Re: Debian bullseye

[deloptes]

Greg Wooledge wrote:

> So you're also below the minimum memory requirement for a no-desktop
> system (220 MB vs. 256 MB), but it's not by a *lot*.  So you're probably
> just scraping by.  This hardware is past its end of life, I would say.
> Anything you get it to do at all is just a bonus.

But one could tweak this and that and fit to the system size.

The firewall here has minimal installation and 256MB memory + 4GB compact
flash card of which 770MB are used (openvpn and shorewall)

OP could afford a RPi4 for approx 50,- and be better off at the end

-- 
FCD6 3719 0FFB F1BF 38EA 4727 5348 5F1F DCFE BCB0

Re: Your Thoughts on Printer Replacement

[deloptes]

Dan Ritter wrote:

> If you print in black/white more often than you need color, you could
> still use a local print shop or get things mailed to you for those
> occasions - photos and posters, especially, but basically any document.
> 
> In that case, get a monochrome laser printer. I recommend a
> Brother with all of the following features:

I have always used HP laser and now I have 402dn (double side + network). It
cost around 200,- and works great (2y since I have it)
Before this I used HP laser 5L which I used over 15y.

I also go to the local copy shop for printing in color (once every 3-4y).

-- 
FCD6 3719 0FFB F1BF 38EA 4727 5348 5F1F DCFE BCB0

Re: Your Thoughts on Printer Replacement

[James H. H. Lampert]

Personally, I wouldn't accept an inkjet as a gift. You use them like 
crazy, and you go through absurdly overpriced cartridges like crazy. You 
*don't* use them like crazy, and those absurdly overpriced cartridges 
clog, and you still go through them like crazy. And the pages come out 
soggy, and are even more vulnerable to water damage than what I write 
with my fountain pens. As far as I'm concerned, the only thing they're 
good for is edible printing, and for what little of that I do (typically 
one page every few months), it's far cheaper to email an image to the 
local cake supply, and have them do it.


(The first rule of edible printing is you don't run anything but edible 
ink in that printer. The second rule of edible printing is you *DO NOT* 
run anything but edible ink in that printer. And you still don't talk 
about Fight Club.)


I have had three monochrome laser printers (an HP 4ML, followed by an HP 
2100M, which I then replaced with a rebuilt 2100M, which I still have. 
And I've had two color laser printers, a Samsung CLP-315, bought new and 
used until it wore out, followed by a rebuilt Samsung CLP-415, which I 
still have.


And I have an ALPS MicroDry, that I bought used, after they'd been 
discontinued.


Before the Samsungs, bought a Xerox color laser. It went back to Staples 
the day after it arrived: It was a lot bulkier in real life than it was 
in the pictures, it made the devil's own noise when it was running, and 
it claimed to be a PostScript machine, but curled up its toes and said 
"helll meee" if I actually fed it a PostScript data stream. 
That's not to say that the Samsungs will do anything if fed PostScript, 
but at least they were relatively inexpensive, as well as being almost 
as compact and quiet as my 2100M.


What I've seen of HP lasers more recent than the 2000-series has not 
impressed me. That's a major reason why I went with a rebuilt 2100M, 
instead of something more recent. That and the fact that being able to 
accept and RIP a PostScript data stream, fed through a Centronics port, 
is a non-negotiable requirement for me: it's either that, or I have to 
dump the data stream to a file, distill it into a PDF, and print that.


--
James H. H. Lampert
Professional Dilettante

Re: Your Thoughts on Printer Replacement

[jeremy ardley]

On 18/09/2021 7:05 am, Dan Ritter wrote:

Charles Curley wrote:

Requirements:

* I print rarely, and I do use color. The carts on the L7700 tend to
   go bad before they empty, Inkjet or laser? Or other?

* Buster and Bullseye should both support any recommendations. I don't
   use Windows.

I've had good results with HP over the years, and they support Linux
well.

Reccomendations?

I have standard recommendations. In your case, I would ask: do
you need a printer?

If it's convenient for you to go to a local print shop, it will
be cheaper to use their high quality printers. It looks like
there are five places like that in town. (I looked at your web
page.)

If you print in black/white more often than you need color, you could
still use a local print shop or get things mailed to you for those
occasions - photos and posters, especially, but basically any document.

In that case, get a monochrome laser printer. I recommend a
Brother with all of the following features:

- BRScript/3 (their PostScript emulator)
- ethernet jack
- duplex

Prices start at about $100.

Other people can direct you to reliable color laser printers.

-dsr-


I agree totally on using laser over inkjet. The cost per page and print 
speed are far superior for laser.


Worse is inkjet life. They inevitably clog or jam after only a few 
hundred pages.


I do find that labels and envelopes usually don't fare well in cheap 
lasers. That is the advantage inkjets have. I worked around this by 
buying a cheap thermal label printer on aliexpress and wrote a linux 
driver for it. My cost per small label is 0.5c and large 2c. My toner 
cost per laser page is around 0.5c so maybe 1c per page for life of 
printer (fuji-xerox)

Re: Your Thoughts on Printer Replacement

[Dan Ritter]

Charles Curley wrote: 
> Requirements:
> 
> * I print rarely, and I do use color. The carts on the L7700 tend to
>   go bad before they empty, Inkjet or laser? Or other?
> 
> * Buster and Bullseye should both support any recommendations. I don't
>   use Windows.
> 
> I've had good results with HP over the years, and they support Linux
> well.
> 
> Reccomendations?

I have standard recommendations. In your case, I would ask: do
you need a printer?

If it's convenient for you to go to a local print shop, it will
be cheaper to use their high quality printers. It looks like
there are five places like that in town. (I looked at your web
page.)

If you print in black/white more often than you need color, you could
still use a local print shop or get things mailed to you for those
occasions - photos and posters, especially, but basically any document.

In that case, get a monochrome laser printer. I recommend a
Brother with all of the following features:

- BRScript/3 (their PostScript emulator)
- ethernet jack
- duplex

Prices start at about $100. 

Other people can direct you to reliable color laser printers.

-dsr-

Re: Debian 11: evince and apparmor flood kernel log

[Klaus Singvogel]

Roger Price wrote:
> In Debian 11, evince has an appamor profile which floods the kernel log with
> hundreds of messages of the style:

Not only at Debian 11, even Debian 10 has it.

[...]
>  (evince:2869): GVFS-WARNING **: 22:18:18.510: can't init metadata tree 
> /mnt/home/rprice/.local/share/gvfs-metadata/home: open: Permission denied
[...]
> Is there some way of calming evince+appamor?

The location of your home is uncommon (as on my side).

Fix: edit /etc/apparmor.d/tunables/home.d/site.local

Best regards,
Klaus.
-- 
Klaus Singvogel
GnuPG-Key-ID: 1024R/5068792D  1994-06-27

Your Thoughts on Printer Replacement

[Charles Curley]

I have an HP Officejet Pro L7700, which is starting to show its age.
Also HP has discontinued the standard size cartridges. I can get the
large ones.

First question:

I print rarely. Inkjet or laser? Or other? The carts on the L7700 tend
to go bad before they empty, 

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Your Thoughts on Printer Replacement

[Charles Curley]

I have an HP Officejet Pro L7700, which is starting to show its age.
Also HP has discontinued the standard size cartridges. I can get the
large ones. I suspect I could buy a printer for what four large
cartridges would cost me.

Requirements:

* I print rarely, and I do use color. The carts on the L7700 tend to
  go bad before they empty, Inkjet or laser? Or other?

* Buster and Bullseye should both support any recommendations. I don't
  use Windows.

I've had good results with HP over the years, and they support Linux
well.

Reccomendations?

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Re: Mutt/Neomutt and mailcap

[Jonathan Dowland]

On Thu, Sep 16, 2021 at 07:43:25AM -0400, Greg Wooledge wrote:

Unfortunately, it breaks in Bourne-family shells.

snip

In Bourne/POSIX/bash, semicolon is a command terminator or separator,
and may not appear by itself, or at the start of a command.  It may
appear at the end.


Good catch! I never actually tried a plain ';', so I hadn't hit that.
When I appropriated the idea, I prefixed it with ':' in order to get
my hostname into the line too (: hostname ;), side-stepping the issue.

--

Jonathan Dowland
https://jmtd.net

Re: Debian bullseye

[Charles Curley]

On Fri, 17 Sep 2021 17:10:49 -0400
Greg Wooledge  wrote:

> This is an astonishingly low amount of memory by today's standards.
> 
>  says:

I am very much aware of this, thank you.

> This hardware is past its end of life, I would say.
> Anything you get it to do at all is just a bonus.

Yeah. I will expect your expert advice when the time comes to replace
these boxen.

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Re: Debian bullseye

[Greg Wooledge]

On Fri, Sep 17, 2021 at 02:36:44PM -0600, Charles Curley wrote:
> I am seeing similar. I have two Lenovo T-61s, ans several FIT-PCs
> (i686, 220Mi physical memory, no GUI). All are noticeably slower.

