from:"g . smyli"

You bet. I'm glad it's here. I like my new splash screen also. Was a  
surprise. jxself, are you getting paid for your efforts. I hope so.

Re: [Trisquel-users] LXqt is available in Trisquel 8 Flidas Alpha Flidas

Nice, looks similar to Mate. How do you like lxQT. That last shot, what is  
that, like an extra half a desktop, maybe a square jellyfish?

Re: [Trisquel-users] Different kernels

Yeah, that makes sense, that way Trisquel is relying on a bigger group  
upstream to do most of the work. Reuben still has to ascertain that  
everything offered in Trisquel is totally up to fsf standards and that must  
be quite a bit for a very small crew.

Re: [Trisquel-users] Wikileaks how CIA is spying. every Operative System

Drone strikes - Afghanistan I understood after 9/11 but Iraq was a huge  
mistake. Now drones are killing people in other countries because some shadow  
court has declared them an enemy. We have a right to defend ourselves from  
our enemies but to whom are they that control the drones accountable? Most  
Americans hear very little about it.


re Capitalism, I fairly agree with Soon.to.be.Free. But Capitalism belongs in  
the marketplace, not so much in the halls of government. Also, to provide  
social services, individual and corporate wealth maybe should be shared by  
taxation which in turn would foot the bill for no cost continuing education,  
universal health care and such. So maybe that makes me a socialist too.


People made a mistake thinking a business background was what the country  
needed in a president. The business of business is business, the business of  
government is the welfare of it's citizens. Least that's what Ive been  
thinking.

[Trisquel-users] Different kernels

2017-03-16 Thread g . smyli

Perusing the French forum which I can understand only 'un peu,' but like  
trying, seeing this thread:  
https://trisquel.info/en/forum/paquets-conserv%C3%A9s-non-mis-%C3%A0-jour-dans-le-terminal  
concerning an issue I believe I have experienced before, and noticing mention  
of jxself.org/linux-libre, I, in Trisquel 8 decided to give it a whirl.
The steps to upgrade my kernel given at the site were wonderfully perfect and  
I chose the 'sudo apt install linux-libre-lts' option and am now booting up  
to something like '4.9.15-gnu #1 SMP x86_64 x86_64 x86_64 GNU/Linux' and see  
there is still Linux 4.4.0-66-generic and Linux-Libre 4.4.0-64-generic  
kernels available to grub advanced options.
As far as I know, nothing was broken, all my apps seem to work just fine with  
the new kernel.


So I was wondering why Trisquel doesn't keep up with jxself's/Linux-Libre  
kernels.

Re: [Trisquel-users] Wikileaks how CIA is spying. every Operative System

2017-03-15 Thread g . smyli


re "It is strange that so many people voted for Drumpf"

Yeah, what's happening? It seems like anti-globilization may be a big part of  
it, but what's with the Nazism and violence. Where I live, "mosques,  
synagogues and Hindu temples alike graffitied, burned or vandalized." This is  
Seattle for heaven's sake, don't tell me Seattle stands for bigotry because  
I've lived here all my life and it ain't so. The city isn't perfect but I've  
never heard of a chapter of the Ku Klux Klan located here.


Hey this thread should have started out in the troll hole, no?

Re: [Trisquel-users] Wikileaks how CIA is spying. every Operative System

2017-03-14 Thread g . smyli

I liked Bernie's message better than any but had a hard time believing he  
would be electable. In hindsight though, I guess I was wrong.


Socialism in balance with capitalism, yeah, my most current thought also, and  
75% seems a credible guess to me.


And while I'm at it, to jorgesemul, I liked your website, nice look and  
interesting content. Was thinking maybe I have 'un uso' for Etherpad though I  
have no account yet. I'll visit your site again to see what else is there. I  
see you have some bash stuff and I'm trying to advance myself there.

Re: [Trisquel-users] Wikileaks how CIA is spying. every Operative System

2017-03-11 Thread g . smyli

But we can still change our laws and our government if we are united enough.  
But we certainly are not united. Instead we are growing more deeply divided  
and splintered every day.


Russia, for one, is waging a very effective campaign to destroy our unity and  
trust and exploit our resulting vulnerability. I just put the term 'Russia's  
new warfare' in searx.me because I remembered reading of a Russian general  
who had outlined much of this new type of warfare (Hybrid Warfare). I haven't  
yet found that reference (possibly, Vladislav Surkov) but the amount of  
information searx brought up is substantial and illustrative. Destroying the  
people's trust in their govenment and institutions is one of the objectives  
in this type of warfare. Assange seems to assist, President Trump too. It  
remains to be seen if either Assange or Trump are consciously serving Russian  
interests or just playing into their hands. But change is in the air like a  
storm right now and the landscape can change in the blink of an eye. The  
death of democracy could certainly be upon us here in America and the same  
trends appear to be at work in Europe as well. Would that not be the end of  
free software. Therefore, which is more important?


I read most of the Wikipedia article 'hack and hack' mentioned. It sure isn't  
flatterring to the CIA's image. The CIA losing more credibility is a negative  
turn of events to me. Take the CIA out and where is our first line of  
defense?


I think today's tech industry must share blame for pourous security. Maybe  
it's on Samsung if their TV's can be turned into listening devices; on Apple  
if their phone is hackable; on Microsoft if ransomware attacks us; on Google  
if Android devices are subject to insecure apps maybe even made by Cozy Bear,  
some eastern European mafia or the Chinese military; and finally, maybe it's  
on the society that doesn't care enough to take up guard and demand these  
parties be held accountable. Last I knew, Apple, Google and Microsoft had  
huge cash reserves. (see:  
http://www.economicshelp.org/blog/21282/business/cash-reserves/ "The largest  
cash reserves are found amongst major US IT companies, such as Apple,  
Microsoft and Google.") Didn't they in part amass all those riches while  
putting the security of nations and their infrastucture as well as the  
security of individuals at risk. Shouldn't they be made to spend more of  
their cash to make their products and services secure? Perhaps some of their  
fortunes should be nationalized since they seem to only view the world  
through 'dollar sign' goggles.


I agree that right now, free software is more secure but it does have at  
least one weakness, because it's free it is harder to develop. Lots of money  
is needed to build major advancements in pretty much any endeavor. One of the  
articles I cited above says that China has 100,000 people employed in their  
'cyber command tower,' I don't know if that's true but China has a phenomenal  
amount of manpower.


How many people in total do you think are working full time on free software?  
I don't know but I doubt if it's enough to be the complete answer in the time  
of all out cyber war.


Re 'shadow' or 'double' government, I'll definitely look at the links posted  
(Glennon, etc). Here is one scary group to me:  
http://www.alecexposed.org/wiki/ALEC_Exposed but I'm sure there are others  
with their own agendas. But the insistence on 'standing on principle' on the  
extreme conservative side has had success breaking our representative form of  
government by causing obstructionism to be the new norm in congress. I think  
the ALEC group's agenda supports a lot of that.

Re: [Trisquel-users] Talos' fund raiser didn't succeed

2017-03-10 Thread g . smyli

re '1 or 2 CPUs supported: both are AMD Opteron 6272 2.1GHz 16 cores per CPU  
(32 cores if selecting 2 CPUs)'


2.1GHz isn't especially fast but with 16 cores would that be like 2.1GHz X 16  
= 33.6GHz?


I guess it's like $2500 to $5000 USD.

I don't imagine they can guarantee against MITD attacks during shipping. Aye!  
Always something to worry about.

Re: [Trisquel-users] Wikileaks how CIA is spying. every Operative System

2017-03-09 Thread g . smyli

There is a whole lot of other bad actors doing the same thing but WikiLeaks  
isn't shining a light on them


“If that escalates into a cyberwar, Korea is still not capable of blocking  
the attack with its current capacity and personnel,” he added.
Currently, China has around 100,000 personnel for its cyber control tower  
while South Korea has around 600.

http://www.koreaherald.com/view.php?ud=20170309000792

Chinese retaliatory actions against the deployment of a U.S. anti-missile  
system in South Korea are expanding into the virtual world as alleged Chinese  
cyberattacks on Korean websites are increasing.

http://www.koreatimes.co.kr/www/tech/2017/03/133_225311.html

South Korea's Defense Ministry confirmed that classified materials from its  
computer network were leaked allegedly by North Korean intruders.

http://english.yonhapnews.co.kr/search1/260300.html?cid=AEN20161208000800320

US law enforcement is reportedly investigating a fresh wave of cyberattacks  
hitting progressive and liberal groups, with the hackers demanding tens of  
thousands of dollars in hush money after breaking into computer networks and  
pilfering sensitive data.

http://www.ibtimes.co.uk/russian-hackers-accused-fresh-cyber-extortion-spree-against-us-liberal-targets-1610011

Norwegian security officials have revealed a cyberattack by suspected Russian  
intelligence operatives that is strikingly similar to what occurred during  
the U.S. presidential election.

http://www.huffingtonpost.com/entry/trump-sanctions-norway-russian-cyberattack_us_58950db4e4b0406131371177?utm_hp_ref=cyber-security

The majority of cyber attacks on northern European targets come from machines  
in Russia, while China is the number one source of threats aimed at the US,  
according to new honeypot data collected by Alert Logic.

https://www.infosecurity-magazine.com/news/europe-bombarded-cyber-attacks/

France says it was the subject of 24,000 cyber-attacks against defence  
targets last year.

http://www.bbc.co.uk/news/world-europe-38546415
http://english.yonhapnews.co.kr/search1/260300.html?cid=AEN20161208000800320

Re: [Trisquel-users] Corrupt EFI?

2017-03-07 Thread g . smyli


result of command
bash: [-d: command not found
Legacy boot on HDD

Re: [Trisquel-users] Corrupt EFI?

2017-03-07 Thread g . smyli


Thanks danish,

I will take a look at these notes of yours today and post results when I get  
a chance. It seems that openBSD overwrote the EFI part in some way. May look  
for openBSD solutions also.


I have system recovery disks from HP meant to restore it to the original  
configuration so as a last result I might go there and then rewipe Windows,  
repartition and reinstall, after all, much practice makes perfect.


I've never seen that command except maybe noticing a strange [ somewhere  
trying to set up tripwire.


gsmyli_tr8@trisquelTower:~/Desktop$ [ -d /sys/firmware/efi ] && echo "EFI  
boot on HDD" || echo "Legacy boot on HDD"

Legacy boot on HDD

The tower is of course my desktop, the laptop is trisquelFlats, :)

Re: [Trisquel-users] Corrupt EFI?

2017-03-06 Thread g . smyli

Using gParted I only see an extended partition with three logical partitions  
for OSes, 1 encrypted partition for /home and 1 swap partition - No fat32 or  
any thing else.


