Re: [DNG] Please Adopt Bastille Linux Security Script for Devuan. Please.

On Sun, 03 Jan 2016 15:51:09 + chaosesquet...@cock.li wrote: > First, I am not going to discuss the merits of a script that > helps one easily through the 100+ steps it takes to lock down [snip] > So now that we have that out of the way, and I hope the people > that dominate this mailing

Re: [DNG] GNOME3 and Co.

On 01/04/2016 08:39 AM, Mitt Green wrote: > Dr. Nikolaus Klepp wrote: > > >I want to point out, that TDE is very configurable (which cannot be said > >from GNOME 2/3), > >and kmail is the best mail client with maildir support available. > > My personal problems with TDE: > - it's a Qt DE; > -

Re: [DNG] FW: support for merged /usr in Debian

On Sun, 3 Jan 2016 19:02:54 +0100 Didier Kryn wrote: > Le 02/01/2016 18:39, Steve Litt a écrit : > > In other words, I don't think this stuff has to be compiled into > > the kernel monolithically: It just has to be in the right > > directories on the root partition. > >

Re: [DNG] Giving Devuan sans-initramfs capabilities

On Sun, 3 Jan 2016 21:27:58 -1000 Joel Roth wrote: > Hi Steve, > > I would like to see Devuan as a source for innovation in the > community in future and I think it's a great idea to offer a > simpler kernel and boot process. It could be accomplished > with a modest effort,

Re: [DNG] support for merged /usr in Debian

Steve Litt wrote: >> Therefore, if you want to mount a disk partition, you either >> need the necessary drivers and filesystem built-in the kernel or have >> them in the initrd/initramfs (under /lib/modules). Having the module >> on the disk won't help -- egg and

Re: [DNG] Giving Devuan sans-initramfs capabilities

On Sun, 3 Jan 2016 09:09:28 + KatolaZ wrote: > On Sat, Jan 02, 2016 at 01:11:07PM -0500, Steve Litt wrote: > > On Sat, 2 Jan 2016 09:08:37 + > > KatolaZ wrote: > > > > > > > If your root fs does not change every five minutes, you can have

Re: [DNG] Giving Devuan sans-initramfs capabilities

Steve Litt wrote: > On Sun, 3 Jan 2016 09:09:28 + > KatolaZ wrote: > > > On Sat, Jan 02, 2016 at 01:11:07PM -0500, Steve Litt wrote: > > > On Sat, 2 Jan 2016 09:08:37 + > > > KatolaZ wrote: > > > > > > > > > > If your root fs does not

Re: [DNG] Giving Devuan sans-initramfs capabilities

On Sat, Jan 02, 2016 at 01:11:07PM -0500, Steve Litt wrote: > On Sat, 2 Jan 2016 09:08:37 + > KatolaZ wrote: > > > > If your root fs does not change every five minutes, you can have a > > custom kernel with ext4 and a few other drivers compiled in, and get > > rid of

Re: [DNG] Giving Devuan sans-initramfs capabilities

On Sat, Jan 02, 2016 at 01:53:02PM -0500, Steve Litt wrote: > > Where can I find documentation on how to do this? The last time I > compiled a kernel was probably in the 20th century, so I imagine things > have changed. > > You mention that you recompile your kernel. What do you do every time >

[DNG] Possible bug of apt-cache show?

Hi Guys, I have noticed that since I moved to Devuan several months ago, I have "lost" the long descriptions provided by "apt-cache show". What I mean is that if I give (just to make an example): apt-cache show texlive-publishers the record "Description:" contains only: Description: TeX

Re: [DNG] Giving Devuan sans-initramfs capabilities

> I was trying to explain that "a distribution" > has to use initrd/ initramfs because of problems specific to > distribution kernels but that individual users don't have to use this > mechanism if they don't want to because they can just compile a kernel > which will work with their hardware

Re: [DNG] Giving Devuan sans-initramfs capabilities

On Sat, Jan 02, 2016 at 09:05:26AM -0500, Stephanie Daugherty wrote: > Might be worth trying to get interest upstream for functionality to "merge" > binary modules with an already compiled kernel as a single file. > Presumably, it wouldn't be *that* difficult for the kernel to look for > modules

Re: [DNG] Giving Devuan sans-initramfs capabilities

On Sat, Jan 02, 2016 at 01:50:22PM -0500, Steve Litt wrote: [cut] > > :s/choice/easy choice/ > > Maybe 1 out of 50 Linux users can reliably compile their own kernels. > Then, Steve, if I am one of those 49 Linux users who cannot reliably compile a kernel, there is a very high probability

Re: [DNG] Giving Devuan sans-initramfs capabilities

On Sun, Jan 3, 2016 at 3:59 AM, KatolaZ wrote: > But what's the point of having modules "at the end of [the kernel] > image"? You can just compile-in them. > Simple, It's to be able to turn a packaged, distribution supplied kernel into one that will successfully boot on