This is an astonishingly low amount of memory by today's standards.

 says:

  You must have at least 485MB of memory and 920MB of hard disk space
  to perform a normal installation. Note that these are fairly minimal
  numbers. For more realistic figures, see Section 3.4, “Meeting
  Minimum Hardware Requirements”.

You have *half* the minimum required amount of memory to perform an
installation, according to the official documentation.  (Which isn't
to say that installation is necessarily impossible; people do difficult
things all the time.)

Also, you said "slower", which implies that you previously ran some
other version of Debian (or Linux) on this same machine.  If this was
an upgrade, then you're skipping the relatively high memory requirements
of the installer.

 says:

  Install Type  RAM (minimum)   RAM (recommended)   Hard Drive
  No desktop256 megabytes   512 megabytes   2 gigabytes
  With Desktop  1 gigabytes 2 gigabytes 10 gigabytes

So you're also below the minimum memory requirement for a no-desktop
system (220 MB vs. 256 MB), but it's not by a *lot*.  So you're probably
just scraping by.  This hardware is past its end of life, I would say.
Anything you get it to do at all is just a bonus.

Re: Debian 11: evince and apparmor flood kernel log

[Reco]

Hi.

On Fri, Sep 17, 2021 at 10:54:32PM +0200, Roger Price wrote:
> I solved the problem by switching to mupdf, but mupdf is not as complete as 
> evince.

It's customary to add "YMMV" to such statements. Just saying.

> Is there some way of calming evince+appamor?

Pick whatever suits you:

Quick-and-dirty, but wrong way (apparmor is good, do not disable it
unless you know what you're doing):

/usr/sbin/aa-disable /usr/bin/evince


Easy, but wrong way (aa-logprof is only good for user-defined profiles,
and you *will* get complicated upgrades):

aa-logprof
# accept whatever the thing will show you


A correct way, but it may require more than one iteration:

echo '/mnt/home/rprice/.local/share/gvfs-metadata/home r,' >> 
/etc/apparmor.d/local/usr.bin/evince

aa-complain /usr/bin/evince
aa-enforce /usr/bin/evince

Reco

Re: Debian bullseye

[Charles Curley]

On Sat, 18 Sep 2021 07:54:50 +1200
"Dawn Dorsett"  wrote:

> I have been using Debian for several years and have just upgraded to
> Bullseye and I wish I hadn't.  It has some bug fixes in it (which
> were more like minor inconveniences anyway), but Bullseye is SLOW.

I am seeing similar. I have two Lenovo T-61s, ans several FIT-PCs
(i686, 220Mi physical memory, no GUI). All are noticeably slower.

When I get a chance, I'll follow IL Ka 's
suggestions; thank you.

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Debian 11: evince and apparmor flood kernel log

[Roger Price]

In Debian 11, evince has an appamor profile which floods the kernel log with 
hundreds of messages of the style:


 [24216.325764] audit: type=1400 audit(1631892398.580:255): apparmor="DENIED"
  operation="open" profile="/usr/bin/evince"
  name="/mnt/home/rprice/.local/share/gvfs-metadata/home" pid=2229
  comm="pool-evince" requested_mask="r" denied_mask="r" fsuid=2108 ouid=2108

and floods the console with messages such as

 (evince:2869): GVFS-WARNING **: 22:18:18.510: can't init metadata tree 
/mnt/home/rprice/.local/share/gvfs-metadata/home: open: Permission denied
 ** (evince:2869): WARNING **: 22:18:18.510: Error setting file metadata: can’t 
open metadata tree

Command ls -l /mnt/home/rprice/.local/share/gvfs-metadata/home reports

 -rw--- 1 rprice cs-users 800 Aug 18 10:48 
/mnt/home/rprice/.local/share/gvfs-metadata/home

Quoting file /etc/apparmor.d/usr.bin.evince:

 # evince is not written with application confinement in mind and is designed to
 # operate within a trusted desktop session where anything running within the
 # user's session is trusted.

I solved the problem by switching to mupdf, but mupdf is not as complete as 
evince.


Is there some way of calming evince+appamor?

Roger

Re: krijg Wireguard niet aan de gang met IPv6

[Geert Stappers]

On Fri, Sep 17, 2021 at 06:50:24PM +0200, Gijs Hillenius wrote:
> On 17 September 2021 11:02 Martijn van de Streek, wrote:
> > Gijs Hillenius schreef op vr 17-09-2021 om 08:41 [+0200]:
> >> Goedenmorgen
> >> 
> >> Mijn servertje ging van Debian 10 naar 11, en OpenVPN stopte met
> >> werken. (iets met IPv6, dacht ik, maar niet goed gekeken). Geen punt
> >> want ik wilde toch al naar Wireguard.
> >> 
> >> Ik krijg het aan de gang via IPv4, maar niet IPv6. Forwarding wil
> >> niet?
> >> Gebruik ik de verkeerde IPv6 reeks? Maak ik een tikfout? Is het iets
> >> met
> >> IPv6 in Bullseye? internetspeurtochten leveren aanwijzingen voor van
> >> alles. 
> >
> > [knip]
> >
> >> Als iemand een tip heeft waar ik moet kijken, dank!
> >
> > Je zou eens kunnen kijken in /proc/sys/net/ipv6/conf/all/forwarding (of
> > die voor de specifieke interface(s) waartussen forwarding voor actief
> > moet zijn)
> >
> > Dat geeft soms een duidelijker antwoord dan verschillende firewall-
> > tools :)
> 
> 
> Dank! die ene forwarding staat toch echt aan. 
> 
> Op IRC werd ik gewezen op een bug:
> 
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=993716

Package: bridge-utils
Titel: IPv6 network bridge fails after upgrading Buster to Bullseye
 
> ik ben er nog niet helemaal zeker van of dat is wat me hier overkomt.

Mijn inschatting is van niet.
 

In configuration van de client staat "ListenPort = 21841".
Er is geen reden voor de client om te luisteren.
Althans niet in de set-up die ik succesvol ingebruik heb.


De client configuratie regel
  Endpoint = 2a01:4f8:200:546b::9e15:1:51820
vind ik erg vreemd.  Mijn (te korte??) websearch leverde
geen voorbeeld op dat het zo zou kunnen werken.

Een websearch op "IPv6 port syntax"
( https://duckduckgo.com/?q=IPv6+port+syntax )
leert dat
  Endpoint = [2a01:4f8:200:546b::9e15:1]:51820
een grotere kans van slagen heeft.


Hoe er rekening mee dat na die twee veranderingen
het geheel nog niet compleet hoeft te zijn.
In dat geval a.u.b. de bijgewerkte versie van beide configuraties laten
zien, alleen de Private key verborgen, de Public keys wel laten zien. ook
de output van `sudo wg` van beide kanten. De `wg` output in zijn geheel
laten zien, want de private key wordt verborgen gehouden.
Plus wat tekst hoe het kapot gaat danwel wat er zou moeten werken
maar dat net niet doet.


Groeten
Geert Stappers
-- 
https://1optic.io/

Re: Debian bullseye

[piorunz]

On 17/09/2021 21:30, IL Ka wrote:


I have been using Debian for several years and have just upgraded to
Bullseye and I wish I hadn't.  It has some bug fixes in it (which
were more like minor inconveniences anyway), but Bullseye is SLOW.
Its getting to be as bad as Windows and takes forever to start up.

This may help:


You presumed he asked how to fix this. HE DIDN'T. Don't bother.

--
With kindest regards, Piotr.

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org
⠈⠳⣄

Re: Debian bullseye

[Greg Wooledge]

On Sat, Sep 18, 2021 at 07:54:50AM +1200, Dawn Dorsett wrote:
> I have been using Debian for several years and have just upgraded to Bullseye
> and I wish I hadn't.  It has some bug fixes in it (which were more like minor
> inconveniences anyway), but Bullseye is SLOW.  Its getting to be as bad as
> Windows and takes forever to start up.  Libreoffice is particularly slow, and
> some days I see a delay between hitting the keyboard and the results
> appearing on the screen.  None of this was a problem with earlier releases.

This sounds very much like missing support for your video hardware
(either firmware or drivers or both).

If you'd like to fix the problem, instead of simply declaring Debian
to be "slow", you could start investigating.  Identify your video chipset
(using lspci -nn).  See whether any video firmware is desired but missing
(dmesg | grep -i firmware).  Try googling your video device with keywords
like "debian" or "linux" and see what steps other users have tried to
overcome the same problem with the same device -- it's highly likely
that you are not the first person to have the problem, after all.

Re: Debian bullseye

[IL Ka]

>
>
> I have been using Debian for several years and have just upgraded to
> Bullseye and I wish I hadn't.  It has some bug fixes in it (which were more
> like minor inconveniences anyway), but Bullseye is SLOW.  Its getting to be
> as bad as Windows and takes forever to start up.


