Re: Package lists with state and extended state

[stefano prina]

On Tuesday, July 23, 2024 1:58:25 PM CEST Christoph Pleger wrote:
> Hello,
> 
> I would like to install many computers with largely the same package
> list. To do this, I can use
> 
> dpkg --get-selections > packages.lst
> 
> to create a list of the installed packages from a computer on which I
> have previously installed the standard packages I want, which I can
> then implement on other computers with
> 
> cat packages.lst | dpkg --set-selections
> 
> and
> 
> apt-get dselect-upgrade
> 
> .
> 
> In addition, the extended status of the packages should be adopted,
> i.e. whether a package was installed automatically as a dependency of
> another, or manually. Therefore, I added a third column with the
> extended status to the packages.lst, which normally has the form
> 
>  
> 
> per line, so that a line now has the following form:
> 
>   
> 
> For a concrete example, it looks like this:
> 
> virt-viewer install auto
> 
> This works wonderfully when installing a computer, first the packages
> are installed as desired and then the extended status is set as desired
> - the reverse is not possible because apt-mark does not allow to set
> the extended state of a package that is not installed.
> 
> However, the packages.lst that is used on computers to be installed
> sometimes does not consist of just one file that was created on another
> computer, but of several concatenated files which were either created
> automatically with dpkg --set-selections or manually. So, it can
> happen, for example, that the overall packages.lst created from several
> individual packages.lst contains:
> 
> .
> .
> .
> virt-manager install manual
> .
> .
> .
> virt-viewer install auto
> .
> .
> .
> virt-manager purge
> 
> (the third column does not have to be present).
> 
> This leads to virt-viewer (as a dependency of virt-manager) being
> installed and then uninstalled again and again. It would of course be
> better if packages with "auto" in the third column are not even
> installed, if not needed by another package - does anyone have an idea
> how this can be done?
> 
> Regards
> Christoph
> 
> 
> 
> 
> Hallo,
> 
> ich möchte viele Rechner mit weitgehend gleicher Paketliste installieren.
> Dafür kann ich von einem Rechner, auf dem ich vorher von mir gewünschte
> Standardpakete installiert habe, mit Hilfe von
> 
> dpkg --get-selections > packages.lst
> 
> eine Liste der installierten Pakete erstellen, die ich dann auf anderen
> Rechnern mit
> 
> cat packages.lst | dpkg --set-selections
> 
> und
> 
> apt-get dselect-upgrade
> 
> realisieren kann.
> 
> Zusätzlich soll aber der erweiterte Status der Pakete übernommen werden,
> also ob ein Paket automatisch als Abhängigkeit von einem anderen
> installiert wurde, oder manuell. Daher habe ich in der packages.lst, die
> normalerweise pro Zeile die Form
> 
>  
> 
> hat, noch eine dritte Spalte mit dem erweiterten Status hinzugefügt, so dass
> eine Zeile folgende Form hat:
> 
>  
> 
> Im konkreten Fall sieht das zum Beispiel so aus:
> 
> virt-viewer   install auto
> 
> 
> Das funktioniert bei der Installation eines Rechners so weit auch ganz
> wunderbar, erst werden die Pakete werden wie gewünscht installiert und dann
> die erweiterten Status wie gewünscht gesetzt - umgekehrt ist es nicht
> möglich, weil apt-mark das Setzen des erweiterten Status eines nicht
> installierten Pakets nicht erlaubt.
> 
> Nur besteht die packages.lst, die auf zu installierenden Rechnern angewendet
> wird, manchmal gar nicht nur aus einer Datei, die auf einem anderen Rechner
> erstellt wurde, sondern aus mehreren, hintereinander gehängten Dateien, die
> entweder automatisch mit dpkg --set-selections oder manuell angelegt
> wurden. Dabei kann es z.B. vorkommen, dass in der aus mehreren einzelnen
> packages.lst entstandenen Gesamt-packages.lst steht:
> 
> .
> .
> .
> virt-manager  install manual
> .
> .
> .
> virt-viewer   install auto
> .
> .
> .
> virt-manager  purge
> 
> (die dritte Spalte muss nicht vorhanden sein).
> 
> Das führt dazu, dass virt-viewer immer wieder installiert und dann wieder
> deinstalliert wird. Besser wäre natürlich, wenn Pakete mit "auto" in der
> dritten Spalte und nicht benötigter Abhängigkeit durch ein anderes Paket
> gar nicht erst installiert würden - hat jemand eine Idee, wie sich das
> bewerkstelligen lässt?
> 
> Gruß
>   Christoph

Hello Christoph,

In the past I solved this kind of problem using ansible:
https://www.ansible.com/how-ansible-works/

The power of this tool is : you write once the recipe and than you can 
reproduce easily the installation or keep a system updated. 

This is a short example  for the workstation.yaml I used:
```
- hosts: localhost
  connection: local
  become: true

 # install base packages
  tasks:
  - name: Install Base Packages
apt:
  pkg:
- gufw
- ufw
- remmina 
- clipit 
- zim 
- unzip
- p7zip-full 
- wine 
- 

Re: Package libllvm12:i386 does not exists on Debian ?

[Mario Marietto]

I don't think that I found a bug. I think that Chrome does not work with
wine because wine is always an incomplete product in relation to the
changes that the developers add for a variety of sturdy Windows tools. And
anyway,if the problem / bug exists,it's not related to i386,because as I
said,I've installed the missing i386 package as well as a lot of others
one.

On Sun, Jun 16, 2024 at 10:51 PM Jeffrey Walton  wrote:

> On Sun, Jun 16, 2024 at 12:48 PM Mario Marietto 
> wrote:
> >
> > Hello to everyone.
> >
> > I'm trying to compile wine-tkg from this repo :
> >
> > https://github.com/Frogging-Family/wine-tkg-git
> >
> > This is what I did,according with the short tutorial :
> >
> > root@debian-now:/home/marietto/Scaricati/wine-tkg-git/wine-tkg-git#
> ./non-makepkg-build.sh
> >
> > => Installing package: libllvm12:i386 | Using apt
> > E: Can't find package libllvm12:i386
> > ==> WARNING: Failed to install package: libllvm12:i386
> > => Installing apt-smart | Using pip
> > error: externally-managed-environment
> > × This environment is externally managed
> > ╰─> To install Python packages system-wide, try apt install
> > python3-xyz, where xyz is the package you are trying to
> > install.
> >
> > If you wish to install a non-Debian-packaged Python package,
> > create a virtual environment using python3 -m venv path/to/venv.
> >
> > Then use path/to/venv/bin/python and path/to/venv/bin/pip. Make sure you
> have python3-full installed.
> > If you wish to install a non-Debian packaged Python application,it may
> be easiest to use pipx install xyz, which will manage a virtual environment
> for you. Make sure you have pipx installed.
> >
> > See /usr/share/doc/python3.11/README.venv for more information.
> >
> > note: If you believe this is a mistake, please contact your Python
> installation or OS distribution provider. You can override this, at the
> risk of breaking your Python installation or OS, by passing
> --break-system-packages.
> > hint: See PEP 668 for the detailed specification.
> >
> > ==> WARNING: Failed to install apt-smart, cannot update mirror.
> > => Installing apt-smart | Using pip| Attempt: 2/3
> > error: externally-managed-environment
> > × This environment is externally managed
> > ╰─> To install Python packages system-wide, try apt install
> > python3-xyz, where xyz is the package you are trying to
> > install.
> >
> > If you wish to install a non-Debian-packaged Python package,
> > create a virtual environment using python3 -m venv path/to/venv.
> >
> > Then use path/to/venv/bin/python and path/to/venv/bin/pip. Make sure you
> have python3-full installed.
> > If you wish to install a non-Debian packaged Python application,it may
> be easiest to use pipx install xyz, which will manage a virtual environment
> for you. Make sure you have pipx installed.
> >
> > See /usr/share/doc/python3.11/README.venv for more information.
> >
> > note: If you believe this is a mistake, please contact your Python
> installation or OS distribution provider. You can override this, at the
> risk of breaking your Python installation or OS, by passing
> --break-system-packages.
> > hint: See PEP 668 for the detailed specification.
> >
> > ==> WARNING: Failed to install apt-smart, cannot update mirror.
> > => Installing apt-smart | Using pip| Attempt: 3/3
> > error: externally-managed-environment
> > × This environment is externally managed
> > ╰─> To install Python packages system-wide, try apt install
> > python3-xyz, where xyz is the package you are trying to
> > install.
> >
> > If you wish to install a non-Debian-packaged Python package,
> > create a virtual environment using python3 -m venv path/to/venv.
> >
> > Then use path/to/venv/bin/python and path/to/venv/bin/pip. Make sure you
> have python3-full installed.
> >
> > If you wish to install a non-Debian packaged Python application,it may
> be easiest to use pipx install xyz, which will manage a virtual environment
> for you. Make sure you have pipx installed.
> >
> > See /usr/share/doc/python3.11/README.venv for more information.
> >
> > note: If you believe this is a mistake, please contact your Python
> installation or OS distribution provider. You can override this, at the
> risk of breaking your Python installation or OS, by passing
> --break-system-packages.
> > hint: See PEP 668 for the detailed specification.
> > ==> WARNING: Failed to install apt-smart, cannot update mirror.
> > ===> ERROR: Failed to update mirror after 3 attempts.
> > => Installing package: libllvm12:i386 | Using apt| Attempt: 2/3
> > E: Can't find package libllvm12:i386
> > ==> WARNING: Failed to install package: libllvm12:i386
> > => Installing apt-smart | Using pip
> > error: externally-managed-environment
> > × This environment is externally managed
> > ╰─> To install Python packages system-wide, try apt install
> > python3-xyz, where xyz is the package you are trying to
> > install.
> >
> > If you wish to install a non-Debian-packaged Python package,
> > create a virtua

Re: Package libllvm12:i386 does not exists on Debian ?

[Jeffrey Walton]

On Sun, Jun 16, 2024 at 12:48 PM Mario Marietto  wrote:
>
> Hello to everyone.
>
> I'm trying to compile wine-tkg from this repo :
>
> https://github.com/Frogging-Family/wine-tkg-git
>
> This is what I did,according with the short tutorial :
>
> root@debian-now:/home/marietto/Scaricati/wine-tkg-git/wine-tkg-git# 
> ./non-makepkg-build.sh
>
> => Installing package: libllvm12:i386 | Using apt
> E: Can't find package libllvm12:i386
> ==> WARNING: Failed to install package: libllvm12:i386
> => Installing apt-smart | Using pip
> error: externally-managed-environment
> × This environment is externally managed
> ╰─> To install Python packages system-wide, try apt install
> python3-xyz, where xyz is the package you are trying to
> install.
>
> If you wish to install a non-Debian-packaged Python package,
> create a virtual environment using python3 -m venv path/to/venv.
>
> Then use path/to/venv/bin/python and path/to/venv/bin/pip. Make sure you have 
> python3-full installed.
> If you wish to install a non-Debian packaged Python application,it may be 
> easiest to use pipx install xyz, which will manage a virtual environment for 
> you. Make sure you have pipx installed.
>
> See /usr/share/doc/python3.11/README.venv for more information.
>
> note: If you believe this is a mistake, please contact your Python 
> installation or OS distribution provider. You can override this, at the risk 
> of breaking your Python installation or OS, by passing 
> --break-system-packages.
> hint: See PEP 668 for the detailed specification.
>
> ==> WARNING: Failed to install apt-smart, cannot update mirror.
> => Installing apt-smart | Using pip| Attempt: 2/3
> error: externally-managed-environment
> × This environment is externally managed
> ╰─> To install Python packages system-wide, try apt install
> python3-xyz, where xyz is the package you are trying to
> install.
>
> If you wish to install a non-Debian-packaged Python package,
> create a virtual environment using python3 -m venv path/to/venv.
>
> Then use path/to/venv/bin/python and path/to/venv/bin/pip. Make sure you have 
> python3-full installed.
> If you wish to install a non-Debian packaged Python application,it may be 
> easiest to use pipx install xyz, which will manage a virtual environment for 
> you. Make sure you have pipx installed.
>
> See /usr/share/doc/python3.11/README.venv for more information.
>
> note: If you believe this is a mistake, please contact your Python 
> installation or OS distribution provider. You can override this, at the risk 
> of breaking your Python installation or OS, by passing 
> --break-system-packages.
> hint: See PEP 668 for the detailed specification.
>
> ==> WARNING: Failed to install apt-smart, cannot update mirror.
> => Installing apt-smart | Using pip| Attempt: 3/3
> error: externally-managed-environment
> × This environment is externally managed
> ╰─> To install Python packages system-wide, try apt install
> python3-xyz, where xyz is the package you are trying to
> install.
>
> If you wish to install a non-Debian-packaged Python package,
> create a virtual environment using python3 -m venv path/to/venv.
>
> Then use path/to/venv/bin/python and path/to/venv/bin/pip. Make sure you have 
> python3-full installed.
>
> If you wish to install a non-Debian packaged Python application,it may be 
> easiest to use pipx install xyz, which will manage a virtual environment for 
> you. Make sure you have pipx installed.
>
> See /usr/share/doc/python3.11/README.venv for more information.
>
> note: If you believe this is a mistake, please contact your Python 
> installation or OS distribution provider. You can override this, at the risk 
> of breaking your Python installation or OS, by passing 
> --break-system-packages.
> hint: See PEP 668 for the detailed specification.
> ==> WARNING: Failed to install apt-smart, cannot update mirror.
> ===> ERROR: Failed to update mirror after 3 attempts.
> => Installing package: libllvm12:i386 | Using apt| Attempt: 2/3
> E: Can't find package libllvm12:i386
> ==> WARNING: Failed to install package: libllvm12:i386
> => Installing apt-smart | Using pip
> error: externally-managed-environment
> × This environment is externally managed
> ╰─> To install Python packages system-wide, try apt install
> python3-xyz, where xyz is the package you are trying to
> install.
>
> If you wish to install a non-Debian-packaged Python package,
> create a virtual environment using python3 -m venv path/to/venv.
>
> Then use path/to/venv/bin/python and path/to/venv/bin/pip. Make sure you have 
> python3-full installed.
> If you wish to install a non-Debian packaged Python application,it may be 
> easiest to use pipx install xyz, which will manage a virtual environment for 
> you. Make sure you have pipx installed.
>
> See /usr/share/doc/python3.11/README.venv for more information.
>
> note: If you believe this is a mistake, please contact your Python 
> installation or OS distribution provider. You can override this, at the risk 

Re: *****SPAM***** Re: Package libllvm12:i386 does not exists on Debian ?

[Hans]

Yes, this is, where the entry "i386" is put in. I remember, to execute the 
command "dpkg --add-architecture i386" a very long time ago.

Thus, aptitude now knows about it.

Zhanks for making things clearer.

Best

Hans 
> Indeed, multi-arch is a dpkg thing. The list of current architectures
> is kept in /var/lib/dpkg/arch [1]
> 
> Cheers

Re: Package libllvm12:i386 does not exists on Debian ?

[tomas]

On Sun, Jun 16, 2024 at 12:37:06PM -0400, The Wanderer wrote:
> On 2024-06-16 at 12:18, Hans wrote:
> 
> > I am wondering, why aptitude is showing me (incorrectlly?)
> > libllvm*:i386 and apt-get not.
> > 
> > I have no i386 entry in sources.list, but where does aptitude get its
> > information?
> 
> AFAIK, /etc/sources.list does not record architectures; it only records
> mirrors, which may have one architecture on them or may have multiple.
> 
> In order to see whether or not you have 'i386' available as an enabled
> architecture, you can run:
> 
> $ dpkg --print-foreign-architectures

Indeed, multi-arch is a dpkg thing. The list of current architectures
is kept in /var/lib/dpkg/arch [1]

Cheers
-- 
tomás


signature.asc
Description: PGP signature

Re: Package libllvm12:i386 does not exists on Debian ?

[The Wanderer]

On 2024-06-16 at 12:18, Hans wrote:

> I am wondering, why aptitude is showing me (incorrectlly?)
> libllvm*:i386 and apt-get not.
> 
> I have no i386 entry in sources.list, but where does aptitude get its
> information?

AFAIK, /etc/sources.list does not record architectures; it only records
mirrors, which may have one architecture on them or may have multiple.

In order to see whether or not you have 'i386' available as an enabled
architecture, you can run:

$ dpkg --print-foreign-architectures

(That's assuming it isn't your native architecture, which since you
suggest that it might be incorrect I'm assuming it isn't.)

> apt-cache search libllvm | grep i386

'apt-cache search' does not report architecture qualifiers for packages.

In comparison, you can run:

$ apt-cache policy packagename packagename:i386

and you should see that it shows you available-version and
installed-version information for both architectures for that package.

> aptitude search libllvm | grep i386



> What did I miss?

A difference in the default information displayed by the tools.

-- 
   The Wanderer

The reasonable man adapts himself to the world; the unreasonable one
persists in trying to adapt the world to himself. Therefore all
progress depends on the unreasonable man. -- George Bernard Shaw



signature.asc
Description: OpenPGP digital signature

Re: *****SPAM***** Re: Package libllvm12:i386 does not exists on Debian ?

