Re: Anybody familiar with dd (copy)?

2023-11-03 Thread Arno Lehmann

Hi,

Am 03.11.2023 um 20:37 schrieb Schwibinger Michael:

Good evening
I want to copy a problem-DVD to HD with DD.
Or is there any other software which can do it in an easy way?


Is this a vide DVD or data?


I found:

dd if=/dev/sr0 of=/tmp/dvd.bin conv=noerror oflag=direct

It does not work.


What does happen? If you do not give information that allows to 
determine the error (if there is one) we can at best guess.



What do I do wrong?


You forgot to describe what actually does happen. I believe that there 
were quite a few instances where people explained that you have to 
provide information if you want useful replies.


Cheers,

Arno


Regards
Sophie




--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: Anybody familiar with dd (copy)?

2023-11-05 Thread Arno Lehmann

Hello,

Am 05.11.2023 um 12:19 schrieb Schwibinger Michael:

Good morning
Thank You.

Can this help:

https://apple.stackexchange.com/questions/39504/best-way-to-copy-all-files-ignoring-errors,,hotmail


I do not know.

...



I put in a DVD
and try to copy the data to HD

mc is saying:
Cannot copy.

Do You want to ignore the DVD?


I do not know mc, but what you describe is definitely not a full 
description of an error. Probably because mc is designed to hide those. 
In that case, you'd have to look at lower levels to actually see what is 
going on.



I think there was a bug during burning.


One important step in solving problems is identifying the problem.

That latest statement of yours indicates that you have not yet done so. 
You need to get beyond the stage of assuming, believing or thinking 
something might have happened -- you need to know.



Is "dd" the best idea?


Quite surely not.

Better find out what actually is on your DVD first. I have not worked 
with DVD writing for at least 10 years, and I do not intend to in the 
future, but I'm sure there are tools that can tell you about sessions 
and whatever you can have on the different flavours of writable DVDs. 
Once you know that level is good, you'll start to look at file systems.


After that, eventually, files and copying *may* become relevant.

I would propose you just stop spending time on those topics all those 
details may not be interesting to you. On the other hand, if the data is 
really important, it's time to start learning about how DVD writing 
actually works. A mailing list is not going to be very efficient here, 
better start differently, for example here: 
http://fy.chalmers.se/~appro/linux/DVD+RW/ and follow the links and make 
sure ypu actually understand those information. You probably will need a 
few packs of writable DVDs because experimenting and failing can be 
invaluable elements of learning.


It can actually be fun.

Cheers,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: Network tcp/iptables issue with XRDP

2023-10-24 Thread Arno Lehmann

Hi Henggi, all,

Am 24.10.2023 um 14:04 schrieb Henggi:

Hi list,

Completely stuck here, any clue appreciated!

Trying to bring up XRDP service on Debian 11-bullsyeye (arm64, incl. backports, 
fully up-to-date) which is only listening on „lo“ interface (not eth0) even 
netstat indicates otherwise:
-> incoming tcp syn/ack on localhost interfact (lo) works fine
-> incoming tcp syn/ack on eth0 interface seems not to reach app listening process 
(while other services on same host are working just fine via the network - so it’s not 
an „physical" network issue).
-> iptables are cleared and not aware of any other netfilter running…


I suggest to verify the other netfiler options.

Recently I encountered something similar, and my usual test for local 
firewall being active,


iptables -L -n

came back with policies "accept" all over the place, and no particular 
rules.


Took me a while to understand that firewalld can still do its job.

So, probably useful to check with

systemctl status firewalld

and use firewallcmd in an appropriate manner, if you find that to be active.

Good luck!

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: Network tcp/iptables issue with XRDP

2023-10-24 Thread Arno Lehmann

Hello,

Am 24.10.2023 um 16:19 schrieb Henggi:
...

As I mentioned in my 1st email, I think (afaik) that no other netfitler 
module/service is running.


My anecdote was intended to illustrate that beliefs are not really good 
tools to diagnose problems ;-)



root@server:~# systemctl status firewalld
Unit firewalld.service could not be found.


Ok, so whatever it is, it's not firewalld managed on the local host.

What does

nft list ruleset

show?
(Unfortunately, this is all I know about netfilter diagnostics... and I 
couldn't even get this far without internet search engine :-)



However, then there are kernel modules loaded when looking for „net OR filter 
OR fire OR ip“ as followed (of which I assume are just loaded as part of the 
default base system but not doing anyhting - how to be sure of it):

root@server:~# lsmod |egrep -i "net|filter|fire|ip"
inet_diag  28672  1 tcp_diag
iptable_nat16384  0
nf_nat 49152  1 iptable_nat
iptable_filter 16384  0
nf_defrag_ipv6 20480  1 nf_conntrack
nf_defrag_ipv4 16384  1 nf_conntrack
nfnetlink  20480  1 nf_tables
ip_tables  32768  2 iptable_filter,iptable_nat
x_tables   53248  3 iptable_filter,ip_tables,iptable_nat
ipv6  557056  20

Just for reference:

# lsmod | grep -E '^nf' | wc -l
34


so there may be a lot more, which your grep filter hid from you.

I'm also noticing that fwbuilder, my tool of choice, seems to be 
scratching on the border line between "stable" and "legacy"...


Cheers,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



OpenCL with Radeon GPU

2023-04-24 Thread Arno Lehmann

Hi all,

I'm currently trying to set up a new workstation and wanted to enable 
OpenCL for future use.


GPU hardware is an AMD Radeon RX 6750 XT.

I have a base installation of Debian 12 up and running, kernel 6.1.0.7 
including amdgpu and Mesa 22.3.


Any attempt to actually run any OpenCL program results in an error:

fatal error: cannot open file 
'/usr/lib/clc/gfx1030-amdgcn-mesa-mesa3d.bc': No such file or directory


which is depending on the using program reported more or less easily 
visible. clinfo is sufficient to show this.


Trying to diagnose this with available documentation I learned that
- I am not even able to determine if OpenCL itself should work,
- if it should work with the hardware I have here,
- which versions of amdgpu, xserver, Mesa, llvm or clang I need or which 
particular drivers / packages to install


I have tried several versions of the possible packages, but lacking 
documentation that makes sense to me that was more like blindly poking 
in the dark.


I even tried following some advice to use AMD's out-of-kernel driver 
pack, but the installation script stumbles over dependencies (which may 
or may not be due to the not-yet-stable base distro).


Anyway, the current state is less than satisfying, because I don't even 
understant if OpenCL with Radeon RX 6xxx GPU can even work on Linux.


I would give a different distro a try, but as a mostly-Debian-person I'm 
not really inclined to start learning to maintain more distros. Just 
using Windows would be a solution I would not appreciate at all...


So, my question here: Can anybody confirm this can work in general, or 
even point me to a place for current, correct documentation?


Alternatively, a pointer to where I short report those problems -- 
Debian bug (which package?), freedesktop.org's mesa, Linux kernel 
developers would be appreciated.



Thanks,

Arno


--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: OpenCL with Radeon GPU

2023-04-24 Thread Arno Lehmann

Hi Timothy,

Am 24.04.2023 um 23:38 schrieb Timothy M Butterworth:



On Mon, Apr 24, 2023 at 4:00 PM Sarunas Burdulis 
mailto:saru...@math.dartmouth.edu>> wrote:


On 4/24/23 14:02, Arno Lehmann wrote:

...

