systemd sd_notify in chroot

2019-06-21 Thread Peter Viskup
At the moment the chrooted rsyslog instance use bind mounted /run/systemd/notify. It is causing the Veeam backup fail. Anyone how to make it working without bind mounting notify file into chroot? Is there some way to let systemd create and listen on another "notify" socket? -- Peter ~# systemctl

Re: Re: Systemd with chroot and under unprivileged user

2019-05-07 Thread Peter Viskup
Opened bug report at mainstream. https://github.com/systemd/systemd/issues/12498 On Tue, May 7, 2019 at 12:17 PM Peter Viskup wrote: > It is related to systemd processing of chroot, as with commenting the User > setting, the service start up successfully. > > Want to mimic the st

Re: Re: Systemd with chroot and under unprivileged user

2019-05-07 Thread Peter Viskup
It is related to systemd processing of chroot, as with commenting the User setting, the service start up successfully. Want to mimic the startup of the service in init script on Debian8 (which is running fine): ~# start-stop-daemon --start --quiet --pidfile "/srv/inst/var/run/rsyslogd.pid" --chuid

Systemd with chroot and under unprivileged user

2019-05-07 Thread Peter Viskup
Running Debian9 with systemd 241-3~bpo9+1 from backports. Having trouble to start rsyslog service in chroot jail using the systemd service file with RootDirectory and User settings. Setting AmbientCapabilities=CAP_SYS_CHROOT does not help and still getting following errors: rsyslog-chroot@inst.se

Problem with fcheck job on Debian9 after kernel update

2018-09-12 Thread Peter Viskup
The fcheck task take +45000 seconds to complete instead of +8500 after latest kernel update. Server is running on ESX as VM. Is somebody experiencing similar prolonging task execution on CPU intensive tasks? May be related to L1TF "Spectre-family" patches. What commands to run to investigate the ro

Re: Disk failure, XFS shutting down, trying to recover as much as possible

2015-06-12 Thread Peter Viskup
Always consider using ddrescue [1] instead of dd - especially once you are not sure about the state of the drive. Tool ddrescue is taking 'dd' image of the drive, but will skip all the areas where the read will return an error. Standard 'dd' will try to continuously re-read that area which could ca

Re: bash, dash and sh

2015-04-23 Thread Peter Viskup
Hi Jeremy, not sure whether you are aware of checkbashisms tool (part of devscripts package). That could help you to learn how to write POSIX compliant scripts. Others helped you much more. :-) On Thu, Apr 23, 2015 at 5:02 AM, jeremy bentham wrote: > I am finally abandonning my fifteen-year-old

Re: Is this an April Fool joke running early ? (Systemd to fork the kernel)

2015-03-31 Thread Peter Viskup
argh :-) this will definitely be one of the best for long time :-D On Tue, Mar 31, 2015 at 10:25 AM, Lisi Reisz wrote: > On Tuesday 31 March 2015 08:21:12 Peter Viskup wrote: > > "Instead we will soon have GNU/systemd, [a] much simpler, unified > platform. > > GNU/s

Re: Is this an April Fool joke running early ? (Systemd to fork the kernel)

2015-03-31 Thread Peter Viskup
"Instead we will soon have GNU/systemd, [a] much simpler, unified platform. GNU/systemd will be a better target for third-party developers and easier to support." What? Foolish guys... Reading behind the words - no cooperation, discussion and respect, we will take over! Completely wrong... Would l

Re: (ssh) Connection closed by

2015-03-30 Thread Peter Viskup
Could be your ssh client proposing ciphers the SSH server doesn't understand. This was known issue with communication of ssh client 5+ to ssh server 4.x and older. Give it a try and let us know. http://www.held.org.il/blog/2011/05/the-myterious-case-of-broken-ssh-client-connection-reset-by-peer/

Re: Redirect HTTPS with Squid3+Squidguard

2015-03-27 Thread Peter Viskup
Unfortunately we are living in real (not ideal) world and there are cases where the SSL split is definitely needed or should be considered at least. For example Squid 3.5 coming with new design of SSLBump allowing to do some inspection of the connection prior the real SSLSplit. That gives you possi

