[DNG] Runit logging

[wirelessduck--- via Dng]

I’m running a custom daemon with runit-sysv, which is working fabulously so 
far! Much simpler than existing sysvinit scripts!

My question is whether there is any way to make svlogd compress the logs when 
it rotates them?  Do I need to tell svlogd to ignore any rotation and setup 
some sort of logrotate.d configuration? Has anyone else done this successfully?

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] why does mount expect NTFS?

[wirelessduck--- via Dng]

Could it be exfat? I sometimes see NTFS messages appear in syslog when I try to 
mount exfat drives using pmount.

> On 11 Aug 2019, at 11:51, Hendrik Boom  wrote:
> 
> So I want to find out what's in /dev/sda4 on my hard drive.  The 
> computer has *never* had Windows on it.  So I try to mount it, and am 
> told:
> 
> april:/farhome/hendrik# mount /dev/sda4 /test
> NTFS signature is missing.
> Failed to mount '/dev/sda4': Invalid argument
> The device '/dev/sda4' doesn't seem to have a valid NTFS.
> Maybe the wrong device is used? Or the whole disk instead of a
> partition (e.g. /dev/sda, not /dev/sda1)? Or the other way 
> around?
> april:/farhome/hendrik#
> 
> Why would it try for and NTFS file system on a Linux machine?
> 
> -- hendrik
> 
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] dns vs connection manager

[wirelessduck--- via Dng]

https://manpages.debian.org/stretch/connman/connman.8.en.html

Look at the -r option. Maybe that lets you disable the built-in DNS proxy. Was 
that previously set somewhere?

> On 11 Jul 2019, at 01:31, Hendrik Boom  wrote:
> 
> This morning DNS wasn't working on my laptop, though it worked perfectly 
> well on the server it wifi-ed to.
> After some pinging and checking connections, I found this on my 
> laptop.
> 
> The file /etc/resolv.conf:
> 
> # Generated by Connection Manager
> nameserver ::1
> nameserver 127.0.0.1
> 
> Now why would the connection manager (conman) suddenly be setting my 
> nameserver to localhost?  A few days ago everything worked.
> 
> Editing that file and replacing 127.0.0.1 by 8.8.8.8 and everything 
> worked again.  Until the next time the commection manager needs to 
> connect, presumably.
> 
> -- hendrik
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Php 7.03 on ascii

[wirelessduck--- via Dng]

You can install both together.

The package names without versions will have a dependency on the latest 
version, so installing the “php” package on ascii will depend on “php7.0” but 
the deb.sury.org repository will have an upgraded “php” package depending on 
“php7.3” and so on for all the various php packages.

https://packages.debian.org/stretch/php

Nothing stops you from having both “php7.0” and “php7.3” installed together.

If you want to just upgrade, you can update from deb.sury.org and then 
uninstall the existing php7.0-* packages.

> On 9 Jun 2019, at 10:12, hal  wrote:
> 
> If I go this route, would I need to uninstall all my php7.0x packages by hand 
> first and then install PHP via the sury repo?
> 
> eg:
> 
> 
> # aptitude purge $(dpkg -l | grep php | awk '{print $2};' | xargs)
> The following packages will be REMOVED:
>  imagemagick-6-common{u} libapache2-mod-php{p} libapache2-mod-php7.0{p} 
> liblqr-1-0{u} libmagickcore-6.q16-3{u} libmagickwand-6.q16-3{u} libmcrypt4{u} 
> libzip4{u} php{p}
>  php-apcu{p} php-apcu-bc{pu} php-bz2{p} php-common{p} php-curl{p} php-fpm{p} 
> php-gd{p} php-igbinary{p} php-imagick{p} php-intl{p} php-json{p} php-ldap{p} 
> php-mbstring{p}
>  php-mcrypt{p} php-mysql{p} php-redis{p} php-xml{p} php-zip{p} php7.0{pu} 
> php7.0-bz2{pu} php7.0-cli{pu} php7.0-common{p} php7.0-curl{pu} php7.0-fpm{pu} 
> php7.0-gd{pu}
>  php7.0-intl{pu} php7.0-json{pu} php7.0-ldap{pu} php7.0-mbstring{pu} 
> php7.0-mcrypt{pu} php7.0-mysql{pu} php7.0-opcache{pu} php7.0-readline{pu} 
> php7.0-xml{p} php7.0-zip{pu}
>  ttf-dejavu-core{u}
> 0 packages upgraded, 0 newly installed, 45 to remove and 0 not upgraded.
> Need to get 0 B of archives. After unpacking 32.7 MB will be freed.
> Do you want to continue? [Y/n/?]
> 
> 
>> On 6/5/19 6:27 PM, wirelessduck--- via Dng wrote:
>> https://deb.sury.org/
>> You can get php7.3 from that repository for ascii. Just use the “stretch” 
>> equivalent name from debian.
>>> On 6 Jun 2019, at 00:53, hal >> <mailto:vmli...@charter.net>> wrote:
>>> Hi all,
>>> I happened to glance over at the supported PHP matrix[1] on php.net 
>>> <http://php.net> yesterday and noticed 7.0x is EOL. This is the version 
>>> bundled with Ascii. Do the debian backports cover securiy updates to PHP 
>>> 7.0x until the distro itself is EOL or should I have upgraded PHP already?
>>> 
>>> Thanks
>>> 
>>> [1]
>>> https://www.php.net/supported-versions.php
>>> ___
>>> Dng mailing list
>>> Dng@lists.dyne.org <mailto:Dng@lists.dyne.org>
>>> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
>> ___
>> Dng mailing list
>> Dng@lists.dyne.org
>> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Php 7.03 on ascii

[wirelessduck--- via Dng]

https://deb.sury.org/

You can get php7.3 from that repository for ascii. Just use the “stretch” 
equivalent name from debian.

> On 6 Jun 2019, at 00:53, hal  wrote:
> 
> Hi all,
> I happened to glance over at the supported PHP matrix[1] on php.net yesterday 
> and noticed 7.0x is EOL. This is the version bundled with Ascii. Do the 
> debian backports cover securiy updates to PHP 7.0x until the distro itself is 
> EOL or should I have upgraded PHP already?  
> 
> Thanks
> 
> [1]
> https://www.php.net/supported-versions.php
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Install failure: cannot boot netinst

[wirelessduck--- via Dng]

> On 28 May 2019, at 12:13, Blair, Charles E III  wrote:
> 
> 
>>> I'm wondering whether there can be a mismatch between
>>> installer output and what the monitor is expecting.  
>> 
>> Have you tried booting with the kernel option “nomodeset”? I have
>> needed that sometimes on systems that require extra graphics drivers
>> not available in the installer.
> 
>   Thanks for your thoughts.  There's so much
> I don't know.
> 
>   How does one do a nomodeset boot on a
> Windows10 machine?

If you’re doing non-UEFI install then highlight the install option on the 
installer boot menu screen and press TAB.

You want to add “nomodeset” to the end of the line and then press ENTER to boot 
with nomodeset.

If you’re booting the UEFI installer, you highlight the install option in the 
installer boot menu and press E to edit. Repeat the change as above, but add it 
to the end of the line starting with “linux”. Press F10 to boot.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] calendars, contacts, to do lists

[wirelessduck--- via Dng]

> On 25 May 2019, at 18:25, Rick Moen  wrote:
> 
> Quoting Rod Rodolico (r...@dailydata.net):
> 
> [...]
>> NOTE: there is a split from Owncloud called NextCloud (nextcloud.com).
> [...]
> 
> Those considering these options may wish to be aware that both of these
> projects are coded in PHP5 and Javascript.  (I mention this because I
> have views about the suitability of PHP on the Internet and its design
> and quality (and consequent characteristic problems), but I'll not vent
> those here.  For many people, this is a case of 'PHP app, you say?
> Thanks, I'll give it a pass.' 
> 
> On the other hand, those who love PHP and Javascript are helped out by
> knowing, so I hope they, too, will find that information useful.

PHP5? I’d be wary of using any software that is still stuck on PHP5 since the 
latest 5.6 has just hit end of life.

Just checked the nextcloud docs and it appears they are supporting and 
recommending the latest PHP7.3 which is a welcome sign.

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Devuan AMI

[wirelessduck--- via Dng]

> When I did this, I had to pre-include the ssh keys, so I haven't fully 
> mastered the process, but it was good enough for the task at hand.

Apparently there’s some “cloud-init” package that might handle that? I’m still 
not entirely sure what that package does and how it works though.

When I needed some AMI images, I used the official Debian Stretch image and 
converted to Devuan, making sure all all of the Devuan packages like 
devuan-keyring and devuan-baseconf were installed.

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] New application ready to test: hopman

[wirelessduck--- via Dng]

> On 24 Apr 2019, at 01:06, Didier Kryn  wrote:
> 
>> Le 23/04/2019 à 13:22, Edward Bartolo via Dng a écrit :
>> Making it a Debian package should be easy. Use dh_make to create a
>> 'debian' subdirectory with the necessary Debian control files. Then,
>> when that is ready build the debian packages using 'gbp buildpackage'.
>> Both commands should be run in the source's top directory.
> 
> 
> Thanks Edward.
> 
> ' gbp buildpackage'  fails because hopman-1.0 isnot a git directory. The 
> git directory is actually one level higher in my case.
> 
> I need a method not relying on git.
> 
> Here is what I tried before. dh_make works fine, no problem with it.
> 
> Then I tried dpkg-buildpackage but it failed (I don'tremember for sure 
> why, maybe because of the absence of a gpg signature).
> 
> Then I tried 'debuild -us -uc' and it did produce a .deb file with the 
> amd64 extension in the name, which is what I expected, but, when I installed 
> the package with 'dpkg -i', it installed a few files which are present in all 
> debian packages, but none of the usefull files this package should provide 
> (executable, manpage, config file, icon and launcher).
> 
> The matter is rather complicated and I only tried recipes :~)
> 
> Didier

May I suggest looking at this reference? Apologies if you have already seen it.

https://www.debian.org/doc/manuals/maint-guide/dother.en.html

It lists the various files under the debian/ directory and what they are used 
for. Eg. Installing manpages, init scripts, readme, creating symlinks on 
install, pre/postinst, etc.

I am using the command “dpkg-buildpackage -us -uc -i -I” for building the 
packages. Also using regular “dch” for the changelog as my git repository is 
not in the required “debian format” for “gbp”.

HTH

—Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Running Devuan Ascii on AWS

[wirelessduck--- via Dng]

I’m looking at migrating some servers from a local ESXi onto AWS, or just 
rebuilding them from scratch inside AWS. Has anyone successfully run Devuan 
ascii on AWS?

Is there anything special that needs to be installed, like open-vm-tools in 
VMware? Any other considerations to take into account?

Thanks
—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] pmount with exfat

[wirelessduck--- via Dng]

Upgraded a test system running Ascii with Xfce4 to Beowulf today.

I noticed that the old system had consolekit and udisks2/gvfs installed and the 
upgrade for udisks2 in beowulf wanted to install elogind.

In this case I decided to ditch udisks2 and try out pmount, but I’ve noticed 
that pmount doesn’t like exfat filesystems. I can see the bug report on Debian 
and Ubuntu for pmount has a patch sitting for years unapplied. Has anyone seen 
a workaround for this, or will I have to run mount as root manually for exfat 
formatted USB sticks?

This system is running fine with consolekit2 so I don’t feel like switching to 
elogind and installing udisks2 again.

Thanks
—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] simple-netaid-backend debugged.

[wirelessduck--- via Dng]

> I'm also working on an alternative to poettering's ifplugd for the 
> automatically wired connect option of simple-netaid.
> 
> Aitor.
> 

Can you borrow code from netplug for that? It does the same as ifplugd.

—Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Request for testing of slim/experimental

[wirelessduck--- via Dng]

> Yes, though I just discovered it on my system, and whilst I believe it's
> a plain, dist-upgraded ascii with a well-defined couple of variations,
> I've also "fixed things"(tm).
> 
> Does anyone else have bogus 'w'/'last' reports?

I’m running consolekit with lightdm on a regular ascii.

I just installed slim alongside lightdm and set it as default. Rebooted and 
logged in via slim.

I get nothing listed when running 'w' and 'who'. Checking output of 'last' 
shows the reboot time correctly but my slim login doesn’t appear at all.

I switched back to lightdm and I see my user appearing in the output of both 
'w' and 'who'.  The 'last' output also shows my lightdm login from tty7.

I should note that this login account comes from winbind, but I don’t think 
that should be affecting this at all?

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] WAIT_ONLINE_METHOD=none

[wirelessduck--- via Dng]

> On 18 Feb 2019, at 21:50, Didier Kryn  wrote:
> 
>> Le 17/02/2019 à 17:29, Mike Tubby a écrit :
>> If you install 'haveged' package /dev/random and /dev/urandom should (a) be 
>> better quality and (b) programs that need chunks of random data such as SSL 
>> on start-up should come up more quickly, i.e. not block waiting
> 
> 
> Looks kije a great suggestion. I'd never heared of it.
> 
> Shouldn't this package be recommended, or at least suggested, by things 
> like openssl and openssh ?

The quality of entropy from haveged is not guaranteed.

https://security.stackexchange.com/questions/34523/is-it-appropriate-to-use-haveged-as-a-source-of-entropy-on-virtual-machines

https://lwn.net/Articles/525459/

Maybe rng tools might be a better option if you are low on entropy? I don’t 
claim to be an expert on security or crypto though.

https://wiki.archlinux.org/index.php/Rng-tools

—Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Creating directory in /var/run on bootup

[wirelessduck--- via Dng]

I'm running the barman backup software for PostgreSQL and the
documentation says I should configure the lockfile directory to be on
a volatile partition like /var/run/barman.

Since this software runs every minute via cron instead of having a
daemon process, there is no service script in /etc/init.d/ that I can
use to create the /var/run/barman directory.

What is the recommended alternative way to create a sub-directory of
/var/run on bootup for non-daemon software?

--Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Debian dev takes a break from packaging systemd

[wirelessduck--- via Dng]

https://soylentnews.org/article.pl?sid=19/01/21/042251

“Michael Biebl, long-time maintainer of systemd for Debian (2010 or earlier, 
based on changelog.Debian.gz), is taking undetermined holidays from packaging 
it.”

“Will stop maintaining systemd in debian for a while.
What's going on is just too stupid/crazy.”

—Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Request for comments - training room

[wirelessduck]

> On 4 Dec 2018, at 00:51, Bruce Ferrell  wrote:
> 
> I've found that AD is VERY sensitive to time differences, even in a pure 
> windows environment.  How Windows admins tolerate it I have yet to figure out.

That would be from Kerberos? That’s a requirement regardless of using AD or MIT 
Kerberos. The solution is NTP everywhere, talking back to the Domain 
Controllers as local time servers.

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Network error after upgrading packages on beowulf

[wirelessduck]

I ran a package update on a beowulf server last week, and now when I
login via SSH I have noticed that networking appears to be partially
broken.  I can ping localhost, but no hosts outside of the machine,
either from local subnet or external like google.  There seems to be
no outbound networking working.

# ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
ping: sendmsg: Operation not permitted
ping: sendmsg: Operation not permitted
ping: sendmsg: Operation not permitted
ping: sendmsg: Operation not permitted
^C

# host google.com
;; connection timed out; no servers could be reached

# cat /etc/resolv.conf
nameserver 8.8.8.8
nameserver 8.8.4.4

# ping 127.0.0.1
PING 127.0.0.1 (127.0.0.1) 56(84) bytes of data.
64 bytes from 127.0.0.1: icmp_seq=1 ttl=64 time=0.067 ms
64 bytes from 127.0.0.1: icmp_seq=2 ttl=64 time=0.062 ms
64 bytes from 127.0.0.1: icmp_seq=3 ttl=64 time=0.063 ms
64 bytes from 127.0.0.1: icmp_seq=4 ttl=64 time=0.063 ms
^C

# traceroute localhost
traceroute to localhost (127.0.0.1), 30 hops max, 60 byte packets
 1  localhost (127.0.0.1)  0.061 ms  0.027 ms  0.023 ms

# traceroute 8.8.8.8
traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 60 byte packets
send: Operation not permitted

# wget -O- checkip.dyndns.com
--2018-11-12 11:35:02--  http://checkip.dyndns.com/
Resolving checkip.dyndns.com (checkip.dyndns.com)... failed: Temporary
failure in name resolution.
wget: unable to resolve host address ‘checkip.dyndns.com’

Have there been any problematic package updates for beowulf/buster in
the past week?

Is there any way to recover from this, or am I stuck with reinstalling?

--Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Implementing directory services/Kerberos

[wirelessduck]

On Fri, 9 Nov 2018 at 17:20, Martin Steigerwald  wrote:
>
> Héctor González - 09.11.18, 00:02:
> > >> Quoting wirelessd...@gmail.com (wirelessd...@gmail.com):
> > > [snip]
> > >
> > >>> So my next question is, whats the recommended package to
> > >>> authenticate
> > >>> with LDAP and allow users to login to a desktop via their LDAP
> > >>> account?  I've seen various options for PAM and NSS, but do I need
> > >>> to
> > >>> configure both or just one?
> > >
> > > [snip]
> >
> > You can use libpam-ldap for this, it handles the authentication part.
> […]
> > There is also nslcd, which I remember using with samba-ad, as nscd
> > didn´t like that ldap for some reason, and it has a different config
> > file /etc/nslcd.conf
> >
> > I´d use nscd first, and if you run into trouble try nslcd.
>
> I suggest using nslcd with libpam-ldapd and libnss-ldapd. It has several
> advantages¹.

Yes, I've tried libnss-ldapd with libpam-ldapd and nslcd, and it seems
to be working fine for ldap-based logins.  Thanks.

> Or use sssd, in case it can be installed without pulling libsystemd0 /
> systemd. But for that you'd need to create configuration file by hand.
> It is not very difficult, but it would configure with debconf questions
> like nslcd does.
>
> It may be an option to use 389 directory server instead of OpenLDAP.
> SUSE just made that move with SLES 15. And it has a GUI. I did not yet
> test it more thoroughly, so I have nothing more to say about it.

389 DS is part of the FreeIPA system, and my limited reading of it
previously was that it's not so fabulous when running on non-redhat
systems, hence why I decided to look at alternatives.

> Of course, if Kerberos is used, I'd use libpam-krb5, libpam-heimdal or
> libpam-shishi instead of libnss-ldapd. As nslcd recommends libpam-krb5,
> it might work together with it.

> Of course Samba as AD DC (ideally together with Heimdal instead of MIT
> Kerberos) is also an option.
>
> From what I saw with preparing training slides for all of these: I'd
> like something simpler, still secure for all of that. Kerberos and LDAP
> are hefty regarding their complexity.

Can kerberos integrate with an existing OpenLDAP database, or would I
have to maintain two separate user databases?

After a lot of reading, I'm still not sure how to implement Kerberos
properly with LDAP.  A lot of guides show how to install kerberos as a
standalone system, and when they also say "kerberos is often used with
OpenLDAP" they always include the proviso "but we won't describe how
to do that in this guide".

Thanks,

--Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Implementing directory services/Kerberos

[wirelessduck]

On Fri, 9 Nov 2018 at 10:02, Héctor González  wrote:
>
>
> >> Quoting wirelessd...@gmail.com (wirelessd...@gmail.com):
> > [snip]
> >>> So my next question is, whats the recommended package to authenticate
> >>> with LDAP and allow users to login to a desktop via their LDAP
> >>> account?  I've seen various options for PAM and NSS, but do I need to
> >>> configure both or just one?
> > [snip]
>
> You can use libpam-ldap for this, it handles the authentication part.
> NSS is used to "populate" your passwd and group files from ldap, if you
> need it.  Your users will work with just the PAM part, but It´s easier
> to use NSS so you can change permissions using usernames instead of
> UIDs.
>
> A "getent passwd user" will require libnss-ldap (and a working
> /etc/libnss-ldap.conf which should be autogenerated)
>
> If you choose to use nscd, you should replace the suggested-size passwd
>   option with a sufficient size for your expected amount of users, the
> manual says it is a hash table, so it should be a prime number bigger
> than double the amount of expected users -hint, the primes package from
> bsdgames can find primes for you).
>
> nscd acts as a cache for nss calls so you don´t flood your ldap server
> with queries.
>
> There is also nslcd, which I remember using with samba-ad, as nscd
> didn´t like that ldap for some reason, and it has a different config
> file /etc/nslcd.conf
>
> I´d use nscd first, and if you run into trouble try nslcd.
>

Thanks,

nslcd appears to be working fine here now.  I don't think I need to
fiddle with any nscd settings at this point in time.

--Tom

-- 
Please avoid sending me Word or PowerPoint attachments.
See http://www.gnu.org/philosophy/no-word-attachments.html
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Implementing directory services/Kerberos

[wirelessduck]

On Sat, 10 Nov 2018 at 15:45, Rick Moen  wrote:
>
> Quoting H??ctor Gonz??lez (ca...@genac.org):
>
> > There is also nslcd, which I remember using with samba-ad, as nscd
> > didn´t like that ldap for some reason, and it has a different
> > config file /etc/nslcd.conf
> >
> > I´d use nscd first, and if you run into trouble try nslcd.
>
> Again, back when I implemented this stuff using CentOS 6.x, you needed
> both for some daft reason.
>

Yes, I went with libnss-ldapd and it pulled in libpam-ldapd, nslcd,
and nscd, so it would appear that both are required.  nslcd seems to
provide the configuration file /etc/nslcd.conf that is used by both
libnss-ldapd and libpam-ldapd while nscd seems to be doing the caching
side of things.

--Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Online DNS & Bind Refeences.

[wirelessduck]

> On 6 Nov 2018, at 21:56, terryc  wrote:
> 
> 1. What do people recommend as online sources for Bind configuration
> these days.
> 
> 2. what programs do you recommend for checking the configuration files.
> 
> 
> LS; My antique hardware that was the nameserver and web for the LAN
> suffered a motherboard failure and I need to configure a replacement
> nameserver on the mail server.
> 
> The old bind configuration held strong, with minor fiddling from before
> version 8 and it has been easy to get as forwarding nameserver runnming.
> 
> The problem I'm hitting is the format of woa.com.au/192.168.0.0 zone
> files and despite carefully deriving ones from examples in the Debian
> wiki I'm getting conflicting error listing. Frustrating.
> 
> Hence asking for tips so I can keep some hair. TIA.

http://www.zytrax.com/books/dns/

It’s based on fedora so the configuration files and locations might be slightly 
different.

named-checkconf and named-checkzone will check your configuration files and 
zone files respectively.

HTH

—Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Everyone OK for using the logger program for runit logging?

[wirelessduck]

On Tue, 23 Oct 2018 at 07:37, Rick Moen  wrote:
> The mainstream choices (disregarding journald) in 2018 are rsyslog and
> syslog-ng, period.  A case could be made for either.  I _think_
> rsyslog remains more common.  I've personally only encountered
> syslog-ng in embedded logging appliances manufactured by Hungarian firm
> Balabit, which also is the primary code maintainer for the open source
> codebase, offering an enhanced proprietary version to customers.
> Consequently, syslog-ng can be considered a case of 'open core' in the
> sense that syslog-ng is always at risk of being the disregarded
> stepchild because more effort is put into the proprietary 'Premium Edition'.
> (This is part of the reason I personally continue to favour rsyslog,
> but not vehemently.)
>
> 2007 comparison:
> https://web.archive.org/web/20170612021518/http://blog.gerhards.net/2007/08/why-does-world-need-another-syslogd.html

Even Poettering recommends rsyslog for some use cases

https://github.com/systemd/systemd/issues/1291

--Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Devuan + remote desktop of Ubuntu = how?

[wirelessduck]

> ..you mean remmina?  https://en.wikipedia.org/wiki/Remmina
> https://packages.debian.org/search?keywords=remmina
> https://manpages.debian.org/stretch-backports/remmina/remmina.1.en.html

Sorry, yes. I blame autocorrect for that mistake.

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Devuan + remote desktop of Ubuntu = how?

[wirelessduck]

> 
> For Ubuntu there is Remina or like (if I recall the proper name) but duno 
> what needs for Devuan.
> 
> Misko

Remains is also available from ascii-backports.

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Stop the madness!

[wirelessduck]

> On 20 Oct 2018, at 12:55, Steve Litt  wrote:
> 
> Some folks are asking for automatic sysvinit init script generation, or
> else unit file to sysvinit init script converters. Some are asking
> Devuan's developers to prioritize their scarce programmer resources to
> modifying sysvinit, which is over 30 years old. Yet others think we
> should reimplement all the systemd functions in the Unix paradigm.
> 
> Stop the madness!
> 
> Systemd units are config files, like Win98 had, with one level of
> groups designated by square brackets, and a lower level of key value
> pairs with equal signs between key and value. In other words, a
> collection of pushbuttons and dials that you can choose from, and a
> rather large collection because, with the config file, you can no
> longer go offroad and do something special with a shellscript.
> 
> Think config files are simple? Well, look at the large collection of
> potentially conflicting and/or ambiguous systemd pushbuttons and dials:
> 
> https://www.digitalocean.com/community/tutorials/understanding-systemd-units-and-unit-files
> 
> And, of course, pushbuttons and dials by their very nature are
> limiting, so there will be more and more in the future to cover corner
> cases. Or the redhat funded project will eventually add a few places
> where you can put very restricted scripts to  go where the dials and
> buttons can't.
> 
> Some Devuaners will say "but wait, bad as that is, it's still better
> than modern init scripts." Those who say that have drunk Lennart's
> flavored drink and embraced the sysvinit/systemd false choice.
> 
> Runit uses shellscripts, embraces them heartily, and yet
> hardly a runit run script exceeds ten lines. Take a good look at this
> collection of runit run scripts, straight from runit's developer:
> 
> http://smarden.org/runit/runscripts.htm
> 
> Runit run scripts can do anything unit files can do, and more. Usually
> in under 10 lines. A couple months ago a snotty systemd fanboy chided
> me that runit couldn't start several processes at once. Oh yeah?
> 
> http://smarden.org/runit/faq.html#depends
> 
> And if you want the stopping of one service to stop others, that
> can be done too, via the finish script, which has knowledge of its
> supervised daemon's exit code.
> 
> I recently upgraded my unbound run script to start a shellscript to
> pre-load common domains into its cache:
> 
> ===
> #!/bin/sh
> if ping -4 -c1 8.8.8.8 > /dev/null; then
>(/etc/unbound/primecache.sh &) 
>exec unbound -dp
> else
>sleep 1
> fi
> ===
> 
> Let's review the preceding. A functioning network is required, hence
> the ping command. If the network is functioning, the primecache.sh
> program is run in the background, and then immediately this
> shellscript's process becomes the unbound executable. The primecache.sh
> program starts with a 2 second sleep, so there's no reasonable
> possiblity of a race condition where cache starts priming before
> unbound is run, unless there's something unusually wrong with unbound.
> 
> If no network, it sleeps a second and tries again. It would take only a
> few more lines of code to count to 10 tries and then sending a message
> and preventing further tries, but I personally think this would be
> overkill.
> 
> Lennart pats himself on the back for his parallel instantiation. Notice
> how I allowed primecache.sh to run, in the background, while other boot
> activities were done. But wait, there's more. Runit goes around in a
> circle, creating 1 daemon supervisors, without stopping to wait if
> those 1 daemon supervisors succeed. In parallel, those 1 daemon
> supervisors each start their daemon, whether it takes 0.1 seconds or 30
> seconds.
> 
> IN OTHER WORDS...
> 
> If you're happy with sysvinit, that's fine. But if sysvinit no longer
> suits your use case, or you're afraid it will no longer work with
> systemd apps and daemons, then don't try to massively bring up to date
> the 30 year old jalopy from the days of Devo and Pat Banatar and
> distributors and carburetors, instead switch to something that already
> accommodates your needs: Runit (or s6).
> 
> And don't forget, until Devuan Devs get around to making the runit
> package a genuine PID1, you can, right now, today, run runit on top of
> sysvinit, and one by one switch services from /etc/rc.d/init.d scripts
> to runit run scripts, by shutting off the service on the sysvinit end,
> and downloading or making a runit run script and then making one
> symlink.
> 
> A lot of run scripts are available at
> http://smarden.org/runit/runscripts.htm . I will be curating a
> collection of more runit run scripts in the near future.
> 
> In other words, unless you view sysvinit as an antique to be kept
> around for sentimental value, don't put any work into it. Drive it
> while it fits your needs, then call the tow truck to tow it away and
> get your 

Re: [DNG] dig vs nslookup: was Weird network issue - slow to resolve IPs

[wirelessduck]

> On 17 Oct 2018, at 15:58, Steve Litt  wrote:
> 
> What's your opinion of nslookup as an alternative to dig? Not sure, but
> I think you need to install bind to get dig, and not everyone wants to
> install bind.

Since looking at Unbound and NSD, I’ve been trying out drill as an alternative 
developed by the same NLnet people.

https://www.nlnetlabs.nl/projects/ldns/about/

Install via the ldnsutils package.

—Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Implementing directory services/Kerberos

[wirelessduck]

I’m looking to setup some sort of directory services/network authentication for 
users on a small corporate network running Devuan Ascii. Is it recommended to 
use Kerberos+LDAP?

Are there any good tutorials out there for setting this up and explaining how 
it works? Where do people learn this stuff if they have no one else to learn 
from on the job?

I have a small amount of experience using Active Directory on a windows network 
and connecting some Linux servers to that with winbind but no direct experience 
in managing LDAP or Kerberos directly.

I have also taken a look at FusionDirectory and it looks relatively simple to 
use. Does anyone have experience/advice with this or other management 
interfaces? Implementing plain OpenLDAP and Kerberos directly looked incredibly 
complex and confusing when I attempted to read some of their documentation a 
while back.

Thanks

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] su root missing sbin on beowulf

[wirelessduck]

> On 22 Aug 2018, at 20:28, John Hughes  wrote:
> 
>> On 22/08/18 08:24, wirelessd...@gmail.com wrote:
>> I installed ascii onto a new machine with ascii-netinstall iso and 
>> immediately upgraded to beowulf. The machine is a headless VM and has no GUI 
>> installed.
>> 
>> I notice when I login to root with “su” the $PATH doesn’t contain any sbin 
>> folders, only bin. If I login to root with “su -“ then the $PATH is as 
>> expected.
>> 
>> I don’t notice this happening on any ascii installs. Is there something new 
>> in beowulf/buster default configuration?
> 
> Possibly a result of the fix for debian bug 833256

Yes, that looks like the exact issue. Cheers

https://unix.stackexchange.com/questions/460478/debian-su-and-su-path-differences___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] su root missing sbin on beowulf

[wirelessduck]

I installed ascii onto a new machine with ascii-netinstall iso and immediately 
upgraded to beowulf. The machine is a headless VM and has no GUI installed.

I notice when I login to root with “su” the $PATH doesn’t contain any sbin 
folders, only bin. If I login to root with “su -“ then the $PATH is as expected.

I don’t notice this happening on any ascii installs. Is there something new in 
beowulf/buster default configuration?

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Home server replacement hardware suggestions?

[wirelessduck]

On Wed, 11 Jul 2018 at 04:52, Clarke Sideroad  wrote:
>
> On 2018-07-10 11:41 AM, John Franklin wrote:
> >> On Jun 25, 2018, at 6:14 PM, taii...@gmx.com wrote:
> >>
> >> I have to say your current computer is more than powerful enough for
> >> your current uses and I would advise saving your money instead, perhaps
> >> instead just buy a SSD for the primary drive and some storage disks for
> >> storage.
> >> Your current system is also pre-PSP so it lacks AMD's version of the
> >> evil ME thus I very much suggest keeping it.
> >>
> >> If you insist on upgrading I would consider:
> > [snip]
> >
> > Reinforcing Taiidan’s suggestions, something built around a low TDP CPU 
> > would be good.  The power draw from the CPU is going to dominate the power 
> > consumption of the whole system, so going with something that has a low TDP 
> > will ensure you stay well inside your power budget.  Desktop systems tend 
> > to be in the 65W to 95W zone, there are some 35W parts that are common in 
> > all-in-one systems, or look for something intended for laptops and embedded 
> > systems that are 15W TDP.
> >
> > Unfortunately, you can’t just buy a Core i3 7100U (15W TDP) and install it 
> > in your choice of motherboard and install all that in your favorite case.  
> > You’re looking at either barebones system (like an Intel NUC or a barebones 
> > Shuttle) or a mini-ITX+CPU kit.  If you’re lucky, you can find a compact PC 
> > (think: one of the Dell small desktops) with a low TDP chip in it, probably 
> > a Celeron or Pentium Silver or the like.
> >
> > The FreeNAS forums will have some good hardware recommendations, although 
> > they may be biased towards systems with ECC memory support, a rare feature 
> > in the low TDP world.
> >
> > The good news is the last several years of CPU development have been all 
> > about performance per watt, not raw performance, so there are a lot of low 
> > TDP options out there with reasonable performance.  Since your A8-3850 has 
> > a 100W TDP,  just about anything will be an improvement.
> >
> > Good luck!
> >
> >
> The existing hardware is few years old and made up of desktop CPUs
> sharing a package with reasonably decent graphics processing, but not
> quite as bad as the picture you paint.
> It is quite a smart piece as long as you are not running something like
> Seti@home with your spare cycles.
> https://www.guru3d.com/articles-pages/amd-a8-3850-apu-review,10.html
>
> Clarke

Fortunately (or perhaps unfortunately), this machine has decided to
pick itself up again and continue running without a single issue.

Thanks for all the advice.  I'll keep those hardware suggestions in
mind and I'll be taking regular backups with clonezilla just-in-case
something untoward happens.

--Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

[wirelessduck]

Forgetting to hit reply-all :D

On Tue, 21 Aug 2018 at 13:20,  wrote:
>
> > I haven't been following OSX Server, so they are dropping DNS now ? It's 
> > always seemed like the unwanted stepchild, not really promoted or 
> > developed, and with no proper server hardware to run it on (I used to 
> > manage two of the original XServes with 10.3 in the past).
> > Is BIND in OSX Ports or Fink ?
>
> Most of the services are disappearing from the macOS Server app,
> making it almost useless for a home server environment.
> https://support.apple.com/en-au/HT208312
>
> Since it's running on an ancient Mac Mini, I'm considering ditching
> that server and switching to something more power-conservative (RPi?)
> running Devuan.
>
> --Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

[wirelessduck]

Forgetting to hit reply-all :D

On Tue, 21 Aug 2018 at 13:24,  wrote:
>
> On Tue, 21 Aug 2018 at 08:15, Steve Litt  wrote:
>
> > There are disadvantages to having the same software do both auth and
> > cache, and BIND is a big honkin complexity. See the djbdns
> > documentation for details. I think that's why the OP wanted unbound in
> > the first place.
> >
> > The unbound man page mentions nsd as an auth server companion to
> > unbound.
> >
> > I couldn't exactly understand the docs, but it sounds to me like you
> > set up nsd on the machine's IP address and unbound either on 127.0.0.1
> > or on an alias of your machine's IP address. Then, to unbound.conf, you
> > add a stub zone that points to your nsd server's address.
> >
> > SteveT
>
> Thanks Steve,
>
> I'm not much of a BIND9 expert, so I'll happily try out something else
> if it's considered to be more secure.
>
> I've found some potentially useful docs on the Arch linux wiki which I
> will go through to try and configure a nsd/unbound setup.
>
> https://wiki.archlinux.org/index.php/Nsd
> https://wiki.archlinux.org/index.php/Unbound
>
> --Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] DSA Ascii Aug20

[wirelessduck]

> On 21 Aug 2018, at 02:14, Hendrik Boom  wrote:
> 
>> On Mon, Aug 20, 2018 at 02:31:05PM +0100, leloft wrote:
>> 
>> Tue, 14 Aug 2018 21:52:19 +
>> [SECURITY] [DSA 4272-1] linux security update
>> version 4.9.110-3+deb9u2
>> Confirmed: ascii-proposed-updates
>> Note: this update has been superseded by version 4.9.110-3+deb9u3
>> confirmed present  in ascii-security.
>> Note: jessie-security contains version 4.9.110-3+deb9u2~deb8u1
>> 
>> To fully resolve these vulnerabilities it is also necessary to install
>> updated CPU microcode (only available in Debian non-free). Common server
>> class CPUs are covered in the update released as DSA 4273-1 (see below).
> 
> Any idea how the microcode updates work on a machine with a disabled 
> management engine? 
> 
> -- hendrik

Microcode runs on the CPU

https://superuser.com/questions/1283788/what-exactly-is-microcode-and-how-does-it-differ-from-firmware

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

[wirelessduck]

> On Tue, 7 Aug 2018 13:27:25 -0700
> Rick Moen  wrote:
> 
> 
>> Most highly rated comment:
>> 
>>  I run my own local recursive nameservers even on my portable
>>  devices. Totally not interested in using anyone's resolvers but my
>> own.
>> 
>> Ding!
>> 
>> 1. apt-get install unbound
>> 2. sed -i '1s;^;nameserver 127.0.0.1\n;' /etc/resolv.conf

I want to switch from macOS Server to unbound for a local LAN DNS as its DNS 
features will be deprecated soon, but my reading tells me that unbound only 
acts as a recursive nameserver, not authoritative. 

What’s the general consensus on a good authoritative server to pair with 
unbound?

I can see both knot and nsd are packaged in devuan, but have no experience with 
any outside BIND9 and macOS.

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] I need your help or another developer's help with the project devuan with the children

[wirelessduck]

> On 22 Jul 2018, at 23:17, Hendrik Boom  wrote:
> 
> Doesn't Raspberry pi normally boot from the microSD card it uses for its
> main file system?
> Thus all you need to do is make 50 copies of one SD card and stick them into
> the microSD card slots of the pi's.
> 
> So once you manage to make one bootable image, you won't need to make an
> installers.  You'll just need a machine to copy microsd cards.
> 
> I run my Raspberry pi with a stock microSD card image from Devuan.
> You should be able to do the same, and after booting, install or uninstall
> packages as desired.  THen replicate the resulting card 50 times for your
> 50 mchines.

If you’re running sshd on this you would want to regenerate the server keys for 
each individual installation?

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Home server replacement hardware suggestions?

[wirelessduck]

I have an old desktop at home running Devuan ascii for some basic
server/file storage functions.  Unfortunately the disk sounds like
it's almost dead so I took a clonezilla backup and now want to find
some replacement hardware.  Looking to get something a bit more power
conservative than this old desktop tower.

The old machine has an AMD A8-3850 APU with 1TB HDD and 4GB Ram,
sitting on a A75M-HVS motherboard.  I'm hoping I can just build/buy a
replacement of some sort and load the clonezilla backup directly onto
the new disk and just boot up, reinstalling the grub boot loader from
livecd?  Or will I have to reinstall if it's going onto different
hardware?

Does anyone have any suggestions on what to get or where to look?  Intel vs AMD?

--Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] (forw) [GoLugTech] Microsoft buys GitHub

[wirelessduck]

> On 5 Jun 2018, at 10:02, Jimmy Johnson  wrote:
> 
>> On 06/03/2018 06:01 PM, Rick Moen wrote:
>> For years, I've been politely telling representatives & users of open source
>> projects (Void Linux, many others) 'Hey, you might want to reconsider
>> outsourcing your entire source code repos to GitHub, and consider
>> instead deploying instead one of many actually open source, self-hosted
>> workalikes such as GitLab.'
>> I'm betting they'll see nothing wrong with outsourcing to a
>> proprietary-software firm run by people they don't know and have no
>> reason to trust, based on this news.  I'm glad it works for them.
>> Did I mention GitLab?  ;->
>> - Forwarded message from David Krauser via Tech  -
>> Date: Sun, 03 Jun 2018 18:51:18 -0400
>> From: David Krauser via Tech 
>> To: tech 
>> Subject: [GoLugTech] Microsoft buys GitHub
>> Reply-To: David Krauser , t...@golug.org
>> https://www.bloomberg.com/news/articles/2018-06-03/microsoft-is-said-to-have-agreed-to-acquire-coding-site-github
>> This makes me really uncomfortable.
>> - dk
> 
> 
> https://news.microsoft.com/2018/06/04/microsoft-to-acquire-github-for-7-5-billion/
>  
> I hope it's not to late for friendly open-source to get out of gethub.
> -- 
> Jimmy Johnson

How does this affect tools like NPM/Yarn, or even golang, that have direct 
specific integration with GitHub to download or import source code packages?

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Creating .deb packages with jenkins-debian-glue

[wirelessduck]

> On 31 May 2018, at 18:51, KatolaZ  wrote:
> 
>> On Thu, May 31, 2018 at 05:42:21PM +1000, Tom wrote:
>> Hi,
>> 
>> I'm trying to use dh_virtualenv and and jenkins-debian-glue to package
>> a python app into a .deb using jenkins.
>> 
>> I followed all the instructions on https://jenkins-debian-glue.org,
>> updating the steps where required for differences in the latest
>> Jenkins release, but I see errors when running the
>> jenkins-debian-glue-binaries job.
> 
> 
> Tom, if you just need the package locally, a better and easier way
> could be to just use dpkg-buildpackage. You need to satisfy the build
> deps locally, but apart from the that the process is quite
> straightforward.
> 
> jenkins-debian-glue is a bit too convoluted and requires some extra
> stuff that you really don't need to build the occasional package.
> 
> HTH
> 
> KatolaZ

Thanks, I’ll definitely take a look at that.

Are there any good tutorials out there on using dpkg-buildpackage and how to 
correctly manage the version, changelog, and other files used for the deb 
packaging? Most of the stuff I’ve seen is aimed towards providing deb packages 
for the official Debian package archive.

I noticed that jenkins-debian-glue goes and stores the built packages in 
something called reprepro that looks like a local apt repository?  Is this easy 
to use outside of jenkins-debian-glue?

What’s the generally recommended way to store and deploy release artifacts, in 
this case deb files, from Jenkins? Do I store them in something like this 
reprepro tool? Do I use a commercial tool like artifactory?

Thanks

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] npm and nodejs

[wirelessduck]

> On 23 May 2018, at 11:44, Hendrik Boom  wrote:
> 
> I'm trying to try out a package (joplin) that is built using nodejs.
> 
> Now the installation instructions seem to require npk, the nodejs package 
> manager.
> 
> And following links about npm, it appears that npm is part of nodejs.
> 
> But I have installed nodejs from the ascii repossitory and still don't seem 
> to be able to access npm.
> 
> There are some packages with npm in their names, but they look to be add-one 
> for npm rather than npm itself.
> 
> Any ideas?  Is this an area where the Devuan packages are broken?  Will I 
> have to go to foreign repositoories?
> 
> -- hendrik

If you want nodejs you should install from the nodesource apt repository to get 
the latest updates.

https://nodejs.org/en/download/package-manager/#debian-and-ubuntu-based-linux-distributions

https://github.com/nodesource/distributions/blob/master/README.md

Unfortunately those instructions rely on lsb_release providing the correct 
output. There is a bug with lsb-release in ascii where it relies on parsing 
sources.list for detection.  If “lsb_release -sc” returns “ascii” then you’re 
all fine but if it returns “testing” then you’ll just have to add the repo with 
the manual instructions.

The devuan releases are aliased in the installer script to the Debian releases 
so you should just use stretch in your sources list.

—Tom

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] LibreOffice removed with autoremove

[wirelessduck]

> On 22 May 2018, at 18:43, KatolaZ  wrote:
> 
> On Tue, May 22, 2018 at 12:56:48PM +1000, wirelessd...@gmail.com wrote:
> 
> [cut]
> 
>> 
>> After removing the packages.devuan.org you will want to downgrade your 
>> package version to the one from the pkgmaster.devuan.org repository.
>> 
> 
> packages.devuan.org and pkgmaster.devuan.org have the same version of
> any package. If anything, the former one is normally behind the latter
> one by about 24 hours...
> 
> My2Cents
> 
> KatolaZ

The problem on Vernon’s machine appears to be that his install of package 
libpython3.5-stdlib=3.5.3-3 which doesn’t appear in the devuan repositories and 
therefore is required to downgrade to get to the devuan 
libpython3.5-stdlib=3.5.3-1.

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] LibreOffice removed with autoremove

[wirelessduck]

>> 
>>  Try removing packages.devuan.org: it shouldn't be necessary when you have
>> pkgmaster.devuan.org active.  My output is:
>> 
>> libpython3.5-stdlib:
>>  Installed: 3.5.3-1
>>  Candidate: 3.5.3-1
>>  Version table:
>> *** 3.5.3-1 500
>>500 https://pkgmaster.devuan.org/merged ascii/main amd64 Packages
>>100 /var/lib/dpkg/status
>> 
>> 
>>> I have never used backports before.  I will have to search the
>>> archives or the forum for how to do it.
>>> 
>>> Vernon
>> 
>>  You can add the file /etc/apt/sources.list.d/devuan-ascii-backports.list
>> with the following lines:
>> 
>> deb https://pkgmaster.devuan.org/merged/ ascii-backports main
>> deb-src http://backports.devuan.org/merged/ ascii-backports main
>> 
>> and then you run the command:
>> 
>> apt-get -t ascii-backports --just-print install libreoffice
>> 
>> and you get the list of the (many) packages you'd update or install to their
>> backports version to install libreoffice-1:6.0.4~rc1-4~bpo9+2 (they're 43 in
>> my system).
>> 
>> 
>> Alessandro
>> 
>> On Mon, 21 May 2018 at 23:43:34 +0200
>> Alessandro Selli  wrote:
>> 
>>>  You can add the file /etc/apt/sources.list.d/devuan-ascii-backports.list
>>> with the following lines:
>>> 
>>> deb https://pkgmaster.devuan.org/merged/ ascii-backports main
>>> deb-src http://backports.devuan.org/merged/ ascii-backports main
>> 
>>  Sorry, the second line should read:
>> 
>> deb-src http://pkgmaster.devuan.org/merged/ ascii-backports main
>> 
>>  I didn't notice the error before because it's commented in my system.
>> 
>> 
>> Alessandro
>> 
> 
> Thank you Alessandro I will try that.
> 
> Also to all, sorry for changing the Subject line in the last post.
> 
> Vernon

After removing the packages.devuan.org you will want to downgrade your package 
version to the one from the pkgmaster.devuan.org repository.

apt-get install libpython3.5-stdlib=3.5.3-1
apt-mark auto libpython3.5-stdlib

The second command will just set the package back to automatically installed 
status within apt configuration.

After this you shouldn’t have any issues installing libreoffice 6 from 
backports using Allesandro’s instructions.

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Switching to OpenRC, including respawn

[wirelessduck]

> On 14 May 2018, at 18:51, Steve Litt  wrote:
> 
> One property of OpenRC is it has no facility to respawn a daemon when
> the old daemon crashes. Some folks like it this way, some don't, but
> it's a fact of OpenRC. Except...
> 
> There are two ways to have OpenRC respawn. Way 1 is to run the daemon
> from /etc/inittab, with the "respawn" flag. Remember, OpenRC doesn't
> have its own PID1, and traditionally uses sysvinit's PID1.
> 
> Way 2 is to have OpenRC run either runit or s6 from /etc/inittab with
> "respawn", and then to put all respawnable daemons in runit or s6.
> Running either runit or s6 *as a supervisor rather than an init* is
> dead-bang easy. Since about 2010 I've been doing something similar: I
> ran daemontools on top of sysvinit, and it always worked out great for
> me.
> 
> SteveT

I had a closer look at OpenRC docs and noticed they now include a built-in 
“supervise-daemon”[1] supervisor that can be used instead of the default 
start-stop-daemon.  It will restart a daemon if it terminates unexpectedly.

The only issue with it for my use case is that I couldn’t find any way to send 
an arbitrary signal to the supervised daemon without signalling it to stop. The 
problem being that the pidfile created exists for the individual supervisor 
process and not the supervised daemon process.

[1] https://github.com/OpenRC/openrc/blob/master/supervise-daemon-guide.md

—Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Switching to OpenRC

[wirelessduck]

> On 19 May 2018, at 12:36, Alessandro Selli <alessandrose...@linux.com> wrote:
> 
>  Sorry for breaking the thread, but I no longer have the original post to
> reply to.
> 
> Author: Steve Litt
> Date: 2018-05-15 16:55 +200
> To: dng
> Subject: Re: [DNG] Switching to OpenRC
> 
>> On Tue, 15 May 2018 23:39:24 +1000
>> Tom <wirelessduck@???> wrote:
>> 
>>> Thanks as always for your insightful information Steve. Much
>>> appreciated. As someone who knows very little about init systems,
>>> can you explain what this respawning business is all about?
>> 
>> Terminology: I call the init system we've used for 30 years "sysvinit".
> 
> [...]
> 
>>> I didn’t
>>> realise the existing sysv-rc
>> 
>> I assume here you mean sysvinit when you write sysv-rc.
> 
>  I think Tom is not referring to the whole init system, rather to just the
> rc scripts:
> 
> Pure SysV Devuan Ascii:
> 
> [alessandro@wkstn09 ~ ]$ dpkg-query --search /etc/init.d/rc
> sysv-rc: /etc/init.d/rc
> [alessandro@wkstn09 ~ ]$ 
> 
> SysV+OpenRC Devuan Ascii:
> 
> alessandro@kratom:~$ dpkg-query --search /etc/init.d/rc
> openrc: /etc/init.d/rc
> alessandro@kratom:~$

Originally, I really had no idea what I was referring to specifically. After 
some more poking around, I think you’re right. I said sysv-rc because I noticed 
that installing the openrc package would only uninstall/conflict with the 
sysv-rc package and not the rest of sysvinit.

Hopefully that clears things up a bit.

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] LibreOffice removed with autoremove

[wirelessduck]

> On 21 May 2018, at 13:35, Vernon Geiszler  wrote:
> 
> This is the output from apt-cache policy:
> 
> libpython3.5-stdlib:
>  Installed: 3.5.3-3
>  Candidate: 3.5.3-3
>  Version table:
> *** 3.5.3-3 100
>100 /var/lib/dpkg/status
> 3.5.3-1 500
>500 http://pkgmaster.devuan.org/merged ascii/main amd64 Packages
>500 http://packages.devuan.org/merged ascii/main amd64 Packages
> 
> I have never used backports before.  I will have to search the
> archives or the forum for how to do it.
> 
> Vernon

I can’t see that specific package version in the repository. Did you have any 
other non-devuan apt sources enabled at any point previously? Is there any 
relevant information in the output of “aptitude why libpython3.5-stdlib”?
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] LibreOffice removed with autoremove

[wirelessduck]

> On 21 May 2018, at 10:08, wirelessd...@gmail.com wrote:
> 
> 
>> On 21 May 2018, at 04:20, Vernon Geiszler  wrote:
>> 
>> Running ascii.  Did update then autoremove.  Did not look close enough
>> at the packages being removed.  Libreoffice was one package removed.
>> It will not install.  Going down through the dependencies that will
>> not install, I arrived at this:
>> 
>> The following packages have unmet dependencies:
>> libpython3.5 : Depends: libpython3.5-stdlib (= 3.5.3-1) but 3.5.3-3
>> is to be installed
>> E: Unable to correct problems, you have held broken packages.
>> 
>> 
>> 3.5.3-3 is showing installed.
>> 
>> Suggestions?
>> 
>> Thanks,
>> 
>> Vernon
> 
> I can only see 3.5.3-1 in the archive. Do you have other third-party repos 
> enabled?
> 
> What’s the output of “apt-cache policy libpython3.5-stdlib”?
> 
> —Tom

I should also note that I have had no problems installing libreoffice 
6.0.4~rc1-4~bpo9+2 from ascii-backports.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] LibreOffice removed with autoremove

[wirelessduck]

> On 21 May 2018, at 04:20, Vernon Geiszler  wrote:
> 
> Running ascii.  Did update then autoremove.  Did not look close enough
> at the packages being removed.  Libreoffice was one package removed.
> It will not install.  Going down through the dependencies that will
> not install, I arrived at this:
> 
> The following packages have unmet dependencies:
> libpython3.5 : Depends: libpython3.5-stdlib (= 3.5.3-1) but 3.5.3-3
> is to be installed
> E: Unable to correct problems, you have held broken packages.
> 
> 
> 3.5.3-3 is showing installed.
> 
> Suggestions?
> 
> Thanks,
> 
> Vernon

I can only see 3.5.3-1 in the archive. Do you have other third-party repos 
enabled?

What’s the output of “apt-cache policy libpython3.5-stdlib”?

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Switching to OpenRC

[wirelessduck]

I’ve read that the ascii RC has optional support for OpenRC. How can I switch 
to this on an existing system to try it out?

Is it simply a matter of running “apt-get install openrc”?

If I switch, will I have to create new service definition files for each 
existing daemon in /etc/init.d or can it read and reuse those files 
automatically?

Are there any good tutorials out there on using it, aside from the Gentoo 
documentation?

Thanks

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Congratulations! and some migration questions

[wirelessduck]

> On 11 May 2018, at 03:12, viverna  wrote:
> 
> il devuanizzato Didier Kryn  il 10-05-18 17:49:42 ha scritto:
>> does the job as it always did. In case you want your system to
>> deconfigure/reconfigure Ethernet interfaces when you unplug/replug the
>> cables, then 'apt-get install ifplugd'; it's potterware but it just works.
> I prefer to use netplug:
> apt-get install netplug
> it is not potterware.

Those suggestions are excellent. I am constantly switching network cables in my 
desktop and so had Network Manager installed to do it easily.

I’ve just installed netplug, configured /etc/network/interfaces, and have now 
happily ditched the extra Network Manager bloat running here. Interfaces still 
connect to dhcp automatically when cables are unplugged/plugged :D

Thanks

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] lsb_release on ascii

[wirelessduck]

> On 17 Apr 2018, at 06:34, aitor_czr  wrote:
> 
> The output of  'lsb_release -a' is defined in the 'base-files'  package. So, 
> for the same version of the package, you should get the same output. The 
> command needs the 'lsb-base' package to work, i think.

I just checked and both machines have both packages installed at the same 
version.

base-files: 9.9+devuan2.3
lsb-base: 4.1+devuan2

I noticed this problem was occurring when I added Devuan support to the 
official nodejs installer script which relies on output of “lsb_release -c -s”.

Running that command on the devuan2 machine will return “ascii” while running 
it on devuan1 returns “n/a”.

I’ve also seen other people on the nodejs bug report having the same issue 
while attempting to install nodejs on ascii.

https://github.com/nodesource/distributions/issues/490

—Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Unable to Install

[wirelessduck]

> On 14 Apr 2018, at 18:37, Florian Zieboll  wrote:
> 
> Am 14. April 2018 02:34:16 MESZ schrieb Vernon Geiszler 
> :
>> 
>> The jessie stick does boot.  It just won't retieve the binary-amd64
>> package.  The ascii stick shows no operating system.  It seems the
>> auto run is not working.  I just tried it on the tower I just
>> installed using the jessie stick and got no response.  It seems the
>> auto run is not working.
> 
> 
> Hallo Vernon,
> 
> did you verify the integrity of the stick? In doubt, I'd checksum the iso and 
> create a new boot stick. 
> 
> There are also a lot cheap USB sticks around, which anonce a higher capacity 
> than they actually have. The OS does not recognize this on write.
> 
> IIRC the installer has an option to verify its integrity, too.
> 
> Libre Grüße,
> 
> Florian

I’ve also found that too. Cheap USB sticks that work fine for file storage but 
have problems when trying to boot from the drive. 

Trying again with the same .iso on a better quality USB stick would work fine.

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Keys swapped on cordless keyboard.

[wirelessduck]

> On 10 Apr 2018, at 22:55, Erik Christiansen  wrote:
> 
> If there's some way to guess what map a Logitech wireless keyboard needs,
> it'd be really useful. Here in Australia, keyboards tend to be US or
> maybe US-international, whatever that is. (Found in the full list,
> option 4 in "dpkg-reconfigure console-data" dialogue)
> 

Does solaar tell you that?

https://pwr.github.io/Solaar/

There appears to be a package already in Debian and also a separate repo 
available from their website.

Almost all keyboards purchased in oz should be in standard US keyboard layout, 
usually 104/105 keys. You’d normally have to import from overseas to find one 
that’s in a foreign layout.

—Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] PostScript vs PCL

[wirelessduck]

Seeing all the rage against non-PS printing here recently, I’m wondering how 
PCL compares? Is it better/worse/equal to PostScript? Is there any reason to 
prefer one over the other?

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng