Bug#909567: ITP: opensnitch -- Port of the Little Snitch application firewall

2021-06-16 Thread Harald Dunkel
Upstream seems to provide Debian support: https://github.com/evilsocket/opensnitch/tree/master/debian

Bug#989676: ERROR: API version 2020-11-01-preview does not have operation group 'registries'

2021-06-09 Thread Harald Dunkel
Package: azure-cli Version: 2.18.0-2 "az aks update" died with module.cluster.null_resource.cluster (local-exec): Executing: ["/bin/sh" "-c" "az aks update --resource-group $RESOURCE_GROUP --name $CLUSTER_NAME --attach-acr $REGISTRY_ID"] module.cluster.null_resource.cluster (local-exec): ERROR:

Bug#973053: rasdaemon: fails to give complete summary

2021-06-01 Thread Harald Dunkel
metoo # ras-mc-ctl --summary No Memory errors. No PCIe AER errors. No Extlog errors. DBD::SQLite::db prepare failed: no such table: devlink_event at /usr/sbin/ras-mc-ctl line 1183. Can't call method "execute" on an undefined value at /usr/sbin/ras-mc-ctl line 1184. # ras-mc-ctl --errors N

Bug#989118: please try https first

2021-06-01 Thread Harald Dunkel
Hi Eduard, I have to admit I haven't thought about broken ssl configurations and diverging folder configurations for https. Its fine to reject this feature request. Thank you very much, anyway. Harri

Bug#988994: Info received (Bug#988994: Acknowledgement (no graphics, but a frozen console for kernel 5.12.6 and nvidia 460.80-1))

2021-05-31 Thread Harald Dunkel
I could reproduce this using linux-image-5.10.0-7-amd64.

Bug#988994: Acknowledgement (no graphics, but a frozen console for kernel 5.12.6 and nvidia 460.80-1)

2021-05-30 Thread Harald Dunkel
This thread seems to be related: https://forums.developer.nvidia.com/t/465-24-02-page-fault/175782/31 Could you please keep 460.73.01-1 in Testing? Regards Harri

Bug#989242: please write your own logfile

2021-05-29 Thread Harald Dunkel
Package: logrotate Version: 3.18.1-1 Severity: wishlist Would you mind to enable logrotate logging for Bookworm by default? logrotate appears to be excellent in logging. Its a shame that this is not used. And since you have to wait 24h for the next run (unless you enable hourly rotation) it is ev

Bug#989118: please try https first

2021-05-26 Thread Harald Dunkel
Package: apt-cacher-ng Version: 3.6.3-1 Severity: wishlist Sorry to say, but configuring https for apt-cacher-ng is APITA. Would it be possible for ACNG to silently try https first, if the client asked for http? That would be similar to an explicit http://HTTPS///get.docker.com/ubuntu, except for

Bug#988994: no graphics, but a frozen console for kernel 5.12.6 and nvidia 460.80-1

2021-05-22 Thread Harald Dunkel
Package: nvidia-kernel-dkms Version: 460.80-1 I've got a reproducible freeze for kernel 5.12.6 (built from git) and the new 460.80-1 nvidia packages. Instead of a graphics screen I just get a cursor in the top left corner. The console is unresponsive. I cannot switch to another console. The Xorg

Bug#720096: marked as pending in rsyslog

2021-05-19 Thread Harald Dunkel
We go in circles here. 651236c2319eb0ca13fd1d376eaf239a6dcd5c49 has been introduced as a workaround, because logrotate/rsyslog was losing SIGHUPs in the previous configuration. This special configuration introduced with 651236c2319eb0ca13fd1d376eaf239a6dcd5c49 is something I cannot use on some of

Bug#720096: marked as pending in rsyslog

2021-05-19 Thread Harald Dunkel
On 5/19/21 12:10 PM, Michael Biebl wrote: Does that mean, you manually modified /etc/logrotate.d/rsyslog to have multiple sections / postrotate calls? Of course I have to modify the default settings on some of my hosts. I did not modify /etc/logrotate.d/rsyslog to have multiple sections. It a

Bug#720096: marked as pending in rsyslog

2021-05-19 Thread Harald Dunkel
Hi Michael, On 5/18/21 6:42 PM, Michael Biebl wrote: On Thu, 25 Feb 2021 13:30:40 +0100 Harald Dunkel My favorite workaround is to kick out the delaycompress, see https://bugs.debian.org/720096#130. I still fail to see a convincing explanation, why that would fix this issue. Its not a

Bug#986878: Acknowledgement (ReplaceHeaders not working)

2021-04-15 Thread Harald Dunkel
Hi David, the fix is a pretty obvious one-liner. The risk in applying it is very low. But it makes the difference between "works for me" and "better don't use opendkim, because it makes things worse". Consider this: You send an EMail to somebody outside your own (masqueraded) domain, you get a r

