Re: pdf tool to stitch 2 pages together side by side

2011-07-13 Thread Jochen Schulz
T o n g:
 
 Further onto the thread stitching together 2 pdf files, of all the 
 tools mentioned, which one do you think (no guess please) can stitch 2 
 pages together side by side from the same pdf file. I.e., think of doing 
 the 2-up printing (onto the paper), that's the effect that I want to 
 achieve.

pdfnup from the package pdfjam can do this.

J.
-- 
I want to keep my skin looking good but I believe all computers do the
same job.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: vimdiff

2011-07-12 Thread Jochen Schulz
shawn wilson:

 could someone please tell me how i'm messing up? i know they didn't
 remove vimdiff from debian stable:
 
 
 \h:\w\$ vimdiff
 This Vim was not compiled with the diff feature.

There are several vim packages with different features compiled in. Try
running 'dpkg -l vim\*' to see which one you have installed. I prefer
vim-nox on headless servers.

BTW: your prompt looks weird. :)

J.
-- 
When you put a gun to my head you aren't fooling anyone.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: clamav 0.97.1 not coming to squeeze-updates ?

2011-07-08 Thread Jochen Schulz
D G Teed:
 
 
 It is finicky.  I played with various repo sources and once did
 see clamav package group appear as possible.  I said 'n' to abort
 because I wanted to understand exactly where the package was
 coming from.

You can use 'apt-cache policy $package' to see which source apt chooses
for a given package.

J.
-- 
I am worried that my dreams pale in comparison beside TV docu-soaps.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: cloning a lvm crypto volume to a bigger disk

2011-07-07 Thread Jochen Schulz
Colin:

 Wow ... now I have a lot to do :-)

Hey, it's only about seven comands, plus some file editing. :) Don't let
my lengthy explanations scare you from doing it that way. It's a great
feeling to shuffle an OS around under your butt while it's running!

 Just glancing through I'm thinking if I even need LVM. It was done
 automatically by the installer.

Retrospectively, I hope I had started using LVM sooner. It makes many
things really easy and it allows for some things that aren't even
possible using traditional DOS partitioning.

 I guess if I didn't have it I would need a separate dm-crypt and LUKS
 partition for each of /, /home and swap which in turn would mean 3
 separate keys + passwords.

Yes. You could get away with only one passphrase if you put key files
for the other filesystems on that one.

J.
-- 
Television advertisements are the apothesis of twentieth century culture.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: cloning a lvm crypto volume to a bigger disk

2011-07-06 Thread Jochen Schulz
Colin:
 
 I want to move the crypto volume to new disk so I can use it and boot
 from the new.

Thanks for the information. Now I know what your setup looks like. I am
still a bit unsure about your exact partition layout, because I didn't
ask for that either, but AFAICS you have at least this:

- /boot is somewhere on sda, I suppose sda1.
- sda5 is an extended partition.
- sda5 is encrypted using dm-crypt and LUKS. The decrypted mapping of
  sda5 is called sda5_crypt.
- sda5_crypt is used as physical volume for LVM.
- There is one volume group laptop om sda5_crypt which hosts three
  logical volumes:
  - /home
  - /
  - swap

Are there any other partitions besides sda1 und sda5?

 The old disk with the old crypto will be recycled to another machine.

Ok, that makes the whole thing a little bit trickier, because we need to
move /boot and the MBR as well.

 $ pvs
   PV VG  Fmt  Attr PSize   PFree
   /dev/mapper/sda5_crypt laptop lvm2 a-   465.52g0
^^^

Didn't you say your old disk only has 160GB? Is sda actually the new
disk?

Anyway, to get you started, the process is roughly as follows. I am
assuming sda is your old disk and sdb is the new one. If anything isn't
clear, feel free to ask.

Preparation of the new disk:
=

  - partition it
  - format the boot-fs
  - Initialize dm-crypt
  - Initialize LVM

I assume you know how to do the first two steps. Setting up dm-crypt is
easy, too. If sdb2 is the newly created partition you want to encrypt:

# cryptsetup luksFormat /dev/sdb2

This will ask for a passphrase that is used for encryption. You can then
unlock the encrypted partition like this:

# cryptsetup luksOpen /dev/sdb2 sdb2_decrypted

sdb2_decrypted is a name you can choose freely. It plays the same role
as sda5_crypt in your current setup. Of course, you need to enter your
passphrase again.

Afterwards you should have a device node /dev/mapper/sdb2_decrypted
which you can treat like any other block device. As you want to use it
for LVM, you need to format it first:

# pvcreate /dev/mapper/sdb2_decrypted


Moving data:
=
  - /boot
  - LVM

/boot is easy, because you just need to copy the data from the old
filesystem to the new one. Again, I am assuming you know how to do that.

In order to cleanly migrate your LVM volumes to the new disk, proceed as
follows:

# vgextend laptop /dev/mapper/sdb2_decrypted

This will put your new encrypted partition into the existing volume
group, which, up to now, only containted your old disk. You can now tell
LVM to move everything on sda5_crypt somewhere else:

# pvmove -i 60 /dev/mapper/sda5_crypt

The argument '-i 60' will make pvmove report prograss every 60 seconds.
Beware that this is a very time consuming operation, because pvmove will
move all LVs (including unused space!) to the other disk. Additionally,
all data has to be decrypted when read from the old disk and encrypted
again when written to the new disk.

It might be faster to move the data on filessystem level (using tar,
rsync, cp etc.), but you would have to create a new VG, LVs and adjust a
few config files accordingly. And you would probably need to do that in
single-user mode or using a rescue disc. The nice thing about pvmove is
that your filesystems (including their UUIDs) and device names don't
change at all and that you can use it without rebooting.

Another option to speed things up is might be to resize your filesystems
and LVs before pvmoving. It isn't possible to shrink ext[234]
filesystems when they are mounted, though, so you would have to resort
to a rescue disc again.

After moving the LVs off of sda5_crypt, you can remove the device from
the volume group:

# vgreduce laptop /dev/mapper/sda5_crypt

Please understand that your data is now only retrievable from the new
disk (except for /boot, if you didn't erase it).

Afterwards
===
  - /etc/fstab
  - /etc/crypttab
  - grub config + MBR

Before rebooting, make sure to tweak your configuration files where
necessary. Create backups of all files you edit.

Your /boot filesystem has been newly created, so you have to change its
UUID in /etc/fstab.  You can use the command blkid to find out the new
UUID. You need to do the same for /etc/crypttab. The mapping name
'sda5_crypt' doesn't matter much in your case, because the system will
find your LVs regardless of the PV's name.

The most critical part is grub configuration. I am assuming you are
using the new grub, as opposed to grub-legacy. You probably need to
tweak its configuration, too, because your /boot's UUID changed. But I
am currently unable to tell you how to do that. I am even unsure whether
grub's root= parameter need the UUID of the root filesystem or of the
/boot filesystem, but you can check that by looking into
/boot/grub/grub.cfg and comparing with the UUIDs from blkid.

Maybe simply running update-grub magically works it out if you change
/etc/fstab and 

Re: bash script fails in squeeze

2011-07-06 Thread Jochen Schulz
Bonno Bloksma:
 
 This bash script has been doing it's job for the past few years but
 suddenly stopped working in squeeze. Each part seems to work but the
 complete script does not. :-(

I must admit that I am not really inclined to try to understand what
your scripts should do and and why they do what they do instead. But one
advice: debugging shell scripts is made *a lot* easier when using 'set
-x' in the script.

J.
-- 
I am not scared of death but terrified of people in Tommy Hilfiger
sweatshirts.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: cloning a lvm crypto volume to a bigger disk

2011-07-05 Thread Jochen Schulz
Colin:

 So I have this machine with a lvm crypto volume done with a debian
 testing install. This is on a disk with 160GB.
 But now I would like to clone it to a new disk: 500GB.
 What are my options?

What's the order of the block layers?

- LVM on top of dm-crypt on top of raw device, or
- dm-crypt on top of LVM on top of raw device

Either way, you can extend your VG with the new disk, pvmove everything
from the old disk and then vgreduce the VG by the old disk. If you need
more specific help, please post your setup (etc/fstab, /etc/crypttab, ls
-l /dev/mapper/).

J.
-- 
As a child I pulled the legs from a spider.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: cloning a lvm crypto volume to a bigger disk

2011-07-05 Thread Jochen Schulz
Colin:
 
 I don't remember the specifics when I did the install but here's what I got:

Thanks. Now please add the output of 'pvs', 'lvs'. And just to make
sure: you only want to move the encrypted volume to the new disk and
keep the old one?

J.
-- 
I use a Playstation to block out the existence of my partner.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: cloning a lvm crypto volume to a bigger disk

2011-07-05 Thread Jochen Schulz
Jochen Schulz:
 Colin:
 
 I don't remember the specifics when I did the install but here's what I got:
 
 Thanks. Now please add the output of 'pvs', 'lvs'.

Erm, that probably sounded rude. What I forgot to add is that I should
have asked for this information in the first place. Sorry!

J.
-- 
All participation is a myth.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


security support for lenny / upgrades from lenny to wheezy (was: How to get the stable iso for lenny)

2011-06-30 Thread Jochen Schulz
Steve McIntyre:
 
 We will cease support for Lenny early next year,

Funny that you mention it. We just yesterday discussed whether this news
item is still relevant today:

/ http://www.debian.org/News/2009/20090729
| Since Debian's last release happened on Feb. 14th 2009, there will
| only be approximately a one year period until its next release,
| Debian GNU/Linux 6.0 (codenamed Squeeze). This will be a one-time
| exception to the two-year policy in order to get into the new time
| schedule. To accommodate the needs of larger organisations and other
| users with a long upgrade process, the Debian project commits to
| provide the possibility to skip the upcoming release and do a
| skip-upgrade straight from Debian GNU/Linux 5.0 (Lenny) to Debian
| GNU/Linux 7.0 (not yet codenamed).

I argued that upgrading from 5.0 to 7.0 will not actually be supported
(and hence, lenny will not be supported for longer than one year after
squeeze release) because 6.0 wasn't released ahead of time. Did I get
things right?

J.
-- 
When standing at the top of beachy head I find the rocks below very
attractive.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: security support for lenny / upgrades from lenny to wheezy (was: How to get the stable iso for lenny)

2011-06-30 Thread Jochen Schulz
Steve McIntyre:
 On Thu, Jun 30, 2011 at 04:13:28PM +0200, Jochen Schulz wrote:
 
 I argued that upgrading from 5.0 to 7.0 will not actually be supported
 (and hence, lenny will not be supported for longer than one year after
 squeeze release) because 6.0 wasn't released ahead of time. Did I get
 things right?
 
 I believe so, yes. There isn't a need for supporting the
 skip-upgrade. That's not to say that it *won't* work, but it's not
 something we are going to commit to.

It might be a good idea to clarify this publicly. Is there a meta
package to which I may report this bug? :)

J.
-- 
I feel yawning hollowness whilst talking to people at parties.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Debian safe-upgrade to 6.0.2 - don't run within X session

2011-06-30 Thread Jochen Schulz
D G Teed:
 
 I wonder if my previous problem was triggered by the
 time of day as it was just around midnight.
 
 I noticed this in the aptitude output:
 
 Setting up gdm3 (2.30.5-6squeeze3) ...
 Scheduling reload of GNOME Display Manager configuration: gdm3.

That only means that gdm3 will restart after the last user has logged
out. What you are seeing is the solution to the problem you think you
have seen.

J.
-- 
I lust after strangers but only date people from the office.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: clamav 0.97.1 not coming to squeeze-updates ?

2011-06-29 Thread Jochen Schulz
Camaleón:
 On Wed, 29 Jun 2011 00:07:23 +0200, Jochen Schulz wrote:
 
 NACK. Security support for stable releases ends one year after stable+1:
 
 http://www.debian.org/security/faq#lifespan
 
 Lenny will reach its EOL in January 2012.
 
 Hey, but that was not my understanding for lenny. I know that was how it 
 used to be but now aren't we based on a 2-year of release fixed cycle? :-?
 
 http://www.debian.org/News/2009/20090729
 
 In that announcement it can be read:
 
 (...) Since Debian's last release happened on Feb. 14th 2009, there will 
 only be approximately a one year period until its next release, Debian 
 GNU/Linux 6.0 (codenamed Squeeze). This will be a one-time exception to 
 the two-year policy in order to get into the new time schedule. To 
 accommodate the needs of larger organisations and other users with a long 
 upgrade process, the Debian project commits to provide the possibility to 
 skip the upcoming release and do a skip-upgrade straight from Debian GNU/
 Linux 5.0 (Lenny) to Debian GNU/Linux 7.0 (not yet codenamed).

Interesting, I don't remember that at all.

I can only speculate about this, but I don't think this announcement is
relevant any more. The document is from July 2009 and predicted/promised
a squeeze release in early 2010. For that case only the authors promised
that you could skip the squeeze release. What actually happened is that
it took another whole year to release squeeze.

 I understand this is not the norm, but an exception for lenny in order to 
 accomodate to the new development cycle.

… which didn't happen.

J.
-- 
In the west we kill people like chickens.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: clamav 0.97.1 not coming to squeeze-updates ?

2011-06-29 Thread Jochen Schulz
Camaleón:
 
 I prefer installing from scratch, in-site upgrades is something I avoid 
 as much as I can :-)

Forget your experiences with SuSE. This is Debian. :)

(Disclaimer: I am still running one lenny system as well, but that's
mostly because I need to prod my hosting provider to install a new
kernel first. It's a Xen DomU.)

J.
-- 
If nightclub doormen recognised me I would be more fulfilled.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Debian safe-upgrade to 6.0.2 - don't run within X session

2011-06-28 Thread Jochen Schulz
Scott Ferguson:
 On 28/06/11 00:54, Jochen Schulz wrote:
 
 No, dist-upgrades aren't different.
 
 If you believe that then file a bug report.
 
 ref: man apt-get

Apparently we are talking at cross-purposes, but your quote doesn't
refute my claim: apt-get's upgrade and dist-upgrade only differ in
dependency resolution. The upgrade process *of individual packages* is
always the same.

 eg. if package a-0.0 is to be replaced with a-0.1 it'll be an upgrade.
 if package a-0.0 is deprecated and it's function is being replaced with
 b-0.0 it'll be a dist-upgrade.
 
 There is a difference.

True. And I can imagine that in very few cases that leads to experiences
like the OP's. But I wouldn't attribute that to apt-get's mode of
operation. If a postinst script demands a restart of the login manager,
it does so regardless of how apt was called.

 The mechanism for installing packages has no bearing on the severity of
 changes made by the process (the likely hood of disruption to core
 services).

That's exactly what I wanted to point out.

 upgrade is mild, dist-upgrade can be radical. In theory
 (apt-get) upgrade should make only minor disruptions.

I don't think this distinction is helpful. You can have two systems with
a different set of packages installed, one needs a dist-upgrade for
a-0.1 to be installed, another one just needs a simple upgrade.

That doesn't mean people should make a habit of regularly using
dist-upgrades. That only leads to questions like Why did apt-get remove
my whole desktop!?.

From a (sid) user's point of view, the main difference between upgrade
and dist-upgrade is that an upgrade doesn't require as much attention as
a dist-upgrade. On my sid laptop, I run update  upgrade once or twice
a day, and the only thing I actually look at is whether the upgrade
contains packages I care about and most of the time I skim over the
output to spot errors.

J.
-- 
I am no longer prepared to give you the benefit of the doubt.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: I have big problem choose corect distribution Debian

2011-06-28 Thread Jochen Schulz
Jozef Dunajčan:

 I want Debian only command promt without grafics(X, window).
 Please help me choose Debian distribution.
 I have industrial computer:
 HDD: IDE 2GB
 CPU: 486 66MHz
 RAM: 64MB

The installer for i386 should work:
http://www.debian.org/releases/squeeze/debian-installer/

But keep in mind that a machine like yours is at the low end of the
supported spectrum:

http://www.debian.org/releases/stable/i386/ch03s04.html.en

Depending on what you want to use the machine for, you may be better off
using something like Damn Small Linux or even OpenWrt. When using
Debian, you will have to tweak the system quite a bit to ensure it runs
as fast as possible.

J.
-- 
I start many things but I have yet to finish a single one.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: I have big problem choose corect distribution Debian

2011-06-28 Thread Jochen Schulz
lee:
 Jochen Schulz m...@well-adjusted.de writes:
 
 Depending on what you want to use the machine for, you may be better
 off using something like Damn Small Linux or even OpenWrt. When using
 Debian, you will have to tweak the system quite a bit to ensure it
 runs as fast as possible.
 
 Would starting with a minimal installation and adding only the needed
 packages later require much tweaking?

I knew someone would ask that question. :) Ok, I'll bite.

I'll try it using qemu. Wait a minute … The system is already swapping
while d-i is running. :) And installation takes ages, even on a Core2Duo
core at 2.4GHz and an Intel SSD. I didn't install any tasks, not even
the Standard system utilities.

Result: installation size of 384MB and only 8MB of RAM in use! That's a
lot less than I expected.

Nevertheless, one should probably at least disable the installation of
Recommends and you have to be very picky about packages to install. I
wouldn't even run Apache on such a machine. Total RAM usage after Apache
installation: 13MB. Lighttpd uses 2MB less, dhttpd uses only one
additional MB. Running aptitude in TUI mode (without any webserver
running) makes the system use 23MB. Vim-tiny uses 1MB. Heck, even top
needs about 1MB!

I still think it may be worthwhile to check out alternatives to Debian
that use slimmer libraries and less dependencies. My access point
(OpenWrt) runs from 8MB flash and offers an httpd, dropbear (an SSH
server), pppoe and dnsmasq with only 14 processes running.

J.
-- 
There is no justice in road accidents.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: clamav 0.97.1 not coming to squeeze-updates ?

2011-06-28 Thread Jochen Schulz
Camaleón:
 
 I will try to keep lenny until reaches its end of life, which should 
 happen when wheezy comes out.

NACK. Security support for stable releases ends one year after stable+1:

http://www.debian.org/security/faq#lifespan

Lenny will reach its EOL in January 2012.

 Now I feel old.

I feel old because squeeze is the fifth Debian release I have used. 8-)

J.
-- 
When I am doing sex I wonder if my emotions can be detected by alien
civilisations.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Debian safe-upgrade to 6.0.2 - don't run within X session

2011-06-27 Thread Jochen Schulz
Scott Ferguson:
 
 I've never had a desktop (KDE) session crash from an upgrade,
 dist-upgrades are different.

No, dist-upgrades aren't different.

The only difference between aptitude's safe-upgrade and full-upgrade
is that they use different algorithms for dependency resolution. The
upgrade process itself (unpacking, pre-/post-install scripts etc.) is
exactly the same in both cases.  The same holds true for apt-get's
upgrade and dist-upgrade.

J.
-- 
If I could travel through time I would go back to yesterday and
apologise.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Almost everyday a new issue: this time Amarok

2011-06-19 Thread Jochen Schulz
AG:
 
 What on earth is going on here?  Applications don't install
 correctly, or they crash when opened?

Welcome to testing! :)

 What have I done wrong on this, why would an ordinary safe-update of
 Amarok crash?

Your question appears to imply that the word safe in safe-ugrade
gives any guarantee about the quality of the upgrades. This is not the
case.

 Yet another issue, and I really don't know what the heck to do about
 this ...

Report it to the BTS.

J.
-- 
I want to keep my skin looking good but I believe all computers do the
same job.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: is debian on 7 dvds waqar from pakistan

2011-06-16 Thread Jochen Schulz
Waqar Ali:

   Waqar ali from pakistan. little confusion about downloading iso
 image of debian i386. tell me is debian on 7 dvds kindly tell me how to
 download debian on 1 dvd waiting for your quick response

You only need to download all DVDs if you actually need the complete set
of programs for some reason. But it is very unlikely that this is the
case. You only need one medium (1st CD/DVD or the netinst CD image) to
install Debian.

If you don't have a network connection during installation, download the
first DVD. That should contain all the things necessary to get you
started. If you have (fast) network, you can get away with downloading
the netinst image (only ~150MB) and the installer will download
everything it needs during installation.

J.
-- 
It is not in my power to change anything.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: /etc/hosts in debian resets itself on reboot

2011-06-16 Thread Jochen Schulz
Tapas Mishra:

 I've been having a problem where when our vps provider decides to
 restart the server (running Debian 5.0.8), the server fails to
 remember changes to /etc/hosts. All I need is an database alias that
 is used for the webapps on the server which points to 127.0.0.1
 localhost.

I don't know what keeps overwriting your file, but I assume it actually
just re-writes a single line for localhost. Try adding a new line
pointing to database like this and see if that persists:

127.0.0.1 database

J.
-- 
At night I go to the kitchen; specifically, the knife drawer.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: After the Libc6 Fiasco

2011-06-12 Thread Jochen Schulz
David Baron:

 Luckily, using the live-CD, I was able to download and re-install the 
 testing packages for libc6 and friends and finally get my system working 
 again.

What problem are you referring to? The breakage from the missing
symlinks on amd64? That issue has been fixed some weeks ago.

 OK:
 1. Unstable can sometimes get broken. I accept that.
 2. However, libc6 stuff is so critical that any upgrade posted must be 
 installable and operational. Some folks might not recover.

Then they shouldn't run unstable. :)

 Since the current packages only partially installed last attempt, I am afraid 
 to upgrade any of this now. What is the status in reality?

Works for me (on amd64). What's your specific problem? Which version are
you on, which do you try to install and how does it fail?

J.
-- 
I am getting worse rather than better.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: how to get to runlevel 3

2011-06-10 Thread Jochen Schulz
Mark Panen:
 
 why is X running at runlevel 2 and not 5?

As Dave said: in Debian, there's no difference between runlevels 2-5.

J.
-- 
Thy lyrics in pop songs seem to describe my life uncannily accurately.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Gnome desktop settings borked on testing after reboot

2011-06-10 Thread Jochen Schulz
AG:
 
 These are some of the issues:
 1. Windows manager is unknown and no configuration tool is registered
 2. windows are launched at the top of the screen  I cannot drag
 these elsewhere
 3. clicking a mouse on a window does not bring it to the fore
 4. there are no longer multiple workspaces
 5. windows do not have the 'x' in the corner to close, nor any
 option to minimise/ enlarge

I am afraid to state the obvious after so many replies in this thread,
but apparently your window manager isn't running. I would open a
terminal and try running metacity from there. If it crashes for some
reason, you at least have a change to spot a helpful error message in
the terminal. BTW, did you take a look at ~/.xsession-errors?

