Re: How to override fuse args to ntfs-3g to set permissions?

2014-11-29 Thread Scott Ferguson
On 29 November 2014 at 17:06, Rick Macdonald  wrote:
> On 28/11/14 05:21 PM, Scott Ferguson wrote:
>> On 28 November 2014 at 16:08, Rick Macdonald  wrote:

 On 25/11/14 08:46 PM, Scott Ferguson wrote:
>>

>>
>
> Hey, thanks for all this!

No worries. Thanks for the feedback.
>
> I created a thumb drive for testing. Using the actual drive takes too long,
> as the cable is awkward, the drive spins up and down, etc.
>
> I added my uid/gid to the rule for jollies, so it mounts as me instead of
> root.

I'm uncertain of the advantage if you are a member of user. You can
use the USER tag in the rule to run commands as someone other than
root.

> Plex should work in either case with wide-open 777 mode.
>

Agreed

> ACTION=="add", PROGRAM=="/sbin/blkid -o value -s TYPE /dev/%k",
> RESULT=="ntfs",
> ENV{mount_options}="%E{mount_options},utf8,uid=1000,gid=1000,umask=000"

Oddly uid=N and gid=N in the ntfs-3g man (rather than uid= and
gid=) I'm not sure if that's why mount | grep $SomeNTFSSlice
reports single digit uid and gid [puzzled]

>
> There was a problem in the dir_name,

Could you expand on that?

> so I changed these two lines:
>
> #ACTION=="add", PROGRAM=="/sbin/blkid -o value -s TYPE %E{device}",
> RESULT=="ntfs",
> ENV{mount_options}="%E{mount_options},utf8,gid=100,umask=002"
> ACTION=="add", PROGRAM=="/sbin/blkid -o value -s TYPE /dev/%k",
> RESULT=="ntfs",
> ENV{mount_options}="%E{mount_options},utf8,gid=100,umask=002"

What do you get from "mount -L | grep Win"?

> # Get label if present, otherwise assign one
> #PROGRAM=="/sbin/blkid -o value -s LABEL %E{device}", ENV{dir_name}="%c"
> PROGRAM=="/sbin/blkid -o value -s LABEL /dev/%k", ENV{dir_name}="%c"
>
> When I unmount the drive, the directory is not deleted. The
> owner/permissions change from me/777 to root/755. I see you have commands
> for umount and rmdir ("Clean up after removal"), but I'm not sure what is
> meant to kick those off.

That /media/$NFTSSliceLABEL dir will remain. That the notoriously
fickle NTFS 'might' be damaged if the mounted NTFS device is suddenly
removed (more likely you might just get into a futile tug-of-war).
Belt and suspenders?

> I pulled out the drive without umounting first, not
> that I think you had that in mind, but that didn't change the behaviour
> (much).

Did a program have access to that file system at the time?

>
> It seems that only root can umount the drive, but I've seen mention of that
> for NTFS, or maybe it was udisks in general?

NTFS-3G. After digging through policy kit it 'seems' if a non-root
user who is not a member of the disk group wants to umount NTFS they
need to recompile ntfs-3g with build-in FUSE and then setuid the
resulting binary.

>
> Almost there!

Lots of room for improvement - if I had time I'd refine the rule to
*only* apply to a unique NTFS slice, and figure out a way so that the
slice icon that appears on XFCE desktop and in the sidebar of Thunar
*is* the mounted NTFS slice.

An alternative approach to solving the above two niggles would be to
hide the dysfunctional icons, and automagically (using udev) add an
icon to the desktop - which when clicked would umount the (WinBackup)
slice (gksudo or similar - if you use sudo that wouldn't be
necessary).

>
> Regards,
> Rick
>

Kind regards


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAMt2cQOdD=hpvhbjat+o29cafs+jykh93f4wxgyv7fa5+ps...@mail.gmail.com



Devuan

2014-11-29 Thread Weaver

Hello,

No moves planned myself, but as I have seen any number of posts 
regarding systemd and associated contention, I thought I'd draw 
attention to this:


https://devuan.org/

Perhaps it might answer to the requirements of some?
Cheers!

Weaver

--
"It is the duty of the patriot to protect his country from its  
government."

 -- Thomas Paine

Registered Linux User: 554515


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/c09f3ecba9a6d86095ece206e5316...@riseup.net



Re: SOLVED Fetchmail; continually losing authentication with gmx.net

2014-11-29 Thread Ron Leach

On 26/11/2014 07:50, Frédéric Marchal wrote:


Fetchmail certainly uses the system ssl library and SSLv3 was recently
disabled system wide for security reasons (see the poodle attack).

[snip]

You'll have to investigate a bit but my theory is that fetchmail is
requesting SSLv3. As it is disabled by wheezy but is accepted by etch
it works with the latter but not the former.

Fetchmail should have an option to force the ssl protocol to be TLSv1.
I think it should be --sslprotoversion tlsv1 or something similar.



Astute, Frederick.

I altered the poll details for ...@gmx.net to say:

poll pop.gmx.net with proto POP3 timeout 100 and options
  auth password no dns uidl

 user '[...]@gmx.net' there with password '[...]' is
  '[...]' here options sslproto 'TLS1' keep stripcr fetchlimit 5

[the 'keep' parameter is only there while I am testing, so as not to 
lose any mails after architecture changes or rebuilds etc.  In the 
production system the 'keep' will be absent.]


