libera/#devuan/ Friday, 2023-09-29

nethead23Hi, enyone here who is running courier MTA with maildrop/spamassassin on Devuan 5?01:59
gnarfacenethead23: i'm not, but that also doesn't sound like a devuan specific problem. perhaps someone has already reported it to the debian bug tracker along with a fix? worth checking...02:10
nethead23gnarface:  Its just i have an seemingly, identical configuration/installation on Debian 11 which works and the Debian 12 based one Devuan 5 doesnt. But you are probably right, its most probably a Debian 12 issue or a problem on my side.02:28
gnarfacenethead23: well, i checked the debian bugtracker, and while i didn't see anything labeled obviously related, there were several that ambiguously could be, depending on if you can get more actual information about the error02:29
gnarfacehttps://bugs.debian.org/cgi-bin/pkgreport.cgi?dist=stable;package=maildrop02:29
gnarfaceworth looking through these, at least02:29
nethead23google search on "debian 12 bug tracker maildrop" restricted to one year old doesnt give any usuable results. Will check your link now. Thx02:31
gnarfaceonly other thing i can suggest is try something else02:33
nethead23You mean a different MTA?02:33
gnarfaceno i mean something other than maildrop02:33
nethead23I have a 20 year plus old .mailfilter.... :)02:34
gnarfaceoh, hmm. i see.02:34
nethead23I already have the source package installed and mostly compiled. I did replace the stock debian 12 maildrop with the courier one already but that ddint help. Will try to install completely from source. That should hopefully fix it02:35
gnarfacegood luck02:35
nethead23Thx02:35
gnarfaceshouldn't require that much work really, but if it fixes it...02:36
gnarfacei'm just using exim with courier-imaps and spamassassin, but i haven't tried it on daedalus02:36
nethead23I had been using qmail with courier-imap and spamassassin until 2 months ago... unluckily qmail is too outdated now.02:37
nethead23But exim is also a good choice, yes02:37
systemdleteall of a sudden... firefox requires about 20 new dependencies?05:49
systemdlete25, actually05:49
debdogare they by any chance video encoding related?05:51
systemdleteyes, by "chance" they are06:02
debdoghttps://arstechnica.com/security/2023/09/new-0-day-in-chrome-and-firefox-is-likely-to-plague-other-software/06:03
fluffywolfwhy the hell would firefox be using encoding?06:05
debdoglet's hope it doesn'T06:09
gnarfacemic and camera access would need encoding06:11
gnarfacedoes firefox do that?06:12
gnarfacelast i used firefox for such, it was through the flash plugin06:12
nethead23thats one reason i have unloaded the camera modules on my notebook06:12
rwpThat notice says "Specific handling of an attacker-controlled VP8 media stream could lead to a heap buffer overflow in the content process. We are aware of this issue being exploited in other products in the wild."06:19
rwpWhich to my mind means video advertisements.  If you don't have uBlock Origin installed then visiting pages with adverts will play untrusted video content which might be malicious attack vectors.06:19
rwpIn contradiction to that the ars report says "The vuln is in VP8 encoding, so if something uses libvpx only for decoding, they have nothing to worry about."06:21
rwpSo not sure what to believe from those conflicting reports but there they are.06:21
fluffywolfmy reading of it is that firefox makes vp8 encoding available to javascript.06:24
fluffywolfand thus any javascript on any web page can exploit it06:24
fluffywolfbbl, wolfy bedtime06:26
rwpAh, that helps to explain it.  Thanks for that fluffywolf!06:34
comborico1611I have a recommendation for the Devuan download mirror page.  I am in the Philippines.  And I couldnĀ“t find the nearest server.  But someone here on IRC pointed me to: http://packages.devuan.org/mirror_list.txt07:54
comborico1611I couldnĀ“t find the correct mirror because the locations are not listed.  So my recommendation is that they be listed.07:55
gnarfaceit was me, but i see locations are listed there...07:56
gnarface"Country" and "CountryCode" fields appear populated07:56
gnarfacethat's all there are though07:57
gnarfaceif you want a mirror closer to the Philippines than any of those, you'll have to be the change you want to see in the world07:57
comborico1611at .../get-devuan ?08:00
gnarfaceoh, no i thought you meant on the mirror_list.txt08:00
gnarfaceyou meant you want them on the website, i see. that's a fair comment.08:01
comborico1611Haha08:01
comborico1611Thanks again.  Out.08:01
gnarfacei can't actually do anything about it either, but i see the point.08:01
gnarfacelater.08:01
onefangThe /get-devuan mirror list is for the ISO mirrors, http://packages.devuan.org/mirror_list.txt is for the package mirrors.  I'm in charge of the later, not the former.08:25
onefangSome mirrors do both, so you might find one in /mirror_list.txt that suits you that is also in get-devuan.08:26
onefangAh, they left.08:26
joerggeographical distance to a mirror is largely meaningless in our world of global internet. Pick the fastest one, regardless of where it's located14:54
joergyou might judge by TLD if you insist to...14:55
