Re: [gentoo-user] How to compress lots of tarballs

2021-09-26 Thread Simon Thelen
[2021-09-26 11:57] Peter Humphrey 
> part   text/plain 382
> Hello list,
Hi,

> I have an external USB-3 drive with various system backups. There are 350 .tar
> files (not .tar.gz etc.), amounting to 2.5TB. I was sure I wouldn't need to
> compress them, so I didn't, but now I think I'm going to have to. Is there a
> reasonably efficient way to do this? I have 500GB spare space on /dev/sda, and
> the machine runs constantly.
Pick your favorite of gzip, bzip2, xz or lzip (I recommend lzip) and
then:
mount USB-3 /mnt; cd /mnt; lzip *

The archiver you chose will compress the file and add the appropriate
extension all on its own and tar will use that (and the file magic) to
find the appropriate decompresser when you want to extract files later
(you can use `tar tf' to test if you want).

--
Simon Thelen



Re: [gentoo-user] Python 2.7 removal : problem with Firefox + Spidermonkey

2020-07-29 Thread Simon Thelen
[2020-07-29 13:11] Philip Webb 
Hi,
> I've removed every other pkg which might require Python-2.7,
> but am stuck with this :
>
>   root:605 ~> emerge -cpv python:2.7
>
>   Calculating dependencies... done!
>   dev-lang/python-2.7.18-r1 pulled in by:
> dev-lang/spidermonkey-60.5.2_p0-r4 requires 
> >=dev-lang/python-2.7.5-r2:2.7[ncurses,sqlite,ssl,threads]
> www-client/firefox-68.10.0 requires 
> dev-lang/python:2.7[ncurses,sqlite,ssl,threads(+)]
>
> Yes, I've looked in  package.use  & in the ebuilds
> & can't find any source of these requirements : can anyone help ?
The dependencies on python2.7 are being added by the mozcoreconf
eclasses.  The firefox requirement is in eclass/mozcoreconf-v6.eclass,
spidermonkey has essentially the same thing but in -v5.eclass

-- 
Simon Thelen



Re: [gentoo-user] Youtube-dl and file time stamps.

2020-07-15 Thread Simon Thelen
[2020-07-15 17:30] Dale 
>Howdy,
Hi,

>I'm not sure what causes this because it doesn't always do this.  When I
>use youtube-dl to download videos, it sometimes uses the current date and
>time for the time stamp.  I like that because I can sort by date and see
>new videos.  On some sites tho it seems to use the time stamp of the file
>on the server I am downloading from not when it was put on my system. 
>Sometimes I download a video and it may have a time stamp of years ago,
>decades sometimes.  I looked through the help page but can't find a option
>to tell it to use local time instead of the time from the remote server
>file.  Needless to say, when it does this, I can't tell which videos I
>recently downloaded since sorting by time stamps is no longer accurate.
>It's annoying.
>
>Has anyone else noticed this behavior? Is there a way to tell it to stop
>setting it to really old time stamps?  Some option that isn't documented
>maybe.
You're probably looking for the --no-mtime option. Depending on what
you're using to sort your local videos you can always just tell it to
sort by ctime instead of the (probably) default mtime. Several other
file download programs set the mtime to the last-modified header or
similar, but they tend not to touch the ctime.

-- 
Simon Thelen




Re: [gentoo-user] Udev and eudev clash. Something wants to remove eudev and install udev.

2019-10-27 Thread Simon Thelen
[2019-10-27 18:47] Dale 
>
> part   text/plain 30K
> Howdy,
Hi,

> I'm trying to do my weekly update.  I use eudev but something seems to
> want plain udev and to remove eudev while at it.  I have udev masked so
> emerge knows not to install it.  This is what emerge spits out with the
> -t option in use.  Keep in mind, some options are in make.conf but the
> output should show the needed results. 
[..]

> The following mask changes are necessary to proceed:
>  (see "package.unmask" in the portage(5) man page for more details)
> # required by virtual/libudev-232-r1::gentoo[-systemd]
> # required by dev-libs/libgudev-233-r1::gentoo
> # required by xfce-base/thunar-1.8.9::gentoo[udisks]
> # required by xfce-base/xfce4-meta-4.14-r1::gentoo
> # required by @selected
> # required by @world (argument)
> # /etc/portage/package.mask/package.mask:
> =sys-fs/udev-242
eudev was forgotten in the deps for virtual/libudev-232-r1, there should
be a fixed virtual/libudev-232-r2 in the tree already. Resync and it
should (hopefully) just work™.

[..]

-- 
Simon Thelen



Re: [gentoo-user] openvpn rc script dependencies

2018-04-10 Thread Simon Thelen
On 18-04-10 at 10:55, Christoph Böhmwalder wrote:
> I was wondering how the OpenRC dependencies between start scripts work.
> 
> Basically, I have two network interfaces on my laptop (wlp3s0 and
> enp0s20u2u3 for wireless and ethernet respectively).  When I start the
> wireless interface service (rc-service net.wlp3s0 start) the OpenVPN
> service starts and vice versa.  That's great, but I didn't configure
> that anywhere.
What does your /etc/runlevels/ look like? Is the openvpn service in one
of the runlevels? Are either of your network interfaces in one of the
runlevels?

> What's even worse is that when I'm not connected via WiFi (i.e.
> ethernet), the VPN service won't start because net.wlp3s0 isn't started:
[..]
> Why would it do that, can I configure this anywhere?
Also check /etc/rc.conf and try setting rc_depend_strict="NO". I do wish
there were a way to modify require/provides without having to edit the
init scripts themselves.


-- 
Simon Thelen



Re: [gentoo-user] dhcpcd: disable zerconf

2018-01-22 Thread Simon Thelen
Holle,
On 18-01-22 at 12:49, Lucas Ramage wrote:
> Hello,
> 
> How does one disable zerconf for dhcpcd or at all in Gentoo for that matter?
Do you mean ipv4ll? Add noipv4ll to /etc/dhcpcd.conf .

-- 
Simon Thelen



Re: [gentoo-user] mpv: no sound anymore...?

