Re: Current best practices for system configuration management?

2024-04-21 Thread Tim Woodall
On Thu, 18 Apr 2024, Mike Castle wrote: Now, I would like to expand that into also setting up various config files that I currently do manually, for example, the `/etc/apt/*` configs I need to make the above work. For a single set of files, manual isn't bad, but as I want to get into setting

Re: Am I missing a trick somewhere? lxc-usernsexec and squashfs

2024-04-07 Thread Tim Woodall
On Sat, 6 Apr 2024, Tim Woodall wrote: Hi, I use lxc-usernsexec to simulate root (and other users) for a non-root user. lxc-usernsexec -m b:0:10:65536 That then chroots into an overlayfs mounted using fuse. The lowerdir is a mounted squashfs, the upperdir is a regular directory

Am I missing a trick somewhere? lxc-usernsexec and squashfs

2024-04-06 Thread Tim Woodall
ons that involve doing steps as the real root user aren't suitable. Tim.

Re: Dependencies between components.

2024-04-06 Thread Tim Woodall
as at it I thought it made sense to add dependencies for those too so if I ever do use backports-sloppy, I will get backports too rather than have to remember to manually install it. Tim.

Dependencies between components.

2024-03-30 Thread Tim Woodall
Is there a wiki or something else that lays out exactly what other distributions and components each debian (distribution,component) tuple is allowed to depend on? This is what I've concluded so far. I'm assuming transitive dependencies are allowed, e.g. bookworm-updates-contrib can depend on

Re: shellcheck, bashism's and one liners.

2024-03-17 Thread Tim Woodall
On Sun, 17 Mar 2024, Greg Wooledge wrote: Tim's assumption here is that he can write a function which emits a stream of whitespace-separated words, and use this safely in an unquoted command substitution. count $(args) I'm guessing "count" is a stand-in for something more complex, but

Re: shellcheck, bashism's and one liners.

2024-03-17 Thread Tim Woodall
On Sun, 17 Mar 2024, Greg Wooledge wrote: On Sun, Mar 17, 2024 at 09:25:10AM +, Tim Woodall wrote: In almost all other cases, the space separated items cannot, even in theory, contain a rogue space, so suppressing the warning is fine Famous Last Words™. As one example, it calls out

Re: shellcheck, bashism's and one liners.

2024-03-17 Thread Tim Woodall
On Sun, 17 Mar 2024, Geert Stappers wrote: On Sun, Mar 17, 2024 at 09:25:10AM +, Tim Woodall wrote: Hi, I've been cleaning up some bash scripts Good and, where possible, addressing things reported by shellcheck. Oh, shellcheck, https://www.shellcheck.net/ I have this one-liner

shellcheck, bashism's and one liners.

2024-03-17 Thread Tim Woodall
Hi, I've been cleaning up some bash scripts and, where possible, addressing things reported by shellcheck. I have this one-liner (which works but shellcheck doesn't like the quoting) idxsrc="$( newest_file $( APT_CONFIG=${APT_CONFIG} apt-get indextargets --format '$(FILENAME)' 'Identifier:

Re: Committing git working tree with other git repos

2024-03-14 Thread Tim Woodall
f anything goes wrong, just delete the configs directory and start # again. You are changing nothing on the upstream unless/until you # decide to push. tim@dirac:~/git/flatten/configs (xen3)$ ls origin/ aptmirror17 citrix17 dirac ipmi17 ntp17wiki17 aptmirror19 cups17 einste

Re: Committing git working tree with other git repos

2024-03-13 Thread Tim Woodall
On Wed, 13 Mar 2024, Tim Woodall wrote: On Wed, 13 Mar 2024, Paul M Foster wrote: Folks: I have a /home/paulf/stow directory with contains subdirectories for each of the packages whose dotfiles I want to manage, like: /home/paulf/stow/alacritty In each subdirectory, I have all the config

Re: Committing git working tree with other git repos

2024-03-13 Thread Tim Woodall
turn. If I've understood your need correctly this should not give any conflicts. If you don't want to mess with rewriting history then just regular git mv, rebase onto common master and rebase each tree in turn. But this will (IMO) make history harder to understand and any future rebase cleanups will likely be a disaster. Tim.

Re: Spam from the list?

2024-03-07 Thread Tim Woodall
On Thu, 7 Mar 2024, Andy Smith wrote: Hi, On Thu, Mar 07, 2024 at 09:44:51AM +0100, Hans wrote: > --- sninp --- > > Authentication-Results: mail35c50.megamailservers.eu; spf=none > smtp.mailfrom=lists.debian.org > Authentication-Results: mail35c50.megamailservers.eu; > dkim=fail

Re: SOLVED Re: Disk corruption and performance issue.

