[gentoo-user] Udev update and persistent net rules changes

2013-03-30 Thread Tanstaafl
Ok, just read the new news item and the linked udev-guide wiki page, and 
the only thing left that I'm unsure/concerned about now is the 
persistent net rules changes...


The very last line on the wiki page says:


4. Known problems

Stale 70-persistent-net.rules (or other network rules) in
/etc/udev/rules.d can prevent the predictable network naming from being
enabled. Both 70-persistent-net.rules and 70-persistent-cd.rules are
from the now deleted rule_generator


These 'stale' 70- rules are all I have right now (again I'm still on 
udev-171-r10), and while the wiki page doesn't say what to do with/about 
them, it seems to hint that I could leave these in place and... they 
would still work as they did previously (prevent the predictable network 
naming from being enabled)?


My system (8+ years old) has a Tyan motherboard (S2895) with dual Gb 
ethernet ports, with only one port currently used (but both are enabled 
in the BIOS so both are listed in my current rules file).


Contents of rules.d:

myhost : Sat Mar 30, 08:33:28 : ~
 # ls -al /etc/udev/rules.d
total 16
drwxr-xr-x 2 root root 4096 Feb 23 15:04 .
drwxr-xr-x 4 root root 4096 Feb 23 15:04 ..
-rw-r--r-- 1 root root 1187 Apr 11  2010 70-persistent-cd.rules
-rw-r--r-- 1 root root  492 Feb 23 15:04 70-persistent-net.rules
-rw-r--r-- 1 root root0 Feb 23 15:04 .keep_sys-fs_udev-0
myhost : Sat Mar 30, 08:33:29 : ~

Contents of 70-persistent-net.rules:


# This file was automatically generated by the /lib/udev/write_net_rules
# program, probably run by the persistent-net-generator.rules rules file.
#
# You can modify it, as long as you keep each rule on a single line.

# PCI device 0x10de:0x0057 (forcedeth)
SUBSYSTEM==net, DRIVERS==?*, ATTR{address}==00:e0:81:54:9c:8b, KERNEL==eth*, 
NAME=eth1

# PCI device 0x10de:0x0057 (forcedeth)
SUBSYSTEM==net, DRIVERS==?*, ATTR{address}==00:e0:81:54:9c:8a, KERNEL==eth*, 
NAME=eth0


So... after reading the new news item, am I right that all I need to do 
to make sure that my network comes up properly is... edit the 80-* 
rule(s) that are created after udev is updated to make sure the same 
adapters that were named eth0/1 are now named net0/1, and the kernel 
will now take care of naming net0/1 eth0/1?


Also, is it critical to remove (or at least rename) the old 70- rules 
*before* the update, or just be sure to do so before I reboot after the 
update?


Thanks - I'm sure I'm just being paranoid, but it has helped me to avoid 
lots of pain in the past with other major updates on this system over 
these last 8+ years.


(I'm not concerned about the cd rule because obviously that won't affect 
the system booting, so I can come back and fix this one later if needed)




[gentoo-user] udev-197 vs udev-200??

2013-03-30 Thread Tanstaafl

Ok, I don't understand this...

Why is it that when I comment out the package.mask entries for udev:

#=sys-fs/udev-181
#=virtual/udev-181

emerge -pvuND world shows updates to udev-197, with no mention of 
udev-200, but...


when I uncomment them:

=sys-fs/udev-181
=virtual/udev-181

emerge -pvuDN world shows updates to BOTH virtual/udev-197-r2 *and* 
udev-200, with strange Blockers referencing udev-186???



[ebuild U #] sys-fs/udev-200 [171-r10] USE=acl%* firmware-loader%* kmod%* 
openrc%* -doc% -gudev -hwdb -introspection -keymap (-selinux) -static-libs% 
(-action_modeswitch%) (-build%) (-debug%) (-edd%) (-extras%) (-floppy%) 
(-rule_generator%*) (-test%) 2,063 kB
[ebuild U #] virtual/udev-197-r2 [171] USE=kmod -gudev -hwdb -introspection 
-keymap (-selinux) -static-libs 0 kB
[ebuild  N~] sys-fs/udev-init-scripts-25  5 kB

...

[blocks B  ] sys-fs/udev-186 (sys-fs/udev-186 is blocking 
sys-fs/udev-init-scripts-25)
[blocks B  ] sys-apps/module-init-tools (sys-apps/module-init-tools is 
blocking sys-apps/kmod-12-r1)
[blocks B  ] sys-apps/kmod (sys-apps/kmod is blocking 
sys-apps/module-init-tools-3.16-r2)


followed by a whole bunch of new warnings:


!!! Multiple package instances within a single package slot have been pulled
!!! into the dependency graph, resulting in a slot conflict:

virtual/udev:0

  (virtual/udev-171::gentoo, installed) pulled in by
(no parents that aren't satisfied by other packages in this slot)

  (virtual/udev-197-r2::gentoo, ebuild scheduled for merge) pulled in by
=virtual/udev-197-r1 required by (sys-fs/udev-200::gentoo, ebuild 
scheduled for merge)
(and 2 more with the same problem)

sys-fs/udev:0

  (sys-fs/udev-171-r10::gentoo, installed) pulled in by
~sys-fs/udev-171[gudev?,hwdb?,introspection?,keymap?,selinux?] required by 
(virtual/udev-171::gentoo, installed)

  (sys-fs/udev-200::gentoo, ebuild scheduled for merge) pulled in by

=sys-fs/udev-197-r8[gudev?,hwdb?,introspection?,keymap?,kmod?,selinux?,static-libs?]
 required by (virtual/udev-197-r2::gentoo, ebuild scheduled for merge)


It may be possible to solve this problem by using package.mask to
prevent one of those packages from being selected. However, it is also
possible that conflicting dependencies exist such that they are
impossible to satisfy simultaneously.  If such a conflict exists in
the dependencies of two different packages, then those packages can
not be installed simultaneously.

For more information, see MASKED PACKAGES section in the emerge man
page or refer to the Gentoo Handbook.


The following keyword changes are necessary to proceed:
 (see package.accept_keywords in the portage(5) man page for more details)
# required by sys-fs/udev-200[openrc]
# required by virtual/udev-197-r2
# required by sys-apps/hwids-20130329[udev]
# required by @selected
# required by @world (argument)
=sys-fs/udev-init-scripts-25 ~amd64
# required by virtual/udev-197-r2
# required by sys-apps/hwids-20130329[udev]
# required by @selected
# required by @world (argument)
=sys-fs/udev-200 ~amd64

The following mask changes are necessary to proceed:
 (see package.unmask in the portage(5) man page for more details)
# required by sys-fs/udev-200
# required by @selected
# required by @world (argument)
# /etc/portage/package.mask:
#=dev-db/mariadb-5.2
#=dev-lang/php-5.4
=virtual/udev-197-r2
# required by virtual/udev-197-r2
# required by sys-apps/hwids-20130329[udev]
# required by @selected
# required by @world (argument)
# /etc/portage/package.mask:
#=dev-db/mariadb-5.2
#=dev-lang/php-5.4
=sys-fs/udev-200

NOTE: The --autounmask-keep-masks option will prevent emerge
  from creating package.unmask or ** keyword changes.



That seems bizarre...



Re: [Bulk] Re: [gentoo-user] How to prevent a dns amplification attack

2013-03-30 Thread Tanstaafl

On 2013-03-30 11:15 AM, Kevin Chadwick ma1l1i...@yahoo.co.uk wrote:

On Sat, 30 Mar 2013 15:53:29 +0100
Rene Rasmussen gen...@paranoidix.dk wrote:


There is also the possibility to use opendns.com
I've been using them for years, and have not had any trouble. I
started using them when my ISP decided to block some sites. And their
standard service is free :)



They also support dnscurve but I thought that in the case of non
existing domain lookups they do show adverts?


This can be disabled...

The biggest problem with using them (or google dns) is if you are 
running a mail server, you cannot use spamhaus or many other DNSBLs, 
because they don't work with these free DNS services:


http://www.spamhaus.org/faq/section/DNSBL%20Usage#261



Re: [gentoo-user] udev-197 vs udev-200??

2013-03-30 Thread Tanstaafl

On 2013-03-30 12:42 PM, Neil Bothwick n...@digimed.co.uk wrote:

On Sat, 30 Mar 2013 11:24:49 -0400, Tanstaafl wrote:


Why is it that when I comment out the package.mask entries for udev:

#=sys-fs/udev-181
#=virtual/udev-181

emerge -pvuND world shows updates to udev-197, with no mention of
udev-200, but...


Because you're running stable? Versions higher than 197-r8 are still in
testing.


Right... hence my question... why if I comment out those lines do I now 
see all of these other weird updates for udev-200?




Re: [gentoo-user] udev blocks systemd etc

2013-03-27 Thread Tanstaafl

Ok...

So, what is this all about?

Does all of this mean that udev is now going *completely* away, 
*totally* replaced by systemd?


If so, has there been any kind of formal announcement about this 
*anywhere*??



On 2013-03-27 6:32 AM, fantasticfears fantasticfe...@gmail.com wrote:

sys-kernel/dracut
​ still requires udev, please update it.

​And what to do with udev USE flag?​
​


On Tue, Mar 26, 2013 at 11:30 PM, Stefan G. Weichinger li...@xunil.at
mailto:li...@xunil.at wrote:

Am 26.03.2013 15:57, schrieb Mike Gilbert:
  apcupsd-3.14.10-r1 still installs its rules into  /lib/udev/rules.d
  ... the path is hard-coded in the ebuild (line 99).
 
  Thanks, I have just committed a fix for that.

Great, my next question would have been if I should file a bug ... not
needed anymore.

  Doesn't that removal of udev and systemd brings all mean that it
  is even harder to switch back to openrc now?
 
  Yes, it does. I think we are going to let udev and systemd settle
  down a bit before trying to address that issue.

Good choice, yes.

  Also, we have made a change that should prevent this udev breakage
  for anyone else upgrading systemd. I'm sorry that you were the guinea
  pig on this.
 
  https://bugs.gentoo.org/show_bug.cgi?id=463302

... and as so often I thought it might have been my mistake ;-)

Good to have it sorted out now.

Stefan




--
Regards,

Erick Frank / 管啸
fantasticfears





Re: [gentoo-user] udev blocks systemd etc

2013-03-27 Thread Tanstaafl

On 2013-03-27 10:33 AM, Michael Mol mike...@gmail.com wrote:

On 03/27/2013 10:25 AM, Tanstaafl wrote:

Ok...

So, what is this all about?

Does all of this mean that udev is now going*completely*  away,
*totally*  replaced by systemd?

If so, has there been any kind of formal announcement about this
*anywhere*??



Hold your horses.

The devs will work something out; systemd is not replacing the udev
package for all users. For the moment, it's just replacing the udev
package for users using systemd.


Thanks Michael, but that didn't *exactly* answer my question.

I thought that newer versions of udev are now *dependent* on systemd? 
Doesn't that mean that anyone who is using udev is also 'using' systemd?


So, again, my question is, is udev going to be going *completely* away 
in the future, being *totally replaced* by systemd? Or maybe better said 
asked as, will udev soon just be subsumed by systemd?


Even if this is a year or more away, I'd like to know...



[gentoo-user] kmod module-init-tools + udev-171-r10

2013-03-27 Thread Tanstaafl

Hi all,

Just a question...

Can I replace module-init-tools with kmod and stay with udev-171-r10 for 
the time being?


Asked another way - is kmod fully supported by older releases of udev 
like 171-r10?


Thanks



Re: [gentoo-user] udev blocks systemd etc

2013-03-27 Thread Tanstaafl

On 2013-03-27 3:43 PM, Kevin Chadwick ma1l1i...@yahoo.co.uk wrote:

The real drive behind systemd is enterprise cloud type computing for
Red Hat.


I'd be interested in hearing more on this...

Link(s) to online articles is fine...



Re: [gentoo-user] Re: udev blocks systemd etc

2013-03-27 Thread Tanstaafl

On 2013-03-27 4:41 PM, Michael Mol mike...@gmail.com wrote:

On 03/27/2013 04:00 PM, Grant Edwards wrote:

On 2013-03-27, Kevin Chadwickma1l1i...@yahoo.co.uk  wrote:

The real drive behind systemd is enterprise cloud type computing for
Red Hat. The rest is snake oil and much of the features already exist
without systemd. With more snake oil of promises of faster boot up on a
portion of the code which is already fast and gains you maybe two
seconds.



