Re: disable auto-linking of /bin -> /usr/bin/

[tomas]

On Wed, Jan 10, 2024 at 11:49:02AM -0800, Mike Castle wrote:
> On Wed, Jan 10, 2024 at 10:57 AM  wrote:
> > Yes, the main reason for the separation of /usr has more or less
> > disappeared with the arrival of initramfs, but still... why.
> 
> To some extent, it will make it easier for packaging.

Yes, I get that. It's one of those flourishes which lie around
and somewhat complicate things. But given the drama of those
transitions, many of them just stay put and get the label "for
histerical raisins" slapped on, until the world changes so much
that they lose relevance anyway.

To me this one had the taste of a manichæan purge, but hey.

Cheers
-- 
t


signature.asc
Description: PGP signature

Re: Temporary failure in name resolution

[tomas]

On Wed, Jan 10, 2024 at 07:19:41PM +, Rodolfo Medina wrote:
> Greg Wooledge  writes:
> 
> > On Wed, Jan 10, 2024 at 06:34:53PM +, Rodolfo Medina wrote:
> >>  writes:
> >> > Where/how does this error message "appear"?
> >> 
> >> As an output of the `startx' command.
> >
> > It would be lovely to see the *entire* error message, in case some part
> > of it identifies the program that produced the error.  Many messages do.
> 
> 
> /etc/resolv.conf is there again (the system created it) but the error message
> does not seem to occur any more.  Even if it occurred again, I have no way to
> fetch it, cause it appears (it used to) at login.

I think this is it (all other advice in this thread about getting
/etc/hosts in order is not bad, but I think it wasn't your problem).

"The system" as you put it is probably dhcpd (or its systemd
cousin, whatever that's called these days). When it goes to
fetch an IP address, it also gets an address or two for the
local name servers, which it puts [1] in /etc/resolv.conf

I guess for some reason there was a stale entry there which
wasn't removed when you lost connectivity.

Cheers

[1] with some indirection or two, e.g. resolvconf
-- 
t


signature.asc
Description: PGP signature

Re: Temporary failure in name resolution

[David Wright]

On Thu 11 Jan 2024 at 10:10:43 (+0700), Max Nikulin wrote:

> There was a thread that "home" as the top level domain might not be
> really safe (somebody might register it). A reserved domain is
> "home.arpa" so e.g. to have "thinkpad", the /etc/hosts entry should be
> 
> 127.0.1.1   thinkpad.home.arpa thinkpad

https://features.icann.org/addressing-new-gtld-program-applications-corp-home-and-mail

These three would appear to be safe from being registered.

Cheers,
David.

Re: Change suspend type from kde menu

[Max Nikulin]

On 10/01/2024 01:59, Valerio Vanni wrote:

Il 06/01/2024 17:38, Max Nikulin ha scritto:


I would expect something like "Stop" either from /Player or from 
org.mpris.kaffeine.


I too expected something similar: stop and play (play for resume)


Have you tried "tree" and "introspect" for org.mpris.kaffeine (not 
org.kde.kaffeine)? It works for mpv:


busctl --user call org.mpris.MediaPlayer2.mpv \
/org/mpris/MediaPlayer2 org.mpris.MediaPlayer2.Player \
Stop


For this we don't need to look here:
"rmmod: ERROR: Module cx23885 is in use" seems enough to see that kernel 
module cannot be removed.


I am surprised by it. You have shown that kaffeine closes the device, so 
it should be possible to remove the kernel module:



Started with --lastchannel
Video stopped:
lrwx-- 1 valerio valerio 64  9 gen 19.51 6 -> /dev/dri/card0
lrwx-- 1 valerio valerio 64  9 gen 19.51 62 -> /dev/dri/renderD128
lrwx-- 1 valerio valerio 64  9 gen 19.51 7 -> /dev/dri/card0
lrwx-- 1 valerio valerio 64  9 gen 19.51 8 -> /dev/dri/card0
lrwx-- 1 valerio valerio 64  9 gen 19.51 9 -> /dev/dri/card0

no more /dev/dvb/, but still unable to remove module cx23885


My hypotheses:
- there are more kaffeine processes (ps xuwf)
- some external process is holding the device, e.g. pulseaudio or 
pipeware sound server. Tools that might help to find it: lsof or fuser 
(unsure concerning proper options)

- Some other IPC exposed by the driver and used by kaffeine.
- I have not idea if it is possible to create direct connection between 
the dvb device and the video card so that data pass without intermediate 
interaction with kaffeine.

Re: disable auto-linking of /bin -> /usr/bin/

[Stefan Monnier]

> If you were to issue 'ls -l /' You'll find that /bin, /sbin,
> lib{32,64,x32} are linked to their counterparts in /usr/. I under-
> stand the logic in doing so. However, for specific reasons that would
> require exhaustive explanations that I would prefer to save us all from
> me doing, I would like to break this behaviour by having /usr genuinely
> be whole heartedly installed on its own partition.

As mentioned by Andy, the symlinks still work fine when `/usr` is on
another partition.

> I'm cool with doing things the hard and painful way. Any details you
> can share that would allow me to figure out how to break, or divert
> this behaviour would be appreciated. I'm not elite with linux enough
> to figure this out, but I am comfertable with digging deep with the
> right background knowledge to navigate what's needed.

Assuming you still want to "unmerge" / and /usr, for some reason, I'd
start by replacing those top-level symlinks with directories full
of symlinks.  E.g. replace the `/bin` symlink with a fresh new `/bin`
directory which contains symlinks to everything in `/usr/bin`.

That should be pretty safe.  After that, you can start removing some of
those many symlinks, e.g. for those executables that have never lived in
`/bin` (you can (still) use `dpkg -L` or `dpkg -S` to figure out if
that executable "belongs to /usr or to /").

You may also decide to move some executables from `/usr/bin` to `/bin`
and place a symlink in `/usr/bin` for those (a.k.a. reverse the
direction of those symlinks).


