Re: Fedora 30 EOL

2020-05-30 Thread Bruno Wolff III

On Sat, May 30, 2020 at 00:40:27 -0700,
 "John M. Harris Jr"  wrote:


Yes, the other option would be to move to Debian or find another rpm-based
distro that still supports 32 bit. All of this because Fedora decided to do
what seems to be so common recently, dropping what still works well. This
hurts our community. This hurts our users. It'd be one thing to make it so
that QA requirements were effectively dropped on 32 bit, but there was no real
reason to drop 32 bit support. It still worked, and quite well.


It didn't work well in general, though it may have worked well for you. It 
has been getting more difficult to support i686 in the kernel over time. There 
were very few people willing to help Fedora's kernel maintainers with bugs in 
i686 kernels. They asked for help multiple times over more than a year and 
they didn't get a significant amount of help. If you want you go back and 
find the threads covering these requests.

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org


Re: Fedora 30 EOL

2020-05-29 Thread Bruno Wolff III

On Fri, May 29, 2020 at 23:24:58 +,
 Suvayu Ali  wrote:


Could you please share your workflow?  I have been looking for some
guidance so that I can test upstream kernels when I encounter these
hardware issues.  I don't need step by step instructions, I'm very
comfortable compiling software, I just need some way to manage the
self-compiled kernels alongside Fedora kernels without littering my
system with build artifacts, and play nice with SELinux :).  I
typically limit any software I compile myself to /opt or $HOME;
unfortunately that doesn't quite work with kernels :-p


Usually once I decide that it is worth doing a bisect, I'll mention that 
I'm working on doing a bisect in my Fedora bug report. Then I get 
Linus' tree. Either doing a git pull if I have an existing one or a 
git clone git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 
if I don't. Sometimes if the checkout was in a bad state, git pull won't 
update and it's easier to do a clone rather than figure out what is messed 
up.


Next I copy over a Fedora kernel config file into the checkout. A sample 
would look like the following if I was in the top directory of the checkout:

cp /boot/config-5.7.0-0.rc7.1.fc33.x86_64 .config
In theory the differencs in the Fedora kernel and Linus' could cause a 
problem, but normally it won't.
Then I do a make clean all. Once you get close on the bisect you don't 
really need to do a clean and it can speed things up a lot to skip it. 
You will probably get asked about some configuration options, because of 
differences between your checked out version and the Fedora kernel. Usually 
just using the default works.

Then you need to switch to root.
When you install kernels, files are going to get added to /boot and a 
directory is going to get added to /lib/modules . You are going to want to 
clean those up (but make sure you don't clean up stuff for the running 
kernel) before doing the next install to make sure you are running what 
you think you are when you run the test.

Then you want to do:
make modules_install install
If all of the above works, you can reboot to test the new kernel. You 
probably want to have a short delay set in grub to allow you to easily 
pick which kernel you want to boot.
So if the the problem is still in the upstream kernel, then you'll want to 
start the bisect.
In the checkout (which should be the broken latest Linus kernel) do 
the following:

git bisect start
git bisect bad
Then you want to set the checkout to be some point in the tree that did not 
have the problem you are testing for. The closer the the bug, the fewer 
steps you will need to bisect the issue. You either need a git commit 
hash or a version tag and do git reset --hard to checkout the next 
kernel to test.

Then you build and test stuff as above.
If the test fails then you run git bisect bad. If it succeeds then you 
run git bisect good. Generally once you have a good and a bad kernel, you 
won't want to manually checkout a particular commit. The last git bisect 
command will have checked out a version roughly half way between the 
latest good version and the earliest bad version you have seen so far. 
Sometimes there can be issues with test kernels and you may have to manually 
checkout a different version to jump around them.

You keep doing this until you find the commit that triggered the issue.
Then you can do git bisect log to get the list of tested kernels and 
save that, so you can restart part way through if needed.

Then use git bisect reset to clean up the bisect stuff.
Sometimes, you can confirm the problem commit by starting at the latest 
Linus kernel and do a git revert of the problem commit. That won't always 
work if there is other stuff dependent on that commit.
Then you can note the in the Fedora bug. At this point it also makes 
sense to report the issue upstream. You'll want to look at the bug and 
try to guess which subsystem is involved and post to the subsystem list 
and copy the main kernel list. People will normally assume you're off list 
when replying, so you don't need to subscribe to the list to follow the 
discussion.

Upstream might ask you to test fixes.
Once upstream is fixed, you can wait for the next rawhide kernel build to 
test the fix for Fedora. Usually you can run rawhide kernels on other 
Fedora versions. This is useful for testing when you don't normally run 
rawhide and if you don't want to wait for the fix to get back ported to 
older kernel releases. It's possible one of the Fedora maintainers could 
do a backport if warranted. If they do, you'd want to do early testing 
of updates to make sure the bug is really fixed.
I think that covers most of it. It isn't really as bad as it looks 
written out.

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-condu

Re: Fedora 30 EOL

2020-05-29 Thread Bruno Wolff III

On Fri, May 29, 2020 at 14:32:10 +,
 Suvayu Ali  wrote:


What baffles me most, is the nature of the bug.  It is the text book
case of a high priority bug, new (budget) hardware, which is becoming
common place very fast, where Fedora isn't bootable, add to that it is
a regression bug. How does a bug with these characteristics not come
within the peripheral vision of the maintainers, specially when the
reporter is eager to do all kinds of troubleshooting and testing!?
Clearly something is wrong with the automation, the question is. how
should that be fixed?


I occasionally submit kernel bug reports. These days one good way to 
get your report looked at is to bisect a Linus kernel to find the commit 
that triggered the problem. This normally takes me about a week to get 
done. I have gotten fixes for bugs that affected old hardware that was in 
limited use by other people. It isn't that hard to do, but kernel builds can 
take a while and you need to be able to reboot for each test and there can 
be limitations on when that can get done.


I run developmental kernels, so I'm likely to see bugs before others. 
Getting the problem noticed upstream before a kernel is released seems to 
also increase the odds of someone taking interest in it. For issues before 
rc1, I just usually note the issue in a Fedora bug so that others can 
notice that others are seeing the same thing. But enough of these get 
fixed by rc1 that it usually isn't worth it for me to go through the 
trouble of bisecting until after rc1 is released. (That will change with 
some newer hardware I'm putting together that will build kernels for that 
machine in a lot less time.)

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org


Re: Newbie question on mdadm

2020-05-15 Thread Bruno Wolff III

On Fri, May 15, 2020 at 12:44:32 +0100,
 Patrick O'Callaghan  wrote:


One other thing. On connecting the dock, I get this from dmesg:

[259115.502000] sd 7:0:0:0: [sdd] Attached SCSI disk
[259115.505730] sd 7:0:0:1: [sdf] Attached SCSI disk
[259115.820568] md127: Warning: Device sdf1 is misaligned
[259115.820570] md/raid1:md127: active with 2 out of 2 mirrors

What does 'device ... misaligned' mean?


I'm not sure, but it might mean something isn't aligned to the block 
size of the device. While drives are addressable by 512 byte chunks, a few 
years ago drives starting using 4096 byte sectors. You want your reads 
and writes aligned with them.

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org


Re: Newbie question on mdadm

2020-05-15 Thread Bruno Wolff III

On Fri, May 15, 2020 at 12:32:03 +0100,
 Patrick O'Callaghan  wrote:

On Fri, 2020-05-15 at 06:20 -0500, Bruno Wolff III wrote:


That's not a good sign, but sometimes you can still get a lot of use out
of such a drive. If you don't want to spend effort figuring out where
the bad sectors are, you can pull the drive out of the array,


I assume that's with mdadm, right?


No, you use smartctl to find the fbad sector that stopped a self test. 
That typically gets logged on the drive. With mirroring you can get 
a copy from the other drive at the same spot. You can use dd to do the 
copy. If the device has 512 byte sectors you need to copy over an aligned 
8 sectors at once since the kernel normally uses 4096 byte sectors. If 
you try to copy just 512, it will try a read first to get the surrounding 
sectors and this will fail because of the bad block. Figuring out where 
in a file system a bad block is, is a real pain. If you weren't mirroring 
and wanted to know which files got corrupted and needed to be recovered 
from backups, you'd need to do that.



I wondered if the dock's clone function would have the same effect.


I don't know.
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org


Re: Newbie question on mdadm

2020-05-15 Thread Bruno Wolff III

On Fri, May 15, 2020 at 11:53:11 +0100,
 Patrick O'Callaghan  wrote:


However gsmartcontrol reports that one of the HDDs has internal errors.
Would it be best to correct these using mdadm (assuming they can be
corrected), and if so, how? Or should I do an offline copy with the
docking station's "clone" button?


That's not a good sign, but sometimes you can still get a lot of use out 
of such a drive. If you don't want to spend effort figuring out where 
the bad sectors are, you can pull the drive out of the array, copy 
/dev/zero to the partition (if the array is at the partition level) or 
the whole disk and afterwards add it back into the array. While this 
is going on if the other drive fails, you won't have a second copy. If 
you screw up and wipe the good drive by mistake, you are going to lose 
the data in the bad sectors. The purpose of rewriting the drive is to 
trigger the drive into replacing the bad sectors with spare sectors. 
(Sometimes that isn't needed if there was a bad write, but the sector 
isn't really bad.) Sectors aren't replaced on reads so that you can continue 
to try to recover the data on the vas sector.



Are there any general recommendations for monitoring these beasties? I
don't want to change anything for the time being and will be using the
thing mainly for backup, but I see there is such a thing as mdmon which
isn't currently running. Should it be? I have no previous experience
with md devices.


