Re: [DNG] dev1galaxy host is down [update]

2017-07-06 Thread Chandler Wise
dev1galaxy is back online. The issue was, as noted, an issue with the host.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] dev1galaxy host is down [update]

2017-07-06 Thread golinux

On 2017-07-06 12:35, goli...@dyne.org wrote:

Just a quick note.  dev1galaxy has been down for several hours.  Can't
even get to the host's main website.  Have no idea when/if it will be
back.  We do have backups from yesterday in the worst case scenario.
More later . . .

golinux




For those who are in dev1galaxy withdrawal . . . you'll have to hang on 
a while longer.  This just arrived in response to a ticket that I could  
finally submit when some of their infrastructure came back up:


Hi, we apologize for the inconvenience, we are working to fix an outage 
that happened today across some of our switches. We should have 
everything back up within a couple hours. If the issue still persists in 
4-5 hours please open a new ticket. Thanks for your patience.



Thanks,
Isaac G.
Level 3 Support Engineer

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


[DNG] dev1galaxy host is down

2017-07-06 Thread golinux
Just a quick note.  dev1galaxy has been down for several hours.  Can't 
even get to the host's main website.  Have no idea when/if it will be 
back.  We do have backups from yesterday in the worst case scenario.  
More later . . .


golinux
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Six weeks of Devuan Popularity Contest

2017-07-06 Thread Arnt Karlsen
On Thu, 6 Jul 2017 13:19:01 +0100, KatolaZ wrote in message 
<20170706121901.gr15...@katolaz.homeunix.net>:

> DR D1Rs,
> 
> just a quick report on the activity of http://popcon.devuan.org six
> weeks after it was put online.
> 
> At the moment, it seems like we have just below 1300 active
> submissions, and the number increases on average by about 20/30 new
> submissions per day.
> 
> If we consider that the popularity contest is *disabled* by default,
> and that it is normally not enabled by admins on server installations,
> then we can probably assume that those 1300 units represent between 5%
> and 20% of the overall number of Devuan installations, which would
> correspond to an estimate between 6K-25K Devuan machines in total.
> 
> To put things in perspective:
> 
> 1) the current popcon numbers for Debian (jessie + stretch) are in the
> region of 150K, so a first rough conclusion is that Devuan has about
> 1% of the use-base of Debian.
> 
> 2) The total Debian user-base has remained almost stable in the last
> four years. To grow at the same pace of Devuan, Debian should count
> something like 2K-3K new installations per day, which would be about
> one order of magnitude larger than the observed growth in Debian
> popcon.
> 
> In conclusion: these numbers have overall little significance
> _per_se_. As with any statistics, we can speculate over them as
> much or little as we want, but they clearly suggest that the Devuan
> community is growing at a steady pace. This is yet another reason why
> Devuan cannot afford to fail ;)

..we only have amd64, i386, arm64 and "armhf", what happens if we add
x32, hurd-i386, kfreebsd-i386 and kfreebsd-amd64 etc "in progress"
architectures? 
(Other than me keeping hurd-i386 and converting my debian lan mirror 
to a devuan mirror)

-- 
..med vennlig hilsen = with Kind Regards from Arnt Karlsen
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Is the Ascii archive missing some packages?

2017-07-06 Thread Vincent Bentley
Thanks. I should have checked the archive for stretch too, sorry.

I purged two obsolete python packages that were not removed after
upgrading. Looking forward to amprolla3.

-Vince-

On 06/07/17 14:42, KatolaZ wrote:
> Hi,
> 
> that package is not in stretch:
> 
> https://packages.debian.org/search?keywords=python-junitxml=names=all=all
> 
> only in woody and in jessie, so it's not in ascii.
> 
>>
>> This appears to be the version in Debian Jessie which the machine was
>> originally running some time ago.
>>
>> I am also having problems with apt-file not working. It demands a cache
>> update but when the cache is updated it still demands an update.
>>
> 
> This is a known bug:
> 
>   https://bugs.devuan.org/17
> 
> We should probably be able to work around that with amprolla3.
> 
> HND
> 
> KatolaZ



smime.p7s
Description: S/MIME Cryptographic Signature
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Is the Ascii archive missing some packages?