Bug#986878: ReplaceHeaders not working

2021-04-13 Thread Harald Dunkel
Hi David, Would you mind to apply the patch to opendkim in Sid to increase the chance it can make it into Bullseye? Of course I had verified it on my MTA using a private backport of 2.11.0~beta2-4 to Buster. Thanx very much Harri

Bug#986878: ReplaceHeaders not working

2021-04-13 Thread Harald Dunkel
ed with result 'exit-code'. -- The unit opendkim.service has entered the 'failed' state with result 'exit-code'. : See https://sourceforge.net/p/opendkim/bugs/257/ for a fix (attached). This is important. Without this feature opendkim is not usable together with

Bug#720096: marked as pending in rsyslog

2021-02-25 Thread Harald Dunkel
On Mon, 22 Feb 2021 20:00:33 +0100 Michael Biebl wrote: Am 22.02.2021 um 18:57 schrieb Harald Dunkel: > Sorry to say, but this is not a fix. A fix would avoid the race > condition, no matter whats written in the config files. > > Your "fix" is just a workaround. If I add

Bug#720096: closed by Michael Biebl (Re: Bug#720096: After log rotation, rsyslog fails to close opened log files and open the new ones)

2021-02-24 Thread Harald Dunkel
It is still broken. I have installed the new version on our mail server yesterday. This morning I found this: root@il01:~# ls -alrt /var/log/daemon.log* -rw-r- 1 root adm 5818753 Jan 31 00:00 /var/log/daemon.log.5.gz -rw-r- 1 root adm 5841733 Feb 7 00:00 /var/log/daemon.log.4.gz -rw-r-

Bug#720096: marked as pending in rsyslog

2021-02-22 Thread Harald Dunkel
Sorry to say, but this is not a fix. A fix would avoid the race condition, no matter whats written in the config files. Your "fix" is just a workaround. If I add /var/log/logfile1 { rotate 7 daily missingok notifempty delaycompress compress

Bug#962788:

2021-02-18 Thread Harald Dunkel
Actually I cannot say. I haven't seen this problem in a while. And /etc/init.d/nfs-common start does PIPEFS_MOUNTPOINT=/run/rpc_pipefs : mkdir -p "$PIPEFS_MOUNTPOINT" : modprobe sunrpc nfs nfsd mount -t rpc_pipefs rpc_pipefs $PIPEFS_MOUNTPOINT prov

Bug#982589: installing openssh_server without /etc/ssh/sshd_config ?

2021-02-12 Thread Harald Dunkel
Package: openssh-server Version: 1:8.4p1-3 Severity: wishlist sshd works very well without /etc/ssh/sshd_config, using just the defaults, so I wonder if the openssh-server package should provide /etc/ssh/sshd_config at all? Providing and maintaining a (sparse) /etc/ssh/sshd_config could be the r

Bug#981980: Acknowledgement (4.0.6 regression: /proc/sys/net is read-only)

2021-02-09 Thread Harald Dunkel
PS: The commit on LXC's stable-4.0 branch is 563ec46266b8967f0ee60e0032bbe66b3b37207c Regards Harri

Bug#981980: 4.0.6 regression: /proc/sys/net is read-only

2021-02-05 Thread Harald Dunkel
Package: lxc Version: 1:4.0.6-1 563ec46266b8967f0ee60e0032bbe66b3b37207c introduced a bug into lxc 4.0.6: /proc/sys/net is mounted read-only, even though the container is privileged and did not drop CAP_NET_ADMIN. Result: # echo 0 >/proc/sys/net/ipv4/ip_forward bash: /proc/sys/ne

Bug#981631: rasdaemon refuses to run

2021-02-02 Thread Harald Dunkel
Package: rasdaemon Version: 0.6.6-2 rasdaemon doesn't start. If I try to run it manually, then there is an error message # rasdaemon --foreground rasdaemon: Can't find debugfs rasdaemon: Can't locate a mounted debugfs # type debugfs debugfs is /sbin/debugf

Bug#981404: compressed file is world readable, while zstd is running

2021-01-30 Thread Harald Dunkel
Package: zstd Version: 1.3.8+dfsg-3 Severity: critical Compressing a large file with restricted access permissions a new, world readable file is created, revealing the contents of the uncompressed file. Sample: # whoami root # zstd -q -13 -T8 sample.dmp &> zstd.log & : : # ls -al total 385983012

Bug#980860: fix dependencies for local and remote file systems

2021-01-23 Thread Harald Dunkel
Package: minidlna Version: 1.3.0+dfsg-1 Tags: patch Apparently minidlna is started before autofs and others. This breaks the initial scan for new media files. On the next reboot you just get an empty database. Attached is a patch for minidlna.init and minidlna.service. Regards Harri --- debian