You can set up a cron job to run smartctl tests regularly. The config is in: 
/etc/smartmontools/smartd.conf


You can also check the the array elements while also exercising the drive 
to catch bad blocks doing this:

sh -c 'for raid in /sys/block/md*/md/sync_action;do echo "check" >> 
${raid};done'
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org


Re: Is an encrypted Fedora Live CD possible?

2020-04-02 Thread Bruno Wolff III

On Thu, Apr 02, 2020 at 11:44:31 -0400,
 Earl Terwilliger via users  wrote:

I am inserting the data when the iso is created. I want a self contained
bootable USB stick that I can hand to someone. They boot it up, enter a
password, load firefox and go to localhost. The localhost web site has a
database and files that they can search through read, etc.


If it doesn't work out this way, it is possible to have an encrypted 
persistent partion created when you put the image on the usb drive. You 
could then add the data there afterwards and make direct copies of the 
usb stick if you need multiple copies. I used to have a liveusb set 
up with an encrypted partition a number of years ago.

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org


Re: Key-Based Authentication -

2020-02-21 Thread Bruno Wolff III

On Fri, Feb 21, 2020 at 07:00:51 -0500,
 Bob Goodwin  wrote:
I've been reading the thread about detecting hack attempts and I am 
interested in in setting up "key based authentication" as described 
[perhaps] in "https://docs.fedoraproject.org/en-US/Fedora/14/html/Deployment_Guide/s2-ssh-configuration-keypairs.html";


Suggestions, thoughts?


I like to require both a key and a password. (Key first to prevent password 
guessing without access to a valid key.) I use a seperate key for each 
device. It's not quite 2 factor, since the keys can be copied from a 
compromised device. But it still provides protection in some cases where 
just using a password could fail.

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org


Re: Old Wine RPMs

2020-02-12 Thread Bruno Wolff III

On Tue, Feb 11, 2020 at 18:54:34 -0800,
 ToddAndMargo via users  wrote:

Hi All,

Now that Wine Staging has be gobbled up by Wine and Wine
bugs are no longer being fixed unless you put Code Weavers
on your payroll, I have had to downgrade my copy of Wine,
due to regression errors Wine has reintroduced since we lost Wine Staging.

What is the best way to figure out what all RPM's are used
on my old version of Wine, so I can download them for when
my version gets aged out of the repos?


If you use koji download-build you will get all of the rpms associated 
with a specific version of a package.

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org


Re: What is better a 2nd drive for Raid 1 or a backup one?

2020-01-02 Thread Bruno Wolff III

On Tue, Dec 31, 2019 at 17:05:41 -0700,
 "John M. Harris Jr."  wrote:


If that's the case for LVM, then it seems that mdadm would be the easier and
safer option. You simply create an array with a missing disk, copy the data
over, then add the existing disk to the array.


If you copy block by block, you still need to make sure you have room for 
the metadata and the filesystem. If you are thinking about using cp, then 
you need to worry about sparse and special files and maybe hard links.


Note you can also use partitions for arrays rather than a whole disk.

Also note that raid doesn't replace backups. There are others ways to 
wreck your data than having a disk drive fail.

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org


Re: anyone using openvpn?

2019-06-03 Thread Bruno Wolff III

On Tue, Jun 04, 2019 at 02:31:38 +,
 j.witvl...@mindef.nl wrote:

Also it lacks encapsulation; essential for punching restrictive firewalls.


That doesn't need to be built in to the encrytion tunnel and is probably 
best to use a seperate tunnel to make your traffic look like https, http, 
dns or whatever.

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org


Re: anyone using openvpn?

2019-06-03 Thread Bruno Wolff III

On Mon, Jun 03, 2019 at 17:48:09 -0700,
 Jack Craig  wrote:

is there a sdk contact for stuff like this?  fyi, fedora 28

 CC  /home/jackc/src/WireGuard/src/tools/terminal.o
 CC  /home/jackc/src/WireGuard/src/tools/ipc.o
*ipc.c:7:10: fatal error: libmnl/libmnl.h: No such file or directory*
#include 
 ^
compilation terminated.


Do you have libmnl-devel installed?
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org


Re: anyone using openvpn?

2019-06-03 Thread Bruno Wolff III

On Mon, Jun 03, 2019 at 11:10:36 -0700,
 Jack Craig  wrote:


given the problems i surmounted getting this far makes me wonder it openvpn
is really up to the task.


Have you looked at wireguard? It's not upstream yet, but the primary author 
updates it for development kernels, so it's usually working for rc1. The 
kernel module builds very easily on Fedora.


The config is pretty simple. End points are mutually authenticated. One 
end can be roaming or behind nat and things will just work. It creates a 
normal network device the you can use ip to manipulate.


I use it to give my laptops fixed ip addresses by routing through my home 
network, no matter where they are connected.

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org


Re: Why Must I Do "dnf clean all" Before Updating Will Proceed?

2019-05-23 Thread Bruno Wolff III

On Thu, May 23, 2019 at 16:32:22 -0400,
 Garry Williams  wrote:

On most occasions I have to clean files before I am allowed to update
a Fedora 30 system:

   garry@ifr$ sudo dnf upgrade
   [sudo] password for garry:
   Fedora 30 - x86_64 - Updates  63 kB/s |  18 kB
   Fedora 30 - x86_64 - Updates 226 kB/s | 659 kB
   Failed to synchronize cache for repo 'updates'
   Error: Failed to synchronize cache for repo 'updates'


I get this once in a while. Usually if I grab a compose repo while it is 
building and then later try to update from an rsync'd normal repo. I haven't 
been able to figure out the reason yet. As far as I can tell it isn't 
miscopied data (except possibly in the cache).

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org


Re: HW and SW threats: how to block?

2018-04-10 Thread Bruno Wolff III

On Tue, Apr 10, 2018 at 13:40:44 -0700,
 Rick Stevens  wrote:

True, but old DNS uses UDP and thus the responses aren't "related" to a
given query (a stateful firewall couldn't necessarily determine that an
incoming DNS UDP reply was solicited or not).


I think related is fudged for UDP by noting destination and source IPs and 
port numbers and allowing inbound UDP packets that match those IP and port 
numbers through for some period of time (my memory is 5 minutes). This will 
work for most DNS.

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org


Re: Problem browsing at some hotspots

2018-02-06 Thread Bruno Wolff III

On Tue, Feb 06, 2018 at 12:09:08 -0700,
 JD  wrote:


So, I would like to know if there are members on this list who know 
how to get around

such blocking by these hotspots? Are there FF add-ons that can do it?


I use wireguard to tunnel back to my home network and all traffic except the 
wrapped tunnel traffic and dhcp traffic go through the tunnel. I actually 
have a static IP address for the laptop that works no matter where it 
is.


There is a copr for wireguard in Fedora, but I build it from source. 
LEDE / Openwrt has native support for it, so you can have your home router 
be an endpoint.

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org


Re: LUKS question

2017-12-21 Thread Bruno Wolff III

On Mon, Dec 18, 2017 at 14:28:11 -0800,
 Gordon Messmer  wrote:

On 12/18/2017 06:14 AM, Michael Cronenworth wrote:
Everything possible even on the / filesystem while the system runs 
normally.


All of what you describe is possible without LVM, too.



Including moving the filesystem while the system using it is live?  
I'm not aware of a non-LVM way to do that.


If you run it on top of md raid (mirroring) you can move stuff around, though 
I've never tried to change the size of raid arrays while moving them.

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org


Re: Getting luks dependency problems on boot

2016-09-07 Thread Bruno Wolff III

On Wed, Sep 07, 2016 at 10:36:29 -0300,
 Martín Marqués  wrote:

Hi all,

Dependency failed for Cryptography Setup for luks-.
Dependency failed for Encrypted Volumes


Those sound like systemd messages. You probably need to find out which 
dependency failed and that should be a big clueto which update broke things.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://lists.fedoraproject.org/admin/lists/users@lists.fedoraproject.org
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: encrypted partitions

2016-08-20 Thread Bruno Wolff III

On Sat, Aug 20, 2016 at 13:03:55 +0200,
 Patrick Dupre  wrote:


On a laptop, I would like to setup 2 encrypted partitions with the same
passphrase (this is easy). Now, when I boot the laptop, I would like to have
to provide the passphrase only one time.
Is it possible?


That is how it works now for the first password you enter. If you enter an 
incorrect password, then you get asked for one per luks device. (A few 
years ago, each password you entered would be tried on each device, but 
that was changed at some point.)

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://lists.fedoraproject.org/admin/lists/users@lists.fedoraproject.org
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Hardware Suggestions for Desktop Fedora

2016-08-14 Thread Bruno Wolff III

On Sun, Aug 14, 2016 at 16:17:08 -0600,
 Drew Samson  wrote:


What disadvantages were you referring to with hardware raid?


In some cases you need to replace failed hardware with the same model, 
which might be difficult to do. MD raid is very hardware agnostic. Unless 
you buy high end gear you may end up using effectively proprietary 
software raid. The two main advantages of hardware raid are that it can 
be shared with Windows and there may be less traffic on your bus.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://lists.fedoraproject.org/admin/lists/users@lists.fedoraproject.org
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: OS upgrade via SSH

2016-07-22 Thread Bruno Wolff III

On Fri, Jul 22, 2016 at 11:01:16 -0400,
 Mark Haney  wrote:

What's the status on being able to upgrade a server via SSH?  I've upgraded
a couple of Ubuntu servers that way, but how about Fedora? This is a pretty
plain server, just used for storing data. No third party repos, etc.

Is it considered moderately safe? Or should I avoid like the plague?


I'd recommend using screen in your ssh session in case the ssh session 
gets nuked during the upgrade. It reduces the chance you'll need to 
do a big clean up.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://lists.fedoraproject.org/admin/lists/users@lists.fedoraproject.org
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: [OT] Tim, Gil, et. al. (e-mail address settings)

2016-07-01 Thread Bruno Wolff III

On Fri, Jul 01, 2016 at 08:16:10 -0500,
 Chris Adams  wrote:


The correct solution is for the mailing list software to be changed to
rewrite From: addresses.  Newer versions of Mailman support this.  The
address rewriting is annoying, but is the only true solution to being in
between sites that publish and honor DMARC policies.


I disagree. The correct solution is to detect that this is a list message 
and evaluate it some other way. For example the envelope sender address 
could be checked instead of the from address. Some signature systems 
will pass through mailing lists and still be verifiable.


Modying from headers is going to cause problems with replies and it really 
doesn't do anything but flag the message was resent, whivh can be figured 
out with better methods.


This does solve the spam problem in any case as plenty of spam gets sent 
from places like yahoo and gmail because end users get their credentials 
stolen by spammers a lot.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://lists.fedoraproject.org/admin/lists/users@lists.fedoraproject.org
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: [F24] - sshd.service disabled

2016-06-22 Thread Bruno Wolff III

On Wed, Jun 22, 2016 at 23:33:39 +0200,
 Antonio M  wrote:

Bruno, at least on my laptop I cannot find the preset folder,
/etc/systemd/system-preset/  .Is it correct??


The installed ones are at: /usr/lib/systemd/system-preset/
/etc would be for local overrides.
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://lists.fedoraproject.org/admin/lists/users@lists.fedoraproject.org
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: [F24] - sshd.service disabled

2016-06-22 Thread Bruno Wolff III

On Wed, Jun 22, 2016 at 22:35:10 +0200,
 Antonio M  wrote:

Tnx Ed... I don't undesrtand why sshd was disabled on a system, and was not
disabled on the laptop. Kind of magic??


You probably want to check the systemd presets. These can vary depending 
on which flavor of Fedora you have.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://lists.fedoraproject.org/admin/lists/users@lists.fedoraproject.org
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: no freetype-freeworld f24?

2016-06-20 Thread Bruno Wolff III

On Mon, Jun 20, 2016 at 14:30:08 -0500,
 Bruno Wolff III  wrote:

On Mon, Jun 20, 2016 at 14:41:34 -0400,
Neal Becker  wrote:

Looks like rpmfusion doesn't have an f24 update?


They just had a big update within the last few hours. I suspect there 
is more to come though.


The two updates-testing repos have been rebuilt for 24 and have a significant 
amount of stuff. The base and updates repos are still empty.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://lists.fedoraproject.org/admin/lists/users@lists.fedoraproject.org
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: no freetype-freeworld f24?

2016-06-20 Thread Bruno Wolff III

On Mon, Jun 20, 2016 at 14:41:34 -0400,
 Neal Becker  wrote:

Looks like rpmfusion doesn't have an f24 update?


They just had a big update within the last few hours. I suspect there is more 
to come though.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://lists.fedoraproject.org/admin/lists/users@lists.fedoraproject.org
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: SELINUX Problem (Firefox Create access on rawip_socket)

2016-05-11 Thread Bruno Wolff III

On Tue, May 10, 2016 at 01:30:48 -0700,
 Joe Zeff  wrote:


Excellent advice.  Linux never tells you if the username you're trying 
to log in with is right, just that the combination of username and 
password was wrong.  The only username that a potential cracker knows 
exists is root, so if you allow remote log in as root, most of a 
cracker's job is already done.  All they need to know is find the root 


That is incorrect unless you are using very low entropy passwords. The 
difficulty of guessing a username should be much lower than that of 
guessing a password, so knowing a valid username should be almost no 
help to an attacker.


Also, because the kernel seems to have lots of local privilege elevation 
bugs, counting on being protected from total compromise if a normal user 
account is compromised is not a good idea.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
http://lists.fedoraproject.org/admin/lists/users@lists.fedoraproject.org
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: firefox javascript

2016-05-09 Thread Bruno Wolff III

On Mon, May 09, 2016 at 20:59:30 +0200,
 Patrick Dupre  wrote:

If I want to access to gmx.com, I did not find any other option than to have
javascript enabled.


Some web sites are broken. They may be too lazy to make sure their interface 
is usable to work without javascipt. (And the Fedora project has this 
problem with some of its web services.) Or they may want to force you to 
use it, to facilitate doing things you'd rather they didn't (e.g. tracking, 
DRM, compromize attempts).

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
http://lists.fedoraproject.org/admin/lists/users@lists.fedoraproject.org
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: firefox javascript

2016-05-09 Thread Bruno Wolff III

Is there a way to activate the javascripts only for specific website ?


There is an add on that sort of does that. But it turns out, that it needs 
javascript to do this and there was at least one compromize that worked 
if javascript was enabled, but blocked by the add on.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
http://lists.fedoraproject.org/admin/lists/users@lists.fedoraproject.org
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: firefox javascript

2016-05-09 Thread Bruno Wolff III

javascript.enabled is in about:config . I set it to false most of the time.


Why ?


Because javascript is way too powerful to leave on when visiting random 
web sites or sites with third party ads. It greatly increases the attack 
surface of a web browser both for compromizes and for privacy violations.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
http://lists.fedoraproject.org/admin/lists/users@lists.fedoraproject.org
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: firefox javascript

2016-05-09 Thread Bruno Wolff III

On Mon, May 09, 2016 at 10:43:22 -0600,
 jd1008  wrote:
I do not see in my FF any settings for enabling or disabling java, nor 
javascript.

So, where are these 2 settings?

JavaScript True
JavaScriptEnabled True


javascript.enabled is in about:config . I set it to false most of the time.
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
http://lists.fedoraproject.org/admin/lists/users@lists.fedoraproject.org
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: liveusb-creator gone?

2016-04-29 Thread Bruno Wolff III

On Fri, Apr 29, 2016 at 12:01:45 -0700,
 Joe Zeff  wrote:

On 04/29/2016 11:40 AM, Bruno Wolff III wrote:

How does it know what the factory settings were? I get the impression it
just creates a vfat file system on the device using all of the available
space.


Isn't that what the factory settings are?  When was the last time that 
you checked a new flash drive that wasn't like that?


Factory settings could be anything. It seems weird for a program to claim 
to set things back to factory settings unless it has some way to look up 
device ID and find out what they were. Otherwise it would seem to be better 
to say the drive will be reformatted with a vfat file system or whatever 
is really going on.


Certainly some drives come with specific data on them. I have gotten some 
promo ones with logos and some data relevant to the company handing them 
out.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
http://lists.fedoraproject.org/admin/lists/users@lists.fedoraproject.org
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: liveusb-creator gone?

2016-04-29 Thread Bruno Wolff III

On Fri, Apr 29, 2016 at 10:20:13 +0200,
 Martin Bříza  wrote:


Yes, it was rewritten. Now it uses only dd to write to a flash drive 
and it indeed is capable of restoring a flash drive containing Fedora 
to its factory settings.


How does it know what the factory settings were? I get the impression it 
just creates a vfat file system on the device using all of the available 
space.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
http://lists.fedoraproject.org/admin/lists/users@lists.fedoraproject.org
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: An interesting sort problem

2015-11-11 Thread Bruno Wolff III

On Wed, Nov 11, 2015 at 13:54:50 -0700,
 jd1008  wrote:
The sort command does not provide for a way to say that the key is the 
last word in a line,

where the file contains lines of varying number of words,
and where words are groups of characters without spaces or tabs.

Thus

sort -k   

How can one tell sort to chose the last word in the line as the sort key?


You can't. Field specifiers are relative to the start of the line. There 
isn't a way to specify them relative to the end of the line.




The key is always the entirety of the last word.


If you just need grouping and not a particular order you might try something 
like:

rev  | sort | rev

If you need something specific, you'll probably need to write your own 
program. It should be reasonably short in perl.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: How do I start GPM?

2015-10-14 Thread Bruno Wolff III

On Wed, Oct 14, 2015 at 15:17:45 +0100,
 Jonathan Allen  wrote:

Dear List,

How can I start 'gpm' on a F22 laptop?  I've installed the GPM package,
but it doesn't seem to want to start ...


Normally you set it to run at boot by running the following as root:
systemctl enable gpm

To start it if it isn't running you do:
systemctl start gpm
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: fedora 22 live

2015-07-24 Thread Bruno Wolff III

On Fri, Jul 24, 2015 at 21:36:57 +0200,
 Patrick Dupre  wrote:

Hello,

In Fedora 22 live, which version is "almost" a gnome 3 version?
Mate, LXDE, or ?


I would expect you are looking for "workstation".
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Thank God for yum-deprecated :-)

2015-07-22 Thread Bruno Wolff III

On Wed, Jul 22, 2015 at 04:22:13 -0400,
 Radek Holy  wrote:

The most precise description is that it sets the SOLVER_FLAG_ALLOW_UNINSTALL 
flag which is described here: 
https://github.com/openSUSE/libsolv/blob/master/doc/libsolv-bindings.txt#L2024


I looked through that and it isn't easy to understand, but I have a theory 
what might be happening that I test after the next set of rawhide updates 
with a soname bump that does cover anything.


My theory is that since I am not listing any specific packages to update, 
it is acting as an upgrade all packages and locking in all installed 
packages and in effect making --allowerasing moot. My plan is when I see 
a warning about a case of interest is to then try to specifically update 
the library with --allowerasing and see what happens.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Thank God for yum-deprecated :-)

2015-07-21 Thread Bruno Wolff III

On Tue, Jul 21, 2015 at 11:32:58 -0400,
 Radek Holy  wrote:


Right, it still does not allow the depsolver to remove a capability at all. It 
allows it only to replace a package which provides a required capability with 
another package which provides it as well.


