Re: Unattended upgrades. Debian methods, please, not Ubuntu.

2017-03-22 Thread Teemu Likonen
Lisi Reisz [2017-03-22 00:37:18Z] wrote:

> How do I get unattended upgrades a) to function and b) to tell me when
> it has upgraded something.

Probably you need to add the following lines in the top of
/etc/apt/apt.conf.d/50unattended-upgrades file (or some other file in
the same directory).

APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Unattended-Upgrade "1";
APT::Periodic::CleanInterval "1";

Systemd timer and service apt-daily.{timer,service} runs daily but if a
laptop is on battery power the service unit doesn't do anything. That's
easy to override on Debian 9 but requires an uglier hack on Debian 8.

-- 
/// Teemu Likonen   - .-..    //
// PGP: 4E10 55DC 84E9 DFF6 13D7 8557 719D 69D3 2453 9450 ///


signature.asc
Description: PGP signature


Re: Gestion de très gros FS

2017-03-22 Thread Haricophile
Le Wed, 22 Mar 2017 17:46:04 +0100,
Jean-Michel OLTRA  a écrit :

> Également, et depuis des années. Seul /boot est en ext3. Il devait y
> avoir une raison, dont je ne me rappelle pas !

1) pour être certain de pouvoir booter sur quelque chose (ext2/3 c'est
dans grub et fiable depuis fort longtemps si le partitionnement est
ancien).
2) parce que le boot n'a aucun besoin d'être journalisé et d'avoir des
fonctions étendues. ext2 fait l'affaire.

-- 
haricoph...@aranha.fr 



Re: écran noir pendant upgrade jessie > stretch

2017-03-22 Thread Haricophile
Le Tue, 21 Mar 2017 17:28:25 +0100,
Thierry Bugier Pineau  a écrit :

> J'ai eu plusieurs fois la même expérience en mettant à jour mon
> système, ça m'arrive en principe quand j'ai beaucoup de paquets à
> mettre à jour (notamment ceux touchant à Xorg). J'en ai conclu qu'il
> vaut mieux faire de telles mises à jour en mode console.

J'approuve totalement. De même éviter au maximum le dist-upgrade en
graphique avec un pilote graphique propriétaire activé, surtout
compilé/installé hors distrib sans le gestionnaire de paquet...

-- 
haricoph...@aranha.fr 



Re: Guide(s?) to backup philosophies

2017-03-22 Thread David Christensen

On 03/22/2017 03:35 AM, Dan Purgert wrote:

David Christensen wrote:

On 03/17/2017 03:31 AM, Dan Purgert wrote:

David Christensen wrote:

On 03/13/2017 05:38 AM, Dan Purgert wrote:
[...]


I should clarify that:

 "The backup server can be firewalled with no incoming ports and
 outgoing ports limited to SSH and other required ports".


I still need to figure out the "other required outgoing ports".
Suggestions and comments are welcome.


Unfortunately, pretty much "all ephemeral ports", if the server is
running things that initiate connections.  Some programs allow you to
specify what ports they're connecting from, but not all.


I run ntpd on all my machines.  So, ports 123/tcp and 123/udp need to be 
open for ongoing connections:


2017-03-22 19:30:03 dpchrist@jesse ~
$ grep ^ntp /etc/services
ntp 123/tcp
ntp 123/udp # Network Time Protocol



Since the PCs are laptops, they're not always here, so I was never able
to figure out how to get pull to work with the condition that we were on
vacation (or the laptops were otherwise "not home").

Though, yeah, the stuff that's statically here (desktop, server, etc.)
are rsync-by-pull.


I haven't dealt with the "roaming laptop on the Internet" use-case yet,
but I do have a desire to solve it.  My idea has been, and remains, for
the backup server to poll for a "job file" on the laptop, and to execute
it when found (once; idempotent).  This implies a network connection
between the backup server and the laptop.  OpenVPN is a technology that
might be able to facilitate this.


VPN could work, but SSH into a jumpbox works just as well.

The push script checks /etc/resolv.conf for the local domain, if it's
mine, then backup to the backup-server directly.

If it's not mine, backup "critical files" to the jumpbox (which, in turn
is backed up to the backup-server). It's quite a bit smaller than the
full backups that're performed at home - just $HOME/vacation.


So, you have a static IP (or dynamic DNS) for your home Internet 
connection, you have your home gateway configured to allow incoming SSH 
connections and direct them to an internal host "jumpbox", and your 
laptop has a backup script that detects whether the laptop is on your 
LAN or on the Internet.  If on the LAN, the backup script exits and 
waits for the backup server to pull a complete backup.  If on the 
Internet, the backup script pushes critical files over SSH to a 
receiving directory on "jumpbox" (?).




SSH with key-auth only is plenty secure, and so far has never been one
of those things that've been blocked at a hotel.


I have recently been studying up on SSH, both STFW and:

https://www.michaelwlucas.com/tools/ssh


SSH user keys with passphrases, disabling PasswordAuthentication, and 
ssh-agent/ssh-add are all good practices.



David



An INCOMPLETE solution - was [Re: Where is data stored when Synaptic scans DVDs?]

2017-03-22 Thread Richard Owlett

On 03/17/2017 08:47 AM, Richard Owlett wrote:

As I have limited bandwidth, I install from DVDs.
Also I frequently experiment with various options by doing a fresh
install to a different partition.
It is annoying to keep re-scanning a set of 13 DVDs.
Where is the information stored?
/etc/apt/sources.list is obvious, but where is the data about contents
of each DVD stored?
TIA


It had been suggested that all the needed information might be in
/etc/apt/sources.list
 PLUS
the /var/lib/apt directory

It ain't :{

I'll scan the DVD's as I have an immediate need to add several packages 
to my current active install.


About 18 months to 2 years ago someone had suggested in a totally 
unrelated thread a brute force method to trace file modifications which 
are either undocumented or incompletely documented. I'll search my 
personal archives for that methodology and apply it.


As I have time available, I'll try to document the validity of any 
extension of that approach. Don't expect posts in the near term to this 
thread as I have projects with higher priority. Even for a retiree there 
only so many hours in a week ;/






Difference Wheezy / Jessie TCP offloading

2017-03-22 Thread Jan Bakuwel
Hi all,

I'm looking after a XenServer (ie. from Citrix, not Xen Open Source)
that's running a couple of VMs. Those VMs are being migrated to a DMZ
behind a UTM appliance (which is also a VM running on the same
XenServer). The virtual hardware configuration of those VMs is virtually
(pun intended ;-) ) the same. They're all using the same virtualization
method (HVM).

It was necessary to disable TCP offloading to make this work for the
first couple of VMs that were migrated. These are all Debian Wheezy
(kernel  3.2.0-4-amd64). I did that at the VM level:

# ethtool --offload eth0 tx off rx off
Cannot change rx-checksumming
# ethtool -K eth0 rx off tx off sg off tso off ufo off gso off gro off
lro off
Cannot change rx-checksumming
Cannot change udp-fragmentation-offload
Cannot change large-receive-offload
#

and even though some of the ofload/checksumming could not be disabled,
it all works fine.

The next VM is a Debian Jessie VM (kernel 3.16.0-4-amd64). When I try to
disable TCP offloading at the VM level I get:

# ethtool --offload eth0 tx off rx off
Cannot change rx-checksumming
Could not change any device features
# ethtool -K eth0 rx off tx off sg off tso off ufo off gso off gro off
lro off
Cannot change rx-checksumming
Cannot change udp-fragmentation-offload
Cannot change large-receive-offload
Actual changes:
scatter-gather: off
tx-scatter-gather: off
tcp-segmentation-offload: off
tx-tcp-segmentation: off


However, a tcpdump on the virtualisation host shows checksum errors when
I try to access the Debian Jessie VM via the UTM appliance. No checksum
errors when accessing the Debian Wheezy VM.

[root@xenserver ~]# tcpdump -i eth0 -v -nn | grep incorrect
tcpdump: WARNING: eth0: no IPv4 address assigned
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size
65535 bytes
[IPremoved].22 > [IPremoved].41641: Flags [P.], cksum 0x1dd3
(incorrect -> 0x63d2), seq 228221313:228222304, ack 1348773693, win 227,
options [nop,nop,TS val 457298 ecr 3317501], length 991
[IPremoved].22 > [IPremoved].41641: Flags [F.], cksum 0xc80f
(incorrect -> 0x0e0f), seq 991, ack 2, win 227, options [nop,nop,TS val
457672 ecr 3319672], length 0
[IPremoved].22 > [IPremoved].41655: Flags [S.], cksum 0xfdff
(incorrect -> 0x43ff), seq 2663738003, ack 750476535, win 28960, options
[mss 1460,sackOK,TS val 457996 ecr 33199


I've also tried disabling TCP offloading on the virtualisation host (as
per https://support.citrix.com/article/CTX212540) but so far I've not
been successful in making it work for the Debian Jessie VMs.

Everything else being the same, it seems a VM that runs Debian Wheezy
works, while a VM that runs Debian Jessie does not.

Hence I'm sending this email to the debian-users list...

Suggestions much appreciated.

kind regards,

Jan




Re: Unattended upgrades. Debian methods, please, not Ubuntu.

2017-03-22 Thread Lisi Reisz
On Wednesday 22 March 2017 07:42:09 didier gaumet wrote:
> there is a doc in the Debian wiki:
> https://wiki.debian.org/UnattendedUpgrades

Thank you.  Yes, I have read and tried to follow it.  I quote:
-
To install these packages, run the following command as root:

# apt-get install unattended-upgrades apt-listchanges
The default configuration file for the unattended-upgrades package is 
at /etc/apt/apt.conf.d/50unattended-upgrades. The defaults will work fine, 
but you should read it and make changes as needed.

# editor /etc/apt/apt.conf.d/50unattended-upgrades
-

It clearly says that the defaults will work fine.  They don't.  They don't 
seem to work at all, in fact most of the files don't seem to be there. 

I have tried to read and follow the whole thing.  I have googled for other 
things.  I have got no-where.  So any more useful pointers would be greatly 
welcomed.

Lisi



JVC camera and Hauppauge PVR-150 framegrabber. Was: Re: MTI camera ...

2017-03-22 Thread peter
With a manual setting of the device path and ID, the V4L2 Test Bench 
produced this image from the JVC camera on the microscope.  
http://easthope.ca/JVCtoPVR150screen.jpg

Setting the device in the Test Bench each time it is opened becomes 
tedious and no /etc/*v4l* exists.  Can the default conifiguration be 
adjusted permanently without recompiling?  How?

Although too dark, the image from the microscope slide is faintly 
visible. The upper half of the image is on the bottom of the screen 
and the lower half is at the top.  On a VCR I might try adjusting 
vertical sync.  Is there an equilent in the Test Bench?

Thanks,   ... Peter E.

 
-- 

123456789 123456789 123456789 123456789 123456789 123456789 123456789
Tel: +1 360 639 0202  Pender Is.: +1 250 629 3757
http://easthope.ca/Peter.html  Bcc: peter at easthope. ca



Re: [OFF TOPIC] Certificado SSL

2017-03-22 Thread Luiz Henrique De Muzio
Olá, na empresa em que trabalho utilizo certificado wildcard da Comodo,
http://www.comodobr.com/ , você pode gerar um válido por 30 dias para teste.

[]'s

2017-03-14 10:58 GMT-03:00 Henrique Fagundes :

> Colegas,
>
> Bom dia!
>
> Preciso de um certificado SLL Wildcard (curinga) que seja multi domínios.
> Ex:
>
> *.dominio1.com.br
> *.dominio2.com.br
> *.dominio3.com.br
> *.dominio4.com.br
> *.dominio5.com.br
>
> Alguém pode me recomendar algum com um bom custo-benefício?
> Eu estava usando o da StartSSL.com, mas eles estão com problemas de
> confiança com a Google e a Mozilla, sendo assim, o Chrome e o Firefox não
> estão reconhecendo como confiável.
>
> Desde já muito obrigado e desculpem pelo OFF TOPIC.
>
> Atenciosamente,
>
> Henrique Fagundes
> henri...@linuxadmin.com.br
> Skype: magnata-br-rj
> Linux User: 475399
>
> http://www.aprendendolinux.com/
> http://www.facebook.com/PortalAprendendoLinux
> http://youtube.com/aprendendolinux/
> http://twitter.com/aprendendolinux/
> __
> Participe do Grupo Aprendendo Linux
> https://groups.google.com/forum/#!forum/portal-aprendendo-linux
>
> Ou envie um e-mail para:
> portal-aprendendo-linux+subscr...@googlegroups.com
>
>


-- 
Luiz Henrique.


Re: euskera en texlive-lang-french

2017-03-22 Thread Carlos Manuel Escalona Villeda
es igual que cuando wall-e no supo donde poner la cuchara para ramen y
decidió ponerla entre las cucharas y los tenedores...

El mié., 22 de mar. de 2017 a la(s) 12:32, endika <
endika_alde...@openmailbox.org> escribió:

> Cual es la razón de que la parte de euskera de texlive este dentro de el
> el paquete de francés (texlive-lang-french)?
>
>


Re: Nieuwere versie sqlitebrowser

2017-03-22 Thread Cecil Westerhof
On Wednesday 22 Mar 2017 16:46 CET, Cecil Westerhof wrote:

> Debian stable gebruikt sqlitebrowser 3.2.0. Ik dacht
> jessie-backports te gebruiken om een nieuwere versie van
> sqlitebrowser te krijgen, maar die heeft dezelfde versie. Is er een
> manier om een nieuwere versie te krijgen, of moet ik het zelf
> bouwen.