This may help:
https://www.freedesktop.org/software/systemd/man/systemd-analyze.html



> Libreoffice is particularly slow, and some days I see a delay between
> hitting the keyboard and the results appearing on the screen.  None of this
> was a problem with earlier releases. So right now I'm pretty pissed off
> with Debian
>

vmstat(8) and top(8) may be used to track that.

Pay attention on Cpu% "sy" in top, it shouldn't be high. New kernel -- new
drivers. You may have hardware compatibility problems (or interrupt storm).

Also, check your drive health with smartmontools (bad drive may cause bad
performance):
https://packages.debian.org/buster/smartmontools

You can also measure its performance with fio
https://packages.debian.org/buster/fio

Re: Debian bullseye

[piorunz]

On 17/09/2021 20:54, Dawn Dorsett wrote:

I have been using Debian for several years and have just upgraded to Bullseye 
and I wish I hadn't.  It has some bug fixes in it (which were more like minor 
inconveniences anyway), but Bullseye is SLOW.  Its getting to be as bad as 
Windows and takes forever to start up.  Libreoffice is particularly slow, and 
some days I see a delay between hitting the keyboard and the results appearing 
on the screen.  None of this was a problem with earlier releases. So right now 
I'm pretty pissed off with Debian.

Regards,
_Dawn Dorsett_.



Okay. You shared your useless opinion. Bullseye is not slow, I disagree.
Now, as you didn't asked any questions, go away.

--
With kindest regards, Piotr.

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org
⠈⠳⣄

Debian bullseye

[Dawn Dorsett]

I have been using Debian for several years and have just upgraded to Bullseye 
and I wish I hadn't.  It has some bug fixes in it (which were more like minor 
inconveniences anyway), but Bullseye is SLOW.  Its getting to be as bad as 
Windows and takes forever to start up.  Libreoffice is particularly slow, and 
some days I see a delay between hitting the keyboard and the results appearing 
on the screen.  None of this was a problem with earlier releases. So right now 
I'm pretty pissed off with Debian.

Regards,
_Dawn Dorsett_.

Starting a new thread by replying [was: (unable to start a new discussion)...] but not my home network...

[tomas]

On Fri, Sep 17, 2021 at 12:25:00PM -0700, David Christensen wrote:

[...]

> Guilty as charged.  :-(
> 
> 
> Using Thunderbird, clicking "Reply List" and changing the Subject to
> "new subject [was: old subject]" is NOT the way to do it.  Clicking
> "Write", and cutting and pasting the Subject and/or body into a new
> message is what I should have done.

If you are starting an all-new thread, don't forget to also remove
the "In-Reply-To:" and possibly "References:" headers (for -- heh
reference, here are the ones from the mail you sent):

  References: 
  <9780563.fES1ZbLj8h@protheus2>
  <20210916074053.m2nv7ws6ir2pyjfv@acr13.nuvreauspam>
  
  <2f96483f-abb3-bf01-79d4-8db06e063...@yahoo.com>
  
  <20210916214855.461097e4@jhegaala.localdomain>
  <17092021093304.02d83dd33...@desktop.copernicus.org.uk>
  In-Reply-To: <17092021093304.02d83dd33...@desktop.copernicus.org.uk>

Civilised mail user agents use those to thread their threads.

Cheers
 - t


signature.asc
Description: Digital signature

New thread vs. changed Subject line (was Re: (unable to start a new discussion) Re: Can surf the internet, but not my home network...)

[The Wanderer]

On 2021-09-17 at 15:25, David Christensen wrote:

> On 9/17/21 1:46 AM, Brian wrote:
> 
>> However, a new discussion should be started in a*new*  thread, not
>> plonked willy-nilly into an existing thread. This is the second
>> time recently that someone has done that. The first time it
>> involved  an experienced user!
> 
> Guilty as charged.  :-(
> 
> Using Thunderbird, clicking "Reply List" and changing the Subject to
> "new subject [was: old subject]" is NOT the way to do it.  Clicking
> "Write", and cutting and pasting the Subject and/or body into a new
> message is what I should have done.

I'm not so sure.

I don't recall the exact case at hand here, but generally, if the new
topic bears a close enough derived relation from the older one that it
makes sense to use that "Was: [old subject]" notation in the Subject
line, then IMO replying in-place *is* the correct way to do it. (Barring
specific, case-dependent reasons otherwise.)

That Subject-line notation is for the case when the topic of the thread
has drifted, and you're adjusting the Subject line in your reply to
reflect the new topic, but you're still going to be quoting the previous
message in order to respond to it.

If that's not what you're doing - if you're starting a new topic
entirely, that bears no particular relation to the other message,
including not quoting its contents - then using that type of
Subject-line notation doesn't make sense, and neither does starting your
message via a "reply" action.

However, if that *is* what you're doing, then not only is that not
inherently a reason to start a new thread from scratch, but IMO doing so
would usually be inappropriate - because it separates the new message
from proximity to the one to which its contents are a reply, thus making
it harder to see the full context of the new message.

-- 
   The Wanderer

The reasonable man adapts himself to the world; the unreasonable one
persists in trying to adapt the world to himself. Therefore all
progress depends on the unreasonable man. -- George Bernard Shaw



signature.asc
Description: OpenPGP digital signature

Re: (unable to start a new discussion) Re: Can surf the internet, but not my home network...

[David Christensen]

On 9/17/21 1:46 AM, Brian wrote:

However, a new discussion should be started in a*new*  thread, not
plonked willy-nilly into an existing thread. This is the second time
recently that someone has done that. The first time it involved  an
experienced user!



Guilty as charged.  :-(


Using Thunderbird, clicking "Reply List" and changing the Subject to 
"new subject [was: old subject]" is NOT the way to do it.  Clicking 
"Write", and cutting and pasting the Subject and/or body into a new 
message is what I should have done.



David

Re: (unable to start a new discussion) Re: Can surf the internet, but not my home network...

[Stefan Monnier]

> edges of text characters. So if showing a screen full of text to show 
> the error, smunch the daylights out of it, it will still be readable. 

Whatever happened to the idea of citing the actual text rather than
using an (unreadable) image?


Stefan

Re: krijg Wireguard niet aan de gang met IPv6

[Gijs Hillenius]

On 17 September 2021 11:02 Martijn van de Streek, wrote:

> Gijs Hillenius schreef op vr 17-09-2021 om 08:41 [+0200]:
>> Goedenmorgen
>> 
>> Mijn servertje ging van Debian 10 naar 11, en OpenVPN stopte met
>> werken. (iets met IPv6, dacht ik, maar niet goed gekeken). Geen punt
>> want ik wilde toch al naar Wireguard.
>> 
>> Ik krijg het aan de gang via IPv4, maar niet IPv6. Forwarding wil
>> niet?
>> Gebruik ik de verkeerde IPv6 reeks? Maak ik een tikfout? Is het iets
>> met
>> IPv6 in Bullseye? internetspeurtochten leveren aanwijzingen voor van
>> alles. 
>
> [knip]
>
>> Als iemand een tip heeft waar ik moet kijken, dank!
>
> Je zou eens kunnen kijken in /proc/sys/net/ipv6/conf/all/forwarding (of
> die voor de specifieke interface(s) waartussen forwarding voor actief
> moet zijn)
>
> Dat geeft soms een duidelijker antwoord dan verschillende firewall-
> tools :)


Dank! die ene forwarding staat toch echt aan. 

Op IRC werd ik gewezen op een bug:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=993716

ik ben er nog niet helemaal zeker van of dat is wat me hier overkomt.

Re: Drivers tarjeta de red

[Vicente]

Varias cosas a realizar.



1. Identificar qué tarjeta de red se está utilizando, con #sudo lspci

2. Si es una tarjeta de red con drivers propietarios, tal vez se disponga
de esos driver en las versión contrib o en non-free, se debería incluir
esos repositorios al source.list, sino lo has hecho.

3. Si la tarjeta no dispone de driver en los repos contrib non-free, y
conociendo el modelo del chip, buscar un driver en internet para compilarlo
a mano. Las instrucciones de compilación y requisitos para compilar
generalmente vienen detalladas en los archivos de instalación del driver.


Saludos cordiales,


Vicente



El vie, 17 sept 2021 a las 0:44, Camaleón () escribió:

> El 2021-09-14 a las 21:43 -0500, miguel cardozo escribió:
>
> > instale linux debian 11 version full pero no funcionan los drivers de
> red,
> > me pueden colaborar por favor que puedo hacer o a quien me debo dirigir,
> > mi nombre es miguel cardozo y soy nuevo con el manejo del SO.
>
> ¿Se trata de la tarjeta de red cableada o inalámbrica?
>
> En caulquier caso, ejecuta la orden «lspci» para idnetificar el chipset
> que lleva el adaptador y comprobar si dispone de soporte en Debian.
>
> Saludos,
>
> --
> Camaleón
>
>

-- 
Atentamente,

Vicente

Re: [HS] Fusioninventory

[Raphaël POITEVIN]

Bonsoir,

Rigolo, c’est justement mon sujet du moment. Il existe OcsInventory,
avec son agent OcsInventory-Agent, assez bien fichu pour écrire ses
propres extensions. En revanche, je n’ai pas trouvé le moyen d’exploiter
mon extension dans la recherche. J’aimerai pouvoir lister les machines
selon une chaîne de caractère provenant de la sortie de l’extension.