2024-02-26 Thread Tim Woodall
On Mon, 26 Feb 2024, Andy Smith wrote: Hi, On Mon, Feb 26, 2024 at 06:25:53PM +, Tim Woodall wrote: Feb 17 17:01:49 xen17 vmunix: [3.802581] ata1.00: disabling queued TRIM support Feb 17 17:01:49 xen17 vmunix: [3.805074] ata1.00: disabling queued TRIM support from libata

Re: SOLVED Re: Disk corruption and performance issue.

2024-02-26 Thread Tim Woodall
On Mon, 26 Feb 2024, Gremlin wrote: re running fstrim in a vm. The Host system takes care of it I guess you've no idea what iscsi is. Because this makes no sense at all. systemd or no systemd. The physical disk doesn't have to be something the host system knows anything about. Here's a

Re: SOLVED Re: Disk corruption and performance issue.

2024-02-26 Thread Tim Woodall
On Mon, 26 Feb 2024, Gremlin wrote: Are you using systemd ? No, I'm not You should not be running trim in a container/virtual machine Why not? That's, in my case, basically saying "you should not be running trim on a drive exported via iscsi" Perhaps I shouldn't be but I'd like to

SOLVED Re: Disk corruption and performance issue.

2024-02-26 Thread Tim Woodall
TLDR; there was a firmware bug in a disk in the raid array resulting in data corruption. A subsequent kernel workaround resulted in dramatically reducing the disk performance. (probably just writes but I didn't confirm) Initially, under heavy disk load I got errors like: Preparing to unpack

NUC freeazing due to kernel bug

2024-02-07 Thread Tim Janssen
been reported ever since kernel 5.10. I wonder if the debian devs are aware of this issue and if a fix is undereway. Best regards, Tim Janssen

Re: install Kernel and GRUB in chroot.

2024-02-03 Thread Tim Woodall
On Sat, 3 Feb 2024, Max Nikulin wrote: It seems secure boot is disabled in your case, so I am wondering why you do not boot xen.efi directly. Because the NVRAM is extremely tempremental. Most updates fail, or worse, corrupt it to the point it's hard to get anything to boot. Additionally,

Re: install Kernel and GRUB in chroot.

2024-02-02 Thread Tim Woodall
On Thu, 1 Feb 2024, Marco Moock wrote: Am 01.02.2024 um 19:20:01 Uhr schrieb Tim Woodall: $ cat /boot/efi/EFI/XEN/xen.cfg [global] default=debian [debian] options=console=vga smt=true kernel=vmlinuz root=/dev/mapper/vg--dirac-root ro quiet ramdisk=initrd.img menuentry "Xen EFI

Re: IPv6, ip token, NetworkManager and accept_ra

2024-02-02 Thread Tim Woodall
On Fri, 2 Feb 2024, Ralph Aichinger wrote: Hi fellow Debian users! In my quest to advance the IPv6 preparedness of my home LAN I want to find a solution to use IP tokens on all my clients. IP tokens (keeping the host part of the IPv6 address static while getting the subnet part by SLAAC) seem

Re: install Kernel and GRUB in chroot.

2024-02-01 Thread Tim Woodall
On Thu, 1 Feb 2024, Marco Moock wrote: Am 02.02.2024 um 01:46:06 Uhr schrieb Dmitry: 2. ==>BAM<== some how that binary knows the system partition. That information is on the EFI partition, where the GRUB bootloader binary also resides. root@ryz:/boot/efi/EFI# cat

Re: install Kernel and GRUB in chroot.

2024-02-01 Thread Tim Woodall
On Fri, 2 Feb 2024, Dmitry wrote: Hi Tim. The community is so kind. So. I'm not exactly sure what you're doing. Understand how GRUB works, to boot myself. 1. Trying to install Debian on the Flash. 2. Use it by the Debootstrap. 3. Now I want to boot using that Flash. Looks like a caught

Re: install Kernel and GRUB in chroot.

2024-02-01 Thread Tim Woodall
On Thu, 1 Feb 2024, Dmitry wrote: Greetings! After: 1. Creating GPT table and GPT partition with fdisk. 2. Copy data with a debootstrap. 3. Chroot into newly creating system. I need to prepare that system for booting. 1. Install Kernel. 2. Install GRUB and Configure. 3. Add changes to UEFI to

Re: Automatically installing GRUB on multiple drives

2024-01-26 Thread Tim Woodall
On Fri, 26 Jan 2024, Tim Woodall wrote: On Fri, 26 Jan 2024, Nicolas George wrote: Now that I think a little more, this concern is not only unconfirmed, it is rather absurd. The firmware would never write in parts of the drive that might contain data. UEFI understands the EFI system

Re: Automatically installing GRUB on multiple drives

2024-01-26 Thread Tim Woodall
On Fri, 26 Jan 2024, Nicolas George wrote: Now that I think a little more, this concern is not only unconfirmed, it is rather absurd. The firmware would never write in parts of the drive that might contain data. UEFI understands the EFI system filesystem so it can "safely" write new files

Re: Automatically installing GRUB on multiple drives

2024-01-25 Thread Tim Woodall
On Wed, 24 Jan 2024, Nicolas George wrote: It is rather ugly to have the same device be both a RAID with its superblock in the hole between GPT and first partition and the GPT in the hole before the RAID superblock, but it serves its purpose: the EFI partition is kept in sync over all devices.

Re: Disk corruption and performance issue.

2024-01-21 Thread Tim Woodall
On Sat, 20 Jan 2024, David Christensen wrote: On 1/20/24 08:25, Tim Woodall wrote: Some time ago I wrote about a data corruption issue. I've still not managed to track it down ... Please post a console session that demonstrates, or at least documents, the data corruption. Console

Disk corruption and performance issue.

2024-01-20 Thread Tim Woodall
1879223820 248 FTL_Program_Page_Count 0x0032 100 100 000Old_age Always - 1922002147 Does anything leap out at anyone? Anything I should try next? Normally I try and avoid having disks bought at the same time from the same brand paired together but I'll give that a try if it will fix this. Tim.

Re: standardize uid:gid?

2024-01-17 Thread Tim Woodall
On Thu, 18 Jan 2024, David Chmelik wrote: Couldn't Debian standardize uid:gid numbers for daemons? The oldest--and only strictly UNIX-like--GNU/Linux (Slackware) does this so if you install multiple instances and want them the same, you can backup /etc/passwd & / etc/group from one and use

Re: disable auto-linking of /bin -> /usr/bin/

2024-01-09 Thread Tim Woodall
On Wed, 10 Jan 2024, Jeffrey Walton wrote: I think some programs can break, like those that assume / and /usr are both mounted early in the boot process. I think the only guarantee is / will be mounted early, and all programs needed to boot are available from /. I thought there was a

Re: disable auto-linking of /bin -> /usr/bin/

2024-01-09 Thread Tim Woodall
On Wed, 10 Jan 2024, miphix wrote: If you were to issue 'ls -l /' You'll find that /bin, /sbin, lib{32,64,x32} are linked to their counterparts in /usr/. I under- stand the logic in doing so. However, for specific reasons that would require exhaustive explanations that I would prefer to save us

Re: Help: network abuse

2023-12-23 Thread Tim Woodall
On Sat, 23 Dec 2023, David Christensen wrote: Sending a RST to a falsified IP address would make the sending host into an attacker by proxy. Why do you suggest it? Because the OP wants it to stop. And the OP is running a server on this port that is clearly not responding properly or we'd at

Re: Help: network abuse

2023-12-23 Thread Tim Woodall
On Thu, 21 Dec 2023, David Christensen wrote: Perhaps you could set up a DMZ, move services into the DMZ, and provide a VPN connection to the DMZ for your Internet users. Then you could close all of the incoming WAN ports except VPN. It might be possible to put the VPN endpoint into a

Re: Help: network abuse

2023-12-21 Thread Tim Woodall
On Thu, 21 Dec 2023, Alain D D Williams wrote: My home PC is receiving, for hours at a time, 12-30 kB/s input traffic. This is unsolicited. I do not know what it is trying to achieve but suspect no good. It is also eating my broadband allowance. This does not show up in the Apache log files -

Re: Firefox, was: Telnet

2023-12-04 Thread Tim Woodall
On Mon, 4 Dec 2023, Michael Kj?rling wrote: On 4 Dec 2023 10:29 +, from debianu...@woodall.me.uk (Tim Woodall): Some years ago I abandoned firefox because there was no way to override one of its 'I'm sorry Dave, I'm afraid I can't do that' spasms. It's crazy that they make things like

Re: Telnet

2023-12-04 Thread Tim Woodall
On Sun, 3 Dec 2023, Greg Wooledge wrote: On Sun, Dec 03, 2023 at 11:52:51AM -0700, Charles Curley wrote: True. None the less, there is at least one perfectly good use for telnet: testing connections to servers. charles@hawk:~$ telnet hawk Trying 127.0.1.1... telnet: Unable to connect to

Re: connect two hosts over wifi without router?

2023-11-27 Thread Tim Woodall
On Mon, 27 Nov 2023, Hans wrote: Hi folks, just before I am trying forever: Is it possible, to connect two hosts directly over wlan without using a router? Yes. It's called adhoc networking. No AP, no router, just two wifi cards acting as a ptp link. But I doubt you can do it other than

Re: quick alpine config question?

2023-11-25 Thread Tim Woodall
On Sat, 25 Nov 2023, Tixy wrote: On Sat, 2023-11-25 at 13:49 +, Tixy wrote: On Sat, 2023-11-25 at 11:46 +, Tim Woodall wrote: OK. This is weird! Something is joining those two lines. Not at this end it isn't. For me, all 3 of your diffs look the same on screen and are binary

Re: quick alpine config question?

2023-11-25 Thread Tim Woodall
OK. This is weird! Something is joining those two lines. diff --git a/dovecot/conf.d/10-mail.conf b/dovecot/conf.d/10-mail.conf index b47235f..5b20997 100644 --- a/dovecot/conf.d/10-mail.conf +++ b/dovecot/conf.d/10-mail.conf @@ -27,7 +27,8 @@ # # # -mail_location =

Re: quick alpine config question?

2023-11-25 Thread Tim Woodall
On Sat, 25 Nov 2023, Tim Woodall wrote: On Fri, 24 Nov 2023, Tim Woodall wrote: On Thu, 23 Nov 2023, Karen Lewellen wrote: Hi folks, We have a member of the greater Toronto Linux Users group, who rather enjoys setting up email accounts,hosting allot of them personally. He is new to alpine

Re: quick alpine config question?

2023-11-25 Thread Tim Woodall
On Fri, 24 Nov 2023, Tim Woodall wrote: On Thu, 23 Nov 2023, Karen Lewellen wrote: Hi folks, We have a member of the greater Toronto Linux Users group, who rather enjoys setting up email accounts,hosting allot of them personally. He is new to alpine though, our test of roundcube was almost

Re: quick alpine config question?

2023-11-23 Thread Tim Woodall
. Maildir with INBOX in /home. I'll look up the config but it will probably be Saturday. I vaguely recall having ti tweak something in the dovecot configs. Tim.

Re: Boot fails to load network or USB, piix4_smbus - SMBus Host Controller, after update to dbus (1.14.10-3) unstable

2023-11-23 Thread Tim Woodall
On Thu, 23 Nov 2023, Andy Dorman wrote: I have not yet figured out how to fix our two broken servers since we can't boot them to update them. Since we have several identical running servers and can mount and manipulate the file system of the dead servers, is it possible to just copy a good

Re: Why is bullseye-backports recommended on bookworm?

2023-11-18 Thread Tim Woodall
On Tue, 14 Nov 2023, Vincent Lefevre wrote: To my surprise, reportbug asks me to use bullseye-backports (= oldstable-backports) on my bookworm (= stable) machine: Your version (6.1.55-1) of linux-image-6.1.0-13-amd64 appears to be out of date. The following newer release(s) are available in

Re: IMAP vs POP was Thunderbird vs Claws Mail

2023-11-18 Thread Tim Woodall
On Sat, 18 Nov 2023, Joe wrote: If this area is likely to be the issue, try telnet to the IMAP server using port 143, you should get back a list of capabilities which may help. Oddly, though I'm using port 993 to my local server, it does not return any information from that port, only on 143.

Re: Disk error?

2023-08-21 Thread Tim Woodall
On Mon, 21 Aug 2023, Tim Woodall wrote: On Wed, 24 Aug 2022, Tim Woodall wrote: I got this error while installing build-essential Preparing to unpack .../03-libperl5.34_5.34.0-5_arm64.deb ... Unpacking libperl5.34:arm64 (5.34.0-5) ... dpkg-deb (subprocess): decompressing archive '/tmp/apt

Re: Disk error?

2023-08-21 Thread Tim Woodall
On Wed, 24 Aug 2022, Tim Woodall wrote: I got this error while installing build-essential Preparing to unpack .../03-libperl5.34_5.34.0-5_arm64.deb ... Unpacking libperl5.34:arm64 (5.34.0-5) ... dpkg-deb (subprocess): decompressing archive '/tmp/apt-dpkg-install-zqY3js/03-libperl5.34_5.34.0

issue after Kernel upgrade

2023-08-14 Thread Tim McConnell
Hi List, I upgraded my Kernel and now after restarting my computer I have to go into /proc/sys/user/max_*_namespaces and modify the value to something other than 0 (zero). Where do I file a bug? I'm on Debian Stable with Kernel version 6.1.0-11-amd64 if it helps any. Thanks! -- Tim McConnell

Re: not a debian problem

2023-07-29 Thread Tim Woodall
On Sat, 29 Jul 2023, Tim Woodall wrote: On Wed, 26 Jul 2023, Dan Ritter wrote: Tim Woodall wrote: This is not a debian problem but I'm hoping the collective wisdom might have some ideas. One can be soft rebooted with no issues, the other hangs in the bios. Anyone seen anything like

Re: not a debian problem

2023-07-29 Thread Tim Woodall
On Wed, 26 Jul 2023, Dan Ritter wrote: Tim Woodall wrote: This is not a debian problem but I'm hoping the collective wisdom might have some ideas. One can be soft rebooted with no issues, the other hangs in the bios. Anyone seen anything like this and what was the issue? Both machines

Re: General Questions

2023-07-26 Thread Tim Woodall
On Tue, 25 Jul 2023, Greg Wooledge wrote: On Tue, Jul 25, 2023 at 07:53:52AM -0400, Dan Ritter wrote: Source Code wrote: 3. Is it possible to reduce RAM consumption? And minimize it? Let's say up to 100-200 mb? That depends on what you choose to run, and how. I would not recommend trying to

not a debian problem

2023-07-26 Thread Tim Woodall
bullseye if there are things I can check while booted. Tim

Re: override logrotate.timer from another package?

2023-07-04 Thread Tim Woodall
On Tue, 4 Jul 2023, Harald Dunkel wrote: Hi folks, what is the recommended way to override logrotate.timer from a metapackage to get hourly logfile rotation (depending on size and age of the logfile, as usual)? I had added etc/systemd/system/logrotate.timer.d/hourly.conf I'm not

Re: chroot: can't execute command "/bin/bash": No such file or directory

2023-06-18 Thread Tim Woodall
On Sun, 18 Jun 2023, Mario Marietto wrote: Hello. with qemu works,but I thought that it was better to avoid the usage of qemu. I'm a bit puzzled what you're trying to do. if you want to chroot on an amd64 machine then you have to use something like qemu to emulate the armhf processor. If

Re: chroot: can't execute command "/bin/bash": No such file or directory

2023-06-18 Thread Tim Woodall
On Sun, 18 Jun 2023, Mario Marietto wrote: Hello. Maybe a little problem for you,but a bigger problem for me. I've debootstrapped jessie on Ubuntu 14.04 with this command : debootstrap --foreign --arch=armhf jessie jessie-armhf http://archive.debian.org/debian and it worked ok,but when I try

Re: Debian home page -> Download link broken:

2023-06-10 Thread Tim Woodall
On Sat, 10 Jun 2023, Greg Wooledge wrote: On Sat, Jun 10, 2023 at 06:52:59PM -0400, songbird wrote: = # apt-get update [...] Reading package lists... Done E: Repository 'http://deb.debian.org/debian-debug testing-debug InRelease' changed its 'Codename' value from 'bookworm-debug' to

Re: Running Debian without initramfs?

2023-06-08 Thread Tim Woodall
On Thu, 8 Jun 2023, James Addison wrote: Hi folks, Does anyone have experience running Debian systems without using an initramfs? I'd be particularly keen to hear about laptop/desktop/server systems, because I think that a large motivating factor to use initramfs -- across many distributions

Re: Email sender refusing to send to unknown ca

2023-06-03 Thread Tim Woodall
On Fri, 2 Jun 2023, Tim Woodall wrote: On Fri, 2 Jun 2023, Jeffrey Walton wrote: On Fri, Jun 2, 2023 at 2:20?PM Tim Woodall wrote: Anyone come across delivery failures where the client cert is signed by an internal ca. Are you sure it's not a self-signed end-entity certificate used

Re: Email sender refusing to send to unknown ca

2023-06-02 Thread Tim Woodall
On Fri, 2 Jun 2023, Jeffrey Walton wrote: On Fri, Jun 2, 2023 at 2:20?PM Tim Woodall wrote: Anyone come across delivery failures where the client cert is signed by an internal ca. Are you sure it's not a self-signed end-entity certificate used in an Opportunistic Encryption scheme? https

Email sender refusing to send to unknown ca

2023-06-02 Thread Tim Woodall
Hi, Anyone come across delivery failures where the client cert is signed by an internal ca. Jun 2 03:45:27 imap202 sm-mta[14736]: STARTTLS=server, error: accept failed=-1, reason=tlsv1 alert unknown ca, SSL_error=1, errno=0, retry=-1, relay=mta140.fwdto.net [195.68.228.140] Jun 2 03:45:27

Re: A hypervisor for a headless server?

2023-06-02 Thread Tim Woodall
On Fri, 2 Jun 2023, Victor Sudakov wrote: Now I see that a supported minimal headless configuration probably does not exist at all. Define supported. You can boot a xen dom 0 with almost nothing installed other than xen and the essential set and some sysvinit stuff. I'd bet systemd would

Re: A hypervisor for a headless server?

2023-06-02 Thread Tim Woodall
On Fri, 2 Jun 2023, Michael Stone wrote: On Fri, Jun 02, 2023 at 11:09:36AM +0200, Paul Leiber wrote: +1 for Xen, AFAIK the standard apt installation doesn't include any management GUI. This is the howto which helped me getting started:

Re: linphone and address books

2023-06-02 Thread Tim Woodall
On Fri, 2 Jun 2023, Mario Marietto wrote: I forgot to specify that I don't like a telephone so much like I had 20 years ago. I mean,I would like to see a VOIP phone with the form factor of a smartphone. Sorry if I haven't been very clear. I use linphone on android. But modern androids are

RE: bind9 and dns forward

2023-06-01 Thread Tim Woodall
or none (I don't remember which) should mean that it doesn't complain. But this is rather brute force. There may be a cleaner way to do it for a single domain via trust anchors but it's not something I've tried to do. Tim.

Re: ipv6 on debian

2023-05-24 Thread Tim Woodall
On Wed, 24 May 2023, cor...@free.fr wrote: greetings, today I got a server from OVH with ipv6 only. is there any lightweight getting started tutorial for using ipv6 on debian? such as ipv6 setup, route, filters, DNS, etc. thanks in advance. Corey Do you mean already configured and working

Re: netmask question

2023-05-23 Thread Tim Woodall
On Tue, 23 May 2023, Tom Reed wrote: On Tue, May 23, 2023 at 08:24:10AM +0800, Tom Reed wrote: Sorry for my newbie question too. If I know the network addr: 192.168.1.0 And know the broadcast addr: 192.168.1.255 Then I should have the possibility to cal the netmask addr: 255.255.255.0

Re: netmask question

2023-05-22 Thread Tim Woodall
On Mon, 22 May 2023, Timothy M Butterworth wrote: On Mon, May 22, 2023 at 3:41?AM Tim Woodall wrote: On Sun, 21 May 2023, Timothy M Butterworth wrote: The only address that should have a netmask of 255.255.255.255 is the Loopback interface. I don't much use ipv4 any more if I can avoid

Re: netmask question

2023-05-22 Thread Tim Woodall
On Mon, 22 May 2023, cor...@free.fr wrote: On 22/05/2023 09:41, Tim Woodall wrote: On Sun, 21 May 2023, Timothy M Butterworth wrote: The only address that should have a netmask of 255.255.255.255 is the Loopback interface. I don't much use ipv4 any more if I can avoid it but isn't

Re: netmask question

2023-05-22 Thread Tim Woodall
On Sun, 21 May 2023, Timothy M Butterworth wrote: The only address that should have a netmask of 255.255.255.255 is the Loopback interface. I don't much use ipv4 any more if I can avoid it but isn't it normal for point-to-point links to have a netmask of 255.255.255.255? It definitely can

Re: netmask question

2023-05-22 Thread Tim Woodall
On Mon, 22 May 2023, to...@tuxteam.de wrote: number; for (human) display it is subdivided into four 8 bit chunks (called "octets" for obvious reasons), and those octets only can go from 0 to 255 (since 2^8 == 255). Nit, but 2^8 is 256.

Re: iptables reject with TCP RST

2023-05-14 Thread Tim Woodall
tcptraceroute might give you more clues as to where it's going wrong. In particular I'd look at local egress rules not allowing connections to port 587 outside of the lan. On Sun, 14 May 2023, Tom Reed wrote: On Sun, May 14, 2023 at 08:36:38AM +0800, Tom Reed wrote: tcp0 0

Re: GIT problem

2023-05-09 Thread Tim Woodall
On Tue, 9 May 2023, William Torrez Corea wrote: Command: git push master origin shouldn't that be git push origin master? Or even origin main? I want upload my change to branch MAIN but when i want upload my change i get the following error: remote: Support for password authentication

Changing TTL after socket is connected

2023-05-01 Thread Tim Woodall
, IPPROTO_IP, IP_TTL, , sizeof(ttl)) succeeds, but setting a ttl of 1 - when the target is 15 hops away, and the packet still gets there! Tim.

Re: AW: why symbolic link arnt visible?

2023-04-27 Thread Tim Woodall
On Fri, 28 Apr 2023, Maurizio Caloro wrote: Thanks for you answer I'm guessing what you mean by "will not appear": the web server doesn't show it. Yes the Webserver Apache will not present the symbolic link folder My first hunch would be that the web server can't read (or list) any of the

Re: debian stretch Sources update error,can anyone support?

2023-04-27 Thread Tim Woodall
On Thu, 27 Apr 2023, Greg Wooledge wrote: On Thu, Apr 27, 2023 at 05:08:10PM +0800, justzx wrote: Error message: Ign:39 http://cdn-fastly.deb.debian.org/debian-security stretch/updates/non-free Sources Stretch (Debian 9) probably no longer has a debian-security repo, if it was recently

Re: Am I infected with a rootkit?

2023-04-17 Thread Tim Woodall
On Mon, 17 Apr 2023, Stefan Monnier wrote: That said, using one computer as router, firewall, file server, name server, web server, and more represents "all of your eggs in one basket". I suggest using dedicated hardware for networking, network segmentation (e.g. DMZ), and kernel or hypervisor

Re: Apt sources.list

2023-04-16 Thread Tim Woodall
On Sat, 15 Apr 2023, Greg Wooledge wrote: Now, personally I don't feel this is a threat model that I need to worry about. I just use plain old http sources at home, and if "They" learn that I've downloaded rxvt-unicode and mutt, well, good for Them. The thread model I'm most concerned

Re: Debian Stretch : X server won't start after update

2023-04-14 Thread Tim Woodall
On Fri, 14 Apr 2023, Charles Curley wrote: On Fri, 14 Apr 2023 19:41:37 +0100 Brian wrote: I thought stretch is unsupported by Debian. Where did the update come from? Stretch is oldoldstable, and under LTS support. https://www.debian.org/releases/ That page is out of date. On the LTS

Re: Debian Stretch : X server won't start after update

2023-04-14 Thread Tim Woodall
On Fri, 14 Apr 2023, Brian wrote: I thought stretch is unsupported by Debian. Where did the update come from? It may or may not be supported, but it's still there AFAICT: [DIR] binary-amd64/ 2021-08-14 07:43 [ ] Packages.gz 2020-07-18 10:409.2M [ ]

Re: apt temporary failure resolving deb.debian.org

2023-04-11 Thread Tim Woodall
On Mon, 10 Apr 2023, Tim Woodall wrote: On Mon, 10 Apr 2023, Lee wrote: Why are you using google as forwarders ? To eliminate as many variables as possible. delv talking to google works. delv talking to bind talking to google fails. When talking directly, delv is using udp to talk

Re: ICMP router advertisement (ipv4)

2023-04-10 Thread Tim Woodall
On Tue, 11 Apr 2023, Jeremy Ardley wrote: On 11/4/23 02:19, Tim Woodall wrote: Unfortunately, I don't seem to have that option any more. My cable modem appears only to expose a layer 4 connection. Previous version of my router appear to have a "modem mode" but that doesn't e

Re: ICMP router advertisement (ipv4)

2023-04-10 Thread Tim Woodall
On Mon, 10 Apr 2023, Jeremy Ardley wrote: On 10/4/23 12:49, Tim Woodall wrote: And it doesn't forward packets from new ips either, it just silently drops them. I don't know how the router learns ips but I suspect it's something to do with DAD, I don't know about your router specifically

Re: apt temporary failure resolving deb.debian.org

2023-04-10 Thread Tim Woodall
On Mon, 10 Apr 2023, Lee wrote: Why are you using google as forwarders ? To eliminate as many variables as possible. delv talking to google works. delv talking to bind talking to google fails. When talking directly, delv is using udp to talk to google When talking via bind, bind is using

Re: ICMP router advertisement (ipv4)

2023-04-09 Thread Tim Woodall
On Mon, 10 Apr 2023, Tim Woodall wrote: On Mon, 10 Apr 2023, Jeremy Ardley wrote: On 10/4/23 11:02, Tim Woodall wrote: My firewall has a single /128 acquired via SLAAC and the RA from the router. My entire network is masqueraded through that single IP. What does the RA contain? Typically

Re: ICMP router advertisement (ipv4)

2023-04-09 Thread Tim Woodall
On Mon, 10 Apr 2023, Jeremy Ardley wrote: On 10/4/23 11:02, Tim Woodall wrote: My firewall has a single /128 acquired via SLAAC and the RA from the router. My entire network is masqueraded through that single IP. What does the RA contain? Typically on connection to an IPv6 capable ISP you

Re: apt temporary failure resolving deb.debian.org

2023-04-09 Thread Tim Woodall
On Sun, 9 Apr 2023, Andy Smith wrote: Hi Badli, On Sun, Apr 09, 2023 at 07:59:32AM +, Badli Al Rashid wrote: I got a temporary failure resolving deb.debian.org and www.debian.org since last week thursday. I can resolve other sites like www.kernel.org and others. Broke last monday for

Re: ICMP router advertisement (ipv4)

2023-04-09 Thread Tim Woodall
On Sun, 9 Apr 2023, Michel Verdier wrote: Le 9 avril 2023 Tim Woodall a ?crit : Apr 9 06:27:48 ... IN=isp OUT= MAC=... SRC=1.0.168.192 DST=224.0.0.1 ... PROTO=ICMP TYPE=9 CODE=0 This log is generated on your host? It comes directly from syslog or from a reporting tool? I don't get

Re: apt temporary failure resolving deb.debian.org

2023-04-09 Thread Tim Woodall
your keys. See // https://www.isc.org/bind-keys // dnssec-validation no; Tim.

Re: ICMP router advertisement (ipv4)

2023-04-09 Thread Tim Woodall
On Sun, 9 Apr 2023, Michel Verdier wrote: Le 9 avril 2023 Tim Woodall a ?crit : They're not causing me any issues but is it expected that the IP address is reversed in these messages? Apr 9 06:27:48 ... IN=isp OUT= MAC=... SRC=1.0.168.192 DST=224.0.0.1 ... PROTO=ICMP TYPE=9 CODE=0 No IP

ICMP router advertisement (ipv4)

2023-04-09 Thread Tim Woodall
(or to change router or ISP) Tim.

Re: Which takes priority, ipv4, or ipv6?

2023-04-01 Thread Tim Woodall
0 #label ::/0 1 #label 2002::/16 2 #label ::/96 3 #label :::0:0/96 4 #label fec0::/10 5 #label fc00::/7 6 #label 2001:0::/32 7 Tim

Re: debian server with two public IPs

2023-03-20 Thread Tim Woodall
On Mon, 20 Mar 2023, f...@dnsbed.com wrote: Hello list, I have a networking question that I can't understand for. I have the Debian 11 host with two ethernet cards. There is public IP and gateway for each ethernet card. (they are public IPs from two different net address blocks.) Say: eth0

Re: More RAID weirdness: external RAID over network

2023-03-17 Thread Tim Woodall
e sync complete, fail and remove the disk and then compare the random data file still on the mounted raid with the file on the failed disk. It depends on the sync completing in 10 seconds - otherwise you won't get that "Comparison passed" - but given that this is 10MB on an SSD it takes a fraction of a second to sync. Tim.

Re: More RAID weirdness: external RAID over network

2023-03-17 Thread Tim Woodall
On Fri, 17 Mar 2023, Nicolas George wrote: Dan Ritter (12023-03-17): If Reco didn't understand your question, it's because you are very light on details. No. Reco's answers contradict the very first sentence of my first e-mail. Is this possible? How can Reco's answers contradict that.

Re: home server for email box

2023-03-16 Thread Diane &amp; Tim
<<< No Message Collected >>>

Re: Forcing dhclient to not ignore tun0 interface when it's available

2023-03-02 Thread Tim Woodall
On Fri, 3 Mar 2023, Max Nikulin wrote: On 03/03/2023 10:08, Tim Woodall wrote: New to this thread, so might be totally off-piste but openvpn has hooks to run scripts like this: ... This is server side but the route-up/pre-down work client side too. Presumably you can do something here

Re: Building binary package, howto enable init.d/systemd start

2023-03-02 Thread Tim Woodall
On Thu, 2 Mar 2023, Konstantin Kletschke wrote: In debian/rules is: #!/usr/bin/make -f DH_VERBOSE=1 %: dh $@ clean: @# Do nothing build: @# Do nothing binary: mkdir -p debian/loqitmon mkdir -p debian/loqitmon/usr/ mkdir -p

Re: Forcing dhclient to not ignore tun0 interface when it's available

2023-03-02 Thread Tim Woodall
rver side but the route-up/pre-down work client side too. Presumably you can do something here to renew dhcp leases or restore resolv.conf. I'd assume whatever vpn you're using will have similar hooks, or possibly you xan use the default ones in /etc/network? Tim

Re: where are the actual ".deb" packages? all I see are "pkgcache.bin" and "srcpkgcache.bin" . . .

2023-02-27 Thread Tim Woodall
On Sun, 26 Feb 2023, Greg Wooledge wrote: On Sun, Feb 26, 2023 at 05:28:44PM +, Albretch Mueller wrote: Basically, I am trying to download all packages that are part of the installation dependencies of a given one into a directory of my choosing to then install packages on an unexposed

  1   2   3   4   5   6   7   8   9   10   >