Stefan

Re: Change suspend type from kde menu

[Max Nikulin]

On 10/01/2024 04:43, Valerio Vanni wrote:

Il 07/01/2024 06:44, Max Nikulin ha scritto:


setpriv --reuid 1000 --regid 1000 --init-groups --reset-env -- \
    env XDG_RUNTIME_DIR="/run/user/1000" \
    systemd-run --user --slice=app.slice -- \
    xterm



setpriv --reuid="$kafuid" --regid="$kafgid" --init-groups --reset-env \
   env XDG_RUNTIME_DIR=/run/user/"$kafuid" >  $kafdis 
XDG_CURRENT_DESKTOP=KDE \

---^^^

Do you really need it? I find it not really safe to use $kafdis without 
quotes. The pattern in grep is rather loose one, it may capture several 
variables and some of variables may have spaces in their values. On the 
other hand the current pattern should capture WAYLAND_DISPLAY.


The point is that kaffeine inherits environment from systemd user 
session. I have all necessary variables set in


 systemctl --user show-environment

My command works for me without explicit environment tricks.

   systemd-run --user --slice=app.slice /usr/bin/kaffeine 
--lastchannel > /dev/null 2>&1


P.S. You have explicit modprobe cx23885. Does it mean that this module 
is not autoloaded when udev discovers the device?

Re: Change suspend type from kde menu

[Max Nikulin]

On 11/01/2024 02:32, Valerio Vanni wrote:

Il 08/01/2024 04:29, Max Nikulin ha scritto:

On 07/01/2024 12:44, Max Nikulin wrote:


setpriv --reuid 1000 --regid 1000 --init-groups --reset-env -- \
    env XDG_RUNTIME_DIR="/run/user/1000" \
    systemd-run --user --slice=app.slice -- \
    xterm


Instead of tricks with setting proper context for a process executed 
system-wide, I would consider a process running in user sessions and 
listening for D-Bus events:


So your idea would be stopping and starting channel play by dbus messages?
I'm looking again with introspect, and I don't see anything like "stop" 
in kaffeine.


It is independent ideas:
- Do not deal with user processes in system context (like 
/usr/lib/systemd/system-sleep/ scripts)

- Try to release dvb tuner device, so module can be unloaded.

I believe, it is a bug in the cx23885 module that it can not handle 
suspend/resume (and probably hibernate/thaw).


The following is related to avoiding "setpriv" in system context and 
listening for D-Bus events in user session scope:


$ dbus-monitor --system 
"type='signal',interface='org.freedesktop.login1.Manager',member='PrepareForSleep'"


suspend:

signal time=1704679441.870349 sender=:1.6 -> destination=(null 
destination) serial=3187 path=/org/freedesktop/login1; 
interface=org.freedesktop.login1.Manager; member=PrepareForSleep^^^

    boolean true


resume:

signal time=1704679448.065409 sender=:1.6 -> destination=(null 
destination) serial=3233 path=/org/freedesktop/login1; 
interface=org.freedesktop.login1.Manager; member=PrepareForSleep

    boolean false

---^

A tiny python script may be more convenient than dbus-monitor and 
similar tools.


Killing and starting kaffeine in response to these signals may be a 
workaround if the application does not allow to release the device.


Not stopping playback and not releasing the device in response to the 
PrepareForSleep signal, from my point of view, is a bug in kaffeine. I 
have no idea if vlc (broken hardware acceleration in bookworm) or 
another application may be an alternative for you.


Stopping playback through D-Bus by a custom script might be performed 
either from PrepareForSleep D-Bus signal listener or from a system-sleep 
script. I will respond to another message.

Re: Temporary failure in name resolution

[Greg Wooledge]

On Thu, Jan 11, 2024 at 10:10:43AM +0700, Max Nikulin wrote:
> On 11/01/2024 03:25, Greg Wooledge wrote:
> > On Wed, Jan 10, 2024 at 07:19:41PM +, Rodolfo Medina wrote:
> > > Greg Wooledge  writes:
> > > > What is the output of the "hostname" command?
> > > 
> > > It's: `thinkpad'.
> > > 
> > > > What is the output of "grep -F $(hostname) /etc/hosts"?
> > > 
> > >   127.0.1.1   caterina-thinkpad.home  caterina-thinkpad
> > 
> > There's the problem, then.  You do not have "thinkpad" as an entry in
> > your /etc/hosts file, so the system is unable to lookup "the IP address"
> > for its own hostname.  X sessions tend to frown upon that.
> > 
> > Adding "thinkpad" to the 127.0.1.1 line should take care of this.  You
> > can retain the other fields, and simply use thinkpad as a second alias.
> 
> I would say that it is better to fix discrepancy between (likely)
> /etc/hostname and /etc/hosts and to use a consistent name. If "thinkpad" is
> the preferred one then update /etc/hosts otherwise check
> 
>  hostnamectl
> 
> and update (as root)
> 
>  hostnamectl hostname caterina-thinkpad

There's clearly some back story here that we're not privy to.  I wouldn't
want to assume that nothing is using the name "caterina-thinkpad", so it
would be wise to retain it.

> 127.0.1.1   thinkpad.home.arpa thinkpad

If something tries to look up "caterina-thinkpad" after you've removed
that alias, then we're back to the same problem, just in reverse.

The safe move is to retain both names, until the owner is sure that it's
safe to discard one of them.

Also, for the love of glob, WHY THE SYSTEMD bullshit... you change the
hostname on Debian by editing the /etc/hostname file, and then by
running the "hostname" command as root with the new name as its
argument (or rebooting).

I don't know why "hostnamectl" even exists as a concept.  It's repulsive.
It also fails to be init-system-agnostic, with no upside to compensate.

Re: Temporary failure in name resolution

[Max Nikulin]

On 11/01/2024 03:25, Greg Wooledge wrote:

On Wed, Jan 10, 2024 at 07:19:41PM +, Rodolfo Medina wrote:

Greg Wooledge  writes:

What is the output of the "hostname" command?


It's: `thinkpad'.


What is the output of "grep -F $(hostname) /etc/hosts"?


  127.0.1.1   caterina-thinkpad.home  caterina-thinkpad


There's the problem, then.  You do not have "thinkpad" as an entry in
your /etc/hosts file, so the system is unable to lookup "the IP address"
for its own hostname.  X sessions tend to frown upon that.