[DNG] OT: Desktop recording

After reading Steve's post about Statifier I got to thinking; where is a good desktop recording for Linux ? I used to use Wink[1] but the guy hasn't put out a Linux update in a long time. Anyone have a recommendation for something like RecordMyDesktop[2] which allows you to insert

Re: [DNG] OT: Desktop recording

There is OBI (Open Broadcaster Software) and there is Simple Screen Recorder (SSR). While adding certain things would require editing. These tools are decent, although with OBI it can be a bit hard to get it to work. On Sun, Jan 3, 2016 at 6:28 AM, vmlinux wrote: >

Re: [DNG] FW: support for merged /usr in Debian

On Sun, Jan 3, 2016 at 8:25 AM, Roger Leigh wrote: > Regarding the comments people made about having separate / and /usr > filesystems. While it was common historically, there is little or no > practical benefit to doing so in 2016. Storage sizes make it unnecessary > for

[DNG] Please Adopt Bastille Linux Security Script for Devuan. Please.

First, I am not going to discuss the merits of a script that helps one easily through the 100+ steps it takes to lock down a *nix system. The benefit is self evident and every single person who has claimed otherwise is either a fool or acting in malice to protect their vested interests in getting

Re: [DNG] FW: support for merged /usr in Debian

On 03/01/2016 14:23, Edward Bartolo wrote: Hi, People don't understand: it is bad to manage their own OS. That is the work for EXPERTS who know BETTER. Users should only be allowed to move the mouse, click its cool buttons, and sometimes use DVDs (CDs) to run recovery software. Other than that,

Re: [DNG] FW: support for merged /usr in Debian

Thank you, Roger, for a well reasoned and coherent explanation on /usr merge. - Nate -- "The optimist proclaims that we live in the best of all possible worlds. The pessimist fears this is true." Ham radio, Linux, bikes, and more: http://www.n0nb.us

Re: [DNG] FW: support for merged /usr in Debian

Hi, People don't understand: it is bad to manage their own OS. That is the work for EXPERTS who know BETTER. Users should only be allowed to move the mouse, click its cool buttons, and sometimes use DVDs (CDs) to run recovery software. Other than that, it is bad management. [/sarcasm] Edward

Re: [DNG] FW: support for merged /usr in Debian

Hi Roger, Could you please send your text below to debian-devel too? Here at Devuan most people are aware of the issues. Unfortunately many of the Debian developers/maintainers aren't :( On Sun, 2016-01-03 at 13:25 +, Roger Leigh wrote: > > It's not something that nefarious.  It's about

Re: [DNG] FW: support for merged /usr in Debian

On 02/01/2016 23:39, Arnt Karlsen wrote: On Sat, 02 Jan 2016 05:50:15 -0500, Mitt wrote in message

Re: [DNG] Possible bug of apt-cache show?

On 03/01/16 23:19, KatolaZ wrote: > On Sun, Jan 03, 2016 at 11:13:40PM +1300, Daniel Reurich wrote: > > [cut] > >> I think you'll find it's probably a package update which included >> reducing the description to something a bit more concise. >> >> To be sure you'd have to look up the package

Re: [DNG] FW: support for merged /usr in Debian

On 03/01/2016 14:33, Svante Signell wrote: Hi Roger, Could you please send your text below to debian-devel too? Here at Devuan most people are aware of the issues. Unfortunately many of the Debian developers/maintainers aren't :( None of this is new. It's merely repeating the details of

Re: [DNG] Please Adopt Bastille Linux Security Script for Devuan. Please.

On Sun, Jan 03, 2016 at 05:25:39PM +, Go Linux wrote: > Great way to start the new year. Looks like Gregory Smith might be back. > Ugh . . . Your frustration may be justified, but you are doing less sophisticated readers like myself a disservice. I've not thought about bastille for many

Re: [DNG] Giving Devuan sans-initramfs capabilities

Le 02/01/2016 15:05, Stephanie Daugherty a écrit : Might be worth trying to get interest upstream for functionality to "merge" binary modules with an already compiled kernel as a single file. Presumably, it wouldn't be *that* difficult for the kernel to look for modules at the end of its image

Re: [DNG] FW: support for merged /usr in Debian

Le 02/01/2016 19:06, Steve Litt a écrit : But there's a solution: Initramfs! Cool! Except that initramfs is one or two more orders of magnitude more complicated than executable splitting. So the slight simplification of merging directories buys you a huge complication of initramfs black-boxism.

Re: [DNG] Giving Devuan sans-initramfs capabilities

Le 02/01/2016 19:53, Steve Litt a écrit : How do you tell your kernel not to load an initramfs? There's an item in "make menuconfig" where you can tell where to find the initramfs. There are two ways to build it: either provide a compressed archive or a list of files. I'm sure you

Re: [DNG] OT: Desktop recording

Apologies to Chandler who has to read this twice now; I've had pretty good success with avconv/ffmpeg to grab desktop and audio, followed up with kdenlive for additional edits. Don't have to grab the whole desktop if you don't want to, like so: avconv -f alsa -i hw:0 -f x11grab -show_region 1

Re: [DNG] GNOME3 and Co.

