Re: Out of root partition space

2017-12-26 Thread Pascal Hambourg
Le 26/12/2017 à 02:44, Sarah Johnson a écrit : Hi, I ran out of root partition disk space and can't install or remove any more packages or even login gui window manager anymore i spent few good hours researching for solutions and found that i can resize root and home partitions using resize2fs

Re: GRUB and boot partition

2017-12-26 Thread Pascal Hambourg
Le 26/12/2017 à 02:47, microsoft gaofei a écrit : https://wiki.archlinux.org/index.php/GRUB#Boot_partition ArchWiki has carried an introduction of GRUB , it offers a feature to decrypt your partitions and you don't need to separate /boot . Debian also uses GRUB as its boot loader ,but Debian st

Re: Out of root partition space

2017-12-26 Thread Felix Miata
Pascal Hambourg composed on 2017-12-26 10:20 (UTC+0100): > Sarah Johnson composed: >> so is it safe to resize debian root and other partitions using windows >> machine partitioning tool ? ... > Before considering resizing partitions, the first step is to identify > what files and directories ta

Re: GRUB and boot partition

2017-12-26 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, Dec 26, 2017 at 10:42:46AM +0100, Pascal Hambourg wrote: > Le 26/12/2017 à 02:47, microsoft gaofei a écrit : > >https://wiki.archlinux.org/index.php/GRUB#Boot_partition > >ArchWiki has carried an introduction of GRUB , it offers a feature to >

Re: GRUB and boot partition

2017-12-26 Thread Reco
Hi. On Tue, Dec 26, 2017 at 11:36:13AM +0100, to...@tuxteam.de wrote: > On Tue, Dec 26, 2017 at 10:42:46AM +0100, Pascal Hambourg wrote: > > Le 26/12/2017 à 02:47, microsoft gaofei a écrit : > > >https://wiki.archlinux.org/index.php/GRUB#Boot_partition > > >ArchWiki has carried an introduc

Re: GRUB and boot partition

2017-12-26 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, Dec 26, 2017 at 01:47:23PM +0300, Reco wrote: > Hi. > > On Tue, Dec 26, 2017 at 11:36:13AM +0100, to...@tuxteam.de wrote: > > On Tue, Dec 26, 2017 at 10:42:46AM +0100, Pascal Hambourg wrote: > > > Le 26/12/2017 à 02:47, microsoft gaofei

Re: GRUB and boot partition

2017-12-26 Thread Pascal Hambourg
Le 26/12/2017 à 11:36, to...@tuxteam.de a écrit : On Tue, Dec 26, 2017 at 10:42:46AM +0100, Pascal Hambourg wrote: Note however that in any case, the early part of GRUB cannot be encrypted [...] Is there any inherent advantage to having /boot encrypted? I can imagine a few situations. - Wh

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread deloptes
Mark Fletcher wrote: > split -- there are essentially two splits because there are two > firewalls -- one of which I want and one I can't turn off. The firewall > I set up sits at the outermost edge of the network (obviously) and has 2 > interfaces. The other is at the AirStation, which regards it

Re: GRUB and boot partition

2017-12-26 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, Dec 26, 2017 at 12:10:52PM +0100, Pascal Hambourg wrote: > Le 26/12/2017 à 11:36, to...@tuxteam.de a écrit : > > > >On Tue, Dec 26, 2017 at 10:42:46AM +0100, Pascal Hambourg wrote: > >>Note however that in any case, the early part of GRUB canno

Re: GRUB and boot partition

2017-12-26 Thread Pascal Hambourg
Le 26/12/2017 à 11:59, to...@tuxteam.de a écrit : The only things which might help against an evil maid attack [1] are: secure boot (tying your bootable to secure firmware) Only if you replacy the default keys with your own key in the firmware. Any signed GRUB provided by Ubuntu, RedHat or op

Re: GRUB and boot partition

2017-12-26 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, Dec 26, 2017 at 12:26:35PM +0100, Pascal Hambourg wrote: [...] > As explained in my previous reply, the difference is only in > convenience. You need the boot media to be present and writable when > updating when updating the kernel [...] Ye

Re: GRUB and boot partition

2017-12-26 Thread Pascal Hambourg
Le 26/12/2017 à 12:24, to...@tuxteam.de a écrit : On Tue, Dec 26, 2017 at 12:10:52PM +0100, Pascal Hambourg wrote: Le 26/12/2017 à 11:36, to...@tuxteam.de a écrit : Is there any inherent advantage to having /boot encrypted? I can imagine a few situations. - When you can enforce the early s

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Dan Purgert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark Fletcher wrote: > [...] > AirStation LAN is 192.168.11.0/24, outside AirStation LAN is > 192.168.1.1, .2 and .3 -- note the third octet difference for internal You seem to have set up a situation of double-NAT. This means that while 11.x can e

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Pascal Hambourg
Le 26/12/2017 à 12:10, deloptes a écrit : Looks like Airstation is WLAN router - I would put it infront of the firewall and DMZ to the firewall And lose the protection provided by the firewall to wireless devices ? Sounds like a great idea. or you can turn off the firewall there completely

Re: GRUB and boot partition

2017-12-26 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, Dec 26, 2017 at 12:33:36PM +0100, Pascal Hambourg wrote: > Le 26/12/2017 à 12:24, to...@tuxteam.de a écrit : [...] > >In the days you measure (small) external media in gigabytes, this > >argument has lost a lot of push. > > What does storage

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Mark Fletcher
On Tue, Dec 26, 2017 at 20:40 Dan Purgert wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Mark Fletcher wrote: > > [...] > > AirStation LAN is 192.168.11.0/24, outside AirStation LAN is > > 192.168.1.1, .2 and .3 -- note the third octet difference for internal > > You seem to have se

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Pascal Hambourg
Le 26/12/2017 à 12:33, Dan Purgert a écrit : Mark Fletcher wrote: [...] AirStation LAN is 192.168.11.0/24, outside AirStation LAN is 192.168.1.1, .2 and .3 -- note the third octet difference for internal You seem to have set up a situation of double-NAT. This means that while 11.x can easily

Re: GRUB and boot partition

2017-12-26 Thread Reco
On Tue, Dec 26, 2017 at 11:59:18AM +0100, to...@tuxteam.de wrote: > On Tue, Dec 26, 2017 at 01:47:23PM +0300, Reco wrote: > > Hi. > > > > On Tue, Dec 26, 2017 at 11:36:13AM +0100, to...@tuxteam.de wrote: > > > On Tue, Dec 26, 2017 at 10:42:46AM +0100, Pascal Hambourg wrote: > > > > Le 26/12/20

Re: GRUB and boot partition

2017-12-26 Thread Pascal Hambourg
Le 26/12/2017 à 13:58, Reco a écrit : On Tue, Dec 26, 2017 at 11:59:18AM +0100, to...@tuxteam.de wrote: Is there any inherent advantage to having /boot encrypted? The only things which might help against an evil maid attack [1] are: secure boot (tying your bootable to secure firmware) [3],

Re: Language of applications are not translated if the default language is changed

2017-12-26 Thread Greg Wooledge
On Sun, Dec 24, 2017 at 08:27:20AM +0100, Andre Majorel wrote: > On 2017-12-23 19:21 +0100, john doe wrote: > > > I have install Debian 9 using as the default language 'C'. > > I want to add some new languages, and for this I do 'dpkg-reconfigure > > locales'. > > I'm currently using Gnome and Mat

Wanted -- installer meta-package(s)

2017-12-26 Thread Richard Owlett
I request readers take what I've written very literally. Thank you. I have done an *EMPHATICALLY* minimal Stretch install (LT 800MB) to a partition. I wish to use "apt-get install" to install *ONLY* packages that are required so that the installed system has EXACTLY one function - install D

Re: GRUB and boot partition

2017-12-26 Thread Reco
On Tue, Dec 26, 2017 at 02:24:24PM +0100, Pascal Hambourg wrote: > Le 26/12/2017 à 13:58, Reco a écrit : > > On Tue, Dec 26, 2017 at 11:59:18AM +0100, to...@tuxteam.de wrote: > > > > > > > > > > Is there any inherent advantage to having /boot encrypted? > > > > > The only things which might help

Re: GRUB and boot partition

2017-12-26 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, Dec 26, 2017 at 02:24:24PM +0100, Pascal Hambourg wrote: [...] > I read that some UEFI implementations allow the user to manage > secure boot keys. Carefully choose your hardware. > > Oh, by the way I forgot twice to mention another situatio

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Mark Fletcher
On Tue, Dec 26, 2017 at 01:05:03PM +0100, Pascal Hambourg wrote: > Le 26/12/2017 à 12:33, Dan Purgert a écrit : > > > > > Now 192.168.1.1 is the default gateway the firewall supplies the > > > AirStation (ie it supplies itself as the gateway) when the AirStation > > > makes a DHCP request, and I'm

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread deloptes
Pascal Hambourg wrote: > And lose the protection provided by the firewall to wireless devices ? > Sounds like a great idea. > It is more dangerous having the WLAN behind your firewall. I hope you understand this. >> or you can turn off the firewall there completely > > And push your logic to t

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Dan Purgert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark Fletcher wrote: > --001a113ec1c0f4dccb05613d0b84 > Content-Type: text/plain; charset="UTF-8" > Content-Transfer-Encoding: quoted-printable > > On Tue, Dec 26, 2017 at 20:40 Dan Purgert wrote: > >> >> Sounds like perhaps the airstation is blocking

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Pascal Hambourg
Le 26/12/2017 à 14:55, Mark Fletcher a écrit : I would also expect that if it did not know that, it would send packets for 192.168.1.3 to 192.168.1.1 for forwarding, just as it does every packet that is destined for the internet -- and I would expect the firewall to be able to forward them, sin

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Dan Purgert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pascal Hambourg wrote: > Le 26/12/2017 à 12:33, Dan Purgert a écrit : >> [...] >> Sounds like perhaps the airstation is blocking client devices from >> talking to "bogus" network addresses. This is generally a feature of >> consumer gear to stop you f

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Mark Fletcher
On Tue, Dec 26, 2017 at 03:43:50PM +0100, Pascal Hambourg wrote: > > > > > > > The firewall's routing rules are (amongst other rules > > which I don't believe relevant -- and external interface name elided): > > > > iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT > > ip

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Dan Purgert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark Fletcher wrote: > On Tue, Dec 26, 2017 at 01:05:03PM +0100, Pascal Hambourg wrote: >> Le 26/12/2017 à 12:33, Dan Purgert a écrit : >> > >> > > Now 192.168.1.1 is the default gateway the firewall supplies the >> > > AirStation (ie it supplies itse

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Mark Fletcher
On Tue, Dec 26, 2017 at 02:50:44PM -, Dan Purgert wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Pascal Hambourg wrote: > > Le 26/12/2017 à 12:33, Dan Purgert a écrit : > >> [...] > >> Sounds like perhaps the airstation is blocking client devices from > >> talking to "bogus" netw

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Mark Fletcher
On Tue, Dec 26, 2017 at 02:31:05PM -, Dan Purgert wrote: > >> No, the airstation having been given an address 192.168.1.x/24 will know > >> that it can directly reach any host 192.168.1.1 through 192.168.1.254 > >> inclusive. > >> > > > > Except for some reason it doesn't seem to (or, rather, t

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Mark Fletcher
On Tue, Dec 26, 2017 at 03:02:46PM -, Dan Purgert wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > >> > > The netmask is 255.255.255.252. I just tried changing it to 248, ie > > zeroing out one more bit, but that did not help. (changed it by changing > > the netmask supplied by

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Pascal Hambourg
Le 26/12/2017 à 16:05, Mark Fletcher a écrit : At the risk of further advertising my ignorance, 3 as an 8-bit binary is 0011, and 252 in binary is 1100, so why doesn't that mask "fit" with that address? (if you'll pardon my poor terminology) Put another way, why do I need to zero out ano

Re: Language of applications are not translated if the default language is changed

2017-12-26 Thread john doe
On 12/26/2017 2:27 PM, Greg Wooledge wrote: On Sun, Dec 24, 2017 at 08:27:20AM +0100, Andre Majorel wrote: On 2017-12-23 19:21 +0100, john doe wrote: I have install Debian 9 using as the default language 'C'. I want to add some new languages, and for this I do 'dpkg-reconfigure locales'. I'm c

Re: Language of applications are not translated if the default language is changed

2017-12-26 Thread Greg Wooledge
On Tue, Dec 26, 2017 at 04:34:53PM +0100, john doe wrote: > On 12/26/2017 2:27 PM, Greg Wooledge wrote: > > describes the basic concepts and > > procedures for selecting your locale. > Thank you for this, > > I guess what I'm asking is: > > When I install Debian,

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Pascal Hambourg
Le 26/12/2017 à 15:50, Dan Purgert a écrit : Pascal Hambourg wrote: Le 26/12/2017 à 12:33, Dan Purgert a écrit : [...] Sounds like perhaps the airstation is blocking client devices from talking to "bogus" network addresses. This is generally a feature of consumer gear to stop you from trying

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Michael Stone
On Tue, Dec 26, 2017 at 12:23:41AM +0900, Mark Fletcher wrote: I run a home network with what might be slightly unusual topology. At the centre of it is a Buffalo Airstation which services a bunch of iDevices, a couple of Androids, a Windoze laptop, It's bad enough having to read a really long

Re: Language of applications are not translated if the default language is changed

2017-12-26 Thread Teemu Likonen
john doe [2017-12-26 16:34:53+01] wrote: > The installed system is properly set to language 'a' (desktop manager, > Firefox, Thunderbird, Libreoffice, dictionaries ...). > > In addition to language 'a', I want to add support for language 'b' so > the user could choose between language 'a' or 'b'.

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Pascal Hambourg
Le 26/12/2017 à 16:49, Michael Stone a écrit : This is unnecessarily complicated, and will make your life harder than it needs to be. The best thing would be to not use the airstation as a router at all, just use it as a switch + wireless access point in a flat configuration, with the router

Re: Language of applications are not translated if the default language is changed

2017-12-26 Thread john doe
On 12/26/2017 4:46 PM, Greg Wooledge wrote: On Tue, Dec 26, 2017 at 04:34:53PM +0100, john doe wrote: On 12/26/2017 2:27 PM, Greg Wooledge wrote: describes the basic concepts and procedures for selecting your locale. Thank you for this, I guess what I'm aski

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Michael Stone
On Tue, Dec 26, 2017 at 05:04:34PM +0100, Pascal Hambourg wrote: As any SOHO router, it is likely that the Airstation masquerades forwarded connections, so other nodes on its WAN side do no see the real 192.168.11.x addresses but only the WAN side address of the Airstation, 192.168.1.2. Yes,

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Pascal Hambourg
Le 26/12/2017 à 17:20, Michael Stone a écrit : On Tue, Dec 26, 2017 at 05:04:34PM +0100, Pascal Hambourg wrote: As any SOHO router, it is likely that the Airstation masquerades forwarded connections, so other nodes on its WAN side do no see the real 192.168.11.x addresses but only the WAN side

Re: Language of applications are not translated if the default language is changed

2017-12-26 Thread john doe
On 12/26/2017 5:04 PM, Teemu Likonen wrote: john doe [2017-12-26 16:34:53+01] wrote: The installed system is properly set to language 'a' (desktop manager, Firefox, Thunderbird, Libreoffice, dictionaries ...). In addition to language 'a', I want to add support for language 'b' so the user coul

Re: OT: AOL fees (Re: Youtube - newbie guidance)

2017-12-26 Thread Ric Moore
On 12/23/2017 03:50 PM, rhkra...@gmail.com wrote: On Saturday, December 23, 2017 03:31:31 PM Ric Moore wrote: Bob's your uncle. BTW, Google is no where as obnoxious as AOL during the old days when you could be paying hundreds a month for access to the web and email. I'll take Google any day and

BIND DNS problem after upgrading from Wheezy to Squeeze

2017-12-26 Thread Andrew W
I have a server which acts as a DNS server for our LAN. All our internal servers have A records on it using a .local domain and it forwards all other requests out to the root servers using the in built list provided with BIND. All clients on the LAN have this machine set as their only DNS serve

BIND DNS problem after upgrading from Wheezy to Squeeze

2017-12-26 Thread Andrew Wood
I have a server which acts as a DNS server for our LAN. All our internal servers have A records on it using a .local domain and it forwards all other requests out to the root servers using the in built list provided with BIND. All clients on the LAN have this machine set as their only DNS serve

Re: BIND DNS problem after upgrading from Wheezy to Squeeze

2017-12-26 Thread deloptes
Andrew W wrote: > > > Does anyone have any ideas please? > I had the same experience - I think (after trying this and that) the solution was ntp (time was behind on the server), but I am not really 100%. I was thinking first it has something to do with ipv6 or firewall, but after updating the

Re: Mixing and Matching DHCP and static IPs

2017-12-26 Thread Dan Ritter
On Mon, Dec 25, 2017 at 08:25:52PM -0600, Paul Johnson wrote: > On Mon, Dec 25, 2017 at 10:49 AM, Marc Auslander > wrote: > > > The safest way to fix an ip address in a dhcp served network is to tell > > the dhcp server to associate that address with the mac of the unit. The > > address should b

Experiences with BTRFS -- is it mature enough for enterprise use?

2017-12-26 Thread Rick Thomas
Is btrfs mature enough to use in enterprise applications? If you are using it, I’d like to hear from you about your experiences — good or bad. My proposed application is for a small community radio station music library. We currently have about 5TB of data in a RAID10 using four 3TB drives, wit

Re: Experiences with BTRFS -- is it mature enough for enterprise use?

2017-12-26 Thread Eero Volotinen
use XFS, it's mature and suitable for big storage. (or gluster or cehp?) Eero 26.12.2017 21.45 "Rick Thomas" kirjoitti: > > Is btrfs mature enough to use in enterprise applications? > > If you are using it, I’d like to hear from you about your experiences — > good or bad. > > My proposed appli

Re: Experiences with BTRFS -- is it mature enough for enterprise use?

2017-12-26 Thread Jan Vales
tl;dr: save yourself the hassle and dont. go for md-raid5/6 + (luks +) XFS. long version: Just last week we migrated our soon to be production server (6 disks) btrfs-raid10 to md-raid6+XFS, after btrfs managed to die twice in december. So cool btrfs-raid/filesystem-level-raid sounds, so broken i

Re: Experiences with BTRFS -- is it mature enough for enterprise use?

2017-12-26 Thread Andy Smith
Hi Rick, On Tue, Dec 26, 2017 at 11:37:32AM -0800, Rick Thomas wrote: > Is btrfs mature enough to use in enterprise applications? Not in my opinion. I've dabbled with it at home and based on those experiences I will not be using it professionally any time soon. > If you are using it, I’d like to

Re: Experiences with BTRFS -- is it mature enough for enterprise use?

2017-12-26 Thread Roberto C . Sánchez
On Tue, Dec 26, 2017 at 09:48:09PM +0200, Eero Volotinen wrote: >use XFS, it's mature and suitable for big storage. (or gluster or cehp?) I second XFS for your application. Another to consider might be JFS. Either one of those would be very mature and suitable for the enterprise. I don't hav

Re: Experiences with BTRFS -- is it mature enough for enterprise use?

2017-12-26 Thread Sven Hartge
Roberto C. Sánchez wrote: > On Tue, Dec 26, 2017 at 09:48:09PM +0200, Eero Volotinen wrote: >>use XFS, it's mature and suitable for big storage. (or gluster or >>cehp?) > I second XFS for your application. Another to consider might be JFS. I believe development of JFS has stopped sever

Re: Experiences with BTRFS -- is it mature enough for enterprise use?

2017-12-26 Thread Michael Stone
On Tue, Dec 26, 2017 at 05:21:10PM -0500, Roberto C. Sánchez wrote: I second XFS for your application. Another to consider might be JFS. Either one of those would be very mature and suitable for the enterprise. I don't have any real experience with JFS I can't think of any reason to go with J

Re: Experiences with BTRFS -- is it mature enough for enterprise use?

2017-12-26 Thread David Christensen
On 12/26/17 11:37, Rick Thomas wrote: Is btrfs mature enough to use in enterprise applications? If you are using it, I’d like to hear from you about your experiences — good or bad. My proposed application is for a small community radio station music library. We currently have about 5TB of data

Re: OT: AOL fees (Re: Youtube - newbie guidance)

2017-12-26 Thread rhkramer
On Tuesday, December 26, 2017 12:35:16 PM Ric Moore wrote: > On 12/23/2017 03:50 PM, rhkra...@gmail.com wrote: > > On Saturday, December 23, 2017 03:31:31 PM Ric Moore wrote: > >> Bob's your uncle. BTW, Google is no where as obnoxious as AOL during the > >> old days when you could be paying hundred