libera/#devuan/ Wednesday, 2019-05-15

slvrisn't that because jessie is already systemd? I had a really hard time upgrading directly from debian jessie to devuan jessie on a desktop workstation.... in a container I think it would be even harder.00:04
XenguyI've always heard that it was an easy upgrade, but haven't tried myself00:09
buZzslvr: upgrading devuan jessie to devuan ascii breaks a LXC container's ability to function00:25
KatolaZbuZz: it's just one option away in the lxc config file00:26
buZzKatolaZ: oooo , mind telling me which? :D00:27
fsmithredprimary gpt table is corrupt - everything I'm reading says it's usually the secondary that's corrupt. Is there a way to fix it?00:33
fsmithredI tried gdisk, p - everthing looks ok, then w, and it writes, but gparted still gives that error00:34
fsmithredcan I ignore it?00:34
gnarfacefsmithred: sounds familiar00:36
gnarfacefsmithred: something about replacing a MSDOS partition table that used to boot windows 7 with a GPT partition table, and gparted couldn't fully remove some random weird MSDOS partition table flag from the middle of the GPT sector because it was supposed to be untouched as per spec, maybe?  i recall after extensive googling that i found a way to clear it properly with sfdisk or cfdisk00:38
specingfsmithred: there is a checksum in there00:38
specingfsmithred: so if it says its the primary, its the primary00:39
gnarfacefsmithred: (using dd to zero the first couple megabytes of the disk should suffice too, but probably isn't what you want if you were trying to rescue the partitions)00:39
fsmithredyeah, I saw the think about old msdos partition table, but these are new drives00:40
fsmithred4T00:40
fsmithredright, I copied 1.1T of files to it already00:40
gnarfacedid it ever boot windows 7?00:41
fsmithrednope00:41
fsmithrednever booted anything00:41
gnarfacehmm. i got nothing then00:41
fsmithredok, thanks for trying00:41
fsmithredI probably need to start over00:42
gnarfacei wonder if it could actually be a bios incompatibility with the 4T drive size00:42
fsmithredshouldn't be - it's not that old00:42
golinuxEven as hardware challenged as I am, I had that thought00:43
fsmithredhm00:43
fsmithredusing legacy/csm not uefi00:43
gnarfacei still haven't tested anything larger than 1T here00:44
fsmithrednow I can't remember what command I used, but in terminal it said...00:45
fsmithredT00:45
fsmithredoh00:45
fsmithredno slashes00:45
fsmithred  /dev/md1 unrecognized disk label00:45
fsmithredthen next line00:46
fsmithredthe primary gpt table is corrupt00:46
fsmithredbut it doesn't say which drive00:46
gnarfaceoh, right you said you were setting up a raid array with LVM on it, i also have never tried that yet00:46
fsmithreda raid array made on partitions would not have a partition table would it?00:46
fsmithredjust the disks would have it. correct?00:47
gnarfacepairing LVM with raid might be a source of additional complications, but i believe that a raid array DOES have partitions00:47
gnarfaceas in you are supposed to partition the raid array AFTER striping all the drives00:47
fsmithredthat's what the lvm is for00:47
gnarfacethere's a way to make it work but i don't know what it is.  i just remember that keeps coming up; raid + LVM faceplants without some extra step00:48
fsmithredit's been working for almost 4 years00:49
gnarfaceoh, really? hmmm...00:49
gnarfaceweird00:49
fsmithredwell, I'm sure I did something wrong00:49
fsmithredbrb00:50
buZzKatolaZ: why noooooot01:09
buZz:D01:09
slvrbuZz: my web container is running ,Devuan GNU/Linux beowulf/ceres, upgraded wheezy > devuan jessie > ascii > beowulf01:18
slvrI just stopped it, made a backup, and yolo'd on through with only php package issues.01:19
buZzslvr: :D01:20
buZzon what host platform?01:20
slvrslackware 14.201:20
buZzah, just lxc from scratch then?01:20
buZzor virt-manager perhps01:20