Adding "thinkpad" to the 127.0.1.1 line should take care of this.  You
can retain the other fields, and simply use thinkpad as a second alias.


I would say that it is better to fix discrepancy between (likely) 
/etc/hostname and /etc/hosts and to use a consistent name. If "thinkpad" 
is the preferred one then update /etc/hosts otherwise check


 hostnamectl

and update (as root)

 hostnamectl hostname caterina-thinkpad

There was a thread that "home" as the top level domain might not be 
really safe (somebody might register it). A reserved domain is 
"home.arpa" so e.g. to have "thinkpad", the /etc/hosts entry should be


127.0.1.1   thinkpad.home.arpa thinkpad

I have not tried it, but I expect that startx should have no issues with 
output redirection, so to capture its messages to a file


 startx |& tee /tmp/startx-messages.txt

Another places to look for errors are ~/.xsession-errors and

journalctl -b --user

Re: Vmware Workstation help opens abiword

[Max Nikulin]

On 11/01/2024 02:44, Valerio Vanni wrote:
After, guide was not showing anymore. Calling it (click on "help" on 
Vmware application) began opening Abiword.


In kde control panel -> app -> default, Firefox is set as default browser.


Likely when sorted by name Abiword is before Firefox and even before 
Chromium. So you you need to override defaults in a mimeapps.list either 
system-wide or user-wide.


https://wiki.debian.org/DefaultWebBrowser

Check associations for text/html, x-scheme-handler/http, 
x-scheme-handler/https (may be wrapped by mail applications)



grep -E 'x-scheme-handler/https?|text/x?html|application/xhtml' 
/usr/share/applications/mimeinfo.cache 
~/.local/share/applications/mimeinfo.cache /etc/xdg/mimeapps.list 
~/.config/mimeapps.list


For KDE try for various MIME types

ktraderclient5 --mimetype x-scheme-handler/https \
  --servicetype Application

Re: SMART Uncorrectable_Error_Cnt rising - should I be worried?

[David Christensen]

On 1/10/24 09:30, Michael Kjörling wrote:


My understanding is that it's even relatively common, at least
for flight-critical components, to use totally different
implementations (of both hardware and software), not just sourced from
different vendors, resellers or batches, such that the same software
bug _cannot_ reasonably appear in both, reducing the scope of software
errors to _specification_ bugs, which an inherently engineering field
(physical engineering, fluid dynamics, ...) is better equipped to deal
with early. Recent events notwithstanding.



Erlang has a different and interesting philosophy to software systems:

https://medium.com/pragmatic-programmers/error-handling-philosophy-d820bd68a469


David

Re: SMART Uncorrectable_Error_Cnt rising - should I be worried?

[David Christensen]

On 1/10/24 09:07, Curt wrote:

On 2024-01-10, David Christensen  wrote:

Given the OP's situation -- 8 consumer SSD's, same make and model,
possibly from a defective manufacturing batch, all purchased at the same
time, all deployed in the same RAID-6, all run 2.5 years 24x7, and all
suddenly showing lots of SMART warnings -- I would not have confidence
in that RAID.


It's curious, but I just heard something on French TV from a journalist
that's relevant to this. She said she'd covered the aeronautics field in
the past and mentioned the *principe de dissemblance* (dissimilarity
principle). Critical redundant parts on aircraft, she claimed, would be
sourced from different manufacturers in order to obviate the possibility
of redundant failures you've raised here.



https://en.wikipedia.org/wiki/Failure_analysis


Using components from different vendors is a known mitigation technique 
and can help in the right situations.



Relevant to this this thread, some people use disk drives from different 
manufacturers in their RAID's.  Doing so with RAID-10 (stripe of 
mirrors) is straight forward -- within each mirror, use brand A for the 
first disk, brand B for the second, brand C for the third (or hot 
spares), etc..  It then makes sense to do the same with HBA's -- use HBA 
brand X for the first disks in each mirror, HBA brand Y for the second 
disks, HBA brand Z for the third/ spare disks, etc..  For x86 
workstations and servers, ECC memory, dual network interfaces, and dual 
power supplies come to mind.  I am unclear about dual processors and/or 
dual memory banks.  Moving beyond one computer, the process continues 
with KVM/ serial console fabric, networks, electric power, cooling, 
etc..  It's just a question of what failure modes you want to protect 
against and how much time and money you want to spend.



David

Re: Kernel compiling 6.5 and beyound

[Herb Garcia]

Does this method also create the modules?

-Herb


On Tue, 2024-01-09 at 13:17 +0100, Michel Verdier wrote:
> On 2024-01-08, Herb Garcia wrote:
> 
> > I was able to compile Linux kernel 6.1.X. 
> > 
> > When I tried compiling kernel 6.5.x and ran into issues. 
> > 
> > I download the required dependencies as required per
> > https://www.kernel.org/doc/html/v6.7/process/changes.html#changes
> 
> To compile 6.5 I do
> 
> apt build-dep linux
> apt install build-essential libncurses-dev
> (last for running menuconfig with ncurses)
> make menuconfig
> make bindeb-pkg
> 

Re: Vmware Workstation help opens abiword

[Valerio Vanni]

Il 10/01/2024 22:28, Cindy Sue Causey ha scritto:

On 1/10/24, Valerio Vanni  wrote:

The issue began after update from debian 10 to 11. And it persists in 12.

Before, Vmware Workstation help was shown in default browser (it's an
html guide).
After, guide was not showing anymore. Calling it (click on "help" on
Vmware application) began opening Abiword.

Vmware Workstation has no option "open guide with...".

In kde control panel -> app -> default, Firefox is set as default browser.

If I uninstall abiword, logoff and login to kde, guide is shown in
Firefox. If I reinstall abiword, issue comes back.

Where should I look?



Hi.. Am taking a stab at this while you're waiting for others here.
What kinds of options are you offered if you try accessing this same
via your favorite file manager?


Now I see that it' not local html pages, it's online.
I remember local pages, but perhaps it was on older versions.

