Re: [DNG] dev1galaxy host is down [update]
dev1galaxy is back online. The issue was, as noted, an issue with the host. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] dev1galaxy host is down [update]
On 2017-07-06 12:35, goli...@dyne.org wrote: Just a quick note. dev1galaxy has been down for several hours. Can't even get to the host's main website. Have no idea when/if it will be back. We do have backups from yesterday in the worst case scenario. More later . . . golinux For those who are in dev1galaxy withdrawal . . . you'll have to hang on a while longer. This just arrived in response to a ticket that I could finally submit when some of their infrastructure came back up: Hi, we apologize for the inconvenience, we are working to fix an outage that happened today across some of our switches. We should have everything back up within a couple hours. If the issue still persists in 4-5 hours please open a new ticket. Thanks for your patience. Thanks, Isaac G. Level 3 Support Engineer ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] dev1galaxy host is down
Just a quick note. dev1galaxy has been down for several hours. Can't even get to the host's main website. Have no idea when/if it will be back. We do have backups from yesterday in the worst case scenario. More later . . . golinux ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Six weeks of Devuan Popularity Contest
On Thu, 6 Jul 2017 13:19:01 +0100, KatolaZ wrote in message <20170706121901.gr15...@katolaz.homeunix.net>: > DR D1Rs, > > just a quick report on the activity of http://popcon.devuan.org six > weeks after it was put online. > > At the moment, it seems like we have just below 1300 active > submissions, and the number increases on average by about 20/30 new > submissions per day. > > If we consider that the popularity contest is *disabled* by default, > and that it is normally not enabled by admins on server installations, > then we can probably assume that those 1300 units represent between 5% > and 20% of the overall number of Devuan installations, which would > correspond to an estimate between 6K-25K Devuan machines in total. > > To put things in perspective: > > 1) the current popcon numbers for Debian (jessie + stretch) are in the > region of 150K, so a first rough conclusion is that Devuan has about > 1% of the use-base of Debian. > > 2) The total Debian user-base has remained almost stable in the last > four years. To grow at the same pace of Devuan, Debian should count > something like 2K-3K new installations per day, which would be about > one order of magnitude larger than the observed growth in Debian > popcon. > > In conclusion: these numbers have overall little significance > _per_se_. As with any statistics, we can speculate over them as > much or little as we want, but they clearly suggest that the Devuan > community is growing at a steady pace. This is yet another reason why > Devuan cannot afford to fail ;) ..we only have amd64, i386, arm64 and "armhf", what happens if we add x32, hurd-i386, kfreebsd-i386 and kfreebsd-amd64 etc "in progress" architectures? (Other than me keeping hurd-i386 and converting my debian lan mirror to a devuan mirror) -- ..med vennlig hilsen = with Kind Regards from Arnt Karlsen ...with a number of polar bear hunters in his ancestry... Scenarios always come in sets of three: best case, worst case, and just in case. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Is the Ascii archive missing some packages?
Thanks. I should have checked the archive for stretch too, sorry. I purged two obsolete python packages that were not removed after upgrading. Looking forward to amprolla3. -Vince- On 06/07/17 14:42, KatolaZ wrote: > Hi, > > that package is not in stretch: > > https://packages.debian.org/search?keywords=python-junitxml=names=all=all > > only in woody and in jessie, so it's not in ascii. > >> >> This appears to be the version in Debian Jessie which the machine was >> originally running some time ago. >> >> I am also having problems with apt-file not working. It demands a cache >> update but when the cache is updated it still demands an update. >> > > This is a known bug: > > https://bugs.devuan.org/17 > > We should probably be able to work around that with amprolla3. > > HND > > KatolaZ smime.p7s Description: S/MIME Cryptographic Signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Is the Ascii archive missing some packages?