slvrlxc template for debian containers was copied from a debian lxc host01:21
slvrI use lxc download to make new containers01:21
reubyawnhexchat sound test03:02
Xenguyreubyawn: beep beep03:11
reubyawnInstalled a wav file that hexchat play button activates, now how can hexchat make a sound when a post is made? https://www.sounds4email.com/sounds/various.php03:22
fsmithredI think it's in the settings03:22
fsmithredyou need to find hexchat's beep wav file and replace it with yours, I think03:22
fsmithredSettings -> Text events03:23
fsmithredmaybe not. I'm not sure what to do with that.03:24
fsmithredSettings, Preferences, Sounds03:24
systemdleteOn my centOS box (soon to be replaced by devuan and some others), gparted recognizes 3 raid devices I created years ago, but not a brand new one I just created.  Do I need to run a utility to update the kernel' internal cache or something?03:25
systemdlete*kernel's03:25
fsmithredyou made the raid with that same centos?03:26
systemdleteI am asking here because this is the friendliest and most helpful channel I've ever encountered on IRC.03:26
reubyawnSetting, Preferences, Sounds is where I began03:26
systemdleteeh, no.  I think this version of mdadm is more recent.03:26
* systemdlete waves hi to fsmithred03:26
fsmithredyou could try running partprobe but you may need a newer kernel03:26
fsmithredhi03:26
systemdleteit is 2.6.3203:27
systemdleteah, partprobe.  thanks...03:27
fsmithredafter my experience with raid and lvm today, I suggest you burn it.03:27
systemdletenope.  but thanks; that was the command I couldn't think of off-hand03:28
fsmithreddidn't work?03:29
systemdleteActually, this is probably unimportant, but it is just odd.  I am simplly wondering why this is.03:29
fsmithredmaybe newer version of mdadm03:29
buZzparazyd: which Acer Chromebook (chromeacer)03:29
systemdleteIn fact, I can see gparted runs partprobe and spits out the same messages03:29
buZzparazyd: does devuan support, actually?03:29
buZzseems they made a ton of different models03:30
systemdletebut it was worth a try anyway.03:30
systemdletefsmithred:  I am tending to think likewise.03:30
fsmithredI've seen similar problems with fsck03:30
buZzsystemdlete: maybe just reboot the machine?03:30
buZzsystemdlete: or maybe, try this ; https://bash.cyberciti.biz/diskadmin/rescan-linux-scsi-bus/03:31
systemdleteThe older raids are either 0.90 or v1.0; the new one is v1.203:31
buZzhere without a 300 line bash script ; https://blogs.it.ox.ac.uk/oxcloud/2013/03/25/rescanning-your-scsi-bus-to-see-new-storage/03:31
systemdletemaybe older gparted does not recognize this newer format03:31
buZzcentos anything is 'older'03:33
buZzarent they still on 3.10 kernels?03:33
systemdletebuZz:  thanks.  Yeah, this is C6.  Nope, older than that, buZz.  2.6.3203:33
systemdletewhich is why I need to move on to Devuan or Hyperbola or Alpine...03:34
systemdleteI am working on this now03:34
koollmanwell 3.10 for centos703:34
buZzsystemdlete: holy f03:34
buZzsystemdlete: forgot to install updates or something?03:35
systemdleteactually, if I cat those devices as per the article you cite, buZz, it only lists ahci 4 times and pata-atiixp twice.03:35
koollmanalthough of course there's a bunch of backports in that kernel and you can get a more recent kernel easily enough03:35
systemdletebuZz.  No.  Support on C6 ran out years ago.03:35
fsmithredyeah, 3.10 is in centos 703:35
buZzsystemdlete: thats why you install upgrades right?03:35
buZzto move to supported software :P03:35
fsmithred3.10.0-862 so I guess it's well-maintained03:35
systemdleteright.  But C6 is the last of the Mohicans (ie, pre-systemd)03:36
systemdleteThere is no way I will have that monstrosity on any hardware I own.  A VM perhaps.  But not my precious hw03:36
systemdleteYes, there are backports.03:37
systemdleteBut, frankly, those are not well-supported.  It's kind of use-at-your-own-risk03:37