J.
-- 
I am no longer prepared to give you the benefit of the doubt.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: floppy drive in debian stable

2011-06-06 Thread Jochen Schulz
[CC'ed as per request]

Charlie Derr:
 
 mount: special device /dev/fd0 does not exist

Your friend probably needs to load the 'floppy' module manually. To make
the system auto-load it on boot, just add a line containing 'floppy' to
/etc/modules.

J.
-- 
After the millenium I will shoot to kill.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: clone LVM disk to a larger disk

2011-06-05 Thread Jochen Schulz
Peter Beck:
 
 Now I've got a 1TB disk which I would like to use instead of the
 160GB disk. My question: Can I just clone the small disk to the new
 large disk and then resize the LV on it ? Does that work ? I would
 say yes, but I've never done that, so I am not sure... ;)

What I would probably do is:

- install new disk alongside the old one
- put one big partition on the new disk and pvcreate the partition
- vgextend the existing VG with the new partition
- vgreduce the VG, removing the old disk's partitions

That should be just as fast as dd'ing the old filesystems and can be
done without downtime. You don't need to resize any existing partitions,
but you can of course grow the LVs and the filesystems afterwards, if
you want to take advantage of the additional space.

J.
-- 
All participation is a myth.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: clone LVM disk to a larger disk

2011-06-05 Thread Jochen Schulz
Gilles Mocellin:
 On dim. 05 juin 2011 16:51:26 CEST, Jochen Schulz m...@well-adjusted.de 
 wrote:
 
 What I would probably do is:
 
 - install new disk alongside the old one
 - put one big partition on the new disk and pvcreate the partition
 - vgextend the existing VG with the new partition
 - vgreduce the VG, removing the old disk's partitions
 
 You certainly forget a pvmove of the partitions between vgextend and vgreduce.

Whoops! :) Leaving it out makes the process much faster, though. You
just don't get to keep your data. In my defence, vgreduce doesn't work
for PVs still in use.

J.
-- 
My clothes aren't just fashion. They're a lifestyle.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: clone LVM disk to a larger disk

2011-06-05 Thread Jochen Schulz
Peter Beck:
 On 06/05/2011 04:51 PM, Jochen Schulz wrote:
 What I would probably do is:
 
 - install new disk alongside the old one
 - put one big partition on the new disk and pvcreate the partition
 - vgextend the existing VG with the new partition
 - vgreduce the VG, removing the old disk's partitions
 
 That should be just as fast as dd'ing the old filesystems and can be
 done without downtime. You don't need to resize any existing partitions,
 but you can of course grow the LVs and the filesystems afterwards, if
 you want to take advantage of the additional space.
 
 and this will also work when the operating system is running on this
 lvm ?

Yes, if you add the pvmove step that I forgot to mention. Just expect a
(heavy) drop in IO performance as both the new and the old disk are very
busy during the move.

If you also have filesystems on non-LVM devices, you have to take care
of them by other means. If you boot from the disk, don't forget to
grub-install.

J.
-- 
Quite often I wonder why I am not more famous and/or more wealthy.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: consolekit makes trouble

2011-05-29 Thread Jochen Schulz
 Hello list, 
 
 […] I saved my package list by dpkg --get-selections  package.txt, and 
 after the fresh installation, I could reinstall them again. I did this with 
 the command: apt-get install $(cut -f1 package.txt), which worked fine.

Just as a side note: This procedure has the probably unwanted side
effect that all previsously installed packages are now marked as
manually installed. You could have used something like

aptitude search '~i!~M'

in order to generate a list of only the packages you had installed
manually.

J.
-- 
I often play sports / do exercise.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: IndexError: list index out of range

2011-05-27 Thread Jochen Schulz
lina:
 
 when I tried AutoDockTools, which showed me something like
 
 IndexError: list index out of range
 
 Is it something relevant to driver or Pmv or ?

It's a programming error in the application. Either a real bug or only
missing error handling.

J.
-- 
If I was Mark Chapman I would have shot John Lennon with a water pistol.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Problem with the global weigh of several files

2011-05-26 Thread Jochen Schulz
Gorka:
 
 I am looking for the best way of appending commands to obtain the global
 amount of Mb of the modified files of my PC.
 
 Something like this:
 
 find ./  -mtime -7 | du -Sch

In bytes:

find ./ -mtime -7 -ls | awk 'BEGIN { s=0 } { s+=$7 } END { print s } '

You can use 'print s/1024' in order to get kiB and so on.

J.
-- 
If I was Mark Chapman I would have shot John Lennon with a water pistol.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Tracing Filesystem Accesses

2011-05-13 Thread Jochen Schulz
Bob McConnell:
 
 Before we go any further, lets get a couple of things sorted out.
 What type of SSD (Solid State Drive) are you all talking about here?
 
 If it contains Flash memory,

What else do you have in mind?

 then yes, there is a limit to the
 number of ERASE cycles each sector can do. How long they last
 depends on a number of factors, not the least of which is how old
 the chips are. The first generations of flash memory chips could
 only be erased about 10,000 times before they started to fail.

Current generation (consumer-grade) MLC SSDs using 25nm technology use
flash that can only be rewritten 3000 times. Assuming perfect wear
levelling, that's still enough for most desktop applications.
120GB*3000=360TB.  That's still almost 100GB per day for ten years. Even
if write amplification quintuples the amount of date written, that's
still 20GB per day. My systems don't write that much.

J.
-- 
If I was a supermodel I would give all my cocaine to the socially
excluded.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Boot problem after crashed update

2011-05-12 Thread Jochen Schulz
 I made a fresh install of debian squeeze just after its release and
 dutifully installed the updates suggested by the package manager
 whenever necessary.

What's the content of your sources.list?

 2) The only thing that worked was switching between x (ctrl+alt+f7) and
the terminal (ctrl+alt+f1) but I couldn't log in to the terminal;
instead I got some error messages about init (or initsomething -
unfortunately I do not remember anymore) spawning to much and
something (it wasn't being clear what) being delayed/suppressed for 5
minutes.

The exact error message might have helped in identifying the issue.

 4) When I booted the laptop at work, it crashed soon after grub, the
rror message being:
 
 udevd[58]: error: runtime directory '/run/udev' not writable, for
 now falling back to '/dev/.udev'

That looks like you are actually running testing or unstable. A similar
issue has hit my sid machein recently. Descriptions of the problem and
solutions have been discussed here.

 run-init: /sbin/init: No such file or directory

Ouch. Can you confirm that /sbin/init still exists on your root
filesystem? You mentioned that you have another distro on the same
machine, so you can use that to inspect the filesystem. I'd do an fsck,
too.

 7) I then tried to run the rescue system from the debian installation
dvd:
- Executing a shell in /dev/sda3 (my root) fails without any
  meaningful error message.

If it doesn't mean anything to you, it still may mean something to us.
:)

J.
-- 
Watching television is more hip than actually speaking to anyone.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Boot problem after crashed update

2011-05-12 Thread Jochen Schulz
Simon Hoerder:
 
 deb http://ftp.de.debian.org/debian sid main contrib

That line points to unstable, aka sid. Sid is the permanent alias for
the unstable distribution, unlike the rolling aliases for testing and
stable.

 Assuming Sven is correct:
 B) Am I correct that the easiest way to return to a stable installation
is a reinstall?

Since you still have a bootable operating system, you may try the hint
at http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626450#36.

 C) How can I prevent getting unstable packages into my system in the
future?

Don't add sid to your sources.list. :) And if you do: use pinning or set
your default distribution in /etc/apt/apt.conf.d/90local (man apt.conf,
Default-Release).

J.
-- 
I enjoy shopping, eating, sex and doing jigsaw puzzles of idealised
landscapes.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Boot problem after crashed update

2011-05-12 Thread Jochen Schulz
Simon Hoerder:

 Is there an easy way to remove all unstable packages?

No, at least no easy way I could come up with. You could use aptitude
search to identify installed packages from unstable, remove them and
reinstall them from squeeze. But since you apparently already have libc
from unstable, that won't work.  You could also try to forcibly
downgrade these packages to their squeeze version, but that's
unsupported and will probably result in quite a mess.

Reinstalling is your safest bet.

J.
-- 
I am getting worse rather than better.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Boot problem after crashed update

2011-05-12 Thread Jochen Schulz
Javier Barroso:
 
 So, why not, simply wait one month without upgrading, remove sid from
 your sources.list (and keep only wheezy), and then aptitude update;
 aptitude safe-upgrade; aptitude full-upgrade ?

Because the OP would still run some kind of more or less mixed
wheezy/sid system even though he wants to run stable.

BTW, thanks for this thread! I carelessly upgraded my sid system this
morning without even noticing that it completely b0rked my system. :)
Luckily, I had a flash drive with d-i handy and my system was up and
running in a few minutes again.

J.
-- 
I think the environment will be okay.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Re: Does apt-get dist-upgrade upgrade the kernel?

2011-05-07 Thread Jochen Schulz
KS:
 
 Surprisingly, dpkg does not show 2.6.38 whereas apt says that it exists!

Dpkg doesn't know packages that were never installed. Apt does.

J.
-- 
I wish I had been aware enough to enjoy my time as a toddler.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: OT: Safe to access SSH server from work?

2011-05-06 Thread Jochen Schulz
George:
 On 5/6/11, Jochen Schulz m...@well-adjusted.de wrote:
 
 If you only allowing key-based authentication and install security
 patches in a timely manner, the risk from running a public OpenSSH
 server is low. Expect brute-force attempts to login using weak
 passwords, though. If you only allow key logins, you can ignore that.
 
 
 What exactly is a key login?

You can authenticate to an OpenSSH server using a password, or using a
keyfile. On the client side, simply run 'ssh-keygen' to create a
keypair.

 The computer that needs to be accessed is running Windows and I have
 installed WinSSHD on it.

If your server was running linux, you would just need to add your public
key (generated by ssh-keygen) to the ~/.ssh/authrized_keys file. I
cannot help with WinSSHD.

 I see a DSA host
 key on its configuration screen, accompanied by an MD5 fingerprint.

The SSH protocol allows for both server and client authentication. The
host key is like an SSL certificate: it is there so that clients can
make sure they are communicating to the server they think they do.

 When I connected to it from my Debian box I received the
 aforementioned fingerprint. Is this process the key login you're
 referring to?

No, that's the host key, not the client key.

 I'm asking because in the configuration screen of
 WinSSHD there's also an indication of No RSA host key is currently
 employed. What is the difference between the two keys?

That probably only means that your server has a host key for the DSA
algorithm, but none for RSA. You don't need to care about that.

J.
-- 
I am getting worse rather than better.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: OT: Safe to access SSH server from work?

2011-05-06 Thread Jochen Schulz
George:
 On 5/6/11, Jochen Schulz m...@well-adjusted.de wrote:
 
 You can authenticate to an OpenSSH server using a password, or using a
 keyfile. On the client side, simply run 'ssh-keygen' to create a
 keypair.
 
 So the attacker needs to guess my private key instead of my password.

Exactly.

 How does that make his life more difficult, assuming my password was
 very strong?

A keyfile is longer and contains more entropy. I doubt your is using a
password with 1024 bits of entropy, let alone 2048 or 4096. Even for
only 1024 bits of entropy you would need a passphrase of 128 characters
to match a keyfile's strength. And that's only if you assume your
password has an entropy of 8 bits per character, which probably isn't
the case (see here:
http://en.wikipedia.org/wiki/Password_strength#Random_passwords and the
table below that).

If an attacker has access to your passphrase-protected private key file,
security is of course reduced to your passphrase's strength, which puts
you into almost the same situation as with a login without a keyfile.

J.
-- 
I spend money without thinking on products and clothes that I believe
will enhance my social standing.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: OT: Safe to access SSH server from work?

2011-05-05 Thread Jochen Schulz
George:

 I have a computer at home that I'm doing some research on and I set up
 an SSH server on it so I can access it from other computers at home. I
 haven't opened up the network to the internet yet though, as I'm not
 confident enough that it is safe.

If you only allowing key-based authentication and install security
patches in a timely manner, the risk from running a public OpenSSH
server is low. Expect brute-force attempts to login using weak
passwords, though. If you only allow key logins, you can ignore that.

 What are the configuration steps that I will need to do on the server

You probably need to configure a port forwarding on your router to port
22 on the server running OpenSSH. Additionally, you may want to use a
service like dyndns.com so that you can connect to your machine using a
stable hostname instead of a dynamically changing IP address.

 and the client to be able to work access the computer from my
 workplace?

On a Windows system, I recommend using PuTTY. You don't need any special
configuration.

Be aware that using SSH from an untrusted host is a bad idea. If you
don't trust your employer, don't put your private key file one of his
systems and don't enter your passphrase either.

J.
-- 
I wish I was gay.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Need help setting up a home LAN

2011-05-02 Thread Jochen Schulz
Paul E Condon:

 […] I can see good reasons for DHCP, but I have never
 understood how I could get my four Debian hosts to talk to each other
 under DHCP. I see some things that can be configured to have DHCP
 assign fixed IPs to certain devices based on their MAC address, but is
 that what needs to be done?

Depends on your taste. I know someone who absolutely despises of the
idea that the hosts in his local network have hostnames. He likes IP
addresses better. :)

I prefer to name my machines and using the names when SSHing etc. For
the most part, I don't care about IP addresses at all. Your router
should support this for DHCP clients with dynamically assigned addresses
as long as the clients send their own hostname when requesting an IP
address. Debian doesn't do this by default, which I suppose was your
problem. To enable this feature, just edit /etc/dhcp/dhclient.conf and
change the line that begins with send host-name.

J.
-- 
In the west we kill people like chickens.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: bash prompt \W (working dir) garbled

2011-04-28 Thread Jochen Schulz
Jimmy Wu:

 $ PS1='\W '
 ~ cd /home
 hmee cd /media
 meiia cd /boot

Same here, on squeeze and sid (both amd64, just as yours). It's already
reported as #589084. A link to a patch is included, in case you want to
rebuild bash yourself.

J.
-- 
I worry about people thinking I have lost direction.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Debian Lenny archives location ?

2011-04-28 Thread Jochen Schulz
Ravi Roy:

 This might be a stupid question becuase of my ignorance, in case it is,
  please excuse me.

:)

 Debian 6.0 Squeeze is stabe and Lenny (last point rel. 5.0.8) is old stable.
 As per the posts I have come through so far, says that oldstable are moved
 to http://archive.debian.org (archives for oldstables).

That is true, but oldstable is only archived one year after the relase
of the current stable. That means you should find lenny sitting just
beside squeeze on most mirrors. Your sources.list entries from before
squeeze should still work until February 2012.

J.
-- 
I worry about people thinking I have lost direction.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Why doesn't debian remove the proprietary software from it's servers?

2011-04-27 Thread Jochen Schulz
sdc:

 My beginner question is, why doesn't Debian remove the proprietary software
 hosted on it's servers?

Because Debian currently thinks keeping proprietary packages serves
their users better than removing the offending packages. Officially,
proprietary packages aren't part of Debian anyway because they do not
enter main, only contrib or non-free. After installation, the user has
to explicitly add contrib and non-free to her sources.list in order to
install proprietary software.

One could argue (which I suppose the FSF is doing) that the distinction
between main and the rest is hypocritical, since Debian still
distributes contrib and non-free. From my POV, Debian's current way to
handle this issue is in fact serving their users best. (DFSG-)Free
Software by default, but every user may choose her own lovel of
unfreeness.

 Don't they want to follow the FSF word?

In short: no. Debian follows the DFSG, the FSF follows its own rules.
Although both parties have quite a lot in common wrt Free Software,
Debian and the FSF have a long history of disagreement about smaller
issues. To me, it's basically a potato / potahto issue. ;-)

J.
-- 
I frequently find myself at the top of the stairs with absolutely
nothing happening in my brain.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Why doesn't debian remove the proprietary software from it's servers?

2011-04-27 Thread Jochen Schulz
Andrei Popescu:
 On Mi, 27 apr 11, 12:03:41, Jochen Schulz wrote:
 
 In short: no. Debian follows the DFSG, the FSF follows its own rules.
   ^^^
 You probably meant the Social Contract here ;)

I actually even wrote that but later on changed it to DFSG in order to
be more specific about license issues. But Social Contract is probably
more correct here, yes.

J.
-- 
If I was Mark Chapman I would have shot John Lennon with a water pistol.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: [OT] Purchasing a wired switch; advice needed

2011-04-20 Thread Jochen Schulz
Klistvud:
 And here's what I need advice for:
 
 I'm planning to purchase a wired (consumer grade) switch since I've
 heard they're inherently more robust than (consumer grade) routers,
 and I'm planning to connect it *directly* to our cable broadband
 modem. Then, the two families would connect their respective routers
 (we have some spare wireless routers) to this switch. The various
 computers and network printers would then be connected, in turn, to
 these routers.

You are looking for a router (OSI layer 3), not a switch (OSI layer 2).
It needs to have three distinct interfaces (1xWAN, 2xLAN). If it runs
something like OpenWrt you are completely free about its configuration,
e.g. you can put each interface in separate networks, enable or disable
routing between them, filter traffic to your liking etc. It should even
be possible to use some QoS features in order to share the bandwith
between the families (subnets).

I think even a simple Linksys WRT54GL would suffice. AFAIK you can
disable the bridge between the switchports and thus configure each
switchport as a separate interface. If you want GBit-Ethernet you can
build something yourself using a Routerstation Pro, for example. Take a
look at OpenWrt's Table of Hardware.

Alix and Soekris boards come to my mind as well, but IMHO they are too
expensive.

J.
-- 
If I could travel in time I would show my minidisc to the Romans and
become Caesar until the batteries ran out.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: [OT] Purchasing a wired switch; advice needed

2011-04-20 Thread Jochen Schulz
Klistvud:
 Dne, 20. 04. 2011 11:25:27 je Jochen Schulz napisal(a):
 Klistvud:
 
 I'm planning to purchase a wired (consumer grade) switch since I've
 heard they're inherently more robust than (consumer grade) routers,
 and I'm planning to connect it *directly* to our cable broadband
 modem. Then, the two families would connect their respective routers
 (we have some spare wireless routers) to this switch. The various
 computers and network printers would then be connected, in turn, to
 these routers.
 
 You are looking for a router (OSI layer 3), not a switch (OSI layer 2).
 …

 Using a router is precisely what I'm trying to avoid here.

I don't really know how cable broadband works, but AFAIU you need
exactly one system routing your traffic to the WAN, just like with DSL.
If this is the case, you need a router, period. That device doesn't need
to be the usual plastic junk, but it needs to, erm, route IP traffic.
That's why it's called a router. ;-)

 1. Having had a router for the last 5 years or so, I've come to the
 conclusion that a single router, with a single configuration
 interface, can not accomodate our differing  needs (the other family
 uses strictly Windows and needs UPnP, we strictly use Debian and
 hate UPnP;

I must admit I never really understood what UPnP actually does, but if
you mean the automatic port-forwarding nonsense: it might be possible to
enable it for one network only with OpenWrt.

 resetting the shared router by one person has broken a
 download or some other internet-related task for the other person
 many a time;

The real problem here is that you need to reset the router in the first
place. I don't remember having done this with my WRT54GL ever. But my
network is not as busy as yours, of course.

 we both need so many ports forwarded that the 20
 available ports of an average router simply aren't enough;

No problem with OpenWrt.

 2. Consumer grade routers are flaky at best; cramming a firewall,
 port forwarding, NATting, dhcp, routing and what not into a 32 MB
 device apparently wasn't such a great idea,

I wouldn't blame the low quality of the software on the low hardware
specs.

 I'd rather have a good switch or even hub than a consumer-grade router
 doing my broadband sharing.

It's just that a switch isn't capable of doing what you need.

 3. Segment independence. I want to be able to use my network segment
 no matter what is happening on the other segment. With one central
 router serving both segments -- no matter how separated they may be
 internally to the device -- this can't be achieved.

With your proposed network layout, internal traffic doesn't reach the
shared router at all. Only cross-network (if allowed at all) and WAN
traffic goes through the shared router.

 What I had in mind is something like this:
 http://www.ehow.com/how_6823201_use-switch-hub-instead-router.html .

This only works if your cable modem is actually a router. As I said, I
don't know the specifics of cable broadband.

If your cable modem is able to connect to the WAN by itself, then you
can just go ahead any buy practically any switch on the market. The
cheaper it is, the less you have / are able to configure.

J.
-- 
I am on the payroll of a company to whom I owe my undying gratitude.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Bugreport: Netinstall DVD? debian-testing-amd64-DVD-1.iso 18-Apr-2011

2011-04-19 Thread Jochen Schulz
Тира Шюпаст:

 I am new at sending bug reports to Debian, so please bear with me, and my
 English too.

No problem. You just need to know that this list is not the right place
to report bugs to Debian Developers, that's what the BTS is for
(bugs.debian.org). But anyway, you mail's content suits this list very
well.

 The problem is that the system can not be installed on my Compaq Presario
 CQ61 notebook.

Bugs about failed installations should be reported against the
pseudo-package debian-installer. The wheezy installer is probably
expected to be quite unstable these days as squeeze has just been
released a few weeks ago. If you need a stable release, pick squeeze.

That doesn't have to keep you from trying wheezy, of course. But if it
fails, please try to be constructive instead of demanding.

 The only custom setting I made is to give debian only /dev/sda1 partition
 instead of the whole hard drive.
 Even with the default settings, installation ends up with The 'grub-pc'
 package failed to install into /target/.

During installation you can switch to alternate VTs using Alt-Fx,
where x is a number from 1-6. One of the consoles should contain an
error message which would help in diagnosing the problem.

 Then I tried to get into installed system using Rescue mode of the
 installation dvd, but that system does not contain grub-install utility.

If grub failed to install during system installation, a missing
grub-install doesn't surprise me. :) What you could try is installing
the deb file for grub from the installation DVD after chrooting to your
new system.

 3 I installed new grub as I can
 apt-get update
 apt-get install grub-pc (that launched grub-install)

Oh, you already did that. Great! :)

 grub-mkconfig  /boot/grub/menu.lst

Menu.lst is grub-legacy, you need a /boot/grub/grub.cfg. You can
regenerate is by running update-grub (as with grub-legacy).

 This made a bootable, but generally unusable buggy system.
 It doesn't bring up network interface on boot. I have to do ifup eth0
 manually despite the settings of /etc/network/interfaces

Ok, that's a separate issue. Please try to use one thread per issue,
that makes it easier for people to follow / ignore topics.

