Re: Iptables at boot

[Dejan Jocic]

On 21-01-18, Mark Fletcher wrote:
> On Sun, Jan 21, 2018 at 02:02:07AM +0100, Dejan Jocic wrote:
> > On 20-01-18, Jacques Rodary wrote:
> > > Hi
> > > How can I start iptables at boot. I don't find  an equivalent to  " 
> > > service
> > > iptables start" with systemd and does'nt know how to create a new
> > > iptables.service. The manpages aren't quite clear for me. Thanks for any
> > > help.
> > >   Jacques
> > > 
> > 
> > There are two options. One would be to learn to write systemd service
> > units. There are many tutorials on net for how to write those with
> > examples. Other would be to install iptables-persistent package. You can
> > find more about using iptables-persistent package if you google it, you
> > will surly run on few quick howtos.
> > 
> > 
> 
> To get you started [addressing the OP], here is the service file I use:
> 
> [Unit]
> Description=Load Iptables Rules
> ConditionFileIsExecutable=/etc/systemd/scripts/iptables
> After=network.target
> 
> [Service]
> Type=forking
> ExecStart=/etc/systemd/scripts/iptables
> TimeoutSec=0
> RemainAfterExit=yes
> 
> [Install]
> WantedBy=multi-user.target
> 
> This goes in /lib/systemd/system/iptables.service and assumes your 
> iptables commands are in a script which is called iptables, is 
> executable, and is located in /etc/systemd/scripts
> 
> I must point out there may be Debian policies of which I am not aware 
> about where the files should ideally go; I lifted this configuration 
> from a non-Debian box. There is nothing about it that will _not work_ on 
> Debian, but there may be a preferred Debian location for such files, 
> which hopefully my contribution will encourage someone knowledgable to 
> add.
> 
> then to run it once, as root:
> systemctl start iptables
> 
> and to set it up so it runs at boot, as root:
> systemctl enable iptables
> 
> HTH
> 
> Mark
> 

Location for local custom unit files should be /etc/systemd/system but
it can be on several more places, if you desire so. It is just that
those in /etc/systemd/system take precedence over others.

Re: Libreoffice eats 100%cpu

[Frank]

Op 15-01-18 om 10:38 schreef Kamil Jońca:

libreoffice started to eat whole core of my cpu, the same is on fresh
profile.
Any hints?


The same thing here. Found this thread:
https://bugs.documentfoundation.org/show_bug.cgi?id=108246

The suggestion to remove the lot and just keep what you need seemed to 
work, but it also removed the GTK appearance (Xfce desktop). When I 
reinstalled that, the CPU issue came back. So I ended up reinstalling 
all of libreoffice, with one exception: libreoffice-gtk3.


Regards,
Frank

Re: Libreoffice eats 100%cpu

[Hans]

Am Sonntag, 21. Januar 2018, 10:34:45 CET schrieb Frank:
Hi,

looks like one has to deinstall libreoffice-gtk2, too.

However, after doing so, the 100% issue was gone - and the libreoffice 
quickstarter, too.

I also discovered, that just running the libreoffice quickstarter is also 
using 100 % cpu power (a it is just running the "soffice.bin" process).

Hope, libreoffice 6 will come soon.

Best

Hans   
> Op 15-01-18 om 10:38 schreef Kamil Jońca:
> > libreoffice started to eat whole core of my cpu, the same is on fresh
> > profile.
> > Any hints?
> 
> The same thing here. Found this thread:
> https://bugs.documentfoundation.org/show_bug.cgi?id=108246
> 
> The suggestion to remove the lot and just keep what you need seemed to
> work, but it also removed the GTK appearance (Xfce desktop). When I
> reinstalled that, the CPU issue came back. So I ended up reinstalling
> all of libreoffice, with one exception: libreoffice-gtk3.
> 
> Regards,
> Frank

Re: Configuring WebHTTrack as I WANT

[Curt]

On 2018-01-20, Richard Owlett  wrote:
>
> at line 7:SRCHBROWSEREXE="x-www-browser www-browser iceape mozilla 
> firefox ...
> edited to:SRCHBROWSEREXE="x-www-browser www-browser iceape mozilla 
> seamonkey firefox ...
>

I'm not in agreement with this edit, as you have left 'x-www-browser' at
the head of the list, and the x-www-browser symlink is probably pointing
to firefox and chosen first (finding itself as it does at the head of
the list of possibilities).