2018-01-20 Thread Simon Thelen
Hello,
On 18-01-20 at 08:11, tu...@posteo.de wrote:
> Hi,
> 
> either by one of the last updates or by me while un-pulseaudio-fy
> firefox (and removing pulseaudio afterwards) mpv is no longer willing
> to play any sound.
I don't have any particularly concrete ideas because the error log isn't
very descriptive, but I have several things you can try that will give
us more info/may help pinpoint the issue.

You might want to post the contents of your /etc/asound.conf and your
~/.asoundrc as well as maybe checking the contents of /usr/share/alsa if
there's anything still referencing pulseaudio in there. Maybe also a
qcheck media-libs/alsa-lib to check if any of the default config files
have any changes in them (you can also diff the output of qlist alsa-lib
and find /usr/share/alsa).

You might also want to check your mpv.conf if you have change any of the
audio settings there.

[..]
> Output on the console while playing a video:
> mpv the_best_GPU_for_Blender-720p.mp4
> Playing: the_best_GPU_for_Blender-720p.mp4
>  (+) Video --vid=1 (*) (h264 1280x720 29.970fps)
>  (+) Audio --aid=1 --alang=und (*) (aac 2ch 44100Hz)
> ALSA lib 
> /var/tmp/portage/media-libs/alsa-lib-1.1.5/work/alsa-lib-1.1.5/src/pcm/pcm_dmix.c:1099:(snd_pcm_dmix_open)
>  unable to open slave
> [ao/alsa] Playback open error: Device or resource busy
> [ao] Failed to initialize audio driver 'alsa'
> Could not open/initialize audio device -> no sound.
> Audio: no audio
> VO: [opengl] 1280x720 yuv420p
> V: 00:00:01 / 00:12:38 (0%)
You can try running mpv in verbose mode (-v) to see if that prints any
more relevant information and also try using any of the other (alsa)
audio-devices listed by --audio-device=help. You could also try setting
--audio-samplerate=48k and try enabling/disabling alsa resampling with
--alsa-resample=yes/no.

[..]
> mpv --audio-device=jack the_best_GPU_for_Blender-720p.mp4 
> Playing: the_best_GPU_for_Blender-720p.mp4
>  (+) Video --vid=1 (*) (h264 1280x720 29.970fps)
>  (+) Audio --aid=1 --alang=und (*) (aac 2ch 44100Hz)
> ALSA lib 
> /var/tmp/portage/media-libs/alsa-lib-1.1.5/work/alsa-lib-1.1.5/src/pcm/pcm_dmix.c:1099:(snd_pcm_dmix_open)
>  unable to open slave
> [ao/alsa] Playback open error: Device or resource busy
> [ao] Failed to initialize audio driver 'alsa'
> Could not open/initialize audio device -> no sound.
> Audio: no audio
> VO: [opengl] 1280x720 yuv420p
> V: 00:00:01 / 00:12:38 (0%)
> 
> (why it is accessing alsa here???)
mpv's verbose mode will probably give more info as to why it's trying to
open alsa, but I don't know enough about jack to give any useful ideas
here.

> Using for example zynaddsubfx (softsynth) via qjackctrl/jack I can
> play sound.
> Mpv does not show up in qjackctrl
What samplerate does that generate sound at? 48k or 44.1k?

-- 
Simon Thelen



Re: [gentoo-user] [OT] application to configure mouse

2017-12-13 Thread Simon Thelen
On 17-12-14 at 00:45, Simon Thelen wrote:
> On 17-12-13 at 15:47, R0b0t1 wrote:
> > On Wed, Dec 13, 2017 at 11:10 AM, wabe <waben...@gmail.com> wrote:
> > > p...@xvalheru.org wrote:
> > >> Hi,
> > >>
> > >> Sorry for this offtopic, but is there a UI standalone application to
> > >> configure mouse? I'm using fluxbox and don't want to install gnome or
> > >> kde.
> > > You didn't say what parameters you want to configure. For speed,
> > > acceleration and threshold you can use xset. But be warned, it has no
> > > GUI.
> > The problem with xset is that removing the device and restarting will
> > remove the commands. It is good to have a settings daemon, but I don't
> > know of one.
> You can take every option settable through xset and set it in
> /etc/X11/xorg.conf.d . That will then make sure the options are set
> every time X starts. You can also take the xset command and write it
> into ~/.xinitrc if you don't have root.
Just a note here, if you put the command in your .xinitrc removing and
re-adding the device will probably reset the settings, but the
xorg.conf.d approach should be permanent (works for me without issues).

-- 
Simon Thelen



Re: [gentoo-user] [OT] application to configure mouse

2017-12-13 Thread Simon Thelen
On 17-12-13 at 15:47, R0b0t1 wrote:
> On Wed, Dec 13, 2017 at 11:10 AM, wabe <waben...@gmail.com> wrote:
> > p...@xvalheru.org wrote:
> >> Hi,
> >>
> >> Sorry for this offtopic, but is there a UI standalone application to
> >> configure mouse? I'm using fluxbox and don't want to install gnome or
> >> kde.
> > You didn't say what parameters you want to configure. For speed,
> > acceleration and threshold you can use xset. But be warned, it has no
> > GUI.
> The problem with xset is that removing the device and restarting will
> remove the commands. It is good to have a settings daemon, but I don't
> know of one.
You can take every option settable through xset and set it in
/etc/X11/xorg.conf.d . That will then make sure the options are set
every time X starts. You can also take the xset command and write it
into ~/.xinitrc if you don't have root.

I have a 05-mouse.conf containing:
Section "InputClass"
Identifier "Kingsis Peripherals ZOWIE Gaming mouse"
MatchIsPointer "on"
Option "AccelerationProfile" "-1"
EndSection

You can look for the xorg.conf variable names you need in xorg.conf(5),
or just google it.

-- 
Simon Thelen



Re: [gentoo-user] Re: Emerge does want to tell me...what?

2017-12-03 Thread Simon Thelen
On 17-12-03 at 12:06, Ian Zimmerman wrote:
> On 2017-12-03 18:58, Simon Thelen wrote:
> 
> > Palemoon builds fine with gcc 6.4.0 (just not with gcc 7.2.0), if the
> > ebuild you're using requires an older gcc it's either wrong or doing
> > something weird.
> It builds, but the result binary crashes every 10 minutes.  Have you
> tried it?
I have had similar issues, but gcc 6.4.0 isn't the (sole) reproducer.