koollmansystemdlete: well, so is centos6. so ... :)03:37
systemdleteAs it is, I am no longer able to get much support on C6.  I am really, really anxious to get to Devuan installed here.03:37
systemdlete:)  (indeed, buZz)03:38
systemdleteThey are pushing everyone to C7, and now C8 is out a few days ago03:38
systemdletewell, RH803:38
systemdletebut they want everyone under the big Redtent03:39
systemdletemagical world of Harry Poettering03:39
koollmanI would try adding elrepo, then kernel-lt package (or even kernel-ml), and see if you can boot on that. Then once you solve your problems, of course, use devuan :)03:39
systemdletekoollman, actually, if I am going to spend my time (and yours, thank you) on ANY project, it will be Devuan, Hyperbola, Alpine, etc.03:40
systemdleteThe system is stable enough on C6.  A bit frustrating at times, but stable.  The next cold boot will be to install replacements.03:40
systemdlete# mdadm --version gives me: mdadm - v3.3.4 - 3rd August 201503:42
systemdletegparted has little real RAID support anyway.  OK.  Time to get back to deployment...  thanks to all who chimed in03:43
systemdletealways appreciate it!03:44
buZzmdadm - v3.4 - 28th January 201603:44
buZzrandom ascii system03:44
buZzmy /dev/md0 is         Version : 1.203:45
systemdletewhoops.  I meant gparted gives me:  0.31.003:47
systemdlete(the more important part)03:47
systemdlete(since it is gparted that is goofing on me)03:47
systemdletebuZz:  Does your gparted recognize /dev/md0 ?03:49
buZzi never used gparted03:49
koollmangparted (and parted) is not good with raid03:49
systemdletethen again, I created the new device as /dev/md_d2, which is a slightly different convention (completely legal and suppported, though)03:49
buZzdo you mean fdisk?03:50
koollmanand I dislike it because it's not good with much more than very basic cases03:50
systemdletekoollman:  Yes, very limited support.  You can create a pv with it03:50
systemdleteno, I mean gparted03:50
systemdleteoh.  Wait.03:51
systemdleteOnly CERTAIN types of RAID are partitionable.  This format is not I think.03:52
systemdleteThat is probably why it is not referencing it at all.03:52
* systemdlete kicks himself in the head. He JUST read about all this not 45 minutes ago!03:52
systemdleteBy "types," I mean, depending on the naming convention used, it may or may not be partitionable.03:53
systemdleteAnd gparted is not likely to be interested in a device that can't be.03:54
systemdleteMark this solved...03:54
buZzarent all mdadm raids just block devices?03:55
buZzyou can always partition any block device03:55
drawkulasome03:56
systemdleteman mdadm and search for the sections on device creation and naming03:57
buZzwhich mdadm raids are not block devices?03:57
drawkulacan youpartition a floppy?03:57
buZzyes03:57
systemdletedrawkula: I know what buZz is saying, but actually, you really can partition almost anything.  I've partitioned USB sticks in the past.03:58
furrywolfI've never seen a partitioned floppy, but I don't see why you couldn't...03:58
systemdletefurrywolf:  Scientists have even split the atom.  Big deal, right?03:58
systemdletepartitions on a 1.4Mb device03:59
systemdleteMB03:59
buZzwell, its 2.0MB without filesystem :P03:59
koollmanat some point, the question isn't "could you" but "should you" :)03:59
systemdlete:)03:59
buZzsystemdlete: fdisk /dev/md_whateveryoucalledit04:00
buZzi'd wanna bet you can just do 'o' 'n' 'p' 'enter' 'w' and have a partition on your new mdadm raid04:00
koollmannow I prefer unpartitionned devices as much as possible (for most non-booting disks)04:00
systemdletebuZz:  no doubt.  But as far as gparted is concerned, it doesn't seem to want to touch them.04:00
buZzo (new empty partitiontable) n (new partition) p (primary)04:01
buZzsystemdlete: that matched my opinion about gparted so i have to respect its wishes04:01
buZz:D04:01
buZzif its not a black window with white text on it, its lowering your paygrade04:01
reubyawnQ: How does Thunar, Devuan's file manager, display the '.config' hidden directory?04:10
brocashelmctrl + h04:11
systemdletedoes devuan install do its work behind a firewall, or does it run "naked" to the Internet?05:23
systemdletei.e., to clarify, does install set up a firewall before it begins install?05:23
systemdlete(I assume it does, but I want to be sure!)05:24
koollmanit does not, afaik. I'm not sure why it would. it also does not setup the network until you have advanced into the installation. And there's no running service to connect to, unless you choose to start them05:25
systemdletekoollman, so I don't need Internet for install?05:26
systemdlete(I mean, the initial install from ISO)05:26
koollmanyou don't. it's nice to have internet to add packages that are not on the iso, but it is not necessary05:27
systemdleteI can add those after install/reboot/configure firewall05:27
koollmanyou could. I'm not sure why you think it is necessary05:27
systemdletesome distros are net install only, or have an option to.  That's why I'm asking.05:27
koollmanyou also could setup basic firewalling during install, from a shell05:28
slvrIf you want to install without telemetry, yeah it will work fine.05:28
koollmanif you feel more secure that way05:28
systemdletetelemetry?  More about being vulnerable during the install if grabbing packages off the net.05:28
slvrhah. I'm annoyed at ubuntu and firefox lately for colelcting user stats by default...05:29
koollmansystemdlete: vulnerable to what ? what's the attack surface ?05:29
systemdleteslvr:  What could devuan possibly do with my info?05:29
systemdletekoollman:  Idk. An open internet port connected to a repo somewhere deep in the web?05:30
slvrI have an exhaustive list or anything, I'm just glad it's not aggressively collected is all. re, no net connection required during install05:30
systemdletethe odds are low.  I'm just more on the paranoid side.05:30
koollmansystemdlete: Paranoia is fine, but you have to know what you're trying to protect from05:31
systemdleteistr that back in the horse-and-buggy days of Linux, that some installs could be vulnerable.  But I really don't remember clearly what that was.  Seems like some issue with SuSE maybe?05:32
koollmansystemdlete: can you think of an attack that wouldn't go through a proper firewall setup, but would work on a debian-based system being installed ? (I could now that I think of it, and will check what is running on the default installer :) )05:33
koollmanbut I think it should be pretty safe05:33
systemdletesorry, koollman.  I'm not an expert on Internet hacking or security in general.  I agree it should be OK.05:34
koollman(become expert then. not paranoid enough ;) )05:38
systemdletebbl...06:06
systemdletethanks to all for help06:07
HundWhat is Devuans stance on the whole Debian switching to Wayland thingy?10:55
furrymcgeedoes it depend on a specific init system?10:56
furrymcgeeor logind10:57
xinomilosecurity upgrades for linux-image & intel-microcode ...13:51
cosurgiGuys, about this latest security vulnerability. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=928989#12 - does it mean that I can do `lsmod | grep -i rds`, and if I don't have module rds loaded, than I am safe?16:27
cosurgi*then16:27
gnarfacecosurgi: "This is therefore only exploitable on systems that actually use rds."19:14
gnarfacecosurgi: (yes)19:14
gnarfaceassuming you didn't build your own kernel and statically compile it in19:15
gnarfacebecause then it would not show up in lsmod19:15
cosurgignarface: thanks :)19:34
cosurgignarface: btw,  I couldn't find a "security" section on https://dev1galaxy.org/19:35
cosurgiIf I wanted to ask about this on forum, I wuold have to post in "Other issues" ?19:35
gnarfacegood question.  i guess so for now.19:35
gnarfacethere shouldn't be really much about security that's not directly inherited from debian at this point19:36
golinuxThat sounds like a good place19:37
xrogaanDebian switch to wayland?21:22
se7enI sent an email to the ML21:28
se7enAnd it has not come back yet21:29
golinuxse7en: That's because you are moderated on the list.  Not my doing but I'm not going to undo it because there must have been a reason.21:54
se7engolinux: I thought I was removed from the moderated list22:04
se7enI continued to tell this channel that I was erronesly put there, and I was told I was taken off the moderated list an entire year ago22:04
se7enI have a bug report to send22:04
se7enTake me off the blacklist22:04
jaromilse7en: I received your email22:06
jaromilfrom the ml i mean22:06
se7enSo am I on a blacklist or not22:06
se7enYes, I just recieved it to22:06
jaromilyou are not22:08
jaromilas far as I can recall, you were blacklisted for forwarding a spam mail to the list, marked as OT22:08
se7enThat is true22:09
jaromilI guess you just wanted to crack a joke, perhaps bad timing22:09
se7enseveral years ago now22:09
jaromilbut you showed also consciousness since it was marked OT22:09
jaromilyes unfortunately attending this sort of unpleasant chores is noone's ambition22:09
jaromili use some cock.li related mails now and then and also use tor so your report email is very welcome22:10
jaromilmy setup is based on my own wrapper "jaro mail" and i also use fetchmail22:10
jaromilbut not procmail22:11
jaromilwill try something perhaps i can give you some hints22:11
se7enthank you22:11
jaromilmy guess is that you are facing two different problems, one related to permissions and wrappers (mutt_dotlock)22:13
jaromiland one to fetchmail access to the mail spool as you point out22:14
jaromili recommend migrating from /var/spool to a maildir in your own user directory22:15
jaromilperhaps that can sort out both issues22:15
se7enCould work, though I want to use that spool22:18
se7enjaromil: I just tested something and can say with certinty it is not my spool22:25
se7enI just torified mutt, and then ran it with my alternative muttrc for a different account. This one is pure mutt retrieving from the IMAP, no local save22:25
se7enIt produces the same errors22:25
jaromiljust mutt? no fetchmail / procmail involved then?22:26
se7enI must go now. Any new developments put into the ML since I won't be here. Thank you.22:26
se7enWell, fetchmail itself has issues22:26
se7enIt seems the mutt issue and the fetchmai lissue are just coincidental to occur at the same time22:26
jaromilok well... also mutt in my experience... gpg integration and such22:26
se7enAlways torified22:26
se7enI will see you later22:26
jaromilok, ciao22:26
Hundjaromil: Why can't I see who you're talking to?23:34
golinuxMaybe you have them on ignore23:39
HundNo.23:40
jaromilstrange. I was talking to se7en23:41
jaromilhe is not a freenode registered user, FWIW23:41
golinuxCan you see it here? http://maemo.cloud-7.de/irclogs/freenode/23:43
Hundgolinux: Yes. Weird.23:45
golinuxMaybe some other filtering on your end?23:46
HundNo. I checked. :) I'm not saying it's not me though.23:46
MinceRunidentified users are silenced (there's $~a on the +q list), but i can't tell why some people can see what they're saying23:46
MinceR(or maybe that entry uses incorrect syntax and actually does nothing)23:47
HundAh23:48
jaromilI'm the channel founder so maybe that?23:51
jaromilbut then the archiving both and anyone else would not see it also23:51
golinuxI think I have ops here too.  Maybe that's why23:52
golinuxSo does joerg.23:53
MinceRwould every ircd keep consulting the access list? seems doubtful23:53
MinceRseemed to me they've gone to some ends to avoid having to do that and rely on modes instead23:53

Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!