[gentoo-user] Re: [gentoo-cluster] Iozone on multiple nodes using ssh
exactly, he's doing something wrong, probably has the binaries in the wrong place, the clientlist he's using has 1 host too Binaries? You mean the path of iozone? I am very sure the path of iozone is correct, and if the path is incorrect, I can see the error message: d...@node73 ~ $ iozone -R -s 64k -t 1 -+m clientlist [...] Throughput test with 1 process Each process writes a 64 Kbyte file in 4 Kbyte records bash: /tmp/iozone: No such file or directory I alsa tried to use two host in clientlist, but the result is the same. -- wcw
Re: [gentoo-user] Re: kernel linux-2.6.27-gentoo-r7 won't load network!
On Saturday 10 January 2009, Dale wrote: Neil Bothwick wrote: On Fri, 9 Jan 2009 22:37:44 +, Mick wrote: Filed a bug and it was suggested to me that I try building the alsa drivers as modules. I tried it on for size and guess what, it worked! AFAIR the Gentoo ALSA docs have always recommended building as modules. And yet I have never used modules for anything except Nvidia. That has worked for me over 5 years now. What a puzzle. Same here. With three different machines I had alsa built in the kernel, less that six months or so after alsa first became part of the kernel (can't remember if I was running stable back then). -- Regards, Mick signature.asc Description: This is a digitally signed message part.
[gentoo-user] Trouble with portage
Hi all, to-day I am having some trouble to update my system. Well, 'emerge --sync' and I received a message telling me a new version of portage is available and I should update it immediately. But, before upgrading it I ran 'emerge -NDpvu world'. Here is the output: localhost ~ # emerge -NDpvu world These are the packages that would be merged, in order: Calculating world dependencies | !!! The following installed packages are masked: - app-admin/gnome-system-tools-2.14.0 (masked by: package.mask) /usr/portage/profiles/package.mask: # Gilles Dartiguelongue e...@gentoo.org (12 Apr 2008) # Masking gnome-system-tools because it is broken, # to help fix it, see bug #214265 - app-admin/system-tools-backends-1.4.2-r1 (masked by: package.mask) - media-video/realplayer-11.0.0.4028-r1 (masked by: package.mask) /usr/portage/profiles/package.mask: # Steve Dibb bean...@gentoo.org (5 Nov 2008) # Mask realplayer, real codecs for security, upstream issues, bug 245662 # http://forums.gentoo.org/viewtopic-t-713051.html !!! Ebuilds for the following packages are either all !!! masked or don't exist: app-admin/gnome-system-tools media-video/realplayer ... done! [ebuild U ] sys-apps/portage-2.1.6.4 [2.1.4.5] USE=-build -doc -epydoc (-selinux) LINGUAS=-pl 0 kB *** Portage will stop merging at this point and reload itself, then resume the merge. [ebuild U ] dev-libs/expat-2.0.1-r1 [2.0.1] 0 kB [ebuild U ] dev-libs/eventlog-0.2.9 [0.2.7] 323 kB [ebuild U ] app-shells/bash-3.2_p39 [3.2_p33] USE=nls -afs -bashlogger -examples% -plugins -vanilla 19 kB [ebuild UD] app-editors/nano-2.0.9 [2.1.7] USE=ncurses nls unicode -debug -justify -minimal -slang -spell 1,371 kB [ebuild U ] sys-devel/autoconf-2.63 [2.61-r2] USE=-emacs 1,527 kB [ebuild U ] dev-libs/check-0.9.5-r1 [0.9.5] 0 kB [ebuild U ] x11-libs/qt-3.3.8b-r1 [3.3.8-r4] USE=cups ipv6 opengl -debug -doc -examples (-firebird) -immqt -immqt-bc -mysql -nas -nis -odbc -postgres -sqlite -xinerama (-gif%) 16,909 kB [ebuild UD] www-client/mozilla-firefox-2.0.0.19 [3.0.5] USE=ipv6 -bindist -debug% -filepicker% -gnome -iceweasel -java -mozdevelop -moznopango% -restrict-javascript -xforms% -xinerama% -xprint% (-custom-optimization%) (-dbus%) (-startup-notification%) (-xulrunner%*) LINGUAS=it -af -ar -be -bg -ca -cs -da -de -el -en -en_GB -en_US -es -es_AR -es_ES -eu -fi -fr -fy -fy_NL -ga -ga_IE -gu -gu_IN -he -hu -ja -ka -ko -ku -lt -mk -mn -nb -nb_NO -nl -nn -nn_NO -pa -pa_IN -pl -pt -pt_BR -pt_PT -ro -ru -sk -sl -sv -sv_SE -tr -uk -zh -zh_CN -zh_TW (-bn%) (-bn_IN%) (-cy%) (-eo%) (-et%) (-gl%) (-hi%) (-hi_IN%) (-id%) (-is%) (-kn%) (-lv%) (-mr%) (-oc%) (-si%) (-sq%) (-sr%) (-te%) (-th%) 25,401 kB [ebuild N] gnome-extra/yelp-2.22.1-r2 USE=-beagle -debug -lzma -xulrunner 0 kB [ebuild U ] app-admin/gamin-0.1.10 [0.1.9-r1] USE=(-debug%) (-python%*) 0 kB [ebuild N] dev-libs/libgamin-0.1.10 USE=python -debug 639 kB [ebuild N] app-admin/gam-server-0.1.10 USE=-debug 0 kB [blocks B ] app-admin/gamin-0.1.10 (is blocking app-admin/gam-server-0.1.10, dev-libs/libgamin-0.1.10) Total: 13 packages (8 upgrades, 2 downgrades, 3 new, 1 block), Size of downloads: 46,185 kB As you can see the first package to upgrade is portage. Then 'emerge portage' and after 'emerge -NDpvu world' and here the new output: localhost ~ # emerge -NDpvu world These are the packages that would be merged, in order: Calculating dependencies... done! [ebuild U ] dev-libs/expat-2.0.1-r1 [2.0.1] 0 kB [ebuild U ] dev-libs/eventlog-0.2.9 [0.2.7] 323 kB [ebuild U ] app-shells/bash-3.2_p39 [3.2_p33] USE=nls -afs -bashlogger -examples% -plugins -vanilla 19 kB [ebuild U ] sys-libs/e2fsprogs-libs-1.41.3-r1 [1.41.3] USE=nls 0 kB [ebuild U ] app-editors/nano-2.1.7-r1 [2.1.7] USE=ncurses nls unicode -debug -justify -minimal -slang -spell 0 kB [ebuild U ] sys-devel/autoconf-2.63 [2.61-r2] USE=-emacs 1,527 kB [ebuild U ] app-portage/gentoolkit-0.2.4.2-r1 [0.2.4.2] 0 kB [ebuild U ] dev-libs/check-0.9.5-r1 [0.9.5] 0 kB [ebuild U ] x11-libs/qt-3.3.8b-r1 [3.3.8-r4] USE=cups ipv6 opengl -debug -doc -examples (-firebird) -immqt -immqt-bc -mysql -nas -nis -odbc -postgres -sqlite -xinerama (-gif%) 16,909 kB [ebuild UD] www-client/mozilla-firefox-2.0.0.19 [3.0.5] USE=ipv6 -bindist -debug% -filepicker% -gnome -iceweasel -java -mozdevelop -moznopango% -restrict-javascript -xforms% -xinerama% -xprint% (-custom-optimization%) (-dbus%) (-startup-notification%) (-xulrunner%*) LINGUAS=it -af -ar -be -bg -ca -cs -da -de -el -en -en_GB -en_US -es -es_AR -es_ES -eu -fi -fr -fy -fy_NL -ga -ga_IE -gu -gu_IN -he -hu -ja -ka -ko -ku -lt -mk -mn -nb -nb_NO -nl -nn -nn_NO -pa -pa_IN -pl -pt -pt_BR -pt_PT -ro -ru -sk -sl -sv -sv_SE -tr -uk -zh -zh_CN -zh_TW (-bn%) (-bn_IN%) (-cy%) (-eo%) (-et%) (-gl%) (-hi%) (-hi_IN%) (-id%) (-is%) (-kn%) (-lv%) (-mr%) (-oc%) (-si%) (-sq%) (-sr%) (-te%) (-th%) 25,401 kB [ebuild N
Re: [gentoo-user] Restricting Firefox website access
On Friday 09 January 2009 19:32:15 Grant wrote: Does portage use wget over http by default? Can I change a setting to make it use ftp? $ grep -i wget /etc/make.conf FETCHCOMMAND=/usr/bin/wget --progress=bar:force -t 2 -T 30 --passive-ftp \${URI} -P \${DISTDIR} -- Rgds Peter
Re: [gentoo-user] Trouble with portage
You have several issues here. First of all, a tip: If a portage upgrade is available, do emerge portage first. New versions of portage often have new or improved features - in this case portage 2.1.6 includes, among other things, the ability to automatically handle most blockers. The blocker says that gamin 1.10 is blocking the gamin-server 1.10 package. This looks to me like gamin has been split into multiple parts or renamed. portage 2.1.6 should handle this block automatically. On to your next issue where 2 versions of firefox are being pulled in. First of all you need to remove the package.mask entry you added, since it masked out all versions of firefox above 2.0.0 - that includes both firefox 2 and firefox 3 - not particularly useful. The correct resolution here is not obvious. You need to edit your /etc/make.conf and set -firefox xulrunner. This is because a core piece of the mozilla framework, on which firefox is built, called xulrunner has been split out from the firefox package. This will help to avoid issues in the future and allow for faster upgrades. This change should get all applications using firefox 3 instead of firefox 2. AllenJB econti wrote: Hi all, to-day I am having some trouble to update my system. Well, 'emerge --sync' and I received a message telling me a new version of portage is available and I should update it immediately. But, before upgrading it I ran 'emerge -NDpvu world'. Here is the output: localhost ~ # emerge -NDpvu world These are the packages that would be merged, in order: Calculating world dependencies | !!! The following installed packages are masked: - app-admin/gnome-system-tools-2.14.0 (masked by: package.mask) /usr/portage/profiles/package.mask: # Gilles Dartiguelongue e...@gentoo.org (12 Apr 2008) # Masking gnome-system-tools because it is broken, # to help fix it, see bug #214265 - app-admin/system-tools-backends-1.4.2-r1 (masked by: package.mask) - media-video/realplayer-11.0.0.4028-r1 (masked by: package.mask) /usr/portage/profiles/package.mask: # Steve Dibb bean...@gentoo.org (5 Nov 2008) # Mask realplayer, real codecs for security, upstream issues, bug 245662 # http://forums.gentoo.org/viewtopic-t-713051.html !!! Ebuilds for the following packages are either all !!! masked or don't exist: app-admin/gnome-system-tools media-video/realplayer ... done! [ebuild U ] sys-apps/portage-2.1.6.4 [2.1.4.5] USE=-build -doc -epydoc (-selinux) LINGUAS=-pl 0 kB *** Portage will stop merging at this point and reload itself, then resume the merge. [ebuild U ] dev-libs/expat-2.0.1-r1 [2.0.1] 0 kB [ebuild U ] dev-libs/eventlog-0.2.9 [0.2.7] 323 kB [ebuild U ] app-shells/bash-3.2_p39 [3.2_p33] USE=nls -afs -bashlogger -examples% -plugins -vanilla 19 kB [ebuild UD] app-editors/nano-2.0.9 [2.1.7] USE=ncurses nls unicode -debug -justify -minimal -slang -spell 1,371 kB [ebuild U ] sys-devel/autoconf-2.63 [2.61-r2] USE=-emacs 1,527 kB [ebuild U ] dev-libs/check-0.9.5-r1 [0.9.5] 0 kB [ebuild U ] x11-libs/qt-3.3.8b-r1 [3.3.8-r4] USE=cups ipv6 opengl -debug -doc -examples (-firebird) -immqt -immqt-bc -mysql -nas -nis -odbc -postgres -sqlite -xinerama (-gif%) 16,909 kB [ebuild UD] www-client/mozilla-firefox-2.0.0.19 [3.0.5] USE=ipv6 -bindist -debug% -filepicker% -gnome -iceweasel -java -mozdevelop -moznopango% -restrict-javascript -xforms% -xinerama% -xprint% (-custom-optimization%) (-dbus%) (-startup-notification%) (-xulrunner%*) LINGUAS=it -af -ar -be -bg -ca -cs -da -de -el -en -en_GB -en_US -es -es_AR -es_ES -eu -fi -fr -fy -fy_NL -ga -ga_IE -gu -gu_IN -he -hu -ja -ka -ko -ku -lt -mk -mn -nb -nb_NO -nl -nn -nn_NO -pa -pa_IN -pl -pt -pt_BR -pt_PT -ro -ru -sk -sl -sv -sv_SE -tr -uk -zh -zh_CN -zh_TW (-bn%) (-bn_IN%) (-cy%) (-eo%) (-et%) (-gl%) (-hi%) (-hi_IN%) (-id%) (-is%) (-kn%) (-lv%) (-mr%) (-oc%) (-si%) (-sq%) (-sr%) (-te%) (-th%) 25,401 kB [ebuild N] gnome-extra/yelp-2.22.1-r2 USE=-beagle -debug -lzma -xulrunner 0 kB [ebuild U ] app-admin/gamin-0.1.10 [0.1.9-r1] USE=(-debug%) (-python%*) 0 kB [ebuild N] dev-libs/libgamin-0.1.10 USE=python -debug 639 kB [ebuild N] app-admin/gam-server-0.1.10 USE=-debug 0 kB [blocks B ] app-admin/gamin-0.1.10 (is blocking app-admin/gam-server-0.1.10, dev-libs/libgamin-0.1.10) Total: 13 packages (8 upgrades, 2 downgrades, 3 new, 1 block), Size of downloads: 46,185 kB As you can see the first package to upgrade is portage. Then 'emerge portage' and after 'emerge -NDpvu world' and here the new output: localhost ~ # emerge -NDpvu world These are the packages that would be merged, in order: Calculating dependencies... done! [ebuild U ] dev-libs/expat-2.0.1-r1 [2.0.1] 0 kB [ebuild U ] dev-libs/eventlog-0.2.9 [0.2.7] 323 kB [ebuild U ] app-shells/bash-3.2_p39 [3.2_p33] USE=nls -afs -bashlogger -examples% -plugins -vanilla 19 kB [ebuild U ] sys-libs/e2fsprogs-libs-1.41.3-r1
Re: [gentoo-user] Re: kernel linux-2.6.27-gentoo-r7 won't load network!
On Saturday 10 January 2009 12:26:09 Mick wrote: On Saturday 10 January 2009, Dale wrote: Neil Bothwick wrote: On Fri, 9 Jan 2009 22:37:44 +, Mick wrote: Filed a bug and it was suggested to me that I try building the alsa drivers as modules. I tried it on for size and guess what, it worked! AFAIR the Gentoo ALSA docs have always recommended building as modules. And yet I have never used modules for anything except Nvidia. That has worked for me over 5 years now. What a puzzle. Same here. With three different machines I had alsa built in the kernel, less that six months or so after alsa first became part of the kernel (can't remember if I was running stable back then). My money says that if you track this down to the exact lines of code that cause the problem, you'll find something along the lines of incorrect loading order. As in, module A must load before module B, but you compiled B into the kernel. Plus no dev picked it up and nobody coded a check for it. I believe the correct technical term for this is a software bug :-) It's usually worth the effort to report a bug, the least that can happen is someone else's life is easier in the future -- alan dot mckinnon at gmail dot com
Re: [gentoo-user] Network printing
On Wednesday 07 January 2009 14:20:24 BRM wrote: From what I can see in this new thread this year, you just need to do the couple steps to make your Workstations work as CUPS Clients by configuring it as a client and then it should work. Of course it should. It does not. I simply cannot find the necessary invocations and USE flags etc. No matter what I try I cannot get printing to work over the network. I always get a succession of success messages from cups, followed by printer does not exist when I try to print a test page. That's a pretty strange definition of success in anybody's book. Even a straightforward postscript laser cannot be made to work now. I'm going to give it up altogether as a lost cause. Every machine on the network will have to have the printers set up locally, and be carried to where the printers are whenever a print job is needed. This is one giant black mark for Linux, the ultimate networking OS. I've been using Linux on-and-off for about 15 years, but I'm seriously considering the future of it in this house. Thanks for trying to help. -- Rgds Peter
Re: [gentoo-user] Trouble with portage
AllenJB gentoo-li...@allenjb.me.uk writes: First of all, a tip: If a portage upgrade is available, do emerge portage first. New versions of portage often have new or improved features - in this case portage 2.1.6 includes, among other things, the ability to automatically handle most blockers. Though even the portage2.2 pre-releases do not handle all the cases that should be able to be handled automatically. An example is one which encountered yesterday - foo-x-y-z was already installed and foo-x-y+1-0 was available for update. There are already installed packages which have (R)DEPEND==foo-x.y* and others with (R)DEPEND==foo-x.0.0. So the already installed foo-x.y.z satisfies all the depends, but the new foo-x.y+1.0 does not. Yet 'emerge -auDv world' flagged a conflict of trying to install two versions of an unslotted package - when the 'obvious' resolution would be keep the already installed version and not upgrade rather than requiring the user to manually mask the new version. Not only is this less work for the user, but it would also allow the automatic upgrade if and when the packages with the specific dependency on the lower version were changed to allow the newer one without the user having to track the blocking ebuilds to see when the (R)DEPENDs change and then manually remove the mask.
[gentoo-user] Re: Trouble with portage
Graham Murray wrote: AllenJB gentoo-li...@allenjb.me.uk writes: First of all, a tip: If a portage upgrade is available, do emerge portage first. New versions of portage often have new or improved features - in this case portage 2.1.6 includes, among other things, the ability to automatically handle most blockers. Though even the portage2.2 pre-releases do not handle all the cases that should be able to be handled automatically. An example is one which encountered yesterday - foo-x-y-z was already installed and foo-x-y+1-0 was available for update. There are already installed packages which have (R)DEPEND==foo-x.y* and others with (R)DEPEND==foo-x.0.0. So the already installed foo-x.y.z satisfies all the depends, but the new foo-x.y+1.0 does not. Yet 'emerge -auDv world' flagged a conflict of trying to install two versions of an unslotted package - when the 'obvious' resolution would be keep the already installed version and not upgrade rather than requiring the user to manually mask the new version. I disagree with you because when I tell emerge to update, it should update rather then not update :P
Re: [gentoo-user] Network printing
Peter Humphrey schrieb: Of course it should. It does not. I simply cannot find the necessary invocations and USE flags etc. No matter what I try I cannot get printing to work over the network. I always get a succession of success messages from cups, followed by printer does not exist when I try to print a test page. That's a pretty strange definition of success in anybody's book. Even a straightforward postscript laser cannot be made to work now. I'm going to give it up altogether as a lost cause. Every machine on the network will have to have the printers set up locally, and be carried to where the printers are whenever a print job is needed. This is one giant black mark for Linux, the ultimate networking OS. I've been using Linux on-and-off for about 15 years, but I'm seriously considering the future of it in this house. Thanks for trying to help. I read your posts and it sound to me, you try to connect to the printers instead of your spoolserver. You say you configured both printers on one server with CUPS-Webpage. I assume this works and you can print a testpage with the Webpage. Then you wrote ServerName yourserver in /etc/cups/client.conf . You can now choose both printers in the applicationspecific printmenus, right? If this is the case and it still does not work, please provide some logentries. As one who uses linux for 15 years you should know that cups != linux. Regards Norman
Re: [gentoo-user] Restricting Firefox website access
1. Put all your mirror sites in the exception list. This can get tedious as some ebuilds list many mirrors for sources or 2. wget using ftp or 3. set up a proxy The easiest is #2 by far Does portage use wget over http by default? Can I change a setting to make it use ftp? - Grant I think you would do well to setup a squid proxy and block outbound traffic for the affected machines. We've had great success with squid in our environment. This gives you a tremendous amount of flexibility on your access control, and it means you don't have to be concerned about which transport methods are used when updating/installing. Added bonus is that the squid caches your Gentoo download objects. -- Matt
Re: [gentoo-user] wpa_supplicant with madwifi partially stopped working after remerge
Now the modules do correctly (I suppose) create the needed devices and the init scripts pull the interface up. But the boot messages complain about not having set WEP-Keys, which are set in the config file residing at /etc/wpa_supplicant/wpa_supplicant.conf. That results in my WLAN is associated to an unsecured access point in my area. I solved my problem. After the initial and working configuration for wpa_supplicant I also installed the wireless-tools. It was simply curiousity about the user interface of the latter. Sadly I forgot to unmerge it after playing around. Since the wireless-tools are preferred over wpa_supplicant by default the next boot tried to use the unconfigured wireless-tools. Greetings Jan
[gentoo-user] Re: [gentoo-cluster] Iozone on multiple nodes using ssh
Hi, thanks! On Sat, Jan 10, 2009 at 10:51 PM, t35t0r t35...@gmail.com wrote: d...@node73 ~ $ iozone -R -s 64k -t 1 -+m clientlist [...] Throughput test with 1 process Each process writes a 64 Kbyte file in 4 Kbyte records I know what you mean. I just gave the example, in the case the path of iozone is incorrect, what would happen, And the result is the error below will be print out: bash: /tmp/iozone: No such file or directory I just tried to proved that the path of iozone in my nodes is correct. # hostname directoryForTestFiles pathToIozoneOnEachHost node1 /net/NAS/awesomeFS /home/somewhere/bin/iozone node2 /net/NAS/awesomeFS /home/somewhere/bin/iozone node3 /net/NAS/awesomeFS /home/somewhere/bin/iozone Now, I almost gave up iozone. I have tried iometer, which is better at testing parallel fs as I know. It's very easy to config and run. -- wcw
Re: [gentoo-user] Re: kernel linux-2.6.27-gentoo-r7 won't load network!
