Re: bindfs for web docroot - is this sane?

[tomas]

On Wed, Oct 12, 2022 at 04:09:41PM +1300, Richard Hector wrote:
> On 12/10/22 00:26, Dan Ritter wrote:

[...]

> > The better solution is to use a versioning system -- git is the
> > default these days [...]

> I agree that a git-based deployment scheme would be good. However, I
> understand that it's considered bad practice for the docroot to itself be a
> git repo, which means writing scripts to check out the right version and
> then deploy it (which might also help with setting the right permissions).

I think this is the wrong answer, too. Git is for developers, and as far
as I understood Richard, the web server has to have write access to parts
of the doc tree, on behalf of the users "out there" [1], and Richard wants
a bit more of control over that. Barring some web site software using git
as their backend, git seems the wrong "solution" for that.

Cheers

[1] PHP, sigh.

-- 
t


signature.asc
Description: PGP signature

Re: bindfs for web docroot - is this sane?

[tomas]

On Wed, Oct 12, 2022 at 03:55:03PM +1300, Richard Hector wrote:
> On 11/10/22 22:40, hede wrote:
> > On 11.10.2022 10:03 Richard Hector wrote:
> > > [...]
> > > Then for site developers (who might be contractors to my client) to be
> > > able to update teh site, they need read/write access to the docroot,
> > > but I don't want them all logging in using the same
> > > account/credentials.
> > > [...]
> > > Does that sound like a sane plan? Are there gotchas I haven't spotted?
> > 
> > I think I'm not able to assess the bind-mount question, but...
> > Isn't that a use case for ACLs? (incl. default ACLs for the webservers
> > user here?)
> 
> Yes, probably. However, I looked at ACLs earlier (months ago at least), and
> they did my head in ...

I haven't thought that through, but I think ACLs solve a slightly different
problem.

Cheers
-- 
t


signature.asc
Description: PGP signature

Re: debugging apt-get

[tomas]

On Tue, Oct 11, 2022 at 10:35:46PM -0400, Stefan Seefeld wrote:
> I'm trying to build a docker image containing a debian package I just
> created locally.
> 
> I'm thus running the command `apt-get update && apt-get install -y ./X.deb`
> from my dockerfile. This command fails with the message
> 
> ...
> 
> The following packages have unmet dependencies:
>  X : Depends: Y (= 1.0.3) but it is not going to be installed
> 
> ...
> 
> However, if I run `apt-get update && apt-get install Y=1.0.3` first, the
> build completes successfully. What could cause this behaviour ? Why would
> `apt-get` not be able to install a prerequisite package, when installing it
> explicitly works ?

Most probably because there is another version of Y with a higher priority.

Try doing "apt-cache policy Y", that might shed light on this.

> (I'm running on Ubuntu 20.04, using apt-get=2.0.6)

(Isn't there a Ubuntu mailing list, btw? They might be doing funny stuff
with their packaging which perhaps change the problem space)

Cheers
-- 
t
> 
> Thanks,


signature.asc
Description: PGP signature

Re: bindfs for web docroot - is this sane?

[Richard Hector]

On 12/10/22 00:26, Dan Ritter wrote:

Richard Hector wrote:

Hi all,

I host a few websites, mostly Wordpress.

I prefer to have the site files (mostly) owned by an owner user, and php-fpm
runs as a different user, so that it can't write its own code. For uploads,
those directories are group-writeable.

Then for site developers (who might be contractors to my client) to be able
to update teh site, they need read/write access to the docroot, but I don't
want them all logging in using the same account/credentials.

So I've set up bindfs ( https://bindfs.org/ ) with the following fstab line
(example at this stage):

/srv/wptest-home/doc_root /home/richard/wptest-home/doc_root fuse.bindfs 
--force-user=richard,--force-group=richard,--create-for-user=wptest-home,--create-for-group=wptest-home
0 0

That means they can see their own 'view' of the docroot under their own home
directory, and they can create files as needed, which will have the correct
owner under /srv. I haven't yet looked at what happens with the uploaded and
cached files which are owned by the php user; hopefully that works ok.

This means I don't need to worry about sudo and similar things, or
chown/chgrp - which in turn means I should be able to offer sftp as an
alternative to full ssh logins. It can probably even be chrooted.

Does that sound like a sane plan? Are there gotchas I haven't spotted?


That's a solution which has worked in similar situations in the
past, but it runs into problems with accountability and
debugging.

The better solution is to use a versioning system -- git is the
default these days, subversion will certainly work -- and
require your site developers to make their changes to the
version controlled repository. The repo is either automatically
(cron, usually) or manually (dev sends an email or a ticket)
updated on the web host.


I agree that a git-based deployment scheme would be good. However, I 
understand that it's considered bad practice for the docroot to itself 
be a git repo, which means writing scripts to check out the right 
version and then deploy it (which might also help with setting the right 
permissions).


I'm also not entirely comfortable with either a cron or ticket-based 
trigger - I'd want to look into either git hooks (but that's on the 
wrong machine), or maybe a webapp with a deploy button.


And then there's the issue of what is in git and what isn't, and how to 
customise the installation after checkout - eg setting the site name/url 
to distinguish it from the dev/staging site or whatever, setting db 
passwords etc. More stuff for the deployment script to do, I guess.


So I like this idea, but it's a lot more work. And I have to convince my 
clients and/or their devs to use it, which might require learning git. 
And I'm not necessarily good enough at git myself to do that teaching well.



- devs don't get accounts on the web host at all


They might need it anyway, for running wp cli commands etc (especially 
given the privilege separation which means that installing plugins via 
the WP admin pages won't work - or would you include the plugins in the 
git repo?)



- you can resolve the conflicts of two people working on the
   same site

True.


- automatic backups, assuming you have a repo not on this server


I have backups of the web server; backups of the repo as well would be good.


- easy revert to a previous version


True.


- easy deployment to multiple servers for load balancing

True, though I'm not at that level at this point.


Drawbacks:

- devs have to have a local webserver to test their changes

Yes, or a dev server/site provided by me


- devs have to follow the process

And have to know how, yes


- someone has to resolve conflicts or decide what the deployed
   version is

True anyway

Note that this method doesn't stop the dev(s) using git anyway.

In summary, I think I want to offer a git-based method, but I think it 
would work ok in combination with this, which is initially simpler.


It sounds like there's nothing fundamentally broken about it, at least :-)

Cheers,
Richard

Re: bindfs for web docroot - is this sane?

[Richard Hector]

On 11/10/22 22:40, hede wrote:

On 11.10.2022 10:03 Richard Hector wrote:

[...]
Then for site developers (who might be contractors to my client) to be
able to update teh site, they need read/write access to the docroot,
but I don't want them all logging in using the same
account/credentials.
[...]
Does that sound like a sane plan? Are there gotchas I haven't spotted?


I think I'm not able to assess the bind-mount question, but...
Isn't that a use case for ACLs? (incl. default ACLs for the webservers 
user here?)


Yes, probably. However, I looked at ACLs earlier (months ago at least), 
and they did my head in ...


Files will then still be owned by the user who created them. But your 
default-user has all  (predefined) rights on them.


Having them owned by the user that created them is good for 
accountability, but bad for glancing at ls output to see if everything 
looks right.


I'd probably prefer that because - by instinct - I have a bad feeling 
regarding security if one user can slip/foist(?) a file to be "created" 
by some other user. But that's only a feeling without knowing all the 
circumstances.


They can only have it owned by one specific user, but I acknowledge 
possible issues there.


And this way it's always clear which users have access by looking at the 
ACLs while elsewhere defined bind mount commands are (maybe) less 
transparent. And you always knows who created them, if something goes 
wrong, for example.


Nothing is clear to me when I look at ACLs :-) I do have the output of 
'last' (for a while) to see who is likely to have created them.


On the other hand, if you know of a good resource for better 
understanding ACLs, preferably with examples that are similar to my use 
case, I'd love to see it :-)


?) I'm not native English and slip or foist are maybe the wrong terms / 
wrongly translated. The context is that one user creates files and the 
system marks them as "created by" some other user.


Seem fine to me :-) But they're owned by the other user; I wouldn't 
assume that that user created them. Especially when that user isn't 
directly a person.


Thanks,
Richard

debugging apt-get

[Stefan Seefeld]

I'm trying to build a docker image containing a debian package I just 
created locally.


I'm thus running the command `apt-get update && apt-get install -y 
./X.deb` from my dockerfile. This command fails with the message


...

The following packages have unmet dependencies:
 X : Depends: Y (= 1.0.3) but it is not going to be installed

...

However, if I run `apt-get update && apt-get install Y=1.0.3` first, the 
build completes successfully. What could cause this behaviour ? Why 
would `apt-get` not be able to install a prerequisite package, when 
installing it explicitly works ?


Is there a way to debug this, i.e. have `apt-get` produce more verbose 
output that indicates *why* the prerequisite package is not going to be 
installed ?


(I'm running on Ubuntu 20.04, using apt-get=2.0.6)

Thanks,

Re: Listing .PDFs on web site?

[David Christensen]

On 10/10/22 22:16, latin...@vcn.bc.ca wrote:

Hello

Does somebody know how to get a simple list of PDFs in my Buleyes web
site, please?

The point is that i do hoticulture guides, and i would like that users get
them directly from my site.



On 10/11/22 01:59, latin...@vcn.bc.ca wrote:

> https://www.vcn.bc.ca/latincom


If you have ssh(1) access to the web server, the find(1) utility can 
produce a list of PDF files.  For example, my site 
(https://holgerdanske.com/):


2022-10-11 17:01:50 holger@november ~
$ find secure_html -iname '*.pdf' | grep -v webmail
secure_html/pub/dpchrist/debian-user/20210821-smart-fans/cpu-20210904.pdf


David

Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image

[Charles Curley]

On Tue, 11 Oct 2022 23:35:48 +0200
Mario Marietto  wrote:

> > isolinux/menu.cfg
> >
> > LABEL English (en)
> >   SAY "Booting English (en)..."
> >   linux /live/vmlinuz boot=casper APPEND
> > file=/cdrom/preseed/preseed.cfg auto=true initrd=/live/initrd.gz
> > boot=live components locales=en_US.UTF-8 quiet splash intel_iommu=on

I've never gotten automating finding the preseed file to work.

Instead, I boot a USB stick with the netinst installer on it, and the
preseed file (and all my custom stuff) on another USB stick. When the
netinst stick boots, I arrow key down to Help, and select that, to get
the boot prompt. Select the installation I want, typically "expert". Add
"auto file=/media/preseed.cfg".

So it is possible that you should have the "auto" before the "file=".

You might also take the quiet out of there for a more verbose boot.
Once you boot up, you can then examine the boot process in the usual
place, /var/log.

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image

[Mario Marietto]

In the end I found the solution. I've added these lines on top of the file
:
/home/ziomario/Scrivania/PassT-Cubic/Debian-new/custom-disk/boot/grub/grub.cfg,with
this content :

menuentry "Debian GNU/Linux Custom (kernel 5.10.0-18-amd64)" {
  linux /d-i/gtk/vmlinuz APPEND file=/cdrom/preseed/preseed.cfg auto=true
initrd=/live/initrd.gz boot=live components locales=en_US.UTF-8 quiet
splash "${loopback}"
  initrd /d-i/gtk/initrd.gz
}

and the preseed.cfg file has been taken into consideration. Imagination is
more powerful than knowledge.

Il giorno mer 12 ott 2022 alle ore 00:26 Mario Marietto <
marietto2...@gmail.com> ha scritto:

> It is on the file
> /home/ziomario/Scrivania/PassT-Cubic/Debian-new/custom-disk/boot/grub/grub.cfg,with
> this content :
>
> https://pastebin.ubuntu.com/p/gHwWXPvXB2/
>
> The preseed file is still ignored.
>
> Il giorno mer 12 ott 2022 alle ore 00:06 Greg Wooledge 
> ha scritto:
>
>> On Tue, Oct 11, 2022 at 11:55:56PM +0200, Mario Marietto wrote:
>> > What is "${loopback}" in the context below ?
>>   [...]
>> > insmod play
>> > play 960 440 1 0 4 440 1
>> > if [ ${iso_path} ] ; then
>> > set loopback="findiso=${iso_path}"
>> > export loopback
>> > fi
>>
>> If this is supposed to be a shell script, that "set" is wrong.  Remove it.
>> (There are also issues with missing quotes, if this is shell.)
>>
>> If this is supposed to be internal GRUB language... then carry on.
>>
>>
>
> --
> Mario.
>


-- 
Mario.

Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image

[Mario Marietto]

It is on the file
/home/ziomario/Scrivania/PassT-Cubic/Debian-new/custom-disk/boot/grub/grub.cfg,with
this content :

https://pastebin.ubuntu.com/p/gHwWXPvXB2/

The preseed file is still ignored.

Il giorno mer 12 ott 2022 alle ore 00:06 Greg Wooledge 
ha scritto:

> On Tue, Oct 11, 2022 at 11:55:56PM +0200, Mario Marietto wrote:
> > What is "${loopback}" in the context below ?
>   [...]
> > insmod play
> > play 960 440 1 0 4 440 1
> > if [ ${iso_path} ] ; then
> > set loopback="findiso=${iso_path}"
> > export loopback
> > fi
>
> If this is supposed to be a shell script, that "set" is wrong.  Remove it.
> (There are also issues with missing quotes, if this is shell.)
>
> If this is supposed to be internal GRUB language... then carry on.
>
>

-- 
Mario.

Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image

[Greg Wooledge]

On Tue, Oct 11, 2022 at 11:55:56PM +0200, Mario Marietto wrote:
> What is "${loopback}" in the context below ?
  [...]
> insmod play
> play 960 440 1 0 4 440 1
> if [ ${iso_path} ] ; then
> set loopback="findiso=${iso_path}"
> export loopback
> fi

If this is supposed to be a shell script, that "set" is wrong.  Remove it.
(There are also issues with missing quotes, if this is shell.)

If this is supposed to be internal GRUB language... then carry on.

Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image

[Mario Marietto]

What is "${loopback}" in the context below ?

if loadfont $prefix/font.pf2 ; then
  set gfxmode=800x600
  set gfxpayload=keep
  insmod efi_gop
  insmod efi_uga
  insmod video_bochs
  insmod video_cirrus
  insmod gfxterm
  insmod png
  terminal_output gfxterm
fi

if background_image /isolinux/splash intel_iommu=on.png; then
  set color_normal=light-gray/black
  set color_highlight=white/black
elif background_image /splash intel_iommu=on.png; then
  set color_normal=light-gray/black
  set color_highlight=white/black
else
  set menu_color_normal=cyan/blue
  set menu_color_highlight=white/blue
fi

insmod play
play 960 440 1 0 4 440 1
if [ ${iso_path} ] ; then
set loopback="findiso=${iso_path}"
export loopback
fi

menuentry "Debian GNU/Linux Live (kernel 5.10.0-18-amd64)" {
  linux /live/vmlinuz boot=casper APPEND file=/cdrom/preseed/preseed.cfg
initrd=/live/initrd.gz boot=live components locales=en_US.UTF-8 quiet
splash "${loopback}"
  initrd /live/initrd.gz
}

Il giorno mar 11 ott 2022 alle ore 23:35 Mario Marietto <
marietto2...@gmail.com> ha scritto:

> I've added the string in both config files (menu.cfg and grub.cfg) and
> then I have rebuilt the ISO with cubic but the preseed file has been
> ignored by the graphical debian installer.
>
> Il giorno mar 11 ott 2022 alle ore 23:17 Mario Marietto <
> marietto2...@gmail.com> ha scritto:
>
>> I'm trying to modify them as follows :
>>
>> isolinux/menu.cfg
>>
>> LABEL English (en)
>>   SAY "Booting English (en)..."
>>   linux /live/vmlinuz boot=casper APPEND file=/cdrom/preseed/preseed.cfg
>> auto=true initrd=/live/initrd.gz boot=live components locales=en_US.UTF-8
>> quiet splash intel_iommu=on
>>
>> boot/grub/grub.cfg
>>
>> menuentry "English (en)" {
>>   linux /live/vmlinuz boot=casper APPEND file=/cdrom/preseed/preseed.cfg
>> auto=true initrd=/live/initrd.gz boot=live components locales=en_US.UTF-8
>> quiet splash intel_iommu=on "${loopback}"
>>   initrd /live/initrd.gz
>> }
>>
>> I'm not even sure that it's correct,mostly because the grub.cfg file uses
>> two command lines. The second one is "initrd /live/initrd.gz". I'm not sure
>> if it should be there or if I should delete it.
>>
>> Il giorno mar 11 ott 2022 alle ore 22:35 Thomas Schmitt <
>> scdbac...@gmx.net> ha scritto:
>>
>>> Hi,
>>>
>>> Mario Marietto wrote:
>>> > Finally I found something that's very close to the solution :
>>> >
>>> https://askubuntu.com/questions/1228909/preseed-config-using-cubic-is-ignored-during-installation
>>>
>>> If this shall be the solution then the files to change would probably be
>>>   isolinux/menu.cfg
>>>   boot/grub/grub.cfg
>>>
>>> The isolinux configuration serves when booting by legacy BIOS or EFI
>>> legacy mode. For booting via EFI native mode you need to modify the grub
>>> configuration.
>>>
>>>
>>> Have a nice day :)
>>>
>>> Thomas
>>>
>>>
>>
>> --
>> Mario.
>>
>
>
> --
> Mario.
>


-- 
Mario.

Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image

[Mario Marietto]

I've added the string in both config files (menu.cfg and grub.cfg) and then
I have rebuilt the ISO with cubic but the preseed file has been ignored by
the graphical debian installer.

Il giorno mar 11 ott 2022 alle ore 23:17 Mario Marietto <
marietto2...@gmail.com> ha scritto:

> I'm trying to modify them as follows :
>
> isolinux/menu.cfg
>
> LABEL English (en)
>   SAY "Booting English (en)..."
>   linux /live/vmlinuz boot=casper APPEND file=/cdrom/preseed/preseed.cfg
> auto=true initrd=/live/initrd.gz boot=live components locales=en_US.UTF-8
> quiet splash intel_iommu=on
>
> boot/grub/grub.cfg
>
> menuentry "English (en)" {
>   linux /live/vmlinuz boot=casper APPEND file=/cdrom/preseed/preseed.cfg
> auto=true initrd=/live/initrd.gz boot=live components locales=en_US.UTF-8
> quiet splash intel_iommu=on "${loopback}"
>   initrd /live/initrd.gz
> }
>
> I'm not even sure that it's correct,mostly because the grub.cfg file uses
> two command lines. The second one is "initrd /live/initrd.gz". I'm not sure
> if it should be there or if I should delete it.
>
> Il giorno mar 11 ott 2022 alle ore 22:35 Thomas Schmitt 
> ha scritto:
>
>> Hi,
>>
>> Mario Marietto wrote:
>> > Finally I found something that's very close to the solution :
>> >
>> https://askubuntu.com/questions/1228909/preseed-config-using-cubic-is-ignored-during-installation
>>
>> If this shall be the solution then the files to change would probably be
>>   isolinux/menu.cfg
>>   boot/grub/grub.cfg
>>
>> The isolinux configuration serves when booting by legacy BIOS or EFI
>> legacy mode. For booting via EFI native mode you need to modify the grub
>> configuration.
>>
>>
>> Have a nice day :)
>>
>> Thomas
>>
>>
>
> --
> Mario.
>


-- 
Mario.

Re: Listar .PDFs en sitio web

[estebanmonge]

No se porque quieres gastar tu espacio si existe espacio gratuito... Porque no usas Google Drive o algo así? No seas de esos que dice que para que hacerlo fácil si se puede hacer difícil... Get Outlook for AndroidFrom: Marcelo Olcese (Gmail) Sent: Tuesday, October 11, 2022, 1:56 PMTo: latin...@vcn.bc.ca ; debian-user-spanish@lists.debian.org Subject: RE: Listar .PDFs en sitio webInstalás un Apache y si sabes algo de PHP, podes generar una interface para
validar usuarios y bajar luego los PDF's.
Más básico sería con Apache pero más "pegriloso".

Sldos,
Marcelo.-

-Mensaje original-
De: latin...@vcn.bc.ca [mailto:latin...@vcn.bc.ca] 
Enviado el: martes, 11 de octubre de 2022 01:42
Para: debian-user-spanish@lists.debian.org
Asunto: Listar .PDFs en sitio web

Hola

Alguien sabe como poner una serie de .pdf en mi sitio web, uso servidor
Bulleyes?

La cosa, es que cada vez que distribuyo un pdf; tengo que enviarselo a
varias personas; y preferiria que ellos los bajen! No son privados, son
guias de horticulturaq!

Gracias.
Latincom

Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image

[Mario Marietto]

I'm trying to modify them as follows :

isolinux/menu.cfg

LABEL English (en)
  SAY "Booting English (en)..."
  linux /live/vmlinuz boot=casper APPEND file=/cdrom/preseed/preseed.cfg
auto=true initrd=/live/initrd.gz boot=live components locales=en_US.UTF-8
quiet splash intel_iommu=on

boot/grub/grub.cfg

menuentry "English (en)" {
  linux /live/vmlinuz boot=casper APPEND file=/cdrom/preseed/preseed.cfg
auto=true initrd=/live/initrd.gz boot=live components locales=en_US.UTF-8
quiet splash intel_iommu=on "${loopback}"
  initrd /live/initrd.gz
}

I'm not even sure that it's correct,mostly because the grub.cfg file uses
two command lines. The second one is "initrd /live/initrd.gz". I'm not sure
if it should be there or if I should delete it.

Il giorno mar 11 ott 2022 alle ore 22:35 Thomas Schmitt 
ha scritto:

> Hi,
>
> Mario Marietto wrote:
> > Finally I found something that's very close to the solution :
> >
> https://askubuntu.com/questions/1228909/preseed-config-using-cubic-is-ignored-during-installation
>
> If this shall be the solution then the files to change would probably be
>   isolinux/menu.cfg
>   boot/grub/grub.cfg
>
> The isolinux configuration serves when booting by legacy BIOS or EFI
> legacy mode. For booting via EFI native mode you need to modify the grub
> configuration.
>
>
> Have a nice day :)
>
> Thomas
>
>

-- 
Mario.

Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image

[Thomas Schmitt]

Hi,

Mario Marietto wrote:
> Finally I found something that's very close to the solution :
> https://askubuntu.com/questions/1228909/preseed-config-using-cubic-is-ignored-during-installation

If this shall be the solution then the files to change would probably be
  isolinux/menu.cfg
  boot/grub/grub.cfg

The isolinux configuration serves when booting by legacy BIOS or EFI
legacy mode. For booting via EFI native mode you need to modify the grub
configuration.


Have a nice day :)

Thomas

Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image

[Mario Marietto]

Finally I found something that's very close to the solution :

https://askubuntu.com/questions/1228909/preseed-config-using-cubic-is-ignored-during-installation

Il giorno mar 11 ott 2022 alle ore 21:43 Mario Marietto <
marietto2...@gmail.com> ha scritto:

> Maybe we reach the goal faster if we understand what the "cubic" developer
> wants us to do by reading the message that appears on top of the preseed
> tab ? Some step is missed and I'm not able to understand which one : give a
> look here : https://ibb.co/9N0zL2P
>
>
>
> Il giorno mar 11 ott 2022 alle ore 21:32 Mario Marietto <
> marietto2...@gmail.com> ha scritto:
>
>> I always choose "Graphical Debian Installer" ,but I have to curb your
>> enthusiasm. Yesterday I added the preseed.cfg file inside the
>> /d-i/gtk/initrd.gz file and it has been ignored as well.
>>
>> Il giorno mar 11 ott 2022 alle ore 21:16 Thomas Schmitt <
>> scdbac...@gmx.net> ha scritto:
>>
>>> Hi,
>>>
>>> i should have looked into the boot/grub/grub.cfg file for initrd usage:
>>>
>>>   ...
>>>   menuentry "Debian GNU/Linux Live (kernel 5.10.0-18-amd64)" {
>>> linux  /live/vmlinuz-5.10.0-18-amd64 boot=live components splash
>>> quiet "${loopback}"
>>> initrd /live/initrd.img-5.10.0-18-amd64
>>>   }
>>>
>>>   ... many language choices with the same initrd ...
>>>
>>>   menuentry "Graphical Debian Installer" {
>>> linux  /d-i/gtk/vmlinuz append video=vesa:ywrap,mtrr vga=788
>>> "${loopback}"
>>> initrd /d-i/gtk/initrd.gz
>>>   }
>>>   menuentry "Debian Installer" {
>>> linux  /d-i/vmlinuz  "${loopback}"
>>> initrd /d-i/initrd.gz
>>>   }
>>>   ...
>>>
>>> So which GRUB menu item did you choose in your test whether your
>>> preseed.cfg
>>> in /d-i/initrd.gz works ?
>>> Only "Debian Installer" uses it. "Live" and "Graphical Debian Installer"
>>> use
>>> the other two.
>>>
>>>
>>> Have a nice day :)
>>>
>>> Thomas
>>>
>>>
>>
>> --
>> Mario.
>>
>
>
> --
> Mario.
>


-- 
Mario.

RE: Listar .PDFs en sitio web

[Marcelo Olcese (Gmail)]

Instalás un Apache y si sabes algo de PHP, podes generar una interface para
validar usuarios y bajar luego los PDF's.
Más básico sería con Apache pero más "pegriloso".

Sldos,
Marcelo.-

-Mensaje original-
De: latin...@vcn.bc.ca [mailto:latin...@vcn.bc.ca] 
Enviado el: martes, 11 de octubre de 2022 01:42
Para: debian-user-spanish@lists.debian.org
Asunto: Listar .PDFs en sitio web

Hola

Alguien sabe como poner una serie de .pdf en mi sitio web, uso servidor
Bulleyes?

La cosa, es que cada vez que distribuyo un pdf; tengo que enviarselo a
varias personas; y preferiria que ellos los bajen! No son privados, son
guias de horticulturaq!

Gracias.
Latincom

Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image

[Mario Marietto]

Maybe we reach the goal faster if we understand what the "cubic" developer
wants us to do by reading the message that appears on top of the preseed
tab ? Some step is missed and I'm not able to understand which one : give a
look here : https://ibb.co/9N0zL2P



Il giorno mar 11 ott 2022 alle ore 21:32 Mario Marietto <
marietto2...@gmail.com> ha scritto:

> I always choose "Graphical Debian Installer" ,but I have to curb your
> enthusiasm. Yesterday I added the preseed.cfg file inside the
> /d-i/gtk/initrd.gz file and it has been ignored as well.
>
> Il giorno mar 11 ott 2022 alle ore 21:16 Thomas Schmitt 
> ha scritto:
>
>> Hi,
>>
>> i should have looked into the boot/grub/grub.cfg file for initrd usage:
>>
>>   ...
>>   menuentry "Debian GNU/Linux Live (kernel 5.10.0-18-amd64)" {
>> linux  /live/vmlinuz-5.10.0-18-amd64 boot=live components splash
>> quiet "${loopback}"
>> initrd /live/initrd.img-5.10.0-18-amd64
>>   }
>>
>>   ... many language choices with the same initrd ...
>>
>>   menuentry "Graphical Debian Installer" {
>> linux  /d-i/gtk/vmlinuz append video=vesa:ywrap,mtrr vga=788
>> "${loopback}"
>> initrd /d-i/gtk/initrd.gz
>>   }
>>   menuentry "Debian Installer" {
>> linux  /d-i/vmlinuz  "${loopback}"
>> initrd /d-i/initrd.gz
>>   }
>>   ...
>>
>> So which GRUB menu item did you choose in your test whether your
>> preseed.cfg
>> in /d-i/initrd.gz works ?
>> Only "Debian Installer" uses it. "Live" and "Graphical Debian Installer"
>> use
>> the other two.
>>
>>
>> Have a nice day :)
>>
>> Thomas
>>
>>
>
> --
> Mario.
>


-- 
Mario.

Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image

[Mario Marietto]

I always choose "Graphical Debian Installer" ,but I have to curb your
enthusiasm. Yesterday I added the preseed.cfg file inside the
/d-i/gtk/initrd.gz file and it has been ignored as well.

Il giorno mar 11 ott 2022 alle ore 21:16 Thomas Schmitt 
ha scritto:

> Hi,
>
> i should have looked into the boot/grub/grub.cfg file for initrd usage:
>
>   ...
>   menuentry "Debian GNU/Linux Live (kernel 5.10.0-18-amd64)" {
> linux  /live/vmlinuz-5.10.0-18-amd64 boot=live components splash quiet
> "${loopback}"
> initrd /live/initrd.img-5.10.0-18-amd64
>   }
>
>   ... many language choices with the same initrd ...
>
>   menuentry "Graphical Debian Installer" {
> linux  /d-i/gtk/vmlinuz append video=vesa:ywrap,mtrr vga=788
> "${loopback}"
> initrd /d-i/gtk/initrd.gz
>   }
>   menuentry "Debian Installer" {
> linux  /d-i/vmlinuz  "${loopback}"
> initrd /d-i/initrd.gz
>   }
>   ...
>
> So which GRUB menu item did you choose in your test whether your
> preseed.cfg
> in /d-i/initrd.gz works ?
> Only "Debian Installer" uses it. "Live" and "Graphical Debian Installer"
> use
> the other two.
>
>
> Have a nice day :)
>
> Thomas
>
>

-- 
Mario.

Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image

[Thomas Schmitt]

Hi,

i should have looked into the boot/grub/grub.cfg file for initrd usage:

  ...
  menuentry "Debian GNU/Linux Live (kernel 5.10.0-18-amd64)" {
linux  /live/vmlinuz-5.10.0-18-amd64 boot=live components splash quiet 
"${loopback}"
initrd /live/initrd.img-5.10.0-18-amd64
  }

  ... many language choices with the same initrd ...

  menuentry "Graphical Debian Installer" {
linux  /d-i/gtk/vmlinuz append video=vesa:ywrap,mtrr vga=788 "${loopback}"
initrd /d-i/gtk/initrd.gz
  }
  menuentry "Debian Installer" {
linux  /d-i/vmlinuz  "${loopback}"
initrd /d-i/initrd.gz
  }
  ...

So which GRUB menu item did you choose in your test whether your preseed.cfg
in /d-i/initrd.gz works ?
Only "Debian Installer" uses it. "Live" and "Graphical Debian Installer" use
the other two.


Have a nice day :)

Thomas

Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image

[Thomas Schmitt]

Hi,

Mario Marietto wrote:
> Does it make sense to insert the preseed file inside this file ? >
> /home/ziomario/Scrivania/PassT-Cubic/Debian-new/custom-root/boot/initrd.img-5.10.0-18-amd64
?
> What's the difference between initrd and initrd.img-5.10.0-18-amd64 ?

Interesting question. (You see ? New adventures.)

There are five files with names matching '*initrd*'. Two of them are udeb
packages. So there remain
  d-i/gtk/initrd.gz
  d-i/initrd.gz
  live/initrd.img-5.10.0-18-amd64
Listing their content shows that the "d-i/gtk" initrd is mostly a superset
of the "d-i" initrd. Only "screen" is in "d-i" but not in "d-i/gtk".

  gunzip d_i_gtk
  gunzip d_i
  diff -puN d_i d_i_gtk

A comparison between "d-i/gtk" and "live" shows that "live" seems to
provide much more files in /usr/bin. Further the kernel modules directory
names differ:
  -lib/modules/5.10.0-18-amd64
  +usr/lib/modules/5.10.0-18-amd64

I'd put the preseed.cfg file into each of the three cpio archives.
If it works, then you can replace two of them by the originals and try
whether one alone does the trick for you.

--

> Instructions says :
> Regenerating md5sum.txt
> cd isofiles chmod +w md5sum.txt

I don't find it in the Live ISO. I know it from the adventure to merge
all debian-cd installation DVD ISOs into one big ISO for a USB stick.
You'll find an example in the root directory of the netinst ISO.

It contains lines with the MD5 checksums and paths of files inside the ISO.
Afaik it is used for an optional verification run. Zhang Boyang wrote in
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1011343#170
  "A bad md5sum.txt will cause cdrom-checker in d-i to fail. (Fortunately
   it's not a standard step, but user can invoke it under `Advance options
   - Expert install')"

Since it is missing in the Live ISO, you most probably won't need it.
(And i bet that there is no such advanced option in Live ISO.)


Have a nice day :)

Thomas

XY Problem (WAS Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image)

[Andrew M.A. Cater]

On Tue, Oct 11, 2022 at 06:36:26PM +0200, Mario Marietto wrote:
> You entered in a kind of analysis that I'm not able to do without the help
> of someone else more skilled than me. I've tried to add the preseed file
> even on the initrd file located on the live folder,but it didn't work. I
> don't know what to do further,but you gave me more material to post another
> question,this time more oriented to programming,so I know which is the
> right place to ask and what to ask.
> 
> 

Hi Mario,

I think you have hit on a problem which is a combination of problems: that's
quite common on this list :)

See also: https://en.wikipedia.org/wiki/XY_problem

Preseeding
==

Although this list is fairly knowledgeable about many things, there are a few
things that need specialist experience. Preseeding is one of those things - it
is documented in, for example, the Debian handbook (the Debian package is
debian-handbook) or 
https://debian-handbook.info/browse/stable/sect.automated-installation.html#sect.d-i-preseeding
 which refers on to resources like
http://preseed.einval.com

Preseeding is a very easy concept to explain - provide the answers to 
the questions in the installer - but it's not so straightforward to
get it right first time. That's the reason behind someone suggesting setting
up the file on a local webserver where you can change it, reload and see the 
results immediately. Break the problem down and make one change at a time
until you're sure it's OK?

Debian-live and live images
===

Debian-live is its own animal - the installer is different and you have the 
complexities of making the image bootable as you've seen.

There aren't many experts on this, unfortunately, on this list or anywhere else.

Remastering .iso images
===

Thomas has given you much of the help you need, I think - he's the expert
on the tools here.

The intersection of all of these gives you a smaller and smaller group
of potential experts. What do you want to do, _exactly_ ?

If you explain the end goal well to yourself and to us, we can help you
break it down into stages. 

For example "I want to make a Debian Live CD
to show my family my collection of model trains and give instructions
to others on how I built it"

* Make a Live CD
* Customise it
* Set up a webserver inside the iso
* Write custom scripts to run the demonstrations and put them into the .iso
 
As you explain each stage, and point out what resources you have found / where
things are missing, we can probably find people to tackle one piece at a time.

"I wanted to do X, thought I could do it by doing Y - and I can't remember
exactly what I did or how I did it - and now I have to fix situation Z"
is really, really common - we can all be guilty of it - but breaking down
the problem into small pieces may really help here - and that may be by
explaining what you want.

There are alternatives, sometimes - several webservers are available - and
people may have a favourite application but if you specify simple requirements
we may be better able to help.

Happy to help in any way I can, as ever,

With every good wish,

Andy Cater.

> 
> 
> Il giorno mar 11 ott 2022 alle ore 17:24 Thomas Schmitt 
> ha scritto:
> 
> > Hi,
> >
> > Mario Marietto wrote:
> > > Can you suggest some other nice places where I can post the
> > > question again ?
> >
> > No. This list here and debian-live are the best places to ask.
> > At least i know of no better ones.
> >
> >
> > If i were in your situation i would try to find out how the software
> > in the initrd is supposed to deal with preseed.cfg.
> > We already know how to get the uncompressed cpio archive "initrd".
> > Curiously i put it into some playground directory and do:
> >
> >   mkdir unpacked_initrd
> >   cd unpacked_initrd
> >   cpio -id <../initrd
> >   fgrep -r preseed.cfg . | less
> >
> > which yields various file paths. (I tried with the /d-i/initrd.gz of
> > debian-live-11.1.0-amd64-xfce.iso)
> >
> > lib/debian-installer-startup.d/S30initrd-preseed looks interesting.
> > It calls preseed_location() in lib/preseed/preseed.sh with the URL
> > file:///preseed.cfg .
> > So i'd begin to study what it does and insert messages which tell at
> > run time what's going on. Then i'd pack it up again by (i guess):
> >
> >   find | cpio -H newc -o | gzip > new_initrd.gz
> >
> > and put it into the new ISO.
> >
> > In preseed.sh i see at the start:
> >   logfile=/var/lib/preseed/log
> > I'd try to find out how to assess that file after the modified ISO has
> > booted. (Is the initrd ramdisk filesystem the same as the Live filesystem ?
> > Does the log get copied from one to the other ?)
> >
> > But of course this is an open ended adventure with lots of wrong ways
> > to follow and lots of things to learn.
> >
> > Also consider the mind set of those who possibly could help you:
> > Would it be fun for them, or at least interesting and bringing progress ?
> > A first step in their direction 

Re: Listar .PDFs en sitio web

[Ricardo Frydman]

Pues ya te lo han indicado: debes montar un servidor Apache o nginx y abrir
los puertos para que se acceda desde el exterior

El mar, 11 oct 2022 a la(s) 14:54,  escribió:

> >> Creo que no explique bien, esto es exactamente, lo que me gustaria
> >> hacer:
> >>
> >> https://www.vcn.bc.ca/latincom
> >>
> >
> > Si este es tu sitio web, ya lo tienes hecho, ¿no?
> >
> NO, mi intencion es hacerlo en mi servidor Debian, alli solo subi los .pdf
> y aparecieron por arte de magia!
>
> Pero no se como lo hacen!
> gracias.
>
>
>

-- 
Ricardo A.Frydman
Service Delivery Manager - Tata Consultancy Services
Sun Certified System Administrator - Solaris 10

pgp.mit.edu ID A04134BD



"Aequam memento rebus in arduis servare mentem"

Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image

[Mario Marietto]

Does it make sense to insert the preseed file inside this file ? >
/home/ziomario/Scrivania/PassT-Cubic/Debian-new/custom-root/boot/initrd.img-5.10.0-18-amd64
?

What's the difference between initrd and initrd.img-5.10.0-18-amd64 ?
Instructions says :
Regenerating md5sum.txt

cd isofileschmod +w md5sum.txt


I don't have that file. Do you know how to generate it ?

Il giorno mar 11 ott 2022 alle ore 18:36 Mario Marietto <
marietto2...@gmail.com> ha scritto:

> You entered in a kind of analysis that I'm not able to do without the help
> of someone else more skilled than me. I've tried to add the preseed file
> even on the initrd file located on the live folder,but it didn't work. I
> don't know what to do further,but you gave me more material to post another
> question,this time more oriented to programming,so I know which is the
> right place to ask and what to ask.
>
>
>
>
> Il giorno mar 11 ott 2022 alle ore 17:24 Thomas Schmitt 
> ha scritto:
>
>> Hi,
>>
>> Mario Marietto wrote:
>> > Can you suggest some other nice places where I can post the
>> > question again ?
>>
>> No. This list here and debian-live are the best places to ask.
>> At least i know of no better ones.
>>
>>
>> If i were in your situation i would try to find out how the software
>> in the initrd is supposed to deal with preseed.cfg.
>> We already know how to get the uncompressed cpio archive "initrd".
>> Curiously i put it into some playground directory and do:
>>
>>   mkdir unpacked_initrd
>>   cd unpacked_initrd
>>   cpio -id <../initrd
>>   fgrep -r preseed.cfg . | less
>>
>> which yields various file paths. (I tried with the /d-i/initrd.gz of
>> debian-live-11.1.0-amd64-xfce.iso)
>>
>> lib/debian-installer-startup.d/S30initrd-preseed looks interesting.
>> It calls preseed_location() in lib/preseed/preseed.sh with the URL
>> file:///preseed.cfg .
>> So i'd begin to study what it does and insert messages which tell at
>> run time what's going on. Then i'd pack it up again by (i guess):
>>
>>   find | cpio -H newc -o | gzip > new_initrd.gz
>>
>> and put it into the new ISO.
>>
>> In preseed.sh i see at the start:
>>   logfile=/var/lib/preseed/log
>> I'd try to find out how to assess that file after the modified ISO has
>> booted. (Is the initrd ramdisk filesystem the same as the Live filesystem
>> ?
>> Does the log get copied from one to the other ?)
>>
>> But of course this is an open ended adventure with lots of wrong ways
>> to follow and lots of things to learn.
>>
>> Also consider the mind set of those who possibly could help you:
>> Would it be fun for them, or at least interesting and bringing progress ?
>> A first step in their direction would be to show patience and appreciation
>> for the work which they do while you are waiting for them to show up.
>>
>>
>> Have a nice day :)
>>
>> Thomas
>>
>>
>
> --
> Mario.
>


-- 
Mario.

Re: Listar .PDFs en sitio web

[latincom]

>> Creo que no explique bien, esto es exactamente, lo que me gustaria
>> hacer:
>>
>> https://www.vcn.bc.ca/latincom
>>
>
> Si este es tu sitio web, ya lo tienes hecho, ¿no?
>
NO, mi intencion es hacerlo en mi servidor Debian, alli solo subi los .pdf
y aparecieron por arte de magia!

Pero no se como lo hacen!
gracias.

Re : Add route exceptions to a VPN with network manager

[nicolas . patrois]

Le 11/10/2022 18:44:04, Michel a écrit :

> Voire un defayukt d'aiguillage ;)

Dafuk?

nicolas patrois : pts noir asocial
-- 
RÉALISME

M : Qu'est-ce qu'il nous faudrait pour qu'on nous considère comme des humains ? 
Un cerveau plus gros ?
P : Non... Une carte bleue suffirait...

Re: Add route exception in NetworkManager vpn

[Tim Woodall]

On Tue, 11 Oct 2022, Erwan David wrote:


Hi,

I use a vpn with network manager which routes everything through it.
I'd like to add some exceptions for local or not so local ressources that 
cannot be reached through the VPN.
The ideal situation would be to be able to give as gateway for those routes 
"the default gateway before the VPN was up".

Is there a way to do this ?

It may be through a dispatcher script at vpn-preup time, but I'm not sure by 
reading the doc if the routes have been changed at that time or not.



The original route must still be there or the VPN itself couldn't stay
up although possibly now as a route to a single IP.

So provided you can find that route, you can create more routes via the
same next-hop.

so something like:

ip route add 8.8.8.8/32 via 1.2.3.4 dev isp


After the vpn is up, use ip route show (and possibly ip rule show) to
see how the vpn traffic is routed.

Re: Add route exceptions to a VPN with network manager

[Michel]

Le 11/10/2022 à 18:20, Fabien R a écrit :
> On 11/10/2022 16:05, Erwan David wrote:
>> Hi,
>>
>> I use a vpn with network manager which routes everything through it.
>> I'd like to add some exceptions for local or not so local ressources that 
>> cannot be reached through the VPN.
>> The ideal situation would be to be able to give as gateway for those routes 
>> "the defayukt gateway before the VPN was up".
>> Is there a way to do this ?
>>
>> Thank you
>>
> Tes messages semblent subir une erreur d'aiguillage.

Voire un defayukt d'aiguillage ;)

Add route exception in NetworkManager vpn

[Erwan David]

Hi,

I use a vpn with network manager which routes everything through it.
I'd like to add some exceptions for local or not so local ressources 
that cannot be reached through the VPN.
The ideal situation would be to be able to give as gateway for those 
routes "the default gateway before the VPN was up".

Is there a way to do this ?

It may be through a dispatcher script at vpn-preup time, but I'm not 
sure by reading the doc if the routes have been changed at that time or not.




Thank you

Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image

[Mario Marietto]

You entered in a kind of analysis that I'm not able to do without the help
of someone else more skilled than me. I've tried to add the preseed file
even on the initrd file located on the live folder,but it didn't work. I
don't know what to do further,but you gave me more material to post another
question,this time more oriented to programming,so I know which is the
right place to ask and what to ask.




Il giorno mar 11 ott 2022 alle ore 17:24 Thomas Schmitt 
ha scritto:

> Hi,
>
> Mario Marietto wrote:
> > Can you suggest some other nice places where I can post the
> > question again ?
>
> No. This list here and debian-live are the best places to ask.
> At least i know of no better ones.
>
>
> If i were in your situation i would try to find out how the software
> in the initrd is supposed to deal with preseed.cfg.
> We already know how to get the uncompressed cpio archive "initrd".
> Curiously i put it into some playground directory and do:
>
>   mkdir unpacked_initrd
>   cd unpacked_initrd
>   cpio -id <../initrd
>   fgrep -r preseed.cfg . | less
>
> which yields various file paths. (I tried with the /d-i/initrd.gz of
> debian-live-11.1.0-amd64-xfce.iso)
>
> lib/debian-installer-startup.d/S30initrd-preseed looks interesting.
> It calls preseed_location() in lib/preseed/preseed.sh with the URL
> file:///preseed.cfg .
> So i'd begin to study what it does and insert messages which tell at
> run time what's going on. Then i'd pack it up again by (i guess):
>
>   find | cpio -H newc -o | gzip > new_initrd.gz
>
> and put it into the new ISO.
>
> In preseed.sh i see at the start:
>   logfile=/var/lib/preseed/log
> I'd try to find out how to assess that file after the modified ISO has
> booted. (Is the initrd ramdisk filesystem the same as the Live filesystem ?
> Does the log get copied from one to the other ?)
>
> But of course this is an open ended adventure with lots of wrong ways
> to follow and lots of things to learn.
>
> Also consider the mind set of those who possibly could help you:
> Would it be fun for them, or at least interesting and bringing progress ?
> A first step in their direction would be to show patience and appreciation
> for the work which they do while you are waiting for them to show up.
>
>
> Have a nice day :)
>
> Thomas
>
>

-- 
Mario.

Re: Add route exceptions to a VPN with network manager

[Fabien R]

On 11/10/2022 16:05, Erwan David wrote:

Hi,

I use a vpn with network manager which routes everything through it.
I'd like to add some exceptions for local or not so local ressources that 
cannot be reached through the VPN.
The ideal situation would be to be able to give as gateway for those routes "the 
defayukt gateway before the VPN was up".
Is there a way to do this ?

Thank you


Tes messages semblent subir une erreur d'aiguillage.
--
Fabien

Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image

[Thomas Schmitt]

Hi,

Mario Marietto wrote:
> Can you suggest some other nice places where I can post the
> question again ?

No. This list here and debian-live are the best places to ask.
At least i know of no better ones.


If i were in your situation i would try to find out how the software
in the initrd is supposed to deal with preseed.cfg.
We already know how to get the uncompressed cpio archive "initrd".
Curiously i put it into some playground directory and do:

  mkdir unpacked_initrd
  cd unpacked_initrd
  cpio -id <../initrd
  fgrep -r preseed.cfg . | less

which yields various file paths. (I tried with the /d-i/initrd.gz of
debian-live-11.1.0-amd64-xfce.iso)

lib/debian-installer-startup.d/S30initrd-preseed looks interesting.
It calls preseed_location() in lib/preseed/preseed.sh with the URL
file:///preseed.cfg .
So i'd begin to study what it does and insert messages which tell at
run time what's going on. Then i'd pack it up again by (i guess):

  find | cpio -H newc -o | gzip > new_initrd.gz

and put it into the new ISO.

In preseed.sh i see at the start:
  logfile=/var/lib/preseed/log
I'd try to find out how to assess that file after the modified ISO has
booted. (Is the initrd ramdisk filesystem the same as the Live filesystem ?
Does the log get copied from one to the other ?)

But of course this is an open ended adventure with lots of wrong ways
to follow and lots of things to learn.

Also consider the mind set of those who possibly could help you:
Would it be fun for them, or at least interesting and bringing progress ?
A first step in their direction would be to show patience and appreciation
for the work which they do while you are waiting for them to show up.


Have a nice day :)

Thomas

Re: Listar .PDFs en sitio web

[alfon]

> Creo que no explique bien, esto es exactamente, lo que me gustaria hacer:
>
> https://www.vcn.bc.ca/latincom
>

Si este es tu sitio web, ya lo tienes hecho, ¿no?

Add route exceptions to a VPN with network manager

[Erwan David]

Hi,

I use a vpn with network manager which routes everything through it.
I'd like to add some exceptions for local or not so local ressources 
that cannot be reached through the VPN.
The ideal situation would be to be able to give as gateway for those 
routes "the defayukt gateway before the VPN was up".

Is there a way to do this ?

Thank you

Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image

[Mario Marietto]

Sometimes it happens that no one replied to a specific ML. Anyway I have
some experience in linux and freebsd management. I have used Linux,as a
hobbyist ,since the 1990's. But it happens rarely. More often happens that
inside the IRC channels no one will help. I've always found a lot of bots
and nothing more than that. I'm not in a good situation. I've posted the
question in a LOT of places. I have trouble finding more places to ask. I
can't even open a bug report,because I don't see any bugs. I've even asked
more times on the cubic github. No one replied and after 15 days questions
expired. Can you suggest some other nice places where I can post the
question again ?   Check all the questions that I have already asked and
that still are without a reply :

https://www.linuxquestions.org/questions/debian-26/trying-to-customize-debian-11-with-cubic-and-a-preseed-file-the-preseed-file-is-ignored-4175717533/

https://unix.stackexchange.com/questions/720208/trying-to-customize-debian-11-with-cubic-and-a-preseed-file-the-preseed-file-i

https://stackoverflow.com/questions/73996828/trying-to-customize-debian-11-with-cubic-and-a-preseed-file-the-preseed-file-i

https://www.reddit.com/r/debian/comments/y00f48/trying_to_repack_and_make_again_bootable_the/

https://answers.launchpad.net/cubic/+question/703422

I can't start my own project. I'm a hobbyist. I don't have the competences.
Furthermore,it makes no sense to do that,because the projects I need are
already there. It is called cubic and even the Debian preseeding is an old
method. I don't need to reinvent the wheel. Here the question is
structural. A lot of developers have no time to give support. But I'm sure
that if they get money,they will find it.


Il giorno mar 11 ott 2022 alle ore 13:04 Thomas Schmitt 
ha scritto:

> Hi,
>
> Mario Marietto wrote:
> > I suppose that the ML debian-live is not
> > active or it is a very very low level of activity.
>
> It's what exists in respect to Debian Live ISOs.
>   https://www.debian.org/devel/debian-live/
> mentions the bug tracking system, the debian-live mailing list, and an
> IRC channel.
>
> I'm not sure whether Debian Live has a dedicated maintainer currently.
> But there is some hope that someone is subscribed to the mailing list
> and knows what currently works and what does not.
>
>
> > I would like to be helped by
> > Thomas,because I trust in his high level of skills.
>
> I was able to help you with the task of repacking the ISO bootable for
> BIOS and EFI, because i am the developer of xorriso, which Debian uses
> instead of genisoimage to pack up its ISOs.
> But i cannot help with questions about preseeding Debian ISOs or most
> other aspects of the content of a Debian ISO.
>
> As stated, i am even unsure if the documentation at
>   https://www.debian.org/releases/stable/amd64/apbs01.en.html
> applies to Debian Live (or only to debian-cd ISOs).
> Therefore i recommended to ask at debian-live for currently working
> examples.
>
> Maybe you will receive some help here or there, maybe not.
> Actually frustration about lack of support is one of the classic
> motivations to start own software projects.
>
>
> Have a nice day :)
>
> Thomas
>
>

-- 
Mario.

Re: bindfs for web docroot - is this sane?

[Dan Ritter]

Richard Hector wrote: 
> Hi all,
> 
> I host a few websites, mostly Wordpress.
> 
> I prefer to have the site files (mostly) owned by an owner user, and php-fpm
> runs as a different user, so that it can't write its own code. For uploads,
> those directories are group-writeable.
> 
> Then for site developers (who might be contractors to my client) to be able
> to update teh site, they need read/write access to the docroot, but I don't
> want them all logging in using the same account/credentials.
> 
> So I've set up bindfs ( https://bindfs.org/ ) with the following fstab line
> (example at this stage):
> 
> /srv/wptest-home/doc_root /home/richard/wptest-home/doc_root fuse.bindfs 
> --force-user=richard,--force-group=richard,--create-for-user=wptest-home,--create-for-group=wptest-home
> 0 0
> 
> That means they can see their own 'view' of the docroot under their own home
> directory, and they can create files as needed, which will have the correct
> owner under /srv. I haven't yet looked at what happens with the uploaded and
> cached files which are owned by the php user; hopefully that works ok.
> 
> This means I don't need to worry about sudo and similar things, or
> chown/chgrp - which in turn means I should be able to offer sftp as an
> alternative to full ssh logins. It can probably even be chrooted.
> 
> Does that sound like a sane plan? Are there gotchas I haven't spotted?

That's a solution which has worked in similar situations in the
past, but it runs into problems with accountability and
debugging.

The better solution is to use a versioning system -- git is the
default these days, subversion will certainly work -- and
require your site developers to make their changes to the
version controlled repository. The repo is either automatically
(cron, usually) or manually (dev sends an email or a ticket)
updated on the web host.

Benefits:

- devs don't get accounts on the web host at all
- you can resolve the conflicts of two people working on the
  same site
- automatic backups, assuming you have a repo not on this server
- easy revert to a previous version
- easy deployment to multiple servers for load balancing

Drawbacks:

- devs have to have a local webserver to test their changes
- devs have to follow the process
- someone has to resolve conflicts or decide what the deployed
  version is

-dsr-

Re: How to use hw vendor EFI diagnostics ?

[hede]

Am 11.10.2022 11:38, schrieb Alain D D Williams:

How do I integrate the HP diagnostics into the current EFI ?


It should be fine to copy the files to the EFI partition (if not already 
there) and add some boot entry via efibootmgr (if not already present).


Running efibootmgr (as root) without options will tell you if there are 
already old entries. If there's an entry for HP diagnostics, "efibootmgr 
-v" will show you details.


You can add a new one via:

efibootmgr --create --disk [EFItargetDisk] --part [partNumber] --label 
"HP diagnostics" --loader \\EFI\\[targetEXE].efi


For further help see man page of efibootmgr. There are also many blog 
posts regarding efibootmgr in the internet.


For the correct targetEXE in your case, I do not know which one of the 
named efi files is the right one. Either wait for some other answer 
here, search the internet for this specific question or (maybe) some 
try will do it.


regards
hede

Re: Listing .PDFs on web site?

[Greg Wooledge]

On Tue, Oct 11, 2022 at 01:59:55AM -0700, latin...@vcn.bc.ca wrote:
> It is exactly what i would like to do thanks; i could not explain it
> correctly:
> 
> https://www.vcn.bc.ca/latincom

That's an Index generated by Apache.  Based on your email address,
this appears to be your own site, so it looks like you succeeded.
Congratulations.

Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image

[Thomas Schmitt]

Hi,

Mario Marietto wrote:
> I suppose that the ML debian-live is not
> active or it is a very very low level of activity.

It's what exists in respect to Debian Live ISOs.
  https://www.debian.org/devel/debian-live/
mentions the bug tracking system, the debian-live mailing list, and an
IRC channel.

I'm not sure whether Debian Live has a dedicated maintainer currently.
But there is some hope that someone is subscribed to the mailing list
and knows what currently works and what does not.


> I would like to be helped by
> Thomas,because I trust in his high level of skills.

I was able to help you with the task of repacking the ISO bootable for
BIOS and EFI, because i am the developer of xorriso, which Debian uses
instead of genisoimage to pack up its ISOs.
But i cannot help with questions about preseeding Debian ISOs or most
other aspects of the content of a Debian ISO.

As stated, i am even unsure if the documentation at
  https://www.debian.org/releases/stable/amd64/apbs01.en.html
applies to Debian Live (or only to debian-cd ISOs).
Therefore i recommended to ask at debian-live for currently working examples.

Maybe you will receive some help here or there, maybe not.
Actually frustration about lack of support is one of the classic
motivations to start own software projects.


Have a nice day :)

Thomas

How to use hw vendor EFI diagnostics ?

[Alain D D Williams]

I just got myself a new laptop - the old one broke.
It is an HP stream, I wiped MS Windows and installed Linux Mint 21.

The machine came with some nice hardware diagnostics, written by/for HP. These
could be run without booting MS Windows. I would like to have the ability to
run these as they know more about the laptop's hardware than what is installed
from Mint -- just some generic memory test.

I did copy the EFI before it was overwritten by the Linux installation.

How do I integrate the HP diagnostics into the current EFI ?

Thanks in advance.

This is what there is now:
/boot/efi/
/boot/efi/EFI
/boot/efi/EFI/ubuntu
/boot/efi/EFI/ubuntu/grubx64.efi
/boot/efi/EFI/ubuntu/shimx64.efi
/boot/efi/EFI/ubuntu/mmx64.efi
/boot/efi/EFI/ubuntu/BOOTX64.CSV
/boot/efi/EFI/ubuntu/grub.cfg
/boot/efi/EFI/BOOT
/boot/efi/EFI/BOOT/BOOTX64.EFI
/boot/efi/EFI/BOOT/fbx64.efi
/boot/efi/EFI/BOOT/mmx64.efi

This is what I have preserved from before Linux install:

System Volume Information
EFI
EFI/HP
EFI/HP/BIOS
EFI/HP/BIOS/Current
EFI/HP/BIOS/Current/085B5.bin
EFI/HP/BIOS/Current/085B5.s12
EFI/HP/BIOS/Current/085B5.sig
EFI/HP/BIOS/Previous
EFI/HP/BIOS/New
EFI/HP/HP Support Framework
EFI/HP/HP Support Framework/Logs
EFI/HP/HP Support Framework/Logs/1275192963.xml
EFI/HP/dip.zip
EFI/HP/SystemDiags
EFI/HP/SystemDiags/EADB.json
EFI/HP/SystemDiags/SystemDiags.ini
EFI/HP/SystemDiags/HpHwDiagsSnapshot.cee
EFI/HP/SystemDiags/LICENCE.txt
EFI/HP/SystemDiags/CryptRSA.efi
EFI/HP/SystemDiags/SysDiags.s09
EFI/HP/SystemDiags/SystemDiags-5CD2301RGW.html
EFI/HP/SystemDiags/SysDiags.efi
EFI/HP/SystemDiags/TestCoverage.json
EFI/HP/SystemDiags/SysDiags.s14
EFI/HP/SystemDiags/DI.efi
EFI/HP/SystemDiags/SysDiags.s12
EFI/HP/SystemDiags/SystemDiags.log
EFI/HP/SystemDiags/SystemDiagsCeeHistory.log
EFI/HP/DI.efi
EFI/HP/BIOSUpdate
EFI/HP/BIOSUpdate/BiosMgmt.s12
EFI/HP/BIOSUpdate/CryptRSA.efi
EFI/HP/BIOSUpdate/BiosMgmt.s14
EFI/HP/BIOSUpdate/BiosMgmt.efi
EFI/HP/BIOSUpdate/BiosMgmt.s09

EFI/Boot
EFI/Boot/bootx64.efi

There is also some MS stuff (I'm just listing top level directories, 185 in 
total):
EFI/Microsoft
EFI/Microsoft/Recovery
EFI/Microsoft/Boot

-- 
Alain Williams
Linux/GNU Consultant - Mail systems, Web sites, Networking, Programmer, IT 
Lecturer.
+44 (0) 787 668 0256  https://www.phcomp.co.uk/
Parliament Hill Computers Ltd. Registration Information: 
https://www.phcomp.co.uk/Contact.html
#include 

Re: Some of the parameters used in my genisoimage command don't produce a bootable ISO image

[Mario Marietto]

Nope. My project is not compatible with that. I want to re-distribute the
ISO,so if I do that I should keep online a server only for the distribution
of the preseed file. This costs money. And furthermore there is something
that is not working. Your job should be to understand the reasons and
help,not to find an alternative way,bypassing the real problem. I want more
than you to understand why it does not work. My job is not the system
administrator,I'm a psychologist,but anyway,I'm stubborn but also eager to
know how things work under the hood and I like challenges. I would invite
you to not surrender. Furthermore,I suppose that the ML debian-live is not
active or it is a very very low level of activity. I don't expect to be
helped there. So I want to come back here. I would like to be helped by
Thomas,because I trust in his high level of skills.

Il giorno mar 11 ott 2022 alle ore 02:06 Tim Ye  ha
scritto:

> I would recommend to put the preseed file on a HTTP/FTP server.  Then the
> file
> is easier to edit, and it saves you the effort to customize an ISO.
>
> - Tim
> On 2022-10-09 23:38+0200, Mario Marietto wrote:
> >I have also tried this version :
> >
> >xorriso \
> >   -outdev debian-live-11.5.0-amd64-xfce.iso \
> >   -volid d-live \
> >   -padding 0 \
> >   -map /home/ziomario/Scrivania/PassT-Cubic/ISO/iso_unpacked_and_modified
> >/ \
> >   -chmod 0755 / -- \
> >   -boot_image isolinux dir=/isolinux \
> >   -boot_image isolinux
> >system_area=/home/ziomario/Scrivania/PassT-Cubic/ISO/isohdpfx.bin \
> >   -boot_image any next \
> >   -boot_image any efi_path=boot/grub/efi.img \
> >   -boot_image isolinux partition_entry=gpt_basdat
> >
> >this didn't even work :
> >
> >root@Z390-AORUS-PRO-DEST:/home/ziomario/Scrivania/PassT-Cubic/ISO#
> >./script.sh
> >xorriso 1.5.4 : RockRidge filesystem manipulator, libburnia project.
> >
> >Drive current: -outdev 'debian-live-11.5.0-amd64-xfce.iso'
> >Media current: stdio file, overwriteable
> >Media status : is written , is appendable
> >Media summary: 1 session, 1310720 data blocks, 2560m data, 44.0g free
> >xorriso : WARNING : -volid text does not comply to ISO 9660 / ECMA 119
> >rules
> >Added to ISO image: directory
> >'/'='/home/ziomario/Scrivania/PassT-Cubic/ISO/iso_unpacked_and_modified'
> >xorriso : FAILURE : Cannot find in ISO image: -boot_image ...
> >bin_path='/isolinux/isolinux.bin'
> >xorriso : aborting : -abort_on 'FAILURE' encountered 'FAILURE'
>
>

-- 
Mario.

Re: bindfs for web docroot - is this sane?

[hede]

On 11.10.2022 10:03 Richard Hector wrote:

[...]
Then for site developers (who might be contractors to my client) to be
able to update teh site, they need read/write access to the docroot,
but I don't want them all logging in using the same
account/credentials.
[...]
Does that sound like a sane plan? Are there gotchas I haven't spotted?


I think I'm not able to assess the bind-mount question, but...
Isn't that a use case for ACLs? (incl. default ACLs for the webservers 
user here?)


Files will then still be owned by the user who created them. But your 
default-user has all  (predefined) rights on them.


I'd probably prefer that because - by instinct - I have a bad feeling 
regarding security if one user can slip/foist(?) a file to be "created" 
by some other user. But that's only a feeling without knowing all the 
circumstances.


And this way it's always clear which users have access by looking at the 
ACLs while elsewhere defined bind mount commands are (maybe) less 
transparent. And you always knows who created them, if something goes 
wrong, for example.


regards
hede

?) I'm not native English and slip or foist are maybe the wrong terms / 
wrongly translated. The context is that one user creates files and the 
system marks them as "created by" some other user.

Re: Listar .PDFs en sitio web

[David Guillermo]

Tendrás que levantar un ngnix/apache abrir los puertos y listo, sin mucho más.



El mar, 11 oct 2022 a las 11:12,  escribió:
>
> > https://developer.mozilla.org/es/docs/Learn/HTML/Introduction_to_HTML/Creating_hyperlinks
> >
> > El mar, 11 oct 2022 a las 6:57,  escribió:
> >>
> >> Hola
> >>
> >> Alguien sabe como poner una serie de .pdf en mi sitio web, uso servidor
> >> Bulleyes?
> >>
> >> La cosa, es que cada vez que distribuyo un pdf; tengo que enviarselo a
> >> varias personas; y preferiria que ellos los bajen! No son privados, son
> >> guias de horticulturaq!
> >>
> >> Gracias.
> >> Latincom
> >>
> >
>
> Creo que no explique bien, esto es exactamente, lo que me gustaria hacer:
>
> https://www.vcn.bc.ca/latincom
>
>

Re: Listing .PDFs on web site?

[latincom]

> Hello
>
> Does somebody know how to get a simple list of PDFs in my Buleyes web
> site, please?
>
> The point is that i do hoticulture guides, and i would like that users get
> them directly from my site.
>
> thanks.
> Latincom
>

It is exactly what i would like to do thanks; i could not explain it
correctly:

https://www.vcn.bc.ca/latincom

Re: Listar .PDFs en sitio web

[latincom]

> https://developer.mozilla.org/es/docs/Learn/HTML/Introduction_to_HTML/Creating_hyperlinks
>
> El mar, 11 oct 2022 a las 6:57,  escribió:
>>
>> Hola
>>
>> Alguien sabe como poner una serie de .pdf en mi sitio web, uso servidor
>> Bulleyes?
>>
>> La cosa, es que cada vez que distribuyo un pdf; tengo que enviarselo a
>> varias personas; y preferiria que ellos los bajen! No son privados, son
>> guias de horticulturaq!
>>
>> Gracias.
>> Latincom
>>
>

Creo que no explique bien, esto es exactamente, lo que me gustaria hacer:

https://www.vcn.bc.ca/latincom

bindfs for web docroot - is this sane?

[Richard Hector]

Hi all,

I host a few websites, mostly Wordpress.

I prefer to have the site files (mostly) owned by an owner user, and 
php-fpm runs as a different user, so that it can't write its own code. 
For uploads, those directories are group-writeable.


Then for site developers (who might be contractors to my client) to be 
able to update teh site, they need read/write access to the docroot, but 
I don't want them all logging in using the same account/credentials.


So I've set up bindfs ( https://bindfs.org/ ) with the following fstab 
line (example at this stage):


/srv/wptest-home/doc_root /home/richard/wptest-home/doc_root fuse.bindfs 
--force-user=richard,--force-group=richard,--create-for-user=wptest-home,--create-for-group=wptest-home 
0 0


That means they can see their own 'view' of the docroot under their own 
home directory, and they can create files as needed, which will have the 
correct owner under /srv. I haven't yet looked at what happens with the 
uploaded and cached files which are owned by the php user; hopefully 
that works ok.


This means I don't need to worry about sudo and similar things, or 
chown/chgrp - which in turn means I should be able to offer sftp as an 
alternative to full ssh logins. It can probably even be chrooted.


Does that sound like a sane plan? Are there gotchas I haven't spotted?

Cheers,
Richard

Re: Listing .PDFs on web site?

[DdB]

Am 11.10.2022 um 07:16 schrieb latin...@vcn.bc.ca:
> Does somebody know how to get a simple list of PDFs in my Buleyes web
> site, please?
> 
> The point is that i do hoticulture guides, and i would like that users get
> them directly from my site.
unclear to me: do you want to generate a website containing clickable
links to the PDF's? Or do you want the "inside view" in order to
generate it?

Like some sort of find command, modifyed/filtered by (m)awk ?

Or do you mean from the outside? like some sort of wget? Can your
webserver handle the load? How about providing the address?

Re: Listar .PDFs en sitio web

[alfon]

https://developer.mozilla.org/es/docs/Learn/HTML/Introduction_to_HTML/Creating_hyperlinks

El mar, 11 oct 2022 a las 6:57,  escribió:
>
> Hola
>
> Alguien sabe como poner una serie de .pdf en mi sitio web, uso servidor
> Bulleyes?
>
> La cosa, es que cada vez que distribuyo un pdf; tengo que enviarselo a
> varias personas; y preferiria que ellos los bajen! No son privados, son
> guias de horticulturaq!
>
> Gracias.
> Latincom
>