Re: trouble with debian mirrors

2020-11-06 Thread Andrew Pam via luv-main
On 7/11/20 5:22 pm, Craig Sanders via luv-main wrote:
> Note that at some point in the far distant future when the promised day
> arrives and ipv6 is used everywhere (or maybe earlier if your ISP starts
> supporting it), you'll have to undo this.  This has been "imminent" for years
> now and is likely to remain imminent for the forseeable future.  IMO, this
> is not likely to happen until spyware corporations like LG and Samsung and
> thousands of other IoT companies lobby/demand/bribe ISPs to get off their
> arses and implement ipv6 so that it's easier for them to access their smart
> tvs, fridges, toasters etc without annoying things like NAT getting in the
> way.

I've had full IPv6 on my home Internet connection including public
static addresses for uh... 15 years now?  Thanks Internode.  I'm also
working on migrating everything off the last of my servers that still
doesn't have IPv6, so everything should finally be dual-stack this year.

Cheers,
Andrew
-- 
mailto:and...@sericyb.com.au  Andrew Pam
https://sericyb.com.au/   Manager, Serious Cybernetics
https://glasswings.com.au/Partner, Glass Wings
___
luv-main mailing list
luv-main@luv.asn.au
https://lists.luv.asn.au/cgi-bin/mailman/listinfo/luv-main


Re: trouble with debian mirrors

2020-11-06 Thread Ben Nisenbaum via luv-main
Hello Craig and all,

That's a super post of yours for me and my issues. I believe I can work through 
all of them with the information you've provided. I am very grateful.

The "Pollock" hosts file which I mentioned is a hosts file from:

http://someonewhocares.org/hosts/

which is basically a listing of sites that one may not want to mess with your 
computer.

Dan Pollock's words about his hosts file:

# Use this file to prevent your computer from connecting to selected
# internet hosts. This is an easy and effective way to protect you from 
# many types of spyware, reduces bandwidth use, blocks certain pop-up 
# traps, prevents user tracking by way of "web bugs" embedded in spam,
# provides partial protection to IE from certain web-based exploits and
# blocks most advertising you would otherwise be subjected to on the 
# internet.

Thanks again.

ben
  

On Sat, Nov 7, 2020, at 5:22 PM, Craig Sanders via luv-main wrote:
> On Sat, Nov 07, 2020 at 03:58:51PM +1100, b...@fastmail.fm wrote:
> > [root@owl /etc/apt]# apt-get install inxi
> > Reading package lists... Done
> > Building dependency tree
> > Reading state information... Done
> > The following additional packages will be installed:
> >   hddtemp libglew2.1 lm-sensors mesa-utils tree
> > Suggested packages:
> >   libcpanel-json-xs-perl | libjson-xs-perl libxml-dumper-perl glew-utils 
> > fancontrol read-edid i2c-tools
> > The following NEW packages will be installed:
> >   hddtemp inxi libglew2.1 lm-sensors mesa-utils tree
> > 0 upgraded, 6 newly installed, 0 to remove and 0 not upgraded.
> > Need to get 731 kB of archives.
> > After this operation, 2,625 kB of additional disk space will be used.
> > Do you want to continue? [Y/n] y
> > Err:1 http://ftp.au.debian.org/debian bullseye/main amd64 hddtemp amd64 
> > 0.3-beta15-53
> >   Connection failed [IP: 2001:388:1034:2900::25 80]
>^^
> 
> OK, that's clearly using the IPv6 address for ftp.au.debian.org
> 
> Does your ISP support IPv6?  If not, then force apt to use ipv4 as i mentioned
> in my last message.
> 
> 
> 
> BTW, if you don't know how to recognise an ipv4 or ipv6 address, it's 
> pretty easy.
> 
> ipv4 address are short, usually printed in decimal, with **exactly** four
> groups of 8-bit decimal numbers (i.e. 0 to 255), separated by periods ".".
> e.g. 192.168.1.1. sometimes with an optional netmask suffix like /24 or /32.
> 
> ipv6 addresses are longer, usually printed in multiple groups of
> four hexadecimal digits (i.e. 16 bits worth), separated by colons.
> e.g. 2001:388:1034:2900::25
> 
> see:
> 
> https://en.wikipedia.org/wiki/IPv4#Addressing
> https://en.wikipedia.org/wiki/IPv6_address
> 
> While it's useful to know the basics of IP networking, you don't actually
> need to understand all the details.  For practical purposes, you really only
> need to know if your ISP support ipv6 routing or not.  If not, then disable
> it (at least on your uplink interface).  Most ISPs still do not support
> ipv6. This is because they're slack-arse lazy bastards who find the shortage
> of ipv4 addrress space convenient for limiting what their customers do on the
> internet.
> 
> 
> 
> > Using host au debian is not found:
> >
> > [ben@owl ~]$ host ftp.au.debian.org/
> > Host ftp.au.debian.org/ not found: 3(NXDOMAIN)
> 
> that's not a domain name. that's just a string ending in /
> 
> host doesn't know what to do with a string ending in a /
> 
> > [ben@owl ~]$ host http://ftp.au.debian.org
> > Host http://ftp.au.debian.org not found: 3(NXDOMAIN)
> 
> that's not a domain name either.  That's a URL.
> 
> host doesn't know what to do with a URL either.
> 
> > The nz debian is found.
> > [ben@owl ~]$ host ftp.nz.debian.org
> 
> that's a domain name. host knows what to do with one of those. which is why it
> worked:
> 
> > ftp.nz.debian.org is an alias for mirror.fsmg.org.nz.
> > mirror.fsmg.org.nz has address 163.7.134.112
> > mirror.fsmg.org.nz has IPv6 address 2404:138:4000::
> 
> 
> > When I changed sources.list to ftp.nz.debian.org, and tried installing 
> > inxi, the error was:
> >
> > [root@owl /etc/apt]# apt-get install inxi
> > Reading package lists... Done
> > Building dependency tree
> > Reading state information... Done
> > E: Unable to locate package inxi
> 
> that's because you didn't update the packages lists after changing the repo.
> 
> when you change sources.list, you have to run "apt-get update" (or "apt
> update", etc)
> 
> 
> > Testing with the Force config. I used the cowsay program as the test:
> > [...it worked...]
> 
> not surprising.  the problem was, as I suspected, that your machine was
> using the mirror's IPv6 IP address rather than IPv4.
> 
> > I purged cowsay and then tried the nz mirror but it failed:
> >
> > [root@owl /home/ben/Downloads]# apt-get -o Acquire::ForceIPv4=true install 
> > cowsay
> > Reading package lists... Done
> > Building dependency tree
> > Reading state information... Done
> > E: Unable to locate package 

