| mason | bgstack15: Slow logins can sometimes be the result of failed look-ups, for instance if your client wants to present Kerberos credentials to a system not in the Kerberos domain you're logged into. | 00:49 |
|---|---|---|
| mason | bgstack15: Aside from that, grabbing strace of both sshd and ssh client is a great start, as you can see just where it's hanging up. | 00:50 |
| mason | Hrm, su as well. Maybe back off to debugging your sssd. | 00:50 |
| mason | bgstack15: Maybe verify local accounts so you can maybe point more authoritatively to the remote auth. | 00:51 |
| ShorTie | bgstack15, i only find ssh logins to be slow on 1st boot after that it is fine | 13:20 |
| ShorTie | i'm think it's a random number thing, but not sure | 13:21 |
| ShorTie | like the kernel does not have enough ramdom numbers produced on 1st boot, so ssh has to wait for it to produce more before it can make the keys | 13:22 |
| ShorTie | once the keys are made, login works fine from there on..... | 13:23 |
| onefang | haveged might help. | 13:24 |
| ShorTie | Sorry, not sure what that is | 13:25 |
| fsmithred | apt install haveged | 13:25 |
| fsmithred | that should be enough | 13:25 |
| onefang | "haveged uses HAVEGE (HArdware Volatile Entropy Gathering and Expansion) | 13:26 |
| onefang | to maintain a 1M pool of random bytes used to fill /dev/random | 13:26 |
| onefang | whenever the supply of random bits in dev/random falls below the low | 13:26 |
| onefang | water mark of the device." | 13:26 |
| ShorTie | ya might, but not goona add that to my image for a once for .. :/~ | 13:28 |
| DPA | Could maybe someone look into appstream/DEP-11 support for plasma-discover and gnome-software? https://deb.debian.org/debian/dists/buster/main/dep11/ https://wiki.debian.org/DEP-11 | 14:47 |
| DPA | Devuans repos doesn't have any DEP-11 metadata yet. | 14:47 |
| mason | DPA: Thanks for bringing that up. I'm looking at a repo tool for us and I'll want to be familiar with that. | 15:37 |
| bgstack15 | OK, clearly I'm getting nowhere in my iso-installer work. In order for this process to happen in a timely manner, I'm going to go ahead and un-assign myself that task. | 16:34 |
| mason | bgstack15: This came up during the last meeting. The consensus was that we wanted to ping you and collaborate to see what parts needed attention and help. | 16:39 |
| bgstack15 | I haven't figured out how or why it has to re-download every stinking deb/udeb for every invocation. Can it cache those? | 16:40 |
| bgstack15 | Also, I think how I tried adding the proposed-updates (similar to the SECURITY target on lines 28,29 of pool/Makefile) didn't work, or induces its own failures... | 16:40 |
| bgstack15 | I really don't know what I'm doing with any iso generation. | 16:41 |
| mason | That's a reasonable place to start. | 16:42 |
| fsmithred | bgstack15, we should not have to add proposed-updates to the isos. Or at least proposed-updates should not be in the sources.list in the installed system. Better would be for everything in proposed-updates get moved to the main repo. | 16:55 |
| bgstack15 | Ah. Is there a timeline for that? Or shall we just omit things like that lightdm accessibility fix, that new tomcat9 from LeePen, etc.? | 16:55 |
| fsmithred | I think we're waiting for tomcat, but I'm not sure why | 16:55 |
| fsmithred | does that get included in the server iso or the dvd? | 16:56 |
| fsmithred | or maybe just so that the stuff will all be moved at once. | 16:56 |
| bgstack15 | don't know specifically. I wouldn't want tomcat installed by default... | 16:56 |
| bgstack15 | I can add that if I need it. | 16:56 |
| fsmithred | if it's not already in the list of things to include, I would not add it unless there is clear demand for it from users | 16:57 |
| fsmithred | I missed the last meeting, so I didn't get to ask when proposed packages will be moved. | 16:58 |
| fsmithred | the way to avoid all the downloads is to have a local repo. I don't have that, and so far, ISP does not cap my downloads. | 16:59 |
| bgstack15 | Alas, I don't locally cache all the Beowulf stuff. I only cache Ceres. | 16:59 |
| bgstack15 | but local downloads would happen way faster... | 16:59 |
| bgstack15 | I'll have to consult the storage requirements and my storage capacity. | 16:59 |
| rrq | bgstack15: so you can't clone into someone with spare time? | 23:24 |
| bgstack15 | Well, I can clone myself no problem. I call Clone #1 Dolly, and all it does is bleat. I am uncertain it has free time, though. | 23:26 |
| bgstack15 | Clone #2 never speaks to me | 23:26 |
| rrq | :D | 23:26 |
| bgstack15 | and Clone #3 was last seen heading for Mars... | 23:27 |
| onefang | git clone https://bgstack15.org/ | 23:27 |
| bgstack15 | Yes, but owning a domain probably costs money. I only have a wordpress subdomain | 23:27 |
| bgstack15 | git clone https://gitlab.com/bgstack15/stackrpms.git is one of my busiest repos. | 23:27 |
| onefang | git clone https://bgstack15.unixclone.com/ # A freebie domain from afraid.org. | 23:28 |
| bgstack15 | is that one of those ddns things that requires that clients use it for dns. So basically most users in the world will never be able to resolve my domain? | 23:29 |
| onefang | Nope. | 23:29 |
| bgstack15 | well... I will have to add that to the list of things I want to work on someday. | 23:29 |
| bgstack15 | thank you! | 23:29 |
| onefang | I get all my freebie domains from there. | 23:30 |
| onefang | Including my personal favourite daves.notho.me. B-) | 23:31 |
| rrq | bgstack15: I'll kick the can for a bit, then... at least hoping to get the package overlay sorted | 23:33 |
Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!