I would have put seamonkey at the head of the list, myself.  Could be
wrong, though.

Now, I believe davidson suggested modifying your system-wide default
browser to reflect your seamonkey shenanigans.

 update-alternatives --config x-www-browser

I guess is the way to do that correctly.

https://wiki.debian.org/HOWTO/DefaultWebBrowser

-- 
“True terror is to wake up one morning and discover that your high school class
is running the country.” – Kurt Vonnegut

Re: Configuring WebHTTrack as I WANT

[Richard Owlett]

On 01/20/2018 04:42 PM, davidson wrote:

On Sat, 20 Jan 2018, Richard Owlett wrote:

Caveat: I know nothing about seamonkey,


No problem, I've been using its predecessors since Netscape 4.


and I have never used httrack/webhttrack.


I chose it primarily because I was familiar with its Windows version.




WebHTTrack insists on using Firefox as the User Interface.


Are you certain webhttrack isn't just using x-www-browser, which
happens to be set, via the links in your /etc/alternatives directory,
to firefox?

What does the following tell you?

  $ update-alternatives --display x-www-browser


It verbosely tells I'm using Firefox ;)




That *VERY* annoying as I use SeaMonkey > 99.9% of the time.


If in fact firefox is the currently selected alternative for
x-www-browser, you can choose another one (interactively) with

  # update-alternatives --config x-www-browser

If seamonkey is not presently one of the available alternatives for
x-www-browser, you can register it as an alternative like so[1]:

  # update-alternatives --install /usr/bin/x-www-browser x-www-browser 
/path/to/seamonkey 20


If you do in fact need to register seamonkey as an alternative for
x-www-browser, and if you have a seamonkey man page installed, you'll
probably want to register its man page too. You could extend the
command above like so, to accomplish this:

  # update-alternatives --install /usr/bin/x-www-browser x-www-browser
    /path/to/seamonkey 20 --slave
    /usr/share/man/man1/x-www-browser.1.gz x-www-browser.1.gz
    /path/to/man-page/for/seamonkey.1.gz

You will need to replace /path/to/seamonkey, in the above commands,
with the path to your seamonkey program,

  $ type -P seamonkey # print path to seamonkey executable

and replace /path/to/man-page/for/seamonkey.1.gz with the appropriate
path to the man page file:

  $ man -w seamonkey # display the path to seamonkey's man page

I went to the website  and did not find 
anything even somewhat relevant.


I attempted to edit usr/bin/webhttrack without benefit.
Searching suggest these locations for possible edits.

Contains:
at line 6:    BROWSEREXE=""
edited to:    BROWSEREXE="seamonkey"

at line 7:    SRCHBROWSEREXE="x-www-browser www-browser iceape mozilla 
firefox ...
edited to:    SRCHBROWSEREXE="x-www-browser www-browser iceape mozilla 
seamonkey firefox ...


My line of questioning/suggestions above was inspired by the prominent
position of "x-www-browser" in the list immediately above.


I saw browser names I recognized and ignored the ones I didn't.
Having just done a web search for "x-www-browser" I should have searched 
for the first unknown in what was obviously a prioritized list.


Preliminary searches for "BROWSEREXE" and "SRCHBROWSEREXE" indicates 
pursuing them will be educational.




Lastly, regarding the change below, does a *directory*
/usr/bin/seamonkey/ exist on your system?


Yepp. I put it there, so to speak.
When Debian and Mozilla where at odds over browser names I said 
"Phooey." I've been using SeaMonkey direct from 
.



Looks a little weird to me. (Not that I would know.)


I do do weird things. Sometimes for valid reasons. Other times it causes 
an 'educational experience'.




at line 20:    SRCHPATH="$BINWD /usr/local/bin /usr/share/bin 
/usr/bin  ...
edited to:    SRCHPATH="$BINWD /usr/bin/seamonkey/ /usr/local/bin 
/usr/share/bin /usr/bin ...


Good luck with your project.

