libera/#devuan/ Sunday, 2022-09-04

gnarfaceAndroUser: please use paste.debian.net or just /msg it to me if you want me to actually read it00:03
AndroUserI took a photo because my laptop isn't connected to the internet.00:04
gnarfaceoh, imgur.com then00:04
AndroUserI tried connecting the hotel WiFi via MAC address using "wpa_cli wbs_pbc", MAC address was detected but I couldn't get to the Hotel login screen on my GUI browser.00:06
gnarfaceoh, if it's a captive portal thingy, i'm not sure what software in linux supports that00:07
gnarfaceyou might have to actually decode the hex dump of the reply into a url and manually paste it into a browser00:08
AndroUserhttps://wiki.debian.org/CaptivePortal00:09
AndroUserthis?00:09
gnarfaceyea, though i don't know if that information is complete00:10
gnarfacei forget now exactly how i was doing it, but i think i had figured this out at one point but not using xdg-open00:11
gnarfacethere is some way to get some data from the AP but it just looks like a bunch of raw hex00:11
gnarfaceusually it decodes into a raw http header or at least a url with some vendor-specific garbage associated with it00:12
gnarfacesometimes you can use that in whole or in part manually00:12
gnarfacemake no mistake though, they're actually doing this to try to keep unapproved vendors' client software/hardware out specifically, it's vendor lock-in, anti-trust style, and is probably one of those things that is technically illegal but law makers aren't smart enough to notice it happening00:13
gnarfaceso, the end result is that if you're unlucky you can get yourself permanently blacklisted by the AP by poking at it in the wrong way, be careful how you use whatever URLs you find in there00:14
gnarfaceas i understand it, there's no standard way to handle these things, so that's why the only support for them is through shady under-the-table deals direct from the AP vendors to Google/Apple00:15
gnarfacethey pay money to get a private exception added to Android and iOS and then everyone just keeps it a secret00:16
gnarfacemind you, just from the information i've seen so far i don't know that's actually the problem, i've been having a lot of problems with wifi here that seems to be related to poor driver implementations in linux00:18
gnarfaceAndroUser: if that xdg-open trick doesn't work, try something like "iw wlan0 scan"00:31
gnarface(that should dump a bunch of information about all the wifi networks in range, maybe you can see what looks like a few lines of random hex data in there)00:31
Xenguyre: the keyring issue today:  I tried the current workaround recommended in IRC by bb|hcb , and this is the output I receive:01:04
Xenguyhttps://paste.debian.net/hidden/c7b6dc48/01:04
XenguyThere are still a few errors in evidence, and I'm wondering if this is expected behavior, or not?01:05
XenguyOh, this is Beowulf BTW01:06
XenguyIOW, should I proceed, or is the workaround currently being used for Stable not applicable to Oldstable?01:15
rrqnote: https://dev1galaxy.org/viewtopic.php?pid=37322#p3732201:16
Xenguyrrq, Unclear, are you suggesting I should manually download the file, check the checksums, and manually install instead?01:27
fsmithredXenguy, it looks like the keyring got upgraded. Did you try running another update afterward?01:55
fsmithredI can try that on chimaera and see what happens. I used the deb package on beowulf.01:56
Xenguyfsmithred, Let me try the sequence another time then01:56
fsmithredjust 'apt update' and see if the errors are gone01:56
XenguyOK, sec01:57
Xenguyfsmithred, The errors are not gone when I do:  apt-get update && apt-get upgrade -s01:58
fsmithreddoesn't -s mean simulate?01:59
XenguyYes01:59
fsmithredso you didn't install the new keyring01:59
fsmithredyet01:59
XenguyCorrect01:59
fsmithredeven though it says you did. That's weird.01:59
fsmithredI think the errors go away when you get the new keyring.01:59
XenguyI'll try this, as bb|hcb recommended:  apt-get update --allow-insecure-repositories && apt-get install devuan-keyring --allow-unauthenticated -s01:59
Xenguy^^ Again02:00
XenguyOK, even though there are error messages noting things, I think I should just proceed.  Although there is something to be said for manually downloading instead and checking the checksums, hrm02:01
joergdoesn't help there are TWO threads on forum now02:01
* Xenguy can hardly keep up...02:01
fsmithreddoesn't work in chimaera02:05
golinuxMaybe fsmithred could join the 2 threads. I am just ignoring the whole issue for the moment . . .02:05
fsmithredand in chimaera, apt-get does NOT have an option "--allow-insecure-repositories"02:06
fsmithredit only has --no-allow-insecure-repositories02:06
fsmithredwtf?02:06
golinuxThe "bus factor" is haunting us . . .02:06
fsmithredXenguy, if you're going to proceed, you must run it again without the -s02:07
golinuxWill this ever be automated so synaptic can do it?02:07
fsmithredbut I don't think it'll work anyway02:07
fsmithredAdding this to apt config as suggested in man page did not help: APT::Get::AllowUnauthenticated;02:17
Xenguyfsmithred, hrm I just assumed that 'apt' or 'apt-get' was interchangeable, but you seem to be indicating otherwise02:17
fsmithredthey don't have all the same options02:17
XenguySo I'm learning, hrm02:17
fsmithredbut they are mostly interchangeable02:18
XenguyThat's fine, I can use 'apt' instead, np02:18
fsmithredthey fail equally well in this case02:18
Xenguy(Ahhh, the beautiful sound of heavy rain02:18
Xenguy)02:18
XenguyAlright, I'm pivoting here, and will d/l the keyring file, check checksums, and then 'dpkg -i02:23
Xenguy' to install02:23
rrqthose apt options don't work until you've removed teh InRelease file manually. did anyone read the isntructions?02:28
XenguyJesus H. Particular Christ02:28
XenguyI followed the 'Alternatively' path you previously posted, here:  https://dev1galaxy.org/viewtopic.php?pid=37322#p3732202:29
rrqyes, that;'s good too; it's an alternataive02:30
XenguyThat appears to have gone fine, yet now it wants to install more updates than I would have expected (it could still be legit):02:30
XenguyCalculating upgrade... Done02:31
XenguyThe following packages will be upgraded:02:31
Xenguy  ghostscript libflac8 libgs9 libgs9-common qemu qemu-block-extra qemu-kvm qemu-system-common qemu-system-data qemu-system-gui02:31
Xenguy  qemu-system-x86 qemu-utils02:31
oolonahoy!02:31
XenguyI assume I should just damn the torpedos and go for it02:31
rrq(I've been carrying stuff so my fingers goa little be theym selves)02:31
ooloni see the gpg key just expired. a is there going to be a update soon?02:31
* Xenguy sighs...02:31
rrqas long as you haven't changed your sources.list entries, than those are ordinary upgrades02:32
rrqXenguy: ^^^02:32
Xenguyrrq, That's what I assumed, they arrived just in time to confuse the issue, of course  = )02:32
XenguyDamn you Murphy!02:32
Xenguyoolon, See /topic02:33
rrqcould someone change forum pointer in /topic to 37322#p37322 rather?02:34
ooloncool so it expires in a few hours02:35
brocashelmi think post 37322 should also be made into a separate thread02:36
rrqmmm, yes. maybe golinux has the hands-on for such a thing ingrained?02:42
brocashelmiirc, fluxbb supports this function (to split post(s) into a thread)02:46
brocashelmif not, then just repost the same information plus the other working solutions as fallbacks02:46
rrqmight be easiest :)02:47
Xenguyrrq, I was think that too.  Better yet (if no one objects, or if someone will vouch for me), give me a 't' flag and I'll do it myself02:48
Xenguys/think/thinking02:48
XenguyOr somebody give me a 't' flag so I can adjust /topic02:48
XenguyThat way I can be useful while the real wizards do the heavy lifting : -)02:50