On Thu, Jul 06, 2017 at 02:35:02PM +0100, Vincent Bentley wrote: > My 32-bit Ascii system has python-junitxml installed but > apt-show-versions says that it is not in the Ascii archive. > > sudo apt-show-versions python-junitxml > python-junitxml:all 0.6-1.1 installed: No available version in archive Hi, that package is not in stretch: https://packages.debian.org/search?keywords=python-junitxml=names=all=all only in woody and in jessie, so it's not in ascii. > > This appears to be the version in Debian Jessie which the machine was > originally running some time ago. > > I am also having problems with apt-file not working. It demands a cache > update but when the cache is updated it still demands an update. > This is a known bug: https://bugs.devuan.org/17 We should probably be able to work around that with amprolla3. HND KatolaZ -- [ ~.,_ Enzo Nicosia aka KatolaZ - GLUGCT -- Freaknet Medialab ] [ "+. katolaz [at] freaknet.org --- katolaz [at] yahoo.it ] [ @) http://kalos.mine.nu --- Devuan GNU + Linux User ] [ @@) http://maths.qmul.ac.uk/~vnicosia -- GPG: 0B5F062F ] [ (@@@) Twitter: @KatolaZ - skype: katolaz -- github: KatolaZ ] signature.asc Description: Digital signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] Is the Ascii archive missing some packages?
My 32-bit Ascii system has python-junitxml installed but apt-show-versions says that it is not in the Ascii archive. sudo apt-show-versions python-junitxml python-junitxml:all 0.6-1.1 installed: No available version in archive This appears to be the version in Debian Jessie which the machine was originally running some time ago. I am also having problems with apt-file not working. It demands a cache update but when the cache is updated it still demands an update. Anyone else noticed any missing packages following an upgrade from Jessie to Ascii. -Vince- smime.p7s Description: S/MIME Cryptographic Signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] Six weeks of Devuan Popularity Contest
DR D1Rs, just a quick report on the activity of http://popcon.devuan.org six weeks after it was put online. At the moment, it seems like we have just below 1300 active submissions, and the number increases on average by about 20/30 new submissions per day. If we consider that the popularity contest is *disabled* by default, and that it is normally not enabled by admins on server installations, then we can probably assume that those 1300 units represent between 5% and 20% of the overall number of Devuan installations, which would correspond to an estimate between 6K-25K Devuan machines in total. To put things in perspective: 1) the current popcon numbers for Debian (jessie + stretch) are in the region of 150K, so a first rough conclusion is that Devuan has about 1% of the use-base of Debian. 2) The total Debian user-base has remained almost stable in the last four years. To grow at the same pace of Devuan, Debian should count something like 2K-3K new installations per day, which would be about one order of magnitude larger than the observed growth in Debian popcon. In conclusion: these numbers have overall little significance _per_se_. As with any statistics, we can speculate over them as much or little as we want, but they clearly suggest that the Devuan community is growing at a steady pace. This is yet another reason why Devuan cannot afford to fail ;) My2Cents KatolaZ -- [ ~.,_ Enzo Nicosia aka KatolaZ - GLUGCT -- Freaknet Medialab ] [ "+. katolaz [at] freaknet.org --- katolaz [at] yahoo.it ] [ @) http://kalos.mine.nu --- Devuan GNU + Linux User ] [ @@) http://maths.qmul.ac.uk/~vnicosia -- GPG: 0B5F062F ] [ (@@@) Twitter: @KatolaZ - skype: katolaz -- github: KatolaZ ] signature.asc Description: Digital signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] error processing package initscripts, because /lib/init/vars.sh missing
Ooops. Sorry about the previous subject line, finger slipped. Hi there, On Thu, 6 Jul 2017, Miroslav Rovis wrote: ... I'm currently without a GUI browser, because of: Building Pale Moon on Devuan fails - Pale Moon forum https://forum.palemoon.org/viewtopic.php?f=57=15751 Pale Moon has been my browser of choice for quite a while, it's running under fvwm95 and Devuan. I just installed the binary. laptop3:~$ >>> cat /etc/devuan_version jessie laptop3:~$ >>> uname -a Linux laptop3 3.16.0-4-amd64 #1 SMP Debian 3.16.43-2+deb8u2 (2017-06-26) x86_64 GNU/Linux laptop3:~$ >>> palemoon -v Moonchild Productions Pale Moon 27.3.0 -- 73, Ged. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Dng Digest, Vol 34, Issue 39
Hi there, On Thu, 6 Jul 2017, Miroslav Rovis wrote: ... I'm currently without a GUI browser, because of: Building Pale Moon on Devuan fails - Pale Moon forum https://forum.palemoon.org/viewtopic.php?f=57=15751 Pale Moon has been my browser of choice for quite a while, it's running under fvwm95 and Devuan. I just installed the binary. laptop3:~$ >>> cat /etc/devuan_version jessie laptop3:~$ >>> uname -a Linux laptop3 3.16.0-4-amd64 #1 SMP Debian 3.16.43-2+deb8u2 (2017-06-26) x86_64 GNU/Linux laptop3:~$ >>> palemoon -v Moonchild Productions Pale Moon 27.3.0 -- 73, Ged. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] systemd allows elevated access from unit files?
