unixbsd | hello | 04:42 |
---|---|---|
unixbsd | arm64 wget -c --no-check-certificate "https://mirror.leaseweb.com/devuan/devuan_ascii/embedded/devuan_ascii_2.0.0_arm64_raspi3.tar.gz" | 04:42 |
unixbsd | where to find devuan ascii aarch64 (with --target=aarch64) not arm64 !! ?? | 04:42 |
gnarface | it's the same thing i think | 04:44 |
gnarface | why use ascii? | 04:44 |
gnarface | do you need that old of a version? | 04:44 |
gnarface | there are newer ones | 04:44 |
unixbsd | yeah but just arm64 | 04:45 |
unixbsd | it is not aarch64 | 04:45 |
gnarface | i'm pretty sure in this context they're the same thing | 04:45 |
unixbsd | not reaslly | 04:45 |
gnarface | check arm-files.devuan.org for newer stuff | 04:46 |
gnarface | also fyi there's a #devuan-arm for arm specific issues | 04:47 |
minnesotags | So.... Now Grafana Prometheus' "node-exporter" hard depends on systemd.... | 18:02 |
rwp | Sigh. | 18:02 |
FatPhil | Do I understand the docs correctly - I can't do full disk encyption from the live installer? | 18:18 |
DashiePie | minnesotags: you WILL eat the bugs, you WILL be happy | 18:18 |
FatPhil | Just bought meself a Lenovo X250, and windows shite needs purging from it. Easier said than done, took me about 20 attempts to even get into the bios setup. | 18:19 |
FatPhil | wait, what? What, wait? " | 18:20 |
rwp | Congratulations! I know the previous generation debian-installer works. https://www.devuan.org/os/documentation/install-guides/beowulf/full-disk-encryption | 18:20 |
FatPhil | "3.2) Encryption: The installer can only encrypt root and home filesystems." and "3.3) Boot directory encryption: By default the boot directory will be encrypted. This is generally a good idea for full disk encryption setups." seem to contradict each other | 18:21 |
rwp | I am thinking the live-boot installer also works too but that one needs to set up encryption by manual or other method. | 18:21 |
rwp | I have never set up /boot to be encrypted. I always assumed that /boot was needed to bootstrap to the encrypted system. | 18:22 |
FatPhil | Last devuan install I did was a couple of years back, and, like all previous ones, was from the console-based dedicated installer image. | 18:22 |
rwp | I have always used encryption with LVM with one PV so that LUKS only needed to decrypt one PV and then root and swap were LVs and needed only one passphrase. | 18:22 |
FatPhil | I think that's the setup I have on all the other machines. | 18:23 |
FatPhil | as per the "full-disk-encryption" docs, the chimaera ones look familiar. | 18:24 |
FatPhil | hoorah for not too much progress! | 18:24 |
FatPhil | bollocks, being summoned to the pub... | 18:24 |
FatPhil | snigger, the memcard rescue has just gone from ETA 12 mins to ETA 2 hours - I think it's hit some bumps. | 18:30 |
knofix | hi all | 19:03 |
fsmithred | devuan live installer is refractainstaller, which can do full-disk encryption (i.e. with /boot as part of the encrypted root partition.) | 19:13 |
fsmithred | at the options menu, select encryption for the root and do not select a separate /boot partition. Also, don't select a separate /home partition. That too will be part of the encrypted root. (no lvm with the live-installer) | 19:13 |
FatPhil | I like separate partitions for different things, so I think I'll stick with the old installer | 19:34 |
FatPhil | but I've seen the beer list here, so that's definitely tomorrow's task | 19:37 |
FatPhil | there was a time, when spinning rust was common, and the kernel didn't have a sensible elevator algorithm for scatter writes, and RAM was tight so buffers were small, that just having lappies with one FS partition made sense. | 19:39 |
FatPhil | but none of those really hold anymore. so the old protections of not letting one idiot spoil the whole system by isolating where they can write still have some use | 19:52 |
FatPhil | i have had a thousand spambots hammer my SMTP and completely fill /var in a few days. didn't notice until the next day, because everything else just kept working. | 19:57 |
hagbard | fail2ban can help a lot to keep the size of log files in check. | 19:59 |
FatPhil | hell yeah | 20:00 |
rwp | +1 for fail2ban but I am also assuming that logrotate is working to rotate and expire logs too. Though maybe not fast enough. Might need to adjust to be more agressive at expiring old logs. | 20:07 |
FatPhil | logrotate always needs half a dozen slaps, every time I install a new system | 20:20 |
FatPhil | I know one of my systems isn't cleaning things up correctly, but I've not felt the need to fix it. | 20:21 |
rwp | I can mostly use the defaults provided in the logrotate package. But I also have fail2ban which acts to keep the excess log noise down too. | 20:24 |
FatPhil | there are a few packages/services that have two modes - silent, or hyper | 20:28 |
FatPhil | postfix is one of my pet hates | 20:28 |
FatPhil | every incoming spam attempt (still about every 80s) causes about 8 loooong lines of logs. | 20:30 |
xinomilo | postscreen would help with spambots | 20:31 |
