-created the initial ramdisk for your system, that
might be the culprit. You can do something like
# update-initamfs -u
to re-create the initramfs for the running kernel.
$ man update-initramfs
shows more options.

-- 
Regards
  mks

Re: php7.4 on bookworm

[Markus Schönhaber]

26.06.23, 09:08 +0200, Stefan Begerad:


Somehow my Debian 11 was automagically upgraded to Debian 12 perhaps by
the hosting company. However, there is a website running on this Debian
that requieres php7.4. That website is incompatible with the php version
Debian 12 is offering and down at the moment.

  From the packages it looks like Debian 12 is offering php8.2. Can you
recommend a best practice how to run php7.4 on a Debian 12 in an
production environment?


I don't know if that somehow qualifies as "best practice" but Ondřej 
Surý packages different PHP versions for Debian and Ubuntu one can 
install side-by-side:


https://sury.org/

What I also do sometimes is to create a container/VM with desired 
software stack and let the "frontend" HTTP server act as a reverse proxy 
for the container/VM.


That said: Upgrading the website to use a upstream-supported version of 
PHP would probably be really "best practice".


--
Regards
  mks

Re: Ethernet device names change Bullseye => Bookworm. How to assign unchanging name to device?

[Markus Schönhaber]

20.06.23, 08:36 +0200, Rick Thomas:


I've been upgrading my machines Bullseye => Bookworm recently.  In a few of these 
upgrades, the name of the ethernet device changed.  (E.g. enP2p32s15f0 => 
enP2p0s15f0)  This required changes to /etc/network/interfaces in order to start up 
the interface.

This is only a minor inconvenience (though it may require me to take a drive 
out 30 miles to the location where a few of these machines reside -- no 
problem, it's a beautiful drive!)

However, I seem to remember that once upon a time there was a way to get (I think it 
involved udev) the system to assign an arbitrary name (e.g. (enet0") to a given 
interface based on something that doesn't change when the firmware/driver gets 
upgraded. For example, the MAC address for an Ethernet interface would be a good 
basis.

The trouble is that it was a while ago and I can't remember how to do that?

Any hints will be appreciated.  Pointers to documentation on the subject would 
be especially helpful!


systemd.link should be a way to get this done:



--
Regards
  mks

Re: question about net address

[Markus Schönhaber]

18.03.23, 12:28 +0100, cor...@free.fr:


I know 192.168.1.0/24 is a valid C range for network address.

but what does 192.168.1.1/24 mean?


https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing

--
Regards
  mks

Re: question about rc.local

[Markus Schönhaber]

09.03.23, 14:16 +0100, cor...@free.fr:

Please don't top-post.


What’s the right way to run rsync —daemon then? Thanks


"The right way" is what woks best for you, I suppose.

But since Debian's rsync package installs a systemd service unit, it 
might be easiest to simply use that.


--
Regards
  mks

Re: reportbug: don't know: bug in apt [list] or in grep

[Markus Schönhaber]

19.01.23, 09:10 +0100, js-p...@online.de:


Hello together,
listing packages in apt with ”sudo“ in the title returns different output (bash 
commands at the end of the email). I would fill a bug report, but I'm not sure 
whether to address it to grep or apt. How do you see this?


To me it seems there's neither a bug in apt nor in grep but rather in 
your regular expressions.



Kind regards
Julian Schreck
--
$ apt list sudo*   vs.  $ apt list | grep "^sudo[a-z-]"


The former also matches "sudo", the latter RE does not - it matches ex. 
"sodoa" or "sudo-".



$ apt list *sudo   vs.  $ apt list | grep "[a-z-]sudo/"


The former also matches "sudo", the latter RE does not - it matches ex. 
"bsudo" or "-sudo".



$ apt list *sudo*  vs.  $ apt list | grep "sudo"


This might give the same results.

BTW: using unquoted wildcards in parameters to shell commands is most 
often a bad idea (unless they are really meant to be file name patterns).


--
Regards
  mks

Re: Synaptic on Debian 11.3 fails to install "kate"

[Markus Schönhaber]

07.12.22, 16:00 +0100, Richard Owlett:


Markus Schönhaber wrote:

Am 07.12.22 um 15:07 schrieb Richard Owlett:


I'm running Debian 11.3 with MATE desktop.
When I attempt to use Synaptic to install "kate" it responds:



W: Failed to fetch
http://deb.debian.org/debian/pool/main/p/pcre2/libpcre2-16-0_10.36-2_amd64.deb

    404  Not Found [IP: 199.232.98.132 80]


[...]


Is this bug or operator error?


If
apt update
helps, then it's the latter.



Been using Debian since days of Squeeze and never had the problem ;/
Your suggestion worked.


If your package cache is stale, the package manager might try to fetch 
package files which don't exist on the server (probably being replaced 
by newer versions) anymore. It does that since it doesn't know they're 
gone, because of the mismatch between the (stale) local cache and the 
(changed) situation on the server.

Then, refreshing the cache (apt update / apt-get update) fixes that.

--
Regards
  mks

Re: Synaptic on Debian 11.3 fails to install "kate"

[Markus Schönhaber]

Am 07.12.22 um 15:07 schrieb Richard Owlett:


I'm running Debian 11.3 with MATE desktop.
When I attempt to use Synaptic to install "kate" it responds:



W: Failed to fetch 
http://deb.debian.org/debian/pool/main/p/pcre2/libpcre2-16-0_10.36-2_amd64.deb
   404  Not Found [IP: 199.232.98.132 80]


[...]


Is this bug or operator error?


If
apt update
helps, then it's the latter.

--
Regards
  mks

Re: hp majer

[Markus Schönhaber]

26.11.22, 12:45 +0100, Amn Ojee Uw:


spam, spam, spam


Please! Don't reply to SPAM - especially not with quoting the 
SPAM-URL(s) so it gets re-sent to all list members in case they might 
have missed it the first time...


--
Regards
  mks

Re: Problems with a library

[Markus Schönhaber]

22.09.22, 18:03 +0200, William Torrez Corea:


What happen with this?

I try compile the following code:

`curl-config --cc` -o example example.c `curl-config --cflags --libs`

But i get the following error:

curlgtk.c:4:10: fatal error: gtk/gtk.h: No such file or directory
 4 | #include "gtk/gtk.h"
   |  ^~~
compilation terminated.

Install some dependencies but the error persist:

sudo apt-get install build-essential gnome-devel




You'll probably need to install one of the libgtk*-dev packages.

--
Regards
  mks

Re: question re tar

[Markus Schönhaber]

21.09.22, 17:29 +0200, jr wrote:

[a reply that isn't one]

Could you please stop using a mail client that starts a new thread with 
every message you send?
Please use something instead that really creates a reply when you are 
replying to someone (i. e. something that sets the 
In-Reply-To/References message headers accordingly).


--
Regards
   mks

Re: sshd_config

[Markus Schönhaber]

07.09.22, 18:17 +0200 jr:


am fairly new to Debian and am puzzled that the 'sshd_config' file
does not have a setting for the 'UsePrivilegeSeparation' keyword.  it
is also not mentioned in the man page.  on another machine (not
Debian) I have OpenSSH s/ware installed which provides the option; the
READMEs on both machines look identical.


UsePrivilegeSeparation is deprecated since OpenSSH 7.5 (i. e. since 5+ 
years).
You should rather check the state of your other machine - it might be 
well out of date.


--
Regards
  mks

Re: no JAVA_HOME in the path

[Markus Schönhaber]

23.08.22, 15:49 +0200, Amn:


Thank you for your prompt response.
Adding Java to the $PATH variable requires me to know the location where
Java was installed, which I don't know. Is there a way to find out where
Java was installed?


As Tomas wrote, the more interesting question than *how* to set 
JAVA_HOME, is *why* you want to set it in the first place.


That said, on Linux package managers often install JVMs in a 
subdirectory of /usr/lib/jvm.
To find out what the java binary in your PATH thinks about where it's 
home is, you can do, for example


java -XshowSettings:properties -version 2>&1 > /dev/null | grep 'java.home'

On debian

update-alternatives --display java

should show you the Java installations the system knows about.

And, of course, a tool like dpkg could be used to show which files are 
installed by the package manager...


--
Regards
  mks

Re: Remove package source from apt(-get)

[Markus Schönhaber]

22.05.22, 17:42 +0200 Amn:


When I 'ap-get update' I get this message:

"*E: *The repository
'http://ppa.launchpad.net/pipewire-debian/pipewire-upstream/ubuntu  
kinetic Release' does not have a Release file"


I checked " /etc/apt/sources.list ", but the above link is not there.


Also check the files in the directory
/etc/apt/sources.list.d/

--
Regards
  mks

Re: Permanent email address?

[Markus Schönhaber]

15.05.22, 16:31 +0200, Reco:


On Sun, May 15, 2022 at 10:08:57AM -0400,rhkra...@gmail.com  wrote:



My understanding is that the (only?) way to do get such a permanent address is
to have my own domain and assign an email address in that domain to me?

If you have to be in control over sending and receiving e-mail you'll
need your own MTA. That implies a domain you control.


No. The OP wants control over their mail address. For that, they need to 
own the address' domain. That's the all-important point. And if they do, 
it doesn't matter whether they operate the domain's MX themselves or 
delegate that to someone else.


OTOH, operating an MTA doesn't necessarily make you owner or controller 
of the domain(s) it is responsible for. I, for example, operate an MTA 
for some domains I neither own nor control. And that is not too uncommon 
a business model.


--
Regards
  mks

Re: Predictable Network Interface Names

[Markus Schönhaber]

31.03.22, 13:01 +0200, Sven Hartge:


Greg Wooledge  wrote:


unicorn:~$ cat /etc/systemd/network/10-lan0.link
[Match]
MACAddress=18:60:24:77:5c:ec



[Link]
Name=lan0


Careful with that one. If you use VLANs then you suddenly get multiple
interface with the same MAC and strange things will happen, because it
matches for all of them.

The failure-proof way of doing this is by adding "Type=ether" to the
Match clause, which will only match the physical interfaces and not the
subinterfaces. (Which will be of Type=vlan.):


Since I haven't (yet) used the combination VLAN/systemd.link I haven't 
run into this issue. But it is definitely something to keep in mind.

Thanks for the hint!

--
Regards
  mks

Re: Thunderbird / Dovecot TLS Problem

[Markus Schönhaber]

17.03.22, 08:05 +0100, Jeremy Ardley:


I've been using Thunderbird for years now but made some minor tweaks as
I'm setting up an imap proxy for remote access to my
debian/dovecot/postfix server.

The issue is I changed the account settings in thunderbird to use
STARTTLS and port 993. It now doesn't work. I see a connection in
wireshark, but then nothing happens and dovecot logs no attempt to
authenticate and it just times out.


By default, Dovecot listens on port 993 in TLS wrappermode, i. e. the 
encrypted connection has to be established before any user data can be 
transmitted (nothing will be sent unecrypted).
OTOH, by telling Thunderbird to use STARTTLS you told it to try to 
establish an unencrypted network connection first, and afterwards issue 
the STARTTLS command over this plaintext connection to start the encryption.

This won't work. Change the connection security in TB to SSL/TLS.

--
Regards
  mks

Re: recommend music player?

[Markus Schönhaber]

16.03.22, 18:54 +0100, kaye n:


Can anyone recommend a good music player with an equalizer where I can
choose Pop, Rock, etc.


Clementine.

--
Regards
  mks

Re: What should I put inside the file called wlan0?

[Markus Schönhaber]

01.03.22, 06:04 +0100, Stella Ashburne:


Sent: Tuesday, March 01, 2022 at 7:18 AM
From: "Brian" 
To: debian-user@lists.debian.org
Subject: Re: What should I put inside the file called wlan0?

Om all my systems:

brian@5740:~$ ls -l /etc/network/interfaces
-rw-r--r-- 1 root root 475 Nov  3 19:23 /etc/network/interfaces


So the default chmod value of /etc/network/interfaces is 475 ?


No, 475 is the file's size.
The numeric value for the permission "-rw-r--r--" is 0644.
stat /etc/network/interfaces
will show you that.

--
Regards
  mks

Re: DHCP and search list for DNS domains

[Markus Schönhaber]

21.01.22, 13:57 +0100, Steve Keller:


With DHCP I can tell a host the DNS server and the domain name of the
network, which is then stored to /etc/resolv.conf.  But how can I add
a list a domain names that should be searched when resolving a host
name?

AFAICS, there is no option in DHCP to provide the search list.


From dhcp-options(5):


   option domain-search domain-list;

 The domain-search option specifies a  ´search  list´  of  Domain
 Names to be used by the client to locate not-fully-qualified do‐
 main names.  The difference between this option and historic use
 of  the domain-name option for the same ends is that this option
 is encoded in RFC1035 compressed labels on the wire.  For  exam‐
 ple:

   option domain-search "example.com", "sales.example.com",
"eng.example.com";


--
Regards
  mks

Re: tmux and nano in console

[Markus Schönhaber]

22.12.21, 14:59, +0100, mick crane:


I'm trying to use the console to see if my editing problems go away.
Want to copy lines from one file into another.
Splitting the screen with tmux with the 2 files opened in nano the nano
buffer is not shared.
Seems can have more than one buffer in nano but the things I want are
not in the same file.
If use the mouse to select text in one file in one tmux window the
selection goes across both windows/files.
Is there a way in console to achieve copying lines from one file to
another ?


Since tmux knows how to cope with tmux' panes, what's wrong with using 
the copy/paste functionality tmux provides?


--
Regards
  mks

Re: Identity Theft

[Markus Schönhaber]

21.12.21, 15:10 +0100, Tim Woodall:


Will umatrix still work in firefox 91?


Yes.

--
Regards
  mks

Re: ip6tables rule being rejected.

[Markus Schönhaber]

10.10.21, 13:06 +0200, Tim Woodall:


When I try to add the following rule:

# ip6tables -t nat -A POSTROUTING -s 2001::/64 -d ! 2001:1::/64 -j ACCEPT
Bad argument `2001:1::/64'
Try `ip6tables -h' or 'ip6tables --help' for more information.

It is rejected. (Ignore the fact that this rule doesn't make a huge
amount of sense, it's a very cut down instance of the rule that I'm
really trying to add)

Leaving off the exclusion:
# ip6tables -t nat -A POSTROUTING -s 2001::/64 -d 2001:1::/64 -j ACCEPT
#

And there is no problem

The manpage suggests that it should work:
d, --destination [!] address[/mask]
  Destination specification. See the description of the -s (source)
flag for a detailed description of the syntax. The flag --dst is an
alias for this option.


The man page I see on bullseye suggests otherwise:


   [!] -d, --destination address[/mask][,...]
  Destination  specification.   See the description of the -s 
(source) flag for a detailed description of the syntax.  The flag --dst is
  an alias for this option.


i. e. putting The '!' left of the '-d' works:
# ip6tables -t nat -A POSTROUTING -s 2001::/64 ! -d 2001:1::/64 -j ACCEPT

Granted, the explanation in the man page for "!" under "--source" seems 
a bit ambiguous to me:



   [!] -s, --source address[/mask][,...]

[...]

  A "!"  argument before the address specification inverts the 
sense of the address.


The start of the paragraph shows where the "!" belongs, though.

--
Regards
  mks

Re: buggy N-M (was: Debian 11: Unable to detect wireless interface on an old laptop) computer

[Markus Schönhaber]

29.09.21, 08:48 +0200, to...@tuxteam.de:


Another often forgotten dimension is perception. Your buggy software
might be my sweet spot and vice versa.