Can you describe this more precisely? Packages still provide themselves 
and the installed files and these don't seem to be locked down. Is this 
limited to explicit provides? And/or perhaps the automatic soname provides?

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Thank God for yum-deprecated :-)

2015-07-20 Thread Bruno Wolff III

On Mon, Jul 20, 2015 at 17:35:18 +0200,
 Jan Zelený  wrote:


That's basically what --allowerasing is about. The idea is that when you run
upgrade, you most likely don't want this upgrade to remove any of the packages
that are currently installed on your system. As the name says, the --
allowerasing switch removes this assumption, allowing the dependency solver to
have more available solutions to choose from.


But it doesn't always remove packages that would allow upgrading another 
package. The documentation doesn't appear to give precise information 
about when packages will be erased in order to allow upgrades. The case 
where I'd like to see it work is when there is a soname bump, but not all 
dependencies have been updated yet. In most cases I prefer to remove the 
unupdated packages temporary so that I can use the latest version of the 
library. It would also be useful for upograding between Fedora releases 
where retired packages can also block library updates.



Back to your original question, I am not sure what the problem is. You seem to
describe a situation where package has some broken deps and therefore can't be
installed in which case it is not going to be installed, neither by yum nor by
dnf and --skip-broken will have no effect on that. Or am I missing something?


There are cases where yum gets to a point where it won't do any installs 
or updates, even though --skip-broken is turned on and some installs or 
updates are possible. You can work around this by trying to update or install 
a smaller set of packages. For updates dnf is better, but for installs it is 
currently worse.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Thank God for yum-deprecated :-)

2015-07-20 Thread Bruno Wolff III

On Mon, Jul 20, 2015 at 16:02:11 +0200,
 Jan Zelený  wrote:

On 20. 7. 2015 at 08:57:41, kevin martin wrote:

I'm with Jan...Thank God for yum-deprecated.  Been trying to get systemd
updated with DNF forever and it's been throwing an error about
fedora-release..yum-deprecated has it handled.  The whole skip-broken part
of yum makes it so much easier to actually do updates.  DNF's handling of
broken packages by stopping the update cold is worthless.



Well, I can't be sure because you haven't provided any details but it sounds
like something --best might be able to solve for you.


That doesn't really help much. It provides some data on why it isn't 
doing things that might allow you to figure out how to modify the command to 
get it to partially succeed. --allowerasing only works in some cases and 
I haven't been able to figure out which cases.


For just doing updates (not installs) I found that dnf does a better job 
at figuring out what can be updated without removing anything. Yum's 
depsolver would just give up in some caes where dnf can do some updates.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Building/loading dahdi from asterisk

2015-07-19 Thread Bruno Wolff III

On Sun, Jul 19, 2015 at 21:21:42 -0400,
 Alex  wrote:


I figured it out, but it's really weird.

The file /etc/init.d/functions contains a bunch of shell script
functions, of course. However, it runs one of those functions called
strstr() and checks to see if /proc/cmdline contains "rc.debug". If it
doesn't, it returns 1, and apparently the dahdi script doesn't
anticipate that, and just exits.

If someone can confirm my logic is correct, I'll open a bug report. In
the meantime, commenting out that last line of /etc/init.d/functions,
where strstr() is called, fixes it.

#strstr "$(cat /proc/cmdline)" "rc.debug" && set -x

Thanks for any ideas.


That's helpful, and I recommend going ahead with the bug report.
Really the init scripts should get converted to systemd, but in the short 
run it would be nice to get it working again.


Thanks for looking into this.
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Building/loading dahdi from asterisk

2015-07-19 Thread Bruno Wolff III

On Sat, Jul 18, 2015 at 19:21:37 -0400,
 Alex  wrote:


I'm really stuck with getting asterisk started. I've built and install
the dahdi asterisk modules, but they don't load automatically on boot.

The asterisk-dahdi package includes /etc/rc.d/init.d/dahdi which runs
"/bin/systemctl start dahdi.service" but it fails to load the modules.


I have been seeing this for a while, but haven't figured out what change 
caused it.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: dnf seems to be broken after the most recent updates, including updates-testing

2015-07-18 Thread Bruno Wolff III

On Sat, Jul 18, 2015 at 19:47:43 +0200,
 Joachim Backes  wrote:


downgrading dnf-langpacks to version 0.10.0-1 (using yum-deprecated)  helps.


You can also use the --disbleplugin=langpacks option instead of using 
yum-deprecated.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Clone a system to an encrypted drive

2015-07-15 Thread Bruno Wolff III

On Wed, Jul 15, 2015 at 20:21:25 -0500,
 Chris Adams  wrote:

I have a running Fedora 21 system.  I would like to make a backup of it
to a USB drive, a clone that can be booted.  I know how to do all the
"normal" stuff (partition, LVM, mkfs, rsync, and GRUB), but I'd like the
USB drive to be encrypted, and I don't know how to set that up manually
(I haven't messed with encrypted filesystems under Linux before).

The system I'm backing is also headless, so no GUI tools.

Pointers, tips, suggestions?  Thanks.


cryptsetup is the program used to create LUKS devices. I run LUKS on top 
of separate raid arrays, but you might also want to have just one LUKS 
device and run LVM on top of that.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: No IP 4 address setup no loopback interface

2015-06-22 Thread Bruno Wolff III

On Mon, Jun 22, 2015 at 09:42:31 -0600,
 Kevin Fenzi  wrote:


I'm seeing this also with the similar rawhide version:
NetworkManager-1.0.4-0.1.git20150618.8cffaf3bf5.fc23

I couldn't find an existing bug, so I filed:
https://bugzilla.redhat.com/show_bug.cgi?id=1234478


Thanks. I didn't see this on my work machine, so it looks like there is more 
to this than just having that version of NetworkManager.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: No IP 4 address setup no loopback interface

2015-06-21 Thread Bruno Wolff III

On Mon, Jun 22, 2015 at 12:50:54 +0800,
 Ed Greshko  wrote:

FWIW,  also have a laptop running F22 and fully updated.  Currently at 
NetworkManager-1.0.2-1.fc22.x86_64 which I believe is the latest and I'm not 
having any difficulties with my lo interface.


I'm running NetworkManager-1.0.4-0.1.git20150618.8cffaf3bf5.fc22.i686 from 
updates-testing.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


No IP 4 address setup no loopback interface

2015-06-21 Thread Bruno Wolff III
I am still investigating this, but I have an f22 laptop that is only 
getting an IP6 address set up on the loopback interface. I noticed this 
because I run a local resolver on 127.0.0.1 and connections to it stopped 
working over night (after a reboot). The was a NetworkManager update before 
the reboot where things stopped working, so that seems to be the mostly 
change that triggered the problem. I'll be able to reboot another f22 
machine tomorrow and also should have time to try downgrading 
NetworkManager to confirm whether or not that update is really causing the 
problem. (And file a bug and give negative karma if appropriate.)

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: dnf headaches.

2015-06-10 Thread Bruno Wolff III

On Wed, Jun 10, 2015 at 21:44:37 -0400,
 "Derrik Walker v2.0"  wrote:

I seem to have some issues with dnf, and Dr Google isn't helping ...

So I installed the "Games and Entertainment," which did exactly 
nothing, except mark it installed.


So, I figured out, that if I really want the games installed, I 
probably should have:


# dnf group install with-optional "Games and Entertainment"

Cool except it tells me that "Games and Entertainment" is already 
installed.


OK, so I'll just remove it and re-install it ...  but is says NOPE!!!

# dnf group remove "Games and Entertainment"
Warning: Group 'Games and Entertainment' does not exist.
...

So, now I can't install it properly, or uninstall it.


I ran into something similar when I had a file conflict during a group 
install. My fix was to do dnf group mark remove group_name. I filed 
https://bugzilla.redhat.com/show_bug.cgi?id=1229046 for this, though 
mow it looks like part of the issue is bigger than handling file 
conflicts.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Fedora 22 is here!

2015-05-29 Thread Bruno Wolff III

On Tue, May 26, 2015 at 22:36:07 +0200,
 Suvayu Ali  wrote:


Well, my first preupgrade experience was okayish, but I was also very
new to linux then.  However by the time preupgrade had resolved its
issues, I had already moved on to yum.  I just find it a bit surprising
that it is not *one of* the supported methods (meaning, QA tested),
specially since it works so reliably and with such short downtime.


Some releases there are changes that can't easily be done while the 
system is live (e.g. the /usr move change). Having the system boot into 
a separate image that can handle the change makes these changes easier 
to do.


dnf is a lot better than yum at handling complicated dependencies. I have 
seen dnf be able to do partial updates in cases where yum would give up.
The main issues I have with dnf is that skip broken is only used for updates 
and not installs and it often is not providing as much information as it 
could when there are issues.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Differences between standard and rescue kernels

2015-05-18 Thread Bruno Wolff III

On Sun, May 17, 2015 at 23:31:56 -0400,
 Alex Regan  wrote:

Hi,

I installed fedora21 on an AMD x86_64 box then moved it to an Intel 
x86_64 box and it would no longer boot. It would get to the following:


Switched to clocksource tsc

then just sit there. Booting from the rescue kernel worked properly.

What is the difference between the standard default kernel and the 
rescue kernel?


When dracut is used to build the initramfs it includes more modules than 
when it is built for a specific host.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: SV: Re: F21: why Fedora still has not alternative init?

2015-05-03 Thread Bruno Wolff III

On Mon, May 04, 2015 at 01:48:57 +0200,
 Frantisek Hanzlik  wrote:


Hmm, I guess You want advice me, to bought some strictly limited (maybe
commercial) OS - and then shut up and be satisfied with I have. But this
fortunately is not Linux case...


