Re: Instalacja Debian8 blad w Release

[Thomas Schmitt]

Hi,

Wojciech wrote:
> Suite: oldoldstable
> Codename: stretch
> Attention: not jessie

As stated by others without Cc-ing you:
Jessie is not supported any more.

See the "Follow-Ups" link list of your archived post at
  https://lists.debian.org/debian-user/2022/01/msg00391.html


> Correct destination link is oldoldoldstable (3xold and stable)
> Realease from http://ftp.pl.debian.org/debian/dists/oldoldoldstable/Release

It is somewhat astounding that "oldoldoldstable" exists.
All Debian info resources which i knew only list "oldoldstable".

But "oldoldoldstable", "jessie", and "Debian8.11" are indeed available on
the central server:
  https://ftp.debian.org/debian/dists/
  https://ftp.debian.org/debian/dists/README

I expect them to vanish in the future. But the snapshot links which i
proposed will stay hopefully much longer.
So depending on your plans how long to run Jessie it might be worth to
check already now whether the snapshots can substitute for the current
"oldoldoldstable".
(An alternative would be to copy the current "oldoldoldstable" repository
to a local filesystem.)


Have a nice day :)

Thomas

Re: OT: anybody uses eero 6 WiFi router?

[Alexander V. Makartsev]

On 14.01.2022 07:22, Juan R.D. Silva wrote:


Wikipedia says:

"On 3 August 2018, MikroTik routers were found to have been 
compromised by the Coinhive cryptocurrency malware."


"Beginning in June 2021, a botnet composed of unprotected Mikrotik 
devices created huge volumes of application-layer traffic using http 
pipelining, resulting in DDOS. The net was named Mēris (or Meris) by 
Qrator. Yandex reported attacks beginning August 4 2021 (over 5 
million requests per second) with a massive attack on September 5, 
2021 reaching almost 22 million RPS (requests per second). Cloudflare 
acknowledged an attack at over 17 million RPS in July 2021. The botnet 
appeared to be composed of 250,000 devices."


Nice try Alexaner. :-)

Thanks anyway.


Huh? Try? There are no tries.
You've asked "to share your experience/opinion", so I gave you my 
personal recommendation.


As for reported "compromises", you always have to read between the lines.
If you connect a device to WAN network you have to configure it 
properly, otherwise anything could happen to it and it doesn't matter 
who manufactured it.
RISC architecture hardware coupled with RouterOS is a powerful tool and 
it is end-user's responsibility to secure it and maintain it, not just 
leaving it there with open service ports and default or even changed 
login\password.


--
With kindest regards, Alexander.

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org
⠈⠳⣄

Re: OT: anybody uses eero 6 WiFi router?

[Juan R.D. Silva]

On 2022-01-13 2:20 a.m., Alexander V. Makartsev wrote:

On 13.01.2022 07:56, Juan R.D. Silva wrote:

Hi folks,

Shopping for a new ISP came across company that uses exclusively eero 
6 router. Anyone to share your experience/opinion about the thing?


2 concerns of mine are:
- cloud based private network management
- Amazon owned

Thanks

I've never used this thing, but if I had to choose I would choose 
against it.
If ISP uses eero 6 router exclusively, doesn't mean it is good, it is 
probably because of a special deal with Amazon.
Just by skimming few reviews I can see, it's a "black box" without any 
information about hardware inside, so it must be dirt cheap to produce.
Other concerns, it comes with Amazon spyware (content proxy) 
pre-installed, which raises privacy concerns.
It is impossible to control without a smartphone and special app, which 
leads to security concerns.
A few owners has reported about connectivity issues, that means a 
firmware is not stable enough.

There is no telling about for how long it will be supported by Amazon.
The only positive thing I can think of about this overpriced toy is an 
Amazon eco-system integration and Alexa interaction support. That is if 
someone needs something like that in their home.


If I was in the market for the router for myself, I'd always choose one 
from MikroTik¹.
They all have no-nonsence hardware and software design, no 
smartphone\app requirement, no eco-system requirement (like 'Ubiquiti' 
devices), it is highly customizable, has every feature you can think of, 
it could be controlled via many ways, secured and monitored and will be 
supported by manufacturer for years via firmware updates.
The only downside I can think of is somewhat advanced configuration 
could be difficult for somebody, but with help from official forum and 
wiki² quite manageable and as a bonus I'll learn a lot about networking, 
routing.



¹ https://mikrotik.com/products
² https://wiki.mikrotik.com/wiki/Main_Page



Wikipedia says:

"On 3 August 2018, MikroTik routers were found to have been compromised 
by the Coinhive cryptocurrency malware."


"Beginning in June 2021, a botnet composed of unprotected Mikrotik 
devices created huge volumes of application-layer traffic using http 
pipelining, resulting in DDOS. The net was named Mēris (or Meris) by 
Qrator. Yandex reported attacks beginning August 4 2021 (over 5 million 
requests per second) with a massive attack on September 5, 2021 reaching 
almost 22 million RPS (requests per second). Cloudflare acknowledged an 
attack at over 17 million RPS in July 2021. The botnet appeared to be 
composed of 250,000 devices."


Nice try Alexaner. :-)

Thanks anyway.

Re: Unable to minimize Firefox 91.5.0esr at top of frame

[John Boxall]

On 2022-01-13 17:55, Ralph Katz wrote:


1)  Latest Debian stable is 11 (Bullseye).
2)  Latest Firefox ESR is today's security upgrade, 91.5.0esr (64-bit).
3)  On my XFCE desktop, firefox functions exactly as you seek.

Perhaps you have desktop environment or window manager issue?  More 
details about that could be helpful.