Re: Redirect HTTPS with Squid3+Squidguard

2015-03-26 Thread Peter Viskup
Hello Reco, On Thu, Mar 26, 2015 at 4:13 PM, Reco wrote: > Hi. > And just as well child can see a naughty picture on TV. Or a phone ad. > Or a magazine/newspaper. Anywhere, once you start thinking about it. > And that's just sad, disturbingly and one of the main reasons of so many people facin

Re: Redirect HTTPS with Squid3+Squidguard

2015-03-26 Thread Peter Viskup
> -Ursprüngliche Nachricht- > Von: Reco [mailto:recovery...@gmail.com] > Gesendet: Donnerstag, 26. März 2015 13:52 > An: debian-user@lists.debian.org > Betreff: Re: Redirect HTTPS with Squid3+Squidguard > > Hi. > > On Thu, 26 Mar 2015 13:21:57 +0100 > Peter Vis

Re: Redirect HTTPS with Squid3+Squidguard

2015-03-26 Thread Peter Viskup
Without the SSL splitting the only option is to install some software on the client side. Some "endpoint" security software doing the inspection of the web data transfers on the fly before they pass the TLS tunnel. It's the same like SSL split on Squid, but let's say more transparent. Unfortunately

Re: Redirect HTTPS with Squid3+Squidguard

2015-03-26 Thread Peter Viskup
s the inspection not possible. The Squid's SSLBump/Split (whose name in latest version SslPeekAndSplice) is the only feature which will make the inspection happen. This means there are still some cases where this feature is very helpful and the only one freely available. -- Peter Viskup On Thu, Ma

Re: fakeroot to build a package?

2015-02-17 Thread Peter Viskup
The first seems to be quick and not-detailed tutorial. The others are more detailed descriptions. What package failed that first approach, in which step and what was the error message? Anyway I found it quite hard to went through the understanding the debian packaging by myself. There are many to

NFS server write issues using netgroup

2015-02-01 Thread Peter Viskup
Would like to discuss the issue I am facing before opening bug report. NFS System: latest Debian Jessie NFS: nfs-kernel-server 1:1.2.8-9 Export config: /data/folder @clients(rw,no_subtree_check,root_squash) Netgroup config: root@media:~# cat /etc/netgroup clients (dm800,-,), (laptop,-,) root@me

Re: Linux based cellphones?

2015-01-30 Thread Peter Viskup
closed sourced components AFAIK, but check with them. -- Peter Viskup On Fri, Jan 30, 2015 at 10:47 AM, Karen Lewellen wrote: > Now that seems nifty. > Thanks for it. > Kare > > > > On Fri, 30 Jan 2015, Gian Uberto Lauri wrote: > > Karen Lewellen writes: >> >

Re: glibc bug - time to patch

2015-01-28 Thread Peter Viskup
before considering downtimes and patching activities on production servers read these: https://www.debian.org/security/2015/dsa-3142 http://seclists.org/oss-sec/2015/q1/283 especially the second link mention network-facing software which is not vulnerable due to proper sanitization out of glibc.

Re: XBMC/Kodi? Anybody actually using this on Debian?

2015-01-27 Thread Peter Viskup
Hi Roland, regarding the XBMC version - try to use Deb-multimedia repository [1]. There are more recent versions available. Ad 1) more things which needs to be checked - kernel support - Xorg open source radeon or closed sourced fglrx ati drivers support Try to read these [2] [3] [4] Ad 2) fir

Re: how to shutdown in less than 8 minutes

2014-10-17 Thread Peter Viskup
Hi Pierre, you can answer your question by yourself by having a look into directory /lib/systemd/system and read systemctl man page. Small hint could be to run 'systemctl -a -t service' command. Some more information about systemd in Debain can be read on Wiki https://wiki.debian.org/systemd. Hope

Re: OT: just falling back to fluxbox after Gnome3 mem-leak experince

2013-02-08 Thread Peter Viskup
On 02/08/2013 10:44 PM, Jochen Spieker wrote: Peter Viskup: viskup@viskup:~$ awk '/Name|VmSize|VmPeak/' /proc/4186/status Name: gnome-shell VmPeak: 3537456 kB VmSize: 3403068 kB I am not sure, but I suspect you misinterpret those numbers. This is the amount of memory that the a

Re: OT: just falling back to fluxbox after Gnome3 mem-leak experince

2013-02-08 Thread Peter Viskup
On 02/08/2013 03:12 PM, Jon Dowland wrote: On Fri, Feb 08, 2013 at 11:28:51AM +0100, Peter Viskup wrote: viskup@viskup:~$ uptime 11:10:57 up 16 days, 17:01, 10 users, load average: 1.61, 1.34, 1.07 I'm not sure what this is supposed to demonstrate. Has gnome-shell been running for 16

Re: OT: just falling back to fluxbox after Gnome3 mem-leak experince

2013-02-08 Thread Peter Viskup
top every time. It consumed all my RAM and swap... -- Peter Viskup -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/51155cb7.6060...@gmail.com

OT: just falling back to fluxbox after Gnome3 mem-leak experince

2013-02-08 Thread Peter Viskup
me strange "Gnome Shell Integration" plugin enabled which led to frozen Firefox. So I disabled that plugin and now everything works like a charm. Bye-bye Gnome. -- Peter Viskup -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe&q

Re: Upgrade from stable to testing hosed my server

2013-01-24 Thread Peter Viskup
On 01/24/2013 05:51 PM, Mark Phillips wrote: Peter, Can I access the log if I boot the machine with a live cd of some kind? Mark Hello Mark, read the release notes first and think about what you did wrong. I do not know how you proceed with the upgrade, but yes there are paths like these:

Re: Upgrade from stable to testing hosed my server

2013-01-24 Thread Peter Viskup
On 01/24/2013 02:30 PM, Mark Phillips wrote: I used aptitude to upgrade a headless server from Debian stable to Debian testing. The upgrade did not generate any error messages, but when I rebooted I could not ssh into the box (connection refused) nor do I get any output on a monitor I attache

Re: Xen vs. KVM on Debian squeeze

2012-12-11 Thread Peter Viskup
not experienced on Wheezy. Consider LXC [2] in case you have some concerns of CPU/memory overhead and you plan to run only Linux virtual servers. [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=693851 [2] http://wiki.debian.org/LXC -- Peter Viskup -- To UNSUBSCRIBE, email to

Fwd: Re: Security support for CMSes

2012-10-07 Thread Peter Viskup
Overlooked it was not sent to debian-user list. Original Message Subject:Re: Security support for CMSes Date: Mon, 08 Oct 2012 00:07:56 +0200 From: Peter Viskup To: Robert Pommrich , lu...@debian.org, secur...@debian.org Hello Nico, On 10/07/2012 08:25 PM

Security support for CMSes

2012-10-07 Thread Peter Viskup
ng any CMS available in Debian repositories? Does somebody have similar experience from the past or with another CMS from Debian repositories? Thank you. Best regards, -- Peter Viskup -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trou

Re: What is playing videos in web browsers?

2012-09-15 Thread Peter Viskup
On 09/16/2012 12:30 AM, lee wrote: Hi, trying out chromium, I have found that both seamonkey and chromium are able to play arbitrary videos found on youtube. I used to have libflashplayer.so in the ~/.mozilla/plugins directory which used to play such videos. I have removed it for testing and b

Re: Xen memory management not working

2012-04-23 Thread Peter Viskup
On 04/23/2012 03:01 AM, Bob Proulx wrote: You didn't say... Have you rebooted your VM since then? Bob Hi Bob, yes I did and the behavior didn't changed. -- Peter -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@list

Xen memory management not working

2012-04-22 Thread Peter Viskup
07:53:54 UTC 2011 x86_64 GNU/Linux Could anybody point me to deeper investigation of this strange issue and if not - is there any way to get packages of xen-utils-4.0 and xenstore-utils before the upgrade to latest version? Best regards, -- Peter Viskup -- To UNSUBSCRIBE, email to debian

Xen memory management not working

2012-04-12 Thread Peter Viskup
53:54 UTC 2011 x86_64 GNU/Linux Could anybody point me to deeper investigation of this strange issue and if not - is there any way to get packages of xen-utils-4.0 and xenstore-utils before the upgrade to latest version? Best regards, -- Peter Viskup -- To UNSUBSCRIBE, email to debian-user