Re: [DNG] Avoid systemd as build dependency

[Yevgeny Kosarzhevsky via Dng]

Hi Aitor,

I wonder why it's in /usr/local while the one I've built went to /usr
I didn't do something special for this
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Avoid systemd as build dependency

[Yevgeny Kosarzhevsky via Dng]

Hi Aitor,

I've been able to build base package already (3.31) after removing
systemd dependencies with `sed -i '/systemd/d'
packaging/debian/control`.
I've run `make deb` and it's built deb package successfully on beowulf.
The only thing I needed is to manually add init script.

I am wondering what is the proper way of removing systemd dependency
from base source as upstream adds it by some needs. Do you think
making pre-install hook is the best way to do init system checks
instead of running systemd things at a build time? Or is there any
other better way to remove *systemd* from build-deps?


On Sun, 19 Apr 2020 at 21:15, aitor  wrote:
>
> Hi Yevgeny,
>
> On 19/4/20 16:49, Yevgeny Kosarzhevsky via Dng wrote:
>
> Hi community.
>
> could someone point out the proper way of avoiding systemd build dependency?
>
> I find some packages require it at build time.
> https://github.com/libreswan/libreswan/issues/328 for example.
>
> It builds fine without it, however debian maintainers need it for their 
> reasons.
>
> The debian branch is very well done:
>
> https://github.com/libreswan/libreswan/tree/master/packaging/debian
>
> After removing all the stuff related with systemd, my first attempt failed
> because dh_usrlocal must be overridden, i guess (this issue has nothing to do 
> with systemd).
> On the other hand, i added another dependency to debian/control: 
> *libdistro-info-perl*,
> even not being mandatory, in order to avoid a warning when using "gbp dch" 
> for the changelog.
> Give me a couple of hours, and i'll give you a link to the packages.
> I'm under devuan beowulf, and i'm working with the latest release 3.31 
> instead of the master branch.
>
> Cheers,
>
> Aitor.
>
>
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng



-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Avoid systemd as build dependency

[Yevgeny Kosarzhevsky via Dng]

Hi community.

could someone point out the proper way of avoiding systemd build dependency?

I find some packages require it at build time.
https://github.com/libreswan/libreswan/issues/328 for example.

It builds fine without it, however debian maintainers need it for their reasons.

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Support for missing packages

[Yevgeny Kosarzhevsky via Dng]

Hello,

how can one submit a package to devuan? It could be proposed-updates
or backports tree. Is there any manual? As far as I understand, there
should be some build environment which will make package for all
supported platform. How can one reach maintainer to try to build a
package and possibly include it in some distribution tree?

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] iptables at risk when uprgading?

[Yevgeny Kosarzhevsky via Dng]

Hello,
On Sun, 17 Nov 2019 at 00:54, Bernard Rosset via Dng  wrote:

> nftables keeps backwards-compatible tools allowing to load your saved
> rulesets from iptables.

nftables DOES NOT keep backward compatibility.
It doesn't for ebtables at least so I consider it doesn't for
iptables/arptables as well.
When I realized that, I removed nftables. I consider nftables harmful
for upgrades.

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Installing devuan on newer hardware

[Yevgeny Kosarzhevsky via Dng]

Hi,

> The first thing to try would be to boot the installer media into rescue
> mode and try reinstalling grub. Or chroot the installed system and run
> grub-install and update-grub.

There is no installed grub in this case so there is nothing to
re-install. There is no installed system to chroot to as well.

> If this is a uefi system, you might just need to replace
> grub-efi-amd64-signed with grub-efi-amd64 while you're in chroot. Remember
> to 'apt update' first.

Ok but I'd need to install something to chroot to. So this is not the case here.

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Installing devuan on newer hardware

[Yevgeny Kosarzhevsky via Dng]

Hi,

I am stuck here with installation on new ThinkPad P43s.
Ascii installer doesn't detect any network so I tried to install
debian buster and then change to beowulf. However, buster has
symlinked /bin and others to /usr so I need to reinstall from devuan
iso. The weird thing is that iwlwifi firmware files stated to run
under 4.14+ kernels so I can't run then in ascii installer.
Beowulf installer is missing, I tried mini.iso from
https://pkgmaster.devuan.org/devuan/dists/beowulf/main/installer-amd64/current/images/netboot/
but it isn't booting, bailing out to grub prompt.

Can someone suggest how would I proceed with devuan installation here?
Thanks!

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] openvpn beowulf package imssing

[Yevgeny Kosarzhevsky via Dng]

On Mon, 7 Oct 2019 at 12:25, Dimitris via Dng  wrote:
> seems to be there..:
> https://pkginfo.devuan.org/stage/beowulf/beowulf/openvpn_2.3.10-1+devuan1.html
> mirror package :
> https://pkgmaster.devuan.org/devuan/pool/main/o/openvpn/

This package isn't installable in beowulf as it's missing libssl1.0.2 dependency
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] openvpn beowulf package imssing

[Yevgeny Kosarzhevsky via Dng]

Hi,

I've been able to build up my own package from debian buster's source
removing libsystemd dependency. From my side it looks safe enough, as
all systemd-spesific lines in sources are marked with `#ifdef
SYSTEMD_ENABLE;` (or similar) So I am not sure why it's missing.
Perhaps there is issue with mipsel as showed in jenkins.

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] openvpn beowulf package imssing

[Yevgeny Kosarzhevsky via Dng]

Hi,


> seems to be there..:
>
> https://pkginfo.devuan.org/stage/beowulf/beowulf/openvpn_2.3.10-1+devuan1.html
>
> mirror package :
> https://pkgmaster.devuan.org/devuan/pool/main/o/openvpn/

sorry I thought it's from ascii as I have 2.4 from ascii backports.
So why there 2.3 version is in beowulf while buster's package is 2.4?

--
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] openvpn beowulf package imssing

[Yevgeny Kosarzhevsky via Dng]

Hello,

I wonder why openvpn is missing in beowulf

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] buster - ebtables discrepancy in auto mode

[Yevgeny Kosarzhevsky via Dng]

Sorry for the mess with paste in previous post.
The failing use case is the following:

~# update-alternatives --auto ebtables
update-alternatives: using /usr/sbin/ebtables-nft to provide
/usr/sbin/ebtables (ebtables) in auto mode
~# ebtables -N TEST
~# ebtables -P TEST DROP
Policy DROP not allowed for user defined chains.
~# ebtables -X TEST
~# update-alternatives --set ebtables /usr/sbin/ebtables-legacy
update-alternatives: using /usr/sbin/ebtables-legacy to provide
/usr/sbin/ebtables (ebtables) in manual mode
~# ebtables -N TEST
~# ebtables -P TEST DROP
~# ebtables -L TEST
Bridge table: filter

Bridge chain: TEST, entries: 0, policy: DROP

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] buster - ebtables discrepancy in auto mode

[Yevgeny Kosarzhevsky via Dng]

Hello,

I found that packet nftables recommended by iptables breaks ebtables
rules in auto mode as /usr/sbin/ebtables points now to
xtables-nft-multi

The one upgrading from ascii can lose control over remote system, as
the syntax is different. For example:

~# update-alternatives --auto ebtables
update-alternatives: using /usr/sbin/ebtables-nft to provide
/usr/sbin/ebtables (ebtables) in auto mode
~# ebtables -P TEST DROP
Policy DROP not allowed for user defined chains.
~# update-alternatives --set ebtables /usr/sbin/ebtables-legacy
update-alternatives: using /usr/sbin/ebtables-legacy to provide
/usr/sbin/ebtables (ebtables) in manual mode
~# ebtables -L TEST --Lx
ebtables -t filter -P TEST DROP

I don't know where exactly to file a bug, as xtables-nft-multi manual
page clearly states:

USAGE
   The xtables-nft tools allow you to manage the nf_tables backend
using the native syntax of iptables(8), ip6tables(8), arptables(8),
and ebtables(8).

   You should use the xtables-nft tools exactly the same way as
you would use the corresponding original tools.


`

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Firefox-esr freezes ASCII

[Yevgeny Kosarzhevsky via Dng]

On Tue, 9 Jul 2019 at 14:09, Edward Bartolo via Dng  wrote:

> To do normal browsing, I am using Waterfox which is Firefox without
> the late many 'cool' additions.

You can also try palemoon, I am using it for many things on devuan.

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] missing testing & ceres dists?

[Yevgeny Kosarzhevsky via Dng]

Hi,

it doesn't work here either.
Err:18 http://deb.devuan.org/merged ceres Release
  404  Not Found [IP: 200.236.31.1 80]

On Tue, 28 May 2019 at 01:54, Dimitris via Dng  wrote:
>
> On 5/27/19 8:41 PM, Alessandro Selli wrote:
> > mirror_url is not a valid fully-qualified domain name.
>
> "mirror_url" is actually a replaced devuan mirror url. used to work
> without change 2 days ago.
> had this error on official .onion repository today and tried other
> mirrors as well. the same.
> just tried again :
>
> # apt update && apt upgrade -y
>
> Ign:5 tor+http://devuanfwojg73k6r.onion/merged testing InRelease
>
> Ign:6 tor+http://devuanfwojg73k6r.onion/merged testing-updates InRelease
> Ign:7 tor+http://devuanfwojg73k6r.onion/merged testing-security InRelease
> Ign:8 tor+http://devuanfwojg73k6r.onion/merged ceres InRelease
> Get:9 tor+http://devuanfwojg73k6r.onion/devuan experimental InRelease
> [150 kB]
> Err:10 tor+http://devuanfwojg73k6r.onion/merged testing Release
>
>
>   404  Not Found [IP: 127.0.0.1 9050]
> Err:11 tor+http://devuanfwojg73k6r.onion/merged testing-updates Release
>
>
>   404  Not Found [IP: 127.0.0.1 9050]
> Err:12 tor+http://devuanfwojg73k6r.onion/merged testing-security Release
>
>
>   404  Not Found [IP: 127.0.0.1 9050]
> Err:13 tor+http://devuanfwojg73k6r.onion/merged ceres Release
>
>
>   404  Not Found [IP: 127.0.0.1 9050]
> Reading package lists... Done
>
>
> E: The repository 'tor+http://devuanfwojg73k6r.onion/merged testing
> Release' does not have a Release file.
> N: Updating from such a repository can't be done securely, and is
> therefore disabled by default.
> N: See apt-secure(8) manpage for repository creation and user
> configuration details.
> E: The repository 'tor+http://devuanfwojg73k6r.onion/merged
> testing-updates Release' does not have a Release file.
> N: Updating from such a repository can't be done securely, and is
> therefore disabled by default.
> N: See apt-secure(8) manpage for repository creation and user
> configuration details.
> E: The repository 'tor+http://devuanfwojg73k6r.onion/merged
> testing-security Release' does not have a Release file.
> N: Updating from such a repository can't be done securely, and is
> therefore disabled by default.
> N: See apt-secure(8) manpage for repository creation and user
> configuration details.
> E: The repository 'tor+http://devuanfwojg73k6r.onion/merged ceres
> Release' does not have a Release file.
> N: Updating from such a repository can't be done securely, and is
> therefore disabled by default.
> N: See apt-secure(8) manpage for repository creation and user
> configuration details.
>
>
> is testing or ceres `apt update` working for others?
>
> d.
>
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng



-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Contents file generation

[Yevgeny Kosarzhevsky via Dng]

Hello,

could anyone suggest proper way to generate Contents file for local repository?

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] aptitude and changelogs

[Yevgeny Kosarzhevsky via Dng]

Hello,

is there an existing solution to allow aptitude show package changelogs?

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] /usr to merge or not to merge... that is the question??

[Yevgeny Kosarzhevsky]

Hi,

On Fri, 16 Nov 2018 at 12:11, Daniel Reurich 
wrote:

> Hi Devuan followers, fans and friends,
>
> Debian as of the upcoming Buster release looks to be implementing a
> merged /usr by default.  At this stage there is no plan to make it
> forced... but you never know what happens when their Technical Committee
>  suddenly decides it's an issue they need to force a decision on...
>
> So... for Devuan, do we want to default to a merged /usr in our coming
> release of Beowulf or are we going to resist another pointless
> rearranging of the deck chairs...
>
> Keen to get some feedback on this
>

I would vote for separate /usr as this is useful for diskless boot which
will allow mounting /usr later from NFS storage, for example.

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] KDE on ascii?

[Yevgeny Kosarzhevsky]

Hello,

did anyone manage to run KDE on ascii? I was trying to install it on
virtualbox and it fails to run correctly - the display does not get
rendered after login to KDE. It loads initial screen, then the desktop and
then it freezes while some elements get disappeared.
I have tried to update to ceres and got the same result. Since there are no
errors reported, I am feeling puzzled how to troubleshoot this.
Can anyone help?

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] elogind testing for experimental and ascii-proposed

[Yevgeny Kosarzhevsky]

Hi all,

I am trying consolekit2 and getting screen locked with KDE on ascii.
To unlock it needs loginctl unlock-sessions ut I cannot find it in my
system.
Does anyone know how to fix that?

On 20 January 2018 at 19:28, KatolaZ  wrote:

> On Sat, Jan 20, 2018 at 11:46:33AM +0100, Andreas Messer wrote:
>
> [cut]
>
> >
> > So my oppinion is, that, at least for transition or migration purposes
> > we need to provide two paths in devuan, the user needs to choose one of
> them
> >
> > - consolekit(2) + policykit
> > - elogind + policykit-logind
> >
>
> Dear Andreas,
>
> I respectfully disagree on that point. Devuan should always allow a
> third option, that is:
>
>  - none of the above
>
> and a fourth option, that is:
>
>  - mix and match, at your own risk
>
> This is an attitude that we can't relinquish, whatever the cost. It's
> at the very heart of Devuan. Not all Devuan users want to have a fully
> "featured" desktop, and they must retain the possibility of *not*
> having any of that cruft in their systems (yes, I normally consider
> that stuff *cruft* in my systems, and I am definitely one of those
> choosing "none of the above"). Many Devuan users are natural
> tinkerers, to whom experimenting is at the heart of their GNU/Linux
> experience. Many more are server users, and don't give a toss to the
> elogind + policycit + consolekit clusterfuck anyway.
>
> Being a universal operating system is about allowing users to choose
> what to use and what to discard, avoiding unnecessary
> entanglement. That's why we are here.
>
>
> > Generally i would like to see get rid of all systemd originating software
> > monoliths. So what i could imagine:
> >
> > - Create a logind replacement which redirects all dbus queries to
> consolekit
> >   and let consolekit doe the session management. dbus queries for which
> no
> >   consolekit stuff exists (e.g. shutdown/reboot...) could be simply fan
> out
> >   into an external command, e.g. shell script. Its up to the
> >   administrator/maintainer whats happens then. Using this we can have
> consolekit
> >   and logind api at the same time while not struggling with two session
> >   management systems.
> >
> > - Create a minimal logind replacement which uses unix commands as
> thought of
> >   by Adam. This can be used by people who want install DEs requiring
> logind
> >   but dont want ck or logind to be installed
> >
> > If this is possible, every one can choose what he like and what fits
> > her/his needs. That is the spirit of linux.
> >
>
> To create something we need creators. Personally, I am not interested
> in desktop-things (it should be very clear by now :P), so I don't see
> myself actively working to develop replacements for those components.
>
> I am otherwise interested in experimenting with different possible
> alternatives for device management (mdev/smdev?), init systems
> (sinit?), and process management (perp?), and in possibly making them
> available in Devuan for those who like minimalism. That's my personal
> goal for after ascii will be out.
>
> Developing a universal operating system is about me and you working at
> the same distribution, with goals as different as a microminimal
> shell-only system and a full-featured gorgeous desktop environment,
> and still not noticing any inconsistency.
>
> My2Cents
>
> KatolaZ
>
> --
> [ ~.,_  Enzo Nicosia aka KatolaZ - Devuan -- Freaknet Medialab  ]
> [ "+.  katolaz [at] freaknet.org --- katolaz [at] yahoo.it  ]
> [   @)   http://kalos.mine.nu ---  Devuan GNU + Linux User  ]
> [ @@)  http://maths.qmul.ac.uk/~vnicosia --  GPG: 0B5F062F  ]
> [ (@@@)  Twitter: @KatolaZ - skype: katolaz -- github: KatolaZ  ]
>
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
>
>


-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Recent microcode update caused system failure

[Yevgeny Kosarzhevsky]

Hello,

I have updated system today and 3.20180108.1 ->
3.20180108.1+really20171117.1 and it caused following issue with my hard
drive.
These messages were appearing every few seconds and after a while the
system has been hung.
I have rolled back intel-microcode and iucode-tool to previous versions and
it is back to normal now.

Feb  4 07:42:42 warp kernel: [214738.356801] ata2: SATA link up 6.0 Gbps
(SStatus 133 SControl 300)
Feb  4 07:42:42 warp kernel: [214738.358870] ata2.00: ACPI cmd
ef/02:00:00:00:00:a0 (SET FEATURES) succeeded
Feb  4 07:42:42 warp kernel: [214738.358894] ata2.00: ACPI cmd
f5/00:00:00:00:00:a0 (SECURITY FREEZE LOCK) filtered out
Feb  4 07:42:42 warp kernel: [214738.359001] ata2.00: ACPI cmd
ef/10:09:00:00:00:a0 (SET FEATURES) succeeded
Feb  4 07:42:42 warp kernel: [214738.359535] ata2.00: supports DRM
functions and may not be fully accessible
Feb  4 07:42:42 warp kernel: [214738.363342] ata2.00: ACPI cmd
ef/02:00:00:00:00:a0 (SET FEATURES) succeeded
Feb  4 07:42:42 warp kernel: [214738.363354] ata2.00: ACPI cmd
f5/00:00:00:00:00:a0 (SECURITY FREEZE LOCK) filtered out
Feb  4 07:42:42 warp kernel: [214738.363415] ata2.00: ACPI cmd
ef/10:09:00:00:00:a0 (SET FEATURES) succeeded
Feb  4 07:42:42 warp kernel: [214738.363640] ata2.00: supports DRM
functions and may not be fully accessible
Feb  4 07:42:42 warp kernel: [214738.365653] ata2.00: configured for
UDMA/133
Feb  4 07:42:49 warp kernel: [214746.073043] ata2: SATA link up 6.0 Gbps
(SStatus 133 SControl 300)
Feb  4 07:42:49 warp kernel: [214746.075254] ata2.00: ACPI cmd
ef/02:00:00:00:00:a0 (SET FEATURES) succeeded
Feb  4 07:42:49 warp kernel: [214746.075267] ata2.00: ACPI cmd
f5/00:00:00:00:00:a0 (SECURITY FREEZE LOCK) filtered out
Feb  4 07:42:49 warp kernel: [214746.075358] ata2.00: ACPI cmd
ef/10:09:00:00:00:a0 (SET FEATURES) succeeded
Feb  4 07:42:49 warp kernel: [214746.075723] ata2.00: supports DRM
functions and may not be fully accessible
Feb  4 07:42:49 warp kernel: [214746.080428] ata2.00: ACPI cmd
ef/02:00:00:00:00:a0 (SET FEATURES) succeeded
Feb  4 07:42:49 warp kernel: [214746.080441] ata2.00: ACPI cmd
f5/00:00:00:00:00:a0 (SECURITY FREEZE LOCK) filtered out
Feb  4 07:42:49 warp kernel: [214746.080509] ata2.00: ACPI cmd
ef/10:09:00:00:00:a0 (SET FEATURES) succeeded
Feb  4 07:42:49 warp kernel: [214746.080764] ata2.00: supports DRM
functions and may not be fully accessible
Feb  4 07:42:49 warp kernel: [214746.083150] ata2.00: configured for
UDMA/133
Feb  4 07:43:02 warp kernel: [214758.269598] ata2: SATA link up 6.0 Gbps
(SStatus 133 SControl 300)
Feb  4 07:43:02 warp kernel: [214758.271827] ata2.00: ACPI cmd
ef/02:00:00:00:00:a0 (SET FEATURES) succeeded
Feb  4 07:43:02 warp kernel: [214758.271841] ata2.00: ACPI cmd
f5/00:00:00:00:00:a0 (SECURITY FREEZE LOCK) filtered out
Feb  4 07:43:02 warp kernel: [214758.271980] ata2.00: ACPI cmd
ef/10:09:00:00:00:a0 (SET FEATURES) succeeded
Feb  4 07:43:02 warp kernel: [214758.272326] ata2.00: supports DRM
functions and may not be fully accessible
Feb  4 07:43:02 warp kernel: [214758.275705] ata2.00: ACPI cmd
ef/02:00:00:00:00:a0 (SET FEATURES) succeeded
Feb  4 07:43:02 warp kernel: [214758.275718] ata2.00: ACPI cmd
f5/00:00:00:00:00:a0 (SECURITY FREEZE LOCK) filtered out
Feb  4 07:43:02 warp kernel: [214758.275842] ata2.00: ACPI cmd
ef/10:09:00:00:00:a0 (SET FEATURES) succeeded
Feb  4 07:43:02 warp kernel: [214758.276117] ata2.00: supports DRM
functions and may not be fully accessible
Feb  4 07:43:02 warp kernel: [214758.279809] ata2.00: configured for
UDMA/133
Feb  4 07:43:16 warp kernel: [214772.364664] ata2: SATA link up 6.0 Gbps
(SStatus 133 SControl 300)
Feb  4 07:43:16 warp kernel: [214772.366932] ata2.00: ACPI cmd
ef/02:00:00:00:00:a0 (SET FEATURES) succeeded
Feb  4 07:43:16 warp kernel: [214772.366946] ata2.00: ACPI cmd
f5/00:00:00:00:00:a0 (SECURITY FREEZE LOCK) filtered out
Feb  4 07:43:16 warp kernel: [214772.367044] ata2.00: ACPI cmd
ef/10:09:00:00:00:a0 (SET FEATURES) succeeded
Feb  4 07:43:16 warp kernel: [214772.367408] ata2.00: supports DRM
functions and may not be fully accessible
Feb  4 07:43:16 warp kernel: [214772.370783] ata2.00: ACPI cmd
ef/02:00:00:00:00:a0 (SET FEATURES) succeeded
Feb  4 07:43:16 warp kernel: [214772.370795] ata2.00: ACPI cmd
f5/00:00:00:00:00:a0 (SECURITY FREEZE LOCK) filtered out
Feb  4 07:43:16 warp kernel: [214772.370892] ata2.00: ACPI cmd
ef/10:09:00:00:00:a0 (SET FEATURES) succeeded
Feb  4 07:43:16 warp kernel: [214772.371489] ata2.00: supports DRM
functions and may not be fully accessible
Feb  4 07:43:16 warp kernel: [214772.373680] ata2.00: configured for
UDMA/133

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] repository clashes

[Yevgeny Kosarzhevsky]

Hello,

can someone provide me with proper and full repository list for ascii,
including proposed updates, security, updates and backports?
I am noticing some strange behavior with packages.devuan.org/devuan and
auto.mirror.devuan.org/merged - not all packages available in both repos so
I guess I need to have both enabled?
For example, some packages are available in the former while rsyslog with
its dependecies - only in the latter.

So what would be the proper and the complete repository list for ascii,
including contrib and non-free packages?

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Interface names changed after eudev installation

[Yevgeny Kosarzhevsky]

Hello,


I have run upgrade recently and got eudev installed.
After reboot I've got some weird names of interfaces: wlp4s0 and
wwp0s20f0u3i12 instead of wlan0 and wwan0.

How to change them back to normal?

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] NFS: was mounting /usr

[Yevgeny Kosarzhevsky]

On 6 December 2017 at 06:54, Alessandro Selli 
wrote:

>
> > Any good reason to refuse NFS in favor of those?
>
> In short: no. Just be aware that NFS is as secure as the trusted networks
> it
> sits on. Any inside compromised machine can jeopardize the whole
> distributed
> filesystem.
>

Ok but this is not about NFS but about any FS that can be accessed over
network.
I am not seeing any danger with NFS especially for /usr or some volatile
data storage used by several systems.
NFS is one of Linux base features and I am glad I found understanding of
it's importance from Devuan developers together with mountable /usr over
NFS.

As I understood, when someone says about NFS usage, most people get
thinking that the one is going to expose it in internet to any host.

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] NFS: was mounting /usr

[Yevgeny Kosarzhevsky]

On 5 December 2017 at 18:16, Arnt Gulbrandsen <a...@gulbrandsen.priv.no>
wrote:

> Yevgeny Kosarzhevsky writes:
>
>> I don't see that it will give lower security than any other FS in this
>> case.
>>
>
> Rick is trying to say: NFS has a poor reputation for accidental security
> misconfigurations. Something about the way NFS is configured leads even
> careful, clueful people to make configuration mistakes.
>
> NFS doesn't force you to make a mistake. Not at all. It just has a
> reputation for being a bit of a trouble magnet.
>
> Don't Xen and its friends offer read-only device exports from the host? So
> the the guest kernel can read a device from the host, but not modify it?
>

What is the reason to use it instead of NFS, especially if you run multiple
hardware units? It will also need special utilities and won't work without
some guest additions.
Any good reason to refuse NFS in favor of those?

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] NFS: was mounting /usr

[Yevgeny Kosarzhevsky]

On 5 December 2017 at 17:14, Rick Moen  wrote:

>
> By 'nougat security model', I meant a network security model that is
> fragile because of having no defence in depth, highly vulnerable in the
> interior and defended only at the borders.  This is a very widespread
> problem, e.g., at many corporations that have total faith in their
> firewalls and horribly dangerous practices behind it.
>

Thanks but you are talking about another case of NFS appliance which I did
not consider.
For me NFS is helpful in cluster environments where each machine is a
replica of another one and they share the same data.
I don't see that it will give lower security than any other FS in this case.
And the ability export /usr in r/o mode will give higher security than
local /usr mount.

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] NFS: was mounting /usr

[Yevgeny Kosarzhevsky]

On 5 December 2017 at 14:21, Rick Moen  wrote:

> Quoting Didier Kryn (k...@in2p3.fr):
>
> > the NFS connection across the world-wide Internet; it is always on a
> > LAN and, given this, I don't see how it can be insecure.
>   ^^
> Ah, the 'nougat' model of security;  hard on the exterior only, soft and
> easily digestible once you get inside.  Bon appetit!


I don't know what's a 'nougat' security model, however I don't understand
what you mean.
If you get in the system with local /usr you can write there with root
access.
How would you write to read-only /usr mount in the same case?
How NFS mount will make your system less secure?
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] eudev or vdev?

[Yevgeny Kosarzhevsky]

Hello,

could someone enlighten me about differences in eudev and vdev packages?
I don't know which one to choose :)

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] NFS: was mounting /usr

[Yevgeny Kosarzhevsky]

On 5 December 2017 at 03:30, Steve Litt  wrote:

>
> Are a lot of you using NFS? Do you feel safe doing so?
>

Yes it happens in trusted networks. I don't see any additional security
threat in this case.
I also use it in some multiple virtual machines setup to minimize hard
drive usage.
It's also can be considered as trusted environment.

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] mounting /usr

[Yevgeny Kosarzhevsky]

On 5 December 2017 at 04:17, Arnt Gulbrandsen 
wrote:

> k...@aspodata.se writes:
>
>> If you know any specific packages which breaks the "separate /usr" idea,
>> please report.
>>
>
> Libraries in these
>
> libgssapi-krb5-2
> libk5crypto3
> libkrb5-3
> libkrb5support0
>

I have rebuilt those above to install to /lib in ascii.
That was a quick fix and mount.nfs has worked correctly after that.
So I guess it's worthy to be reported to maintainer.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] mounting /usr

[Yevgeny Kosarzhevsky]

On 5 December 2017 at 01:13, J. Fahrner <j...@fahrner.name> wrote:

> Am 2017-12-04 17:54, schrieb Yevgeny Kosarzhevsky:
>
> "no_root_squash  Turn off root squashing. This option is mainly useful for
>> diskless clients."
>>
>
> NFS was never meant to be a filesystem for diskless workstations, so you
> cannnot expect to behave like one. Diskless workstations have also memory
> for the base system, they only *boot* over network. They don't use a
> network filesystem to replace local storage for the *system* itsself.
>
> You cannot expect from a unix system to mount each folder you like through
> a network filesystem. This is not a bug, it's a feature. ;-) The same as on
> windows systems, where you cannot expect to mount C:\windows\system32
> through cifs ;-)
>

Alright, this is your opinion and it is wrong.
It's possible to use NFS even for root partition, you can check
https://www.kernel.org/doc/Documentation/filesystems/nfs/nfsroot.txt
I did not say in my post that mounting /usr doesn't work for me. It works.
I only worrying that I cannot make it work without having certain libs in
/usr/lib. I believe that linking against them /sbin files is not good idea
and wondering if there are any steps in Devuan to avoid /usr/lib
dependencies for files that are stored in /sbin and /bin directories. That
seems a proper logic that files in /bin and /sbin depend only on libraries
stored in /lib directory.

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] mounting /usr

[Yevgeny Kosarzhevsky]

On 5 December 2017 at 00:43, J. Fahrner  wrote:

> Yes I need it for virtual machines so they won't store the same data.
>
> NFS is not the right protocol for such things. NFS is a *network* storage
> filesystem and behaves not like a local filesystem. Through NFS user root
> gets mapped to nobody on the remote system, otherwise NFS would be a big
> security risc.
>

Find out 'no_root_squash' option. From 'man exports':
"no_root_squash  Turn off root squashing. This option is mainly useful for
diskless clients."

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] mounting /usr

[Yevgeny Kosarzhevsky]

Hello,

I am unable to mount empty /usr on jessie. Is there any workaround or
should I keep some files there?
Or is there any build for libgssapi-krb5-2 to keep its files in /lib?

~# ldd /sbin/mount.nfs|grep usr
libgssapi_krb5.so.2 =>
/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2 (0x7fa814c44000)
libkrb5.so.3 => /usr/lib/x86_64-linux-gnu/libkrb5.so.3
(0x7fa81497)
libk5crypto.so.3 => /usr/lib/x86_64-linux-gnu/libk5crypto.so.3
(0x7fa81473f000)
libkrb5support.so.0 =>
/usr/lib/x86_64-linux-gnu/libkrb5support.so.0 (0x7fa813a92000)


-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Upgrade to ascii not possible?

[Yevgeny Kosarzhevsky]

You are right, it looks like mirrors aren't updated.
When I replaced auto.mirror.devuan.org/merged/ with
packages.devuan.org/devuan/, the upgrade has worked, however I've gotten
300+ orphaned packages.

On 13 October 2017 at 00:28, fsmithred <fsmith...@gmail.com> wrote:

> On 10/12/2017 11:51 AM, Yevgeny Kosarzhevsky wrote:
> > On 12 October 2017 at 23:37, Antony Stone <
> > antony.st...@devuan.open.source.it> wrote:
> >
> >>
> >>> I am trying to upgrade from devuan jessie and get unresolved deps for
> >>> rsyslog. aptitude shows: depends on init-system-helpers >= 1.47~
> >>> (UNAVAILABLE)
>
> Svante says 1.48+devuan2.0 is in ascii today, but I'm still not seeing it.
> I do see 1.47+devuan1.0 in ceres. That might work. Or wait until 1.48
> shows up.
>
> fsmithred
>
>
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
>



-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Upgrade to ascii not possible?

[Yevgeny Kosarzhevsky]

On 12 October 2017 at 23:37, Antony Stone <
antony.st...@devuan.open.source.it> wrote:

>
> > I am trying to upgrade from devuan jessie and get unresolved deps for
> > rsyslog. aptitude shows: depends on init-system-helpers >= 1.47~
> > (UNAVAILABLE)
>
> What do you get for each of:
>
> aptitude search init-system-helpers
>

~# aptitude search init-system-helpers
i
init-system-helpers
- helper tools for all init systems


> apt-cache policy init-system-helpers
>

~# apt-cache policy init-system-helpers
init-system-helpers:
  Installed: 1.46+devuan1.0
  Candidate: 1.46+devuan1.0
  Version table:
 *** 1.46+devuan1.0 500
500 http://auto.mirror.devuan.org/merged ascii/main amd64 Packages
100 /var/lib/dpkg/status



>
> ?
>
> Antony.
>
> > On 12 October 2017 at 21:01, Svante Signell wrote:
> > > On Thu, 2017-10-12 at 08:47 -0400, fsmithred wrote:
> > > > On 10/11/2017 08:15 PM, Yevgeny Kosarzhevsky wrote:
> > > > > Hello,
> > > > >
> > > > > I've stuck on upgrading to ascii as there is no init-system-helpers
> > > > > available.
> > > > > Is there any solution?
> > > >
> > > > I see it in ascii main repo. What error message are you getting?
> > > >
> > > > 1.46+devuan1.0 0
> > > > 100 http://auto.mirror.devuan.org/merged/ ascii/main amd64 Packages
> > >
> > > The latest version is really 1.48+devuan2.0 as of today.
>
> --
> This is not a rehearsal.
> This is Real Life.
>
>Please reply to the
> list;
>  please *don't* CC
> me.
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
>



-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Upgrade to ascii not possible?

[Yevgeny Kosarzhevsky]

Hello,

I am trying to upgrade from devuan jessie and get unresolved deps for
rsyslog. aptitude shows: depends on init-system-helpers >= 1.47~
(UNAVAILABLE)

On 12 October 2017 at 21:01, Svante Signell <svante.sign...@gmail.com>
wrote:

> On Thu, 2017-10-12 at 08:47 -0400, fsmithred wrote:
> > On 10/11/2017 08:15 PM, Yevgeny Kosarzhevsky wrote:
> > > Hello,
> > >
> > > I've stuck on upgrading to ascii as there is no init-system-helpers
> > > available.
> > > Is there any solution?
> > >
> >
> > I see it in ascii main repo. What error message are you getting?
> >
> > 1.46+devuan1.0 0
> > 100 http://auto.mirror.devuan.org/merged/ ascii/main amd64 Packages
>
> The latest version is really 1.48+devuan2.0 as of today.
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
>



-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Upgrade to ascii not possible?

[Yevgeny Kosarzhevsky]

Hello,

I've stuck on upgrading to ascii as there is no init-system-helpers
available.
Is there any solution?

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] apt-file doesn't work (ascii/ceres)

[Yevgeny Kosarzhevsky]

Hello,

I find that apt-file is not showing any results for ascii/ceres repos.

~# apt-file update
Ign:1 http://dl.google.com/linux/chrome/deb stable
InRelease

Hit:2 http://packages.devuan.org/merged jessie
InRelease

Hit:3 http://auto.mirror.devuan.org/merged jessie-backports
InRelease

Hit:4 http://dl.google.com/linux/chrome/deb stable
Release

Hit:5 http://packages.devuan.org/merged jessie-updates
InRelease

Hit:6 http://auto.mirror.devuan.org/merged jessie-proposed-updates
InRelease

Hit:8 http://packages.devuan.org/merged ascii
InRelease

Hit:9 http://packages.devuan.org/merged ascii-updates
InRelease

Hit:10 http://packages.devuan.org/merged ceres
InRelease

Hit:11 https://dl.ring.cx/ring-nightly/debian_9 ring
InRelease
Hit:12 https://pkg.tox.chat/debian nightly
InRelease
Ign:13 http://ftp.debian.org/debian wheezy InRelease
Hit:14 http://ftp.debian.org/debian wheezy
Release
Ign:16
http://download.opensuse.org/repositories/home:/stevenpusser/Debian_8.0
InRelease
Hit:17
http://download.opensuse.org/repositories/home:/stevenpusser/Debian_8.0
Release
Reading package lists... Done
Building dependency tree
Reading state information... Done
2 packages can be upgraded. Run 'apt list --upgradable' to see them.
~# apt-file search evemu*
~# apt-file search evemu-record
~# apt-file search `which evemu-record`
~# apt-cache search evemu-tools
evemu-tools - Linux Input Event Device Emulation Library - test tools

Is there anything I am missing at my end or is it a known issue?

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] WICD & DNS & IPv6

[Yevgeny Kosarzhevsky]

Hello,

which connection manager can also work with 3/4g equipment?

On 20 July 2017 at 16:24, Antony Stone 
wrote:

> On Thursday 20 July 2017 at 07:18:34, Joachim Fahrner wrote:
>
> > Am 2017-07-19 22:21, schrieb Antony Stone:
> > > Also, "some network problems" is not a very helpful bug report :)
> > >
> > > If you're going to say that something doesn't work properly, please at
> > > least say *how* it doesn't work properly...
> >
> > I'm sorry, but I did not have the time to investigate this further.
> > There were intermittent connectivity problems. Since they never happened
> > with wicd, the easiest way was to switch back to wicd. Intermittent
> > connectivity problems are extremely difficult to analyze, because you
> > cannot reproduce them on demand. So how would you describe them for a
> > bug report?
>
> Well, "intermittent connectivity" is a good start :)
>
> "Some network problems" could mean anything - connectivity, latency,
> bandwidth, CPU usage, changing IP addresses... the list goes on.
>
> Any detail at all is better than no detail.
>
>
> Antony.
>
> --
> "this restriction will not apply in the event of the occurrence (certified
> by
> the United States Centers for Disease Control or successor body) of a
> widespread viral infection transmitted via bites or contact with bodily
> fluids
> that causes human corpses to reanimate and seek to consume living human
> flesh,
> blood, brain or nerve tissue and is likely to result in the fall of
> organized
> civilization."
>
>  - https://aws.amazon.com/service-terms/ paragraph 57.10
>
>Please reply to the
> list;
>  please *don't* CC
> me.
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
>



-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] udev replacement

[Yevgeny Kosarzhevsky]

Thanks! Looks like I've missed this repo :)

On 17 July 2017 at 17:53, KatolaZ <kato...@freaknet.org> wrote:

> On Mon, Jul 17, 2017 at 05:46:26PM +0800, Yevgeny Kosarzhevsky wrote:
> > Hi,
> >
> > thanks for response.
> > Do you know repositories where to get them (vdev/eudev)? I am not finding
> > both in any of devuan repos.
> >
>
> Hi,
>
> both vdev abd eudev are in experimental:
>
>   deb http://packages.devuan.org/devuan/ experimental main
>
> HTH
>
> KatolaZ
>
> --
> [ ~.,_  Enzo Nicosia aka KatolaZ - GLUGCT -- Freaknet Medialab  ]
> [ "+.  katolaz [at] freaknet.org --- katolaz [at] yahoo.it  ]
> [   @)   http://kalos.mine.nu ---  Devuan GNU + Linux User  ]
> [ @@)  http://maths.qmul.ac.uk/~vnicosia --  GPG: 0B5F062F  ]
> [ (@@@)  Twitter: @KatolaZ - skype: katolaz -- github: KatolaZ  ]
>
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
>
>


-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] udev replacement

[Yevgeny Kosarzhevsky]

Hi,

thanks for response.
Do you know repositories where to get them (vdev/eudev)? I am not finding
both in any of devuan repos.

On 17 July 2017 at 17:44, Arnt Karlsen  wrote:

> On Mon, 17 Jul 2017 17:23:14 +0800, Yevgeny wrote in message
> :
>
> > Hello everyone,
> >
> > I have just subscribed recently.
> > Could someone please enlighten me on the current udev replacement
> > status? I found there was vdev project but it looks abandoned (?)
> > Is there any other?
> >
>
> ..I'm on experimental vdev-0.1.2, upgraded from jessie vdev-0.1.1.
> We also have eudev.
>
> ..my understanding is much of the systemd-udev development is "just"
> obfuscation, to cover up systemd's true purpose and capabilities.
> My understanding comes from my experience with "banana republic"
> and Cold War politics.
>
> --
> ..med vennlig hilsen = with Kind Regards from Arnt Karlsen
> ...with a number of polar bear hunters in his ancestry...
>   Scenarios always come in sets of three:
>   best case, worst case, and just in case.
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
>



-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] udev replacement

[Yevgeny Kosarzhevsky]

Hello everyone,

I have just subscribed recently.
Could someone please enlighten me on the current udev replacement status?
I found there was vdev project but it looks abandoned (?)
Is there any other?

-- 
Regards,
Yevgeny
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng