IRC log for #devuan on 20190407

00:02.35watchcat.onion addresses, on the other hand, are free, anonymous, and active immediately.
00:03.36redrickAnd sought-after anonymity is wonderful.  The accidental, unsought kind can be problematic.
00:05.59redrickAs it happened, when the gopher prank was launched a week ago, although I was busy with visiting houseguests, as per habit I did some basic checks starting with seeing if the devuan.org domain had expired or been hijacked.
00:06.50redrickThe WHOIS returned then, as now, doesn't include usable names/addresses/e-mail/telephone numbers for the usual public contacts.
00:09.44redrickAlthough admittedly Views Differ[tm] on this, my own policy is that real name, addresses, e-mail, phone data in WHOIS is essential, including diversity among them to avert SPoF, and including out-of-band routing of mail, so you don't miss crucial communication including renewal notices, and so you can reliably get 'Dude, there's a problem with your domain' mails.
00:11.58watchcati see your point.
00:12.08redrickSo, e.g., my Registrant contact for my domains uses a monitored mailbox on my wife's domain and server, so 'dude, your server is down' mails reach me if my server is down, and 'dude, your domain is broken' mails reach me if my domain is broken.
00:58.12*** join/#devuan kelsoo4 (~kelsoo@dragora/developer/kelsoo)
01:03.56*** join/#devuan xcm (~xcm@ipa210.225.tellas.gr)
01:06.23*** join/#devuan kelsoo4 (~kelsoo@dragora/developer/kelsoo)
01:17.18*** join/#devuan Phase` (~Phase@ip98-176-102-94.sd.sd.cox.net)
02:04.17*** part/#devuan ih8wndz (jwpierce3@001.srv.trnkmstr.com)
02:39.51*** join/#devuan debdog (~debdog@2a00:79c0:622:b000:7a24:afff:fe8a:d04d)
02:45.08*** join/#devuan aqu4bot (~aqu4bot@unaffiliated/subsen/bot/aqu4)
02:46.52redrickAnd, for the record, I really liked the prank, too.
02:47.03redrickEh, wrong window.
03:00.26watchcatheh
03:22.44*** join/#devuan guido_g (~guido_g@ip1f103f9c.dynamic.kabel-deutschland.de)
04:23.00redrickwatchcat:  It was a comment directly to KatolaZ, actually.  Although my view has shades of grey, to be honest.  I've long worried about a major open source project being taken down by security exploit on or just before April 1, as that would be one of the times sysadmin response would be impaired, along with New Year's Eve, etc.
04:24.04redrickThis isn't even the first open source project claiming such a security breach.  I've always responded with good security advice in case it's real but on a fake-seeming occasion.
04:25.52redrickAlthough in this case, the notion of intruders converting the compromised site to gopher was an adequate tip-off to anyone who stopped to thing.  Not a credible real-world outcome, ergo, nicely done on balance.
04:26.02redrickthink, not thing.
04:27.27redrickSo, on the one hand, I have sympathy to those who say it's uncool to do a prank about security breaches.  OTOH, a total site conversion to gopher on 70/tcp?  Really?
04:28.23furrywolfif something is worth doing...  :P
04:29.04redrickIt really almost qualifies as a moby hack.  Huge points for style, in my view.
04:38.02*** join/#devuan guido_g (~guido_g@ip1f103f9c.dynamic.kabel-deutschland.de)
04:40.06redrickIMO, the perfect April Fools prank is one that's presented in a completely, consistently deadpan fashion, but if you stop to think is ludicrous.  BBC set the benchmark for that in 1957, in its report about the traditional speghetti harvet in Switzerland.  https://www.youtube.com/watch?v=tVo_wkxH9dU  Callers to Auntie Beeb who asked for advice about how to grow their own spaghetti trees were told 'place a sprig of spaghetti in a tin of tomato sauce and hope fo
04:43.54redrickThat clip is IMO worth the time of anyone who hasn't yet seen it.  62 years, and still hilarious.
04:48.32*** join/#devuan guido_g (~guido_g@ip1f103f9c.dynamic.kabel-deutschland.de)
04:51.34furrywolfI've seen it.  :)
05:06.09*** join/#devuan guido_g (~guido_g@ip1f103f9c.dynamic.kabel-deutschland.de)
05:28.03*** join/#devuan proteusguy (~proteusgu@cm-58-10-208-131.revip7.asianet.co.th)
05:34.13*** join/#devuan sb35 (~sb35@68.168.122.244)
05:36.54*** join/#devuan guido_g (~guido_g@ip1f103f9c.dynamic.kabel-deutschland.de)
05:44.45*** join/#devuan fsmithred (~fsr@devuan/developer/fsmithred)
05:55.23*** join/#devuan mchasard (~mchasard@2a01:e35:2f34:930:222:43ff:fe00:9666)
05:56.31*** part/#devuan mchasard (~mchasard@2a01:e35:2f34:930:222:43ff:fe00:9666)
06:12.19*** join/#devuan Tom-_ (~tomg@64-7-151-162.border7-dynamic.dsl.sentex.ca)
06:23.15*** join/#devuan Jjp137 (~Jjp137@cpe-75-83-16-81.socal.res.rr.com)
06:34.43*** join/#devuan rsx (~rsx@ppp-188-174-128-47.dynamic.mnet-online.de)
07:01.27*** join/#devuan Nematocyst (~Nematocys@174-28-23-16.albq.qwest.net)
07:05.54*** join/#devuan KnoP (~andreas@p57B19ACF.dip0.t-ipconnect.de)
07:07.47*** join/#devuan detha (~detha@ns2.qrm.co.za)
07:07.48*** join/#devuan detha (~detha@unaffiliated/detha)
07:37.05*** join/#devuan Pali (~pali@Maemo/community/contributor/Pali)
07:40.55*** join/#devuan Tom-_ (~tomg@64-7-151-162.border7-dynamic.dsl.sentex.ca)
08:18.47*** join/#devuan climbingturtle (~climbingt@a82-161-183-216.adsl.xs4all.nl)
08:54.42*** join/#devuan mns` (~mns@191.253.136.69)
09:11.52*** join/#devuan knidos (~knidos@88.228.174.3)
09:28.30*** join/#devuan amarsh04 (~amarsh04@ppp121-45-107-40.bras2.adl6.internode.on.net)
09:29.34*** join/#devuan clemens3 (~clemens@80-218-38-71.dclient.hispeed.ch)
09:48.01*** join/#devuan booyah (~bb@193.25.1.157)
10:02.59*** join/#devuan cd (~none@gateway/tor-sasl/cd)
10:30.33*** join/#devuan climbingturtle (~climbingt@a82-161-183-216.adsl.xs4all.nl)
10:31.09*** join/#devuan gfwbreaker (~gfwbreake@ip230.ip-51-68-193.eu)
10:36.52*** join/#devuan sb35 (~sb35@179.43.143.183)
10:38.46*** join/#devuan Levure (~quassel@91.179.234.244)
10:44.25*** join/#devuan gfwbreaker (~gfwbreake@ip230.ip-51-68-193.eu)
11:05.13*** join/#devuan Human_G33k (~HumanG33k@62.147.242.8)
12:36.37*** join/#devuan golinux (~golinux@vm8.ganeti.dyne.org)
12:36.37*** join/#devuan golinux (~golinux@devuan/developer/golinux)
12:40.05*** join/#devuan climbingturtle (~climbingt@a82-161-183-216.adsl.xs4all.nl)
12:41.48*** join/#devuan redrick (~rick@linuxmafia.COM)
12:52.35*** join/#devuan mlsmith (~mlsmith@unaffiliated/configx)
14:25.07*** join/#devuan Schallaven (~Schallave@70.35.217.155)
14:29.21xrogaannext presentation soon: presentations are going on
14:29.32xrogaansight
14:29.36xrogaannext presentation soon: https://www.youtube.com/watch?v=_ULy7jBnXdo
14:29.57xrogaan"How to sell dev1 to your organisation"
14:31.17*** join/#devuan Xenguy (~Xenguy@172.83.167.197)
14:32.36*** join/#devuan engidea (~damiano@151.61.97.241)
14:33.02*** join/#devuan zeden (~user@unaffiliated/zeden)
14:39.04*** join/#devuan targz (~Thunderbi@unaffiliated/targz)
14:51.27*** join/#devuan cyteen (~cyteen@135.209.125.91.dyn.plus.net)
15:02.10*** join/#devuan engidea (~damiano@151.61.97.241)
15:06.46*** join/#devuan Mithrandir__ (~Mithrandi@217.64.113.184)
15:10.43*** join/#devuan zeden (~user@unaffiliated/zeden)
15:12.38*** join/#devuan Oberoid (d57f14b5@gateway/web/freenode/ip.213.127.20.181)
15:27.13*** join/#devuan freemangordon1 (~ivo@46.249.74.23)
15:28.05*** join/#devuan freemangordon1 (~ivo@46.249.74.23)
15:34.45*** join/#devuan freemangordon (~ivo@46.249.74.23)
15:47.47*** join/#devuan furrywolf (~furrywolf@172.58.35.79)
15:48.46*** join/#devuan sxpert (~sxpert@pigeon.sxpert.org)
15:50.15*** join/#devuan _0bitcount (~Big_Byte@90.162.105.206)
15:52.18*** join/#devuan shibboleth (~shibbolet@gateway/tor-sasl/shibboleth)
16:19.15*** join/#devuan shibboleth (~shibbolet@gateway/tor-sasl/shibboleth)
16:40.04*** join/#devuan Levure (~quassel@91.179.234.244)
17:17.24*** join/#devuan izh_ (~denis@unaffiliated/izh/x-2009676)
17:21.49*** join/#devuan Akuli (~Akuli@dkg01ryt0p3--8q7npk-4.rev.dnainternet.fi)
17:22.32Akuliif i have a devuan with xfce desktop, how do i switch to mate? i tried installing task-mate-desktop, but mate-session doesn't run automatically on login after installing that
17:27.33Akulinevermind, seems like i just needed to remove all the xfce stuff and update-alternatives started using mate-session correctly
18:06.55xrogaanthe dyne.org youtube channel is still reported as "live"
18:07.13*** join/#devuan puria (~puria@net-93-71-1-41.cust.vodafonedsl.it)
18:16.41*** join/#devuan emilis (~emilis@md-188-69-193-161.omni.lt)
18:20.37*** join/#devuan Nematocyst (~Nematocys@174-28-23-16.albq.qwest.net)
18:21.53*** join/#devuan IoFran (~Thunderbi@201.144.174.31)
18:40.28*** join/#devuan Xenguy (~Xenguy@2607:fea8:c340:efe:a11:96ff:feae:a8c8)
18:56.23*** join/#devuan puria (~puria@net-93-71-1-41.cust.vodafonedsl.it)
19:08.06*** join/#devuan puria (~puria@net-93-71-1-41.cust.vodafonedsl.it)
19:44.54*** join/#devuan OmegaPhil (~kvirc@fsf/member/OmegaPhil)
19:49.21*** join/#devuan puria (~puria@net-93-71-1-41.cust.vodafonedsl.it)
19:52.25*** join/#devuan cocoadaemon (~foo@2a01:e35:8a99:e90:1202:b5ff:fe91:e4ca)
20:04.33*** join/#devuan cocoadaemon (~foo@2a01:e35:8a99:e90:1202:b5ff:fe91:e4ca)
20:20.24*** join/#devuan tyilanmenyn (~root@scriptkitties/tyil)
20:30.35*** join/#devuan O01eg (~o01eg@2a02:2698:824:2811:3b6b:ebb2:bdf0:870)
20:52.20*** join/#devuan Mithrandir__ (~Mithrandi@217.64.113.184)
20:53.10*** join/#devuan rypervenche (~rypervenc@unaffiliated/rypervenche)
21:03.45*** join/#devuan xcm (~xcm@ipa210.225.tellas.gr)
21:08.30*** join/#devuan Mithrandir__ (~Mithrandi@217.64.113.181)
21:42.17*** join/#devuan Hypertables (43bccedf@gateway/web/freenode/ip.67.188.206.223)
21:43.35Hypertableswhy do I keep getting hash sum mismatch: https://paste.ee/p/vFsEO
21:45.05gnarfacei'd like to help but i'm not clicking there, too paranoid
21:45.22gnarfacedid you download the image with https?
21:45.39gnarfaceit may or may not matter
21:46.09Hypertableshttps://paste.debian.net/1076607/
21:46.49HypertablesI installed with debootstrap, not iso image
21:47.12gnarfacehmmm, looks like a problem, for sure, though i do note you have some non-devuan sources in there.
21:47.37gnarfacethey may have caused this problem indirectly, with stuff you installed from there previously
21:48.16gnarfaceor it maybe could just be that you got unlucky and hit a repo in the round-robin that is currently updating... does it happen on this same file every time?
21:48.51Hypertableswell it happens every time
21:49.30Hypertablesyes I just got the same error
21:49.45gnarfaceand that command is just "apt-get update" ?
21:49.57Hypertablesyes
21:50.13gnarfacelemme test here, stand by
21:50.26Hypertablesmaybe I have a bad sources.list
21:51.04Hypertableshttps://paste.debian.net/1076609/ <-- my sources.list
21:54.46gnarfacetry it with just deb.devuan.org or pkgmaster.devuan.org to see if that makes a difference.  comment out that node.js thing for now too
21:55.30gnarfacehttp://paste.debian.net/1076610/
21:56.04gnarfacethis is working for me right now
21:56.31gnarfaceit suggests the problem is either with your dns resolution or something you installed from one of those 3rd party repos
21:56.59xrogaanyou might be getting a bad mirror, KatolaZ might help you in that case.
21:57.37Jjp137for the record, us.deb.devuan.org works for me currently (I know it doesn't do anything special right now), but yea just simplify your sources.list for now
21:58.09Hypertableswell I tried pkgmaster and now the difference between latest modification time and release file created is narrower but I still get the errors
21:58.19xrogaanyou shouldn't use us.deb nor pkgmaster
21:58.29xrogaanuse deb.devuan.org
21:59.19*** join/#devuan salsbury (~kurgan@bl11-164-38.dsl.telepac.pt)
22:00.00Jjp137I wouldn't say not to use us.deb; it is documented here: https://devuan.org/os/
22:00.07Jjp137but it is easiest to start with deb.devuan.org
22:00.13xrogaanHypertables: could you give me the result from `host us.deb.devuan.org'?
22:00.49Hypertablesus.deb.devuan.org is an alias for pkgmaster.devuan.org. pkgmaster.devuan.org has address 5.196.38.18
22:02.47gnarfacethat is correct
22:03.05gnarfacethat is what i get here too
22:03.31gnarfacebut deb.devuan.org should be a round-robin of several mirrors
22:04.03gnarfacei see 13 here
22:04.49xrogaanyeah, so maybe something is crapping on your network as you receive the files. You might have a cache somewhere.
22:05.25Hypertablespretty sure I don't have an http cache or anything like that
22:05.56*** part/#devuan izh_ (~denis@unaffiliated/izh/x-2009676)
22:08.24gnarfacewell, it looks like you only have one option to confirm whether it is the repo or not
22:08.58gnarfacein general it is a bad idea to use 3rd party repos or other distro's repos though
22:09.15gnarfacethat could really be the issue too
22:09.30gnarfacenot that you have the repo in there, but that you installed something from there
22:09.59gnarfaceif it was made for debian or ubuntu, for example, there are a number of highly eccentric failure cases
22:10.11gnarfacemost of them not immediately obvious on install
22:10.16xrogaanno, I don't get the warning but the InRelease file does list a different sha256sum than the one from the file I get
22:10.31xrogaana958a8acee49af960759f7533231b075d184fa8ee7d708764b022d33c1d29e8f   335185 main/Contents-amd64.gz
22:10.32xrogaanhttp://deb.devuan.org/merged/dists/ascii-updates/InRelease
22:10.49xrogaanBut locally: 75acef3458d85396d38b730213b0fe801508a961f4d30495cfa585b8318ccf95  Contents-amd64.gz
22:10.56gnarfacesame if you use https?
22:11.17xrogaanIIRC there is no https
22:12.03xrogaannot on the round robin, it uses the wrong certificate
22:12.08Jjp137pkgmaster supports https, but you have to explicitly specify that mirror instead of using deb.devuan.org
22:12.25Jjp137the round robin doesn't support https
22:14.34*** join/#devuan clemens3 (~clemens@178-82-161-195.dynamic.hispeed.ch)
22:15.43gnarface75acef3458d85396d38b730213b0fe801508a961f4d30495cfa585b8318ccf95 for Contents-amd64.gz locally here too
22:20.53xrogaanis there a way for apt to not care about that value?
22:21.21gnarfaceprobably, but i don't know if it's a good idea to ignore it
22:21.36gnarfacecould be evidence of a MITM attack...
22:23.10*** join/#devuan nailyk (~nailyk@carbonfusion/co-admin/nailyk)
22:23.41xrogaangnarface: apt-config | grep AllowInsecure
22:24.09xrogaanI have this, somehow: Binary::apt-get::Acquire::AllowInsecureRepositories "1";
22:24.46gnarfacealso note that in that InRelease file, that line for main/Contents-amd64.gz is actually listed under the armhf/Packages.gz file
22:25.09gnarfaceso that's probably just a case of looking at the wrong InRelease file
22:25.25gnarfacebut i don't know how this works well enough to be sure
22:26.29gnarfacemight you have enabled that before installing the devuan-keyring package then forgot to turn it back off?
22:26.31gnarfacexrogaan: ?
22:26.48xrogaanhaven't touched that
22:26.55xrogaanmight not even be relevant
22:26.57gnarfacehmm
22:27.55gnarfacei see it actually set to Binary::apt-get::Acquire::AllowInsecureRepositories "1";
22:27.57gnarfaceon my rpi
22:28.28xrogaanhttps://manpages.debian.org/stretch/apt/apt-secure.8.en.html
22:29.09xrogaanso not relevant
22:30.30xrogaanhow do you see the package "armhf" thing?
22:31.15xrogaanoh, I don't think those are relevant
22:31.30xrogaanthe InRelease file is just a list of files without set order.
22:31.47gnarfacethere is indentation
22:31.58gnarfacelook on the previous line
22:32.03gnarfaceall the way at the left
22:33.02xrogaanAs I said, it's a list a files with associated hash.
22:33.06xrogaanand size
22:33.52xrogaanwhat concerns me is that apt doesn't raise an error with the mismatching hash.
22:34.30gnarfacei wonder if it has to do with the redirects
22:34.46gnarfaceand you're right, i was getting weird wrapping.  it's a linear list after all
22:39.51xrogaanHypertables: try to manually clean /var/lib/apt/lists/
22:39.54xrogaanjust in case
22:41.28Hypertablesno change
22:42.08*** join/#devuan amarsh04 (~amarsh04@ppp121-45-107-40.bras2.adl6.internode.on.net)
22:43.40xrogaanhow did you clean the folder?
22:44.05Hypertableswith rm -rf
22:44.31Hypertablesincl removal of the "lists" directory
22:45.34xrogaanyou might be behind a proxy without knowing it.
22:46.41*** join/#devuan obarun (~obarun@115.126.165.174)
22:46.58Hypertablesdoubtful. I'm behind a residential cable internet connection and I manage the gateway box myself. it does iptables-based nat but no proxying
22:48.20xrogaando you trust your ISP?
22:48.44obarunhi, what's the devuan policies about elogind? Do you use it? Do you use consolekit2 or any other alternatives?
22:49.17gnarfaceobarun: it's mentioned in the release notes https://files.devuan.org/devuan_ascii/Release_notes.txt
22:50.42*** join/#devuan puria (~puria@net-93-71-1-41.cust.vodafonedsl.it)
22:51.50Hypertablesthis looks very much like a bug in devuan to me ... has anyone managed to pull a copy of this file http://deb.devuan.org/merged/dists/ascii/main/Contents-amd64.gz with the "correct" checksum e0e8ec7baba6bc2d4c26918b14aa8e27b95939d9f7440cb98fb087191e8de019 ?
22:52.42obarungnarface: many thanks
22:52.50*** join/#devuan sxpert (~sxpert@pigeon.sxpert.org)
22:53.30gnarfaceobarun: no problem
22:55.14xrogaanHypertables: is that the correct checksum?
22:55.33Hypertableswell that's what's in http://deb.devuan.org/merged/dists/ascii/InRelease
22:55.56Hypertableshas anyone pulled a different content of the InRelease file?
22:56.41gnarfacenot here, i don't think
22:58.31xrogaanI have not
23:02.00*** join/#devuan sb35 (~sb35@184.75.215.12)
23:04.12xrogaanHypertables: why does my apt not warn me of those mismatches?
23:05.35gnarfacedidn't we go over this once and it turns out because they're auto-generated with combined contents on the fly?
23:06.22xrogaanno, gnarface, you seem to be confused.
23:06.25xrogaanor I am
23:06.30gnarfacei'm sure i'm confused
23:07.34xrogaanI don't know why the file listed above "main/Contents-amd64.gz" should be relevant to "main/Contents-amd64.gz".
23:09.22gnarfaceignore that, i was hallucinating
23:09.42gnarfacei note that the main/Contents-amd64.gz for ceres does seem to match the InRelease file
23:10.25gnarfaceso it's something different about ascii
23:10.36gnarfacecould it just be not yet updated?
23:11.54xrogaanbut why isn't my apt yelling?
23:14.39gnarfaceit could be this setting in apt-config perhaps? Binary::apt-get::Acquire::AllowInsecureRepositories "1";
23:15.01gnarfacecheck to see if you have it
23:19.21xrogaanthat's related to the gpg key
23:19.35xrogaanyou're not getting the error either
23:19.49gnarfacethat is true
23:20.22*** part/#devuan obarun (~obarun@115.126.165.174)
23:23.06gnarfacehmm. i'm still thinking it might have something to do with how amprolla works.  that's what my memory is nagging at anyway
23:23.23gnarfacethere might be http 302 redirects confusing something here
23:23.53*** join/#devuan Tom-_ (~tomg@67-43-135-81.border8-dynamic.dsl.sentex.ca)
23:26.43xrogaanah no, you were right
23:27.34xrogaansudo apt -o Acquire::AllowInsecureRepositories=false update < this fails everything
23:28.54xrogaanhttps://paste.debian.net/1076616/
23:37.13xrogaanwelp, it's all broken now
23:42.13*** join/#devuan FriendlyMan (~IceChat9@71-212-34-29.tukw.qwest.net)
23:43.06*** join/#devuan GoatAvenger (~GoatAveng@unaffiliated/goatavenger)

Generated by irclog2html.pl Modified by Tim Riker to work with infobot.