Re: trouble with debian mirrors

2020-11-06 Thread Craig Sanders via luv-main
On Sat, Nov 07, 2020 at 03:58:51PM +1100, b...@fastmail.fm wrote:
> [root@owl /etc/apt]# apt-get install inxi
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> The following additional packages will be installed:
>   hddtemp libglew2.1 lm-sensors mesa-utils tree
> Suggested packages:
>   libcpanel-json-xs-perl | libjson-xs-perl libxml-dumper-perl glew-utils 
> fancontrol read-edid i2c-tools
> The following NEW packages will be installed:
>   hddtemp inxi libglew2.1 lm-sensors mesa-utils tree
> 0 upgraded, 6 newly installed, 0 to remove and 0 not upgraded.
> Need to get 731 kB of archives.
> After this operation, 2,625 kB of additional disk space will be used.
> Do you want to continue? [Y/n] y
> Err:1 http://ftp.au.debian.org/debian bullseye/main amd64 hddtemp amd64 
> 0.3-beta15-53
>   Connection failed [IP: 2001:388:1034:2900::25 80]
   ^^

OK, that's clearly using the IPv6 address for ftp.au.debian.org

Does your ISP support IPv6?  If not, then force apt to use ipv4 as i mentioned
in my last message.



BTW, if you don't know how to recognise an ipv4 or ipv6 address, it's pretty 
easy.

ipv4 address are short, usually printed in decimal, with **exactly** four
groups of 8-bit decimal numbers (i.e. 0 to 255), separated by periods ".".
e.g. 192.168.1.1. sometimes with an optional netmask suffix like /24 or /32.

ipv6 addresses are longer, usually printed in multiple groups of
four hexadecimal digits (i.e. 16 bits worth), separated by colons.
e.g. 2001:388:1034:2900::25

see:

https://en.wikipedia.org/wiki/IPv4#Addressing
https://en.wikipedia.org/wiki/IPv6_address

While it's useful to know the basics of IP networking, you don't actually
need to understand all the details.  For practical purposes, you really only
need to know if your ISP support ipv6 routing or not.  If not, then disable
it (at least on your uplink interface).  Most ISPs still do not support
ipv6. This is because they're slack-arse lazy bastards who find the shortage
of ipv4 addrress space convenient for limiting what their customers do on the
internet.



> Using host au debian is not found:
>
> [ben@owl ~]$ host ftp.au.debian.org/
> Host ftp.au.debian.org/ not found: 3(NXDOMAIN)

that's not a domain name. that's just a string ending in /

host doesn't know what to do with a string ending in a /

> [ben@owl ~]$ host http://ftp.au.debian.org
> Host http://ftp.au.debian.org not found: 3(NXDOMAIN)

that's not a domain name either.  That's a URL.

host doesn't know what to do with a URL either.

> The nz debian is found.
> [ben@owl ~]$ host ftp.nz.debian.org

that's a domain name. host knows what to do with one of those. which is why it
worked:

> ftp.nz.debian.org is an alias for mirror.fsmg.org.nz.
> mirror.fsmg.org.nz has address 163.7.134.112
> mirror.fsmg.org.nz has IPv6 address 2404:138:4000::


> When I changed sources.list to ftp.nz.debian.org, and tried installing inxi, 
> the error was:
>
> [root@owl /etc/apt]# apt-get install inxi
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> E: Unable to locate package inxi

that's because you didn't update the packages lists after changing the repo.

when you change sources.list, you have to run "apt-get update" (or "apt
update", etc)


> Testing with the Force config. I used the cowsay program as the test:
> [...it worked...]

not surprising.  the problem was, as I suspected, that your machine was
using the mirror's IPv6 IP address rather than IPv4.

> I purged cowsay and then tried the nz mirror but it failed:
>
> [root@owl /home/ben/Downloads]# apt-get -o Acquire::ForceIPv4=true install 
> cowsay
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> E: Unable to locate package cowsay

again, this is because you didn't run "apt-get update" after changing 
sources.list

> Whilst going through the process that was suggested and running
> the commands above, I returned to Firefox, and it now brings up
> http://ftp.au.debian.org/. The only extra thing that I have done which is
> not described above is to return the /etc/hosts file that I use to its
> original from the Pollock hosts file.
>
> ---start /etc/hosts---
> 127.0.0.1   localhost
> 127.0.1.1   owl
>
> # The following lines are desirable for IPv6 capable hosts
> ::1 localhost ip6-localhost ip6-loopback
> ff02::1 ip6-allnodes
> ff02::2 ip6-allrouters
> ---end /etc/hosts-


that hosts file looks OK.  And isn't relevant here because it doesn't have 
entries for either
ftp.au.debian.org or ftp.nz.debian.org.

Dunno why you're calling it a "Pollock" hosts file.

> I have now written the /etc/apt//apt.conf.d/zzz-ipv4.conf with the ipv4
> Force config as suggested.
>
> The nz mirror still fails. I would really like to be able to change mirrors
> if I need to in the future.

Just remember to run 'apt-get update' whenever you change 

Re: trouble with debian mirrors

2020-11-06 Thread Ben Nisenbaum via luv-main
Hello Craig and all,

Thanks Craig for your suggestions and help.

Sorry about the length of this post. I've supplied the command outputs which 
are a bit long in some cases.