[Hans]

I am wondering, why aptitude is showing me (incorrectlly?) libllvm*:i386 and 
apt-get not. 

I have no i386 entry in sources.list, but where does aptitude get its 
information?




apt-cache search libllvm | grep i386





aptitude search libllvm | grep i386 
p  libllvm13:i386 - Modulare Techniken für Compiler und Toolchains, 
Laufzeitbibliothek 
p  libllvm14:i386 - Modulare Techniken für Compiler und Toolchains, 
Laufzeitbibliothek 
i A libllvm15:i386 - Modulare Techniken für Compiler und Toolchains, 
Laufzeitbibliothek 
p  libllvm16:i386 - Modular compiler and toolchain technologies, runtime 
library 
p  libllvmspirvlib-14-dev:i386 - bi-directional translator for LLVM/SPIRV -- 
development files 
p  libllvmspirvlib-15-dev:i386 - bi-directional translator for LLVM/SPIRV -- 
development files 
v  libllvmspirvlib-x.y-dev:i386 -  
p  libllvmspirvlib14:i386 - bi-directional translator for LLVM/SPIRV -- shared 
library 
p  libllvmspirvlib15:i386 - bi-directional translator for LLVM/SPIRV -- shared 
library



What did I miss?

Hans

Re: Package libllvm12:i386 does not exists on Debian ?

[tomas]

On Sun, Jun 16, 2024 at 09:50:45AM -0600, Charles Curley wrote:

[...]

> If you are on amd64 and want i386 packages, you must first enable the
> i386 packages. I'll let you search for the appropriate instructions.

To me, that seems the most promising avenue.

See dpkg --add-architecture to "add" another architecture to
your package sources.

Cheers
-- 
t


signature.asc
Description: PGP signature

Re: Package libllvm12:i386 does not exists on Debian ?

[Charles Curley]

On Sun, 16 Jun 2024 15:41:59 +0200
Mario Marietto  wrote:

> I'm trying to compile wine-tkg from this repo :
> 
> https://github.com/Frogging-Family/wine-tkg-git
> 
> This is what I did,according with the short tutorial :
> 
> root@debian-now:/home/marietto/Scaricati/wine-tkg-git/wine-tkg-git#
> ./non-makepkg-build.sh
> 
> => Installing package: libllvm12:i386 | Using apt  
> E: Can't find package libllvm12:i386
> ==> WARNING: Failed to install package: libllvm12:i386
> => Installing apt-smart | Using pip  
> error: externally-managed-environment
> × This environment is externally managed
> ╰─> To install Python packages system-wide, try apt install  
> python3-xyz, where xyz is the package you are trying to
> install.

Things you haven't told us:

* Which version of Debian you are using. I'm going to assume Bookworm
  (12).

* Whether you are running on i386 or amd64 or something completely
  different. I'm going to assume amd64.

I have security concerns about build processes that just up and try to
install packages for you. That sets off my paranoia alarms.

If you are on amd64 and want i386 packages, you must first enable the
i386 packages. I'll let you search for the appropriate instructions.

As for why you aren't getting libllvm12 (of any architecture), that is
likely because it isn't available in Bookworm. Strip off the version
number, and search on that. I get:

charles@issola:~$ apt-cache search libllvm
libllvm-ocaml-dev - Low-Level Virtual Machine (LLVM), bindings for OCaml
libllvm-13-ocaml-dev - Modular compiler and toolchain technologies, OCaml 
bindings
libllvm13 - Modular compiler and toolchain technologies, runtime library
libllvm-14-ocaml-dev - Modular compiler and toolchain technologies, OCaml 
bindings
libllvm14 - Modular compiler and toolchain technologies, runtime library
libllvm-15-ocaml-dev - Modular compiler and toolchain technologies, OCaml 
bindings
libllvm15 - Modular compiler and toolchain technologies, runtime library
libllvm-16-ocaml-dev - Modular compiler and toolchain technologies, OCaml 
bindings
libllvm16 - Modular compiler and toolchain technologies, runtime library
libllvmspirvlib-14-dev - bi-directional translator for LLVM/SPIRV -- 
development files
libllvmspirvlib14 - bi-directional translator for LLVM/SPIRV -- shared library
libllvmspirvlib-15-dev - bi-directional translator for LLVM/SPIRV -- 
development files
libllvmspirvlib15 - bi-directional translator for LLVM/SPIRV -- shared library
charles@issola:~$ 

So your program appears to want a version of libllvm that has been
dropped from bookworm. You should probably take that up with the
developers of the program.



-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Re: Package libllvm12:i386 does not exists on Debian

[Mario Marietto]

Errata corrige :

that's not the correct package. The package I need is for i386.

On Sun, Jun 16, 2024 at 4:43 PM Mario Marietto 
wrote:

> I've found the required package here :
>
>
> https://snapshot.debian.org/archive/debian/20220531T025502Z/pool/main/l/llvm-toolchain-12/libllvm12_12.0.1-21_amd64.deb
>
> But according with this post :
>
>
> https://www.reddit.com/r/debian/comments/rbeq4o/libllvm12_package_is_breaking_steam/
>
> it seems that "libllvm12 package is breaking Steam". Maybe this is the
> reason why it has been removed ? Anyway,if I don't install this package,the
> script will not finish.
>
> On Sun, Jun 16, 2024 at 4:26 PM David Wright 
> wrote:
>
>> On Sun 16 Jun 2024 at 15:41:59 (+0200), Mario Marietto wrote:
>>
>> > root@debian-now:/home/marietto/Scaricati/wine-tkg-git/wine-tkg-git# apt
>> > install libllvm12:i386
>> > E: Can't find package libllvm12:i386
>> >
>> > So,I would like to know how to install the package "libllvm12:i386".
>> >
>> > I tried to look for that packages below :
>> >
>> > https://packages.debian.org/search?keywords=libllvm12
>> >
>> > but it said :
>> >
>> > You have searched for packages that contain *libllvm12* in all suites,
>> all
>> > sections, and all architectures.
>> > So,I haven't any other idea about how to find that package.
>> > Where can I find it ? thanks. Without it the script can't finish its
>> job.
>>
>> You may see why if instead you try:
>>
>>   https://packages.debian.org/search?keywords=libllvm1
>>
>> Cheers,
>> David.
>>
>>
>
> --
> Mario.
>


-- 
Mario.

Re: Package libllvm12:i386 does not exists on Debian

[Mario Marietto]

I've found the required package here :

https://snapshot.debian.org/archive/debian/20220531T025502Z/pool/main/l/llvm-toolchain-12/libllvm12_12.0.1-21_amd64.deb

But according with this post :

https://www.reddit.com/r/debian/comments/rbeq4o/libllvm12_package_is_breaking_steam/

it seems that "libllvm12 package is breaking Steam". Maybe this is the
reason why it has been removed ? Anyway,if I don't install this package,the
script will not finish.

On Sun, Jun 16, 2024 at 4:26 PM David Wright 
wrote:

> On Sun 16 Jun 2024 at 15:41:59 (+0200), Mario Marietto wrote:
>
> > root@debian-now:/home/marietto/Scaricati/wine-tkg-git/wine-tkg-git# apt
> > install libllvm12:i386
> > E: Can't find package libllvm12:i386
> >
> > So,I would like to know how to install the package "libllvm12:i386".
> >
> > I tried to look for that packages below :
> >
> > https://packages.debian.org/search?keywords=libllvm12
> >
> > but it said :
> >
> > You have searched for packages that contain *libllvm12* in all suites,
> all
> > sections, and all architectures.
> > So,I haven't any other idea about how to find that package.
> > Where can I find it ? thanks. Without it the script can't finish its job.
>
> You may see why if instead you try:
>
>   https://packages.debian.org/search?keywords=libllvm1
>
> Cheers,
> David.
>
>

-- 
Mario.

Re: Package libllvm12:i386 does not exists on Debian

[David Wright]

On Sun 16 Jun 2024 at 15:41:59 (+0200), Mario Marietto wrote:

> root@debian-now:/home/marietto/Scaricati/wine-tkg-git/wine-tkg-git# apt
> install libllvm12:i386
> E: Can't find package libllvm12:i386
> 
> So,I would like to know how to install the package "libllvm12:i386".
> 
> I tried to look for that packages below :
> 
> https://packages.debian.org/search?keywords=libllvm12
> 
> but it said :
> 
> You have searched for packages that contain *libllvm12* in all suites, all
> sections, and all architectures.
> So,I haven't any other idea about how to find that package.
> Where can I find it ? thanks. Without it the script can't finish its job.

You may see why if instead you try:

  https://packages.debian.org/search?keywords=libllvm1

Cheers,
David.

Re: Package Identification Assistance

[Ralph Aichinger]

On Thu, 2024-02-15 at 20:33 -0500, Neal Heinecke wrote:
> I need to identify the package responsible for creating the software
> sources window. There is a minor bug/typo where the first tab reads
> "Ubuntu Software"

This could be synaptic?

https://help.ubuntu.com/community/SynapticHowto

Does the program have an "About" menu entry?

/ralph

Re: Package Identification Assistance

[Max Nikulin]

On 16/02/2024 21:14, Greg Wooledge wrote:

On Fri, Feb 16, 2024 at 09:05:28PM +0700, Max Nikulin wrote:

I suspect that program name is the question. If "ps awf" gives no clue then
perhaps the following may help (untested):

https://unix.stackexchange.com/questions/362731/how-to-identify-window-by-clicking-in-wayland


I would also point out that this is a Debian mailing list, not an Ubuntu
mailing list, and therefore the people here don't know anything about
Ubuntu systems (generally).


https://codesearch.debian.net tells that "Ubuntu Software" occurs in 
translation files for gnome-software and software-properties packages.

Re: Package Identification Assistance

[The Wanderer]

On 2024-02-16 at 09:14, Greg Wooledge wrote:

>>> On Thu, 15 Feb 2024 20:33:16 -0500 Neal Heinecke wrote:
>>> 
 I need to identify the package responsible for creating the
 software sources window. There is a minor bug/typo where the
 first tab reads "Ubuntu Software"

> I would also point out that this is a Debian mailing list, not an
> Ubuntu mailing list, and therefore the people here don't know
> anything about Ubuntu systems (generally).
> 
> Maybe this program is normal and common on Ubuntu.  If that's the
> case, then asking on an Ubuntu mailing list or web forum would
> probably have got a useful reply immediately, whereas all *we* can do
> is scratch our heads and toss out random guesses.

I could be on the wrong track, but I parsed the original post as
reporting that a program on Debian identifies itself as being connected
to Ubuntu, and that this would constitute a bug, and as wanting to
identify the package responsible for that program *so as to be able to
report that bug so that it can be fixed*.

If that's correct, then the original question was "how can I identify
the package on my Debian system which contains the program which is
misbehaving in this way?", which would seem to be perfectly fine as a
question for debian-user.

That said, I don't have any idea of suggestions to offer, without more
information which the original poster has not provided. To start with,
I'd want to know: what steps is it which cause the window which displays
this improperly-titled tab to open?

-- 
   The Wanderer

The reasonable man adapts himself to the world; the unreasonable one
persists in trying to adapt the world to himself. Therefore all
progress depends on the unreasonable man. -- George Bernard Shaw



signature.asc
Description: OpenPGP digital signature

Re: Package Identification Assistance

[Greg Wooledge]

On Fri, Feb 16, 2024 at 09:05:28PM +0700, Max Nikulin wrote:
> On 16/02/2024 12:16, Charles Curley wrote:
> > On Thu, 15 Feb 2024 20:33:16 -0500
> > Neal Heinecke wrote:
> > 
> > > I need to identify the package responsible for creating the software
> > > sources window. There is a minor bug/typo where the first tab reads
> > > "Ubuntu Software"
> > 
> > I have no idea what a "software sources window" is. Do you know the
> > name of the program?
> I suspect that program name is the question. If "ps awf" gives no clue then
> perhaps the following may help (untested):
> 
> https://unix.stackexchange.com/questions/362731/how-to-identify-window-by-clicking-in-wayland

I would also point out that this is a Debian mailing list, not an Ubuntu
mailing list, and therefore the people here don't know anything about
Ubuntu systems (generally).

Maybe this program is normal and common on Ubuntu.  If that's the case,
then asking on an Ubuntu mailing list or web forum would probably have
got a useful reply immediately, whereas all *we* can do is scratch our
heads and toss out random guesses.

Re: Package Identification Assistance

[Max Nikulin]

On 16/02/2024 12:16, Charles Curley wrote:

On Thu, 15 Feb 2024 20:33:16 -0500
Neal Heinecke wrote:


I need to identify the package responsible for creating the software
sources window. There is a minor bug/typo where the first tab reads
"Ubuntu Software"


I have no idea what a "software sources window" is. Do you know the
name of the program?
I suspect that program name is the question. If "ps awf" gives no clue 
then perhaps the following may help (untested):


https://unix.stackexchange.com/questions/362731/how-to-identify-window-by-clicking-in-wayland

Re: Package Identification Assistance

[Cindy Sue Causey]

On 2/16/24, Charles Curley  wrote:
> On Thu, 15 Feb 2024 20:33:16 -0500
> Neal Heinecke  wrote:
>
>> I need to identify the package responsible for creating the software
>> sources window. There is a minor bug/typo where the first tab reads
>> "Ubuntu Software"
>
> I have no idea what a "software sources window" is. Do you know the
> name of the program? Often the name of the program is also the name of
> the package.
>
> Apt-file is a useful tool here.


I a-sumed it was about something like maybe aptitude.. which just
generated approximately 1,320 "apt-file find" results. Kind of a nice
little "the more you know" treasure hunt for the curious, actually..

Cindy :)
-- 
Talking Rock, Pickens County, Georgia, USA
* runs with birdseed *

Re: Package Identification Assistance

[Stefan Monnier]

> I need to identify the package responsible for creating the software
> sources window. There is a minor bug/typo where the first tab reads
> "Ubuntu Software"

If all else fails, you can always try something like:

find / -mount -type f -print0 | xargs -0 grep -al "Ubuntu Software"

to find files that contain the string "Ubuntu Software".
Then pass those file names to `dpkg -S`.


Stefan

Re: Package Identification Assistance

[Jeffrey Walton]

On Fri, Feb 16, 2024 at 12:27 AM Neal Heinecke  wrote:
>
> I need to identify the package responsible for creating the software sources 
> window. There is a minor bug/typo where the first tab reads "Ubuntu Software"

If you can locate the program that owns the window, then you can
identify the package with `dpkg -S`.

To identify the program:

$ ps -A > 1.txt



$ ps -A > 2.txt

Then run diff to see the list of candidate programs:

$ diff 1.txt 2.txt

Finally, run `dpkg -S` using the full path of the program, like /usr/bin/foo.

Jeff

Re: Package Identification Assistance

[Charles Curley]

On Thu, 15 Feb 2024 20:33:16 -0500
Neal Heinecke  wrote:

> I need to identify the package responsible for creating the software
> sources window. There is a minor bug/typo where the first tab reads
> "Ubuntu Software"

I have no idea what a "software sources window" is. Do you know the
name of the program? Often the name of the program is also the name of
the package.

Apt-file is a useful tool here.

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Re: package manager

[Charles Curley]

On Sat, 23 Dec 2023 11:57:58 -0600
William Torrez Corea  wrote:

> > Hit:8 https://repo.steampowered.com/steam stable InRelease
> >
> > Hit:9 https://ftp.postgresql.org/pub/pgadmin/pgadmin4/apt/bullseye
> > pgadmin4 InRelease
> > Hit:10 tor+http://deb.ooni.org unstable InRelease
> > Err:4 http://repo.mysql.com/apt/debian bullseye InRelease
> >   The following signatures couldn't be verified because the public
> > key is not available: NO_PUBKEY B7B3B788A8D3785C

First, what Andy Smith  said. You have a lot of
non-Debian repos in there, and there's no guarantee they will play
nicely with each other.

Second, in Hit 9 in the quoted results above, you are trying to pull
from the postgres repo for bullseye, when at the top you are pulling
from bookworm updates (Hit 1). Crossing different different Debian
versions like that is also a recipe for problems.

Third, when you copy and paste from a terminal to an email, copy an
paste the whole thing, including leading and trailing command line
prompts. Otherwise we're guessing what you did and may miss significant
information.

Fourth, that "NO_PUBKEY B7B3B788A8D3785C" above indicates that you do
not have the key for that repo. I would search on that phrase and see
what comes up. Failing that, go to the repo's web site, find and follow
instructions there on how to get (and verify) the missing key.


-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Re: package manager

[Andy Smith]

Hi William,

On Sat, Dec 23, 2023 at 11:57:58AM -0600, William Torrez Corea wrote:
> > W: An error occurred during the signature verification. The repository is
> > not updated and the previous index files will be used. GPG error:
> > http://repo.mysql.com/apt/debian bullseye InRelease: The following
> > signatures couldn't be verified because the public key is not available:
> > NO_PUBKEY B7B3B788A8D3785C
> > W: tor+http://deb.ooni.org/dists/unstable/InRelease: Key is stored in
> > legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION
> > section in apt-key(8) for details.