Bug is, as they say, in the eye of the beholder :)


https://xkcd.com/1172/

--
Regards
  mks

Re: apt tells me that grub-efi, grub2-common are no longer needed

[Markus]

Am 07.07.21 um 12:27 schrieb Markus:

Am 07.07.21 um 09:24 schrieb Andrei POPESCU:

On Mi, 07 iul 21, 08:21:17, Markus wrote:

Am 24.06.21 um 18:51 schrieb Greg Wooledge:

On Thu, Jun 24, 2021 at 06:43:15PM +0200, Markus wrote:

grub-efi-amd64:
    Installed: (none)
    Candidate: 2.02+dfsg1-20+deb10u3
    Version table:
   2.02+dfsg1-20+deb10u4 500
  500 http://ftp.de.debian.org/debian buster/main amd64
Packages
  500 http://security.debian.org buster/updates/main amd64
Packages
   2.02+dfsg1-20+deb10u3 3
  100 /var/lib/dpkg/status


Everything else looks good, except for this "3" section.  You've
got
a pin somewhere, for an older version of grub-efi-amd64, and it's
throwing everything out of whack.


Could you please help me fixing this? What are the next steps to go? How
can I unpin this or find out why it was pinned?


Please show the output of `apt policy` (without any package) as well as
the contents of /etc/apt/preferences and any file under
/etc/apt/preferences.d/

Kind regards,
Andrei



apt policy:

Package files:
  100 /var/lib/dpkg/status
  release a=now
  100 http://ftp.de.debian.org/debian buster-backports/non-free i386
Packages
  release o=Debian
Backports,a=buster-backports,n=buster-backports,l=Debian
Backports,c=non-free,b=i386
  origin ftp.de.debian.org
  100 http://ftp.de.debian.org/debian buster-backports/non-free amd64
Packages
  release o=Debian
Backports,a=buster-backports,n=buster-backports,l=Debian
Backports,c=non-free,b=amd64
  origin ftp.de.debian.org
  100 http://ftp.de.debian.org/debian buster-backports/contrib i386
Packages
  release o=Debian
Backports,a=buster-backports,n=buster-backports,l=Debian
Backports,c=contrib,b=i386
  origin ftp.de.debian.org
  100 http://ftp.de.debian.org/debian buster-backports/contrib amd64
Packages
  release o=Debian
Backports,a=buster-backports,n=buster-backports,l=Debian
Backports,c=contrib,b=amd64
  origin ftp.de.debian.org
  100 http://ftp.de.debian.org/debian buster-backports/main i386 Packages
  release o=Debian
Backports,a=buster-backports,n=buster-backports,l=Debian
Backports,c=main,b=i386
  origin ftp.de.debian.org
  100 http://ftp.de.debian.org/debian buster-backports/main amd64 Packages
  release o=Debian
Backports,a=buster-backports,n=buster-backports,l=Debian
Backports,c=main,b=amd64
  origin ftp.de.debian.org
  500 http://ftp.de.debian.org/debian buster-updates/main i386 Packages
  release
o=Debian,a=stable-updates,n=buster-updates,l=Debian,c=main,b=i386
  origin ftp.de.debian.org
  500 http://ftp.de.debian.org/debian buster-updates/main amd64 Packages
  release
o=Debian,a=stable-updates,n=buster-updates,l=Debian,c=main,b=amd64
  origin ftp.de.debian.org
  500 http://security.debian.org buster/updates/non-free i386 Packages
  release
v=10,o=Debian,a=stable,n=buster,l=Debian-Security,c=non-free,b=i386
  origin security.debian.org
  500 http://security.debian.org buster/updates/non-free amd64 Packages
  release
v=10,o=Debian,a=stable,n=buster,l=Debian-Security,c=non-free,b=amd64
  origin security.debian.org
  500 http://security.debian.org buster/updates/main i386 Packages
  release
v=10,o=Debian,a=stable,n=buster,l=Debian-Security,c=main,b=i386
  origin security.debian.org
  500 http://security.debian.org buster/updates/main amd64 Packages
  release
v=10,o=Debian,a=stable,n=buster,l=Debian-Security,c=main,b=amd64
  origin security.debian.org
  500 http://ftp.de.debian.org/debian buster/non-free i386 Packages
  release v=10.10,o=Debian,a=stable,n=buster,l=Debian,c=non-free,b=i386
  origin ftp.de.debian.org
  500 http://ftp.de.debian.org/debian buster/non-free amd64 Packages
  release
v=10.10,o=Debian,a=stable,n=buster,l=Debian,c=non-free,b=amd64
  origin ftp.de.debian.org
  500 http://ftp.de.debian.org/debian buster/contrib i386 Packages
  release v=10.10,o=Debian,a=stable,n=buster,l=Debian,c=contrib,b=i386
  origin ftp.de.debian.org
  500 http://ftp.de.debian.org/debian buster/contrib amd64 Packages
  release v=10.10,o=Debian,a=stable,n=buster,l=Debian,c=contrib,b=amd64
  origin ftp.de.debian.org
  500 http://ftp.de.debian.org/debian buster/main i386 Packages
  release v=10.10,o=Debian,a=stable,n=buster,l=Debian,c=main,b=i386
  origin ftp.de.debian.org
  500 http://ftp.de.debian.org/debian buster/main amd64 Packages
  release v=10.10,o=Debian,a=stable,n=buster,l=Debian,c=main,b=amd64
  origin ftp.de.debian.org
Pinned packages:
  grub-efi-amd64 -> 2.02+dfsg1-20+deb10u3 with priority 3




markus@bmtMB1:/etc/apt$ cat preferences
cat: preferences: No such file or directory



markus@bmtMB1:/etc/apt/preferences.d$ ls
apt-listbugs
markus@bmtMB1:/etc/apt/preferences.d$ cat apt-listbugs

Explanation: Pinned by apt-listbugs at 2021-03-06 12:05:35 +0100
Explanation:   #984520: 'error: symbol "grub_register_comm

Re: apt tells me that grub-efi, grub2-common are no longer needed

[Markus]

Am 07.07.21 um 09:24 schrieb Andrei POPESCU:

On Mi, 07 iul 21, 08:21:17, Markus wrote:

Am 24.06.21 um 18:51 schrieb Greg Wooledge:

On Thu, Jun 24, 2021 at 06:43:15PM +0200, Markus wrote:

grub-efi-amd64:
Installed: (none)
Candidate: 2.02+dfsg1-20+deb10u3
Version table:
   2.02+dfsg1-20+deb10u4 500
  500 http://ftp.de.debian.org/debian buster/main amd64 Packages
  500 http://security.debian.org buster/updates/main amd64 Packages
   2.02+dfsg1-20+deb10u3 3
  100 /var/lib/dpkg/status


Everything else looks good, except for this "3" section.  You've got
a pin somewhere, for an older version of grub-efi-amd64, and it's
throwing everything out of whack.


Could you please help me fixing this? What are the next steps to go? How
can I unpin this or find out why it was pinned?


Please show the output of `apt policy` (without any package) as well as
the contents of /etc/apt/preferences and any file under
/etc/apt/preferences.d/

Kind regards,
Andrei



apt policy:

Package files:
 100 /var/lib/dpkg/status
 release a=now
 100 http://ftp.de.debian.org/debian buster-backports/non-free i386
Packages
 release o=Debian
Backports,a=buster-backports,n=buster-backports,l=Debian
Backports,c=non-free,b=i386
 origin ftp.de.debian.org
 100 http://ftp.de.debian.org/debian buster-backports/non-free amd64
Packages
 release o=Debian
Backports,a=buster-backports,n=buster-backports,l=Debian
Backports,c=non-free,b=amd64
 origin ftp.de.debian.org
 100 http://ftp.de.debian.org/debian buster-backports/contrib i386 Packages
 release o=Debian
Backports,a=buster-backports,n=buster-backports,l=Debian
Backports,c=contrib,b=i386
 origin ftp.de.debian.org
 100 http://ftp.de.debian.org/debian buster-backports/contrib amd64
Packages
 release o=Debian
Backports,a=buster-backports,n=buster-backports,l=Debian
Backports,c=contrib,b=amd64
 origin ftp.de.debian.org
 100 http://ftp.de.debian.org/debian buster-backports/main i386 Packages
 release o=Debian
Backports,a=buster-backports,n=buster-backports,l=Debian
Backports,c=main,b=i386
 origin ftp.de.debian.org
 100 http://ftp.de.debian.org/debian buster-backports/main amd64 Packages
 release o=Debian
Backports,a=buster-backports,n=buster-backports,l=Debian
Backports,c=main,b=amd64
 origin ftp.de.debian.org
 500 http://ftp.de.debian.org/debian buster-updates/main i386 Packages
 release
o=Debian,a=stable-updates,n=buster-updates,l=Debian,c=main,b=i386
 origin ftp.de.debian.org
 500 http://ftp.de.debian.org/debian buster-updates/main amd64 Packages
 release
o=Debian,a=stable-updates,n=buster-updates,l=Debian,c=main,b=amd64
 origin ftp.de.debian.org
 500 http://security.debian.org buster/updates/non-free i386 Packages
 release
v=10,o=Debian,a=stable,n=buster,l=Debian-Security,c=non-free,b=i386
 origin security.debian.org
 500 http://security.debian.org buster/updates/non-free amd64 Packages
 release
v=10,o=Debian,a=stable,n=buster,l=Debian-Security,c=non-free,b=amd64
 origin security.debian.org
 500 http://security.debian.org buster/updates/main i386 Packages
 release
v=10,o=Debian,a=stable,n=buster,l=Debian-Security,c=main,b=i386
 origin security.debian.org
 500 http://security.debian.org buster/updates/main amd64 Packages
 release
v=10,o=Debian,a=stable,n=buster,l=Debian-Security,c=main,b=amd64
 origin security.debian.org
 500 http://ftp.de.debian.org/debian buster/non-free i386 Packages
 release v=10.10,o=Debian,a=stable,n=buster,l=Debian,c=non-free,b=i386
 origin ftp.de.debian.org
 500 http://ftp.de.debian.org/debian buster/non-free amd64 Packages
 release v=10.10,o=Debian,a=stable,n=buster,l=Debian,c=non-free,b=amd64
 origin ftp.de.debian.org
 500 http://ftp.de.debian.org/debian buster/contrib i386 Packages
 release v=10.10,o=Debian,a=stable,n=buster,l=Debian,c=contrib,b=i386
 origin ftp.de.debian.org
 500 http://ftp.de.debian.org/debian buster/contrib amd64 Packages
 release v=10.10,o=Debian,a=stable,n=buster,l=Debian,c=contrib,b=amd64
 origin ftp.de.debian.org
 500 http://ftp.de.debian.org/debian buster/main i386 Packages
 release v=10.10,o=Debian,a=stable,n=buster,l=Debian,c=main,b=i386
 origin ftp.de.debian.org
 500 http://ftp.de.debian.org/debian buster/main amd64 Packages
 release v=10.10,o=Debian,a=stable,n=buster,l=Debian,c=main,b=amd64
 origin ftp.de.debian.org
Pinned packages:
 grub-efi-amd64 -> 2.02+dfsg1-20+deb10u3 with priority 3




markus@bmtMB1:/etc/apt$ cat preferences
cat: preferences: No such file or directory



markus@bmtMB1:/etc/apt/preferences.d$ ls
apt-listbugs
markus@bmtMB1:/etc/apt/preferences.d$ cat apt-listbugs

Explanation: Pinned by apt-listbugs at 2021-03-06 12:05:35 +0100
Explanation:   #984520: 'error: symbol "grub_register_command_lockdown"
not found' and then lightdm fails to start
Package: grub-efi-amd64
Pin:

Re: apt tells me that grub-efi, grub2-common are no longer needed

[Markus]

Am 24.06.21 um 18:51 schrieb Greg Wooledge:

On Thu, Jun 24, 2021 at 06:43:15PM +0200, Markus wrote:

grub-efi-amd64:
   Installed: (none)
   Candidate: 2.02+dfsg1-20+deb10u3
   Version table:
  2.02+dfsg1-20+deb10u4 500
 500 http://ftp.de.debian.org/debian buster/main amd64 Packages
 500 http://security.debian.org buster/updates/main amd64 Packages
  2.02+dfsg1-20+deb10u3 3
 100 /var/lib/dpkg/status


Everything else looks good, except for this "3" section.  You've got
a pin somewhere, for an older version of grub-efi-amd64, and it's
throwing everything out of whack.


Could you please help me fixing this? What are the next steps to go? How
can I unpin this or find out why it was pinned?

Thanks in advance

Re: apt tells me that grub-efi, grub2-common are no longer needed

[Markus]

More information:

markus@bmtMB1:/var/log/apt$ sudo apt policy grub-efi-amd64 grub-common
grub2-common grub-efi-amd64-bin
grub-efi-amd64:
  Installed: (none)
  Candidate: 2.02+dfsg1-20+deb10u3
  Version table:
 2.02+dfsg1-20+deb10u4 500
500 http://ftp.de.debian.org/debian buster/main amd64 Packages
500 http://security.debian.org buster/updates/main amd64 Packages
 2.02+dfsg1-20+deb10u3 3
100 /var/lib/dpkg/status
grub-common:
  Installed: 2.02+dfsg1-20+deb10u4
  Candidate: 2.02+dfsg1-20+deb10u4
  Version table:
 *** 2.02+dfsg1-20+deb10u4 500
500 http://ftp.de.debian.org/debian buster/main amd64 Packages
500 http://security.debian.org buster/updates/main amd64 Packages
100 /var/lib/dpkg/status
grub2-common:
  Installed: 2.02+dfsg1-20+deb10u4
  Candidate: 2.02+dfsg1-20+deb10u4
  Version table:
 *** 2.02+dfsg1-20+deb10u4 500
500 http://ftp.de.debian.org/debian buster/main amd64 Packages
500 http://security.debian.org buster/updates/main amd64 Packages
100 /var/lib/dpkg/status
grub-efi-amd64-bin:
  Installed: 2.02+dfsg1-20+deb10u4
  Candidate: 2.02+dfsg1-20+deb10u4
  Version table:
 *** 2.02+dfsg1-20+deb10u4 500
500 http://ftp.de.debian.org/debian buster/main amd64 Packages
500 http://security.debian.org buster/updates/main amd64 Packages
100 /var/lib/dpkg/status
markus@bmtMB1:/var/log/apt$


Sources list:

markus@bmtMB1:/etc/apt$ cat sources.list
deb http://ftp.de.debian.org/debian/ buster main contrib non-free
deb-src http://ftp.de.debian.org/debian/ buster main contrib non-free

deb http://security.debian.org/ buster/updates main contrib non-free
deb-src http://security.debian.org/ buster/updates main contrib non-free

# buster-updates, previously known as 'volatile'
deb http://ftp.de.debian.org/debian/ buster-updates main contrib non-free
deb-src http://ftp.de.debian.org/debian/ buster-updates main contrib
non-free

# buster-backports
deb http://ftp.de.debian.org/debian/ buster-backports main contrib non-free

# unofficial vbox
deb http://download.virtualbox.org/virtualbox/debian buster contrib
markus@bmtMB1:/etc/apt$


Am 24.06.21 um 17:14 schrieb Greg Wooledge:

On Thu, Jun 24, 2021 at 05:06:50PM +0200, Markus wrote:

I wanted to reinstall grub-efi-amd64 and got this:

markus@bmtMB1:/var/log/apt$ sudo apt install grub-efi-amd64
Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
  grub-efi-amd64 : Depends: grub-common (= 2.02+dfsg1-20+deb10u3)
   Depends: grub2-common (= 2.02+dfsg1-20+deb10u3)
   Depends: grub-efi-amd64-bin (= 2.02+dfsg1-20+deb10u3)
E: Unable to correct problems, you have held broken packages.
markus@bmtMB1:/var/log/apt$


Start by getting more information:

apt policy grub-efi-amd64 grub-common grub2-common grub-efi-amd64-bin

It wouldn't hurt to double-check your sources.list as well.