Here is the full output of the error. I did abbreviate earlier because it's 
long. I was after inxi which has tree
as a dependency.
start error message--
[root@owl /etc/apt]# apt-get install inxi
Reading package lists... Done
Building dependency tree   
Reading state information... Done
The following additional packages will be installed:
  hddtemp libglew2.1 lm-sensors mesa-utils tree
Suggested packages:
  libcpanel-json-xs-perl | libjson-xs-perl libxml-dumper-perl glew-utils 
fancontrol read-edid i2c-tools
The following NEW packages will be installed:
  hddtemp inxi libglew2.1 lm-sensors mesa-utils tree
0 upgraded, 6 newly installed, 0 to remove and 0 not upgraded.
Need to get 731 kB of archives.
After this operation, 2,625 kB of additional disk space will be used.
Do you want to continue? [Y/n] y
Err:1 http://ftp.au.debian.org/debian bullseye/main amd64 hddtemp amd64 
0.3-beta15-53
  Connection failed [IP: 2001:388:1034:2900::25 80]
Err:2 http://ftp.au.debian.org/debian bullseye/main amd64 inxi all 3.1.08-1-1
  Could not connect to ftp.au.debian.org:80 (150.203.164.37), connection timed 
out Could not connect to ftp.au.debian.org:80 (2001:388:1034:2900::25), 
connection timed out [IP: 2001:388:1034:2900::25 80]
Err:3 http://ftp.au.debian.org/debian bullseye/main amd64 libglew2.1 amd64 
2.1.0-4+b1
  Unable to connect to ftp.au.debian.org:http: [IP: 2001:388:1034:2900::25 80]
Err:4 http://ftp.au.debian.org/debian bullseye/main amd64 lm-sensors amd64 
1:3.6.0-2
  Unable to connect to ftp.au.debian.org:http: [IP: 2001:388:1034:2900::25 80]
Err:5 http://ftp.au.debian.org/debian bullseye/main amd64 mesa-utils amd64 
8.4.0-1+b1
  Unable to connect to ftp.au.debian.org:http: [IP: 2001:388:1034:2900::25 80]
Err:6 http://ftp.au.debian.org/debian bullseye/main amd64 tree amd64 1.8.0-1+b1
  Unable to connect to ftp.au.debian.org:http: [IP: 2001:388:1034:2900::25 80]
E: Failed to fetch 
http://ftp.au.debian.org/debian/pool/main/h/hddtemp/hddtemp_0.3-beta15-53_amd64.deb
  Connection failed [IP: 2001:388:1034:2900::25 80]
E: Failed to fetch 
http://ftp.au.debian.org/debian/pool/main/i/inxi/inxi_3.1.08-1-1_all.deb  Could 
not connect to ftp.au.debian.org:80 (150.203.164.37), connection timed out 
Could not connect to ftp.au.debian.org:80 (2001:388:1034:2900::25), connection 
timed out [IP: 2001:388:1034:2900::25 80]
E: Failed to fetch 
http://ftp.au.debian.org/debian/pool/main/g/glew/libglew2.1_2.1.0-4+b1_amd64.deb
  Unable to connect to ftp.au.debian.org:http: [IP: 2001:388:1034:2900::25 80]
E: Failed to fetch 
http://ftp.au.debian.org/debian/pool/main/l/lm-sensors/lm-sensors_3.6.0-2_amd64.deb
  Unable to connect to ftp.au.debian.org:http: [IP: 2001:388:1034:2900::25 80]
E: Failed to fetch 
http://ftp.au.debian.org/debian/pool/main/m/mesa-demos/mesa-utils_8.4.0-1+b1_amd64.deb
  Unable to connect to ftp.au.debian.org:http: [IP: 2001:388:1034:2900::25 80]
E: Failed to fetch 
http://ftp.au.debian.org/debian/pool/main/t/tree/tree_1.8.0-1+b1_amd64.deb  
Unable to connect to ftp.au.debian.org:http: [IP: 2001:388:1034:2900::25 80]
E: Unable to fetch some archives, maybe run apt-get update or try with 
--fix-missing?
--end error message---

Firefox does not connect to http://ftp.au.debian.org/ . It just leaves the 
screen blank with a moving dot on the tab at the top of the page.

Firefox does connect to http://ftp.nz.debian.org/.

Using host au debian is not found:

[ben@owl ~]$ host ftp.au.debian.org/
Host ftp.au.debian.org/ not found: 3(NXDOMAIN)
[ben@owl ~]$ host http://ftp.au.debian.org
Host http://ftp.au.debian.org not found: 3(NXDOMAIN)

The nz debian is found.
[ben@owl ~]$ host ftp.nz.debian.org

ftp.nz.debian.org is an alias for mirror.fsmg.org.nz.
mirror.fsmg.org.nz has address 163.7.134.112
mirror.fsmg.org.nz has IPv6 address 2404:138:4000::


When I changed sources.list to ftp.nz.debian.org, and tried installing inxi, 
the error was:

[root@owl /etc/apt]# apt-get install inxi
Reading package lists... Done
Building dependency tree   
Reading state information... Done
E: Unable to locate package inxi

My /etc/network/interfaces:

# The loopback network interface
auto lo
iface lo inet loopback
#ben amend
allow-hotplug enp3s0
iface enp3s0 inet dhcp
iface enp3s0 inet6 auto

Testing with the Force config. I used the cowsay program as the test:

[root@owl Downloads]# apt-get -o Acquire::ForceIPv4=true update
Hit:1 http://ftp.au.debian.org/debian bullseye InRelease
Hit:2 http://security.debian.org/debian-security bullseye-security InRelease
Reading package lists... Done

[root@owl Downloads]# apt-get -o Acquire::ForceIPv4=true install cowsay
Reading package lists... Done
Building dependency tree   
Reading state information... Done
Suggested packages:
  filters 

Re: trouble with debian mirrors

2020-11-06 Thread Craig Sanders via luv-main
On Sat, Nov 07, 2020 at 12:01:54PM +1100, b...@fastmail.fm wrote:
> In my /etc/apt/sources.list I have been using the following mirror:
> deb http://ftp.au.debian.org/debian/ bullseye main non-free contrib
>
> The last few days it's returning error messages such as the following:
>
> E: Failed to fetch 
> http://ftp.au.debian.org/debian/pool/main/t/tree/tree_1.8.0-1+b1_amd64.deb  
> Unable to connect to ftp.au.debian.org:http:
> E: Unable to fetch some archives, maybe run apt-get update or try with 
> --fix-missing?
>
> Running the suggested apt-get update also fails, and with -f does too of 
> course.