Bug#980080: Failed to read server status: Transport endpoint is not connected

2021-01-21 Thread Harald Dunkel
Log file is attached. As you can see, Docker is involved. AFAICT that was Docker version 5:20.10.2~3-0~debian-buster, provided by upstream as a Debian package. The host was on Sid. In the meantime this host has been reconfigured to run Kubernetes without Docker (WIP). Regards Harri kern.log.t

Bug#980080: Failed to read server status: Transport endpoint is not connected

2021-01-19 Thread Harald Dunkel
AFAICS the host ran into OOM. Regards Harri

Bug#980436: grub-pc should not suggest LVM physical volumes on a RAID1

2021-01-18 Thread Harald Dunkel
Package: grub-pc Version: 2.04-12 The grub-pc.postinst script lists all my disks to install grub. It also provides an option to install grub on /dev/md0 (i.e. my RAID1), even though there is no valid boot sector. Its a physical volume for LVM2. It is easy to select /dev/md0 in the debconf menu by

Bug#980206: LXC: lxc-start fails and cgroup IO error

2021-01-16 Thread Harald Dunkel
As a workaround, have you tried to boot with systemd.unified_cgroup_hierarchy=0 ?

Bug#980160: new upstream

2021-01-15 Thread Harald Dunkel
Package: lxc Version: 1:4.0.5-2 Upstream provided version 4.0.6 of lxc, see https://github.com/lxc/lxc/releases/tag/lxc-4.0.6 Would be nice if the new version could make it into Bullseye. Regards Harri

Bug#980080: Failed to read server status: Transport endpoint is not connected

2021-01-13 Thread Harald Dunkel
Package: systemd Version: 247.2-4 I do not know how my host got into this state root@srvl065:~# systemctl status Failed to read server status: Transport endpoint is not connected but AFAICT this is not supposed to happen. Google doesn't provide a recovery procedure, i.e. this ho

Bug#976395: no readline in python3 shell

2020-12-04 Thread Harald Dunkel
Package: libpython3.9-stdlib Version: 3.9.1~rc1-2 cursor up doesn't show you the previous lines from the history in python3 shell anymore. No such problem for using python 3.7 (Buster) on the same terminal. libreadline8 is version 8.1~rc3-1 Regards Harri

Bug#974569: debian-distro-info: command not found

2020-11-12 Thread Harald Dunkel
Package: lxc-templates Version: 3.0.4-4 lxc-create -P /data1/lxc -n dex05 -t debian fails with : : I: Base system installed successfully. Download complete. Copying rootfs to /data1/lxc/dex05/rootfs...Generating locales (this might take a while)... en_US.UTF-8... done Generation complete. up

Bug#973676: ProtocolsHonorOrder Off by default?

2020-11-02 Thread Harald Dunkel
Package: apache2 Version: 2.4.46-1 Severity: wishlist AFAIU it is good practice to respect the client's preferences, so you might want to consider to set ProtocolsHonorOrder Off in http2.conf by default, similar to SSLHonorCipherOrder. Next step would be to enable http/2 by default. Se

Bug#972999: avoid "which"

2020-10-26 Thread Harald Dunkel
Package: sensible-utils Version: 0.0.12 To avoid problems with user-supplied "which" or bad $PATH variables sensible-editor should use built-ins (e.g. "type") or absolute path names.

Bug#972243: option to download *all* binary packagesg

2020-10-20 Thread Harald Dunkel
On 10/20/20 1:36 PM, Julian Andres Klode wrote: On Tue, Oct 20, 2020 at 01:30:29PM +0200, Harald Dunkel wrote: ??? Like we say in German: Satzzeichen sind keine Rudeltiere. A paragraph of 3 question marks is fairly bad etiquette. Sorry, no offense. I see this "???" as some kind

Bug#972243: option to download *all* binary packages

2020-10-20 Thread Harald Dunkel
On 10/20/20 9:53 AM, Julian Andres Klode wrote: On Tue, Oct 20, 2020 at 08:38:59AM +0200, Harald Dunkel wrote: Wouldn't you agree that this "download" option should be mentioned in the man page, anyway? meh. it's on the apt-get manual page. We really need to rewrite them

Bug#972243: option to download *all* binary packages

2020-10-19 Thread Harald Dunkel
Sorry to say, but this doesn't work: # apt download '?source-package(^apt$)?architecture(amd64)?archive(bullseye)' E: Handler silently failed # apt download '?source-package(^apt$)?or(?architecture(amd64),?architecture(all))?archive(bullseye)' E: Handler silently failed Wouldn't you agree that