Re: apt tells me that grub-efi, grub2-common are no longer needed

[Markus]

I wanted to reinstall grub-efi-amd64 and got this:

markus@bmtMB1:/var/log/apt$ sudo apt install grub-efi-amd64
Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 grub-efi-amd64 : Depends: grub-common (= 2.02+dfsg1-20+deb10u3)
  Depends: grub2-common (= 2.02+dfsg1-20+deb10u3)
  Depends: grub-efi-amd64-bin (= 2.02+dfsg1-20+deb10u3)
E: Unable to correct problems, you have held broken packages.
markus@bmtMB1:/var/log/apt$


So...something is wrong here. Puhh...how to fix that?


Thanks and Cheers
Markus


Am 24.06.21 um 13:10 schrieb Greg Wooledge:

On Thu, Jun 24, 2021 at 08:49:40AM +0200, Markus wrote:

Ok so...hmmm...I did not remove it myself. I mean why would I want to do
that?!?! Nevertheless this is an issue now.
Interestingly when booting my computer this morning grub was there and
booted into Buster. Shouldn't it be gone if it got removed (even though
it not got purged)? Hmmm...!?!?


Removing the grub packages doesn't remove GRUB from your hard drive(s).
Thankfully.


How to fix that? Is there actually something wrong (this morning grub
was there!!!) that needs to be fixed?
Is it save to just reinstall grub-efi-amd64?


It should be, as far as I know.  I'm not sure whether this will prompt
you for where to install GRUB, or whether it will retain knowledge of
this from the config files which you say haven't been purged yet.

It'll probably regenerate the grub.cfg menu, though.  If you haven't done
anything too silly, that shouldn't be an issue.

Re: apt tells me that grub-efi, grub2-common are no longer needed

[Markus]

Thank you, David, for the very useful hint.

I found this in apt history:

Start-Date: 2021-03-06  21:08:42
Commandline: apt full-upgrade
Requested-By: markus (1000)
Upgrade: grub-common:amd64 (2.02+dfsg1-20+deb10u3,
2.02+dfsg1-20+deb10u4), grub2-common:amd64 (2.02+dfsg1-20+deb10u3,
2.02+dfsg1-20+deb10u4), grub-efi-amd64-bin:amd64 (2.02+dfsg1-20+deb10u3,
2.02+dfsg1-20+deb10u4), grub-efi-amd64-signed:amd64
(1+2.02+dfsg1+20+deb10u3, 1+2.02+dfsg1+20+deb10u4)
Remove: grub-efi-amd64:amd64 (2.02+dfsg1-20+deb10u3)
End-Date: 2021-03-06  21:08:45


Do you guys maybe find similar entries in apt history?

So why did apt remove it while upgrading other grub corresponding
packages? And then afterwards apt is complaining and wants to remove
grub, efibootmgr and other stuff.

The following packages were automatically installed and are no longer
required:
efibootmgr grub-efi-amd64-bin grub-efi-amd64-signed grub2-common
libappindicator3-1 libcanberra-gtk3-0 libcanberra-gtk3-module
libclutter-gtk-1.0-0 libdbusmenu-glib4 libdbusmenu-gtk3-4 libindicator3-7
libupsclient4 linux-headers-5.10.0-0.bpo.4-amd64
linux-headers-5.10.0-0.bpo.4-common linux-image-5.10.0-0.bpo.4-amd64
linux-kbuild-4.19 linux-kbuild-5.9 mokutil shim-helpers-amd64-signed
shim-signed-common
shim-unsigned

Is it somehow linked to that shim-* packages that got also updated.
Wasn't there a bug report recently about this package when updating to
Buster 10.10?

Maybe it was like this:
1. On 2021-03-06 grub-efi-amd64 got removed because the other updated
grub packages somehow took over its tasks

2. shim got updated just recently and took over the tasks of
efibootmgr
grub-efi-amd64-bin
grub-efi-amd64-signed
grub2-common

3. only grub-common gets not removed because it is still required and in
conjunction with shim it is enough and all fine.

Because if you subtract the "no longer required" grub packages from

markus@bmtMB1:/var/log/apt$ sudo dpkg -l | grep grub
ii  grub-common 2.02+dfsg1-20+deb10u4
rc  grub-efi-amd64  2.02+dfsg1-20+deb10u3
ii  grub-efi-amd64-bin  2.02+dfsg1-20+deb10u4
ii  grub-efi-amd64-signed   1+2.02+dfsg1+20+deb10u4
ii  grub-firmware-qemu  2.02+dfsg1-20+deb10u4
ii  grub2-common2.02+dfsg1-20+deb10u4

you end up with grub-common and grub-firmware-qemu.

From here you can read that shim is also some kind of bootloader:
https://packages.debian.org/en/buster/shim-signed

But obviously shim depends on grub2-common and grub-efi-amd64-bin.
Hmmm...this makes no sense...

Cheers



Am 24.06.21 um 16:00 schrieb David Wright:

On Thu 24 Jun 2021 at 08:49:40 (+0200), Markus wrote:

Am 23.06.21 um 18:08 schrieb David Wright:

On Wed 23 Jun 2021 at 17:01:07 (+0200), Markus wrote:



rc  grub-efi-amd64 2.02+dfsg1-20+deb10u3

↑↑ There's your problem. It's been removed (but not purged).



Ok so...hmmm...I did not remove it myself. I mean why would I want to do
that?!?! Nevertheless this is an issue now.


Take a look at /var/log/apt/history.log* to see the reason
and/or the occasion (but not necessarily the intent).¹

As an example of how things can happen unintentionally, this
post from Tuesday illustrates where a broken package's bug
report seems to have led to a different package being removed:
https://lists.debian.org/debian-user/2021/06/msg00581.html


Interestingly when booting my computer this morning grub was there and
booted into Buster. Shouldn't it be gone if it got removed (even though
it not got purged)? Hmmm...!?!?


Only if you'd gone ahead and removed all those other packages.
There's actually nothing substantial inside grub-efi-amd64:

$ dpkg -L grub-efi-amd64
/.
/usr
/usr/share
/usr/share/bug
/usr/share/bug/grub-efi-amd64
/usr/share/bug/grub-efi-amd64/presubj
/usr/share/bug/grub-efi-amd64/script
/usr/share/doc
/usr/share/doc/grub-efi-amd64
$


How to fix that? Is there actually something wrong (this morning grub
was there!!!) that needs to be fixed?
Is it sa[f]e to just reinstall grub-efi-amd64?


Yes. The package exists for its dependencies. Just reinstall it.
You can then try autoremove again, and its list should now only
include the (presumably third) versions of the kernel packages
that you wanted to remove as a matter of routine, like mine in ¹.

¹ entries in /var/log/apt/history.log look like:

Start-Date: 2021-06-19  17:45:10
Commandline: apt-get --purge autoremove
Purge: linux-headers-4.19.0-14-amd64:amd64 (4.19.171-2), 
linux-headers-4.19.0-14-common:amd64 (4.19.171-2), 
linux-image-4.19.0-14-amd64:amd64 (4.19.171-2)
End-Date: 2021-06-19  17:45:33

Cheers,
David.

Re: apt tells me that grub-efi, grub2-common are no longer needed

[Markus]

Ok so...hmmm...I did not remove it myself. I mean why would I want to do
that?!?! Nevertheless this is an issue now.
Interestingly when booting my computer this morning grub was there and
booted into Buster. Shouldn't it be gone if it got removed (even though
it not got purged)? Hmmm...!?!?

How to fix that? Is there actually something wrong (this morning grub
was there!!!) that needs to be fixed?
Is it save to just reinstall grub-efi-amd64?

Cheers
Markus


Am 23.06.21 um 18:08 schrieb David Wright:

On Wed 23 Jun 2021 at 17:01:07 (+0200), Markus wrote:

Am 23.06.21 um 16:43 schrieb David Wright:

Has grub-efi-amd64 been accidentally removed? AIUI that's the package
which depends on having the packages to boot your machine.

No, not that I am aware of. But here is the ouput of

markus@bmtMB1:~$ sudo dpkg -l | grep grub
ii  grub-common 2.02+dfsg1-20+deb10u4
amd64    GRand Unified Bootloader (common files)
rc  grub-efi-amd64 2.02+dfsg1-20+deb10u3

   ↑↑ There's your problem. It's been removed (but not purged).


amd64    GRand Unified Bootloader, version 2 (EFI-AMD64 version)
ii  grub-efi-amd64-bin 2.02+dfsg1-20+deb10u4
amd64    GRand Unified Bootloader, version 2 (EFI-AMD64 modules)
ii  grub-efi-amd64-signed 1+2.02+dfsg1+20+deb10u4
amd64    GRand Unified Bootloader, version 2 (amd64 UEFI signed by
Debian)
ii  grub-firmware-qemu 2.02+dfsg1-20+deb10u4
amd64    GRUB firmware image for QEMU
ii  grub2-common 2.02+dfsg1-20+deb10u4
amd64    GRand Unified Bootloader (common files for version 2)
markus@bmtMB1:~$

Thanks for posting text.

Cheers,
David.

Re: apt tells me that grub-efi, grub2-common are no longer needed

[Markus]

No, not that I am aware of. But here is the ouput of

markus@bmtMB1:~$ sudo dpkg -l | grep grub
ii  grub-common 2.02+dfsg1-20+deb10u4   
amd64    GRand Unified Bootloader (common files)
rc  grub-efi-amd64 2.02+dfsg1-20+deb10u3   
amd64    GRand Unified Bootloader, version 2 (EFI-AMD64 version)
ii  grub-efi-amd64-bin 2.02+dfsg1-20+deb10u4   
amd64    GRand Unified Bootloader, version 2 (EFI-AMD64 modules)
ii  grub-efi-amd64-signed 1+2.02+dfsg1+20+deb10u4 
amd64    GRand Unified Bootloader, version 2 (amd64 UEFI signed by
Debian)
ii  grub-firmware-qemu 2.02+dfsg1-20+deb10u4   
amd64    GRUB firmware image for QEMU
ii  grub2-common 2.02+dfsg1-20+deb10u4   
amd64    GRand Unified Bootloader (common files for version 2)
markus@bmtMB1:~$

Cheers
Markus


Am 23.06.21 um 16:43 schrieb David Wright:

Please post as text, not *just* html.

On Wed 23 Jun 2021 at 15:55:04 (+0200), Markus wrote:


   

 
   
   
 Hi, just before and also after today's "apt full-upgrade" apt tells
 me that:
 
 The following packages were automatically installed and are no longer 
required:
efibootmgr grub-efi-amd64-bin grub-efi-amd64-signed grub2-common
libappindicator3-1 libcanberra-gtk3-0 libcanberra-gtk3-module
libclutter-gtk-1.0-0 libdbusmenu-glib4 libdbusmenu-gtk3-4 libindicator3-7
libupsclient4 linux-headers-5.10.0-0.bpo.4-amd64
linux-headers-5.10.0-0.bpo.4-common linux-image-5.10.0-0.bpo.4-amd64
linux-kbuild-4.19 linux-kbuild-5.9 mokutil shim-helpers-amd64-signed
shim-signed-common
shim-unsigned


 I don't have a good feeling when I see that it allows me to remove 
 "efibootmgr grub-efi-amd64-bin grub-efi-amd64-signed grub2-common"
 
 
 
 What is wrong here? I am on Buster and used kernel
 5.10.0-0.bpo.5-amd64. With today's
 
 full-upgrade 5.10.0-0.bpo.7-amd64 came in.

Has grub-efi-amd64 been accidentally removed? AIUI that's the package
which depends on having the packages to boot your machine.

Cheers,
David.

apt tells me that grub-efi, grub2-common are no longer needed

[Markus]

  
  
Hi, just before and also after today's "apt full-upgrade" apt tells
me that:

The following packages were automatically installed and are no longer required:
efibootmgr grub-efi-amd64-bin grub-efi-amd64-signed grub2-common
libappindicator3-1 libcanberra-gtk3-0 libcanberra-gtk3-module
libclutter-gtk-1.0-0 libdbusmenu-glib4 libdbusmenu-gtk3-4 libindicator3-7
libupsclient4 linux-headers-5.10.0-0.bpo.4-amd64
linux-headers-5.10.0-0.bpo.4-common linux-image-5.10.0-0.bpo.4-amd64
linux-kbuild-4.19 linux-kbuild-5.9 mokutil shim-helpers-amd64-signed
shim-signed-common
shim-unsigned


I don't have a good feeling when I see that it allows me to remove 
"efibootmgr grub-efi-amd64-bin grub-efi-amd64-signed grub2-common"



What is wrong here? I am on Buster and used kernel
5.10.0-0.bpo.5-amd64. With today's

full-upgrade 5.10.0-0.bpo.7-amd64 came in.


Cheers
  

Re: Ownership and permissions on /run/user/601/doc ???

[Markus Schönhaber]

01.06.21, 17:28 +0200, John Conover:

> Peculiar ownership and permissions on /run/user/601/doc:
> 
> d?  ? ??   ?? doc/
> 
> and it can not be changed as root.
> 
> Logging out, then in, same thing.
> 
> Any help on fixing it would be greatly appreciated.

There's likely nothing to fix. This is how the mount point of some FUSE
filesystems look when viewed from someone else as the owner.
In your case, try to look at it as the user with id 601.

BTW: findmnt will show what is mounted where.

-- 
Regards
  mks

Re: scrcpy: a really cool and very useful utility not in debian repos?

[Markus Schönhaber]

06.04.21, 11:33 +0200, Albretch Mueller:

> # date; apt install scrcpy
> Tue Apr  6 05:27:12 EDT 2021
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> E: Unable to locate package scrcpy
> #
> 
>  https://github.com/Genymobile/scrcpy



-- 
Regards
  mks

Re: Qemu 9pfs sftp chrootdirectory option issue

[Markus Schönhaber]

28.10.20, 19:19 +0100 john doe:

> On 10/28/2020 6:51 PM, Markus Schönhaber wrote:
>> 28.10.20, 18:30 +0100 john doe:
> 
>>> $ ls -dl /srv/sftp/9p
>>> drwx-- 8 root root ... /srv/sftp/9p
>>
>> Isn't "9p" supposed to be the share directory? If it is, why is it owned
>> by root and has these restrictive permissions?
>>
> 
> Because of the chrootdirectory directive (see above).

That's why I suggested (twice!) to set the ChrootDirectory to the
directory that *contains* the share directory.

>> Assuming
>> ChrootDirectory -> /srv/sftp -> make this root:root, drwxr-xr-x
>> share -> /srv/sftp/9p -> make this libvirt-qemu:libvirt-qemu, drwxr-xr-x
>>
> 
> If I do that, I can't even connect to the sftp server:
> 
> $ sftp sftp9p
> packet_write_wait: Connection to ::1 port 22: Broken pipe
> Connection closed

The logs will probably tell you what exactly is wrong.

-- 
Regards
  mks

Re: Qemu 9pfs sftp chrootdirectory option issue

[Markus Schönhaber]

28.10.20, 18:30 +0100 john doe:

> On 10/21/2020 11:02 PM, Markus Schönhaber wrote:
>> 21.10.20, 19:11 +0200, john doe:
>>
>>> On 10/20/2020 7:59 PM, Markus Schönhaber wrote:
>>
>>>> How about moving the 9pshare to a root-owned directory and pointing the
>>>> ChrootDirectory there, for example:
>>>> share -> /all/owned/by/root/9pshare
>>>> ChrootDirectory -> /all/owned/by/root
>>>>
>>>
>>> Thank you for this.
>>>
>>> I can only do that if 'passthrough' is used, as I don't realy understand
>>> the implecations of running qemu as root, I was hoping to find a way
>>> with 'mapped'.
>>> 'mapped' requires that the directory on the host is set to the group and
>>> user used by qemu, 'libvirt-qemu in this case.
>>
>> I don't see the problem with chown'ing the 9pshare directory to the qemu
>> user in my example above.
>>
>
> Okay, following your instructions I can now connect using sftp but I can
> not access the content of the share:

No, you seemingly didn't follow what I said.

