Re: AW: AW: su su- sudo dont work

[chris]

Bump?

On Wed, Feb 14, 2024 at 3:29 PM chris  wrote:

> Yes there are many updated kernels to choose from. Please go ahead and do
> so
>
>
>
> On Sat, Feb 10, 2024 at 8:21 AM Schwibinger Michael 
> wrote:
>
>> Yes.
>>
>>
>> I found out
>> I do use an old kernel.
>>
>> Can LINUX update a kernel?
>>
>> Regards
>> Sophie
>>
>>
>> --
>> *Von:* chris 
>> *Gesendet:* Mittwoch, 7. Februar 2024 19:35
>> *An:* Schwibinger Michael 
>> *Betreff:* Re: AW: AW: su su- sudo dont work
>>
>> Very helpful ty
>>
>> On Wed, Feb 7, 2024, 1:57 PM Schwibinger Michael 
>> wrote:
>>
>> Good afternoon.
>>
>> The bug report
>>
>> sudo ...
>> You are not in the sudoers file.
>> Regards
>> Sophie
>>
>>
>> --
>> *Von:* Hans 
>> *Gesendet:* Freitag, 26. Januar 2024 18:44
>> *An:* debian-user@lists.debian.org 
>> *Betreff:* Re: AW: AW: su su- sudo dont work
>>
>>
>> Am Freitag, 26. Januar 2024, 17:23:07 CET schrieben Sie:
>>
>> Yes, if you want to install soemthing for example by using the apt
>> command, best way is becoming root with the command "su -" and then install
>> the rquired package.
>>
>>
>> Example:
>>
>> su -  then enter the password of the user root
>>
>>
>> If installing for example firefox, first read the repository:
>>
>>
>> apt update
>>
>>
>> then install the package
>>
>>
>> apt install firefox-esr
>>
>>
>> -
>>
>>
>> Hint: If you want a graphical method and you have no X and Wndow-Manager
>> running (like KDE, Gnome, XFCE whatever), I suggest using aptitude.
>>
>>
>> You have to install aptitude first:
>>
>>
>> apt install aptitude
>>
>>
>> Then you can start the gui with the command "aptitude" as root.
>>
>>
>> Hint 2: aptitude is controlled by keypresses without any enter-key.
>>
>> For example, when started aptitude, just press the "u" key and it reads
>> the update, "U" (Shift + u)  marks all newer packages automatically to be
>> updated, then press "g" and you will shwo, what it will do. Press "g"
>> again, and it will do the update.
>>
>>
>> Please note: If you want to upgrade the whole sytem, then using apt or
>> apt-get will be the better choice!
>>
>>
>> But aptitude is very well for installing single packages or weekly
>> upgrades, where not much packages will be renewed.
>>
>>
>> If you are not much experienced, and you have a window-manager running
>> like KDE, Gnome, XFCE, LXDE or another one, then look at synaptic. Synaptic
>> is a graphical tool for installing packages, it is a GUI for apt.
>>
>>
>> Synaptic MUST run as root.
>>
>>
>> Hope this helps.
>>
>>
>> By the way: I believe, you are not very experienced in English language,
>> so I suggest to suscribe in the fine German forum,
>>
>> which is debian-user-ger...@lists.debioan.org.
>>
>>
>> Here is the link:
>>
>> https://lists.debian.org/debian-user-german/
>>
>>
>> Good luck!
>>
>>
>> Hans
>>
>>
>>
>> > Sorry
>>
>> > it was my mistake
>>
>> >
>>
>> > It is
>>
>> >
>>
>> > su -
>>
>> > su
>>
>> > or sudo.
>>
>> >
>>
>> > Sorry.
>>
>> >
>>
>> > Is su -
>>
>> > the best for install?
>>
>> >
>>
>> > Regards
>>
>> >
>>
>> > Sophie
>>
>> >
>>
>> >
>>
>> > 
>>
>> >
>>
>>

Re: AW: AW: su su- sudo dont work

[chris]

Yes there are many updated kernels to choose from. Please go ahead and do so



On Sat, Feb 10, 2024 at 8:21 AM Schwibinger Michael 
wrote:

> Yes.
>
>
> I found out
> I do use an old kernel.
>
> Can LINUX update a kernel?
>
> Regards
> Sophie
>
>
> --
> *Von:* chris 
> *Gesendet:* Mittwoch, 7. Februar 2024 19:35
> *An:* Schwibinger Michael 
> *Betreff:* Re: AW: AW: su su- sudo dont work
>
> Very helpful ty
>
> On Wed, Feb 7, 2024, 1:57 PM Schwibinger Michael  wrote:
>
> Good afternoon.
>
> The bug report
>
> sudo ...
> You are not in the sudoers file.
> Regards
> Sophie
>
>
> --
> *Von:* Hans 
> *Gesendet:* Freitag, 26. Januar 2024 18:44
> *An:* debian-user@lists.debian.org 
> *Betreff:* Re: AW: AW: su su- sudo dont work
>
>
> Am Freitag, 26. Januar 2024, 17:23:07 CET schrieben Sie:
>
> Yes, if you want to install soemthing for example by using the apt
> command, best way is becoming root with the command "su -" and then install
> the rquired package.
>
>
> Example:
>
> su -  then enter the password of the user root
>
>
> If installing for example firefox, first read the repository:
>
>
> apt update
>
>
> then install the package
>
>
> apt install firefox-esr
>
>
> -
>
>
> Hint: If you want a graphical method and you have no X and Wndow-Manager
> running (like KDE, Gnome, XFCE whatever), I suggest using aptitude.
>
>
> You have to install aptitude first:
>
>
> apt install aptitude
>
>
> Then you can start the gui with the command "aptitude" as root.
>
>
> Hint 2: aptitude is controlled by keypresses without any enter-key.
>
> For example, when started aptitude, just press the "u" key and it reads
> the update, "U" (Shift + u)  marks all newer packages automatically to be
> updated, then press "g" and you will shwo, what it will do. Press "g"
> again, and it will do the update.
>
>
> Please note: If you want to upgrade the whole sytem, then using apt or
> apt-get will be the better choice!
>
>
> But aptitude is very well for installing single packages or weekly
> upgrades, where not much packages will be renewed.
>
>
> If you are not much experienced, and you have a window-manager running
> like KDE, Gnome, XFCE, LXDE or another one, then look at synaptic. Synaptic
> is a graphical tool for installing packages, it is a GUI for apt.
>
>
> Synaptic MUST run as root.
>
>
> Hope this helps.
>
>
> By the way: I believe, you are not very experienced in English language,
> so I suggest to suscribe in the fine German forum,
>
> which is debian-user-ger...@lists.debioan.org.
>
>
> Here is the link:
>
> https://lists.debian.org/debian-user-german/
>
>
> Good luck!
>
>
> Hans
>
>
>
> > Sorry
>
> > it was my mistake
>
> >
>
> > It is
>
> >
>
> > su -
>
> > su
>
> > or sudo.
>
> >
>
> > Sorry.
>
> >
>
> > Is su -
>
> > the best for install?
>
> >
>
> > Regards
>
> >
>
> > Sophie
>
> >
>
> >
>
> > 
>
> >
>
>

Re: AW: AW: su su- sudo dont work

[chris]

Nobody has ever used it no

On Wed, Feb 7, 2024, 2:17 PM Schwibinger Michael  wrote:

>
> Good afternoon
>
> I did send the bugreport.
>
> Thank You.
> Did anybody use the rescue mode?
>
> Regards Sophie
>
>
> --
> *Von:* Andrew M.A. Cater 
> *Gesendet:* Mittwoch, 31. Januar 2024 20:36
> *An:* debian-user@lists.debian.org ;
> Schwibinger Michael 
> *Betreff:* Re: AW: AW: su su- sudo dont work
>
> On Wed, Jan 31, 2024 at 01:58:41PM +, Schwibinger Michael wrote:
> > Good afternoon
> > I think
> > maybe Im sure
> > it is because of rescue mode.
> >
> Hi Sophie,
>
> Once again: we need to you to show us what commands you run.
>
> We need to see error messages.
>
> if you cannot run sudo or su, we need you to run the id command
> as previously suggested.
>
> We have literally nothing of use from you to help any of us problem
> solve. This is throwing good effort away in persuading you to help us.
>
> Also - please address requests first to the list and not to individuals -
> it makes it a lot easier to follow on the list.
>
> > Normal booting did not have this problem.
> >
> > Anybody familiar with panic?
> >
> > Regards
> > Thank You
> > Sophie
> >
> Andy
> >
> > 
> > Von: Andrew M.A. Cater 
> > Gesendet: Donnerstag, 25. Januar 2024 18:40
> > An: debian-user@lists.debian.org 
> > Betreff: Re: AW: su su- sudo dont work
> >
> > On Thu, Jan 25, 2024 at 03:53:10PM +, Schwibinger Michael wrote:
> > > Good afternoon
> > > Why do I have to open a group?
> > >
> >
> > This is to *tell* us information about why you're having problems with su
> > and sudo
> >
> > Running the
> >
> > id
> >
> > command should give you information like
> >
> > uid=1000(amacater) gid=1000(amacater) groups=1000(amacater),27(sudo)
> >
> > which shows you that my user - amacater - is the first user on the
> > machine (because Debian starts user id numbers at 1000 for ordinary
> > users) and that I'm a member of group sudo - so can use sudo instead of
> su.
> >
> > /etc/sudoers will show you what privileges the sudo user has.
> > Here are the last lines of the file on my machine (which has not been
> > modified from Debian defaults)
> >
> > # User privilege specification
> > rootALL=(ALL:ALL) ALL
> >
> > # Allow members of group sudo to execute any command
> > %sudo   ALL=(ALL:ALL) ALL
> >
> > # See sudoers(5) for more information on "@include" directives:
> >
> > @includedir /etc/sudoers.d
> > (END)
> >
> > If you are _not_ a user of group sudo for whatever reason - and want to
> > use sudo - then you will need root privileges and the root password
> > (once) to add your user name to the group.
> >
> > For example: adduser sophie sudo
> >
> > I hope this helps
> >
> > > 2 years ago
> > > sudo was no problem.
> > >
> >
> > As yet, we have *no idea* what you have done in the last two years to
> > break your Debian system - or even to know which kernel you boot or
> > how you "rescue" your system when you log onto it every day.
> >
> > Please give us information in order that the readers on this list can
> > use their knowledge to help you.
> >
> > With every good wish, as ever,
> >
> > Andy
> > (amaca...@debian.org)
> > > Regards
> > >
> > > Sophie
> > >
> > > Thank You
> > > 
> > > Von: Timothy M Butterworth 
> > > Gesendet: Montag, 22. Januar 2024 00:07
> > > An: Schwibinger Michael 
> > > Cc: Greg Wooledge ; debian-user@lists.debian.org <
> debian-user@lists.debian.org>
> > > Betreff: Re: su su- sudo dont work
> > >
> > >
> > >
> > > On Sun, Jan 21, 2024 at 4:07 PM Schwibinger Michael  > wrote:
> > > Thank You
> > > Example
> > > I say
> > >
> > > sudo apt-get install firefox
> > > Reaction LINUX
> > > This is not allowed we send a message to the admin.
> > >
> > > This error message means that your account is not in the sudo group.
> > >
> > > Run the command "groups" and look for the group sudo.
> > > groups
> > >
> > > Here is the command to add a user account to the sudo group. You will
> need to run it as root.
> > > usermod -a -G sudo 
> > >
> > > I do open root terminal
> > > there its working.
> > > Regards
> > > Sophie
> > >
> > > 
> > > Von: Greg Wooledge mailto:g...@wooledge.org>>
> > > Gesendet: Samstag, 20. Januar 2024 14:14
> > > An: debian-user@lists.debian.org
> mailto:debian-user@lists.debian.org>>
> > > Betreff: Re: su su- sudo dont work
> > >
> > > On Sat, Jan 20, 2024 at 01:26:06PM +, Schwibinger Michael wrote:
> > > > Good afternoon.
> > > > Root terminal is fine.
> > > > What do I do wrong?
> > > > What did I destroy?
> > > >
> > > > PC does have only one user=admin.
> > > >
> > > > Regards Sophie
> > > > Is it the rescue mode?
> > >
> > > Explain, please.
> > >
> > > Your Subject: header says "su su- sudo dont work".  What does this
> MEAN?
> > >
> > > Please show us your attempts to USE each of these commands, and the

Re: AW: AW: su su- sudo dont work

[chris]

Very helpful ty

On Wed, Feb 7, 2024, 1:57 PM Schwibinger Michael  wrote:

> Good afternoon.
>
> The bug report
>
> sudo ...
> You are not in the sudoers file.
> Regards
> Sophie
>
>
> --
> *Von:* Hans 
> *Gesendet:* Freitag, 26. Januar 2024 18:44
> *An:* debian-user@lists.debian.org 
> *Betreff:* Re: AW: AW: su su- sudo dont work
>
>
> Am Freitag, 26. Januar 2024, 17:23:07 CET schrieben Sie:
>
> Yes, if you want to install soemthing for example by using the apt
> command, best way is becoming root with the command "su -" and then install
> the rquired package.
>
>
> Example:
>
> su -  then enter the password of the user root
>
>
> If installing for example firefox, first read the repository:
>
>
> apt update
>
>
> then install the package
>
>
> apt install firefox-esr
>
>
> -
>
>
> Hint: If you want a graphical method and you have no X and Wndow-Manager
> running (like KDE, Gnome, XFCE whatever), I suggest using aptitude.
>
>
> You have to install aptitude first:
>
>
> apt install aptitude
>
>
> Then you can start the gui with the command "aptitude" as root.
>
>
> Hint 2: aptitude is controlled by keypresses without any enter-key.
>
> For example, when started aptitude, just press the "u" key and it reads
> the update, "U" (Shift + u)  marks all newer packages automatically to be
> updated, then press "g" and you will shwo, what it will do. Press "g"
> again, and it will do the update.
>
>
> Please note: If you want to upgrade the whole sytem, then using apt or
> apt-get will be the better choice!
>
>
> But aptitude is very well for installing single packages or weekly
> upgrades, where not much packages will be renewed.
>
>
> If you are not much experienced, and you have a window-manager running
> like KDE, Gnome, XFCE, LXDE or another one, then look at synaptic. Synaptic
> is a graphical tool for installing packages, it is a GUI for apt.
>
>
> Synaptic MUST run as root.
>
>
> Hope this helps.
>
>
> By the way: I believe, you are not very experienced in English language,
> so I suggest to suscribe in the fine German forum,
>
> which is debian-user-ger...@lists.debioan.org.
>
>
> Here is the link:
>
> https://lists.debian.org/debian-user-german/
>
>
> Good luck!
>
>
> Hans
>
>
>
> > Sorry
>
> > it was my mistake
>
> >
>
> > It is
>
> >
>
> > su -
>
> > su
>
> > or sudo.
>
> >
>
> > Sorry.
>
> >
>
> > Is su -
>
> > the best for install?
>
> >
>
> > Regards
>
> >
>
> > Sophie
>
> >
>
> >
>
> > 
>
> >
>

Re: Connamon: Desklet "Network usage monitor" fills logfiles

[Chris Jölly]

Hello,

that issue was already reported "upstream" and is fixed in the meantime. 
The issue was a compatibility issue with Clutter.


Cheers

On 1/14/24 18:11, Chris Jölly wrote:


Hello,

I try to use the desklet Network usage monitor which I can download 
using the Desklet control.


It downloads and installs without issues, and when I try to activate 
it it is not shown on the desktop. vnstat and vnstati are installed.


Looking into the logs with journalctl, the following error message is 
shown 3 times every 2 seconds:


Jan 14 08:07:58 laptop1 cinnamon[2643]: JS ERROR: TypeError: 
Clutter.Texture is not a constructor

_updateGraph/<@/home/chris/.local/share/cinnamon/desklets/netus...@30yavash.com/4.0/desklet.js:144:29
spawnCommandLineAsync/<@/usr/share/cinnamon/js/misc/util.js:206:17

The code around line 144 in desklet.js is:

   if (this._device != "null") {
   if (!this.useExtendedDisplay) { this.extendedDisplay = 
"-s" };
   let image = 
`${path}/vnstatImage_${this._device}_${this.extendedDisplay}.png`;
   let command = 'vnstati ' + this.extendedDisplay + ' -ne 
-i ' + this._device + ' -o ' + image ;

// GLib.spawn_command_line_async(command);

   Util.spawnCommandLineAsync(command, () => {
    let l = new Clutter.BinLayout();
    let b = new Clutter.Box();
    let c = new Clutter.Texture({keep_aspect_ratio: 
true, filter_quality: 2, filename: image });

    b.set_layout_manager(l);
*    b.add_actor(c);*
    this.imageWidget.destroy_all_children();
    this.imageWidget.set_child(b);
    });
 }


I used Alf+F2 and "lg" to get more insights, but was not successful. I 
can see that Clutter is provided with the package cinnamon-common, but 
I could not find the definition of Clutter.Texture. But I am not a 
Javscript developer, so just tried to grep around a little bit.


I read that whole Clutter is already unmaintained. Does it look like 
those Clutter based Cinnamon stuff is slowly fading out?


BR

Chris

Connamon: Desklet "Network usage monitor" fills logfiles

[Chris Jölly]

Hello,

I try to use the desklet Network usage monitor which I can download 
using the Desklet control.


It downloads and installs without issues, and when I try to activate it 
it is not shown on the desktop. vnstat and vnstati are installed.


Looking into the logs with journalctl, the following error message is 
shown 3 times every 2 seconds:


Jan 14 08:07:58 laptop1 cinnamon[2643]: JS ERROR: TypeError: 
Clutter.Texture is not a constructor

_updateGraph/<@/home/chris/.local/share/cinnamon/desklets/netus...@30yavash.com/4.0/desklet.js:144:29
spawnCommandLineAsync/<@/usr/share/cinnamon/js/misc/util.js:206:17

The code around line 144 in desklet.js is:

   if (this._device != "null") {
   if (!this.useExtendedDisplay) { this.extendedDisplay = 
"-s" };
   let image = 
`${path}/vnstatImage_${this._device}_${this.extendedDisplay}.png`;
   let command = 'vnstati ' + this.extendedDisplay + ' -ne 
-i ' + this._device + ' -o ' + image ;

// GLib.spawn_command_line_async(command);

   Util.spawnCommandLineAsync(command, () => {
    let l = new Clutter.BinLayout();
    let b = new Clutter.Box();
    let c = new Clutter.Texture({keep_aspect_ratio: 
true, filter_quality: 2, filename: image });

    b.set_layout_manager(l);
*    b.add_actor(c);*
    this.imageWidget.destroy_all_children();
    this.imageWidget.set_child(b);
    });
 }


I used Alf+F2 and "lg" to get more insights, but was not successful. I 
can see that Clutter is provided with the package cinnamon-common, but I 
could not find the definition of Clutter.Texture. But I am not a 
Javscript developer, so just tried to grep around a little bit.


I read that whole Clutter is already unmaintained. Does it look like 
those Clutter based Cinnamon stuff is slowly fading out?


BR

Chris

Hi, I'm using Neptune os. I'm new to Debian. I got it it successfully installsd, how do I setup network?

[Chris Goody]

Neptune is based on Debian, I cant also activate my wired connection via USB 
tethering. It says actives. But not fully on.


I use Realtek drivers and rtw89.

Sent from Mail for Windows

Debian 12 - Problème installation - QILIVE Network USB WIFI Key DU

[Chris Hawkins]

Bonjour,

Cette semaine j'ai acheté l'appareil suivant dans un magasin Auchan :
QILIVE Network USB WIFI Key DU

https://www.auchan.fr/qilive-network-usb-cle-wifi-du-noire/pr-C1354768

J'avais établi que cela correspond à : ID 0bda:c811 Adaptateur Wi-Fi USB
Realtek RTL8811CU/RTL8821CU

Mon ordinateur est un HP ProBook 6476b avec 8 Go de RAM

Cet appareil a installé :

Debian GNU/Linux 12
Linux 6.1.0-13-amd64

Suite à des recherches sur le web, j'ai installé le pilote suivant :

clone git https://github.com/brektrou/rtl8821CU.git

Même avec ce pilote installé, cette clé wifi usb ne fonctionne pas.

Je l'ai essayé sur un ordinateur portable Lenovo plus moderne avec le même
système Linux et de la même version. Ça ne marche pas.

J'ai essayé la clé avec un ordinateur sur lequel Windows 10 est installé.
Ça marche. La lumière bleue apparaît.

Il n'y a pas de driver disponible pour Linux sur l'appareil ni sur le site
Auchan ni sur le site QILIVE.

Je remercierais toute personne qui pourrait aider à résoudre ce problème.

Chris

Re: EPSON ET M 1120 new printer: If You can read this, you are using the wrong driver

[chris]

I know its only may but this has to win thread of the year

On Mon, May 15, 2023, 4:46 AM Schwibinger Michael  wrote:

> Good morning
>
> Thank You.
>
> EPSON said
> EPSON only works with WIN.
>
> Regards
> Sophie
>
>
>
> --
> *Von:* Brian 
> *Gesendet:* Sonntag, 7. Mai 2023 22:57
> *An:* debian-user@lists.debian.org 
> *Betreff:* Re: EPSON ET M 1120 new printer: If You can read this, you are
> using the wrong driver
>
> On Sun 07 May 2023 at 20:27:53 +, Andrew M.A. Cater wrote:
>
> I offer the following in the interest of correctness and just in case
> Schwibinger
> Michael gets even more confused or disheartened and considers going away
> :).
>
> > From looking on Epson's website:
> >
> > 1. They do not support this printer under Linux officially
>
>   http://download.ebz.epson.net/dsc/search/01/search/searchModule
>
> Or, for a direct download
>
>   https://download3.ebz.epson.net/dsc/f/03/00/14/48/15/1d37501ad39bd2b5753
> \
>
> > 2. The printer is listed as a printer supported only under Windows - lots
> > of variants.
>
> brian@test-new:~$ /usr/sbin/lpinfo -m | grep -i ET-M1120
> escpr:0/cups/model/epson-inkjet-printer-escpr/Epson-ET-M1120_Series-epson-escpr-en.ppd
> \
> EPSON ET-M1120 Series , Epson Inkjet Printer Driver (ESC/P-R) for Linux
>
> --
> Briana.
>
>

Re: EPSON ET M 1120 new printer: If You can read this, you are using the wrong driver

[chris]

SUCCESS

On Fri, May 12, 2023, 1:41 PM Schwibinger Michael  wrote:

>
> Good afternoon
>
> I ll give the paper to a friend.
> He is owning a scanner.
> He ll scan it and I ll send it to the group.
>
> Thank You for help.
>
> Regards
> Sophie
> Thank You
>
>
> --
> *Von:* Greg Wooledge 
> *Gesendet:* Sonntag, 7. Mai 2023 12:51
> *An:* debian-user@lists.debian.org 
> *Betreff:* Re: EPSON ET M 1120 new printer: If You can read this, you are
> using the wrong driver
>
> On Sun, May 07, 2023 at 09:26:33AM +, Schwibinger Michael wrote:
> > There are some other messages from the printer.
> >
> > Are they important?
>
> How on earth would we know whether the messages are important without
> seeing them?
>
> This is why nobody is offering you any more help.  You are presenting
> yourself as either a troll, or as someone who is so fundamentally
> incompetent that helping you is impossible.
>
> Do you want my advice?  Go find a local Linux users group, and ask them
> what kind of printers they're using.  Then buy one of THOSE printers,
> and have the Linux users group help you set it up.
>
>

Re: EPSON ET M 1120 new printer: If You can read this, you are using the wrong driver

[chris]

True

On Wed, May 10, 2023, 11:08 AM Lee  wrote:

> On 5/10/23, Schwibinger Michael  wrote:
>
> nothing of interest .. same as every other day.
>
> *plonk*
>
>

Re: EPSON ET M 1120 new printer: If You can read this, you are using the wrong driver

[chris]

What is the issue with the printer?

On Wed, May 10, 2023, 10:58 AM Schwibinger Michael  wrote:

> Good morning
> Can somebody help with the printer.
>
> Can You wrote as topic:
>
> "joke".
>
> Regards
> Thank You
>
> Sophie
>
>
>
> --
> *Von:* Thomas Schmitt 
> *Gesendet:* Freitag, 5. Mai 2023 10:01
> *An:* debian-user@lists.debian.org 
> *Betreff:* Re: EPSON ET M 1120 new printer: If You can read this, you are
> using the wrong driver
>
> Hi,
>
> to...@tuxteam.de wrote:
> > 1. I am not a German
> > 2. This is not a joke
> > 3. At least one of 1, 2, or 3 is false
>
> So the most humorous guess would be that you are a german philosopher.
>
>
> Have a nice day :)
>
> Thomas
>
>

Re: EPSON ET M 1120 new printer: If You can read this, you are using the wrong driver

[chris]

Any update on the status of this Epson printer? The world is dying to know
the outcome of this saga

On Mon, May 8, 2023, 2:35 PM Brad Rogers  wrote:

> On Mon, 8 May 2023 12:37:35 -0400
> chris  wrote:
>
> Hello chris,
>
> >Are we at the point yet where this has enough attention it would have
> >been cheaper to crowd fund a new printer?? 藍藍
>
> (smiley noted)
>
> I'm betting even that wouldn't work;  At this point, I'm of the opinion
> (after a quick glance through some of the earlier posts in this thread)
> that the OP may have installed the driver from Debian but has not fired
> up CUPS to actually make use of it.
>
> Given their obvious difficulties with English (not their native tongue,
> so entirely understandable) help from this point would have most likely
> have to take the form of paying them a visit.
>
> --
>  Regards  _   "Valid sig separator is {dash}{dash}{space}"
>  / )  "The blindingly obvious is never immediately apparent"
> / _)rad   "Is it only me that has a working delete key?"
> I'm spending all my money and it's going up my nose
> Teenage Depression - Eddie & The Hot Rods
>

Re: EPSON ET M 1120 new printer: If You can read this, you are using the wrong driver

[chris]

Are we at the point yet where this has enough attention it would have been
cheaper to crowd fund a new printer?? 藍藍

On Mon, May 8, 2023, 12:03 PM Curt  wrote:

> On 2023-05-08, Will Mengarini  wrote:
> >
> > However, when I removed that space by hand, I still got "not found":
> > 
> > debian/pts/3 bash3 ~ 17:03 0$HEAD
> https://download3.ebz.epson.net/dsc/f/03/00/14/48/15/1d37501ad39bd2b5753cce3b2715b3e2fef557/epson-inkjet-printer-escpr_1.7.26-1lsb3.2_amd64.deb
> > 404 Not Found
> > Connection: close
>
>
>
> http://download.ebz.epson.net/dsc/du/02/DriverDownloadInfo.do?LG2=EN==144815=7d1f9cb6b55d10182962d13f26948e0052707a37
>
> It's on the page, after clicking Accept. I can't seem to derive the direct
> link to the file from that page.
>
>

Re: EPSON ET M 1120 new printer: If You can read this, you are using the wrong driver

[chris]

True

On Sun, May 7, 2023, 4:28 PM Andrew M.A. Cater  wrote:

> On Sun, May 07, 2023 at 08:51:29AM -0400, Greg Wooledge wrote:
> > On Sun, May 07, 2023 at 09:26:33AM +, Schwibinger Michael wrote:
> > > There are some other messages from the printer.
> > >
> > > Are they important?
> >
> > How on earth would we know whether the messages are important without
> > seeing them?
> >
> > This is why nobody is offering you any more help.  You are presenting
> > yourself as either a troll, or as someone who is so fundamentally
> > incompetent that helping you is impossible.
> >
>
> OK. I'm going to have one more go at this. For the avoidance of doubt:
> I'll assume that Sophie is genuine - maybe a teenager, certainly
> someone whose first language is German.
>
> I'm going to assume good faith, despite some evidence to the contrary.**
>
> >From looking on Epson's website:
>
> 1. They do not support this printer under Linux officially.
>
> 2. The printer is listed as a printer supported only under Windows - lots
> of variants.
>
> 3. It is listed as a GDI compatible printer - this is indicative of a
> printer
> that requires a specific Windows driver to compose the page.
>
> 4. It is compatible with older Epson printing protocols called Esc/P and
> Esc/P-R.
>
> 5. Epson do have a filter program available to make this printer work
> as an Esc/P printer under Linux using CUPS to manage the printer.
>
> 6. If CUPS setup is possible - you will need to read documents to be
> able to set up CUPS.
>
> See:
> https://www.epson.co.uk/products/printers/inkjet/consumer/ecotank-et-m1120/p/23162
>
> See: https://download.ebz.epson.net/man/linux/escpr.html
>
> > Do you want my advice?  Go find a local Linux users group, and ask them
> > what kind of printers they're using.  Then buy one of THOSE printers,
> > and have the Linux users group help you set it up.
> >
>
> This is possibly not the best advice: I would suggest that you find a
> fellow student who uses Linux and is an enthusiast to help you out.
>
> ** Michael Tobias Schwibinger (or similar spelling) appears to be a
> Dipl. Ing, interested in software, psychology and clown therapy / circus
> skills and clown theory?
>
> In the hope that this can finally put an end to this neverending thread.
>
> With every good wish, as ever,
>
> Andy Cater
>
>

Re: AW: Was it a good idea to buy an Epson printer?

[chris]

Nobody bumped this thread today so here goes 藍

On Wed, May 3, 2023, 5:35 AM Nicolas George  wrote:

> Schwibinger Michael (12023-05-03):
> > What do I do wrong?
>
> Among other things, what you are doing wrong:
>
> - Top posting.
>
> - Using 0x65 0x57 0x3A 0x20 instead of 0x52 0x65 0x3A 0x20 as a reply
>   marker in the subject.
>
> --
>   Nicolas George
>
>

Re: EPSON ET M 1120 new printer: If You can read this, you are using the wrong driver

[chris]

Another runaway thread that never ends lol

On Sat, Apr 22, 2023, 10:25 AM Curt  wrote:

> On 2023-04-15, Brian  wrote:
> >> >
> >> > It is the OP who needs help, not me. She couls at least provide
> correct and full date.
> >> >
> >> Why not just everyone attack each other?
> >
> > There have not been any attacks whatsoever on any users.
> >
> >> This looks like an uncontrolled pillow fight.
> >
> > It only looks that way. In fact, everything is under control.
> >
>
> When you're Under Down, everything looks like a pillow fight.
>
>
>
>

Re: I have achieved PARTIAL SUCCESS in installing Godaddy SSL Certificate in UniFi Cloud Key Gen 2 Plus

[chris]

I always contact the manufacturer of the screws used in the products I buy
rather than the company who assembled the product using said screws.

:)

- chris
On Tue, Oct 25, 2022 at 1:31 PM Kushal Kumaran  wrote:

> On Tue, Oct 25 2022 at 09:56:50 PM, Turritopsis Dohrnii Teo En Ming <
> tdtemc...@gmail.com> wrote:
> > Subject: I have achieved PARTIAL SUCCESS in installing Godaddy SSL
> > Certificate in UniFi Cloud Key Gen 2 Plus
> >
> > Good day from Singapore,
> >
> > I am posting here because UniFi Cloud Key Gen 2 Plus is powered by Debian
> > GNU/Linux 9.
> >
>
> You should contact ubiquiti support, since they're the actual experts on
> the hardware and software they've sold you.
>
> Start here https://help.ui.com/hc/en-us
>
> If you can't find what you need in their documentation and other
> articles there, go to https://account.ui.com/mysupport to speak to
> support personnel.
>
> You'll have much better chances of actually solving problems that way.
> It would require a unifi expert (or possible, advanced unifi users) to
> know how ubiquiti have modified debian for their hardware.  There is a
> non-zero chance such people are present on debian-user, but why not make
> use of the support you've presumably paid for?
>
> > 
>
> --
> regards,
> kushal
>
>

Re: LibreOffice - any way to recover not saved changes to the file?

[Chris Mitchell]

On Wed, 14 Sep 2022 09:37:14 +0200 (CEST)
local10  wrote:

> I actually have it disabled on purpose. The reason is I don't always
> want changes to be autosaved because sometimes the changes make the
> document worse. I wonder if there's some change tracking option in LO
> that would allow to see how the document developed over time.


If you check the checkbox found at:
Edit → Track Changes → Record
it will do exactly that.

Note that it records a *lot* of detail, and can bloat the file size
if the edit history gets long.

Personally, I store most of my documents in a Syncthing share and have
the server-side Syncthing instance set to retain the last 'n' versions
of the file. Each autosave is a new 'version', so there's a balance
between autosave frequency and number of retained versions. Eg autosave
every 30 minutes, retain last 10 versions, that allows 5
hours of continuous working before the state of the file before I sat
down to start the day gets pushed off the stack.

If you want to go all in on "how the document developed over time" and
are comfortable with git, I gather it's possible to set up git hooks
that will unpack the compressed odt file on the fly and commit the
version-able, diff-able contents to a git repo, and vice versa. This
would enable true version control, including branching, tagged release
versions, and so forth. I've never tried this, and can't vouch for how
smoothly it works in practice.

Cheers!
 -Chris

Re: *Now* what is starting ssh-agent? — SOLVED

[Chris Mitchell]

On Thu, 28 Jul 2022 14:51:04 -0300
Chris Mitchell  wrote:

> > On Thu 28 Jul 2022 at 10:35:07 (-0400), Greg Wooledge wrote:  

> > > Given the order of the processes shown in your session-8, it looks
> > > like it might be an XFCE thing.  Maybe start there?  I can't help
> > > you with that, though.  
> 
> Fair enough. Thanks for your insight up to this point!

Found it!  It was indeed very much "an XFCE thing". It's even a
documented behaviour, if you know where to look:
https://docs.xfce.org/xfce/xfce4-session/advanced#ssh_and_gpg_agents

After creating the two xfconf entries per that page:
xfconf-query -c xfce4-session -p /startup/ssh-agent/enabled \
-n -t bool -s false 
xfconf-query -c xfce4-session -p /startup/gpg-agent/enabled \
-n -t bool -s false

…and logging out and in again, no more rogue ssh-agent:

$ pgrep -a ssh-agent
2903 /usr/bin/ssh-agent -D -a /run/user/1000/ssh-agent.socket

$ systemctl --user status ssh-agent.service 
● ssh-agent.service - SSH key agent
 Loaded: loaded (/etc/xdg/systemd/user/ssh-agent.service; enabled;
vendor preset: enabled) Active: active (running) since Thu 2022-07-28
15:15:13 ADT; 14min ago Main PID: 2903 (ssh-agent)
  Tasks: 1 (limit: 9302)
 Memory: 560.0K
CPU: 5ms
 CGroup:
/user.slice/user-1000.slice/user@1000.service/app.slice/ssh-agent.service
└─2903 /usr/bin/ssh-agent -D -a /run/user/1000/ssh-agent.socket

Victory! Thanks again to everybody who offered pointers.

And I've added another entry in the list of "helpful" automatic stuff to
disable when configuring a new desktop system.  I'm starting to
seriously consider that I might be happier with just a decent window
manager after all.

Cheers!
 -Chris

Re: *Now* what is starting ssh-agent?

