Re: [DNG] Chimaera CPU stuck

[wirelessduck--- via Dng]

> On 14 Sep 2022, at 15:24, Luciano Mannucci  wrote:
> 
> hello all!
> 
> I have a virtual machine running under kvm who started hanging giving
> this message just before it dies:
> 
> kernel:[  296.013011] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! 
> [swapper/0:0]
> 
> This happens only on high i/o load.
> The other virtual machines are all running with no problems.
> What should I do?
> 
> luciano.

Have you tried upgrading to the kernel from chimaera-backports?

Add sources for backports repository from https://www.devuan.org/os/packages 
and then `apt-get update && apt-get install -t chimaera-backports 
linux-image-amd64` should do it.___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] New Chimaera torrent file needs seeders.

[wirelessduck--- via Dng]

> On 12 Sep 2022, at 17:08, fraser kendall  wrote:
> 
> On Sun, 11 Sep 2022 11:43:12 -0400
> fsmithred via Dng  wrote:
> 
>> Please seed. Thanks.
> 
> Hi to all.  I have a headless backup machine (with about 2T spare
> capacity) that I'd be willing to use as a long-term seeding host, but I
> have no knowledge about how to do this securely, and it'd have to be
> managed via ssh. I have a couple of questions.
> 
> 1)  How do I get the client to continue to run after logging off? Is it
> as simple as a remote command: 
> 
> $ aria2c -V --seed-ratio=0.0 -d /home/devuan/torrent
> https://files.devuan.org/devuan_chimaera.torrent & exit
> 
> or should I keep the ssh instance open on the local host to monitor
> what's going on?
> 
> 2) Should the client be chrooted?
> 
> 3) Any advice on a secure aria2.conf would be appreciated.
> 
> Many thanks
> 
> fraser

I can’t speak to aria2, but transmission has a cli/remote client and daemon you 
can run on a headless server.

Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] connman missing from system menu

[wirelessduck--- via Dng]

> On 18 Aug 2022, at 02:52, Steve Litt  wrote:
> 
> My experience with LXDE and Openbox is that the system menu is pretty much 
> given to
> you on LXDE/Openbox install. My experience based on LXDE and Openbox on 
> Ubuntu,
> Debian and Void is that installing a package doesn't put the package's 
> executable in
> the LXDE or Openbox system menu. This is why I use dmenu as my main menu. 
> Dmenu is
> faster and requires no mouse.
> 
> SteveT

Can dmenu search and run applications from .desktop files like the 
xfce4-appfinder, or does it just search through executables in bin/ 
directories? I’ve been looking for an xfce4-appfinder replacement without dbus 
dependency.

Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] PAM ldap problems

[wirelessduck--- via Dng]

Hi,

I have a VPN server (devuan 4) connecting to my ldap server (devuan 4)
using libpam-ldapd, so it's running nslcd and using libpam-ldapd for
the pam_ldap implementation.
This is all working successfully and I am using the 'pam_authz_search'
option in /etc/nslcd.conf to control which users are allowed to login
to the server via console and ssh.

# pam_authz_search in /etc/nslcd.conf
pam_authz_search
(&(objectClass=inetOrgPerson)(objectClass=posixAccount)(uid=$username)(|(host=$hostname)(host=$fqdn)(&(host=\\*)(!(|(host=!$hostname)(host=!$fqdn))


My problem is that I am setting up OpenVPN on this server and
attempting to use openvpn-plugin-auth-pam.so provided by the openvpn
package to do the vpn username/password and TOTP authentication.

# /etc/openvpn/myserver.conf
plugin /usr/lib/openvpn/openvpn-plugin-auth-pam.so "openvpn login
USERNAME password PASSWORD"


While the 'pam_authz_search' option in nslcd.conf is working to
restrict users logging in directly to the server, it is also
preventing users from authenticating to the openvpn PAM service.

The openvpn PAM service is defined as:

# /etc/pam.d/openvpn
auth requisite pam_ldap.so minimum_uid=1000
# will be adding pam_google_authenticator.so at a later time here

If I remove the 'pam_authz_search' option from nslcd.conf then the
OpenVPN users can authenticate successfully.

Is there a different configuration I can set up to control users from
logging in to the console/ssh via LDAP host attributes, but also allow
different users to authenticate to openvpn PAM via an LDAP group
membership?

Surprisingly, if I have the 'pam_authz_search' option enabled in
nslcd.conf, I can still run `pamtester openvpn myvpnuser authenticate`
and it authenticates successfully without getting denied.  I'm not
sure why that should succeed?  Is pamtester bypassing nslcd?


-- 
Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Openvpn CVE fix in devuan chimaera

[wirelessduck--- via Dng]

> On 25 Jul 2022, at 02:21, Mark Hindley  wrote:
> 
> Tom,
> 
> On Mon, Jul 25, 2022 at 02:09:34AM +1000, wirelessd...@gmail.com wrote:
>>> I have just had a quick look and the commit seems to backport easily. New
>>> version for chimaera-security is en route.
>>> 
>>> Mark
>> 
>> Thanks for the quick update!
> 
> 2.5.1-3+devuan2 is now in chimaera-security and will propagate through 
> amprolla
> to the mirrors over the next few hours. Perhaps you could test it and verify
> there are no regressions?
> 
> Thanks.
> 
> Mark

Thanks Mark,

I’m setting up openvpn for the first time so it may take a while before I have 
a usable configuration for testing the new version.

Hopefully someone else on this list is able to verify the changes before I get 
to it.

Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Openvpn CVE fix in devuan chimaera

[wirelessduck--- via Dng]

> On 25 Jul 2022, at 01:51, Mark Hindley  wrote:
> On Sun, Jul 24, 2022 at 04:19:39PM +0100, Mark Hindley wrote:
>> Hi,
>> 
>> On Mon, Jul 25, 2022 at 12:46:09AM +1000, wirelessduck--- via Dng wrote:
>>>   I saw https://bugs.debian.org/1008015 on the Debian BTS which mentions
>>>   it was found in openvpn/2.5.1-3, openvpn/2.5.5-1 and fixed in
>>>   openvpn/2.5.6-1.
>>>   Devuan chimaera still has openvpn/2.5.1-3+devuan1. Debian bullseye is
>>>   also still showing openvpn/2.5.1-3 on packages.debian.org/openvpn.
>>>   How can I check to see if this patch has been applied to the devuan
>>>   package?
>> 
>> It hasn't, because it hasn't been backported, only fixed upstream in 2.5.6 
>> and 2.4.12.
>> It might be possible to do, but is considered a low-priority in Debian[1] and
>> doesn't have a DSA.
> 
> I have just had a quick look and the commit seems to backport easily. New
> version for chimaera-security is en route.
> 
> Mark

Thanks for the quick update! Apologies for not noticing this before I sent the 
previous message.

I’ll see if I can request the same fix in Debian bullseye so we don’t need to 
keep the extra patch in Devuan.

Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Openvpn CVE fix in devuan chimaera

[wirelessduck--- via Dng]

> On 25 Jul 2022, at 01:19, Mark Hindley  wrote:
> 
> Hi,
> 
>> On Mon, Jul 25, 2022 at 12:46:09AM +1000, wirelessduck--- via Dng wrote:
>>   I saw https://bugs.debian.org/1008015 on the Debian BTS which mentions
>>   it was found in openvpn/2.5.1-3, openvpn/2.5.5-1 and fixed in
>>   openvpn/2.5.6-1.
>> 
>>   Devuan chimaera still has openvpn/2.5.1-3+devuan1. Debian bullseye is
>>   also still showing openvpn/2.5.1-3 on packages.debian.org/openvpn.
>> 
>>   How can I check to see if this patch has been applied to the devuan
>>   package?
> 
> It hasn't, because it hasn't been backported, only fixed upstream in 2.5.6 
> and 2.4.12.
> It might be possible to do, but is considered a low-priority in Debian[1] and
> doesn't have a DSA.

From my reading of the bug it seems to only affect cases where multiple auth 
plugins are used together? I would agree that sounds low priority and unlikely 
to be used in most setups.

>>   Also, where do I look to see the differences between debian and devuan
>>   packages? I checked git.devuan.org in the suites/unstable branch of
>>   devuan/openvpn but that just looks like merge from Debian without any
>>   extra patches applied.
> 
> That branch is the correct place. If you run
> 
> git diff debian/master..suites/unstable
> 
> you will get the changes.
> 
> Mark
> 
> [1]  https://tracker.debian.org/pkg/openvpn

Thanks for that Mark. Noted for future reference.

-- 
Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Openvpn CVE fix in devuan chimaera

[wirelessduck--- via Dng]

Hi,

I saw https://bugs.debian.org/1008015 on the Debian BTS which mentions it was 
found in openvpn/2.5.1-3, openvpn/2.5.5-1 and fixed in openvpn/2.5.6-1.

Devuan chimaera still has openvpn/2.5.1-3+devuan1. Debian bullseye is also 
still showing openvpn/2.5.1-3 on packages.debian.org/openvpn.

How can I check to see if this patch has been applied to the devuan package?

Also, where do I look to see the differences between debian and devuan 
packages? I checked git.devuan.org in the suites/unstable branch of 
devuan/openvpn but that just looks like merge from Debian without any extra 
patches applied.

-- 
Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Lennart now working for Microsoft

[wirelessduck--- via Dng]

> On 9 Jul 2022, at 02:07, goli...@devuan.org wrote:
> 
> On 2022-07-08 08:57, Steve Litt wrote:
>> What scares me is if he starts putting Microsoft-centric stuff in
>> systemd, Linux will need to either migrate away from systemd or be
>> subsumed by microsoft.
>> SteveT
> 
> We'll be there to pick up the pieces . . .
> .
> .
> .
> .
> .
> .
> .
> .
> 
> . . . and say "we told you so"!
> 
> golinux

Here’s to hoping that Laurent Bercot’s (skarnet) new process supervision 
software arrives and is ready to go before any potential systemd implosion 
occurs.

Does anyone know where we can keep track of progress on that project? His 
website hasn’t seen any updates since the funding announcement a long time ago.

https://skarnet.com/projects/service-manager.html

-- 
Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] moving to a new system

[wirelessduck--- via Dng]

> On 27 Jun 2022, at 16:02, aitor  wrote:
> 
> 
> Hi,
>> On 25/6/22 3:57, wirelessduck--- via Dng wrote:
>> If your new drive is the same size, you could just transfer the entire 
>> system with clonezilla.
> Although you may have trouble with some metadata like .mozilla, .git...
> Cheers,
> Aitor.

How are .git and .mozilla affected by disk cloning?
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] moving to a new system

[wirelessduck--- via Dng]

> On 25 Jun 2022, at 00:06, o1bigtenor via Dng  wrote:
> 
> Greetings
> 
> Hoping that I'm not asking too many questions.
> 
> (moving from debian testing to devuan testing (daedalus)
> the old system is under 5.17.xx and the new one is on 5.18
> if that makes for differences)
> 
> (I've learnt the hard way that just winging things means a LOT more
> work and even a greater chance for issues.)
> 
> My existing system has been a work in progress for over 10 years. So
> I've gotten things
> set up quite the way that I like them so things change slowly but in
> that there are also
> less 'terror' moments when everything has gone 'goofy'.
> 
> Is there any way to move over things like settings (and all the other
> pamphernania) for browsers and libreoffice and the like?
> 
> I was thinking of doing things by using scp from the old system to the new 
> one.
> 
> Dunno if that would create issues or not.
> 
> Any better ideas - - - - well I'm all ears!!!

If your new drive is the same size, you could just transfer the entire system 
with clonezilla.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Hardware support for new Thinkpad?

[wirelessduck--- via Dng]

> On 27 Apr 2022, at 17:51, . via Dng  wrote:
> 
> I'll dig into adding proprietary drivers.  The Lenovo website only lists 
> Windows-based driver/firmware/BIOS updates, so that's no help.  Am I right 
> that the process for Debian and for Devuan should be about the same?
> 
> thanks again, -Bob

https://pcsupport.lenovo.com/au/en/products/laptops-and-netbooks/thinkpad-p-series-laptops/thinkpad-p1-gen-4-type-20y3-20y4/downloads/driver-list

If this is the correct page for your laptop, there is a bootable CD image that 
you should be able to copy to a USB drive with `dd` if you have one spare. Even 
though it mentions Windows, it shouldn’t matter as it’s a bootable CD image and 
won’t touch your hard drive. You should be able to select the USB drive from 
the bios boot menu if it is copied correctly to the usb drive.

There is also a bios update tool on that page that claims to be compatible with 
Debian 9 and might work under Devuan.

-- 
Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Hardware support for new Thinkpad?

[wirelessduck--- via Dng]

> On 24 Apr 2022, at 21:28, . via Dng  wrote:
> I just got a Thinkpad P1 gen 4, and Chimaera doesn't recognize the audio, 
> camera, or HDMI port (not to mention the fingerprint sensor in the power 
> switch).  I could use some guidance in what to look for...
> 
> It has a Tiger Lake-H processor, I don't know what chipset.  I think I need a 
> command like "lspci" to identify the multimedia hardware, but I don't know 
> what to look for.
> 
> For what it's worth, the last couple of releases of Ubuntu *do* support the 
> multimedia hardware.  Do I need to move to Daedalus?  If so, is there an 
> install package for that?
> 
> Thanks for any help in getting this machine up on Devuan.
> 
> -Bob Montante
> 

There is a page at https://thinkstation-specs.com/thinkpad/p1-gen-4-2021/ which 
appears to list some specs. Also a PDF at 
https://psref.lenovo.com/syspool/Sys/PDF/ThinkPad/ThinkPad_P1_Gen_4/ThinkPad_P1_Gen_4_Spec.pdf

Have you tried updating to the latest bios? That might help if there are any 
relevant bug fixes.

https://pcsupport.lenovo.com/au/en/products/laptops-and-netbooks/thinkpad-p-series-laptops/thinkpad-p1-gen-4-type-20y3-20y4/downloads/driver-list/

I would follow the advice of Gastón and install the kernel from 
chimaera-backports as it will be much simpler than trying to upgrade to 
daedalus.

https://www.devuan.org/os/packages

Add the backports repository to apt sources and then run

apt-get update && apt-get install -t chimaera-backports linux-image-amd64

-- 
Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] mouse driver question

[wirelessduck--- via Dng]

> On 24 Apr 2022, at 12:23, Olaf Meeuwissen via Dng  wrote:
> 
> Hi,
> 
> Antony Stone  writes:
> 
>>> On Saturday 23 April 2022 at 22:57:12, Florian Zieboll via Dng wrote:
>>> 
>>> On Sat, 23 Apr 2022 21:15:34 +0200 Antony Stone wrote:
 On Saturday 23 April 2022 at 21:11:18, Florian Zieboll via Dng wrote:
 
> Some time ago, in a similar situation, I had been successful with
> 
> $ find / | grep xorg.conf
 
 Personally I'd have gone for:
find / -name xorg.conf
>>> 
>>> I may be wrong (and nitpicking;) - but I think that your approach is
>>> less fast, as 'find' does the file name matching /before/ it continues
>>> searching - in opposite to just piping its output to grep and going on
>>> with running down the file system hierarchy without any interruption.
>> 
>> Interesting - and you're right.
>> 
>> I just tried several successive searches for a few unique filenames in a
>> directory tree (all files in the same directory, just in case the position 
>> made
>> a difference).
>> 
>> The first search took 6 minutes and clearly set up some cache of results,
>> because subsequent searches were consistently:
>> 
>>find . | grep filename : 20 seconds
>> 
>>find . -name filename : 25 seconds
>> 
>> That was consistent no matter whether the two filenames were the same, or
>> different but still in the same directory, and no matter which command was 
>> run
>> first.
>> 
>> Nice observation.
> 
> Indeed but you must have an awful lot of files, slow disks and/or a slow
> network connection.  After setting up the cache on my machine, I get 0.7
> seconds for the -name approach and 0.5 seconds for grep.
> That's with close to half a million filesystem entries and about 7000 of
> those on an NFS backed filesystem on the NAS downstairs.  The rest is on
> an SSD (NVMe).
> 
> Another point, the grep approach also lists everything below a directory
> that matches, whereas the -name approach does not.  That may be a lot of
> extra junk to scan through depending on what you're looking for.
> That's also why I suggested redirecting errors to /dev/null when looking
> for stuff below / as a normal user ;-)
> 
> Hope this helps,
> --
> Olaf Meeuwissen

How does this speed compare to mlocate or whatever is the preferred version of 
locate database these days?

