| 00:00.13 | miguel_clean | and once I am in a "sackgasse" I will stroll thorugh the old directories... ..opening the file ... mirrored_car_22.blend |
| 00:01.00 | *** join/#debian tryte (~tryte@gateway/tor-sasl/tryte) |
| 00:01.02 | miguel_clean | hop: "behind" relatively to my experience with non-binary data |
| 00:01.12 | hop | yeah, no such thing |
| 00:02.01 | miguel_clean | beacuse it is impossible? or beacuse nooone cares? |
| 00:02.45 | hop | it is not impossible, just highly, highly impractical |
| 00:05.13 | freem | maybe space/bandwidth efficiency is not one of miguel_clean's requirements though? |
| 00:05.32 | hop | we got mixed signals on that⦠|
| 00:06.51 | *** join/#debian incal (~user@92.34.132.253) |
| 00:07.08 | incal | hello, I just installed iamerican-insane on Debian, does that thereafter work in Emacs? (ispell-change-dictionary "american-insane") says "ispell-change-dictionary: Undefined dictionary: american-insane" but "american" works |
| 00:07.59 | freem | projects I know which include binary assets use git, even if it's not practical. It sucks for bandwidth/storage use, especially since assets repo is usually a submodule (but this could be improved with different organisation), but it do provides most of the usual features of git: branch, tags, etc. |
| 00:08.15 | *** join/#debian DDDD (~DDDD@h-190-15.A400.priv.bahnhof.se) |
| 00:08.35 | DDDD | I'm starting to think that ufw is actually the culpit here |
| 00:08.53 | freem | of course, can't do a good diff, stats are uselessand so on... but that's probably the less bad thing around. |
| 00:09.17 | hop | branching is useless without merging |
| 00:09.42 | miguel_clean | freem: hop: probably I could use git for ALL my stuff, given there is an option to selectively prune histories of file (1. not sure if such option exists, 2. not sure if this approach is not super-ineefficient.. should look it up).. \ |
| 00:10.05 | miguel_clean | hop: in practice most merges are fast forward |
| 00:10.09 | freem | I disagree, it allows to have stable branches and branches with the "next" versions |
| 00:10.33 | hop | sure. enjoy the cool-aid |
| 00:10.33 | freem | miguel_clean: yes, you can rewrite history to remove files in git |
| 00:11.01 | freem | use your favorite search engine for: password git remove :p |
| 00:11.50 | DDDD | Shutdown got stuck here and i had to press the reset button after 10 min. https://bpa.st/URO7E . it's also applying lots of rules to this device which i'm quite sure is the usb network device |
| 00:11.50 | freem | I didn't said it was perfect, hop, but it's still better than nothing |
| 00:12.06 | hop | wat? |
| 00:12.12 | freem | lol. "Shutdown got stuck". I love that. |
| 00:12.21 | hop | equating borg et al. to "nothing" is quiteâ¦Â bold |
| 00:12.32 | freem | haha, right, right |
| 00:12.40 | DDDD | Well it did lol :P |
| 00:12.47 | DDDD | not my fault, well it probably is but :D |
| 00:12.48 | *** join/#debian polardroid (~polardroi@173-29-143-88.client.mchsi.com) |
| 00:13.12 | freem | DDDD: I'm just amazed by the idea a shutdown can freeze |
| 00:13.36 | hop | that train left around 1999 |
| 00:13.39 | DDDD | I'm gonna change UFW rules to only apply to main NIC and see if that helps |
| 00:13.53 | DDDD | freem, believe it or not it's happened to me a lot of times in the past. |
| 00:14.09 | DDDD | To be honest i'm to uneducated to use linux but i hate windows by principles |
| 00:14.11 | freem | I believe you, don't worry |
| 00:14.15 | DDDD | i won't touch a damn mac so here i am :P |
| 00:14.44 | freem | I have seen systemd slow default boot, when a simple ethernet cable is not plugged in, after all |
| 00:14.53 | miguel_clean | DDDD: now worries, I am just about to buy a shiny $$ mac to get time-machine |
| 00:15.13 | miguel_clean | to stupid to opreate git et al |
| 00:15.22 | freem | I also have read interesting document about how systemd's dependency mechanism can be... surprising. |
| 00:15.47 | freem | just for reference, this document: https://blog.darknedgy.net/technology/2020/05/02/0/ |
| 00:15.51 | DDDD | I just don't like apple by the sheer principle of it lol. Feels like you pay more then you have to just for the bling of it and they have lots of ideas what you're allowed to do with shit you bought yourself :P |
| 00:16.14 | DDDD | Tho they have some nice products. |
| 00:16.24 | miguel_clean | freem: tltr sorry |
| 00:16.33 | freem | yeah, I guess so |
| 00:16.38 | miguel_clean | but yes,... systemd sucks |
| 00:16.39 | tehnull | suddenly my system time is 21 minutes fast and I can't figure out why it changed unfortunately I'm too much of a noob to sort this ouit |
| 00:16.41 | tehnull | any ideas? |
| 00:16.43 | freem | took me quite the time to read it |
| 00:16.59 | freem | <miguel_clean> but yes,... systemd sucks <== those who really think that don't use systemd |
| 00:17.27 | miguel_clean | freem: do you? |
| 00:17.36 | freem | my debian runs with runit. |
| 00:18.00 | freem | all my systems do (but I don't have much systems those days) |
| 00:18.15 | freem | tehnull: use ntpdate-debian, in package "ntpdate" |
| 00:18.18 | miguel_clean | I am unfortunatelly bound to systemd on the systems run in my company.... but ,,, my debian runs it too |
| 00:18.25 | miguel_clean | to lazy to change defautls |
| 00:18.31 | *** join/#debian Kruppt (~Kruppt@50.111.15.220) |
| 00:18.33 | freem | or install "ntp", which will keep your system date synced |
| 00:19.13 | freem | so you probably hate it as much as I hated windows, when I only knew windows and was too lazy to try something else |
| 00:19.37 | DDDD | Damn network manager mounts the damn nic, i'll try the suggestion about /etc/network/interfaces from earlier |
| 00:19.41 | freem | systemd have problems, but it also have quite the good points. |
| 00:20.26 | hop | .oO(every generation needs its vi-vs-emacs) |
| 00:20.34 | freem | :) |
| 00:20.40 | tehnull | System clock synchronized: no |
| 00:20.40 | tehnull | <PROTECTED> |
| 00:20.43 | miguel_clean | freem: for my "real" work I do not have complete freedom to choose and set up each server form scratch, so I use THIS as an excuse here :P |
| 00:21.00 | freem | yeah, this one is a good excuse, ofc |
| 00:21.11 | tehnull | I don't understand why this happened it was fine yesterday and today it's gone mad and nothing should have changed between then and now |
| 00:21.31 | miguel_clean | freem: do you use a simpler alternative in "prod" somewhere? |
| 00:22.02 | miguel_clean | prod beeing = your grandma's cookie-shope |
| 00:22.57 | tehnull | freem ntp is installed and running for over a year |
| 00:22.59 | freem | miguel_clean: on the systems I had under my responsibility (IoT stuff, our softs were buggy as hell, needed a real, stable watchdog, simple enough to maintain, amd64&armhf, more than 200 systems, not physically reachable) I used runit. Same for the servers I had, same everywhere, actually. |
| 00:23.08 | tehnull | in that case this should not have happened correct? |
| 00:23.45 | freem | tehnull: then sorry, I don't know. Maybe you can find something in logs. I believe those days you need journalctl to check them |
| 00:23.49 | *** join/#debian DDDD (~DDDD@h-190-15.A400.priv.bahnhof.se) |
| 00:24.07 | freem | maybe the servers your system synced with reject connections, for example |
| 00:24.33 | tehnull | I just don't understand how it could go off that far in a matter of hours |
| 00:25.05 | *** join/#debian areisp (~ars@unaffiliated/areisp) |
| 00:25.10 | freem | maybe the reference servers got some problem? |
| 00:25.14 | miguel_clean | freem: makes me curious enough to have a look on runit (for my self-hosted stufff = to be hones.. 10 virtual boxes on ONE single physical machine, but anwyay.. might simplify things there) |
| 00:25.18 | *** join/#debian treeview (~treeview@cpe-24-163-39-192.nc.res.rr.com) |
| 00:25.56 | DDDD | WOOOOOOHOOOO adding that line to /etc/network/interfaces and editing UFW did the trick. |
| 00:26.00 | *** join/#debian Tobbi (~Tobbi@supertux/tobbi) |
| 00:26.11 | DDDD | Can't remember who suggested that but that person is a genius. |
| 00:26.37 | *** join/#debian polardroid (~polardroi@45.86.200.4) |
| 00:26.52 | freem | miguel_clean: if that can help, I have some runit files here: http://www.deadbeef.fr/projects/autoinst/files.html (use the ones in "templates/generic/root/etc/sv/*/" other ones are outdated, I need to improves things a lot in that repo) |
| 00:26.57 | miguel_clean | top: freem: and all I have forgot: thankx for giving me input to my initial question and far beyond.. no risk to get bored :) |
| 00:27.15 | tehnull | oh wow |
| 00:27.38 | *** join/#debian mo1991 (~mo1991@96-244.207-68.tampabay.res.rr.com) |
| 00:27.42 | *** join/#debian dvs (~hibbard@cwv.teksavvy.com) |
| 00:27.46 | mo1991 | Hello all. |
| 00:27.48 | miguel_clean | freem: love your domain :) |
| 00:27.54 | freem | :) |
| 00:28.03 | miguel_clean | hex at its best |
| 00:28.36 | *** join/#debian spikeheron (~DutchIngr@unaffiliated/dutchingraham) |
| 00:29.22 | mo1991 | I am curious peoples thoughts on tlp, laptop-mode-tools, and so forth to increase battery life on a very modern laptop. Is this still something that is recommended? I am not noticing a big difference in either. Running debian bullseye on a i7,40gb ram, 2 seperate nvme hdd laptop |
| 00:30.59 | *** join/#debian Souler (~Souler@user-5-173-234-130.play-internet.pl) |
| 00:31.01 | hop | .oO(get a mac) |
| 00:31.55 | *** join/#debian routebee (~routebee@124-169-80-214.tpgi.com.au) |
| 00:32.13 | polardroid | mo1991 - did you encounter any issues installing to nvme ? |
| 00:33.11 | *** join/#debian routebee__ (~routebee@27-32-190-60.static.tpgi.com.au) |
| 00:34.42 | mo1991 | polardroid. No issues installing. |
| 00:35.04 | mo1991 | hop, do you really own a mac :( |
| 00:36.36 | hop | sure. several. |
| 00:36.51 | *** join/#debian Souler (~Souler@user-5-173-234-130.play-internet.pl) |
| 00:37.09 | dvs | !lart hop |
| 00:37.09 | dpkg | puts on a hockey mask and jumps out at hop |
| 00:37.23 | hop | i've also taken money from apple⦠|
| 00:37.24 | mo1991 | hop - I"m just joking with you. I just can't afford to pay double for a mac when I can't stand mac os and their hardware, although awesome, is not worth 2x$$ |
| 00:37.58 | polardroid | and the apple mothershippyness ; ) |
| 00:38.13 | hop | yet you want their battery efficiency |
| 00:39.33 | mo1991 | hop - My new lappy is getting pretty good battery on debian, but not as good as winblows. Does mac hardware really get better battery life running linux or just macblos? |
| 00:40.01 | hop | linux is not the culprit |
| 00:40.32 | hop | get rid of gnome/kde, firefox, systemdâ¦Â your battery life will be great |
| 00:41.40 | freem | well, since systemd can do socket activation, it might actually help with battery life |
| 00:41.54 | hop | sure. |
| 00:42.24 | mo1991 | hop - suggestions? I have been running debian since woody, but never really on laptops. Typically my desktop is xfce, although lately I have been testing cinnamon. Never could stand gnome3 |
| 00:42.43 | mo1991 | or kde |
| 00:42.54 | mo1991 | meaning I do not like kde |
| 00:42.54 | *** join/#debian tehnull (~tehnull@unaffiliated/tehnull) |
| 00:43.49 | *** join/#debian derpadmin (~derpadmin@217.138.213.236) |
| 00:44.17 | hop | sounds like it's about as good as it will get for you |
| 00:49.06 | *** join/#debian CaCO3 (~CaCO3@pool-96-245-67-114.phlapa.fios.verizon.net) |
| 00:49.44 | *** join/#debian developer24 (~webdev007@69.168.165.172) |
| 00:51.32 | *** join/#debian shabius (~shabius@2a0e:1c80:2:1023::1001) |
| 00:52.07 | mo1991 | well, I guess back to my original question. Is anyone using TLP or laptop-mode-tools and seeing a noticeable difference in power savings on a modern laptop? |
| 00:52.14 | *** join/#debian ericnoan (~en@unaffiliated/ericnoan) |
| 00:53.35 | *** join/#debian AliasNumber10 (~crix@cpe-76-167-192-248.san.res.rr.com) |
| 00:55.39 | *** join/#debian Carno (~carno@unaffiliated/carnophage) |
| 00:57.26 | *** join/#debian soulz (~soulz@unaffiliated/soulz) |
| 00:57.51 | tehnull | https://i.imgur.com/zOUH4X3.png |
| 00:58.01 | *** mode/#debian [+l 1169] by debhelper |
| 00:58.08 | tehnull | I don't get it |
| 00:58.16 | *** join/#debian diniwed (~gavron@194.99.104.161) |
| 00:58.17 | *** join/#debian ax562 (~ax562@unaffiliated/ax562) |
| 00:58.34 | *** join/#debian tryte (~tryte@gateway/tor-sasl/tryte) |
| 00:58.38 | *** join/#debian echelon (~echelon@bzflag/player/echelon) |
| 00:59.25 | *** join/#debian _aeris_ (~aeris@april/board/aeris) |
| 00:59.36 | *** join/#debian ghost43 (~daer@gateway/tor-sasl/daer) |
| 00:59.38 | *** join/#debian polardroid (~polardroi@45.91.22.45) |
| 01:00.16 | *** join/#debian CombatVet (~c4@gateway/tor-sasl/combatvet) |
| 01:01.26 | *** join/#debian Scotty_Trees (~Scotty_Tr@162-234-179-169.lightspeed.brhmal.sbcglobal.net) |
| 01:03.13 | *** join/#debian con_ (~con_@gateway/tor-sasl/con/x-20716450) |
| 01:03.26 | *** join/#debian lavendereyes (~lavendere@gateway/tor-sasl/lavendereyes) |
| 01:03.28 | *** join/#debian asymptotically (~asymptoti@gateway/tor-sasl/asymptotically) |
| 01:06.06 | tehnull | test |
| 01:06.17 | dvs | !test |
| 01:06.18 | dpkg | Test failed. |
| 01:06.47 | *** join/#debian u0m3 (~u0m3@gateway/tor-sasl/u0m3) |
| 01:06.57 | tehnull | I don't understand any of this why did the date change to begin with |
| 01:07.02 | *** join/#debian j7k6 (~j7k6@gateway/tor-sasl/j7k6) |
| 01:07.04 | *** join/#debian nobyk (~nobyk@gateway/tor-sasl/nobyk) |
| 01:07.08 | *** join/#debian beelzebuzz (~rasputin@gateway/tor-sasl/beelzebuzz) |
| 01:07.10 | *** join/#debian psilonux (~psilonux@gateway/tor-sasl/psilonux) |
| 01:07.16 | *** join/#debian Ekis (~Ekis@cpe74da881c916d-cm30b7d4bb2eb0.cpe.net.cable.rogers.com) |
| 01:07.37 | tehnull | how do I just resync the clock from the terminal? |
| 01:07.54 | *** join/#debian c10l (~c10l@2a01:4b00:9d42:9650::1e0) |
| 01:08.01 | *** mode/#debian [+l 1182] by debhelper |
| 01:08.32 | *** join/#debian yanmaani (~yanmaani@gateway/tor-sasl/yanmaani) |
| 01:08.38 | miguel_clean | !help |
| 01:08.42 | *** join/#debian jesse (~jesse@gateway/tor-sasl/jesse) |
| 01:08.45 | abrotman | tehnull: ntpq |
| 01:08.50 | *** join/#debian bitblit (~bitblit@gateway/tor-sasl/bitblit) |
| 01:09.22 | tehnull | $ sudo apt install ntpq |
| 01:09.22 | tehnull | Reading package lists... Done |
| 01:09.22 | tehnull | Building dependency tree |
| 01:09.22 | tehnull | Reading state information... Done |
| 01:09.22 | tehnull | E: Unable to locate package ntpq |
| 01:09.22 | *** kick/#debian [tehnull!~debhelper@unaffiliated/debhelper] by debhelper (flood) |
| 01:09.36 | miguel_clean | hmm does not work.. but I wrote "help" on priv to dpkg and find the example link... unappropriate :/ |
| 01:09.38 | *** join/#debian tehnull (~tehnull@unaffiliated/tehnull) |
| 01:10.02 | abrotman | tehnull: package is ntp |
| 01:10.03 | Brigo | tehnull, apt install ntp |
| 01:10.09 | tehnull | it's already installed |
| 01:10.59 | tehnull | wait wf |
| 01:11.13 | tehnull | ugh this is so confusing and I just woke up why do things have to be like this |
| 01:11.52 | Brigo | tehnull, they haven't. System should sync time automatically. Mine does. |
| 01:11.56 | *** join/#debian hendursaga (~weechat@gateway/tor-sasl/hendursaga) |
| 01:12.05 | *** join/#debian awal1 (~awal1@bras-base-mtrlpq0315w-grc-18-70-55-155-22.dsl.bell.ca) |
| 01:12.22 | tehnull | unfortunately I'm not using your system so that doesn't do me a whole lot of good Brigo |
| 01:12.45 | *** join/#debian Freneticks (~Frenetick@gateway/tor-sasl/freneticks) |
| 01:12.47 | *** join/#debian HeXiLeD (~grumpy@gateway/tor-sasl/hexiled) |
| 01:12.52 | *** join/#debian _aeris (~aeris@april/board/aeris) |
| 01:13.02 | Brigo | well, i am using debian ... |
| 01:13.15 | tehnull | yeah we are chatting in #debian |
| 01:13.29 | *** join/#debian Agent (~Agent@FlexWiki/director/agent) |
| 01:13.46 | abrotman | tehnull: what's wrong with your time/clock? Does your system dual boot? |
| 01:13.49 | *** join/#debian kfvn (~weechat@gateway/tor-sasl/kh4ydn) |
| 01:14.30 | tehnull | abrotman it does have 2 other OSes on other disks that haven't been booted in months |
| 01:14.37 | tehnull | but this is my current issue https://i.imgur.com/zOUH4X3.png |
| 01:14.53 | hop | "there is something wrong with my clock" - "what is wrong with your clock" - i'm in stitches |
| 01:14.56 | tehnull | my time synced fine since I installed buster when it came out |
| 01:15.42 | *** join/#debian Spr1ng (~Spr1ng@unaffiliated/spr1ng) |
| 01:15.43 | tehnull | and I didn't change anything yet it failed to sync and was set to december 26 of last year and 21 minutes slow when I woke up |
| 01:15.48 | tehnull | it was fine when I went to bed |
| 01:16.02 | abrotman | so your time is off by a minute? |
| 01:16.17 | abrotman | do you want your system clock set to Central? |
| 01:16.19 | tehnull | now it is after a reboot |
| 01:16.46 | tehnull | I don't care what anything is set too I'm not sure why the hell time is this complex of an issue |
| 01:17.01 | tehnull | but yes I am in central time zone |
| 01:17.10 | abrotman | doesn't see a problem, so I'm not sure what we're discussing |
| 01:17.34 | tehnull | why the hardware clock is correct but the software clock isn't |
| 01:17.49 | tehnull | rtc time and date are correct OS date was over a month in the past |
| 01:18.01 | *** mode/#debian [+l 1189] by debhelper |
| 01:18.14 | tehnull | wait |
| 01:18.18 | abrotman | but it's all fixed now? |
| 01:18.41 | tehnull | no |
| 01:19.26 | tehnull | https://i.imgur.com/Ed4BTru.png |
| 01:19.55 | abrotman | so your clock is off by 15 minutes? |
| 01:20.35 | tehnull | well it's not going at all wth |
| 01:21.42 | tehnull | https://i.imgur.com/pN72Kt3.png |
| 01:22.05 | hop | what's with the screenshots? |
| 01:22.14 | abrotman | so the clock just won't advance? |
| 01:22.24 | abrotman | check your time in the terminal |
| 01:22.51 | hop | i don't see a problem |
| 01:23.03 | n4dir | it is hard to help if after 20 minutes it is still not clear what the problem is |
| 01:23.29 | tehnull | yes I'm still unclear what the problem is I seem to be having random time issues |
| 01:24.01 | hop | assuming you are 5 hours off, i don't see any problem at all |
| 01:24.58 | *** join/#debian kakaka (~koniu@gateway/tor-sasl/koniu) |
| 01:25.46 | tehnull | I woke up and was getting ssl errors and deduced it was my system time after noticing my time was set 26 days and 21 hrs too slow |
| 01:26.09 | hop | so set your time, be done with it? |
| 01:26.11 | tehnull | in spite of the rtc time being set to gmt and correct |
| 01:26.34 | hop | the hardware clock is mostly only relevant at boot tie |
| 01:26.35 | hop | time |
| 01:26.44 | tehnull | right but uhh usually when your system time changes itself it's a good idea to look into it and discover the cause right? |
| 01:27.27 | hop | well, can you repeat the problem? |
| 01:28.42 | tehnull | I don't know how to state it any simpler than my time was wrong and I want to know why it was wrong |
| 01:28.58 | tehnull | I have a brain injury so the issue is almost certainly me not communicating effectively |
| 01:29.04 | hop | i understand, but there may be no answer |
| 01:29.20 | tehnull | that doesn't seem great |
| 01:29.28 | tehnull | in the context of security |
| 01:29.38 | hop | life, box of chocolates, all that stuff |
| 01:29.41 | *** join/#debian Souler (~Souler@user-5-173-234-130.play-internet.pl) |
| 01:30.08 | tehnull | yeah why bother with security if ya got nothin to hide right |
| 01:30.08 | mutante | tehnull: maybe the battery on the mainboard is low? |
| 01:30.11 | hop | there's probably a problem, but until you can reproduce it at will, there's not much we can do |
| 01:30.19 | mutante | and then NTP fixes it agai n? |
| 01:30.40 | tehnull | no ntp was synced to a wrong date and time |
| 01:30.45 | tehnull | and RTC was correct |
| 01:31.03 | hop | again, the rtc is irrelevant |
| 01:31.23 | hop | haven't cared about a harware clock since the last millenium |
| 01:31.45 | *** join/#debian moldorcoder7 (~moldorcod@206.166.251.59) |
| 01:31.48 | tehnull | hop how does your system maintain time |
| 01:31.54 | hop | ntp |
| 01:32.07 | tehnull | does it not use an offset applied to the rtc that is updated via ntp? |
| 01:32.22 | hop | wat? |
| 01:32.25 | mutante | if it was just a few minutes that would be pretty normal just 26 days is a little much, heh |
| 01:32.30 | tehnull | I guess I just assumed that's how it worked |
| 01:32.39 | hop | it doesn't |
| 01:32.55 | tehnull | I mean how do you determine system time between ntp server queries then? |
| 01:33.03 | hop | ??? |
| 01:33.04 | mutante | is it possible it was changed by accidental mouse click on the clock or something |
| 01:33.10 | mutante | maybe without realizing |
| 01:33.35 | tehnull | definitely not |
| 01:33.42 | *** join/#debian filohuhum (~filohuhum@gateway/tor-sasl/filohuhum) |
| 01:33.53 | hop | set the damn time, come back when it happens again |
| 01:33.58 | tehnull | I went to bed and ssl connections were working |
| 01:34.03 | mutante | or switch the NTP servers you have configured? |
| 01:34.12 | tehnull | wake up and ssl broken due to incorrect time |
| 01:34.43 | tehnull | do you understand my concern now? |
| 01:34.50 | mutante | well. maybe it's an obscure Y21K bug :) |
| 01:34.51 | hop | no |
| 01:35.13 | mutante | wish it was 21 days not 26. if it started at midnight, heh |
| 01:37.55 | tehnull | I wish I weren't dumb |
| 01:38.08 | hop | nobody implied that |
| 01:38.18 | tehnull | no need to lol |
| 01:38.19 | tehnull | I am |
| 01:38.50 | tehnull | it's no worries I've had an interesting life so there's that but when things like this arise it tends to be stressful |
| 01:39.26 | hop | relax. software is people all the way down |
| 01:40.07 | tehnull | it's just sad because I remember how I was before my head injury |
| 01:41.05 | *** join/#debian rootkea (~rootkea@unaffiliated/rootkea) |
| 01:41.17 | hop | nothing happened. you are safe to presume that some random accident caused your system time to be off. until it happens again, just take it as that |
| 01:42.22 | tehnull | well I engage in a lot of human rights activism of the kind that would attract both state and corporate attention |
| 01:42.41 | tehnull | which is why I'm so on edge about it |
| 01:43.41 | *** join/#debian rwp (~invalid@havoc.proulx.com) |
| 01:43.59 | tehnull | and this system has been otherwise absurdly stable since the day I built it |
| 01:44.16 | tehnull | it gets rebooted when the kernel is uncomfortably out of date |
| 01:47.17 | *** join/#debian gordonfish (~gordonfis@unaffiliated/gordonfish) |
| 01:47.46 | *** join/#debian filohuhum (~filohuhum@gateway/tor-sasl/filohuhum) |
| 01:49.10 | *** join/#debian killforge (~erp@2001:8004:1d80:321a:91dd:b3ac:8f66:3142) |
| 01:49.50 | *** join/#debian eclair (~eclair@2409:8a0c:d42c:bdb0:c094:487:9c3a:cb4c) |
| 01:52.45 | *** join/#debian catman370 (~catman@unaffiliated/catman370) |
| 01:54.05 | *** join/#debian gnufr33dom (~gnufr33do@ip24-253-15-85.lv.lv.cox.net) |
| 01:57.26 | *** join/#debian citypw (~citypw@gateway/tor-sasl/citypw) |
| 02:03.33 | *** join/#debian km0201 (~km0201@c-73-146-206-130.hsd1.in.comcast.net) |
| 02:07.16 | routebee | heya peeps |
| 02:07.26 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f1d6500821f02fffeaf6272.dip0.t-ipconnect.de) |
| 02:07.35 | routebee | what do you use in debian to make bootable usbs? |
| 02:07.36 | *** join/#debian sevu (~sevu@dynamic-077-011-096-112.77.11.pool.telefonica.de) |
| 02:08.03 | routebee | i cant find usb-creator or etcher in the repo's |
| 02:09.05 | tehnull | I would think dd should work no? |
| 02:09.11 | n4dir | i usually use "dd", but i think these days most just use cp (might well be that is even recommended) |
| 02:09.24 | sponix | routebee: if you like etcher it can be obtained from the etcher.io website |
| 02:11.23 | dvs | !etcher |
| 02:11.24 | dpkg | Etcher is not a reliable way to copy Debian images for installation. Instead, use cp or dd for linux or win32diskimager for Windows. https://www.debian.org/releases/buster/amd64/ch04s03.en.html |
| 02:12.21 | sponix | fair enough |
| 02:15.15 | *** join/#debian tsal (~tsal@i59F5F2C8.versanet.de) |
| 02:16.18 | *** join/#debian echelon (~echelon@bzflag/player/echelon) |
| 02:17.29 | routebee | dpkg, im not making a debian install USB im making a Pop!_OS install USB from debian |
| 02:17.29 | dpkg | You are person #1 to send an unparseable request, routebee |
| 02:17.44 | routebee | oh its a bot |
| 02:17.51 | routebee | i should have remembered that |
| 02:18.00 | dvs | dpkg, shut up |
| 02:18.00 | dpkg | No, I won't, and you can't make me. :P |
| 02:18.34 | routebee | so how do i dd this Pop!_OS ISO onto a USB then? |
| 02:19.18 | dvs | never heard of it |
| 02:19.37 | routebee | its the system76 os |
| 02:20.29 | routebee | ima have me a play with it |
| 02:20.48 | routebee | if i can just make a bootable ub |
| 02:21.29 | ectospasm | routebee: it's probably a hybrid ISO, so you can use dd or cp |
| 02:21.42 | *** join/#debian grim45932 (~grim4593@smtp.grimserve.com) |
| 02:21.47 | ectospasm | dd if=/path/to/Pop.ISO of=/dev/<usb device> |
| 02:21.49 | routebee | okay ill download etcher then |
| 02:22.00 | ectospasm | Or, cp Pop.ISO /dev/<usb device> |
| 02:22.07 | routebee | oh can |
| 02:22.10 | *** join/#debian _Matth_ (~Matth@ab105017.dynamic.ppp.asahi-net.or.jp) |
| 02:22.15 | routebee | i thought you said cant |
| 02:22.45 | ectospasm | I did not say can't/cannot. I said "*can*" |
| 02:23.04 | routebee | okay will try to dd the thing |
| 02:23.08 | *** join/#debian csgeek (~user@c-24-6-60-210.hsd1.ca.comcast.net) |
| 02:23.44 | ectospasm | you may need to be root or be in the disk group to write to your USB flash drive. |
| 02:34.16 | *** join/#debian Souler (~Souler@user-5-173-234-130.play-internet.pl) |
| 02:34.51 | *** join/#debian Betal (~Betal@unaffiliated/betal) |
| 02:34.59 | *** join/#debian steven (~steven@unaffiliated/steven) |
| 02:36.10 | *** join/#debian jennie (~Username@unaffiliated/jennie) |
| 02:36.12 | jennie | hello |
| 02:36.17 | jim | hi |
| 02:36.35 | jim | I'm trying to help someone with an install, |
| 02:37.00 | *** join/#debian de-facto_ (~de-facto@unaffiliated/de-facto) |
| 02:37.14 | jim | it's a laptop with iwlwifi driver, but it looks like firmware is failing to load |
| 02:37.28 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f1d6500821f02fffeaf6272.dip0.t-ipconnect.de) |
| 02:37.46 | jim | pciid is [8086:095a] of the wireless |
| 02:38.01 | *** mode/#debian [+l 1183] by debhelper |
| 02:38.26 | *** join/#debian slidesinger-ss (~jtatum@c-69-248-202-128.hsd1.nj.comcast.net) |
| 02:39.36 | jim | the laptop just has the base installed, and it was successful, booting the new install, and logging in as root succeeded |
| 02:40.11 | jim | problem is, I don't know what packages are needed |
| 02:40.27 | ectospasm | jim: did you install the non-free firmware package? You may need to enable the non-free apt repo |
| 02:40.51 | ectospasm | !nofree |
| 02:40.52 | jim | no net yet :) |
| 02:40.56 | ectospasm | !nonfree |
| 02:40.56 | dpkg | [non-free] a component which contains software that does not comply with the <DFSG>. To add non-free packages to your packages index, ask me about <non-free sources>. To see which non-free packages are installed ask me about <non-free list>. |
| 02:41.29 | jim | do people still use that apt-offline thing? |
| 02:41.46 | ectospasm | I do not, but I can't speak for many. |
| 02:43.14 | *** join/#debian mrjpaxton[m] (mrjpaxton-@gateway/shell/matrix.org/x-vyxgayqbafxptdqw) |
| 02:44.21 | *** join/#debian rnm (~rnm@unaffiliated/rnm) |
| 02:44.58 | slidesinger-ss | Question: Is there anyway to scale down lightdm? I have a very high res laptop monitor that required the font for grub to be increased to 48 point to appear normal sized. I am having the same issue with lightdm and so far have not been successful in finding anyway to scale either X or the display manager. Is there anyway to do this? Is it limited to font? |
| 02:45.00 | slidesinger-ss | I did manage to enlarge the font dpi, but the results, while mostly readable, are not consistent at boot. Changing the scale of lightdm reports that the scale is changed, but there are no visible results. |
| 02:45.38 | slidesinger-ss | I run openbox/tint2 on X with lightdm/light locker for years, never had this issue before. |
| 02:48.19 | mrjpaxton[m] | I'm not an expert on LightDM. I just use regular getty, but I have used it a few times in the past. You've checked and gone through this page fully, right? - https://wiki.debian.org/LightDM |
| 02:48.21 | *** join/#debian jotaxpe (jotaxpe@gateway/vpn/protonvpn/jotaxpe) |
| 02:51.12 | mrjpaxton[m] | If you are editing /etc/lightdm/lightdm.conf directly, just be aware that any updates to LightDM will cause dpkg to create config files next to it with new settings that won't take place until you copy them over. So I'd recommend overriding any font config settings in /etc/lightdm/lightdm.conf.d/ only. |
| 02:51.50 | *** join/#debian mi11k1 (~mi11k1@d216-121-129-97.home3.cgocable.net) |
| 02:54.18 | csgeek | a noob question. I'm building a building 2 debian packages. I have a control file with two binaries being created. I'm working on the rules file now, but how do the build tools determine which target to call for the different packages if it creates two artifacts? |
| 02:55.40 | routebee | i have a million cheap usbs that dont boot and a stupid hitech kingston usb that is so hi tech it wont boot |
| 02:55.45 | *** join/#debian sidmo_ (~ident@p5b3d8e59.dip0.t-ipconnect.de) |
| 02:56.15 | *** join/#debian fmaurer_ (~quassel@188.126.161.76) |
| 02:56.23 | routebee | i have 7 usbs and i have to go out and buy more of the damn things |
| 02:56.58 | *** join/#debian myst1crule (~myst1c@d-132-147-6-78.paw.cpe.atlanticbb.net) |
| 02:56.59 | ectospasm | I've been using a Memorex 1G USB flash drive for years, it has always been reliable for me. |
| 02:57.31 | routebee | all these usbs work they just refuse to boot |
| 02:57.47 | routebee | i had a scandisk that i could boot from but i have lost it |
| 02:58.12 | mrjpaxton[m] | Yeah, I don't think I've ever had a USB drive fail on me. I usually end up getting rid of them because I need higher capacity, than letting them wear out. I guess that's kind of wasteful, but.... Eh. |
| 02:58.27 | *** join/#debian Thete (~thete@unaffiliated/thete) |
| 02:58.45 | mrjpaxton[m] | I used to have a 256MB one. Lmao. |
| 02:58.56 | myst1crule | Are you trying to boot a live image? |
| 02:59.06 | ectospasm | I had a 32M one that was way too small for anything. |
| 02:59.21 | *** join/#debian diniwed (~gavron@92.118.13.191) |
| 02:59.24 | mrjpaxton[m] | Except Tinycore. XD |
| 02:59.26 | Thete | anyone gotten a radeon 6900XT working by chance? |
| 02:59.39 | routebee | the kingston usb is working |
| 03:00.04 | mrjpaxton[m] | I guess now I've learned the 32MB drives can be used to store encryption keys and text files... I guess. |
| 03:00.50 | mrjpaxton[m] | It wasn't until a few years ago I really started to care about figuring out the encryption stuff. |
| 03:01.01 | *** join/#debian kfvn (~weechat@gateway/tor-sasl/kh4ydn) |
| 03:01.40 | *** join/#debian thread700c (drew@gateway/vpn/protonvpn/thread700c) |
| 03:02.11 | *** join/#debian auk (auk@gateway/vpn/protonvpn/auk) |
| 03:02.16 | *** join/#debian genr8_ (~genr8_@unaffiliated/genbtc) |
| 03:02.35 | *** join/#debian Souler (~Souler@user-5-173-234-130.play-internet.pl) |
| 03:02.40 | *** join/#debian Typhon (~Typhon@dslb-088-067-134-051.088.067.pools.vodafone-ip.de) |
| 03:05.53 | *** join/#debian Souler_ (~Souler@user-5-173-234-130.play-internet.pl) |
| 03:13.08 | *** join/#debian muffindrake (~muffindra@unaffiliated/muffindrake) |
| 03:22.32 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f1d6500821f02fffeaf6272.dip0.t-ipconnect.de) |
| 03:24.41 | *** join/#debian Grldfrdom (uid391113@gateway/web/irccloud.com/x-siugmnvkxwonksqz) |
| 03:25.47 | *** join/#debian diniwed (~gavron@45.134.22.101) |
| 03:38.01 | *** mode/#debian [+l 1174] by debhelper |
| 03:44.40 | *** join/#debian secntech (~secntech@unaffiliated/secntech) |
| 03:45.10 | *** join/#debian rootkea (~rootkea@unaffiliated/rootkea) |
| 03:47.41 | *** join/#debian black_ant (~antilope@unaffiliated/black-ant/x-1505394) |
| 03:48.00 | *** join/#debian Emmanuel_Chanel (~Emmanuel_@ZN022195.ppp.dion.ne.jp) |
| 03:48.40 | *** join/#debian AndroUser (~NickServ@unaffiliated/ax56234) |
| 03:49.50 | *** join/#debian citypw_ (~citypw@gateway/tor-sasl/citypw) |
| 03:52.29 | *** join/#debian WARBIRD199 (~WARBIRD19@kc01.linuxrocker.com) |
| 03:53.15 | *** join/#debian ax56234 (~NickServ@unaffiliated/ax56234) |
| 03:57.46 | *** join/#debian moetunes (~Jean-luc@61-68-136-36.tpgi.com.au) |
| 03:58.08 | *** join/#debian ax56234 (~NickServ@unaffiliated/ax56234) |
| 03:58.57 | *** join/#debian jotaxpe (jotaxpe@gateway/vpn/protonvpn/jotaxpe) |
| 04:02.58 | *** join/#debian ax56234 (~NickServ@unaffiliated/ax56234) |
| 04:03.31 | jennie | how to install wifi driver on this minimal install debian? |
| 04:04.08 | jennie | https://i.imgur.com/yJXp1Wu.jpg |
| 04:04.10 | *** join/#debian Aavar_ (~aavar@cm-84.212.242.93.getinternet.no) |
| 04:06.42 | *** join/#debian ax56234 (~NickServ@unaffiliated/ax56234) |
| 04:09.56 | mrjpaxton[m] | Try `sudo apt-get install firmware-iwlwifi` |
| 04:11.02 | *** join/#debian chachasmooth (~chachasmo@unaffiliated/chachasmooth) |
| 04:15.18 | *** join/#debian ax56234 (~NickServ@unaffiliated/ax56234) |
| 04:16.38 | Souler | and after... |
| 04:16.40 | Souler | modprobe -r iwlwifi ; modprobe iwlwifi |
| 04:16.59 | mrjpaxton[m] | Yep, good idea. |
| 04:17.58 | Souler | i needed install iwlwifi some time ago on my computer so i know :) |
| 04:18.49 | *** join/#debian lavendereyes (~lavendere@gateway/tor-sasl/lavendereyes) |
| 04:19.22 | alexrelis[m] | Thete: You probably want to be using Testing or Sid to get that graphics card working. |
| 04:20.11 | *** join/#debian BrianG61UK (~BrianG61U@2a02:8010:66b7:dddd:91ff:9539:8762:6b76) |
| 04:20.13 | mrjpaxton[m] | Yeah, a lot of times too, you might need to turn HW crypto and/or power saving off for iwlwifi in order for it to work reliably. It's just a pain with some of the Intel Wi-Fi cards. :( |
| 04:20.26 | mrjpaxton[m] | At least in the past, they were. |
| 04:21.32 | *** join/#debian ax56234 (~NickServ@unaffiliated/ax56234) |
| 04:22.36 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f1d6500821f02fffeaf6272.dip0.t-ipconnect.de) |
| 04:24.19 | *** join/#debian Newami (~Newami@ip70-179-45-125.sd.sd.cox.net) |
| 04:24.47 | jennie | mrjpaxton[m]q 'unable to locate package firmware-iwlwifi; |
| 04:25.44 | jennie | 23:09:55] <mrjpaxton[m]> Try `sudo apt-get install firmware-iwlwifi |
| 04:26.30 | *** join/#debian ax56234 (~NickServ@unaffiliated/ax56234) |
| 04:30.51 | *** join/#debian shawnbon206 (~user@c-24-143-111-187.customer.broadstripe.net) |
| 04:31.41 | shawnbon206 | hello |
| 04:32.20 | *** join/#debian ax56234 (~NickServ@unaffiliated/ax56234) |
| 04:32.36 | *** join/#debian otmi (~androirc@5.149.156.77) |
| 04:33.02 | *** part/#debian mambang[m] (mambangmat@gateway/shell/matrix.org/x-oaifremckdubjkgq) |
| 04:33.44 | *** join/#debian ax56234 (~NickServ@unaffiliated/ax56234) |
| 04:36.26 | *** join/#debian ax56234 (~NickServ@unaffiliated/ax56234) |
| 04:38.50 | *** join/#debian ax56234 (~NickServ@unaffiliated/ax56234) |
| 04:38.51 | mrjpaxton[m] | jennie: Does the computer you're installing it from have any access to the Internet? |
| 04:39.03 | mrjpaxton[m] | In that case, it might be a little more complicated.... |
| 04:39.11 | *** join/#debian akp55 (~akp55@c-73-148-15-158.hsd1.va.comcast.net) |
| 04:39.31 | *** join/#debian edufmass (~edumass@unaffiliated/edufmass) |
| 04:40.52 | edufmass | hello! I just want to install only polybar from testing, I've added testing source but when I try "apt -t testing install polybar" or "apt install polybar/testing".. apt wants to update a lot of packages |
| 04:43.30 | *** join/#debian nyov (~nyov@unaffiliated/nyov) |
| 04:44.30 | mrjpaxton[m] | edufmass: Probably because you shouldn't be using testing with stable. You'll probably run into a bunch of issues. You'll either want to stick with stable, or go all in on Testing (in which case this channel does not support or help those using Testing. You'll need to use #debian-next on OFTC.) Maybe check to see if it's in debian-backports first. |
| 04:44.36 | mrjpaxton[m] | ,v polybar |
| 04:44.48 | mrjpaxton[m] | Hmm... I forgot how to do this.... |
| 04:45.24 | edufmass | ohh ok, there is one version in backport |
| 04:45.26 | mrjpaxton[m] | Anyway, yes. Please read this page first: https://wiki.debian.org/DontBreakDebian |
| 04:47.25 | *** join/#debian freebench__ (~freebench@92.253.250.225) |
| 04:51.13 | *** join/#debian Elzington (~Elzington@static-198-54-128-45.cust.tzulo.com) |
| 04:52.08 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f1d6500821f02fffeaf6272.dip0.t-ipconnect.de) |
| 04:52.38 | *** join/#debian Conradish006 (~Conradish@c-68-39-198-234.hsd1.in.comcast.net) |
| 04:58.03 | *** join/#debian milkt (~debian@gateway/tor-sasl/milkt) |
| 04:59.45 | *** join/#debian forky (~forky@h96-60-254-12.cncrtn.dsl.dynamic.tds.net) |
| 05:10.56 | edufmass | mrjpaxton[m], I'll stick with stable+backports :D |
| 05:13.15 | *** join/#debian pc-user_ (~pc-user@119-18-1-233.771201.syd.nbn.aussiebb.net) |
| 05:13.17 | *** join/#debian k-man (~jason@unaffiliated/k-man) |
| 05:13.42 | *** join/#debian pc-user (~pc-user@119-18-1-233.771201.syd.nbn.aussiebb.net) |
| 05:23.18 | *** join/#debian sig_9 (~sig@dialup-208-98-133-190.fmtc.com) |
| 05:25.32 | *** join/#debian tgunr (~davec@dsl-dhcp-conrtxxahre-72-26-9-109.consolidated.net) |
| 05:25.51 | *** join/#debian Sleepy63 (~Sleepy63@47.185.218.67) |
| 05:28.38 | *** join/#debian tgunr (~davec@dsl-dhcp-conrtxxahre-72-26-9-109.consolidated.net) |
| 05:28.48 | *** join/#debian Ericounet (~Eric@2a01:e0a:d0:3c20:7209:6ebc:6163:7846) |
| 05:31.43 | *** join/#debian tgunr (~davec@dsl-dhcp-conrtxxahre-72-26-9-109.consolidated.net) |
| 05:33.32 | *** join/#debian ax5623 (~NickServ@unaffiliated/ax56234) |
| 05:34.29 | *** join/#debian ax562 (~ax562@unaffiliated/ax562) |
| 05:34.56 | *** join/#debian tryte (~tryte@gateway/tor-sasl/tryte) |
| 05:35.46 | *** join/#debian tgunr (~davec@dsl-dhcp-conrtxxahre-72-26-9-109.consolidated.net) |
| 05:40.43 | *** join/#debian Ayo (~quassel@82.177.83.189) |
| 05:46.30 | *** join/#debian w-oertl (~wolfgang@cm56-194-159.liwest.at) |
| 05:51.58 | *** join/#debian diogenes_ (~diogenes_@188.208.122.208) |
| 06:04.08 | *** join/#debian Souler (~Souler@user-5-173-234-130.play-internet.pl) |
| 06:07.24 | *** join/#debian daysun (~sunday@gateway/tor-sasl/sunday) |
| 06:13.03 | *** join/#debian CxP (~CxP@mail.paulcosma.com) |
| 06:13.40 | serafeim | hello friends |
| 06:16.41 | *** join/#debian karlpinc (~user@karlpinc-net.karlpinc.com) |
| 06:18.50 | *** join/#debian s8548a (~s8548a@unaffiliated/s8548a) |
| 06:19.53 | *** join/#debian Hunterkll (~hunterkll@2001:470:8b06:400:215:5dff:fefb:c04) |
| 06:20.19 | *** join/#debian darutoko (~darutoko@37.21.236.228) |
| 06:23.23 | *** join/#debian Hunterkll (~hunterkll@2001:470:8b06:400:215:5dff:fefb:c04) |
| 06:23.54 | *** join/#debian pc-user_ (~pc-user@119-18-1-233.771201.syd.nbn.aussiebb.net) |
| 06:25.16 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f199100821f02fffeaf6272.dip0.t-ipconnect.de) |
| 06:25.44 | *** join/#debian Hunterkll (~hunterkll@2001:470:8b06:400:215:5dff:fefb:c04) |
| 06:29.19 | *** join/#debian S3xyL1nux (~glynn@118.36.216.230) |
| 06:30.37 | *** join/#debian endstille (~endstille@94.31.96.159) |
| 06:31.27 | *** join/#debian endstille (~endstille@94.31.96.159) |