Yes, in general OpenCL for current AMD GPUs works with the open source
Linux kernel's amdgpu.ko module. On Ubuntu one can install ROCm from
AMD's repositories

`apt install rocm-opencl-runtime`

which is open source well, but not in standard repositories. Not
sure if
that extends to Debian.


Debian has: `sudo apt info rocm-device-libs` which provides openCL runtime.


That did not change things, clinfo still causes the
=== CL_PROGRAM_BUILD_LOG ===
fatal error: cannot open file 
'/usr/lib/clc/gfx1030-amdgcn-mesa-mesa3d.bc': No such file or directory


message which seems to indicate that some devie specific stuff is missing.

I'll try to install the Ubunto packages later as this may require some 
serious cleanup first (and sorry for replying to you directly earlier... 
I guess after this days work, hitting the "Reply to List" button was a 
bit beyond my capabilities).


Thanks for your suggestions!

Cheers,

Arno


I don't know if this can be substituted in any degree by Mesa.

-- 
Sarunas Burdulis

Dartmouth Mathematics
math.dartmouth.edu/~sarunas <http://math.dartmouth.edu/~sarunas>

· https://useplaintext.email <https://useplaintext.email> ·



--
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/ <https://www.debian.org/>
⠈⠳⣄⠀⠀


--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: OpenCL with Radeon GPU

2023-04-25 Thread Arno Lehmann

Hi Jörg-Volker,

Am 25.04.2023 um 11:19 schrieb Jörg-Volker Peetz:

Hi,

which mesa packages do you have installed?


None providing OpenCL capabilities at that time, but if you followed 
this thread, you are aware of this already:


# LANG=C dpkg -l '*mesa*' | cut -c 1-72
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Tri
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ NameVersion  Archite
+++-===--===
ii  libegl-mesa0:amd64  22.3.6-1+deb12u1 amd64
un  libegl1-mesa-dev   
un  libgl1-mesa-dev
ii  libgl1-mesa-dri:amd64   22.3.6-1+deb12u1 amd64
un  libgl1-mesa-glx
ii  libglapi-mesa:amd64 22.3.6-1+deb12u1 amd64
un  libgles2-mesa-dev  
ii  libglu1-mesa:amd64  9.0.2-1.1amd64
ii  libglx-mesa0:amd64  22.3.6-1+deb12u1 amd64
un  libwayland-egl1-mesa   
ii  mesa-amdgpu-common-dev  1:22.3.0.50403-1538762.20.04 amd64
ii  mesa-amdgpu-omx-drivers:amd64   1:22.3.0.50403-1538762.20.04 amd64
ii  mesa-amdgpu-va-drivers:amd641:22.3.0.50403-1538762.20.04 amd64
ii  mesa-amdgpu-vdpau-drivers:amd64 1:22.3.0.50403-1538762.20.04 amd64
ii  mesa-common-dev:amd64   22.3.6-1+deb12u1 amd64
un  mesa-opencl-icd
ii  mesa-utils  8.5.0-1  amd64
ii  mesa-utils-bin:amd648.5.0-1  amd64
un  mesa-utils-extra   
ii  mesa-va-drivers:amd64   22.3.6-1+deb12u1 amd64
ii  mesa-vdpau-drivers:amd6422.3.6-1+deb12u1 amd64
ii  mesa-vulkan-drivers:amd64   22.3.6-1+deb12u1 amd64
un  mesag3 
un  xlibmesa3  



In Debian testing I see the package `mesa-opencl-icd`.
I have no experience with opencl and AMD graphic cards but are very 
interested how it works in Debian.


That's more or less where I am myself... seems a bit too complex for me, 
at this time ;-)


As I trust the documentation in general, I am kind of confident that the 
problems I see derive from my usage of a too recent GPU; the older 
Radeon Architectures probably works out of the box.


The wiki page https://wiki.debian.org/AtiHowTo would deserve a bit of an 
overhaul, I think, seeing that it does not mention OpenCL at all, for 
example. If I just knew what to put there, I'd be happy to suggest 
something...


Best results so far are with the AMD vendor drivers which are *not* 
intended to be used on Debian:


# LANG=C dpkg -l '*rocm*' | cut -c 1-72
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Tri
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name  Version   Architecture Description
+++-=-=--===
un  procmail (no descrip
ii  rocm-core 5.4.3.50403-121~20.04 amd64Radeon Open
ii  rocm-device-libs  1.0.0.50403-121~20.04 amd64Radeon Open
ii  rocm-language-runtime 5.4.3.50403-121~20.04 amd64Radeon Open
ii  rocm-ocl-icd  2.0.0.50403-121~20.04 amd64opencl buil
ii  rocm-opencl   2.0.0.50403-121~20.04 amd64opencl buil
ii  rocm-opencl-runtime   5.4.3.50403-121~20.04 amd64Radeon Open


Cheers,

Arno


Regards,
Jörg.



--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: OpenCL with Radeon GPU

2023-04-25 Thread Arno Lehmann

Hi all,

a bit of research resulted in me finding this (old) page, which 
indicated there were some environment variables I could use to control 
memory allocation of AMD's OpenCL implementation:


https://community.amd.com/t5/drivers-software/solved-clinfo-reports-error-33-of-quot-global-free-memory-amd/td-p/172760

So I decided to give that a try.

First step: Ensure I can run an OpenCL program from the shell. I used 
the Primegrid binary for that:


# 
/var/lib/boinc-client/projects/www.primegrid.com/genefer22g_linux64_22.12.02 
-h

geneferg version 22.12.2 (linux x64, gcc-7.5.0, boinc-7.20.2)
Copyright (c) 2022, Yves Gallot
genefer is free source code, under the MIT license.

Command line: '-h'

Running on device 'gfx1031', vendor 'Advanced Micro Devices, Inc.', 
version 'OpenCL 2.0 ', driver '3513.0 (HSA1.1,LC)'.

33000^{2^15} + 1: 00:00:35, 0.0386 ms/bit, data size: 1.12 MB.
2^{2^16} + 1: 00:01:28, 0.0489 ms/bit, data size: 2.25 MB.
12000^{2^17} + 1: 00:04:35, 0.0784 ms/bit, data size: 4.5 MB.
1800^{2^18} + 1: 00:14:01, 0.133 ms/bit, data size: 9 MB.
550^{2^19} + 1: 00:49:15, 0.252 ms/bit, data size: 18 MB.
200^{2^20} + 1: 01:58:46, 0.325 ms/bit, data size: 24 MB.
91^{2^21} + 1: 07:04:18, 0.613 ms/bit, data size: 48 MB.
27^{2^22} + 1: 25:34:55, 1.22 ms/bit, data size: 96 MB.
100^{2^22} + 1: 30:51:50, 1.33 ms/bit, data size: 96 MB.
50^{2^23} + 1: 116:24:31, 2.64 ms/bit, data size: 192 MB.


So that worked.

It also did not cause an error, but of course, test data != real 
workload, right?


Next step Ensure I can reproduce the error:

# 
/var/lib/boinc-client/projects/www.primegrid.com/genefer22g_linux64_22.12.02 
-p -n 22 -b 1053460 -f gproof

geneferg version 22.12.2 (linux x64, gcc-7.5.0, boinc-7.20.2)
Copyright (c) 2022, Yves Gallot
genefer is free source code, under the MIT license.