1) Debian 10 (Buster)
2) FF ESR 91.5.0esr (64-bit) (released at the same time as the instance 
for Bullseye)
3) Gnome3 with Wayland disabled. I also tried with Wayland enabled and 
no difference.


Perhaps it is a Gnome issue. I'll keep looking.

--
Regards,

John Boxall

Re: Installation Debian8 error in Release

[Wojciech]

Hi,
Thanks Tomas for your answer.
In the installation process, at the moment of when I choosing mirror 
server for example http://ftp.pl.debian.org/debian/dist/jessie/Release 
installation is break.
For jessie is selected choose-mirror: wget -q 
http://ftp.pl.debian.org/debian/dist/jessie/Release -O - | grep -E  
'^(Suite|Codename):'

Output this command is:
Suite:  oldoldstable
Codename: jessie
In the next step is choose-mirror: wget -q 
http://ftp.pl.debian.org/debian/dist/oldoldstable/Release -O - | grep -E 
'^(Suite|Codename):' because earlier Suite is oldoldstable (2xold and 
stable)

Output this command is:
Suite: oldoldstable
Codename: stretch
Attention: not jessie

Codename jessie is version 8.11
Codename stretch is version 9.11

Correct destination link is oldoldoldstable (3xold and stable)
Realease from http://ftp.pl.debian.org/debian/dists/oldoldoldstable/Release:
"
Origin: Debian
Label: Debian
Suite: oldoldstable
Version: 8.11
Codename: jessie
..."
Correct entry in http://ftp.pl.debian.org/debian/dists/jessie/Release 
will be

"
Origin: Debian
Label: Debian
Suite: oldoldoldstable
Version: 8.11
Codename: jessie
..."
This situation is on many mirror servers. I checked Sweden, Switzerland, 
Holland and USA.

Is it a little clearer now ?
Workaround this trouble is installation without mirror server, and after 
reboot write manually list source packages to /etc/apt/sources.list and 
run tasksel and choose components (of course after apt update)


Have a nice day

W dniu 13.01.2022 o 14:58, Thomas Schmitt pisze:

Hi,

Google translation says that Wojciech wrote:

During the installation, when you choose a mirror server, packages is
mistake.

Maybe the fallback servers listed in debian-8.11.1-amd64-DVD-1.jigdo
can be used.
I understand that this one is quite time specific:

   http://snapshot.debian.org/archive/debian/20190212T020859Z/

(But its libburn versions date back to 2012.)

This one seems to be the last resort for everything ever released:

   http://us.cdimage.debian.org/cdimage/snapshot/Debian/



Is this email enough if I have to write to a world group?

It would be better in english language.
Google translations tend to become riddling or ridiculous.


Have a nice day :)

Thomas

Re: Request of urgent help....(Solved)

[David Christensen]

On 1/13/22 7:02 AM, fran...@libero.it wrote:

Hello, I succeeded in solving the problem by running testdisk on Debian then 
recuperate Mac partition and when I rebooted only Mac system run.

Then I reinstalled REFind and the problem was solved.

Now I have the 2 systems again!

Regards

Francesco



I am glad that your dual-boot macOS/ Debian Macbook Pro is working 
again.  :-)



On 1/13/22 2:06 PM, Tim Woodall wrote:
> But making a disk level backup first is strongly recommended! It's
> really easy to make things worse.


+1.  Get yourself a big USB HDD.  Learn how to take and restore a raw 
image of the SSD.  Take images on a regular basis (I do this monthly) 
and as needed (such as after a fresh install, before major version 
upgrades, and before decommissioning).  This is in addition to regular 
data backups (e.g. daily).



David

Re: Debian vs Firefox

[Greg Wooledge]

On Thu, Jan 13, 2022 at 09:45:21PM +, Richmond wrote:
> Emanuel Berg  writes:
> > Is the feud between Debian and Firefox sorted out?
> 
> I believe the feud was sorted out. I recently went out of my way to try
> to get icecat, and found it eventually in a linux distribution called
> Parabola, which also contains Iceweasel (and Icedove I think).

Yes, it was sorted out in 2016.

See  for a page with
a few sentences on this topic, and some more links to follow.

Re: Unable to minimize Firefox 91.5.0esr at top of frame

[Ralph Katz]

On 1/13/22 12:07, John Boxall wrote:
After upgrading to the latest Debian 10 (Buster) Firefox ESR (91.5.0esr 
64bit), I found that I could not minimize the window by right clicking 
on the top of the window frame and selecting "Minimize", whether the 
menu bar was present or not. The menu for selecting minimize was not 
even present. I was able to perform the minimize with the old (78.x) 
release. I recently installed the latest FF release from the Mozilla 
site (version 95.0.2 64bit) and noted the same situation.


Is this expected going forward or is this a bug?


1)  Latest Debian stable is 11 (Bullseye).
2)  Latest Firefox ESR is today's security upgrade, 91.5.0esr (64-bit).
3)  On my XFCE desktop, firefox functions exactly as you seek.

Perhaps you have desktop environment or window manager issue?  More 
details about that could be helpful.


Regards,
Ralph

Re: Request of urgent help....

[Tim Woodall]

Do you have an external disk you can copy sda to and experiment on?


Disk /dev/sda - 480 GB / 447 GiB - CHS 58369 255 63
Partition Start End Size in sectors
P EFI System 40 409639 409600 [EFI System Partition]

P Mac HFS 409640 700519039 700109400

P Linux filesys. data 700520448 759113727 58593280
P Linux Swap 759113728 761114607 2000880
P Linux filesys. data 761114624 937701375 176586752




# fdisk -l
Disk /dev/sda: 447,13 GiB, 480103981056 bytes, 937703088 sectors

Disk model: CT480BX500SSD1
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: gpt
Disk identifier: 20F7D036-E7D4-4247-9944-2190A2A933AE

Device Start   End   Sectors  Size Type
/dev/sda3  700520448 759113727  58593280 27,9G Linux filesystem
/dev/sda4  759113728 761114623   2000896  977M Linux swap
/dev/sda5  761114624 937701375 176586752 84,2G Linux filesystem



Looks like sda1 and sda2 are missing from the partition table.