Ik heb sqlitebrowser (3.9.1-2) geïnstalleerd via stretch. En
natuurlijk ook sqlite3 (3.16.2). Is dat een goed idee, of kan ik het
beter zelf bouwen?

Het systeem waar ik het nu op heb gedaan is niet erg belangrijk, maar
ik wil het ook op wel belangrijke systemen gaan doen.

-- 
Cecil Westerhof
Senior Software Engineer
LinkedIn: http://www.linkedin.com/in/cecilwesterhof



Re: [1/2 HS] syntaxe qui ne va plus depuis upgrade MySQL

2017-03-22 Thread Christian Quentin

Bonsoir André,

Je ne sais pas ce qui a changé depuis la mise à jour mais ta requête ne 
dit pas quoi faire des images quand tu regroupes par "logos". Faut-il 
prendre la première, la dernière, la plus qqch ou la moins qqch ??
Bref, je pense qu'en indiquant à ta requête quelle image retenir dans 
chaque regroupement de logos, ça pourrait aider. Il manque une fonction 
d'aggrégation sur le champ images.


Christian


Le 21/03/2017 à 20:56, andre_deb...@numericable.fr a écrit :

Bonsoir,

Depuis l'installation de MySQL dernière version,
Je sèche sur une syntaxe SQL qui fonctionnait avant l'upgrade :

"SELECT images, logos, COUNT (*) AS total FROM tablelogo
GROUP BY logos ORDER BY total DESC"

Je pouvais récupérer le nombre de lignes distinctes = "logos" ($row),
ainsi que le contenu du champ = "images" ($DATA).

Maintenant, le select affiche un message d'erreur = "QUERY empty"

J'ai cherché via les sites mysql et mon script SELECT semble bon.

Si je mets ce script :
"SELECT  logos, COUNT (*) AS total FROM tablelogo
GROUP BY logos ORDER BY total DESC"

Je récupère le nombre de lignes distinctes "logos"
mais pas le contenu de "images".

Quel est le nouveau script SQL qui fonctionne pour le faire ?

Merci,

André





Re: mirrors don't show package xserver-xorg-legacy

2017-03-22 Thread Felix Miata

Felix Miata composed on 2017-03-22 17:48 (UTC-0400):


I wanted to directly examine the content of the package described at



https://packages.debian.org/sid/xserver-xorg-legacy



so went to



http://mirrors.us.kernel.org/debian/pool/main/x/
and
http://cdimage.debian.org/mirror/debian/pool/main/x/



to try to fetch it to my LAN server, but it is not there.



Can anyone explain why?


NVM. Sometimes I have to write before I can see what I'm looking at:

http://cdimage.debian.org/mirror/debian/pool/main/x/xorg-server/

:-p
--
"The wise are known for their understanding, and pleasant
words are persuasive." Proverbs 16:21 (New Living Translation)

 Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!

Felix Miata  ***  http://fm.no-ip.com/



mirrors don't show package xserver-xorg-legacy

2017-03-22 Thread Felix Miata

I wanted to directly examine the content of the package described at

https://packages.debian.org/sid/xserver-xorg-legacy

so went to

http://mirrors.us.kernel.org/debian/pool/main/x/
and
http://cdimage.debian.org/mirror/debian/pool/main/x/

to try to fetch it to my LAN server, but it is not there.

Can anyone explain why?
--
"The wise are known for their understanding, and pleasant
words are persuasive." Proverbs 16:21 (New Living Translation)

 Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!

Felix Miata  ***  http://fm.no-ip.com/



Re: Nieuwere versie

2017-03-22 Thread Paul van der Vlis
Op 22-03-17 om 21:18 schreef Geert Stappers:

> Er is zo iets als "sponsoring".
> 
> Zie bijvoorbeeld https://mentors.debian.net/sponsor/rfs-howto

Klopt. Maar een backport maken voor jezelf is eigenlijk vrij eenvoudig,
maar om hem officieel te publiceren, daar komt best veel bij kijken.
Nu ja, dat vind ik.

Groeten,
Paul


-- 
Paul van der Vlis Linux systeembeheer Groningen
https://www.vandervlis.nl/



ayuda porfa

2017-03-22 Thread José Alfredo Batista
 alguien de esta red  q me escriba al privado para  hacerle  una  
pregunta sobre servidores en  win 2008  y clientes  ligeros


--
Este mensaje le ha llegado mediante el servicio de correo electronico que 
ofrece Infomed para respaldar el cumplimiento de las misiones del Sistema 
Nacional de Salud. La persona que envia este correo asume el compromiso de usar 
el servicio a tales fines y cumplir con las regulaciones establecidas

Infomed: http://www.sld.cu/



Re: Using wvdial and usb_modeswitch to connect to internet with usb internet key

2017-03-22 Thread David Wright
On Wed 22 Mar 2017 at 02:10:24 (-0700), Daniele Disco wrote:
> Hi!
> Usually to connect to internet my linux box (with gnome), I insert in a usb 
> port my dongle 3G/4g and selecting in Network Manager the broad band 
> connection configured the first time, selecting _Connect_ the pc goes in 
> internet without problems (% of success 99.999).
> 
> Now I have to use a debian 8.0 version in an embedded system (Raspberry Pi 
> 3), without graphical interface (if I use the version with any X Window 
> System my code runs slowly), and connect this device to internet with the 
> same internet usb key.
> 
> After google search I define a procedure to connect to internet but the % of 
> success is 50%. So I think that somethings is wrong or is not present in my 
> procedure. For this reason I ask your help.
> 
> Tools used wvdial, usb_modeswith
> 
> The conf file are:
> usb_modeswitch.conf-
> # Configuration for the usb_modeswitch package, a mode switching tool for
> # USB devices providing multiple states or modes
> #
> # Evaluated by the wrapper script /usr/sbin/usb_modeswitch_dispatcher
> #
> # To enable an option, set it to "1", "yes" or "true" (case doesn't matter)
> # Everything else counts as "disable"
> 
> 
> # Disable automatic mode switching globally (e.g. to access the original
> # install storage)
> 
> DisableSwitching=1
> 
> # Onda MT8205 LTE
> 
> DefaultVendor=0x19d2
> DefaultProduct=0x0266
> 
> TargetVendor=0x19d2
> TargetProduct=0x0265
> 
> StandardEject=1
> 
> MessageContent="55534243d8a5238624008685002400"
> 
> # Enable logging (results in a extensive report file in /var/log, named
> # "usb_modeswitch_" and probably others
> 
> EnableLogging=0

Perhaps you should set this to find out what's going on both when
you have success and failure, to see if there's a difference.

> # Optional increase of "delay_use" for the usb-storage driver; there are hints
> # that a recent kernel default change to 1 sec. may lead to problems, particu-
> # larly with USB 3.0 ports. Set this to at least 3 (seconds) in that case.
> # Does nothing if the current system value is same or higher
> 
> SetStorageDelay=4
> 
> usb_modeswitch.conf- 
> 
> wvdial.conf-
> [Dialer Defaults]
> Auto DNS = yes
> Init1 = ATZ
> Init2 = ATQ0 V1 E1 S0=0   +FCLASS=0
> Modem Type = Analog Modem
> ; Phone = 
> ISDN = 0
> ; Password = 
> New PPPD = yes
> ; Username = 
> Modem = /dev/ttyUSB2
> Baud = 9600
> 
> [Dialer ondaTim]
> Init1 = ATH
> Init2 = ATE1
> Init3 = AT+CGDCONT=1,"IP","stringaAPN"
> Stupid mode = yes
> Phone = *99***1#
> Modem = /dev/ttyUSB2
> Username = blank
> Dial Command = ATD
> Password = blank
> Baud = 460800
> wvdial.conf- 
> 
> Procedure---
> sudo usb_modeswitch -c /etc/usb_modeswitch.conf
> 
> verify if in the output of lsusb the product number is in modem mode (my is 
> 0x0265)
> 
> sudo modprobe usbserial vendor=0x19d2 product=0x0265
> 
> sudo wvdialconf /etc/wvdial.conf
> 
> sudo wvdial ondaTim
> Procedure---
>
> Can you hemp me to understand what is wrong or what is not present?

IIRC (15 years) wvdial uses ppp. I know that ppp can be made to log
debug information. I can't remember whether wvdial does. (I never
used it but I helped occasionally.) So once again you need to look
at the logs when it works and when it doesn't.

Cheers,
David.



Re: Nieuwere versie

2017-03-22 Thread Geert Stappers
On Wed, Mar 22, 2017 at 08:26:34PM +0100, Paul van der Vlis wrote:
> Op 22-03-17 om 16:46 schreef Cecil Westerhof:
> 
> > Is er een manier om een nieuwere versie te
> > krijgen, of moet ik het zelf bouwen.
> 
> Je kunt de sources downloaden van de versie in testing, en dit dan
> compileren. Over het algemeen is dat erg simpel.
> 
> Kijk hier eens naar:
> http://vandervlis.nl/files/backport
> 
> Het komt vooral neer op dit commando geven:
> dpkg-buildpackage -uc -us
> 
> Ik heb ook nog een mooier script wat het in een chroot omgeving doet,
> maar daar komt meer bij kijken.
> 
> > Als ik het zelf bouw, is het dan mogelijk om hem in backports te
> > krijgen?
> 
> Als je een DD bent wel.
> 

Er is zo iets als "sponsoring".

Zie bijvoorbeeld https://mentors.debian.net/sponsor/rfs-howto


Mocht men zo ver zijn dat het RFS wishlist bugreport er is,
laat het dan ook op andere plaatsen weten.


Groeten
Geert Stappers
-- 
Leven en laten leven



Re: Matrox G550 - MGA X server fails

2017-03-22 Thread Sven Joachim
On 2017-03-22 10:25 +, Oliver Elphick wrote:

> I am unable to start X using a Matrox Millennium G550 PCIe card.
>
> This is what I think is the relevant part of the log for the session:
>
> #011compiled for 1.19.2, module version = 0.1.0
> #011ABI class: X.Org Video Driver, version 23.0
> (--) MGA(0): Chipset: "mgag550"
> xf86TokenToOptinfo: table is NULL
> xf86TokenToOptinfo: table is NULL
> (==) MGA(0): Using HW cursor
> (--) MGA(0): Linear framebuffer at 0xF000
> (--) MGA(0): MMIO registers at 0xF702
> (--) MGA(0): Pseudo-DMA transfer window at 0xF680
> (EE) MGA(0): Unable to map Framebuffer F000 200.  Permission
> denied (13)
> (II) MGA(0): Creating default Display subsection in Screen section
> #011"Default Screen Section" for depth/fbbpp 24/32
> (==) MGA(0): Depth 24, (--) framebuffer bpp 32
> (==) MGA(0): RGB weight 888
> (==) MGA(0): Using AGP 1x mode
> (==) MGA(0): Using XAA acceleration
> (WW) MGA(0): Could not retrieve video BIOS!
> (EE) MGA(0): Unable to detect video RAM.
> (II) UnloadModule: "mga"
>
> The full log is attached.
>
> Can anyone indicate what the problem is, please?

Probably that the X server is no longer running with root rights, and
it has to do that if there is no kernel driver for the graphics card.
See /usr/share/doc/xserver-xorg-core/NEWS.Debian.gz:

,
| xorg-server (2:1.17.3-1) unstable; urgency=medium
| 
|   The Xorg server is no longer setuid root by default.  This change reduces 
the
|   risk of privilege escalation due to X server bugs, but has some side 
effects:
| 
|   * it relies on logind and libpam-systemd
|   * it relies on a kernel video driver (so the userspace component doesn't
| touch the hardware directly)
|   * it needs X to run on the virtual console (VT) it was started from
|   * it changes the location for storing the Xorg log from /var/log/ to
| ~/.local/share/xorg/
| 
|   On systems where those are not available, the new xserver-xorg-legacy 
package
|   is needed to allow X to run with elevated privileges.  See the
|   Xwrapper.config(5) manual page for configuration details.
| 
|  -- Julien Cristau   Tue, 27 Oct 2015 22:54:11 +
`

In short, you need to install xserver-xorg-legacy.

Cheers,
   Sven



Re: Using wvdial and usb_modeswitch to connect to internet with usb internet key

2017-03-22 Thread tv.deb...@googlemail.com

On 22/03/2017 12:10, Daniele Disco wrote:

Hi!
Usually to connect to internet my linux box (with gnome), I insert in a usb 
port my dongle 3G/4g and selecting in Network Manager the broad band connection 
configured the first time, selecting _Connect_ the pc goes in internet without 
problems (% of success 99.999).

Now I have to use a debian 8.0 version in an embedded system (Raspberry Pi 3), 
without graphical interface (if I use the version with any X Window System my 
code runs slowly), and connect this device to internet with the same internet 
usb key.

After google search I define a procedure to connect to internet but the % of 
success is 50%. So I think that somethings is wrong or is not present in my 
procedure. For this reason I ask your help.

Tools used wvdial, usb_modeswith

The conf file are:
usb_modeswitch.conf-
# Configuration for the usb_modeswitch package, a mode switching tool for
# USB devices providing multiple states or modes
#
# Evaluated by the wrapper script /usr/sbin/usb_modeswitch_dispatcher
#
# To enable an option, set it to "1", "yes" or "true" (case doesn't matter)
# Everything else counts as "disable"


# Disable automatic mode switching globally (e.g. to access the original
# install storage)

DisableSwitching=1

# Onda MT8205 LTE

DefaultVendor=0x19d2
DefaultProduct=0x0266

TargetVendor=0x19d2
TargetProduct=0x0265

StandardEject=1

MessageContent="55534243d8a5238624008685002400"

# Enable logging (results in a extensive report file in /var/log, named
# "usb_modeswitch_" and probably others

EnableLogging=0


# Optional increase of "delay_use" for the usb-storage driver; there are hints
# that a recent kernel default change to 1 sec. may lead to problems, particu-
# larly with USB 3.0 ports. Set this to at least 3 (seconds) in that case.
# Does nothing if the current system value is same or higher

SetStorageDelay=4

usb_modeswitch.conf-

wvdial.conf-
[Dialer Defaults]
Auto DNS = yes
Init1 = ATZ
Init2 = ATQ0 V1 E1 S0=0   +FCLASS=0
Modem Type = Analog Modem
; Phone = 
ISDN = 0
; Password = 
New PPPD = yes
; Username = 
Modem = /dev/ttyUSB2
Baud = 9600

[Dialer ondaTim]
Init1 = ATH
Init2 = ATE1
Init3 = AT+CGDCONT=1,"IP","stringaAPN"
Stupid mode = yes
Phone = *99***1#
Modem = /dev/ttyUSB2
Username = blank
Dial Command = ATD
Password = blank
Baud = 460800
wvdial.conf-

Procedure---
sudo usb_modeswitch -c /etc/usb_modeswitch.conf

verify if in the output of lsusb the product number is in modem mode (my is 
0x0265)

sudo modprobe usbserial vendor=0x19d2 product=0x0265

sudo wvdialconf /etc/wvdial.conf

sudo wvdial ondaTim
Procedure---

Can you hemp me to understand what is wrong or what is not present?
TIA



Hi, I have a similar installation on a LEDE (ex-OpenWRT) router that 
connect through a 3G usb dongle, and I use usb modems on Debian too. On 
all systems I have:



# Disable automatic mode switching globally (e.g. to access the original
# install storage)
DisableSwitching=1


set to "0", otherwise switching the usb device from mass storage to 
modem hangs more often than not. Any reason why you need "1" here ?


I can't look into the LEDE chat script right now, but will do tomorrow 
and report any difference with your setup that strikes me.


Cheers.



Re: Nieuwere versie sqlitebrowser

2017-03-22 Thread Paul van der Vlis
Op 22-03-17 om 17:15 schreef Bram:
> Op Launchpad is 3.9.0 beschikbaar, zo te zien:
> https://launchpad.net/~linuxgndu/+archive/ubuntu/sqlitebrowser

Ik raad dit soort dingen af, ook als het wel werkt.
Voor mij alleen packages van debian.org.

Groeten,
Paul

-- 
Paul van der Vlis Linux systeembeheer Groningen
https://www.vandervlis.nl/



Re: Nieuwere versie sqlitebrowser

2017-03-22 Thread Paul van der Vlis
Op 22-03-17 om 16:46 schreef Cecil Westerhof:
> Debian stable gebruikt sqlitebrowser 3.2.0. Ik dacht jessie-backports
> te gebruiken om een nieuwere versie van sqlitebrowser te krijgen, maar
> die heeft dezelfde versie. 

Hij zit er niet in.

> Is er een manier om een nieuwere versie te
> krijgen, of moet ik het zelf bouwen.

Je kunt de sources downloaden van de versie in testing, en dit dan
compileren. Over het algemeen is dat erg simpel.

Kijk hier eens naar:
http://vandervlis.nl/files/backport

Het komt vooral neer op dit commando geven:
dpkg-buildpackage -uc -us

Ik heb ook nog een mooier script wat het in een chroot omgeving doet,
maar daar komt meer bij kijken.

> Als ik het zelf bouw, is het dan mogelijk om hem in backports te
> krijgen?

Als je een DD bent wel.

Groeten,
Paul

-- 
Paul van der Vlis Linux systeembeheer Groningen
https://www.vandervlis.nl/



Re: Using wvdial and usb_modeswitch to connect to internet with usb internet key

2017-03-22 Thread didier gaumet
I cannot help you with wvdial, I have used this rarely looong ago for
simple dial-up (no 3G/4G).

NetworkManager itself (not its applet) does not depend upon any GUI part
and nmcli (command line) and nmtui (ncurses text interface, roughly
equivalent to nm-applet) are included in the package.
NetworkManager depending on Modemmanager and usb_modeswitch, it would be
easy for you to manage your 3G/4G dongle.



Re: Re: ¿Donde está mi correo?.

2017-03-22 Thread Carlos Manuel Escalona Villeda
Aquí está, lo siento, lo había dejado en mi otro pantalón, pero ya lo
encontré y te lo traje corriendo.

El sáb., 18 de mar. de 2017 a la(s) 00:00, sam vargas 
escribió:

>
>
> Enviado desde mi iPhone
>
>


InfolexBrasil EmailMarket

2017-03-22 Thread Infolexbrasil

SCRIPT DE E-MAIL MARKETING PROFISSIONAL

Sistema totalmente traduzido! Testado e Aprovado!

Mesmo sistema usado pelas grandes empresa para envio de email´s em
massa...

Email Marketing
Emailmarket


Re: Using wvdial and usb_modeswitch to connect to internet with usb internet key

2017-03-22 Thread Daniele Disco
Nobody can help me?



Re: Nieuwere versie sqlitebrowser

2017-03-22 Thread Geert Stappers
On Wed, Mar 22, 2017 at 06:45:20PM +0100, Cecil Westerhof wrote:
> On Wednesday 22 Mar 2017 17:15 CET, b...@bnux.nl wrote:
> 
> > Op Launchpad is 3.9.0 beschikbaar, zo te zien:
> > https://launchpad.net/~linuxgndu/+archive/ubuntu/sqlitebrowser
> > Zie de handleiding op de site om deze te gebruiken:
> > http://sqlitebrowser.org/#ubuntu
> 
> In eerste instantie lijkt dat niet te werken.
> Maar ik kijk er binnenkort beter naar.
> 
> 
> > 2017-03-22 16:46 GMT+01:00 Cecil Westerhof :
> >
> > Debian stable gebruikt sqlitebrowser 3.2.0. Ik dacht
> > jessie-backports
> > te gebruiken om een nieuwere versie van sqlitebrowser te krijgen,
> > maar
> > die heeft dezelfde versie. Is er een manier om een nieuwere versie
> > te
> > krijgen, of moet ik het zelf bouwen.
> >
> > Als ik het zelf bouw,
> > is het dan mogelijk om hem in backports te krijgen?


Ja.

Of ik er een kant-en-klare, op-en-top beschrijving daarvoor heb?
Nee.

Het "bouwstuk" gaat je ook wel lukken. Je hebt dan een ".deb"
Daar is een  ".orig.tar.xz" en een ".debian.tar.xz" aan vooraf gegaan.

Die twee laatste genoemde files kunnen/mogen ook in
een git repository zitten.Ze zijn nodig voor review
en de uiteindelijke upload.

Werk naar dat punt toe.


Tip: Zet je werkwijze / workflow in   debian/README.source


Groeten
Geert Stappers
DD
-- 
Leven en laten leven



euskera en texlive-lang-french

2017-03-22 Thread endika
Cual es la razón de que la parte de euskera de texlive este dentro de el
el paquete de francés (texlive-lang-french)?



Re: Nieuwere versie sqlitebrowser

2017-03-22 Thread Bram
Akkoord, ik lees dat de Ubuntu-versie hier niet geschikt voor is. Dan kom
je toch uit bij zelf compilen
.
Met het maintainen van packages heb ik geen ervaring.

2017-03-22 17:15 GMT+01:00 Bram :

> Op Launchpad is 3.9.0 beschikbaar, zo te zien: https://launchpad.net/~
> linuxgndu/+archive/ubuntu/sqlitebrowser
> Zie de handleiding op de site om deze te gebruiken:
> http://sqlitebrowser.org/#ubuntu
>
> 2017-03-22 16:46 GMT+01:00 Cecil Westerhof :
>
>> Debian stable gebruikt sqlitebrowser 3.2.0. Ik dacht jessie-backports
>> te gebruiken om een nieuwere versie van sqlitebrowser te krijgen, maar
>> die heeft dezelfde versie. Is er een manier om een nieuwere versie te
>> krijgen, of moet ik het zelf bouwen.
>>
>> Als ik het zelf bouw, is het dan mogelijk om hem in backports te
>> krijgen?
>>
>> --
>> Cecil Westerhof
>> Senior Software Engineer
>> LinkedIn: http://www.linkedin.com/in/cecilwesterhof
>>
>>
>


Re: [TEST RUNS] Re: installer defaults for desktops (was Re: Suggested edit)

2017-03-22 Thread Lisi Reisz
On Wednesday 22 March 2017 17:26:56 Richard Owlett wrote:
> On 03/22/2017 10:33 AM, Lisi Reisz wrote:
> > On Wednesday 22 March 2017 14:53:24 Richard Owlett wrote:
> >> On 03/22/2017 09:28 AM, Lisi Reisz wrote:
> >>> On Wednesday 22 March 2017 14:05:28 Richard Owlett wrote:
>  The results of the 6 installs I intended to run:
>  [the only variable being which DE related boxes checked]
>  [space used reported by gparted]
> 1. None
>    CLI installed taking ~.92 GB
> 2. Only top entry checked (asking for unspecified desktop)
>    Gnome installed taking ~3.59 GB
> 3. Top entry *and* Gnome checked
>    Gnome installed taking ~3.59 GB
> 4. Top entry *and* MATE checked
>    MATE installed taking ~2.65 GB
> 5. Gnome only checked
>    Gnome installed taking ~3.59 GB
> 6. MATE only checked
>    MATE installed taking ~2.65 GB
>  Tests 1-6 were run were run from a flash drive copy of DVD1.
> >>>
> >>> Thanks, Richard.  And are you able to confirm that, by default, the top
> >>> entry is checked, and you have to  uncheck it to achieve option 1?
> >>
> >> That is correct.
> >>
> >> HOWEVER that line of thought is why I included my 1st paragraph on the
> >> "educational" problems encountered.
> >> 
> >> My "educational" failure was in attempting to create a preseed.cfg file
> >> so the tests would require minimal hands on attention. I wanted the
> >> tasksel screen to appear. I did not succeed. Instead the installer went
> >> on its merry way installing Gnome in ~3.67 (not the ~3.59 GB of other
> >> runs). 
> >>
> >> I've never used netinst and don't know if my failed preseed.cfg might
> >> resemble it.
> >
> > Thank you.  I prefer facts to alternative facts or guesses!  I must play
> > around with net install when I have got both time and a suitable
> > platform!
> >
> > In all this talk of Debian being the universal operating system, and
> > helping newbies, no mention has been made of the Live CD installation
> > method, which I should have though was ideal for those who want their
> > hands held.  That perception may be false, but is why I barely go near
> > it!  I use Knoppix when I want a Live CD and the net install disk when I
> > want to install Debian.
>
> I had a "Live 8.6 MATE" DVD next to me.
> I had a minor glitch and a possibly significant problem.
> The minor glitch was when launching the installer it needed a password.
> Having seen that problem reported before, entering "live" got it going.
>
> The possibly significant problem was inability to install grub.
> I say "possibly significant" because my test machine and installation
> routines have a few oddities.
>
> I manually partitioned *AND* defeated using a swap partition as it would
> have changed the UUID of my swap partition thus messing up my exiting
> installs (have 3 active at the moment).
>
> Not installing grub was no problem for me as I don't install it anyway,
> choosing to run update-grub under control of the install on /dev/sda1.

Interesting.  I wonder whether that would apply to all the mainstream Live 
CDs, or just the Mate one?  I think they may be very individual.  I know the 
Trinity unofficial one was, until it became the Devuan one anyway.  But it 
installed OK, ran well both live and installed, and told you what password to 
use in the accompanying documentation.

Now that I think one could criticise, since it should actually run.  If Martin 
Wimpress ever actually turns up to a meeting, instead of saying that he is 
hoping to come, I shall tell him so!!

Thanks again.

Lisi



Re: [TEST RUNS] Re: installer defaults for desktops (was Re: Suggested edit)

2017-03-22 Thread Richard Owlett

On 03/22/2017 10:33 AM, Lisi Reisz wrote:

On Wednesday 22 March 2017 14:53:24 Richard Owlett wrote:

On 03/22/2017 09:28 AM, Lisi Reisz wrote:

On Wednesday 22 March 2017 14:05:28 Richard Owlett wrote:

The results of the 6 installs I intended to run:
[the only variable being which DE related boxes checked]
[space used reported by gparted]
   1. None
  CLI installed taking ~.92 GB
   2. Only top entry checked (asking for unspecified desktop)
  Gnome installed taking ~3.59 GB
   3. Top entry *and* Gnome checked
  Gnome installed taking ~3.59 GB
   4. Top entry *and* MATE checked
  MATE installed taking ~2.65 GB
   5. Gnome only checked
  Gnome installed taking ~3.59 GB
   6. MATE only checked
  MATE installed taking ~2.65 GB
Tests 1-6 were run were run from a flash drive copy of DVD1.


Thanks, Richard.  And are you able to confirm that, by default, the top
entry is checked, and you have to  uncheck it to achieve option 1?


That is correct.

HOWEVER that line of thought is why I included my 1st paragraph on the
"educational" problems encountered.

My "educational" failure was in attempting to create a preseed.cfg file
so the tests would require minimal hands on attention. I wanted the
tasksel screen to appear. I did not succeed. Instead the installer went
on its merry way installing Gnome in ~3.67 (not the ~3.59 GB of other
runs). 

I've never used netinst and don't know if my failed preseed.cfg might
resemble it.


Thank you.  I prefer facts to alternative facts or guesses!  I must play
around with net install when I have got both time and a suitable platform!

In all this talk of Debian being the universal operating system, and helping
newbies, no mention has been made of the Live CD installation method, which I
should have though was ideal for those who want their hands held.  That
perception may be false, but is why I barely go near it!  I use Knoppix when
I want a Live CD and the net install disk when I want to install Debian.



I had a "Live 8.6 MATE" DVD next to me.
I had a minor glitch and a possibly significant problem.
The minor glitch was when launching the installer it needed a password.
Having seen that problem reported before, entering "live" got it going.

The possibly significant problem was inability to install grub.
I say "possibly significant" because my test machine and installation 
routines have a few oddities.


I manually partitioned *AND* defeated using a swap partition as it would 
have changed the UUID of my swap partition thus messing up my exiting 
installs (have 3 active at the moment).


Not installing grub was no problem for me as I don't install it anyway, 
choosing to run update-grub under control of the install on /dev/sda1.







Re: Gestion de très gros FS

2017-03-22 Thread Gabriel Moreau



Et pourquoi pas pour / ?


Parce que je laisse faire la distrib sur sa partition ;-)

gaby
--
Gabriel Moreau - IR CNRShttp://www.legi.grenoble-inp.fr
LEGI (UMR 5519) Laboratoire des Ecoulements Geophysiques et Industriels
Domaine Universitaire, CS 40700, 38041 Grenoble Cedex 9, France
mailto:gabriel.mor...@legi.grenoble-inp.fr  tel:+33.476.825.015



Re: Gestion de très gros FS

2017-03-22 Thread Jean-Michel OLTRA

Bonjour,


Le mercredi 22 mars 2017, Gabriel Moreau a écrit...


> > J'utilise xfs pour un stockage externe de taille modeste, ça marche
> > bien, même après un arrêt brutal. Comparé à ext4, que vaut xfs pour un
> > pc de production?

> C'est aussi bien. J'ai tous mes homes, mes tmp et mes data en XFS...

Également, et depuis des années. Seul /boot est en ext3. Il devait y avoir
une raison, dont je ne me rappelle pas !

-- 
jm



Re: Nieuwere versie sqlitebrowser

2017-03-22 Thread Bram
Op Launchpad is 3.9.0 beschikbaar, zo te zien:
https://launchpad.net/~linuxgndu/+archive/ubuntu/sqlitebrowser
Zie de handleiding op de site om deze te gebruiken:
http://sqlitebrowser.org/#ubuntu

2017-03-22 16:46 GMT+01:00 Cecil Westerhof :

> Debian stable gebruikt sqlitebrowser 3.2.0. Ik dacht jessie-backports
> te gebruiken om een nieuwere versie van sqlitebrowser te krijgen, maar
> die heeft dezelfde versie. Is er een manier om een nieuwere versie te
> krijgen, of moet ik het zelf bouwen.
>
> Als ik het zelf bouw, is het dan mogelijk om hem in backports te
> krijgen?
>
> --
> Cecil Westerhof
> Senior Software Engineer
> LinkedIn: http://www.linkedin.com/in/cecilwesterhof
>
>


Re: Gestion de très gros FS

2017-03-22 Thread maderios

On 03/22/2017 04:56 PM, Gabriel Moreau wrote:



J'utilise xfs pour un stockage externe de taille modeste, ça marche
bien, même après un arrêt brutal. Comparé à ext4, que vaut xfs pour un
pc de production?


C'est aussi bien. J'ai tous mes homes, mes tmp et mes data en XFS...

gaby


Et pourquoi pas pour / ?

--
Maderios



Nieuwere versie sqlitebrowser

2017-03-22 Thread Cecil Westerhof
Debian stable gebruikt sqlitebrowser 3.2.0. Ik dacht jessie-backports
te gebruiken om een nieuwere versie van sqlitebrowser te krijgen, maar
die heeft dezelfde versie. Is er een manier om een nieuwere versie te
krijgen, of moet ik het zelf bouwen.

Als ik het zelf bouw, is het dan mogelijk om hem in backports te
krijgen?

-- 
Cecil Westerhof
Senior Software Engineer
LinkedIn: http://www.linkedin.com/in/cecilwesterhof



Re: installer defaults for desktops (was Re: Suggested edit)

2017-03-22 Thread David Wright
On Tue 21 Mar 2017 at 20:52:46 (-0400), Catherine Gramze wrote:
> Sent from my iPad
> 
> > On Mar 21, 2017, at 7:20 PM, David Wright  wrote:
> > 
> >> On Tue 21 Mar 2017 at 15:44:18 (-0400), Catherine Gramze wrote:
> >> 
> >> The installer allows you to continue the installation without a configured 
> >> network card, and it shouldn't.
> > 
> > Please explain how this statement doesn't take away the option of
> > continuing the installation without a configured network card.
> 
> You are perfectly free to remove that $15 USB NIC after you reach the 
> installation point you want.

…which contradicts your statement "Please explain how you think my
suggestion takes away any installation options, because it
doesn't. You can still do any type of installation you want."

> The point of Debian is not elitist snobbery, but universal access.

So now it's elitist snobbery to disobey your order to buy a $5 NIC?
I think you should contemplate the words "universal access".

> What is wrong with a simple change that would make it clear to the beginner 
> that they can't do what they want to do, and need to do some reading?

As I said, there's nothing wrong IMO with a change to make the d-i
warn that selecting certain options will have certain consequences,
just like the example I gave of swap. Just no refusals, right?

> This rabid insistence on being able to use the netinst installer without a 
> network is ridiculous.

Of course I'm insistent that one is able to install without a network
and using the netinst installer. I've done it. It didn't seem
ridiculous at the time. The results were spelled out in the other
subthread, in reply to your Tue 21 Mar 2017 at 10:33:29 (-0400) post.
All you're demonstrating here is your lack of ingenuity, and a desire
to prevent others from exercising theirs.

Cheers,
David.



Re: Gestion de très gros FS

2017-03-22 Thread Gabriel Moreau



J'utilise xfs pour un stockage externe de taille modeste, ça marche
bien, même après un arrêt brutal. Comparé à ext4, que vaut xfs pour un
pc de production?


C'est aussi bien. J'ai tous mes homes, mes tmp et mes data en XFS...

gaby
--
Gabriel Moreau - IR CNRShttp://www.legi.grenoble-inp.fr
LEGI (UMR 5519) Laboratoire des Ecoulements Geophysiques et Industriels
Domaine Universitaire, CS 40700, 38041 Grenoble Cedex 9, France
mailto:gabriel.mor...@legi.grenoble-inp.fr  tel:+33.476.825.015



Re: [TEST RUNS] Re: installer defaults for desktops (was Re: Suggested edit)

2017-03-22 Thread Lisi Reisz
On Wednesday 22 March 2017 14:53:24 Richard Owlett wrote:
> On 03/22/2017 09:28 AM, Lisi Reisz wrote:
> > On Wednesday 22 March 2017 14:05:28 Richard Owlett wrote:
> >> The results of the 6 installs I intended to run:
> >> [the only variable being which DE related boxes checked]
> >> [space used reported by gparted]
> >>1. None
> >>   CLI installed taking ~.92 GB
> >>2. Only top entry checked (asking for unspecified desktop)
> >>   Gnome installed taking ~3.59 GB
> >>3. Top entry *and* Gnome checked
> >>   Gnome installed taking ~3.59 GB
> >>4. Top entry *and* MATE checked
> >>   MATE installed taking ~2.65 GB
> >>5. Gnome only checked
> >>   Gnome installed taking ~3.59 GB
> >>6. MATE only checked
> >>   MATE installed taking ~2.65 GB
> >> Tests 1-6 were run were run from a flash drive copy of DVD1.
> >
> > Thanks, Richard.  And are you able to confirm that, by default, the top
> > entry is checked, and you have to  uncheck it to achieve option 1?
>
> That is correct.
>
> HOWEVER that line of thought is why I included my 1st paragraph on the
> "educational" problems encountered.
> 
> My "educational" failure was in attempting to create a preseed.cfg file
> so the tests would require minimal hands on attention. I wanted the
> tasksel screen to appear. I did not succeed. Instead the installer went
> on its merry way installing Gnome in ~3.67 (not the ~3.59 GB of other
> runs). 
>
> I've never used netinst and don't know if my failed preseed.cfg might
> resemble it.

Thank you.  I prefer facts to alternative facts or guesses!  I must play 
around with net install when I have got both time and a suitable platform!

In all this talk of Debian being the universal operating system, and helping 
newbies, no mention has been made of the Live CD installation method, which I 
should have though was ideal for those who want their hands held.  That 
perception may be false, but is why I barely go near it!  I use Knoppix when 
I want a Live CD and the net install disk when I want to install Debian.

Lisi



Re: [TEST RUNS] Re: installer defaults for desktops (was Re: Suggested edit)

2017-03-22 Thread Richard Owlett

On 03/22/2017 09:28 AM, Lisi Reisz wrote:

On Wednesday 22 March 2017 14:05:28 Richard Owlett wrote:

The results of the 6 installs I intended to run:
[the only variable being which DE related boxes checked]
[space used reported by gparted]
   1. None
  CLI installed taking ~.92 GB
   2. Only top entry checked (asking for unspecified desktop)
  Gnome installed taking ~3.59 GB
   3. Top entry *and* Gnome checked
  Gnome installed taking ~3.59 GB
   4. Top entry *and* MATE checked
  MATE installed taking ~2.65 GB
   5. Gnome only checked
  Gnome installed taking ~3.59 GB
   6. MATE only checked
  MATE installed taking ~2.65 GB
Tests 1-6 were run were run from a flash drive copy of DVD1.


Thanks, Richard.  And are you able to confirm that, by default, the top entry
is checked, and you have to  uncheck it to achieve option 1?



That is correct.

HOWEVER that line of thought is why I included my 1st paragraph on the 
"educational" problems encountered.


My "educational" failure was in attempting to create a preseed.cfg file 
so the tests would require minimal hands on attention. I wanted the 
tasksel screen to appear. I did not succeed. Instead the installer went 
on its merry way installing Gnome in ~3.67 (not the ~3.59 GB of other runs).



I've never used netinst and don't know if my failed preseed.cfg might 
resemble it.









Re: [TEST RUNS] Re: installer defaults for desktops (was Re: Suggested edit)

2017-03-22 Thread Lisi Reisz
On Wednesday 22 March 2017 14:05:28 Richard Owlett wrote:
> The results of the 6 installs I intended to run:
> [the only variable being which DE related boxes checked]
> [space used reported by gparted]
>    1. None
>       CLI installed taking ~.92 GB
>    2. Only top entry checked (asking for unspecified desktop)
>       Gnome installed taking ~3.59 GB
>    3. Top entry *and* Gnome checked
>       Gnome installed taking ~3.59 GB
>    4. Top entry *and* MATE checked
>       MATE installed taking ~2.65 GB
>    5. Gnome only checked
>       Gnome installed taking ~3.59 GB
>    6. MATE only checked
>       MATE installed taking ~2.65 GB
> Tests 1-6 were run were run from a flash drive copy of DVD1.

Thanks, Richard.  And are you able to confirm that, by default, the top entry 
is checked, and you have to  uncheck it to achieve option 1?

Lisi



[TEST RUNS] Re: installer defaults for desktops (was Re: Suggested edit)

2017-03-22 Thread Richard Owlett

On 03/21/2017 05:30 AM, Richard Owlett wrote:

On 03/20/2017 09:05 PM, Lisi Reisz wrote:

On Tuesday 21 March 2017 00:38:36 Richard Owlett wrote:

With the installer from DVD 1 of 13 the first option in taskel is for
choosing to have a desktop - the default is yes.


Thanks, Richard!  This is as I expected - the default is to have a
desktop.  I
must find a machine on which I can safely do some net install test
installs.
I should be getting one next month.  But again, the default certainly
used to
be to have a desktop.  I sometimes don't want oen - but land up with
one if I
go to sleep. :-/
Lisi




It will take longer to do the test installs than I originally
estimated.
To gather some related data I find interesting will take at least 6
unique installs. That means tweaking 6 preseed.cfg files in order to:
  a. be doing something else while the machine chugs along.
  b. be able to document exactly what was done.


Actually it took 9 installs due to "educational" failures :}

The results of the 6 installs I intended to run:
[the only variable being which DE related boxes checked]
[space used reported by gparted]
  1. None
 CLI installed taking ~.92 GB
  2. Only top entry checked (asking for unspecified desktop)
 Gnome installed taking ~3.59 GB
  3. Top entry *and* Gnome checked
 Gnome installed taking ~3.59 GB
  4. Top entry *and* MATE checked
 MATE installed taking ~2.65 GB
  5. Gnome only checked
 Gnome installed taking ~3.59 GB
  6. MATE only checked
 MATE installed taking ~2.65 GB
Tests 1-6 were run were run from a flash drive copy of DVD1.

My "educational" failure was in attempting to create a preseed.cfg file 
so the tests would require minimal hands on attention. I wanted the 
tasksel screen to appear. I did not succeed. Instead the installer went 
on its merry way installing Gnome in ~3.67 (not the ~3.59 GB of other runs).


Two additional installs were run to check an anomaly in the Gnome 
installs. To minimize typing during the tests, I had chosen to allow 
root to login and did not specify any other user.

MATE had no problem with this.
Gnome refused to allow "root" be specified as a login ID.
I did 2 test installs from the original DVD, one with and one without 
specifying a login other than "root". In neither case could I login as 
"root" in-spite of having explicitly specified during install that login 
as root was permitted.






Also I picked up a new toy yesterday, a 240 GB Portable SSD. That will
allow me to use my dedicated WindowsXP Laptop as a server. I'll put
the contents of DVD 1 on the SSD and run netinstall on my Linux
hardware. Who knows how long it will take as I have no idea of how
many "learning experiences" take place when running a server for the
first time ;/


It will take a while to get to that test.






Re: Gestion de très gros FS

2017-03-22 Thread maderios

On 03/21/2017 06:23 PM, Gabriel Moreau wrote:



Quelques partitions de 70 To et du XFS depuis des années (sur un DAS
Dell de plus de 190 To brut). Il fait le job tant qu'a rester dans le
système de fichiers non distribués.


Idem, 70To sur XFS marche très bien et résiste bien aux coupures
électrique non prévu...

A noter qu'il faut tester un xfs_check et xfs_repair au début avant la
mise en prod car ils sont gourmand en RAM. C'est con de faire un volume
de 200To et de ne pouvoir faire de check (même si on en fait très
rarement).

Coté performance, j'ai lu pas mal de retour d'expérience et pour le
moment, je reste sur XFS au vu de tout ce que j'ai vu. Cela semble
toujours un très bon système et en plus, il continue d'être activement
développé et maintenu.



Bonjour
J'utilise xfs pour un stockage externe de taille modeste, ça marche 
bien, même après un arrêt brutal. Comparé à ext4, que vaut xfs pour un 
pc de production?


--
Maderios



Re: installer defaults for desktops (was Re: Suggested edit)

2017-03-22 Thread tomas
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, Mar 22, 2017 at 12:16:54PM +, Jonathan Dowland wrote:
> On Wed, Mar 22, 2017 at 08:06:46AM -0400, Greg Wooledge wrote:
> > On Tue, Mar 21, 2017 at 08:52:46PM -0400, Catherine Gramze wrote:
> > > Do you prefer that people move on to other distros after a base system 
> > > only
> > > installation because the Debian installer let them inadvertently get 
> > > there?
> > 
> > If they're like you, yes.  Good riddance.
> 
> This thread is a great example of why I really despise debian-user sometimes.
> There's no reason to be so hostile, you simply disagree with each other. This
> list is too toxic a lot of the time. Please either post friendly and
> constructively or not at all.

A pity indeed. Sometimes threads become "rotten": this seems to be an example
of that. I try to just ignore those.

Regards
- -- t
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAljSbTAACgkQBcgs9XrR2kZccQCdHp5FSYvIaPZ2MiITPmAnJv6x
hxoAn1Yc8LN1IoVdXFC2sKKvAtUHN3D0
=vfkS
-END PGP SIGNATURE-



Re: Guide(s?) to backup philosophies

2017-03-22 Thread tomas
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, Mar 22, 2017 at 11:57:44AM -, Dan Purgert wrote:
>  wrote:
> >
> > On Wed, Mar 22, 2017 at 10:35:13AM -, Dan Purgert wrote:
> >> David Christensen wrote:
> >> > On 03/17/2017 03:31 AM, Dan Purgert wrote:
> >> >> David Christensen wrote:
> >> >>> On 03/13/2017 05:38 AM, Dan Purgert wrote:
> >> >>> [...]
> >> >
> >> > I should clarify that:
> >> >
> >> >  "The backup server can be firewalled with no incoming ports and
> >> >  outgoing ports limited to SSH and other required ports".
> >> >
> >> >
> >> > I still need to figure out the "other required outgoing ports". 
> >> > Suggestions and comments are welcome.
> >> 
> >> Unfortunately, pretty much "all ephemeral ports", if the server is
> >> running things that initiate connections.  Some programs allow you to
> >> specify what ports they're connecting from, but not all.
> >
> > That's what ESTABLISHED is for, in firewall jargon (you accept packets
> > belonging to an established TCP connection).
> >
> 
> You're not gonna have any ESTABLISHED connections in your firewall if
> you're _initiating_ the connection. ;)
> 
> if my firewall has the following rules:
>  - default drop
>  - rule 10 accept established
> 
> the command:
> rsync (whatever switches) user@remote-host:/path/to/files/ /local/
> 
> Will fail to connect to remote-host, as the rsync command is not
> connecting across a previously established link. 

You're holding it wrong :)

Remote-host has to allow connections (from wherever, perhaps only
from the backup host) *to* its port 22. The ESTABLISHED is for
rsync's "other leg".

- -- t
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAljSa/wACgkQBcgs9XrR2kbrjwCeNwPfsjE3wFnfWm/pQJGlLc+j
SwwAnAtDVJZiH34L3jLTi45dlFz8PPcK
=ue1R
-END PGP SIGNATURE-



Re: installer defaults for desktops (was Re: Suggested edit)

2017-03-22 Thread Jonathan Dowland
On Wed, Mar 22, 2017 at 08:06:46AM -0400, Greg Wooledge wrote:
> On Tue, Mar 21, 2017 at 08:52:46PM -0400, Catherine Gramze wrote:
> > Do you prefer that people move on to other distros after a base system only
> > installation because the Debian installer let them inadvertently get there?
> 
> If they're like you, yes.  Good riddance.

This thread is a great example of why I really despise debian-user sometimes.
There's no reason to be so hostile, you simply disagree with each other. This
list is too toxic a lot of the time. Please either post friendly and
constructively or not at all.

-- 
⢀⣴⠾⠻⢶⣦⠀ 
⣾⠁⢠⠒⠀⣿⡁ Jonathan Dowland
⢿⡄⠘⠷⠚⠋⠀ 
⠈⠳⣄ Please do not CC me, I am subscribed to the list.


signature.asc
Description: Digital signature


Re: Guide(s?) to backup philosophies

2017-03-22 Thread Dan Purgert
 wrote:
>
> On Wed, Mar 22, 2017 at 10:35:13AM -, Dan Purgert wrote:
>> David Christensen wrote:
>> > On 03/17/2017 03:31 AM, Dan Purgert wrote:
>> >> David Christensen wrote:
>> >>> On 03/13/2017 05:38 AM, Dan Purgert wrote:
>> >>> [...]
>> >
>> > I should clarify that:
>> >
>> >  "The backup server can be firewalled with no incoming ports and
>> >  outgoing ports limited to SSH and other required ports".
>> >
>> >
>> > I still need to figure out the "other required outgoing ports". 
>> > Suggestions and comments are welcome.
>> 
>> Unfortunately, pretty much "all ephemeral ports", if the server is
>> running things that initiate connections.  Some programs allow you to
>> specify what ports they're connecting from, but not all.
>
> That's what ESTABLISHED is for, in firewall jargon (you accept packets
> belonging to an established TCP connection).
>

You're not gonna have any ESTABLISHED connections in your firewall if
you're _initiating_ the connection. ;)

if my firewall has the following rules:
 - default drop
 - rule 10 accept established

the command:
rsync (whatever switches) user@remote-host:/path/to/files/ /local/

Will fail to connect to remote-host, as the rsync command is not
connecting across a previously established link. 

-- 
|_|O|_| Registered Linux user #585947
|_|_|O| Github: https://github.com/dpurgert
|O|O|O| PGP: 05CA 9A50 3F2E 1335 4DC5  4AEE 8E11 DDF3 1279 A281



Re: installer defaults for desktops (was Re: Suggested edit)

2017-03-22 Thread Greg Wooledge
On Tue, Mar 21, 2017 at 08:52:46PM -0400, Catherine Gramze wrote:
> Do you prefer that people move on to other distros after a base system only 
> installation because the Debian installer let them inadvertently get there?

If they're like you, yes.  Good riddance.



Re: mother nueva

2017-03-22 Thread JAP

El 21/03/17 a las 15:06, walter salazar escribió:

Hola. Ya Hice la pruebas, saque todo lo de nvidia, y funcionó. pero
cuando ejecute android studio se clavó., congeló(freezed)
hice otras pruebas, por ejemplo entre en una pagina de juegos mientras
oia musica en youtube, comenzo a relentizarce el navegador y finalmente
todo se congeló. otra vez. Esto me desespera. no puedo disfrutar de mi
pc ni trabajar con ella.  Mayor desilucion al tener instalado w7 en otro
disco y funciona... NOOO!! que esta pasando.. Ya probe el disco y
esta correcto.

las paginas eran
http://www.miniclip.com/games/8-ball-pool-multiplayer/es/#t-w-c-H
https://www.youtube.com/watch?v=e4Ao-iNPPUc

Si alguien tiene algun consejo  o comentario aunque sea de un amigo de
un amigo que oyo a otro amigo decir "algo" sera bienvenido.

No se si en algun archivo log hay alguna info al respecto.
Desde ya Gracias...




De Android Studio, ni idea qué pudo pasar.

Pregunta MUY estúpida, ¿está tu placa convenientemente aislada del 
chasis con una planchita de espuma de polietileno?


http://1.bp.blogspot.com/-BrUELTb9kco/TxVmNoKRRZI/BrE/jkoUELyzRP8/s1600/polietileno.jpg

O tenés problemas de cargas estáticas, o el controlador de video está 
teniendo problemas de temperatura.


Haz pruebas con Windows durante BASTANTE tiempo, sobre exigiendo el video.


JAP



Re: mother nueva

2017-03-22 Thread JAP

El 21/03/17 a las 15:06, walter salazar escribió:

Hola. Ya Hice la pruebas, saque todo lo de nvidia, y funcionó. pero
cuando ejecute android studio se clavó., congeló(freezed)
hice otras pruebas, por ejemplo entre en una pagina de juegos mientras
oia musica en youtube, comenzo a relentizarce el navegador y finalmente
todo se congeló. otra vez. Esto me desespera. no puedo disfrutar de mi
pc ni trabajar con ella.  Mayor desilucion al tener instalado w7 en otro
disco y funciona... NOOO!! que esta pasando.. Ya probe el disco y
esta correcto.

las paginas eran
http://www.miniclip.com/games/8-ball-pool-multiplayer/es/#t-w-c-H
https://www.youtube.com/watch?v=e4Ao-iNPPUc

Si alguien tiene algun consejo  o comentario aunque sea de un amigo de
un amigo que oyo a otro amigo decir "algo" sera bienvenido.

No se si en algun archivo log hay alguna info al respecto.
Desde ya Gracias...




De Android Studio, ni idea qué pudo pasar.

Pregunta MUY estúpida, ¿está tu placa convenientemente aislada del 
chasis con una planchita de espuma de polietileno?


http://1.bp.blogspot.com/-BrUELTb9kco/TxVmNoKRRZI/BrE/jkoUELyzRP8/s1600/polietileno.jpg

O tenés problemas de cargas estáticas, o el controlador de video está 
teniendo problemas de temperatura.


Haz pruebas con Windows durante BASTANTE tiempo, sobre exigiendo el video.


JAP



Re: Una de hostapd en debian 7...

2017-03-22 Thread JAP

El 22/03/17 a las 00:16, luisededios escribió:

Saludos a todos,

Estoy retomando un tema que tengo pendiente desde hace algún tiempo
porque aun no lo he logrado poner en marcha. Me refiero a la
implementación de un AP wifi en una laptop DELL a la cual le he
instalado dos mini tarjetas wifi, wlan0 y wlan2.

Hasta donde he llegado he logrado que el AP montado sobre wlan0 conecte
a otros dispositivos móviles y también que la laptop se conecte a la
red(un móvil con zona wifi y datos móviles activados) mediante wlan2,
pero parece que tengo problemas con el enrutamiento ip desde wlan0 y
wlan2 en la propia laptop pues los móviles que se conectan al AP de la
laptop no logran navegar. Desde la laptop si puedo navegar, pero desde
los móviles conectados al AP de la laptop no logro navegar.

La ip del móvil con zona wifi y datos móviles activados es 192.168.43.1,
y la laptop toma la 192.168.43.156. Luego, el AP de la laptop tiene la
ip fija 192.168.42.1 y asigna bien ips al resto de móviles que se conectan.

Repito. Desde la laptop puedo navegar correctamente pero desde los
móviles conectados a ella no logro navegar.

Muestro la condiguración que he heco por si algún experto pueda
mostrarme el error que estoy comentiendo.

1) Configurando el adaptador wifi(wlan0) con ip estática.

/etc/network/interfaces
allow-hostplug wlan0
iface wlan0 inet static
address 192.168.42.1
netmask 255.255.255.1

2) Instalación y conf del server DHCP.

apt-get install isc-dhcp-server

/etc/dhcp/dhcpd.conf
# option domain-name
# option domain-name-server
authoritative;

subnet 192.168.42.0 netmask 255.255.255.0 {
range 192.168.42.10 192.168.42.50;
option broadcast-address 192.168.42.255;
option routers 192.168.42.1;
default-lease-time 600;
max-lease-time 7200;
option domain-name "local";
option domain-name-servers 8.8.8.8, 8.8.4.4;
}

En /etc/default/isc-dhcp-server
DHCP_CONF=/etc/dhcp/dhcpd.conf
INTERFACES="wlan0"

3) Instalar y conf de hostapd.

interfaces=wlan0
driver=nl80211
ssid=test
hw_mode=g
channel=6
macaddr_acl=0
auth_algs=1
ignore_broadcast_ssid=0
#wpa=2   #todo lo que sigue si pongo contraseña al AP
#wpa_passphrase=secret
#wpa_key_mgmt=WPA-PSK
#wpa_pairwise=TKIP
#rsn_pairwise=CCMP

En /etc/default/hostapd
DAEMON_CONF="/etc/hostapd/hostapd.conf"

4) Configurando el enrutamiento IP entre wlan0 y wlan2.