> > W: Failed to fetch
> > http://repo.mysql.com/apt/debian/dists/bullseye/InRelease  The following
> > signatures couldn't be verified because the public key is not available:
> > NO_PUBKEY B7B3B788A8D3785C
> > W: Some index files failed to download. They have been ignored, or old
> > ones used instead.

The repositories that you're having problems with aren't official
Debian repositories, so you might need to ask them about the
problems, or at the very least have a look at each of their
documentations to see if you are still using them correctly.

You have a lot of non-standard repositories here so you really need
to know what you are doing in order to not break your system. There
is no real guarantee that all of the repositories you're using are
designed to be used with Debian bullseye or with each other.

> I try remove some packages
> 
> *apt purge tor*
> 
> Reading package lists... Done
> > Building dependency tree... Done
> > Reading state information... Done
> > The following packages will be REMOVED:
> >   tor*
> > 0 upgraded, 0 newly installed, 1 to remove and 1 not upgraded.
> > 11 not fully installed or removed.
> > After this operation, 0 B of additional disk space will be used.
> > Do you want to continue? [Y/n]
> > Setting up mysql-common (8.0.35-1debian11) ...
> > update-alternatives: error: alternative path /etc/mysql/my.cnf.fallback
> > doesn't
> > exist
> > dpkg: error processing package mysql-common (--configure):

etc..

So this might seem confusing but the situation you're in is that the
MySQL package (which you got from a non-Debian source so possibly
can't be advised upon here except in general terms) failed to
uninstall and as a result no further apt operations can be done
until that is resolved.

Possibly if you don't care about the sanctity of whatever MySQL data
exists on your system you can forcibly remove these MySQL packages
with a set of "dpkg -r" operations.

Failing that you may need to look in /var/lib/dpkg/info/ for the
various .postinst scripts which will be named after the MySQL
packages. These are what are failing to run. You can fix them to
work or you can delete them so they don't need to be run. After
that, removal should be possible. Once the MySQL problem is fixed,
your apt should start being functional again. Or else you find the
next problem. 😀

These are quite advanced topics. If this seems daunting, I would
advise trying to keep third-party repositories at a minimum.

You may also want to consult MySQL support for advise about problems
you're experiencing removing their packages.

Thanks,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Re: Package policy?

[Charles Kroeger]

It's the Lord's will Hans, you have to accept it. Follow the prophet sid.

-- 
Deo Soli Debianea Invicto Seculari

Re: Package policy?

[Brad Rogers]

On Tue, 08 Aug 2023 16:24:45 +0200
Hans  wrote:

Hello Hans,

>I can only guess, the package maintainers removed it, because it did
>not work somewhow, but why then put it back again?

They didn't put it back.  It was never removed from Sid (things rarely
are)[1].  It was removed from Testing in Oct 2022 due to having
dependency issues (they can't be satisfied). Because of that removal,
the package isn't in the current Debian release - Bookworm.

See; https://tracker.debian.org/pkg/roger-router
Which has a pointer to the bug report;
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1019303
The final line of the reply reads (in part)
  "This is going to be ... fun"
by which I assume they mean "A lot of work".

[1]  It's Sid - EXPECT breakage at some point.

-- 
 Regards  _   "Valid sig separator is {dash}{dash}{space}"
 / )  "The blindingly obvious is never immediately apparent"
/ _)rad   "Is it only me that has a working delete key?"
Is she really going out with him?
New Rose - The Damned


pgpqjSjdgo9qB.pgp
Description: OpenPGP digital signature

Re: Package policy?

[Tixy]

On Tue, 2023-08-08 at 16:24 +0200, Hans wrote:
> Hi folks, 
> 
> sometimes I do not understand, how debian is handling packages. Here is 
> another weired case.
> 
> Package roger-router: available in bullseye, NOT available in bookworm, but 
> again available in sid???

Probably because it had a critical bug that did get fixed in time for
the Bookworm release so it was removed from Bookworm. It probably was
ever removed from sid, just Bookworm when it was 'testing'.

> 
> I can only guess,

You don't have to guess, you can look at the package tracker...
https://tracker.debian.org/pkg/roger-router

>  the package maintainers removed it, because it did not work 
> somewhow, but why then put it back again?

It's not been put back again, it's still not in 'testing' because it's
been broken for nearly a year. The package tracker shows it's history,
looks like one of the libraries it depends on isn't present in the
correct version.

-- 
Tixy

Re: package managers problem

[gene heskett]

On 6/27/23 14:05, David Wright wrote:

On Thu 22 Jun 2023 at 04:30:47 (-0400), gene heskett wrote:

On 6/21/23 18:45, David Wright wrote:

On Wed 21 Jun 2023 at 16:14:07 (-0400), gene heskett wrote some words.
In reply:

Eh? Can I remind you that the Escape key is not a shift key;
you just have to press the Escape key and /then/ the Zero key.


Here, the esc key must be held while entering the 0, else it just
show's a 0 in the command line box and doesn't exit.

[ … ]

So it is still a two handed
operation since they are about 16 inches apart on my keyboard. In my
case the terminal is konsole.  But it is handier than grabbing a
mouse, finding the button and clicking on it.  Thank you.


That is bizarre, to say the least. Does that mean that Escape doesn't
do all the other things that it's used for in mc? For example, double
Escape exits many commands, the viewers, etc, and Escape Digit should
have the same action as the corresponding Function key (with zero
standing for F10, hence Roy's suggestion).

bizzare isn't the word that comes to mind, but thats how it works with 
gnome.  I've now switched to kde and will check it again. Now the esc 
key has been neutered. But f10 works, the ideal IMO. But how the heck do 
I get rid of the kcalc advertisement on the screen background that shows 
the nice round clock? just above it?


And I found just now & had to reboot several times to fix it, that the 
drive carrying / was not the drive I installed bookworm to, so I 
installed gparted and nuked the boot flag from the wrong drive which 
changed the fstab, and I am now running on the correct drive with my 
raid10 mounted over the /home on /dev/sda. TBD if I stay on plasma though.



This may be tied to whichever terminal is used for the default
that mc opens in and the numpad 0 is the only one that works here.


I can't help thinking that there might be some connection between
this situation and the fact that the TUI version of aptitude gives
you such trouble. As I don't use the terminals/DEs etc that you do,
I can't be of much help in making your TERM selection.

Anyway, assuming F9 still works for drop-down menus, you can exit
mc with a sequence of three unshifted keystrokes: F9 f x, ie drop
down the File menu and select exit (whose x is highlighted).




Cheers,
David.

.


Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: package managers problem

[David Wright]

On Wed 21 Jun 2023 at 21:25:15 (+), Andy Smith wrote:
> On Wed, Jun 21, 2023 at 04:53:06PM +0100, David Wright wrote:
> > On Wed 21 Jun 2023 at 12:31:20 (+), Andy Smith wrote:
> > > feature rich editors like vim and emacs can easily write to files
> > > through sudo or sftp, thus enabling seamless editing of files as
> > > different users and even on different hosts.
> 
> > I don't recall ever editing a file as root and needing anything
> > beyond the capabilities of nano. What kind of "advanced" editing
> > would one do?
> 
> I'm saying that the more advanced editors have features to only do
> the I/O as root, so one can enjoy all the other features of the
> editor without running the whole editor as root, so that bypasses
> the issue of "it's a bad idea to run a complex app (editor) as
> root". You can just run it as you and still write to such files when
> you need to.

Perhaps we're talking about mitigating different problems. It's not
the size and complexity of advanced editors etc that worries me (cf
browsers), but the fact that the odd keystroke, used in error, can
do a lot of damage. For example mc, although by default having
confirm_delete=true, has safe_delete=false, meaning that the
confirmation dialog box has Yes (confirm) preselected.

> I personally feel that it was a force multiplier for me when I went
> from nano¹ to a more complex editor, but I'm not going to try to
> convince anyone else.

Yes, it's the multiplication that I fear.

> ¹ Well, pico for me, which was what nano was a clone of.

Or, long ago, ae.

Cheers,
David.

Re: package managers problem

[David Wright]

On Thu 22 Jun 2023 at 04:30:47 (-0400), gene heskett wrote:
> On 6/21/23 18:45, David Wright wrote:
> > On Wed 21 Jun 2023 at 16:14:07 (-0400), gene heskett wrote some words.
> > In reply:
> > 
> > Eh? Can I remind you that the Escape key is not a shift key;
> > you just have to press the Escape key and /then/ the Zero key.
> > 
> Here, the esc key must be held while entering the 0, else it just
> show's a 0 in the command line box and doesn't exit.
[ … ]
> So it is still a two handed
> operation since they are about 16 inches apart on my keyboard. In my
> case the terminal is konsole.  But it is handier than grabbing a
> mouse, finding the button and clicking on it.  Thank you.

That is bizarre, to say the least. Does that mean that Escape doesn't
do all the other things that it's used for in mc? For example, double
Escape exits many commands, the viewers, etc, and Escape Digit should
have the same action as the corresponding Function key (with zero
standing for F10, hence Roy's suggestion).

> This may be tied to whichever terminal is used for the default
> that mc opens in and the numpad 0 is the only one that works here.

I can't help thinking that there might be some connection between
this situation and the fact that the TUI version of aptitude gives
you such trouble. As I don't use the terminals/DEs etc that you do,
I can't be of much help in making your TERM selection.

Anyway, assuming F9 still works for drop-down menus, you can exit
mc with a sequence of three unshifted keystrokes: F9 f x, ie drop
down the File menu and select exit (whose x is highlighted).

Cheers,
David.

Re: package managers problem

[Joe]

On Sat, 17 Jun 2023 11:57:57 +0100
Joe  wrote:

> On Fri, 16 Jun 2023 18:41:08 -0400
> Greg Wooledge  wrote:
> 
> > On Fri, Jun 16, 2023 at 06:35:48PM -0400, gene heskett wrote:  
> > > 0 upgraded, 164 newly installed, 0 to remove and 0 not upgraded.
> > > Need to get 44.5 MB of archives.
> > > After this operation, 206 MB of additional disk space will be
> > > used. 
> > 
> > I really don't understand why people want a GUI package manager at
> > all. The last time I used anything even remotely *close* to a GUI
> > package manager was dselect, back in the previous century.  And that
> > was a curses (terminal) interface, not an X11 one.
> > 
> > In the last two decades, I haven't used or wanted anything fancier
> > than apt(-get).
> > 
> > Now, granted, this is just my personal stance.  I may be atypical.
> > That said, what exactly does a GUI package manager offer you, that
> > you can't get from "apt install thing-i-want"?
> >   
> 
> I run sid on my main workstation, and sometimes it gets in a muddle,
> with fifty packages not upgradable. OK, if it's a big group of related
> packages and a key one hasn't been upgraded yet, there's nothing to be
> done about them. But often another thirty packages can be upgraded,
> but only in a specific order. I find synaptic much quicker at
> clearing this kind of logjam than either apt-get or aptitude. It's
> easy to select half a dozen packages and see easily what will be
> removed if you try to upgrade, and I once cleared a logjam of about
> fifty packages that neither apt-get nor aptitude could deal with. It
> was a matter of upgrading a few at a time, and in a particular order,
> and I'd have spent all day trying to do that with the other apt tools.
> 
> And no, I don't like to postpone upgrading sid for too long,
> particularly at this stage in the lifecycle.
> 

I don't usually follow myself up, but this is relevant: tonight there
were seven packages in unstable to upgrade, and all were held back. I
knew about three, they are waiting for a dependency, but the others
were calibre and three dependencies. I switched to Synaptic to get a
better picture of what was holding them up (yes, I know that can be
done from the command line and I even know how to do it, but I prefer
Synaptic for that job), and lo and behold, they just upgraded without
complaint. I don't know why apt wouldn't do it, there's probably a bug
there, but this is unstable and everything is transient...

-- 
Joe

Re: Package relevant to backlight control?

[Victor Siman'kin]

look kernel module `modinfo applesmc`
like this 

25.06.2023 19:21, Gerald Anzalone пишет:

Hi:

Since upgrading to Bookworm, the backlight control on my Apple iMac no 
longer works. I would like to report this bug, but don't know which 
package to associate it with.


Thank you,

JerryBEGIN:VCARD
VERSION:4.0
N:Симанькин;Виктор;;;
FN:Виктор
NICKNAME:victor
URL;TYPE=work:https://victor.cloud
TEL;TYPE=cell;VALUE=TEXT:+79150674935
IMPP:https://t.me/v_simankin
TZ:Europe/Moscow
END:VCARD

Re: package managers problem

[gene heskett]

On 6/21/23 18:45, David Wright wrote:

On Wed 21 Jun 2023 at 16:14:07 (-0400), gene heskett wrote some words.
In reply:

Eh? Can I remind you that the Escape key is not a shift key;
you just have to press the Escape key and /then/ the Zero key.

Cheers,
David.

.
Here, the esc key must be held while entering the 0, else it just show's 
a 0 in the command line box and doesn't exit.  This may be tied to 
whichever terminal is used for the default that mc opens in and the 
numpad 0 is the only one that works here. So it is still a two handed 
operation since they are about 16 inches apart on my keyboard. In my 
case the terminal is konsole.  But it is handier than grabbing a mouse, 
finding the button and clicking on it.  Thank you.


Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: package managers problem

[gene heskett]

On 6/21/23 18:45, David Wright wrote:

On Wed 21 Jun 2023 at 16:14:07 (-0400), gene heskett wrote some words.
In reply:

Eh? Can I remind you that the Escape key is not a shift key;
you just have to press the Escape key and /then/ the Zero key.

Cheers,
David.


That could have been the sequence, thanks.

Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: package managers problem

[Felix Miata]

Andy Smith composed on 2023-06-21 21:07 (UTC):

> You were using XFCE4 on Wayland under bullseye right?

2 for 3. https://www.linux.org/threads/xfce-wayland.43792/ says it could not 
have
been on Wayland.

The "wayland" that kept getting stuffed in his face was an entirely misleading
error message from X refusing to start on account of a credentials and/or
permissions failure.
-- 
Evolution as taught in public schools is, like religion,
based on faith, not based on science.

 Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!

Felix Miata

Re: package managers problem

[gene heskett]

On 6/21/23 17:08, Andy Smith wrote:

Hello,

On Wed, Jun 21, 2023 at 03:50:31PM -0400, gene heskett wrote:

On 6/20/23 18:23, Andy Smith wrote:

I think it's already been demonstrated in this thread that the
desktop launcher for Synaptic calls policykit to start it, so if as
you claim you do a standard Debian install and then try to launch
Synaptic from the desktop (specifically NOT from a terminal window,
and not using sudo or otherwise) and find "nothing happens", then
that is a bug you should report to Debian.


Maybe, but it was a bullseye bug.


Can we please not do this? First you said it was a Wayland bug, now
you're saying it was a bullseye bug. We don't know what the root
cause of it was and you did not really help with any of the
constructive suggestions people made to try to get there. These
non-specific sweeping statements don't help either. This is how we
go down the route of you making weird claims about IPv6, resolvconf,
etc etc for years to come.

Just try to stick to known facts in case anyone stumbles across this
again.

You were using XFCE4 on Wayland under bullseye right?


Yes.

Cheers,
Andy



Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: package managers problem

[David Wright]

On Wed 21 Jun 2023 at 16:14:07 (-0400), gene heskett wrote some words.
In reply:

Eh? Can I remind you that the Escape key is not a shift key;
you just have to press the Escape key and /then/ the Zero key.

Cheers,
David.

Desktop environments stealing app key shortcuts (Was Re: package managers problem)

[Andy Smith]

Hello,

On Wed, Jun 21, 2023 at 04:14:07PM -0400, gene heskett wrote:
> On 6/21/23 13:51, Roy J. Tellason, Sr. wrote:
> > On Wednesday 21 June 2023 08:54:46 am Maurice Heskett wrote:
> > > it pisses me off that F10 has been stolen by the window
> > > managers to bring up a useless menu, making me find the mouse
> > > to quit it when I'm done.
> > 
> > That *is* annoying...
> > 
> > But I find that 0 works for this.
> 
> So it does Roy, thank you, but that's still a two handed operation with

Surely it is pretty easy to alter the desktop environment key
shortcuts? There a few GNOME ones I have to disable myself, due to
using various F-keys for other apps.

Cheers,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Re: package managers problem

[Andy Smith]

Hi David,

On Wed, Jun 21, 2023 at 04:53:06PM +0100, David Wright wrote:
> On Wed 21 Jun 2023 at 12:31:20 (+), Andy Smith wrote:
> > feature rich editors like vim and emacs can easily write to files
> > through sudo or sftp, thus enabling seamless editing of files as
> > different users and even on different hosts.