Without Abiword, Firefox tries to open links such as:

docs.vmware.com/en/VMware-Workstation-Pro/17.0/context?id=IDH_MAIN
docs.vmware.com/en/VMware-Workstation-Pro/17.0/context?id=IDH_CFG_MEMORY

But then Vmware site redirect to generic page:
https://docs.vmware.com/en/VMware-Workstation-Pro/index.html
BTW this is vmware's fault, and renders guide almost useless.

But it's still interesting to know why a link is passed to abiword 
instead of default browser.

/usr on NFS (was: Re: disable auto-linking of /bin -> /usr/bin/)

[Andy Smith]

Hello,

On Wed, Jan 10, 2024 at 10:41:05AM -0800, Mike Castle wrote:
> I did that for years.
> 
> Then again, when I started doing that, I was using PLIP over a
> null-printer cable.  But even after I could afford larger harddrives
> (so I had room to install /usr), and Ethernet cards (and later a hub),
> I still ran /usr over NFS.

You can still do it if you want, as long as your initramfs mounts
/usr from nfs, which I'm pretty sure it will without any difficulty
if you have the correct entry in /etc/fstab. I don't think anything
has gone out of its way to break that use it's just that it's been
given up on, and I don't blame Debian for that since it would mean
lots of work to bend upstream authors to a use case that they have
no interest in.

Time moved on and the way to do "immutable OS" evolved.

Just a couple of days ago I retired a Debian machine that had been
running constantly for 18½ years from the mostly-read-only 512M
CompactFlash boot device it came with. 

https://social.bitfolk.com/@grifferz/111704438510674644

Thanks,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Re: Vmware Workstation help opens abiword

[Cindy Sue Causey]

On 1/10/24, Valerio Vanni  wrote:
> The issue began after update from debian 10 to 11. And it persists in 12.
>
> Before, Vmware Workstation help was shown in default browser (it's an
> html guide).
> After, guide was not showing anymore. Calling it (click on "help" on
> Vmware application) began opening Abiword.
>
> Vmware Workstation has no option "open guide with...".
>
> In kde control panel -> app -> default, Firefox is set as default browser.
>
> If I uninstall abiword, logoff and login to kde, guide is shown in
> Firefox. If I reinstall abiword, issue comes back.
>
> Where should I look?


Hi.. Am taking a stab at this while you're waiting for others here.
What kinds of options are you offered if you try accessing this same
via your favorite file manager?

I just test drove any old file, coincidentally
(.)xsession-errors(.)old, by right clicking it and choosing Properties
via Thunar. In Trixie and I'm sure in others, Thunar's primary General
tab has an "Open With" option with a drop-down menu. I was able to
change my own long time existing file association issue just now.

If that option exists and seems like it might help but keeps reverting
back to useless, it might take root permissions to perform that
change, depending on the package involved.

DISCLAIMER for new Users: PLEASE BE CAREFUL if you get curious and go
poking around with something like this. I have been there, done that,
many years ago. Ended up rendering my entire computer system useless
while in Dolphin via Knoppix, I think it was. *oops*

File managers can be pretty darn powerful. They're one of my favorite
multi-times daily tools. Thank you, Developers!

Cindy :)
-- 
Talking Rock, Pickens County, Georgia, USA
* runs with rain drenched birdseed *

Re: Temporary failure in name resolution

[Greg Wooledge]

On Wed, Jan 10, 2024 at 07:19:41PM +, Rodolfo Medina wrote:
> Greg Wooledge  writes:
> > What is the output of the "hostname" command?
> 
> It's: `thinkpad'.
> 
> > What is the output of "grep -F $(hostname) /etc/hosts"?
> 
> It's:
> 
>  127.0.1.1   caterina-thinkpad.home  caterina-thinkpad

There's the problem, then.  You do not have "thinkpad" as an entry in
your /etc/hosts file, so the system is unable to lookup "the IP address"
for its own hostname.  X sessions tend to frown upon that.

Adding "thinkpad" to the 127.0.1.1 line should take care of this.  You
can retain the other fields, and simply use thinkpad as a second alias.

Re: disable auto-linking of /bin -> /usr/bin/

[Mike Castle]

On Wed, Jan 10, 2024 at 10:57 AM  wrote:
> Yes, the main reason for the separation of /usr has more or less
> disappeared with the arrival of initramfs, but still... why.

To some extent, it will make it easier for packaging.

Look at any package built using autoconf, for instance, you run:
./configure --prefix=/usr

Well, except for those you want installed in /, in which case you use
'--prefix=/'

But, what if you don't want all of those in /, you want some in / and
some in /usr?  Requires more manual work on part of the package
maintainer to make sure that things work properly, that files are
split across the destinations properly, reference config files
appropriately, and so on.

With usrmerge, that particular class of problems goes away.

Back when I used my own home grown distribution (I was doing Linux
>From Scratch before LFS was even a thing), that was one of the issues
I'd run into every once in a while.

mrc

Vmware Workstation help opens abiword

[Valerio Vanni]

The issue began after update from debian 10 to 11. And it persists in 12.

Before, Vmware Workstation help was shown in default browser (it's an 
html guide).
After, guide was not showing anymore. Calling it (click on "help" on 
Vmware application) began opening Abiword.


Vmware Workstation has no option "open guide with...".

In kde control panel -> app -> default, Firefox is set as default browser.

If I uninstall abiword, logoff and login to kde, guide is shown in 
Firefox. If I reinstall abiword, issue comes back.


Where should I look?

Re: Change suspend type from kde menu

[Valerio Vanni]

Il 08/01/2024 04:29, Max Nikulin ha scritto:

On 07/01/2024 12:44, Max Nikulin wrote:


setpriv --reuid 1000 --regid 1000 --init-groups --reset-env -- \
    env XDG_RUNTIME_DIR="/run/user/1000" \
    systemd-run --user --slice=app.slice -- \
    xterm


Instead of tricks with setting proper context for a process executed 
system-wide, I would consider a process running in user sessions and 
listening for D-Bus events:


So your idea would be stopping and starting channel play by dbus messages?
I'm looking again with introspect, and I don't see anything like "stop" 
in kaffeine.


$ dbus-monitor --system 
"type='signal',interface='org.freedesktop.login1.Manager',member='PrepareForSleep'"


dbus-monitor: unable to enable new-style monitoring: 
org.freedesktop.DBus.Error.AccessDenied: "Rejected send message, 1 
matched rules; type="method_call", sender=":1.1080" (uid=1000 pid=48803 
comm="dbus-monitor --system type='signal',interface='org") 
interface="org.freedesktop.DBus.Monitoring" member="BecomeMonitor" error 
name="(unset)" requested_reply="0" destination="org.freedesktop.DBus" 
(bus)". Falling back to eavesdropping.
signal time=1704679328.754948 sender=org.freedesktop.DBus -> 
destination=:1.1080 serial=2 path=/org/freedesktop/DBus; 
interface=org.freedesktop.DBus; member=NameAcquired

    string ":1.1080"
signal time=1704679441.870349 sender=:1.6 -> destination=(null 
destination) serial=3187 path=/org/freedesktop/login1; 
interface=org.freedesktop.login1.Manager; member=PrepareForSleep

    boolean true
signal time=1704679448.065409 sender=:1.6 -> destination=(null 
destination) serial=3233 path=/org/freedesktop/login1; 
interface=org.freedesktop.login1.Manager; member=PrepareForSleep

    boolean false

A tiny python script may be more convenient than dbus-monitor and 
similar tools.


It seems too complex for me.

Re: Temporary failure in name resolution

[Marco Moock]

Am 10.01.2024 um 19:19:41 Uhr schrieb Rodolfo Medina:

> > What is the output of "grep -F $(hostname) /etc/hosts"?  
> 
> It's:
> 
>  127.0.1.1   caterina-thinkpad.home  caterina-thinkpad

Add

::1 localhost localhost.localdomain ip6-localhost ip6-loopback
127.0.0.1   localhost localhost.localdomain

Re: Bookworm and ZFS (zfs-dkms 2.1.11) data corruption bug

[Xiyue Deng]

Jan Ingvoldstad  writes:

> Hi,
>
> It seems that Bookworm's zfs-dkms package (from contrib) has the data
> corruption bug that was fixed with OpenZFS 2.1.14 (and 2.2.2) on 2023-11-30.
>
> https://github.com/openzfs/zfs/releases/tag/zfs-2.1.14
>
> However, I see no relevant bug report in the bug tracker - have my
> searching skills failed?

You can check the developer page of zfs-linux[1] on which the "action
needed" section has information about security issues (along with
version info as Gareth posted).  The one you mentioned was being tracked
in [2] and the corresponding Debian bug is [3].  My guess is that as
zfs-linux is not in "main" but "contrib", and the issue is marked
"no-dsa" (see [4]), there may be no urgency to provide a stable update.
But you may send a follow up in the tracking bug and ask for
clarification from the maintainers on whether an (old)stable-update is
desired.

[1] https://tracker.debian.org/pkg/zfs-linux
[2] https://security-tracker.debian.org/tracker/CVE-2023-49298
[3] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056752
[4] 
https://security-team.debian.org/security_tracker.html#issues-not-warranting-a-security-advisory

--
Xiyue Deng

Re: Temporary failure in name resolution

[Rodolfo Medina]

Greg Wooledge  writes:

> On Wed, Jan 10, 2024 at 06:34:53PM +, Rodolfo Medina wrote:
>>  writes:
>> > Where/how does this error message "appear"?
>> 
>> As an output of the `startx' command.
>
> It would be lovely to see the *entire* error message, in case some part
> of it identifies the program that produced the error.  Many messages do.


/etc/resolv.conf is there again (the system created it) but the error message
does not seem to occur any more.  Even if it occurred again, I have no way to
fetch it, cause it appears (it used to) at login.


> Failing that, let's go out on a limb and guess that it's *your own*
> hostname that can't be resolved.
>
> What is the output of the "hostname" command?

It's: `thinkpad'.


> What is the output of "grep -F $(hostname) /etc/hosts"?

It's:

 127.0.1.1   caterina-thinkpad.home  caterina-thinkpad


> What is the output of "grep hosts /etc/nsswitch.conf"?

It's:

 hosts:  files mdns4_minimal [NOTFOUND=return] dns


-
Rodolfo

Re: disable auto-linking of /bin -> /usr/bin/

[tomas]

On Wed, Jan 10, 2024 at 10:41:05AM -0800, Mike Castle wrote:
> On Wed, Jan 10, 2024 at 9:53 AM Andy Smith  wrote:
> > น There was another use-case which is "sharing a read-only /usr
> >   between systems by NFS, etc." but at the time this was widely
> >   regarded a lost cause as so many other things violated the
> >   premise.
> 
> I did that for years.
> 
> Then again, when I started doing that, I was using PLIP over a
> null-printer cable.  But even after I could afford larger harddrives
> (so I had room to install /usr), and Ethernet cards (and later a hub),
> I still ran /usr over NFS.
> 
> Personally, I'm rather saddened by usrmerge.  But, such is life.

For me it's one of those fairly harmless but useless churns.

Yes, the main reason for the separation of /usr has more or less
disappeared with the arrival of initramfs, but still... why.

Cheers
-- 
t


signature.asc
Description: PGP signature

Re: Temporary failure in name resolution

[Greg Wooledge]

On Wed, Jan 10, 2024 at 06:34:53PM +, Rodolfo Medina wrote:
>  writes:
> > Where/how does this error message "appear"?
> 
> As an output of the `startx' command.

It would be lovely to see the *entire* error message, in case some part
of it identifies the program that produced the error.  Many messages do.

Failing that, let's go out on a limb and guess that it's *your own*
hostname that can't be resolved.

What is the output of the "hostname" command?

What is the output of "grep -F $(hostname) /etc/hosts"?

What is the output of "grep hosts /etc/nsswitch.conf"?

Re: disable auto-linking of /bin -> /usr/bin/

[Mike Castle]

On Wed, Jan 10, 2024 at 9:53 AM Andy Smith  wrote:
> น There was another use-case which is "sharing a read-only /usr
>   between systems by NFS, etc." but at the time this was widely
>   regarded a lost cause as so many other things violated the
>   premise.

I did that for years.

Then again, when I started doing that, I was using PLIP over a
null-printer cable.  But even after I could afford larger harddrives
(so I had room to install /usr), and Ethernet cards (and later a hub),
I still ran /usr over NFS.

Personally, I'm rather saddened by usrmerge.  But, such is life.

mrc

Re: Temporary failure in name resolution

[Rodolfo Medina]

 writes:

> On Wed, Jan 10, 2024 at 06:13:55PM +, Rodolfo Medina wrote:
>> Debian 12 on Thinkpad T450s.
>> 
>> The error message `Temporary failure in name resolution' appears whenever I
>> log into X with `startx' at prompt after boot, but it *only* occurs if the
>> PC is *not* connected to internet; otherwise it does not appear;
>> nevertheless, it annoys me and I wish to get rid of it.  Any suggestions?
>
> Where/how does this error message "appear"?

As an output of the `startx' command.


> Obviously, "something" is trying to resolve a host name and is unable to.
> Depending on which host name "it" is trying to resolve, that might be
> reasonable (i.e. if that host is "out there") or not.
>
> So let's try finding out what this "something" is...

The problem seems to be solved after I removed the file /etc/resolv.conf, that
included a certain nameserver...

Thanks,

Rodolfo

Re: Temporary failure in name resolution

[tomas]

On Wed, Jan 10, 2024 at 06:13:55PM +, Rodolfo Medina wrote:
> Debian 12 on Thinkpad T450s.
> 
> The error message `Temporary failure in name resolution' appears whenever I 
> log
> into X with `startx' at prompt after boot, but it *only* occurs if the PC is
> *not* connected to internet; otherwise it does not appear; nevertheless, it
> annoys me and I wish to get rid of it.  Any suggestions?

Where/how does this error message "appear"?

Obviously, "something" is trying to resolve a host name and is unable to.
Depending on which host name "it" is trying to resolve, that might be
reasonable (i.e. if that host is "out there") or not.

So let's try finding out what this "something" is...

Cheers
-- 
t


signature.asc
Description: PGP signature

Temporary failure in name resolution

[Rodolfo Medina]

Debian 12 on Thinkpad T450s.

The error message `Temporary failure in name resolution' appears whenever I log
into X with `startx' at prompt after boot, but it *only* occurs if the PC is
*not* connected to internet; otherwise it does not appear; nevertheless, it
annoys me and I wish to get rid of it.  Any suggestions?

Thanks,

Rodolfo

Re: Bookworm and ZFS (zfs-dkms 2.1.11) data corruption bug

[Gareth Evans]

> On 9 Jan 2024, at 06:41, Jan Ingvoldstad  wrote:
> 
> Hi,
> 
> It seems that Bookworm's zfs-dkms package (from contrib) has the data 
> corruption bug that was fixed with OpenZFS 2.1.14 (and 2.2.2) on 2023-11-30.
> 
> https://github.com/openzfs/zfs/releases/tag/zfs-2.1.14
> 
> However, I see no relevant bug report in the bug tracker - have my searching 
> skills failed?
> 
> --
> Jan

This prompted me to look for updates.  

2.2.2-3 is available in bookworm-backports.  

Is this, or a later version, likely to be made available in bookworm-updates?

Does anyone have experience with the backports version?   

Thanks
Gareth

Re: SMART Uncorrectable_Error_Cnt rising - should I be worried?

[Dan Ritter]

Curt wrote: 
> On 2024-01-10, David Christensen  wrote:
> >
> >
> > Given the OP's situation -- 8 consumer SSD's, same make and model, 
> > possibly from a defective manufacturing batch, all purchased at the same 
> > time, all deployed in the same RAID-6, all run 2.5 years 24x7, and all 
> > suddenly showing lots of SMART warnings -- I would not have confidence 
> > in that RAID.
> 
> It's curious, but I just heard something on French TV from a journalist
> that's relevant to this. She said she'd covered the aeronautics field in
> the past and mentioned the *principe de dissemblance* (dissimilarity
> principle). Critical redundant parts on aircraft, she claimed, would be
> sourced from different manufacturers in order to obviate the possibility
> of redundant failures you've raised here.

I don't know whether that's true in aeronautics, but at the home
and small business scale, that's always something I've
practiced.

At the large scale, server assemblers don't want to mix parts
very often (you can get some of them to do it), so you usually
need your servers as a whole to be the unit of redundancy, not
disks in an array.

-dsr-

Re: SMART Uncorrectable_Error_Cnt rising - should I be worried?

[Michael Kjörling]

On 10 Jan 2024 17:07 -, from cu...@free.fr (Curt):
> It's curious, but I just heard something on French TV from a journalist
> that's relevant to this. She said she'd covered the aeronautics field in
> the past and mentioned the *principe de dissemblance* (dissimilarity
> principle). Critical redundant parts on aircraft, she claimed, would be
> sourced from different manufacturers in order to obviate the possibility
> of redundant failures you've raised here.

Indeed. My understanding is that it's even relatively common, at least
for flight-critical components, to use totally different
implementations (of both hardware and software), not just sourced from
different vendors, resellers or batches, such that the same software
bug _cannot_ reasonably appear in both, reducing the scope of software
errors to _specification_ bugs, which an inherently engineering field
(physical engineering, fluid dynamics, ...) is better equipped to deal
with early. Recent events notwithstanding.

As for David's note on OP's RAID array, I think that point has been
sufficiently made by now in this thread; and let's hope that the new
backup drive arrives soon enough that a full copy can be made before
there is any actual data loss.

-- 
Michael Kjörling  https://michael.kjorling.se
“Remember when, on the Internet, nobody cared that you were a dog?”

Re: SMART Uncorrectable_Error_Cnt rising - should I be worried?

[Curt]

On 2024-01-10, David Christensen  wrote:
>
>
> Given the OP's situation -- 8 consumer SSD's, same make and model, 
> possibly from a defective manufacturing batch, all purchased at the same 
> time, all deployed in the same RAID-6, all run 2.5 years 24x7, and all 
> suddenly showing lots of SMART warnings -- I would not have confidence 
> in that RAID.

It's curious, but I just heard something on French TV from a journalist
that's relevant to this. She said she'd covered the aeronautics field in
the past and mentioned the *principe de dissemblance* (dissimilarity
principle). Critical redundant parts on aircraft, she claimed, would be
sourced from different manufacturers in order to obviate the possibility
of redundant failures you've raised here.
>
> David
>
>

Re: Request for translation of "Back In Time"

[Iliana Panagopoulou]

Hello,

I can help with that.
I will start contributing on Webslate as soon as possible.

Thank you,
Iliana Panagopoulou

Στις Τετ 10 Ιαν 2024 στις 2:24 μ.μ., ο/η  έγραψε:
>
> Hello,
>
> I am upstream maintainer of "Back In Time" [1] [2] a GUI backup tool
> using rsync in the back.
>
> I would like to kindly ask if someone want so contribute to the Greek
> translation of that application. The current state of translation is at
> 26%. Some strings are left for translation and the others should get a
> review of native speakers.
>
> We offer a web-based front-end on our translation platform based on
> Weblate and hostet at Codeberg.org.
>
>  
>
> Thanks in advance
> Christian Buhtz
>
> [1] -- 
> [2] -- 
> [3] -- 
>


-- 
Ηλιάνα Παναγοπούλου

Re: disable auto-linking of /bin -> /usr/bin/

[Andy Smith]

Hello,

On Wed, Jan 10, 2024 at 05:06:33AM +, miphix wrote:
> If you were to issue 'ls -l /' You'll find that /bin, /sbin,
> lib{32,64,x32} are linked to their counterparts in /usr/. I under-
> stand the logic in doing so. However, for specific reasons that would
> require exhaustive explanations that I would prefer to save us all from
> me doing, I would like to break this behaviour by having /usr genuinely
> be whole heartedly installed on its own partition.

Why do you believe that putting /usr on its own partition will
break anything, much less anything to do with usrmerge?

Debian has always supported /usr on its own partition; the only
thing that changed in recent history is that such a mount will take
place in the initramfs. The use case that was rendered unsupported
at that time was separate usr *with no initramfs*¹.

As you can still symlink /bin to /usr/bin even when /usr is
mounted from somewhere else, usrmerge should still work too.

Perhaps you have some reason for not wanting a usrmerged system that
isn't what you explained. I'd be interested to know what it was if
so, but I don't think it is a good idea.

The reasons why I think that are:

1) a non-usrmerged layout is not supported. You are going to make
   life hard for yourself by encountering problems that Debian
   maintainers aren't obliged to care about.

2) Most other distros are already usrmerged long before Debian was.
   So every other piece of software "outside" Debian is expecting
   that layout too.

We can stroke our real or imaginary beards until the cows come home
about whether it is bad form to assume usrmerge or whatnot but is it
a hill you want to die on?

> I am comfertable with digging deep with the right background
> knowledge to navigate what's needed.

Thing is, at this point it's being different just for the sake of
it, as far as I can see.

Thanks,
Andy

¹ There was another use-case which is "sharing a read-only /usr
  between systems by NFS, etc." but at the time this was widely
  regarded a lost cause as so many other things violated the
  premise.

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Re: SMART Uncorrectable_Error_Cnt rising - should I be worried?

[David Christensen]

On 1/10/24 01:35, Michael Kjörling wrote:

On 9 Jan 2024 14:34 -0800, from dpchr...@holgerdanske.com (David Christensen):

I don't know how to interpret the "Pre-fail" notation for the other
attributes.


AIUI "Pre-fail" indicates the drive is going to fail soon and should be
replaced.


Only if the attribute hits the "failure" threshold, whatever that
happens to be or mean for that particular attribute.



If you choose to run RAID member drives all the way to failure, then you 
need to have a reasonable expectation that the remaining drives have 
enough reliability and the RAID has enough redundancy to protect the 
data until the sysadmin notices the failed drive(s), the sysadmin 
replaces the failed drive(s), and the RAID resilvers.



Given the OP's situation -- 8 consumer SSD's, same make and model, 
possibly from a defective manufacturing batch, all purchased at the same 
time, all deployed in the same RAID-6, all run 2.5 years 24x7, and all 
suddenly showing lots of SMART warnings -- I would not have confidence 
in that RAID.



David

Re: Fail2ban, grote logfiles

[Paul van der Vlis]

Op 10-01-2024 om 11:15 schreef Paul van der Vlis:

Misschien heb ik de oplosssing. Ik heb de loglevel van "3" veranderd in 
"INFO".


Het probleem is hierdoor opgelost ;-)

Groet,
Paul


--
Paul van der Vlis Linux systeembeheer Groningen
https://vandervlis.nl/

Request for translation of "Back In Time"

[c . buhtz]

Hello,

I am upstream maintainer of "Back In Time" [1] [2] a GUI backup tool 
using rsync in the back.


I would like to kindly ask if someone want so contribute to the Greek 
translation of that application. The current state of translation is at 
26%. Some strings are left for translation and the others should get a 
review of native speakers.


We offer a web-based front-end on our translation platform based on 
Weblate and hostet at Codeberg.org.




Thanks in advance
Christian Buhtz

[1] -- 
[2] -- 
[3] -- 

Re: Fail2ban, grote logfiles

[Paul van der Vlis]

Hoi Gijs en anderen,

Op 10-01-2024 om 10:12 schreef Gijs Hillenius:

On 10 January 2024 09:06 Paul van der Vlis, wrote:


Hoi,

Sinds kort heb ik er last van dat fail2ban erg grote logfiles heeft,
nu is hij bijvoorbeeld alweer 5,9GB. Volgens mij gaat het om SSH
aanvallen. Ik heb maar weinig machines waar SSH openstaat voor de
wereld, daarom kan ik niet goed vergelijken. Mijn pogingen om de logs
minder verbose te maken hielpen niet, er is iets anders aan de hand
denk ik.

Dit soort dingen staan er in:
-
2024-01-10 08:58:03,574 fail2ban.filter [790516]: HEAVY
Looking for failregex 20 - '^(?P(?PAccepted
\\w+)) for (?P\\S+) from
(?:\\[?(?:(?:::f{4,6}:)?(?P(?:\\d{1,3}\\.){3}\\d{1,3})|(?P(?:[0-9a-fA-F]{1,4}::?|::){1,7}(?:[0-9a-fA-F]{1,4}|(?<=:):)))\\]?|(?P[\\w\\-.^_]*\\w))(?:\\s|$)'


Zegt jullie dit misschien iets?


Dag Paul!

Ik zie deze ^^^ meldingen niet in mijn logs. Maar dat zegt weinig.

bij mij is het loglevel = INFO


Ik had het al nog lager gezet. Toch lijken dit debug-meldingen.

Misschien heb ik de oplosssing. Ik heb de loglevel van "3" veranderd in 
"INFO". Dit staat in /etc/fail2ban/fail2ban.local:


# [Definition]
# loglevel = 4
#
# Option: loglevel
# Notes.: Set the log level output.
# 1 = ERROR
# 2 = WARN
# 3 = INFO
# 4 = DEBUG
# Values: [ NUM ]  Default: 1
#

Dan zou je een "3" verwachten. Maar in fail2ban.conf staan voorbeelden 
met b.v. "INFO".


Ondertussen al 15 minuten geen verbose meldingen meer in de logs!


Wat ik niet goed begrijp uit je post: is de maat van de log file een
probleem? 


Ja, het kost veel ruimte, ook in de backups.


Lost logrotate dat niet op?


Het maakt het kleiner, dat wel.


Mijn servertje had lang geleden moeitje met de groeiende maat van de
Sqlite3 file, die werd te zwaar voor het geheugen van de host. Ik heb
(toen) in fail2ban.conf de purge op 24 uur aangezet, dat houdt het
beperkt:  dbpurgeage = 86400

du -h /var/lib/fail2ban/fail2ban.sqlite3 -> 187M


OK. Leuk om te onthouden. Vooral voor servers met weinig geheugen.

Maar ondertussen ook gezien dat er een alternatief voor fail2ban is, 
misschien moet ik daar ook eens naar gaan kijken, want ik vind de 
support van Fail2ban maar matig.

https://packages.debian.org/bookworm/crowdsec

Groet,
Paul


--
Paul van der Vlis Linux systeembeheer Groningen
https://vandervlis.nl/

Re: SMART Uncorrectable_Error_Cnt rising - should I be worried?

[Michael Kjörling]

On 9 Jan 2024 14:34 -0800, from dpchr...@holgerdanske.com (David Christensen):
>> I don't know how to interpret the "Pre-fail" notation for the other
>> attributes.
> 
> AIUI "Pre-fail" indicates the drive is going to fail soon and should be
> replaced.

Only if the attribute hits the "failure" threshold, whatever that
happens to be or mean for that particular attribute.

-- 
Michael Kjörling  https://michael.kjorling.se
“Remember when, on the Internet, nobody cared that you were a dog?”

Re: Fail2ban, grote logfiles

[Gijs Hillenius]

On 10 January 2024 09:06 Paul van der Vlis, wrote:

> Hoi,
>
> Sinds kort heb ik er last van dat fail2ban erg grote logfiles heeft,
> nu is hij bijvoorbeeld alweer 5,9GB. Volgens mij gaat het om SSH
> aanvallen. Ik heb maar weinig machines waar SSH openstaat voor de
> wereld, daarom kan ik niet goed vergelijken. Mijn pogingen om de logs
> minder verbose te maken hielpen niet, er is iets anders aan de hand
> denk ik.
>
> Dit soort dingen staan er in:
> -
> 2024-01-10 08:58:03,574 fail2ban.filter [790516]: HEAVY
> Looking for failregex 20 - '^(?P(?PAccepted
> \\w+)) for (?P\\S+) from
> (?:\\[?(?:(?:::f{4,6}:)?(?P(?:\\d{1,3}\\.){3}\\d{1,3})|(?P(?:[0-9a-fA-F]{1,4}::?|::){1,7}(?:[0-9a-fA-F]{1,4}|(?<=:):)))\\]?|(?P[\\w\\-.^_]*\\w))(?:\\s|$)'
> 
>
> Zegt jullie dit misschien iets?

Dag Paul!

Ik zie deze ^^^ meldingen niet in mijn logs. Maar dat zegt weinig.

bij mij is het loglevel = INFO


Wat ik niet goed begrijp uit je post: is de maat van de log file een
probleem? Lost logrotate dat niet op?



Mijn servertje had lang geleden moeitje met de groeiende maat van de
Sqlite3 file, die werd te zwaar voor het geheugen van de host. Ik heb
(toen) in fail2ban.conf de purge op 24 uur aangezet, dat houdt het
beperkt:  dbpurgeage = 86400

du -h /var/lib/fail2ban/fail2ban.sqlite3 -> 187M

Fail2ban, grote logfiles

[Paul van der Vlis]

Hoi,

Sinds kort heb ik er last van dat fail2ban erg grote logfiles heeft, nu 
is hij bijvoorbeeld alweer 5,9GB. Volgens mij gaat het om SSH aanvallen. 
Ik heb maar weinig machines waar SSH openstaat voor de wereld, daarom 
kan ik niet goed vergelijken. Mijn pogingen om de logs minder verbose te 
maken hielpen niet, er is iets anders aan de hand denk ik.


Dit soort dingen staan er in:
-
2024-01-10 08:58:03,574 fail2ban.filter [790516]: HEAVY 
Looking for failregex 20 - '^(?P(?PAccepted \\w+)) 
for (?P\\S+) from 
(?:\\[?(?:(?:::f{4,6}:)?(?P(?:\\d{1,3}\\.){3}\\d{1,3})|(?P(?:[0-9a-fA-F]{1,4}::?|::){1,7}(?:[0-9a-fA-F]{1,4}|(?<=:):)))\\]?|(?P[\\w\\-.^_]*\\w))(?:\\s|$)'



Zegt jullie dit misschien iets?

Groet,
Paul


--
Paul van der Vlis Linux systeembeheer Groningen
https://vandervlis.nl/