En /etc/sysctl.conf
net.ipv4.ip_forward=1

ejecutar,

sh -c "echo 1 > /proc/sys/net/ipv4/ip_forward"

Para implementar un router en el AP, ejecutar,

iptables -t nat -A POSTROUTING -o wlan2 -j MASQUERADE
iptables -A FORWARD -i wlan2 -o wlan0 -m state --state
RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i wlan0 -o wlan2 -j ACCEPT

Para salvar las tablas de ruteo en /etc/iptables.ipv4.nat, ejecutar,

sh -c "iptables-save > /etc/iptables.ipv4.nat"

Adicionar, al final del fichero /etc/network/interfaces, lo siguiente
para restaurar las tablas de ruteo cuando se inicia el AP.

pre-up iptables-restore < /etc/iptables.ipv4.nat

HASTA AQUI

A mi juicio, el problema lo tengo en las sentencias de iptables.

Este procedimiento lo he tomado desde un tutorial que encontré, en cual
se enrutaba desde eth0 hasta wlan0 y yo lo ajusté sustituyendo eth0 por
wlan2 pues tengo dos mini tarjeta wifi instaladas.

Anticipadamente, reciban mis agradecimientos.



Te estás complicando la vida en extremo, y estás cargando cosara "raras" 
en las direcciones de red


Si no tienes una restricción de acceso a la red en wlan2, ya sea por 
MAC, nombre de dominio o alguna otra cosa, y que pueda servir como 
servidora DNS y DHCP a cualquier conexión, lo que debes hacer es un 
puente: https://wiki.debian.org/es/Compartir_red_fisica_con_WiFi


Ahora bien, si el proveedor de red te ha puesto trabas, debes 
configurarte como servidor y enmascarar todo a través de tu computadora.


#/etc/network/interfaces
 allow-hostplug wlan0
 iface wlan0 inet static
 address 192.168.42.1
 netmask 255.255.255.0
 network 192.168.42.0
 broadcast 192.168.42.255
 post-up /etc/init.d/hostapd force-reload --> ES NECESARIO REINICIAR 
HOSTAPD LUEGO DE CONFIGURAR EL AP


#/etc/dhcp/dhcpd.conf
 ddns-update-style none;
 option domain-name "local";
 option domain-name-servers 192.168.42.1;
 authoritative;
 log-facility local7;

 subnet 192.168.42.0 netmask 255.255.255.0 {
  range 192.168.42.10 192.168.42.20;---> ACÁ VA EL LÍMITE DE CONEXIONES 
QUE QUIERAS PONER

  option routers 192.168.42.1;
 }


#/etc/default/isc-dhcp-server
 INTERFACES="wlan0"


hostapd está bien.

Ahora, no te embrolles tanto con iptables.

Edita (o crea) el archivo /etc/rc.local

#!/bin/sh -e
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.

# Configuración IPTables
# Eliminar todas las reglas
iptables -F
iptables -t nat -F
iptables -t mangle -F

# Configurar NAT

Re: Una de hostapd en debian 7...

2017-03-22 Thread luisededios
On Wed, 22 Mar 2017 02:10:16 -0400, Juan Lavieri   
wrote:



Hola Luis & listeros.


El 21-03-2017 a las 11:16 p.m., luisededios escribió:

Saludos a todos,

Estoy retomando un tema que tengo pendiente desde hace algún tiempo  
porque aun no lo he logrado poner en marcha. Me refiero a la  
implementación de un AP wifi en una laptop DELL a la cual le he  
instalado dos mini tarjetas wifi, wlan0 y wlan2.


Perdona pero  ¿Qué estás intentando hacer con esas 2 wifi's exactamente?


Quiero implementar un Punto de Acceso Wi-Fi(en wlan0) en la laptop para  
compartir internet, la cual recibo vía Wi-Fi(a través de wlan2) también.






Hasta donde he llegado he logrado que el AP montado sobre wlan0 conecte  
a otros dispositivos móviles y también que la laptop se conecte a la  
red(un móvil con zona wifi y datos móviles activados) mediante wlan2,  
pero parece que tengo problemas con el enrutamiento ip desde wlan0 y  
wlan2 en la propia laptop pues los móviles que se conectan al AP de la  
laptop no logran navegar. Desde la laptop si puedo navegar, pero desde  
los móviles conectados al AP de la laptop no logro navegar.


La ip del móvil con zona wifi y datos móviles activados es  
192.168.43.1, y la laptop toma la 192.168.43.156. Luego, el AP de la  
laptop tiene la ip fija 192.168.42.1 y asigna bien ips al resto de  
móviles que se conectan.


Repito. Desde la laptop puedo navegar correctamente pero desde los  
móviles conectados a ella no logro navegar.


Muestro la condiguración que he heco por si algún experto pueda  
mostrarme el error que estoy comentiendo.


1) Configurando el adaptador wifi(wlan0) con ip estática.

/etc/network/interfaces
allow-hostplug wlan0
iface wlan0 inet static
address 192.168.42.1
netmask 255.255.255.1

2) Instalación y conf del server DHCP.

apt-get install isc-dhcp-server

/etc/dhcp/dhcpd.conf
# option domain-name
# option domain-name-server
authoritative;

subnet 192.168.42.0 netmask 255.255.255.0 {
range 192.168.42.10 192.168.42.50;
option broadcast-address 192.168.42.255;
option routers 192.168.42.1;
default-lease-time 600;
max-lease-time 7200;
option domain-name "local";
option domain-name-servers 8.8.8.8, 8.8.4.4;
}

En /etc/default/isc-dhcp-server
DHCP_CONF=/etc/dhcp/dhcpd.conf
INTERFACES="wlan0"

3) Instalar y conf de hostapd.

interfaces=wlan0
driver=nl80211
ssid=test
hw_mode=g
channel=6
macaddr_acl=0
auth_algs=1
ignore_broadcast_ssid=0
#wpa=2   #todo lo que sigue si pongo contraseña al AP
#wpa_passphrase=secret
#wpa_key_mgmt=WPA-PSK
#wpa_pairwise=TKIP
#rsn_pairwise=CCMP

En /etc/default/hostapd
DAEMON_CONF="/etc/hostapd/hostapd.conf"

4) Configurando el enrutamiento IP entre wlan0 y wlan2.

En /etc/sysctl.conf
net.ipv4.ip_forward=1

ejecutar,

sh -c "echo 1 > /proc/sys/net/ipv4/ip_forward"

Para implementar un router en el AP, ejecutar,

iptables -t nat -A POSTROUTING -o wlan2 -j MASQUERADE
iptables -A FORWARD -i wlan2 -o wlan0 -m state --state  
RELATED,ESTABLISHED -j ACCEPT

iptables -A FORWARD -i wlan0 -o wlan2 -j ACCEPT

Para salvar las tablas de ruteo en /etc/iptables.ipv4.nat, ejecutar,

sh -c "iptables-save > /etc/iptables.ipv4.nat"

Adicionar, al final del fichero /etc/network/interfaces, lo siguiente  
para restaurar las tablas de ruteo cuando se inicia el AP.


pre-up iptables-restore < /etc/iptables.ipv4.nat

HASTA AQUI

A mi juicio, el problema lo tengo en las sentencias de iptables.

Este procedimiento lo he tomado desde un tutorial que encontré, en cual  
se enrutaba desde eth0 hasta wlan0 y yo lo ajusté sustituyendo eth0 por  
wlan2 pues tengo dos mini tarjeta wifi instaladas.


Anticipadamente, reciban mis agradecimientos.


De nada.

Saludos


--
Saludos,
Luis



Re: aptitude is dangerous - any replacement?

2017-03-22 Thread Vincent Lefevre
On 2017-03-22 07:50:09 +0100, Nemeth Gyorgy wrote:
> 2017-03-21 23:02 keltezéssel, Vincent Lefevre írta:
> > On 2017-03-21 16:21:25 +0100, Nemeth Gyorgy wrote:
> >> 2017-03-21 14:38 keltezéssel, Vincent Lefevre írta:
> >>> Yes, but one can't exclude a package listed by apt-listbugs. 
> >> You can. Just press 'h' (hold), and don't continue apt-get.
> > I didn't know that apt-listbugs could do that. This is not documented
> > and I've never tried.
> >
> >> On the next apt-get start this package will be in 'hold' state. And
> >> later apt-listbugs will unhold the package automatically when the
> >> bug is closed.
> > One problem is that maintainers sometimes forget to close bugs
> > (in particular if the bug has been fixed by upstream). It would
> > be better to ask again when a new version is available (a bit
> > like aptitude's "freeze" feature).
> >
> I currently use sid on my desktop (so bugs are relatively frequent) and
> usually don't have to unhold packages manually. I didn't analyze
> /usr/lib/ruby/vendor_ruby/aptlistbugs/aptcleanup deeply (this is in the
> cron.daily file), but I think it also checks the version. Code snippet:
> 
> # are bugs that the user fears still affecting unpinned_candidate_version ?
> $stderr.puts "Checking bug(s) #{feared_list} for
> #{pkg_key_with_vers}" if $DEBUG
> optionB = nil
> if feared_list != "" and feared_list != nil
>   optionB = "-B #{feared_list}"
> end
> 
> So it seems that version check is also in the script.

Yes, to know whether the candidate version has been fixed or not
by comparing the version with the "fixed" field in the BTS. But
if the bug is not marked as fixed in the BTS, this won't work.

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)



Re: outil de monitoring

2017-03-22 Thread Wallace


Le 21/03/2017 à 07:57, david hannequin a écrit :
> Bonjour Wallace,
>
> 1/ C'est hors sujet et n'aide pas à faire le choix pour un outil de
> supervision ( la question de départ);
Je réagissait au RedHat c'est pour les serveurs.
> 2/ Parler de SSH sur Debian... cela me fait toujours rire depuis
> l'erreur introduit par les packageur du projet;
Les accidents ça arrive aussi à RedHat :) et d'expérience une boite
cache plus volontiers des incidents qu'une communauté, je préfère donc
être au courant par la communauté et agir en conséquence.
> 3/ L'artisanat c'est bien.
Et ça conduit à pas mal de dépense quand y a des soucis (pas de doc, pas
d'automatismes, coquilles et erreurs humaines en pagaille, ...)
>
> Bonne journée
>
> --
> Grommit
Oui j'utilise encore mon pseudo qui date de 1993 où à l'époque on savait
protéger notre identité personnelle.



signature.asc
Description: OpenPGP digital signature


Re: Guide(s?) to backup philosophies

2017-03-22 Thread tomas
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, Mar 22, 2017 at 10:35:13AM -, Dan Purgert wrote:
> David Christensen wrote:
> > On 03/17/2017 03:31 AM, Dan Purgert wrote:
> >> David Christensen wrote:
> >>> On 03/13/2017 05:38 AM, Dan Purgert wrote:
> >>> [...]
> >
> > I should clarify that:
> >
> >  "The backup server can be firewalled with no incoming ports and
> >  outgoing ports limited to SSH and other required ports".
> >
> >
> > I still need to figure out the "other required outgoing ports". 
> > Suggestions and comments are welcome.
> 
> Unfortunately, pretty much "all ephemeral ports", if the server is
> running things that initiate connections.  Some programs allow you to
> specify what ports they're connecting from, but not all.

That's what ESTABLISHED is for, in firewall jargon (you accept packets
belonging to an established TCP connection).

Regards
- -- t
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAljSVc0ACgkQBcgs9XrR2kZuzgCfXXa+qKx7HKM4z89EOuC0mWbK
GiMAnij6QBoehTW2rE7gzAckchaifmdS
=RbGU
-END PGP SIGNATURE-



Re: Matrox G550 - MGA X server fails

2017-03-22 Thread Felix Miata

Oliver Elphick composed on 2017-03-22 10:25 (UTC):


I am unable to start X using a Matrox Millennium G550 PCIe card.


Try stripping whatever in your Grub config is video-related, or reconfiguring it 
to native plain text 80x25 mode:

http://bugzilla.opensuse.org/show_bug.cgi?id=1004453

I haven't found or filed an upstream bug yet.
--
"The wise are known for their understanding, and pleasant
words are persuasive." Proverbs 16:21 (New Living Translation)

 Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!

Felix Miata  ***  http://fm.no-ip.com/



Re: Guide(s?) to backup philosophies

2017-03-22 Thread Dan Purgert
David Christensen wrote:
> On 03/17/2017 03:31 AM, Dan Purgert wrote:
>> David Christensen wrote:
>>> On 03/13/2017 05:38 AM, Dan Purgert wrote:
>>> [...]
>
> I should clarify that:
>
>  "The backup server can be firewalled with no incoming ports and
>  outgoing ports limited to SSH and other required ports".
>
>
> I still need to figure out the "other required outgoing ports". 
> Suggestions and comments are welcome.

Unfortunately, pretty much "all ephemeral ports", if the server is
running things that initiate connections.  Some programs allow you to
specify what ports they're connecting from, but not all.

>
>
>> Since the PCs are laptops, they're not always here, so I was never able
>> to figure out how to get pull to work with the condition that we were on
>> vacation (or the laptops were otherwise "not home").
>>
>> Though, yeah, the stuff that's statically here (desktop, server, etc.)
>> are rsync-by-pull.
>
> I haven't dealt with the "roaming laptop on the Internet" use-case yet, 
> but I do have a desire to solve it.  My idea has been, and remains, for 
> the backup server to poll for a "job file" on the laptop, and to execute 
> it when found (once; idempotent).  This implies a network connection 
> between the backup server and the laptop.  OpenVPN is a technology that 
> might be able to facilitate this.

VPN could work, but SSH into a jumpbox works just as well. 

The push script checks /etc/resolv.conf for the local domain, if it's
mine, then backup to the backup-server directly.

If it's not mine, backup "critical files" to the jumpbox (which, in turn
is backed up to the backup-server). It's quite a bit smaller than the
full backups that're performed at home - just $HOME/vacation.

SSH with key-auth only is plenty secure, and so far has never been one
of those things that've been blocked at a hotel.


-- 
|_|O|_| Registered Linux user #585947
|_|_|O| Github: https://github.com/dpurgert
|O|O|O| PGP: 05CA 9A50 3F2E 1335 4DC5  4AEE 8E11 DDF3 1279 A281



Matrox G550 - MGA X server fails

2017-03-22 Thread Oliver Elphick
I am unable to start X using a Matrox Millennium G550 PCIe card.

This is what I think is the relevant part of the log for the session:

#011compiled for 1.19.2, module version = 0.1.0
#011ABI class: X.Org Video Driver, version 23.0
(--) MGA(0): Chipset: "mgag550"
xf86TokenToOptinfo: table is NULL
xf86TokenToOptinfo: table is NULL
(==) MGA(0): Using HW cursor
(--) MGA(0): Linear framebuffer at 0xF000
(--) MGA(0): MMIO registers at 0xF702
(--) MGA(0): Pseudo-DMA transfer window at 0xF680
(EE) MGA(0): Unable to map Framebuffer F000 200.  Permission
denied (13)
(II) MGA(0): Creating default Display subsection in Screen section
#011"Default Screen Section" for depth/fbbpp 24/32
(==) MGA(0): Depth 24, (--) framebuffer bpp 32
(==) MGA(0): RGB weight 888
(==) MGA(0): Using AGP 1x mode
(==) MGA(0): Using XAA acceleration
(WW) MGA(0): Could not retrieve video BIOS!
(EE) MGA(0): Unable to detect video RAM.
(II) UnloadModule: "mga"

The full log is attached.

Can anyone indicate what the problem is, please?

Packages:15:40:59 phoenix systemd[1]: Started User Manager for UID 118.
(--) Log file renamed from "/var/lib/gdm3/.local/share/xorg/Xorg.pid-9327.log" 
to "/var/lib/gdm3/.local/share/xorg/Xorg.0.log"
X.Org X Server 1.19.2
Release Date: 2017-03-02
X Protocol Version 11, Revision 0
Build Operating System: Linux 3.16.0-4-amd64 x86_64 Debian
Current Operating System: Linux phoenix 4.9.0-2-amd64 #1 SMP Debian 4.9.13-1 
(2017-02-27) x86_64
Kernel command line: BOOT_IMAGE=/boot/vmlinuz-4.9.0-2-amd64 
root=UUID=72b9d4db-4d0e-466f-b90e-0a1a72dffcba ro quiet
Build Date: 03 March 2017  03:14:41PM
xorg-server 2:1.19.2-1 (https://www.debian.org/support)
Current version of pixman: 0.34.0
#011Before reporting problems, check http://wiki.x.org
#011to make sure that you have the latest version.
Markers: (--) probed, (**) from config file, (==) default setting,
#011(++) from command line, (!!) notice, (II) informational,
#011(WW) warning, (EE) error, (NI) not implemented, (??) unknown.
(==) Log file: "/var/lib/gdm3/.local/share/xorg/Xorg.0.log", Time: Mon Mar 20 
15:40:59 2017
(==) Using system config directory "/usr/share/X11/xorg.conf.d"
(==) No Layout section.  Using the first Screen section.
(==) No screen section available. Using defaults.
(**) |-->Screen "Default Screen Section" (0)
(**) |   |-->Monitor ""
(==) No monitor specified for screen "Default Screen Section".
#011Using a default monitor configuration.
(==) Automatically adding devices
(==) Automatically enabling devices
(==) Automatically adding GPU devices
(==) Max clients allowed: 256, resource mask: 0x1f
(WW) The directory "/usr/share/fonts/X11/cyrillic" does not exist.
#011Entry deleted from font path.
(==) FontPath set to:
#011/usr/share/fonts/X11/misc,
#011/usr/share/fonts/X11/100dpi/:unscaled,
#011/usr/share/fonts/X11/75dpi/:unscaled,
#011/usr/share/fonts/X11/Type1,
#011/usr/share/fonts/X11/100dpi,
#011/usr/share/fonts/X11/75dpi,
#011built-ins
(==) ModulePath set to "/usr/lib/xorg/modules"
(II) The server relies on udev to provide the list of input devices.
#011If no devices become available, reconfigure udev or disable AutoAddDevices.
(II) Loader magic: 0x557672802e00
(II) Module ABI versions:
#011X.Org ANSI C Emulation: 0.4
#011X.Org Video Driver: 23.0
#011X.Org XInput driver : 24.1
#011X.Org Server Extension : 10.0
(++) using VT number 1
(II) systemd-logind: took control of session 
/org/freedesktop/login1/session/c313
(II) xfree86: Adding drm device (/dev/dri/card0)
(II) systemd-logind: got fd for /dev/dri/card0 226:0 fd 12 paused 0
(--) PCI: (0:0:2:0) 8086:0412:1458:d000 rev 6, Mem @ 0xf740/4194304, 
0xe000/268435456, I/O @ 0xf000/64
(--) PCI:*(0:2:0:0) 102b:2527:102b:22c0 rev 1, Mem @ 0xf000/33554432, 
0xf702/16384, 0xf680/8388608, BIOS @ 0x/131072
(II) LoadModule: "glx"
(II) Loading /usr/lib/xorg/modules/extensions/libglx.so
(II) Module glx: vendor="X.Org Foundation"
#011compiled for 1.19.2, module version = 1.0.0
#011ABI class: X.Org Server Extension, version 10.0
(==) Matched mga as autoconfigured driver 0
(==) Matched modesetting as autoconfigured driver 1
(==) Matched fbdev as autoconfigured driver 2
(==) Matched vesa as autoconfigured driver 3
(==) Assigned the driver to the xf86ConfigLayout
(II) LoadModule: "mga"
(II) Loading /usr/lib/xorg/modules/drivers/mga_drv.so
(II) Module mga: vendor="X.Org Foundation"
#011compiled for 1.19.1, module version = 1.6.5
#011Module class: X.Org Video Driver
#011ABI class: X.Org Video Driver, version 23.0
(II) LoadModule: "modesetting"
(II) Loading /usr/lib/xorg/modules/drivers/modesetting_drv.so
(II) Module modesetting: vendor="X.Org Foundation"
#011compiled for 1.19.2, module version = 1.19.2
#011Module class: X.Org Video Driver
#011ABI class: X.Org Video Driver, version 23.0
(II) LoadModule: "fbdev"
(II) Loading /usr/lib/xorg/modules/drivers/fbdev_drv.so
(II) Module fbdev: vendor="X.Org Foundation"
#011compiled for 1.19.0, module version = 0.4.4

Re: cell phone .sigs (was: installer defaults for desktops)

2017-03-22 Thread tomas
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, Mar 22, 2017 at 05:41:51AM -0400, Felix Miata wrote:

[...]

> We see them because the device owner isn't aware, doesn't care, or
> can't be bothered to replace the OEM .sig [...]

Or perhaps (s)he isn't even allowed?

"I've been assimilated"

(SCNR)
- -- t
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAljST1oACgkQBcgs9XrR2kawlQCeN0XUCnf6oAoBDnKw06/7ii0u
ogQAoIEW3mKL2CFXOnFwfdAe7mRk4cJR
=EfHc
-END PGP SIGNATURE-



Re: Where is data stored when Synaptic scans DVDs?

2017-03-22 Thread Richard Owlett

On 03/21/2017 03:31 PM, Brian wrote:

[snip]

This part of my response wasn't very clear. I was thinking of

 > you don't appear to have looked to see if it was correct

at the time and was wondering why the OP has let his issue hang in the
air in his responses.


Because I've not yet absorbed the content and implications of the 13 
links mentioned elsewhere.



[snip]

Obviously the OP wants to be able to find a set of files on one system
which, when transferred to another system, will tell the latter
everything that the former knows about a set of CDs, in order that
they don't have to be rescanned on the latter system. I don't think
your demonstration here has shown that those files _are_ sufficient,
even if you were correct in thinking they are.


cdroms.list, sources.list and the files in lists/ are necessary. They
are the only files which change when a CD is added. Whether they are
sufficient when put on the target system is another matter.



That *IS* the question.
I'm unlikely to  say much more until I've at least a reasonable start on 
an answer.






Re: cell phone .sigs (was: installer defaults for desktops)

2017-03-22 Thread Felix Miata

Darac Marjal composed on 2017-03-22 09:10 (UTC):


On Tue, Mar 21, 2017 at 18:03:12 +, Lisi Reisz wrote:



Incidentally, why did we need to know that?



These sorts of signatures are usually used on mobile devices for a
number of reasons:



 - Typing on a mobile tends to be less comfortable, or at least slower,
 than typing on a full-size keyboard. This lends to shorter, less
 detailed replies. The signature acts as a warning that "I'm not being
 brusque, I just don't have the capacity to state my case more
 loquaciously."



 - Many mobile clients seem to restrict what you can put in a signature.
 You generally can't use formatting (as company branding might require),
 you often can't even use multiple lines. And if you want to read your
 signature from a pipe (so as to include a witty "fortune")? Good luck!


We see them because the device owner isn't aware, doesn't care, or can't be 
bothered to replace the OEM .sig with one that identifies the device 
owner/sender rather than its maker.

--
"The wise are known for their understanding, and pleasant
words are persuasive." Proverbs 16:21 (New Living Translation)

 Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!

Felix Miata  ***  http://fm.no-ip.com/



Using wvdial and usb_modeswitch to connect to internet with usb internet key

2017-03-22 Thread Daniele Disco
Hi!
Usually to connect to internet my linux box (with gnome), I insert in a usb 
port my dongle 3G/4g and selecting in Network Manager the broad band connection 
configured the first time, selecting _Connect_ the pc goes in internet without 
problems (% of success 99.999).

Now I have to use a debian 8.0 version in an embedded system (Raspberry Pi 3), 
without graphical interface (if I use the version with any X Window System my 
code runs slowly), and connect this device to internet with the same internet 
usb key.

After google search I define a procedure to connect to internet but the % of 
success is 50%. So I think that somethings is wrong or is not present in my 
procedure. For this reason I ask your help.

Tools used wvdial, usb_modeswith

The conf file are:
usb_modeswitch.conf-
# Configuration for the usb_modeswitch package, a mode switching tool for
# USB devices providing multiple states or modes
#
# Evaluated by the wrapper script /usr/sbin/usb_modeswitch_dispatcher
#
# To enable an option, set it to "1", "yes" or "true" (case doesn't matter)
# Everything else counts as "disable"


# Disable automatic mode switching globally (e.g. to access the original
# install storage)

DisableSwitching=1

# Onda MT8205 LTE

DefaultVendor=0x19d2
DefaultProduct=0x0266

TargetVendor=0x19d2
TargetProduct=0x0265

StandardEject=1

MessageContent="55534243d8a5238624008685002400"

# Enable logging (results in a extensive report file in /var/log, named
# "usb_modeswitch_" and probably others

EnableLogging=0


# Optional increase of "delay_use" for the usb-storage driver; there are hints
# that a recent kernel default change to 1 sec. may lead to problems, particu-
# larly with USB 3.0 ports. Set this to at least 3 (seconds) in that case.
# Does nothing if the current system value is same or higher

SetStorageDelay=4

usb_modeswitch.conf- 

wvdial.conf-
[Dialer Defaults]
Auto DNS = yes
Init1 = ATZ
Init2 = ATQ0 V1 E1 S0=0   +FCLASS=0
Modem Type = Analog Modem
; Phone = 
ISDN = 0
; Password = 
New PPPD = yes
; Username = 
Modem = /dev/ttyUSB2
Baud = 9600

[Dialer ondaTim]
Init1 = ATH
Init2 = ATE1
Init3 = AT+CGDCONT=1,"IP","stringaAPN"
Stupid mode = yes
Phone = *99***1#
Modem = /dev/ttyUSB2
Username = blank
Dial Command = ATD
Password = blank
Baud = 460800
wvdial.conf- 

Procedure---
sudo usb_modeswitch -c /etc/usb_modeswitch.conf

verify if in the output of lsusb the product number is in modem mode (my is 
0x0265)

sudo modprobe usbserial vendor=0x19d2 product=0x0265

sudo wvdialconf /etc/wvdial.conf

sudo wvdial ondaTim
Procedure---
   
Can you hemp me to understand what is wrong or what is not present?
TIA



Re: installer defaults for desktops (was Re: Suggested edit)

2017-03-22 Thread Darac Marjal

On Tue, Mar 21, 2017 at 06:03:12PM +, Lisi Reisz wrote:

On Tuesday 21 March 2017 17:15:32 Catherine Gramze wrote:

Sent from my iPad


Note it is sent from an iPad!  Open Source all the way!

Incidentally, why did we need to know that?


These sorts of signatures are usually used on mobile devices for a 
number of reasons:


- Typing on a mobile tends to be less comfortable, or at least slower, 
than typing on a full-size keyboard. This lends to shorter, less 
detailed replies. The signature acts as a warning that "I'm not being 
brusque, I just don't have the capacity to state my case more 
loquaciously."


- Many mobile clients seem to restrict what you can put in a signature.  
You generally can't use formatting (as company branding might require), 
you often can't even use multiple lines. And if you want to read your 
signature from a pipe (so as to include a witty "fortune")? Good luck!




Lisi



--
For more information, please reread.


signature.asc
Description: PGP signature


Re: Unattended upgrades. Debian methods, please, not Ubuntu.

2017-03-22 Thread didier gaumet
there is a doc in the Debian wiki:
https://wiki.debian.org/UnattendedUpgrades




Re: outil de monitoring

2017-03-22 Thread david hannequin
Bonjour,

Après tout dépend de ton besoin de supervision. Sous Debian à mon avis
seul icinga2 me parait fonctionnel et moderne dans les dépots de
Debian. Pour les autres outils du même style c'est des dépots en
dehors du projet.

Bon courage pour ta migration

Le 21 mars 2017 à 10:54, Jean-Michel OLTRA
 a écrit :
>
> Bonjour,
>
>
> Le mardi 21 mars 2017, Eric Degenetais a écrit...
>
>
>> En même temps c'était déjà le cas des messages enjoignant l'OP à changer
>> d'OS...
>
> Mouais ! Surtout que je suis sous Debian depuis Potato, donc c'est pas
> demain la veille !
>
> --
> jm
>



-- 
David Hannequin



Re: rescaneo de geometria de disco.

2017-03-22 Thread OddieX
Claro, te decia k lo tires por las dudas de que no refresque pero se haya
agrandado... Tendrias que ver si la imagen del disco realmente se agrando
en tamaño, si no tenes un snapshot de la VM, y la otra es, si estas usando
LVM, podrias agregar otro disco y fue, lo agrandas desde LVM agregandole
otro disco al grupo de volumenes.


El 21 mar. 2017 23:51, "Epsilon Minus"  escribió:

>
>
>
> El 21 de marzo de 2017, 23:41, OddieX  escribió:
>
>
>
>> Le tiraste un rezise2fs -L100%FREE (creo que algo asi era el comando).
>>
>
> Ese comando es para ya el disco agrandado. redimensionar las particiones.
>
>
> Reiniciandolo deberia refrescar, habia otro comando tambien para refrescar
> la tabla d particiones pero no me acuerdo
>
>
> Lo reinicie y no refresca la tabla. No se que hacer.
>
>
> Gracias de todas formas.
>
>
>
>
>
>
>> El 21 mar. 2017 23:35, "Epsilon Minus" 
>> escribió:
>>
>>
>>
>> El día 21 de marzo de 2017, 23:22, Epsilon Minus <
>> theepsilonmi...@gmail.com> escribió:
>> > Hola Estimados.
>> >
>> > Tengo un problema,
>> >
>> > Tengo un Debian Wheezy, donde se le redimensiono un disco (se agrego
>> > espacio)  intento rescanear la geometria de discos y no hace nada.
>> >
>> > probe:
>> >
>> > echo "- - -" > /sys/class/scsi_host/host1/scan
>> >
>> > o
>> >
>> > echo '1' > /sys/class/scsi_disk/1\:0\:0\:0/device/rescan
>> >
>> > El host es un Hyper V (no lo elegí, mala suerte) redimensionaron un
>> > vhd. Pero no logro replicar ese disco dentro del Debian.  ¿Algún
>> > consejo?
>> >
>> > Luego tengo que extender el PV y el LV.
>> >
>> > Cualquier ayuda sera más que agradecida.
>> >
>> > Saludos
>> >
>> > Epsilon
>>
>>
>>
>>
>> *Perdon. Es un Debian Squeeze* .
>>
>>
>>
>


Re: aptitude is dangerous - any replacement?

2017-03-22 Thread Nemeth Gyorgy
2017-03-21 23:02 keltezéssel, Vincent Lefevre írta:
> On 2017-03-21 16:21:25 +0100, Nemeth Gyorgy wrote:
>> 2017-03-21 14:38 keltezéssel, Vincent Lefevre írta:
>>> Yes, but one can't exclude a package listed by apt-listbugs. 
>> You can. Just press 'h' (hold), and don't continue apt-get.
> I didn't know that apt-listbugs could do that. This is not documented
> and I've never tried.
>
>> On the next apt-get start this package will be in 'hold' state. And
>> later apt-listbugs will unhold the package automatically when the
>> bug is closed.
> One problem is that maintainers sometimes forget to close bugs
> (in particular if the bug has been fixed by upstream). It would
> be better to ask again when a new version is available (a bit
> like aptitude's "freeze" feature).
>
I currently use sid on my desktop (so bugs are relatively frequent) and
usually don't have to unhold packages manually. I didn't analyze
/usr/lib/ruby/vendor_ruby/aptlistbugs/aptcleanup deeply (this is in the
cron.daily file), but I think it also checks the version. Code snippet:

# are bugs that the user fears still affecting unpinned_candidate_version ?
$stderr.puts "Checking bug(s) #{feared_list} for
#{pkg_key_with_vers}" if $DEBUG
optionB = nil
if feared_list != "" and feared_list != nil
  optionB = "-B #{feared_list}"
end

So it seems that version check is also in the script.



Re: aptitude is dangerous - any replacement?

2017-03-22 Thread Johann Spies
What I do if I want to use experimental (or sid if I am on testing) is to
put
the deb-src-lines in my sources.list and then build a package when needed.
I find wajig convenient to use (another front end to apt) in this case e.g.

$ wajig build julia

Regards
Johann
-- 
Because experiencing your loyal love is better than life itself,
my lips will praise you.  (Psalm 63:3)


Re: Need to upgrade claws-mail on debian 7.1

2017-03-22 Thread Patrick Bartek
On Tue, 21 Mar 2017 08:44:18 + Joe  wrote:

> On Mon, 20 Mar 2017 15:12:38 -0700
> Patrick Bartek  wrote:
> 
> > On Mon, 20 Mar 2017 19:44:40 + Joe  wrote:
> > 
> > > On Mon, 20 Mar 2017 09:13:11 -0700
> > > Patrick Bartek  wrote:
> > >   
> > > > On Mon, 20 Mar 2017 04:47:50 + "Blair, Charles E III"
> > > >  wrote:
> > > >   
> > > > >I am using debian 7.11, which includes version
> > > > > 3.8.1 of claws-mail.  I have recently been having
> > > > > problems with this, and have been advised that I
> > > > > need to upgrade to 3.11.1.  It didn't seem possible
> > > > > to do this with aptitude, and I am hoping there is
> > > > > some other painless way.
> > > > 
> > > > You're SOL:  Claws 3.11 isn't available for Wheezy.  At least,
> > > > not that I've been able to find.
> > > > 
> > > >  A couple years ago, I too started having problems with Claws.
> > > > I could receive but couldn't send or reply.  Later, I was
> > > > unable to connect to my email providers at all.  They had
> > > > slowly changed their security protocols which Claws couldn't
> > > > handle.  I upgraded to 3.10 from Wheezy-Backports, but that
> > > > didn't help.  Had to be at least 3.11 which worked fine on my
> > > > Jessie install running in VirtualBox. Even looked into
> > > > compiling 3.11 from source. No go. Dependencies. Wheezy
> > > > libraries and such were too old.  And the newer libraries were
> > > > not available for Wheezy. Some had systemd dependencies as
> > > > well.  Compile them? Nope. Dependencies were the killer. Even
> > > > thought of adding the Jessie repos to get the libraries, but
> > > > that wouldn't work. I'd have to upgrade too much of Wheezy, if
> > > > it would work at all.  And I was fearful of trashing my
> > > > system.  So, I switched to Sylpheed.  Not as good as Claws, but
> > > > it worked.  Now, it's starting to have problems: Can't send
> > > > attachments.
> > > > 
> > > > The easiest solution if you want to use Claws is to upgrade to a
> > > > newer version of Debian.  Sorry.
> > > >   
> > > 
> > > If the problems are indeed about connectivity, possibly the use of
> > > specialist email connectivity software might help i.e. an MTA
> > > rather than an MUA. I'd be willing to bet that exim4 would deal
> > > with any connectivity problems, and unless it has been explicitly
> > > removed, it is part of a default Debian installation and may even
> > > be running at this very moment.
> > > 
> > > OK, there's a bit of a learning curve, but it may be less
> > > traumatic than upgrading the whole OS. It's a mainstream MTA,
> > > there is plenty of help on the Net, and this application, an
> > > outgoing smarthost with (presumably) authentication and/or TLS,
> > > isn't particularly exotic. Here are some basics:
> > > https://wiki.debian.org/Exim
> > > 
> > > I'm using claws on sid with exim4 on wheezy as smarthost, and I'm
> > > sending direct to the rest of the world without problems. I'm not
> > > currently using any authenticated sending from exim4, but I have
> > > done in the past.  
> > 
> > Well, the developer of Claws on his web site said the "problems"
> > users were experiencing was in Claws itself and it had been fixed
> > in 3.11. I don't know if it was a bug or something else. IIRC, the
> > problem was caused by the implementation of new security protocols
> > by email providers like Yahoo and GMail, among others, because of a
> > major breach Yahoo had a couple years ago.
> 
> Yes, it's common for email client applications to talk to remote SMTP
> servers, but the implementation of extra protocols is usually a game
> of catch-up, when people start complaining about individual problems.
> The primary job of an email client is to be an efficient interface
> between the user and email.
> 
> A 'mail server', on the other hand, normally has a vast range of
> options available long before email providers start using them. At
> any moment, the 'mail servers', exim4, postfix, sendmail etc. will
> pretty much always be more capable than the average client
> application. Their primary job is to talk to other email servers.
> 
> Here we have a situation where upgrading the client application is
> proving to be difficult, and I suggest that it *might* be easier to
> use a 'mail server' as an outgoing smarthost.

Thanks for the suggestion.  I'll look into it.  But as my Wheezy system
will soon be  "unsupported"  (when Stretch becomes the new stable),
installing and configuring a local mail server would seem to be a
waste of time: Wheezy is due to be replaced with a new OS soon.
Better to think about a mail server for THAT install than the 5 year
old one I have.  For now, slypheed is working well enough..

B



Re: Una de hostapd en debian 7...

2017-03-22 Thread Juan Lavieri

Hola Luis & listeros.


El 21-03-2017 a las 11:16 p.m., luisededios escribió:

Saludos a todos,

Estoy retomando un tema que tengo pendiente desde hace algún tiempo 
porque aun no lo he logrado poner en marcha. Me refiero a la 
implementación de un AP wifi en una laptop DELL a la cual le he 
instalado dos mini tarjetas wifi, wlan0 y wlan2.


Perdona pero  ¿Qué estás intentando hacer con esas 2 wifi's exactamente?



Hasta donde he llegado he logrado que el AP montado sobre wlan0 
conecte a otros dispositivos móviles y también que la laptop se 
conecte a la red(un móvil con zona wifi y datos móviles activados) 
mediante wlan2, pero parece que tengo problemas con el enrutamiento ip 
desde wlan0 y wlan2 en la propia laptop pues los móviles que se 
conectan al AP de la laptop no logran navegar. Desde la laptop si 
puedo navegar, pero desde los móviles conectados al AP de la laptop no 
logro navegar.


La ip del móvil con zona wifi y datos móviles activados es 
192.168.43.1, y la laptop toma la 192.168.43.156. Luego, el AP de la 
laptop tiene la ip fija 192.168.42.1 y asigna bien ips al resto de 
móviles que se conectan.


Repito. Desde la laptop puedo navegar correctamente pero desde los 
móviles conectados a ella no logro navegar.


Muestro la condiguración que he heco por si algún experto pueda 
mostrarme el error que estoy comentiendo.


1) Configurando el adaptador wifi(wlan0) con ip estática.

/etc/network/interfaces
allow-hostplug wlan0
iface wlan0 inet static
address 192.168.42.1
netmask 255.255.255.1

2) Instalación y conf del server DHCP.

apt-get install isc-dhcp-server

/etc/dhcp/dhcpd.conf
# option domain-name
# option domain-name-server
authoritative;

subnet 192.168.42.0 netmask 255.255.255.0 {
range 192.168.42.10 192.168.42.50;
option broadcast-address 192.168.42.255;
option routers 192.168.42.1;
default-lease-time 600;
max-lease-time 7200;
option domain-name "local";
option domain-name-servers 8.8.8.8, 8.8.4.4;
}

En /etc/default/isc-dhcp-server
DHCP_CONF=/etc/dhcp/dhcpd.conf
INTERFACES="wlan0"

3) Instalar y conf de hostapd.

interfaces=wlan0
driver=nl80211
ssid=test
hw_mode=g
channel=6
macaddr_acl=0
auth_algs=1
ignore_broadcast_ssid=0
#wpa=2   #todo lo que sigue si pongo contraseña al AP
#wpa_passphrase=secret
#wpa_key_mgmt=WPA-PSK
#wpa_pairwise=TKIP
#rsn_pairwise=CCMP

En /etc/default/hostapd
DAEMON_CONF="/etc/hostapd/hostapd.conf"

4) Configurando el enrutamiento IP entre wlan0 y wlan2.

En /etc/sysctl.conf
net.ipv4.ip_forward=1

ejecutar,

sh -c "echo 1 > /proc/sys/net/ipv4/ip_forward"

Para implementar un router en el AP, ejecutar,

iptables -t nat -A POSTROUTING -o wlan2 -j MASQUERADE
iptables -A FORWARD -i wlan2 -o wlan0 -m state --state 
RELATED,ESTABLISHED -j ACCEPT

iptables -A FORWARD -i wlan0 -o wlan2 -j ACCEPT

Para salvar las tablas de ruteo en /etc/iptables.ipv4.nat, ejecutar,

sh -c "iptables-save > /etc/iptables.ipv4.nat"

Adicionar, al final del fichero /etc/network/interfaces, lo siguiente 
para restaurar las tablas de ruteo cuando se inicia el AP.


pre-up iptables-restore < /etc/iptables.ipv4.nat

HASTA AQUI

A mi juicio, el problema lo tengo en las sentencias de iptables.

Este procedimiento lo he tomado desde un tutorial que encontré, en 
cual se enrutaba desde eth0 hasta wlan0 y yo lo ajusté sustituyendo 
eth0 por wlan2 pues tengo dos mini tarjeta wifi instaladas.


Anticipadamente, reciban mis agradecimientos.


De nada.

Saludos

--
Juan M Lavieri

Errar es de humanos, pero es mas humano culpar a los demás.