I'm not trying to fan the flames: I'm genuinely confused...

I just don't get the whole parallel startup for faster boot thing.
Most of my machines just don't boot up often enough for a few seconds
or even tens of seconds to matter at all.



With cloud-based computing, you don't have a bunch of servers running,
waiting to received requests.

Instead, you have is a bunch of idle hardware, waiting to have pre-built
system images spun up on them on-demand.

The faster those pre-built images can spin up, the faster they can serve
requests.


Ok, well, that actually makes perfect sense (and answers my question 
about why Redhat is interested in and pushing it).




Re: [gentoo-user] I guess it is time to update udev from 171-r10 to 197-r8...

2013-03-19 Thread Tanstaafl

On 2013-03-18 7:15 AM, Tanstaafl tansta...@libertytrek.org wrote:

The above reference to 'might need packages like sys-apps/kbd', which is
now *required* by udev, suggests that now I again do need an initramsf?


That was silly - I saw kbd and read it as kmod... ok, this one is no 
problem either...


One new concern - I just confirmed that I do *not* have CONFIG_DEVTMPFS 
enabled in my current running kernel. I also am running an older kernel 
that is no longer in portage (I know, I know), so I want to recompile my 
existing kernel and get it booting with the new/updated u dev before 
upgrading it (will do that immediately once the udev update is done).


I've never recompiled and replaced a running kernel before, so...

I'm just going to recompile it with everything enabled, copy the new 
kernel over to /boot with a slightly different name, then reboot to the 
new kernel.


But looking at:

http://www.gentoo.org/doc/en/handbook/handbook-x86.xml?part=1chap=7

It says to enable the following:

Device Drivers ---
  Generic Driver Options ---
[*] Maintain a devtmpfs filesystem to mount at /dev
[ ]   Automount devtmpfs at /dev, after the kernel mounted the rootfs
...
File systems ---
(Select one or more of the following options as needed by your system)
...
  Pseudo Filesystems ---
[*] /proc file system support
[*] Virtual memory file system support (former shm fs)
(In my current kernel the option is 'Tmpfs virtual memory file system 
support (former shm fs)

...
(Enable GPT partition label support if you used that previously)
-*- Enable the block layer ---
...
Partition Types ---
[*] Advanced partition selection
  ...
  [*] EFI GUID Partition support

Now, when exiting menuconfig I get the following warnings:

 # make menuconfig
scripts/kconfig/mconf Kconfig
warning: (HAVE_TEXT_POKE_SMP) selects STOP_MACHINE which has unmet 
direct dependencies (SMP  MODULE_UNLOAD || HOTPLUG_CPU)
warning: (HAVE_TEXT_POKE_SMP) selects STOP_MACHINE which has unmet 
direct dependencies (SMP  MODULE_UNLOAD || HOTPLUG_CPU)

#
# configuration written to .config

Is this something I need to fix?

Lastly, doing the actual updates once I have a supported kernel ready...

Neil suggested just unmerging module-init-tools and then letting emerge 
world install kmod, but I like doing things in smaller steps. An emerge 
world wants to update a number of other non udev related things (like 
apache), so what I'd like to do is get udev updated first, reboot, then 
finish updating world, so what I'm thinking of doing (after fixing my 
kernel issue) is:


emerge -C module-init-tools  emerge -1 kmod
then
emerge -C sysvinit  emerge -1 util-linux
then
emerge -vuDN udev
reboot
emerge -vuDN world

My question is, is the above any 'safer' than just doing:

emerge -C module-init-tools  emerge -C sysvinit  emerge -vuDN udev
reboot

?

Thanks



Re: [gentoo-user] Re: I guess it is time to update udev from 171-r10 to 197-r8...

2013-03-18 Thread Tanstaafl

On 2013-03-18 4:18 AM,  (Nuno Silva) nunojsi...@ist.utl.pt wrote:

On 2013-03-17, Tanstaafl wrote:

Ah, ok... but as for the rest... I should be able to safely upgrade
udev, with a reasonable (I know there are no guarantees) expectation
of everything 'just working' (ie, my lvm managed /usr partition
shouldn't be an issue like it would have been earlier on in this
process)?



From what I know (no LVM experience here), if you had it working with
171, it will work with a newer udev. There were no changes regarding how
stuff from /usr is used between 171 and the newer udevs.


Well, there were 'big scary warnings'(tm) a while back that screamed of 
major breakage with the newer udevs for those poor lost souls who had 
/usr on a separate partiton (lvm managed or not), then, at some later 
point, I guess because of the 'wailing and gnashing of teeth'(tm), the 
devs relented and changed things so that a separate /usr was supported 
except under certain specific circumstances... but since I'm not a 
programmer, I didn't (and still don't) understand most of it, hence my 
asking for confirmation here...


My system is fairly simple, all local storage, with only /usr, /var and 
/home on separate lvm managed partitions (root is *not* on lvm)...


So, I'm here asking if anyone who had waited (masked everything above 
171) has unmasked it and updated since, and whether or not they had any 
problems booting afterwards...


Thanks,

Charles



Re: [gentoo-user] I guess it is time to update udev from 171-r10 to 197-r8...

2013-03-18 Thread Tanstaafl

Ok, spent a little time re-reading the old threads about this...

Just to confirm, changes I should make in my /etc/fstab...

snip normal fs lines
 # NOTE: The next line is critical for boot!
 none   /proc   procdefaults0 0

I can/should simply delete the above two lines?

then

 # glibc 2.2 and above expects tmpfs to be mounted at /dev/shm for
 # POSIX shared memory (shm_open, shm_unlink).
 # (tmpfs is a dynamically expandable/shrinkable ramdisk, and will
 #  use almost no memory if not populated with files)
 shm   /dev/shmtmpfsnodev,nosuid,noexec 0 0

I should change the above line to:

 tmpfs /dev/shmtmpfsnodev,nosuid,noexec 0 0

Combined with the other recommended changes:

 - Remove udev-postmount from runlevels.

 - Enable CONFIG_DEVTMPFS=y in the kernel;

I've also seen recommendation to enable:

CONFIG_DEVTMPFS_MOUNT=y ?

 need to verify the fstype for possible /dev line in /etc/fstab is
 devtmpfs (and not, for example, tmpfs)

I have no /dev line, and only one network adapter, so nothing to do here

 - The case of separate /usr; if it worked for you with 171 it will
   continue to work for you with 197 (or newer). We still recommend
   initramfs with separate /usr mounting capabilities because you
   might need packages like sys-apps/kbd (keymaps in /usr) or
   net-wireless/bluez (possible keyboard) in early boot.

Ok, this one is unclear...

My system is currently indeed (and always has been) booting fine with a 
separate /usr (on lvm)... but...


The above reference to 'might need packages like sys-apps/kbd', which is 
now *required* by udev, suggests that now I again do need an initramsf?


Thanks for ya'lls patience. I have a feeling this is going to be another 
non-event, but I'd much prefer a little pre-update pain than a lot of 
post-update pain... ;)




[gentoo-user] I guess it is time to update udev from 171-r10 to 197-r8...

2013-03-17 Thread Tanstaafl
Ok, I sync'd this morning, and now see the warning about udev 171-r10 
being masked, so I guess it is time..


I know this was discussed quite a bit a few months ago, but just to 
refresh my memory...


My question is, if I am currently running 171-r10 on my server, and I 
have a separate lvm managed /usr partition, is it now safe to comment 
out my udev masks and update udev, with a reasonable expectation that 
doing so won't break my boot ability?


Also, should I manually fix the blockers:


[blocks B  ] sys-apps/module-init-tools (sys-apps/module-init-tools is 
blocking sys-apps/kmod-12-r1)
[blocks B  ] sys-apps/kmod (sys-apps/kmod is blocking 
sys-apps/module-init-tools-3.16-r2)


by doing emerge -C module-init-tools  emerge kmod *before* upgrading 
udev? Or does it matter?


Thanks...



Re: [gentoo-user] I guess it is time to update udev from 171-r10 to 197-r8...

2013-03-17 Thread Tanstaafl

On 2013-03-17 2:17 PM, Neil Bothwick n...@digimed.co.uk wrote:

On Sun, 17 Mar 2013 13:46:39 -0400, Tanstaafl wrote:


Also, should I manually fix the blockers:


[blocks B  ] sys-apps/module-init-tools
(sys-apps/module-init-tools is blocking sys-apps/kmod-12-r1)
[blocks B  ] sys-apps/kmod (sys-apps/kmod is blocking
sys-apps/module-init-tools-3.16-r2)


by doing emerge -C module-init-tools  emerge kmod *before*
upgrading udev?


No, because that adds kmod to world. Just unmerge module-init-tools and
then emerge world, letting portage install what it needs


Ah, ok... but as for the rest... I should be able to safely upgrade 
udev, with a reasonable (I know there are no guarantees) expectation of 
everything 'just working' (ie, my lvm managed /usr partition shouldn't 
be an issue like it would have been earlier on in this process)?


Thanks Neil



[gentoo-user] rsnapshot - crontab?

2013-03-15 Thread Tanstaafl
Would anyone who is using rsnapshot be willing to share their crontab 
entries?


I'm especially interested in how best to test for the 
existence/availability of a remotely mounted filesystem, and run the 
backup if it exists and abort if it doesn't.


Thanks



Re: [gentoo-user] Re: rsnapshot - crontab?

2013-03-15 Thread Tanstaafl

On 2013-03-15 11:40 AM, Grant Edwards grant.b.edwa...@gmail.com wrote:

On 2013-03-15, Tanstaafl tansta...@libertytrek.org wrote:

I'm especially interested in how best to test for the
existence/availability of a remotely mounted filesystem, and run the
backup if it exists and abort if it doesn't.



 From /etc/rsnapshot.conf:

# If no_create_root is enabled, rsnapshot will not automatically create the
# snapshot_root directory. This is particularly useful if you are backing
# up to removable media, such as a FireWire or USB drive.
#
no_create_root  1


How did I miss that?

Thanks Grant.



[gentoo-user] Why does cyrus-sasl require courier-imap?

2013-02-23 Thread Tanstaafl
I switched to dovecot not too long ago, and I removed the authdaemond 
keyword from cyrus-sasl, but it still wants to pull in courier-imap.


I want to remove courier-imap completely, but I still may need postfix 
to be able to work as sasl client, which requires cyrus-sasl (since 
dovecot-sasl is server side only)...


So... am I stuck with keeping courier-imap around just so I can use 
cyrus-sasl?




Re: [gentoo-user] Why does cyrus-sasl require courier-imap?

2013-02-23 Thread Tanstaafl

Nevermind... gotta stop asking questions before my 2nd cup of coffee...

On 2013-02-23 9:19 AM, Tanstaafl tansta...@libertytrek.org wrote:

I switched to dovecot not too long ago, and I removed the authdaemond
keyword from cyrus-sasl, but it still wants to pull in courier-imap.

I want to remove courier-imap completely, but I still may need postfix
to be able to work as sasl client, which requires cyrus-sasl (since
dovecot-sasl is server side only)...

So... am I stuck with keeping courier-imap around just so I can use
cyrus-sasl?






[gentoo-user] traceroute not working

2013-02-22 Thread Tanstaafl

Hi all,

Weird, I don't use it much, but needed to run a traceroute today, and it 
is failing with:


 # traceroute 192.168.1.4
traceroute to 192.168.1.4 (192.168.1.4), 30 hops max, 60 byte packets
send: Operation not permitted

I know the problem is in my firewall, because when I stop it, 
traceroutes work as expected.


I have allowed all ICMP in my firewall:

Chain INPUT (policy DROP)
target prot opt source   destination
snip
ACCEPT icmp --  anywhere anywhere icmp any
snip

Chain FORWARD (policy DROP)
target prot opt source   destination
ACCEPT icmp --  anywhere anywhere icmp any

Chain OUTPUT (policy DROP)
target prot opt source   destination
snip
ACCEPT icmp --  anywhere anywhere icmp any

Any ideas what I'm missing?

I can send all of my firewall rules privately if someone thinks I may 
have something that is dropping these packets before my ALLOW rule kicks 
in, but I'm fairly sure I have them right...


Thanks



Re: [gentoo-user] traceroute not working

2013-02-22 Thread Tanstaafl

On 2013-02-22 12:18 PM, Mike Gilbert flop...@gentoo.org wrote:

Unix traceroute normally operates by sending UDP packets to
high-numbered ports with successively larger TTL values. You'll need
to make sure you are allowing outbound UDP traffic as well.


