Re: [DNG] PHP question
sury breaks devuan since the maintainer decided to use systemd specific libraries to create a temp file. instead, use tdrnetworks, which is basically sury, but gets rid of that dependency. See https://kb.unixservertech.com/unix/linux/debian/devuan_sury for complete information. I'm running Devuan with ISPConfig3 also. Rod On 6/23/22 10:49, Curtis Maurand via Dng wrote: Hello, I've been running Devuan on my break even public facing webhosting system for several years. I've been using ISPConfig and the debian perfect server instructions with adjustments for Devuan. I'm up to Devuan Beowulf at the moment and trying to go to chimaera so that I can get PHP 7.4 support. I'm happy to build a new server and migrate sites from Beowulf to Chimaera except that PHP 7.4 goes end of life at the end of November of this year. The current versions PHP are 8.0 and 8.1. Using the instructions at packages.sury.org, I am able to add the other versions of PHP except for PHPN.n-fpm due to a (what seems to be a completely unnecessary) dependence upon systemd. I would love to keep running Devuan. It runs way better than anything systemd based. Is there a workaround for this limitation? I've tried installing the package from chimaera, but it's a couple of minor revisions behind sury.org. It also seems to need a version of libc6 greater than or equal to x.xx. As a web hoster I need to be able to deploy multiple versions of PHP and I don't see very advanced support for it in Devuan. Developers need to test PHP 8 as it's different enough to cause trouble for apps written intending to run on version 7.4 Trying not to install ubuntu, --Curtis ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US https://dailydata.net 214.827.2170 ext 100 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] recommendations for filesystem
You did not say what you wanted to do with this. Workstation? Dedicated file server? That makes a big difference. For the OS, just ext4, as far as I'm concerned. It is fast and stable, though there are some tweaks to make it even less resource intensive. On your long term storage it depends on your needs. Do you need to create partitions to segregate the data? Do those partition sizes change? If so, I generally use lvm2, then format the partitions with ext4. zfs is great (it combines RAID, lvm and does a lot more), but is a resource hog. I use it quite a bit on dedicated NAS devices, but not on other machines. I start my NAS machines at 32G of RAM, and generally try for a minimum of 64G if I am using dedup and compression, with several cores in the processor. It is also fairly "interesting" on Linux (I generally build these machines using FreeBSD). Don't know anything about btrfs, but have heard good things about it. Bottom line, if you just want a big block of storage with no compresssion/deduplication/partitioning, ext4 seems to work pretty well. I have clients with 8T+ of storage running that way. Rod On 6/2/22 08:30, o1bigtenor via Dng wrote: Greetings Setting up a 'non-simple' system - - - raid 1 arrays - 2 - - used for the operating system raid 10 array - 1 - - used for longer term storage last iteration I used ext4 for system file(s) (/ IIRC) and then btrfs for most everything else (raid-10 array uses ext4 because that's what I set it up on and it'll stay that way until the array is replaced - - I think.) What is the current recommendation(s) for filesystem with the best combination of features (they all seem to have some 'issues')? ext4 or btrfs or even ZFS (understand that one isn't as high on the recommendation pole - - IIRC) Please advise TIA ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US https://dailydata.net 214.827.2170 ext 100 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] NFS rookie mistake?
Is there anything in the logs? Rod On 6/2/22 09:03, Ken Dibble wrote: Thanks for the attempt, but I don't think the situations are related. I am on Chimaera, everything starts normally on reboot, just not on manual runlevel change. Thanks. Ken On 6/1/22 22:53, Rod Rodolico via Dng wrote: Sorry, I pushed the wrong button and did not reply to list. Apologize. Is this related to http://kb.unixservertech.com/start/debugging/linux? Summary: NFS would not start after upgrade to Devuan Beowulf. Appears to be an issue with Debian. Looking in the logs, I saw '/run/rpcbind not owned by root failed' Solution: echo 'PATH="$PATH:/usr/bin"' >> /etc/default/rpcbind Read the (short) article if you want links and a little more info (it is my notes). Rod On 6/1/22 20:04, Ken Dibble wrote: Here is the story: I needed to do some server maintenance so I issued $init 1. After the maintenance was done I issued $init 5. Everything was fine except no nfs-server-kernel running. No problem. Issue $sudo /etc/init.d/nfs-kernel-server restart System response: Stopping NFS kernel daemon: mountd nfsd. Unexporting directories for NFS kernel daemon Exporting directories for NFS kernel daemon Starting NFS kernel daemon: nfsd Not starting: portmapper is not running ... (warning). Problem to be investigated LATER. Issue $ /etc/init.d/rpcbind restart System response: Stopping RPC port mapper daemon: rpcbind. Starting RPC port mapper daemon: rpcbind. No problem. Try nfs server again. $sudo /etc/init.d/nfs-kernel-server restart System response: Stopping NFS kernel daemon: mountd nfsd. Unexporting directories for NFS kernel daemon Exporting directories for NFS kernel daemon Starting NFS kernel daemon: nfsd mountd. no problem. So, Now it is LATER. So obviously when I went to runlevel 1, rpcbind was stopped and didn't come back up when I went back to runlevel 5. Investigate: /etc$ sudo find . -name *nfs-kernel-server ./rc2.d/S04nfs-kernel-server ./rc0.d/K01nfs-kernel-server ./rc1.d/K01nfs-kernel-server ./default/nfs-kernel-server ./init.d/nfs-kernel-server ./rc3.d/S04nfs-kernel-server ./rc4.d/S04nfs-kernel-server ./rc6.d/K01nfs-kernel-server ./rc5.d/S04nfs-kernel-server Observation: nfs-kernel-server gets killed at 0,1,6 and gets started at runlevels 2-5 /etc$ sudo find . -name *rpcbind ./rc0.d/K06rpcbind ./rc1.d/K06rpcbind ./rcS.d/S17rpcbind ./default/rpcbind ./init.d/rpcbind ./rc6.d/K06rpcbind ./insserv.conf.d/rpcbind Observation: The only time rpcbind is brought up is at system start. RUNLEVEL 1 kills it. Conclusion: So either rpcbind shouldn't be killed at runlevel 1 or it should be started prior to nfs-kernel-server on runlevels 2-5. OR . I have no clue about something here. Regards, Ken ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US https://dailydata.net 214.827.2170 ext 100 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] NFS rookie mistake?
Sorry, I pushed the wrong button and did not reply to list. Apologize. Is this related to http://kb.unixservertech.com/start/debugging/linux? Summary: NFS would not start after upgrade to Devuan Beowulf. Appears to be an issue with Debian. Looking in the logs, I saw '/run/rpcbind not owned by root failed' Solution: echo 'PATH="$PATH:/usr/bin"' >> /etc/default/rpcbind Read the (short) article if you want links and a little more info (it is my notes). Rod On 6/1/22 20:04, Ken Dibble wrote: Here is the story: I needed to do some server maintenance so I issued $init 1. After the maintenance was done I issued $init 5. Everything was fine except no nfs-server-kernel running. No problem. Issue $sudo /etc/init.d/nfs-kernel-server restart System response: Stopping NFS kernel daemon: mountd nfsd. Unexporting directories for NFS kernel daemon Exporting directories for NFS kernel daemon Starting NFS kernel daemon: nfsd Not starting: portmapper is not running ... (warning). Problem to be investigated LATER. Issue $ /etc/init.d/rpcbind restart System response: Stopping RPC port mapper daemon: rpcbind. Starting RPC port mapper daemon: rpcbind. No problem. Try nfs server again. $sudo /etc/init.d/nfs-kernel-server restart System response: Stopping NFS kernel daemon: mountd nfsd. Unexporting directories for NFS kernel daemon Exporting directories for NFS kernel daemon Starting NFS kernel daemon: nfsd mountd. no problem. So, Now it is LATER. So obviously when I went to runlevel 1, rpcbind was stopped and didn't come back up when I went back to runlevel 5. Investigate: /etc$ sudo find . -name *nfs-kernel-server ./rc2.d/S04nfs-kernel-server ./rc0.d/K01nfs-kernel-server ./rc1.d/K01nfs-kernel-server ./default/nfs-kernel-server ./init.d/nfs-kernel-server ./rc3.d/S04nfs-kernel-server ./rc4.d/S04nfs-kernel-server ./rc6.d/K01nfs-kernel-server ./rc5.d/S04nfs-kernel-server Observation: nfs-kernel-server gets killed at 0,1,6 and gets started at runlevels 2-5 /etc$ sudo find . -name *rpcbind ./rc0.d/K06rpcbind ./rc1.d/K06rpcbind ./rcS.d/S17rpcbind ./default/rpcbind ./init.d/rpcbind ./rc6.d/K06rpcbind ./insserv.conf.d/rpcbind Observation: The only time rpcbind is brought up is at system start. RUNLEVEL 1 kills it. Conclusion: So either rpcbind shouldn't be killed at runlevel 1 or it should be started prior to nfs-kernel-server on runlevels 2-5. OR . I have no clue about something here. Regards, Ken ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US https://dailydata.net 214.827.2170 ext 100 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] connecting to a chromebook (OT??)