> I don't recall ever editing a file as root and needing anything
> beyond the capabilities of nano. What kind of "advanced" editing
> would one do?

I'm saying that the more advanced editors have features to only do
the I/O as root, so one can enjoy all the other features of the
editor without running the whole editor as root, so that bypasses
the issue of "it's a bad idea to run a complex app (editor) as
root". You can just run it as you and still write to such files when
you need to.

I personally feel that it was a force multiplier for me when I went
from nano¹ to a more complex editor, but I'm not going to try to
convince anyone else.

One day I might even get around to using one of these new-fangled
shells instead of bash. 😀

Cheers,
Andy

¹ Well, pico for me, which was what nano was a clone of.

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Re: package managers problem

[Andy Smith]

Hello,

On Wed, Jun 21, 2023 at 03:50:31PM -0400, gene heskett wrote:
> On 6/20/23 18:23, Andy Smith wrote:
> > I think it's already been demonstrated in this thread that the
> > desktop launcher for Synaptic calls policykit to start it, so if as
> > you claim you do a standard Debian install and then try to launch
> > Synaptic from the desktop (specifically NOT from a terminal window,
> > and not using sudo or otherwise) and find "nothing happens", then
> > that is a bug you should report to Debian.
> 
> Maybe, but it was a bullseye bug.

Can we please not do this? First you said it was a Wayland bug, now
you're saying it was a bullseye bug. We don't know what the root
cause of it was and you did not really help with any of the
constructive suggestions people made to try to get there. These
non-specific sweeping statements don't help either. This is how we
go down the route of you making weird claims about IPv6, resolvconf,
etc etc for years to come.

Just try to stick to known facts in case anyone stumbles across this
again.

You were using XFCE4 on Wayland under bullseye right?

Cheers,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Re: package managers problem

[Andy Smith]

Hello,

On Wed, Jun 21, 2023 at 01:53:28PM -0400, gene heskett wrote:
> Oh, and synaptic asks for a pw, I give it mine, and it runs just fine.

Great, so hopefully you are now prepared to accept that all the
things about Synaptic not working under Wayland were a huge blind
alley.

We still don't know what was going wrong before, and it sounds like
it will not be easy to reproduce it which is a shame as there might
have been a real bug that needed reporting.

In case anyone stumbles over this again, what was your problematic
environment? XFCE4 desktop environment on Wayland? And the problem
being that launching Synaptic asked for your password but then
the dialog went away without appearing to actually launch Synaptic?

Cheers,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Re: package managers problem

[gene heskett]

On 6/21/23 13:51, Roy J. Tellason, Sr. wrote:

On Wednesday 21 June 2023 08:54:46 am Maurice Heskett wrote:

mc for a file manager since my original
install from floppies of redhat 5.0 in the late '90's. I am well aware
of what it CAN do. There is no gui file manager that can touch it for
utility, and it pisses me off that F10 has been stolen by the window
managers to bring up a useless menu, making me find the mouse to quit it
when I'm done.


That *is* annoying...

But I find that 0 works for this.


So it does Roy, thank you, but that's still a two handed operation with

my extra large hands equipt with sawed off fingers that cannot reach an

octave on the piano keyboard with a 38 in my ear.


Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: package managers problem

[gene heskett]

On 6/20/23 21:25, pa...@quillandmouse.com wrote:

On Tue, 20 Jun 2023 17:56:36 -0400
gene heskett  wrote:


Like firefox, its big and complex, but unlike
gedit has never trashed a file for me, gedit has ruined so many I
finally banned it from my machines, all of them.


Vim for the win! (kidding)

Everybody has their fav poison, I used vi and vim in the late 90's, but 
never got comfortable with its save and exit syntax.. Geany's ctl-s and 
ctl-q beats vim like a white mouthed mule.  gedit OTOH, has caused me 
several days work attempting to recover from its file scrambling 
penchant. geany has never made a mistake my fingers didn't make.

Thanks Paul.

Paul



Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: package managers problem

[gene heskett]

On 6/20/23 18:23, Andy Smith wrote:

Hello Gene,

On Tue, Jun 20, 2023 at 06:01:00PM -0400, gene heskett wrote:

Alright then the question is, is policykit the solution, or do we
install it, then spend two weeks and wreck 7 installs configuring
it to work? In other words, get to the specifics or find a new horse.


I think it's already been demonstrated in this thread that the
desktop launcher for Synaptic calls policykit to start it, so if as
you claim you do a standard Debian install and then try to launch
Synaptic from the desktop (specifically NOT from a terminal window,
and not using sudo or otherwise) and find "nothing happens", then
that is a bug you should report to Debian.


Maybe, but it was a bullseye bug. Probably the best thing is to just 
give up and put bookworm on it. So far everything works but kmail. And 
I'm looking forward to a much smoother bookworm experience.


As there have been others in this thread reporting that Synaptic
works fine for them though, I fully expect this to be down to some
way you've found to break your system, probably while fighting one of
your other bogeymen like IPv6 or resolvconf or something, where you
tend to get happy with "rm -f" and "chattr +i".

Then again, there do seem to be others having a similar problem so
maybe there really is an actual bug here. Do let us know the bug
number so we can follow along and find out.

All of that would have been a sensible way to go, without this
nonsense of trying to start GUI apps with sudo or directly as root,
and then blaming the Wayland that lives under your bed.

Thanks,
Andy



Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: package managers problem

[gene heskett]

On 6/20/23 18:13, Andy Smith wrote:

Hi Gene,

On Tue, Jun 20, 2023 at 05:44:10PM -0400, gene heskett wrote:

Please do not encourage Gene's fetish of running GUI apps as root.


[…]


Andy, if you aren't behind dd-wrt for your home network, don't pretend to
tell me what I can't do


I think your contributions to this list do a great job of telling
people what you can't do.


Don't impress on me, your paranoid ideas about how I should run MY
computers


By all means, go with God and become an example to others if nothing
else!

Thanks,
Andy

Welp, I spent the morning from just after 6 my time, to around 2:30 pm. 
downloading and installing bookworm, and so far only kmail has refused 
to work. This is tbird, and synaptic I am happy to say Just Works now.
I stripped the usb ports and disconnected the drives I did not want 
formatted, installed, then reconnected everything, assembled the raid 
and mounted it on top of /home, put the swap that is part of the raid 
into fstab, and while I haven't done all of my daily driving yet, I'm 
actually grinning a bit, so far everything but kmail has Just worked. 
That is far better than any install of bullseye ever was.


I should have done the upgrade a week ago. Yeah, I'm a stubborn old 
coot, so thank you all for trying to help with a bullseye install that 
was broken from the git-go.


Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: package managers problem

[gene heskett]

On 6/21/23 11:56, David Wright wrote:

On Wed 21 Jun 2023 at 08:29:55 (-0400), Maurice Heskett wrote:


I have a gent on the Sheldon list at groups.io who would like to see
how I solved a broke into pieces compound on my bigger lathe, linuxcnc
can do all that and then some w/o a compound, so mine is now a block
of a cast iron, machined to be the same height as the broken compound
with a quick change tool holder on top of it. Because the
net-installer does not identify the drives its going to format, and
formating the raid cannot be permitted, all that stuff has to be
removed and a reinstall done to only the sata_1 drive, it takes me a
couple hours on my hands and knees to dismantle all that to protect it
from the installs appetite to format everything in sight.  Then about
2 hours to put it all back together when the install has been
finished.


I don't understand why you say that the net-installer can't identify
the drives (and partitions) that it's going to format. You seem to
have been using GPT disks for at least a year now, and they have
partition labels (PARTLABEL) which are listed by the installer,
as seen here:

   │  SCSI1 (0,0,0) (sda) - 500.1 GB ATA ST3500413AS  ▒  │
   │  > 1.0 MBFREE SPACE  ▒  │
   │  > #1  3.1 MB K  biosgrubBIOS boot pa▒  │
   │  > #2520.1 MB  B EFI System  ▒  │
   │  > #3524.3 MBext2Linux swap  ▒  │
   │  > #4 31.5 GBext4Viva-A  ▒  │
   │  > #5 31.5 GBext4Viva-B  ▒  │
   │  > #6436.1 GBViva-Home   ▒  │
   │  > 7.7 kBFREE SPACE  ▒  │
   │  ↓  │

You can set the partition names in fdisk by selecting the expert
menu with x and using the n command.


But since I'm stuck in root, and my history with that net-installer is
spotty at best, please give me a link to the bookworm net-install
image, which I'll then dl and put on a fresh dvd, maybe it will work
better than the 11.2 version I've been using. One of the things it
still does is install orca and brltty w/o asking even if that option
is skipped in the menu.


That would mean coping with changes and new features in bookworm
at the same time as trying to restore your system to something
perhaps resembling a normal Debian system. (I have no idea why
only you have ever reported undesired installation of the screen
reader system.)


It still installs it, but doesn't activate it. That to me is a bug. I 
purposely skipped that step in the installer.


But, so far, and I've been at this since around 06:20 and its 14:42 here 
now, so I think an overdue nap is next, bookworm, except for kmail, is 
working as expected and looking better eyewise than I last recalled 
looking at gnome a decade back up the log when it was being kind to call 
it butt ugly.  So ATM I'm happy.


Cheers,
David.


Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: package managers problem

[didier gaumet]

Le 21/06/2023 à 19:53, gene heskett a écrit :
welp, I just did a net install of at least half of bookworm, 

[...]

Oh, and synaptic asks for a pw, I give it mine, and it runs just fine.
Cheers, Gene Heskett.


Glad to hear it, Gene :-)

Re: package managers problem

[gene heskett]

On 6/20/23 18:53, Stefan Monnier wrote:

Probably you're running Synaptic on Wayland with root permission.
Please restart your session without Wayland, or run Synaptic without
root permission


Thank you. That's the error I saw


Correction: the above is not an error message.  It's a guess of the
likely cause of the error message emitted earlier.


Synaptic run as a regular user is useless, except to search
for things.


Not if you start it properly, so it can request admin credentials
when needed.


 Stefan

.
welp, I just did a net install of at least half of bookworm, after 
stripping the system of all but the drive I wanted to boot from 
including unplugging the raid controller, rebooted to kde and kmail 
refused to log into my isp's imap server. So I had apt install a few 
things I use, then rebooted to gnome, and I must say the eye candy has 
improved, a lot.  Then I assembled my raid10 for home and mounted it so 
tbird is looking good and working as me.  Then I repeated it for a swap 
I have on the raid, and enabled it, so now there 50 gigs on sda, and 
57gigs on the raid, and htop says 107 gigs. I've not tried 95% of my 
daily drivers yet, but its running pretty smooth and fast enough for the 
girls I go with if I ever invite another to share my real estate.


Oh, and synaptic asks for a pw, I give it mine, and it runs just fine.
Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: package managers problem

[Roy J. Tellason, Sr.]

On Wednesday 21 June 2023 08:54:46 am Maurice Heskett wrote:
> mc for a file manager since my original 
> install from floppies of redhat 5.0 in the late '90's. I am well aware 
> of what it CAN do. There is no gui file manager that can touch it for 
> utility, and it pisses me off that F10 has been stolen by the window 
> managers to bring up a useless menu, making me find the mouse to quit it 
> when I'm done.

That *is* annoying...

But I find that 0 works for this.

-- 
Member of the toughest, meanest, deadliest, most unrelenting -- and
ablest -- form of life in this section of space,  a critter that can
be killed but can't be tamed.  --Robert A. Heinlein, "The Puppet Masters"
-
Information is more dangerous than cannon to a society ruled by lies. --James 
M Dakin

Re: package managers problem

[Felix Miata]

Gene Heskett composed on 2023-06-21 08:54 (UTC-0400):

> I KNOW what mc can do, do you?

Hopefully you are aware of how simple it can be to find and fix broken 
permissions
in a corrupted homedir using https://paste.opensuse.org/bf6c16e7e2e6 (full 
window
width pane).
-- 
Evolution as taught in public schools is, like religion,
based on faith, not based on science.

 Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!

Felix Miata

Re: package managers problem

[David Wright]

On Wed 21 Jun 2023 at 21:49:54 (+0700), Max Nikulin wrote:

> The ~/.Xauthority file contains *secrets*, see Xsecurity(7), so I
> would not encourage people to post its content.

It's a cookie. You can just remove the file and let startx recreate
it (or whatever DEs require as the equivalent). They tend to
accumulate cruft anyway. (I've just noticed that my own 1038-char
file has 21 cookies.)

Cheers,
David.

Re: package managers problem

[David Wright]

On Wed 21 Jun 2023 at 08:29:55 (-0400), Maurice Heskett wrote:

> I have a gent on the Sheldon list at groups.io who would like to see
> how I solved a broke into pieces compound on my bigger lathe, linuxcnc
> can do all that and then some w/o a compound, so mine is now a block
> of a cast iron, machined to be the same height as the broken compound
> with a quick change tool holder on top of it. Because the
> net-installer does not identify the drives its going to format, and
> formating the raid cannot be permitted, all that stuff has to be
> removed and a reinstall done to only the sata_1 drive, it takes me a
> couple hours on my hands and knees to dismantle all that to protect it
> from the installs appetite to format everything in sight.  Then about
> 2 hours to put it all back together when the install has been
> finished.

I don't understand why you say that the net-installer can't identify
the drives (and partitions) that it's going to format. You seem to
have been using GPT disks for at least a year now, and they have
partition labels (PARTLABEL) which are listed by the installer,
as seen here:

  │  SCSI1 (0,0,0) (sda) - 500.1 GB ATA ST3500413AS  ▒  │   
  │  > 1.0 MBFREE SPACE  ▒  │   
  │  > #1  3.1 MB K  biosgrubBIOS boot pa▒  │   
  │  > #2520.1 MB  B EFI System  ▒  │   
  │  > #3524.3 MBext2Linux swap  ▒  │   
  │  > #4 31.5 GBext4Viva-A  ▒  │   
  │  > #5 31.5 GBext4Viva-B  ▒  │   
  │  > #6436.1 GBViva-Home   ▒  │   
  │  > 7.7 kBFREE SPACE  ▒  │   
  │  ↓  │   

You can set the partition names in fdisk by selecting the expert
menu with x and using the n command.

> But since I'm stuck in root, and my history with that net-installer is
> spotty at best, please give me a link to the bookworm net-install
> image, which I'll then dl and put on a fresh dvd, maybe it will work
> better than the 11.2 version I've been using. One of the things it
> still does is install orca and brltty w/o asking even if that option
> is skipped in the menu.

That would mean coping with changes and new features in bookworm
at the same time as trying to restore your system to something
perhaps resembling a normal Debian system. (I have no idea why
only you have ever reported undesired installation of the screen
reader system.)

Cheers,
David.

Re: package managers problem

[David Wright]

On Wed 21 Jun 2023 at 12:31:20 (+), Andy Smith wrote:
> On Wed, Jun 21, 2023 at 12:57:41PM +0100, Joe wrote:
> > On Tue, 20 Jun 2023 17:34:45 -0400
> > gene heskett  wrote:
> > >  My fav editor, geany is also
> > > dead for roots use for exactly he same reason, but runs just fine as
> > > me. So there is a common problem.
> > 
> > Well, you could do it the right way: edit as you with geany in a work
> > directory, copy to/from the real location with a root-powered file
> > manager, such as mc under sudo in a terminal. Alter owner/perms as
> > required with mc.
> 
> The idea that this is the "right" way kind of horrifies me. 😀
> 
> Not that I would attempt to suggest that Gene goes this way, but
> feature rich editors like vim and emacs can easily write to files
> through sudo or sftp, thus enabling seamless editing of files as
> different users and even on different hosts.

[ … ]

> To me, that is closer to the "right" way to do this sort of thing.
> It's really worth spending the time to learn how to do this sort of
> thing in one of the advanced editors.

I don't recall ever editing a file as root and needing anything
beyond the capabilities of nano. What kind of "advanced" editing
would one do?

(I don't run mc and emacs as root either; their capabilities are
too dangerous, in my estimation.)

Cheers,
David.

Re: package managers problem

[tomas]

On Wed, Jun 21, 2023 at 09:49:54PM +0700, Max Nikulin wrote:
> On 21/06/2023 01:41, to...@tuxteam.de wrote:
> > X clients these days need that to talk to the X server. On my box,
> > for example:
> > 
> >  tomas@trotzki:~$ hexdump -C .Xauthority
> >    01 00 00 07 74 72 6f 74  7a 6b 69 00 01 30 00 12  
> > |trotzki..0..|
> >  0010  4d 49 54 2d 4d 41 47 49  43 2d 43 4f 4f 4b 49 
> > 45|MIT-MAGIC-COOKIE|
> 
> The ~/.Xauthority file contains *secrets*, see Xsecurity(7), so I would not
> encourage people to post its content. It should be enough to check that

That session was long gone at the moment you got to see it ;-)

Cheers
-- 
t


signature.asc
Description: PGP signature

Re: package managers problem

[Max Nikulin]

On 21/06/2023 01:15, gene heskett wrote:

gene@coyote:/usr/local/bin$ pkexec /usr/sbin/synaptic
Invalid MIT-MAGIC-COOKIE-1 keyUnable to init server: Could not connect: 
Connection refused

Failed to initialize GTK.

