[gentoo-user] systemd/dracut: Correctly boot using flash drive with LUKS key?

[Andrew Udvare]

I have a set up like this to boot:

GRUB - access non-encrypted EFI partition to find kernel, initramfs, etc
initramfs has enough on it to boot minus the encryption key
(Removable) storage must be inserted (UUID matching) to:
- mount to expected point
- use key to decrypt root partition (systemd job in the first systemd
launched within initramfs)

This set up works, but it has one annoying thing coming from systemd
after initramfs is done.

When I take out the flash drive after booting up, I continuously get a
message that the flash drive wants to be mounted again.

Nov 16 00:01:52 limelight systemd[1]:
dev-disk-by\x2duuid-BD3B\x2d03BD.device: Job
dev-disk-by\x2duuid-BD3B\x2d03BD.device/start timed out.
Nov 16 00:01:52 limelight systemd[1]: Timed out waiting for device
Silicon-Power16G CHUAN.
Nov 16 00:01:52 limelight systemd[1]: Dependency failed for /mnt/chuan.
Nov 16 00:01:52 limelight systemd[1]: mnt-chuan.mount: Job
mnt-chuan.mount/start failed with result 'dependency'.
Nov 16 00:01:52 limelight systemd[1]:
dev-disk-by\x2duuid-BD3B\x2d03BD.device: Job
dev-disk-by\x2duuid-BD3B\x2d03BD.device/start failed with result 'timeout'.

I think this is because of the entry in /etc/fstab.

Anyone have a similar issue? And how can I fix this in Dracut?

Thanks
Andrew



signature.asc
Description: OpenPGP digital signature

Re: [gentoo-user] net-misc/r8168 build issue

[Neil Bothwick]

On Thu, 15 Nov 2018 18:06:26 +0300, Hasan Ç. wrote:

> This is a known problem kernel uses r8169 ethernet firmware for r8168
> chips and causes connectivity issues.Thanks gentoo there is a r8168
> package in net-misc but i encountered a problem.
> 
> James Le Cuirot , Sat, 28 Apr 2018 00:09, commit
> ee232457
> 
> 
> -CONFIG_CHECK="!R8169"
> -ERROR_R8169="${P} requires Realtek 8169 PCI Gigabit Ethernet adapter
> (CONFIG_R8169) to be DISABLED"
> 
> emerge --ask net-misc/r8168

You can't have two r8168 modules installed at the same time. Use either
the in-kernel one or thebinary driver from Realtek, that's what the ebuild
is checking for. For the 8168 firmware, install linux-firmware.

% qlist linux-firmware | grep 8168
/lib/firmware/rtl_nic/rtl8168h-2.fw
/lib/firmware/rtl_nic/rtl8168h-1.fw
/lib/firmware/rtl_nic/rtl8168g-3.fw
/lib/firmware/rtl_nic/rtl8168g-2.fw
/lib/firmware/rtl_nic/rtl8168g-1.fw
/lib/firmware/rtl_nic/rtl8168f-2.fw
/lib/firmware/rtl_nic/rtl8168f-1.fw
/lib/firmware/rtl_nic/rtl8168e-3.fw
/lib/firmware/rtl_nic/rtl8168e-2.fw
/lib/firmware/rtl_nic/rtl8168e-1.fw
/lib/firmware/rtl_nic/rtl8168d-2.fw
/lib/firmware/rtl_nic/rtl8168d-1.fw


-- 
Neil Bothwick

WORM: (n.) acronym for Write Once, Read Mangled. Used to describe a
  normally-functioning computer disk of the very latest design.


pgpD4vG0ANuCS.pgp
Description: OpenPGP digital signature

[gentoo-user] net-misc/r8168 build issue

[Hasan Ç .]

Hi All,

This is a known problem kernel uses r8169 ethernet firmware for r8168 chips
and causes connectivity issues.Thanks gentoo there is a r8168 package in
net-misc but i encountered a problem.

James Le Cuirot , Sat, 28 Apr 2018 00:09, commit ee232457


-CONFIG_CHECK="!R8169"
-ERROR_R8169="${P} requires Realtek 8169 PCI Gigabit Ethernet adapter
(CONFIG_R8169) to be DISABLED"

emerge --ask net-misc/r8168


* Messages for package net-misc/r8168-8.045.08:
 *   r8168-8.045.08 requires Realtek 8169 PCI Gigabit Ethernet adapter
(CONFIG_R8169) to be DISABLED

It seems not allow to build r8168 if kernel compiled with r8169 module.Do
we need to re-compile kernel without r8169?
After i disabled r8169 in /usr/src/linux-$(uname -r)/*.config* manually,
build works.