I could only use the graphical install program and it never asked where to  
install grub.


As to the BIOS - EFI boot option or secure boot. I looked and looked to see  
how I could get Debian to boot by default and there seemed to be no way to do  
that, disabling EFI or making it secondary was not an option.


Unfortunately, I only sort of remember my BIOS password and that isn't good  
enough. So I can't check for a secure boot option at this moment but this  
notebook actually came with something like Windows 7.8 and it appears secure  
boot came out as an update for notebooks running 8.


My guess is I'll have to remove ROM battery to reset BIOS password.

[Trisquel-users] Corrupt EFI?

2017-03-06 Thread g . smyli


I decided to try Flidas on my laptop which is an HP Pavilion 15p-N066us.

It originally came with something like Winsnows 8 and I had it set up to dual  
boot with Debian for a while.


I guess it has a hidden partition called EFI and wants to boot from there and  
grub was installed elsewhere so I had to go through a few extra steps to boot  
up Debian on the Laptop.


Power ON - enter Administrator password
hit
then F2 to see settings options,
then F9 to see boot selection and
then arrow down from the EFI partition to boot from 'notebook hard drive'
then 'enter' and
the grub menu would appear

So I just lived with it like that for a year or so. I couldn't find any  
setting in the BIOS to stop it from requiring the EFI boot by default.


Then I ended by um, a mistake, giving the whole hard drive to OpenBSD. In my  
focus on how the heck to get a GUI  and other configurations done, I don't  
remember ever noticing that the above steps had gone away. Now it was simply,


Power ON - enter Administrator password
wait till boot up done and
enter username and
password
and type
startx

Now I install Flidas and it seems to require two attempts to boot to  
Trisquel.


Power ON - enter Administrator password
wait or do the above steps - F2 - F9 etc
screen goes black and nothing seems to happen
Hit 'ctl' + 'alt' + 'del' to reboot
Enter Administrator password
wait
See grub menu and hit enter - Trisquel is the only thing there.

Anybody have any ideas how I might fix this?
At least, it does get there.

Re: [Trisquel-users] Install trisquel 7 64bit on 40gb partition

2017-03-04 Thread g . smyli

I just did something similar on a laptop with the alpha version of Trisquel 8  
but I think it's pretty much the same for 7.


The install program suggests a plan but select the option to 'do something  
else' and click 'Continue'


Then it scans the hard drive and comes up with a graphic picture of it. On  
mine, I had to delete all the partitions to create 'free space' (highlight a  
partition and then click the - button)
then I could click on the free space to highlight it and then click on the +  
button below. In the little window that appears you would

1. change the size from 8 to 4,
2. put / in the mount on text box and
3. select from the drop down box encrypted (I can't remember exactly -  
something like 'physical volume for encryption,' it's the only option that  
mentions encryption)
4. immediately new text boxes appear for you to type in your encryption  
passphrase. (better not forget exactly what you put, of course I've never  
done a thing like that, heh, heh, smirk smirk)


I also added a swap space the same way and it didn't like that so I had to  
change that (there is a Change button too) to 'Do not use this partition' in  
the drop down box.


I guess it would be best to leave the other 40 GB alone for now and let your  
next project format it. But as you think best.


My 6 GB RAM probably won't need a swap, but I will have to learn how to  
encrypt my swap space sometime or other I think because otherwise clear text  
like data can end up in the swap on an otherwise encrypted system. I just  
won't use it for now.


Also, another option in the window for creating a partition is primary or  
logical. Primary is fine for what you have in mine. and until you click on  
the install button at the bottom right, you aren't committed. You can delete  
what you've done and start over. And 40 and 40 won't happen exactly but you  
will get close. Depends on geometry of the hard drive or something.


Hope that helps.

Re: [Trisquel-users] Hi, Houston, we've problems...

2017-03-02 Thread g . smyli

I thought it seems to be multiple issues and appears way above my pay grade  
although if it was me, I might choose to play around with it till I broke it  
completely. Thank God it usually all comes out in the wash with a fresh  
install! Heh, heh.

Re: [Trisquel-users] Install trisquel 7 64bit on 40gb partition

2017-03-02 Thread g . smyli


I could only find:

https://trisquel.info/en/wiki/install-trisquel-windows-dual-boot-0

which would be useful if you need to shrink an existing Windows to create  
free space for Trisquel.


This is really old but still helpful if the first link worked:

https://trisquel.info/en/wiki/full-disk-encryption-install

If you want to give more details no doubt someone here would help. For  
instance, Is it a new drive?


I am in Trisquel 8 (alpha), on a 19.5 GB partition and unbelievably it's 3/4  
full already. I have an encrypted 800 GB partition that I haven't started  
using at all so soon can start moving music and stuff to it. Initially, after  
install and getting most of my main applications installed, it filled about 5  
to 6 GB.

Re: [Trisquel-users] DuckDuckGo Ups Ante: Gives $300K to ‘Raise the Standard of Trust

2017-03-01 Thread g . smyli

I can't remember if that has happened to me. It has seemed to be down for a  
while (https://searx.me) a couple of times lately. I also use it javascript  
disabled.

Re: [Trisquel-users] Hi, Houston, we've problems...

2017-03-01 Thread g . smyli

Sorry to hear the Trisquel 6 to 7 upgrade didn't work so well. Me, I would  
either start over by reinstalling the good working Trisquel 6, or burn a  
Trisquel 7 'mini' install to a dvd and try installing from that directly.


But

You might try this regarding Internet connection
(you can do 'ipconfig \all' in Windows to learn what ip is working in Windows  
and repeat that with the gateway most likely being xxx.xxx.xxx.1 whereas your  
ip is xxx.xxx.xxx.not 1. My example below uses a fairly standard default home  
network - 192.168.0.0 but others certainly exist.)



In terminal:

$ ip link
---just to make sure what eth0 is called,
Mine is called enp2s0 but ifconfig -a shows that also so since ifconfig -a in  
yours shows eth0 I will assume it's safe to assume dev name is eth0.


$ ip link show dev eth0
---just to make sure it's UP,
---if it's not, try
$ ip link eth0 set up
$ ip addr 192.168.0.100/24 broadcast 192.168.0.255 dev eth0
---Guessing about your network. .255 is usually the broadcast address
---Also guessing that no other device already using .100.
$ ip route add default via 192.168.0.1
---in the above example, the router/gateway's ip would usually be 192.168.0.1

Then you need to add nameservers to /etc/resolv.conf, I use openNIC name  
servers but you might work to use your gateway as nameserver also. Additions  
made to /etc/resolv.conf may only be temporary as it says in mine at the top  
of the file:
"# Dynamic resolv.conf(5) file for glibc resolver(3) generated by  
resolvconf(8)

# DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN"

if all that worked, a '$ ping -c 1 google.com' should resolve to google's ip  
address more or less instantly.
( I did an install recently that needed for me to perform these steps and I  
am reading from the notes I made, three other commands I noted I will pass on  
just in case they would be needed: $ ip addr flush dev eth0 - $ ip route  
flush dev eth0 - $ ip link set eth0 down - these will erase what you've done  
so you can start over)


Seems like some daemon that is supposed to set up your Internet connection  
isn't starting. NetworkManager maybe. If the above works you might have to do  
it every time you reboot because the service that is supposed to take care of  
it isn't running.

Re: [Trisquel-users] Installing Trisquel to replace Windows 10

2017-03-01 Thread g . smyli


I agree with Heather,
You are trying to install while in Windows and I would have no idea where to  
begin doing that


but if you have shrunk the C drive in Windows;
 and successfully burned a Trisquel iso DVD;
 and have your BIOS settings set to allow you to boot from DVD drive,

then you should be able to reboot into the OS on your DVD and go from there.

Re: [Trisquel-users] Lenovo thinkapds(LibreBoot )buying guide


https://libreboot.org/faq/#intel kind of ruined my day.

Maybe my January 2010 desktop may not be too bad as it seems not to have the  
ME installed at least. Probably one of the last to not get that technology.  
MSI and Intel H57 Express Chipset.

Re: [Trisquel-users] editing multiple photos in the same way


Thanks Magic for the clarification, I understand the < now

I also did find gmic and the gimp-gmic plugin in Flidas repository and  
installed them. Will try that out also. The http://gmic.eu/ website looks  
very cool.


Gracias :)

Re: [Trisquel-users] Lenovo thinkapds(LibreBoot )buying guide

So ThinkPads only work? A local PC recycling outfit has a bunch of impressive  
looking ThinkCentre units with i5 cpus and something like 3.2 GHz for $169. -  
Not librebootable?

Re: [Trisquel-users] editing multiple photos in the same way

Adfeno, Thanks for this, I adventured into ImageMagick for the first time.  
Fun.


Re..."Note 3: Please replace the lines starting with "/home/adfeno" to the
full/absolute path to the images that you want to edit. This can be done
by selecting all of then in file manager (default for Trisquel is
Nautilus), copying them, pasting in a text editor, and this should give
the paths you want to copy again and paste in the area I just described."


Where exactly? I did select all - copy - paste into text editor but what  
next?


I was not able to get a while read -r loop to work so I ended up replacing  
the variable "$each_original_image" with an actual image name (path I  
suppose, but I ran the command from the same folder - convert testImage.jpg  
-scale "854x1280" "{testImage.jpg}").


And does the final < in your script belong there?

Re: [Trisquel-users] Trisquel 8 is STILL not out yet?

2017-02-19 Thread g . smyli

Just have to say, I am diggin' the heck out of Trisquel8 right now. Been  
using it for several weeks exclusively and I like the Mate DE and it's really  
fast. I have pretty much everything I need, Gimp, Bluefish, Keepassx, Zim,  
Transmission, claws-mail, and I'm sure more. I was able to get Guix working  
and got avidemux and hexchat from fsf that way (with some hoop jumping but  
Guix is working for me anyway). I guess it's not even beta but man, I like  
it.


http://jenkins.trisquel.info/makeiso/iso/

Re: [Trisquel-users] How to install GCC 6.3 on trisquel 7

2017-02-18 Thread g . smyli


I have these entries in .bashrc

LANG="en_US.utf8"
export LANG

export  
INFOPATH="/home/gsmyli_tr8/.guix-profile/share/info${INFOPATH:+:}$INFOPATH"

export PATH="$HOME/.guix-profile/bin:$HOME/.guix-profile/sbin:${PATH}"

export GUIX_LOCPATH="$HOME/.guix-profile/lib/locale"

I also ran:
localectl list-locales
sudo locale-gen en_US
sudo locale-gen en_US.UTF-8
sudo update-locale

So far, still "Invalid argument"

Thanks, I'll seek help at
https://www.gnu.org/software/guix/help/

Since guix did get me hexchat maybe I'll try using #guix channel on  
irc.freenode.net.

