libera/#devuan/ Monday, 2022-02-07

rwppvcreate marks the partition with an LVM signature.  (A signature which may be wiped off.  "wipefs" is one tool.)01:35
rwpI like to think of it as one or more PVs => feed into one or more VGs => distribute out to one or more LVs.01:36
rwpUsually in our simple cases we have one PV feeding into one VG.  That would be a typical encrypted laptop setup.01:37
rwpBut in a server we might have many PVs feeding into a single VG.01:38
rwpIn all cases though we usually have multiple LVs being created from the VG creating a "fanout" to several different uses.01:38
rwpIn an encrypted laptop mostly that would be at least the root partition and at least enough swap to hibernate to disk.01:39
rwpSince on an encrypted setup one LUKS passphrased PV can fanout to multiple LVs and therefore allow for one passphrase for the PV yet unlock all of the LVs all at once.01:40
rwpOtherwise with multiple PVs each encrypted usually there would require multiple passphrases.01:40
rwpIn a server with significant disk space it is typical to create partitions using LVs for separate purposes.  / root for the OS. /var for the mail and log spool.  /home for users. And more.01:41
rwpIt's not unusual to see dedicated uses, or users, to be given a dedicated LV partition just for them.  Especially if they are likely to fill it to 100% at random times.  It keeps them contained.01:42
rwpmdt, It sounds like you created a VG already, which is why it is already active, already containing disk space.  Creating a second one with a different name seems wrong because then you would be making an island of the first disk space.01:46
rwpmdt, If it doesn't make sense yet run "pvs; echo; vgs; echo; lvs" and look at the output.  Pastebin it to us if you want a second set of eyes on it.01:48
fsmithredmanual partitioning in the install for encrypted partition or encrypted lvm is tricky.02:32
rwpI always use the guided mode for setting up encryption.  Works well.02:33
fsmithredautomatic partitioning for encrypted lvm is pretty easy, but if you let it split up the system into multiple logical volumes, it makes some weird choices for volume sizes02:33
fsmithredand the weirdness increases for smaller disks. (Don't do this in a small test VM)02:33
rwpfsmithred, I used the refracta nox live iso yesterday to do some work on a laptop where I didn't want to boot the installed, ahem, winders, OS.  Worked great!02:34
fsmithred:)02:35
rwpBut for one problem.  The machine has a physically broken up USB port.  So the Linux kernel was every second or so reporting errors to the console.02:35
rwpI had to run "dmesg -n3" in order to silence the console messages to allow the console to be usable.02:35
fsmithredoh, does it keep disconnecting when it moves?02:36
rwpIn this case the plastic tab that the connectors are usually attached to is physically busted up and gone from the machine.02:36
rwpLeaving the conductors just hanging out in the air.  And even though they don't look shorted to me the Linux kernel reports that it cannot initialize port usb3 or usb4 depending upon the order it grabs it at boot time.02:37
rwpReports it every second.  Damnably annoying trying to use the console with that spewing to the console.02:37
fsmithredit needs a popsicle stick jammed into it?02:38
rwpI could close my eyes and type "dmesg -n3" pretty easy.  But I could see that being one of those problems.02:38
rwpI might take the case apart and see if I can remove that socket or something.02:38
rwpI can't complain.  It's a Dell Lattitude E6330 with 16GB RAM that a friend bought for $1 at a company auction and then through the course of events gave it to me for free.02:39
fsmithreddid the message say something about a bad wire?02:39
rwpI didn't jot down the error message.  I'll be booting it again in a bit and will capture it for you.02:40
rwpBut the point isn't this particular error message.  The console might be splatter with other error messages.02:40
fsmithredI had a repeating message about a bad usb device, and it asked me if I maybe had a bad wire.02:41
rwpMartian packets on the network.  Other random things.  Anything like that on the console makes it surprising and hard to use.02:41
fsmithredI thought it was related to the port I was using, but the message stopped happening.02:41
rwpI'll just note that Debian never defaulted the console to any particular level.  But Red Hat has always defaulted to 3.02:41
rwpI can usually get away with it being 5.  I normally set the console to 5 in my firewall scripts.  But since this was an actual error I had to walk it down to 3 in order to silence it.02:42
fsmithredthere's a line in /etc/sysctl.conf for that02:42
rwpPerhaps a local file dropped into /etc/sysctl.d/00-refracta-console.conf or something?02:43
rwpAn early number to allow someone to decide to override it with a later number?  (shrug)02:43
fsmithredI think adding 'quiet' to the boot command also suppresses it02:43
rwpI think quiet only suppresses boot time messages.  Pretty sure.  I'll have to look and try it.02:44
fsmithredI just close my eyes when it happens02:44
fsmithredand keep typing02:44
rwpAnd lots of Control-L screen refreshes!02:44
rwpI'm booting it up now.  My original goal for this was to have it run the Garmin G1000 sim for classroom training purposes.  We are always short on training station machines.02:46
rwp"usb usb3-port1: Cannot enable. Maybe the USB cable is bad?"  Every second.  Some boots it is usb4-port1 so a race on that assignment.02:49
rwpBut really it might be any error that any random individual has on their particular machine.02:49
rwpFor reference I have these: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/include/linux/kern_levels.h02:50
rwpThis was useful too. https://tuxthink.blogspot.com/2012/07/printk-and-console-log-level.html02:51
rwpThat last mostly for the "cat /proc/sys/kernel/printk" to list the current values.02:52
fsmithredyeah, that's the same message I was getting03:19
fsmithredI think putting it in the laptop case and taking it for a ride in the car fixed it.03:21
rwpI should probably separate the wires as best as I can and then fill it with RTV silicone or something.03:21
rwpBut it might be on a separate board that I could just remove from the machine.03:21
rwpLiterally the plastic tab part of the USB is gone and the wires are just floating in the air inside that socket.03:22
rwpWhich will of course include +5V and GND which might be shorted and might be the source of the kernel error.03:22
rwpIt's limited to 500mA though which is pretty tame.03:22
fsmithredstill annoying03:22
rwpBut not to distract from other success I was able to boot the refracta nox and get it on the network and do a bit copy of the drive and all of that went very nicely. :-)03:23
fsmithredyeah, it has a few extra utilities03:25
friendofafriendDo you have net-tools and bash-completion in the base install?03:30
fsmithredI think so.03:32
fsmithredyou mean in a netinstall without desktop?03:32
fsmithredI'm sure those things are in the refracta no-X isos.03:33
rwpYes. Just looked. Both of those are in the no-x iso.  (And it still fits on a cdrom in size!)03:36
rwpSo retro I know but recall that the USB is smashed on this hardware so I am booting the spinning cdrom for it.  (smile)03:37
fsmithredwasn't that long ago that the xfce iso fit on a CD03:44
Xenguy*on a floppy03:51
XenguyHere..03:53
XenguyYour operating systme is on one floppy...03:53
XenguyAnd your wordprocesser and data are on another floppy03:53
XenguyCool03:53
fsmithredlol03:54
brocashelmDamn Small Devuan03:54
XenguyHilarious right?03:54
fsmithredwe are OT03:54
Xenguyoh yeeeeeeeaaaaaaaaahhhhhhhhhhh03:54
friendofafriendCongrats on rolling some ARM images, guys.  Is there a compatibility list, or is it just the Raspberry Pi now?04:01
fsmithredhttp://arm-files.devuan.org/04:02
fsmithredyou saw those?04:02
friendofafriendfsmithred: Sorry, saw the directory and not the README.04:03
fsmithredthere are also installers for some arm arches.04:03
fsmithredI don't know about using them.04:03
friendofafriendI'm so sick of systemd and Debian breaking things for kicks.04:03
friendofafriendI'd rather use daemontools, or runit.  And have ifconfig and arp in my base install.04:05
fsmithredhttps://pkgmaster.devuan.org/devuan/dists/chimaera/main/installer-arm64/current/images/04:06
fsmithredhttps://pkgmaster.devuan.org/devuan/dists/chimaera/main/04:07
fsmithredpoke around in there ^^^04:07
fsmithredrunit works, and there are run scripts floating around that you can use.04:07
friendofafriendCool, I'm just over these parrot hairs playing games with Debian.  Thank you.04:08
fsmithredif you can run amd64, I have a demo live-iso with runit04:10
mdttk: LVM exactly that is my understanding, but the wording in the installer is quite confusing, sometimes it says partitioning while it wants to create LVs, so while all you said is clear to me i still wonder why that isnt clearly reflected in the messages of the installer.10:45
tkmdt: how I've done these kinds of things is to prepare things such that in the installer you just tell it root is here, home is here, var is here, swap is here etc12:31
tkand once the installer is finished, manually verify the /etc/fstab /etc/crypttab /etc/defaults/grub and manually re-configure and re-install grub if necessary12:31
tkbut I have been dealing with VERY custom setups12:31
tkit might be with your setup you can get away with just giving the installer some pre-configured LVM and it should just work12:32
tk(for reference, I had hdd(ESP, LVM(LUKSv1(/boot), LUKS(LVM-Data(/root, /home, /var)), LUKSplain(swap))12:35
tk(there are good reasons for all the over-complication)12:36
tkAlthough I think I could have gotten away with LUKSplain for the inner LVM but I wasn't sure what I would be losing by doing that (currently it's LUKSv2 with the key being a 512 bit random key stored in /boot)12:37
tkThere's an argument to be made for just using LUKSv1 for the LVM-Data and put /boot in there12:39
tks/bit/byte/*12:43
Walex2why not use an SSD with hw encryption? Makes everything easier.12:49
Walex2it also makes the SSD hotter though.12:50
tkhmm, I didn't think of that, might not be the worst idea13:00
tkthe only issue is the question of what quality of encryption does this built-in encryption provide?13:02
Walex2tk: note that there are *two* ways to do hw encryption, the "easier" one uses the HD security password in the BIOS, the other uses a standard with a funny acronym.13:02
Walex2tk: it is always AES. If you have "real security" issues to that level you cannot trust the EFI BIOS or the SSD firmware either :-).13:03
* Walex2 is far from a security guy, but thinks by reading stuff on the web that the rabbit hole goes far down13:04
tkyes, sure, the issue is with transparency, I can say to my employer: "I used LUKS with these parameters etc" if something goes wrong, I can't say the same about whatever mystery black box implementation the SSD uses13:04
Walex2tk: there is very little difference there...13:04
tkvery little difference where?13:05
Walex2between LUKS and the hw encryption from a big manufacturer, or that of the EFI BIOS.13:05
tkThere is a difference in LUKS in that, aside from the underlying hardware being compromised, I can demonstrably show how I configured the encryption13:09
u-amarsh04upgrading to Perl 5.34.0-314:47
u-amarsh04x86_64 done, waiting on the i386 packages14:48
eyalrozDoes someone maintain an APT repo of older GCC versions (or rather, new versions of old GCC major-versions) for Debian 11, or Devuan Chimaera?19:24
eyalrozI happen to need GCC 8 for something19:24
fsmithredeyalroz, if you want gcc-4.9 or older go to archive.debian.org. All the newer ones are here: http://ftp.us.debian.org/debian/pool/main/g/19:31
eyalrozfsmithred:  I don't think there is a debian package for every gcc major version x debian major version combination19:32
fsmithredI think all the packages that are or were available through apt are still there.19:33
fsmithredif it needs to be forward-ported, I guess you are on your own.19:35
rktaeyalroz: I had the same problem some time ago, but with gcc4.7. After wasting same time, I just installed a VM with an old debian version which had a gcc close to the one I needed and compiled the specific version myself.19:42
eyalroz@rkta: Last time I had this problem, I built gcc from source, with IIRC is not so trivial. But I personally don't believe in VMs, so I won't go that route...19:43
rwpeyalroz, Since Unstable usually rolls through most major versions of gcc you should be able to find most older versions at snapshot.21:12
rwpeyalroz, But they may not be installable on current releases.  Instead the usual thing is to build a chroot of the previous release where everything is consistent.21:12
rwpI always keep actively working chroots of all major older releases for I need to refer too.21:13
rwpBut I can debootstrap rebuild older releases on demand as needed.  That's the way to go for these things.21:14
ibanjaOK... so, today my backspace started producing '^?' instead of backspacing... So I searched and found a command to fix it (still not sure what caused it)-- the command: stty erase '^?''22:25
ibanjaThat seemed to work until it got tedious doing it for each opened screen session (about 2 months worth of open screen sessions) so I rebooted.22:25
ibanjaEverything was fine until... now I hit space and I don't get a space. shift+space gives me a space.  Any ideas? I can't remember any updates or config changes that I have made.22:25
ibanjahow can I check/change the default keyboard layout?22:26
fsmithreddpkg-reconfigure keyboard-configuration22:29
fsmithreddpkg-reconfigure -plow keyboard-configuration22:29
tkWalex2: looks like the NCSC has found issues with the implementation of the encryption on some popular consumer drives (samsung, crucial) and it has me worried now22:37
tkI will have to do some research into more modern drives to see if anyone has tried checking for similar issues22:38
ibanjafsmithred: what is the -plow switch? I don't see it in the man page.22:39
tkI like the idea, and it seems a relevant UK government has looked into the idea too, although the NCSC also recommends LUKS22:39
ibanjaalso... I no longer have dpkg-reconfigure installed... something is wrong here.22:39
fsmithredpriority=low (more questions)22:40
ibanjanevermind about the absence of dpkg-reconfigure... I was in my user shell22:41
ibanjaI have Generic 105-key PC (intl.) selected, which is the same as my other installs...22:45
onefangAnyone know what HeapHelper is?  My log files tell me it segfaulted, but I never heard of it.  Can't find it in the path, or any other places I was likely running things from..23:21
onefangAha, HeapHepler is part of libjavascriptcoregtk the JavaScript engine used in WebKit.23:54
onefangNot an actual file, but is a symbol in that library.23:54

Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!