NOTES

1. "20" is a priority. Relatively high numbers mean relatively high
priority. Replace it with whatever numeric priority you fancy. But
note that with "update-alternatives --config" you can manually select
any alternative, regardless of its priority.


Thank you.

[SUCCESS!] Re: Configuring WebHTTrack as I WANT

[Richard Owlett]

On 01/21/2018 04:39 AM, Richard Owlett wrote:

On 01/20/2018 04:42 PM, davidson wrote:

On Sat, 20 Jan 2018, Richard Owlett wrote:

[snip]
  # update-alternatives --install /usr/bin/x-www-browser x-www-browser 
/path/to/seamonkey 20




Worked like a charm. Now to re-read the WebHTTrack documentation. I've 
forgotten a lot since I last used it.


Thanks again.

Re: Configuring WebHTTrack as I WANT

[Richard Owlett]

On 01/21/2018 04:15 AM, Curt wrote:

On 2018-01-20, Richard Owlett  wrote:


at line 7:  SRCHBROWSEREXE="x-www-browser www-browser iceape mozilla
firefox ...
edited to:  SRCHBROWSEREXE="x-www-browser www-browser iceape mozilla
seamonkey firefox ...



I'm not in agreement with this edit, as you have left 'x-www-browser' at
the head of the list, and the x-www-browser symlink is probably pointing
to firefox and chosen first (finding itself as it does at the head of
the list of possibilities).

I would have put seamonkey at the head of the list, myself.  Could be
wrong, though.


You weren't! 
As I replied to davidson, "Having just done a web search for 
"x-www-browser" I should have searched for the first unknown in what was 
obviously a prioritized list."




Now, I believe davidson suggested modifying your system-wide default
browser to reflect your seamonkey shenanigans.


Using his directions and with man page open it not only worked but I 
learned details of what I was doing.




  update-alternatives --config x-www-browser

I guess is the way to do that correctly.

https://wiki.debian.org/HOWTO/DefaultWebBrowser

Re: Radiotray fails in stretch

[Curt]

On 2018-01-20, Eike Lantzsch  wrote:
>> 
>> looks like a shit program to me - just wondering how it got it into debian
>> packages.
>> When I read first this post I was thinking there is an app for controlling
>> radio receiver but it turns out it is online radio - WTF! online radio is
>> not a radio like terrestrial broadcast. Each online radio offers nowdays a
>> HTML5 stream, which can be automatically played by any HTML5 compatible
>> browser.
>> 
>> correct me if I am wrong
>> 
>> regards
>
> No, I think you're right either way.

Just to be clear this python program is a small utility that sits in
your system tray and allows you to select and listen to online radio
streams, as decoded by the gstreamer librairies--the only dependency
other than some python stuff, it seems.

Why this is invalid because you can also listen to online radio from an
HTML5 compatible browser, I am uncertain (this app is ostensibly
designed to be minimal, whereas HTML5 compatible browsers generally
have maximal tendencies).

Of course if the application isn't working that does qualify as a major
point in its disfavor.

I just read that 'python-xdg' should be a hard dependency, the installation
of which has fixed some folks' mortal bugs.


> kind regards and have a nice day
>
>


-- 
“True terror is to wake up one morning and discover that your high school class
is running the country.” – Kurt Vonnegut

Re: Radiotray fails in stretch

[tony]

On 21/01/18 14:20, Curt wrote:
> On 2018-01-20, Eike Lantzsch  wrote:
>>>
>>> looks like a shit program to me - just wondering how it got it into debian
>>> packages.
>>> When I read first this post I was thinking there is an app for controlling
>>> radio receiver but it turns out it is online radio - WTF! online radio is
>>> not a radio like terrestrial broadcast. Each online radio offers nowdays a
>>> HTML5 stream, which can be automatically played by any HTML5 compatible
>>> browser.
>>>
>>> correct me if I am wrong
>>>
>>> regards
>>
>> No, I think you're right either way.
> 
> Just to be clear this python program is a small utility that sits in
> your system tray and allows you to select and listen to online radio
> streams, as decoded by the gstreamer librairies--the only dependency
> other than some python stuff, it seems.
> 
> Why this is invalid because you can also listen to online radio from an
> HTML5 compatible browser, I am uncertain (this app is ostensibly
> designed to be minimal, whereas HTML5 compatible browsers generally
> have maximal tendencies).
> 
> Of course if the application isn't working that does qualify as a major
> point in its disfavor.
> 
> I just read that 'python-xdg' should be a hard dependency, the installation
> of which has fixed some folks' mortal bugs.
> 
> 
>> kind regards and have a nice day
>>

Well, let's put this to bed. Thanks to those who responded; Eike at
least tried to help, his symptoms precisely match mine, thus confirming
it's a bug, despite the developer being unable to replicate it. Ah, well...

It's NOT a shit program; it's been happily fulfilling my needs for many
years (certainly since Wheezy); it sits unobtrusively in the system
tray, without much overhead. I'm not in the habit of running a
resource-hungry web browser all the time.

However, it no longer works, so must be consigned to the shit-heap.
Thanks, anyway

Re: Radiotray fails in stretch

[deloptes]

Curt wrote:

> Of course if the application isn't working that does qualify as a major
> point in its disfavor.
> 
> I just read that 'python-xdg' should be a hard dependency, the
> installation of which has fixed some folks' mortal bugs.

I understand the purpose of this application, however the benefit is
marginal as the browser is the thing used most of the time (and from the
said above, problems expected).

I just wonder why it would be the best internet radio player. I recommend to
add an i infront of "RadioTray" -> "iRadioTray". It  would not be
pretending to be something it is not, because radio is something that is
being broadcasted on air. the one from the internet is internet radio.

Re: Radiotray fails in stretch

[David Wright]

On Sun 21 Jan 2018 at 15:11:14 (+0100), deloptes wrote:
> Curt wrote:
> 
> > Of course if the application isn't working that does qualify as a major
> > point in its disfavor.
> > 
> > I just read that 'python-xdg' should be a hard dependency, the
> > installation of which has fixed some folks' mortal bugs.
> 
> I understand the purpose of this application, however the benefit is
> marginal as the browser is the thing used most of the time (and from the
> said above, problems expected).

Marginal to you, maybe. But there are people who are happy to
spend more on a standalone internet radio than I would pay for
a reasonably specified computer. They don't want the complication.

> I just wonder why it would be the best internet radio player. I recommend to
> add an i infront of "RadioTray" -> "iRadioTray".

Yes, this is important for people who don't get as far as the one-line
description of the package (Description: online radio streaming player),
let alone the paragraph:

"Description-en: online radio streaming player
 This is a simple music streaming player that lives on the system tray.
 By clicking on the RadioTray icon, you'll be presented with a list of
 pre-configured online radios. By selecting one of those radios, it will
 start playing."

> It  would not be
> pretending to be something it is not, because radio is something that is
> being broadcasted on air. the one from the internet is internet radio.

Um, you just wrote, without a hint of proscription:

"When I read first this post I was thinking there is an app for controlling
radio receiver but it turns out it is online radio - WTF! online radio is
not a radio like terrestrial broadcast. Each online radio offers nowdays a
HTML5 stream, which can be automatically played by any HTML5 compatible
browser."

Cheers,
David.

Re: Radiotray fails in stretch

[Frank]

Op 21-01-18 om 14:53 schreef tony:

Well, let's put this to bed. Thanks to those who responded; Eike at
least tried to help, his symptoms precisely match mine, thus confirming
it's a bug, despite the developer being unable to replicate it. Ah, well...


Radiotray failed for me like that when stretch was testing. Installing 
python-xdg fixed it (that package is now a dependency of the radiotray 
package).



It's NOT a shit program;


Indeed.


However, it no longer works, so must be consigned to the shit-heap.


Nope. Still works here (Xfce/testing/buster).

Regards,
Frank

IPv6 SLAAC and RFC 7217

[John Naggets]

Hi,

I was wondering if there is a "standard" way in Debian 9 through the
/etc/network/interfaces file to enable/force using a stable private
IPv6 address using SLAAC as specified in RFC 7217?

Any one already managed to do that on a Debian 9 client? or know how to do that?