> $ ls -dl /srv/sftp/9p
> drwx-- 8 root root ... /srv/sftp/9p

Isn't "9p" supposed to be the share directory? If it is, why is it owned
by root and has these restrictive permissions?

Assuming
ChrootDirectory -> /srv/sftp -> make this root:root, drwxr-xr-x
share -> /srv/sftp/9p -> make this libvirt-qemu:libvirt-qemu, drwxr-xr-x

> $ sftp sftp9p
> Connected to sftp9p.
> sftp> ls
> remote readdir("/"): Permission denied

Of course. Guessing from what you wrote above, only root can even list
the directory's contents (or change into it, in the first place).

-- 
Regards
  mks

Re: Qemu 9pfs sftp chrootdirectory option issue

[Markus Schönhaber]

21.10.20, 19:11 +0200, john doe:

> On 10/20/2020 7:59 PM, Markus Schönhaber wrote:

>> How about moving the 9pshare to a root-owned directory and pointing the
>> ChrootDirectory there, for example:
>> share -> /all/owned/by/root/9pshare
>> ChrootDirectory -> /all/owned/by/root
>>
> 
> Thank you for this.
> 
> I can only do that if 'passthrough' is used, as I don't realy understand
> the implecations of running qemu as root, I was hoping to find a way
> with 'mapped'.
> 'mapped' requires that the directory on the host is set to the group and
> user used by qemu, 'libvirt-qemu in this case.

I don't see the problem with chown'ing the 9pshare directory to the qemu
user in my example above.

-- 
Regards
  mks

Re: Qemu 9pfs sftp chrootdirectory option issue

[Markus Schönhaber]

20.10.20, 18:49 +0200, john doe:

> Debians,
> 
> According to (1):
> 
> "ChrootDirectory
> Specifies a path to chroot(2) to after authentication. This path, and
> all its components, must be root-owned directories that are not writable
> by any other user or group. After the chroot, sshd(8)"
> 
> 
> i'm using the Qemu's 9p implimentation (mapped mode) to share files
> between guests and host, (2) due to lack of space on the guest.
> This mountpointis not owned by root and I'm  at a lost on how to have
> sftp access to that guest while pointing the chroot directory directive
> to that share.

How about moving the 9pshare to a root-owned directory and pointing the
ChrootDirectory there, for example:
share -> /all/owned/by/root/9pshare
ChrootDirectory -> /all/owned/by/root

-- 
Regards
  mks

Re: HPLIP - upgrade to 3.20.0 and can no longer print.

[Markus Schönhaber]

06.03.20, 10:33 CET Markus Schönhaber:

> 04.03.20, 14:44 CET Brad Rogers:
> 
>> Is anybody else having issues with hplip 3.20.0?

> There might be an upstream issue with hplip 3.20.

According to this comment
https://bugs.launchpad.net/hplip/+bug/1866291/comments/6
to the bug report, hplip 3.20.3 should fix the problem.

-- 
Regards
  mks

Re: HPLIP - upgrade to 3.20.0 and can no longer print.

[Markus Schönhaber]

04.03.20, 14:44 CET Brad Rogers:

> Is anybody else having issues with hplip 3.20.0?

There might be an upstream issue with hplip 3.20.
I'm on Arch and since the upgrade of hplip to 3.20.2 I was unable to
print. My MFP 377dw spit out multiple pages - some blank, some showing a
line or two of gibberish - when trying to print something.
Downgrading to 3.19.12 fixed that for me.

-- 
Regards
  mks

Audacity: display broken

[Markus Grunwald]

Hello,

After a while, I wanted to edit some audio files with
audacity. Unfortunately, it is impossible because the display is broken:
The Menus work, but that's about it. The waveform display is never
updated, nor are the various meters.

I have not found any hint that someone besides me is experiencing these
issues :/ So it might be something about my setup. But that shouldn't be
so special: Its a Lenovo T570 with debian testing. I started audacity in
i3 (my usual wm) and xfce4 (just in case) but got the same results.

That's the setup:

ii  audacity   2.3.3-1  amd64fast, cross-platform audio editor
ii  audacity-data  2.3.3-1  all  fast, cross-platform audio editor 
(data)

00:02.0 VGA compatible controller: Intel Corporation HD Graphics 620 (rev 02)

[ 34018.801] (II) Loading /usr/lib/xorg/modules/drivers/intel_drv.so
[ 34018.801] (II) Module intel: vendor="X.Org Foundation"
[ 34018.801]compiled for 1.20.4, module version = 2.99.917
[ 34018.801]Module class: X.Org Video Driver
[ 34018.801]ABI class: X.Org Video Driver, version 24.0
[ 34018.801] (II) intel: Driver for Intel(R) Integrated Graphics Chipsets:
i810, i810-dc100, i810e, i815, i830M, 845G, 854, 852GM/855GM, 865G,
915G, E7221 (i915), 915GM, 945G, 945GM, 945GME, Pineview GM,
Pineview G, 965G, G35, 965Q, 946GZ, 965GM, 965GME/GLE, G33, Q35, Q33,
GM45, 4 Series, G45/G43, Q45/Q43, G41, B43
[ 34018.801] (II) intel: Driver for Intel(R) HD Graphics
[ 34018.801] (II) intel: Driver for Intel(R) Iris(TM) Graphics
[ 34018.801] (II) intel: Driver for Intel(R) Iris(TM) Pro Graphics
[ 34018.802] (II) intel(0): Using Kernel Mode Setting driver: i915, version 
1.6.0 20190822

Can anyone replicate my problem? Or even better knows how to fix it?

Thanks,


--
Markus Grunwald
https://www.the-grue.de/~markus/markus_grunwald.gpg


signature.asc
Description: PGP signature

Re: Giveaway-Laptop: sending system mails

[Markus Grunwald]

Hi Reco,

> NEWS.Debian.gz have this to say on the issue:


That was the hint I needed :) Thanks a lot! I sometimes read the files
in /usr/share/doc/${PACKAGE}, but not often enough, it seems.

Now I have a working E-Mail setup and the guy who got the computer is
happy with it. He doesn't even know he's using Linux instead of window$
:p

Thanks again,
--
Markus Grunwald
https://www.the-grue.de/~markus/markus_grunwald.gpg


signature.asc
Description: PGP signature

Re: No sound with Pulseaudio

[Markus Grunwald]

Hello


[...] I can not get any sound and in



Pavucontrol I can only see a virtual sound output.
Does anyone have an idea to solve this problem?


I had the same experience for (almost) every new or old 
installation
that I made. Fresh install of testing or stable, never mind: each 
time,
Sound didn't work from scratch with Pulseaudio. I deinstalled it, 
and

voila, everything worked fine.

There is only one exception and that's my home theatre/gaming 
PC. I
don't remember the details now, but to get kodi run along with 
steam
nicely, I hat to get Pulseaudio to work. And in /this/ case, the 
PA
tools were a blessing because I could very easily switch between a 
7.2 and a

5.1 setup. That was necessary, because one game crashed with 7.2 🤦

So whenever I do a fresh installation now, I check if Pulseaudio 
works

and if not I immediately uninstall it. It's usually not worth the
hassle.

cu
--
Markus Grunwald
https://www.the-grue.de/~markus/markus_grunwald.gpg


signature.asc
Description: PGP signature

Re: Debian 8

[Markus Schönhaber]

Hector Leon, 02.01.20, 17:53 CET:

> Is there a way to get a copy of Debian 8? Thank you !

http://cdimage.debian.org/mirror/cdimage/archive/

-- 
Regards
  mks

Giveaway-Laptop: sending system mails

[Markus Grunwald]

Dear List Participants,

An elder friend of mine uses his 10 year old Sony Vayo with Windows 7
mainly for browsing the net, homebanking, E-Mails. Due to several
reasons, I want to give him a Laptop with Debian Linux that I will support.

Several things should work to keep my active involvement low. One of the
basics is: I want to get mails whenever "something" happens. I think
that msmtp is the right tool for me, but correct me if I'm wrong, please.

But, there is a problem: I have to put the plain mail password in
/etc/msmtprc, because the normal user won't be there to unlock a gpg
file or give msmtp the password in any other way. That means, I want
/etc/msmtprc to be only readable by root (440). But then, users other
than root (nobody maybe?) won't be able to send mails...

I wonder if that could be solved in a better way? I don't want to miss
anything from unattended-upgrades or logcheck or apt-listchanges...

I would love to get your thoughts on that.
-- 
Markus Grunwald
https://www.the-grue.de/~markus/markus_grunwald.gpg



signature.asc
Description: OpenPGP digital signature

Gnucash broken after Update

[Markus Grunwald]

Hi,

a few days ago, I ran an apt update of my debian/desting machine and got
a new gnucash version. Apt DID tell me that there was something to do to
keep gnucash working. I had no time to do that, then, but I was used to
getting the instructions per e-mail. But at the time my e-mail setup was
broken and I didn't notice. Bummer.

Now I need to use gnucash and online banking is completely broken. I
searched everywhere, found the hint in
/usr/share/doc/aqbanking-tools/README.keyfile-update, but that didn't
help...

I /think/ the message had something to do with moved configuration files
for gnucash, but am not sure.

Do you have any hint for me? I urgendly need gnucash for my homebanking...

TIA,
-- 
Markus Grunwald
https://www.the-grue.de/~markus/markus_grunwald.gpg



signature.asc
Description: OpenPGP digital signature

potential bug: buster: systemd-networkd not working reliable

[Markus Rathgeb]

error is
different.

But while reading that bug, I assume the NDISC message above could be
a signal that something went wrong...

Upstream accepts bug reports only for the two most recents systemd
version (243 and 242), so I cannot report it upstream.

Can you help?

Best regards,
Markus

Mailarchiver

[Markus Raps]

Hi Guys,

a customer wants an mailarchiver with statistics so he can find 
mailboxes that no ones using.

Webgui preferred
it need to work with postfix or as an relay of somekind

also he is willing to pay for it, so commercial software is okay.
any suggestions?

--
Mit freundlichen Grüßen / best regards
Markus Raps

-
Web: rapsplace.de
Mail: m.r...@rapsplace.de
Mobile: +49 1787 80 50 42
-

proftpd mod_sftp broken in buster?

[Markus Raps]

Hi there!

Anyone else having trouble with setting up sftp using proftpd on buster?



DefaultRoot ~
RequireValidShell   off

SFTPEngine  on
Port
SFTPLog /var/log/proftpd/sftp.log

SFTPHostKey /etc/ssh/ssh_host_rsa_key

SFTPAuthMethods publickey keyboard-interactive

#SFTPAuthorizedUserKeys file:/etc/proftpd/authorized_keys/%u

# Enable compression
SFTPCompression delayed




Jul 15 12:49:52 web15 systemd[1]: Starting LSB: Starts ProFTPD daemon...
Jul 15 12:49:52 web15 proftpd[2599]: Starting ftp server: 
proftpd2019-07-15 12:49:52,667 web15 proftpd[2606]: processing 
configuration directory '/etc/proftpd/conf.d/'
Jul 15 12:49:52 web15 proftpd[2599]: Wrong passphrase for this key.  
Please try again.
Jul 15 12:49:52 web15 proftpd[2599]: Wrong passphrase for this key.  
Please try again.
Jul 15 12:49:52 web15 proftpd[2599]: Wrong passphrase for this key.  
Please try again.
Jul 15 12:49:52 web15 proftpd[2599]: 2019-07-15 12:49:52,674 web15 
proftpd[2606] web15.mm-com.de: mod_sftp/1.0.0: error reading passphrase 
for SFTPHostKey '/etc/ssh/ssh_host_rsa_key': (unknown)
Jul 15 12:49:52 web15 proftpd[2599]: 2019-07-15 12:49:52,674 web15 
proftpd[2606] web15.mm-com.de: mod_sftp/1.0.0: unable to use key in 
SFTPHostKey '/etc/ssh/ssh_host_rsa_key', exiting

Jul 15 12:49:52 web15 proftpd[2599]: .
Jul 15 12:49:52 web15 systemd[1]: Started LSB: Starts ProFTPD daemon.


--
Mit freundlichen Grüßen / best regards
Markus Raps

HD Webcam Stream

[Markus Raps]

30 tbr, 90k tbn, 1000k tbc

Stream #0:1: Audio: aac (LC), 32000 Hz, stereo, fltp, 128 kb/s
Metadata:
  encoder : Lavc57.64.101 aac
Stream mapping:
  Stream #1:0 -> #0:0 (copy)
  Stream #0:0 -> #0:1 (pcm_s16le (native) -> aac (native))
Press [q] to stop, [?] for help
[alsa @ 0x1a9d680] Thread message queue blocking; consider raising the 
thread_queue_size option (current value: 8)
frame=  733 fps= 30 q=-1.0 Lsize=  203742kB time=00:00:24.51 
bitrate=68090.1kbits/s speed=   1x
video:188517kB audio:384kB subtitle:0kB other streams:0kB global 
headers:0kB muxing overhead: 7.855927%

[aac @ 0x1aac7a0] Qavg: 426.005


ffmpeg -i udp://192.168.4.4: -c copy save_video.ts
ffmpeg version 3.4.6-0ubuntu0.18.04.1 Copyright (c) 2000-2019 the FFmpeg 
developers

  built with gcc 7 (Ubuntu 7.3.0-16ubuntu3)
  configuration: --prefix=/usr --extra-version=0ubuntu0.18.04.1 
--toolchain=hardened --libdir=/usr/lib/x86_64-linux-gnu 
--incdir=/usr/include/x86_64-linux-gnu --enable-gpl --disable-stripping 
--enable-avresample --enable-avisynth --enable-gnutls --enable-ladspa 
--enable-libass --enable-libbluray --enable-libbs2b --enable-libcaca 
--enable-libcdio --enable-libflite --enable-libfontconfig 
--enable-libfreetype --enable-libfribidi --enable-libgme --enable-libgsm 
--enable-libmp3lame --enable-libmysofa --enable-libopenjpeg 
--enable-libopenmpt --enable-libopus --enable-libpulse 
--enable-librubberband --enable-librsvg --enable-libshine 
--enable-libsnappy --enable-libsoxr --enable-libspeex --enable-libssh 
--enable-libtheora --enable-libtwolame --enable-libvorbis 
--enable-libvpx --enable-libwavpack --enable-libwebp --enable-libx265 
--enable-libxml2 --enable-libxvid --enable-libzmq --enable-libzvbi 
--enable-omx --enable-openal --enable-opengl --enable-sdl2 
--enable-libdc1394 --enable-libdrm --enable-libiec61883 
--enable-chromaprint --enable-frei0r --enable-libopencv --enable-libx264 
--enable-shared

  libavutil  55. 78.100 / 55. 78.100
  libavcodec 57.107.100 / 57.107.100
  libavformat57. 83.100 / 57. 83.100
  libavdevice57. 10.100 / 57. 10.100
  libavfilter 6.107.100 /  6.107.100
  libavresample   3.  7.  0 /  3.  7.  0
  libswscale  4.  8.100 /  4.  8.100
  libswresample   2.  9.100 /  2.  9.100
  libpostproc54.  7.100 / 54.  7.100
Input #0, mpegts, from 'udp://192.168.4.4:':
  Duration: N/A, start: 39.264056, bitrate: N/A
  Program 1
Metadata:
  service_name: Service01
  service_provider: FFmpeg
Stream #0:0[0x100]: Data: bin_data ([6][0][0][0] / 0x0006)
Output #0, mpegts, to 'save_video.ts':
Output file #0 does not contain any stream


--
Mit freundlichen Grüßen / best regards
Markus Raps

Re: [sbuild] how to create chroot environment

[Markus Schönhaber]

Tomas, 15.4.2019 16:38 +0200:

>   --chroot-mode=schroot|sudo|autopkgtest
> Select the desired chroot mode. Four values are possible:
> schroot [...], sudo [...] and autopkgtest [...]

