Re: [DNG] New Chimaera torrent file needs seeders.
On 2022-09-12 17:36:45, wirelessduck--- via Dng wrote: > > > > On 12 Sep 2022, at 17:08, fraser kendall wrote: > > > > On Sun, 11 Sep 2022 11:43:12 -0400 > > fsmithred via Dng wrote: > > > >> Please seed. Thanks. > > > > Hi to all. I have a headless backup machine (with about 2T spare > > capacity) that I'd be willing to use as a long-term seeding host, but I > > have no knowledge about how to do this securely, and it'd have to be > > managed via ssh. I have a couple of questions. > > > > 1) How do I get the client to continue to run after logging off? Is it > > as simple as a remote command: > > > > $ aria2c -V --seed-ratio=0.0 -d /home/devuan/torrent > > https://files.devuan.org/devuan_chimaera.torrent & exit > > > > or should I keep the ssh instance open on the local host to monitor > > what's going on? > > > > 2) Should the client be chrooted? > > > > 3) Any advice on a secure aria2.conf would be appreciated. > > > > Many thanks > > > > fraser > > I can’t speak to aria2, but transmission has a cli/remote client and daemon > you can run on a headless server. Also the usual method of keeping things running after logout is to use screen or tmux. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Key is expired
On 2022-09-03 15:41:59, Elimar Riesebieter wrote: > > Hi all, > > the signing key 'Devuan Repository (Amprolla3 on Nemesis)' is > expired: > > W: GPG error: http://deb.devuan.org/merged stable InRelease: The following > signatures were invalid: EXPKEYSIG BB23C00C61FC752C Devuan Repository > (Amprolla3 on Nemesis) Yes, we know, already reported on this mailing list. We are fixing it now. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Key errors at repository (Amprolla3 on Nemesis)
On 2022-09-03 13:18:25, John Hallam wrote: > I am seeing errors like that below from apt since yesterday > evening. > > Err:4 http://deb.devuan.org/merged beowulf InRelease > The following signatures were invalid: EXPKEYSIG BB23C00C61FC752C > Devuan Repository (Amprolla3 on Nemesis) > > Have the repository signing keys changed? > > Suggestions gratefully received for fixing this. We are working on fixing that, so my suggestion is to wait until we have, and then wait until the fix propagates to the package mirrors. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Question re: screen blanking and shutoff
For what it's worth I just discovered that xscreensaver now has xscreensaver-systemd, and is running on my Chimaera desktop. "The xscreensaver-systemd program is a helper program to integrate xscreensaver with systemd(1)." I've been having problems with screen blanking / monitor power off recently. Can we blame systemd now? S, I just want to be able to lock the screen manually, or have it lock after a configurable time out. Once locked, the monitors should be powered down after a short time out. No fancy OpenGL screen savers, just blanking, locking, and monitor power off. So waving my mouse around or hitting some random key should then bring up a password prompt so I can unlock it. Is there something that can do that which hasn't been infected with systemd? I can probbably accept movie viewers being able to disable the blanking / locking after a lengthy inactivity. But right now if I have run certain games, I get crap like the monitor keeps powering on and off every few minutes. The cancer, it spreads! -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] meta: list
On 2022-08-31 11:04:51, Curtis Maurand wrote: > > > Sent from my iPhone > > > On Aug 31, 2022, at 10:39 AM, marc wrote: > > > > Hi > > > > Just a quick note that in the last week or so google seems > > have ratcheted up its rejection of mail from independent MTAs > > a notch or two. > > > > IF you check your logs, you might see 550 rejects with a message > > such as > > > > Our system has detected that this message is likely > > unsolicited mail. To reduce the amount of spam sent > > to Gmail, this message has been blocked. Please visit > > https://support.google.com/mail/?p=UnsolicitedMessageError > > for more information. > > > > In this case this is for an IP+DNS combination that is known > > to never have sent spam. And of course the supreme irony of > > the matter is that google itself stands accused of injecting > > spam into people's email - see noyb.eu > > > > The first reaction is to be a bit bleak about this, but > > giving it some thought, there might be a silver lining to > > this: This might be a significant step in the split into > > "internet classic" the familiar favourite versus > > the "hinternet.google", the free, convenient, but > > also watered-down and shrinkflated version. > > > > Amusingly I think the DNG list here might have gotten > > a headstart on this, with its unconfigured reverse > > DNS entry - looking through the recent mails I see > > next to no participants from gmail.com - presumably > > because they haven't seen mail from here. > > > > So I think the only sensible reaction is to get word out > > that to participate in this list it is now even more > > important find a decent nongmail provider, or even > > better - set up your own MX/MTA. > > > > I know that this can be a bit of a PITA, but if > > you maximise for convenience rather than knowledge/privacy, > > shouldn't you be using MacOS/Android instead than Devuan ? > > I’ve been running my own MTA for 15+ years. occasionally I get bounced. > recently was bounced by sbcglobal (AT&T) who doesn’t respond to removal > requests. It’s definitely a PITA. However, in all fairness, I was sending to > a large group (25 or so)and that might have done it. > > It’s imperative that you have rdns, spf, dkim and dmarc set up and that it > all matches. > > My MTA will reject you if your ptr doesn’t match your a record and your > helo/ehlo hostname. spf, skim and dmarc are all scored via spamassassin. > Google rejects, outright, if there is any sort of mismatch in any of that at > all. Setting up dnssec for your domain is also helpful. The problem with PTRs is that I run several domains from the one IP address, and PTR can only point to one of those. It costs money to get more IPs, my pension is barely coping with the recent cost of living increases. Though I don't really need to send email from the metaverse.farted.net one, it's a joke domain for my Zuckerverse parody, coz OpenSim does almost everything Zuckerberg claims is coming in his future metaverse. He set a low bar, I had trouble getting down to it. I'm 61, I don't limbo as well as I used to. > DNG list traffic comes through just fine. As for the general topic of gmail and mailing lists, many years ago when I used to do that I had to setup a read only and a write only gmail account on every list. Coz otherwise gmail would decide to not send back to me anything I wrote. Now I use my own email server. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Question re: screen blanking and shutoff
On 2022-07-28 07:24:46, o1bigtenor via Dng wrote: > On Thu, Jul 28, 2022 at 3:53 AM onefang wrote: > > > > On 2022-07-27 21:24:42, o1bigtenor via Dng wrote: > > > On Wed, Jul 27, 2022 at 6:26 PM onefang > > > wrote: > > > > > > > > On 2022-07-27 18:04:26, o1bigtenor via Dng wrote: > > > > > Greetings > > > > > > > > > > Running a AMD 3800X with a Radeon RX570X graphics card using > > > > > opensource amdgpu drivers (version compiled for 1.21.1.3, module > > > > > version = 22.0.0, Module class: X.Org Video Driver, ABI class: X.Org > > > > > Video Driver, version 25.2) running xorg-server 2:21.1.3-2+b1. > > > > > > > > > > I think my system is reasonably upto date running Daedalus. (Last apt > > > > > update check done this morning.) > > > > > > > > > > The issue - - - > > > > > > > > > > After a system reboot the screens will enter screensaver pretty > > > > > picture mode and then blank to off at the chosen times. I've got 5 > > > > > monitors set up to display most of a 7680x3000 virtual desktop. > > > > > Also run a lot of desktops and tend to accumulate a lot of tabs in my > > > > > browsers. Run at least 3 browsers at once (Opera, Brave and Firefox) > > > > > with Firefox as the default and have in the past also run Vivaldi. > > > > > Firefox is the default browser. > > > > > Firefox is the only browser that will place its windows where I had > > > > > them on the various desktops. Finding this I have reduced every other > > > > > browser to windows on at most one 'desktop'. That is the only way that > > > > > I can get any time at all where the screensaver just