Can you show the full output of "apt-get update"?  or "apt install tree"?
Without details, the best anyone can do is guessso here's some diagnostic
tests for you to try and a guess:


Can you connect to either http://ftp.au.debian.org/ or
http://ftp.nz.debian.org/ with a web browser?  I had no problems connecting to
either site with firefox, with both sites being very fast and responsive.

what happens if you try to traceroute to either site?



I'm suspecting there's something weird going on with your DNS resolution - or
perhaps your system is configured to use IPv6 in preference to IP4v addresses
or something (both sites have both IPv4 A records and IPv6  records).

$ host ftp.au.debian.org
ftp.au.debian.org is an alias for mirror.linux.org.au.
mirror.linux.org.au has address 150.203.164.37
mirror.linux.org.au has IPv6 address 2001:388:1034:2900::25

$ host ftp.nz.debian.org
ftp.nz.debian.org is an alias for mirror.fsmg.org.nz.
mirror.fsmg.org.nz has address 163.7.134.112
mirror.fsmg.org.nz has IPv6 address 2404:138:4000::

You can test this with:

apt-get -o Acquire::ForceIPv4=true update
apt-get -o Acquire::ForceIPv4=true install tree

If they work, make it permanent by adding the following to /etc/apt/apt.conf
(or to a file in the directory /etc/apt/conf.d/, give it a name like
zzz-ipv4.conf to make sure the filename comes last in the sort order)

Acquire::ForceIPv4 "true";

and make sure there isn't any line with 'Acquire::ForceIPv6 "true";' in
/etc/apt/apt.conf or any files in /etc/apt/apt.conf.d/

grep -ir ForceIPv6 /etc/apt/apt.conf /etc/apt/apt.conf.d/


> I'm writing to ask if the problem I'm having is common and there's a problem
> like congestion with the au mirror,

Nope, not common.  It's almost certainly some weird problem on your end,
either a misconfiguration or something weird your ISP is doing.

> and also how to change mirrors in the sources.list so that I can install and
> update.

the way you changed it should work.

for more details on the sources.list file format, run "man sources.list".

craig

--
craig sanders 
___
luv-main mailing list
luv-main@luv.asn.au
https://lists.luv.asn.au/cgi-bin/mailman/listinfo/luv-main


trouble with debian mirrors

2020-11-06 Thread Ben Nisenbaum via luv-main
Hello all,

In my /etc/apt/sources.list I have been using the following mirror:
deb http://ftp.au.debian.org/debian/ bullseye main non-free contrib

The last few days it's returning error messages such as the following:

E: Failed to fetch 
http://ftp.au.debian.org/debian/pool/main/t/tree/tree_1.8.0-1+b1_amd64.deb  
Unable to connect to ftp.au.debian.org:http:
E: Unable to fetch some archives, maybe run apt-get update or try with 
--fix-missing?

Running the suggested apt-get update also fails, and with -f does too of course.

If I look for a package from the packages.debian.org site, when trying to 
download from ftp.au.debian.org/, it won't connect. However, if I try and get 
the package from ftp.nz.debian.org/debian, the package downloads succesfully.

If, in my sources.list I change from the Australian mirror 
ftp.au.debian.org/debian, to ftp.nz.debian.org/debian, I get an error message:

Reading package lists... Done
Building dependency tree   
Reading state information... Done
E: Unable to locate package inxi

That is when changing:
deb http://ftp.au.debian.org/debian/ bullseye main non-free contrib
to
deb http://ftp.nz.debian.org/debian/ bullseye main non-free contrib
fails.

I'm writing to ask if the problem I'm having is common and there's a problem 
like congestion with the au mirror, and also how to change mirrors in the 
sources.list so that I can install and update.

ben 
___
luv-main mailing list
luv-main@luv.asn.au
https://lists.luv.asn.au/cgi-bin/mailman/listinfo/luv-main