Thanks guys - I had forgotten about this (haven't used it in a while)...

I forgot that I had to specify -I to designate using ICMP protocol...

duh...

Sorry for the noise...

Now to pose the real question I have (the reason I needed to use 
traceroute in the first place) in a new thread...




Re: [gentoo-user] Re: Multiboot Live USB creatores - Was: Re: Re: Re: Re: Kaspersky Rescue Disk

2013-02-19 Thread Tanstaafl

On 2013-02-14 3:20 AM, Michael Sondow mson...@iciiu.org wrote:

Hi, Tanstaafl.

As soon as I get my set of anti-malware rescue disks set up (Kaspersky,
Trend Micro, AVG, and Bitdefender), for right now on four separate USB
flash drives (thereby wasting most of the space on the flash drives!),
I'm going to start experimenting with the multiboot USB creator
programs. If they work, they must be a far better way to do this. The
rescue disks use way under 1Gb, and my flash drives have 4Gb.

I'll report back here with whatever I find out.


I look forward to it...



Re: [gentoo-user] Delayed update semantics

2013-02-15 Thread Tanstaafl

On 2013-02-14 2:26 PM, James wirel...@tampabay.rr.com wrote:

So, my latest ideas is to sync up and then wait one week
before acutally installing those new packages. This would
allow the fodder that the good folks on this list catch,
bitch about (um, I mean file bug reports) and fix, to
occur first; then I can complete the package update
cautiously avoiding an emerge sync.


I do something similar, but on a rolling basis...

1. Sync daily, keeping track of what updates appear *and when*

2. Once a package that wants to be updated has been in the list for
   at least 3 days, I update it/them, although I will usually wait
   a little longer (week or two) for some things, like things that
   are critical to booting (like grub, udev, etc)

3. Rinse, repeat

I started doing it this way ever since I got bit by the mailman minor 
update that broke things horribly (moved where all of its files were 
located without any warning, news item, or anything - ugh), and it has 
served me well.


I do this manually, but I only have a couple of systems to manage. 
Obviously if you manage multiple systems, the more systems you manage, 
the more unwieldy doing this manually becomes, so scripting the process 
(or at least part of it) would become necessary at some point.




Multiboot Live USB creatores - Was: Re: [gentoo-user] Re: Re: Re: Kaspersky Rescue Disk

2013-02-13 Thread Tanstaafl

On 2013-02-13 4:20 AM, Michael Sondow mson...@iciiu.org wrote:

Yes, there seem to be a number of programs that will create a bootable
USB flash drive from a linux distro ISO, and also from some of the
rescue disk ISOs. Some of these utlities create persistence, but I'm
not sure what that means: just save data somewhere on the flash drive,
or actually integrate new data into the linux op sys?

I'm going to give them a try. Ditto for the multiboot live USB creators.
We'll see what persistence means for them.


I'm very interested in this topic. I've been wanting to create my own 
bootable USB3 Thumb drive that I've added my own bootable ISOs to, that 
gives me a menu for booting whichever one I want...


I'd be very interested in hearing everyone's take on which one is best, 
what is the easiest way to do this, and to keep it updated...


Thanks!



Re: [gentoo-user] Re: No server profile anymore???

2013-02-13 Thread Tanstaafl
On 2013-02-12 6:30 PM,  (Nuno Silva) nunojsi...@ist.utl.pt (Nuno 
Silva) wrote:

I have no doubts that devs have lots of work to do, but it's a rather
serious situation if the difference between unstable and stable land is
*not* used as an advantage when it comes to deal with situations like
this and udev's kernel requirements and network rules.

I guess a good rule of thumb would be: if a stabilization/profile change
or introduced error message will require users to change their settings
by hand, change their kernel config to match new requirements in order
to have an usable system or to treat some packages/flags in a different
way, this should not go forward until a news item has been prepared to
notify users about it.


Add with an appropriate bake-in time *after* the news item is released 
to provide time for stable users to digest and understand the 
implications, and for unstable users to thrash out any issues before 
pushing it s-to stable. before the period at the end of that last 
sentence and I agree wholeheartedly.


Question:

Is there a well defined 'bake-in' time for things like this?

If not, there should be.



Re: [gentoo-user] New USE flags for lvm2?

2013-02-11 Thread Tanstaafl

On 2013-02-10 3:43 PM, Neil Bothwick n...@digimed.co.uk wrote:

On Sun, 10 Feb 2013 15:40:00 -0500, Tanstaafl wrote:


Here's what IUSE says are enabled for the currently installed lvm2:

readline +static +static-libs clvm cman +lvm1 selinux


IUSE shows the flags that were available to that build, USE shows the
flags that were used.


Ah, thanks for that...

Ok, so the current one was installed with::

amd64 elibc_glibc kernel_linux lvm1 multilib readline static static-libs 
userland_GNU


And the update wants to install with:

USE=lvm1 readline thin%* udev%* (-clvm) (-cman) (-selinux) -static* 
-static-libs*


So, what is with the differences?

+ thin udev

Why is amd64, elibc_glibc, kernel_linux, multilib  userland_GNU not 
included?


and why omitting

- static, static-libs

?

Just trying to understand why the changes, and want to make sure lvm 
isn't going to end up failing on me the next reboot...


Thanks



[gentoo-user] New USE flags for lvm2?

2013-02-10 Thread Tanstaafl
I'm prepping for updating some things I've been putting off, and I 
noticed that lvm2 has some new use flags set, and I'm wondering why...


[ebuild U  ] sys-fs/lvm2-2.02.97-r1 [2.02.88] USE=lvm1 readline 
thin%* udev%* (-clvm) (-cman) (-selinux) -static* -static-libs* 1,166 kB


The two that are new/green (with asterisks) are -static and -static-libs...

I'm pretty sure that lvm2 was NOT built with either of these, but is 
there a way to to tell what USE flags were used for the currently 
installed package?




Re: [gentoo-user] New USE flags for lvm2?

2013-02-10 Thread Tanstaafl

On 2013-02-10 1:47 PM, Florian Philipp li...@binarywings.net wrote:

Am 10.02.2013 19:37, schrieb Tanstaafl:

I'm pretty sure that lvm2 was NOT built with either of these, but is
there a way to to tell what USE flags were used for the currently
installed package?



I guess you remember wrongly:
Symbol   LocationMeaning
*suffix  transition to or from the enabled state
%suffix  newly added or removed

Read /var/db/pkg/sys-fs/lvm2-2.02.88/IUSE to find out what was enabled.


Thanks Florian, yep, you're right...

So, the question becomes, why did these change? I do have /user on a 
separate LVM partition, so, is this something I should worry about?


Actually, a bit of googling suggests I shouldn't have had them enabled 
in the first place?


Thanks again



Re: [gentoo-user] New USE flags for lvm2?

2013-02-10 Thread Tanstaafl

On 2013-02-10 2:57 PM, Neil Bothwick n...@digimed.co.uk wrote:

On Sun, 10 Feb 2013 14:07:38 -0500, Tanstaafl wrote:


So, the question becomes, why did these change? I do have /user on a
separate LVM partition, so, is this something I should worry about?


The static use flag builds a separate lvm.static all-in-one binary
more suitable for use in an initramfs.


Thanks Neil...

Now that I'm looking at the USE flags that were used for the current 
install, I'm confused...


Here's what IUSE says are enabled for the currently installed lvm2:

readline +static +static-libs clvm cman +lvm1 selinux

But...

emerge output shows:

[ebuild U  ] sys-fs/lvm2-2.02.97-r1 [2.02.88] USE=lvm1 readline 
thin%* udev%* (-clvm) (-cman) (-selinux) -static* -static-libs* 1,166 kB


The only ones showing as changed (in green and with asterisks by them) 
are -static and -static-libs...


So, why do clvm, cman and selinux all show as not previously used 
according to emerge output (in blue, with a '-' in front of them?


Confusing...



Re: [gentoo-user] Creating accounts in Thunderbird

2013-02-07 Thread Tanstaafl

On 2013-02-03 9:08 AM, Alan McKinnon alan.mckin...@gmail.com wrote:

So what we have here is a piece of FOSS software that is too fucking
clever for it's own good. It's applying insane validation checks to
things that are not in any spec at all:


I never liked the auto-config behavior, but it isn't *that* bad...

You weren't clear on the exact steps you were taking...

Are you leaving the password field blank and the 'remember password'. 
checkbox unchecked? If you enter a password, it will absolutely try to 
verify it...


Also, I've never set up an account on localhost, but I know you can set 
up multiple accounts on the same hostname, so I don't see why you 
couldn't set up multiple accounts on just plain 'localhost'...






Re: [gentoo-user] udev-191 bit me. Insufficient ptys

2013-02-07 Thread Tanstaafl

On 2013-02-03 12:51 PM, Alex Schuster wo...@wonkology.org wrote:

The question is not whether to halt the build or not (that cannot and
will not be done) but how to do the communication:

- news item

There is one, from 2013-01-23, ending with 'Apologies if this news came
too late for you.'

Okay, if that one came a little earlier, I would have been fine.


Ok, I'm actually now toying with the idea of updating udev on my older 
server, since a separate /usr is now supported...


So, reading this news item:

snip


- The need of CONFIG_DEVTMPFS=y in the kernel; need to verify the
  fstype for possible /dev line in /etc/fstab is devtmpfs (and not,
  for example, tmpfs)


So, since I have:


shm/dev/shm tmpfs  nodev,nosuid,noexec 0 0


I change the type tmpfs to devtmpfs... ok...

Last...


And read every message printed by the emerge of udev and
udev-init-scripts to ensure the system is in order before booting as
this news item might not be complete.


All of these messages will be in the emailed emerge message(s), correct? 
Meaning, I won't have to be sitting there watching the emerge output?


Thanks...



Re: [gentoo-user] udev-191 bit me. Insufficient ptys

2013-02-07 Thread Tanstaafl

On 2013-02-07 12:53 PM, Peter Humphrey pe...@humphrey.ukfsn.org wrote:

On Thursday 07 February 2013 17:40:39 Tanstaafl wrote:


So, since I have:

shm/dev/shm tmpfs  nodev,nosuid,noexec 0 0


I change the type tmpfs to devtmpfs... ok...


I think that's a mistake (because I did it too!) - you only need to change
the tile type of a /dev line, not /dev/shm.


Oh... well, glad I asked...

Can anyone (a dev maybe) please confirm this?

I think that a lot of people will misread that like I (we) did...






Re: [gentoo-user] Creating accounts in Thunderbird

2013-02-07 Thread Tanstaafl

On 2013-02-07 3:28 PM, Alan McKinnon alan.mckin...@gmail.com wrote:

Enter a password, the wizard tries to validate it
Don't enter a password, the wizard prompts you for one
Get past that (using $MAGIC of course) it still tries to validate that
the server is up and something is running there.

The only way round that is to take the app offline whereupon it sensibly
doesn't try validate things that are online. This naturally will be
tagged as a bug as obviously the wizard should never even start whilst
offline /vicious biting sarcasm


Just fyi, I had no problem doing this:

1. Add Mail Account

2. Add Name and EMail address

3. Leave password blank, uncheck 'Remember password'

4. Hit Continue, then immediatley hit 'Manual Config'

5. Finish configging, being sure manually set anything set to 'Auto' (as 
this is telling Thunderbird to do it for you) - ie, the 
SSL/Port/Authenticiation settings. Leaving any of these set to Auto will 
keep the 'Done' button greyed out.


6. Click Done.


You can set up many accounts on localhost, but that's not what I said.
It's complaining about the combination of username and hostname that is
repeated.


If you mean, identical usernames and incoming hostnames, then yes, 
Thunderbird doesn't like that, and I'm honestly trying to think of a 
reason why you would want two identical accounts set up in the same 
client? What am I missing?



Which is silly, as username+hostname is not guaranteed to be a
singleton in any universe.


? I can't think of any way that username+incoming-hostname can result in 
anything other than a single, individual users account, so I guess I'm 
totally missing what you are saying.




Re: [gentoo-user] udev-191 bit me. Insufficient ptys

2013-02-07 Thread Tanstaafl

On 2013-02-07 4:25 PM, Paul Hartman paul.hartman+gen...@gmail.com wrote:

On Thu, Feb 7, 2013 at 2:53 PM, Tanstaafl tansta...@libertytrek.org wrote:

I think that a lot of people will misread that like I (we) did...