| 06:31.59 | *** join/#debian sauvin (sauvin@about/linux/staff/sauvin) |
| 06:42.49 | *** join/#debian kakaka (~koniu@gateway/tor-sasl/koniu) |
| 06:45.11 | *** join/#debian tgunr (~davec@dsl-dhcp-conrtxxahre-72-26-9-109.consolidated.net) |
| 06:47.40 | *** join/#debian riff_IRC (~riff2@unaffiliated/riff2) |
| 06:48.08 | *** join/#debian Jerrynicki (~niklas@p200300f57704b400f705502423e2ea06.dip0.t-ipconnect.de) |
| 06:49.16 | *** join/#debian tgunr (~davec@dsl-dhcp-conrtxxahre-72-26-9-109.consolidated.net) |
| 06:54.45 | *** join/#debian cef (~cef@unaffiliated/cef) |
| 06:57.54 | *** join/#debian __marco (~marco@195.218.6.205) |
| 07:02.04 | *** join/#debian cef (~cef@unaffiliated/cef) |
| 07:04.15 | *** join/#debian kn0rki (~Kn0rki@dslb-094-221-223-191.094.221.pools.vodafone-ip.de) |
| 07:06.41 | *** join/#debian Jerrynicki (~niklas@p200300f57704b40062f833c6eddcbe55.dip0.t-ipconnect.de) |
| 07:09.24 | *** join/#debian Betal (~Betal@unaffiliated/betal) |
| 07:10.58 | *** join/#debian mirrorbird (~psutcliff@2a00:801:42b:aff3:74af:2f22:932d:eac0) |
| 07:15.36 | *** join/#debian mcole (~slkfmre@KD113148020047.ppp-bb.dion.ne.jp) |
| 07:19.47 | *** join/#debian rnm (~rnm@unaffiliated/rnm) |
| 07:22.08 | *** join/#debian zxwayland (~zx@static-198-54-134-172.cust.tzulo.com) |
| 07:27.17 | *** join/#debian yokel (~yokel@unaffiliated/contempt) |
| 07:27.38 | *** join/#debian fred1m (~quassel@2a01:e0a:8e:8b20:7f27:bb0d:81b2:ecb9) |
| 07:34.20 | *** join/#debian martinus__ (~martin@3.57.202.77.rev.sfr.net) |
| 07:34.27 | *** join/#debian luuuciano_ (~luuuciano@unaffiliated/luuuciano) |
| 07:36.22 | *** join/#debian szorfein (~daggoth@gateway/tor-sasl/szorfein) |
| 07:36.23 | *** join/#debian Deyaa (uid190709@gateway/web/irccloud.com/x-qpkuesbahhemvvmc) |
| 07:37.47 | *** join/#debian riff-IRC (~riff2@unaffiliated/riff2) |
| 07:38.13 | alexrelis[m] | serafeim: Hi bud :) |
| 07:38.53 | brigand | hi |
| 07:45.14 | *** join/#debian daft_dutch (~daft_dutc@j84022.upc-j.chello.nl) |
| 07:45.41 | *** join/#debian gnufr33dom (~gnufr33do@2600:8801:1a0a:2c00::aa) |
| 07:54.11 | *** join/#debian Mister00X (~quassel@2a02:2455:39e:600:665d:c84c:8734:3fa2) |
| 07:54.44 | *** join/#debian euandreh_ (~euandreh@2804:14c:33:8303:5155:19f2:93f9:a7f7) |
| 07:58.22 | *** join/#debian gholinbrown (gholinbrow@gateway/vpn/privateinternetaccess/gholinbrown) |
| 07:58.31 | gholinbrown | hello i would like to clarify again. |
| 07:58.58 | gholinbrown | does the debian OS verify the software packages it gets from http, without using the interent? |
| 07:59.52 | *** join/#debian Tobbi (~Tobbi@supertux/tobbi) |
| 08:00.20 | rudi_s | gholinbrown: I think neither `apt install path/to/deb` and `dpkg -i path/to/deb` perform any verification, so no. |
| 08:00.41 | gholinbrown | so in theory the files gotten could be replaced by a MITM |
| 08:00.51 | gholinbrown | ? |
| 08:01.41 | *** join/#debian FnorZ (~FnorZ@unaffiliated/fnorz) |
| 08:02.32 | hegemoOn | hello, how is it possible to investigate a repo at an url and see if it provides security-updates ? |
| 08:02.56 | rudi_s | gholinbrown: Well, MITM is mostly a term used for an attack over some network connection, but yes. If you download the .deb from the debian mirror without verification, put it on a usb-drive and plug it into a computer without network access and then install it, yes, a MITM on the original connection can give you false packages. |
| 08:04.39 | *** join/#debian ov3rmind (~over0-07@unaffiliated/ov3rmind) |
| 08:04.40 | *** join/#debian towo^work (~towo@unaffiliated/towo/x-4064351) |
| 08:05.03 | *** join/#debian TomyWork (~TomyLobo@p200300e80f23db0075d66089051e9bad.dip0.t-ipconnect.de) |
| 08:05.20 | *** join/#debian Paraquat (~Prints@unaffiliated/prints) |
| 08:06.53 | *** join/#debian TulaZula (TulaZula@gateway/vpn/privateinternetaccess/tulazula) |
| 08:08.14 | *** join/#debian mezzo (~mezzo@176-141-171-88.abo.bbox.fr) |
| 08:08.24 | *** join/#debian krkini (~kini@unaffiliated/kini) |
| 08:08.25 | *** join/#debian Jerrynicki (~niklas@p200300f57704b400b156101bdc5b6545.dip0.t-ipconnect.de) |
| 08:12.03 | *** join/#debian Prints (~Prints@unaffiliated/prints) |
| 08:12.04 | *** join/#debian nickname123 (~nickname1@adsl-84-227-66-181.adslplus.ch) |
| 08:13.37 | *** join/#debian daper (~daper@212.14.106.63) |
| 08:14.05 | Elzington | This post from 2014 gives some insight about the process of package verification. I am unsure if there is more up-to-date info. https://blog.packagecloud.io/eng/2014/10/28/howto-gpg-sign-verify-deb-packages-apt-repositories/ |
| 08:17.53 | *** join/#debian Paraquat (~Prints@unaffiliated/prints) |
| 08:18.12 | *** join/#debian fjavier (~fjavier@170.253.44.250) |
| 08:20.46 | *** join/#debian sirvolta (SirVolta@gateway/vpn/mullvad/sirvolta) |
| 08:21.20 | *** join/#debian chele (~chele@ip5b40237d.dynamic.kabel-deutschland.de) |
| 08:21.24 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f199100821f02fffeaf6272.dip0.t-ipconnect.de) |
| 08:25.10 | *** join/#debian cliluw (~cliluw@unaffiliated/cliluw) |
| 08:28.25 | *** join/#debian jrua (~jrua@198.pool80-102-24.dynamic.orange.es) |
| 08:29.00 | *** join/#debian Texou (~Texou@unaffiliated/texou) |
| 08:31.38 | *** join/#debian Haudegen (~quassel@178.115.237.87.static.drei.at) |
| 08:34.08 | *** join/#debian dreamon (~dreamon@unaffiliated/dreamon) |
| 08:35.48 | *** join/#debian Haohmaru (~Haohmaru@195.24.53.110) |
| 08:36.53 | *** join/#debian mirrorbird (~psutcliff@2a00:801:42b:aff3:74af:2f22:932d:eac0) |
| 08:38.01 | *** mode/#debian [+l 1181] by debhelper |
| 08:38.51 | *** join/#debian xinau1 (~Thunderbi@2a02:908:f81:43c::2d1) |
| 08:41.39 | *** part/#debian xinau1 (~Thunderbi@2a02:908:f81:43c::2d1) |
| 08:44.52 | *** join/#debian miguel_clean (~Miguel@89-72-187-203.dynamic.chello.pl) |
| 08:45.29 | *** join/#debian xet7 (~xet7@esm-84-240-92-80.netplaza.fi) |
| 08:48.03 | *** join/#debian szorfein (~daggoth@gateway/tor-sasl/szorfein) |
| 08:52.38 | *** join/#debian drzacek (~drzacek@b941c009.business.dg-w.de) |
| 08:53.32 | *** join/#debian Slashman (~Slash@cosium-fo-152-18.fib.nerim.net) |
| 08:54.15 | *** join/#debian oxek (oxek@gateway/vpn/privateinternetaccess/oxek) |
| 09:02.35 | *** join/#debian Kevlar_Noir (~manjaro-u@2a01:e0a:5d7:e1e0:ba8c:8528:22e4:6171) |
| 09:03.26 | *** join/#debian galex-713 (~quassel@portable.galex-713.eu) |
| 09:06.42 | *** join/#debian coot (~coot@37.30.55.132.nat.umts.dynamic.t-mobile.pl) |
| 09:07.04 | *** join/#debian hendursa1 (~weechat@gateway/tor-sasl/hendursaga) |
| 09:09.20 | Azrael_- | hi |
| 09:10.18 | Azrael_- | i'm running my NAS behind a NAT and want to share a huge file with a friend. what is the easiest way to allow him downloading this file without opening too many holes or making it too difficult? |
| 09:11.49 | *** join/#debian nt1036 (~nt1036@2603-8000-6f01-94b7-c5cc-03ab-6077-9ee1.res6.spectrum.com) |
| 09:12.13 | *** join/#debian darunesh (~darunesh@2401:4900:5190:297a:e492:ea26:c6c:e97d) |
| 09:13.05 | *** join/#debian Texou (~Texou@unaffiliated/texou) |
| 09:13.41 | ratrace | Azrael_-: what services you have already on that NAS? |
| 09:13.46 | *** join/#debian bolovanos__ (~bolovanos@unaffiliated/bolovanos) |
| 09:14.28 | Azrael_- | ssh, samba, apache |
| 09:14.51 | ratrace | Azrael_-: apache... well then poke a hole for http(s) and give him an URL |
| 09:15.04 | *** join/#debian jor (~jor@jor.link) |
| 09:15.05 | *** join/#debian rupicapra[m] (rupicapr2@gateway/shell/matrix.org/x-boxykovzzlblzypo) |
| 09:15.05 | *** join/#debian leibniz[m] (leibnizmat@gateway/shell/matrix.org/x-cioluylfycatagma) |
| 09:15.05 | *** join/#debian WillPittenger (willpitten@wikimedia-commons/Will-Pittenger) |
| 09:15.05 | *** join/#debian cdown (~cdown@163.114.131.1) |
| 09:15.05 | *** join/#debian hyiltiz-M (hyiltizkde@gateway/shell/kde/matrix/x-jljmxicmadzpzslm) |
| 09:15.05 | *** join/#debian beardface (~bearface@unaffiliated/bearface) |
| 09:15.05 | *** join/#debian mguy (~robert@149.28.120.183) |
| 09:15.05 | *** join/#debian klaas_ (~klaas@simply.kla.as) |
| 09:15.05 | *** join/#debian gerry666 (gerry666@gerry.pw) |
| 09:15.05 | *** join/#debian mquin (~mquin@freenode/staff/mquin) |
| 09:15.05 | *** join/#debian Ycarus (~Ycarus@2001:bc8:47b0:1b0b::1) |
| 09:15.05 | *** join/#debian burrows (burrows@2001:41d0:801:2000::723) |
| 09:15.05 | *** join/#debian mspe (mspe@gateway/shell/tilde.team/x-aloqdkrtuqcdbbpm) |
| 09:15.05 | *** join/#debian panzeroceania (sid16210@gateway/web/irccloud.com/x-ilbkybryvqxnkyxe) |
| 09:15.05 | *** join/#debian salem (~salem@kepler.whatbox.ca) |
| 09:15.05 | *** join/#debian iamgr00t (~iamgr00t@unaffiliated/iamgr00t) |
| 09:15.05 | *** join/#debian karstensrage (~karstensr@unaffiliated/karstensrage) |
| 09:15.05 | *** join/#debian relipse (sid16131@gateway/web/irccloud.com/x-yvfbwbsjrqquiosu) |
| 09:15.05 | *** join/#debian ssgelm (~ssgelm@2604:a880:800:a1::9a:2001) |
| 09:15.05 | *** join/#debian Merixer (~Merixer@2001:470:deb8:a1::2) |
| 09:15.05 | *** join/#debian mnencia (~mnencia@debian/developer/mnencia) |
| 09:15.05 | *** join/#debian Downer (downer@gateway/vpn/mullvad/downer) |
| 09:15.05 | *** join/#debian sjoerd (~sjoerd@metis.luon.net) |
| 09:15.05 | *** join/#debian Fusl (fusl@opennic/fusl) |
| 09:15.05 | *** join/#debian djakov (~djakov@linaro/djakov) |
| 09:15.05 | *** join/#debian djanos (~djanos@ulmus.cannelle.eu.org) |
| 09:15.05 | *** join/#debian hisacro (~OBSD@my.displ.nl) |
| 09:15.06 | *** join/#debian ramshadow (ramshadow@dotlan.net) |
| 09:15.06 | *** join/#debian TimWolla (~timwolla@2a01:4f8:150:6153:beef::6667) |
| 09:15.06 | *** join/#debian sa-ghosts (~sa-ghosts@unaffiliated/sa-ghosts) |
| 09:15.06 | *** join/#debian wMw (wMw@xtn.ro) |
| 09:15.06 | *** join/#debian blowry (~blowry@2001:19f0:5c01:1524:5400:2ff:fe3e:d51c) |
| 09:15.06 | *** join/#debian APLU (~mulx@2a03:7220:8081:2900::1) |
| 09:15.18 | *** join/#debian astronavt (~astronavt@unaffiliated/astronavt) |
| 09:15.36 | ratrace | samba over public internet (I assume?) is a HUGE no-no. ssh would require you to set up keys (as you should not be doing passwords for ssh on public internet)... http(s) is imho easiest |
| 09:16.00 | *** join/#debian deepy (deepy@wrongplanet/deepa) |
| 09:16.22 | Azrael_- | with ssh my problem would be: how to lock him in into a specific folder and not allow forwarding/access to other ressources like port forwarding and such things |
| 09:16.25 | *** join/#debian Merixer (~Merixer@2001:470:deb8:a1::2) |
| 09:16.52 | ratrace | Azrael_-: you can use chrooted sftp |
| 09:17.41 | ratrace | but that's not the easiest way if you have apache running already |
| 09:18.03 | *** join/#debian lichito (licho@unaffiliated/lichito) |
| 09:18.29 | *** join/#debian p0bailey (~p0bailey@unaffiliated/p0bailey) |
| 09:18.54 | Azrael_- | k, hope he'll manage to download all files properly as it is currently splitted into ~50 archives |
| 09:19.22 | Elzington | I've had success with creating a user and restricting to home with this: https://hedichaibi.com/create-a-user-and-restrict-him-to-his-home-directory-on-ubuntu-14-04/ |
| 09:19.52 | *** join/#debian diogenes_ (~diogenes_@212.0.201.185) |
| 09:21.29 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f199100821f02fffeaf6272.dip0.t-ipconnect.de) |
| 09:21.37 | *** join/#debian panzeroceania (sid16210@gateway/web/irccloud.com/x-ltsrkcsejrxzypqs) |
| 09:22.04 | ratrace | Azrael_-: you can allow directory listing for just one directory (with the files) and give them the URL for that directory |
| 09:22.14 | ratrace | and then it's up to them how and when they download it. |
| 09:23.27 | *** join/#debian bpsecret (~bpsecret@unaffiliated/bpsecret) |
| 09:25.38 | ratrace | Elzington: that's a rather flawed "tutorial" ... as "tutorials" usually are.... sudo chown root:root /home/john is terrible. implies world readable home dir for no reason. chown root:john is sane and fits the openssh requirements for chrooted sftp |
| 09:26.58 | *** join/#debian lesless (~lessless@obligatory.vehicle.volia.net) |
| 09:26.58 | *** join/#debian phunyguy (~blaahchm@ubuntu/member/phunyguy) |
| 09:27.27 | lesless | How to play all mp3 files in a folder? |
| 09:28.01 | *** mode/#debian [+l 1172] by debhelper |
| 09:28.13 | ratrace | lesless: with a media player of your choice like mpv, vlc, ... |
| 09:28.46 | Elzington | ratrace: Thanks for the info. I'll look more into that. Follow up question: is the reason they do the root:root /home/john to make the home directory for john not accessible, and only the public_html direcotry accessible? |
| 09:29.45 | ratrace | Elzington: no as that wouldn't work. to access /home/john/public_html, john would need access to ALL the parts of that path. /, /home/, /home/john/, /home/john/public_html/ |
| 09:30.16 | Elzington | ratrace: ah, I see. Thank you very much |
| 09:30.19 | ratrace | the reason the tutorial does root:root is because the author does not understand what they're doing, and are probably reading from another "tutorial" while writing this one..... |
| 09:31.05 | Elzington | ratrace: yet again... I'm foiled by the google search... really appreciate the info |
| 09:31.11 | ratrace | the OpenSSH requirements for Chroot directive are described in sshd_config(5). ALL the path elements must be _owned_ by root (doesn't state the group) and nobody but root may have _write_ permissions to them. |
| 09:31.49 | ratrace | thus making /home/john owned by root:john, you can have it chmod'ed 750, so john has access, can sftp, and nobody else can enter their home, nor their sftp connections can cd out of it. |
| 09:34.39 | *** join/#debian mitrokov (~mitrokov@176.59.23.94) |
| 09:35.45 | *** join/#debian NetTerminalGene (~Thunderbi@unaffiliated/dontknow) |
| 09:37.17 | Elzington | the root:john and chmod 750 bit makes sense to me, the part I need to brush up on is the "john needs access to all the parts of that path, /, home/, home/john/, home/john, public_html" What locks john into his home directory if he needs access to all elements in the path? |
| 09:37.40 | Azrael_- | ratrace: thx |
| 09:43.02 | Elzington | looking through info, I think I see. Thanks for the help, ratrace |
| 09:44.51 | *** join/#debian ccrr10 (~ccrr10@host-87-21-146-149.retail.telecomitalia.it) |
| 09:45.07 | *** join/#debian kspalaiologos (~palaiolog@176.221.122.174) |
| 09:45.21 | *** join/#debian qin (~qin@unaffiliated/soalokin) |
| 09:46.22 | *** join/#debian lesless (~lessless@obligatory.vehicle.volia.net) |
| 09:46.53 | *** join/#debian EdePopede (~EdePopede@HSI-KBW-46-223-100-63.hsi.kabel-badenwuerttemberg.de) |
| 09:47.20 | *** join/#debian Souler (~Souler@user-5-173-234-130.play-internet.pl) |
| 09:47.38 | *** join/#debian unluckyshrubbery (~unluckysh@unaffiliated/unluckyshrubbery) |
| 09:51.33 | *** join/#debian tmm88 (~tmm88@unaffiliated/tmm88) |
| 09:52.53 | *** join/#debian fatalerrors (~fatalerro@91.224.149.180) |
| 09:55.42 | *** join/#debian melpy (~melpy@gateway/tor-sasl/melpy) |
| 09:57.34 | *** part/#debian melpy (~melpy@gateway/tor-sasl/melpy) |
| 09:59.33 | *** join/#debian xand (~xand@pdpc/supporter/active/xand) |
| 10:02.24 | *** join/#debian lesless (~lessless@obligatory.vehicle.volia.net) |
| 10:02.32 | *** join/#debian zamnedix (~zamnedix@zamnedix.net) |
| 10:02.45 | *** join/#debian tagomago (~tagomago@static-152-175-235-87.ipcom.comunitel.net) |
| 10:03.04 | *** join/#debian kfvn (~weechat@gateway/tor-sasl/kh4ydn) |
| 10:05.13 | *** join/#debian Kaboon (kaboon@217-62-157-27.cable.dynamic.v4.ziggo.nl) |
| 10:07.22 | *** join/#debian JordiGH (jordi@octave/developer/JordiGH) |
| 10:08.01 | *** mode/#debian [+l 1179] by debhelper |
| 10:08.02 | *** join/#debian LucaTM (~LucaTM@unaffiliated/lucatm) |
| 10:08.09 | *** join/#debian nifker (~Thunderbi@200116b80adc85001c3371dce3e32d9f.dip.versatel-1u1.de) |
| 10:09.30 | *** join/#debian gpxlnx (gpxlnxmatr@gateway/shell/matrix.org/x-qgnysezqjvsmcfte) |
| 10:09.38 | *** join/#debian S3xyL1nux (~daryl@121.140.178.171) |
| 10:11.23 | hegemoOn | cd ../ |
| 10:14.33 | *** join/#debian Mister00X (~quassel@178-175-131-100.static.as43289.net) |
| 10:19.21 | *** join/#debian c10l (~c10l@89.36.66.207) |
| 10:20.54 | *** join/#debian lucad111 (~lucad111@linaro/lucad111) |
| 10:21.33 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f199100821f02fffeaf6272.dip0.t-ipconnect.de) |
| 10:25.16 | *** join/#debian blowry (~blowry@2001:19f0:5c01:1524:5400:2ff:fe3e:d51c) |
| 10:29.19 | *** join/#debian marcello1 (~marcello1@host-87-0-36-71.retail.telecomitalia.it) |
| 10:30.49 | *** join/#debian WillPittenger (willpitten@wikimedia-commons/Will-Pittenger) |
| 10:30.49 | *** join/#debian alexrelis[m] (alexrelism@gateway/shell/matrix.org/x-rvjoyqsoqphtmgvz) |
| 10:30.50 | *** join/#debian Celmor[m] (celmormatr@gateway/shell/matrix.org/x-eezfhwsltqgttwfk) |
| 10:30.50 | *** join/#debian blue_penquin (bluepenq1@gateway/shell/matrix.org/x-jacqqazocknzzsuo) |
| 10:30.50 | *** join/#debian diegov_ (diegovmatr@gateway/shell/matrix.org/x-pulbvizibsmkfpnt) |
| 10:30.50 | *** join/#debian dunc4n (dunc4nmatr@gateway/shell/matrix.org/x-aaoykoyaofpwwwfe) |
| 10:30.50 | *** join/#debian colemickens (colemicken@pdpc/supporter/professional/geomyidae) |
| 10:30.50 | *** join/#debian mrjpaxton[m] (mrjpaxton-@gateway/shell/matrix.org/x-tipuumztrcfzdcmj) |
| 10:30.50 | *** join/#debian leibniz[m] (leibnizmat@gateway/shell/matrix.org/x-hhtvrjucejgxlbcv) |
| 10:30.55 | *** join/#debian rupicapra[m] (rupicapr2@gateway/shell/matrix.org/x-oltdiqnmvmndgvzh) |
| 10:32.07 | *** join/#debian bertbob (~bertbob@67-2-25-246.slkc.qwest.net) |
| 10:32.49 | *** join/#debian Zauberfisch (~Zauberfis@unaffiliated/zauberfisch) |
| 10:39.44 | *** join/#debian Emmanuel_Chanel (~Emmanuel_@ZN022195.ppp.dion.ne.jp) |
| 10:41.45 | *** join/#debian Mister00X (~quassel@194.99.104.12) |
| 10:44.44 | *** join/#debian narutowaifu (5d20458b@93-32-69-139.ip32.fastwebnet.it) |
| 10:45.33 | *** join/#debian qin (~qin@unaffiliated/soalokin) |
| 10:46.20 | *** join/#debian alexandros_tab (~quassel@unaffiliated/alexandros-c/x-1684531) |
| 10:46.23 | *** join/#debian alexandros_c (~quassel@unaffiliated/alexandros-c/x-1684531) |
| 10:47.01 | *** join/#debian ooAoo (~username@unaffiliated/ooaoo) |
| 10:47.17 | *** join/#debian Mister00X_ (quassel@gateway/vpn/mullvad/mister00x) |
| 10:47.41 | *** join/#debian rotaticus (~rotaticus@unaffiliated/rotaticus) |
| 10:47.54 | narutowaifu | I have a question about hardware firmware. Does Debian or Linux install firmware for every hardware during initialization? IIUC firmware is not embedded in the hardware, but it must be loaded during boot time. So, does Debian load proprietary firmware?? |
| 10:48.01 | *** mode/#debian [+l 1191] by debhelper |
| 10:48.25 | azeem | narutowaifu: only if you use the nonfree installer images |
| 10:48.48 | ratrace | or if you install the appropriate firmware package, even after installation |
| 10:48.54 | narutowaifu | azeem how can the free image work then, if it doesn't load proprietary firmwares? |
| 10:49.22 | ratrace | narutowaifu: it doesn't, on hardware that _requires_ it, that's why the "firmware ISO" exists |
| 10:49.26 | *** join/#debian medard (~medard@unaffiliated/medard) |
| 10:50.48 | narutowaifu | ratrace does debian or linux have an open source for all the hardware? Or is there any firmware already embedded in the hardware? Let's say when I use my amd/nvidia GPU, does debian load an open source firmware to the card? |
| 10:51.06 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f199100821f02fffeaf6272.dip0.t-ipconnect.de) |
| 10:51.19 | azeem | narutowaifu: the don't work for hardware that requires firmware |
| 10:51.27 | ratrace | narutowaifu: some exists, not all. for nvidia in particular, the firmware is incomplete |
| 10:51.35 | azeem | some hardware doesn't, or can run (maybe degraded) with the factory-supplied firmware |
| 10:52.09 | narutowaifu | azeem "factory-supplied" you mean like.. the bios that is flashed in the card? |
| 10:52.41 | narutowaifu | (talking of GPUs) |
| 10:53.06 | azeem | I guess |
| 10:53.13 | azeem | whatever it came with when you bought it |
| 10:53.31 | narutowaifu | ok |
| 10:53.33 | narutowaifu | thank you |
| 10:53.54 | narutowaifu | I was uncertain how linux works wrt firmware |
| 10:54.15 | ratrace | narutowaifu: proprietary firmware is still available on linux |
| 10:54.31 | narutowaifu | I guess not many free firmware exists or are developed, only the drivers are, correct? |
| 10:55.02 | H4ndy | Firmware requires detailed knowledge of the used hardware, chips, etc. |
| 10:55.26 | *** join/#debian tgunr (~davec@dsl-dhcp-conrtxxahre-72-26-9-109.consolidated.net) |
| 10:55.42 | H4ndy | There's usually no good reason to try to re-implement a firmware blob for averal end-user hardware |
| 10:55.53 | narutowaifu | right, that's why I'd guess that only free drivers exist, but no free firmware for almost any hardware |
| 10:55.59 | ratrace | narutowaifu: depends. free (libre) firmware may be complete or incomplete, depending on how open the hw vendor is, whether there are patents etc... in general, firmware is a touchy subject and most stuff (at least I think) needs proprietary firmware |
| 10:56.06 | H4ndy | See how slow it goes for the Raspberry Pi, which is insanely popular, has all the docs and still nothing happens on the free firmware front |
| 10:57.05 | narutowaifu | thank guys for making this clear to me |
| 10:58.47 | ratrace | iirc not even the Purism products could achieve 100% libre firmware installations? or did they change recently, I think the last obstacle was bios? |
| 11:00.46 | *** join/#debian zyley (~zyley@unaffiliated/zyley) |
| 11:01.08 | *** join/#debian Brigo (~Brigo@40.181.60.213.dynamic.reverse-mundo-r.com) |
| 11:01.49 | *** join/#debian d1cor (~d1cor@unaffiliated/d1cor) |
| 11:03.00 | *** join/#debian geowiesnot (~user@i15-les02-ix2-87-89-181-157.sfr.lns.abo.bbox.fr) |
| 11:03.38 | *** join/#debian barrett (~barrett@unaffiliated/barrett) |
| 11:03.44 | *** join/#debian con_ (~con_@gateway/tor-sasl/con/x-20716450) |
| 11:10.21 | *** join/#debian Antioch04 (~Antioch@h175-177-044-119.catv02.itscom.jp) |
| 11:11.20 | *** join/#debian dselect (~dselect@unaffiliated/themill/bot/dselect) |
| 11:15.42 | *** join/#debian Lord_of_Life (~Lord@unaffiliated/lord-of-life/x-0885362) |
| 11:15.46 | *** join/#debian banox (~banox@37.120.149.25) |
| 11:19.06 | *** join/#debian Grldfrdom (uid391113@gateway/web/irccloud.com/x-gszbaweszyrzfrhg) |
| 11:19.10 | *** join/#debian Souler (~Souler@user-5-173-234-130.play-internet.pl) |
| 11:19.31 | *** join/#debian rewrited (~rewrited@unaffiliated/rewrited) |
| 11:21.46 | *** join/#debian mortderire (~mortderir@192.198.151.43) |
| 11:21.58 | *** join/#debian tgunr (~davec@dsl-dhcp-conrtxxahre-72-26-9-109.consolidated.net) |
| 11:25.10 | *** join/#debian ov3rmind (~over0-07@unaffiliated/ov3rmind) |
| 11:26.29 | *** join/#debian tgunr (~davec@dsl-dhcp-conrtxxahre-72-26-9-109.consolidated.net) |
| 11:26.32 | *** join/#debian frgo (~frgo@p200300deef0813006d06e9a5a1e1ea10.dip0.t-ipconnect.de) |
| 11:32.27 | *** join/#debian otisolsen70 (~otisolsen@xd4ed80b5.cust.hiper.dk) |
| 11:35.55 | *** join/#debian ax56234 (~NickServ@unaffiliated/ax56234) |
| 11:36.06 | *** join/#debian YWH_1 (~YWH@2600:1700:1933:238:f9ab:bd62:b039:c352) |
| 11:37.39 | *** join/#debian djakov (~djakov@linaro/djakov) |
| 11:38.02 | *** join/#debian dionysus69 (~Thunderbi@unaffiliated/dionysus69) |
| 11:40.06 | *** join/#debian D4rk4ngel2020 (~darkangel@milik.frozenstar.info) |
| 11:43.20 | *** join/#debian JohnML (~john1@ip-37-201-129-30.hsi13.unitymediagroup.de) |
| 11:49.28 | *** join/#debian GuiltySpark343 (~GuiltySpa@unaffiliated/guiltyspark343) |
| 11:49.33 | *** join/#debian tgunr (~davec@dsl-dhcp-conrtxxahre-72-26-9-109.consolidated.net) |
| 11:55.47 | *** join/#debian tgunr (~davec@dsl-dhcp-conrtxxahre-72-26-9-109.consolidated.net) |
| 11:57.02 | *** join/#debian pc-user (~pc-user@119-18-1-233.771201.syd.nbn.aussiebb.net) |
| 11:57.14 | *** join/#debian dionysus69 (~dionysus6@unaffiliated/dionysus69) |
| 12:00.02 | *** join/#debian filohuhum (~filohuhum@gateway/tor-sasl/filohuhum) |
| 12:01.30 | *** join/#debian Iamahuman (~noname@wikipedia/jukeboksi) |
| 12:02.47 | *** join/#debian JmaJeremy (~JmaJeremy@bras-base-toroon6128w-grc-36-174-91-158-25.dsl.bell.ca) |
| 12:04.43 | *** join/#debian Iamahuman (~noname@wikipedia/jukeboksi) |
| 12:05.41 | *** join/#debian thiras (~thiras@unaffiliated/thiras) |
| 12:05.43 | *** join/#debian dpkg (~dpkg@unaffiliated/dpkg) |
| 12:06.51 | *** join/#debian djakov (~djakov@linaro/djakov) |
| 12:07.48 | *** join/#debian tmm88 (~tmm88@unaffiliated/tmm88) |
| 12:08.38 | *** join/#debian captSamIngram (~Thunderbi@unaffiliated/captsamingram) |
| 12:09.38 | *** join/#debian diogenes_ (~diogenes_@93.116.130.26) |
| 12:10.11 | *** join/#debian powerhouse (~powerhous@184.69.151.38) |
| 12:17.11 | *** join/#debian djakov (~djakov@linaro/djakov) |
| 12:18.01 | *** mode/#debian [+l 1197] by debhelper |
| 12:20.06 | *** join/#debian Diezel (~mj80@91-150-21-201.customer.karistelefon.fi) |
| 12:20.27 | *** join/#debian _Onyx47_ (~bojan@213.147.104.206) |
| 12:21.34 | *** join/#debian jesse (~jesse@gateway/tor-sasl/jesse) |
| 12:25.18 | *** join/#debian czesmir (~stefan@aedg42.neoplus.adsl.tpnet.pl) |
| 12:30.11 | *** join/#debian tagomago (~tagomago@static-152-175-235-87.ipcom.comunitel.net) |
| 12:43.19 | *** join/#debian Iamahuman (~noname@wikipedia/jukeboksi) |
| 12:44.22 | *** join/#debian johndoe85 (~pi@h-79-136-83-110.NA.cust.bahnhof.se) |
| 12:44.28 | johndoe85 | im trying to mount -o loop -t iso996 /media/iso.img /mnt and im getting this error, wrong fs type, bad option, bad superblock on /dev/loop4, missing codepage or helper program, or other error. |
| 12:44.32 | johndoe85 | i have tried losetup /dev/loop4 /media/iso.img and mount /dev/loop4 /mnt but with the same result |
| 12:44.57 | *** join/#debian Souler (~Souler@user-5-173-234-249.play-internet.pl) |
| 12:46.13 | johndoe85 | F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) |
| 12:46.17 | jelly | johndoe85, "iso996" sounds different from "iso9660" |
| 12:46.18 | johndoe85 | F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock |
| 12:46.31 | johndoe85 | jelly: my bad, iso9660* |
| 12:46.32 | *** join/#debian D4rk4ngel2020 (~darkangel@milik.frozenstar.info) |
| 12:46.36 | jelly | johndoe85, what does "file /media/iso.img" say? |
| 12:46.59 | *** join/#debian ikus060 (~ikus060@173-246-15-25.qc.cable.ebox.net) |
| 12:47.10 | johndoe85 | 2021-01-11-raspios-buster-armhf-lite.img: DOS/MBR boot sector; partition 1 : ID=0xc, start-CHS (0x40,0,1), end-CHS (0x3ff,3,32), startsector 8192, 524288 sectors; partition 2 : ID=0x83, start-CHS (0x3ff,3,32), end-CHS (0x3ff,3,32), startsector 532480, 3104768 sectors |
| 12:47.34 | jelly | johndoe85, that looks like a whole disk image, not a single filesystem. |
| 12:48.34 | jelly | johndoe85, you could set up a loop device, then use kpartx to create per-partition device nodes, then mount those |
| 12:48.42 | johndoe85 | im trying to setup a pxe server for network installs for my devices, and im at the stage where im going to mount the os.iso and then rsync it to /netboot/folder |
| 12:49.04 | *** join/#debian MichaelOF (~michael@p200300eb8f0d1701684ed4540679beee.dip0.t-ipconnect.de) |
| 12:49.05 | jelly | your image has two partitions, and probably two separate filesystems |
| 12:49.18 | *** join/#debian Prints (~Prints@unaffiliated/prints) |
| 12:49.47 | jelly | maybe ask in #raspberrypi or #raspbian what's the appropriate procedure to netboot a r.pi? |
| 12:50.12 | johndoe85 | i have, they are missing in action over there ;P |
| 12:50.20 | ratrace | tsk tsk tsk |
| 12:50.29 | johndoe85 | but you might be right, this is raspbian OS image, i have not tried with a windows iso yet |
| 12:50.34 | *** join/#debian CrystalMath (~coderain@reactos/developer/theflash) |
| 12:51.08 | jelly | note that we might not know how to netboot windows, either |
| 12:51.43 | *** join/#debian debsan (~debsan@unaffiliated/debsan) |
| 12:51.51 | johndoe85 | no worries, it was this error i came here for, i have googled the error msg but without luck |
| 12:53.17 | jelly | the error basically means mount can't detect which filesystem TYPE exists on source, so and it can't mount anything unless it knows exactly which fs type to mount |
| 12:53.37 | *** join/#debian Sarcutus (47723067@pool-71-114-48-103.washdc.dsl-w.verizon.net) |
| 12:56.08 | *** join/#debian dez (uid92154@fedora/deSouza) |
| 12:58.00 | johndoe85 | ok |
| 13:02.29 | *** join/#debian defanor (~defanor@tart.uberspace.net) |
| 13:04.20 | *** join/#debian geowiesnot (~user@87-89-181-157.abo.bbox.fr) |
| 13:06.01 | *** join/#debian dvs (~hibbard@cwv.teksavvy.com) |
| 13:06.08 | *** join/#debian gavlee (~gav@unaffiliated/gavlee) |
| 13:14.00 | *** join/#debian bolovanos_ (~bolovanos@unaffiliated/bolovanos) |
| 13:14.37 | *** join/#debian aborazmeh (~aborazmeh@unaffiliated/aborazmeh) |
| 13:21.17 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f199100821f02fffeaf6272.dip0.t-ipconnect.de) |
| 13:23.43 | *** join/#debian Mister00X (quassel@gateway/vpn/mullvad/mister00x) |
| 13:25.53 | *** join/#debian ddsys (~ddsys@unaffiliated/ddsys) |
| 13:26.26 | *** join/#debian thiras (~thiras@unaffiliated/thiras) |
| 13:28.07 | *** join/#debian zalt__ (~devp@unaffiliated/lambda443) |
| 13:28.50 | *** join/#debian kakaka (~koniu@gateway/tor-sasl/koniu) |
| 13:31.30 | *** join/#debian geowiesnot (~user@i15-les02-ix2-87-89-181-157.sfr.lns.abo.bbox.fr) |
| 13:33.11 | *** join/#debian mcole (~slkfmre@KD113148020047.ppp-bb.dion.ne.jp) |
| 13:33.30 | *** join/#debian Jerrynicki (~niklas@p200300f57704b400b9930d65b2cdfe60.dip0.t-ipconnect.de) |
| 13:34.27 | *** join/#debian soulz (~soulz@unaffiliated/soulz) |
| 13:36.27 | *** join/#debian martinus__ (~martin@3.57.202.77.rev.sfr.net) |
| 13:38.01 | *** mode/#debian [+l 1203] by debhelper |
| 13:38.27 | *** join/#debian tmm88 (~tmm88@unaffiliated/tmm88) |
| 13:38.48 | *** join/#debian zalt__ (~devp@unaffiliated/lambda443) |
| 13:40.41 | *** join/#debian aborazmeh (~aborazmeh@unaffiliated/aborazmeh) |
| 13:40.41 | *** join/#debian darunesh (~darunesh@2401:4900:5035:2187:9ed2:1c86:1f6e:a47b) |
| 13:42.35 | *** join/#debian Lord_of_Life (~Lord@unaffiliated/lord-of-life/x-0885362) |
| 13:43.27 | *** join/#debian szorfein (~daggoth@gateway/tor-sasl/szorfein) |
| 13:45.32 | *** join/#debian tocka (uid198544@gateway/web/irccloud.com/x-fklikywwbubfhwne) |
| 13:51.19 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f199100821f02fffeaf6272.dip0.t-ipconnect.de) |
| 13:52.11 | *** join/#debian CxP (~CxP@mail.paulcosma.com) |
| 13:53.32 | *** join/#debian store_scarecrow (~Andrew_00@host-74.91.78.101.bpsnetworks.com) |
| 13:57.51 | GNU\colossus | do you people with local-only mail delivery usually choose to replace exim4 with something else? |
| 14:01.21 | *** join/#debian Hallcyon (~Hallcyon@122.199.46.116) |
| 14:02.07 | *** join/#debian hendursaga (~weechat@gateway/tor-sasl/hendursaga) |
| 14:02.26 | *** join/#debian yans (~yans@unaffiliated/yinsen) |
| 14:02.47 | *** join/#debian steven_saus (~steven_sa@cpe-74-131-36-220.kya.res.rr.com) |
| 14:04.33 | oxek | how do I debug "apt update" being stuck on "0% [Working]"? |
| 14:04.52 | oxek | it obviously is not "Working" |
| 14:05.01 | *** join/#debian Mister00X (~quassel@185.120.144.100) |
| 14:05.01 | *** join/#debian mtn (~mtn@unaffiliated/mtn) |
| 14:05.08 | *** join/#debian chaky_ (~chaky@unaffiliated/chaky) |
| 14:06.03 | Brigo | oxek, usually it is a network issue. |
| 14:07.15 | ksk | GNU\colossus: I would assume apt should time out, and tell you which repo it had problems with connecting to, no? |
| 14:07.37 | GNU\colossus | ksk, tell oxek, please ;) |
| 14:07.38 | ksk | and to cross-chack that, you normally just click on the link, to see what happens. |
| 14:07.46 | ksk | oh, sorry! |
| 14:07.48 | GNU\colossus | np |
| 14:07.50 | ksk | oxek: ^ |
| 14:08.03 | *** join/#debian sweatsuit (~sweatsuit@unaffiliated/sweatsuit) |
| 14:11.11 | oxek | apt is refusing to timeout |
| 14:11.30 | oxek | it might be a network issue, but everything else works |
| 14:12.00 | ksk | v6 problem maybe? (aka v6 is configured, but b0rken, try "ping6 six.heise.de" for example |
| 14:12.04 | ksk | ) |
| 14:12.46 | Brigo | oxek, the other option is apt missconfiguration or sources problems. Both tricky to debug. |
| 14:13.41 | birkoff | j #busybox |
| 14:13.57 | *** join/#debian moldorcoder7 (~moldorcod@206.166.251.59) |
| 14:14.20 | oxek | ksk: no ipv6 here |
| 14:14.32 | Brigo | oxek, you can start in /var/log. Apt has a log there you can check for problems. |
| 14:15.59 | oxek | no new logs in /var/log/apt/ it presumably only creates those logs once something happens |
| 14:16.03 | oxek | but nothing is happening |
| 14:16.10 | *** join/#debian bryceml (~bryceml@104.243.49.109) |
| 14:16.30 | *** join/#debian tgunr (admin@dsl-dhcp-conrtxxahre-76-164-111-177.consolidated.net) |
| 14:18.45 | *** join/#debian paulgrmn (~paulgrmn@c-98-250-183-21.hsd1.mi.comcast.net) |
| 14:21.42 | *** join/#debian TheLemonMan (~lemonboy@irssi/staff/TheLemonMan) |
| 14:22.22 | TheLemonMan | hello, what's the general policy for unresponsive mainteiners? |
| 14:23.15 | jelly | !mia |
| 14:23.15 | dpkg | from memory, mia is missing in action. status of missing unknown. as opposed to KIA, POW, or AWOL. https://www.debian.org/doc/manuals/developers-reference/beyond-pkging.html#mia-qa |
| 14:24.23 | jelly | TheLemonMan, see if they're unresponsive for all their packages or they're ignoring only some; offer help if possible; if you're a DM or DD you can offer to make NMU fixes I guess |
| 14:25.40 | *** join/#debian s8548a (~s8548a@unaffiliated/s8548a) |
| 14:25.57 | jelly | > If the maintainer doesn't reply within four weeks (a month), one can assume that a response will probably not happen. |
| 14:26.01 | *** join/#debian alpernebbi (~quassel@178.233.176.221) |
| 14:26.13 | jelly | TheLemonMan, has it been a month? |
| 14:30.01 | TheLemonMan | I haven't reached out yet but there's a mail in the bug tracker dated Jan 2021 from the maintainer where they state they won't be able to look after that package |
| 14:30.29 | *** join/#debian gnufr33dom (~gnufr33do@ip68-108-88-236.lv.lv.cox.net) |
| 14:31.01 | *** join/#debian JordiGH (jordi@octave/developer/JordiGH) |
| 14:32.42 | TheLemonMan | the worst part is that the package may not make into Bullseye for very minor packaging problems |
| 14:34.57 | jelly | so they're not unresponsive |
| 14:35.23 | *** join/#debian chele (~chele@ip5b40237d.dynamic.kabel-deutschland.de) |
| 14:35.56 | jelly | they just don't have resources |
| 14:36.37 | TheLemonMan | isn't that being unresponsive? |
| 14:37.12 | *** join/#debian ccrr10_ (~ccrr10@host-87-21-146-149.retail.telecomitalia.it) |
| 14:38.24 | freem | by saying "I can't handle it" one is responsive. |
| 14:38.36 | freem | unresponsive is more, no news at all |
| 14:38.40 | *** join/#debian gnufr33dom (~gnufr33do@ip68-108-88-236.lv.lv.cox.net) |
| 14:39.51 | *** join/#debian traptedmind (~traptedmi@cpe-74-75-7-119.maine.res.rr.com) |
| 14:40.37 | TheLemonMan | oh well, that makes sense. So back to square one, what's the best way to get the package updated and into Bullseye? |
| 14:41.13 | *** join/#debian ibs (~ibs@li2039-48.members.linode.com) |
| 14:41.27 | *** join/#debian bru (~bru@181.165.104.69) |
| 14:42.01 | ratrace | TheLemonMan: which package, btw? |
| 14:42.15 | TheLemonMan | ratrace, qalculate-gtk |
| 14:45.13 | *** join/#debian Haudegen (~quassel@91.114.49.10) |
| 14:48.01 | *** mode/#debian [+l 1210] by debhelper |
| 14:51.24 | *** join/#debian tinga (~tinga@host-92-16-125-90.as13285.net) |
| 15:00.44 | *** join/#debian nickodd (~nickodd@unaffiliated/nickodd) |
| 15:04.52 | *** join/#debian tgunr_ (~davec@dsl-dhcp-conrtxxahre-76-164-83-11.consolidated.net) |
| 15:05.54 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f199100821f02fffeaf6272.dip0.t-ipconnect.de) |
| 15:09.36 | *** join/#debian twobitsprite (~isaac.fre@cpe-173-95-153-183.nc.res.rr.com) |
| 15:09.46 | *** join/#debian Nindustries (8d8755f7@unaffiliated/nindustries) |
| 15:10.10 | Nindustries | Hi, using buster-slim on Docker. Is there a way to get squid installed with openssl support? |
| 15:15.06 | *** join/#debian sdoubleyou (~sdoubleyo@unaffiliated/sdouble25) |
| 15:15.37 | Brigo | Nindustries, what is buster-slim? and why woudn't squid install with openssl support? |
| 15:16.28 | *** join/#debian Longshanks (~parallels@cpc149476-cmbg20-2-0-cust726.5-4.cable.virginm.net) |
| 15:16.53 | Nindustries | Brigo: it's just buster, but with some packages committed. Squid doesn't recognise 'ssl-bump', which makes me think it's not compiled with openssl support. |
| 15:17.00 | Nindustries | #squid is rather dead it seems fyi. |
| 15:17.30 | Nindustries | From the docs: Requires:--with-openssl |
| 15:19.21 | *** join/#debian polyphem (~p0lyph3m@2a02:810d:640:776c:76d7:55f6:f85b:c889) |
| 15:20.06 | oxek | "Operation timed out after 120000 milliseconds with 0 out of 0 bytes received" except that it took way over 120s |
| 15:20.10 | Nindustries | hmm at least there's '--with-gnutls' |
| 15:21.59 | Brigo | Nindustries, it looks like you need just some configuring: https://medium.com/@steensply/installing-and-configuring-squid-proxy-for-ssl-bumping-or-peek-n-splice-34afd3f69522 |
| 15:22.22 | Longshanks | Nindustries: can't you check what options it's compiled with from the source package Makefile ? |
| 15:23.03 | *** join/#debian treeview (~treeview@cpe-24-163-39-192.nc.res.rr.com) |
| 15:23.04 | Nindustries | I'm not compiling it myself at this point, just apt install |
| 15:23.13 | Nindustries | Wait, Brigo, I can pass â with-openssl to apt install ? |
| 15:23.39 | Brigo | Nindustries, i don't think so |
| 15:23.55 | Nindustries | I'm confused. "In order to configure SSL bumping with squid, the installation package needs to be configured with the following parameters enabled." |
| 15:24.22 | Longshanks | Nindustries: usually you can get the source pacakge and compile it with the default options Debian use really easily. But the bonus is if you need to enable support for something Debian don't enable, it's a good starting point - you only need to add the option Debian don't use by default. openssl seems a very strange thing to omit though.. |
| 15:24.51 | Nindustries | I checked squid -v, and it doesn't include ssl/openssl.. |
| 15:26.13 | *** join/#debian diogenes_ (~diogenes_@188.208.122.141) |
| 15:27.17 | Longshanks | Nindustries: I believe you :) must be a mistake though surely? |
| 15:27.35 | *** join/#debian Remy (~remy@ip-213-127-108-204.ip.prioritytelecom.net) |
| 15:27.42 | Brigo | Nindustries, howto https://unix.stackexchange.com/questions/613359/setting-up-squid-transparent-proxy-with-ssl-bumping-on-debian-10 |
| 15:27.50 | *** join/#debian koniu (~koniu@gateway/tor-sasl/koniu) |
| 15:28.00 | *** join/#debian aborazmeh (~aborazmeh@unaffiliated/aborazmeh) |
| 15:31.15 | *** join/#debian SoundShaman (~SoundSham@47-219-249-23.jkvlcmta01.res.dyn.suddenlink.net) |
| 15:31.38 | *** join/#debian rsx (~rsx@ppp-188-174-147-170.dynamic.mnet-online.de) |
| 15:33.18 | ratrace | Nindustries: but it includes gnutls? what exactly do you need? SSL/TLS functionality or libssl specifically? |
| 15:33.30 | kline\0 | is there any way to add videos to debian bugs? ive hit https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=980482 as well and have a short video demonstrating the issue |
| 15:34.36 | *** join/#debian bitblit (~bitblit@gateway/tor-sasl/bitblit) |
| 15:34.48 | *** join/#debian Lord_of_Life (~Lord@unaffiliated/lord-of-life/x-0885362) |
| 15:34.51 | *** join/#debian tgunr (admin@dsl-dhcp-conrtxxahre-76-164-111-177.consolidated.net) |
| 15:36.27 | Nindustries | Ugh. FATAL: Unknown http_port option 'ssl-bump'. |
| 15:38.32 | *** join/#debian geowiesnot (~user@i15-les02-ix2-87-89-181-157.sfr.lns.abo.bbox.fr) |
| 15:38.37 | ratrace | Nindustries: https://wiki.squid-cache.org/Features/SslBump |
| 15:38.59 | ratrace | ,v squid |
| 15:39.23 | ratrace | Okay, what's wrong with judd lately? |
| 15:40.59 | *** join/#debian n4dir (~n4dir@mue-88-130-56-055.dsl.tropolys.de) |
| 15:42.07 | *** join/#debian sweatsuit (~sweatsuit@unaffiliated/sweatsuit) |
| 15:44.06 | *** join/#debian tgunr (admin@dsl-dhcp-conrtxxahre-76-164-111-177.consolidated.net) |
| 15:44.24 | birkoff | are there deb packages for gcc toolchain for mips with uclibc ? |
| 15:48.52 | Haohmaru | i'd run Synaptic, then search for "gcc mips" and see wot comes up |
| 15:49.41 | *** join/#debian lavendereyes (~lavendere@gateway/tor-sasl/lavendereyes) |
| 15:50.30 | *** join/#debian Asterisco (~catan@host-87-12-210-199.business.telecomitalia.it) |
| 15:50.31 | Asterisco | hi |
| 15:50.47 | Asterisco | someone could help me if i've configured well fail2ban? |
| 15:50.57 | *** join/#debian Newami (~Newami@ip70-179-45-125.sd.sd.cox.net) |
| 15:51.06 | *** join/#debian kriger (~norge@unaffiliated/kriger) |
| 15:51.39 | *** join/#debian ccrr10__ (~ccrr10@host-87-21-146-149.retail.telecomitalia.it) |
| 15:52.28 | Nindustries | Any idea what I should put in sources.list? E: You must put some 'source' URIs in your sources.list |
| 15:53.40 | Haohmaru | look in the debian wiki for example source.list |
| 15:53.47 | n4dir | Nindustries: https://wiki.debian.org/SourcesList#Repository_URL |
| 15:54.07 | Haohmaru | this ^ exactly |
| 15:54.14 | n4dir | deb-src are the lines your message is having in mind |
| 15:54.35 | *** join/#debian tgunr (~tgunr@dsl-dhcp-conrtxxahre-76-164-83-11.consolidated.net) |
| 15:54.45 | Nindustries | ahh gotcha. |
| 15:54.46 | Nindustries | Thanks |
| 15:55.02 | *** join/#debian greycat (~greg@209.142.155.49) |
| 15:55.07 | Nindustries | If this works out I'm going to open source a statically compiled version of squid in a lean & mean docker container |
| 15:55.10 | *** join/#debian Anakin (anakin@unaffiliated/anakin) |
| 15:55.24 | Nindustries | ONE DAY :D |
| 15:55.59 | Nindustries | Thanks for the help all. |
| 15:56.06 | *** join/#debian diogenes_ (~diogenes_@212.0.201.154) |
| 15:56.13 | Asterisco | i'm underattack |
| 15:56.13 | *** join/#debian Night-Shade (~TimF@ip5b40e3ae.dynamic.kabel-deutschland.de) |
| 15:56.23 | Asterisco | please someone could help me with fail2ban? |
| 15:56.31 | *** join/#debian Azrael_- (~aweoi@51.154.62.124) |
| 15:57.10 | n4dir | you will have to ask a question for that to happen |
| 16:01.14 | *** join/#debian killforge (~erp@2001:8004:1bc0:2447:7d59:3cb2:54de:1d73) |
| 16:03.51 | *** join/#debian twobitsprite (~isaac.fre@cpe-173-95-153-183.nc.res.rr.com) |
| 16:04.51 | *** join/#debian Mister00X (~quassel@185.123.143.212) |
| 16:05.30 | *** join/#debian ChmEarl (~chmearl@unaffiliated/prymar56) |
| 16:06.30 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f199100821f02fffeaf6272.dip0.t-ipconnect.de) |
| 16:07.16 | *** join/#debian Tom01 (~tom@a89-183-50-59.net-htp.de) |
| 16:09.01 | *** join/#debian Vizva (~Vizva@gateway/tor-sasl/vizva) |
| 16:10.15 | jelly | !ask |
| 16:10.15 | dpkg | If you have a question, just ask! For example: "I have a problem with ___; I'm running Debian version ___. When I try to do ___ I get the following output ___. I expected it to do ___." Don't ask if you can ask, if anyone uses it, or pick one person to ask. We're all volunteers; make it easy for us to help you. If you don't get an answer try a few hours later or on https://lists.debian.org/debian-user/ See <smart questions><errors>. |
| 16:10.22 | jelly | Asterisco, ^ |
| 16:11.41 | Asterisco | i've found a guide |
| 16:11.48 | Asterisco | but i think that is wrong |
| 16:11.58 | Asterisco | https://mattia.elpiro.it/ispmail-stretch/fighting-brute-force-attacks/ |
| 16:12.06 | jelly | but also: fail2ban is largerly useless against ssh brute force attacks, that are highly distributed these days. Each attack iterates from a different IP, and they have thousands of IPs |
| 16:12.34 | Asterisco | i've recive an attack to postfix |
| 16:13.06 | jelly | what do your postfix logs look like? |
| 16:13.12 | jelly | !pastebin |
| 16:13.13 | dpkg | Do not paste more than 2 lines to this channel. Instead, use for text: https://paste.debian.net | pics/screenshots: https://imgbb.com/ or https://imgur.com/upload | large files up to 100MB (think tar.gz): https://filebin.net or https://wikisend.com | Remember to tell us the URL of your paste! Cannot cut and paste? Ask me about <pastebinit>, <nopaste>, <termbin>. |
| 16:13.21 | ratrace | bets 5 fictional coins there's no attack going on, just regular MTA on public internet shenanigans :) |
| 16:13.29 | jelly | show a couple dozen - couple hundred lines |
| 16:13.57 | avu | ratrace: or they're an open relay which floods the logs :) |
| 16:14.10 | Asterisco | <PROTECTED> |
| 16:14.41 | ratrace | avu: you really have to make a conscious effort to turn postfix into an open relay :) |
| 16:14.51 | jelly | Asterisco, please show actual complete log lines, and more than one. |
| 16:15.07 | jelly | in a pastebin, preferably paste.debian.net |
| 16:15.10 | *** join/#debian tgunr (~tgunr@dsl-dhcp-conrtxxahre-72-26-20-120.consolidated.net) |
| 16:15.10 | Asterisco | is the same |
| 16:15.12 | *** join/#debian dvs (~hibbard@cwv.teksavvy.com) |
| 16:15.19 | Asterisco | is always the same |
| 16:15.21 | ratrace | Asterisco: post the _actual_ log entries please |
| 16:15.22 | jelly | that's not a complete line. |
| 16:15.29 | Asterisco | now i've stopped postfix |
| 16:19.18 | Asterisco | ratrece could you help me to find a valide guide? |
| 16:19.37 | *** join/#debian Spr1ng (~Spr1ng@unaffiliated/spr1ng) |
| 16:20.34 | ratrace | Asterisco: please provide the actual log entries |
| 16:21.14 | Asterisco | Jan 22 16:53:09 mail postfix/postfix-script[4950]: stopping the Postfix mail system |
| 16:21.17 | Asterisco | :))) |
| 16:21.28 | ratrace | Asterisco: also please don't type nicknames but use tab completion. Most of us here use highlighting to get notified |
| 16:21.47 | ratrace | Asterisco: if you don't provide the actual log entries showing what you think is an attack, we can't help you. |
| 16:21.52 | ratrace | Asterisco: also.... there's #postfix |
| 16:21.53 | jelly | Asterisco, which debian are you using? Where are the logs? |
| 16:22.05 | Asterisco | now i've problem of blacklisting |
| 16:22.10 | Asterisco | naturally |
| 16:22.21 | ratrace | ...sigh... |
| 16:22.21 | Asterisco | Jan 22 16:53:09 mail postfix/error[4840]: D4A2D340A6: to=<xzaeb95seo@gmail.com>, relay=none, delay=425535, delays=425534/0.43/0/0.83, dsn=4.7.28, status=deferred (delivery temporarily suspended: host alt2.gmail-smtp-in.l.google.com[142.250.4.27] refused to talk to me: 421-4.7.28 [79.2.176.41] Our system has detected an unusual amount of 421-4.7.28 unsolicited mail originating from your IP address. To protect our 421-4.7.28 |
| 16:22.22 | Asterisco | users from spam, mail sent from your IP address has been temporarily 421-4.7.28 blocked. Please visit 421-4.7.28 https://support.google.com/mail/answer/81126 to review our Bulk 421 4.7.28 Email Senders Guidelines. u185si10015016pgc.39 - gsmtp) |
| 16:22.29 | jelly | !paste |
| 16:22.30 | dpkg | Do not paste more than 2 lines to this channel. Instead, use for text: https://paste.debian.net | pics/screenshots: https://imgbb.com/ or https://imgur.com/upload | large files up to 100MB (think tar.gz): https://filebin.net or https://wikisend.com | Remember to tell us the URL of your paste! Cannot cut and paste? Ask me about <pastebinit>, <nopaste>, <termbin>. |
| 16:22.31 | pasiz | don't post on channel |
| 16:22.43 | ratrace | Asterisco: that's throttling..... normal for gmail |
| 16:22.44 | Asterisco | i need to correct fail2ban |
| 16:22.45 | jelly | Asterisco, ^ read what dpkg said. That's for you. |
| 16:22.58 | ratrace | Asterisco: STOP. and solve one by one problem. |
| 16:23.06 | Asterisco | of course |
| 16:23.19 | Asterisco | 1) i've stopped postfix |
| 16:23.26 | pasiz | fail2ban won't help you in smtp |
| 16:23.38 | Asterisco | why not? |
| 16:23.39 | jelly | pasiz, it may help further guessing of passwords |
| 16:23.41 | pasiz | good common sense in designing mail system and authentication |
| 16:23.52 | jelly | it will not help for passwords that are ALREADY guessed |
| 16:24.02 | pasiz | jelly: limiting connect rate would do that too |
| 16:24.06 | jelly | spamming happens AFTER passwords are guessed |
| 16:24.08 | Asterisco | i can change the password |
| 16:24.11 | Asterisco | naturally |
| 16:24.22 | Asterisco | i know that i need do it |
| 16:24.26 | *** join/#debian milkt (~debian@gateway/tor-sasl/milkt) |
| 16:24.26 | Asterisco | i'm not so stupid |
| 16:24.39 | jelly | Asterisco, using complex passwords would have made bruteforcing irrelevant |
| 16:24.46 | pasiz | jelly: i have runned mail servers since 1999 in public internet, never anyone guessed any passwords |
| 16:24.47 | Asterisco | first of all i would ban all futher tentative of attack |
| 16:24.52 | jelly | but it's too late now |
| 16:24.58 | ratrace | Asterisco: you're not under any attack |
| 16:25.22 | jelly | pasiz, that's about as long as me, and you're either very lucky, or have smart users |
| 16:25.24 | pasiz | heuristics in firewall would have stopped it |
| 16:25.39 | Asterisco | jelly... the problem is mine of all my user? |
| 16:25.53 | Asterisco | now i can change the password of all |
| 16:26.02 | jelly | Asterisco, we don't know what your problem(s) are, because... you have not shown actual logs |
| 16:26.38 | Asterisco | my problem is usa fail2ban to limit the bruteforce attack |
| 16:26.46 | ratrace | Asterisco: you can't |
| 16:26.50 | jelly | will wait for actual logs |
| 16:26.53 | Asterisco | if you have some other idea... i'm hear |
| 16:26.54 | greycat | No, that is not a problem. That is an attempted solution of an unspecified problem. |
| 16:27.16 | *** join/#debian towo` (~towo@unaffiliated/towo/x-4064351) |
| 16:27.29 | ratrace | Asterisco: please pastebin ACTUAL logs. Not here in the channel, but using a !pastebin |
| 16:27.35 | Asterisco | i've open relay with protect password |
| 16:27.46 | Asterisco | for autorized user |
| 16:27.59 | ratrace | Asterisco: are you listening or talking to yourself? |
| 16:28.15 | Asterisco | what log? |
| 16:28.22 | jelly | Asterisco, we might ask you for further info, but PLEASE provide what we asked so far |
| 16:28.23 | Asterisco | if i've blocked postfix |
| 16:28.23 | greycat | The log that shows the PROBLEM. |
| 16:28.26 | ratrace | Asterisco: the one showing what you THINK is an attack you need fail2ban for |
| 16:28.35 | Asterisco | ok |
| 16:28.41 | jelly | Asterisco, pastebin the last 500 lines of /var/log/mail.log |
| 16:28.58 | jelly | Asterisco, which debian release are you using? |
| 16:29.43 | *** join/#debian karstensrage (~karstensr@unaffiliated/karstensrage) |
| 16:30.15 | Asterisco | https://pastebin.pl/view/08f8667c |
| 16:30.35 | sig_9 | I haev some crusher wireless headphones, they connect to my pc but sound comes out the speaker instead of the headset? |
| 16:30.42 | ratrace | Asterisco: that log shows no attack |
| 16:31.07 | Asterisco | this is my actually log |
| 16:31.19 | Asterisco | i tell you that i've blocket postfix |
| 16:31.30 | ratrace | Asterisco: yes, and it shows NO attack. what it DOES show is you cannot reach GMail over ipv6 |
| 16:31.35 | ratrace | Asterisco: you're trolling now |
| 16:31.38 | ratrace | bye |
| 16:32.10 | Asterisco | splash@mail.splash.it |
| 16:32.19 | Asterisco | is the email that are using to spam! |
| 16:32.34 | Asterisco | is so strange? |
| 16:32.40 | greycat | Then show us a log that includes THAT. |
| 16:32.54 | Asterisco | is in log! |
| 16:33.04 | n4dir | sig_9: perhaps have a log at pavucontrol. |
| 16:33.04 | Asterisco | from=<splash@mail.splash.it>, size=671, nrcpt=1 (queue active) |
| 16:33.07 | *** join/#debian Ceber (~cerberus@94.31.84.245) |
| 16:33.09 | n4dir | log/look |
| 16:33.30 | Asterisco | i'm changiing the password og this user |
| 16:33.56 | Asterisco | but i think that fail2ban could help me to block bruteforce |
| 16:33.59 | Asterisco | or not? |
| 16:34.30 | jelly | Asterisco, that's not even 20 lines. Are you able to pastebin more? |
| 16:34.32 | greycat | Now, I am not a postfix user, but the lines in question that you showed us, which contain this email adderss, are coming from a program named "qmgr". I am guessing this means "queue manager". I am further guessing that it's trying to deliver a message that is already IN your queue. |
| 16:35.14 | jelly | !pastebinit |
| 16:35.14 | dpkg | A command-line tool to send data to a <pastebin>. To paste e.g. your sources.list do "apt-get install pastebinit; pastebinit /etc/apt/sources.list"; to paste the output of a program do e.g. "dmesg 2>&1 | pastebinit". For a list of pastebin sites do "pastebinit -l". See also <pastebinit config>, <nopaste>. |
| 16:35.24 | jelly | Asterisco, ^ |
| 16:35.59 | greycat | Showing logs that are failed outgoing deliveries of a message you have already ACCEPTED does not indicate an attack in the present time. Maybe you were attacked previously. But in that case you'd need to show the logs from the time you believe was an attack. |
| 16:36.07 | sig_9 | Asterisco: shows they are plugged in but coming from speakers not wireless headset |
| 16:36.22 | Asterisco | ok so i need delete this queue |
| 16:36.24 | Asterisco | right? |
| 16:36.47 | pasiz | your mailserver, your decision |
| 16:36.56 | n4dir | sig_9: i got no further idea. |
| 16:37.42 | *** join/#debian sinaowolabi (~Sina@102.134.114.1) |
| 16:37.47 | *** join/#debian conta (Thunderbir@gateway/vpn/mullvad/conta) |
| 16:38.13 | *** join/#debian horribleprogram (~horriblep@unaffiliated/nightcoder) |
| 16:38.16 | jelly | Asterisco, look dude. You probably have some mails in queue, put there by a spammer. We don't know how they got there, you would need to show more logs for that. |
| 16:38.19 | horribleprogram | /dev/sdb2 on /home/horribleprogram/share type exfat (rw,relatime,fmask=0022,dmask=0022,iocharset=utf8,errors=remount-ro) [BackupPlus] |
| 16:38.25 | n4dir | sig_9: hmm. really bad with soundsystem i am. Look at "alsamixer", perhaps you can mute speakers with "m" key and unmute headphones with the same key |
| 16:38.30 | horribleprogram | sup guys, I can't write to my samba share on my macOS that's running on my Linux |
| 16:38.43 | horribleprogram | also I can't chown -R as it says operation not permitted |
| 16:38.46 | horribleprogram | but also I'm root so |
| 16:39.07 | pasiz | horribleprogram: in what system you are root? |
| 16:39.12 | horribleprogram | pasiz: debian |
| 16:39.17 | horribleprogram | the host of the share |
| 16:39.24 | n4dir | sig_9: if no one here can help try #lau (linux audio users), perhaps even #linux |
| 16:39.30 | horribleprogram | so it might be mounted as read-only I think |
| 16:39.33 | pasiz | and you log with root credentials to samba |
| 16:39.38 | horribleprogram | however, my smb.conf is read only no |
| 16:39.43 | horribleprogram | how u do that |
| 16:40.04 | pasiz | so you see your share |
| 16:40.14 | pasiz | and your mapped user is wrong |
| 16:40.23 | horribleprogram | yes |
| 16:40.52 | horribleprogram | is there a way to make valid users just everyone |
| 16:40.55 | jelly | Asterisco, in order of priority, you should: 1) figure out exactly how spam comes in; it might be over smtp auth, or it might be some other way (eg. web app) 2) save a couple samples 3) change passwords IF the spammer used SMTP AUTH, which we don't know yet 4) clean the queue of spam _only_, preferably keeping valid mail |
| 16:41.05 | pasiz | horribleprogram: yes, mapall user |
| 16:41.11 | *** join/#debian tgunr (~tgunr@dsl-dhcp-conrtxxahre-72-26-20-120.consolidated.net) |
| 16:41.27 | jelly | Asterisco, but to find out 1) it would be nice if you did EXACTLY what we asked you to do |
| 16:41.38 | horribleprogram | OH |
| 16:41.43 | horribleprogram | I think I get what you're saying |
| 16:41.48 | pasiz | horribleprogram: so in samba terms, write list |
| 16:41.50 | pasiz | and read list |
| 16:42.07 | horribleprogram | it's my mac that's preventing me from being able to write to it |
| 16:42.42 | jelly | Asterisco, are you able to read instructions carefully this time? If you don't understany why I, or someone else, has specified something, ASK, but don't give us partial info or your understanding of what's going on |
| 16:42.52 | *** join/#debian akp55_ (~akp55@c-73-148-15-158.hsd1.va.comcast.net) |
| 16:46.23 | *** join/#debian MrFixIt (~Sam@c-73-246-215-75.hsd1.il.comcast.net) |
| 16:46.54 | *** join/#debian Deyaa (uid190709@gateway/web/irccloud.com/x-qwilvqbwszbcgnwv) |
| 16:47.19 | ratrace | wonders if y'all troll detector batteries need replacement |
| 16:47.25 | ratrace | 'tis Friday after all..... |
| 16:47.41 | greycat | I honestly don't think he's trolling. Just confused. |
| 16:48.07 | greycat | Also in WAAAAY over his head. Like, how did he get the root password on this mail server, because he sure as hell didn't set it up. |
| 16:48.13 | n4dir | thinking king crimson songs |
| 16:49.24 | jelly | greycat, "ispmail" is one of those tutorial web sites telling you how to set up a mail server step by step. A half trained monkey can follow it |
| 16:49.44 | *** join/#debian AJ_Z0 (~AJ_Z0@pdpc/supporter/professional/ajz0) |
| 16:50.03 | *** join/#debian tgunr_ (~davec@dsl-dhcp-conrtxxahre-72-26-20-120.consolidated.net) |
| 16:50.13 | greycat | I would classify that as "someone else set it up", if he ran a bunch of commands that someone else wrote, and did not understand a single one of them. |
| 16:50.28 | jelly | ¯\_(ã)_/¯ |
| 16:51.10 | greycat | Is my guess correct, that the log lines from "qmgr" are showing delivery attempts of a message he already has in his local queue? |
| 16:51.19 | jelly | I could tell them what to look for and how to identify source of a message in the queue, if they followed directions. |
| 16:51.25 | ratrace | greycat: yes, or qmgr just received it |
| 16:51.30 | jelly | yes, roughly |
| 16:51.50 | ratrace | with missing sasl lines, it looks like they might be an open relay but that log paste was too short for conclusions. |
| 16:52.01 | *** join/#debian BrianG61UK (~BrianG61U@2a02:8010:66b7:dddd:e4cf:a31c:a27c:f138) |
| 16:52.07 | jelly | qmgr lines are usually irrelevant. you pick a queue id, then hunt the history for the _first_ time it appeared |
| 16:52.30 | ratrace | but... it's hard to accidentally make an open realy in postfix. you really need to explicitly configure an open relay by explicitly weakening restrictions |
| 16:52.31 | jelly | that log sample is way too short to draw any conclusions |
| 16:53.21 | jelly | and most of those messages in the sample have been in the queue for a long time delay=424745 <- this is seconds |
| 16:53.53 | ratrace | does quick back of the napkin math ....... 4 days |
| 16:54.12 | ratrace | postfix default queue age is 5 days |
| 16:54.12 | greycat | 86400 per day, so about 5 days, yeah |
| 16:54.19 | *** join/#debian adapter (~adapter@2601:600:c500:2d0:1c27:b170:5072:67e6) |
| 16:54.34 | greycat | bc says 4.916 days |
| 16:54.46 | *** join/#debian Dotz0cat (~Dotz0cat@h12.136.187.173.dynamic.ip.windstream.net) |
| 16:54.54 | ratrace | less than .1 day until a DSN bounce backscatter :) |
| 16:55.11 | *** join/#debian Lord_of_Life_ (~Lord@unaffiliated/lord-of-life/x-0885362) |
| 16:55.15 | jelly | thus if one picked 6611234108 queue id, one would have to look at 4-5 days old rotated mail.log to find the entry point |
| 16:55.46 | ratrace | (default is weekly on debian, tho) |
| 16:55.48 | jelly | ratrace, error command _does_ happen when postfix decides it's had enough |
| 16:56.04 | ratrace | jelly: error command? |
| 16:58.15 | jelly | ratrace, those lines from syslog, they're sent by different named commands (processes), there's "local", "qmgr", "master", "smtpd", ... "error" |
| 16:59.05 | jelly | error is the one that generates a bounce after a permanent error (or in this case, after 4.91 days for some reason) |
| 17:01.09 | *** join/#debian sidmo_ (~ident@p5b3d8e59.dip0.t-ipconnect.de) |
| 17:01.19 | *** join/#debian ledeni (~ledeni@fedora/ledeni) |
| 17:03.14 | ratrace | jelly: hrm... I think qmgr generates those these days |
| 17:03.51 | ratrace | no.... postfix/smtp does in my case at least |
| 17:04.08 | *** join/#debian _0bitcount (~Big_Byte@90.162.105.206) |
| 17:05.30 | ratrace | no.... wait..... postfix/pickup receives the bounce from MAILER-DAEMON, and injects into the queue which is then normally processed. at least on my installations. |
| 17:06.35 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f199100821f02fffeaf6272.dip0.t-ipconnect.de) |
| 17:08.35 | *** join/#debian galex-713 (~quassel@portable.galex-713.eu) |
| 17:09.50 | *** join/#debian forgotmynick (uid24625@gateway/web/irccloud.com/x-wqcawqgzsmzqtwbg) |
| 17:14.11 | *** join/#debian bolovanos__ (~bolovanos@unaffiliated/bolovanos) |
| 17:18.25 | *** join/#debian Betal (~Betal@unaffiliated/betal) |
| 17:19.15 | *** join/#debian ravioli (~ravioli@donger/pasta) |
| 17:22.44 | *** join/#debian aidanpr (~aidanpr@205.185.113.93) |
| 17:24.43 | *** join/#debian D4rk4ngel2020 (~darkangel@5.170.48.47) |
| 17:26.13 | *** join/#debian D4rk2020 (~darkangel@95.216.136.47) |
| 17:27.57 | *** join/#debian dionysus69 (~dionysus6@unaffiliated/dionysus69) |
| 17:29.13 | *** join/#debian janneke (~janneke@fsf/member/janneke) |
| 17:30.17 | *** join/#debian bitblit (~bitblit@gateway/tor-sasl/bitblit) |
| 17:36.37 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f199100821f02fffeaf6272.dip0.t-ipconnect.de) |
| 17:37.28 | jelly | that's the only pickup I get! |
| 17:37.48 | ratrace | zzzzing? |
| 17:38.01 | *** mode/#debian [+l 1203] by debhelper |
| 17:38.25 | ratrace | A sheep, a drum and a snake enter a bar......... Baa-dum tss! |
| 17:41.29 | *** join/#debian csgeek (~user@c-24-6-60-210.hsd1.ca.comcast.net) |
| 17:42.06 | *** join/#debian fjavier (~fjavier@170.253.44.250) |
| 17:42.25 | *** join/#debian sh9 (~sh9@softbank060116136158.bbtec.net) |
| 17:45.42 | *** join/#debian bitblit (~bitblit@gateway/tor-sasl/bitblit) |
| 17:52.48 | hanasaki | working on setup of psad : log files are filled with psad: could not add iptables block rule for: the chains specified in psad: could not add iptables block rule for: do exist an show up in iptables -L didn't get anything more from running in debug mode. Thoughts on how to debug this ? |
| 17:54.34 | *** join/#debian nt1036 (~nt1036@2603-8000-6f01-94b7-dcc9-edd3-a291-5749.res6.spectrum.com) |
| 17:54.44 | *** join/#debian dreamon (~dreamon@unaffiliated/dreamon) |
| 17:54.48 | jelly | ,i psad |
| 17:55.13 | jelly | what is psad? |
| 17:56.03 | greycat | is judd ever going to come back? |
| 17:56.24 | hanasaki | https://www.cipherdyne.org/psad/docs/manpages/psad.html |
| 17:57.00 | *** join/#debian alexandros_c_ (~quassel@unaffiliated/alexandros-c/x-1684531) |
| 17:57.01 | *** join/#debian alexandros_tab_ (~quassel@unaffiliated/alexandros-c/x-1684531) |
| 17:57.03 | jelly | hmph! |
| 17:57.05 | *** join/#debian freebench__ (~freebench@92.253.250.225) |
| 17:57.10 | *** join/#debian judd (~judd@unaffiliated/themill/bot/judd) |
| 17:57.15 | jelly | ,i psad |
| 17:57.18 | judd | Package psad (admin, optional) in buster/amd64: Port Scan Attack Detector. Version: 2.4.3-1.2; Size: 173.3k; Installed: 716k; Homepage: http://www.cipherdyne.org/psad/ |
| 17:57.44 | jelly | it comes back at least once a day |
| 17:58.12 | *** join/#debian Haudegen (~quassel@178.115.237.87.static.drei.at) |
| 17:58.42 | jelly | greycat, I could tell it to obey you when you ask it to rejoin #debian, if I figure out how |
| 17:59.10 | greycat | I made my bot respect an /invite as long as the invitation is for a channel that's on its approved list (configured in a file). |
| 17:59.32 | jelly | well let's see if that works here |
| 18:00.12 | jelly | hmph, if I tell it to part now it might forget about the desired channel presence |
| 18:00.38 | jelly | try inviting it next time it goes missing |
| 18:00.44 | greycat | ok |
| 18:00.56 | jelly | probably tomorrow, the way freenode connections have been behaving |
| 18:00.58 | Asterisco | jelly... |
| 18:01.23 | Asterisco | ....i've removed 187000 email from postfix queue!!! |
| 18:01.34 | jelly | good for you. |
| 18:01.43 | Asterisco | i've used postsuper -d ALL deferred |
| 18:01.52 | Asterisco | but when i start postfix... |
| 18:01.54 | greycat | sounds nuclear |
| 18:02.00 | jelly | it is |
| 18:02.04 | Asterisco | immediatly i've about 6000 new email |
| 18:02.23 | Asterisco | 2 mail postfix/error[10536]: 16EF5296BB: to=<pvnwyvascs@gmail.com>, |
| 18:02.25 | jelly | Asterisco, and that is why you need to figure out how they're entering the queue. |
| 18:02.31 | *** join/#debian d1cor (~d1cor@unaffiliated/d1cor) |
| 18:02.46 | Asterisco | i'm asking it |
| 18:02.46 | *** join/#debian Mister00X (~quassel@185.120.144.100) |
| 18:03.02 | Asterisco | this email <pvnwyvascs@gmail.com> |
| 18:03.05 | Asterisco | is relly strange |
| 18:03.09 | greycat | As you were advised before, look for the message ID (presumably 16EF5296BB) in your logs. Find the *first* place in the logs that word appears. |
| 18:03.15 | jelly | Asterisco, pick one queue id. 16EF5296BB for example. find _all_ the lines for that queue id, for the last 5-6 days. |
| 18:03.33 | greycat | *all* is better than *first* |
| 18:03.35 | jelly | Asterisco, grep is a nice command. |
| 18:03.49 | greycat | zgrep is also nice, if they are in a rotated/compressed log |
| 18:03.55 | jelly | its cousins zgrep and zfgrep, too |
| 18:04.08 | Asterisco | grep -R "16EF5296BB" /var/spool/postfix/ |
| 18:04.10 | Asterisco | right? |
| 18:04.16 | jelly | fuck no |
| 18:04.22 | Asterisco | how? |
| 18:04.27 | jelly | Asterisco, look at the logs. |
| 18:04.46 | *** join/#debian tgunr (~tgunr@dsl-dhcp-conrtxxahre-72-26-20-120.consolidated.net) |
| 18:05.05 | Asterisco | Jan 22 18:58:41 mail postfix/error[10532]: D1FDC3FC8B: to=<3kx5rbabe0@gmail.com>, relay=none, delay=433261, delays=432963/297/0/0.61, dsn=4.7.28, status=deferred (delivery temporarily suspended: host alt4.gmail-smtp-in.l.google.com[74.125.28.27] refused to talk to me: 421-4.7.28 [79.2.176.41] Our system has detected an unusual amount of 421-4.7.28 unsolicited mail originating from your IP address. To protect our 421-4.7.28 |
| 18:05.05 | Asterisco | users from spam, mail sent from your IP address has been temporarily 421-4.7.28 blocked. Please visit 421-4.7.28 https://support.google.com/mail/answer/81126 to review our Bulk 421 4.7.28 Email Senders Guidelines. x123si5067729pgx.61 - gsmtp) |
| 18:05.21 | jelly | Asterisco, what did we say about pasting in the channel? |
| 18:05.23 | Asterisco | is this the line incriminated |
| 18:05.34 | Asterisco | is only string :( |
| 18:05.45 | greycat | That is not the first log entry for this message. As you were told before, delay=433261 tells you how old this message is. |
| 18:05.58 | jelly | Asterisco, what you pasted does not have 16EF5296BB in it at all |
| 18:06.12 | Asterisco | greycat but i've deferret yet all messeges |
| 18:06.22 | greycat | ... |
| 18:06.24 | greycat | You are lying now. |
| 18:06.30 | greycat | 13:02 Asterisco> immediatly i've about 6000 new email |
| 18:06.30 | greycat | 13:02 Asterisco> 2 mail postfix/error[10536]: 16EF5296BB: |
| 18:06.30 | greycat | <PROTECTED> |
| 18:06.31 | *** kick/#debian [greycat!~debhelper@unaffiliated/debhelper] by debhelper (flood) |
| 18:06.39 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f199100821f02fffeaf6272.dip0.t-ipconnect.de) |
| 18:06.39 | jelly | Asterisco, pastebin the whole output of "grep 16EF5296BB /var/log/mail.log" |
| 18:06.45 | *** join/#debian greycat (~greg@209.142.155.49) |
| 18:06.48 | greycat | Worth it. |
| 18:06.56 | Asterisco | one moment |
| 18:07.04 | ratrace | greycat: omg this was priceless! :) |
| 18:07.42 | jelly | Asterisco, and you probably have older, rotated /var/log/mail.log* files. |
| 18:07.47 | Asterisco | <PROTECTED> |
| 18:07.54 | Asterisco | i pastebin the result |
| 18:07.56 | jelly | that's not what I sad. |
| 18:07.56 | Asterisco | one moment! |
| 18:08.09 | jelly | I said "grep 16EF5296BB /var/log/mail.log" |
| 18:08.11 | Asterisco | jelly tell me what i must do! |
| 18:08.14 | greycat | zgrep 16EF5296BB /var/log/mail.log* |
| 18:08.39 | jelly | the latest one for starters |
| 18:08.59 | Asterisco | i've deleted old mail.log |
| 18:09.04 | jelly | why |
| 18:09.09 | Asterisco | becouse i've the disk full! |
| 18:09.13 | Asterisco | 47gb of log |
| 18:09.31 | *** join/#debian hanasaki (~hanasaki@pool-71-179-12-157.bltmmd.fios.verizon.net) |
| 18:09.47 | greycat | But you said this message is brand sparkling new. |
| 18:09.48 | jelly | you should have first identified how the messages were entering your system |
| 18:10.07 | jelly | next time don't wipe logs |
| 18:10.31 | Asterisco | i know |
| 18:10.31 | greycat | If this message is new as you claim, then it should be fully contained in the logs. |
| 18:10.34 | jelly | Asterisco, pastebin the full output of "mailq", then |
| 18:10.48 | Asterisco | but if i've removed all messege from queue |
| 18:10.57 | Asterisco | why i revive other log error? |
| 18:11.01 | greycat | You said 6000 messages appeared in the queue AFTER YOU WIPED THE OLD ONES. |
| 18:11.01 | *** join/#debian Night-Shade (~TimF@ip5b40e3ae.dynamic.kabel-deutschland.de) |
| 18:11.10 | Asterisco | yes |
| 18:11.13 | jelly | Asterisco, stop asking new questions, do what I've asked you to |
| 18:11.16 | greycat | So they're all BRAND FUCKING NEW. |
| 18:11.32 | jelly | one thing at a time. |
| 18:11.44 | *** join/#debian RandomGuy90 (~RandomGuy@91.239.205.33) |
| 18:13.24 | *** join/#debian Souler (~Souler@user-5-173-234-249.play-internet.pl) |
| 18:13.33 | *** join/#debian beardy (~beardy@unaffiliated/beardy) |
| 18:14.27 | *** join/#debian ueax (~ueax@gateway/tor-sasl/ueax) |
| 18:14.29 | Asterisco | https://pastebin.com/zc5ttqBq |
| 18:14.32 | Asterisco | this is mailq |
| 18:15.15 | Asterisco | now postfix is stopped |
| 18:15.28 | greycat | Lots of bounces, as was prophesied. |
| 18:16.17 | Asterisco | what is the solution? |
| 18:16.39 | greycat | I'm curious about the ones that *aren't* bounces. The first 7. |
| 18:16.39 | *** join/#debian earthundead (~earthunde@188.170.77.233) |
| 18:16.57 | greycat | Pick one of those, and find it in the logs. |
| 18:17.19 | Asterisco | it's possible that are mail of my server |
| 18:17.56 | *** join/#debian Cheaterman (~cheaterma@unaffiliated/cheaterman) |
| 18:18.03 | greycat | I'm also looking at the timestamps on those 7, and they are all at __:__:01 or __:__:02. Like something is sending a message every minute. |
| 18:19.04 | greycat | Is "splash" a local user account? Does it have a crontab? Does it have any processes running? |
| 18:19.37 | Asterisco | ok... |
| 18:19.40 | ratrace | that mailq very much look compromised. question is only how |
| 18:19.50 | Asterisco | i've do root@flash:~# tail /var/log/mail.log| grep "B8BA9201BF" |
| 18:19.57 | Asterisco | nothing in log |
| 18:19.59 | greycat | Do not tail it. |
| 18:20.07 | greycat | You need to search the ENTIRE LOG. |
| 18:20.18 | jelly | Asterisco, grep B8BA9201BF /var/log/mail.log |
| 18:20.34 | ratrace | what they NEED to do is stop doing that and get competent sysadmin to look into this |
| 18:20.35 | Asterisco | the same |
| 18:20.35 | jelly | also, postcat -q B8BA9201BF (if it's still there) |
| 18:20.57 | ratrace | we're enabling all kinds of people who should NOT be running public servers to begin with. |
| 18:21.12 | jelly | Asterisco, wjat about this one: grep A8E9D218FB /var/log/mail.log |
| 18:21.16 | greycat | ratrace: I'm assuming the competent sysadmin left or never worked there in the first place, and they've only got this person. |
| 18:21.16 | ratrace | and then we get ddosed by their pwnt machines |
| 18:21.51 | Asterisco | https://pastebin.com/WnjnYu0J |
| 18:21.53 | Asterisco | is mine |
| 18:21.57 | Asterisco | is a script |
| 18:22.43 | Asterisco | but i think that is better remove from my script |
| 18:22.49 | jelly | and it generates a mail message that gets locally delivered |
| 18:22.59 | Asterisco | yes |
| 18:23.06 | Asterisco | i'm removing it |
| 18:23.15 | Asterisco | but the other messages? |
| 18:23.41 | *** join/#debian fflori (~fflori@host-79-54-236-42.retail.telecomitalia.it) |
| 18:23.53 | ratrace | what about those sent to random @gmail.com addresses |
| 18:23.54 | *** join/#debian shibboleth (~shibbolet@gateway/tor-sasl/shibboleth) |
| 18:24.00 | jelly | Asterisco, pastebin one of the older spams, postcat -q DBEA739B3C |
| 18:24.01 | greycat | When you say "i'm removing it", do you mean "I am disabling the cron job of user splash that's running every minute"? |
| 18:24.16 | Asterisco | no |
| 18:24.25 | Asterisco | i'm removing the script that send the mail |
| 18:24.32 | greycat | Please disable the cron job of user splash that is running every minute. |
| 18:24.36 | Asterisco | the cronjob is necessary for a project |
| 18:24.42 | greycat | *plonk* |
| 18:25.01 | jelly | Asterisco, what use is the cron job if you remove the script it runs? |
| 18:25.34 | Asterisco | if i remove mail() run the same |
| 18:25.48 | jelly | ok, ignore that |
| 18:25.50 | ratrace | is really curious what's behind door number DBEA739B3C that jelly already asked about |
| 18:25.54 | *** join/#debian tgunr (~tgunr@dsl-dhcp-conrtxxahre-72-26-20-120.consolidated.net) |
| 18:26.00 | Asterisco | is a script that take the whois of last dropped domain |
| 18:26.00 | jelly | Asterisco, pastebin one of the older spams, postcat -q DBEA739B3C |
| 18:26.30 | Asterisco | this is mine |
| 18:26.39 | ratrace | "mine"? |
| 18:26.47 | Asterisco | is the activation link |
| 18:26.58 | Asterisco | of a new user of another site |
| 18:27.05 | ratrace | to random generated @gmail.com addresses? |
| 18:27.10 | jelly | Asterisco, DO NOT EXPLAIN WHAT IT IS, PASTEBIN THE DAMNED THING |
| 18:27.13 | Asterisco | mmmm |
| 18:27.24 | Asterisco | i think that someone use the form |
| 18:27.33 | Asterisco | to send random email! :\ |
| 18:27.37 | Asterisco | thank you |
| 18:27.46 | Asterisco | know we know where is the problem! |
| 18:27.55 | ratrace | pray tell |
| 18:27.57 | Asterisco | Date: Sun, 17 Jan 2021 18:29:52 +0100 (CET) |
| 18:27.57 | Asterisco | Gentile Ap5jlm H8g6p2, |
| 18:27.57 | Asterisco | per completare la registrazione e diventare un membro della |
| 18:27.57 | Asterisco | Splash Community, dovrai collegarti al seguente indirizzo: |
| 18:28.07 | jelly | pastebin! |
| 18:28.13 | jelly | the whole thing! |
| 18:28.14 | Asterisco | of course |
| 18:28.17 | Asterisco | excuseme! |
| 18:28.48 | Asterisco | take a look |
| 18:28.49 | Asterisco | https://pastebin.com/gdKQCqsv |
| 18:28.54 | Asterisco | BASTARD! |
| 18:28.55 | Asterisco | grrr |
| 18:29.04 | jelly | no commentary, please |
| 18:29.12 | Asterisco | now i can find the ip that joke with my registration form |
| 18:29.38 | Asterisco | someone try to damnage my server |
| 18:29.59 | Asterisco | now i'm relly curious to know who is |
| 18:30.01 | jelly | X-Mailer: PHP/7.3.19-1~deb10u1 |
| 18:30.08 | ratrace | From: no-reply@splash.it Reply-To: fzh4b9vsyb@gmail.com this is wrong |
| 18:30.14 | jelly | the source of the mail is a web app in php. |
| 18:30.23 | Asterisco | no-reply is my script |
| 18:30.29 | Asterisco | of course |
| 18:30.33 | ratrace | I understand that. why do you put recipient under Reply-to |
| 18:30.37 | Asterisco | i'm searching the log of this page |
| 18:31.02 | Asterisco | is a registration form |
| 18:31.17 | jelly | Asterisco, inspect access.log of your web server at around Sun, 17 Jan 2021 18:29:52 +0100 (CET) |
| 18:31.20 | Asterisco | nothing check no-reply@splash.it |
| 18:31.30 | ratrace | what? |
| 18:31.30 | Asterisco | is a script that i wrote about 15years old |
| 18:31.48 | Asterisco | of course! |
| 18:31.51 | jelly | Asterisco, disable that form ASAP. That's where messages originate. |
| 18:32.42 | jelly | than go about limiting access to it and fixing it. Usually registration forms need to be protected with a CAPTCHA |
| 18:32.59 | ratrace | better solution: take an axe to the network cable. |
| 18:33.14 | ratrace | then pay a professional sysadmin to set up the server. |
| 18:33.16 | jelly | we can discuss how broken that mail message is later :-) |
| 18:33.37 | jelly | ratrace, that's hardly constructive if they want to keep the customer |
| 18:33.56 | jelly | the ax I mean. |
| 18:34.00 | greycat | Would you want to be a customer of Asterisco? |
| 18:34.11 | ratrace | I don't care about their customer. I care about not being bruteforced from their machine as it gets subsumed into a botnet. |
| 18:34.13 | jelly | they don't need a sysadmin, just a web developer |
| 18:34.22 | jelly | well they need both. |
| 18:34.28 | Asterisco | is the first time that i recive this type of attack |
| 18:34.47 | Asterisco | naturally someone would my death |
| 18:34.49 | ratrace | for a very stretched meaning of the word "attack" |
| 18:34.53 | jelly | but a competent web dev would be the one to not put a 1996-style contact form on a public web in 2021 |
| 18:35.19 | Asterisco | jelly is a form that i would redo |
| 18:35.27 | ratrace | I knew jelly was a form! |
| 18:35.33 | Asterisco | but it's an old project |
| 18:36.13 | jelly | just chmod 0 it now, wipe the other messages going to [a-z]*@gmail.com, and you're probably done with the immediate problem |
| 18:36.58 | *** part/#debian diogenes_ (~diogenes_@212.0.201.154) |
| 18:37.13 | ratrace | postsuper -d the whole thing, the only way to be sure |
| 18:37.16 | ratrace | !ripley method |
| 18:37.16 | dpkg | "I say we take off and nuke the entire site from orbit. It's the only way to be sure." -- Ellen Ripley |
| 18:37.39 | jelly | but why |
| 18:38.11 | jelly | mailq|grep -v '('|grep -B1 -E '^ * splash@mail.splash.it'|awk '/^[0-9A-F].* MAILER-DAEMON/{print $1}'|tr -d '*!'|postsuper -d - 2>&1 |tail -n1 |
| 18:38.17 | jelly | nukes bounces |
| 18:38.45 | jelly | you probably don't want to know why I have the oneliner handy :-\ |
| 18:38.55 | ratrace | I can imagine :) |
| 18:38.57 | jelly | (because customers are idiots) |
| 18:39.00 | ratrace | I just postsuper -d |
| 18:39.09 | jelly | I do NOT lose mail. |
| 18:39.13 | ratrace | Imma BofH. |
| 18:39.18 | ratrace | (and proud of it) |
| 18:39.32 | Asterisco | now i can remove that -d |
| 18:39.35 | *** join/#debian ax562 (~ax562@unaffiliated/ax562) |
| 18:39.36 | Asterisco | : ( |
| 18:40.11 | jelly | and to remove the non-bounces from one sender, similar but simpler |
| 18:40.38 | jelly | mailq|awk '/^[A-F0-9].* splash@mail\.splash\.it/{print $1}'|tr -d '*!'|postsuper -d - 2>&1 | tail -n4 |
| 18:40.49 | Asterisco | postsuper: Deleted: 725 messages |
| 18:40.50 | *** join/#debian Jerrynicki (~niklas@p200300f57704b400c42e86ca5e1af9f4.dip0.t-ipconnect.de) |
| 18:41.01 | ratrace | yeet! |
| 18:41.40 | jelly | Asterisco, have you disabled the form? |
| 18:41.49 | Asterisco | not yet |
| 18:41.55 | jelly | do that first. |
| 18:41.59 | Asterisco | one moment |
| 18:42.08 | jelly | you eliminate the source first, then do cleanup |
| 18:42.12 | Asterisco | now i've no mail |
| 18:42.58 | *** join/#debian Haudegen (~quassel@178.115.237.87.static.drei.at) |
| 18:42.58 | ratrace | achievement unlocked? |
| 18:43.01 | *** join/#debian DaNeenjah (~DaNeenjah@2600:1005:b10a:713e:725b:c5d3:2050:c4b1) |
| 18:45.11 | jelly | that'll be 200⬠:-) |
| 18:45.57 | ratrace | no joke. pay up or we'll return all that mail back into the queue. |
| 18:46.15 | *** join/#debian rnm (~rnm@unaffiliated/rnm) |
| 18:46.19 | *** join/#debian madmattco (~kimjongil@znc.uwanagetbottldcunt.com) |
| 18:46.26 | *** join/#debian JohnML (~john1@ip-37-201-129-30.hsi13.unitymediagroup.de) |
| 18:49.27 | Asterisco | 2021/01/17 18:48:40 [error] 1609#1609: *8030661 connect() to unix:/run/php/php7.3-fpm.sock failed (11: Resource temporarily unavailable) while connecting to upstream, client: 104.197.244.189, server: splash.it, request: "POST /community/registrazione/registrazione.htm HTTP/1.1", upstream: "fastcgi://unix:/run/php/php7.3-fpm.sock:", host: "www.splash.it" |
| 18:49.34 | Asterisco | areabout 5 ip address |
| 18:49.58 | Asterisco | ^_^ |
| 18:50.24 | *** join/#debian SubOptimal (~SubOptima@2a02:908:2540:f4c0:9c09:5804:826f:e63c) |
| 18:50.34 | ratrace | what's wrong with your fpm |
| 18:50.41 | jelly | it's out of breath |
| 18:50.50 | Asterisco | i've correct it |
| 18:50.58 | jelly | Asterisco, and _that's_ what you could set up fail2ban on. |
| 18:51.14 | Asterisco | but they have overloaded the server |
| 18:51.44 | Asterisco | I was panicked |
| 18:52.07 | jelly | that much was obvious |
| 18:52.14 | Asterisco | i think i could set fail2ban for those who always want to reload the same page |
| 18:52.52 | jelly | there are probably better/easier ways to set up throttling in your web server |
| 18:53.51 | jelly | I try to stay out of web hosting these days so I don't know actual best practice tools |
| 18:54.00 | *** join/#debian BCMM (~BCMM@unaffiliated/bcmm) |
| 18:54.11 | *** join/#debian diniwed (~gavron@ool-44c21938.dyn.optonline.net) |
| 18:55.28 | *** join/#debian chance2105 (~chance210@2600:1700:8d50:6db0::2a) |
| 18:55.38 | jelly | looks at view-source:http://www.splash.it/community/registrazione/ for the lulz |
| 18:56.23 | ratrace | ogawd ogawd ogawd ogawd!!!! |
| 18:57.00 | jelly | Asterisco, you were only so lucky they didn't get you earlier because it's all custom code |
| 18:57.27 | ratrace | custom code isn't an issue, if by that you mean it's not one of the well known CMS things |
| 18:57.40 | Asterisco | if they that earlier... |
| 18:57.51 | jelly | but there are automated or semi-automated scripts that can target any kind of static submit forms these days |
| 18:57.55 | Asterisco | i could find the problem first :\ |
| 18:58.37 | *** join/#debian n4dir (~n4dir@mue-88-130-56-055.dsl.tropolys.de) |
| 18:59.20 | Asterisco | are italians |
| 18:59.41 | Asterisco | it's possible that are so stupid? |
| 19:00.05 | sney | that's a hell of a conclusion. |
| 19:00.07 | ratrace | that's raciss! |
| 19:00.40 | jelly | no, anyone can be stupid regardless of their national affiliation |
| 19:01.35 | Asterisco | it's some concorrent |
| 19:02.15 | ratrace | quietly puts 79.2.176.41 into the "permaban" ipset ansible config.... runs the playbook on the server fleet. |
| 19:02.34 | Asterisco | it0s also possible that use an italian botnet |
| 19:02.47 | Asterisco | and in italian a lot of ip address are dynamic |
| 19:03.05 | moldorcoder7 | hi does anybody knows why this redirection within a debian 9 docker container running on debian 9 host doesnt work , while it works on arch linux : https://bpa.st/DFBAO |
| 19:03.14 | *** join/#debian koniu (~koniu@gateway/tor-sasl/koniu) |
| 19:03.20 | *** join/#debian dob1 (~dob1@unaffiliated/dob1) |
| 19:03.45 | jelly | ratrace, I'm amazed it's not on any BL! |
| 19:04.22 | ratrace | jelly: incredible indeed, lol |
| 19:05.03 | greycat | According to Asterisco's in-channel pastes, it's blocked by google. |
| 19:05.04 | jelly | Asterisco, spam and phishing operations are now doing localizations. |
| 19:05.17 | ratrace | greycat: throttled |
| 19:05.25 | jelly | google does automated throttling really early |
| 19:05.39 | jelly | it also lets you in soon after you stop |
| 19:05.56 | Asterisco | jelly infact |
| 19:06.11 | Asterisco | is really strange this attack from my same nation |
| 19:06.12 | ratrace | but it's not unwise to throttle toward big Freemail providers at your end |
| 19:06.13 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f199100821f02fffeaf6272.dip0.t-ipconnect.de) |
| 19:06.22 | *** join/#debian tgunr (~tgunr@dsl-dhcp-conrtxxahre-72-26-20-120.consolidated.net) |
| 19:07.39 | ratrace | Asterisco: aruba.it is often a guest on our dynamic ban lists, due to attempted abuse of SMTP, IMAP and POP3 |
| 19:07.44 | jelly | Asterisco, I've seen _really_ well written phishing spams in Croatian; someone has to be paying actual people to translate and proofread those |
| 19:07.51 | ratrace | so much so that I've actually permanently banned the whole company ASN |
| 19:08.06 | ratrace | they're free to contact us, by mail, to delist....... *giggitty* |
| 19:08.07 | Asterisco | no |
| 19:08.20 | Asterisco | the email that they send to gmail user |
| 19:08.33 | Asterisco | not is spam |
| 19:08.46 | jelly | ratrace, I've had fun trying to message a dns admin for a domain that blocks our recursors :-) |
| 19:08.51 | *** join/#debian ax56234 (~NickServ@unaffiliated/ax56234) |
| 19:08.53 | Asterisco | they would only ban my server from gmail |
| 19:09.33 | *** join/#debian LeoTh3o (~th3o@delibird.phoxden.net) |
| 19:10.15 | Asterisco | it's possible thake the ip occurrency of a log? |
| 19:11.41 | ratrace | can you rephrase that? |
| 19:13.11 | Thete | is there a way to search experimental with apt-cache? |
| 19:13.23 | sney | moldorcoder7: debian 10 switched to the nft backend for iptables (and update-alternatives can be used to switch back to the -legacy behavior), but 9 should still be regular iptables, unless whoever made your docker image did something "clever" |
| 19:13.38 | *** join/#debian Mister00X (~quassel@185.120.144.100) |
| 19:14.48 | moldorcoder7 | sney, ha so i need the container and host to be matching in this case ? |
| 19:15.14 | greycat | ... are you even *allowed* to do firewall stuff inside a container? |
| 19:15.35 | sney | moldorcoder7: you'd have to ask #docker for an authoritative answer to that, I don't know anything about their networking internals |
| 19:16.16 | moldorcoder7 | greycat, yes if you add the NET_ADMIN cap (and privilege flag) |
| 19:16.19 | *** part/#debian nickodd (~nickodd@unaffiliated/nickodd) |
| 19:16.23 | moldorcoder7 | sney, thanks i think thats the issue |
| 19:16.29 | sney | but, presuming iptables in the container is talking to the host kernel, they probably do need to match |
| 19:16.51 | Thete | nevermind, I remember command |
| 19:16.56 | sney | https://wiki.debian.org/nftables has some more info |
| 19:18.01 | *** mode/#debian [+l 1197] by debhelper |
| 19:19.35 | *** join/#debian fb_ (~freebench@92.253.250.225) |
| 19:19.40 | *** part/#debian Thete (~thete@unaffiliated/thete) |
| 19:21.01 | *** join/#debian well_laid_lawn (~Jean-luc@61-68-136-36.tpgi.com.au) |
| 19:22.43 | *** join/#debian banox (~banox@37.120.203.156) |
| 19:24.02 | *** join/#debian \\Mr_C\\ (~mrc@cpe-75-187-191-230.neo.res.rr.com) |
| 19:33.02 | *** join/#debian sponix (~sponix@68.171.186.43) |
| 19:34.19 | *** join/#debian geowiesnot (~user@i15-les02-ix2-87-89-181-157.sfr.lns.abo.bbox.fr) |
| 19:35.35 | *** join/#debian ax56234 (~NickServ@unaffiliated/ax56234) |
| 19:36.11 | *** join/#debian gelignite (~gelignite@55d48349.access.ecotel.net) |
| 19:36.15 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f199100821f02fffeaf6272.dip0.t-ipconnect.de) |
| 19:37.54 | *** join/#debian Scotty_Trees (~Scotty_Tr@162-234-179-169.lightspeed.brhmal.sbcglobal.net) |
| 19:42.47 | *** join/#debian Sideburns (~Sideburns@2001:1715:9d96:61e0:eee4:65cc:317f:986e) |
| 19:45.55 | *** join/#debian Ekis (~Ekis@cpe74da881c916d-cm30b7d4bb2eb0.cpe.net.cable.rogers.com) |
| 19:45.55 | *** join/#debian jellyknight (~gelignite@55d4575c.access.ecotel.net) |
| 19:49.03 | moldorcoder7 | sney, thanks a thousands times |
| 19:49.06 | moldorcoder7 | that was it |
| 19:49.14 | sney | np |
| 19:49.16 | *** join/#debian beencubed (~beencubed@209.131.238.248) |
| 19:49.57 | jhutchins | You might recover those images with a reinstall of the package they're from. |
| 19:50.04 | jhutchins | moldorcoder7: ^ |
| 19:50.43 | *** join/#debian seoneal97 (~Thunderbi@2601:2c5:4400:3110:7a5:4016:e97c:835a) |
| 19:51.48 | *** join/#debian Texou (~Texou@unaffiliated/texou) |
| 19:56.14 | *** join/#debian galex-713 (~quassel@portable.galex-713.eu) |
| 19:56.22 | *** join/#debian aidanpr (~aidanpr@205.185.113.93) |
| 20:00.41 | *** join/#debian platvoeten (~platvoete@185.238.52.74) |
| 20:05.05 | *** join/#debian \\Mr_C\\ (~mrc@cpe-75-187-191-230.neo.res.rr.com) |
| 20:06.23 | *** join/#debian uvolmer (~uvolmer@2001-4dd0-212c-82-5acc-6b0b-da9c-d52c.ipv6dyn.netcologne.de) |
| 20:06.24 | *** join/#debian asymptotically (~asymptoti@gateway/tor-sasl/asymptotically) |
| 20:07.44 | *** join/#debian ax5623 (~ax562@unaffiliated/ax562) |
| 20:10.24 | *** join/#debian galex-713 (~quassel@portable.galex-713.eu) |
| 20:11.09 | *** join/#debian asymptotically (~asymptoti@gateway/tor-sasl/asymptotically) |
| 20:12.45 | *** join/#debian wodencafe (wodencafe@woden.cafe) |
| 20:13.20 | *** join/#debian ax56234 (~NickServ@unaffiliated/ax56234) |
| 20:14.10 | *** join/#debian ax56234 (~NickServ@unaffiliated/ax56234) |
| 20:15.11 | moldorcoder7 | sney, looks like nft tables are private to the container, while legacy tables are shared between host and container , do you have any idea why by any chance ? |
| 20:17.34 | *** join/#debian peterrooney (~peter@2604:3d08:1582:ab00:222:4dff:fe69:d6ed) |
| 20:21.50 | *** join/#debian gigetoo (~gigetoo@c83-253-52-84.bredband.comhem.se) |
| 20:22.05 | *** join/#debian berkhan (~berkhan@78.171.231.90) |
| 20:23.05 | *** part/#debian berkhan (~berkhan@78.171.231.90) |
| 20:25.25 | *** join/#debian scruloose (scruloose@gateway/vpn/privateinternetaccess/scruloose) |
| 20:26.04 | *** join/#debian u0m3 (~u0m3@gateway/tor-sasl/u0m3) |
| 20:27.39 | *** join/#debian berkhan (~berkhan@78.171.231.90) |
| 20:27.46 | *** join/#debian pokota (~pokota@nw-esr1-72-49-96-28.fuse.net) |
| 20:28.07 | *** join/#debian otisolsen70_ (~otisolsen@xd4ed80b5.cust.hiper.dk) |
| 20:28.21 | *** part/#debian berkhan (~berkhan@78.171.231.90) |
| 20:29.13 | csgeek | i'm trying to create a package in debian. I have the control, changelog, compat and created a rules file that installs all the needed file to DEBIAN/usr/local/<package> but when I try to run debuild it complains about missing files which exist and an empty binary package which results in nothing actually being created. |
| 20:29.18 | csgeek | Any ideas what I should look at? |
| 20:31.12 | alexrelis[m] | If I notice a bug in a package, but when I report the bug there's already an existing bug report that is the same issue, is it improper etiquette to reply to that thread saying you're experiencing the same issue. In other words, is it rude to bump a bug report? |
| 20:31.18 | *** join/#debian milkt_ (~debian@gateway/tor-sasl/milkt) |
| 20:31.23 | csgeek | this is my rules file: https://gist.github.com/safaci2000/dda9fd6f8581c109edf7c91234514177 |
| 20:31.24 | alexrelis[m] | ?* |
| 20:33.13 | Mister00X | alexrelis[m]: I dont think its rude, reportbug will even ask you if there is allready a bug |
| 20:34.08 | Mister00X | alexrelis[m]: https://www.debian.org/Bugs/Reporting.en.html |
| 20:34.15 | *** join/#debian galex-713 (~quassel@portable.galex-713.eu) |
| 20:34.57 | *** join/#debian coot (~coot@37.30.55.132.nat.umts.dynamic.t-mobile.pl) |
| 20:35.07 | sney | moldorcoder7: nope! but I would guess that it was intentional, to allow more fine-tuning. netfilter.org probably explains it somewhere. |
| 20:35.41 | moldorcoder7 | sney, yeah , just small discovery of the day :) |
| 20:35.43 | alexrelis[m] | Mister00X: Thanks. |
| 20:35.50 | *** join/#debian Rog99 (~Rog99@45.56.142.143) |
| 20:35.57 | Brigo | alexrelis[m], it is not, it is helpfull just to know somebody else has the some problem |
| 20:36.20 | alexrelis[m] | Also, how do I attach a gpg signature to my email with reportbug? |
| 20:36.45 | Brigo | csgeek, you could ask in #mentors, they know more about this kind of stuff. |
| 20:37.10 | greycat | If you find a bug report from someone else who had the same problem, it may contain a workaround, or it may have a bunch of troubleshooting steps that have already been tried, which will save you having to repeat those. Or, which will confirm that you have the same bug, if you repeat them and get the same errors. |
| 20:37.25 | moldorcoder7 | sney, my 2c would be some cgroup filtering on rules |
| 20:38.05 | oxek | what do I answer here during debian configuration? https://0x0.st/-ihi.png Systemwide-readable home directories sound like a bad idea. |
| 20:38.53 | Brigo | csgeek, are you sure that BASE="./" is a good idea? |
| 20:39.25 | sney | oxek: depends on your system and your threat model. how many people are going to use it? |
| 20:39.37 | greycat | system-readable home dirs are the traditional unix way, because you share the computer with your coworkers or colleagues, and you may want to read their .profile for inspiration or whatever |
| 20:39.47 | oxek | sney: I will be the only physical human |
| 20:39.50 | greycat | if you want to hide your stuff from your fellow users, you can easily change the permissiosn on your own directory |
| 20:40.21 | sney | oxek: if it's just you and root and some service accounts, leave the default |
| 20:41.13 | oxek | and presumably, if I ever want to create some other user account for a family member, then all I'd need to do is change permissions on /home/myusername? |
| 20:41.26 | sney | yep |
| 20:41.31 | oxek | ok, thank you |
| 20:41.37 | greycat | or leave the permissions alone, because what are you trying to hide? |
| 20:41.46 | oxek | passwords in txt files |
| 20:41.48 | greycat | is your porn in your home dir? |
| 20:41.56 | oxek | I know it's bad practice, but it's what I have |
| 20:41.59 | greycat | a file with passwords in it is already going to be 600 |
| 20:42.25 | oxek | ideally it would be, but I know I have all sorts of files all over the place with various permissions over the years |
| 20:42.31 | greycat | e.g. that's why your ~/.ssh/id_rsa has different perms from id_rsa.pub |
| 20:42.36 | HelloShitty | Hello. Is there any common place where I can look for available switches for ./configure when compiling programs from source? |
| 20:42.45 | csgeek | Will do. Thanks Brigo |
| 20:42.47 | greycat | ./configure --help |
| 20:42.48 | sney | HelloShitty: ./configure --help |
| 20:42.56 | HelloShitty | ok, thanks. Will try |
| 20:43.02 | Brigo | csgeek, np, good luck. |
| 20:43.11 | sney | (with |less, for best results) |
| 20:43.14 | oxek | (as long as ./configure has a --help flag) |
| 20:43.26 | greycat | if it's a GNU autoconf configure script, it will |
| 20:43.30 | csgeek | when you say mentors, is that a #debian-mentors ? |
| 20:43.44 | oxek | csgeek: probably on OFTC not freenode |
| 20:43.45 | sney | csgeek: there is, on OFTC (note, right now you are on freenode) |
| 20:43.49 | greycat | !mentors |
| 20:43.49 | dpkg | extra, extra, read all about it, mentors is the system the Debian project uses to train new people to become Debian Developers or Debian Maintainers and get their packages into the Debian archive. Ask me about <nmg>. http://lists.debian.org/debian-mentors/ http://mentors.debian.net/ #debian-mentors on irc.debian.org (irc.oftc.net). |
| 20:44.13 | Brigo | csgeek, right, they are in another irc network, i forgot about that. Sorr. |
| 20:44.21 | csgeek | yup. I can switch servers it's fine. I've been on IRC for ages.. Debian packaging.. not so much. :) |
| 20:44.28 | greycat | IIRC #debian-mentors is for packages trying to be included in Debian (so your usr/local/... is right out), and #packaging is for anything else |
| 20:44.43 | *** join/#debian StyXman_ (~mdione@grulic/root/StyXman) |
| 20:45.14 | *** join/#debian Agent (~Agent@FlexWiki/director/agent) |
| 20:46.30 | HelloShitty | thank you greycat and sney |
| 20:47.13 | *** join/#debian gonification (~gonificat@unaffiliated/gonification) |
| 20:47.54 | HelloShitty | One more question: both taproot an shcnorr sigs are alredy implemented and active in this 0.21 version? |
| 20:49.38 | nkuttler | HelloShitty: i think you want #bitcoin ? |
| 20:52.27 | *** join/#debian Peyam (~Peyam@c83-250-236-236.bredband.comhem.se) |
| 20:52.29 | Peyam | hi |
| 20:52.58 | Peyam | I remember some years ago that you could do for instance " ps **" to print the 'man ps' |
| 20:53.07 | Peyam | is it still the case? |
| 20:53.21 | Peyam | or am I wrong? |
| 20:53.23 | greycat | you are remembering something *very* incorrectly |
| 20:53.44 | Peyam | I could swear that it was like that |
| 20:53.52 | Peyam | it was something with stars anyway |
| 20:53.55 | greycat | ** does a recursive filename expansion in some shells ... I don't know any where it puts "man " in front of the first word |
| 20:54.10 | *** join/#debian cakeface (~cakeface@h96-60-254-12.cncrtn.dsl.dynamic.tds.net) |
| 20:54.16 | Peyam | no no |
| 20:54.29 | cakeface | anyone use Citrix Workspace and get it to run/connect without error |
| 20:54.37 | Peyam | I remember that 'man ps' was equavelent to 'ps **' |
| 20:57.21 | Peyam | maybe a BSD syntaxt |
| 20:57.55 | cakeface | Secure by Default |
| 20:58.22 | greycat | I'm not aware of any shells that turn ** into "reverse man" in bsd either. |
| 20:58.34 | greycat | it's far more likely you're just remember wrong |
| 20:58.38 | greycat | +ing |
| 20:59.50 | Peyam | https://youtu.be/B2ly0I4Uz7o?t=179 |
| 21:00.26 | cakeface | RICKROLLED! |
| 21:00.29 | cakeface | that wasnt nice. |
| 21:00.49 | cakeface | :P jk |
| 21:02.13 | TheLemonMan | that's not a man page, that's the command help text |
| 21:02.21 | TheLemonMan | the same you probably get with `ps --help` |
| 21:02.30 | ratrace | error: unsupported option (BSD syntax) |
| 21:04.18 | *** part/#debian cakeface (~cakeface@h96-60-254-12.cncrtn.dsl.dynamic.tds.net) |
| 21:04.28 | ratrace | you get the same if you use "Peyam" instead of the asterisks |
| 21:06.22 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f199100821f02fffeaf6272.dip0.t-ipconnect.de) |
| 21:07.38 | greycat | you could conceivably get the help output if you change dir to an empty directory, and then touch -- --help, and then run ps * (or ** or *** ...) |
| 21:08.01 | *** mode/#debian [+l 1191] by debhelper |
| 21:08.25 | greycat | but under no circumstances would you get the man command |
| 21:08.42 | *** join/#debian galex-713 (~quassel@portable.galex-713.eu) |
| 21:10.33 | Peyam | greycat, yes I see now. It is not. |
| 21:11.37 | Peyam | the way he does is very convenient. You see the flags without lot of text |
| 21:11.58 | *** join/#debian store_scarecrow (~Andrew_00@host-74.91.78.101.bpsnetworks.com) |
| 21:13.34 | *** join/#debian pokota (pokota@nw-esr1-72-49-96-28.fuse.net) |
| 21:14.38 | *** join/#debian TulaZula (TulaZula@gateway/vpn/privateinternetaccess/tulazula) |
| 21:16.14 | *** join/#debian ndegruchy (~nathan@fsf/member/ndegruchy) |
| 21:19.18 | *** join/#debian kriger (~norge@unaffiliated/kriger) |
| 21:19.58 | *** join/#debian zyweo (~tt@unaffiliated/zyweo) |
| 21:20.10 | oxek | should I always run 'apt-get upgrade' before 'apt-get dist-upgrade' or can I just run 'apt-get dist-upgrade' directly? |
| 21:22.43 | *** part/#debian miguel_clean (~Miguel@89-72-187-203.dynamic.chello.pl) |
| 21:22.44 | nkuttler | oxek: are you upgrading from stable to stable? |
| 21:23.24 | nkuttler | oxek: https://www.debian.org/releases/stable/amd64/release-notes/ch-upgrading.en.html#upgradingpackages |
| 21:24.09 | oxek | nkuttler: stable to stable, yes |
| 21:24.20 | oxek | or... oldoldstable to oldstable |
| 21:24.25 | oxek | and oldstable to stable |
| 21:25.16 | *** join/#debian altker128 (~vr@75.81.147.59) |
| 21:25.35 | CommunistWolf | why do we make houses out of things that dissolve in the rain? it seems like a huge oversight |
| 21:25.52 | CommunistWolf | oops,. wrong channel |
| 21:26.03 | *** join/#debian Vatum (~Votum@188.4.165.142.dsl.dyn.forthnet.gr) |
| 21:26.06 | altker128 | Logging question here. Have a number of Debian servers, would like to use rsyslog to collect to a single rsyslog server. Any issues with having systemd write to syslog and have rsyslog(client) read from here and send to the remote server? |
| 21:26.32 | altker128 | And yes, I'm aware that journalctl can be sent remotely. Looking into greylog or elk for log visualization, managment, etc |
| 21:26.47 | Vatum | my /sys/class/backlight doesn't contain anything for some reason and i cant change my backlight (either with the keyboard keys or xbacklight or other tools) |
| 21:26.57 | oxek | nkuttler: thanks, https://www.debian.org/releases/stable/amd64/release-notes/ch-upgrading.en.html#minimal-upgrade says upgrade first and then dist-upgrade |
| 21:27.05 | Vatum | how do i generate those? I read online this kernel boot parameter might help acpi_backlight=vendor |
| 21:27.18 | altker128 | CommunistWolf: Does seem like an oversight. Are you talking about wood? |
| 21:27.33 | ratrace | altker128: no, that's the usual way of doing it. you could, if you wanted, use journald remote fetching functionality, but..... |
| 21:27.44 | altker128 | ratrace: Yeah, enough said :) |
| 21:27.54 | oxek | CommunistWolf: what's the right channel for such a question?? |
| 21:28.16 | altker128 | ratrace: Have you used any of the "prettifier" things like greylog? Worth it? |
| 21:28.18 | ratrace | altker128: keep in mind that rsyslog can now do TLS |
| 21:28.27 | ratrace | altker128: I haven't. |
| 21:29.48 | *** join/#debian nckx (~nckx@tobias.gr) |
| 21:29.56 | *** join/#debian nsrafk (~inkognito@unaffiliated/nsrafk) |
| 21:31.08 | CommunistWolf | there's a ##DIY and a bunch of social ones. blockwork, wood, cement all need protection. so do bricks, after a while |
| 21:31.58 | ratrace | hrm... am I misunderstanding what rsync's --chown is supposed to do? I ran rsync as root (because reasons) between two servers and wanted to force uid:gid ownership on files, but rsync -crvi --exclude=/somefile remote:/path/to/ /local/path/to/ didn't chown the files.... |
| 21:34.08 | *** join/#debian fjavier (~fjavier@170.253.44.250) |
| 21:36.24 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f199100821f02fffeaf6272.dip0.t-ipconnect.de) |
| 21:37.06 | greycat | you didn't show a --chown=... option in your question |
| 21:37.58 | ratrace | indeed, I missed it here. not in the actual attempt. |
| 21:38.24 | greycat | I've never used it, but the man page's description seems clear enough. |
| 21:38.45 | ratrace | rsync -crvni --exclude=/config.php --chown=ag_77:ag_77 webdev:/srv/sites/template2/ /srv/sites/ag_77/domain.tld/ |
| 21:38.58 | ratrace | is what I actually ran, and then again without -n |
| 21:39.25 | *** join/#debian caioau (~caioau@185.225.17.3) |
| 21:39.34 | greycat | If you ran it as root locally, I'd expect the files to end up owned by ag_77 locally. If you ran it as ratrace locally, then they'd be owned by ratrace. |
| 21:39.47 | ratrace | the files it copied (those with actual content changes) ended up owned by root:root |
| 21:41.28 | *** join/#debian tgunr (~davec@dsl-dhcp-conrtxxahre-72-26-20-120.consolidated.net) |
| 21:41.31 | altker128 | ratrace: Did you look into -av ? |
| 21:41.55 | ratrace | altker128: -v just displays stuff I don't need because I run -i and -a is explicitly NOT something I want to do here |
| 21:42.15 | greycat | Hmm, I did this: sudo mkdir /tmp/dest; rsync --chown=1:1 /tmp/src/ /tmp/dest/ |
| 21:42.40 | greycat | Ah, damn it, I missed the second sudo. |
| 21:42.56 | greycat | OK, with the second sudo, it worked for me. |
| 21:43.56 | greycat | I also added -a. Wow, I'm just failing all over the place today, pasting the wrong commands. |
| 21:44.05 | greycat | unicorn:~$ sudo mkdir -p /tmp/dest; sudo rsync -a --chown=1:1 /tmp/src/ /tmp/dest/ |
| 21:44.10 | greycat | that's the one that worked for me |
| 21:44.16 | altker128 | I usually use -rav |
| 21:44.22 | ratrace | <PROTECTED> |
| 21:45.07 | altker128 | err. yeah :) |
| 21:46.12 | ratrace | ffs.... for some reason I can't get it to chown the files..... numeric UID:GID or symbolic, they end up owned by root |
| 21:46.57 | greycat | are you writing to a real file system? |
| 21:48.06 | ratrace | greycat: ZFS |
| 21:48.18 | ratrace | I mean, I can chown manually after rsync just fine |
| 21:48.32 | greycat | then I don't know .. you could ask #rsync |
| 21:51.47 | ratrace | gotcha! you _need_ to also include -o and -g (which is implied in -a, which is why it worked for you) |
| 21:52.36 | ratrace | but that's not mentioned in the manpage for the --chown option. it IS mentioned for the --usermap option for which (and --groupmap) --chown is a shorthand. |
| 21:53.13 | greycat | You are in a maze of twisty options, all interlinked. |
| 21:53.44 | ratrace | indeed I am. now all I need is a damn grue. |
| 21:54.02 | *** join/#debian ccrr10 (~ccrr10@host-87-21-146-149.retail.telecomitalia.it) |
| 21:54.50 | ratrace | rsync -crigo --exclude=/.... --delete remote:/path/to/ /local/path/to/ and that's it for today's adventures in the Zork server. |
| 21:56.16 | *** join/#debian n4dir (~n4dir@mue-88-130-56-055.dsl.tropolys.de) |
| 22:00.53 | *** join/#debian SubOptimal (~SubOptima@2a02:908:2540:f4c0:9c09:5804:826f:e63c) |
| 22:02.55 | *** join/#debian u0m3 (~u0m3@gateway/tor-sasl/u0m3) |
| 22:05.00 | *** join/#debian qin (~qin@unaffiliated/soalokin) |
| 22:08.02 | *** mode/#debian [+l 1185] by debhelper |
| 22:09.51 | *** join/#debian ccrr10_ (~ccrr10@host-87-21-146-149.retail.telecomitalia.it) |
| 22:15.05 | *** join/#debian galex-713_ (~quassel@37.169.14.235) |
| 22:19.30 | *** join/#debian dvs (~hibbard@cwv.teksavvy.com) |
| 22:21.10 | *** join/#debian galex-713 (~quassel@portable.galex-713.eu) |
| 22:21.29 | *** join/#debian SoulsForBelial (~SoulsForB@p200300f12f199100821f02fffeaf6272.dip0.t-ipconnect.de) |
| 22:24.25 | *** join/#debian Vatum (~Votum@188.4.165.142.dsl.dyn.forthnet.gr) |
| 22:27.47 | Vatum | backlight doesnt work on kernel 4.19.0-11 and 4.19.0-13 |
| 22:28.11 | Vatum | it works on 4.19.0-9, now that i downgraded. my /sys/class/backlight is populated again and function keys work |
| 22:28.20 | *** join/#debian ccrr10 (~ccrr10@host-87-21-146-149.retail.telecomitalia.it) |
| 22:29.06 | *** join/#debian _Onyx47_ (~bojan@cpe-46-234-77-99.static1.client.xnet.hr) |
| 22:29.19 | ratrace | Vatum: checked kernel configs for differences? |
| 22:29.40 | Vatum | ratrace, is it a kernel config issue or a commit code issue? |
| 22:30.07 | ratrace | Vatum: could be a patch, or a config difference, though maybe the latter is much less likely |
| 22:30.20 | ratrace | (but easiest to check) |
| 22:31.18 | *** join/#debian gdonald (gd@xor.darkclear.net) |
| 22:33.46 | Vatum | ratrace, https://dpaste.org/gyOn |
| 22:34.21 | Vatum | this is the diff. really small, does any of those configs influence /sys/class/backlight being empty between the two version? |
| 22:34.32 | Vatum | probably driver issue (i use radeon) |
| 22:36.18 | sney | nothing there looks related at a glance. you can follow this to bisect the kernel and find the exact commit that broke it, https://wiki.debian.org/DebianKernel/GitBisect |
| 22:36.55 | sney | you may also want to check the 5.9 in buster-backports, in case it was re-fixed in a newer version |
| 22:37.16 | ratrace | jeebus, backports still at 5.9? o.O |
| 22:38.33 | sney | some stuff (e.g. zfs) needed updates to build with 5.10, so backporting it is more of a process than usual |
| 22:38.48 | ratrace | ah yes.... keep forgetting about that |
| 22:47.26 | *** join/#debian ryouma (~user@unaffiliated/ryouma) |
| 22:48.00 | ryouma | i am trying to find out whether there is a backport for mpv in oldstable. i have backports in sources.list. is rmadison my only choice? |
| 22:48.16 | *** join/#debian tgunr (admin@dsl-dhcp-conrtxxahre-76-164-98-102.consolidated.net) |
| 22:48.24 | *** join/#debian HarveyPwca (~HarveyPwc@2601:246:c180:a570:29df:3b00:ad0e:3a06) |
| 22:48.31 | ryouma | "deb http://ftp.us.debian.org/debian/ stretch-backports main contrib" |
| 22:48.33 | *** join/#debian nitefall (~thewellin@sea.wellingtonnet.net) |
| 22:48.49 | sney | ryouma: 'apt policy' will show available versions as well |
| 22:48.52 | Vatum | the commits between these two version are endless |
| 22:49.07 | Vatum | and i will have to compile the kernel maybe hundreds of times |
| 22:49.10 | *** join/#debian Adbray (~Adbray@2600:6c48:6f7f:d764:bdd7:1c64:196f:3888) |
| 22:49.21 | ryouma | sney: i have been running apt-cache policy in my script. is that similar? looiks the same. |
| 22:49.36 | sney | yes, it's the same output |
| 22:50.53 | ratrace | Vatum: you could narrow it down by looking at kernel.org changelogs and see if any commit relates to backlight |
| 22:50.56 | ryouma | great, so no backport then. are there still package managers inside debian that have packages like mpv? like, idk, docker or snapsomething or whatever? no guix apparently. |
| 22:51.53 | *** join/#debian H-var (H-var@gateway/vpn/nordvpn/h-var) |
| 22:52.28 | ratrace | damn, if judd were here, could check backportability for mpv, so you could then: |
| 22:52.29 | ratrace | !ssb |
| 22:52.30 | dpkg | First, check for a backport on <debian-backports>. If unavailable: 1) Add a deb-src line for sid (not a deb line!); ask me about <deb-src sid> 2) enable debian-backports (see <bdo>) 3) apt update; apt install build-essential; apt build-dep packagename 4) apt -b source packagename 5) dpkg -i packagename-ver.deb To change compilation options, see <package recompile>; for versions newer than sid see <uupdate>. |
| 22:52.48 | sney | ryouma: well, as towo showed you in oftc #debian, there is a newer one in stretch-multimedia. debian-multimedia can be iffy, but if you just install 1 thing and then disable the repo, it's usually safe |
| 22:52.49 | ratrace | what IS wrong with judd? it's been slacking and missing from work for days now |
| 22:53.48 | sney | jelly got judd to rejoin earlier but I guess it dropped again. working normally on oftc, though. cc themill |
| 22:54.55 | *** join/#debian magyar (~magyar@unaffiliated/magyar) |
| 22:55.14 | ryouma | sney: my apologies to towo for missing that. huh so i do apt-get -t stretch-multimedia mpv (which is same as debian-multimedia?) after putting a line referring to it in my sources.list, and then coment out that line? what is iffy about it? security issues? i would then keep the same version of mpv? |
| 22:55.28 | sney | !why not dmm |
| 22:55.28 | dpkg | The deb-multimedia.org repository was once the only way of getting good multimedia support. By the release of Debian 6.0 "Squeeze" this was mostly not true and for Debian 7 "Wheezy" this situation is even better. Libraries from dmm are known to cause incompatibilities with packages from Debian; packages may not meet the <DFSG> so are not allowed in Debian. Use dmm as a last resort; ask me about <dmm pinning> and <dmm remove>. |
| 22:55.56 | ryouma | sney: ah never mind -- the version in stretch-multimedia is too old anyway |
| 22:56.16 | ryouma | got it, thanks |
| 22:56.20 | sney | then ratrace's suggestion of ssb is probably your best bet, unless it's available on flathub etc |
| 22:57.28 | *** join/#debian |3ean (~root@176.67.80.170) |
| 22:58.01 | ryouma | sney: ratrace thaniks. i ahfve had mixed resuls (1 failure 1 success with handholding) trying to do that in the past. might try at some point with mpv. |
| 22:58.38 | *** part/#debian ryouma (~user@unaffiliated/ryouma) |
| 22:58.44 | *** join/#debian ryouma (~user@unaffiliated/ryouma) |
| 22:59.18 | ryouma | grrr deleted both channels by mistake |
| 22:59.27 | ryouma | i meant eve with expert assistance 1 did not work |
| 23:00.09 | sney | as long as there aren't missing build-deps it's usually pretty smooth, and devscripts will give you informative output when it doesn't |
| 23:00.43 | sney | it can't be as automatic as installing binaries with apt, of course. but as long as you read what it says on the screen, success is likely. |
| 23:01.06 | *** join/#debian Mister00X (~quassel@185.123.143.212) |
| 23:04.46 | *** join/#debian catman370 (~catman@unaffiliated/catman370) |
| 23:05.09 | ryouma | hmm ok i will keep that in mind. must have been a glitch then then. |
| 23:05.14 | *** join/#debian tijara_ (~tijara@dynamic-adsl-78-12-10-165.clienti.tiscali.it) |
| 23:05.58 | *** join/#debian MrBuck (~Mrbuck@gateway/tor-sasl/mrbuck) |
| 23:06.05 | *** join/#debian platon-y (5ba8c049@91-168-192-73.subs.proxad.net) |
| 23:12.37 | *** join/#debian psilonux (~psilonux@gateway/tor-sasl/psilonux) |
| 23:14.17 | *** join/#debian lifostack (~lifostack@4.28.35.162) |
| 23:14.48 | lifostack | hi all i cant get my laptops nvme ssd card to recognize in debian live. im trying to recover some data off a torched windows install |
| 23:15.01 | lifostack | <PROTECTED> |
| 23:15.13 | lifostack | can anyone offer a suggestion what else to try? i'm getting a little frustrated and tired out |
| 23:15.40 | *** join/#debian koniu (~koniu@gateway/tor-sasl/koniu) |
| 23:17.06 | ratrace | lifostack: I've had issues with nvmes on 4.19 kernel, had to upgrade to backported one |
| 23:17.14 | *** join/#debian Unforgiving (unfr@gateway/shell/xshellz/x-yrbjylxkkhmybklh) |
| 23:17.23 | lifostack | can you suggest a backport for me to try? |
| 23:17.23 | *** join/#debian paladox (paladox@wikimedia/paladox) |
| 23:17.33 | *** join/#debian aaro (aaro@gateway/shell/xshellz/x-sruvdzoegnqybajj) |
| 23:17.43 | ratrace | the one and only kernel 5.9.something from buster-backports |
| 23:17.51 | *** part/#debian platon-y (5ba8c049@91-168-192-73.subs.proxad.net) |
| 23:18.15 | lifostack | i dont assume there's a live cd download with it pre installed? i dont have the luxury of a free machine to install kali into |
| 23:18.32 | sney | kali.. |
| 23:18.43 | *** join/#debian mirrorbird (~psutcliff@2a00:801:42b:aff3:74af:2f22:932d:eac0) |
| 23:19.08 | lifostack | debian, excuse me |
| 23:19.20 | lifostack | i've tried multiple different live environments to try and get this to work |
| 23:19.45 | sney | lifostack: there are debian testing live images, that may or may not work. grml might be more capable (often is) for rescue stuff as well, and they are currently shipping a 5.6 kernel |
| 23:20.04 | lifostack | thanks im not familiar with this tool |
| 23:20.09 | *** join/#debian galex-713 (~quassel@portable.galex-713.eu) |
| 23:20.21 | sney | see https://cdimage.debian.org/cdimage/weekly-live-builds/amd64/iso-hybrid/ and/or https://grml.org |
| 23:20.36 | ratrace | what I hate most is when people actively LIE they're using debian, so they could get help with kali..... or some other garbage derivative |
| 23:20.48 | lifostack | lol thats dumb |
| 23:20.54 | lifostack | my laptop at home does run debian buster |
| 23:21.00 | lifostack | i also run a raspbian running pihole |
| 23:21.09 | ratrace | something also runs windows at home, so why not ask in #windows |
| 23:21.28 | sney | or the kids who think they have a new justification that they should be exempt from the debian-only rule, that nobody has ever thought of before |
| 23:21.50 | lifostack | thanks for the grml recommendation |
| 23:22.11 | brigand | sney: lol. but it could be a kali specific problem |
| 23:22.27 | sney | indeed |
| 23:23.28 | sney | (the people asking about kali in here are usually trying to use it as a general purpose OS, and asking for help with fundamental "how 2 wifi" stuff, so they also don't get much traction in the kali channel and generally have a bad time) |
| 23:23.38 | *** join/#debian ChmEarl (~chmearl@unaffiliated/prymar56) |
| 23:24.11 | brigand | i use debian as general purpose OS |
| 23:24.24 | sney | me too. |
| 23:24.28 | lifostack | yeah i gave up windows as my home OS back after XP |
| 23:24.42 | lifostack | been using debain since. i prefer KDE but my home install is running gnome |
| 23:24.52 | lifostack | i have it setup to mock kde though |
| 23:24.59 | brigand | vista made me install ubuntu xD |
| 23:25.01 | lifostack | with a taskbar on bottom, etc |
| 23:26.09 | brigand | then i thought i needed a rolling release and went to mint. but a stable release is *good enough* so i went with debian |
| 23:26.27 | brigand | i am trying to mock gnome 2 xD |
| 23:26.31 | *** join/#debian frgo (~frgo@p200300deef0813009980a88b75f41fd8.dip0.t-ipconnect.de) |
| 23:26.33 | brigand | on gnome 3 |
| 23:26.49 | lifostack | well i dont know if mint was out when i first started getting my feet wet with linux and i arrived late to mint anyways, but in all honesty most people using mint should prob just install debian from the get go |
| 23:26.58 | lifostack | especially if you're planning on learning linux as a sys admin |
| 23:27.27 | lifostack | all the training is under debian or fedora.... dpkg or w/e the redhat ones called |
| 23:27.57 | brigand | rpm? |
| 23:28.05 | lifostack | yeah i think thats the one |
| 23:28.16 | brigand | gotta go to bed. good night |
| 23:28.23 | lifostack | nite |
| 23:31.33 | *** join/#debian H-var_ (H-var@gateway/vpn/nordvpn/h-var) |
| 23:37.17 | *** join/#debian amelia_ (~AkiDerg@c-73-255-162-200.hsd1.fl.comcast.net) |
| 23:37.32 | *** part/#debian amelia_ (~AkiDerg@c-73-255-162-200.hsd1.fl.comcast.net) |
| 23:38.01 | *** mode/#debian [+l 1178] by debhelper |
| 23:39.53 | *** join/#debian sz0 (uid110435@gateway/web/irccloud.com/x-rnjvjeqecjggznsg) |
| 23:40.04 | lifostack | ok grml failed to recognize my nvme drive as well >_< |
| 23:40.16 | lifostack | gonna try this hybrid iso you suggested out |
| 23:40.33 | lifostack | man i just need to access the drive, or even smb to the drive, anything will help out tremendously here >_< |
| 23:40.38 | *** join/#debian catman370 (~catman@unaffiliated/catman370) |
| 23:46.53 | *** join/#debian RandomGuy90 (~RandomGuy@91.239.205.33) |
| 23:47.59 | oxek | how can I purge the residual config files of all removed packages? |
| 23:48.13 | lifostack | dpkg --purge ? |
| 23:48.15 | dpkg | lifostack: have you tried http://www.tldp.org/ ? |
| 23:48.35 | oxek | lifostack: that's a manual process. I have hundreds of packages with residual configs |
| 23:49.05 | lifostack | make a loop? |
| 23:49.36 | *** join/#debian Zblakany (~Zblakany@host-188-122-1-230.finemedia.pl) |
| 23:49.48 | sney | oxek: if you have aptitude installed, you can 'aptitude purge ~c' |
| 23:49.48 | oxek | so the functionality I'm after does not exist yet as a flag to apt/aptitude/dpkg? |
| 23:49.52 | *** join/#debian RandomGuy90 (~RandomGuy@91.239.205.33) |
| 23:50.07 | lifostack | there it is... aptitude purge |
| 23:50.16 | sney | the ~c is the important part |
| 23:50.31 | lifostack | oh totally, i just always forget which one it is |
| 23:50.34 | oxek | I really need to learn all these ~ aptitude shortcuts |
| 23:50.47 | oxek | I can never find them in the manpage |
| 23:51.04 | *** join/#debian thread700c (drew@gateway/vpn/protonvpn/thread700c) |
| 23:51.07 | sney | it's on the manual site, https://www.debian.org/doc/manuals/aptitude/ch02s04s05.en.html#tableSearchTermQuickGuide |
| 23:53.45 | oxek | sney: it is indeed. Thank you once again. |
| 23:53.51 | oxek | aptitude purge ~c does what I need |
| 23:54.31 | sney | np |
| 23:55.15 | *** join/#debian aaro (aaro@gateway/shell/xshellz/x-yxpsyiyceiwlzdli) |
| 23:55.46 | *** join/#debian Unforgiving (unfr@gateway/shell/xshellz/x-vuygnwcyjnqtivbw) |
| 23:55.55 | oxek | I wonder why the manpage does not contain this info. What's the easiest way of having that aptitude manual accessible from shell? |
| 23:55.57 | *** join/#debian paladox (paladox@wikimedia/paladox) |
| 23:56.06 | oxek | or is there some extra manpage? |
| 23:57.52 | sney | there seems to be an 'aptitude-doc-$lang' package for it, e.g. aptitude-doc-en for english |
| 23:58.55 | oxek | how are you finding these things??? I need to learn your skills. |