does its job. > > > > > The problem is that after about 80 hours (or so - - - - haven't > > > > > defined that time with any precision) the screensaver will move to the > > > > > pretty pics screens but does NOT move to screen off. > > > > > > > > > > I have been trying to find what in either the browsers is hindering > > > > > the screen 'blanking' (if I'm using the correct term) or is breaking > > > > > on my system - - - dunno. Have been looking at xset as well but really > > > > > don't know what the bleeping blazes I'm doing and don't want to create > > > > > an even bigger mess! > > > > > I am using lxqt still on version 0.16.0 trying to wait patiently for > > > > > version 1.01 which is supposedly going to move from experimental to > > > > > unstable and testing hopefully very soon but that timing is NOT up to > > > > > me. > > > > > > > > > > Is there someone out there in Devuan land who has any idea of how to > > > > > change this annoying behavior? > > > > > Can I change something in Xset to make this happen? > > > > > Something else? > > > > > > > > > > (I can reboot and set up things the way I want (takes about 1/2 hour > > > > > in total to do everything) so I find that this time every 4 days is a > > > > > nuisance. ) > > > > > > > > That sort of thing was driving me crazy for ages, screensaver would > > > > blank > > > > the screen, but not turn the monitors off. I finally tracked it down. > > > > In my case it was running SDL based programs, the fix is - > > > > > > > > export SDL_VIDEO_ALLOW_SCREENSAVER=1 > > > > > > > > That may or may not be your problem though. > > > > > > > > > > > Hmmm - - - - will dig into that but I don't run any steam connected > > > items - - - at least AFAIK but - - - thanks! > > > > SDL is a popular graphics layer, nothing to do with steam. Though > > perhaps steam and lots of games use it. Some video players use it, lots > > of games use it, in my case it was a 3D virtual world client that I leave > > runnig all day, coz I run virtual worlds. So non games use it to. > > > > Have used the command both as user and as root and there is no > perceivable change. Maybe a system reboot is also needed? Do it before running any SDL programs, so that they can see that environment variable when they run. But if you don't know which are SDL programs, then setting it system wide might help. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Question re: screen blanking and shutoff
On 2022-07-27 21:24:42, o1bigtenor via Dng wrote: > On Wed, Jul 27, 2022 at 6:26 PM onefang wrote: > > > > On 2022-07-27 18:04:26, o1bigtenor via Dng wrote: > > > Greetings > > > > > > Running a AMD 3800X with a Radeon RX570X graphics card using > > > opensource amdgpu drivers (version compiled for 1.21.1.3, module > > > version = 22.0.0, Module class: X.Org Video Driver, ABI class: X.Org > > > Video Driver, version 25.2) running xorg-server 2:21.1.3-2+b1. > > > > > > I think my system is reasonably upto date running Daedalus. (Last apt > > > update check done this morning.) > > > > > > The issue - - - > > > > > > After a system reboot the screens will enter screensaver pretty > > > picture mode and then blank to off at the chosen times. I've got 5 > > > monitors set up to display most of a 7680x3000 virtual desktop. > > > Also run a lot of desktops and tend to accumulate a lot of tabs in my > > > browsers. Run at least 3 browsers at once (Opera, Brave and Firefox) > > > with Firefox as the default and have in the past also run Vivaldi. > > > Firefox is the default browser. > > > Firefox is the only browser that will place its windows where I had > > > them on the various desktops. Finding this I have reduced every other > > > browser to windows on at most one 'desktop'. That is the only way that > > > I can get any time at all where the screensaver just does its job. > > > The problem is that after about 80 hours (or so - - - - haven't > > > defined that time with any precision) the screensaver will move to the > > > pretty pics screens but does NOT move to screen off. > > > > > > I have been trying to find what in either the browsers is hindering > > > the screen 'blanking' (if I'm using the correct term) or is breaking > > > on my system - - - dunno. Have been looking at xset as well but really > > > don't know what the bleeping blazes I'm doing and don't want to create > > > an even bigger mess! > > > I am using lxqt still on version 0.16.0 trying to wait patiently for > > > version 1.01 which is supposedly going to move from experimental to > > > unstable and testing hopefully very soon but that timing is NOT up to > > > me. > > > > > > Is there someone out there in Devuan land who has any idea of how to > > > change this annoying behavior? > > > Can I change something in Xset to make this happen? > > > Something else? > > > > > > (I can reboot and set up things the way I want (takes about 1/2 hour > > > in total to do everything) so I find that this time every 4 days is a > > > nuisance. ) > > > > That sort of thing was driving me crazy for ages, screensaver would blank > > the screen, but not turn the monitors off. I finally tracked it down. > > In my case it was running SDL based programs, the fix is - > > > > export SDL_VIDEO_ALLOW_SCREENSAVER=1 > > > > That may or may not be your problem though. > > > > > Hmmm - - - - will dig into that but I don't run any steam connected > items - - - at least AFAIK but - - - thanks! SDL is a popular graphics layer, nothing to do with steam. Though perhaps steam and lots of games use it. Some video players use it, lots of games use it, in my case it was a 3D virtual world client that I leave runnig all day, coz I run virtual worlds. So non games use it to. > Reassuring to know that I'm not the only one with a similar problem!!! -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Question re: screen blanking and shutoff
On 2022-07-27 18:04:26, o1bigtenor via Dng wrote: > Greetings > > Running a AMD 3800X with a Radeon RX570X graphics card using > opensource amdgpu drivers (version compiled for 1.21.1.3, module > version = 22.0.0, Module class: X.Org Video Driver, ABI class: X.Org > Video Driver, version 25.2) running xorg-server 2:21.1.3-2+b1. > > I think my system is reasonably upto date running Daedalus. (Last apt > update check done this morning.) > > The issue - - - > > After a system reboot the screens will enter screensaver pretty > picture mode and then blank to off at the chosen times. I've got 5 > monitors set up to display most of a 7680x3000 virtual desktop. > Also run a lot of desktops and tend to accumulate a lot of tabs in my > browsers. Run at least 3 browsers at once (Opera, Brave and Firefox) > with Firefox as the default and have in the past also run Vivaldi. > Firefox is the default browser. > Firefox is the only browser that will place its windows where I had > them on the various desktops. Finding this I have reduced every other > browser to windows on at most one 'desktop'. That is the only way that > I can get any time at all where the screensaver just does its job. > The problem is that after about 80 hours (or so - - - - haven't > defined that time with any precision) the screensaver will move to the > pretty pics screens but does NOT move to screen off. > > I have been trying to find what in either the browsers is hindering > the screen 'blanking' (if I'm using the correct term) or is breaking > on my system - - - dunno. Have been looking at xset as well but really > don't know what the bleeping blazes I'm doing and don't want to create > an even bigger mess! > I am using lxqt still on version 0.16.0 trying to wait patiently for > version 1.01 which is supposedly going to move from experimental to > unstable and testing hopefully very soon but that timing is NOT up to > me. > > Is there someone out there in Devuan land who has any idea of how to > change this annoying behavior? > Can I change something in Xset to make this happen? > Something else? > > (I can reboot and set up things the way I want (takes about 1/2 hour > in total to do everything) so I find that this time every 4 days is a > nuisance. ) That sort of thing was driving me crazy for ages, screensaver would blank the screen, but not turn the monitors off. I finally tracked it down. In my case it was running SDL based programs, the fix is - export SDL_VIDEO_ALLOW_SCREENSAVER=1 That may or may not be your problem though. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Unable to access pool in repository
On 2022-07-16 08:21:13, Hendrik Boom wrote: > I tried installing sharutils using aptitude, and was unable to. > aptitude told me: > Temporary failure resolving 'deb.devuan.org' > and later: > E: Failed to fetch > > http://deb.devuan.org/merged/pool/DEBIAN/main/s/sharutils/sharutils_4.15.2 >-5_amd64.deb: Temporary failure resolving 'deb.devuan.org' > > In the browser, I had no problem at all reaching http://deb.devuan.org > but http://deb.devuan.org/merged/ did not contain pool: > > Index of /merged > > NameLast modified Size > Parent Directory - > dists/ 2022-05-14 11:06- > > What gives? Your first problem might just be whatever name server you use, it might have been having problems when you tried aptitude, but not when you tried a browser. I recently switched to using unbound for the first time, and I get that several times a day now. deb.devuan.org is a DNS round robin, it'll hand out a different IP from our collection of package mirrors. So the first thing you should do when telling us about problems with it is which IP you got out of it at the time. Also note the /DEBIAN/ part, most package mirrors rewrite URLs like that to point to Debians package mirrors. So there might be some URL rewriting and redirection going on. If you can tell me which IP it was, then I can investigate further. I wrote apt-panopticon to monitor and test lots of things about our package mirrors, useful for the first place to look. Though I admit it's still a little buggy. https://sledjhamr.org/apt-panopticon/results/Report-web.html http://veritas.devuan.org/apt-panopticon/results/Report-web.html https://borta.devuan.dev/apt-panopticon/results/Report-web.html -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] install on a raid 1 array
On 2022-06-01 19:07:24, Hendrik Boom wrote: > On Wed, Jun 01, 2022 at 05:16:05PM -0500, o1bigtenor via Dng wrote: > > On Wed, Jun 1, 2022 at 4:57 PM tito via Dng wrote: > > > > > > On Wed, 1 Jun 2022 16:34:21 -0500 > > > o1bigtenor via Dng wrote: > > > > > > > Greetings > > > > > > > > When the parts get here I'm going to be installing Devuan testing on > > > > the system. > > > > > > > > I have not ever installed like this so first the configuration. > > > > > > > > Ryzen 7 3800X > > > > Asus TUF Gaming X570-Pro mobo > > > > 64 GB ram > > > > 2 - 1 TB M2 drives > > > > 2 - 1 TB SSDs > > > > > > > > I want to set the system up so that the drives are 2 sets of Raid-1 with > > > > (proposed) > > > > set 1 > > > > /efi, /boot, /, /usr, /usr/local, /var, swap From memory /efi has to be read by the BIOS / UEFI, and has to be a FAT partition. It later gets mounted to /boot/efi. > > > > set 2 > > > > /home > > > > > > > > How do I set up the raid arrays? > > > > > > They could be easily setup during installation process in the disk > > > partitioning step if I recall > > > it correctly. See https://wiki.debian.org/DebianInstaller/SoftwareRaidRoot > > > for more info (just the first part). > > > > Interesting - - - that wiki is current as of 2012. > > That's why I wasn't trusting the information - - - - the newest stuff > > I could find was > > some 3 or 4 years old and I've found that newer stuff has different > > gotchas than > > the older versions. > > > > The assumption is that LLVM is used on top of the array. (from the wiki) > > Is that necessary? > > (I've never used LLVM to date!) > > > > My idea was to partition the disks just like normal after the array was > > built. > > Is that possible? > > Yes, it is possible. I use LVM over RAID on my system because it offers more > flexibility if I have to repartition. > > In fact, I have two separate RAID 1's -- one for partitions that are divided > up the traditional way, and the other for partitions that are done with LVM. > > /boot is on the traditionally divided RAID. Back when I set it up, if /boot > was on a RAID it had to be a RAID of the old format, not the new. I don't > know if that still applies. > > And, LVM is the Logical Vomume Manager. LLVM is the Low Level Virtual > Machine, used by some compilers (such as clang) in generating object code. > > -- hendrik Note that you can use mdadm, or LVM on top of mdadm. I stick with mdadm RAID on my server coz I don't need the extra flexibility, and it's less complex. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Hardware support for new Thinkpad?
On 2022-04-24 07:28:38, . via Dng wrote: > I just got a Thinkpad P1 gen 4, and Chimaera doesn't recognize the audio, > camera, or HDMI port (not to mention the fingerprint sensor in the power > switch). I could use some guidance in what to look for... > > It has a Tiger Lake-H processor, I don't know what chipset. I think I need > a command like "lspci" to identify the multimedia hardware, but I don't know > what to look for. > > For what it's worth, the last couple of releases of Ubuntu *do* support the > multimedia hardware. Do I need to move to Daedalus? If so, is there an > install package for that? > > Thanks for any help in getting this machine up on Devuan. Need more info. Do you mean it's not even showing the devices using those commands others replied with? Are you using pulseaudio, which is the default, and it's just not showing up in their mixer? Are you using raw ALSA like me, and being very surprised that my graphics card with two HDMI and two Display Port connectors is showing a dozen HDMI audio ports, most of which don't work? But two or three of them do work, and not always the same ones. Or something else? VLC was quite useful in listing all the audio devices, and letting me quickly switch between them. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Early Days at Bell Labs
On 2022-01-20 18:40:13, Antony Stone wrote: > On Thursday 20 January 2022 at 17:24:46, Peter Duffy wrote: > > > On Sun, 2022-01-16 at 04:12 -0500, Steve Litt wrote: > > > Hi all, > > > > > > https://www.youtube.com/watch?v=ECCr_KFl41E > > > > Thanks for the link to that - brilliant talk. I've always thought that > > Brian Kernighan himself was the great communicator in the UNIX group - I > > wonder whether "The C Programming Language" and "The Unix Programming > > Environment" would have happened without his obvious ability to take > > abstruse and difficult material and make it accessible. > > > > If I had one incredibly tiny nit to pick, it would be that he didn't > > mention GNU (it appeared once in the slide showing Linus' original > > email). Without GNU, it's reasonable to suppose that linux wouldn't have > > happened. > > I disagree with "it's reasonable to suppose that". > > Linus Torvalds was building a system for himself, partly (I believe) because > he liked Unix but couldn't afford a Unix system of his own, and therefore he > was of course going to build it using as much free (of charge) software as he > could. > > That meant GNU. > > I think the Unix philosophy and design principles are beautiful, and formed > the basis of an amazingly efficient system, but some of those principles are > embodied in Linux and some are embodied in GNU (for example, devices as > files, > and pipes, in the first; and tools such as tr, cut, grep in the second), so > these days we can't really separate the two - Linux is nothing without GNU > (although the reverse is not true). It's entirely possible to have a Linux OS without any GNU software. Using such things as busybox and toybox for example. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] nftables firewall and fail2ban replacement.
On 2022-01-16 17:23:29, wirelessduck--- via Dng wrote: > > > > On 16 Jan 2022, at 12:54, Bob Proulx via Dng wrote: > > > >> Any suggestions? > > > > I am not really happy with any of the programs I have looked at > > either. > > > > Ubuntu really pushes ufw but it feels too complicated to me. (Joking > > because it is supposed to be the Uncomplicated Firewall.) But I don't > > like that one shapes ufw in bits and pieces like crafting clay on a > > pottery table. I would much rather have a file with the rules (or at > > least most of them) in one place that then could get version > > controlled and copied around. ufw does maintain files behind the > > scenes though so perhaps one could hack at those files directly and > > avoid the command line interface. > > > > Bob > > Have you tried firehol? It uses configuration files to set firewall rules for > both inbound and outbound connections. > > https://firehol.org/ firehol doesn't support nftables. Yet, looks like they been thinking about it for years. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] nftables firewall and fail2ban replacement.
I've been using shorewall and fail2ban for a while now, but nftables is soon replacing iptables, so it's time to consider some options. Apparently fail2ban already supports nftables, but shorewall doesn't and wont - https://shorewall-users.narkive.com/aujuSpJ1/nftables-on-the-roadmap My main problem with fail2ban is that it fails to ban. Or rather it does ban, for that one rule I wrote myself, but not for any of the built in rules, but then it releases the ban, even though I have told shorewall to ban that particular IP. So the IP ends up being unbanned, coz fail2ban says so. Yes, I'm aware you can configure fail2ban to shift from temporary to permanent bans for persistent rule breakers. Would be good if the built in rules actually worked. Right now there's a particular IP hitting that one rule, and no matter what I do, even completely zapping fail2ban's database and leaving it turned off, that IP keeps bypassing my firewall somehow. So I'll eventually need a replacement for shorewall anyway, and I'd like something similar to fail2ban that doesn't fail to ban. So the two replacements have to get along with each other. None of this "bad IP can get through coz the two fight over it" bullshit. This has to run on my servers and desktop, so no GUI. I'm an experienced sysadmin, text config is good. Any suggestions? -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] make-rc: A parallel (as in make(1)) alternative to sysv-rc
A long time ago, in a galaxy far far away, or something... I wrote an implementation of sysv-init based on the LSB spec. This was back when the LSB spec was a thing. Not even looked at it since, but let's see if I can correctly recall some of the features. Written in C. Fully implemented the LSB spec. Included those helper programs that LSB also specced. Figured out dependencies from those LSB comments. Could figure those dependencies from init "scripts" written in other languages, by looking for similar bits of text in their executables. Included a few of the basic common sysv-init scripts, also written in C. It may have ran things in parallel, but obviously dependencies where run one after the other. Was as fast as you could imagine it being. May have been written as a BusyBox module. I should find out where I left it (might have been Source Forge), move it to my own git server, and make it a ToyBox module. In my copious spare time. lol -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] RGBling
On 2022-01-01 19:29:06, Simon wrote: > Syeed Ali wrote: > > > I have a closed case yet light still leaks out of the back of my PSU. > > > > Numlock, desktop speaker, mouse DPI setting, monitors even when asleep, > > my KVM, and every single port on my USB hub all leak. > > And then someone invented blue LEDs and suddenly the dark is lost to little > floodlights in the colour our night vision is most sensitive to - as every > designer decided that it would be “cool” to have a really bright blue LED on > an many devices as possible. > Just don’t get me started on the id10t who thought making the sleep LED on > the front of a MacBook Pro “throb” just to make it even more difficult to > ignore. I have things glued over most of those. > For the last 21 months, my office has been the spare bedroom. I have to > switch everything off at the wall when it gets used as a bedroom. To your > list add network switch - which flickers all the time with background traffic > even when the computers are all off. > > It’s something when it’s possible to walk around the house lit only by little > LEDs - even the smoke detectors are tiny little floodlights, thankfully only > dim and green. Alas my smoke alarm is right above the head end of my bed. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] test message
On 2021-12-29 13:15:07, fsmithred via Dng wrote: > Sorry for the noise. > > Don't reply. I made other arrangements, thanks. > > fsr As per fsmithred's request on IRC, I'm sending a replay to this to the list. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] RGBling
On 2021-12-28 11:09:12, tempforever wrote: > Hendrik Boom wrote: > > On Tue, Dec 28, 2021 at 01:55:34PM +1000, onefang wrote: > >> I skimped on the graphics card, coz gamers made everyone put RGBling on > >> everything, so I had to back up one model to get one without RGBling. I > >> wish I could have done the same for the RAM, AND gotten ECC, but alas > >> neither was available. The RGBling on the RAM can ONLY be controlled > >> from Windows, and doesn't remember it's settings after reboot. I can > >> disable RGBling on motherboard from BIOS and case from a switch. This > >> desktop sits on the floor, but projects RGBling onto my high ceiling. > >> Pffft > > What is RGBling? > > > > > Obviously, I'm not onefang, but I believe he is referring to the flashy > light fad that has pervaded the consumer computer market. I took it as > a play on "RGB" (red-green-blue) and "Bling" Correct. > Do we really need clear panel cases and lighting on internal parts? > Apparently, many manufacturers believe so. At least the case I have for my super desktop allowed me to swap the glass front for a metal back. So now the RGBling is only leaking out of the various cooling vents and holes for fans. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Ryzen?
On 2021-12-27 18:54:41, Antony Stone wrote: > Hi. > > Disclaimer: I generally don't like people saying things like "I read > somewhere > that..." without backing up what they're talking about, but... > > I'm sure I've read somewhere (and not especially recently) that Linux on AMD > Ryzen CPUs can be unreliable and/or surprisingly poor performance. > > Can anyone comment on current (eg: Beowulf / Chimaera with standard kernels) > operation on such machines? > > If it matters, I'm looking at desktop / tower / server motherboards and not > laptops, and I don't care two hoots about graphics - this would be for > networked machines accessed exclusively remotely. > > Any opinions from personal experience, or pointers to reliable data, on the > topic would be appreciated :) Since you asked, I get to brag. B-) I built a super desktop a bit over a year ago. Motherboard - MSI Creator TRX40 CPU - AMD Ryzen Threadripper 3990X 4 GHz 64-Core Processor RAM - G.Skill Trident Z Neo 256 GB (8 x 32 GB) DDR4-3600 CL18 Memory Storage (OS) - Seagate FireCuda 520 2 TB M.2-2280 NVME SSD Storage (everything else) - Seagate 16TB Ironwolf Pro SATA 7200RPM NAS Hard Drive GPU - Sapphire Radeon RX 5600 XT BE 6 GB PULSE OS - Devuan Beowulf. I skimped on the graphics card, coz gamers made everyone put RGBling on everything, so I had to back up one model to get one without RGBling. I wish I could have done the same for the RAM, AND gotten ECC, but alas neither was available. The RGBling on the RAM can ONLY be controlled from Windows, and doesn't remember it's settings after reboot. I can disable RGBling on motherboard from BIOS and case from a switch. This desktop sits on the floor, but projects RGBling onto my high ceiling. Pffft First problem was the motherboard, two of the RAM sockets screwed up my RAM if they where full. A replacement motherboard sorted that out, but it was a bitch figuring that out. Which one was faulty, mobo or RAM? Second problem was the PSU, it's fan is now permanently stuck on, and they want me to spend a month waiting for it to travel across the world and back before they will replace it. My old desktop died, not gonna do that. I can't go a month without a computer. Third problem is that I need a backported kernel to support that graphics card properly, and a third party Mesa - http://ppa.launchpad.net/kisak/turtle/ubuntu bionic Somewhere deep inside the Mesa packages, one of them needlessly depended on a tiny package being a version up from what was available. I built my own version of that package with a bumped version number. It's been running for over a year since I got it all sorted out. The only problem is that once in a blue moon X craps out. I think I have that traced to a Mesa bug. Installing Chimaera on it might solve those X issues, no need for a backported kernel, may not need third party Mesa. I may get a more recent GPU for the thing, with more memory, if I can avoid selling off my kidneys, first born, and avoid RGBling. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] networking thinking
On 2021-11-29 18:23:25, Simon wrote: > o1bigtenor via Dng wrote: > > > 1. is my splitting the network system into the three parts a good > > idea or should I truncate parts 1 and 2 into the router? If you would > > please give reasons - - - please? > > Six of one, half a dozen of the other. Sometimes having separate boxes > is good, other times it isn’t. For example, if you run a router doing NAT > (on IPv4) behind a firewall, then the firewall doesn’t see details of > where the traffic comes from - only the mangled version where it’s all > coming from one address. On the other hand, sometimes it can be tricky > making everything work on one box - e.g. doing traffic shaping both ways > when there’s multiple internal networks can require an intermediate > virtual port (an IFB, intermediate function block, in iptables > terminology) to route traffic through and I never did get the hang of > that. > > > 2. are there any good sources for information on and about networking? > > debian has moved to nftables from iptables - - - is devuan doing > > similar? > > Everything has moved, or will be moving, to nftables - it’s a kernel > thing. There’s a shim layer to provide an iptables interface to help > people through the transition, but I suspect it might struggle with some > of the more complex stuff due to differences in semantics between > iptables and nftables. > > > Where does one find information to enable a firewall that works > > yet isn't stupid? > > I’m afraid that’s up there with the answer to life, the universe, and > everything - and in this case it’s not 42 ;-) > > > Back when it was part of the day job, I would “sort of absorb” bits and > pieces until I knew enough about networking to be dangerous. After that, > it’s a case of recognising when there’s a gap in the knowledge and > filling it through reading/research. > > Sometimes a good starting point is to have a specific thing you need a > pointer to and asking others. > > > In the past my preferred firewall was Shorewall - it’s quite a steep > learning curve, but not as steep as native iptables, and not as limiting > as most other firewalls. However, I’m not sure of it’s current status as > it was always very tightly bound into the semantics of iptables and would > probably need a bottom up re-write to work well with nftables. > > But while the learning curve can be steep when past the basics, the > examples will let you get common setups going very quickly. > > But by far the biggest thing that I liked about Shorewall was the > “everything is in a bunch of text files” approach - meaning that you can > look at the files and see what’s going on - and, I know this will > frighten many used to GUIs, you can put comments in the files to tell you > what is going on ! At the same job I mention below, some of the > fireballing was down with Zyxel appliances - all though a “rubbish” GUI > that makes finding anything difficult and documenting it impossible. > Almost a write-only system. I use Shorewall to, for my home systems, and for the servers I'm looking after. I hope they update to nftables, or I'll have to find a new firewall. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Wanting to set up an email system
On 2021-11-27 09:17:45, o1bigtenor via Dng wrote: >Greetings >Started way back when when I got to the web full-time using webmail. >Haven't ever setup an email system and AIUI it is a system - - - there are >a lot of parts that have to work together to have everything working >well. If you mean email server as well as client, on the server side I picked courier, coz it supplise most of the bits, which all work well together. Every other email server solution means gleuing together various bits from different developers. I use neomutt for my client, and fetchmail to gather email from all over. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Error updating local repository
On 2021-11-18 15:15:01, Ismael L. Donis Garcia wrote: >Today it has begun error while trying to update a local daedalus >repository. >Until this morning everything worked well > >xz: (stdin): File format not recognized >Failed: xz -d <.temp/dists/daedalus/main/binary-all/Packages.xz >>.temp/dists/daedalus/main/binary-all/Packages >WARNING: releasing 1 pending lock... >Best Regards You where trying to update your local package repo from some mirror? Which mirror? Did you try again half an hour later? It might have been part way through updating itself. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] [OT] Re: Embedded devuan (was Re: Devuan with usr merge?)
On 2021-11-17 19:57:08, Steve Litt wrote: > Florian Zieboll via Dng said on Wed, 17 Nov 2021 23:37:44 +0100 > > >Inspired by earlier mails in the original "usr merge"-thread, an > >experiment I had been thinking of for a sleepless night was installing > >busybox in an initramfs. I suspect Steve facepalming, but be assured: > >This is canceled now. > > I will never, ever, EVER facepalm over somebody doing DIY > experimentation. Now, when you speak of initramfs or of busybox, you > speak with authority. You've taken a step forward from the dwobes > parroting the nonsense mouthed by others in their party. > > I was even hoping that with Busybox inside an initramfs, you'd have > created an "initramfs lite" that's simple to understand, debug and use. > In other words, I was hoping you'd prove me wrong :-). It has > consistently been people doing what you did that caused me to change my > mind. Um, initramfs already uses busybox. Or it can, it's an option in initramfs-tools. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Embedded devuan (was Re: Devuan with usr merge?)
On 2021-11-16 14:36:23, Didier Kryn wrote: > Le 16/11/2021 à 14:31, Dr. Nikolaus Klepp via Dng a écrit : > > Anno domini 2021 Tue, 16 Nov 14:19:59 +0100 > > Didier Kryn scripsit: > >> Le 16/11/2021 à 12:15, onefang a écrit : > >>> http://landley.net/aboriginal/about.html is what I used for my last > >>> embedded Linux project. > >>> > >>> "Aboriginal Linux is a shell script that builds the smallest/simplest > >>> linux system capable of rebuilding itself from source code. This > >>> currently requires seven packages: linux, busybox, uClibc, binutils, gcc, > >>> make, and bash." > >> Aboriginal is nice and Rob Landley is doing a great job. But are you > >> sure about uClibc. I thought Aboriginal had switched to Musl years ago. > >> uClibc is pretty far from POSIX compliance, and also from Glibc, which > >> would make the system difficult to use as a build platform, although > >> otherwise functional, of course. AFAIR, Rob Landley is developping his > >> binutils mostly because of a disagreement with Busybox license. > > Is it still under devlopment? The archives end 2016. > > > Yes, very active and with pretty constructive exchanges and > collaboration with Glibc. I'm on the mailing list. See > http://musl.libc.org <http://musl.libc.org> Think you are talking about two different things there. Again quoting from the website http://landley.net/aboriginal/news.html - "April 30, 2017 -- End of Line -- Development of Aboriginal Linux has ended, replaced by mkroot." He has much more to say on that topic, I suggest reading it. Ah, he does indeed comment on the license change of busybox in that. My use of Aboriginal Linux predated that, so I can't comment on the mkroot replacement. BTW I did contribute to Aboriginal Linux, the x486 support was my work, coz the embedded device I was using it for uses an x486 clone CPU. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Embedded devuan (was Re: Devuan with usr merge?)
On 2021-11-16 14:19:59, Didier Kryn wrote: > Le 16/11/2021 à 12:15, onefang a écrit : > > http://landley.net/aboriginal/about.html is what I used for my last > > embedded Linux project. > > > > "Aboriginal Linux is a shell script that builds the smallest/simplest > > linux system capable of rebuilding itself from source code. This > > currently requires seven packages: linux, busybox, uClibc, binutils, gcc, > > make, and bash." > > Aboriginal is nice and Rob Landley is doing a great job. But are you > sure about uClibc. I thought Aboriginal had switched to Musl years ago. That bit in quotes was copy pasted directly from the web site, which is why I wrapped it in quotes. > uClibc is pretty far from POSIX compliance, and also from Glibc, which > would make the system difficult to use as a build platform, although > otherwise functional, of course. AFAIR, Rob Landley is developping his > binutils mostly because of a disagreement with Busybox license. Toybox is Rob's version of the busybox thing, and Rob used to be the main busybox maintainer. You should read his web site for more details. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Embedded devuan (was Re: Devuan with usr merge?)
On 2021-11-16 11:40:28, k...@aspodata.se wrote: > Didier Kryn: > > Le 16/11/2021 à 01:44, Florian Zieboll via Dng a écrit : > > > On Mon, 15 Nov 2021 21:19:08 +0100 > ... > > > As I use to do a minimal *.bian install on my SoC hardware, which > > > I afterwards move to the Devuan repositories, while keeping the > > > related original "firmware" repository, I must confess that the > > > whole "embedded"-thing is still somewhat unclear to me, at least > > > regarding kernel and firmware updates. I'd be more than happy to > > > get a hint towards an honest introduction to this topic. > > If you are using embedded linux, you probably have an ip-connection to > the hw and uboot as the fw/bootlooder/bios or what you prefer to call it. > If you have an ip-connection, you can just ssh to the box and copy it to > the right place and do whatever is needed. > You usually don't update the processor, embedded board or other fw > than uboot. If you want to do that you have to check the manufacturer > documentation. > > ... > >    I wish to every Linux fan to live this adventure. > > Ack, here is example manufacturer documentation of the process: > http://developer.embedian.com/display/LOS/SMARC+T335X > > That hw is similar to the BeagleBoneBlack mentioned by Antoine, > so if you start off the BBB, this one could be the next in your > learning curve. http://landley.net/aboriginal/about.html is what I used for my last embedded Linux project. "Aboriginal Linux is a shell script that builds the smallest/simplest linux system capable of rebuilding itself from source code. This currently requires seven packages: linux, busybox, uClibc, binutils, gcc, make, and bash." It builds a QEMU image you can boot into, and then you use the included build system to build the rest of the stuff you need. Once done, strip out the build tools, dd the result to something your embedded system can boot from. My project was for a device that needed to be audited by the government, including providing them with something they could use to build it themselves. Making it into a reproducible build was easy. It passed the audit. For all of my Devuan systems I start from minimal debootstrap install, chroot into that, then apt install the rest. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Is it dead yet?
Oops, sorry, replied directly to spiralofhope instead of the list. On 2021-10-26 22:35:57, spiralofhope wrote: > On Tue, 26 Oct 2021 23:15:15 -0400 > Hendrik Boom via Dng wrote: > > > I'll have to replace the RAM, I guess. Or find out what memory bus > > is failing. > > I know this sounds odd, but I had memory errors galore which were > solved by a new power supply. > > Apparently a jackass flipping breakers off and on quickly had stressed > it out. Linux worked without complaint but Windows 8.1 occasionally > bluescreened. If you have a spare PSU, try that first. I've had that sort of arsehole in the past to. A paranoid guy that thought everyone else in the house was an undercover cop spying on him. He would kill the power to the house every now and then. > This may be obvious, but a memory testing suggestion: > > Remove all but one stick > > With that one stick in a particular slot, memtest > > If failed, repeat with each single stick in that same slot > > If all fail, move up a slot and test each stick > > I know it's a pain, but it might determine if the any/all memory sticks > or if the motherboard are bad. I've had to do that in the past, the result was that I found out it was one particular slot in the mother board, all the RAM was fine. Replaced the motherboard, all was fine. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Beowulf; Increasing the number of boot options under grub. How To?
On 2021-05-17 23:31:12, terryc wrote: > I am hoping there is a simple config/number change in the grub > config files, but I can not find it in the doco I've read. > > In the past, the list of kernel images just grew each time you > loaded/updated the linux-image files. But the current system > automatically trims it to just two, with normal and recovery versions of > each. > > The reason I want to do this is to lad step through some of the 5.* > kernel to see if any of them now give any support to my AMD RX 5700* XT > gpu card that has been unable to be used(unless I want a single screern > in vesa mode). > > LS: At this stage the hardware is correctly identified by various > hardware programs with mirrored dual screens during boot up, but the > between Xorg, Mesa & Vvulkan, which supposedly make it work, I just get > a VESA single screen. > > My tip is never to but any AMD 5700 card. My 5700 HD never worked > reliably under their proprietary driver and it was years before the > Radeon driver was able to support it. I recently bought an AMD Radeon RX 5700 XT card. Your 5700 might be too new for Beowulf, I had to jump through some hoops te get my 5600 working fully. Using the 5.10 kernel from Beowulf-backports, Mesa drivers and a bunch of related libraries from a third party PPA, and a hack. I now have 3D virtual worlds and dual screen working fine. No idea if any of that will work for a 5700, since I don't have one. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] strange mutt pauses
On 2021-04-14 17:49:45, d...@d404.nl wrote: > On 14-04-2021 16:19, Hendrik Boom wrote: > > I have an unreliable connection between my server and the rest of the > > world. > > Yes, I'm going to have to deal with that; it's not what I'm asking about. > > > > I have a reliable wired connection from my laptop to my server. > > And I run mutt on my server, connecting to it by ssh. > > > > What puzzles me is that every now and then, communication from my laptop to > > mutt mysteriously pauses. After a while, it resumes. > > > > Using a separate ssh connection to root on the server (which I use to > > monitor my unreliable connectino to the rest of the world), I've noticed: > > > > That separate ssh connection stays up when mutt blocks. But using > > ifconfig on that separate ssh connection tells me that pppoe connection to > > the rest of the world is off when mutt blocks. > > > > Why does mutt block, not even letting me type into the editor for an email > > I plan to send, when the ppp connection is down? What does mutt have to do > > with an internet connection? Isn't that postfix/s job? > > > > -- hendrik > > Most likely it does do a domain name lookup which times out by lack of a > ppp connection. I've been using neomutt. On ASCII it was renamed to mutt, on Beowulf they named it back to neomutt, and the mutt package is actual mutt. I dunno which one you are using. ASCII was on my old desktop, and Beowulf is on my new super desktop. I use a local IMAP server running on the same computer in each case. The ASCII version on the old computer would do that sort of mysterious pause where all you can do is wait for it to unpause. The Beowulf version on the new computer does that rarely. It was very annoying under ASCII, not so much under Beowulf. I use fetchmail to gather emails from my various email providers, that dumps them into my local IMAP server. I suspect the difference was the computers, not the version of neomutt. Or it could just be if the check of IMAP stumbles across the fetchmail process updating the IMAP folders. Or perhaps this later version mostly fixed that pause. Maybe some combination of the three. The Beowulf version does have a problem with showing the O old email marker as N new email (a known bug). Which is even more annoying. I'm considering installing ASCII in a VM on this new super desktop, and running the ASCII version in it. If I do that, I might find out if the pause gets worse. (For reference, old computer was an 11 year old AMD system with 8 GB of RAM, new super desktop is an AMD Threadripper with 256 GB of RAM.) -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] SSL certificate or host mapping for ASCII updates for APT
On 2021-04-09 18:40:16, Olaf Meeuwissen via Dng wrote: > Hi Chris, > > crich...@blackfoot.net writes: > > > On 2021-04-08 15:32, Joril wrote: > >> On 08/04/21 16:40, crichmon@??? wrote: > >> > I'm trying to 'apt update' an ascii box, and the repos in the > >> > aptsource list point here: > >> > > >> > deb http://us.deb.devuan.org/merged ascii main non-free contrib > >> > >> I think that "country mirrors" are deprecated, try using just > >> deb.devuan.org Correct, country codes like that are deprecated, but I'm working on bringing them back. Do not use them now. > > Actually, I did already try that after reading the docs on the web again, > > and get the same problems using the same debugging tools. > > Sparing the details. > > /tmp# host deb.devuan.org > > deb.devuan.org is an alias for deb.roundr.devuan.org. > > > > Trying to browse http://deb.devuan.org/ still fails. > > The package repositories aren't really meant for browser-based perusal > but http://deb.devuan.org/ displays fine, as in an Apache/2.4 directory > listing, for me. That may be because I chanced upon an IP address that > supports that but if you *really* have SSL certificate issues, I guess > your browser is *forcing* HTTPS upon you. Regular HTTP URLs don't use > certificates. Apt still uses HTTP if you ask it to use that, so the web servers don't act any different, it's all HTTP protocol. So you CAN browse mirrors using a web browser, so long as they are HTTP mirrors. There are also FTP and RSYNC mirrors, but they all support HTTP at least. > # You might want to make sure you add that http:// at the beginning of > # that URL in your browser's location bar. > > > What I hadn't tried was 'apt update', which I'm doing now after > > updating sources.list, and it is working, so apt doesn't exactly have > > the same cert issues. > > That's because APT uses HTTP, not HTTPS, per your URL. > APT downloads a signed InRelease file and checks that using GnuPG keys > from the devuan-keyring package. If that checks out fine, the checksums > in that file are used to verify the Packages and Sources files which, in > turn contain checksums for the individual packages that are verified > before `apt` goes ahead and install things. > > That is to say, APT doesn't rely on SSL certificates but on GnuPG keys > to make sure you get exactly what the package maintainers intended. > > Hope this helps, You are mostly correct. Apt CAN use https, but didn't by default, coz the apt HTTPS transport isn't installed by default. I think it is installed by default in Beowulf. However, it still only uses HTTPS if the URLs in sources are https. As for the deb.devuan.org round robin DNS, it picks one of our Devuan package mirrors (at random I think) to send apt and http requests to. Those mirrors do not have valid certificates for deb.devuan.org, but may have valid certificates for whatever that servers actual domain name is. If you really want to use HTTPS for apt, pick a nearby one from - https://pkgmaster.devuan.org/mirror_list.txt There is a further complication in some mirror servers auto convert HTTP to HTTPS, which they should not do if they are responding to deb.devuan.org, or if they are not redirecting to a Debian mirror. Coz they have no idea if the Debian mirror round robin DNS system will send the request to a Debian mirror that doesn't support a proper HTTPS cert for the round robin DNS name. TL;DR - don't use the CC.deb.devuan.org names, don't use https for deb.devuan.org, do use https only with those mirrors that support HTTPS. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] Restricting processes to X% of CPU and Y% of RAM.