However it is very unlikely that Fedora will support another init system 
in the foreseeable future. It would be a lot of work and there doesn't 
seem to be enough maintainer interest to support this.


If not using systemd is a hard requirement for you, you'd probably be more 
successful switching distros than talking several people into doing the 
work of supporting another init system.


I think the init system just isn't visible enough to get multiple groups 
of people supporting alternative ones, unlike something like desktops 
where we have something like 6 supported to some degree.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Firefox won't allow connection when site certificate is invalid

2015-04-18 Thread Bruno Wolff III


as yet, i have never been unable to accept a site's unrecognized
certificate. [firefox 24.8.0]


There are some certs that are pinned (tor's site is one I remember) and 
you can't override those easily. If you have removed the default CAs 
and run into this you have to go somewhere esle in the config to unpin 
the certs for the special sites. I don't remember all of the details, just 
that I needed to do it to be able to visit the tor site again.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Issue with GOG native games and opengl?

2015-03-19 Thread Bruno Wolff III

On Tue, Mar 17, 2015 at 08:44:17 +0800,
 Ed Greshko  wrote:

On 03/17/15 08:38, Bruno Wolff III wrote:

The game works in current f21, but not rawhide. I suspect this is due to mesa 
or nouveau versions rather than a bug.


Are you saying you're trying to use the game under rawhide and it doesn't workbut 
that it does work in the released and "supported" F21 version?

If that is the case, wouldn't the answer be to run it on F21?  And, maybe, bring up the 
issue on the "test" list?


The reason I went to rawhide was to get fixes for Nouveau that were 
preventing me from playing a different game.


I think the issue is a generic third party app doesn't match mesa / nouveau 
or whatever and not rawhide specific. Rawhide just tends to use more recent 
versions of those than third parties are likely to build their apps against.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Issue with GOG native games and opengl?

2015-03-16 Thread Bruno Wolff III

When running Icewind Dale's start up script I get the following:
Running Icewind Dale Enhanced Edition
libGL error: unable to load driver: nouveau_dri.so
libGL error: driver pointer missing
libGL error: failed to load driver: nouveau
libGL error: unable to load driver: swrast_dri.so
libGL error: failed to load driver: swrast
X Error of failed request:  BadValue (integer parameter out of range for 
operation)
 Major opcode of failed request:  154 (GLX)
 Minor opcode of failed request:  3 (X_GLXCreateContext)
 Value in failed request:  0x0
 Serial number of failed request:  84
 Current serial number in output stream:  85

They only officially support Ubuntu LTS, so I can't get official support
from GOG.

Is there a way to work around the above? (Other than running the Windows
version under Wine.) The game works in current f21, but not rawhide. I 
suspect this is due to mesa or nouveau versions rather than a bug.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Replacing Fedora Postgresql with non-Fedora version?

2015-02-22 Thread Bruno Wolff III

On Sun, Feb 22, 2015 at 09:35:54 -0700,
 Stuart McGraw  wrote:


I have Postgresql-9.3 installed from the Fedora 21 yum repo
in  order to satisfy any packages that need postgresql.  But
I need  to run Postgresql-9.4 so I disabled the yum postgresql
startup via systemd and installed the EDB version of 9.4
into  /opt/postgresql [*].


What I would is rebuild 9.4 using the source rpm from f22 in f21, then 
update using the generated rpms.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Fedora 21 Workstation - Agere ET-131x network card not working

2015-02-17 Thread Bruno Wolff III

On Tue, Feb 17, 2015 at 17:26:57 +0100,
 Ralf Corsepius  wrote:


...
# CONFIG_DVB_AS102 is not set
# CONFIG_ET131X is not set
# CONFIG_SLICOSS is not set
...

So, you'd need to build a custom kernel or try to persuade the kernel 
maintainers to add it.


They probably will add it if you ask. Best is an RFE bug against the kernel 
so there is tracking, but you could also try informally asking on the 
fedora kernel list or Josh Boyer in IRC.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Disabling the UPS alarm using Linux

2015-02-16 Thread Bruno Wolff III

On Mon, Feb 16, 2015 at 18:30:57 -1000,
 Jim Lewis  wrote:


I know this has always been hard/impossible to do but I thought I would
ask in case this had finally been resolved. I tried using upscmd but it
can't find the APC UPS (USB). The man page and other documentation is
pretty bad. I already use apcupsd to monitor my various UPS units so I
tried using the apctest program. All it can do is perform the alarm test
function. Everything else comes back with a message saying it can't do
whatever it is I want to do.

Any pointers appreciated. Yes, I realize I could find a blows box
somewhere, load the Powerchute program, and disable the alarm that way.


You could look at using nut to manage your UPSes. There is a command for 
setting parameters, but I don't know if will turn off the (audible?) alarm 
for your particular UPS. upsrw or upscmd would be what you want, but you 
need to be using nut to monitor the UPS and you need to do some config file 
setup.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Nouveau driver is fast in Fedora 21 -_-

2015-01-07 Thread Bruno Wolff III

On Wed, Jan 07, 2015 at 08:25:40 +0100,
 Heinz Diehl  wrote:

On 06.01.2015, Ralf Corsepius wrote:


My recommendation is not to buy NVidia Cards ;)


Besides that nvidia cards/nouveau have been working for me, do you
think e.g. AMD/Radeon cards are any better, and why? Is the driver
more stable, faster etc.?


The main advantage is that AMD is providing much more help to the driver 
developers than nVidia is.



I'm going to buy a new gfx card for one of my machine soon, and would
appreciate any good information I could get.


It would probably help if you explained why you wanted to get a new card. 
I don't have any recent cards, so I am not going to have a good 
recommendation in ay case, but it might help others who can.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Nouveau driver is fast in Fedora 21 -_-

2015-01-06 Thread Bruno Wolff III

On Tue, Jan 06, 2015 at 20:46:09 +1100,
 Stephen Morris  wrote:

On 01/06/2015 08:32 PM, poma wrote:
It has always been my understanding that the proprietary drivers make 
extensive use of the video cards hardware acceleration features where 
available, whereas the nouveau driver never has.


That is incorrect. Nouveau does do 3D acceleration. Depending on the 
card it doesn't take advantage of everything, particularly reclocking 
and power management. (Though that is improving.) For very new cards 
some reverse engineering may need to be done before the card is very 
usable. You can check the status of support at:

http://nouveau.freedesktop.org/wiki/FeatureMatrix/
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Nouveau driver is fast in Fedora 21 -_-

2015-01-06 Thread Bruno Wolff III

On Tue, Jan 06, 2015 at 20:03:56 +1100,
 Stephen Morris  wrote:


I am using the RPMFusion repositories to get the nvidia driver but I 
shouldn't have to use a third party repository the get the drivers, 
they should be in standard repositories, and for what its worth, so 
should the proprietary java jdk are jre.


That's never going to happen in Fedora. If that is really a high priority 
for you (to the extent that using rpmfusion is a problem), maybe Fedora 
isn't the distribution for you.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Nouveau driver is slow in Fedora 21

2015-01-06 Thread Bruno Wolff III

On Tue, Jan 06, 2015 at 09:24:04 +0100,
 poma  wrote:

On 06.01.2015 07:24, Bruno Wolff III wrote:


The 3.19 kernel has some Nouveau fixes and is probably worth a quick try.


What particular changes are those?


There are lots of changes in 3.19 (and 3.18 for that matter). I didn't 
see a particular one that might fix his problem, but a relatively quick 
check against the latest code is often worthwhile. 3.19 did fix one issue 
I was having with a program locking up in wine in one place (though not 
everywhere).


If one wanted to look through the changes before trying a new kernel one 
could look at http://cgit.freedesktop.org/nouveau/linux-2.6/log/?h=linux-3.19 
or http://cgit.freedesktop.org/nouveau/linux-2.6/log/?h=linux-3.18 . Though 
once there is a 3.19 rawhide build it would probably be faster to just 
test the newer kernel rather than dig through the changes to see if any 
look like they may help with that particular problem.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Nouveau driver is slow in Fedora 21

2015-01-05 Thread Bruno Wolff III

On Mon, Jan 05, 2015 at 19:16:14 -0800,
 Jonathan Ryshpan  wrote:

Scrolling is painfully slow in Firefox using the nouveau driver under
Fedora 21.  In fact the whole system seems slow, but that's another
issue.  Has anyone tried out the proprietary driver for my system, which
is:


The 3.19 kernel has some Nouveau fixes and is probably worth a quick try. 
There will be a 3.19 fedora kernel built for rawhide tomorrow, that should 
work on f21.


mesa-10.4.1 is in updates testing and if you aren't using that, you might 
try that. Develoment versions of mesa are in rawhide and those might work 
in f21 as well.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Rpmfusion

2014-12-10 Thread Bruno Wolff III

On Wed, Dec 10, 2014 at 12:33:41 +0100,
 Michael Schwendt  wrote:

On Wed, 10 Dec 2014 12:01:37 +0200, jarmo wrote:


Seems, that RPMFUSION is not yet up to date with Fedora 21..


Due to their different development model, their Rawhide repo is the one
that targets Fedora 21. There even is a fresh -release-21 package in it
since yesterday. Whether the repo is complete any without broken deps
anywhere, I dunno.


For f21 rpmfusion seems OK (at least for what I have installed).

For f22 ffmpeg has been broken for a couple of weeks because it needs 
a rebuild for a soname bump in f22. I just rebuilt the f21 package and 
put it in my local repo. I think there are a few other packages that 
are blocked by dependencies in F22 for rpmfusion, but they aren't ones 
that I care much about.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: torrent.fedoraproject.org RSS feed?

2014-12-04 Thread Bruno Wolff III

On Thu, Dec 04, 2014 at 13:00:44 -0600,
 Ben Blankley  wrote:


With the impending release of F21, I was planning on setting up my
RSS-enabled Bittorrent client to get the F21 final ISO downloading as
soon as possible. Is there an RSS feed for torrent.fedoraproject.org?

If not, is there a mirror-friendly way to automate such a download
upon final release, whether through Bittorrent, rsync, or http?


In the past when I have done this I have download the RC being used for 
final from the staging area. Then when things open up on release day 
I copy the binary over to where it should be. (You can breifly start 
using the torrent to get the directory structure setup.) Then I start 
up the torrent and it should verify that the binary you copied is 
correct before seeding out to other people.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: OT: bridging firewall for Comcast static IPv4 addresses

2014-12-03 Thread Bruno Wolff III

On Wed, Dec 03, 2014 at 19:40:01 -0500,
 Robert Moskowitz  wrote:


I don't want to rely on their box for firewall rules, so I want to put 
my own box behind theirs.  But can't very well route to an internal 
firewall a /28 v4 block.  I would have to run a briding firewall.


Anyone know of bridging firewall functionality to add to Fedora?  Or 
something else?


ebtables will let you filter at the link layer level.

If you have a powerful enough router you should be able to use point to 
point routes for your machines. This will take a lot more horse power 
to do than if you are using a builtin switch to move frames around. 
(Though ebtables probably will kill performance as well.)


cerowrt is set up by default to route traffic instead of acting as a bridge. 
However the default config expects one external IP and uses private 
addresses for the internal network. So the config won't work out of 
the box. It is also targeted for WNDR3800s. If you want to use something 
else, you'll probably want to use openwrt instead. It has almost all of 
cerowrt in it, but the default setup will be a lot different.


A wndr3800 might be fast enough for you, but the cerowrt project is 
looking to pick another more powerful target router going forward. (But 
doesn't seem to be picking very quickly.) On the cerowrt-devel list it 
was mentioned that the wndr3800 topped out around 50mbit.




I currently have a /26 v4 allocation which I route all over inside my 
network, but my ISP is only DSL and it is sssllloowww.



--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Somewhat OT, encryption question

2014-11-26 Thread Bruno Wolff III

On Wed, Nov 26, 2014 at 20:33:51 -0500,
 Robert Moskowitz  wrote:


On 11/26/2014 07:10 PM, Bruno Wolff III wrote:

On Wed, Nov 26, 2014 at 20:47:25 +,
Bill Oliver  wrote:

On Wed, 26 Nov 2014, Bill Oliver wrote:

Actually, let me be more specific.  Let's say I have data on a flash
drive that is encrypted using gpg.  We can even say the flash drive
itself is encrypted.

Now let's say that flash drive is stolen, lost, etc. *and* the
passphrase is compromised.  I want the data on the flash drive to be
available *only on one computer* even if the passphrase is known.


If you don't need to decrypt data in the field, you can use public 
key encryption. You won't be able to decrypt the data without the 
private key. (Which you wouldn't have with you or the flash drive.)


NOBODY encrypts lots of data with asymmetric cryptography.  Rather, 
using RSA say, you create a random AES key, encrypt the data with 
that, THEN encrypt the little key data with the public key.


Yes of course. The idea was that you could do the encryption with 
say pgp, erase the originally (carefully) and then you wouldn't be 
able to decrypt the data without having the private key (which would 
be on some other device than the computer the file was on). Using 
asymmetric cryptography is what allows you to do that. Just using 
a symmetric key wouldn't. That the bulk of the encryption is really 
done symmetricly with just the symmetric key encrypted with the public 
key is just an immplementation detail.


If your private key is on a USB dongle with your software supporting 
it, it all works together.


But that doesn't seem to be what he wants. He wants to make sure that 
that having the encrypted data, and his passphrase is not good enough 
to recover the plaintext. If the private key is on the same machine he 
is using his passphrase on, then they may both may be compromised together 
(the scenario didn't say how the passphrase was compromised so it isn't 
clear of this is a likely or unlikely case).


Note, that if this scenario comes about because someone grabs you 
and the flash drive, but not your computer, there could be dire 
consequences to not being able to decrypt the drive. Particularly if 
the people holding don't believe you, when you say you can't decrypt 
it.


Oh, it can get worst than that.  If you get stopped in US customs, 


Worse than what? I was implying torture and/or death. While some people 
have been intercepted in US customs and sent off to be tortured, I haven't 
heard of this happening because of not being able to decrypt data.


Actually, England is a worse place for this as there it is against the 
law not to decrypt data at the police's request. But even there, I think 
you get a chance to prove you can't decrypt it.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Somewhat OT, encryption question

2014-11-26 Thread Bruno Wolff III

On Wed, Nov 26, 2014 at 20:47:25 +,
 Bill Oliver  wrote:

On Wed, 26 Nov 2014, Bill Oliver wrote:

Actually, let me be more specific.  Let's say I have data on a flash
drive that is encrypted using gpg.  We can even say the flash drive
itself is encrypted.

Now let's say that flash drive is stolen, lost, etc. *and* the
passphrase is compromised.  I want the data on the flash drive to be
available *only on one computer* even if the passphrase is known.


If you don't need to decrypt data in the field, you can use public key 
encryption. You won't be able to decrypt the data without the private key. 
(Which you wouldn't have with you or the flash drive.)


TPMs provide a way to keep a secret on a computer that can't easily be 
extracted (otherwise you could supply the data in an emulated environment). 
I don't know if there is anything in Fedora for using say, luks with a 
TPM in a way that prevents the TPM info from being sniffed in a similar 
manner to how your passphrase is compromised. There has been some work 
with using TPMs with luks, but I don't know how the process works.


Note, that if this scenario comes about because someone grabs you and 
the flash drive, but not your computer, there could be dire consequences 
to not being able to decrypt the drive. Particularly if the people holding 
don't believe you, when you say you can't decrypt it.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Somewhat OT, encryption question

2014-11-26 Thread Bruno Wolff III

On Wed, Nov 26, 2014 at 17:39:34 +,
 Bill Oliver  wrote:


For the HP issue, the fix is easy -- you just delete the command to check 
during boot up.  But, I was thinking about this as an encryption option -- 
where one could encrypt files in a way that automatically incorporates hardware 
information with the passphrase.  That way, if someone were to intercept a file 
and knew your passphrase, they would still not be able to decrypt the file 
unless they did it on one specific machine.


What threats are you trying to counter? The normal putting file systems on 
top of a luks container should be good enough for a lot of threats.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Port knocking script/server for fedora?

2014-11-19 Thread Bruno Wolff III

On Wed, Nov 19, 2014 at 11:58:11 +,
 Patrick O'Callaghan  wrote:


If the main concern is ssh hacking, you might consider denyhosts (yum
install denyhosts). It's easy to set up and seems to be effective. The
logs make fascinating (and scary) reading.


openssh stopped supporting tcpwrappers/libwrap in version 6.7 (which 
isn't in Fedora yet), so this will stop working in the not too distant 
future unless the Fedora maintainer puts that feature back in.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Port knocking script/server for fedora?

2014-11-18 Thread Bruno Wolff III

On Wed, Nov 19, 2014 at 01:36:46 +,
 Bill Oliver  wrote:


I've been reading a bit about port knocking as a security tool.  It makes 
pretty good sense for a private box, at least for stuff like ssh and ftp.   
Does anybody know of a good tutorial/example/script for fedora for this?


If your threat is password guessing, you can use two factor. 
It is easy to require both a password and a public key to connect, with 
the public key authentication required before any guessing of the password 
can be done.


If your threat is preauthentication attacks versus the service itself, using 
a firewall is probably simpler. But you need to be able to restrict the 
allowed IPs to some small fraction of the internet. And there may be blind 
spoofing attacks that can get through the firewall. Port knocking can 
provide some additional coverage, but this adds risk of the port knocking 
service having bugs, extra work setting things up, and it isn't going to 
stop some potential attackers.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Clearing the unallocated disk space

2014-11-16 Thread Bruno Wolff III

On Sun, Nov 16, 2014 at 2:04 PM, jd1008 mailto:jd1...@gmail.com>> wrote:

Before sending the drive for warranty service, what is the best
way to clean the unallocated blocks?


If this is really important to you, just eat the cost of the drive and 
destroy it instead of sending it back.


If not modern drives provide a secure erase function and you should use 
that. You can use hdparm to do this.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Password Needed

2014-10-20 Thread Bruno Wolff III

On Mon, Oct 20, 2014 at 09:51:43 -0600,
 Bill Kuns  wrote:

I inherited a computer running Windows 8.  When I power up the machine,
it asks for a
password.  I don't have that password.  What can I do to use the
machine?


A BIOS/EFI password or a Windows password? If there is a BIOS password you 
can usually pull the battery out for a few minutes and it will change 
back to having no password. But you will also lose your current BIOS 
settings which could potentially be a problem. I am not sure if machines 
using EFI typically need the battery to keep the password stored. You 
might need to do something else in that case.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: How to prevent a program from accessing to the Internet?

2014-10-18 Thread Bruno Wolff III

On Sat, Oct 18, 2014 at 12:33:29 -0400,
 Rahul Sundaram  wrote:


Filed a RFE a few hours before

https://bugzilla.redhat.com/show_bug.cgi?id=1154302


According to the man page for sandbox, processes don't get network access. 
I didn't see a way to turn it on in the man page.


I tried testing in and it isn't working for me in rawhide or f21. It looks 
like I'll need to file a bug.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: How to prevent a program from accessing to the Internet?

2014-10-18 Thread Bruno Wolff III

On Sat, Oct 18, 2014 at 14:09:41 +0100,
 Paul Smith  wrote:

Dear All,

I would like to prevent a program from accessing to the Internet. Any ideas?