On Saturday 10 January 2009, Alan McKinnon wrote: On Saturday 10 January 2009 12:26:09 Mick wrote: On Saturday 10 January 2009, Dale wrote: Neil Bothwick wrote: On Fri, 9 Jan 2009 22:37:44 +, Mick wrote: Filed a bug and it was suggested to me that I try building the alsa drivers as modules. I tried it on for size and guess what, it worked! AFAIR the Gentoo ALSA docs have always recommended building as modules. And yet I have never used modules for anything except Nvidia. That has worked for me over 5 years now. What a puzzle. Same here. With three different machines I had alsa built in the kernel, less that six months or so after alsa first became part of the kernel (can't remember if I was running stable back then). My money says that if you track this down to the exact lines of code that cause the problem, you'll find something along the lines of incorrect loading order. As in, module A must load before module B, but you compiled B into the kernel. Plus no dev picked it up and nobody coded a check for it. I noticed this when I built a kernel with sound as modules: CC [M] sound/core/pcm.o CC [M] sound/core/pcm_native.o sound/core/pcm_native.c: In function 'snd_pcm_fasync': sound/core/pcm_native.c:3255: warning: label 'out' defined but not used CC [M] sound/core/pcm_lib.o CC [M] sound/core/pcm_timer.o also noticed: LD [M] sound/pci/ac97/snd-ac97-codec.o LD sound/synth/built-in.o LD sound/usb/built-in.o LD vmlinux.o MODPOST vmlinux.o WARNING: modpost: Found 1 section mismatch(es). To see full details build your kernel with: 'make CONFIG_DEBUG_SECTION_MISMATCH=y' I believe the correct technical term for this is a software bug :-) It's usually worth the effort to report a bug, the least that can happen is someone else's life is easier in the future I have filed bug 253110 for my problem (sound) but not for the OP. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Restricting Firefox website access
You could use iptables to block all traffic headed to port 80 with exceptions for the domains you need. Would that cause problems with fetching packages for emerges? - Grant Why not just put a limit to a traffic from/to a specific user account(s) or groups, leaving root unrestricted? Makes sense, since root would be able to lift any restriction, anyway ;) That sounds good, how can I do that? - Grant
Re: [gentoo-user] Restricting Firefox website access
1. Put all your mirror sites in the exception list. This can get tedious as some ebuilds list many mirrors for sources or 2. wget using ftp or 3. set up a proxy The easiest is #2 by far Does portage use wget over http by default? Can I change a setting to make it use ftp? - Grant I think you would do well to setup a squid proxy and block outbound traffic for the affected machines. We've had great success with squid in our environment. This gives you a tremendous amount of flexibility on your access control, and it means you don't have to be concerned about which transport methods are used when updating/installing. Added bonus is that the squid caches your Gentoo download objects. Is that tough to set up? I would think an iptables solution would be easier, but maybe that won't work out. - Grant
Re: [gentoo-user] non-PHP webmail in portage?
Does anyone know of a good (or OK) webmail client in portage that doesn't use PHP? I use squirrelmail now but I have PHP installed only for that and I think PHP slows apache2 down a bit. - Grant There are bunch of python webmail systems, just type 'python webmail' into google. And if you're looking for performance I would suggest to abstrain from cgi and apache in favor of fcgi with daemons like nginx or lighttpd. I don't think I'll find any in portage. Typing webmail into gentoo-portage.com brings up only horde and squirrelmail and they both use PHP. - Grant
Re: [gentoo-user] non-PHP webmail in portage?
Does anyone know of a good (or OK) webmail client in portage that doesn't use PHP? I use squirrelmail now but I have PHP installed only for that and I think PHP slows apache2 down a bit. - Grant I don't think you'll find anything faster except maybe written in C, which is doubtful. The only other language you might find webmail written in is Perl/CGI and that is definitely not faster in my experience. PHP is about as good as you will get IMHO. I actually don't mean to speed up squirrelmail and PHP. The main function of that system is to run a website in perl, and I thought I might be bogging down apache2 a bit just by opening it up to PHP interpretation (-D PHP). Is that the case? It would also be nice not to be exposed to PHP exploits. It just seems kind of silly to maintain and run PHP just for webmail. - Grant
Re: [gentoo-user] non-PHP webmail in portage?