Olaf Meeuwissenwrote: >> But, sysv-init has much the same issue in that there's a shell script >> run as root, > > I beg to differ. If you try to run a service as user '0day' from a > sysv-init script, then you get the behaviour of implemented by > > - that service if it has provisions for running as a certain user > - the wrapper that handles running something as a certain user, > e.g. start-stop-daemon > > I don't know what that behaviour is but sure hope it won't decide to > run as root if you try to run something with a "funny" name. Sorry, my bad wording there. I wasn't thinking of the "doesn't match what I'm wanting so do something stupid" case, I was thinking more of (as was hypothesised) a user getting the admin to install a system startup script/config file and getting root privileges because the admin didn't spot something. In the case that started this thread, the user does it by having a valid ID that systemd doesn't think is valid; in the sysv-init case, potentially by obfuscating something into the init script. I'm thinking in terms of making it look like start-stop-daemon is being told to use the user's ID, but perhaps through some obscure code, the user has reset the variable between it being set at the top of the script and it being used. And the script is run as root so there's scope for malpractice before the service itself is started even if it is with the right user privileges. Certainly not in the same category, but there's scope for issues if the admin isn't careful. >> and if the user is able to manipulate that then he is able to do >> things he shouldn't be able to. Playing devil's advocate, there's an >> argument that the "complexity" of typical sysv scripts (at least as >> shipped with distros like Debian) makes it a non-trivial task to spot >> something slipped into the script. > > Perhaps the complexity came about as the result of trying to make one > size fit all init systems or maybe over-engineering but, to be honest, I > don't find the 65 /etc/init.d/* files (not counting README and skeleton) > on my system to be too complex. Indeed. I don't think it's the number of scripts, but the length and complexity of some of them. IMO systemd really isn't any less complex - it's just that they've moved the complexity into a binary blob and thus reduced the flexibility. I don't think I'll get much argument that sysv-init scripts allow a great deal of freedom and flexibility (including adding debugging statements such as "echo 'I got here' >> /tmp/myscriptlog") ! ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] error processing package initscripts, because /lib/init/vars.sh missing