FatPhil | postgrey works well for me | 20:31 |
xinomilo | different thing, that too... +1 | 20:31 |
FatPhil | delivery to users is only about 1/100 | 20:31 |
FatPhil | don't know postscreen, should look into it | 20:32 |
xinomilo | https://www.postfix.org/POSTSCREEN_README.html | 20:32 |
FatPhil | just the default paranoid filters in postfix removed 90-95& of the spam, and postgrey removed more that 90& of those that reached it. | 20:36 |
FatPhil | I don't have a percent on my broken phone kbd | 20:36 |
FatPhil | little bit worried that the release page lists: "devuan_chimaera/ 14-Oct-2021 12:53" | 20:58 |
FatPhil | it is 2023, stuff should have changed | 20:58 |
FatPhil | what's the good old-fashioned debian "net install" image? | 20:59 |
FatPhil | "installer-iso/" would have seemed to be it, as it's the only one with "install" in the name, but the "cd4" bit tells me no. | 21:00 |
FatPhil | And everything else is "live" which was not a feature I need from an installer. | 21:01 |
FatPhil | And, other issues aside, whose idea was it to use CSS to ensure that the thing I actually see is "devuan_chimaera_4.0.2_amd64_minimal-live.iso 10-Sep-2022 15:45 58" | 21:03 |
FatPhil | rather than "devuan_chimaera_4.0.2_amd64_minimal-live.iso 10-Sep-2022 15:45 586M" | 21:03 |
FatPhil | The former is useless, the latter is informative. | 21:03 |
FatPhil | apparently someone has decided that I only need to see 888 pixels on my 1920 pixel-wide screen | 21:06 |
FatPhil | because >50% total blankness is the future | 21:06 |
rrq | you're looking for a chimaera installer iso? | 21:12 |
FatPhil | I'm looking for the "netinstall", should be an image of ~200MB | 21:14 |
FatPhil | all previous devuans I've installed, and all prior debians before that, have been via that route. | 21:15 |
rrq | that one is actually with the packages, on pkgmaster | 21:15 |
rrq | (or a mirror, deb.devuan.org) | 21:15 |
fsmithred | installer isos are in the installer-iso directory | 21:15 |
fsmithred | not with the minimal-live | 21:15 |
FatPhil | what does "with" and "the packages" mean in that sentence | 21:15 |
rrq | eg https://pkgmaster.devuan.org/devuan/dists/chimaera/main/installer-amd64/current/images/cdrom/gtk/mini.iso | 21:16 |
FatPhil | fsmithred: Oh - you're right - I MIGHT HAVE NOTICES | 21:16 |
FatPhil | D THEM HAD CSS NOT BEEN CREATED TO MAKE THEM NON-OBVIOUS | 21:16 |
FatPhil | Well done web-designer, you've not just wasted my time, you've wasted fsmithred's too. | 21:17 |
FatPhil | wow, they've bloated to "37" nowadays | 21:17 |
rrq | yeah, we can't do much about your web client | 21:18 |
fsmithred | FatPhil, I don't understand why the size is getting cut off on your screen. I see "586M" here. | 21:18 |
FatPhil | In that case, things are more fucked | 21:19 |
FatPhil | because when I scroll the internal unnecessary scrolly thing, I see "vuan_chimaera_4.0.0_amd64_netinstall.iso 12-Oct-2021 10:48 372M" | 21:20 |
FatPhil | because fuck "de" | 21:20 |
fsmithred | 1920 should be more than enough pixels | 21:23 |
fsmithred | I only have 1600 here, and i don't even have my window maximized. No horizontal scrollbar here. | 21:23 |
FatPhil | http://fatphil.org/tmp/what_part_of.png http://fatphil.org/tmp/this_is_useful.png | 21:24 |
rrq | what's your zoom setting? | 21:25 |
FatPhil | correct for my eyesight | 21:26 |
FatPhil | and I just selected "view > zoom > reset" and nothing changed. | 21:27 |
FatPhil | ooops, ignore that - maybe in wrong window | 21:27 |
FatPhil | nope, confirmed, 100%, reset changes nothing | 21:29 |
fsmithred | ctrl +/- ? | 21:29 |
fsmithred | what web browser are you using? | 21:29 |
FatPhil | the last palemoon that let me have control over cookies | 21:30 |
rrq | anyhow those *netinstall.iso are the chimaera ones | 21:31 |
FatPhil | thank you, yup, that's what I'll grab | 21:31 |
rrq | my previous link is the smallest installation iso, which is built from the debian-installer package and that iso doesn't offer a "working system" without network | 21:35 |
rrq | the installer-iso isos are built slightly differently and fluffed up to offer a "working system" also without network (ne desktop of course) | 21:37 |
rrq | ne=no | 21:37 |
rrq | the *server.iso and *desktop.iso are the same installer, with more sideload. | 21:39 |
rrq | then, the "live" installers, which you don't want, are built in a third way, and they offer almost literally a WYSIWYG installation option on the non-intrusive "Try it out first" presentation. Certainly good for the less experienced, and handy as a rescue option. | 21:52 |
RhineDevil | Hello! I'm on devuan testing, I have a laptop with a Radeon HD 8210, recently if I load games or stuff using OpenGL or similar hardware acceleration, but later I see a video with mpv hardware acceleration, the system freezes | 23:15 |
RhineDevil | *with mpv using VAAPI | 23:16 |
RhineDevil | Apparently firmware-amd-graphics wasn't updated, see you all later | 23:19 |
Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!