Re: [gentoo-user] OT: but cool - NASDAQ is gentoo powered

2011-08-17 Thread Peter Humphrey
On Tuesday 16 August 2011 02:48:30 Michael Mol wrote:

> How does everybody here use Gentoo? For personal use? Production use? For
> server, desktop or embedded roles? What's your most interesting setup
> or use case?

Since you ask: my workstation runs Gentoo. My old workstation sometimes 
does; at other times it's experimenting with other distributions.

I have a midget server on the LAN (Atom N270) which runs Gentoo, but it's 
too underpowered to do all the compiling itself, so it NFS-exports its 
packages directory to my workstation, where I have a 32-bit chroot set up as 
an image of the Atom. Emerging is done here, making the packages available 
for installation on the Atom. This is a cumbersome operation though.

The Atom serves web, time, squid proxy, dns, cups and mysql to the LAN. It 
runs http-replicator and rsyncd to keep a local portage tree for the other 
boxes. I'd like it to serve mail too, but I've never managed to set that up.

My laptop runs Gentoo, Fedora or WinXP.

-- 
Rgds
Peter   Linux Counter 5290, 1994-04-23



Re: [gentoo-user] OT: but cool - NASDAQ is gentoo powered

2011-08-17 Thread Alan Mackenzie
Hi, everybody.

On Mon, Aug 15, 2011 at 09:48:30PM -0400, Michael Mol wrote:
> On Mon, Aug 15, 2011 at 8:28 PM, Adam Carter  wrote:
> > http://www.itworld.com/open-source/193823/how-linux-mastered-wall-street

> This is related to a question I wanted to poll the list with. How does
> everybody here use Gentoo? For personal use? Production use? For
> server, desktop or embedded roles? What's your most interesting setup
> or use case?

I seem to be pretty much on my own, here.  I use Gentoo on a single
desktop computer at home, mainly for developing free software (Emacs).

I've configured the PC with two HDDs in RAID-1 (mirrored), and I run
logical volume manager.  I keep the box aggresively up to date, synching
portage almost every day.

One of these days, I'll get around to installing Gentoo on a dusty old
laptop I've got.

> -- 
> :wq

Alan Mackenzie (Nuremberg, Germany).



Re: [gentoo-user] OT: but cool - NASDAQ is gentoo powered

2011-08-17 Thread Joost Roeleveld
On Wednesday, August 17, 2011 09:59:50 AM Peter Humphrey wrote:
> On Tuesday 16 August 2011 02:48:30 Michael Mol wrote:
> > How does everybody here use Gentoo? For personal use? Production use?
> > For
> > server, desktop or embedded roles? What's your most interesting setup
> > or use case?
> 
> Since you ask: my workstation runs Gentoo. My old workstation sometimes
> does; at other times it's experimenting with other distributions.
> 
> I have a midget server on the LAN (Atom N270) which runs Gentoo, but it's
> too underpowered to do all the compiling itself, so it NFS-exports its
> packages directory to my workstation, where I have a 32-bit chroot set up as
> an image of the Atom. Emerging is done here, making the packages available
> for installation on the Atom. This is a cumbersome operation though.
> 
> The Atom serves web, time, squid proxy, dns, cups and mysql to the LAN. It
> runs http-replicator and rsyncd to keep a local portage tree for the other
> boxes. I'd like it to serve mail too, but I've never managed to set that up.

Putting email on the Atom using IMAP might not be the best option. IMAP can be 
quite heavy on resources on the server-side.

I use a quad-core AMD for my server.

--
Joost



Re: [gentoo-user] OT: but cool - NASDAQ is gentoo powered

2011-08-17 Thread James Broadhead
On 16 August 2011 01:28, Adam Carter  wrote:
> "Linux also offered financial firms the ability to modify the source
> code to further speed performance, Lameter said. "It depends on how
> daring the exchange is," Lameter said, noting that NASDAQ uses a
> modified version of the Gentoo Linux distribution. "
>
> http://www.itworld.com/open-source/193823/how-linux-mastered-wall-street

We should mention this somewhere on the Gentoo page on wikipedia.



[gentoo-user] atualizacao do gentoo

2011-08-17 Thread Alexandre Riveira
Bom dia a todos da lista.

Efetuei a atualizacao do sistema como um todo com:
emerge --sync
emerge --update --deep --newuse world

O sistema chegou a atualizar mas notei uma coisa o git se encontra na
maquina na versao 1.7.3.4, mas ja vi que esta disponivel no gentoo o 1.7.6.

Existe algum comando para atualizar a versao de todos os pacotes ?

Obrigado a todos !


Alexandre Riveira


Re: [gentoo-user] atualizacao do gentoo

2011-08-17 Thread frares

Bom dia, Alexandre

Se você pretende ter mais respostas nesta lista, use o inglês para redigir  
suas dúvidas. Usando o português, você vai ficar restrito aos usuários que  
a entendem.


Quanto à sua dúvida, no Gentoo existem os pacotes estáveis e os instáveis -  
o que não quer dizer que não funcionem, apenas não foram suficientemente  
testados para serem incluídos nos estáveis.


Pacotes instáveis são referenciados como "~x86" ou "~amd64", de acordo com  
a instalação do seu sistema ser de 32 ou 64 bits


Caso seu sistema tenha sido instalado como de 32 bits, tente:

ACCEPTED_KEYWORDS="~x86" emerge -pvuDN git

ou, caso seu sistema seja de 64 bits:

ACCEPTED_KEYWORDS="~amd64" emerge -pvuDN git

Outra coisa é listar o conteúdo da pasta onde se encontram os "e-builds" do  
git:


ls /usr/portage/dev-vcs/git

A "ACCEPTED_KEYWORDS" pode ser tornada definitiva, editando o arquivo  
/etc/portage/portage.keywords, acrescentando uma entrada como:


dev-vcs/git ~x86

ou

dev-vcs;git ~amd64

Neste caso, basta o comando simples

emerge -pvuDN git

... que você já irá ter a versão "instável"

Espero ter ajudado
Francisco


Em 17/08/2011 09:57, Alexandre Riveira   
escreveu:

Bom dia a todos da lista.



Efetuei a atualizacao do sistema como um todo com:
emerge --sync
emerge --update --deep --newuse world


O sistema chegou a atualizar mas notei uma coisa o git se encontra na  
maquina na versao 1.7.3.4, mas ja vi que esta disponivel no gentoo o  
1.7.6.




Existe algum comando para atualizar a versao de todos os pacotes ?



Obrigado a todos !




Alexandre Riveira





Re: [gentoo-user] introspection USE flag and KDE

2011-08-17 Thread Michael Mol
On Tue, Aug 16, 2011 at 9:48 PM, Adam Carter  wrote:
> that and find https://live.gnome.org/GObjectIntrospection
>
> Now ask someone who codes WTF that page means :) Sounds like it allows
> programs to use code from different languages.

More specifically, while Gnome apps could already be written in
multiple languages, the libraries bridging those languages to C were
cumbersome (and thus buggy) to maintain, and this introspection change
is intended to result in a cleanup of that process.

-- 
:wq



Re: [gentoo-user] distccmon-gui red bars finally solved

2011-08-17 Thread Michael Mol
On Tue, Aug 16, 2011 at 9:12 PM, Bill Longman  wrote:
> I wanted to share with others on the list something that I recently
> discovered with distccmon-gui. I found that when I travel to work and to
> home with my laptop, sometimes the distccmon-gui would be covered with
> red specks when processing jobs on remote hosts. I saw that they were
> always associated with the "connecting" phase but I could never figure
> out what the problem was because the job would eventually compile there.
> It turns out that the connecting phase is usually slowed down by the
> name resolution of the host, so if one of the entries in my distcc/hosts
> file just had a short name, instead of the FQDN for the host, it would
> show up red during connect as it tried to resolve the hostname.
>
> I don't know how many other folks might run into this, because, like I
> say, I really only noticed it on my laptop which sometimes gets the
> correct domain name (at home!) but not at other times, for a given host.
>
> Once you fix those, the distcc works great.

You might also adjust your resolver's searchlist, so that you can
still resolve short names on a different domain.

For example, I might add "slashdot.org" to my resolv.conf as a search
domain, and then I could point my browser to "http://yro"; or
"http://linux"; and land on yro.slashdot.org or linux.slashdot.org,
respectively.

Note that resolv.conf is typically rewritten by your DHCP client, so
any modifications you'd like to persist, you'll need to make in your
DHCP client's configuration. I believe the normal resolver only
supports up to three search domains, too, so if your network's DHCP
server is already pushing three search domains (the network where I
work should be pushing two right now, for example), the fourth in the
list will be ignored.

-- 
:wq



Re: [gentoo-user] atualizacao do gentoo

2011-08-17 Thread Alexandre Riveira
Obrigado, Francisco !

Foi uma falha minha mandar em portugues na verdade queria mandar para
gentoo-user-br mas me enganei.

Com seu e-mail fui buscar em
http://packages.gentoo.org/package/dev-vcs/gitpara confirmar se o
1.7.6 esta estavel, como ele estava instalado na minha
maquina (que eh gentoo) imaginei que era estavel, mas com certeza instalei
por engano entao.

Pergunto, quando o git 1.7.6 estiver considerado estavel o comando emerge
--update --deep --newuse world vai atualizar para essa versao ou vai manter
em outra atualizando apenas patchs de seguranca ? Um exemplo seria o
postgresql do 8.4 => 9.0 ele manteria no 8.4 atualizando apenas patchs de
seguranca e somente colocaria no 9.0 quando seu solicitasse isso
expressamente.


Atenciosamente,


Alexandre Riveira


Em 17 de agosto de 2011 10:12,  escreveu:

> Bom dia, Alexandre
>
> Se você pretende ter mais respostas nesta lista, use o inglês para redigir
> suas dúvidas. Usando o português, você vai ficar restrito aos usuários que a
> entendem.
>
> Quanto à sua dúvida, no Gentoo existem os pacotes estáveis e os instáveis -
> o que não quer dizer que não funcionem, apenas não foram suficientemente
> testados para serem incluídos nos estáveis.
>
> Pacotes instáveis são referenciados como "~x86" ou "~amd64", de acordo com
> a instalação do seu sistema ser de 32 ou 64 bits
>
> Caso seu sistema tenha sido instalado como de 32 bits, tente:
>
> ACCEPTED_KEYWORDS="~x86" emerge -pvuDN git
>
> ou, caso seu sistema seja de 64 bits:
>
> ACCEPTED_KEYWORDS="~amd64" emerge -pvuDN git
>
> Outra coisa é listar o conteúdo da pasta onde se encontram os "e-builds" do
> git:
>
> ls /usr/portage/dev-vcs/git
>
> A "ACCEPTED_KEYWORDS" pode ser tornada definitiva, editando o arquivo
> /etc/portage/portage.keywords, acrescentando uma entrada como:
>
> dev-vcs/git ~x86
>
> ou
>
> dev-vcs;git ~amd64
>
> Neste caso, basta o comando simples
>
> emerge -pvuDN git
>
> ... que você já irá ter a versão "instável"
>
> Espero ter ajudado
> Francisco
>
>
> Em 17/08/2011 09:57, Alexandre Riveira 
> escreveu:
>
> > Bom dia a todos da lista.
> >
> > Efetuei a atualizacao do sistema como um todo com:
> > emerge --sync
> > emerge --update --deep --newuse world
> >
> > O sistema chegou a atualizar mas notei uma coisa o git se encontra na
> maquina na versao 1.7.3.4, mas ja vi que esta disponivel no gentoo o 1.7.6.
> >
> >
> > Existe algum comando para atualizar a versao de todos os pacotes ?
> >
> > Obrigado a todos !
> >
> >
> > Alexandre Riveira
> >
> >
>


Re: [gentoo-user] OT: but cool - NASDAQ is gentoo powered

2011-08-17 Thread Stefan G. Weichinger
Am 17.08.2011 01:24, schrieb Canek Peláez Valdés:

>> http://en.gentoo-wiki.com/wiki/Systemd
> 
> I don't know about the wiki (I didn't use it to install systemd), and
> as I said, I think it works out-of-the-box now, and you can safely go
> back to OpenRC if you want to.