2017-07-06 Thread KatolaZ
On Thu, Jul 06, 2017 at 02:35:02PM +0100, Vincent Bentley wrote:
> My 32-bit Ascii system has python-junitxml installed but
> apt-show-versions says that it is not in the Ascii archive.
> 
> sudo apt-show-versions python-junitxml
> python-junitxml:all 0.6-1.1 installed: No available version in archive

Hi,

that package is not in stretch:

https://packages.debian.org/search?keywords=python-junitxml=names=all=all

only in woody and in jessie, so it's not in ascii.

> 
> This appears to be the version in Debian Jessie which the machine was
> originally running some time ago.
> 
> I am also having problems with apt-file not working. It demands a cache
> update but when the cache is updated it still demands an update.
> 

This is a known bug:

  https://bugs.devuan.org/17

We should probably be able to work around that with amprolla3.

HND

KatolaZ

-- 
[ ~.,_  Enzo Nicosia aka KatolaZ - GLUGCT -- Freaknet Medialab  ]  
[ "+.  katolaz [at] freaknet.org --- katolaz [at] yahoo.it  ]
[   @)   http://kalos.mine.nu ---  Devuan GNU + Linux User  ]
[ @@)  http://maths.qmul.ac.uk/~vnicosia --  GPG: 0B5F062F  ] 
[ (@@@)  Twitter: @KatolaZ - skype: katolaz -- github: KatolaZ  ]


signature.asc
Description: Digital signature
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


[DNG] Is the Ascii archive missing some packages?

2017-07-06 Thread Vincent Bentley
My 32-bit Ascii system has python-junitxml installed but
apt-show-versions says that it is not in the Ascii archive.

sudo apt-show-versions python-junitxml
python-junitxml:all 0.6-1.1 installed: No available version in archive

This appears to be the version in Debian Jessie which the machine was
originally running some time ago.

I am also having problems with apt-file not working. It demands a cache
update but when the cache is updated it still demands an update.

Anyone else noticed any missing packages following an upgrade from
Jessie to Ascii.

-Vince-



smime.p7s
Description: S/MIME Cryptographic Signature
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


[DNG] Six weeks of Devuan Popularity Contest

2017-07-06 Thread KatolaZ
DR D1Rs,

just a quick report on the activity of http://popcon.devuan.org six
weeks after it was put online.

At the moment, it seems like we have just below 1300 active
submissions, and the number increases on average by about 20/30 new
submissions per day.

If we consider that the popularity contest is *disabled* by default,
and that it is normally not enabled by admins on server installations,
then we can probably assume that those 1300 units represent between 5%
and 20% of the overall number of Devuan installations, which would
correspond to an estimate between 6K-25K Devuan machines in total.

To put things in perspective:

1) the current popcon numbers for Debian (jessie + stretch) are in the
region of 150K, so a first rough conclusion is that Devuan has about
1% of the use-base of Debian.

2) The total Debian user-base has remained almost stable in the last
four years. To grow at the same pace of Devuan, Debian should count
something like 2K-3K new installations per day, which would be about
one order of magnitude larger than the observed growth in Debian
popcon.

In conclusion: these numbers have overall little significance
_per_se_. As with any statistics, we can speculate over them as much
or little as we want, but they clearly suggest that the Devuan
community is growing at a steady pace. This is yet another reason why
Devuan cannot afford to fail ;)

My2Cents

KatolaZ

-- 
[ ~.,_  Enzo Nicosia aka KatolaZ - GLUGCT -- Freaknet Medialab  ]  
[ "+.  katolaz [at] freaknet.org --- katolaz [at] yahoo.it  ]
[   @)   http://kalos.mine.nu ---  Devuan GNU + Linux User  ]
[ @@)  http://maths.qmul.ac.uk/~vnicosia --  GPG: 0B5F062F  ] 
[ (@@@)  Twitter: @KatolaZ - skype: katolaz -- github: KatolaZ  ]


signature.asc
Description: Digital signature
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] error processing package initscripts, because /lib/init/vars.sh missing

2017-07-06 Thread G.W. Haywood

Ooops.  Sorry about the previous subject line, finger slipped.