If it's just that then putting that back but changing nothing else is
all that is needed.

I'd use fdisk to do it, but other tools might be easier/less error
prone.


But making a disk level backup first is strongly recommended! It's
really easy to make things worse.

It's not obvious to me why there is a gap between the end of the HFS
partition and the start of sda3. That might be expected or might mean
the sector numbers aren't quite right...

Tim.

Re: HS: samba+ldap, login smbclient

[Raphaël POITEVIN]

 Merci pour ces pistes, je vais consulter ces liens.

Raphaël

didier gaumet  writes:

> Avertissement: je n'y connais vraiment *rien* (je n'ai jamais
> utilisé/paramétré LDAP et j'ai dû utiliser une fois smbclient il y a
> des années)
>
> de ce que je comprends de ce lien (aux paragraphes smbclient et ldap),
> tu emploies un contournement utilisé par les crackers:
> https://www.n00py.io/2020/12/alternative-ways-to-pass-the-hash-pth/
>
> *peut-être* trouveras-tu des réponses ici:
> https://docs.netapp.com/us-en/ontap/smb-admin/ldap-signing-sealing-concepts-concept.html
> https://docs.netapp.com/us-en/ontap/smb-admin/enable-ldap-signing-sealing-task.html
> mais il est fort possible (ou même probable) que mon ignorance du sujet
> m'interdise de comprendre que ces liens ne sont pas en rapport direct
> avec ton problème, desolé :-)

Re: HS: samba+ldap, login smbclient

[Raphaël POITEVIN]

Haricophile  writes:

> Je suis très loin d'être spécialiste, mais sous Windows il faut
> explicitement dire si on veut des accès non authentifiés. L'ancien
> protocole plus pratique mais «insecure» est désactivé par défaut.

Pardon, je me suis trompé, je voulais dire :
smbclient --pw-nt-hash //smb/repertoire -U utilisateur

donc avec authentification.
>
> J'avoue ne pas m'être penché sur le système, le très peu que j'utilise
> fonctionne (avec authentification).

Authentification par samba lui-même je suppose.

Merci,
-- 
Raphaël
www.leclavierquibave.fr

Re: How to rotate then save a PDF document?

[David Wright]

On Thu 13 Jan 2022 at 19:44:23 (+0100), Siard wrote:
> David Wright wrote:
> > Finally, using a GUI doesn't scale well. [...] Clicking one's way round
> > a GUI can't compete.

> But GIMP works with raster images, so
> everything that is vectorized, including text, is transformed to a rasterized
> image, causing loss of sharpness and a drastic increase in file size.
> So GIMP is just not suitable for this purpose.

That's right, and is what I wanted to illustrate, rather
than just contradicting the post that suggested it. And
in pictures, as well as with the CPU/size statistics.

> The GUI is not the problem here.

No, not for the OP, who only has one document to rotate.
But who wants to repeat « File→Open, Image→Rotate, 90°,
OK, Export » a thousand times, even when you're operating
on an appropriate object, like a photograph. That's what
scripting is for.

For example, until bullseye, xzgv (picture viewer) didn't
honour the orientation tag, so to make it easier to show
pictures without having to press r occasionally, I would
create a shadow directory containing mainly symlinks to
the real directory, but replacing the link to any misoriented
picture with a rotated copy of the original. So easily done,
no matter how many pictures, with a script calling
jpegexiforient and convert; but so tedious with a GUI.

That's why I added the footnote that the method loses its
charm when someone else tries to scale it up to a large
number of documents.

Cheers,
David.

Re: How to rotate then save a PDF document?

[Charles Curley]

On Thu, 13 Jan 2022 19:44:23 +0100
Siard  wrote:

> The GUI is not the problem here. But GIMP works with raster images, so
> everything that is vectorized, including text, is transformed to a
> rasterized image, causing loss of sharpness and a drastic increase in
> file size. So GIMP is just not suitable for this purpose.

Also, it is possible to extract the text from a PDF (pdftk does this
very well), but once it is rasterized, that capability is lost.

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Unable to minimize Firefox 91.5.0esr at top of frame

[John Boxall]

After upgrading to the latest Debian 10 (Buster) Firefox ESR (91.5.0esr 
64bit), I found that I could not minimize the window by right clicking 
on the top of the window frame and selecting "Minimize", whether the 
menu bar was present or not. The menu for selecting minimize was not 
even present. I was able to perform the minimize with the old (78.x) 
release. I recently installed the latest FF release from the Mozilla 
site (version 95.0.2 64bit) and noted the same situation.


Is this expected going forward or is this a bug?
--
Regards,

John Boxall

Re: How to rotate then save a PDF document?

[Siard]

David Wright wrote:
> Finally, using a GUI doesn't scale well. [...] Clicking one's way round
> a GUI can't compete.

The GUI is not the problem here. But GIMP works with raster images, so
everything that is vectorized, including text, is transformed to a rasterized
image, causing loss of sharpness and a drastic increase in file size.
So GIMP is just not suitable for this purpose.

Re: Debian 11 xfce

[c. marlow]

> > On Wed, Jan 12, 2022 at 09:52:01AM -0600, c. marlow wrote:
> > 
> > [...]
> >   
> >> I honestly don't see what people see in XFCE  
> > 
> > Uh, oh. This is asking for trouble ;)
> >   
> >> To me, XFCE looks VERY DATED and out of the 90s.   
> > 


Funny, I say that, but I am using THUNAR as my file manager in Gnome 3. 

I tried Nemo first,  I used it for almost a month and it was OKAY I
guess... 

I then decided to install Thunar, and I liked it better. 


But, that's as close to XFCE as I am going to get! lol



Thanks,
Chris

If you need to email me off list, please use ch...@cwm030.com

Debian 11
Gnome 3

Re: Instalacja Debian8 błąd w Release

[piorunz]

On 13/01/2022 15:58, Andrew M.A. Cater wrote:


The latest normal support release is Debian 11 - Bullseye.

The previous version is Debian 10 - Buster - which will move to
long term support later in 2022.

It would be a very good idea to update to Debian 11 if you can.


Oh, I'm sorry, yes, of course. Debian 11 Bullseye is the current one.
Although 10 is still supported.

OP has a choice of:
Debian 9 Stretch (normal support ended, LTS running out),
Debian 10 Buster (normal support and running out),
Debian 11 Bullseye (normal support, current release).

I only mentioned older releases because OP was trying to resolve very
old release problem, meaning he for some reasons wants to stick with
older releases or is otherwise reluctant to upgrade, maybe for
compatibility reasons.

--
With kindest regards, Piotr.

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/
⠈⠳⣄

Re: How to rotate then save a PDF document?

[David Wright]

(I had to repost this with smaller attachments.)

On Tue 11 Jan 2022 at 10:00:06 (-0600), Richard Owlett wrote:
> On 01/11/2022 09:27 AM, Alexander V. Makartsev wrote:
> > On 11.01.2022 19:37, Richard Owlett wrote:
> > > I use MATE and thus use Atril as viewer.
> > > Typically I have no need to modify PDF documents.
> > > I received a reading a long reading list which needs to be
> > > rotated left to be read. Atril rotates it but does not save it
> > > as rotated.
> > > 
> > > What's the simplest tool to permanently rotate that specific document?
> > > TIA
> > I'd go with GIMP.
> > Simply open any .pdf file and use Transform function ( Image >
> > Transform  > Rotate... ).
> > After that Export ( File > Export As ) the edited document as a
> > new file and check the results in .pdf viewer.
> > GIMP will also handle multi-paged .pdf documents just fine.
> 
> Worked like a charm. I tend to think of PDF as just another text format.
> I date from Teletype and Decwriter era ;}

I can't see any attraction in using Gimp, because that rotates the
image on the page, whereas what you want is to rotate the pages.

I took a random PDF downloaded last year: historyofmodernesche.pdf
and ran pdftk on it to get these timings and files:

$ time pdftk /tmp/historyofmodernesche.pdf cat 1-endeast output 
/tmp/pdftk-east.pdf

real0m1.569s
user0m2.285s
sys 0m0.634s

$ ls -Glg /tmp/historyofmodernesche.pdf /tmp/pdftk-east.pdf
-rw-r- 1 16779995 Feb 29  2020 /tmp/historyofmodernesche.pdf
-rw-r- 1 16242357 Jan 11 17:14 /tmp/pdftk-east.pdf

$ pdfinfo /tmp/historyofmodernesche.pdf | grep -v ' no$'
Title:  History of modern Europe
Author: Schevill, Ferdinand, 1868-1954
Creator:Internet Archive
Producer:   Recoded by LuraDocument PDF v2.68
CreationDate:   Sat Feb 29 08:26:54 2020 CST
ModDate:Sat Feb 29 09:36:18 2020 CST
Tagged: yes
Form:   none
Pages:  512
Page size:  408 x 639 pts
Page rot:   0
File size:  16779995 bytes
Optimized:  yes
PDF version:1.5

$ pdfinfo /tmp/pdftk-east.pdf | grep -v ' no$'
Creator:pdftk 3.0.2 - www.pdftk.com
Producer:   itext-paulo-155 (itextpdf.sf.net-lowagie.com)
CreationDate:   Tue Jan 11 17:14:05 2022 CST
ModDate:Tue Jan 11 17:14:05 2022 CST
Form:   none
Pages:  512
Page size:  408 x 639 pts
Page rot:   90← note the rotation here
File size:  16242357 bytes
PDF version:1.5
$ 

Then I followed the instructions above: I opened the PDF with
File → Open, and a little window appeared that had tiles
being added at the top, and an Import button below, which expected
to be pressed. Under the window, it said "All 512 pages selected".

When I pressed Import, top showed a file-pdf-load process running
at ~97%, and it consumed three minutes of CPU. Eventually the
progress bar crawled across, and the first page was displayed in
the main window.

As instructed above, I selected Image → Transform → Rotate and
90° clockwise. A progress bar swept across under the image in
a few seconds. I then selected File → Export As, added rot- to
the beginning of the filename, and pressed Export. A file-pdf-save
process was displayed by top for about 30 seconds, whereupon the
output file appeared in /tmp. In top, gimp and file-pdf-save
were using ~180% of CPU in total.

However, although the file was huge, it only displayed a single page,
confirmed by pdfinfo. So I repeated the Export command, but selected
an option to export Layers as Pages. This gave me a multipage PDF,
but the pages were backwards, so I repeated Export again, this time
also adding Reverse the Pages Order.

$ ls -Glg /tmp/historyofmodernesche.pdf 
/tmp/rot-historyofmodernesche.pdf
-rw-r- 1  16779995 Feb 29  2020 /tmp/historyofmodernesche.pdf
-rw-r- 1 142836917 Jan 11 17:31 /tmp/rot-historyofmodernesche.pdf

$ pdfinfo /tmp/rot-historyofmodernesche.pdf | grep -v ' no$'
Producer:   cairo 1.16.0 (https://cairographics.org)
CreationDate:   Tue Jan 11 17:31:06 2022 CST
Form:   none
Pages:  512
Page size:  638.64 x 407.52 pts
Page rot:   0
File size:  142836917 bytes
PDF version:1.5
$ 

The corresponding timings for Gimp were:

realn/a (with all the repeating)
user6m13.760s
sys 0m7.833s

I got this timing down a bit, by repeating the entire process above,
without exporting three times:

user4m8.129s
sys 0m5.077s

So, about 100 times slower than pdftk.