 It cannot bring up my wifi adapter at all. Even with wireless-tools and
 wpasupplicant installed and configured (using config files from my
 previous Debian Squeeze installation), i can't even see it in ifconfig -a
 listing. In Squeeze that card worked fine.

If you want us to help with that and the eth0 issue, it would help if
you posted information regarding the hardware in use and what your
configuration files look like. You cannot blindly assume your old config
files will work with a new Debian release either, although that's
generally the case.

Regarding the wifi issue, I assume you are just missing a firmware
package. Take a look at dmesg output, you may find a message in there
about this very topic.

 I need a distro which can be installed.

Then don't use wheezy. Or install squeeze first and then upgrade to
wheezy.

J.
-- 
Nothing is as I planned it.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Troubleshooting boot

2011-04-19 Thread Jochen Schulz
Michaël Grünewald:
 
 But anyway I try it again: is there a kernel command line option
 that disables parallelization of initialization and fixes the order
 of it?

Not a kernel option, but you can edit /etc/default/rcS and set
CONCURRENCY=none. That should prevent init scripts from being run in
parallel.

J.
-- 
I wish I looked more like a successful person even though I'm a loser.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: sata hotplug

2011-04-15 Thread Jochen Schulz
tux:
 
 I'm using squeeze, and I want to hutplug an sata device.
 Someone said to me that sata and scsi is the same in linux.

That's true to some extent, yes. Device naming is (and always was) the
same, for example.

 I searched the web, the way  of hot plug for scsi is echo an string to
 /proc/scsi/scsi.
 But there does not exist that file in my filesystem.
 
 So, now I wander who can I do hotplug for sata on squeeze, thanks.

Apart from umounting / synching you don't need to do anything special.
Just plug/unplug your devices. Device nodes are created automatically,
but you most probably need to address filesystems by UUID or by label,
because the usual device names will not be stable.

J.
-- 
I start many things but I have yet to finish a single one.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Cannot umount: device is busy

2011-04-14 Thread Jochen Schulz
T o n g:
 
 Is there any way that I can kill all those kernel processes associated
 with the mount?

For NFS run:

/etc/init.d/nfs-kernel-server stop

J.
-- 
All participation is a myth.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: mua and mail service provider statistics

2011-04-13 Thread Jochen Schulz
Slicky Johnson:
 
 I simply mark threads ignored and I don't seen anymore mails regarding
 that topic. I currently use claws-mail, and I see you're using mutt.
 If I remember correctly you should easily be able to mark a thread as
 ignored.

Unfortunately, this isn't the case. You can mark (sub-)threads as read,
but after that mutt will happily present new mails in the same thread to
you.

J.
-- 
I wish I looked more like a successful person even though I'm a loser.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: ssh between computers on my home network

2011-04-03 Thread Jochen Schulz
Lisi:
 
 The Debian computers can be neither pinged nor ssh'd to.  This is presumably 
 because of some setting that Debian puts in place by default, but I can't 
 find where or what.

Debian doesn't install a firewall/packet filter by default. You just
need to install openssh-server in the machine you want to ssh into and
it should work. If you aren't even able to ping the machine in question,
then I suppose there's some system in between blocking the access.  In
order for us to help you with that, you need to describe your network
better.

J.
-- 
People talking a foreign language are romantic and mysterious.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: iceweasel 4 process not closing on exit

2011-04-03 Thread Jochen Schulz
L V Gandhi:

 When ever I close iceweasel 4 in squeeze, process is not closing.

How did you install Iceweasel 4? It isn't part of squeeze.

J.
-- 
I no longer believe in father christmas but have no trouble
comprehending a nuclear apocalypse.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Debian was hacked: The Canterbury Distribution

2011-04-01 Thread Jochen Schulz
tv.deb...@googlemail.com:
 
 On Sid:
 
 aptitude show cant
 
 Paquet : cant
 État: non installé
 Version : 0.8.15-1
 Priorité : supplémentaire
 Section : admin
 Responsable : Alexander Reichle-Schmehl toli...@debian.org

This installs the following shell script as /usr/bin/cant:

|#!/bin/bash
|
|args=(${@})
|comand=${args[0]}
|packages=${args[@]:1}
|
|case $comand in
|install)
|apt-get install ${packages[@]}
|;;
|remove)
|apt-get remove ${packages[@]}
|;;
|stand)
|apt-get remove --purge cant
|;;
|search)
|apt-cache search ${packages[@]}
|;;
|show)
|apt-cache show ${packages[@]}
|;;
|*|help)
|echo The Canterbury Distribution Package Manager
|echo ''
|echo usage: cant [option] packages
|echo 'options:'
|echo '  install install packages'
|echo '  remove  remove packages'
|echo '  search  search packages'
|echo '  stand   remove the Canterbury Distribution 
Package Manager'
|echo '  helpthis text'
|echo ''
|;;
|esac

'cant stand', nice!

J.
-- 
As a child I pulled the legs from a spider.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: SSD's under Debian Linux

2011-03-29 Thread Jochen Schulz
bars0 bars0:
 
 I recently bought an OCZ VERTEX 2 SSD. What precautions should I take
 when installing Debian on it?

You don't strictly need to do anything special. You may want to read the
advice here anyway:

http://wiki.debian.org/DebianEeePC/TipsAndTricks?highlight=%28ssd%29#Extending_flash_memory_life

I strongly recommend against disabling the journal, though.

 Are SSD drives supported by Linux?

Yes, including TRIM support.

 Is there any official documentation about this topic?

None that I know of. Everything is supposed to just work (including
block size issues).

 Could someone share its experience about SSD's in Debian or GNU/Linux
 in general.

I am using an Intel X25m (1st generation) for almost two years now and
apart from a few tmpfs and no swap, I haven't done anything special in
order to optimize its usage. My model lacks TRIM support, though, and I
think I can notice the performance penalty.

J.
-- 
I'm being paid to act weirdly.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: What happened to debian - does stable keep having any meaning?

2011-03-25 Thread Jochen Schulz
Geronimo:
 
 From a closer look to dpkg.log - there has been updates of python and grub 
 uses python. Could this lead the different behaviour?

Looking at your dpkg.log again, I notice that grub-pc has been purged
and replaced by grub-legacy. Which version of grub are we talking about
again? :)

J.
-- 
In public I try to remain calm and to appear perceptive.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: What happened to debian - does stable keep having any meaning?

2011-03-25 Thread Jochen Schulz
Geronimo:
 
 Rebooting from debian after a grub-install/update-grub, situation is shown by 
 picture grub01.png

This doesn't look *that* bad. It hangs right before showing the menu or
at least its command line. I googled for welcome to grub! and found
a hint that this *might* actually be a graphics problem. See this bug
report:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=594967

It looks like the fix didn't make into stable, but you can try setting
GRUB_TERMINAL=console.

 Jochen Schulz wrote:
 Can you still make the system bootable again just by removing the extra
 SATA controller? 
 
 No. after removing controller, grub shows less than with controller (picture 
 grub02.png).

This is weird. To me, that suggests that grub tries to load one of the
stages from one of the disks on that controller. But I might be wrong.

J.
-- 
If I am asked 'How are you' more than a million times in my life I
promise to explode.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Bug in grub-pc results in unbootable system after installation (was: What happened to debian - does stable keep having any meaning?)

2011-03-25 Thread Jochen Schulz
Geronimo:
 Jochen Schulz wrote:

 a hint that this *might* actually be a graphics problem. See this bug
 report:
 
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=594967
 
 It looks like the fix didn't make into stable, but you can try setting
 GRUB_TERMINAL=console.
 
 You ARE my hero :D

All it took was pasting the message from your screen into Google. ;-) I
am glad that we found a solution. Thanks for your persistence, I already
feared you might give up on that one.

BTW, I was wrong about the fix not being part of squeeze: the link above
says the fix should be included in 1.98+20100804-12. But there's another
user (message #154) that says the issue isn't fixed yet. You can simply
send en email to 594967 at bugs.debian.org and try to get Colin Watson's
attention.

J.
-- 
If I was Mark Chapman I would have shot John Lennon with a water pistol.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: What happened to debian - does stable keep having any meaning?

2011-03-25 Thread Jochen Schulz
Geronimo:
 Tom H wrote:

 It looks like you've found a gem, especially given the external card
 and this post by Colin Watson (#54):

I don't think that's related. The issue cannot be resolved by removing
the external card.

 You can also verify this at a lower level by trying 'lspci' at a GRUB
 prompt.  If it's the same problem, this will hang.
 
 Just tried to execute 'lspci' from GRUB prompt. Worked fine - no freeze.
 ... so may be it is another cause, but the same symptom ...

ACK, it's probably another issue. But you may still want to refer to
this bug number in your new report. See here for details about the
format if you don't use reportbug:

http://www.debian.org/Bugs/Reporting

You can probably leave out all the details in this thread. The
interesting points probably are:

- Happens with grub-pc 1.98+20100804-14
- Looks almost like #594967
- Disabling vga mode makes the system bootable again
- lspci from grub's prompt succeeds

I would use at least Severity: important.

J.
-- 
My memories gild my life with rare transcendance.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: What happened to debian - does stable keep having any meaning?

2011-03-24 Thread Jochen Schulz
Geronimo:
 Jochen Schulz wrote:
 Geronimo:

 As every of my drives had an installed grub in mbr,
 
 Ok, I forgot that. (BTW, I find this setup really strange, but if it
 worked in the past with grub2 it should of course continue to work.)
 
 LOL - let me clarify, that this setup has not been created by intention. 
 I tried to change root to another SSD, but I never installed grub to the 
 other 
 6 drives. 

Then I would try to rule out that the system boots from the wrong MBR,
if you didn't already overwrite it.

 1.) A fresh installation from debian 6.0 netinst CD results in an
 unbootable system, even using a single partition installation target.
 
 Ok, that's great! I would say that makes you eligible to file a bug
 report against d-i. :) Can you diff the grub.cfg against the one
 generated by 6.0?
 
 How should I do that?

It should be possible to use CD/DVD1 of the 6.0.0 installer and prevent
upgrades from being installed. The easiest way is probably to unplug the
network cable during installation.

J.
-- 
I want to look younger than my friends so I will fight ageing as long as
I can.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Automatically restart OpenVPN session

2011-03-23 Thread Jochen Schulz
Kaushal Shriyan:
 
 is there a way to automatically restart the OpenVPN session while i switch
 to and fro from Wireless to Wired Network on Debian Squeeze ?

Do you use network-manager?

If not: you can add lines for OpenVPN to your entries for wired and
wireless networks in /etc/network/interfaces:

iface eth0 inet dhcp
openvpn vpnname


iface wlan0 inet dhcp
openvpn vpnname

Given vpnname, OpenVPN will use the config file
/etc/openvpn/vpnname.conf.

J.
-- 
Driving behind lorries carrying hazardous chemicals makes me wish for a
simpler life.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Automatically restart OpenVPN session

2011-03-23 Thread Jochen Schulz
Kaushal Shriyan:
 
 I have multiple VPN Configs. is the below setting correct ?
 
  iface eth0 inet dhcp
openvpn vpnname1 vpnname2 vpnname3
 
 iface wlan0 inet dhcp
openvpn vpnname1 vpnname2 vpnname3

I guess that should work, but I haven't tested it and I don't find an
example for this in /usr/share/doc/openvpn/README.Debian.gz. You could
try it and file a wishlist report on openvpn in order to clarify the
correct syntax.

(Ok, I just tried it myself, but by doing that I shut down the network
connection of one of my machines at home. :))

Either way, this will only work if you don't use Network Manager (Gnome
GUI tool for configuring network interfaces) and of course you have to
specify correct interface names in /etc/network/interfaces. eth0 und
wlan0 were just used as examples.

J.
-- 
Nothing is as I planned it.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: What happened to debian - does stable keep having any meaning?

2011-03-23 Thread Jochen Schulz
Geronimo:
 Jochen Schulz wrote:
 
 - Which disks are connected to which controller?
 
 As told above, the system disks are attached to the main board. The system 
 disks are the three SSDs and a WD VelociRaptor (sdb) 

Ok, so to sum up: You have trouble booting from disks connected to your
internal SATA controller, but only when another controller (presumably
with disks attached to it) is in the system. AFAICS, we can rule out the
kernel as the cuplrit completely, as grub doesn't even get that far.

I'd say Grub2 and/or your mainboard (unlikely) has a problem that is in
no way related to your upgrade to 6.0.1 (but to stable in general). If I
were you, I would try to get support from the grub people directly.

 - Have you tried shuffling your disks around? Does the system respond
   differently depending on the controller for / or /boot?
 
 The system shuffles the disks around when I switch a disk from backplane 
 on/off 
 or enter a USB-stick, so yes - I'm very used to reorder disks at BIOS.

What I meant was to physically attach disks to different ports.

 When the wrong disk is first, system start is not possible.

Meaning the BIOS doesn't find a boot loader?

 Well, I am not too proficient in these things either. I throw my
 problems at Google like everyone else. :) But installing a new system on
 top of an old one wasn't a good idea when I still used Windows 95 (good
 riddance) and it still isn't a good idea today. /usr may contain
 binaries which the system doesn't know about and thus don't receive
 security updates. And /var contains system-specific data like dpkg's
 database that you don't want to re-use on a new installation.
 
 So how can I recover a broken system?

I wouldn't call a new installation a recovery. For a new installation,
you backup your data, install to new filesystems and restore your
backup.  Recovery procedures obviously vary with the actual problem you
need to solve.

 But anyway: if you have a reliable way of crashing the installer, use
 reportbug (pseudo-package: debian-installer) to make the d-i team aware
 of the problem. 
 
 Thanks for that hint.
 I'll try to remember, when I have my next sparetime.

Sorry for stressing that again, but reporting problems here will not
get the bug fixed. Ever.

I am sorry that I only ask question that apparently lead you nowhere. I
am just stabbing in the dark and I am afraid we will never get to the
source of the problem unless you start from scratch and document every
step you do in detail.

J.
-- 
I throw away plastics and think about the discoveries of future
archeologists.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: What happened to debian - does stable keep having any meaning?

2011-03-23 Thread Jochen Schulz
Geronimo:
 Jochen Schulz wrote:

 AFAICS, we can rule out the kernel as the cuplrit completely, as grub
 doesn't even get that far.
 
 VETO - after reboot, you might be right, but what happens during update-grub?

update-grub only creates the configuration file, it doesn't write the
MBR or anything like that.

 As every of my drives had an installed grub in mbr,

Ok, I forgot that. (BTW, I find this setup really strange, but if it
worked in the past with grub2 it should of course continue to work.)

 unless you start from scratch and document every step you do in detail.
 
 What's unclear from (my post from 06:59:49 today):
 
 1.) A fresh installation from debian 6.0 netinst CD results in an unbootable 
 system, even using a single partition installation target.

Ok, that's great! I would say that makes you eligible to file a bug
report against d-i. :) Can you diff the grub.cfg against the one
generated by 6.0? How many disks did you have attached to the system?
Can you still make the system bootable again just by removing the extra
SATA controller? Does it suffice to remove the disks from that
controller? Is there anything else you can do with the hardware or the
BIOS to make it bootable again?

J.
-- 
If nightclub doormen recognised me I would be more fulfilled.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: What happened to debian - does stable keep having any meaning?

2011-03-21 Thread Jochen Schulz
Geronimo:
 
 the last update of debian broke my system completely!

I am very sorry for your wasted time and loss of data. I see why you
need to let off steam. Nevertheless I think this threads leads nowhere
unless you are more specific about the hardware in use and what kind of
upgrade you actually ran. Instead of insulting Debian developers you
could try to help them get the problem fixed (or make them aware in the
first place).

 ... and now a system breaks on the fact of having an external SATA-
 controller?!? Is that really so exotic, that no one tests that, before moving 
 packages into stable?

If you are under the impression that every package needs to pass
coordinated QA testing before it enters stable, then you are wrong. If
nobody tested your setup using testing or sid, then you are basically
out of luck.

 ... and the installer? Crashes on installing, when /usr and /var are 
 different 
 partitions which should not be formatted. Huh???

This looks like a separate issue which you might want to report against
debian-installer. BTW, using unformatted /var and/or /usr for a fresh
installation looks like a bad idea to me.

J.
-- 
Scientists know what they are talking about.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: What happened to debian - does stable keep having any meaning?

2011-03-21 Thread Jochen Schulz
Geronimo:
 Jochen Schulz wrote:
 Geronimo:

 the last update of debian broke my system completely!
 
 I am very sorry for your wasted time and loss of data. I see why you
 need to let off steam. 
 
 Thank you very much! - usually I'm not that coarse.

That's ok. I am glad my mail didn't anger you even more. :)

 Nevertheless I think this threads leads nowhere unless you are more specific
 about the hardware in use and what kind of upgrade you actually ran. Instead
 of insulting Debian developers you could try to help them get the problem
 fixed (or make them aware in the first place).
 
 With my last post I wrote about my specific hardware.

I see. Didn't see it before sending my mail. I summarize what I know
until now:

- You have five disks (SSD or hard disks, shouldn't matter):

  / on sda1, ext4
  /boot on sda2, ext2
  swap on sdc1
  /usr on sdc2, ext4 (btw, it's UNIX system ressources, not user)
  another swap on sdd2
  /var on sdd2, ext4

  sdb and sde appear to be unused with respect to the squeeze system
  (You may use them with squeeze, but they don't hold any
  system-relevant data.)

- Some of these disks are attached to a secondary SATA controller
  (RocketRAID 230x).

- Other disks are attached to the mainboard's (GA880GM-UD2H) controller.

- Your setup worked fine even after you upgraded from lenny to squeeze.

- You recently upgraded to the next point release and in the process
  were asked to reboot. After that, your system didn't boot. Btw, I am
  curious what exactly triggered the reboot warning. I cannot remember
  having seen that.

Ok so far? Then let me ask a couple of questions:

- Which disks are connected to which controller?

- How did you upgrade to 6.0.1?

- Which packages were upgraded in the process? -I ask because the news
  item for the point release doesn't mention grub at all (only
  grub-installer, which you probably don't use) and that's one reason
  why I suspect your problem isn't directly related to the upgrade to
  6.0.1. All of dpkg, apt-get aptitude keep logs in /var/log.

  (Oh great! I have never noticed apt-get's term.logs before!)

- How often did you reboot the system after the upgrade from lenny to
  squeeze? I am not interested in the exact number, I just want to
  ensure you did it at all. :)

- How did you configure the secondary controller? AHCI?

- Have you tried shuffling your disks around? Does the system respond
  differently depending on the controller for / or /boot?

 If you are under the impression that every package needs to pass
 coordinated QA testing before it enters stable, then you are wrong.
 
 I followed quite a time several debian MLs and yes, my opinion from reading 
 the discussion between developers was, that debian has a coordinated QA 
 testing.

Well, the term coordinated might be a bit misleading. What I meant
was: I don't expect the grub maintainers (or any other DD) to
systematically test their package with various different hardware
configurations, filesystems etc. I guess they grab the release tarball
from upstream, patch it a little bit, compile it locally and in the best
case they test on their local machine (which might be a simple virtual
machine). Then they upload it to sid (or experimental, if they expect
alpha quality) and hope upstream didn't release total junk.

This is pure speculation and I may be wrong on that specific example.
But that's the general process as far as I understand it. The rest is
done by the user/developer community running sid or testing.

 If nobody tested your setup using testing or sid, then you are basically
 out of luck.
 
 I had the same issue when squeeze was testing and I reported it to this ML. 
 But most comments leaded to my own problem.

It's always great to see how fast mailing list mirrors and search
engines catch up new posts. :)

 No one was willing to accept, that there's a big issue with grub.

Oh, there are definitely issues. It probably wouldn't be part of so many
distributions if grub legacy was still maintained.

 ... and the installer? Crashes on installing, when /usr and /var are
 different partitions which should not be formatted. Huh???
 
 This looks like a separate issue which you might want to report against
 debian-installer. BTW, using unformatted /var and/or /usr for a fresh
 installation looks like a bad idea to me.
 
 So, may be you can guide me to a better use case, when the system is broken 
 and the machine does not work any more. 

Well, I am not too proficient in these things either. I throw my
problems at Google like everyone else. :) But installing a new system on
top of an old one wasn't a good idea when I still used Windows 95 (good
riddance) and it still isn't a good idea today. /usr may contain
binaries which the system doesn't know about and thus don't receive
security updates. And /var contains system-specific data like dpkg's
database that you don't want to re-use on a new installation.

But anyway: if you have a reliable way of crashing the installer

Re: sum two disks using RAID or LVM?

2011-03-18 Thread Jochen Schulz
Γιώργος Πάλλας:
 
 A short question: I have two 500GB HDDs and I want to use their space as
 one. Should I aggregate them with software RAID, or using LVM in regard
 to data safety? If one of them malfunctions, is one of the two
 approaches better?

If your goal is to use the disks as a single 1TB filesystem, both
approaches will make your data inaccessible in case of a single disk
failure. Both can do striping and/or mirroring, but using LVM for that
is less common.

I suggest RAID1 as the safe option and LVM if you don't want to waste
the space. But that's probably only because I am more experienced using
LVM tools than mdadm.

Oh, and backups don't hurt either way. :)

J.
-- 
When standing at the top of beachy head I find the rocks below very
attractive.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: sum two disks using RAID or LVM?

2011-03-18 Thread Jochen Schulz
Boyd Stephen Smith Jr.:
 
 Buy another 500GB disk and do software RAID 5 if you really need 1TB of 
 space.  
 It won't be great, but it'll be a LOT safer than what you are proposing.

mdadm can even do RAID10 on three drives (IBM calls it RAID 1E). You'll
get 750GB of space with three 500GB drives. I am running such a setup
with three 1000GB drives.

J.
-- 
I wish I could achieve a 'just stepped out of the salon' look more
often. Or at least once.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Debian intallation

2011-03-08 Thread Jochen Schulz
Yassine Ehssan:

 I have tried to I install the Debian operating system on a hard disk
 partitioned using windows vista hard disk partition manager and I have
 specified a primary partition of a capacity of 100 GB

You most probably don't need that much space for Debian, but of course
it doesn't hurt.

 but the problem
 was that the Debian installation process doesn't detect the hard
 partitions and need to create a new partition table.

Are you absolutely sure about that? Under your circumstances, it should
detect that there is no free (=unpartitioned) space on the disk and
offer top resize one of the partitions in order to make space for
Debian.

 Note: that the partitions are working very well under windows and they
 are of NTFS format.

Debian cannot be installed on NTFS. Maybe you have luck deleting the
unused 100GB partition from Windows and then starting the Debian
installer again.

J.
-- 
I no longer believe my life will be long, happy, interesting or fulfilled
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: dd or cp over network: should I use scp?

2011-02-24 Thread Jochen Schulz
Dotan Cohen:

 I need to dd or cp my laptop's harddrive over the LAN. For a reason
 that I'd rather not get into I cannot remove the drive from the
 laptop.

What do you want to achieve? Cloning a filesystem that is in use always
has some drawbacks, depending on the method.

If you use LVM: use snapshots. You'll get a dirty filesystem that needs
a fsck, but the result should be consistent.

Otherwise, I would probably use rsync because it might save time if the
copy is interrupted for some reason. Dd will probably yield very
inconsistent results when you use it to copy a filesystem that is in
use.

J.
-- 
I like my Toyota RAV4 because of the commanding view of the traffic
jams.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: How to set battery charge thresh in Debian 6 ?

2011-02-24 Thread Jochen Schulz
Please don't top-post.

waterloo:
 
 In gentoo, I set battery thresh in
 /sys/devices/platform/smapi/BAT0/start_charge_thresh .
 But in Debian 6 I can not find that file .

module-assistant auto-install tp-smapi-source

J.
-- 
The news at ten makes me peevish but animal hospital makes me cry.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: How to set battery charge thresh in Debian 6 ?

2011-02-24 Thread Jochen Schulz
green:
 Jochen Schulz wrote at 2011-02-24 11:07 -0600:
 waterloo:
 In gentoo, I set battery thresh in
 /sys/devices/platform/smapi/BAT0/start_charge_thresh .
 But in Debian 6 I can not find that file .
 
 module-assistant auto-install tp-smapi-source
 
 In squeeze, all that is necessary is to install the tp-smapi-dkms package.

Great, didn't know that. Thanks!

J.
-- 
My clothes aren't just fashion. They're a lifestyle.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Disc encryptian.

2011-02-21 Thread Jochen Schulz
Heddle Weaver:
 
 looking at the collective knowledge factor, what's the best disc encryption
 package?
 What's everybody using?
 Two examples of Xzibit this week and hash changes showing up in the logs.
 No damage, just nosy kids.

I am not sure what you are saying, but be aware that disk encryption
does not protect your data while the system is running and the encrypted
filesystems are in use.

J.
-- 
I think the environment will be okay.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: upgrade using aptitude

2011-02-16 Thread Jochen Schulz
Qi Qi:
 
 I have been using debian unstable. After debian 6.0 released, aptitude
 upgrading asks me to remove gnome, gnome-core, and
 gnome-desktop-enviroment,etc.

I doubt that you are using (safe-)upgrade. You are probably having
trouble using full-upgrade which you didn't have if you used a
safe-upgrade instead.

 I tried different resolutions provided in aptitude for dependency conflicts. 
 But
 it seems all of the proposals asks for gnome removal. Is it normal
 during the transition of debian upgrading time?

Yes. Unstable usually has dependency problems shortly after a release.
If you regularly run safe-upgrades and watch your step when doing
full-upgrades, things usually end up fine.

J.
-- 
I am not scared of death but terrified of people in Tommy Hilfiger
sweatshirts.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: upgrade using aptitude

2011-02-16 Thread Jochen Schulz
Heddle Weaver:
 On 16 February 2011 20:06, Jochen Schulz m...@well-adjusted.de wrote:
 Qi Qi:
 
 I have been using debian unstable. After debian 6.0 released, aptitude
 upgrading asks me to remove gnome, gnome-core, and
 gnome-desktop-enviroment,etc.
 
 I doubt that you are using (safe-)upgrade. You are probably having
 trouble using full-upgrade which you didn't have if you used a
 safe-upgrade instead.
 
 With aptitude, upgrading to a new distribution, which is essentially what
 you are doing when moving to a new version of unstable,

What is a new version of unstable? AFAICS, there's a new version every
day. And you never know what you get.

 'aptitude full-upgrade' is appropriate after 'aptitude update'.

Partial NACK. You only need full-upgrades if dependencies require it.
Most of the time, this is unnecessary. And most of the time, a
safe-upgrade is the safest (d'uh) option. The worst thing that can
happen is that you simply don't get any upgrades at all.

With a full-upgrade, on the other hand, you only need to press Enter
once without thinking and have essential (not in the Debian sense)
packages removed. This list regularly receives mail from users who did
just that (or wonder how to get around aptitude's wishes).

If you routinely use safe-upgrades and only run full-upgrades if you
have a real need, you minimize the risk of breaking the system to a
point at which relatively unexperienced users have trouble recovering.

Sure, a full-upgrade is never wrong if you watch what aptitude is
about to do and take appropriate action. But making a habit of doing
full-upgrades only when you actually need them may prevent damage to
your system.

Additionally, shortly after a release it is the easiest option to stay
up-to-date without being troubled by larger transitions and broken or
unsatisfiable dependencies.

 Follow this with 'aptitude autoclean'.

I prefer the following in /etc/apt/apt.conf.d/90local:

APT { 
// settings for cron.daily/apt
// see: /etc/cron.daily/apt
Periodic {
Update-Package-Lists 1;
Download-Upgradeable-Packages 1;
AutocleanInterval 1;
MinAge 3;
MaxAge 7;
MaxSize 1024;
}
}

That keeps the cache from growing endlessly without any manual
intervention.

 I should also recommend installing the package: 'aptitude-doc-(insert
 appropriate language code here)' which you will be able to find through the
 aptitude interface and read it!

ACK! The search patterns are really great, probably aptitude's best
advantage over apt-get.

J.
-- 
In idle moments I remember former lovers with sentimental tenderness.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Middle button copy/paste

2011-02-15 Thread Jochen Schulz
Please don't top-post. Instead, trim the quotes and write your reply
below or in-between.

Radhakrishna Bhat:

 Not sure, but I think you need to be running 'gpm' daemon for middle button
 paste to work.

Gpm is only needed for mouse support in the VTs. X doesn't need that.

J.
-- 
Atrocities committed in Rwanda pervade my mind when I am discussing
mundanities with acquaintances.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: OpenOffice has become LibreOffice?

2011-02-15 Thread Jochen Schulz
John Jason Jordan:
 
 Does anyone know of a place that has a fairly detailed but not too
 technical list of why one would want to use LibreOffice over OOo,
 disregarding the open source issues.

I would be surprised to find something like this. The fork has purely
political reasons and as it is still quite young, it shouldn't have
deviated from OOo by much until now.

 I am interested in what LibreOffice offers that makes it easier to
 use, fewer bugs, features or lack thereof. 

Don't expect any of this today. I guess that it is currently even less
stable/mature.

J.
-- 
I can tell a Whopper[tm] from a BigMac[tm] and Coke[tm] from Pepsi[tm].
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: OpenOffice has become LibreOffice?

2011-02-15 Thread Jochen Schulz
Adrian Levi:
 On 16 February 2011 02:47, Jochen Schulz m...@well-adjusted.de wrote:
 
 I would be surprised to find something like this. The fork has purely
 political reasons and as it is still quite young, it shouldn't have
 deviated from OOo by much until now.
 
 LibreOffice includes the patchset that was GO-OO that neither Sun or
 Oracle would comit to the repo, so it was maintained as a separate
 patchset. Debian previously shipped GO-OO not Sun OO or Oracle OO

Thanks for the correction. I had never heard about these patches.

 I am interested in what LibreOffice offers that makes it easier to
 use, fewer bugs, features or lack thereof.
 
 Don't expect any of this today. I guess that it is currently even less
 stable/mature.
 
 Pure Conjecture,

True. It's just what I expect of a fresh fork.

J.
-- 
My medicine shelf is my altar.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Debian way of compiling a kernel.

2011-02-10 Thread Jochen Schulz
Boyd Stephen Smith Jr.:
 
 If you just want a .deb to install, I've heard there's a makefile target in 
 the kernel tarball that works fine.  I believe but can't confirm that the 
 .debs generated by the makefile in the kernel tarball will properly invoke 
 the postint scripts that are used to update grub.cfg, menu.lst, or the lilo 
 boot sector.

I routinely compile vanilla kernels from git just using make, make
deb-pkg and when installing the resulting package, grub2 and the
initramfs get updated just fine.

J.
-- 
I wear a lot of leather but would never wear fur.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Installation on SSD

2011-02-10 Thread Jochen Schulz
Allan Wind:
 On 2011-02-09T09:31:51, Brandon Ros wrote:
 
 What is the bottom line with:
 mount options (TRIM, noatime)
 
 All I did was ensuring that I was on a recent enough kernel for 
 TRIM support (2.6.33 and I think Debian added it to 2.6.32-12), 
 and added noatime and nodiratime in /etc/fstab for mount options.

If you want to be on the safe side regarding programs relying on a more
or less accurate atime, use relatime instead.

 block alignment
 
 I did not not do anything special.

From what Henrique recently wrote on this list, the installer should
handle everything just fine:

http://lists.debian.org/debian-user/2011/01/msg02021.html

(The post refers to disks with 4k sectors but should apply to most SSDs
as well.)

 partitioning (GPT, MBR, BIOS?)
 
 It should not matter.

GPT apparently has alignment issues, so I would avoid that for now. If
you are booting from the SSD, you would need BIOS support anyway.

J.
-- 
My memories gild my life with rare transcendance.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: best labtop for debian

2011-02-09 Thread Jochen Schulz
Andrei Popescu:
 
 Of course, a ThinkPad is not perfect for everyone,

True.

 here are some possible cons:
 
 - battery life is not very good

Depends on the model and the battery.

 - quite heavy

Dito. My 12 X200 weighs less than 1.5kg. Quite portable, I would say.

 - many models have only a TrackPoint
 - not stylish

That's a matter of taste. :) But you forgot the most miportant reason:
price.

J.
-- 
As a child I pulled the legs from a spider.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: best labtop for debian

2011-02-08 Thread Jochen Schulz
hamed hosseini:
 i want buy labtop,tell me best labtop for debian os?
 900$-1300$
 my choice is lenovo labtop

I have been using an X200 for the last two years and I am still very
pleased with it. The X201 is a bit more expensive and features more
recent CPUs, but you might want to consider getting an X200 with an
old CPU and invest the money you saved in a high quality SSD. I am
using an Intel X25m (1st generation) and I love it.

J.
-- 
When standing at the top of beachy head I find the rocks below very
attractive.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Sticking with Lenny

2011-02-08 Thread Jochen Schulz
Tony van der Hoff:

 I have a headless VPS running Lenny. For the time being, until I get
 some time to attend to it, I wish to keep it that way. However, my
 sources.list points to stable:

Then change that to lenny and run apt-get update. If you didn't
install any packages from squeeze (which you would remember since it
would pull in tons of upgrades), it's not too late to do that.

J.
-- 
I cannot comprehend the idea of chemical and biological weapons.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: sid: upgrade wants to remove xserver packages

2011-02-07 Thread Jochen Schulz
Hugo Vanwoerkom:
 
 Doing a dist-upgrade in Sid this morning wants to remove all xserver
 packages. Wait a bit?

That's why I always preach not to run dist-upgrades (or full-upgrades,
as aptitude calls them) but simple upgrades. That way you won't have to
fear removing half of your system.

J.
-- 
I am no longer prepared to give you the benefit of the doubt.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: How to use mount.crypt remount

2011-02-03 Thread Jochen Schulz
T o n g:
 
 I can't figure out how to use the remount option of mount.crypt from its 
 man page. All the following that I've tried have failed:
 
  mount.crypt -o remount ro /dev/sdaxx /mnt/point
  mount.crypt -v -o remount=ro /dev/sdaxx /mnt/point

Use a comma to separate mount options, just like in the /etc/fstab:

mount -o remount,ro …

J.
-- 
If I could have anything in the world it would have to be more money.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Help with Sun Java in Debian Sid

2011-01-31 Thread Jochen Schulz
Nick Lidakis:
 On Mon, Jan 31, 2011 at 01:49:10AM +0100, Jochen Schulz wrote:
 Java includes tons of alternatives, not only java. I guess you still
 have other alternatives pointing to openjdk. Use
 'update-java-alternatives' to fix them all at once and try again.
 
 This is what I get:
 
 phobos:/home/nick# update-java-alternatives -s java-6-sun
 update-alternatives: error: no alternatives for appletviewer.
 update-alternatives: error: no alternatives for apt.
 update-alternatives: error: no alternatives for extcheck.
…

I /think/ these messages are ok because you have installed a JRE and not
a complete JDK. But I don't know how to help ypu further.

J.
-- 
I enjoy shopping, eating, sex and doing jigsaw puzzles of idealised
landscapes.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Help with Sun Java in Debian Sid

2011-01-30 Thread Jochen Schulz
Nick Lidakis:
 
 In trying to track down what was going on, I realized I had the Sun Java jre
 installed from the non-free repository and openjdk-6-jre
 openjdk-6-jre-headless. I tried using update-aletrnatives --config java to
 pick between the two to no avail. I removed the openjdk packages and
 currently only have Sun's Java installed.

Java includes tons of alternatives, not only java. I guess you still
have other alternatives pointing to openjdk. Use
'update-java-alternatives' to fix them all at once and try again.

J.
-- 
If nightclub doormen recognised me I would be more fulfilled.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: loud f'ing noise

2011-01-28 Thread Jochen Schulz
shawn wilson:
 
 second, where do i find the cause of this alarm? i looked in my the log
 files of when it started (well, kern, messages, syslog) and sent along the
 only thing i saw... now, this was a $400 supermicro motherboard when i
 bought it a few years ago,

I have a Supermicro board as well (X7SPA) and while it doesn't contain a
regular PC speaker, it's got that small, cylindrycal thing on it that
starts beeping unbearably loud for not reason at all. Much like yours.

My guess is that it has something to do with the board losing it's
threshold values for temperature alarms and at the same time
mis-reporting some temps. Take a look here:

http://well-adjusted.de/~jrschulz/gfx/x7spa-temps.png

The sudden jump in week 2 is completely bogus. At the same time,
lm-sensors reports an alarm temperature if 0°C.  I ended up just
disabling the alarm noise with a jumper on the mainboard. Now I am only
notified about this status using a red LED on the case (right next to
power, HD LEDs etc.)

 so i suppose the bios might have a logging
 mechanism (like i've seen on some dells). how would i access that?

You can use lm-sensors to see whether you get erratic temp readings as
well.

 i agree that i should get notified of messed up things. however, if
 something happens (ie, ram issue that ecc catches) i should be notified
 about it and allowed to go about my day. just saying, i think i lost quite a
 bit of sanity listening to that thing for over an hour.

I guess that's the way Supermicro does things. My only solution (apart
from disabling the speaker) is to reboot the machine when it starts to
beep.

J.
-- 
We are lining up to see you fall flat on your face.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Recommendation for buy Hardware

2011-01-28 Thread Jochen Schulz
Henrique de Moraes Holschuh:
 On Fri, 28 Jan 2011, Alfonso Ruiz wrote:
 The ST2000DL003 is 4096 bytes per sector, can this have problems with
 squeeze?
 
 Squeeze tries to align everything to 1MB boundaries, so it shouldn't cause
 problems.

Do you refer to the installer only, or does that apply to the usual
tools (parted/cfdisk, LVM, cryptseup) as well?

J.
-- 
I will not admit to failure even when I know I am terribly mistaken and
have offended others.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: java 5 in squeeze

2011-01-28 Thread Jochen Schulz
Andrew McGlashan:
 Vu Ngoc VU wrote:
 
 As sun-java5-jre doesn't exist on Squeeze, there is no clue.
 But if you want to install some package that have the same name on
 both distros, you can use option -t with apt-get.
 
 If sun-java5 continues to be important, then why not have a port in
 squeeze too?

Probably because it isn't supported upstream anymore:

http://java.sun.com/j2se/1.5/

| Java SE 5.0 is in its Java Technology End of Life (EOL) transition
| period. The EOL transition period began April 8th, 2007 and will
| complete October 8th, 2009, when Java SE 5.0 will have reached its End
| of Service Life (EOSL).

J.
-- 
If politics is the blind leading the blind, entertainment is the fucked-
up leading the hypnotised.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Recommendation for buy Hardware

2011-01-28 Thread Jochen Schulz
Henrique de Moraes Holschuh:
 On Fri, 28 Jan 2011, Jochen Schulz wrote:
 Henrique de Moraes Holschuh:
 
 Squeeze tries to align everything to 1MB boundaries, so it shouldn't cause
 problems.
 
 Do you refer to the installer only, or does that apply to the usual
 tools (parted/cfdisk, LVM, cryptseup) as well?
 
 The installer, but get RC2 or newer.  And up-to-date squeeze.

 [… snipped tons of useful info]

Thanks a lot!

J.
-- 
If I could travel through time I would go back to yesterday and
apologise.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Linux disk partition encryption

2011-01-27 Thread Jochen Schulz
Sjoerd Hardeman:
 Celejar schreef:
 
 Oh, basically the Evil Maid attack.  Fair enough.  But then you have to
 make sure the attacker can't flash the BIOS ...

 Bother to explain how it works? If you have an encrypted partition,
 no adapted kernel will ever be able to access it.

Of course it can. You are entering the passphrase as usual and besides
working as usual, your kernel performs a few extra tasks.

J.
-- 
I think the environment will be okay.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Let's talk about HTTPS Everywhere

2011-01-26 Thread Jochen Schulz
Celejar:
 On Tue, 25 Jan 2011 07:58:28 +0100
 
 A single core get's used 100% by the kworker thread. But actually it's
 not 20MB/s, but 25MB/s while reading (decrypting) and 35MB/s while
 writing (encrypting). I just tested it again.
 
 So does that mean that your wireless throughput with encryption enabled
 is CPU-bound, and that you'd be getting better throughput with a more
 powerful CPU (or without encryption)?

No. The numbers I posted were about disk encryption. They were just
meant to illustrate what throughput is possible with AES if it is done
by a comparably slow CPU (Atom D510, 1.66GHz).

With WPA2/AES you have significantly less throughput (typically 10%)
and, as far as I know, wifi encrpytion is done by the hardware and not
the host CPU. But even if it's done on the host CPU: my numbers show
that you really don't need to care about that very much, as long as your
system isn't older than, say, 6-8 years.

(Disclaimer: I am unsure whether WPA2 with AES actually performs the
same as LUKS using AES. But my guess is that it's not far off.)

J.
-- 
I am not scared of death but terrified of people in Tommy Hilfiger
sweatshirts.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Linux disk partition encryption

2011-01-26 Thread Jochen Schulz
Celejar:
 Brad Alexander stor...@gmail.com wrote:
 
 Linux admins used LUKS, and as a further step, I put /boot (the only
 partition that cannot be encrypted) on a USB stick, so that if anyone
 got the laptop, they had no access to the data.
 
 Why does putting /boot on a USB stick gain you anything?

Because an unencrypted /boot may be altered by an attacker without you
noticing it.  Theoretically, the kernel may be replaced by another one
that reports your passphrase to the attacker.

J.
-- 
I feel yawning hollowness whilst talking to people at parties.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Linux disk partition encryption

2011-01-26 Thread Jochen Schulz
Celejar:
 Jochen Schulz m...@well-adjusted.de wrote:
 Celejar:
 
 Why does putting /boot on a USB stick gain you anything?
 
 Because an unencrypted /boot may be altered by an attacker without you
 noticing it.  Theoretically, the kernel may be replaced by another one
 that reports your passphrase to the attacker.
 
 Oh, basically the Evil Maid attack.  Fair enough.  But then you have to
 make sure the attacker can't flash the BIOS ...

Exactly. I didn't remember there was a name for this attack.

J.
-- 
There is no justice in road accidents.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: putting /tmp to memory help

2011-01-25 Thread Jochen Schulz
Celejar:
 
 I'm somewhat confused about this.  My system has 2GB of RAM, and I have:
 
 $ uptime
  20:46:09 up 5 days,  5:30,  9 users,  load average: 0.06, 0.09, 0.25
 
 $ free
  total   used   free sharedbuffers cached
 Mem:   206517210473121017860  0  66064 357512
 -/+ buffers/cache: 6237361441436
 Swap:  1949688 1023641847324

This shows that ~620MB are used for applications and data. About 400MB
is used for buffers/cache (don't ask me what the difference is).

 $ df | grep tmp
 tmpfs  103258416   1032568   1% /lib/init/rw
 tmpfs  1032584 0   1032584   0% /dev/shm
 none   1032584  2440   1030144   1% /tmp
 
 So my /tmp is using 1GB.

No. Your /tmp might grow up to 1GB, but it only occupies what's really
necessary. This is the main difference between tmpfs and a traditional
RAM disk. Someone posted an interesting link about this topic, IIRC in
this very thread.

J.
-- 
I use a Playstation to block out the existence of my partner.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Apache SSL named based virtual hosts

2011-01-25 Thread Jochen Schulz
Bob Proulx:
 Jochen Schulz wrote:

 Modern browsers appear to support that TLS extension:
 https://secure.wikimedia.org/wikipedia/en/wiki/Server_Name_Indication#Browser\
 s
 
 I will implement this in a test installation and get some experience
 with this feature.  The future looks brighter!

The funny thing is that this new standard gets adopted at the time
where many ISPs seriously start thinking about IPv6 where address
shortage is not an issue anymore. ;-)

 When using this, you run into problems with IE7, though…
 Personally, I have never seen this in production.
 
 Let me vilify MSIE 6 and say that it needs to die.  Its use is
 damaging to the community.

Sure, and I agree with the rest of what you said. But beware: the
Wikipedia link suggests that SNI isn't supported at all for IE on
Windows XP.

J.
-- 
Driving behind lorries carrying hazardous chemicals makes me wish for a
simpler life.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Question related to FDE (Full Disk Encryption) solution under Linux Debian Lenny

2011-01-24 Thread Jochen Schulz
(Ccing the OP since I am unsure whether he reads the list.)

Thomas Nguyen Van:
 
 Our company needs to encrypt hard drives on our machines running under
 Linux Debian Lenny. […]

Instead of reposting your question from last Wednesday, it would be more
polite to answer to the replies you already received on the list. In case
you are not subscribed, you can see your thread here:

http://lists.debian.org/debian-user/2011/01/msg01292.html

J.
-- 
I feel yawning hollowness whilst talking to people at parties.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


  1   2   3   4   5   6   7   8   9   10   >