Cordialement,

Raphaël

David Martin  writes:

> Bonjour,
>
> Connaissez vous un outils qui permettent l'interrogation de tous les fusions
> inventory client installé
> sur un parc de poste autre que glpi svp ?

Re: (unable to start a new discussion) Re: Can surf the internet, but not my home network...

[Gene Heskett]

On Friday 17 September 2021 09:10:01 Stefan Monnier wrote:

> > edges of text characters. So if showing a screen full of text to
> > show the error, smunch the daylights out of it, it will still be
> > readable.
>
> Whatever happened to the idea of citing the actual text rather than
> using an (unreadable) image?
>
>
> Stefan

Beats hell outta me Stefan, but a copy/paste from a terminal screen beats 
ALL the other methods for compression. But that involves launching 
whatever from a terminal screen, requiring the user to actaully type the 
command.

Oh the horrors...

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: [testing] gnome 40 et touchpad

[didier gaumet]

 peut-être (je suis sous Bullseye donc je n'ai pas vérifié et de toutes
façons j'utilise le moins possible mon touchpad) des pistes ici:
https://discourse.gnome.org/t/how-to-disable-edit-touchpad-gestures-in-gnome-40/6081/5
https://bbs.archlinux.org/viewtopic.php?id=265360

[testing] gnome 40 et touchpad

[Gaëtan PERRIER]

Bonjour,

Depuis l'arrivée de Gnome 40 dans testing le touchpad de mon portable (Lenovo
T420) ne fonctionne plus que de manière très basique. L'edge scrolling ne
fonctionne plus, le déplacement du curseur est lent malgré un réglage à fond.
J'ai regardé dans dconf et les réglages sont pourtant bons.
Auriez-vous une idée du pourquoi du comment ?

Gaëtan


signature.asc
Description: This is a digitally signed message part

Re: [HS] Fusioninventory

[Pierre Malard]

Salut,

Si je lis bien ce qui est indiqué sur le site de FusionInventiry 
(http://fusioninventory.org/overview/) :
The agent

The FusionInventory Agent is a generic multi-platform agent. It can perform a 
large array of management tasks, such as local inventory, software deployment 
or network discovery. It can be used either standalone, or in combination with 
a compatible server (OCS Inventory, GLPI, OTRS, Uranos, …) acting as a 
centralized control point.

Il n’y a donc pas seulement GLPI…

Cordialement


> Le 17 sept. 2021 à 14:00, David Martin  a écrit :
> 
> Bonjour,
> 
> Connaissez vous un outils qui permettent l'interrogation de tous les fusions 
> inventory client installé
> sur un parc de poste autre que glpi svp ?
> 
> 
> 
> --
> david martin
> 

--
Pierre Malard

   «Le courage, c'est de chercher la vérité et de la dire,
c'est de ne pas subir la loi du mensonge triomphant qui passe
et de ne pas faire écho de notre âme, de notre bouche et de nos mains
aux applaudissements imbéciles et aux huées fanatiques.»
Jean Jaures - "Discours de jeunesse" - 1903
   ("`-/")_.-'"``-._
. . `; -._)-;-,_`)
   (v_,)'  _  )`-.\  ``-'
  _.- _..-_/ / ((.'
((,.-'   ((,/ πr

perl -e '$_=q#: 3|\ 5_,3-3,2_: 3/,`.'"'"'`'"'"' 5-.  ;-;;,_:  |,A-  ) )-,_. ,\ 
(  `'"'"'-'"'"': '"'"'-3'"'"'2(_/--'"'"'  `-'"'"'\_): 
24πr::#;y#:#\n#;s#(\D)(\d+)#$1x$2#ge;print'
- --> Ce message n’engage que son auteur <--



signature.asc
Description: Message signed with OpenPGP

Re: Hundres of dovecot imap errors with fts_solr plugin polluting /var/log/mail.err

[Steve Dondley]

I think this is some kind of parsing bug from the response from solr.
The number of pairs of errors returned is the same number of hits
received during the search. So if I do a search with 7 results turned
up, I get 7 pairs of errors.


Fixed with the following:

1) simplified config file by removing the "fts_encforce = no" from 
90-plugin.conf


2) blew away the manages_schema file on the solr server

3) reloaded solr data store

4) deleted the solr index for the data store

5) rescanned the emails with doveadm

No more errors.

Re: privacitat / seguretat - Gecko

[Narcis Garcia]

Abrowser és el navegador que la distribució Trisquel GNU/Linux inclou en
comptes de M.Firefox.

S'assembla més a l'Icecat que no pas a l'Iceweasel (que només era un
canvi de nom).


El 17/9/21 a les 11:52, Joan ha escrit:
> Diria que això de l'Abrowser és una mica antic, i pel que veig és una
> mica lo d el'antic Iceweasel... Està fet per Trisquel (què és?):
> 
> https://trisquel.info/es/wiki/abrowser-ayuda
> 
> 

-- 
Narcis Garcia

Re: Fw: Recordatori pel DLP

[Leopold Palomo-Avellaneda]

El 17/9/21 a les 11:44, Narcis Garcia ha escrit:

Això és a Barcelona?


Sí :-(




Gràcies.

El 17/9/21 a les 11:36, Joan ha escrit:



Començament del missatge reenviat:

Data: Thu, 16 Sep 2021 10:47:07 +
Des de: "Rafael Carreras" (via caliu-info Mailing List)
 A: caliu-info
 Títol: [caliu-info] Recordatori pel DLP


Bon dia Caliu.

Aquest és un recordatori del Dia de la Llibertat del Programari que
celebrarem dissabte.

https://gitlab.com/caliu-cat/esdeveniments/-/wikis/Dia-de-la-Llibertat-del-Programari-2021

Ens hi veiem!
Salut!

Rafael Carreras
https://mastodont.cat/@rcarreras
[https://mastodont.cat/@caliu](https://mastodont.cat/@rcarreras)


---
To unsubscribe: 
List help: 






--
--
Linux User 152692 GPG: 05F4A7A949A2D9AA
Catalonia
-
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

Re: privacitat / seguretat - Webkit/Blink

[Narcis Garcia]

Hi havia repositori APT del projecte Iridium, però el van deixar de
mantenir. Hi ha oferiments per a reprendre-ho, però falta que publiquin
la recepta d'empaquetat.

Jo el què faig és empaquetar-me un .deb pel meu compte.


El 17/9/21 a les 11:57, Joan ha escrit:
> Sobre l'Iridium, veig que te molta activitat al repositori:
> 
> https://github.com/iridium-browser/iridium-browser
> 
> però no te versió per Debian (com és?) i tampoc sé si és mitiga totes
> les merdes del Chromium... (és a dir, no sé si és millor siguir la
> reomanació de PrivacyTools de no usar Chrome, tot i que també parlen bé
> de les versions degoogleades de Chrome, com podria ser aquesta).
> 
> Em continua sobtant que no estigui per Debian (hi ha un repo antic per
> això: https://github.com/iridium-browser/iridium-browser-ubuntu )
> 

-- 


__
I'm using this express-made address because personal addresses aren't
masked enough at this mail public archive. Public archive administrator
should fix this against automated addresses collectors.

Re: Hundres of dovecot imap errors with fts_solr plugin polluting /var/log/mail.err

[Steve Dondley]

The bug I patched also threw a similar kind of error. See
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=970692. But this
error is cropping up for every user on the system. A google search
turns up nothing on a uid other than '0'.

I don't know if this is another debian issue or a misconfiguration on
my end. I'm not sure where to begin to look. Can someone please point
me in the right direction?


I think this is some kind of parsing bug from the response from solr. 
The number of pairs of errors returned is the same number of hits 
received during the search. So if I do a search with 7 results turned 
up, I get 7 pairs of errors.

Re: Interesting News.

[Eric S Fraga]

Thank you for posting this.  Interesting article.
-- 
Eric S Fraga via Emacs 28.0.50 & org 9.4.6 on Debian 11.0

[HS] Fusioninventory

[David Martin]

Bonjour,

Connaissez vous un outils qui permettent l'interrogation de tous les
fusions inventory client installé
sur un parc de poste autre que glpi svp ?



-- 
david martin

UEFI + LEGACY op USB

[Paul van der Vlis]

Hallo,

Ik gebruik een USB-naar-SATA adapter en daaraan hang ik dan een SSD 
waarop ik Debian installeer. En van daar wil ik booten.


Die SSD zou ik graag zowel bootbaar hebben met UEFI, als via de oude 
legacy methode. Dus dat het werkt onafhankelijk van de instelling van 
het BIOS.


De Debian USB-sticks kunnen dit, weet iemand hier hoe je dat ook zelf 
kunt realiseren?