-- 
Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Wifi problem - dhclient times out with no reply

[wirelessduck--- via Dng]

> On 18 Mar 2022, at 06:32, Joel Roth via Dng  wrote:
> 
> Thanks to Aitor (twice), Steve, Gregory, Simon for your
> informative suggestions. 
> 
> Associating my broadcom bcm43228 adapter with the wifi
> router has been hit-and-miss, mostly miss with a rare,
> inexplicable success. 
> 
> I tried the usual suspects - upgrading the system, 
> removing and reinstalling/reinserting the drivers.
> 
> It's not worth beating my head much more over this dodgy
> driver.  I can manage without wifi for now, at least until I
> can find a linux-friend USB wifi dongle.
> 
> To respond to Steve, for 10+ years I've never had problems
> with wpa_supplicant. Perhaps bugs in the wifi hardware or
> FIRMWARE have caused your wpa_supplicant to hang. Anyway
> you have a solution.
> 
> Again, thanks to all for your generous help.
> 
> joel

I’ve previously had success with some of the devices listed on GNU Respects 
Your Freedom website https://ryf.fsf.org/main-page, except now it seems they 
only go up to 802.11n and might be a bit outdated for some people if you need a 
faster network.

-- 
Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Installation problems on Dell T7810 + PERC H310

[wirelessduck--- via Dng]

> On 9 Mar 2022, at 20:03, Steve Litt  wrote:
> 
> So I created a Void installer thumb drive, using 
> cp void.img /dev/sdWhatever

Is there a difference between using cp and dd for this, or do they end up with 
identical results?
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Security implications of IPv4 vs IPv6 (was Re: Configuring ethernet port for IPv6)

[wirelessduck--- via Dng]

> On 29 Jan 2022, at 18:22, Joel Roth via Dng  wrote:
> 
> On Sat, Jan 29, 2022 at 01:22:57AM -0500, Steve Litt wrote:
> [redirecting to list, I think that's what you intended]
> 
>> Joel Roth said on Fri, 28 Jan 2022 15:19:35 -1000
> 
 On my next router, (probably OpenBSD/pf), I'm going to block all
 IPV6. I enjoy that the badguys have to jump through one more hoop
 (NAT) to hit me where it hurts.   
>>> 
>>> IPv6 does have some security features lacking in IPv4.
>> 
>> I didn't know that. What are some of those features and where can I
>> find out more about them?
> 
> A naive search turns up this article that seems credible: 
> 
> https://www.avast.com/c-ipv4-vs-ipv6-addresses
> 
> The site appears to belong to a VPN provider. 

Avast? Last I heard they did antivirus software for Windows. Might have changed 
business focus since I last heard years ago but a quick look on their website 
shows they still offer the AV. I guess every AV vendor is jumping on the VPN 
wagon these days. I hear Norton now bundles crypto mining with their AV, taking 
a share of your profits.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] The Daedalus desktop needs some love

[wirelessduck--- via Dng]

> On 23 Jan 2022, at 13:27, Olaf Meeuwissen via Dng  wrote:
> 
> Hi,
> 
> wirelessduck--- via Dng  writes:
> 
>> On 20 Jan 2022, at 23:33, Hendrik Boom  wrote:
>> 
>> It's nice if the desktop colours look good on a perfectly calibrated monitor.
>> But what's more important for it to look good on the variety of monitors
>> regular users use.
>> So we should test the imagery on the ordinary, everyday laptops and
>> monitors we have at home and work.
>> And it's important the the colours work even if one is colourblind.
>> I'd suggest viewing it converted to greyscale as a first try at testing
>> this, bt a friend of mine who is colourblind tells me it's far more
>> complicated than this.
>> 
>> -- hendrik
>> 
>> Can I suggest Color Oracle or similar as a tool to use here?
>> 
>> https://colororacle.org/
>> 
>> It allows you to apply a full screen filter to simulate what a colour
>> blind person would be seeing if they were viewing your monitor. It is
>> a Java app and I’ve only tested it on Windows some years ago but it
>> does say Linux compatible, with a link to source code on GitHub.
> 
> Web developer tools for Firefox and Chromium should also contain tools
> to simulate colour blindness and some other visual impairments.  I have
> played around with a tool for Chromium a while back but don't remember
> it's name.
> 
> Hope this helps,
> --
> Olaf Meeuwissen

There are tools included in both Firefox and chrome.

https://developer.mozilla.org/en-US/docs/Tools/Accessibility_inspector/Simulation

https://mobile.twitter.com/mathias/status/1237393102635012101

I prefer ColorOracle because it overlays the entire screen, not just a single 
window.

I tested it just now in Devuan 4 using Java 11 and it runs fine, adding the 
applet into the icon widget/system tray area of my tint2 panel in openbox.  I’m 
guessing it should work just fine also with XFCE or similar desktop environment.

You can run it after downloading and unzipping with:

java -jar ColorOracle.jar

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] ntp setup

[wirelessduck--- via Dng]

> On 20 Jan 2022, at 21:58, Steve Litt  wrote:
> 
> Rick Moen said on Tue, 22 Jun 2021 01:51:35 -0700
> 
>> Quoting Olaf Meeuwissen (paddy-h...@member.fsf.org):
>> 
>>> I think it's fair to point out that systemd-timesyncd only promises
>>> Simple NTP (SNTP).  How good a job it does of that is another matter
>>> but at least it explains some of the "quirks" you mention below.  
> 
> [snip]
> 
>> Or, to put it a different way, with several excellent genuine NTP
>> clients to choose among, I deny the existence of a compelling use-case 
>> for any SNTP client, 
> 
> I use openntpd. Is that NTP, or only SNTP? What are some full NTP time
> systems for Linux?
> 
> Thanks,
> 
> SteveT

I’ve used chrony as a NTP client and server on Devuan for many years.

https://chrony.tuxfamily.org/

There is a comparison to ntpd and openntpd but I’m not sure how up to date it 
is.

https://chrony.tuxfamily.org/comparison.html

-- 
Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] The Daedalus desktop needs some love

[wirelessduck--- via Dng]

> On 20 Jan 2022, at 23:33, Hendrik Boom  wrote:
> 
> On Wed, Jan 19, 2022 at 02:08:12PM -0700, Bob Proulx via Dng wrote:
>> goli...@devuan.org wrote:
>>> Lars Noodén wrote:
 What quality of display(s) and color calibration are required?
>>> 
>>> In all the years I have been doing this, that question has never entered my
>>> mind and I have no idea how to even begin answering it. I do "eye" art not
>>> "machine" art. I can perceive even one increment change in a hex.
>>> 
>>> Problem is . . . no one can know exactly what color another person is
>>> seeing. Add to that the vagaries of the monitor and . . .
>>> 
>>> I don't know if a screenshot would capture the hex or what's showing on your
>>> monitor but maybe you could give it a try for the chimaera desktop and let
>>> us have a look.
>> 
>> I just want to comment that I have two identical model displays side
>> by side in a dual monitor configuration on my desktop.  Both are
>> identical as far as any model vendor and number are concerned.  Yet
>> side by side it is pretty obvious to me that they have a difference in
>> color tone between them.  They are definitely not the same even though
>> by specification they will be the same.
>> 
>> The first order difference in my two monitors I think is that the
>> backlight is not identical between them.  One shows a slightly warmer
>> color hue to the backlight from the other.  I think that swamps other
>> effects causing differences in my "matched pair".
>> 
>> None of this really has any effect on how nice a color theme looks on
>> the displays though.  That's an art project more than a science project.
>> 
>> Bob
> 
> It's nice if the desktop colours look good on a perfectly calibrated monitor.
> But what's more important for it to look good on the variety of monitors
> regular users use.
> So we should test the imagery on the ordinary, everyday laptops and
> monitors we have at home and work.
> And it's important the the colours work even if one is colourblind.
> I'd suggest viewing it converted to greyscale as a first try at testing
> this, bt a friend of mine who is colourblind tells me it's far more
> complicated than this. 
> 
> -- hendrik

Can I suggest Color Oracle or similar as a tool to use here?

https://colororacle.org/

It allows you to apply a full screen filter to simulate what a colour blind 
person would be seeing if they were viewing your monitor. It is a Java app and 
I’ve only tested it on Windows some years ago but it does say Linux compatible, 
with a link to source code on GitHub.

-- 
Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Early Days at Bell Labs - Youtube, the systemd of video

[wirelessduck--- via Dng]

> On 16 Jan 2022, at 23:38, Dr. Nikolaus Klepp via Dng  
> wrote:
> 
> Install umatrix + ublock-origin and that pestilence is gone. Be aware that 
> you'll have to fiddle with umatrix to get videos playing.

uMatrix is EOL and the GitHub repository archived a long time ago.

You can achieve similar functionality with just ublock origin with the advanced 
mode dynamic filtering.

https://github.com/gorhill/uBlock/wiki/Dynamic-filtering:-quick-guide___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] nftables firewall and fail2ban replacement.

[wirelessduck--- via Dng]

> On 16 Jan 2022, at 19:41, onefang  wrote:
> 
> On 2022-01-16 17:23:29, wirelessduck--- via Dng wrote:
>> 
>> 
>>>> On 16 Jan 2022, at 12:54, Bob Proulx via Dng  wrote:
>>> 
>>>> Any suggestions?
>>> 
>>> I am not really happy with any of the programs I have looked at
>>> either.
>>> 
>>> Ubuntu really pushes ufw but it feels too complicated to me.  (Joking
>>> because it is supposed to be the Uncomplicated Firewall.)  But I don't
>>> like that one shapes ufw in bits and pieces like crafting clay on a
>>> pottery table.  I would much rather have a file with the rules (or at
>>> least most of them) in one place that then could get version
>>> controlled and copied around.  ufw does maintain files behind the
>>> scenes though so perhaps one could hack at those files directly and
>>> avoid the command line interface.
>>> 
>>> Bob
>> 
>> Have you tried firehol? It uses configuration files to set firewall rules 
>> for both inbound and outbound connections.
>> 
>> https://firehol.org/
> 
> firehol doesn't support nftables.  Yet, looks like they been thinking
> about it for years.

Ahh thanks. I just read the bug report and looks like it might not happen 
anytime soon.

https://github.com/firehol/firehol/issues/48

I looked at ferm but that appears to be similar and won’t be updated to support 
nftables. There was a bug filed to netfilter for some usability improvements 
that might be useful if switching to plain nftables configuration files.

https://bugzilla.netfilter.org/show_bug.cgi?id=1434

I also found APF which might be a good alternative frontend.

https://www.rfxn.com/projects/advanced-policy-firewall/___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] nftables firewall and fail2ban replacement.

[wirelessduck--- via Dng]

> On 16 Jan 2022, at 12:54, Bob Proulx via Dng  wrote:
> 
>> Any suggestions?
> 
> I am not really happy with any of the programs I have looked at
> either.
> 
> Ubuntu really pushes ufw but it feels too complicated to me.  (Joking
> because it is supposed to be the Uncomplicated Firewall.)  But I don't
> like that one shapes ufw in bits and pieces like crafting clay on a
> pottery table.  I would much rather have a file with the rules (or at
> least most of them) in one place that then could get version
> controlled and copied around.  ufw does maintain files behind the
> scenes though so perhaps one could hack at those files directly and
> avoid the command line interface.
> 
> Bob

Have you tried firehol? It uses configuration files to set firewall rules for 
both inbound and outbound connections.

https://firehol.org/___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] request for assistance

[wirelessduck--- via Dng]

> On 7 Jan 2022, at 22:02, o1bigtenor via Dng  wrote:
> 
> Greetings
> 
> Basic question is: what happened?
> 
> I wanted to update a beowulf system.
> So did the apt update, apt upgrade, apt dist-upgrade
> after changing the references in /etc/apt/sources.list
> from beowulf to chimaera.
> 
> After reboot - - - well - - - screen says devuan but
> uname -r is 4.19.xx and not 5.10.xx
> 
> Any ideas as to how I update the kernel?
> 
> TIA
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Do you have the linux-image-amd64 package installed? This is the meta-package 
that depends on the latest Linux kernel package for the currently installed 
release; 4.19 for beowulf and 5.10 for chimaera. Without this package there is 
nothing to tell APT to install the newer kernel package on dist-upgrade.

https://pkginfo.devuan.org/cgi-bin/policy-query.html?c=package&q=linux-image-amd64&x=submit___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] fail2ban running out of memory during beowulf -> chimaera upgrade?

[wirelessduck--- via Dng]

> On 22 Dec 2021, at 07:51, Alexander Bochmann  wrote:
> 
> Hi -
> 
> this is not a Devuan-specific problem, since I've also had it 
> happen when upgrading a Debian system:
> 
> During the dist-upgrade process, fail2ban is restarted and 
> then tries to do something with the previous sqlite database 
> that's stored in /var/lib/fail2ban/fail2ban.sqlite3 by default.
> 
> While working on the db, the fail2ban python3 process eats 
> up all available memory, and gets killed by the oom killer, 
> leaving behind a timestamped copy of the sqlite file. Depending 
> on the size of the database, this cycle repeats quickly, using 
> up (all) disk space on the way. The problem can be solved by 
> just removing the old database file and restarting fail2ban.
> 
> Did this hit anyone else? I haven't seen it mentioned 
> anywhere, but I've run into this several times now.
> 
> Alex.