[Chris Mitchell]

On Thu, 28 Jul 2022 10:08:22 -0500
David Wright  wrote:

> On Thu 28 Jul 2022 at 10:35:07 (-0400), Greg Wooledge wrote:

> I did much the same …
> 
> > My .xsession file contains only this line concerning ssh-agent:
> > 
> > hash ssh-agent 2>/dev/null && eval "$(ssh-agent -s)"  

I don't appear to have a .xsession file at all:

(Right after a "sudo updatedb")
$ locate .xsession
  /home/chris/.xsession-errors
  /home/chris/.xsession-errors.old
  /home/chris/.xsession-startup-dump

> > Looking for related stuff:
> > …
> > /etc/X11/Xsession.options:use-ssh-agent
> > 
> > So, I suppose Debian is starting this ssh-agent via its Xsession
> > even though I have my own .xsession file which is starting my own
> > instance of ssh-agent.
> > 
> > I guess you've already disabled that one...?

$ grep ssh-agent /etc/X11/Xsession.options 
  no-use-ssh-agent

> > Anyway, your login is completely different from mine (you're using
> > lightdm, while I'm using a console login and startx), so you'll
> > have to pursue your own investigation from here.
> > 
> > Given the order of the processes shown in your session-8, it looks
> > like it might be an XFCE thing.  Maybe start there?  I can't help
> > you with that, though.

Fair enough. Thanks for your insight up to this point!

> I assume that some process above ssh-agent has died, unintentionally
> or otherwise.
> 
> > > Any ideas where I might look next? Anyone know if it's possible
> > > to ask systemd what process "externally created" a process in a
> > > .scope?  
> 
> I'm not sure what you mean by this, unless it's the (wrong) idea that
> systemd "injected" the ssh-agent into your scope, evidenced by its
> parent being PID 1. My scope is clearly generated merely by logging
> in. Everything in it is mine, all mine … …

> All the parent/child relationships are as you would expect, except
> that each xterm was started by a deceased instance of xtoolwait
> (for correct placement) and so are all adoptees of PID 1.

Hm. Okay, so now that those xterms are adoptees of PID 1, is there some
way you could discover that the now-deceased parents from which PID 1
adopted them were instances of xtoolwait, if you didn't already know
that?

I'm thinking that if I could get the name of the now-dead process that
started the unwanted ssh-agent process and then died and left ssh-agent
to be adopted by PID 1, that would likely be a helpful clue. But I'm
teetering on the very edge of my comprehension of the system here, and
I have no idea whether that piece of information still exists once said
parent process has died, or how to retrieve it if so.

> I'd like to see the contents of $STARTUP before it's exec'd by
> /etc/X11/Xsession.d/99x11-common_start, because that's what
> actually does the business.

Right before the exec statement in that file, I've added the line:
echo "$STARTUP" >> ~/.xsession-startup-dump

After logging out and back in, that .xsession-startup-dump file
contains one line:
x-session-manager

/usr/bin/x-session-manager is a link (via /etc/alternatives) to
/usr/bin/startxfce4

Cheers!
 -Chris

Re: *Now* what is starting ssh-agent?

[Chris Mitchell]

Still picking away at this…

The PIDs are, of course, a moving target, as every time I log out and
back in to test a change, ssh-agent instances are getting shut down and
new ones started. As of right now:
* my systemd-managed ssh-agent is PID 3017
* the rogue ssh-agent is PID 7687

$ systemctl --user status ssh-agent.service 
● ssh-agent.service - SSH key agent
 Loaded: loaded (/etc/xdg/systemd/user/ssh-agent.service; enabled;
vendor preset: enabled) Active: active (running) since Thu 2022-07-28
08:02:14 ADT; 1h 21min ago Main PID: 3017 (ssh-agent)
  Tasks: 1 (limit: 9302)
 Memory: 560.0K
CPU: 5ms
 CGroup: 
/user.slice/user-1000.slice/user@1000.service/app.slice/ssh-agent.service
 └─3017 /usr/bin/ssh-agent -D -a /run/user/1000/ssh-agent.socket

From the output of systemd-cgls I see that the rogue ssh-agent process
is part of the .scope CGroup corresponding to my X login session.

# systemctl status session-8.scope
● session-8.scope - Session 8 of User chris
 Loaded: loaded (/run/systemd/transient/session-8.scope; transient)
  Transient: yes
 Active: active (running) since Thu 2022-07-28 08:59:48 ADT; 25min
ago Tasks: 254
 Memory: 957.6M
CPU: 2min 5.903s
 CGroup: /user.slice/user-1000.slice/session-8.scope
 ├─ 7588 lightdm --session-child 14 23
 ├─ 7625 xfce4-session
 ├─ 7687 /usr/bin/ssh-agent -s
 etc.

man systemd.scope(5) says:
Scope units are not configured via unit configuration files, but are
only created programmatically using the bus interfaces of systemd.
[…] Unlike service units, scope units manage externally created
processes, and do not fork off processes on its own.

By my reading, that seems to indicate that the rogue ssh-agent (PID
7687) is a direct child of systemd's system instance (PID 1) only
because my XFCE4 session and all of its associated processes are running
contained in a "scope" (to take advantage of systemd's resource
management capabilities?), and this does not indicate that said
ssh-agent is in any direct or relevant sense being managed by systemd.
Can anyone confirm or correct my understanding here?

Also, in the absence of more promising leads, I followed Tomas' advice
and inserted "echo" statements at every decision point in
90x11-common_ssh-agent, which confirmed that the initial "if
has_option" check is returning False and none of the code in that if
block is being run. I'm convinced that Xsession is not the culprit.

Any ideas where I might look next? Anyone know if it's possible to ask
systemd what process "externally created" a process in a .scope?

Cheers!
 -Chris

Re: Twice load - rndc.key ?

[Chris Mitchell]

On Mon, 11 Jul 2022 13:40:32 -0600
Charles Curley  wrote:

> On Mon, 11 Jul 2022 21:01:48 +0200
> Maurizio Caloro  wrote:

> > 
> > # cat /lib/systemd/system/named.service  
> 
> First mistake: you should not be editing files in /lib/systemd/.
> Instead copy the file to edit into /etc/systemd/, and edit it there. I
> believe there is a systemd command that will do that for you if
> necessary. The reason is that when an upgrade comes along, it will
> stomp on any changes you have made in /lib/systemd/.

If you want to supersede the entire unit file from /lib/systemd/ so
that no future package updates to that file will have any effect at
all, then yes. Copy the unit file to /etc/systemd/[system|user]/ as
appropriate and edit it. If you want to selectively override only
specific directives rather than supersede the unit completely, the easy
way is "systemctl edit ". That command automatically creates for
you an appropriately named ".d" drop-in directory below
/etc/systemd, creates a .conf file in the drop-in directory, and
launches an editor where you can define the directives you want.

Caveat: when using drop-in overrides, values you set are generally
*added* to whatever was set before. If you want to *replace* the value
of a particular directive, you have to explicitly set it to null first,
on a line by itself, like:
ExecStartPre=
...and *then* add a line setting it to whatever you want.

I got some very confusing results when overriding .timer files before I
learned that detail.

Cheers!
 -Chris

Re: *Now* what is starting ssh-agent?

[Chris Mitchell]

On Wed, 27 Jul 2022 11:04:49 +0200
Michael Biebl  wrote:

> Can you post the output of
> systemd-cgls

First, for context:

$ systemd-cgls --user-unit ssh-agent.service 
Unit ssh-agent.service
(/user.slice/user-1000.slice/user@1000.service/app.slice> └─3166
/usr/bin/ssh-agent -D -a /run/user/1000/ssh-agent.socket

That is my custom "global" user ssh-agent.service, not the rogue
ssh-agent.

The rogue ssh-agent is also started:

$ env | grep -i ssh
SSH_AUTH_SOCK=/tmp/ssh-XX3Q3EAs/agent.3302
SSH_AGENT_PID=3303

The full output of
# systemd-cgls
is over 200 lines, and paste.debian.net rejected it with the message
"do not spam", so here we go:

https://pastebin.com/68wWRnyb

Cheers!
 -Chris

Re: *Now* what is starting ssh-agent?

[Chris Mitchell]

Jul. 26, 2022 17:00:46 Greg Wooledge :

> On Tue, Jul 26, 2022 at 03:40:48PM -0300, Chris Mitchell wrote:
>> Here's my service file:
>>
>> $ cat /etc/systemd/user/ssh-agent.service
>
> According to systemd.unit(5) this directory is for "User units created
> by the administrator".

Yup, that's me!
In practice, it means units placed there are user units that are
available to all users on the system, so they can
start/stop/enable/disable/… their own instances of those units via
"systemctl --user" commands (or root can do the same for all users at
once with "systemctl --global). A unit in this directory will supersede
a same-named unit in /usr/lib/systemd/user, and may in turn be
superseded on a user-by-user basis via their respective
~/.config/systemd/user directories.

> PID 1 is the system instance of systemd.  Not a user instance.
> The ssh-agent with PID 3011 is being started by the system instance,
> so it is a system unit.  It's not your locally defined user unit.

Oh, yes. I should have realized that. Weird that the system instance
would be configured to start an ssh-agent at all, but I'll definitely
look there next.

> Things you should look at next, I suppose:
>
> systemctl status ssh-agent
> systemctl --user status ssh-agent

The --user one shows that my custom "global" user unit at
/etc/systemd/user is up and running as expected, which I can verify by
manually changing SSH_AUTH_SOCK to point to the socket specified there
and accessing the agent. If the *system* systemd instance is actually
launching an ssh-agent and injecting corresponding env-vars into my
regular user environment, that is deeply strange, and I'm reasonably
sure I haven't done anything that could cause that outcome.

# systemctl status ssh-agent.service
  Unit ssh-agent.service could not be found.

# systemctl list-units --all *ssh*
  UNIT LOAD ACTIVE SUB DESCRIPTION
  0 loaded units listed.

> Starting an ssh-agent via systemd is completely outside of my
> experience, though, and I don't really understand why you'd attempt
> it.  It's not clear to me *at all* how you would communicate the
> environment variables from the ssh-agent invocation over to the
> user's login session.

My setup is to have each user's "user" systemd instance manage their
ssh-agent (which is also how the Bookworm package handles it, though
with some differences in the implementation details). Being a
long-running daemon type process that provides a service to other
processes, ssh-agent struck me as an ideal candidate for being handled
by the service manager. The only environment variable that remains
relevant now that systemd handles the process control stuff is
SSH_AUTH_SOCK, and because I specify a consistent socket location, I
can set that statically for all login sessions, the same way you would
go about adding a custom location to PATH or whatever.

Advantages include:
* hands-on learning experience with systemd, which is clearly here to
  stay,
* make ssh-agent start, and behave consistently, regardless of what DE
  I use, or no DE, or no X or Wayland or graphical anything,
* any user who has a non-zero number of active login sessions gets
  exactly one ssh-agent process, regardless of what "type" of session(s)

For example: if I log in to XFCE4, load a few ssh keys into my
ssh-agent, and something causes X to hang, I swap to VT1 and log in
there. Systemd no-ops my ssh-agent.service because it's already
running, and access to ssh-agent works right there in VT1, including the
already-loaded keys. Now I restart lightdm, which kills the session
that started my ssh-agent.service, but because I still have a non-zero
number of active login sessions (VT1), systemd keeps that service
running. Then I can swap back to the lightdm greeter and log in to
XFCE4, or KDE, or Enlightenment, or whatever, and my ssh-agent is
already up and ready with the keys I loaded earlier. Just for fun, if I
want to make ssh-agent socket-activated for every user on the system
instead of auto-started at login, I can drop a ~5 line ssh-agent.socket
file in /etc/systemd/user/ alongside the ssh-agent.service file,
systemctl --global disable the .service unit and enable the .socket
unit instead, and that's it.

I've been using this "global" systemd user unit to manage ssh-agent for
a couple of years now, and it's just about perfect… except when some
legacy workaround comes along and clobbers things.

Cheers!
 -Chris

Re: *Now* what is starting ssh-agent?

[Chris Mitchell]

On Tue, 26 Jul 2022 21:54:18 +0200
Erwan David  wrote:

> ssh-agent is usually started by your session manager. I do not know 
> wether all DE use this, but you can find it in
> 
> /etc/X11/Xsession.d/90x11-common_ssh-agent

True. The snippet in that file is nested in a conditional, though:
  if has_option use-ssh-agent; then
  …

If I'm not mistaken, disabling "use_ssh_agent" in
/etc/X11/Xsession.options causes that conditional to fail, so
/etc/X11/Xsession.d/90x11-common_ssh-agent will do nothing.

man Xsession(5) uses the wording "If the line ‘use-ssh-agent’ is
present in Xsession.options", but man Xsession.options(5) says "All  of
the  above options are enabled by default" and instructs to disable
them by prefixing the option with "no-". Prior experience suggests that
commenting the line out *is* sufficient to disable it, but just to be
sure I have uncommented the line and changed it to "no-use-ssh-agent".
Even after a reboot, this has made no difference to the situation.

$ grep -i ssh ~/.xsession-errors returns no results, and that file
*does* have entries showing other environment variables being set via
dbus-update-activation-environment.

I suppose I could try commenting out the whole snippet in
/etc/X11/Xsession.d/90x11-common_ssh-agent, or moving the file away, but
at this point I'm reasonably confident Xsession is not the culprit.

Thanks for the lead, though. I know a bit more about how Xsession works
now than I did yesterday.

Cheers!
 -Chris

*Now* what is starting ssh-agent?

[Chris Mitchell]

Hi all,

I have my own systemd "user" .service unit that I like to use to start
ssh-agent the way I want it started, which works fine… except for the
neverending game of whack-a-mole tracking down and disabling various
legacy workarounds that go ahead and start ssh-agent unasked (or
emulate it, poorly, like gnome-keyring) and clobber my SSH_AUTH_SOCK
env-var.

Here's my service file:

$ cat /etc/systemd/user/ssh-agent.service 
  [Unit]
  Description=SSH key agent
  [Service]
  Type=exec
  # %t resolves to XDG_RUNTIME_DIR; see SPECIFIERS section in
systemd.unit(5) 
  ExecStart=/usr/bin/ssh-agent -D -a "%t/ssh-agent.socket"
  [Install]
  WantedBy=default.target

Sure enough, on a current laptop running Bookworm, even though I have
that service enabled and running, and I've gone through my list of
things to disable, there's a superfluous ssh-agent process running with
the default randomized socket location, and SSH_AUTH_SOCK has been
clobbered to point at that.

Here's what I know so far:

$ env | grep -i ssh
  SSH_AUTH_SOCK=/tmp/ssh-XXZAaNOY/agent.3010
  SSH_AGENT_PID=3011

$ ps ax | grep 3011
  3011 ?Ss 0:00 /usr/bin/ssh-agent -s

$ pstree -ps 3011
  systemd(1)───ssh-agent(3011)

Here I get confused. The path shown by ps rules out the possibility
that it's some other utility pretending to be ssh-agent. Unless I'm
mistaken, that pstree result indicates that this ssh-agent process was
started by systemd, but:

$ grep -rl ssh-agent /usr/lib/systemd/
  /usr/lib/systemd/user-environment-generators/90gpg-agent
  /usr/lib/systemd/user/gpg-agent-ssh.socket
  /usr/lib/systemd/user/ssh-agent.service

Even though gpg-agent is running, I think it can be ignored because:
* it wouldn't show up in ps as "/usr/bin/ssh-agent",
* that environment generator only sets the SSH_AUTH_SOCK env-var if
  "enable-ssh-support" is enabled per "gpgconf --list-options
  gpg-agent", which it is not, and
* Those two ssh-related env-vars don't match gpg-agent's PID or
  ssh-agent-socket path.

And /usr/lib/systemd/user/ssh-agent.service is not the culprit, because:
* /etc/systemd/user/ssh-agent.service has a higher priority, which
  causes systemd to ignore the one under /usr/lib/, and
* /usr/lib/systemd/user/ssh-agent.service uses the socket location
  "$XDG_RUNTIME_DIR/openssh_agent"

Continuing the search:
$ grep -rl ssh-agent /etc/systemd/
Returns one hit, which is my custom service file as shown above

$ grep -rl ssh-agent ~/.config/systemd/
Returns nothing, unsurprisingly.

Things that are already disabled:
* gnome-keyring is not installed
* /etc/X11/Xsession.options option use-ssh-agent is commented out
* XFCE4's "Application Autostart" config has no entry for ssh-agent
* XFCE4's "Launch GNOME services on startup" is disabled (If enabled,
  this option launches gnome-keyring if available, which by default
  would emulate ssh-agent and clobber the env-var)
* $ grep -rl ssh-agent ~/.config/autostart/ returns nothing, as expected

Anyone got any idea where I should look next to identify what's
actually starting that rogue ssh-agent process & clobbering my env-var,
and prevent it from doing so?

Cheers!
 -Chris

PS. Please keep all replies on-list, thanks!

Re: how to get rid of anacron?

[Chris Mitchell]

On Wed, 6 Jul 2022 12:07:59 -0400
Timothy M Butterworth  wrote:

> On Tue, Jul 5, 2022 at 2:15 PM Chris Mitchell 
> wrote:
> 
> > I have a unit file named email-notify@.service with contents:
> > [Unit]
> > Description=%i email notification
> >
> > [Service]
> > Type=oneshot
> >
> > ExecStart=/bin/bash -c '/bin/systemctl status %i |
> > /usr/bin/mail \ -s "%H: %i $(/bin/systemctl show -p ActiveState
> > --value %i)" root' 
> 
> Are you creating this file in: /usr/lib/systemd/system or
> /etc/systemd/system/
> 
/etc/systemd/system/

As I understand it, files under /usr/lib/systemd/system should only be
created or modified by packages. A sysadmin who wants to add new units
should always put them under /etc/systemd/system.

