Re: interface/network scripting - how to?

2022-02-04 Thread Kamil Jońca
john doe  writes:

[..]
>
>> 2. How these things can be achieved with systemd-networkd? I read the
>> manuals, but I was not able to find working examples and I am not sure
>> where can I start.
>>
>
> The Systemd mailing lists!

Thanks. Will try.
KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html



Re: interface/network scripting - how to?

2022-02-04 Thread john doe

On 2/4/2022 7:14 PM, Kamil Jońca wrote:


Current situation:
debian laptop with interfaces defined in /etc/network/interfaces
+ resolvconf package and bunch of scripts wchich configures network
(routes and name resolving) according to interfaces/vpn up down.
For example
1.  I am connected to  home1 network (connected by wifi, no default
 routing ), this network sets routing to some subnets with dhcp option
 121 (and dhclient scripts handles this)
2. I am connected via etch to router with default gateway
3. I am connected to work1 network via openvpn tunnel.
4. I am connected to work2 network via ipsec gateway.

I want to (and with my current config this is done)
that:
1. proper routes are established (especially these with option 121)
2. name resolving is properly configured:
   ie. home1.tld DNS queries are passed to home1 network
   work1.tld DNS queries are passed to work1 network (via openvpn tunnel)
   work2.tld DNS queries are passed to work2 network (via ipsec tunnel)
I am quite happy with my current config but sometimes I can read that
/etc/network/interfaces is "deprecated" in favor of systemd-networkd or
netplan.
So I have two questions:
1. Should I prepare migration?


I would not put that on the front burner but experimenting with Systemd
might not be a bad idea.


2. How these things can be achieved with systemd-networkd? I read the
manuals, but I was not able to find working examples and I am not sure
where can I start.



The Systemd mailing lists!

--
John Doe



[SOLVED] Re: One-user system.

2022-02-04 Thread peter
From: David Wright 
Date: Wed, 2 Feb 2022 11:08:28 -0600
> But hey, it could be quite exciting, like carrying a cocked
> revolver tucked into your waistband. One casual typo, one
> misplaced space, and you can blow away a whole disk.

System destruction is exasperating.  Lapse in security is another 
risk; possibly more serious.  My knowledge is meagre and this was 
helpful.

The Illusion of Privacy/Security using ANY Web-browser
https://forum.puppylinux.com/viewtopic.php?t=1583

Mitigation of risk.
https://wikka.puppylinux.com/spot

Rather than reinvent the wheel, I should use a product of extensive 
development.
http://wikka.puppylinux.com/DebianDog
https://github.com/DebianDog/

Regards,   ... P.

-- 
mobile: +1 778 951 5147
  VoIP: +1 604 670 0140
   48.7693 N 123.3053 W



Re: How to disable bluetooth probe

2022-02-04 Thread Anssi Saari
Pankaj Jangid  writes:

> Till the new kernel is available in stable, how can I disable the above
> probe and hence the frequent messages?

But 5.15 is already in bullseye-backports? And it'll never come to
Bullseye so it'll be a wait of a couple of years until Bookworm release
if you don't install it from backports.




Re: interface/network scripting - how to?

2022-02-04 Thread tomas
On Fri, Feb 04, 2022 at 01:33:54PM -0500, Greg Wooledge wrote:
> On Fri, Feb 04, 2022 at 07:14:45PM +0100, Kamil Jońca wrote:
> > I am quite happy with my current config but sometimes I can read that
> > /etc/network/interfaces is "deprecated" in favor of systemd-networkd or
> > netplan.
> 
> Where did you read this?  Sounds like Red Hat or XDG or systemd propaganda.

I wouldn't hope that either!

That said, those things will stay alive as long as there are folks who
care.

Cheers
-- 
t


signature.asc
Description: PGP signature


Re: One-user system. Was "One user system."

2022-02-04 Thread peter
"One-user" is probably the correct grammar.

David,

From: David Wright 
Date: Wed, 2 Feb 2022 11:08:28 -0600
> And it's been designed with that in mind. Debian hasn't.

I wondered whether others had worked out a recipe for single-user.  In 
fact, yes, there's DebianDog.  References 7 and 8 here.
https://en.wikipedia.org/wiki/Light-weight_Linux_distribution

> I can't understand this. If you carry out your intention, then
> /home becomes just another top-level directory like /media.
> You don't need to put /root into it just to make a point. You
> can use it for just your data files, and not your dotfiles —
> particularly if /home is on a separate partition.

I don't understand either.  We're "at crossed purposes"?

root@joule:/root# df | grep sd
/dev/sda27159288  6635136140768  98% /
/dev/sda4  131124764 12951820 111512132  11% /home
/dev/sdb13658244  2026200   1446196  59% /home/root/MY

Note that / is 98% full whereas /home is 11% full. The intention in 
moving the root home directory from / to /home is just to have space 
for my data. 

Yes, 98% needs attention.

Rather than link /root to /home/root probably better to edit 
/etc/passwd to have root homed at /home/root. Can try that.

> You may hit snags. Some programs might refuse to run, or do
> strange things because they're written to distinguish between
> root and an ordinary user.

Used it since yesterday with no significant problem.

> But hey, it could be quite exciting, like carrying a cocked
> revolver tucked into your waistband. One casual typo, one
> misplaced space, and you can blow away a whole disk.

I view this as an experiment.  If I destroy the system, I reinstall.  
The debian installer is moderately easy to use.  =8~)

Also I have the spare machine ready to go as described in the smartd 
thread.

Did you use DOS decades ago?  Have you clobbered a DOS system?

If interested, try DebianDog or Puppy or my simpistic approach.

> Not really — except perhaps on Puppy where it's been seen as
> controversial, and hence discussed.

Discussion here.  https://wikka.puppylinux.com/spot
Note priviledge and and security aspects.

> ISTR earlier posts where you've run up against permission problems, ...

Not my motivation.  This computer isn't a mainframe system with 
multiple users. I'm just exploring simplifications.

Thanks for the feedback,... P.





-- 
mobile: +1 778 951 5147
  VoIP: +1 604 670 0140
   48.7693 N 123.3053 W



Re: interface/network scripting - how to?

2022-02-04 Thread Greg Wooledge
On Fri, Feb 04, 2022 at 07:14:45PM +0100, Kamil Jońca wrote:
> I am quite happy with my current config but sometimes I can read that
> /etc/network/interfaces is "deprecated" in favor of systemd-networkd or
> netplan.

Where did you read this?  Sounds like Red Hat or XDG or systemd propaganda.

> So I have two questions:
> 1. Should I prepare migration?

Given that you're happy with your current setup, I see no reason to do so.



interface/network scripting - how to?

2022-02-04 Thread Kamil Jońca


Current situation:
debian laptop with interfaces defined in /etc/network/interfaces
+ resolvconf package and bunch of scripts wchich configures network
(routes and name resolving) according to interfaces/vpn up down.
For example
1.  I am connected to  home1 network (connected by wifi, no default
routing ), this network sets routing to some subnets with dhcp option
121 (and dhclient scripts handles this)
2. I am connected via etch to router with default gateway
3. I am connected to work1 network via openvpn tunnel.
4. I am connected to work2 network via ipsec gateway.

I want to (and with my current config this is done)
that:
1. proper routes are established (especially these with option 121)
2. name resolving is properly configured:
  ie. home1.tld DNS queries are passed to home1 network
  work1.tld DNS queries are passed to work1 network (via openvpn tunnel)
  work2.tld DNS queries are passed to work2 network (via ipsec tunnel)
I am quite happy with my current config but sometimes I can read that
/etc/network/interfaces is "deprecated" in favor of systemd-networkd or
netplan.
So I have two questions:
1. Should I prepare migration?
2. How these things can be achieved with systemd-networkd? I read the
manuals, but I was not able to find working examples and I am not sure
where can I start.
  
KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/



[SOLVED] Re: smartd

2022-02-04 Thread peter
From: Andy Smith 
Date: Sat, 22 Jan 2022 19:07:23 +
> If the drive is currently not in use then it may be simpler to just
> write over the entire drive with a simple
> # dd if=/dev/zero of=/dev/sda

When convenient will get another drive and substitute in the machine.
Then the dodgy drive can be written over and I can decide whether to 
scrap it.

Meanwhile I have a nice laptop with Debian 11.1 installed.  If the 
desktop system fails I move the SD card to the laptop and carry on 
work as if nothing happened.  The desktop system can be resurrected 
when convenient.

> I hope none, because you use RAID. 

Being ignorant about RAID I had to read here.
https://en.wikipedia.org/wiki/RAID

No doubt invaluable for a server with a large quantity of dynamic 
data. For my work the SD card and spare machine seem adequate.  When 
the desktop system crashes I can lose a few hours of editing or an 
emessage. It's tolerable.

Thanks,... P.


-- 
mobile: +1 778 951 5147
  VoIP: +1 604 670 0140
   48.7693 N 123.3053 W



[SOLVED] Re: smartd

2022-02-04 Thread peter
From: Dan Ritter 
Date: Sat, 22 Jan 2022 13:41:17 -0500
> Then, you have a choice: if the number doesn't increase over,
> say, the  next week, it's just a bad patch. 

That's the case.  The number isn't increasing.

> You should do a backup ASAP.

Backup function described here.
https://lists.debian.org/debian-user/2022/01/msg00863.html

Thanks for the information about the smartd.

... P.




-- 
mobile: +1 778 951 5147
  VoIP: +1 604 670 0140
   48.7693 N 123.3053 W



Re: Security

2022-02-04 Thread Reco
Hi.

On Fri, Feb 04, 2022 at 09:43:18AM +0100, Andrei POPESCU wrote:
> On Du, 30 ian 22, 19:27:56, Reco wrote:
> > 
> > > 
> > > How does "people installing without recommends" translate to "GNOME 
> > > users" is beyond me,
> > 
> > Easy. Look closely at two graphical frontends to libvirt they provide in
> > main archive.
> > Now ask yourself - would I need these on a server? Who would need to use
> > these?
>  
> Those who want a graphical tool to manage their VMs?

I.e. those who have a dozen VM at most, a single "server" to host them,
and said "server" is most probably translates to a localhost. I don't
see all that as a bad thing, but each GUI has its share of limitations
once it comes to managing something in big quantities, and both GNOME
boxes and Virt Manager follow that principle.


> Installing some -gnome packages still doesn't make me a GNOME user ;)

But installing them gives you a pile of GNOME core packages by
dependency.
Thus the software in question behaves the way GNOME developers want it
to behave, and the dependent software does it too. #768376 is a fine
example of that.
Thus I have bad news for you - installing either GNOME boxes or Virt
Manager (or other GNOME stuff) made you GNOME user, but if you insist
you're not - I won't press it ;)

For the record, for me both "GNOME" and "GNOME user" does not have a
negative connotation. About the only flaw of GNOME project for me is
their abuse of Scrum software development methodology, and that's a
topic for another discussion.

Reco



Re: Security

2022-02-04 Thread tomas
On Fri, Feb 04, 2022 at 09:43:18AM +0100, Andrei POPESCU wrote:

[...]

> Those who want a graphical tool to manage their VMs? Installing some 
> -gnome packages still doesn't make me a GNOME user ;)
> 
> (e.g. I'm using network-manager-gnome with LXDE)

It creeps slowly on you ;-P

(Just kidding. Everyone be happy with the tools (s)he prefers: provided
they're free, of course :-)

Cheers
-- 
t


signature.asc
Description: PGP signature


Re: Security

2022-02-04 Thread Andrei POPESCU
On Du, 30 ian 22, 19:27:56, Reco wrote:
> 
> > 
> > How does "people installing without recommends" translate to "GNOME 
> > users" is beyond me,
> 
> Easy. Look closely at two graphical frontends to libvirt they provide in
> main archive.
> Now ask yourself - would I need these on a server? Who would need to use
> these?
 
Those who want a graphical tool to manage their VMs? Installing some 
-gnome packages still doesn't make me a GNOME user ;)

(e.g. I'm using network-manager-gnome with LXDE)
 
Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature