| 00:03.45 | *** join/#debian cosimone_ (~cosimone@5.171.25.104) |
| 00:05.37 | *** join/#debian ohwowlol_ (~ohwowlol@unaffiliated/ohwowlol) |
| 00:12.50 | relipse | i'm on 8.11 jessie and I use my server as a webserver, is there a reason to upgrade ? |
| 00:13.44 | mrkramps | relipse, jessie is end of life since june 2020 |
| 00:14.02 | relipse | I have a linode with jessie on it, how do I upgrade it? |
| 00:14.46 | ansimita | relipse: https://www.debian.org/releases/stretch/amd64/release-notes/ch-upgrading.en.html |
| 00:15.03 | *** join/#debian yokel_ (~yokel@unaffiliated/contempt) |
| 00:15.57 | relipse | why don't I upgrade to debian 10? |
| 00:16.11 | relipse | or is that not possible? |
| 00:16.15 | ansimita | relipse: https://www.debian.org/releases/buster/amd64/release-notes/ch-upgrading.en.html |
| 00:16.18 | relipse | will i lose all my mysql databases? |
| 00:16.42 | *** join/#debian yonder (~yonder@unaffiliated/yonder) |
| 00:16.50 | *** join/#debian tadorne (~tadorne@194.110.115.46) |
| 00:16.53 | gnat_x | relipse: you shouldn't, but i would make backups to be safe. |
| 00:16.57 | ansimita | relipse: I suggest backup and upgrade release by release |
| 00:17.15 | gnat_x | and yes, upgrade one release at a time. |
| 00:17.27 | *** join/#debian aidanpr (~aidanpr@205.185.113.93) |
| 00:18.07 | *** join/#debian hendursaga (~weechat@gateway/tor-sasl/hendursaga) |
| 00:19.02 | *** mode/#debian [+l 1167] by debhelper |
| 00:23.21 | *** join/#debian FennecCode (MadestMadn@gateway/shell/ircnow/x-qimngvblyggfybsc) |
| 00:24.45 | relipse | out of curiosity if i didn't back up anything, and the upgrade went smoothly, would I still have all my data and mysql databases and apache settings? |
| 00:24.59 | relipse | is backup a just-in-case? |
| 00:25.14 | *** join/#debian fstd (~fstd@unaffiliated/fisted) |
| 00:25.40 | sney | relipse: correct, mysql doesn't drop anything on upgrade if everything is working normally |
| 00:25.59 | sney | and neither does debian itself for that matter |
| 00:26.27 | *** join/#debian n4dir (~n4dir@88.130.152.109) |
| 00:27.30 | jmcnaught | relipse: MariaDB replaces MySQL in Debian 9, may want to check the note about that in the stretch release notes. |
| 00:27.59 | relipse | oh no |
| 00:28.07 | relipse | what do I do then? |
| 00:28.25 | sney | probably nothing, mariadb is intended a drop-in replacement for mysql |
| 00:28.48 | jmcnaught | relipse: it's not a big deal, just don't be surprised by it. |
| 00:30.07 | sponix | Yeah, MariaDB was what forked off from MySQL when Oracle bought it |
| 00:30.40 | sney | see under Changes: https://wiki.debian.org/NewInStretch |
| 00:31.03 | sponix | I've never known it to even be an issue though. As sney said, most can just install MariaDB without any modifications and it works fine |
| 00:32.40 | *** join/#debian freebench__ (~freebench@92.253.250.131) |
| 00:39.03 | *** mode/#debian [+l 1161] by debhelper |
| 00:42.46 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f189b00821f02fffeaf6272.dip0.t-ipconnect.de) |
| 00:46.44 | *** join/#debian eventhorizon5 (~smuxi@c-98-228-26-70.hsd1.il.comcast.net) |
| 00:49.34 | *** join/#debian zbychuk (~zbychuk@178-37-152-107.adsl.inetia.pl) |
| 00:53.28 | relipse | how much you charge me to update my server for me? |
| 00:55.14 | ansimita | relipse: https://otakulounge.files.wordpress.com/2020/04/we-dont-do-that-here.gif |
| 00:55.41 | relipse | i'm afraid it will break when i do it |
| 00:55.53 | relipse | i updated to jessie so i know it can't be that bad |
| 00:59.13 | *** join/#debian de-facto (~de-facto@gateway/tor-sasl/de-facto) |
| 01:10.32 | *** join/#debian foul_owl (~foul_owl@67.40.177.144) |
| 01:12.39 | *** join/#debian cliluw (~cliluw@unaffiliated/cliluw) |
| 01:16.22 | *** join/#debian Space_Man (~Space_Man@87-127-156-98.static.enta.net) |
| 01:16.50 | sponix | relipse: I honestly do backups of data and config, and fresh install on every major release. Works best from my experiences |
| 01:17.53 | *** join/#debian v01t (~matrixbot@87.122.1.226) |
| 01:21.05 | n4dir | i do a non-fresh installation |
| 01:24.38 | *** join/#debian catman370 (~catman@unaffiliated/catman370) |
| 01:24.42 | relipse | sponix: what does your backup of data and config part look like? |
| 01:28.03 | *** join/#debian nurupo (~nurupo.ga@unaffiliated/nurupo) |
| 01:28.03 | *** join/#debian ghormoon (~ghormoon@ghorland.net) |
| 01:28.03 | *** join/#debian TReK (~UnFaQ@unaffiliated/trek) |
| 01:28.03 | *** join/#debian Space_Man (~Space_Man@87-127-156-98.static.enta.net) |
| 01:28.03 | *** join/#debian k4nz (~Thunderbi@115.197.191.122) |
| 01:29.43 | *** join/#debian k4nz1 (~Thunderbi@115.197.191.122) |
| 01:30.16 | *** join/#debian julienth37 (~julienth3@irc.julienth37.fr) |
| 01:30.16 | *** join/#debian Casper26 (~Casper26@2001:470:8:2d3:ff:ff:ff:ff) |
| 01:30.16 | *** join/#debian BrianG61UK (~BrianG61U@2a02:8010:66b7:dddd:943a:d4e8:94ef:ffda) |
| 01:30.16 | *** join/#debian AliasNumber10 (~crix@cpe-76-167-192-248.san.res.rr.com) |
| 01:30.16 | *** join/#debian StathisA (~StathisA@unaffiliated/stathisa) |
| 01:30.16 | *** join/#debian kristijonas (~kristijon@78-56-32-39.static.zebra.lt) |
| 01:30.16 | *** join/#debian dpkg (~dpkg@unaffiliated/dpkg) |
| 01:30.16 | *** join/#debian amerigo (uid331857@gateway/web/irccloud.com/x-rgqindfclfxyvhfd) |
| 01:30.16 | *** join/#debian Adbray (~Adbray@2600:6c48:6f7f:d764:afef:e464:9861:6026) |
| 01:30.16 | *** join/#debian fred1m (~quassel@2a01:e0a:8e:8b20:7f27:bb0d:81b2:ecb9) |
| 01:30.16 | *** join/#debian xikuuky (~yourname@whodunits-proprietrix.vpsrdns.web-hosting.com) |
| 01:30.16 | *** join/#debian prints (~333@unaffiliated/prints) |
| 01:30.16 | *** join/#debian shabius (~shabius@2a0e:1c80:2:1022::1002) |
| 01:30.16 | *** join/#debian chachasmooth (~chachasmo@unaffiliated/chachasmooth) |
| 01:30.16 | *** join/#debian burrows (burrows@2001:41d0:801:2000::723) |
| 01:30.16 | *** join/#debian raver (f98f5ce56e@2a02:908:522:3620::1) |
| 01:30.16 | *** join/#debian CutMeOwnThroat (~iridos@unaffiliated/iridos) |
| 01:30.16 | *** join/#debian zyleb (~zyley@unaffiliated/zyley) |
| 01:30.16 | *** join/#debian ledixus (~ledixus@2a03:4000:24:86c:c881:aeff:fe99:2e6e) |
| 01:30.16 | *** join/#debian peterrooney (~peter@2604:3d08:1582:ab00:222:4dff:fe69:d6ed) |
| 01:30.16 | *** join/#debian ffernand (~ffernand@devworker.com) |
| 01:30.16 | *** join/#debian velix (~velix@unaffiliated/velix) |
| 01:30.16 | *** join/#debian FuturePilot (~Fufu@fuduntu/leader/packaging/FuturePilot) |
| 01:30.16 | *** join/#debian Some_Person (someperson@2600:1700:d02:1c50:ce81:24dc:3854:f698) |
| 01:30.16 | *** join/#debian sjd (sid475694@gateway/web/irccloud.com/x-omhpldzezoifeodi) |
| 01:30.17 | *** join/#debian gangstacat (~gangstaca@unaffiliated/gangstacat) |
| 01:30.17 | *** join/#debian Nightmare (ddoscomin@unaffiliated/thetfef) |
| 01:32.48 | *** join/#debian trobotham (nitemare@nitemare.darenet.org) |
| 01:32.48 | *** join/#debian crawler (~crawler@2a02-a459-aaac-1-8f7b-0-30f1-ad8a.fixed6.kpn.net) |
| 01:32.48 | *** join/#debian cluelessperson (~cluelessp@unaffiliated/cluelessperson) |
| 01:32.48 | *** join/#debian Abdullah (ak@unaffiliated/abdullah) |
| 01:32.48 | *** join/#debian coke (sid224772@raku/developer/coke) |
| 01:32.48 | *** join/#debian roguelazer (~roguelaze@2605:2700:0:2:a800:ff:fe0d:5f19) |
| 01:32.48 | *** join/#debian Raito_Bezarius (~Raito@unaffiliated/raito-bezarius/x-8764578) |
| 01:32.48 | *** join/#debian exceptionz (~exception@taylor.uberspace.de) |
| 01:32.48 | *** join/#debian infernix (~nix@unaffiliated/infernix) |
| 01:32.48 | *** join/#debian or4n (~or4n@2001:19f0:5001:3272:5400:2ff:fe66:52bf) |
| 01:32.48 | *** join/#debian Agent (~Agent@FlexWiki/director/agent) |
| 01:32.48 | *** join/#debian taman (~znc1@2a00:1098:82:30::94) |
| 01:32.48 | *** join/#debian LeMike (~LeMike@mike-pretzlaw.de) |
| 01:32.48 | *** join/#debian Nitori (~kappa@2a01:4f8:c17:5d9::2) |
| 01:32.48 | *** join/#debian DreamThief (~delaylama@1337h4x0r.eu) |
| 01:32.48 | *** join/#debian rdz (~rdz@2001:620:120:1::12) |
| 01:32.48 | *** join/#debian leonardus (sid358597@orbital/leonardus) |
| 01:32.48 | *** join/#debian rudi_s (~simon@bmi.informatik.uni-erlangen.de) |
| 01:32.48 | *** join/#debian zerymo (~zerymo@unaffiliated/zerymo) |
| 01:32.48 | *** join/#debian toolz (~dastan@unaffiliated/toolz) |
| 01:32.48 | *** join/#debian lvrp16 (sid153650@gateway/web/irccloud.com/x-zzjtbaoonvgujzif) |
| 01:32.48 | *** join/#debian Domin (~Domin@dont.just.undo.it) |
| 01:32.48 | *** join/#debian jrtc27 (~jrtc27@amdahl.jrtc27.com) |
| 01:32.48 | *** join/#debian altendky (sid135382@gateway/web/irccloud.com/x-inqzujkzdncjsycj) |
| 01:32.48 | *** join/#debian aizen_s (sid462968@gateway/web/irccloud.com/x-ighywpehicgiourx) |
| 01:32.48 | *** join/#debian chaology (sid369406@gateway/web/irccloud.com/x-obfmdxstumiuzkph) |
| 01:32.48 | *** join/#debian GGMethos (~methos@2400:8901::f03c:92ff:fe97:52cb) |
| 01:32.49 | *** join/#debian HasanAtizaz (~hasan@2400:8901::f03c:92ff:fe7a:4c8d) |
| 01:32.49 | *** join/#debian cherti (cherti@eris.noname-ev.de) |
| 01:32.49 | *** join/#debian sponix2ipfw (uid273627@gateway/web/irccloud.com/x-jwnnmnbtrpikyzcp) |
| 01:32.49 | *** join/#debian miklcct (quasselcor@2001:19f0:7001:5ad:5400:2ff:feb6:50d7) |
| 01:32.49 | *** join/#debian ohithere (~binary@unaffiliated/ohithere) |
| 01:32.49 | *** join/#debian nix-7 (nix@2a01:7e00::f03c:91ff:feae:891d) |
| 01:32.49 | *** join/#debian mebus (~mebus@2a00:8a60:e019:10de::ac22) |
| 01:32.49 | *** join/#debian squarebracket (~root@2604:a880:800:10::7ea:1001) |
| 01:32.49 | *** join/#debian evilroots (~roots@bnc.janky.solutions) |
| 01:32.49 | *** join/#debian tomjaguarpaw (~tom@li367-225.members.linode.com) |
| 01:32.49 | *** join/#debian f0x2 (~f0x@0x52.eu) |
| 01:32.49 | *** join/#debian CeBe (~cebe@zirc.m.cebe.net) |
| 01:32.49 | *** join/#debian scc (~scc@2a01:4f8:1c17:67c7::42) |
| 01:32.49 | *** join/#debian murmeli_ (~pascal@2a01:4f8:c0c:63b0::1) |
| 01:32.49 | *** join/#debian Hobbyboy (Hobbyboy@hobbyboy.co.uk) |
| 01:32.49 | *** join/#debian thePiGrepper (~thePiGrep@67.205.129.203) |
| 01:32.49 | *** join/#debian lol768 (lol768@pwned.with.csrf.tech) |
| 01:32.49 | *** join/#debian stwalkerster (~stwalkers@wikimedia/stwalkerster) |
| 01:32.49 | *** join/#debian nzhuk98 (~nazar@ec2-13-59-119-80.us-east-2.compute.amazonaws.com) |
| 01:32.49 | *** join/#debian miklcct (quasselcor@2001:19f0:7001:5ad:5400:2ff:feb6:50d7) |
| 01:32.49 | *** join/#debian t3st3r (~t3st3r@themanaworld/gamemaster/t3st3r) |
| 01:32.50 | *** join/#debian v01t (~matrixbot@87.122.1.226) |
| 01:33.39 | *** join/#debian cluelessperson (~cluelessp@unaffiliated/cluelessperson) |
| 01:34.07 | *** join/#debian aizen_s (sid462968@gateway/web/irccloud.com/x-lsbqjsnyhdhmooyk) |
| 01:34.14 | *** join/#debian fightthewalrus (~Queetom@KD113148020047.ppp-bb.dion.ne.jp) |
| 01:34.22 | *** join/#debian GGMethos (~methos@2400:8901::f03c:92ff:fe97:52cb) |
| 01:34.45 | *** join/#debian leonardus (sid358597@orbital/leonardus) |
| 01:34.50 | *** join/#debian lumpi (~quassel@93.242.217.157) |
| 01:35.22 | *** join/#debian altendky (sid135382@gateway/web/irccloud.com/x-yiytwganxsuelnvy) |
| 01:35.53 | *** join/#debian amerigo (uid331857@gateway/web/irccloud.com/x-dofzufotyixjvskt) |
| 01:36.26 | *** join/#debian t3st3r (~t3st3r@themanaworld/gamemaster/t3st3r) |
| 01:36.52 | *** join/#debian Nothing4You (N4Y@nothing4you.w.tf-w.tf) |
| 01:39.02 | *** mode/#debian [+l 1154] by debhelper |
| 01:42.55 | *** join/#debian wallacer (~quassel@51.158.189.53) |
| 01:44.11 | *** join/#debian Ceber (~cerberus@94.31.84.245) |
| 01:47.01 | *** join/#debian pfred1 (~pfred1@unaffiliated/pfred1) |
| 01:47.30 | *** join/#debian Space_Man (~Space_Man@87-127-156-98.static.enta.net) |
| 01:48.21 | *** join/#debian Barralastic (~Barralast@92.255.124.118) |
| 01:48.33 | *** join/#debian AverageUs (AverageUs@gateway/vpn/privateinternetaccess/averageus) |
| 01:49.40 | *** join/#debian Lord_of_Life_ (~Lord@unaffiliated/lord-of-life/x-0885362) |
| 01:51.00 | *** join/#debian diniwed (~gavron@194.99.104.154) |
| 02:03.14 | *** join/#debian beelzebuzz (~rasputin@gateway/tor-sasl/beelzebuzz) |
| 02:03.22 | *** join/#debian waxfire (~waxfire@152.89.209.134) |
| 02:04.32 | *** join/#debian Lupricon (~Lupricon@45.86.203.194) |
| 02:05.43 | *** join/#debian dvs (~hibbard@2607:f2c0:9519:1200:e6a7:a0ff:fe31:ddf0) |
| 02:05.48 | *** join/#debian edlou (uid413273@gateway/web/irccloud.com/x-pblcgjmboknhhggm) |
| 02:06.06 | *** join/#debian Bjornn (~Bjornn@2604:6000:1503:3ac:61cf:2f51:714f:18db) |
| 02:06.17 | *** join/#debian citypw (~citypw@gateway/tor-sasl/citypw) |
| 02:06.48 | *** join/#debian affix (~affix@fedora/affix) |
| 02:08.17 | *** join/#debian beelzebuzz (~rasputin@gateway/tor-sasl/beelzebuzz) |
| 02:09.42 | *** join/#debian Bjornn (~Bjornn@2604:6000:1503:3ac:61cf:2f51:714f:18db) |
| 02:11.43 | *** join/#debian Bjornn (~Bjornn@2604:6000:1503:3ac:61cf:2f51:714f:18db) |
| 02:13.33 | *** join/#debian edk_ (e@freenode/staff/spy.edk) |
| 02:13.58 | *** join/#debian Newami (~Newami@ip70-179-45-125.sd.sd.cox.net) |
| 02:18.17 | *** join/#debian Scotty_Trees (~Scotty_Tr@162-234-179-169.lightspeed.brhmal.sbcglobal.net) |
| 02:19.02 | *** mode/#debian [+l 1161] by debhelper |
| 02:23.00 | *** join/#debian zeden (~user@unaffiliated/zeden) |
| 02:29.18 | *** join/#debian alexandros_c (~alexandro@unaffiliated/alexandros-c/x-1684531) |
| 02:30.27 | *** join/#debian awal1 (~awal1@bras-base-mtrlpq0315w-grc-22-70-55-159-189.dsl.bell.ca) |
| 02:30.54 | *** join/#debian powerhouse (~powerhous@184.69.151.38) |
| 02:33.20 | *** join/#debian akp55 (~akp55@c-73-148-15-31.hsd1.va.comcast.net) |
| 02:35.54 | *** join/#debian tsal_ (~tsal@i59F52156.versanet.de) |
| 02:36.13 | *** join/#debian sidmo_ (~ident@91.36.231.14) |
| 02:37.21 | *** join/#debian fmaurer_ (~quassel@188.126.170.202) |
| 02:38.29 | *** join/#debian de-facto_ (~de-facto@gateway/tor-sasl/de-facto) |
| 02:42.49 | *** join/#debian diniwed (~gavron@194.99.104.161) |
| 02:44.41 | *** join/#debian hanasaki (~hanasaki@pool-71-179-12-157.bltmmd.fios.verizon.net) |
| 02:49.16 | *** join/#debian ephemer0l (~ephemer0l@pentoo/user/ephemer0l) |
| 02:49.59 | *** join/#debian JesusIsJehovahHC (~DarkiJah@87.72.62.74) |
| 02:50.02 | *** join/#debian Deyaa (uid190709@gateway/web/irccloud.com/x-icjhynjfgvcdlivp) |
| 02:53.16 | *** join/#debian sevu (~sevu@dynamic-077-011-026-225.77.11.pool.telefonica.de) |
| 02:54.05 | *** join/#debian WARBIRD199 (~WARBIRD19@kc01.linuxrocker.com) |
| 02:54.10 | *** join/#debian renzhi (~renzhi@2607:fa49:6500:ac00::bfed) |
| 02:54.58 | *** join/#debian secntech (~secntech@unaffiliated/secntech) |
| 03:12.57 | *** join/#debian asymptotically (~asymptoti@gateway/tor-sasl/asymptotically) |
| 03:14.17 | *** join/#debian catman370 (~catman@unaffiliated/catman370) |
| 03:14.50 | sponix | Basic guideline is, if I don't know what new features I need from backports, or other things not already in stable -- Leave it alone, right ? |
| 03:15.09 | *** join/#debian alex11 (~alex11@bras-base-mtrlpq5302w-grc-29-76-67-214-234.dsl.bell.ca) |
| 03:16.20 | dvs | sponix: I generally use backports when it fixes something that doesn't work. |
| 03:19.50 | sponix | dvs: Yeah, so if I don't even know what is broken. Chances are I don't need it, I would assume :) |
| 03:21.23 | *** join/#debian naos62 (~naos62@unaffiliated/naos62) |
| 03:24.33 | *** join/#debian Abrax (~Abrax@unaffiliated/abrax) |
| 03:31.51 | *** join/#debian dax (dax@bitbot/dax) |
| 03:33.35 | *** join/#debian ponyofdeath (~vladi@cpe-70-95-145-76.san.res.rr.com) |
| 03:39.40 | *** join/#debian diniwed (~gavron@45.91.22.169) |
| 03:43.06 | *** join/#debian webmind (~webmind@2a10:3781:93b:1:5e26:aff:fe08:ee6f) |
| 03:44.58 | *** join/#debian schweby (~quassel@lxqflm.schwe.by) |
| 03:50.48 | *** join/#debian Zardoz (~Zardoz@cpe-24-242-65-107.austin.res.rr.com) |
| 03:51.03 | *** join/#debian tehnull (~tehnull@unaffiliated/tehnull) |
| 03:52.42 | *** join/#debian Antioch0 (~Antioch@h175-177-044-119.catv02.itscom.jp) |
| 03:54.03 | *** join/#debian eliotime (~Icedove@190.42.86.36) |
| 03:54.35 | *** join/#debian cupcake90 (~cupcake90@103.142.31.114) |
| 03:58.19 | *** join/#debian micky (~micky@79.119.114.139) |
| 04:02.36 | *** join/#debian wallacer (~quassel@51.158.189.53) |
| 04:03.44 | micky | i've just setup a basic nfs export using ( nfs-kernel-server ) on debian 10 ( both server and client ) and no matter what options i use read and write transfer seems to be capped at around 11 MB/s config in pastebin https://paste.debian.net/1177221/ |
| 04:04.41 | micky | i've got 10gbit fiber between the 2 machines, and samba can do 900MB/s |
| 04:06.18 | *** join/#debian prg3 (~prg@deadcodersociety/prg318) |
| 04:11.43 | sponix | <PROTECTED> |
| 04:11.43 | sponix | <PROTECTED> |
| 04:11.55 | sponix | micky: try with that and see if speed improves |
| 04:15.18 | sponix | https://www.slashroot.in/how-do-linux-nfs-performance-tuning-and-optimization |
| 04:15.57 | *** join/#debian k4nz (~Thunderbi@115.197.191.122) |
| 04:16.02 | *** join/#debian CombatVet (~c4@gateway/tor-sasl/combatvet) |
| 04:16.41 | *** join/#debian magenbrot (~magenbrot@oozulldsbuddlasbaa.de) |
| 04:17.08 | *** join/#debian asymptotically (~asymptoti@gateway/tor-sasl/asymptotically) |
| 04:17.28 | *** join/#debian tryte (~tryte@gateway/tor-sasl/tryte) |
| 04:18.07 | *** join/#debian KeboDK_ (~kebodk@server1525.seedhost.eu) |
| 04:18.10 | micky | sponix: zero difference https://paste.debian.net/1177222/ |
| 04:18.28 | *** join/#debian sigtrm (~sigtrm@quassel.woboq.com) |
| 04:18.48 | *** join/#debian Lupricon (~Lupricon@IGLD-83-130-70-92.inter.net.il) |
| 04:20.23 | sponix | micky: do the same thing with a 1G and 10G file -- see if it still stays the same in speed |