Hi there,

On Thu, 6 Jul 2017, Miroslav Rovis wrote:


... I'm currently without a GUI browser, because of:
Building Pale Moon on Devuan fails - Pale Moon forum
https://forum.palemoon.org/viewtopic.php?f=57=15751


Pale Moon has been my browser of choice for quite a while, it's
running under fvwm95 and Devuan.  I just installed the binary.

laptop3:~$ >>> cat /etc/devuan_version
jessie
laptop3:~$ >>> uname -a
Linux laptop3 3.16.0-4-amd64 #1 SMP Debian 3.16.43-2+deb8u2 (2017-06-26) x86_64 
GNU/Linux

laptop3:~$ >>> palemoon -v
Moonchild Productions Pale Moon 27.3.0

--

73,
Ged.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Dng Digest, Vol 34, Issue 39

2017-07-06 Thread G.W. Haywood

Hi there,

On Thu, 6 Jul 2017, Miroslav Rovis wrote:


... I'm currently without a GUI browser, because of:
Building Pale Moon on Devuan fails - Pale Moon forum
https://forum.palemoon.org/viewtopic.php?f=57=15751


Pale Moon has been my browser of choice for quite a while, it's
running under fvwm95 and Devuan.  I just installed the binary.

laptop3:~$ >>> cat /etc/devuan_version
jessie
laptop3:~$ >>> uname -a
Linux laptop3 3.16.0-4-amd64 #1 SMP Debian 3.16.43-2+deb8u2 (2017-06-26) x86_64 
GNU/Linux
laptop3:~$ >>> palemoon -v
Moonchild Productions Pale Moon 27.3.0

--

73,
Ged.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] systemd allows elevated access from unit files?

2017-07-06 Thread Simon Hobson
Olaf Meeuwissen  wrote:

>> But, sysv-init has much the same issue in that there's a shell script
>> run as root,
> 
> I beg to differ.  If you try to run a service as user '0day' from a
> sysv-init script, then you get the behaviour of implemented by
> 
> - that service if it has provisions for running as a certain user
> - the wrapper that handles running something as a certain user,
>   e.g. start-stop-daemon
> 
> I don't know what that behaviour is but sure hope it won't decide to
> run as root if you try to run something with a "funny" name.

Sorry, my bad wording there. I wasn't thinking of the "doesn't match what I'm 
wanting so do something stupid" case, I was thinking more of (as was 
hypothesised) a user getting the admin to install a system startup 
script/config file and getting root privileges because the admin didn't spot 
something.
In the case that started this thread, the user does it by having a valid ID 
that systemd doesn't think is valid; in the sysv-init case, potentially by 
obfuscating something into the init script. I'm thinking in terms of making it 
look like start-stop-daemon is being told to use the user's ID, but perhaps 
through some obscure code, the user has reset the variable between it being set 
at the top of the script and it being used. And the script is run as root so 
there's scope for malpractice before the service itself is started even if it 
is with the right user privileges.
Certainly not in the same category, but there's scope for issues if the admin 
isn't careful.

>> and if the user is able to manipulate that then he is able to do
>> things he shouldn't be able to. Playing devil's advocate, there's an
>> argument that the "complexity" of typical sysv scripts (at least as
>> shipped with distros like Debian) makes it a non-trivial task to spot
>> something slipped into the script.
> 
> Perhaps the complexity came about as the result of trying to make one
> size fit all init systems or maybe over-engineering but, to be honest, I
> don't find the 65 /etc/init.d/* files (not counting README and skeleton)
> on my system to be too complex.

Indeed. I don't think it's the number of scripts, but the length and complexity 
of some of them. IMO systemd really isn't any less complex - it's just that 
they've moved the complexity into a binary blob and thus reduced the 
flexibility.

I don't think I'll get much argument that sysv-init scripts allow a great deal 
of freedom and flexibility (including adding debugging statements such as "echo 
'I got here' >> /tmp/myscriptlog") !

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] error processing package initscripts, because /lib/init/vars.sh missing