Installed it in a VM now, and followed the wiki ...

I don't even get a console so far, some strange timeouts somewhere.
getty@tty1.service depends on something I can't see (no way to scroll
up) ... still some fiddling needed here.

S






Re: [gentoo-user] [OT]: "Reset" of USB when switching to console and back to X?

2011-08-17 Thread Paul Hartman
On Tue, Aug 16, 2011 at 10:01 PM,   wrote:
> Hi,
>
> I have attached an old keyboard (PS/2-connector) via an
> USB-PS/2-adaptor to my PC.
>
> When typing too fast (...) the three LEDs of the keyboard flashes
> and everything typed then is typed as if the CTRL-Key constantly
> locked (I am using the X-window-system with openbox as windowmanager.
> There is no session management.)
>
> It is possible to revert back to normal when I switch
> from X-windows to the Linux console (CTRL-ALT-F1) and back
> to X (CTRL-ALT-F7).
>
> My question is:
> What part (PC? Adapator? Keyboard?) gets out of sync here is
> "resetted" (somehow), while switching between console and
> X-windows?
>
> How can I reset the behaviour without switching? How can I
> prevent the behaviour completly?

FWIW I have experienced that same behavior with several PS/2 to USB
adapters, in Windows, in Linux, etc. I think it's a common problem
with those adapters in general. I've never used one that didn't "go
crazy" a few times a day.



Re: [gentoo-user] who needs Java ?

2011-08-17 Thread Philip Webb
110815 Florian Philipp wrote:
>   
> http://wiki.services.openoffice.org/w/index.php?title=Java_and_OpenOffice.org&oldid=15

Thanks & to the others who replied.

I deleted 'java' from the  make.conf  USE list
& recompiled Libreoffice (latest testing) + Cups +  2  deps for KDE3.
Printing is ok from LO & Vim (via the Printdialog extension);
LO help calls up a WWW page, which doesn't help,
but I've downloaded  2  PDFs with the help for Writer + Calc,
which sb better than the rather clumsy version included inside OO ;
the  2  KDE3 apps continue to start (Kmahjongg Kworldclock).

Emerge throws out a dire warning re compiling LO without Java,
but doesn't say exactly what the dire results wb.

-- 
,,
SUPPORT ___//___,   Philip Webb
ELECTRIC   /] [] [] [] [] []|   Cities Centre, University of Toronto
TRANSIT`-O--O---'   purslowatchassdotutorontodotca




[gentoo-user] systemd (was: NASDAQ is gentoo powered)

2011-08-17 Thread Stefan G. Weichinger
Am 17.08.2011 16:04, schrieb Stefan G. Weichinger:
> Am 17.08.2011 01:24, schrieb Canek Peláez Valdés:
> 
>>> http://en.gentoo-wiki.com/wiki/Systemd
>>
>> I don't know about the wiki (I didn't use it to install systemd), and
>> as I said, I think it works out-of-the-box now, and you can safely go
>> back to OpenRC if you want to.
> 
> Installed it in a VM now, and followed the wiki ...
> 
> I don't even get a console so far, some strange timeouts somewhere.
> getty@tty1.service depends on something I can't see (no way to scroll
> up) ... still some fiddling needed here.

In rescue mode I read something about /etc/mtab, google says "ignore that".

Sigh. Still no ttys here.
"out of the box" should feel different.

Will dig more ...



Re: [gentoo-user] systemd

2011-08-17 Thread Stefan G. Weichinger
Am 17.08.2011 16:47, schrieb Stefan G. Weichinger:

> Sigh. Still no ttys here.
> "out of the box" should feel different.
> 
> Will dig more ...

Sorry for the noise, got it now. Too old udev etc before.




Re: [gentoo-user] systemd

2011-08-17 Thread Stefan G. Weichinger
Am 17.08.2011 17:00, schrieb Stefan G. Weichinger:
> Am 17.08.2011 16:47, schrieb Stefan G. Weichinger:
> 
>> Sigh. Still no ttys here.
>> "out of the box" should feel different.
>>
>> Will dig more ...
> 
> Sorry for the noise, got it now. Too old udev etc before.

First steps:

added network.service and sshd.service

following

http://en.gentoo-wiki.com/wiki/Systemd#Services

sshd.service gets started at boot, network.service not ...

I linked multi-user.target to /etc/systemd/system/default.target, didn't
help.

Do I need that link?

Starting network.service with systemctl works, so no typo hidden here,
as it seems.

Stefan



Re: [gentoo-user] introspection USE flag and KDE

2011-08-17 Thread Dale

Michael Mol wrote:

On Tue, Aug 16, 2011 at 9:48 PM, Adam Carter  wrote:
   

that and find https://live.gnome.org/GObjectIntrospection

Now ask someone who codes WTF that page means :) Sounds like it allows
programs to use code from different languages.
 

More specifically, while Gnome apps could already be written in
multiple languages, the libraries bridging those languages to C were
cumbersome (and thus buggy) to maintain, and this introspection change
is intended to result in a cleanup of that process.

   



Ohhh, now I see.  I thought it was talking about languages like English, 
Spanish etc.  lol


Dale

:-)  :-)



Re: Re: [gentoo-user] atualizacao do gentoo

2011-08-17 Thread frares
Na verdade também tive uma falha, não se deve responder acima da pergunta,  
só abaixo, que é o que diz as normas de listas. Mas já que está feito...


Assim que os pacotes vão sendo liberados do "~", saindo, por exemplo,  
do "~x86" para "x86", a atualização vai mesmo substituir a versão antiga  
pela nova, com todos os seus patches também novos, ou seja, no seu exemplo,  
a versão 8.4 é removida e é instalada a 9.0.


A atualização de patches de segurança acontece sempre que necessário nos  
pacotes. De vez em quando, quando você solicita uma atualização, eles são  
aplicados e uma reinstalação é feita.


O "portage" é fantástico.

E o comando emerge --update --deep --newuse world pode ser resumido em  
emerge -uDN world . Dê uma olhada no manual para mais opções.


Francisco


Em 17/08/2011 10:59, Alexandre Riveira   
escreveu:



Obrigado, Francisco !


Foi uma falha minha mandar em portugues na verdade queria mandar para  
gentoo-user-br mas me enganei.


Com seu e-mail fui buscar em  
http://packages.gentoo.org/package/dev-vcs/git para confirmar se o 1.7.6  
esta estavel, como ele estava instalado na minha maquina (que eh gentoo)  
imaginei que era estavel, mas com certeza instalei por engano entao.



Pergunto, quando o git 1.7.6 estiver considerado estavel o comando emerge  
--update --deep --newuse world vai atualizar para essa versao ou vai  
manter em outra atualizando apenas patchs de seguranca ? Um exemplo seria  
o postgresql do 8.4 => 9.0 ele manteria no 8.4 atualizando apenas patchs  
de seguranca e somente colocaria no 9.0 quando seu solicitasse isso  
expressamente.





Atenciosamente,




Alexandre Riveira




Em 17 de agosto de 2011 10:12, fra...@gmail.com> escreveu:



Bom dia, Alexandre


Se você pretende ter mais respostas nesta lista, use o inglês para  
redigir suas dúvidas. Usando o português, você vai ficar restrito aos  
usuários que a entendem.


Quanto à sua dúvida, no Gentoo existem os pacotes estáveis e os instáveis  
- o que não quer dizer que não funcionem, apenas não foram  
suficientemente testados para serem incluídos nos estáveis.



Pacotes instáveis são referenciados como "~x86" ou "~amd64", de acordo  
com a instalação do seu sistema ser de 32 ou 64 bits



Caso seu sistema tenha sido instalado como de 32 bits, tente:




ACCEPTED_KEYWORDS="~x86" emerge -pvuDN git



ou, caso seu sistema seja de 64 bits:



ACCEPTED_KEYWORDS="~amd64" emerge -pvuDN git


Outra coisa é listar o conteúdo da pasta onde se encontram os "e-builds"  
do git:




ls /usr/portage/dev-vcs/git


A "ACCEPTED_KEYWORDS" pode ser tornada definitiva, editando o arquivo  
/etc/portage/portage.keywords, acrescentando uma entrada como:



dev-vcs/git ~x86



ou




dev-vcs;git ~amd64



Neste caso, basta o comando simples



emerge -pvuDN git



... que você já irá ter a versão "instável"



Espero ter ajudado
Francisco



Em 17/08/2011 09:57, Alexandre Riveira alexan...@objectdata.com.br>  
escreveu:




> Bom dia a todos da lista.
>
> Efetuei a atualizacao do sistema como um todo com:
> emerge --sync
> emerge --update --deep --newuse world
>
> O sistema chegou a atualizar mas notei uma coisa o git se encontra na  
maquina na versao 1.7.3.4, mas ja vi que esta disponivel no gentoo o  
1.7.6.



>
>
> Existe algum comando para atualizar a versao de todos os pacotes ?
>
> Obrigado a todos !
>
>
> Alexandre Riveira
>
>








[gentoo-user] how to use layman --sync ALL across a firewall

2011-08-17 Thread Valmor de Almeida
Hello,

At work, I typically use  emerge-webrsync  to sync the portage tree.
But I don't know how to sync the layman tree.
This

  layman --sync ALL

does not work. I guess because git pull does not work across the
firewall. Is there a solution to this besides requesting a firewall
exception?

Thanks,

--
Valmor



Re: [gentoo-user] {OT} rdiff-backup: push or pull?

2011-08-17 Thread Grant
>>  Is there a way to
>> restrict SSH keys to the rsync command?
>
> Yes, via the "authorized_keys" file. you can add a "command" directive. this
> will always force that command to be executed whenever a connection is made
> using this key.