I believe he is correct and /dev/shm is irrelevant for this discussion.


Ok, thanks, but... and no offense...

I am not willing to gamble on breaking a remotely accessed server based 
on someone's 'I believe that this is correct' comment.


When the news item says:


need to verify the fstype for possible /dev line in /etc/fstab is

 devtmpfs (and not, for example, tmpfs)

'Possible /dev line' in no way is clear that it means a line that has 
ONLY /dev on it. /dev/shm - which is also of type tmpfs - can easily be 
read to be included.



The important thing to note is that entries for precisely /dev and
/proc


Mine has this in it:


# NOTE: The next line is critical for boot!
none/proc   procdefaults0 0


So, you're saying that this line, that is prefaced with a comment that 
says it is CRITICAL FOR BOOT, is not even needed?


This is a server that was initially installed back in 2005, so maybe 
this is cruft that is no longer needed?


Obviously I don't understand most of this stuff, so am at the mercy of 
those more knowledgeable.


Thanks,

Charles



Re: [gentoo-user] IPtables - Mangle table - when/why do I need it (or do I need it)?

2013-01-03 Thread Tanstaafl

On 2013-01-02 7:14 PM, Mick michaelkintz...@gmail.com wrote:

On Wednesday 02 Jan 2013 19:47:11 Tanstaafl wrote:

Oh, ok - so, if I don't have any rules that use the 'mangle' command,
then I can safely remove mangle support from my kernel and lose the
mangle table altogether?



Yes, I would think so.  You can build it as a module anyway and un/not load it
to see if iptables starts up without errors.


This is a server, so no modules support at all...

But no worries, I always keep my previous kernel when upgrading, so if 
something doesn't work right, I just reboot back to the previous one... 
it has saved me more than a few times...


Thanks again



Re: [gentoo-user] Ethernet Machination

2013-01-02 Thread Tanstaafl

On 2013-01-01 7:55 PM, Canek Peláez Valdés can...@gmail.com wrote:

On Tue, Jan 1, 2013 at 6:50 PM, James wirel...@tampabay.rr.com wrote:

So now that only one ethernet shows up, how do I prevent
udev from renaming eth0 to eth3?



Check /etc/udev/rules.d/70-persistent-net.rules. Probably the old
(fried) ethernet card is listed there (along with other stuff). Leave
out everything except your PCI card (the MAC address is how you tell
them appart).

Worst case, delete the file (after saving a copy), and see if udev
automagically solves everything by itself.


Also, be sure that you have completely disabled the integrated ethernet 
in the BIOS, otherwise gentoo/udev may still 'see' it even if it isn't 
working...




[gentoo-user] IPtables - Mangle table - when/why do I need it (or do I need it)?

2013-01-02 Thread Tanstaafl

Hi all,

This has been bugging me for a while...

I've googled, and can't seem to find a definitive answer to this question...

Lots of references to the Mangle table, but nothing that really explains 
what this table is or does, and when or why I would want/need it.


Currently, I have this in my rules (since forever, honestly don't even 
remember where it came from):


*mangle
:PREROUTING ACCEPT [1378800222:449528056411]
:INPUT ACCEPT [1363738727:447358082301]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1221121261:1103241097263]
:POSTROUTING ACCEPT [1221116979:1103240864155]
-A PREROUTING -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG 
FIN,PSH,URG -j DROP

-A PREROUTING -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -j DROP
-A PREROUTING -p tcp -m tcp --tcp-flags SYN,RST SYN,RST -j DROP
-A PREROUTING -p tcp -m tcp --tcp-flags FIN,SYN FIN,SYN -j DROP
COMMIT
# Completed on Sun Dec 11 14:11:01 2011

This is on a mail/web server with a static IP, it does not do any NAT 
and does not act as a perimeter firewall, it only protects itself...


Thanks for any pointers to tfm that explains this if there is one, or 
just for a simple explanation if not...




Re: [gentoo-user] Ethernet Machination

2013-01-02 Thread Tanstaafl

On 2013-01-02 10:24 AM, Michael Mol mike...@gmail.com wrote:

I once had an onboard NIC go bad, and the PCI NIC I substituted for it
wouldn't work unless the onboard NIC was disabled. So disabling
onboard hardware may or may not be a net positive.


? That was confusing - unless you actually meant that the new PCI NIC 
you substituted for it wouldn't work unless the onboard NIC was ENabled... ?



So long as there are no drivers available for the onboard NIC, it
won't show up in the net subsystem, so udev won't tie it in under net
rules.


Ok, good to know, thanks...



Re: [gentoo-user] IPtables - Mangle table - when/why do I need it (or do I need it)?

2013-01-02 Thread Tanstaafl

On 2013-01-02 2:01 PM, Mick michaelkintz...@gmail.com wrote:

If you have a look at 'man iptables-extensions' it gives some examples of
using -t mangle.

I haven't looked in Google recently, but there should be some examples there
too.


Oh, ok - so, if I don't have any rules that use the 'mangle' command, 
then I can safely remove mangle support from my kernel and lose the 
mangle table altogether?


Thanks guys...



Re: [gentoo-user] Re: Anyone switched to eudev yet?

2012-12-14 Thread Tanstaafl

On 2012-12-14 10:39 AM, Bruce Hill da...@happypenguincomputers.com wrote:

What Mark wrote you is golden. I might only add that if you put:

  =sys-fs/udev-181

into

/etc/portage/package.mask

you will have the present stable udev from*before*  those weirdos starting
messing it up, forcing systemd to take over udev.


Hmmm...

For some reason I have masked my udev at 171...

Are you saying I can change the mask to 181 and not have to worry about 
having an unbootable system due to my /usr being on a separate partition?


Thanks



Re: [gentoo-user] Re: Anyone switched to eudev yet?

2012-12-14 Thread Tanstaafl

Sorry, you're right, I'll go back to sleep now... ;)

I spoke without looking, and indeed my mask is set to =181

On 2012-12-14 12:34 PM, Bruce Hill da...@happypenguincomputers.com wrote:

On Fri, Dec 14, 2012 at 11:20:05AM -0500, Tanstaafl wrote:

On 2012-12-14 10:39 AM, Bruce Hillda...@happypenguincomputers.com  wrote:

 What Mark wrote you is golden. I might only add that if you put:
 
=sys-fs/udev-181
 
 into
 
 /etc/portage/package.mask
 
 you will have the present stable udev from*before*  those weirdos starting
 messing it up, forcing systemd to take over udev.


Hmmm...

For some reason I have masked my udev at 171...

Are you saying I can change the mask to 181 and not have to worry about
having an unbootable system due to my /usr being on a separate partition?

The =sys-fs/udev-181 in /etc/portage/package.mask means that any udev version
equal to or greater than udev-181 is masked from the system.





[gentoo-user] OpenRC update to 0.11.5 - safe if using older udev (pinned to udev-181)?

2012-11-20 Thread Tanstaafl

Anyone?

I don't see any news blurbs warning about it, but with everything going 
on with udev, systemd, etc, I'm not risking updating unless/until I know 
it is safe.


Tia...

Charles



Re: [gentoo-user] OpenRC update to 0.11.5 - safe if using older udev (pinned to udev-181)?

2012-11-20 Thread Tanstaafl

On 2012-11-20 9:36 AM, Markos Chandras hwoar...@gentoo.org wrote:

On Tue, Nov 20, 2012 at 1:46 PM, Tanstaafltansta...@libertytrek.org  wrote:

Anyone?

I don't see any news blurbs warning about it, but with everything going on
with udev, systemd, etc, I'm not risking updating unless/until I know it is
safe.



The ebuild will usually take care of dependency versions. So unless
the ebuild restricts it, I see no reason to stay with the old udev.
OpenRC maintainers are very careful in this area as they are well
aware of the problems a new udev can cause.


I am staying with  the old udev because I have /usr on a separate 
partition, and have no desire to bugger my system because of the 
machinations of the systemd/udev maintainers.


I would have already migrated to mdev if I were a more capable linux 
admin, but I'm only barely passable.


But as it is, I'm simply avoiding the whole mess unless/until I have to 
do a reinstall from scratch - which may be soon, since I need more disk 
space anyway (just wish I had a decent guide on installing gentoo in a 
vmware esxi server VM)...




Re: [gentoo-user] OpenRC update to 0.11.5 - safe if using older udev (pinned to udev-181)?

2012-11-20 Thread Tanstaafl

On 2012-11-20 12:05 PM, Bruce Hill da...@happypenguincomputers.com wrote:

On Tue, Nov 20, 2012 at 08:46:59AM -0500, Tanstaafl wrote:

Anyone?

I don't see any news blurbs warning about it, but with everything going
on with udev, systemd, etc, I'm not risking updating unless/until I know
it is safe.



Have you read the requirements in
/usr/portage/sys-apps/openrc/openrc-0.11.5.ebuild ?


I don't see anything in there labeled 'requirements'...

All I found was:

RDEPEND=virtual/init
kernel_FreeBSD? ( || ( =sys-freebsd/freebsd-ubin-9.0_rc 
sys-process/fuser-bsd ) )

elibc_glibc? ( =sys-libs/glibc-2.5 )
ncurses? ( sys-libs/ncurses )
pam? ( sys-auth/pambase )
=sys-apps/baselayout-2.1-r1
kernel_linux? (
sys-process/psmisc
)
!sys-fs/udev-133

So, *maybe* the last line means it needs a udev not less than 133 - but 
I don't know enough about how ebuilds to work to risk an unbootable 
system if it doesn't mean what I think it means.


Sorry, I'm not a programmer and don't know what to look for (or even 
where to look until you pointed me to the file), so how about just a 
simple answer?




Re: [gentoo-user] Re: [ANNOUNCE] I like systemd now :)

2012-11-19 Thread Tanstaafl

On 2012-11-12 2:33 PM, Alan McKinnon alan.mckin...@gmail.com wrote:

My experience is that all so-called primitive societies have an
excellent grasp of this thing called manners - it's the oil that
lubricates social interaction.


Interestingly enough this is most likely due to the principle of 'an 
armed society is a polite society'.


In primitive societies most people are armed (with the arms of the day, 
ie spears, bows/arrows, knives, etc), and there is no concept of suing 
someone over something as silly as punching some obnoxious jerk in the 
face for being an obnoxious jerk. The jerk gets punched, everyone knows 
he deserved it, 'nuff said.


So, people in primitive societies tend to not be obnoxious jerks - 
unless they are really big and mean and ornery, in which case they may 
get away with it for a while - until he ends up dead, everyone knows he 
deserved it, 'nuff said.



By contrast, Western culture by and large is not only mostly ignorant
of manners and proprietary, but we made a conscious decision to
discard all of it entirely.

I too have come into contact with many cultures other than
my own. The only one that goes out of it's way to be rude as a matter of
course is the Caucasian. Food for thought.


Due mostly to the litigious nature of modern society. No one wants to 
risk having their kids stolen from them by kidnappers and child 
molesters (aka 'Child Protective Services' or some other similar named 
'service'), so they neglect their parental responsibilities of 
*disciplining* their children, and voila - those undisciplined kids grow 
up to be men who are afraid to be and/or don't know *how* to be men, 
women who are afraid to be thought of as different from men - and no one 
wants to be the one to get sued by the arrogant jerk for punching them 
in the face.


Sorry, having a weird day today...



[gentoo-user] Warning when installing/updating clucene

2012-09-17 Thread Tanstaafl

Hi all,

I thought I'd posted about this way back when I opened the bug at 
sourceforge:


https://sourceforge.net/tracker/?func=detailaid=3494798group_id=80013atid=558446

but didn't find anything in my local archives, so I guess I didn't...

Does anyone use clucene? I'm planning on enabling FTS (full text search) 
on a new dovecot server, and was planning on using clucene, but would 
like to see about getting this warning taken care of (if it is indedd 
something I need to be worried about)...


I only got one response on the bug tracker (a month after my original 
report, and that only after I pinged for a reply) saying they weren't 
doing much work on it at the moment and that they'd look into it in a 
few days, then nothing - and that was back in March.


Here is the warning:

QA Notice: Package triggers severe warnings which indicate that it
   may exhibit random runtime failures.
/var/tmp/portage/dev-cpp/clucene-2.3.3.4-r4/work/clucene-core-2.3.3.4/src/core/CLucene/index/DocumentsWriter.cpp:129:33: 
warning: passing NULL to non-pointer argument 2 of ‘void* memset(void*, 
int, size_t)’

Please do not file a Gentoo bug and instead report the above QA
issues directly to the upstream developers of this software.
Homepage:http://clucene.sourceforge.net/

I'm assuming everyone gets this warning, so am wondering what it means, 
and whether or not I should even bother with clucene. Lucene++ appears 
to possibly be the new lucene implementation, but it is yuck java based...




Re: [gentoo-user] Warning when installing/updating clucene

2012-09-17 Thread Tanstaafl

On 2012-09-17 9:35 AM, Tanstaafl tansta...@libertytrek.org wrote:

Hi all,

I thought I'd posted about this way back when I opened the bug at
sourceforge:

https://sourceforge.net/tracker/?func=detailaid=3494798group_id=80013atid=558446


but didn't find anything in my local archives, so I guess I didn't...

Does anyone use clucene? I'm planning on enabling FTS (full text search)
on a new dovecot server, and was planning on using clucene, but would
like to see about getting this warning taken care of (if it is indedd
something I need to be worried about)...


Never mind, just got a reply from the dev that he had fixed it and the 
next update would contain the fix...


I'm still curious if I should not go down that road and use something 
else for FTS...




Re: [gentoo-user] Warning when installing/updating clucene

2012-09-17 Thread Tanstaafl

On 2012-09-17 10:25 AM, Michael Mol mike...@gmail.com wrote:

On Mon, Sep 17, 2012 at 9:46 AM, Tanstaafltansta...@libertytrek.org  wrote:

Never mind, just got a reply from the dev that he had fixed it and the next
update would contain the fix...

I'm still curious if I should not go down that road and use something else
for FTS...



clucene looks like the thing to use right now, unless you want to use
the full Java-based Apache Lucene. I was just looking at it this
morning as a possible basis for a solution to a problem of my own[1],
since strigi uses it.


Thanks Michael...

Just to wrap up this thread, in case anyone is interested, because Timo 
(dovecot author) had replied in a similar thread on the dc list that he 
thought there was talk of merging clucene and lucene++, I queried the 
clucene author after he replied he had fixed this issue, and here is his 
reply:


More or less it's true. About a year ago we started to make Lucene++ to 
the new CLucene version, as Lucene++ (also written in C++) is a port of 
a newer Apache Lucene version (written in Java) as the one CLucene is a 
port of. But we did not want to simply merge them, but to adapt Lucene++ 
to the design principles of CLucene. E.g., Lucene++ makes heavy use of 
shared pointers. And in CLucene we wanted to reduce this usage in favor 
of performance. But this not finished and I cannot say when it will 
finished. Nevertheless, the new version of CLucene (if any) will be also 
C++ and not Java. Best regards, Veit




[gentoo-user] GCC upgrade from 4.5.3 to 4.5.4 automatically removes 4.5.3???? Wtf???

2012-09-07 Thread Tanstaafl

This has never happened to me before...

Since when did a simple GCC upgrade *automatically* REMOVE my prior GCC 
install???


I have *always* kept my prior GCC around for a while, if not until the 
next upgrade, just as something to fall back on if the current one breaks.


I am NOT a happy camper.



Re: [gentoo-user] GCC upgrade from 4.5.3 to 4.5.4 automatically removes 4.5.3???? Wtf???

2012-09-07 Thread Tanstaafl

On 2012-09-07 7:44 AM, Markos Chandras hwoar...@gentoo.org wrote:

On Fri, Sep 7, 2012 at 12:24 PM, Tanstaafltansta...@libertytrek.org  wrote:

This has never happened to me before...

Since when did a simple GCC upgrade *automatically* REMOVE my prior GCC
install???

I have *always* kept my prior GCC around for a while, if not until the next
upgrade, just as something to fall back on if the current one breaks.

I am NOT a happy camper.



This always happens if the gcc your are upgrading to is in the same
slot as the previous one.


Well, I've been managing this gentoo server since I installed it over 8 
years ago, and I don't *ever* recall a GCC upgrade removing my prior 
version.



And please write proper subject on emails. WTF is not really
appropriate for a mailing list.


Don't be stupid. I see that all the time... if you don't like it just 
ignore it.




Re: [gentoo-user] GCC upgrade from 4.5.3 to 4.5.4 automatically removes 4.5.3???? Wtf???

2012-09-07 Thread Tanstaafl

On 2012-09-07 9:12 AM, Markos Chandras hwoar...@gentoo.org wrote:

On Fri, Sep 7, 2012 at 1:53 PM, Tanstaafltansta...@libertytrek.org  wrote:

Well, I've been managing this gentoo server since I installed it over 8
years ago, and I don't *ever* recall a GCC upgrade removing my prior
version.



All of us told you that you are wrong. Since you insist that Gentoo
always keep multiple gcc versions of the same slot around, then ok , I
guess you know better.


I'm simply saying that I have always been very careful with GCC upgrades 
(among a few others), and I have always kept the prior version around, 
using gcc-select to switch to the new version after the upgrade.


I guess the only explanation if what you guys are saying is correct is 
that I've never done a minor upgrade for the version in the current slot...


Weird...



Re: [gentoo-user] GCC upgrade from 4.5.3 to 4.5.4 automatically removes 4.5.3???? Wtf???

2012-09-07 Thread Tanstaafl

On 2012-09-07 9:22 AM, Markos Chandras hwoar...@gentoo.org wrote:

On Fri, Sep 7, 2012 at 1:53 PM, Tanstaafltansta...@libertytrek.org  wrote:

Don't be stupid. I see that all the time... if you don't like it just ignore
it.



And calling someone who is trying to help you stupid is not very
mature. You are on your own


Sorry... I should have said 'That is stupid'... I didn't mean that *you* 
were stupid, I meant that what you said was stupid, and it was... I see 
people use wtf on lists all the time, so saying I shouldn't use it is - 
well, stupid...




Portage 2.2 - when will it go stable?? WAS: Re: [gentoo-user] Everything disappeared from world list

2012-07-11 Thread Tanstaafl

On 2012-07-11 12:17 PM, Alex Schuster wo...@wonkology.org wrote:

Then you probably need portage 2.2 for this. Which will never ever become
stable it seems,


Can anyone comment on *why* it is taking so long? It is beginning to 
border on ridiculous - if it is ready (which I seem to recall lots of 
references to 'why are you still using 2.1??), why not just stabilize it 
already? I try really hard not to run anything unstable unless I 
absolutely have to (for obvious reasons)...




[gentoo-user] OT: Anybody know of a 'Genius' type service or site for TV shows/Movies/Music that is not owned by Apple?

2012-07-09 Thread Tanstaafl
By 'Genius' type service, I'm referring to Apple's Genius service that 
helps you find new music that you might like based on your current 
likes... ie, you tell it the Artists/songs you like, and it tells you 
things that are similar.


It is a very interesting way to find new music/artists that you 
otherwise may never find out about, and I'm hoping to find a service 
(paid or free) that does the same thing for TV, movies, online video 
content.


Thanks...



Re: [gentoo-user] Distorted Mirroed Overlapping screen with ATI Rage card

2012-07-09 Thread Tanstaafl
On 2012-07-06 9:00 PM, Christopher Lemire christopher.lem...@gmail.com 
wrote:

I tried disabling r128 and building the raedon driver into the kernel.
However, I am getting the message raedon module not found. It's not a
module. It's built into the kernel. Xorg.0.log. I mistakenly typed
raedom, but then fixed it to raedon, so if you see that in log, I
corrected it and tried starting X again.


Actually, isn't it raDEon, not raEDon? ;)



Re: [gentoo-user] Proper permissions for /var/log/portage/elog/summary.log?

2012-06-26 Thread Tanstaafl

On 2012-06-24 6:11 PM, Mick michaelkintz...@gmail.com wrote:

I always run emerge as root.


me three...


elog is owned by portage:root, summary.log within it as portage:root, other
log files within /var/log/portage are owned by portage:portage.


hmmm... I don't even have a 'summary.anything' file or files...



Re: [gentoo-user] Grub2 and is the upgrade a tooth puller.

2012-06-26 Thread Tanstaafl

On 2012-06-25 1:05 AM, Dale rdalek1...@gmail.com wrote:

Howdy,

It appears that grub2 is coming soon.


Has the Handbook/Install docs been updated to provide for installing 
Grub2 with a fresh install?


I'm about to do one, and would like to not have to switch this out later...



Re: [gentoo-user] VMWare Hypervisor - SD vs CF card?

2012-06-26 Thread Tanstaafl

On 2012-06-23 7:11 AM, Tanstaafl tansta...@libertytrek.org wrote:

On 2012-06-22 12:26 PM, Michael Mol mike...@gmail.com wrote:

OK, I missed that piece. I presumed there would be writes to the hard
disk.

Any reason you can't have these guys netboot?


Only that I've never done that before with servers, and my only
experience with netbooting at all was with LTSP about 10 years ago.

I think having 4 CF cards (mirrored pair of mirrored pairs) will be
enough redundancy though... ;)


Well, these seem to work swimmingly well... now I just need to find some 
kind of non-flammable/heat resistant insulating material that I can use 
to keep these cards from touching themselves or the metal cage (see 
below)...



Oh... one other question...

These CF adapters only have 2 screw holes (made to go into laptops, not
mounted in a cage), so I can't mount them *properly* in the cage...
anyone know where I can get 2.5 'shell' cases that I could install
these cards in so I can mount them properly? Right now I have to shove a
piece of anti-static material in between them and the cage (and each
other) to prevent them from accidentally touching (yuck!)...






Re: [gentoo-user] VMWare Hypervisor - SD vs CF card?

2012-06-23 Thread Tanstaafl

On 2012-06-22 12:26 PM, Michael Mol mike...@gmail.com wrote:

OK, I missed that piece. I presumed there would be writes to the hard disk.

Any reason you can't have these guys netboot?


Only that I've never done that before with servers, and my only 
experience with netbooting at all was with LTSP about 10 years ago.


I think having 4 CF cards (mirrored pair of mirrored pairs) will be 
enough redundancy though... ;)


Oh... one other question...

These CF adapters only have 2 screw holes (made to go into laptops, not 
mounted in a cage), so I can't mount them *properly* in the cage... 
anyone know where I can get 2.5 'shell' cases that I could install 
these cards in so I can mount them properly? Right now I have to shove a 
piece of anti-static material in between them and the cage (and each 
other) to prevent them from accidentally touching (yuck!)...




Re: [gentoo-user] VMWare Hypervisor - SD vs CF card?

2012-06-22 Thread Tanstaafl
On 2012-06-22 12:04 AM, Matthew Marlowe m...@professionalsysadmin.com 
wrote:

On Tue, Jun 19, 2012 at 4:47 AM, Tanstaafltansta...@libertytrek.org  wrote:

I could get 2 of these for each server, each with a mirrored pair of CF (or
SD) cards (mirror mode is defined by a jumper or switch on the adapter),
then mirror those (in the BIOS), which would result in a total of FOUR CF
(or SD) redundant cards (a mirror of 2 mirrored pairs) for the hypervisor...
and I can do this for quite a bit less than even a SINGLE 146GB SAS drive...

Is there any reason NOT to do this?



If you have a small ESX cluster, there are numerous advantages to
having some local storage on each your ESX hosts in addition to your
primary SAN storage:


We actually will be using ONLY local storage... Dell R515's with 8 450GB 
SAS drives in RAID10 (with one hot spare assigned)...


A decent SAN wasn't in the budget (yet, but we may go  that route in a 
year or two)...



- Lastly, I never really have been a fan of ESXi as an upgrade from
ESX.seems that it was more driven by vmware making windows admins
feel more confident since they didn't have to learn linux for ESX
console.


This is a new install, so not an 'upgrade'...


But, there is nothing keeping you from getting mirrored CF/SD cards
for the hypervisor boot and also keeping a few mirrored 2TB SATA
drives on each host for local datastores (7200rpm SATA is much cheaper
than 15K rpm SAS).


I do plan on having a couple of large SATA drives in RAID0 (for speed) 
for temporary snapshots (which I then backup using rsnapshot or my VM 
backup s/w) and for if I ever need to add some drives to my RAID10 
(probably won't, the 1.7TB I'll have is 4 times what we have now which 
is only 70% utilized)...


I get the CF cards today (already have the adapters), so we'll see how 
this goes this weekend...




Re: [gentoo-user] VMWare Hypervisor - SD vs CF card?

2012-06-22 Thread Tanstaafl
On 2012-06-22 12:04 AM, Matthew Marlowe m...@professionalsysadmin.com 
wrote:

But, there is nothing keeping you from getting mirrored CF/SD cards
for the hypervisor boot


Also, my questions was more just to which cards are considered best/most 
stable - SD or CF...




Re: [gentoo-user] VMWare Hypervisor - SD vs CF card?

2012-06-22 Thread Tanstaafl

On 2012-06-22 11:00 AM, Paul Hartman paul.hartman+gen...@gmail.com wrote:

On Fri, Jun 22, 2012 at 7:50 AM, Tanstaafltansta...@libertytrek.org  wrote:

Also, my questions was more just to which cards are considered best/most
stable - SD or CF...



Ultimately they both probably have the same flash chips inside of them
so if your main concern is reliability, I don't think it matters.

If your concern is performance, CF seems to be used in more
professional applications and more high-speed CF cards are readily
available.

In either case I would suggest avoiding the cheap no-name brands.
Sandisk Extreme Pro is likely the fastest card you can buy (of either
CF or SD form factor), it is available up to 100MB/sec write speeds,
but of course your card reader/host needs to support speeds like that.
Sandisk also routinely has more than 10x the random I/O performance of
most of the other brands which is important when using it on a
computer and not in a linear recording device (photos/video).


Thanks Paul, that's all pretty much what I'd concluded as well from my 
research...


I went with the 4GB SanDisk Ultra though (30MB/s), since these will only 
be used to boot the VMWare hypervisor (which runs fully in RAM once it 
is booted)...


Now I'm looking forward to seeing them in action this weekend... :)



Re: [gentoo-user] VMWare Hypervisor - SD vs CF card?

2012-06-20 Thread Tanstaafl

On 2012-06-19 10:28 AM, Michael Mol mike...@gmail.com wrote:

CF is really behind the times.


Really? Nothing I've read indicates that - can you point me to something 
that discusses how/why Cf is 'behind the times'?


I'm serious, I just ordered the CF adapter/cards, but I'm fully prepared 
to send them back if you can show me something authoritative that backs 
up that claim...


Thanks,

Charles




[gentoo-user] VMWare Hypervisor - SD vs CF card?

2012-06-19 Thread Tanstaafl

Hi everyone,

Ok, here's my dilemma...

I have some new Dell R515 servers (12 bay versions). These do not have 
any Dell supported internal SD (or CF) card options for the hypervisor, 
but they do have an internal 2.5 dual SATA/SAS drive cage, for running 
a bootable OS (in my case the ESXi hypervisor)...


Well, I really hate the idea of wasting money and disk space (for 2 
146GB SAS drives to be run in a mirror, what is being recommended to me) 
on something that only requires about 32MB to install (the hypervisor) 
when apparently there is a really cool option like:


for CF cards:
http://www.addonics.com/products/ad2sahdcf.php

or

for SD cards:
http://www.addonics.com/products/ad2sahdcf.php

I could get 2 of these for each server, each with a mirrored pair of CF 
(or SD) cards (mirror mode is defined by a jumper or switch on the 
adapter), then mirror those (in the BIOS), which would result in a total 
of FOUR CF (or SD) redundant cards (a mirror of 2 mirrored pairs) for 
the hypervisor... and I can do this for quite a bit less than even a 
SINGLE 146GB SAS drive...


Is there any reason NOT to do this?

What am I missing (other than the fact that Dell won't support this 
config, but I'm not using them for software support anyway)?


Appreciate any/all comments...

Charles




Re: [gentoo-user] VMWare Hypervisor - SD vs CF card?

2012-06-19 Thread Tanstaafl

On 2012-06-19 9:56 AM, Alan McKinnon alan.mckin...@gmail.com wrote:

With my last batch of ESX hosts, someone forgot to order the R710 SD
internal add-on. But it has 8 x 600M SAS drives

So what I did is configured all drives as a RAID 10 and let ESX grab
enough for the hypervisor  and leave the rest for regular storage.


That was my initial plan, but I really like the idea of having the 
hypervisor separated... and I also like the idea of running it on FLASH 
media...


I'll be ordering the Addonics today, and will report back if everything 
works as expected/hoped...


Anyone have any recommendation for a high quality/high-speed (but 
smallest capacity) CF media to put in these?




Re: [gentoo-user] udevd boot messages

2012-05-25 Thread Tanstaafl

On 2012-05-24 7:24 PM, Michael Mol mike...@gmail.com wrote:

I just now started going through /var/log/portage/messages, and was
reminded of this thread.


It is much easier if you set up portage to email you these individually...



Re: [gentoo-user] udevd boot messages

2012-05-24 Thread Tanstaafl

On 2012-05-23 5:25 PM, Markos Chandras hwoar...@gentoo.org wrote:

On 05/23/2012 05:24 PM, Tanstaafl wrote:

*Especially*  for servers, there really, REALLY needs to be a way to see
this kind of warning BEFORE updating... ie, the warning should be
printed to the screen during an 'emerge -pvuDN world' or something, so I
know that a reboot will be required for this update.
/pet-peeve



This kind of messages are also printed at the end of -uDNav world so if
you scroll your screen up you can see all the warning/log messages from
every package that you have updated. Also, these kind of messages are
logged in/var/log/portage/


Ummm... yes, I know that, I get my elogs via email...

You must have missed the words 'BEFORE updating' above... I put BEFORE 
in caps, not sure what else I could have done to make it more plain... ;)




Re: [gentoo-user] udevd boot messages

2012-05-24 Thread Tanstaafl

On 2012-05-23 5:54 PM, Markos Chandras hwoar...@gentoo.org wrote:

On 05/23/2012 10:47 PM, Alan McKinnon wrote:

Tanstaafl wants to know if a reboot*will*  be required*before*  he does
the update. What you are describing tells him that after the update
completes when it is already too late.

I face the same issue at work. We have a change policy requiring 14
days advance notice of any change affecting service. If I do a routine
world update then have to log an emergency change for an unexpected
reboot, the change manager will have my nuts for breakfast.

If it happens more than once, I'd be having a really unusual
conversation with the CTO which probably ends with him standing behind
me watching while I migrate every single box that isn't RHEL6 (all 200
of them) over to RHEL6 where I*do*  have exact knowledge in advance of
the impact of a change.



Did either of you ever open a bug about this or even discuss it in the
gentoo-dev mailing list? What you say sounds like a valid concern to me
but unless you express your needs to maintainers, nothing is ever going
to happen. However, in this particular case, yes a news item would be
the ideal solution.


I didn't discuss it on the dev list (I'm not a dev), but I did ask a 
question about this, but it was more general in nature (how to get 
ewarn/einfo during --pretend):


http://forums.gentoo.org/viewtopic.php?p=5930125#5930125

As a result of that thread, I then opened this bug which was 
subsequently closed:


https://bugs.gentoo.org/show_bug.cgi?id=281248



Re: [gentoo-user] udevd boot messages

2012-05-23 Thread Tanstaafl

On 2012-05-21 5:00 PM, Markos Chandras hwoar...@gentoo.org wrote:

On 05/21/2012 03:27 PM, Michael Hampicke wrote:

I updated udev from 171-r5 to 171-r6 and now i get several udevd
  boot message as : udevd[1389]: can not find
'/lib/udev/rules.d/90-network.rules': No such file or directory
udevd[1389]: can not find '/lib/udev/rules.d/95-keymap.rules': No
such file or directory .. and so on.

/lib is a symlink pointing to /lib64. /lib64/udev/rules.d is ok
with all the rules that udevd does not find at boot.


No I would guess it was because of the upgrade of
sys-apps/baselayout to 2.1-r1. Things got crazy here with that
upgrade. I had to re-merge every package with files under /lib/ In
  your case re-merging udev should to the trick.



The package clearly informed you that you need to reboot for things to
work properly

You should reboot the system now to get /run mounted with tmpfs!

Have a look on pkg_postinst() function in that ebuild. You chose to
ignore it and this is why you had these problems after the update.


pet-peeve
I asked about this a while back but never got a decent answer...

*Especially* for servers, there really, REALLY needs to be a way to see 
this kind of warning BEFORE updating... ie, the warning should be 
printed to the screen during an 'emerge -pvuDN world' or something, so I 
know that a reboot will be required for this update.

/pet-peeve



Re: [gentoo-user] udevd boot messages

2012-05-23 Thread Tanstaafl

On 2012-05-23 12:49 PM, Alex Schuster wo...@wonkology.org wrote:

Tanstaafl writes:


*Especially* for servers, there really, REALLY needs to be a way to see
this kind of warning BEFORE updating... ie, the warning should be
printed to the screen during an 'emerge -pvuDN world' or something, so
I know that a reboot will be required for this update.
/pet-peeve


Indeed! I think eselect news read should show this, at least.


That would work for me... anytime I saw an update for system critical 
stuff (like baselayout or udev or openrc) I'd be sure to check things...


As it stands, I'm now very glad for my self imposed policy of waiting a 
few days for critical things like this...




Re: [gentoo-user] Best caching dns server?

2012-05-21 Thread Tanstaafl

On 2012-05-19 8:09 AM, Pandu Poluan pa...@poluan.info wrote:

But stay away from OpenDNS like the plague. They are known to perform
false resolve, especially if the domain being resolved does not exist.


Simple to disable, been using OpenDNS for many years, no problems 
whatsoever...




Re: [gentoo-user] Re: make of gentoo-sources-3.2.12 fails

2012-05-17 Thread Tanstaafl

On 2012-05-17 12:14 PM, Michael Scherer a6702...@unet.univie.ac.at wrote:

If bottom-most is really that important to you, I will of course
comply, though with outlook express which I'm forced to use most of
the time this is a bit tedious.


Interesting... so, you have someone standing next to you most of the 
time, pointing a gun at your head, forcing you to use one of the worst 
mail clients that ever existed?




Re: [gentoo-user] Re: make of gentoo-sources-3.2.12 fails

2012-05-14 Thread Tanstaafl

On 2012-05-14 11:26 AM, Michael Scherer a6702...@unet.univie.ac.at wrote:

in my opinion it isn't. with top posting I see the newest message
immediately, while otherwise I need page through sometimes
huge amounts of mostly obsolete comments.


This is only the case if the person who replies doesn't trim their 
quoted text - which is often the case when brain-dead top-posters try 
bottom (aka inline) posting...



where it's possible, I put my messages on top, and I've found
more than once forum-rules that require or at least recommend
top posting.


This isn't one of them...


but I garantee that I will get flames, why I do this and urge me
to change my habits.
obviously this is an ingrained habit on gentoo-users, but from
now on I'm going follow my habits and damn the flames.


Then you will not get much help here and your participation will be null 
and void.


You should always strive to adjust you habits to the rules of the forum 
you are participating in...


I loathe top-posting, but there are a few forums I participate in where 
that is the norm, so I just grin and bear it...




Re: [gentoo-user] Are those green drives any good?

2012-05-09 Thread Tanstaafl

On 2012-05-09 4:47 AM, Dale rdalek1...@gmail.com wrote:

As some know, I'm planning to buy me a LARGE hard drive to put all my
videos on, eventually.  The prices are coming down now.  I keep seeing
these green drives that are made by just about every company nowadays.
  When comparing them to a non green drive, do they hold up as good?


As long as you don't use them in any kind of RAID setup you they should 
be fine.


The biggest difference between them and 'enterprise' class drives is the 
enterprise class drives are designed for multi-drive RAID setups... you 
don't want drives to spin down independently when working in a RAID setup...




Re: [gentoo-user] Are those green drives any good?

2012-05-09 Thread Tanstaafl

On 2012-05-09 8:06 AM, m...@trausch.us m...@trausch.us wrote:

AFAIK, the only technical difference between a consumer drive and an
enterprise one is that the enterprise one doesn't tell lies.  Or at
least, it isn't supposed to.


There's a bit more to it than that...

http://download.intel.com/support/motherboards/server/sb/enterprise_class_versus_desktop_class_hard_drives_.pdf



Re: [gentoo-user] Re: CORRECTION - Problem with eix-REMOTE update...

2012-04-18 Thread Tanstaafl

On 2012-04-17 12:21 PM, Tanstaafl tansta...@libertytrek.org wrote:

On 2012-04-17 1:41 AM, Vaeth va...@mathematik.uni-wuerzburg.de wrote:

So if it is the differing versions problem, the solution is to
upgrade to the most recent (~x86) version of eix, currently eix-0.25.3:
echo app-portage/eix /etc/portage/package.accept_keywords  emerge eix


Is this safe to do while remaining on the stable version of portage?


Anyone?



Re: [gentoo-user] Re: CORRECTION - Problem with eix-REMOTE update...

2012-04-18 Thread Tanstaafl
On 2012-04-18 7:08 AM, Hinnerk van Bruinehsen 
h.v.bruineh...@fu-berlin.de wrote:

On 18.04.2012 12:32, Tanstaafl wrote:

On 2012-04-17 12:21 PM, Tanstaafl wrote:

On 2012-04-17 1:41 AM, Vaeth wrote:

So if it is the differing versions problem, the solution is to
upgrade to the most recent (~x86) version of eix, currently
eix-0.25.3: echo app-portage/eix

/etc/portage/package.accept_keywords  emerge eix



Is this safe to do while remaining on the stable version of
portage?



Anyone?



eix-0.25.3 works great for me (incl. eix-remote) - if that's what
you're asking.. ;)


No... I thought my question was very precise:

Is updating eix to an UNSTABLE version ok to do while leaving portage at 
the STABLE version?




Re: [gentoo-user] Re: CORRECTION - Problem with eix-REMOTE update...

2012-04-17 Thread Tanstaafl

On 2012-04-17 1:41 AM, Vaeth va...@mathematik.uni-wuerzburg.de wrote:

So if it is the differing versions problem, the solution is to
upgrade to the most recent (~x86) version of eix, currently eix-0.25.3:
echo app-portage/eix /etc/portage/package.accept_keywords  emerge eix


Is this safe to do while remaining on the stable version of portage?



Re: [gentoo-user] Re: CORRECTION - Problem with eix-REMOTE update...

2012-04-17 Thread Tanstaafl

On 2012-04-17 1:41 AM, Vaeth va...@mathematik.uni-wuerzburg.de wrote:

I haven't searched layman for packages in a long time (actually had to
google how to do it), and am getting an error I can't seem to solve...


Unfortunately, you have not written the actual error
which should appear probably a few (probably one) lines before:


Nope...

After running eix-remote update, it downloads the file, then the very 
next lines are:


 * Unpacking data
/tmp/eix-remote.m6Ri2tl1/1/_var_lib_layman_a3li.eix was created with an 
incompatible eix-update:

It uses database format 101 (current is 28).
Please run 'eix-update' and try again.

Followed by similar lines with different cache file names for however 
many hundred or so files there are...


Then the last error is as I said:

Writing database file /var/cache/eix ..
Database contains 16219 packages in 155 categories.
 * could not read all eix cachefiles of 
/tmp/eix-remote.zv5peao3/eix-caches.tbz2


Probably your eix cachefile was *not* updated successfully.
Unless the above messages suggest another cause or you specified a
wrong filename, the most likely cause of this is that the server uses
another eix version than you or produced broken data. Please inspect
/tmp/eix-remote.zv5peao3/eix-caches.tbz2
whether this is a valid *.tar.bz2 archive containing eix cachefiles
(if it has already been deleted, download it using fetch).
If this is not the case (but was freshly downloaded), please report a 
bug. Note that the archive is *not* broken if only the cachefile format 
versions differ: In that case only report a bug if the eix cachefile 
format versions in the downloaded file are *older* than that of the most 
current ~x86 eix version in the portage tree (but first retry after 
several days before reporting such a bug to give the server maintainers 
a chance to upgrade after a version bump of eix).
Conversely, if the downloaded versions are even newer than that 
supported by your eix, you will have to upgrade to the most current ~x86 
version of eix to use eix-remote: This inconvenience cannot be avoided 
and is not a bug!



problems arised with cachefile _var_lib_layman_zugaina.eix
* Calling eix-update...
* could not read all eix cachefiles of
/tmp/eix-remote.dhR5mKNK/eix-caches.tbz2



Maybe this error speaks about differing versions?


Apparently it does, but *how* did this happen??



[gentoo-user] Problem with eix-update

2012-04-16 Thread Tanstaafl

Hi all,

I haven't searched layman for packages in a long time (actually had to 
google how to do it), and am getting an error I can't seem to solve...


problems arised with cachefile _var_lib_layman_zugaina.eix
 * Calling eix-update...
 * could not read all eix cachefiles of 
/tmp/eix-remote.dhR5mKNK/eix-caches.tbz2


Then finally:

Database contains 16219 packages in 155 categories.
 * could not read all eix cachefiles of 
/tmp/eix-remote.w473Rccs/eix-caches.tbz2


Probably your eix cachefile was *not* updated successfully.
Unless the above messages suggest another cause or you specified a
wrong filename, the most likely cause of this is that the server uses
another eix version than you or produced broken data. Please inspect
/tmp/eix-remote.w473Rccs/eix-caches.tbz2
whether this is a valid *.tar.bz2 archive containing eix cachefiles
(if it has already been deleted, download it using fetch).
If this is not the case (but was freshly downloaded), please report a bug.
Note that the archive is *not* broken if only the cachefile format 
versions differ: In that case only report a bug if the eix cachefile 
format versions in the downloaded file are *older* than that of the most 
current ~x86 eix version in the portage tree (but first retry after 
several days before reporting such a bug to give the server maintainers 
a chance to upgrade after a version bump of eix).
Conversely, if the downloaded versions are even newer than that 
supported by your eix, you will have to upgrade to the most current ~x86 
version of eix to use eix-remote: This inconvenience cannot be avoided 
and is not a bug!


Not sure what to do here or how things got hosed...



CORRECTION - Problem with eix-REMOTE update... WAS: Re: [gentoo-user] Problem with eix-update

2012-04-16 Thread Tanstaafl

On 2012-04-16 2:38 PM, Tanstaafl tansta...@libertytrek.org wrote:

Hi all,

I haven't searched layman for packages in a long time (actually had to
google how to do it), and am getting an error I can't seem to solve...

problems arised with cachefile _var_lib_layman_zugaina.eix
* Calling eix-update...
* could not read all eix cachefiles of
/tmp/eix-remote.dhR5mKNK/eix-caches.tbz2

Then finally:

Database contains 16219 packages in 155 categories.
* could not read all eix cachefiles of
/tmp/eix-remote.w473Rccs/eix-caches.tbz2

Probably your eix cachefile was *not* updated successfully.
Unless the above messages suggest another cause or you specified a
wrong filename, the most likely cause of this is that the server uses
another eix version than you or produced broken data. Please inspect
/tmp/eix-remote.w473Rccs/eix-caches.tbz2
whether this is a valid *.tar.bz2 archive containing eix cachefiles
(if it has already been deleted, download it using fetch).
If this is not the case (but was freshly downloaded), please report a bug.
Note that the archive is *not* broken if only the cachefile format
versions differ: In that case only report a bug if the eix cachefile
format versions in the downloaded file are *older* than that of the most
current ~x86 eix version in the portage tree (but first retry after
several days before reporting such a bug to give the server maintainers
a chance to upgrade after a version bump of eix).
Conversely, if the downloaded versions are even newer than that
supported by your eix, you will have to upgrade to the most current ~x86
version of eix to use eix-remote: This inconvenience cannot be avoided
and is not a bug!

Not sure what to do here or how things got hosed...






[gentoo-user] *Simple* guide to implementing digest-auth combined with IP based whitelist?

2012-04-03 Thread Tanstaafl

I've never had a need to protect a site like this so am totally new to it...

I've been reading, and everything says that digest-auth is preferred to 
basic-http-auth (yes, I know that this isn't a very sophisticated level 
of protection, but it is all we need for this site), but is there also a 
way to whitelist certain static IP address so people on those don't get 
prompted for a username/password?


Thanks for any pointers to tfm...



[gentoo-user] Dovecot 2.1.3 fails to compile

2012-03-21 Thread Tanstaafl

With this error:

In file included from /usr/include/CLucene/StdHeader.h:20:0,
 from /usr/include/CLucene.h:11,
 from lucene-wrapper.cc:23:
/usr/include/CLucene/SharedHeader.h:18:36: fatal error: 
CLucene/clucene-config.h: No such file or directory

compilation terminated.
make[4]: *** [lucene-wrapper.lo] Error 1
make[4]: *** Waiting for unfinished jobs
make[4]: Leaving directory 
`/var/tmp/portage/net-mail/dovecot-2.1.3/work/dovecot-2.1.3/src/plugins/fts-lucene'

make[3]: *** [all-recursive] Error 1
make[3]: Leaving directory 
`/var/tmp/portage/net-mail/dovecot-2.1.3/work/dovecot-2.1.3/src/plugins'

make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory 
`/var/tmp/portage/net-mail/dovecot-2.1.3/work/dovecot-2.1.3/src'

make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory 
`/var/tmp/portage/net-mail/dovecot-2.1.3/work/dovecot-2.1.3'

make: *** [all] Error 2
 * ERROR: net-mail/dovecot-2.1.3 failed (compile phase):
 *   emake failed

Any ideas?



Re: [gentoo-user] Dovecot 2.1.3 fails to compile

2012-03-21 Thread Tanstaafl

On 2012-03-21 10:23 AM, Alan McKinnon alan.mckin...@gmail.com wrote:

On Wed, 21 Mar 2012 08:38:42 -0400 Tanstaafl wrote:
Do you have dev-cpp/clucene installed? That missing header come from
there.


Of course (I have the lucene USE flag set for dovecot):

myhst : Wed Mar 21, 08:01:06 : ~
 # equery list -p clucene
 * Searching for clucene ...
[-P-] [  ] dev-cpp/clucene-0.9.21b-r1:1
[IP-] [  ] dev-cpp/clucene-2.3.3.4-r2:1
myhost : Wed Mar 21, 10:52:49 : ~
 #


Dovecot does depend on (lucene ?=dev-cpp/clucene-2.3) so you should
have it, I reckon I'd just remerge clucene then dovecot


When I tried updating dovecot, it *successfully* emerged the clucene 
update first (it was already installed), then the dovecot build failed 
with the error...




Re: [gentoo-user] Dovecot 2.1.3 fails to compile

2012-03-21 Thread Tanstaafl

On 2012-03-21 12:09 PM, Alan McKinnon alan.mckin...@gmail.com wrote:

On Wed, 21 Mar 2012 10:56:37 -0400 Tanstaafl wrote:

When I tried updating dovecot, it *successfully* emerged the clucene
update first (it was already installed), then the dovecot build
failed with the error...



It's quite simple as it turns out. dev-cpp/clucene changed the name of

/usr/include/CLucene/clucene-config.h

to

/usr/include/CLucene/CLConfig.h

As a quick nasty test I made a symlink, but that produced a gigantic
amount of build errors later on.

I reckon you should file a bug and meanwhile downgrademask clucene


Done: https://bugs.gentoo.org/show_bug.cgi?id=409205

Thanks! But I reckon if I'd have looked more closely, I could have 
figured that one out for myself - guess I'm just too used to *not* being 
able to figure these out myself... ;)




Re: [gentoo-user] The End Is Near ... or, get the vaseline, they're on the way!

2012-03-18 Thread Tanstaafl

On 2012-03-17 8:54 AM, Eliezer Croitoru elie...@ngtech.co.il wrote:

genkernel is pretty simple to use if you ask me.
just

emerege genkernel


Thanks, but... what part of I have never used genkernel, and have no 
desire to... did you not understand?





Re: [gentoo-user] The End Is Near ... or, get the vaseline, they're on the way!

2012-03-18 Thread Tanstaafl

On 2012-03-18 9:29 AM, Mark Knecht markkne...@gmail.com wrote:

I don't know about 'depreciated' as that has a sort of special
meaning,


pet-peeve
it is deprecATED, not deprecIated
/pet-peeve



[gentoo-user] Initramfs or move /usr to /, oh my...

2012-03-18 Thread Tanstaafl
Creating a new thread for this questions since mine got lost in all of 
the follow-ups...


I would really appreciate a meaningful response to this question (maybe 
I should go ask this on -dev?) - this has the potential to lose me 
forever as a gentoo user (I'm sure none of you are crying over that, but 
*I* am), and I've seen other similar comments... I'm thinking of FreeBSD 
too (and PCBSD for my desktop)...


Anyway...

On 2012-03-17 12:11 AM, Bruce Hill, Jr. 
da...@happypenguincomputers.com wrote:

 An initramfs which does this is created by
 =sys-kernel/genkernel-3.4.25.1 or
 =sys-kernel/dracut-017-r1. If you do not want to use these tools, be
 sure any initramfs you create pre-mounts /usr.

Ok, I have never used genkernel, and have no desire to...

I have no idea what dracut is or how to use it...

I have a remote system that has /usr on a separate partition.

So...

How do I find out if I am actually *using* an initramfs right now (I 
know it is built into the kernel), and


If I am not, how do I do this without using genkernel? Is dracut the 
*only* other option? Is it easy/trivial to set one up manually?


I cannot imagine that gentoo is just going to throw me to the wolves 
like this without providing *in-depth* instructions on how to make sure 
my system will boot after this update, like they did with the 
baselayout-2 update...


Personally, I have no problem with not having a separate /usr any more, 
except that I have 3 remote systems that I manage right now that already 
*have* a separate /usr...


On that note - is it possible, and if so, does anyone have any decent 
detailed How-to's on how I might be able to convert a separate /user to 
one on directly on / on a running system?




Re: [gentoo-user] The End Is Near ... or, get the vaseline, they're on the way!

2012-03-17 Thread Tanstaafl
On 2012-03-17 12:11 AM, Bruce Hill, Jr. 
da...@happypenguincomputers.com wrote:

An initramfs which does this is created by

=sys-kernel/genkernel-3.4.25.1 or
=sys-kernel/dracut-017-r1. If you do not want to use these tools, be

sure any initramfs you create pre-mounts /usr.


Ok, I have never used genkernel, and have no desire to...

I have no idea what dracut is or how to use it...

I have a remote system that has /usr on a separate partition.

So...

How do I find out if I am actually *using* an initramfs right now (I 
know it is built into the kernel), and


If I am not, how do I do this without using genkernel? Is dracut t he 
only other option? Is it easy/trivial to set one up manually?


I cannot imagine that gentoo is just going to throw me to the wolves 
like this without providing *in-depth* instructions on how to make sure 
my system will boot after this update, like they did with the 
baselayout-2 update...




Re: [gentoo-user] Re: LVM, /usr and really really bad thoughts.

2012-03-15 Thread Tanstaafl

On 2012-03-14 9:03 PM, Walter Dnes waltd...@waltdnes.org wrote:

*YOUR WIFE'S LAPTOP*  won't boot properly without /usr on /, or an
initramfs.  OK, put /usr on /, or an initramfs*ON YOUR WIFE'S LAPTOP*.
I don't have a problem with that.  What gets people really upset is the
dog-in-the-manger attitude of if my complex/corner-case machine won't
boot up without /usr on /, or an initramfs, then by golly*NOBODY'S*
machine will be allowed to boot up without /usr on /, or an initramfs.
My machine does not use bluetooth/other-weird-stuff.  udev doesn't need
to find bluetooth drivers on /usr on my machine.  Why is udev being
deliberately broken to not work on*EVERYBODY'S*  machine if they don't
have /usr on /, or an initramfs?


Why can't this argument simply be satisfied with one or more new profiles?



Re: [gentoo-user] Re: LVM, /usr and really really bad thoughts.

2012-03-15 Thread Tanstaafl

On 2012-03-15 5:13 AM, Neil Bothwick n...@digimed.co.uk wrote:

That's why I build the initramfs into the kernel and not as a separate
file. If I do something to break the initramfs I just boot the previous
kernel knowing it will still work.


Ok, time to show my ignorance...

How would I know if I am using an initramfs, and if I was, whether it 
was built into the kernel or not?




Re: [gentoo-user] Re: LVM, /usr and really really bad thoughts.

2012-03-15 Thread Tanstaafl

On 2012-03-15 9:05 AM, Neil Bothwick n...@digimed.co.uk wrote:

On Thu, 15 Mar 2012 08:41:38 -0400, Tanstaafl wrote:


That's why I build the initramfs into the kernel and not as a separate
file. If I do something to break the initramfs I just boot the
previous kernel knowing it will still work.


Ok, time to show my ignorance...

How would I know if I am using an initramfs, and if I was, whether it
was built into the kernel or not?



Well, you built the kernel, so you should know.


Well, since I basically just used a kernel .config that someone else 
originally set up, copying .config over and running make oldconfig when 
upgrading over the years, stumbling through any changes that broke 
anything (like when some changes to iptables broke my firewall back 
around 2.6.2x), I really didn't know - but I just confirmed that it is 
indeed built into my kernels, so, now, how do I know if I am *using* it 
or not?



Technically, we are all using an initramfs as all 2.6/3 kernels mount an
initramfs when they load. If does not contain an init script, they fall
back to the legacy behaviour.


So, how do I know whether or not 'it contains an init script'?

I know, my ignorance is confounding...


See /usr/src/linux/Documentation/filesystems/ramfs-rootfs-initramfs.txt


Read it, thanks, but it didn't help me answer the above...



Re: [gentoo-user] Beta test Gentoo with mdev instead of udev; version 5 - failure :-(

2012-03-14 Thread Tanstaafl

On 2012-03-13 8:07 PM, Canek Peláez Valdés can...@gmail.com wrote:

You want it simple? Tha'ts fine, it is possible. It's just that it
will not solve the general problem, just a very specific subset of it.
Just as mdev is doing; Walt just posted an email explaining that if
you use GNOME, KDE, XFCE, or LVM2, mdev is not for you.


Very interesting thread guys, and thanks for keeping it relatively civil 
despite the passion behind the objections being raised...


I just wanted to point out one thing (and ask a question about it) to 
anyone who argues that servers don't need this - if LVM2 really does 
eliminate the possibility of using mdev for fundamental reasons (as 
opposed to arbitrary decisions), that rules out a *lot* of server 
installations.


So, that is my question... what is it about LVM2 that *requires* udev?

Or asked another way -

Why is LVM2 incapable od using mdev?



Re: [gentoo-user] Pay for a hardened VM image

2012-03-04 Thread Tanstaafl

On 2012-03-03 7:26 PM, Michael Orlitzky mich...@orlitzky.com wrote:

On 03/03/2012 03:21 PM, Tanstaafl wrote:

No one has a template they can use to simply clone me a ready to go
hardened VM?

Or interested in earning a little money?



It's probably the Microsoft Hyper-V part that's scaring people away.


Ahh... good point...

What are peoples opinions of ESXi? The guys I'm considering using are 
perfect for everything else, but they only have experience with 
Microsoft Hyper-V and ESXi. I don't think they have *any* experience 
with Xen on Linux, but I dunno about XenServer (I'll find out)...


On 2012-03-03 10:55 PM, Pandu Poluan pa...@poluan.info wrote:
 On Mar 4, 2012 8:13 AM, Francisco Blas Izquierdo Riera (klondike)
 klond...@gentoo.org mailto:klond...@gentoo.org wrote:
 El 04/03/12 01:26, Michael Orlitzky escribió:
 Or maybe he should just ask on gentoo-hardened where many other users
 including paid ones roam.

 Or gentoo-server. After all, Hyper-V is currently aimed for server
 environs, so the server guys should have better ideas.

 (disclosure: I'm a server guy, but unfortunately have no experience
 at all with Hyper-V; my infrastructure runs exclusively on Xen)

Hi Pandu,

At first I thought you meant Xen proper, but as I was googling about 
Xen/XenServer+Gentoo I stumbled on this blog post of yours from about 7 
months ago:


http://pepoluan.posterous.com/finally-gentoo-pv-on-xenserver-without-initrd

So - are you using Xen? Or Citrix's XenServer?

Do you have any experience running virtualized Microsoft Servers on Xen 
(or XenServer)?


If so, would you be interested in some contract work (if so, please 
contact me directly)...


Thanks for the replies everyone...



Re: [gentoo-user] Pay for a hardened VM image

2012-03-04 Thread Tanstaafl

On 2012-03-03 10:55 PM, Pandu Poluan pa...@poluan.info wrote:

On Mar 4, 2012 8:13 AM, Francisco Blas Izquierdo Riera (klondike)
klond...@gentoo.org mailto:klond...@gentoo.org wrote:



El 04/03/12 01:26, Michael Orlitzky escribió:

It's probably the Microsoft Hyper-V part that's scaring people away.



Or maybe he should just ask on gentoo-hardened where many other users
including paid ones roam.



Or gentoo-server.


Hmmm... I used to be subscribed, but I seem to recall unsubscribing 
because it seemed essentially dead...


But I'll go sub again and post there...

Thanks...



Re: [gentoo-user] Filter grep output of 'ps aux'

2012-03-03 Thread Tanstaafl

On 2012-03-02 4:52 PM, Paul Hartman paul.hartman+gen...@gmail.com wrote:

On Fri, Mar 2, 2012 at 3:23 PM, Tanstaafltansta...@libertytrek.org  wrote:

Attempt at incorporating your command into this:
watch -n1 ps aux --sort=-%cpu | gawk 'NR==1; $3  0'

it gives me a syntax error:

Every 1.0s: ps aux --sort=-%cpu | gawk 'NR==1;0'
Fri Mar  2
16:19:01 2012

gawk: NR==1;0
gawk:^ syntax error

Any ideas on how to get this working in the watch version



Put a backslash before the $, it needs to be escaped in that context.


Aaargh! I could have sworn I tried that... but yes, now it works 
perfectly...


Thanks Paul - Gentoo support is the best, even for general linux 
questions like this...




Re: [gentoo-user] Pay for a hardened VM image

2012-03-03 Thread Tanstaafl

On 2012-03-02 3:51 PM, Tanstaafl tansta...@libertytrek.org wrote:

Would anyone here be interested in being paid to create a hardened VM
image for me that will run on a Microsoft Hyper-V host?

If so, what would you be willing to do this for?

Feel free to email me directly...


No one has a template they can use to simply clone me a ready to go 
hardened VM?


Or interested in earning a little money?



[gentoo-user] Filter grep output of 'ps aux'

2012-03-02 Thread Tanstaafl
Does anyone know if there is a way to filter the output of ps aux to 
show only lines that have a value in the %CPU column higher than x - ie, 
1.0, or 2.0, or something like that?


Thanks



Re: [gentoo-user] Filter grep output of 'ps aux'

2012-03-02 Thread Tanstaafl

On 2012-03-02 12:56 PM, Pandu Poluan pa...@poluan.info wrote:


On Mar 3, 2012 12:49 AM, Tanstaafl tansta...@libertytrek.org
mailto:tansta...@libertytrek.org wrote:
 
  Does anyone know if there is a way to filter the output of ps aux to
show only lines that have a value in the %CPU column higher than x - ie,
1.0, or 2.0, or something like that?
 
  Thanks
 

For that, you need awk instead of grep.


Never used awk... any chance you (or someone) could provide an example 
of how to do this?


Also - would there be a way to get a running output (kind of like 
tailing a log)?




Re: [gentoo-user] Python update question

2012-03-02 Thread Tanstaafl

On 2012-03-02 9:28 AM, Mark Knecht markkne...@gmail.com wrote:

eselect python list --python3

and make sure you're set to 3.2 before removing 3.1.


Hmmm... mine shows it is set to 3.1...

 # eselect python list --python3
Available Python 3 interpreters:
  [1]   python3.1 *
  [2]   python3.2
myhost : Fri Mar 02, 13:07:51 : ~
 #

So, that would be

eselect python set --python3 2

to set it to 3.2 leaving 2.7 as the main active python, right?

Just making sure because I know that mucking up python is *not* a 
problem I want to have to deal with...




Re: [gentoo-user] Filter grep output of 'ps aux'

2012-03-02 Thread Tanstaafl

On 2012-03-02 1:02 PM, Paul Hartman paul.hartman+gen...@gmail.com wrote:

On Fri, Mar 2, 2012 at 11:46 AM, Tanstaafltansta...@libertytrek.org  wrote:

  Does anyone know if there is a way to filter the output of ps aux to show
  only lines that have a value in the %CPU column higher than x - ie, 1.0, or
  2.0, or something like that?

ps aux | gawk '{ if ( $3  1.0 ) { print } }'


Thanks Paul! Thats a huge help...

Now if I could just get a constantly updated output of this (like 
tailing a live log), I'd be in heaven... ;)


But if this is the best I can do, it is 1000 times better...



<    1   2   3   4   5   6   7   8   9   >