2017-07-06 Thread Miroslav Rovis
On 170706-12:50+0200, Svante Signell wrote:
> On Thu, 2017-07-06 at 09:58 +, Miroslav Rovis wrote:
> > On 170705-23:48+0200, Svante Signell wrote:
> > > On Wed, 2017-07-05 at 21:05 +, Miroslav Rovis wrote:
> ...
> > 
> > > If you are on i386 or amd64 I can send you the required debs for
> > > 2.29.2-1+devuan1 from ascii-proposed.
> > 
> > But it has all been solved by now. In the gap btwn my message and
> > when you send
> > the message, I was right somewhere there figuring out the solution,
> > and now,
> > you can see my message where I (manually construing a quote) explain:
> > > # dpkg -i /var/cache/apt/archives/initscripts_2.88dsf-
> > > 59.3+devuan2_amd64.deb
> > > 
> > > reinstalled initscripts, and the /lib/init/vars.sh (which is part
> > > of
> > > initscripts package)
> > 
> > and state that I expect to reboot without problems.
> 
> Nice that your problems are solved :)
> 
> Regarding util-linux (2.29.2-1+devuan1) that version is needed in order
> to install sysvinit-utils (2.88dsf-59.9+devuan2) required by
> initscripts (2.88dsf-59.9+devuan2) and sysvinit-core (2.88dsf-
> 59.9+devuan2) is needed if you want to try openrc out.
> In such case you need to enable ascii-proposed:
> deb http://packages.devuan.org/devuan ascii-proposed main
Which I absolutely can't wait to do, but...
But, oh God, am I slow! I've been lurking on this ML for more than two years,
and I only was able to start installing once I could do it in Air-Gapped, i.e.
when Jessie RC2 was available... (I did play in Virtual Machines previously.)
And also, I'm currently without a GUI browser, because of:
Building Pale Moon on Devuan fails - Pale Moon forum
https://forum.palemoon.org/viewtopic.php?f=57=15751 
( I posted the issue there today... Only saying that here, because that one
will take its time in my life too, and it will take it again... )

> > Thanks for caring! 
> 
> You're welcome.
>

And your explanation below is great! 
> As a sidenote: I do know now why this happened to you when downgrading:
> 
> dpkg -c initscripts_2.88dsf-59.3+devuan2_amd64.deb |grep vars
> -rw-r--r-- root/root  1212 2016-03-04 03:25 ./lib/init/vars.sh
> dpkg -c initscripts_2.88dsf-59.9+devuan2_amd64.deb |grep vars
> dpkg -c sysvinit-utils_2.88dsf-59.9+devuan2_amd64.deb |grep vars
> -rw-r--r-- root/root  1212 2017-06-15 13:59 ./lib/init/vars.sh
> 
> The srcipt lib/init/vars.sh was provided by initscripts and has now
> been moved to sysvinit-utils. And since you had util-linux (2.29.2-1)
> install that script was provided by that package util you downgraded.
> 
> From the changelog of sysvinit:
> sysvinit (2.88dsf-59.5) unstable; urgency=medium
> [ Martin Pitt ]
> * Move /lib/init/vars.sh from initscripts to sysvinit-utils. It's not
> specific to initscripts, but API for other init scripts similar to
> /lib/init/init-d-script. This will allow initscripts to drop from
> the default installation. (Closes: #826205)
> 
> Nice to know what's happening and why :)
Yeah! Fascinating... But it's also such fine feeling that everything went so
great in this wholesale dist-upgrade which was actually 100+ packages kind of
downgrade, essential packages, system packages.

In which wholesale downgrade-kind of dist-upgrade the only issue was that
one, which had to show, for the obvious reason that you explain above.

All having gone fine even in my little user's quarters means Devuan is going
strong!

Regards!
-- 
Miroslav Rovis
Zagreb, Croatia
https://www.CroatiaFidelis.hr


signature.asc
Description: PGP signature
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] systemd allows elevated access from unit files?

2017-07-06 Thread Olaf Meeuwissen
Hi Simon,

Simon Hobson writes:

> Olaf Meeuwissen  wrote:
>
>> No idea whether systemd services run by non-system users makes sense but
>> then again, lots of systemd probably doesn't make much sense.
>
> Do you mean "systemd service" as in "something that's part of
> systemd"; or do you mean "something that's run by systemd" ?  Assuming
> the latter, doesn't lots of software run as non-system users - as a
> basic part of good security practice ?

You assumed correctly.  Upon re-reading this myself, I agree I wasn't
being very clear.  Sorry.

> I know some stuff (postfix, apache) starts as root and then drops
> privileges for some/all of itself. Others just start as a
> non-privileged user to start with (BIND) - is this actually done in
> the script when using sysv, or does the daemon have to do it itself ?
> I admit I only have a basic grasp of the details here.

How this is done depends on the service.  Some service actually need
root privileges for a few things, e.g. binding to a port < 1024.

The system users I was thinking of the ones created with

  adduser --system

These aren't that different from "normal" users but typically have a UID
in a certain range and are, by default, put in the nogroup.  All these
things *are* configurable btw and you can still force stuff (just open
/etc/passwd et al. with your favourite text editor).  So any kind of
relying on certain "policies" being adhered to is winging it.

> But thinking a bit more about the issue ...
> Yes, this is a bug, and yes it shows the systemd people (especially
> LP) up for the disdain they show for the basics of security,
> good/defensive programming, etc.

> But, sysv-init has much the same issue in that there's a shell script
> run as root,

I beg to differ.  If you try to run a service as user '0day' from a
sysv-init script, then you get the behaviour of implemented by

 - that service if it has provisions for running as a certain user
 - the wrapper that handles running something as a certain user,
   e.g. start-stop-daemon

I don't know what that behaviour is but sure hope it won't decide to
run as root if you try to run something with a "funny" name.

> and if the user is able to manipulate that then he is able to do
> things he shouldn't be able to. Playing devil's advocate, there's an
> argument that the "complexity" of typical sysv scripts (at least as
> shipped with distros like Debian) makes it a non-trivial task to spot
> something slipped into the script.

Perhaps the complexity came about as the result of trying to make one
size fit all init systems or maybe over-engineering but, to be honest, I
don't find the 65 /etc/init.d/* files (not counting README and skeleton)
on my system to be too complex.

Hope this helps,
--
Olaf Meeuwissen, LPIC-2FSF Associate Member since 2004-01-27
 GnuPG key: F84A2DD9/B3C0 2F47 EA19 64F4 9F13  F43E B8A4 A88A F84A 2DD9
 Support Free Softwarehttps://my.fsf.org/donate
 Join the Free Software Foundation  https://my.fsf.org/join
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] error processing package initscripts, because /lib/init/vars.sh missing

2017-07-06 Thread Svante Signell
On Thu, 2017-07-06 at 09:58 +, Miroslav Rovis wrote:
> On 170705-23:48+0200, Svante Signell wrote:
> > On Wed, 2017-07-05 at 21:05 +, Miroslav Rovis wrote:
...
> 
> > If you are on i386 or amd64 I can send you the required debs for
> > 2.29.2-1+devuan1 from ascii-proposed.
> 
> But it has all been solved by now. In the gap btwn my message and
> when you send
> the message, I was right somewhere there figuring out the solution,
> and now,
> you can see my message where I (manually construing a quote) explain:
> > # dpkg -i /var/cache/apt/archives/initscripts_2.88dsf-
> > 59.3+devuan2_amd64.deb
> > 
> > reinstalled initscripts, and the /lib/init/vars.sh (which is part
> > of
> > initscripts package)
> 
> and state that I expect to reboot without problems.

Nice that your problems are solved :)

Regarding util-linux (2.29.2-1+devuan1) that version is needed in order
to install sysvinit-utils (2.88dsf-59.9+devuan2) required by
initscripts (2.88dsf-59.9+devuan2) and sysvinit-core (2.88dsf-
59.9+devuan2) is needed if you want to try openrc out.
In such case you need to enable ascii-proposed:
deb http://packages.devuan.org/devuan ascii-proposed main

> Thanks for caring! 

You're welcome.

As a sidenote: I do know now why this happened to you when downgrading:

dpkg -c initscripts_2.88dsf-59.3+devuan2_amd64.deb |grep vars
-rw-r--r-- root/root  1212 2016-03-04 03:25 ./lib/init/vars.sh
dpkg -c initscripts_2.88dsf-59.9+devuan2_amd64.deb |grep vars
dpkg -c sysvinit-utils_2.88dsf-59.9+devuan2_amd64.deb |grep vars
-rw-r--r-- root/root  1212 2017-06-15 13:59 ./lib/init/vars.sh

The srcipt lib/init/vars.sh was provided by initscripts and has now
been moved to sysvinit-utils. And since you had util-linux (2.29.2-1)
install that script was provided by that package util you downgraded.

