Re: systemd.resolved problems

2022-03-24 Thread David Wright
On Fri 25 Mar 2022 at 07:59:15 (+0800), Jeremy Ardley wrote:
> On 25/3/22 7:26 am, Greg Wooledge wrote:
> > On Fri, Mar 25, 2022 at 06:51:55AM +0800, Jeremy Ardley wrote:
> > > I've been having continual problems with postfix and errors in the mail
> > > log about unresolved  MX and A records. Not all the time but often
> > > enough to be annoying. I discovered postfix was using the
> > > systemd.resolved server for DNS.

It was consistently  records causing the holdup in my log:
https://lists.debian.org/debian-user/2022/03/msg00656.html

> > > I did some experiments with resolvectl and there were serious delays
> > > looking up sites or just plain failures. In comparison my bind9 instance
> > > never had a problem and returned instantly. ( systemd.resolved used the
> > > same forwarders as my bind9 )

The same here. The delay was often /after/ the lookup had succeeded,
but meant that you didn't get back to the prompt until a timeout expired.
(I was comparing with resolvconf.)

> > > Is there any compelling reason to use systemd.resolved over ordinary DNS ?
> > > If not, why was it inflicted on debian?
> > It's disabled by default.  It's there if you wish to try it, but out of
> > the box, it does absolutely nothing except sit there taking up space.
> 
> Are you sure it's disabled by default? I don't recall converting over
> to it on my various machines. And when I search on it there are lots
> of pages about how to disable it, and virtually none on how to enable
> it.
> 
> I thought there might be some voodoo reason to do with something
> called dbus - of which I know nothing, nor the obscure journald.

The same thread as above comments on the surprise prevention of
renaming the wireless interface caused by merely installing iwd:
https://lists.debian.org/debian-user/2022/03/msg00727.html

If you then go ahead and configure it, the default resolver is set
to systemd-resolved. If you don't create the symlink necessary for
that to work, /etc/resolv.conf remains empty.

So there do appear to be some gotchas in play nowadays.

> Anyway, bind9 works pretty well as a local caching nameserver

I'm sticking with resolvconf for the time being.

Cheers,
David.



Re: Can't use mc's editor

2022-03-24 Thread David Wright
On Tue 22 Mar 2022 at 04:17:37 (-0500), Nate Bargmann wrote:
> * On 2022 21 Mar 23:30 -0500, Felix Miata wrote:
> > David Wright composed on 2022-03-21 23:07 (UTC-0500):
> > > Felix Miata wrote:
> > 
> > >> IIUC, and assuming standard file/directory permissions, if all instances 
> > >> of MC are
> > >> closed, and its ini file is then removed, every setting (except for 
> > >> panels
> > >> configuration? and hotlist), gets reverted to default on next startup.
> > 
> > > I've attached the result of that reversion (from buster). The critical
> > > line is, of course, line 4. I assume that, like me, a long time ago,
> > > you altered it to auto_save_setup=false.
> > 
> > Actually the first thing I do with any new instance of MC is set the right 
> > panel
> > listing to long. I follow that with F9, Options, Configuration, where Auto 
> > save
> > setup gets deselected, among other changes. :)
> 
> And I have Autosave selected in all my installations of mc so IME, the
> last one to close writes the file.  It's not unusual for me to have half
> a dozen instances of mc running at once!  Sometimes I find I had two or
> three running in the same terminal session.  Oh dear...

Somewhat like myself, then, except that I feel no need for regret.
AIUI, mc was developed in a world where we worked in one console
session on one machine, and there are a number of features to support
this style of working.

I've never made use of mcedit, history, hotlist, etc, nor do I save
their configuration state (or use -P) when closing. Instead of using
such "bookmark" concepts, I just leave the "book" open on the "desk"
while I turn to or open another one.

So typically I will have several mc instances on the local machine,
± instances over ssh on other machines, and occasional instances
with a different machine in the left panel. They're colour-coded
by host, with another colour reserved for mixed machine sessions.
As I see it, it's a natural consequence of working across 20
virtual desktops.

Sanity is preserved by having every mc session start in /one/ fixed
configuration state, in one of three layouts:

Invocation Left Panel   Right Panel

$ mc [dir] ‖   ${1:-$PWD}   | $HOME  ‖
or
$ mc1 [dir]‖ ${1:-$HOME} ‖
or
$ mc-foo   ‖   sh://foo/$HOME   | $HOME  ‖

Cheers,
David.



Re: Under each of these scenarios, what is the neatest and simplest way to manipulate the /etc/network/interfaces file?

2022-03-24 Thread David Wright
On Thu 24 Mar 2022 at 03:12:23 (+0100), Stella Ashburne wrote:
> From: "David Wright" 
> > On Sat 19 Mar 2022 at 03:14:54 (+0100), Stella Ashburne wrote:
> > >
> > > There are instances in which my machine is connected to a mobile hotspot. 
> > > And in some situations, it's connected to a smartphone via USB tethering. 
> > > And when I'm in the office, I may connect it to a LAN cable.
> > >
> > > Below are the contents of my /etc/network/interfaces file:
> > >
> > > # This file describes the network interfaces available on your system
> > > # and how to activate them. For more information, see interfaces(5).
> > >
> > > source /etc/network/interfaces.d/*
> >
> > I would change this line to
> >
> > source-directory /etc/network/interfaces.d
> >
> On Debian 11, the line
> 
> source /etc/network/interfaces.d/*
> 
> is correct.

Please elaborate on what you mean by "correct" in this context,
and also give your opinion on the correctness or otherwise of
this line:

  source-directory /etc/network/interfaces.d

Without knowing the reasoning behind your statement, there's
not a lot more help I can give.

Cheers,
David.



Re: enabling systemd-networkd (was: its been done again...)

2022-03-24 Thread Greg Wooledge
On Thu, Mar 24, 2022 at 08:48:21PM -0400, gene heskett wrote:
> On Thursday, 24 March 2022 20:02:57 EDT Felix Miata wrote:
> > Short form/highlights:
> > 1-create config for NIC in /etc/systemd/network/
> > 2-systemctl disable networking.service
> > 3-systemctl enable systemd-networkd.service
> > optional: provide static /etc/resolv.conf
> > e.g. systemctl disable systemd-resolved.service
> 
> Your short synopsis seems to explain it well enough, but what is a person 
> stuck without a network to look this stuff up and has never dealt with 
> systemctl in his or her life, and therefore knows zip about it, supposed 
> to do?

Print out Felix's instructions on paper.

Test them.

If they work, laminate them or something.

It turns out that not only are you not using Debian, but you're not
even using Raspbian either.  You're using some sort of specialized
Raspbian-based operating system that nobody else on this list knows
anything about.  It has its own quirks and customizations.  If you're
butting heads with those quirks, then you either need to work them
out on your own, or get in touch with the people who actually support
that OS.



Re: enabling systemd-networkd (was: its been done again...)

2022-03-24 Thread gene heskett
On Thursday, 24 March 2022 20:02:57 EDT Felix Miata wrote:
> gene heskett composed on 2022-03-24 17:21 (UTC-0400):
> > But that info is NOT plainly stated in those man pages. It may be
> > there, but its buried in drivel that does not often offer an
> > example.
> http://paste.debian.net/1235522/ Posting 1235522 from root posted at
> 2022-03-25 00:55:44 expires: 2022-04-01 00:55:44
> is a terminal log. It starts immediately post-upgrade from Bullseye to
> Bookworm, then booting the new kernel, then changing over from
> Debian's default static IP networking system to systemd's
> systemd-networkd.service. Note the relative dearth of commands that
> are not simply dumping the content of plain text files.
> 
> Short form/highlights:
> 1-create config for NIC in /etc/systemd/network/
> 2-systemctl disable networking.service
> 3-systemctl enable systemd-networkd.service
> optional: provide static /etc/resolv.conf
>   e.g. systemctl disable systemd-resolved.service

Your short synopsis seems to explain it well enough, but what is a person 
stuck without a network to look this stuff up and has never dealt with 
systemctl in his or her life, and therefore knows zip about it, supposed 
to do?  Sure seems like an awfull good question to me. He effectively 
sitting in a black box without even an exit sign for illumination.

Felix, your patience with me is amazing, thank you.

These are the sort of answers that really ought to be in a "man no-
network" manpage...

> --
> Evolution as taught in public schools is, like religion,
>   based on faith, not based on science.
> 
>  Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!
> 
> Felix Miata
> 
> .
Take care and stay well.

Cheers, Gene Heskett.
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis





Re: its been done again. No network

2022-03-24 Thread gene heskett
On Thursday, 24 March 2022 07:18:43 EDT Andrew M.A. Cater wrote:
> On Wed, Mar 23, 2022 at 08:40:49PM -0400, gene heskett wrote:
> > Greetings all;
> > 
> > Just installed a arm64 linux on a raspi4, and as near as I can tell
> > early in the game, everything seem to be working except the network.
> > I cannot get rid of a default 169.254.xx.yy route in ip a or ip r.
> 
> I'd strongly suggest that you use Gunnar Wolf's images that then give
> you something that is as near as anything vanilla Debian. Raspberry Pi
> folks are really not too interested in sorting out Debian-type
> problems.
> 
Link plz Andy?

I was given the address to get this arm64.img thats a complete desktop 
system with a realtime preept kernel already installed. But its complete 
and ready to rock and roll except for the network. I cannot say that 
about anything debian has offered for the pi's to date, and I dl'd & 
tried them all in the last 6 weeks.



I'd repost the link to it, but finding it in the new kde5 version of 
kmail is quite impossible. 


> Take care
> 
> Andy Cater
> 
> > I have even renamed the /sbin/avahi-daemon to something insulting,
> > and
> > canceled its execute bits, and service networking restart about a
> > dozen times after checking the rest of the networking config, but it
> > is still there. There isn't a thing on my local network listening on
> > that address block.
> > 
> > So how do I get rid of it so I can have a net with MY default route
> > and bring it up to date?
> > 
> > Thanks all.
> > 
> > Cheers, Gene Heskett.
> > --
> > 
> > "There are four boxes to be used in defense of liberty:
> >  soap, ballot, jury, and ammo. Please use in that order."
> > 
> > -Ed Howdershelt (Author, 1940)
> > If we desire respect for the law, we must first make the law
> > respectable.> 
> >  - Louis D. Brandeis
> 
> .


Cheers, Gene Heskett.
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis





Re: enabling systemd-networkd (was: its been done again...)

2022-03-24 Thread Felix Miata
gene heskett composed on 2022-03-24 17:21 (UTC-0400):

> But that info is NOT plainly stated in those man pages. It may be there, 
> but its buried in drivel that does not often offer an example.

http://paste.debian.net/1235522/ Posting 1235522 from root posted at 2022-03-25
00:55:44 expires: 2022-04-01 00:55:44
is a terminal log. It starts immediately post-upgrade from Bullseye to Bookworm,
then booting the new kernel, then changing over from Debian's default static IP
networking system to systemd's systemd-networkd.service. Note the relative 
dearth
of commands that are not simply dumping the content of plain text files.

Short form/highlights:
1-create config for NIC in /etc/systemd/network/
2-systemctl disable networking.service
3-systemctl enable systemd-networkd.service
optional: provide static /etc/resolv.conf
e.g. systemctl disable systemd-resolved.service
-- 
Evolution as taught in public schools is, like religion,
based on faith, not based on science.

 Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!

Felix Miata



Re: systemd.resolved problems

2022-03-24 Thread Jeremy Ardley


On 25/3/22 7:26 am, Greg Wooledge wrote:

On Fri, Mar 25, 2022 at 06:51:55AM +0800, Jeremy Ardley wrote:

Is there any compelling reason to use systemd.resolved over ordinary DNS ?
If not, why was it inflicted on debian?

It's disabled by default.  It's there if you wish to try it, but out of
the box, it does absolutely nothing except sit there taking up space.



Are you sure it's disabled by default? I don't recall converting over to 
it on my various machines. And when I search on it there are lots of 
pages about how to disable it, and virtually none on how to enable it.


I thought there might be some voodoo reason to do with something called 
dbus - of which I know nothing, nor the obscure journald.


Anyway, bind9 works pretty well as a local caching nameserver

--
Jeremy




OpenPGP_signature
Description: OpenPGP digital signature


Re: systemd.resolved problems

2022-03-24 Thread Greg Wooledge
On Fri, Mar 25, 2022 at 06:51:55AM +0800, Jeremy Ardley wrote:
> Is there any compelling reason to use systemd.resolved over ordinary DNS ?
> If not, why was it inflicted on debian?

It's disabled by default.  It's there if you wish to try it, but out of
the box, it does absolutely nothing except sit there taking up space.

There's really no such thing as "ordinary DNS", though.  Each nameserver
is implemented by some developer or team of developers, and is supposed
to conform to the various RFCs that define how DNS work.  It's up to
you whether you want to run a local nameserver, and if so, to select
which one, and to configure it according to your needs.

systemd-resolved is just one of many available caching nameservers.  If
it works for you, that's fantastic.  If it doesn't, then you can try
something else.

If you don't run a local nameserver, then you will most likely receive
the IP address(es) of someone else's nameservers via DHCP, and you'll
use those instead.  Either that, or you will manually type in the
addresses of some nameservers.



Re: Manual OpenVPN

2022-03-24 Thread Paynalton
El jue, 24 mar 2022 a las 1:09, Camaleón () escribió:

> El 2022-03-23 a las 18:14 -0600, Paynalton escribió:
>
> > Hola, alguien sabe donde hay un manual para instalar OpenVPN Server en
> > debian actualizado?
>
> Pues Google devuelve varios, por ejemplo:
>
> Install OpenVPN Server on Debian 11/Debian 10
> https://kifarunix.com/install-openvpn-server-on-debian-11-debian-10/
>
> How To Set Up an OpenVPN Server on Debian 10
>
> https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-debian-10
>
> > He seguido este: https://wiki.debian.org/OpenVPN
> >
> > Pero me da un error porque la versión 2.4 no acepta el parámetro
> data-ciphers,
> > así que no creo que esté actualizado.
> >
> > Estoy usando BullSeye
>
> Hum... la versión de OpenVPN en Debian 11 es la 2.5.1, ¿seguro que tienes
> la 2.4 instalada? :-?
>
> Porque entonces lo que necesitas es un manual para una versión
> anterior de OpenVPN, no uno actualizado.
>
> En cualquier caso, revisa la documentación de OpenVPN, seguro que te
> servirá para resolver el problema, independientemente de la versión que
> tengas instalada:
>
> OpenVPN Cipher Negotiation (Quick reference) ¶
>
> https://community.openvpn.net/openvpn/wiki/CipherNegotiation#Commonconfigurations
>
> Saludos,
>
> --
> Camaleón


Muchas gracias.

Si, estoy usando un EC2 en amazon y, en efecto, es debian 10.
Con esos manuales me ayud{o, muchas gracias.


Re: LinuxCNC on-non-Debian systems is probably unsupportable here [WAS: Re: its been done again. No network].

2022-03-24 Thread gene heskett
On Thursday, 24 March 2022 18:09:11 EDT Andrew M.A. Cater wrote:
> On Thu, Mar 24, 2022 at 04:33:33PM -0400, gene heskett wrote:
> > On Thursday, 24 March 2022 11:27:07 EDT Curt wrote:
> > > On 2022-03-24, Andrew M.A. Cater  wrote:
> > > > On Wed, Mar 23, 2022 at 08:40:49PM -0400, gene heskett wrote:
> > > >> Greetings all;
> > > >> 
> > > >> Just installed a arm64 linux on a raspi4, and as near as I can
> > > >> tell
> > > >> early in the game, everything seem to be working except the
> > > >> network. I cannot get rid of a default 169.254.xx.yy route in ip
> > > >> a
> > > >> or ip r.
> > > > 
> > > > I'd strongly suggest that you use Gunnar Wolf's images that then
> > > > give
> > > > you something that is as near as anything vanilla Debian.
> > > > Raspberry
> > > > Pi folks are really not too interested in sorting out Debian-type
> > > > problems.
> > > > 
> > > > Take care
> > > > 
> > > > Andy Cater
> > > 
> > > That's these images here, I guess, of which you are speaking:
> > > 
> > > https://raspi.debian.net/tested-images/
> > 
> > No, this link came from a cnc'er, and leads to a google drive
> > download. With linuxcnc-2.8.2 already installed.
> > 
> > > .
> 
> Hi Gene,
> 
> Random distribution with random provenance from an unknown origin,then:
> 
> Can I commend to you: https://wiki.debian.org/DontBreakDebian
> 
> As noted to you elsewhere, LinuxCNC is being maintained in Debian now -
> it's just not hit Debian stable yet.

And my friend, whom I'd promised a couple 64G u-sd cards to, about 5 
months back before I lost both 2T seagate drives to the exact same 
failure mode, they simply went off line in the middle of the night about 
2 months apart and became invisible, 2 u-sd cards to boot his rpi4 and 
run his big Cinci milling machine with, needed these cards 3,000 miles 
west of me, last Saturday. With those drive failures I lost 24 years of 
my history, which included how I did it for one of my machines a little 
over 2 years ago. So now I'm trying to duplicate what I first did using 
the raspi version of wheezy on an rpi3b. And I still don't have this 
bullseye system doing more than half what the stretch system was doing on 
pretty much the same hardware.  The main diff is that /home, which was 
about a terrabyte on one of those dead 2T seagates, is now a 1.7T raid10 
on SSD's. The other 2T that died, was my vtapes for amanda. Bingo, no 
backups. And I catch it on this list for getting upset with seacrate for 
putting a tech that wasn't ready for prime time on the market anyway?

> https://linuxcnc.org/2022/03/03/LinuxCNC-in-Debian/
> 
> All the very best, as ever,
> 
> Andy Cater

Take care and stay well Andy.

Cheers, Gene Heskett.
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis





systemd.resolved problems

2022-03-24 Thread Jeremy Ardley
I've been having continual problems with postfix and errors in the mail 
log about unresolved  MX and A records. Not all the time but often 
enough to be annoying. I discovered postfix was using the 
systemd.resolved server for DNS.


I did some experiments with resolvectl and there were serious delays 
looking up sites or just plain failures. In comparison my bind9 instance 
never had a problem and returned instantly. ( systemd.resolved used the 
same forwarders as my bind9 )


I have now disabled systemd.resolved on several systems, removed the 
link /etc/resolv.conf, and either replaced it with a static file or 
allow NetworkManager write it after dhcp from an upstream ISP


In all cases there are ordinary DNS resolvers listed in /etc/resolv.conf

So far everything is working really well.

Is there any compelling reason to use systemd.resolved over ordinary DNS 
? If not, why was it inflicted on debian?


--
Jeremy



OpenPGP_signature
Description: OpenPGP digital signature


LinuxCNC on-non-Debian systems is probably unsupportable here [WAS: Re: its been done again. No network].

2022-03-24 Thread Andrew M.A. Cater
On Thu, Mar 24, 2022 at 04:33:33PM -0400, gene heskett wrote:
> On Thursday, 24 March 2022 11:27:07 EDT Curt wrote:
> > On 2022-03-24, Andrew M.A. Cater  wrote:
> > > On Wed, Mar 23, 2022 at 08:40:49PM -0400, gene heskett wrote:
> > >> Greetings all;
> > >> 
> > >> Just installed a arm64 linux on a raspi4, and as near as I can tell
> > >> early in the game, everything seem to be working except the
> > >> network. I cannot get rid of a default 169.254.xx.yy route in ip a
> > >> or ip r.
> > > 
> > > I'd strongly suggest that you use Gunnar Wolf's images that then give
> > > you something that is as near as anything vanilla Debian. Raspberry
> > > Pi folks are really not too interested in sorting out Debian-type
> > > problems.
> > > 
> > > Take care
> > > 
> > > Andy Cater
> > 
> > That's these images here, I guess, of which you are speaking:
> > 
> > https://raspi.debian.net/tested-images/
> No, this link came from a cnc'er, and leads to a google drive download. 
> With linuxcnc-2.8.2 already installed.
> > .
> 
Hi Gene,

Random distribution with random provenance from an unknown origin,then:

Can I commend to you: https://wiki.debian.org/DontBreakDebian

As noted to you elsewhere, LinuxCNC is being maintained in Debian now -
it's just not hit Debian stable yet.

https://linuxcnc.org/2022/03/03/LinuxCNC-in-Debian/

All the very best, as ever,

Andy Cater

> 
> Cheers, Gene Heskett.
> -- 
> "There are four boxes to be used in defense of liberty:
>  soap, ballot, jury, and ammo. Please use in that order."
> -Ed Howdershelt (Author, 1940)
> If we desire respect for the law, we must first make the law respectable.
>  - Louis D. Brandeis
> 
> 
> 



Re: its been done again. No network

2022-03-24 Thread gene heskett
On Thursday, 24 March 2022 16:57:33 EDT Felix Miata wrote:
> gene heskett composed on 2022-03-24 16:15 (UTC-0400):
> > On Thursday, 24 March 2022 13:11:20 EDT Felix Miata wrote:
> >> Andy Smith composed on 2022-03-24 12:51 (UTC-):
> >> > On Wed, Mar 23, 2022 at 09:10:06PM -0400, Felix Miata wrote:
>  gene heskett composed on 2022-03-23 20:40 (UTC-0400):
>  ...
>  
>  So how do I get rid of it so I can have a net with MY default
>  
>  > route and bring it up to date?
>  
>  https://wiki.debian.org/SystemdNetworkd works for my static IP
>  installations, which number several hundred, minus about 5.
> >>> 
> >>> Gene is not running Debian and is again wasting everyone's time by
> >>> asking about it here, despite being repeatedly asked not to. So for
> >>> anyone finding this in the archives, Gene's problem is not with
> >>> Debian, it is with Raspbian, and his now-remembered solution does
> >>> not apply to Debian.
> >> 
> >> The systemd-networkd option is available in all distros running
> >> systemd.
> > 
> > But I'm serious Felix, when I ask how the heck is an update that
> > changes to all that from a single file in /etc/network/interfaces.d,
> > doing away with that file, but the person is supposed to actually
> > discover that, and then make sense out of reading it? The potential
> > for double-speak has been well explored in such a man page once you
> > find it.  Thanks for the link name.
> 
> On that page there isn't very much before you get to "beyond the
> basics". With static IP, that's as far as anyone need read, assuming
> having managed to determine how to disengage the in place network
> setup.
> 
That is 200% the problem, its so deeply buried you cannot find it, and 
asking how on a mailing list is like searching for a gold ring in a 
tijuana pan shop.  Sometimes its 3 or 4 days of fine tuning my questions 
before a meaningfull answer comes out of someones fingers.

> I don't know that I understand what you're asking. What is "all that"?
> /etc/systemd/network/* takes the place of /etc/network* when taking
> advantage of the already in place init system+'s ability to bring up
> and maintain an interface. Something has to turn on whatever
> networking system is configured. systemd-networkd.service is systemd's
> network setup enabler. "All that" seems to be no more than
> /etc/systemd/network/.network with 6-7 lines, plus enabling
> systemd-networkd.service.

But that info is NOT plainly stated in those man pages. It may be there, 
but its buried in drivel that does not often offer an example.

Take care and stay well Felix.

> Evolution as taught in public schools is, like religion,
>   based on faith, not based on science.
> 
>  Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!
> 
> Felix Miata
> 
> .


Cheers, Gene Heskett.
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis





Re: its been done again. No network

2022-03-24 Thread Felix Miata
gene heskett composed on 2022-03-24 16:15 (UTC-0400):

> On Thursday, 24 March 2022 13:11:20 EDT Felix Miata wrote:

>> Andy Smith composed on 2022-03-24 12:51 (UTC-):

>> > On Wed, Mar 23, 2022 at 09:10:06PM -0400, Felix Miata wrote:

 gene heskett composed on 2022-03-23 20:40 (UTC-0400):
 ...

 So how do I get rid of it so I can have a net with MY default
 > route and bring it up to date?

 https://wiki.debian.org/SystemdNetworkd works for my static IP
 installations, which number several hundred, minus about 5.

>>> Gene is not running Debian and is again wasting everyone's time by
>>> asking about it here, despite being repeatedly asked not to. So for
>>> anyone finding this in the archives, Gene's problem is not with
>>> Debian, it is with Raspbian, and his now-remembered solution does
>>> not apply to Debian.

>> The systemd-networkd option is available in all distros running
>> systemd.

> But I'm serious Felix, when I ask how the heck is an update that changes 
> to all that from a single file in /etc/network/interfaces.d, doing away 
> with that file, but the person is supposed to actually discover that, and 
> then make sense out of reading it? The potential for double-speak has 
> been well explored in such a man page once you find it.  Thanks for the 
> link name.

On that page there isn't very much before you get to "beyond the basics". With
static IP, that's as far as anyone need read, assuming having managed to 
determine
how to disengage the in place network setup.

I don't know that I understand what you're asking. What is "all that"?
/etc/systemd/network/* takes the place of /etc/network* when taking advantage of
the already in place init system+'s ability to bring up and maintain an 
interface.
Something has to turn on whatever networking system is configured.
systemd-networkd.service is systemd's network setup enabler. "All that" seems to
be no more than /etc/systemd/network/.network with 6-7 lines, plus
enabling systemd-networkd.service.
-- 
Evolution as taught in public schools is, like religion,
based on faith, not based on science.

 Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!

Felix Miata



Re: its been done again. No network

2022-03-24 Thread gene heskett
On Thursday, 24 March 2022 11:27:07 EDT Curt wrote:
> On 2022-03-24, Andrew M.A. Cater  wrote:
> > On Wed, Mar 23, 2022 at 08:40:49PM -0400, gene heskett wrote:
> >> Greetings all;
> >> 
> >> Just installed a arm64 linux on a raspi4, and as near as I can tell
> >> early in the game, everything seem to be working except the
> >> network. I cannot get rid of a default 169.254.xx.yy route in ip a
> >> or ip r.
> > 
> > I'd strongly suggest that you use Gunnar Wolf's images that then give
> > you something that is as near as anything vanilla Debian. Raspberry
> > Pi folks are really not too interested in sorting out Debian-type
> > problems.
> > 
> > Take care
> > 
> > Andy Cater
> 
> That's these images here, I guess, of which you are speaking:
> 
> https://raspi.debian.net/tested-images/
No, this link came from a cnc'er, and leads to a google drive download. 
With linuxcnc-2.8.2 already installed.
> .


Cheers, Gene Heskett.
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis





Re: its been done again. No network

2022-03-24 Thread gene heskett
On Thursday, 24 March 2022 13:11:20 EDT Felix Miata wrote:
> Andy Smith composed on 2022-03-24 12:51 (UTC-):
> > On Wed, Mar 23, 2022 at 09:10:06PM -0400, Felix Miata wrote:
> >> gene heskett composed on 2022-03-23 20:40 (UTC-0400):
> >> ...
> >> 
> >> > So how do I get rid of it so I can have a net with MY default
> >> > route and bring it up to date?
> >> 
> >> https://wiki.debian.org/SystemdNetworkd works for my static IP
> >> installations, which number several hundred, minus about 5.
> > 
> > Gene is not running Debian and is again wasting everyone's time by
> > asking about it here, despite being repeatedly asked not to. So for
> > anyone finding this in the archives, Gene's problem is not with
> > Debian, it is with Raspbian, and his now-remembered solution does
> > not apply to Debian.
> 
> The systemd-networkd option is available in all distros running
> systemd.

But I'm serious Felix, when I ask how the heck is an update that changes 
to all that from a single file in /etc/network/interfaces.d, doing away 
with that file, but the person is supposed to actually discover that, and 
then make sense out of reading it? The potential for double-speak has 
been well explored in such a man page once you find it.  Thanks for the 
link name.

Take care Felix.
> --
> Evolution as taught in public schools is, like religion,
>   based on faith, not based on science.
> 
>  Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!
> 
> Felix Miata
> 
> .


Cheers, Gene Heskett.
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis





Re: its been done again. No network

2022-03-24 Thread Felix Miata
Andy Smith composed on 2022-03-24 12:51 (UTC-):

> On Wed, Mar 23, 2022 at 09:10:06PM -0400, Felix Miata wrote:

>> gene heskett composed on 2022-03-23 20:40 (UTC-0400):
>> ...
>> > So how do I get rid of it so I can have a net with MY default route and 
>> > bring it up to date?
>> 
>> https://wiki.debian.org/SystemdNetworkd works for my static IP installations,
>> which number several hundred, minus about 5.

> Gene is not running Debian and is again wasting everyone's time by
> asking about it here, despite being repeatedly asked not to. So for
> anyone finding this in the archives, Gene's problem is not with
> Debian, it is with Raspbian, and his now-remembered solution does
> not apply to Debian.

The systemd-networkd option is available in all distros running systemd.
-- 
Evolution as taught in public schools is, like religion,
based on faith, not based on science.

 Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!

Felix Miata



Re: remettre windows

2022-03-24 Thread didier gaumet
 "Reuh... Maître windows" (beau déterrage, 2017)

Autant remettre d'aplomb un OS Microsoft à la manière Microsoft, c'est
plus simple :-)

- de nos jours (il me semble que ça été inauguré avec Windows 7 mais ma
mémoire n'est pas infaillible), pas besoin de racheter un support
physique (CD, DVD, clé USB) sur lequel se trouve une édition de
Windows: Microsoft propose (gratuitement et sans formalités) de
télécharger une image ISO à graver (sur support optique, ça ne marche
pas avec une clé USB et cp ou dd mais peut-être avec d'autres outils,
j'ai pas testé) ou d'utiliser ou de créer une clé USB d'installation
(sous windows, je ne sais pas si ça marche aussi avec Wine, par
exemple).
ç'est là:
https://support.microsoft.com/fr-fr/windows/cr%C3%A9er-un-support-d-installation-pour-windows-99a58364-8c02-206f-aa6f-40c3b507420d

- ensuite avec le support d'installation, on peut "réparer le
démarrage":
https://docs.microsoft.com/fr-fr/windows/client-management/advanced-troubleshooting-boot-problems

- pour une réinstallation de Windows (depuis W8, je crois) sur un PC sr
lequel il a été installé, même si il ne l'est plus, il suffit de
disposer du support d'installation et d'installer. Pas besoin de
connaître et fournir une clé de produit, elle est calculée
automatquement, il suffit de répondre "je n'ai pas de clé" lorsqu'on se
le voit demander.




Re: wpa_supplicant, was Re: iwd + systemd-networkd + resolvconf wrinkles

2022-03-24 Thread Brian
On Tue 22 Mar 2022 at 23:06:08 -0500, David Wright wrote:

> (OTOH wicd appears to be able to detect that the interface has come
> up, and to configure it, DHCP and all. In fact, I've found it more
> reliable for wired interfaces as well, where I suspect glitches have
> been caused by Powerline devices (ethernet through the mains power).)

wicd-cli and wicd-curses are in experimental. A quick test here
indicates either should install on bullseye.

-- 
Brian.



Re: its been done again. No network

2022-03-24 Thread Christian Britz



On 2022-03-24 16:27 UTC+0100, Curt wrote:

> On 2022-03-24, Andrew M.A. Cater  wrote:

>> I'd strongly suggest that you use Gunnar Wolf's images that then give you 
>> something that is as near as anything vanilla Debian. Raspberry Pi folks are 
>> really not too interested in sorting out Debian-type problems.
>>
>> Take care
>>
>> Andy Cater
>>
> 
> That's these images here, I guess, of which you are speaking:
> 
> https://raspi.debian.net/tested-images/
I can really recommend them. I switched to them from Raspbian about 2
weeks ago, and the image runs really nice on my RasPi 4 B. There is a
slight difference in the temperature which is reported by lm-sensors,
otherwise no problems yet.

I switched because Raspian (Raspberry Pi OS, how it is called now) did
not deliver security fixes for their custom kernel in time. And I prefer
running pure Debian whenever possible.

Regards,
Christian

-- 
http://www.cb-fraggle.de



Re: its been done again. No network

2022-03-24 Thread gene heskett
On Thursday, 24 March 2022 08:51:39 EDT Andy Smith wrote:
> Hello,
> 
> On Wed, Mar 23, 2022 at 09:10:06PM -0400, Felix Miata wrote:
> > gene heskett composed on 2022-03-23 20:40 (UTC-0400):
> > ...
> > 
> > > So how do I get rid of it so I can have a net with MY default route
> > > and bring it up to date?
> > 
> > https://wiki.debian.org/SystemdNetworkd works for my static IP
> > installations, which number several hundred, minus about 5.
> 
> Gene is not running Debian and is again wasting everyone's time by
> asking about it here, despite being repeatedly asked not to. So for
> anyone finding this in the archives, Gene's problem is not with
> Debian, it is with Raspbian, and his now-remembered solution does
> not apply to Debian.
> 
But Andy, it should, its the ONLY sensible solution to a problem most 
distributions have when they encounter a home location without a dhcp 
server.  My home network name to address resolution method using a hosts 
file, is at least a hundred milliseconds faster than anything involving a 
dns server. And its concept is also simple, scan the hosts file first, if 
that does NOT find it, forward it to the gateway, and my gateway/router 
forwards it to whereever shentel.net has a dns server. And it Just Works.

Debian, FWIW is just as guilty as anybody else but uses a different path 
to get there, if there is not a dhcp server available, they too use avahi 
to plug in a totally useless, non-existant address in the 169.254 ipv4 
block. And that does NOT get thru a router if one is in use.

It might work if connected directly to the modem, I don't know as I've 
never been without a router once the net arrived at my street. With a 
router, the only reason I run iptables is to specifically block the bots 
that insist on mirroring my web pages, burning up 80 to 100 gigs a month 
of my 10 meg ADSL connection, virtually all of my upload bandwidth.

Few of those jerks pay any attention to a robots.txt file.
 
> Thanks,
> Andy
> 
> .


Cheers, Gene Heskett.
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis





Re: its been done again. No network

2022-03-24 Thread Curt
On 2022-03-24, Andrew M.A. Cater  wrote:
> On Wed, Mar 23, 2022 at 08:40:49PM -0400, gene heskett wrote:
>> Greetings all;
>> 
>> Just installed a arm64 linux on a raspi4, and as near as I can tell early 
>> in the game, everything seem to be working except the network. I cannot 
>> get rid of a default 169.254.xx.yy route in ip a or ip r.
>> 
>
> I'd strongly suggest that you use Gunnar Wolf's images that then give you 
> something that is as near as anything vanilla Debian. Raspberry Pi folks are 
> really not too interested in sorting out Debian-type problems.
>
> Take care
>
> Andy Cater
>

That's these images here, I guess, of which you are speaking:

https://raspi.debian.net/tested-images/



debian testing and cannot change the display picture on gnome

2022-03-24 Thread Klearchos-Angelos Gkountras
Hello there , 

I moved to debian and I cannot change the display picture that also
showing on gdm . 

What I do excactly . opening the settings > users > unlock the
permissions > and then I choose my picture . 

is there any other way even with commoand line ?
-- 
Klearchos-Angelos Gkountras
jema...@cryptolab.net



Re: remettre windows

2022-03-24 Thread Michel Memeteau



Le 24/03/2022 à 15:46, Mathias Dufresne a écrit :
Avec UEFI, Windows devrait avoir créé une entrée UEFI ou celle-ci peut 
être recréée depuis un linux (live cd ou autre). Une fois l'UEFI 
configuré pour lancer le bootloader de MS Windows, plus de souci avec 
grub puisque celui-ci n'est plus lancé


Exactement et tu peux utiliser EasyUefi pour le faire depuis windows


https://www.easyuefi.com/faq/en-US/Edit-UEFI-Boot-Entries.html



--

--
Michel Memeteau

Ekimia ( https://ekimia.fr )

Directeur

tel:0624808051

Address :
620 avenue de la roche fourcade
13400 Aubagne
France







Re: remettre windows

2022-03-24 Thread Mathias Dufresne
Avec UEFI, Windows devrait avoir créé une entrée UEFI ou celle-ci peut être
recréée depuis un linux (live cd ou autre). Une fois l'UEFI configuré pour
lancer le bootloader de MS Windows, plus de souci avec grub puisque
celui-ci n'est plus lancé

Le jeu. 24 mars 2022 à 14:41, Luc Novales  a écrit :

> Bonjour,
> Le 24/03/2022 à 12:48, hamster a écrit :
>
> Souci, j'ai pas de CD d'installation.
>
>
> Deux solutions que je n'ai pas testées, prudence... ;)
>
> 1. Peut-être directement sous Windows, en ayant booté via grub.
>
> https://www.diskpart.com/windows-10/fix-mbr-windows-10-0708.html
>
>
> 2. Sinon, il semble que testdisk fasse aussi le travail si le backup du
> boot secteur existe : "Recover NTFS boot sector from its backup".
>
> Il est disponible sur le live-cd ultimatebootcd :
>
> https://www.ultimatebootcd.com/
>
>
> voir : https://www.cgsecurity.org/wiki/TestDisk_Step_By_Step
>
>
> Bonne journée,
>
> Luc.
>
>
>
>
>


Re: remettre windows

2022-03-24 Thread Luc Novales

Bonjour,

Le 24/03/2022 à 12:48, hamster a écrit :

Souci, j'ai pas de CD d'installation.


Deux solutions que je n'ai pas testées, prudence... ;)

1. Peut-être directement sous Windows, en ayant booté via grub.

https://www.diskpart.com/windows-10/fix-mbr-windows-10-0708.html


2. Sinon, il semble que testdisk fasse aussi le travail si le backup du 
boot secteur existe : "Recover NTFS boot sector from its backup".


Il est disponible sur le live-cd ultimatebootcd :

https://www.ultimatebootcd.com/


voir : https://www.cgsecurity.org/wiki/TestDisk_Step_By_Step


Bonne journée,

Luc.





Re: intel-media-va-driver segmentation fault in unstable

2022-03-24 Thread Jörg-Volker Peetz

Is already in Debian BTS: 
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1007992

Regards,
Jörg.



Re: remettre windows

2022-03-24 Thread Pascal Le Bris
Bonjour
  Peut-etre une piste via un une clé usb et refind
https://www.rodsbooks.com/refind/getting.html
https://sourceforge.net/projects/refind/
A
- Mail original -
> De: "hamster" 
> À: "debian-user-french" 
> Envoyé: Jeudi 24 Mars 2022 12:48:19
> Objet: Re: remettre windows

> Le 03/10/2017 à 17:28, Pascal Hambourg a écrit :
>> Le 03/10/2017 à 17:11, hamster a écrit :
>>> Quelqu'un a qui j'ai installé débian en double boot n'est pas séduit par
>>> le bidule et me demande de lui remettre l'ordi avec uniquement windows.
>>> Je me fais un point d'honneur a satisfaire sa demande, seulement voila :
>>> si je vire debian, grub ne marche plus.
>>> Une solution serait de restaurer le bootloader de windows, mais je sais
>>> pas faire.
>>
>> Moi non plus. J'ai entendu parler de fixboot et fixmbr avec un CD ou
>> DVD d'installation de Windows, mais jamais fait.
> 
> Souci, j'ai pas de CD d'installation.
> 
>>> Est-ce qu'il existe des bootloaders indépendants
>>> de linux pour remplacer grub (et dans ce cas lequel me conseillez
>>> vous) ?
>>
>> mbr, qui installe un code amorce presque standard dans le MBR.
>> Lancer l'installateur Debian en mode expert.
>> Sélectionner mbr dans les composants additionnels.
>> Dès que possible, passer dans une console (Alt+F2 ou F3) et installer
>> le code amorce avec la commande
>>
>> install-mbr /dev/sdX
> 
> Ca a l'air très bien, mais je reviens vers vous parce que l'ordi que
> j'ai a traiter maintenant est en UEFI. Du coup je suis un peu perdu et
> j'ai pas envie de faire une betise. Si je passe en mode legacy le
> windows (qui a été installé sur UEFI) ne marchera plus, et si je reste
> en UEFI le démarrage n'est plus géré par le MBR. Ou alors c'est que j'ai
> pas tout compris.
> 
> Merci pour vos lumières.



Re: its been done again. No network

2022-03-24 Thread Andy Smith
Hello,

On Wed, Mar 23, 2022 at 09:10:06PM -0400, Felix Miata wrote:
> gene heskett composed on 2022-03-23 20:40 (UTC-0400):
> ...
> > So how do I get rid of it so I can have a net with MY default route and 
> > bring it up to date?
> 
> https://wiki.debian.org/SystemdNetworkd works for my static IP installations,
> which number several hundred, minus about 5.

Gene is not running Debian and is again wasting everyone's time by
asking about it here, despite being repeatedly asked not to. So for
anyone finding this in the archives, Gene's problem is not with
Debian, it is with Raspbian, and his now-remembered solution does
not apply to Debian.

Thanks,
Andy



Re: remettre windows

2022-03-24 Thread hamster

Le 03/10/2017 à 17:28, Pascal Hambourg a écrit :

Le 03/10/2017 à 17:11, hamster a écrit :

Quelqu'un a qui j'ai installé débian en double boot n'est pas séduit par
le bidule et me demande de lui remettre l'ordi avec uniquement windows.
Je me fais un point d'honneur a satisfaire sa demande, seulement voila :
si je vire debian, grub ne marche plus.
Une solution serait de restaurer le bootloader de windows, mais je sais
pas faire.


Moi non plus. J'ai entendu parler de fixboot et fixmbr avec un CD ou 
DVD d'installation de Windows, mais jamais fait.


Souci, j'ai pas de CD d'installation.


Est-ce qu'il existe des bootloaders indépendants
de linux pour remplacer grub (et dans ce cas lequel me conseillez 
vous) ?


mbr, qui installe un code amorce presque standard dans le MBR.
Lancer l'installateur Debian en mode expert.
Sélectionner mbr dans les composants additionnels.
Dès que possible, passer dans une console (Alt+F2 ou F3) et installer 
le code amorce avec la commande


install-mbr /dev/sdX


Ca a l'air très bien, mais je reviens vers vous parce que l'ordi que 
j'ai a traiter maintenant est en UEFI. Du coup je suis un peu perdu et 
j'ai pas envie de faire une betise. Si je passe en mode legacy le 
windows (qui a été installé sur UEFI) ne marchera plus, et si je reste 
en UEFI le démarrage n'est plus géré par le MBR. Ou alors c'est que j'ai 
pas tout compris.


Merci pour vos lumières.



Re: its been done again. No network

2022-03-24 Thread Andrew M.A. Cater
On Wed, Mar 23, 2022 at 08:40:49PM -0400, gene heskett wrote:
> Greetings all;
> 
> Just installed a arm64 linux on a raspi4, and as near as I can tell early 
> in the game, everything seem to be working except the network. I cannot 
> get rid of a default 169.254.xx.yy route in ip a or ip r.
> 

I'd strongly suggest that you use Gunnar Wolf's images that then give you 
something that is as near as anything vanilla Debian. Raspberry Pi folks are 
really not too interested in sorting out Debian-type problems.

Take care

Andy Cater

> I have even renamed the /sbin/avahi-daemon to something insulting, and 
> canceled its execute bits, and service networking restart about a dozen 
> times after checking the rest of the networking config, but it is still 
> there. There isn't a thing on my local network listening on that address 
> block.
> 
> So how do I get rid of it so I can have a net with MY default route and 
> bring it up to date?
> 
> Thanks all.
> 
> Cheers, Gene Heskett.
> -- 
> "There are four boxes to be used in defense of liberty:
>  soap, ballot, jury, and ammo. Please use in that order."
> -Ed Howdershelt (Author, 1940)
> If we desire respect for the law, we must first make the law respectable.
>  - Louis D. Brandeis
> 
> 
> 



Re: swap maxed out when plenty of RAM available

2022-03-24 Thread Nathanael Schweers


Adam Weremczuk  writes:

> The container was running like that for several months until this morning 
> when its core service (dhcp) started failing.

Just a wild guess, but do you know what caused dhcp to fail?  Was it too
little memory?
>
> I logged in to investigate and noticed 100% of swap being used with maybe 
> 10-20% of RAM in use.

If I recall correctly, Linux may choose to swap pages out in order to
free up physical memory in order to use said memory for buffers and
caches.  This is a performance optimization.  So if there are pages
which have not been touched for a while, but I/O performance might
benefit from a larger cache, this is actually good for performance.

Regards,
Nathanael



Re: een "backport" van package hutsefluts

2022-03-24 Thread Paul van der Vlis

Op 24-03-2022 om 10:18 schreef Wouter Verhelst:

On Tue, Feb 08, 2022 at 11:33:25AM +0100, Paul van der Vlis wrote:

Ik vraag me wel eens af waarom het bouwen van een pakket perse op dezelfde
versie van Debian moet.


Omdat anders de software tegen libraries uit de versie waarop het gebouwd werd
zou kunnen worden, en dan kàn je het mogelijk zelfs niet installeren onder de
andere versie.


Als ik kijk naar Firefox van upstream, dan kan dat wel geïnstalleerd 
worden onder verschillende versies van Debian en ook in andere distro's.


Misschien omdat er libraries worden meegeleverd, dat weet ik niet.



Groet,
Paul


--
Paul van der Vlis Linux systeembeheer Groningen
https://vandervlis.nl/



Re: force IPv6 dynamic address?

2022-03-24 Thread Jeremy Ardley


On 24/3/22 5:53 pm, Tim Woodall wrote:



But I'm as paranoid about unknown outbound connections as I am about
inbound ones - and, unfortunately, outbound is much harder to secure,
especially if you don't trust google!



Perhaps a specialised proxy for gmail etc connections that can strip out 
identifying information or substitute anonymised information?


gproxyd anyone

--
Jeremy



OpenPGP_signature
Description: OpenPGP digital signature


Re: force IPv6 dynamic address?

2022-03-24 Thread Tim Woodall

On Thu, 24 Mar 2022, Jeremy Ardley wrote:



On 24/3/22 1:11 am, Tim Woodall wrote:

I believe it's setting this to 2 that you want (I think there's a
setting to go in eni to do this too)

https://sysctl-explorer.net/net/ipv6/use_tempaddr/


My concern is that if I go to 1 or 2 then logging for non email activity may 
suffer.


I don't know how real network engineers would solve this, but at home I
tag all traffic based on MAC at my firewall so I can easily identify the
device in the iptables log regardless of the ip.

For traffic that is sent via an intercepting proxy I also rewrite the
ipv6 source address so that the (internal) ip is unique at the proxy.

Unknown MACs aren't allowed out.

But I'm as paranoid about unknown outbound connections as I am about
inbound ones - and, unfortunately, outbound is much harder to secure,
especially if you don't trust google!



Re: een "backport" van package hutsefluts

2022-03-24 Thread Wouter Verhelst
On Tue, Feb 08, 2022 at 11:33:25AM +0100, Paul van der Vlis wrote:
> Ik vraag me wel eens af waarom het bouwen van een pakket perse op dezelfde
> versie van Debian moet.

Omdat anders de software tegen libraries uit de versie waarop het gebouwd werd
zou kunnen worden, en dan kàn je het mogelijk zelfs niet installeren onder de
andere versie.

> Bijvoorbeeld onlangs bij de nieuwe versie van Firefox gaf dit grote
> problemen.

Het security team zorgt er dan in dat geval voor om de andere nodige backports
uit te voeren, zodat dat kan.

Dit is de reden dat een nieuwe ESR nooit op de ".0" versie in Debian zit: er is
altijd wat extra werk nodig, dus blijven we dan meestal nog op de oudere ESR
versie terwijl het benodigde extra werk gedaan wordt.

> Bovenstaande lijkt me inderdaad een noodoplossing om een pakket uit unstable
> te installeren en up-to-date te houden. Of het werkt en blijft werken lijkt
> me niet zeker, er zou bijvoorbeeld een nieuwere versie van libc6 nodig
> kunnen zijn, of in de toekomst worden.

Dat is inderdaad het extra probleem waar je dan mee zit. Je kunt niet
garanderen dat dat niet gaat gebeuren.

-- 
 w@uter.{be,co.za}
wouter@{grep.be,fosdem.org,debian.org}



Re: force IPv6 dynamic address?

2022-03-24 Thread Jeremy Ardley


On 24/3/22 1:11 am, Tim Woodall wrote:

On Wed, 23 Mar 2022, Jeremy Ardley wrote:

I have a debian workstation with a static IPv6 address mapped in DNS 
as well as dynamic addresses which change with time.


The problem I have is that when my thunderbird mail client connects 
to gmail it always uses the static IPv6 address as originator and 
this shows up in the headers of the delivered mail.


How can I make my system and/or thunderbird use the constantly 
changing dynamic IPv6 address instead?





I believe it's setting this to 2 that you want (I think there's a
setting to go in eni to do this too)

https://sysctl-explorer.net/net/ipv6/use_tempaddr/

Tim.

My concern is that if I go to 1 or 2 then logging for non email activity 
may suffer.


In the meantime for my non gmail accounts I've modified my mail server thus

cat smtp_header_checks
/^Received:.*with ESMTPSA/  REPLACE Received: 
/^X-Originating-IP:/    IGNORE
/^X-Mailer:/    IGNORE
/^Mime-Version:/    IGNORE
/^User-Agent:/    IGNORE

Which also helps avoid the embarrassment of admitting I use Thunderbird :-)

--
Jeremy



OpenPGP_signature
Description: OpenPGP digital signature


Re: Manual OpenVPN

2022-03-24 Thread Camaleón
El 2022-03-23 a las 18:14 -0600, Paynalton escribió:

> Hola, alguien sabe donde hay un manual para instalar OpenVPN Server en
> debian actualizado?

Pues Google devuelve varios, por ejemplo:

Install OpenVPN Server on Debian 11/Debian 10
https://kifarunix.com/install-openvpn-server-on-debian-11-debian-10/

How To Set Up an OpenVPN Server on Debian 10
https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-debian-10

> He seguido este: https://wiki.debian.org/OpenVPN
> 
> Pero me da un error porque la versión 2.4 no acepta el parámetro data-ciphers,
> así que no creo que esté actualizado.
> 
> Estoy usando BullSeye

Hum... la versión de OpenVPN en Debian 11 es la 2.5.1, ¿seguro que tienes
la 2.4 instalada? :-?

Porque entonces lo que necesitas es un manual para una versión 
anterior de OpenVPN, no uno actualizado.

En cualquier caso, revisa la documentación de OpenVPN, seguro que te 
servirá para resolver el problema, independientemente de la versión que 
tengas instalada:

OpenVPN Cipher Negotiation (Quick reference) ¶
https://community.openvpn.net/openvpn/wiki/CipherNegotiation#Commonconfigurations

Saludos,

-- 
Camaleón 



Re: bind9 slave sending notifies

2022-03-24 Thread Tim Woodall

On Thu, 24 Mar 2022, Jeremy Ardley wrote:


I'm using BIND 9.16.22-Debian (Extended Support Version) 

The problem is when I restart I see "sending notifies" in the log.

I have checked the configuration named.conf.local and named.conf.options and 
there is no 'allow-transfer' in the configuration.


example named.conf.local entry:

zone "lan" {
??? type slave;
??? file "db.lan";
??? masters { 192.0.2.1; };
??? allow-query {any;};
};

So is sending notifies with no-one to notify normal?

If not, how do I stop it?



I have:

allow-transfer { none; };
transfer-source-v6 2001:8b0:bfcd:***;
listen-on { 192.168.*.*/32; 192.168.*.*/32; };
listen-on-v6 { any; };
notify explicit;
}

in options. I don't see my slave sending any notifies.

Tim