Probably you're running Synaptic on Wayland with root permission.
Please restart your session without Wayland, or run Synaptic without 
root permission


My guess is that

env | grep DISPLAY

does not contain WAYLAND_DISPLAY in your case, so the issue is 
completely unrelated to wayland. As I wrote in another message, the 
~/.Xauthority file is likely either not owned by your user or it is 
corrupted.

Re: package managers problem

[Max Nikulin]

On 21/06/2023 01:41, to...@tuxteam.de wrote:

X clients these days need that to talk to the X server. On my box,
for example:

 tomas@trotzki:~$ hexdump -C .Xauthority
   01 00 00 07 74 72 6f 74  7a 6b 69 00 01 30 00 12  
|trotzki..0..|
 0010  4d 49 54 2d 4d 41 47 49  43 2d 43 4f 4f 4b 49 
45|MIT-MAGIC-COOKIE|


The ~/.Xauthority file contains *secrets*, see Xsecurity(7), so I would 
not encourage people to post its content. It should be enough to check that


file ~/.Xauthority

reports "X11 Xauthority data" or to try "xauth info". Almost certainly

xhost

output contains "SI:localuser:gene", so most of applications are working 
without any issues. I would not be surprised if Gene has an immutable 
file owned by root or something similar left from attempt to fix some 
problem several years ago.


Gene, try

stat ~/.Xauthority
getfacl ~/.Xauthority
lsattr ~/.Xauthority

From the posted geany screenshot I suspect an issue with this file. 
Perhaps the easiest way is to remove it, logout and login again. An 
alternative is recreating and filling it using xauth(1).

Re: package managers problem

[Maurice Heskett]

On 6/21/23 09:33, Andy Smith wrote:

Hello,

On Wed, Jun 21, 2023 at 09:23:41AM -0400, Maurice Heskett wrote:

On 6/21/23 08:33, Andy Smith wrote:

I'm sure there are other advanced editors that can do the same.
Maybe geany can; I'm not familiar with it.

You are missing out on one of linux's better coding efforts Andy. I have yet
to have it make a mistake my fingers didn't make first.

There would have to be a very compelling feature or features in
geany over vim, to tempt me to switch.


The basic principle being to edit a file as
sftp://user@host:/path so as to do the read/write as that user,
not yourself. (host could be localhost).

That is a lot of typing, subject to typu's from ancient fat fingers, so I
usually cd to where the file lives and edit it directly. But everybody has
their own style, and that is mine.

There doesn't seem like a lot of difference in number of keystrokes
between:

$ cd /path/to/dir
$ sudo geany file.txt

and what I would do in vim which is:

:e /path/to/dir/file

(it will work out it needs to do sudo by itself)

You would only use the sftp:// thing for remote files or for editing
as a different non-root user. And it all tab-completes, by the way,
even remote paths, assuming you have read+search permissions.


Another point where we differ in method. My home network, all behind dd-wrt,

is sshfs based since I'm normally user 1000 on all machines, so the base is

/sshnet/machine_name and all live machines are home/me mounted there.

And it just works, unlike samba/cifs or nfs any flavor, both of which 
seem to be


like touchy women, only working one or maybe 2 days a week. I like 
dependability.



Gene Heskett



Cheers,
Andy

Re: package managers problem

[Reco]

Hi.

On Wed, Jun 21, 2023 at 12:57:41PM +0100, Joe wrote:
> On Tue, 20 Jun 2023 17:34:45 -0400
> gene heskett  wrote:
> 
> 
> >  My fav editor, geany is also
> > dead for roots use for exactly he same reason, but runs just fine as
> > me. So there is a common problem.
> 
> Well, you could do it the right way: edit as you with geany in a work
> directory, copy to/from the real location with a root-powered file
> manager, such as mc under sudo in a terminal. Alter owner/perms as
> required with mc.

Or just use visudo which does it all without user's intervention.

visudo, and this is a hint, *does* allow user to invoke both X- and
Wayland-based text editors, given the appropriate amount of configuration.

And this is the rightest (sp?) way there is, because allowing user to run
root-powered file manager is a deviation from the said way.

Reco

Re: package managers problem

[Andy Smith]

Hello,

On Wed, Jun 21, 2023 at 09:23:41AM -0400, Maurice Heskett wrote:
> On 6/21/23 08:33, Andy Smith wrote:
> > I'm sure there are other advanced editors that can do the same.
> > Maybe geany can; I'm not familiar with it.
> You are missing out on one of linux's better coding efforts Andy. I have yet
> to have it make a mistake my fingers didn't make first.

There would have to be a very compelling feature or features in
geany over vim, to tempt me to switch.

> > The basic principle being to edit a file as
> > sftp://user@host:/path so as to do the read/write as that user,
> > not yourself. (host could be localhost).
> 
> That is a lot of typing, subject to typu's from ancient fat fingers, so I
> usually cd to where the file lives and edit it directly. But everybody has
> their own style, and that is mine.

There doesn't seem like a lot of difference in number of keystrokes
between:

$ cd /path/to/dir
$ sudo geany file.txt

and what I would do in vim which is:

:e /path/to/dir/file

(it will work out it needs to do sudo by itself)

You would only use the sftp:// thing for remote files or for editing
as a different non-root user. And it all tab-completes, by the way,
even remote paths, assuming you have read+search permissions.

Cheers,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Re: package managers problem

[Maurice Heskett]

On 6/21/23 08:33, Andy Smith wrote:

Hello,

On Wed, Jun 21, 2023 at 12:57:41PM +0100, Joe wrote:

On Tue, 20 Jun 2023 17:34:45 -0400
gene heskett  wrote:

  My fav editor, geany is also
dead for roots use for exactly he same reason, but runs just fine as
me. So there is a common problem.

Well, you could do it the right way: edit as you with geany in a work
directory, copy to/from the real location with a root-powered file
manager, such as mc under sudo in a terminal. Alter owner/perms as
required with mc.

The idea that this is the "right" way kind of horrifies me. 😀

Not that I would attempt to suggest that Gene goes this way, but
feature rich editors like vim and emacs can easily write to files
through sudo or sftp, thus enabling seamless editing of files as
different users and even on different hosts.

I'm sure there are other advanced editors that can do the same.
Maybe geany can; I'm not familiar with it.
You are missing out on one of linux's better coding efforts Andy. I have 
yet to have it make a mistake my fingers didn't make first. It looks a 
lot like gedit, but I've spent literally days recovering from gedts 
penchant for scrambling a files contents, to the extent that one of the 
things I do after an install is remove gedit, increasing my productivity 
because I don't have to spend days re-inventing the gcode I'm working 
on. I make enough typu's as t is, and I sure don't need to run my code 
thru a mix-master.

The basic principle being
to edit a file as sftp://user@host:/path so as to do the read/write
as that user, not yourself. (host could be localhost).


That is a lot of typing, subject to typu's from ancient fat fingers, so 
I usually cd to where the file lives and edit it directly. But everybody 
has their own style, and that is mine.


Gene Heskett



To me, that is closer to the "right" way to do this sort of thing.
It's really worth spending the time to learn how to do this sort of
thing in one of the advanced editors.

For a quick workaround though, and for Gene's case, sure.

Cheers,
Andy

Re: package managers problem

[Maurice Heskett]

On 6/21/23 07:58, Joe wrote:

On Tue, 20 Jun 2023 17:34:45 -0400
gene heskett  wrote:



  My fav editor, geany is also
dead for roots use for exactly he same reason, but runs just fine as
me. So there is a common problem.

Well, you could do it the right way: edit as you with geany in a work
directory, copy to/from the real location with a root-powered file
manager, such as mc under sudo in a terminal. Alter owner/perms as
required with mc.

That way still allows mistakes to be made, but you made a renamed copy
of the edited file before you started, didn't you? Using a non-gui
graphical application such as mc can also help with discipline: doing
something in mc? Then be damn careful, because you're probably root. I
hardly ever use mc unprivileged, I have GUI file managers for non-root
work.


yeah, but I've been using mc for a file manager since my original 
install from floppies of redhat 5.0 in the late '90's. I am well aware 
of what it CAN do. There is no gui file manager that can touch it for 
utility, and it pisses me off that F10 has been stolen by the window 
managers to bring up a useless menu, making me find the mouse to quit it 
when I'm done. If I'm done with that copy, my normal bootup config of 
this machine has at least 2 copies of it running, dedicated to moving 
cura's output to the 3d printer, and OpenSCAD's output to cura. 3d 
printers are storage hogs and I have a good sized hunk of 2 terabytes of 
gcodes that originated as OpenSCAD .stl's or 3mf's. I KNOW what mc can 
do, do you?


BTW the only reason that example shown as loading an OpenSCAD file was 
because I wanted hard copy on dead tree and the regular OpenSCAD editor 
can't print. Geany makes a handy interface to feed cups.


Gene Heskett

Re: package managers problem

[Andy Smith]

Hello,

On Wed, Jun 21, 2023 at 12:57:41PM +0100, Joe wrote:
> On Tue, 20 Jun 2023 17:34:45 -0400
> gene heskett  wrote:
> >  My fav editor, geany is also
> > dead for roots use for exactly he same reason, but runs just fine as
> > me. So there is a common problem.
> 
> Well, you could do it the right way: edit as you with geany in a work
> directory, copy to/from the real location with a root-powered file
> manager, such as mc under sudo in a terminal. Alter owner/perms as
> required with mc.

The idea that this is the "right" way kind of horrifies me. 😀

Not that I would attempt to suggest that Gene goes this way, but
feature rich editors like vim and emacs can easily write to files
through sudo or sftp, thus enabling seamless editing of files as
different users and even on different hosts.

I'm sure there are other advanced editors that can do the same.
Maybe geany can; I'm not familiar with it. The basic principle being
to edit a file as sftp://user@host:/path so as to do the read/write
as that user, not yourself. (host could be localhost).

To me, that is closer to the "right" way to do this sort of thing.
It's really worth spending the time to learn how to do this sort of
thing in one of the advanced editors.

For a quick workaround though, and for Gene's case, sure.

Cheers,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Re: package managers problem

[Maurice Heskett]

On 6/21/23 03:01, Jeffrey Walton wrote:

On Wed, Jun 21, 2023 at 2:24 AM Maurice Heskett  wrote:

On 6/20/23 22:17, pa...@quillandmouse.com wrote:

On Tue, 20 Jun 2023 17:03:24 -0400
Greg Wooledge  wrote:
[...]

In a sensible design, the GUI part would run as you, and it would send
requests to a daemon that runs as root, or simply issue shell commands
with "sudo" or something, to do the parts that need extra privs.


I infer that Synaptic, by requiring root privileges to be truly useful,
is mis-designed, since there isn't a daemon executing root level
commands in the background.

I'll not argue with that.

But for the lists benefit, my last msg indicated I was going to logout
and back in. Which I tried to do, but with a root pw set, or something
else, IDK and don't at this point care because the only damned way I can
login is as root!

So since I was root, and the screen looked normal for a different
account, I tested synaptic and it ran as root just fine, so I took
advantage of it, found the tasks section and installed all of gnome and
all of kde, to the extent that the task pulled in several hundred
packages each time for each interface.

And it didn't make a fat rats ass of difference  EXCEPT if I su me, then
cd /home/gene, nothing with a gui can be run as me, display 0:0 is
locked away from me, in essence reversing the can't open display errors
I was getting as me for sudo-ing to do gui and root requiring tasks.

Explain that.

I can change my (gene's) pw to anything and back successfully, but its
no damned good at the login requester. I'm sorry if I sound exasperated
but that is exactly where I am.  Luckily I remembered the pw at my isp
or I would not be sending this. I gave up and went to bed about 22:00
but was so frustrated I couldn't sleep. So I'm back up wih 4x4's under
my eyelids but I'm alive.

Who are you? I thought a person named Gene was having trouble. Why are
you logging in as gene? Are you gene?


Yes, and I can su to me from this root login, successfully update my pw, 
but when I try to login in as gene, I do not get a bad pw error, the 
requester goes away for about a second, then comes back as a blank 
requestor again. The only change in my raid10 during this time was a 
relink of the digiKam AppImage to regression test it, it ran fine, and 
can see the thumbnails from the mounted camera, but attempts to download 
fresh images I can see, silently fails. I haven't tried as root because 
the local picture archive is on that raid10, owned by me so I've been 
careful not to cause a write to the raid except for editing the symlink 
to ~/AppImages/digiKam.


I have a gent on the Sheldon list at groups.io who would like to see how 
I solved a broke into pieces compound on my bigger lathe, linuxcnc can 
do all that and then some w/o a compound, so mine is now a block of a 
cast iron, machined to be the same height as the broken compound with a 
quick change tool holder on top of it. Because the net-installer does 
not identify the drives its going to format, and formating the raid 
cannot be permitted, all that stuff has to be removed and a reinstall 
done to only the sata_1 drive, it takes me a couple hours on my hands 
and knees to dismantle all that to protect it from the installs appetite 
to format everything in sight.  Then about 2 hours to put it all back 
together when the install has been finished.  At 88 yo, with about a 4 
inch offset in my back from scoliosis  plus a couple crushed discs with 
the accompanying siatic pain, that is not a pleasant task.


But since I'm stuck in root, and my history with that net-installer is 
spotty at best, please give me a link to the bookworm net-install image, 
which I'll then dl and put on a fresh dvd, maybe it will work better 
than the 11.2 version I've been using. One of the things it still does 
is install orca and brltty w/o asking even if that option is skipped in 
the menu.


So, a direct link to the bookworm net-install please.  And thank you.

Gene Heskett


Jeff
.

Re: package managers problem

[Joe]

On Tue, 20 Jun 2023 17:34:45 -0400
gene heskett  wrote:


>  My fav editor, geany is also
> dead for roots use for exactly he same reason, but runs just fine as
> me. So there is a common problem.

Well, you could do it the right way: edit as you with geany in a work
directory, copy to/from the real location with a root-powered file
manager, such as mc under sudo in a terminal. Alter owner/perms as
required with mc.

That way still allows mistakes to be made, but you made a renamed copy
of the edited file before you started, didn't you? Using a non-gui
graphical application such as mc can also help with discipline: doing
something in mc? Then be damn careful, because you're probably root. I
hardly ever use mc unprivileged, I have GUI file managers for non-root
work.

-- 
Joe

Re: package managers problem

[Felix Miata]

Jeffrey Walton composed on 2023-06-21 03:00 (UTC-0400):

> Maurice Heskett wrote:
...
>> the only damned way I can
>> login is as root!
...
> Who are you? I thought a person named Gene was having trouble. Why are
> you logging in as gene?

Because Gene can't access his normal TB profile, because he can't login as gene?

> Are you gene?

Maurice is probably his given name, used to subscribe to his ISP. The email
address matches, and his quoting and writing styles.
-- 
Evolution as taught in public schools is, like religion,
based on faith, not based on science.

 Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!

Felix Miata

Re: package managers problem

[Nicolas George]

to...@tuxteam.de (12023-06-21):
>   In my view, the user should have the last say. For
> me, that is non-negociable :-)

Plonk is not restricting anybody's freedom to have the last say. And
plonk is clearly the only sane way of dealing with threads like this and
the people who feed them.

The freedom of speech is not the right to be listened to.

Regards,

-- 
  Nicolas George

Re: package managers problem

[Jeffrey Walton]

On Wed, Jun 21, 2023 at 2:24 AM Maurice Heskett  wrote:
> On 6/20/23 22:17, pa...@quillandmouse.com wrote:
> > On Tue, 20 Jun 2023 17:03:24 -0400
> > Greg Wooledge  wrote:
> > [...]
> >> In a sensible design, the GUI part would run as you, and it would send
> >> requests to a daemon that runs as root, or simply issue shell commands
> >> with "sudo" or something, to do the parts that need extra privs.
> >>
> > I infer that Synaptic, by requiring root privileges to be truly useful,
> > is mis-designed, since there isn't a daemon executing root level
> > commands in the background.
>
> I'll not argue with that.
>
> But for the lists benefit, my last msg indicated I was going to logout
> and back in. Which I tried to do, but with a root pw set, or something
> else, IDK and don't at this point care because the only damned way I can
> login is as root!
>
> So since I was root, and the screen looked normal for a different
> account, I tested synaptic and it ran as root just fine, so I took
> advantage of it, found the tasks section and installed all of gnome and
> all of kde, to the extent that the task pulled in several hundred
> packages each time for each interface.