On Sat, 10 Jan 2009 10:04:31 -0800 Grant emailgr...@gmail.com wrote: Does anyone know of a good (or OK) webmail client in portage that doesn't use PHP? I use squirrelmail now but I have PHP installed only for that and I think PHP slows apache2 down a bit. - Grant I don't think you'll find anything faster except maybe written in C, which is doubtful. The only other language you might find webmail written in is Perl/CGI and that is definitely not faster in my experience. PHP is about as good as you will get IMHO. I actually don't mean to speed up squirrelmail and PHP. The main function of that system is to run a website in perl, and I thought I might be bogging down apache2 a bit just by opening it up to PHP interpretation (-D PHP). Is that the case? It would also be nice not to be exposed to PHP exploits. It just seems kind of silly to maintain and run PHP just for webmail. You could try running a second webserver instance for the webmail, allowing the main one to run without PHP loaded. RobbieAB. signature.asc Description: PGP signature
Re: [gentoo-user] Restricting Firefox website access
I think you would do well to setup a squid proxy and block outbound traffic for the affected machines. We've had great success with squid in our environment. This gives you a tremendous amount of flexibility on your access control, and it means you don't have to be concerned about which transport methods are used when updating/installing. Added bonus is that the squid caches your Gentoo download objects. Is that tough to set up? I would think an iptables solution would be easier, but maybe that won't work out. Well, you'll end up using iptables anyway right? If you really want to -force- folks to get out through a proxy, that is. Since you mention that the router is a gentoo box, should be an easy one. Tough to setup Squid? Naw. Of course, it's like most things, we don't know much about your network or the scope of your requirements. For our use case, we needed the following: -forced access through the proxy -website URL blacklisting and custom redirection based on massive regex lists --Automated notification on certain 'violations' -user account login to the proxy before internet access -username tied to all proxy logs -'manager' access to log data via nifty graphs on a web server So, ours took some time. :) Ya, I know these folks were uuber paranoid, and wanted the ability to nab folks for what they felt like was inappropriate internet usage... Anyway your situation sounds much simpler. So simple in fact that just a few tweaks to the default squid.conf can provide you with a functional config. There are heaps of doco out there on configuring Squid, so you should have a look and see what you think. You can easily get a little test proxy going on a desktop or laptop to try it out. :-) Hope this helps! -- Matt
Re: [gentoo-user] Microphone not working
The microphone on my laptop isn't working and I'm not sure how to troubleshoot it. I've tried using it in twinkle and arecord but it doesn't work in either. The headset works fine on a different system. Can anyone help with this? Chipset of the audio card? Laptop model? It's one of those built-in intel-hda cards and the laptop is an Acer. The mic actually used to work. We have the same problem then! I had a laptop Acer (now it's my girfriends') Aspire 5720G. After a kernel upgrade the mic stopped working. So far I had no luck. My girlfriend just bought an external microphone (she's more pragmatic than me) and that worked. Sorry I'm not able to help. You guys might need to specify your specific model of hda-intel in /etc/modprobe.d/alsa since it may not be auto-detecting the capabilities of which chipset your laptop has. For example on my desktop I added this line: options snd-hda-intel model=6stack-dig Please read the kernel module documentation for a large list of hda-intel chips and configurations. Hopefully you can find one that works for you (if that has anything to do with it). /usr/src/linux/Documentation/sound/alsa/ALSA-Configuration.txt good luck :) Paul Thanks Paul. I've been using model=acer and I just tried a couple others, some worked some didn't. I also tried removing and replacing my second USB sound card definition. The strange thing is I've come back to my original config and it's working now. Could another file have gotten out of order and my playing with the settings got it back together? - Grant
Re: [gentoo-user] Microphone not working
Thanks Paul. I've been using model=acer and I just tried a couple others, some worked some didn't. I also tried removing and replacing my second USB sound card definition. The strange thing is I've come back to my original config and it's working now. Could another file have gotten out of order and my playing with the settings got it back together? I'm glad you could make it. Can you send the relevant configuration files?
Re: [gentoo-user] Microphone not working
Thanks Paul. I've been using model=acer and I just tried a couple others, some worked some didn't. I also tried removing and replacing my second USB sound card definition. The strange thing is I've come back to my original config and it's working now. Could another file have gotten out of order and my playing with the settings got it back together? I'm glad you could make it. Can you send the relevant configuration files? Sure, here it is, but this config was also not working. I tried model=alsa-aspire, model=auto, and I removed the second sound card definition. I eventually brought it back to the way it originally was and now it's working. Weird. alias char-major-116 snd alias char-major-14 soundcore alias snd-card-0 snd-hda-intel options snd-hda-intel index=0 options snd-hda-intel model=acer alias snd-card-1 snd-usb-audio options snd-usb-audio index=1 alias sound-service-0-0 snd-mixer-oss alias sound-service-0-1 snd-seq-oss alias sound-service-0-3 snd-pcm-oss alias sound-service-0-8 snd-seq-oss alias sound-service-0-12 snd-pcm-oss alias /dev/mixer snd-mixer-oss alias /dev/dsp snd-pcm-oss alias /dev/midi snd-seq-oss options snd cards_limit=2 - Grant
Re: [gentoo-user] Can't play audio cds!
On Tue, 2008-10-07 at 09:45 +0300, Liviu Andronic wrote: On Mon, Oct 6, 2008 at 8:16 PM, Michael Sullivan mich...@espersunited.com wrote: checked the log file, but I couldn't find anything. I couldn't mount my CD (in the past this wasn't necessary for audio CDs, but I thought I'd As far as I know, the Linux kernel cannot mount Audio CDs. The one programme that on my system works with Audio CDs is Gnome-mplayer. You might also try VLC. Another option is to rip them with Grip. Regards, Liviu I wrote in about this problem awhile ago and never got an answer. This morning I was googling the problem and came across the thread I created on an archive site and looked at it just to see if there was anything I'd missed. There was a reply to it that I hadn't seen before, so I read it. I don't know why I never received the reply, but it suggested using mplayer cdda:// and posting the error messages. I tried it and it works; it plays my audio cd: mich...@camille ~ $ mplayer cdda:// MPlayer dev-SVN-r28058-4.1.2 (C) 2000-2008 MPlayer Team CPU: Intel(R) Celeron(R) CPU 2.66GHz (Family: 15, Model: 4, Stepping: 1) CPUflags: MMX: 1 MMX2: 1 3DNow: 0 3DNow2: 0 SSE: 1 SSE2: 1 Compiled with runtime CPU detection. Can't open joystick device /dev/input/js0: No such file or directory Can't init input joystick mplayer: could not connect to socket mplayer: No such file or directory Failed to open LIRC support. You will not be able to use your remote control. Playing cdda://. Found audio CD with 17 tracks. Track 1 rawaudio file format detected. == Opening audio decoder: [pcm] Uncompressed PCM audio decoder AUDIO: 44100 Hz, 2 ch, s16le, 1411.2 kbit/100.00% (ratio: 176400-176400) Selected audio codec: [pcm] afm: pcm (Uncompressed PCM) == AO: [oss] 44100Hz 2ch s16le (2 bytes per sample) Video: no video Starting playback... A: 9.0 (09.0) of 3701.7 ( 1:01:41.7) 8.6% MPlayer interrupted by signal 2 in module: play_audio A: 9.0 (09.0) of 3701.7 ( 1:01:41.7) 8.6% Exiting... (Quit) However, kscd does not. The interface looks like it's playing, but there's no audio output: mich...@camille ~ $ kscd QWidget::setProperty( text, value ) failed: property invalid, read-only or does not exist kdecore (KConfigSkeleton): Creating KConfigSkeleton (0x80ed298) kdecore (KConfigSkeleton): KConfigSkeleton::readConfig() kdecore (KConfigSkeleton): Creating KConfigSkeleton (0x8109610) kdecore (KConfigSkeleton): KConfigSkeleton::readConfig() kscd: Device change: WM_CDIN, /dev/cdrom, , , status: Stopped kscd: Volume change: 100, status: Success mich...@camille ~ $ kscd: New discId=3859707153 kscd: lookupCDDB() called kdecore (KConfigSkeleton): KConfigSkeleton::readConfig() libkcddb: Looking up e60e7511 in CDDB cache kdecore (KConfigSkeleton): Creating KConfigSkeleton (0xbfb4a1f4) kdecore (KConfigSkeleton): KConfigSkeleton::readConfig() libkcddb: Loaded CDInfo for e60e7511 libkcddb: Found 1 hit(s) kdecore (KConfigSkeleton): KConfigSkeleton::writeConfig() kdecore (KConfigSkeleton): KConfigSkeleton::readConfig() As far as I can tell, the logs have nothing to say about this problem. Unless I'm looking in the wrong log. I checked /var/log/messages and there is no mention of kscd anywhere. dmesg has the same two lines repeated over and over again: i2c-adapter i2c-1: master_xfer[1] R, addr=0x40, len=3 i2c-adapter i2c-1: master_xfer[0] W, addr=0x40, len=2 with one variation at the very top: adapter i2c-1: master_xfer[1] R, addr=0x40, len=2 If I try to play my CD in VLC, I get this error: Your input can't be opened: VLC is unable to open the MRL 'cdda:///dev/hda'. Check the log for details. but I can't find VLC's log file. Can anyone clue me in to where it is? I checked /dev/hda (which IS my cd-rom drive): camille ~ # ls -l /dev/hda brwxrwxrwx 1 root cdrom 3, 0 Dec 28 15:15 /dev/hda and I AM in the cdrom group: camille ~ # grep cdrom /etc/group cdrom:x:19:michael,haldaemon I'm using gnome: camille log # emerge -pv gnome These are the packages that would be merged, in order: Calculating dependencies... done! [ebuild R ] gnome-base/gnome-2.22.3 USE=cdr cups dvdr esd ldap -accessibility -mono 0 kB Total: 1 package (1 reinstall), Size of downloads: 0 kB Can anyone help me fix this with this new information? -Michael Sullivan-
Re: [gentoo-user] Microphone not working
On Sat, Jan 10, 2009 at 9:25 PM, Grant emailgr...@gmail.com wrote: Thanks Paul. I've been using model=acer and I just tried a couple others, some worked some didn't. I also tried removing and replacing my second USB sound card definition. The strange thing is I've come back to my original config and it's working now. Could another file have gotten out of order and my playing with the settings got it back together? I'm glad you could make it. Can you send the relevant configuration files? Sure, here it is, but this config was also not working. I tried model=alsa-aspire, model=auto, and I removed the second sound card definition. I eventually brought it back to the way it originally was and now it's working. Weird. Thanks a lot. I hope it works, but if you said it was not working the first time, probably there is some other configuration required. Let's see what happens. Best regards, Damian. alias char-major-116 snd alias char-major-14 soundcore alias snd-card-0 snd-hda-intel options snd-hda-intel index=0 options snd-hda-intel model=acer alias snd-card-1 snd-usb-audio options snd-usb-audio index=1 alias sound-service-0-0 snd-mixer-oss alias sound-service-0-1 snd-seq-oss alias sound-service-0-3 snd-pcm-oss alias sound-service-0-8 snd-seq-oss alias sound-service-0-12 snd-pcm-oss alias /dev/mixer snd-mixer-oss alias /dev/dsp snd-pcm-oss alias /dev/midi snd-seq-oss options snd cards_limit=2 - Grant
[gentoo-user] nfs failing to start
I've apparently forgotten whatever little I may have know about setting up nfs from having used it long ago. I found a brief help page on google that I used to get this far along at: http://linux-bsd-sharing.blogspot.com/2008/09/howto-setup-nfs-server-on-gentoo.html Its very brief and has no debugging info. Also I see nothing about debugging in /etc/conf.d/nfs either. After setting all nfs related kernel items and booting the kernel. Checking that mods appears to be installed and running. Making sure portmapper is running. Then when I try to start nfs service if it fails. Producing these messages in syslogd: Jan [...] nfsd[29077]: nfssvc: Protocol not supported Jan [...' : RPC: failed to contact local rpcbind server (errno 5). Only one of the nfssvc lines appear but the RPC line appears several times. I got the impression from google that nfssvc was related to nfs4 so may not mean too much ... but not sure. I don't really know what info would be helpfull but have included output from emerge, rpcinfo, lsmod and related kernel settings: qlop [...] Sat Jan 10 18:30:11 2009 net-libs/libnfsidmap-0.21-r1 Sat Jan 10 18:30:30 2009 net-nds/portmap-6.0 Sat Jan 10 18:31:20 2009 dev-libs/libevent-1.4.9 Sat Jan 10 18:32:39 2009 net-fs/nfs-utils-1.1.4 = * = * = * = kernel: # grep 'NFS\|RPC' .config # CONFIG_AF_RXRPC is not set CONFIG_NFS_FS=m CONFIG_NFS_V3=y CONFIG_NFS_V3_ACL=y CONFIG_NFS_V4=y CONFIG_NFSD=m CONFIG_NFSD_V2_ACL=y CONFIG_NFSD_V3=y CONFIG_NFSD_V3_ACL=y CONFIG_NFSD_V4=y CONFIG_NFS_ACL_SUPPORT=m CONFIG_NFS_COMMON=y CONFIG_SUNRPC=m CONFIG_SUNRPC_GSS=m CONFIG_SUNRPC_REGISTER_V4=y CONFIG_RPCSEC_GSS_KRB5=m # CONFIG_RPCSEC_GSS_SPKM3 is not set = * = * = * = rpcinfo -p localhost # rpcinfo -p localhost program vers proto port 102 tcp111 portmapper 102 udp111 portmapper 1000241 udp 34971 status 1000241 tcp 43460 status 151 udp 34365 mountd 151 tcp 44349 mountd 152 udp 34365 mountd 152 tcp 44349 mountd 153 udp 34365 mountd 153 tcp 44349 mountd = * = * = * = lsmod Module Size Used by nfs 206772 0 nfsd 185008 9 lockd 55160 2 nfs,nfsd nfs_acl 2688 2 nfs,nfsd auth_rpcgss28548 1 nfsd sunrpc144584 9 nfs,nfsd,lockd,nfs_acl,auth_rpcgss exportfs3456 1 nfsd fuse 42268 0 usbhid 13588 0 usbmouse3712 0 usbkbd 4992 0 floppy 45348 0 pcspkr 2176 0 i2c_i8017952 0 r8169 26500 0 i2c_core 17680 1 i2c_i801 mii 4224 1 r8169 snd_intel8x0 25500 0 snd_ac97_codec 88352 1 snd_intel8x0 ehci_hcd 28684 0 uhci_hcd 18444 0 ac97_bus1536 1 snd_ac97_codec snd_pcm48008 2 snd_intel8x0,snd_ac97_codec snd_timer 15364 1 snd_pcm snd34788 4 snd_intel8x0,snd_ac97_codec,snd_pcm,snd_timer usbcore 104760 6 usbhid,usbmouse,usbkbd,ehci_hcd,uhci_hcd snd_page_alloc 7304 2 snd_intel8x0,snd_pcm intel_agp 22588 1 agpgart25520 1 intel_agp button 5904 0
Re: [gentoo-user] Restricting Firefox website access
On Sat, 10 Jan 2009 09:48:10 -0800 Grant emailgr...@gmail.com wrote: That sounds good, how can I do that? iptables module owner handles that stuff, just man iptables if you'll have any trouble. iptables -A OUTPUT -m owner --uid-owner someuser -m tcp --dport http -j REJECT Alternatively, you can use numeric uid or match user group: iptables -A OUTPUT -m owner --gid-owner users -m tcp --dport http -j REJECT As simple as that ;) If blocking every possible user is too much trouble or you wish to block just firefox, but not wget to http port for _all_ users (not the same case as emerge from root) you can write a simple SUID wrapper for firefox binary, which changes group to restricted one (but leaves uid and home unchanged), then launches true firefox binary, to which only that group has access. -- Mike Kazantsev // fraggod.net signature.asc Description: PGP signature
Re: [gentoo-user] Restricting Firefox website access
Grant emailgr...@gmail.com wrote: That sounds good, how can I do that? iptables module owner handles that stuff, just man iptables if you'll have any trouble. iptables -A OUTPUT -m owner --uid-owner someuser -m tcp --dport http -j REJECT Alternatively, you can use numeric uid or match user group: iptables -A OUTPUT -m owner --gid-owner users -m tcp --dport http -j REJECT As simple as that ;) If blocking every possible user is too much trouble or you wish to block just firefox, but not wget to http port for _all_ users (not the same case as emerge from root) you can write a simple SUID wrapper for firefox binary, which changes group to restricted one (but leaves uid and home unchanged), then launches true firefox binary, to which only that group has access. -- Mike Kazantsev // fraggod.net Thanks Mike, that sounds like exactly what I should do. - Grant
[gentoo-user] [cifs] permissions of mounted share
Note this is a cross post here and debian.user.. the server is gentoo the client is debian. It's kind of a phony cross post though since I didn't think to do this until I'd already posted on debian user... So its really a second post with the same content. Some consider that a phaux paux(?)... So please forgive with my explanation. Content: I'm using samba and cifs to mount a certain directory on a linux (gentoo) machine (Which will also be accessed by windows machines [but not yet]). On the server machine I've created the directory `projects'. With permissions 755 and ownership reader:wheel This is mounted from a machine runnning debian lenny like this in fstab: (wrapped for mail at the `\') (Note the host name is reader .. not to be confused with user reader) //reader/smProjects /projects cifs noauto,username=reader,\ credentials=/etc/samba/CifsCredentials,uid=reader,gid=wheel OK, with /projects share mounted on the deb machine, I attempt to copy a directory (oneA) of files into it with `cp -a oneA /projects' Note that the same user reader in group wheel exists on both server and client machines. The permissions on oneA (on client) are 755 and the files inside are 644. When I attempt to carry out the copy action I get a slew of warnings like this: cp: setting permissions for `./oneA/...': Permission denied The cp is still carried out but all the files now have 744 permissions. If I drop the -a[rchive] flag and do the cp with `cp -R' its done silently but the permissions still end up 744 on what are regular files (that were 644) Any regular files I create on the mounted share end up 744. Can I set a umask in the mount syntax or what do I need to do here to have the files keep the standard permissions? Why are they being changed?