From the changelog of sysvinit:
sysvinit (2.88dsf-59.5) unstable; urgency=medium
[ Martin Pitt ]
* Move /lib/init/vars.sh from initscripts to sysvinit-utils. It's not
specific to initscripts, but API for other init scripts similar to
/lib/init/init-d-script. This will allow initscripts to drop from
the default installation. (Closes: #826205)

Nice to know what's happening and why :)

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Systemd: Once again the "not-a-bug" attitude, this time regarding a security issue

2017-07-06 Thread Arnt Karlsen
On Thu, 6 Jul 2017 11:16:16 +0200, Jaromil wrote in message 
<20170706091616.tpkpampjaxc5ni64@reflex>:

> On Thu, 06 Jul 2017, Arnt Karlsen wrote:
> 
> > On Thu, 06 Jul 2017 00:36:51 +0200, Martin wrote in message 
> 
> > > I read in german Linux-Magazin that KDE Plasma basically works in
> > > Devuan Jessie… 
> > 
> > ...aand, I run it with vdev-0.1.2. ;o)
> 
> 
> I am impressed.

..at my stupid luck? ;o)

..all I did, was add experimental to my jessie lines
in /etc/apt/sources.list and ran aptitude to install vdev-0.1.2, 
kde and plasma I installed several weeks ago.
No ascii nor ceres lines.

..then I added the TDE lines and installed "all" TDE packages, and 
had _no_ errors AFAIR.  Still running kde+plasma because I haven't
gotten around to reboot to try the new kernel nor TDE I installed 
one or 2 weeks ago... stability even on chromium-browser-on-tor is
totally in the stupid luck class. ;oD


> do you think we can build an ASCII image with vdev?

..yes.  Without some hard work?  
Now _that_ is _another_ question. ;o)
I dunno, all I can say, is Try it. ;o)

> can you brief us about any blockers you see for its adoption?

..only Debian's hidden-away traps in their .debs, which I only _guess_
would be there, based on my experience with banana republic politics.

-- 
..med vennlig hilsen = with Kind Regards from Arnt Karlsen
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Amprolla: Another Network Outage.

2017-07-06 Thread Alessandro Selli
On Wed, 5 Jul 2017 at 18:37:41 -0400
"Linux O'Beardly"  wrote:

> Dear Devuan Community,
> 
> We experienced another outage with the amprolla server today due to severe
> weather.  We've had severe storms with tornado force winds that have taken
> down both our power and network grid.

  "It Could Be Worse."
  "How?"
  "It Could Be Raining!"



-- 
Alessandro Selli http://alessandro.route-add.net
VOIP SIP: dhatarat...@ekiga.net
Chiavi PGP/GPG keys: B7FD89FD, 4A904FD9
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] error processing package initscripts, because /lib/init/vars.sh missing

2017-07-06 Thread Miroslav Rovis
On 170705-23:48+0200, Svante Signell wrote:
> On Wed, 2017-07-05 at 21:05 +, Miroslav Rovis wrote:
> > 
> > What is that /lib/init/vars.sh ? Which package should have installed
> > it? What
> > could be the reason that it is missing?
> 
> Please don't reboot.
Which I didn't do. Untill I fixed it, that is. And once I have, this is the
third time on this clone machine that I rebooted. And also I repeated the
entire procedure on my Air-Gapped machine, since the clone is expendable,
permanent in my method is what I install in the, later cloned, Air-Gapped
master machine...

And my Air-Gapped I also rebooted just fine.

> The file /lib/init/vars.sh from util-linux is
> essential to have a successful boot. I'll write down tomorrow how you
> could fix this. It's about connfiles being removed not getting
> installed unless forced, and the version of util-linux you have
> installed (2.29.2-1). Where did you get that version, Debian stretch?
So very likely!

Because I had updated (weeks and weeks ago now) my, originally, Jessie RC2, to
stretch, in Air-Gapped, to get FFmpeg and MPlayer/Mencoder, and because I
couldn't figure how to do Air-Gapping in Devuan (which I do know how now). 

> If you are on i386 or amd64 I can send you the required debs for
> 2.29.2-1+devuan1 from ascii-propsed.
But it has all been solved by now. In the gap btwn my message and when you send
the message, I was right somewhere there figuring out the solution, and now,
you can see my message where I (manually construing a quote) explain:
> # dpkg -i /var/cache/apt/archives/initscripts_2.88dsf-59.3+devuan2_amd64.deb
>
> reinstalled initscripts, and the /lib/init/vars.sh (which is part of
> initscripts package)
and state that I expect to reboot without problems.

