Re: [gentoo-user] modifying iptables: how can I prevent locking me out?

2011-01-24 Thread Manuel Klemenz
On Monday 24 January 2011 19:59:16 Mark Knecht wrote:
> On Mon, Jan 24, 2011 at 10:47 AM, Jarry  wrote:
> > Hi,
> > 
> > I have to change rather complex iptables rules on server
> > and I do not want to lock me out as this server is about
> > 50 miles away. So how should I do it?
> > 
> > I can back up the old rules by running:
> > /etc/init.d/iptables save
> > and it will be saved to /var/lib/iptables/rules-save
> > (some strange format starting with number like [536:119208])
> > 
> > I prepared a script with new (modified) iptables-rules,
> > which I will run in bash. But in case I screw something,
> > how could I force netfilter to load old saved rules,
> > if I for whatever reason do not connect to server (ssh)?
> > 
> > Or can I load new iptables-rules for certain time, and
> > then force netfilter to load back the old rules again?
> > 
> > Jarry
> 
> Maybe a cron job that no matter what reloads the old rules 1 hour later?
> 
> - Mark

another option woud be to setup and run a knock deamon (net-misc/knock), if 
that's an option for you. You'd have the advantage not being forced to wait 
for an hour (worst case). On the other hand you must make sure, that none of 
the configured knocking ports are blocked in the infrastructure between you and 
the server. 

-- 
Cheers,
Manuel Klemenz


signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Dumb KDE Question

2010-08-08 Thread Manuel Klemenz
On Sunday 08 August 2010 20:21:13 CJoeB wrote:
>  Hi,
> 
> I'm getting better  recently updated to KDE 4.4 - 200+ packages that
> needed to be updated (including those that weren't KDE apps) and I had a
> bit of jumping through hoops to get everything installed - build
> failures, blocks, etc. but managed to do everything by myself with a
> little help from google!  ;-)
> 
> Anyway, the question is this  I managed to do something (and I can't
> figure out what) so that now, when I minimize a running application in
> KDE, the application doesn't dock on the panel.  Can't seem to find a
> setting to change this.  Can anyone point me in the right direction?
> The Alt-Tab thing works so I can get the applications back, but I would
> prefer to see them docked on the panel.
> 
> Thanks in advance.
> 
> Colleen

Hi,

I had (now and then) similar problems with kde widgets after major kde 
upgrades. I solved weired things like this just by removing the widget and 
adding it again. 

If this still doesn't work, you could try to rename the folder ".kde4" in your 
home directory and re-logon. this forces kde to create a new (and clean) 
default profile. The drawback here is, that you'll loose all your kde related 
settings...

hope, the first suggestion helps ;)

-- 
Cheers,
Manuel Klemenz


signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] emerge media-gfx/eog-2.30.1 fails with configure: error: conditional "HAVE_LIBJPEG_80" was never defined.

2010-06-06 Thread Manuel Klemenz
looks like an unresolved dependency...
is "media-libs/jpeg" among your installed packages? just a guess, but try to 
install this one before

-- 
Cheers,
Manuel Klemenz

On Sunday 06 June 2010 23:44:19 Nikolay Hodyunya wrote:
> Hello, I'm trying to emerge gnome on my gentoo box, but It fails.
> Here is log.
> 
>  * CPV:  media-gfx/eog-2.30.1
>  * REPO: gnome
>  * USE:  amd64 dbus elibc_glibc jpeg kernel_linux multilib
> python userland_GNU
> 
> >>> Unpacking source...
> >>> Unpacking eog-2.30.1.tar.bz2 to
> >>> /var/tmp/portage/media-gfx/eog-2.30.1/work Source unpacked in
> >>> /var/tmp/portage/media-gfx/eog-2.30.1/work
> >>> Preparing source in
> >>> /var/tmp/portage/media-gfx/eog-2.30.1/work/eog-2.30.1 ...
> 
>  * Fixing OMF Makefiles ...
>   [ ok ]
>  * Running elibtoolize in: eog-2.30.1
>  *   Applying portage-2.2.patch ...
>  *   Applying sed-1.5.6.patch ...
>  *   Applying as-needed-2.2.6.patch ...
> 
> >>> Source prepared.
> >>> Configuring source in
> >>> /var/tmp/portage/media-gfx/eog-2.30.1/work/eog-2.30.1 ...
> 
>  * econf: updating eog-2.30.1/config.guess with
> /usr/share/gnuconfig/config.guess * econf: updating eog-2.30.1/config.sub
> with /usr/share/gnuconfig/config.sub ./configure --prefix=/usr
> --build=x86_64-pc-linux-gnu --host=x86_64-pc-linux-gnu
> --mandir=/usr/share/man --infodir=/usr/share/info --datadir=/usr/share
> --sysconfdir=/etc --localstatedir=/var/lib --libdir=/usr/lib64
> --without-libjpeg --without-libexif --with-dbus --without-cms
> --enable-python --without-xmp --disable-scrollkeeper
> --disable-schemas-install --disable-gtk-doc checking for a BSD-compatible
> install... /usr/bin/install -c
> checking whether build environment is sane... yes
> checking for a thread-safe mkdir -p... /bin/mkdir -p
> checking for gawk... gawk
> checking whether make sets $(MAKE)... yes
> checking whether to enable maintainer-specific portions of Makefiles... no
> checking for style of include used by make... GNU
> checking for x86_64-pc-linux-gnu-gcc... x86_64-pc-linux-gnu-gcc
> checking whether the C compiler works... yes
> checking for C compiler default output file name... a.out
> checking for suffix of executables...
> checking whether we are cross compiling... no
> checking for suffix of object files... o
> checking whether we are using the GNU C compiler... yes
> checking whether x86_64-pc-linux-gnu-gcc accepts -g... yes
> checking for x86_64-pc-linux-gnu-gcc option to accept ISO C89... none
> needed checking dependency style of x86_64-pc-linux-gnu-gcc... gcc3
> checking what warning flags to pass to the C compiler... -Wall
> -Wmissing-prototypes checking what language compliance flags to pass to
> the C compiler... checking build system type... x86_64-pc-linux-gnu
> checking host system type... x86_64-pc-linux-gnu
> checking for a sed that does not truncate output... /bin/sed
> checking for grep that handles long lines and -e... /bin/grep
> checking for egrep... /bin/grep -E
> checking for fgrep... /bin/grep -F
> checking for ld used by x86_64-pc-linux-gnu-gcc...
> /usr/x86_64-pc-linux-gnu/bin/ld checking if the linker
> (/usr/x86_64-pc-linux-gnu/bin/ld) is GNU ld... yes checking for BSD- or
> MS-compatible name lister (nm)... /usr/bin/nm -B checking the name lister
> (/usr/bin/nm -B) interface... BSD nm
> checking whether ln -s works... yes
> checking the maximum length of command line arguments... 1572864
> checking whether the shell understands some XSI constructs... yes
> checking whether the shell understands "+="... yes
> checking for /usr/x86_64-pc-linux-gnu/bin/ld option to reload object
> files... -r checking for x86_64-pc-linux-gnu-objdump...
> x86_64-pc-linux-gnu-objdump checking how to recognize dependent
> libraries... pass_all
> checking for x86_64-pc-linux-gnu-ar... x86_64-pc-linux-gnu-ar
> checking for x86_64-pc-linux-gnu-strip... x86_64-pc-linux-gnu-strip
> checking for x86_64-pc-linux-gnu-ranlib... x86_64-pc-linux-gnu-ranlib
> checking command to parse /usr/bin/nm -B output from
> x86_64-pc-linux-gnu-gcc object... ok checking how to run the C
> preprocessor... x86_64-pc-linux-gnu-gcc -E checking for ANSI C header
> files... yes
> checking for sys/types.h... yes
> checking for sys/stat.h... yes
> checking for stdlib.h... yes
> checking for string.h... yes
> checking for memory.h... yes
> checking for strings.h... yes
> checking for inttypes.h... yes
> checking for stdint.h... yes
> checking for unistd.h... yes
> checking for dlfcn.h... yes
> checking for o

Re: [gentoo-user] Gentoo initrd docs?

2010-06-06 Thread Manuel Klemenz
have a look at the gentoo wiki
http://en.gentoo-wiki.com/wiki/Initramfs

though no officially supported by gentoo, it's imho a pretty good site to find 
tutorials and howto's

-- 
Cheers,
Manuel Klemenz

On Sunday 06 June 2010 17:25:43 Mark Knecht wrote:
> Hi,
>Does there happen to be a Gentoo doc anywhere that goes through
> creating an initrd from scratch?
> 
>If not Gentoo, then any good web site would be a big help. I'm
> interested in booting from RAID - or at least investigating it - so I
> need to learn about this.
> 
> Thanks,
> Mark


signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Fatal problem: Pyton-updater "kills" PC

2010-06-06 Thread Manuel Klemenz
does this happen in combination with the python-updater?
if not, following lines could indicate the prob:

>  * Building of dev-python/setuptools-0.6.10 with CPython 3.1...
> python3.1 setup.py build -b build-3.1
did you already switch to 3.1 python slot as your "main" python version?
# eselect python list

As I remember, there's also an eselect news item that recommends not doing so 
(some packages are not yet ported/fully compatible)...

-- 
Cheers,
Manuel Klemenz


signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Re: Fast checksumming of whole partitions

2010-06-05 Thread Manuel Klemenz
I'm calculating checksums over partitions just by calling
# md5sum /dev/sda1
or for the complete disk (incl. partition table + all partitions)
# md5sum /dev/sda

that's it :) - works with any distro/liveDVD

-- 
Cheers,
Manuel Klemenz

On Saturday 05 June 2010 21:23:31 meino.cra...@gmx.de wrote:
> 7v5w7go9ub0o <7v5w7go9u...@gmail.com> [10-06-05 20:22]:
> > On 06/05/10 02:39, meino.cra...@gmx.de wrote:
> > []
> > 
> > > Is there any faster and reliable way to checksum whole paritions (not
> > > on "per file" base)???
> > 
> > FWIW, portage has a tool called "dcfldd" that works well for me. It is
> > 
> > dd with the addition of:
> >   *   Hashing on-the-fly - dcfldd can hash the input data as it is
> > 
> > being transferred, helping to ensure data integrity.
> > 
> >   * Status output - dcfldd can update the user of its progress in
> > 
> > terms of the amount of data transferred and how much longer operation
> > will take.
> > 
> >   * Flexible disk wipes - dcfldd can be used to wipe disks quickly
> >   and
> > 
> > with a known pattern if desired.
> > 
> >   * Image/wipe Verify - dcfldd can verify that a target drive is a
> > 
> > bit-for-bit match of the specified input file or pattern.
> > 
> >   * Multiple outputs - dcfldd can output to multiple files or disks
> >   at
> > 
> > the same time.
> > 
> >   * Split output - dcfldd can split output to multiple files with
> >   more
> > 
> > configurability than the split command.
> > 
> >   * Piped output and logs - dcfldd can send all its log data and
> > 
> > output to commands as well as files natively.
> > 
> > 
> > e.g. when I copy my HD, I get a copy status report and hash by using the
> > following commands:
> > 
> > #!/bin/bash
> > dcfldd if=/dev/sda bs=4096k sizeprobe=if status=on hashwindow=0
> > of=/dev/sdb dcfldd if=/dev/sdb bs=4096k sizeprobe=if status=on
> > hashwindow=0 of=/dev/null
> > 
> > When they've completed, I'll visually compare the two hashes (you can
> > automate this.) You can get fancier and do the Verify instead of the
> > hashes.
> > 
> > HTH
> > 
> > (p.s.  Part of your answer is setting the best blocksize for dd or
> > dcfldd.
> > 
> > I'd presume it the smaller of your available memory, or the buffer size
> > on your HD?.. someone please correct me on this!?)
> 
> That looks really interesting. The only problem I have with this is
> that I have to have /dev/sda as /dev/sdb idle (not mounted) and
> because of that I use knoppix as temporary system to boot. And I
> dont think that knoppix has this tool "on board".
> 
> Or is there a way to do such copies from a one disk to another
> while one disk is booted???
> 
> Best regards,
> mcc


signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Fatal problem: Pyton-updater "kills" PC

2010-06-05 Thread Manuel Klemenz
Heyho,

*.la files are ok? # lafilefixer --justfixit
dependencies ok? # revdep-rebuild -- -av

-- 
Cheers,
Manuel Klemenz


signature.asc
Description: This is a digitally signed message part.