I have 2 systems, a haswell laptop and a Ryzen desktop.
Palemoon works fine built using gcc 6.4.0 on the laptop.
On the desktop, however, I had regularly occurring segfaults that
occurred whenever I ran palemoon and had the ulimit for core dumps set
to 0 (ulimit -c to any other value and the segfaults would not occur). I
managed to "fix" the segfaulting by compiling palemoon with CFLAGS="-O1"
instead of "-O2".
I never tried reproducing with an older gcc or clang as the issue only
popped up when I rebuilt my desktop for the Ryzen CPU (switched from
Nehalem where everything worked fine).

Another person I know who uses palemoon on Gentoo has also had no issues
with palemoon built against gcc 6.4.0 on an Xeon with Haswell
architecture.

I assumed this was an issue just with my machine since I could not
reproduce it anywhere else. It might be that palemoon has issues with
certain optimizations/instruction sets that are aggravated by using
newer gcc versions (which could turn on optimizations by default etc).

I tried checking when/why the GCC_SUPPORTED_VERSIONS was added to the
palemoon overlay ebuilds, but can't find an issue or commit introducing
it (didn't spend that long checking), but if I'm not the only one
affected by this it might be worth it to open an issue with upstream.

> The ebuild from the palemoon overlay explicitly checks for the gcc
> version and refuses to proceed if it's newer then 4.9.4.  I have
> wondered why, but now I know.
If you are on Ryzen (or potentially any architecture that isn't
Nehalem-Haswell) you could try seeing if it's the same issue I
experienced (testing with `ulimit -c unlimited', recompiling with -O1),
otherwise you could try out the ebuild I maintain at [1] which may have
some differences from the one in the palemoon overlay.

[1]: 
https://git.c-14.de/landsraad.git/tree/www-client/palemoon/palemoon-27.6.2.ebuild

-- 
Simon Thelen



Re: [gentoo-user] Re: Emerge does want to tell me...what?

2017-12-03 Thread Simon Thelen
On 17-12-03 at 09:52, Ian Zimmerman wrote:
> On 2017-12-03 06:46, Heiko Baums wrote:
> 
> > 1. It can't find >=sys-devel/gcc-6.4.0 but only older gcc versions.
> > 
> > 2. You have installed a package that depend on sys-devel/gcc-5.4.0-r3
> > or sys-devel/gcc-4.9.4.
> > 
> > I already explained what you can do in the first case. In the second
> > case I would try to fix (uninstall, rebuild, upgrade or whatever)
> > those packages which depend on an outdated gcc. I guess equery is your
> > friend.
> Those include palemoon.  GL with fixing that.
Palemoon builds fine with gcc 6.4.0 (just not with gcc 7.2.0), if the
ebuild you're using requires an older gcc it's either wrong or doing
something weird.

-- 
Simon Thelen



Re: [gentoo-user] iputils - caps and filecaps USE flags?

2017-10-03 Thread Simon Thelen
On 17-10-03 at 19:08, Stroller wrote:
> Hello,
> 
> On my Linode VM in /etc/portage/package.use I have:
> 
>   net-misc/iputils -caps -filecaps
> 
> I have no recollection of setting these flags, but `genlop -iputils `
> gives an installation date 2 days after I signed up with Linode, which
> tends to suggest I installed the package. Or perhaps it was part of
> the original Linode Gentoo disk image, and I only updated iputils?
> 
> The USE flag descriptions are meaningless to me and so I have no idea
> why I might have set these flags, were it me who did so:
> 
>   caps - Use Linux capabilities library to control privilege
>   filecaps - Use Linux file capabilities to control privilege rather than 
> set*id (this is orthogonal to USE=caps which uses capabilities at runtime 
> e.g. lib cap)
Capabilities are a method of providing programs with more or less
specific "privileges" as an alternative to running the program as
root/suid. The "caps" useflag controls these at runtime by allowing
programs to drop capabilities that the program doesn't need so that if
something happens it has the ability to break less things. The
"filecaps" flag is the "equivalent" of the suid bit but for specific
capabilities (so instead of providing ping with suid-root you can give
it CAP_NET_RAW only).

It is almost always better to enable both of these where possible since
it helps decrease the attack surface for the programs in question.

Read capabilities(7) for more information.

-- 
Simon Thelen



Re: [gentoo-user] Re: Strange Xmonad problem

2017-09-29 Thread Simon Thelen
On 17-09-29 at 22:09, Melleus wrote:
> Simon Thelen <gentoo-u...@c-14.de> writes:
> > On 17-09-29 at 12:13, Melleus wrote:
> >> Simon Thelen <gentoo-u...@c-14.de> writes:
> >> > On 17-09-28 at 20:30, Melleus wrote:
> >> > [..]
> >> >> Might I ask another Xmonad question in this thread? I would like to have
> >> >> the Firefox goes fullscreen on F11, but the stanza:
> >> >> 
> >> >> isFullscreen --> doFullFloat
> >> >> 
> >> >> in my config does not work, Xmobar remains visible. But some 
> >> >> applications (like
> >> >> Zathura) can go fullscreen and hide Xmobar even without that stanza. Did
> >> >> I misconfigured something?
> >> > You probably want fullscreenEventHook from [1] as shown in the Usage.
> >> >
> >> > [1] 
> >> > https://hackage.haskell.org/package/xmonad-contrib-0.13/docs/XMonad-Hooks-EwmhDesktops.html
> >> I have tried. But it doesn't work for me. I might be missing something 
> >> though.
> >> My config is attached:
> > I'm not sure why your config doesn't work, but this one seems to work
> > for me [1] (not my config, just found it with a quick google).
> > If that one works for you, I'd start with that and then edit it until
> > you have your settings back.
> >
> > [1]: https://pastebin.com/raw/Ly4Fb90B
> This config doesn't work either. It looks like something is seriously
> broken in this version of Xmonad (0.13). It's a pity that it has a stable
> keyword. Will wait for updates. Sorry for the noise. And thank you for 
> attention.
I'm running 0.13 (and have been since February) so I doubt it's that.
Though it could be related to the earlier issue with the state file. I
didn't delete that in my tests.