I didn’t look to see if there were OOM issues but I did notice fail2ban not 
upgrading due to an existing process still running. For whatever reason, the 
upgrade scripts in the chimaera/bullseye .deb weren’t handling this properly.

I now just stop the fail2ban process on Beowulf before running the upgrade to 
chimaera, and it seems to work without failing.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Pipewire and PulseAudio: apulse & firefox

[wirelessduck--- via Dng]

> On 21 Dec 2021, at 07:37, Steve Litt  wrote:
> 
> Olaf Meeuwissen via Dng said on Mon, 20 Dec 2021 18:49:59 +0900
> 
> 
> 
>> 
>> ACK.  I really wish the xfce4-pulseaudio-plugin dependency were
>> downgraded to a Recommends:.  Note to self, submit a bugreport!
>> 
>> # Don't mind if someone else beats me to it.  If so, submit to Debian
>> # BTS cuz this ain't no Devuan bug.
>> 
>> While I agree that marking all dependencies of xfce4 is a PITA, the
>> list is not all that long.  Even if it were
>> 
>> sudo apt-mark manual \
>>  $(dpkg-query -W -f '${Depends}\n' xfce4
>>   | sed 's/([^)]*)//g; s/,//g')
>> 
>> should do the trick.
>> 
>> Warning: Check the output of the command in $() before feeding it to
>>   apt-mark.  If there's any `|` in there, DON'T feed it to apt-mark.
>> 
>> After that you can, in theory,
>> 
>> apt purge xfce4-pulseaudio-plugin
>> 
>> without losing your xfce4 dependencies.
>> 
>> URK!  Dogfooding this, I am told that another 150+ are going to be
>> purged, most likely because of task-desktop and task-xfce-desktop being
>> automatically installed.
>> 
>> Hmm, doesn't look as easy as I first thought.
> 
> About the only positive thing I can say about xfce is it's better than
> Gnome, KDE and the now defunct Unity. Except compared to those, it's
> not particularly lightweight, and my experience is it's been quirky on
> Linux (but not OpenBSD) for the past decade, at least. There are so
> many great WMDEs (Window Manager/Desktop Environment) that it's a shame
> to use xfce.
> 
> I use Openbox and have no problems, ever. When I take it on the road
> and want a complete setup with panel, I use LXDE, which is a panel and
> various programs to run with Openbox. If LXDE isn't available, LXQt is
> almost as good. I have info on how to set it up at:
> 
> http://www.troubleshooters.com/linux/quickhacks.htm#startxlxqt
> 
> Other outstanding WMDEs include fvwm, IceWM, Windowmaker, jwm, i9, and
> a host of others. From my perspective, there's absolutely no reason to
> use xfce.
> 
> SteveT

I followed your guide for openbox and it’s quite nice, combined with tilda for 
console and tint2 for panel. Adding the 6 pixel left margin is a nice hack to 
always have access to the openbox menu even with full screen applications!

Do you have any suggestions on a replacement for xfce4-appfinder that can 
search through .desktop files as well as $PATH? The nice thing about 
xfce4-appfinder is the two separate interfaces for searching .desktop (alt+F3) 
and $PATH (alt+F2).
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Migrating from Docker to Podman

[wirelessduck--- via Dng]

> On 10 Dec 2021, at 19:01, wirelessd...@gmail.com wrote:
> 
> 
> 
>>> On 10 Dec 2021, at 18:27, d...@d404.nl wrote:
>>> 
>>> On 10-12-2021 02:57, wirelessduck--- via Dng wrote:
>>> Has anyone noticed issues when trying to switch from Docker to Podman
>>> in Devuan chimaera?
>>> 
>>> I'm getting an error when trying to run the latest `hadolint` image in
>>> Podman which doesn't occur under Docker.
>>> 
>>> $ docker run -it docker.io/hadolint/hadolint:v2.8.0 hadolint
>>> Please provide a Dockerfile
>>> 
>>> $ podman run -it docker.io/hadolint/hadolint:v2.8.0 hadolint
>>> hadolint: getXdgDirectory:getHomeDirectory:getUserEntryForID: does not
>>> exist (No such file or directory)
>>> 
>>> Does this happen for anyone else, or have I broken something?  I just
>>> uninstalled docker and ran `apt-get install podman
>>> debian-podman-config-override` so I haven't touched any other
>>> configuration settings yet.
>>> 
>>> Podman does provide an upstream package repository
>>> (https://build.opensuse.org/package/show/devel:kubic:libcontainers:stable/podman)
>>> which I wanted to use to try the newer release version but
>>> unfortunately their podman package has a dependency on
>>> `dbus-user-session` making it unusable from Devuan.  I'll try to spin
>>> up a daedalus VM to test the newer version if the repositories for
>>> that are ready to go.
>>> 
>> If i remember correctly Podman coming from Redhat depends heavily on systemd 
>> which is of course not available in Devuan. But please let us know if you 
>> succeed to run it under Devuan.
>> 
>> Grtz
>> 
>> Nick
> 
> The packages in the Debian archive do not have a systemd dependency, for both 
> bullseye/chimaera and also bookworm/daedalus and also sid/ceres too.
> 
> I can run the hello-world image, and also the hadolint-debian and 
> hadolint-alpine images too without problem.

So after more testing with Devuan testing and Debian testing it fails on both 
of those for the latest Podman version.

If I test on Debian 11 with the upstream Kubic repository, then it is 
successful.

This leads me to think there is possibly something missing from the Debian 
packaging for Podman. I will report on Debian BTS.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Migrating from Docker to Podman

[wirelessduck--- via Dng]

> On 10 Dec 2021, at 18:27, d...@d404.nl wrote:
> 
> On 10-12-2021 02:57, wirelessduck--- via Dng wrote:
>> Has anyone noticed issues when trying to switch from Docker to Podman
>> in Devuan chimaera?
>> 
>> I'm getting an error when trying to run the latest `hadolint` image in
>> Podman which doesn't occur under Docker.
>> 
>> $ docker run -it docker.io/hadolint/hadolint:v2.8.0 hadolint
>> Please provide a Dockerfile
>> 
>> $ podman run -it docker.io/hadolint/hadolint:v2.8.0 hadolint
>> hadolint: getXdgDirectory:getHomeDirectory:getUserEntryForID: does not
>> exist (No such file or directory)
>> 
>> Does this happen for anyone else, or have I broken something?  I just
>> uninstalled docker and ran `apt-get install podman
>> debian-podman-config-override` so I haven't touched any other
>> configuration settings yet.
>> 
>> Podman does provide an upstream package repository
>> (https://build.opensuse.org/package/show/devel:kubic:libcontainers:stable/podman)
>> which I wanted to use to try the newer release version but
>> unfortunately their podman package has a dependency on
>> `dbus-user-session` making it unusable from Devuan.  I'll try to spin
>> up a daedalus VM to test the newer version if the repositories for
>> that are ready to go.
>> 
> If i remember correctly Podman coming from Redhat depends heavily on systemd 
> which is of course not available in Devuan. But please let us know if you 
> succeed to run it under Devuan.
> 
> Grtz
> 
> Nick

The packages in the Debian archive do not have a systemd dependency, for both 
bullseye/chimaera and also bookworm/daedalus and also sid/ceres too.

I can run the hello-world image, and also the hadolint-debian and 
hadolint-alpine images too without problem.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Migrating from Docker to Podman

[wirelessduck--- via Dng]

Has anyone noticed issues when trying to switch from Docker to Podman
in Devuan chimaera?

I'm getting an error when trying to run the latest `hadolint` image in
Podman which doesn't occur under Docker.

$ docker run -it docker.io/hadolint/hadolint:v2.8.0 hadolint
Please provide a Dockerfile

$ podman run -it docker.io/hadolint/hadolint:v2.8.0 hadolint
hadolint: getXdgDirectory:getHomeDirectory:getUserEntryForID: does not
exist (No such file or directory)

Does this happen for anyone else, or have I broken something?  I just
uninstalled docker and ran `apt-get install podman
debian-podman-config-override` so I haven't touched any other
configuration settings yet.

Podman does provide an upstream package repository
(https://build.opensuse.org/package/show/devel:kubic:libcontainers:stable/podman)
which I wanted to use to try the newer release version but
unfortunately their podman package has a dependency on
`dbus-user-session` making it unusable from Devuan.  I'll try to spin
up a daedalus VM to test the newer version if the repositories for
that are ready to go.

-- 
Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] networking thinking

[wirelessduck--- via Dng]

> On 29 Nov 2021, at 01:07, tito via Dng  wrote:
> 
> On Sun, 28 Nov 2021 07:20:14 -0600
> o1bigtenor via Dng  wrote:
> 
>> Greetings
>> 
>> In anticipation of a fiber optical connection (moving from a wireless) I
>> have been planning out and purchasing some bits of hardware. Am finding
>> that networking is, at least sure seems to be, another black hole for time
>> and effort.
>> 
>> TL;DR (skip to last paragraphs for the question(s))
>> 
>> At present this is a soho office kind of installation but that will slowly
>> be morphing into something that is at least somewhat larger. There are a
>> number of input sensor locations being worked on some of which would be
>> generating, initially at least, up to 15 data streams sampled possibly
>> every second (some maybe more often - - - decisions aren't all done as yet)
>> so there will be a fair amount of data running around on my network which
>> I'm trying to keep largely a wired affair.
>> 
>> At this point I'm working on the three entry bits of hardware (and their
>> software) - - - the router, hardware firewall, and the managed switch. The
>> initial hockup on the fiber system is going to be at 250 Mbps sysmetric.
>> 
>> For the router I'm planning on using OpenWRT running on a Nanopi r4s which
>> according to the folks over on openwrt capable of even very close to full
>> Gbps speeds (IIRC tested to some 918 Mbps) which would give some headroom
>> for future increases although I don't see a need for the foreseeable
>> future.
>> 
>> For the switch I have found myself a XyZel 1900-48 that I'm working on
>> getting OpenWRT on. This ability to run a managed switch on OpenWRT is
>> somewhat new but its open source and I'm not tied (I don't think) to
>> OpenWRT - - - - except I don't know any other real alternative - - - so
>> that's not a difficult solution either. I don't 'need' 48 ports but I have
>> 16 at present on a hub and its almost full and that's for stuff only here
>> in the orifice (sic!). I also want the capabilities of forcing streaming
>> services and wireless communications to not collect any more data from any
>> other part of the network (using VLANs) as is possible.
>> 
>> Then lastly to the hardware firewall.
>> I've been looking at pfsense and opnsense. Both are ipv6 possible although
>> both are mostly focused on ipv4 at the present. IPfire seems to have gotten
>> itself into a holding pattern and is not continuing work toward ipv6
>> functionality. Any one of these options are producing headaches when I'm
>> trying to figure out how to configure them - - - nothing installed at
>> present, just researching so far.
>> 
>> So - - - - questions - - - -
>> 1. is my splitting the network system into the three parts a good idea or
>> should I truncate parts 1 and 2 into the router? If you would please give
>> reasons - - - please?
> 
> Hi,
> 
> If you want to have reliability splitting is good, if the router breaks
> you still have a working firewall and switch and so on.
> If you want also some redundancy you should think of buying 
> two of everything:
> 
> 2 routers 
> 2 firewalls
> 2 switches (2 x24 rather than 1x48 ports)
> 
> I personally prefer x86 hardware for this kind of things
> when I see that little boxes like the Nanopi R4S they make me
> think about toys. In my case sadly I'm tied to adsl over pots
> so for the modem I still need to use this little plastic blackboxes.
> In your case I would swap the nanopi for a nice mini-itx board
> with intel nics, a sfx/flex psu (or pico psu), 4-8 gb of ram and a well
> ventilated case (with low noise Noctua fans).
> 
>> 2. are there any good sources for information on and about networking?
>> debian has moved to nftables from iptables  - - - is devuan doing
>> similar?
> 
> I think so.
> 
>> Where does one find information to enable a firewall that works yet
>> isn't stupid?
> 
> I use arno-iptables-firewall It is easy to create a basic setup for your 
> network,
> reliable, comes with good defaults and can easily be tweaked (for 
> port-forwarding, 
> vpns, geoip filtering and so on, don't know about vlans as don't use them 
> yet).
> 
>> (I've wondered about having some kind of easy 'switch' that when users left
>> their systems that the system wouldn't be calling home in the overnight at
>> least a la ms googly. Dunno if that's 'simple' or not - - - so much to
>> learn and so little time to do it all in!)
>> 
>> TIA
> 
> Ciao,
> Tito

I’ve just finished setting up a new router using PCEngines APU2 (apu4d4 model) 
with OpenWRT. Uses x64 AMD Embedded G series GX-412TC and has 4x Intel i211AT 
Ethernet ports. It also runs a Coreboot bios and I can see regular bios updates 
approximately monthly. The coreboot bios and AMD CPU were the main reasons I 
picked this over a Qotom box. It’s also fanless which is good for a quiet 
environment.

The only downside is having only serial console output so you need a serial 
cable or serial-usb cable for the initial setup or bios configuration

Re: [DNG] Viewing file content (was Re: system administration of non-systemd distros and releases)

[wirelessduck--- via Dng]

> On 27 Nov 2021, at 14:24, Olaf Meeuwissen  wrote:
> 
> Looking at the lesspipe manual page[1] (don't have less installed ;-),
> it seems that it doesn't support on-the-fly encoding switching but as
> far as dealing with compressed files, I guess there is no or not much
> difference.
> 
> [1]: https://manpages.debian.org/bullseye/less/lesspipe.1.en.html

Ahh ok. I’ve never had to deal with alternate encodings. If I ever needed that 
I would probably just alias less to lv, assuming the UI is similar enough. 
Muscle memory is hard to overcome sometimes.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Viewing file content (was Re: system administration of non-systemd distros and releases)

[wirelessduck--- via Dng]

> On 26 Nov 2021, at 20:40, Olaf Meeuwissen via Dng  wrote:
> 
> # On my own machines `lv` makes a fine `pager` for me.  On the fly
> # decompression and handling of many different encodings.  So for me,
> # it's just
> #
> #  pager /var/log/syslog.2.gz
> #
> # without any `zmore` or `zcat` piping.  There is still no zpager :-/
> # but with `lv` I don't really need one.

Does lv provide anything extra or different to enabling lesspipe.sh in bashrc?
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] system administration of non-systemd distros and releases

[wirelessduck--- via Dng]

> On 19 Nov 2021, at 22:29, Peter Duffy  wrote:
> 
> I've recently been asked to recommend an upgrade route for a number of
> linux servers, and I proposed going to devuan. In response, I've had a
> concern raised which took me by surprise. It was suggested that in the
> future, it may not be possible to find staff who have the skills to
> administer and manage servers running non-systemd or pre-systemd
> distros/releases.
> 
> I've tried to give reassurance - but I'm still wondering if this could
> be a valid concern. I'd always taken the view that it's primarily the
> linux sysadmin community which is trying to stop the onslaught of the
> systemd juggernaut - but obviously, the greater the proportion of
> servers running systemd-based distros/releases, the less staff get
> exposed to non-systemd management techniques and tools.
> 
> I'd be grateful for thoughts and comments.