On 170706-12:50+0200, Svante Signell wrote: > On Thu, 2017-07-06 at 09:58 +, Miroslav Rovis wrote: > > On 170705-23:48+0200, Svante Signell wrote: > > > On Wed, 2017-07-05 at 21:05 +, Miroslav Rovis wrote: > ... > > > > > If you are on i386 or amd64 I can send you the required debs for > > > 2.29.2-1+devuan1 from ascii-proposed. > > > > But it has all been solved by now. In the gap btwn my message and > > when you send > > the message, I was right somewhere there figuring out the solution, > > and now, > > you can see my message where I (manually construing a quote) explain: > > > # dpkg -i /var/cache/apt/archives/initscripts_2.88dsf- > > > 59.3+devuan2_amd64.deb > > > > > > reinstalled initscripts, and the /lib/init/vars.sh (which is part > > > of > > > initscripts package) > > > > and state that I expect to reboot without problems. > > Nice that your problems are solved :) > > Regarding util-linux (2.29.2-1+devuan1) that version is needed in order > to install sysvinit-utils (2.88dsf-59.9+devuan2) required by > initscripts (2.88dsf-59.9+devuan2) and sysvinit-core (2.88dsf- > 59.9+devuan2) is needed if you want to try openrc out. > In such case you need to enable ascii-proposed: > deb http://packages.devuan.org/devuan ascii-proposed main Which I absolutely can't wait to do, but... But, oh God, am I slow! I've been lurking on this ML for more than two years, and I only was able to start installing once I could do it in Air-Gapped, i.e. when Jessie RC2 was available... (I did play in Virtual Machines previously.) And also, I'm currently without a GUI browser, because of: Building Pale Moon on Devuan fails - Pale Moon forum https://forum.palemoon.org/viewtopic.php?f=57=15751 ( I posted the issue there today... Only saying that here, because that one will take its time in my life too, and it will take it again... ) > > Thanks for caring! > > You're welcome. > And your explanation below is great! > As a sidenote: I do know now why this happened to you when downgrading: > > dpkg -c initscripts_2.88dsf-59.3+devuan2_amd64.deb |grep vars > -rw-r--r-- root/root 1212 2016-03-04 03:25 ./lib/init/vars.sh > dpkg -c initscripts_2.88dsf-59.9+devuan2_amd64.deb |grep vars > dpkg -c sysvinit-utils_2.88dsf-59.9+devuan2_amd64.deb |grep vars > -rw-r--r-- root/root 1212 2017-06-15 13:59 ./lib/init/vars.sh > > The srcipt lib/init/vars.sh was provided by initscripts and has now > been moved to sysvinit-utils. And since you had util-linux (2.29.2-1) > install that script was provided by that package util you downgraded. > > From the changelog of sysvinit: > sysvinit (2.88dsf-59.5) unstable; urgency=medium > [ Martin Pitt ] > * Move /lib/init/vars.sh from initscripts to sysvinit-utils. It's not > specific to initscripts, but API for other init scripts similar to > /lib/init/init-d-script. This will allow initscripts to drop from > the default installation. (Closes: #826205) > > Nice to know what's happening and why :) Yeah! Fascinating... But it's also such fine feeling that everything went so great in this wholesale dist-upgrade which was actually 100+ packages kind of downgrade, essential packages, system packages. In which wholesale downgrade-kind of dist-upgrade the only issue was that one, which had to show, for the obvious reason that you explain above. All having gone fine even in my little user's quarters means Devuan is going strong! Regards! -- Miroslav Rovis Zagreb, Croatia https://www.CroatiaFidelis.hr signature.asc Description: PGP signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] systemd allows elevated access from unit files?
Hi Simon, Simon Hobson writes: > Olaf Meeuwissenwrote: > >> No idea whether systemd services run by non-system users makes sense but >> then again, lots of systemd probably doesn't make much sense. > > Do you mean "systemd service" as in "something that's part of > systemd"; or do you mean "something that's run by systemd" ? Assuming > the latter, doesn't lots of software run as non-system users - as a > basic part of good security practice ? You assumed correctly. Upon re-reading this myself, I agree I wasn't being very clear. Sorry. > I know some stuff (postfix, apache) starts as root and then drops > privileges for some/all of itself. Others just start as a > non-privileged user to start with (BIND) - is this actually done in > the script when using sysv, or does the daemon have to do it itself ? > I admit I only have a basic grasp of the details here. How this is done depends on the service. Some service actually need root privileges for a few things, e.g. binding to a port < 1024. The system users I was thinking of the ones created with adduser --system These aren't that different from "normal" users but typically have a UID in a certain range and are, by default, put in the nogroup. All these things *are* configurable btw and you can still force stuff (just open /etc/passwd et al. with your favourite text editor). So any kind of relying on certain "policies" being adhered to is winging it. > But thinking a bit more about the issue ... > Yes, this is a bug, and yes it shows the systemd people (especially > LP) up for the disdain they show for the basics of security, > good/defensive programming, etc. > But, sysv-init has much the same issue in that there's a shell script > run as root, I beg to differ. If you try to run a service as user '0day' from a sysv-init script, then you get the behaviour of implemented by - that service if it has provisions for running as a certain user - the wrapper that handles running something as a certain user, e.g. start-stop-daemon I don't know what that behaviour is but sure hope it won't decide to run as root if you try to run something with a "funny" name. > and if the user is able to manipulate that then he is able to do > things he shouldn't be able to. Playing devil's advocate, there's an > argument that the "complexity" of typical sysv scripts (at least as > shipped with distros like Debian) makes it a non-trivial task to spot > something slipped into the script. Perhaps the complexity came about as the result of trying to make one size fit all init systems or maybe over-engineering but, to be honest, I don't find the 65 /etc/init.d/* files (not counting README and skeleton) on my system to be too complex. Hope this helps, -- Olaf Meeuwissen, LPIC-2FSF Associate Member since 2004-01-27 GnuPG key: F84A2DD9/B3C0 2F47 EA19 64F4 9F13 F43E B8A4 A88A F84A 2DD9 Support Free Softwarehttps://my.fsf.org/donate Join the Free Software Foundation https://my.fsf.org/join ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] error processing package initscripts, because /lib/init/vars.sh missing
On Thu, 2017-07-06 at 09:58 +, Miroslav Rovis wrote: > On 170705-23:48+0200, Svante Signell wrote: > > On Wed, 2017-07-05 at 21:05 +, Miroslav Rovis wrote: ... > > > If you are on i386 or amd64 I can send you the required debs for > > 2.29.2-1+devuan1 from ascii-proposed. > > But it has all been solved by now. In the gap btwn my message and > when you send > the message, I was right somewhere there figuring out the solution, > and now, > you can see my message where I (manually construing a quote) explain: > > # dpkg -i /var/cache/apt/archives/initscripts_2.88dsf- > > 59.3+devuan2_amd64.deb > > > > reinstalled initscripts, and the /lib/init/vars.sh (which is part > > of > > initscripts package) > > and state that I expect to reboot without problems. Nice that your problems are solved :) Regarding util-linux (2.29.2-1+devuan1) that version is needed in order to install sysvinit-utils (2.88dsf-59.9+devuan2) required by initscripts (2.88dsf-59.9+devuan2) and sysvinit-core (2.88dsf- 59.9+devuan2) is needed if you want to try openrc out. In such case you need to enable ascii-proposed: deb http://packages.devuan.org/devuan ascii-proposed main > Thanks for caring! You're welcome. As a sidenote: I do know now why this happened to you when downgrading: dpkg -c initscripts_2.88dsf-59.3+devuan2_amd64.deb |grep vars -rw-r--r-- root/root 1212 2016-03-04 03:25 ./lib/init/vars.sh