Out of curiosity: am I missing something or are there only three of the
"Four values" which "are possible" documented? What might be the fourth?

-- 
Regards
  mks

Re: May be silly question, but: Lost my qq(´) and qq(´) key

[Markus Schönhaber]

Martin, 8.4.2019 12:29 +0200:

> since a few days, my qq(´) and qq(´)¹ don't work with a single press. I have 
> to press twice.
> Who can tell me why?
> And, ho do I get my old single press behavior back?
> Sorry I don't get this keyboard magic in this life...
> 
> 1) On a German keyboard, it is the key left of the backspace.

By choosing a keyboard layout with "nodeadkeys" / "ohne Akzenttasten"
you'll probably get the old behaviour back where a single key press
makes such accented characters appear.

-- 
Regards
  mks

Re: How did relatime get set on my Wheezy system?

[Markus Schönhaber]

Rhkramer, 4.4.2019 01:38 +0200:

> What puzzles me is this -- when I look at /etc/fstab for some of the other 
> partitions that are already ext4 I see entries like this:
> 
> # /var was on /dev/sdb8 during installation
> UUID=874304c9-36c6-4572-909b-c4c75d13269a /varext4defaults
> 
> 0   2
> 
> When I look at the same partition in /etc/mtab, I see this:
> 
> /dev/sdb8 /var ext4 rw,relatime,user_xattr,barrier=1,data=ordered 0 0
> 
> What I don't understand, for example, is where and how relatime got set (and 
> maybe some of the other parameters).  

relatime is the default (unless you specify otherwise)
man mount contains this:
>   relatime
>   [...]
>   Since  Linux  2.6.30,  the  kernel defaults to the behavior provided by
>   this option (unless noatime was specified), and the strictatime option
>   is required to obtain traditional semantics.  In addition, since
>   Linux 2.6.30, the file's last access time is always updated if it is
>   more than 1 day old.

-- 
Regards
  mks

Re: systemd: how to start a service (kea DHCP4) after all network interfaces are up?

[Markus Schönhaber]

Henning Follmann, 18.3.2019 20:07 +0100:

> Have you considered to switch from /e/n/i to systemd-networkd?
> I think that would solve the problem.

No, I'm not considering to switch the entire way of configuring the
network just to (maybe) get something working which I'd call a pretty
basic feature. I don't even know what else might be affected by such a
switch (scripts in if-up.d, whatever...).

-- 
Regards
  mks

Re: systemd: how to start a service (kea DHCP4) after all network interfaces are up?

[Markus Schönhaber]

Greg Wooledge, 18.3.2019 13:30 +0100:

> On Sat, Mar 16, 2019 at 12:31:50PM +0100, Markus Schönhaber wrote:
>> It seems that the DHCP server is started while the interface it is
>> configured to listen on is not yet up and therefore refuses to work.
>> How can I make sure that the kea-dhcp4-server.service is started no
>> sooner than after all network interfaces are up?
> 
> 1) Make sure the interface is marked "auto" and NOT "allow-hotplug"
>in /etc/network/interfaces.
> 
>Interfaces that are marked "auto" are required to be up before systemd
>will consider network-online.target to be satisfied.  Interfaces that
>are marked "allow-hotplug" are NOT required to be up.
> 
>Note that the Debian installer marks all interfaces except loopback
>as "allow-hotplug" because it assumes you're using a laptop with a
>Wifi or removable USB network interface, even if the interface is
>actually PCI and internal, or even soldered to the motherboard, even
>if the machine you're installing on is a desktop PC or a rack-mounted
>server.
> 
> 2) Make sure your service has
> 
> [Unit]
> Wants= network-online.target
> After= network-online.target
> 
>either in the native unit file, or in a local drop-in directory.
> 
>Services with these options will wait for all network interfaces that
>are marked "auto" to be brought up, before these services can be
>started.

1) and 2) was already the case on my machine. Nevertheless the service
was started before the needed interface was up.
That's why I asked in the first place.

Judging from the info in the other answers I got, it's obviously known
that 1) and 2) are *not* enough to make sure the start of such a service
is delayed until the required interfaces are up.

-- 
Regards
  mks

Re: systemd: how to start a service (kea DHCP4) after all network interfaces are up?

[Markus Schönhaber]

Sven Joachim, 16.3.2019 21:11 +0100:

> On 2019-03-16 19:20 +0100, Markus Schönhaber wrote:
> 
>> John Doe, 16.3.2019 14:18 +0100:
>>
>>> If your interface is configured by 'systemd', you could try:
>>>
>>> $ systemctl enable systemd-networkd-wait-online
>>
>> Thanks, but no, my network configuration is done through
>> /etc/network/interfaces. Therefore this won't help.
> 
> Try "systemctl enable ifupdown-wait-online.service" then.
> See bug #912112[1].

Thanks for the info! But alas, since I'm on stretch, it isn't that
easy, since the ifupdown package there provides neither the
ifupdown-wait-online.service file nor the wait-online.sh script.
I've downloaded the .deb for buster and tried to extract the relevant
files from there and install them on my system, but I didn't manage to
get that working in a way that the DHCP server was kept from starting
too early.
Due to the lack of time I'll refrain from trying to find out what I may
have done wrong. And since there seems to be no out-of-the-box solution
for this problem on stretch anyway, I'll stick to my ugly workaround for
now and hope this will be sorted out in buster.

That said, thanks again for pointing me in the right direction!

-- 
Regards
  mks

Re: systemd: how to start a service (kea DHCP4) after all network interfaces are up?

[Markus Schönhaber]

John Doe, 16.3.2019 14:18 +0100:

> If your interface is configured by 'systemd', you could try:
> 
> $ systemctl enable systemd-networkd-wait-online

Thanks, but no, my network configuration is done through
/etc/network/interfaces. Therefore this won't help.

-- 
Regards
  mks

systemd: how to start a service (kea DHCP4) after all network interfaces are up?

[Markus Schönhaber]

Hi,

I have installed the kea DHCP4 server on a machine running recent
stretch and two ethernet interfaces. kea is configured to answer DHCP
requests on one of the interfaces.
On boot, the kea-dhcp4-server.service is started but doesn't work. It
logs this:
> DHCPSRV_OPEN_SOCKET_FAIL failed to open socket: the interface enp3s0 is down 
> or has no usable IPv4 addresses configured
After manually restarting the service it works fine.

It seems that the DHCP server is started while the interface it is
configured to listen on is not yet up and therefore refuses to work.
How can I make sure that the kea-dhcp4-server.service is started no
sooner than after all network interfaces are up?

What I've tried:
1 Copied /lib/systemd/system/kea-dhcp4-server.service to
  /etc/systemd/system and added
  Wants=networking.service
  After=networking.service
  to the [Unit] section of the copy.
  The problem remained.
2 Created a shell script that does a
  sleep 5
  before exec'ing the original
  /usr/sbin/kea-dhcp4 -c /etc/kea/kea-dhcp4.conf
  and replaced the unit's ExexStart line with the path to this script.

2 does indeed help: the dhcp server works as it should after a reboot.
Well, this is a workaround at best, a terrible mess at worst, but it's
definitely not a solution. So I hope someone can answer my question above.

-- 
Regards
  mks

Re: get my ip address

[Markus Schönhaber]

Tony, 15.2.2019, 11:11:29 +0100:

> Debian 9. I need to read my IPv6 address into a python script.
> 
> I am aware that I can call ip a and parse the result. The parsing,
> whilst quite achievable, is slightly tricky, but I can manage the RE, so
>  that's not my question.
> 
> Is there any other way to obtain this data, maybe from /sys?

Take a look at this:
https://pypi.org/project/netifaces/

This is packaged on stretch as python[3]-netifaces

-- 
Regards
  mks

Emacs font size off by factor 2

[Markus Grunwald]

Hello,

after the dist-upgrade yesterday, emacs font size is twice as large as
it should be.

'(default ((t (:inherit nil :stipple nil :background "#3f3f3f"
:foreground "#dcdccc" :inverse-video nil :box nil :strike-through nil
:overline nil :underline nil :slant normal :weight normal :height 128
:width normal :foundry "outline" :family "DejaVu Sans Mono"

With this setting, I got a 12pt sized default font until yesterday.
After the update, I have to use :height 64 to get the same size...

As far as I can see, no dpi settings have been changed.

Can you tell me what happened there?
-- 
Markus Grunwald
https://www.the-grue.de/~markus/markus_grunwald.gpg

Re: Why does sound encoded with mencoder crackle in debian stretch but not in buster?

[Markus Grunwald]

Hello Dan,

> Does
> -oac copy
> do the same thing?
No, that works!

Strange.


-- 
Markus Grunwald
https://www.the-grue.de/~markus/markus_grunwald.gpg

Why does sound encoded with mencoder crackle in debian stretch but not in buster?

[Markus Grunwald]

I'm transcoding some TV Series with mencoder. I wrote a script where the
core is:

mencoder 1.ts -o 1.avi -passlogfile /tmp/tmp.VQ6WZm1tSo/pass.log
-demuxer lavf -nosub -vf softskip,harddup -aspect 16:9 -aid 0 -oac lavc
-lavcopts acodec=ac3:abitrate=128 -ovc x264 -x264encopts
pass=1:bitrate=800:nointerlaced:force_cfr:frameref=3:mixed_refs:bframes=4:b_adapt=2:b_pyramid=normal:weight_b:weightp=1:direct_pred=auto:aq_mode=1:me=umh:me_range=16:subq=7:nombtree:psy_rd=0.8,0.2:chroma_me:trellis=1:cabac:deblock:8x8dct:partitions=p8x8,b8x8,i8x8,i4x4:nofast_pskip:nodct_decimate:threads=auto:keyint=250:keyint_min=25

This is probably the only interesting part for this post:

-oac lavc -lavcopts acodec=ac3:abitrate=128

I wrote that script on my laptop, a debian buster machine. Everything is
fine here. But when I let the script run on the machine where all the
recordings are stored (a debian stretch machine), the sound is
disturbed. Some kind of ~6Hz crackle. Video is ok.

IMHO it has to do with some different version of a binary or library.
That's why I tried it with different audio encoder:

-oac mp3lame -lameopts preset=medium

Still the same.

The versions for mencoder differ a tiny bit on both machines:

ii  mencoder   2:1.3.0-6amd64MPlayer's Movie Encoder
ii  mencoder   2:1.3.0-8+b4 amd64MPlayer's Movie Encoder

But the differences seem quite minor:

https://metadata.ftp-master.debian.org/changelogs//main/m/mplayer/mplayer_1.3.0-8_changelog

Any ideas how I get that working on the stretch machine?
-- 
Markus Grunwald
https://www.the-grue.de/~markus/markus_grunwald.gpg

Re: btrfs and deduplication

[Markus Raps]

On 2018-09-26 00:40, Anders Andersson wrote:
On Tue, Sep 25, 2018 at 9:56 AM, Markus Raps  
wrote:

Hi there,

currently iam trying to get deduplication working in debian/btrfs

#so i created a btrfs filesystem

mkfs.btrfs /dev/vdb1
mkdir /mnt/btrfs
mount /dev/vdb1 /mnt/btrfs

# create some random file
dd if=/dev/urandom of=/mnt/btrfs/img bs=1M count=1024
for i in {1..30}; do cp /mnt/btrfs/img /mnt/btrfs/img$i; done

# dedup this stuff
jdupes -S -B -r /mnt/btrfs/
Examining 31 files, 1 dirs (in 1 specified)
Deduplication done (30 files processed)

raps-debian btrfs # btrfs fi df /mnt/btrfs/
Data, single: total=31.50GiB, used=30.96GiB
System, DUP: total=32.00MiB, used=16.00KiB
Metadata, DUP: total=222.94MiB, used=33.69MiB
GlobalReserve, single: total=33.56MiB, used=0.00B

raps-debian btrfs # btrfs fi usage /mnt/btrfs/
Overall:
Device size:  32.00GiB
Device allocated: 32.00GiB
Device unallocated:1.04MiB
Device missing:  0.00B
Used: 31.03GiB
Free (estimated):549.41MiB  (min: 549.41MiB)
Data ratio:   1.00
Metadata ratio:   2.00
Global reserve:   33.56MiB  (used: 0.00B)

Data,single: Size:31.50GiB, Used:30.96GiB
   /dev/vdb1  31.50GiB

Metadata,DUP: Size:222.94MiB, Used:33.69MiB
   /dev/vdb1 445.88MiB

System,DUP: Size:32.00MiB, Used:16.00KiB
   /dev/vdb1  64.00MiB

Unallocated:
   /dev/vdb1   1.04MiB
raps-debian btrfs #



hm ... hasn't worked.
wrong tool ? did i missed something
or have i completely misunderstood deduplication?



I can not answer this, but as a long time user of btrfs who has never
tried deduplication I got curious, so I tried to recreate your result
on my debian testing workstation, and for me it worked. Here is the
log of exactly how I created the filesystem, and the output from btrfs
fi usage before and after running jdupes. As you can see from the
usage after deduplication, both the allocated and used space has
decreased to what would be expected.

Perhaps your kernel is too old? It is possible that you are being hit
by the issue described here:
https://btrfs.wiki.kernel.org/index.php/Changelog#By_feature

"The range for out-of-band deduplication implemented by the
EXTENT_SAME ioctl will split the range into 16MiB chunks. Up to now
this was the overall limit and effectively only the first 16MiB was
deduplicated."

I can't say I understand much about it, but it was fixed in kernel
4.18 which happens to be what I use.



# btrfs --version
btrfs-progs v4.17
# uname -a
Linux spacelab 4.18.0-1-amd64 #1 SMP Debian 4.18.6-1 (2018-09-06)
x86_64 GNU/Linux
# lvcreate spacelab -n dedup -L 100G
# mkfs.btrfs /dev/spacelab/dedup
# mount /dev/spacelab/dedup /mnt/
# dd if=/dev/urandom of=/mnt/img bs=1M count=1024
# for i in {1..30}; do cp /mnt/img /mnt/img$i;done
# btrfs fi usage /mnt
Overall:
Device size: 100.00GiB
Device allocated:  33.02GiB
Device unallocated:  66.98GiB
Device missing: 0.00B
Used:  31.04GiB
Free (estimated):  67.98GiB(min: 67.98GiB)
Data ratio:  1.00
Metadata ratio:  1.00
Global reserve:  33.23MiB(used: 0.00B)

Data,single: Size:32.01GiB, Used:31.01GiB
   /dev/mapper/spacelab-dedup  32.01GiB

Metadata,single: Size:1.01GiB, Used:33.36MiB
   /dev/mapper/spacelab-dedup   1.01GiB

System,single: Size:4.00MiB, Used:16.00KiB
   /dev/mapper/spacelab-dedup   4.00MiB

Unallocated:
   /dev/mapper/spacelab-dedup  66.98GiB
# jdupes -S -B -r /mnt
Scanning: 31 files, 1 items (in 1 specified)
Deduplication done (30 files processed)
# btrfs fi usage /mnt
Overall:
Device size: 100.00GiB
Device allocated:   2.02GiB
Device unallocated:  97.98GiB
Device missing: 0.00B
Used:   1.00GiB
Free (estimated):  97.99GiB(min: 97.99GiB)
Data ratio:  1.00
Metadata ratio:  1.00
Global reserve:  16.00MiB(used: 0.00B)

Data,single: Size:1.01GiB, Used:1.00GiB
   /dev/mapper/spacelab-dedup   1.01GiB

Metadata,single: Size:1.01GiB, Used:1.38MiB
   /dev/mapper/spacelab-dedup   1.01GiB

System,single: Size:4.00MiB, Used:16.00KiB
   /dev/mapper/spacelab-dedup   4.00MiB

Unallocated:
   /dev/mapper/spacelab-dedup  97.98GiB


just updated the kernel to 4.18
now it works

thank you



--
Mit freundlichen Grüßen / best regards
Markus Raps

Re: Build a custom CD image with simple-cdd

[Markus Raps]

Hi,

are you trying to preseed something?
then just extract a debian standard install disc like netinstall to 
/opt/isobuild/debian/image/


do your changes

and the script should rebuild the disk.
unfortunately UEFI only systems wont boot it.

#!/bin/bash

IMAGE=/opt/isobuild/debian/debian-9.3-auto.iso
BUILD=/opt/isobuild/debian/image/

xorriso -as mkisofs \
-r -V "Debian Auto NetInstall" \
-cache-inodes \
-J -l -b isolinux/isolinux.bin \
-c isolinux/boot.cat -no-emul-boot \
-boot-load-size 4 -boot-info-table \
-isohybrid-mbr /opt/isobuild/debian/isohdpfx.bin \
-o $IMAGE $BUILD

Cheers
Markus

btrfs and deduplication

[Markus Raps]

Hi there,

currently iam trying to get deduplication working in debian/btrfs

#so i created a btrfs filesystem

mkfs.btrfs /dev/vdb1
mkdir /mnt/btrfs
mount /dev/vdb1 /mnt/btrfs

# create some random file
dd if=/dev/urandom of=/mnt/btrfs/img bs=1M count=1024
for i in {1..30}; do cp /mnt/btrfs/img /mnt/btrfs/img$i; done

# dedup this stuff
jdupes -S -B -r /mnt/btrfs/
Examining 31 files, 1 dirs (in 1 specified)
Deduplication done (30 files processed)

raps-debian btrfs # btrfs fi df /mnt/btrfs/
Data, single: total=31.50GiB, used=30.96GiB
System, DUP: total=32.00MiB, used=16.00KiB
Metadata, DUP: total=222.94MiB, used=33.69MiB
GlobalReserve, single: total=33.56MiB, used=0.00B

raps-debian btrfs # btrfs fi usage /mnt/btrfs/
Overall:
Device size:  32.00GiB
Device allocated: 32.00GiB
Device unallocated:1.04MiB
Device missing:  0.00B
Used: 31.03GiB
Free (estimated):549.41MiB  (min: 549.41MiB)
Data ratio:   1.00
Metadata ratio:   2.00
Global reserve:   33.56MiB  (used: 0.00B)

Data,single: Size:31.50GiB, Used:30.96GiB
   /dev/vdb1  31.50GiB

Metadata,DUP: Size:222.94MiB, Used:33.69MiB
   /dev/vdb1 445.88MiB

System,DUP: Size:32.00MiB, Used:16.00KiB
   /dev/vdb1  64.00MiB

Unallocated:
   /dev/vdb1   1.04MiB
raps-debian btrfs #



hm ... hasn't worked.
wrong tool ? did i missed something
or have i completely misunderstood deduplication?


Greetings
Markus

Re: Dovecot and zlib: Mails arrive compressed

[Markus Grunwald]

Hello,

> Stupid question: How do you acces your emails?
> 1. Using dovecot imap
> 2. reading mbox(maildir?) files by thunderbird?

Not a stupid question at all: via dovecot imap


-- 
Markus Grunwald
https://www.the-grue.de/~markus/markus_grunwald.gpg

Dovecot and zlib: Mails arrive compressed

[Markus Grunwald]

Hello,

to save some precious space on my server, I wanted to enable zlib
compression in dovecot. I followed these instructions:

https://wiki2.dovecot.org/Plugins/Zlib

The relevant parts of my dovecot.conf

protocol imap {
 # Support for dynamically loadable plugins. mail_plugins is a space
separated
  # list of plugins to load.
  mail_plugins = $mail_plugins imap_zlib
...
}

plugin {
  # Used by both the Sieve plugin and the ManageSieve protocol
  sieve = ~/.dovecot.sieve
  sieve_dir = ~/sieve
  zlib_save_level = 6 # 1...9
  zlib_save = gz # gz or bz2
}

protocol lda {
  # Support for dynamically loadable plugins. mail_plugins is a space
separated
  # list of plugins to load.
  mail_plugins = $mail_plugins sieve zlib
  mail_plugin_dir = /usr/lib/dovecot/modules
  ...
}

doveconf -n showed no error, I restarted dovecot.
Now when I receive a new mail, it is compressed - but it stays
compressed :( Meaning: It arrives in Thunderbird, but it's not readable.
If I look at the mail sources in Thunderbird, it looks like zlib
compressed text...

What have I missed?

-- 
Markus Grunwald
https://www.the-grue.de/~markus/markus_grunwald.gpg

Re: Why does my system download directly from security-cdn.debian.org?

[Markus Schönhaber]

Roberto C. Sánchez, Do 23 Aug 2018 19:16:26 CEST:

> The corresponding configurations for apt-cacher-ng are:
> 
> backends_debian_sec:
> http://security.debian.org
> 
> deb_sec_mirrors:
> http://security.debian.org

> However, recent kernel updates have instead been retrieved from
> security-cdn.debian.org, like this from my cron-apt log:
> 
> Get:7 http://apt-cache.localdomain:3142/security stretch/updates/main amd64 
> samba-common all 2:4.5.12+df
> sg-2+deb9u3 [172 kB]
> Get:8 http://security-cdn.debian.org stretch/updates/main amd64 
> linux-image-4.9.0-7-amd64 amd64 4.9.110-3+deb9u2 [39.0 MB]

I'd guess that this is simply caused by security.debian.org doing a HTTP
redirect to security-cdn.debian.org (which points to fastly's CDN -
probably to spread the load).

Look here:

$ telnet security.debian.org 80
Trying 2001:a78:5:1:216:35ff:fe7f:6ceb...
Connected to security.debian.org.
Escape character is '^]'.
GET /pool/updates/main/l/linux/ HTTP/1.1
Host: security.debian.org

HTTP/1.1 302 Found
Date: Thu, 23 Aug 2018 17:43:33 GMT
Server: Apache
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Referrer-Policy: no-referrer
X-Xss-Protection: 1
Location: http://security-cdn.debian.org/pool/updates/main/l/linux/
  ^^
Cache-Control: max-age=120
Expires: Thu, 23 Aug 2018 17:45:33 GMT
Content-Length: 310
Content-Type: text/html; charset=iso-8859-1

-- 
Regards
  mks

Re: System Update Problem

[Markus Schönhaber]

Stephen P. Molnar, Fr 10 Aug 2018 12:33:12 CEST:

> I am running  Stretch on my 64 bit Linux platform. This morning, when  I 
> run apt-get update as root I get:
> 
> root@AbNormal:/home/comp# apt update
> Ign:1 http://debian.uchicago.edu/debian stretch InRelease
> Hit:2 http://debian.uchicago.edu/debian stretch-updates InRelease
> Hit:3 http://debian.uchicago.edu/debian stretch-backports InRelease
> Hit:4 http://debian.uchicago.edu/debian stretch Release
> Hit:5 https://desktop-download.mendeley.com/download/apt stable InRelease
> Hit:6 http://security.debian.org/debian-security stretch/updates InRelease
> Hit:7 https://repo.skype.com/deb stable InRelease
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> All packages are up to date.
> W: Target Packages (main/binary-amd64/Packages) is configured multiple 
> times in /etc/apt/sources.list:17 and /etc/apt/sources.list:24
[...]
> root@AbNormal:/home/comp#

The warning message is pretty explicit. Take a look at the lines 17 and
24 of /etc/apt/sources.list.

> Needless to say, I am a bit concerned.  I run apt update several times a 
> week, but have not had a problem.  Google gave a number  of solutions 
> for Ubuntu, but I am rather loathe to  mess with /ect/apt/sources.list:

Don't know how the text below relates to the sources.list on your
machine (line-number-wise) but...

> # deb cdrom:[Debian GNU/Linux 9.3.0 _Stretch_ - Official amd64 DVD 
> Binary-1 20171209-12:11]/ stretch contrib main
> 
> # deb cdrom:[Debian GNU/Linux 9.3.0 _Stretch_ - Official amd64 DVD 
> Binary-1 20171209-12:11]/ stretch main contrib
> 
> deb http://debian.uchicago.edu/debian/ stretch main non-free contrib
> deb-src http://debian.uchicago.edu/debian/ stretch main non-free contrib
> 
> deb http://security.debian.org/debian-security/ stretch/updates main 
> contrib non-free
> deb-src http://security.debian.org/debian-security/ stretch/updates main 
> contrib non-free
> 
> # stretch-updates, previously known as 'volatile'
> deb http://debian.uchicago.edu/debian/ stretch-updates main contrib 
> non-free
> deb-src http://debian.uchicago.edu/debian/ stretch-updates main contrib 
> non-free
> 
> deb http://debian.uchicago.edu/debian/ stretch-backports non-free 
> contrib main

...this ^^^ and..

> deb-src http://debian.uchicago.edu/debian/ stretch-backports main 
> contrib non-free
> 
> deb http://debian.uchicago.edu/debian/ stretch-backports main

...that ^^^ seem to be the duplication apt warns about.

-- 
Regards
  mks

Re: Please help with error message

[Markus Schönhaber]

Rodolfo Medina, Di 07 Aug 2018 09:05:28 CEST:

> Some little problems after `full-upgrade' to Sid: no sound...  Besides, when
> trying to install new packages, the following message appears:
> 
> # aptitude install alsaplayer-alsa pulseaudio 
> pulseaudio is already installed at the requested version (12.0-1)
> pulseaudio is already installed at the requested version (12.0-1)
> The following NEW packages will be installed:
>   alsaplayer-alsa alsaplayer-common{a} alsaplayer-gtk{a} libmikmod3{a} 
> 0 packages upgraded, 4 newly installed, 0 to remove and 0 not upgraded.
> Need to get 0 B/505 kB of archives. After unpacking 1,410 kB will be used.
> Do you want to continue? [Y/n/?] y
> dpkg: warning: 'ldconfig' not found in PATH or not executable
> dpkg: warning: 'start-stop-daemon' not found in PATH or not executable
> dpkg: error: 2 expected programs not found in PATH or not executable
> Note: root's PATH should usually contain /usr/local/sbin, /usr/sbin and /sbin
> E: Sub-process /usr/bin/dpkg returned an error code (2)
> dpkg: warning: 'ldconfig' not found in PATH or not executable
> dpkg: warning: 'start-stop-daemon' not found in PATH or not executable
> dpkg: error: 2 expected programs not found in PATH or not executable
> Note: root's PATH should usually contain /usr/local/sbin, /usr/sbin and /sbin

Did you check the value of PATH - as the message suggests?
Did you check that (/sbin/)ldconfig and (/sbin/)start-stop-daemon exist
and they are executable?

> Please help...  I'm not expert.

In that case, you shouldn't use sid...

-- 
Regards
  mks

Re: LXC Memory Limits wont work

[Markus Raps]

Ok

somehow the processes bypasses the group/namespace

under libvirt the cgroups.procs file ( 
/sys/fs/cgroup/memory/machine/lxc-4296-deb4.libvirt-lxc/cgroup.procs )

shows only one process

with the lxc tools the cgroups.procs file ( 
/sys/fs/cgroup/memory/lxc/debian/cgroup.procs )

shows up to all 11 processes

--
Mit freundlichen Grüßen / best regards
Markus Raps

cgroup.clone_children:0
cgroup.procs:2796
memory.failcnt:0
memory.kmem.failcnt:0
memory.kmem.limit_in_bytes:9223372036854771712
memory.kmem.max_usage_in_bytes:2494464
memory.kmem.slabinfo:slabinfo - version: 2.1
memory.kmem.slabinfo:# name   
  : tunables: 
slabdata   
memory.kmem.slabinfo:fuse_inode 0  076851 : 
tunables   54   278 : slabdata  0  0  0
memory.kmem.slabinfo:shmem_inode_cache 55 55688   112 : 
tunables   54   278 : slabdata  5  5  0
memory.kmem.slabinfo:mqueue_inode_cache  0  089641 : 
tunables   54   278 : slabdata  0  0  0
memory.kmem.slabinfo:kmalloc-5120  051281 : 
tunables   54   278 : slabdata  0  0  0
memory.kmem.slabinfo:pool_workqueue 0  0256   161 : 
tunables  120   608 : slabdata  0  0  0
memory.kmem.slabinfo:proc_inode_cache 11113264061 : 
tunables   54   278 : slabdata 22 22  0
memory.kmem.slabinfo:sock_inode_cache  12 1864061 : 
tunables   54   278 : slabdata  3  3  0
memory.kmem.slabinfo:pid1 32128   321 : 
tunables  120   608 : slabdata  1  1  0
memory.kmem.slabinfo:anon_vma  37112 72   561 : 
tunables  120   608 : slabdata  2  2  0
memory.kmem.slabinfo:vm_area_struct   120160200   201 : 
tunables  120   608 : slabdata  8  8  0
memory.kmem.slabinfo:mm_struct  1  4   102441 : 
tunables   54   278 : slabdata  1  1  0
memory.kmem.slabinfo:signal_cache   2  7   108872 : 
tunables   24   128 : slabdata  1  1  0
memory.kmem.slabinfo:sighand_cache  2  6   211232 : 
tunables   24   128 : slabdata  2  2  0
memory.kmem.slabinfo:fs_cache   2 63 64   631 : 
tunables  120   608 : slabdata  1  1  0
memory.kmem.slabinfo:files_cache2 11704   112 : 
tunables   54   278 : slabdata  1  1  0
memory.kmem.slabinfo:anon_vma_chain67320 64   641 : 
tunables  120   608 : slabdata  5  5  0
memory.kmem.slabinfo:cred_jar   5 84192   211 : 
tunables  120   608 : slabdata  4  4  0
memory.kmem.slabinfo:task_struct3  4   339222 : 
tunables   24   128 : slabdata  2  2  0
memory.kmem.slabinfo:kmalloc-1024   2  8   102441 : 
tunables   54   278 : slabdata  2  2  0
memory.kmem.slabinfo:kmalloc-1922 21192   211 : 
tunables  120   608 : slabdata  1  1  0
memory.kmem.slabinfo:inode_cache   14 2158471 : 
tunables   54   278 : slabdata  3  3  0
memory.kmem.slabinfo:dentry   202294192   211 : 
tunables  120   608 : slabdata 14 14  0
memory.kmem.tcp.failcnt:0
memory.kmem.tcp.limit_in_bytes:9223372036854771712
memory.kmem.tcp.max_usage_in_bytes:0
memory.kmem.tcp.usage_in_bytes:0
memory.kmem.usage_in_bytes:581632
memory.limit_in_bytes:102400
memory.max_usage_in_bytes:4317184
memory.move_charge_at_immigrate:0
memory.numa_stat:total=188 N0=188
memory.numa_stat:file=0 N0=0
memory.numa_stat:anon=188 N0=188
memory.numa_stat:unevictable=0 N0=0
memory.numa_stat:hierarchical_total=188 N0=188
memory.numa_stat:hierarchical_file=0 N0=0
memory.numa_stat:hierarchical_anon=188 N0=188
memory.numa_stat:hierarchical_unevictable=0 N0=0
memory.oom_control:oom_kill_disable 0
memory.oom_control:under_oom 0
memory.soft_limit_in_bytes:9223372036854771712
memory.stat:cache 4096
memory.stat:rss 765952
memory.stat:rss_huge 0
memory.stat:mapped_file 0
memory.stat:dirty 0
memory.stat:writeback 0
memory.stat:pgpgin 1763
memory.stat:pgpgout 1575
memory.stat:pgfault 3264
memory.stat:pgmajfault 0
memory.stat:inactive_anon 0
memory.stat:active_anon 770048
memory.stat:inactive_file 0
memory.stat:active_file 0
memory.stat:unevictable 0
memory.stat:hierarchical_memory_limit 102400
memory.stat:total_cache 4096
memory.stat:total_rss 765952
memory.stat:total_rss_huge 0
memory.stat:total_mapped_file 0
memory.stat:total_dirty 0
memory.stat:total_writeback 0
memory.stat:total_pgpgin 1763
memory.stat:total_pgpgout 1575
memory.stat:total_pgfault 3264
memory.stat:total_pgmajfault 0
memory.stat:total_inactive_anon 0
memory.stat:total_active_anon