I'm using the command directive with rdiff-backup like
command="rdiff-backup --server" but I can't figure out the rsync
command to specify.  Is anyone restricting an SSK key to rsync with
the command directive?

- Grant



Re: [gentoo-user] {OT} rdiff-backup: push or pull?

2011-08-17 Thread Grant
>> Can I reserve 0% for root on my USB hard drive which is only used for
>> backups and does not contain an OS?
>
> Yes:
>
> mke2fs -m 0 /dev/usb-drive

Thank you, is it safe to do so on a disk like that?  If I run out of
space on the USB hard drive, I'll only need space on the OS disk to
fix it, correct?

- Grant



Re: [gentoo-user] {OT} rdiff-backup: push or pull?

2011-08-17 Thread Grant
>> > You can seperate the backups by giving each system a different account
>> > where to store the backups.
>>
>> I'm not sure what you mean.  The backups are all stored on the backup
>> server.
>
> Each machine to be backed up has a different account on the backup server.
> This will prevent machine A from accessing the backups of machine B.
>
> This way, if one machine is compromised, only this machines backups can be
> accessed using the access-keys for the backup. And this machines keys can then
> be revoked without affecting other backups.

That's a great idea.  I will do that.  Should that backup account have
any special configuration, or just a standard new user?

- Grant



[gentoo-user] netqmail blicks maildrop requiered by qmail-scanner.

2011-08-17 Thread Henk Abma
Hello list,

yesterday I wanted to emerge -uNDa world, at which point emerge said it 
couldn't emerge because maildrop 2.5.4 could not be installed on the same 
system 
as netqmail 1.06. Silly as I was, I removed maildrop, not knowing it was 
required by qmail-scanner, which I use for spam checking.

Result: no mail is picked up by my server any more. Of course I could return to 
using teh qmail internal scanner, however then I lose the spam checking 
right?

Thanks for your help.

Kind regards,

Henk.




Re: [gentoo-user] introspection USE flag and KDE

2011-08-17 Thread Florian Philipp
Am 17.08.2011 18:03, schrieb Dale:
> Michael Mol wrote:
>> On Tue, Aug 16, 2011 at 9:48 PM, Adam Carter 
>> wrote:
>>   
>>> that and find https://live.gnome.org/GObjectIntrospection
>>>
>>> Now ask someone who codes WTF that page means :) Sounds like it allows
>>> programs to use code from different languages.
>>>  
>> More specifically, while Gnome apps could already be written in
>> multiple languages, the libraries bridging those languages to C were
>> cumbersome (and thus buggy) to maintain, and this introspection change
>> is intended to result in a cleanup of that process.
>>
>>
> 
> 
> Ohhh, now I see.  I thought it was talking about languages like English,
> Spanish etc.  lol
> 
> Dale
> 
> :-)  :-)
> 

The ASCII-art on page [1] pretty much sums it up with regard to the
compile step:

There is a second compiler involved that parses the comments in the C
source code and generates binary files with type information etc. which
can then be used for language bindings.

So, it will probably slow down compilation and use more disk space (but
not very much, as stated on -dev). Also, as stated on -dev, ALWAYS
enable this unless you want to recompile most of @world if you ever need
a language binding.

[1] https://live.gnome.org/GObjectIntrospection/Architecture

Regards,
Florian Philipp



signature.asc
Description: OpenPGP digital signature


Re: [gentoo-user] [OT]: "Reset" of USB when switching to console and back to X?

2011-08-17 Thread meino . cramer
Paul Hartman  [11-08-17 18:02]:
> On Tue, Aug 16, 2011 at 10:01 PM,   wrote:
> > Hi,
> >
> > I have attached an old keyboard (PS/2-connector) via an
> > USB-PS/2-adaptor to my PC.
> >
> > When typing too fast (...) the three LEDs of the keyboard flashes
> > and everything typed then is typed as if the CTRL-Key constantly
> > locked (I am using the X-window-system with openbox as windowmanager.
> > There is no session management.)
> >
> > It is possible to revert back to normal when I switch
> > from X-windows to the Linux console (CTRL-ALT-F1) and back
> > to X (CTRL-ALT-F7).
> >
> > My question is:
> > What part (PC? Adapator? Keyboard?) gets out of sync here is
> > "resetted" (somehow), while switching between console and
> > X-windows?
> >
> > How can I reset the behaviour without switching? How can I
> > prevent the behaviour completly?
> 
> FWIW I have experienced that same behavior with several PS/2 to USB
> adapters, in Windows, in Linux, etc. I think it's a common problem
> with those adapters in general. I've never used one that didn't "go
> crazy" a few times a day.
> 
Hi Paul,

after some recursive investigations :) via internet I found some
interesting things:
1) Yes, your are completly right: It is the USB-PS2-adapter, which
goes crazy.
2) No, you are wrong, the reason is different.
;) :)
3) The answer is 41.98 (calculated by a P90). ;)

The reason for stuck CTRL/SHIFT keys is a missing pull-up
resistor from the clock and the data line to the +5V line
of the PS2 connection. Or in other words: Adding these resistors
seem to fix the problem in most cases.
See the link below (which describes the process for a IBM Model M keyboard. 
Seems true
for other old PS2 keyboards as mine, too): 
http://ps-2.kev009.com:8081/ohlandl/keyboard/modify_keyboard/Model_M_Modifications.html

The PS2 goes crazy because the high level gets too low without the
additonal pull up resistors. But the "origin of the reason" is not
the adapter, but the low high levels of the old PS2 line as such.

I did find these information that late (after posting to this list)
by searching for informations about certain different usb-PS/2-adapter.
Sorry, when answering the other half of my own question :)






Re: [gentoo-user] how to use layman --sync ALL across a firewall

2011-08-17 Thread Florian Philipp
Am 17.08.2011 18:27, schrieb Valmor de Almeida:
> Hello,
> 
> At work, I typically use  emerge-webrsync  to sync the portage tree.
> But I don't know how to sync the layman tree.
> This
> 
>   layman --sync ALL
> 
> does not work. I guess because git pull does not work across the
> firewall. Is there a solution to this besides requesting a firewall
> exception?
> 
> Thanks,
> 
> --
> Valmor
> 

Well, at least some overlays support fetching via http. `layman -L`
shows all available URLs for fetching. In /etc/layman/layman.cfg, you
can also specify a proxy. In theory, that should allow you to fetch all
these overlays.

The remaining problem is: How do you tell layman to prefer the http
connection over the native protocol? I haven't found such an option.
Maybe you have to try it out yourself or open a bug for a feature request.

Worst case: create your own overlay list which only contains the http
connections. The documentation shows how to do this.

Hope this helps,
Florian Philipp



signature.asc
Description: OpenPGP digital signature


Re: [gentoo-user] systemd

2011-08-17 Thread Stefan G. Weichinger
Am 17.08.2011 18:00, schrieb Stefan G. Weichinger:

> sshd.service gets started at boot, network.service not ...
> 
> I linked multi-user.target to /etc/systemd/system/default.target,
> didn't help.
> 
> Do I need that link?

Solved, but dunno if done correctly.

ln -sf /etc/systemd/system/network.service
/etc/systemd/system/multi-user.target.wants

ln -sf /lib/systemd/system/multi-user.target
/etc/systemd/system/default.target

S



Re: [gentoo-user] {OT} rdiff-backup: push or pull?

2011-08-17 Thread Alex Schuster
Joost Roeleveld writes:

> On Tuesday, August 16, 2011 04:50:40 PM Grant wrote:
> > Can I reserve 0% for root on my USB hard drive which is only used for
> > backups and does not contain an OS?
> 
> Yes:
> 
> mke2fs -m 0 /dev/usb-drive

Although a value > 0 helps against fragmentation. And when rdiff-backup has 
failed because it ran out of space, regressing to the previous sane state 
will need a little free space.

Wonko



Re: [gentoo-user] [OT]: "Reset" of USB when switching to console and back to X?

2011-08-17 Thread Paul Hartman
On Wed, Aug 17, 2011 at 1:42 PM,   wrote:
> Paul Hartman  [11-08-17 18:02]:
>> On Tue, Aug 16, 2011 at 10:01 PM,   wrote:
>> > Hi,
>> >
>> > I have attached an old keyboard (PS/2-connector) via an
>> > USB-PS/2-adaptor to my PC.
>> >
>> > When typing too fast (...) the three LEDs of the keyboard flashes
>> > and everything typed then is typed as if the CTRL-Key constantly
>> > locked (I am using the X-window-system with openbox as windowmanager.
>> > There is no session management.)
>> >
>> > It is possible to revert back to normal when I switch
>> > from X-windows to the Linux console (CTRL-ALT-F1) and back
>> > to X (CTRL-ALT-F7).
>> >
>> > My question is:
>> > What part (PC? Adapator? Keyboard?) gets out of sync here is
>> > "resetted" (somehow), while switching between console and
>> > X-windows?
>> >
>> > How can I reset the behaviour without switching? How can I
>> > prevent the behaviour completly?
>>
>> FWIW I have experienced that same behavior with several PS/2 to USB
>> adapters, in Windows, in Linux, etc. I think it's a common problem
>> with those adapters in general. I've never used one that didn't "go
>> crazy" a few times a day.
>>
> Hi Paul,
>
> after some recursive investigations :) via internet I found some
> interesting things:
> 1) Yes, your are completly right: It is the USB-PS2-adapter, which
> goes crazy.
> 2) No, you are wrong, the reason is different.
> ;) :)
> 3) The answer is 41.98 (calculated by a P90). ;)
>
> The reason for stuck CTRL/SHIFT keys is a missing pull-up
> resistor from the clock and the data line to the +5V line
> of the PS2 connection. Or in other words: Adding these resistors
> seem to fix the problem in most cases.
> See the link below (which describes the process for a IBM Model M keyboard. 
> Seems true
> for other old PS2 keyboards as mine, too):
> http://ps-2.kev009.com:8081/ohlandl/keyboard/modify_keyboard/Model_M_Modifications.html
>
> The PS2 goes crazy because the high level gets too low without the
> additonal pull up resistors. But the "origin of the reason" is not
> the adapter, but the low high levels of the old PS2 line as such.
>
> I did find these information that late (after posting to this list)
> by searching for informations about certain different usb-PS/2-adapter.
> Sorry, when answering the other half of my own question :)

Very interesting info, it's good to know the real reason why it always
seems like a "universal" problem with those adapters.

In the end, to solve my own problem, I bought two Unicomp keyboards
which are the same as the old heavy IBM keyboards but with USB
built-in. ;)



Re: [gentoo-user] [OT]: "Reset" of USB when switching to console and back to X?