Bug#972243: option to download *all* binary packages

2020-10-15 Thread Harald Dunkel
Package: apt Version: 2.1.10 Severity: wishlist Hi folks, for maintaining a restricted local backports repository for Buster I would like to have an option in apt-get to download all *.deb packages for a given source package, architecture and target release. The signature should be checked as we

Bug#971753: sqldeveloper is not upgraded automagically anymore

2020-10-06 Thread Harald Dunkel
Package: sqldeveloper-package Version: 0.5.4 If there is a new sqldeveloper- package, then it is not installed automatically, neither in parallel nor replacing the old version. You have to select it manually, and manually remove the old version. For a single Debian host this is not a big deal, b

Bug#971616: sh: pager: command not found

2020-10-03 Thread Harald Dunkel
Package: dpkg Version: 1.19.7 I am pretty sure this is not supposed to happen: # aptitude upgrade : Setting up smartmontools (7.1-1~bpo10+1) ... Installing new version of config file /etc/default/smartmontools ... Installing new version of config file /etc/init.d/smartmontools ... Configuration

Bug#970352: unprivileged podman dies with gibberish

2020-09-20 Thread Harald Dunkel
On 9/15/20 5:05 PM, Reinhard Tartler wrote: I think this is the relevant error message. May I ask a couple of questions: 1. Did this work with an earlier verison of podman, i.e., is this a regression? What version worked for you before? No, I didn't try an earlier version of podman.

Bug#970388: upstream moved to github

2020-09-15 Thread Harald Dunkel
Package: rng-tools Version: 5-1 AFAICT upstream moved to https://github.com/nhorman/rng-tools. The current upstream version is v6.10 Would it be possible to update this package? Thanx in advance Harri

Bug#970352: unprivileged podman dies with gibberish

2020-09-14 Thread Harald Dunkel
Package: podman Version: 2.0.6+dfsg1-1 Unprivileged podman dies with some gibberish instead of a readable error message: % podman run -it debian /bin/bash Trying to pull quay.io/debian... error parsing HTTP 404 response body: invalid character '<' looking for beginning of value: "\n404 Not Fou

Bug#969568: rng-tools-debian fails to start by default

2020-09-04 Thread Harald Dunkel
Package: rng-tools-debian Version: 2.1 After a fresh install and reboot rng-tools-debian fails to start with # systemctl status rng-tools-debian * rng-tools-debian.service - LSB: rng-tools (Debian variant) Loaded: loaded (/etc/init.d/rng-tools-debian; generated) Active: failed (Result:

Bug#944243: logrotate fails with "Permission denied" on LXC guest

2020-09-01 Thread Harald Dunkel
See https://github.com/lxc/lxc/issues/3520 for possible workarounds. Regards Harri

Bug#969229: new upstream version 4.0.4

2020-08-29 Thread Harald Dunkel
Package: lxc Version: 1:4.0.2-1 There is a new version 4.0.4. Can I help to upgrade the LXC package? This could help to get rid of #966998 2 weeks ago I have upgraded LXC on my Debian 10 systems from 4.0.2 to 4.0.4. Nothing unusual so far. The only issue was to upgrade the symbol list. Regards

Bug#968701: dpkg does not replace directory by symlink on upgrade

2020-08-20 Thread Harald Dunkel
Package: dpkg Version: 1.19.7 Trying to replace a directory with a symlink on the upgrade of a private package I stumbled over this: root@dpcl082:/usr/lib/jvm# dpkg --contents /var/cache/apt/archives/adoptopenjdk11_11.0.8+10-1_amd64.deb drwxr-xr-x root/root 0 2020-08-20 12:29 ./ drwxr-

Bug#968425: mount cgroupv2 by default, similar to systemd

2020-08-17 Thread Harald Dunkel
On 8/15/20 11:29 AM, Mark Hindley wrote: As far as I know this is already available by installing the cgroupfs-mount package. Nope, thats just cgroup v1. Anyway, having the same cgroup/cgroupv2 setup as for systemd would be an improvement, independent from cgroupfs-mount, elogind and maybe o

Bug#968484: wireshark hard-wired to libsystemd0?

2020-08-16 Thread Harald Dunkel
Package: wireshark Version: 3.2.6-1 Trying to install wireshark I stumbled over # apt install wireshark Reading package lists... Done Building dependency tree Reading state information... Done Some packages could not be installed. This may mean that you ha

Bug#961584: lxc-stop fails with exit code 1

2020-08-14 Thread Harald Dunkel
PS, just to be sure: You do have mounted cgroupv2 on the Docker host and in the Docker container?

Bug#968425: mount cgroupv2 by default, similar to systemd

2020-08-14 Thread Harald Dunkel
Package: initscripts Version: 2.96-4 Severity: wishlist To reduce friction between systemd and "non-systemd" systems I would suggest to mount croupv2 very early at boot time, similar to systemd. Could be added next to /proc and /sys in mountkernfs.sh. Background of this story is: systemd uses

Bug#968404: liblxc1 is hardwired to systemd or cgroupv1

2020-08-14 Thread Harald Dunkel
Package: liblxc1 Version: 1:4.0.2-1 Apparently I have to install either systemd or cgroupfs-mount for liblxc1. Since cgroupfs-mount doesn't support cgroupv2 (#959021, set to wontfix), I am stuck. A line like cgroup2 /sys/fs/cgroup cgroup2 defaults in /etc/fstab would do. Do yo

Bug#968234: sendmail starttls moans about unsafe key "Permission denied"

2020-08-11 Thread Harald Dunkel
Hi Michael, making the key group-readable seems to have done the trick. Maybe its me, but I didn't expect that. I learned that the key file should be readable by as few accounts as possible. Thanx for the hint. The problem is,though, sendmail doesn't tell. I started to think that maybe adding

Bug#966998: patch

2020-08-11 Thread Harald Dunkel
Attached you can find the diff. commit 15d82dfe4f7900be54e06b6ca0a79321ee2a9b34 Author: Christian Brauner Date: Sat Jul 25 11:36:46 2020 +0200 selinux: remove security_context_t usage as it's deprecated Link: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1888705 Signed-of

Bug#968234: sendmail starttls moans about unsafe key "Permission denied"

2020-08-11 Thread Harald Dunkel
Package: sendmail Version: 8.15.2-14~deb10u1 sendmail complains about an unsafe key file during starttls: # grep STARTTLS=client /var/log/mail.log | grep Permission Aug 11 13:10:33 srvvm01 sendmail[51615]: STARTTLS=client: file /etc/mail/private/mailhost.key.pem unsafe: Permission denied Aug 11

Bug#966998: lxc: FTBFS: lsm/selinux.c:35:2: error: ‘security_context_t’ is deprecated [-Werror=deprecated-declarations]

2020-08-10 Thread Harald Dunkel
AFAICT lxc-4.0.4 got rid of security_context_t: commit 15d82dfe4f7900be54e06b6ca0a79321ee2a9b34 Author: Christian Brauner Date: Sat Jul 25 11:36:46 2020 +0200 selinux: remove security_context_t usage as it's deprecated Link: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1888705

Bug#961584: lxc-stop fails with exit code 1

2020-08-10 Thread Harald Dunkel
I am using LXC 4.0.2 on about 25 systems without problems. None of these hosts does nested virtualization, though. Nested virtualization and cgroups vs cgroups2 is a *highly* complex issue. Can you reproduce this problem outside of your Docker setup? I wouldn't like to see LXC dropped for Bullsey

Bug#968049: Failed to kill unit rsyslog.service: Input/output error

2020-08-10 Thread Harald Dunkel
PS: I do not see, how logrotate affects the systemctl command line to send a HUP to rsyslog, though. ?

Bug#968049: Failed to kill unit rsyslog.service: Input/output error

2020-08-10 Thread Harald Dunkel
On 8/7/20 1:55 PM, Michael Biebl wrote: What's the output of logrotate -v /etc/logrotate.d/rsyslog Sorry, I should have included this right from the start. srvvm01:~# logrotate -v /etc/logrotate.d/rsyslog reading config file /etc/logrotate.d/rsyslog Reading state from file: /var/lib/logrotat

Bug#968049: Failed to kill unit rsyslog.service: Input/output error

2020-08-10 Thread Harald Dunkel
On 8/7/20 4:56 PM, Christian Göttsche wrote: Is this maybe related to #720096 and #831764 ? logrotate calling the rsyslog-rotate wrapper twice (one time for /var/log/syslog and another time for the rest (/var/log/mail.* etc.)) and the second time rsyslog is not (yet) ready to receive the SIGHUP

Bug#967945: systemd is way too aggressive in deleting journals of yesterday

2020-08-10 Thread Harald Dunkel
On 8/8/20 11:54 AM, Michael Biebl wrote: What's the output of journalctl -b -u systemd-journald.service srvvm01:~# journalctl -b -u systemd-journald.service -- Logs begin at Mon 2020-08-10 00:04:18 CEST, end at Mon 2020-08-10 10:19:18 CEST. -- -- No entries --

Bug#967945: systemd is way too aggressive in deleting journals of yesterday

2020-08-10 Thread Harald Dunkel
On 8/10/20 10:19 AM, Harald Dunkel wrote: On 8/8/20 11:54 AM, Michael Biebl wrote: What's the output of journalctl -b -u systemd-journald.service srvvm01:~# journalctl -b -u systemd-journald.service -- Logs begin at Mon 2020-08-10 00:04:18 CEST, end at Mon 2020-08-10 10:19:18 CEST. --

Bug#968105: chrony still not started by systemd (on Buster)

2020-08-08 Thread Harald Dunkel
Package: systemd Version: 241-7~deb10u4 Chrony (3.4-4) is not started at boot time. # systemctl status chrony * chrony.service - chrony, an NTP client/server Loaded: loaded (/lib/systemd/system/chrony.service; enabled; vendor preset: enabled) Active: inactive (dead) Docs: man:chronyd

Bug#968074: /usr/sbin/dkms: line 247: /dev/fd/62: No such file or directory

2020-08-08 Thread Harald Dunkel
I was told this might be a udev problem on systems without systemd.