-- 
Simon Thelen



Re: [gentoo-user] Re: Strange Xmonad problem

2017-09-29 Thread Simon Thelen
On 17-09-29 at 12:13, Melleus wrote:
> Simon Thelen <gentoo-u...@c-14.de> writes:
> > On 17-09-28 at 20:30, Melleus wrote:
> > [..]
> >> Might I ask another Xmonad question in this thread? I would like to have
> >> the Firefox goes fullscreen on F11, but the stanza:
> >> 
> >> isFullscreen --> doFullFloat
> >> 
> >> in my config does not work, Xmobar remains visible. But some applications 
> >> (like
> >> Zathura) can go fullscreen and hide Xmobar even without that stanza. Did
> >> I misconfigured something?
> > You probably want fullscreenEventHook from [1] as shown in the Usage.
> >
> > [1] 
> > https://hackage.haskell.org/package/xmonad-contrib-0.13/docs/XMonad-Hooks-EwmhDesktops.html
> I have tried. But it doesn't work for me. I might be missing something though.
> My config is attached:
I'm not sure why your config doesn't work, but this one seems to work
for me [1] (not my config, just found it with a quick google).
If that one works for you, I'd start with that and then edit it until
you have your settings back.

[1]: https://pastebin.com/raw/Ly4Fb90B

-- 
Simon Thelen



Re: [gentoo-user] Re: Strange Xmonad problem

2017-09-28 Thread Simon Thelen
On 17-09-28 at 20:30, Melleus wrote:
[..]
> Might I ask another Xmonad question in this thread? I would like to have
> the Firefox goes fullscreen on F11, but the stanza:
> 
> isFullscreen --> doFullFloat
> 
> in my config does not work, Xmobar remains visible. But some applications 
> (like
> Zathura) can go fullscreen and hide Xmobar even without that stanza. Did
> I misconfigured something?
You probably want fullscreenEventHook from [1] as shown in the Usage.

[1] 
https://hackage.haskell.org/package/xmonad-contrib-0.13/docs/XMonad-Hooks-EwmhDesktops.html

-- 
Simon Thelen



Re: [gentoo-user] Strange Xmonad problem

2017-09-27 Thread Simon Thelen
On 17-09-27 at 19:22, Melleus wrote:
> After last update my Xmonad starts from 8-th workspace instead of
> 1-st. I did not change anything but updated Xmonad and GHC, config
> remained the same (file attached). What have I done wrong other than I'd
> better not updated my system?
> 
> Thank you ahead of time.
> 
https://github.com/xmonad/xmonad/blob/master/CHANGES.md#014-not-yet-released

Probably the Bug Fix listed under 0.14 (Not Yet Released)
try deleting ~/.xmonad/xmonad.state before starting xmonad

-- 
Simon Thelen



Re: [gentoo-user] Change Readline mode for all users?

2017-09-19 Thread Simon Thelen
On 17-09-19 at 14:48, Stroller wrote:
> > On 19 Sep 2017, at 01:30, Simon Thelen <gentoo-u...@c-14.de> wrote:
> >> Is it possible to set this for all users, please, so that this edit
> >> mode is used for root?
> > Readline is customized by putting commands in an initialization file
> > (the inputrc file). The name of this file is taken from the value of the
> > INPUTRC environment variable.  If that variable is unset, the default is
> > ~/.inputrc. If that file  does not exist or cannot be read, the ultimate
> > default is /etc/inputrc.
> > 
> >> I find that my pager and editor are set in /etc/env.d/99pager and
> >> /etc/env.d/99editor respectively, but creating a
> >> /etc/env.d/99bashlineediting file containing "set -o vi" doesn't seem
> >> to work.
> > Either "set-editing-mode vi" in /etc/inputrc for all readline programs
> > or in /etc/bash/bashrc (for bash-only)
> I looked at /etc/inputrc, and its existing contents are of a different format.
> 
> Where all the other lines are of the form:
>   "\eOH": beginning-of-line
>   "\eOF": end-of-line
> it felt a bit wrong to be adding "set-editing-mode vi". Hence me asking here. 
> Is it foolish of me to think this?
That's just part of the inputrc, mine at least also has several settings
set at the top of the file. According to readline(3) the inputrc can
contain both key bindings and variable settings, the lines you pointed
out are the keybindings and what you wanted to add is a variable setting
(set editing-mode vi).

-- 
Simon Thelen



Re: [gentoo-user] Change Readline mode for all users?

2017-09-18 Thread Simon Thelen
On 17-09-19 at 01:11, Stroller wrote:
> I prefer vi-style editing for my bash prompt - that is to say I press
> the escape key, and "b" two or three times and the cursor moves back 2
> or 3 words. I can press "escape" followed by shift-I to take the
> cursor back to the very start of the line, and "v" allows me to edit
> the command line in vi itself.
> 
> I enable this in my .bashrc with "set -o vi".
> 
> I find I can set it for all Readline-based programs by putting "set
> editing-mode vi" in ~/.inputrc.
> 
> Is it possible to set this for all users, please, so that this edit
> mode is used for root?
Readline is customized by putting commands in an initialization file
(the inputrc file). The name of this file is taken from the value of the
INPUTRC environment variable.  If that variable is unset, the default is
~/.inputrc. If that file  does not exist or cannot be read, the ultimate
default is /etc/inputrc.

> I find that my pager and editor are set in /etc/env.d/99pager and
> /etc/env.d/99editor respectively, but creating a
> /etc/env.d/99bashlineediting file containing "set -o vi" doesn't seem
> to work.
Either "set-editing-mode vi" in /etc/inputrc for all readline programs
or in /etc/bash/bashrc (for bash-only)

-- 
Simon Thelen



Re: [gentoo-user] [offtopic] Copy-On-Write ?

