[gentoo-user] kernel notification of file system changes

2010-05-04 Thread Iain Buchanan
Hi,

I'm looking for some kernel-based notification of changes to my file
system.  I've been looking at inotify, but it's not exactly what I want.

Basically I want to know if _any_ write occurs anywhere.  I don't want
to register a whole bunch of files to watch, I just want to watch an
entire mount.  When a file is changed (ie. a write operation occurs), I
then want to add that file or fd to a list in RAM.  That's all.

I know this may be a lot of data, considering streams and devices, but I
can filter out /dev, /proc, etc. and just focus on "real" files.

Is there anything that can do this?

thanks :)
-- 
Iain Buchanan 

I hate it when my foot falls asleep during the day cause that means
it's going to be up all night.
-- Steven Wright




Re: [gentoo-user] Ldap authentication issues.

2010-05-04 Thread Daniel Troeder
On 05/05/2010 02:02 AM, Indexer wrote:
> I have solved this issue late last night. I took my inspiration from
> fedora, who has a really nice automatic tool for adding ldap servers,
> and i looked at their changes. The issue was that pam_unix was set as
> required, not sufficient / optional. I also found that in fedora they
> do includes in their pam, and my setup did not have it so you need to
> modify the correct module for the system, you are using. Find below
> my corrected pam config, and i will do a write up of this process.
nice :)

> I have also found that when the user logs in it takes a long tine for
> commands to execute, and in this time it sends alot of requests to
> the slapd server, using anonymous binds. Any idea how i make
> anonymous binds return attrs such as groupUid etc?
You have to allow that using ACLs in slapd.conf.

In your first post they were:

access to attrs=userPassword
by dn="uid=william,ou=Admin,dc=chocolate,dc=lan" write
by anonymous auth
by self write
by * none
 access to *
by self write
by users read

I think you should have at least this:

access to dn.base="" by * read

So that anonymous can at least get to the root of your LDAP tree. This
is important to some clients (especially SASL).

And then I'd also open up read access to anonymous for everything else,
or at least Users+Groups, as that is also the case with /etc/passwd.
There is really no point in being more secretive than file permissions
on /etc/passwd.


access to *
by * read

or, more secure I think:

access to ou=Group,dc=chocolate,dc=lan
by dn.subtree="ou=Admin,dc=chocolate,dc=lan" write
by * read

access to ou=Admin,dc=chocolate,dc=lan
by dn.subtree="ou=Admin,dc=chocolate,dc=lan" write
by * read

access to ou=Users,dc=chocolate,dc=lan
by dn.subtree="ou=Admin,dc=chocolate,dc=lan" write
by * read

I'm not 100% sure with the "by dn.subtree=..." though I think that
should work ($ man slapd.access).


Bye,
Daniel

-- 
PGP key @ http://pgpkeys.pca.dfn.de/pks/lookup?search=0xBB9D4887&op=get
# gpg --recv-keys --keyserver hkp://subkeys.pgp.net 0xBB9D4887



signature.asc
Description: OpenPGP digital signature


Re: [gentoo-user] Receiving mail from crontab

2010-05-04 Thread Mick
On Tuesday 04 May 2010 23:40:20 Alex Schuster wrote:
> Mick writes:
> > I am getting a bit confused from the messages that I receive in my
> > gmail account sent from my crontab.
> >
> > First, is related to the title which is:
> >
> >  Cron  test -x /usr/sbin/run-crons &&
> > /usr/sbin/run-crons
> >
> > I am not sure what this "test -x" part represents?
> 
> It means: If /usr/sbin/run-crons is executable, execute it. It could also
> be written as
> [ -x /usr/sbin/run-crons ] && /usr/sbin/run-crons
> or
> f=/usr/sbin/run-crons
> if [ -x $f ]
> then
> $f
> fi

Thank you, I understand what the test does.  What I am not sure is why this is 
printed on the title of the email.  Where is what is printed on the email 
title controlled from?  Is it editable?

-- 
Regards,
Mick


signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Re: Kernel upgrade and now LUKS failure.

2010-05-04 Thread Stefan G. Weichinger
Am 04.05.2010 23:24, schrieb Daniel Troeder:

> I'm using sys-fs/cryptsetup-1.1.1_rc1 since 02.05.2010 and didn't have
> any issues.
> Please decrypt your partition from the command line, so we can see if it
> is a cryptsetup/luks/kernel problem or a pam_mount problem.
> 
> Cmdline should something like:
> $ sudo cryptsetup -d /etc/security/verysekrit.key luksOpen
> /dev/mapper/VG01-crypthome myhome
> Which should create /dev/mapper/myhome.

My user sgw is currently not allowed to sudo this (should it be? it
never was).

And for root it says "Kein Schlüssel mit diesem Passsatz verfügbar."
(german) which should be "No key available with this passphrase." in
english.

Thanks, Stefan



Re: [gentoo-user] emerge --update - why doesn't it update my kde packages

2010-05-04 Thread Dale

Alex Schuster wrote:

KH writes:

   

Am 04.05.2010 21:41, schrieb Dale:
 
   

I have with-bdeps set in my make.conf so that it is enabled each
time. I just ran the command given above and it found over 40
packages that need to be upgraded.  I'm not even going to claim that
I understand all the chicken scratch in that command but apparently
stuff needed to be upgraded on my system that was being missed.
   

If a deep @system @world upgrade with --with-bdeps=y does not upgrade the
packages, then I think that they are either unnecessary packages that
should be depcleaned, or they should go into the world file. This
update_orphans.sh script is nice and I used a similar one when I had the
problem that a world update did not work due to blockers or something, but
normally it should not be necessary. And I believe these problems should
better be fixed another way.
   


I run emerge -a --depclean on a regular basis and they do not need to be 
removed according to it.  Something somewhere depends on them or at 
least portage thinks it does.  Point is, it updated them when portage 
didn't for some reason.


   

For me it does try to update the same packages as --with-bdeps, but it
tries to pull in like 39 new packages.

How and where have you integrated with-bdeps in make.conf?
 

 From /usr/share/portage/config/make.conf.example:

# EMERGE_DEFAULT_OPTS allows emerge to act as if certain options are
#   specified on every run. Useful options include --ask, --verbose,
#   --usepkg and many others. Options that are not useful, such as --help,
#   are not filtered.
#EMERGE_DEFAULT_OPTS=""

I have it set like this: EMERGE_DEFAULT_OPTS="--with-bdeps y"

Wonko

   


I think mine is the same as yours.  Mine is:

EMERGE_DEFAULT_OPTS="--with-bdeps y"

It's been there for a good long while.

Dale

:-)  :-)



Re: [gentoo-user] Ldap authentication issues.

2010-05-04 Thread Indexer
I have solved this issue late last night. I took my inspiration from fedora, 
who has a really nice automatic tool for adding ldap servers, and i looked at 
their changes. The issue was that pam_unix was set as required, not sufficient 
/ optional. I also found that in fedora they do includes in their pam, and my 
setup did not have it so you need to modify the correct module for the system, 
you are using. Find below my corrected pam config, and i will do a write up of 
this process.

I have also found that when the user logs in it takes a long tine for commands 
to execute, and in this time it sends alot of requests to the slapd server, 
using anonymous binds. Any idea how i make anonymous binds return attrs such as 
groupUid etc?

On 05/05/2010, at 7:00 AM, Daniel Troeder wrote:

>> 
>> # auth
>> authsufficient  pam_opie.so no_warn 
>> no_fake_prompts
>> authrequisite   pam_opieaccess.so   no_warn allow_local
>> #auth   sufficient  pam_krb5.so no_warn 
>> try_first_pass
>> #auth   sufficient  pam_ssh.so  no_warn 
>> try_first_pass
>> auth   sufficient  /usr/local/lib/pam_ldap.so no_warn 
>> use_first_pass
>> auth   sufficientpam_unix.so no_warn 
>> try_first_pass
>> 
>> # account
>> account requiredpam_nologin.so
>> #accountrequiredpam_krb5.so
>> account requiredpam_login_access.so
>> account sufficientpam_unix.so
>> accountsufficient/usr/local/lib/pam_ldap.so  
>> no_warn ignore_authinfo_unavail ignore_unknown_user
>> 
>> # session
>> #sessionoptionalpam_ssh.so
>> session requiredpam_permit.so
session optional /usr/local/lib/pam_ldap.so

>> 
>> # password
>> #password   sufficient  pam_krb5.so no_warn 
>> try_first_pass
>> passwordsufficientpam_unix.so no_warn 
>> try_first_pass
passwordsufficient  /usr/lib/local/pam_ldap.so
> 




[gentoo-user] Re: Kernel upgrade and now LUKS failure.

2010-05-04 Thread walt

On 05/04/2010 10:38 AM, Stefan G. Weichinger wrote:

Am 04.05.2010 18:54, schrieb walt:


pam_mount(mount.c): crypt_activate_by_passphrase: Operation not
permitted


I don't have a pam_mount, where does it come from?  Perhaps it needs
a reference to pam_ssh.so?


What do you mean with "where does it come from?" ?

It's in portage ...


Okay, I'm assuming pam_mount.so and mount.crypt come from the sys-auth/
pam_mount package but I can't check because all of those packages are
masked by the ~x86 keyword at the moment.


Could it be the case that my current setup somehow uses "the new API"
which isn't available yet in some package?

I don't yet have the whole picture ...


Daniel knows more than I do about this subject, so I recommend that you
follow his advice.  However, all of the pam_mount packages being masked
at the same time makes me suspect that not everything is working exactly
as it should.  I'll follow this thread, hoping to learn more.





Re: [gentoo-user] emerge --update - why doesn't it update my kde packages

2010-05-04 Thread Alex Schuster
KH writes:

> Am 04.05.2010 21:41, schrieb Dale:

> > I have with-bdeps set in my make.conf so that it is enabled each
> > time. I just ran the command given above and it found over 40
> > packages that need to be upgraded.  I'm not even going to claim that
> > I understand all the chicken scratch in that command but apparently
> > stuff needed to be upgraded on my system that was being missed.

If a deep @system @world upgrade with --with-bdeps=y does not upgrade the 
packages, then I think that they are either unnecessary packages that 
should be depcleaned, or they should go into the world file. This 
update_orphans.sh script is nice and I used a similar one when I had the 
problem that a world update did not work due to blockers or something, but 
normally it should not be necessary. And I believe these problems should 
better be fixed another way.

> For me it does try to update the same packages as --with-bdeps, but it
> tries to pull in like 39 new packages.
> 
> How and where have you integrated with-bdeps in make.conf?

From /usr/share/portage/config/make.conf.example:

# EMERGE_DEFAULT_OPTS allows emerge to act as if certain options are
#   specified on every run. Useful options include --ask, --verbose,
#   --usepkg and many others. Options that are not useful, such as --help,
#   are not filtered.
#EMERGE_DEFAULT_OPTS=""

I have it set like this: EMERGE_DEFAULT_OPTS="--with-bdeps y"

Wonko



Re: [gentoo-user] Receiving mail from crontab

2010-05-04 Thread Alan McKinnon
On Wednesday 05 May 2010 00:17:09 Mick wrote:
> Hi All,
> 
> I am getting a bit confused from the messages that I receive in my gmail
> account sent from my crontab.
> 
> First, is related to the title which is:
> 
>  Cron  test -x /usr/sbin/run-crons && /usr/sbin/run-crons
> 
> I am not sure what this "test -x" part represents?
> 
> 
> The second question is related to the output of chkrootkit, which is run by
> the cron.weekly and emails stuff that don't make much sense to me:
> ==
> $Ld$ Ll$(Lt$0HÄ8ÃAWAVAUIýATUSHH°èH›AÇHÝHL$ØMäITMt$(HÒtdfDIt$
> Hötm½(Ht8fLïèHþÿÿITHÃHÆLïèHßèHîHÅ(It$
> HuÊIMôIÆ(HÒu¢DÿèH1À[]A\A]A^A_ÃLæLïèþÿÿëÊLïH5H421ÒèoþÿÿDÿèëÃDS1öH°H;èHß[éCop
> yright (C) the VideoLAN VLC media player developersLicensed under the terms
> of the GNU General Public License, version 2 or later.Freebox TV listing
> (French ISP free.fr services)http/shout-
> winamp://www.shoutcast.com/sbin/newxml.phtmlhttp/shout-
> winamp://www.shoutcast.com/sbin/newtvlister.phtml?alltv=1http://mafreebox.f
> reebox.fr/freeboxtv/playlist.m3uhttp://www.canalplus.fr/index.php?pid=1784s
> houtshoutcast- limitShoutcastShoutcast radio
> listingsservices_discoveryshoutcastShoutcastTVShoutcast TV
> listingsshoutcasttvfrenchtvFrench TVFreeboxfreeboxStarting FreeboxStarting
> FrenchTVStarting ShoutTVStarting ShoutRadiono-playlist-
> autostartItemAddedShoutcast RadioShoutcast TVFreebox TVvlc://nopCanal +Les
> Guignolshttp-forward-cookieszRL«ACF0lsJG ,A¤,A¼,AÔ)aìog0...@4dûbbb
> E(A0A8D@| GCC: (Gentoo 4.3.4 p1.0, pie-10.1.5)
> 4.3.4.symtab.strtab.shstrtab.rela.text.data.bss.rodata.str1.8.rodata.str1.1
> .rela.data.rel.ro.local.rela.eh_frame.comment.note.GNU- stack @&1...@2s
> ==
> 
> Now I happened to notice that the above legible references to vlc are from
> the "services discovery" list that the vlc player shows under
> Media/Services.  Not sure what they are doing in chckrootkit ... is it
> telling me that it just scanned all such content?  When I run it manually
> it looks just the same and follows a long output following "Searching for
> suspect PHP files..."  I am not sure I understand why chkrootkit is
> emailing these to me and if I need to do something about it.

cron captures the output from any program it runs. If there is any output at 
all, it will mail it to you. In this case, something launched by run-crons is 
spewing something to STDOUT and you are getting it in your inbox.

As to what it means, well it looks like garbage. So you will have to run the 
chkrootkit program yourself and debug how it is going wrong and fix it. This, 
of course, has nothing whatsoever to do with cron itself.

The output looks like standard banner garbage that apps often write to the 
terminal when launched. I suspect an omitted "> /dev/null" somewhere


-- 
alan dot mckinnon at gmail dot com



Re: [gentoo-user] Receiving mail from crontab

2010-05-04 Thread Alex Schuster
Mick writes:

> I am getting a bit confused from the messages that I receive in my
> gmail account sent from my crontab.
> 
> First, is related to the title which is:
> 
>  Cron  test -x /usr/sbin/run-crons &&
> /usr/sbin/run-crons
> 
> I am not sure what this "test -x" part represents?

It means: If /usr/sbin/run-crons is executable, execute it. It could also 
be written as 
[ -x /usr/sbin/run-crons ] && /usr/sbin/run-crons
or
f=/usr/sbin/run-crons
if [ -x $f ]
then
$f
fi


No idea about your other question, though.

Wonko



Re: [gentoo-user] Receiving mail from crontab

2010-05-04 Thread Jason Dusek
2010/05/04 Mick :
>   Cron  test -x /usr/sbin/run-crons && /usr/sbin/run-crons
>
> I am not sure what this "test -x" part represents?

  The `test -x ' part means "Test that  is executable."
  and, implicitly, tests that the file exists. Sorry not to be more
  helpful.

--
Jason Dusek
Linux User #510144 | http://counter.li.org/



[gentoo-user] Receiving mail from crontab

2010-05-04 Thread Mick
Hi All,

I am getting a bit confused from the messages that I receive in my gmail 
account sent from my crontab.

First, is related to the title which is:

 Cron  test -x /usr/sbin/run-crons && /usr/sbin/run-crons

I am not sure what this "test -x" part represents?


The second question is related to the output of chkrootkit, which is run by 
the cron.weekly and emails stuff that don't make much sense to me:
==
$Ld$ Ll$(Lt$0HÄ8ÃAWAVAUIýATUSHH°èH›AÇHÝHL$ØMäITMt$(HÒtdfDIt$ 
Hötm½(Ht8fLïèHþÿÿITHÃHÆLïèHßèHîHÅ(It$ 
HuÊIMôIÆ(HÒu¢DÿèH1À[]A\A]A^A_ÃLæLïèþÿÿëÊLïH5H421ÒèoþÿÿDÿèëÃDS1öH°H;èHß[éCopyright
 
(C) the VideoLAN VLC media player developersLicensed under the terms of the 
GNU General Public License, version 2 or later.Freebox TV listing (French ISP 
free.fr services)http/shout-
winamp://www.shoutcast.com/sbin/newxml.phtmlhttp/shout-
winamp://www.shoutcast.com/sbin/newtvlister.phtml?alltv=1http://mafreebox.freebox.fr/freeboxtv/playlist.m3uhttp://www.canalplus.fr/index.php?pid=1784shoutshoutcast-
limitShoutcastShoutcast radio 
listingsservices_discoveryshoutcastShoutcastTVShoutcast TV 
listingsshoutcasttvfrenchtvFrench TVFreeboxfreeboxStarting FreeboxStarting 
FrenchTVStarting ShoutTVStarting ShoutRadiono-playlist-
autostartItemAddedShoutcast RadioShoutcast TVFreebox TVvlc://nopCanal +Les 
Guignolshttp-forward-cookieszRL«ACF0lsJG ,A¤,A¼,AÔ)aìog0...@4dûbbb E(A0A8D@|
GCC: (Gentoo 4.3.4 p1.0, pie-10.1.5) 
4.3.4.symtab.strtab.shstrtab.rela.text.data.bss.rodata.str1.8.rodata.str1.1.rela.data.rel.ro.local.rela.eh_frame.comment.note.GNU-
stack @&1...@2s
==

Now I happened to notice that the above legible references to vlc are from the 
"services discovery" list that the vlc player shows under Media/Services.  Not 
sure what they are doing in chckrootkit ... is it telling me that it just 
scanned all such content?  When I run it manually it looks just the same and 
follows a long output following "Searching for suspect PHP files..."  I am not 
sure I understand why chkrootkit is emailing these to me and if I need to do 
something about it.
-- 
Regards,
Mick


signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Ldap authentication issues.

2010-05-04 Thread Daniel Troeder
On 05/03/2010 02:37 PM, Indexer wrote:
> 
> On 03/05/2010, at 9:41 PM, Ward Poelmans wrote:
> 
>> On Mon, May 3, 2010 at 09:41, Indexer  wrote:
>>> I am currently trying to make a ldap server which i can use to authenticate 
>>> users. Sadly a large number of how to's are incomplete and don't work, so 
>>> after reading alot of how to's and manuals I have got 99.9% of the way. On 
>>> attempting to authenticate a user it denies the user access with a error 
>>> from auth.log
>>>
>>> May  4 02:21:08 nemo sshd[1271]: error: PAM: authentication error for 
>>> william from 172.20.0.1
>>>
>>
>> What does you ssh file in /etc/pam.d look like?
> 
> # auth
> authsufficient  pam_opie.so no_warn 
> no_fake_prompts
> authrequisite   pam_opieaccess.so   no_warn allow_local
> #auth   sufficient  pam_krb5.so no_warn try_first_pass
> #auth   sufficient  pam_ssh.so  no_warn try_first_pass
> #auth   sufficient  /usr/local/lib/pam_ldap.so no_warn 
> use_first_pass
> authrequiredpam_unix.so no_warn try_first_pass
> 
> # account
> account requiredpam_nologin.so
> #accountrequiredpam_krb5.so
> account requiredpam_login_access.so
> account requiredpam_unix.so
> #accountrequired/usr/local/lib/pam_ldap.so  
> no_warn ignore_authinfo_unavail ignore_unknown_user
> 
> # session
> #sessionoptionalpam_ssh.so
> session requiredpam_permit.so
> 
> # password
> #password   sufficient  pam_krb5.so no_warn try_first_pass
> passwordrequiredpam_unix.so no_warn try_first_pass
> 
>>
>> Ward
>>
> 
> I was under the impression that SSH was able to use pam from the system 
> module? I will try this out now uncommenting the ldap settings.
>
Can the user login from a console?
And what about "su - william" from a non-root account? (From a
root-account it should work without problems.)

Daniel



Re: [gentoo-user] Re: Kernel upgrade and now LUKS failure.

2010-05-04 Thread Daniel Troeder
On 05/04/2010 09:28 PM, Stefan G. Weichinger wrote:
> Am 04.05.2010 19:38, schrieb Stefan G. Weichinger:
> 
>> I don't yet have the whole picture ...
> 
> I did some "emerge -avuDN world", quite some packages updated even
> though I am doing "emerge -avu world" nearly every day ...
> 
> After a reboot and setting debug to 1 for pam_mount it says:
> 
> May  4 21:25:38 enzo slim: pam_mount(pam_mount.c:364): pam_mount 2.0:
> entering auth stage
> May  4 21:25:38 enzo slim: gkr-pam: invalid option: use_first_pass
> May  4 21:25:38 enzo slim: pam_unix(slim:session): session opened for
> user sgw by (uid=0)
> May  4 21:25:38 enzo slim: pam_mount(pam_mount.c:552): pam_mount 2.0:
> entering session stage
> May  4 21:25:38 enzo slim: pam_mount(misc.c:38): Session open: (uid=0,
> euid=0, gid=0, egid=0)
> May  4 21:25:38 enzo slim: pam_mount(mount.c:196): Mount info:
> globalconf, user=sgw  path="/dev/mapper/VG01-crypthome" mountpoint="/home/sgw"
> cipher="aes-cbc-plain" fskeypath="/etc/security/verysekrit.key"
> fskeycipher="aes-256-cbc" fskeyhash="md5"
> options="data=journal,commit=15" /> fstab=0
> May  4 21:25:38 enzo slim: command: 'mount.crypt'
> '-ocipher=aes-cbc-plain' '-ofsk_cipher=aes-256-cbc' '-ofsk_hash=md5'
> '-okeyfile=/etc/security/verysekrit.key' '-odata=journal,commit=15'
> '/dev/mapper/VG01-crypthome' '/home/sgw'
> May  4 21:25:38 enzo slim: pam_mount(misc.c:38): set_myuid: (uid=0,
> euid=0, gid=0, egid=0)
> May  4 21:25:38 enzo slim: pam_mount(misc.c:38): set_myuid:
> (uid=0, euid=0, gid=0, egid=0)
> May  4 21:25:40 enzo slim: pam_mount(mount.c:64): Errors from underlying
> mount program:
> May  4 21:25:40 enzo slim: pam_mount(mount.c:68):
> crypt_activate_by_passphrase: Operation not permitted
> May  4 21:25:40 enzo slim: pam_mount(pam_mount.c:520): mount of
> /dev/mapper/VG01-crypthome failed
> May  4 21:25:40 enzo slim: command: 'pmvarrun' '-u' 'sgw' '-o' '1'
> May  4 21:25:40 enzo slim: pam_mount(misc.c:38): set_myuid: (uid=0,
> euid=0, gid=0, egid=0)
> May  4 21:25:40 enzo slim: pam_mount(misc.c:38): set_myuid:
> (uid=0, euid=0, gid=0, egid=0)
> May  4 21:25:40 enzo slim: pam_mount(pam_mount.c:440): pmvarrun says
> login count is 1
> May  4 21:25:40 enzo slim: pam_mount(pam_mount.c:642): done opening
> session (ret=0)
> May  4 21:25:40 enzo slim: pam_mount(pam_mount.c:115): Clean global
> config (0)
> May  4 21:25:40 enzo slim: pam_mount(pam_mount.c:132): clean system
> authtok=0x80e6870 (0)
> May  4 21:25:40 enzo seahorse-daemon[1426]: DNS-SD initialization
> failed: Daemon not running
> May  4 21:25:40 enzo seahorse-daemon[1426]: unsupported key server uri
> scheme: ldap
> May  4 21:25:40 enzo seahorse-daemon[1426]: init gpgme version 1.3.0
> May  4 21:25:41 enzo pulseaudio[1475]: module-alsa-card.c: Failed to
> find a working profile.
> May  4 21:25:41 enzo pulseaudio[1475]: module.c: Failed to load  module
> "module-alsa-card" (argument: "device_id="5"
> name="platform-thinkpad_acpi"
> card_name="alsa_card.platform-thinkpad_acpi" tsched=yes ignore_dB=no
> card_properties="module-udev-detect.discovered=1""): initialization failed.
> May  4 21:25:41 enzo polkitd(authority=local): Registered Authentication
> Agent for session /org/freedesktop/ConsoleKit/Session3 (system bus name
> :1.49 [/usr/libexec/polkit-gnome-authentication-agent-1], object path
> /org/gnome/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
> 
> 
> - (maybe I pasted too much, this was everything from typing my
> username to the Gnome-session opened, but with the "wrong" /home for
> user sgw)
> 
> Some bits of additional info:
> 
> # cat /etc/pam.d/system-auth
> auth  requiredpam_env.so
> auth  requiredpam_unix.so try_first_pass likeauth nullok
> auth optional pam_mount.so
> auth optional pam_gnome_keyring.so
> 
> account   requiredpam_unix.so
> 
> password  requiredpam_cracklib.so difok=2 minlen=8 dcredit=2 
> ocredit=2
> retry=3
> password optional pam_gnome_keyring.so
> password  requiredpam_unix.so try_first_pass use_authtok nullok 
> sha512
> shadow
> session   requiredpam_limits.so
> session optional pam_gnome_keyring.so auto_start
> session   requiredpam_env.so
> session   requiredpam_unix.so
> session   optionalpam_permit.so
> session optional pam_mount.so
> 
> 
> 
> # cat /etc/security/pam_mount.conf.xml
> 
> 
> 
> 
> 
> 
>
> 
>  
> 
> 
>   
> 
> 
> 
>  path="/dev/mapper/VG01-crypthome"
> mountpoint="/home/sgw"
> fstype="crypt"
> options="data=journal,commit=15"
> cipher="aes-cbc-plain"
> fskeypath="/etc/security/verysekrit.key"
> fskeycipher="aes-256-cbc"
> fskeyhash="md5" />
> 
>   
> 
> 
> 
> 
> 
>  allow="nosuid,nodev,loop,encryption,fsck,nonempty,allow_root,allow_other" />
> 
> 
> /sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin
> 
> 
> 
> 
>   
> 
> 
> 
> 
> 
> 
> 
> 
> --- I didn't cha

Re: [gentoo-user] emerge --update - why doesn't it update my kde packages

2010-05-04 Thread KH

Am 04.05.2010 21:41, schrieb Dale:

<---cut--->  update_orphans.sh<--cut->
#!/bin/sh

eix -u | gawk '/^\[U\] / { print $2; }' | xargs -r emerge -v1uD

exit $?
<---cut---><--cut->

I run it immediately after the main emerge, when I have rsync'ed the
Portage tree.


No. --with-bdeps is not default anymore because it is considered to be
a bug if portage updates packages not used in any way. This is only if
a package is needed for buildtime.

Program A is version 1.5. To build it, it needs program B which at
this time is version 4.7
B is not needed for anything else!

Now there is an update to B-4.9 . Portage will not update B as long as
there is no update to A.

B is not in the world file. It is not a runtime dependency nore is it
a orphan.

kh




I have with-bdeps set in my make.conf so that it is enabled each time.
I just ran the command given above and it found over 40 packages that
need to be upgraded.  I'm not even going to claim that I understand all
the chicken scratch in that command but apparently stuff needed to be
upgraded on my system that was being missed.

It appears to do something good even if it is not related to the OPs
problem.

Dale


Hi,

For me it does try to update the same packages as --with-bdeps, but it 
tries to pull in like 39 new packages.


How and where have you integrated with-bdeps in make.conf?

kh



Re: [gentoo-user] emerge --update - why doesn't it update my kde packages

2010-05-04 Thread Dale

KH wrote:

Am 04.05.2010 16:59, schrieb David W Noon:

On Tue, 04 May 2010 11:00:01 +0200, Helmut Jarausch wrote about
[gentoo-user] emerge --update - why doesn't it update my kde packages:

[snip]

Still, eix confirmed there were quite a lot of kde packages which have
newer versions, and indeed,
emerge -auv1 -j4 --keep-going  $(qlist -IC kde-base/)
upgraded 24 packages.

Where does this discrepancy come from?


I think Portage does not consider packages that are not in your world
file, if the update is on world (or system).

To overcome this, I wrote a little script, called update_orphans.sh.
Here it is:

<---cut--->  update_orphans.sh<--cut->
#!/bin/sh

eix -u | gawk '/^\[U\] / { print $2; }' | xargs -r emerge -v1uD

exit $?
<---cut---><--cut->

I run it immediately after the main emerge, when I have rsync'ed the
Portage tree.


No. --with-bdeps is not default anymore because it is considered to be 
a bug if portage updates packages not used in any way. This is only if 
a package is needed for buildtime.


Program A is version 1.5. To build it, it needs program B which at 
this time is version 4.7

B is not needed for anything else!

Now there is an update to B-4.9 . Portage will not update B as long as 
there is no update to A.


B is not in the world file. It is not a runtime dependency nore is it 
a orphan.


kh




I have with-bdeps set in my make.conf so that it is enabled each time.  
I just ran the command given above and it found over 40 packages that 
need to be upgraded.  I'm not even going to claim that I understand all 
the chicken scratch in that command but apparently stuff needed to be 
upgraded on my system that was being missed.


It appears to do something good even if it is not related to the OPs 
problem.


Dale

:-)  :-)



Re: [gentoo-user] Re: Kernel upgrade and now LUKS failure.

2010-05-04 Thread Stefan G. Weichinger
Am 04.05.2010 19:38, schrieb Stefan G. Weichinger:

> I don't yet have the whole picture ...

I did some "emerge -avuDN world", quite some packages updated even
though I am doing "emerge -avu world" nearly every day ...

After a reboot and setting debug to 1 for pam_mount it says:

May  4 21:25:38 enzo slim: pam_mount(pam_mount.c:364): pam_mount 2.0:
entering auth stage
May  4 21:25:38 enzo slim: gkr-pam: invalid option: use_first_pass
May  4 21:25:38 enzo slim: pam_unix(slim:session): session opened for
user sgw by (uid=0)
May  4 21:25:38 enzo slim: pam_mount(pam_mount.c:552): pam_mount 2.0:
entering session stage
May  4 21:25:38 enzo slim: pam_mount(misc.c:38): Session open: (uid=0,
euid=0, gid=0, egid=0)
May  4 21:25:38 enzo slim: pam_mount(mount.c:196): Mount info:
globalconf, user=sgw  fstab=0
May  4 21:25:38 enzo slim: command: 'mount.crypt'
'-ocipher=aes-cbc-plain' '-ofsk_cipher=aes-256-cbc' '-ofsk_hash=md5'
'-okeyfile=/etc/security/verysekrit.key' '-odata=journal,commit=15'
'/dev/mapper/VG01-crypthome' '/home/sgw'
May  4 21:25:38 enzo slim: pam_mount(misc.c:38): set_myuid: (uid=0,
euid=0, gid=0, egid=0)
May  4 21:25:38 enzo slim: pam_mount(misc.c:38): set_myuid:
(uid=0, euid=0, gid=0, egid=0)
May  4 21:25:40 enzo slim: pam_mount(mount.c:64): Errors from underlying
mount program:
May  4 21:25:40 enzo slim: pam_mount(mount.c:68):
crypt_activate_by_passphrase: Operation not permitted
May  4 21:25:40 enzo slim: pam_mount(pam_mount.c:520): mount of
/dev/mapper/VG01-crypthome failed
May  4 21:25:40 enzo slim: command: 'pmvarrun' '-u' 'sgw' '-o' '1'
May  4 21:25:40 enzo slim: pam_mount(misc.c:38): set_myuid: (uid=0,
euid=0, gid=0, egid=0)
May  4 21:25:40 enzo slim: pam_mount(misc.c:38): set_myuid:
(uid=0, euid=0, gid=0, egid=0)
May  4 21:25:40 enzo slim: pam_mount(pam_mount.c:440): pmvarrun says
login count is 1
May  4 21:25:40 enzo slim: pam_mount(pam_mount.c:642): done opening
session (ret=0)
May  4 21:25:40 enzo slim: pam_mount(pam_mount.c:115): Clean global
config (0)
May  4 21:25:40 enzo slim: pam_mount(pam_mount.c:132): clean system
authtok=0x80e6870 (0)
May  4 21:25:40 enzo seahorse-daemon[1426]: DNS-SD initialization
failed: Daemon not running
May  4 21:25:40 enzo seahorse-daemon[1426]: unsupported key server uri
scheme: ldap
May  4 21:25:40 enzo seahorse-daemon[1426]: init gpgme version 1.3.0
May  4 21:25:41 enzo pulseaudio[1475]: module-alsa-card.c: Failed to
find a working profile.
May  4 21:25:41 enzo pulseaudio[1475]: module.c: Failed to load  module
"module-alsa-card" (argument: "device_id="5"
name="platform-thinkpad_acpi"
card_name="alsa_card.platform-thinkpad_acpi" tsched=yes ignore_dB=no
card_properties="module-udev-detect.discovered=1""): initialization failed.
May  4 21:25:41 enzo polkitd(authority=local): Registered Authentication
Agent for session /org/freedesktop/ConsoleKit/Session3 (system bus name
:1.49 [/usr/libexec/polkit-gnome-authentication-agent-1], object path
/org/gnome/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)


- (maybe I pasted too much, this was everything from typing my
username to the Gnome-session opened, but with the "wrong" /home for
user sgw)

Some bits of additional info:

# cat /etc/pam.d/system-auth
authrequiredpam_env.so
authrequiredpam_unix.so try_first_pass likeauth nullok
auth optional pam_mount.so
auth optional pam_gnome_keyring.so

account requiredpam_unix.so

passwordrequiredpam_cracklib.so difok=2 minlen=8 dcredit=2 
ocredit=2
retry=3
password optional pam_gnome_keyring.so
passwordrequiredpam_unix.so try_first_pass use_authtok nullok 
sha512
shadow
session requiredpam_limits.so
session optional pam_gnome_keyring.so auto_start
session requiredpam_env.so
session requiredpam_unix.so
session optionalpam_permit.so
session optional pam_mount.so



# cat /etc/security/pam_mount.conf.xml






   

 

















/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin













--- I didn't change both files except for the debug-parameter ...


[r...@enzo]:~ # eix pam_mount
[I] sys-auth/pam_mount
 Available versions:  (~)1.20 (~)1.21 (~)1.22 (~)1.24 (~)1.25
(~)1.25-r1 (~)1.26 (~)1.31 (~)1.32 (~)1.33 (~)2.0 {crypt}
 Installed versions:  2.0(12:45:53 04.05.2010)(crypt)
 Homepage:http://pam-mount.sourceforge.net
 Description: A PAM module that can mount volumes for a user
session

[r...@enzo]:~ # eix cryptset
[I] sys-fs/cryptsetup
 Available versions:  0.1-r3 1.0.5-r1 1.0.6-r2 (~)1.0.7 (~)1.0.7-r1
(~)1.1.0 (~)1.1.1_rc1{tbz2} {dynamic nls selinux}
 Installed versions:  1.1.1_rc1{tbz2}(13:04:41 04.05.2010)(nls
-dynamic -selinux)
 Homepage:http://code.google.com/p/cryptsetup/
 Description: Tool to setup encrypted devices with dm-crypt


Thanks for any hints, Stefa

Re: [gentoo-user] Re: Kernel upgrade and now LUKS failure.

2010-05-04 Thread Stefan G. Weichinger
Am 04.05.2010 18:54, schrieb walt:

>> pam_mount(mount.c): crypt_activate_by_passphrase: Operation not
>> permitted
> 
> I don't have a pam_mount, where does it come from?  Perhaps it needs
> a reference to pam_ssh.so?

What do you mean with "where does it come from?" ?

It's in portage ... for example

http://home.coming.dk/index.php/2009/05/20/encrypted_home_partition_using_luks_pam_

shows how to make use of it.

I am not sure which HOWTO I followed ... but it is the same approach.
What would the reference to pam_ssh.so look like?


Googling for "crypt_activate_by_passphrase" I found:

http://code.google.com/p/cryptsetup/issues/detail?id=58

which says:

"crypt_activate_by_passphrase is the new API"

Could it be the case that my current setup somehow uses "the new API"
which isn't available yet in some package?

I don't yet have the whole picture ...

Thanks, Stefan



[gentoo-user] Re: Kernel upgrade and now LUKS failure.

2010-05-04 Thread walt

On 05/04/2010 03:06 AM, Stefan G. Weichinger wrote:


I use an encrypted /home mounted by pam_mount, it reads the key from a
file so there is no keyboard involved.

When I login I don't get /home mounted.

/var/log/messages says:

pam_mount(mount.c): crypt_activate_by_passphrase: Operation not permitted


I don't have a pam_mount, where does it come from?  Perhaps it needs a
reference to pam_ssh.so?




Re: [gentoo-user] emerge --update - why doesn't it update my kde packages

2010-05-04 Thread KH

Am 04.05.2010 18:19, schrieb Paul Hartman:

On Tue, May 4, 2010 at 3:57 AM, Helmut Jarausch
  wrote:

Hi,
the following situation puzzles me a lot.

My 'standard' way of updating is
emerge --keep-going -j4 -1 --ask --update --newuse --deep --tree @system @world

but it didn't update anything.

Still, eix confirmed there were quite a lot of kde packages which have
newer versions, and indeed,
emerge -auv1 -j4 --keep-going  $(qlist -IC kde-base/)
upgraded 24 packages.

Where does this discrepancy come from?


Are they in your world, or depended upon by something in your world?

In other words, if you "emerge --ask --depclean" does it want to
remove those packages?



Hi,

do you see the diff in here:


emerge -av --depclean

>>> These are the packages that would be unmerged:

 sys-kernel/gentoo-sources
selected: 2.6.31-r10
   protected: none
 omitted: 2.6.30-r5 2.6.32-r7

>>> 'Selected' packages are slated for removal.
>>> 'Protected' and 'omitted' packages will not be removed.

Would you like to unmerge these packages? [Yes/No] n

Quitting.

Packages installed:   847
Packages in world:139
Packages in system:   50
Required packages:846
Number to remove: 1


and


emerge -av --depclean  --with-bdeps n

>>> These are the packages that would be unmerged:

 dev-util/cmake
selected: 2.6.4-r3
   protected: none
 omitted: none

 app-arch/rpm2targz
selected: 9.0.0.3g
   protected: none
 omitted: none

 x11-proto/xf86bigfontproto
selected: 1.2.0
   protected: none
 omitted: none

 dev-java/javacc
selected: 4.0-r4
   protected: none
 omitted: none

[...]

 perl-core/Compress-Raw-Zlib
selected: 2.021
   protected: none
 omitted: none

>>> 'Selected' packages are slated for removal.
>>> 'Protected' and 'omitted' packages will not be removed.

Would you like to unmerge these packages? [Yes/No] n

Quitting.

Packages installed:   847
Packages in world:139
Packages in system:   50
Required packages:774
Number to remove: 73




And the other way round

emerge -Duav world

These are the packages that would be merged, in order:

Calculating dependencies... done!

Total: 0 packages, Size of downloads: 0 kB

Nothing to merge; would you like to auto-clean packages? [Yes/No] n

Quitting.



emerge -Duav --with-bdeps y world

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild U ] dev-perl/yaml-0.71 [0.68] 111 kB
[ebuild U ] app-arch/cabextract-1.2-r1 [1.2] USE="-extra-tools%" 190 kB
[ebuild U ] dev-perl/Archive-Zip-1.30 [1.20] 193 kB
[ebuild U ] perl-core/ExtUtils-ParseXS-2.22.03 [2.20.0401] 40 kB
[ebuild U ] virtual/perl-ExtUtils-ParseXS-2.22.03 [2.20.0401] 0 kB

Total: 5 packages (5 upgrades), Size of downloads: 533 kB

Would you like to merge these packages? [Yes/No] n

Quitting.



This is normal and expected behavior

kh



Re: [gentoo-user] emerge --update - why doesn't it update my kde packages

2010-05-04 Thread Paul Hartman
On Tue, May 4, 2010 at 3:57 AM, Helmut Jarausch
 wrote:
> Hi,
> the following situation puzzles me a lot.
>
> My 'standard' way of updating is
> emerge --keep-going -j4 -1 --ask --update --newuse --deep --tree @system 
> @world
>
> but it didn't update anything.
>
> Still, eix confirmed there were quite a lot of kde packages which have
> newer versions, and indeed,
> emerge -auv1 -j4 --keep-going  $(qlist -IC kde-base/)
> upgraded 24 packages.
>
> Where does this discrepancy come from?

Are they in your world, or depended upon by something in your world?

In other words, if you "emerge --ask --depclean" does it want to
remove those packages?



Re: [gentoo-user] emerge --update - why doesn't it update my kde packages

2010-05-04 Thread KH

Am 04.05.2010 16:59, schrieb David W Noon:

On Tue, 04 May 2010 11:00:01 +0200, Helmut Jarausch wrote about
[gentoo-user] emerge --update - why doesn't it update my kde packages:

[snip]

Still, eix confirmed there were quite a lot of kde packages which have
newer versions, and indeed,
emerge -auv1 -j4 --keep-going  $(qlist -IC kde-base/)
upgraded 24 packages.

Where does this discrepancy come from?


I think Portage does not consider packages that are not in your world
file, if the update is on world (or system).

To overcome this, I wrote a little script, called update_orphans.sh.
Here it is:

<---cut--->  update_orphans.sh<--cut->
#!/bin/sh

eix -u | gawk '/^\[U\] / { print $2; }' | xargs -r emerge -v1uD

exit $?
<---cut---><--cut->

I run it immediately after the main emerge, when I have rsync'ed the
Portage tree.


No. --with-bdeps is not default anymore because it is considered to be a 
bug if portage updates packages not used in any way. This is only if a 
package is needed for buildtime.


Program A is version 1.5. To build it, it needs program B which at this 
time is version 4.7

B is not needed for anything else!

Now there is an update to B-4.9 . Portage will not update B as long as 
there is no update to A.


B is not in the world file. It is not a runtime dependency nore is it a 
orphan.


kh



Re: [gentoo-user] two glibcs with different version

2010-05-04 Thread Helmut Jarausch
On  4 May, Kraus Philipp wrote:
> 
> Am 04.05.2010 um 13:09 schrieb Neil Bothwick:
> 
>> On Sat, 1 May 2010 12:58:34 +0200, Kraus Philipp wrote:
>>
 I would suggest dual-booting...
>>>
>>> Sorry, that's no solution, because it is only one network service,  
>>> that
>>> need's a older glibc. I can't reboot a server at any time or create a
>>> new
>>> physical server
>>
>> Have you considered virtualisation?
> 
> That's a problem, because I need the older glib for running VMware  
> Server.
> Hen or Egg Problem :-P

Then try VirtualBox.
Helmut.





Re: [gentoo-user] two glibcs with different version

2010-05-04 Thread Kraus Philipp


Am 04.05.2010 um 13:09 schrieb Neil Bothwick:


On Sat, 1 May 2010 12:58:34 +0200, Kraus Philipp wrote:


I would suggest dual-booting...


Sorry, that's no solution, because it is only one network service,  
that

need's a older glibc. I can't reboot a server at any time or create a
new
physical server


Have you considered virtualisation?


That's a problem, because I need the older glib for running VMware  
Server.

Hen or Egg Problem :-P

Re: [gentoo-user] emerge --update - why doesn't it update my kde packages

2010-05-04 Thread David W Noon
On Tue, 04 May 2010 11:00:01 +0200, Helmut Jarausch wrote about
[gentoo-user] emerge --update - why doesn't it update my kde packages:

[snip]
>Still, eix confirmed there were quite a lot of kde packages which have
>newer versions, and indeed,
>emerge -auv1 -j4 --keep-going  $(qlist -IC kde-base/)
>upgraded 24 packages.
>
>Where does this discrepancy come from?

I think Portage does not consider packages that are not in your world
file, if the update is on world (or system).

To overcome this, I wrote a little script, called update_orphans.sh.
Here it is:

<---cut---> update_orphans.sh <--cut->
#!/bin/sh

eix -u | gawk '/^\[U\] / { print $2; }' | xargs -r emerge -v1uD

exit $?
<---cut---><--cut->

I run it immediately after the main emerge, when I have rsync'ed the
Portage tree.
-- 
Regards,

Dave  [RLU #314465]
==
dwn...@ntlworld.com (David W Noon)
==


signature.asc
Description: PGP signature


[gentoo-user] Re: libdb no longer slotted?

2010-05-04 Thread Grant Edwards
On 2010-05-04, Daniel Pielmeier  wrote:
> 2010/5/4 Grant Edwards :
>> Is libdb no longer slotted?
>
> This is bug #318367 [1]. It looks like the issue is already fixed in
> the tree. So just sync your portage tree and the error should be gone.
>
> [1] http://bugs.gentoo.org/318367

That wasn't there when I searched last night -- I was starting to
think it was just me...

-- 
Grant Edwards   grant.b.edwardsYow! I've got an IDEA!!
  at   Why don't I STARE at you
  gmail.comso HARD, you forget your
   SOCIAL SECURITY NUMBER!!




[gentoo-user] Re: libdb no longer slotted?

2010-05-04 Thread Grant Edwards
On 2010-05-04, Helmut Jarausch  wrote:
> On  4 May, Grant Edwards wrote:
>> It seems that sys-libs/db used to be slotted (I previously had 3 or 4
>> versions installed). But todays update is failing becuase Python wants
>> libdb-4.7 and Perl wants libdb-4.3. They won't both install because of
>> file collisions.
>> 
>> Is libdb no longer slotted?
>> 
>> How does one deal with applications that require different versions of
>> libdb?
>> 
>
> First, sys-libs/db is still slotted, of course
> eix -n sys-libs/db 
> gives
> [I] sys-libs/db
>  Available versions:  
> (1) 1.85-r3
> (3) 3.2.9-r11 3.2.9_p2
> (4.2)   4.2.52_p4-r2 (~)4.2.52_p5 4.2.52_p5-r1
> (4.3)   4.3.29-r2 (~)4.3.29_p1 4.3.29_p1-r1
> (4.4)   (~)4.4.20_p4 (~)4.4.20_p4-r1
> (4.5)   4.5.20_p2 4.5.20_p2-r1{tbz2}
> (4.6)   4.6.21_p4{tbz2}
> (4.7)   (~)4.7.25_p3 4.7.25_p4{tbz2}
> (4.8)   (~)4.8.24 (~)4.8.26 (~)4.8.30{tbz2}
> {doc elibc_FreeBSD examples java nocxx tcl test}
>  Installed versions:  1.85-r3(1)(12:35:43 PM 07/16/2008) 
> 4.5.20_p2-r1(4.5){tbz2}(05:36:16 PM 04/01/2009)(tcl -doc -elibc_FreeBSD -java 
> -nocxx -test) 4.6.21_p4(4.6){tbz2}(04:06:48 PM 03/23/2009)(tcl -doc 
> -elibc_FreeBSD -java -nocxx -test) 4.7.25_p4(4.7){tbz2}(02:58:36 PM 
> 06/22/2009)(tcl -doc -elibc_FreeBSD -java -nocxx -test) 
> 4.8.30(4.8){tbz2}(09:52:24 AM 05/04/2010)(tcl -doc -elibc_FreeBSD -examples 
> -java -nocxx -test)

Yes, that's what I saw before the latest update.

> Trying
> for S in 1 4.5 4.6 4.7 4.8; do
>   emerge -vpc sys-libs/db:$S
> done

No matter what order I do that in, the second one always fails because
of file collisions.

> shows that here python-2.6.5-r2 uses 4.7  while perl-5.10.1 uses 4.8
> and my system is running quite happily (at least, I think so)

I wonder what happened to mine...

-- 
Grant Edwards   grant.b.edwardsYow! I'm shaving!!
  at   I'M SHAVING!!
  gmail.com




Re: [gentoo-user] libdb no longer slotted?

2010-05-04 Thread Daniel Pielmeier
2010/5/4 Grant Edwards :
> Is libdb no longer slotted?

This is bug #318367 [1]. It looks like the issue is already fixed in
the tree. So just sync your portage tree and the error should be gone.

[1] http://bugs.gentoo.org/318367

-- 
Daniel Pielmeier



Re: [gentoo-user] emerge --update - why doesn't it update my kde packages

2010-05-04 Thread Alex Schuster
Helmut Jarausch writes:

> My 'standard' way of updating is
> emerge --keep-going -j4 -1 --ask --update --newuse --deep --tree
> @system @world
> 
> but it didn't update anything.
> 
> Still, eix confirmed there were quite a lot of kde packages which have
> newer versions, and indeed,
> emerge -auv1 -j4 --keep-going  $(qlist -IC kde-base/)
> upgraded 24 packages.
> 
> Where does this discrepancy come from?

I guess those packages are not in your /var/lib/portage/world file (or in 
a set in /var/lib/portage/world_sets), and nothing in there depends on 
them. Try emerge -p --depclean and see if they are listed. If so, use 
emerge -n to add them to world.

Wonko



Re: [gentoo-user] backup to a cold-swap drive

2010-05-04 Thread Alex Schuster
Iain Buchanan writes:

> On Thu, 2010-04-29 at 16:44 +0200, Alex Schuster wrote:
> 
> [snip]
> 
> > All my partitions are LVM volumes, so before the backup starts, I
> > make a LVM snapshot of the partition. This way I can modify it while
> > the backup is still in progress.
> 
> hmm, never got into LVM.  Sounds interesting though...

It is. it gives you great flexibility. Your /home is becoming too small? 
So just add a Gigabyte:
  lvresize -L +1G /dev/system/home 
  resize2fs /dev/system/home

Takes half a minute, and you don't need to unmount anything before that.

You want to backup your large /home partition, and want to continue 
working meanwhile? Create a snapshot, mount it, and backup this:
  lvcreate -s -L 1G -n home-snapshot /dev/system/home
  mount /dev/system/home-snapshot /mnt


> [snip]
> 
> > I wrote a shell script to do this, so I do not have to issue a lot of
> > commands every time I want to do the backup.
> 
> I don't use too many commands, something like this
> in /etc/cron.daily/custom-backup:
> 
> sudo /usr/bin/ionice -c 3 /usr/bin/rsync -aAx --exclude suspend_file
> --delete-delay --delete-excluded --partial
> --human-readable / / || echo external
> backup failed!

That's okay, I did it in this way, too. Well, the backup may be 
inconsistent when you are modifying the root partition in the meantime, so 
I would not emerge things when the backup is running.
But now I am using LVM for everything, and so I just create a snapshot.
And I prefer to use rdiff-backup, so I can have incremental backups.

> >  As there are now some others
> > using this script, adapted to their needs, I started to rewrite it in
> > a way that it reads a config file, and no modification of the script
> > itself is necessary. If anyone is interested, send me an email.
> 
> interested! So is it on sourceforge yet ;)

Um, no... not yet. Not really sure if it belongs there...

The script has become a little large, but I think it's working now. I will 
do some testing, and inform you when it's done. I'm a little ill at the 
moment, so it may take 1-2 more days.

Wonko



Re: [gentoo-user] two glibcs with different version

2010-05-04 Thread Neil Bothwick
On Sat, 1 May 2010 12:58:34 +0200, Kraus Philipp wrote:

> > I would suggest dual-booting...  
> 
> Sorry, that's no solution, because it is only one network service, that
> need's a older glibc. I can't reboot a server at any time or create a  
> new
> physical server

Have you considered virtualisation?


-- 
Neil Bothwick

Top Oxymorons Number 41: Good grief


signature.asc
Description: PGP signature


Re: [gentoo-user] libdb no longer slotted?

2010-05-04 Thread Helmut Jarausch
On  4 May, Grant Edwards wrote:
> It seems that sys-libs/db used to be slotted (I previously had 3 or 4
> versions installed). But todays update is failing becuase Python wants
> libdb-4.7 and Perl wants libdb-4.3. They won't both install because of
> file collisions.
> 
> Is libdb no longer slotted?
> 
> How does one deal with applications that require different versions of
> libdb?
> 

First, sys-libs/db is still slotted, of course
eix -n sys-libs/db 
gives
[I] sys-libs/db
 Available versions:  
(1) 1.85-r3
(3) 3.2.9-r11 3.2.9_p2
(4.2)   4.2.52_p4-r2 (~)4.2.52_p5 4.2.52_p5-r1
(4.3)   4.3.29-r2 (~)4.3.29_p1 4.3.29_p1-r1
(4.4)   (~)4.4.20_p4 (~)4.4.20_p4-r1
(4.5)   4.5.20_p2 4.5.20_p2-r1{tbz2}
(4.6)   4.6.21_p4{tbz2}
(4.7)   (~)4.7.25_p3 4.7.25_p4{tbz2}
(4.8)   (~)4.8.24 (~)4.8.26 (~)4.8.30{tbz2}
{doc elibc_FreeBSD examples java nocxx tcl test}
 Installed versions:  1.85-r3(1)(12:35:43 PM 07/16/2008) 
4.5.20_p2-r1(4.5){tbz2}(05:36:16 PM 04/01/2009)(tcl -doc -elibc_FreeBSD -java 
-nocxx -test) 4.6.21_p4(4.6){tbz2}(04:06:48 PM 03/23/2009)(tcl -doc 
-elibc_FreeBSD -java -nocxx -test) 4.7.25_p4(4.7){tbz2}(02:58:36 PM 
06/22/2009)(tcl -doc -elibc_FreeBSD -java -nocxx -test) 
4.8.30(4.8){tbz2}(09:52:24 AM 05/04/2010)(tcl -doc -elibc_FreeBSD -examples 
-java -nocxx -test)

Trying
for S in 1 4.5 4.6 4.7 4.8; do
  emerge -vpc sys-libs/db:$S
done

shows that here python-2.6.5-r2 uses 4.7  while perl-5.10.1 uses 4.8
and my system is running quite happily (at least, I think so)

Helmut.

-- 
Helmut Jarausch

Lehrstuhl fuer Numerische Mathematik
RWTH - Aachen University
D 52056 Aachen, Germany



Re: [gentoo-user] emerge --update - why doesn't it update my kde packages

2010-05-04 Thread KH

Am 04.05.2010 12:17, schrieb Bert Swart:

On Tue, May 04, 2010 at 12:09:25PM +0200, Helmut Jarausch wrote:

On  4 May, Bert Swart wrote:

On Tue, May 04, 2010 at 10:57:10AM +0200, Helmut Jarausch wrote:

Hi,
the following situation puzzles me a lot.

My 'standard' way of updating is
emerge --keep-going -j4 -1 --ask --update --newuse --deep --tree @system @world

but it didn't update anything.

Still, eix confirmed there were quite a lot of kde packages which have
newer versions, and indeed,
emerge -auv1 -j4 --keep-going  $(qlist -IC kde-base/)
upgraded 24 packages.

Where does this discrepancy come from?

Do you  have --with-bdep set in /etc/make.conf?


No. Are you saying that
emerge --keep-going -j4 -1 --ask --update --newuse --deep --tree  --with-bdeps 
y @system @world
would have updated my kde packages, as well?

Probably. Sometimes, not all packages are included as dependency
if they are not strictly required. If you do want them to be
upgraded, add --with-bdeps to EMERGE_DEFAULT_OPTS in
/etc/make.conf. Or, like you did, upgrade them manually...
See also http://www.gentoo.org/proj/en/portage/doc/faq.xml


Those are packages only required during buildtime. You could unmerge 
them after upgrading without loosing a funktion. Adding --with-bdeps to 
EMERGE_DEFAULT_OPTS might only wast some time and energy. You can also 
run depclean --with-bdeps (yes/no or something like that) to savely 
remove them.

My point is: If glsa doesn't list one of those packages I don't touch them.

Regards
kh



Thanks,
Helmut.




--
Helmut Jarausch

Lehrstuhl fuer Numerische Mathematik
RWTH - Aachen University
D 52056 Aachen, Germany









Re: [gentoo-user] emerge --update - why doesn't it update my kde packages

2010-05-04 Thread Bert Swart
On Tue, May 04, 2010 at 12:09:25PM +0200, Helmut Jarausch wrote:
> On  4 May, Bert Swart wrote:
> > On Tue, May 04, 2010 at 10:57:10AM +0200, Helmut Jarausch wrote:
> >> Hi,
> >> the following situation puzzles me a lot.
> >> 
> >> My 'standard' way of updating is
> >> emerge --keep-going -j4 -1 --ask --update --newuse --deep --tree @system 
> >> @world
> >> 
> >> but it didn't update anything.
> >> 
> >> Still, eix confirmed there were quite a lot of kde packages which have
> >> newer versions, and indeed,
> >> emerge -auv1 -j4 --keep-going  $(qlist -IC kde-base/)
> >> upgraded 24 packages.
> >> 
> >> Where does this discrepancy come from?
> > Do you  have --with-bdep set in /etc/make.conf?
> 
> No. Are you saying that
> emerge --keep-going -j4 -1 --ask --update --newuse --deep --tree  
> --with-bdeps y @system @world
> would have updated my kde packages, as well?
Probably. Sometimes, not all packages are included as dependency
if they are not strictly required. If you do want them to be
upgraded, add --with-bdeps to EMERGE_DEFAULT_OPTS in
/etc/make.conf. Or, like you did, upgrade them manually...
See also http://www.gentoo.org/proj/en/portage/doc/faq.xml
> 
> Thanks,
> Helmut.
> 
> 
> 
> 
> -- 
> Helmut Jarausch
> 
> Lehrstuhl fuer Numerische Mathematik
> RWTH - Aachen University
> D 52056 Aachen, Germany
> 




Re: [gentoo-user] emerge --update - why doesn't it update my kde packages

2010-05-04 Thread Helmut Jarausch
On  4 May, Bert Swart wrote:
> On Tue, May 04, 2010 at 10:57:10AM +0200, Helmut Jarausch wrote:
>> Hi,
>> the following situation puzzles me a lot.
>> 
>> My 'standard' way of updating is
>> emerge --keep-going -j4 -1 --ask --update --newuse --deep --tree @system 
>> @world
>> 
>> but it didn't update anything.
>> 
>> Still, eix confirmed there were quite a lot of kde packages which have
>> newer versions, and indeed,
>> emerge -auv1 -j4 --keep-going  $(qlist -IC kde-base/)
>> upgraded 24 packages.
>> 
>> Where does this discrepancy come from?
> Do you  have --with-bdep set in /etc/make.conf?

No. Are you saying that
emerge --keep-going -j4 -1 --ask --update --newuse --deep --tree  --with-bdeps 
y @system @world
would have updated my kde packages, as well?

Thanks,
Helmut.




-- 
Helmut Jarausch

Lehrstuhl fuer Numerische Mathematik
RWTH - Aachen University
D 52056 Aachen, Germany



Re: [gentoo-user] Kernel upgrade and now LUKS failure.

2010-05-04 Thread Stefan G. Weichinger
Am 03.05.2010 18:56, schrieb Jason Dusek:
>   I have an encrypted block device, `/dev/sda2', which is
>   mounted as my root filesystem. I recently installed this
>   system -- I've been away from Gentoo for awhile -- and used
>   gentoo sources 2.6.31-r6. When the kernel upgrade rolled
>   around, to 2.6.32-r7, I installed and rebooted and then my
>   passphrase didn't work anymore. The error message:
> 
> Command failed: No key available with this passphrase.

I see something similar here.

Upgraded from tuxonice-sources-2.33-r1 to -r2 on my thinkpad.

I use an encrypted /home mounted by pam_mount, it reads the key from a
file so there is no keyboard involved.

When I login I don't get /home mounted.

/var/log/messages says:

pam_mount(mount.c): crypt_activate_by_passphrase: Operation not permitted

but with both kernels, -r1 and -r2

I now fiddle around with downgrading cryptsetup etc.

Any hints welcome, thanks.

Stefan



Re: [gentoo-user] Frozen after Upgrade

2010-05-04 Thread Neil Bothwick
On Mon, 3 May 2010 13:44:50 +, Colleen Beamer wrote:

> I can't disable my xdm login script.  My computer boots to the login
> screen and the keyboard doesn't work so I can'l login to get a
> terminal session.

At the GRUB menu, add "gentoo=nox" to the kernel options, using the
method explained by Alan. The advantage of this method is that it gives
you a fully working system, running everything in your default runlevel
except xdm. When you have made the changes and want to test
them, /etc/init.d/xdm restart fires up X with no need to reboot.

Note for the pedants: The xdm init script is run, but it checks for the
nox flag and exits without starting X, that's why to need to restart it
to run X.


signature.asc
Description: PGP signature


Re: [gentoo-user] emerge --update - why doesn't it update my kde packages

2010-05-04 Thread Bert Swart
On Tue, May 04, 2010 at 10:57:10AM +0200, Helmut Jarausch wrote:
> Hi,
> the following situation puzzles me a lot.
> 
> My 'standard' way of updating is
> emerge --keep-going -j4 -1 --ask --update --newuse --deep --tree @system 
> @world
> 
> but it didn't update anything.
> 
> Still, eix confirmed there were quite a lot of kde packages which have
> newer versions, and indeed,
> emerge -auv1 -j4 --keep-going  $(qlist -IC kde-base/)
> upgraded 24 packages.
> 
> Where does this discrepancy come from?
Do you  have --with-bdep set in /etc/make.conf?
> 
> Many thanks for a hint,
> Helmut.
> 
> -- 
> Helmut Jarausch
> 
> Lehrstuhl fuer Numerische Mathematik
> RWTH - Aachen University
> D 52056 Aachen, Germany
> 




[gentoo-user] emerge --update - why doesn't it update my kde packages

2010-05-04 Thread Helmut Jarausch
Hi,
the following situation puzzles me a lot.

My 'standard' way of updating is
emerge --keep-going -j4 -1 --ask --update --newuse --deep --tree @system @world

but it didn't update anything.

Still, eix confirmed there were quite a lot of kde packages which have
newer versions, and indeed,
emerge -auv1 -j4 --keep-going  $(qlist -IC kde-base/)
upgraded 24 packages.

Where does this discrepancy come from?

Many thanks for a hint,
Helmut.

-- 
Helmut Jarausch

Lehrstuhl fuer Numerische Mathematik
RWTH - Aachen University
D 52056 Aachen, Germany