Re: Upgrade from buster to bullseye

2021-11-08 Thread José Abílio Matos
On Monday, 8 November 2021 20.57.37 WET Pavel Sanda wrote:
> This is actually not correct way how to solve this under bullseye.
> "python" is gone for good and scripts should use either python2
> or python3 binary.
> If you insist on using "python" you should install specific package (IIRC
> "python") via: apt install python

Now that python2 is gone (the last supported versions were released last year 
and no new one will be released) it is safe to use python again since it 
refers to python3. :-)

For the moment that is the easiest solution. The more complete solution is the 
one that Scott mentioned because we already search for python in a more 
general way, Even python3 is a symlink to some python version. As an example 
in my computer running Fedora 35 I have:

$ ls -l /usr/bin/python
lrwxrwxrwx. 1 root root 9 Oct  4 23:36 /usr/bin/python -> ./python3
$ ls -l /usr/bin/python3
lrwxrwxrwx. 1 root root 10 Oct  4 23:10 /usr/bin/python3 -> python3.10

The previous case where python worked relied on python referring to python2.
-- 
José Abílio-- 
lyx-devel mailing list
lyx-devel@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-devel


Re: Upgrade from buster to bullseye

2021-11-08 Thread Pavel Sanda
On Mon, Nov 08, 2021 at 06:40:35PM +0100, Jean-Pierre Chrétien wrote:
> >For ubuntu/debian it was sufficient to modify the imagemagic policy.
> >Like:
> > $ cp /etc/ImageMagick-6/policy.xml ~/.config/ImageMagick/.
> >and add/modify policies for PS, PDF and EPS in 
> >~/.config/ImageMagick/policy.xml to
> > 
> > 
> > 
> >
> I removen rsvh-conbert, reconfigured, created and edited
> ~/.config/ImageMagick/policy.xml

You need to directly edit /etc/ImageMagick-6/policy.xml

Pavel
-- 
lyx-devel mailing list
lyx-devel@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-devel


Re: Upgrade from buster to bullseye

2021-11-08 Thread Pavel Sanda
On Mon, Nov 08, 2021 at 11:03:25AM +0100, Jean-Pierre Chrétien wrote:
> On 2.3.x, I first checked the fr.po file status and when I ran the make
> lyx-2.3.7dev.pot-update in the po dir of the build directory, I got in the
> following error:
> 
> /bin/sh: 1: /usr/bin/python: not found
> make: *** [Makefile:774 : qt4_l10n.pot] Erreur 127
> 
> So I created a link:
> 
> sudo ln -s /usr/bin/python3 /usr/bin/python
> 
> and the problem was solved.

This is actually not correct way how to solve this under bullseye.
"python" is gone for good and scripts should use either python2
or python3 binary.
If you insist on using "python" you should install specific package (IIRC 
"python") via:
apt install python

> However, when compiling the pdf of the UserGuide, none of the svgz icons
> could be converted, so the padf dispaly failed with a pdf image not found.
> Here is first of the error messages:
> 
> convert-im6.q16: attempt to perform an operation not allowed by the security
> policy `PDF' @ error/constitute.c/IsCoderAuthorized/421.
> /usr/local/share/lyx-2.3.7dev/scripts/convertDefault.py ERROR
> Execution of "convert" failed.
> support/Systemcall.cpp (276): Systemcall: 'python -tt
> "/usr/local/share/lyx-2.3.7dev/scripts/convertDefault.py" svgz 
> "/tmp/lyx_tmpdir.ISfQxXhtSZQG/lyx_tmpbuf0/0_usr_local_share_lyx-2_3_7dev_images_buffer-view.svgz"
> pdf 
> "/tmp/lyx_tmpdir.ISfQxXhtSZQG/lyx_tmpbuf0/0_usr_local_share_lyx-2_3_7dev_images_buffer-view.pdf"'
> finished with exit code 1

Yes, this is default imagemagick policy on debian now.
First introduced in buster to overcome ghostscritp security issues, then 
reverted
in testing (forthcoming bullseye) and  then reintroduced again. I tried to 
explain
the situation in couple debian bugs but no one seem to care.

The situation is very unfortunate, because this default policy ban on
postscript conversions can not be overriden by user setting and if you
don't have root access on the machine you work, you can't use
postscript anymore.

We could perhaps improve error handling to catch this explain
situation in some error dialog to users...

Pavel
-- 
lyx-devel mailing list
lyx-devel@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-devel


Re: Upgrade from buster to bullseye

2021-11-08 Thread Jean-Pierre Chrétien

Le 08/11/2021 à 14:12, Kornel Benko a écrit :





For ubuntu/debian it was sufficient to modify the imagemagic policy.
Like:
$ cp /etc/ImageMagick-6/policy.xml ~/.config/ImageMagick/.
and add/modify policies for PS, PDF and EPS in ~/.config/ImageMagick/policy.xml 
to




I removen rsvh-conbert, reconfigured, created and edited 
~/.config/ImageMagick/policy.xml and now, same behavior as with rsvg-convert, 
latex does not find the files.  I'm lost. What is broken now ? I will recompile 
lyx-2.3.7dev from scratch.