golinuxIt can be split but I am not competent to understand this topic yet.02:54
golinuxbrocashelm: rrq ^^^02:55
golinuxThreads can also be joined.02:56
golinuxfsmithred could do it too.02:57
golinuxI looked at joerg's post and just glazed over . . .03:00
joerghm?03:00
rrqhttps://dev1galaxy.org/viewtopic.php?pid=37324#p3732403:02
joergok?03:04
fsmithredI think there needs to be a note after "https://dev1galaxy.org/viewtopic.php?pid=37324#p37324" that says "Ignore the errors and proceed to the next command."03:07
fsmithrednot aftert http:blah03:07
fsmithredafter # apt-get update --allow-unauthenticated --allow-insecure-repositories03:07
XenguyIt might be better to just advocate the other method (download, check checksums, and manual install) cos it trains users to check the validity of the file they just downloaded?03:08
joerg+103:08
fsmithredyeah, that was more comfortable for me03:09
joerg"--allow-insecure-repositories" sounds nasty, read it aloud and listen ;-)03:10
golinuxWill this ever happen automatically in synaptic?03:11
XenguyOK, looks like I'm patched up now, thanks everyone for all assistance rendered03:11
Xenguygolinux, You might need to temporarily hit the CLI03:11
* golinux groans . . .03:11
fsmithredXenguy, I can't give you a +t03:11
Xenguywhich is not so bad if someone gives you a simple instruction03:12
Xenguygolinux, ^^03:12
Xenguyfsmithred, Nothing ventured, nothing gained.  I'm only seeking to help with /topic updates.  Seems joerg has it covered, so no biggie03:12
golinuxNot tonight at least . . .03:13
Xenguygolinux, I'm happy to walk you through it step-by-step, it just worked for me, and I think you'd find it pretty painless.  Let me know if you'd like to proceed, and when would be a good time.  You know where to find me : -)03:15
rustyaxeThanks to all who worked on repairing the repos/keyring. Cheers!03:17
XenguyIMHO the second alternative should be first, and the first second...03:24
XenguyStill, good enough, and good job03:24
joerghttps://dev1galaxy.org/viewtopic.php?id=5213  was too terse?03:26
joergnote you truncated topic now03:26
fsmithredwhat got lost?03:26
fsmithredoh, I see it03:27
joergopic03:27
Xenguyjoerg, I thought it was great, I just felt that 'First alternative' should be 'Second alternative', and vice versa03:27
joerghttps://dev1galaxy.org/viewtopic.php?id=5213  is 100% idetical function to https://dev1galaxy.org/viewtopic.php?pid=37324#p3732403:27
XenguyWhatevsies : -)03:28
XenguyNot gonna lose sleep over a detail03:28
* fsmithred edits his notes03:40
ooloni powered through and it worked05:06
ooloni powered through and it worked05:06
WonkaDid I miss some update of the devuan-keyring package? I have 2017.10.03, and that contains keys that are now expired, breaking "apt update"...09:15
D-HUNDWonka: https://dev1galaxy.org/viewtopic.php?pid=37324#p3732409:17
Wonkaoopsie :)09:21
Wonkathanks!09:21
Wonkanow I'm kinda wondering how to monitor when signing keys of repositories expire...09:22
* _ds_ prefers use of ‘here’ docs & use of the --check option in instructions for checking hashes (where there are commands to be pasted)13:10
nonono12345EXPKEYSIG BB23C00C61FC752C Devuan Repository (Amprolla3 on Nemesis) <repository@devuan.org>16:16
gnarfacesolution in /topic16:18
joergWonka: that's the best question of the week (how to monitor expiry date) - I'm sure any suggestions are highly welcome17:10
djphjoerg: as an owner of a key, or users?18:44
joerghere the former :-)18:44
* joerg summons bb|hcb to chime in ;-)18:46
djphgpg --list-keys --fingerprint | grep -A2 expires <<- something like that>18:48
bb|hcbNormally users should not have to monitor key's expiry. But devs should. Or as I did suggest in another channel, the key should remain valid for the lifetime of the whole release18:49
bb|hcbdjph: The ideal is to issue a new key with each release and let it be valid for the release lifetime18:52
bb|hcbThen on the user's side no monitoring is needed18:53
djphmmhmm18:57
djphcan't really disagree with that (barring, of course, a reason to kill it early)18:57
joergdjph's suggestion might get integrated into the builder process, no?18:57
djphI mean, I was just throwing out a "hey, here's a quick and dirty way to check the key dates" :D18:57
bb|hcbYes, there is a way to check, but there are many systems not exposed on the internet that are not updated at all. In case the key expires (like what happened now), update/upgrade will require a manual fix (as now)... And that is not good at all18:59
fsmithredmaybe Paul M. Furley has a script we could use.18:59
fsmithred"a friendly robot called Expirybot"19:00
gnarfacecan't you make a call to the openssl binary and just get it to return true or false based on whether the key is good?19:00
gnarfacei thought that was possible19:00
gnarfacethen you could just stick that in a cron job19:00
djphgnarface: for pgp keys?19:00
djphuhhh, I dunno :D19:00
gnarfaceoh, right, maybe for gpg no19:01
fsmithredhttps://github.com/fawkesley/expirybot19:02
djphwhee, emails19:02
djphheh, I've gotten emails from one of those before.  "I KNOW! But today's Tuesday! I have 30 days!" :D19:03
fsmithredI used to get them, but they stopped. Last one was in 201819:04
djphhm ,maybe he stopped then19:04
djphhm, only one I have expiring soon is a gmail that I don't use anymore.  hah19:05
djph... oh, and a rsa2048 that I've also replaced already19:06
trminGetting error messages during update: "Fehl:2 http://deb.devuan.org/merged chimaera InRelease19:55
trmin  Die folgenden Signaturen waren ungültig: EXPKEYSIG BB23C00C61FC752C Devuan Repository (Amprolla3 on Nemesis) <repository@devuan.org>" Same with the pkgmaster repo. Obviously missing signature. Any idea?19:55
djphtrmin: check the /topic - there's a forum post about it19:56
triodeI have the same problem as this https://dev1galaxy.org/viewtopic.php?id=5212, but after applying the solution, all of my updates fail, the URL/file is not found for apt-get upgrade. Ideas?20:25
triodeAn exanple would be: Err:1 http://deb.devuan.org/merged beowulf/main amd64 rsyslog amd64 8.1901.0-1+devuan4 404 Not Found [IP: 195.85.215.180 80]20:26
rwpThis is after having followed up by an "apt-get update"?20:27
triodeyes.20:27
triodemy /etc/apt/sources.list contains: https://pastebin.com/9SEPr7Aw20:28
triodeI will note my apt-get update throws errors still after the solution: https://pastebin.com/S1T0DEwW20:28
rwpThe deb.devuan.org name is a round robin DNS of many mirror sites.  I think they are not yet all in sync yet. :-(20:29
triodeIs there a nice way to just toss the invalid sigs, or will it always shwo invalid when I do an update.20:29
rwpI don't want to recommend shifting to the pkgmaster.devuan.org entry but I believe that would fix the problem for you.20:29
triodeHrm, so this is a multipart error? e.g. if I wait it will resolve itself, or will the "The following signatures were invalid:" be there from here on out on my installs?20:31
triodeJust asking, as I have it installed on a few production servers... and the other sysadmins may freak and question why the heck I did this and not debian... :(20:31
rwpTry this: sed --in-place 's/deb.devuan.org/pkgmaster.devuan.org/g' /etc/apt/sources.list && apt-get update --allow-insecure-repositories && apt-get install --allow-unauthenticated devuan-keyring && apt-get update20:33
rwpAnd then afterward restore the sources.list back to the use of the mirrors to keep the load off the main server.20:33
triodeI thought you noted you would not recommend packagemaster?20:33
triodeAh, I see.20:33
rwpsed --in-place 's/pkgmaster.devuan.org/deb.devuan.org/g' /etc/apt/sources.list20:33
rwppkgmaster is the main server so if everyone were to abandon the mirrors and use it then the infrastructure would be overloaded and would collapse.20:34
triodeyes, I get that.20:34
rwpWe need the mirror system.  But I think at this time the mirrors are not in sync yet.20:34
triodeHrm, how long does it take the mirrors to sync up?20:35
rwpI am sporadically seeing the same problem too.  But I grabbed a local copy of the devuan-keyring_2022.09.04_all.deb file and have been copying it around locally and installing it with dpkg -i devuan-keyring_2022.09.04_all.deb and updating my systems that way.20:35
triodeSo, anyone know what broke this in the first place?20:36
rwpI was going to ask onefang about the mirror sync problems I have been seeing myself.20:36
fatalerrorsHi I think repository certificates expirted20:36
triodeAh.20:36
rwpfatalerrors, Yes.  Please see the /topic for fixes.20:37
golinuxfatalerrors: Youare lat to the party!20:49
djphthat was a real fun time; updating all 2 dozen VM's ...21:08
rwpdjph, http://www.infrastructures.org/21:11
rwpIt's somewhat obtuse but basically says to use a system configuration framework to administer the network collective of systems rather than individual systems.21:11
djphyeah, and ansible is on my "to learn" list :P21:12
rwponefang, I have been trying to decipher https://sledjhamr.org/apt-panopticon/results/Report-web.html because mirrors are giving BADSIG errors. :-(21:24
dan9er[m]Hello, everyone! I'm trying to install Devuan Chimaera on my Surface Laptop 1. The issue is that the keyboard doesn't work past the installer bootloader. This can be worked around by plugging in an external keyboard and later fixed by installing the linux-surface patched kernel. However, the laptop only has 1 USB port, which is occupied by the installer USB. Is there an equivalent to Ubuntu's `toram` boot parameter (which dumps the USB's21:47
dan9er[m]contents to RAM, allowing it to be unplugged), will I need to go out and buy a USB hub, or is there another way I don't know of?21:47
dan9er[m]I'm using the `desktop` image (which is 4GB) and my model has 8GB of RAM, so i'm good on that21:49
bb|hcbtriode's problem is not because the mirror is not updated, rsyslog 8.1901.0-1+devuan4 is an old and obsolete version (current is devuan6). This means that the 'apt update' failed and apt is using old info21:51
fsmithreddan9er[m], the live isos will boot to RAM. Be aware that they use a different installer (refractainstaller)21:52
fsmithredor else you can do a debootstrap install from the live isos21:53
fluffywolfthat's a weird problem.  leave it to microsoft to break something as simple as keyboard input.21:54
fluffywolfdid you try the traditional curses text-based installer and the graphical installer?21:55
dan9er[m]fsmithred Does it actually go all to RAM right away or does it load from USB as needed (like Tails)?21:56
bb|hcbAnd a note - advising people to switch to pkgmaster will not solve anything, but most probably create problems. pkgmaster has limited bandwidth unlike most mirrors and overloading it will cause delays to mirror updates...21:56
fsmithreddan9er[m], it uses the toram boot option of live-boot21:57
dan9er[m]fluffywolf, there is only curses installer. graphical got removed a while back due to size constraints21:57
fsmithredfilesystem.squashfs gets read into RAM and you can pull out the usb stick.21:57
dan9er[m]fsmithred Thanks!21:58
fsmithredassuming you prepared the stick with dd or cat.21:58
fsmithredisohybrid21:59
dan9er[m]and yeah fluffywolf microsoft really sucks, got this laptop as a hand-me-down21:59
fsmithredif you made some kind of multi-boot usb stick, you will run into problems.21:59
dan9er[m]would never buy a surface with my own money lmao22:00
fluffywolfgoogling suggests the necessary drivers are in the mainline kernel on newer kernel releases?  might be able to stuff a newer kernel into the installer.22:01
dan9er[m]fsmithred I believe balenaEtcher is just a frontend to dd, right? Unless it does something stupid22:02
fsmithredI have no idea. If so, it should show up on the desktop as a CD when you plug it in.22:03
fluffywolfdo we have a daedalus installer working yet?  lol22:03
fsmithredyes, there are daedalus installer isos and there are old daedalus live-isos. I can't make new live isos until something upstream gets fixed.22:04
fsmithredlive-boot, I think.22:04
dan9er[m]uhhhh fluffywolf not sure how injecting a kernel would interact with the install process. KB works on kernel >=5.13 or with surface-linux. Chimaera uses 5.1022:05
fluffywolfdoes the daedalus installer include a new enough kernel to have the surface modules?  looks like 5.14 or newer should Just Work, according to googling.22:05
fsmithredoh, you need an image with a backports kernel. Try this one to see if it works: https://get.refracta.org/files/experimental/refracta_test_oblx_5.15_bpo-20220220_2148.iso22:07
fsmithreddan9er[m], are you going to image the stick with a live iso and try booting to RAM?22:08
fsmithredtry soon, I mean. If that doesn't work, I have other ideas.22:09
dan9er[m]Yeah, Chimaera live ISO seem like my best bet rn22:09
dan9er[m]i'll let you know if that doesn't work22:09
fsmithredok22:10
dan9er[m]fsmithred Well it won't boot from the USB. Tried flashing with dd, won't boot23:03
dan9er[m]s/won't/didn't/23:04
fsmithredtry the iso with the backports kernel. See if it boots.23:04
fsmithredhttps://get.refracta.org/files/experimental/refracta_test_oblx_5.15_bpo-20220220_2148.iso23:04
fsmithredit's devuan23:04
dan9er[m]wait nvm, it boots if you go into UEFI and boot it from there???23:05
fsmithredoh. You normally boot that thing from bios?23:06
dan9er[m]that didn't work with the regular image, welp23:06
fsmithredhow far did it get?23:06
fsmithredany useful messages?23:06
dan9er[m]Yeah VolUp+Power to go to bios, Boot config, swipe left on USB Storage23:06
dan9er[m]The swipe left in bios didn't work with the non-live image23:07
fsmithredtry with the newer kernel23:07
fsmithredping me if it boots. I can tell you a couple of ways to install.23:07
rrqdan9er[m]: how about getting a USB hub?23:08
fsmithredthat's no fun23:08
dan9er[m]Nonono, I got the live USB to boot23:08
fsmithredoh, ok23:09
fsmithreddoes the keyboard work, or do you have to use toram and usb keyboard?23:09
dan9er[m]Trackpad works but not KB strangely23:14
dan9er[m]erm where's the on-screen KB23:15
dan9er[m]there is none?23:17
fsmithrednone that I know of23:17
fsmithredwhat's it called?23:18
fsmithredcopy/paste?23:18
dan9er[m]Booting with toram now23:20
dan9er[m]Getting this junk laptop to boot from USB is finicky, most time it just doesn't see the USB23:21
fsmithredcheck accessibility settings. Might be a keyboard if you turn that on.23:22
dan9er[m]there's sticky/slow/bounce keys, but no software KB23:26
rrqanother possible path is to instead use a PXE boot, if you have a server host on the same network23:27
dan9er[m]I did to RAM boot and plugged in a KB, installing now23:41
dan9er[m]Thank you everyone23:41
fsmithredcool23:46
ballsystemlordHello, The repository key for devuan has expired. I looked up what to do and it seems that apt-key is the way to go...23:53
ballsystemlordUntil I actually tried it and got a no-op from he update option.23:53
ballsystemlordAnd the adv option to receive keys is not advised due to the security problems.23:54
ballsystemlordAny advice?23:54
ballsystemlordMy system was updated within the last 2 weeks.23:54
ballsystemlordSo it's not like I didn't receive any new packages.23:54
ballsystemlordThanks!23:54
Jjp137ballsystemlord, from the /topic: https://dev1galaxy.org/viewtopic.php?id=521323:57

Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!