[gentoo-user] Re: new timezone data requires setting a symlink by hand
Why don't you just create /etc/timezone with Europe/Berlin as content? Huh? I always thought the proper place was the TIMEZONE variable in /etc/conf.d/clock: TIMEZONE=Europe/Berlin
[gentoo-user] Re: emerge nano ?
Dani Crisan wrote: * If you need support, post the topmost build error, and the call stack if relevant. Um... since you seem to need support, could you please post the topmost build error, and the call stack of relvant? make: *** [all] Error 2 is the bottommost build error, not the topmost. Look through the build messages for the first error, and post everything from that on down. -- gentoo-user@lists.gentoo.org mailing list
[gentoo-user] Re: Re: KAudioCreator - Stopped Working
Paul Sobey wrote: Wow, well done that man! I got bitten by broken config files often enough in the early KDE 3.x days, especially on minor version changes. It has gotten much better since 3.3 or so though, I'm actually a bit suprised... Also, changing from SuSE on reiserfs to gentoo on xfs helped big time, no hard resets necessary anmore, and if they are, xfs is able to cope. ReiserFS would pretty regularly mess up my config files. Meanwhile though, following Alan's suggestion I've discovered the command line ripper abcde, and actually prefer it. Yeah, it's a simple and neat little thing. I use it, too. And thank you for writing back to say it works, too often, people just quietly stop posting when some suggestion did it. Anno. -- gentoo-user@lists.gentoo.org mailing list
[gentoo-user] Re: smoothest way to jump from 2006 to 2008
Ian Graeme Hilt wrote: Download the 2008 minimal install cd and install. Frankly, updating a 2006 install to 2008 is counter-productive. You'll have a much easier time doing a fresh 2008 install. Why? If he kept his box up-to-date, there are just going to be some slight changes in the default use flags and some virtuals, probably not all that much to re-emerge. That's the beauty of gentoo: Continuous updating making big-bang upgrades unnecessary. Incremental changes are (usually, except when sombody decides to shuffle baselayout all around) small and can be dealt with easily. If you have kept your box up-to-date even on a 2006 profile, you will be current ebuild-version-wise, there's no need to throw that away. This box, for example, has been continuously kept up to date since Gentoo 1.4, before profiles were numbered by year (I think that was in 2004). Not a single reinstall was necessary, or even more productive than a simple update. Of course, I emerge --sync and emerge -auD weekly. -- gentoo-user@lists.gentoo.org mailing list
[gentoo-user] Re: smoothest way to jump from 2006 to 2008
Etaoin Shrdlu wrote: I don't want to comment about the change. However, you could have found out easily all the available profiles by doing eselect profile list: That's a cool eselect module, didn't know about that. I don't change profiles all that often (duh), and end up having to search for the new thingies manually. The automatic list is nice. -- gentoo-user@lists.gentoo.org mailing list
[gentoo-user] Re: KAudioCreator - Stopped Working
Paul Sobey wrote: How can I troubleshoot this? I've tried re-emerging, revdep-rebuild (doesn't rebuild anything), re-emerging kdemultimedia-kioslaves just in case, and now I'm out of ideas. In your $HOME/.kde/share/config directory, search for a file or file(s) called something like kaudiocreatorrc and perhaps similar files (I do not have it so I do not know if it perhaps uses several config files, they'll be easily identified by name, though), and rename them. Run kbuildsycoca, then try to start kaudiocreator again. If that doesn't help, try renaming the directory $HOME/.kde/share/apps/kaudiocreator, if it exists, and try again. If it's still not working, my last resort would be to file a bug. Anno. -- gentoo-user@lists.gentoo.org mailing list
[gentoo-user] Re: Would emerge --sync remove old profiles?
Mark Knecht wrote: Did this machine just get messed up over time and I didn't notice or did emerge --sync remove the profile from the system thus breaking everything? Sync does update profiles, which includes removing old ones that are no longer supported. I would't go as far as saying it breaks everything, after all, all you have to do is to set a new profile and emerge will work happily again. Do run the next update with -N, though, as the use flags included in the new profile may have changed versus the old one. -- gentoo-user@lists.gentoo.org mailing list
[gentoo-user] Re: SSH brute force attacks and blacklist.py
Justin wrote:
Try fail2ban
Alternatively, you can use the builtin iptables connection rate limiter.
Excerpt from my home-grown firewall script:
for port in $INPUT_LIMITER_TCPPORTS; do
$IPT_IN -p tcp --dport $port -m state --state NEW -m \
recent --name limit-${port} --set
$IPT_IN -p tcp --dport $port -m state --state NEW -m \
recent --name limit-${port} --rcheck --seconds
$INPUT_LIMITER_TIME --hitcount $INPUT_LIMITER_COUNT -j \
LOG --log-prefix limit-rjct-${port}
$IPT_IN -p tcp --dport $port -m state --state NEW -m \
recent --name limit-${port} --rcheck --seconds
$INPUT_LIMITER_TIME --hitcount $INPUT_LIMITER_COUNT -j REJECT \
$IPT_IN -p tcp --dport $port -m state --state NEW -j
LOG --log-level notice --log-prefix limit-acpt-${port} \
$IPT_IN -p tcp --dport $port -m state --state NEW -j ACCEPT
done
It limits the number of new connections on each port in
INPUT_LIMITER_TCPPORTS from any individual host to INPUT_LIMITER_COUNT
within INPUT_LIMITER_TIME.