Besides the suggestion Rahul pointed to you can also use the sandbox 
command which will lock down other things as well. It is in 
policycoreutils-python. I am not sure if that is installed by default.
There is a man page for it that will describe what it limits and how 
to allow access to some things that are blocked by default.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Display resolution -

2014-10-02 Thread Bruno Wolff III

On Thu, Oct 02, 2014 at 11:30:28 -0600,
 jd1008  wrote:


Hi Bruno,
Your conf file comment line says
Xorg configuration created by system-config-display

But I cannot find it in my fc20 installation.
You must be running an older fedora??


The file was created a long time ago. The machine with the file is actually 
using rawhide. You can get the timing information using other programs. 
Also probably some stuff could get trimmed out of the file these days.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Display resolution -

2014-10-02 Thread Bruno Wolff III

On Thu, Oct 02, 2014 at 12:46:15 -0400,
 "Bob Goodwin - Zuni, Virginia, USA"  wrote:


On 10/02/14 11:13, Bruno Wolff III wrote:
I have a monitor that doesn't properly do EDID and I use the 
following in /etc/X11/xorg.conf:

# Xorg configuration created by system-config-display


]$ ll /etc/X11/xorg.conf
ls: cannot access /etc/X11/xorg.conf: No such file or directory


That is because you don't normally need an xorg.conf file. Most recent 
displays are going to do proper EDID and X can using that information and 
information from the video card drivers / video card to figure out which 
resolutions are usable.



Nothing I have tried seems to work except xrandr.


You don't need to use system-config-display. Just plop a similar xorg.conf 
file with timing data appropriate for your monitor. I though you had 
already collected that and should be able to use it instead of the 
timing data I had.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Display resolution -

2014-10-02 Thread Bruno Wolff III

On Wed, Oct 01, 2014 at 19:17:19 -0400,
 "Bob Goodwin - Zuni, Virginia, USA"  wrote:
I need to swap monitors as the backlight in my old Dell monitor grows 
dim. I have a Viewsonic vx2035WM that Fedora can never get the 
resolution right for. I've gone through the following process using 
information I found on Google.


I have a monitor that doesn't properly do EDID and I use the following 
in /etc/X11/xorg.conf:

# Xorg configuration created by system-config-display

Section "ServerLayout"
Identifier "single head configuration"
Screen  0  "Screen0" 0 0
InputDevice"Keyboard0" "CoreKeyboard"
EndSection

Section "InputDevice"

# keyboard added by system-config-display
Identifier  "Keyboard0"
Driver  "kbd"
Option  "XkbModel" "pc105+inet"
Option  "XkbLayout" "us"
EndSection

Section "Monitor"
Identifier   "Monitor0"
ModelName"NEC MultiSync LCD2010X"
HorizSync31.0 - 80.0
VertRefresh  56.0 - 85.0
	Modeline "1280x1024_70.00"  129.00  1280 1368 1504 1728  1024 1027 1034 
1069 -hsync +vsync

Option  "dpms"
EndSection

Section "Device"
Identifier  "Videocard0"
Driver  "radeon"
EndSection

Section "Screen"
Identifier "Screen0"
Device "Videocard0"
Monitor"Monitor0"
DefaultDepth 24
SubSection "Display"
Modes "1280x1024_70.00"
EndSubSection
EndSection
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: SpoofMAC

2014-09-16 Thread Bruno Wolff III

On Tue, Sep 16, 2014 at 18:11:03 +0300,
 Robert Moskowitz  wrote:

https://github.com/feross/SpoofMAC

Has anyone used this?  I will be using it to test the impact of using 
randomized local MAC addresses.  I would like to have a Gnome widget 
that I can just click on and run this.


No, but I am interested in using random mac addresses for wireless. (For 
wired mac addresses I usally set to something other than what is on the 
hardware, but don't constantly change it.)

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Fedora 20 with AMD catalyst video driver

2014-09-15 Thread Bruno Wolff III

On Mon, Sep 15, 2014 at 16:16:48 -0700,
 Steven Rosenberg  wrote:


While I could say, "just don't use Fedora," instead I'm going to say,
"Linux users should think twice before buying AMD hardware," which I
wish I did this last time.


That applies to all hardware. Personally I prefer AMD graphics cards 
to nVidia ones because of the better documentation of the hardware 
provided by AMD. I would expect that to be common amoung Fedora users 
because of the emphasis on freedom. For people that want the top 
performance out of their video cards as a high priority, Fedora may not 
be the distribution for them.


(Intel has also done a lot of work on free graphics drivers, though they 
don't currently compete with high end graphics cards.)

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: ssh problems

2014-09-04 Thread Bruno Wolff III

On Thu, Sep 04, 2014 at 10:38:57 -0500,
 Aaron Konstam  wrote:

I have two machines on a Local LAN. Machine A can ssh and sftp to
Machine B. But ssh on Machine B to Machine A results in port 22
connection refused. How can this be fixed and or port 22 be opened?


Note that the problem could also be that sshd is not running on machine 
A. You probably should check that first as it is easy.

systemctl status sshd
And then if it isn't running:
systemctl enable sshd
systemctl start sshd

If you aren't using the firewall package, then you can edit the iptables 
config in /etc/sysconfig/iptables to allow connections to port 22 from 
whichever source ip addresses you you need. (You might also need to update 
/etc/sysconfig/ip6tables if you are using ip6.) You then need to restart 
iptables (or ip6tables) with:

systemctl restart iptables

If you are using the firewall package there is some graphical config 
package for updating it. You could start with man firewalld, but I am 
not sure if there is better documentation for it somewhere else.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: What happened to rcp and ssh problem

2014-09-04 Thread Bruno Wolff III

On Thu, Sep 04, 2014 at 10:10:40 -0500,
 Aaron Konstam  wrote:

For medical reasons I have been away from Linux for a year or more. I am
now running fc20 , but there is a problem.

rcp dooes not appear in the distribution. Has it disappeared in earlier
versions and I just missed it?
Is there a substitute that I can use?


I'd suggest using scp over rcp for increased security.
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Secure Transactions

2014-08-31 Thread Bruno Wolff III

On Sun, Aug 31, 2014 at 15:02:03 -0700,
 Tod Merley  wrote:

Heinz thanks for reminding me about looking at certificates by clicking the
padlock.  I also note that they have the ability to export and so I suppose
a comparison could be made through that as well.

General question - can one spoof a certificate?  I suppose "man in the
middle" is simply nasty.


You might be tricked into going to a site that has a valid certificate for 
that site, but isn't really the site you expected to be at.


The certificate might be signed by a CA in your browser that isn't a 
normal CA. This is common for work PCs where ssl traffic is proxied.


The certificate might be signed by a normal CA, but might have be issued 
in error or at the request of law enforcement for someone other than 
the parties responsible for the site you are visiting.


The certificate might have used a key with too little entropy and it 
was possible to guess the private key allowing someone else to make 
use of the normal public part.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: md5 encryption

2014-08-28 Thread Bruno Wolff III

On Thu, Aug 28, 2014 at 15:29:58 -0400,
 Robert Moskowitz  wrote:


Today you might STILL use sha1; it has had tremendous resiliency. NIST 
was expecting it to fall as badly as md5 by this point.   Most use at 
least sha256, and sha3 is now out there.  Choose your poison.


sha3 isn't really ready yet (unless something changed within the last 
couple of months). The algorithm was chosen a while ago, but there are 
parameters that need to be chosen and as yet there isn't a standard sha3.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: BIOS boot partition, 4x3TB disks, and raid, problems with anaconda

2014-08-28 Thread Bruno Wolff III

On Thu, Aug 28, 2014 at 11:10:54 -0700,
 Rick Stevens  wrote:


I think you need to reserve some small space on all the drives (and
with 3TB drives you can afford to sacrifice a few MB), use the remainder
as your RAID, and let the system put the boot partition in that reserved
space on the primary drive (the one the BIOS sees as the boot drive).


I think using raid 1 (with the 1.0 header format) can work well for that. 
There can still grub issues with having a boot just work, but at least 
you have the stuff you need available.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: System starts in emergency mode...how do I recover ?? (as a newbie)

2014-08-24 Thread Bruno Wolff III

On Mon, Aug 25, 2014 at 00:10:09 +0200,
 antonio montagnani  wrote:
Suddenly my laptop when rebooted doesn't start in the usual way After 
six months of hard work) but it stops when bootib with this message

drm:cpt-serr_int_handler ERROR PCH transcoder a FIFO underrun
and the appears some lines with request for password for maintenance 
mode or CTRL-D option...


Was there a kernel update betwen reboots? If so, try booting the previous 
kernel.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Mesa-10.2.5 was released - while Fedora still ships 10.1 :/

2014-08-15 Thread Bruno Wolff III

On Fri, Aug 15, 2014 at 16:21:51 +0200,
 Heinz Diehl  wrote:

On 15.08.2014, Bruno Wolff III wrote:


Are you sure you're not counting rpms? It looks like there are 4 packages
that have mesa as the start of their name. There will be some others that
need to get rebuilt in order to link with the updated mesa. I can believe
that the latter set could get you over 20 packages.