Command line: '-p -n 22 -b 1053460 -f gproof'

Running on device 'gfx1031', vendor 'Advanced Micro Devices, Inc.', 
version 'OpenCL 2.0 ', driver '3513.0 (HSA1.1,LC)', data size: 96 MB.

0.0202% done, 28:15:37 remaining, 1.21 ms/bit.


Interesting, this seems to work without problem. Right now, I'm at

7.29% done, 26:21:57 remaining, 1.22 ms/bit.


which is much longer than what I've seen before.

My conclusion for now: The boinc service must have some limits set.

systemctl show gives me, among others:

LimitCPU=infinity
LimitCPUSoft=infinity
LimitFSIZE=infinity
LimitFSIZESoft=infinity
LimitDATA=infinity
LimitDATASoft=infinity
LimitSTACK=infinity
LimitSTACKSoft=8388608
LimitCORE=infinity
LimitCORESoft=0
LimitRSS=infinity
LimitRSSSoft=infinity
LimitNOFILE=524288
LimitNOFILESoft=1024
LimitAS=infinity
LimitASSoft=infinity
LimitNPROC=253399
LimitNPROCSoft=253399
LimitMEMLOCK=8388608
LimitMEMLOCKSoft=8388608
LimitLOCKS=infinity
LimitLOCKSSoft=infinity
LimitSIGPENDING=253399
LimitSIGPENDINGSoft=253399
LimitMSGQUEUE=819200
LimitMSGQUEUESoft=819200
LimitNICE=0
LimitNICESoft=0
LimitRTPRIO=0
LimitRTPRIOSoft=0
LimitRTTIME=infinity
LimitRTTIMESoft=infinity


My first candidate would be LimitMEMLOCK as I suspect that, for 
interaction between GPU and CPU, shared and locked would be a likely 
way. (You notice I know nearly nothing of OpenCL...)



I do know how 'systemctl edit' works, though, and set the limit to 1 GB:

LimitMEMLOCK=1073741824
LimitMEMLOCKSoft=1073741824

Which did not help, same error after similar time.

Still, seeing that I can run the binary in question from the shell, I'm 
kind of confident this should be solvable via proper unit configuration.



Which leaves me with one question for this mail thread: Can anybody 
recommend a test program for OpenCL functionality?



Thanks,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: OpenCL with Radeon GPU

2023-04-25 Thread Arno Lehmann

Hi Yvan,

Am 25.04.2023 um 11:06 schrieb Yvan Masson:

Le 24/04/2023 à 23:57, Arno Lehmann a écrit :

Hi Timothy,

Am 24.04.2023 um 23:38 schrieb Timothy M Butterworth:



On Mon, Apr 24, 2023 at 4:00 PM Sarunas Burdulis 
mailto:saru...@math.dartmouth.edu>> wrote:


    On 4/24/23 14:02, Arno Lehmann wrote:

...
    Yes, in general OpenCL for current AMD GPUs works with the open 
source

    Linux kernel's amdgpu.ko module.

...
I don't know anything about this topic, but for such a issue the first 
thing I do is to search inside packages contents from this page:

https://www.debian.org/distrib/packages


I did that, but there are quite some assumptions implied by this 
approach, mostly that a file of that particular name is *required* for 
nay OpenCL implementation with this hardware -- and that is something I 
hesitated to believe in :-)


In you case, the results might indicate that your GPU is not supported 
by Debian ?

https://packages.debian.org/search?searchon=contents=mesa3d.bc=path=stable=any


I'll try to install the Ubunto packages later as this may require some 


Always this same typo of mine   ^
This is either the reason for, or the result of, me not liking Ubuntu ;-)


serious cleanup first


Well, I did some of that cleanup (essentially it was removing the 
relevant mesa packages, purging the configuration (removing the entries 
in the /etc/OpenCL/vendors directory) and leaving the one from the AMD 
packages behind.


The results were most exciting:
- clinfo had no error messages any more
- I could start OpenCL Primegrid tasks via boinc

Definitely a step forward.

Unfortunately there are more steps ahead, as any Primegrid task using 
the GPU fails with an error:


opencl error: CL_OUT_OF_HOST_MEMORY

As I have no other real OpenCL workload I can try with any reliability, 
and I also have lots of host memory available, I suspect this due to the 
messy state of the software or its installation. And, as the 
installation has definitely not been done in any documented manner, I 
would not be surprised if that's the problem.


So, the challenge remains to find a way that reliably provides a working 
system, but it seems as though Mesa is not going to be the way towards 
this solution.


Thanks for all your input so far!

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: OpenCL with Radeon GPU

2023-04-26 Thread Arno Lehmann

Hi Jörg-Volker,

On 26.04.23 at 11:34, Jörg-Volker Peetz wrote:

Hi Arno,

Arno Lehmann wrote on 25/04/2023 12:54:

Hi Jörg-Volker,

Am 25.04.2023 um 11:19 schrieb Jörg-Volker Peetz:

...

In Debian testing I see the package `mesa-opencl-icd`.
I have no experience with opencl and AMD graphic cards but are very 
interested how it works in Debian.


That's more or less where I am myself... seems a bit too complex for 
me, at this time ;-)


I'm wondering if package mesa-opencl-icd would do the trick (version 
22.3.6-1+deb12u1 like the other installed mesa packages). From the 
description it seems to be the right package:


That's the package I tried initially which failed all my (limited) 
testing due to the hardware not being supported.


Mesa 23 is available as experimental, but I did not manage to install 
that due to dependencies.


In the end, you'll have to test with your particular hardware, I think 
-- I've not been able to find a reliable and realistic list of working 
hard- and software combinations.




Current state, by the way, is that I'm fighting with boinc and systemd 
in this environment. OpenCL reminds me of the (good|bad) days of 
building my own kernel based upon incomplete information ;-)


Would be fun if I could sink a few days in it.

Cheers,

Arno
--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: why bookworm isn't called deb12?

2023-07-07 Thread Arno Lehmann

While I found most of this discussion not very appealing...

Am 07.07.2023 um 15:05 schrieb jeremy ardley:
...
One option I've not seen yet is a MS kernel running with a GNU 
framework. It's entirely feasible, but unlikely to date.



How about this:
  07/07/2023   15:19.32   /home/mobaxterm  uname -a
CYGWIN_NT-10.0-WOW Mitochondrium 3.3.5(0.341/5/3) 2022-06-12 08:16 i686 
GNU/Linux



--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: ipv6: temp address does not renew

2023-06-26 Thread Arno Lehmann

Hi Andreas,

Am 26.06.2023 um 11:13 schrieb Andreas B:

Hi,

I'm very puzzled by the behaviour of ipv6 temp addresses on Debian 12.

Expected behaviour: as soon as a temp address becomes deprecated, a
new one is generated. This is the behaviour on Debian 11.


Reasonable expectation, I think.


...
Tested on two different machines; the problem exist on both.


Seems to work correctly on my single Debian 12 system:

$ ip -6 a | sed -e 's/[0-9a-f]\{1,4\}:/:/g'
: lo:  mtu 65536 state UNKNOWN qlen 1000
inet6 ::1/128 scope host
   valid_lft forever preferred_lft forever
: eno:  mtu 1500 state UP qlen 1000
inet6 :::::::bef4/64 scope global 
temporary dynamic

   valid_lft 86180sec preferred_lft 14180sec
inet6 :::::::71be/64 scope global 
temporary deprecated dynamic

   valid_lft 86180sec preferred_lft 0sec
inet6 :::::::4c58/64 scope global 
temporary deprecated dynamic

   valid_lft 86180sec preferred_lft 0sec
inet6 :::::::267a/64 scope global 
temporary deprecated dynamic

   valid_lft 86180sec preferred_lft 0sec
inet6 :::::::d25b/64 scope global 
temporary deprecated dynamic

   valid_lft 86180sec preferred_lft 0sec
inet6 :::::::2cee/64 scope global 
temporary deprecated dynamic

   valid_lft 86180sec preferred_lft 0sec
inet6 :::::::4717/64 scope global 
dynamic mngtmpaddr noprefixroute

   valid_lft 86180sec preferred_lft 14180sec
inet6 :::::ce35/64 scope link noprefixroute
   valid_lft forever preferred_lft forever

This is using network manager with simple default settings, the IPv6 
address is correctly auto-generated.


Settings are

/proc/sys/net/ipv6/conf/all/temp_prefered_lft: 86400
/proc/sys/net/ipv6/conf/all/temp_valid_lft: 604800
/proc/sys/net/ipv6/conf/all/use_tempaddr: 0
/proc/sys/net/ipv6/conf/default/temp_prefered_lft: 86400
/proc/sys/net/ipv6/conf/default/temp_valid_lft: 604800
/proc/sys/net/ipv6/conf/default/use_tempaddr: 0
/proc/sys/net/ipv6/conf/eno1/temp_prefered_lft: 86400
/proc/sys/net/ipv6/conf/eno1/temp_valid_lft: 604800
/proc/sys/net/ipv6/conf/eno1/use_tempaddr: 2
/proc/sys/net/ipv6/conf/lo/temp_prefered_lft: 86400
/proc/sys/net/ipv6/conf/lo/temp_valid_lft: 604800
/proc/sys/net/ipv6/conf/lo/use_tempaddr: -1


Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: Why does Debian have code names for releases?

2023-06-26 Thread Arno Lehmann

Hi all,

I have read a few replies here.

I am in no way affiliated with those people who originally introduced 
the names or assign them now.


The only real answer to the actual question that I can see is "It's a 
tradition".


Also, I struggle with the names, always need to go to the project web 
page or wikipedia if I need to look up which version has which name, and 
it's always a nuisance.


A small one, though. Also, I really like the Debian project, its 
resulting software collections, and thus my wish is to keep those code 
names, as inconsistent and hard to memorize they are. It's Debian, and I 
like it. I still have etchnhalf running on two old boxes, even :-)



Oh, and also, for any sort of managed installation all this would not 
matter much. On those manually maintained and upgraded systems where it 
does make a difference, the real pain is in other places.


Cheers,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: OpenCL with Radeon GPU

2023-05-08 Thread Arno Lehmann
Thanks for pointing me there... I tried the suite myself, and got 
results that at least confirmed some stuff works :-)


Cheers,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: OpenCL, boinc, and systemd resource limits

2023-05-10 Thread Arno Lehmann

Hi all,

just to give this a reasonable conclusion... it was indeed a matter of 
systemd service unit file setup, as described at


https://github.com/BOINC/boinc/issues/4948
https://www.primegrid.com/forum_thread.php?id=10048

Mail to the package maintainers with a suggestion on how this could be 
improved has been sent.


Cheers,

Arno


--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: how to find out regdomain/country of wifi network

2023-05-13 Thread Arno Lehmann

Hi hl,

Am 13.05.2023 um 11:19 schrieb hl:

freebsd ask me regdomain/country of wifi when i set up wifi


Shouldn't there be some documentation available?


my wifi works in buster, how to find out regdomain/country it uses?


Try this:

root@redacted:~# iw phy phy0 reg get
global
country 00: DFS-UNSET
(2402 - 2472 @ 40), (N/A, 20), (N/A)
(2457 - 2482 @ 20), (N/A, 20), (N/A), AUTO-BW, NO-IR
(2474 - 2494 @ 20), (N/A, 20), (N/A), NO-OFDM, NO-IR
(5170 - 5250 @ 80), (N/A, 20), (N/A), AUTO-BW, NO-IR
(5250 - 5330 @ 80), (N/A, 20), (0 ms), DFS, AUTO-BW, NO-IR
(5490 - 5730 @ 160), (N/A, 20), (0 ms), DFS, NO-IR
(5735 - 5835 @ 80), (N/A, 20), (N/A), NO-IR
(57240 - 63720 @ 2160), (N/A, 0), (N/A)



but ifconfig isn't available in buster


I doubt that ifconfig is aware of such information.

Cheers,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



OpenCL, boinc, and systemd resource limits

2023-05-08 Thread Arno Lehmann

Hi all,

back to trying to get OpenCL-based boinc workloads running.

It appears that the AMD-provided OpenCL stack works to some extent under 
Debian 12. However, I have some problems with OpenCL-Using boinc-managed 
PrimeGrid programs.


I do get an error that seems to indicate some resource limit being involved:

Error: opencl error: CL_OUT_OF_HOST_MEMORY

when I run the boinc client through systemd.

If the boinc client is run from the shell, for example as

sudo -u boinc boinc

in its proper working directory, everything behaves correctly.

Given the circumstances I suspect some sort of limit on memory.

I just have no idea how I can diagnose this further, or even how to fix 
it. An attempt with a unit file override with


[Service]
LimitMEMLOCK=1073741824
LimitMEMLOCKSoft=1073741824

was not successful.

Does anybody have an idea, or can share recommendation where to ask for 
more advice? (Debian project, i.e. here because this might be 
integration / packaging related, freedesktop.org for systemd, boinc 
project, perhaps -- trying to get assistance at PrimeGrid did so far not 
result in anything helpful.)



Thanks,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: Things I don't touch with a 3.048m barge pole: USB storage (Was Re: Unidentified subject!)

2024-02-09 Thread Arno Lehmann

Hi all,

Am 08.02.2024 um 21:38 schrieb Andy Smith:

Hello,

On Thu, Feb 08, 2024 at 05:40:54PM +0100, Ralph Aichinger wrote:

On Thu, 2024-02-08 at 15:36 +, Andy Smith wrote:

I learned not to go there a long time ago and have seen plenty of
reminders along the way from others' misfortunes to not ever go
there again myself.


How does a breaking USB disk differ from a breaking SATA disk?


My own experience is that it's often harder to notice and diagnose -- 
because on top of the actual storage and its "native" interface such as 
SATA or NVMe/PCIe, you have the whole stack of USB things.


And misbehaving USB devices usually result in first working on the USB 
end -- try different port, port directly on mainboard, or a powered hub, 
watch out for native USB 3 or 3.0 Gen 1 -- we can see this on this 
mailing list, too.


Then, USB storage is usually a single device single, if it breaks, it's 
data is lost, whereas SATA/SAS/NVMe can more easily be integrated into 
redundancy providing systems.


On top of all that, my own, admittedly anecdotal, experience is that 
USB/Firewire-to-IDE/SATA adapters and their power supplies are more 
fragile than actual disks. Most of the external hard disks I ever used 
have been replaced because of their enclosures or power supplies failing.


So, I tend to agree with Andy, and I also don't notice any moving 
goalposts in his statements...



In my experience it happens more often and also brings with it
frequent issues of poor performance and other reliability issues
like just dropping off the USB bus. There is almost always a better
way.


For home users / small office environments, that leaves the problem of 
how to do backups -- USB drives are the most appealing storage system 
for such purposes, but also seem to be less reliable than the primary 
storage. What do you do? Throw more of the USB disks onto the problem?


Or is "public" cloud the solution?

Whatever you do, even purely personal storage requirements become a bit 
of a nightmare when you start thinking about how to make sure your 
photos and videos are around when your kids are grown up...



Cheers,

Arno


Thanks,
Andy



--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: LifeCD

2023-12-14 Thread Arno Lehmann

Hi Joe,

On 14.12.23 at 19:01, Joe wrote:

On Thu, 14 Dec 2023 13:41:04 +0200
y...@vienna.at wrote:


I no longer try to make the lifecd.img of debianworking perfect
and now I change to KNOPPER as it is really much better.

I really do recommend it.



Knoppix is excellent for the purposes for which it is designed. But it
is not upgradable, every new Knoppix must be a new installation.


yxcv does explicitly *not* want to install.


Debian is designed with a lot of effort going into making it upgradable
indefinitely, as well as for being a server OS. Knoppix is mainly
intended for troubleshooting, particularly hardware.


Quite so. And I doubt there are good ways to add a wide range of 
additional software, but that's something he or she will have to check 
out. Probably move to a different mailing list in between, though.


Cheers,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: Fwd: Could we please cease this thread now? [WAS Re: lists]

2023-12-21 Thread Arno Lehmann

21.12.2023 at 15:25 Pocket:

(forwarded direct mail)

Stop this. There's still a slight chance that some of the list readers 
have not yet decided to ignore your mail.


Also stop trying to trigger some sort of guilt her. It's not going to work.

Cheers,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: Image handling in mutt

2023-12-11 Thread Arno Lehmann

All,

I do not see the relevance of the discussion about file name extensions, 
types, suffixes for Debian. Even more so as you are at the stage of 
repeating statements without bringing new value. In fact, there seems to 
be no goal with this thread.



I would ask you to continue this discussion elsewhere.

Thanks,

Arno


--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: ToG Linux (first draft of a RFC) ...

2023-12-09 Thread Arno Lehmann

Hello,

On 09.12.23 at 10:13, Albretch Mueller wrote:

On 12/7/23, Arno Lehmann  wrote:

it's quite interesting that you use a platform such as wordpress,
running code you can not control, to discuss such matters.


  I was just brainstorming, dumping a stream of consciousness with a
relatively comprehensive outline of the main ideas.


Your paranoia needs an adjustment, because the above is what would make 
you targetable.


...

- You can not use the same hardware air gapped and non air gapped.


  I beg to differ and at the end of the day this is something that can
be physically/technically proved.


It has been proven.

...

  Well, not really! Booting a Debian Live DVD doesn't take more time
than booting Windows (from scratch) and the whole idea of using a
package extensions USB pen drive would automate updates. This
basically is all there is to maintaining it.


No.


You would be basically
making use of the BIOS and RAM of a computer


You can not trust those.

...

  As anyone could see you could even run a network of detached
computers without networking interfaces in a "touch of God" kind of
way,



At this point it becomes quite clear that we have a misunderstanding at 
a very low level. Sentences like "run a network of ... computers without 
networking interfaces" are something I can not really grasp with the 
facilities I have.


Cheers,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: Synaptic Problem

2023-12-10 Thread Arno Lehmann

Hi all,

Am 10.12.2023 um 16:53 schrieb to...@tuxteam.de:

On Sun, Dec 10, 2023 at 10:47:09AM -0500, Stephen P. Molnar wrote:

I have just reinstalled Bookworm.

Unfortunately, when I tru tto use synaptic I get the following error:

E: The package brscan4 needs to be reinstalled, but I can't find an archive
for it.


brscan4 is not in the official Debian repos. Perhaps you have installed
it from another source which has disappeared.

Superficial Internet search suggests that it is a Brother thing.


Indeed it is.

Brother have some installation helper script, but that is not really 
playing nicely with the idea of using remote repos for installation. It 
may be simplest to use dpkg to uninstall the brscan4 package, do the 
necessary upgrades etc., and then install the brother stuff again.


That way, you'll also have relatively up to date Brother drivers.

If you want to avoid the odyssey through Brother's web site, have a look 
at https://pieterhollander.nl/post/brother-printer-debian/ and consider 
just believing them.


Cheers,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: Synaptic Problem

2023-12-10 Thread Arno Lehmann

Hello,

Am 10.12.2023 um 17:58 schrieb Stephen P. Molnar:
I appreciated the suggestion, but it didn't solve the problem with 
Synaptic.



On 12/10/2023 11:03 AM, Arno Lehmann wrote:

Hi all,

Am 10.12.2023 um 16:53 schrieb to...@tuxteam.de:

On Sun, Dec 10, 2023 at 10:47:09AM -0500, Stephen P. Molnar wrote:

I have just reinstalled Bookworm.

Unfortunately, when I tru tto use synaptic I get the following error:

E: The package brscan4 needs to be reinstalled, but I can't find an 
archive

for it.


Does synaptic still insist on the brscan4 package after it is uninstalled?

In that case, there must be some dependency involved. I have not used 
synaptic a lot, but doesn't it give an explanation *why* it needs the 
package?


Cheers,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: Change suspend type from kde menu

2024-01-03 Thread Arno Lehmann

Am 03.01.2024 um 17:41 schrieb Greg Wooledge:
...

Bear in mind that this entire approach is a bit of a hack, with some
baked-in assumptions about who's logged in on which DISPLAY.  If this
works for you, then that's great.


Manually restarting whatever application was affected would be simpler, 
but...



But some people might need to extend
this to check for the actual logged-in account, rather than assuming it's
the primary user.  (Left as an exercise, because unfortunately there is
no good way to do that, as far as I know anyway.)



I would start with something like

w | awk -e '$3==":0" { print $1 }'

A cleaner approach would be to record what was killed in the pre-suspend 
phase and recreate that post wakeup, in my opinion.



Cheers,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: 512e vs 4K sector confusion

2024-01-14 Thread Arno Lehmann

Hi andy,

Am 14.01.2024 um 09:15 schrieb Andy Smith:

On Sun, Jan 14, 2024 at 08:01:52AM +, Andy Smith wrote:

If necessary and if there is a way, I *can* nuke off the target
machine's "foo" volume group and recreate the RAID array if I have
to make it 512e format. But obviously I'd like some way to move this
disk image and have it still work without having to meddle inside it
much — it is a VM disk.


I think I may be able to use hdparm to reformat these Ultrastar DCs
from 4kn to 512e…

...

Thoughts?



Reshaping the target system's storage may be the quickest and most 
reliable solution.


If you expect there may be future cases with similar problems -- the 
other way around would be much worse, i.e. you have a source storage 
with 4k sectors, and target that does not support it -- these posts


https://unix.stackexchange.com/questions/748208/lvm-and-device-mapper-logical-volume-device-sector-size

https://unix.stackexchange.com/questions/676534/creating-an-ssd-partition-with-a-different-block-size

might be good starting points to work out a real solution.

As far as I know, however, it is not possible to change the block sizes 
using any of the software layers involved -- they all inherit from their 
base layer, which means from the actual devices, eventually.


Fortunately, I never had to solve such issues myself, but that's 
probably because I prefer working at the file system level. Block level 
just has too many pitfalls for my simple tastes ;-)


I'm getting curious to see what happens if I have to mix 512- and 
4k-sector disks in one RAID, though.


Cheers,

Arno


--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: Thunderbird filters

2024-01-14 Thread Arno Lehmann

Gene,

Am 14.01.2024 um 16:56 schrieb gene heskett:

On 1/14/24 04:58, David Christensen wrote:

find . -xdev -iname '*filter*'

gene@coyote:/etc$ sudo find . -xdev -iname '*filter*'


why sudo, and why in /etc ?

Cheers,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: Thunderbird filters

2024-01-14 Thread Arno Lehmann

Am 14.01.2024 um 23:00 schrieb gene heskett:

On 1/14/24 11:10, Arno Lehmann wrote:

Gene,

Am 14.01.2024 um 16:56 schrieb gene heskett:

On 1/14/24 04:58, David Christensen wrote:

find . -xdev -iname '*filter*'

gene@coyote:/etc$ sudo find . -xdev -iname '*filter*'


why sudo, and why in /etc ?
/etc only because I was there and sudo to get around a whole passel of 
no permissons.

I thought find was global. Its not? My mistake then.


It might be helpful if you either started doing exactly what gets 
proposed, and not something else based upon assumptions.


Even better, try to *understand* what you type. The find program, for 
example, has a decent manual page, and it's a very old unix tool, and 
thus should be covered in any tutorial, manual, or introduction 
textbook. I guess today you'll even find youtube videos.


Anyway, it seems you already decided your mails are gone, so it's 
pointless investigating further.


Perhaps it would be useful to remove all existing filters, if they tend 
to delete all your mails. I would even propose to configure yll your 
mail accounts to avoid removing mails from servers, and probably even 
see if you can make the mail servers read-only. After all, nearly every 
program you use seems to insist on deleting your data or at least 
breaking your software, if not your hardware.


Cheers,

Arno


Thanks Arno


Cheers,

Arno



Cheers, Gene Heskett.


--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Thunderbird filters (was: call me puzzled.)

2024-01-12 Thread Arno Lehmann

Hi Gene,

Am 12.01.2024 um 14:31 schrieb gene heskett:
I'm using tbird as an email agent, but it just did something both 
strange and scary.


Its filters have been working very spotty, only when the phase of the 
moon was right. And it missed moving a msg from the nut list to the 
local nut sbbdir, so I went to the filter menu and had it add a new 
filter based on that msg.  Then told it to "run it now". Apparently a 
big mistake!!


tbird took about an hour, totally cleaned out the inbox at my mail 
server of 4080 some messages, w/o adding or moving to anything, 
absolutely zip to any local mail directory. No local msgs were played 
with, but I've lost several hundred often used addresses that were 
stashed in my inbox.


Does anybody have a clue what did that?


You will have to share the actual filter and actions you configured 
before anybopdy can develop any clue.


Also, adding the actual version of thunderbird will be useful.

And it may be relevant to have the account type, too -- pop3, imap, 
whatever server side, and how your local mail storage is organized.


Cheers,

Arno


Thanks.

Cheers, Gene Heskett.


--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: How to prevent rtkit from giving firefox higher priority?

2024-01-16 Thread Arno Lehmann

I don't know anything about rtkit, but I may be able to parse English :-)

Am 16.01.2024 um 10:42 schrieb hw:
...

The messages in the journal are actually weird:


rtkit-daemon[132284]: Successfully made thread 145442 of process 145185 
(/usr/lib64/firefox/firefox) owned by '1000' RT at priority 10.

rtkit-daemon[132284]: Successfully made thread 2534 of process 2507 
(/usr/bin/gnome-shell) owned by '1000' RT at priority 20.
rtkit-daemon[132284]: Successfully made thread 2534 of process 2507 
(/usr/bin/gnome-shell) owned by '1000' high priority at nice level 0.
rtkit-daemon[132284]: Successfully made thread 2534 of process 2507 
(/usr/bin/gnome-shell) owned by '1000' RT at priority 20.
rtkit-daemon[132284]: Successfully made thread 2534 of process 2507 
(/usr/bin/gnome-shell) owned by '1000' high priority at nice level 0.


It says 'made owned by'.  Does user 1000 not own the process to begin
with?  Which user owned it before?  Or what is that supposed to mean?


What it tries to say is probably "made (thread ... owned by 1000) high 
priority".


Cheers,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: systemd-timesyncd

2024-01-07 Thread Arno Lehmann

Hi Gene,

Am 07.01.2024 um 20:51 schrieb gene heskett:

On 1/7/24 10:48, Max Nikulin wrote:

...
systemd-timesyncd is a NTP-client, not a server. It is shipped with 
man pages and works out of the box (of course, if network is properly 
configured).


Is it supposed to be installed by the net-installer? There does not seem 
to be any man pages other than the bog std stuff. When I found the 
/etc/systemd/timesyncd I immediately asked the system for man timesyncd, 
got this:

gene@coyote:/etc$ man timesyncd
No manual entry for timesyncd


I can not even guess what you did with your installation... here, boring 
bookworm installation, not caring much about which ntp software I use:


$ apropos timesyncd
systemd-timesyncd (8) - Synchronisierung der Netzwerkzeit
systemd-timesyncd.service (8) - Synchronisierung der Netzwerkzeit
timesyncd.conf (5)   - Konfigurationsdateien für die 
Netzwerkzeitsynchronisierung
timesyncd.conf.d (5) - Konfigurationsdateien für die 
Netzwerkzeitsynchronisierung


Of course all in German here with my desktop.

I'll not comment time zone settings or vaccinations, but I find many 
things that seem execeptionally difficult for you to just work for me.


Cheers,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: Found a liar

2023-12-05 Thread Arno Lehmann

Hello,

Am 05.12.2023 um 11:52 schrieb y...@vienna.at:

https://linux-packages.com/debian/package/zsh



This looks like auto-generated stuff to create an "ad-friendly" 
environment. Also, how is this relevant in regards to claiming someone 
is a liar?



sudo apt update
       ===>>>      sudo apt install zsh
NEVER,
   NEVER
  DO
  THAT
BECAUSE:
sudo apt remove zsh
and your box doesn 't work any longer as you want it to work


Any particular reason for such a claim?

Cheers,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: Found a liar

2023-12-06 Thread Arno Lehmann

Hello yxcv,

by now, you got a few comments and questions. Which you did not bother 
replying to.


In the context of calling other parties liars in public, this is 
distasteful. It also reflects badly on you and probably brings you 
closer to a few block lists.





Sorry for spamming the whole list, but I was quite annoyed with this 
situation.


Arno


--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: ToG Linux (first draft of a RFC) ...

2023-12-07 Thread Arno Lehmann

Hello,

it's quite interesting that you use a platform such as wordpress, 
running code you can not control, to discuss such matters.


Wouldn't it be more reasonable to self host, using a hoster providing 
decent privacy and aonymity or a technology such as Tor? Given the 
amount of time and effort you put into your draft, that would not be a 
big overhead, I think. It would, however, make it clearer that you 
actually mean it.


Also, what I know about secure, air-gapped systems, can be summarized 
quite easily:


- You can not use the same hardware air gapped and non air gapped.
- Maintaining such systems is a pain.
- There are no shortcuts.

Small anecdote: A colleague recently visited a US agencies secure site 
to help them with some software deployment. He could bring one DVD-R, 
not -RW, there. No electronic equipment.


There are no USB keys, portable disks, or dual-booting devices 
repeatedly crossing the boundaries there. In particular, there are no 
exceptions. What you bring in is thoroughly examined and stays in.



All your fancy ideas seem to be about bridging the gap. This will not 
create security.


Cheers,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Set UEFI boot target with Windows (was: Hardware Advice Wanted: Router)

2023-11-30 Thread Arno Lehmann
Bit of a digression here, probably better not to pursue *this* on the 
mailing list, but...


Am 30.11.2023 um 12:52 schrieb Joe:

On Wed, 29 Nov 2023 18:34:30 -0500
Jeffrey Walton  wrote:

  


As I understand things, a well functioning UEFI system does not need
to use GRUB. The entries for Linux and Windows will be in the UEFI
boot menu, and you can boot directly using EFI variables.



It's the 'well functioning' that is sometimes a problem. I have a
netbook which, left to its own devices, will always boot to Windows,
and cannot be made to boot to anything else from the UEFI part of
whatever we're supposed to call the BIOS these days. It does not honour
DefaultBoot, always resetting it to Windows, but for some reason does
honour NextBoot. So once Linux is running, a script sets NextBoot to
grub. Unfortunately, there's no simple way to set NextBoot from
Windows,


... have you ever tried

bcdedit /bootsequence 

In general, the built-in help of bcdedit is not bad, needs a bit of 
patience, though.


And of course we lack the flexibility of tools such as awk or sed on 
Windows, to automate setting things and still remain flexible :-)


On a particular system, with rather static setup, hard-coding a single 
bcdedit call and automatically execute that should be feasible, though.


Give it a try if you haven't done yet!


There seems to be a lot of problems with the EFI commands operating
BIOSes properly, so I wonder if good old MS requires compliant
manufacturers to get it wrong deliberately.


Well...

... probably yes. But that's MS and their hardware partners for you. 
It's getting better the more MS loses interest in actually selling Windows.



Cheers,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: Encrypted partiotions - which files related?

2024-01-29 Thread Arno Lehmann

Hello Hans,

Am 29.01.2024 um 12:34 schrieb Hans:

Am Montag, 29. Januar 2024, 12:16:14 CET schrieb Arno Lehmann:
Hi Arno,

yes, I saw the option SRCDISK. For my understanding it is used, when you want
to mount a an alien system i.e. via network and make a livefile from this.

But even I will do so, still all files will be copied to the livefilesystem,
this makes no change.


Well, I think this is what you can expect when using a tool to 
essentially copy your running Linux to a DVD image.



You asked me, what I want. Simple: I am running KALI-Linux on one of my
notebooks· with encrypted partitions.

As my KALI got some tools, which need lots of plugins, has added some software
NOT in the KALI-repo and got several personal settings, I could not build a
livefile system of KALI by using live-build.


I'll try to not digress into why you would want to use a heavily 
modified Kali in the first place, and then copy it to a different media, 
which probably results in something quite unmaintainable ;-)


...

Everything is working perfectly, except this little annoying at boot.
So I understand you want the exact same system as you run it on the 
host, *but* without the file systems mounted.


Here we reach the point where I must admit I do not know how bootcdwrite 
works :-)


However, from its documentation, I conclude it essentially puts all 
system configuration into its target directory tree, but it will have to 
modify some of it -- for example, if / is mounted from the live file 
system, a mount point in /etc/fstab for / would be counterproductive. 
The tool, accordingly, has to modify all the fstab entries for the file 
systems it copies.


That seems to work, as you state above. Also apparently, the underlying 
block storage setup *is* copied.


Your goal seems clear, you do not want that block storage to be 
accessed, so you'd have tomake sure the necessary setup is *not* copied. 
Depending on the stack you use, that could be md, lvm, luks, and 
possible more stuff.


Now, where do you draw the line? I, for example, would prefer to have md 
automatically trying to assemble any RAID it may find, and LVM to kick 
in, too.


Matters of taste put aside -- I think you can use the extra_changes() 
function in the configuration to mangle the respective configurations 
according to your needs. Removing entries from fstab and crypttab would 
possibly be sufficient, but if the created image makes use of your 
existing initrd, you might have to modify that as well.


In that latter case, I would probably decide that the modifications are 
so invasive, that the idea to call this a "copy" of the origin system is 
no longer true, and just using a generic live / rescue system may be easier.



Besides: Doing so, is a great advantage, as you might agree: I can make a
livesystem from a server, then boot it and now can dangerousless test different
configurations, can install packages, can test special settings and so on. Just
without to harm any productive system.


That appears to be too much overhead to me... virtual machines (for 
server as full OS) seem much more appropriate to me, in particular as 
differences between in-VM and physical devices are pretty much (not 
completely, though!) abstracted away these days.


If a real, identical piece of hardware is needed for such projects, I 
would rather invest money than time and still carry the risk to 
accidentally destroy a production system, which also would, by 
necessity, be down for whenever I experiment. Which would at least make 
comparisons of behaviour much more difficult.



And after testing, I can easily change the well tested configurations to the
productive server!

Two advantages, as you see.


My views are quite different, but that may be because I'm working too 
much in environments where lab - staging - production systems are 
prescribed anyway, and configuration is engineered in labs and 
eventually deployed through automated systems.



Does this make things a little bit clearer?



Definitely clearer, but I suspect you'll eventually have to put a lot of 
your own effort into your final solution, as the general idea is rather 
specific.


Cheers,

Arno


--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: Encrypted partiotions - which files related?

2024-01-29 Thread Arno Lehmann

Hi Hans,

Am 29.01.2024 um 11:30 schrieb Hans:

Hi folks,

I created a livefile system with bootcdwrite from a system with encrypted
partitions.

Everything is working fine, but ...


Checking the manual for bootcdwrite.conf, I find

OPTIONS

SRCDISK
The Variables SRCDISK defines the root of the files that will be copied.

For example, to build an image from a remote system, export 
root-directory with nfs, mount it locally to /mnt/remote and add:


SRCDISK=/mnt/remote



It is added as prefix to KERNEL, INITRD, DISABLE_CRON and NOT_TO_CD, if 
this are relativ paths (without starting "/")


Default:

SRCDISK=/


which I understand implies that, by default, bootcdwrite more or less 
copying the system you run it on. Thus, the expectation that it should 
keep off of your lawn, erm, partitions seems unrealistic.


On the other hand, you can create a configuration that uses a different 
source system, or modifies it. In your case, it appears that you want 
some modifications.


My understanding, however, is that you want modifications going so deep, 
that it may be more reasonable to *not* start with your regular system. 
Before we try to identify what you'd have to exclude, can you give us an 
idea of what your actual goal ist?


Cheers,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: Part II dd copy destroyed DVD

2023-11-18 Thread Arno Lehmann

Good afternoon,

Am 18.11.2023 um 16:42 schrieb Schwibinger Michael:

Good afternoon

I m sorry again.
dd does not work.

I put in a "good" DVD.
dd if=/dev/dvd of=/path/to/dvdcopy.iso
is working and I can convert the ISO
But I put in the damaged DVD
dd cannot start.


again, you forgot to explain what (sort of a) DVD that is, and what the 
actual error is.



How about:


How about: Your DVD is broken and will not be readable. Put it into the 
proper recycling bin/bag.



dvdread
ddrescue
debiandvdbackup
acidrip
isobuster and wine.


Are you aware that some of those tools have very specific purposes and 
use cases? If so, why do you believe anybody can comment without 
information about *you* use case?



Second:How can I use dd and others with an external dvddrive?


dd if= [some reasonable options]

Cheers,

Arno


Regards
Sophie



--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: Inclusive terminology (instead of master/slave) for network bonding/LACP

2024-02-23 Thread Arno Lehmann

On 23.02.24 at 10:33, Mariusz Gronczewski wrote:

On 22.02.2024 11:19, Ralph Aichinger wrote:

Hello!

I know this is a loaded topic...

...
There is no good reason *why*. It's entirely US political feel-good 
activism


Statement one above proven.

...
All it does is wastes tens of thousands of people's time once the have 
to fix


If there's a single person in the world who feels existing terminology 
to hurt them, I consider my usage of such terms.


If it makes one person feel better, I think I did something good.

If it makes others feel worse, I have to balance arguments. Arguments 
such as "it was always thus" or "it's too much effort" are not strong ones.


As it happens, I prefer being called "woke" above being rude.

Oh, and tech and culture can not be separated, but that's probably also 
a loaded topic.


Cheers,

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: How to upgrade the GLIBCXX and GLIBC to the specific version

2024-02-27 Thread Arno Lehmann

Hi all,

Am 27.02.2024 um 13:19 schrieb Greg Wooledge:

On Tue, Feb 27, 2024 at 06:51:13AM +, Diego Luo (罗国雄) wrote:

Hi,

Would you pls help give tips about how to upgrade the GLIBCXX and GLIBC to the 
specific version (GLIBCXX_3.4.29, GLIBC_2.34) on Debian?

I am using the Raspberry Pi 4B with the Raspbian OS “Linux raspberrypi 
5.15.61-v8+ #1579 SMP PREEMPT Fri Aug 26 11:16:44 BST 2022 aarch64 GNU/Linux”, 
which is Debian based OS.


That's a problem -- it is not Debian.

Expecting insight here is a bit of a stretch. It would be much better to 
check with the actual distribution provider.


Greg's advice about upgrading is demonstrating the versions for the 
x86_64 platform. This may or may not be directly applicable to your 
distribution. However, trying to upgrade something non-Debian with 
Debian packages may be exciting and provide great learning experience, 
but rarely is a smooth process.


I would propose to head over to https://www.raspberrypi.com/software/ if 
you do not get very clear advice here.


Also, the actual software you want to use should be considered. If it's 
not packaged for your distribution, it's at least clear the packager 
does not guarantee anything. Rebuilding for your platform requires 
access to source code and (possibly) build environment. Suggestions or 
advice require you to disclose what you're actually looking at.


Good luck!

Arno

--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: using mbuffer: what am i doing wrong?

2024-04-09 Thread Arno Lehmann

Hello,


I have not used mbuffer for a long time, so won't comment on that.

But your netstat call looks unsuitable to diagnose.

I'd propose to use

ss -f inet -lpn

ss instead of netstat... I try to catch up with changing times :-)

-f inet because in this case, you're (probably) just interested in IPv4 
network sockets. Could be IPv6, of course, then use inet6


-l list listening sockets, not active connections
-p show the process using the socket. Will usually require root
-n show numbers, not translated names

l and n are probably most important for you (and are also available for 
netstat) as you would otherwise first miss a listening socket, and then 
have grep miss the output if you use a port number that is assigned (see 
/etc/services)


Good luck!

Arno


--
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



Re: systemd and timezone

2023-12-22 Thread Arno Lehmann, ITS

Hi Greg,

Am 22.12.2023 um 17:11 schrieb Greg Wooledge:

On Fri, Dec 22, 2023 at 09:30:23AM -0600, David Wright wrote:

   https://wiki.debian.org/TimeZoneChanges

still says:

  "In Debian releases Etch and later, /etc/localtime is a copy of the
   original data file. Check the contents of /etc/timezone to see the
   name of the timezone. If the system is configured normally, you
   should find that the zoneinfo file referenced by this name is
   identical to /etc/localtime."


I'd change it immediately, but I don't want to make a change that isn't
correct.

Was this paragraph actually correct for Etch?  Was /etc/localtime a
literal *copy* of a file instead of symlink?  If so, when did it change?

Or, was this wrong for Etch, and /etc/localtime was always a symlink?



I have Etch running here, and the /etc/localtime file is not a symlink, 
nor a hardlink to a zone file:


TomBombadil:~# ls -lhi /etc/timezone /etc/localtime
159667 -rw-r--r-- 1 root root 842 2020-11-14 18:27 /etc/localtime
   140 -rw-r--r-- 1 root root  14 2020-11-14 18:27 /etc/timezone
TomBombadil:~# ls -lhi /usr/share/zoneinfo/Europe/Berlin
186905 -rw-r--r-- 1 root root 842 2008-10-17 18:57 
/usr/share/zoneinfo/Europe/Berlin
TomBombadil:~# diff -q /usr/share/zoneinfo/Europe/Berlin /etc/localtime 
; echo $?

0
TomBombadil:~# cat /etc/debian_version
4.0

Cheers,

Arno



Re: sid

2023-11-27 Thread Arno Lehmann, ITS

Hi Michael,

your problem report is a bit difficult to comment upon.

First, this is a debian users mailing list. I think nobody here will 
feel that they "are" Debian.


Then, you have problems with Sid. Now, Sid is the unstable development 
version of the distro. On the web page describing the different 
releases, https://www.debian.org/releases/ the authors stated very 
clearly that Sid might not work and even mentions disfunctional updates 
as an example. They also state that users of Sid should subscribe to 
debian-devel-announce. My conclusion is that problems with Sid should be 
discussed with the developers community.



And, considering that you tackled a development release, I think it 
would be useful if you provided details about the problem -- not just 
the result as in "network doesn't work anymore" but rather some 
observation of *why* -- which may be software packages that are 
essential for networking were uninstalled  during the upgrade, or 
provide binaries that do not work. Without such information it will be 
hard to work on fixes.



Also, you write

There are something over a hundred sites and pages up, that give 
simple logical instructions about how you install Debian and upgrade 
to sid. Every one of those pages is currently wrong.


but this is not something the audience of this mailing can take 
responsibility for.



If you address the right audience with your observations, the problem 
you found may be fixed. Here, it's unlikely you can get better results 
than pointers into other directions or just questions of "why Sid?".



Best,


Arno