2011-08-17 Thread meino . cramer
Paul Hartman  [11-08-17 21:08]:
> On Wed, Aug 17, 2011 at 1:42 PM,   wrote:
> > Paul Hartman  [11-08-17 18:02]:
> >> On Tue, Aug 16, 2011 at 10:01 PM,   wrote:
> >> > Hi,
> >> >
> >> > I have attached an old keyboard (PS/2-connector) via an
> >> > USB-PS/2-adaptor to my PC.
> >> >
> >> > When typing too fast (...) the three LEDs of the keyboard flashes
> >> > and everything typed then is typed as if the CTRL-Key constantly
> >> > locked (I am using the X-window-system with openbox as windowmanager.
> >> > There is no session management.)
> >> >
> >> > It is possible to revert back to normal when I switch
> >> > from X-windows to the Linux console (CTRL-ALT-F1) and back
> >> > to X (CTRL-ALT-F7).
> >> >
> >> > My question is:
> >> > What part (PC? Adapator? Keyboard?) gets out of sync here is
> >> > "resetted" (somehow), while switching between console and
> >> > X-windows?
> >> >
> >> > How can I reset the behaviour without switching? How can I
> >> > prevent the behaviour completly?
> >>
> >> FWIW I have experienced that same behavior with several PS/2 to USB
> >> adapters, in Windows, in Linux, etc. I think it's a common problem
> >> with those adapters in general. I've never used one that didn't "go
> >> crazy" a few times a day.
> >>
> > Hi Paul,
> >
> > after some recursive investigations :) via internet I found some
> > interesting things:
> > 1) Yes, your are completly right: It is the USB-PS2-adapter, which
> > goes crazy.
> > 2) No, you are wrong, the reason is different.
> > ;) :)
> > 3) The answer is 41.98 (calculated by a P90). ;)
> >
> > The reason for stuck CTRL/SHIFT keys is a missing pull-up
> > resistor from the clock and the data line to the +5V line
> > of the PS2 connection. Or in other words: Adding these resistors
> > seem to fix the problem in most cases.
> > See the link below (which describes the process for a IBM Model M keyboard. 
> > Seems true
> > for other old PS2 keyboards as mine, too):
> > http://ps-2.kev009.com:8081/ohlandl/keyboard/modify_keyboard/Model_M_Modifications.html
> >
> > The PS2 goes crazy because the high level gets too low without the
> > additonal pull up resistors. But the "origin of the reason" is not
> > the adapter, but the low high levels of the old PS2 line as such.
> >
> > I did find these information that late (after posting to this list)
> > by searching for informations about certain different usb-PS/2-adapter.
> > Sorry, when answering the other half of my own question :)
> 
> Very interesting info, it's good to know the real reason why it always
> seems like a "universal" problem with those adapters.
> 
> In the end, to solve my own problem, I bought two Unicomp keyboards
> which are the same as the old heavy IBM keyboards but with USB
> built-in. ;)
> 

(my question is based only on curiosity...)

Are the Unicomp Model Ms of the same quality and tactile/audible
feeling as the original IBM model Ms?

Best regards,
mcc




Re: [gentoo-user] systemd

2011-08-17 Thread Stefan G. Weichinger

Yes, I know, I should start a new thread.

So far I got the impression that it would take quite some time and work
to get my machines and their services configured correctly.

For now I will keep it inside that ~amd64-VM and continue to test and learn.

Stefan



Re: [gentoo-user] [OT]: "Reset" of USB when switching to console and back to X?

2011-08-17 Thread Alan McKinnon
On Wed 17 August 2011 21:17:07 meino.cra...@gmx.de did opine thusly:
> Paul Hartman  [11-08-17 21:08]:


> > In the end, to solve my own problem, I bought two Unicomp
> > keyboards which are the same as the old heavy IBM keyboards but
> > with USB built-in. ;)
> 
> (my question is based only on curiosity...)
> 
> Are the Unicomp Model Ms of the same quality and tactile/audible
> feeling as the original IBM model Ms?

They are identical in every meaningful way, except one.

Unicomps are newer.


-- 
alan dot mckinnon at gmail dot com



[gentoo-user] Re: cups configuration for "dummies"

2011-08-17 Thread James
Helmut Jarausch  igpm.rwth-aachen.de> writes:


> Is there an easy means to configure CUPS on his system to find that 
> printer?

Most certainly.

Visit your friend and set up access to this list, via gmane
(http://post.gmane.org/)

Then show him how to post and find a netiquette document,
gentoo style. Then as he posts you or the rest of the list
can help him. Sounds like he is going to need lots of help...?


For example, I just type int he IP adress on a web browser and my
printer appears (non routed address. If he has HP printers,
he'll most likely want hplip to go with cups. cups has to be
setup to access the printer by IP address.


Bottom line, HE needs to start talking to this group, directly.
Don't be shy, the water is just fine 


James







Re: [gentoo-user] {OT} rdiff-backup: push or pull?

2011-08-17 Thread Grant
>> > Can I reserve 0% for root on my USB hard drive which is only used for
>> > backups and does not contain an OS?
>>
>> Yes:
>>
>> mke2fs -m 0 /dev/usb-drive
>
> Although a value > 0 helps against fragmentation. And when rdiff-backup has
> failed because it ran out of space, regressing to the previous sane state
> will need a little free space.

Good points.  Should 10GB (1% of 1TB) do it?

- Grant



[gentoo-user] Running HTTP and DNS on same machine

2011-08-17 Thread Grant
I currently use a free service to host the DNS records for my website,
but I'm thinking of running a DNS server on the same machine that runs
my website instead.  Would that be fairly trivial to set up and
maintain?  If so, which package should I use?

- Grant



[gentoo-user] systemd

2011-08-17 Thread Stefan G. Weichinger

Ok then, separate thread ;-)

I just watched this:

http://www.youtube.com/watch?v=TyMLi8QF6sw

while I continued testing systemd in my VM.

The VM runs ~amd64, so far only a few services started (I still get my
head around how to enable/disable specific services/targets), and it
boots really fast.

I am not the ricer-kind-of-gentoo-users, but it impresses me anyway.

And I clearly see the benefits of socket-based-activation,
cgroup-control and other stuff systemd brings.

AFAI see the wiki mentioned is a starting point only.
It provides the first steps, but not much more, at least to me, right now.

-

There is a layman-overlay "systemd" which brings units (service-files)
to your system. AFAI understand it is still up to the user to
enable/link these files into their runlevel?

If it is that way it feels like a bit of trial-and-error to me to get my
systemd-setup doing the same things my current openrc-system does.

Especially for not-so-trivial stuff like the network settings for KVM
(bridging, TUN/TAP ...)

My approach would be to "rc-config show", take that list and try to
enable the according services within systemd.

Maybe I am completely wrong, maybe not.

I'd be happy to discuss these things with you gentoo-users.

Thanks, greets, Stefan



Re: [gentoo-user] Running HTTP and DNS on same machine

2011-08-17 Thread Alan McKinnon
On Wed 17 August 2011 13:56:10 Grant did opine thusly:
> I currently use a free service to host the DNS records for my
> website, but I'm thinking of running a DNS server on the same
> machine that runs my website instead.  Would that be fairly trivial
> to set up and maintain?  If so, which package should I use?

The first question is Why?

There's no real benefit, it's a huge amount of work for little gain, 
you carry the cost of increased traffic yourself, and if that host 
goes blip, you not only lose access to the web server but to the 
entire zone as well.

Technically there's no good reason why you can't co-host web and dns. 
However, depending on your upper level domain and registrar, TWO dns 
servers may be a requirement (this is the norm) and you propose only 
one. Where's the second one going to be? Only one is a very bad idea 
indeed.

Your last two questions reveal that this is not something you are 
familiar with already, so I highly recommend you investigate 
everything thoroughly and fully understand just what you are letting 
yourself in for before deciding.

If you simply don't like your current DNS provider, then finding a 
different one you do like is quite simple.


-- 
alan dot mckinnon at gmail dot com



[gentoo-user] [SOLVED] set both an ipv4 and ipv6 default gateway

2011-08-17 Thread Jorge Polinotto
Hi all!

Thanks Pandu for your help.

Executing:

# emerge iproute2

and in /etc/conf.d/net:

routes_eth0=( "default via A.B.C.D
default via AA:BB:CC:DD::1")

it works!

Regards!

Jorge.-




Re: [gentoo-user] Running HTTP and DNS on same machine

2011-08-17 Thread kashani

On 8/17/2011 2:08 PM, Alan McKinnon wrote:

On Wed 17 August 2011 13:56:10 Grant did opine thusly:

I currently use a free service to host the DNS records for my
website, but I'm thinking of running a DNS server on the same
machine that runs my website instead.  Would that be fairly trivial
to set up and maintain?  If so, which package should I use?


The first question is Why?

There's no real benefit, it's a huge amount of work for little gain,
you carry the cost of increased traffic yourself, and if that host
goes blip, you not only lose access to the web server but to the
entire zone as well.

Technically there's no good reason why you can't co-host web and dns.
However, depending on your upper level domain and registrar, TWO dns
servers may be a requirement (this is the norm) and you propose only
one. Where's the second one going to be? Only one is a very bad idea
indeed.

Your last two questions reveal that this is not something you are
familiar with already, so I highly recommend you investigate
everything thoroughly and fully understand just what you are letting
yourself in for before deciding.

If you simply don't like your current DNS provider, then finding a
different one you do like is quite simple.


Exactly what Alan said. It's not worth it and no registar will let you 
do it on one IP.


kashani



Re: [gentoo-user] Running HTTP and DNS on same machine

2011-08-17 Thread Michael Mol
On Wed, Aug 17, 2011 at 4:56 PM, Grant  wrote:
> I currently use a free service to host the DNS records for my website,
> but I'm thinking of running a DNS server on the same machine that runs
> my website instead.  Would that be fairly trivial to set up and
> maintain?  If so, which package should I use?

ISC bind is the de facto standard for DNS servers. I haven't
administered bind on Gentoo, but on Debian, most of the problems I run
into come from how Debian packages and updates configuration files.

I'm not running DNS servers in any major production capacity; I've got
a bind server at home linking my home domain and my employer's work
domain across a VPN, and updated dynamically via a dhcpd on the same
server. It's also serving as a caching recursive resolver for my home
network, which was *really* necessary when I was still on AT&T. (The
DSL link was dropping packets every now and again, and it's a PITA
when that happens to DNS queries)

If you want to get into managing your own DNS, and if there was
anything in that previous sentence you're unfamiliar with, I highly
recommend O'Reilly's DNS & Bind: 5th Edition before you commit any of
your services to your own server.

http://oreilly.com/catalog/9780596100575

-- 
:wq



Re: [gentoo-user] [OT]: "Reset" of USB when switching to console and back to X?

2011-08-17 Thread Paul Hartman
On Wed, Aug 17, 2011 at 2:17 PM,   wrote:
> Paul Hartman  [11-08-17 21:08]:
>> On Wed, Aug 17, 2011 at 1:42 PM,   wrote:
>> > Paul Hartman  [11-08-17 18:02]:
>> >> On Tue, Aug 16, 2011 at 10:01 PM,   wrote:
>> >> > Hi,
>> >> >
>> >> > I have attached an old keyboard (PS/2-connector) via an
>> >> > USB-PS/2-adaptor to my PC.
>> >> >
>> >> > When typing too fast (...) the three LEDs of the keyboard flashes
>> >> > and everything typed then is typed as if the CTRL-Key constantly
>> >> > locked (I am using the X-window-system with openbox as windowmanager.
>> >> > There is no session management.)
>> >> >
>> >> > It is possible to revert back to normal when I switch
>> >> > from X-windows to the Linux console (CTRL-ALT-F1) and back
>> >> > to X (CTRL-ALT-F7).
>> >> >
>> >> > My question is:
>> >> > What part (PC? Adapator? Keyboard?) gets out of sync here is
>> >> > "resetted" (somehow), while switching between console and
>> >> > X-windows?
>> >> >
>> >> > How can I reset the behaviour without switching? How can I
>> >> > prevent the behaviour completly?
>> >>
>> >> FWIW I have experienced that same behavior with several PS/2 to USB
>> >> adapters, in Windows, in Linux, etc. I think it's a common problem
>> >> with those adapters in general. I've never used one that didn't "go
>> >> crazy" a few times a day.
>> >>
>> > Hi Paul,
>> >
>> > after some recursive investigations :) via internet I found some
>> > interesting things:
>> > 1) Yes, your are completly right: It is the USB-PS2-adapter, which
>> > goes crazy.
>> > 2) No, you are wrong, the reason is different.
>> > ;) :)
>> > 3) The answer is 41.98 (calculated by a P90). ;)
>> >
>> > The reason for stuck CTRL/SHIFT keys is a missing pull-up
>> > resistor from the clock and the data line to the +5V line
>> > of the PS2 connection. Or in other words: Adding these resistors
>> > seem to fix the problem in most cases.
>> > See the link below (which describes the process for a IBM Model M 
>> > keyboard. Seems true
>> > for other old PS2 keyboards as mine, too):
>> > http://ps-2.kev009.com:8081/ohlandl/keyboard/modify_keyboard/Model_M_Modifications.html
>> >
>> > The PS2 goes crazy because the high level gets too low without the
>> > additonal pull up resistors. But the "origin of the reason" is not
>> > the adapter, but the low high levels of the old PS2 line as such.
>> >
>> > I did find these information that late (after posting to this list)
>> > by searching for informations about certain different usb-PS/2-adapter.
>> > Sorry, when answering the other half of my own question :)
>>
>> Very interesting info, it's good to know the real reason why it always
>> seems like a "universal" problem with those adapters.
>>
>> In the end, to solve my own problem, I bought two Unicomp keyboards
>> which are the same as the old heavy IBM keyboards but with USB
>> built-in. ;)
>>
>
> (my question is based only on curiosity...)
>
> Are the Unicomp Model Ms of the same quality and tactile/audible
> feeling as the original IBM model Ms?

Yes, in fact it's exactly the same. Unicomp was formed by former
IBM/Lexmark employees who bought the original Model M manufacturing
equipment and rights to the original designs and parts from IBM. So
it's very much the same as Model M but available with updated with
modern features like USB and windows keys (if desired) and different
colors. They are still manufactured in the US at Unicomp's offices and
not outsourced to China or anywhere like that.

USD $80 seems like a lot of money for a keyboard to some people I talk
to, who are used to getting the crap $5 rubber keyboard from the
computer store. :) but if you spend every day typing, like I do, it's
really a small amount to pay.

I've been using mine for a few years now and am extremely happy with
them. I have the original huge one (the "Customizer") and the smaller
one with a trackpoint mouse in the middle (it's smaller but still
heavy and clicky, using the same spring mechanism as the big guy).



Re: [gentoo-user] Running HTTP and DNS on same machine

2011-08-17 Thread Alan McKinnon
On Wed 17 August 2011 14:22:21 kashani did opine thusly:
> On 8/17/2011 2:08 PM, Alan McKinnon wrote:
> > On Wed 17 August 2011 13:56:10 Grant did opine thusly:
> >> I currently use a free service to host the DNS records for my
> >> website, but I'm thinking of running a DNS server on the same
> >> machine that runs my website instead.  Would that be fairly
> >> trivial to set up and maintain?  If so, which package should
> >> I use?> 
> > The first question is Why?
> > 
> > There's no real benefit, it's a huge amount of work for little
> > gain, you carry the cost of increased traffic yourself, and if
> > that host goes blip, you not only lose access to the web server
> > but to the entire zone as well.
> > 
> > Technically there's no good reason why you can't co-host web and
> > dns. However, depending on your upper level domain and
> > registrar, TWO dns servers may be a requirement (this is the
> > norm) and you propose only one. Where's the second one going to
> > be? Only one is a very bad idea indeed.
> > 
> > Your last two questions reveal that this is not something you
> > are
> > familiar with already, so I highly recommend you investigate
> > everything thoroughly and fully understand just what you are
> > letting yourself in for before deciding.
> > 
> > If you simply don't like your current DNS provider, then finding
> > a different one you do like is quite simple.
> 
> Exactly what Alan said. It's not worth it and no registar will let
> you do it on one IP.

I'm just itching to type up the long list of horror stories I've 
stored from people doing their own DNS thinking it was real easy.

But there's this little thing called an NDA and it says I can't :-(

Truly though, the devastation from DNS mistakes is horrendous. 
The primary error folk make is this:

You do not configure and treat the DNS service like any other service.
You do not USE the internet to maintain dns, as dns BUILDS the 
internet. 

It's a subtle distinction but a vital one.

-- 
alan dot mckinnon at gmail dot com



Re: [gentoo-user] introspection USE flag and KDE

2011-08-17 Thread Dale

Florian Philipp wrote:

Am 17.08.2011 18:03, schrieb Dale:
   

Michael Mol wrote:
 

On Tue, Aug 16, 2011 at 9:48 PM, Adam Carter
wrote:

   

that and find https://live.gnome.org/GObjectIntrospection

Now ask someone who codes WTF that page means :) Sounds like it allows
programs to use code from different languages.

 

More specifically, while Gnome apps could already be written in
multiple languages, the libraries bridging those languages to C were
cumbersome (and thus buggy) to maintain, and this introspection change
is intended to result in a cleanup of that process.


   


Ohhh, now I see.  I thought it was talking about languages like English,
Spanish etc.  lol

Dale

:-)  :-)

 

The ASCII-art on page [1] pretty much sums it up with regard to the
compile step:

There is a second compiler involved that parses the comments in the C
source code and generates binary files with type information etc. which
can then be used for language bindings.

So, it will probably slow down compilation and use more disk space (but
not very much, as stated on -dev). Also, as stated on -dev, ALWAYS
enable this unless you want to recompile most of @world if you ever need
a language binding.

[1] https://live.gnome.org/GObjectIntrospection/Architecture

Regards,
Florian Philipp

   


Ah, pictures, well sort of anyway.  My biggest thing is I don't use 
Gnome.  It sounds like KDE may be moving this direction too.  So, may as 
well leave it alone.  I did read somewhere where the size increase is 
fairly small. I got a 160Gb drive for my OS so I think it will fit on 
there.  lol


Now I see better.  Thanks.

Dale

:-)  :-)



Re: [gentoo-user] {OT} rdiff-backup: push or pull?

2011-08-17 Thread Alex Schuster
Grant writes:

> >> > Can I reserve 0% for root on my USB hard drive which is only
> >> > used for backups and does not contain an OS?
> >> 
> >> Yes:
> >> 
> >> mke2fs -m 0 /dev/usb-drive
> > 
> > Although a value > 0 helps against fragmentation. And when
> > rdiff-backup has failed because it ran out of space, regressing to
> > the previous sane state will need a little free space.
> 
> Good points.  Should 10GB (1% of 1TB) do it?

This I don't know. I use this value for large partitions of multimedia data, 
because I do not want to waste space (no matter how big the drives are, mine 
are always quite full), and performance should not be a big issue here. I 
keep the 5% default other partitions, like /home. BTW, you can also specify 
fractions like 0.5% if you like.

Another thing: Be sure to have enough inodes on the file system, I have run 
out of them in the past. Not only once.
Other than the percentage of reserved blocks, which can be changed with 
tune2fs -m, this value is fixed. If you have too few, you need to re-create 
the file system.

Wonko



Re: [gentoo-user] Running HTTP and DNS on same machine

2011-08-17 Thread Grant
>> I currently use a free service to host the DNS records for my
>> website, but I'm thinking of running a DNS server on the same
>> machine that runs my website instead.  Would that be fairly trivial
>> to set up and maintain?  If so, which package should I use?
>
> The first question is Why?

My thinking was of the "may as well" variety but now it's sounding
like a very bad idea.  Are there DNS hosts you guys particularly like?

- Grant


> There's no real benefit, it's a huge amount of work for little gain,
> you carry the cost of increased traffic yourself, and if that host
> goes blip, you not only lose access to the web server but to the
> entire zone as well.
>
> Technically there's no good reason why you can't co-host web and dns.
> However, depending on your upper level domain and registrar, TWO dns
> servers may be a requirement (this is the norm) and you propose only
> one. Where's the second one going to be? Only one is a very bad idea
> indeed.
>
> Your last two questions reveal that this is not something you are
> familiar with already, so I highly recommend you investigate
> everything thoroughly and fully understand just what you are letting
> yourself in for before deciding.
>
> If you simply don't like your current DNS provider, then finding a
> different one you do like is quite simple.
>
>
> --
> alan dot mckinnon at gmail dot com



Re: [gentoo-user] Running HTTP and DNS on same machine

2011-08-17 Thread Alan McKinnon
On Wed 17 August 2011 17:23:41 Michael Mol did opine thusly:
> On Wed, Aug 17, 2011 at 4:56 PM, Grant  wrote:
> > I currently use a free service to host the DNS records for my
> > website, but I'm thinking of running a DNS server on the same
> > machine that runs my website instead.  Would that be fairly
> > trivial to set up and maintain?  If so, which package should I
> > use?
> 
> ISC bind is the de facto standard for DNS servers. I haven't
> administered bind on Gentoo, but on Debian, most of the problems I
> run into come from how Debian packages and updates configuration
> files.
> 
> I'm not running DNS servers in any major production capacity; I've
> got a bind server at home linking my home domain and my employer's
> work domain across a VPN, and updated dynamically via a dhcpd on
> the same server. It's also serving as a caching recursive resolver
> for my home network, which was *really* necessary when I was still
> on AT&T. (The DSL link was dropping packets every now and again,
> and it's a PITA when that happens to DNS queries)

You're running an auth server and a cache on the same machine?

At a minimum they should be on different interfaces and preferably in 
chroots. Otherwise all manner of $BAD_STUFF happens.

I assume your home domain is small, in which case you'd probably get 
away with it. But still.

> If you want to get into managing your own DNS, and if there was
> anything in that previous sentence you're unfamiliar with, I highly
> recommend O'Reilly's DNS & Bind: 5th Edition before you commit any
> of your services to your own server.

Excellent book, up there with Mastering Regular Expressions.

The fellow who sits on the other side of the partition from me has 
that very edition - signed by Cricket.

Lucky bastard. He won't even let me touch it, never mind read it.

-- 
alan dot mckinnon at gmail dot com



[gentoo-user] unable to emerge mono 2.10

2011-08-17 Thread covici
Hi.  I am trying to emerge mono 2.10, but I get the following error
during the compile phase:

make[8]: Entering directory
`/var/tmp/portage/dev-lang/mono-2.10.2-r1/work/mono-2.10.2/mcs/tools/gacutil'
MCS [basic] gacutil.exe
Inconsistency detected by ld.so: dl-deps.c: 622: _dl_map_object_deps:
Assertion `nlist > 1' failed!
make[8]: *** [../../class/lib/basic/gacutil.exe] Error 127

I looked in google, but could not find anything relevant -- anyone have
any ideas?

Thanks in advance for your suggestions.

-- 
Your life is like a penny.  You're going to lose it.  The question is:
How do
you spend it?

 John Covici
 cov...@ccs.covici.com



Re: [gentoo-user] {OT} rdiff-backup: push or pull?

2011-08-17 Thread Alan McKinnon
On Wed 17 August 2011 23:49:16 Alex Schuster did opine thusly:
> Grant writes:
> > >> > Can I reserve 0% for root on my USB hard drive which
> > >> > is only
> > >> > used for backups and does not contain an OS?
> > >> 
> > >> Yes:
> > >> 
> > >> mke2fs -m 0 /dev/usb-drive
> > > 
> > > Although a value > 0 helps against fragmentation. And when
> > > rdiff-backup has failed because it ran out of space,
> > > regressing to the previous sane state will need a little
> > > free space.> 
> > Good points.  Should 10GB (1% of 1TB) do it?
> 
> This I don't know. I use this value for large partitions of
> multimedia data, because I do not want to waste space (no matter
> how big the drives are, mine are always quite full), and
> performance should not be a big issue here. I keep the 5% default
> other partitions, like /home. BTW, you can also specify fractions
> like 0.5% if you like.

I prefer to keep reminding myself where 5% comes from. Way back when 
ext2 was being developed, 500M drives were big. 5% reserved is 12.5M 
or about 12,500 blocks.

Why that amount? Is it really 5% or is it the number of blocks and 5% 
just happens to round that out nicely?

Median file sizes haven't changed much in 15 years. The number of 
files on an average machine has increased hugely, and the upper size 
limit is orders of magnitude bigger, but that doesn't affect the 
median size much.

I take the view that 5% is excessive these days and usually reserve 
only a tiny amount - something like 10 x the biggest file I expect to 
have to deal with when the disk is full. 

And besides, as Murphy would have it, it's usually a root process that 
fills drives anyway (syslog cough cough) rendering the reserved amount 
useless :-)


-- 
alan dot mckinnon at gmail dot com



Re: [gentoo-user] Running HTTP and DNS on same machine

2011-08-17 Thread kashani

On 8/17/2011 2:43 PM, Alan McKinnon wrote:


I'm just itching to type up the long list of horror stories I've
stored from people doing their own DNS thinking it was real easy.

But there's this little thing called an NDA and it says I can't :-(


heh, I think I can dredge one up for you that no one will care about 
these days.


	This was at a large ISP in '99 known for their free Internet. Bind 8 
was fresh on the scene and somehow Network Engineering was in charge of 
DNS rather than Systems. My intern and I came up with a plan to have 
ns00.int as the internal master and make the rest of name servers slave 
off of it. All ns00 did was supply the production name servers with zones.


ns00 --> ns01(vip) --> ns01-[01-03]
\--> ns02(vip) --> ns02-[01-03]
 \-> ns03(vip) --> ns03-[01-03]

Three virtual IPs and three name servers behind each vip.

This way we could have tools deal with updating zones on ns00 on the 
internal network and not have to push to a number of name servers. This 
worked well for a few months and we generally forgot about it. Almost a 
month after a reorganization in the local datacenter DNS went down. Well 
not down down, but our zones weren't working. After a hectic hour of 
freaking out, troubleshooting random things, and bouncing from machine 
to machine by IP address because none of DNS worked we realized our 
mistake. The TTL of the zone itself was set to three weeks. In the move 
Bind had silently died on ns00 which we didn't monitor because it was 
inside the corp network. The slaves dutifully stayed up and working till 
they hit the TTL of the zones and demanded to speak to the master again. 
Restarting Bind on the prod servers did nothing other than remove the 
already expired cache.
	Once restarted Bind on ns00 (and made it part of the runlevel) the prod 
server checked in and all was well.


The lessons:
Monitor *all* of your DNS infrastructure
DNS can break even with a large distributed system and it is never 
pretty.

kashani



Re: [gentoo-user] Running HTTP and DNS on same machine

2011-08-17 Thread Alan McKinnon
On Wed 17 August 2011 14:49:29 Grant did opine thusly:
> >> I currently use a free service to host the DNS records for my
> >> website, but I'm thinking of running a DNS server on the same
> >> machine that runs my website instead.  Would that be fairly
> >> trivial to set up and maintain?  If so, which package should
> >> I use?> 
> > The first question is Why?
> 
> My thinking was of the "may as well" variety but now it's sounding
> like a very bad idea.  Are there DNS hosts you guys particularly
> like?

Don't be too put off, it can be a good learning experience depending 
on how critical your domain is - some things don't matter if they are 
off-air for a week. The most valuable lessons you will ever learn are 
the ones where you then know what you should not do :-)

I can't advise on any free providers as a) I'm far away in a place 
that has nothing in common with your location and b) I've never 
interacted with any of them. Our DNS service is for corporate 
customers with guarantees and SLAs and contracted response times - a 
whole different ball game.



> - Grant
> 
> > There's no real benefit, it's a huge amount of work for little
> > gain, you carry the cost of increased traffic yourself, and if
> > that host goes blip, you not only lose access to the web server
> > but to the entire zone as well.
> > 
> > Technically there's no good reason why you can't co-host web and
> > dns. However, depending on your upper level domain and
> > registrar, TWO dns servers may be a requirement (this is the
> > norm) and you propose only one. Where's the second one going to
> > be? Only one is a very bad idea indeed.
> > 
> > Your last two questions reveal that this is not something you
> > are
> > familiar with already, so I highly recommend you investigate
> > everything thoroughly and fully understand just what you are
> > letting yourself in for before deciding.
> > 
> > If you simply don't like your current DNS provider, then finding
> > a different one you do like is quite simple.
> > 
> > 
> > --
> > alan dot mckinnon at gmail dot com
-- 
alan dot mckinnon at gmail dot com



[gentoo-user] Re: OT: but cool - NASDAQ is gentoo powered

2011-08-17 Thread walt
On 08/17/2011 01:59 AM, Peter Humphrey wrote:

> My laptop runs Gentoo, Fedora or WinXP.

Just being nosy -- why Fedora?




Re: [gentoo-user] OT: but cool - NASDAQ is gentoo powered

2011-08-17 Thread Sebastian Beßler
I use it on my webserver, my Desktop and quite new on the Desktop of my
mother. I had there Xubuntu before but that was a pain in the rear-end
to administrate with all that fiddly automatisms.
Now Gentoo does exactly as told and everyone is happy.

The next goal is to convert the laptop of my Girlfriend, it runs Windows
7 for now.

Greetings

Sebastian Beßler



signature.asc
Description: OpenPGP digital signature


Re: [gentoo-user] Running HTTP and DNS on same machine

2011-08-17 Thread Alan McKinnon
On Wed 17 August 2011 15:08:09 kashani did opine thusly:
> On 8/17/2011 2:43 PM, Alan McKinnon wrote:
> > I'm just itching to type up the long list of horror stories I've
> > stored from people doing their own DNS thinking it was real
> > easy.
> > 
> > But there's this little thing called an NDA and it says I can't
> > :-(
> heh, I think I can dredge one up for you that no one will care about
> these days.
> 
>   This was at a large ISP in '99 known for their free Internet.

I'm glad you detailed that story, now I know I'm not the only one :-)

Long long ago (in the 90s) when a current colleague started working 
here, he wanted access to the hidden primary (like your ns00).

He was given a bare machine (no OS) with these instructions:

It's 10am, by 4pm I want a name server running on that hardware, 
authoritative for domain xxx.yyy.zzz, live on the internet, with 
firewall installed and all reasonable security precautions taken. You 
do not have to register xxx.yyy.zzz with any registrar, we will test 
it with "dig @".

He passed :-)

The same fellow 3 years later found one day that the company zone had 
not loaded after an update (the name servers are self-hosted in that 
zone) and the support person that did it had done it twice before 
recently. Ten minutes later an ACL was in place and only systems could 
edit the zone. The entire company was told to propose sub-domains for 
their own teams and systems would delegate them - the uproar was 
fantastic but he stood his ground. He was 100% right of course and we 
still benefit today.

Lessons learned:
  - do not ever mess with your DNS admin
  - $DEITY says "sir" in hushed tones when addressing the dns admin


>   Bind
> 8 was fresh on the scene and somehow Network Engineering was in
> charge of DNS rather than Systems. My intern and I came up with a
> plan to have ns00.int as the internal master and make the rest of
> name servers slave off of it. All ns00 did was supply the
> production name servers with zones.
> 
> ns00 --> ns01(vip) --> ns01-[01-03]
>  \--> ns02(vip) --> ns02-[01-03]
>   \-> ns03(vip) --> ns03-[01-03]
> 
> Three virtual IPs and three name servers behind each vip.
> 
> This way we could have tools deal with updating zones on ns00 on the
> internal network and not have to push to a number of name servers.
> This worked well for a few months and we generally forgot about it.
> Almost a month after a reorganization in the local datacenter DNS
> went down. Well not down down, but our zones weren't working. After
> a hectic hour of freaking out, troubleshooting random things, and
> bouncing from machine to machine by IP address because none of DNS
> worked we realized our mistake. The TTL of the zone itself was set
> to three weeks. In the move Bind had silently died on ns00 which we
> didn't monitor because it was inside the corp network. The slaves
> dutifully stayed up and working till they hit the TTL of the zones
> and demanded to speak to the master again. Restarting Bind on the
> prod servers did nothing other than remove the already expired
> cache.
>   Once restarted Bind on ns00 (and made it part of the runlevel) 
the
> prod server checked in and all was well.
> 
> The lessons:
>   Monitor *all* of your DNS infrastructure
>   DNS can break even with a large distributed system and it is 
never
> pretty.
> 
> kashani
-- 
alan dot mckinnon at gmail dot com



Re: [gentoo-user] systemd

2011-08-17 Thread Sebastian Beßler
Am 17.08.2011 23:04, schrieb Stefan G. Weichinger:

> I just watched this:
> 
> http://www.youtube.com/watch?v=TyMLi8QF6sw

Great Video, thanks for the Link.
I wanted to try systemd for quite some time but now I think that I will
install it on my Desktop-PC tomorrow. The summer here this year is very
wet, so leaving the house is not really fun so I have time to kill.

> I'd be happy to discuss these things with you gentoo-users.

I will use that offer and will keep you, and everyone else here, up to
date and posted.

But now it is time for bed here.

Greetings and good night or good day

Sebastian Beßler



signature.asc
Description: OpenPGP digital signature


Re: [gentoo-user] set both an ipv4 and ipv6 default gateway

2011-08-17 Thread Pandu Poluan
No problem.

Ah, you're still using baselayout-1, I see.

Remember to drop the parentheses and make the route-string to be
multi-line when you upgrade to baselayout-2. E.g.:

routes_eth0="routing_line_1
routing_line_2
routing_line_3"

Rgds,


On 2011-08-18, Jorge Polinotto  wrote:
> Hi all!
>
> Thanks Pandu for your help.
>
> Executing:
>
> # emerge iproute2
>
> and in /etc/conf.d/net:
>
> routes_eth0=( "default via A.B.C.D
>   default via AA:BB:CC:DD::1")
>
> it works!
>
> Regards!
>
> Jorge.-
>
>
>


-- 
--
Pandu E Poluan - IT Optimizer
My website: http://pandu.poluan.info/



Re: [gentoo-user] Running HTTP and DNS on same machine

2011-08-17 Thread Paul Hartman
On Wed, Aug 17, 2011 at 3:56 PM, Grant  wrote:
> I currently use a free service to host the DNS records for my website,
> but I'm thinking of running a DNS server on the same machine that runs
> my website instead.  Would that be fairly trivial to set up and
> maintain?  If so, which package should I use?

Just to counter all of the scary stories, I recently (within the past
month or so) installed bind for the first time and set it up after a
few days of googling around and reading docs. It seems to be working
properly and securely, but I'd be lying if I said there wasn't a large
amount of dumb luck, finger-crossing and hand-waving involved on my
part to get it working. I have some familiarity with editing DNS zone
files (on other people's servers) so I wasn't going into it completely
blind.

I don't know if I'd call it "fairly trivial", but with howto's and
google at your fingertips you should be able to get it set up properly
if you really want to.

Usually the web-based DNS management by your domain name registrar or
hosting provider are good enough for most "personal domain" kind of
usage (like mine). In my case there was something that their web-based
editor didn't support (TXT records on subdomains or something like
that), and mostly because I just felt like trying to do it myself.
Since they are my personal domains, nobody else will suffer if I break
everything. Others are in the (lucky? not so lucky?) positions of
administering systems where things actually have to work right the
first time and all the time. :)



Re: [gentoo-user] Running HTTP and DNS on same machine

2011-08-17 Thread Adam Carter
> Just to counter all of the scary stories,

Yeah, i'd like to counter too. While the implications of getting it
wrong are serious, technically its quite simple. I run my own DNS, and
use a couple of free secondaries (http://www.twisted4life.com and
http://www.everydns.net).

The upsides of running your own DNS is that you learn the ins and
outs. So, if the DNS is for business that will loose money if you
stuff it up, then i'll tend to agree with the naysayers, but if its a
home domain then go ahead. And if you don't have a home domain, get
one as a learning exercise and once you're mastered that you can
re-consider if you want to move the business domain.

Re: choice of server, I chose BIND as its what the companies I have
worked at use, both ISC BIND and QIP's port of it. djbdns may be
technically superior (eg code separation into different binaries) but
its not as if BIND is very problematic these days. I havent bothered
with chrooting BIND for a long time, but that's only on internal only
DNS or my home DNS. For business internet facing DNS I probably still
would, or use something more modern like Solaris sparse zones.



Re: [gentoo-user] Re: OT: but cool - NASDAQ is gentoo powered

2011-08-17 Thread Peter Humphrey
On Wednesday 17 August 2011 23:14:34 walt wrote:
> On 08/17/2011 01:59 AM, Peter Humphrey wrote:
> > My laptop runs Gentoo, Fedora or WinXP.
> 
> Just being nosy -- why Fedora?

Why not? I've been trying many distributions in the hope of finding one that 
suits me; this is just the latest in the search. It won't last.

-- 
Rgds
Peter   Linux Counter 5290, 1994-04-23



Re: [gentoo-user] Running HTTP and DNS on same machine

2011-08-17 Thread Pandu Poluan
Adding to success stories:

I've deployed bind-9 on FreeBSD, Debian, and Arch. The most trouble
was with Debian, what with the 'compositing trees' etc. The easiest
was with FreeBSD. All three DNS servers are now in their eighth month
of production, handling half of my company's NS needs.

It's really not difficult. Complex, yes, but not difficult. With the
help of http://www.zytrax.com/books/dns and the handbooks, I finished
the FreeBSD and Arch installations in one day. (The Debian took
another day of hair-pulling to understand HTF they put their
compositing files together).

One tip from me would be to prepare the DNS servers beforehand, test
them, *then* ask the registrar to transfer the domain name to you.
Like others have posted, most will require you to provide at least two
authoritative NS.

In my situation, I have 1 server in the cloud, and 2 servers in the
company (responding to DNS requests via 2 different ISPs).

That said, I might be installing a different NS for the 4th NS for
diversity (i.e., prevent a single attack from disabling all 4 NS
servers).

Rgds,


On 2011-08-18, Paul Hartman  wrote:
> On Wed, Aug 17, 2011 at 3:56 PM, Grant  wrote:
>> I currently use a free service to host the DNS records for my website,
>> but I'm thinking of running a DNS server on the same machine that runs
>> my website instead.  Would that be fairly trivial to set up and
>> maintain?  If so, which package should I use?
>
> Just to counter all of the scary stories, I recently (within the past
> month or so) installed bind for the first time and set it up after a
> few days of googling around and reading docs. It seems to be working
> properly and securely, but I'd be lying if I said there wasn't a large
> amount of dumb luck, finger-crossing and hand-waving involved on my
> part to get it working. I have some familiarity with editing DNS zone
> files (on other people's servers) so I wasn't going into it completely
> blind.
>
> I don't know if I'd call it "fairly trivial", but with howto's and
> google at your fingertips you should be able to get it set up properly
> if you really want to.
>
> Usually the web-based DNS management by your domain name registrar or
> hosting provider are good enough for most "personal domain" kind of
> usage (like mine). In my case there was something that their web-based
> editor didn't support (TXT records on subdomains or something like
> that), and mostly because I just felt like trying to do it myself.
> Since they are my personal domains, nobody else will suffer if I break
> everything. Others are in the (lucky? not so lucky?) positions of
> administering systems where things actually have to work right the
> first time and all the time. :)
>
>


-- 
--
Pandu E Poluan - IT Optimizer
My website: http://pandu.poluan.info/



Re: [gentoo-user] {OT} rdiff-backup: push or pull?

2011-08-17 Thread Peter Humphrey
On Wednesday 17 August 2011 23:03:32 Alan McKinnon wrote:

> Why that amount? Is it really 5% or is it the number of blocks and 5%
> just happens to round that out nicely?

No, it's just somebody licking his finger, sticking it up into the wind to 
see which way it's blowing. Think-of-a-number, in other words.

-- 
Rgds
Peter   Linux Counter 5290, 1994-04-23



Re: [gentoo-user] Running HTTP and DNS on same machine

2011-08-17 Thread kashani

On 8/17/2011 5:18 PM, Adam Carter wrote:

Just to counter all of the scary stories,


Yeah, i'd like to counter too. While the implications of getting it
wrong are serious, technically its quite simple. I run my own DNS, and
use a couple of free secondaries (http://www.twisted4life.com and
http://www.everydns.net).

The upsides of running your own DNS is that you learn the ins and
outs. So, if the DNS is for business that will loose money if you
stuff it up, then i'll tend to agree with the naysayers, but if its a
home domain then go ahead. And if you don't have a home domain, get
one as a learning exercise and once you're mastered that you can
re-consider if you want to move the business domain.


	Alan and I would have had a vastly different take on this if it had 
been phrased as "I want to setup DNS at home for learning and 
convenience." Instead the email in my mind read as, "I'd like to 
introduce a single point of failure into my system and I'd like to do it 
with something I don't fully understand to boot."


Yes, I have a rich and cynical inner monologue. This is well known.

	That said if you want to setup Bind (which I prefer) the Gentoo wiki 
has a decent how-to. I wrote the original incarnation 7-8 years ago and 
people have kept it updated. It looks mostly correct though I can see a 
few places where it needs some clean up. Even with the cruft it is light 
years ahead of the official Gentoo Bind doc and includes a number of 
config entries to make troubleshooting and running ISP type name servers 
easier and safer.


http://en.gentoo-wiki.com/wiki/BIND

kashani



Re: [gentoo-user] Running HTTP and DNS on same machine

2011-08-17 Thread Peter Humphrey
On Wednesday 17 August 2011 23:51:12 Alan McKinnon wrote:

> Long long ago (in the 90s) when a current colleague started working
> here, he wanted access to the hidden primary (like your ns00).
> 
> He was given a bare machine (no OS) with these instructions:
> 
> It's 10am, by 4pm I want a name server running on that hardware,
> authoritative for domain xxx.yyy.zzz, live on the internet, with
> firewall installed and all reasonable security precautions taken. You
> do not have to register xxx.yyy.zzz with any registrar, we will test
> it with "dig @".
> 
> He passed :-)

A better man than me!

> The same fellow 3 years later found one day that the company zone had
> not loaded after an update (the name servers are self-hosted in that
> zone) and the support person that did it had done it twice before
> recently. Ten minutes later an ACL was in place and only systems could
> edit the zone. The entire company was told to propose sub-domains for
> their own teams and systems would delegate them - the uproar was
> fantastic but he stood his ground. He was 100% right of course and we
> still benefit today.
> 
> Lessons learned:
>   - do not ever mess with your DNS admin
>   - $DEITY says "sir" in hushed tones when addressing the dns admin

I enjoyed that tale - thank you Alan.

-- 
Rgds
Peter   Linux Counter 5290, 1994-04-23



[gentoo-user] {OT} Can I retrieve my SSL key?

2011-08-17 Thread Grant
I just accidentally overwrote my SSL certificate key.  Is there any
way to retrieve it?  Possibly some sort of export since I haven't
restarted apache2 yet?

- Grant



Re: [gentoo-user] {OT} Can I retrieve my SSL key?

2011-08-17 Thread Michael Mol
On Wed, Aug 17, 2011 at 9:23 PM, Grant  wrote:
> I just accidentally overwrote my SSL certificate key.  Is there any
> way to retrieve it?  Possibly some sort of export since I haven't
> restarted apache2 yet?

What, exactly, did you do that caused the overwrite?


-- 
:wq



Re: [gentoo-user] Running HTTP and DNS on same machine

2011-08-17 Thread Michael Mol
On Wed, Aug 17, 2011 at 5:53 PM, Alan McKinnon  wrote:
> On Wed 17 August 2011 17:23:41 Michael Mol did opine thusly:
>> On Wed, Aug 17, 2011 at 4:56 PM, Grant  wrote:
>> > I currently use a free service to host the DNS records for my
>> > website, but I'm thinking of running a DNS server on the same
>> > machine that runs my website instead.  Would that be fairly
>> > trivial to set up and maintain?  If so, which package should I
>> > use?
>>
>> ISC bind is the de facto standard for DNS servers. I haven't
>> administered bind on Gentoo, but on Debian, most of the problems I
>> run into come from how Debian packages and updates configuration
>> files.
>>
>> I'm not running DNS servers in any major production capacity; I've
>> got a bind server at home linking my home domain and my employer's
>> work domain across a VPN, and updated dynamically via a dhcpd on
>> the same server. It's also serving as a caching recursive resolver
>> for my home network, which was *really* necessary when I was still
>> on AT&T. (The DSL link was dropping packets every now and again,
>> and it's a PITA when that happens to DNS queries)
>
> You're running an auth server and a cache on the same machine?

Split across a couple views, but yeah. And no recursion allowed on the wan side.

>
> At a minimum they should be on different interfaces and preferably in
> chroots. Otherwise all manner of $BAD_STUFF happens.

Hm. Interested.

echo $BAD_STUFF

(or URI)

-- 
:wq



Re: [gentoo-user] {OT} Can I retrieve my SSL key?

2011-08-17 Thread Grant
>> I just accidentally overwrote my SSL certificate key.  Is there any
>> way to retrieve it?  Possibly some sort of export since I haven't
>> restarted apache2 yet?
>
> What, exactly, did you do that caused the overwrite?

I generated a new key but used the wrong filename so it overwrote a
key that has an associated certificate.

- Grant



Re: [gentoo-user] how to use layman --sync ALL across a firewall

2011-08-17 Thread Valmor de Almeida
On 08/17/2011 02:45 PM, Florian Philipp wrote:
> Am 17.08.2011 18:27, schrieb Valmor de Almeida:
>> Hello,
>>
>> At work, I typically use  emerge-webrsync  to sync the portage tree.
>> But I don't know how to sync the layman tree.
>> This
>>
>>   layman --sync ALL
>>
>> does not work. I guess because git pull does not work across the
>> firewall. Is there a solution to this besides requesting a firewall
>> exception?
>>
>> Thanks,
>>
>> --
>> Valmor
>>
> 
> Well, at least some overlays support fetching via http. `layman -L`
> shows all available URLs for fetching. In /etc/layman/layman.cfg, you
> can also specify a proxy. In theory, that should allow you to fetch all
> these overlays.
> 
> The remaining problem is: How do you tell layman to prefer the http
> connection over the native protocol? I haven't found such an option.
> Maybe you have to try it out yourself or open a bug for a feature request.
> 
> Worst case: create your own overlay list which only contains the http
> connections. The documentation shows how to do this.
> 
> Hope this helps,
> Florian Philipp
> 

Thanks for the inputs.

--
Valmor



Re: [gentoo-user] {OT} Can I retrieve my SSL key?

2011-08-17 Thread Francisco Blas Izquierdo Riera (klondike)
El 18/08/11 03:37, Grant escribió:
>>> I just accidentally overwrote my SSL certificate key.  Is there any
>>> way to retrieve it?  Possibly some sort of export since I haven't
>>> restarted apache2 yet?
>> What, exactly, did you do that caused the overwrite?
> I generated a new key but used the wrong filename so it overwrote a
> key that has an associated certificate.
Hopefully you can still ext3undelete it Worst case you have to parse the
whole disk looking for a pattern with a custom C program (AHH the pain!)



signature.asc
Description: OpenPGP digital signature


Re: [gentoo-user] Running HTTP and DNS on same machine

2011-08-17 Thread Grant
>> Just to counter all of the scary stories,
>
> Yeah, i'd like to counter too. While the implications of getting it
> wrong are serious, technically its quite simple. I run my own DNS, and
> use a couple of free secondaries (http://www.twisted4life.com and
> http://www.everydns.net).

everydns.net is merging with dyn.com and you have to migrate it
yourself.  There is a $4.95 "migration fee" and they aren't clear
about whether the service will be free for everydns.net users once you
pay the fee.  dyn.com DNS starts at $30/year normally.

Is it alright to sign up for DNS service from your server host?

- Grant



Re: [gentoo-user] {OT} Can I retrieve my SSL key?

2011-08-17 Thread Grant
 I just accidentally overwrote my SSL certificate key.  Is there any
 way to retrieve it?  Possibly some sort of export since I haven't
 restarted apache2 yet?
>>> What, exactly, did you do that caused the overwrite?
>> I generated a new key but used the wrong filename so it overwrote a
>> key that has an associated certificate.
> Hopefully you can still ext3undelete it Worst case you have to parse the
> whole disk looking for a pattern with a custom C program (AHH the pain!)

Got it.  I'll contact the certificate issuer to see if there's
anything I can do.

- Grant



[gentoo-user] What's the status of ht://Dig?

2011-08-17 Thread Peter Humphrey
Hello list,

I'd like to add a search facility to my choir's website, and a likely-
looking candidate is ht://Dig, but its News dates from seven years ago. Does 
this mean it's dead or absolutely stable?

If this isn't a runner, does the team wish to offer an alternative? I have 
over 100 pages in this site, and I'm sure a visitor would like to be able to 
search for a particular member, song, venue etc.

-- 
Rgds
Peter   Linux Counter 5290, 1994-04-23



Re: [gentoo-user] {OT} Can I retrieve my SSL key?

2011-08-17 Thread Michael Mol
On Wed, Aug 17, 2011 at 9:45 PM, Francisco Blas Izquierdo Riera (klondike) <
klond...@gentoo.org> wrote:

> El 18/08/11 03:37, Grant escribió:
> >>> I just accidentally overwrote my SSL certificate key.  Is there any
> >>> way to retrieve it?  Possibly some sort of export since I haven't
> >>> restarted apache2 yet?
> >> What, exactly, did you do that caused the overwrite?
> > I generated a new key but used the wrong filename so it overwrote a
> > key that has an associated certificate.
> Hopefully you can still ext3undelete it Worst case you have to parse the
> whole disk looking for a pattern with a custom C program (AHH the pain!)
>
> There are file carver tools I've not had any luck with them, though.


-- 
:wq


Re: [gentoo-user] OT: but cool - NASDAQ is gentoo powered

2011-08-17 Thread Norman Rieß
Am 08/17/11 13:44, schrieb Joost Roeleveld:
> On Wednesday, August 17, 2011 09:59:50 AM Peter Humphrey wrote:
>> On Tuesday 16 August 2011 02:48:30 Michael Mol wrote:
>>> How does everybody here use Gentoo? For personal use? Production use?
>>> For
>>> server, desktop or embedded roles? What's your most interesting setup
>>> or use case?
>>
>> Since you ask: my workstation runs Gentoo. My old workstation sometimes
>> does; at other times it's experimenting with other distributions.
>>
>> I have a midget server on the LAN (Atom N270) which runs Gentoo, but it's
>> too underpowered to do all the compiling itself, so it NFS-exports its
>> packages directory to my workstation, where I have a 32-bit chroot set up as
>> an image of the Atom. Emerging is done here, making the packages available
>> for installation on the Atom. This is a cumbersome operation though.
>>
>> The Atom serves web, time, squid proxy, dns, cups and mysql to the LAN. It
>> runs http-replicator and rsyncd to keep a local portage tree for the other
>> boxes. I'd like it to serve mail too, but I've never managed to set that up.
> 
> Putting email on the Atom using IMAP might not be the best option. IMAP can 
> be 
> quite heavy on resources on the server-side.
> 
> I use a quad-core AMD for my server.
> 
> --
> Joost
> 

Depends on how you use it. I have an IMAP-Server running on Atom which
holds my email archive. Also depends on the Software you use for the
IMAP-Server.
I can not see why a N270 could not serve a moderate amount of users on IMAP.

Concerning the "Atom not fast enough for compiling"-Problem. I compiled,
run and update a Gentoo System on a AMD Geode LX, which is way less
powerfull and it works just fine.

Norman



Re: [gentoo-user] {OT} rdiff-backup: push or pull?

2011-08-17 Thread Joost Roeleveld
On Wednesday, August 17, 2011 10:18:25 AM Grant wrote:
> >> > You can seperate the backups by giving each system a different
> >> > account
> >> > where to store the backups.
> >> 
> >> I'm not sure what you mean.  The backups are all stored on the backup
> >> server.
> > 
> > Each machine to be backed up has a different account on the backup
> > server. This will prevent machine A from accessing the backups of
> > machine B.
> > 
> > This way, if one machine is compromised, only this machines backups can
> > be accessed using the access-keys for the backup. And this machines
> > keys can then be revoked without affecting other backups.
> 
> That's a great idea.  I will do that.  Should that backup account have
> any special configuration, or just a standard new user?

I would suspect just a standard new user with default permissions.
Eg. only write-access to his/her own files.

And I'd prevent that user account from being able to get a shell-account.

A ".bashrc" with "exit" as the last or first entry is a nice touch. Especially 
if you set the permissions such that it works for the user but the user can 
never change that file.

--
Joost



Re: [gentoo-user] {OT} rdiff-backup: push or pull?

2011-08-17 Thread Joost Roeleveld
On Wednesday, August 17, 2011 11:49:16 PM Alex Schuster wrote:
> Grant writes:
> > >> > Can I reserve 0% for root on my USB hard drive which is only
> > >> > used for backups and does not contain an OS?
> > >> 
> > >> Yes:
> > >> 
> > >> mke2fs -m 0 /dev/usb-drive
> > > 
> > > Although a value > 0 helps against fragmentation. And when
> > > rdiff-backup has failed because it ran out of space, regressing to
> > > the previous sane state will need a little free space.
> > 
> > Good points.  Should 10GB (1% of 1TB) do it?
> 
> This I don't know. I use this value for large partitions of multimedia data,
> because I do not want to waste space (no matter how big the drives are,
> mine are always quite full), and performance should not be a big issue
> here. I keep the 5% default other partitions, like /home. BTW, you can also
> specify fractions like 0.5% if you like.

I tend to leave it at default for most partitions. Only the ones serving the 
fileshare have it set to 0%. But these are on LVM partitions and I can 
increase their size when needed.

> Another thing: Be sure to have enough inodes on the file system, I have run
> out of them in the past. Not only once.

I usually run out of these during installation time when I use ext2/3 
filesystems for the portage tree.
That's why I tend to use reiserfs for that.

--
Joost