Sorry, I copied/pasted when I should have cut/paste. I apologize. rod On 1/26/22 10:28 PM, Rod Rodolico via Dng wrote: > Ok, on my chromebook, under the Linux subsystem, I have a mac of > 00:16:3e:xx:xx:xx:xx > Which is the signature for a XenSource virtual MAC address. See > https://maclookup.app/search/result?mac=00%3A16%3A3e or > https://dnschecker.org/mac-lookup.php?query=00-16-3e > > This indicates to me that this is a virtual, which I verified by > apt -y install virt-what > > virt-what > > Which returned that it was running either lxc or kvm. I'm betting kvm. > > In this case, the virtual (the Linux subsystem) will be running under > something like libvirt, with the network in bridge mode, and the Linux > subsystem getting an IP from the DHCP server on that machine. So, your > mac and IP will not be visible to the outside. (I do a lot of > virtualization, BTW). Think of your Chromebook as a baby router. > > Your router can only set the IP on the chromebook, not the Linux > subsystem. If you open the browser to chrome://system, and go down to > ifconfig, then expand that, you'll see something like arc_ns0, arc_ns1, > etc... Those will all be in the range that ChromeOS is using for your > Linux subsystem. On my machine, arcbr0 is the actual bridge. Then, you > keep going down and, on my system, I find wlan0, which is the NIC for > the actual Chromebook. > > On 1/26/22 4:48 PM, o1bigtenor via Dng wrote: >> On Wed, Jan 26, 2022 at 1:04 PM Rod Rodolico via Dng >> wrote: >>> >>> FYI, I'm doing the same thing. I have spent some time setting up a >>> Chromebook "securely" (in theory), though mainly to access a Linux >>> Terminal Server over a VPN. >>> >>> First, are you using the built in Linux subsystem? When I bring up the >>> ChromeOS terminal (ctrl-alt-T, not the linux subsystem), the crosh >>> prompt does not have the ip or the ifconfig commands. However, when I >>> look at my network connection (via the GUI), I'm seeing an IP in my >>> network range. >> >> I have used the 'dev' mode and set up debian in it. >> Not used to pure command line (long ago Mac background spoiled me for >> that) so I'm trying to install a dual boot system. One issue is that the >> screen keyboard doesn't (on a Lenovo 10e (IIRC) chromebook anyway) >> have control and alt keys so that means there are some things that are >> too 'kinky' to do. >>> >>> I went ahead and installed the Linux subsystem again (I'm spending a lot >>> of time playing on it) and my IP for that is 10.115.92.205/28, so it >>> looks like the Linux subsystem is using using some kind of virtual IP, >>> similar to what virtlib does by default. >>> >> Well - - - the MAC address the machine gives is different than that at >> the router and the ip address at the router keeps changing - - argh! > > Ok, on my chromebook, under the Linux subsystem, I have a mac of > 00:16:3e:xx:xx:xx:xx > Which is the signature for a XenSource virtual MAC address. See > https://maclookup.app/search/result?mac=00%3A16%3A3e or > https://dnschecker.org/mac-lookup.php?query=00-16-3e > > This indicates to me that this is a virtual, which I verified by > apt -y install virt-what > > virt-what > > Which returned that it was running either lxc or kvm. I'm betting kvm. > > In this case, the virtual (the Linux subsystem) will be running under > something like libvirt, with the network in bridge mode, and the Linux > subsystem getting an IP from the DHCP server on that machine. So, your > mac and IP will not be visible to the outside. (I do a lot of > virtualization, BTW). Think of your Chromebook as a baby router. > > Your router can only set the IP on the chromebook, not the Linux > subsystem. If you open the browser to chrome://system, and go down to > ifconfig, then expand that, you'll see something like arc_ns0, arc_ns1, > etc... Those will all be in the range that ChromeOS is using for your > Linux subsystem. On my machine, arcbr0 is the actual bridge. Then, you > keep going down and, on my system, I find wlan0, which is the NIC for > the actual Chromebook. > >> I would like to use this thing for reading pdfs away from my desk but >> I'm not sure how to get things onto it. The expectation is that I'm going >> to use ms googly's drive or dropbox - - - no cottin pickin way!! to >> both. I use scp on my network but that means I need to know the ip >> address and be able to ssh into or out of it - - - I can't. >> The ssh port (#22 IIRC) is blocked - - - how's that for stupid. Likely >> everything is blocked but ms googly's stuff - - - that's the
Re: [DNG] connecting to a chromebook (OT??)
Ok, on my chromebook, under the Linux subsystem, I have a mac of 00:16:3e:xx:xx:xx:xx Which is the signature for a XenSource virtual MAC address. See https://maclookup.app/search/result?mac=00%3A16%3A3e or https://dnschecker.org/mac-lookup.php?query=00-16-3e This indicates to me that this is a virtual, which I verified by apt -y install virt-what virt-what Which returned that it was running either lxc or kvm. I'm betting kvm. In this case, the virtual (the Linux subsystem) will be running under something like libvirt, with the network in bridge mode, and the Linux subsystem getting an IP from the DHCP server on that machine. So, your mac and IP will not be visible to the outside. (I do a lot of virtualization, BTW). Think of your Chromebook as a baby router. Your router can only set the IP on the chromebook, not the Linux subsystem. If you open the browser to chrome://system, and go down to ifconfig, then expand that, you'll see something like arc_ns0, arc_ns1, etc... Those will all be in the range that ChromeOS is using for your Linux subsystem. On my machine, arcbr0 is the actual bridge. Then, you keep going down and, on my system, I find wlan0, which is the NIC for the actual Chromebook. On 1/26/22 4:48 PM, o1bigtenor via Dng wrote: > On Wed, Jan 26, 2022 at 1:04 PM Rod Rodolico via Dng > wrote: >> >> FYI, I'm doing the same thing. I have spent some time setting up a >> Chromebook "securely" (in theory), though mainly to access a Linux >> Terminal Server over a VPN. >> >> First, are you using the built in Linux subsystem? When I bring up the >> ChromeOS terminal (ctrl-alt-T, not the linux subsystem), the crosh >> prompt does not have the ip or the ifconfig commands. However, when I >> look at my network connection (via the GUI), I'm seeing an IP in my >> network range. > > I have used the 'dev' mode and set up debian in it. > Not used to pure command line (long ago Mac background spoiled me for > that) so I'm trying to install a dual boot system. One issue is that the > screen keyboard doesn't (on a Lenovo 10e (IIRC) chromebook anyway) > have control and alt keys so that means there are some things that are > too 'kinky' to do. >> >> I went ahead and installed the Linux subsystem again (I'm spending a lot >> of time playing on it) and my IP for that is 10.115.92.205/28, so it >> looks like the Linux subsystem is using using some kind of virtual IP, >> similar to what virtlib does by default. >> > Well - - - the MAC address the machine gives is different than that at > the router and the ip address at the router keeps changing - - argh! Ok, on my chromebook, under the Linux subsystem, I have a mac of 00:16:3e:xx:xx:xx:xx Which is the signature for a XenSource virtual MAC address. See https://maclookup.app/search/result?mac=00%3A16%3A3e or https://dnschecker.org/mac-lookup.php?query=00-16-3e This indicates to me that this is a virtual, which I verified by apt -y install virt-what virt-what Which returned that it was running either lxc or kvm. I'm betting kvm. In this case, the virtual (the Linux subsystem) will be running under something like libvirt, with the network in bridge mode, and the Linux subsystem getting an IP from the DHCP server on that machine. So, your mac and IP will not be visible to the outside. (I do a lot of virtualization, BTW). Think of your Chromebook as a baby router. Your router can only set the IP on the chromebook, not the Linux subsystem. If you open the browser to chrome://system, and go down to ifconfig, then expand that, you'll see something like arc_ns0, arc_ns1, etc... Those will all be in the range that ChromeOS is using for your Linux subsystem. On my machine, arcbr0 is the actual bridge. Then, you keep going down and, on my system, I find wlan0, which is the NIC for the actual Chromebook. > I would like to use this thing for reading pdfs away from my desk but > I'm not sure how to get things onto it. The expectation is that I'm going > to use ms googly's drive or dropbox - - - no cottin pickin way!! to > both. I use scp on my network but that means I need to know the ip > address and be able to ssh into or out of it - - - I can't. > The ssh port (#22 IIRC) is blocked - - - how's that for stupid. Likely > everything is blocked but ms googly's stuff - - - that's the idea behind > android anyway AFAIK - - - I'm not impressed. Although - - - if I really > don't like this thing I think my wife might like it but then I wanted a tablet > she's already got one (LOL)! I use the Nextcloud app to connect to my nextcloud instance. Works pretty well. 1. However, I did install Ghost Commander, which is a Commander type app that will do an SFTP connection. I used that to copy some files locally. 2. Additionally, if you open the ChromeOS File Manager, open the three dots in the upper right, then
Re: [DNG] connecting to a chromebook (OT??)