Bug#967945: systemd is way too aggressive in deleting journals of yesterday

2020-08-08 Thread Harald Dunkel
On 8/5/20 4:46 PM, Chris Hofstaedtler wrote: More important: how large is your journal directory now? Chris Sorry, my bad. Currently its # du -ksh /var/log/journal/ 913M/var/log/journal/ # ls -al /var/log/journal/ total 56 drwxr-sr-x+ 3 root systemd-journal 4096 Jan 13 2016 . drwxr

Bug#968074: /usr/sbin/dkms: line 247: /dev/fd/62: No such file or directory

2020-08-07 Thread Harald Dunkel
Package: dkms Version: 2.8.3-3 Instaling aufs-dkms (or others) fails with messages like /usr/sbin/dkms: line 247: /dev/fd/62: No such file or directory Sample: # apt upgrade Reading package lists... Done Building dependency tree Reading state information... Done Calculating upgrade...

Bug#968049: Failed to kill unit rsyslog.service: Input/output error

2020-08-07 Thread Harald Dunkel
Package: systemd Version: 241-7~deb10u4 logrotate.service dies with ● logrotate.service - Rotate log files Loaded: loaded (/lib/systemd/system/logrotate.service; static; vendor preset: enabled) Active: activating (start) since Fri 2020-08-07 00:00:01 CEST; 346ms ago Docs: man:logrota

Bug#967945: systemd is way too aggressive in deleting journals of yesterday

2020-08-05 Thread Harald Dunkel
Package: systemd Version: 241-7~deb10u4 Everytime I look into the status of some failed service there is a message saying Warning: Journal has been rotated since unit was started. Log output is incomplete or unavailable. How comes? Disk space is cheap. And I didn't mess with the defaults: # e

Bug#965323: postinst script deletes custom locales

2020-07-29 Thread Harald Dunkel
Can't be worse than not having the locale at all. Not to mention that there is an option --posix to assure compatibility to POSIX.1-2008, AFAICT. If there are incompatible changes, then its my job to worry about recreating the custom locales. Since the postinst builds just a subset of all locale

Bug#952516: please support LC_CTYPE=UTF-8

2020-07-22 Thread Harald Dunkel
Not yet. Do you have some Posix document, RFC, best practice guideline, etc showing that it should be "C.UTF-8" instead of "UTF-8"? Something to present to Apple proving that they are not Posix compliant? https://pubs.opengroup.org/onlinepubs/9699919799/functions/setlocale.html says "Th

Bug#965323: postinst script deletes custom locales

2020-07-19 Thread Harald Dunkel
Package: locales Version: 2.28-10 To support MacOS terminal I have to define "UTF-8" using localedef (see #952516). Problem is, custom locales are wiped out by the postinst script. Sample: # locale -a C C.UTF-8 POSIX # localedef -i C -f UTF-8 UTF-8 # locale -a C C.UTF-8 POSIX UTF-8 UTF-8.utf8 #

Bug#964076: RFS network-manager-strongswan

2020-07-01 Thread Harald Dunkel
Package: sponsorship-requests Severity: wishlist Hi folks, my previous sponsor became unresponsive, so I am looking for a new sponsor for network-manager-strongswan. The source package is on salsa. Package name: network-manager-strongswan Version : 1.5.2-1 Upstream Author :

Bug#963080: chromium dies in libva

2020-06-18 Thread Harald Dunkel
Package: chromium Version: 81.0.4044.92-1 Visiting youtube to watch a video chromium dies: {harri@cecil:harri (master) 501} chromium [65350:65350:0618/183220.289924:ERROR:browser_switcher_service.cc(238)] XXX Init() [65386:65386:0618/183220.293842:ERROR:vaapi_wrapper.cc(482)] vaInitialize fail

Bug#962788: rpc.idmapd[9725]: main: open(/run/rpc_pipefs/nfs): No such file or directory

2020-06-13 Thread Harald Dunkel
Package: nfs-common Version: 1:1.3.4-2.1 Running "/etc/init.d/nfs-common start" rpc.idmapd failed with rpc.idmapd[9725]: main: open(/run/rpc_pipefs/nfs): No such file or directory Ain't the startup script supposed to create this directory? init is sysv Regards Harri

