Re: [Partially Solved] Re: GRUB Issue? Console Fonts and messages?
On Sat, Jun 17, 2023 at 12:56:54PM -0400, Max Pyziur wrote: I made some changes to /etc/default/grub, and here is what my current version looks like: GRUB_TIMEOUT=5 GRUB_DISTRIBUTOR="$(sed 's, release .*$,,g' /etc/system-release)" GRUB_DEFAULT=saved GRUB_DISABLE_SUBMENU=true GRUB_DISABLE_RECOVERY="true" GRUB_ENABLE_BLSCFG=true GRUB_CMDLINE_LINUX="rhgb quiet" This last line seems to be more or less switching off boot messages. You sure you want that? See https://developer.ibm.com/tutorials/l-lpic1-101-2/ " ... erase the words 'quiet', then 'rhgb'. This will stop the Red Hat Graphical Boot screen that fedora normally display during boot and also stop suppressing many of the messages that are normally generated." GRUB_TERMINAL_OUTPUT="gfxterm" gfxterm: does that result in small fonts boot messages? GRUB_FONT="/boot/grub2/fonts/RedHatMono-Medium32.pf2" I'd remove the line above alltogether in the boot command line and see what happens .. more on that later .. Please note the last two lines; one specifies the path to the font; the other is changed from GRUB_TERMINAL_OUTPUT="console" As you remember the value in the last line above is what I have in my grub file, and not 'gfxterm'. I suspect with your current setup you're making things more complicated than necessary. You already wrote that you have now readable fonts on the console on a running system - so maybe turning on verbose boot messages by removing "rghb quiet" plus disabling graphical boot by ordering "GRUB_TERMINAL_OUTPUT="console"" will help giving you decent readable boot messages. And I suspect that without setting up specific fonts in grub might trigger it to read '/etc/vconsole.conf' ... The IBM page above seems to instruct how to change boot parameters for the current boot only: "When you see the GRUB2 menu, you can edit the entry that you want to modify by selecting it and then pressing e." and thus - I think - not change your standard boot setup for the following bootups ... So this approach seems to give a nice environment to test boot parameters before writing them down permanently into grub files ... Good luck! Wolfgang ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: firewalld question
On 6/18/23 11:15, Amadeus WM via users wrote: Say I want to drop/reject outgoing connections to a particular destination address (for parental control). How would I do this with firewalld? How about bypassing firewalld and using iptables directly to add a rule to the kernel? iptables -A OUTPUT -d address-to-ignore/xx -j DROP ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: firewalld question
On Sun, Jun 18, 2023 at 2:15 PM Amadeus WM via users wrote: > > Say I want to drop/reject outgoing connections to a particular destination > address (for parental control). How would I do this with firewalld? I can't address using firewalld, but I think you could get basically the same result by adding route entries; i.e. route the destination address/network to 127.0.0.2 or similar. I did this many years ago under Solaris. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
firewalld question
Say I want to drop/reject outgoing connections to a particular destination address (for parental control). How would I do this with firewalld? I tried firewall-cmd --permanent --add-rich-rule="rule family='ipv4' protocol value="tcp" destination address='aa.bb.0.0/16' reject" firewall-cmd --reload Then, firewall-cmd --zone=FedoraWorkstation --list-all FedoraWorkstation (active) target: default icmp-block-inversion: no interfaces: enp8s0 sources: services: dhcpv6-client ftp mdns mountd nfs rpc-bind samba-client ssh ports: 1025-65535/udp 1025-65535/tcp protocols: forward: no masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: rule family="ipv4" destination address="aa.bb.0.0/16" protocol value="tcp" reject does show that the rule was added. However, I was still able to connect to the destination with no issues. In the past I did that with iptables and I can probably still do that now, but I think nowadays we're supposed to use firewalld, via firewall-cmd or firewall-config. The problem with firewalld is that it has zones, which are defined based either on network interfaces or on IP sources (or ranges), but not on the destination IP. See e.g. https://www.linuxjournal.com/content/ understanding-firewalld-multi-zone-configurations . What I need is to filter based on the destination address. I found this post saying that it's actually not easy to filter based on destination address with firewalld, and that we'd have to use firewall-cmd --direct to inject the filter rule directly into iptables: https://serverfault.com/questions/918754/firewalld-stop-outgoing-traffic- to-a-particular-ip-address But then, the documentation for firewalld.direct says this is deprecated. What I think needs to happen is this: 1. duplicate the default zone (Fedora Workstation) to, say, Parental Control 2. In the Parental Control zone add the drop rule to the specific destinations 3. switch between Fedora Workstation and Parental Control as needed. How can this be done? ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
fedora tarballs
H as anyone ever used these tarballs that fedora releases in a cloud service? I would think these would have to be bootable is there a particular way to boot in GCP or another cloud? I will look into it but if anyone does it maybe they have a couple of hints. B ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: Broken packages DNF Update.
Hello dear customer in IT, You can try to install both programs with rpmfind so i paste below both programs that you can paste in the page web adviced thus i hope your success, regards. 1) ffmpeg-libs 2) libavdevice Dorian Rosse. From: Ger van Dijck Sent: Saturday, June 10, 2023 5:08:16 PM To: Community support for Fedora users Subject: Broken packages DNF Update. Hay all, Little problem : When giving the command dnf update I get the message "Skipping packages with broken dependencies". ffmpeg-libs x86_646.0.11.fc38 rpmfusion-free-updates libavdevice x86_646.0.11.fc38 rpmfusion-free-updates How do I proceed ? Kind regards, Ger van Dijck. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