LXC Memory Limits wont work

[Markus Raps]

Hello,

iam currently trying to run LXC Containers with libvirt
but the memory limit doesn't want to work

in the container i see the full 32GB from the Host OS
iam pretty sure that iam missing a configline in the xml

lxc-template ~ # free -m
  totalusedfree  shared  buff/cache   
available
Mem:  32108 626   31396 249  85  
 31396

Swap: 0   0   0
lxc-template ~ #


the host is running debian 9 with default repos

hv1 ~ # dpkg -l | grep virt
ii  libgovirt-common 0.3.4-2 
all  GObject-based library to access oVirt REST API 
(common files)
ii  libgovirt2:amd64 0.3.4-2 
amd64GObject-based library to access oVirt REST API
ii  libvirt-clients  3.0.0-4+deb9u3  
amd64Programs for the libvirt library
ii  libvirt-daemon   3.0.0-4+deb9u3  
amd64Virtualization daemon
ii  libvirt-daemon-system3.0.0-4+deb9u3  
amd64Libvirt daemon configuration files
ii  libvirt-glib-1.0-0:amd64 1.0.0-1 
amd64libvirt GLib and GObject mapping library
ii  libvirt0 3.0.0-4+deb9u3  
amd64library for interfacing with different 
virtualization systems
ii  python-libvirt   3.0.0-2 
amd64libvirt Python bindings
ii  qemu-kvm 1:2.8+dfsg-6+deb9u4 
amd64QEMU Full virtualization on x86 hardware
ii  virt-viewer  5.0-1   
amd64Displaying the graphical console of a virtual 
machine
ii  virtinst 1:1.4.0-5   
all  Programs to create and clone virtual machines


--
Mit freundlichen Grüßen / best regards
Markus Raps


  deb4
  b1981e50-3bbc-40bf-b145-4a50e927eb7d
  400
  400
  2
  
/machine
  
  
exe
/sbin/init
  
  
  destroy
  restart
  destroy
  
/usr/lib/libvirt/libvirt_lxc

  
  


  
  


  
  


  
  


  
  


  
  


  
  


  
  
  
  


  
  
  

  
  

 

What's missing for wake on wlan?

[Markus Grunwald]

Hello,

While wake on lan works well on my T570 with debian buster, I'm not able
get wake on WLAN working...

% sudo iw phy0 wowlan show
WoWLAN is enabled:
 * wake up on disconnect
 * wake up on magic packet

% /sbin/ifconfig wlp4s0 | grep ether
ether e4:70:b8:fb:25:89  txqueuelen 1000  (Ethernet)


So I send the machine to suspend-to-ram and try to wake it up with:

wakeonlan e4:70:b8:fb:25:89

But nothing happens...

I'm using Wicd 1.7.4

Any ideas?
-- 
Markus Grunwald
https://www.the-grue.de/~markus/markus_grunwald.gpg

Re: xdg-open drives me crazy

[Markus Grunwald]

Hello Curt,

> xdg-mime default chromium.desktop text/html
> xdg-mime default chromium.desktop x-scheme-handler/http
> xdg-mime default chromium.desktop x-scheme-handler/https
> xdg-mime default chromium.desktop x-scheme-handler/about

That did the trick! Thank you very much :)

cu
-- 
Markus Grunwald
https://www.the-grue.de/~markus/markus_grunwald.gpg

Re: xdg-open drives me crazy

[Markus Grunwald]

Hello,

> It looks in your output like you are using Xfce - what is set in
> "Preferred Applications" under Web Browser?

Xfce is only installed on the computer. I'm using i3.

-- 
Markus Grunwald
https://www.the-grue.de/~markus/markus_grunwald.gpg

Re: xdg-open drives me crazy

[Markus Grunwald]

Hello,

> Look at update-alternatives


Thanks for the hint, but the alternatives are configured correctly:

# ll /usr/bin/x-www-browser
lrwxrwxrwx 1 root root 31 Jul 22  2009 /usr/bin/x-www-browser ->
/etc/alternatives/x-www-browser

# ll /etc/alternatives/x-www-browser
lrwxrwxrwx 1 root root 17 Mär 28 21:21 /etc/alternatives/x-www-browser
-> /usr/bin/chromium
# ll /usr/bin/chromium
-rwxr-xr-x 1 root root 3754 Jun 19 14:13 /usr/bin/chromium


-- 
Markus Grunwald
https://www.the-grue.de/~markus/markus_grunwald.gpg

xdg-open drives me crazy

[Markus Grunwald]

Hello,

A few programs that I use, in turn use xdg-open. With web-pages, it gets
it completely wrong, no matter what I do:

% xdg-settings get default-web-browser
chromium.desktop
% echo $BROWSER
chromium


 % grep -i bin /usr/share/xfce4/helpers/chromium.desktop
/usr/share/applications/chromium.desktop
/usr/share/xfce4/helpers/chromium.desktop:X-XFCE-Binaries=chromium;chromium-browser;
/usr/share/applications/chromium.desktop:Exec=/usr/bin/chromium %U


But what does that damn thing open? Firefox...

What can I do ...?

-- 
Markus Grunwald
https://www.the-grue.de/~markus/markus_grunwald.gpg

Re: fpm problem

[Markus Schönhaber]

Gokan Atmaca, Do 26 Jul 2018 08:46:46 CEST:

> we are receiving an error as below. what is the cause of the problem?
> (32g ram , 240g ssd , xeon 8 cor cpu)
> 
> WARNING: [pool www] seems busy (you may need to increase
> pm.start_servers, or pm.min/max_spare_servers), spawning 32 children,
> there are 1 idle, and 143 total children

What happened after you did what the warning message suggested to do?

-- 
Regards
  mk

[Xen]: Heads UP: kernel from linux-image-4.9.0-7-amd64 might not boot on Xen

[Markus Schönhaber]

Hi,

if you are running Debian on Xen you should keep your eyes open when
upgrading the kernel.
For me, the kernel 4.9.110-1 from the linux-image-4.9.0-7-amd64 package
wouldn't boot as a DomU kernel. As I've read, it won't work as a Dom0
kernel either (I didn't check that, though).

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903767

-- 
Regards
  mks

Wine doesn't start

[Markus Grunwald]

Hello,

to play some old games, I wanted to start wine, but it always fails with
errors like that in the attached gna.txt :(

Not even winecfg is starting (I created gna.txt with starting winecfg).

It used to work so well a while ago...


That's what I have installed (debian testing, upgraded today):

 % dpkg -l wine\* | egrep '^ii'
ii  wine 3.0-1  all  Windows API
implementation - standard suite
ii  wine32:i386  3.0-1  i386 Windows API
implementation - 32-bit binary loader
ii  wine64   3.0-1  amd64Windows API
implementation - 64-bit binary loader
ii  winetricks   0.0+20180217-1 all  package manager for
Wine to install software easily



Can you help me with that, please?

-- 
Markus Grunwald
http://www.the-grue.de/~markus/markus_grunwald.gpg
000d:err:module:load_builtin_dll failed to load .so lib for builtin 
L"version.dll": /usr/lib/wine/../i386-linux-gnu/wine/version.dll.so: failed to 
map segment from shared object
000d:err:module:import_dll Loading library version.dll (which is needed by 
L"C:\\windows\\system32\\user32.dll") failed (error c07a).
000d:err:module:import_dll Library user32.dll (which is needed by 
L"C:\\windows\\system32\\ole32.dll") not found
000d:err:module:import_dll Library ole32.dll (which is needed by 
L"C:\\windows\\system32\\windowscodecs.dll") not found
000d:err:module:load_builtin_dll failed to load .so lib for builtin 
L"version.dll": /usr/lib/wine/../i386-linux-gnu/wine/version.dll.so: failed to 
map segment from shared object
000d:err:module:import_dll Loading library version.dll (which is needed by 
L"C:\\windows\\system32\\user32.dll") failed (error c07a).
000d:err:module:import_dll Library user32.dll (which is needed by 
L"C:\\windows\\system32\\ole32.dll") not found
000d:err:module:import_dll Library ole32.dll (which is needed by 
L"C:\\windows\\system32\\oleaut32.dll") not found
000d:err:module:load_builtin_dll failed to load .so lib for builtin 
L"version.dll": /usr/lib/wine/../i386-linux-gnu/wine/version.dll.so: failed to 
map segment from shared object
000d:err:module:import_dll Loading library version.dll (which is needed by 
L"C:\\windows\\system32\\user32.dll") failed (error c07a).
000d:err:module:import_dll Library USER32.dll (which is needed by 
L"C:\\windows\\system32\\oleaut32.dll") not found
000d:err:module:import_dll Library oleaut32.dll (which is needed by 
L"C:\\windows\\system32\\windowscodecs.dll") not found
000d:err:module:load_builtin_dll failed to load .so lib for builtin 
L"version.dll": /usr/lib/wine/../i386-linux-gnu/wine/version.dll.so: failed to 
map segment from shared object
000d:err:module:import_dll Loading library version.dll (which is needed by 
L"C:\\windows\\system32\\user32.dll") failed (error c07a).
000d:err:module:import_dll Library user32.dll (which is needed by 
L"C:\\windows\\system32\\ole32.dll") not found
000d:err:module:import_dll Library ole32.dll (which is needed by 
L"C:\\windows\\system32\\propsys.dll") not found
000d:err:module:load_builtin_dll failed to load .so lib for builtin 
L"version.dll": /usr/lib/wine/../i386-linux-gnu/wine/version.dll.so: failed to 
map segment from shared object
000d:err:module:import_dll Loading library version.dll (which is needed by 
L"C:\\windows\\system32\\user32.dll") failed (error c07a).
000d:err:module:import_dll Library user32.dll (which is needed by 
L"C:\\windows\\system32\\ole32.dll") not found
000d:err:module:import_dll Library ole32.dll (which is needed by 
L"C:\\windows\\system32\\oleaut32.dll") not found
000d:err:module:load_builtin_dll failed to load .so lib for builtin 
L"version.dll": /usr/lib/wine/../i386-linux-gnu/wine/version.dll.so: failed to 
map segment from shared object
000d:err:module:import_dll Loading library version.dll (which is needed by 
L"C:\\windows\\system32\\user32.dll") failed (error c07a).
000d:err:module:import_dll Library USER32.dll (which is needed by 
L"C:\\windows\\system32\\oleaut32.dll") not found
000d:err:module:import_dll Library oleaut32.dll (which is needed by 
L"C:\\windows\\system32\\propsys.dll") not found
000d:err:module:import_dll Library propsys.dll (which is needed by 
L"C:\\windows\\system32\\windowscodecs.dll") not found
000d:err:module:load_builtin_dll failed to load .so lib for builtin 
L"version.dll": /usr/lib/wine/../i386-linux-gnu/wine/version.dll.so: failed to 
map segment from shared object
000d:err:module:import_dll Loading library version.dll (which is needed by 
L"C:\\windows\\system32\\user32.dll") failed (error c07a).
000d:err:module:import_dll Library user32.dll (which is needed by 
L"C:\\windows\\system32\\shlwapi.dll") not

How to use Debian for a HTPC/Gaming combination?

[Markus Grunwald]

Hello,

Currently, I'm using libreelec as distribution for the HTPC in my home
cinema. It does its job very good, but is inflexible. For example, I
would like to use the same computer as a steam machine or to play other
games using wine or, of course, native linux games which is not possible
witch libreelec.

To do that, I would like to use Debian. I know, use and administer
Debian machines since potato and I think its flexibility is great. In
fact, I only used libreelec because it had a driver for the quite new
nvidia graphics card and Debian didn't - at least not in last summer.

Now I've seen that Debian supports my graphics card and I would like to
start my HTPC/Gaming PC from scratch. What I would like to have:

- Very quick (and maybe beautiful, for the WAF ;) ) start up.
- No surplus services.
- Some minimal window manager
- Boot to Kodi (or Steam) and easy switch to the other.

I know that Linux is not the optimal gaming OS. Never mind. There is a
good bit idealism involved :)

Now, I could get this running, but I never installed a Debian machine
with focus on the first two items. I hope to get your help and advice
especially on the quick and lean start up. Any further Ideas are greatly
appreciated ;)

As I said, some amount of Idealism is involved. So advice like "use
windows" or maybe "use another Linux distribution" will not be very helpful.

Oh, by the way: the hardware is more or less fixed for now, and it is
old (except for the SSD and the Graphics card). So no monster
performance for the games, but it does the HTPC job excellently. But I
will upgrade the machine in the future. Yet, I think the exact hardware
spec is not so important for this topic...

Let's see, how far we get and thanks for your input!

cu
-- 
Markus Grunwald
http://www.the-grue.de/~markus/markus_grunwald.gpg

Re: Acrobat Reader stops works

[Markus Schönhaber]

Carl Fink, Mo 15 Jan 2018 13:32:27 CET:

> On 01/15/2018 06:45 AM, Jerome BENOIT wrote:
>>
>> On 15/01/18 13:32, Kamil Jońca wrote:
>>> Recently I have to reinstall my system.
>>> Most of things works OOTB, but I cannot make Acrobat Reader (9.5.5) to
>>> work.
>>> Stracing shows segmentation fault (catched) in main thread.
>>> Worse thing is, on second computer with the same libraries(and the same 
>>> versions) acroread
>>> work.
>>> Any hints/thoughts?
>> migrate to evince ?

> That's rather an unhelpful answer, isn't it?

No, it isn't.
Suggesting to move away from an unmaintained (since 4+ years) piece of
software which probably has lots of unfixed (security) bugs is a rather
sensible thing to do.

-- 
Regards
  mks

Thunderbird font broken

[Markus Grunwald]

Hello,

Thunderbird seems to handle fontsizes different than all the other
programs I'm using. I had to install the extension "Theme Font & Size
Changer for Thunderbird" (62.0) to fix that broken behaviour, then all
was fine.

Until yesterday. I started Thunderbird and the UI-Fonts were   H U G E
again :( The Icon for the Theme Font & Size Changer is gone. I tried to
reinstall the  extension, no success. I restored ~/.mozilla and
~/.icedove (where .thunderbird links to) from backup, still no success.

Can you help me to get a non-screaming thunderbird again?
-- 
Markus Grunwald
http://www.the-grue.de/~markus/markus_grunwald.gpg



signature.asc
Description: OpenPGP digital signature

T570 Powerkey doesn't work

[Markus Grunwald]

Hello,

as far as I understand, pressing the power key on my Lenovo T570 should
produce some output in the journal like this:

Mär 31 18:04:47 my_computer systemd-logind[1402]: Power key pressed.

On my laptop, this doesn't work - I see nothing in the journal.
Hibernating doesn't work, neither but that's the reason, I think...

Is there something special that I have to do?

cu
-- 
Markus Grunwald
http://www.the-grue.de/~markus/markus_grunwald.gpg



signature.asc
Description: OpenPGP digital signature

Re: After upgrade jessie -> stretch : php problems

[Markus Grunwald]

Hello,

after you told me that cli and http don't have to use the same php
(sigh), I have a workaround:

17 3 * * * www-dataphp5 -f
/srv/www/the-grue.de/owncloud/htdocs/cron.php


Now I explicitly call php5 instead of php and all is fine... But this is
only a workaround, I think.

cu
-- 
Markus Grunwald
http://www.the-grue.de/~markus/markus_grunwald.gpg



signature.asc
Description: OpenPGP digital signature

Re: After upgrade jessie -> stretch : munin/perl

[Markus Grunwald]

Hello,

I remembered that I installed a nicer theme a good while ago. This seems
to have messed up some templates. So I apt-get purged munin, deleted the
rest of /etc in /etc/munin and re-installed munin.

This left me with a 404 in www.the-grue.de/munin :(

I learned that the apache configuration of munin is now included in the
package. So I adjusted the settings in /etc/apache:

./conf-enabled/munin.conf
./conf.d/munin


Now I have a working www.the-grue.de/munin again :)
But: With this config, /all/ of my sites show munin as well :( like:

www.maennerchor-kirchseeon.de/munin

This doesn't belong there. What is the best (most forward compatible)
way to fix this?

-- 
Markus Grunwald
http://www.the-grue.de/~markus/markus_grunwald.gpg



signature.asc
Description: OpenPGP digital signature

After upgrade jessie -> stretch : munin/perl

[Markus Grunwald]

Hello,

Today I tackled the upgrade from jessie to stretch on my "production"
server (hosts a few websites).

Almost all went smoothly, but a few problems remain. One is this: My
munin doesn't work anymore and I get these errors from its cron job:

HTML::Template->new() : Cannot open included file
partial/logo_navigation.tmpl : file not found. at
/usr/share/perl5/HTML/Template.pm line 2458.
HTML::Template->new() : Cannot open included file
partial/logo_navigation.tmpl : file not found. at
/usr/share/perl5/HTML/Template.pm line 2458.


logo_navigation.tmpl is there and munin should be able to read it:


% sudo -u munin cat /etc/munin/templates/partial/logo_navigation.tmpl


  
...

% ll /etc/munin/templates/partial/logo_navigation.tmpl
-rw-r--r-- 1 root root 629 Jun  9  2016
/etc/munin/templates/partial/logo_navigation.tmpl

I don't know what's wrong :(

cu
-- 
Markus Grunwald
http://www.the-grue.de/~markus/markus_grunwald.gpg

markus@the-grue % dpkg -l \*php\* | egrep '^ii'
ii  dh-php5   0.2 all  
debhelper add-on to handle PHP PECL extensions
ii  libapache2-mod-php5   5.6.30+dfsg-0+deb8u1amd64
server-side, HTML-embedded scripting language (Apache 2 module)
ii  libnusoap-php 0.9.5-3 all  SOAP 
toolkit for PHP
ii  libphp-adodb  5.20.9-1all  ADOdb is 
a PHP database abstraction layer library
ii  libphp-phpmailer  5.2.14+dfsg-2.3 all  full 
featured email transfer class for PHP
ii  php-apc   4.0.7-1 all  APC User 
Cache for PHP 5 (transitional package)
ii  php-cli   1:7.0+49all  
command-line interpreter for the PHP scripting language (default)
ii  php-common1:49all  Common 
files for PHP packages
ii  php-gd1:7.0+49all  GD 
module for PHP [default]
ii  php-mdb2  2.5.0b5-2   all  database 
abstraction layer
ii  php-mdb2-driver-mysql 1.5.0b4-2   all  mysql 
MDB2 driver
ii  php-mysql 1:7.0+49all  MySQL 
module for PHP [default]
ii  php-pear  1:1.10.1+submodules+notgz-9 all  PEAR 
Base System
ii  php-tcpdf 6.2.12+dfsg2-1  all  PHP 
class for generating PDF files on-the-fly
ii  php-xml   1:7.0+49all  DOM, 
SimpleXML, WDDX, XML, and XSL module for PHP [default]
ii  php-zip   1:7.0+49all  Zip 
module for PHP [default]
ii  php5  5.6.30+dfsg-0+deb8u1all  
server-side, HTML-embedded scripting language (metapackage)
ii  php5-apcu 4.0.7-1 amd64APC User 
Cache for PHP 5
ii  php5-cgi  5.6.30+dfsg-0+deb8u1amd64
server-side, HTML-embedded scripting language (CGI binary)
ii  php5-cli  5.6.30+dfsg-0+deb8u1amd64
command-line interpreter for the php5 scripting language
ii  php5-common   5.6.30+dfsg-0+deb8u1amd64Common 
files for packages built from the php5 source
ii  php5-curl 5.6.30+dfsg-0+deb8u1amd64CURL 
module for php5
ii  php5-dev  5.6.30+dfsg-0+deb8u1amd64Files 
for PHP5 module development
ii  php5-gd   5.6.30+dfsg-0+deb8u1amd64GD 
module for php5
ii  php5-geoip1.1.0-2 amd64GeoIP 
module for php5
ii  php5-gmp  5.6.30+dfsg-0+deb8u1amd64GMP 
module for php5
ii  php5-json 1.3.6-1 amd64JSON 
module for php5
ii  php5-mcrypt   5.6.30+dfsg-0+deb8u1amd64MCrypt 
module for php5
ii  php5-mysql5.6.30+dfsg-0+deb8u1amd64MySQL 
module for php5
ii  php5-readline 5.6.30+dfsg-0+deb8u1amd64Readline 
module for php5
ii  php5-sqlite   5.6.30+dfsg-0+deb8u1amd64SQLite 
module for php5
ii  php7.0-cli7.0.19-1amd64
command-line interpreter for the PHP scripting language
ii  php7.0-common 7.0.19-1amd64
documentation, examples and common module for PHP
ii  php7.0-gd 7.0.19-1amd64GD 
module for PHP
ii  php7.0-json   7.0.19-1amd64JSON 
module for PHP
ii  php7.0-mysql  7.0.19-1amd64MySQL 
module for PHP
ii  php7.0-opcache7.0.19-1amd64Zend 
OpCache module for P

After upgrade jessie -> stretch : php problems

[Markus Grunwald]

Hello,

Today I tackled the upgrade from jessie to stretch on my "production"
server (hosts a few websites).

Almost all went smoothly, but a few problems remain. One is this: The
cron job of my owncloud installation reports this:

-
No database drivers (sqlite, mysql, or postgresql) installed.


PHP is configured to populate raw post data. Since PHP 5.6 this will
lead to PHP throwing notices for perfectly valid code.
To fix this issue set always_populate_raw_post_data to
-1 in your php.ini

PHP modules have been installed, but they are still listed as missing?
Please ask your server administrator to restart the web server.
-

I have absolutely no clue about php and surely didn't touch any of these
packages (besides installing them because I need them for owncloud and
drupal).

I have searched /etc for all php.ini files and changed
always_populate_raw_post_data as requested, without success.

php modules for mysql are installed.

Now I have no idea what is still wrong, because I still get the error
messages (as mail from the cronjob which floods my mail :( )

Maybe of interest: that's part of the phpinfo() output:

PHP Version 5.6.30-0+deb8u1
Directive   Local Value Master Value
allow_url_fopen On  On
allow_url_include   Off Off
always_populate_raw_post_data   -1  -1


Installed packages regarding php: as textfile in the attachments to keep
the formatting...

I would be very glad, if you could help me.
Also, please have a look at my other problem with munin (doh)

cu
-- 
Markus Grunwald
http://www.the-grue.de/~markus/markus_grunwald.gpg
markus@the-grue % dpkg -l \*php\* | egrep '^ii'
ii  dh-php5   0.2 all  
debhelper add-on to handle PHP PECL extensions
ii  libapache2-mod-php5   5.6.30+dfsg-0+deb8u1amd64
server-side, HTML-embedded scripting language (Apache 2 module)
ii  libnusoap-php 0.9.5-3 all  SOAP 
toolkit for PHP
ii  libphp-adodb  5.20.9-1all  ADOdb is 
a PHP database abstraction layer library
ii  libphp-phpmailer  5.2.14+dfsg-2.3 all  full 
featured email transfer class for PHP
ii  php-apc   4.0.7-1 all  APC User 
Cache for PHP 5 (transitional package)
ii  php-cli   1:7.0+49all  
command-line interpreter for the PHP scripting language (default)
ii  php-common1:49all  Common 
files for PHP packages
ii  php-gd1:7.0+49all  GD 
module for PHP [default]
ii  php-mdb2  2.5.0b5-2   all  database 
abstraction layer
ii  php-mdb2-driver-mysql 1.5.0b4-2   all  mysql 
MDB2 driver
ii  php-mysql 1:7.0+49all  MySQL 
module for PHP [default]
ii  php-pear  1:1.10.1+submodules+notgz-9 all  PEAR 
Base System
ii  php-tcpdf 6.2.12+dfsg2-1  all  PHP 
class for generating PDF files on-the-fly
ii  php-xml   1:7.0+49all  DOM, 
SimpleXML, WDDX, XML, and XSL module for PHP [default]
ii  php-zip   1:7.0+49all  Zip 
module for PHP [default]
ii  php5  5.6.30+dfsg-0+deb8u1all  
server-side, HTML-embedded scripting language (metapackage)
ii  php5-apcu 4.0.7-1 amd64APC User 
Cache for PHP 5
ii  php5-cgi  5.6.30+dfsg-0+deb8u1amd64
server-side, HTML-embedded scripting language (CGI binary)
ii  php5-cli  5.6.30+dfsg-0+deb8u1amd64
command-line interpreter for the php5 scripting language
ii  php5-common   5.6.30+dfsg-0+deb8u1amd64Common 
files for packages built from the php5 source
ii  php5-curl 5.6.30+dfsg-0+deb8u1amd64CURL 
module for php5
ii  php5-dev  5.6.30+dfsg-0+deb8u1amd64Files 
for PHP5 module development
ii  php5-gd   5.6.30+dfsg-0+deb8u1amd64GD 
module for php5
ii  php5-geoip1.1.0-2 amd64GeoIP 
module for php5
ii  php5-gmp  5.6.30+dfsg-0+deb8u1amd64GMP 
module for php5
ii  php5-json 1.3.6-1 amd64JSON 
module for php5
ii  php5-mcrypt   5.6.30+dfsg-0+deb8u1amd64MCrypt 
module for php5
ii  php5-mysql5.6.30+dfsg-0+deb8u1amd64MySQL 
mod

Migrate an old debian to a new machine

[Markus Grunwald]

Hello,

For 10 Years, I've been working with my trusted old T61 (still with
"IBM" logo...). Now I'm waiting for a new T570.

The last migrations of my Debian installations were just dd'ing a full
disk image from machine OLD to NEW and then resize the partitions with
gparted (I hate new installations... something's lost every time.)

These migrations were always done on BIOS machines. I have almost no
experience with UEFI. Now my question is: will this work with the new
machine as well? Or do I have to do something else because of UEFI (or
something else that's different on a modern T570)?

Thanks for your input,
-- 
Markus Grunwald
http://www.the-grue.de/~markus/markus_grunwald.gpg



signature.asc
Description: OpenPGP digital signature

Re: Loosing my mind with sending an E-Mail...

[Markus Grunwald]

Hello,

> I'm loosing my mind. Why is that email disappearing?


Well, lost my mind. Thunderbird treated it as spam (doh!)
-- 
Markus Grunwald
http://www.the-grue.de/~markus/markus_grunwald.gpg

Loosing my mind with sending an E-Mail...

[Markus Grunwald]

Hello,

I'd like to send an E-Mail via commandline:

/bin/echo "Die Speisekammertuer steht offen Ist" | /usr/bin/mailx -s
"Offene Tuer" "mar...@irgendwo.de"

This mail is sent to my server, processed with postfix, dovecot and
sieve and I receive it in my E-Mail program. Fine.

This E-Mail just disappears:

/bin/echo "Die Speisekammertuer steht offen Ist das" | /usr/bin/mailx -s
"Offene Tuer" "mar...@irgendwo.de"

The difference is only the one additional word " das".

The logentry in dovecot for both mails is just the same:

2017-10-06 23:51:27 lda(mar...@irgendwo.de): Info: sieve:
msgid=unspecified: stored mail into mailbox 'INBOX'
2017-10-06 23:51:32 lda(mar...@irgendwo.de): Info: sieve:
msgid=unspecified: stored mail into mailbox 'INBOX'

I'm loosing my mind. Why is that email disappearing?

Both sender and server are debian jessie. mailx is heirloom-mailx, but
with bsd-mailx or even MIME::Lite in perl it's the same.

-- 
Markus Grunwald
http://www.the-grue.de/~markus/markus_grunwald.gpg

Re: Face header and Thunderbird

[Markus Schönhaber]

Richard Hector, Fr 15 Sep 2017 04:44:41 CEST:

> When I read email from Brad Rogers and a few others, they contain a
> 'face' header (different from X-Face, which is also there).
> 
> For whatever reason, Thunderbird always displays this header in the
> 'Normal' view - and it's huge, taking up about 17 lines. But in Normal
> view, no scrollbar is provided for the header section, so it expands to
> leave about 3 lines for reading the email.
> 
> Oddly, I can work around this by switching to "All Headers" view, which
> gives me a scrollbar, lets me reduce the header section, and allows me
> to read the mail.
> 
> Do other Thunderbird users see the same thing?

I don't.

Did you check that your Thunderbird isn't explicitly configured to show
this header? mailnews.headers.extraExpandedHeaders, for example, may
contain a list of header fields which should be displayed, and taking a
look at other mailnews.header.* options in TB's config editor might be a
good idea too.

Did you check that it's not caused by some installed add-on by starting
TB in safe mode?

-- 
Regards
  mks

Re: Can't find ip addresses of devices on LAN

[Markus Schönhaber]

Thomas George, Fr 01 Sep 2017 18:28:05 CEST:

> I have tried ping 192.168.1.225 followed by arp -a

Really .225 and not .255? If so, why?

> and I have tried netstat -r
> 
> Neither report ip addresses of attached devices.
>
> I know there are two devices besides this pc and I know the address of 
> one of these devices. I can ping it and it responds.
> 
> How to find the address of the second device other than ping each 
> address from 192.168.1.2 to 192.168.1.255?

If you want to do a broadcast ping on the 192.168.1.0/24 network, issue
ping -b 192.168.1.255

Alternatively, you could use something like nmap.

-- 
Regards
  mks

mga-Driver does not work with video card Matrox G400/G450 rev 04

[markus . hiereth]

Hello,

an upgrade from Debian 8 Jessie to Debian 9 Stretch caused a similar
problem as described by Tony Stoneley in

  https://lists.debian.org/debian-user/2017/03/msg01272.html

The solution of working with xserver-xorg-video-vesa was not
satisfying as I was not able to configure the display correctly
(windows were to large in size).

I did not pass a bug report concerning the driver from 
  Name   Version  Architektur 
  xserver-xorg-video-mga 1:1.6.5-1i386   

Instead, I used apt-pinning ([1], a file /etc/apt/preferences) which
forces the package management system to accept

  Name   Version  Architektur 
  xserver-xorg-video-mga 1:1.6.3-2+b1 i386   

the driver video card driver from Jessie (=oldstable)

Best regards
Markus


[1] 
https://www.debian.org/doc/manuals/debian-reference/ch02.en.html#_packages_from_mixed_source_of_archives