Then I inspected the results at 1200% magnification, tiny fragments
of which are attached. You can see the problem.

Finally, using a GUI doesn't scale well. One could rotate any number
of documents with a single line of commands using pdftk, and
presumably with Curt's similar qpdf method as well (untested as not
installed). Clicking one's way round a GUI can't compete.

Cheers,
David.

Re: restructure folders

[David Wright]

On Thu 13 Jan 2022 at 10:26:55 (+0100), sp...@caiway.net wrote:
> 
> > > > What are you trying to do? 
> > > 
> > > I want to extract all man pages and all docs from all packages. I do
> > > not want to install the packages. Then make nice search interfaces
> > > with dwww and recoll.
> > > 
> > > This is to be used in areas without internet access. I have a local
> > > repository. 

I'm not sure what you mean by "all packages". Surely you're not going
to download the entire Debian repository just to pick up the man pages
when they're already available on the web. Many in your collection
would seem destined to languish for ever (or until Debian moves on a
suite) without ever being consulted.

It would seem more efficient to process the man pages for the packages
already installed on the system, and provide your local copies through
a wrapper that notifies you of any that need providing as and when
they are demanded.

> > I found a solution:
> > 
> > I made a chroot with debootstrap, minimal install
> > then I move all *deb from the repository inside a temp directory in
> > the chroot
> > 
> > then I can dpkg --unpack *.deb let the packages get unpacked in the
> > system, without installing
> > 
> > then I can copy the /usr/share/man etc. directories to the proper
> > place.
> > 
> > Thanks for the ideas!
> 
> No this is no good solution
> I must install all packages and this seems an impossible task
> Too much questions I have to answer

There's nothing more to a .deb file than two .tar.xz archives
inside an .ar archive, viz:

$ ls -Glg iwd_1.14-3_amd64.deb 
-rw-r- 1 561296 May  6  2021 iwd_1.14-3_amd64.deb

$ ar vt iwd_1.14-3_amd64.deb 
rw-r--r-- 0/0  4 May  6 02:06 2021 debian-binary
rw-r--r-- 0/0   1900 May  6 02:06 2021 control.tar.xz
rw-r--r-- 0/0 559204 May  6 02:06 2021 data.tar.xz

$ ar vx iwd_1.14-3_amd64.deb 
x - debian-binary
x - control.tar.xz
x - data.tar.xz

$ tar tvf control.tar.xz 
drwxr-xr-x root/root 0 2021-05-06 02:06 ./
-rw-r--r-- root/root   877 2021-05-06 02:06 ./control
-rw-r--r-- root/root  1298 2021-05-06 02:06 ./md5sums
-rwxr-xr-x root/root   778 2021-05-06 02:06 ./postinst
-rwxr-xr-x root/root   644 2021-05-06 02:06 ./postrm
-rwxr-xr-x root/root   219 2021-05-06 02:06 ./prerm

$ tar tvf data.tar.xz | grep '/man'
drwxr-xr-x root/root 0 2021-05-06 02:06 ./usr/share/man/
drwxr-xr-x root/root 0 2021-05-06 02:06 ./usr/share/man/man1/
-rw-r--r-- root/root   898 2021-05-06 02:06 ./usr/share/man/man1/iwctl.1.gz
-rw-r--r-- root/root   578 2021-05-06 02:06 ./usr/share/man/man1/iwmon.1.gz
drwxr-xr-x root/root 0 2021-05-06 02:06 ./usr/share/man/man5/
-rw-r--r-- root/root  2139 2021-05-06 02:06 ./usr/share/man/man5/iwd.ap.5.gz
-rw-r--r-- root/root  4264 2021-05-06 02:06 
./usr/share/man/man5/iwd.config.5.gz
-rw-r--r-- root/root  5745 2021-05-06 02:06 
./usr/share/man/man5/iwd.network.5.gz
drwxr-xr-x root/root 0 2021-05-06 02:06 ./usr/share/man/man7/
-rw-r--r-- root/root   723 2021-05-06 02:06 
./usr/share/man/man7/iwd.debug.7.gz
drwxr-xr-x root/root 0 2021-05-06 02:06 ./usr/share/man/man8/
-rw-r--r-- root/root  1148 2021-05-06 02:06 ./usr/share/man/man8/iwd.8.gz
$ 

That's a bullseye for iwd being inspected on a buster machine.
No need to install anything or run specifically "Debian" commands.

Cheers,
David.

Re: Instalacja Debian8 błąd w Release

[Andrew M.A. Cater]

On Thu, Jan 13, 2022 at 02:12:42PM +, piorunz wrote:
> Witaj Wojciech,
> 
> On 13/01/2022 11:02, Wojciech wrote:
> > 
> > Kiedy mogę się spodziewać naprawienia ?
> 
> Never. Jessie end of life was in June 2018, and LTS support has ended in
> June 2020, one and half years ago. It's a surprise that some Jessie
> packages are even available online somewhere. This is not guaranteed.
> 
> > Jak jest metoda obejściowa w tym momencie.
> 
> Move on to Debian 9, current LTS support release, or Debian 10, current
> normal support release.
> 

The latest normal support release is Debian 11 - Bullseye.

The previous version is Debian 10 - Buster - which will move to
long term support later in 2022.

It would be a very good idea to update to Debian 11 if you can.

With every good wish,

Andy Cater


> Full list and their EOL dates:
> https://wiki.debian.org/DebianReleases
> 
> 
> --
> With kindest regards, Piotr.
> 
> ⢀⣴⠾⠻⢶⣦⠀
> ⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
> ⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/
> ⠈⠳⣄
> 

Re: Request of urgent help....(Solved)

[frantal]

Hello, I succeeded in solving the problem by running testdisk on Debian then 
recuperate Mac partition and when I rebooted only Mac system run.

Then I reinstalled REFind and the problem was solved.

Now I have the 2 systems again!

Regards

Francesco

Re: Instalacja Debian8 błąd w Release

[piorunz]

Witaj Wojciech,

On 13/01/2022 11:02, Wojciech wrote:


Kiedy mogę się spodziewać naprawienia ?


Never. Jessie end of life was in June 2018, and LTS support has ended in
June 2020, one and half years ago. It's a surprise that some Jessie
packages are even available online somewhere. This is not guaranteed.


Jak jest metoda obejściowa w tym momencie.


Move on to Debian 9, current LTS support release, or Debian 10, current
normal support release.

Full list and their EOL dates:
https://wiki.debian.org/DebianReleases


--
With kindest regards, Piotr.

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/
⠈⠳⣄

Re: HS: samba+ldap, login smbclient

[didier gaumet]

Avertissement: je n'y connais vraiment *rien* (je n'ai jamais
utilisé/paramétré LDAP et j'ai dû utiliser une fois smbclient il y a
des années)

de ce que je comprends de ce lien (aux paragraphes smbclient et ldap),
tu emploies un contournement utilisé par les crackers:
https://www.n00py.io/2020/12/alternative-ways-to-pass-the-hash-pth/

*peut-être* trouveras-tu des réponses ici:
https://docs.netapp.com/us-en/ontap/smb-admin/ldap-signing-sealing-concepts-concept.html
https://docs.netapp.com/us-en/ontap/smb-admin/enable-ldap-signing-sealing-task.html
mais il est fort possible (ou même probable) que mon ignorance du sujet
m'interdise de comprendre que ces liens ne sont pas en rapport direct
avec ton problème, desolé :-)

Re: Instalacja Debian8 blad w Release

[Thomas Schmitt]

Hi,

Google translation says that Wojciech wrote:
> During the installation, when you choose a mirror server, packages is
> mistake.

Maybe the fallback servers listed in debian-8.11.1-amd64-DVD-1.jigdo
can be used.
I understand that this one is quite time specific:

  http://snapshot.debian.org/archive/debian/20190212T020859Z/

(But its libburn versions date back to 2012.)

This one seems to be the last resort for everything ever released:

  http://us.cdimage.debian.org/cdimage/snapshot/Debian/


> Is this email enough if I have to write to a world group?

It would be better in english language.
Google translations tend to become riddling or ridiculous.


Have a nice day :)

Thomas

Re: restructure folders

[Greg Wooledge]

On Thu, Jan 13, 2022 at 10:26:55AM +0100, sp...@caiway.net wrote:
> > > I want to extract all man pages and all docs from all packages. I do
> > > not want to install the packages. Then make nice search interfaces
> > > with dwww and recoll.

First of all, this already exists:

https://manpages.debian.org/

Second, you need to understand that two or more packages may contain
different implementations of the same command, with the same name, and
the same named man page.  Even if you bypass the package installation and
just operate on the raw files, package A may contain the same pathname
as package B, and so one of them is going to overwrite the other.

That's why manpages.d.o has the package name in the URIs that it
generates.  E.g. if you look up the man page for "parallel", you may
get 
which is the page for parallel(1) from the parallel package, or you may
end up at 
which is the page for parallel(1) from the moreutils package.

So, if you're reinventing manpages.d.o for fun, make sure you take that
into account.

Re: HS: samba+ldap, login smbclient

[Haricophile]

Le Thu, 13 Jan 2022 00:03:43 +0100,
Raphaël POITEVIN  a écrit :

> Un chiffrement qui ne se fait pas quelque part ?
> 
> Merci du coup de main

Je suis très loin d'être spécialiste, mais sous Windows il faut
explicitement dire si on veut des accès non authentifiés. L'ancien
protocole plus pratique mais «insecure» est désactivé par défaut.

J'avoue ne pas m'être penché sur le système, le très peu que j'utilise
fonctionne (avec authentification). 

Re: Instalacja Debian8 błąd w Release

[Georgi Naplatanov]

On 1/13/22 13:02, Wojciech wrote:
> W trakcie instalacji w momencie wyboru serwera lustrzanego pakietów jest
> błąd.
> choose-mirror: wget -q
> http://ftp.pl.debian.org/debian/dist/jessie/Release -O - | grep -E 
> '^(Suite|Codename):'
> Ta komenda zwraca:
> Suite:  oldoldstable
> Codename: jessie
> W następnym kroku jest:
> choose-mirror: wget -q
> http://ftp.pl.debian.org/debian/dist/oldoldstable/Release -O - | grep -E
> '^(Suite|Codename):'
> I tu instalator staje.
> Wskazana komenda zwraca:
> Suite: oldoldstable
> Codename: stretch
> Czyli Debian 9.11
> 
> Właściwa wersja jest w
> wget -q http://ftp.pl.debian.org/debian/dist/oldoldoldstable/Release -O
> - | grep -E '^(Suite|Codename):'
> Suit: oldoldoldstable
> Codename: jessie
> 
> Czyli w Release z jessie jest wskazanie na oldoldstable (2xold) a
> powinno być na oldoldoldstable(3xold).
> 
> Problem dotyczy wielu serwerów i dystrybucji.
> Sprawdzałem amd64,i386 i arm64.
> Serwery Polska (jak pokazuje) też icm, Szwecja, Holandia, Szwajcaria, USA.
> 
> Kiedy mogę się spodziewać naprawienia ?
> Jak jest metoda obejściowa w tym momencie.
> 
> Czy wystarczy ten mail czy muszę pisać na grupę światową ?
> 
> Pozdrawiam
> Wojciech.

Hi Wojciech,

Debian 8 (Jessie) is unsupported even as LTS.

https://wiki.debian.org/LTS

It has "died" as oldoldstable - this is my guess.

Kind regards
Georgi

Instalacja Debian8 błąd w Release

[Wojciech]

W trakcie instalacji w momencie wyboru serwera lustrzanego pakietów jest 
błąd.
choose-mirror: wget -q 
http://ftp.pl.debian.org/debian/dist/jessie/Release -O - | grep -E  
'^(Suite|Codename):'

Ta komenda zwraca:
Suite:  oldoldstable
Codename: jessie
W następnym kroku jest:
choose-mirror: wget -q 
http://ftp.pl.debian.org/debian/dist/oldoldstable/Release -O - | grep -E 
'^(Suite|Codename):'

I tu instalator staje.
Wskazana komenda zwraca:
Suite: oldoldstable
Codename: stretch
Czyli Debian 9.11

Właściwa wersja jest w
wget -q http://ftp.pl.debian.org/debian/dist/oldoldoldstable/Release -O 
- | grep -E '^(Suite|Codename):'

Suit: oldoldoldstable
Codename: jessie

Czyli w Release z jessie jest wskazanie na oldoldstable (2xold) a 
powinno być na oldoldoldstable(3xold).


Problem dotyczy wielu serwerów i dystrybucji.
Sprawdzałem amd64,i386 i arm64.
Serwery Polska (jak pokazuje) też icm, Szwecja, Holandia, Szwajcaria, USA.

Kiedy mogę się spodziewać naprawienia ?
Jak jest metoda obejściowa w tym momencie.

Czy wystarczy ten mail czy muszę pisać na grupę światową ?

Pozdrawiam
Wojciech.

Re: KVM max CPU speed to guest

[basti]

On 13.01.22 01:41, Igor Cicimov wrote:
> Hi,
> 
> On 13 Jan 2022 07:33, basti  wrote:
> 
> Hello,
> 
> first of all the most modern CPU in the last 10 years (I gues) use so
> called speed-stepping.
> 
> As I can see I was wondering why that speed stepping is not set in a
> KVM
> guest, even if I use "host-passthrough" in the cpu config of the guest.
> 
> virsh dumpxml almalinux | grep -i cpu
>   2
>   
> 
> The cpu on the "host" is:
> 
> root@q2:~# lscpu
> Architecture:    x86_64
> CPU op-mode(s):  32-bit, 64-bit
> Byte Order:  Little Endian
> Address sizes:   36 bits physical, 48 bits virtual
> CPU(s):  4
> On-line CPU(s) list: 0-3
> Thread(s) per core:  1
> Core(s) per socket:  4
> Socket(s):   1
> NUMA node(s):    1
> Vendor ID:   GenuineIntel
> CPU family:  6
> Model:   76
> Model name:  Intel(R) Celeron(R) CPU  N3160  @
> 1.60GHz
> Stepping:    4
> CPU MHz: 480.096
> CPU max MHz: 2240.
> CPU min MHz: 480.
> BogoMIPS:    3200.00
> Virtualization:  VT-x
> L1d cache:   96 KiB
> L1i cache:   128 KiB
> L2 cache:    2 MiB
> NUMA node0 CPU(s):   0-3
> Vulnerability Itlb multihit: Not affected
> Vulnerability L1tf:  Not affected
> Vulnerability Mds:   Vulnerable: Clear CPU buffers
> attempted, no microcode; SMT disabled
> Vulnerability Meltdown:  Mitigation; PTI
> Vulnerability Spec store bypass: Not affected
> Vulnerability Spectre v1:    Mitigation; usercopy/swapgs barriers
> and __user pointer sanitization
> Vulnerability Spectre v2:    Mitigation; Full generic retpoline,
> STIBP disabled, RSB filling
> Vulnerability Srbds: Not affected
> Vulnerability Tsx async abort:   Not affected
> Flags:   fpu vme de pse tsc msr pae mce cx8
> apic
> sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2
> ss ht
> tm pbe syscall nx rdtsc
>  p lm constant_tsc arch_perfmon pebs
> bts
> rep_good nopl xtopology tsc_reliable nonstop_tsc cpuid aperfmperf
> tsc_known_freq pni pclmulqdq d
>  tes64 monitor ds_cpl vmx est tm2 ssse3
> cx16 xtpr pdcm sse4_1 sse4_2 movbe popcnt tsc_deadline_timer aes rdrand
> lahf_lm 3dnowprefetch epb
>   pti tpr_shadow vnmi flexpriority ept
> vpid tsc_adjust smep erms dtherm ida arat
> root@q2:~#
> 
> So the max cpu speed should be 2240 MHz.
> 
> On the guest it is:
> 
> [root@almalinux ~]# lscpu
> Architektur: x86_64
> CPU Operationsmodus: 32-bit, 64-bit
> Byte-Reihenfolge:    Little Endian
> CPU(s):  2
> Liste der Online-CPU(s): 0,1
> Thread(s) pro Kern:  1
> Kern(e) pro Socket:  1
> Sockel:  2
> NUMA-Knoten: 1
> Anbieterkennung: GenuineIntel
> BIOS Vendor ID:  QEMU
> Prozessorfamilie:    6
> Modell:  76
> Modellname:  Intel(R) Celeron(R) CPU  N3160  @ 1.60GHz
> BIOS Model name: pc-i440fx-3.1
> Stepping:    4
> CPU MHz: 1600.000
> BogoMIPS:    3200.00
> Virtualisierung: VT-x
> Hypervisor-Anbieter: KVM
> Virtualisierungstyp: voll
> L1d Cache:   32K
> L1i Cache:   32K
> L2 Cache:    4096K
> L3 Cache:    16384K
> NUMA-Knoten0 CPU(s): 0,1
> Markierungen:    fpu vme de pse tsc msr pae mce cx8 apic sep
> mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss syscall nx
> rdtscp lm constant_tsc arch_perfmon rep_good nopl xtopology cpuid
> tsc_known_freq pni pclmulqdq vmx ssse3 cx16 pdcm sse4_1 sse4_2 x2apic
> movbe popcnt tsc_deadline_timer aes rdrand hypervisor lahf_lm
> 3dnowprefetch cpuid_fault pti tpr_shadow vnmi flexpriority ept vpid
> tsc_adjust smep erms arat umip arch_capabilities
> 
> So I can't use the 2240 MHz in the guest.
> When I set the cpu governor to "performance" on the host, it doesn't
> matter. The host only see 1600 MHz.
> 
> What's wrong there and how should I fix this?
> 
> Might be related to cpufreq daemon, what does cpufreq-info command on
> the host say? The cpu freq would dynamically scale on the host 