Groet,
Paul

--
Paul van der Vlis Linux systeembeheer Groningen
https://www.vandervlis.nl/

Re: (unable to start a new discussion) Re: Can surf the internet, but not my home network...

[Gene Heskett]

On Friday 17 September 2021 04:46:20 Brian wrote:

> On Thu 16 Sep 2021 at 21:48:55 -0600, Charles Curley wrote:
> > On Thu, 16 Sep 2021 19:46:43 -0300
> >
> > Dedeco Balaco  wrote:
> > > Why am i unable to start a new discussion? I have sent 4 messages!
> > > They have one attachment that is less than 150KiB - so, they are
> > > not considered big, for the list, right?
> >
> > I consider 150 KiB to be monstrous.
> >
> > Have you tried sending a short message with no attachment?
>
> Dedeco Balaco already has two short messages showing in this thread.
> That indicates he has the ability to start a new discussion.
>
> However, a new discussion should be started in a *new* thread, not
> plonked willy-nilly into an existing thread. This is the second time
> recently that someone has done that. The first time it involved  an
> experienced user!
>
> To take this thread further off-topic: there can be a good reason to
> send an attachment; for example, a log. Compression would reduce its
> size and is advised.

Likewise, a screenshot of a problem should be loaded into gimp, 
re-exported as a .jpg,  compressed until the colors are all screwed up. 
Leaving the compression at 12% quality will get a 250k screen shot, 
which will be blocked but jpeg throws away color before it throws away 
edges of text characters. So if showing a screen full of text to show 
the error, smunch the daylights out of it, it will still be readable. 
Even then its uo to the filters to say yay or nay.

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Hundres of dovecot imap errors with fts_solr plugin polluting /var/log/mail.err

[Steve Dondley]

I'm running debian bullseye. I've had issues running solr on debian in 
the past due to some kind of bug. I was able to get solr working with 
dovecot by upgrading the os.


After the upgrade, everything works perfectly fine and the search 
feature in my client using solr now works. However, I get hundreds of 
these pairs of errors every minute in mail.err:


Sep 17 04:47:52 email dovecot: imap(s)<8699><1eOe/CzMbOl/AAAB>: Error: 
fts_solr: received invalid uid '102

Sep 17 04:47:52 email dovecot: imap: Error: '
Sep 17 04:47:52 email dovecot: imap(s)<8699><1eOe/CzMbOl/AAAB>: Error: 
fts_solr: received invalid uid '103

Sep 17 04:47:52 email dovecot: imap: Error: '
Sep 17 04:47:52 email dovecot: imap(s)<8699><1eOe/CzMbOl/AAAB>: Error: 
fts_solr: received invalid uid '104

Sep 17 04:47:52 email dovecot: imap: Error: '
Sep 17 04:47:52 email dovecot: imap(s)<8699><1eOe/CzMbOl/AAAB>: Error: 
fts_solr: received invalid uid '105

Sep 17 04:47:52 email dovecot: imap: Error: '
Sep 17 04:47:52 email dovecot: imap(s)<8699><1eOe/CzMbOl/AAAB>: Error: 
fts_solr: received invalid uid '106

Sep 17 04:47:52 email dovecot: imap: Error: '
Sep 17 04:47:52 email dovecot: imap(s)<8699><1eOe/CzMbOl/AAAB>: Error: 
fts_solr: received invalid uid '118

Sep 17 04:47:52 email dovecot: imap: Error: '
Sep 17 04:47:52 email dovecot: imap(s)<8699><1eOe/CzMbOl/AAAB>: Error: 
fts_solr: received invalid uid '132

Sep 17 04:47:52 email dovecot: imap: Error: '
Sep 17 04:47:52 email dovecot: imap(s)<8699><1eOe/CzMbOl/AAAB>: Error: 
fts_solr: received invalid uid '133

Sep 17 04:47:52 email dovecot: imap: Error: '
Sep 17 04:47:52 email dovecot: imap(s)<8699><1eOe/CzMbOl/AAAB>: Error: 
fts_solr: received invalid uid '134

Sep 17 04:47:52 email dovecot: imap: Error: '
Sep 17 04:47:52 email dovecot: imap(s)<8699><1eOe/CzMbOl/AAAB>: Error: 
fts_solr: received invalid uid '135

Sep 17 04:47:52 email dovecot: imap: Error: '
Sep 17 04:47:52 email dovecot: imap(s)<8699><1eOe/CzMbOl/AAAB>: Error: 
fts_solr: received invalid uid '136

Sep 17 04:47:52 email dovecot: imap: Error: '
Sep 17 04:47:52 email dovecot: imap(s)<8699><1eOe/CzMbOl/AAAB>: Error: 
fts_solr: received invalid uid '137


...and so on


The bug I patched also threw a similar kind of error. See 
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=970692. But this error 
is cropping up for every user on the system. A google search turns up 
nothing on a uid other than '0'.


I don't know if this is another debian issue or a misconfiguration on my 
end. I'm not sure where to begin to look. Can someone please point me in 
the right direction?

Re: Recordatori pel DLP

[Joan]

Juraria que si :-)

Ara ho he vist:

Espai Jove Bocanord
Agudells, 37
Metro El Carmel

-- 
Joan Cervan i Andreu
http://personal.calbasi.net

"El meu paper no és transformar el món ni l'home sinó, potser, el de
ser útil, des del meu lloc, als pocs valors sense els quals un món no
val la pena viure'l" A. Camus

i pels que teniu fe:
"Déu no és la Veritat, la Veritat és Déu"
Gandhi

"Donar exemple no és la principal manera de influir sobre els altres;
es la única manera" Albert Einstein

“Lluitarem contra el fort mentre siguem febles i contra nosaltres
mateixos quan siguem forts” Lluís Maria Xirinacs


El Fri, 17 Sep 2021 11:44:24 +0200
Narcis Garcia  va escriure:

> Això és a Barcelona?
> 
> Gràcies.
> 
> El 17/9/21 a les 11:36, Joan ha escrit:
> > 
> > 
> > Començament del missatge reenviat:
> > 
> > Data: Thu, 16 Sep 2021 10:47:07 +
> > Des de: "Rafael Carreras" (via caliu-info Mailing List)
> >  A: caliu-info
> >  Títol: [caliu-info] Recordatori pel
> > DLP
> > 
> > 
> > Bon dia Caliu.
> > 
> > Aquest és un recordatori del Dia de la Llibertat del Programari que
> > celebrarem dissabte.
> > 
> > https://gitlab.com/caliu-cat/esdeveniments/-/wikis/Dia-de-la-Llibertat-del-Programari-2021
> > 
> > Ens hi veiem!
> > Salut!
> > 
> > Rafael Carreras
> > https://mastodont.cat/@rcarreras
> > [https://mastodont.cat/@caliu](https://mastodont.cat/@rcarreras)
> > 
> > 
> > ---
> > To unsubscribe: 
> > List help: 
> >   
> 



-- 
Joan Cervan i Andreu
http://personal.calbasi.net

"El meu paper no és transformar el món ni l'home sinó, potser, el de
ser útil, des del meu lloc, als pocs valors sense els quals un món no
val la pena viure'l" A. Camus

i pels que teniu fe:
"Déu no és la Veritat, la Veritat és Déu"
Gandhi

"Donar exemple no és la principal manera de influir sobre els altres;
es la única manera" Albert Einstein

“Lluitarem contra el fort mentre siguem febles i contra nosaltres
mateixos quan siguem forts” Lluís Maria Xirinacs

Re: privacitat / seguretat

[Joan]

Sobre l'Iridium, veig que te molta activitat al repositori:

https://github.com/iridium-browser/iridium-browser

però no te versió per Debian (com és?) i tampoc sé si és mitiga totes
les merdes del Chromium... (és a dir, no sé si és millor siguir la
reomanació de PrivacyTools de no usar Chrome, tot i que també parlen bé
de les versions degoogleades de Chrome, com podria ser aquesta).

Em continua sobtant que no estigui per Debian (hi ha un repo antic per
això: https://github.com/iridium-browser/iridium-browser-ubuntu )

-- 
Joan Cervan i Andreu
http://personal.calbasi.net

"El meu paper no és transformar el món ni l'home sinó, potser, el de
ser útil, des del meu lloc, als pocs valors sense els quals un món no
val la pena viure'l" A. Camus

i pels que teniu fe:
"Déu no és la Veritat, la Veritat és Déu"
Gandhi

"Donar exemple no és la principal manera de influir sobre els altres;
es la única manera" Albert Einstein

“Lluitarem contra el fort mentre siguem febles i contra nosaltres
mateixos quan siguem forts” Lluís Maria Xirinacs


El Wed, 15 Sep 2021 16:51:25 +0200
Narcis Garcia  va escriure:

> Abrowser està basat en Mozilla, i crec que la simple diferència és que
> les opcions predeterminades són respectuoses amb l'usuari.
> Iridium està basat en Chromium, i en el mateix sentit.
> 
> Cap dels dos està pas desenvolupat per una empresa ni projecte amb
> ànim de lucre.
> 
> Narcís
> 
> 
> El 15/9/21 a les 10:16, Llibertat ha escrit:
> > Doncs potser hauríem de recomanar Brave? està basat en Chromiun,
> > personalment m'agrada tot i que a vegades és masa restrictiu per
> > defecte i no permet accedir a algunes pàgines. Porta incorporat
> > accès mitjançant Tor (configurable a voluntat), està en català i és
> > pot gestionar la traçavilitat. Al instalar-lo apareix un petit
> > assitent on es pot seleccionar el motor de búsqueda per defecte
> > (DuckDuckGo per exemple), i totes les opcions comentades
> > anteriorment, així que aquest navegador podría ser un bon coplement
> > per Debian.
> > 
> > L'altre opció podría ser Tor, basat en Firefox, però aquí si que
> > moltes Webs donen problemes al detectar l'accès anónim i és fa
> > dificil fer-lo serv per a un ús diari.
> > 
> > Ricard D.
> > 
> > 
> > On 14/9/21 21:17, Narcis Garcia wrote:  
> >> El problema de recomanar Mozilla Firefox, és, en el context
> >> d'aquesta llista, que la configuració predeterminada que porta el
> >> paquet no segueix el principi de «seguretat per defecte».
> >> Deixa una mica que desitjar el predefinit de «convidar» a
> >> registrar-se amb la central de Mozilla i d'enviar totes les
> >> cerques i allò que tecleges a la barra d'adreces a l'empresa
> >> Google.
> >>
> >> Narcís.
> >>
> >>
> >> El 14/9/21 a les 10:02, Joan ha escrit:  
> >>> Per cert, aprofito per fer una mica de proselitisme (alguns ja
> >>> n'esteu al cas): estic treballant en una pàgina que responent
> >>> unes preguntes et proposa millores en el teu perfil de
> >>> privacitat/seguretat digital... Algú podria pensar que Debian és
> >>> el punt d'arribada, però encara es pot anar més enllà :-p
> >>>
> >>> https://privacitat.calbasi.net/
> >>>
> >>> Pd.: qualsevol dia poso un "wanted", algú que passi totes les
> >>> pantalles i el sistema no li pugui oferir cap suggeriment de
> >>> millora perquè ja ho fa tot "la mar de bé" :-) De fet, si algu ho
> >>> acredita estic disposat a donar-li 200 G1 :-D
> >>>  
> >   
> 



-- 
Joan Cervan i Andreu
http://personal.calbasi.net

"El meu paper no és transformar el món ni l'home sinó, potser, el de
ser útil, des del meu lloc, als pocs valors sense els quals un món no
val la pena viure'l" A. Camus

i pels que teniu fe:
"Déu no és la Veritat, la Veritat és Déu"
Gandhi

"Donar exemple no és la principal manera de influir sobre els altres;
es la única manera" Albert Einstein

“Lluitarem contra el fort mentre siguem febles i contra nosaltres
mateixos quan siguem forts” Lluís Maria Xirinacs

Re: privacitat / seguretat

[Joan]

Diria que això de l'Abrowser és una mica antic, i pel que veig és una
mica lo d el'antic Iceweasel... Està fet per Trisquel (què és?):

https://trisquel.info/es/wiki/abrowser-ayuda


-- 
Joan Cervan i Andreu
http://personal.calbasi.net

"El meu paper no és transformar el món ni l'home sinó, potser, el de
ser útil, des del meu lloc, als pocs valors sense els quals un món no
val la pena viure'l" A. Camus

i pels que teniu fe:
"Déu no és la Veritat, la Veritat és Déu"
Gandhi

"Donar exemple no és la principal manera de influir sobre els altres;
es la única manera" Albert Einstein

“Lluitarem contra el fort mentre siguem febles i contra nosaltres
mateixos quan siguem forts” Lluís Maria Xirinacs


El Wed, 15 Sep 2021 16:51:25 +0200
Narcis Garcia  va escriure:

> Abrowser està basat en Mozilla, i crec que la simple diferència és que
> les opcions predeterminades són respectuoses amb l'usuari.
> Iridium està basat en Chromium, i en el mateix sentit.
> 
> Cap dels dos està pas desenvolupat per una empresa ni projecte amb
> ànim de lucre.
> 
> Narcís
> 
> 
> El 15/9/21 a les 10:16, Llibertat ha escrit:
> > Doncs potser hauríem de recomanar Brave? està basat en Chromiun,
> > personalment m'agrada tot i que a vegades és masa restrictiu per
> > defecte i no permet accedir a algunes pàgines. Porta incorporat
> > accès mitjançant Tor (configurable a voluntat), està en català i és
> > pot gestionar la traçavilitat. Al instalar-lo apareix un petit
> > assitent on es pot seleccionar el motor de búsqueda per defecte
> > (DuckDuckGo per exemple), i totes les opcions comentades
> > anteriorment, així que aquest navegador podría ser un bon coplement
> > per Debian.
> > 
> > L'altre opció podría ser Tor, basat en Firefox, però aquí si que
> > moltes Webs donen problemes al detectar l'accès anónim i és fa
> > dificil fer-lo serv per a un ús diari.
> > 
> > Ricard D.
> > 
> > 
> > On 14/9/21 21:17, Narcis Garcia wrote:  
> >> El problema de recomanar Mozilla Firefox, és, en el context
> >> d'aquesta llista, que la configuració predeterminada que porta el
> >> paquet no segueix el principi de «seguretat per defecte».
> >> Deixa una mica que desitjar el predefinit de «convidar» a
> >> registrar-se amb la central de Mozilla i d'enviar totes les
> >> cerques i allò que tecleges a la barra d'adreces a l'empresa
> >> Google.
> >>
> >> Narcís.
> >>
> >>
> >> El 14/9/21 a les 10:02, Joan ha escrit:  
> >>> Per cert, aprofito per fer una mica de proselitisme (alguns ja
> >>> n'esteu al cas): estic treballant en una pàgina que responent
> >>> unes preguntes et proposa millores en el teu perfil de
> >>> privacitat/seguretat digital... Algú podria pensar que Debian és
> >>> el punt d'arribada, però encara es pot anar més enllà :-p
> >>>
> >>> https://privacitat.calbasi.net/
> >>>
> >>> Pd.: qualsevol dia poso un "wanted", algú que passi totes les
> >>> pantalles i el sistema no li pugui oferir cap suggeriment de
> >>> millora perquè ja ho fa tot "la mar de bé" :-) De fet, si algu ho
> >>> acredita estic disposat a donar-li 200 G1 :-D
> >>>  
> >   
> 



-- 
Joan Cervan i Andreu
http://personal.calbasi.net

"El meu paper no és transformar el món ni l'home sinó, potser, el de
ser útil, des del meu lloc, als pocs valors sense els quals un món no
val la pena viure'l" A. Camus

i pels que teniu fe:
"Déu no és la Veritat, la Veritat és Déu"
Gandhi

"Donar exemple no és la principal manera de influir sobre els altres;
es la única manera" Albert Einstein

“Lluitarem contra el fort mentre siguem febles i contra nosaltres
mateixos quan siguem forts” Lluís Maria Xirinacs

Re: privacitat / seguretat

[Narcis Garcia]

El 17/9/21 a les 11:48, Joan ha escrit:
> El Wed, 15 Sep 2021 16:51:25 +0200
> Narcis Garcia  va escriure:
> 
>> Abrowser està basat en Mozilla, i crec que la simple diferència és que
>> les opcions predeterminades són respectuoses amb l'usuari.
>> Iridium està basat en Chromium, i en el mateix sentit.
>>
>> Cap dels dos està pas desenvolupat per una empresa ni projecte amb
>> ànim de lucre.
>>
>> Narcís
> 
> De fet, veig que PrivacyTools (per cert, ara han canviat de nom, i la
> gent que ho porta passa aquí: https://privacyguides.org )
> 
> 
> https://privacytools.io/browsers/#browser
> 
> quan parla del Firefox ja recomana unes extensions:
> 
> https://privacytools.io/browsers/#addons
> 
> desactivar WebRTC:
> 
> https://privacytools.io/browsers/#webrtc
> 
> i ajustos al about:config:
> 
> https://privacytools.io/browsers/#about_config
> 
> En canvi no es parlen dels dos navegadors que comentes... (això tampoc
> vol dir res si els projectes son fiables)
> 

Si se segueix preinstal·lant M.Firefox, estaria molt bé que vingués
empaquetat seguint aquestes recomanacions per als valors predeterminats.

Salut;
Narcís Garcia

-- 


__
I'm using this express-made address because personal addresses aren't
masked enough at this mail public archive. Public archive administrator
should fix this against automated addresses collectors.

Re: privacitat / seguretat

[Joan]

El Wed, 15 Sep 2021 16:51:25 +0200
Narcis Garcia  va escriure:

> Abrowser està basat en Mozilla, i crec que la simple diferència és que
> les opcions predeterminades són respectuoses amb l'usuari.
> Iridium està basat en Chromium, i en el mateix sentit.
> 
> Cap dels dos està pas desenvolupat per una empresa ni projecte amb
> ànim de lucre.
> 
> Narcís

De fet, veig que PrivacyTools (per cert, ara han canviat de nom, i la
gent que ho porta passa aquí: https://privacyguides.org )


https://privacytools.io/browsers/#browser

quan parla del Firefox ja recomana unes extensions:

https://privacytools.io/browsers/#addons

desactivar WebRTC:

https://privacytools.io/browsers/#webrtc

i ajustos al about:config:

https://privacytools.io/browsers/#about_config

En canvi no es parlen dels dos navegadors que comentes... (això tampoc
vol dir res si els projectes son fiables)

> 
> 
> El 15/9/21 a les 10:16, Llibertat ha escrit:
> > Doncs potser hauríem de recomanar Brave? està basat en Chromiun,
> > personalment m'agrada tot i que a vegades és masa restrictiu per
> > defecte i no permet accedir a algunes pàgines. Porta incorporat
> > accès mitjançant Tor (configurable a voluntat), està en català i és
> > pot gestionar la traçavilitat. Al instalar-lo apareix un petit
> > assitent on es pot seleccionar el motor de búsqueda per defecte
> > (DuckDuckGo per exemple), i totes les opcions comentades
> > anteriorment, així que aquest navegador podría ser un bon coplement
> > per Debian.
> > 
> > L'altre opció podría ser Tor, basat en Firefox, però aquí si que
> > moltes Webs donen problemes al detectar l'accès anónim i és fa
> > dificil fer-lo serv per a un ús diari.
> > 
> > Ricard D.
> > 
> > 
> > On 14/9/21 21:17, Narcis Garcia wrote:  
> >> El problema de recomanar Mozilla Firefox, és, en el context
> >> d'aquesta llista, que la configuració predeterminada que porta el
> >> paquet no segueix el principi de «seguretat per defecte».
> >> Deixa una mica que desitjar el predefinit de «convidar» a
> >> registrar-se amb la central de Mozilla i d'enviar totes les
> >> cerques i allò que tecleges a la barra d'adreces a l'empresa
> >> Google.
> >>
> >> Narcís.
> >>
> >>
> >> El 14/9/21 a les 10:02, Joan ha escrit:  
> >>> Per cert, aprofito per fer una mica de proselitisme (alguns ja
> >>> n'esteu al cas): estic treballant en una pàgina que responent
> >>> unes preguntes et proposa millores en el teu perfil de
> >>> privacitat/seguretat digital... Algú podria pensar que Debian és
> >>> el punt d'arribada, però encara es pot anar més enllà :-p
> >>>
> >>> https://privacitat.calbasi.net/
> >>>
> >>> Pd.: qualsevol dia poso un "wanted", algú que passi totes les
> >>> pantalles i el sistema no li pugui oferir cap suggeriment de
> >>> millora perquè ja ho fa tot "la mar de bé" :-) De fet, si algu ho
> >>> acredita estic disposat a donar-li 200 G1 :-D
> >>>  
> >   
> 



-- 
Joan Cervan i Andreu
http://personal.calbasi.net

"El meu paper no és transformar el món ni l'home sinó, potser, el de
ser útil, des del meu lloc, als pocs valors sense els quals un món no
val la pena viure'l" A. Camus

i pels que teniu fe:
"Déu no és la Veritat, la Veritat és Déu"
Gandhi

"Donar exemple no és la principal manera de influir sobre els altres;
es la única manera" Albert Einstein

“Lluitarem contra el fort mentre siguem febles i contra nosaltres
mateixos quan siguem forts” Lluís Maria Xirinacs

Re: Fw: Recordatori pel DLP

[Narcis Garcia]

Això és a Barcelona?

Gràcies.

El 17/9/21 a les 11:36, Joan ha escrit:
> 
> 
> Començament del missatge reenviat:
> 
> Data: Thu, 16 Sep 2021 10:47:07 +
> Des de: "Rafael Carreras" (via caliu-info Mailing List)
>  A: caliu-info
>  Títol: [caliu-info] Recordatori pel DLP
> 
> 
> Bon dia Caliu.
> 
> Aquest és un recordatori del Dia de la Llibertat del Programari que
> celebrarem dissabte.
> 
> https://gitlab.com/caliu-cat/esdeveniments/-/wikis/Dia-de-la-Llibertat-del-Programari-2021
> 
> Ens hi veiem!
> Salut!
> 
> Rafael Carreras
> https://mastodont.cat/@rcarreras
> [https://mastodont.cat/@caliu](https://mastodont.cat/@rcarreras)
> 
> 
> ---
> To unsubscribe: 
> List help: 
> 

-- 


__
I'm using this express-made address because personal addresses aren't
masked enough at this mail public archive. Public archive administrator
should fix this against automated addresses collectors.

Fw: [caliu-info] Recordatori pel DLP

[Joan]

Començament del missatge reenviat:

Data: Thu, 16 Sep 2021 10:47:07 +
Des de: "Rafael Carreras" (via caliu-info Mailing List)
 A: caliu-info
 Títol: [caliu-info] Recordatori pel DLP


Bon dia Caliu.

Aquest és un recordatori del Dia de la Llibertat del Programari que
celebrarem dissabte.

https://gitlab.com/caliu-cat/esdeveniments/-/wikis/Dia-de-la-Llibertat-del-Programari-2021

Ens hi veiem!
Salut!

Rafael Carreras
https://mastodont.cat/@rcarreras
[https://mastodont.cat/@caliu](https://mastodont.cat/@rcarreras)

-- 
Joan Cervan i Andreu
http://personal.calbasi.net

"El meu paper no és transformar el món ni l'home sinó, potser, el de
ser útil, des del meu lloc, als pocs valors sense els quals un món no
val la pena viure'l" A. Camus

i pels que teniu fe:
"Déu no és la Veritat, la Veritat és Déu"
Gandhi

"Donar exemple no és la principal manera de influir sobre els altres;
es la única manera" Albert Einstein

“Lluitarem contra el fort mentre siguem febles i contra nosaltres
mateixos quan siguem forts” Lluís Maria Xirinacs
Bon dia Caliu.Aquest és un recordatori del Dia de la Llibertat del Programari que celebrarem dissabte.https://gitlab.com/caliu-cat/esdeveniments/-/wikis/Dia-de-la-Llibertat-del-Programari-2021Ens hi veiem!Salut!Rafael Carrerashttps://mastodont.cat/@rcarrerashttps://mastodont.cat/@caliu
---
To unsubscribe: 
List help: 

Re: buster => bullseye, upgrade vs reinstall

[hamster]

Le 17/09/2021 à 10:10, Daniel Caillibaud a écrit :

- ca prend beaucoup de temps


Mmh… Pourtant tous les upgrades que j'ai fait (depuis woody) ont toujours été 
assez rapides
(<10min avec un réseau correct)


Ben on a pas le meme ordi !!! Chez moi y'a le temps de téléchargement 
des nombreux paquets qui dépend de la vitesse du réseau, j'ai une 
connexion ADSL raisonnable sans etre foudroyante et ca dure déjà 
nettement plus de 10 mn. Mais surtout après il faut dépaqueter tout ca, 
et sur mon ordi ca prend beaucoup plus que 10 mn.

Je me suis fait une clef USB
dans laquelle je note les bidouilles personnelles que je fais, avec une
copie des fichiers de configuration et les scripts correspondant, ainsi
je refait très vite toutes ces adaptations après avoir réinstallé.


Je crois avoir fait une ou deux réinstall complètes, et à chaque fois j'en ai 
eu pour des
heures (la gestion lvm/luks avant réinstall, mais surtout remettre toutes les 
configurations
des services après, et ça c'est assez long)


Vu que la partition /home n'est pas modifiée, toute la configuration est 
dans ton dossier personnel et t'a pas a la refaire. Sinon c'est que tu 
sors de l'usage de type ordinateur domestique dont je parlais. La 
présence de LVM est aussi un signe que tu sors de cet usage.



Bien sur, il est prudent de commencer par faire une sauvegarde du
système en bootant sur une clef et en utilisant la commande
cp -a /mnt/root /mnt/clef/sauvegarde
ca permet de revenir en arrière en cas de pépin et de retourner a
posteriori repécher un fichier de config ou un script qu'on aurait
oublié de copier sur la clef.


Oui, ça c'est toujours à faire, autant pour un upgrade que pour une réinstall, 
mais
normalement c'est le backup quotidien qui le gère ;-)


Attends, tu veux dire que tu fais des sauvegardes quotidiennes qui 
prennent tout ton système et pas seulement la partition /home ???

Re: krijg Wireguard niet aan de gang met IPv6

[Martijn van de Streek]

Gijs Hillenius schreef op vr 17-09-2021 om 08:41 [+0200]:
> Goedenmorgen
> 
> Mijn servertje ging van Debian 10 naar 11, en OpenVPN stopte met
> werken. (iets met IPv6, dacht ik, maar niet goed gekeken). Geen punt
> want ik wilde toch al naar Wireguard.
> 
> Ik krijg het aan de gang via IPv4, maar niet IPv6. Forwarding wil
> niet?
> Gebruik ik de verkeerde IPv6 reeks? Maak ik een tikfout? Is het iets
> met
> IPv6 in Bullseye? internetspeurtochten leveren aanwijzingen voor van
> alles. 

[knip]

> Als iemand een tip heeft waar ik moet kijken, dank!

Je zou eens kunnen kijken in /proc/sys/net/ipv6/conf/all/forwarding (of
die voor de specifieke interface(s) waartussen forwarding voor actief
moet zijn)

Dat geeft soms een duidelijker antwoord dan verschillende firewall-
tools :)

-Martijn

Re: (unable to start a new discussion) Re: Can surf the internet, but not my home network...

[Brian]

On Thu 16 Sep 2021 at 21:48:55 -0600, Charles Curley wrote:

> On Thu, 16 Sep 2021 19:46:43 -0300
> Dedeco Balaco  wrote:
> 
> > Why am i unable to start a new discussion? I have sent 4 messages!
> > They have one attachment that is less than 150KiB - so, they are not
> > considered big, for the list, right?
> 
> I consider 150 KiB to be monstrous.
> 
> Have you tried sending a short message with no attachment?

Dedeco Balaco already has two short messages showing in this thread.
That indicates he has the ability to start a new discussion.

However, a new discussion should be started in a *new* thread, not
plonked willy-nilly into an existing thread. This is the second time
recently that someone has done that. The first time it involved  an
experienced user!

To take this thread further off-topic: there can be a good reason to
send an attachment; for example, a log. Compression would reduce its
size and is advised.

-- 
Brian.

Re: buster => bullseye, upgrade vs reinstall

[Daniel Caillibaud]

Le 16/09/21 à 16:14, hamster  a écrit :
> J'ai essayé une fois l'upgrade :
> - il faut beaucoup de place libre sur la partition système parce qu'a un 
> moment les 2 versions y sont écrites en meme temps

De mémoire ça peut se régler en indiquant dans les prefs apt un dossier 
temporaire hors de /,
ou plus simplement en montant une partition externe sur le dossier temporaire 
qu'il utilise (me
rappelle plus lequel c'est).

> - ca prend beaucoup de temps

Mmh… Pourtant tous les upgrades que j'ai fait (depuis woody) ont toujours été 
assez rapides
(<10min avec un réseau correct), bien plus qu'une réinstall (plutôt 1h ou 2, 
voire bpc plus, le
temps de préparer les partitions, faire gaffe à la gestion du chiffrement, 
configurer lvm &
luks, remettre toutes les config système, etc.).

> - j'ai eu des soucis avec des logiciels qui viennent des dépots contrib 
> ou nonfree, voire meme multimedia, d'ailleurs dans la doc il est 
> conseillé de désinstaller ces logiciels avant upgrade et les reinstaller 
> ensuite.

Faut pas les désinstaller, juste
- faire dist-upgrade sur l'ancienne distrib
- désactiver tous les dépôts non officiels
- faire le dist-upgrade vers la nouvelle distrib
- remettre les dépôts non officiels dans la nouvelle distrib
- refaire un dist-upgrade
et c'est toujours passé comme une lettre à la poste (pourtant j'ai un paquet de 
dépôt externes).

> Donc pour moi, l'upgrade c'est utile quand on administre un serveur et 
> qu'on veut minimiser tant que possible la coupure de service. Pour mon 
> ordi personnel, je préfère beaucoup la réinstall. Comme déjà dit, avec 
> une partition /home séparée ca se passe très bien, on peut meme 
> joyeusement avoir plusieurs partitions système avec plusieurs distribs 
> qui se partagent la meme partition /home.

Oui, mais faut quand même faire attention car les logiciels vont partager les 
même préférences,
et ça peut casser des trucs lorsque les versions diffèrent.

C'est plus prudent dans ce cas d'avoir un user par distrib (on peut leur donner 
le même uid),
quitte à partager entre tous ces users des dossiers communs. 

> Je me suis fait une clef USB 
> dans laquelle je note les bidouilles personnelles que je fais, avec une 
> copie des fichiers de configuration et les scripts correspondant, ainsi 
> je refait très vite toutes ces adaptations après avoir réinstallé.

Je crois avoir fait une ou deux réinstall complètes, et à chaque fois j'en ai 
eu pour des
heures (la gestion lvm/luks avant réinstall, mais surtout remettre toutes les 
configurations
des services après, et ça c'est assez long), mais c'est probablement parce que 
j'ai beaucoup
de services plutôt orientés serveur sur mon desktop (qui sert aussi de banc de 
test).

> Bien sur, il est prudent de commencer par faire une sauvegarde du 
> système en bootant sur une clef et en utilisant la commande
> cp -a /mnt/root /mnt/clef/sauvegarde
> ca permet de revenir en arrière en cas de pépin et de retourner a 
> posteriori repécher un fichier de config ou un script qu'on aurait 
> oublié de copier sur la clef.

Oui, ça c'est toujours à faire, autant pour un upgrade que pour une réinstall, 
mais
normalement c'est le backup quotidien qui le gère ;-)

-- 
Daniel

Rien ni personne n'a tout à fait tort :
même une horloge arrêtée a raison deux fois par jour.
John Steinbeck

krijg Wireguard niet aan de gang met IPv6

[Gijs Hillenius]

Goedenmorgen

Mijn servertje ging van Debian 10 naar 11, en OpenVPN stopte met
werken. (iets met IPv6, dacht ik, maar niet goed gekeken). Geen punt
want ik wilde toch al naar Wireguard.

Ik krijg het aan de gang via IPv4, maar niet IPv6. Forwarding wil niet?
Gebruik ik de verkeerde IPv6 reeks? Maak ik een tikfout? Is het iets met
IPv6 in Bullseye? internetspeurtochten leveren aanwijzingen voor van
alles. 



* configuratie client:
---
[Interface]
Address = 10.93.15.2/24, fdab:9205:cf78:f608::2/64
PrivateKey = 
ListenPort = 21841

[Peer]
PublicKey = 
Endpoint = 2a01:4f8:200:546b::9e15:1:51820
AllowedIPs = 0.0.0.0/0, ::/0

# This is for if you're behind a NAT and
# want the connection to be kept alive.
PersistentKeepalive = 25
---


* configuratie server
---
[Interface]
Address = 10.93.15.1/24, fdab:9205:cf78:f608::1/64
PrivateKey = 
ListenPort = 51820

[Peer]
PublicKey = 
AllowedIPs = 10.93.15.2/32, fdab:9205:cf78:f608::2/128
--

in sysctrl.conf:
net.ipv6.conf.all.forwarding=1

firewalld:
masquerade: yes 
forward: no <--- is dat het?

of ligt het aan de opzet: ik gebruik nu

wg-quick up wg0

op zowel server als client, ik las op de Debian wikis
dat dit de route-tabellen verandert?



Als iemand een tip heeft waar ik moet kijken, dank!

Correction [was: unable to start a new discussion]

[tomas]

On Fri, Sep 17, 2021 at 08:23:23AM +0200, tomas wrote:

[...]

> I'd say... yes: the start of this thread kind of proves [1] it.

Duh. Not a new thread, so not "kind of proves". Sorry.

Cheers

> [1] for a very sloppy value of "proof" :)
 very sloppy, indeed ;-p

 - t


signature.asc
Description: Digital signature

Re: (unable to start a new discussion) Re: Can surf the internet, but not my home network...

[tomas]

On Thu, Sep 16, 2021 at 09:48:55PM -0600, Charles Curley wrote:
> On Thu, 16 Sep 2021 19:46:43 -0300
> Dedeco Balaco  wrote:
> 
> > Why am i unable to start a new discussion? I have sent 4 messages!
> > They have one attachment that is less than 150KiB - so, they are not
> > considered big, for the list, right?
> 
> I consider 150 KiB to be monstrous.
> 
> Have you tried sending a short message with no attachment?

I'd say... yes: the start of this thread kind of proves [1] it.

So most probably the attachment is part of the problem.

@Dedeco: as Greg says, spam filtering is a complex thing. As far as
I know, this list uses SpamAssassin, which is based on rules and
heuristics -- and lots of tuning (thanks to the team behind it,
otherwise we would be drowning in spam!)

Someone said 150k is "monstrous". This depends on the context, of
course. But for a mailing list this size (we have roughly 3k
subscribed members [2]), 150k seems a bit heavy, yes. I wouldn't
do it.

Cheers

[1] for a very sloppy value of "proof" :)
[2] https://lists.debian.org/debian-user/

 - t


signature.asc
Description: Digital signature