Re: Debian desktop environment

On 24/5/22 7:27 pm, Antonino Saetta wrote: Also, what's the lightest desktop? Default, XFCE or LXDE...? I use Mate.  It's closest to the old gnome so no fancy crap Jeremy OpenPGP_signature Description: OpenPGP digital signature

Re: regarding firewall discussion

On 31/5/22 10:17 am, mick crane wrote: regarding firewall discussion I'm uncertain how firewalls are supposed to work. I think the idea is that nothing is accepted unless it is in response to a request. What's to stop some spurious instructions being sent in response to genuine request? rega

Screen power save in console mode

I have a Debain (Armbian) server that does not boot to any form of window manager, so what is seen on the screen is just the command console. What I would like  to do is have the console screen go into screen power save mode after some period and recover when keyboard or mouse are used. Is th

haproxy service retry

I have noticed a problem with haproxy on an edge router after a power outage. The service is configured to start automatically, but usually it takes a bit of time for the internet connection to be established and an IP assigned to the WAN interface. haproxy seems to keep trying for 5 times,

problems with cbl.abuseat.org

I'm using postfix as my MTA and lately I've been missing a significant fraction from my usual mail e.g. email from linkedin and spamassassin list. Tracking it down I see they are all getting rejected by abuseat. e.g. Jun 30 14:20:09 egde postfix/25pass/smtpd[21040]: NOQUEUE: reject: RCPT from

Re: SSH resources, specifically on certificates (certificate authentication)

On 14/7/22 6:40 am, Dan Purgert wrote: On Jul 13, 2022, rhkra...@gmail.com wrote: I seem to have gone down a rabbit hole. I want(ed?) to set up ssh on my LAN using certificate authentication, and am having a lot of trouble finding the information I need / would like to have. Which is what, ex

Re: Installing on Rock Pi 4

On 19/7/22 10:03 pm, Nicolas George wrote: Hi. I am trying to install Debian on a Rock Pi 4 (v1.73). It is a system-on-chip similar to and mostly compatible with the Raspberry Pi 4 but with an on-board SSD. Does anybody have something to suggest? I have had pretty consistent success with Arm

Re: Installing on Rock Pi 4

On 20/7/22 12:56 am, Nicolas George wrote: Jeremy Ardley (12022-07-20): I have had pretty consistent success with Armbian images - not Rock Pi, but equivalent systems from a variety of vendors. https://www.armbian.com/rockpi4/ Thank you. But this is not official Debian, which is what I am

Re: ipv6: static ipv6 address with dynamic network address possible?

On 2/8/22 9:50 pm, Tim Woodall wrote: This is a DNS & NTP server, so it needs a static address.  I'd also like different firewall rules for different machines.. which also requires static addresses for at least some machines. Yes there is - see my earlier reply. ip token set ::/64 dev eth0

Re: problems with cbl.abuseat.org

On 3/8/22 7:49 pm, Claudio Kuenzler wrote: I just ran into this problem as well -> https://twitter.com/ClaudioKuenzler/status/1554559303507492865 Starting yesterday (August 2nd 2022) afternoon, all incoming mails are being rej

Re: Windows on VMware on Deb 11: safely usable?

I have Windows client on Debian and Windows Hosts using Virtualbox. I don't think there is much difference to VMWare for simple client hosting. When the client is fully 'settled in' performance is perfectly adequate. Where it runs into problems is saving state and restoring. That is pretty fas

Re: Windows on VMware on Deb 11: safely usable?

On 18/8/22 7:48 pm, Jeremy Nicoll wrote: On Wed, 17 Aug 2022, at 12:38, Jeremy Ardley wrote: As an aside, a Windows host for a client sucks big time. Windows will automatically restart periodically no matter what you do to prevent it. How often does that happen? I only ask because it

Re: color border in image, drop everything outside of it

On 15/11/20 6:27 pm, The Wanderer wrote: On 2020-11-15 at 04:38, to...@tuxteam.de wrote: On Sun, Nov 15, 2020 at 12:31:22AM +0100, Emanuel Berg wrote: Hello, is there a tool/command/script anywhere that can overwrite with a single color (or make transparent) every pixel to the left, above, r

Re: running microsoft team on debian 10.3

On 9/12/20 12:51 pm, Doug McGarrett wrote: Try this: The camera is called Fogéek and Amazon sold it to me for $49.95. Specs from the box it came in are as follows: Image sensor :              CMOS Pixel :                             5 Million Maximum Resolution :    2592*1944 Frame rat

Re: cherrytree is available again, now in testing !THANK YOU!

ytree The only problem so far is that printing doesn't work. It can't see any of the system printers -- Jeremy Ardley OpenPGP_signature Description: OpenPGP digital signature

Re: transfer speed data

On 23/12/20 8:55 am, mick crane wrote: hello, I have a buster PC and a bullseye PC which are both supposed to have gigabyte network cards connected via a little Gigabyte switch box. Transferring files between them, I forget which shows the transfer speed per file, either scp or rsync the maxim

Re: transfer speed data

On 23/12/20 9:40 am, Jeremy Ardley wrote: rsync is never particularly fast as there is a lot of handshaking and file examination at each end prior to a transfer. I wouldn't be surprised at 50 Mbps. scp should be a lot faster as there is no handshaking other than establishing the se

Re: transfer speed data

On 23/12/20 11:03 pm, Michael Stone wrote: On Wed, Dec 23, 2020 at 09:56:01AM +0800, Jeremy Ardley wrote: Having said that, scp and ssh are affected by the encryption algorithm. The fastest one at the moment is blowfish and it's possible to get up to 50 MB/s on a gig lan. That

Re: transfer speed data

On 23/12/20 11:51 pm, Michael Stone wrote: On Wed, Dec 23, 2020 at 11:37:07PM +0800, Jeremy Ardley wrote: I did some tests and found there was around a 10-20% difference in speed between runs. Yes, if you want more consistent numbers you'd need much larger test file sizes; if the tra

Re: Label printer Debian compatible

On 1/1/21 6:12 am, Tom Browder wrote: Has anyone had any success driving a mailing label printer for mailing labels from either a LAN or direct connection with a Linux box? I can print sheets of mailing labels from my main printer, but I would love to be able to print single labels from my ad

Re: Label printer Debian compatible

On 1/1/21 7:20 pm, Tom Browder wrote: On Thu, Dec 31, 2020 at 16:40 Jeremy Ardley <mailto:jer...@ardley.org>> wrote: On 1/1/21 6:12 am, Tom Browder wrote: Has anyone had any success driving a mailing label printer for mailing labels from either a LAN or direct connecti

Re: Photos on corrupted SD card

On 5/1/21 5:38 pm, James Allsopp wrote: Hi, Does anyone know if there are any good tools in Linux for fixing corruption on FAT32 SD cards. It was in my phone, but I dropped it and broke the phone. Couldn't turn it off as the screen was broken and thoughtlessly removed it whilst on. The files

Radeon opengl driver problem - buster

The problem occurs under all desktop options, gnome, mate, wayland etc I run normal graphics except when the application wants to use opengl glxinfo name of display: :0 X Error of failed request:  BadValue (integer parameter out of range for operation)   Major opcode of failed request:  152 (GL

Re: Radeon opengl driver problem - buster

On 10/1/21 10:58 am, Jeremy Ardley wrote: The problem occurs under all desktop options, gnome, mate, wayland etc I run normal graphics except when the application wants to use opengl glxinfo name of display: :0 X Error of failed request:  BadValue (integer parameter out of range for

Re: Radeon opengl driver problem - buster

On 10/1/21 12:03 pm, Felix Miata wrote: You might be better off removing that file. A newer technology DDX driver than the Radeon is actually the upstream default: # inxi GISy Sy

Re: Radeon opengl driver problem - buster

On 10/1/21 12:52 pm, Jeremy Ardley wrote: inxi -Fxz (...) Graphics:   Device-1: AMD Caicos PRO [Radeon HD 7450] vendor: ASUSTeK driver: radeon   v: kernel bus ID: 09:00.0   Display: x11 server: X.Org 1.20.4 driver: modesetting unloaded: fbdev,vesa   resolution: 1920x1080~60Hz   OpenGL

Re: Radeon opengl driver problem - buster

On 11/1/21 8:36 am, Jeremy Ardley wrote: On 10/1/21 12:52 pm, Jeremy Ardley wrote: inxi -Fxz (...) Graphics:   Device-1: AMD Caicos PRO [Radeon HD 7450] vendor: ASUSTeK driver: radeon   v: kernel bus ID: 09:00.0   Display: x11 server: X.Org 1.20.4 driver: modesetting unloaded: fbdev,vesa

blacklist module? Selective disable USB?

I have just installed Debian onto an older HP touchpad. The machine has a touchscreen and a touchpad. The touchscreen is faulty and continually triggers. I have plugged in a USB mouse as well. Configuration dmesg | grep hid [    7.765628] hidraw: raw HID events driver (C) Jiri Kosina [    7.8

Re: Installing Debian Buster on Cubox-i4 with eSATA drive.

On 28/1/21 12:03 pm, Rick Thomas wrote: I'm trying to install Debian Buster [1] on my Cubox-i4P with an eSATA drive. Everything seems to be fine, but when it comes time to reboot, it boots into the installer again, rather than the installed system. Here's what I did, and what I observed: *)

Re: website permissions and ownership

On 2/2/21 3:09 pm, Richard Hector wrote: Hi all, I'm reviewing how I set up websites (mostly Wordpress at the moment), and would like other opinions on what I'm planning is sane. My plan is to have a user eg "mysite" that owns all/most of the standard files and directories. The webserver

Re: website permissions and ownership

On 2/2/21 4:55 pm, Richard Hector wrote: What you are doing sounds pretty O.K. Though I personally also use SELinux for web facing services. Thanks. I haven't looked in to SELinux. I looked at AppArmor, but it appears that it won't work as expected in an LXC container, which is where I ru

Re: website permissions and ownership

On 2/2/21 5:32 pm, Jeremy Ardley wrote: On 2/2/21 4:55 pm, Richard Hector wrote: What you are doing sounds pretty O.K. Though I personally also use SELinux for web facing services. Thanks. I haven't looked in to SELinux. I looked at AppArmor, but it appears that it won'

Re: chromium: ERR_CONNECTION_REFUSED

On 13/2/21 4:15 am, Rainer Dorsch wrote: Hi, I suddenly cannot access my local managed switch anymore from chromium: Chromium tries to swtich to the HTTPS protocol but the switch only supports HTTP protocol The error message I get is ERR_CONNECTION_REFUSED Chromium 83 still worked. Is ther

Re: chromium: ERR_CONNECTION_REFUSED

On 13/2/21 4:44 am, Georgi Naplatanov wrote: On 2/12/21 10:39 PM, Jeremy Ardley wrote: For problematic sites I use GNU Web instead. It will be perfectly adequate to access your switch web page. What is GNU Web, does Debian have package for it? Kind regards Georgi My error Gnome Web. not

Google earth pro only works as root

I've installed google-earth-pro-stable_current_amd64.deb on my debian system cat /etc/os-release PRETTY_NAME="Debian GNU/Linux 10 (buster)" NAME="Debian GNU/Linux" VERSION_ID="10" VERSION="10 (buster)" VERSION_CODENAME=buster ID=debian HOME_URL="https://www.debian.org/"; SUPPORT_URL="https://www.

Re: networking.service: start operation timed out

On 27/8/22 6:06 am, Ross Boylan wrote: In Debian 11/bullseye my system keeps reporting timeouts while trying to bring up the first non-loopback interface. According to ip, the interface actually is up, but ifup/down do not know that. My 2nd interface is down, and there is no mention of attempt

Re: networking.service: start operation timed out

On 27/8/22 7:55 pm, Curt wrote: On 2022-08-27, Jeremy Ardley wrote: I'd appreciate any suggestions about how to diagnose or cure the problem. I have set VERBOSE=yes in /etc/default/networking First of all ensure NetworkManager is really dead. Your advice and the advice of Andre

Re: networking.service: start operation timed out

On 27/8/22 8:25 pm, to...@tuxteam.de wrote: On Sat, Aug 27, 2022 at 11:55:44AM -, Curt wrote: On 2022-08-27, Jeremy Ardley wrote: I'd appreciate any suggestions about how to diagnose or cure the problem. I have set VERBOSE=yes in /etc/default/networking First of all e

Re: chromium: "Your browser is managed"

On 31/8/22 7:36 am, Jon Leonard wrote: On Tue, Aug 30, 2022 at 04:27:09PM -0700, L L wrote: I'm on bullseye, and installed chromium from the bullseye repos. In Chromium I get the message that the browser is "managed by your organization." I didn't do any special setup for work or school. Is the

Re: networking.service: start operation timed out [SOLVED]

On 30/8/22 9:56 am, Ross Boylan wrote: Now everything just works. Thanks again to everyone. There are probably some general lessons, though I'm not sure what they are. Clearly the systemd semantics tripped me up; it's kind of an odd beast. I understand one of its major goals was to allow st

libdbi-perl broken?

I am install a VM for a LEMP server using the latest ISO debian-11.4.0-amd64-DVD-1.iso The problem is installing mariadb (after installing nginx and php-fpm and doing apt update and apt upgrade) sudo apt install default-mysql-server ... The following packages have unmet dependencies:  libdb

Re: libdbi-perl broken?

On 31/8/22 11:11 am, Greg Wooledge wrote: apt-cache policy libdbi-perl perlapi-5.28.1 On Debian 11, libdbi-perl should depend on perlapi-5.32.0 not perlapi-5.28.1 so I suspect you've got the wrong libdbi-perl somehow. It would also help if you showed the full error message, instead of only a

Re: networking.service: start operation timed out [SOLVED]

On 31/8/22 9:16 pm, Anssi Saari wrote: I wonder what bugs Jeremy has found and reported against systemd-resolved though. I remember getting a big headache trying to get interface specific DNS configuration going only to eventually find out it really wasn't working in the version Debian packaged

Re: networking.service: start operation timed out [SOLVED]

On 31/8/22 10:45 pm, Chuck Zmudzinski wrote: I don't use haproxy but I see there is a package for it in the Debian repos. I think what you are seeing should be reported as a bug in haproxy if you are using the Debian packaged version. The haproxy package should start haproxy at the appropriate

Re: Network bridge and MAC address exposure

On 4/9/22 2:39 pm, Rand Pritelrohm wrote: 1. Bridge using routed subnet: ip link add dev br0 type bridge ip addr add 192.168.222.1/24 dev br0 ip link set dev br0 up ip tuntap add tap0 mode tap ip link set dev tap0 up ip link set dev tap0 master br0 #Then I h

Re: Which MTA for from-based smarthost selection, local delivery and queuing?

On 8/9/22 12:29 pm, to...@tuxteam.de wrote: On Wed, Sep 07, 2022 at 10:31:37PM +0200, Sébastien Hinderer wrote: Dear all, (I am not subscribed to the list) Currently I am using exim4 as mail transport agent (MTA). I am looking for another one, because I would like to be able to configure the

Re: OT: Is postfix "easier" than exim4? (was: Re: Which MTA for from-based smarthost selection, local delivery and queuing?)

On 8/9/22 7:10 pm, rhkra...@gmail.com wrote: To people who have familiarity with both postfix and exim4, is postfix really easier (in a variety of senses) than exim4? LIke to install, setup, and use? I tried to set up postix back near the beginning of my Linux odyssey, maybe sometime between

Re: ssh -X authentication with sudo

On 4/10/22 7:39 pm, Greg Wooledge wrote: Change the sshd_config to allow direct root logins. Then do ssh -X r...@debian.box. If you're the paranoid type, or if the Debian system is exposed to the public Internet, then make sure you only permit root logins when using pubkey authentication, not p

Re: ssh -X authentication with sudo

On 4/10/22 8:52 pm, debian-u...@howorth.org.uk wrote: To use the display without ssh root login. ssh as normal user to host. Then echo $DISPLAY su - export DISPLAY=localhost:10 (or whatever your logged in user DISPLAY is set to) xauth add $(xauth -f ~/.Xauthority list | tail -1) xhost Tha

Re: Cheap NAS

On 17/10/22 9:32 am, Stefan Monnier wrote: pa...@quillandmouse.com [2022-10-16 14:22:16] wrote: Pi's don't have SATA. Depends on the flavor. Banana Pi and Orange Pi mini definitely do. [ But not a very good one, admittedly. And their power infrastructure tends to be overwhelmed when you c

Remove Network Manager panel icon in Mate 1.24.1 Desktop

I've recent had to do a fresh GUI install of Debian GNU/Linux 11 (bullseye) and I enabled Mate 1.24.1 I let the install run with the default Network Manager installation but very rapidly ran into the usual litany of bugs in making minor tweaks to the network (it is not a good sign if the gener

Re: debian/rules @variable@ syntax

On 1/11/22 21:59, The Wanderer wrote: However, in doing so I have run into a snag which I previously skipped over and ignored: I don't actually know what the @variable@ syntax means/does, or what parses it. It's not Makefile syntax, as far as I've been able to determine. I haven't thus far found

Re: debian/rules @variable@ syntax

On 1/11/22 22:11, jeremy ardley wrote: Search for some CMakeFiles.txt files to check if you need to explore cmake further. Wrong. My typing error. Look for CMakeLists.txt files. -- Jeremy

Re: debian/rules @variable@ syntax

On 1/11/22 22:20, The Wanderer wrote: This definitely isn't cmake. It's part of the Debian build system, and if that depended on cmake, I'm all but absolutely certain that I'd know it by now. Also, this has nothing to do with the build system for the software being packaged; it's entirely to d

afio batch operation

I have a CD that was written by mondorescue and it has hundreds of files in the form .afio.bz2. I can open individual files using Xarchiver and see they are individually parts of an old system of mine. Can someone suggest a simple command line to extract the hundreds of files and write/merg

Re: afio batch operation

First, Thank you Thomas for taking the effort to document this. It has helped immensely. I fixed one typo in your script noted below and then it all worked flawlessly - though remarkably slow even on my PCIe NVME drive. I also made a mistake, it was two DVDs not a CD so quite a few gigabytes.

Re: how to add more ipv6 addresses to an interface that is being configured through dhcpv6

On 14/11/2022 12:07 am, hw wrote: > Hi, > > the subject says it ... I have an interface that is being configured > with IPv4 and IPv6 addresses via dhcp. I need to assign an > additional IPv6 address to the interface. > > > > How do I additionally assign fd53::40/16? I faced exactly the sam

Re: how to add more ipv6 addresses to an interface that is being configured through dhcpv6

On 14/11/2022 7:50 am, jeremy ardley wrote: > How do I additionally assign fd53::40/16? I faced exactly the same problem on a recent new install of Debian 11. I decided to use systemd-networkd service and removed most of the stuff from /etc/network/interfaces This is my /etc/syst

Re: how to add more ipv6 addresses to an interface that is being configured through dhcpv6

On 14/11/22 19:14, hw wrote: On Mon, 2022-11-14 at 07:50 +0800, jeremy ardley wrote: I decided to use systemd-networkd service and removed most of the stuff from /etc/network/interfaces [...] Thanks! I considered installing network manager, but the Debian wiki gave me the impression that

Re: how to add more ipv6 addresses to an interface that is being configured through dhcpv6

On 15/11/22 00:22, Curt wrote: On 2022-11-14, jeremy ardley wrote: Network Manager is terrible. Some of the instructions include you having to reboot your system to make chages take. What "instructions" would those be, and of what provenance, that require a system reboot rat

Re: how to add more ipv6 addresses to an interface that is being configured through dhcpv6

On 14/11/22 22:34, hw wrote: [...] However, systemd-networkd works as well (and better) with an easier configuration. Hm, then why isn't it the default, and what's network manager for? NetworkManager seems to be a RedHat baby and has some effort put into a GUI. systemd-networkd has not go

SysVinit vs SystemD

Timely video on the unix/linux startup processes applicable to versions of Debian. https://www.youtube.com/watch?v=Fz8Ldw-s8_Q -- Jeremy

Re: Detailed Leafpad manual [not just manpage]?

On 4/12/22 20:56, Andrew M.A. Cater wrote: On Sun, Dec 04, 2022 at 05:29:58AM -0600, Richard Owlett wrote: I wish to document a personal project.The desired format will resemble the outline for term papers we wrote in school in the 50's. Except some items may be a short paragraph or two long.

sleep on a low-usage NAS ?

I have just converted a qnap TS-212 NAS from the vendor software to a stock Debian 10. (Armel) I notice immediately that the NAS never spins down its disks when idle - as it used to with the vendor software. The NAS is used maybe once per day to take backups via smb. Ideally, I'd like it to

Re: questions on iptables

On 25/12/22 10:14, Piperみかこ wrote: Hello, I have setup the following iptables on linux server, sudo /usr/sbin/iptables -F sudo /usr/sbin/iptables -A INPUT -s 127.0.0.1 -j ACCEPT sudo /usr/sbin/iptables -A INPUT -s xx.xx.xx.xx -j ACCEPT  # my server public IP sudo /usr/sbin/iptables -A INPUT

Re: Limiting ssh access: by MAC Address?

On 5/1/23 12:56, Jeffrey Walton wrote: On Wed, Jan 4, 2023 at 11:34 PM Gareth Evans wrote: On 3 Jan 2023, at 22:07, Tom Browder wrote: I ... would like to access my home server from my laptop ... On 5 Jan 2023, at 04:13, Jeffrey Walton wrote: ... Avoiding the key exchange is a big win s

Re: Installation of Salome 9.9.0

On 15/1/23 07:46, Gary L. Roach wrote: The lack of information is because I never got off the ground with this. I did finally figured out how to get ./sat to work and completely cleaned up all of the missing pieces. But then I am a loss of what to do next. My top Salome directory looks like

Unexpected permission denied

I am having trouble with php8.1-fpm commanded from nginx on a bullseye system php8.1-fpm reports access denied when opening a specific file for the application. The file has universal rwx permissions (after attempting to fix problem). I am not running selinux but I do see some references to a

Re: Unexpected permission denied

On 25/1/23 15:33, to...@tuxteam.de wrote: On Wed, Jan 25, 2023 at 02:51:05PM +0800, jeremy ardley wrote: [...] 0.41 lstat("/var/www/grammartiste.com/web/vendor/autoload.php", 0x7fffdc580970) = -1 EACCES (Permission denied) 0.34 lstat("/var/www/grammartiste

Re: Unexpected permission denied

On 25/1/23 15:44, jeremy ardley wrote: On 25/1/23 15:33, to...@tuxteam.de wrote: On Wed, Jan 25, 2023 at 02:51:05PM +0800, jeremy ardley wrote: [...]   0.41 lstat("/var/www/grammartiste.com/web/vendor/autoload.php", 0x7fffdc580970) = -1 EACCES (Permission denied)

AppImage error kdevelop

I'm having trouble with kdevelop (and getting zero support from the kdevelop list) I installed the latest Debian version using apt, but the problem is when I go to open an existing project all project files are grayed out in the file browser. Unable to resolve this I downloaded the latest AppI

Re: OT: repair/replace cell in Li-ion battery?

On 6/2/23 23:45, Roy J. Tellason, Sr. wrote: On Sunday 05 February 2023 06:29:12 pm local10 wrote: 5 Feb 2023, 20:28 byy...@masson-informatique.fr: Does anybody knows trusted manufacturers / brands I could find on the Internet? I am really disappointed by this battery (brand "vhbw") partially

Re: ipv6 maybe has arrived.

On 9/2/23 04:54, gene heskett wrote: My several machine home net is behind a dd-wrt install, NAT'ed so that any machine here has access to the net via the ipv4 address my router obtains from them. That legally is a dynamic address but hasn't changed in the decade and a half since I last sw

Re: ipv6 maybe has arrived.

On 9/2/23 06:39, gene heskett wrote: On 2/8/23 16:29, jeremy ardley wrote: On 9/2/23 04:54, gene heskett wrote: My several machine home net is behind a dd-wrt install, NAT'ed so that any machine here has access to the net via the ipv4 address my router obtains from them. That legal

Re: ipv6 maybe has arrived.

On 9/2/23 17:13, Anssi Saari wrote: If forwarding is not enabled, then the LAN IPv6 hosts are just as isolated from incoming traffic from the internet as hosts behind NAT. If you don't have IPv6 forwarding on the router then none of your internal hosts will be able to communicate on IPv6 beyo

Re: ipv6 maybe has arrived.

On 10/2/23 05:32, Michel Verdier wrote: Le 9 février 2023 gene heskett a écrit : And where is that info published? Up till now I was not aware of an ipv6 equ to 192.168.xx.xx addresses. That could make the cheese quite a bit less binding. :o)> You could find a nice list here: https://www.ap

Re: ipv6 maybe has arrived.

On 10/2/23 19:03, gene heskett wrote: Chuckle, guilty Tomas, but NM has now been muffled and no longer yells at you via the logs when it find's a chattr +i denying its ability to impregnate the lassie. I personally eradicate NM and use either systemd-networkd on debian, or networking serv

Re: Partitioning an SSD?

On 16/2/23 07:45, Michael Stone wrote: I don't personally think there's a point in partitioning any storage device on a user system these days beyond what's required to boot. If you want to do more, that's a personal preference. Being an SSD doesn't really change things. I agree with th

build static linked gedit with meson?

I want to compile a statically linked version of gedit using the upstream meson based package. I've got the sources matching my current Debian 11 system and can do a build no problem. What I want to do is statically link the gedit executable. I see the non-static executable is very small and

Re: Debugging what is deleting/recreating /etc/resolv.conf with wrong configuration, on debian stable

On 23/2/23 18:23, daven...@tuxfamily.org wrote: Hello, On 2023-02-23 02:59, cono...@panix.com wrote: On 2/22/23, daven...@tuxfamily.org wrote: There is an unidentified process that decides it's ok to delete and recreate /etc/resolv.conf without asking user/admin, The problem is, the problema

stop mate weather app spamming syslog?

My syslog gets a couple of dozen line like below every 10 mins or so. Any way to stop it? Or get syslog to send it to /dev/null ? Feb 26 06:50:22 client org.mate.panel.applet.MateWeatherAppletFactory[3517]: Forecast for Monday 27 February Feb 26 06:50:22 client org.mate.panel.applet.MateWeath

ssh bug known_hosts?

I may have found a bug in openssh. I raise it here as the ssh mailing list is actually a newsgroup that no-one seems to use. I can ssh jer...@client.example.com without the issue I have created a ~/.ssh/config file with contents Host jeremy_client     HostName client.example.com     User jer

Re: ssh bug known_hosts?

On 2/3/23 05:52, Jeffrey Walton wrote: On Wed, Mar 1, 2023 at 2:49 PM jeremy ardley wrote: I may have found a bug in openssh. [...] I have created a ~/.ssh/config file with contents Host jeremy_client HostName client.example.com User jeremy IdentityFile ~/.ssh

Re: ssh bug known_hosts?

On 2/3/23 05:51, Greg Wooledge wrote: On Wed, Mar 01, 2023 at 02:43:38PM -0700, Charles Curley wrote: On Thu, 2 Mar 2023 03:48:49 +0800 jeremy ardley wrote: 2. The known hosts file used is /etc/ssh/known_hosts rather that ~/.ssh/known_hosts - which causes a permissions error I am not

Re: does your Thunderbird for deb11 often become unresponsive?

On 3/3/23 12:02, hlyg wrote: at first i suspect Thunderbird(TB) try to access some sites that are blocked in china i disable show Start Page when it launches i disable check email automatically for each account but it becomes unresponsive when i File->New->Message i really don't know cause o

slapd access to private key owned by root

I think the problem is probably unsolvable but I thought I'd ask. I understand slapd starts as user root and reads config etc and then changes to user openldap This means that it could potentially read a private key owned by root during startup? The problem is when I try and configure priva

Re: what method do you prefer for data transfer between nodes?

On 5/3/23 16:22, Ken Young wrote: Hello, The methods I know, 1. scp pros: the native tool in the OS cons: you will either input password or put key pairs into servers for authentication. 2. rsync pros: it can transfer data by increasement cons: you need to setup rsyncd server and make the

Re: home server for email box

On 10/3/23 18:29, p...@ymail.ne.jp wrote: Hello, I have a home server with static IP from the ISP. The server has debian 11 installed. Can I setup a mail server (postfix, dovecot, dkim, rspamd etc) on this box to receive/send email normally? Or do you guys have this similar operation?

Re: home server for email box

On 10/3/23 23:52, Henning Follmann wrote: Well "could" is the best way to describe the chances of this working. I think the best way too find out: Check if the ISP will allow you to set the reverse DNS record matching your chose A record. If they do, GREAT! If they don't, you most likely will

Re: home server for email box

On 11/3/23 05:04, Jeremy Ardley wrote: All you need to do is generate an SPF record authorising your fixed IP(s) to send mail for your domain(s). You don't need need to have control over the forward and reverse DNS of the IPs, but it is pretty much required that your ISP has forward

Re: home server for email box

On 11/3/23 05:27, Michel Verdier wrote: Le 10 mars 2023 Jeremy Ardley a écrit : You may run into problems if your IP address is in a range that is blacklisted due to some addresses being used to spam. I'm not sure if IPv6 ranges have got into that category as yet. spamhaus has a ipv6

Re: home server for email box

On 11/3/23 06:09, Michel Verdier wrote: Le 10 mars 2023 Jeremy Ardley a écrit : smtpd_recipient_restrictions =    permit_sasl_authenticated    permit_mynetworks    reject_unauth_destination    reject_invalid_hostname    reject_non_fqdn_hostname    reject_non_fqdn_sender

Re: debian for DNS servers

On 11/3/23 17:56, cor...@free.fr wrote: Now I have three debian nodes in different DCs. Can I deploy a distributed DNS service for fault tolerance? Assuming you don't mean a Windows DC, you can use bind (bind9) in an architecture that has a master for a DNS zone and multiple slaves. Change

bendel.debian.org untrusted certificate

Examining incoming connections I see that google is trusted but bendel.debian.org (this list) is not Mar 12 08:37:39 egde postfix/25pass/smtpd[78299]: setting up TLS connection from bendel.debian.org[82.195.75.100] Mar 12 08:37:39 egde postfix/25pass/smtpd[78299]: Untrusted TLS connection esta

Re: SIP servers.

On 12/3/23 07:55, pe...@easthope.ca wrote: Hi, Appears that repro remains unavailable. https://wiki.debian.org/FreedomBox/Manual/Repro Also ekiga is gone. What are the current recommendations for SIP servers? Thx, ... P. If all you want is SIP registration and routing

Re: bendel.debian.org untrusted certificate

On 12/3/23 08:48, jeremy ardley wrote: Received: from edge.bronzemail.com (2403-5800-c000-1b7-f3d4-d970-ca28-bf4f.ip6.aussiebb.net [IPv6:2403:5800:c000:1b7:f3d4:d970:ca28:bf4f]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature

Re: bendel.debian.org untrusted certificate

On 12/3/23 12:29, Jeremy Ardley wrote: On 12/3/23 08:48, jeremy ardley wrote: Received: from edge.bronzemail.com (2403-5800-c000-1b7-f3d4-d970-ca28-bf4f.ip6.aussiebb.net [IPv6:2403:5800:c000:1b7:f3d4:d970:ca28:bf4f]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits

Re: bendel.debian.org untrusted certificate

On 12/3/23 12:50, Jeremy Ardley wrote: Received: from edge.bronzemail.com (2403-5800-c000-1b7-f3d4-d970-ca28-bf4f.ip6.aussiebb.net [IPv6:2403:5800:c000:1b7:f3d4:d970:ca28:bf4f]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature

Re: PDF on debian

On 13/3/23 03:38, Stefan Monnier wrote: Nowadays PDF is what matters: it's the standard format for driverless printing (along with a mix of JPEG, PWG raster, or PCLm depending on which driverless printing standard you're talking about). Admittedly, standards like IPP Everywhere require suppor

Re: home server for email box

On 13/3/23 05:52, Vincent Lefevre wrote: Yes, but here, that's optional. So I'm wondering whether you really miss anything. Note also that a client certificate may be sent only if it is requested by the server, and if client certificates are requested, then there are issues with some clients:

<    1   2   3   4   5   >