FYI, I'm doing the same thing. I have spent some time setting up a Chromebook "securely" (in theory), though mainly to access a Linux Terminal Server over a VPN. First, are you using the built in Linux subsystem? When I bring up the ChromeOS terminal (ctrl-alt-T, not the linux subsystem), the crosh prompt does not have the ip or the ifconfig commands. However, when I look at my network connection (via the GUI), I'm seeing an IP in my network range. I went ahead and installed the Linux subsystem again (I'm spending a lot of time playing on it) and my IP for that is 10.115.92.205/28, so it looks like the Linux subsystem is using using some kind of virtual IP, similar to what virtlib does by default. Rod On 1/26/22 8:24 AM, o1bigtenor via Dng wrote: > Greetings > > If this is too far off topic - - - please advise. > > Just got myself a chromebook - - - - lots of hoopla la about tablets > and though I'd try one. > Its a fairly brain dead POS so I'm trying to find ways to make it useful! > > So I go into the terminal ad do ifconfig and ip a and what I'm > getting is a weird ip address. > > My routher is at 192.168.1.1 and all my other hardware is visible there. > The chromebook says it is at 100.115.92.204/28. > > How did it get there? > > How is it connecting to and through the router? > Chromebook docs seem very light - - - hugely the 'trust us' modus - - > - which means that I don't. > > I am wanting to use this thing to read pdf's when not at my computer > (ie lunch or other such times). > > Not even sure what to do - - - ideas/suggestions - - please? > > TIA > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US https://dailydata.net 214.827.2170 ext 100 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] A number of question about version 4.0
For standard users (#2), I ran into the problem and was too lazy to set up LDAP, so I wrote a perl script we can run on our machines. Feel free to use it and complain about anything you want that I didn't put in it. http://kb.unixservertech.com/unix/linux/sysadmin/syncusers We generally run this script on new machines to give us a standard setup, and also used it to standardize several servers that had old users on it that should have been removed. If it decides to eat your machine, I never heard of you :). Rod On 1/13/22 7:00 PM, Larry Linder via Dng wrote: > I have loaded and it connects up to our network without a problem. > > 1. I would like to change desktops as default is too dark to be read. > > 2. I need to add users to this system. Currently we have 50 systems in > our shop and many different users of each system. I cannot add new > users or find out how to do it. The passwords required are a pain int > he ass. Is there a way to get rid of this. > > 3. I need to run a combination of 64 it and 32 bit engrineering > application. We currently do this on SL 6.5 updated to 6.10 and it all > works. > > Any hope > > Larry Linder > > > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US https://dailydata.net 214.827.2170 ext 100 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Automating the distro?
I would be willing to help with this idea. Who would I contact? I'd need to learn the process so I could help automate it. Rod On 12/7/21 3:16 PM, Steve Litt wrote: > Hi all, > > I wonder if building Devuan can be further automated. Void Linux has > some super-duper software processes to do much of this automatically. > It works right off of a git server (unfortunately, github). If I'm not > mistaken it puts out two updates a day, but of course there's no > automatic updating so the user chooses when to do all the updates up to > current. With very few people, Void Linux manages to keep a very > complete distro with very few screwups, and they fix major security > flaws about as fast as Debian. > > I'm wondering if Devuan could make use of something similar. Perhaps > doing this would free up resources to Devuanize more packages, for less > dependency on Debian. > > Before you ask, no, I can't help. I'm indexing my new book, I'm making > provisions so programs written in Freepascal, C, and pretty much any > other language, can send a sine wave to the speakers (a capability > requiring way too much programming in Linux). Of course I'll > release it as Free Software. > > The Debian "Community" is getting more rotten every day. Just today on > Debian-User, somebody asked a maybe sorta dumb question, and several > people gleefully jumped all over him. One guy (not the OP) thanked > everybody for their diverse solutions, and then criticized the OP, > signing his email "With kindest regards" :-). Another guy managed to > bring the OP's advanced age into it. So it's not just their politicians > with their rigged GRs, it's the very citizenry of Debian itself. In the > long run it's probably going to be advantageous for Devuan to move more > toward a distro of its own, before the Debian crowd decide to put in > halloween code to sabotage Devuan. > > SteveT > > Steve Litt > Spring 2021 featured book: Troubleshooting Techniques of the Successful > Technologist http://www.troubleshooters.com/techniques > _______ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US https://dailydata.net 214.827.2170 ext 100 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] networking thinking
We use OPNSense for almost everything that does not require untrained users to manage things. For the latter, we use IPFire. OPNSense works for small offices that just want VPN, up to our NOC where we have two routers (active/failover), DMZ and multiple backend LAN's. But, it does require some networking knowledge (though not as much as "roll your own"). Don't know what part of the world you're in, but we use Protectli (https://protectli.com/) hardware from the US. Pricey, but I've not had a hardware failure in the 5+ years I've been using their stuff. They have an option for Coreboot, a video port and a serial port, so I feel I'm covered. OPNSense also sells hardware specific to the appliance. We also purchase used enterprise grade network switches (mainly HP) and have had good results with them since we can monitor and configure at will. The smaller clients are running little 16 port, 15 year old switches, and at the NOC we're using two 96 port switches in and HA configuration. As mentioned, the webUI on the switches doesn't work most of the time, but I'm mainly a CLI type of tech anyway, so it doesn't bother me. Reply to questions: 1. Less hardware is better from a maintenance point of view. OPNSense has an excellent firewall, so I do not have a separate firewall device. My reason is pure laziness; I go to one interface I'm comfortable with and configure there. Most of my firewalling is just allowing traffic from one VLAN to another anyway, which is more of a routing thing. 2. No good training on networking that I know of except going back to school. If you decide to go with OPNSense, they have some decent documentation, and the pfSense site has more. Feel free to visit my notes site at http://kb.unixservertech.com for some recipes on OPNSense, but be warned these are my personal notes and I'm not a good writer. I mainly stick things out there so I don't have to remember them next time, but occasionally, the OPNSense people will do an upgrade that negates all or part of my notes. Rod On 11/29/21 3:38 PM, Adrian Zaugg wrote: > Hi TIA > > In der Nachricht vom Sunday, 28 November 2021 14:20:14 CET steht: > >> 1. is my splitting the network system into the three parts a good idea or >> should I truncate parts 1 and 2 into the router? If you would please give >> reasons - - - please? > Less devices, less to setup and maintain and less to break: I would go with 1 > Firewall and 1 Switch. > > Get a box with an SFP Port for your firewall and install OPNSense on it. > Stick > your fiber directly in your firewall, if your provider lets you chose and > does > not insist on some plastic box. If he does, then try to use it in bridge > mode. > Upon request, the providers over here tell what one has to do, when using a > media converter (e.g. VLAN tag or PPPoE). > > OPNSense and pfSense are excellent firewall distributions and IPv6 is well > integrated with both of them. They are almost identical, coming the same way. > OPNSense is more community oriented where as pfSense drifted away to be more > commercial now, but Documentation is better. > > PCEngines is a stable, bullet-proof hardware, it's industrial grade, lasts > for > ever and has a core boot BIOS. There soon will be a version with an SFP port > available. You won't get Gigabit-Speed through an APU with OPNSense (around > 800Mbit/s), get something with a CPU on par with a Intel N4100, if you want > to > be ready for gigabit speed. > > There are many nice boxes around without SFP ports (like the ones from AsRock > industrial e.g.) but don't use Zotac nano ci329 with pfSense, it doesn't run > stable (Linux in contrary runs like a charm on these). > > Zyxel Switches are basically OK, but you don't get security updates after > some > years, the interface doesn't work on all browsers and they have weird bugs > (e.g. prios in RSTP together with LAGGs). You're better of with a MikroTik > using SwOS. The MikroTiks boot amazingly fast, SwOS is easy to configure and > they are rather cheap. You get a Desktop Switch with 2x 10GbE and 8x 1 GbE > for > <$100. If you want to play around with your Zyxel to install whatever on it, > that's fine, but I wouldn't invest my time on that ─ better get your lab > running. > > Opinions on the topic will go apart, you'll get tons of advice in any > direction. To a certain extent it's about your personal liking. Mine you > probably just read above... > > Regards, Adrian. > > > > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US https://dailydata.net 214.827.2170 ext 100 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Wanting to set up an email system
We also use ispconfig (https://www.ispconfig.org/ispconfig/). There is a free version and a supported version, though it is all open source. We use this on multiple client sites and our hosting service. Highly recommended under most circumstances, though we do have some special purpose machines where we "roll our own." Rod On 12/2/21 5:16 PM, Curtis Maurand via Dng wrote: > I run ispconfig. uses postfix/dovecot/bind or powerdns. i host several > websites and email domains on beowulf. > > follow the perfect server debian instructions. > > Sent from my iPhone > >> On Dec 2, 2021, at 6:06 PM, o1bigtenor via Dng wrote: >> >> >> >> >> On Tue, Nov 30, 2021 at 3:26 AM Adrian Zaugg >> mailto:devuan@mailgurgler.com>> wrote: >> >> In der Nachricht vom Monday, 29 November 2021 23:08:33 CET schrieb >> Adrian >> Zaugg: >> > Be prepared for a long, long journey setting up an email >> system with >> > SMTP/ IMAP/Webmail using all the goodies SPF/SRS, BATV, DKIM, >> DNSSEC, TLS >> > certs, DANE, virusscanning, anti-spam Measures (possibly >> greylisting, >> > classification, RBLs, dnswl, ...), virtual domain handling, user >> auth from >> > a directory, automatical MUA configuration, backup of the >> mailstorage, asf. >> ...sieve and vacation might also be nice and a solution for an >> addressbook, >> both integrated into the webmail >> >> >> >> Hm - - - - interesting ideas. >> A couple votes for dovecot, lots of roll your own using selected from >> the plethora of >> options - - - but - - - - - . >> >> I had thought that when I asked about an email system that there might >> be words >> re: dovecot (which I did see - - thanks) but what about iRedMail, >> Citadel, Cyrus >> - - - - - or are those considered groupware only? >> >> I think I'm getting more confused rather than less!! >> >> TIA >> >> Regards >> ___ >> Dng mailing list >> Dng@lists.dyne.org >> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US https://dailydata.net 214.827.2170 ext 100 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] What not to back up
Or, tell bind to place the zone files where they originally were, in
/etc/bind/zones or something.
The change was made about 10 years ago as a "security feature" and is
mainly used for running bind in a jail, so if it gets hacked, they can't
mess up the rest of the server. I remember when Debian went that way and
it confused me quite a bit.
Of course, if you have a dedicated server only for BIND, that reason
goes away.
So, simply edit /etc/bind/* and change /var/lib/bind to whatever you
want. For the most part, I just store them in /etc/bind/SEC or
/etc/bind/ZONES or something. BIND doesn't care; it is the distro people
doing that.
Rod
On 11/26/21 7:07 AM, Mike Tubby wrote:
>
>
> On 24/11/2021 10:08, Olaf Meeuwissen via Dng wrote:
>> Hi Hendrik,
>>
>> Hendrik Boom writes:
>>
>>> I'm setting up a new backup script that will do it all piecemeal so
>>> that if a part of it fails, it can be retried without having to start
>>> *everythng* over from scratch.
>>>
>>> Which top-level filesystems should *not* be backed up.
>>>
>>> To start with, I presumably shouldn't back up
>>>
>>> /proc
>>> /tmp
>>> /dev (cause I'm using some version of *udev)
>>> /mnt
>> ACK.
>>
>>> and I certainly should back up /var, /usr. /root, /bin,
>>> /boot, /etc, /home, /lib, /lib64, /sbin
>> I wouldn't bother with /var/cache and /var/log but you're talking
>> top-level ;-)
>
> ... but if you run a nameserver you may well need:
>
> /var/cache/bind
>
> as that's where your zonefiles are ;-)
>
>
>> /boot is managed by installing kernel images and grub (using settings in
>> /etc/grub) so isn't all that important to include. At least on amd64.
>>
>>> But what about
>>>
>>> /run
>>> /srv
>>> /sys
>>> ?
>> Both /run and /sys are tmpfs file systems. Not worth backing up.
>
>
> However some admins put services in:
>
> /srv
>
> and some third-party suppliers of software place it in:
>
> /opt
>
> for example Sophos anti-virus.
>
>> Basically, you should only care about a subset of what lives below the
>> mount points listed by
>>
>> df | grep ^/ | awk '{print $6}'
>>
>> and make sure your backup command doesn't cross file system boundaries.
>> That should automatically exclude things like /dev, /proc, /run, /sys
>> and may (or may not) exclude /tmp (depending on installation choices).
>> As /mnt is meant for temporary mounts, that should be excluded too.
>>
>>> What are those even used for?
>> I would have pointed you to the FHS but as Lars pointed out already `man
>> 7 hier` will tell.
>>
>> Of course, if you don't use things like /srv and /opt, there's not much
>> of a cost to backing up the empty directories :-)
>>
>> Hope this helps,
>> --
>> Olaf Meeuwissen, LPIC-2 FSF Associate Member since 2004-01-27
>> GnuPG key: F84A2DD9/B3C0 2F47 EA19 64F4 9F13 F43E B8A4 A88A F84A 2DD9
>> Support Free Software https://my.fsf.org/donate
>> Join the Free Software Foundation https://my.fsf.org/join
>> ___
>> Dng mailing list
>> Dng@lists.dyne.org
>> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
>
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
--
Rod Rodolico
Daily Data, Inc.
POB 140465
Dallas TX 75214-0465 US
https://dailydata.net
214.827.2170 ext 100
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] system administration of non-systemd distros and releases
One possible point to make is that, while many system-d sysadmins may have initial difficulty with Devuan, there are tons of Unix sysadmins who would be up to speed in a manner of hours. Debian, Redhat, etc... are actually more "based on Unix" than "Unix", and that process appears to be growing as more and more functions are taken over by system-d. Just like you can say that OS X is "based on" Unix, but you can not call it Unix except in the broadest terms. By requiring system-d on their machines, your admins are locking themselves in to an experiment which may or may not be there in a few years. I personally think it will survive, but then I said the same thing about Novell Netware back in the 90's. By going with a distribution that does not rely on system-d, your admins are ensuring compatibility with Unix, a 50+ year old OS that has a proven longevity. Rod On 11/19/21 5:29 AM, Peter Duffy wrote: > I've recently been asked to recommend an upgrade route for a number of > linux servers, and I proposed going to devuan. In response, I've had a > concern raised which took me by surprise. It was suggested that in the > future, it may not be possible to find staff who have the skills to > administer and manage servers running non-systemd or pre-systemd > distros/releases. > > I've tried to give reassurance - but I'm still wondering if this could > be a valid concern. I'd always taken the view that it's primarily the > linux sysadmin community which is trying to stop the onslaught of the > systemd juggernaut - but obviously, the greater the proportion of > servers running systemd-based distros/releases, the less staff get > exposed to non-systemd management techniques and tools. > > I'd be grateful for thoughts and comments. > > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US https://dailydata.net 214.827.2170 ext 100 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] routine ascii upgrade mysteriously on hold
May not mean anything, but I quit using aptitude back with Jessie, I think. Maybe ASCII. The main reason was exactly what you describe. There was a major difference between what apt/apt-get did and what aptitude did. It may not be maintained anymore, or maybe maintained, but not as strongly, but appears to have settings that are not consistent with apt/apt-get. Recommend you just use apt update/apt [dist]upgrade and all your problems could (maybe, possibly) go way. Rod On 8/1/21 10:33 AM, Bernard Rosset via Dng wrote: > On 31/07/2021 22:03, Hendrik Boom wrote: >> I'm practicing upgrades on my spare laptop, getting ready for doing my >> server >> upgrade from ascii to beowulf.. >> >> They are both running ascii. >> >> Starting, of course, by making the ascii up to date still as ascii, >> before I try tye >> upgrade to beowulf. >> >> Having trouble doing even this innocuous act. >> >> I tried starting by using interactive aptitude to just update and >> upgrade. > > After changing your sources to point to the new release, have you run > "apt-get upgrade" or "apt-get dist-upgrade"? > It looks to me as if you did the former. > >> Only to discover that *every* package that might be upgraded was >> "held", and could >> therefore not be upgraded even though newer packages were available. >> >> What could be causing this? Or rather, how should I go about trying >> to track down >> the origin of these holds/this mass hold? > Packages might be held back in several situations, for instance when > download fails or checksum mismatches. In your case I would guess it is > because dependencies of the held back packages have changed. > The "dist-upgrade" action handles that, not "upgrade". > > To check your current state, you could always run "apt-get check" or > "aptitude why-not ". > > To fix the current situation, you could run the "dist-upgrade" action, > which is the official, documented way of doing release upgrades (cf. > https://www.debian.org/doc/manuals/debian-faq/uptodate.en.html#apt). > That will also take care of the cleanup, ie will offer to remove packages. > Check what it tells you to do before accepting (and maybe run it with > the "--simulate" option?), especially having a look at the proposed > packages removal. > > You could also try "apt-get --with-new-pkgs upgrade", which should > download the new dependencies (in case that is your problem), but I > suspect it will leave litter behind. > I suggest this only as a possibility, but would encourage you to follow > the best practice stated above. > > Bernard (Beer) Rosset > https://rosset.net/ > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US http://dailydata.net 214.827.2170 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Devuan as a hypervisor?