Am Sonntag, 3. Januar 2016 schrieb Mitt Green: > [...] > By the way, TDE (trinitydesktop.org) does not > need systemd to run, and was working > great in my installation, they have builds for > Stable and Testing/Unstable. And even complete > and bloated setup has much less packages > comparing to

Re: [DNG] FW: support for merged /usr in Debian

Roger Leigh writes: > On 03/01/2016 14:23, Edward Bartolo wrote: >> Hi, >> >> People don't understand: it is bad to manage their own OS. That is the >> work for EXPERTS who know BETTER. Users should only be allowed to move >> the mouse, click its cool buttons, and sometimes

Re: [DNG] Please Adopt Bastille Linux Security Script for Devuan. Please.

As far as I can tell there is no harden-tools in debian or devuan jessie nor harden-docs, those are missing too (was looking for them the other day). Maybe because most of it doesn't apply in debian with systemd, can't see any of that working there. On Sunday, January 3, 2016 6:03 PM,

Re: [DNG] Please Adopt Bastille Linux Security Script for Devuan. Please.

To Those opposed: I know you like to recently start imagining this project here as the successor to Ian's*(RIP) project Ian's project was happy to incorporate scripts to help in the hardening of the system, His project was happy to add all measures of good task-specific programs to make the

Re: [DNG] FW: support for merged /usr in Debian

Le 02/01/2016 11:27, k...@aspodata.se a écrit : Initrd would be an alt. solution in the nfs case, but there you basically have the same split, initrd beeing the small fs, nfs-/ beeing the big. That's a case where initramfs is really usefull because you can do a lot of tricks in the

Re: [DNG] FW: support for merged /usr in Debian

Le 02/01/2016 11:47, richard lucassen a écrit : I was told that the "s" in /sbin and /usr/sbin stands for*staticly* built binaries. I guess it means "Sysadmin only" :-) much like the "System" submenu in Debian's menu. ___ Dng mailing list

[DNG] GNOME3 and Co.

Well, the list is named Debian (Devuan?) is Not GNOME, still, what are the plans towards it? I have been playing with Debian GNOME3 installation but upgrading from Stable to Unstable was a disaster, APT wanted to remove everything from the system, including systemd, even though it didn't know

Re: [DNG] Giving Devuan sans-initramfs capabilities

Le 02/01/2016 18:30, aitor_czr a écrit : Devuan-installer can replace the kernel in the target (the installed system) during the installation adding/removing all the wanted/unwanted modules. Are you meaning "recompile the kernel with the needed drivers built-in" ? Otherwise I don't

Re: [DNG] Giving Devuan sans-initramfs capabilities

Stephanie Daugherty wrote: >> But what's the point of having modules "at the end of [the kernel] image"? >> You can just compile-in them. > > Simple, It's to be able to turn a packaged, distribution supplied kernel into > one that will successfully boot on obscure

Re: [DNG] Giving Devuan sans-initramfs capabilities

On 03/01/2016 17:11, Simon Hobson wrote: Roger Leigh wrote: The *real* goal here is something rather simpler: having both / and /usr mounted in the initramfs. The primary reason for this is that there are genuine problems with stuff on / needed in early boot having

Re: [DNG] Please Adopt Bastille Linux Security Script for Devuan. Please.

Great way to start the new year. Looks like Gregory Smith might be back. Ugh . . . On Sun, 1/3/16, chaosesquet...@cock.li wrote: Subject: Re: [DNG] Please Adopt Bastille Linux Security Script for Devuan. Please. To:

Re: [DNG] FW: support for merged /usr in Debian

Le 02/01/2016 18:39, Steve Litt a écrit : In other words, I don't think this stuff has to be compiled into the kernel monolithically: It just has to be in the right directories on the root partition. Either a driver is built in the kernel or it is in a loadable module. In the last case,

Re: [DNG] FW: support for merged /usr in Debian - Please keep tradition

Please keep to the traditional Linux way and keep /usr/ etc as is. This shouldn't even be a debate. Devuan's reason to _BE_ is to not go along with the way Systemd/Linux is being pulled but to stay what Debian was before the coup: Gnu/Linux. Gnu/Linux always had /usr/ Retraining our minds from

Re: [DNG] GNOME3 and Co.

Dr. Nikolaus Klepp wrote: >I want to point out, that TDE is very configurable (which cannot be said from >GNOME 2/3), >and kmail is the best mail client with maildir support available. My personal problems with TDE: - it's a Qt DE; - it's ugly; - it's waaay too configurable, with own settings