date:20240112


On 1/12/24 21:56, Andy Smith wrote:

Hi Gene,

There are some indicators of a fundamental lack of understanding
here I'm afraid.

On Fri, Jan 12, 2024 at 09:42:54PM -0500, gene heskett wrote:

smartctl says my raid10 is dying,


No it doesn't; smartctl works on drives, not mdadm arrays. mdadm
arrays are composed of block devices. Therefore any output you get
from smartd refers to a storage drive, not an mdadm array.

This appears to be true, there are 4 1t drives as a raid10, and the 
various messages in that mbox file name 3 of the individual drives.
But those individual drives cannot now be found by smartctl. So I must 
be doing something wrong. individually it names /dev/sde1, /dev/sdg1, 
and /dev/sdd1.  but -h offers no syntax help that works



As usual you have not bothered to show us what you are talking about
(the email from smartd), so we are left to guess. We should not
assume that it even says what you think it says.


copy paste from another shell:
gene@coyote:~$ sudo smartctl -i -d /dev/sde1
[sudo] password for gene:
smartctl 7.3 2022-02-28 r5338 [x86_64-linux-6.1.0-17-rt-amd64] (local build)
Copyright (C) 2002-22, Bruce Allen, Christian Franke, www.smartmontools.org

ERROR: smartctl requires a device name as the final command-line argument.

Ok, got that figure out, the -d specs the interface sat ot whatever.
Then I find the linux has played 52 pickup with the device names.
There are in actual fact 3 sata controller is this machine, the 
motherboards 6 ports, 6 more on an inexpensive sata contrller that are 
actually the 4 raid10 amsung 870 1T drives, and 4 more on a more 
sxpensive 16 port card which has a quartet of 2T gigastone SSD's on it, 
but the drives are not found in the order of the controllers. That 
raid10 was composed w/o the third controller.


blkid does not sort them in order either. And of coarse does not list 
whats unmounted, forcing me to ident the drive by gparted in order to 
get its device name. From that I might be able to construct another raid 
from the 8T of 4 2T drives but its confusing as hell when the first of 
those 2T drives is assigned /dev/sde and the next 4 on the new 
controller are /dev/sdi, j, k, & l.


So it appears I have 5 of those gigastones, and sde is the odd one
So that one could be formatted ext4 and serve as a backup of the raid10. 
 But since I can't copy a locked file, how do I make an image of that 
raid10  to /dev/sde and get every byte?  That seems like the first step 
to me.

Neither. /dev/sde1 is a partition on a block device.
/dev/md0p1 is a partition on an mdadm array. Neither one is
something that smartd works with.

I've got that now.


You probably wanted /dev/sde.

Also, the -d option of smartctl specifies the device type. You
almost certainly don't need it. If you don't absolutely know why
you are using -d, don't use it. So:

# smartctl -i /dev/sde

or, heck, get all the info at once:

# smartctl -a /dev/sde

**
If there is anything in that output that you have questions about,
please make sure to quote the full and unedited output back here to
the list, so we aren't left guessing what the subject of
discussion is.
**

Thanks,
Andy

/dev/sde1 has been formatted and mounted, what cmd line will copy every 
byte including locked files in that that raid10 to it?


Thank you

Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis

Re: smartctl cannot access my storage, need syntax help

2024-01-12 Thread Andy Smith

Hi Gene,

There are some indicators of a fundamental lack of understanding
here I'm afraid.

On Fri, Jan 12, 2024 at 09:42:54PM -0500, gene heskett wrote:
> smartctl says my raid10 is dying,

No it doesn't; smartctl works on drives, not mdadm arrays. mdadm
arrays are composed of block devices. Therefore any output you get
from smartd refers to a storage drive, not an mdadm array.

As usual you have not bothered to show us what you are talking about
(the email from smartd), so we are left to guess. We should not
assume that it even says what you think it says.

> The -d /dev/sde1 for instance generates a help msg saying it needs a
> devicename as final argument, being run as "sudo smartctl -i -d /dev/sde1".
> or as -i -d /dev/md0p1???

Neither. /dev/sde1 is a partition on a block device.
/dev/md0p1 is a partition on an mdadm array. Neither one is
something that smartd works with.

You probably wanted /dev/sde.

Also, the -d option of smartctl specifies the device type. You
almost certainly don't need it. If you don't absolutely know why
you are using -d, don't use it. So:

# smartctl -i /dev/sde

or, heck, get all the info at once:

# smartctl -a /dev/sde

**
If there is anything in that output that you have questions about,
please make sure to quote the full and unedited output back here to
the list, so we aren't left guessing what the subject of
discussion is.
**

Thanks,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Re: smartctl cannot access my storage, need syntax help

2024-01-12 Thread Gareth Evans

On Sat 13/01/2024 at 02:42, gene heskett  wrote:
> I just found an mbox file in my home directory, containing about 90 days 
> worth of undelivered msgs from smartctl running as root.
>
> smartctl says my raid10 is dying, but will not access the drives for 
> detail. The -d /dev/sde1 for instance generates a help msg saying it 
> needs a devicename as final argument, being run as "sudo smartctl -i -d 
> /dev/sde1". or as -i -d /dev/md0p1???
> Typical: sudo smartctl -i -d /dev/md0p1:
> gene@coyote:~$ sudo smartctl -i -d /dev/md0p1
> smartctl 7.3 2022-02-28 r5338 [x86_64-linux-6.1.0-17-rt-amd64] (local build)
> Copyright (C) 2002-22, Bruce Allen, Christian Franke, www.smartmontools.org
>
> ERROR: smartctl requires a device name as the final command-line argument.
>
>
> Use smartctl -h to get a usage summary
>
>
> Instructions please...

Hi Gene,

You seem to be asking it to operate on partitions.  

smartctl -options /dev/sdX

is the form, I believe, in which sdX must be a device, not a virtual thing such 
as MD, LVM etc.

Re: Seeking a Terminal Emulator on Debian for "Passthrough" Printing

2024-01-12 Thread John Hasler

Thierry writes:
> Currently, PuTTY is an option but its current version has limitations
> that make it insufficient for our operational use.

Commission the PuTTY authors to add the missing features or pay someone
else to do it if they aren't interested.

https://www.chiark.greenend.org.uk/~sgtatham/putty/
-- 
John Hasler 
j...@sugarbit.com
Elmwood, WI USA

Re: Bookworm and ZFS (zfs-dkms 2.1.11) data corruption bug

2024-01-12 Thread Gareth Evans

On Sat 13/01/2024 at 02:32, Gareth Evans  wrote:
> use of the actual "stable-backports" repo is not 
> recommended or implied.

"implied" might be debatable given that was indeed my first thought, but not 
intended to be implied, it seems.  Certainly not necessary.

smartctl cannot access my storage, need syntax help

I just found an mbox file in my home directory, containing about 90 days 
worth of undelivered msgs from smartctl running as root.


smartctl says my raid10 is dying, but will not access the drives for 
detail. The -d /dev/sde1 for instance generates a help msg saying it 
needs a devicename as final argument, being run as "sudo smartctl -i -d 
/dev/sde1". or as -i -d /dev/md0p1???

Typical: sudo smartctl -i -d /dev/md0p1:
gene@coyote:~$ sudo smartctl -i -d /dev/md0p1
smartctl 7.3 2022-02-28 r5338 [x86_64-linux-6.1.0-17-rt-amd64] (local build)
Copyright (C) 2002-22, Bruce Allen, Christian Franke, www.smartmontools.org

ERROR: smartctl requires a device name as the final command-line argument.


Use smartctl -h to get a usage summary


Instructions please...

Thank you.

Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis

Re: Bookworm and ZFS (zfs-dkms 2.1.11) data corruption bug

2024-01-12 Thread Gareth Evans

On Fri 12/01/2024 at 06:49, Jan Ingvoldstad wrote:
> ...
> It is far more concerning that one cannot trust that cp actually copies a
> file, and this is a blocker for installing the ZFS packages in Debian.

The update in bookworm-backports to 2.2.2-3 allegedly fixes this issue.

I have installed it and at least rebooted :)

I have had ZFS on root since Buster, and have upgraded to each new stable
release since then.

I had wondered recently if the Debian wiki's recommendation [1] of installing
from "stable-backports", and the statement that

"Upstream stable patches will be tracked and compatibility is always maintained"

was to suggest use of the actual "stable-backports" repo, and that the
compatibility guarantee meant that they cater for any potential ZFS issues
arising for non-upgraded systems after new release time. On closer inspection,
the line the wiki provides to add this to sources.list actually adds the
codename-backports repo (currently "bookworm-backports"). "stable-backports"
also appears to be an alias that apt understands as referring to
{codename}-backports for whatever current stable is, and use of the actual
"stable-backports" repo is not recommended or implied.

Is the Debian wiki advice re installing ZFS from backports applicable in all
circumstances? What would be the suggested approach for installing with ZFS on
root or re-pointing apt at backports for ZFS immediately after [upgrading to] a
new stable release? Do backports even exist at that point? If so, after a
release upgrade, can you install the same version of eg. zfs-dkms from
backports as a sort of special case for the purposes of changing the repo? Or
do you just have to watch and wait for new ZFS backports?

OpenZFS instructions [2] for root on ZFS suggest using bookworm not
bookworm-backports, so I wondered if an initial lack of backports might be the
reason.

Thanks,
Gareth

[1] https://wiki.debian.org/ZFS#Status
[2]
https://openzfs.github.io/openzfs-docs/Getting%20Started/Debian/Debian%20Bookworm%20Root%20on%20ZFS.html#step-1-prepare-the-install-environment

Re: Thunderbird filters


On 1/12/24 15:58, David Christensen wrote:

On 1/12/24 05:47, Arno Lehmann wrote:

Am 12.01.2024 um 14:31 schrieb gene heskett:
I'm using tbird as an email agent, but it just did something both 
strange and scary.


Its filters have been working very spotty, only when the phase of the 
moon was right. And it missed moving a msg from the nut list to the 
local nut sbbdir, so I went to the filter menu and had it add a new 
filter based on that msg.  Then told it to "run it now". Apparently a 
big mistake!!


tbird took about an hour, totally cleaned out the inbox at my mail 
server of 4080 some messages, w/o adding or moving to anything, 
absolutely zip to any local mail directory. No local msgs were played 
with, but I've lost several hundred often used addresses that were 
stashed in my inbox.


Does anybody have a clue what did that?


You will have to share the actual filter and actions you configured 
before anybopdy can develop any clue.


Also, adding the actual version of thunderbird will be useful.


115.6.0 (64-bit)

And it may be relevant to have the account type, too -- pop3, imap, 
whatever server side, and how your local mail storage is organized.

imap


Until this bug is resolved, I suggest:

1.  Shut down the computer.  If you have Ethernet, disconnect the cable.

2.  Boot the computer.  Login to your user account.  If you have Wi-Fi 
or any other network interfaces, disable them so that your comptuer 
cannot connect to mail server.


3.  Back up the $HOME/.thunderbird folder.

4.  Start Thunderbird.  Go to Tools -> Message Filters and disable  all 
filters.  Close Thunderbird.  Shut down your computer.


5.  If you have Ethernet, connect the cable.  Boot your computer.  Login 
to your user account.  If you have Wi-Fi or any other network 
interfaces, enable them.


6.  Start Thunderbird.  Verify that all message filters are disabled. 
Verify that you can send and receive mail.



Go to Thunderbird -> Edit -> Account Settings -> ghesk...@shentel.net -> 
Server Settings.  What is the value of the field "Server Type"?


IMAP MAIL Server


Please run the following commands and post your console session:

2024-01-12 11:49:46 root@taz ~
# cat /etc/debian_version ; uname -a


12.4
Linux coyote 6.1.0-17-rt-amd64 #1 SMP PREEMPT_RT Debian 6.1.69-1 
(2023-12-30) x86_64 GNU/Linux



11.8
Linux taz 5.10.0-26-amd64 #1 SMP Debian 5.10.197-1 (2023-09-29) x86_64 
GNU/Linux


2024-01-12 11:49:56 root@taz ~
# dpkg-query -W thunderbird


thunderbird 1:115.6.0-1~deb12u1


thunderbird    1:115.6.0-1~deb11u1


STFW for "thunderbird filter plain text dump", I found:

https://support.mozilla.org/en-US/questions/1147503


Searching for the Thunderbird message filter configuration files on my 
computer:


2024-01-12 12:31:57 dpchrist@taz ~
$ find .thunderbird/dpchrist -iname '*filter*'
.thunderbird/dpchrist/Mail/Local Folders/msgFilterRules.dat
.thunderbird/dpchrist/ImapMail/november.he-1.net/msgFilterRules.dat
.thunderbird/dpchrist/ImapMail/november.he.net/msgFilterRules.dat

I have no such directory structure where subbing my id for dpchrist 
might hide:

gene@coyote:~/.thunderbird$ ls
'Crash Reports'   f37v8icg.default-default   installs.ini  'Pending 
Pings'   profiles.ini   twpgj5qd.default


However, I do have in my home dir, an mbox file dated the 7th:
Which may result in a clue about my raid10, its msgs from SMARTCTL 
running as root to me I've never rx'd containing warnings about /dev/sde 
which is part of that raid10 that is the systems /home directory.

So I'll take a break here and go investigate that.

It does lead to another question, how do I incorporate that into tbird 
so I get important status msgs from root?.


My mail hosting provider is Hurricane Electric (he.het).  My account is 
on the host november.he.net.  Looking at the contexts of above  files:


2024-01-12 12:34:03 dpchrist@taz ~
$ cat '.thunderbird/dpchrist/Mail/Local Folders/msgFilterRules.dat'
version="9"
logging="no"

2024-01-12 12:34:54 dpchrist@taz ~
$ cat .thunderbird/dpchrist/ImapMail/november.he-1.net/msgFilterRules.dat
version="9"
logging="no"

2024-01-12 12:38:30 dpchrist@taz ~
$ cat .thunderbird/dpchrist/ImapMail/november.he.net/msgFilterRules.dat
version="9"
logging="no"
name="nuke"
enabled="yes"
type="17"
action="Move to folder"
actionValue="imap://dpchrist%40holgerdanske@november.he.net/nuke"
action="Stop execution"
condition="OR (from,contains,redacted-user@redacted-host) OR 
(from,contains,@redacted-host) OR ...)"

name="Inbox-copy"
enabled="yes"
type="17"
action="Copy to folder"
actionValue="imap://dpchrist%40holgerdanske@november.he.net/Inbox-copy"
condition="ALL"


Please post the contents of your Thunderbird message filter 
configuration files.  Redact if you must, but understand that we cannot 
debug what we cannot see.



David

.
Appreciated David. If it happens again I will do as much of the above as 
I can, It does seem as if my input sorting filters are working 
noticeably better now.  This is

Re: Recherche d'un émulateur de terminal sous Debian pour l'impression en mode "passthrough

Bonjour,

Dans le cadre de ma recherche d'un émulateur de terminal pour l'impression en 
mode "passthrough", je souhaiterais relancer une piste précédente concernant 
PuTTY.

Cette piste semblait presque répondre à ma demande, mais je n'ai 
malheureusement pas pu entrer en contact avec l'équipe de développement pour 
discuter de cette amélioration importante. Mon intention était de suggérer 
l'intégration d'une fonctionnalité permettant l'impression directe sur un port 
COM, une capacité qui manque actuellement dans la version de PuTTY que 
j'utilise. De plus, j'aurais également souhaité explorer la possibilité d'une 
évolution rémunérée de PuTTY, ce qui pourrait s'avérer plus avantageux pour 
notre utilisation que d'opter pour un logiciel commercial avec des coûts de 
licence.

Malheureusement, mes tentatives de contact à l'adresse e-mail 
pu...@projects.tartarus.org sont restées sans réponse. Je me demande donc si 
cette adresse est la bonne pour joindre le projet et  si quelqu'un pourrait me 
proposer une adresse de contact plus appropriée ou toute autre suggestion pour 
faire avancer cette suggestion d'amélioration.

Cordialement,
Thierry

Re: Seeking a Terminal Emulator on Debian for "Passthrough" Printing

Hello,

>> I've always used 'ser2net' for that for of thing, mostly with single-
>> board computers attached via serial ports on a remote machine. But it
>> doesn't matter what the device is, it's a dumb pipe to transfer bytes
>> to/from a serial port on another computer.


Thank you for indicating the use of 'ser2net'. I appreciate your suggestion and 
the information you provided. However, in our specific infrastructure, the 
terminal emulator plays a central role due to the way our users access the 
application and reauthenticate for printing purposes. This interaction is 
seamless for our users and the terminal emulator serves as a crucial component 
in managing the communication between the server and the various devices, 
including the printer and others.

While 'ser2net' may be a valuable tool for certain purposes, it doesn't align 
with our specific requirements. Nevertheless, I'm grateful for the insight and 
knowledge you've shared.

Best Regards,
Thierry

Re: Seeking a Terminal Emulator on Debian for "Passthrough" Printing

Hello,

>> Suggestion:  Make another description of the challenge.
>>
>> Describe it as a travelling route.  Spend effort on telling
>> what the endpoints were and are.


Our current starting point as being a third-party terminal emulator provided by 
a licensed company. This emulator runs on an outdated version of Windows and 
older Wyse versions and supports only the Telnet protocol, limiting our ability 
to establish secure connections.

Now, our mandatory choice, if no other alternative emerges is to upgrade our 
infrastructure by transitioning to newer Wyse clients equipped with more recent 
versions of Windows and migrating to the commercial emulator from the same 
company (or another) which supports the SSH protocol and Passthrough Printing. 
We aim to migrate to an open-source terminal emulator that supports the 
Passthrough Printing, thereby offering improved security and this remains our 
preferred path.

Currently, PuTTY is an option but its current version has limitations that make 
it insufficient for our operational use.
We have conducted research in our quest to find such an open-source emulator 
with full Passthrough Printing, but thus far, we have been unable to identify 
one that fully meets our needs.

Best Regards,
Thierry

Re: Change suspend type from kde menu


Il 12/01/2024 21:15, Franco Martelli ha scritto:


 > Tried, it works on DVB play.
 >
 > dbus-send --print-reply --dest=org.mpris.kaffeine /Player 
org.freedesktop.MediaPlayer.Stop


As Max replied to that post saying that you could avoid to kill Kaffeine 
  now you can try to:


- stop Kaffeine
- rmmod the module (what happens if you force unloading: -f option)
- suspend
- resume
- modprobe the module
- play Kaffeine

but I bet you've already realized that :)


Yes, it's what I'm going to try :-)
Force module unloading cannot work, it requires a specific option in 
kernel config that I've never enabled.


You can also try to not remove the module and check if stop Kaffeine, 
suspend/resume, play Kaffeine is enough.


The module does not support suspend / resume at all.
If you boot the system, *don't* open kaffeine or anything, suspend and 
resume, module is already in an unworkable state.

Re: Change suspend type from kde menu


Il 12/01/2024 17:24, Max Nikulin ha scritto:

On 12/01/2024 21:36, Valerio Vanni wrote:


Tried, it works on DVB play.

dbus-send --print-reply --dest=org.mpris.kaffeine /Player 
org.freedesktop.MediaPlayer.Stop


The question is if this action can be a replacement for killing kaffeine 
before unloading the dvb kernel module.


I'll try. It could make the script simpler.
If I launch kaffeine without --lastchannel, it should work. That way I'd 
have to open tv interface by hand when I start kaffeine.


What is baloo's tags.so doing with /dev/dvb devices accordingly to lsof 
report? I still had a hope that there is a workarond against its 
annoying behavior.


This is a file descriptors list of kioslave process, with a plain launch:

lrwx-- 1 valerio valerio 64 12 gen 20.53 0 -> /dev/pts/1
lrwx-- 1 valerio valerio 64 12 gen 20.53 1 -> /dev/pts/1
lrwx-- 1 valerio valerio 64 12 gen 20.53 19 -> '/memfd:pulseaudio 
(deleted)'

lrwx-- 1 valerio valerio 64 12 gen 20.53 2 -> /dev/pts/1
lr-x-- 1 valerio valerio 64 12 gen 20.53 25 -> 
/run/user/1000/dvbpipe.m2t
l-wx-- 1 valerio valerio 64 12 gen 20.53 26 -> 
/run/user/1000/dvbpipe.m2t

lrwx-- 1 valerio valerio 64 12 gen 20.53 3 -> 'anon_inode:[eventfd]'
lr-x-- 1 valerio valerio 64 12 gen 20.53 31 -> anon_inode:inotify
lrwx-- 1 valerio valerio 64 12 gen 20.53 4 -> 'socket:[10323613]'

And this is one with a --lastchannel launch:

lr-x-- 1 valerio valerio 64 12 gen 20.52 0 -> 'pipe:[9256505]'
lrwx-- 1 valerio valerio 64 12 gen 20.52 1 -> 'socket:[71658]'
lrwx-- 1 valerio valerio 64 12 gen 20.52 19 -> '/memfd:pulseaudio 
(deleted)'

lrwx-- 1 valerio valerio 64 12 gen 20.52 2 -> 'socket:[71658]'
lr-x-- 1 valerio valerio 64 12 gen 20.52 25 -> 
/run/user/1000/dvbpipe.m2t
l-wx-- 1 valerio valerio 64 12 gen 20.52 26 -> 
/run/user/1000/dvbpipe.m2t

lrwx-- 1 valerio valerio 64 12 gen 20.52 3 -> 'anon_inode:[eventfd]'
lr-x-- 1 valerio valerio 64 12 gen 20.52 31 -> anon_inode:inotify
lrwx-- 1 valerio valerio 64 12 gen 20.52 34 -> 
/dev/dvb/adapter0/frontend0

lr-x-- 1 valerio valerio 64 12 gen 20.52 36 -> 'pipe:[9253331]'
l-wx-- 1 valerio valerio 64 12 gen 20.52 37 -> 'pipe:[9253331]'
lrwx-- 1 valerio valerio 64 12 gen 20.52 4 -> 'socket:[9247546]'
lr-x-- 1 valerio valerio 64 12 gen 20.52 48 -> anon_inode:inotify
lrwx-- 1 valerio valerio 64 12 gen 20.52 54 -> '/memfd:pulseaudio 
(deleted)'


But perhaps it says nothing new.

Re: nftables firewall question: matching udp in ipv6

2024-01-12 Thread Michel Verdier

On 2024-01-12, Ralph Aichinger wrote:

> I "only" have to find out what mechanism adds the lower, en2 default
> route within a few minutes, once I delete it. I ran "radvdump", but
> that only dumped the correct announcement my provider sends for the
> net over the PPPoE connection. Hm.
>
> Thanks everybody, of course hints on how to find out what's adding
> default routes would also be appreciated ;)

It depends on how you setup your network. If you only use ifupdown (and
it is better for a server) look in /etc/network/interfaces and
/etc/network/interfaces.d/* for "gateway" stances

Re: Thunderbird filters

2024-01-12 Thread David Christensen


On 1/12/24 05:47, Arno Lehmann wrote:

Am 12.01.2024 um 14:31 schrieb gene heskett:
I'm using tbird as an email agent, but it just did something both 
strange and scary.


Its filters have been working very spotty, only when the phase of the 
moon was right. And it missed moving a msg from the nut list to the 
local nut sbbdir, so I went to the filter menu and had it add a new 
filter based on that msg.  Then told it to "run it now". Apparently a 
big mistake!!


tbird took about an hour, totally cleaned out the inbox at my mail 
server of 4080 some messages, w/o adding or moving to anything, 
absolutely zip to any local mail directory. No local msgs were played 
with, but I've lost several hundred often used addresses that were 
stashed in my inbox.


Does anybody have a clue what did that?


You will have to share the actual filter and actions you configured 
before anybopdy can develop any clue.


Also, adding the actual version of thunderbird will be useful.

And it may be relevant to have the account type, too -- pop3, imap, 
whatever server side, and how your local mail storage is organized.



Until this bug is resolved, I suggest:

1.  Shut down the computer.  If you have Ethernet, disconnect the cable.

2.  Boot the computer.  Login to your user account.  If you have Wi-Fi 
or any other network interfaces, disable them so that your comptuer 
cannot connect to mail server.


3.  Back up the $HOME/.thunderbird folder.

4.  Start Thunderbird.  Go to Tools -> Message Filters and disable  all 
filters.  Close Thunderbird.  Shut down your computer.


5.  If you have Ethernet, connect the cable.  Boot your computer.  Login 
to your user account.  If you have Wi-Fi or any other network 
interfaces, enable them.


6.  Start Thunderbird.  Verify that all message filters are disabled. 
Verify that you can send and receive mail.



Go to Thunderbird -> Edit -> Account Settings -> ghesk...@shentel.net -> 
Server Settings.  What is the value of the field "Server Type"?



Please run the following commands and post your console session:

2024-01-12 11:49:46 root@taz ~
# cat /etc/debian_version ; uname -a
11.8
Linux taz 5.10.0-26-amd64 #1 SMP Debian 5.10.197-1 (2023-09-29) x86_64 
GNU/Linux


2024-01-12 11:49:56 root@taz ~
# dpkg-query -W thunderbird
thunderbird 1:115.6.0-1~deb11u1


STFW for "thunderbird filter plain text dump", I found:

https://support.mozilla.org/en-US/questions/1147503


Searching for the Thunderbird message filter configuration files on my 
computer:


2024-01-12 12:31:57 dpchrist@taz ~
$ find .thunderbird/dpchrist -iname '*filter*'
.thunderbird/dpchrist/Mail/Local Folders/msgFilterRules.dat
.thunderbird/dpchrist/ImapMail/november.he-1.net/msgFilterRules.dat
.thunderbird/dpchrist/ImapMail/november.he.net/msgFilterRules.dat


My mail hosting provider is Hurricane Electric (he.het).  My account is 
on the host november.he.net.  Looking at the contexts of above  files:


2024-01-12 12:34:03 dpchrist@taz ~
$ cat '.thunderbird/dpchrist/Mail/Local Folders/msgFilterRules.dat'
version="9"
logging="no"

2024-01-12 12:34:54 dpchrist@taz ~
$ cat .thunderbird/dpchrist/ImapMail/november.he-1.net/msgFilterRules.dat
version="9"
logging="no"

2024-01-12 12:38:30 dpchrist@taz ~
$ cat .thunderbird/dpchrist/ImapMail/november.he.net/msgFilterRules.dat 


version="9"
logging="no"
name="nuke"
enabled="yes"
type="17"
action="Move to folder"
actionValue="imap://dpchrist%40holgerdanske@november.he.net/nuke"
action="Stop execution"
condition="OR (from,contains,redacted-user@redacted-host) OR 
(from,contains,@redacted-host) OR ...)"

name="Inbox-copy"
enabled="yes"
type="17"
action="Copy to folder"
actionValue="imap://dpchrist%40holgerdanske@november.he.net/Inbox-copy"
condition="ALL"


Please post the contents of your Thunderbird message filter 
configuration files.  Redact if you must, but understand that we cannot 
debug what we cannot see.



David

Re: Change suspend type from kde menu

2024-01-12 Thread Franco Martelli

On 12/01/24 at 15:38, Valerio Vanni wrote:

~$ busctl --user tree | grep mpris

Service org.mpris.kaffeine:

Another question, can Kaffeine stop the video? Do you have a "Stop" 
button  to click over?

Yes, it has play/stop button.

I saw that in another post you have find the dbus object and method to 
stop/play Kaffeine:

> Tried, it works on DVB play.
>
> dbus-send --print-reply --dest=org.mpris.kaffeine /Player 
org.freedesktop.MediaPlayer.Stop

As Max replied to that post saying that you could avoid to kill Kaffeine 
 now you can try to:

- stop Kaffeine
- rmmod the module (what happens if you force unloading: -f option)
- suspend
- resume
- modprobe the module
- play Kaffeine

but I bet you've already realized that :)

You can also try to not remove the module and check if stop Kaffeine, 
suspend/resume, play Kaffeine is enough.

--
Franco Martelli

Re: nftables firewall question: matching udp in ipv6

On Fri, Jan 12, 2024 at 07:35:14PM +0100, Michel Verdier wrote:
>   meta l4proto udp log level info prefix "udp" accept

Thanks for that, and thanks to Michael Kjörling, your replies really
helped.

I found log lines similar to:

2024-01-12T19:51:32.999346+01:00 pi kernel: [3401524.305759] 
ralphfilterudpIN=en2 OUT=en2 MAC=08:00:1e:02:00:02:6c:cf:39:00:42:f4:86:dd 
SRC=2a02:0ab8:redacted DST=2a00:63c1:redacted LEN=96 TC=0 HOPLIMIT=63 
FLOWLBL=279176 PROTO=UDP SPT=40840 DPT=123 LEN=56 

with interestingly IN and OUT interfaces the same en2 (=dmz). And to my 
surprise, I
found a double IPv6 default route:

default via fe80::e25f:b9ff:fe1e:a100 dev ppp0 proto ra metric 1024 expires 
1791sec hoplimit 64 pref medium
default via fe80::a00:1eff:fe01:0 dev en2 proto ra metric 1024 expires 1588sec 
hoplimit 64 pref medium

Now I don't understand why pings/ICMP and tcp traffic seem to decide for
the correct route via ppp0 and only udp sems to prefer the one via en2,
but when I delete it, everything works. So while nftables might still 
contain some problematic stuff, at the core of my problem seems to be
routing.

I "only" have to find out what mechanism adds the lower, en2 default
route within a few minutes, once I delete it. I ran "radvdump", but
that only dumped the correct announcement my provider sends for the
net over the PPPoE connection. Hm.

Thanks everybody, of course hints on how to find out what's adding
default routes would also be appreciated ;)

Ralph

Re: xfce screen detachment

2024-01-12 Thread Russell L. Harris


On Fri, Jan 12, 2024 at 02:41:47PM -0500, Cindy Sue Causey wrote:

On 1/8/24, mick.crane  wrote:

On 2024-01-07 04:00, Russell L. Harris wrote:

system:  amd64 desktop, debian 12, xfce, NEC MultiSync EA192M monitor

I don't know precisely how to describe the problem, other than
"detachment".  About every week or so, when using the rodent, the
entire screen -- borders and all -- moves with respect to the monitor
screen as I move the mouse.

The only recovery method I have discovered is to reboot.

My hands and finders no longer are working well, so I likely clicked
on something or pressed a key to cause the problem.


I get this effect if pressing Alt and moving the mouse wheel.



Me, too, in LXQt. It's HARD finding the fix until you can finally
remember it. It's easy to hit a wall of misses when searching the
Internet.

As Mick says, hold down the ALT key and scroll the mouse rodent's
wheel back and forth. I just blew up my desktop background to where it
was basically one rendition of the small gif file that's normally
tiled.

It seems to be for commendable visual accessibility purposes, but it's
sure a grouch maker until you figure out its activation/deactivation
secret, lol.

Cindy :)
--
Talking Rock, Pickens County, Georgia, USA
* runs with birdseed *


Cindy, Thanks for taking the trouble to post the confirmation.  RLH
--
He turneth rivers into a wilderness, and the watersprings into dry
ground; a fruitful land into barrenness, for the wickedness of them
that dwell therein. - Psalm 107:33-34

Re: Temporary failure in name resolution

2024-01-12 Thread John Hasler

Curt writes:
> Yet the reserved gTLDs from the 2018 ICANN resolution are .home, .corp,
> and .mail. Does home.arpa comply with that resolution?

Yes.  Turns out that there were existing uses of '.home'.  Also, putting
it under 'arpa.' puts it under IETF control.

https://datatracker.ietf.org/doc/html/rfc8375
-- 
John Hasler 
j...@sugarbit.com
Elmwood, WI USA

Re: xfce screen detachment

2024-01-12 Thread Cindy Sue Causey

On 1/8/24, mick.crane  wrote:
> On 2024-01-07 04:00, Russell L. Harris wrote:
>> system:  amd64 desktop, debian 12, xfce, NEC MultiSync EA192M monitor
>>
>> I don't know precisely how to describe the problem, other than
>> "detachment".  About every week or so, when using the rodent, the
>> entire screen -- borders and all -- moves with respect to the monitor
>> screen as I move the mouse.
>>
>> The only recovery method I have discovered is to reboot.
>>
>> My hands and finders no longer are working well, so I likely clicked
>> on something or pressed a key to cause the problem.
>
> I get this effect if pressing Alt and moving the mouse wheel.

Me, too, in LXQt. It's HARD finding the fix until you can finally
remember it. It's easy to hit a wall of misses when searching the
Internet.

As Mick says, hold down the ALT key and scroll the mouse rodent's
wheel back and forth. I just blew up my desktop background to where it
was basically one rendition of the small gif file that's normally
tiled.

It seems to be for commendable visual accessibility purposes, but it's
sure a grouch maker until you figure out its activation/deactivation
secret, lol.

Cindy :)
-- 
Talking Rock, Pickens County, Georgia, USA
* runs with birdseed *

Re: nftables firewall question: matching udp in ipv6

2024-01-12 Thread Michel Verdier

On 2024-01-12, Ralph Aichinger wrote:

> If I insert the following rule at the bottom, everything starts to
> work:
>
> meta l4proto  udp  accept

Add log to see what would be dropped:

  meta l4proto udp log level info prefix "udp" accept

Provide "nft list ruleset" to better see what nft understands.

I suppose your udp is not "established" to not be accepted. Perhaps
something in your nat that breaks "established" ?

Re: Temporary failure in name resolution

2024-01-12 Thread debian-user

Curt  wrote:
> On 2024-01-12, debian-u...@howorth.org.uk
>  wrote:
> > Curt  wrote:  
> >> On 2024-01-11, Max Nikulin  wrote:  
> >> >
> >> > There was a thread that "home" as the top level domain might not
> >> > be really safe (somebody might register it). A reserved domain
> >> > is "home.arpa" so e.g. to have "thinkpad", the /etc/hosts entry
> >> > should be
> >> >
> >> > 127.0.1.1   thinkpad.home.arpa thinkpad
> >> >
> >> 
> >>  The .arpa domain is the “Address and Routing Parameter Area”
> >> domain and is designated to be used exclusively for
> >> Internet-infrastructure purposes.
> >> 
> >> https://www.iana.org/domains/arpa  
> >
> > Indeed, and a little way down that page it says:
> >
> >   home.arpa For non-unique use in residential home networks
> > RFC 8375  
> 
> I missed that.
> 
> Yet the reserved gTLDs from the 2018 ICANN resolution
> are .home, .corp, and .mail. Does home.arpa comply with that
> resolution?

I don't see there's any connection between that resolution and anything
done within the .arpa gTLD. So there's no notion of 'complying'.

Re: nftables firewall question: matching udp in ipv6

On Fri, Jan 12, 2024 at 05:26:57PM +, Michael Kjörling wrote:
> My suggestion would be to insert a "udp log" rule. (Pretty sure you
> only need "udp", not "meta l4proto udp".)
  
Thanks,  I will try that. Yes "meta l4proto udp" might be cargo 
cult configuration ;)

> That will give you a firehose of information which will include ports,
> interfaces and other relevant information. You can then narrow it down
> until it logs the traffic you want to accept, at which point you can
> change the "log" action into an "accept" action.
> 
> Note that forwarding and filtering can interact in non-intuitive ways.
> You may need to add corresponding log rules to each relevant chain,
> maybe with a prefix to tell them apart.
  
Thanks a lot!

Ralph

Re: Temporary failure in name resolution

2024-01-12 Thread Jeffrey Walton

On Fri, Jan 12, 2024 at 12:33 PM  wrote:
>
> Jeffrey Walton  wrote:
> > On Fri, Jan 12, 2024 at 11:08 AM Curt  wrote:
> > >
> > > On 2024-01-12, debian-u...@howorth.org.uk
> > >  wrote:
> > > > Curt  wrote:
> > > >> On 2024-01-11, Max Nikulin  wrote:
> > > >> >
> > > >> > There was a thread that "home" as the top level domain might
> > > >> > not be really safe (somebody might register it). A reserved
> > > >> > domain is "home.arpa" so e.g. to have "thinkpad",
> > > >> > the /etc/hosts entry should be
> > > >> >
> > > >> > 127.0.1.1   thinkpad.home.arpa thinkpad
> > > >> >
> > > >>
> > > >>  The .arpa domain is the “Address and Routing Parameter Area”
> > > >> domain and is designated to be used exclusively for
> > > >> Internet-infrastructure purposes.
> > > >>
> > > >> https://www.iana.org/domains/arpa
> > > >
> > > > Indeed, and a little way down that page it says:
> > > >
> > > >   home.arpa For non-unique use in residential home networks
> > > > RFC 8375
> > >
> > > I missed that.
> > >
> > > Yet the reserved gTLDs from the 2018 ICANN resolution
> > > are .home, .corp, and .mail. Does home.arpa comply with that
> > > resolution?
> >
> > And to muddy the waters a little more, IANA has some reserved domain
> > names, too:
> > .
> > Also see .
>
> Those references don't seem to muddy the issue. The second refers to
> the first and the first says
>
>   home.arpa.[RFC8375]

The fellow asked about .home, .corp, and .mail immediately above.

IANA widens the list to include names like local. and invalid. There
are more names than just the few named in this thread.

Jeff

Re: Temporary failure in name resolution

2024-01-12 Thread debian-user

Jeffrey Walton  wrote:
> On Fri, Jan 12, 2024 at 11:08 AM Curt  wrote:
> >
> > On 2024-01-12, debian-u...@howorth.org.uk
> >  wrote:  
> > > Curt  wrote:  
> > >> On 2024-01-11, Max Nikulin  wrote:  
> > >> >
> > >> > There was a thread that "home" as the top level domain might
> > >> > not be really safe (somebody might register it). A reserved
> > >> > domain is "home.arpa" so e.g. to have "thinkpad",
> > >> > the /etc/hosts entry should be
> > >> >
> > >> > 127.0.1.1   thinkpad.home.arpa thinkpad
> > >> >  
> > >>
> > >>  The .arpa domain is the “Address and Routing Parameter Area”
> > >> domain and is designated to be used exclusively for
> > >> Internet-infrastructure purposes.
> > >>
> > >> https://www.iana.org/domains/arpa  
> > >
> > > Indeed, and a little way down that page it says:
> > >
> > >   home.arpa For non-unique use in residential home networks
> > > RFC 8375  
> >
> > I missed that.
> >
> > Yet the reserved gTLDs from the 2018 ICANN resolution
> > are .home, .corp, and .mail. Does home.arpa comply with that
> > resolution?  
> 
> And to muddy the waters a little more, IANA has some reserved domain
> names, too:
> .
> Also see .

Those references don't seem to muddy the issue. The second refers to
the first and the first says 

  home.arpa.[RFC8375]

> Jeff
>

Re: Mise à jours et Update Stretch - Problème de dépôt

2024-01-12 Thread NoSpam


Bonsoir

Le 12/01/2024 à 18:12, Hugues MORIN-TRENEULE a écrit :

Salut

Bon ... Un peu beaucoup de temps est passé mais j'ai enfin pu faire 
cet upgrade.


J'ai tout d'abord vérifié les dépôts enregistrés dans mon source.list 
afin de savoir quel paquet dépend d'eux.
Il en résulte que le dépôt volatile n'a effectivement aucune utilité 
(sur mon système).


J'ai ensuite checker les dépôt archive.debian. org afin de vérifier 
s'il contenait des mises à jour mais il n'y en avait pas.


J'ai poursuivi avec les dépôts ELTS que cite Daniel en suivant la 
procédure qu'il a donné.


Mon Stretch étant alors à jour j'ai commencé l'upgrade vers Buster.

La mise à niveau minimale du système avec  apt-get upgrade s'est 
déroulé sans probleme


J'ai alors lancé dans la foulée la mise à niveau complète avec apt 
full-upgrade...
Il fallait -je pense- au préalable lancé un apt-get update && apt-get 
upgrade si effectivement il n'y a eu que la mise à niveau minimale. Et 
redámarrer ...


Et la ... c'est le drame, au environ de 45% il y a eu des erreurs (une 
histoire de suppression de /etc/init)

Mon système ne fonctionne plus depuis, il bloque au démarrage.
Pas de menu de démarrage grub ? Si oui, on doit pouvoir démarrer sur le 
noyau précédent


J'ai suivi pas à pas la méthode du site Debian: 
https://www.debian.org/releases/buster/amd64/release-notes/ch-upgrading.fr.html


Je ne pense pas que l'erreur soit liée aux mises à jours faites par le 
dépôt ELTS.
A moins que l'un d'entre vous voit une corrélation entre les mises à 
jours faites avec le dépôt ELTS et le crash de mon update, je pense 
que ce sujet peut-être clôturé.


Par contre, je dois avouer mon incompétence totale pour réparer et 
remettre en route mon système.
Sortir le disque, le connecter à un autre PC puis y faire un chroot pour 
réparer
Je vais faire quelques recherches pour trouver une solution mais mon 
niveau risque de ne pas être suffisant pour comprendre ce que je lis.
Après avoir réunir mes fichiers de log et l'enregistrement de mon 
upgrade, il y a de forte chance que j'ouvre un nouveau sujet pour 
avoir un peu d'aide pour réparer


[...]



Le jeu. 31 août 2023, 16:18, Daniel SAUVARD  
a écrit :


Bonjour.

Depuis l'année dernière, Debian n'assure plus le support de
Stretch (fin
du support LTS). Un support partiel reste possible via le projet
Extended Long Term Support (ELTS,
https://wiki.debian.org/LTS/Extended ;
pour 5 ans, soit jusqu'au 2027-06-30). Il faut supprimer les dépôts
Debian (qui ne sont à priori plus accessibles) et les remplacer
par ceux
de Freexian).

En pratique :
- Éditer le fichier source.list et désactiver les dépôts Debian.
- Ajouter la clé de l'archive Freexian.
     # wget

https://deb.freexian.com/extended-lts/pool/main/f/freexian-archive-keyring/freexian-archive-keyring_2022.06.08_all.deb

&& dpkg -i freexian-archive-keyring_2022.06.08_all.deb
   Contrôler la clé avec « # apt-key finger | less », en comparant
l'empreinte avec celle indiquée sur la page
https://www.freexian.com/lts/extended/docs/how-to-use-extended-lts/.
- Activer les dépôts Freexian, par exemple en créant le fichier
/etc/apt/sources.list.d/extended-lts.list, contenant :
     # ELTS archive
     deb http://deb.freexian.com/extended-lts stretch-lts main
   Nota Le serveur n'utilise pas les dépôts contrib et non-free.
- Mettre à jour du système :
     # apt update
     # apt upgrade
   Redémarrer le système si le noyau a été mis à jour.

Cordialement,
Daniel Sauvard



Le 29/08/2023 à 13:53, Hugues MORIN-TRENEULE a écrit :
> Salut à tous
>
> J'ai fait une boulette, je n'ai pas upgradé .
> A force de me procrastiner l'upgrade d'une machine sous Stretch
dont je
> me sers occasionnellement, je me trouve un peu embêter aujourd'hui.
>
> En voulant faire un petit check des mises à jour, je me suis
aperçu que
> les dépôts Stretch enregistrés dans mon source.list n'existe plus:
> # deb cdrom:[Debian GNU/Linux 9.2.1 _Stretch_ - Official amd64
NETINST
> 20171013-13:07]/ stretch main
>
> #deb cdrom:[Debian GNU/Linux 9.2.1 _Stretch_ - Official amd64
NETINST
> 20171013-13:07]/ stretch main
>
> deb http://ftp.fr.debian.org/debian/

> stretch main contrib non-free
> deb-src http://ftp.fr.debian.org/debian/
>  stretch main contrib non-free
>
> deb http://security.debian.org/debian-security
>  stretch/updates main
> contrib non-free
> deb-src http://security.debian.org/debian-security
>  stretch/updates main
> contrib non-free
>
> # stretch-updates, previously known as 'volatile'
> deb http://ftp.fr.debian.org/debian/

>

Re: nftables firewall question: matching udp in ipv6

2024-01-12 Thread Michael Kjörling

On 12 Jan 2024 16:19 +0100, from r...@h5.or.at (Ralph Aichinger):
> If I insert the following rule at the bottom, everything starts to
> work:
> 
> meta l4proto  udp  accept
> 
> but I don't know how to limit this over broad rule (so it does not
> forward UDP to the internal network on en0, which I do not want). 

My suggestion would be to insert a "udp log" rule. (Pretty sure you
only need "udp", not "meta l4proto udp".)

That will give you a firehose of information which will include ports,
interfaces and other relevant information. You can then narrow it down
until it logs the traffic you want to accept, at which point you can
change the "log" action into an "accept" action.

Note that forwarding and filtering can interact in non-intuitive ways.
You may need to add corresponding log rules to each relevant chain,
maybe with a prefix to tell them apart.

-- 
Michael Kjörling  https://michael.kjorling.se
“Remember when, on the Internet, nobody cared that you were a dog?”

Re: Mise à jours et Update Stretch - Problème de dépôt

2024-01-12 Thread ajh-valmer

Hello,
Il y a trop d'écart entre Stretch et Bookworm,
et des distributions Debian ne sont plus maintenues.
Dans ces conditions, si on a une partition /home séparée 
de la partition système, mieux vaut faire une installation à neuf,
ça va très vite ~15Go.

> ...
> J'ai alors lancé dans la foulée la mise à niveau complète avec 
> apt full-upgrade...  
> Et la ... c'est le drame, au environ de 45% il y a eu des erreurs 
> (une histoire de suppression de /etc/init) 
> Mon système ne fonctionne plus depuis, il bloque au démarrage.
> ...

Re: Mise à jours et Update Stretch - Problème de dépôt

2024-01-12 Thread Hugues MORIN-TRENEULE

Salut

Bon ... Un peu beaucoup de temps est passé mais j'ai enfin pu faire cet
upgrade.

J'ai tout d'abord vérifié les dépôts enregistrés dans mon source.list afin
de savoir quel paquet dépend d'eux.
Il en résulte que le dépôt volatile n'a effectivement aucune utilité (sur
mon système).

J'ai ensuite checker les dépôt archive.debian. org afin de vérifier s'il
contenait des mises à jour mais il n'y en avait pas.

J'ai poursuivi avec les dépôts ELTS que cite Daniel en suivant la procédure
qu'il a donné.

Mon Stretch étant alors à jour j'ai commencé l'upgrade vers Buster.

La mise à niveau minimale du système avec  apt-get upgrade s'est déroulé
sans probleme

J'ai alors lancé dans la foulée la mise à niveau complète avec apt
full-upgrade...

Et la ... c'est le drame, au environ de 45% il y a eu des erreurs (une
histoire de suppression de /etc/init)
Mon système ne fonctionne plus depuis, il bloque au démarrage.

J'ai suivi pas à pas la méthode du site Debian:
https://www.debian.org/releases/buster/amd64/release-notes/ch-upgrading.fr.html

Je ne pense pas que l'erreur soit liée aux mises à jours faites par le
dépôt ELTS.
A moins que l'un d'entre vous voit une corrélation entre les mises à jours
faites avec le dépôt ELTS et le crash de mon update, je pense que ce sujet
peut-être clôturé.

Par contre, je dois avouer mon incompétence totale pour réparer et remettre
en route mon système.
Je vais faire quelques recherches pour trouver une solution mais mon niveau
risque de ne pas être suffisant pour comprendre ce que je lis.
Après avoir réunir mes fichiers de log et l'enregistrement de mon upgrade,
il y a de forte chance que j'ouvre un nouveau sujet pour avoir un peu
d'aide pour réparer

Merci à tous
Très cordialement
Hugues







Le jeu. 31 août 2023, 16:18, Daniel SAUVARD  a
écrit :

> Bonjour.
>
> Depuis l'année dernière, Debian n'assure plus le support de Stretch (fin
> du support LTS). Un support partiel reste possible via le projet
> Extended Long Term Support (ELTS, https://wiki.debian.org/LTS/Extended ;
> pour 5 ans, soit jusqu'au 2027-06-30). Il faut supprimer les dépôts
> Debian (qui ne sont à priori plus accessibles) et les remplacer par ceux
> de Freexian).
>
> En pratique :
> - Éditer le fichier source.list et désactiver les dépôts Debian.
> - Ajouter la clé de l'archive Freexian.
>  # wget
>
> https://deb.freexian.com/extended-lts/pool/main/f/freexian-archive-keyring/freexian-archive-keyring_2022.06.08_all.deb
> && dpkg -i freexian-archive-keyring_2022.06.08_all.deb
>Contrôler la clé avec « # apt-key finger | less », en comparant
> l'empreinte avec celle indiquée sur la page
> https://www.freexian.com/lts/extended/docs/how-to-use-extended-lts/.
> - Activer les dépôts Freexian, par exemple en créant le fichier
> /etc/apt/sources.list.d/extended-lts.list, contenant :
>  # ELTS archive
>  deb http://deb.freexian.com/extended-lts stretch-lts main
>Nota Le serveur n'utilise pas les dépôts contrib et non-free.
> - Mettre à jour du système :
>  # apt update
>  # apt upgrade
>Redémarrer le système si le noyau a été mis à jour.
>
> Cordialement,
> Daniel Sauvard
>
>
>
> Le 29/08/2023 à 13:53, Hugues MORIN-TRENEULE a écrit :
> > Salut à tous
> >
> > J'ai fait une boulette, je n'ai pas upgradé .
> > A force de me procrastiner l'upgrade d'une machine sous Stretch dont je
> > me sers occasionnellement, je me trouve un peu embêter aujourd'hui.
> >
> > En voulant faire un petit check des mises à jour, je me suis aperçu que
> > les dépôts Stretch enregistrés dans mon source.list n'existe plus:
> > # deb cdrom:[Debian GNU/Linux 9.2.1 _Stretch_ - Official amd64 NETINST
> > 20171013-13:07]/ stretch main
> >
> > #deb cdrom:[Debian GNU/Linux 9.2.1 _Stretch_ - Official amd64 NETINST
> > 20171013-13:07]/ stretch main
> >
> > deb http://ftp.fr.debian.org/debian/ 
> > stretch main contrib non-free
> > deb-src http://ftp.fr.debian.org/debian/
> >  stretch main contrib non-free
> >
> > deb http://security.debian.org/debian-security
> >  stretch/updates main
> > contrib non-free
> > deb-src http://security.debian.org/debian-security
> >  stretch/updates main
> > contrib non-free
> >
> > # stretch-updates, previously known as 'volatile'
> > deb http://ftp.fr.debian.org/debian/ 
> > stretch-updates main contrib non-free
> > deb-src http://ftp.fr.debian.org/debian/
> >  stretch-updates main contrib non-free
> >
> > J'aimerai upgrader cette machine (tout d'abord vers buster) mais avant
> > cela il faudrait que je mette à jours les paquets de stretch pour ne pas
> > avoir de soucis avec les upgrade a venir.
> >
> > Pour le dépot principal (http://ftp.fr.debian.org/debian/
> >  stretch) , en cherchant, j'ai trouvé
> > le depot archive Debian:

Re: ata6.00: failed to IDENTIFY (I/O error, err_mask=0x100)

2024-01-12 Thread Dan Purgert

On Jan 12, 2024, Vincent Lefevre wrote:
> In one of my new machines, I have a DVD+/-RW drive. There were
> no issues on January 8 and 9. But today, I'm getting
> 
>   ata6.00: failed to IDENTIFY (I/O error, err_mask=0x100)
> 
> errors at boot time.
> [...]
> 
> Any idea?

It's an I/O error between the SATA controller and whatever device when
the controller is asking it to identify its capabilities.

Could be as simple as a loose cable (or bad cable / port).



-- 
|_|O|_| 
|_|_|O| Github: https://github.com/dpurgert
|O|O|O| PGP: DDAB 23FB 19FA 7D85 1CC1  E067 6D65 70E5 4CE7 2860


signature.asc
Description: PGP signature

ata6.00: failed to IDENTIFY (I/O error, err_mask=0x100)

2024-01-12 Thread Vincent Lefevre

In one of my new machines, I have a DVD+/-RW drive. There were
no issues on January 8 and 9. But today, I'm getting

  ata6.00: failed to IDENTIFY (I/O error, err_mask=0x100)

errors at boot time.

Excerpts of the journal concerning ata6:

journalctl-9:Jan 08 11:23:19 disset kernel: ata6: SATA max UDMA/133 abar 
m2048@0x88643000 port 0x88643380 irq 54
journalctl-9:Jan 08 11:23:19 disset kernel: ata6: SATA link up 1.5 Gbps 
(SStatus 113 SControl 300)
journalctl-9:Jan 08 11:23:19 disset kernel: ata6.00: ATAPI: PLDS DVD+/-RW 
DU-8A5LH, 6D1M, max UDMA/133
journalctl-9:Jan 08 11:23:19 disset kernel: ata6.00: configured for UDMA/133

journalctl-8:Jan 08 12:07:02 disset kernel: ata6: SATA max UDMA/133 abar 
m2048@0x88643000 port 0x88643380 irq 55
journalctl-8:Jan 08 12:07:02 disset kernel: ata6: SATA link up 1.5 Gbps 
(SStatus 113 SControl 300)
journalctl-8:Jan 08 12:07:02 disset kernel: ata6.00: ATAPI: PLDS DVD+/-RW 
DU-8A5LH, 6D1M, max UDMA/133
journalctl-8:Jan 08 12:07:02 disset kernel: ata6.00: configured for UDMA/133

journalctl-7:Jan 08 12:51:28 disset kernel: ata6: SATA max UDMA/133 abar 
m2048@0x88643000 port 0x88643380 irq 54
journalctl-7:Jan 08 12:51:28 disset kernel: ata6: SATA link up 1.5 Gbps 
(SStatus 113 SControl 300)
journalctl-7:Jan 08 12:51:28 disset kernel: ata6.00: ATAPI: PLDS DVD+/-RW 
DU-8A5LH, 6D1M, max UDMA/133
journalctl-7:Jan 08 12:51:28 disset kernel: ata6.00: configured for UDMA/133

journalctl-6:Jan 08 13:01:44 disset kernel: ata6: SATA max UDMA/133 abar 
m2048@0x88643000 port 0x88643380 irq 55
journalctl-6:Jan 08 13:01:44 disset kernel: ata6: SATA link up 1.5 Gbps 
(SStatus 113 SControl 300)
journalctl-6:Jan 08 13:01:44 disset kernel: ata6.00: ATAPI: PLDS DVD+/-RW 
DU-8A5LH, 6D1M, max UDMA/133
journalctl-6:Jan 08 13:01:44 disset kernel: ata6.00: configured for UDMA/133

journalctl-5:Jan 08 13:25:26 disset kernel: ata6: SATA max UDMA/133 abar 
m2048@0x88643000 port 0x88643380 irq 54
journalctl-5:Jan 08 13:25:26 disset kernel: ata6: SATA link up 1.5 Gbps 
(SStatus 113 SControl 300)
journalctl-5:Jan 08 13:25:26 disset kernel: ata6.00: ATAPI: PLDS DVD+/-RW 
DU-8A5LH, 6D1M, max UDMA/133
journalctl-5:Jan 08 13:25:26 disset kernel: ata6.00: configured for UDMA/133

journalctl-4:Jan 08 15:18:10 disset kernel: ata6: SATA max UDMA/133 abar 
m2048@0x88643000 port 0x88643380 irq 55
journalctl-4:Jan 08 15:18:10 disset kernel: ata6: SATA link up 1.5 Gbps 
(SStatus 113 SControl 300)
journalctl-4:Jan 08 15:18:10 disset kernel: ata6.00: ATAPI: PLDS DVD+/-RW 
DU-8A5LH, 6D1M, max UDMA/133
journalctl-4:Jan 08 15:18:10 disset kernel: ata6.00: configured for UDMA/133

journalctl-3:Jan 09 10:18:31 disset kernel: ata6: SATA max UDMA/133 abar 
m2048@0x88643000 port 0x88643380 irq 54
journalctl-3:Jan 09 10:18:31 disset kernel: ata6: SATA link up 1.5 Gbps 
(SStatus 113 SControl 300)
journalctl-3:Jan 09 10:18:31 disset kernel: ata6.00: ATAPI: PLDS DVD+/-RW 
DU-8A5LH, 6D1M, max UDMA/133
journalctl-3:Jan 09 10:18:31 disset kernel: ata6.00: configured for UDMA/133

journalctl-2:Jan 12 16:29:55 disset kernel: ata6: SATA max UDMA/133 abar 
m2048@0x88643000 port 0x88643380 irq 55
journalctl-2:Jan 12 16:29:55 disset kernel: ata6: SATA link up 1.5 Gbps 
(SStatus 113 SControl 300)
journalctl-2:Jan 12 16:29:55 disset kernel: ata6.00: ATAPI: PLDS DVD+/-RW 
DU-8A5LH, 6D1M, max UDMA/133
journalctl-2:Jan 12 16:29:55 disset kernel: ata6.00: failed to IDENTIFY (I/O 
error, err_mask=0x100)
journalctl-2:Jan 12 16:29:55 disset kernel: ata6.00: revalidation failed 
(errno=-5)
journalctl-2:Jan 12 16:29:55 disset kernel: ata6: SATA link up 1.5 Gbps 
(SStatus 113 SControl 300)
journalctl-2:Jan 12 16:29:55 disset kernel: ata6.00: failed to IDENTIFY (I/O 
error, err_mask=0x100)
journalctl-2:Jan 12 16:29:55 disset kernel: ata6.00: revalidation failed 
(errno=-5)
journalctl-2:Jan 12 16:29:55 disset kernel: ata6: SATA link up 1.5 Gbps 
(SStatus 113 SControl 300)
journalctl-2:Jan 12 16:29:55 disset kernel: ata6.00: failed to IDENTIFY (I/O 
error, err_mask=0x100)
journalctl-2:Jan 12 16:29:55 disset kernel: ata6.00: revalidation failed 
(errno=-5)
journalctl-2:Jan 12 16:29:55 disset kernel: ata6.00: disable device
journalctl-2:Jan 12 16:29:55 disset kernel: ata6: SATA link up 1.5 Gbps 
(SStatus 113 SControl 300)

journalctl-1:Jan 12 16:52:07 disset kernel: ata6: SATA max UDMA/133 abar 
m2048@0x88643000 port 0x88643380 irq 55
journalctl-1:Jan 12 16:52:07 disset kernel: ata6: SATA link up 1.5 Gbps 
(SStatus 113 SControl 300)
journalctl-1:Jan 12 16:52:07 disset kernel: ata6.00: failed to IDENTIFY (I/O 
error, err_mask=0x100)
journalctl-1:Jan 12 16:52:07 disset kernel: ata6: SATA link up 1.5 Gbps 
(SStatus 113 SControl 300)
journalctl-1:Jan 12 16:52:07 disset kernel: ata6.00: failed to IDENTIFY (I/O 
error, err_mask=0x100)
journalctl-1:Jan 12 16:52:07 disset kernel: ata6: SATA link up 1.5 Gbps 
(SStatus 113 SControl 300)
journalctl-1:Jan 12 16:52:07 disset kernel: ata6.00: failed to IDENTIFY (I/O 
error, err_mask=0x100)
journalctl-1:Jan 12

Re: nftables firewall question: matching udp in ipv6

On Fri, Jan 12, 2024 at 03:52:46PM +, Tom Furie wrote:
> other input/output rules that are interfering, but since you've abridged
> your ruleset we have no way of knowing.

Sorry, wanted to include the full rulest an forgot. I've still have left
off the "table ip nat" and "table ip filter" chains, I hope this is OK.


#!/usr/sbin/nft -f

flush ruleset

table ip nat {
...
}

table ip filter {
...
}

table ip6 filter {
chain input {
type filter hook input priority 0; policy drop;
ct state invalid counter drop comment "early drop of invalid 
packets"
ct state {established, related} counter accept comment "accept 
all connections related to connections made by us"
iif lo accept comment "accept loopback"
iif != lo ip6 daddr ::1/128 counter drop comment "drop 
connections to loopback not coming from loopback"
meta l4proto ipv6-icmp counter accept comment "accept all ICMP 
types"
tcp dport 22 counter accept comment "accept SSH"
tcp dport 25 counter accept comment "accept SMTP"
tcp dport 53 counter accept comment "accept DNS"
udp dport 53 counter accept comment "accept DNS"
tcp dport 80 counter accept comment "accept HTTP"
tcp dport 443 counter accept comment "accept HTTPS"
counter comment "count dropped packets"
}


chain forward {
type filter hook forward priority 0; policy drop;

iifname ppp0 oifname en0 ct state established,related accept
iifname en0 oifname ppp0 accept

iifname en2 oifname ppp0 accept
iifname ppp0 oifname en2 accept

iifname en0 oifname en2 accept
iifname en2 oifname en0 ct state established,related accept

meta l4proto ipv6-icmp accept

}
}

Re: Change suspend type from kde menu

2024-01-12 Thread Max Nikulin


On 12/01/2024 21:36, Valerio Vanni wrote:


Tried, it works on DVB play.

dbus-send --print-reply --dest=org.mpris.kaffeine /Player 
org.freedesktop.MediaPlayer.Stop


The question is if this action can be a replacement for killing kaffeine 
before unloading the dvb kernel module.


What is baloo's tags.so doing with /dev/dvb devices accordingly to lsof 
report? I still had a hope that there is a workarond against its 
annoying behavior.

Re: nftables firewall question: matching udp in ipv6

On Fri, Jan 12, 2024 at 03:52:46PM +, Tom Furie wrote:
> Where is the DNS server the dmz host is resolving against? In your dmz,
> your internal network, on the firewall machine, outside? You may have
> other input/output rules that are interfering, but since you've abridged
> your ruleset we have no way of knowing.

I've tried this with the public Gooogle DNS 2001:4860:4860::. The
behaviour seems consistent: If I try to resolve names over UDP with the
first ruleset I posted, it fails. If I try DNS over TCP (by using 
nslookup with the "-vc" option, it works.

Thanks,
Ralph

Re: Temporary failure in name resolution

2024-01-12 Thread Jeffrey Walton

On Fri, Jan 12, 2024 at 11:08 AM Curt  wrote:
>
> On 2024-01-12, debian-u...@howorth.org.uk  wrote:
> > Curt  wrote:
> >> On 2024-01-11, Max Nikulin  wrote:
> >> >
> >> > There was a thread that "home" as the top level domain might not be
> >> > really safe (somebody might register it). A reserved domain is
> >> > "home.arpa" so e.g. to have "thinkpad", the /etc/hosts entry should
> >> > be
> >> >
> >> > 127.0.1.1   thinkpad.home.arpa thinkpad
> >> >
> >>
> >>  The .arpa domain is the “Address and Routing Parameter Area” domain
> >> and is designated to be used exclusively for Internet-infrastructure
> >>  purposes.
> >>
> >> https://www.iana.org/domains/arpa
> >
> > Indeed, and a little way down that page it says:
> >
> >   home.arpa For non-unique use in residential home networks
> > RFC 8375
>
> I missed that.
>
> Yet the reserved gTLDs from the 2018 ICANN resolution are .home, .corp,
> and .mail. Does home.arpa comply with that resolution?

And to muddy the waters a little more, IANA has some reserved domain
names, too: 
.
Also see .

Jeff

Re: Temporary failure in name resolution

2024-01-12 Thread Curt

On 2024-01-12, debian-u...@howorth.org.uk  wrote:
> Curt  wrote:
>> On 2024-01-11, Max Nikulin  wrote:
>> >
>> > There was a thread that "home" as the top level domain might not be 
>> > really safe (somebody might register it). A reserved domain is 
>> > "home.arpa" so e.g. to have "thinkpad", the /etc/hosts entry should
>> > be
>> >
>> > 127.0.1.1   thinkpad.home.arpa thinkpad
>> >  
>> 
>>  The .arpa domain is the “Address and Routing Parameter Area” domain
>> and is designated to be used exclusively for Internet-infrastructure
>>  purposes.
>> 
>> https://www.iana.org/domains/arpa
>
> Indeed, and a little way down that page it says:
>
>   home.arpa For non-unique use in residential home networks
> RFC 8375

I missed that.

Yet the reserved gTLDs from the 2018 ICANN resolution are .home, .corp,
and .mail. Does home.arpa comply with that resolution?

>:P
>
>


--

Re: Seeking a Terminal Emulator on Debian for "Passthrough" Printing

Hello,

>> Is this also true of the Linux version of Putty? I've never used it but
>> it's packaged in Debian. Also I wonder what it is you mean with
>> "bidirectionally" here. Do you expect to read data from the printer and
>> send it back?

Yes, bidirectional communication is expected in both directions because behind 
this printer, several other devices are controlled through the printer, making 
the terminal a central point in the seamless interaction with the server for 
our users. What we aim to achieve is the ability to print directly to the COM 
port. While we are aware of commercial emulators that can accomplish this, we 
are exploring whether there are open-source alternatives that can provide the 
same functionality.
Currently, this functionality is handled by a commercial emulator.

>> Another thing I found with a quick search is screen. While screen is a
>> terminal multiplexer, it has a user controllable setting printcmd for
>> printing:
>>
>> "printcmd [cmd]
>>
>> If cmd is not an empty string, screen will not use the terminal
>> capabilities "po/pf" if it detects an ansi print sequence ESC [ 5 i, but
>> pipe the output into cmd.  This should normally be a command like "lpr"
>> or "'cat > /tmp/scrprint'".  printcmd without a command displays the
>> current setting.  The ansi sequence ESC \ ends printing and closes the
>> pipe.  Warning: Be careful with this command! If other user have write
>> access to your terminal, they will be able to fire off print commands."
>>
>> >From that description you should be able to set printcmd to for example
>> cat > /dev/ttyUSB_whatever and the remote printing will go there.

Screen does not have the capability to switch to transparent mode or 
specifically handle escape codes for printing natively, which it would receive 
from the application in order to pass to printcmd. Moreover, due to the 
continuous exchange based on the application's menus, managing this as an 
overlay to redirect the output to an external command could become quite 
complex.

The printcmd feature in screen is primarily designed to redirect the output of 
the application to an external printing command. However, it is not intended to 
effectively handle bidirectional flows involving other devices.

Thank you for the suggestion.

Best Regards,
Thierry

Re: nftables firewall question: matching udp in ipv6

2024-01-12 Thread Tom Furie

Ralph Aichinger  writes:

> I am currently fighting with the following problem: I've got a system
> that has 3 relevant interfaces: ppp0, en0 and en2, for external,
> internal and dmz respectively. 
>
> The dmz is IPv6 only, a homelab testbed more or less.
>
> I've got the follwing rules in /etc/nftables.conf for ipv6 (i am
> abreviating the chain input, because i am only fighting with
> forwarding):
>
> table ip6 filter {
> chain input {
> ...
> }
>
> 
> chain forward {
>   type filter hook forward priority 0; policy drop;
>
>   iifname ppp0 oifname en0 ct state established,related accept
>   iifname en0 oifname ppp0 accept
> 
>   iifname en2 oifname ppp0 accept
>   iifname ppp0 oifname en2 accept
>
>   iifname en0 oifname en2 accept
>   iifname en2 oifname en0 ct state established,related accept
>
>   meta l4proto ipv6-icmp accept
>  
>
> }
> }
>
> What does not work, and this puzzles me, is that UDP does not work. 
> E.g. if I lookup a DNS name in my dmz (connected to en2), I see no
> udp packets if i start tcpdump on the external interface ppp0. I see
> them entering on en2. 
>
Where is the DNS server the dmz host is resolving against? In your dmz,
your internal network, on the firewall machine, outside? You may have
other input/output rules that are interfering, but since you've abridged
your ruleset we have no way of knowing.

nftables firewall question: matching udp in ipv6

Hello!

I am currently fighting with the following problem: I've got a system
that has 3 relevant interfaces: ppp0, en0 and en2, for external,
internal and dmz respectively. 

The dmz is IPv6 only, a homelab testbed more or less.

I've got the follwing rules in /etc/nftables.conf for ipv6 (i am
abreviating the chain input, because i am only fighting with
forwarding):

table ip6 filter {
chain input {
...
}


chain forward {
  type filter hook forward priority 0; policy drop;

  iifname ppp0 oifname en0 ct state established,related accept
  iifname en0 oifname ppp0 accept

  iifname en2 oifname ppp0 accept
  iifname ppp0 oifname en2 accept

  iifname en0 oifname en2 accept
  iifname en2 oifname en0 ct state established,related accept

  meta l4proto ipv6-icmp accept
 

}
}

This "almost" works: I can do everything I want from my internal
network (connected to en0) towards the outside, and tcp connections
from and to the dmz also work. Ping works everywhere.

What does not work, and this puzzles me, is that UDP does not work. 
E.g. if I lookup a DNS name in my dmz (connected to en2), I see no
udp packets if i start tcpdump on the external interface ppp0. I see
them entering on en2. 

Why does UDP bevave differently from TCP here? Is this an nftables or
ipv6 specific gotcha?

If I insert the following rule at the bottom, everything starts to
work:

meta l4proto  udp  accept

but I don't know how to limit this over broad rule (so it does not
forward UDP to the internal network on en0, which I do not want). 
trying e.g. 

iifname en2 oifname ppp0 meta l4proto  udp  accept
iifname ppp0 oifname en0 meta l4proto  udp  accept

did not work either, ad behaved like my initial setup described on top.

Any hints for me?
TIA
Ralph

Re: Change suspend type from kde menu


Il 12/01/2024 15:03, Franco Martelli ha scritto:

On 11/01/24 at 15:10, Valerio Vanni wrote:
Yes, I tried, but I didn't see any "stop". There is a .Quit, but for 
this I already have "kill" command and I have to start it again.


valerio@newton:~$ busctl --user introspect org.mpris.kaffeine /


Out of curiosity could you post the output of the following command:

~$ busctl --user tree | grep mpris


Service org.mpris.kaffeine:

Another question, can Kaffeine stop the video? Do you have a "Stop" 
button  to click over?


Yes, it has play/stop button.

Re: Change suspend type from kde menu


Il 12/01/2024 12:08, Valerio Vanni ha scritto:

Il 12/01/2024 03:52, Max Nikulin ha scritto:

I assume that "org/mpris/MediaPlayer2" after "/" was lost during 
copy


I don't have MediaPlayer2 there.


busctl --user introspect org.mpris.kaffeine /Player
# ...
.Stop   method    - -    -


I saw that, but I think it's for media player component of kaffeine.
With that, you could stop the play of an audio or video file.

Do you think it can also act on DVB channels?
I can give it a try.


Tried, it works on DVB play.

dbus-send --print-reply --dest=org.mpris.kaffeine /Player 
org.freedesktop.MediaPlayer.Stop


dbus-send --print-reply --dest=org.mpris.kaffeine /Player 
org.freedesktop.MediaPlayer.Play

Re: Change suspend type from kde menu

2024-01-12 Thread Franco Martelli


On 11/01/24 at 15:10, Valerio Vanni wrote:
Yes, I tried, but I didn't see any "stop". There is a .Quit, but for 
this I already have "kill" command and I have to start it again.


valerio@newton:~$ busctl --user introspect org.mpris.kaffeine /


Out of curiosity could you post the output of the following command:

~$ busctl --user tree | grep mpris

Don't forget to run Kaffeine first.
Another question, can Kaffeine stop the video? Do you have a "Stop" 
button  to click over?

--
Franco Martelli

Re: Seeking a Terminal Emulator on Debian for "Passthrough" Printing

2024-01-12 Thread Anssi Saari

phoebus phoebus  writes:

> We have noticed that PuTTY allows "passthrough" printing but
> unfortunately, it only works unidirectionally and requires the use of
> a serial software printer which also supports only unidirectional
> flow. While PuTTY can manage connections to devices via the serial
> port bidirectionally, it does not provide a solution to manage
> "passthrough" printing directly to the COM port. This configuration is
> described in the PuTTY documentation
> (https://documentation.help/PuTTY/config-printing.html).

Is this also true of the Linux version of Putty? I've never used it but
it's packaged in Debian. Also I wonder what it is you mean with
"bidirectionally" here. Do you expect to read data from the printer and
send it back?

Another thing I found with a quick search is screen. While screen is a
terminal multiplexer, it has a user controllable setting printcmd for
printing:

"printcmd [cmd]

If cmd is not an empty string, screen will not use the terminal
capabilities "po/pf" if it detects an ansi print sequence ESC [ 5 i, but
pipe the output into cmd.  This should normally be a command like "lpr"
or "'cat > /tmp/scrprint'".  printcmd without a command displays the
current setting.  The ansi sequence ESC \ ends printing and closes the
pipe.  Warning: Be careful with this command! If other user have write
access to your terminal, they will be able to fire off print commands."

>From that description you should be able to set printcmd to for example
cat > /dev/ttyUSB_whatever and the remote printing will go there.

Thunderbird filters (was: call me puzzled.)

2024-01-12 Thread Arno Lehmann


Hi Gene,

Am 12.01.2024 um 14:31 schrieb gene heskett:
I'm using tbird as an email agent, but it just did something both 
strange and scary.


Its filters have been working very spotty, only when the phase of the 
moon was right. And it missed moving a msg from the nut list to the 
local nut sbbdir, so I went to the filter menu and had it add a new 
filter based on that msg.  Then told it to "run it now". Apparently a 
big mistake!!


tbird took about an hour, totally cleaned out the inbox at my mail 
server of 4080 some messages, w/o adding or moving to anything, 
absolutely zip to any local mail directory. No local msgs were played 
with, but I've lost several hundred often used addresses that were 
stashed in my inbox.


Does anybody have a clue what did that?


You will have to share the actual filter and actions you configured 
before anybopdy can develop any clue.


Also, adding the actual version of thunderbird will be useful.

And it may be relevant to have the account type, too -- pop3, imap, 
whatever server side, and how your local mail storage is organized.


Cheers,

Arno


Thanks.

Cheers, Gene Heskett.


--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück

Re: Seeking a Terminal Emulator on Debian for "Passthrough" Printing

Hello,

>> Would it be correct to say that you don't care about the
>> "terminal emulator" at all, and merely need a way for the Linux
>> server to send data over the network to a serial port on a
>> remote Debian machine which is attached to a printer?
>>
>> If so, I direct you to the sredird package.

Thank you for suggesting this path. However, the terminal emulator plays a 
central role in our infrastructure because it is through this terminal emulator 
that users access the application and also have the ability to reauthenticate 
inside it for printing purposes.

It's important to note that behind this printer, several other devices are 
controlled through the printer, making the terminal a central point in the 
seamless interaction with the server for our users. Therefore, the terminal 
emulator remains an integral component of our setup.

Best regards,
Thierry

call me puzzled.

I'm using tbird as an email agent, but it just did something both 
strange and scary.


Its filters have been working very spotty, only when the phase of the 
moon was right. And it missed moving a msg from the nut list to the 
local nut sbbdir, so I went to the filter menu and had it add a new 
filter based on that msg.  Then told it to "run it now". Apparently a 
big mistake!!


tbird took about an hour, totally cleaned out the inbox at my mail 
server of 4080 some messages, w/o adding or moving to anything, 
absolutely zip to any local mail directory. No local msgs were played 
with, but I've lost several hundred often used addresses that were 
stashed in my inbox.


Does anybody have a clue what did that?

Thanks.

Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis

Re: Seeking a Terminal Emulator on Debian for "Passthrough" Printing

Hello,

>> It should be pretty easy to take an existing terminal emulator and add
>> the corresponding functionality.

While it might seem straightforward to enhance an existing terminal emulator 
with the required functionality, in practice, it involves a significant amount 
of custom development work. Unfortunately, we currently lack the necessary 
skills and resources to execute this successfully. Addressing this challenge 
would indeed require substantial development efforts, which can be quite 
challenging for our administrative system. As a result, I'm actively exploring 
alternative solutions that are more readily available, particularly open-source 
options, which align better with our specific needs.


Best Regards,
Thierry

Re: The current package wpasupplicant doesn't support WPA3-Personal authentication. What alternatives to it exist?

2024-01-12 Thread Henning Follmann

On Fri, Jan 12, 2024 at 02:16:50AM -0500, Charles Kroeger wrote:
> > you refused to recognize that the sub-heading contradicts with the
> > so-called package's description
> 
> Yes yes, so file a bug report as recommended.
> 
> > three decades younger than you but you don't have to sound patronizing or
> > condescending.
> 
> You started the war.

That is debatable. But that will not solve anything.


> 
> What's wrong with being old?
> 
> You established you're three decades younger but what's your BMI?

What is wrong with you?

-H

-- 
Henning Follmann   | hfollm...@itcfollmann.com

Re: Recherche d'un émulateur de terminal sous Debian pour l'impression en mode "passthrough

Bonjour,

>> Avertissement: je ne crois pas comprendre réellement la demande (pas
>> parce qu'elle serait mal énoncée, mais à cause de ma méconnaissance du
>> sujet), notamment sur l'aspect bidirectionnel. Donc mon intervention est
>> à prendre avec les réserves d'usage. Que les participants de la liste
>> n'hésitent pas à intervenir pour corriger et clarifier.

Je vous remercie pour l'intérêt porté à ma demande et je comprends que le sujet 
peut être complexe.

>>Il y a ci-dessous un exposé sur la façon de faire du passthrough
>>printing à partir d'un terminal, mais je ne sais pas si ça répond
>>partiellement, totalement, ou pas du tout, au besoin exprimé:
>>https://www.anzio.com/resources/guide-anzios-passthrough-printing

Le lien vers le guide "guide to Anzio's Passthrough Printing" que vous avez 
partagé explique en effet très bien le sujet et offre des exemples de code. Il 
est vrai que notre application gère déjà cela du côté serveur sur un code basé 
sur ce principe.

Je prends également note que la société Anzio propose deux produits 
d'émulation, "Anzio Lite" et "AnzioWin" qui semblent être en mesure de répondre 
à notre problématique. Je vais les inclure dans ma liste d'options de logiciels 
commerciaux à considérer si je ne trouve pas d'alternative en open source qui 
réponde à nos besoins.

Votre intervention a été utile, et je continuerai à explorer les différentes 
solutions pour résoudre notre défi d'impression en mode "passthrough". Si 
d'autres membres de la liste ont des idées ou des recommandations, je serais 
ravi de les entendre.

Cordialement,
Thierry

Re: Temporary failure in name resolution

2024-01-12 Thread Byung-Hee HWANG

On Fri, Jan 12, 2024 at 11:24:53AM +, debian-u...@howorth.org.uk wrote:
> Curt  wrote:
> > On 2024-01-11, Max Nikulin  wrote:
> > >
> > > There was a thread that "home" as the top level domain might not be 
> > > really safe (somebody might register it). A reserved domain is 
> > > "home.arpa" so e.g. to have "thinkpad", the /etc/hosts entry should
> > > be
> > >
> > > 127.0.1.1   thinkpad.home.arpa thinkpad
> > >  
> > 
> >  The .arpa domain is the “Address and Routing Parameter Area” domain
> > and is designated to be used exclusively for Internet-infrastructure
> >  purposes.
> > 
> > https://www.iana.org/domains/arpa
> 
> Indeed, and a little way down that page it says:
> 
>   home.arpa For non-unique use in residential home networks
> RFC 8375
> 

Oh thanks for information!


Sincerely, Byung-Hee

Re: Bookworm and ZFS (zfs-dkms 2.1.11) data corruption bug

2024-01-12 Thread Махно

>I have not seen this recommendation, do you have a link?

It is from Debian wiki

https://wiki.debian.org/ZFS

2024-01-12, pn, 14:08 Jan Ingvoldstad  rašė:
>
>
> On Wed, Jan 10, 2024 at 10:48 PM Xiyue Deng  wrote:
>>
>>
>> You can check the developer page of zfs-linux[1] on which the "action
>> needed" section has information about security issues (along with
>> version info as Gareth posted).  The one you mentioned was being tracked
>> in [2] and the corresponding Debian bug is [3].  My guess is that as
>> zfs-linux is not in "main" but "contrib", and the issue is marked
>> "no-dsa" (see [4]), there may be no urgency to provide a stable update.
>> But you may send a follow up in the tracking bug and ask for
>> clarification from the maintainers on whether an (old)stable-update is
>> desired.
>
>
> Thanks, so it *was* my searching skills that failed me:
>
> "The fix will land in bookworm-backports and bullseye-backports-sloppy
> shortly after 2.1.14-1 migrates to testing, which will take about 2
> days hopefully. Fixes to 2.0.3-9+deb11u1 (bullseye) and 2.1.11-1
> (bookworm) are planned but will likely take more time."
>
> I think the bug is mislabeled as "security" and "important", as this is 
> primarily a severe data corruption bug, but with *possible* security 
> implications.
>
> It is far more concerning that one cannot trust that cp actually copies a 
> file, and this is a blocker for installing the ZFS packages in Debian.
>
> --
> Jan

Re: Recherche d'un émulateur de terminal sous Debian pour l'impression en mode "passthrough

Bonjour,

>> Pourquoi précisément un émulateur de terminal ? Parce qu'il s'agit
>> d'imprimer le contenu d'une application qui fonctionne dans le terminal
>> ?

Nous avons opté pour un émulateur de terminal parce que notre application 
fonctionne en mode caractère et est conçue pour être accessible via un 
terminal. L'application a été transférée d'Unix vers Linux du point de vue du 
serveur, et nous préférons ne pas modifier le code côté client. De plus, nous 
souhaitons éviter de perturber la partie fonctionnelle du client dont une 
composante essentielle est le dialogue avec l'imprimante.

>> Je pose cette question car j'imagine qu'on devrait pouvoir faire un
>> intermédiaire entre l'imprimante et autre chose à base de scripts +
>> sockets (locales ou réseau). Mais je ne suis pas sûr que la piste soit
>> pertinente…

Il est important de noter que derrière cette imprimante, plusieurs autres 
périphériques sont pilotés en passant par l'imprimante, ce qui rend la solution 
actuelle particulièrement adaptée à notre infrastructure

Cordialement,
Thierry

Re: Recherche d'un émulateur de terminal sous Debian pour l'impression en mode "passthrough

Je vous remercie sincèrement pour l'information concernant "Onion terminal".

>> Peut-être que du code pris dans libonion
>> https://www.coralbits.com/libonion/ (dont une démo fait tourner un
>> terminal Linux dans un navigateur récent, avec du JavaScript et du
>> WebSocket) pourrait être intéressant

L'idée d'explorer la bibliothèque libonion pour résoudre éventuellement notre 
problème d'émulation de terminal est intéressante. J'ai examiné le site du 
terminal (https://www.coralbits.com/oterm/) ainsi que le lien 
(https://github.com/davidmoreno/onion/wiki/oterm). Mais j'ai remarqué qu'il y a 
des fonctionnalités manquantes, notamment certaines séquences d'échappement non 
implémentées ce qui peut poser un problème.

L'intégration de libonion dans notre infrastructure serait une tâche 
nécessitant du développement personnalisé et malheureusement, nous ne disposons 
pas des compétences ni des ressources nécessaires pour la réaliser avec succès. 
Cela représente un défi en termes d'efforts de développement, ce qui peut être 
difficile à gérer en tant qu'administrateur système. Par conséquent, je vais 
continuer à explorer d'autres alternatives qui sont plus prêtes à l'emploi et 
mieux adaptées à nos besoins.

Cette suggestion nous a ouvert de nouvelles perspectives hors de notre projet 
et nous continuons à rechercher la meilleure solution pour notre situation.

Cordialement,
Thierry

Re: Seeking a Terminal Emulator on Debian for "Passthrough" Printing

2024-01-12 Thread Tixy

On Fri, 2024-01-12 at 06:08 -0500, Dan Ritter wrote:
> Would it be correct to say that you don't care about the
> "terminal emulator" at all, and merely need a way for the Linux
> server to send data over the network to a serial port on a
> remote Debian machine which is attached to a printer?
> 
> If so, I direct you to the sredird package.

I've always used 'ser2net' for that for of thing, mostly with single-
board computers attached via serial ports on a remote machine. But it
doesn't matter what the device is, it's a dumb pipe to transfer bytes
to/from a serial port on another computer.

-- 
Tixy

Re: Temporary failure in name resolution

2024-01-12 Thread debian-user

Curt  wrote:
> On 2024-01-11, Max Nikulin  wrote:
> >
> > There was a thread that "home" as the top level domain might not be 
> > really safe (somebody might register it). A reserved domain is 
> > "home.arpa" so e.g. to have "thinkpad", the /etc/hosts entry should
> > be
> >
> > 127.0.1.1   thinkpad.home.arpa thinkpad
> >  
> 
>  The .arpa domain is the “Address and Routing Parameter Area” domain
> and is designated to be used exclusively for Internet-infrastructure
>  purposes.
> 
> https://www.iana.org/domains/arpa

Indeed, and a little way down that page it says:

  home.arpa For non-unique use in residential home networks
RFC 8375

:P

Re: Seeking a Terminal Emulator on Debian for "Passthrough" Printing

2024-01-12 Thread Dan Ritter

phoebus phoebus wrote: 
> Dear members of the Debian community,
> 
> I am currently on the lookout for a terminal emulator on Debian that can 
> handle controlled printing from a remote server often referred to as 
> "passthrough" printing. Our specific requirement is the ability to select the 
> printing device using a specific method, either the physical COM port or the 
> virtual COM port (emulated by a USB device).
> 
> To be more precise, we want the terminal emulator to transmit data exactly as 
> it is received from a remote server (which is a Linux server) when it 
> attempts to print data through a set of escape sequences to send text in 
> transparent mode. This transmission should be directed to the COM device 
> without any modifications.
> 
> Our application runs on Linux and needs to communicate with a specialized 
> serial printer by sending data directly to it through a terminal emulator on 
> a client machine (with the printer connected to the client machine's serial 
> port).


Would it be correct to say that you don't care about the
"terminal emulator" at all, and merely need a way for the Linux
server to send data over the network to a serial port on a
remote Debian machine which is attached to a printer?

If so, I direct you to the sredird package.

-dsr-

Re: SMART Uncorrectable_Error_Cnt rising - should I be worried?

2024-01-12 Thread Dan Ritter

Stefan Monnier wrote: 
> > manufacturers in different memory banks, but since it's always
> > possible to power down, replace or just remove memory, and power
> > up again,
> 
> Hmm... "always"?  What about long running computations like that
> simulation (or LLM training) launched a month ago and that's expected to
> finish in another month or so?

If the job is that big, it's being run on multiple machines. This
machine's current chunk is corrupt, so you can't use it anyway.
The orchestrator stops using this machine, someone comes in to
replace the RAM. Later the machine is re-added to the pool.

> Some mainframes have supported hot (un)plugging RAM modules as well and
> I wouldn't be surprised if some x86 servers also support it nowadays.

https://www.kernel.org/doc/html/latest/admin-guide/mm/memory-hotplug.html

That said, you won't find this feature without specifying it
when you buy it, and very few have a use case for it.

-dsr-

Re: Change suspend type from kde menu