Bonus tip: overrides to package-provided units should also go under
/etc/systemd/system, even if the original unit files are in
/usr/lib/systemd/system. The command `systemctl edit `
automatically creates the precisely named path and file for this
purpose.

The official systemd documentation is not the most readable thing ever,
but it's pretty thorough, and does detail the hierarchy of unit file
and override locations.
https://www.freedesktop.org/software/systemd/man/systemd.unit.html

Cheers!
 -Chris

PS: Please keep all replies on-list so others can benefit from
follow-up questions and answers.

Re: how to get rid of anacron?

[Chris Mitchell]

On Mon, 4 Jul 2022 23:39:40 +0300
Roland Mueller  wrote:

> > On 7/4/22 10:41, Michael wrote:
> > 
> > afaik systemd timer lack the possibility to send the output (if any)
> > by email to a designated user, but instead logs the output to its
> > journal.
> 
> yes, you are right. If receiving by mail is a requirement - this
> works in cron out of the box.

> Using systemd scheduler instant check during development is for my
> needs sufficiently covered by 'systemctl status' or journalctl.

There's a trick using a systemd "template" unit that I use to get an
email notification only if something goes wrong.

I have a unit file named email-notify@.service with contents:
[Unit]
Description=%i email notification

[Service]
Type=oneshot

ExecStart=/bin/bash -c '/bin/systemctl status %i | /usr/bin/mail \
-s "%H: %i $(/bin/systemctl show -p ActiveState --value %i)" root'

Then, in any unit from which I want email notifications on failure, I
add in the [Unit] section the line
OnFailure=email-notify@%n

Then if the primary unit fails, it triggers an instance of email-notify
which has the primary unit's base name as its instance name. Then the
ugly one-liner in email-notify@.service populates the Subject header
with the hostname and the name and status of the failed unit, and the
body with a log summary, and sends it to root.

email-notify@.service is agnostic as to the status of the unit it's
notifying you about, so this doesn't *have* to be limited to on failure
only… That's just how I use it.

Cheers!
 -Chris

Re: Permanent email address?

[Chris Mitchell]

On Tue, 17 May 2022 12:22:48 -0400
Edwin Zimmerman  wrote:

> > If you can't get a static IP address for your home computer,
> > consider running your mail server on a cheap VPS (Virtual Private
> > Server).  This may be cheaper than a static IP address for your
> > home, depending on your ISP.
> >
> 
> Don't host your email on just any old cheap VPS.  Many VPS providers
> have bad reputations for not policing spam senders, and as a
> consequence large email services like gmail often block whole ip
> ranges that belong to these VPS providers.

Also note that you very much do *not* need to run your own MTA to
achieve the goal of an address you own and can move from provider to
provider. Once you own the domain, you can set up your DNS MX records
to delegate to an email provider. If you later decide to switch email
providers or host your own MTA, you change the MX records to point to
the new provider or server. (If you have mail *stored* on your old
provider's server when you terminate your account with them, you'd need
to download it or lose it, obviously.) Hosting your own MTA makes the
problem ten times more complicated, and it's not at all clear that
there's any relevant advantage in terms of the stated objectives.

In particular, don't expect running your own MTA to gain you any kind
of privacy. Email is a store-and-forward protocol that may route
through an arbitrary number of intermediate servers on the way from
origin to destination. All of those servers at least temporarily store
a copy of every email that passes through, and any of them may be
permanently saving, reading, data-mining, or selling those messages. Any
email that's not encrypted is simply not a private communication,
regardless of who runs your MTA.

Cheers!
 -Chris

Re: Can't create a password successfully.

[Chris Mitchell]

On Sun, 3 Apr 2022 22:45:27 -0700
David Christensen  wrote:

> On 4/3/22 21:07, ghe2001 wrote:

> > I kinda thought it probably was.  It's pretty obvious.  The idea is
> > to generate a bunch of gibberish that could be easily remembered.  
> 
> It's not gibberish; it has meaning.  The meaning is what makes the 
> password both memorable and weak.

I concur with David. The fundamental problem with using clever formulas
to come up with memorable passwords is that clever formulas are
reproducible. The "dictionary" from which a modern password cracker
draws its guesses has nothing to do with what is and isn't "a
dictionary word". Rather, it's a purpose-built word list, informed by
years of statistical analysis of millions of real-world passwords
leaked from previous breaches. Actual randomness is the only reasonably
effective way to make a password hard to guess.

Trying to come up with unique, sufficiently random passwords for every
website, service, and so forth — and *remember* all those passwords —
is a real problem at any age. I would strongly suggest using a password
manager. Make sure the master password to unlock the password manager
is really strong. But then you only have one password to remember, and
you can have an effectively unlimited number of unique, random, strong
passwords. Personally, I use KeepassXC with a self-hosted Syncthing
instance to sync the password file to all my devices. If you're not up
for self-hosting, there are some cloud-based password managers with
decent security too, eg Bitwarden.

For the specific challenge of *generating* passwords that are both
genuinely random and reasonably memorable, you might want to take a
look at the "diceware" approach, which is to start with a list of
several tens of thousands of actual English words and use a
high-quality random number generator to pick a few words from the list.
As a helpful little bonus, most password managers nowadays come with a
password generator built-in, which in many cases can be configured to
generate a diceware passphrase instead of a gibberish string of
characters.

Cheers!
 -Chris

Re: simple talking clock / reminder for when monitor is off and it is dark

[Chris Mitchell]

On Sun, 20 Mar 2022 23:03:52 -0700
Samuel Wales  wrote:

> i have to have all lights and monitors off at night.  but i have to
> know the time so i can take medicine.
> 
> i use slock and turn off monitor with ddccontrol.  this might turn off
> mouse and keyboard; i wouild have to check.
> 
> i want debian to tell me the time at certain times.  for example
> tonight i have to take medicine at 2:40 am.
> 
> here are ideas:
> 
> - tell me time when i right click [kb much less accessible]
> - tell me at a prespecified time like 2.40 am
> - tell me the following hours: midnight, 1 am, 2am
> 
> any would be ok i think.

There are a number of ways you could approach this, depending largely
on whether you want the simplest way to get a reminder at one specific
time vs a flexible talking reminder system.

Personally, I would use a custom systemd timer unit for this. Systemd
is already running most of your system, and it offers a scheduling
syntax that is (AFAIK) more flexible than cron's, and (IMHO) much
easier to read. For example "Every day, once an hour, on the hour, but
only between midnight and 07:00 (inclusive)" would be:
  OnCalendar=00..07:00

The timer unit in turn triggers a service unit, which can run a command
such as `aplay /home/sam/medicine.wav` like Dan's example, if you want
a single-purpose pre-recorded message. Or you could use a command like
`espeak-ng "It is now $(date +%R)"` so it'll simply announce the
current time whenever it's triggered, thus giving you a general-purpose
talking clock.

Note that if you make the timer/service unit pair "system" units (in
/etc/systemd/system), they'll run (as root) as long as the machine is
up and running. If you make them "user" units (in
~/.config/systemd/user/), by default they'll run only when you're
logged in. If you want to have user units run when the user is not
logged in, the systemd terminology for that is "enable lingering".

If you're not familiar with the syntax of systemd unit files, there is
a bit of a learning curve, but I'd bet that if you can script in
Bash, it won't take you long to get to the point where you can write a
minimal timer and service unit pair for a job like this.

Cheers!
 -Chris

Re: recommend music player?

[Chris Mitchell]

On Wed, 16 Mar 2022 19:41:58 -0400
Dan Ritter  wrote:

> kaye n wrote: 
> > Hello Friends!
> > 
> > I am currently using Debian GNU/Linux 11 (bullseye)
> > 
> > Can anyone recommend a good music player with an equalizer where I
> > can choose Pop, Rock, etc.  
> 
> 
> I recommend that you separate the two.
> 
> For equalization, look to your sound subsystem. If that's
> pulseaudio, install pulseaudio-equalizer and use the qpaeq
> interface.
> 
> If that's pipewire, stable doesn't have a good equalizer yet but
> pulseaudio-equalizer may work and you can easily compile 
> https://github.com/Audio4Linux/JDSP4Linux

...with projectm-pulseaudio thrown in for fun! (Or projectm-jack is an
option if you're on pipewire.)

As for the music player itself, I use Quod Libet. The UI takes a
bit of getting used to, but it's remarkably powerful and flexible. If
you're the kind of nerd who takes pride in their meticulously tagged
music collection, it might be worth a look.

Cheers!
 -Chris

Re: Simple and secure blogging software for nginx

[Chris Mitchell]

On Thu, 10 Mar 2022 22:39:34 +0100
Christian Britz  wrote:

> Sure, I think I was not precise in my posting. I am willing to add
> something dynamic, and I was not sure if Apache and nginx support the
> same toolkits.
> 
> You and others brought in several static content generators, I will
> consider that option too.

I believe Apache and nginx both have fairly robust support for popular
server-side languages like PHP, so many toolkits will work happily on
top of either one.

That said, you did mention "as secure as possible" in your initial
request, and obviously no other option comes anywhere near static html
pages in terms of security.

Count me as another voice in favour of a static site generator. In
particular, I've been playing around with Hugo, which won me over
largely by virtue of using Markdown as its input format. With all
respect to LaTeX (sorry Russell!), it's a staggeringly complex
language with a steep learning curve. If you want a markup language
that supports every typographical feature ever invented, you can't beat
LaTeX. For basic web content with links, emphasis, and the occasional
bulleted list, Markdown is enough tool for the job, and has the
advantages of simplicity and vastly greater human-readability. I don't
know about you, but I don't need a 747 to get to the corner store.

Site generators like Hugo automatically generate nav menus, TOCs, and
similar, so you get a lot of the convenience features of a blogging
platform... just without the platform. If you use git, you can make a
relatively uncomplicated, entirely self-hosted deploy pipeline that
updates the site automatically whenever you make a commit to the
website's git repo, as shown here:

https://www.digitalocean.com/community/tutorials/how-to-deploy-a-hugo-site-to-production-with-git-hooks-on-ubuntu-14-04

And since the content is all plain Markdown files stored in a sensible
directory structure on disk, it's very portable in case you want to
move to some other platform later.

There is definitely a bit of a learning curve with Hugo, though if you
start with a pre-built "theme", it's not overly hard to get a site up
and running now and delve into all the customizable details later.

Cheers!
 -Chris

Re: Archiving on SD cards (was: Re: Archiving on optical media; was Re: Archiving content of a directory on a DVD-R.)

[Chris Ramsden]

Monday, February 28, 2022, 2:52:35 PM, rhkramer wrote:

> On Monday, February 28, 2022 12:37:49 AM pe...@easthope.ca wrote:
>> Backing data in a 4 or 16 GB SD card is a modest requirement.
>> PC Galore might have a drive in stock.  http://www.pcgalore.com/
> What has been your experience with reliability of SD cards for backup?

Mine has been bad. I have accumulated several dead SD cards, yet over many 
years, I can think of only one USB memory device failing. 
 
USB and SD memory devices are based on similar (if not identical) flash 
technology, are they not? 
 
Under this assumption, I'd guess that the USB interface is rather more robust 
than that found in SD cards. SD cards seem to be fine if installed and left 
there (IP cameras, dashcams, phones) but fail when handled. And yes, I am aware 
of ESD (electrostatic discharge) issues and take steps to minimize risk. 
 
I wouldn't trust my data to SD cards.   
-- 
Regards,
Chris

Re: Getting Bullseye's VLC to read/play H265 videos

[Chris Ramsden]

On Sun, 2021-10-31 at 12:58 -0500, Intense Red wrote:
> > Works out of the box on mine. Played H265 4K no problem. What is the
> > error you're getting?
> 
>VLC doesn't give an error, it just endlessly tries loading and reloading 
> the file (a video from a security camera).
> 
>I'm guessing it's some oddity in the file format produced by the cheap 
> Chinese security camera. Purportedly ffmpeg can convert the file to another 
> more 
> common format; that's my next step to deal with the issue.
> 
> > > "I have various h265 CODECS installed" 
> > VLC does not require any codecs to work, what do you mean by that?
> 
>That was me foolishly installing various CODECs in the hope it might help. 
> :-(⠀⠀
> 
> 
I had a similar issues with a camera and its H264 files. The fix I
found was to make sure the camera was set to CBR not VBR (constant vs
variable bit rate). 
-- 
Chris

Re: OT: Interpreting math markup

[Chris Ramsden]

Tuesday, September 28, 2021, 11:11:49 PM, Rh Kramer wrote:

> I'm reading various things lately (e.g., some Quora articles) in which, in 
> Firefox, I see things like (that's a simple one):

> [math]R_0[/math]

> I'm trying to find out what that markup is named, and then how to interpret 
> it.  
> I've done some Googling and reading on Wikipedia, but so far no luck.

> Thanks for any explanations or hints!

Quora in particular uses a subset of LaTeX. Other comments I see in Quora state 
that MathJax is being used. 
 
I use this guide: https://math-on-quora.surge.sh when attempting to compose 
maths for Quora. 

For me, it Just Works™. I guess you're using more aggressive filtering and 
bocking than I do. 
-- 
Regards,
Chris

Re: Bullseye installation problem

[Chris Bell]

On Tuesday, 6 July 2021 11:45:10 BST you wrote:
> Thanks for the reply
> 
> > Machine HP Proliant ML150 with 5GB RAM and currently a single HDD. I
> 
> normally
> 
> > use a netinst CD created locally from the jigdo image (amd64).
> > I have tried to install both basic bullseye rc1 and bullseye rc2 with SSH
> > server several times over the last few days, using different netinst CD's,
> 
> and
> 
> > each time the installation appears to be faultless until I try to boot the
> 
> new
> 
> > installation. I just want to be able to login locally, do a small amount
> > of
> > configuration, and then login remotely over the network. The GRUB display
> > is normal, but then the SVGA monitor only shows a single message about
> > 
> > VMX outside text (disabled by BIOS)
> > 
> > before the monitor complains that the video is out of range and gives
> > up
> > 
> > Is firmware for your graphics device installed?
> 
> I always use the "unofficial" installer with firmware, so it was
> 
> firmware-bullseye-DI-rc2-amd64-netinst.iso
> 
> and
> 
> firmware-bullseye-DI-rc2-amd64-i386-netinst.iso
> 
> > Try working around the immediate problem by appending nomodeset to the
> > kernel command line via E key at Grub menu. For most graphics chips,
> > nomodeset blocks a requirement of most AMD, Intel and NVidia GPUs X
> > drivers, enabled KMS, so using it is little but a crutch to enable
> > reconfiguration and troubleshooting [1].
> > 
> > What is output from
> > 
> > lspci -nnk | grep -A3 VGA
> 
>  This is the output from the working buster 10.10.0 installation:
>  lspci -nnk | grep -A3 VGA
> 0a:02.0 VGA compatible controller [0300]: Matrox Electronics Systems Ltd.
> MGA G200e [Pilot] ServerEngines (SEP1) [102b:0522] (rev 02)
> Subsystem: Hewlett-Packard Company ProLiant DL140 G3 [103c:31fa]
> Kernel driver in use: mgag200
> Kernel modules: mgag200
> 
> I am not desperate to get bullseye installed at the moment as I can still
> use buster 10.10.0, but the release team want to prepare the full release
> soon. I see that someone has already reported an issue with (I think) a
> virtual different HP machine, which may not be identical.
> I have full access (from the running buster 10.10.0 installation) to / for
> the rc2 installation, including all the logs from the boot attempt, but all
> I could do at the time was to select a Ctl-Alt-f3 terminal, login blind as
> root, and do a shutdown.
> I can even swap discs and re-install 10.10.0 to use the machine to avoid re-
> formatting any of the current partitions, which would change UUID's for the
> current 10.10.0, swapping the discs back for further testing.

> The AMD firmware is not in the standard firmware-linux-nonfree, from memory.

> All best,

> Andy C.

> It's installed on my HP Microserver which is also Matrox G200

Thanks for the info, I have assumed no op, hopefully re-installed again for 
the last time, and done some remote admin.

Re: Bullseye installation problem

[Chris Bell]

Thanks for the reply

> Machine HP Proliant ML150 with 5GB RAM and currently a single HDD. I 
normally 
> use a netinst CD created locally from the jigdo image (amd64).
> I have tried to install both basic bullseye rc1 and bullseye rc2 with SSH 
> server several times over the last few days, using different netinst CD's, 
and 
> each time the installation appears to be faultless until I try to boot the 
new 
> installation. I just want to be able to login locally, do a small amount of 
> configuration, and then login remotely over the network. The GRUB display is 
> normal, but then the SVGA monitor only shows a single message about

> VMX outside text (disabled by BIOS)

> before the monitor complains that the video is out of range and gives up


> Is firmware for your graphics device installed?

I always use the "unofficial" installer with firmware, so it was

firmware-bullseye-DI-rc2-amd64-netinst.iso

and

firmware-bullseye-DI-rc2-amd64-i386-netinst.iso

> Try working around the immediate problem by appending nomodeset to the
> kernel command line via E key at Grub menu. For most graphics chips,
> nomodeset blocks a requirement of most AMD, Intel and NVidia GPUs X
> drivers, enabled KMS, so using it is little but a crutch to enable
> reconfiguration and troubleshooting [1].

> What is output from
>   lspci -nnk | grep -A3 VGA

 This is the output from the working buster 10.10.0 installation:
 lspci -nnk | grep -A3 VGA
0a:02.0 VGA compatible controller [0300]: Matrox Electronics Systems Ltd. MGA 
G200e [Pilot] ServerEngines (SEP1) [102b:0522] (rev 02)
Subsystem: Hewlett-Packard Company ProLiant DL140 G3 [103c:31fa]
Kernel driver in use: mgag200
Kernel modules: mgag200

I am not desperate to get bullseye installed at the moment as I can still use 
buster 10.10.0, but the release team want to prepare the full release soon.
I see that someone has already reported an issue with (I think) a virtual 
different HP machine, which may not be identical.
I have full access (from the running buster 10.10.0 installation) to / for the 
rc2 installation, including all the logs from the boot attempt, but all I 
could do at the time was to select a Ctl-Alt-f3 terminal, login blind as root, 
and do a shutdown.
I can even swap discs and re-install 10.10.0 to use the machine to avoid re-
formatting any of the current partitions, which would change UUID's for the 
current 10.10.0, swapping the discs back for further testing.

Bullseye installation problem

[Chris Bell]

Hello,
Machine HP Proliant ML150 with 5GB RAM and currently a single HDD. I normally 
use a netinst CD created locally from the jigdo image (amd64).
I have tried to install both basic bullseye rc1 and bullseye rc2 with SSH 
server several times over the last few days, using different netinst CD's, and 
each time the installation appears to be faultless until I try to boot the new 
installation. I just want to be able to login locally, do a small amount of 
configuration, and then login remotely over the network. The GRUB display is 
normal, but then the SVGA monitor only shows a single message about

VMX outside text (disabled by BIOS)

before the monitor complains that the video is out of range and gives up.
This happens with two different monitors.
I have now installed buster 10.10.0 with KDE into a spare partition with full 
access to the 
rc2 partition (including remote access) so am able to copy any information 
required for a bug report, but what should it be reported to?
My only comment about the 10.10.0 installation so far is that a local monitor 
display apears to show a low definition display, with everything including text 
slightly large on the screen, but it appears to work normally.

-- 
Chris Bell
www.chrisbell.org.uk

Debian Buster Multi Seat

[Chris Rhodin]

Has anyone tried setting up multi-seat on Buster?  The
Multi_Seat_Debian_HOWTO <https://wiki.debian.org/Multi_Seat_Debian_HOWTO> says
the systemd-loginctl method doesn't work for Buster but doesn't say why it
doesn't work or indicate what does work.  Since systemd-loginctl is the
simplest method it tried it and found that it mostly works, "mostly"
meaning there are no apparent issues until you log off at which point the
login screen never appears again.  Any insights would be appreciated.

Chris

Re: Fingerprint recognition (on power button)

[Chris Ramsden]

On 2020-10-05 15:00, rhkra...@gmail.com wrote:

I am thinking about buying a:

  KUU-K2 14.1" IPS Screen All Metal Shell Champagne Gold Office Notebook Intel
Celeron Processor J4115 8GB DDR4 RAM 256GB SSD Windows 10 Laptop Computer with
Fingerprint Unlock Backlit Keyboard

https://www.newegg.com/champagne-gold-kuu-k2-
workstation/p/1TS-00BK-00024?Item=9SIANGPBUS2481

(Currently on sale for $306 with free shipping.)

The one potential problem that I see is that it (optionally?) allows locking
based on your fingerprint on, iiuc, the power button.

Does anybody (here) use or know much about fingerprint recognition? I'd prefer
not to enable that if it is an option or not supported in Debian -- it just
strikes me as another potential point of failure that I don't need.

Asides (that you don't need to read):

It meets most of my criteria (at least 8 GB RAM (I'd prefer more, I'll look
into expandability), reasonably fast (2.5GHz. 4 Cores and 4 Threads), sufficient
size hard / ssd drive (128 GB would be sufficient), and type C USB port to plug
into a docking station that I already have.

(I'd prefer AMD as a processor, but ...)

(Aside: my intent would be to keep Windows 10 for the one application that I
use every 4 to 5 years (updating the map(s) in my Garmin GPS unit (even though
I know I can install a "free software" map instead). but basically to install
Buster to do some development that requires C++17, and, incidentally (if I am
successful with that development) possibly take the laptop to make
presentations at various sites.)

I use a Dell Inspiron which has this feature. It works very well under 
Windows (and I have used some in the past which were very hit-and-miss.) 
The fingerprint device doubles as a regular clicky power button.


Most of the time this machine runs Linux (LMDE Debbie). I have looked 
into enabling the fingerprint feature there but gave up on learning how 
patchy the support for these devices is.


To cut to the chase, in my experience this gizmo won't work under Linux 
unless you vault through flaming hoops to make it do so. I strongly 
suspect that you won't know the capability is there and therefore you 
can safely ignore it.


--
Chris

Server goes to sleep

[Chris Rhodin]

Hi,

I've installed Debian Buster on a desktop system I use as a server.  I also
occasionally use this as a regular desktop system so it has a monitor,
keyboard, and GUI.  During installation I selected the ssh server in
tasksel (so during installation there was some indication this was a
server).

The problem I have is that when the console screen goes black and locks,
the system becomes unresponsive to network activity.  If I have an ssh
session running when this occurs it stops responding.  It doesn't kick me
off, the ssh connection is still there.  If I then go to the console and
shake the mouse the screen lights up and the ssh session starts responding
like nothings wrong, until the console goes to sleep again.

Searching online I found this command which seems to solve the problem:

sudo systemctl mask sleep.target suspend.target hibernate.target
hybrid-sleep.target

So my question is what is the correct way to manage this?  Is there a
document that goes over the various power states and how they impact
running services?


ChrisR

Re: Kind reminder: please don't reply to and/or quote spam, ever

[Chris Ramsden]

On 19/04/2020 10:11, elvis wrote:


On 19/4/20 5:03 pm, Andrei POPESCU wrote:



* DO report spam only by bouncing it to report-lists...@lists.debian.org

https://wiki.debian.org/FAQsFromDebianUser#posting-spam

Note: "bouncing" is also called "redirect" in some mail clients and is
*not* forwarding (should probably mention this in the wiki).U


In over 25 years of email I have never come across this, so much to learn so 
little time.

Any idea how to do this in Thunderbird?


It has a "edit as new message" where you can change the address etc and send? 
Would that be close to what is needed?




Kind regards,
Andrei



There is a "redirect" add-on [1] for Thunderbird. Its intended use is that if, 
usually in a workplace scenario, you receive a message that would be more appropriately 
handled by a colleague, you can pass it to that colleague. Additional headers are 
inserted so that it arrives in the colleague's inbox looking as if it it had been 
addressed to them and not to you. This may help your colleague if they file by sender, as 
it retains the original sender's address and not your address, as it would if forwarded 
in the usual way.

I'd invite Andrei to define what he means by "bounce". The vast majority of spam 
reporting agencies I have worked with ask for either headers, or the whole of the offending message 
sent as an attachment. No email client I have ever used has offered an option to "bounce".

[1] https://mailredirect.sourceforge.io/

--
Chris

Question Regarding sources.list

[Chris Debian]

Good Afternoon,

I recently installed Debian Bullseye with the unofficial iso that
includes non-free firmware
(debian-live-testing-amd64-xfce+nonfree.iso).

However, my sources.list file does not contain "contrib" or "non-free"
components. Should "contrib" and "non-free" components be added to all
of the archives to ensure system and firmware are up-to-date with
security updates, etc?

I am a complete beginner. My apologies if this question seems obvious.
My sources.list files is below:

# See https://wiki.debian.org/SourcesList for more information.
deb http://deb.debian.org/debian/ bullseye main
deb-src http://deb.debian.org/debian/ bullseye main

deb http://deb.debian.org/debian/ bullseye-updates main
deb-src http://deb.debian.org/debian/ bullseye-updates main

deb http://security.debian.org/debian-security/ bullseye-security main
deb-src http://security.debian.org/debian-security/ bullseye-security main

Thank you,
Chris

Re: Serial Port Issues

[Chris Rhodin]

Thanks for all the help.

Chris

On Mon, Apr 6, 2020 at 11:59 PM Chris Rhodin  wrote:

> I figured it out.  It was user error.  When I diff'd the output of "stty"
> from my laptop and server I saw the server had "-crtscts" and laptop had
> "crtscts".  It turns out minicom enables hardware flow control by default
> and I had changed that default on my laptop somewhere in the past (at least
> 3 releases of Debain ago).  I thought I had checked this on the server but
> either I didn't or I just missed it.  Changing this in minicom made it work.
>
> Chris
>
>
> On Mon, Apr 6, 2020 at 10:53 PM Chris Rhodin  wrote:
>
>>
>>
>> -- Forwarded message -
>> From: Chris Rhodin 
>> Date: Mon, Apr 6, 2020 at 7:28 PM
>> Subject: Re: Serial Port Issues
>> To: 
>>
>>
>> I have two devices I'm trying to connect to, a UPS and a network switch.
>> By default the UPS runs at 2400 baud and the switch runs at 9600 baud.
>> Before connecting them to the server I verified the devices were working on
>> a laptop running Debian.  When I attached them to the server and powered
>> them up (with minicom already running) I saw the expected startup messages
>> being output by both devices (this is why I say I can receive serial
>> data).  I then started typing commands and but got no response.
>>
>> I started debugging.  I tried other cables, I tried USB to serial cables,
>> I reattached the devices to the laptop to verify they hadn't spontaneously
>> and simultaneously stopped working.  Next I simplified my test setup.  I
>> made a loop back cable that connects Tx to Rx.  I tested this cable on the
>> laptop and verified it echoed everything I typed.  On the server no echo.
>>
>> Based on responses here I've verified the permissions and tried running
>> as root.  I've also checked the flow control as reported by minicom.
>>
>> Q: Is "stty" the right command line tool to check all of a serial ports
>> settings?
>>
>> And finally, last night I burned a Debian live DVD and booted the server
>> with it.  After installing the proprietary network drivers and minicom I
>> tried the serial ports again with the same results.
>>
>> Tonight I'll look at the serial port ioctls and see if I can spot a
>> difference there.  I also try enabling flow control and fiddling with the
>> signals to see if that unstops it.
>>
>> ChrisR
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> 0
>>
>> On Mon, Apr 6, 2020 at 7:08 AM  wrote:
>>
>>> On Mon, Apr 06, 2020 at 09:51:15AM -0400, rhkra...@gmail.com wrote:
>>> > On Monday, April 06, 2020 03:50:59 AM to...@tuxteam.de wrote:
>>> > > Besides, a wrong baud rate would much less explain that writing is
>>> > > possible, but reading isn't. Not for classical "serials" (i.e.
>>> RS-232).
>>> >
>>> > From the OP: " On this system a serial port can only receive data and
>>> not
>>> > transmit."
>>> >
>>> > Wouldn't that mean that (from the perspective of a program running on
>>> the OP's
>>> > computer) that the serial port can read but not write?
>>>
>>> My recollection is the other way around: write but not read.
>>> But hey, I'm old and that.
>>>
>>> That (and the fact that another serial over USB showed the same
>>> symptoms) prompted me to (reluctantly) hint at permissions [1],
>>> since, to my knowledge, a honest serial port cannot be configured
>>> to different send and receive speeds. But this seems to be ruled
>>> out.
>>>
>>> Another possibility is, of course, the cable :-)
>>>
>>> Do we know in which way the port fails to read/write or whatever
>>> it fails at? Error messages?
>>>
>>> Cheers
>>> [1] this could be explained by a broken udev script setting
>>>the wrong permissions -- that would, e.g. cover the USB
>>>adapter case. It was such a nice model :-)
>>> -- t
>>>
>>

Re: Serial Port Issues

[Chris Rhodin]

I figured it out.  It was user error.  When I diff'd the output of "stty"
from my laptop and server I saw the server had "-crtscts" and laptop had
"crtscts".  It turns out minicom enables hardware flow control by default
and I had changed that default on my laptop somewhere in the past (at least
3 releases of Debain ago).  I thought I had checked this on the server but
either I didn't or I just missed it.  Changing this in minicom made it work.

Chris


On Mon, Apr 6, 2020 at 10:53 PM Chris Rhodin  wrote:

>
>
> -- Forwarded message -
> From: Chris Rhodin 
> Date: Mon, Apr 6, 2020 at 7:28 PM
> Subject: Re: Serial Port Issues
> To: 
>
>
> I have two devices I'm trying to connect to, a UPS and a network switch.
> By default the UPS runs at 2400 baud and the switch runs at 9600 baud.
> Before connecting them to the server I verified the devices were working on
> a laptop running Debian.  When I attached them to the server and powered
> them up (with minicom already running) I saw the expected startup messages
> being output by both devices (this is why I say I can receive serial
> data).  I then started typing commands and but got no response.
>
> I started debugging.  I tried other cables, I tried USB to serial cables,
> I reattached the devices to the laptop to verify they hadn't spontaneously
> and simultaneously stopped working.  Next I simplified my test setup.  I
> made a loop back cable that connects Tx to Rx.  I tested this cable on the
> laptop and verified it echoed everything I typed.  On the server no echo.
>
> Based on responses here I've verified the permissions and tried running as
> root.  I've also checked the flow control as reported by minicom.
>
> Q: Is "stty" the right command line tool to check all of a serial ports
> settings?
>
> And finally, last night I burned a Debian live DVD and booted the server
> with it.  After installing the proprietary network drivers and minicom I
> tried the serial ports again with the same results.
>
> Tonight I'll look at the serial port ioctls and see if I can spot a
> difference there.  I also try enabling flow control and fiddling with the
> signals to see if that unstops it.
>
> ChrisR
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> 0
>
> On Mon, Apr 6, 2020 at 7:08 AM  wrote:
>
>> On Mon, Apr 06, 2020 at 09:51:15AM -0400, rhkra...@gmail.com wrote:
>> > On Monday, April 06, 2020 03:50:59 AM to...@tuxteam.de wrote:
>> > > Besides, a wrong baud rate would much less explain that writing is
>> > > possible, but reading isn't. Not for classical "serials" (i.e.
>> RS-232).
>> >
>> > From the OP: " On this system a serial port can only receive data and
>> not
>> > transmit."
>> >
>> > Wouldn't that mean that (from the perspective of a program running on
>> the OP's
>> > computer) that the serial port can read but not write?
>>
>> My recollection is the other way around: write but not read.
>> But hey, I'm old and that.
>>
>> That (and the fact that another serial over USB showed the same
>> symptoms) prompted me to (reluctantly) hint at permissions [1],
>> since, to my knowledge, a honest serial port cannot be configured
>> to different send and receive speeds. But this seems to be ruled
>> out.
>>
>> Another possibility is, of course, the cable :-)
>>
>> Do we know in which way the port fails to read/write or whatever
>> it fails at? Error messages?
>>
>> Cheers
>> [1] this could be explained by a broken udev script setting
>>the wrong permissions -- that would, e.g. cover the USB
>>adapter case. It was such a nice model :-)
>> -- t
>>
>

Fwd: Serial Port Issues

[Chris Rhodin]

-- Forwarded message -
From: Chris Rhodin 
Date: Mon, Apr 6, 2020 at 7:28 PM
Subject: Re: Serial Port Issues
To: 


I have two devices I'm trying to connect to, a UPS and a network switch.
By default the UPS runs at 2400 baud and the switch runs at 9600 baud.
Before connecting them to the server I verified the devices were working on
a laptop running Debian.  When I attached them to the server and powered
them up (with minicom already running) I saw the expected startup messages
being output by both devices (this is why I say I can receive serial
data).  I then started typing commands and but got no response.

I started debugging.  I tried other cables, I tried USB to serial cables, I
reattached the devices to the laptop to verify they hadn't spontaneously
and simultaneously stopped working.  Next I simplified my test setup.  I
made a loop back cable that connects Tx to Rx.  I tested this cable on the
laptop and verified it echoed everything I typed.  On the server no echo.

Based on responses here I've verified the permissions and tried running as
root.  I've also checked the flow control as reported by minicom.

Q: Is "stty" the right command line tool to check all of a serial ports
settings?

And finally, last night I burned a Debian live DVD and booted the server
with it.  After installing the proprietary network drivers and minicom I
tried the serial ports again with the same results.

Tonight I'll look at the serial port ioctls and see if I can spot a
difference there.  I also try enabling flow control and fiddling with the
signals to see if that unstops it.

ChrisR






















































































0

On Mon, Apr 6, 2020 at 7:08 AM  wrote:

> On Mon, Apr 06, 2020 at 09:51:15AM -0400, rhkra...@gmail.com wrote:
> > On Monday, April 06, 2020 03:50:59 AM to...@tuxteam.de wrote:
> > > Besides, a wrong baud rate would much less explain that writing is
> > > possible, but reading isn't. Not for classical "serials" (i.e. RS-232).
> >
> > From the OP: " On this system a serial port can only receive data and
> not
> > transmit."
> >
> > Wouldn't that mean that (from the perspective of a program running on
> the OP's
> > computer) that the serial port can read but not write?
>
> My recollection is the other way around: write but not read.
> But hey, I'm old and that.
>
> That (and the fact that another serial over USB showed the same
> symptoms) prompted me to (reluctantly) hint at permissions [1],
> since, to my knowledge, a honest serial port cannot be configured
> to different send and receive speeds. But this seems to be ruled
> out.
>
> Another possibility is, of course, the cable :-)
>
> Do we know in which way the port fails to read/write or whatever
> it fails at? Error messages?
>
> Cheers
> [1] this could be explained by a broken udev script setting
>the wrong permissions -- that would, e.g. cover the USB
>adapter case. It was such a nice model :-)
> -- t
>

Re: Serial Port Issues

[Chris Rhodin]

to...@tuxteam.de wrote:

> Permissions? (they would have to be a bit funny, write but not read,
> but hey, it'd be possible).

I checked the permissions and group memberships but they're already
correct.  I also tried executing at root privilege, no luck.