This has been running for 3 days, now, without missing a beat.

You solved it.  Thank you for the insights.

regards, Ron


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/5479b5fe.2070...@tesco.net



missing dependency of "lprng"?

2014-11-29 Thread Matej Kosik
Hi,

Today I have noticed this (on Wheezy).
When I do

  lp some.pdf

I see the following error message:

  p11-kit: couldn't load module: 
/usr/lib/x86_64-linux-gnu/pkcs11/gnome-keyring-pkcs11.so: 
/usr/lib/x86_64-linux-gnu/pkcs11/gnome-keyring-pkcs11.so: cannot open shared 
object file: No such file or
directory

A trivial querry

  apt-file search /usr/lib/x86_64-linux-gnu/pkcs11/gnome-keyring-pkcs11.so

yields:

  gnome-keyring: /usr/lib/x86_64-linux-gnu/pkcs11/gnome-keyring-pkcs11.so

I would like to ask, whether this is on purpose or a bug.

I mean, I can print test page via CUPS just fine, isn't there a way to print 
stuff without installing "gnome-keyring"?

Kind regards,
--
Matej Kosik


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/5479ca83.9010...@gmail.com



Re: Help understanding error: skb rides the rocket

2014-11-29 Thread lee
SL  writes:

> On one of our quite busy (virtual) Debian 6 servers we are seeing a lot of
> messages in the syslog like this:
>
> kernel: xen_netfront: xennet: skb rides the rocket: 19 slots

I've had some of these messages with the backports kernels.  Since the
backports kernels don't boot when the root fs is on an LVM volume, I'm
currently using the default kernel and am not seeing these messages
anymore (yet).

Do you see any martian sources in your firewall log?


-- 
Again we must be afraid of speaking of daemons for fear that daemons
might swallow us.  Finally, this fear has become reasonable.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/877fyeazsz@gulltop.yagibdah.de



automation of xrandr

2014-11-29 Thread peter
https://wiki.debian.org/XStrikeForce/HowToRandR12
helped to establish a usable multi-screen configuration.

Now what is the recommendation to automate?  Put the 
xrandr command in .profile?  

Odd that the wiki page has no mention of this question.

Thanks,   ... Peter E.




-- 
123456789 123456789 123456789 123456789 123456789 123456789 123456789 12
Tel +1 360 639 0202  http://carnot.yi.org/  Bcc: peter at easthope. ca


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/E1XujTt-0005AT-SC@dalton.invalid



Re: Creating a peculiar Live-CD

2014-11-29 Thread Richard Owlett

Scott Ferguson wrote:

On 29 November 2014 at 08:17, Richard Owlett  wrote:

Cindy-Sue Causey wrote:


On 11/28/14, Richard Owlett  wrote:






 I've just proved ( again ;/ ) that my writing lacks clarity.


It's hard to describe a custom live CD in a single, small post.


Not really. I did it in a single sentence - see 3rd sentence down.




The eject command indeed works as expected.

The BIOS on my machines are set to automatically boot from any CD in the
tray.

My question was creating a Live-CD to only execute a specific script when
booted and prevent anything else from being executed.


The script would be of the form:

run_foo
eject /dev/cdrom
shutdown -hP now



Put the script in /etc/rc.local? Create a user that is autologged-in
put the script in their autorun?


I've found:
   http://www.debian-administration.org/article/
212/An_introduction_to_run-levels
   http://www.debian-administration.org/article/
28/Making_scripts_run_at_boot_time_with_Debian

https://www.debian.org/doc/debian-policy/ch-opersys.html#s-sysvinit

Other recommended reading material.

Additional question:
You got me looking at the contents of /etc/rc2.d .
Is there a utility that would list the script name and a least 
the content of the "#Description:" field. Some of the 
descriptions are terse, to say the least.




Dependant on what you mean by "anything else"... find out where
"anything else" is triggered and remove the trigger.


Ugh ;/ That's "shutting the barn door...". Don't install door in 
first place.


If helps I've previously created a number of different "auto" USB
Flash key builds that were designed to be used as "plug, power-on, do
a certain job automagically" tools without user intervention. Some of
the processes 'might' be useful for what it 'sounds' like you want to
do.





I hope that helps a little. Perhaps if you gave more details of all
that you want to do. e.g. a flow chart, what will this script do?

Kind regards





--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/5479e693.3020...@cloud85.net



Re: Creating a peculiar Live-CD

2014-11-29 Thread Curt
On 2014-11-29, Richard Owlett  wrote:
>
> The script would be of the form:
>
> run_foo
> eject /dev/cdrom
> shutdown -hP now
>
>>

I thought of the "kiosk" live cds when you asked your peculiar question.
Instead of starting a browser, it would run "run_foo."  It might be
pertinent to know what run_foo consists of.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/slrnm7jvpc.233.cu...@einstein.electron.org



Image cloning software

2014-11-29 Thread Miroslav Skoric
Is there a good software for Debian 7.7 as well as for Debian 6.10 that 
is capable to produce a multi DVD/CD image of a working system, in a way 
that such image can be used later as a DVD/CD installation media for 
'cloning' on the other comps (or on itself, in case of an irreparable 
failure of a working machine)? Thanks.