#CONFIG_R8169=m


 emerge --ask net-misc/r8168


lspci -v


02:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd.
RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller (rev 15)
Subsystem: Hewlett-Packard Company RTL8111/8168/8411 PCI Express Gigabit
Ethernet Controller
Kernel driver in use: r8169
Kernel modules: r8169, r8168

modprobe -r r8169
> modprobe r8168


modprobe: ERROR: could not insert 'r8168': Required key not available

[*]   Module signature verification
[*] Require modules to be validly signed
[*] Automatically sign all modules
  Which hash algorithm should modules be signed with? (Sign
modules with SHA-512) --->


I signed r8168 manually and disabled r8169:

/usr/src/linux-$(uname -r)/scripts/sign-file sha512 /usr/src/linux-$(uname
> -r)/certs/signing_key.pem /usr/src/linux-$(uname -r)/certs/signing_key.x509
> /lib/modules/$(uname -r)/net/r8168.ko


modprobe r8168



> echo "blacklist r8169" >> /etc/modprobe.d/blacklist.conf # This is not
> working for me something forcing to it load.


GRUB_CMDLINE_LINUX_DEFAULT="modprobe.blacklist=r8169" #This is working way
> to push r8168 instead of r8169 for me.


grub-mkconfig -o /boot/grub/grub.cfg



> dracut --force --regenerate-all


lspci -v


 02:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd.
RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller (rev 15)
Subsystem: Hewlett-Packard Company RTL8111/8168/8411 PCI Express Gigabit
Ethernet Controller
Kernel driver in use: r8168
Kernel modules: r8169, r8168

dmesg | grep r8168


[3.951450] r8168: loading out-of-tree module taints kernel.
[3.951732] calling  init_module+0x0/0x1000 [r8168] @ 564
[3.951750] r8168 Gigabit Ethernet driver 8.045.08-NAPI loaded
[3.967857] r8168: This product is covered by one or more of the
following patents: US6,570,884, US6,115,776, and US6,327,625.
[3.967861] r8168  Copyright (C) 2017  Realtek NIC software team <
nic...@realtek.com>
[3.967893] initcall init_module+0x0/0x1000 [r8168] returned 0 after
15775 usecs
[3.993330] r8168 :02:00.0 eno1: renamed from eth0
[  808.484879] r8168: eno1: link up

ifconfig


eno1: flags=4163  mtu 1500
inet 10.34.105.20  netmask 255.255.255.0  broadcast 10.34.105.255
inet6 fe80::f9e1:641f  prefixlen 64  scopeid 0x20
ether 48:ba:4e  txqueuelen 1000  (Ethernet)
RX packets 408  bytes 119641 (116.8 KiB)
RX errors 0  dropped 0  overruns 0  frame 0
TX packets 507  bytes 84037 (82.0 KiB)
TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
device interrupt 127  base 0x5000

It seems stable but i don't know why it is restricted for r8169 enabled
kernel.
Sincerely.

Re: [gentoo-user] Shorewall config problem

[Peter Humphrey]

On Wednesday, 14 November 2018 22:03:36 GMT Adam Carter wrote:
> > That is odd. I tried inserting the IPV[4,6] .config entries by hand, but
> > oldconfig removed them again.
> 
> I'd say those entries are deprecated and that shorewall will just need an
> update to make it compatible with 4.19.

https://bugs.gentoo.org/671176 submitted.

-- 
Regards,
Peter.

Re: [gentoo-user] Scanners, sane and driver support question

[Dale]

Dale wrote:
> Howdy,
>
> I'm on the hunt for a scanner, flatbed type, and have been browsing Ebay
> and the sane project list of supported devices.  I'm leaning toward HP
> on this.  While looking at say a ScanJet 6200C, it says the drivers are
> no longer maintained but complete.  It leads me to this question.  Does
> that mean they are complete and fixes will no longer be made even if
> something breaks them and they need a little tweaking OR they are
> complete and if a bug pops up, they will be fixed as needed but all
> functions work?  I can see the logic either way on this.  I'm leaning
> toward the side that if something pops up that requires a little
> tweaking, it will be done by someone.  The drivers are just feature
> complete. 
>
> Does anyone else have the same thinking or is buying one of these
> scanners a bad idea if the drivers were to break and the scanner was
> rendered no longer usable? 
>
> Thanks.
>
> Dale
>
> :-)  :-) 
>


I got my HP scanjet 4570c in today.  No wonder the shipping was so
high.  The person I bought it from on Ebay packed it in one large box
and wrapped it in bubble wrap.  It took me a while to find the power
adapter.  While looking for it, I also found the data cable.  Anyway,
I've scanned quite a few pics already and it is doing good.  At first, I
had trouble getting 2400DPI to work.  I scanned quite a few pics at
1200DPI with no issues but decided to try 2400DPI again.  For some
reason, it worked and I scanned a few pics with that setting.  I'm going
back to 1200DPI since 2400GPI is a bit much, takes to long too.  ;-)

If anyone runs up on one of these scanner, it works well.  I haven't
tried the buttons tho.  I've used Xsane, Skanlite and Simple Scan
software.  Each has its own benefits but right now, I'm using Skanlite. 
It is fairly fast and does what I need by default.  Other pics may
require something more complicated but it works well for now.

Thanks to all for the tips and advice.  Now to get a printer.  Plan to
upgrade memory and CPU first tho.  ;-)

Dale

:-)  :-)