>
> And it didn't make a fat rats ass of difference  EXCEPT if I su me, then
> cd /home/gene, nothing with a gui can be run as me, display 0:0 is
> locked away from me, in essence reversing the can't open display errors
> I was getting as me for sudo-ing to do gui and root requiring tasks.
>
> Explain that.
>
> I can change my (gene's) pw to anything and back successfully, but its
> no damned good at the login requester. I'm sorry if I sound exasperated
> but that is exactly where I am.  Luckily I remembered the pw at my isp
> or I would not be sending this. I gave up and went to bed about 22:00
> but was so frustrated I couldn't sleep. So I'm back up wih 4x4's under
> my eyelids but I'm alive.

Who are you? I thought a person named Gene was having trouble. Why are
you logging in as gene? Are you gene?

Jeff

Re: package managers problem

[Andy Smith]

On Wed, Jun 21, 2023 at 02:23:31AM -0400, Maurice Heskett wrote:
> my last msg indicated I was going to logout and back in. Which I
> tried to do, but with a root pw set, or something else, IDK and
> don't at this point care because the only damned way I can login
> is as root!

My guess will be that while you were messing about with copying
around .Xauthority files earlier you bust your user's home directory
in some way that prevents a desktop environment from running, and
you did not notice until you came to log out and back in again.

I doubt we will ever get to the bottom of it.

I continue to wonder how far away we are from seeing this bug report
for synaptic.

> And it didn't make a fat rats ass of difference  EXCEPT if I su me, then cd
> /home/gene, nothing with a gui can be run as me, display 0:0 is locked away
> from me, in essence reversing the can't open display errors I was getting as
> me for sudo-ing to do gui and root requiring tasks.
> 
> Explain that.

It's already been explained to you that different users have
challenges connecting to the display server of the user that is
logged in. That applies just as much whether that is a root process
(e.g. sudo someapp) trying to connect to the display of gene, or a
gene process trying to connect to the display of root.

Logging in to a desktop session as root didn't really get you
anywhere except as a matter of curiosity. It's not a mode you should
be running in, even if you did start reconfiguring all the apps to
work how you want under that user.

> So the next thing I'd like to try is getting rid of wayland and installing
> X11, but the packege managers want to strip the machine totally just to
> install the first X11 component. Stripped so badly I suspect I would even
> have a font left for the test login.  So where  do I do from here?

The bug report was my best idea since every bit of fiddling that
people are getting you to do seems to risk you doing something
unexpected and breaking your machine worse.

I guess you could try creating a new unprivileged user and seeing if
they can log in to a desktop session, just to prove the theory that
something is now messed up with user "gene"'s dotfiles or similar.
Or perhaps there is something in the system log about why gene can
authenticate at a console login and su, but not the display manager
login.

It just seems so futile though, since every step taken seems to make
your situation worse.

I highly doubt that Wayland has anything to do with any of the
problems you describe in this thread.

Thanks,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Re: package managers problem

[Maurice Heskett]

On 6/21/23 01:12, Jeffrey Walton wrote:

On Tue, Jun 20, 2023 at 10:17 PM  wrote:

On Tue, 20 Jun 2023 17:03:24 -0400
Greg Wooledge  wrote:
[...]

In a sensible design, the GUI part would run as you, and it would send
requests to a daemon that runs as root, or simply issue shell commands
with "sudo" or something, to do the parts that need extra privs.

I infer that Synaptic, by requiring root privileges to be truly useful,
is mis-designed, since there isn't a daemon executing root level
commands in the background.

I think the design could be improved since it is not following the
Principle of Least Privilege. An out-of-process privileged component
would probably be a better design choice.

I think it could also be done with a shared object injection
[attack?]. It is a mitigation that operates a little lower in the
stack. API calls that required privileges could be intercepted, and
marshalled to a process to perform the privileged operations. It has
the benefit that it does not require modifying the application.

Microsoft does a lot of interception under the name Hotpatching.
Microsoft even provides the Detours library to let userland programs
do it themselves. Ubuntu does it under the name Livepatch. In the
Microsoft case, API entry points have a dummy jump that can be
overwritten. If a new DLL or shared object is released, then the
library is loaded into the app's address space, and the jump happens
to the new code.

And as Anssi points out, the program could be modified to use Policy
Kit or whatever the du jour is for this iteration of the distro
release.

Jeff


I'm running as root because that is the only login that works now.

policykit, I just checked after installing around 4gigs of stuff with

synaptic as root, under wayland, runs just fine. There is about 10

pieces of policykit stuff installed now.  where is the config stuff?

I don't like t-bird running as root anymore than you do, but ATM its

all I have. If I su gene, I can't do anything, can't open display 0:0

as me. So I'll shut down and get some zz's.



.

Re: package managers problem

[Maurice Heskett]

On 6/20/23 22:17, pa...@quillandmouse.com wrote:

On Tue, 20 Jun 2023 17:03:24 -0400
Greg Wooledge  wrote:


On Tue, Jun 20, 2023 at 04:56:39PM -0400, pa...@quillandmouse.com
wrote:

Apparently the broader dictum is "never run GUI apps as root". Why?
What's special about GUI apps versus those you run in a terminal?

The extreme example is a web browser.  Your typical web browser
probably has thousands of bugs in it.

GUI apps are big and complicated.  Running them with elevated
privileges is just asking for problems.


So this isn't anything specific, but a general concern for what GUI
apps may be doing behind your back, because they are so complex.


In a sensible design, the GUI part would run as you, and it would send
requests to a daemon that runs as root, or simply issue shell commands
with "sudo" or something, to do the parts that need extra privs.


I infer that Synaptic, by requiring root privileges to be truly useful,
is mis-designed, since there isn't a daemon executing root level
commands in the background.

Paul


I'll not argue with that.

But for the lists benefit, my last msg indicated I was going to logout 
and back in. Which I tried to do, but with a root pw set, or something 
else, IDK and don't at this point care because the only damned way I can 
login is as root!


So since I was root, and the screen looked normal for a different 
account, I tested synaptic and it ran as root just fine, so I took 
advantage of it, found the tasks section and installed all of gnome and 
all of kde, to the extent that the task pulled in several hundred 
packages each time for each interface.


And it didn't make a fat rats ass of difference  EXCEPT if I su me, then 
cd /home/gene, nothing with a gui can be run as me, display 0:0 is 
locked away from me, in essence reversing the can't open display errors 
I was getting as me for sudo-ing to do gui and root requiring tasks.


Explain that.

I can change my (gene's) pw to anything and back successfully, but its 
no damned good at the login requester. I'm sorry if I sound exasperated 
but that is exactly where I am.  Luckily I remembered the pw at my isp 
or I would not be sending this. I gave up and went to bed about 22:00 
but was so frustrated I couldn't sleep. So I'm back up wih 4x4's under 
my eyelids but I'm alive.


So the next thing I'd like to try is getting rid of wayland and 
installing X11, but the packege managers want to strip the machine 
totally just to install the first X11 component. Stripped so badly I 
suspect I would even have a font left for the test login.  So where  do 
I do from here?


No cheers now, Gene

Re: package managers problem

[Jeffrey Walton]

On Tue, Jun 20, 2023 at 10:17 PM  wrote:
>
> On Tue, 20 Jun 2023 17:03:24 -0400
> Greg Wooledge  wrote:
> [...]
> > In a sensible design, the GUI part would run as you, and it would send
> > requests to a daemon that runs as root, or simply issue shell commands
> > with "sudo" or something, to do the parts that need extra privs.
>
> I infer that Synaptic, by requiring root privileges to be truly useful,
> is mis-designed, since there isn't a daemon executing root level
> commands in the background.

I think the design could be improved since it is not following the
Principle of Least Privilege. An out-of-process privileged component
would probably be a better design choice.

I think it could also be done with a shared object injection
[attack?]. It is a mitigation that operates a little lower in the
stack. API calls that required privileges could be intercepted, and
marshalled to a process to perform the privileged operations. It has
the benefit that it does not require modifying the application.

Microsoft does a lot of interception under the name Hotpatching.
Microsoft even provides the Detours library to let userland programs
do it themselves. Ubuntu does it under the name Livepatch. In the
Microsoft case, API entry points have a dummy jump that can be
overwritten. If a new DLL or shared object is released, then the
library is loaded into the app's address space, and the jump happens
to the new code.

And as Anssi points out, the program could be modified to use Policy
Kit or whatever the du jour is for this iteration of the distro
release.

Jeff

Re: package managers problem

[tomas]

On Tue, Jun 20, 2023 at 05:19:48PM -0400, gene heskett wrote:

[...]

> geany it seems might have a problem.
> But it wasn't installed so I just used packagekit to install all of it as I
> use it heavily writing g-codes, so lets try it live and in person:
> 
> root@coyote:~# geany .Xauthority
> Invalid MIT-MAGIC-COOKIE-1 keyUnable to init server: Could not connect:
> Connection refused
> Geany: cannot open display
> 
> But it runs just fine as me, but cannot open my own .Xauthority,unknown file
> format error: No mention of permissions. error window won't copy/paste. Very
> small snapshot attached. It did go into its history and opened an OpenSCAD
> file it had last worked on before the reinstall which I closed, also shown
> in the snapshot if it clears the server.

I am confused.

In the first paragraph above, geany can't start because, as it says, it
can't connect to the server ("Unable to init server" is one of those
really silly error messages, but I disgress).

In the second, geany seems to be running, but refuses to open .Xauthority,
because it doesn't know what format it is. Well, that's right. It is a
binary blob and supposed to be that. Only grown-up editors can cope with
that (vim and Emacs will), but even then, you gotta know what you're doing.

Cheers
-- 
t


signature.asc
Description: PGP signature

Re: package managers problem

[tomas]

On Tue, Jun 20, 2023 at 09:40:22PM -0400, pa...@quillandmouse.com wrote:
> On Tue, 20 Jun 2023 18:12:56 -0400
> Greg Wooledge  wrote:
> 
> [snip]
> 
> > 1) Have a root password.  SET A FUCKING ROOT PASSWORD.  Seriously.
> 
> Do that, and there are those who will harangue you for it. Sadly,
> people who argue either way know more than I do about these security
> matters. And because expert opinions vary, I don't take either one
> seriously.

They aren't that different. There was a time I thought to need a root
PW for the cases where the system gets stuck in the initramfs (e.g.
it can't mount the root file system due to corruption).

Since then, I've learnt that

- having an install medium around is way more comfortable than the
  initramfs environment anyway
- the thing happens every 2.5 years, take or give; for when it
  happens again, I've forgotten the darned root password (no,
  it's not written on the laptop's bottom ;-)

Since then, I stopped setting a root PW. Not worth the effort, for
my usage patterns. I don't think I'm significantly more secure for
that.

Cheers
-- 
t


signature.asc
Description: PGP signature

Re: package managers problem

[tomas]

On Tue, Jun 20, 2023 at 07:49:07PM -0400, Greg Wooledge wrote:
> On Tue, Jun 20, 2023 at 07:35:00PM -0400, gene heskett wrote:
> > with a slight difference.  So now I have an unk pw set for root, and will
> > likely have to re-install, again if I reboot.
> 
> Nonsense.  You can set a new root password with "sudo passwd root" any
> time you wish, even without knowing the existing root password.

Or, should that fail, get your install media, boot in rescue mode, let
that mount your disks (it conveniently offers to do so), edit /etc/passwd
(your root file system is probably mounted under /target, so it will
be /target/etc/passwd). Not trivial, but not exceedingly hard either.

Cheers
-- 
t


signature.asc
Description: PGP signature

Re: package managers problem

[tomas]

On Tue, Jun 20, 2023 at 08:39:35PM +, Andy Smith wrote:
> Hello,
> 
> On Tue, Jun 20, 2023 at 10:57:30AM -0400, Sarunas Burdulis wrote:
> > On 6/20/23 10:51, gene heskett wrote:
> > > Easy:
> > > gene@coyote:~/Pictures$ sudo synaptic
> > > [sudo] password for gene:
> > > Invalid MIT-MAGIC-COOKIE-1 keyUnable to init server: Could not connect:
> > > Connection refused
> > > Failed to initialize GTK.
> > > [...]
> > 
> > So perhaps copy that cookie into /root/?:
> 
> Please do not encourage Gene's fetish of running GUI apps as root.

I clearly recommend against that. That said, we do free software
for a reason. In my view, the user should have the last say. For
me, that is non-negociable :-)

Cheers
-- 
t


signature.asc
Description: PGP signature

Re: package managers problem

[Anssi Saari]

 writes:

> I infer that Synaptic, by requiring root privileges to be truly useful,
> is mis-designed, since there isn't a daemon executing root level
> commands in the background.

Well, no. There is a common framework for this and it's called
PolicyKit.

Re: package managers problem

[paulf]

On Tue, 20 Jun 2023 17:03:24 -0400
Greg Wooledge  wrote:

> On Tue, Jun 20, 2023 at 04:56:39PM -0400, pa...@quillandmouse.com
> wrote:
> > Apparently the broader dictum is "never run GUI apps as root". Why?
> > What's special about GUI apps versus those you run in a terminal?
> 
> The extreme example is a web browser.  Your typical web browser
> probably has thousands of bugs in it.
> 
> GUI apps are big and complicated.  Running them with elevated
> privileges is just asking for problems.
> 

So this isn't anything specific, but a general concern for what GUI
apps may be doing behind your back, because they are so complex.

> In a sensible design, the GUI part would run as you, and it would send
> requests to a daemon that runs as root, or simply issue shell commands
> with "sudo" or something, to do the parts that need extra privs.
> 

I infer that Synaptic, by requiring root privileges to be truly useful,
is mis-designed, since there isn't a daemon executing root level
commands in the background.

Paul

-- 
Paul M. Foster
Personal Blog: http://noferblatz.com
Company Site: http://quillandmouse.com
Software Projects: https://gitlab.com/paulmfoster

Re: package managers problem

[paulf]

On Tue, 20 Jun 2023 18:12:56 -0400
Greg Wooledge  wrote:

[snip]

> 1) Have a root password.  SET A FUCKING ROOT PASSWORD.  Seriously.

Do that, and there are those who will harangue you for it. Sadly,
people who argue either way know more than I do about these security
matters. And because expert opinions vary, I don't take either one
seriously.

For the record, though, I always set a root password. Just in case it's
ever needed.

Paul

-- 
Paul M. Foster
Personal Blog: http://noferblatz.com
Company Site: http://quillandmouse.com
Software Projects: https://gitlab.com/paulmfoster

Re: package managers problem

[paulf]

On Tue, 20 Jun 2023 17:56:36 -0400
gene heskett  wrote:

> Like firefox, its big and complex, but unlike
> gedit has never trashed a file for me, gedit has ruined so many I
> finally banned it from my machines, all of them.

Vim for the win! (kidding)

Paul

-- 
Paul M. Foster
Personal Blog: http://noferblatz.com
Company Site: http://quillandmouse.com
Software Projects: https://gitlab.com/paulmfoster

Re: package managers problem

[Greg Wooledge]

On Tue, Jun 20, 2023 at 07:35:00PM -0400, gene heskett wrote:
> with a slight difference.  So now I have an unk pw set for root, and will
> likely have to re-install, again if I reboot.

Nonsense.  You can set a new root password with "sudo passwd root" any
time you wish, even without knowing the existing root password.

If you want to GET RID OF the root password entirely, just edit the
/etc/shadow file and mangle the password hash for root.  Traditionally,
one puts *LOCK* or some similar string containing asterisks in front of
the hash.  This turns it into an invalid hash, without destroying it,
so that you can "unlock" it by removing the added text, should you decide
to do that.

P.S. you can test your root password by using "su".  Totally 100% known
and predictable program, no surprises or learning curve as there is
with this pkexec thing.

Re: package managers problem

[gene heskett]

On 6/20/23 18:13, Greg Wooledge wrote:

On Tue, Jun 20, 2023 at 06:01:00PM -0400, gene heskett wrote:

Alright then the question is, is policykit the solution, or do we
install it, then spend two weeks and wreck 7 installs configuring
it to work? In other words, get to the specifics or find a new horse.


I don't use synaptic, or xfce, or policykit.  But just from reading
this thread, it looks like:

1) Have a root password.  SET A FUCKING ROOT PASSWORD.  Seriously.
It won't stop you from using sudo.  It WILL allow you to use pkexec
and single user mode (for example).  You can always nuke the root
password later if having a working system offends you.

Ok, I did that but t took quite a few passes to make it take, kept 
claiming missmatched error.



2) Log in as you.  Start your X session, if that's not already done.

3) Undo whatever crazy shit you've done in the past trying to work
around stuff.  This includes removing the MIT-MAGIC-COOKIE that
you copied into root's $HOME directory the other day.

4) Open a terminal.


Existing login, new terminal

5) Run "pkexec /usr/sbin/synaptic".


Passwd requestor does NOT specify which passwd, so I try the new root 
pw, 3 times, 100% fail with: authentification error under the text line 
aftere the requestor jiggle rapidly then redraws with the auth error 
under the text box. No errors logged to the new terminal so I repeat, 
using my sudo passwd, which logs to the terminal the same old bitch:

gene@coyote:~$ pkexec /usr/sbin/synaptic
Error executing command as another user: Not authorized
with a slight difference.  So now I have an unk pw set for root, and 
will likely have to re-install, again if I reboot.


Do I have to log out and back in? I'm sorry but that is about a 15 
minute undertaking as I have to rebuild the whole damned local network 
since its running as me. That is about 14 times just typing my pw in 
addition to several session of sourceing my .profile o correct my $PATH 
so it all works in a dozen workspaces.  However my sudo still works so 
I'll do it. But first some din-din. Road stew probably since I'm alone 
now for over 2 years.



6) If there's a popup, READ what it says.  Do what it says.  If it's
asking for the root password, provide the ROOT password, not your
own.  If it's asking for your own, provide your own, and not the
root password.

7) If there's text in the terminal window, READ what it says.  Do what
it says.

8) If you're still stuck, report back here with all the relevant details.
This includes, but is not necessarily limited to, the text that
appeared in the popup, and the text that appeared in the terminal
window.  Anything else that strikes you as unusual or important,
report that too.

The goal is to figure out what's different about YOUR setup compared to
the setups of the people for whom it "worked out of the box".  This may
be something you're doing now, or something you changed in the past and
have forgotten you've done.  That's what makes this difficult.

I do not know anything about pkexec or synaptic myself, so this is just a
synthesis of the stuff others have said.  Take all of this with approriate
caveats.

.


Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: package managers problem

[Stefan Monnier]

> I understand not running, say, VLC as root. But Synaptic? It allows you
> to search, install and remove packages. Two of those things can't be
> done without root permissions. I absolutely run it as root.
>
The problem is not what the App is expected to do, but the GUI code may
"accidentally" do beside what you expect.

Most GUI apps use GUI toolkits.  Those toolkits are designed to be
cute/fancy/sophisticated/extensible/customizable/..., all of which is
diametrically opposed to safe&secure.


Stefan

Re: package managers problem

[Stefan Monnier]

>> Probably you're running Synaptic on Wayland with root permission.
>> Please restart your session without Wayland, or run Synaptic without 
>> root permission
>
> Thank you. That's the error I saw

Correction: the above is not an error message.  It's a guess of the
likely cause of the error message emitted earlier.

> Synaptic run as a regular user is useless, except to search
> for things.

Not if you start it properly, so it can request admin credentials
when needed.


Stefan

Re: package managers problem

[Andy Smith]

Hello Gene,

On Tue, Jun 20, 2023 at 06:01:00PM -0400, gene heskett wrote:
> Alright then the question is, is policykit the solution, or do we
> install it, then spend two weeks and wreck 7 installs configuring
> it to work? In other words, get to the specifics or find a new horse.

I think it's already been demonstrated in this thread that the
desktop launcher for Synaptic calls policykit to start it, so if as
you claim you do a standard Debian install and then try to launch
Synaptic from the desktop (specifically NOT from a terminal window,
and not using sudo or otherwise) and find "nothing happens", then
that is a bug you should report to Debian.

As there have been others in this thread reporting that Synaptic
works fine for them though, I fully expect this to be down to some
way you've found to break your system, probably while fighting one of
your other bogeymen like IPv6 or resolvconf or something, where you
tend to get happy with "rm -f" and "chattr +i".

Then again, there do seem to be others having a similar problem so
maybe there really is an actual bug here. Do let us know the bug
number so we can follow along and find out.

All of that would have been a sensible way to go, without this
nonsense of trying to start GUI apps with sudo or directly as root,
and then blaming the Wayland that lives under your bed.

Thanks,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Re: package managers problem

[Andy Smith]

Hi Gene,

On Tue, Jun 20, 2023 at 05:44:10PM -0400, gene heskett wrote:
> > Please do not encourage Gene's fetish of running GUI apps as root.

[…]

> Andy, if you aren't behind dd-wrt for your home network, don't pretend to
> tell me what I can't do

I think your contributions to this list do a great job of telling
people what you can't do.

> Don't impress on me, your paranoid ideas about how I should run MY
> computers

By all means, go with God and become an example to others if nothing
else!

Thanks,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Re: package managers problem

[Greg Wooledge]

On Tue, Jun 20, 2023 at 06:01:00PM -0400, gene heskett wrote:
> Alright then the question is, is policykit the solution, or do we
> install it, then spend two weeks and wreck 7 installs configuring
> it to work? In other words, get to the specifics or find a new horse.

I don't use synaptic, or xfce, or policykit.  But just from reading
this thread, it looks like:

1) Have a root password.  SET A FUCKING ROOT PASSWORD.  Seriously.
   It won't stop you from using sudo.  It WILL allow you to use pkexec
   and single user mode (for example).  You can always nuke the root
   password later if having a working system offends you.

2) Log in as you.  Start your X session, if that's not already done.

3) Undo whatever crazy shit you've done in the past trying to work
   around stuff.  This includes removing the MIT-MAGIC-COOKIE that
   you copied into root's $HOME directory the other day.

4) Open a terminal.

5) Run "pkexec /usr/sbin/synaptic".

6) If there's a popup, READ what it says.  Do what it says.  If it's
   asking for the root password, provide the ROOT password, not your
   own.  If it's asking for your own, provide your own, and not the
   root password.

7) If there's text in the terminal window, READ what it says.  Do what
   it says.

8) If you're still stuck, report back here with all the relevant details.
   This includes, but is not necessarily limited to, the text that
   appeared in the popup, and the text that appeared in the terminal
   window.  Anything else that strikes you as unusual or important,
   report that too.

The goal is to figure out what's different about YOUR setup compared to
the setups of the people for whom it "worked out of the box".  This may
be something you're doing now, or something you changed in the past and
have forgotten you've done.  That's what makes this difficult.

I do not know anything about pkexec or synaptic myself, so this is just a
synthesis of the stuff others have said.  Take all of this with approriate
caveats.

Re: package managers problem

[gene heskett]

On 6/20/23 17:18, Andy Smith wrote:

Hello,

On Tue, Jun 20, 2023 at 04:56:39PM -0400, pa...@quillandmouse.com wrote:

On Tue, 20 Jun 2023 20:39:35 +
Andy Smith  wrote:

Please do not encourage Gene's fetish of running GUI apps as root.
Plenty of people have been wasting their time trying to tell him not
to do that for years now, and the last thing they need is bystanders
handing him a different bore of firearm to aim at his foot.


I understand not running, say, VLC as root. But Synaptic? It allows you


Even if you want to disregard the security implications of running
a GUI app as root, just because the alternative might be running a
similar TUI app fully as root — and I wouldn't necessarily agree
with that stance as GUI apps are inherently bigger and more
complicated — but sure, let's go along with that:

Even then, the fact remains that GUI apps needing a bit of admin
access is a decades old problem that has a really old solution, that
being policykit, a framework specifically designed for this that
Synaptic uses on all major desktop environments and is thus the
supported way to run Synaptic in GUI mode. root is a different user.
There are all manner of intricacies involved in getting a different
user to have permission and ability to meddle with the display
session of the person sat in front of the computer. This is the way
it's meant to be done.

So anyone persisting with this with sudo and trying to copy X
cookies around is just looking for pain.

Thanks,
Andy


Alright then the question is, is policykit the solution, or do we
install it, then spend two weeks and wreck 7 installs configuring
it to work? In other words, get to the specifics or find a new horse.

Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: package managers problem

[gene heskett]

On 6/20/23 17:03, Greg Wooledge wrote:

On Tue, Jun 20, 2023 at 04:56:39PM -0400, pa...@quillandmouse.com wrote:

Apparently the broader dictum is "never run GUI apps as root". Why?
What's special about GUI apps versus those you run in a terminal?


The extreme example is a web browser.  Your typical web browser probably
has thousands of bugs in it.

GUI apps are big and complicated.  Running them with elevated privileges
is just asking for problems.

In a sensible design, the GUI part would run as you, and it would send
requests to a daemon that runs as root, or simply issue shell commands
with "sudo" or something, to do the parts that need extra privs.

.
+10,000 Greg. Foisting this change on the users, without fixing the apps 
it effects, is only driving us users mad and crippling what our macines 
can do.  Synaptic is not the only app it blocks, geany is blocked too, 
not that I have ever, except for this test, attempted to run geany as 
root. Like firefox, its big and complex, but unlike gedit has never 
trashed a file for me, gedit has ruined so many I finally banned it from 
my machines, all of them.


Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: package managers problem

[gene heskett]

On 6/20/23 16:40, Andy Smith wrote:

Hello,

On Tue, Jun 20, 2023 at 10:57:30AM -0400, Sarunas Burdulis wrote:

On 6/20/23 10:51, gene heskett wrote:

Easy:
gene@coyote:~/Pictures$ sudo synaptic
[sudo] password for gene:
Invalid MIT-MAGIC-COOKIE-1 keyUnable to init server: Could not connect:
Connection refused
Failed to initialize GTK.
[...]


So perhaps copy that cookie into /root/?:


Please do not encourage Gene's fetish of running GUI apps as root.
Plenty of people have been wasting their time trying to tell him not
to do that for years now, and the last thing they need is bystanders
handing him a different bore of firearm to aim at his foot.

Cheers,
Andy

Andy, if you aren't behind dd-wrt for your home network, don't pretend 
to tell me what I can't do, because I am behind dd-wrt and totally 
responsible for what I do on this side of it. Don't impress on me, your 
paranoid ideas about how I should run MY computers


Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: package managers problem

[gene heskett]

On 6/20/23 16:01, Charles Curley wrote:

On Tue, 20 Jun 2023 13:37:01 -0400
gene heskett  wrote:



Gene, this is a long shot. Do you have any KDE or qt components
installed?
   

in packagekit:
kde search = desktop-base, girl.2-webkit2, libblockdev2,
libblockdev-crypto2, libblockdev-fs2, libblockdev-loop2,
libblockdev-part2, libblockdec-oart-err2, libblockdev-swap2,
libblockdev-utils2, libwebkit2gtk-4, networkmanager-gnome-1.2,
ruby-debian-0.3, shared-mime-info-2, sound-theme-freedesktop,
xfwm4-4, xiccd-0.3

qt search = dbus, libcwidget4, libdbus, printer-driver-cups-pdf


Hmmm. I run XFCE4 here, with a large chunk of KDE installed in order to
use some KDE/qt applications. I am not familiar with packagekit, so I'm
not familiar with its output. I conjecture from this output that you
don't have anywhere near as much of KDE/qt installed as I do.

My long-shot hypothesis is that synaptic, in spite of being a GTK+
application, uses KDE/qt (or something those pulled in) to access the
display.

Maybe someone who knows a lot more about X, Wayland, and how all this
plays together than I do can comment?

That's exactly what I'm hoping will happen here, someone in the know who 
can name what I need to install. My fav editor, geany is also dead for 
roots use for exactly he same reason, but runs just fine as me. So there 
is a common problem.


Thanks Charles.

Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: package managers problem

[Felix Miata]

gene heskett composed on 2023-06-20 16:08 (UTC-0400):

> Felix Miata wrote:

>> gene heskett composed on 2023-06-20 10:51 (UTC-0400):

 Independently of whether you are able to do that without corrupting 
 something,
 please provide here GUI terminal input/output from 'inxi -GSaz',

The immediate goal here is to run inxi -GSaz, not Synaptic.

>> ...
>>> This is still bullseye, a netinstall from a week ago and I have
>>> no inxi according to locate according to updatedb.
>> Super! Install, as root, the excellent /current/ inxi script instead:

>>  cd /usr/local/bin && wget -O inxi smxi.org/inxi && chmod +x inxi
> had to break this up and use sudo: should have become root first

The instruction was "as root", not using sudo. However you can figure out to 
make
/usr/local/bin/inxi executable so that you can run it either as user or as root.

> gene@coyote:/usr/local/bin$ sudo wget -O inxi smxi.org/inxi && chmod +x inxi
> --2023-06-20 13:44:17--  http://smxi.org/inxi
> Resolving smxi.org (smxi.org)... 216.92.30.83
> Connecting to smxi.org (smxi.org)|216.92.30.83|:80... connected.
> HTTP request sent, awaiting response... 301 Moved Permanently
> Location: https://smxi.org/inxi [following]
> --2023-06-20 13:44:17--  https://smxi.org/inxi
> Connecting to smxi.org (smxi.org)|216.92.30.83|:443... connected.
> HTTP request sent, awaiting response... 302 Found
> Location: https://github.com/smxi/inxi/raw/master/inxi [following]
> --2023-06-20 13:44:17--  https://github.com/smxi/inxi/raw/master/inxi
> Resolving github.com (github.com)... 140.82.112.3
> Connecting to github.com (github.com)|140.82.112.3|:443... connected.
> HTTP request sent, awaiting response... 302 Found
> Location: https://raw.githubusercontent.com/smxi/inxi/master/inxi 
> [following]
> --2023-06-20 13:44:18-- 
> https://raw.githubusercontent.com/smxi/inxi/master/inxi
> Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 
> 185.199.111.133, 185.199.108.133, 185.199.110.133, ...
> Connecting to raw.githubusercontent.com 
> (raw.githubusercontent.com)|185.199.111.133|:443... connected.
> HTTP request sent, awaiting response... 200 OK
> Length: 1200264 (1.1M) [text/plain]
> Saving to: ‘inxi’
> 
> inxi 
> 100%[=>]
>  
>1.14M  3.62MB/sin 0.3s
> 
> 2023-06-20 13:44:18 (3.62 MB/s) - ‘inxi’ saved [1200264/1200264]
> 
> chmod: changing permissions of 'inxi': Operation not permitted
> so:
> sudo chmod +x inxi:
> 
> Then I can run it as me, but not with sudo:
> gene@coyote:/usr/local/bin$ synaptic

Run it what?

How did synaptic get in front of the inxi input/output I asked for?

Inxi is a troubleshooting tool having nothing directly to do with Xorg, Wayland 
or
Synaptic.

https://paste.opensuse.org/pastes/c13485fcb27c shows you three basic things:

1-what inxi output should look like (on a PC using 4 displays)

2-Synaptic running in XFCE on Mint 21.1 (based on *buntu, based on Debian)
(started from the XFCE menu system, not from any terminal) (as root, which as 
most
of us know doesn't exist by default on Mint or *buntu)

3-inxi didn't find any "wayland" to report

These are installed on the Mint that made the screenshot, made on Mint because
that's the only place I ever have XFCE installed. My Debians *all* run TDE:
# dpkg-query -W | egrep 'xorg|synaptic|wayland|apt'
add-apt-key 1.0-0.5
apt 2.4.8
apt-clone   0.4.3+nmu1
apt-utils   2.4.8
aptdaemon   1.1.1+bzr982-0ubuntu39mint1
aptdaemon-data  1.1.1+bzr982-0ubuntu39mint1
aptitude0.8.13-3ubuntu1
aptitude-common 0.8.13-3ubuntu1
apturl  0.5.2+linuxmint13
apturl-common   0.5.2+linuxmint13
laptop-detect   0.16
libapt-pkg-perl 0.1.40build2
libapt-pkg6.0:amd64 2.4.8
libatk-adaptor:amd642.38.0-3
libraptor2-0:amd64  2.0.15-0ubuntu4
libva-wayland2:amd642.14.0-1
libwayland-client0:amd641.20.0-1ubuntu0.1
libwayland-cursor0:amd641.20.0-1ubuntu0.1
libwayland-egl1:amd64   1.20.0-1ubuntu0.1
libwayland-egl1-mesa:amd64  22.0.5-0ubuntu0.3
libwayland-server0:amd641.20.0-1ubuntu0.1
python-apt-common   2.3.0ubuntu2.1
python3-apt 2.3.0ubuntu2.1
python3-aptdaemon   1.1.1+bzr982-0ubuntu39mint1
python3-aptdaemon.gtk3widgets   1.1.1+bzr982-0ubuntu39mint1
synaptic0.90.2+mint3+vanessa
xorg1:7.7+23ubuntu2
xorg-docs-core  1:1.7.1-1.2
xserver-xorg1:7.7+23ubuntu2
xserver-xorg-core   2:21.1.3-2ubuntu2.5
xserver-xorg-input-all  1:7.7+23ubuntu2
xserver-xorg-input-libinput 1.2.1-1
xserver-xorg-legacy 2:21.1.3-2ubuntu2.5
xserver-xorg-video-amdgpu   22.0.0-1ubuntu0.1
xserver-xorg-video-ati  1:19.1.0-2ubuntu1
xserver-xorg-video-fbdev1:0.5.0-2build1
xserver-xorg-video-radeon   1:19.1.0-2ubuntu1
xserver-xorg-video-vesa 1:2.5.0-1build4
#

You've shown the thread "Probably you're running Synaptic on Wayland with root
permission." more than enough times already. That message is obviously some kind
of gen

Re: package managers problem

[gene heskett]

On 6/20/23 14:35, pa...@quillandmouse.com wrote:

On Tue, 20 Jun 2023 14:15:19 -0400
gene heskett  wrote:

[snip]


gene@coyote:/usr/local/bin$ pkexec /usr/sbin/synaptic
Invalid MIT-MAGIC-COOKIE-1 keyUnable to init server: Could not
connect: Connection refused
Failed to initialize GTK.

Probably you're running Synaptic on Wayland with root permission.
Please restart your session without Wayland, or run Synaptic without
root permission

which might work if it wasn't for the invalid magic cookie, so how do
I get an accceptable version of that?



No one's really broken down that initial error message. I think it's
some sort of red herring. I don't think it's actually a "magic cookie"
thing. I suspect something else is going on. For example, it also says
it can't initialize GTK. Why? Does Synaptic rely on GTK libraries which
aren't present? I don't know the answer; I'm just asking questions. And
what server is it unable to "init"? Can you run other GUI apps with
sudo?


geany it seems might have a problem.
But it wasn't installed so I just used packagekit to install all of it 
as I use it heavily writing g-codes, so lets try it live and in person:


root@coyote:~# geany .Xauthority
Invalid MIT-MAGIC-COOKIE-1 keyUnable to init server: Could not connect: 
Connection refused

Geany: cannot open display

But it runs just fine as me, but cannot open my own .Xauthority,unknown 
file format error: No mention of permissions. error window won't 
copy/paste. Very small snapshot attached. It did go into its history and 
opened an OpenSCAD file it had last worked on before the reinstall which 
I closed, also shown in the snapshot if it clears the server.





Unfortunately, I on Xorg, so I can test what you're talking about.

Paul



Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: package managers problem

[Andy Smith]

Hello,

On Tue, Jun 20, 2023 at 04:56:39PM -0400, pa...@quillandmouse.com wrote:
> On Tue, 20 Jun 2023 20:39:35 +
> Andy Smith  wrote:
> > Please do not encourage Gene's fetish of running GUI apps as root.
> > Plenty of people have been wasting their time trying to tell him not
> > to do that for years now, and the last thing they need is bystanders
> > handing him a different bore of firearm to aim at his foot.
> 
> I understand not running, say, VLC as root. But Synaptic? It allows you

Even if you want to disregard the security implications of running
a GUI app as root, just because the alternative might be running a
similar TUI app fully as root — and I wouldn't necessarily agree
with that stance as GUI apps are inherently bigger and more
complicated — but sure, let's go along with that:

Even then, the fact remains that GUI apps needing a bit of admin
access is a decades old problem that has a really old solution, that
being policykit, a framework specifically designed for this that
Synaptic uses on all major desktop environments and is thus the
supported way to run Synaptic in GUI mode. root is a different user.
There are all manner of intricacies involved in getting a different
user to have permission and ability to meddle with the display
session of the person sat in front of the computer. This is the way
it's meant to be done.

So anyone persisting with this with sudo and trying to copy X
cookies around is just looking for pain.

Thanks,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Re: package managers problem

[Greg Wooledge]

On Tue, Jun 20, 2023 at 04:56:39PM -0400, pa...@quillandmouse.com wrote:
> Apparently the broader dictum is "never run GUI apps as root". Why?
> What's special about GUI apps versus those you run in a terminal?

The extreme example is a web browser.  Your typical web browser probably
has thousands of bugs in it.

GUI apps are big and complicated.  Running them with elevated privileges
is just asking for problems.

In a sensible design, the GUI part would run as you, and it would send
requests to a daemon that runs as root, or simply issue shell commands
with "sudo" or something, to do the parts that need extra privs.

Re: package managers problem

[paulf]

On Tue, 20 Jun 2023 20:39:35 +
Andy Smith  wrote:

[snip]

> 
> Please do not encourage Gene's fetish of running GUI apps as root.
> Plenty of people have been wasting their time trying to tell him not
> to do that for years now, and the last thing they need is bystanders
> handing him a different bore of firearm to aim at his foot.
> 

I understand not running, say, VLC as root. But Synaptic? It allows you
to search, install and remove packages. Two of those things can't be
done without root permissions. I absolutely run it as root.

Apparently the broader dictum is "never run GUI apps as root". Why?
What's special about GUI apps versus those you run in a terminal?

Paul


-- 
Paul M. Foster
Personal Blog: http://noferblatz.com
Company Site: http://quillandmouse.com
Software Projects: https://gitlab.com/paulmfoster

Re: package managers problem

[gene heskett]

On 6/20/23 14:32, to...@tuxteam.de wrote:

On Tue, Jun 20, 2023 at 02:15:19PM -0400, gene heskett wrote:

On 6/20/23 14:03, zithro wrote:

On 20 Jun 2023 18:21, Charles Curley wrote:

On Tue, 20 Jun 2023 16:52:47 +0200
Anders Andersson  wrote:


I'm running Gnome. Maybe synaptic is not compatible with xfce?


Nope. I have synaptic running here with xfce4 on Bullseye.

synaptic    0.90.2    amd64
xfce4    4.16    all



Correct me if I'm wrong, but last I tried synaptic manually (on XFCE), I
had to use pkexec and NOT sudo.
It doesn't start from a root xterm either.
This remark is for Gene, who only uses variations of "sudo".

    $ which synaptic-pkexec
    /usr/bin/synaptic-pkexec
    $ /usr/bin/synaptic-pkexec

"synaptic-pkexec" is what's needed if not using the distro-provided
shortcut.
Here, the shortcut in XFCE under "System -> Synaptic package manager"
effectively launches "synaptic-pkexec".
synaptic-pkexec is a shell script containing:
    pkexec "/usr/sbin/synaptic" "$@"

Another note, if you use pkexec directly, this won't work :
    $ pkexec synaptic
Cannot run program synaptic: No such file or directory

But this is OK
    $ pkexec /usr/sbin/synaptic


paste:
gene@coyote:/usr/local/bin$ pkexec /usr/sbin/synaptic
Invalid MIT-MAGIC-COOKIE-1 keyUnable to init server: Could not connect:
Connection refused
Failed to initialize GTK.


The MIT-MAGIC-COOKIE refers to an authorization file which will be
in the home directory of the user on whose behalf X was started,
typically under the name .Xauthority. The idea is that whoever has
access to this file is allowed to talk to the X server (an early
example of a "capability" [1], if you wish).

If you are running a pure Wayland session, with no Xwayland, I won't
be able to help you -- I'll try to quit computing before I have to
touch that. But that would possibly mean that synaptic /wants/ to run
under X (or some emulation thereof).

If it does run as a "normal" user, see whether you find this .Xauthority
file in your /home and copy it over to /root: may be that helps, may be
not (chmod/chown to taste: root has to be able to read it).

Cheersmc took care of that, so root owns the copy, but it made no difference.


Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: package managers problem

[Andy Smith]

Hello,

On Tue, Jun 20, 2023 at 10:57:30AM -0400, Sarunas Burdulis wrote:
> On 6/20/23 10:51, gene heskett wrote:
> > Easy:
> > gene@coyote:~/Pictures$ sudo synaptic
> > [sudo] password for gene:
> > Invalid MIT-MAGIC-COOKIE-1 keyUnable to init server: Could not connect:
> > Connection refused
> > Failed to initialize GTK.
> > [...]
> 
> So perhaps copy that cookie into /root/?:

Please do not encourage Gene's fetish of running GUI apps as root.
Plenty of people have been wasting their time trying to tell him not
to do that for years now, and the last thing they need is bystanders
handing him a different bore of firearm to aim at his foot.

Cheers,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Re: package managers problem

[gene heskett]

On 6/20/23 12:50, Felix Miata wrote:

gene heskett composed on 2023-06-20 10:51 (UTC-0400):


Independently of whether you are able to do that without corrupting something,
please provide here GUI terminal input/output from 'inxi -GSaz',

...

This is still bullseye, a netinstall from a week ago and I have
no inxi according to locate according to updatedb.


Super! Install, as root, the excellent /current/ inxi script instead:

cd /usr/local/bin && wget -O inxi smxi.org/inxi && chmod +x inxi

had to break this up and use sudo: should have become root first
gene@coyote:/usr/local/bin$ sudo wget -O inxi smxi.org/inxi && chmod +x inxi
--2023-06-20 13:44:17--  http://smxi.org/inxi
Resolving smxi.org (smxi.org)... 216.92.30.83
Connecting to smxi.org (smxi.org)|216.92.30.83|:80... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://smxi.org/inxi [following]
--2023-06-20 13:44:17--  https://smxi.org/inxi
Connecting to smxi.org (smxi.org)|216.92.30.83|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://github.com/smxi/inxi/raw/master/inxi [following]
--2023-06-20 13:44:17--  https://github.com/smxi/inxi/raw/master/inxi
Resolving github.com (github.com)... 140.82.112.3
Connecting to github.com (github.com)|140.82.112.3|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://raw.githubusercontent.com/smxi/inxi/master/inxi 
[following]
--2023-06-20 13:44:18-- 
https://raw.githubusercontent.com/smxi/inxi/master/inxi
Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 
185.199.111.133, 185.199.108.133, 185.199.110.133, ...
Connecting to raw.githubusercontent.com 
(raw.githubusercontent.com)|185.199.111.133|:443... connected.

HTTP request sent, awaiting response... 200 OK
Length: 1200264 (1.1M) [text/plain]
Saving to: ‘inxi’

inxi 
100%[=>] 
  1.14M  3.62MB/sin 0.3s


2023-06-20 13:44:18 (3.62 MB/s) - ‘inxi’ saved [1200264/1200264]

chmod: changing permissions of 'inxi': Operation not permitted
so:
sudo chmod +x inxi:

Then I can run it as me, but not with sudo:
gene@coyote:/usr/local/bin$ synaptic
Gtk-Message: 13:49:18.398: Failed to load module 
"window-decorations-gtk-module"

Gtk-Message: 13:49:18.399: Failed to load module "colorreload-gtk-module"
gene@coyote:/usr/local/bin$ sudo synaptic
Invalid MIT-MAGIC-COOKIE-1 keyUnable to init server: Could not connect: 
Connection refused

Failed to initialize GTK.

Probably you're running Synaptic on Wayland with root permission.
Please restart your session without Wayland, or run Synaptic without 
root permission

gene@coyote:/usr/local/bin$ sudo -E synaptic
Invalid MIT-MAGIC-COOKIE-1 keyUnable to init server: Could not connect: 
Connection refused

Failed to initialize GTK.

Probably you're running Synaptic on Wayland with root permission.
Please restart your session without Wayland, or run Synaptic without 
root permission


End of copy/pastage.


https://smxi.org/docs/inxi-installation.htm#inxi-manual-install

It doesn't create /etc/inxi.conf, which is needed only if you wish to override
built in inxi defaults.

The current devel version is 3.3.28-24, release, 3.3.27. Changelog:



Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: package managers problem

[Charles Curley]

On Tue, 20 Jun 2023 13:37:01 -0400
gene heskett  wrote:

> > 
> > Gene, this is a long shot. Do you have any KDE or qt components
> > installed?
> >   
> in packagekit:
> kde search = desktop-base, girl.2-webkit2, libblockdev2, 
> libblockdev-crypto2, libblockdev-fs2, libblockdev-loop2, 
> libblockdev-part2, libblockdec-oart-err2, libblockdev-swap2, 
> libblockdev-utils2, libwebkit2gtk-4, networkmanager-gnome-1.2, 
> ruby-debian-0.3, shared-mime-info-2, sound-theme-freedesktop,
> xfwm4-4, xiccd-0.3
> 
> qt search = dbus, libcwidget4, libdbus, printer-driver-cups-pdf

Hmmm. I run XFCE4 here, with a large chunk of KDE installed in order to
use some KDE/qt applications. I am not familiar with packagekit, so I'm
not familiar with its output. I conjecture from this output that you
don't have anywhere near as much of KDE/qt installed as I do.

My long-shot hypothesis is that synaptic, in spite of being a GTK+
application, uses KDE/qt (or something those pulled in) to access the
display.

Maybe someone who knows a lot more about X, Wayland, and how all this
plays together than I do can comment?

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Re: package managers problem

[tomas]

On Tue, Jun 20, 2023 at 02:35:08PM -0400, pa...@quillandmouse.com wrote:
> On Tue, 20 Jun 2023 14:15:19 -0400
> gene heskett  wrote:
> 
> [snip]
> 
> > gene@coyote:/usr/local/bin$ pkexec /usr/sbin/synaptic
> > Invalid MIT-MAGIC-COOKIE-1 keyUnable to init server: Could not
> > connect: Connection refused
> > Failed to initialize GTK.
> > 
> > Probably you're running Synaptic on Wayland with root permission.
> > Please restart your session without Wayland, or run Synaptic without 
> > root permission
> > 
> > which might work if it wasn't for the invalid magic cookie, so how do
> > I get an accceptable version of that?
> > 
> 
> No one's really broken down that initial error message. I think it's
> some sort of red herring. I don't think it's actually a "magic cookie"
> thing.

I just explained it in my other post. It /is/ a magic cookie, and
X clients these days need that to talk to the X server. On my box,
for example:

tomas@trotzki:~$ hexdump -C .Xauthority 
  01 00 00 07 74 72 6f 74  7a 6b 69 00 01 30 00 12  
|trotzki..0..|
0010  4d 49 54 2d 4d 41 47 49  43 2d 43 4f 4f 4b 49 45  
|MIT-MAGIC-COOKIE|
0020  2d 31 00 10 86 0b f6 67  60 93 c8 55 83 6e 40 59  
|-1.g`..U.n@Y|
0030  d1 18 c8 08 00 00 00 04  a9 fe 03 8b 00 01 30 00  
|..0.|
0040  12 4d 49 54 2d 4d 41 47  49 43 2d 43 4f 4f 4b 49  
|.MIT-MAGIC-COOKI|
0050  45 2d 31 00 10 27 ec ac  11 9a 1b 50 36 aa a2 da  
|E-1..'.P6...|
0060  47 1b bd cb 6a 01 00 00  08 72 61 73 70 75 74 69  
|G...jrasputi|
0070  6e 00 01 30 00 12 4d 49  54 2d 4d 41 47 49 43 2d  
|n..0..MIT-MAGIC-|
0080  43 4f 4f 4b 49 45 2d 31  00 10 7e f2 f2 1a ee a3  
|COOKIE-1..~.|
0090  40 e5 6d 04 a0 a1 56 b0  eb d3 01 00 00 07 74 72  
|@.m...V...tr|
00a0  6f 74 7a 6b 69 00 02 31  30 00 12 4d 49 54 2d 4d  
|otzki..10..MIT-M|
00b0  41 47 49 43 2d 43 4f 4f  4b 49 45 2d 31 00 10 64  
|AGIC-COOKIE-1..d|
00c0  e0 43 cc f1 ad f6 de ba  e1 e9 93 5e 21 63 63 
|.C.^!cc|

> I suspect something else is going on. For example, it also says
> it can't initialize GTK. Why?

No X server to talk to -> no GTK.

>  Does Synaptic rely on GTK libraries which
> aren't present? I don't know the answer;

That would be another error message.

> I'm just asking questions. And
> what server is it unable to "init"? Can you run other GUI apps with
> sudo? 
> 
> Unfortunately, I on Xorg, so I can test what you're talking about.

Whatever is happening, the synaptic thinks it is trying to do
Xorg. Perhaps it tries first wayland, fails and falls back to
X, thence the magic cookie thing.

But magic cookies are a thing, at least under X [1]

Cheers

[1] https://en.wikipedia.org/wiki/Magic_cookie

-- 
t


signature.asc
Description: PGP signature

Re: package managers problem

[paulf]

On Tue, 20 Jun 2023 14:15:19 -0400
gene heskett  wrote:

[snip]

> gene@coyote:/usr/local/bin$ pkexec /usr/sbin/synaptic
> Invalid MIT-MAGIC-COOKIE-1 keyUnable to init server: Could not
> connect: Connection refused
> Failed to initialize GTK.
> 
> Probably you're running Synaptic on Wayland with root permission.
> Please restart your session without Wayland, or run Synaptic without 
> root permission
> 
> which might work if it wasn't for the invalid magic cookie, so how do
> I get an accceptable version of that?
> 

No one's really broken down that initial error message. I think it's
some sort of red herring. I don't think it's actually a "magic cookie"
thing. I suspect something else is going on. For example, it also says
it can't initialize GTK. Why? Does Synaptic rely on GTK libraries which
aren't present? I don't know the answer; I'm just asking questions. And
what server is it unable to "init"? Can you run other GUI apps with
sudo? 

Unfortunately, I on Xorg, so I can test what you're talking about.

Paul

-- 
Paul M. Foster
Personal Blog: http://noferblatz.com
Company Site: http://quillandmouse.com
Software Projects: https://gitlab.com/paulmfoster