Re: restructure folders

[sp...@caiway.net]

> > > What are you trying to do? 
> > 
> > I want to extract all man pages and all docs from all packages. I do
> > not want to install the packages. Then make nice search interfaces
> > with dwww and recoll.
> > 
> > This is to be used in areas without internet access. I have a local
> > repository. 
> > 
> > 
> 
> I found a solution:
> 
> I made a chroot with debootstrap, minimal install
> then I move all *deb from the repository inside a temp directory in
> the chroot
> 
> then I can dpkg --unpack *.deb let the packages get unpacked in the
> system, without installing
> 
> then I can copy the /usr/share/man etc. directories to the proper
> place.
> 
> 
> Thanks for the ideas!
> 

No this is no good solution
I must install all packages and this seems an impossible task
Too much questions I have to answer

Re: Request of urgent help....

[frantal]

> Il 13/01/2022 03:08 David Christensen  ha scritto:
> 
>  
> On 1/12/22 10:00 AM, fran...@libero.it wrote:
> > Hi. I inadvertently deleted the Mac and EFI partitions of an HD inserted on 
> > a Macbook Pro (2009). Fortunately I have the Linux one (with Debian XFCE) 
> > that I am writing from. I tried to recover with Gparted (by installing 
> > gpart), but after more than an hour I stopped having no recovery signal. 
> > Then I installed test disk and this is the screen.
> >  > Christophe GRENIER 
> > https://www.cgsecurity.org
> > 
> > Disk /dev/sda - 480 GB / 447 GiB - CHS 58369 255 63
> > Partition Start End Size in sectors
> > P EFI System 40 409639 409600 [EFI System Partition]
> >> P Mac HFS 409640 700519039 700109400
> > P Linux filesys. data 700520448 759113727 58593280
> > P Linux Swap 759113728 761114607 2000880
> > P Linux filesys. data 761114624 937701375 176586752
> > 
> > Structure: Ok. Use Up/Down Arrow keys to select partition.
> > Use Left/Right Arrow keys to CHANGE partition characteristics:
> > P=Primary D=Deleted
> > Keys A: add partition, L: load backup, T: change type,
> > Enter: to continue
> > HFS+ blocksize=4096 + Backup, 358 GB / 333 GiB>
> > 
> > All partitions appear highlighted in green.
> > What can I do to reset Mac OS?
> > I don't dare shut down because I'm afraid it won't reboot anymore having 
> > wiped the EFI partition as well.
> > How can I do without loosing the Mac data? Thanks in advance
> > Francesco
> 
> 
> Please run the following commands and reply with the complete console 
> session -- prompts displayed, commands entered, and output displayed:
> 
> # cat /etc/debian_version ; uname -a
> 11.2
Linux debian 5.10.0-10-amd64 #1 SMP Debian 5.10.84-1 (2021-12-08) x86_64 
GNU/Linux
> # lsblk
> NAME   MAJ:MIN RM   SIZE RO TYPE MOUNTPOINT
sda  8:00 447,1G  0 disk 
├─sda3   8:30  27,9G  0 part /
├─sda4   8:40   977M  0 part [SWAP]
└─sda5   8:50  84,2G  0 part /home
sdc  8:32   1  57,8G  0 disk 
└─sdc1   8:33   1  57,7G  0 part /media/frantal/KINGSTON
sr0 11:01  1024M  0 rom 
> # fdisk -l
> Disk /dev/sda: 447,13 GiB, 480103981056 bytes, 937703088 sectors
Disk model: CT480BX500SSD1  
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: gpt
Disk identifier: 20F7D036-E7D4-4247-9944-2190A2A933AE

Device Start   End   Sectors  Size Type
/dev/sda3  700520448 759113727  58593280 27,9G Linux filesystem
/dev/sda4  759113728 761114623   2000896  977M Linux swap
/dev/sda5  761114624 937701375 176586752 84,2G Linux filesystem


Disk /dev/sdc: 57,8 GiB, 62058921984 bytes, 121208832 sectors
Disk model: DataTraveler 3.0
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: dos
Disk identifier: 0x2e247b39

Device Boot  Start   End   Sectors  Size Id Type
/dev/sdc1  *257280 121208831 120951552 57,7G  c W95 FAT32 (LBA)
> # which parted
> /usr/sbin/parted
> 
> David
gpart version:
gpart  v0.2.3-dev (c) 1999-2001 Michail Brzitwa 
Regards 
Francesco