My problem - I run a virtual world grid based on OpenSim (an open source implementation of the Second Life server) on Devuan ASCII. A grid like this is made up of 256 x 256 meter bits of land called a sim or a region. There are also bigger ones made of multiples of these 256 x 256 meter ones. Each of these sims runs as it's own process (well with lots of child processes for each one). Some of these sims are basically private property, owned by other members of the grid, where they can do what they want. Sometimes these private sim owners just go crazy filling it up with stuff and scripts to run the stuff. This might mean their sim starts to use way to much CPU or RAM. I have had one of these recently soak up so much CPU and RAM that it crashed the entire grid. Three times. The owner has cooperated and reduced things, but he was bitching the entire way. So I want to limit things so this will never happen again. Say limit each sim to 15% of CPU and 15% of RAM. Everything runs as the opensim user. Possible solutions - I used to use monit to just restart sims that went over the limit, but that wont help if it went over the limit coz they put too much stuff in it. That was more to catch runaway sims, coz OpenSim is crap code. I think ulimit will just shut things down when they go over the limits. I don't want that, I want to limit CPU usage, so slowing things down. cpulimit looks like it might work. cputool I think is just a wrapper around cpulimit. cgroups might be a better idea, but seems as if most of the web pages talking about it assume you are using systemd. Not sure what the result of going over the RAM limit is, could get messy. Eventually I'll rewrite OpenSim, I've started already, but it's a big project simulating a world, so that's slow going. The rewrite will include monitoring, and sending messages "Whoa, slow down, you are approaching the limits" or something, before refusing to let them add more stuff. But for now I just want something I can do quickly to limit things without breaking things. Anyone got better suggestions, or experience using these tools? -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Is anybody using Discord for virtual get-togethers in Devuan?
On 2020-03-21 15:44:10, terryc wrote: > On Fri, 20 Mar 2020 08:38:32 -0400 > Steve Litt wrote: > > > Is anybody using Discord in Devuan for virtual get-togethers? > > Yes, in the sense that I can join such for various groups like games, > etc where someone else has paid for the server. > > Best I've managed is to follow the text chat and swap between > discussion groups on "the server" and occasionally I manage to receive > audio. but not send. Nor have I ever received a video feed, but I > believe that requires a subscription > > I do not know whether this depends on having pulse audio, but I only use > alsa. > > I do not particularly like Discord as it doesn't turn off/exi and I have > to hunt down and kill the daemon and some of he severs tend to use > pesterpost to continually send messages about "what you missed". Not my > scene. > > Usenet & IRC serves me fine, when I want it. > > Although I was looking last night for linux based "conference/meeting > software that I might be able to run to host free local > discussions/"virtual meetings" for various local community groups shut > down by Sars-cov2/covid-19 virus, but the few were all . There are things like Jitsi (used by the Devuan developers), OpenSim (used by me), or plain old Jabber / XMPP (also used by me) if you only need text. Jitsi is a combination of video and text, though I think the text bit is handled be the Prosody Jabber / XMPP server. OpenSim is a 3d virtual world, I have worked for a company that offers business meeting services using it and VR (I added the VR bit). -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] The real reason I like Linux
On 2020-03-12 22:59:28, Steve Litt wrote: > Now the guys from FreeDesktop would read this email and wring their > hands: Oh, no, your kludge involves programming, and most people can't > do that. > > Oh really? 12 lines of code and they can't do it (or have a friend help > do it)? FreeDesktop.Org doesn't like me doing 90 minutes of programming > (and actually Lego(R) block assembly). Their preferred method goes > something like this: > > * Use Gnome. > * Find Gnome software that solves your problem: > - Ask your LUG > - Ask on stackoverflow > - Read every page on FreeDesktop.Org > - Spend a day doing web searches > * Test the found softwares for suitability > - If it fails a requirement, ask around for a fix > - Experiment, experiment, experiment > * Install the necessary softwares > - Adjust your workflow to comply with the softwares > - Weave yourself through and around all the software > requirements > > Better yet, with the FreeDesktop.Org way, there's ongoing maintenance, > because every time some library author changes his library, your > FreeDesktop.Org style "solution" breaks and you need to beg for a > special package to fix your problem. > > The FreeDesktop guys are geniuses. They can make specifications that > can turn the most attentive reader into a bowl of jelly. They can > implement sixteen levels of pointers and events and callbacks far > beyond the understanding of mortal man. After implementing some of their protocols, I started calling FreeDesktop.Org FatDesktop.Obscenities. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Beowulf repository weirdness or broken?
On 2020-01-21 20:13:01, Mike Tubby wrote:
> Hi All,
>
> I have two identical machines at work ("post" and "newmail") both running
> Beowulf and both with the same /etc/apt/sources.list:
>
> root@post:/etc/apt# cat sources.list
> deb http://gb.deb.devuan.org/merged beowulf main
> deb-src http://gb.deb.devuan.org/merged beowulf main
>
> deb http://gb.deb.devuan.org/merged beowulf-security main
> deb-src http://gb.deb.devuan.org/merged beowulf-security main
>
> deb http://gb.deb.devuan.org/merged beowulf-updates main
> deb-src http://gb.deb.devuan.org/merged beowulf-updates main
> root@post:/etc/apt#
Using country codes is deprecated, please use deb.devuan.org.
gb.deb.devuan.org returns a CNAME of deb.devuan.org, so that should work.
> Running "apt-get update" on post works as expected:
>
> root@post:/etc/apt# apt-get update
> Get:1 http://gb.deb.devuan.org/merged beowulf InRelease [25.6 kB]
> Get:2 http://gb.deb.devuan.org/merged beowulf-security InRelease [25.6 kB]
> Get:3 http://gb.deb.devuan.org/merged beowulf-updates InRelease [25.6 kB]
> Get:4 http://gb.deb.devuan.org/merged beowulf/main Sources [7,816 kB]
> Get:5 http://gb.deb.devuan.org/merged beowulf/main amd64 Packages [8,036 kB]
> Get:6 http://gb.deb.devuan.org/merged beowulf-security/main Sources [97.6
> kB]
> Get:7 http://gb.deb.devuan.org/merged beowulf-security/main amd64 Packages
> [173 kB]
> Fetched 16.2 MB in 6s (2,935 kB/s)
> Reading package lists... Done
> root@post:/etc/apt#
>
> Running "apt-get update" on newmail gives:
>
> root@newmail:/etc/apt# apt-get update
> Ign:1 https://search.stinpriza.org/merged beowulf InRelease
> Ign:2 https://search.stinpriza.org/merged beowulf-security InRelease
> Ign:3 https://search.stinpriza.org/merged beowulf-updates InRelease
> Err:4 https://search.stinpriza.org/merged beowulf Release
> 404 NOT FOUND [IP: 2a01:4f8:162:7293::14 443]
> Err:5 https://search.stinpriza.org/merged beowulf-security Release
> 404 NOT FOUND [IP: 2a01:4f8:162:7293::14 443]
> Err:6 https://search.stinpriza.org/merged beowulf-updates Release
> 404 NOT FOUND [IP: 2a01:4f8:162:7293::14 443]
> Reading package lists... Done
> E: The repository 'http://gb.deb.devuan.org/merged beowulf Release' no
> longer has a Release file.
> N: Updating from such a repository can't be done securely, and is therefore
> disabled by default.
> N: See apt-secure(8) manpage for repository creation and user configuration
> details.
> E: The repository 'http://gb.deb.devuan.org/merged beowulf-security Release'
> no longer has a Release file.
> N: Updating from such a repository can't be done securely, and is therefore
> disabled by default.
> N: See apt-secure(8) manpage for repository creation and user configuration
> details.
> E: The repository 'http://gb.deb.devuan.org/merged beowulf-updates Release'
> no longer has a Release file.
> N: Updating from such a repository can't be done securely, and is therefore
> disabled by default.
> N: See apt-secure(8) manpage for repository creation and user configuration
> details.
> root@newmail:/etc/apt#
>
>
> Have I got a DNS caching problem somewhere or is there a broken repo?
The stinpriza mirror's domain name is mirror.stinpriza.org, the IP is
correct though. I don't know how you ended up with search.stinpriza.org,
perhaps it's in one of your sources files? It's likely that
search.stinpriza.org doesn't actually point to a Devuan mirror.
mirror.stinpriza.org is one of the better mirrors according to my mirror
checker, it rarely fails.
Usually it's best to stick with deb.devuan.org though.
--
A big old stinking pile of genius that no one wants
coz there are too many silver coated monkeys in the world.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Error trying to update a local beowulf repository
On 2020-01-09 10:21:43, Ismael L. Donis Garcia wrote: >When trying to update the local repository I am getting this error from >yesterday to date. > >[cut] >[ 12%] Getting: dists/beowulf/main/binary-i386/Packages... #** GET > > [1]http://pkgmaster.devuan.org/merged//dists/beowulf/main/binary-i386/Packages >==> 404 Not Found (1s) >Download of dists/beowulf/main/binary-i386/Packages failed: 404 Not Found >[cut] >[ 24%] Getting: dists/beowulf/main/binary-amd64/Packages... #** GET > > [2]http://pkgmaster.devuan.org/merged//dists/beowulf/main/binary-amd64/Packages >==> 404 Not Found >Download of dists/beowulf/main/binary-amd64/Packages failed: 404 Not Found >[cut] >Errors: > Download of dists/beowulf/main/binary-i386/Packages failed: 404 Not Found > dists/beowulf/main/binary-i386/Packages failed checksum verification > Download of dists/beowulf/main/binary-amd64/Packages failed: 404 Not >Found > dists/beowulf/main/binary-amd64/Packages failed checksum verification >Failed to download some Package, Sources or Release files! >WARNING: releasing 1 pending lock... That should be Packages.xz or Packages.gz, The "Packages" file doesn't exist uncompresed. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] OT: Fedora in Debian
On 2020-01-03 06:58:08, Hendrik Boom wrote: > On Thu, Jan 02, 2020 at 11:52:07PM -0600, goli...@devuan.org wrote: > > Greetings all. Let's start the new year with something from the Debian > > forums that might make you shake your head and chuckle. Poor newbie on > > Windoze hasn't a clue just how funny his last para is: > > I don't get it. There must be something I don't know. > Has Debian now incorporated a Taiwanese Fedora derivative? Debian wears many hats. > Shake my head yes. Just puzzled. Not chuckling. Don't shake your head to much, your hat will fall off. These poor jokes brought to you by the letter F and the colour red. > -- hendrik > > > > > "The problems? The resulting bootable drive isn't booting in UEFI. It can > > still boot though with a caveat... The boot option is labelled "Linpus > > Lite". > > Isn't it weird for other distro's name to come up? A fedora-based distro no > > less. As of now, I'm thoroughly confused :?" > > > > You can read the whole thing here . . . > > > > Something's not quite right with the installation image.. > > http://forums.debian.net/viewtopic.php?f=17&t=144808&sid=338c910ca9db4dd45e34a2a02c236434 > > > > Just had to share. :D > > > > golinux > > ___ > > Dng mailing list > > Dng@lists.dyne.org > > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] fifth freedom
On 2019-12-11 05:29:21, freemedia via Dng wrote: > free software force and golinux have expressed interest in a revised version > of the four freedoms, which i was initially very shy about the idea of. for > some time ive proposed as an alternative a list of companion qualities or > "pillars" which i havent completely abandoned yet. > > still, while seeking what these pillars would be, someone stepped up with a > really ideal fifth freedom, which im now taking on a tour of sorts, consider > this a request for comments: > > The freedom to NOT run the software, to be free to avoid vendor lock-in > through appropriate modularization/encapsulation and minimized dependencies; > meaning any free software can be replaced with a user’s preferred > alternatives (freedom 4). > > for comparison, the existing four freedoms are: > > The freedom to run the program as you wish, for any purpose (freedom 0). > The freedom to study how the program works, and change it so it does your > computing as you wish (freedom 1). Access to the source code is a > precondition for this. > The freedom to redistribute copies so you can help others (freedom 2). > The freedom to distribute copies of your modified versions to others (freedom > 3). By doing this you can give the whole community a chance to benefit from > your changes. Access to the source code is a precondition for this. I had recently added what I call freedom -1 to the licence of apt-panopticon. 'the author specifically grants themselves the freedom to not be infected by the viral licence clauses of any code this source code "links" to. It's my code, I choose my licence terms, no one else does.' Yes there is a GPL bit included, yes I do distribute that bit with my modifications in source code form in the same places I distribute apt-panopticon. I also point out in the README of that bit, where to get the original, and where to get my modified forms. No apt-panopticon isn't gonna be GPL, just coz someone else thought that I should not have the freedom to choose my own licence. I even mention the alteratives that I know of in the docs, so that's your fifth freedom catered for. I carefully chose the dependencies to be stuff and versions that are available in the standard Devuan ASCII package repo. Except for the modified GPL bit of code, that isn't in Devuan ASCII. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] test_rewrite.sh http://pkgmaster.devuan.org fail
On 2019-11-27 11:24:20, Dimitris via Dng wrote: > On 11/27/19 11:14 AM, m_ma...@web.de wrote: > > Dear all, > > > > can you please take a look to the servers configuration, i become errors > > if i try test_rewrite.sh: > > this was already reported to mirror@d.o. it's not new.. > nothing important really, it's just that the script is looking for older > packages, that don't exist in repo anymore.. just needs updating... Trying to manually download those files that failed, shows that they no longer exist on Debian mirrors. So Dimitris is correct, hde problem is the old files it's looking for. Also I should point out that deb.devuan.org is a DNS round robin, the actual server you get for each download will vary, there is no actual deb.devuan.org server, just a bunch of servers configured to respond to deb.devuan.org. https://sledjhamr.org/apt-panopticon/results/Report-web.html is my mirror checker script that runs hourly, it does similar checks to that rewrite script, and more checks, only with more up to date files. I'm still improving that script, and adding more tests. It also tests deb.devuan.org by probing each server an the round robin list. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
