Re: possible cllue about this 30 second system freeze

2025-04-13 Thread Andrew M.A. Cater
On Sun, Apr 13, 2025 at 05:32:29PM -0400, gene heskett wrote: > On 4/13/25 14:07, Andrew M.A. Cater wrote: > > On Sun, Apr 13, 2025 at 12:50:14PM -0400, gene heskett wrote: > > > > Hi Gene, > > > > I'm probably going to regret this - let's see if I can help you > > fault-find :) > > > > Question

Re: Syslog-NG Centralized Log Collector

2025-04-13 Thread Timothy M Butterworth
On Sun, Apr 13, 2025 at 10:31 PM Timothy M Butterworth < timothy.m.butterwo...@gmail.com> wrote: > All, > > I modified /etc/syslog-ng/syslog-ng.conf to the following: > > > # Sources > > # Add the following line > source s_net { tcp(ip(0.0.0.0) por

Re: Syslog-NG Centralized Log Collector

2025-04-13 Thread Timothy M Butterworth
On Sun, Apr 13, 2025 at 10:51 PM Timothy M Butterworth < timothy.m.butterwo...@gmail.com> wrote: > > > On Sun, Apr 13, 2025 at 10:31 PM Timothy M Butterworth < > timothy.m.butterwo...@gmail.com> wrote: > >> All, >> >> I modified /etc/syslog-ng/syslog-ng.conf to the following: >> >> ###

Re: Syslog-NG Centralized Log Collector

2025-04-13 Thread Timothy M Butterworth
On Sun, Apr 13, 2025 at 11:00 PM Timothy M Butterworth < timothy.m.butterwo...@gmail.com> wrote: > > > On Sun, Apr 13, 2025 at 10:51 PM Timothy M Butterworth < > timothy.m.butterwo...@gmail.com> wrote: > >> >> >> On Sun, Apr 13, 2025 at 10:31 PM Timothy M Butterworth < >> timothy.m.butterwo...@gma

Re: Ethernet interfaces ignoring 'Connect Automatically' setting on Debian 12 (Bookworm)

2025-04-13 Thread Max Nikulin
On 12/04/2025 07:16, coffeeforblood.pardon117 wrote: I performed some very basic testing using a Debian 12.8.0 Live CD. Likely nobody will be interested in minor bugs for versions released a couple of years ago. At current moment it is better to try trixie weekly builds. Upstream developers o

Syslog-NG Centralized Log Collector

2025-04-13 Thread Timothy M Butterworth
All, I modified /etc/syslog-ng/syslog-ng.conf to the following: # Sources # Add the following line source s_net { tcp(ip(0.0.0.0) port(514) max-connections (5000)); udp(); }; # Destinations # comm

Re: Limiting attack surface for Debian sshd

2025-04-13 Thread Max Nikulin
On 14/04/2025 06:52, Lee wrote: I taking a class at the local library; my laptop has avahi and cups ports open .. which I'm not thrilled about but I like the zero-conf printing ability. It's nice being able to print when I'm at home. I don't know how to turn this stuff off when I'm not at hom

Re: Limiting attack surface for Debian sshd

2025-04-13 Thread Lee
On Sun, Apr 13, 2025 at 11:38 AM Stefan Monnier wrote: > > >> My laptop has one to two handful of these, depending on what I'm > >> currently playing with. > > I taking a class at the local library; my laptop has avahi and cups > > ports open .. which I'm not thrilled about but I like the zero-conf

Re: possible cllue about this 30 second system freeze

2025-04-13 Thread gene heskett
On 4/13/25 14:07, Andrew M.A. Cater wrote: On Sun, Apr 13, 2025 at 12:50:14PM -0400, gene heskett wrote: Hi Gene, I'm probably going to regret this - let's see if I can help you fault-find :) Questions: 1. Which version of Debian is this? Give us the output of /etc/os-release and of uname -a

Re: case fan speed

2025-04-13 Thread Eben King
On 4/13/25 16:52, Eben King wrote: On 4/13/25 16:18, Jonathan Dowland wrote: There might be a driver for a fan controller on the board that you can use to control them. Try the lm-sensors package to see what it can discover. It shows just temps.  I assume there are other sensors there,

Re: case fan speed

2025-04-13 Thread Eben King
On 4/13/25 16:18, Jonathan Dowland wrote: On Sun Apr 13, 2025 at 9:15 PM BST, Eben King wrote: I have a video card which has fans (GTX 970) on Debian Bookworm (12.10).   Unfortunately the card is broken in such a way that the fans almost never work, and I can't afford to replace it with one t

Re: case fan speed

2025-04-13 Thread Jonathan Dowland
On Sun Apr 13, 2025 at 9:15 PM BST, Eben King wrote: I have a video card which has fans (GTX 970) on Debian Bookworm (12.10). Unfortunately the card is broken in such a way that the fans almost never work, and I can't afford to replace it with one that isn't broken. Changing the GPU's interna

case fan speed

2025-04-13 Thread Eben King
I have a video card which has fans (GTX 970) on Debian Bookworm (12.10). Unfortunately the card is broken in such a way that the fans almost never work, and I can't afford to replace it with one that isn't broken. Changing the GPU's internal clocks has little to no effect on temperature (or perf

Re: Broken file system?

2025-04-13 Thread Nicolas George
pe...@easthope.ca (HE12025-04-13): > [0.463676] ---[ end Kernel panic - not syncing: VFS: Unable to mount root > fs on "/dev/sda6" or unknown-block(0,0) ]--- > My best guess is that the drive or file system is broken. My better guess is that your kernel does not see your drive. If it did, it

Broken file system?

2025-04-13 Thread peter
Hi, After a fresh installation and several reboots to configure, booting stops at what you see here. https://easthope.ca/BootDisplay2025.04.13.jpg Summarizing, Parsing ELF... Performing relocations... done. Booting the kernel (entry_offset: 0x0ba3). [0.134172] x86/cpu: VMX (outs

Re: possible cllue about this 30 second system freeze

2025-04-13 Thread Andrew M.A. Cater
On Sun, Apr 13, 2025 at 12:50:14PM -0400, gene heskett wrote: Hi Gene, I'm probably going to regret this - let's see if I can help you fault-find :) Questions: 1. Which version of Debian is this? Give us the output of /etc/os-release and of uname -a on this machine, please. 2. Do you actually

Re: Limiting attack surface for Debian sshd

2025-04-13 Thread Nate Bargmann
* On 2025 13 Apr 10:38 -0500, Stefan Monnier wrote: > >> My laptop has one to two handful of these, depending on what I'm > >> currently playing with. > > I taking a class at the local library; my laptop has avahi and cups > > ports open .. which I'm not thrilled about but I like the zero-conf > >

possible cllue about this 30 second system freeze

2025-04-13 Thread gene heskett
Using strace, the freeze corresponds to a poll command for fd33, which appears to be a docker function. In this case the test file is an AppImage, orcaslicer-2.3.0, but any AppImage will work for this. I have quite a few, as its the only way to get the latest and greatest given debians penchant

Re: Limiting attack surface for Debian sshd

2025-04-13 Thread didier gaumet
Le 13/04/2025 à 17:13, Marc SCHAEFER a écrit : Hello, would you be open to using another implementation of an ssh server? If so, it would be a third approach: Yes, it would be. It might help with the attack surface issue of current sshd. However, I would guess that most of the alternative t

Re: Limiting attack surface for Debian sshd

2025-04-13 Thread Stefan Monnier
>> My laptop has one to two handful of these, depending on what I'm >> currently playing with. > I taking a class at the local library; my laptop has avahi and cups > ports open .. which I'm not thrilled about but I like the zero-conf > printing ability. Why do you need cups ports open to print? I

Re: Limiting attack surface for Debian sshd

2025-04-13 Thread Marc SCHAEFER
Hello, > would you be open to using another implementation of an ssh server? > If so, it would be a third approach: Yes, it would be. It might help with the attack surface issue of current sshd. However, I would guess that most of the alternative to OpenSSH are using libssh, which also had some

Re: Limiting attack surface for Debian sshd

2025-04-13 Thread Marc SCHAEFER
Hello, On Sun, Apr 13, 2025 at 10:59:45AM -0400, Lee wrote: > I taking a class at the local library; my laptop has avahi and cups > ports open .. which I'm not thrilled about but I like the zero-conf > printing ability. If you sudo systemctl disable cups # and maybe others then, you can do

Re: Limiting attack surface for Debian sshd

2025-04-13 Thread Lee
On Sat, Apr 12, 2025 at 10:48 AM wrote: > > On Sat, Apr 12, 2025 at 09:29:41AM -0400, Lee wrote: > > On Sat, Apr 12, 2025 at 1:44 AM tomas wrote: > > > > > > On Sat, Apr 12, 2025 at 01:32:06PM +0800, jeremy ardley wrote: > > > > > > > > On 12/4/25 13:24, tomas wrote: > > > > > So, share your wisdo

FreeRadius Help

2025-04-13 Thread Timothy M Butterworth
*Push the below role, The user in the IOS will get the level 15 Privilege.This would be applicable for all the users who are member of group cisco-rw* *DEFAULT Group == cisco-rw, Auth-Type = System, Service-Type = NAS-Prompt-User, **cisco-avpair :="shell:priv-lvl=15"* When I add the above comma