Bug#855549: apt should have a history command which shows what updates/upgrades and removals were done to packages

2020-06-06 Thread Harald Dunkel
metoo. I just read about yum history on https://www.tecmint.com/view-yum-history-to-find-packages-info/ Its such an useful feature. Its really missing on Debian. Regards Harri

Bug#951486: network-manager: network-online.target returns before network has IP address

2020-05-27 Thread Harald Dunkel
metoo

Bug#961196: new upstream version 1.5.2 of network-manager applet

2020-05-21 Thread Harald Dunkel
Package: network-manager-strongswan Version: 1.4.5-2.1 Hi Ian, I have uploaded a new version 1.5.2-1 of network-manager-strongswan to Salsa. Would you mind to take a look at it? Is there something missing (except for the tag)? Thanx in advance Harri

Bug#959939: IP address ping-pong

2020-05-07 Thread Harald Dunkel
Package: isc-dhcp-server Version: 4.4.1-2 My dhcp client (isc-dhcp-client 4.4.1-2) gets 10.0.102.161 or 10.0.102.162 on every other reboot. AFAIR this is not supposed to happen. The client is supposed to keep "his" IP address, unless it is given to another host. Leases files are attached. The

Bug#954845: closed by Debian FTP Masters (reply to Sven Joachim ) (Bug#954845: fixed in xterm 354-1)

2020-05-01 Thread Harald Dunkel
I tried it on sid, and I have backported the new version to Stretch and Buster in a local repository. Works very well Big improvement. Keep on your good work Harri

Bug#956014: new upstream LTS version

2020-04-29 Thread Harald Dunkel
Hi Pierre, sorry, I haven't seen your EMail. I am on vacation till end of this week. I have backported the new lxc package to buster and installed it on my office PC, but I didn't had a chance to do more than just a very brief test. Hopefully I can install it on some "real" lxc servers next week

Bug#954845: poor performance for -g 256x50

2020-04-12 Thread Harald Dunkel
You can reproduce the performance fall-off by using a slow network connection, e.g. via IPsec and DSL and public Internet to a remote site. The "small numbers" case was taken using a local network connection from one Linux PC to another. Ping shows a round-trip time of 0.3ms for this local connect

Bug#956446: new upstream version 5.8.4

2020-04-11 Thread Harald Dunkel
Package: strongswan Version: 5.8.2-2 Hi folks, I would like to package network-manager-strongswan 1.5 for Sid, but according to https://strongswan.org/download.html it requires at least strongswan version 5.8.3. Current upstream release is 5.8.4. Would it be possible to support the new upstream

Bug#956014: new upstream LTS version

2020-04-05 Thread Harald Dunkel
Package: lxc Version: 1:3.1.0+really3.0.4-2 Upstream announced new LTS versions for LXC, LXCFS and LXD, see https://lists.linuxcontainers.org/pipermail/lxc-users/2020-April/015198.html Do you think it would be possible to upgrade the lxc and lxcfs packages for sid? I would be glad to help. Reg

Bug#954845: poor performance for -g 256x50

2020-04-03 Thread Harald Dunkel
Sorry for the delay. The rsnapshot file is just % wc -c /var/log/rsnapshot 433435 /var/log/rsnapshot See attachment. The important part seems to be the very long lines in the text file. "time zcat rsnapshot.log.gz" gave me for a local network connection 253x50: real0m0.031s

Bug#954883: [Skins --> get more] doesn't

2020-03-24 Thread Harald Dunkel
Package: kodi Version: 2:18.6+dfsg1-1 If I try to pick up my favorite skin using [get more], then it just jumps back to the settings menu, instead of downloading and showing an additional list of skins. Installing kodi-repository-kodi did not help. Regards Harri

Bug#954845: poor performance for -g 256x50

2020-03-24 Thread Harald Dunkel
Package: xterm Version: 353-1 xterm -g 256x50 has a much worse "scroll performance" than xterm -g 255x50, esp if there are very long lines and its a slow network connection. Sample: xterm -g 255x50: # time cat /var/log/rsnapshot.log : : real0m0.041s user0m0.000s sys 0m0.006s xterm

Bug#954796: sqldeveloper.19.2.1.247.2212 requires libgail-common

2020-03-23 Thread Harald Dunkel
Package: sqldeveloper-package Version: 0.5.4 Apparently sqldeveloper.19.2.1.247.2212 (generated via make-sqldeveloper-package) has some additional dependencies: Oracle SQL Developer Copyright (c) 2005, 2018, Oracle and/or its affiliates. All rights reserved. Gtk-Message: 11:42:49.640: Faile

Bug#954069: please move to hourly cron jobs and and set maxsize

2020-03-17 Thread Harald Dunkel
On 2020-03-16 15:43, Michael Biebl wrote: logrotate is run daily, so I don't see how I can make the logs rotated hourly. My fault, I see logrotate and rsyslog as a unit. Please ignore the part about "hourly cron jobs". Also, maxsize doesn't really help either in case of a rogue application a

Bug#954065: gnome-shell: Could not allocate offscreen buffer storage

2020-03-16 Thread Harald Dunkel
Hi Simon, On 2020-03-16 09:20, Simon McVittie wrote: Do you use chromium, Chrome, Electron or qtwebengine? I am just the messenger, but AFAICT its Google Chrome. However, the process id 3434 (mentioned in syslog) belongs to gnome-shell. I think its unwise to generate appr 12000 syslog messag

Bug#954069: please move to hourly cron jobs and and set maxsize

2020-03-16 Thread Harald Dunkel
Package: rsyslog Version: 8.1901.0-1 Severity: wishlist Using syslog it is easy to write a few GBytes/hour logfiles, e.g. via #954065, so I would suggest to run the logrotate for rsyslog hourly and to set maxsize 1G per default. In the new configuration the "daily" and "weekly" in /etc/

Bug#954065: gnome-shell: Could not allocate offscreen buffer storage

2020-03-16 Thread Harald Dunkel
Package: gnome-shell Version: 3.30.2-11~deb10u1 Within a few hours gnome-shell wrote >20 GByte into /var/log/{messages,syslog,user.log}: : Mar 15 02:01:58 dpcl071 org.gnome.Shell.desktop[3434]: [8045:8045:0315/020158.705821:ERROR:gles2_cmd_decoder.cc(4007)] ContextResult::kFatalFailure: Could

Bug#953080: create and store ssh private host keys in tpm?

2020-03-03 Thread Harald Dunkel
Package: openssh-server Version: 1:8.2p1-4 Severity: wishlist The private host keys in /etc/ssh are (usually) unencrypted and easy to steal, e.g. using docker (not shown here). Would it be possible to add some code to postinst to make use of the tpm to create and store the private ssh keys, if th

Bug#945567: new network-manager-strongswan package [and 1 more messages]

2020-02-25 Thread Harald Dunkel
Hi Ian, On 2/24/20 5:14 PM, Ian Jackson wrote: Fixed I think. I have created this: https://salsa.debian.org/debian/network-manager-strongswan and made you ("harri-guest") a maintainer of it. I think you can do all the rest of the setup yourself. Let me know if you want anything else doing

Bug#952516: please support LC_CTYPE=UTF-8

2020-02-25 Thread Harald Dunkel
Package: locales Version: 2.29-10 Severity: wishlist Apparently MacOS 10.15 uses "UTF-8" instead of "C.UTF-8". This affects ssh terminal sessions from MacOS to Debian, e.g. # apt upgrade : : Processing triggers for mime-support (3.64) ... Processing trigge

Bug#945567: new network-manager-strongswan package [and 1 more messages]

2020-02-24 Thread Harald Dunkel
Hi Ian, Sorry for the confusion. Of course n-m-s is not in salsa (yet). I was working on mg (my other package) in parallel, which *is* in salsa. On 2/24/20 3:02 PM, Ian Jackson wrote: I looked at the diff etc. and I have some observations: * It would be nice to add a Vcs-Git header. I am O

Bug#945567: network-manager-strongswan FTBFS: error: G_ADD_PRIVATE

2020-02-24 Thread Harald Dunkel
There is a new version 1.4.5-1 on salsa. Apparently it builds fine on Sid. Hopefully my sponsor finds a few minutes for a review.

Bug#719210: network-manager's VPN connection timeout is too short for n-m-strongswan

2020-02-23 Thread Harald Dunkel
Is this still an issue? I had the impression that n-m waits more than 5 seconds for setting up a connection, but I don't have a smartcard to verify. Regards Harri

Bug#897906: Stop installing deprecated /etc/NetworkManager/VPN/nm-strongswan-service.name

2020-02-23 Thread Harald Dunkel
AFAIU it is still possible to override /usr/lib/NetworkManager/VPN/nm-strongswan-service.name by /etc/NetworkManager/VPN/nm-strongswan-service.name Removing the file in /etc might break things. Can you confirm? Regards Harri

Bug#897939: network-manager-strongswan: clean up legacy conffiles

2020-02-23 Thread Harald Dunkel
AFAIU it is still possible to override /usr/lib/NetworkManager/VPN/nm-strongswan-service.name by /etc/NetworkManager/VPN/nm-strongswan-service.name Removing the file in /etc might kick out local modifications. Can you confirm? Regards Harri

<    1   2   3   4   5   6   7   8   9   10   >