We have been virtualizing machines, servers and workstations, for over a decade. First on Debian, then Devuan. My personal workstation is Devuan, and I have Windows 7 & 10, FreeBSD, Devuan, and CentOS available as virtuals that I spool up as needed. On our servers, we mainly virtualize Devuan servers; dbs/web/mail/nextcloud/jitsi and even one database server (MySQL + Postgres). We also have several Windows Server (2008r2, 2016 and 2019) in production as virtuals. Xen is historically good, but I've been having issues with it over the past few years. The Windows PV drivers are not as available as they have been in the past, and there have been some other issues. I tried some other tools, notably Oracle Virtualbox, and they run fine, but I decided I would not tie myself to them. Instead, we are slowly moving to KVM, and actually are using libvirt (from Redhat) to manage them. I have never been a big RedHat fan, but they did good on this. It is a front end to Xen, KVM and maybe other hypervisors, but you use a consistent set of commands to do things. It also has a GUI if you want. I use it on my workstation, but we don't install GUI's on our servers, so those are done via the cli. I think there may even be a WebUI for it, but not sure. One of the main reasons for going with KVM is the availability of PV drivers for Windows. The difference between full virtualization and the use of PV drivers is huge. About a 5-10 speedup (my personal guess). Since we manage OS X machines also, I've thought about looking at the legality of creating an OS X virtual. I understand it is fairly well documented. My notes on this are at kb.unixservertech.com. NOTE: these are my notes, and as it says on the cover, if it makes your computer fall into a black hole, it is not my fault. But, I try to put reference links at the bottom of everything, so it may give you a start. It is notes, not howto's or anything. You can feel free to contact me off list if you decide to go this route and need anything. Rod On 8/1/21 7:18 PM, Curtis Maurand via Dng wrote: > I’ve been running a production system first on ascii, but upgraded to > beowulf. the only trouble I’ve had has been hardware and that was just a > failed power supply. i run the whole thing on kvm/libvirt. runs great. > uptimes in the 100’s of days. > > Your mileage may vary. > > —Curtis > > Sent from my iPhone > >> On Aug 1, 2021, at 7:45 PM, yami...@cock.li wrote: >> >> Hi. >> >> I want to install a bare metal hypervisor in my computer to get the benefits >> from dual booting except without the mess that is dual booting. >> >> I'm going to use it for both linux and windows systems and all I want is for >> the vms and their files to be isolated, control over their resources, PCI >> passthrough, and good performance. I don't care for a GUI as long as scripts >> are an option. >> >> Currently I'm between Xen and Qemu, but I'm open to other options. >> Which would be the best option in this case, and is this even a good idea? >> >> Thanks. >> ___ >> Dng mailing list >> Dng@lists.dyne.org >> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US http://dailydata.net 214.827.2170 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Boot hangs with usb disk active in fstab
FYI, I had a similar problem booting from a USB drive on an old Debian machine a long time ago. May have been Wheezy, or ever Sarge. The problem in my case was that the kernel was taking a while to settle the USB module, so at the early boot stage, it "knew" it was supposed to mount the USB drive, but it did not yet know the USB drive. If I remember correctly, I had to build a custom initrd with a script that simply forced the load of USB, then waited until it was able to detect the USB drive in question. Sorry, it was a long time ago, and I did not write it up as I try to do now. But, I vaguely remember inserting a script that simply insmod'd the module(s), then went into a loop which only exited after a certain amount of time, or if the USB drive was detected. Then, I just let the regular boot process to continue. Again, relying on memory, it seems the USB drivers take a finite amount of time to settle and actually be ready to work, and that time is variable depending on the device and the system. May be a total wild goose chase, but the problem you're having sounds similar. NOTE: it slowed my boot time significantly, but since it was a server, an additional 15 seconds did not matter so long as it came up. I THINK I was trying to do a RAID-1 for / from the USB drives, but that may have been a different time. Rod Am 2020-06-12 20:25, schrieb richard lucassen: > Try to add "nofail" or "noauto": nofail was a good hint. Now the system boots, but the usb disk is still not mounted. "mount -a" mounts it without errors after boot. I see no errors in /var/log/boot and dmesg. The only messages concerning this drive: [4.153932] scsi 0:0:0:0: Direct-Access WD Elements 25A3 1021 PQ: 0 ANSI: 6 [4.159536] sd 0:0:0:0: [sda] Spinning up disk... [4.161466] sd 0:0:0:0: Attached scsi generic sg0 type 0 [ 22.522458] sd 0:0:0:0: [sda] Very big device. Trying to use READ CAPACITY(16). [ 22.524863] sd 0:0:0:0: [sda] 19532808192 512-byte logical blocks: (10.0 TB/9.09 TiB) [ 22.532067] sd 0:0:0:0: [sda] 4096-byte physical blocks [ 22.538598] sd 0:0:0:0: [sda] Write Protect is off [ 22.541988] sd 0:0:0:0: [sda] Mode Sense: 47 00 10 08 [ 22.542724] sd 0:0:0:0: [sda] No Caching mode page found [ 22.547320] sd 0:0:0:0: [sda] Assuming drive cache: write through [ 22.554350] sd 0:0:0:0: [sda] Very big device. Trying to use READ CAPACITY(16). [ 22.983388] sda: sda1 [ 22.984576] sd 0:0:0:0: [sda] Very big device. Trying to use READ CAPACITY(16). [ 22.989231] sd 0:0:0:0: [sda] Attached SCSI disk ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] backup
As an aside, I have a set of USB drives at a client location. All have
the label "archives" on the partition. I then create an fstab entry:
LABEL=archives /media/archives ext4 noauto 0 2
or something like that (I don't remember the exact entry). They swap the
drives out at will, and just before the backup begins, I try to mount
/media/archives.
The client wanted to rotate 5 drives throughout the week to back up the
backup service we provide, and it has worked well for them.
Rod
On 5/19/20 10:56 AM, william moss via Dng wrote:
> If you set the partition label for the target of a file system archive,
> then the use of findmnt eliminates the need for a special location. For
> example:
> findmnt -P -t ext4,xfs -o source,target,label
>
> Note, the file systems in the example should be set to what you use for
> your archive media.
>
> Since I back up to network attached storage, I parse the output of the
> following command to find a sub-directory of the primary mount points.
> findmnt -P -t cifs,nfs,auto -o source,target,label |& \
> while read Q
> do
> [[ "${Q}" =~ LABEL=\"([^\"]*)\" ]] &&
> LBL="${BASH_REMATCH[1]}"
> [[ "${Q}" =~ TARGET=\"([^\"]*)\" ]] &&
> TGT="${BASH_REMATCH[1]}/`hostname -s`"
> [[ "${Q}" =~ SOURCE=\"([^\"]*)\" ]] &&
> SRC="${BASH_REMATCH[1]}"
>
> [ -n "$SRC" ] || continue
> [ -n "$TGT" ] || continue
> [ -d "$TGT" ] || continue
>
> # The actions to perform are then based on the source,
> # the label (if any) and any other criteria that can be
> # found with other options to findmnt.
> ...
> done
>
> I schedule the script that does. I use a custom run-crons
> (/usr/lib/cron/run-crons) but a script in /etc/cron.d would also be a
> good choice.
>
> Rather than dmesg, try
>
> alias lsblock='lsblk -o name,label,fstype,size,type,tran -x name'
>
--
Rod Rodolico
Daily Data, Inc.
POB 140465
Dallas TX 75214-0465 US
http://dailydata.net
214.827.2170
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] A way of holding telephone-conferences with DEVUAN?
On 5/8/20 7:35 PM, tom wrote: > On Tue, 7 Apr 2020 09:24:47 +0300 > Dimitris via Dng wrote: > >> On 4/7/20 9:05 AM, Rod Rodolico wrote: >>> but it works so far with FF >> >> >> doesn't work for everyone, that's why jitsi suggests the use of >> chromium based browsers.. >> >> https://github.com/jitsi/jitsi-meet/commit/92740707f01547d4e431050ade1d17589c544629#diff-12cdb961bef2a8b83d0f510226f85495 >> >> >> https://community.jitsi.org/t/software-unusable-on-firefox-why/22143/10 >> https://github.com/jitsi/jitsi-meet/issues/4758 >> > > suggests? you mean flat out blocks anyone not on chrome or firefox > No, it does not block any browser. But, it will not work as well (or at all) with some. I've tested it so far with FF, Safari, Chromium, Chrome, Pale Moon and IE. Chrome/Chromium - works consistently all the time FF -- it works for some, and not for others (I've had no problems). Safari - (one machine) was pretty FUBAR. Gave up. IE -- see Safari Pale Moon -- it could not figure out where my camera/microphone were I did not test Edge, but assume it would work ok since the engine is the same as Chrome, from what I understand (my main interaction with Edge is disabling it on client machines). Rod -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US http://dailydata.net 214.827.2170 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] HW: Which brand and model of lapto have your successfully installed Devuan on?
I tend to purchase used equipment from a refurbisher, so this is old equipment. Dell Latitude E6440 installs fine, but bluetooth does not have drivers that I can find. Some weird Dell labeled part. There was some stuff on their site indicating you could make it work, but I'm lazy so I used a USB dongle for my bluetooth. Toshiba Satellite A665 installed fine and everything worked very well. It did not have bluetooth, so I picked up a USB dongle for that. Both machines running ASCII. Installation was a matter of plugging in the thumbdrive, booting and installing. No special weirdness to work around. Rod On 4/9/20 1:03 AM, tempforever wrote: > Devuan ascii successfully installed, regularly used on the following > laptops: > > Lenovo Thinkpad T550 -- the sd card reader does not work (think this > is a hardware problem though, I did get a refurbished machine) > > HP Pavillion - not sure the exact model # > > These next two ran ascii, then upgraded to beowulf: > > Toshiba Satellite A135 (i386) > > Acer Aspire AS7750G > > The HP has a problem with the builtin wifi adapter (sometimes it works, > sometimes it disappears). I believe it's overheating. May replace it > someday, but using USB wifi adapter in the meantime. > > How difficult was it? Not really any more than installing to a desktop. > Didn't run into any major problems. The installer didn't seem to be > the most intuitive for setting up LVM+LUKS volumes, but it did work, > eventually. > > > terryc wrote: >> This is a hardware question. >> Which brand and model(s) of laptop have people successfully installed >> devuan onto? >> How difficult was it? >> >> Thank You In Advance. >> >> The long story; I finally have a need to purchase my own personal >> laptop and have spent the last few days searching for such a beastie >> that I can order. >> >> I have a strong preference to not pay the Microsoft Tax and not waste >> my money on bits for which there are no linux drivers. Obviously >> running Devuan is preferable. >> >> Unfortunately, there appears to be no local vendor of Linux only >> laptops around any more. The only one in the coutry that I could >> located actually buys Win OS laptops and co-installs Linux and I'd >> prefer to avoid the future hassles that will cause(leopard-spots). >> >> Note, also having great difficulty finding out how to order such a >> beastie from the major global brands. >> >> ___ >> Dng mailing list >> Dng@lists.dyne.org >> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng >> > > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US http://dailydata.net 214.827.2170 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] A way of holding telephone-conferences with DEVUAN?
Did a little test of Jitsi tonight. First thing is there were no appreciable cpu or memory requirement increase when multiple users are connected in a session. However, bandwidth is a consideration. These readings are from the server. Started with two users. Bandwidth was at around 8Mb/s, pretty evenly divided between up and down. Added third user and the bandwidth went to 15Mb/s again fairly evenly divided with 8M incoming and 7M outgoing. The fourth user was having issues with their network connection at their home, but we saw the bandwidth jump to 20Mb/s for a brief period; too short for Zabbix to graph (it does 5 minute averages). When the fourth user disconnected, bandwidth dropped back to 16Mb/s. Finally, with three users, one user dropped their camera quality (through the Jitsi interface) to "Low", with an almost immediate drop from 15-16Mb/s to 13Mb/s. The other two followed suit, dropping their image quality and we were able to achieve 12Mb/s. We then stopped the test. Again, not as much information as I would have preferred, but it gives an indication to those who were wanting to install a video server on their own machines with limited bandwidth. Changing image quality is on a per-user basis, on their individual connection; I'm not aware of any way to do that on the server. However, there is a lot I don't know about this system. Rod On 4/7/20 2:11 PM, Rod Rodolico wrote: > yes. There is an icon on the screen (browser based) showing network > speed and drops. It will automagically change frame rate, though that is > not seamless. However, there is a menu item that allows you to change > your image quality from the browser session. > > The 8Mb/s was on my server. I believe my client in most sessions has > been running a lot less, though I haven't checked that yet. I'm guessing > around 2Mb/s, but not sure. > > Rod > > > On 04/07/2020 09:45 AM, Hendrik Boom wrote: >> On Tue, Apr 07, 2020 at 01:05:10AM -0500, Rod Rodolico wrote: >>> I just installed a Jitsi instance on one of my old servers last week. My >>> 15 year old granddaughter did most of the work. We built it as a Xen >>> virtual with 10G disk, 4G RAM and 4 dedicated cores. We used ASCII as >>> the Distro. >>> >>> Tests so far have been two people (test for more planned for later this >>> week). With two people in the video conference, we ran about 8Mb/s >>> pretty steady the whole hour. Processor was about 40% on all four cores >>> and RAM was pretty much untouched. >> >> Looks a little tight. My DSL link provides 6 Mbps. I wonder if it >> adjusts the video quality or framerate to match the aailable bandwidth. >> >> -- hendrik >> ___ >> Dng mailing list >> Dng@lists.dyne.org >> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng >> > -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US http://dailydata.net 214.827.2170 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Current state of VPN software ?
This is not what you asked for, but I'll put it in anyway. I use vpn appliance distro's for my clients. I either use OPNSense (powerful, more difficult to configure) or IPFire (still pretty good, but simple to configure). I just download the software, install on a device, then configure. Been doing it for a while so it usually only takes me an hour or so from boot to done. I like "appliance distro's" for some things, simply for efficiency. I have some "howto's" on kb.unixservertech.com, or feel free to contact me offline if you choose to go this route and need some help. Rod On 4/8/20 3:14 PM, Simon Hobson wrote: > It's been a while since I last did anything with VPNs on Linux, and I recall > there being 3 options, some of which were "less well supported" than others. > I'm looking to setup a site-site tunnel so I can remotely access stuff at > mum's (she's in isolation because of this Covid 19 stuff) and using remote > desktop control, connect her Mac to a video call. > > So what's the state of play in the VPN on Linux world - both ends would be > running Devuan (one end an AMD64 VM, the other end rPi) ? Last thing I used > was OpenVPN which AIUI is completely non-interoperable with anything else, > while FreeSwan and OpenSwan were having a bun fight. > > Simon > > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US http://dailydata.net 214.827.2170 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] A way of holding telephone-conferences with DEVUAN?
yes. There is an icon on the screen (browser based) showing network speed and drops. It will automagically change frame rate, though that is not seamless. However, there is a menu item that allows you to change your image quality from the browser session. The 8Mb/s was on my server. I believe my client in most sessions has been running a lot less, though I haven't checked that yet. I'm guessing around 2Mb/s, but not sure. Rod On 04/07/2020 09:45 AM, Hendrik Boom wrote: > On Tue, Apr 07, 2020 at 01:05:10AM -0500, Rod Rodolico wrote: >> I just installed a Jitsi instance on one of my old servers last week. My >> 15 year old granddaughter did most of the work. We built it as a Xen >> virtual with 10G disk, 4G RAM and 4 dedicated cores. We used ASCII as >> the Distro. >> >> Tests so far have been two people (test for more planned for later this >> week). With two people in the video conference, we ran about 8Mb/s >> pretty steady the whole hour. Processor was about 40% on all four cores >> and RAM was pretty much untouched. > > Looks a little tight. My DSL link provides 6 Mbps. I wonder if it > adjusts the video quality or framerate to match the aailable bandwidth. > > -- hendrik > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US http://dailydata.net 214.827.2170 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] A way of holding telephone-conferences with DEVUAN?
I just installed a Jitsi instance on one of my old servers last week. My 15 year old granddaughter did most of the work. We built it as a Xen virtual with 10G disk, 4G RAM and 4 dedicated cores. We used ASCII as the Distro. Tests so far have been two people (test for more planned for later this week). With two people in the video conference, we ran about 8Mb/s pretty steady the whole hour. Processor was about 40% on all four cores and RAM was pretty much untouched. A basic system is pretty much straight forward. It did "forget" to create the rc.d entry for jitsi-videobridge2 service, but that was easy to fix with update-rc.d jitsi-videobridge2 defaults More advanced setups allow you to set a password before you can create a meeting (so not just anyone can do it), the ability to record the meeting, and an interface with SIP. I have not tested any of those. All in all, jitsi rocks. Tracking consists of some info in their own log in /var/log/jitsi and, so far, all I've seen is the IP's that connect. As was said, if all you want is a one off, or some occasional meetings, https://meet.jit.si/ is set up and free. That way you don't eat bandwidth and spend all the time building it out. There is a client for Android, iPhone, OS-X, Debian, RPM, Arch and Windoze. See https://jitsi.org/downloads/. I tried the Android version on an old tablet and it worked ok. I mainly just use my browser. It complains if I use an old version of FF, but it works so far with FF and Chromium so you don't need to install a client. Just found out about it a few weeks ago, so I haven't had time to break it yet. So, nothing bad so far except the bandwidth, which isn't horrible. Feel free to contact me if you want some graphs or the results of our Wednesday test. Rod On 04/04/2020 05:07 AM, Raul Claro wrote: > Dear Devlers, > > is there a way of holding a video- or an audioconference with > Firefox (or Vivaldi) on Devuan? The ones I have come in contact with. > such als /https://global.gotomeeting.com/, /work only with Windows or > Mac and Chrome. > > Are there any Debian/Devuan alternatives to these systems? > > Thanks > > Raúl > > > > > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US http://dailydata.net 214.827.2170 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Result of the Debian vote 'General Resolution: Init systems and systemd'
Switching base is not possible so long as people like me don't contribute to the development. So, it is not an option. Maybe when enough people jump in and start helping the current current developers it could be done. From my point of view, as a sysadmin, Jessie being 2 years late was no biggie, because when I moved to Devuan Jessie (from Debian Wheezy), I had a working system I could depend on. Having the latest and greatest is fine for workstations. For servers, I want stable and bulletproof. Rod On 12/30/2019 03:53 PM, fsmithred via Dng wrote: > On 12/29/19 10:46 PM, tom wrote: >> >> I know Devuan has been pretty much more or less 'to create a binary >> compatible Debian but without systemd', but at what point would it be >> determined that the best course of action may be to leave Debian behind >> and continue our own way? Probably won't happen any time soon due to >> manpower issues but it's worth thinking about. >> > > One way to measure that might be to see if we start falling farther > behind debian. Right now, we're still catching up. > > Jessie was 2 years late. > Ascii was 1 year late. > Beowulf is 6 months late. > > Any talk of switching our base is premature. > > fsmithred > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US http://dailydata.net 214.827.2170 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Install failure: cannot boot netinst
There is absolutely no reason to believe the two are related, but I ran into a similar issue installing OPNSense (a FreeBSD firewall, https://opnsense.org/) on a Protectli device. I'm just making a wild guess, so don't expect much. What had to be done on that is to set the see if there is a Boot option filter and, if so, set it to "UEFI only" and see what happens. Sorry if I send you on a "wild goose chase" but, while the hardware and operating systems are different, the symptoms are very similar. The screen "goes away" during install. The original article is at https://protectli.com/kb/how-to-install-opnsense-on-the-vault/ with detailed instructions for the vault (their name for their device) are at: https://protectli.com/kb/how-to-configure-uefi-on-the-vault/ They are using American Megatrends BIOS version 2.18.1263 Rod On 05/29/2019 02:51 PM, Blair, Charles E III via Dng wrote: > I am sorry, I have both mis-stated the > problem I am having and misunderstood some > of the suggestions. > >I have burnt the netinst file for "ASCII" to a CD > and attempted to boot it on a recently purchased > Intel NUC (I disabled "Secure Boot" to get past one > warning). The result is a screen that is blank > except for a (non-blinking) cursor in the upper > left corner. Either the installer does not get > started or the monitor is unable to process the > installer output. The CD reader, at least for > a few minutes, makes noises suggesting it is trying > to read the CD. > >I tried to follow some suggestions from Intel: > > https://www.intel.com/content/www/us/en/support/articles/30985/mini-pcs.html > >I was able to get as far as the "Performance" > and "Graphics" sections of the bios menu (their > first suggestion), but could not see anything to > disable "InteliGD" --- there was only something > to change "Dynamic Frequency Setting." > >Their last suggestion, involving a "phantom > display" seemed promising, but I was unable to > find (from windows 10) anything to adjust this. > > Thanks for any further ideas! > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US http://dailydata.net 214.827.2170 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] calendars, contacts, to do lists
That is the addon I was thinking about. I have gone to tbsync for all new installs also and it works very well. I only use it for Contacts (Address Book) as I've had no recent problems with standard caldav on Lightning, but for the contact list, it works very well and I assume will work as well for Calendaring. Rod On 05/27/2019 01:52 AM, Dimitris via Dng wrote: > On 5/25/19 11:25 AM, Dr. Nikolaus Klepp wrote: >> Does Thunderbird lightening work reliable in your setup? I have problems >> with it greying out accounts, calenders, not syncing, then syncing again. >> > > yes, for several years now. owncloud in the beginning, nextcloud now. > > greyed out calendars,etc for nextcloud, could mean a problem in > nextcloud instance (web server rewrites perhaps?), or wrong > caldav/carddav links in thunderbird. try removing and re-adding urls. > > official nextcloud guide here : > https://docs.nextcloud.com/server/16/user_manual/pim/sync_thunderbird.html > > personally i use tbsync addon for thunderbird. > https://github.com/jobisoft/TbSync/wiki/How-to-get-started > was using sogo connector addon in the past, but that had lots of issues.. > > > d. > > > > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US http://dailydata.net 214.827.2170 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] calendars, contacts, to do lists
I have used an OwnCloud (owncloud.org) server for several years now, both internally and for a few clients, with great success. It's main target is file sharing (similar to Dropbox), but it has contacts and calendaring also which support carddav and caldav. carddav and caldav are native to OS X (and IOS), and there are clients available for Android. There is also a fairly decent plugin (addon, whatever it is called) that does them for Microsoft Outlook. I mainly use it with our Android phones internally, and with Thunderbird. Lightning natively supports caldav, but you have to add a plugin for carddav into the address book. Tasks are in caldav format, but appear to have some header that shows them in the task tab under Lightning, and in the task app under Android. We have separate, shared calendars based on group (Accounting, Technician, Maintenance, etc...), plus personal calendars which may or may not be shared depending on the individual users preferences. NOTE: there is a split from Owncloud called NextCloud (nextcloud.com). It is my understanding there was a conflict about commercialization, so the original author created NextCloud as a pure open source project. I intend to test that and, assuming it does as advertised, move to it, but I can not say from personal experience how well it works at this time. Rod On 05/23/2019 09:44 AM, Hendrik Boom wrote: > I'm looking for software to handle appointment calendars, contact > lists, and todo lists. > > Yes, I realise I may not find an ideal one. I'm open to wriging my > own if necessary, or (prefereably) modifying others' open-source > versions, (or even more prefereably) finding one that is already ideal. > > What I'd like it to do, besides the obvious ones of storing my data and > letting me edit and dispay it. > > * I should be able to use it on Devuan. > > * Ideally, it should use replicated data. Like the way distributed > revision control is used to replicate source code. Yes, I'm willing to > handle merge conflicts manually on sync, but I do want to be in control > of merging and possible race-conditions. > > * I don't want to need aways-on network connectivity, > > * I don't want to depend on Google's calendar services, but I'd like to > be able to use them to coordinate with other people who do. > > * I'd like to be able to use established protocols rather than inventing > my own. > > * I'd like to be able to access it on android as well as plain desktop > Linux. (The desire for android compatibility will drop away if I > ever get a plain-Linux phone). (This could be a web interface) > > * I'd like the system to be simple in concept and execution. No bloat, > no incomprehensible frameworks, etc. > > > Any ideas? > > -- hendrik > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US http://dailydata.net 214.827.2170 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] mirrors
Perfect. Thanks. May be a few days before I can look into it. Rod On 04/25/2019 03:42 PM, info at smallinnovations dot nl wrote: > On 25-04-19 22:31, Rod Rodolico wrote: >> Do we need an additional mirror? If so, who do I contact. I have some >> bandwidth and disk space I could probably dedicate. >> >> Feel free to contact me off list. >> >> Rod > > Take a look at http://deb.devuan.org/devuan_mirror_walkthrough.txt > > Grtz. > > Nick > > > > > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US http://dailydata.net 214.827.2170 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] mirrors
Do we need an additional mirror? If so, who do I contact. I have some bandwidth and disk space I could probably dedicate. Feel free to contact me off list. Rod -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US http://dailydata.net 214.827.2170 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Fwd: April's fools mess
Let it go, Mike. At one level, I postponed some updates until the "issue" was resolved, so I got caught in the joke. At another level, it was funny that I allowed myself get drawn in. So what? The Devuan team is working their asses off, with no requirement for compensation (have you donated?) to build a system I personally use daily. And I trust KatolaZ's retraction as much as I trusted his initial cracking claim. Sorry, but I think you are blowing this up. Give him the cred for pulling off a joke, be pissed you got caught, then decide whether you want to go with something else or not. I personally don't have any less respect and trust than I did yesterday. Planning several additional moves from Debian to Devuan over the next 60 days. So, let it go and let the team get back to continuing build the best Linux distro available right now. Rod On 04/01/2019 04:41 PM, KatolaZ wrote: > On Mon, Apr 01, 2019 at 02:28:48PM -0700, Mike Bird wrote: >> On Mon April 1 2019 14:18:38 Martin Steigerwald wrote: >>> For me that is good enough. >> >> When core team member Evilham writes "it still looks as >> if gdo and the build system were compromised" [1] I need a >> lot more than a limited admission of guilt from KatolaZ >> before trusting that Evilham was mistaken rather than >> KatolaZ just managed to hide his tracks better. >> >> --Mike >> >> [1] https://lists.dyne.org/lurker/message/20190401.132910.da02134d.en.html > > You are spreading FUD, since in the email you quoted Evilham never > said the infra was compromised. I discard the fact that you come here > out of the blue, lecturing about security, calling me a criminal, > threatening to sue people you don't even know, and not even bothering > signing your emails. > > I will stop here. I am sure the other Devuan developers will be able > to provide all the reassurances you need. > > HND > > KatolaZ > > > > _______ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US http://dailydata.net 214.827.2170 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Devuan for Raspberry Pi fried SD CARD.
There is an old article at http://wiki.linuxservertech.com/index.php?action=artikel=9=173 which may help you. I wrote it when I was booting servers from USB Thumbdrives. Again, it is an older article so use some caution when you review it. But, I have servers using thumbdrives that have been running for 5+ years. Rod On 12/02/2018 04:41 AM, Edward Bartolo wrote: > Hi everyone. > > Recently I have been using a Raspberry Pi 3B, obviously powered with > Devuan, to run as music player. Restarting it yesterday, I was > dismayed to discover it would not boot properly anymore, with long > lists of errors complaining about not being able to write to the SD > CARD. The latter is not full. Examining it I found it is now > permanently marked as read-only. Searching online for an explanatory > cause, I learnt this occurs when the maximum number of write cycles is > reached. So, the SD CARD, although brand new is now to be thrown away. > > The purpose of this email is to ask how to radically minimized write > cycles to the SD CARD when I run Devuan for Raspberry Pi 3. I found a > how-to which uses /tmp fs for frequently modified system files, but > the user uses systemd and I do not want to have that. > > Can any good soul help, please? > Thanks. > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US http://dailydata.net 214.827.2170 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] merging /tmp
FWIW, I run several servers and I tried doing without swap a few years ago. I think it was Wheezy, but it may be even older. If memory serves me well, it was a couple of Xen DOM0's, and I was careful to allocate my DOMU's so that I had 8-12G of RAM just for the DOM0. I ended up with some erratic lockups on the servers, which I solved by throwing creating a small swap (on a RAID, but I never expect the machines to use swap). Since I've done that, I have had no other issues. I did not investigate any further; I just figured I hacked off the Unix gods by not having any swap. I'd advise testing like crazy before putting a machine into production without a swap. Rod On 11/28/2018 12:28 AM, Rick Moen wrote: > Quoting Erik Christiansen (dva...@internode.on.net): > >> That leaves /var, which I've kept separate for three decades, to obviate >> the risk of furious rates of logging fatally depleting /. OK, it takes >> longer now, but the principle remains. > > Tip (and one man's opinion): > > On servers, I've long found it useful to hsve /var as an ext2 filesystem > (for highest raw performance), with the following mount options: > noatime,nodev,nosuid > > The noatime option further and substantially reduces metadata overhead, > another non-trivial boost to system disk performance. The other two > are an aid against software mishap and a first-level obstacle against > automated system-cracking tools -- there being no legitimate reason for > device nodes or SUID binaries on that filesystem. (Depending on your > system, you probably want to ensure that /var/lib and /var/spool are > served from elsewhere, either separate filesystems of their own or > symlinks to trees elsewhere /like to dirs under /home or some such.) > >> Growth of /tmp was never a problem, as removal of several day old tmp >> files was/is a standard cronjob, at least after you've been bitten once. > > I actually think tmpfs for /tmp is a fine idea, provided (1) you are > aware of what'll happen if it balloons, and (2) you're OK with it being > backed by volatile storage and aren't surprised by it being empty after > reboots including unplanned ones. The speed gain is serious. > > If nervous about all of /tmp being volatile, you could, e.g., have > subdir /var/volatile only mounted as tmpfs. > > For me, I'm leaning towards all of /tmp being on tmpfs and _no_ swap of > any kind on near-future server systems because of intended use of only > SSDs, no spinning rust at all. I don't have hard data, but suspect that > the wear on SSDs from swap activity is substantial to a degree that > outweighs swap's functional utility -- for my use-case, at least. I > intend to have a go at a style of operation where running out of > physical RAM means the OOM killer gets loose for a while, and see how > that goes. The implicity assumption is 'I'll try to avoid that by > having enough RAM and not running tasks configured so they're likely to > blow up and drive the system into swap.' My metrics say that I haven't > been driving into swap, so it's probably a reasonable stance. > . > _______ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US http://dailydata.net 214.827.2170 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Decent GUI FTP client for linux (not filezilla)
apt-get install grsync http://www.opbyte.it/grsync/ Has most of the options you commonly use, plus a place to manually add additional parameters. Plus, you can tell it to execute a command before and after it runs. You can also go to File | Rsync Command Line and see what the command it creates is. I haven't used it (I'm more of a cli person) but it looks pretty good. Rod On 12/06/2017 04:31 PM, Steve Litt wrote: On Wed, 6 Dec 2017 11:11:47 + KatolaZ <kato...@freaknet.org> wrote: On Wed, Dec 06, 2017 at 10:58:38AM +0100, Dr. Nikolaus Klepp wrote: Am Mittwoch, 6. Dezember 2017 schrieb taii...@gmx.com: After noticing that filezilla has added adware to the windows client I am nervous about using it for linux due to their loose morals and I am curious about alternatives. I am looking for one with a decent gui, ideas? Thanks ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng Konqueror from TDE :-) GNU mc. Unless by GUI you really mean something with sparks and glitters :-P IMHO mc has a horrible set of hotkeys, it makes regrettable mistakes easy, and for me it has a much slower workflow than command line sftp. IMHO for mass file transfers, rsync is the tool of choice. Or tar it up one place, rsync it elsewhere, and untar it there. What would be COOL AS HELL would be a graphical tool to build rsync commands, perhaps somehow using ssh-agent so you can keep it open and only authenticate once. SteveT Steve Litt December 2017 featured book: Thriving in Tough Times http://www.troubleshooters.com/thrive ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US http://dailydata.net ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] Devuan Mirror
I sent an e-mail about a week ago to the list. I'm willing to mirror Devuan, I just do not have the information I need to do it. If anyone wants another mirror. It would be in Dallas, US. I just need to know how much space and bandwidth it will need, plus instructions on how to set up the mirror. Rod -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 214.827.2170 http://www.dailydata.net ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