[htd@kiera ~]$ rpm -qa | grep -i "mesa"
mesa-libGL-9.2.4-1.20131128.fc19.i686
mesa-libglapi-9.2.4-1.20131128.fc19.i686
mesa-filesystem-9.2.4-1.20131128.fc19.x86_64
mesa-libEGL-9.2.4-1.20131128.fc19.x86_64
mesa-libGLU-9.0.0-4.fc19.x86_64
mesa-libglapi-9.2.4-1.20131128.fc19.x86_64
mesa-libEGL-devel-9.2.4-1.20131128.fc19.x86_64
mesa-libGLU-9.0.0-4.fc19.i686
mesa-dri-drivers-9.2.4-1.20131128.fc19.x86_64
mesa-libgbm-9.2.4-1.20131128.fc19.i686
mesa-libgbm-9.2.4-1.20131128.fc19.x86_64
mesa-libxatracker-9.2.4-1.20131128.fc19.x86_64
mesa-libGLU-devel-9.0.0-4.fc19.x86_64
mesa-libGL-9.2.4-1.20131128.fc19.x86_64
mesa-libGL-devel-9.2.4-1.20131128.fc19.x86_64
mesa-libEGL-9.2.4-1.20131128.fc19.i686

Wrt the mix of 32/64 bit packages (on my system), I would consider
rebuilding them a nightmare..


Those aren't all separate packages. A single package can be associated with 
more than one rpm. When you run rpmbuild on a package, it builds all of 
the rpms for it at once. 

However as I mentioned, there are packages that depend on mesa that are 
going to need to be rebuilt as well, and that could add up.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Mesa-10.2.5 was released - while Fedora still ships 10.1 :/

2014-08-15 Thread Bruno Wolff III

On Fri, Aug 15, 2014 at 13:56:30 +0200,
 Clemens Eisserer  wrote:

Hi Wolf,


Rebuilding the source rpm usually isn't a problem. You could get a 10.2.5
srpm from f21 or a 10.3 srpm from rawhide.


Mesa consists of about ~20 packages :/


Are you sure you're not counting rpms? It looks like there are 4 packages 
that have mesa as the start of their name. There will be some others that 
need to get rebuilt in order to link with the updated mesa. I can believe 
that the latter set could get you over 20 packages.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Mesa-10.2.5 was released - while Fedora still ships 10.1 :/

2014-08-15 Thread Bruno Wolff III

On Fri, Aug 15, 2014 at 13:40:35 +0200,
 Clemens Eisserer  wrote:


Are there any unofficial reporsitories for Mesa-10.2 or 10.3 git?
Reason is I've bought a few games on steam and would like to play
them, but the Intel OpenGL driver in mesa 10.1 doesn't work well.
Now with the proprietary drivers I could simply perform an update,
with the free ones I would have to re-compile mesa - which is
something I don't really dare...


Rebuilding the source rpm usually isn't a problem. You could get a 10.2.5 
srpm from f21 or a 10.3 srpm from rawhide.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: SSHD keys

2014-08-11 Thread Bruno Wolff III

On Mon, Aug 11, 2014 at 12:55:45 -0400,
 Robert Moskowitz  wrote:
If I want to 'reset' SSHD to have all new keys do I stop it, delete 
the files:


/etc/ssh/ssh_h*

and restart it?  This seems to be working...

And does the server keep client sigs anywhere?  I can't find any file 
that looks like it would be housing such...


While there are ways to store some client keys at the server level, normally 
those are kept per login in the ~/.ssh directory. man ssh_config will tell 
you about what's there.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: new kernels & rebooting

2014-07-21 Thread Bruno Wolff III

On Mon, Jul 21, 2014 at 06:41:05 -0400,
 Paul Cartwright  wrote:

Is it me, or does every other update lately seem to include a new
kernel.. I thought linux was meant to stay up & running. I seem to be
rebooting weekly now, just for a new kernel.  Now on:


We'll you could keep running the older kernel. Depending on what the update 
has there may not be a pressing need to switch on a particular system. 
Though updates to stable kernels are often security or data loss bugs, 
so staying on the old kernels without reviewing the changes isn't a 
great idea. And reviewing the changes would also take time and expertise. 
So for most people just rebooting at the first covenient time is going to 
make the most sense.


You might want to keep an eye on the kGraft project.
https://www.suse.com/communities/conversations/kgraft-live-kernel-patching/
https://www.suse.com/company/press/2014/1/suse-develops-kgraft-for-live-patching-of-linux-kernel.html

And Red Hat has a similar project:
http://rhelblog.redhat.com/2014/02/26/kpatch/
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Problem with iptables

2014-07-01 Thread Bruno Wolff III

On Mon, Jun 30, 2014 at 17:21:21 -0700,
 Mike Wright  wrote:


ps. Could you not use html mail?  I can barely read the pale gray text. Thx.


Note that the original message was a multipart/alternative message with 
both text/html and text/plain versions of the same text. You may be able 
to tell your client to display the text/plain version in preference to 
the text/html version. That will normally make these messages more 
readable. And I find that html only mail is somewhat rarer than 
multipart messages, so it covers a that vast majority of non-spam that 
I receive.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Jitsi - Open Source Video Calls and Chat, Web Conferences, Desktop Sharing, Secure communications, Multi Platform, 32 & 64 bit version

2014-06-21 Thread Bruno Wolff III

On Sat, Jun 21, 2014 at 15:11:48 +0200,
 poma  wrote:


Good to know how grateful you are for someone else's hard work.


Please be excellent to other people. This kind of comment doesn't further 
the discussion.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Why won't smbd and nmbd start automatically on system start?

2014-06-18 Thread Bruno Wolff III

On Wed, Jun 18, 2014 at 09:20:45 -0400,
 Temlakos  wrote:


Now when I try to start either one in runtime, I get an SELinux alert. 
But as long as I simply do a restart or a cold start, such alerts do 
not happen. (I always "sudo" such commands, BTW. I made myself a 
member of Wheel.)


Are you using systemctl to start them? If you just run the binaries 
the proper process labelling (and other things) might not be setup.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Save everybody some surprises in Fedora 22!

2014-06-16 Thread Bruno Wolff III

On Mon, Jun 16, 2014 at 14:45:17 +0200,
 Jan Zelený  wrote:


ad b) how many times have this feature actually saved you from erasing the
kernel? In 10+ years using Linux I have never managed to do this accidentally.
That being said, if users accidentally instruct yum to erase the running
kernel on a regular basis, we are will reconsider this argument. Hence the
poll ... feel free to reopen the bug too, otherwise it might get off the radar.


Note that even updates can bite you if dnf will always be removing the 
oldest kernel, even if that is the one you are running. There may be kernel 
or dracut problems keeping the newer installed kernels from being usable 
on a particular system. Also if the running kernel is removed, you won't be 
able to load any modules that are already loaded.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Save everybody some surprises in Fedora 22!

2014-06-07 Thread Bruno Wolff III

On Sat, Jun 07, 2014 at 08:57:33 -0400,
 Tom Horsley  wrote:

On Sat, 7 Jun 2014 07:47:37 -0500
Bruno Wolff III wrote:


For one thing the depsolving algorithm used by yum is slow.


Not so an ordinary human could notice it compared (for
example) to the time it takes to rebuild the rpms
from the deltas.


That depends on how much stuff you update at once. Try updating 6000 
packages (which I just did yesterday and will be doing again on 
multiple systems after the mass rebuild) and you will notice some delay.
It can still be small compared to doing the actual updates, but when you 
are trying to catch problems (that block lots of the updates) it can be 
pain to have to wait before seeing what needs to be fixed.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Save everybody some surprises in Fedora 22!

2014-06-07 Thread Bruno Wolff III

On Sat, Jun 07, 2014 at 13:08:42 +0100,
 Timothy Murphy  wrote:


Why not "Vote for yum vs dnf"?
What exactly is wrong with yum?


For one thing the depsolving algorithm used by yum is slow.
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Consistent device naming

2014-05-14 Thread Bruno Wolff III

On Wed, May 14, 2014 at 15:35:37 -0700,
 CLOSE Dave  wrote:

Bruno Wolff III wrote:


To exchange names, you need to use a temporary name and do three
renames. Pretty much like swapping to values using a temporary
variable.


I can't find a way to do that with udev. Please enlighten me.


I use "ip link set" to do that. I am not sure how you would do it
with udev.


Thanks for the reference. But that can't be used after the interface is
up, and my interfaces come up during boot. I think it must be udev or
nothing, and nothing seems to win based on the link I posted previously.
I still think the new naming system is broken /by design/.


I forgot to add that since it's been a while since I actually did it. You 
do have to set the link down before doing the rename. But you can use 
ip link to do that as well.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Consistent device naming

2014-05-14 Thread Bruno Wolff III

On Wed, May 14, 2014 at 14:12:19 -0700,
 CLOSE Dave  wrote:

On 05/13/2014 06:53 PM, Bruno Wolff III wrote:


To exchange names, you need to use a temporary name and do three
renames. Pretty much like swapping to values using a temporary
variable.


I can't find a way to do that with udev. Please enlighten me.


I use "ip link set" to do that. I am not sure how you would do it with udev.
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Consistent device naming

2014-05-13 Thread Bruno Wolff III

On Tue, May 13, 2014 at 17:59:54 -0700,
 CLOSE Dave  wrote:


I've done that. The problem seems to be that what I want to do is to
/exchange/ the names assigned. One of the renames works but the other
fails, claiming the new name is already in use. In other circumstances,
I'd use an intermediate name, orig->temp->target, but I don't know how
to do that with udev, or even if it is possible.


To exchange names, you need to use a temporary name and do three renames. 
Pretty much like swapping to values using a temporary variable.


Another thing to consider is do you really need to reference the interface 
names? If you use dhcp and NetworkManager, you might be able to avoid that.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: What on earth just happened?

2014-05-09 Thread Bruno Wolff III

On Fri, May 09, 2014 at 15:54:54 +0100,
 John Austin  wrote:


Glad I'm not the only one with a problem!
kdm and xfce


I saw this problem in rawhide for about a week, but it recently cleared up. 
Other than someone else chiming in that they saw it too, I didn't get any 
feedback on the bug. After it started working again I closed the bug.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


  1   2   3   4   5   6   7   8   9   10   >