Thanks for caring! (And I hope to become a more useful
Devuan/and-more-generally-FOSS tester some day... In *slow* time... Well I have
already been, but marginally so.)
-- 
Miroslav Rovis
Zagreb, Croatia
https://www.CroatiaFidelis.hr


signature.asc
Description: PGP signature
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Systemd: Once again the "not-a-bug" attitude, this time regarding a security issue

2017-07-06 Thread Antony Stone
On Thursday 06 July 2017 at 00:36:51, Martin Steigerwald wrote:

> Hello.
> 
> I am more and more considering finally switching to Devuan for all of my
> systems.
> 
> The "not-a-bug" attitude upstream developers, especially Lennart, show in
> 
> systemd can't handle the process previlege that belongs to user name
> startswith number, such as 0day #6237
> https://github.com/systemd/systemd/issues/6237
> 
> and
> 
> [systemd-devel] Github systemd issue 6237
> https://lists.freedesktop.org/archives/systemd-devel/2017-July/039154.html
> 
> *again* IMHO is inacceptable for security issues like this.

Agreed - it's so disappointing to see this sort of public attitude in such a 
major open source project.  It brings down the reputation of open source 
development :(

> I read in german Linux-Magazin that KDE Plasma basically works in Devuan
> Jessie…

I agree - it does, for a given value of "basically"...

> but I am on Debian Unstable with my laptop. And there seem to be
> issues with automounting…

Yes, you get prompted for the root password at each mount or unmount (as it 
says in the article)...

Slightly irritiating, but the process still works as expected (eg: device 
names etc).

> On my Jessie-Server VM I could just cross-grade to Devuan Jessie, it was
> running with sysvinit for a long time anyway. My VM for the backup is Debian
> Stretch already.

What's the advantage of Devuan for a (non-GUI) server, where you can just run 
Debian with sysvinit anyway (this works for both Jessie and Stretch)?

> Well… maybe I finally arrive at the point where I say goodbye to Debian and
> hello to Devuan, at least for the time being.

I'm intrigued - if you use Debian Unstable, and you're interested in KDE 
Plasma, are you using KMail2?  Does it actually work for you?


Antony.

-- 
"Linux is going to be part of the future. It's going to be like Unix was."

 - Peter Moore, Asia-Pacific general manager, Microsoft

   Please reply to the list;
 please *don't* CC me.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Systemd: Once again the "not-a-bug" attitude, this time regarding a security issue

2017-07-06 Thread Jaromil
On Thu, 06 Jul 2017, Arnt Karlsen wrote:

> On Thu, 06 Jul 2017 00:36:51 +0200, Martin wrote in message 

> > I read in german Linux-Magazin that KDE Plasma basically works in
> > Devuan Jessie… 
> 
> ...aand, I run it with vdev-0.1.2. ;o)


I am impressed.

do you think we can build an ASCII image with vdev?

can you brief us about any blockers you see for its adoption?


thanks

ciao

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Systemd: Once again the "not-a-bug" attitude, this time regarding a security issue

2017-07-06 Thread Se7en
On Thu, Jul 06, 2017 at 12:36:51AM +0200, Martin Steigerwald wrote:
> systemd can't handle the process previlege that belongs to user name 
> startswith number, such as 0day #6237
> https://github.com/systemd/systemd/issues/6237
> 
> and
> 
> [systemd-devel] Github systemd issue 6237
> https://lists.freedesktop.org/archives/systemd-devel/2017-July/039154.html
> 
> *again* IMHO is inacceptable for security issues like this.

It is stupid. Incredibly stupid. Luckily I've already seen on web
forums I frequent the Pro-Systemd crowd having second thoughts.

> I read in german Linux-Magazin that KDE Plasma basically works in Devuan 
> Jessie… but I am on Debian Unstable with my laptop. And there seem to be 
> issues with automounting… On my Jessie-Server VM I could just cross-grade to 
> Devuan Jessie, it was running with sysvinit for a long time anyway. My VM for 
> the backup is Debian Stretch already.

Don't use KDE. Use a power-user DE like a white man! FVWM2 or i3 or
Bust!


-- 
|-/   | Se7en
 /  The One and Only! | se7en@cock.email
/ | 0x73518A15BA3C1476
   /  | http://koolkidsklub.tech/~se7en
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng