Re: Old control sums for packages.

[Kamil Jońca]

Simon Hollenbach  writes:

> Hello KJ,
>
> there is the snapshot archive at https://snapshot.debian.org/ - You
> can get older Packages files from there.

Thanks. I was not aware of this service.
KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Old control sums for packages.

[Kamil Jońca]

At http://deb.debian.org/debian/dists/sid/main/binary-amd64/ we can find
files with SHA256 sums of packages. Unfortunately they are only 2 weeks
old. Is this possible to have little older files? (For example month or
2)?
KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: making Debian secure by default

[Kamil Jońca]

Andy Smith  writes:

[...]
> https://www.openwall.com/lists/oss-security/2024/03/29/4
>
> (Upstream xz/lzma project compromised, hostile code inserted into
> sshd in Debian sid and other leading edge distros.)
>
> Thanks,
> Andy

O-o, is there any simple test to check if I have infected version or
not?
KJ
-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: Root password strength

[Kamil Jońca]

Greg Wooledge  writes:

> On Tue, Mar 19, 2024 at 05:42:55PM +0300, Jan Krapivin wrote:
>> The root user's password should be long (12 characters or more) and
>> impossible to guess. Indeed, any computer (and a fortiori any server)
>> connected to the Internet is regularly targeted by automated connection
>> attempts with the most obvious passwords. [...]
>
> For most people, this really isn't a concern, because they either don't
> run an ssh server at all, or they use the default sshd_config which does
> not allow root logins.
>
> The only time you need to worry about this is if you:
>
>  * Run an ssh server, AND
>  * Accept ssh connections from the public Internet, AND
>  * Have changed the sshd_config file to allow ssh root logins.

The last condition is not needed. Quite often ssh bots tests other
accounts (ubuntu, admin, php, www, etc...) and if these account allow
su/sudo this also migh be a threat.

KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: Wifi - unable to connect. [solved]

[Kamil Jońca]

Jeffrey Walton  writes:

> On Mon, Mar 4, 2024 at 4:58 PM Greg  wrote:
>>
>> On 2/26/24 18:52, Kamil Jońca wrote:
>> [...]
>> >
>> > What if:
>> > network = {
>> >   ssid="ssid"
>> >   key_mgmt=WPA-EAP
>> >   eap=PEAP
>> >   identity="uid"
>> >   phase2="auth=MSCHAPV2"
>> >   mesh_fwding=1
>> >   password="pas"
>> >   }
>
> The MSCHAPv2 is like a dagger in my eye. Are you required to use it?
>
> <https://www.reddit.com/r/sysadmin/comments/173g57g/question_why_is_peapmschapv2_not_secure_when_its/>
>
> Jeff

This not question to OP, but rather to his admin :).

KJ

Re: where are the crontab files in Trixie?

[Kamil Jońca]

Andy Smith  writes:

> Hi,
>
> On Wed, Feb 28, 2024 at 04:47:59PM +0100, Kamil Jońca wrote:
>> Andy Smith  writes:
>> > Once you enable lingering for a user, that user's timers will
>> > trigger all the time.
>> 
>> IIRC lingered user cannot be "normal" with session and so on. Am I
>> wrong? 
>
> How do you mean? On several machines I have linger enabled for my
> main user, and timers run when I am not logged in.

How precisely linger works? (what it starts? What not etc)
I read about lingering  some time ago, and I have had impression
(wrong?) that it  may conflict with my normal session.
KJ

Re: where are the crontab files in Trixie?

[Kamil Jońca]

Andy Smith  writes:

> Hi,
>
> On Wed, Feb 28, 2024 at 05:49:58AM +0100, Kamil Jońca wrote:
>> With cron, regular user can set up his/her jobs wihtout using admin
>> credentials, and these jobs will be triggered regardless of being logged
>> in. Is it possible with systemd timers?
>
> Once you enable lingering for a user, that user's timers will
> trigger all the time.

IIRC lingered user cannot be "normal" with session and so on. Am I
wrong? 

KJ

Re: where are the crontab files in Trixie?

[Kamil Jońca]

Gremlin  writes:

[...]
>
> https://wiki.archlinux.org/title/Systemd-networkd
> https://wiki.archlinux.org/title/Wireless_bonding
>
> I am using systemd-networkd and systemd-resolved and have removed
> Networkmanager, ifupdown and isc-dhcp. Also avahi, modemmanager,
> openssh-sftp-server openssh-server and openssh-sk-helper

Great. But I think that systemd is still not able to handle my config
(described for example here
https://lists.freedesktop.org/archives/systemd-devel/2022-May/047934.html
)
Recently someone describes problem with proper routing of DNS questions,
when he has VPN connection.

>
> They ain't needed
For you.

When comes to cron and systemd timers.

With cron, regular user can set up his/her jobs wihtout using admin
credentials, and these jobs will be triggered regardless of being logged
in. Is it possible with systemd timers?
KJ

Re: Wifi - unable to connect.

[Kamil Jońca]

Grzesiek Sójka  writes:


[...]
> According to the instruction the settings should be:
> WPA2 Enterprise,
> PEAP,
> MSCHAPv2,
> no certificate.
>
> And my wpa config is:
> network={
> ssid="ssid"
> proto=RSN
> key_mgmt=WPA-EAP
> pairwise=CCMP
> auth_alg=OPEN
> eap=MSCHAPV2
> identity="uid"
> password="pas"
> mesh_fwding=1
> }
>
> Any suggestions?

What if:
network = {
 ssid="ssid"
 key_mgmt=WPA-EAP
 eap=PEAP
 identity="uid"
 phase2="auth=MSCHAPV2"
 mesh_fwding=1
 password="pas"
 }


KJ

Re: Journald's qualities

[Kamil Jońca]

Mariusz Gronczewski  writes:

[...]
>
> Offtopic but since Debian switched to systemd for DNS management on
> VPNs and suc I need to restart it sometimes multiple times to just get
> "right" DNS servers, because there appears to be no notion of priority:

Well, I am using  openresolv (earlier resolvconf) for that + dnsmasq, as
a forwarder. 

I have turned off systemd resolver.
Similary I do not like system-networkd (I am using ifupdown) - it also
pretend to be more wise than me.

KJ

Re: Inclusive terminology (instead of master/slave) for network bonding/LACP

[Kamil Jońca]

Dan Ritter  writes:

> Jeffrey Walton wrote: 
>> 
>> I don't want to bikeshed, though. Slavery ended in the US about 150
>> years ago. I don't know any slaves, and I don't own any slaves, so I
>> don't really have a dog in the fight.
>
>
> Point of fact: slavery is legal in the USA, as a legal punishment.
>
> Other point of fact: the effects of slavery in the USA continue
> to be felt in the present.
>
> At this point we have diverged completely from Debian topics.
>
> Let's bring it back around to actual action.
>
> The possible positions:
>
> 1. The terminology is bad, and I'm willing to work on fixing it.
>
> 2. The terminology is bad, but I can't work on it myself.
>
> 3. The terminology does not bother me, but I don't care if someone else wants 
> to fix it.
>
> 4. The terminology is good and we should not fix it.
>

x. I understand that terminology might be bad, but OTOH we have cost of
modyfying soft.
So I understand that for new piece of code we want to use new terminology
(some time ago github changes branch naming from "master" to "main" for
new projec, IIRC) but for old code we keep old until we have good
reasons to rewrite/refactor it.

KJ

Re: Mixing HDD and SSD in lvm

[Kamil Jońca]

Kamil Jońca  writes:

> Debian box with LVM
> LVM uses  2 PV - raid devices each uses 2 HDD (rotating)
> discs (with sata interfaces).
>
> Now I am considering replacing one PV with md device constisting of SSD
> discs, so LVM will be have one "HDD" based pv and one SSD based PV.
> Should I worry about anything (speed differences or sth)?
> KJ

Finally I did it. Installed 2 ssd's, made raid1 on them, and use this md
as PV in lvm.
Then with pvmove I moved 2 most loaded LV's to this md (and rest to the
other PV, then remove old empty PV).
So far so good, everything seems to working fine (and in fact machine
looks to be more responsive especially with reads, but this might be
autosuggestion). 

But I have 2 questions.

1.
--8<---cut here---start->8---
sudo smartctl -x /dev/sdc
[...]
=== START OF INFORMATION SECTION ===
Model Family: Crucial/Micron Client SSDs
Device Model: CT4000MX500SSD1
Serial Number:2333E86CB9A0
LU WWN Device Id: 5 00a075 1e86cb9a0
Firmware Version: M3CR046
User Capacity:4 000 787 030 016 bytes [4,00 TB]
Sector Sizes: 512 bytes logical, 4096 bytes physical
Rotation Rate:Solid State Device
Form Factor:  2.5 inches
TRIM Command: Available
Device is:In smartctl database 7.3/5528
ATA Version is:   ACS-3 T13/2161-D revision 5
SATA Version is:  SATA 3.3, 6.0 Gb/s (current: 6.0 Gb/s)
Local Time is:Sun Feb 11 10:48:39 2024 CET
SMART support is: Available - device has SMART capability.
SMART support is: Enabled
AAM feature is:   Unavailable
APM level is: 254 (maximum performance)
Rd look-ahead is: Enabled
Write cache is:   Enabled
DSN feature is:   Unavailable
ATA Security is:  Disabled, frozen [SEC2]
Wt Cache Reorder: Unknown
[...]
ID# ATTRIBUTE_NAME  FLAGSVALUE WORST THRESH FAIL RAW_VALUE
  1 Raw_Read_Error_Rate POSR-K   100   100   000-0
  5 Reallocate_NAND_Blk_Cnt -O--CK   100   100   010-0
  9 Power_On_Hours  -O--CK   100   100   000-88
 12 Power_Cycle_Count   -O--CK   100   100   000-10
171 Program_Fail_Count  -O--CK   100   100   000-0
172 Erase_Fail_Count-O--CK   100   100   000-0
173 Ave_Block-Erase_Count   -O--CK   100   100   000-4
174 Unexpect_Power_Loss_Ct  -O--CK   100   100   000-0
180 Unused_Reserve_NAND_Blk PO--CK   000   000   000-231
183 SATA_Interfac_Downshift -O--CK   100   100   000-0
184 Error_Correction_Count  -O--CK   100   100   000-0
187 Reported_Uncorrect  -O--CK   100   100   000-0
194 Temperature_Celsius -O---K   074   059   000-26 (Min/Max 19/41)
196 Reallocated_Event_Count -O--CK   100   100   000-0
197 Current_Pending_ECC_Cnt -O--CK   100   100   000-0
198 Offline_Uncorrectable   CK   100   100   000-0
199 UDMA_CRC_Error_Count-O--CK   100   100   000-0
202 Percent_Lifetime_Remain CK   100   100   001-0
206 Write_Error_Rate-OSR--   100   100   000-0
210 Success_RAIN_Recov_Cnt  -O--CK   100   100   000-0
246 Total_LBAs_Written  -O--CK   100   100   000-14380174325
247 Host_Program_Page_Count -O--CK   100   100   000-124507650
248 FTL_Program_Page_Count  -O--CK   100   100   000-72553858
[...]
--8<---cut here---end--->8---

Do I unterstand correctly, that to have TB written I should take
"Total_LBAs_Written"
and divide it by 1024*1024*2 ?
(2 - because I should multiply by 512 as sector size, and then divide by
1024 one more)
so in my case it would be

--8<---cut here---start->8---
echo $((  14380174325 / (1024*1024*2 ) ))
6857
--8<---cut here---end--->8---
this suggest almost 7TB (this is not unbelievable when I think about
inital operations, later it should be less per day)
Am I correct? (and any suggestions about these SMART values?)

2nd question.
I have read about "trim/discard" operations in SSD context  and I am not
sure how to setup these here.


KJ

Re: Mixing HDD and SSD in lvm

[Kamil Jońca]

Kamil Jońca  writes:

> Marco Moock  writes:
>
>> Am 06.02.2024 um 07:17:02 Uhr schrieb Kamil Jońca:
>>
>>> Should I worry about anything (speed differences or sth)?
>>
>> Speed differences will occur because reading and writing from/to the
>> SSD will be much faster.
> Of course, but can it make any data damage to lvm?
>
> I am asking because some time ago was a (different) story  about SMR
> drives whose can make problem when in RAID. And I am wondering if here I
> can similar problems.
>
> KJ

Maybe I was not precise:
1. now VG has two PV. Both are raid1 with two HDD.
2. I want to have VG with one PV as RAID1 with 2 HDD's and second PV as
RAID1 with 2SSD's

So:
1. I do not want to mix HDD and SSD in one RAID.
2. I do not want to play with other RAID levels

I assume, that my motherboard will not have problems with SSD. (this is
B450 AORUS PRO)

My main concern is if speed differences between SSD and HDD in one lvm
can make any problems.

KJ

Re: Mixing HDD and SSD in lvm

[Kamil Jońca]

Marco Moock  writes:

> Am 06.02.2024 um 07:17:02 Uhr schrieb Kamil Jońca:
>
>> Should I worry about anything (speed differences or sth)?
>
> Speed differences will occur because reading and writing from/to the
> SSD will be much faster.
Of course, but can it make any data damage to lvm?

I am asking because some time ago was a (different) story  about SMR
drives whose can make problem when in RAID. And I am wondering if here I
can similar problems.

KJ

Mixing HDD and SSD in lvm

[Kamil Jońca]

Debian box with LVM
LVM uses  2 PV - raid devices each uses 2 HDD (rotating)
discs (with sata interfaces).

Now I am considering replacing one PV with md device constisting of SSD
discs, so LVM will be have one "HDD" based pv and one SSD based PV.
Should I worry about anything (speed differences or sth)?
KJ

Re: Mailing List

[Kamil Jońca]

piorunz  writes:

> On 01/12/2023 16:15, to...@tuxteam.de wrote:
>
>>> Your message is here, so you are subscribed :)
>>
>> Not necessarily, you can post here as a non-subscriber. Actually I have
>> the hunch that the OP is not subscribed (going by the X-Spam-Status header).
>>
>> Cheers
>
> Oh, ok, I didn't know that. That's why the group receives so much spam

No. This group does not has a lot of spam.
KJ

Re: approx in debian 12

[Kamil Jońca]

Kamil Jońca  writes:

> Charles Curley  writes:
>
>> On Thu, 16 Nov 2023 04:11:37 +
>> "Russell L. Harris"  wrote:
>>
>>> root@mollydew:/home/rlh# systemctl daemon-reload
>>> root@mollydew:/home/rlh# systemctl restart approx
>>> Failed to restart approx.service: Unit approx.service not found.
>>> root@mollydew:/home/rlh# systemctl status approx
>>> Unit approx.service could not be found.
>>> root@mollydew:/home/rlh#
>>
>> Well, that's weird. I installed approx on a Debian 12 machine, and got
>> the same results you did. However:
>>
>> root@tsalmoth:~# ll /lib/systemd/system/approx*
>> -rw-r--r-- 1 root root 165 Feb 12  2023 '/lib/systemd/system/approx@.service'
>> -rw-r--r-- 1 root root 167 Feb 12  2023  /lib/systemd/system/approx.socket
>> root@tsalmoth:~# systemctl status approx.service
>> Unit approx.service could not be found.
>
> But here I cannot see approx.service, only approx@.service
> (ie. service which can have multiple instances)

What if you issue:
systemctl status "approx@*.service"

KJ

Re: approx in debian 12

[Kamil Jońca]

Charles Curley  writes:

> On Thu, 16 Nov 2023 04:11:37 +
> "Russell L. Harris"  wrote:
>
>> root@mollydew:/home/rlh# systemctl daemon-reload
>> root@mollydew:/home/rlh# systemctl restart approx
>> Failed to restart approx.service: Unit approx.service not found.
>> root@mollydew:/home/rlh# systemctl status approx
>> Unit approx.service could not be found.
>> root@mollydew:/home/rlh#
>
> Well, that's weird. I installed approx on a Debian 12 machine, and got
> the same results you did. However:
>
> root@tsalmoth:~# ll /lib/systemd/system/approx*
> -rw-r--r-- 1 root root 165 Feb 12  2023 '/lib/systemd/system/approx@.service'
> -rw-r--r-- 1 root root 167 Feb 12  2023  /lib/systemd/system/approx.socket
> root@tsalmoth:~# systemctl status approx.service
> Unit approx.service could not be found.

But here I cannot see approx.service, only approx@.service
(ie. service which can have multiple instances)


KJ

Re: systemd service oddness with openvpn

[Kamil Jońca]

Richard Hector  writes:

> Hi all,
>
> I have a machine that runs as an openvpn server. It works fine; the
> VPN stays up.

Are you sure? Have you client conneted and so on?

>
> However, after running for a while, I get these repeatedly in syslog:
>
> Nov 07 12:17:24 ovpn2 openvpn[213741]: Options error: In [CMD-LINE]:1:
> Error opening configuration file: opvn2.conf
Here you have something like typo (opvn2c.conf - I would expect ovpn2.conf)

[..]

>
> Why would it firstly think it needs starting, and secondly fail to do
> so? The config file /etc/openvpn/server/ovpn2.conf file which it

and here you talk about ovpn2.conf

I suspect that your vpn server never starts.
KJ

Re: Lack of text console?

[Kamil Jońca]

David Wright  writes:

> On Fri 04 Aug 2023 at 15:36:35 (+0200), Kamil Jońca wrote:
>> Kamil Jońca  writes:
>> 
>> [...]
>> Ugh. This laptop has keyboard where Fn keys have dual function  (quite
>> common nowadays) and under F1 was kind of 'Sleep'. So when I press
>> Ctrl-Alt-F1 it goes to sleep, and with F2/F3 there were no reaction as
>> these keys have no other meaning.
>> When I press Ctrl-"fn switch"-Alt+F1 I got console.
>> Thanks for everyone for ensuring me that consoles are still in Debian
>> and sorry for the noise.
>
> On some laptops, the BIOS can switch between treating the Function
> keys as you reported here, or its opposite. The terminology varies:
> here, Lenovo call it HotKey Mode, and HP call it Action Keys Mode.

I know that.
​
The thing was, it wasn't my laptop, and (as I always set it to Fn, not
"special" on my machines) I did not think that someone might want to
have it cofigured  that way :)

KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: Lack of text console?

[Kamil Jońca]

Kamil Jońca  writes:

[...]
Ugh. This laptop has keyboard where Fn keys have dual function  (quite
common nowadays) and under F1 was kind of 'Sleep'. So when I press
Ctrl-Alt-F1 it goes to sleep, and with F2/F3 there were no reaction as
these keys have no other meaning.
When I press Ctrl-"fn switch"-Alt+F1 I got console.
Thanks for everyone for ensuring me that consoles are still in Debian
and sorry for the noise.

KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Lack of text console?

[Kamil Jońca]

Where text console can be configured?
Recently I got laptop with debian installed. I wanted to log in into
text console but Ctrl-Alt-F1 does nothing - it seems that lightdm(?)
started at first console.
KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

What is /propagated-mount/ dir?

[Kamil Jońca]

There is laptop with debian sid.
Sometimes on this laptop something create '/propagated-mount/'
directory.
I try to search with 'propagated-mount' but found only pages about
namespaces.
Can anyone point me to right direction? Which package is responsible for
creating this dir?
KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: Salvage live failing server

[Kamil Jońca]

"Andrew M.A. Cater"  writes:

> On Mon, Mar 20, 2023 at 07:01:22PM +0100, john doe wrote:
>> Debians,
>> 
>> I'm seeing some alarming MSGs (E.G: ' blk_update_request: I/O error, dev
>> sda, sector N') in my server's log.
>> As it's read-only, I can not install smartmontools to investigate further.
>> 
>> This server is to be used until a new server is ready, is there anything
>> that I can do to keep it running?
>> 
>> Any other ideas is welcome!
>> 
>> --
>> John Doe
>>
>
> Run, don't walk, to another computer and order new disks and shut this one 
> down immediately. If the file system has gone read only because of errors, 
> you need to shut it down NOW, maybe, and hope that you can recover data when 
> it boots up.
>
> Good luck, but it's probably too late.

+1
I have some time ago such messages and it WAS too late. (Regardless of
daily backups ...)

KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: what method do you prefer for data transfer between nodes?

[Kamil Jońca]

Ken Young  writes:

> Hello,
>
> The methods I know,

Short answer: it depends.

I use:
scp
rdbms (central server with data + clients)
git
samba

I cannot say I "prefer" any of them.

KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: alias in bash script issue

[Kamil Jońca]

Ken Young  writes:
[..]

I am not bash expert (prefer zsh) but as far as I know they are
expadnded during interactive session only, not in scripts.

>
> $ ./get.sh 
>
> ./get.sh: line 5: k: command not found
>

https://www.gnu.org/software/bash/manual/bash.html#Aliases

--8<---cut here---start->8---
Aliases are not expanded when the shell is not interactive, unless the 
expand_aliases shell option is set using shopt (see The Shopt Builtin). 
--8<---cut here---end--->8---

KJ


-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: Forcing dhclient to not ignore tun0 interface when it's available

[Kamil Jońca]

David Wright  writes:

[...]
>
> This is the job that packages like openresolv are designed
> to do. BTW if you look up that package in apt's lists, note
> that this is a case where you need man's section number, because
> man 8 resolvconf   without the 8 will give you a systemd page.

+1

I have configured resolvconf + some scripts in my (dhcp,openvpn,ipsec)
configurations 
and they take care to properly preparing name resolution during
different situations.

KJ




-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: Cannot rum multiple command on remote machine via SSH

[Kamil Jońca]

Ottavio Caruso  writes:

[...]
>>   
>
> No, this is not good. The "hibernate.sh" must be run as standard user.

Oh. I overlooked that. Sorry.
KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: Cannot rum multiple command on remote machine via SSH

[Kamil Jońca]

Ottavio Caruso  writes:

> Hi,
>
> LAP1 is a Thinkpad that I use only at home as a poor man's desktop.
>
> LAP2 is a second Thinkpad that I use mainly outdoors, on which I run
> an SSH server to do some syncing every now and again.
>
> Both using latest Debian stable with similar sets of apps.
>
> At night, I want to connect to LAP2 and perform these commands:
>
> $ sudo tlp setcharge 90 95 BAT1 # resets battery settings for external
> battery
>
> $ hibernate.sh # a script that performs some housekeeping, puts laptop
> into hibernation and eventually disconnects sshd.
>
> From LAP1 I can issue:
>
> $ ssh LAP2 sudo tlp setcharge 90 95 BAT1 # it works
>
> or:
>
> $ ssh LAP2 hibernate.sh # it works too
>
> but either:
>
> $ ssh LAP2 "sudo tlp setcharge 90 95 BAT1 && hibernate.sh"
>
> or
>
> $ ssh LAP2 "sudo tlp setcharge 90 95 BAT1 ; hibernate.sh"
>
> return:
>
> hibernate.sh: command not found

your shell interpret this as two commands

1. run "sudo tlp setcharge 90 95 BAT1"
2. then run "hibernate.sh" (without sudo)

you can try
--8<---cut here---start->8---
ssh LAP2 "sudo tlp setcharge 90 95 BAT1 ; sudo hibernate.sh"
--8<---cut here---end--->8---
or
--8<---cut here---start->8---
ssh LAP2 "sudo sh -c 'tlp setcharge 90 95 BAT1 ; hibernate.sh'"
--8<---cut here---end--->8---
 
>
>
> Why?

KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: Can’t mount CD image of Win95 game

[Kamil Jońca]

Yvan Masson  writes:

> Hi list,
>
> I have a CD image of an old Win 95 game. I can mount it from dosbox
> with the `imgmount` command (`imgmount D cdimage.iso -t iso`), but
> could not mount it with Debian:
>
> $ file cdimage.iso
> cdimage.iso: data
>
> $ sudo mount cdimage.iso /mnt -o loop
> mount: /mnt/sshfs: wrong fs type, bad option, bad superblock on
> /dev/loop0, missing codepage or helper program, or other error.
>dmesg(1) may have more information after failed mount system call.
>
> The corresponding kernel logs:
> loop0: detected capacity change from 0 to 542921
>
> Any idea of the reason and how I could mount this ISO from Debian?

What if you issue:
--8<---cut here---start->8---
sudo mount -o loop -t iso9660 cdimage.iso /mnt 
--8<---cut here---end--->8---

KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: CR/LF

[Kamil Jońca]

Jim Popovitch  writes:

> Ahh, sorry for using a descriptive acronym that I have used for decades
> to define an end-of-line. Whether it's in-fact a CR/LF, or just a LF,
> doesn't really change the original question about the addition of a end-

For me - changes. I was confused why linux machine can generate cr/lf
line endings, and only later I did understand you mean "line ending" in
general, and problem lies somewhere else.


Moreover line endings are important sometimes.
For example I have problems with thunderbird and it seems that (one of)
causes is cr/lf in artticle body ... instead of just lf.
(https://bugzilla.mozilla.org/show_bug.cgi?id=1788102)

KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: hamburger menu

[Kamil Jońca]

Kamil Jońca  writes:

> Felix Miata  writes:
>
>> gene heskett composed on 2022-12-07 03:02 (UTC-0500):
>>
>>> Hamburger? does not exist.
>>
>> Not likely you're right on this one. If using alternate theming on your web
>> browsers I suppose it could be missing.
>
> Well. I am afraid he is.
> Although it exists in Firefox, I checked and I don't have it in
> thunderbird.
>
> Config editor is still under
> Edit -> Settings -> (Revind to bottom)
>

Well, I must correct myself. Hamburger menu indeed exists in "Mail
Toolbar" at the right.  :/ I overlooked it, as I search at "Menu Toolbar"

Thunderbird 102.5.1 (64-bit)
KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: hamburger menu

[Kamil Jońca]

Felix Miata  writes:

> gene heskett composed on 2022-12-07 03:02 (UTC-0500):
>
>> Hamburger? does not exist.
>
> Not likely you're right on this one. If using alternate theming on your web
> browsers I suppose it could be missing.

Well. I am afraid he is.
Although it exists in Firefox, I checked and I don't have it in
thunderbird.

Config editor is still under
Edit -> Settings -> (Revind to bottom)

>
[...]

>
> 

But this is for firefox, not thunderbird.

KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: TBird mail

[Kamil Jońca]

gene heskett  writes:

> On 12/6/22 22:53, Max Nikulin wrote:
>> On 07/12/2022 06:58, gene heskett wrote:
> profiledir:
>>> what or where is this "profiledir:"? after sudo updatedb today, I
>>> find 
>> Querying search engine "thunderbird profile directory" gives
>> https://support.mozilla.org/en-US/kb/profiles-where-thunderbird-stores-user-data
>> http://kb.mozillazine.org/Profile_folder_-_Thunderbird
>> How to find your profile
>> - Click on the menu button or menu bar.
>> - From the Help menu, click Troubleshooting Information.
>> - In the Application Basics section, Profile Directory, click on
>> Open Directory.
>> - The Files window will show the name of the profile as well as the
>> path to it.
>> 
> And when I find it. the prefs.js file does not contain any of the
> strings mentioned in the reply I quoted and everyone but you have
> clipped.
>
> Am I to add these below? According to the top of the file, t-bird must
> be stopped before editing as it saves this anew when stopping.


>
> user_pref("mail.quoteasblock", false);
> user_pref("mail.quoted_graphical", false);



I am not sure, but ... prefs.js is overwritten by thunderbird, if you
want changes to be persistend you should edit (possibly create) user.js
file.


-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: tbird broken

[Kamil Jońca]

Max Nikulin  writes:

> On 19/11/2022 18:59, Kamil Jońca wrote:
>>> On 18/11/2022 14:42, Kamil Jońca wrote:
>>>> user_pref("mailnews.nntp.jsmodule", false);
> ...
>> But old implementation works, at least for me, while new not.
>
> I would say that both implementations have issues and I faced more
> painful bugs in the older one.
>
>> For example:
>> https://bugzilla.mozilla.org/show_bug.cgi?id=1788102
>
> Earlier you cited
> https://bugzilla.mozilla.org/show_bug.cgi?id=1777439
> "new JS NNTP implementation broken in TB 102: news articles are not
> shown in the preview pane nor message view tab."
> that is related to NNTP servers requiring authentication and closed as
> fixed in Thunderbird-102.

I found some time for testing and it seems to be not related to size ...
https://bugzilla.mozilla.org/show_bug.cgi?id=1788102#c4

KJ


-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: How to check for scheduled shutdown

[Kamil Jońca]

Sven Joachim  writes:

[...]
>
> Perhaps that the --show option was only added in systemd 250 and is not
> available in Bullseye and older Debian releases.
>
> Cheers,
>Sven

Ach, indeed. Sorry.
KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: How to check for scheduled shutdown

[Kamil Jońca]

Urs Thuermann  writes:

> After shutdown -h  I see no way to see this scheduled shutdown.
> Before systemd, I could always see the shutdown process with its
> arguments using ps(1).

Hm.
kjonca@alfa:~%man shutdown
SHUTDOWN(8) 
  shutdown  

SHUTDOWN(8)

NAME
   shutdown - Halt, power off or reboot the machine
[...]
OPTIONS
[...]
   --show
   Show a pending shutdown action and time if there is any.

kjonca@alfa:~%sudo shutdown --show
No scheduled shutdown.

Am I overlooked something?

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: MacOS VM on Debian: is it reasonably possible?

[Kamil Jońca]

Jeffrey Walton  writes:

> On Mon, Nov 21, 2022 at 3:19 PM Kamil Jońca  wrote:
>>
>> Tom Browder  writes:
>>
>> > I'm going to try to run Win 10 as a VM on my new Deb box following 
>> > instructions I've received on this list.
>> >
>> > Has anyone been able to run a recent version of MacOS as a VM?
>>
>> Apart technical issues, there is licence which AFAIK forbids run MacOS
>> on non-Apple hardware (regardless if it is bare metal or VM). The only
>> exception is (was?) emacos server.
>>
>> Please correct me if I am wrong.
>
> As long as a discussion includes Debian development or use, it's on
> topic for a Debian mailing list. If OP wishes to run MacOS in his
> Debian hosted VM, that's his business. Confer,

In some countries people can be punished for helping "crime" :) not only
for doing it, so no, this is not "only his business."
Giving advice how to run MacOS against its licence can be sometimes
treated as such helping. (Forgive me terminology - I am not lawyer)

Of coures this can be case where MacOS is running on VM whose host is
debian running on Apple hardware. (IIRC this is permitted)


> I don't recall a time when Debian admins were patrolling for companies
> like Apple or Microsoft. I think that's something you might encounter

Where you see patrolling? I just pointed it out, as I knew that this
uncommon knowledge, and someone accidentally might get into troubles.
(When for example ask on Apple forum for something)


KJ



-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: MacOS VM on Debian: is it reasonably possible?

[Kamil Jońca]

Tom Browder  writes:

> I'm going to try to run Win 10 as a VM on my new Deb box following 
> instructions I've received on this list.
>
> Has anyone been able to run a recent version of MacOS as a VM?
>

Apart technical issues, there is licence which AFAIK forbids run MacOS
on non-Apple hardware (regardless if it is bare metal or VM). The only
exception is (was?) emacos server.

Please correct me if I am wrong.
KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: tbird broken

[Kamil Jońca]

Max Nikulin  writes:

> On 18/11/2022 14:42, Kamil Jońca wrote:
>> user_pref("mailnews.nntp.jsmodule", false);
>> might help
>
> Notice that Thunderbird developers are closing bugs related to the old
> NNTP implementation marking them WONTFIX.
>

But old implementation works, at least for me, while new not.
For example:
https://bugzilla.mozilla.org/show_bug.cgi?id=1788102

KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: tbird broken

[Kamil Jońca]

gene heskett  writes:

> Greetings all;
>
> I've just discovered that either tbird  is busted, or its missing
> whatever it takes to display a properly mimetyped base64 encoded
> content.

In NNTP or mail?
If nntp, you probably hit by
https://bugzilla.mozilla.org/show_bug.cgi?id=1777439
and
user_pref("mailnews.nntp.jsmodule", false);
might help
KJ


-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: sid - no sound on speakers

[Kamil Jońca]

David  writes:

> On Sat, Nov 12, 2022 at 09:31, Kamil Jońca  wrote:
>
> Recently I found strange thing: I have no sound on speakers. There is no 
> problem with usb headphone, or headphone via jack but speakers are silent. As 
> I almost exclusively use usb headphones I have no idea when this problem 
> started. In theory is possible that
> speakers are broken but the same thing on completely different laptpop. I 
> tried to play with: --8<---cut 
> here---start->8--- options snd-intel-dspcfg 
> dsp_driver= --8<---cut here---end--->8---
> but without success. Any hints? During my searching I found 
> https://bbsarchlinux.org/viewtopic.php?id=275061 
> https://bugzilla.kernel.org/show_bug.cgi?id=216139 but I am not sure if this 
> is related.
>
> What are you running?
> Stable, Testing, Unstable?

sid on both laptops

devices
on one laptop:
--8<---cut here---start->8---
00:1f.3 Multimedia audio controller: Intel Corporation Alder Lake PCH-P High 
Definition Audio Controller (rev 01)
--8<---cut here---end--->8---

on second laptop:
--8<---cut here---start->8---
:00:1f.3 Multimedia audio controller: Intel Corporation Tiger Lake-LP Smart 
Sound Technology Audio Controller (rev 20)
--8<---cut here---end--->8---


KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

sid - no sound on speakers

[Kamil Jońca]

Recently I found strange thing: I have no sound on speakers. There is no
problem with usb headphone, or headphone via jack but speakers are
silent.
As I almost exclusively use usb headphones I have no idea when this
problem started.
In theory is possible that speakers are broken but the same thing on
completely different laptpop.
I tried to play with:

--8<---cut here---start->8---
options snd-intel-dspcfg dsp_driver=
--8<---cut here---end--->8---

but without success.
Any hints?
During my searching I found
https://bbs.archlinux.org/viewtopic.php?id=275061
https://bugzilla.kernel.org/show_bug.cgi?id=216139
but I am not sure if this is related.

KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: Cannot read newsgroups with new Thunderbird

[Kamil Jońca]

Miroslav Skoric  writes:

> After a recent Thunderbird upgrade in Buster (from version
> 91-something to 101-something, or like), it stopped handling
> newsgroups properly (where the source is News Server (NNTP) on the
> same machine, and there nothing was changed/upgraded).
>
> To be precise, Thunderbird now seems downloading new messages from the
> NNTP server, then shows the new number of messages in the folder pane,
> but displays an empty content in the message pane, i.e. Subject and
> From columns are empty, while Date column is filled with 1/1/70 - for
> all news messages that arrived since the Thunderbird upgrade.

https://bugzilla.mozilla.org/show_bug.cgi?id=1788102 ?

You may try to set "mailnews.nntp.jsmodule" to "false"

KJ


-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: Proprietary WiFi drivers for live mode

[Kamil Jońca]

piorunz  writes:

> On 25/06/2022 22:41, Charles Curley wrote:
>
>> There are also USB WiFi adapters, but I cannot recommend any.
> I actually use many of them and they are just fine. Many models are 100%
> compatible with Linux and work out of the box without installing extra
> drivers.

Would you be so kind and give us some links?

KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: OT: Bash: what is eval doing here?

[Kamil Jońca]

rhkra...@gmail.com writes:

> In my (seemingly unending) quest to understand ssh, I've come across a 
> document that calls for running =eval 'ssh-agent'= from a command line.
>
> I wondered why, as I thought I would get the same result from just running 
> =ssh-agent=, but the results are different -- see below:
>
> $ eval `ssh-agent`
> Agent pid 23929
>
> $ ssh-agent
> SSH_AUTH_SOCK=/tmp/ssh-uLqQ9VWX0RL7/agent.23932; export SSH_AUTH_SOCK;
> SSH_AGENT_PID=23933; export SSH_AGENT_PID;
> echo Agent pid 23933;
>
> Can anybody on here explain what is going on / why?

ssh-agents prints details about its config (i.e. where ssh should search
authentication agent) - and thats all. (these are SSH_AUTH_SOCK et al.)

eval `` in turn takes these statements and try to evaluate them
(i.e. creates these two variables in environment)

as an example try
--8<---cut here---start->8---
$echo "KJONCA_VAR=this_is_test"
$set | grep KJONCA
$eval $(echo "KJONCA_VAR=this_is_test")
$set |grep KJONCA
--8<---cut here---end--->8---

KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: google account say it will no longer deliver email

[Kamil Jońca]

rhkra...@gmail.com writes:

> On Wednesday, June 08, 2022 12:18:58 PM Curt wrote:
>> On 2022-06-08, Felmon Davis  wrote:
>> > that's the thing: I don't understand how the parts fit together; what
>> > is the connection between:
>> > 
>> > (1) 2-step auth
>> > (2) app-specific pw
>> 
>> Without (1) turned on, you cannot create (2).
>
> But, once you've created (2), can you turn (1) back off (and still have (2) 
> work)?

I do not remember, but I think, that this makes all "app passwords"
invalid.

KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: Why is systemd starting Firefox?

[Kamil Jońca]

local10  writes:

>
> # systemctl list-units | grep -i firefox

what is the result of:
$systemctl --user list-units

(as a regular user)


-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: Alternatives to ISC dhcp-client ?

[Kamil Jońca]

john doe  writes:

[...]
>>
>
> You might be better off asking this on the appropriate mailing list! :)

I asked:
https://lists.freedesktop.org/archives/systemd-devel/2022-May/047889.html

My impressions:
1. Scripts called by dhcp client are "BAD THING" (according to systemd
developers) - and systemd-networkd will not handle it
2. systemd-networkd lacks of some functionality I need, and I doubt it
will have (bridge without interfaces, partial nat and so on)

So for now I will use isc-dhcp-client until it will be impossible.

KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: setting path for root after "sudo su" and "sudo" for Debian Bullseye (11)

[Kamil Jońca]

Tom Browder  writes:

> I need a special path setting for root after both "sudo" and "sudo su." How 
> can I set that up correctly?

It is quite misterious for me.
What is the purpose of "sudo su" instead of plain "sudo" or "sudo -i"
KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: google account say it will no longer deliver email

[Kamil Jońca]

Brian  writes:

[...]

> When was the last time you experienced that or heard of a well-documented
> case of it happening?
I do not know what you mean "well documented"
https://haveibeenpwned.com/ is enough?

> I do not even know what my passwords are.

Does not matter. I also know very few my passwords (or rathers
'secrets') - only these to unlock password manager(s).

> Nothing to
>  be stolen!
Erm? Could you clarify? 


I do not know what is your point.
I believe you can protect your passwords. (So do I , I hope). But we
are rather rare species now.
Moreover, although your provider should not keep password in plain,
quite often they do.

> Your claim is a good example of "frighten the user into doing what we want".
Well, no? I think I was clear, that I do not like google/ms behavior.
KJ


-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: google account say it will no longer deliver email

[Kamil Jońca]

Brian  writes:

> On Fri 13 May 2022 at 08:42:21 -0400, Michael Stone wrote:
>
>> On Fri, May 13, 2022 at 07:16:11AM +0200, to...@tuxteam.de wrote:
>> > A loong password is not "equivalent" to 2FA, that's right. Good
>> > password management (of which length is but a part) is as secure
>> > as 2FA.
>> 
>> No, it really isn't.
>
> How does a 40 random character, high entropy sound for Google? Good
> enough to go up against 2FA? Avoiding the tedium and inconveniece,
> of course.

Think about leaks.
Password can be stolen, while with 2fa you have to take control over two
factors.

Saying that IMO "app paswords" (maybe with time validity)  are good
compromise between security and convenience.
And I do not like oauth2 in its current incarnation.
KJ


-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: google account say it will no longer deliver email

[Kamil Jońca]

Virgo Pärna  writes:

> On Thu, 12 May 2022 20:59:16 +0200, Fero Dali  wrote:
>> On Thu, May 12, 2022 at 8:08 PM Virgo Pärna  wrote:
>>>
>>> Tried rechecking all mails, but did not find that mail. TOTP
>>> based twofactor can be used even without phone app.
>>
>> I made a mistake and replied privately to mick crane and he was very
>> kind and repost that mail to the list:
>> https://lists.debian.org/debian-user/2022/05/msg00331.html
>>
>
>   Ok. Google Authenticator based 2 factor is TOTP. That is why I
> said, that it can be used without phone. Keepass password manager
> supports it. But that does mean, that you need to have access to those
> programs anywhere, where you are logging into gmail. So that can be an
> issue.
yubikeys can be 2FA, either as U2F or totp (at least this one
https://www.yubico.com/pl/product/yubikey-5-nfc/ or 
https://www.yubico.com/pl/product/yubikey-5-nfc/)


KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: fstab problem

[Kamil Jońca]

ghe2001  writes:

> Supermicro workstation, Debian Buster
>
> Mounting disks isn't working with UUIDs. At boot or manually mounting:
SOA#1

--8<---cut here---start->8---
$ grep UUID /etc/fstab
UUID=a967fe27-9c42-4442-b71a-74b2c43c68be   /boot ext4 
defaults,errors=remount-ro 0 2
$sudo mount /boot/
$mount |grep boot
/dev/md2 on /boot type ext4 (rw,relatime,errors=remount-ro)
--8<---cut here---end--->8---

I have this for a quite long time. 
>
> UUID=301d6d6d-6782-4be3-b979-0cb595ef1a48 /backupDisk ext4default 
> 1   1

Are you sure you have good uuid here? 

>
> says:
>
> mount: /backupDisk: wrong fs type, bad option, bad superblock on /dev/sde1, 
> missing codepage or helper program, or other error.
>
> Both mountings work fine with:
>
> /dev/sde1 /backupDisk ext4default 
> 0   0
>
> The UUID line was copied from "https://wiki.debian.org/fstab; -- and
I would check if you have proper white characters in line - sometimes
when copying from web pages I got "unicode spaces" (different from 0x9
and 0x20) 

KJ


-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: Alternatives to ISC dhcp-client ?

[Kamil Jońca]

Kamil Jońca  writes:

[...]
>>
>> But systemd-networkd also has a huge number of configuration options
>> that may do what you want anyway
>>
>> https://www.freedesktop.org/software/systemd/man/systemd.network.html
>
> Hm. Can you create bridge without ports with systemd-networkd?
> i.e.
>

Another question. Can I pass option during interface up/down?
For example, in my if-up*/if-down* scripts I have code for replacing (or
not!) default route when needed.[1]

Then I can execute something like:

--8<---cut here---start->8---
ifup wlan0 -o replacedefaultroute=on
--8<---cut here---end--->8---

how I can achieve this with networkctl (or other systemd tool)?

Moreover https://gitlab.com/craftyguy/networkd-dispatcher/-/issues/61
So my migration probes are not very promising :/

I take into account that I have some habits and some thing should be
done completely different way[2]. But for now I even don't know if some
things can be achieved. 

KJ
[1]
in man systemd.network
I found
--8<---cut here---start->8---
[DHCPV4]
UseRoutes=
--8<---cut here---end--->8---
but I am not sure if this is about default routes or only classless
static routes

[2] - I had to spent some time to "properly" translate my iptables
rules/scripts to nftables ones (using sets and maps instead simple
iptables -I ... nad iptables -D ... command). 


-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: Alternatives to ISC dhcp-client ?

[Kamil Jońca]

Jeremy Ardley  writes:

> On 8/5/22 3:19 pm, Kamil Jońca wrote:
>> I cannot see if systemd-networkd can run scripts[1] after change in
>> lease. Am I missing something?
>>
> The top answer below is a partial answer to your question.
>
> https://unix.stackexchange.com/questions/469716/systemd-networkd-run-script-after-dhcp-client-aqcuires-new-address

You mean:

"I couldn't get networkd-dispatcher to respond to dhcp changes on Ubuntu
Server 20.04, but[...] " :) ?

Yes. I know that this is two year old, but I did not found anything
newer with answer.


>
> But systemd-networkd also has a huge number of configuration options
> that may do what you want anyway
>
> https://www.freedesktop.org/software/systemd/man/systemd.network.html

Hm. Can you create bridge without ports with systemd-networkd?
i.e.

--8<---cut here---start->8---
iface qemu inet static
dns-search myquemudomain
address 192.168.1.1
netmask 255.255.255.0
bridge_ports none #part which I was not able to achieve
--8<---cut here---end--->8---


I still have situation described in
https://lists.debian.org/debian-user/2022/02/msg00118.html

I simply try to look for migration, but it seems that most of testing I
will have to do by myself. 

KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: Alternatives to ISC dhcp-client ?

[Kamil Jońca]

Jeremy Ardley  writes:

[...]
>
> You can just use systemd-networkd as an IPv4 dhcp client.

I cannot see if systemd-networkd can run scripts[1] after change in
lease. Am I missing something?

KJ
[1] similar to /etc/dhcp/dhclient*hooks.d
-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: interface/network scripting - how to?

[Kamil Jońca]

Anssi Saari  writes:

> Kamil Jońca  writes:
>
>> 2. name resolving is properly configured:
>>   ie. home1.tld DNS queries are passed to home1 network
>>   work1.tld DNS queries are passed to work1 network (via openvpn tunnel)
>>   work2.tld DNS queries are passed to work2 network (via ipsec tunnel)
>
> So how have you setup this part? I always thought this needs a local
> name server, such as systemd-networkd provides and which I switched to
> once I heard it had been implemented. Before I had just wobbly
> resolvconf which usually got the DNS setup wrong. I managed fix it so it
> was mostly OK but it was never good.
Point for you. :)
I forgot to mention about dnsmasq, whose configuration is updated by
scripts.

KJ
-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: interface/network scripting - how to?

[Kamil Jońca]

john doe  writes:

[..]
>
>> 2. How these things can be achieved with systemd-networkd? I read the
>> manuals, but I was not able to find working examples and I am not sure
>> where can I start.
>>
>
> The Systemd mailing lists!

Thanks. Will try.
KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

interface/network scripting - how to?

[Kamil Jońca]

Current situation:
debian laptop with interfaces defined in /etc/network/interfaces
+ resolvconf package and bunch of scripts wchich configures network
(routes and name resolving) according to interfaces/vpn up down.
For example
1.  I am connected to  home1 network (connected by wifi, no default
routing ), this network sets routing to some subnets with dhcp option
121 (and dhclient scripts handles this)
2. I am connected via etch to router with default gateway
3. I am connected to work1 network via openvpn tunnel.
4. I am connected to work2 network via ipsec gateway.

I want to (and with my current config this is done)
that:
1. proper routes are established (especially these with option 121)
2. name resolving is properly configured:
  ie. home1.tld DNS queries are passed to home1 network
  work1.tld DNS queries are passed to work1 network (via openvpn tunnel)
  work2.tld DNS queries are passed to work2 network (via ipsec tunnel)
I am quite happy with my current config but sometimes I can read that
/etc/network/interfaces is "deprecated" in favor of systemd-networkd or
netplan.
So I have two questions:
1. Should I prepare migration?
2. How these things can be achieved with systemd-networkd? I read the
manuals, but I was not able to find working examples and I am not sure
where can I start.
  
KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: Firefox PDF download - strange behaviour.

[Kamil Jońca]

Greg Wooledge  writes:

> On Sun, Jan 16, 2022 at 05:47:13PM +0100, Kamil Jońca wrote:
>> Recently I recognized strange behaviour during pdf download with
>> firefox.
>> 1. When I enter target name with colon - this colon is replaced with
>> space.
>
> Probably because colons are not allowed in filenames on Microsoft
> platforms.  I can easily see Firefox applying the same sanitization
> code on all platforms.

This is also my guess :). 
But another question is: how can I turn it off and make firefox save
filenames requested by me and not filtered, and not to create files with
numbers.
KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: Firefox PDF download - strange behaviour.

[Kamil Jońca]

songbird  writes:

> Kamil Jońca wrote:
>>
>> Recently I recognized strange behaviour during pdf download with
>> firefox.
>> 1. When I enter target name with colon - this colon is replaced with
>> space.
>
>   no idea because i usually replace any strange characters 
> in file names with underlines before saving them to disk.  i
> do not automatically save or open pdfs from firefox or any
> other utility.

>
>
>> 2. When target file exists -  firefox does not ask to replace it but
>> create file with number.
>> (for example: I have already file.pdf, then firefox creates file(1).pdf)
>> What am I missing?
>
>   this is normal behavior for as long as i can remember using
> firefox.

This is simply not true. Because if I try to save *.jpeg, or *.jpg - i
got question if I want to overwrite file, which already exists.
And I am sure that some time ago pdf-s was also treated this way.
KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Firefox PDF download - strange behaviour.

[Kamil Jońca]

Recently I recognized strange behaviour during pdf download with
firefox.
1. When I enter target name with colon - this colon is replaced with
space.
2. When target file exists -  firefox does not ask to replace it but
create file with number.
(for example: I have already file.pdf, then firefox creates file(1).pdf)
What am I missing?

User Agent  Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 
Firefox/96.0
OS  Linux 5.15.0-2-amd64 #1 SMP Debian 5.15.5-2 (2021-12-18)
KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: How to debug Yubikey communication

[Kamil Jońca]

Kamil Jońca  writes:

> I have strange problem.
>
> I use Yubikey 5 with OATH and gpg key applications configured on it.
>
> In general it works (i.e. I got oath codes and can use gpg to
> encrypt/decrypt messages.)
> But when this key is in usb port it "gold circle" lights withut any
> visible reason.

After some deeper digging I think I found "guilty"

It was "security device" in firefox
--8<---cut here---start->8---
library=/usr/lib/x86_64-linux-gnu/onepin-opensc-pkcs11.so
name=OpenSC smartcard framework (0.22)
--8<---cut here---end--->8---

which used library from opensc-pkcs11 package.


KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: PAM two factors authentication

[Kamil Jońca]

Kamil Jońca  writes:

> 2. and probably use substack
> (http://linux-pam.org/Linux-PAM-html/sag-configuration-file.html) but,
> honestly I did tested it.
> KJ
Should be "I did NOT tested it" :( Sorry.
KJ


-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: How to debug Yubikey communication

[Kamil Jońca]

Teemu Likonen  writes:

> * 2021-11-13 18:23:13+0100, Kamil Jońca wrote:
>
>> I use Yubikey 5 with OATH and gpg key applications configured on it.
>
>> How can I debug communication with this key?
>
> Edit ~/.gnupg/scdaemon.conf file and add lines there:
>
> debug-level 8
> log-file /tmp/scdaemon.log
>
> You should probably read some of the "man scdaemon" manual too.
>
> I don't know about your actual problem and probably can't help with PGP

So do I :/
I even does not know if it is related to u2f/gpg/oath
KJ

http://wolnelektury.pl/wesprzyj/teraz/

Re: PAM two factors authentication

[Kamil Jońca]

André Rodier  writes:

> Hello Kamil,
>
> This is not exactly what I asked.
>
> I want two factors authentication, with the first factor (the
> password) and the second one being one of many (Yubikey, google auth
> or u2f)

Please do not top post.
One thing: what do you mean "yubikey" in this context?
Yubikey (at least 5 which I own) have some "applications" and can act as
u2f key or generate codes compatible with google auth (I least I was
able to use it as a replacement for google auth).
Or you mean its own challenge-response protocol?
And if I understand you correctly you should:
1. verify if there are pam modules (at least for u2f and yubico answer
is "yes")
2. and probably use substack
(http://linux-pam.org/Linux-PAM-html/sag-configuration-file.html) but,
honestly I did tested it.
KJ



>
> Thanks,
>
> On 13/11/2021 18:13, Kamil Jońca wrote:
>> André Rodier  writes:
>> 
>>> Hello all,
>>>
>>> I can use various second factors authentications on Debian:
>>>
>>> - google authenticator
>>> - u2f key
>>> - yubikey
>>>
>>> I would like to configure pam sessions to have 1) password
>>> authentication, and then 2) one of the second factor described above.
>>>
>>> How this can be achieved, please ?
>>>
>>> Thanks for your answers.
>>>
>>> André Rodier.
>>>
>> Well.
>> I can say that I follow:
>> https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F
>> and I can use my ubikey (I believe its u2f application) to login/unlock.
>> 
>> KJ
>> 

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: PAM two factors authentication

[Kamil Jońca]

André Rodier  writes:

> Hello all,
>
> I can use various second factors authentications on Debian:
>
> - google authenticator
> - u2f key
> - yubikey
>
> I would like to configure pam sessions to have 1) password
> authentication, and then 2) one of the second factor described above.
>
> How this can be achieved, please ?
>
> Thanks for your answers.
>
> André Rodier.
>

Well.
I can say that I follow:
https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F
and I can use my ubikey (I believe its u2f application) to login/unlock.


KJ


-- 
http://wolnelektury.pl/wesprzyj/teraz/

How to debug Yubikey communication

[Kamil Jońca]

I have strange problem.

I use Yubikey 5 with OATH and gpg key applications configured on it.

In general it works (i.e. I got oath codes and can use gpg to
encrypt/decrypt messages.)
But when this key is in usb port it "gold circle" lights withut any
visible reason.

How can I debug communication with this key?
I tried something like:

find /dev/ -mmin -10 |grep -v '^/dev/pts'|grep -v -x '/dev/'|xargs -d '\n' 
inotifywait -m -r --format '%T %w <%f> %e' --timefmt '%Y%m%d %H%M%S' 
/dev/hidraw2
(after putting yubikey into usb port) but without success

Any ideas?
KJ


-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: Updating kernels impossible when /boot is getting full

[Kamil Jońca]

David Christensen  writes:

[...]
>
> A 500 GB boot partition would be enough for several kernels, etc., on
> Debian 10 amd64.

OP wrote about 500 _M_ bytes (0.5G), and I can confirm, this is rather
little, when trying updating kernels.
KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: graphic tablet

[Kamil Jońca]

Kamil Jońca  writes:

> I thought about HUION 1060p, but there are different opinions (for

For a record:

I took a risk and bought it.
After putting:
--8<---cut here---start->8---
Section "InputClass"
Identifier "Huion on wacom"
 MatchIsTablet "on"
 MatchProduct "HID 256c:006d Pad"
 MatchDevicePath "/dev/input/event*"
 Driver "wacom"
EndSection
--8<---cut here---end--->8---
in /etc/X11/xorg.conf.d/50-huion.conf
situation is as follows:

- moving works (can draw in gimp) :)
- tablet side buttons work (at least are reported by xev)
- pen buttons seems to work but I am not sure what they really do (in gimp
they can move cannvas and show menu)
- 16 press fields does not work or I cannot configure them

KJ


-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

graphic tablet

[Kamil Jońca]

Does somebody can recomend graphical tablet to use with debian (I mean device
to drawing conenected by usb/bluetooth)
I thought about HUION 1060p, but there are different opinions (for
example
https://www.reddit.com/r/huion/comments/eqricq/huion_1060p_drivers_linux/)
and I am feel little lost.
Maybe different model?

KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: spectre-meltdown-checker: Hash Sum mismatch

[Kamil Jońca]

Harald Dunkel  writes:

> Hi folks,
>
> aptitude shows
>
> E: Failed to fetch
>
> http://deb.debian.org/debian/pool/main/s/spectre-meltdown-checker/spectre-meltdown-checker_0.42-1_all.deb:
>  Hash Sum mismatch
>Hashes of expected file:
>- SHA256:a5b777497c860a51ce1f1fd888f727531ea60be625ffe6787aebf12823177e2f
>- MD5Sum:3e6e8e46213f00c03d1103757bca1fd5 [weak]
>- Filesize:45208 [weak]
>Hashes of received file:
>- SHA256:1dca832b59ff6fce1b506c5291418a30c99e0d1f5b43b504909bfd8bbfdc3490
>- MD5Sum:2f3d9c6f6a5f7704b64f6f582ee4dcd7 [weak]
>- Filesize:45208 [weak]
>Last modification reported: Mon, 27 May 2019 11:14:06 +
> E: Unable to fetch some packages; try '-o APT::Get::Fix-Missing=true' to 
> continue with missing packages
>
> I already cleared the cache of apt-cacher-ng, but the problem comes back.
> What would you suggest how to proceed?


What do you mean "already cleared cache"  I have similar problem with
other package and I have to pysically
"rm /path/to/package/in/apt-cacher"

KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: Debian switchable MTA mechanism

[Kamil Jońca]

Georgi Naplatanov  writes:

> On 2/16/21 10:37 AM, Kevin Shell wrote:
>> Hello Debian Users.
>> 
>> Why Debian does't have a switchable MTA mechanism
>> to allow install multiple MTAs at the same time?
>> 
>> Fedora, Centos etc. allow users to install 
>> multiple MTAs at the same time.
>> There's a "alternatives --config mta" command
>> to allow to choose between alternative MTA.
>> 
>
> Hi Kevin.
>
> What is the use-case for multiple MTAs, port 25 is only one.

1. But it is possible to have multiple interfaces.
2. You may want one MTA to listen only on MAS (587) port and second on
25 port, for examples.

KJ


-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: AMD GPU + HDMI + vlc = lockup

[Kamil Jońca]

Kamil Jońca  writes:

>
> Yesterday this lockup happens with monitor connected by DVI. So my
> theory that these lockups are related to DVI/HDMI connection became
> untrue.

And today, lockup happened with smplayer (with mpv under the hood) so it
is more general issue with X/kernel/hardware. :(
KJ


-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: AMD GPU + HDMI + vlc = lockup

[Kamil Jońca]

Felix Miata  writes:

> Kamil Jońca composed on 2021-02-06 09:41 (UTC+0100):
>
>> Yesterday this lockup happens with monitor connected by DVI. So my
>> theory that these lockups are related to DVI/HDMI connection became untrue.
>> I will try to investigate further. Again thanks to Felix for his
>> efforts so far.
>
> You never answered one of my last questions:
> "Have you tried watching top as you start VLC?"

Sorry. I did it now. It is about 90-110 % regardless lockup or not.


>
> Is your HD 5450 passively cooled? If yes, you might try placing a case fan

Yes. I try to avoid fans, but I think I have no choice.
KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: AMD GPU + HDMI + vlc = lockup

[Kamil Jońca]

Kamil Jońca  writes:

> Felix Miata  writes:
>
>> Kamil Jońca composed on 2021-02-06 09:41 (UTC+0100):
>>
>>> Yesterday this lockup happens with monitor connected by DVI. So my
>>> theory that these lockups are related to DVI/HDMI connection became untrue.
>>> I will try to investigate further. Again thanks to Felix for his
>>> efforts so far.
>>
>> You never answered one of my last questions:
>> "Have you tried watching top as you start VLC?"
>
> Sorry. I did it now. It is about 90-110 % regardless lockup or not.


I mean vlc takes ~90-110% CPU.

KJ


-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: AMD GPU + HDMI + vlc = lockup

[Kamil Jońca]

Kamil Jońca  writes:

> There is desktop box with sid.
>
> sudo lspci|grep -i vga
> 08:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] 
> Cedar [Radeon HD 5000/6000/7350/8350 Series]
>
> So far I have monitor connected via DVI
>
> Recently I connected monitor via hdmi output (instead old one)
> And strange things starts happend.
> When I tried to play movie with vlc there were hand for few seconds and
> then monitor "resets", and there were only black rectanle - have to
> reopen movie.
>

Yesterday this lockup happens with monitor connected by DVI. So my
theory that these lockups are related to DVI/HDMI connection became
untrue.
I will try to investigate further. Again thanks to Felix for his
efforts so far.

KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: AMD GPU + HDMI + vlc = lockup

[Kamil Jońca]

Felix Miata  writes:

> Kamil Jońca composed on 2021-02-04 07:14 (UTC+0100):
>
>> Felix Miata writes:
>
>>> How quickly after video start does this happen, right away, or only after a 
>>> while?
>
>> when I launch vlc with list of movie files. vlc "waits" (and then there
>> 
>> []
>   
> There what?

vlc hangs. And then theres is GPU reset and vlc is functionable again,
can play movies. When I turn off vlc and then start it again - story
repeats.


>   
> I suppose the hang could be from CPU initializing VLC before the video 
> actually

TBH I doubt, but I'll try.

> starts running. Have you tried watching top as you start VLC? How powerful is 
> your
> CPU?

cat /proc/cpuinfo|head -n 30
processor   : 0
vendor_id   : GenuineIntel
cpu family  : 6
model   : 15
model name  : Intel(R) Xeon(R) CPU   E5345  @ 2.33GHz
stepping: 11
microcode   : 0xbc
cpu MHz : 2327.594
cache size  : 4096 KB
physical id : 0
siblings: 4
core id : 0
cpu cores   : 4
apicid  : 0
initial apicid  : 0
fpu : yes
fpu_exception   : yes
cpuid level : 10
wp  : yes
flags   : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov 
pat pse36 clflush dts acpi mmx fxsr sse sse2 ht tm pbe syscall nx lm 
constant_tsc arch_perfmon pebs bts rep_good nopl cpuid aperfmperf pni dtes64 
monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm dca lahf_lm pti tpr_shadow vnmi 
flexpriority vpid dtherm
vmx flags   : vnmi flexpriority tsc_offset vtpr vapic
bugs: cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds 
swapgs itlb_multihit
bogomips: 4655.18
clflush size: 64
cache_alignment : 64
address sizes   : 38 bits physical, 48 bits virtual
power management:


... repeated four times ...
>
> When I have trouble with VLC, I often find trouble absent using SMplayer.

KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: AMD GPU + HDMI + vlc = lockup

[Kamil Jońca]

[ I replied yesterday, but I cannot see this on list ] 

Felix Miata  writes:

> Kamil Jońca composed on 2021-02-02 21:37 (UTC+0100):
> ...
>> kjonca@alfa:~%uname -a
>> Linux alfa 5.10.0-2-amd64 #1 SMP Debian 5.10.9-1 (2021-01-20) x86_64 
>> GNU/Linux
>> kjonca@alfa:~%cat /etc/debian_version 
>> bullseye/sid
>  
>> This is sid upgraded ~ weekly.
>
> How quickly after video start does this happen, right away, or only after a 
> while?

when I launch vlc with list of movie files. vlc "waits" (and then there

[]
> Graphics:
>   Device-1: AMD Cedar [Radeon HD 5000/6000/7350/8350 Series]
>   vendor: PC Partner Limited driver: radeon v: kernel bus ID: 01:00.0
>   chip ID: 1002:68f9 class ID: 0300
>   Display: x11 server: X.Org 1.20.10 driver: loaded: modesetting

"Display: x11 server: X.Org 1.20.10 driver: loaded: radeon display ID: :0"

but when I changed to "modesetting" I also noticed hangup.

BTW what is difference between the two in terms of performance for
example?


[...]
>   OpenGL: renderer: llvmpipe (LLVM 11.0.1 128 bits) v: 4.5 Mesa 20.3.3
>   compat-v: 3.1 direct render: Yes
OpenGL: renderer: AMD CEDAR (DRM 2.50.0 / 5.10.0-2-amd64 LLVM 11.0.1) 
v: 3.3 Mesa 20.3.3 compat-v: 3.1 direct render: Yes 

How can I test "llvmpipe" here?


> Info:...Shell: Bash v: 5.1.4 running in: konsole inxi: 3.3.00
> # dmesg | grep adeon
> [   38.052237] [drm] radeon kernel modesetting enabled.
> [   38.387770] fb0: switching to radeondrmfb from VESA VGA
> [   38.388095] radeon :01:00.0: vgaarb: deactivate vga console
> [   38.389555] radeon :01:00.0: VRAM: 1024M 0x - 
> 0x3FFF (1024M used)
> [   38.389561] radeon :01:00.0: GTT: 1024M 0x4000 - 
> 0x7FFF
> [   38.389820] [drm] radeon: 1024M of VRAM memory ready
> [   38.389824] [drm] radeon: 1024M of GTT memory ready.
> [   38.926339] radeon :01:00.0: firmware: direct-loading firmware 
> radeon/CEDAR_pfp.bin
> [   39.013160] radeon :01:00.0: firmware: direct-loading firmware 
> radeon/CEDAR_me.bin
> [   39.07] radeon :01:00.0: firmware: direct-loading firmware 
> radeon/CEDAR_rlc.bin
> [   39.526315] radeon :01:00.0: firmware: direct-loading firmware 
> radeon/CEDAR_smc.bin
> [   39.554674] [drm] radeon: dpm initialized
> [   39.774437] radeon :01:00.0: firmware: direct-loading firmware 
> radeon/CYPRESS_uvd.bin
> [   39.778359] [drm] enabling PCIE gen 2 link speeds, disable with 
> radeon.pcie_gen2=0
> [   39.794951] radeon :01:00.0: WB enabled
> [   39.794958] radeon :01:00.0: fence driver on ring 0 use gpu addr 
> 0x4c00
> [   39.794963] radeon :01:00.0: fence driver on ring 3 use gpu addr 
> 0x4c0c
> [   39.795338] radeon :01:00.0: fence driver on ring 5 use gpu addr 
> 0x0005c418
> [   39.795763] radeon :01:00.0: radeon: MSI limited to 32-bit
> [   39.795872] radeon :01:00.0: radeon: using MSI.
> [   39.795914] [drm] radeon: irq initialized.
> [   40.686752] [drm] Radeon Display Connectors
> [   40.794401] fbcon: radeondrmfb (fb0) is primary device
> [   40.894386] radeon :01:00.0: [drm] fb0: radeondrmfb frame buffer device
> [   40.917823] [drm] Initialized radeon 2.50.0 20080528 for :01:00.0 on 
> minor 0

similar but only 512M vram.

KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: AMD GPU + HDMI + vlc = lockup

[Kamil Jońca]

Felix Miata  writes:

> Kamil Jońca composed on 2021-02-02 21:37 (UTC+0100):
> ...
>> kjonca@alfa:~%uname -a
>> Linux alfa 5.10.0-2-amd64 #1 SMP Debian 5.10.9-1 (2021-01-20) x86_64 
>> GNU/Linux
>> kjonca@alfa:~%cat /etc/debian_version 
>> bullseye/sid
>  
>> This is sid upgraded ~ weekly.
>
> How quickly after video start does this happen, right away, or only after a 
> while?

Directly after starting, vlc "hangs" for a while, and then this strange things
happening.

>
> I tried with Bullseye, and it seems OK still after playing 20+ minutes out of 
> 58
> of satellite source recording of CBS' main high bitrate MPEG-4 stream, with 
> VLC
> on the VGA 1680x1050 in fullscreen mode. Switching to the HDMI 1920x1200 it's 
> still
> working, with top showing vlc around 320% CPU:

[... snip ]
Thank you for comprehensive test. I will try to debug it deeper.
KJ


-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: AMD GPU + HDMI + vlc = lockup

[Kamil Jońca]

Kamil Jońca  writes:

> Felix Miata  writes:
>
>> Kamil Jońca composed on 2021-02-02 21:37 (UTC+0100):
>> ...
>>> kjonca@alfa:~%uname -a
>>> Linux alfa 5.10.0-2-amd64 #1 SMP Debian 5.10.9-1 (2021-01-20) x86_64 
>>> GNU/Linux
>>> kjonca@alfa:~%cat /etc/debian_version 
>>> bullseye/sid
>>  
>>> This is sid upgraded ~ weekly.
>>
>> How quickly after video start does this happen, right away, or only after a 
>> while?
>
> Directly after starting, vlc "hangs" for a while, and then this strange things
> happening.
An then works without problems. Till next run.

KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: AMD GPU + HDMI + vlc = lockup

[Kamil Jońca]

Felix Miata  writes:

> Kamil Jońca composed on 2021-01-28 17:58 (UTC+0100):
>
>> When I back to DVI monitor everthing work without errors.
>
> Did you find a solution?

No. I back to my old DVI monitor. :(

>
> Which Debian? I too have a PC with HD 5450 Radeon. I could try to reproduce if
> knowing what to boot is what I have installed.

kjonca@alfa:~%uname -a
Linux alfa 5.10.0-2-amd64 #1 SMP Debian 5.10.9-1 (2021-01-20) x86_64 GNU/Linux
kjonca@alfa:~%cat /etc/debian_version 
bullseye/sid

This is sid upgraded ~ weekly.
KJ


-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: About mouse settings

[Kamil Jońca]

reader  writes:

> Are there any tools that can set what each button or scrollwhere does?
>
> I have a mouse that when pressing scrollwheel will not paste.  I can
> think of no other mouse I've had that does not paste (in linux) when
> the scroll where is pressed (assuming something has been mouse scraped
> or copied in other ways)

are you sure that scroll button works?
try "xev" and  see what is going on where yuu press scroll button.

KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: AMD GPU + HDMI + vlc = lockup

[Kamil Jońca]

Dan Ritter  writes:

> Kamil Jo?ca wrote: 
>> 
>> There is desktop box with sid.
>> 
>> sudo lspci|grep -i vga
>> 08:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] 
>> Cedar [Radeon HD 5000/6000/7350/8350 Series]
>> 
>> So far I have monitor connected via DVI
>> 
>> Recently I connected monitor via hdmi output (instead old one)
>> And strange things starts happend.
>> When I tried to play movie with vlc there were hand for few seconds and
>> then monitor "resets", and there were only black rectanle - have to
>> reopen movie.
>  
> ...
>
>> this is quite reproductible. Can I make anything about it?
>> When I back to DVI monitor everthing work without errors.
>
> Is it on every movie or just this one?

Sorry, I think I described it wrongly.
It is rather connected to start vlc not to play movie as such.

IE. if I have some movies on playlist then after start vlc I got GPU
hangup (as described) and then I can play any movie from  the list
without problems.

Moreover mplayer also plays these movies without any troubles and
hangups.

KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

AMD GPU + HDMI + vlc = lockup

[Kamil Jońca]

There is desktop box with sid.

sudo lspci|grep -i vga
08:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Cedar 
[Radeon HD 5000/6000/7350/8350 Series]

So far I have monitor connected via DVI

Recently I connected monitor via hdmi output (instead old one)
And strange things starts happend.
When I tried to play movie with vlc there were hand for few seconds and
then monitor "resets", and there were only black rectanle - have to
reopen movie.

In logs I got something like:
alfa kernel: [114324.608912] [drm:cypress_dpm_set_power_state [radeon]] *ERROR* 
rv770_restrict_performance_levels_before_switch failed
alfa kernel: [114335.021950] radeon :08:00.0: ring 5 stalled for more than 
10252msec
alfa kernel: [114335.021959] radeon :08:00.0: GPU lockup (current fence id 
0x0002112c last fence id 0x00021130 on ring 5)
alfa kernel: [114335.533922] radeon :08:00.0: ring 5 stalled for more than 
10764msec
alfa kernel: [114335.533931] radeon :08:00.0: GPU lockup (current fence id 
0x0002112c last fence id 0x00021130 on ring 5)
alfa kernel: [114336.047455] radeon :08:00.0: couldn't schedule ib
alfa kernel: [114336.047519] [drm:radeon_uvd_suspend [radeon]] *ERROR* Error 
destroying UVD (-22)!
alfa kernel: [114336.047581] radeon :08:00.0: couldn't schedule ib
alfa kernel: [114336.047606] [drm:radeon_uvd_suspend [radeon]] *ERROR* Error 
destroying UVD (-22)!
alfa kernel: [114336.048724] radeon :08:00.0: Saved 23 dwords of commands 
on ring 0.
alfa kernel: [114336.048738] radeon :08:00.0: GPU softreset: 0x0019
alfa kernel: [114336.048741] radeon :08:00.0:   GRBM_STATUS   = 
0xE0001CA0
alfa kernel: [114336.048744] radeon :08:00.0:   GRBM_STATUS_SE0   = 
0x8003
alfa kernel: [114336.048747] radeon :08:00.0:   GRBM_STATUS_SE1   = 
0x0007
alfa kernel: [114336.048749] radeon :08:00.0:   SRBM_STATUS   = 
0x200800C0
alfa kernel: [114336.048752] radeon :08:00.0:   SRBM_STATUS2  = 
0x
alfa kernel: [114336.048755] radeon :08:00.0:   R_008674_CP_STALLED_STAT1 = 
0x0100
alfa kernel: [114336.048758] radeon :08:00.0:   R_008678_CP_STALLED_STAT2 = 
0x00011000
alfa kernel: [114336.048760] radeon :08:00.0:   R_00867C_CP_BUSY_STAT = 
0x00068404
alfa kernel: [114336.048763] radeon :08:00.0:   R_008680_CP_STAT  = 
0x80878647
alfa kernel: [114336.048766] radeon :08:00.0:   R_00D034_DMA_STATUS_REG   = 
0x44C83D57
alfa kernel: [114336.062121] radeon :08:00.0: GRBM_SOFT_RESET=0x7F6B
alfa kernel: [114336.062283] radeon :08:00.0: SRBM_SOFT_RESET=0x0100
alfa kernel: [114336.063441] radeon :08:00.0:   GRBM_STATUS   = 
0x3828
alfa kernel: [114336.063445] radeon :08:00.0:   GRBM_STATUS_SE0   = 
0x0007
alfa kernel: [114336.063447] radeon :08:00.0:   GRBM_STATUS_SE1   = 
0x0007
alfa kernel: [114336.063450] radeon :08:00.0:   SRBM_STATUS   = 
0x200800C0
alfa kernel: [114336.063453] radeon :08:00.0:   SRBM_STATUS2  = 
0x
alfa kernel: [114336.063456] radeon :08:00.0:   R_008674_CP_STALLED_STAT1 = 
0x
alfa kernel: [114336.063458] radeon :08:00.0:   R_008678_CP_STALLED_STAT2 = 
0x
alfa kernel: [114336.063461] radeon :08:00.0:   R_00867C_CP_BUSY_STAT = 
0x
alfa kernel: [114336.063463] radeon :08:00.0:   R_008680_CP_STAT  = 
0x
alfa kernel: [114336.063466] radeon :08:00.0:   R_00D034_DMA_STATUS_REG   = 
0x44C83D57
alfa kernel: [114336.063479] radeon :08:00.0: GPU reset succeeded, trying 
to resume
alfa kernel: [114336.088752] [drm] PCIE GART of 1024M enabled (table at 
0x0014C000).
alfa kernel: [114336.05] radeon :08:00.0: WB enabled
alfa kernel: [114336.088890] radeon :08:00.0: fence driver on ring 0 use 
gpu addr 0x2c00
alfa kernel: [114336.088893] radeon :08:00.0: fence driver on ring 3 use 
gpu addr 0x2c0c
alfa kernel: [114336.089607] radeon :08:00.0: fence driver on ring 5 use 
gpu addr 0x0005c418
alfa kernel: [114336.106128] [drm] ring test on 0 succeeded in 1 usecs
alfa kernel: [114336.106140] [drm] ring test on 3 succeeded in 2 usecs
alfa kernel: [114336.282680] [drm] ring test on 5 succeeded in 1 usecs
alfa kernel: [114336.282694] [drm] UVD initialized successfully.
alfa kernel: [114336.325529] [drm] ib test on ring 0 succeeded in 0 usecs
alfa kernel: [114336.325592] [drm] ib test on ring 3 succeeded in 0 usecs
alfa kernel: [114337.073849] [drm] ib test on ring 5 succeeded

this is quite reproductible. Can I make anything about it?
When I back to DVI monitor everthing work without errors.

KJ



-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: Disk problem whilst attempting to install Buster (10.7)

[Kamil Jońca]

Peter Hillier-Brook  writes:

> On 25/01/2021 17:58, Dan Ritter wrote:
>> Peter Hillier-Brook wrote: 
> Trying to install Buster to a new Acer Aspire A515-56. The install (from
> live DVD) hangs asking for disk device ID. This info is at least 12
> screws from immediate resolution, except for the BIOS(?)/UEFI output of:
>
>>> Thanks Dan. That's useful info, but until I am able to install Debian
>>> it's a little theoretical :-)
>>>
>>> My problem is that the installation stops at the "finding disks" step,
>>> says it can't locate a driver and could I help, from a comprehensive
>>> list of devices. I paraphrase the question as the m/c is now turned off.
>> 
>> Oh. That's harder.
>> 
>> Luckily, this exists:
>> 
>> https://wiki.debian.org/InstallingDebianOn/Acer/Aspire%205%20A515-56


hm.
kjonca@mysz:~%sudo dmidecode|less
[...]
Product Name: Aspire A515-56

I can confirm, that I was not be able to install buster (no disk found), and I 
used sid
image on usb.

Moreover I was not be able to boot when I create gpt partition table,
and I user old msdos (but this can be my PBKAC thing)
KJ


-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Cannot compile qemu

[Kamil Jońca]

I tried to compile qemu by myself (this is not the first time).
I issued
%sudo apt-get build-dep qemu
%apt-get source qemu
and then
in qemu directory
%debuild -us -uc -b
claims about header files:

[...]

cc -fPIE -DPIE -std=gnu99 -Wall -m64 -mcx16 -D_GNU_SOURCE 
-D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -Wstrict-prototypes 
-Wredundant-decls -Wundef -Wwrite-strings -Wmissing-prototypes 
-fno-strict-aliasing -fno-common -fwrapv -g -O2 
-fdebug-prefix-map=/home/kjonca/tmp/debian/qemu-5.2+dfsg=. 
-fstack-protector-strong -Wformat -Werror=format-security -Wdate-time 
-D_FORTIFY_SOURCE=2 -Wold-style-declaration -Wold-style-definition 
-Wtype-limits -Wformat-security -Wformat-y2k -Winit-self -Wignored-qualifiers 
-Wempty-body -Wnested-externs -Wendif-labels -Wexpansion-to-defined 
-Wno-missing-include-dirs -Wno-shift-negative-value -Wno-psabi 
-fstack-protector-strong -c -o config-temp/qemu-conf.o config-temp/qemu-conf.c
config-temp/qemu-conf.c:1:10: fatal error: sys/kcov.h: No such file or directory
1 | #include 
  |
[...]

cc -fPIE -DPIE -std=gnu99 -Wall -m64 -mcx16 -D_GNU_SOURCE 
-D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -Wstrict-prototypes 
-Wredundant-decls -Wundef -Wwrite-strings -Wmissing-prototypes 
-fno-strict-aliasing -fno-common -fwrapv -g -O2 
-fdebug-prefix-map=/home/kjonca/tmp/debian/qemu-5.2+dfsg=. 
-fstack-protector-strong -Wformat -Werror=format-security -Wdate-time 
-D_FORTIFY_SOURCE=2 -Wold-style-declaration -Wold-style-definition 
-Wtype-limits -Wformat-security -Wformat-y2k -Winit-self -Wignored-qualifiers 
-Wempty-body -Wnested-externs -Wendif-labels -Wexpansion-to-defined 
-Wno-missing-include-dirs -Wno-shift-negative-value -Wno-psabi 
-fstack-protector-strong -o config-temp/qemu-conf.exe config-temp/qemu-conf.c 
-pie -Wl,-z,relro -Wl,-z,now -m64 -g -O2 
-fdebug-prefix-map=/home/kjonca/tmp/debian/qemu-5.2+dfsg=. 
-fstack-protector-strong -Wformat -Werror=format-security -Wdate-time 
-D_FORTIFY_SOURCE=2 -Wl,-z,relro -Wl,--as-needed -fstack-protector-strong
config-temp/qemu-conf.c:1:10: fatal error: sys/endian.h: No such file or 
directory
1 | #include 
  |  ^~
compilation terminated.

any hints?
KJ


-- 
http://wolnelektury.pl/wesprzyj/teraz/

Future of X, fvwm and wayland

[Kamil Jońca]

It seems, that main graphical UI base will be Wayland instead of X
Window.
If I understand correctly Wayland has no separate window  manager
process.
As an user of FVWM (desktop box) and xfce (laptop) I feel little lost.
In particular it is not clear to me if it will be possible to use FVWM /
xfce on top (X)Wayland?
Will be possible to use emacsclient with ssh X tunneling?
KJ
-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: 780 files in /usr/share/zoneinfo/

[Kamil Jońca]

rhkra...@gmail.com writes:

> On Tuesday, November 24, 2020 01:07:10 PM Greg Wooledge wrote:
>> As I said, figuring out the valid TZ strings for a given location on
>> our planet is a challenge.  Unfortunately, the ... fine people ... who
>> devised the standards for this sort of thing thought it would be really
>> super clever to treat ALL unknown TZ strings as if they were "UTC0".
>
> ...
>
>> Outside of the USA, you'll probably need to go with the "nearest big
>> city" names that are the current vogue.  The best way to use those is
>> probably "ls /usr/share/zoneinfo", choose your continent, and then
>> (for example) "ls /usr/share/zoneinfo/Asia".  Then pick a city from
>> the resulting set, and pray.
>> 
>> If there's a better way, I don't know it.
>
> Just google [time in ] (e.g., time in China).  No need to find 
> a 
> TZ string.

Heh. OP concers about 3.5 MB of locale tz data and you want to install
browser which is usually much bigger?
KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: 780 files in /usr/share/zoneinfo/

[Kamil Jońca]

Mike McClain  writes:

[...]
> Locale is another area where there is a lot of data that the
> average user, I suspect, has no use for and localepurge in Debian, at
> least, is hamstrung by the packagers, hooking it to dpkg and
I disagree.
Even quite small enterprises work internationally now.
And it  is important to me if my coworker from Bangalore has working
time or is in bed before calling him :)
So "TZ=Asia/Kolkata date" is your friend :)


KJ
-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: HDD for CCTV

[Kamil Jońca]

mick crane  writes:

> regarding earlier post with do not reply request.
> There's loads of HDDs advertised as "for CCTV, like a PC disk"
> Is there some difference between HDDs for video recording and regular
> PC HDDs ?

IIRC WD has discs series dedicated (Purple?)   for that.
They saying that normal disc  usage is "little write - lot of reads" and
cctv disc has reverse: "continuous write - sometimes read"
I do not know if this is real difference, but maybe?

KJ
PS. I am not connected to wd company, except I have some disc of them.

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: turn off receiving email

[Kamil Jońca]

 writes:

> On Wed, Nov 11, 2020 at 02:13:39AM -0600, Michael Morgan wrote:
>> Dear friend,
>> 
>>  
>> 
>> A simple and silly question: how to subscribe to this mail list and set up
>> not to receive email? I only found a digest option when subscribing. 
>
> Hmmm. What advantage do you expect from being subscribed without receiving
> mails?

1. reading by WWW
2. reading by mail->usenet gateway (as I do)

KJ


-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

Re: Local shared storage configuration

[Kamil Jońca]

Andrei POPESCU  writes:

> On Mi, 11 nov 20, 08:44:18, Kamil Jońca wrote:
>> Andrei POPESCU  writes:
>> 
>> > On Ma, 03 nov 20, 17:34:48, Joe wrote:
>> >> 
>> >> Those of us who use NTFS do so deliberately to provide compatibility
>> >> with Windows. It's not that long ago that Linux NTFS support was a bit
>> >> flaky, so we don't do it solely by our own choice. 
>> >
>> > One use case that is significantly easier with NTFS is setting up a 
>> > shared local storage for several users on the same system.
>> 
>> Why not for example exFat? (This is not a rant, I have no such
>> requirements so far and I am just curious)
>
> What would be the benefits of exFAT over NTFS (on Linux).

exfat is simpler,
exfat has kernel driver

Am I wrong?
KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: Local shared storage configuration

[Kamil Jońca]

Andrei POPESCU  writes:

> On Ma, 03 nov 20, 17:34:48, Joe wrote:
>> 
>> Those of us who use NTFS do so deliberately to provide compatibility
>> with Windows. It's not that long ago that Linux NTFS support was a bit
>> flaky, so we don't do it solely by our own choice. 
>
> One use case that is significantly easier with NTFS is setting up a 
> shared local storage for several users on the same system.

Why not for example exFat? (This is not a rant, I have no such
requirements so far and I am just curious)

KJ


-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: how to download old edition

[Kamil Jońca]

"Thomas Schmitt"  writes:

[...]
> jigdo-lite's messages are not overly helpful in this case.
>
> Try jigdo-lite with "Debian mirror"
>
>   http://archive.debian.org/debian-amd64
>
> Although this is amd64 and not i386, the package matches, because it is
> of "Architecture: all".
>

Thanks a lot. It worked.


KJ


-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

how to download old edition

[Kamil Jońca]

Recently I tried to download old sarge jigdo images.
Almost all was succeded, except one:
When I try
https://cdimage.debian.org/cdimage/archive/3.1_r8/i386/jigdo-cd/debian-31r8-i386-binary-14.jigdo
(+template file)

--8<---cut here---start->8---
[...]

2020-10-18 18:00:34 (397 KB/s) - 
‘./debian-31r8-i386-binary-14.iso.tmpdir/us.cdimage.debian.org/cdimage/snapshot/Debian/pool/main/z/zope-quotafolder/zope-quotafolder_0.1.1-1_all.deb’
 saved [16726/16726]

Found 0 of the 1 files required by the template 

   
Copied input files to temporary file `debian-31r8-i386-binary-14.iso.tmp' - 
repeat command and supply more files to continue

-
Aaargh - 1 files could not be downloaded. This should not
happen! Depending on the problem, it may help to retry downloading
the missing files.


[...]
--8<---cut here---end--->8---

Is anything that can be done with this?
KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

Re: libvirt guest bridge configuration

[Kamil Jońca]

Lucio Crusca  writes:

> I'm trying to bridge a network interface between host and guest (both
> Debian Buster+Bullseye+Sid) so that NAT is not needed.
>
> In the host /etc/network/interfaces I've declared a bridge like this:
>
> auto eno1
> iface eno1 inet static
>   address 2.4.6.8
>   netmask 255.255.255.224
>   gateway 2.4.6.1
>   up route add -net 2.4.6.0 netmask 255.255.255.224 gw 2.4.6.1 dev eno1
>
>
> auto virbr-dummy
> iface virbr-dummy inet manual
> pre-up /sbin/ip link add virbr-dummy type dummy
> up /sbin/ip link set virbr-dummy address 52:54:00:f0:37:ba
>
>
> auto virbr10
> iface virbr10 inet static
> bridge_ports virbr-dummy
> bridge_stp on
> bridge_fd 2
> address 2.4.6.73
> netmask 255.255.255.224
> gateway 2.4.6.65
> broadcast 2.4.6.95
> up route add -net 2.4.6.64 netmask 255.255.255.224 gw 2.4.6.65 dev eno1

My config:
iface qemu inet static
address 192.168.55.1
netmask 255.255.255.0
bridge_ports none

Please note "none" at bridge_ports, no need use virbr-dummy.
It is not clear to me why you manually set routing.
KJ



-- 
http://wolnelektury.pl/wesprzyj/teraz/
People who have what they want are very fond of telling people who haven't
what they want that they don't want it.
-- Ogden Nash

Re: qemu - some confusions

[Kamil Jońca]

Reco  writes:

>   Hi.
>
> On Fri, Sep 11, 2020 at 09:46:54PM +0200, Kamil Jońca wrote:
>> Dan Ritter  writes:
>> 
>> > Kamil Jo?ca wrote: 
>> >> Dan Ritter  writes:
>> >> 
>> >> 
>> >> Sorry, I do not understand.
>> >> If  LSI 53c810 / 53c895a is not supported, how output
>> >> "qemu-system-x86_64 -device help" should be interpreted?
>> >> 
>> >> KJ
>> >
>> > Read Reco's message.
>> 
>> Sorry, still does not understand that: "LSI 53c810 / 53c895a is not
>> supported by qemu"
>
[...long and compehensive explanation ...]


> libvirt. So, unless specified otherwise, here QEMU = libvirt, and

Thank you.

KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/
In the dimestores and bus stations
People talk of situations
Read books repeat quotations
Draw conclusions on the wall.
-- Bob Dylan

Re: qemu - some confusions

[Kamil Jońca]

Dan Ritter  writes:

> Kamil Jo?ca wrote: 
>> Dan Ritter  writes:
>> 
>> 
>> Sorry, I do not understand.
>> If  LSI 53c810 / 53c895a is not supported, how output
>> "qemu-system-x86_64 -device help" should be interpreted?
>> 
>> KJ
>
> Read Reco's message.

Sorry, still does not understand that: "LSI 53c810 / 53c895a is not
supported by qemu"

Sentence: "qemu handles more cases than virt-manager" (from Reco's message) is
understandable.

KJ


-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html
Giving money and power to governments is like giving whiskey and
car keys to teenage boys.
-- P. J. O'Rourke