2017-09-08 Thread Simon Thelen
On 17-09-07 at 17:46, Helmut Jarausch wrote:
> Hi,
Hello,

> sorry, this question is not Gentoo specific - but I know there are many  
> very knowledgeable people on this list.
> 
> I'd like to "hard-link" a file X to Y - i.e. there is no additional  
> space on disk for Y.
> 
> But, contrary to the "standard" hard-link (ln), file Y should be stored  
> in a different place (inode) IF it gets modified.
> With the standard hard-link, file X is the same as Y, so any changes to  
> Y are seen in X by definition.

> Is this possible
> - with an ext4 FS
> - or only with a different (which) FS
You can use GNU coreutil's `cp --reflink=always'.  This will, however,
only work on filesystems which support the operation (afaik so far only
btrfs). Though other CoW filesystems (such as ZFS) have similar
capabilities with snapshotting.

The only other possibility I know of would be creating an lvm partition
for that file and using lvm snapshots.

You should also be able to implement the functionality via fuse on top
of an ext4 base if the other solutions aren't to your taste.

-- 
Simon Thelen



Re: [gentoo-user] Read-only access to a git repo

2017-09-04 Thread Simon Thelen
On 17-09-04 at 17:05, Alan McKinnon wrote:
> Hi,
> 
> I fear I have a severe case of too many trees in the way to see the forest.
> 
> I have a git server, it only runs git.
> All the sysadmins have full access using ssh://, their keys are in git's
> authorized_keys, the repos are owned git:git, MODE 770, etc etc, and it
> works like it should.
> 
> I want an app to have read-only access to some repos, i.e. clone and
> pull only. But they are not publicly accessible i.e. the app user must
> be pre-authorized by me and have a public key. And for the life of me I
> can't think how to do it!
You want to use the command= option in the .ssh/authorized_keys file for
the key to ensure that only `git-upload-pack ' is run

> Google is only giving me results about what fancy buttons to click in
> GitHub and Gitlab... I know, my Google-fu sucks today.
You can look at [1] if you want a really minimal example of a git
permissions management system.

[1]: https://github.com/cbdevnet/fugit

-- 
Simon Thelen



Re: [gentoo-user] conf.d/net routes

2017-09-02 Thread Simon Thelen
On 17-09-02 at 11:54, Ian Zimmerman wrote:
> What is the exact syntax of the *_routes lines in the /etc/conf.d/net
> file, or where is it documented?
[..]
> "via" is not something I can use on the command line of the route
> command, at least according to its manpage.  So it can't be just
> straight repetition of the command line.  But then, what is it?
As far as I'm aware it's based on ip-route(8) syntax separated by newlines.

There's a complete documentation file for netifrc in
/usr/share/doc/netifrc-/net.example[.bz2]

You'll probably be most interested in the "INTERFACE HANDLERS" section
and potentially the "Advanced Routing" section.
 
> Motivation: I want to add a route for a point-to-point interface.
You probably only need to list the peer address on a single line and
then that peer should become routable.

-- 
Simon Thelen



Re: [gentoo-user] network interface names in gentoo

2017-06-11 Thread Simon Thelen
On 17-06-11 at 16:33, Ian Zimmerman wrote:
> Without tweaking anything in particular (as far as I remember), I get
> the "predictable" names.  For example, on the desktop box where I'm
> writing this, the main interface is enp3s0.
> 
> But, of course, there's no systemd on this box, and never has been.  So,
> reading [1], I am somewhat puzzled: that page sure makes it sound as if
> systemd was responsible for the new style names.  What is the mechanism
> by which they appear on gentoo, if not systemd?
Quoting from the sys-fs/eudev-3.2.2-r1 ebuild:
pkg_pretend() {
ewarn
ewarn "As of 2013-01-29, ${P} provides the new interface renaming 
functionality,"
ewarn "as described in the URL below:"
ewarn 
"https://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames;
ewarn
ewarn "This functionality is enabled BY DEFAULT because eudev has no 
means of synchronizing"
ewarn "between the default or user-modified choice of sys-fs/udev.  If 
you wish to disable"
ewarn "this new iface naming, please be sure that 
/etc/udev/rules.d/80-net-name-slot.rules"
ewarn "exists: touch /etc/udev/rules.d/80-net-name-slot.rules"
ewarn
}

and from sys-fs/udev-233:
elog
elog "Starting from version >= 197 the new predictable network 
interface names are"
elog "used by default, see:"
elog 
"https://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames;
elog 
"https://cgit.freedesktop.org/systemd/systemd/tree/src/udev/udev-builtin-net_id.c;
elog
elog "Example command to get the information for the new interface name 
before booting"
elog "(replace  with, for example, eth0):"
elog "# udevadm test-builtin net_id /sys/class/net/ 2> 
/dev/null"
elog
elog "You can use either kernel parameter \"net.ifnames=0\", create 
empty"
    elog "file /etc/systemd/network/99-default.link, or symlink it to 
/dev/null"
elog "to disable the feature."

Depending on which of those you have installed.

-- 
Simon Thelen



Re: [gentoo-user] Re: Sudden auto-unmount of an encfs-partition ... why?

2017-05-21 Thread Simon Thelen
On 17-05-21 at 08:41, Ian Zimmerman wrote:
> On 2017-05-21 09:51, Neil Bothwick wrote:
> > Why are you using encfs with the associated FUSE baggage when ecryptfs
> > is in the kernel and performs the same function?
> Is ecryptfs behind the scenes when I run /sbin/cryptsetup ?
No, ecryptfs is a stacked filesystem (filesystem layered on a filesystem)
that handles encryption on a file-by-file basis

> Cryptsetup is utility used to conveniently setup disk encryption based on 
> DMCrypt kernel module.
> These include plain dm-crypt volumes, LUKS volumes, loop-AES and TrueCrypt 
> (including VeraCrypt extension) format.
> Project also includes veritysetup utility used to conveniently setup DMVerity 
> block integrity checking kernel module.
> [1]
cryptsetup does encryption on the device layer on a block-by-block basis

You put ecryptfs on a filesystem, you put a filesystem on a dmcrypt
device.