I’m waiting to see what comes out of the systemd replacement software in 
development by Laurent Bercot, the developer of s6.  The project now has a 
corporate sponsor so it would appear someone sees a commercial benefit of his 
proposed design. I guess only time will tell whether it is enough to dislodge 
some of the pro-systemd arguments floating around management circles.

https://skarnet.com/projects/service-manager.html

-- 
Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] etckeeper: was: Er, Not that way ? .Re: Announcing Devuan 4.0: Chimaera!

[wirelessduck--- via Dng]

> On 21 Oct 2021, at 22:47, Olaf Meeuwissen  wrote:
> 
> Hi wirelessduck,
> 
> wirelessduck--- via Dng writes:
> 
>>>> On 20 Oct 2021, at 20:45, Olaf Meeuwissen via Dng  
>>>> wrote:
>>> 
>>> I really looked into snapshotting but the etckeeper commit messages also
>>> list which packages changed, like so (after I "beautified" the logging a
>>> bit to suit my taste and needs)
>>> 
>>> commit dd9602a525e590f24ec19904248938e6ab76e999 (HEAD -> master)
>>> Author: olaf 
>>> Date:   Mon Oct 11 21:48:25 2021 +0900
>>> 
>>> Committing changes in /etc after APT run
>>> 
>>> Package changes:
>>> - debconf 1.5.71 all
>>> + debconf 1.5.71+deb10u1 all
>>> - libgssapi-krb5-2 1.17-3+deb10u2 amd64
>>> + libgssapi-krb5-2 1.17-3+deb10u3 amd64
>>> - libk5crypto3 1.17-3+deb10u2 amd64
>>> + libk5crypto3 1.17-3+deb10u3 amd64
>>> - libkrb5-3 1.17-3+deb10u2 amd64
>>> + libkrb5-3 1.17-3+deb10u3 amd64
>>> - libkrb5support0 1.17-3+deb10u2 amd64
>>> + libkrb5support0 1.17-3+deb10u3 amd64
>>> - libmariadb3 1:10.3.29-0+deb10u1 amd64
>>> + libmariadb3 1:10.3.31-0+deb10u1 amd64
>>> 
>>> which gives me a chance to pinpoint any culprits and submit bug reports
>>> if necessary with detailed info on the changed packages.
>> 
>> Is this formatting configured in etckeeper or gitconfig? I would like
>> to try and replicate. It looks very useful.
> 
> TL;DR: in etckeeper.
> 
> The etckeeper utility does a good job of collecting the package changes
> out-of-the-box but the exact output is slightly different from what I
> included above.  The out-of-the-box behaviour includes the output of
> 
>  diff -U0 $before $after | egrep '^[-+]'
> 
> where $before and $after are "files" with the output of
> 
>  dpkg-query -W -f '${Status}\t${Package} ${Version}\n' | \
>  egrep '(ok installed|ok config-files)' | cut -f2,3
> 
> I've tweaked that a bit to insert a space after the '^[-+]' and run the
> diff output through `sort -k2` so I get the before and after package
> info closer together.  I've also made a few very minor changes to start
> the message with a capital and capitalized APT.
> 
> Without my changes, the above would have looked something like
> 
>  commit dd9602a525e590f24ec19904248938e6ab76e999 (HEAD -> master)
>  Author: olaf 
>  Date:   Mon Oct 11 21:48:25 2021 +0900
> 
>  committing changes in /etc after apt run
> 
>  Package changes:
>  -debconf 1.5.71 all
>  +debconf 1.5.71+deb10u1 all
>  -libgssapi-krb5-2 1.17-3+deb10u2 amd64
>  +libgssapi-krb5-2 1.17-3+deb10u3 amd64
>  -libk5crypto3 1.17-3+deb10u2 amd64
>  -libkrb5-3 1.17-3+deb10u2 amd64
>  -libkrb5support0 1.17-3+deb10u2 amd64
>  +libk5crypto3 1.17-3+deb10u3 amd64
>  +libkrb5-3 1.17-3+deb10u3 amd64
>  +libkrb5support0 1.17-3+deb10u3 amd64
>  -libmariadb3 1:10.3.29-0+deb10u1 amd64
>  +libmariadb3 1:10.3.31-0+deb10u1 amd64
> 
> BTW, the version in chimaera (and later) also includes a section that
> lists the packages with configuration changes and includes the command
> line invocation that triggered the changes.
> 
> Oh, I've also made a few changes to record package changes if nothing
> below /etc has changed.
> 
> Hope this helps,
> --
> Olaf Meeuwissen, LPIC-2FSF Associate Member since 2004-01-27
> GnuPG key: F84A2DD9/B3C0 2F47 EA19 64F4 9F13  F43E B8A4 A88A F84A 2DD9
> Support Free Softwarehttps://my.fsf.org/donate
> Join the Free Software Foundation  https://my.fsf.org/join

Many thanks.

I think the piping to sort alone is good enough that it should be implemented 
upstream. I wonder if there is any special ordering to the original non-sorted 
output as I can’t now see why you would want it unsorted?

-- 
Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] etckeeper: was: Er, Not that way ? .Re: Announcing Devuan 4.0: Chimaera!

[wirelessduck--- via Dng]

> On 20 Oct 2021, at 20:45, Olaf Meeuwissen via Dng  wrote:
> 
> I really looked into snapshotting but the etckeeper commit messages also
> list which packages changed, like so (after I "beautified" the logging a
> bit to suit my taste and needs)
> 
>  commit dd9602a525e590f24ec19904248938e6ab76e999 (HEAD -> master)
>  Author: olaf 
>  Date:   Mon Oct 11 21:48:25 2021 +0900
> 
>  Committing changes in /etc after APT run
> 
>  Package changes:
>  - debconf 1.5.71 all
>  + debconf 1.5.71+deb10u1 all
>  - libgssapi-krb5-2 1.17-3+deb10u2 amd64
>  + libgssapi-krb5-2 1.17-3+deb10u3 amd64
>  - libk5crypto3 1.17-3+deb10u2 amd64
>  + libk5crypto3 1.17-3+deb10u3 amd64
>  - libkrb5-3 1.17-3+deb10u2 amd64
>  + libkrb5-3 1.17-3+deb10u3 amd64
>  - libkrb5support0 1.17-3+deb10u2 amd64
>  + libkrb5support0 1.17-3+deb10u3 amd64
>  - libmariadb3 1:10.3.29-0+deb10u1 amd64
>  + libmariadb3 1:10.3.31-0+deb10u1 amd64
> 
> which gives me a chance to pinpoint any culprits and submit bug reports
> if necessary with detailed info on the changed packages.

Is this formatting configured in etckeeper or gitconfig? I would like to try 
and replicate. It looks very useful.

Thanks
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Announcing Devuan 4.0: Chimaera!

[wirelessduck--- via Dng]

One thing that I couldn’t find in the Debian Bullseye release notes is that the 
Nvidia 340xx legacy driver is no longer present in Debian Bullseye/Devuan 
Chimaera.

For anyone with older hardware only supported by the 340xx driver the 
alternatives appear to be switching to nouveau driver on Chimaera or stay on 
Beowulf with 340xx driver.

-- 
Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] npm and nodejs -- version skew?

[wirelessduck--- via Dng]

> On 5 Oct 2021, at 00:58, Hendrik Boom  wrote:
> 
> While setting up to run the game editor inky ( 
> https://www.inklestudios.com/ink/ ) I  ran into what seems to be a version 
> skew.
> 
> I used aptitude to install Devuan beowulf's versions of npm and nodejs.
> When I got to one stage of the imky startup I got messages
> I have appended below.
> 
> From the looks of things, npm is complaining it cannot work with node 
> Node.js v10.24.0 and it wants me to "upgrade" to an *older* version! 
> (namely, 4, 6, 7, 8, or 9 instead of 10..)
> 
> Is this a known problem?  Is this really a version skew between two of 
> beowulf's own packages?
> 
> Somewhat hard to believe.  Is upgrading everything to chimaera likely to 
> help?
> 
> -- hendrik
> 
> The messages:
> 
> hendrik@midwinter:~/dv/fun/ink/inky$ ./INSTALL_AND_RUN.command
>
> npm WARN npm npm does not support Node.js v10.24.0
> npm WARN npm You should probably upgrade to a newer version of node as we
> npm WARN npm can't make any promises that npm will work with this version.
> npm WARN npm Supported releases of Node.js are the latest release of 4, 6, 
> 7, 8, 9.  
> 
> npm WARN npm You can find the latest version at https://nodejs.org/
> npm WARN read-shrinkwrap This version of npm is compatible with 
> lockfileVersion@1, but package-lock.json was generated for 
> lockfileVersion@2. I'll try to do my best with it!
> npm WARN notice [SECURITY] ws has the following vulnerability: 1 moderate. 
> Go here for more details: 
> https://www.npmjs.com/advisories?search=ws&version=7.4.5 - Run `npm i 
> npm@latest -g` to upgrade your npm version, and then `npm audit` to get 
> more info.
> npm WARN notice [SECURITY] minimist has the following vulnerability: 1 low. 
> Go here for more details: 
> https://www.npmjs.com/advisories?search=minimist&version=0.0.10 - Run `npm 
> i npm@latest -g` to upgrade your npm version, and then `npm audit` to get 
> more info.
> npm WARN notice [SECURITY] electron has the following vulnerability: 1 
> moderate. Go here for more details: 
> https://www.npmjs.com/advisories?search=electron&version=4.2.12 - Run `npm 
> i npm@latest -g` to upgrade your npm version, and then `npm audit` to get 
> more info.
> npm WARN tar write after end
> npm WARN notice [SECURITY] trim-newlines has the following vulnerability: 1 
> high. Go here for more details: 
> https://www.npmjs.com/advisories?search=trim-newlines&version=1.0.0 - Run 
> `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to 
> get more info.
> npm WARN notice [SECURITY] minimist has the following vulnerability: 1 low. 
> Go here for more details: 
> https://www.npmjs.com/advisories?search=minimist&version=0.0.8 - Run `npm i 
> npm@latest -g` to upgrade your npm version, and then `npm audit` to get 
> more info.
> npm WARN notice [SECURITY] marked has the following vulnerability: 1 
> moderate. Go here for more details: 
> https://www.npmjs.com/advisories?search=marked&version=0.3.19 - Run `npm i 
> npm@latest -g` to upgrade your npm version, and then `npm audit` to get 
> more info.
> npm WARN notice [SECURITY] lodash has the following vulnerability: 1 high. 
> Go here for more details: 
> https://www.npmjs.com/advisories?search=lodash&version=4.17.21 - Run `npm i 
> npm@latest -g` to upgrade your npm version, and then `npm audit` to get 
> more info.
> npm WARN notice [SECURITY] diff has the following vulnerability: 1 high. Go 
> here for more details: 
> https://www.npmjs.com/advisories?search=diff&version=3.3.1 - Run `npm i 
> npm@latest -g` to upgrade your npm version, and then `npm audit` to get 
> more info.
> npm ERR! cb() never called!
> 
> npm ERR! This is an error with npm itself. Please report this error at:
> npm ERR! 
> 
> npm ERR! A complete log of this run can be found in:
> npm ERR! /home/hendrik/.npm/_logs/2021-10-04T13_12_04_234Z-debug.log
> hendrik@midwinter:~/dv/fun/ink/inky$
> __

Have you tried installing Nodejs from the official apt repository?

https://github.com/nodesource/distributions/blob/master/README.md___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] KUserFeedback

[wirelessduck--- via Dng]

> 3) if the user opted out create some kind of /dev/null folder (I suspect that 
> such
>   thing doesn't exist yet) to delete the data in realtime

Is the data saved into the telemetry folder before being transmitted anywhere? 
Can you just delete the folder and recreate it as a symlink to /dev/null?
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] /run/user/#

[wirelessduck--- via Dng]

> On 31 Aug 2021, at 21:40, Luciano Mannucci  wrote:
> 
> On Tue, 31 Aug 2021 18:41:42 +0900
> Olaf Meeuwissen  wrote:
> 
>> As g4sra said, /run/user/xxx is used by session management and as you
>> say you have Xorg running on one of the machines, I guess someone is
>> logged in and running an X session.  That would normally trigger
>> creation of /run/user/xxx.
> Well, not really.
> 
> I've completely removed Xorg, rebooted the machine, and still it does
> the same: when I log in as user XXX via ssh I see a /run/usr/XXX on
> that machine. I'm still investigating...
> 
> Thanks for your answer,
> 
> Luciano.

Perhaps elogind or consolekit is creating this if you have either installed? 
They will manage the login sessions.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Advice sought on kernel upgrade

[wirelessduck--- via Dng]

> On 13 Aug 2021, at 18:28, Steve Litt  wrote:
> 
> terryc said on Fri, 13 Aug 2021 13:55:07 +1000
> 
> 
>> 
>> Setting up? As in reallocating desktops?
>> 
>> I'd be more inclined to look at HW/Sw problems when you are adding
>> something like a 4K screen. Is there sufficient ram?
> 
> And...
> 
> OP, while you're at it, just for fun run a ram test on all the ram.

Memtest86+ would be a good choice?

http://www.memtest.org/

> And run smartctl on your disks. And lmsensors to read various
> temperatures and fan parameters.

https://askubuntu.com/a/53782

Install lm-sensors package, run `sudo sensors-detect`, and then load the listed 
kernel modules or add to /etc/modules and reboot.

`sensors` will display the data in a terminal, or you can use various GUI front 
ends such as psensor or gkrellm.

> It sound like you have an intermittent problem, and that justifies the
> extra corrective maintenance tests of hardware, even though those tests
> will take some time (run them overnight when you're sleeping).

https://www.phoronix-test-suite.com/

Running a few tests from Phoronix test suite might be good for detecting 
hardware issues?

> SteveT

-- 
Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Only a few packages now still on hold

[wirelessduck--- via Dng]

> On 2 Aug 2021, at 19:02, Mark Hindley  wrote:
> 
> Yes it can be, but no more so than consolekit. There are 2 alternatives for 
> managing
> seats and sessions in Devuan: consolekit (actually consolekit2) and elogind.
> 
> Consolekit was probably the default in ascii. It is inactive upstream, but 
> still
> works.  Elogind is active and well supported and is the default since
> beowulf. However, the codebase derives from systemd and therefore some people
> will prefer not to use it.
> 
> So, you need one or other, but not both or a mixture.
> 
> aptitude seems to suggest that you already have elogind installed and this is 
> an
> upgrade. You will have to allow apt to remove the consolekit related packages
> (libpam-ck-connector and possibly some policykit libraries). Alternatively,
> stick with consolekit and remove all of the elogind related packages. The 
> choice
> is yours. Both will work once you have a clean installation based on a single
> logind alternative.
> 
> Mark

Is seatd likely to get anywhere in the next Debian development cycle after 
bullseye/chimaera? Would this allow us to just need only one option for users 
to install?