joerghttps://www.devuan.org/get-devuan14:55
ted-iousMaybe pick the fastest one that's on the same continent. :)15:18
ted-iousOtherwise you might be using one on the other side of an underwater fiber.15:18
onefangThat's one reason I have geographically distributed instances of apt-panopticon, the thing I wrote to monitor package mirrors.  It includes speed reports and graphs.15:20
ted-iousNice!15:22
ted-iousIs that in the standard repositories?15:22
alphalphaHooi15:39
alphalphai downloaded the torrent with all daedalus isos, desktop-live and minimal live are all version 5.0.015:41
alphalphaand everything inside installer-iso iser version 5.0.1 ... is there any documentation what happened here?15:41
gnarfacesomeone probably knows... ask fsmithred15:42
gnarfacei assume it's just a minor bug fix15:42
fsmithredalphalpha, I don't think there's any documentation other than some irc logs and maybe a forum thread.15:43
fsmithredthere have been some problems with the installer isos in particular cases, so they've been rebuilt.15:43
fsmithredThe live isos don't have those problems.15:43
alphalphaah okay, i was just wondering because the live isos are still 5.0.015:43
alphalphaok15:44
fsmithredwhen the middle digit changes, we will do it with all the isos and probably update the associated docs for an official point-release.15:44
alphalphathx15:45
fsmithredthe issues with the installer isos have to do with the bootloader - iso uses syslinux for both bios and uefi boots.15:45
fsmithredsometime when I have more time, I would like to brainstorm with you on the live installer.15:46
fsmithredand maybe some hand-holding to look at your code15:46
alphalphai am just about to push a major update, i rewrote a lot of the code and made it more readable15:47
fsmithredcool15:47
alphalphaand now i make the menus completely with a awk function, no more using iselect15:48
alphalphai even had it working with arch, artix and hyperbola15:48
fsmithredoh, nice15:48
alphalphabut i messed up the artix part somehow15:48
fsmithredmine needs an overhaul15:48
fsmithredand I would like to merge some of your additions15:48
fsmithreddo you have it on a git repo somewhere?15:50
alphalphai hope i have my new isos ready be the end of this week or maybe next week, then i will upload everything on gitlab15:50
fsmithredgreat15:50
alphalphahttps://gitlab.com/_alphalpha_/forge-dotfiles/-/tree/main/.local?ref_type=heads15:50
alphalphabut that is still the old version15:50
fsmithredthanks15:50
fsmithredwill bookmark it15:50
onefangted-ious: There are links to the source at the bottom of the apt-panopticon web reports.  https://sledjhamr.org/apt-panopticon/results/Report-web.html is the one I run on my server.15:55
alphalphacheck this https://imgur.com/a/MWk5VVl16:01
DelTomixalphalpha: In the installer ISO - 5.0.1 was released to provide some updates to the syslinux that fixed some issues when booting physical CDROM/DVD media16:02
DelTomix(specifically on EFI as fsmithred pointed out)16:04
alphalphathx16:04
fsmithredalphalpha, is that a pic of the installer?16:17
alphalphathat is not part the installer, its a little tool that starts when you log into X, but it can start the installer16:21
alphalpha*part of16:21
gnarfaceanyone else suddenly have matching foreground and background menu label text in firefox-esr?17:18
gnarfacejust the label text, the menus themselves are fine17:24
gnarfacejust the top bar labels basically17:25
gnarfacepossibly an anomaly from the gtk theme i'm using but it was fine before the latest update17:25
peterrooneygnarface: i'm not understanding what you're describing. text foreground/background matching colours, usually gets reported as "invisible text" or "no text"17:56
gnarfacepeterrooney: well, that's basically the result, yes18:05
gnarfacei happen to know the text is there and not actually technically invisible18:05
gnarfaceit's unclear why it's now the wrong color when it wasn't before though18:06
gnarfacethe "new tab" button has the same problem18:06
gnarfacethey're functional, and the colors on the menu contents are still correct18:07
gnarfaceit's just the top level menu labels for the menu bar18:07
gnarfaceit's the default theme so it should be inheriting the values from the system theme18:08
gnarfaceit seems to suddenly be inheriting the wrong one for this18:09
gnarfaceor something like that18:09
gnarface(speculating)18:09
peterrooneygnarface: things are fine for me with version 102.15, but my wm is e1618:10
joergonefang: wow, that's a nice website19:12
joergcan we have this "officially"?19:13
joergfrequently updated Devuan apt-panopticon mirror web reports.  https://sledjhamr.org/apt-panopticon/results/Report-web.html19:26
bb|hcbjoerg: http://veritas.devuan.org/apt-panopticon/results/Report-web.html (from a different point of view)19:52
bb|hcbThe third one is broken for some reason19:52
cfxproxyHow do i add my mirror to the list mirrors list?20:50
telea20:55
teleadd sex to repo pls20:55
bb|hcbcfxproxy: I would assume that you watch the channel log. Depending on your mirror type, ping onefang for packages mirror and Xenguy for ISO mirror (or both, if you mirror both)21:17

Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!