| 04:20.56 | sponix | I honestly haven't done NFS in over a decade. Even for Linux to Linux I use smb now |
| 04:21.17 | micky | one moment, scp speed seems to be the same, maybe the link defaulted to a lower speed |
| 04:22.53 | *** join/#debian badpixel (~badpixel@unaffiliated/badpixel) |
| 04:23.16 | micky | i've had to switch to nfs due to an extreme number of small files that my projects have |
| 04:24.10 | *** join/#debian nyov (~nyov@unaffiliated/nyov) |
| 04:27.43 | *** join/#debian sillyslux__ (~sillyslux@unaffiliated/sillyslux) |
| 04:37.29 | micky | sponix: turns out my mikrotik switch decided i was using too much bandwidth and negotiated a 100Mbit link |
| 04:38.48 | *** join/#debian g0d_shatter (~chungus@071-011-197-021.res.spectrum.com) |
| 04:41.10 | *** join/#debian DaNeenjah (~DaNeenjah@2600:1005:b146:b84:5797:52cf:6caf:8492) |
| 04:44.48 | g0d_shatter | Hi all, I'm trying to figure out how to get wheezy binary packages installed on a vm, via apt-get. Is that still possible? |
| 04:45.45 | g0d_shatter | I see that the archive is available http://archive.debian.org/debian/dists/wheezy/ but when I use apt-get it tells me that the release file is expired |
| 04:46.15 | *** join/#debian longears (longears@gateway/vpn/protonvpn/longears) |
| 04:49.06 | *** join/#debian DarkiJah_ (~DarkiJah@87.72.62.74) |
| 04:50.56 | *** join/#debian TonFTP (~Ribdro@2603:3016:9a0:e2:54c8:ea68:2a88:ca09) |
| 04:55.38 | g0d_shatter | never mind, think I've figured it out |
| 04:56.30 | *** join/#debian cstls (~guy@cpe-198-255-243-231.maine.res.rr.com) |
| 04:59.02 | *** mode/#debian [+l 1153] by debhelper |
| 05:02.11 | *** join/#debian madage (~madage@gateway/tor-sasl/madage) |
| 05:05.40 | *** join/#debian Dotz0cat_ (~Dotz0cat@h89.227.187.173.dynamic.ip.windstream.net) |
| 05:09.54 | *** join/#debian unluckyshrubbery (~unluckysh@unaffiliated/unluckyshrubbery) |
| 05:12.18 | *** join/#debian r4u1 (~raf@cpe-76-173-32-66.hawaii.res.rr.com) |
| 05:13.07 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f189b00821f02fffeaf6272.dip0.t-ipconnect.de) |
| 05:25.50 | *** join/#debian darunesh (~darunesh@2409:4064:4e00:76a8:cb00:7168:83ad:cdca) |
| 05:28.28 | *** join/#debian rnm (~rnm@unaffiliated/rnm) |
| 05:28.50 | *** join/#debian gordonfish (~gordonfis@unaffiliated/gordonfish) |
| 05:31.02 | *** join/#debian rnm (~rnm@unaffiliated/rnm) |
| 05:33.57 | *** join/#debian rf-n00b_ (rf-n00b@gateway/vpn/privateinternetaccess/rf-n00b) |
| 05:36.37 | *** join/#debian n4dir (~n4dir@mue-88-130-57-228.dsl.tropolys.de) |
| 05:36.49 | *** join/#debian tsal (~tsal@i59F5FD76.versanet.de) |
| 05:40.22 | *** join/#debian j7k6 (~j7k6@gateway/tor-sasl/j7k6) |
| 05:41.19 | *** join/#debian cybiko123 (~cybiko123@2600:4040:113a:a600:afb1:d641:b1dc:c495) |
| 05:42.10 | *** join/#debian freebench__ (~freebench@92.253.250.131) |
| 05:45.34 | *** join/#debian darunesh (~darunesh@2409:4064:4e00:76a8:cb00:7168:83ad:cdca) |
| 05:46.12 | *** join/#debian rnm (~rnm@unaffiliated/rnm) |
| 05:47.51 | *** join/#debian diogenes_ (~diogenes_@188.208.121.172) |
| 05:49.38 | *** join/#debian wallacer (~quassel@51.158.189.53) |
| 05:53.23 | *** join/#debian Exchange (~Brumbazz@ip100.ip-51-38-104.eu) |
| 05:57.07 | *** join/#debian iflema (~ian@unaffiliated/iflema) |
| 05:57.52 | *** join/#debian dob1_ (~dob1@unaffiliated/dob1) |
| 05:58.14 | *** join/#debian OPK (~OPK@unaffiliated/opk) |
| 05:58.51 | *** join/#debian szorfein (~daggoth@gateway/tor-sasl/szorfein) |
| 06:00.13 | *** join/#debian rnm (~rnm@unaffiliated/rnm) |
| 06:01.36 | *** join/#debian jukeboh (~noname@wikipedia/jukeboksi) |
| 06:01.59 | *** join/#debian ledeni_ (~ledeni@fedora/ledeni) |
| 06:02.34 | *** join/#debian ledeni__ (~ledeni@fedora/ledeni) |
| 06:05.45 | *** join/#debian coot (~coot@37.30.50.101.nat.umts.dynamic.t-mobile.pl) |
| 06:05.54 | *** join/#debian Adbray (~Adbray@2600:6c48:6f7f:d764:afef:e464:9861:6026) |
| 06:10.27 | *** join/#debian darutoko (~darutoko@90.188.65.210) |
| 06:11.55 | *** join/#debian sorin-mihai__ (~sorin-mih@unaffiliated/sorin-mihai) |
| 06:12.16 | *** join/#debian Kevlar_Noir (~manjaro-u@2a01:e0a:5d7:e1e0:ba8c:8528:22e4:6171) |
| 06:15.42 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f1e1300821f02fffeaf6272.dip0.t-ipconnect.de) |
| 06:21.32 | *** join/#debian sauvin (sauvin@about/linux/staff/sauvin) |
| 06:36.42 | *** join/#debian Ericounet (~Eric@2a01:e0a:d0:3c20:ac07:6120:9e41:a7d5) |
| 06:39.55 | *** join/#debian sauvin (sauvin@about/linux/staff/sauvin) |
| 06:40.57 | *** join/#debian cliluw (~cliluw@unaffiliated/cliluw) |
| 06:42.07 | *** join/#debian nyaomin (~naomi@2603-7080-c43e-59ad-c878-29ff-fedf-ce89.res6.spectrum.com) |
| 06:43.01 | *** join/#debian sauvin (sauvin@about/linux/staff/sauvin) |
| 06:47.41 | *** join/#debian llutz (~lutz@pdpc/supporter/active/llutz) |
| 06:50.17 | *** join/#debian zyley (~zyley@unaffiliated/zyley) |
| 06:51.34 | *** join/#debian earthundead (~earthunde@188.170.73.20) |
| 06:56.22 | *** join/#debian no_gravity (~no_gravit@unaffiliated/no-gravity/x-0632109) |
| 06:56.27 | no_gravity | Good Morning |
| 06:59.07 | *** join/#debian e-baley (~e-baley@67.218.255.31) |
| 06:59.45 | *** join/#debian nsrafk (~inkognito@unaffiliated/nsrafk) |
| 07:02.24 | *** join/#debian lisco (~lisco@c-73-53-214-196.hsd1.fl.comcast.net) |
| 07:04.24 | *** join/#debian ledeni__ (~ledeni@fedora/ledeni) |
| 07:05.52 | *** join/#debian lord_helmet (~lordhelme@8-40-48-229.dynamic.skybest.com) |
| 07:05.59 | *** join/#debian p8m_ (p8m@gateway/vpn/protonvpn/p8m) |
| 07:07.13 | *** join/#debian cliluw (~cliluw@unaffiliated/cliluw) |
| 07:08.57 | *** join/#debian apus (~apus@gateway/tor-sasl/apus) |
| 07:09.02 | *** mode/#debian [+l 1159] by debhelper |
| 07:15.20 | *** join/#debian zln (~zln@gateway/tor-sasl/zln) |
| 07:16.41 | *** join/#debian j7k6 (~j7k6@gateway/tor-sasl/j7k6) |
| 07:16.44 | *** join/#debian beelzebuzz (~rasputin@gateway/tor-sasl/beelzebuzz) |
| 07:16.45 | *** join/#debian nobyk (~nobyk@gateway/tor-sasl/nobyk) |
| 07:16.47 | *** join/#debian madage (~madage@gateway/tor-sasl/madage) |
| 07:17.13 | *** join/#debian szorfein (~daggoth@gateway/tor-sasl/szorfein) |
| 07:17.16 | *** join/#debian bb-8_ (~bb-8@gateway/tor-sasl/bb-8) |
| 07:17.49 | *** join/#debian mohabaks_ (~mohabaks@gateway/tor-sasl/mohabaks) |
| 07:17.52 | *** join/#debian Frenn_ (~Frenetick@gateway/tor-sasl/freneticks) |
| 07:18.29 | *** join/#debian hendursaga (~weechat@gateway/tor-sasl/hendursaga) |
| 07:18.31 | *** join/#debian milkt (~debian@gateway/tor-sasl/milkt) |
| 07:20.08 | *** join/#debian H3XiL3D (~grumpy@gateway/tor-sasl/hexiled) |
| 07:20.35 | *** join/#debian Furai (~Furai@cookiehoster.furai.pl) |
| 07:21.02 | *** join/#debian timur_davletshin (~timur_dav@unaffiliated/timur-davletshin/x-6536285) |
| 07:22.49 | *** join/#debian lukaso666 (~lukaso666@109.95.144.173) |
| 07:23.35 | *** join/#debian geowiesnot (~user@87-89-181-157.abo.bbox.fr) |
| 07:26.13 | *** join/#debian p8m (p8m@gateway/vpn/protonvpn/p8m) |
| 07:27.15 | *** join/#debian earthundead (~earthunde@188.170.76.166) |
| 07:27.18 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f1e1300821f02fffeaf6272.dip0.t-ipconnect.de) |
| 07:30.40 | *** join/#debian Haudegen (~quassel@178.115.237.87.static.drei.at) |
| 07:36.27 | *** join/#debian lavendereyes (~lavendere@gateway/tor-sasl/lavendereyes) |
| 07:36.56 | *** join/#debian dazo (~freenode@openvpn/corp/developer/dazo) |
| 07:36.58 | *** join/#debian tommaso (~tommaso@gateway/tor-sasl/tommaso) |
| 07:37.01 | *** join/#debian tryte (~tryte@gateway/tor-sasl/tryte) |
| 07:37.01 | *** join/#debian madage (~madage@gateway/tor-sasl/madage) |
| 07:37.02 | *** join/#debian CombatVet (~c4@gateway/tor-sasl/combatvet) |
| 07:37.03 | *** join/#debian asymptotically (~asymptoti@gateway/tor-sasl/asymptotically) |
| 07:37.10 | *** join/#debian mohabaks_ (~mohabaks@gateway/tor-sasl/mohabaks) |
| 07:38.02 | *** join/#debian H3XiL3D (~grumpy@gateway/tor-sasl/hexiled) |
| 07:38.59 | *** join/#debian JakeSays (~jake@c-67-182-197-230.hsd1.ut.comcast.net) |
| 07:42.02 | *** join/#debian luuuciano__ (~luuuciano@unaffiliated/luuuciano) |
| 07:42.43 | *** join/#debian JakeSays (~jake@c-67-182-197-230.hsd1.ut.comcast.net) |
| 07:45.38 | *** join/#debian JakeSays (~jake@c-67-182-197-230.hsd1.ut.comcast.net) |
| 07:46.42 | *** join/#debian marko1325 (~Thunderbi@217.24.24.177) |
| 07:48.34 | *** join/#debian martinus__ (~martin@123.57.202.77.rev.sfr.net) |
| 07:50.40 | *** join/#debian p8m_ (p8m@gateway/vpn/protonvpn/p8m) |
| 07:51.03 | *** join/#debian cliluw (~cliluw@unaffiliated/cliluw) |
| 07:56.54 | *** join/#debian onejukeboksi (~noname@wikipedia/jukeboksi) |
| 07:59.55 | *** join/#debian dreamon (~dreamon@unaffiliated/dreamon) |
| 08:02.48 | *** join/#debian mezzo (~mezzo@176-141-171-88.abo.bbox.fr) |
| 08:03.07 | *** join/#debian treeview (~treeview@71.65.243.217) |
| 08:04.05 | *** join/#debian tagomago (~tagomago@62.83.27.158.dyn.user.ono.com) |
| 08:06.05 | *** join/#debian fflori (~fflori@194.230.155.199) |
| 08:06.16 | *** join/#debian earthundead (~earthunde@188.170.74.46) |
| 08:06.21 | *** join/#debian lesless (~lessless@obligatory.vehicle.volia.net) |
| 08:07.07 | *** join/#debian Tobbi (~Tobbi@supertux/tobbi) |
| 08:07.47 | *** join/#debian Enissay (~Enissay@unaffiliated/enissay) |
| 08:08.49 | *** join/#debian mohabaks_ (~mohabaks@gateway/tor-sasl/mohabaks) |
| 08:09.02 | *** join/#debian towo` (~towo@unaffiliated/towo/x-4064351) |
| 08:11.18 | *** join/#debian goksin (~goksin@24.133.102.76) |
| 08:12.32 | *** join/#debian endstille (~endstille@2a00:6020:1dff:1a00:35b8:ecd4:8bb6:eaf0) |
| 08:13.10 | *** join/#debian yans (~yans@unaffiliated/yinsen) |
| 08:16.04 | *** join/#debian Jerrynicki (~niklas@p549a996e.dip0.t-ipconnect.de) |
| 08:16.17 | *** join/#debian Ycarus (~Ycarus@2001:bc8:47b0:1b0b::1) |
| 08:18.56 | *** join/#debian chele (~chele@ip5b416ea2.dynamic.kabel-deutschland.de) |
| 08:20.33 | *** join/#debian earthundead (~earthunde@188.170.85.203) |
| 08:22.53 | *** join/#debian Haohmaru (~Haohmaru@195.24.53.110) |
| 08:23.42 | *** join/#debian Texou (~Texou@unaffiliated/texou) |
| 08:26.14 | *** join/#debian JesusIsJehovahHC (~DarkiJah@87.72.62.74) |
| 08:33.02 | *** join/#debian budlight (~richard@host-67-204-195-100.public.eastlink.ca) |
| 08:34.35 | *** join/#debian nifker (~Thunderbi@200116b80a432800dbca37074fdd5b91.dip.versatel-1u1.de) |
| 08:39.51 | *** join/#debian diogenes_ (~diogenes_@188.208.121.200) |
| 08:40.23 | *** join/#debian DarkiJah_ (~DarkiJah@87.72.62.74) |
| 08:41.39 | *** join/#debian Ericounet (~Eric@2a01:e0a:d0:3c20:ac07:6120:9e41:a7d5) |
| 08:44.16 | *** join/#debian netcrash (~charmande@97.245.60.94.rev.vodafone.pt) |
| 08:49.56 | *** join/#debian CombatVet (~c4@gateway/tor-sasl/combatvet) |
| 08:51.06 | *** join/#debian m0u (~m0u@unaffiliated/m0u) |
| 08:53.47 | *** join/#debian D4rk4ngel2020 (~darkangel@k2.ilion.info) |
| 08:57.03 | *** join/#debian Deyaa (uid190709@gateway/web/irccloud.com/x-lluzbxrhtrqveocf) |
| 08:57.30 | *** join/#debian Adbray (~Adbray@2600:6c48:6f7f:d764:afef:e464:9861:6026) |
| 08:59.02 | *** mode/#debian [+l 1166] by debhelper |
| 09:01.31 | *** join/#debian onejukeboksi (~noname@wikipedia/jukeboksi) |
| 09:02.09 | *** join/#debian n4dir (~n4dir@mue-88-130-57-228.dsl.tropolys.de) |
| 09:02.41 | *** join/#debian _aeris (~aeris@april/board/aeris) |
| 09:03.43 | *** join/#debian sh9 (~sh9@softbank060116136158.bbtec.net) |
| 09:05.04 | *** join/#debian Adbray (~Adbray@2600:6c48:6f7f:d764:afef:e464:9861:6026) |
| 09:07.44 | *** join/#debian hendursa1 (~weechat@gateway/tor-sasl/hendursaga) |
| 09:07.58 | *** join/#debian \\Mr_C\\ (~mrc@cpe-75-187-191-230.neo.res.rr.com) |
| 09:11.13 | *** join/#debian Onyx47 (~bojan@213.147.104.206) |
| 09:11.31 | *** join/#debian milkt_ (~debian@gateway/tor-sasl/milkt) |
| 09:12.22 | *** join/#debian shabius_ (~shabius@46.188.33.106) |
| 09:12.48 | *** join/#debian Ekho (~Ekho@unaffiliated/ekho) |
| 09:12.55 | *** join/#debian lavendereyes (~lavendere@gateway/tor-sasl/lavendereyes) |
| 09:12.57 | *** join/#debian zln_ (~zln@gateway/tor-sasl/zln) |
| 09:14.27 | *** join/#debian k4nz (~Thunderbi@115.197.191.122) |
| 09:14.28 | *** join/#debian j7k6 (~j7k6@gateway/tor-sasl/j7k6) |
| 09:15.54 | *** join/#debian JesusIsJehovahHC (~DarkiJah@87.72.62.74) |
| 09:16.12 | *** join/#debian lavendereyes (~lavendere@gateway/tor-sasl/lavendereyes) |
| 09:17.58 | *** join/#debian dob1 (~dob1@unaffiliated/dob1) |
| 09:18.24 | *** join/#debian nksegos (~Thunderbi@185.226.67.169) |
| 09:22.34 | *** join/#debian beelzebuzz (~rasputin@gateway/tor-sasl/beelzebuzz) |
| 09:25.42 | *** join/#debian black_ant (~antilope@unaffiliated/black-ant/x-1505394) |
| 09:26.12 | *** join/#debian Cymew (~ante@c-b580225c.023-1144-7570702.bbcust.telenor.se) |
| 09:27.26 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f1e1300821f02fffeaf6272.dip0.t-ipconnect.de) |
| 09:28.57 | *** join/#debian Adbray (~Adbray@2600:6c48:6f7f:d764:afef:e464:9861:6026) |
| 09:29.15 | *** join/#debian Adbray (~Adbray@2600:6c48:6f7f:d764:afef:e464:9861:6026) |
| 09:30.14 | *** join/#debian m0u (~m0u@unaffiliated/m0u) |
| 09:32.45 | *** join/#debian nifker (~Thunderbi@200116b80a432800dbca37074fdd5b91.dip.versatel-1u1.de) |
| 09:34.54 | *** join/#debian DarkiJah_ (~DarkiJah@87.72.62.74) |
| 09:35.16 | *** join/#debian ov3rmind (~over0-07@unaffiliated/ov3rmind) |
| 09:36.38 | *** join/#debian starch (~user@62.red-81-39-120.dynamicip.rima-tde.net) |
| 09:37.11 | *** join/#debian amerigo (uid331857@gateway/web/irccloud.com/x-qlwggbtbsclqlize) |
| 09:37.28 | *** join/#debian Slashman (~Slash@cosium-fo-152-18.fib.nerim.net) |
| 09:38.22 | *** join/#debian yokel (~yokel@unaffiliated/contempt) |
| 09:38.28 | *** join/#debian gigetoo (~gigetoo@c83-253-52-84.bredband.comhem.se) |
| 09:38.44 | *** join/#debian Adbray (~Adbray@2600:6c48:6f7f:d764:afef:e464:9861:6026) |
| 09:39.02 | *** mode/#debian [+l 1177] by debhelper |
| 09:41.38 | *** join/#debian hexnewbie (~hexnewbie@unaffiliated/hexnewbie) |
| 09:42.20 | *** join/#debian cliluw (~cliluw@unaffiliated/cliluw) |
| 09:43.25 | *** join/#debian noooberino (~noooberin@212-186-224-219.static.upcbusiness.at) |
| 09:43.53 | *** join/#debian Adbray_ (~Adbray@2600:6c48:6f7f:d764:afef:e464:9861:6026) |
| 09:46.53 | *** join/#debian freebench (~freebench@92.253.250.131) |
| 09:47.18 | *** join/#debian MrTrick (uid181961@gateway/web/irccloud.com/x-tqetpazgnhvzlchm) |
| 09:48.22 | *** join/#debian Slashman (~Slash@cosium-fo-152-18.fib.nerim.net) |
| 09:48.59 | *** join/#debian unluckyshrubbery (~unluckysh@unaffiliated/unluckyshrubbery) |
| 09:53.01 | *** join/#debian LucaTM (~LucaTM@unaffiliated/lucatm) |
| 09:53.45 | *** join/#debian a35311 (~a71821@185.156.175.116) |
| 09:55.12 | *** join/#debian lesless (~lessless@obligatory.vehicle.volia.net) |
| 10:02.44 | *** join/#debian zamnedix (~zamnedix@zamnedix.net) |
| 10:05.40 | *** join/#debian nifker (~Thunderbi@200116b80a432800dbca37074fdd5b91.dip.versatel-1u1.de) |
| 10:05.41 | *** join/#debian frostschutz (~frostschu@55d4fe21.access.ecotel.net) |
| 10:08.21 | ov3rmind | anyone can gimme some tip about firejail, about how i can setup profile files parameter for some apps runs with diferent anvironments i am confused abou it, i don't found an sample for it, i continue studding! |
| 10:08.24 | ov3rmind | very thanks |
| 10:08.56 | ov3rmind | s /anvironments/environments/ |
| 10:09.11 | ov3rmind | excuse typing error(s) |
| 10:09.23 | *** join/#debian tehnull (~tehnull@unaffiliated/tehnull) |
| 10:10.30 | *** join/#debian NetTerminalGene (~Thunderbi@unaffiliated/dontknow) |
| 10:14.47 | *** join/#debian HerbY_NL2 (~HerbY_NL2@82-197-210-209.dsl.cambrium.nl) |
| 10:15.05 | *** join/#debian Error451 (~R@unaffiliated/mastergrab) |
| 10:15.54 | *** join/#debian m0u (~m0u@unaffiliated/m0u) |
| 10:16.30 | *** join/#debian lucad111 (~lucad111@linaro/lucad111) |
| 10:17.49 | *** join/#debian HerbY_NL3 (~HerbY_NL2@82-197-210-209.dsl.cambrium.nl) |
| 10:17.57 | *** join/#debian hooway (~q@87.110.26.40) |
| 10:19.02 | *** mode/#debian [+l 1185] by debhelper |
| 10:21.46 | *** join/#debian wallacer (~quassel@51.158.189.53) |
| 10:37.38 | *** join/#debian endstille (~endstille@mail02.grolman-group.com) |
| 10:49.49 | *** join/#debian queip (~queip@unaffiliated/rezurus) |
| 10:50.25 | *** join/#debian lesless (~lessless@obligatory.vehicle.volia.net) |
| 10:53.00 | *** join/#debian kimmyk (~kimmyk@2001:470:7857:1f2b::f) |
| 10:57.33 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f1e1300821f02fffeaf6272.dip0.t-ipconnect.de) |
| 10:59.39 | rdz | For testing purposes, I'd like to downgrade a few selected packages. However, it seems for many packages the older version is not available anymore, although those packages have been upgraded quite recently, according to /var/log/apt/history.log |
| 10:59.54 | rdz | for instance: apt install libsqlite3-0=3.27.2-3 |
| 10:59.59 | *** join/#debian somazero (~somazero@2600:8805:b00:dc5::1a42) |
| 11:00.17 | rdz | I get: "E: Version '3.27.2-3' for 'libsqlite3-0' was not found" |
| 11:01.28 | n4dir | rdz: i have no experience with it, it might (or might not) help. https://snapshot.debian.org/ |
| 11:02.23 | rdz | n4dir, that looks very interesting.. thanks! |
| 11:02.46 | n4dir | else ask again, when the channel is more active. good luck |
| 11:02.51 | pasiz | rdz: apt-cache policy packagename |
| 11:03.01 | pasiz | shows you version and available versions |
| 11:03.35 | *** join/#debian CombatVet (~c4@gateway/tor-sasl/combatvet) |
| 11:04.53 | rdz | pasiz, thanks.. i knew about it. I'm wondering why old versions disappear from repos. |
| 11:05.10 | rdz | However, it seems i can retrieve whatever I want from snapshot.debian.org |
| 11:05.29 | n4dir | it does help? oh. i was not sure |
| 11:05.39 | rdz | n4dir, absolutely :- |
| 11:05.41 | rdz | :-) |
| 11:05.48 | n4dir | great then. |
| 11:06.09 | *** join/#debian CombatVet (~c4@gateway/tor-sasl/combatvet) |
| 11:06.47 | *** join/#debian lord4163 (~lord4163@90-230-194-205-no86.tbcn.telia.com) |
| 11:06.55 | *** join/#debian GaryS (~GaryS@195.143.24.235) |
| 11:11.11 | *** join/#debian dselect (~dselect@unaffiliated/themill/bot/dselect) |
| 11:12.42 | *** join/#debian berdav (~vagrant@disi057063.ing.unibo.it) |
| 11:12.46 | *** join/#debian mrkramps (~mrkramps@p5b09aff6.dip0.t-ipconnect.de) |
| 11:13.42 | *** join/#debian dj-death (~djdeath@87.ip-51-254-129.eu) |
| 11:13.49 | dj-death | hi all |
| 11:13.55 | pasiz | rdz: everything cannot be kept on tree (compatibility issues etc.) |
| 11:14.08 | pasiz | hi |
| 11:14.21 | dj-death | dumb question about python2/3, is it possible to install python2 packages through pip? |
| 11:14.51 | mrkramps | dj-death, in buster you still have pip(2) and pip3 |
| 11:15.00 | dj-death | mrkramps: I'm on unstable |
| 11:15.03 | rdz | pasiz, I see. thanks for explanation |
| 11:15.33 | mrkramps | dj-death, then i assume pip2 is not available anymore |
| 11:15.35 | ratrace | mrkramps: if you can install python2 and a py2 virtualenv, you should be able to, yes. also: |
| 11:15.39 | ratrace | !debian-next |
| 11:15.39 | dpkg | #debian-next is the channel for testing/unstable support on the OFTC network (irc.oftc.net), *not* on freenode. If you get "Cannot join #debian-next (Channel is invite only)." it means you did not read it's on irc.oftc.net. See also https://wiki.debian.org/IRC and https://wiki.debian.org/GettingHelpOnIrc |
| 11:15.51 | ratrace | do not use pip outside of a virtualenv. |
| 11:16.24 | mrkramps | ratrace, will i definitely kill myself when i did this outside virtualenv for a single package? |
| 11:16.31 | *** join/#debian citypw (~citypw@gateway/tor-sasl/citypw) |
| 11:16.32 | *** join/#debian oxek (oxek@gateway/vpn/privateinternetaccess/oxek) |
| 11:16.48 | ratrace | mrkramps: depends on what goes wrong :) if you did, hopefully you did that as user, and not root. |
| 11:17.05 | mrkramps | as root of course |
| 11:17.38 | ratrace | then there's no telling what damage you did. could be nothing, could be you borked some packaed python, could be you borked future packaged python installations. |
| 11:18.39 | *** join/#debian k4nz (~Thunderbi@115.197.191.122) |
| 11:18.44 | *** join/#debian endstille (~endstille@mail01.grolman-group.com) |
| 11:22.14 | dj-death | thanks all |
| 11:22.57 | dj-death | turns out my problem is purely python3 |
| 11:23.30 | dj-death | it's just that the stuff I'm dealing with is picking up python3.8 instead of the default python3.9 and therefore missing some installed packages |
| 11:23.39 | *** part/#debian dj-death (~djdeath@87.ip-51-254-129.eu) |
| 11:24.17 | *** join/#debian dynetrekk (~dynetrekk@static.120.121.119.168.clients.your-server.de) |
| 11:24.49 | *** join/#debian dionysus69 (~Thunderbi@unaffiliated/dionysus69) |
| 11:24.51 | ratrace | probably easily dealt with a shebang update ..... but patience is a virtue. |
| 11:24.52 | *** join/#debian beelzebuzz (~rasputin@gateway/tor-sasl/beelzebuzz) |
| 11:27.05 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f1e1300821f02fffeaf6272.dip0.t-ipconnect.de) |
| 11:37.28 | *** join/#debian d1cor (~d1cor@unaffiliated/d1cor) |
| 11:40.48 | *** join/#debian g0zzy (~goose@2a00:23c7:a01a:f100::4f9) |
| 11:42.00 | g0zzy | Problems installing. I deleted the original EFI partition in the installer and am not sure what to do now. Should i make a new EFI partition and if so, how big? |
| 11:42.32 | *** join/#debian Jerrynicki (~niklas@p200300f5770577008cb7fc235fb41ab4.dip0.t-ipconnect.de) |
| 11:43.16 | *** join/#debian godane (~godane4@154.16.166.27) |
| 11:44.15 | mrkramps | g0zzy, iirc debian's default size for efi partition is 512 MB FAT32 |
| 11:45.15 | *** join/#debian thiras (~thiras@unaffiliated/thiras) |
| 11:45.26 | g0zzy | Right thanks. I'll make that first. Shall see if it gives me the option to flag it as efi |
| 11:46.54 | g0zzy | Yes it did. "EFI system partition" |
| 11:49.02 | *** mode/#debian [+l 1193] by debhelper |
| 11:49.05 | *** join/#debian Alexandrov (~Syafiq@202.186.130.190) |
| 11:50.13 | *** join/#debian linzst (~linzst@unaffiliated/linzst) |
| 11:50.49 | *** join/#debian rnm (~rnm@unaffiliated/rnm) |
| 11:51.08 | *** join/#debian linzst (~linzst@unaffiliated/linzst) |
| 11:53.44 | *** join/#debian Antioch0 (~Antioch@h175-177-044-119.catv02.itscom.jp) |
| 11:54.22 | *** join/#debian mambang (~rnm@unaffiliated/rnm) |
| 11:56.10 | g0zzy | Thanks again |
| 11:56.18 | *** join/#debian diogenes_ (~diogenes_@93.116.130.26) |
| 11:57.18 | *** join/#debian bolovanos (~bolovanos@host-213-235-140-105.ip.topnet.cz) |
| 11:59.25 | *** join/#debian thiras (~thiras@unaffiliated/thiras) |
| 12:05.26 | *** join/#debian dpkg (~dpkg@unaffiliated/dpkg) |
| 12:05.59 | *** join/#debian TomyWork (~TomyLobo@p200300e80f4b0800051004e23e27a2ad.dip0.t-ipconnect.de) |
| 12:06.56 | netcrash | Hello, does anyone know of a good rootkit detector besides rkhunter? |
| 12:09.57 | *** join/#debian CombatVet (~c4@gateway/tor-sasl/combatvet) |
| 12:11.21 | *** join/#debian hello476 (hello476@gateway/vpn/protonvpn/hello476) |
| 12:13.15 | hello476 | hi,running on debian buster.having almost no apps opened,but top is showing that CPU is running at 100%.What's going on? |
| 12:13.55 | ratrace | hello476: it also lists processes running... |
| 12:14.00 | mrkramps | hello476, top should also show you the process(es) running |
| 12:14.33 | tarzeau | netcrash: manual inspection? |
| 12:14.53 | hello476 | it does.but all this requiring 100% CPU power? |
| 12:15.18 | ratrace | hello476: I think the hint here was to look at which processes are running ...... |
| 12:15.49 | tarzeau | hello476: what's the name of the process? and do you see interesting stuff with strace -p yourprocessid |
| 12:16.08 | hello476 | will have a look |
| 12:16.44 | ratrace | hello476: so which processes are those? |
| 12:17.29 | hello476 | right now CPU usage is very low.started computer 10-15 minutes ago. |
| 12:17.40 | *** join/#debian schamea (~schamea@200116b80fff8900e4b4a0ba170e92c8.dip.versatel-1u1.de) |
| 12:17.47 | hello476 | will post the processes |
| 12:20.11 | hello476 | noticing this mentioned issue on a regular base and as long as caja is running the CPU is at 100%,after caja isn't running anymore,CPU drops suddenly to very low usage |
| 12:20.38 | mrkramps | what's caja |
| 12:21.13 | diogenes_ | mrkramps, file manager for Mate. |
| 12:21.36 | hello476 | i don't.at the right column that states TIME+COMMAND when running tops it says caja |
| 12:22.03 | *** join/#debian PoaB (~Thunderbi@134.3.91.178) |
| 12:22.08 | diogenes_ | mrkramps, ps aux | grep tracker |
| 12:22.15 | diogenes_ | does it show anything? |
| 12:22.29 | diogenes_ | oops it was supposed for hello476 |
| 12:22.49 | *** join/#debian czesmir (~stefan@aeaq247.neoplus.adsl.tpnet.pl) |
| 12:24.41 | hello476 | diogenes,what is that command checking? |
| 12:25.12 | *** join/#debian combatvet_ (~c4@gateway/tor-sasl/combatvet) |
| 12:25.36 | mrkramps | from the bugtracker this could be related to thumbnails or loops with symlinks? |
| 12:26.08 | diogenes_ | hello476, for the tracker miner stuff which are responsible for file indexing and thus they can take a lot of resources. |
| 12:26.24 | *** join/#debian zeden (~user@unaffiliated/zeden) |
| 12:26.54 | hello476 | ok |
| 12:27.49 | hello476 | this shows the processes that are running right now https://dpaste.com/3ZSB98XM2 |
| 12:28.01 | *** join/#debian no112_ (~no112@27.96.207.94) |
| 12:28.48 | hello476 | but for several minutes after starting computer there are different processes running that must be responsible for the high CPU usage |
| 12:29.33 | *** join/#debian rotaticus (~rotaticus@unaffiliated/rotaticus) |
| 12:29.58 | hello476 | maybe i should reboot and post output of top right after the start of computer |
| 12:30.51 | *** join/#debian schizo (~schizo@unaffiliated/sekizo) |
| 12:31.00 | hello476 | diogenes,the output of the command is "user 3723 0.0 0.0 6080 884 pts/4 S+ 13:23 0:00 grep tracker |
| 12:31.00 | hello476 | " |
| 12:31.37 | *** join/#debian lesless (~lessless@obligatory.vehicle.volia.net) |
| 12:31.41 | hello476 | i will reboot now and check top right after the start |
| 12:34.31 | *** join/#debian debsan_ (~debsan@unaffiliated/debsan) |
| 12:35.47 | *** join/#debian zapatista (~zapatista@94.54.29.188) |
| 12:36.13 | *** join/#debian Night-Shade (~TimF@ip5b406da5.dynamic.kabel-deutschland.de) |
| 12:37.23 | *** join/#debian Night-Shade (~TimF@ip5b406da5.dynamic.kabel-deutschland.de) |
| 12:39.14 | *** join/#debian hello476 (hello476@gateway/vpn/protonvpn/hello476) |
| 12:39.14 | *** join/#debian Night-Shade (~TimF@ip5b406da5.dynamic.kabel-deutschland.de) |
| 12:40.26 | *** join/#debian JohnML (~john1@ip-178-202-6-56.hsi09.unitymediagroup.de) |
| 12:42.10 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f1e1300821f02fffeaf6272.dip0.t-ipconnect.de) |
| 12:43.22 | hello476 | here is the output of top several minutes after boot https://dpaste.com/D4EMYWSEX |
| 12:43.46 | hello476 | don't see why CPU should be at 100% |
| 12:45.57 | mrkramps | hello476, https://github.com/mate-desktop/caja/issues?q=is%3Aissue+cpu |
| 12:46.45 | *** join/#debian PoaB (~Thunderbi@134.3.91.178) |
| 12:46.45 | hello476 | let's have a look |
| 12:47.03 | Ede|Popede | 100.0 in the first line |
| 12:47.14 | tarzeau | haha i've been using mc/mcedit 20 years, and today i find out esc-n shows linenumbers |
| 12:50.07 | hello476 | i see,there were already several issues being opened concerning high cpu usage |
| 12:50.20 | *** join/#debian aschokker (~aschokker@185.238.129.251) |
| 12:52.21 | mrkramps | tarzeau, that's good! even after 20 years this software allows you to have a fresh experience |
| 12:52.33 | *** join/#debian MikeDebian (~none@bl11-47-156.dsl.telepac.pt) |
| 12:54.17 | *** join/#debian mbrad (~mbrad@94.4.169.145) |
| 12:55.19 | Ede|Popede | it could really need some work in its help system, a lot of places where F1 just throws an error for a non-existing node |
| 12:55.32 | tarzeau | mrkramps: in my late dos days i had switched from nc to far(manager). there's a linux port but it's not as advanced as the win9x version |
| 12:56.05 | *** join/#debian Lupricon (~Lupricon@178.239.198.255) |
| 12:57.18 | ratrace | mrkramps: lol |
| 12:57.19 | *** join/#debian Ard1t (~ard1t@unaffiliated/ard1t) |
| 12:58.40 | *** join/#debian fredl (~fredl@smtp.3dn.nl) |
| 12:59.01 | *** mode/#debian [+l 1200] by debhelper |
| 13:00.29 | *** join/#debian Scotty_Trees (~Scotty_Tr@162-234-179-169.lightspeed.brhmal.sbcglobal.net) |
| 13:02.18 | *** join/#debian edernucci (~edernucci@177.68.118.132) |
| 13:06.07 | *** join/#debian aLLamox (~a@ashellz/owner/allamox) |
| 13:06.10 | hello476 | STATUS hello476 |
| 13:06.11 | queip | wht the hell |
| 13:06.33 | queip | here I am sitting on firefox empty page, and suddenly an Ad from fire fox pops up, about COVID19. what is this??? |
| 13:06.37 | aLLamox | Hello, I would like to install old Debian kernel, for educational purpose |
| 13:06.42 | aLLamox | I installed one from https://soft.lafibre.info/ |
| 13:06.59 | tarzeau | aLLamox: try debian gnu/kfreebsd ships a very old kernel 10.3 :) |
| 13:07.24 | mrkramps | queip, do you have firefox studies enabled? |
| 13:07.38 | aLLamox | I have already downloaded the one I need from the above website, however I have a problem with the source.list |
| 13:07.53 | queip | mrkramps: it's the default settings |
| 13:08.00 | aLLamox | Which source.list should I include, I tried to include the recent one, but it gives error |
| 13:08.08 | queip | do you mean "snippets"? |
| 13:08.21 | aLLamox | deb http://archive.debian.org/debian/ etch main non-free contrib Will something like this work? |
| 13:08.42 | aLLamox | or I should change etch with the correct version I downloadeD? |
| 13:09.08 | queip | why does debian defaults to letting Firefox / Mozilla spam me? what's next, elections spam in my browser itself? |
| 13:10.14 | aLLamox | tarzeau: I'm trying to-check-debian-version however lsb_release command is not found, is there any other commands in your mind or should I google ? |
| 13:10.57 | tarzeau | aLLamox: http://bootes.ethz.ch/debian-unofficial-kfreebsd-amd64-NETINST-1.iso |
| 13:11.11 | mrkramps | aLLamox, cat /etc/debian_version |
| 13:13.30 | aLLamox | tarzeau: Thank you very much. Which Kernel is this version? |
| 13:13.46 | tarzeau | aLLamox: 10.3 |
| 13:13.53 | tarzeau | aLLamox: freebsd kernel |
| 13:14.41 | *** join/#debian format_c (~format_c@unaffiliated/format-c/x-8927423) |
| 13:14.54 | aLLamox | mrkramps: Thank you very much .... It was Debian GNU/Linux 4.0 (etch) â obsolete stable release |
| 13:15.22 | aLLamox | I will update source list with this one, hopefully it will work |
| 13:15.23 | aLLamox | https://serverfault.com/questions/414888/how-to-update-sources-list-for-debian-4-0-etch |
| 13:15.35 | aLLamox | Thank you guys will update you soon. |
| 13:18.00 | *** join/#debian kupi (uid212005@gateway/web/irccloud.com/x-mktflcfjzasruohy) |
| 13:23.20 | aLLamox | ... absloute dist ..... I will google to see if I can still use the sources.list or not |
| 13:23.40 | *** join/#debian Bjornn- (~Bjornn@cpe-76-179-91-198.maine.res.rr.com) |
| 13:23.56 | *** join/#debian DDDD (~DDDD@h-190-15.A400.priv.bahnhof.se) |
| 13:23.59 | *** join/#debian LoRe (~LoRe@banjo.rbfh.de) |
| 13:24.19 | DDDD | Anyone have an idea why i'm getting this while trying to move files to an NTFS drive used for Plex? |
| 13:24.22 | DDDD | https://i.imgur.com/L6dYjkh.png |
| 13:24.29 | DDDD | The files still get moved if i press skip. |
| 13:25.18 | DDDD | If i use mv in terminal instead, they still get moved but i get the message " preserving times for '/hdd/plex/Media/Serier/Person of Interest/Season 2/Person of Interest - 2x03 - Masquerade.srt': Operation not permitted |
| 13:25.18 | DDDD | " |
| 13:25.53 | *** part/#debian webmind (~webmind@2a10:3781:93b:1:5e26:aff:fe08:ee6f) |
| 13:30.33 | DDDD | fstab entry = UUID=C2C2FBECC2FBE299 /hdd/plex ntfs-3g defaults,user,rw,umask=000 0 0 |
| 13:31.25 | ratrace | penguin gods punishing you for trafficking pirated goods. |
| 13:31.52 | DDDD | Nahh i bought the CD and ripped it :P |
| 13:33.04 | hello476 | non-debian related question,anyone here knows how the freenode STATUS command works?had a look here https://stackoverflow.com/questions/1682920/determine-if-a-user-is-idented-on-irc.but somehow it is not working |
| 13:33.19 | *** join/#debian Grldfrdom (uid391113@gateway/web/irccloud.com/x-nrlaztxijnykotni) |
| 13:35.25 | aLLamox | https://imgur.com/GsPiO3o.png I can't bypass the absolute error... |
| 13:35.33 | aLLamox | any tip in the right direction |
| 13:37.06 | *** join/#debian kimmyk (~kimmyk@2001:470:7857:1f2b::f) |
| 13:37.29 | ratrace | aLLamox: tried just etch/updates literally like that? |
| 13:38.04 | *** join/#debian Hokedli (~laslie@gateway/tor-sasl/lasliedv) |
| 13:38.24 | *** join/#debian hqdruxn08 (~hqdruxn08@cpe-66-68-160-103.austin.res.rr.com) |
| 13:39.01 | *** mode/#debian [+l 1193] by debhelper |
| 13:39.51 | *** join/#debian dionysus69 (~Thunderbi@unaffiliated/dionysus69) |
| 13:40.28 | *** join/#debian cstls (~guy@cpe-198-255-243-231.maine.res.rr.com) |
| 13:40.38 | aLLamox | ratrace: when I tried etch/updates it showed me ..... (dist parse) |
| 13:41.48 | aLLamox | tried etch/updates/ .https://imgur.com/3yatHKL.png |
| 13:42.32 | *** join/#debian kimmyk (~kimmyk@2001:470:7857:1f2b::f) |
| 13:42.40 | *** join/#debian mambang (~rnm@unaffiliated/rnm) |
| 13:42.54 | ratrace | no idea. what are you even trying to do? upgrade from etch? o.O |
| 13:44.21 | *** join/#debian th3jam3sd3an (~james@68.131.241.7) |
| 13:47.41 | *** join/#debian kriger (~norge@unaffiliated/kriger) |
| 13:51.38 | aLLamox | ratrace: no, I'm doing a very basic lab for my school colleagues to teach them basic linux commands, networking and ethical hacking... the uppcoming level is For privesc vuln dirtycow |
| 13:52.45 | *** join/#debian allorder (~allorder@unaffiliated/allorder) |
| 13:55.50 | aLLamox | So I need to setup a machine with known vulnerablity (dirtycow) so that they can privesc from normal user to root access |
| 13:57.37 | *** join/#debian geowiesnot (~user@i15-les02-ix2-87-89-181-157.sfr.lns.abo.bbox.fr) |
| 13:59.20 | *** join/#debian JesusIsJehovahHC (~DarkiJah@87.72.62.74) |
| 14:02.58 | *** join/#debian steven_saus (~steven_sa@cpe-74-131-36-220.kya.res.rr.com) |
| 14:03.26 | *** join/#debian CrystalMath (~coderain@reactos/developer/theflash) |
| 14:08.31 | *** join/#debian hitest (~hitest@unaffiliated/hitest) |
| 14:08.46 | *** join/#debian ddsys (~ddsys@unaffiliated/ddsys) |
| 14:09.01 | *** mode/#debian [+l 1199] by debhelper |
| 14:09.26 | ratrace | aLLamox: you know there's dedicated pentesting tools for that? kali for example? |
| 14:09.53 | *** join/#debian Brigo (~Brigo@40.181.60.213.dynamic.reverse-mundo-r.com) |
| 14:10.48 | aLLamox | ratrace: Yes, I know and I'm using kali as my main OS, but the kernel for kali is patched against dirtycow , also there is parrot and blackarch, etc. |
| 14:11.23 | aLLamox | The point that I want to create a vuln machine, give access to my colleagues at school and they learn in an interactive way |
| 14:11.28 | ratrace | and there's google search: https://security.stackexchange.com/questions/57950/hackable-linux-distributions |
| 14:11.58 | *** join/#debian Darcidride (~Darcidrid@195.144.48.173) |
| 14:12.07 | ratrace | Installing Etch is no longer supported. |
| 14:12.20 | aLLamox | ratrace: I'm sorry if I'm not so clear, I know how to hack against |
| 14:12.26 | aLLamox | the vuln machine... |
| 14:12.37 | *** part/#debian GaryS (~GaryS@195.143.24.235) |
| 14:13.04 | aLLamox | I would like insteade ctreate a vuln machine, if you don't mind I will notice you the machine lab and you can access if you want. So you have better understanding of what I'm trying to do |
| 14:13.16 | *** join/#debian mrbirkov (uid453780@gateway/web/irccloud.com/x-dgubevybvjybtjlj) |
| 14:13.30 | ratrace | No need. Look at the link I just posted. |
| 14:14.38 | aLLamox | ok ratrace |
| 14:14.57 | ratrace | and of course, the famous Damn Vulnerable Linux. |
| 14:14.58 | *** join/#debian dez (uid92154@fedora/deSouza) |
| 14:15.39 | ratrace | which apparently no longer exists.... |
| 14:17.15 | aLLamox | Yes ratrace shame it's dead. Thank you for the link. However I won't give up I don't want to use ready solution or machine from other people . I wanna create my own machines and hack my way throw to learn more and more |
| 14:17.27 | aLLamox | if I didn't manage then maybe use a ready solution |
| 14:17.55 | ratrace | so what's the actual end goal? you want to teach your students .... what exactly? |
| 14:18.08 | ratrace | this starts smelling like an XY problem |
| 14:18.16 | *** join/#debian store_scarecrow (~Andrew_00@host-74.91.78.101.bpsnetworks.com) |
| 14:21.11 | *** join/#debian VectorX (~VectorX@unaffiliated/vectorx) |
| 14:21.14 | dob1 | If I have a program that has the classic file browser (the "Open file", "Save file") with apparmor can I limit this program to the directory that it can view while browsing ? |
| 14:21.36 | ratrace | yes |
| 14:22.34 | dob1 | ratrace, it's difficult to setup? |
| 14:22.55 | ratrace | depends on your knowledge of MAC frameworks, concepts thereof and AppArmor syntax |
| 14:24.19 | ratrace | AppArmor profile is a whitelist. Everything is denied unless there's an explicit rule that allows it. That means you need to build a profile for the _entire_ range of that program's acceptable functions, and then you limit accessibility to specific directory |
| 14:24.33 | *** join/#debian hendursaga (~weechat@gateway/tor-sasl/hendursaga) |
| 14:24.41 | dob1 | ratrace, MAC stands for? |
| 14:24.48 | ratrace | Mandatory Access Control |
| 14:25.05 | dob1 | never used it :/ |
| 14:25.34 | ratrace | it's also possible to "cheat", for example if you want to block the program from accessing your ~/ directories except just one, then you can cut corners with the policies to allow free access outside of ~/, then limited inside ~/ |
| 14:25.49 | *** join/#debian petan (~g@wikimedia/Petrb) |
| 14:26.40 | dob1 | ratrace, you can limit every aspect of a program? or it's just related to file system? |
| 14:26.40 | ratrace | dob1: so, what exactly do you want to achieve? |
| 14:27.50 | ratrace | dob1: it's about limiting syscalls. apparmor is a bit less versatile there than selinux, but you can confine your program with a user systemd unit, into a seccomp filtered namespace, which then in combo with apparmor can block quite a lot |
| 14:28.13 | dob1 | ratrace, the one I asked you, I don't want a user can view some directories while browsing them with "Open file" "Save File" dialog. I know I can use permissions I can deny access to them but I was reading about apparmor so I asked |
| 14:29.26 | ratrace | if unix permissions can do what you want, then that's what you should use. MAC checks happen _after_ DAC (unix permissions) checks, so if DAC fails MAC isn't even consulted. |
| 14:29.55 | ratrace | that said, the purpose of a MAC is to remove UIDs from teh security equation. It doesn't care if you're root or whatever. if you deny acccess to some directory, not even root can access it. |
| 14:30.46 | ratrace | (or to be precise, the process running under that apparmor profile, even if run as root, will not be able to access anything that is not explicitely whitelisted in the profile) |
| 14:31.13 | dob1 | let's say I want to hide other users directory for every user, right now I am not hiding them I just use 700 on them. apparmo can be useful for this? |
| 14:31.16 | dob1 | *apparmor |
| 14:31.27 | ratrace | that's the "Mandatory" part in the "Access Control". It mandates an explicit subject <-> context <-> object relationship. |
| 14:31.28 | dob1 | I mean home directories |
| 14:31.46 | *** join/#debian ihristov (55c48532@gateway/web/cgi-irc/kiwiirc.com/ip.85.196.133.50) |
| 14:32.09 | ratrace | if oyu use 700 on home directories, then what do you need? a user can't access another user's directory |
| 14:32.20 | *** join/#debian zalt (~devp@unaffiliated/lambda443) |
| 14:32.44 | ratrace | if that user becomes root, then it can, and THAT is where teh apparmor policy is useful. however, the policy is on processes. it gets extra tricky if that process is, eg, a shell |
| 14:33.20 | *** join/#debian fredl (~fredl@smtp.3dn.nl) |
| 14:33.41 | dob1 | I will try to test it a bit at least to give me an idea how it works |
| 14:34.01 | dob1 | right now I don't even know the commands you have to use to configure it |
| 14:34.10 | ratrace | dob1: but do you even need apparmor? with 700 on home dirs, what do you think apparmor here will do? |
| 14:34.27 | aLLamox | ratrace: I'm not a teacher I'm student as well |
| 14:35.13 | ratrace | dob1: the easiest starting point is to start the process you want to confine with aa-genprof. then execute the process in all of its acceptable functionality, then when the profile is created, you tweak it, manually or with aa-logprof |
| 14:35.14 | aLLamox | I made this lab as a project to learn what they taught us in school, in practical way :) ... I'm more like learning by doing |
| 14:35.28 | ratrace | aLLamox: so why not use distros specifically made for that? |
| 14:37.00 | aLLamox | ratrace: to learn, now I faced a problem, which is the source.list issue.... I have two options, 1st option is to give up and use ready solution .... 2nd option is to keep reading and learning fix the problem. I know that 2nd option is time consuming, but at the end I will learn alot ;) |
| 14:37.24 | dob1 | ratrace, you right the user can do nothing but I will try some tests |
| 14:37.40 | ratrace | aLLamox: to learn WHAT? you want etch because it's vulnerable? so install distros designed to be vulnerable infosec target practice things |
| 14:38.06 | ratrace | dob1: which process do you want to confine? |
| 14:39.33 | dob1 | ratrace, a java desktop application |
| 14:40.23 | ratrace | dob1: right so crucial thing to remember here, is that AppArmor profiles are attached to _paths_, unlike SELinux which depend on labels. |
| 14:40.37 | ratrace | That means if there's multiple _paths_ a user can execute to start the program, you need to cover them all |
| 14:41.06 | Ede|Popede | dob1: long ago i had a HOME on a shell. couldn't even *list* other users' directories. so /home just looked empty. |
| 14:41.09 | ratrace | for EXAMPLE.... it is possible to confine a shell script if it is executed directly. you put a profile to /path/to/that/script, and if you exec it directly, the profile applies. |
| 14:41.25 | ratrace | the profile will NOT apply if you source or include your shellscript into another. |
| 14:41.36 | *** join/#debian temple48 (~temple48@li723-241.members.linode.com) |
| 14:41.52 | ratrace | dob1: so it is critical to understand what exactly you want to confine, and in what ways can those processes start. |
| 14:43.23 | dob1 | ratrace, it start from script, this script it's executed from a menu of openbox window manager. |
| 14:45.32 | ratrace | dob1: problem with that is, one can bypass theprofile by sourcing the script in a different way |
| 14:46.29 | ratrace | I'm thinking standard unix permissions suffice iny our caes. |
| 14:46.33 | ratrace | *in your case |
| 14:47.04 | ratrace | if the users can't become root, then that's it. if they can, then they can bypass apparmor, unless they're sudoers limited to a specific set of commands. |
| 14:47.26 | dob1 | ratrace, the user can't start any shell because I set as shell /bin/false and he logs just via xrdp |
| 14:47.40 | ratrace | if the users can't become root, but exploit a privilege escalation to become root, the apparmor profile will NOT help, unless the privilege escalation is through that very process, in which case it will help. |
| 14:47.50 | dob1 | *login |
| 14:47.54 | ratrace | dob1: then, again, do you really need appArmor? |
| 14:48.43 | dob1 | ratrace, I suppose no but I would like that the user can't see the other users home dir (login name) |
| 14:48.57 | *** join/#debian hello476 (hello476@gateway/vpn/protonvpn/hello476) |
| 14:49.10 | ratrace | dob1: so you basically want to prevent _listing_ of /home/ ? |
| 14:49.48 | dob1 | as I said he can only see them by the save file, open file dialog , he can't start a terminal / shell |
| 14:49.53 | store_scarecrow | ratrace, I could be happy reading your name as either Ray Trace or Rat Race. Nicely done. |
| 14:50.09 | ratrace | or RA trace |
| 14:50.26 | store_scarecrow | But why would I do the latter? |
| 14:50.37 | ratrace | why would you do the former? :) |
| 14:50.47 | store_scarecrow | Because I invested enough points in Cool. |
| 14:50.48 | ratrace | dob1: can the user start any program? |
| 14:51.02 | ratrace | store_scarecrow: it's actually R. Atrace |
| 14:51.40 | dob1 | ratrace, from what I am trying to setup it can just run the programs that I put as menu entries on this openbox configuration. so just few ones that I will decide |
| 14:52.06 | ratrace | can't that be bypassed? |
| 14:52.18 | store_scarecrow | ratrace, I can't take it. You're overloading my brain with possibilities. |
| 14:52.22 | *** join/#debian programmer892278 (~programme@c-73-26-10-67.hsd1.nm.comcast.net) |
| 14:52.40 | *** join/#debian nebunez (~user@c-73-171-175-205.hsd1.fl.comcast.net) |
| 14:52.41 | ratrace | store_scarecrow: there's also fourth. RatRa Community Edition. |
| 14:53.02 | dob1 | ratrace, I don't know, I am not a security expert I am just trying to setup something that can be secure. but I can say the persons will use it are not security experts too |
| 14:53.03 | *** join/#debian OneLegend (OneLegend@unaffiliated/onelegend) |
| 14:53.09 | ratrace | The Rat Sun of God (Amon-Ra), community edition. |
| 14:53.16 | *** join/#debian mambang (~rnm@unaffiliated/rnm) |
| 14:53.26 | *** join/#debian internat (~nf@167-179-170-254.a7b3aa.bne.nbn.aussiebb.net) |
| 14:54.04 | ratrace | dob1: well that's the thing about false senses of security. you're thinking you're protecting something, while your flanks are wide open. that's why I'm asking you all these question, because it'd be a total waste of time if you AppArmored something that doesn't need to be, or (even worse) is insufficient in itself. |
| 14:54.33 | ratrace | dob1: also, not sure how exactly your users log in from remote side, but if that's a signle server process (with subprocesses or subthreads, doesn't matter), then you cna put a profile onto THAT |
| 14:54.45 | store_scarecrow | ratrace, That's hilarious. Now you're just yanking my chain. |
| 14:54.57 | ratrace | for example, if they used SSH, you can start a _separate_ sshd just for them, confined with an apparmor profile. |
| 14:55.15 | ratrace | dob1: as anything they do or run will be a _child_ of the sshd process you armored, the policy always applies. |
| 14:55.23 | *** join/#debian Barralastic (~Barralast@92.255.124.118) |
| 14:55.34 | Ede|Popede | ratrace: did i ever see a IANAL from you? (hint RechtsAnwalt) ;) |
| 14:55.35 | ratrace | store_scarecrow: that's my hobby :) yank the chains of anyone who questions my nickname. |
| 14:55.36 | *** join/#debian sorin-mihai (~sorin-mih@unaffiliated/sorin-mihai) |
| 14:55.53 | ratrace | Ede|Popede: you should've, I did explicitly state a few of those, a few times. |
| 14:55.59 | store_scarecrow | We have something in common, ratrace. |
| 14:56.14 | *** join/#debian Haudegen (~quassel@91.114.49.10) |
| 14:56.42 | Ede|Popede | RatR Ace. the best in the business. |
| 14:56.51 | ratrace | oh yes, that the fifth permutation :) |
| 14:58.00 | ratrace | dob1: so to continue the example, if you had a sshd dedicated just for them, you could have a rule like deny /home/ r, and allow owner /home/** rwk, with which they can't list /home/ but they can access files they explicitly OWN, in /home/<something> subdirs |
| 14:58.39 | *** join/#debian Vilux (~Villux@li338-244.members.linode.com) |
| 14:58.59 | ratrace | 'mrwk' is better |
| 14:59.30 | dob1 | ratrace, can I apply these rules to the script that launch the application ? |
| 14:59.54 | dob1 | so every program the script run will have these rules applied ? |
| 15:00.27 | ratrace | yes. you can apply a profile to a script assuming you're the one starting the script, and nobody else. then any subprocess of that script will be under the same confinement |
| 15:02.03 | dob1 | this could be useful |
| 15:03.12 | ratrace | it's easier said than done. remember, the profile has to cover ALL filesystem accesses you expect. |
| 15:03.36 | ratrace | that includes all access into /usr/lib for dynamically linked stuff. into /etc/, unto /usr/share. into /dev/, ..... _everything_ |
| 15:04.01 | ratrace | but you can't have one bigass profile if there's different contexts involved, so you need multiple profiles with context switch. |
| 15:04.17 | dob1 | indee the deny all specify only what it can be accessed it's more difficult to setup |
| 15:04.33 | ratrace | for example, you'll want different confinement for firefox, and for, say, gimp, under assumption that gimp cannot execute remote code like firefox can. |
| 15:05.05 | ratrace | so if both can be started as subprocess from your top-level shellscript .... you will need context/profile switches, and more than one profile. |
| 15:05.28 | *** join/#debian Lupricon (~Lupricon@178.239.198.255) |
| 15:05.44 | dob1 | it becomes more and more complicated |
| 15:07.37 | *** join/#debian nt1036 (~nt1036@2603-8000-6f01-94b7-6d54-fcc9-1d26-18ed.res6.spectrum.com) |
| 15:07.58 | *** join/#debian zeden (~user@unaffiliated/zeden) |
| 15:08.32 | *** join/#debian u0m3 (~u0m3@gateway/tor-sasl/u0m3) |
| 15:08.41 | dob1 | ratrace, I will try it at least to learn a bit something new and have an idea doing some tests, but I suppose as you said that I am not going to use it in real case. thanks a lot for all the infos |
| 15:08.42 | *** join/#debian coot (~coot@37.30.50.101.nat.umts.dynamic.t-mobile.pl) |
| 15:10.53 | *** join/#debian Villux (~Villux@li338-244.members.linode.com) |
| 15:12.01 | *** join/#debian EoflaOE (~eoflaoe@eoflaoe.powered.by.lunarbnc.net) |
| 15:12.41 | *** join/#debian Lupricon (~Lupricon@178.239.198.255) |
| 15:15.10 | *** join/#debian Newami (~Newami@ip70-179-45-125.sd.sd.cox.net) |
| 15:17.32 | *** join/#debian xet7 (~xet7@85-156-127-249.elisa-laajakaista.fi) |
| 15:22.08 | *** join/#debian Darcidride (~Darcidrid@195.144.48.173) |
| 15:23.03 | *** join/#debian rsx (~rsx@ppp-188-174-143-149.dynamic.mnet-online.de) |
| 15:23.17 | *** join/#debian sweatsuit (~sweatsuit@unaffiliated/sweatsuit) |
| 15:24.07 | *** join/#debian ChmEarl (~chmearl@unaffiliated/prymar56) |
| 15:25.01 | *** join/#debian darunesh (~darunesh@2409:4064:4e00:76a8:cb00:7168:83ad:cdca) |
| 15:25.53 | *** join/#debian darunesh (~darunesh@2409:4064:4e00:76a8:cb00:7168:83ad:cdca) |
| 15:25.55 | *** join/#debian tuxmania (~tuxmania@cosium-fo-152-18.fib.nerim.net) |
| 15:27.52 | *** join/#debian k4nz (~Thunderbi@183.159.99.14) |
| 15:32.23 | *** join/#debian DarkiJah_ (~DarkiJah@87.72.62.74) |
| 15:34.16 | *** join/#debian HerbY_NL2 (~HerbY_NL2@82-197-210-209.dsl.cambrium.nl) |
| 15:37.25 | *** join/#debian akp55_ (~akp55@c-73-148-15-31.hsd1.va.comcast.net) |
| 15:39.01 | *** join/#debian fachinformatiker (~fachinfor@fsf/member/fachinformatiker) |
| 15:40.11 | *** join/#debian Steeve (~steve@unaffiliated/steeve) |
| 15:41.44 | gnat_x | there is a certain elegance to app armoring a specialized sshd process. |
| 15:43.10 | ratrace | mmmh-hmm. |
| 15:43.37 | *** join/#debian geowiesnot (~user@i15-les02-ix2-87-89-181-157.sfr.lns.abo.bbox.fr) |
| 15:44.47 | *** join/#debian gribouille (~rrrrrr@2a01:e35:2ff1:2470:210:18ff:fe35:9520) |
| 15:45.01 | gribouille | hi |
| 15:46.30 | *** join/#debian dionysus69 (~Thunderbi@unaffiliated/dionysus69) |
| 15:46.45 | gribouille | when I install grub on a disk, what is installed on the MBR exactly? |
| 15:48.12 | Haohmaru | a payload |
| 15:48.50 | gribouille | Haohmaru, what do you mean? |
| 15:49.03 | wsky | the bootloader |
| 15:49.04 | Haohmaru | was kidding |
| 15:49.16 | *** join/#debian mambang (~rnm@unaffiliated/rnm) |
| 15:49.27 | Ede|Popede | just dd the first 512 byte block from the disk, run it through hd |
| 15:49.45 | gribouille | wsky, but the information about the systems to boot? |
| 15:50.06 | Ede|Popede | classic: 1st stage bootloader, then 4x16 bytes for the partitions, then "55 AA" |
| 15:50.06 | wsky | that's on the /boot partion |
| 15:50.15 | wsky | in grub.cfg |
| 15:51.02 | wsky | partition* |
| 15:51.24 | *** join/#debian lesless (~lessless@obligatory.vehicle.volia.net) |
| 15:53.42 | gribouille | but how does the booloader know that the information is on the /boot partition? |
| 15:57.48 | *** join/#debian coot (~coot@37.30.50.101.nat.umts.dynamic.t-mobile.pl) |
| 15:58.12 | *** join/#debian Ard1t (~ard1t@unaffiliated/ard1t) |
| 15:58.30 | *** join/#debian relipse (uid16131@gateway/web/irccloud.com/x-lukakuosdfbcdfph) |
| 15:58.40 | *** join/#debian SoundShaman (~SoundSham@47-219-249-23.jkvlcmta01.res.dyn.suddenlink.net) |
| 16:02.55 | *** join/#debian m0u (~m0u@unaffiliated/m0u) |
| 16:06.09 | *** join/#debian diogenes_ (~diogenes_@188.208.123.91) |
| 16:07.16 | *** join/#debian bigjazzsound (~craig.fie@75-60-207-113.lightspeed.tukrga.sbcglobal.net) |
| 16:09.06 | *** join/#debian Anarchic (~Anarchic@getlegit.co.uk) |
| 16:09.07 | *** join/#debian greycat (~greg@209.142.155.49) |
| 16:12.13 | gnat_x | gribouille: https://wiki.debian.org/BootProcess |
| 16:12.55 | *** join/#debian Anarchic (~Anarchic@getlegit.co.uk) |
| 16:13.40 | *** join/#debian boktan (b9f80f58@185.248.15.88) |
| 16:13.45 | boktan | hello :D |
| 16:14.15 | boktan | for no reason i was banned and for no reason ban is removed :D |
| 16:14.35 | ratrace | wasn't no reason |
| 16:14.47 | boktan | no insult no spam no hate speech nothing |
| 16:14.49 | boktan | no reason |
| 16:15.04 | boktan | btw i found a solution with live usb |
| 16:15.06 | ratrace | you argued with an op about completely offtopic stuff, after being warned to stop offtopic. |
| 16:15.15 | boktan | i did not argued with him |
| 16:15.19 | boktan | i was not even talking to him |
| 16:15.28 | boktan | him was talking to me |
| 16:15.30 | boktan | its different :D |
| 16:15.43 | ratrace | nevertheless, keep it ontopic please. And it also turned out you aren't even using Debian. |
| 16:15.56 | boktan | because of him is op him cannot say to me "dont make noise" etc |
| 16:15.56 | *** join/#debian w-oertl (~wolfgang@cm56-194-159.liwest.at) |
| 16:16.11 | ratrace | the ops have the final say. |
| 16:16.16 | boktan | him is just op... not my boss or so |
| 16:16.25 | ratrace | no, but he's channel boss, so |
| 16:16.30 | boktan | him can say of course but him cannot talk that way |
| 16:16.31 | mason | Second verse, same as the first? |
| 16:16.39 | ratrace | looks like it's going that way. |
| 16:16.45 | boktan | no problem bro im not here for get help or so |
| 16:16.55 | ratrace | boktan: ANYWAY .... hello, welcome to #debian, how may we help your Debian problems today. |
| 16:17.02 | boktan | im just saying i was banned for no reason |
| 16:17.14 | boktan | maybe today i will get banned for no reason again :D |
| 16:17.21 | ratrace | you will if you keep going..... AGAIN |
| 16:17.26 | boktan | only because of im not saying "amen" |
| 16:17.28 | ratrace | so stick to topic please, state your issue. |
| 16:18.05 | mason | There was quite a good reason for it yesterday. Antagonizing a channel op isn't a good move. Ask for help with Debian, provide help to people with Debian questions, or lie low. |
| 16:18.23 | *** join/#debian Anarchic (~Anarchic@getlegit.co.uk) |
| 16:18.33 | boktan | dude what lie who are you that i would need to lie? :D |
| 16:18.50 | boktan | you must be somethings important that i need to lie i cannot understand it :D |
| 16:18.51 | beelzebuzz | just get it over with |
| 16:19.05 | ratrace | boktan: "lie" = to lie down in horizontal position.... |
| 16:19.19 | ratrace | ..... ANYWAY ..... hello and welcome to #debian, how may we help you today. |
| 16:19.29 | boktan | if lie means "wrong talking" im in the same meaning |
| 16:19.55 | ratrace | boktan: https://dictionary.cambridge.org/dictionary/english/lie-low |
| 16:20.02 | *** join/#debian nitefall (~thewellin@sea.wellingtonnet.net) |
| 16:20.07 | ratrace | ..... ANYWAY ..... hello and welcome to #debian, how may we help you today. |
| 16:20.53 | *** part/#debian boktan (b9f80f58@185.248.15.88) |
| 16:20.59 | ratrace | lol |
| 16:21.28 | *** join/#debian dionysus69 (~Thunderbi@unaffiliated/dionysus69) |
| 16:21.46 | *** join/#debian manopola (~manopola@gateway/tor-sasl/manopola) |
| 16:22.00 | ratrace | (then again, english IS weird) |
| 16:22.00 | *** join/#debian _0bitcount (~Big_Byte@90.162.105.206) |
| 16:22.29 | greycat | there's ##english who can describe its weirdness in exquisite detail |
| 16:22.37 | *** join/#debian lesless (~lessless@obligatory.vehicle.volia.net) |
| 16:23.24 | *** join/#debian gelignite (~gelignite@55d4b630.access.ecotel.net) |
| 16:26.00 | *** join/#debian otisolsen70 (~otisolsen@x50d248d8.cust.hiper.dk) |
| 16:26.41 | *** join/#debian anonymip (~anonymip@unaffiliated/anonymip) |
| 16:27.26 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f1e1300821f02fffeaf6272.dip0.t-ipconnect.de) |
| 16:29.56 | *** join/#debian wytchmaster (~wytchmast@gateway.proxion.net) |
| 16:31.19 | *** join/#debian bn_work (uid268505@gateway/web/irccloud.com/x-teiduthiatqzhkjj) |
| 16:32.27 | *** join/#debian dax (dax@bitbot/dax) |
| 16:37.04 | *** join/#debian BrianG61UK (~BrianG61U@2a02:8010:66b7:dddd:c15a:7037:4605:b5df) |
| 16:38.01 | *** join/#debian overlisted (~overliste@2a02-a458-ea73-1-2ef0-5dff-fe75-f15d.fixed6.kpn.net) |
| 16:38.28 | *** join/#debian conta (Thunderbir@gateway/vpn/mullvad/conta) |
| 16:39.01 | *** mode/#debian [+l 1210] by debhelper |
| 16:39.51 | *** join/#debian brickfat (~brickfat@unaffiliated/brickfat) |
| 16:47.42 | *** join/#debian Howie69 (~Howie69@104.160.58.113) |
| 16:49.39 | f8e4 | i get this error: https://forum.qt.io/topic/93247/qt-qpa-plugin-could-not-load-the-qt-platform-plugin-xcb-in-even-though-it-was-found/3 |
| 16:49.45 | f8e4 | qt.qpa.plugin: Could not load the Qt platform plugin "xcb" in "" even though it was found. |
| 16:49.55 | f8e4 | now i search: libxcb, 1000 pkgs, which one |
| 16:52.30 | Howie69 | I'm feeling that I forgot something... or it doesn't show in the ip list... |
| 16:52.38 | *** join/#debian hejux (~hejux@140.238.13.162) |
| 16:52.43 | Brigo | f8e4, so you need /usr/lib/qt/plugins/platforms/libqxcb.so, right? |
| 16:52.51 | Howie69 | I created a bridge to a vlan just like in the docs (some things have changed since I last did it) |
| 16:53.06 | *** join/#debian hejux (~hejux@140.238.13.162) |
| 16:53.16 | f8e4 | Brigo insecure; could be |
| 16:53.20 | Howie69 | named it bri1, but I can't see the interface. Like it's not being read from /etc/network/interfaces |
| 16:53.37 | Howie69 | even after reboot (which I know is a last resort) |
| 16:54.05 | Brigo | that file, in other path but i think i will work regadless, is in libqt5gui5. |
| 16:54.32 | Brigo | Howie69, is it listed in /proc/net/dev |
| 16:55.31 | f8e4 | why does less strip colors i3: sudo apt search libxcb | less -R |
| 16:55.46 | Howie69 | Brigo: I'll check, but in the mean time, here's the interfaces file: https://pastebin.com/AFwFT7SX |
| 16:56.39 | Howie69 | Brigo: It is not |
| 16:56.57 | Brigo | Howie69, you name it bri0, not bri1 |
| 16:57.08 | Howie69 | I typoed the first time, I know |
| 16:57.19 | Howie69 | meant bri0. Going too fast |
| 16:57.28 | Howie69 | maybe I should explain what I'm trying to do |
| 16:58.04 | Brigo | a bridge? :) |
| 16:58.13 | Howie69 | I have a default vlan on 192.168.1.x/24 and vlan 5 for a different dhcp server on .3.x/24 |
| 16:58.19 | Brigo | try ifup bri0 and check the error |
| 16:58.34 | *** join/#debian sinaowolabi (~Sina@169.159.102.110) |
| 16:59.02 | *** mode/#debian [+l 1202] by debhelper |
| 16:59.08 | Howie69 | trying to route vlan 5 traffic to the default vlan gateway |
| 16:59.20 | Howie69 | Cannot find device "bri0" |
| 16:59.59 | Howie69 | so, leaving ens192, it will be stripped of its tag and can see the devices on the .1.x network |
| 17:00.02 | *** join/#debian HerbY_NL2 (~HerbY_NL2@2001:67c:2564:ad00::2:102a) |
| 17:00.05 | *** join/#debian rnm (~rnm@unaffiliated/rnm) |
| 17:00.35 | Howie69 | iirc, and according to the wiki, a bridge will do this. The first time I played with it earlier today, it all showed up |
| 17:00.46 | Brigo | Howie69, i can tell you i have this problem before and i don't remeber how i fixed it, or even if i fixed it. |
| 17:00.53 | Howie69 | I restarted the networking service and it disappeared |
| 17:01.08 | Brigo | yes, it should work. |
| 17:01.26 | Howie69 | Brigo: Yeah, I thought it would be a common problem and I would find lots of google results for it |
| 17:01.35 | Brigo | i used it with lxc containers. At some point i gave up and use another method. |
| 17:02.11 | Howie69 | also having the issue that when I reboot or restart the network service, my ens* are not asked to initialize |
| 17:02.20 | Howie69 | have to login to the console and ifup them |
| 17:03.30 | Brigo | Howie69, line 8 in your paste: auto lo <-- you need to add the interfaces you want configured at boot. |
| 17:03.45 | Brigo | cofigured and up, of course. |
| 17:04.11 | Howie69 | I thought we used to use auto interface instead of allow-hotplug |
| 17:04.13 | *** join/#debian Tom01 (~tom@a89-183-79-51.net-htp.de) |
| 17:04.15 | Brigo | for example, auto lo ens192, ens192.5 bri0 |
| 17:04.52 | Brigo | clearly allow-hotplug is not working, don't ask me why. |
| 17:06.25 | Howie69 | actually, none of my interfaces after ens192 were seen after network restart |
| 17:06.34 | Howie69 | and now I've broke the networking service :) |
| 17:07.21 | Brigo | great! have fun! :) |
| 17:07.26 | jmcnaught | Did you try using the ifdown and ifup commands on individual interfaces instead of restarting the networking service? |
| 17:08.03 | Howie69 | I was restarting networking service to re-read the interfaces file |
| 17:08.25 | Howie69 | it broke on ifup[983]: Cannot find device "bri0" |
| 17:08.41 | *** join/#debian fachinformatiker (~fachinfor@fsf/member/fachinformatiker) |
| 17:08.55 | Howie69 | everything comes back up except the bridge |
| 17:09.33 | jmcnaught | !restart networking |
| 17:09.33 | dpkg | From Debian 6.0 "Squeeze" onwards, the use of the networking init script to reload networking configuration («/etc/init.d/networking restart») is discouraged. Instead, perform the actions you really want. Re-apply changes from /etc/network/interfaces: ifdown eth0; ifup eth0. Remove all iptables rules: iptables -F. See also <mdblows>. |
| 17:10.03 | Howie69 | and the config is the exact copy from the Buster wiki |
| 17:10.16 | Howie69 | which, for some reason is still using ethX interface names |
| 17:11.06 | Howie69 | I guess I can use ip link to create it? |
| 17:11.30 | Brigo | the bri0? no, you can't use it if it is not listed in /proc/net/dev. |
| 17:12.05 | Brigo | there is no such device as bri0 that ip link can configure |
| 17:12.31 | *** join/#debian linzst (~linzst@unaffiliated/linzst) |
| 17:12.42 | Howie69 | The wiki page for this must be depricated :) |
| 17:12.48 | Brigo | <PROTECTED> |
| 17:13.10 | Brigo | Howie69, as i told you, i have the same problem, maybe 2 or 3 years ago. |
| 17:13.45 | *** join/#debian lesless (~lessless@obligatory.vehicle.volia.net) |
| 17:14.57 | Brigo | Howie69, can you create the bridge with brctl? |
| 17:17.06 | Brigo | Howie69, maybe there is some kind of limitation in the bridge module. Maybe a bridge can't work only with virtual lands or something like it. |
| 17:17.25 | Howie69 | https://wiki.debian.org/NetworkConfiguration#Bridges_and_VLANs |
| 17:17.30 | Howie69 | Guide IO |
| 17:17.34 | Howie69 | I'm following |
| 17:18.20 | Howie69 | maybe it's in the section above it |
| 17:18.22 | Brigo | yes, the same i followed and that leaded me to the same error. |
| 17:19.22 | Howie69 | lol |
| 17:20.08 | gnat_x | just looking in. Howie69, you have a machine you're using as a router, and you want to create a bridge to do what now? (just trying to understand what you're working towards) |
| 17:20.41 | Howie69 | Latest buster, I have 2 virtual networks, vlan 5 and default |
| 17:20.59 | Brigo | gnat_x, he wants to send the virtual traffic to the actual network. |
| 17:21.14 | Howie69 | I have tagged traffic on vlan5 that I am trying to route out of the default vlan without the vlan tag so it can see the default devices |
| 17:21.55 | dece | Hi, I'm trying to work on the sources of QEMU directly from its package, but when I use `apt source` it applies debian patches automatically. How can I prevent that? |
| 17:22.14 | *** join/#debian gregorius3597 (~oren@14.37.89.62) |
| 17:23.02 | Howie69 | gnat_x: And we've determined the buster wiki is broke with old examples |
| 17:23.25 | gnat_x | Howie69: so you have vlan 1 and vlan 5, and you want traffic from 5 to be able to go through 1? |
| 17:23.30 | Howie69 | yes |
| 17:23.56 | Howie69 | I can route it through the interface, but it is also staying tagged so it cannot see the devices on 1 |
| 17:24.42 | Howie69 | this vm will be my dhcp, pxe, and vpn server |
| 17:25.43 | Howie69 | so I plug my PXE devices into the switch tagged vlan5 so they get the correct address and pxe etc |
| 17:25.48 | *** join/#debian wigums (~wigums@unaffiliated/wigums) |
| 17:25.54 | gnat_x | okay. why does it need to see devices on vlan1? |
| 17:26.04 | Brigo | Howie69, maybe you need the inteface with no configuration at all, you can try that |
| 17:26.25 | Howie69 | gnat_x: because I need to see the WAN on vlan 1 |
| 17:26.53 | Howie69 | Brigo: I have no ip on the .5 setting... and using manual |
| 17:27.18 | *** join/#debian Jerrynicki (~niklas@p200300f5770577008cb7fc235fb41ab4.dip0.t-ipconnect.de) |
| 17:27.26 | Howie69 | bets he'd do better searching how to do it in this kernel instead of the deprecated wiki article |
| 17:27.35 | gnat_x | Howie69: so the "main router" is on vlan1, and vlan5 is a secondary router downstream? |
| 17:27.36 | *** join/#debian BrianG61UK (~BrianG61U@2a02:8010:66b7:dddd:c15a:7037:4605:b5df) |
| 17:27.41 | *** join/#debian lesless (~lessless@obligatory.vehicle.volia.net) |
| 17:28.19 | *** join/#debian steven (~steven@unaffiliated/steven) |
| 17:28.30 | Howie69 | gnat_x: Not a router, just a seprate network for different use, as I said, PXE and such |
| 17:28.37 | steven | morning guys, is there a website that allows me to look for a specific file to figure out what package for what release provides it? |
| 17:29.04 | gnat_x | Howie69: fair, dhcp server etc. |
| 17:29.14 | Howie69 | basically, I want default devices to use the DHCP server on the WAN router, and the one on vlan5 to use the dhcp server on this box |
| 17:29.23 | jmcnaught | steven: https://www.debian.org/distrib/packages#search_contents or use apt-file |
| 17:29.32 | gnat_x | Howie69: anyway, i think you can get away with setting the vlan5 devices to use the router's IP as a gateway. |
| 17:30.22 | steven | jmcnaught: can't use the terminal cos its a docker image and I don't know whether i can hook into an intermediate build to run stuff in there |
| 17:30.27 | steven | but thanks, I'll check the website! |
| 17:30.54 | Howie69 | gnat_x: I did,except I was using a route, but that route was leaving the vlan tag on it so the wan router on the default vlan won't respond to it |
| 17:31.28 | Howie69 | gnat_x: I got the routing part to work according to tcpdump, the packets were being sent, all I needed was to strip the tag off |
| 17:31.39 | gnat_x | Howie69: can you set the port on the router to be a trunk port? |
| 17:31.42 | steven | jmcnaught: whats oldstable? |
| 17:32.05 | Howie69 | which I would do typically on the switch, but trunk ports pass all vlans with the tags in place |
| 17:32.08 | steven | ah its stretch.. nvm |
| 17:32.09 | jmcnaught | steven: stretch aka Debian 9. |
| 17:32.18 | steven | could've just used stretch instead :) |
| 17:32.20 | Howie69 | gnat_x: I would normall set the port to untagged |
| 17:32.48 | Howie69 | so it would stip the tag, which is easily done with more than one physical interface |
| 17:33.26 | gnat_x | right. |
| 17:34.00 | Howie69 | I've read about a dozen different ways to remove the tag on egress but they're for older versions of kernels and distros |
| 17:34.23 | *** join/#debian rf-n00b (rf-n00b@gateway/vpn/privateinternetaccess/rf-n00b) |
| 17:34.34 | Howie69 | like adding bridge argument to ip link for eth0 |
| 17:34.40 | gnat_x | so is there a reason to not do this with just basic networking? like can you give the router 2 IPs, 192.168.1.x, and 192.168.3.x (or whatever your scheme is) |
| 17:35.58 | gnat_x | Howie69: actually, what are trying to prevent with this setup? it seems like you just want an install network with PXE. that network shouldn't need anything except a route to the internet right? |
| 17:36.29 | Howie69 | gnat_x: because there are 2 dhcp servers and am trying to make sure devices plugged into port groups go to the right dhcp server |
| 17:36.45 | gnat_x | got it. |
| 17:36.56 | gnat_x | just making sure you weren't needlessly overcomplicating. |
| 17:37.02 | Howie69 | That was the original project that lead me down this path |
| 17:37.36 | gnat_x | so all the switches and the router can all handle tagged traffic? |
| 17:37.59 | Howie69 | the virtual switch is in trunk mode, the physical switch is a layer 3 |
| 17:38.04 | *** join/#debian bru (~bru@181.169.14.27) |
| 17:38.18 | Howie69 | uplink ports are trunked as well |
| 17:38.45 | Howie69 | which, btw, HP doesn't make easy since they use the term "trunk" for something completely different |
| 17:38.54 | *** join/#debian Razathorn (~raz@c-69-247-175-94.hsd1.mo.comcast.net) |
| 17:39.13 | *** join/#debian tabris (~northman@unaffiliated/tabris) |
| 17:39.23 | *** join/#debian Bjornn (~Bjornn@2603-7080-9201-553f-f8a0-9be7-5364-42ae.res6.spectrum.com) |
| 17:39.54 | Howie69 | I played with: ip link add ens192.0 type bridge |
| 17:40.06 | Howie69 | but it seems that bridge is no longer a type for ip link |
| 17:40.39 | *** join/#debian BrianG61UK (~BrianG61U@2a02:8010:66b7:dddd:60d2:3b7d:908d:8e46) |
| 17:40.58 | Howie69 | sorry... it wasn't that command |
| 17:41.02 | Howie69 | it was the bridge command |
| 17:41.15 | Howie69 | bridge vlan add vid 5 dev ens192 pvid untagged |
| 17:41.26 | Howie69 | RTNETLINK answers: Operation not supported |
| 17:42.00 | *** join/#debian czesmir (~stefan@aeem112.neoplus.adsl.tpnet.pl) |
| 17:42.30 | *** join/#debian sauvin (sauvin@about/linux/staff/sauvin) |
| 17:43.02 | Howie69 | google says the kernel is missing bridge functionality causing that error? |
| 17:43.49 | gnat_x | Howie69: what does brctrl show give you? |
| 17:43.54 | Howie69 | <PROTECTED> |
| 17:43.59 | Howie69 | missing a package? |
| 17:44.25 | Howie69 | brctrl: command not found |
| 17:44.30 | Howie69 | both spellings |
| 17:44.49 | Howie69 | checks his path to make sure /sbin is in it |
| 17:44.50 | gnat_x | apt policy bridge-utils |
| 17:45.20 | gnat_x | do you have bridge-utils installed? |
| 17:45.21 | Howie69 | well, that would make a difference |
| 17:45.53 | Howie69 | seems like of all of these docs I read, something would mention that. They all just referred to the 8021 module or whatever it is |
| 17:46.02 | *** join/#debian Darcidride (~Darcidrid@2a01:cb15:47a:4300:8eb4:ed12:2db4:db6a) |
| 17:46.08 | *** join/#debian beelzebuzz (~rasputin@gateway/tor-sasl/beelzebuzz) |
| 17:46.23 | Howie69 | And that was all I was missing to get that bridge up |
| 17:46.55 | gnat_x | is it up now? |
| 17:47.08 | Howie69 | the bridge is, testing to make sure it does what I need |
| 17:47.25 | *** join/#debian dreamon (~dreamon@unaffiliated/dreamon) |
| 17:47.46 | Howie69 | doesn |
| 17:48.03 | Howie69 | doesn't do what I need yet, but leaves some of the other docs open to try again |
| 17:48.57 | gnat_x | fwiw, on the one place i looked that i'm using a bridge interface... i have it defined as a network interfaace, and that has pre-up brctl addbr <bridgename> and post-down brctl delbr <bridgename> in it. |
| 17:50.17 | Howie69 | might be what I need because the config for the debian wiki still doesn't work |
| 17:51.02 | gnat_x | Howie69: so you're setting up a vm, and the host machine lives on vlan1? |
| 17:51.23 | *** join/#debian thiras (~thiras@unaffiliated/thiras) |
| 17:51.24 | Howie69 | Yes. |
| 17:51.47 | gnat_x | does the host machine need to do anything other than route traffic to its guests? |
| 17:51.56 | steven | is there a package that provides openssl1.0 libs on stretch? seems like libssl-dev in stretch is 1.1 |
| 17:52.00 | Howie69 | I COULD go into vmware and configure a vswitch port, but that wouldn't work for the physical devices that connect |
| 17:53.30 | *** join/#debian sauvin (sauvin@about/linux/staff/sauvin) |
| 17:53.53 | Howie69 | tries a modified script he found to see if that method works... |
| 17:54.16 | gnat_x | Howie69: the wan router has a route to vlan5 network right? |
| 17:54.21 | quadrathoch2 | ,v openssl |
| 17:54.23 | judd | Package: openssl on amd64 -- jessie: 1.0.1t-1+deb8u8; jessie-security: 1.0.1t-1+deb8u12; stretch: 1.1.0l-1~deb9u1; stretch-security: 1.1.0l-1~deb9u1; buster: 1.1.1d-0+deb10u3; buster-proposed-updates: 1.1.1d-0+deb10u4; buster-security: 1.1.1d-0+deb10u4; bullseye: 1.1.1h-1; sid: 1.1.1i-1; experimental: 3.0.0~~alpha4-1 |
| 17:54.40 | *** join/#debian Bjornn- (~Bjornn@2603-7080-9201-553f-f8a0-9be7-5364-42ae.res6.spectrum.com) |
| 17:54.42 | quadrathoch2 | steven nope |
| 17:54.49 | steven | nope nope? |
| 17:55.00 | Howie69 | gnat_x: the uplink ports on the physical switch is trunked for both vlans |
| 17:55.14 | Howie69 | because both need to make it to the 1 physical adapter in my server hosting all of this |
| 17:55.15 | steven | dammit |
| 17:56.03 | steven | so imma have to figure out how to use wheezy |
| 17:56.05 | gnat_x | Howie69: i'm just trying to understand you setup. (internet) -> router -> switch -> bare metal -> vm on vlan5? |
| 17:56.11 | steven | thanks |
| 17:56.34 | gnat_x | Howie69: is that everywhere in the chain where packets are handed? |
| 17:56.44 | steven | is there a docker image that uses archived repositories. ever since they moved it to archive my build started breaking |
| 17:56.47 | Howie69 | internet -> managed switch -> copper -> vmware -> debian server with both vlans |
| 17:56.54 | steven | (probably the wrong place to ask, trying it anywway) |
| 17:57.27 | quadrathoch2 | steven what are you trying to accomplish |
| 17:57.33 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f1e1300821f02fffeaf6272.dip0.t-ipconnect.de) |
| 17:57.49 | steven | I need to set up a very outdated php container .. |
| 17:57.50 | Howie69 | the only place vlans are set are on the interfaces on the 2 vms currently using the vlan and the untagged 5 ports on the switch |
| 17:57.51 | gnat_x | Howie69: okay. so the line between managed switch and internet (assuming that means box from your ISP that is routing) is trunked. |
| 17:58.00 | Howie69 | correct |
| 17:58.19 | Howie69 | I can set my WAN router to vlan 5 and all works |
| 17:58.35 | Howie69 | not all, just the vlan 5 devices |
| 17:58.39 | steven | and there is no official php image cos its that old, so until recently I just had a wheezy system with a compiled version of it but that I can't compile anymore because the image can't build due to the moved repositories quadrathoch2 |
| 17:58.56 | Howie69 | turn off the vlan on the wan router and only the default vlan works |
| 17:59.02 | gnat_x | Howie69: is the actual WAN port stripping tags? |
| 17:59.35 | Howie69 | That's what I need is for egress from the default vlan to be stripped so it can talk to the WAN router |
| 18:00.00 | Howie69 | but leave stuff tagged on the ingress so it routes to the correct interface |
| 18:02.04 | Howie69 | Ahah! |
| 18:02.14 | Howie69 | PING 192.168.3.248 (192.168.3.248) from 192.168.1.248 : 56(84) bytes of data. |
| 18:02.14 | Howie69 | 64 bytes from 192.168.3.248: icmp_seq=1 ttl=64 time=0.043 ms |
| 18:02.29 | Howie69 | modified script I found works now that the bridge command works :) |
| 18:02.38 | *** join/#debian sh9 (~sh9@softbank060116136158.bbtec.net) |
| 18:02.47 | gnat_x | Howie69: what is the script/ solution (curious now) |
| 18:03.02 | Howie69 | well, sort of |
| 18:03.07 | Howie69 | I can ping between the interfaces |
| 18:03.19 | Howie69 | but I think I need another route |
| 18:03.32 | gnat_x | .248 are host and VM? |
| 18:03.33 | Howie69 | gnat_x: let me paste the script I'm playing with |
| 18:04.03 | Brigo | steven, moved repositories? |
| 18:04.12 | steven | archivec |
| 18:04.15 | steven | archived* |
| 18:04.31 | Howie69 | gnat_x: https://pastebin.com/YLB7Qjqm |
| 18:04.37 | *** join/#debian mirrorbird (~psutcliff@2a00:801:447:b1bf:a43d:1573:86a9:1f86) |
| 18:04.49 | Brigo | i can't see why you can't compile anymore with archived sources. |
| 18:05.24 | steven | the debian:wheezy image (docker image) still uses the other sources, Brigo |
| 18:05.27 | Howie69 | gnat_x: the .248 are the 2 interfaces on the same debian box. Before they couldn't see each other because of the vlan. Now they can, so there's progress |
| 18:05.56 | steven | maybe its as simple as sed /old/new/ before runing apt commands |
| 18:06.09 | Howie69 | now for some tcpdump debugging to see where things need to go. Probably need to fix ip forwarding |
| 18:06.18 | greycat | !wheezy sources.list |
| 18:06.18 | dpkg | Debian 7 "wheezy" is archived. A suitable /etc/apt/sources.list for wheezy has one line: «deb http://archive.debian.org/debian wheezy main». Be sure to run «apt-get update». Also see <deb-src> <contrib> <non-free> <mirrors> <apt-spy> and «man sources.list». |
| 18:06.24 | gnat_x | Howie69: anyway, i think you may be able to set the host machine as VM's gateway, and that should be it. |
| 18:06.49 | quadrathoch2 | steven how old of an php package are we talking about? |
| 18:06.55 | steven | 5.3 |
| 18:06.57 | Howie69 | gnat_x: Thanks, i'll play with that too |
| 18:07.00 | steven | thanks greycat |
| 18:07.29 | gnat_x | Howie69: since it seems like the debian host is properly reading vlans coming in from other devices. |
| 18:07.41 | *** join/#debian v01t (~matrixbot@87.122.9.229) |
| 18:07.54 | Howie69 | it's reading now, just need to set the route I think |
| 18:08.05 | quadrathoch2 | eh, there would be 5.6 in buster :/ steven |
| 18:08.16 | Howie69 | and remember how to dump the corrent config to an interfaces file |
| 18:08.30 | Howie69 | so I won't have to rewrite it all |
| 18:08.37 | steven | yeah, if I *could* upgrade I wouldn't sit here trying to make 5.3 work :D |
| 18:08.44 | *** join/#debian HerbY_NL2 (~HerbY_NL2@82-197-210-209.dsl.cambrium.nl) |
| 18:08.54 | steven | but 5.3 is literally the "newest" release I can use |
| 18:09.02 | gnat_x | Howie69: yes. i can paste my bridge interface for you, if you find that helpful. |
| 18:09.07 | quadrathoch2 | give me a sec |
| 18:09.11 | Howie69 | gnat_x: sure |
| 18:09.35 | *** join/#debian Haudegen (~quassel@178.115.237.87.static.drei.at) |
| 18:09.55 | quadrathoch2 | steven installing wheezy right now :) |
| 18:10.38 | *** join/#debian geowiesnot (~user@i15-les02-ix2-87-89-181-157.sfr.lns.abo.bbox.fr) |
| 18:13.17 | gnat_x | Howie69: https://paste.debian.net/hidden/70db3a3b/ |
| 18:13.54 | *** join/#debian loptr (~loptr@lfbn-str-1-494-46.w90-126.abo.wanadoo.fr) |
| 18:13.57 | Howie69 | gnat_x: That's amazingly simple |
| 18:16.00 | *** join/#debian fredl (~fredl@smtp.3dn.nl) |
| 18:16.04 | *** join/#debian cybiko123 (~josh@2600:4040:113a:a600:68a3:e4c6:90f:9142) |
| 18:16.34 | quadrathoch2 | steven got it to work :/ so no idea what you have issues with |
| 18:16.58 | quadrathoch2 | but wheezy got 5.4 |
| 18:17.12 | steven | I need 5.3 so I have to manually compile it |
| 18:17.40 | quadrathoch2 | so again, what issue do you have? I mean I did a chroot, but container should be the same |
| 18:18.48 | gnat_x | Howie69: note the ip route stuff is just the query of current states, not actual configurations. |
| 18:18.53 | steven | that compiling php has unmet depedencies :) so I tried to compile it on jessi (that didn't work), then on stretch (that didn't work due to the wrong openssl version) and now I am back wheezy getting |
| 18:18.54 | *** join/#debian sevu (~sevu@dynamic-078-055-146-144.78.55.pool.telefonica.de) |
| 18:19.05 | steven | an unmet depedency issue when apt install runs |
| 18:19.09 | Howie69 | sees that |
| 18:19.23 | gnat_x | just making sure, noticed the tab and realized it might be confusing. |
| 18:19.25 | steven | autoconf : Depends: perl (> 5.005) but it is not going to be installed |
| 18:19.27 | steven | libc6-dev : Depends: libc6 (= 2.13-38+deb7u10) but 2.13-38+deb7u12 is to be installed |
| 18:19.29 | steven | libssl-dev : Depends: libssl1.0.0 (= 1.0.1e-2+deb7u20) but 1.0.1t-1+deb7u4 is to be installed |
| 18:20.00 | mutante | all this just to avoid having to replace all the mysql_ calls in the PHP code? |
| 18:20.10 | Howie69 | now to the question to if the rp filter has to be set for each device or if "all" works, since default reportedly does not handle it |
| 18:20.56 | steven | mutante: silly you :) if only it was that simple |
| 18:21.32 | *** join/#debian JohnML (~john1@ip-178-202-6-56.hsi09.unitymediagroup.de) |
| 18:22.04 | gnat_x | Howie69: i'm digging through the old configs for a really complicated debian based router that i was running for a while... i have a ton of routes being added in the interface definitiions. |
| 18:22.38 | *** join/#debian cybiko123 (~cybiko123@2600:4040:113a:a600:68a3:e4c6:90f:9142) |
| 18:23.02 | *** join/#debian Foamy (~foamy@2600:1700:8dd0:7990::772) |
| 18:23.36 | Howie69 | gnat_x: sounds like something I used to do |
| 18:23.40 | quadrathoch2 | hm is there a way to search for packages for old stable releases? as the packages.debian.org is only going so far |
| 18:23.46 | Howie69 | if I could find that page I was on last night.... |
| 18:24.41 | mutante | quadrathoch2: you can select "oldstable" from drop down menu on packages.debian.org |
| 18:24.42 | gnat_x | Howie69: so on your hosts ethernet interface (i'll use eth0), something like: post-up ip route add 192.168.3.0/24 via 192.168.3.1 dev bridge0 |
| 18:25.18 | Brigo | quadrathoch2, archive.debian.org? |
| 18:25.24 | Howie69 | gnat_x: i always get that backwards... |
| 18:25.40 | *** join/#debian GenTooMan (~cyberman@2601:547:437f:e5c6:21f:5bff:fefe:a883) |
| 18:26.00 | gnat_x | Howie69: the syntax takes some getting used to, and networking is hard. |
| 18:26.01 | Howie69 | gnat_x: if I want to accept traffic in from .3.x on bri0, and route it through .1.248.... |
| 18:26.53 | Howie69 | gnat_x: wouldn't it be ip route add 192.168.3.0/24 via 192.168.1.248 dev bri0? |
| 18:27.03 | quadrathoch2 | steven wouldn't it make sense to use squeeze? as it has php5.3 |
| 18:27.34 | Brigo | Howie69, bridges doesn't work like that. |
| 18:28.14 | steven | I'll give it a shot, brb quadrathoch2 |
| 18:28.34 | Brigo | Howie69, https://ebtables.netfilter.org/ |
| 18:29.45 | Howie69 | reads and wonders if the VIA part is the ip address of the bridge interface or the physical NIC interface... |
| 18:29.51 | Howie69 | But I probably should read this first |
| 18:30.50 | Brigo | Howie69, sorry, forget my comments, please i missread your comment. |
| 18:30.53 | steven | !squeeze sources.list |
| 18:30.53 | dpkg | A suitable /etc/apt/sources.list for Debian 6.0 "Squeeze" has two lines: "deb http://archive.debian.org/debian/ squeeze main" "deb http://archive.debian.org/debian/ squeeze-lts main". Put "Acquire::Check-Valid-Until false;" in /etc/apt/apt.conf and run «aptitude update». Also see <deb-src> <contrib> <non-free> <squeeze-lts> <squeeze-updates> and "man sources.list". |
| 18:31.42 | *** join/#debian Tobbi (~Tobbi@supertux/tobbi) |
| 18:31.45 | *** join/#debian Nokaji (~Nokaji@unaffiliated/nokaji) |
| 18:31.52 | gnat_x | Howie69: the bridge interface is 3.248, and then the VM IP could be 3.101 or whatever. |
| 18:32.16 | Howie69 | ok |
| 18:34.15 | steven | quadrathoch2: looking good, lets try if I can throw in all required extensions and make this whole thing work but thanks for pointing it out! |
| 18:35.13 | gnat_x | the via ip is the address of the device you are referring to in a route. ip route add CIDR-range via IP-ADDR (that in on) dev DEVNAME |
| 18:35.41 | quadrathoch2 | no problem ;) hope it works out steven |
| 18:37.07 | *** join/#debian bryceml (~bryceml@104.243.49.109) |
| 18:37.35 | *** join/#debian Vizva (~Vizva@gateway/tor-sasl/vizva) |
| 18:38.34 | *** join/#debian lpancescu (~laur@145.14.198.186) |
| 18:40.56 | Brigo | Howie69, i am a bit rusty, but i think you are using the bridge wrong. If you want to connect some different ip networks in the same machine, you don't need (don't eve have sense to use) a bridge, you just need some route, ip forwarding and some netfilter rules (configuring the forwarding) |
| 18:41.37 | Howie69 | Brigo: That normally works, but gets more complicated with vlan tagging |
| 18:42.07 | Howie69 | I had the routing just fine... but it was also forwarding the vlan tags so the WAN router wouldn't respond |
| 18:42.14 | Brigo | Howie69, it works as long as the interfaces connected in the bridge are in the same ip network. |
| 18:42.47 | Howie69 | The goal here was to strip the vlan tag on the egress |
| 18:43.26 | Brigo | Howie69, ok, then i said nothing. :) |
| 18:46.22 | steven | quadrathoch2: where did you look up the package again? seems like a critical package is missing in squeeze |
| 18:46.38 | gnat_x | Howie69: https://unix.stackexchange.com/questions/546136/bridged-interfaces-and-vlan-tags |
| 18:47.28 | quadrathoch2 | steven http://archive.debian.org/debian/pool/main/p/php5/ most stuff is one folder up |
| 18:47.51 | steven | that package doesn't exist for 5.3 |
| 18:47.59 | steven | cool, so there's that then. |
| 18:48.36 | *** join/#debian rare_energy (~quassel@c-73-248-161-44.hsd1.nj.comcast.net) |
| 18:49.08 | quadrathoch2 | steven about which package are we talking about? |
| 18:49.12 | steven | php-fpm |
| 18:49.30 | steven | which exists for 5.4 but not for 5.3 in squeeze :) |
| 18:50.25 | *** join/#debian nickodd (~nickodd@unaffiliated/nickodd) |
| 18:50.31 | *** join/#debian Betal (~Betal@unaffiliated/betal) |
| 18:52.00 | quadrathoch2 | doesn't mod suffice? steven |
| 18:52.06 | steven | nope |
| 18:52.30 | *** join/#debian sillyslux_ (~sillyslux@unaffiliated/sillyslux) |
| 18:53.31 | steven | ok, I found the original dockerfile (the one taht was working) if I changed the repository to the archived one it should work |
| 18:54.08 | quadrathoch2 | steven yeah, so i found this, sounded like back in the day it was trusted alot, but no idea https://archives.dotdeb.org/dists/squeeze/php5/5.3.28/binary-amd64/ |
| 18:54.14 | quadrathoch2 | there would be fpm |
| 18:54.34 | steven | thanks, I'll check that one out in a jiffy too |
| 18:54.52 | *** join/#debian d1cor (~d1cor@unaffiliated/d1cor) |
| 18:55.15 | wsky | LIES |
| 18:55.41 | wsky | Cognoscetis veritatem, et veritas liberabit vos. |
| 18:55.47 | quadrathoch2 | steven or I know scary tip, ubuntu has 5.3 fpm in an older release |
| 18:56.07 | Howie69 | Ok, so currently, my windows server (I know, ewww) on 192.168.3.249 vlan 5 can ping .1.248 on vlan 0 |
| 18:56.13 | *** join/#debian cliluw (~cliluw@unaffiliated/cliluw) |
| 18:56.16 | steven | wget && dpkg -i && echo "yolo"? |
| 18:56.35 | steven | I mean at this point I'd consider it :) |
| 18:56.58 | Howie69 | but can't ping past that interface... so packets are making it to the right interface... but not leaving |
| 18:57.50 | steven | ok so if I simply replaced the sources.list with the archived one it says there are unmet depedencies |
| 18:57.59 | quadrathoch2 | steven eh, if ubuntu I would rather use the ubuntu container, but honestly no idea which release that is, name of the file: "php5-fpm_5.3.10-1ubuntu3.26_amd64.deb" |
| 18:58.18 | quadrathoch2 | steven post the sources.list |
| 18:58.42 | steven | RUN echo "deb http://archive.debian.org/debian wheezy main" > /etc/apt/sources.list |
| 18:58.53 | steven | the only line |
| 18:59.38 | quadrathoch2 | huh? that worked for me |
| 19:00.04 | steven | quadrathoch2: I guess it depends on what you've installed |
| 19:00.05 | quadrathoch2 | steven where did you get the container from (as I can't find it on docker hub) |
| 19:01.38 | steven | quadrathoch2: https://kopy.io/mkCPo |
| 19:02.09 | *** join/#debian Foamyth (~foamy@2600:1700:8dd0:7990::772) |
| 19:02.23 | *** join/#debian k4nz1 (~Thunderbi@183.159.99.14) |
| 19:02.35 | quadrathoch2 | hm interesting, their website doesn't show wheezy afaik |
| 19:02.52 | steven | what website? |
| 19:02.56 | quadrathoch2 | hub.docker.com |
| 19:03.16 | steven | https://hub.docker.com/layers/debian/library/debian/wheezy/images/sha256-44acdf734257e75dfb2e43db0cd1f8f19f1612f4be57e12d34dba411b20f73cc?context=explore |
| 19:04.18 | quadrathoch2 | steven i just did manually and it worked :/ |
| 19:04.47 | quadrathoch2 | like literally that one line :/ |
| 19:04.56 | steven | that very contents? |
| 19:05.07 | quadrathoch2 | let me retest |
| 19:05.57 | quadrathoch2 | yeah I even copy pasted it from your link steven |
| 19:06.02 | steven | cos with that exact content I get the unmet depedencies error and it bails out |
| 19:06.29 | steven | you do build inside of docker tho right? |
| 19:06.37 | quadrathoch2 | https://paste.debian.net/1177379/ steven |
| 19:06.43 | quadrathoch2 | yeah |
| 19:06.49 | steven | the update is not the issue |
| 19:06.59 | steven | installing the package triggers the unmet depedency issue |
| 19:07.16 | steven | packages* |
| 19:07.23 | quadrathoch2 | ooohh xD |
| 19:07.28 | *** join/#debian Foamyth (~foamy@2600:1700:8dd0:7990::772) |
| 19:07.39 | Howie69 | actually it's because the debian box can no longer see .1.1 |
| 19:08.07 | wsky | gthad |
| 19:12.56 | *** join/#debian rare_energy (~quassel@c-73-248-161-44.hsd1.nj.comcast.net) |
| 19:15.53 | *** join/#debian mrkramps (~mrkramps@p5b09aff6.dip0.t-ipconnect.de) |
| 19:16.23 | *** join/#debian netcrash (~charmande@97.245.60.94.rev.vodafone.pt) |
| 19:16.31 | *** join/#debian Prints (~333@unaffiliated/prints) |
| 19:18.07 | *** join/#debian platvoeten (~platvoete@185.238.52.74) |
| 19:18.20 | quadrathoch2 | steven so I guess I knowwhy it doesn't work. you would need to get security updates working :/ but no idea why. going to look for it |
| 19:19.02 | *** join/#debian Foamyth (~foamy@2600:1700:8dd0:7990::772) |
| 19:19.05 | *** join/#debian noahfx (~noahfx@unaffiliated/noahfx) |
| 19:19.46 | steven | don't bother quadrathoch2, I've taken up enough of your time already! |
| 19:19.53 | steven | I will figure it out :) |
| 19:20.02 | steven | thank you for trying though, highly appreciate it |
| 19:21.17 | quadrathoch2 | steven got it |
| 19:21.29 | *** join/#debian dtcrshr (~dtcrshr@unaffiliated/datacrusher) |
| 19:21.45 | quadrathoch2 | echo "Acquire::Check-Valid-Until \"0\";" > /etc/apt/apt.conf.d/whatever.conf |
| 19:21.57 | quadrathoch2 | add the security repo to sources.list |
| 19:22.04 | quadrathoch2 | and that should work |
| 19:22.10 | quadrathoch2 | steven ^ |
| 19:23.43 | *** join/#debian bigLITTLE (~saputra@bifrost.itmate.net) |
| 19:24.19 | steven | not working either :) |
| 19:24.29 | steven | I'll figure something out, thanks |
| 19:24.50 | quadrathoch2 | steven what error do you get? |
| 19:25.02 | steven | same error, unmet depdecnies |
| 19:25.54 | *** join/#debian nuno_nunes (~PC@a83-132-91-2.cpe.netcabo.pt) |
| 19:26.25 | quadrathoch2 | paste it somewhere ;) still can't say for sure what error you get steven |
| 19:26.32 | *** join/#debian b1ack0p (~opc@unaffiliated/blackop) |
| 19:26.48 | *** join/#debian bigLITTLE (~saputra@bifrost.itmate.net) |
| 19:26.54 | steven | The following packages have unmet dependencies: |
| 19:26.56 | steven | <PROTECTED> |
| 19:26.58 | steven | <PROTECTED> |
| 19:27.00 | steven | <PROTECTED> |
| 19:27.02 | steven | E: Unable to correct problems, you have held broken packages. |
| 19:27.03 | *** kick/#debian [steven!~debhelper@unaffiliated/debhelper] by debhelper (flood) |
| 19:27.07 | *** join/#debian blackop (~opc@unaffiliated/blackop) |
| 19:27.10 | *** join/#debian steven (~steven@unaffiliated/steven) |
| 19:27.11 | Foamyth | rip |
| 19:27.19 | steven | well I guess that was one to many lines, sorry :) |
| 19:27.32 | quadrathoch2 | that's why I said paste is somewhere :) steven |
| 19:27.44 | steven | well I guess that's how you'll learn eh |
| 19:28.18 | quadrathoch2 | what happens when you try to install perl itself? so I know if it takes security into account or not |
| 19:29.00 | steven | perl : Depends: perl-base (= 5.14.2-21+deb7u3) but 5.14.2-21+deb7u6 is to be installed |
| 19:29.14 | quadrathoch2 | steven did you add the conf file? |
| 19:29.18 | steven | I did |
| 19:29.28 | quadrathoch2 | did you update your cache? |
| 19:29.49 | steven | its a docker build, it;ll always start over :) no cache in play |
| 19:29.57 | Howie69 | ok... well, the bridge and adapter did not like having different IP addresses on the same subnet with 2 routes |
| 19:30.12 | quadrathoch2 | ahh you are doing it the dockerfile way. k I thought you were in the container to see it live what happens |
| 19:30.24 | steven | exactly |
| 19:30.49 | greycat | is it possible that your docker image is starting with poisoned packages from the future, rather than actual wheezy packages? |
| 19:31.17 | steven | I use the official debian stuff, greycat. |
| 19:31.28 | greycat | I thought you were using something from docker. |
| 19:31.39 | *** join/#debian otisolsen70_ (~otisolsen@x50d248d8.cust.hiper.dk) |
| 19:31.44 | steven | the only thing that I modified was the contents of the sources.list file because the official sources were archived |
| 19:31.52 | steven | its FROM debian:wheezy |
| 19:32.06 | greycat | so you wrote the wheezy installer to a CD and booted from that? |
| 19:32.50 | *** join/#debian netcrash (~charmande@97.245.60.94.rev.vodafone.pt) |
| 19:32.59 | steven | huh? |
| 19:33.12 | greycat | Yeah, you didn't. You started from a docker image instead. |
| 19:33.22 | steven | oh right, sarcasm |
| 19:33.37 | greycat | So I'm simply speculating that your trouble might be caused by the docker image not having vanilla wheezy packages in it. |
| 19:33.54 | steven | idk man, its the official debian docker image. I don't know who's in charge of it, I don't know what modified it. and the packages are not part of the "docker image" but the repository |
| 19:34.05 | steven | the dockerfile does nothing more than running apt-get install |
| 19:34.05 | greycat | SEE!!! RIGHT THERE!!! |
| 19:34.17 | greycat | You think that a DOCKER IMAGE is OFFICIAL !! |
| 19:34.35 | steven | dude, the problem is not docker but that apt-get install has unmet depedencies |
| 19:34.45 | steven | and those are from the sources.list that you told me to use :) |
| 19:36.02 | steven | docker has very little to do with apt-get install throwing unmet dependency errors |
| 19:36.23 | greycat | I'll just wait for someone else to wield the cluebat. |
| 19:36.34 | steven | and one last thing, according to the "official" debian docker image, the mainteiners have both @debian.org emails so dunno |
| 19:36.42 | *** join/#debian Achylles (~Achylles@189.79.237.44) |
| 19:37.28 | steven | I am already annoyed enough for having to deal with that that you being sarcastic (and wrong) is not helping at all. |
| 19:37.33 | mrkramps | where's the paste of the sources.lst? |
| 19:37.51 | steven | the sources list has one line |
| 19:38.02 | steven | echo "deb http://archive.debian.org/debian wheezy main" > /etc/apt/sources.list |
| 19:38.52 | mrkramps | that's not much |
| 19:39.02 | quadrathoch2 | it should have 2 steven ;) |
| 19:39.08 | *** join/#debian store_scarecrow (~Andrew_00@host-74.91.78.101.bpsnetworks.com) |
| 19:39.15 | steven | thats what your bot/greycat suggested since the other ones are archived |
| 19:39.19 | *** join/#debian earthundead (~earthunde@188.170.85.117) |
| 19:39.51 | steven | <PROTECTED> |
| 19:39.52 | dpkg | Debian 7 "wheezy" is archived. A suitable /etc/apt/sources.list for wheezy has one line: «deb http://archive.debian.org/debian wheezy main». Be sure to run «apt-get update». Also see <deb-src> <contrib> <non-free> <mirrors> <apt-spy> and «man sources.list». |
| 19:40.06 | quadrathoch2 | echo "deb http://archive.debian.org/debian-security wheezy main" >> /etc/apt/sources.list should be added steven |
| 19:40.37 | greycat | I *really* wish my wheezy boxes could still update, but corporate firewalls SUCK. So much. You can't even imagine. |
| 19:40.52 | greycat | I would double-check quadrathoch2's claim, and update the bot and wiki if it turns out to be true. |
| 19:41.21 | steven | I;ll let you know in a jiffy |
| 19:41.21 | quadrathoch2 | greycat the sad part is, his packages rely on packages from security, so *shrug* |
| 19:41.56 | steven | W: Failed to fetch http://archive.debian.org/debian-security/dists/wheezy/main/binary-amd64/Packages |
| 19:42.17 | greycat | checks ... |
| 19:42.28 | greycat | OK, my wheezy box has libc6 version 2.13-38+deb7u12 |
| 19:42.37 | greycat | from before the firewall made it impossible to talk |
| 19:43.42 | steven | you sure the URL/source is correct quadrathoch2 ? |
| 19:43.53 | *** join/#debian voidSurfr (~todd_dsm@ip68-225-227-86.oc.oc.cox.net) |
| 19:44.00 | greycat | wonders why the wheezy security updates would be ahead of the wheezy repository... wouldn't there have been one final point release to consolidate them all? |
| 19:44.46 | quadrathoch2 | sorry sorry |
| 19:45.04 | quadrathoch2 | it's deb http://archive.debian.org/debian-security wheezy/updates main |
| 19:45.22 | *** join/#debian bertbob (~bertbob@67-2-17-130.slkc.qwest.net) |
| 19:45.26 | steven | ah that's the syntax I was looking for :) thanks |
| 19:45.39 | quadrathoch2 | that /updates -_- |
| 19:46.00 | quadrathoch2 | so now it's running for me :) |
| 19:46.07 | greycat | And the reason steven is having this problem is because his Docker image had some security updates already applied. |
| 19:47.17 | quadrathoch2 | eh, I am more of a person to build my own containers. so I didn't even knew that that could be a problem greycat :/ |
| 19:47.42 | *** join/#debian thiras (~thiras@unaffiliated/thiras) |
| 19:47.48 | greycat | It was blatantly obvious from the error messages. |
| 19:47.51 | *** join/#debian twobitsprite (~isaac.fre@98.122.129.103) |
| 19:47.54 | steven | progress! |
| 19:47.55 | *** join/#debian platvoeten (~platvoete@185.238.52.74) |
| 19:48.02 | greycat | OK, wiki updated.... |
| 19:48.23 | mrkramps | thx |
| 19:49.26 | greycat | dpkg, no, wheezy sources.list is <reply>Debian 7 "wheezy" is archived. A suitable /etc/apt/sources.list for wheezy has the two lines «deb http://archive.debian.org/debian wheezy main» and «deb http://archive.debian.org/debian-security wheezy/updates main». Be sure to run «apt-get update». Also see <deb-src> <contrib> <non-free> <mirrors> <apt-spy> and «man sources.list». |
| 19:49.28 | dpkg | greycat: okay |
| 19:49.46 | quadrathoch2 | greycat about which error message are you talking about? am confused right now |
| 19:50.02 | Miles8of9 | buster has gnome 3.30... bullseye and sid have 3.38... any chance we will see it any time soon in buster? |
| 19:50.05 | greycat | The one where steven said it wanted to install a different libc6-dev than was available. |
| 19:50.32 | *** part/#debian nickodd (~nickodd@unaffiliated/nickodd) |
| 19:50.34 | quadrathoch2 | yeah that's what I also figured. just wanted to make sure |
| 19:50.36 | gnat_x | Miles8of9: that's not how the stable replease works. |
| 19:50.42 | steven | maybe its blatantly obvious to you :) |
| 19:50.52 | gnat_x | *release |
| 19:51.07 | quadrathoch2 | greycat there is theoretically "Acquire::Check-Valid-Until \"0\";" in the factoid missing |
| 19:51.28 | greycat | It's not on the wiki and steven hasn't mentioned needing it. |
| 19:51.29 | Miles8of9 | so 3.38 is not stable and needs to be fixed? |
| 19:51.42 | aaro | is it possible to update this too? https://www.debian.org/distrib/archive |
| 19:51.46 | greycat | Stable means "does not change". It doesn't mean "does not crash". |
| 19:52.00 | greycat | A stable release will not get a newer version of GNOME than it has. |
| 19:52.03 | gnat_x | Miles8of9: no, new versions of anything are not introduced into the stable release once it is out. |
| 19:52.27 | Miles8of9 | they update firefox-esr quite often... |
| 19:52.50 | gnat_x | that is one of a handful of exceptions, that took years to make happen. |
| 19:52.53 | mrkramps | exception |
| 19:53.23 | quadrathoch2 | steven, at least, you can have fun now :p |
| 19:53.43 | steven | well right, "fun". I can tackle the next issue :) thank you very much |
| 19:55.26 | quadrathoch2 | steven to me that's fun :P |
| 19:55.59 | steven | usually I'd agree but I have a ton of other things to do and this just so happened to land on my desk |
| 19:56.25 | *** join/#debian loptr (~loptr@lfbn-str-1-494-46.w90-126.abo.wanadoo.fr) |
| 19:56.38 | steven | its not fun if you have a bunch of people waiting for it to work so they can do what ever they need to do |
| 19:56.47 | gnat_x | Miles8of9: if you want the newer version, it might be in buster-backports (haven't looked), but at the point at which you're upgrading gnome, you may as well upgrade debian. |
| 19:57.31 | quadrathoch2 | steven jus tell them to update it to a newer php version while you try to fix their issue |
| 19:57.45 | Miles8of9 | not in backports |
| 19:58.18 | steven | not possible, again. if that was an option I wouldn't be here quadrathoch2. 5.4 removed two "features" (aka crappy things) that this crap code base needs |
| 19:58.42 | gnat_x | Miles8of9: not shocked about that. it would likely be a beastly process to backport. |
| 19:58.46 | quadrathoch2 | ahhh damn. so you are stuck forever on that? steven |
| 19:58.46 | steven | its not something you can just refactor, especially wihtout tests.. especially if the code base in question is close to 20 years old |
| 19:58.59 | quadrathoch2 | oof |
| 19:59.11 | *** join/#debian oskie (usel@195-252-43-180-no254.tbcn.telia.com) |
| 19:59.23 | steven | legacy system, yes. basically the only way to get rid of it is to rewrite it (parts of that is already done) so its just a matter of time but until then I have to keep that thing alive |
| 19:59.52 | steven | and annoy some people on irc while doing so |
| 20:00.08 | oskie | hi, trying to read from a serial device using cat, and I've configured it with stty (38400, 8N1) - but cat just returns with no output after a few seconds. Works fine with terminal emulators. Any idea? |
| 20:00.34 | greycat | write an Expect script? |
| 20:00.47 | *** join/#debian apus (~apus@gateway/tor-sasl/apus) |
| 20:01.36 | greycat | if you have to do it in shell, try opening the serial device first (with exec), and hold it open for the entire script; then use stty and cat on the held-open file descriptor |
| 20:02.11 | gnat_x | oskie: or use screen instead of cat (which should hold it open too) |
| 20:03.09 | oskie | thing is, if I just open the /dev/ttyUSB0 device and read from it, it returns EOF after a second or two ... I wonder what picocom/minicom does |
| 20:03.16 | freem | should not cat only return on EOF or signals? |
| 20:03.42 | gnat_x | oskie: screen /dev/ttyUSB0 38400 |
| 20:04.07 | gnat_x | oskie: are you sure the device at the other end is actually outputting anything? |
| 20:04.54 | freem | when working with RS485 devices through USB, I used to use socat for debugging the line software-side |
| 20:04.56 | oskie | gnat_x: that works better! now i'm seeing stuff |
| 20:06.48 | freem | wonders why using cat on a serial interface though |
| 20:06.51 | oskie | socat works very well too... hmm ok |
| 20:07.08 | greycat | freem: I'm guessing because he wants to script something, and doesn't know Expect yet |
| 20:07.08 | quadrathoch2 | steven I pray for you that the day comes closer where you can shutdown that software |
| 20:07.10 | oskie | actually I want to run 'hexdump -C' on the output |
| 20:07.29 | steven | that's the day I quit my job - its like the end game :D |
| 20:08.23 | *** join/#debian coin21 (~user@93.177.73.90) |
| 20:09.37 | coin21 | I am new to this whole Debian-thing (prev. Ubuntu) I am running gnome, and wanted to know if there is an easy way to cut my internet connection once my vpn disconnects? |
| 20:09.45 | freem | I think socat had options to dump hex of stuff |
| 20:09.59 | freem | yep, -x |
| 20:10.33 | mutante | in general "removing old stuff" doesn't get enough recognition. too often it's all just about the "add new shiny stuff" projects that get the attention and people jump on.. |
| 20:11.13 | *** join/#debian konrados (~konrados@unaffiliated/konrados) |
| 20:11.41 | *** join/#debian sh9 (~sh9@softbank060116136158.bbtec.net) |
| 20:11.43 | mutante | coin21: hmm.. firewall rules that don't allow outgoing traffic except to VPN gateway IP? |
| 20:12.01 | mutante | then there is nothing that needs to be killed |
| 20:12.03 | *** part/#debian diogenes_ (~diogenes_@188.208.123.91) |
| 20:12.17 | coin21 | mutante, so i would need to allow all target ip's right but deny all other... |
| 20:12.58 | mutante | coin21: are there that many IPs? I thought it's basically just one gateway you connect to. |
| 20:13.13 | coin21 | no they are about 20 that I use regularly |
| 20:13.26 | coin21 | there is many more but those are the ones closeby |
| 20:13.32 | mutante | well, or one subnet |
| 20:13.48 | coin21 | thank you mutante |
| 20:13.56 | steven | et voila it compiled and shit is back to working! quadrathoch2 thank you so much for your time, I owe you! ( thanks greycat also, sorry for me being a bit rude early ) |
| 20:14.06 | mutante | I see.. hmm 20 is a number where I would still whitelist it then. |
| 20:14.16 | *** join/#debian FsgMax (~FsgMax@200.252.11.70) |
| 20:14.33 | quadrathoch2 | Steven thatâs great :) now I can go back to sleep xD |
| 20:14.44 | coin21 | mutante: I will do exactly that as they are all different countries most in my own but good portion of them neighboring |
| 20:15.08 | *** join/#debian foka (~foka@198-48-139-15.cpe.pppoe.ca) |
| 20:16.52 | mutante | coin21: there is an easier way. when you connect to VPN then it creates a new virtual device. (for me "tun0"), right? so you can just make rules that allow traffic over that interface but not others |
| 20:17.10 | mutante | then there is no need to keep a whitelist of IPs |
| 20:17.27 | coin21 | brilliant, that is even better |
| 20:17.47 | wsky | gthad |
| 20:17.58 | *** join/#debian bogus (~bogus@83-83-165-7.cable.dynamic.v4.ziggo.nl) |
| 20:18.27 | coin21 | mutante again ty! |
| 20:18.43 | mutante | coin21: no problem. is the 21 a reference to 21 Million bitcoins? |
| 20:19.16 | coin21 | no i hope for 21 being the year of bitcoi to hit 50k :) |
| 20:19.16 | wsky | 21 million bit coins my ass |
| 20:19.51 | mutante | coin21: good luck :) |
| 20:21.25 | mutante | coin21: you can either search the net for iptables bash scripts and adjust them.. or you can use something on top if like "ferm" or "ufw" that attempts to make things easier but is just using iptables indirectly. https://wiki.debian.org/Uncomplicated%20Firewall%20%28ufw%29 |
| 20:23.35 | mutante | coin21: so for example if it's "ufw" then something like "ufw deny out on eth0" "ufw allow out on tap0" |
| 20:23.49 | coin21 | ty :) |
| 20:24.23 | coin21 | mutante: i was directly editing iptables |
| 20:25.02 | freem | editing iptables? |
| 20:25.29 | mutante | coin21: that's legit as well, just more complicated syntax and you can lock yourself out if you try to flush all rules and the default is to block.. but that's only a concern when on a remote machine |
| 20:27.13 | mutante | "editing iptables" sounds correct to me.. yea, you are editing tables using the command |
| 20:27.34 | coin21 | mutante: i have locked myself out of several of my computers :D |
| 20:28.11 | mutante | coin21: well you already know how to fix it and have physical access then there is not much to worry |
| 20:28.17 | *** join/#debian KeRT (~UnFaQ@unaffiliated/trek) |
| 20:28.29 | coin21 | that is the beauty of linux you can always just use either live usb or |
| 20:29.02 | *** mode/#debian [+l 1195] by debhelper |
| 20:29.55 | *** join/#debian earthundead (~earthunde@188.170.80.188) |
| 20:30.40 | *** join/#debian Paraquat (~333@unaffiliated/prints) |
| 20:32.01 | *** join/#debian leorat (~leorat@unaffiliated/leorat) |
| 20:35.10 | *** join/#debian jess (jess@freenode/staff/jess) |
| 20:36.15 | *** join/#debian DirkS (~DirkS@b2b-130-180-51-242.unitymedia.biz) |
| 20:40.29 | *** join/#debian loptr (~loptr@lfbn-str-1-494-46.w90-126.abo.wanadoo.fr) |
| 20:42.55 | *** join/#debian n4dir (~n4dir@mue-88-130-57-228.dsl.tropolys.de) |
| 20:45.50 | *** join/#debian mowest (~mowest@2603:3015:2800:ac00::1995) |
| 20:47.45 | *** join/#debian fnaticrisk (~fnaticris@2804:d59:7f3a:a900:c317:cf41:8d9a:11b3) |
| 20:53.13 | *** join/#debian cosimone (~cosimone@93-47-228-249.ip115.fastwebnet.it) |
| 21:06.10 | *** join/#debian aeWessan (~aeWessan@2a01:4b00:9609:2300:9017:c62f:cd93:4ebc) |
| 21:08.12 | *** join/#debian Texou (~Texou@unaffiliated/texou) |
| 21:09.13 | *** join/#debian diniwed (~gavron@ool-44c21938.dyn.optonline.net) |
| 21:17.12 | zln_ | DDDD: what'z up yao |
| 21:17.17 | *** join/#debian arahael (~arahael@194-193-194-178.tpgi.com.au) |
| 21:17.26 | *** join/#debian ikus060 (~ikus060@173-246-15-25.qc.cable.ebox.net) |
| 21:18.19 | *** join/#debian monksam (~monksam@gateway/tor-sasl/monksam) |
| 21:18.35 | *** join/#debian jjakob (~quassel@2a01:260:8028:10f0:f00::9276) |
| 21:22.13 | *** join/#debian Tobbi (~Tobbi@supertux/tobbi) |
| 21:24.31 | *** join/#debian Budd (~eric@2001:470:8d44:3:d1a7:cd0e:b51d:5f9f) |
| 21:26.44 | Budd | Is there a way to install packages on a Debian system disk when it's plugged into another system (of a different architecture)? |
| 21:27.49 | wsky | iso images |
| 21:27.50 | greycat | in theory you could extract the files and drop them in place, but you can't run the postinst scripts and stuff |
| 21:27.52 | *** join/#debian foamyth (~foamy@2600:1700:8dd0:7990::67f) |
| 21:27.53 | Budd | It seems the copying-file part should be easy enough, but I expect any install scripts would have a hard time of it. |
| 21:28.24 | Budd | ok. Probably not worth pursuing. |
| 21:28.30 | n4dir | why not boot a live iso with the same architecture? |
| 21:29.05 | Budd | Because I'm trying to write a script to create custom boot disks on the fly. |
| 21:29.12 | *** join/#debian ikus060 (~ikus060@173-246-15-25.qc.cable.ebox.net) |
| 21:29.55 | n4dir | and you asked about installing packages to confuse me? |
| 21:30.25 | Budd | Best I can do so far is to install packages on the native, running system, clone it, then have my script customize each copy. |
| 21:30.45 | Budd | Sorry - boot disk was wrong - I mean a whole bootable system. |
| 21:31.19 | n4dir | i meant to boot the live with the same architecture, do a chroot and install the packages. Or at least like that. |
| 21:31.38 | Brigo | what about the good old debootstrap? |
| 21:32.02 | Budd | Yes, I expect that would work, if the /dev directory works well enough in chroot. |
| 21:32.04 | n4dir | i think to finegrain it you would need to chroot too. Perhaps i recall wrong |
| 21:32.34 | Budd | All the config things I want to do are just files in /etc/ that I can script-change just fine. |
| 21:33.45 | Budd | Specifically, I'm trying to churn out network mesh nodes that will have hardcoded ULA addresses and no public internet access (so can't download packages). |
| 21:34.40 | *** join/#debian nyov (~nyov@unaffiliated/nyov) |
| 21:35.42 | gnat_x | Budd: can you put an apt mirror on the mesh network? |
| 21:35.56 | Brigo | this link, https://willhaley.com/blog/install-debian-usb/, explains how to make a bootable debian image that you can dd into a usb that will boot |
| 21:37.54 | *** join/#debian jjakob (~quassel@2a01:260:8028:10f0:f00::9276) |
| 21:37.55 | *** join/#debian aLLamox (~a@ashellz/owner/allamox) |
| 21:37.56 | gnat_x | Budd: so you're building mesh nodes running debian, and you want to have custom installers with each having the mesh stuff already set? |
| 21:38.07 | gnat_x | Budd: or is this about updating running systems? |
| 21:38.27 | aLLamox | Goodevening .... What was equivilant to service start ssh in Debian Version 4 (etch) ? |
| 21:38.42 | greycat | /etc/init.d/ssh* start |
| 21:39.48 | aLLamox | greycat: Thanks man :) as usuall amazing ;) |
| 21:39.53 | aLLamox | and helpful!! |
| 21:39.58 | Budd | gnat_x: good idea of an apt mirror; I should be able to do that. My main goal is the initial setup, but updates would be nice too. |
| 21:40.33 | hendursaga | aLLamox: Legacy software, eh? :) |
| 21:40.43 | greycat | ideally you should find out the name of the script; I just cannot remember whether it's ssh or sshd |
| 21:41.00 | greycat | tab completion works if it's interactive |
| 21:41.19 | gnat_x | iirc it was just ssh |
| 21:41.24 | aLLamox | hendursaga: Yes... Trying to do Linux lab |
| 21:41.27 | n4dir | its just ssh, just checked |
| 21:42.12 | *** join/#debian mtn_ (~mtn@unaffiliated/mtn) |
| 21:42.49 | *** join/#debian beelzebuzz (~rasputin@gateway/tor-sasl/beelzebuzz) |
| 21:44.06 | *** join/#debian yonder (~yonder@unaffiliated/yonder) |
| 21:45.05 | *** join/#debian sig_9 (~sig@dialup-208-98-133-190.fmtc.com) |
| 21:47.50 | gnat_x | Budd: also, have you looked into https://wiki.debian.org/Simple-CDD |
| 21:48.35 | gnat_x | Budd: i've never used it, and that documentation looks really old, but it also looks like it is still actively maintained. |
| 21:48.54 | gnat_x | and does basically all the things you want. |
| 21:49.46 | *** join/#debian Haudegen (~quassel@178.115.237.87.static.drei.at) |
| 21:49.49 | *** join/#debian MikZyth (~MikZyth@85.115.224.149) |
| 21:54.11 | *** join/#debian thiras (~thiras@unaffiliated/thiras) |
| 21:55.14 | *** join/#debian RhineDevil (~RhineDevi@gateway/tor-sasl/rhinedevil) |
| 21:57.10 | Budd | thanks! |
| 22:01.30 | *** join/#debian dvs (~hibbard@2607:f2c0:9519:1200:e6a7:a0ff:fe31:ddf0) |
| 22:02.14 | dob1 | what is the cause of these wrong data in sensors output ? https://paste.debian.net/hidden/a6b2a8f8/ |
| 22:02.19 | aLLamox | <PROTECTED> |
| 22:02.59 | *** join/#debian sway (~Milo@107-144-130-074.biz.spectrum.com) |
| 22:03.23 | aLLamox | ssh -oKexAlgorithms=+diffie-hellman-group1-sha1 -c 3des-cbc a@host .... this command solved the problem Thank you !!! |
| 22:03.31 | mrkramps | aLLamox, are these options available in this ancient ssh version? |
| 22:04.58 | mutante | aLLamox: "OpenSSL does not include 3DES by default since version 1.1.0 (August 2016) and considers it a "weak cipher"" |
| 22:05.33 | mutante | aLLamox: your fix is to use the old stuff.. the real fix is to make sure both sides use the NEW stuff |
| 22:07.12 | mutante | if it's an old DSL router like in the stackexchange.. the question is if that's even upgradable I guess... |
| 22:07.38 | *** join/#debian JakeSays_ (~jake@c-67-182-197-230.hsd1.ut.comcast.net) |
| 22:08.24 | aLLamox | mutante: please elaborate what do you mean. |
| 22:09.11 | *** join/#debian mirrorbird (~psutcliff@2a00:801:447:b1bf:a43d:1573:86a9:1f86) |
| 22:09.50 | *** join/#debian w-oertl (~wolfgang@cm56-194-159.liwest.at) |
| 22:10.45 | mutante | aLLamox: when you make a SSH connection.. the client and the server have to agree what type of encryption to use... what happens here is that the server is configured to use something really old that is really insecure. So old and insecure that your client does not even try it anymore.. so they can't agree and the connection fails. The fix you found is that you are telling your client "no, i really mean |
| 22:10.51 | mutante | it, i know what I'm doing, use the old shit". And that works.. but.. the much better fix would be to stop using that and update the config of the server and the server itself. |
| 22:11.27 | mutante | so the next question is what that ssh server ist,, if you can edit its config and update the version of it |
| 22:12.22 | *** join/#debian FsgMax (~FsgMax@200.252.11.70) |
| 22:14.04 | *** join/#debian twobitsprite (~isaac.fre@98.122.129.103) |
| 22:14.50 | aLLamox | mutante: but I want it to be unsecure, for labbing purpose |
| 22:15.12 | aLLamox | I wanted this machine to be vuln to dirty cow ... so me and my colleague students can try it |
| 22:15.33 | aLLamox | The only problem, that gcc is not recognized by etch and can't be installed |
| 22:15.37 | aLLamox | but I'm googeling it now |
| 22:15.44 | aLLamox | also thank you very much for your explanation. |
| 22:15.47 | aLLamox | apperciate it |
| 22:16.37 | mutante | aLLamox: you are setting up a honeypot and want it to on etch, well,ok. funny use case |
| 22:17.35 | aLLamox | mutante: wanna have a look on it ? |
| 22:17.40 | aLLamox | and give me ur feedback ? |
| 22:19.02 | *** mode/#debian [+l 1201] by debhelper |
| 22:19.24 | mutante | aLLamox: no, I don't have time for it, sorry |
| 22:20.07 | *** join/#debian zalt (~devp@unaffiliated/lambda443) |
| 22:21.25 | *** join/#debian FsgMax (~FsgMax@200.252.11.70) |
| 22:24.12 | aLLamox | mutante: No worries. Thank you anyway :) |
| 22:28.39 | *** join/#debian Steeve (~steve@unaffiliated/steeve) |
| 22:29.01 | *** join/#debian ikus060 (~ikus060@173-246-15-25.qc.cable.ebox.net) |
| 22:29.50 | *** join/#debian A2666 (~A2666@104.143.92.6) |
| 22:33.06 | *** join/#debian oxek (oxek@gateway/vpn/privateinternetaccess/oxek) |
| 22:35.23 | *** join/#debian kriger (~norge@unaffiliated/kriger) |
| 22:36.28 | *** join/#debian RhineDevil (~RhineDevi@gateway/tor-sasl/rhinedevil) |
| 22:37.07 | *** join/#debian Ard1t (~ard1t@unaffiliated/ard1t) |
| 22:45.16 | *** join/#debian no112_ (~no112@27.96.207.94) |
| 22:46.23 | *** join/#debian Vizva (~Vizva@gateway/tor-sasl/vizva) |
| 22:47.21 | sway | I'm getting errors when trying to rsync into Debian. Rsync has been installed/enabled but I am not sure if the firewall needs to be told. Is that the case ? |
| 22:47.48 | *** join/#debian Aavar (~aavar@cm-84.212.242.61.getinternet.no) |
| 22:48.27 | sway | I can ssh into Debian (port 22 obviously) just fine. |
| 22:48.37 | sney | sway: what errors? also rsync connects over ssh by default, is that what you're using or the dedicated rsyncd? |
| 22:51.21 | sway | sney, From the other node, I am simply using 'rsync -rap user@192... - I will pastebin the errors output. |
| 22:51.41 | *** join/#debian no112_2 (~no112@27.96.207.94) |
| 22:51.58 | *** join/#debian Zppix (uid182351@miraheze/Zppix) |
| 22:54.06 | *** join/#debian twobitsprite (~isaac.fre@98.122.129.103) |
| 22:56.53 | sway | sney, for some reason I have yet to figure out - it started. Gremlins maybe but more likely pebkac :) |
| 22:57.17 | sney | irc is an alright rubber duck, sometimes |
| 22:58.17 | sway | sney, yeah - ask for help and it suddenly works. Many thanks anyway. |
| 22:58.21 | sney | np |
| 22:58.38 | *** join/#debian H-var (~H-var@178.239.173.176) |
| 22:59.15 | mutante | sway: I think first it spends some time calculating checksums.. and then it starts transfers |
| 22:59.41 | sney | that wouldn't be "errors" though, just a wait |
| 22:59.46 | *** join/#debian Zblakany (~Zblakany@host-188-122-1-230.finemedia.pl) |
| 23:01.36 | sway | mutante, It error'd for sure but on 3rd attempt (of exactly the same command) - it started. I tried adding more verbosity to see what was going on but nothing obvious got written out. |
| 23:03.03 | sway | Question - if I install rsync, is rsync-server a dependancy that gets installed at the same time ? |
| 23:03.46 | sney | nope, but openssh-server/client are both suggests |
| 23:04.19 | sway | OK - thank you again. |
| 23:04.20 | *** part/#debian ogo (~ogo@gateway/tor-sasl/ogo) |
| 23:04.33 | sney | or, hang on, the package description for rsync says "This package provides both the rsync command line tool and optional daemon functionality." |
| 23:04.46 | sney | I guess they must be one binary, usually debian splits packages like that |
| 23:06.06 | sway | Do I read that as "dependancies are brought in" ? |
| 23:07.05 | sney | sway: see 'apt show rsync', there is only 1 rsync package. both client and server rsync components are in the 1 rsync package. |
| 23:07.37 | mutante | yes, it's one binary. a server looks like this: /usr/bin/rsync --daemon --no-detach |
| 23:08.00 | mutante | but that doesn't mean it automatically starts one |
| 23:08.29 | mutante | check if you have an /etc/rsyncd.conf |
| 23:09.01 | *** mode/#debian [+l 1193] by debhelper |
| 23:09.02 | sney | and unless you're using rsync:// in your URIs when running the client, it's transferring over ssh |
| 23:09.43 | sway | mutante, no - rsyncd.conf is not there. |
| 23:10.41 | mutante | yea, so no running server then |
| 23:11.23 | mutante | you can use rsync over SSH or over rsync::// itself directly. both is an option |
| 23:12.02 | *** join/#debian fachinformatiker (~fachinfor@fsf/member/fachinformatiker) |
| 23:12.24 | sway | Over ssh is fine. Its all local to a layer 2 lan. |
| 23:15.37 | *** join/#debian Ceber (~cerberus@94.31.84.245) |
| 23:17.07 | *** join/#debian Deyaa (uid190709@gateway/web/irccloud.com/x-hgfxknvwuzvnjmpr) |
| 23:18.12 | *** join/#debian m0u (~m0u@unaffiliated/m0u) |
| 23:22.46 | *** join/#debian darunesh (~darunesh@223.187.169.234) |
| 23:23.12 | *** join/#debian mohabaks_ (~mohabaks@gateway/tor-sasl/mohabaks) |
| 23:23.58 | *** join/#debian terrorjack (~terrorjac@static.23.111.201.195.clients.your-server.de) |
| 23:24.30 | *** join/#debian Tahvok_ (~Tahvok@unaffiliated/tahvok) |
| 23:29.01 | *** mode/#debian [+l 1185] by debhelper |
| 23:31.23 | *** join/#debian lnxslck (~lnxslck@121.17.60.94.rev.vodafone.pt) |
| 23:32.18 | *** join/#debian Psil0Cybin (~Psil0Cybi@unaffiliated/psil0cybin) |
| 23:32.40 | *** part/#debian Psil0Cybin (~Psil0Cybi@unaffiliated/psil0cybin) |
| 23:37.12 | *** join/#debian abarr (~aplsm@KD113148020047.ppp-bb.dion.ne.jp) |
| 23:39.11 | *** join/#debian goring1 (~goring@121-200-9-145.79c809.mel.nbn.aussiebb.net) |
| 23:41.03 | *** join/#debian fightthewalrus (~Queetom@KD113148020047.ppp-bb.dion.ne.jp) |
| 23:42.19 | *** join/#debian wondiws (~Jasper@94-215-229-69.cable.dynamic.v4.ziggo.nl) |
| 23:42.35 | wondiws | where do I put custom syntax highlighting files for GtkSourceView? |
| 23:43.32 | *** join/#debian quasineutral (~quasineut@unaffiliated/quasineutral) |
| 23:46.07 | *** join/#debian schweby (~quassel@lxqflm.schwe.by) |
| 23:47.17 | coin21 | friends of the powerful debian system, how can i install icedove, i did an aptitude search and it has many auxiliary packages for icedove but as it seams not icedove itself, i only have the 100% free repos enabled... maybe it's that? |
| 23:48.01 | coin21 | I did try to just install thunderbird ontop but it didn't work off of the icedove profiles and configs etc |
| 23:48.05 | *** join/#debian debsan_ (~debsan@unaffiliated/debsan) |
| 23:48.18 | sney | coin21: icedove was renamed back to thunderbird in 2016. |
| 23:48.38 | coin21 | i have rread that,it is called debranding or something? |
| 23:48.39 | sney | even if icedove was still installable, 4 years' lag would require some config migration |
| 23:49.06 | sney | debian had to rename the mozilla apps for a few years because of a licensing conflict. it was resolved, and now everything is back to mozilla's names. |
| 23:49.09 | coin21 | sney so basically the route would be to install thunderbird and then manually import the profiles if that is possible |
| 23:49.14 | sney | yep |
| 23:49.31 | coin21 | sney thank you for this valuable information |
| 23:49.36 | sney | np. |
| 23:51.21 | *** part/#debian coin21 (~user@93.177.73.90) |
| 23:52.20 | *** join/#debian chachasmooth (~chachasmo@unaffiliated/chachasmooth) |
| 23:55.12 | *** join/#debian Ceber (~cerberus@94.31.84.245) |
