Re: [DNG] Help with Spectre and Meltdown

On Wed, Jan 17, 2018 at 10:03:46PM -0500, taii...@gmx.com wrote: > According to wikipedia: > "The pinebook cannot be run solely on free software now (December 2017), Sad to hear this. Because of this, I guess we should tell the ftpmasters that atf-allwinner which I, seeing it's not going to be

Re: [DNG] Help with Spectre and Meltdown

On Tue, 16 Jan 2018 23:33:41 + jacksprat wrote: > I wanted to explore whether Devuan can provide a solution to the > Spectre/Meltdown fiasco. Is there a guide to what elements of Devuan > [jessie, ascii, ?] have been upgraded to address these issues? > > If I need to

Re: [DNG] Help with Spectre and Meltdown

On 17/01/18 23:00, jacksprat wrote: Thanks for the replies.  When I run the "spectre-meltdown-checker.sh" script [github.com/speed47 ] I see that even using a recent kernel [4.15-rc8] only Meltdown is covered. The two mitigations for Spectre [IBRS or kernel compiled

Re: [DNG] Help with Spectre and Meltdown

On 18/01/18 08:28, Hendrik Boom wrote: On Wed, Jan 17, 2018 at 09:25:19PM +0800, Tom Cassidy wrote: You can install the intel-microcode package. AMD processors have a similar amd-microcode package. https://packages.debian.org/intel-microcode It looks like the updated microcode with the

Re: [DNG] Help with Spectre and Meltdown

On Wed, Jan 17, 2018 at 10:14:13PM +0100, Adam Borowski wrote: > > > And I'm replacing my file server with one based on a MIPS processor. > > GnuBee? Yes. I'll see if it works when it gets here. -- hendrik ___ Dng mailing list Dng@lists.dyne.org

Re: [DNG] Help with Spectre and Meltdown

On 01/17/2018 05:17 PM, Dr. Nikolaus Klepp wrote: Am Mittwoch, 17. Januar 2018 schrieb Adam Borowski: [...] Grab a Pinebook. It's slow, but still faster than Raspberry Pi, and has two GB ram rather than one. For $89, you don't care that it's only a stop-gap before you can get a better one

Re: [DNG] Help with Spectre and Meltdown

It looks like the latest Firefox has mitigations in place for spectre and/or meltdown. Chrome will include them in the next update too I believe. https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/ > On 17 Jan 2018, at 23:00, jacksprat

Re: [DNG] Help with Spectre and Meltdown

On Wed, Jan 17, 2018 at 07:28:39PM -0500, Hendrik Boom wrote: > On Wed, Jan 17, 2018 at 09:25:19PM +0800, Tom Cassidy wrote: > > You can install the intel-microcode package. AMD processors have a similar > > amd-microcode package. > > > > https://packages.debian.org/intel-microcode > > > > It

Re: [DNG] Help with Spectre and Meltdown

On Wed, Jan 17, 2018 at 09:25:19PM +0800, Tom Cassidy wrote: > You can install the intel-microcode package. AMD processors have a similar > amd-microcode package. > > https://packages.debian.org/intel-microcode > > It looks like the updated microcode with the latest fixes is currently in >

[DNG] Devuan Missing Icons GdkPixbuf-WARNING

Hi I am trying live iso: devuan_jessie_1.0.0_i386_desktop-live.iso In root terminal I did,( I don't know whether the issue was caused by this ) but to be complete I did: apt-get update apt-get dist-upgrade So far in Synaptic and thunar I get blank windows, I mean all the expected icons are

Re: [DNG] Call for testing: ConsoleKit2

On Wed, Jan 17, 2018 at 07:02:36PM +0300, Hleb Valoshka wrote: > Hi! > > ConsoleKit2 has been packaged for experimental (but it's also > installable in Ascii). > > This is an update for the old ConsoleKit and can be installed instead of it. > > Please help with its testing. What to test: PC

Re: [DNG] Help with Spectre and Meltdown

on ARM alternative: ODROID C2 is a sub-100 pound/dollar single board computer like RaspberryPI3, but with 2 gbyte RAM and gigabit ethernet. it is a project as only Xubuntu is available as a ready-made Linux. I want one but can't afford time/effort. jacksprat

Re: [DNG] Help with Spectre and Meltdown

Am Mittwoch, 17. Januar 2018 schrieb Adam Borowski: > [...] > Grab a Pinebook. It's slow, but still faster than Raspberry Pi, and has two > GB ram rather than one. > > For $89, you don't care that it's only a stop-gap before you can get a > better one once such CPUs become available. Also, its

Re: [DNG] Help with Spectre and Meltdown

On 01/17/2018 02:15 PM, Cassandra of Troy wrote: Much appreciated from lurker(s) as well as the OP. Looking forward to unplugging this live USB stick and reading my mail on Jessie tomorrow morning. :) If any of you have the spare time to reply on or offlist, I value your opinions on whether

[DNG] Waterfox (was: Re: Help with Spectre and Meltdown)

On Wed, Jan 17, 2018 at 08:51:42AM +0100, Irrwahn wrote: > marc wrote on 17.01.2018 07:27: > > or maybe package up some of the firefox forks which > > are more security focused. > > Which would essentially boil down to a list of three candidates: > waterfox, icecat, or palemoon. > > My

Re: [DNG] Help with Spectre and Meltdown

On Wed, Jan 17, 2018 at 03:27:16PM -0500, Hendrik Boom wrote: > On Wed, Jan 17, 2018 at 07:27:24AM +0100, marc wrote: > > Spectre has no patch in the conventional sense. But there > > are two types of things one can do: > > > > * Move to a processor which doesn't speculate :) with so many > >

Re: [DNG] elogind testing for experimental and ascii-proposed

Hleb Valoshka wrote on 17.01.2018 20:54: > On 1/17/18, Irrwahn wrote: > >> * screen sessions killed on logout >> (regression, works with elogind disabled!) > > This is because elogind is designed to be logind replacement (and > actually shares its code) and so it's

Re: [DNG] Help with Spectre and Meltdown

On Wed, Jan 17, 2018 at 07:27:24AM +0100, marc wrote: > > Spectre has no patch in the conventional sense. But there > are two types of things one can do: > > * Move to a processor which doesn't speculate :) with so many > side effects. Processors found on the raspberry PI, for example, > are

Re: [DNG] elogind testing for experimental and ascii-proposed

On 1/17/18, Irrwahn wrote: > * screen sessions killed on logout > (regression, works with elogind disabled!) This is because elogind is designed to be logind replacement (and actually shares its code) and so it's bug-for-bug compatible. Systemd uses cgroups to

[DNG] Help with Spectre and Meltdown

Much appreciated from lurker(s) as well as the OP. Looking forward to unplugging this live USB stick and reading my mail on Jessie tomorrow morning. :) If any of you have the spare time to reply on or offlist, I value your opinions on whether switching to an AMD processor from a libreboooted

[DNG] Software design and Armageddon spaceships

Hi all, There's a movie on the web called "Evacuate Earth" at https://www.youtube.com/watch?v=kpkzxT2Ntto The premise is that a neutron star is coming to eat Earth, and a quarter million humans must go to a planet 5 lightyears away in order to preserve our species. The only part of this movie

Re: [DNG] Help with Spectre and Meltdow

On 01/17/2018 11:51 AM, William C Vaughan wrote: Date: Wed, 17 Jan 2018 14:09:09 +0100 From: Didier Kryn > To: dng@lists.dyne.org Subject: Re: [DNG] Help with Spectre and Meltdown Message-ID:

Re: [DNG] Help with Spectre and Meltdow

Date: Wed, 17 Jan 2018 14:09:09 +0100 From: Didier Kryn To: dng@lists.dyne.org Subject: Re: [DNG] Help with Spectre and Meltdown Message-ID: <1bf9d308-fc02-7cf6-7a70-50c817e24...@in2p3.fr> Content-Type: text/plain; charset=utf-8; format=flowed Le 17/01/2018 à 13:59, vmlinux a

[DNG] Call for testing: ConsoleKit2

Hi! ConsoleKit2 has been packaged for experimental (but it's also installable in Ascii). This is an update for the old ConsoleKit and can be installed instead of it. Please help with its testing. What to test: PC stop/hibernate/etc, mounting of usb drives and so on under DEs. === deb

Re: [DNG] elogind available in experimental and ascii-proposed

On Wed, Jan 17, 2018 at 11:39:21AM +, KatolaZ wrote: > On Wed, Jan 17, 2018 at 02:25:48PM +0300, Hleb Valoshka wrote: > > On 1/17/18, Didier Kryn wrote: > > > deb http://pkgmaster.devuan.org/merged/ ascii-proposed main contrib > > > non-free > > > > not /merged/ but /devuan/

Re: [DNG] Help with Spectre and Meltdown

Thanks for the replies. When I run the "spectre-meltdown-checker.sh" script [github.com/speed47] I see that even using a recent kernel [4.15-rc8] only Meltdown is covered. The two mitigations for Spectre [IBRS or kernel compiled with "retpoline" option with a retpoline-aware compiler] are harder

Re: [DNG] Help with Spectre and Meltdown

On Wed, Jan 17, 2018 at 09:25:19PM +0800, Tom Cassidy wrote: > You can install the intel-microcode package. AMD processors have a similar > amd-microcode package. > > https://packages.debian.org/intel-microcode > > It looks like the updated microcode with the latest fixes is currently in >

Re: [DNG] Help with Spectre and Meltdown

You can install the intel-microcode package. AMD processors have a similar amd-microcode package. https://packages.debian.org/intel-microcode It looks like the updated microcode with the latest fixes is currently in Debian testing so I guess you could grab it from there directly and install

Re: [DNG] Help with Spectre and Meltdown

Le 17/01/2018 à 13:59, vmlinux a écrit : On January 16, 2018 6:50:32 PM CST, KatolaZ wrote: [Snip] :: ::The only affected component is the kernel. Patch exist for jessie, ::AFAWN, there is no way to ::effectively patch Spectre. I haven't had time to actually read up on

Re: [DNG] Help with Spectre and Meltdown

On January 16, 2018 6:50:32 PM CST, KatolaZ wrote: [Snip] :: ::The only affected component is the kernel. Patch exist for jessie, ::AFAWN, there is no way to ::effectively patch Spectre. I haven't had time to actually read up on it, however, isn't there a micro code

Re: [DNG] elogind available in experimental and ascii-proposed

On Wed, Jan 17, 2018 at 02:25:48PM +0300, Hleb Valoshka wrote: > On 1/17/18, Didier Kryn wrote: > > deb http://pkgmaster.devuan.org/merged/ ascii-proposed main contrib non-free > > not /merged/ but /devuan/ > > > Nevertheless, I can't see neither elogind, nor consolekit2 > > ck2

Re: [DNG] elogind available in experimental and ascii-proposed

On Wed, Jan 17, 2018 at 11:59:22AM +0100, Didier Kryn wrote: > Le 15/01/2018 à 11:30, KatolaZ a écrit : > >The package is now available in Devuan in "ascii-proposed" > >     I've added this repository to my sources.list: > deb http://pkgmaster.devuan.org/merged/ ascii-proposed main contrib

Re: [DNG] elogind available in experimental and ascii-proposed

On 1/17/18, Didier Kryn wrote: > deb http://pkgmaster.devuan.org/merged/ ascii-proposed main contrib non-free not /merged/ but /devuan/ > Nevertheless, I can't see neither elogind, nor consolekit2 ck2 is not there still due to jenkins issues

Re: [DNG] elogind available in experimental and ascii-proposed

Didier Kryn wrote on 17.01.2018 11:59: > Le 15/01/2018 à 11:30, KatolaZ a écrit : >> The package is now available in Devuan in "ascii-proposed" > >     I've added this repository to my sources.list: > deb http://pkgmaster.devuan.org/merged/ ascii-proposed main contrib non-free > > Also added

Re: [DNG] elogind available in experimental and ascii-proposed

Le 15/01/2018 à 11:30, KatolaZ a écrit : The package is now available in Devuan in "ascii-proposed"     I've added this repository to my sources.list: deb http://pkgmaster.devuan.org/merged/ ascii-proposed main contrib non-free Also added the following line to apt.conf, because synaptic

Re: [DNG] elogind available in experimental and ascii-proposed

On 1/17/18, Andreas Messer wrote: > Btw, "ck-list-sessions" crashes for me: ... Have you rebooted your pc after upgrading CK to CK2? I believe this crash exist only when one is still running old ck daemon. Unfortunately it looks like there is no way to replace running ck

Re: [DNG] Help with Spectre and Meltdown

On Wed, Jan 17, 2018 at 12:50:32AM +, KatolaZ wrote: [cut] > > The only affected component is the kernel. Patch exist for jessie, > ascii, and unstable, but only for Meltdown. AFAWN, there is no way to > effectively patch Spectre. > > The patch for Meltdown comes directly from Debian: > >