dpkg -c initscripts_2.88dsf-59.9+devuan2_amd64.deb |grep vars dpkg -c sysvinit-utils_2.88dsf-59.9+devuan2_amd64.deb |grep vars -rw-r--r-- root/root 1212 2017-06-15 13:59 ./lib/init/vars.sh The srcipt lib/init/vars.sh was provided by initscripts and has now been moved to sysvinit-utils. And since you had util-linux (2.29.2-1) install that script was provided by that package util you downgraded. From the changelog of sysvinit: sysvinit (2.88dsf-59.5) unstable; urgency=medium [ Martin Pitt ] * Move /lib/init/vars.sh from initscripts to sysvinit-utils. It's not specific to initscripts, but API for other init scripts similar to /lib/init/init-d-script. This will allow initscripts to drop from the default installation. (Closes: #826205) Nice to know what's happening and why :) ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Systemd: Once again the "not-a-bug" attitude, this time regarding a security issue
On Thu, 6 Jul 2017 11:16:16 +0200, Jaromil wrote in message <20170706091616.tpkpampjaxc5ni64@reflex>: > On Thu, 06 Jul 2017, Arnt Karlsen wrote: > > > On Thu, 06 Jul 2017 00:36:51 +0200, Martin wrote in message > > > > I read in german Linux-Magazin that KDE Plasma basically works in > > > Devuan Jessie… > > > > ...aand, I run it with vdev-0.1.2. ;o) > > > I am impressed. ..at my stupid luck? ;o) ..all I did, was add experimental to my jessie lines in /etc/apt/sources.list and ran aptitude to install vdev-0.1.2, kde and plasma I installed several weeks ago. No ascii nor ceres lines. ..then I added the TDE lines and installed "all" TDE packages, and had _no_ errors AFAIR. Still running kde+plasma because I haven't gotten around to reboot to try the new kernel nor TDE I installed one or 2 weeks ago... stability even on chromium-browser-on-tor is totally in the stupid luck class. ;oD > do you think we can build an ASCII image with vdev? ..yes. Without some hard work? Now _that_ is _another_ question. ;o) I dunno, all I can say, is Try it. ;o) > can you brief us about any blockers you see for its adoption? ..only Debian's hidden-away traps in their .debs, which I only _guess_ would be there, based on my experience with banana republic politics. -- ..med vennlig hilsen = with Kind Regards from Arnt Karlsen ...with a number of polar bear hunters in his ancestry... Scenarios always come in sets of three: best case, worst case, and just in case. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Amprolla: Another Network Outage.
On Wed, 5 Jul 2017 at 18:37:41 -0400 "Linux O'Beardly"wrote: > Dear Devuan Community, > > We experienced another outage with the amprolla server today due to severe > weather. We've had severe storms with tornado force winds that have taken > down both our power and network grid. "It Could Be Worse." "How?" "It Could Be Raining!" -- Alessandro Selli http://alessandro.route-add.net VOIP SIP: dhatarat...@ekiga.net Chiavi PGP/GPG keys: B7FD89FD, 4A904FD9 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] error processing package initscripts, because /lib/init/vars.sh missing
On 170705-23:48+0200, Svante Signell wrote: > On Wed, 2017-07-05 at 21:05 +, Miroslav Rovis wrote: > > > > What is that /lib/init/vars.sh ? Which package should have installed > > it? What > > could be the reason that it is missing? > > Please don't reboot. Which I didn't do. Untill I fixed it, that is. And once I have, this is the third time on this clone machine that I rebooted. And also I repeated the entire procedure on my Air-Gapped machine, since the clone is expendable, permanent in my method is what I install in the, later cloned, Air-Gapped master machine... And my Air-Gapped I also rebooted just fine. > The file /lib/init/vars.sh from util-linux is > essential to have a successful boot. I'll write down tomorrow how you > could fix this. It's about connfiles being removed not getting > installed unless forced, and the version of util-linux you have > installed (2.29.2-1). Where did you get that version, Debian stretch? So very likely! Because I had updated (weeks and weeks ago now) my, originally, Jessie RC2, to stretch, in Air-Gapped, to get FFmpeg and MPlayer/Mencoder, and because I couldn't figure how to do Air-Gapping in Devuan (which I do know how now). > If you are on i386 or amd64 I can send you the required debs for > 2.29.2-1+devuan1 from ascii-propsed. But it has all been solved by now. In the gap btwn my message and when you send the message, I was right somewhere there figuring