--
Jean-Pierre

--
lyx-devel mailing list
lyx-devel@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-devel


I extended the expiration date of my PGP key

2021-11-08 Thread Scott Kostyshak
My PGP key recently expired. I extended it. If you are checking my
signatures, to update my key I think you need to run the following
command:

  gpg --keyserver pgp.mit.edu --recv-keys B6470BEB

Sorry for the bother.

Scott


signature.asc
Description: PGP signature
-- 
lyx-devel mailing list
lyx-devel@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-devel


Re: Upgrade from buster to bullseye

2021-11-08 Thread Scott Kostyshak
On Mon, Nov 08, 2021 at 04:01:36PM +0100, Jean-Pierre Chrétien wrote:
> Le 08/11/2021 à 11:20, Jean-Marc Lasgouttes a écrit :
> > Le 08/11/2021 à 11:03, Jean-Pierre Chrétien a écrit :
> > > Dear developers
> > > 
> > > I upgraded my Debian yesterday and I tested compilation and
> > > execution of master and 2.3.7dev.
> > > 
> > > Compilation and display of the UserGuide run flawlessly on master.
> > > 
> > > On 2.3.x, I first checked the fr.po file status and when I ran the
> > > make lyx-2.3.7dev.pot-update in the po dir of the build directory, I
> > > got in the following error:
> > > 
> > > /bin/sh: 1: /usr/bin/python: not found
> > > make: *** [Makefile:774 : qt4_l10n.pot] Erreur 127
> > 
> > This is for José, right?
> 
> I guess so.

José made a couple of proposals a few months ago. See here:

  https://www.mail-archive.com/search?l=mid&q=2061214.Mh6RI2rZIc%40griffin

Scott


signature.asc
Description: PGP signature
-- 
lyx-devel mailing list
lyx-devel@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-devel


Re: Upgrade from buster to bullseye

2021-11-08 Thread Jean-Pierre Chrétien

Le 08/11/2021 à 11:20, Jean-Marc Lasgouttes a écrit :

Le 08/11/2021 à 11:03, Jean-Pierre Chrétien a écrit :

Dear developers

I upgraded my Debian yesterday and I tested compilation and execution of 
master and 2.3.7dev.


Compilation and display of the UserGuide run flawlessly on master.

On 2.3.x, I first checked the fr.po file status and when I ran the make 
lyx-2.3.7dev.pot-update in the po dir of the build directory, I got in the 
following error:


/bin/sh: 1: /usr/bin/python: not found
make: *** [Makefile:774 : qt4_l10n.pot] Erreur 127


This is for José, right?


I guess so.





So I created a link:

sudo ln -s /usr/bin/python3 /usr/bin/python

and the problem was solved.

The I compiled lyx-2.3.7dev all right with QT5 (QT4 fails).

However, when compiling the pdf of the UserGuide, none of the svgz icons could 
be converted, so the padf dispaly failed with a pdf image not found. Here is 
first of the error messages:


convert-im6.q16: attempt to perform an operation not allowed by the security 
policy `PDF' @ error/constitute.c/IsCoderAuthorized/421.

/usr/local/share/lyx-2.3.7dev/scripts/convertDefault.py ERROR
Execution of "convert" failed.


Do you have rsvg-convert intalled (in librsvg2-bin package here).


No I hadn't. So I installed librsvg2-bin, reconfigured LyX and it seems that the 
situation is worse : the conversion does not even seem to take place.




This "convert" situation is really horrible, I do not understand that there is 
no workaround yet.


As the problem seems to be gone with master, I guess that such a workaround 
won't be needed in the (near?) future.

But why is the behavior different between 2.3.7 and 2.4.0?

--
Jean-Pierre
--
lyx-devel mailing list
lyx-devel@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-devel


Re: Upgrade from buster to bullseye

2021-11-08 Thread Jean-Marc Lasgouttes

Le 08/11/2021 à 14:12, Kornel Benko a écrit :

Am Mon, 8 Nov 2021 12:16:37 +0100
schrieb Jean-Marc Lasgouttes :


Le 08/11/2021 à 12:10, Cor Blom a écrit :

The words "security policy" and "PDF" reminds me of a security policy in
openSUSE, which disables imagemagick working with PS/PDF  by default. A
additional package must be installed to enable this.

No idea if this is the same, but who knows...


Yes, I think so. There has been a lot of work in ghostscript to address
this, but I do not know whether this is enough.

JMarc



For ubuntu/debian it was sufficient to modify the imagemagic policy.
Like:
$ cp /etc/ImageMagick-6/policy.xml ~/.config/ImageMagick/.
and add/modify policies for PS, PDF and EPS in ~/.config/ImageMagick/policy.xml 
to





Sure, but it would be nice if our users could use LyX without editing 
system configuration and without risking their security from other 
sources...


JMarc
--
lyx-devel mailing list
lyx-devel@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-devel


Re: Upgrade from buster to bullseye

2021-11-08 Thread Kornel Benko
Am Mon, 8 Nov 2021 12:16:37 +0100
schrieb Jean-Marc Lasgouttes :

> Le 08/11/2021 à 12:10, Cor Blom a écrit :
> > The words "security policy" and "PDF" reminds me of a security policy in 
> > openSUSE, which disables imagemagick working with PS/PDF  by default. A 
> > additional package must be installed to enable this.
> > 
> > No idea if this is the same, but who knows...  
> 
> Yes, I think so. There has been a lot of work in ghostscript to address 
> this, but I do not know whether this is enough.
> 
> JMarc
> 

For ubuntu/debian it was sufficient to modify the imagemagic policy.
Like:
$ cp /etc/ImageMagick-6/policy.xml ~/.config/ImageMagick/.
and add/modify policies for PS, PDF and EPS in ~/.config/ImageMagick/policy.xml 
to




Kornel


pgpBRWz4M6nBl.pgp
Description: Digitale Signatur von OpenPGP
-- 
lyx-devel mailing list
lyx-devel@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-devel


Re: Upgrade from buster to bullseye

2021-11-08 Thread Jean-Marc Lasgouttes

Le 08/11/2021 à 12:10, Cor Blom a écrit :
The words "security policy" and "PDF" reminds me of a security policy in 
openSUSE, which disables imagemagick working with PS/PDF  by default. A 
additional package must be installed to enable this.


No idea if this is the same, but who knows...


Yes, I think so. There has been a lot of work in ghostscript to address 
this, but I do not know whether this is enough.


JMarc

--
lyx-devel mailing list
lyx-devel@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-devel


Re: Upgrade from buster to bullseye

2021-11-08 Thread Cor Blom

Op 08-11-2021 om 11:58 schreef Jean-Marc Lasgouttes:

Le 08/11/2021 à 11:20, Jean-Marc Lasgouttes a écrit :
However, when compiling the pdf of the UserGuide, none of the svgz 
icons could be converted, so the padf dispaly failed with a pdf image 
not found. Here is first of the error messages:


convert-im6.q16: attempt to perform an operation not allowed by the 
security policy `PDF' @ error/constitute.c/IsCoderAuthorized/421.

/usr/local/share/lyx-2.3.7dev/scripts/convertDefault.py ERROR
Execution of "convert" failed.


There is something I actually do not understand: this convert error 
triggers when converting a PDF file to something else. What is the path 
that created a pdf file from svg? Can we avoid it?


JMarc


The words "security policy" and "PDF" reminds me of a security policy in 
openSUSE, which disables imagemagick working with PS/PDF  by default. A 
additional package must be installed to enable this.


No idea if this is the same, but who knows...

Cor
--
lyx-devel mailing list
lyx-devel@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-devel


Re: Upgrade from buster to bullseye

2021-11-08 Thread Jean-Marc Lasgouttes

Le 08/11/2021 à 11:20, Jean-Marc Lasgouttes a écrit :
However, when compiling the pdf of the UserGuide, none of the svgz 
icons could be converted, so the padf dispaly failed with a pdf image 
not found. Here is first of the error messages:


convert-im6.q16: attempt to perform an operation not allowed by the 
security policy `PDF' @ error/constitute.c/IsCoderAuthorized/421.

/usr/local/share/lyx-2.3.7dev/scripts/convertDefault.py ERROR
Execution of "convert" failed.


There is something I actually do not understand: this convert error 
triggers when converting a PDF file to something else. What is the path 
that created a pdf file from svg? Can we avoid it?


JMarc
--
lyx-devel mailing list
lyx-devel@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-devel


Re: Upgrade from buster to bullseye

2021-11-08 Thread Stephan Witt
Am 08.11.2021 um 11:20 schrieb Jean-Marc Lasgouttes :
> 
> Le 08/11/2021 à 11:03, Jean-Pierre Chrétien a écrit :
>> Dear developers
>> I upgraded my Debian yesterday and I tested compilation and execution of 
>> master and 2.3.7dev.
>> Compilation and display of the UserGuide run flawlessly on master.
>> On 2.3.x, I first checked the fr.po file status and when I ran the make 
>> lyx-2.3.7dev.pot-update in the po dir of the build directory, I got in the 
>> following error:
>> /bin/sh: 1: /usr/bin/python: not found
>> make: *** [Makefile:774 : qt4_l10n.pot] Erreur 127
> 
> This is for José, right?
> 
>> So I created a link:
>> sudo ln -s /usr/bin/python3 /usr/bin/python
>> and the problem was solved.
>> The I compiled lyx-2.3.7dev all right with QT5 (QT4 fails).
>> However, when compiling the pdf of the UserGuide, none of the svgz icons 
>> could be converted, so the padf dispaly failed with a pdf image not found. 
>> Here is first of the error messages:
>> convert-im6.q16: attempt to perform an operation not allowed by the security 
>> policy `PDF' @ error/constitute.c/IsCoderAuthorized/421.
>> /usr/local/share/lyx-2.3.7dev/scripts/convertDefault.py ERROR
>> Execution of "convert" failed.
> 
> Do you have rsvg-convert intalled (in librsvg2-bin package here).
> 
> This "convert" situation is really horrible, I do not understand that there 
> is no workaround yet.

There is a fallback converter utility lyxconvert. (src/convert/lyxconvert.cpp)

It uses the Qt-library to convert from SVG to PDF et.al. But it has the 
drawback to have limited function and doesn’t understand the full SVG standard.

I’m not sure how useful it is to improve the situation.

Stephan
-- 
lyx-devel mailing list
lyx-devel@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-devel


Re: Upgrade from buster to bullseye

2021-11-08 Thread Jean-Marc Lasgouttes

Le 08/11/2021 à 11:03, Jean-Pierre Chrétien a écrit :

Dear developers

I upgraded my Debian yesterday and I tested compilation and execution of 
master and 2.3.7dev.


Compilation and display of the UserGuide run flawlessly on master.

On 2.3.x, I first checked the fr.po file status and when I ran the make 
lyx-2.3.7dev.pot-update in the po dir of the build directory, I got in 
the following error:


/bin/sh: 1: /usr/bin/python: not found
make: *** [Makefile:774 : qt4_l10n.pot] Erreur 127


This is for José, right?



So I created a link:

sudo ln -s /usr/bin/python3 /usr/bin/python

and the problem was solved.

The I compiled lyx-2.3.7dev all right with QT5 (QT4 fails).

However, when compiling the pdf of the UserGuide, none of the svgz icons 
could be converted, so the padf dispaly failed with a pdf image not 
found. Here is first of the error messages:


convert-im6.q16: attempt to perform an operation not allowed by the 
security policy `PDF' @ error/constitute.c/IsCoderAuthorized/421.

/usr/local/share/lyx-2.3.7dev/scripts/convertDefault.py ERROR
Execution of "convert" failed.


Do you have rsvg-convert intalled (in librsvg2-bin package here).

This "convert" situation is really horrible, I do not understand that 
there is no workaround yet.


JMarc
--
lyx-devel mailing list
lyx-devel@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-devel


Upgrade from buster to bullseye

2021-11-08 Thread Jean-Pierre Chrétien

Dear developers

I upgraded my Debian yesterday and I tested compilation and execution of master 
and 2.3.7dev.


Compilation and display of the UserGuide run flawlessly on master.

On 2.3.x, I first checked the fr.po file status and when I ran the make 
lyx-2.3.7dev.pot-update in the po dir of the build directory, I got in the 
following error:


/bin/sh: 1: /usr/bin/python: not found
make: *** [Makefile:774 : qt4_l10n.pot] Erreur 127

So I created a link:

sudo ln -s /usr/bin/python3 /usr/bin/python

and the problem was solved.

The I compiled lyx-2.3.7dev all right with QT5 (QT4 fails).

However, when compiling the pdf of the UserGuide, none of the svgz icons could 
be converted, so the padf dispaly failed with a pdf image not found. Here is 
first of the error messages:


convert-im6.q16: attempt to perform an operation not allowed by the security 
policy `PDF' @ error/constitute.c/IsCoderAuthorized/421.

/usr/local/share/lyx-2.3.7dev/scripts/convertDefault.py ERROR
Execution of "convert" failed.
support/Systemcall.cpp (276): Systemcall: 'python -tt 
"/usr/local/share/lyx-2.3.7dev/scripts/convertDefault.py" svgz 
"/tmp/lyx_tmpdir.ISfQxXhtSZQG/lyx_tmpbuf0/0_usr_local_share_lyx-2_3_7dev_images_buffer-view.svgz" 
pdf 
"/tmp/lyx_tmpdir.ISfQxXhtSZQG/lyx_tmpbuf0/0_usr_local_share_lyx-2_3_7dev_images_buffer-view.pdf"' 
finished with exit code 1


--
Jean-Pierre


--
lyx-devel mailing list
lyx-devel@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-devel