M.


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/547a04d4.2000...@eunet.rs



Re: automation of xrandr

2014-11-29 Thread Brian
On Sat 29 Nov 2014 at 06:58:41 -0800, pe...@easthope.ca wrote:

> https://wiki.debian.org/XStrikeForce/HowToRandR12
> helped to establish a usable multi-screen configuration.
> 
> Now what is the recommendation to automate?  Put the 
> xrandr command in .profile?  

.profile is a non-X thing.
 
> Odd that the wiki page has no mention of this question.

I'd be thinking in terms of putting the command in a ~/.xsessionrc. All
I would have to do to implement it is convince myself it fits in with
the idea of "environment variables ".


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/29112014185158.bc4c87c02...@desktop.copernicus.demon.co.uk



Problem with a RAID partitions

2014-11-29 Thread Ron
My setup has eight RAID 1 partitions, md0 to md7, that should mount on /, sawp, 
/boot, /usr, /var, /clz, /home and /home/storage, the first seven on one pair 
of HDs, the last one on a second pair.

The problem: At each boot time, /dev/md7 fails to start, I have to give the 
root passwd, comment out in /etc/fstab the line for /dev/md7 and reboot.
Then, once started, uncomment /dev/md7, create anew the RAID pair, and mount 
it, whereupon it will spend the next couple hours syncing.

Is there a way to tell the system to create md7 at the same time as the others ?

Where should I look ?
 
Cheers,
 
Ron.

PS Is there a way to make vi available in the rescue console ?
-- 
   Il est dangereux d'avoir raison dans des choses
   où des hommes accrédités ont tort. 
   -- Voltaire

   -- http://www.olgiati-in-paraguay.org --
 


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20141129174645.4b8ed...@ron.cerrocora.org



clamav-daemon broken after latest upgrade

2014-11-29 Thread Robert S
I'm running a stock-standard installation of debian (7.7).  I do regular 
security updates.  Now when I try to run clamav-milter I get hundreds of 
these in my log:


Nov 30 08:55:25 debian clamav-milter[2561]: No clamd server appears to be 
available
Nov 30 08:55:37 debian clamav-milter[2561]: Failed to initiate 
streaming/fdpassing
Nov 30 08:55:37 debian clamav-milter[2561]: connect failed: No such file or 
directory
Nov 30 08:55:37 debian clamav-milter[2561]: Probe for slot 1 returned: 
failed


the clamav-daemon won't start, and when I try to reconfigure it I get

# dpkg-reconfigure clamav-daemon
/usr/sbin/dpkg-reconfigure: clamav-daemon is broken or not fully installed

# apt-get upgrade gives me
The following packages have been kept back:
 clamav clamav-freshclam clamav-milter libclamav6
0 upgraded, 0 newly installed, 0 to remove and 4 not upgraded.

How can I resolve this?  I've tried most of the usual tricks.  Is it 
possible to downgrade something?? 




--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/m5dfka$avn$1...@ger.gmane.org



Re: How to mount an iPod Touch

2014-11-29 Thread Marc Shapiro

On 11/26/2014 01:05 AM, Scott Ferguson wrote:

'Now' I regret not keeping the notes when I setup an iPhone rule for
someone last year! :/
This time I will.
I still get no device under /dev when I plug in the iPod, but ifuse does 
seem to be successfully mounting the device.  I can traverse the fs and 
ls the files just fine.  Unfortunately, rhythmbox and gtkpod now see the 
device, but they both insist that it is uninitialized and want to 
initialize it.  Since it *has* been initialized and used for several 
months, this would be a *Bad Thing*.  From what I am seeing when I 
google the error it seems that the problem lies with the fact that Apple 
keeps changing the database format to make sure that you have to use 
iTunes and that the libimobiledevice2 that is in Wheezy is still using a 
much older version of the database.  I'm not sure if libimobiledevice4 
(in Jessie and Sid) is current enough, or if I need to wait for 
libimobiledevice5, which is in Experimental).  There is nothing in 
Wheezy-Backports for the library.


Am I interpreting this correctly, or am I way off base?

Marc


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/547a4a9f.20...@gmail.com



Re: clamav-daemon broken after latest upgrade

2014-11-29 Thread Charlie
On Sun, 30 Nov 2014 08:59:36 +1100 Robert S sent:

> I'm running a stock-standard installation of debian (7.7).  I do
> regular security updates.  Now when I try to run clamav-milter I get
> hundreds of these in my log:
> 
> Nov 30 08:55:25 debian clamav-milter[2561]: No clamd server appears
> to be available
> Nov 30 08:55:37 debian clamav-milter[2561]: Failed to initiate 
> streaming/fdpassing
> Nov 30 08:55:37 debian clamav-milter[2561]: connect failed: No such
> file or directory
> Nov 30 08:55:37 debian clamav-milter[2561]: Probe for slot 1
> returned: failed
> 
> the clamav-daemon won't start, and when I try to reconfigure it I get
> 
> # dpkg-reconfigure clamav-daemon
> /usr/sbin/dpkg-reconfigure: clamav-daemon is broken or not fully
> installed
> 
> # apt-get upgrade gives me
> The following packages have been kept back:
>   clamav clamav-freshclam clamav-milter libclamav6
> 0 upgraded, 0 newly installed, 0 to remove and 4 not upgraded.
> 
> How can I resolve this?  I've tried most of the usual tricks.  Is it 
> possible to downgrade something?? 
> 

Maybe apt-get dist-upgrade

Charlie
-- 
Registered Linux User:- 329524
***

We need only travel enough to give our intellects an
airing. .Henry David Thoreau

***

Debian GNU/Linux - just the best way to create magic

-


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20141130094130.2fd36b03@taogypsy



Re: Creating a peculiar Live-CD

2014-11-29 Thread Richard Owlett

Curt wrote:

On 2014-11-29, Richard Owlett  wrote:


The script would be of the form:

run_foo
eject /dev/cdrom
shutdown -hP now





I thought of the "kiosk" live cds when you asked your peculiar question.


ME? Would *I* ask peculiar questions ;/ 
2 of my 4 primary projects might have features in common with kiosks.
Live kiosk CD authors might differ.

Application 1:
Local church providing enrichment to local "at risk" pre-teens in 
inner-city.
*ALL* internet connectivity explicitly defeated - 
homework/education being goal.


Application 2:
Extremely secure browsing and email for me on my personal machine.

In CASE 1, there exists much software which assumes KDE.
In Case 2, I like Gome2.

Interesting links having *ONLY* Squeeze dependencies?




Instead of starting a browser, it would run "run_foo."  It might be
pertinent to know what run_foo consists of.





--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/547a4ca9.9080...@cloud85.net



Re: Problem with a RAID partitions

2014-11-29 Thread Mailer Daemon

On 29/11/14 03:46 PM, Renaud (Ron) OLGIATI wrote:

My setup has eight RAID 1 partitions, md0 to md7, that should mount on /, sawp, 
/boot, /usr, /var, /clz, /home and /home/storage, the first seven on one pair 
of HDs, the last one on a second pair.

The problem: At each boot time, /dev/md7 fails to start, I have to give the 
root passwd, comment out in /etc/fstab the line for /dev/md7 and reboot.
Then, once started, uncomment /dev/md7, create anew the RAID pair, and mount 
it, whereupon it will spend the next couple hours syncing.

Is there a way to tell the system to create md7 at the same time as the others ?

Where should I look ?
  
Cheers,
  
Ron.


PS Is there a way to make vi available in the rescue console ?
This is a strange setup to say the least. Did you consider creating only 
one RAID array per disk pair and partitioning them? Then you would only 
need to use a normal partitioning tool to resize partitions. As it is, 
you have to adjust the RAID partitions then the partitions on the RAID 
arrays to change the partition sizes.


However, I suspect the problem you are having is you didn't add the 
/dev/md7 to /etc/mdadm/mdadm.conf. As root try:


mdadm --detail --scan >> /etc/mdadm/mdadm.conf

Afterward you need to:
update-initramfs -u

in order to have the boot process correctly start the arrays.
|
|


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/547a4ab8.7070...@gmail.com



Re: Problem with a RAID partitions

2014-11-29 Thread Bob Proulx
Renaud OLGIATI wrote:
> Is there a way to tell the system to create md7 at the same time as
> the others ?
> 
> Where should I look ?

Is it listed in /etc/mdadm/mdadm.conf file along with the rest?  I
expect that it is missing from that file and that is why it isn't
being started.

The mdadm.conf file is used by the initrd at early boot time.  After
making any modifications to that file the initramfs needs to be
updated so that it will incorporate the new changes.  There are many
ways to do this.  I usually recommend this since it will always do the
right thing.

  dpkg-reconfigure linux-image-3.2.0-4-amd64

Where linux-image-3.2.0-4-amd64 is your current installed kernel.  The
above would be for Wheezy 7.7 Stable.  Alternatively you could run
'mkinitramfs' directly.

> PS Is there a way to make vi available in the rescue console ?

Yes.  You didn't say why it isn't available for you.  I can only guess
that it is probably because you have many partitions and they are not
mounted.  That is fine.  But then you need to manually mount those
from the rescue shell.  Try 'mount -a' to read the /etc/fstab and
mount all of the listed partitions there.

Bob


signature.asc
Description: Digital signature


Re: Image cloning software

2014-11-29 Thread Gary Dale

On 29/11/14 12:39 PM, Miroslav Skoric wrote:
Is there a good software for Debian 7.7 as well as for Debian 6.10 
that is capable to produce a multi DVD/CD image of a working system, 
in a way that such image can be used later as a DVD/CD installation 
media for 'cloning' on the other comps (or on itself, in case of an 
irreparable failure of a working machine)? Thanks.


M
I can't answer your question directly because I believe in using 
technology to make hard things easy. In this case, rather than relying 
on CD/DVD sets, why not just use BD-RE or BD-R discs to make a complete 
image of your root (and boot) partition(s)? BR rewriters are cheap 
enough these days and can also be used to handle CDs and DVDs. Unless 
you've got more than 24G on your root, you don't need to split the image 
file.



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/547a4bc9.8070...@torfree.net



Re: Image cloning software

2014-11-29 Thread Scott Ferguson
On 30 November 2014 at 04:39, Miroslav Skoric  wrote:
> Is there a good software for Debian 7.7 as well as for Debian 6.10 that is
> capable to produce a multi DVD/CD image of a working system, in a way that
> such image can be used later as a DVD/CD installation media for 'cloning' on
> the other comps (or on itself, in case of an irreparable failure of a
> working machine)? Thanks.

The Live-CD project? Packages are in the Debian repositories:-
http://mklivecd.sourceforge.net/
http://live.debian.net/
I haven't used it in recent years, but I suspect with some tinkering
it could do what you want - rescue cd, with a backup of your
customisations, configurations, and home, an archive of main packages
(space providing), and a copy of "dpkg --get-selections > selection"
which could be scripted to rebuild and/or clone a box.

"aptoncd"

AFAIK not in the Debian repositories - but you could try mkCDrec:-
http://mkcdrec.sourceforge.net/
...and it's "successor" - http://relax-and-recover.org/

There is also Debian-based Live CD, it's name escapes me, which is
kind-of Norton Ghost and it includes the ability to clone to DVD.

A simple clone (dd) would limit you to reinstalls on disks the same
size or larger - whereas cp (with the appropriate switches) will, in
most cases, work fine - if you first partition and format the new
disk. You'd need to change the UUIDs in GRUB. I've used that method
and "dpkg --set-selections < selections" and customised /etc/skel to
do what you describe but only from disks not optical media. A little
bash scripting and bashburn or similar should make it possible to put
that onto optical media. Start the restore/clone process with a tiny
rescue cd booted toram?

Generally the process you describe is done with something like
puppet/chef etc, or preseeding PXE installs, on a larger scale (SOE
deployment).


>
> M.
>
>


Kind regards


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAMt2cQO6pTchy1JHiLOQ20e=bad7chg3cn+yr0pfehpxpb6...@mail.gmail.com



Re: clamav-daemon broken after latest upgrade

2014-11-29 Thread Scott Ferguson
On 30 November 2014 at 08:59, Robert S
 wrote:
> I'm running a stock-standard installation of debian (7.7).  I do regular
> security updates.

>
> # dpkg-reconfigure clamav-daemon
> /usr/sbin/dpkg-reconfigure: clamav-daemon is broken or not fully installed
>
> # apt-get upgrade gives me
> The following packages have been kept back:
>  clamav clamav-freshclam clamav-milter libclamav6
> 0 upgraded, 0 newly installed, 0 to remove and 4 not upgraded.
>
> How can I resolve this?  I've tried most of the usual tricks.

Including "apt-get -s dist-upgrade | less"??
If not - try it, and it looks OK run it for real:-
"apt-get dist-upgrade"  - which will install the packages that have
been held back. I suspect that will "fix" the problem.

If that doesn't look like fixing your problem, then look at:-
"apt-get -sf install | less" - which will "probably" offer to remove
the clamav packages that are not fully-installed.




Kind regards


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/camt2cqn7zmcsgep0gxk_t4g3bd+k-hhn31grf61bisswqrj...@mail.gmail.com



Re: Image cloning software

2014-11-29 Thread Catalin Soare
On Nov 30, 2014 1:26 AM, "Scott Ferguson" <
scott.ferguson.debian.u...@gmail.com> wrote:
>
> On 30 November 2014 at 04:39, Miroslav Skoric  wrote:
> > Is there a good software for Debian 7.7 as well as for Debian 6.10 that
is
> > capable to produce a multi DVD/CD image of a working system, in a way
that
> > such image can be used later as a DVD/CD installation media for
'cloning' on
> > the other comps (or on itself, in case of an irreparable failure of a
> > working machine)? Thanks.
>
> The Live-CD project? Packages are in the Debian repositories:-
> http://mklivecd.sourceforge.net/
> http://live.debian.net/
> I haven't used it in recent years, but I suspect with some tinkering
> it could do what you want - rescue cd, with a backup of your
> customisations, configurations, and home, an archive of main packages
> (space providing), and a copy of "dpkg --get-selections > selection"
> which could be scripted to rebuild and/or clone a box.
>
> "aptoncd"
>
> AFAIK not in the Debian repositories - but you could try mkCDrec:-
> http://mkcdrec.sourceforge.net/
> ...and it's "successor" - http://relax-and-recover.org/
>
> There is also Debian-based Live CD, it's name escapes me, which is
> kind-of Norton Ghost and it includes the ability to clone to DVD.
>
> A simple clone (dd) would limit you to reinstalls on disks the same
> size or larger - whereas cp (with the appropriate switches) will, in
> most cases, work fine - if you first partition and format the new
> disk. You'd need to change the UUIDs in GRUB. I've used that method
> and "dpkg --set-selections < selections" and customised /etc/skel to
> do what you describe but only from disks not optical media. A little
> bash scripting and bashburn or similar should make it possible to put
> that onto optical media. Start the restore/clone process with a tiny
> rescue cd booted toram?
>
> Generally the process you describe is done with something like
> puppet/chef etc, or preseeding PXE installs, on a larger scale (SOE
> deployment).
>
>
> >
> > M.
> >
> >
>
>
> Kind regards
>
>
> --
> To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
listmas...@lists.debian.org
> Archive:
https://lists.debian.org/CAMt2cQO6pTchy1JHiLOQ20e=bad7chg3cn+yr0pfehpxpb6...@mail.gmail.com
>

Clonezilla?


Re: clamav-daemon broken after latest upgrade

2014-11-29 Thread gmane

Hi (sorry about top post).

When I tried "dist-upgrade" I only had security updates enabled.  Since I 
allowed all repositories in my sources.list this has fixed it.


Many thanks.

Robert.

"Scott Ferguson"  wrote in message 
news:camt2cqn7zmcsgep0gxk_t4g3bd+k-hhn31grf61bisswqrj...@mail.gmail.com...


On 30 November 2014 at 08:59, Robert S
 wrote:

I'm running a stock-standard installation of debian (7.7).  I do regular
security updates.




# dpkg-reconfigure clamav-daemon
/usr/sbin/dpkg-reconfigure: clamav-daemon is broken or not fully installed

# apt-get upgrade gives me
The following packages have been kept back:
 clamav clamav-freshclam clamav-milter libclamav6
0 upgraded, 0 newly installed, 0 to remove and 4 not upgraded.

How can I resolve this?  I've tried most of the usual tricks.


Including "apt-get -s dist-upgrade | less"??
If not - try it, and it looks OK run it for real:-
"apt-get dist-upgrade"  - which will install the packages that have
been held back. I suspect that will "fix" the problem.

If that doesn't look like fixing your problem, then look at:-
"apt-get -sf install | less" - which will "probably" offer to remove
the clamav packages that are not fully-installed.




Kind regards



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/m5dngv$2ns$1...@ger.gmane.org



Re: How to mount an iPod Touch

2014-11-29 Thread Scott Ferguson
On 30 November 2014 at 09:37, Marc Shapiro  wrote:
> On 11/26/2014 01:05 AM, Scott Ferguson wrote:
>>
>> 'Now' I regret not keeping the notes when I setup an iPhone rule for
>> someone last year! :/
>> This time I will.
>
> I still get no device under /dev when I plug in the iPod, but ifuse does
> seem to be successfully mounting the device.

'Should' be a /media/i$Something directory created.

All I know about ifuse is what I've read in the man page:-
http://manpages.debian.org/cgi-bin/man.cgi?query=ifuse&apropos=0&sektion=0&manpath=Debian+7.0+wheezy&format=html&locale=en

Is their an info page for ifuse?
What does "man -k ifuse" give?

The --debug option may provide more useful information

>  I can traverse the fs and ls
> the files just fine.  Unfortunately, rhythmbox and gtkpod now see the
> device, but they both insist that it is uninitialized and want to initialize
> it.  Since it *has* been initialized and used for several months, this would
> be a *Bad Thing*.

Unfortunately, that's only to be expected from Apple...

> From what I am seeing when I google the error it seems
> that the problem lies with the fact that Apple keeps changing the database
> format to make sure that you have to use iTunes and that the
> libimobiledevice2 that is in Wheezy is still using a much older version of
> the database.

Yes - one work-around (a bit like trimming your toes so you can fit
into cool shoes too small for your feet) is to use a udev rule to
launch a VirtualBox Windoof machine. The VM can be launched in
seamless mode and iTunes can be automagically be started. That will
require waiting a few minutes for iTunes to become available, but with
USB pass-though, it will allow you to access the full functionality of
your Apple device from your Debian device.

>  I'm not sure if libimobiledevice4 (in Jessie and Sid) is
> current enough, or if I need to wait for libimobiledevice5, which is in
> Experimental).  There is nothing in Wheezy-Backports for the library.

You 'might' be able to simply install the
Testing/Unstable/Experimental version - backports are not always
necessary to have the latest version of a Debian package. Looking at
the dependencies and their minimum versions will tell you.

>
> Am I interpreting this correctly, or am I way off base?

Seems correct to me. Thank you for the information.

>
> Marc
>
>

Kind regards


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/camt2cqo+yyzq3tmmz5jcqsvrr6k3vzvccvjuts_upc5h3pb...@mail.gmail.com



Re: Image cloning software

2014-11-29 Thread Scott Ferguson
On 30 November 2014 at 10:53, Catalin Soare  wrote:
>
> On Nov 30, 2014 1:26 AM, "Scott Ferguson"
>  wrote:
>>
>> On 30 November 2014 at 04:39, Miroslav Skoric  wrote:
>> > Is there a good software for Debian 7.7 as well as for Debian 6.10 that...



>> There is also Debian-based Live CD, it's name escapes me, which...
>>

>
> Clonezilla?

That's the one I was trying to wat-ya-ma-call-it!
Thank you Catalin.

Kind regards


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/camt2cqn_pvmsdqqvrvbuyvpt6mzakgpmmiefzkycgmqpyhn...@mail.gmail.com



Re: Creating a peculiar Live-CD

2014-11-29 Thread Scott Ferguson
On 30 November 2014 at 02:30, Richard Owlett  wrote:
> Scott Ferguson wrote:
>>
>> On 29 November 2014 at 08:17, Richard Owlett  wrote:
>>>
>>> Cindy-Sue Causey wrote:


 On 11/28/14, Richard Owlett  wrote:
>
>
>> 
>>>
>>>
>>>  I've just proved ( again ;/ ) that my writing lacks clarity.
>>
>>
>> It's hard to describe a custom live CD in a single, small post.
>
>
> Not really. I did it in a single sentence - see 3rd sentence down.

How you want to achieve something?? Not what (objectives) - which you
have expanded on in a subsequent reply to Curt. I'm still not clear on
"why".

This may be an xy problem - certainly based on the expanded objectives
placing a script in /etc/rc.local to do what you describe is not the
solution  - nor is placing it in init.

I believe Curt has the right idea - you want a "locked-down" desktop
(limits user action, wipes previous session).  Depending on what your
objectives are (as opposed to "how I want to do what I don't know how
to do") there are two approaches:-

*1*.  If you do *not* control the hardware the end-user will run the
CD on - Build a Live-CD (see the debian packages of the same name).
Modify the live CD to install the packages you want the user to have.
"lock" the permission on any configuration files in their home
directory you don't want them to be able to change. Be sure to lock
down applications that allow extension/plugin additions (i.e.
Iceweasel).
Modify the logout button so that only two choices are possible - halt,
and lock screen. A Live CD will eject during the shutdown process (you
might find "man halt" informative).
Setup autologin without password for a single user. e.g. "student"
Use sudo to limit that users permissions.
Setup ssh for remote administration.
Configure the networking defaults.
That's it (apart from documentation and testing, and internet access
control which I'll cover later).

Every time the users boots from the CD they are automagically logged
into a pristine desktop with limited applications and rights. They can
install, change, or go/save/browse nowhere, that you haven't allowed.
When they shutdown the CD ejects and the box is powered off.

*2.* If you do control the hardware - why bother with the CD?
Just follow the same steps as *1.* with the additional steps of
locking down GRUB and setting boot delay to 1, copying the
modifications (locked permissions and customisation) to /etc/skel, and
adding a script to the shutdown services that runs "deluser
--remove-all-records student".
The added advantage is that it'll be easier to update (and if you are
allowing internet access you need to apply updates - *even* if you use
the Live CD option).

Network/Internet restriction policy.
If you have a LAN that these "users" will be connected to - the best
option IMO is to restrict browing at the access point using white
lists (or blacklists if you enjoy playing pop-a-mole).  Dans Guardian
(for squid) is ideal.
If that's not possible and you need to apply internet access control
at the local box level (LiveCD or HDD) the simplest approach for an
unskilled admin is to install either:-
;Parental Control GUI (which uses tinyproxy and Dans Guardian)
https://launchpad.net/webcontentcontrol/
;WebCleaner http://webcleaner.sourceforge.net/
;privoxy (it's in the Debian repository).


>
>>
>> Dependant on what you mean by "anything else"... find out where
>> "anything else" is triggered and remove the trigger.
>
>
> Ugh ;/ That's "shutting the barn door...". Don't install door in first
> place.

I have no idea what you are trying to say there. Could you expand on
that please.




Kind regards


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/camt2cqpr6rn0noc-7qzeeztxpy+esbbmazemk+ngu7pftvo...@mail.gmail.com



Re: Linux entropy pool / random number benchmark

2014-11-29 Thread David Christensen

debian-user:

I found some more information on Intel's Secure Key:


https://software.intel.com/en-us/articles/intel-digital-random-number-generator-drng-software-implementation-guide

As shown in Figure 3, the DRNG can be thought of as three logical
components forming an asynchronous production pipeline: an entropy
source (ES) that produces random bits from a nondeterministic
hardware process at around 3 Gbps, a conditioner that uses AES (4)
in CBC-MAC (5) mode to distill the entropy into high-quality
nondeterministic random numbers, and two parallel outputs:

A deterministic random bit generator (DRBG) seeded from the
conditioner.

An enhanced, nondeterministic random number generator (ENRNG)
that provides seeds from the entropy conditioner.


I've improved my Linux entropy pool / random number benchmark script 
(see below):


1.  Waits for enough entropy before starting.

2.  Runs at maximum speed until entropy pool gets low.

3.  Continues running only as fast as the entropy pool is refilled.

4.  Added more columns of information, notably "cost" (entropy bits per 
random number) and "efficiency" (random number bytes per entropy bit).


5.  Tuned the script parameters for my Wheezy 7.7 i386 machine with a 
Pentium 4 3.4E GHz HT processor (no Secure Key).  (Note that I needed to 
wiggle the mouse for stages #1 and #3.)


6.  Added statistics to help measure random number generation rates for 
stages #2 and #3.



I invite other people to run the script and post the results.


David



$ cat entropy-random-bench
#!/usr/bin/perl
# $Id: entropy-random-bench,v 1.11 2014/11/30 02:25:20 dpchrist Exp $
###
# Argument defaults -- edit to suit:

my $entropy = '/proc/sys/kernel/random/entropy_avail';
my $random  = '/dev/urandom';
my $start_entropy   = 0.8 * 4096;   # bits
my $continue_entropy= 0.2 * 4096;   # bits
my $min_cost= 64;   # bits
my $length  =  8;   # bytes
my $max_trials  = 80;   # each

###
# The rest of the script should not be edited:

use strict;
use warnings;

use Data::Dumper;
use Getopt::Longqw( :config
auto_help
auto_version );
use List::Util  qw( min max sum );
use Pod::Usage;
use Time::HiRes qw( sleep time );

$| = 1;

our $VERSION= sprintf("%d.%03d", q$Revision: 1.11 $ =~ /(\d+)/g);
my $debug   = 0;

sub get_random
{
open(my $fh, $random)  or die "error opening $random: $!";
my $buf;
my $n = sysread($fh, $buf, $length);
die "nor reading $fh: $!" unless defined $n && $n;
return $buf;
}

sub get_entropy
{
open(my $fh, $entropy) or die "error opening $entropy: $!";
my $e = <$fh>;
chomp $e;
return $e;
}

sub print_header
{
print "trial   e1  length  timeratecost 
   efficiency\n",
	  "-   bitsbytes   seconds bytes/secondbits 
bytes/bit\n",
	  "==  ==  ==  ==  ==  == 
==\n";

}

sub print_row
{
my $trial = shift;
printf "%6i  %6i  %6i  %14e  %14e  %6i  %14e\n",
$trial->{trial},
$trial->{e1},
$trial->{length},
$trial->{time},
$trial->{rate},
$trial->{cost},
$trial->{efficiency},
@_;
}

sub lower
{
my @a = sort @_;
my $n = scalar @a;
pop @a for ( 1 .. $n/2 );
return @a;
}

sub middle
{
my @a = sort @_;
my $n = scalar @a;
shift @a for ( 1 .. $n/4 );
pop   @a for ( 1 .. $n/4 );
return @a;
}

sub upper
{
my @a = sort @_;
my $n = scalar @a;
shift @a for ( 1 .. $n/2 );
return @a;
}

sub mean
{
return sum(@_) / scalar @_;
}

sub print_statistics
{
my $trials = shift;
my %stats;

my @rates = map { $_->{rate} } @$trials;
$stats{n_rates} = scalar @rates;

$stats{max_rate}= max  @rates;
$stats{mean_rate}   = mean @rates;
$stats{min_rate}= min  @rates;

$stats{max_middle_rate} = max  middle @rates;
$stats{mean_middle_rate}= mean middle @rates;
$stats{min_middle_rate} = min  middle @rates;

$stats{max_middle_upper_rate}   = max  middle upper @rates;
$stats{mean_middle_upper_rate}  = mean middle upper @rates;
$stats{min_middle_upper_rate}   = min  middle upper @rates;

$stats{max_middle_lower_rate}   = max  middle lower @rates;
$stats{mean_middle_lower_rate}  = mean middle lower @rates;
$stats{min_middle_lower_rate}   = min  middle lower @rates;

print "\n";
for my $k (sort keys %stats) {
printf "%32s = %s\n", $k, $sta

fsck fails with "partition in use" error after partition umount'ed

2014-11-29 Thread Joel Roth
I notice that /dev/sdb1, an ext4 partition on a USB drive has remounted
read-only.

I try 

umount /dev/sdb1

then 

fsck /dev/sdb1

fsck from util-linux 2.25.2
e2fsck 1.42.12 (29-Aug-2014)
/dev/sdb1 is in use.
e2fsck: Cannot continue, aborting.

Is there a way that a volume can be in use without being
mounted? I don't have a desktop environment, so it's
only vanilla (sid) here.

I suppose I should investigate lsof. I also wonder, 
if changes in udev could be involved.

The underlying issue is that the driver detects an I/O
error. 

Regards,

Joel


-- 
Joel Roth
  


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20141130064757.GA23729@sprite



Re: fsck fails with "partition in use" error after partition umount'ed

2014-11-29 Thread Scott Ferguson
On 30 November 2014 at 17:47, Joel Roth  wrote:
> I notice that /dev/sdb1, an ext4 partition on a USB drive has remounted
> read-only.
>
> I try
>
> umount /dev/sdb1
>
> then
>
> fsck /dev/sdb1
>
> fsck from util-linux 2.25.2
> e2fsck 1.42.12 (29-Aug-2014)
> /dev/sdb1 is in use.
> e2fsck: Cannot continue, aborting.
>
> Is there a way that a volume can be in use without being
> mounted?

Yes. If you have disk errors (not data, disk). It'll be prominent in
your logs (if it's a SATA grep for ATA). For your sake I hope I'm
wrong or that it's just a loose connection.

You may find that the device had problems during boot, and the fsck is
'trying' to fix them - but is unable to access the disk.


>
> The underlying issue is that the driver detects an I/O
> error.

See comment above.
>
> Regards,
>
> Joel
>
>
> --
> Joel Roth
>

Kind regards


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/camt2cqo8c16y+_cfshrzuc8hjyx59cf50ed8dyykmzvagwr...@mail.gmail.com