out the solution, and now, you can see my message where I (manually construing a quote) explain: > # dpkg -i /var/cache/apt/archives/initscripts_2.88dsf-59.3+devuan2_amd64.deb > > reinstalled initscripts, and the /lib/init/vars.sh (which is part of > initscripts package) and state that I expect to reboot without problems. Thanks for caring! (And I hope to become a more useful Devuan/and-more-generally-FOSS tester some day... In *slow* time... Well I have already been, but marginally so.) -- Miroslav Rovis Zagreb, Croatia https://www.CroatiaFidelis.hr signature.asc Description: PGP signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Systemd: Once again the "not-a-bug" attitude, this time regarding a security issue
On Thursday 06 July 2017 at 00:36:51, Martin Steigerwald wrote: > Hello. > > I am more and more considering finally switching to Devuan for all of my > systems. > > The "not-a-bug" attitude upstream developers, especially Lennart, show in > > systemd can't handle the process previlege that belongs to user name > startswith number, such as 0day #6237 > https://github.com/systemd/systemd/issues/6237 > > and > > [systemd-devel] Github systemd issue 6237 > https://lists.freedesktop.org/archives/systemd-devel/2017-July/039154.html > > *again* IMHO is inacceptable for security issues like this. Agreed - it's so disappointing to see this sort of public attitude in such a major open source project. It brings down the reputation of open source development :( > I read in german Linux-Magazin that KDE Plasma basically works in Devuan > Jessie… I agree - it does, for a given value of "basically"... > but I am on Debian Unstable with my laptop. And there seem to be > issues with automounting… Yes, you get prompted for the root password at each mount or unmount (as it says in the article)... Slightly irritiating, but the process still works as expected (eg: device names etc). > On my Jessie-Server VM I could just cross-grade to Devuan Jessie, it was > running with sysvinit for a long time anyway. My VM for the backup is Debian > Stretch already. What's the advantage of Devuan for a (non-GUI) server, where you can just run Debian with sysvinit anyway (this works for both Jessie and Stretch)? > Well… maybe I finally arrive at the point where I say goodbye to Debian and > hello to Devuan, at least for the time being. I'm intrigued - if you use Debian Unstable, and you're interested in KDE Plasma, are you using KMail2? Does it actually work for you? Antony. -- "Linux is going to be part of the future. It's going to be like Unix was." - Peter Moore, Asia-Pacific general manager, Microsoft Please reply to the list; please *don't* CC me. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Systemd: Once again the "not-a-bug" attitude, this time regarding a security issue
On Thu, 06 Jul 2017, Arnt Karlsen wrote: > On Thu, 06 Jul 2017 00:36:51 +0200, Martin wrote in message > > I read in german Linux-Magazin that KDE Plasma basically works in > > Devuan Jessie… > > ...aand, I run it with vdev-0.1.2. ;o) I am impressed. do you think we can build an ASCII image with vdev? can you brief us about any blockers you see for its adoption? thanks ciao ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Systemd: Once again the "not-a-bug" attitude, this time regarding a security issue
On Thu, Jul 06, 2017 at 12:36:51AM +0200, Martin Steigerwald wrote: > systemd can't handle the process previlege that belongs to user name > startswith number, such as 0day #6237 > https://github.com/systemd/systemd/issues/6237 > > and > > [systemd-devel] Github systemd issue 6237 > https://lists.freedesktop.org/archives/systemd-devel/2017-July/039154.html > > *again* IMHO is inacceptable for security issues like this. It is stupid. Incredibly stupid. Luckily I've already seen on web forums I frequent the Pro-Systemd crowd having second thoughts. > I read in german Linux-Magazin that KDE Plasma basically works in Devuan > Jessie… but I am on Debian Unstable with my laptop. And there seem to be > issues with automounting… On my Jessie-Server VM I could just cross-grade to > Devuan Jessie, it was running with sysvinit for a long time anyway. My VM for > the backup is Debian Stretch already. Don't use KDE. Use a power-user DE like a white man! FVWM2 or i3 or Bust! -- |-/ | Se7en / The One and Only! | se7en@cock.email / | 0x73518A15BA3C1476 / | http://koolkidsklub.tech/~se7en ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng