Re: [DNG] Help needed:[Fwd: eudev: Methods to detect if running in a container.]
Hi Lorentz,
On 9/2/21 13:48, Lorenz wrote:
Few months ago I sent a patch for needrestart, and there is a function
(line 66) there to detect if it's running in a container; i'm not sure
that is something that was not already mentioned and discarded here,
but maybe it's worth checking.
I see..., it's written in perl and verifies the existence of
/proc/1/environ:
if (-r "/proc/1/environ") {
# check if we are inside of a container (fallback)
local $/;
open(HENV, '<', '/proc/1/environ');
$is_container = scalar(grep {/^container=/;} unpack("(Z*)*", ));
close(HENV)
}
In fact, there are several methods for detecting whether or not we are
within a container depending on the type of the container (for instance,
docker creates a |.dockerenv|||file in the root directory of the hosted
system),
and some of the scripts available on the web evaluate each possibility
separately for increased robustness. I think that VM are where things
get more complicated. I have some vague ideas for that,
being one of them related to the ram memory, but i still didn't spend
time on that.
Il giorno dom 3 gen 2021 alle ore 10:41 aitor <mailto:aitor_...@gnuinos.org>> ha scritto:
I don't know. But, as far as i know, this question arises from the
developers of runit.
Side question: where/who are the developers of runit?
The original author of runit seems to be Gerrit Pape:
http://smarden.org/runit/ <http://smarden.org/runit/>
but other people like Dmitry Bogatov or Britney might be involved
somehow in the project, at least as debian package mantainers.
And Lorenzo Puliti, maybe?
I'm planning extensive development for the next cycle
(Debian/Bookworm) so we probably should coordinate at least to make
sure that we don't step on each other foot
Regards,
Lorenzo
Quoting Svante Signell:
/> I'm trying to solve the problem of detecting if you are within a
container, like
> docker or LXC when running the eudev init script. If true udevd
should not be
> cstarted. The current version of eudev (3.2.9-4) has a buggy check for
> containers, and people running runit as init have problems, see #392./
Maybe i misunderstood him and made up my mind that developers of runit
were beyond this issue, while Svante was clearly referring to the users.
Whatever the case, i also would like to know about a possible mailing
list and we would meet each other there for sure :)
Cheers,
Aitor.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] FSF and human rights
Hi, On 26/3/21 22:58, Riccardo Mottola via Dng wrote: A post, written by Hannah Wolfman-Jones, with a response from civil-rights expert Nadine Strossen, former president of the ACLU. https://www.wetheweb.org/post/cancel-we-the-web I can only stand with this letter. Me too. Btw, quoting the paragraph: "Now, let's assume for the sake of argument, Stallman had an attitude that was objectively described as discriminatory on the basis on race and gender [ ... ] The only approach that could possibly work is an educational one!", let's remember one of the cornerstones of Stallman's thoughts: "We are humans, we make mistakes" Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] FSF and human rights
On 27/3/21 15:06, d...@d404.nl wrote: But I would like to keep politics*any politics except init freedom* as far as possible from Devuan All life is politics so I will not in any way connect my signing to the Devuan project. And I suggest others to do the same. I replaced gitea.devuan.dev/aitor_czr by the less associated gnuinos.org ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Request for assistance in dealing with a nouveau problem
Hi,
On 1/4/21 18:53, o1bigtenor via Dng wrote:
root@debianbase:/tmp/nouveau/nvidia# python3 extract_firmware.py
Please run this in a directory where NVIDIA-Linux-x86-340.108 is a subdir.
You can make this happen by running
wgethttp://us.download.nvidia.com/XFree86/Linux-x86/340.108/NVIDIA-Linux-x86-340.108.run
sh NVIDIA-Linux-x86-340.108.run --extract-only
Note: You can use other versions/arches, see the source for what is acceptable.
On the one hand, why are you using python3? The script is for python2
only; so, better to use python2 instead.
On the other, it seems that the NVIDIA subdirectory is not found. The
code launching this error is:
for (VERSION, ARCH) in product(VERSIONS, ARCHES):
if os.path.exists("NVIDIA-Linux-%s-%s" % (ARCH, VERSION)):
break
else:
print("""Please run this in a directory where
NVIDIA-Linux-x86-%(version)s is a subdir.
Blah blah blah
""" % {"version": VERSIONS[-1]})
where:
ARCHES = ("x86_64", "x86")
Are you under 64 bits? If so, try with this other one:
wget
http://us.download.nvidia.com/XFree86/Linux-x86_64/325.15/NVIDIA-Linux-x86_64-325.15.run
Good luck,
Aitor.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Request for assistance in dealing with a nouveau problem
On 2/4/21 0:16, g4sra via Dng wrote: You literally need to execute NVIDIA-Linux-x86-340.108.run --extract-only which will extract itself creating the subdirectory Didn't he/she? All the steps are specified in the website: |$ mkdir /tmp/nouveau $ cd /tmp/nouveau $ wget https://raw.github.com/envytools/firmware/master/extract_firmware.py $ wget http://us.download.nvidia.com/XFree86/Linux-x86/325.15/NVIDIA-Linux-x86-325.15.run $ sh NVIDIA-Linux-x86-325.15.run --extract-only $ python2 extract_firmware.py # this script is for python 2 only # mkdir /lib/firmware/nouveau # cp -d nv* vuc-* /lib/firmware/nouveau/ | Aitor. || ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] FSF, RMS and a danger to almost all GPL code
Dear Didier, On 2/4/21 10:14, Didier Kryn wrote: Le 01/04/2021 à 14:39, Steve Litt a écrit : Didier Kryn said on Wed, 31 Mar 2021 12:07:50 +0200 cancel-culture Please don't use that phrase, unless you're the second coming of Rush Limbaugh. It's an ugly, Foxnews/right wing radio epithet for the time-honored practice of boycotting, perhaps the last tool of power for the average citizen. It's a trope. Sorry Steve if you were shocked. I've never watched Foxnews nor the person you name and whose name I read for the first time. I don't live in the US but the word "cancel culture" has spread over the world and is seen in my country as a fashion which I don't think I need to describe here. I was always a leftist, which means in my country far more left that in yours. I think social networks favour the trends of humans to form groups of activists against whatever immorality, supposed or real, and collectively harrass the people they declare guilty. When this happens against living people, wether unknown or famous, it is just called harrasment; when it addresses dead celebrities, we call it by the word you disapprove. My position in the current debate about RMS is evolving and balancing. You mentioned this phrase because someone else did it before in the gcc mailing list: << Perhaps you’ll claim my request is ‘cancel culture’. That is the cry of the hypocrite – this is ‘actions have consequences’. >> ... And this is the way RMS is being criminalized (under which jurisprudence?) even though weshould learn to discern between "statements" and "actions". However, I fully agree with people saying Devuan should try to stay neutral in this debate. After three decades of sorrow and blood (some of you'll know where I am from), I'm aware thatpoliticscan break families and friendships.And, of course, communities. Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Request for assistance in dealing with a nouveau problem
Hi, On 2/4/21 12:54, o1bigtenor wrote: Please - - - - if only you had read all the information that was included in the original post it would be quite clear why this set of instructions is NOT useful. Would you please go back and read what is there? I did it yesterday night and, according to the given information, you didn't extract the content: root@debianbase:/tmp/nouveau/nvidia# ls extract_firmware.py NVIDIA-Linux-x86_64-390.141.run root@debianbase:/tmp/nouveau/nvidia# python3 extract_firmware.py Among the possibilities i could contemplate, it wasn't really clear to me whether or not you forgot to copy and paste the missing intermediate step: sh NVIDIA-Linux-x86-340.108.run --extract-only and i said: "it seems that the nvidia subdirectory is not found". If you felt offended by my question "didn't he/she?", my intention was far from it. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] On Non-Judicial Punishment of Individuals
On 4/4/21 15:11, Eike Lantzsch ZP6CGE via Dng wrote: On Samstag, 3. April 2021 21:54:11 -04 Bruce Perens via Dng wrote: On Non-Judicial Punishment of Individuals Including Richard Stallman. https://perens.com/2021/04/04/on-non-judicical-punishment-of-individua ls/ Mr. Perens, I thank you for widening my horizon of perception. I say this honestly and without the least hint at irony. +1 It's highly instructive. Thank you very much Mr. Perens. Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Package Repository Issue
Hi Tony, On 27/3/21 19:24, Tony Thedford wrote: Hello, Seems to be an issue on the package mirrors regarding i686 packages today. I get the following errors about a missing public key. Note that amd64 packages are working ok, do not have such errors. W: GPG error: http://pkgmaster.devuan.org/merged beowulf-security InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY BB23C00C61FC752C E: The repository 'http://pkgmaster.devuan.org/merged beowulf-security InRelease' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. Anyone else getting these? I'm under amd64, but debootstrap worked for i686 using pkgmaster.devuan.org Did you try again? Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] No future?
On 19/3/21 12:18, Florian Zieboll via Dng wrote: A friendly reminder: It's friday - for freedom, fun & future! I suggest to consider this information so far off topic, that it hits the nail on the head from behind. Still, our planet is a sphere! libre Grüße:-) Do you guys still trust Cristóbal Colón? https://www.etsy.com/listing/844078868/iman-para-nevera-tira-mafalda-tierra <https://www.etsy.com/listing/844078868/iman-para-nevera-tira-mafalda-tierra> Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] My Qemu LAN-peer documentation is now in its first draft
Hi tito, On 4/3/21 0:47, tito via Dng wrote: In my young years I used to tinker with linux distros on floppy disks and there still where eth0, eth1 and so on but no udev, so where did the names came from? They were assigned by the kernel, i think. Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Very offtopic: 70's music
En 5 de marzo de 2021 1:27:25 Steve Litt escribió: Guilty pleasure: I liked Kiss. And Abba too. And (yeah, I'm a hypocrite) KC and the Sunshine Band. And Heart and Fleetwood Mac. There is no mention to The Police in this thread. I also was going to mention the bluesman John Mayall (later one of the members of the Bluesbreakers founded Fleetwood Mac). On the other hand, Steve, I would include Yoko Ono's long plays to your list of punishments for those people in the hell forced to use systemd, in addition to the normal fire and brimstone. Yoko Ono for eternity. It's true: The 1970's had some great music. But disco. SteveT Steve Litt Spring 2020 featured book: Thriving in Tough Times http://www.troubleshooters.com/thrive ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng Enviado con Aqua Mail para Android https://www.mobisystems.com/aqua-mail ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] BUG in desktop-base
Hi Tito, On 13/4/21 8:08, tito via Dng wrote: cat /sys/class/drm/card0-Virtual-1/modes preferred 2560x1600 1920x1440 1856x1392 The origin of the warning lies in the first line equal to "preferred", as you pointed out: /var/lib/dpkg/info/desktop-base.postinst: line 30: [: preferred: integer expression expected Imho, it should be considered a bug because the script ignores the preferred value, going ahead with the *else* statement. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Script to migrate buster desktop to beowulf v1.6
Hi Steve, On 14/4/21 15:02, Steve Litt wrote: I think free software purist snobs drive more people back to Windows than cleanse people of their non-free ways. The adversary of the fsf isn't Windows, but the propietary software in general wherever it may come from. In this context, whether a propietary piece of software is used in one or other environment doesn't make it less propietary. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] BUG in desktop-base
Hi Tito,
On 12/4/21 21:35, tito via Dng wrote:
Hi,
while trying and retrying buster to beowulf migrations I've seen this error pop
up
a few times. Could this be considered a bug?
Setting up desktop-base (1:3.0) ...
... setting up desktop-base
... setting up desktop-base
/var/lib/dpkg/info/desktop-base.postinst: line 30: [: preferred: integer
expression expected
Can you give us the content of the following files [*]:
- /sys/class/drm/card*/modes
- /sys/class/graphics/fb*/modes
In the first case, you'll find values like:
1920x1080
1680x1050
1280x1024
...
As a result, the variable ${high} in the line nº30 of the postinst script:
if [ ${high} -ge 720 ]; then
will receive an integer (as expected), that is:
var="1920x1080"
high=${var##*x} -> 1080
In the second case, you'll find values like:
U:1920x1080p-0
and they'll be processed in a different way, getting an integeras a result:
var="U:1920x1080p-0"
var=${var##*:}
var=${var%%p-*}
high=${var##*x} -> 1080
Aitor.
[*] These files will be taken in consideration only when the content of
the corresponding "status" files located in
each directory matches "connected".
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] unsigned kernels - strange behaviour
Hi Erich,
On 20/2/21 10:59, Erich Minderlein via Dng wrote:
What are these unsigned packages for ?
I'm not pretty sure at this point, but they appear to be packages for
the internal use by Debian Kernel Team
during their test builds.
They do not usually provide mini-packages for debian-installer. Read the
lines nº568-580 in debian/rules.real (see below [*]):
|install-udeb_$(ARCH): # Logically we should check for %-di here, but
that would break test builds ifneq (,$(filter
linux-image-%,$(packages_enabled))) dh_testdir dh_prep kernel-wedge
install-files $(ABINAME) kernel-wedge check $(PACKAGE_NAMES) dh_fixperms
ifeq ($(UDEB_UNSIGNED_TEST_BUILD),False) dh_gencontrol dh_builddeb endif
endif # enabled This is because kernel-wedge doesn't expect any
-unsigned suffix. Unsigned templates are signed by an additional
rules.real:
https://salsa.debian.org/kernel-team/linux/-/blob/master/debian/signing_templates/rules.real
<https://salsa.debian.org/kernel-team/linux/-/blob/master/debian/signing_templates/rules.real>
|
|In gnuinos, i use the following workaround (||completely unorthodox):|
dh_testdir
dh_prep
while read flavour; do \
rm -f debian/linux-image-$(ABINAME)-$$flavour; \
ln -s linux-image-$(ABINAME)-$$flavour-unsigned \
debian/linux-image-$(ABINAME)-$$flavour; \
done < <(awk '!/^#/ { print $$3 }' $(KW_CONFIG_DIR)/kernel-versions)
kernel-wedge install-files $(ABINAME)
kernel-wedge check $(PACKAGE_NAMES)
dh_fixperms
dh_gencontrol
dh_builddeb
Cheers,
Aitor.
[*]
https://salsa.debian.org/kernel-team/linux/-/blob/master/debian/rules.real
<https://salsa.debian.org/kernel-team/linux/-/blob/master/debian/rules.real>
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Help needed:[Fwd: eudev: Methods to detect if running in a container.]
Hi, On 20/2/21 22:28, Lorenz wrote: And Lorenzo Puliti, maybe? That would be me :) As far as I know, there is no runit-Debian specific list; however, if you are interested in runit and similar tools, there is the Supervision mailing list. https://skarnet.org/lists.html <https://skarnet.org/lists.html> It's not specific about Debian/Devuan, and much of the talk is about s6 nowadays, but many topics are still relevant for runit. Thanks a lot for the link, i'll be there. Skarnet, yes... I talked with him in Amsterdam. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] snetaid debs...
Hi, On 22/8/21 8:33, al3xu5 wrote: Hi all I am running Devuan Beowulf && LXDE, and I want to try snetaid && simple-netaid-cdk || simple-netaid-gtk... Thanks for your interest on simple-netaid. I have found some debs are at: http://packages.gnuinos.org/gnuinos/pool/main/s/ Please, can anyone tell me if it's the right place? Yes, this is the right way and the last packaging. Are that packages updated? Or is there a better way to install? Though i'm rewriting it the above link is the stable release. Just change in the line: Exec=sakura -e "sudo simple-netaid-cdk" of /usr/share/applications/simple-netaid-cdk, "sakura" by "lxterminal" or "xterm" or whatever you want. There aren't packages for the gtk interface yet, only ncurses. I'm rewriting the gtk interface and the snetaid daemon because i have new ideas for the them. Any doubt, please tell me. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Nasty Linux systemd security bug revealed
Hi Alessandro,
On 15/8/21 18:08, Alessandro Vesely via Dng wrote:
I guess we all ended up developing something similar. My take:
http://www.tana.it/svn/zdkimfilter/trunk/src/cstring.h
http://www.tana.it/svn/zdkimfilter/trunk/src/cstring.c
It's harsh as it assumes the caller _always_ checks return code. The
functions don't check for NULL on entry (albeit they often assert()
it, a passage usually not compiled in production code.) Non-nullness
has to be checked by the caller, for example (from zaggregate.c in the
same package):
if (to_header)
{
to_header = cstr_printf(to_header, "%s %s",
n_addr == 0? "To:": ",", dom->addr[i].addr);
if (to_header && dom->addr[i].limit != UINT64_MAX)
to_header = cstr_printf(to_header, " (limit=%" PRIu64 ")",
dom->addr[i].limit);
++n_addr;
}
Thanks for the link. I'll give it a try.
Cheers,
Aitor.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] /run/user/#
Hi, On 31/8/21 19:43, Bob Proulx via Dng wrote: Caution: I am not really up to date on the current state of things here. I am just pretty sure that that the /run/user stuff is configured through PAM and is set up through elogind/logind through the/etc/pam.d/* interface somewhere. |For sure. In debia this tmpfs is created by libpam-systemd, where the environment variable:| |XDG_RUNTIME_DIR=/run/user/| |is involved. | I remove those entry lines from pam.d files and it avoids that configuration. Setting a different value for this variable might be enough, or leaving it empty? I'm in gnuinos right now; so, I haven't elogind nor consolekit. And the value of XDG_RUNTIME_DIR is emptyin my system. Hence, /run/user doesn't exist. Note: $XDG_RUNTIME_DIR is not set if the current user is not the original user of the session. Hope this helps, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] License for the DNG created software guide --> Proposal: DNG Verbatim Libre License (upd)
On 3/9/21 18:18, goli...@devuan.org wrote: Carving it into a stone tablet might be the best method of pristine preservation. There is no getting around the fact that the emergence of digital books left us somewhat nostalgic of the feel of the paper, in the same way as, many centuries ago, the emergence of the parchment left our ancestors remembering with nostalgia the pleasant silky-stony feel ;~) Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] fresh install of chimaera on an Ultrabook - no touchpad
Hi, On 12/9/21 21:33, Riccardo Mottola via Dng wrote: And Steve's script does: sh touchtoggle.sh diagnostic devid =13 diagnostic scratchline=Device Enabled (175): 1 diagnostic proptext =Device Enabled# diagnostic propid =175 Current state of 1 has been changed to 0. and it always says 1->0 even if you rerun it. The script is here: https://privatebin.net/?d6389e057f8c9f02#7x9MGMcy3fFF7adKxQzuC46xpGvPvhC7LcAkccRAcxn2 <https://privatebin.net/?d6389e057f8c9f02#7x9MGMcy3fFF7adKxQzuC46xpGvPvhC7LcAkccRAcxn2> Are we talking about the same script, Riccardo? Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] New features in libnetaid
|Hi, Recently I pushed new commits to the repository of libnetaid
replacing cmake with the autotools. Another first, the addition of the
following socket:
https://gitea.devuan.dev/aitor_czr/libnetaid/src/branch/master/src/nlsock.c
<https://gitea.devuan.dev/aitor_czr/libnetaid/src/branch/master/src/nlsock.c>
making use of select() for the system calls. Doing this way,
simple-netaid becomes reactive to netlink events using less CPU
resource, and essentially remains sleeping until some netlink event
requires action (for instance, to update the graphical interface after
the ethernet cable has been plugged in). I joined some good ideas from
Didier's hopman:
https://gitea.devuan.org/kryn/hopman/src/branch/master/hopman-and-select.html
<https://gitea.devuan.org/kryn/hopman/src/branch/master/hopman-and-select.html>
To verify the reactive behavior of simple-netaid, first build and
install the sources of libnetaid: $ ./autogen.sh $ make $ sudo make
install The list of build dependencies is: - autoconf - automake -
libtool - gettext - intltool - libiw-dev After the installation of
libnetaid, build the following program: #include #include
#include int main() { for(;;) { int
rc = nlsock_monitor(); if( rc == 0) printf("Signal received\n"); }
return 0; } You need to pass the flag -lnetaid to the compiler. That is:
$ gcc monitor.c -o monitor -lnetaid Now, run the binary as root: $ sudo
./monitor and try connecting or disconnecting your ethernet cable, or
making other changes related to the network connection. Cheers, Aitor.|
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Information request re: wayland
Hi, On 4/9/21 16:39, al3xu5 wrote: had to learn how to use xrandr so that I could set up the monitors so they would give my desired configuration and that needs to be entered EVERY time I restart the box! I also like to use lots of desktops and too many of the applications are quite stupid so then I need to shuffle things around at EVERY restart. Not sure what you are meaning here. If you run xrandr commands "manually" at every restart, then you shoud use a login script to do this. I have to use xrandr to adjust video output from my audio-video Linux box to a old LCD TV: I have a small login script to have xrandr setting up things at every login... |If your desired resolution isn't listed by xrandr, you can create a new config file in /usr/share/X11/xorg.conf.d. This file must have a file extension of ".conf". One sample of such file might be as follows: Section "Device" Identifier "Configured Video Device" EndSection Section "Monitor" Identifier "Configured Monitor" HorizSync 30.0-62.0 VertRefresh 50.0-70.0 EndSection Section "Screen" Identifier "Default Screen" Monitor "Configured Monitor" Device "Configured Video Device" DefaultDepth 60 SubSection "Display" Depth 60 Modes "1920x1080" "1024x768" "800x600" EndSubSection EndSection | Pay attention to the key "Modes" in the SubSection "Display" containing three different resolutions. I don't know about the identifiers used here. The X11/Xlib library can select the default screen by the following way: Display *display = XOpenDisplay(NULL); Screen *screen = DefaultScreenOfDisplay(display);/* default */ But it's also possible to choose the first one via: screen = ScreenOfDisplay(display, 0); So, i guess you can try using integers 0, 1,... as identifiers in the|Section "Screen"|. HTH, Aitor. || ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] May I use Netaid source as an example of good code?
Hi, On 19/9/21 10:31, aitor wrote: _Note 4_: i've done a lot of improvements in the daemon (snetaid), but i still didn't push them to gitea. I'll let you know. Done: https://gitea.devuan.dev/aitor_czr/snetaid/src/branch/master <https://gitea.devuan.dev/aitor_czr/snetaid/src/branch/master> Another clarification: readme files aren't updated. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] May I use Netaid source as an example of good code?
Hi,
On 2/8/21 11:41, aitor wrote:
On 2/8/21 0:44, aitor wrote:
Better said, the suid binary can check whether or not the gui has
handled the signal as expected because
the default behavior of SIGUSR1 (User defined signal 1) is to
terminate the process. See the table at the
end of the link:
https://en.wikipedia.org/wiki/Signal_(IPC)#POSIX_signals
<https://en.wikipedia.org/wiki/Signal_(IPC)#POSIX_signals>
I.e., when such a intruder is acting the
PSTAT_BINARY="SOMEWHERE_DEFINED_NAME" with process ID="PID"
no longer exists.
Here you are the code:
https://www.gnuinos.org/suid/ <https://www.gnuinos.org/suid/>
** HOWTO: **
1) Install Jude Nelson's libpstat:
$ git clone https://github.com/jcnelson/libpstat.git
$ cd libpstat
$ make OS=LINUX
$ sudo make install PREFIX=/ INCLUDE_PREFIX=/usr
2) Open an empty directory and download the files:
$ wget https://www.gnuinos.org/suid/Makefile
$ wget https://www.gnuinos.org/suid/gui.c
$ wget https://www.gnuinos.org/suid/suid.c
$ wget https://www.gnuinos.org/suid/intruder.c
3) Install libgtk-3-dev:
$ sudo apt-get install libgtk-3-dev
4) Build the files:
$ make
5) Run the GUI in the command line and click on the button several times:
$ ./gui
You'll get:
From GUI: Received a 10 (SIGUSR1) signal sent from the suid
From SUID: Ok, go on!
6) Open a new tab in the command line and run the intruder (the GUI
remains running):
$ ./intruder
You'll get:
Foreign PID to use: 4301
From SUID: Stop, you're an intruder!
If you have a look at the code of both programs, they're trying to do
the same (using the intruder a foreign pid).
Keep in mind that, for our testing purposes, all the binaries must be
located in the same directory, since
we're using:
key_t key = ftok(".", 's');
to access the same shared memory segment.
Cheers,
Aitor.
There is a better way to do all this because it's possible to enquery
the sender of the socket thanks to getsockopt(),
doing something like this:
pid_t pid;
socklen_t pid_size = sizeof(pid);
rc = getsockopt( df, SOCK_STREAM, SO_PEERCRED, , _size );
if (rc == -1) {
perror("getsockopt");
return -1;
}
printf("client pid=%d\n", pid);
where fd is the file descriptor tied to the unix socket.
Once we know the pid of the process, libpstat will give us the fullpath
to the binary runin the process,
checking afterwards whether or not it's included in the *white* list of
allowed applications.
On the other hand, as simple-netaid is actually daemonized, it's
possible to run all the stuff requiring root
permissions though the service, so i decided to remove the suid binary
providing to the shared library
the CAP_KILL linux capability instead [*], which will allow us to send
signals to the daemon without the requirement of
root permissions. Yes, to the shared library! Because doing this way, we
don't need to give capabilities to each
application depending on it... [**]But i'll explain shortly this point
in another thread headlined: "Hopman,
Simple-netaid and Linux capabilities".
Cheers,
Aitor.
_Note 1_: giving suid permissions to an executable shared library
doesn't take effect (and it wouldn't be recommended),
but it's possible to provide them linux capabilites.
_Note 2_: keep in mind that the shared library sends the signal to the
daemon, and then the daemon communicates with
the running process though the socket filtering possible intruders in
the client side (the shared library cannot make use
of libpstat beforesending the signal to the daemon because it would
require root permissions).
_Note 3_: the daemon uses select() waiting for netlink events, and it's
possible to add more and more file descriptors
to the poll via FD_SET(), keeping this way the daemon looking forward
client sockets to communicate with, but i prefer to
do things the otherway around: the running process sends a signal to the
daemon thanks the capability of the shared
library sendingafterwards therequired arguments though the server
socket, and waiting to be listened by the client.
To finish with, at this point i must admit that i've never have had
clear which is the server and which the client
(because i've seen everything!), but i hope you understand me :)
_Note 4_: i've done a lot of improvements in the daemon (snetaid), but i
still didn't push them to gitea. I'll let you know.
[*] Look at the line nº 82 in the Makefile.am:
https://gitea.devuan.dev/aitor_czr/libnetaid/src/branch/master/src/Makefile.am
<https://gitea.devuan.dev/aitor_czr/libnetaid/src/branch/master/src/Makefile.am>
[**] Now the shared library is executable:
https://gitea.devuan.dev/aitor_czr/libnetaid/src/branch/master/src/entry.c
<https://gitea.devuan.dev/aitor_czr/libnetaid/src/branch/master/src/entry.c>
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Fw: Testers for Chimaera alpha netinstall iso
Hi Ralph, On 18/6/21 0:24, Ralph Ronnquist via Dng wrote: The Chimaera alpha netinstall ISOs version dated 14-Jun-2021 or later now include "the final" versions of the forked udebs, and they need testing to confirm that it is ready for RC1 in the coming month. How are you building debian-installer in chimaera? I did it several times in ceres, but i'm still getting some .udeb dependency issues in testing. For instance, libff6 has been replaced by libff7, but there's still something depending on it. Are you passing flags like "--ignore-errors --keep-going" to the make command, maybe? Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Fw: Testers for Chimaera alpha netinstall iso
Hi, On 3/8/21 10:36, Ralph Ronnquist via Dng wrote: One thing that springs to mind is "newlisp" which depended on libffi6 on beowulf and libffi7 on chimaera; I'm not sure if that is relevant for you, but I think I added it to vdev some winters ago, and I believe you might be using vdev... vdev uses newlisp -missing in jessie- to compile the udev rules, though this issue happened under devuan with eudev. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Fw: Testers for Chimaera alpha netinstall iso
Hi Ralph, On 3/8/21 13:01, Ralph Ronnquist via Dng wrote: Aitor, eventually it dawned on me that probably you meant the mini.iso which LeePen builds with debian-installer; he just now merged the forked s/w (https://git.devuan.org/devuan/debian-installer.git) with debian's and built new mini.iso(s). Perhaps that is a help? regards, Ralph. Yesterday night i did something wrong trying to build d-i in the live-sdk, i guess. Here you are the log file: https://www.gnuinos.org/live-sdk/build_d-i.log <https://www.gnuinos.org/live-sdk/build_d-i.log> Today i tried building it again step by step outside the environment (with the same version 20210606+devuan2 pulled from deb.devuan.org/merged chimaera) and all went fine. It might be a mistake in my live-sdk, or i may well have mixed deb.devuan.org with pkgmaster.devuan.org, whereas today's attempt was offline (export ONLINE=n). Look atthe line nº11 in the log: + echo deb http://deb.devuan.org/merged/ chimaera main/debian-installer However, the mirror is defined not only in sources.list.udeb.local, but also in config/common, and i'm not sure what happens if they don't match. Devuan-installer tends to use pkgmaster by default. Thanks, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Nasty Linux systemd security bug revealed
Hi,
On 31/7/21 11:20, aitor wrote:
On 31/7/21 3:02, Bruce Perens via Dng wrote:
If you want this, it's easy enough to allocate your own stack, and
write functions that allocate from it and release the allocation.
Sometimes I use the following buffer struct for dynamic allocation:
https://gitea.devuan.dev/aitor_czr/libnetaid/src/branch/master/backend_src/sbuf.c
<https://gitea.devuan.dev/aitor_czr/libnetaid/src/branch/master/backend_src/sbuf.c>
A tiny version of the one developed by Johan Malm (bunsenlabs):
https://github.com/johanmalm/jgmenu/blob/master/src/sbuf.c
<https://github.com/johanmalm/jgmenu/blob/master/src/sbuf.c>
I added a variadic function enabling the concatenation of several strings:
sbuf_concat(, N, string1, string2, ..., stringN);
I added a new feature to the sbuf struct using the *cleanup* common
variable attribute [*] which runs automatically the function:
void free_buf(struct sbuf *s)
{
free(s->buf);
}
when the variable goes out of the scope.
You can test this behavior (the complete example is here:
https://www.gnuinos.org/sbuf/ <https://www.gnuinos.org/sbuf/>) running
the following program:
#include
#include "sbuf.h"
int main(int argc, char **argv)
{
struct sbuf s __cleanbuf__(free_buf);
sbuf_init();
sbuf_addstr(, "oo");
return 0;
}
When the memory is deallocated, the program will print:
Cleaning up->"oo"
Cheers,
Aitor.
[*]
https://gcc.gnu.org/onlinedocs/gcc/Common-Variable-Attributes.html#Common-Variable-Attributes
<https://gcc.gnu.org/onlinedocs/gcc/Common-Variable-Attributes.html#Common-Variable-Attributes>
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Nasty Linux systemd security bug revealed
On 12/8/21 13:12, aitor wrote: struct sbuf s __cleanbuf__(free_buf); I rectify: struct sbuf s __cleanbuf__; being: #define __cleanbuf__ __attribute__((cleanup(free_buf))) ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] May I use Netaid source as an example of good code?
Hi again, On 1/8/21 1:35, aitor wrote: On 1/8/21 1:26, Steve Litt wrote: Hi Aitor, In my presentation this coming Wednesday night, I'd like to use your source code at https://gitea.devuan.dev/aitor_czr/libnetaid/src/branch/master/backend_src/ as an example of good code? Highly cohesive, low coupling, most functions fit on the screen, most source files less than 300 lines. I'd really like to use it as an example of good code. Thanks, SteveT Of course Steve, it would give me great pleasure ;~) I'm looking for a safer way to run the binary with suid permissions using the shared memory of the system to send a signal. I'll write a post tomorrow in the mailing list talking about this point. Cheers, time to bed :) Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] May I use Netaid source as an example of good code?
On 1/8/21 1:39, aitor wrote: I'll write a post tomorrow in the mailing list talking about this point. Cheers, time to bed :) Oops, i thought it was a private mail, no worries... :) ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] May I use Netaid source as an example of good code?
Hi, On 1/8/21 1:26, Steve Litt wrote: Hi Aitor, In my presentation this coming Wednesday night, I'd like to use your source code at https://gitea.devuan.dev/aitor_czr/libnetaid/src/branch/master/backend_src/ as an example of good code? Highly cohesive, low coupling, most functions fit on the screen, most source files less than 300 lines. I'd really like to use it as an example of good code. Thanks, SteveT Of course Steve, it would give me great pleasure ;~) Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] May I use Netaid source as an example of good code?
Hi, On 1/8/21 1:39, aitor wrote: I'm looking for a safer way to run the binary with suid permissions using the shared memory of the system to send a signal. Time ago somebody said me: "you can do nothing from your binary that i can't do externally from another binary". So, am i wasting time? Today i've been testing the idea and it's working for me. I'd like to prepare an example and share with all of you to resolve vulnerabilities. The example consists of a window with a button (to run the suid binary) and another binary -the intruder- located in the same directory and trying to do the same by using the other party's PID pretending to be the window. The result is a segmentation fault. I insist on trying to find the safest approach to run the suid binary because this is important not only for simple-netaid, but also for hopman, which will require granted permissions for running the *eject* command or the like (among others?). Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] [SPAM] Re: May I use Netaid source as an example of good code?
Hi Arnt,
On 1/8/21 17:59, Arnt Karlsen wrote:
I'm looking for a safer way to run the binary with suid permissions
using the shared memory of the system to send a signal.
Time ago somebody said me: "you can do nothing from your binary that
i can't do externally from another binary".
So, am i wasting time?
..nope.
Good :)
Today i've been testing the idea and it's working for me. I'd like to
prepare an example and share with all of you to resolve
vulnerabilities. The example consists of a window with a button (to
run the suid binary) and another binary -the intruder- located in the
same directory and trying to do the same by using the other party's
PID pretending to be the window.
..you're being too damned naive: Why would the intruder not try to
e.g. use your PID?
?
Yes, the intruder would.., of course. And that's what i'm trying to
avoid. The logic is as follows:
Let's assume the intruder sending our PID. The suid binary receives the
PID and extracts
the corresponding binary name afterwards. There are other ways, but i'll
use Jude Nelson's
libpstat for that.
If this name -say PSTAT_BINARY- doesn't match the name of our
application, then the suid binary
will do nothing. For instance:
if (PSTAT_BINARY == $current_working_dir/app_name) {
continue;
} else {
do nothing;
}
Now, you're thinking: "The gui application is already running with the
above PID. So,
the suid binary will go ahead!"
And here is the key point: the suid binary sends a SIGUSR1 signal to the
gui application. But
the signal handler associated to this SIGUSR1 is activated within the
callback function of the button
responsible for running the suid binary, being triggered its default
signal handling behavior as
soon as the suid binary has been executed. Hence, not reacting to the
SIGUSR1 signal
events unlessthe user clicks again on the button.
gboolean button_callback ()
{
/*
... run the suid binary asynchronously, going ahead...
*/
/* trigger the signal handler in order to receive the SIGUSR1 signal
emited by the suid binary */
struct sigaction sa;
memset(, 0, sizeof(sa));
sa.sa_handler = sig_handler;
sa.sa_flags = SA_RESTART | SA_SIGINFO;
sigemptyset(_mask);
sigaction(SIGUSR1, , 0);
}
Now, the signal handler will react:
void signal_handler (int signum)
{
if( gtk_main_level() == 0) exit(-1);
/*
... here goes the socket ...
*/
/* Set to default !! */
signal(SIGUSR1, SIG_DFL);
}
After that, the suid binary can check _whether or not_ the emited signal
has been received. If yes, both
the gui and the suid will communicate each other through a unix socket
or a fifo to know what to do.
Finally, the suid binary parses the received arguments.
Does it make sense? If not, i may stop here.
Thanks in advance,
Aitor.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] May I use Netaid source as an example of good code?
Hi again,
On 1/8/21 19:20, aitor wrote:
Hi Arnt,
On 1/8/21 17:59, Arnt Karlsen wrote:
I'm looking for a safer way to run the binary with suid permissions
using the shared memory of the system to send a signal.
Time ago somebody said me: "you can do nothing from your binary that
i can't do externally from another binary".
So, am i wasting time?
..nope.
Good :)
Today i've been testing the idea and it's working for me. I'd like to
prepare an example and share with all of you to resolve
vulnerabilities. The example consists of a window with a button (to
run the suid binary) and another binary -the intruder- located in the
same directory and trying to do the same by using the other party's
PID pretending to be the window.
..you're being too damned naive: Why would the intruder not try to
e.g. use your PID?
?
Yes, the intruder would.., of course. And that's what i'm trying to
avoid. The logic is as follows:
Let's assume the intruder sending our PID. The suid binary receives
the PID and extracts
the corresponding binary name afterwards. There are other ways, but
i'll use Jude Nelson's
libpstat for that.
If this name -say PSTAT_BINARY- doesn't match the name of our
application, then the suid binary
will do nothing. For instance:
if (PSTAT_BINARY == $current_working_dir/app_name) {
continue;
} else {
do nothing;
}
Now, you're thinking: "The gui application is already running with the
above PID. So,
the suid binary will go ahead!"
And here is the key point: the suid binary sends a SIGUSR1 signal to
the gui application. But
the signal handler associated to this SIGUSR1 is activated within the
callback function of the button
responsible for running the suid binary, being triggered its default
signal handling behavior as
soon as the suid binary has been executed. Hence, not reacting to the
SIGUSR1 signal
events unlessthe user clicks again on the button.
gboolean button_callback ()
{
/*
... run the suid binary asynchronously, going ahead...
*/
/* trigger the signal handler in order to receive the SIGUSR1
signal emited by the suid binary */
struct sigaction sa;
memset(, 0, sizeof(sa));
sa.sa_handler = sig_handler;
sa.sa_flags = SA_RESTART | SA_SIGINFO;
sigemptyset(_mask);
sigaction(SIGUSR1, , 0);
}
Now, the signal handler will react:
void signal_handler (int signum)
{
if( gtk_main_level() == 0) exit(-1);
/*
... here goes the socket ...
*/
/* Set to default !! */
signal(SIGUSR1, SIG_DFL);
}
After that, the suid binary can check _whether or not_ the emited
signal has been received. If yes, both
the gui and the suid will communicate each other through a unix socket
or a fifo to know what to do.
Finally, the suid binary parses the received arguments.
Does it make sense? If not, i may stop here.
Thanks in advance,
Aitor.
The PID of the process is emmited via shmget():
https://www.csl.mtu.edu/cs4411.ck/www/NOTES/signal/kill.html
<https://www.csl.mtu.edu/cs4411.ck/www/NOTES/signal/kill.html>
The idea might have weak points, but it's better than nothing.
Aitor.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Starting outline for the DNG Safe Programmer Certificate
Hi,
On 1/8/21 14:41, tito via Dng wrote:
Hi,
I really prefer
if (mybool) {
do_my_stuff();
do_other_stuff);
}
for the rule of least vertical screen usage (same as yours)
and the brace and the if on the same indentation level
make it clear where the conditional block of code stops.
Me too. I tend to use the Linux Kernel coding style:
https://www.kernel.org/doc/html/v4.10/process/coding-style.html
<https://www.kernel.org/doc/html/v4.10/process/coding-style.html>
Cheers,
Aitor.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] [SPAM] Re: May I use Netaid source as an example of good code?
On 1/8/21 19:20, aitor wrote: /* trigger the signal handler in order to receive the SIGUSR1 signal emited by the suid binary */ *emitted* ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Nasty Linux systemd security bug revealed
Hi, On 31/7/21 3:02, Bruce Perens via Dng wrote: If you want this, it's easy enough to allocate your own stack, and write functions that allocate from it and release the allocation. Sometimes I use the following buffer struct for dynamic allocation: https://gitea.devuan.dev/aitor_czr/libnetaid/src/branch/master/backend_src/sbuf.c <https://gitea.devuan.dev/aitor_czr/libnetaid/src/branch/master/backend_src/sbuf.c> A tiny version of the one developed by Johan Malm (bunsenlabs): https://github.com/johanmalm/jgmenu/blob/master/src/sbuf.c <https://github.com/johanmalm/jgmenu/blob/master/src/sbuf.c> I added a variadic function enabling the concatenation of several strings: sbuf_concat(, N, string1, string2, ..., stringN); Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] May I use Netaid source as an example of good code?
On 2/8/21 0:41, aitor wrote: Hi, On 1/8/21 19:20, aitor wrote: After that, the suid binary can check _whether or not_ the emited signal has been received. If yes, both the gui and the suid will communicate each other through a unix socket or a fifo to know what to do. Better said, the suid binary can check whether or not the gui has handled the signal as expected because the default behavior of SIGUSR1 (User defined signal 1) is to terminate the process. See the table at the end of the link: https://en.wikipedia.org/wiki/Signal_(IPC)#POSIX_signals <https://en.wikipedia.org/wiki/Signal_(IPC)#POSIX_signals> I.e., when such a intruder is acting the PSTAT_BINARY="SOMEWHERE_DEFINED_NAME" with process ID="PID" no longer exists. Aitor. Sorry for the "Re: [DNG] [SPAM] Re: ... " in the subject :( Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] [SPAM] Re: May I use Netaid source as an example of good code?
Hi, On 1/8/21 19:20, aitor wrote: After that, the suid binary can check _whether or not_ the emited signal has been received. If yes, both the gui and the suid will communicate each other through a unix socket or a fifo to know what to do. Better said, the suid binary can check whether or not the gui has handled the signal as expected because the default behavior of SIGUSR1 (User defined signal 1) is to terminate the process. See the table at the end of the link: https://en.wikipedia.org/wiki/Signal_(IPC)#POSIX_signals <https://en.wikipedia.org/wiki/Signal_(IPC)#POSIX_signals> I.e., when such a intruder is acting the PSTAT_BINARY="SOMEWHERE_DEFINED_NAME" with process ID="PID" no longer exists. Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] May I use Netaid source as an example of good code?
Hi,
On 2/8/21 0:44, aitor wrote:
Better said, the suid binary can check whether or not the gui has
handled the signal as expected because
the default behavior of SIGUSR1 (User defined signal 1) is to
terminate the process. See the table at the
end of the link:
https://en.wikipedia.org/wiki/Signal_(IPC)#POSIX_signals
<https://en.wikipedia.org/wiki/Signal_(IPC)#POSIX_signals>
I.e., when such a intruder is acting the
PSTAT_BINARY="SOMEWHERE_DEFINED_NAME" with process ID="PID"
no longer exists.
Here you are the code:
https://www.gnuinos.org/suid/ <https://www.gnuinos.org/suid/>
** HOWTO: **
1) Install Jude Nelson's libpstat:
$ git clone https://github.com/jcnelson/libpstat.git
$ cd libpstat
$ make OS=LINUX
$ sudo make install PREFIX=/ INCLUDE_PREFIX=/usr
2) Open an empty directory and download the files:
$ wget https://www.gnuinos.org/suid/Makefile
$ wget https://www.gnuinos.org/suid/gui.c
$ wget https://www.gnuinos.org/suid/suid.c
$ wget https://www.gnuinos.org/suid/intruder.c
3) Install libgtk-3-dev:
$ sudo apt-get install libgtk-3-dev
4) Build the files:
$ make
5) Run the GUI in the command line and click on the button several times:
$ ./gui
You'll get:
From GUI: Received a 10 (SIGUSR1) signal sent from the suid
From SUID: Ok, go on!
6) Open a new tab in the command line and run the intruder (the GUI
remains running):
$ ./intruder
You'll get:
Foreign PID to use: 4301
From SUID: Stop, you're an intruder!
If you have a look at the code of both programs, they're trying to do
the same (using the intruder a foreign pid).
Keep in mind that, for our testing purposes, all the binaries must be
located in the same directory, since
we're using:
key_t key = ftok(".", 's');
to access the same shared memory segment.
Cheers,
Aitor.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] grub-install device node not found
Hi Haines, On 4/8/21 12:31, Haines Brown wrote: Indeed, fdisk-l returns nothing. There does exist a set of sdc* interfaces in /dev. What is the fix? Take a chance with lsblk and blkid, miscelaneous utilities of util-linux. On the other hand # udevadm info -a -p $(udevadm info -q path -n /dev/sdc) # udevadm info -a -p $(udevadm info -q path -n /dev/sdcX) will list the attributes of sdc and sdcX. Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] [SPAM] Re: grub-install device node not found
Hi Arnt, On 3/8/21 22:31, Arnt Karlsen wrote: ..is there one? 'fdisk -l ' or somesuch should work, even if there are some new fancy /dev names missing symlinks to /dev/sdc, e.g. killed by that mlterm crash. The command for the interactive shell of debian-installer is "list-devices". Examples: ~ # list-devices usb-partition /dev/sda1 /dev/sda2 ~# list-devices disk /dev/sda /dev/sdb HTH, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] grub-install device node not found
Hi, On 4/8/21 0:18, aitor wrote: Hi Arnt, On 3/8/21 22:31, Arnt Karlsen wrote: ..is there one? 'fdisk -l ' or somesuch should work, even if there are some new fancy /dev names missing symlinks to /dev/sdc, e.g. killed by that mlterm crash. The command for the interactive shell of debian-installer is "list-devices". Examples: ~ # list-devices usb-partition /dev/sda1 /dev/sda2 ~# list-devices disk /dev/sda /dev/sdb HTH, Aitor. Forget this, it was a cross-install... Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Fw: Testers for Chimaera alpha netinstall iso
Hi, On 12/10/21 11:29, Simon Walter wrote: I'm trying to install Chimaera from the netinstall, and I get the debootstrap error: "Failed to determine the codename for the release" The missing codename should be specified in a hidden folder. Something like this: echo "Devuan 4 "chimaera" - Build amd64 LIVE/INSTALL Binary 'timestamp'" > .disk/info Is this known? Where should I report problems with the installer? I think this is a good place to report problems with the installer. As far as I know, Ralph is one of the maintainers and he announced here in the mailing list the incoming release of chimaera. Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] snetaid debs...
Hi Edward, On 18/10/21 17:53, goli...@devuan.org wrote: On 2021-10-18 10:07, Edward Bartolo via Dng wrote: The name "snetaid" made me remember of my now defunct project. Searching on the project's git repository I found it has been removed, so, it is dead and forgotten. Edward Hi Edward, Nice to see that you are still hanging around Devuan. When we moved from gitlab to gitea, contributing developers were given multiple reminders and ample time to migrate their projects to the new format. Many projects fell by the wayside from lack of attention and action on the part of their creators. Isn't Aitor's project based on your work? If so, it is still alive and well We are glad to see you here again! Being about five years on from what was your simple-netaid project, which has substantially evolved since then hoping that the outcome will be for the good of the project, the idea of reviving both your backend and gui in free pascal, but this time drawn upon libnetaid and snetaid (in replacement of the suid bit) is a challenge that might make this work more fun :) Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Announcing Devuan 4.0: Chimaera!
Hi, On 14/10/21 17:00, Mason Loring Bliss wrote: Dear Friends and Software Freedom Lovers, Devuan Developers are pleased to announce the release of Devuan Chimaera 4.0 as the project's newest stable release. Thanks a lot for your persevering work! Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] snetaid debs...
Hi all, On 16/10/21 12:14, al3xu5 wrote: Hi Aitor As you know Wicd is no longer available in Bullseye / Chimaera. I would like to upgrade to Chimaera eliminating Wicd (regardless of whether it is not available), and I would like to use snetaid, which seems to me to be a good alternative. So I wondered if there are news on development, even about the GTK interface. Thanks Reegrads al3xu5 I've read the warning about the missing wicd in Chimaera and i want to notice you that i've been working a lot on simple-netaid during these last days. There will be a lot of new features, being the most important of them the removal of the suid binary on the one hand, and the addition of a netlink socket in the code of the daemon (snetaid) on the other, making the ncurses interface reactive not only to the callbacks of the interface itself, but also to any netlink event coming from foreign processes, whether network managers or command line scripts. Packages will be available soon, and i hope it won't take me more than one week. Cheer and thanks again for your work on Chimaera, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] snetaid debs...
Hi, On 16/10/21 12:35, al3xu5 wrote: On 16/10/21 12:14, al3xu5 wrote: Hi Aitor As you know Wicd is no longer available in Bullseye / Chimaera. I would like to upgrade to Chimaera eliminating Wicd (regardless of whether it is not available), and I would like to use snetaid, which seems to me to be a good alternative. So I wondered if there are news on development, even about the GTK interface. Thanks Reegrads al3xu5 I've read the warning about the missing wicd in Chimaera and i want to notice you that i've been working a lot on simple-netaid during these last days. There will be a lot of new features, being the most important of them the removal of the suid binary on the one hand, and the addition. I'm of a netlink socket in the code of the daemon (snetaid) on the other, making the ncurses interface reactive not only to the callbacks of the interface itself, but also to any netlink event coming from foreign processes, whether network managers or command line scripts. Packages will be available soon, and i hope it won't take me more than one week. That sounds great!!! Thank you a lot. The following video shows how snetaid reacts to other network-managers (i used wicd for the demo) and also to shell commands. I'm still testing it in order to find any possible segmentation fault. Shortly i'll push the new code to gitea. Here you are the link: https://www.gnuinos.org/videos/simple-netaid-cdk-2021-10-17_23.56.04.mkv <https://www.gnuinos.org/videos/simple-netaid-cdk-2021-10-17_23.56.04.mkv> Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] snetaid debs...
Hi, On 19/10/21 21:26, aitor wrote: Hi Edward, On 18/10/21 17:53,goli...@devuan.org wrote: On 2021-10-18 10:07, Edward Bartolo via Dng wrote: The name "snetaid" made me remember of my now defunct project. Searching on the project's git repository I found it has been removed, so, it is dead and forgotten. Edward Hi Edward, Nice to see that you are still hanging around Devuan. When we moved from gitlab to gitea, contributing developers were given multiple reminders and ample time to migrate their projects to the new format. Many projects fell by the wayside from lack of attention and action on the part of their creators. Isn't Aitor's project based on your work? If so, it is still alive and well We are glad to see you here again! Being about five years on from what was your simple-netaid project, which has substantially evolved since then hoping that the outcome will be for the good of the project, the idea of reviving both your backend and gui in free pascal, but this time drawn upon libnetaid and snetaid (in replacement of the suid bit) is a challenge that might make this work more fun :) Cheers, Aitor. Yesterday night i pushed the new code to git. Packages of libnetaid, snetaid and simple-netaid-cdk (still not updated in gitea.devuan.dev) for chimaera will be available in a couple of days. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Simple-netaid 1-0 released
Hi, On 12/2/21 1:40 AM, aitor wrote: I'm doing some changes in libnetaid in order to get it working with static IP addresses. Done. The following commit: https://gitea.devuan.dev/aitor_czr/libnetaid/commit/18602a475048741b06a504832f14100d167f2728 <https://gitea.devuan.dev/aitor_czr/libnetaid/commit/18602a475048741b06a504832f14100d167f2728> fixes the issue, and now simple-netaid works with static addresses as well. The modifiedpackages of libnetaid have been uploaded to packages.gnuinos.org/chimaera. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] installing zoom in Chimaera
Hi, On 12/4/21 11:08 PM, Haines Brown wrote: put copy of libdconf1_0/38.0-2.deb in that directory and ran # apt install -f ./libdconf1 ... Reading package lists... Done E: Unsupported file ./libdconf1 given on commandline You need to write the complete name of the package, including also the .deb extension. Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] installing zoom in Chimaera
On 12/4/21 11:14 PM, aitor wrote: On 12/4/21 11:08 PM, Haines Brown wrote: put copy of libdconf1_0/38.0-2.deb in that directory and ran # apt install -f ./libdconf1 ... Reading package lists... Done E: Unsupported file ./libdconf1 given on commandline You need to write the complete name of the package, including also the .deb extension. For example: # dpkg -i libdconf1_0.38.0-2_amd64.deb HTH, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] EFI boot not found, partially solved in gnuinos (Was: 1st boot failed but repaired OK)
Hi, On 6/12/21 13:02, Maurice McCarthy via Dng wrote: Hi all, I am a new user. I installed Devuan 4.0.0 on sdc of my old amd64 PC from the live image which I had dd-ed to a usb stick. The installation seemed to go flawlessly but the first boot failed to find grub (or so it seemed to me.) I ran the live image again and followed advice on the Debian wiki https://wiki.debian.org/GrubEFIReinstall /sys/firmware/efi/efivars was populated so I reinstalled grub and all was well again. I attach a dmesg just in case it is of any interest. I've been stuck on this issue for a while, and recently it became clear to me that a similar problem almost always arises (in my particular case) when setting the distributor ID in /usr/lib/os-release to a new value other than de(bi|vu)an. Say: $ lsb_release -i Distributor ID: Gnuinos What is happening here is that the ID is taken into account by grub-install and, as a result, bootx64.efi is targeted at /boot/efi/EFI/gnuinos: /boot/efi/EFI/$target/bootx64.efi => /boot/efi/EFI/gnuinos/bootx64.efi whereas the bootloader always expects to find it at /boot/efi/EFI/debian, no matter the value of this ID. Furthermore, Devuan has ID=devuan in the base-files package without this affecting in any way the target of bootx64.efi within the EFI directory: https://git.devuan.org/devuan/base-files/src/branch/master/etc/os-release <https://git.devuan.org/devuan/base-files/src/branch/master/etc/os-release> The outcome is that i've been compelled to turn back the distributor to its default ID=devuan, and i'm rebuilding the images of gnuinos chimaera right now so that they will work properly in UEFI mode without workarounds during the first boot on the part of users. I wonder, to this regard, what is the trick in Devuan to put in place the distributor ID without the need of hijacking the boot loader... Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Firefox/Icecat build (was: Re: Pipewire and PulseAudio: apulse & firefox)
Hi, On 24/12/21 10:40, al3xu5 via Dng wrote: $ apt-get source icecat QUESTION: - Is it the same to manually download the sources (just to avoid adding the guinos repositories)? - In this case, is the following the right one? http://packages.gnuinos.org/gnuinos/pool/main/i/icecat/icecat_78.15.0.orig.tar.xz Yes, but you need three files: http://packages.gnuinos.org/gnuinos/pool/main/i/icecat/icecat_78.15.0-1.dsc <http://packages.gnuinos.org/gnuinos/pool/main/i/icecat/icecat_78.15.0-1.dsc> http://packages.gnuinos.org/gnuinos/pool/main/i/icecat/icecat_78.15.0.orig.tar.xz <http://packages.gnuinos.org/gnuinos/pool/main/i/icecat/icecat_78.15.0.orig.tar.xz> http://packages.gnuinos.org/gnuinos/pool/main/i/icecat/icecat_78.15.0-1.debian.tar.xz <http://packages.gnuinos.org/gnuinos/pool/main/i/icecat/icecat_78.15.0-1.debian.tar.xz> - Init an empty git repository QUESTION: - I suppose you mean using the sources directory on my machine. Right? Once you've downloaded the files, go to the directory containing them and create the git repository in a new folder: $ mkdir icecat $ cd icecat $ git init $ git config --global user.name "your name" $ git config --global user.email "your email" $ gbp import-dsc ../icecat_78.15.0-1.dsc - Import the description file of icecat: $ gbp import-dsc ../icecat*.dsc QUESTION: - Again, is it the same to manually download the .dsc file in the source directory on my machine? - In this case, is the following the right one? http://packages.gnuinos.org/gnuinos/pool/main/i/icecat/icecat_78.15.0-1.dsc No. You've just downloaded the files and imported the whole project into your initial empty git repository. You did things this way because there is no remote git repository to clone from. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] EFI boot not found, partially solved in gnuinos (Was: 1st boot failed but repaired OK)
En 22 de diciembre de 2021 14:55:41 ". fsmithred via Dng" escribió: On 12/21/21, aitor wrote: Hi, On 21/12/21 19:55, aitor wrote: Hi Ralph, On 21/12/21 12:19, Ralph Ronnquist via Dng wrote: On Tue, 21 Dec 2021 01:44:39 +0100 aitor wrote: ... The outcome is that i've been compelled to turn back the distributor to its default ID=devuan, and i'm rebuilding the images of gnuinos chimaera right now so that they will work properly in UEFI mode without workarounds during the first boot on the part of users. I wonder, to this regard, what is the trick in Devuan to put in place the distributor ID without the need of hijacking the boot loader... ... doesn't "scripts/magic-touch" tell the story? Looking at the script, it seems that i must define a new variable: GNUINOSCFG=/target/boot/efi/EFI/gnuinos/grub.cfg and copy the content to $DEBIANCFG in the same way you're doing with $DEVUANCFG. Yes, it seems the way to go... I'll tell you, thanks! Oops, I knew about the --efi-directory argument for grub-install, which defines the root partition of the EFI system, but there is also another one that i was overlooking up till now: --bootloader-id=ID I found it looking at the code of grub-install.c in grub2. The value of this argument has preference over the value defined in os-release. Cheers, Aitor. Another way to fix it in the installed system is to remove grub-efi-amd64-signed if you don't use Secure Boot. Then you don't need /boot/efi/EFI/debian. I haven't any computer to hand right now, but i think that EFI/debian/bootx64.efi is provided by grub-efi-amd64, and the rest of the files by grub-efi-amd64-signed. Cheers, Aitor. Enviado con Aqua Mail para Android https://www.mobisystems.com/aqua-mail ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Firefox/Icecat build (was: Re: Pipewire and PulseAudio: apulse & firefox)
Hi, On 23/12/21 20:56, al3xu5 via Dng wrote: Until some time ago I was able to build the old versions of X, certainly until 52.x. -- I had also made a guide for building Icecat: https://libreplanet.org/wiki/Group:IceCat/Compile_and_package/build_52.6.0_on_Devuan_2.0.0_ASCII_64bit Now the building process seems changed. So, please, could anyone give a guide (even if schematic) on how to build current Firefox/Icecat releases? I did it recently. PREREQUISITES: I recommend a fresh install of devuan chimaera amd64 on a computer with 8G RAM, and a swap partition of 16 GB. -- HOWTO -- Here you are a quick guide: - Add the repository of gnuinos chimaera - Download the sources of icecat-78.15. They contain all the lang-packs: $ apt-get source icecat - Init an empty git repository and import the description file of icecat: $ gbp import-dsc ../icecat*.dsc - Adjust debian/browser.mozconfig.in to suite your needs (see the section "Configure the build" in your link above). - Install git-buildpackage, quilt, pbuilder and cowbuilder - Create a jail containing a base system of devuan chimaera i386 in /var/cache/pbuilder/base.cow: $ sudo cowbuilder --create --distribution="chimaera" --architecture="i386" --mirror http://deb.devuan.org/merged - Build the packages: $ gbp buildpackage --git-pbuilder --git-pbuilder-options="--host-arch i386" --git-export-dir="../build-area" git-buildpackage will ask you for sudo's password, and probably you'll need to install previously aptitude in the jail. If so, chroot /var/cache/pbuilder/base.cow and install aptitude. All the build dependencies will be installed automatically. The packages of icecat i386 will appear in ../build-area. Good lock :) Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Firefox/Icecat build (was: Re: Pipewire and PulseAudio: apulse & firefox)
On 23/12/21 22:38, aitor wrote: The packages of icecat i386 will appear in ../build-area. In the case of amd64, skip all the steps related to pbuilder and run: $ gbp buildpackage --git-export-dir="../build-area" Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Firefox/Icecat build (was: Re: Pipewire and PulseAudio: apulse & firefox)
On 23/12/21 22:38, aitor wrote: Good lock :) *luck* ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Firefox/Icecat build (was: Re: Pipewire and PulseAudio: apulse & firefox)
On 23/12/21 22:38, aitor wrote: I recommend a fresh install of devuan chimaera amd64 on a computer with 8G RAM, and a swap partition of 16 GB. ... fresh install, because I assume you haven't 16 GB of swap. Otherwise, the kernel may interrupt the build process due to the lack of shared memory, getting a SIGKILL signal coming from PID=0. Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] create .deb packages with alien
Hi Ismael,
On 23/12/21 23:11, Ismael L. Donis Garcia wrote:
Until recently I have created .deb packages with alienI don't know if
when updating to chimaera it broke down because I haven't done it for
a while
Now I get the following error
And I need to do it with alien since from the package I take a series
of data that it generates automatically
I really use trampoline alien as it is said in the place where I live,
since in the end I create it with: dpkg-deb
But cel created with alien took the md5sums file
root@clt-iyc-03:/home/idonis/Documentos/ismael/sisconge/ver2/amd64
<mailto:root@clt-iyc-03:/home/idonis/Documentos/ismael/sisconge/ver2/amd64>#
alien --version=2.1 -k --fixperms sisconge_2.0.1_amd64.tar.gz
Package build failed. Here's the log:
dh binary
dh_update_autotools_config
dh_autoreconf
create-stamp debian/debhelper-build-stamp
dh_testroot
dh_prep
debian/rules override_dh_auto_install
make[1]: se entra en el directorio
'/home/idonis/Documentos/ismael/sisconge/ver2/amd64/sisconge_2.0.1_amd64-2.1'
mkdir -p debian/sisconge-2.0.1-amd64
# Copy the packages's files.
find . -maxdepth 1 -mindepth 1 -not -name debian -print0 | \
sed -e s#'./'##g | \
xargs -0 -r -i cp -a ./{} debian/sisconge-2.0.1-amd64/{}
make[1]: se sale del directorio
'/home/idonis/Documentos/ismael/sisconge/ver2/amd64/sisconge_2.0.1_amd64-2.1'
dh_installdocs
dh_installchangelogs
dh_icons
dh_perl
dh_usrlocal
dh_usrlocal: error: debian/sisconge-2.0.1-amd64/usr/local/bin/startaft
is not a directory
make: *** [debian/rules:7: binary] Error 25
root@clt-iyc-03:/home/idonis/Documentos/ismael/sisconge/ver2/amd64
<mailto:root@clt-iyc-03:/home/idonis/Documentos/ismael/sisconge/ver2/amd64>#
I don't know if someone on this list can help me or tell me where to
ask this question.
I ask the question here since I use devuan
I never used alien, but maybe you should override dh_usrlocal. The path
/usr/local/bin is for binaries built from sources,
whereas binaries provided by .deb packages go to /usr/bin. I don't know how to
do this with alien.
HTH,
Aitor.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] merged /usr breakage
Hi Karl, On 4/1/22 22:17, k...@aspodata.se wrote: the problem is that the lib is on a filesystem that isn't available at kernel to init handover time. Did you try something like this: copy_exec /usr/lib/x86_64-linux-gnu/libpcre2-8.so.0 in a hook located at/usr/share/initramfs-tools, in order to include it in the initrd? Sorry, but i'm a bit unaware of the thread... Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] How to make non /usr merged dpgs (was: Re: merged /usr breakage)
Hi Karl, En 5 de enero de 2022 11:24:13 escribió: Karl: The first one gives me an unbootable system $ ldd /sbin/init | grep /usr libpcre2-8.so.0 => /usr/lib/x86_64-linux-gnu/libpcre2-8.so.0 (0x7f737ba28000) ... So, how do I change the above package to install the lib in /lib//x86_64-linux-gnu instead ? I can get the source with: $ apt-get source libpcre2-8-0 $ cd pcre2-10.36/debian is it sufficient to change this file ? $ cat libpcre2-8-0.install debian/tmp/usr/lib/*/libpcre2-8.so.* $ and if I manage to create the package, what name should I give it, something like libpcre2-8-0_nonusrmerge or what ? I can't answer in detail from my mobile, but you can give a try to dh_exec. The *.install files must be executables. Aitor. Enviado con Aqua Mail para Android https://www.mobisystems.com/aqua-mail ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] How to make non /usr merged dpgs (was: Re: merged /usr breakage)
Hi Karl, En 5 de enero de 2022 11:24:13 escribió: Karl: The first one gives me an unbootable system $ ldd /sbin/init | grep /usr libpcre2-8.so.0 => /usr/lib/x86_64-linux-gnu/libpcre2-8.so.0 (0x7f737ba28000) ... So, how do I change the above package to install the lib in /lib//x86_64-linux-gnu instead ? I can get the source with: $ apt-get source libpcre2-8-0 $ cd pcre2-10.36/debian is it sufficient to change this file ? $ cat libpcre2-8-0.install debian/tmp/usr/lib/*/libpcre2-8.so.* $ and if I manage to create the package, what name should I give it, something like libpcre2-8-0_nonusrmerge or what ? I can't answer in detail from my mobile, but one way to go is majing use of dh_exec. Look at this, as sample: https://gitea.devuan.dev/aitor_czr/libnetaid/src/branch/gbp-master/debian Keep in mind that the *.install files must be exeutable. Aitor. Enviado con Aqua Mail para Android https://www.mobisystems.com/aqua-mail ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] [SOLVED] EFI boot not found, partially solved in gnuinos (Was: 1st boot failed but repaired OK)
Hi, On 22/12/21 15:57, aitor wrote: En 22 de diciembre de 2021 14:55:41 ". fsmithred via Dng" escribió: On 12/21/21, aitor wrote: Hi, On 21/12/21 19:55, aitor wrote: Hi Ralph, On 21/12/21 12:19, Ralph Ronnquist via Dng wrote: On Tue, 21 Dec 2021 01:44:39 +0100 aitor wrote: ... The outcome is that i've been compelled to turn back the distributor to its default ID=devuan, and i'm rebuilding the images of gnuinos chimaera right now so that they will work properly in UEFI mode without workarounds during the first boot on the part of users. I wonder, to this regard, what is the trick in Devuan to put in place the distributor ID without the need of hijacking the boot loader... ... doesn't "scripts/magic-touch" tell the story? Looking at the script, it seems that i must define a new variable: GNUINOSCFG=/target/boot/efi/EFI/gnuinos/grub.cfg and copy the content to $DEBIANCFG in the same way you're doing with $DEVUANCFG. Yes, it seems the way to go... I'll tell you, thanks! Oops, I knew about the --efi-directory argument for grub-install, which defines the root partition of the EFI system, but there is also another one that i was overlooking up till now: --bootloader-id=ID I found it looking at the code of grub-install.c in grub2. The value of this argument has preference over the value defined in os-release. Cheers, Aitor. Another way to fix it in the installed system is to remove grub-efi-amd64-signed if you don't use Secure Boot. Then you don't need /boot/efi/EFI/debian. I haven't any computer to hand right now, but i think that EFI/debian/bootx64.efi is provided by grub-efi-amd64, and the rest of the files by grub-efi-amd64-signed. The trick was in the lines nº 1212 - 1216 of grub-install.c: efi_distributor = bootloader_id; if (strcmp (efi_distributor, "kubuntu") == 0) efi_distributor = "ubuntu"; else if (strcmp (efi_distributor, "devuan") == 0) efi_distributor = "debian"; Thus, i need to build my own grub to get the intended effect, adding the lines: else if (strcmp (efi_distributor, "gnuinos") == 0) efi_distributor = "debian"; Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] EFI boot not found, partially solved in gnuinos (Was: 1st boot failed but repaired OK)
Hi Ralph, On 21/12/21 12:19, Ralph Ronnquist via Dng wrote: On Tue, 21 Dec 2021 01:44:39 +0100 aitor wrote: ... The outcome is that i've been compelled to turn back the distributor to its default ID=devuan, and i'm rebuilding the images of gnuinos chimaera right now so that they will work properly in UEFI mode without workarounds during the first boot on the part of users. I wonder, to this regard, what is the trick in Devuan to put in place the distributor ID without the need of hijacking the boot loader... ... doesn't "scripts/magic-touch" tell the story? Looking at the script, it seems that i must define a new variable: GNUINOSCFG=/target/boot/efi/EFI/gnuinos/grub.cfg and copy the content to $DEBIANCFG in the same way you're doing with $DEVUANCFG. Yes, it seems the way to go... I'll tell you, thanks! Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] EFI boot not found, partially solved in gnuinos (Was: 1st boot failed but repaired OK)
Hi, On 21/12/21 19:55, aitor wrote: Hi Ralph, On 21/12/21 12:19, Ralph Ronnquist via Dng wrote: On Tue, 21 Dec 2021 01:44:39 +0100 aitor wrote: ... The outcome is that i've been compelled to turn back the distributor to its default ID=devuan, and i'm rebuilding the images of gnuinos chimaera right now so that they will work properly in UEFI mode without workarounds during the first boot on the part of users. I wonder, to this regard, what is the trick in Devuan to put in place the distributor ID without the need of hijacking the boot loader... ... doesn't "scripts/magic-touch" tell the story? Looking at the script, it seems that i must define a new variable: GNUINOSCFG=/target/boot/efi/EFI/gnuinos/grub.cfg and copy the content to $DEBIANCFG in the same way you're doing with $DEVUANCFG. Yes, it seems the way to go... I'll tell you, thanks! Oops, I knew about the --efi-directory argument for grub-install, which defines the root partition of the EFI system, but there is also another one that i was overlooking up till now: --bootloader-id=ID I found it looking at the code of grub-install.c in grub2. The value of this argument has preference over the value defined in os-release. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] [SOLVED] EFI boot not found, partially solved in gnuinos (Was: 1st boot failed but repaired OK)
Hi again, On 22/12/21 22:12, aitor wrote: The trick was in the lines nº 1212 - 1216 of grub-install.c: efi_distributor = bootloader_id; if (strcmp (efi_distributor, "kubuntu") == 0) efi_distributor = "ubuntu"; else if (strcmp (efi_distributor, "devuan") == 0) efi_distributor = "debian"; Once applied the quilt patches, i mean. And the patch is: https://salsa.debian.org/grub-team/grub/-/blob/master/debian/patches/install-efi-adjust-distributor.patch <https://salsa.debian.org/grub-team/grub/-/blob/master/debian/patches/install-efi-adjust-distributor.patch> Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] broken dependency chain for libgtk-3-dev ?
Hi, On 28/12/21 2:07, alphalpha--- via Dng wrote: Hello is anyone else having this problem or is it just me? - sudo apt-get install libgtk-3-dev Reading package lists... Done Building dependency tree... Done Reading state information... Done Some packages could not be installed. This may mean that you have requested an impossible situation or if you are using the unstable distribution that some required packages have not yet been created or been moved out of Incoming. The following information may help to resolve the situation: The following packages have unmet dependencies: libatspi2.0-dev : Depends: libatspi2.0-0 (= 2.38.0-4) but 2.42.0-2~bpo11+1 is to be installed libepoxy-dev : Depends: libepoxy0 (= 1.5.5-1) but 1.5.8-1~bpo11+1 is to be installed E: Unable to correct problems, you have held broken packages. - No issues at me, libatspi2.0-dev_2.38.0-4 and libepoxy-dev_1.5.5-1 have been installed. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] snetaid debs...
On 3/1/22 22:02, aitor wrote: it could be carred out in the short term. *carried* ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] snetaid debs...
Hi, On 3/1/22 12:05, al3xu5 via Dng wrote: After upgraded to Chimaera, I wsa able to install snetaid .deb packets without problems. It seems it works as expected. Many thanks Aitor! Good :) PS: I would also kindly ask you for information on the status of simple-netaid-gtk<https://git.devuan.org/aitor_czr/simple-netaid-gtk> Thanks again I do not dare giving a precise date for the packages of the gtk interface, because there are also other key-areas on which i would like to spend my time, such as vdev or the live-sdk documentation, among others. Even though, if it appears to be a widespread desire on prioritize any of these concrete areas, it could be carred out in the short term. Cheers, and thanks for your interest! Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Simple-netaid 1-0 released
En 20 de noviembre de 2021 22:01:18 Steve Litt escribió: aitor said on Sat, 20 Nov 2021 12:47:24 +0100 but keep in mind that first you'll need to stop the previous instance via "service snetaid stop" because libnetaid doesn't admit multiple instances of snetaid so far. Why would anyone want multiple instances of snetaid? Nobody. Incidentally, only developers. Aitor. SteveT Steve Litt Spring 2021 featured book: Troubleshooting Techniques of the Successful Technologist http://www.troubleshooters.com/techniques ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng Enviado con Aqua Mail para Android https://www.mobisystems.com/aqua-mail ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] snetaid debs...
Hi, On 6/11/21 10:36, al3xu5 via Dng wrote: I tried to install the new packages on Beowulf: - snetaid 1.0-1 package was installed, but I have: $ sudo service snetaid status /usr/sbin/snetaid: error while loading shared libraries: libnetaid.so.1: cannot open shared object file: No such file or directory - indeed when trying to install the libnetaid 1.0-1 I get a dependency error being required libc6>=2.29 ... I've got the same error in Void Linux due to other reasons. Setting the environmental variable: |export LD_LIBRARY_PATH=/usr/lib/x86_64-linux-gnu| solved the issue, as you can see in the following screenshot: https://www.gnuinos.org/simple-netaid/simple-netaid_voidlinux.png <https://www.gnuinos.org/simple-netaid/simple-netaid_voidlinux.png> However, simple-netaid is not working 100% in Void Linux yet, though there is not much left: - Configure the runit scripts for snetaid in /etc/sv/snetaid. - Install ifupdown, a runtime dependency. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Simple-netaid 1-0 released
Hi Tito, Top posting from my mobile... You need to add the following stanzas to /etc/network/interface (this is valid for dynamic ip addresses): allow-hotplug iface inet dhcp Ralph Ronnquist wrote some tips about how to configure ifupdown in dev1galaxy, i think. You can also search the web. Here you are another link explaining some manual configurations: https://unix.stackexchange.com/questions/128439/good-detailed-explanation-of-etc-network-interfaces-syntax Cheers, Aitor. En 20 de noviembre de 2021 13:32:37 tito via Dng escribió: On Sat, 20 Nov 2021 12:47:24 +0100 aitor wrote: Hi all, I've just uploaded the packages of simple-netaid (libnetaid + snetaid + simple-netaid-cdk) to the repository of gnuinos chimaera. If you want to install them in devuan, first you'll need to install the gnupg key of gnuinos: http://packages.gnuinos.org/gnuinos/pool/main/g/gnuinos-keyring/gnuinos-keyring_2020.05.03_all.deb <http://packages.gnuinos.org/gnuinos/pool/main/g/gnuinos-keyring/gnuinos-keyring_2020.05.03_all.deb> and then add the repository to your sources.list: deb http://packages.gnuinos.org/gnuinos chimaera main In order to see how the daemon works you can run snetaid in the foreground specifying the absolute path (required), and looking at stdout [*]: # /usr/sbin/snetaid -f but keep in mind that first you'll need to stop the previous instance via "service snetaid stop" because libnetaid doesn't admit multiple instances of snetaid so far. Once that has been done, run the ncurses interface either from the menu entry or the command line. You can verify the response of the ncurses interface to netlink events triggered by foreign processes opening a new terminal and typing commands like: # ip link set down # ifup and so on... Don't forget to configure your /etc/network/interfaces! If you don't want to restart the system at every change, Hi, how exactly does it need to be configured, are the manged devices to be removed or added to /etc/network/interfaces? Ciao, Tito you can reconfigure it by the following way: # service networking restart That's all :) Cheers, Aitor. [*] ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng Enviado con Aqua Mail para Android https://www.mobisystems.com/aqua-mail ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] Simple-netaid 1-0 released
Hi all, I've just uploaded the packages of simple-netaid (libnetaid + snetaid + simple-netaid-cdk) to the repository of gnuinos chimaera. If you want to install them in devuan, first you'll need to install the gnupg key of gnuinos: http://packages.gnuinos.org/gnuinos/pool/main/g/gnuinos-keyring/gnuinos-keyring_2020.05.03_all.deb <http://packages.gnuinos.org/gnuinos/pool/main/g/gnuinos-keyring/gnuinos-keyring_2020.05.03_all.deb> and then add the repository to your sources.list: deb http://packages.gnuinos.org/gnuinos chimaera main In order to see how the daemon works you can run snetaid in the foreground specifying the absolute path (required), and looking at stdout [*]: # /usr/sbin/snetaid -f but keep in mind that first you'll need to stop the previous instance via "service snetaid stop" because libnetaid doesn't admit multiple instances of snetaid so far. Once that has been done, run the ncurses interface either from the menu entry or the command line. You can verify the response of the ncurses interface to netlink events triggered by foreign processes opening a new terminal and typing commands like: # ip link set down # ifup and so on... Don't forget to configure your /etc/network/interfaces! If you don't want to restart the system at every change, you can reconfigure it by the following way: # service networking restart That's all :) Cheers, Aitor. [*] ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] snetaid debs...
Hi, On 25/10/21 8:22, aitor wrote: Yesterday night i pushed the new code to git. Packages of libnetaid, snetaid and simple-netaid-cdk (still not updated in gitea.devuan.dev) for chimaera will be available in a couple of days. The code of simple-netaid is ready to use: - libnetaid: the shared library https://gitea.devuan.dev/aitor_czr/libnetaid/src/branch/gbp-master <https://gitea.devuan.dev/aitor_czr/libnetaid/src/branch/gbp-master> - snetaid: the daemon https://gitea.devuan.dev/aitor_czr/snetaid/src/branch/gbp-master <https://gitea.devuan.dev/aitor_czr/snetaid/src/branch/gbp-master> - simple-netaid-cdk: the ncurses interface https://gitea.devuan.dev/aitor_czr/simple-netaid-cdk/src/branch/gbp-master <https://gitea.devuan.dev/aitor_czr/simple-netaid-cdk/src/branch/gbp-master> Packages will be available in a few hours... Sorry for the delay, and thanks for your interest in the project :) Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] snetaid debs...
Hi, On 1/11/21 19:48, aitor wrote: The code of simple-netaid is ready to use: - libnetaid: the shared library https://gitea.devuan.dev/aitor_czr/libnetaid/src/branch/gbp-master <https://gitea.devuan.dev/aitor_czr/libnetaid/src/branch/gbp-master> - snetaid: the daemon https://gitea.devuan.dev/aitor_czr/snetaid/src/branch/gbp-master <https://gitea.devuan.dev/aitor_czr/snetaid/src/branch/gbp-master> - simple-netaid-cdk: the ncurses interface https://gitea.devuan.dev/aitor_czr/simple-netaid-cdk/src/branch/gbp-master <https://gitea.devuan.dev/aitor_czr/simple-netaid-cdk/src/branch/gbp-master> Packages will be available in a few hours... Sorry for the delay, and thanks for your interest in the project :) Cheers, Aitor. Done: https://www.gnuinos.org/simple-netaid/ <https://www.gnuinos.org/simple-netaid/> Packages have been tested in a fresh install of devuan chimaera. The dependency on libpstat (Jude Nelson) might be replaced with pwdx (maybe...) Please, don't forget to configure your /etc/network/interfaces properly. Next packages will consist of a status icon in both Gtk and Qt. I have them working. Shortly i'll test simple-netaid in other distributions. Specially, I look forward to build packages for Void Linux, including also ifupdown -available in github for other distros, de(b|v)uan aside. Feedback is welcome. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] What is libc5-i686 | lib32gcc1 (proliant package dependencies)
Hi Alessandro, On 27/10/21 18:19, Alessandro Vesely via Dng wrote: I have both libc6:i386 and lib32gcc-s1 (on an AMD 64bit machine). libc6-i686:i386 is tagged 'rc' transitional dummy package. gcc-multilib maybe? This is useful to cross-compile i386 applications under amd64. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] snetaid debs...
Hi,
On 6/11/21 10:36, al3xu5 via Dng wrote:
I tried to install the new packages on Beowulf:
- snetaid 1.0-1 package was istalled, but I have:
$ sudo service snetaid status
/usr/sbin/snetaid: error while loading shared libraries: libnetaid.so.1:
cannot open shared object file: No such file or directory
- indeed when trying to install the libnetaid 1.0-1 I get a dependency
error being required libc6>=2.29 ...
Since now I have no time to rebuild snetaid sources on Beowulf, I decided
to firstly migrate my system to Chimaera (as soon as possible) and then
"retry" to install snetaid...
Packages have been tested only in chimaera. Anyway, i'm doing some changes in
the code right now.
Notably i'm removing a double usage of the netlink socket in the daemon [*],
which makes it redundant
and quite confusing (the global design is still a bit confusing, i know).
On the other hand, i also decided to restart snetaid via [**]:
execv(argv[0], params);
during the connection attempts in order to be able to redirect stdout to
another tty. I've not been
able to do this redirection after reopening stdin, stdout and stderr so that
the daemon or its child
processes can detach succesfully from the tty:
stdin = fopen("/dev/null", "r");
stdout = fopen("/dev/null", "w+");
stderr = fopen("/dev/null", "w+");
Any hints at this point?
As soon as i finish these changes, i'll build an iso image with the live-sdk
including the packages.
I'll let you know.
Cheers, and thanks again for your interest!
Aitor.
[*] The first one when making use of select(); the second one when making use
of recvmsg() in nl_monitor.
[**] I know the risks of doing this as root, but i'm doing this in a safe mode. Note that execv will restart
snetaid keeping the same pid.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Simple-netaid 1-0 released
Hi again, On 11/30/21 10:10 PM, aitor wrote: Hi fraser, On 11/30/21 12:23 PM, fraser kendall wrote: Very nice tool. So far doing everything I expected it to do, and doing it reliably and quickly. Thank you. Thank you very much for taking the time to test it! I'm doing some changes in libnetaid in order to get it working with static IP addresses. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Pipewire and PulseAudio: apulse & firefox
Hi Steve, On 16/12/21 1:09, Steve Litt wrote: I'm not so sure. We're hearing anecdotes of people running Firefox with only ALSA. Perhaps there's some secret magic incantation that we don't yet know about. FF needs to be compiled passing the flag: ac_add_options --enable-alsa I removed pulseaudio, apulse and libpulse0, and the sound is working for me. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Pipewire and PulseAudio: apulse & firefox
Hi, On 16/12/21 9:33, d...@d404.nl wrote: Is it still working with pulseaudio after being compiled with --enable-alsa? If yes we could add a Devuanized firefox to the build process. Yes, i tried removing alsa and reinstalling pulseaudio, and it still works. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Pipewire and PulseAudio: apulse & firefox
Hi, On 16/12/21 7:08, Marc Shapiro via Dng wrote: I don't think I'm up for compiling firefox from source. Packaging for i386 requires cross-compilation under 64 bits because it takes a lot of ram: http://packages.gnuinos.org/gnuinos/pool/main/i/icecat/ <http://packages.gnuinos.org/gnuinos/pool/main/i/icecat/> All my native attempts failed, even with PAE extension. It requires also a lot of swap. And it would have to be recompiled every time mozilla releases a new version. It would have to be recompiled at every new release of devuan. But, as Didier has pointed out, packages pulled from debian mirrors work with alsa out of the box. I don't know about the precompiled tarballs downloaded from mozilla's website. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Simple-netaid 1-0 released
Hi fraser, On 11/30/21 12:23 PM, fraser kendall wrote: Very nice tool. So far doing everything I expected it to do, and doing it reliably and quickly. Thank you. Thank you very much for taking the time to test it! Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] snetaid debs...
Hi Edward, On 11/23/21 10:22 PM, Edward Bartolo via Dng wrote: Dear Aitor, There are no hard feelings from me, notwithstanding my project is now defunct. I would like to thank you for adopting it in your own way to modernise it so that it can be secure and enjoyed by everyone. Sincerily, thanks for all your time and dedication. Thanks to Devuan, I am using what was known as Debian without the burden of systemd. You gave me the base to work upon. Didier Kryn also gave me some good ideas working on hopman that have been really useful for simple-netaid. As you clearly indicate, the old version uses an SUID executable to get root privileges which is a security hole which Devuan did very well to close, even though it broke my latest version of simple-netaid-*. In my limited use case, I worked around the breakage by removing the GUI component and using only the backend as root. It works in my case, but other users may require more functionality, which thanks to people like you, they can have. Sincerily, THANKS for your time and effort. Now the shared library sends a signal to the daemon as a reminder for client connection requests to be listened to on the server socket. The cap_kill linux capability allows the shared library to send this signal to the daemon (a process running with root privilegies) and be successful. And last the daemon gets the credentials from the received data before going ahead with the task requested. Have a look at read_arguments() in snetaid (lines 1056 - 1156): https://gitea.devuan.dev/aitor_czr/snetaid/src/branch/master/src/main.c <https://gitea.devuan.dev/aitor_czr/snetaid/src/branch/master/src/main.c> Regarding the idea of importing functionality from your libraries to let my latest version of simple-netaid-* connect without the requirement of an SUID tag, although it can be done, there is no need for Devuan, as users can already use your project. I'm a bit stubborn, though :) Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Install OpenSSL (libssl, libcrypto) with weak ciphers
On 21/7/21 23:04, aitor wrote: *libssl1.1* provides both libssl and libcrypto shared libraries. Better said: /usr/lib/x86_64-linux-gnu/libssl.so.1.1 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1 Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Install OpenSSL (libssl, libcrypto) with weak ciphers
Hi Mike, On 21/7/21 15:20, Mike Tubby wrote: Hi All, I appear to have a problem with OpenSSL and lack of support for weak ciphers, i.e. DES and 3DES ... I am trying to migrate a legacy system from Ubuntu 16.04 to Devuan 3.0 where we have mobile IoT devices based on Cinterion TC65i that are 10+ years old with a limited sub-set of SSL 3.0/TLS 1.0 ciphers in its Java-ME runtime, in particular we need DES/3DESciphers like RSA-3DES-CBC-SHA I have pulled the source package for openssl-1.1.1d and recompiled with configure option --enable-weak-ssl-ciphers that has left we with a new libssl and a mixture of .deb files and .udeb files: root@webmin1:/home/chris/openssl# ls -l total 20364 -rw-r--r-- 1 chris chris 1092008 Jul 21 13:41 libcrypto1.1-udeb_1.1.1d-0+deb10u6_amd64.udeb -rw-r--r-- 1 chris chris 1539476 Jul 21 13:41 libssl1.1_1.1.1d-0+deb10u6_amd64.deb -rw-r--r-- 1 chris chris 4024572 Jul 21 13:41 libssl1.1-dbgsym_1.1.1d-0+deb10u6_amd64.deb -rw-r--r-- 1 chris chris 191008 Jul 21 13:41 libssl1.1-udeb_1.1.1d-0+deb10u6_amd64.udeb -rw-r--r-- 1 chris chris 1794312 Jul 21 13:41 libssl-dev_1.1.1d-0+deb10u6_amd64.deb -rw-r--r-- 1 chris chris 1722936 Jul 21 13:41 libssl-doc_1.1.1d-0+deb10u6_all.deb drwxr-xr-x 22 chris chris 4096 Jul 21 13:49 openssl-1.1.1d -rw-r--r-- 1 chris chris 6574 Jul 21 13:41 openssl_1.1.1d-0+deb10u6_amd64.buildinfo -rw-r--r-- 1 chris chris 3724 Jul 21 13:41 openssl_1.1.1d-0+deb10u6_amd64.changes -rw-r--r-- 1 chris chris 844036 Jul 21 13:41 openssl_1.1.1d-0+deb10u6_amd64.deb -rw-r--r-- 1 root root 99740 Mar 23 20:54 openssl_1.1.1d-0+deb10u6.debian.tar.xz -rw-r--r-- 1 root root 2472 Mar 23 20:54 openssl_1.1.1d-0+deb10u6.dsc drwxr-xr-x 20 root root 4096 Jul 21 11:51 openssl-1.1.1d.orig -rw-r--r-- 1 root root 8845861 Sep 14 2019 openssl_1.1.1d.orig.tar.gz -rw-r--r-- 1 root root 488 Sep 14 2019 openssl_1.1.1d.orig.tar.gz.asc -rw-r--r-- 1 chris chris 650980 Jul 21 13:41 openssl-dbgsym_1.1.1d-0+deb10u6_amd64.deb root@webmin1:/home/chris/openssl# I don't appear to get a new libcrypto1.1-udeb_1.1.1d-0+deb10u6_amd64.deb but a udeb file instead that will not install. What am I missing *libssl1.1* provides both libssl and libcrypto shared libraries. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Question about the text editor named medit.
Hi, On 4/1/22 13:47, Ralph Ronnquist via Dng wrote: .. gratuitous result: https://askubuntu.com/questions/1372529/is-it-possible-to-get-latest-version-of-medit-aka-mooedit-for-ubuntu-20-04-lts The tarball was available; the rest is for ubuntu of course The last packaging was in oldstable: https://qa.debian.org/developer.php?login=josgalo%40gmail.com <https://qa.debian.org/developer.php?login=josgalo%40gmail.com> Looking at the control file, medit disappeared from chimaera repositories because of the deprecation of python-gtk2. That is for the same reason that wicd did. So, there is a chance that packaging will return in testing or backports, as happened in the case of wicd. Edward: geany might be a good choice for you in the meantime. Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Firefox/Icecat build (was: Re: Pipewire and PulseAudio: apulse & firefox)
Hi, On 9/1/22 18:43, al3xu5 via Dng wrote: Hi. Sorry if I come back to this after a long time... But after upgrading to Chimaera, I'm trying to make the build. A question: after the manual download of the three files above (without adding the gnuinos repos), is there a way how I can verify their integrity? Solved by myself (using the gnuinos repository gpg key...). Sorry for the noise. You have the checksums in the .dsc file Cheers, Aitor. Note: the repo of gnuinos chimaera is in flux, and it's not stable yet. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] qownbackup
Hi Steve, On 13/2/22 4:09, Steve Litt wrote: Hi all, For any of you using the extremely handy QOwnNote note taking and Markdown authoring software, I've created the qownbackup system to make automatic, versioned backups of all your QOwnNotes Markdown files. This solves the problem of QOwnNotes autosaving mistakes and accidental deletions over the good version. http://troubleshooters.com/projects/qownbackup/ Thanks for sharing it :) Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] vdev in chimaera
Hi Didier, On 11/2/22 12:11, Didier Kryn wrote: My normal interfaces file contains an "auto" stanza for wlan0, which is superfluous, according to messages from ifplugd, and*only* "iface eth0 inet dhcp" for eth0 because it comes first in the file and "auto" and/or "allow-hotplug" can just cause the abovementionned delay when no Ethernet cable is connected. Please, give a try to the following image: https://www.gnuinos.org/mirror/chimaera/live/ <https://www.gnuinos.org/mirror/chimaera/live/> There are several services being handled by runit in these images, and ifupdown's networking is one of them. Better said, it's not a service -as you pointed out- but a script that starts another service, that is dhcp. You can test the image in live mode, and you'll find that the delay caused by the configuration in /etc/network/interfaces disappears. Also, even if you boot without wired connection, the connection will be stablished without the need of restarting the service when you plug/unplug the ethernet cable again and again. Note, on the other hand, that the time interval in the periodic reminder of the automatically_connect option of simple-netaid (setup in /etc/simple-netaid/snetaid.conf) is equal to zero so as not to interfere with the stanzas defined in /etc/network/interfaces. Hence, the wired connection is stablished thanks to these definitions. And yes..., *both* stanzas are required for that. With this in mind, I decided to leave the automatically connect option of simple-netaid only for wired devices. More info later :) Cheers, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Wifi problem - dhclient times out with no reply
Hi Joel, On 11/3/22 20:40, Joel Roth via Dng wrote: Hi wifi veterans, I recently migrated my chimaera system to new hardware. The wifi adapter is Broadcom BCM43228. Installing the firmware-b43-installer package got this adapter working normally. After doing an apt-get upgrade, I can get a a wifi connection, for example using wpa_gui, however dhclient just times out. Do you have any suggestions for how to troubleshoot this? Did you clear the ip addreses? I use the command below together with ifupdown: #|ip addr flush dev wlan0| Another way might be to force DHCP client release your ip: # dhclient -r wlan0 # rm|/var/lib/dhcp/dhclient.wlan0.leases (!! Not sure about the name of the file storing the leases)| # dhclient wlan0 This way you reacquire a fresh ip from the DHCP server.|| HTH, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Web md RAID monitoring [was: Re: Fake RAID]
Hi, On 10/3/22 8:41, Didier Kryn wrote: Not packaged. Debian packaging is something I was never able to achieve and I prefer devoting my time to more fruitfull trasks, given my skills. I can send you diskweb.tgz, the size of which is 16K. It is trivial to build. It monitors both md RAIDs and the level of occupation of the filesystems. RAID data is read from devices' representation in /sys/devices/virtual/block, and the display is made attractive by the use of colors and svg graphics. I wrote this more than a dozen years ago and never touched it since that time. It's running on our home Desktop. Note that the location /sys/devices/virtual/block is not granted to stay the same place in the future, but this location is easy to change in the source in case kernel people change their mind. If more people are interested I might put it on Devuan git. If you decide to push it to devuan git, I would try to build the packages. Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Installation problems on Dell T7810 + PERC H310
Hi Fraser, On 8/3/22 16:33, fraser kendall wrote: However, despite two days of effort, I cannot get the machine to boot linux from the hard drive. The first problem was not detecting disks during installation, although after switching to legacy boot, the installer found the disks; partitioning and installation then completed as expected. The machine, however, failed to boot (no bootable image) after this 'successful' installation. I grub-installed to the 'removable media path' as advised,, but I did use a 'targeted' not a 'generic' initrd; this last has not been a problem before. I have disabled the RAID according to these instructions. https://www.dell.com/community/PowerEdge-HDD-SCSI-RAID/Linux-installation-doesn-t-find-physical-disks-on-R320/td-p/7659439 Did you read the following guide? https://wiki.debian.org/DebianInstaller/SataRaid HTH, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Wifi problem - dhclient times out with no reply
Hi Joel, On 12/3/22 19:52, Joel Roth via Dng wrote: Thank for these suggestions. I've been killing dhclient and bringing down the interface, bringing it up and restarting dhclient. which I think does mostly the same thing. I also removed /var/lib/dhcp/dhclient.wlan* One way forward would be to restore my system to before the recent upgrade. For the moment, I'm using a wired connection. Did you kill also wpa_supplicant? Try again in this order: # killall dhclient wpa_supplicant # ip addr flush dev wlan0 # ip link set wlan0 down # ip link set wlan0 up # /sbin/wpa_supplicant -B -iwlan0 -c wpa.conf Finally: # dhclient wlan0 Good luck, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Wifi problem - dhclient times out with no reply
Hi, On 12/3/22 19:52, Joel Roth via Dng wrote: Thank for these suggestions. I've been killing dhclient and bringing down the interface, bringing it up and restarting dhclient. which I think does mostly the same thing. I also removed /var/lib/dhcp/dhclient.wlan* Run: $ man dhclient.conf and look at your /etc/dhcp/dhclient.conf Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] runit, ifupdown and simple-netaid (was: vdev in chimaera)
On 23/2/22 2:35, aitor wrote: all the content in its config file to be piped to the sysctl command *files*, better said, the ones found in /etc/sysctl.d/ Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] lvm2 depends on systemd
Hi Boian, On 22/2/22 18:18, Boian Bonev wrote: Maybe I have omitted to share more details - I am building the plain upstream lvm and do not create a package (no patches involved). I was supposing that this was the case. Both you and me are being able to build the sources, but I cannot find the required files for building one of the packages defined in debian/control. Also I may be missing what are you trying to do... Just remove systemd from the build dependencies in debian/control. Packages of lvm2 can't be built under devuan with the current configuration (pulled from debian). But llvm2 is not solely the case. The same goes for czmq, to take another example: https://zeromq.org/languages/cplusplus/ <https://zeromq.org/languages/cplusplus/> a high level binding for ZeroMQ:https://zguide.zeromq.org <https://zguide.zeromq.org> The packaging of the above c++ wrapper -required by rsyslog- depends also on systemd. Huh! In case you share a repo, I may be able to help with that... This is done: http://packages.gnuinos.org/gnuinos/pool/main/l/lvm2/lvm2_2.03.02.orig.tar.gz <http://packages.gnuinos.org/gnuinos/pool/main/l/lvm2/lvm2_2.03.02.orig.tar.gz> http://packages.gnuinos.org/gnuinos/pool/main/l/lvm2/lvm2_2.03.11-2.1+gnuinos4.debian.tar.xz <http://packages.gnuinos.org/gnuinos/pool/main/l/lvm2/lvm2_2.03.11-2.1+gnuinos4.debian.tar.xz> http://packages.gnuinos.org/gnuinos/pool/main/l/lvm2/lvm2_2.03.11-2.1+gnuinos4.dsc <http://packages.gnuinos.org/gnuinos/pool/main/l/lvm2/lvm2_2.03.11-2.1+gnuinos4.dsc> It happens that disabling the dbus service, most of the files that belong to llvm2-dbusd are missing. Therefore, this package must be removed from debian/control. Thanks for your help, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