[1]: https://gitlab.com/cryptsetup/cryptsetup/blob/master/README.md

-- 
Simon Thelen



Re: [gentoo-user] Re: Clang has gone walkabout

2017-04-10 Thread Simon Thelen
On 17-04-10 at 18:59, Nikos Chantziaras wrote:
> On 04/10/2017 03:58 PM, Simon Thelen wrote:
> > Try running `env-update && source /etc/profile'. Your path should be
> > extended by /etc/profile.env which is generated from /etc/env.d/10llvm-9995.
> 
> Just logout/login. "source" will help in the current shell.
logout/login won't work if you run some (or most) of your shells in
tmux/screen. Either restart those shells after the logout/login or
you'll need to source /etc/profile anyway.

-- 
Simon Thelen



Re: [gentoo-user] Clang has gone walkabout

2017-04-10 Thread Simon Thelen
On 17-04-10 at 20:48, Andrew Lowe wrote:
> On 10/04/17 18:57, J. Roeleveld wrote:
> > On April 10, 2017 12:41:54 PM GMT+02:00, Andrew Lowe <a...@wht.com.au> 
> > wrote:
> >> On 10/04/17 18:08, Neil Bothwick wrote:
> >>> On Mon, 10 Apr 2017 17:13:28 +0800, Andrew Lowe wrote:
> >>>
> >>>>  Do we have any clang users out there? I've had clang installed
> >>>> on my machine for ages and a simple "clang test.c" will result in an
> >>>> executable. I can even nearly build my whole machine using clang, so
> >>>> its up and running. I've now just updated clang, from a working
> >> 3.9.1
> >>>> to a 4.0.0-r1 and clang has now disappeared. If I type in "clang
> >>>> --version", I get "command not found". "whereis clang" only gives me
> >>>> the library dir. Doing "ls -la /usr/bin/cla*" gives me "No such file
> >> or
> >>>> directory"
> >>>
> >>> Try "qlist clang" so see what is installed, "qlist clang | grep bin/"
> >>> should find the executables.
> >>>
> >>> qlist is part of portage-utils, which you probably already have.
> >>>
> >>>
> >>
> >>Done as requested. There are 41 files found with clang in their name
> >> and they are all on the dir:
> >>
> >>/usr/lib/llvm/4/bin/
> >>
> >>I'm no whiz bang sys-admin but that doesn't seem right to me. There is
> >>
> >> clang and clang++ and a whole lot of stuff sym linked to provide all
> >> the
> >> various permutations and combinations of names in there. But there is
> >> nothing in my path that points to that dir. I'll have to have a look at
> >>
> >> the ebuild to see if a symlink or something is not being applied.
> >>
> >>Any other thoughts appreciated,
> >>
> >>Andrew
> >
> > Try those and see if they respond correctly.
> > If yes, add that dir to your PATH.
> >
> > --
> > Joost
> >
> 
>   They work as expected and I can add the dir to the path with no 
> problems, I'm more concerned about why I have add the path - is the 
> ebuild screwed up in some way?
> 
>   What is the portage/ebuild doco like? Is it well documented or are 
> there gaping holes that lead to frustration - my level of understanding 
> of coding is 25 years of C/C++ coding on CAD systems & engineering 
> applications and even though I run a Gentoo box as my default machine, 
> I've never had the need to get into bash scripting - but might.
> 
>   Andrew
> 

Try running `env-update && source /etc/profile'. Your path should be
extended by /etc/profile.env which is generated from /etc/env.d/10llvm-9995.

-- 
Simon Thelen



Re: [gentoo-user] Has someone managed to compile nvidia-drivers against a 4.10.*-Linux-kernel?

2017-03-18 Thread Simon Thelen
On 17-03-18 at 13:13, tu...@posteo.de wrote:
> Hi,
> 
> if someone has managed to compile the nividia-drivers
> against one of the linux-4.10.* kernels I would
> be glad fpr the information what version are compatible
> with each other... :)
Running gentoo-sources-4.10.2 with nvidia-drivers-378.13 and having no
problems.

-- 
Simon Thelen



Re: [gentoo-user] Metalog & runscript

2016-12-03 Thread Simon Thelen
On 16-12-04 at 14:18, Andrew Lowe wrote:
> Hi all,
>   I'm still getting the warning during boot about metalog using runscript 
> during the boot process. I decided to track things down and see what was 
> going on. My first stop was bugs.gentoo.org where there is this one:
> 
> https://bugs.gentoo.org/show_bug.cgi?id=581926
> 
>   Upon reading this, I would have thought that the ebuild had been 
> updated with the supplied patch by the developers. I looked at the 
> ebuild on my machine and it still is the "older" one. 
> Packages.gentoo.org has the same ebuild as me.
> 
>   Has something just fallen through the cracks and things should have 
> been "officially" updated or do I need to apply this patch myself?
The patch was applied to the initscript, but the ebuild was not
revbumped. You'll have to reinstall the package to get the new
initscript. You can rebuild all packages that use /sbin/runscript with:
`emerge --oneshot -av $(grep -l '/sbin/runscript' /etc/init.d/*)'
This was mentioned in a newsitem draft on gentoo-dev, but as far as I
can tell that newsitem was never published.

-- 
Simon Thelen



Re: [gentoo-user] HTML5 player (YouTube) is a pain!...Alternatives?

2016-11-29 Thread Simon Thelen
On 16-11-29 at 08:35, meino.cra...@gmx.de wrote:
> Alarig Le Lay <ala...@swordarmor.fr> [16-11-29 08:16]:
> > On Tue Nov 29 07:42:16 2016, meino.cra...@gmx.de wrote:
> > > Is there any way to feed the stream from youtube direktly into
> > > a not blown player like mpv/mplayer or such (I would prefer
> > > not to load a complete gui (vlc) with any click again and again.)?
> > Yes, you can play video from youtube with mpv if you have emerged
> > net-misc/youtube-dl.
> yes...I know...but this implies (as far as I know):
> Copying the url from FF as argument to youtube-dl,
> downloading the file, and than watching it.
> This was my (painful) workaround the last days.
It doesn't. As long as you have mpv built with +lua it ships with the
youtube-dl hook which will run youtube-dl (if installed) on any url
passed to mpv, parse the json output and then play the "real" video url.

> I woyld like something like:
> Click on youtube-url, a window (console) pops up 
> and starts  to watch the video
> directly.
> 
> Is it possible somehow?
There's probably around a bazillion addons for that. A quick search
found [1] [2] [3] [4]. Though binding an alias to `mpv $(xsel -b)' and
then executing that after copying a url shouldn't be that hard.

[1] https://addons.mozilla.org/en-US/firefox/addon/watch-with-mpv
[2] https://addons.mozilla.org/en-US/firefox/addon/external-video
[3] https://addons.mozilla.org/en-US/firefox/addon/video-assistant
[4] https://github.com/agiz/youtube-mpv

-- 
Simon Thelen



Re: [gentoo-user] Wastebin or trash?

2016-09-07 Thread Simon Thelen
On 16-09-07 at 18:41, Mick wrote:
> On Thursday 08 Sep 2016 00:47:13 Andrew Lowe wrote:
> > On 07/09/16 23:45, Peter Humphrey wrote:
> > > Hello list,
> > > 
> > > As I said in the "emerge @system" thread, I've built a fresh ~amd64 system
> > > on this i7 box. I also created a new user directory for myself, copying in
> > > only .bash*, .gkrellm2 and .mozilla.
> > > 
> > > After spending a good long time setting up KDE and friends just the way I
> > > like them, the one remaining task was to set up KMail and import my
> > > 1000-or- so messages. That worked all right, with just the one same
> > > exception as before: KMail's recycle bin is call "trash" in the folder
> > > list, but the right-click menu on it offers to "empty wastebin".
> > > 
> > > I'm sure I have all my linguas, l10ns i18ns and everything set up right,
> > > so
> > > I think I'm just seeing an intermediate stage in KMail development.
> > > 
> > > Is anyone else seeing this?
> > 
> > I'm reading this whilst sitting in Perth, Australia so both should read
> > "Rubbish Bin" or possibly "Wheelie Bin"  ;)
> One IMAP4 account of mine shows 'Bin' and another shows 'Trash'.  As I 
> understand it you need to configure the locale on the mail server.
IMAP itself does not have a concept of "Trash", the creation of such a
mailbox is the prerogative of the client (unless the server itself feels
that the imap client doesn't know what it's doing and moves deleted
emails into a different mailbox; not that I've ever seen a mail server
do that), therefore changing the locale on the mail server won't help
and it is indeed something on the client that needs to be changed.

-- 
Simon Thelen



Re: [gentoo-user] And thus the emerge spake...

2016-04-16 Thread Simon Thelen
On 16-04-17 at 05:45, meino.cra...@gmx.de wrote:
[..]
> WARNING: One or more updates/rebuilds have been skipped due to a dependency 
> conflict:
> 
> dev-util/boost-build:0
> 
>   (dev-util/boost-build-1.60.0:0/0::gentoo, ebuild scheduled for merge) 
> conflicts with
> =dev-util/boost-build-1.58* required by 
> (dev-libs/boost-1.58.0-r1:0/1.58.0::gentoo, installed)
> ^ ^
> 
> 
> !!! The following update has been skipped due to unsatisfied dependencies:
> 
> dev-libs/boost:0
> 
> !!! All ebuilds that could satisfy "=dev-util/boost-build-1.60*" have been 
> masked.
> !!! One of the following masked packages is required to complete your request:
> - dev-util/boost-build-1.60.0::gentoo (masked by: )
The problem is that emerge thinks boost is masked for whatever reason
 
> For me it looks like boost not beeing updated/reinstalled because of
> another version of boost, which depends on boost.
I had a similar issue on one of my computers. Running `emerge -1
=dev-util/boost-build-1.60.0 =dev-libs/boost-1.60.0' fixed it.

Only happened on one of my computers and increasing backtracking didn't
help so I'm not sure exactly why it didn't want to update, but
explicitly telling emerge to install it seemed to help for me.

-- 
Simon Thelen



Re: [gentoo-user] Make QEMU guest visible to other machines on LAN

2015-12-19 Thread Simon Thelen
On 15-12-19 at 14:21, waltd...@waltdnes.org wrote:
>   Apologies if this is a duplicate/triplicate.  I don't think the first
> attempts got through.  Going through my backup provider (dialup) this
> time.
[..]
>   For various reasons, I need another physical machine on my small home
> LAN to be able to talk directly to the 32-bit guest.  I've read the
> "Network setup" at http://www.linux-kvm.org/page/KvmOnGentooIs the
> /etc/conf.d/net being reffered to, the one on the host or on the guest?
> The webpage doesn't say explicitly.
host
> 
>   I also don't understand how other machines will be able to
> differentiate between the host and the guest.
The idea is to create a bridge device, and then bridge the guests
tun/tap device with the bridge and your ethernet device. This way they
all appear transparently on the network.

The net config on that website should be fine for the host, and then
pass these command options to qemu
-device virtio-net-pci,netdev=hn0,mac="52:54:00:12:34:56" -netdev 
bridge,id=hn0,br=brkvm

You can change the mac address to your liking.

-- 
Simon Thelen



Re: [gentoo-user] blocking facebook

2015-12-11 Thread Simon Thelen
On 15-12-12 at 05:05, Simon Thelen wrote:
> On 15-12-11 at 20:03, the...@sys-concept.com wrote:
> > Does anybody have an idea how to block facebook?
> The only way to blacklist facebook would be to create a whitelist and
> drop everything not on said whitelist.
Oh, and even that's not easy.

Finding and creating a whitelist that ensures necessary stuff gets done
without allowing people to bypass blocks is almost impossible. Getting
around these sorts of blocks isn't a matter of theoretical possibility,
it's a matter of someone putting in enough time and effort into
bypassing it. If you don't have complete control over all devices all
the time, you might as well just give up.

-- 
Simon Thelen



Re: [gentoo-user] blocking facebook

2015-12-11 Thread Simon Thelen
On 15-12-11 at 20:03, the...@sys-concept.com wrote:
> Does anybody have an idea how to block facebook?
The only way to blacklist facebook would be to create a whitelist and
drop everything not on said whitelist.

If you block DNS, they can use a different DNS server. If you block IP
addresses they'll use a proxy/vpn. If you use deep packet inspection
they'll use TLS or a VPN or an SSH tunnel.

If you can control the systems so that they don't do any of the above,
it's possible but you've admitted that you can't (unless you can
control all the Virtualbox instances).
 
-- 
Simon Thelen



Re: [gentoo-user] Re: All sorts of digest verification failures

2015-11-15 Thread Simon Thelen
On 15-11-15 at 15:29, cov...@ccs.covici.com wrote:
> Dale <rdalek1...@gmail.com> wrote:
> > Martin Vaeth wrote:
> > > Neil Bothwick <n...@digimed.co.uk> wrote:
[..]
> > > As a temporary hack, calling "ebuild manifest" on that file is
> > > probably the only reasonable way to proceed, but this problem
> > > must be fixed, of course...
> > Wasn't there a emerge option to ignore the manifest?  I seem to recall
> > there used to be one but it was a LONG time ago.  Of course, if someone
> > has tinkered with something that would be a bad thing to do. 
> I thought I remembered something where the manifest no longer checks the
> ebuild, just the file in distfiles -- I thought I remembered seeing this
> somewhere.  It was at a time when we got all the manifests all at once.
I sync from git and none of my Manifests track the ebuilds, so this
could be a thing. Note how the Manifest for busybox in the gentoo.git
tree doesn't have manifests for any of the ebuilds. [1]

[1]: https://gitweb.gentoo.org/repo/gentoo.git/tree/sys-apps/busybox/Manifest

-- 
Simon Thelen



Re: [gentoo-user] How to avoid perl harbor (pun intended)

2015-07-13 Thread Simon Thelen
On 15-07-13 at 05:19, walt wrote:
 Today's update started as a disaster:  perl wants to upgrade from
 5.20.2 to 5.22.0, but all of my existing perl modules insist on having
 5.20.2 so the perl update blocks and then emerge stopped with an error
 and left the whole mess for me to solve. (To me this appears to be a
 bug in the perl family of ebuilds.)
 
 Here is my painless workaround for this mess:
 
 #ebuild /usr/portage/dev-lang/perl/perl-5.22.0.ebuild merge
 
 That trick cleared the blocker and allowed the rest of today's update
 to proceed.  (Lots of individual perl modules have updates also, which
 may be part of this problem, but I don't know.)
It worked for me after I added --backtrack=30

-- 
Simon Thelen



Re: [gentoo-user] Google Chrome and audio capture

2015-06-23 Thread Simon Thelen
On 15-06-23 at 03:06, Dale wrote:
 Howdy,
 
 Is this for real?  I question the source and figure with all the Linux
 geeks we have here, someone here would know about this story and if it
 is real or not.
 
 http://beforeitsnews.com/alternative/2015/06/got-chrome-google-just-silently-downloaded-this-onto-your-computer-3173880.html
  
 
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=786909
https://security-tracker.debian.org/tracker/TEMP-0786909-A21526
https://code.google.com/p/chromium/issues/detail?id=491435

Take from that what you will. Note, the issues are for chromium and not
for Google Chrome, shouldn't make a difference for what you want to know
though.

-- 
Simon Thelen



Re: [gentoo-user] Reconstruct package.use

2015-03-14 Thread Simon Thelen
On 15-03-15 at 00:12, Alan McKinnon wrote:
 It took 10 years but I've finally done something monumentally stupid in
 Gentoo:
 
 I delete package.use and have no backup
 
 Is there any easy way to recover what was in it? I'm busy doing it the
 long way round - repeatedly running emerge world, get past the blocking
 USE, then see all the flags that portage thinks changed.
 
 I wonder if there might be an easier way that I don't know of.
Have you tried:
emerge -pDU --with-bdeps=y @world

That should list all packages where the installed use-flags differ from
the current use-flags.

-- 
Simon Thelen


signature.asc
Description: PGP signature


Re: [gentoo-user] How to automate an sshfs (fusermount) mounted share

2015-01-03 Thread Simon Thelen
On 15-01-03 at 18:42, Andrew Savchenko wrote:
 Hi,
 
 On Sat, 03 Jan 2015 09:23:29 -0500 Harry Putnam wrote:
  I'm sshfs mounting an solaris zfs file system in the interactive
  fashion.
  
  sshfs $USR@HOST:/file/system MOUNTPOINT
   passwd?
   enter passwd RETURN
   
  Once mounted I run an rsnapshot backup onto the mounted FS.
  
  Any ideas on how to go about doing this mount automatically (scripted)
  will be greatly appreciated.
 
 1) Set up your ssh to use keys. Key itself should not be protected
 by password (or manual intervention will be needed on each mount).
 
 2) Add sshfs command to your .bash_profile (or whatever login shell
 you're using) with check that filesystem is not mounted already,
 something like:
   grep -q $MOUNTPOINT || sshfs $USR@HOST:/file/system MOUNTPOINT
 
 Alternatively you may add this to your DE/WM autostart scripts, if
 you are using GUI logins only.
Or just add it to /etc/fstab:
user@host:/mountpoint /where/to/mount fuse.sshfs 
rw,exec,async,_netdev,auto,user,idmap=user,transform_symlinks,identityfile=/path/to/ssh/key,allow_other,default_permissions,uid=1000,gid=100
 0 0

Check the manpages for which of those options you want.
ie, you might want to get rid of allow_other etc.


-- 
Simon Thelen



Re: [gentoo-user] Zsh completion

2014-07-04 Thread Simon Thelen
On 04/07/14 at 22:24, Matti Nykyri wrote:
  On Jul 4, 2014, at 13:55, Nikita Tropin posixivis...@gmail.com wrote:
  Question is old enough but... Try to click Ctrl-/ to undo.
 Ok. Thanks. I'll try that. But still if I could disable that particular 
 feature that would be the best option!
man zshcompsys
Look at the path-completion and accept-exact-dirs styles.
You can try setting accep-exact-dirs to true or path-completion to
false.

-- 
Simon Thelen
Ya'll hear about the geometer who went to the beach to catch some
rays and became a tangent ?