-- 
Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Starting outline for the DNG Safe Programmer Certificate

[wirelessduck--- via Dng]

> On 1 Aug 2021, at 21:56, Hendrik Boom  wrote:
> 
> On Fri, Jul 30, 2021 at 01:49:46PM -0400, Steve Litt wrote:
>> Josef Grosch via Dng said on Thu, 29 Jul 2021 15:32:05 -0700
>> 
>> 
>>> Another suggestion I have is to use the variable and method naming 
>>> convention that java uses. I like the way it looks and I think camel 
>>> case is more readable than snake case.
>> 
>> This reminds me of something not yet in the outline. The originating
>> author should place, in comments, near the top, his or her syntax
>> conventions including naming conventions, brace placements if not
>> Python, spaces or tabs. 
>> 
>> I'm hidiously guilty of using violating my own conventions (or not
>> having any), so I should make that document at the start of a project.
>> Matter of fact, I should make it BEFORE my next project. Naturally, one
>> such stylesheet must be made for Python, another for C, etc.
>> 
>> In an ideal world, here's how I'd do C blocks:
>> 
>> if(mybool)
>>   {
>>   do_my_stuff()
>>   }
> 
> I tend to use
> if(mybool)
>  { do_my_stuff();
>do_other_stuff);
>  }
> 
> I really believe matching braces should be on the same line, or, 
> failing that, at the same level of indentation; i.e., above one 
> another.
> 
> And I'd like the compile to warn me of deviations from that.
> 
> -- hendrik
> 
>> 
>> However, I do it the way Vim preformats for me, to make my life easier:
>> 
>> if(mybool){
>>   do_my_stuff()
>> }
>> 
>> #ifndef AUTHOR
>>   char * AUTHOR = "SteveT"
>> #endif
>> 
>> AUTHOR
>> 
>> Steve Litt 

Just use indent(1) and forget about all stying problems? I prefer `indent -kr`, 
none of that GNU styling craziness!!

https://manpages.debian.org/buster/indent/indent.1.en.html___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Rant: was fresh install of chimaera on an Ultrabook - no touchpad

[wirelessduck--- via Dng]

> On 31 Jul 2021, at 04:09, Steve Litt  wrote:
> 
> wirelessd...@gmail.com said on Fri, 30 Jul 2021 20:02:59 +1000
> 
>>> On 30 Jul 2021, at 05:15, Steve Litt 
>>> wrote:
>>> 
>>> Riccardo Mottola said on Thu, 29 Jul 2021 16:07:11 +0200
>>> 
 Sometimes you can find another card, but that is not always
 possible. Rarely you can know exactly what is inside a Laptop on
 beforehand.  
>>> 
>>> Riccardo, 
>>> 
>>> You just reminded me that I always recommend having a known good,
>>> doesn't-need-drivers wifi dongle on hand for those times when your
>>> laptop's wifi won't work during installation. Some are made for the
>>> Raspberry Pi: I'd guess that those would work on pretty much any
>>> hardware.
>>> 
>>> SteveT  
>> 
>> The FSF publishes a list of Linux-compatible hardware at
>> https://ryf.fsf.org
> 
> Yeah, that ain't gonna fly with most people's budgets. The Talos II
> Lite mobo costs $1,788. That's 90% of the whole 6 core, 12 thread,
> 64GB, 14TB 7200 with 2TB booter nvme computer with power supply and
> case. The all-free 2TB nvme offering is $1,079, rather than the $420 I
> paid for my 2TB nvme.
> 
> I've found similar problems with System76 and most of the other Linux
> pre-loaded computers. Pure openness is a rich man's sport.
> 
> SteveT

Unfortunate, but all too true. And unlikely to change any time soon while most 
people are ignorant of the problems with non-free software/hardware.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] New service manager being developed

[wirelessduck--- via Dng]

> On 31 Jul 2021, at 09:31, Enrico Weigelt, metux IT consult  
> wrote:
> 
> On 21.07.21 13:34, d...@d404.nl wrote:
> 
>> Great initiative. I am currently using Alpine combined with s6-overlay in 
>> most of my docker containers and it works very well.
> 
> Just curious: what are you using a s6 inside docker containers for ?
> 
> I've always been under the impression that docker containers are meant
> for running only one application/service per container and thus don't
> need an extra service supervisor inside the container.

If it’s for init, no longer necessary as docker now bundles tini.

https://github.com/krallin/tini___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Rant: was fresh install of chimaera on an Ultrabook - no touchpad

[wirelessduck--- via Dng]

> On 30 Jul 2021, at 05:15, Steve Litt  wrote:
> 
> Riccardo Mottola said on Thu, 29 Jul 2021 16:07:11 +0200
> 
>> Sometimes you can find another card, but that is not always possible.
>> Rarely you can know exactly what is inside a Laptop on beforehand.
> 
> Riccardo, 
> 
> You just reminded me that I always recommend having a known good,
> doesn't-need-drivers wifi dongle on hand for those times when your
> laptop's wifi won't work during installation. Some are made for the
> Raspberry Pi: I'd guess that those would work on pretty much any
> hardware.
> 
> SteveT

The FSF publishes a list of Linux-compatible hardware at https://ryf.fsf.org___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Starting outline for the DNG Safe Programmer Certificate

[wirelessduck--- via Dng]

> On 7/28/21 1:12 PM, Steve Litt wrote:
>> [ Beverity ]
>> Does anyone have other list items to add?

https://thedailywtf.com/ Is a good resource of what “not” to do.___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Fwd: Installing postgresql13 on beowulf

[wirelessduck--- via Dng]

> On 19 Jul 2021, at 09:59, Gregory Nowak  wrote:
> 
> On Sun, Jul 18, 2021 at 03:46:56PM +1000, wirelessduck--- via Dng wrote:
>> Bionic is an Ubuntu release. You should be using buster-pgdg repository for 
>> postgresql apt as Devuan Beowulf is directly based on Debian Buster. Devuan 
>> has no direct relationship with Ubuntu.
> 
> I don't recall seeing buster in the provided release output, which is
> why I suggested using bionic. If buster is indeed present, and I
> missed it, then buster should indeed be used. Apologies for the confusion.
> 
> Greg

Yes, they list all the supported releases on the page at 
https://apt.postgresql.org which redirects to the wiki at 
https://wiki.postgresql.org/wiki/Apt.

For those who don’t know, they also distribute postgres extensions and related 
apps (eg. barman, pspg) and updated libpq/libpq-dev through pgdg apt 
repository. The one major exception being PgAdmin4, which switched to using its 
own apt repository.

-- 
Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Fwd: Installing postgresql13 on beowulf

[wirelessduck--- via Dng]

> On 18 Jul 2021, at 21:08, o1bigtenor  wrote:
> 
> On Sun, Jul 18, 2021 at 5:58 AM wirelessduck--- via Dng
>  wrote:
>> 
>> 
> snip
>>>> 
>>>> I use the buster-pgdg repositories for all of my postgresql installations, 
>>>> following the instructions on apt.postgresql.org but substituting the 
>>>> lsb_release part for “buster”
>>>> 
>>> 
>>> Thank you very much.
>>> I did not understand that I was to use 'Buster' in place of 'lsb_release' .
>>> 
>>> Using 'lsb_release' is what caused the foobar.
>>> 
>>> Regards
>> 
>> Yes that snippet is designed to make it easy to copy and paste so you they 
>> can provide one script to setup for all supported distros. As Devuan isn’t 
>> directly supported by pgdg repository we just have to make a small change to 
>> use the equivalent Debian release name.
>> 
> 
> Dunno if I'm understanding correctly but when I use the actual 'name'
> of the distribution then I would have to change such when that
> distribution changes - - - yes?
> 
> The generic statement would not need upgrading as I understand it.
> 
> Deeply appreciating the sharing in this group!!

Check the man page for lsb_release.

https://manpages.debian.org/buster/lsb-release/lsb_release.1.en.html

You will see that `lsb_release -cs` as used in the postgresql wiki page snippet 
just prints the running system distribution codename. In Debian, Ubuntu, and 
others directly supported by pgdg that will “autofill” in the codename into the 
shell script. As “beowulf” is not supported directly by pgdg, we just have to 
substitute in the equivalent Debian release codename instead of using the 
output of `lsb_release -cs`.

-- 
Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Fwd: Installing postgresql13 on beowulf

[wirelessduck--- via Dng]

> On 18 Jul 2021, at 20:39, o1bigtenor  wrote:
> 
> On Sun, Jul 18, 2021 at 12:47 AM wirelessduck--- via Dng
>  wrote:
>> 
>> 
>> 
>>>> On 18 Jul 2021, at 12:58, Gregory Nowak via Dng  wrote:
>>> 
>>> On Sat, Jul 17, 2021 at 09:38:13PM -0500, o1bigtenor via Dng wrote:
>>>> - - - - no mention of Beowulf and that means a - - - no go - - - - at least
>>>> as far as I can tell.
>>>> 
>>>> Any ideas?
>>> 
>>> Bionic is based on buster, and therefore similar to Beowulf. If the
>>> repository has bionic, use bionic if installing on Beowulf.
>>> 
>>> Greg
>> 
>> Bionic is an Ubuntu release. You should be using buster-pgdg repository for 
>> postgresql apt as Devuan Beowulf is directly based on Debian Buster. Devuan 
>> has no direct relationship with Ubuntu.
>> 
>> I use the buster-pgdg repositories for all of my postgresql installations, 
>> following the instructions on apt.postgresql.org but substituting the 
>> lsb_release part for “buster”
>> 
> 
> Thank you very much.
> I did not understand that I was to use 'Buster' in place of 'lsb_release' .
> 
> Using 'lsb_release' is what caused the foobar.
> 
> Regards

Yes that snippet is designed to make it easy to copy and paste so you they can 
provide one script to setup for all supported distros. As Devuan isn’t directly 
supported by pgdg repository we just have to make a small change to use the 
equivalent Debian release name.

-- 
Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Fwd: Installing postgresql13 on beowulf

[wirelessduck--- via Dng]

> On 18 Jul 2021, at 12:58, Gregory Nowak via Dng  wrote:
> 
> On Sat, Jul 17, 2021 at 09:38:13PM -0500, o1bigtenor via Dng wrote:
>> - - - - no mention of Beowulf and that means a - - - no go - - - - at least
>> as far as I can tell.
>> 
>> Any ideas?
> 
> Bionic is based on buster, and therefore similar to Beowulf. If the
> repository has bionic, use bionic if installing on Beowulf.
> 
> Greg

Bionic is an Ubuntu release. You should be using buster-pgdg repository for 
postgresql apt as Devuan Beowulf is directly based on Debian Buster. Devuan has 
no direct relationship with Ubuntu.

I use the buster-pgdg repositories for all of my postgresql installations, 
following the instructions on apt.postgresql.org but substituting the 
lsb_release part for “buster”

-- 
Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Installing postgresql13 on beowulf

[wirelessduck--- via Dng]

> On 18 Jul 2021, at 06:22, Antony Stone  
> wrote:
> 
> On Saturday 17 July 2021 at 17:20:40, o1bigtenor via Dng wrote:
> 
>> Greetings
>> 
>> trying to install postgres 13 on beowulf
> 
>> deb http://apt.postgresql.org/pub/repos/apt/ buster-pgdg main
> 
>> # apt update
> 
>> Err:7 http://apt.postgresql.org/pub/repos/apt beowulf-pgdg Release
> 
>> Somehow what I entered as 'Buster' become 'Beowulf' .
> 
> Can you really confirm that you don't have a beowulf repository lurking 
> somewhere:
> 
>grep -r postgresql /etc/apt
> 
> Thanks,
> 
> 
> Antony.

I would check this too. I have postresql of various versions running fine on 
multiple Beowulf machines from pgdg repositories so there’s nothing wrong with 
apt.postgresql.org.

Check also with `apt-cache policy`

-- 
Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] exim paniclog

[wirelessduck--- via Dng]

> On 1 Jun 2021, at 05:26, Marc Shapiro via Dng  wrote:
> 
> I received this e-mail yesterday, and again today:
> 
> -
> exim paniclog /var/log/exim4/paniclog on quixote.home has non-zero size, mail 
> system might be broken. The last 10 lines are quoted below.
> 
> 2021-05-29 19:35:47 daemon: fork of queue-runner process failed: Cannot 
> allocate memory
> -
> 
> I use Thunderbird for all non-local mail.
> I am only using exim for local mail.
> The only mail that I receive locally is a weekly e-mail from a cron job that 
> I have set up to do backups, and I did receive that e-mail yesterday, along 
> with the above e-mail.
> 
> I'm not familiar with the workings of exim, or any MTA, so I don't really 
> know what the error message means, other than that there was some memory 
> issue.  The one clue that I have is that something (I am fairly sure that it 
> was a Firefox tab) completely locked my system on Saturday night.  Everything 
> started slowing down.  Mousing became erratic.  Then everything completely 
> stopped.  I couldn't even switch to a terminal where I could kill Firefox.  I 
> finally had to simply power down the system.  (How I hate doing that!)  Then 
> I rebooted, did a controlled shutdown and rebooted, again.  After that, 
> everything seems to be running just fine.
> 
> Is that likely the cause of the above message?  If so, is deleting the 
> paniclog the proper way to stop receiving these e-mails?
> 
> Marc
> 

Next time, before just powering down the system, you should try the Magic SysRq 
keyboard shortcuts to see if the kernel is still responding.

https://www.kernel.org/doc/html/latest/admin-guide/sysrq.html

I like to follow the example used on the Wikipedia page which lists the 
Alt+SysRq+REISUB keys for doing a safer reboot than simply just hitting the 
physical power button. I try to leave a few of seconds at least in between key 
presses, to give time for each command to process completely.

https://en.m.wikipedia.org/wiki/Magic_SysRq_key

-- 
Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Ossec-hids for Beowulf

[wirelessduck--- via Dng]

> On 25 May 2021, at 05:14, Luciano Mannucci  wrote:
> 
> 
> Many thanks Olaf, for your help.
> 
>> On Mon, 24 May 2021 21:29:25 +0900
>> Olaf Meeuwissen  wrote:
>> 
>> The error message is about linux-libc-dev which is at 4.19.181-1 for
>> Beowulf.  So while close, the mirror that your apt-get install used was
>> out-of-date.  Try running `apt-get update` and `apt-get install` again.
> Well if I issue "apt-get update", I get:
> 
> root@aroeira:~# apt-get update
> Get:1 http://deb.devuan.org/merged beowulf InRelease [33.2 kB]
> Get:2 http://deb.devuan.org/merged beowulf-security InRelease [25.7 kB]
> Reading package lists... Done  
> E: Repository 'http://deb.devuan.org/merged beowulf InRelease' changed its 
> 'Suite' value from 'testing' to 'stable'
> N: This must be accepted explicitly before updates for this repository can be 
> applied. See apt-secure(8) manpage for details.
> E: Repository 'http://deb.devuan.org/merged beowulf-security InRelease' 
> changed its 'Suite' value from 'testing-security' to 'stable-security'
> N: This must be accepted explicitly before updates for this repository can be 
> applied. See apt-secure(8) manpage for details.
> 
> It doesn't say how to accetp this change.
> 
> Sorry for my newbeeness and thanks again,
> 
> Luciano.

Try with

apt-get update --allow-releaseinfo-change
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Script to migrate buster desktop to beowulf v1.6

[wirelessduck--- via Dng]

I’m not sure if this is a good way to do it but when Ubuntu is upgraded to a 
new version the release upgrade tool disables all third-party apt sources and 
PPA sources by commenting them out in the sources.list/sources.list.d files and 
notifying the user this has been done. The user then has to enable them again 
manually after upgrade.

I guess this makes it easy to filter out non-official apt sources and only 
upgrade the official ones? I don’t know how it handles the situation of when 
the user has a custom package mirror enabled instead of deb.debian.org or 
similar ubuntu archive URL.

Also, don’t forget that debian has a separate URL for debian-security archive 
while Devuan includes security packages archive in the regular deb.devuan.org 
URL.

> On 15 Apr 2021, at 04:44, tito via Dng  wrote:
> 
> On Wed, 14 Apr 2021 16:01:02 +
> g4sra via Dng  wrote:
> 
>>> 
>> 
>>> This might be a good one to ask the users.
>>> 
>> 
>>> fsmithred
>>> 
>> 
>> 
>> Agreed.
>> 
>> But if you did want to do it programmatically without parsing every
>> sources.{d/*,conf}... Ask apt what it is cacheing...
>> 
>> if [ -n "$(apt-cache policy | grep 'buster/non-free')" ]; then
>>  echo "yes include non-free repo";
>> else 
>> 
>>  echo "no don't!";
>> fi
> 
> This will give false positives:
> 
> apt-cache policy | grep 'buster/non-free'
>  97 http://www.deb-multimedia.org buster/non-free amd64 Packages
> 
> So I think  I will ask the user.
> 
> Ciao,
> Tito
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] minor panic with host reboot

[wirelessduck--- via Dng]

> 
> On Thu, 1 Apr 2021 08:13:45 -0600
> "Chris Richmond"  wrote:
> 
>> Message: 2
>> Date: Thu, 1 Apr 2021 07:53:34 +0200
>> From: tito 
>> To: dng@lists.dyne.org
>> Subject: Re: [DNG] minor panic with host reboot
>> Message-ID: <20210401075334.6573abb6@devuan>
>> Content-Type: text/plain; charset=UTF-8
>> 
>>> On Thu, 1 Apr 2021 10:29:52 +1100
>>> wirelessduck--- via Dng  wrote:
>>> 
>>> https://en.wiktionary.org/wiki/molly-guard
>>> https://packages.debian.org/sid/admin/molly-guard
>> 
>> I looked at what this is, and it makes sense, but wouldn't have
>> helped unless it also detects an xterm in a VNC session.  The why it
>> rebooted is obvious (keyboard chair interface failure), it's the what
>> happened after that didn’t make sense.

FWIW, you can configure it to always ask for the hostname, even if no SSH 
session is detected. This would cause it to trigger on your local xterm running 
inside the VNC session. The man page mentions setting this option in 
/etc/molly-guard/rc. Not sure if that’s what you had in mind?

The alternative (default value) is to only ask if it detects running inside a 
SSH session.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] minor panic with host reboot

[wirelessduck--- via Dng]

> On 1 Apr 2021, at 08:27, crich...@blackfoot.net wrote:
> 
> 
> I’ve had a router/misc./etc. running ASCII for a couple of years, and today I 
> inadvertently rebooted it
> 
> because I wasn’t playing attention to which host an xterm was logged into.  
> Normally that wouldn’t
> 
> be a problem, but what happened is that I ended up with a grub minimal 
> command prompt.
> 
> I’ve no idea why, and what ended up getting my up again was simply exiting 
> the prompt and I
> 
> got a list of kernels to boot, so I picked the latest and more-or-less I’m 
> back in business.
> 
> My question is; How did I end up where auto-boot didn’t work?
> 
> I’ve been very reluctant to update/upgrade precisely because of this sort of 
> thing.
> 
> Since this box is the main router for the whole house, when it’s down, 
> everything is down.
> 
> I’ve rebooted in the past without issues, and I don’t think I’ve done 
> anything to cause this,
> 
> but who knows.  Any requests for more details or suggestions are welcome.
> 
> Thx, Chris
> 
Unfortunately I don’t know how to help with the current situation, but I would 
definitely recommend installing the molly-guard package to hopefully prevent 
this accidental reboot of wrong machine from happening in the future.

https://en.wiktionary.org/wiki/molly-guard
https://packages.debian.org/sid/admin/molly-guard

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Discovery #fail

[wirelessduck--- via Dng]

On Sun, 28 Mar 2021 at 16:51, Ludovic Bellière
 wrote:
>
> Hi Steve,
>
> It's most likely a debian issue. And to be more precise, a Xorg that
> may not be up to date. I would advise you to check devuan's Xorg
> version and check if the firmware of your laptop is talked about on the
> internet. Ubuntu likely uses a more recent version of Xorg than debian,
> or any other library that enable discovery of your display.
>
> All in all, a display doesn't seem to have to do anything with init
> freedom. Would it?
>
> Ludovic
>
> On Sun, 14 Mar 2021 16:34:25 +
> Steve Scott via Dng  wrote:
>
> > Greetings all,
> > I've been a long time Devuan user, and have donated to the
> > project because I would very much like to see it continue. I recently
> > was forced to upgrade my laptop, having completely destroyed my old
> > one, and upon installation (dual boot) of Beowulf 3.1.0 and reboot,
> > was dropped into a shell prompt, no graphics. LSPCI revealed only 2
> > devices were actually identified, the others merely providing
> > vendor/device ID information, including the NVIDIA gfx device.
> > dmidecode provided plenty of information however. I was able to
> > install the driver from the vendor and get CUDA working, but was
> > never able to get Xorg to recognize the display.
> >
> > Since a desktop was pretty critical to my needs for this machine, I
> > gave Ubuntu a shot - not that I like Ubuntu all that much, but they
> > do seem to have desktop setup polished well.
> >
> > Whadayaknow, Ubuntu pretty much discovered everything, so it appears
> > I will be living here for the time being. Happy to provide whatever
> > data you need. SWS

I would doubt it's an Xorg issue, as both Debian/Devuan and recent
Ubuntu releases use the same Xorg version.  Devuan uses xorg/kernel
packages unmodified from Debian so the versions listed for beowulf and
buster will be identical, across both Devuan and Debian package
information sites.

https://pkginfo.devuan.org/cgi-bin/package-query.html?c=package&q=xserver-xorg=1:7.7+19
https://packages.debian.org/buster/xserver-xorg

You didn't mention which version of Ubuntu you tried, but for Xorg
that's irrelevant as the LTS and latest release have the same version
as Debian/Devuan.

https://packages.ubuntu.com/focal/xserver-xorg
https://packages.ubuntu.com/groovy/xserver-xorg

Since it works in Ubuntu, it's unlikely to be a BIOS version issue
(although that might make a difference for older kernel versions?).

Most likely, you could try upgrading to the backports version of linux
kernel in Beowulf to see if that makes a difference.  Ubuntu recent
releases have a newer kernel version than Devuan Beowulf/Debian Buster
main repository, while the beowulf-backports/buster-backports
repository has a newer kernel than the Ubuntu repository.

https://packages.ubuntu.com/focal/linux-image-generic
https://packages.debian.org/buster/linux-image-amd64
https://packages.debian.org/buster-backports/linux-image-amd64

The default kernel package on beowulf amd64 is `4.19+105+deb10u9`
while beowulf-backports has `5.10.13-1~bpo10+1`
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Beowulf installation skipped networking. Quickest fix? SOLVED

[wirelessduck--- via Dng]

> Probably that is just dhcp.
> If you want to see current settings
> 
> sudo ifconfig  (old command)
> 
> Someone might post the  'new' command

That would be

`ip address show`

Or

`ip a`

If you’re lazy :P

https://baturin.org/docs/iproute2/

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Shutting down on weird keys combination.

[wirelessduck--- via Dng]

> On 13 Mar 2021, at 05:50, А. Сорокин via Dng  wrote:
> 
> Hello.
> 
> 
> I have a strange behavior on my system (DeVuan's Sid (Ceres?)
> up-to-date system): on quick pressing (may be it seems to system as keys
> are pressed at once), of Shift-b-v (no matter where: CLI or GUI) system
> shuts down normally. Of course, typing abbreviation, consisting of those
> letters makes one unhappy.
> 
> Any ideas why is it so? -- Is it in the system, am i alone withe the
> problem, is it a virus, or a BIOS short key that system responds so?
> 
> Thank you for any advance.
> 
> 
> Andrey.

You’re not accidentally pressing the SysRq key at the same time?

https://en.m.wikipedia.org/wiki/Magic_SysRq_key___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] web conferencing software (was Re: Any interest in a Devuan Meetup in Colorado Springs or Denver?)

[wirelessduck--- via Dng]

> On 10 Mar 2021, at 17:11, Rick Moen  wrote:
> Quoting wirelessduck--- via Dng (dng@lists.dyne.org):
> 
>> What’s the consensus on Quad9? Are they any better from a privacy
>> standpoint?
> 
> To say again, why outsource recursive nameservice to _anyone_?
> 
> You seem like a large number of people who are weirdly resistant to 
> the notion of basic control of one's own fundamental network
> infrastructure and looking for some stranger to outsource the task to,
> and I keep wondering why the obvious alternative of running a recursive
> DNS nameserver instance locally isn't even considered, let alone the
> obvious default choice.
> 
> But hey, whatever works for you.

Au contraire, I’m running unbound right now on my laptop. There are some 
situations though where it’s not feasible to run one's own recursive DNS 
resolver, such as a home router for non-technical people that doesn’t support 
ddwrt/openwrt.

Unfortunately the current version of unbound packaged in Debian/Devuan has an 
annoying bug when running under non-systemd+apparmor.
https://bugs.debian.org/947771

I attempted to install knot-resolver as an alternative but it appears that the 
upstream packages have gained a hard dependency on systemd.

MaraDNS/Deadwood packages in Debian are still using a release from 2015, so I 
guess I’ll be trying powerdns-recursor next as that package appears to be 
reasonably up to date.___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] web conferencing software (was Re: Any interest in a Devuan Meetup in Colorado Springs or Denver?)

[wirelessduck--- via Dng]

> On 8 Mar 2021, at 19:08, Dimitris via Dng  wrote:
> 
> Στις 8/3/21 12:29 π.μ., ο/η Rick Moen έγραψε:
>> Leaving aside my being disappointed about people willingly outsourcing
>> their recursive DNS to the second-nosiest company on the planet[1]
> 
> +1.1.1.1 ... don't forget cloudflare bullies..
> 
> 
> but i do forward local queries to opennic (w/ dnscrypt) and a couple more 
> trusted sources.. eg. libreops.cc offer a public resolver and another DoT/DoH 
> & i do also forward to tor-resolve occasionally...
> 
> so, i would be interested to know, if there's a privacy issue with opennnic?
> leaving the overlord (=icann) aside, seems like a good idea to me..

What’s the consensus on Quad9? Are they any better from a privacy standpoint?
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Strange behaviour with last version of grub

[wirelessduck--- via Dng]

> On 5 Mar 2021, at 15:08, wirelessd...@gmail.com wrote:
> 
> 
> 
> 
>>> On 5 Mar 2021, at 03:23, viverna  wrote:
>>> 
>> Yesterday I updated one of my computers with apt-get upgrade. This packages 
>> are upgraded:
>> 
>> grub-common grub-pc grub-pc-bin grub2-common
>> 
>> dpkg install from version 2.02+dfsg1-20+deb10u3 to version 
>> 2.02+dfsg1-20+deb10u4
>> 
>> 2.02+dfsg1-20+deb10u4 seems came from to:
>> http://deb.devuan.org/merged beowulf-security/main
>> 
>> 2.02+dfsg1-20+deb10u3 is in:
>> http://deb.devuan.org/merged beowulf/main
>> 
>> Upgrading system does not produce or show any problems and then I halt the 
>> system.
>> 
>> I use Devuan Beowulf for all my pc. In this computer there is only 1 hd, 
>> partition type gpt, 3 partitions:
>> 
>> /dev/sda1  EFI System
>> /dev/sda2  Linux filesystem
>> /dev/sda3  Linux swap
>> 
>> I switched on the pc later and grub rescue appears. WTF?
>> 
>> I solved (temporarily) the problems with:
>> 
>> set prefix=(hd0,gpt2)/boot/grub
>> set root=(hd0,gpt2)
>> insmod normal
>> normal
>> 
>> and grub menù appears.
>> 
>> Login with root, and then update-grub... grub-install... and so on...
>> 
>> Restart the system. Grub rescue. Then login with root. New tests. Grub 
>> rescue again. [N times?]
>> 
>> At the end I downgrade from 2.02+dfsg1-20+deb10u4 to 2.02+dfsg1-20+deb10u3 
>> the upgraded package.
>> 
>> update-grub and grub-install. Reboot. Grub works!
>> 
>> I am currently reluctant to upgrade again.
>> 
>> And now the question. Has anyone reported the error in Devuan? Has anyone 
>> haved this problem?
> 
> Seems to be a bit of news about the latest update.
> https://9to5linux.com/patches-for-multiple-new-grub2-security-flaws-start-rolling-out-to-linux-distros-update-now
> 
> The changelog mentions changes to secure boot. Could that be related to the 
> issue?
> 
> https://metadata.ftp-master.debian.org/changelogs//main/g/grub2/grub2_2.02+dfsg1-20+deb10u4_changelog

And there is also a debian security advisory related to this update.

https://www.debian.org/security/2021/dsa-4867___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Strange behaviour with last version of grub

[wirelessduck--- via Dng]

> On 5 Mar 2021, at 03:23, viverna  wrote:
> 
> Yesterday I updated one of my computers with apt-get upgrade. This packages 
> are upgraded:
> 
> grub-common grub-pc grub-pc-bin grub2-common
> 
> dpkg install from version 2.02+dfsg1-20+deb10u3 to version 
> 2.02+dfsg1-20+deb10u4
> 
> 2.02+dfsg1-20+deb10u4 seems came from to:
> http://deb.devuan.org/merged beowulf-security/main
> 
> 2.02+dfsg1-20+deb10u3 is in:
> http://deb.devuan.org/merged beowulf/main
> 
> Upgrading system does not produce or show any problems and then I halt the 
> system.
> 
> I use Devuan Beowulf for all my pc. In this computer there is only 1 hd, 
> partition type gpt, 3 partitions:
> 
> /dev/sda1  EFI System
> /dev/sda2  Linux filesystem
> /dev/sda3  Linux swap
> 
> I switched on the pc later and grub rescue appears. WTF?
> 
> I solved (temporarily) the problems with:
> 
> set prefix=(hd0,gpt2)/boot/grub
> set root=(hd0,gpt2)
> insmod normal
> normal
> 
> and grub menù appears.
> 
> Login with root, and then update-grub... grub-install... and so on...
> 
> Restart the system. Grub rescue. Then login with root. New tests. Grub rescue 
> again. [N times?]
> 
> At the end I downgrade from 2.02+dfsg1-20+deb10u4 to 2.02+dfsg1-20+deb10u3 
> the upgraded package.
> 
> update-grub and grub-install. Reboot. Grub works!
> 
> I am currently reluctant to upgrade again.
> 
> And now the question. Has anyone reported the error in Devuan? Has anyone 
> haved this problem?