More precisely, it does the following:
1. When a new connection is established by a previously unkown host, set a
mark (first rule).
2. When the number of marks from that host has exceeded the specified upper
connection limit, reject the connection (third rule), you could also drop.
3. Otherwise, accept the connection (fifth rule)
Rules numbers 2 and 4 are for logging purposes only, and have no impact on
functionality. By using --log-prefix, you can use your logging daemon's
filtering capabilities to sort these requests into new
The count is reset after INPUT_LIMITER_TIME seconds have passed. Thus, after
exceeding INPUT_LIMITER_COUNT, you have to wait for $INPUT_LIMITER_SECONDS
before a new attempt.
Oh yeah, $IPT_IN is shorthand for ${IPTABLES} -t filter -A INPUT, where
${IPTABLES} points to the iptables executable, of course.
The advantage of this solution is that it does not rely on log files parsing
or any other magic, it simply counts the number of connections from each
host on a specific port. It it does very easy on CPU and very stable, it
continues working as long as your kernel works.
The disadvantage is that it does not rely on log files parsing or any other
magic, it simply counts the number of connections from each host on a
specific port. It cannot do anything clever. Also, your iptables -L output
gets a bit cluttered by adding five rules for every port you want to
rate-limit.
Anno.
--
gentoo-user@lists.gentoo.org mailing list
[gentoo-user] Re: [nb] How to change permission on this
Amar Cosic wrote: I have a lot of dir. and files in my home directory. I want to chown all of it to my user. How to do this by one comand ? Thanks Hm. Is an answer of RTFM accepted on this mailing list? man chown. Specifically, take a long hard look at the -R option. -- gentoo-user@lists.gentoo.org mailing list
[gentoo-user] Re: KDE password
econti wrote: So . . . I unmerged all the single app, unmerged kdebase-kioslaves and emerged kdebase. Now all works as before. Wait, I don't get it. You have the single, all-in-one kdebase package installed (which, to the best of my knowledge, includes all kdebase-* packages), yet you emerge kdebase-kioslaves? Why? With KDE, either you go for the all-in-one-big-honking-package approach (kdebase proper), or you cherry pick what you need from the split packages (the kdebase-* packages). Same goes for the other kde core packages. If you want to switch from one big package to several small ones to save on recompiles for small updates, use kdebase-meta, which installs all of the kdebase split packages. Installing both the big kdebase package and the split packages makes no sense, IIRC. Me, I have all kdebase-* packages installed, but not kdebase. Anno. -- [EMAIL PROTECTED] mailing list
[gentoo-user] Re: Playsound . . . won't!
Mick wrote: Somewhat puzzled that a emerge -upDv world before I remerged flac did not pick these up . . . That can happen if sdl-sound is not in the worldfile and is not depended upon, directly or indirectly, by anything in the worldfile. This situation will arise if you emerge s/th requiring sdl-sound, and then later unmerge whatever required it. If you don't do a depclean, that will leave sdl-sound on your computer but outside of the world tree. Anno. -- [EMAIL PROTECTED] mailing list
[gentoo-user] Re: AMD/ATI to open source drviers?
This is completely OT, but anyway: ATI will not open their existing drivers, rather, they will provide the community with a newly-written basic 2D driver for their current chips and with sufficient open information to enhance that one. So they're not opening their driver, they're opening the specs (for which they are to be commended, IMO). Anno. -- [EMAIL PROTECTED] mailing list
[gentoo-user] Re: Re: insert text onto a PDF
Thufir wrote: Gimp seems to be primary tool for this, though Well, not necessarily. Any graphics program that can load pdf would work for what you want to do. Gimp is one of them, but Krita can import pdf, too. Also, if you have the poppler and netpbm packages installed, you can use pdftoppm and the corresponsing ppmtowhatever to convert the input into a whole plethora of graphic formats, use whatever graphics program you like for editing, and then convert in a similar way. So given the right external converters, your graphics program doesn't need to know about pdf. The workflow is 1) pdf to editable picture format 2) edit picture 3) picture back to pdf. gimp and krita can do steps one and two in one go, but with the host of tools at your disposal, you can accomplish this in any number of ways. Anno. -- [EMAIL PROTECTED] mailing list
[gentoo-user] Re: program autostart from another user [OT]
Aleksey V. Kunitskiy wrote: I'm confused - is the local.[start,stop] the same as start-stop-daemon? or not? No, the suggestion is to use start-stop-daemon instead of sudo. man start-stop-daemon for more information. You will still have to call start-stop-daemon from an init script for both starting and stopping. Either use local.[start|stop] or roll your own init script, using any existing init script as a template. Anno. -- [EMAIL PROTECTED] mailing list
[gentoo-user] Re: insert text onto a PDF
Thufir wrote: I emerged gimp, but am still emerging krita and kde. From gimp, as advertised, I was able to insert text and save the file as foo.xcf, but need krita, apparently, to convert the xcf file to a pdf, at least according to the tutorial. I don't understand. Why don't you have gimp export it to postscript and then use ps2pdf or somesuch? Or directly print it to cups-pdf, if installed? -- [EMAIL PROTECTED] mailing list
[gentoo-user] Re: which syslog?
Sven Köhler wrote: So the next thing i could try is metalog. Does it have a nice default config? I think so, but I did modify it to better suit my needs. It doesn't need logrotate, which IMHO is a big plus, and I find its filters much easier to set up than syslog-ng's. I am curious, though: If you like the sysklogd layout to the point that you want to replicate it exactly in other log daemons, why do you want to switch log daemons? Anno. -- [EMAIL PROTECTED] mailing list
[gentoo-user] Re: which syslog?
Sven Köhler wrote: But i guess, they have a more suitable default setting. Everything going to /var/log/messes is just to simple, i think. Actually i don't want the layout to be like sysklogd. But i would like a little more complicated default setting. Okay, in that case, I'll say that metalog has a very-sensible-to-me default setting, tweaking which I resisted for quite some time. What seems sensible to me might be lunacy to you, however, so have a go at it and see for yourself. Anno. -- [EMAIL PROTECTED] mailing list
[gentoo-user] Re: Clock is way off
Grant wrote: CLOCK=UTC TIMEZONE=US/Pacific That looks fine. Do you dual-boot with Windows? In this case, set CLOCK=local. If not, something else is amiss. Where does /etc/localtime point? Is it consistent with the entry in /etc/conf.d/clock? HTH, Anno. -- [EMAIL PROTECTED] mailing list
[gentoo-user] Re: slocate's index
Francesco Talamona wrote: I would add in a comment to the bug a pointer to the mailing list archive, but i can't find one I added a link to this discussion. Anno. -- [EMAIL PROTECTED] mailing list
[gentoo-user] Re: slocate's index
Florian Philipp wrote: I would like to know if there is a package, daemon or whatever that automatically updates an index to seach the file system. What about a cron script? -- [EMAIL PROTECTED] mailing list
[gentoo-user] Re: strange apache service dependency
Enrico Weigelt wrote: I've just seen that the apache2 service has an dependecy to the mysql service. Most likely it's an bug. I don't think so. At least on my computer, mysql is a 'use' dependency rather than a 'need' dependency. That is, if mysql is present, it will be started before apache, if mysql is not present, then apache starts regardless. Why do you think that's a bug? Anno. -- gentoo-user@gentoo.org mailing list
[gentoo-user] Re: quick kmail question
Matthew R. Lee wrote: When I click on a URL in an email it opens a new Konqueror window. However I have it set in my Konqueror configuration to Open as tab in existing Konqueror when URL is called externally I've looked through the KMail configuration settings but I can't find anywhere to change this. kfmclient newTab URL See also kfmclient --commands Anno. -- gentoo-user@gentoo.org mailing list
[gentoo-user] Re: chm file on a console?
Boris Sobolev wrote: Does anyone know a way or a program to view .chm files on console? Searched pretty hard to no avail. Please don't mention xchm. Well, there's chmlib, which comes with a tool to extract files from the chm, and archmage, which uses chmlib to make chm readable via apache (which then could be, presumably, be viewed with a console web browser such as w3m). Then, there's also something called chmtools. I didn't test or even try to install any of these programs, it's just the result of a short search, but it should give you some pointers for alternatives to xchm. Anno. -- gentoo-user@gentoo.org mailing list
[gentoo-user] Re: Is the best solution still NIS+NFS?
[EMAIL PROTECTED] wrote: But when the direction is windows = linux. How does cifs come into play? I don't quite get your question. CIFS/SMB is what Windows uses for its network shares. Using samba, Linux can both share and mount* CIFS volumes. Anno *) For mounting, you have to also compile SMB support into the kernel. -- gentoo-user@gentoo.org mailing list
[gentoo-user] Re: DMA for /dev/cdrom ?
Hi Andreas! I really like to use DMA for my cdrom/burner but I cant figure out how to make it working! tapa ~ # hdparm -d1 /dev/cdrom /dev/cdrom: setting using_dma to 1 (on) HDIO_SET_DMA failed: Operation not permitted using_dma= 0 (off) Two hints, perhaps they help - hdparm -i $DEVICE will display what the device can support - I would run hdparm on the physical device file, that is /dev/hdc, not on the cdrom-link. Does anyone of you know if there is DMA support for this cdrom-drive It sounds like a plain old ATAPI drive, so should work with the generic stuff. No specific knowledge about your drive, though. Anno -- gentoo-user@gentoo.org mailing list
[gentoo-user] Re: Fwd: Delivery Status Notification (Failure)
Shawn Haggett wrote: Mohammed Hagag wrote: [EMAIL PROTECTED]... User unknown gentoo-user@gentoo.org mailing list Spot the difference? Yeah, but the Listserv does set Reply-To: gentoo-user@lists.gentoo.org Anno. -- gentoo-user@gentoo.org mailing list