Re: [Trisquel-users] How to install GCC 6.3 on trisquel 7

2017-02-16 Thread g . smyli


ADFENO, thank you for those instructions, here is a summary of what I did.
My install of Flidas did not have a .local/share/icons directory so I added  
the step to make it.


**Installing brasero via guix package with goal of getting it into the main  
menu.**


cd ~/.local/share
mkdir icons

guix package -i adwaita-icon-theme
guix package -i hicolor-icon-theme

cd icons
ln -s "../../../.guix-profile/share/icons/Adwaita"
ln -s "../../../.guix-profile/share/icons/hicolor"

guix package -i brasero

cd ~/.local/share/applications
ln -s "../../../.guix-profile/share/applications/brasero.desktop"

After these steps I saw an entry for Brasero in the 'Sound and Video' section  
of Main Menu but the icon was generic. It sort of looks like a square piece  
of black film with the lower right corner curled up. I used doolio's tip:  
Control Center > Main Menu > Sound and Video > Brasero > (left click)  
Properties > and click on the icon upper right corner > and navigated to  
~/.local/share/icons/hicolor/48x48/apps/brasero.png > Open and the icon  
showed up in the Control Center > Main Menu dialog. It did not show up in the  
actual Main Menu but after I rebooted, it was there. And clicking on it  
brings up Brasero so all is good for Brasero.


It seems like Control Center > Appearance should list the Adwaita Theme but  
it does not. It seems like selection of an appropriate icon should be  
automatic (and now after a reboot maybe it will be, I'll look for another  
package from the guix packages to install).


Thanks again for you guidance, it has been a big help.

Re: [Trisquel-users] How to install GCC 6.3 on trisquel 7


guix package -I
warning: failed to install locale: Invalid argument
gs-fonts8.11out 
/gnu/store/mh3mx042h5ayvg9mgmfln4kwvs102lzp-gs-fonts-8.11
font-dejavu 2.37out 
/gnu/store/8rid533v40vawypqqckxx6v30sc89yby-font-dejavu-2.37
font-gnu-freefont-ttf   20120503out 
/gnu/store/dl11724dj1z6dsw7i82jmavk75ixp0b8-font-gnu-freefont-ttf-20120503
glibc-utf8-locales  2.24out 
/gnu/store/bhj5xdwwd2dg770lmlks7hyny8vzjm9x-glibc-utf8-locales-2.24
glibc-locales   2.24out 
/gnu/store/hyi7svs0ds79wrcg5l0nr36zzjikqj7i-glibc-locales-2.24
emacs   25.1out /gnu/store/6l2fiqgj4g1018xkqn3mfyrj9r2zh9k6-emacs-25.1
alsa-modular-synth  2.1.2   out 
/gnu/store/0f4drni8gikx09sq1bfp4ymbvnarfa42-alsa-modular-synth-2.1.2
avidemux2.6.12  out 
/gnu/store/ajxz0h6i3h3809di9qf8n7hjzp8g3gkg-avidemux-2.6.12
extremetuxracer 0.7.4   out 
/gnu/store/i1rp7jy9frxivnqwmi3a8dz57jsmbqp7-extremetuxracer-0.7.4
ffmpeg  3.2.4   out /gnu/store/m8vd71axx8n6jbq8pdm8iqrn9qkvnb74-ffmpeg-3.2.4
folks   0.11.2  out /gnu/store/h7kpmcklpf1hpz4fiqln3m1sn0ni2jrs-folks-0.11.2
mysql   5.7.17  out /gnu/store/ylybbdz5xi8xvcvs4qanyjp047sg424a-mysql-5.7.17
tor 0.2.9.9 out /gnu/store/0p09qsfpyhscxp250wcsld9nbwkgdpzn-tor-0.2.9.9
sound-theme-freedesktop 0.8 out 
/gnu/store/xyyvrbkzb5331c7ggzqzsv90hrn40f7d-sound-theme-freedesktop-0.8

Re: [Trisquel-users] How to install GCC 6.3 on trisquel 7


Good tip, avidemux is listed in the sound and video section. Cool.

Re: [Trisquel-users] How to install GCC 6.3 on trisquel 7

Thanks, that worked. I thought I had done that as regular user but I guess  
not.

Re: [Trisquel-users] How to install GCC 6.3 on trisquel 7

I have managed to get extremetuxracer and avidemux working via guix package.  
Cool!


I thought it might be good to post a 'how to' for guix on flidas. Would like  
to help out and unfortunately I am not a good programmer but could maybe add  
to documentation.


I do have some remaining issues however.

1. extremetuxracer and avidemux or any other fsf install comes without any  
icon or entry to my start menu. The programs also were not found as commands  
from the terminal.


I finally found I could get them running from the terminal like this:
/gnu/store/ajxz0h6i3h3809di9qf8n7hjzp8g3gkg-avidemux-2.6.12/bin/avidemux3_qt5

of course, this part, /gnu/store/ajxz0h6i3h3809di9qf8n7hjzp8g3gkg, is  
different for every program so it takes a little work to locate and create  
the actual path for the command.


This doesn't seem very user friendly. Am I missing something? It's not a deal  
breaker, will be fun to try to make my own icons and launchers, etc.


2. Maybe this is related, I don't know but I have tried multiple fixes for  
this warning and still I get this error:


$ guix pull
warning: failed to install locale: Invalid argument


ADFENO's point re authorizing substitutes was taken too late and first  
attempts to install emacs took hours and guix was filling up my partition.  
But I was able to add that step and after running the garbage collection  
command the situation seems better: /usr is 4.2 GB, /gnu is 3.1 GB and /var  
1.1 GB on a 25.5 GB partition.

Re: [Trisquel-users] How to install GCC 6.3 on trisquel 7


Awesome.

It's still going.

I may have posted the link commands backwards as I was scrolling up the  
history in the shell and probably posted them in the reverse order.


What does the daemon do? Look for updates?
I guess I might try to reverse the process done choosing systemd or maybe I  
can set up a cron like script to get it going.


'So once the hello package under root installs check that it was successful  
by checking the list of installed packages with:


guix package 'I

Then you close that root terminal and use guix with your normal user  
account.'


I look forward to doing those steps.

I guess I might try to reverse the process done choosing systemd or maybe I  
can set up a cron like script to get it going.

Re: [Trisquel-users] How to install GCC 6.3 on trisquel 7


Thanks again doolio. But eeks, what have I done!

I saw running systemctl list-units:
guix-daemon.service   loaded active running   Build  
daemon for GNU Guix


so the daemon is running, I can just start it manually whenever I want it.

I did do the Build-Environment-Setup.

I tried a command
guix package -i glibc-locales
bash: guix: command not found

as sudo also same result.

I found the steps to make the command available and tried
guix package -i hello as root and now it's going nuts, looks like it's  
downloading the universe!

Re: [Trisquel-users] How to install GCC 6.3 on trisquel 7


Thanks for the confirmation. Really appreciate the help :)

So I did move it to /tmp and was able to proceed.

Now at step 5
I chose the 'If your host distro uses the systemd init system' option

I get:
systemctl start guix-daemon && systemctl enable guix-daemon
Failed to execute operation: Too many levels of symbolic links

I have created these links
ln -s ~root/.guix-profile/lib/systemd/system/guix-daemon.service  
/etc/systemd/system/


ln -sf /var/guix/profiles/per-user/root/guix-profile   
~root/.guix-profile


Any ideas?

Re: [Trisquel-users] How to install GCC 6.3 on trisquel 7

Have question re  
https://www.gnu.org/software/guix/manual/guix.html#Binary-Installation


Step 2 As root, run:

# cd /tmp
# tar --warning=no-timestamp -xf \
 guix-binary-0.12.0.system.tar.xz
# mv var/guix /var/ && mv gnu /

and I get
tar: guix-binary-0.12.0.system.tar.xz: Cannot open: No such file or directory
tar: Error is not recoverable: exiting now

Did the manual just forget to tell one to move the tarball to the /tmp  
directory?


I am trying this in Flidas.

Re: [Trisquel-users] Wireless problems with free software compatible hardware

I agree if it can scan it should work. Maybe it is on the router side, like  
WPS enabled? But I don't imagine it cares what OS you are using.


Have you tried rebooting the router to clear it's cache?

We assign IPs manually on my LAN and recently changed the IP of one computer.  
The router wouldn't let that computer back on the network until we had  
rebooted the router effectively clearing the cache. I guess one IP for one  
mac is enforced.

Re: [Trisquel-users] Qubes OS thoughts

I downloaded the latest Tails. They now have a tails down loader plugin for  
Tails that does the download and then verifies it with a click of a button.  
Pretty user friendly. I hope it's secure.


Burned it to a DVD and it actually runs pretty well on my desktop. Looks like  
Gnome 3.


While a thumb drive can be altered, a DVD -R can't. But it wouldn't be any  
good to carry on your key chain.

Re: [Trisquel-users] I think I caught Widigo

Operation Windigo is a highly sophisticated attack, ever changing, linked to  
command and control centers and comromising web servers serving up malicious  
dns answers so that the victim is relayed through chains of compromised  
servers, installing back doors (accessible through ssh and through http  
headers) and spam bots. Because my case was evidenced in the same ways that  
were reported back in 2014 or earlier, it may be that it was someone not  
associated with the 'gang' that started it. I say that because it's reported  
that every time an analysis about their operation was released, they quickly  
altered their code to hide it from the testing tools that security  
professionals had developed.


I mentioned a pdf at the end of my opening post. It is 69 pages and really  
goes into detail. Any one who thinks Linux is very secure ought to read it. I  
don't think it is secure enough by default. Below is an opening summary from  
that document to wet your appetite.

(It appears that this statement was made around February, 2014)

'•   The Windigo operation has been ongoing since at least 2011
 •	 More than 25,000 unique servers have been compromised in the last two  
years
 •	 A wide range of operating system have been compromised by the  
attackers; Apple OS X,
OpenBSD, FreeBSD, Microsoft Windows (through Cygwin) and Linux, including  
Linux

on the ARM architecture
 •	 Malicious modules used in Operation Windigo are designed to be  
portable. The spam-sending
module has been seen running on all kinds of operating systems while the SSH  
backdoor has been

witnessed both on Linux and FreeBSD servers
 •	 Well known organizations including cPanel and Linux Foundation  
(kernel.org) fell victim of this operation
 •	 Windigo is responsible for sending an average of 35 million spam  
messages on a daily basis
 •	 More than 700 web servers are currently redirecting visitors to  
malicious content
 •	 Over half a million visitors to legitimate websites hosted on servers  
compromised by Windigo

are being redirected to an exploit kit every day
 •	 The success rate of exploitation of visiting computers is approximately  
1%
 •	 The malicious group favors stopping malicious activity over being  
detected
 •	 The quality of the various malware pieces is high: stealthy, portable,  
sound cryptography

(session keys and nonces) and shows a deep knowledge of the Linux ecosystem
 •   The HTTP backdoor is portable to Apache’s httpd, Nginx and lighttpd
 •	 The gang maximizes available server resources by running different  
malware and activities

depending on the level of access they have
 •	 No vulnerabilities were exploited on the Linux servers; only stolen  
credentials were leveraged.
We conclude that password-authentication on servers should be a thing of the  
past.'


The latest reporting I've been able to find about Windigo is from 2015 but in  
my searching I've seen that there is an ever growing listing of exploits that  
attack GNUlinux. One reason is the popularity of Android. These days people,  
including hackers, can do almost all their computing on their phone.


Also, Jodiendo's post here fits right in:
https://trisquel.info/en/forum/hacker-news-twitter-dnschanger-malware-back. I  
disabled the dns server on my routers which though commercial run some form  
of linux I am sure.


Here's a quote from an interview with Linus Torvalds in the November, 2016  
issue of Linux Pro Magazine:


"But, I have to say, some of those attack people are pretty smart people, and  
clearly they are not all criminals; some of them work for the government."


Re the firmware issue, I need to install tails to fresh thumb drive and try  
that.

Re: [Trisquel-users] I think I caught Widigo


sudo md5sum /lib/x86_64-linux-gnu/libkeyutils.so.1.5
45598330193c7f910453f603b358edd4  /lib/x86_64-linux-gnu/libkeyutils.so.1.5

That doesn't look right, eh?

Re: [Trisquel-users] how would I go about dual booting debian and trisquel,

I don't think I have ever shrunk a partition except C drive in WinNose but a  
friend of mine does it all the time I think just using GParted. And I think  
the Live installer may give you that option.


Re the logical partition:
I must have made the 300 GB logical partition first thing, then I can click  
on it and find a 'create' or 'add' option to carve out a slice for the /  
mount point for each OS during their install.


OS1 is Trisquel 8, OS2 is Fedora 25, And, just installed, OS3 is OpenSuse  
42.something Leap. I'm on a roll now!


I have about 90 GB free space and an available primary partition that might  
go to some kind of BSD but grub won't see it I guess so I'll have to put that  
boot loader on a stick or CD.

Re: [Trisquel-users] how would I go about dual booting debian and trisquel,

If you mean the most basic I guess it's just 124 GB for Debian mounted on /,  
and 124 GB for Trisquel with 2 for swap. If you do it this way, just encrypt  
them both. That should be real easy if your not confident you understand  
more. That will be blanket encryption but I imagine that's ok. /home will be  
made within the / so no separate partition needed.


In one way it makes sense to only give 15 GB to the root which is mount point  
/ because my entire OS and applications right now occupy 5.6 or so GB. So 15  
or 20 ought to last me.


And if I mount /home in its own partition then in the future I can reinstall  
or change things around without having to destroy my /home. Movies, Music,  
Images, Books lots of GB worth of data I might accumulate over a long time.  
So I could make that one really big. Also, this way I can get at the data  
from whichever OS I boot up to. Come to think of it, encryption will apply to  
the entire partition so in otherwords, if /home is on it's own partition you  
can encrypt just /home and choose not to encrypt the / partitions.


250 total
-20 Debian  /
-20 Trisquel /
-2 Swap
---
= 208 for /home


I planned it out on paper and made a form to keep notes as the installs went  
down, a place to write keys, passwords network information etc.


Anyway, have fun!

Re: [Trisquel-users] how would I go about dual booting debian and trisquel,

Something simple?

Partition 1 Label TrisquelMount Point /Ends up being like /dev/sda1
Partition 2 Swap Ends up being /dev/sda2
Partition 3 Label HomeMount Point /home Encrypted /dev/sda4
Partition 4 Label Debian...Mount Point / ...Ends up being /dev/sda4

If you can't Label that won't matter.

The first three partitions would be created with the trisquel installer
leaving enough space for the fourth one to be created with the Debian
installer.

With the Debian installer choose the /home partition with instructions to
mount it at /home but not to format it.

Allow grub to be installed both times and since the Debian install is
installed last, its grub should be the one you see after that. At some point
during the Debian install you should be asked for the encryption key.

If you have trouble getting the Debian installer to mount the swap partition
you can deal with it later by copying from Trisquel the line for the swap
partition in /etc/fstab and pasting that line into the /etc/fstab file in
Debian. (you have to mount the Debian partition first (or vice versa
depending on what OS you are using at the time, and do this as root)

That would be the simplest way IF IT WORKS, heh heh. We had a lot of
discussion before about the partitioning and I had a full Trisquel install
only using about 5 GB of a 20 GB partition with a large separate /home
partition.

If you can choose to set / in Debian to be a bootable Logical partition
rather than a Primary then you will have the possibility to install more OSes
in other Logical partitions. I was up to 5 or 6 before I recently started
over. but I used a Live OS and pre-partitioned my hard drive that time. That
would also leave your fourth and final primary partition possibilities open
if you leave free space on the HD.

We had quite the disscussion re partitioning here:
https://trisquel.info/en/forum/partition-table-suggested-installing-three-gnulinux-systems
if you want to get more complicated or precise.

Re: [Trisquel-users] Nothing Important!! Just Eager to Show You My Trisquel Mini on a USB install.


Nice!

Re: [Trisquel-users] I think I caught Widigo


Re Trisquel infrastruture: I sure hope not. I'm loving Trisquel 8 so far.

I definitely got a root kit though so I am reformatting my whole system. And  
it really lit a fire under my fanny to figure out much more about how to  
protect myself. The internet is one scary monster these days. I don't know  
where it came from.


Just reinstalled Trisquel 8 and ran all the tests listed in my opening and  
seem clean. I had already reinstalled once but I decided to do a complete  
reformat of a multiboot system. Honestly, I don't know if that will be  
enough. I had tails on a stick but now my PC doesn't seem to want to  
acknowledge the possibility of booting to a usb device. Maybe firmawre was  
altered. I'd hate to think it but...


I installed noscript right away because I've read that javascript presents  
one vulnerability to the dns redirect. And I learned that noscript's ABE  
functionality is no joke. It has the intention of stopping malware from  
learning about your LAN and passing exploits to your routers etc.


re our server, there was a test I read about to try and it came out ok:

Test to see if a server is compromised with Linux/Cdorked (part of the  
Windigo operation family)

Command and result on infected:
$ curl -i http://myserver/favicon.iso | grep "Location:"
Location: http://google.com/

My Trisquel.info test:
curl -i https://trisquel.info/favicon.iso | grep "Location:"
  % Total% Received % Xferd  Average Speed   TimeTime Time   
Current

 Dload  Upload   Total   SpentLeft  Speed
  0 00 00 0  0  0 --:--:--  0:00:01 --:--:--  
0

Location: https://trisquel.info/en/favicon.iso

But if Abrowser complains about a cert, I'll be getting out of there from now  
on!


Maintain a huge hosts file.

Another up and coming attack vector is trusted apps. I'm not sure I want to  
easily trust Firefox plugins.


re hash sums:
Some hash sum and other info is at  
https://github.com/eset/malware-ioc/tree/master/windigo/
there is a list of md5hash sums on infected sshd, ssh, ssh-add and target of  
the libkeyutils.so.1 symbolic link, also httpd, nginx, lighttpd and bind. I  
only have ssh, ssh-add and libkeyutils.so.1.5. and my hash sums of those  
don't fit the Windigo profile.


Well, I'm off to adjust my about:config (just found out about about:about,  
kind of cool.)

Re: [Trisquel-users] Wifi Troubles in Trisquel 8


Maybe you could add it to the issues list here:

https://trisquel.info/en/wiki/flidas-release-issues

Re: [Trisquel-users] I think I caught Widigo


Uruk eh? I'll have to check it out.

If you can't get to the forum with Abrowser you would be the fourth person I  
know of having had that issue recently. 2 with Midori and 2 with Abrowser.  
brashley46 posted screenshots at  
https://trisquel.info/en/forum/flidas-and-abrowser of midori trouble and  
dany4president opened up a similar post.


Browsers having trouble going where they are trying to could certainly be a  
sign of our web server being compromised. DNS misdirection is the first step  
in getting victims to land at a site that installs malware on their computers  
before it finally serves up the web page requested like a proxy server. My  
experience was after accepting the certificate overriding what Abrowser  
wanted me to do, trisquel.info took minutes to finally load up using all  
available cpu cycles while waiting. The initial web server wouldn't be  
serving malware but rather a very limited (to avoid detection) number of  
redirections to vulnerable clients (come to think of it, I remember seeing a  
trisquel cookie that simply said, "has_javascript" or something to that  
order). I do not have much expertise in all this but the scary thing is that  
a compromised server starts with a back door that is very hard to find and  
get rid of. And that might come about if say the web master used ssh from  
another server already compromised thereby having his credentials stolen. But  
all the information I can find on the Windigo family of malware is at least a  
year old and most two years or more. Throughout all that time the gang behind  
was continually changing components and how it worked. Every time a study was  
released on it, they would change it so that the known info no longer  
applied.


After a new install, I am having no problem accessing the forum with  
Abrowser, now. Trisquel 8 with Mate Desktop looks really cool and I guess  
it's an early alpha or whatever so some hiccups are to be expected. I was  
just having problems installing brasero and gave up for now. Last night I  
tried banshee and was surprised by a hook download of 172 new CA-certs. After  
my recent experience that made me nervous. I just uninstalled it.


Looking at Uruk web page, is that xfce desktop? Oh, says mate. Is that with  
Docker? What kind of browser do you get? I see they have done a lot of work  
in the package management area.


Well, we all got to be on our toes :) cause something may be afoot. Heh,he.

Re: [Trisquel-users] LibreOffice freezes when opening large .pptx files


Maybe this would work
"Converting Many Microsoft Office Files into OpenDocument Format

The Document Converter Wizard will copy and convert all Microsoft Office  
files in a folder into LibreOffice documents in the OpenDocument file format.  
You can specify the folder to be read, and the folder where the converted  
files are to be saved.


Choose File - Wizards - Document Converter to start the wizard."

So maybe you can convert the file first to libreoffice format.

from https://help.libreoffice.org/Common/Using_Microsoft_Office_and

Re: [Trisquel-users] Black screen

I like bluefish for html, css and javascript. I don't know if it does any  
other languages.

Re: [Trisquel-users] Need help with safe partitioning (making files non recoverable)


Thanks, Magic, will give it a try.

Re: [Trisquel-users] Flidas and Abrowser


I think I will open a new thread about below details

Those screenshots seem to be about the same as what I had. I don't know if  
this is related but yesterday I installed chkrootkit and ran it and got this  
message:


Searching for Linux/Ebury - Operation Windigo ssh...Possible  
Linux/Ebury - Operation Windigo installetd


This was in trisqel 8 which I had been enjoying for the last couple of days.  
I ended up doing a complete reformat and reinstall and now Abrowser is  
working fine.


One of the many things this Linux/Ebury - Operation Windigo ssh thing does is  
mess with the dns to cause the victim to go to fake websites.


By the way, my fresh install still gets the same message from chkrootkit but  
the follow up tests to determine a false positive are coming up better. I'm  
not sure if I'm out of the woods yet.


Some more info here
https://www.cert-bund.de/ebury-faq

Re: [Trisquel-users] I think I caught Widigo

O.K, that's reassuring, thanks guys. Also I haven't had a reason to use ssh  
for a while but I'll remember to set up the key-based authentication when I  
do. Thanks again.

Re: [Trisquel-users] I think I caught Widigo


This a little more info.
1 Yes - It does have a different name.

locate libkeyutils.so
/lib/x86_64-linux-gnu/libkeyutils.so.1
/lib/x86_64-linux-gnu/libkeyutils.so.1.5

sudo md5sum /lib/x86_64-linux-gnu/libkeyutils.so.1.5
45598330193c7f910453f603b358edd4  /lib/x86_64-linux-gnu/libkeyutils.so.1.5

file /lib/x86_64-linux-gnu/libkeyutils.so.1
/lib/x86_64-linux-gnu/libkeyutils.so.1: symbolic link to libkeyutils.so.1.5

It's still not bloated to above 25 kb:
ls -als /lib/x86_64-linux-gnu | grep libkeyutils.so.1.5
   0 lrwxrwxrwx  1 root root  18 Jan 17 21:56 libkeyutils.so.1 ->  
libkeyutils.so.1.5

  16 -rw-r--r--  1 root root   14256 Dec 10  2015 libkeyutils.so.1.5

The netstat test is clean and and the helper file 'libns2.so' is not found so  
this reinstall seems ok.



2nd Question: I will look into at that Debian page you cited. It's not  
something I've ever done so it may take a while to process.


Trisquel 8 is here:
http://jenkins.trisquel.info/makeiso/iso/

repository info
sudo apt-get update
Hit:1 http://es.archive.trisquel.info/trisquel flidas InRelease
Hit:2 http://es.archive.trisquel.info/trisquel flidas-security InRelease
Get:3 http://es.archive.trisquel.info/trisquel flidas-updates InRelease  
[6,082 B]

Hit:4 http://es.archive.trisquel.info/trisquel flidas-backports InRelease
Get:5 http://es.archive.trisquel.info/trisquel flidas-updates/main Sources  
[310 kB]
Get:6 http://es.archive.trisquel.info/trisquel flidas-updates/main amd64  
Packages [765 kB]
Get:7 http://es.archive.trisquel.info/trisquel flidas-updates/main i386  
Packages [756 kB]

Fetched 1,837 kB in 2s (654 kB/s)
Reading package lists... Done

[Trisquel-users] I think I caught Widigo


I installed Trisquel 8 on 01/12/2017.

Soon, I think it was the first day but am not sure, I had a problem with  
Abrowser and the Trisquel site which I posted here -  
https://trisquel.info/en/forum/flidas-and-abrowser


I ended up without Abrowser and was pretty happy using dooble except I didn't  
figure out how to download with it. I think it might be a 'save link'  
function but that didn't occur to me


Yesterday,
I downloaded, unpacked and did a dd to thumbdrive of GuixSD.

Later I installed bleachbit -  
http://archive.trisquel.info/trisquel/pool/main/b/bleachbit/bleachbit_1.0-1_all.deb


but also tried to install the latest version -  
https://www.bleachbit.org/download/file/t?file=bleachbit_1.12_all_ubuntu1604.deb


I was using the terminal due to the browser issue, wget and maybe ftp, the  
terminal's history function and copying and pasting. I screwed up and got my  
commands mixed up at some point during the bleachbit story and suddenly the  
terminal filled up with a bunch of binary looking stuff. It might have  
happened when I ran something like this command 'sudo dpkg -i  
bleachbit_1.0-1_all.deb' I mean I screwed up and maybe entered 'wget sudo  
dpkg -i bleachbit_1.0-1_all.deb' in the terminal.


Anyway, I don't know what happened but it was unsettling so a little while  
later I downloaded chkrootkit and ran it. Got the result below.


Searching for Linux/Ebury - Operation Windigo ssh...Possible  
Linux/Ebury - Operation Windigo installetd


Looking up further info saw the possibilty of a false positive but follow up  
tests didn't turn out well.


I think I flunked every test listed here:
https://www.cert-bund.de/ebury-faq

# ipcs -m
-- Shared Memory Segments 
keyshmid  owner perms  bytes  nattch
0x06e0 65538  root  66632831280
(that is an exact match to the example on the cert-bund website, the good  
news was this, "Please note that the SHMs are only created on the first event  
of data exfiltration – so immediately after a reboot of the system, the  
malicious SHMs will probably not show up in the output of 'ipcs -m'." So  
maybe I caught it before it got to do its dasterdly deeds.)


Cert-bund says, "On Linux-based systems, an additional shared library file  
'libns2.so' is installed and the existing libkeyutils file is patched to link  
against this library instead of libc6. The malicious 'libns2.so' file can be  
located by running the following command, which should not return any results  
on clean systems. "


I had it:
# find /lib* -type f -name libns2.so
/lib64/libns2.so

I think this is like a backdoor waiting to be knocked on
netstat -nap | grep "@/proc/udevd"
george@Trisquel:~/myScripts$ unix  2  [ ACC ] STREAM LISTENING 
 5597 2529/atd @/proc/udevd


Based on the results of 'ipcs -m', 'find /lib* -type f -name libns2.so' and  
netstat -nap | grep "@/proc/udevd" I figured it was a high probabilty I was  
infected and trying to clean wasn't an option.


So I reformatted and reinstalled.
Currently Abrowser works like it should and haven't had any problem with  
Trisquel's certificate.


chkrootkit still comes back with:
Searching for Linux/Ebury - Operation Windigo ssh...Possible  
Linux/Ebury - Operation Windigo installetd


This file is mentioned (I'm not sure what I saw yesterday before  
reformating):

find /lib* -type f -name libkeyutils.so* -exec ls -la {} \;
-rw-r--r-- 1 root root 14256 Dec 10  2015  
/lib/x86_64-linux-gnu/libkeyutils.so.1.5


but according to the cert-bund, "If any file is larger than 25 kilobytes in  
size, it is most probably a malicious version of the library," and mine is  
only around 14 kb.


ls -als | grep libkeyutils*
Binary file libkeyutils.so.1.5 matches
 and a simple 'ls -als' shows:
   0 lrwxrwxrwx  1 root root  18 Jan 17 21:56 libkeyutils.so.1 ->  
libkeyutils.so.1.5

  16 -rw-r--r--  1 root root   14256 Dec 10  2015 libkeyutils.so.1.5
in the list.

but this comes up clean:
find /lib* -type f -name libns2.so

and this comes back empty as well:
sudo netstat -nap | grep "@/proc/udevd"

So now I think there is a good chance I am not infected, but still am wary.
 From what I've read this 'libkeyutils.so.1 -> libkeyutils.so.1.5' is really  
important. How does one verify they have a good version? Any other  
recommendations? Maybe I am just paranoid?


I skimmed through a 69 page pdf called Operation Windigo yesterday and this  
is a serious threat. People often say Linux is secure but reading this  
document would have made my hair curl if I had any. That's here if anyone is  
interested:

http://www.welivesecurity.com/wp-content/uploads/2014/03/operation_windigo.pdf

But even so I am really liking Flidas

Re: [Trisquel-users] Need help with safe partitioning (making files non recoverable)

So I am missing bleachbit in synaptic for Trisquel 8. Do you think one of  
thse http://www.bleachbit.org/download/linux would work?

Re: [Trisquel-users] Qubes OS thoughts

An 8 GB flash drive can be had in the Seattle area for about $4 or $5.  
According to https://tails.boum.org/install/debian/index.en.html you need at  
least 4 GB. I put it on a flash drive housed in metal with a hole so that it  
fit my key ring. Thought that was kind of a cool way to go, I've always got  
it with me even though I seldom use it. Flash drives are probably more prone  
to wearing out.


Installing it to a DVD would be cheaper.

Re: [Trisquel-users] Flidas and Abrowser

In Midori you got saw the certificate issue? And did the web site load up  
fine?

[Trisquel-users] Flidas and Abrowser

After installing Trisquel 8 I went to trisquel.info in Abrowser and Abrowser  
squacked about inproper certification given by the website. I looked at the  
cert and it seemed in order so I told Abrowser to import it. But  
Trisquel.info took minutes to load. Extremely slow load for only  
trisquel.info was a persistent problem over the last couple of days. I tried  
tweaking with DNS settings, using the IP instead of the domain name, using  
Firefox speed hacks suggested at various sites and nothing worked. I try to  
go to trisquel.info and the message says something like 'retrieving data from  
trisquel.info' but it just sits there for maybe two to three minutes and  
meanwhile the browser was unresponsive. I brought up 'top' in the terminal  
and saw Abrowser using 103% of cpu. If I ping trisquel.info reponse time is  
lightenning fast. This really seemed to only affect trisquel.info though  
searx.me and other sites may have been a tick slow.


Using synaptic I uninstalled Abrowser.

Now, I don't see Abrowser listed in the repository.

Am a little worried about security at this point. Has anyone else experienced  
anything like this? Any recommendations?


I am using Dooble at the moment, a brand new one to me and seems nice so far.

Re: [Trisquel-users] Qubes OS thoughts

Your college would know you logged in so you can get credit for your homework  
etc. If you use tor in tails your ISP wouldn't know because the first thing  
that happens is tor sets up an encrypted channel to the tor network. No doubt  
they probably know you used tor but that would be all. That's no crime.


You can get tor for Trisquel or almost any OS but I found that it didn't  
always work unless I found the right tweaks (and I'm no pro either) but tails  
seemed to come pretweaked you might say. The PC just needs permission in the  
BIOS to be able to boot from usb first if available (assuming you install it  
to a flash drive).


If you have the time you might give tails a try. It's a lot easier than  
QubesOS I would say and also, it's a live OS so if you don't think it fits  
your needs all it cost you was a flash drive and you can always reformat that  
and use it for something else.

Re: [Trisquel-users] Trisquel 8 A big Success, also bugs

In Irish mythology, Flidas rode in a chariot drawn by deer" while "as goddess  
of the domestic herds" she had a magical cow of plenty.


Well, I do have a lot of Irish blood in me. Maybe we're related.

Re: [Trisquel-users] Trisquel 8 A big Success, also bugs


I
 used info here
'https://support.mozilla.org/en-US/kb/block-websites-storing-site-preferences#w_viewing-a-list-of-blocked-sites'
 re 'Block cookies for a single site' to tell Abrowser not to use the
default settings and instead allow trisquel.info cookies for the session
 and now I can login. Funny that was the 'custom' default setting
anyway.

Maybe in Trisquel 8 I'll try doing it the way you've come to SuperTramp,
 I have been using Belenos for nothing but to do some of my banking and
other OSes for general purposes so it made sense to only allow my bank
to set a cookie.

The less digital fingerprint idea makes sense. It seems the more we do
to protect our privacy the more we stand out. For Abrowser in Trisquel 8 I  
followed all the recommendations at privacytools.io except I haven't added  
Noscript and am trying GNU LibreJS instead. Can we assume that all the addons  
in about:addons are privacy respecting? The YouTube downloader for instance?


I am curious does Trisquel 8 that we are testing have a chosen name yet?

[Trisquel-users] Trisquel 8 A big Success, also bugs

My card is a GeForce GT 720. I never got past the 'unknown kepler chipset'  
message with Trisquel 7 though Trisquel 7 was fine for what I was using it  
for with it's wider, stubbier display. I tried Trisquel 8 in live mode and  
was very surprised to see the 1920 X 1080 screen materialize before my eyes  
so I made space on my hard drive and installed it. Awesome!


I do have a problem with Abrowser and cookies. I set the preferences to not  
except cookies and I use the exception option to allow on a per site basis.  
Currently it seems to accept a cookie from Trisquel.info but maybe the site  
can't access it when it needs to? Anyway, I can't login using Trisquel 8 and  
Abrowser. Couldn't log in to my email either though I could see my email  
provider did put cookies. Their message 'This site requires cookies to  
function' also wouldn't go away. I do not have any issues in Trisquel 7.


Software and Updates didn't do anything at all when I clicked on that in  
Control Panel. Fortunately I was able to use sudo apt-get install to get most  
of my favorite applications and remembered to get Synaptic which is working  
fine.


I followed the Manual page at  
https://trisquel.info/en/wiki/verify-trisquel-download
but think an update for Trisquel 8 might be good. I couldn't find the correct  
key on either of the keyservers I found mentioned in documentation.


Anyway, I am excited by the improvement to my graphics and looking forward to  
fine tuning that will be done. Thanks to Reuben and all for your efforts.  
Trisquel is the only FSF approved OS that worked for me out of the box except  
the no longer supported music one.


I attached a text file with my download and verify experience in case anyone  
is interested.





1. I downloaded:

trisquel_8.0_amd64.iso  2017-01-10 03:351.0G 
trisquel_8.0_amd64.iso.asc  2017-01-10 03:35181  
trisquel_8.0_amd64.iso.manifest 2017-01-10 03:3548K  
trisquel_8.0_amd64.iso.md5  2017-01-10 03:3557 
(also tried the torrent but it seemed inactive)
from:

http://jenkins.trisquel.info/makeiso/iso/

2. I created a directory to segregate these downloads from anything else and 
moved the 4 items I downloaded to that directory.

3. Opened a terminal and moved to the newly created directory.

4. Executed in terminal: md5sum trisquel_8.0_amd64.iso

Output  da5a814d0b325e83e162bbafba652d22  trisquel_8.0_amd64.iso

With gedit I opened trisquel_8.0_amd64.iso.md5 and verified output was what was 
expected.
 
Text:   da5a814d0b325e83e162bbafba652d22  trisquel_8.0_amd64.iso

(Steps 5 and 6 were in vain as the 'issuer key ID A7E8D94B9D9D4FAD' was not 
found at either
hkp server keys.gnupg.net or hkp server pool.sks-keyservers.net, but 
steps 7, 8 and 9 as an alternative way to accomplish the same end and were 
successfull.)
 

5. Executed from terminal:  
gpg --list-packets trisquel_8.0_amd64.iso
:signature packet: algo 1, keyid A7E8D94B9D9D4FAD
version 4, created 1483833286, md5len 0, sigclass 0x01
digest algo 10, begin of digest af db
hashed subpkt 2 len 4 (sig created 2017-01-07)
subpkt 16 len 8 (issuer key ID A7E8D94B9D9D4FAD)
data: [4096 bits]

6. Unsuccessfully tried to import keys from two different servers (A and B): 
A.  gpg --keyserver keys.gnupg.net --recv-keys A7E8D94B9D9D4FAD
gpg: requesting key 9D9D4FAD from hkp server keys.gnupg.net
gpgkeys: key A7E8D94B9D9D4FAD not found on keyserver
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0
B.  gpg --keyserver pool.sks-keyservers.net --recv-keys A7E8D94B9D9D4FAD
gpg: requesting key 9D9D4FAD from hkp server pool.sks-keyservers.net
gpgkeys: key A7E8D94B9D9D4FAD not found on keyserver
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0

7. Successfully located and saved to same newly created directory:
trisquel-archive-signkey.gpg 
at

https://trisquel.info/files/trisquel-archive-signkey.gpg

8. Successfully executed from terminal:
gpg --import trisquel-archive-signkey.gpg
gpg: key 8D8AEBF1: public key "Trisquel GNU/Linux (Trisquel GNU/Linux signing 
key) " imported
gpg: Total number processed: 1
gpg:   imported: 1

9. Successfully executed from terminal:
 Good signature from "Trisquel GNU/Linux (Trisquel GNU/Linux signing key) 
" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:  There is no indication that the signature belongs to the owner.
Primary key fingerprint: E6C2 7099 CA21 965B 734A  EA31 B4EF B9F3 8D8A EBF1

Accroding to the manual page at 
https://trisquel.info/en/wiki/verify-trisquel-download:

"Note: You may safely ignore the trust warning, if you would like to trust a 
GPG key you should meet in person to exchange keys, for example at LibrePlanet.

Once you know the hash checks and GPG are

Re: [Trisquel-users] Qubes OS thoughts


I
 recently installed Qubes on a laptop. I think the install couldn't
quite complete because my home network runs without dchp and I couldn't
find a way to tell it what IP it could use to get on the network.
Nonetheless, it did seem interesting enough to be worth a look. It came
with Debian and Fedora Templates installed and my impression is that
those OSes have their core programming stored in the Root where it is
untouchable so to update them takes some extra steps.

I have an email client running on an old laptop using OpenBSD and this
laptop seems so old it can't handle surfing the web very well at all so
email is all I use it for. My desktop pc has Trisquel 7 which I only use
 to login to my bank every so often and get updates. My desktop pc also
boots up to, I think I am up to 7 different flavors of GNULinux now and I
 have been using them for general surfing and to keep in touch with what
 many of the different camps are achieving. My actual financial records
are kept on another laptop that seldom sees the internet (also openBSD).
 When I use Belenos to go to my bank, I have the laptop beside me and
transfer information by hand to it. I play games on a Playstation. In
other words, I like the idea of isolating stuff, no bundles for me! At
least, if I ever get hacked, it will only go so far. But it does create
some headaches to do it this way.

One thing though that I worry about is the wifi router. It sees
everything and short of looking for a firmware update on a regular basis
 I really don't know much about how one goes about keeping it secure.

Re: [Trisquel-users] Nvidia GeForce GT 720 - Will it work?

2015-09-11 Thread g . smyli


Sorry I went dark for so long.

Well, the 720 GT won't earn my recommendation! I couldn't get it to work.
During boot up there was always a message about frame buffer hardware  
conflict between noveau fb and vesa fb that concluded kernel would remove the  
'generic driver.' It would hang for a minute or two and then finish booting  
up to the wrong resolution. One day I uninstalled the Vesa drivers and voila  
- new message re 'Unknown chipset Keppler chipset' and then boot process  
stopped - no more Trisquel. I got that far with leny2010's advice re a  
forward kernel and whatever else I could come up with re noveau.


I'm afraid it sort of broke me and I haven't been able to bring myself to  
mess with much of anything tech related for a while. My PC has Centos with  
the same resolution issues and I have been using that for the minimal  
personal business stuff I do (including logging in to the forum today) and  
Fedora with nvidia blobs installed so I can watch youtube or whatever  
comfortably. I use the laptop with debian for email as Enigmail is working on  
it.


I read that jxself has a de blobbed kernel that may work with the original  
Radeon card I had in the PC so when I am recuperated enough and have some  
gumption again, I'll reinstall that card and start over. I do really like  
Trisquel and especially enjoy the forum.

Re: [Trisquel-users] What kind of email services are you using and recommend and why?

2015-07-14 Thread g . smyli

I started using hushmail before I found Trisquel and this forum. I paid for a  
years subscription but they were providing a web based only (uses javascript)  
account for free. It's Canadian, they say email is stored in encrypted form  
and my Evolution setup is using OpenPGP. It took me a long time to figure out  
how to use OpenPGP or enigmail. I wonder if there is a way to certify if my  
email really is encrypted.


I wasn't really worried about governmental mass surveillance but I would like  
my ISP to mind its own business. I'm not sure that email services outside of  
US or EU law zones don't carry other risks. I mean what is the law in Russia  
for instance, and does Putin prevent Russian hackers or even the NSA for that  
matter running supposedly secure email services?


I like the post and will spend some more time looking up all your  
recommendations.

Re: [Trisquel-users] Wireless Problem

2015-07-13 Thread g . smyli

This might not be related but I was having problems with devices being booted  
off the WiFi network at home. Since my main computer is hooked to the router  
via cable I was not affected but my son's Windows machine and his Android  
device were loosing their ip lease for some reason. Over Christmas other  
family had brought their Apple products and were having that issue as well. I  
did not have SSID broadcast enabled and decided to shut down DCHP also. We  
manually configured every device with its own network IP. Since we did that,  
we are not having that problem. I think for a small home network, it makes  
sense to go with static IPs. That much less overhead for the router, the  
devices and the network.

Re: [Trisquel-users] LibertyBSD - OpenBSD minus the blobs

2015-06-06 Thread g . smyli

I don't know the status of this project. There is still something available  
to download from JadedCtrl's mirror at  
'mirrors.jadedfs.net/libertybsd_cd_install.iso'

Re: [Trisquel-users] Logjam browser fix breaks Trisquel's website

2015-05-27 Thread g . smyli

Thank you, pizzaiolo, for pointing that out, seems like we could have a  
separate Security area.


For me, in Belenos, in my about:config for aBrowser I could only find these  
two of the three parameters you mention, and I toggled the two to false and  
went back to https://weakdh.org and got a clean bill of 'logjam health.' :)


security.ssl3.dhe_rsa_aes_128_sha;false
security.ssl3.dhe_rsa_aes_256_sha;false

Trisquel site seems to be working.

I wonder if this would affect Evolution.

Re: [Trisquel-users] New install for new Trisquel user

2015-05-24 Thread g . smyli

I have another family member on the LAN with his Losedows7 hardcore game  
machine. I want to set up a household wiki so we can communicate without  
having to walk to opposite ends of the house or happen to run into each other  
with our varied schedules. So I'll want a port that is open to local devices  
only. When I'm ready I can add an iptables rule to allow that.
Do you recommend any documentation for Nginx that's relatively easy to  
comprehend? I know it has a different process for configuration than apache.  
I got it working with php capability but configuration was kind of an uphill  
struggle.

Re: [Trisquel-users] New install for new Trisquel user

2015-05-24 Thread g . smyli

Wow, that's very helpful Mampir, I will install nginx for sure once I get my  
screen resolution problem figured out. Don't want to install any more  
packages in case I decide to start over with a fresh install. Once I get that  
fixed and install nginx your post will give me a great starting point. Muy  
cool. ;)

Re: [Trisquel-users] Nvidia GeForce GT 720 - Will it work?

2015-05-23 Thread g . smyli

Haven't given up yet. I wonder if I have conflicts between packages and could  
benefit from reinstalling and going straight to the jxself 4.x kernel as a  
starting point. I did make a very small partition for /var/log and recieved a  
message that it was almost full. Mostly was kern.log (76 MB) which was  
largely filled up with something like this:


May 21 14:13:55 Trisqueltower kernel: [   46.225317] nouveau E[  
PGR][:01:00.0] FECS ucode error 2
May 21 14:13:55 Trisqueltower kernel: [   46.225349] nouveau E[  
PGR][:01:00.0] FECS ucode error 2
May 21 14:13:55 Trisqueltower kernel: [   46.225379] nouveau E[  
PGR][:01:00.0] FECS ucode error 2
May 21 14:13:55 Trisqueltower kernel: [   46.225410] nouveau E[  
PGR][:01:00.0] FECS ucode error 2
May 21 14:13:55 Trisqueltower kernel: [   46.225442] nouveau E[  
PGR][:01:00.0] FECS MTHD subc 1 class 0x80011698 mthd 0x1698 data  
0x1000
May 21 14:13:55 Trisqueltower kernel: [   46.225473] nouveau E[  
PGR][:01:00.0] FECS ucode error 2
May 21 14:13:55 Trisqueltower kernel: [   46.225505] nouveau E[  
PGR][:01:00.0] FECS MTHD subc 1 class 0x80011698 mthd 0x1698 data  
0x1000
May 21 14:13:55 Trisqueltower kernel: [   46.225527] nouveau E[  
PGR][:01:00.0] 502000 - stat 0x 0x 0x0002 0x
May 21 14:13:55 Trisqueltower kernel: [   46.225568] nouveau E[  
PGR][:01:00.0] FECS MTHD subc 1 class 0x80011698 mthd 0x1698 data  
0x1000
May 21 14:13:55 Trisqueltower kernel: [   46.225590] nouveau E[  
PGR][:01:00.0] 502000 - stat 0x 0x 0x0002 0x
May 21 14:13:55 Trisqueltower kernel: [   46.225623] nouveau E[  
PGR][:01:00.0] 502000 - stat 0x 0x 0x0002 0x
May 21 14:13:55 Trisqueltower kernel: [   46.225653] nouveau E[  
PGR][:01:00.0] 502000 - stat 0x 0x 0x0002 0x
May 21 14:13:55 Trisqueltower kernel: [   46.225685] nouveau E[  
PGR][:01:00.0] 502000 - stat 0x 0x 0x0002 0x
May 21 14:13:55 Trisqueltower kernel: [   46.225716] nouveau E[  
PGR][:01:00.0] 502000 - stat 0x 0x 0x0002 0x
May 21 14:13:55 Trisqueltower kernel: [   46.225747] nouveau E[  
PGR][:01:00.0] 502000 - stat 0x 0x 0x0002 0x
May 21 14:13:55 Trisqueltower kernel: [   46.225787] nouveau E[  
PGR][:01:00.0] FECS ucode error 2
May 21 14:13:55 Trisqueltower kernel: [   46.225818] nouveau E[  
PGR][:01:00.0] FECS ucode error 2
May 21 14:13:55 Trisqueltower kernel: [   46.225849] nouveau E[  
PGR][:01:00.0] FECS ucode error 2
May 21 14:13:55 Trisqueltower kernel: [   46.225880] nouveau E[  
PGR][:01:00.0] FECS ucode error 2
May 21 14:13:55 Trisqueltower kernel: [   46.225913] nouveau E[  
PGR][:01:00.0] FECS MTHD subc 1 class 0x80011698 mthd 0x1698 data  
0x1000
May 21 14:13:55 Trisqueltower kernel: [   46.225944] nouveau E[  
PGR][:01:00.0] FECS ucode error 2
May 21 14:13:55 Trisqueltower kernel: [   46.225974] nouveau E[  
PGR][:01:00.0] FECS ucode error 2
May 21 14:13:55 Trisqueltower kernel: [   46.226006] nouveau E[  
PGR][:01:00.0] FECS MTHD subc 1 class 0x80011698 mthd 0x1698 data  
0x1000

Re: [Trisquel-users] Clock disappears from taskbar

2015-05-23 Thread g . smyli


 if you want to move it around
press alt and then right click on the widget

Thanks for that!

Re: [Trisquel-users] New install for new Trisquel user

2015-05-23 Thread g . smyli

 About iptables, why are you setting those rules? It seems pointless to me.  
It doesn't give you any security. A connection on a given port can't happen,  
if there aren't any programs listening there. Maybe I'm reading the rules  
wrong since I rarely use iptables.


I like to run MySQL and Apache and experiment with whatever just for my own  
experimentation and so the iptables should block access to those services  
unless they (hopefully at my direction) were to initiate it. I'm behind a  
firewall/router anyway so it's probably overkill but I wanted to learn  
iptables a bit anyway. I'm not that advanced but this does seem to work. I do  
have a very unsecure Windows desktop on my home network.


But I usually don't think about for example my.cnf and changing the listening  
configuration. That will be something to think about.


Basically, the configuration is

DROP everything unless it meets a different rule with a -j (jump to defined  
action)


Jump to ACCEPT for all loopback traffic.

Let me initiate connections on these ports:
53,80,123,443,465,546,993,6667 -j ACCEPT *Sometimes I'm still unclear whether  
tcp or udp are both required so this might be a little fuzzy.


Once I have initiated a connection ACCEPT incoming (ESTABLISHED,RELATED -j  
ACCEPT) unless it is malformed (INVALID -j DROP)


Everything else not yet dealt with gets dropped and logged.

Re: [Trisquel-users] Nvidia GeForce GT 720 - Will it work?

2015-05-21 Thread g . smyli

I did follow instructions right down the line (didn't need the 'little bash  
function.') Ran $sudo apt-get install linux-libre64 linux-libre64-header and  
$ sudo update-grub and rebooted. It looks like it is going to work, though I  
see a message for a moment something about 'nouveau fault a' but none the  
less it shows that Trisquel splash screen which I think might be showing at  
the right resolution but then it just goes white.

Any ideas?
I attached text file with configs and Xorg.0.log.old.

[Trisquel-users] Nvidia GeForce GT 720 - Will it work?

2015-05-20 Thread g . smyli

It's already installed and I see it is well supported by nouveau and I was  
hoping to avoid the rolling back to an earlier kernel. So far it's worse than  
the Radeon card I had giving me 1028 X 768 resolution for a 1920 X 1080  
monitor. It works fine in Fedora. Any suggestions?

Re: [Trisquel-users] Nvidia GeForce GT 720 - Will it work?

2015-05-20 Thread g . smyli


Hey leny2010, that looks great!
I will give that a try in a bit. I hadn't imagined I could run a 4.x kernel  
in Trisquel. I am using Belenos, hopefully that won't make a difference. I  
will report.

Re: [Trisquel-users] Partition table suggested for installing three GNU/Linux systems

2015-05-11 Thread g . smyli


Thanks! Lembas and Magic Banana,

I was reviewing the Debian doc and saw a big error in my thinking, I thought  
it had suggested /usr be on a separate partition but it never does.


 ...one more partition whose use is to be estimated to avoid  
under/over-dimensioning

 but
Any directory tree which a user has write permissions to, such as e.g.  
/home, /tmp and /var/tmp/, should be on a separate partition. This reduces  
the risk of a user DoS...


It seems from the Audicity information that a /var/tmp partition required to  
address the DOS and Symlink concerns would need to be generous. Yes, I might  
like to make music someday. I suppose a 3d modeling program like Povray might  
be similar. I imagine they have some information indicating how big a  
/var/tmp partition would have to be.



I think I am arriving at some clarity, here's the new scheme but wll add  
maybe a 3 GB /var/tmp (also ext2)


|.*.***extended partition***.*..|..swap  
partition.|../home partition..|


../@16 GB../tmp@6 GB../var/log@1 GB../opt@3.2 GB |..swap@8 GB.|../home  
@532 GB|


..*ext4*./...*ext2*./*ext4*../.*ext4*..|  
swap .|..ext4.|


I can hibernate if I want too, cause I just might want to if I can and also  
won't have to worry if I have room for movies.


This scheme would satisfy this - Any directory tree which a user has write  
permissions to, such as e.g. /home, /tmp and /var/tmp/, should be on a  
separate partition. This reduces the risk of a user DoS...
and, if I understand, address Magic Banana's main point as well, if more room  
is needed in /usr, it's already there as long as / (/bin, /boot, /etc, /dev,  
/lib, lib64, /media, /mnt, /proc /run, sbin, /srv, /sys, /usr, /var -  
/var/log) doesn't exceed 16 GB there's room. And it seems like 16 GB should  
last quite a while. I only wonder if I were to install games in /opt if 3.2  
GB would get strained.


There might be a performance hit if a partition is bigger than it needs to be  
but this scheme over all isn't very far over what I have now and I like it's  
performance fine. I think Centos and Fedora may have each had 40 GB / and  
they were fine also.

Re: [Trisquel-users] Partition table suggested for installing three GNU/Linux systems

2015-05-10 Thread g . smyli


I didn't see your input MB and Lembas
My Trisquel was dieing. First time it hung instead of shutting down, then  
would only boot 3.13 kernel which messes with my resolution. Then wouldn't  
boot at all at least in part because certain file systems (/tmp and /var/log)  
were mounting read only. Probably something I did, really don't know. So, to  
make a long story short, I used a live slax distro and fdisked it all away,  
Centos, Fedora and Trisquel.


If you use LVM, you can quite easily (after learning how to use LVM...)  
resize your partitions. Without LVM, it is a pain to resize the partitions  
without losing their files. Notice that some filesystems (I am looking at you  
XFS) cannot be shrunk.


Is that the part? I have either just let the install handle whatever it wants  
to do with LVM or I have done what was more familiar for me so I haven't  
learned how to make LVM work for me. I will make it a project to do so.


I did this:

Partition 1 - 23 Gb Extended
-sda9 / - 3.2 Gb ext4
-sda6 /user - 8.6 Gb ext4
-sda7 /var - 4.3 Gb ext4
-sda5 /tmp - 3.2 Gb ext2

Partition 2
-sda2 swap 2.2 Gb

Partition 3
-sda 3 /home 537 Gb Ext4

Partition 4 439 Gb unused

Lembas said  I think the /usr could be still a bit larger. (yes, just a  
single user Desktop, with a web server and possibly other services accessible  
on tiny LAN - I don't try to hibernate - does it affect /usr or /tmp?)


Your concerns over size of /usr certainly seem valid, after a fresh install  
Disks tells me it's already 37.6 % full. /var is at 23 % and / is at 13 %.


Also, MB's 6+ GB /tmp surprised me. I was thinking 3 was stretching it. I  
might want to watch movies too.


My original install everything was just in a 20 Gb /. I tried to see how much  
was in /usr /var etc but this way it is real easy to see just how each  
directory is getting used. I see


$ du -hs /usr/
7,0G /usr/
would have worked then.

 1 GB ext2 filesystem for /var/tmp

That's one thing I didn't get,
You have 18 GB ext4 for / (including I gather /var) and a separate 1 GB for  
/var/tmp.
The Debian doc hinted at that kind of thing too but I've never seen how that  
works so I stayed away from it. Is /var/tmp in /var replaced by a symlink or  
something?


While I was reading helpful resources I saw a guy's post re installing 100  
plus OSes on two hard drives in one computer. I won't need that but it would  
be good to have that kind of flexibilty.


Thanks for your knowledgeable help and support, this community is one of the  
strongest aspects of Trisquel. It's great.

Re: [Trisquel-users] Partition table suggested for installing three GNU/Linux systems

2015-05-09 Thread g . smyli


Thanks for the input Magic Banana, hope I do not exasperate!
My Trisquel Desktop seems to be pretty close to hosed right now so I'm back  
in Centos7. Looks like I'll be reinstalling sooner than I wanted.


 You know that LVM is not a type of filesystem, right?
Well, uh no. Sorry to be a dunce. Looking in disks right now I see partitions  
'x#GB ext4' or 'x#GB LVM2 PV,' they are on the same level. I believe a  
logical volume manager can grab non contiguous space on the hard drive and  
maintain indexing in such a way as to create virtual contiguity.



 Is there any advantage in using ext3 instead of ext4? If you cannot answer  
this question, you should choose ext4

I was looking for answers elsewhere and I mentioned this earlier:
Is this still relevant:
https://www.debian.org/doc/manuals/securing-debian-howto/ch3.en.html#s3.2;
'Starts with Choose an intelligent partition scheme ... maybe easier said  
than done, or maybe that doc is older than the hills in computer years and no  
one has gotten around to updating it in which case I'll probably withdraw the  
question.


There it says
it is usually better to use the ext3 file system. The reason for this is  
that it is backwards compatible with ext2.
I gather backwards compatibility with ext 2 no longer important so I'll go  
with ext4.


The whole idea of having separate partitions was based on reading that  
document. Any directory tree which a user has write permissions to, such as  
e.g. /home, /tmp and /var/tmp/, should be on a separate partition. This  
reduces the risk of a user DoS by filling up your / mount point and  
rendering the system unusable (Note: this is not strictly true, since there  
is always some space reserved for root which a normal user cannot fill), and  
it also prevents hardlink attacks. That's what I have been basing my  
thinking on.


So you say / is huge and /usr tiny so I will adjust.

So, hopefully narrowing down to something 'intelligent' like this:
3 GB / LVM...LVM in case I run out of room and need to  
expand.

8 GB /usr .ext4..Probably pretty generous
4 GB /var .ext4..Probably pretty generous
3 GB /tmp .Ext2..it will be cleaned up when the system boots.
3 GB /opt .Ext4..Probably pretty generous
2 GB swap25% of RAM
500 GB /home...ext4 or LVM

Well, think I'm going to try it, since my desktop is hosed anyway. Let you  
know how I end up.

Re: [Trisquel-users] Partition table suggested for installing three GNU/Linux systems

2015-05-07 Thread g . smyli


Thanks M B and ST83 for lending your experience!

Thanks to alejandro_blue for opening the post. I read it posted in usarios  
'tambien' where the KISS advice suggested in your second link was also given.


Based on multiple councils, I think I will go with something like this (with  
what I have now, I do not notice much of a performance hit depending on where  
on the drive an OS is)


8 GB / LVM
5 GB /usr .LVM
5 GB /var .LVM
5 GB /tmp .Ext2
5 GB /opt .Ext3
4 GB swap .swap

re /tmp and Ext2 - From the Debian Manual
Notice, however, that there are some partitions that might not benefit from  
using a journaling file system. For example, if you are using a separate  
partition for /tmp/ you might be better off using a standard ext2 file system  
as it will be cleaned up when the system boots. That sounds like good  
advice.


/opt and ext3
I have nothing in /opt now but I from the manual that that's a good place for  
user compiled programs. I wouldn't expect to outgrow 5 GB and it will be  
journaled.


Over all, I have 20 GB / LVM partition (currently 25% full after 2 weeks of  
use)  + 4 GB swap now with only a separate /home directory so this scheme  
would be the equivalent to a generous 28 GB / + 4 GB swap with capacity to  
grow if ever needed and a large /home directory to be used by more than 1  
system and hopefully for many years.


Yeah, think I'm gonna do it, rip what I have apart and start all over again.  
(although no rush, must plan other aspects still) My joke with my son about 6  
weeks ago before I found Trisquel was 'I'm going to do the install to end all  
installs.' So now I'm going to do the mother of all installs to end all  
installs! ...v.1

Re: [Trisquel-users] Share your Desktop!


Just the default with web server home page and household wiki.

Re: [Trisquel-users] tor process

You could stop it from running by changing  S20tor to K20tor in /etc/rc2.d  
through /etc/rc.5


$ ls /etc/rc2.d
README   S20hddtemp S20speech-dispatcherS70pppd-dns
S16openvpn   S20postfix S20tor  S91apache2
S19mysql S20rsync   S25mdadmS99ondemand
S20clamav-freshclam  S20screen-cleanup  S37iptables-persistent  S99rc.local

$ sudo mv /etc/rc2.d/S20tor /etc/rc2.d/K20tor

and repeat for /etc/rc.3.d and so forth. On mine rc0.d, rc1.d and rc6.d all  
have the Kill tor K20tor but run levels 3 through 5 have the start flag  
S20tor.


If you make them all K20tor and reboot it shouldn't start.

This is an easier way.
...I ran this on mine
$ sudo update-rc.d tor disable
[sudo] password for geshmy:
update-rc.d: warning:  start runlevel arguments (none) do not match tor  
Default-Start values (2 3 4 5)
update-rc.d: warning:  stop runlevel arguments (none) do not match tor  
Default-Stop values (0 1 6)

 Disabling system startup links for /etc/init.d/tor ...
 Removing any system startup links for /etc/init.d/tor ...
   /etc/rc0.d/K20tor
   /etc/rc1.d/K20tor
   /etc/rc2.d/S20tor
   /etc/rc3.d/S20tor
   /etc/rc4.d/S20tor
   /etc/rc5.d/S20tor
   /etc/rc6.d/K20tor
 Adding system startup for /etc/init.d/tor ...
   /etc/rc0.d/K20tor - ../init.d/tor
   /etc/rc1.d/K20tor - ../init.d/tor
   /etc/rc6.d/K20tor - ../init.d/tor
   /etc/rc2.d/K80tor - ../init.d/tor
   /etc/rc3.d/K80tor - ../init.d/tor
   /etc/rc4.d/K80tor - ../init.d/tor
   /etc/rc5.d/K80tor - ../init.d/tor

and then
$ sudo update-rc.d tor enable
starts it back up.

Re: [Trisquel-users] Partition table suggested for installing three GNU/Linux systems

I've been thinking about this too. I had Centos and Fedora installed and had  
given them the lion share of a 1 TB hd. Then I found Trisquel and gave it the  
rest (about 130 GB). Now I'm thinking to start over.
I like Trisquel 7 very much and would use it by default most of the time. I  
might do Fedora 22 and get the latest kernel. I was thinking about  
preparing/reserving a portion of the hd to build a kernel on my own and see  
how far I can get building everything from source. I could leave a portion  
for a fourth option (maybe freebsd or openbsd).


I was thinking I would have a large /home partition and back it up on to an  
external hd. I've never used back up software but I would like to create  
something more permanent and secure than I usually do and locate all the data  
that I want to keep from all the computers I have scattered around the house  
and have it in one place backed up to the ext hd.


Question 1
Is this still relevant:
https://www.debian.org/doc/manuals/securing-debian-howto/ch3.en.html#s3.2

Since I installed trisquel I have mostly installed the major apps that I  
wanted and been tweaking so by now it appears that I have used up a quarter  
of my 20 GB / directory and maybe less than 1 GB of my 108 GB /home  
partition. I have 4 GB swap for 8 GB Ram and I have yet to see a swap file be  
used (I think ever on any machine.) The stuff I do is not that intensive but  
I would like to start gaming a little,


So if I reformat and reinstall maybe
Trisquel

10 GB / LVM
10 GB /usr .xfs, ext3, ext4?
10 GB /var .
2 GB /tmp ..
5 GB /opt ..
8 GB swap ...swap   
--
45 GB total

OS 2 (same pattern)

10 GB /
10 GB /usr
10 GB /var
2 GB /tmp
5 GB /opt
8 GB swap (if it will let me, Grub in Centos or Fedora found the swap from  
the other an insisted on using that on the second install)

---
45 GB total

500 GB /home mounted in both OSes - to be backed up to the external hd

This way I am using less that 50 GB for each OS and can play with around 400  
GB left over.


If the debian doc isn't relevant then KISS maybe rules and just go 35 GB /  
and 8 GB swap.


Other Questions:
Does gaming create need for a bigger swap?
Anything else I should know or consider?

Re: [Trisquel-users] RV730 PRO [Radeon HD 4650] Woes