Cheers,
John

Re: IPv6 SLAAC and RFC 7217

[Ulf Volmer]

On 21.01.2018 19:29, John Naggets wrote:

> I was wondering if there is a "standard" way in Debian 9 through the
> /etc/network/interfaces file to enable/force using a stable private
> IPv6 address using SLAAC as specified in RFC 7217?

no personal experience, but you should look at dhcpcd, with support
for RFC 7217. AFAIK enabled in the default configuration.

best regards
Ulf

Re: Iptables at boot

[Ben Caradoc-Davies]

On 21/01/18 16:05, Mark Fletcher wrote:

To get you started [addressing the OP], here is the service file I use:


Mine is slightly different and has the commands inline:


$ cat /etc/iptables/iptables.service
[Unit]
Description=iptables rules
After=network.target

[Service]
Type=oneshot
ExecStart=/bin/bash -c "/sbin/iptables-restore < 
/etc/iptables/iptables.rules"
ExecStart=/bin/bash -c "/sbin/ip6tables-restore < 
/etc/iptables/ip6tables.rules"

RemainAfterExit=yes
ExecStop=/sbin/iptables -F
ExecStop=/sbin/ip6tables -F

[Install]
WantedBy=multi-user.target


You can make your initial rules file with iptables-save.

Kind regards,

--
Ben Caradoc-Davies 
Director
Transient Software Limited 
New Zealand

Re: IPv6 SLAAC and RFC 7217

[Sven Hartge]

Ulf Volmer  wrote:
> On 21.01.2018 19:29, John Naggets wrote:

>> I was wondering if there is a "standard" way in Debian 9 through the
>> /etc/network/interfaces file to enable/force using a stable private
>> IPv6 address using SLAAC as specified in RFC 7217?

> no personal experience, but you should look at dhcpcd, with support
> for RFC 7217. AFAIK enabled in the default configuration.

Side note, to avoid confusion:

  dhcpcd is a different software than isc-dhcp-client.

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.

Re: looking for drawing program to inscribe a square in a circle and label items

[Dan Hitt]

On Sat, Jan 20, 2018 at 6:10 AM,   wrote:
> On Friday, January 19, 2018 10:50:11 PM Dan Hitt wrote:
>> So, something like xfig, except that it should have geometrically
>> describable grouping or linking options.  (You can glue objects
>> together with xfig, but afaik not link them loosely, like through a
>> point of tangency.)
>>
>> I.e., if i draw two primitives (like a square and a circle), then it
>> should be possible to demand that they stay tangent, or that the
>> corners of the square be on the cricle (inscription), and these
>> relations will continue to hold if one primitive or the other is
>> resized or scaled or moved (and the relations should be recorded as
>> some kind of constraints in the file format).
>>
>> Maybe some kind of svg editor is capable of doing this?
>
> (I'm not familiar with xfig, maybe it is somewhat like Visio / dia?)
>
> I don't know if dia is capable of all you want or not, but I mention it just
> because it is the Linux drawing tool that I am slightly familiar with, use
> (very rarely), and I think of as (a partial?) equivalent of Visio.  (I used to
> use Visio (Windows only, afaik) for quite a few things, since then I've had
> much less need for drawing things (or avoided drawing the things I should have
> ;-).
>
> Anyway, I am subscribed to a dia mail list and see some of the discussions
> about various problems.
>
> If I wanted to do what you described in Visio, I'd proceed something like this
> (forgetting some of the Visio terms for things)--for example, for the square
> inscribed in a circle:
>
> Create a "template" (mcow (my choice of words)) starting with a circle.
>
> Create connection points on the circle at 0, 90, 180, and 270 degrees.
>
> (That might be all I put in the template, or I might include line segments
> connecting the various points to make the square, diagonals, and so forth.  If
> I want to connect the midpoints of the square with other line segments, I'd
> include connection points at the midpoints of the lines in the template (which
> obviously means I'd include the lines making the square in the template).
>
> Then I would use the template to create an "instance" (again, MCOW) of that
> object which I could place anywhere on the drawing and resize as desired.
>
> For the square tangent to the circle, I'd do something similar, as a template,
> create a square, put a connection point at the midpoint of one of the sides,
> add a circle with a connection point, connect the circle to the square at the
> connection points.  Then create an instance of that template and place it on
> the drawing.
>
> (If the tangent point should be elsewhere on the side of the square, I'd put
> the connection point there--if it needs to vary the position, I'd have to
> understand how it should vary and think some more.)
>
> I'm fairly sure all of this could be done in Visio.  I'm not as sure about
> dia--a recent thread on the dia list talked about some difficulty connecting 
> two
> lines together, but at least one workaround was suggested..
>

Thanks RH for these detailed instructions on how to do this with dia.
I think this might be a canonical linux solution.

Thanks also David and Curt for the suggestion to use geogebra.  This
is also interesting software, and has the appeal of maintaining some
structural information in visible text form (no doubt because of the
educational applications).

Thanks Joe for the reference to librecad, which provides yet another
way of putting circles in the plane.

And thanks Chris for the reference to inkscape, which i also tried out.

All four of these packages look good to me, and i was able to apt-get
all of them.  (The cabri thing also looks interesting, but i like to
work locally for anything that does not require remote data.)

dan

Re: IPv6 SLAAC and RFC 7217

[Andy Smith]

Hi John,

On Sun, Jan 21, 2018 at 07:29:23PM +0100, John Naggets wrote:
> I was wondering if there is a "standard" way in Debian 9 through the
> /etc/network/interfaces file to enable/force using a stable private
> IPv6 address using SLAAC as specified in RFC 7217?

I have never tried it but 
seems to suggest that you would set the stable_secret sysctl and
then it would work automatically after that.

You could set the sysctl from /etc/network/interfaces or from
/etc/sysctl.d/ or just by some other script.

Cheers,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Emacs info documentation missing in Debian Unstable

[Nishan Singh Mann]

Hello, on Ubuntu 17.10 which to my knowledge is based on Debian unstable,
installing Emacs via $sudo apt install emacs and then trying to view the
Emacs manual using C-h r fails with error "Info file emacs does not exist"
The same set of instructions on Ubuntu 16.04 works and one ends up with a
local copy of the GNU emacs manual. Did the documentation get delegated to
another package or am I missing something?
Thanks,
Nishan


-- 
Nishan Singh Mann

Re: Emacs info documentation missing in Debian Unstable

[Davor Balder]

On 22/01/18 15:33, Nishan Singh Mann wrote:
Hello, on Ubuntu 17.10 which to my knowledge is based on Debian 
unstable, installing Emacs via $sudo apt install emacs and then trying 
to view the Emacs manual using C-h r fails with error "Info file emacs 
does not exist" The same set of instructions on Ubuntu 16.04 works and 
one ends up with a local copy of the GNU emacs manual. Did the 
documentation get delegated to another package or am I missing something?

Thanks,
Nishan



You might be missing a package:


apt install *emacs24-common-non-dfsg*

Core documentation has been split due to dfsg issues.

Refer to:

https://www.emacswiki.org/emacs/EmacsForDebian

for some light bedtime reading :-)

Kind regards,

D

Re: Emacs info documentation missing in Debian Unstable

[Ben Finney]

Nishan Singh Mann  writes:

> Hello, on Ubuntu 17.10 which to my knowledge is based on Debian unstable,
> installing Emacs via $sudo apt install emacs and then trying to view the
> Emacs manual using C-h r fails with error "Info file emacs does not
> exist"

The Emacs manual is distributed subject to the GNU FDL, which imposes
non-free restrictions on modification and redistribution. (Yes, it's
very misleading to have non-free restrictions in a so-called “free
documentation license”, but that's what the FSF have chosen.)

Manoj Srivastava has summarised effectively
https://people.debian.org/~srivasta/Position_Statement.xhtml> why
the GNU FDL makes a work non-free.

So, Emacs under condition of the GNU GPL is free, and is in Debian; but
the Emacs manual under condition of the GNU FDL is non-free, so it
cannot be in Debian.

You can either view the manual online
https://www.gnu.org/software/emacs/manual/> or get it from outside
Debian (for example, the ‘non-free’ area which is not part of Debian).

-- 
 \“Ubi dubium, ibi libertas.” (“Where there is doubt, there is |
  `\freedom.”) |
_o__)  |
Ben Finney