libera/#devuan/ Monday, 2023-07-03

jyritom's scary link's conetent07:31
jyriI want to use Wireguard  and Dnscrypt-proxy .07:31
jyriDnscrypt-proxy  is configured and everything works correctly.07:31
jyriWhen I run Wireguard  I get this error:07:31
jyri`/usr/bin/wg-quick: line 32: resolvconf: command not found`07:31
jyriI know that I need to install resolvconf and everything will work correctly if I do not use Dnscrypt-proxy.07:31
jyriI also tried changing DNS in the config file to `127.0.0.1` or `127.0.0.1.53` but that didn't work either07:31
gnarfaceno idea what's wrong with that, and could only meaningfully speculate after seeing what it does if resolvconf is installed07:34
tom[m]12gnarface: jyri Hello .Thanks for your reply .I have NOT installed (and don't want to) Resolvconf. As the user wrote above, this is not a very good solution.07:54
tom[m]12I would appreciate advice on how to correctly set up Wireguard and Dnscrypt-proxy .07:54
tom[m]12Or is it impossible to use the given scheme ( Wireguard  and Dnscrypt-proxy  ) without resolvconf?08:01
buZzthe wireguard scripts depend on resolvconf08:38
buZzso not really sure what you're looking for?08:38
buZzyou could figure out how to use wireguard without resolvconf, its likely possible08:39
buZzinternet tells me you could remove the DNS configs from wireguard completely , and wg_quick script -should- not require resolvconf then08:40
buZzbut i havent confirmed it08:40
buZzrandom first hit was ; https://superuser.com/questions/1500691/usr-bin-wg-quick-line-31-resolvconf-command-not-found-wireguard-debian08:40
buZzalso, ctrl-f on resolvconf on https://manpages.debian.org/unstable/wireguard-tools/wg-quick.8.en.html08:41
buZzthere's some information about how to use it without resolvconf in there too08:41
gnarfacetom[m]12: i just want to be clear that i'm not holding out on you, i haven't tried wireguard yet myself.10:12
gnarfacebut i also sympathize with not trusting stuff that "requires" something like resolvconf10:13
tom[m]12buZz: Hello and thank you very much for your reply and willingness to help. I read these answers and then tried what is written there, it does not work.18:22
tom[m]12I'll explain. I now have Dnscrypt-proxy working correctly when I connect to the server using the `wg-quick up wg0-client` command I see a new interface but there is no resolution (no internet) and I get this error with resolvconf., that is, there is a conflict.18:22
buZzwhich error?18:23
buZztry 'ping 8.8.8.8'18:23
buZzdns wont work without dns config, obviously ;)18:23
tom[m]12buZz: I agree with you, but I can understand where you need to make a change to make it work. Ping doesn't work...because there is no resolv18:26
buZzyou dont need any resolving to ping a IP address18:27
buZzresolving is translating a hostname to a IP18:27
buZzyou dont need to resolv an IP as its already an IP18:27
tom[m]12minute I'll try18:27
buZzresolve*18:29
* tom[m]12 sent a code block: https://libera.ems.host/_matrix/media/v3/download/libera.chat/66e21239b0d83ebe9f52c1b993400735b507a8a118:35
tom[m]12buZz:18:35
buZz18:27:27 < buZz> you dont need to resolv an IP as its already an IP18:35
buZz18:23:39 < buZz> try 'ping 8.8.8.8'18:35
buZztom[m]12: either way, you might want ##networking ?18:36
tom[m]12buZz: ok, what do i need to write against dns in the config file?18:37
buZzi dont know, i just plonked your initial question into google,. the url was the literal first hit18:37
tom[m]12ping -c 3 gnu.org or  ping 8.8.8.8  does not work18:37
tom[m]12as I wrote, everything you found does not work in practice. In these examples that you are talking about, users do not use  dnscrypt-proxy18:39
tom[m]12 users do not use  dnscrypt-proxy ==> https://superuser.com/questions/1500691/usr-bin-wg-quick-line-31-resolvconf-command-not-found-wireguard-debian18:40
rwpWhy not simply install resolvconf so that the wireguard dependency is met and then things work as the package author intended?18:43
tom[m]12rwp: Hello . Thank you for your answer . I would like to use encrypted DNS18:45
rwpYou mean like DNS over TLS aka DoT? Or DNS over HTTPS (aka DoH)?  Or DNS over the encrypted tunnel?  All of those would be a natural event of using Wireguard.18:47
rwpUsually the best way to get something totally custom working is to get the normal way to do things working first then make custom deviations from that known working point.18:47
rwpIf it were me I would get things working in the way the normal configuration expects and then I would deviate from there.18:49
buZzyou know you could configure resolvconf to use that dnsproxy you want?18:49
rwpAnd as buZz has noted the first thing to test is that IP networking is working.  Use ping with addresses to verify that the network is functioning.  I don't see that test being reported as successful yet.18:49
rwpThe operation of the libc resolver library module is controlled by the contents of the /etc/resolv.conf file.  If IP networking is working then one could simply configure that file as desired.18:50
tom[m]12rwp: I do as you write, now I have dnscrypt-proxy working correctly and I'm trying to set up wireguard  but it doesn't work, I'm trying to figure out what the problem is.18:50
rwpThe network functions in layers.  The lowest level being ethernet and let's assume it is working.  On top of it is Internet Protocol.  That does not seem to be working for you.  If IP networking is not functioning then NOTHING above it, such as DNS, can function since everything needs IP networking to be functioning.  Work on getting IP networking functioning first.  And then DNS might just work.  But DNS cannot work if IP networking is18:52
rwpnot working.18:52
rwpThis is not something specific to Devuan and would be the same on any of the systems.  Perhaps the experts in #wireguard would be of best assistance?18:54
rwpI am talking specifically about the failing IP networking using IP addresses.  After that gets working if people complain about not having systemd available then of course that is Devuan specific and this would be the best place to work that through.18:56
latexAnyone know why pipewire cannot be installed?18:58
rwpresolvconf and openresolv are simply creating an API to edit the /etc/resolv.conf file in a shared editing way so that things don't get tangled up stepping on each other there.18:58
latexhttps://bpa.st/PJHTE18:59
grayrockyeh, resolvconf brings sanity to resolv.conf18:59
* grayrock carefully avoids clicking weird link19:00
rwplatex, What is in your sources.list.d/* sources.list files?  Is this Chimaera or Daedalus?19:01
rwplatex, grayrock is gently nudging you to use paste.debian.net instead and I would gently nudge to paste the "raw" form of the url from there.19:03
rwplatex, I do not see a "pipewire" in chimaera so I assume this must be either daedalus or ceres.  On my ceres machine I tested an install of pipewire there and had no problem.19:05
rwplatex, Here is what it looked like installing on my ceres unstable system as a simulation https://paste.debian.net/plain/128484119:06
rwpPerhaps you simply need to "apt-get update" to update your local index (Packages) files?19:07
AdamBurns[m]<psb_> "devuan hosting, who offers same?" <- https://devuanhosting.com/en-us/cms/19:16
golinuxThat is nico's service in Switzerland. I hosted with them for several years20:08
golinuxAmong other things, they move all support to matrix and that was waaay beyond my poor, old brain so had to leave.20:10
golinuxHaven't head of any others. There was a devuan.pro site set up after the conference but nothing ever came of it.20:11
golinuxAnd this should probably be in #off-topic . . .20:12
nemogolinux: well, I guess matrix is mildly related to the very existence of this channel... and I don't have anything enormously against matrix personally, I just wish there were more reference clients and the protocol wasn't pretty much "whatever we decide to add to Element"  ... also personally I wish irssi had support so I wouldn't need 2 tmux tabs for all my chat20:15
latexrwp: I'm using daedalus23:06
latexalso idk I'm just using wgetpaste23:06
latexKnow a good paste utility?23:09
latexhttps://dpaste.com/A8342FL7G.txt23:10
latexwait a minute. what?23:10
latexApparently this is chimaera23:10
latexDamn, gotta fix that now23:10
rwpIf it was chimaera it would have said "E: Unable to locate package pipewire" so it can't be chimaera.23:21
latexwhaaa?23:21
DashiePieis it an in-between thing, latex?23:21
latexI don't know!23:21
latexI thought it was daedalus but...23:21
rwpThough maybe it is in chimaera-proposed-updates which I would definitely not recommend for casual use.23:22
DashiePiecause I know I switched from Beowulf to Chimaera packages, and I had in-between stuff23:22
DashiePiebefore Chimaera was released, that is23:22
latexI think I'll just switch to daedalus23:22
latexdaedalus was pretty cool with all da new softwarez but a few packages were broken23:22
rwpchimaera-proposed-updates basically stable-proposed-updates is for things that need to wedge in between versions that don't have any other way in.23:22
latexYou guys like daedalus more than chimaera right?23:24
latexor even ceres23:24
rwpSay a package foo-1.23 is in Unstable->Testing->Stable.  Then foo-1.24 is uploaded to Unstable.  It has an RC bug so is held there and cannot migrate to Testing.  But then a problem with foo-1.23 is found.  How does foo-1.23.1 get into Stable?  Through stable-proposed-updates.  But there is no gate there so maintainers often upload a lot of half-baked things there.23:24
rwpAt this moment daedalus should be just fine.  I have been busy and have not upgraded to it myself but it _should_ be just fine.  Being a version of Bookworm 12 which is released now.23:25
latexI don't like outdated software that much23:26
rwpOutdated?  That will trigger a rant from me.  If the software is doing fine then is it outdated?  Or just bug free?  #devuan-offtopic if you decide to rant about it though.23:27
rwpThe daedalus installers are catching up with the released bookworm and again should be okay but work on the installers is what I understand is holding up Devuan from saying Daedalus is released right now.23:28
rwpIn any case I recommend NOT including -proposed-updates as a normal course of action.  Since maintainers often upload random stuff there that is not good to actually go out.  I don't have any current examples because I have been avoiding it.  It's good to use to cherrypick specific packages from when appropriate though.23:29
latexhttps://ttm.sh/B1R.txt23:34
latexwhy can't I upgrade to daedalus23:34
latexalso nah rwp I would use outdated/stable software on production servers, but on my PC I like new software features, also because I develop on them and want to make use of the latest stuff I and other devs work on23:35
rwpI will guess that you have created a FrankenDebian see https://wiki.debian.org/DontBreakDebian#Don.27t_make_a_FrankenDebian23:36
rwpThen you might want to run ceres on your desktop.23:36
latexnvm I didn't do dist-upgrade23:37
latexI did upgrade and that doesn't work23:37
latexAlso LMAO that broken Debian mug is hilarious!23:37
rwplatex, Last year I wrote up a guide of my own opinions on how to do system upgrades. http://www.proulx.com/~bob/doc/bobs-guide-to-system-upgrades-with-debian/bobs-guide-to-system-upgrades-with-debian.html23:38
rwpIt's pretty generic for the entire Debian family of systems.  That's my advice.  I am sure others will disagree with details of it but that's the way I do system upgrades.23:38
latexDamn how complex23:40
latexI just do dist-upgrade lol23:40
latexWow23:50
latexDaedalus fixed our issues23:50
latexJACK was glitched on chimaera but on daedalus it'sgood23:50
rwpWoot!23:56
latexWoof!23:56

Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!