Re: question re tar

2022-09-20 Thread Greg Wooledge
On Tue, Sep 20, 2022 at 10:19:50PM +0100, jr wrote: > hi, > > On Tuesday, 20 September 2022 at 12:30:05 UTC+1, Greg Wooledge wrote: > > ... > > With this new information, it occurs to me that perhaps the OP did > > something like this: ... > > unicorn:/tmp/x$ find . | tar cv --files-from=- -f ../f

Re: question re tar

2022-09-20 Thread jr
hi, On Tuesday, 20 September 2022 at 12:30:05 UTC+1, Greg Wooledge wrote: > ... > With this new information, it occurs to me that perhaps the OP did > something like this: ... > unicorn:/tmp/x$ find . | tar cv --files-from=- -f ../foo.tar I prefer 'locate' to 'find'. an no guessing involved, as

Re: Verify a mirror?

2022-09-20 Thread David Christensen
On 9/20/22 02:53, Tim Woodall wrote: On Tue, 20 Sep 2022, Hans wrote: I asked myself, how can I check, if on a mirror are not manipulated packages. apt does this for you. There are a set of gpg public keys in /etc/apt/trusted.gpg.d. When apt downloads the releases file it verifies it with

[OT] your clock, was Re: Verify a mirror?

2022-09-20 Thread David Wright
Your clock appears to be fast by the precise number of seconds it took for your post to leave your computer and reach my mail server. Arrived: Tue, 20 Sep 2022 19:16:05 +0100 (BST) Posted: Tue, 20 Sep 2022 20:16:05 +0200 That's the output of a tiny script that I was just tweaking, that uses

Re: Verify a mirror?

2022-09-20 Thread tomas
On Tue, Sep 20, 2022 at 07:27:33PM +0100, Tim Woodall wrote: > On Tue, 20 Sep 2022, Hans wrote: > > > Hi Tim, > > > > I am not sure, you are correct. But please correct me! > > > apt does this for you. There are a set of gpg public keys in > > > /etc/apt/trusted.gpg.d. > > > > > > > Yes, apt is

Re: Verify a mirror?

2022-09-20 Thread tomas
On Tue, Sep 20, 2022 at 08:16:05PM +0200, Thomas Schmitt wrote: > Hi, > > to...@tuxteam.de wrote: > > If some Evil Instance is controlling your whole internet, well... > > your installation media will be already compromised. > > The attacker must not forget to fake the page with the Debian GPG >

Re: Verify a mirror?

2022-09-20 Thread Tim Woodall
On Tue, 20 Sep 2022, Hans wrote: Hi Tim, I am not sure, you are correct. But please correct me! apt does this for you. There are a set of gpg public keys in /etc/apt/trusted.gpg.d. Yes, apt is trusting the whole server, so it verifies, that a server who claims to be repo.debian.org is the r

Re: Verify a mirror?

2022-09-20 Thread Thomas Schmitt
Hi, to...@tuxteam.de wrote: > If some Evil Instance is controlling your whole internet, well... > your installation media will be already compromised. The attacker must not forget to fake the page with the Debian GPG signatures: https://www.debian.org/CD/verify Further any contact has to be bl

Re: Verify a mirror?

2022-09-20 Thread tomas
On Tue, Sep 20, 2022 at 06:40:01PM +0200, Hans wrote: > Hi Tim, > > I am not sure, you are correct. But please correct me! > > apt does this for you. There are a set of gpg public keys in > > /etc/apt/trusted.gpg.d. > > > > Yes, apt is trusting the whole server, so it verifies, that a server wh

Re: Verify a mirror?

2022-09-20 Thread Hans
Hi Tim, I am not sure, you are correct. But please correct me! > apt does this for you. There are a set of gpg public keys in > /etc/apt/trusted.gpg.d. > Yes, apt is trusting the whole server, so it verifies, that a server who claims to be repo.debian.org is the real one, nothing else. > When

Re: Ubiquity 500G NVR

2022-09-20 Thread Dan Ritter
David wrote: > Good Afternoon, > > I wonder if any body has any experience with The Ubiquity 500G NVR, I'm > trying to re-build one for myself and failing. > > It's based on Debian 7, which is my first problem, installing Debian 7 > is not a problem, getting /etc/apt/sources.list correct is a pr

Re: [kmod] not on-demand-loading modules with custom kernel

2022-09-20 Thread hede
hi all. Am 19.09.2022 16:27, schrieb hede: I need help getting module on-demand-loading working with a custom kernel. Additional information: My problem seems less related to udev but more probably related the kernel kmod subsystems!? The kernel usually calls /sbin/modprobe if functionalit

Ubiquity 500G NVR

2022-09-20 Thread David
Good Afternoon, I wonder if any body has any experience with The Ubiquity 500G NVR, I'm trying to re-build one for myself and failing. It's based on Debian 7, which is my first problem, installing Debian 7 is not a problem, getting /etc/apt/sources.list correct is a problem. Then the instruction

Re: question re tar

2022-09-20 Thread Greg Wooledge
> It seems some files are present multiple times in your list. > > echo text >file.txt > tar cvWf test.tar file.txt file.txt > tar tvf test.tar Sorry, I deleted this message, and then had a thought a few minutes later, so I'm quoting text from the mailing list archive. With this new information,

Re: question re tar

2022-09-20 Thread Thomas Schmitt
Hi, Max Nikulin wrote: > It seems some files are present multiple times in your list. > tar cvWf test.tar file.txt file.txt Well if it is that easy to create the situation, i can test what happens on restoring the tarball: $ tar cvf test.tar x x x x $ rm x rm: remove regular file ‘x’?

Re: question re tar

2022-09-20 Thread Max Nikulin
On 19/09/2022 02:37, jr wrote: when I saw the links and started investigating, I tried cat for the names, ie $ tar -cvWf $arcname $(cat $fnames) adding one or two file names on the command line works as expected, supplying names from list and or file produces those links. It seems some fil

Re: Verify a mirror?

2022-09-20 Thread Tim Woodall
On Tue, 20 Sep 2022, Hans wrote: Dear list, I asked myself, how can I check, if on a mirror are not manipulated packages. The background of this is: The institution of the government, I worked before, set up an own debian repo mirror, so that the servers of its network could be upgraded from i

Verify a mirror?

2022-09-20 Thread Hans
Dear list, I asked myself, how can I check, if on a mirror are not manipulated packages. The background of this is: The institution of the government, I worked before, set up an own debian repo mirror, so that the servers of its network could be upgraded from it. However, I mistrusted the ins