Chris

Serial Port Issues

[Chris Rhodin]

Hi All,

I have a rack mount server running a fresh install of Debian buster.  On
this system a serial port can only receive data and not transmit.  This is
true for both the built in serial port and USB to serial adapters.  I'm
testing this with a loop back cable and the command "minicom
--baudrate=9600 --device=/dev/ttyXX".  I also have a laptop and desktop
running Debian and on these systems the serial adapters and cables work
fine with that command.

Has anyone seen this happen before?

I can see how the built in port might have an issue but why do the USB
ports do the same thing?


Chris

Bug #949471 --- help needed to figure which component it is in

[Chris Ward]

Please take a look at 
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=949471 . I have 
reported it as a bug in open-infrastructure-system-build , but I don't 
think the problem is in this component; I think the problem is in one of 
the components that it installs ( maybe ca-certificates ) . Please help 
by diagnosing which component has the bug and reassign the bug to that 
component. There should be sufficient information in 
http://tjcw.freeshell.org/oisb-fail/ to make progress.


--
Chris Ward

Re: Back to systemd [was: Re: New list for Raspbian? (was: Re: systemdq)]

[chris]

Omg another systemd thread jeez

On Mon, Dec 30, 2019, 6:12 PM Andrei POPESCU 
wrote:

> On Lu, 30 dec 19, 15:12:54, ghe wrote:
> > On 12/30/19 1:08 PM, Greg Wooledge wrote:
> >
> > > Did you forget to "enable" it?
> >
> > Nope. It works by hand, and after boot, systemctl status claims it's
> > running. But is isn't.
>
> Please show us the full output of
>
> systemctl status YOUR_SERVICE_UNIT
>
> immediately after boot and also explain what makes you think the service
> is not actually running.
>
> Kind regards,
> Andrei
> --
> http://wiki.debian.org/FAQsFromDebianUser
>

Re: systemdq

[chris]

There's nothing wrong with not being a fan of systemd. It's good to let
people know there's a active community that isn't overly impressed and the
link also shows that recent poll shows its quite popular position that
there should be alternatives supported. Thankfully it's still possible to
have a clean system that's systemd-free

On Sun, Dec 29, 2019, 4:30 AM  wrote:

> On Sat, Dec 28, 2019 at 08:38:25PM -0500, chris wrote:
> > dont worry the resistance to systemd is still strong not everyone drinks
> > the kool aid
>
> What I don't understand is why you have to put this under such
> antagonistic terms.
>
> Cheers
> -- tomás
>

Re: systemdq

[chris]

dont worry the resistance to systemd is still strong not everyone drinks
the kool aid

https://linux.slashdot.org/story/19/12/08/2131220/debian-begins-voting-on-supporting-non-systemd-init-options

https://www.debian.org/vote/2019/vote_002#textb


On Fri, Dec 27, 2019 at 6:40 PM ghe  wrote:

> SSH isn't starting at boot on my server. When I try to set it to do
> that, systemd says it can't do that 'without a command.'
>
> What kind of command makes it happy? Where does it need to be?
>
> (I've futzed with the ssh file in /etc/default, even entered a command:
> (qwerty="42" -- it wasn't impressed). I looked around on the web (lots
> of info about systemd commands, but nothing about what I need.)
>
> Help??
>
> --
> Glenn English
>
>

Verifying authenticity of Debian CDs

[Chris XX]

I was trying to Verify the authenticity of Debian CDs on your website, but
I don't see instructions that will guide me through the process
(step-by-step).

Can you help and/or fix?
Thanks, Chris

P.S.  this was the site I got stuck on:
https://www.debian.org/CD/verify

There is a lot of information, but no clear guidence. For example, do I
install Debian first then look somewhere for the *"fingerprints"*

I don't understand the use of this tool: *"you should use the tools
sha256sum or sha512sum to work with these."*

Re: Systemd files on a Raspberry Pi

[chris]

the resistance is still strong ...

Systemd-Free Debian "Devuan" Planning Their First Developer Gathering This
Spring
https://www.phoronix.com/scan.php?page=news_item=Devuan-Conference-2019

On Tue, Feb 12, 2019 at 2:15 PM Andrew McGlashan <
andrew.mcglas...@affinityvision.com.au> wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> Hi,
>
> On 13/2/19 3:14 am, Jonathan Dowland wrote:
> > On Sun, Feb 10, 2019 at 09:24:39AM +0100, to...@tuxteam.de wrote:
> >> On Tue, Jun 23, 2015 at 01:47:20AM +1000, Andrew McGlashan
> >> wrote:
> >
> > Did I miss 4 years of posts or did you (accidentally?) reply to a
> > 4 year old message?
>
> No, there was a new message in relation to a recent video at Linux
> Conf 2019. and the discussion sparked up again in relation to that.
>
> Cheers
> A.
> -BEGIN PGP SIGNATURE-
>
> iHUEAREIAB0WIQTJAoMHtC6YydLfjUOoFmvLt+/i+wUCXGMXIQAKCRCoFmvLt+/i
> +w3nAP0XVSJU88QWAiNbgFNmfSLlJDmW5+Ov4q9RGuv66ZTgBwEA2iatxjSLsOev
> eac0GfhP5ro8djVJ6ixxBrPTwbAREec=
> =Lh8d
> -END PGP SIGNATURE-
>
>

Re: Systemd files on a Raspberry Pi

[chris]

so relevant
https://www.youtube.com/watch?v=o_AIw9bGogo

On Mon, Jun 22, 2015 at 10:07 AM Ansgar Burchardt  wrote:

> Andrew McGlashan  writes:
> > If it quacks like a duck, it's a  duck, plain and simple.
> >
> > I absolutely agree with the post that systemd is a "cancer"
>
> And I think Debian can do fine without people who only contribute toxic
> behaviour. And yes, calling other projects a cancer is just that.
>
> Ansgar
>
>
> --
> To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmas...@lists.debian.org
> Archive: https://lists.debian.org/871th397kc@deep-thought.43-1.org
>
>

Help filing a bug report

[Chris Talbot]

Good Evening,

I have a rather specific bugthat I can reliably recreate, but I really don't 
know how to file it or how to give detailed logs on, and I would appreciate any 
advice.

I am running Debian Stable with a Cimmamon Desktop, and have it set to sign me 
in automaically. I am running it on top of an encrypted ZFS set up.  Recently, 
I purchased a 2TB hard drive and formatted it to ext4. I added this to my 
/etc/fstab:

UUID=31320a26-0b89-413f-a628-b8e10041183f /home/chris/Android ext4 defaults 0 0

On the next reboot, Cinnamon did not automatically log me in, but presented the 
log in screen to me. WHen I logged in, the command line reappeared, then the 
log in screen reappeared. I could log in as root, and if I used ctrl+alt+F1 to 
log in as "chris" on CLI, I would log in no problem.

I discovered this because I reverted the ZFS snapshot to before having the hard 
drive, and I could log in just fine. HOwever, adding that line again triggered 
the same error state. WHen I tried to remove the line from /etc/fstab and 
reboot, the error state persisted.

I have additionally found that mounting the ext4 partition through Nemo does 
not trigger this behavior.

As this is a rather odd bug, I am unsure how to gather more information, nor am 
I sure what is causing it, as I have a feeling that it is a compilation of 
issues.

Any help would be appreciated. Thank you!

Respectfully,
Chris Talbot

Debian Bug Squashing Party (BSP) in Gothenburg, Sweden - 7 April 2019

[Chris Lamb]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256


Debian Bug Squashing Party (BSP) in Gothenburg, Sweden - 7 April 2019
=

I am very happy to invite you to a Debian Bug Squashing Party in
Gothenburg, Sweden, on Sunday April 7th 2019.

The BSP will be held as part of the foss-north 2019 [0] who have
have offered Debian a room as part of the conference's "Community
Day". Free tickets to the conference itself will be provided by the
organisers.

A short registration on the wiki page [1] is required to ease the
organisation of the event. On the same page you will find
information regarding transport, accommodation and other useful
information:

  https://wiki.debian.org/BSP/2019/04/se/Gothenburg

Even if you are not a Debian Developer or Maintainer yet (but are
otherwise interested in fixing bugs and helping Debian) please do
not hesitate to attend; there will be enough people around to
sponsor uploads and/or offer advice. Team meetings/sprints during
the BSP are naturally welcome.

More information about BSPs and Release Critical bugs can be found
at [2][3][4]. In particular, don't forget that Debian is willing to
reimburse the equivalent of 100 USD to attend BSPs.

Hope to see you there.

  [0] http://foss-north.se/2019/
  [1] https://wiki.debian.org/BSP/2019/04/se/Gothenburg
  [2] http://wiki.debian.org/BSP
  [3] http://people.debian.org/~vorlon/rc-bugsquashing.html
  [4] http://bugs.debian.org/release-critical/


Regards,

- - -- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org  chris-lamb.co.uk
   `-

-BEGIN PGP SIGNATURE-
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=3MqF
-END PGP SIGNATURE-

Debian Bug Squashing Party (BSP) in Gothenburg, Sweden - 7 April 2019

[Chris Lamb]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256


Debian Bug Squashing Party (BSP) in Gothenburg, Sweden - 7 April 2019
=

I am very happy to invite you to a Debian Bug Squashing Party in
Gothenburg, Sweden, on Sunday April 7th 2019.

The BSP will be held as part of the foss-north 2019 [0] who have
have offered Debian a room as part of the conference's "Community
Day". Free tickets to the conference itself will be provided by the
organisers.

A short registration on the wiki page [1] is required to ease the
organisation of the event. On the same page you will find
information regarding transport, accommodation and other useful
information:

  https://wiki.debian.org/BSP/2019/04/se/Gothenburg

Even if you are not a Debian Developer or Maintainer yet (but are
otherwise interested in fixing bugs and helping Debian) please do
not hesitate to attend; there will be enough people around to
sponsor uploads and/or offer advice. Team meetings/sprints during
the BSP are naturally welcome.

More information about BSPs and Release Critical bugs can be found
at [2][3][4]. In particular, don't forget that Debian is willing to
reimburse the equivalent of 100 USD to attend BSPs.

Hope to see you there.

  [0] http://foss-north.se/2019/
  [1] https://wiki.debian.org/BSP/2019/04/se/Gothenburg
  [2] http://wiki.debian.org/BSP
  [3] http://people.debian.org/~vorlon/rc-bugsquashing.html
  [4] http://bugs.debian.org/release-critical/


Regards,

- - -- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org  chris-lamb.co.uk
   `-

-BEGIN PGP SIGNATURE-
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=3MqF
-END PGP SIGNATURE-

Re: [OT] scanned files are large in size

[Chris Ramsden]

On 2019-01-02 10:24, to...@tuxteam.de wrote:
> My scanner just transfers the raw image. The scan program is responsible
> for the transformation to the target format, which I can choose. This is
> how /I/ want to be treated, as a paying customer.
>
> Cheers
> -- tomás

Would you mind sharing with us what make and model you use? I haven't
found it easy to identify which scanners offer this feature.

-- 
Chris

Samba as a Domain Member in Stretch

[Chris]

Can anyone reproduce this?

Using Samba as an AD (2k12) domain member in Stretch
(2:4.5.12+dfsg-2+deb9u4) with tdb as default and rid as domain backend.
No overlapping. Everything works fine. Setup was done as in the wiki
[1].

Error NT_STATUS_NETWORK_SESSION_EXPIRED after 10 h (service ticket
timeout). Newer Samba versions aren't affected. NTLM is neither.

Cross post from:
https://lists.samba.org/archive/samba/2018-December/220015.html 


[1] https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member

Re: using a Windows 7 disk image with KVM?

[Chris]

On Fri, 21 Sep 2018 04:05:53 -0400
Gary Dale wrote:

> BTW: before making the image, I did run MergeIDE on the physical 
> machine. It is probably required since Windows hates being moved to
> new hardware.

I've also used Merge IDE with Windows XP and 2003. It's a nice tool. Do
you happen to know if there's a version that's suitable for Windows 10?

Chris

Windows bootloader (was Re: using a Windows 7 disk image with KVM?)

[Chris]

On Fri, 21 Sep 2018 18:49:43 +0500
Alexander V. Makartsev wrote:

> I always prefer to do the job with the tools that are native to OS.

Me too. Unfortunately, I wasn't able to repair the bootloader when
moving a windows 10 partition with gparted (to resize it later).
Reinstalling Windows was faster.

Chris

Re: using a Windows 7 disk image with KVM?

[Chris]

On Thu, 20 Sep 2018 12:28:31 +0500
Alexander V. Makartsev wrote:

> Depending on source of your disk image I'd try to restore windows
> bootloader (bcdboot) inside disk image and see if that helps. You can
> do it from installation media without proceeding with repair
> procedure. Press Shift-F10 to invoke CMD and from there you can check
> if your disk image is ok, all partitions are intact (via
> diskpart.exe) and restore bootloader inside mounted Windows' boot
> partition (via bcdboot.exe).

Another option is Mini Tool Partition Wizard [1] to repair Windows
bootloaders. It seems the onboard tools, especially bcdboot.exe, can't
fix it always.

Chris





[1] https://www.partitionwizard.com/free-partition-manager.html

Re: using a Windows 7 disk image with KVM?

[Chris]

On Fri, 21 Sep 2018 00:13:28 -0400
Gary Dale wrote:

> I'm pleased to report that with the firmware change, the new image 
> booted fine first try! Now I just need to do a little tuning.

Which tool did you use to create the disk image? Was it a physical
machine before?

Did you have to "repair" the windows installation before booting in KVM?

Chris

systemctl can not start X, but startx can.

[Chris Capon]

Hi.
During a recent update to xorg 1:7.7+19 my graphical environment stopped
initializing on reboot.

sudo systemctl isolate graphical.target
fails to initialize the graphics card with these messages:

[   340.372] (EE) NVIDIA(GPU-0): Failed to initialize the NVIDIA GPU at
PCI:5:0:0.  Please
[   340.372] (EE) NVIDIA(GPU-0): check your system's kernel log for
additional error
[   340.372] (EE) NVIDIA(GPU-0): messages and refer to Chapter 8:
Common Problems in the
[   340.372] (EE) NVIDIA(GPU-0): README for additional information.
[   340.372] (EE) NVIDIA(GPU-0): Failed to initialize the NVIDIA graphics
device!
[   340.372] (EE) NVIDIA(0): Failing initialization of X screen 0


on the other hand:
startx
initializes it with no problems.

[   150.685] (--) NVIDIA(0): Valid display device(s) on GPU-0 at PCI:5:0:0
[   150.685] (--) NVIDIA(0): CRT-0
[   150.685] (--) NVIDIA(0): CRT-1
[   150.685] (--) NVIDIA(0): DFP-0 (boot)
[   150.685] (--) NVIDIA(0): DFP-1
[   150.685] (--) NVIDIA(0): DFP-2
[   150.687] (II) NVIDIA(0): NVIDIA GPU GeForce GT 430 (GF108) at PCI:5:0:0
(GPU-0)
[   150.687] (--) NVIDIA(0): Memory: 1048576 kBytes
[   150.687] (--) NVIDIA(0): VideoBIOS: 70.08.29.00.30
[   150.687] (II) NVIDIA(0): Detected PCI Express Link width: 16X


I haven't been able to find additional info on what the problem is.

Attached are the two complete Xorg.log files.

Can anyone help?
Thanks.


Xorg.0.log.isolate
Description: Binary data


Xorg.0.log.startx
Description: Binary data

Re: backporting php7.2

[Chris]

On Wed, 6 Jun 2018 22:04:36 +0200
Lucio wrote:

> Are there any ready to use php7.2 packages for Debian Stretch out
> there?

probably there:

https://deb.sury.org/

-- 
Papst Franziskus ruft zum Kampf gegen Fake News auf. Wir finden, der
Mann, der sich als Stellvertreter Christi ausgibt, von dem er
behauptet, dessen Mutter sei zeitlebens Jungfrau gewesen, er hätte über
Wasser gehen und selbiges in Wein verwandeln können, hat vollkommen
recht.

Re: filter network traffic of KVM guests.

[Chris]

On Sun, 20 May 2018 00:15:12 +0300
Reco wrote:

> Not your only option (had my share of openvswitch, ditched the thing
> recently). I fact, I count four possible ways of doing it (and that's
> without the external hardware):

Thank you Reco!

Your replies were very helpful. I really appreciate them.

Chris

-- 
Papst Franziskus ruft zum Kampf gegen Fake News auf. Wir finden, der
Mann, der sich als Stellvertreter Christi ausgibt, von dem er
behauptet, dessen Mutter sei zeitlebens Jungfrau gewesen, er hätte über
Wasser gehen und selbiges in Wein verwandeln können, hat vollkommen
recht.

Re: need help on using openvpn

[Chris]

On Sat, 19 May 2018 08:05:40 + (UTC)
Long Wind wrote:

> i've bought vpn service
> the provider gives me many .opvn files and the same login/password
> every time i use, i have to enter login/password
> 
> is it possible to specify login/password on openvpn command line or a
> config file?
> 
> openvpn manual is long, i'm unable to find answer, Thanks


auth-user-pass pass.txt

pass.txt in the same directory where the ovpn file is:

p1234567
topsecretpassword

-- 
Papst Franziskus ruft zum Kampf gegen Fake News auf. Wir finden, der
Mann, der sich als Stellvertreter Christi ausgibt, von dem er
behauptet, dessen Mutter sei zeitlebens Jungfrau gewesen, er hätte über
Wasser gehen und selbiges in Wein verwandeln können, hat vollkommen
recht.

Re: Securing development environment

[Chris]

On Fri, 18 May 2018 23:43:45 +0200
Hubert Hauser wrote:

> Which option is best solution? I am considering use VPN but I am not
> sure is too complicated and that problem can be solved simpler by
> nginx basic_auth mechanism and fail2ban. What are your
> recommendations?

Make those services listen to localhost and do port forwarding in your
SSH client.

Chris

-- 
Papst Franziskus ruft zum Kampf gegen Fake News auf. Wir finden, der
Mann, der sich als Stellvertreter Christi ausgibt, von dem er
behauptet, dessen Mutter sei zeitlebens Jungfrau gewesen, er hätte über
Wasser gehen und selbiges in Wein verwandeln können, hat vollkommen
recht.

Re: filter network traffic of KVM guests.

[Chris]

On Thu, 17 May 2018 23:11:51 +0300
Reco wrote:

> Either ebtables (for a conventional brigde) or macvtap in private mode
> will do it. Openvswitch will work too, but it's nowhere near in
> simplicity compared to macvtap.

Thank you for your quick reply, Reco.

Unfortunately, I described improperly what I want to achieve.

I don't want to block all host - guest connections, but allow some with
iptables, e.g. SSH login from host to guest, but not the other way
round.

Do I have to use Open vSwitch then? 

- Chris

-- 
Papst Franziskus ruft zum Kampf gegen Fake News auf. Wir finden, der
Mann, der sich als Stellvertreter Christi ausgibt, von dem er
behauptet, dessen Mutter sei zeitlebens Jungfrau gewesen, er hätte über
Wasser gehen und selbiges in Wein verwandeln können, hat vollkommen
recht.

filter network traffic of KVM guests.

[Chris]

All,

I'd like to filter network traffic of KVM guests.

case A:
- no MAC / IP Spoofing
- isolate guest, connections to the gateway only
- no connection to the KVM host
- no NAT
- maybe contradictory: same subnet as KVM host

case B:
- no MAC / IP Spoofing
- isolate guest, connections to the gateway only
- no connection to the KVM host
- no NAT
- some guests should share a "private VLAN"

What's the easiest way to separate KVM guests' traffic on the host?

I read it's deprecated to use iptables on a linux bridge. [1]

I don't like the libvirt (NAT) iptables rules. The default libvirt
network connections aren't secure the way they are pre-configured.
A good summary is in [2] (German only).

Is Open vSwitch a viable solution? Can OVS ACLs (or firewall) be used 
instead of iptables? I'm a bit surprised, that I couldn't find more 
about it on this list.


Chris



[1] http://lists.gnu.org/archive/html/qemu-devel/2009-07/msg01592.html
[2]
https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/Studien/Sicherheitsanalyse_KVM/Sicherheitsanalyse_KVM.pdf?__blob=publicationFile=3

-- 
Papst Franziskus ruft zum Kampf gegen Fake News auf. Wir finden, der
Mann, der sich als Stellvertreter Christi ausgibt, von dem er
behauptet, dessen Mutter sei zeitlebens Jungfrau gewesen, er hätte über
Wasser gehen und selbiges in Wein verwandeln können, hat vollkommen
recht.

Re: UEFI/"BIOS" booting, was Re: USB Install Fails, Complains about CD-ROM

[Chris Ramsden]

On 2018-05-14 14:55, David Wright wrote:
> Would I be correct in thinking that the BIOS POST boot screen is
> what you get when you hit F12 sufficiently quickly after switch-on?
> So are you choosing between UEFI and Legacy (compatibility) mode.
> (I would like to know how Dell handles what I've been reporting on
> with this Lenovo.)
Yes. F12. Then you get to choose between the various bootable devices
and partitions. But this is BIOS or firmware (not Grub) doing it for you.
>> I gave up, wiped windows and went through with a clean Linux install. I
>> don't really want windows that much, but it irks me that I haven't been
>> able to fathom out how to return to the original state in which it was
>> shipped. Your words hint at many things I became vaguely aware of but
>> totally failed to grasp. The other posters to this thread have at least
>> reassured me that it isn't easy or trivial to get right.
> This is the scenario I was trying to avoid. As far as windows was
> concerned, my mantra was Failure Is Not An Option.
>
> Cheers,
> David.
-- 
Chris

Re: UEFI/"BIOS" booting, was Re: USB Install Fails, Complains about CD-ROM

[Chris Ramsden]

On 2018-05-14 01:21, songbird wrote:
> Pascal Hambourg wrote:
> ...
>> I agree with the author. If you want to keep the existing EFI Windows 
>> installation and have a convenient dual boot with GRUB, you'll have to 
>> set up your favourite distribution to boot in EFI mode. If you want to 
>> go back to legacy boot, including for Windows, you'll have to 
>> repartition the disk to MSDOS format and reinstall Windows.
>   all i know is that if your bios doesn't boot in
> UEFI mode and you don't know anything about what this
> means you can end up installing Debian without UEFI
> support and then it can be rather fun to get it back.
>
>   i managed to have grub do an install to a stable
> partition without UEFI and i messed up the testing
> setup i had.  it took me some while to figure out
> what went wrong and how to fix it.  if you don't
> really understand grub rescue commands and there
> isn't a working system you can use to connect and
> find help for the commands you need to enter it's
> very frustrating.
>
>   the Debian UEFI pages helped a great deal but 
> there were other things i had to figure out coming in
> cold to UEFI.
>
>   how to create a /boot/efi partition, what goes in 
> it, mounting it, clearing and putting in new efibootmgr 
> entries, etc.
>
>   refind was useful and at least it does what i expect
> it to do.  grub, i dislike how it assumed things i
> didn't want to do.  alas, i didn't know how different
> UEFI was from bios mode.
>
>   i still haven't redone my efibootmgr entries but
> refind doesn't care, i can create custom entries in
> that config file and they work that is all i really
> need at this point.
>
>
>   songbird
>
Hmm, do you have any useful references?

I got a new Dell computer, shrunk the existing partitions down and
successfully installed grub2 and got a windows10/Linux multi boot using
grub. Then later I tried to upgrade my Linux and soon found that I was
getting error messages about grub not being able to find necessary
features on the boot device.

I tried to rebuild it with a clean install of Windows 10, reasoning that
if I could get it back to the original configuration, I could repeat the
original exercise. But alas, no, it remains stubbornly unable to install
grub2 alongside the windows bootloader. I got it to a state where I
could use the BIOS POST boot screen to choose a boot option, but this
wasn't the original successful arrangement where grub offered me the
Linux/windows loader choice.

I gave up, wiped windows and went through with a clean Linux install. I
don't really want windows that much, but it irks me that I haven't been
able to fathom out how to return to the original state in which it was
shipped. Your words hint at many things I became vaguely aware of but
totally failed to grasp. The other posters to this thread have at least
reassured me that it isn't easy or trivial to get right.

-- 
Chris

Debian 9 sucks really badly

[Chris Anderson]

Hello

I have been using different flavours of Linux since slackware 96 over 20 
years ago. Since then I have installed and used at least a dozen 
different flavours. By far the most challenging was the X windows system 
for slackware but I managed to get it installed and running with no 
problems.


Last week I bought a new PC and decided to try debian so I downloaded 
the DVD version 9 and performed a fresh install besides windows 10. 
Right from the off, it fucked up, Grubb was a hassle as this was the 
default boot loader,(I have always used LILO), it would not find the 
windows partition, I managed to fix this. Then it didn't give me a 
choice of X windows manager, I was stuck with KDE, which I am familiar 
with and am aware of its may limitations and given the choice I wouldn't 
use KDE for installation and configuration.


Nearly everything fucked up from the Network install to the gcc make 
command, what a hassle and after spending nearly a week trying to get it 
all working I've had enough and am not wasting any more of my time on 
this awful software.


So thanks for wasting my time Debian and for future reference, go and 
get fucked!!!



Chris Anderson

Pulseaudio anyone?

[chris]

I'm running a newly installed Debian Buster and can't get pulseaudio to run.

It is set to start on login by user.

pulseaudio -k yields

Failed to kill daemon: No such file or directory

then pulseaudio --start

seems to be accepted without any message

then ps aux | grep pulse yields

ccc   2771  0.0  0.0  12892   996 pts/0S+   11:14   0:00 grep 
--color=auto pulse

I really don't know where to start looking for the problem.

Any suggestions?

Chris Dunn

Re: Dell Open Manage

[Chris]

On Mon, 12 Feb 2018 10:34:45 +
Adam Weremczuk wrote:

> Or if an official release for stretch is going to be available soon?

There should be a Stretch packet in december already, but there isn't.
The Jessie package is working:

0. use old SSL library :(
- wget
http://ftp.us.debian.org/debian/pool/main/o/openslp-dfsg/libslp1_1.2.1-10+deb8u1_amd64.deb
- wget
http://ftp.us.debian.org/debian/pool/main/o/openssl/libssl1.0.0_1.0.2l-1~bpo8+1_amd64.deb
- mkdir libslp libssl
- dpkg -x libslp1_1.2.1-10+deb8u1_amd64.deb libslp (isn't necessary?)
- dpkg -x libssl1.0.0_1.0.2l-1~bpo8+1_amd64.deb libssl
- from libssl:
- cp -R * /opt/dell/srvadmin/lib64

1. use a wrapper
#!/bin/bash
export LD_PRELOAD=/opt/dell/srvadmin/lib64/libcrypto.so.1.0.0
/opt/dell/srvadmin/sbin/omreport.orig $*

2. don't forget to start

/opt/dell/srvadmin/sbin/srvadmin-services.sh

- Chris


-- 
Papst Franziskus ruft zum Kampf gegen Fake News auf. Wir finden, der
Mann, der sich als Stellvertreter Christi ausgibt, von dem er
behauptet, dessen Mutter sei zeitlebens Jungfrau gewesen, er hätte über
Wasser gehen und selbiges in Wein verwandeln können, hat vollkommen
recht.

Re: Installing Debian on Chuwi Hi12

[Chris Dunn]

>> Now when I boot up the device I get 10 seconds of Android loading
>> graphics before it kicks into Debian. Android was removed months ago.
>> Now if you can give me some guidance as to how to remove the annoying
>> Android graphics ..

> hmm, not sure about that one (never dealt with android myself), just to
> make sure, we are not possibly talking about the bios/efi splash screen
> here, the one which e.g. on my laptop shows a lenovo logo for a few
seconds ?

Interesting.

Before Debian I used to get a CHUWI logo and an F7 key would give me a
choice of Windows or (X)ubuntu.

Now the CHUWI logo is gone and I get an American Megatrends logo. F7 at
this stage gives me a choice between Debian and Android-IA. Selecting
Android (long gone) takes me to Debian GRUB boot screen.

If I do not F7 and allow the boot to continue I get a few seconds of the
Android robot and a countdown 10 to 0 before the Debian GRUB boot screen
appears.

Nothing more than a nuisance really but any thoughts as to how to finally
purge Android?

Re: Installing Debian on Chuwi Hi12 Tablet

[Chris Dunn]

On Mon, 29 Jan 2018 20:08:05 +0100
Michael Lange  wrote :

>I don't know if the Debian Live system will handle the 32bit uefi issue
> properly when installing, but this can , if necessary be fixed later.
> I had the same problem with a similar machine. Of course I could  remove
> windows completely.
> I am not sure if the installer's auto-partitioning works properly, I used
> the manual partitioning. You must make sure that you have a small (I
> think 100 MB or so is sufficient) FAT partition with the "Boot" flag set,
> which will be mounted to /boot/efi . The rest of the disk can be used
> as usual for "/" and swap.
> If the installer actually fails to install the proper 32bit-efi-grub, that
> does not mean that your device is bricked. This can be easyly fixed by
> booting a live system again, doing a chroot into the installed system and
> install the required grub packages manually (that's what I had to do ;)

Michael thanks for your guidance. I eventually got around to installing
Debian Buster as I thought it was most likely to have my wifi driver (and
it did), so the install was much easier.

I guess the installer is continually evolving so things change fairly
quickly. The 32 bit uefi question never cropped up so I believe the
installer is just set to handle that without raising it.

I chose guided partitioning of the whole disk and it gave me 1mb free space
+ a 500+ mb EPT? partition + the bulk of the electronic drive for / + some
swap space 4mb? + another 1 mb of free space. Pressed go and held my
breath. It worked.

At the point of installing grub there was a slightly scary message to the
effect that on some hardware the uefi setups cannot be guaranteed to handle
grub properly so recommending installing grub to a separate partition as
that was almost certain to work and letting me choose which option. Chose
the separate partition and ended up with a successful install.

Thanks again for your help.

Now when I boot up the device I get 10 seconds of Android loading graphics
before it kicks into Debian. Android was removed months ago. Now if you can
give me some guidance as to how to remove the annoying Android graphics
..

Installing Debian on Chuwi Hi12 Tablet

[Chris Dunn]

I'm contemplating installing Debian on my beloved Chuwi Hi12 tablet.
The machine is cheap (circa $300) and while there are certain bits of
the hardware that do not (yet) work under Linux there is nothing that
troubles me, and the graphics are superb - 2160x1440 on a 12" screen.

At present it is dual-booting Xubuntu and Windows (Android was removed).
I installed Xubuntu because I could not at the time successfully burn a
Debian live image to USB, so could not test it out before installing.

Now I have a new live Debian USB and have tested it on the Chuwi.
Everything works as expected. No wifi (rtl8723bs chip) but that was
expected.

I'm ready to install debian-live-9.3.0-amd64-xfce from the live USB and
would like to install it to the whole of the Chuwi solid state 64gb
drive, binning Windows and Xubuntu in the process.

But I'm nervous about the possibility of turning the tablet into a
brick.

It has a 32 bit UEFI system and while I've tried to research the UEFI
complications find it difficult to grasp the full picture on UEFI
(particularly 32 bit with a 64 bit Debian).

As best I can make out I should have no problems as the Debian
installer will detect and handle the 32 bit UEFI. However I've been
unable to find full instructions for using the whole of the storage for
Debian, only guides for dual installs alongside Windows.

Does anyone have any comments or suggestions that might be useful to me
in the installation? In particular do I need to preserve any existing
Windows or EFI partition even though Windows will no longer be on the
machine?

Any help would be greatly appreciated. Thanks in advance.

Re: looking for drawing program to inscribe a square in a circle and label items

[Chris Ramsden]

On 20/01/18 03:50, Dan Hitt wrote:
> I'm looking for a gui drawing program that will let me, for example,
> draw a circle, inscribe a square in the circle, connect the opposite
> edges of the square with line segments, draw the diagonals of the
> square, and label the vertices, edges, and regions of the figure.
>
> So, something like xfig, except that it should have geometrically
> describable grouping or linking options.  (You can glue objects
> together with xfig, but afaik not link them loosely, like through a
> point of tangency.)
>
> I.e., if i draw two primitives (like a square and a circle), then it
> should be possible to demand that they stay tangent, or that the
> corners of the square be on the cricle (inscription), and these
> relations will continue to hold if one primitive or the other is
> resized or scaled or moved (and the relations should be recorded as
> some kind of constraints in the file format).
>
> Maybe some kind of svg editor is capable of doing this?
>
> Anyhow, tia for any pointers.
>
> dan
>
Inkscape?

-- 
Chris

Re: How to create a PDF-Printer from the command line

[Chris Ramsden]

On 17/01/18 21:42, Ben Caradoc-Davies wrote:
> On 18/01/18 10:37, Joel Wirāmu Pauling wrote:
>> Works fine for txt, although as it rasterizes things it's not going to be
>> optimized for size.
>
> Yes, typically, but for large fonts and low resolution outputs with few 
> pages, rasterised pages may be smaller.
>
> Kind regards,
>
If I feed it a text file, it gives me an error:

convert: improper image header `self_spam.txt' @ error/txt.c/ReadTXTImage/439.

What's the trick to making it work with a text file as input?
-- 
Chris

Re: NFS client and untrusted server

[Chris]

On Fri, 24 Nov 2017 21:44:56 -0500
Roberto C. Sánchez wrote:

> NFS is a very old protocol that very likely has as yet undiscovered
> vulnerabilities.  I would expect that the likelihood of there being
> even a theoretical vulnerability that would allow a malicous user on
> the server to gain access to a client would be very low.

Ok. I wasn't sure because it seems rather complex with all this RPC
stuff.

> However, I think you are going about this all wrong.  A backup script
> or program would have to touch/examine every file to determine its
> age, MD5 sum, or whatever other feature drives the backup/no-backup
> decision. NFS is actually a terrible protocol for this sort of thing.

Ok, [1] for example says it's factor two compared to iSCSI.
 
> That is likely to be more secure and I can practically guarantee it
> will have better performance.

That's probably better. I was thinking about NFS because I don't have
enough disks on the backup server. Those files should go to tape.

Thank you for your quick reply!

- Chris


[1]
https://www.usenix.org/legacy/publications/library/proceedings/fast04/tech/full_papers/radkov/radkov_html/head.html

NFS client and untrusted server

[Chris]

All,

I want to backup a DMZ-server to an internal backup server.

Is it reasonable to setup an NFS-server in the DMZ and mount it from
the inside server using the read-only, noexec and nosuid options? Could
an attacker gain access to the internal server this way?

Does anyone use such a setup?

internal Server ---> DMZ
(NFS-Client)(NFS-Server)

- Chris

Re: Logiciel de synchronisation automatisé

[chris navas]

bonjour Benoit,

fouille du coté de inotify avec rsync ;)


Belle journée,

Chris.


Le 8 novembre 2017 à 09:11, Benoit B <benoit...@gmail.com> a écrit :

> Bonjour,
>
>
> Comment détecter une modification dans un système de fichier pour
> utiliser un logiciel comme rsync ?
> Je recherche un logiciel qui surveille les répertoires indiqués.
> Exemple :
> Je veux surveiller
> /home/utilisateur/Office
> /home/utilisateur/truc
> /home/utilisateur/much/bidule
>
> Dès qu'une modification est faite sur un fichier ou un sous répertoire
> de Office, truc, bidule, cette modification est synchronisée
> automatiquement autre part.
> Exemple :
> /ptDeMontage/backup/Office
> /ptDeMontage/backup/truc
> /ptDeMontage/backup/much/bidule
> Aura toujours le même contenu que
> /home/utilisateur/Office
> /home/utilisateur/truc
> /home/utilisateur/much/bidule
>
> Se ça existe, je préférerais un logiciel tout fait plutôt que devoir
> écrire un script avec rsync qu'il faudra encore déclencher à
> intervalle régulier ...
>
> Merci d'avance
>
> Benoit
>
>
>

Re: [Semi-OT] samba

[Chris]

On Sun, 24 Sep 2017 15:21:40 +0200
Pol Hallen <de...@fuckaround.org> wrote:

> I looking for a windows program to automatize transfer of file from 
> windows to samba file server

robocopy? Bash? What do you want to automatize?

- Chris

Re: Replace systemd

[chris]

systemd: Make Linux Great Again! (c)

On Wed, Jul 5, 2017 at 4:56 PM, Jimmy Johnson 
wrote:

> On 07/05/2017 07:18 AM, to...@tuxteam.de wrote:
>
>> -BEGIN PGP SIGNED MESSAGE-
>> Hash: SHA1
>>
>> On Wed, Jul 05, 2017 at 09:48:07AM -0400, Carl Fink wrote:
>>
>>> On Wed, Jul 05, 2017 at 01:56:02PM +0100, Jonathan Dowland wrote:
>>>
>>> Anyway, since you are no longer a Debian user, you are unlikely to see
 this message, as surely you have dutifully unsubscribed and will not be
 posting here anymore, as is right and proper.

>>>
>>> It's perfectly possible to use both Debian and Devuan [...]
>>>
>>
>> Thanks for reminding us of that :-)
>>
>> Yeah, sadly the scars from The Big Flamewar still itch, and the back-and-
>> forths tend to transport some amount of snide and bitterness under a
>> polite cover[1]. I won't exclude myself from that, mind you!
>>
>> This is the main thing I dislike about Devuan. IMHO their effort would
>> be better spent whithin Debian, making and keeping the other inits in a
>> viable condition, but hey, it's their choice, and it's free software
>> (meaning that Debian might profit from their work anyway, or that even
>> (gasp!) collaboration is possible, as has been between Ubuntu and Debian).
>>
>
> Is it possible that Devuan is becoming more Debian and Debian is becoming
> less Debian? What do you say to that? Hypothetically speaking of course. :)
>
> Just maybe, all the GOOD Debian developers are being ran off by Red/Black
> Hat Hypocrites who disguise themselves as Penguins. Is that posable?
> Hypothetically speaking of course. :)
>
> Cheers
>>
>
> Yes, cheers!
>
> [1] I think this polite cover still has a positive function!
>>
>
> You bet ya!
> --
> Jimmy Johnson
>
> Debian Buster - KDE Plasma 5.8.7 - Intel G3220 - EXT4 at sda14
> Registered Linux User #380263
>
>

Re: outil de monitoring

[chris navas]

bonjour,

j'utilise https://prometheus.io/ + https://grafana.com/

Le 12 mars 2017 à 23:59, Jean-Michel OLTRA 
a écrit :

>
> Bonjour,
>
>
> Je cherche un nouvel outil de monitoring réseau.
>
> Dans une autre vie, j'ai utilisé Nagios/Centreon. Puis Shinken.
>
> Je viens de remettre en place la version actuelle de Shinken sur une Jessie
> (le tarball, pas le paquet de Jessie).
> Ça ne fonctionne pas, et Shinken semble au minimum en stand by.
>
> Il me faudrait mettre en place autre chose. J'ai vu Zabbix et Icinga
> empaquetés. OpenNMS Horizon (non empaqueté).
>
> Des avis à me proposer sur ces outils ? Sur d'autres qui feraient un boulot
> identique ?
>
> Merci.
>
> --
> jm
>
>
>

Re: [qubes-devel] Why gets unattended-upgrades installed after Debian jessie -> Debian stretch upgrade?

[Chris Laprise]

On 02/06/2017 09:25 PM, Unman wrote:

On Mon, Feb 06, 2017 at 01:19:00PM +, Patrick Schleizer wrote:

The unattended-upgrades was not installed on my Debian jessie system.
After upgrading to Debian stretch, the package unattended-upgrades got
installed. 'reverse-depends unattended-upgrades' [1] did not make me any
wiser. There must be a gap of my apt knowledge. Can anyone shed light on
this please?

Best regards,
Patrick

[1]
Reverse-Recommends
==
* education-common
* python3-software-properties

Reverse-Depends
===
* parl-desktop
* plinth

Packages without architectures listed are reverse-dependencies in:
amd64, arm64, armel, armhf, hurd-i386, i386, kfreebsd-amd64,
kfreebsd-i386, mips, mips64el, mipsel, powerpc, ppc64el, s390x


I remember a thread last year saying that unattended-upgrades should be
installed by default, and enabled. I guess that is what you're seeing
here Patrick.
This was on debian-devel - I thought it related to d-i but it may be
brought in as default package on dist-upgrade.

have a look here:
https://lists.debian.org/debian-devel/2016/11/msg00262.html



Unfortunately it clashes with template usage patterns... and probably 
not great for template-based VMs either.


Automatic updates would be better initiated from dom0, since the 
templates don't run on a regular basis and there are VM maintenance 
issues as well.


Chris

Re: rsnapshot advice

[Chris]

Pol Hallen wrote:

> What is better: make on each server rsnapshot and automatically backup
> data (ssh+root) to primary server?
>
> Or on primary server make a remote backup to all other servers (ssh+root)?

I would pull the backup, in case one server is compromised, only one is
affected.

- Chris

Re: Windows

[Chris Angelico]

On Fri, Sep 16, 2016 at 6:34 PM, Joe  wrote:
>> But this is no go in Windoze, and I don't
>> know how to Copy and Paste in the Windoze world.
>
> The same way you do in any medium-heavyweight Linux DE. Right-click,
> menu, or drag and drop. For a text file, open in Notepad (if it has
> a .txt suffix, just double-click), highlight, crtl-C, paste with
> ctrl-V. Where do you think the Linux DEs got their look and feel from?

The same place Windows got it from: the Common User Access guidelines.
Ctrl-Ins to copy, Shift-Ins to paste, and the Ctrl-X/C/V as optional
bonuses.

ChrisA

Re: Odd issues with Stretch installation

[Chris Angelico]

On Fri, Sep 16, 2016 at 4:33 AM, Felix Miata <mrma...@earthlink.net> wrote:
> Ric Moore composed on 2016-09-16 03:49 (UTC+1000):
>
>> Chris Angelico wrote:
>
>
> I don't see that either of you have mentioned your hardware in this thread.
> If non-working Xorg is your root problem, maybe you're up against a broken
> driver and a switch is called for:
>
> http://www.phoronix.com/scan.php?page=news_item=Ubuntu-Debian-Abandon-Intel-DDX

Hmm, interesting.

Do you want to know about my real hardware, or what the machine in
question was running on, which is VirtualBox's simulated hardware? I
have a physical computer with an nVidia GTX 960 [which my fingers keep
wanting to type as GTK 960], running Debian Stretch, and inside that
is VirtualBox 5.1.4-dfsg-1+b1 (from the main Debian repos), in which I
created a VM to mess around with Debian Stretch (and ultimately to
patch xfwm4, although at time of writing the above posts, I was
building the control, with the standard repo-provided window manager).

Real machine:
rosuav@sikorsky:~$ lspci|grep VGA
01:00.0 VGA compatible controller: NVIDIA Corporation GM206 [GeForce
GTX 960] (rev a1)
Virtual machine:
rosuav@debian:~$ lspci|grep VGA
00:02.0 VGA compatible controller: InnoTek Systemberatung GmbH
VirtualBox Graphics Adapter

> "The wise are known for their understanding, and pleasant
> words are persuasive." Proverbs 16:21 (New Living Translation)
>
>  Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!

Go Team OS/2!

ChrisA

Re: Odd issues with Stretch installation

[Chris Angelico]

On Fri, Sep 16, 2016 at 3:49 AM, Ric Moore <wayward4...@gmail.com> wrote:
> On 09/15/2016 04:13 AM, Chris Angelico wrote:
>>
>> On Thu, Sep 15, 2016 at 5:54 PM, Ric Moore <wayward4...@gmail.com> wrote:
>>>
>>> On 09/14/2016 10:43 PM, Chris Angelico wrote:
>>>
>>>> The first sign of failure was that, after installation, the GUI didn't
>>>> load properly - just a black screen with a mouse cursor. In trying to
>>>> track down the failure, I found the disk to be full, so I didn't
>>>> bother analyzing it any further.
>>>
>>>
>>>
>>> Same problem. Only my tower has plenty of memory and disk space. I just
>>> get
>>> a black screen, lonely mouse cursor in the upper left of my display. Yes,
>>> the mouse cursor does move around. So, I open a terminal and startx gives
>>> me
>>> the XFCE desktop. Ric
>>
>>
>> How did you open a terminal? From that screen, or by booting in a
>> different mode? When I tried that, I got a "no screens found" error,
>> which has led me to a solution, of sorts (and which I've literally
>> only just finished testing while writing this email):
>
>
> By "terminal" I meant logging into a text-only terminal with ctrl-alt-F1
> I'm not running a virtual instance, but the problem is the same with my
> primary XFCE4 desktop. I've google's but am not coming up with anything
> recent. Ric

Ah okay. I was actually unable to use Ctrl-Alt-F1 as it just switched
my _main_ system to console.

Since startx is working for you, it's probably unrelated to my issues.

ChrisA

Re: Odd issues with Stretch installation

[Chris Angelico]

On Thu, Sep 15, 2016 at 5:54 PM, Ric Moore <wayward4...@gmail.com> wrote:
> On 09/14/2016 10:43 PM, Chris Angelico wrote:
>
>> The first sign of failure was that, after installation, the GUI didn't
>> load properly - just a black screen with a mouse cursor. In trying to
>> track down the failure, I found the disk to be full, so I didn't
>> bother analyzing it any further.
>
>
> Same problem. Only my tower has plenty of memory and disk space. I just get
> a black screen, lonely mouse cursor in the upper left of my display. Yes,
> the mouse cursor does move around. So, I open a terminal and startx gives me
> the XFCE desktop. Ric

How did you open a terminal? From that screen, or by booting in a
different mode? When I tried that, I got a "no screens found" error,
which has led me to a solution, of sorts (and which I've literally
only just finished testing while writing this email):

1) Install Debian as normal
2) Boot, and at the grub screen, edit - on the 'linux' line, add
"systemd.unit=multi-user.target"
3) Install VirtualBox Guest Additions via build-essential,
module-assistant, and the provided .iso
4) Reboot normally.

In previous Debians, guest additions have come along automatically, so
I'm hoping that this issue is only because I'm running Testing and
stuff hasn't settled down. Installing Debian Stable, installing
VirtualBox from the standard repos (albeit the contrib section), and
then installing Debian Stable inside that, should be an easy
operation.

In any case, the "disk full is not an error" error is still an error.
It just doesn't happen to have been the cause of the video issues.

ChrisA

Odd issues with Stretch installation

[Chris Angelico]

Hi! Not sure how best to report this, as I have no idea what Debian
package (if any?) handles the installer.

In trying to test an Xfce patch, I spun up a virtual machine (using
VirtualBox under my main Debian Stretch installation, though I doubt
that makes any difference). The virtual hard disk I assigned it is 8GB
total in size, and I gave it 4GB of RAM.

Two problems:

1) The default settings gave 4GB to the root partition and 4GB to the
swapper. Probably a poor choice, but not overly serious except for...
2) ... the installer running out of disk space is not, apparently, an
error. I had no idea whatsoever that there had been any installation
difficulties.

The first sign of failure was that, after installation, the GUI didn't
load properly - just a black screen with a mouse cursor. In trying to
track down the failure, I found the disk to be full, so I didn't
bother analyzing it any further.

Unfortunately, I'm still having trouble after reallocating it (6GB
root, rest to swap) - so it's some other problem. How should I go
about tracking it down?

Chris Angelico

preseed partman specify_usage

[Chris Hamilton]

Hi, are there any examples of a preseed file or some one willing to provide an 
example using specify_usage? I am trying to build a vm that will host many 
containers and so I need a high inode count for the partition.

Thanks!

Re: Improper visuals after update

[Chris Joysn]

Hello,

i had the same issue :)

the issue seems to be with gtk-3 based apps. The widgets dont have any
decoration, like input fields have no visible borders, check boxes no
borders.. menu controls have only their text / titles drawn without any
space and border in between their characters... I tried to post a mail here
but after a few days i understood that this list silently drops mails with
attachments...
Examples of apps affected i used were Evolution (completely unusable with
this behavior) and Synaptic (i switched to aptitude for package management).

i recovered the screenshots from the sent folder and put them onto imagebin:
https://imagebin.ca/v/2jsCHryiFpi8
https://imagebin.ca/v/2jsEiMInvzRD
https://imagebin.ca/v/2jsEw627EVgh

I purged my home directory completely to get rid of all . directories with
eventually wrong config files, created a new user account to check as well.

What finally solved the issue was the dist-upgrade from testing to
unstable. Now the problem is gone.

hope that helps..

Joysn

On 30 May 2016 at 19:37, Lisi Reisz  wrote:

> On Monday 30 May 2016 18:05:51 Bhasker C V wrote:
> > anyone ?
>
> I, for one, can't make any sense of the visual you supplied and the
> message,
> so I just gave up.  Perhaps start again with explaining the problem?
>
> Lisi
> >
> > On Mon, May 30, 2016 at 9:44 AM, Bhasker C V 
> wrote:
> > > On Sun, May 29, 2016 at 10:47 PM, Ric Moore 
> wrote:
> > >> On 05/29/2016 03:38 PM, Bhasker C V wrote:
> > >>> Hi,
> > >>>
> > >>>After an update I see that my dialog boxes are looking weird. I
> > >>> cannot describe it but it looks as-if the contrast is lost or the
> theme
> > >>> is not supported ? The boucing bars have gone missing but mouse over
> > >>> and clicks work. This is especially bad with nm-applet. I use mate
> > >>> desktop
> > >>>
> > >>> If anyone knows please can they  tell me how to get this fixed ?
> > >>>
> > >>> An example image is attached at https://unsee.cc/zisapuge/
> > >>
> > >> I'm running Sid and XFCE. My last updates pulled in a pile of Mate
> > >> packages. I deleted them. Ric
> > >
> > > I somehow have a feeling that my theme is not getting rendered
> properly.
> > > I created a brand-new user just to make sure that my home dir's earlier
> > > files may not interfere with updates
> > > The new user is also showing the same behaviour. Dialog boxes are not
> > > rendered properly. gtk ones are the worst suffering.
> > >
> > >> --
> > >> My father, Victor Moore (Vic) used to say:
> > >> "There are two Great Sins in the world...
> > >> ..the Sin of Ignorance, and the Sin of Stupidity.
> > >> Only the former may be overcome." R.I.P. Dad.
> > >> http://linuxcounter.net/user/44256.html
>
>

ASPM: Could not configure common clock

[Chris Joysn]

Hello,

i installed Debian testing from the netinst iso onto a Lenovo W530 laptop.
When booting the machine when it is attached to its docking station with
closed display, i very often get the kernel message

ASPM: Could not configure common clock

and then the boot process hangs.
When i reboot with the opened display but still connected to the docking
station, it boots successfully more often. And i never experienced this
message and a hung boot process when the laptop is not attached to the
docking station.

kernel: Linux laptop 4.5.0-2-amd64 #1 SMP Debian 4.5.4-1 (2016-05-16)
x86_64 GNU/Linux

I also tried the stable dist which has a 3.16 kernel (iirc), but then the
boot process hung after the following message:

thinkpad_acpi: unsupported brighten interface, please contaxt
ibm-acpi-de...@sf.net

I think it is not the common clock which is the problem, but how can i find
out what is really the problem?

Thanks in advance
Joysn

Re: Call for testing: upcoming samba security update

[Chris Boot]

On 14/04/16 10:02, Chris Boot wrote:
> Firstly:
> 
>> Finally, two important configuration options should be considered,
>> that we were unable to silently change defaults for:
>> - smb signing = required
>> - ntlm auth = no
>>
>> Without smb signing = required, Man in the Middle attacks are
>> still possible against our file server and classic/NT4-like/Samba3
>> Domain controller.  (It is now enforced on our AD DC.)
> 
> There is no parameter named "smb signing" in smb.conf, and Samba rightly
> complains:
> 
>> [2016/04/14 09:43:53,  0] ../lib/param/loadparm.c:743(lpcfg_map_parameter)
>>   Unknown parameter encountered: "smb signing"
>> [2016/04/14 09:43:53,  0] 
>> ../lib/param/loadparm.c:1626(lpcfg_do_global_parameter)
>>   Ignoring unknown parameter "smb signing"
> 
> I suspect you meant one/several of "client ipc signing", "client
> signing" and/or "server signing" instead. Can you please clarify?

Someone has pointed out to me by private mail that this has been fixed
in an updated NEWS entry, and there is a bug open about it:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=820983

https://anonscm.debian.org/cgit/pkg-samba/samba.git/commit/?h=stable-update=cbcad2a543a28926ee712cf299dbdc03da351cb0

Please can we make sure that this makes it into the inevitable deb8u3
update?

I'm filing a bug about the AD DC winbind issue now.

Cheers,
Chris

-- 
Chris Boot

Tiger Computing Ltd
ISO27001:2013 Certified

Tel: 01600 483 484
Web: https://www.tiger-computing.co.uk

Registered in England. Company number: 3389961
Registered address: Wyastone Business Park,
 Wyastone Leys, Monmouth, NP25 3SR