Seems to be a bit of news about the latest update.
https://9to5linux.com/patches-for-multiple-new-grub2-security-flaws-start-rolling-out-to-linux-distros-update-now

The changelog mentions changes to secure boot. Could that be related to the 
issue?

https://metadata.ftp-master.debian.org/changelogs//main/g/grub2/grub2_2.02+dfsg1-20+deb10u4_changelog___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] godaddy (was Your system is not supported by certbot-auto anymore.)

[wirelessduck--- via Dng]

> On 12 Dec 2020, at 11:37, Hendrik Boom  wrote:
> 
> On Tue, Dec 08, 2020 at 11:05:22AM -0800, spiralofhope wrote:
>>> On Wed, 9 Dec 2020 01:00:44 +1100
>>> wirelessduck--- via Dng  wrote:
>>> 
>>> A good move to switch from godaddy. Doesn’t really matter where you
>>> switch to, but godaddy appear to be a seriously unethical company.
>>> 
>>> https://www.webpronews.com/godaddy-elephant-killing-nodaddy-venovix/
>>> 
>>> https://www.wired.com/2007/01/godaddy-meet-no/
>>> 
>>> https://www.theregister.com/2011/07/12/godaddy_shuts_down_nodaddy/
>> 
>> Some people claim that godaddy has observed their searches for new
>> a domain name registration and has later purchased them for itself.
> 
> Know any domain registrars that don't mess with the user?
> 
> -- hendrik

Gandi works for me.

https://www.gandi.net/en-AU/no-bullshit

https://www.gandi.net/en-AU/gandi-supports___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Your system is not supported by certbot-auto anymore.

[wirelessduck--- via Dng]

> On 8 Dec 2020, at 23:51, Simon Hobson  wrote:
> 
> At my last job, we used GoDaddy for certs - not sure how much was GoDaddy and 
> how much was my lack of experience, but it used to seem like a right PITA at 
> times. I switched to SSLMate for the (linux) systems I managed.

A good move to switch from godaddy. Doesn’t really matter where you switch to, 
but godaddy appear to be a seriously unethical company.

https://www.webpronews.com/godaddy-elephant-killing-nodaddy-venovix/

https://www.wired.com/2007/01/godaddy-meet-no/

https://www.theregister.com/2011/07/12/godaddy_shuts_down_nodaddy/___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Let's Encrypt (was: snapd in Devuan? Dependency on systemd...)

[wirelessduck--- via Dng]

> On 5 Dec 2020, at 00:56, Adam Borowski  wrote:
> 
> First, an anecdote: to track sleep problems I have, I bought a cheapest
> smartband, a Huawei one.  It has almost no controls on its own, and it's UI
> needs a dumbphone (Google or Apple infested) via Bluetooth.  Because
> $REASONS¹ I happen to carry two phones, one of them such a dumbphone,
> with no IP network connection 99.999% of the time.  Setting up the
> smartband requires a "Huawei account" (but works correctly without network
> later on).  Such an account needs a password.  Alas, Huawei has weird
> requirements (like, banning spaces and non-alnum chars) so none of my
> usual password schemes work.  Pissed off, calling them Nazis would be
> inappropriate so I instead chosen the password to be "1989tiananmen".
> Account creation timed off.  I tried multiple times, over a few days,
> both from the phone and from website, on different browsers/OSes/machines/
> networks (I did not suspect a low-level interruption).  Finally, choosing
> a different password worked.
> 
> So, hmm, how come a https connection gets intercepted by the Great Firewall?
> No hacking by the govt is involved here...

Not at all surprising. The same problem exists with wechat app, the backbone of 
Chinese society. Passwords are clearly (deliberately I’m guessing) not being 
hashed on the backend database.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Firefox and its forks are losing the power of add-ons.

[wirelessduck--- via Dng]

> On 3 Dec 2020, at 19:12, Edward Bartolo via Dng  wrote:
> 
> Dear All,
> 
> Lately, I am noticing Waterfox has lost the ability to display my
> add-ons, which are AdGuard AdBlocker and NoScript. I had about two
> more in the past, but it is becoming increasingly difficult to have
> any that work. My preferences are an ad-free internet experience, or
> at least, if not entirely ad-free, with intrusive adds blocked, and a
> font rendering with a large than normal font size. The latter, is
> provided by Waterfox itself, but adds are favoured to intrude and
> steal bandwidth and processing power which I do not have much of.
> 
> I would like to ask whether a software proxy running on the same
> machine would be able to provide adequate ad filtering. I have
> iptables installed, but it is not configured and configuration
> requires some networking knowledge which unfortunately I do not have.
> I tried to find a GUI front end for iptables, but failed to find what
> is suitable for my very limited networking knowledge.
> 
> If you have other solutions which I did not think of, please suggest
> them. Thanks for taking the time to reply.
> 
> Edward.

I’ve never used it myself, but the privoxy website mentions it does ad blocking 
and is available from devuan/debian repositories.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] snapd in Devuan? Dependency on systemd...

[wirelessduck--- via Dng]

> On 2 Dec 2020, at 11:09, Bernard Rosset via Dng  wrote:
> 
> Certbot has removed support of certbot-auto for Debian-based systems (cf. 
> https://github.com/certbot/certbot/blob/adacc4ab6dc63b024b17f0ec5adeb1adc9f93300/certbot-auto#L802).
> 
> Official instructions for Debian 
> (https://certbot.eff.org/lets-encrypt/debianbuster-other) tell to use the 
> snapd package (https://packages.debian.org/buster/snapd)... which depends on 
> systemd and has not been rebuilt separately for Devuan yet.
> 
> Is there any plan to do so?
> I know making the list of repackaged packages grow is troublesome for 
> maintenance future-wise...
> 
> Cheers,
> Bernard (Beer) Rosset
> https://rosset.net

Have you tried just installing certbot via apt directly? It’s available in the 
repositories.

There are instructions on their website for Devuan Beowulf at 
https://certbot.eff.org/lets-encrypt/devuanbeowulf-other___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] ..will experimental seatd be part of our escape from pötterisms like d-bus and (e)logind?

[wirelessduck--- via Dng]

> On 1 Dec 2020, at 11:26, Arnt Karlsen  wrote:
> 
> Hi,
> 
> 
> ..will experimental seatd be part of our escape from pötterisms like
> d-bus and (e)logind?:
> https://pkginfo.devuan.org/stage/experimental/experimental/seatd_0.4.0-1~rc1.html
> https://git.sr.ht/~kennylevinsen/seatd
> 
> ..git clone https://git.sr.ht/~kennylevinsen/seatd and have a look. :o)

Seems to be quite new. Is there much existing software supporting it yet, or is 
that a job to start filing some feature request issues at various bug trackers?

— 
Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Beowulf: 32bit or 64 bit?

[wirelessduck--- via Dng]

> On 26 Nov 2020, at 13:02, Gregory Nowak  wrote:
> 
> On Wed, Nov 25, 2020 at 05:34:16PM -0700, Fred wrote:
>> I think Debian Jessie is 32 bit.  To upgrade to Beowulf I just followed
>> instructions that didn't say anything about 32 or 64.  I just assumed
>> Beowulf was 64 bit.
> 
> Debian jessie was available in i386 and amd64 as far as I recall.
> 
>> 
>> My CPU appears to be able to do 64 so how do I change over?
> 
> Probably the easiest way is to do a fresh 64 bit install of
> Beowulf. There might be a way to do a migration through dpkg
> --add-architecture, but I'm not sure about that.
> 
> Greg

The debian wiki has an article on doing this transition.
https://wiki.debian.org/CrossGrading

It also mentions a new package debian-crossgrading from google summer of code 
2020 that appears to automate some of this.
https://salsa.debian.org/crossgrading-team/debian-crossgrading

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Clarification please

[wirelessduck--- via Dng]

> On 31 Oct 2020, at 10:52, Simon Walter  wrote:
> 
> On 10/30/20 3:19 AM, Bernard Rosset via Dng wrote:
>>> That said, I've stopped using unbound and I'm using straight BIND as my
>>> local resolver lately. It's pleasant.
>> From what we discovered about unbound during one of the meetings, I clearly 
>> do not trust that technology.
> 
> What meetings? Is it possible to divulge some more info WRT what you 
> discovered? I am curious.

Could it be related to this?

https://github.com/NLnetLabs/unbound/issues/303___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] X11: safe to remove?

[wirelessduck--- via Dng]

> On 5 Oct 2020, at 04:23, tempforever via Dng  wrote:
> 
> Thanks for all of your responses.  I did successfully remove it, with no
> ill side effects to be seen so far.  In my particular case, I don't use
> java, or, apparently, other things that depended on X11.  Not sure it
> was actually necessary to remove (it wasn't) but at the very least I did
> free up a little bit of disk space.  :-)

If in doubt next time, you can pass the “-s” argument to apt/apt-get to 
simulate what would happen and which packages get removed without actually 
removing anything. You can then inspect the all packages to be removed to 
ensure you don’t need any of them. If all looks ok then you run the 
remove/purge again without “-s” to do the actual removal.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] X11: safe to remove?

[wirelessduck--- via Dng]

> On 3 Oct 2020, at 00:12, Dimitri Minaev via Dng  wrote:
> 
> 
> Because of Swing, I suppose. Java allows one to create GUI apps, too.

The headless jre package also has X11 dependencies.

> 
>> On Thu, Oct 1, 2020 at 6:38 AM Steve Litt  wrote:
>> On Tue, 29 Sep 2020 08:29:51 +0400
>> Dimitri Minaev via Dng  wrote:
>> 
>> > JVM often depends on X11 libs.
>> 
>> I wonder why.
>> 
>> SteveT
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Xorg stopped working after upgrade to Beowulf

[wirelessduck--- via Dng]

> On 22 Sep 2020, at 12:36, Marc Shapiro via Dng  wrote:
> 
> I have pretty much decided that there is no way to upgrade my Debian system 
> to Buster and keep it usable without systemd.  Since I am set up for 
> multiboot, including Devuan Ascii, I decided to upgrade that to Beowulf and 
> see if that will work for me and the others using this box.
> 
> After upgrading (following the instructions for upgrading an existing Devuan 
> system), I rebooted the computer.
> 
> First, I booted into my Debian Stretch partition to make sure that everything 
> was still good, there.  Boot, login, start Xorg. All looks good.
> 
> Logout and reboot into Beowulf.
> 
> Boot and login went fine.  Starting Xorg, not so well.  Tried all three users 
> with no luck.  This worked before the upgrade.  Tried as root.  Success!  So 
> root can start Xorg, but not an ordinary user.  Any ideas what might be 
> wrong.  It looks like a permissions issue, but I don't know enough about how 
> X actually starts up to know where to look.  Anything that you want me to 
> post to help debug this?
> 
> Any help appreciated.
> 
> 
> Marc

If you are starting X from a terminal/tty, the Beowulf release notes mention 
the required configuration to start X as non-root.

https://files.devuan.org/devuan_beowulf/Release_notes.txt

— 
Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Zoom? Rather not...

[wirelessduck--- via Dng]

> On 6 Aug 2020, at 20:52, Haines Brown  wrote:
> 
> For me security refers primarily to file access. This takes me back to 
> my question. If I craete a new user, named zoom for example, and have 
> it run zoom, won't that limit access files on my HD?

With the dpkg-deb utility you can extract all the control information and 
pre/post install/rm scripts from the .deb file so you can inspect what the 
package would do on installation/removal.

— 
Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] deborphan lists libelogind0

[wirelessduck--- via Dng]

I have some packages installed such as rsyslog that have Depends: libsystemd0. 
I also have libelogind0 installed that has Provides: libsystemd0. This all 
works fine on Beowulf with latest updates.

However when I run deborphan it shows up libelogind0 in the output. Why is 
this? Does deborphan not handle packages providing another package dependency?
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Devuan Beowulf fresh install - feedbacks

[wirelessduck--- via Dng]

> On 6 Jun 2020, at 13:27, deadbrain  wrote:
> 
> My current problem is with docker.io, the rc dependency is too old and docker 
> is  not functional...
> 
> Do you have plans to upgrade this version?
> 
> Kind regards
> 
> Jerome

I’ve had docker running on Beowulf for a while now. Use the official docker 
repository for debian and just use buster for the release name as the 
“lsb_release -cs” command likely will give the wrong answer running it on 
Devuan.

https://docs.docker.com/engine/install/debian/

—Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] kernel instabilities

[wirelessduck--- via Dng]

> There is a 5.4.x version
> in buster/Beowulf backports, which is the latest LTS release. That
> should be new enough, and easier than recompiling from source.
> 
> Greg

Yes that’s what I’m currently running. However the kernel version listed in the 
original email suggested that the person was running Ascii and not Beowulf 
which is why they would only have access to 4.19 from ascii-backports 
repository.

If someone on Ascii wants a kernel newer than backports then they will have to 
compile it themselves or upgrade to Beowulf to access beowulf-backports.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] kernel instabilities

[wirelessduck--- via Dng]

> You're very likely required to upgrade to a much newer Kernel version. I
> suggest you to use the most recent stable kernel version and build it from
> source ( Not that hard, ask me for help if needed) For me the upgrade
> fixed the issue.
> 
> cheers,
> Andreas

There’s also a slightly newer version 4.19 available from backports repository. 
While not as new as the most recent stable kernel, it might be quicker and 
easier to test out than compiling as it’s available through apt.

https://pkginfo.devuan.org/stage/ascii/ascii-backports/linux-image-amd64_4.19+105+deb10u3~bpo9+1.html

If that doesn’t work then I agree that compiling the latest stable would be the 
next choice.___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Felker Init: was without-systemd.org not working

[wirelessduck--- via Dng]

>> On 21 May 2020, at 17:31, Steve Litt  wrote:
>> 
>> On Thu, 21 May 2020 05:13:52 +0100
>> tux...@sapo.pt wrote:
>> 
>> Citando Steve Litt :
>>> This whole discussion balances on the definition of "shell aware".
>>> What is "shell aware?"
>>> SteveT
>> Have you tried to write shell script code into the execution command  
>> of a systemd unit file?
>> it doesn't work right?!
>> Why do you think it doesn't work?
> 
> Because it's a configuration file, not a script.

I think they mean the specific “ExecStart=” line in the unit file that 
references the executable file and it’s arguments to run when the service is 
started.

https://www.freedesktop.org/software/systemd/man/systemd.service.html

Ref: § Command Lines

- - -8<- - -

This syntax is inspired by shell syntax, but only the meta-characters and 
expansions described in the following paragraphs are understood, and the 
expansion of variables is different. Specifically, redirection using "<", "<<", 
">", and ">>", pipes using "|", running programs in the background using "&", 
and other elements of shell syntax are not supported.

- - -8<- - -___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] without-systemd.org not working

[wirelessduck--- via Dng]

> On 15 May 2020, at 22:51, Emiliano Marini via Dng  wrote:
> 
> 
> I don't know who contact but the site http://without-systemd.org isn't 
> working (it throws database error):

It looks to have been resurrected by someone else at 
https://without-systemd.frama.wiki/ but I can’t verify for it’s authenticity or 
content.

—Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Installing birdtray on Beowulf

[wirelessduck--- via Dng]

> Unfortunately it doesn’t have a tray indicator, and the evolution-indicator 
> package never made it into Debian.

So I was able to successfully download and install the alltray .deb package 
from Debian bullseye and that seems to be working fine for tray minimise in 
Devuan Beowulf, including new mail notification icon change.

Thanks for all the help.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Installing birdtray on Beowulf

[wirelessduck--- via Dng]

> evolution can connect to exchange, and iirc, includes a tray icon by
> default..

Evolution does indeed connect to Office365 using the docs at 
https://wiki.gnome.org/Apps/Evolution/EWS/OAuth2

Unfortunately it doesn’t have a tray indicator, and the evolution-indicator 
package never made it into Debian.

I will still give it a go for a while to see how it compares to thunderbird.___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Installing birdtray on Beowulf

[wirelessduck--- via Dng]

> On 5 May 2020, at 19:17, Dimitris via Dng  wrote:
> 
> On 5/5/20 12:11 PM, wirelessduck--- via Dng wrote:
>> Last time I looked at claws (a few years ago) I couldn’t get it to connect 
>> to Exchange/Office365 but perhaps I should take another look if it’s changed 
>> since then?
> 
> evolution can connect to exchange, and iirc, includes a tray icon by
> default..

Has it progressed past Exchange 2010/2013 support? I might take another look at 
that too but I’m not hopeful.

I do like the dark mode theme in thunderbird which I never had last time I used 
Evolution.

Thanks
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Installing birdtray on Beowulf

[wirelessduck--- via Dng]

> On 5 May 2020, at 15:54, Florian Zieboll  wrote:
> 
> I just websearched for Birdtray, hoping to get a hint towards a firefox 
> "close to tray" successor and found that there seem to be flatpaks and a PPA:
> 
> https://www.linuxuprising.com/2018/10/birdtray-thunderbird-tray-icon-with-new.html
> 
> Besides that, I recommend to have a look at Claws Mail and its plugins:
> 
> https://www.claws-mail.org/plugins.php 
> 
> Libre Grüße,
> Florian

Thanks, I might look into this flatpak thing. Haven’t used it before.

Last time I looked at claws (a few years ago) I couldn’t get it to connect to 
Exchange/Office365 but perhaps I should take another look if it’s changed since 
then?
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Installing birdtray on Beowulf

[wirelessduck--- via Dng]

> On 5 May 2020, at 15:51, Dimitris via Dng  wrote:
> 
> On 5/5/20 5:38 AM, wirelessduck--- via Dng wrote:
>> Are there any other methods to get it installed without compiling from 
>> source?
> 
> you can try ceres version (=1.8.1) to see if it works in beowulf.
> 
> btw, i think this is a debian bug.. tried to install birdtray on a
> buster machine and got the same error..

Thanks, but I’ve already checked that. At the very least it has a libgcc-s1 
dependency which doesn’t exist in Beowulf/buster.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Installing birdtray on Beowulf

[wirelessduck--- via Dng]

birdtray on Beowulf is 1.5-1 but thunderbird on Beowulf has Breaks: birdtray 
(<< 1.7.0+ds-1~) so it won’t install with apt.

Are there any other methods to get it installed without compiling from source?

Or are there any alternative apps that people use to show thunderbird status in 
the panel notification area?

There are no bug reports in debian bug tracker for this so I’m wondering if 
anyone actually uses this apt package? Perhaps I will file a bug there if 
nothing else comes of this.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] New Debian project leader

[wirelessduck--- via Dng]

Looks like debian has voted for their next project leader for the upcoming year.

https://lwn.net/Articles/816158/

https://www.phoronix.com/scan.php?page=news_item&px=Debian-New-DPL___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Is anybody using Discord for virtual get-togethers in Devuan?

[wirelessduck--- via Dng]

> On 24 Mar 2020, at 01:55, John Crisp via Dng  wrote:
> 
> On Sun, 22 Mar 2020 13:24:43 +1100
> wirelessduck--- via Dng  wrote:
> 
> 
>> Anyone have experience on how it compares to Mattermost or Zulip?
> 
> I believe it has quite a lot of refugees from Slack, Mattermost,
> Hipchat etc
> 
> You can sign up for a online trial free for a period I think, or grab a
> docker copy, and try it for yourself
> 
> It has its faults and foibles but I have been using it in a couple of
> low volume situations for a good few years now (about version 0.20?)
> 
> It does use Mongo for the DB and there is some stuff in the foros &
> github about the licencing for it (can't remember where now)
> 
> Online chat/video is a crowded space with everyone jostling for
> position and a slice of the action because it will be the eventual
> death of email, and all the big players want to control that. They will
> buy up most smaller startups to stop any competition.
> 
> I believe the big battle currently is Teams v Slack. M$ are bleeding
> them dry, because they can.
> 
> Rocket are pretty Open Source - the boss is a big believer.
> 
> Anyways, try it. But as ever, Caveat Emptor !!

Thanks!  I believe you’re right with that. The only way to know for sure how it 
will go is to try it out, or perhaps try them all out.

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Anyone installed a jitsi server on Devuan?

[wirelessduck--- via Dng]

> On 23 Mar 2020, at 10:19, terryc  wrote:
> 
> On Sun, 22 Mar 2020 17:55:25 -0400
> Steve Litt  wrote:
> 
>> Hi all,
>> 
>> Has anyone installed a jitsi server on Devuan? I need to maintain a
>> jitsi server in these days of virtual life.
> 
> Err, yes, it "installed on the system" and nmap now lists a number of
> extra services;
> 
> 5222/tcp open  xmpp-client
> 5269/tcp open  xmpp-server
> 5280/tcp open  xmpp-bosh
> /tcp open  sun-answerbook
> 
> But I have progressed no further then that as there doesn't appear to
> be any manuals.
> 
> Totally under whelmed when I ran the Jitsi client and it only allows you
> to sign up to existing commercial services, plus irq.
> 
> I'm looking for something to provide a local server and avoid the data
> and privacy pirates.
> 
> Good Luck.

The github page at https://github.com/jitsi/jitsi-meet has some documentation.

I can see quick-install guide for debian-based systems, tutorial video, and 
manual install instructions.

Just tested installing on Devuan Beowulf now and seemed to go fine, once I 
worked out that you shouldn’t use “localhost” for the jitsi-meet domain when it 
asks in debconf, since that is apparently already taken in the existing config 
somewhere. You just need to assign a separate domain and add that to /etc/hosts 
as specified in the quick-install guide.

The jitsi meet iOS app allows me to specify a custom jitsi-meet server URL but 
I haven’t done enough setup to test that out.

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Is anybody using Discord for virtual get-togethers in Devuan?

[wirelessduck--- via Dng]

> On 22 Mar 2020, at 01:30, John Crisp via Dng  wrote:
> 
> On 20/03/20 13:38, Steve Litt wrote:
>> Is anybody using Discord in Devuan for virtual get-togethers?
>> 
> 
> Discord. Wouldn't touch it with a barge pole. Horrible spyware.
> 
> We use Rocket.Chat internally - it'll run on node or in a docker
> container (I won't mention snaps...) -
> 
> It's a 'Open Source Slack alternative'
> 
> https://rocket.chat
> https://github.com/RocketChat/Rocket.Chat
> 
> They are pretty good with their privacy -  you can even run it
> completely disconnected from the interwebs if required.
> 
> Not too heavy on hardware (depends on number of users )
> 
> It connects happily via jitsi for video conferencing - either use online
> jitsi or host your own.
> 
> Think buried in that lot somewhere is screen sharing support too.
> 
> (You can also use Big Blue Button I think)
> 
> It also has a Livechat widget for your website so you can chat to
> incoming visitors, and even conference with them too.
> 
> Still under heavy and rapid development, but not a bad piece of kit all
> in all and worth a look.
> 
> No, I have no commercial involvement. I just have helped out on and off
> for a few years.
> 
> Rgds
> John

Anyone have experience on how it compares to Mattermost or Zulip?
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] AMD Ryzen?

[wirelessduck--- via Dng]

> b. See if your UEFI has a Power Supply Idle Control setting, and set
> it to typical if it does.

Some AMD motherboards either won’t have that (MSI) or need a bios update to get 
that setting.

I’ve got a threadripper 2950x running with Linux on the MSI MEG X399 CREATION. 
No options available for power supply idle, but it seems to work fine with the 
latest bios. I seem to recall that the Ryzen bug had been fixed by the time 
this threadripper chip was released though, so maybe it’s also fixed for the 
newer Ryzen chips too?
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Using Devuan on Google Cloud

[wirelessduck--- via Dng]

Hi

I’m starting up a new project on GCP and looking to try and run Devuan on there.

In the default debian images, google provides a google-compute-engine package 
that provides the guest environment inside the VM instance. Unfortunately this 
package has a dependency on systemd.

Has anyone run into any issues running Devuan on GCP without the guest 
environment installed? Am I missing anything critical by not having it?

Thanks
—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] kotlin

[wirelessduck--- via Dng]

> On 29 Feb 2020, at 15:10, Hendrik Boom  wrote:
> 
> Does  Devuan have an already packaged implementation of kotlin?
> I looked in aptitude, but maybe I haven't guessed the right name
> for the package.
> 
> -- hendrik

You could try sdkman. I’ve not used it before, but it does list kotlin as 
supported.

https://sdkman.io

There also looks like a GSoC attempt at packaging for debian.

https://wiki.debian.org/GSoC2019Kotlin
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] why is polkit needed? dropin replacement

[wirelessduck--- via Dng]


On 2020-02-23 22:10, marc wrote:
> If I understand you correctly, you propose a simple gtk
> program that is setuid (so that it can read /etc/shadow, and
> grant root privileges). The problem is that there is no such
> thing as a simple gtk program. This is not comment limited to
> gtk programs - most graphical toolkits and libraries present
> a pretty large attack surface - they contain large protocol
> interpreters and font rendering engines, flaws in which could 
> then be exploited to give root access without any password 
> whatsoever.

The author of XScreenSaver, Jamie Zawinski, has some FAQ [1] entries and a 
separate page [2] explaining why he never used GTK or other graphical toolkits 
for XScreenSaver development. Perhaps some of those ideas may be relevant to 
this gkexec project?

[1] https://www.jwz.org/xscreensaver/faq.html#toolkits
[2] https://www.jwz.org/xscreensaver/toolkits.html

—Tom

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Migrating from Buster to Beowulf - feedback needed

[wirelessduck--- via Dng]

> On 15 Dec 2019, at 00:51, Bernard Rosset via Dng  wrote:
> 
> Having migrated from buster to beowulf, using wicd as the network manager, 
> how does one rename network interfaces from "persistent names" to old, 
> numbered, ones?

https://unix.stackexchange.com/questions/321755/eth0-no-longer-claiming-address-on-debian-jessie

Add net.ifnames=0 to grub command line.

Optionally add biosdevname=0 if you have biosdevname installed.

—Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Beowulf: needrestart broken?

[wirelessduck--- via Dng]

> yes same here, although i never used needrestart's nagios plugin.
> 
> # needrestart -p
> UNKN - Kernel: 4.19.0-6-amd64 (!!), Microcode: unknown, Services: none,
> Containers: none, Sessions: none|Kernel=1;0;;0;2 Microcode=U;0;;0;1
> Services=0;;0;0 Containers=0;;0;0 Sessions=0;0;;0

Thanks for the confirmation

http://bugs.debian.org/942293___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Beowulf: needrestart broken?

[wirelessduck--- via Dng]

I upgraded a headless machine from ascii to beowulf and now
needrestart nagios plugin is failing.

Previously, "needrestart -p" running on ascii shows proper output:

OK - Kernel: 4.9.0-11-amd64, Services: none, Containers: none,
Sessions: none|Kernel=0;0;;0;2 Services=0;;0;0 Containers=0;;0;0
Sessions=0;0;;0

Now after upgrading to beowulf, "needrestart -p" exits with code 3 and
the following output:

UNKN - Kernel: 4.19.0-6-amd64, Microcode: unknown, Services: none,
Containers: none, Sessions: none|Kernel=0;0;;0;2 Microcode=U;0;;0;1
Services=0;;0;0 Containers=0;;0;0 Sessions=0;0;;0

Can anyone else verify this problem?  I will submit a bug report to
Debian BTS if I can confirm that this problem exists elsewhere outside
of my environment.

--Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] [devuan-dev] Migrating from Buster to Beowulf - feedback needed

[wirelessduck--- via Dng]

> I have just had a go in a couple of scenarios using a VM.
> 
> The basic process is:
> 
> 1) Install sysvinit-core (if you don't have it already), remove libnss-systemd
>and reboot.
> 2) Manually download and  install devuan-keyring (wget, dpkg -i).
> 3) change apt sources from buster to beowulf.
> 4) apt update.
> 4) apt full-upgrade or apt-get dist-upgrade.

Should you also be installing the devuan-baseconf package? Or does that get 
pulled in automatically during the transition?

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Runit logging

[wirelessduck--- via Dng]

> My question is whether there is any way to make svlogd compress the logs when 
> it rotates them?  Do I need to tell svlogd to ignore any rotation and setup 
> some sort of logrotate.d configuration? Has anyone else done this 
> successfully?

So this turned out to be much easier than expected. Just needed a postrotate 
section in the logrotate.d config that runs

/usr/bin/sv hup daemonservice/log
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng