libera/#devuan/ Thursday, 2024-08-15

rrqmmm and to avoid conflict .. there could be an acme-nameservers attribute handled by due scripting00:00
rrqand then maybe soonish also a new useful package "ifupdown-acme-nameservers" ?00:02
onefangThere are several dig like tools, though some of them are just wrappers around dig.  Meh, got more important things to do today.00:05
systemdletewhy stop there?   ifupdown-acme-nameservers-systemd00:06
systemdlete:p00:06
rrqyes, maybe some slight dissonance btw acme "minimalism" and "systemd"00:08
systemdleteturns out I might not need to update the resolv.conf file after all... sorry for pulling you all into my config issues with that, although it seems like it did spur some constructive discussion.00:13
systemdleteand my network config is working!!!00:13
onefangYay!00:14
systemdleteyes, having one interfaces file is much, much simpler00:14
onefangNow I gotta figure out what's up with repo.jing.rocks.  Did Debian update their key even more recently than I did in my test scripts, but no one else has removed the old key from a few months ago?00:15
systemdletethanks to rrq, rwp, fsmithred, and onefang (and any other fang, if such exists)00:16
onefangAh, could be, other mirrors are reporting the same, and looks like it's all the ones that have their own Debian mirror, instead of redirecting to Debian.00:17
onefangWell, since you asked, onefang refers to my 63 year old baby tooth being so tiny, it looks like I have only one fang, but there's an adult tooth above it, so I have three actually.00:18
rrq(not much can be said about that without close-up pictures :)00:19
systemdletehere's the web page that talks about dns-nameservers, syntax of interfaces, yada yada:  https://wiki.debian.org/NetworkConfiguration00:22
systemdlete(sorry for not posting that earlier when you asked)00:23
onefangYep, three months after their last key change, Debian has changed their key once more.00:27
onefangOne of these days I'll get around to making apt-panopticon cleverer about this sort of thing.  It's on the TODO.00:28
rwpWe had a huge storm dump a massive amount of rain and now I have had a water incursion in my basement that I am trying to clean up.  In 30 years this is the first time the basement has gotten wet.  It was a huge downpour though.04:55
rwpOops.  Mistaken recall posting on that one.  Please ignore.04:56
xnovaxThe following signatures were invalid: BADSIG 94532124541922FB Devuan Repository (Primary Devuan signing key)05:14
xnovaxhow to fix?05:14
adhoca simple way to test, might be to a DNS lookup for the hostname of the repo, pull out the IPs and pin them in your /etc/hosts file and try again. rotate through IPs until you find the one giving this erro.05:16
adhocer, unless that is the packages at install time?05:17
rwpIs your clock set correctly?  Clocks wrong causes signatures to fail.05:17
rwpIf not that then I would select a single mirror and use it instead of the deb.devuan.org round-robin or other that is the default.05:19
fluffywolfon that topic, I ran into a wrong clock on my daedalus install, which is likely a bug, if anyone wants to take an irc bug report...  even though I selected Pacific in the installer, the installed system was set up for UTC.  had to reconfigure it after installing.05:20
fluffywolfwhoops, excalibur install, not daedalus install.05:20
rwpThat's another one where I just say that's pretty odd.  The timezone setting stuff is pretty basic.05:26
adhocrwp: how much does it need to be out by?06:29
adhocdo not believe i've had that issue, everything has ntp configured =)06:29
rwpThe problem is very apparent on Raspbery Pis which do not have a hardware clock.06:30
rwpBooting a RPi (without the package that saves the data to a file and sets it back at boot time) will set the date to 1970 and that's old enough that all certs are invalid as too far in the future.06:31
adhocew06:31
rwpMost Let's Encrypt certs will be valid for 90 days.  So any clock which is 90 days in the past or future will think the cert is not valid.06:32
adhocindeed.06:32
rwpBut on average certs will be seen with variable amounts of time left.  So 45 days on average in that case.  Or maybe even a couple of hours if one is "lucky" to hit things just right.06:32
rwpWe never heard back from xnovax so don't really know why they got a BADSIG there.  The repository seems okay to me at this time here.06:33
rwpA mirror though could also be mangled.  Or there might be a proxy in the middle that is mangling things.06:34
rwpThere are almost an infinite number of ways for something to fail.  But there is only a limited number of ways for things to succeed.06:34
adhocis this a server /mirror that has not updated correctly yet ?06:34
onefangEntirely possible.06:34
rwpLook in the scrollback to an hour ago at :14 for a question from xnovax who was getting a BADSIG.06:35
onefangI suggest anytime there's something that might be a package mirror problem, get the IP so I know which one to investigate.06:35
adhocwhen i maintained my own mirror at home, i would get this whe nthe mirror script timed out06:35
adhocthe repo is in an inconsistent state06:35
onefangThough at the time I was out shopping.06:36
rwpMost often though the problem with mirrors and proxies results in a single package failing the hash check fingerprint on individual deb files.06:36
onefangWhich is why apt-panopticon tests several packages, including specifically picking a new one / update.06:37
onefangCan't test them all though.06:37
rwpAlso many of us might remember, a while back, when the signing key was allowed to expire.  That created some problems.  Which are thankfully in the past now.06:38
adhocwell, you can walk all the records in the DNS RR response.06:38
onefangI dunno, found out that Debian has changed their signing key twice in the last few months.  Dunno why yet.06:38
onefangCan't test all the packages.  Walking the DNS-RR to get all the mirrors is exactly what I do.06:39
adhocah nice06:39
adhochow often do mirrors get updated ?06:39
onefangapt-panopticon does a bunch of tests on package mirrors.06:40
onefanghttp://veritas.devuan.org/apt-panopticon/results/Report-web.html includes that info in the Updated coloumn.  I try to get them updated every 30 minutes, but some admins want to run slower.06:40
onefangAlso in that column you'll see some have a few warnings.  Coz they are still within their expected update window, but haven't fully updated yet.06:41
onefangThen there is pkgmaster, not tested for updates, coz that's the source of everyone else's updates.06:43
adhocwow06:43
paculinoI have made an alias for commands to change both the screen temperature and the backlight, as this provides finer control than the gui. But I've noticed that the automatic screen dimming from inactivity will reset to what the GUI is set to upon activity. Is there a workaround to get the screen dimming to return to the actual brightness rather than what the gui says?06:44
onefangSo if someone's reporting a problem that might be on a package mirror, if I know which mirror, I can start looking there and dig deeper as needed.06:45
adhoconefang: got it.06:45
adhocis there a database data visualiser tool in devuan ?06:52
adhocsomething i can look at the table views of postgresql or mariadb.06:52
onefangAdminer is what I use for poking at databases.  It's a web thing, but runs on it's own port.06:56
onefangThough if I recall I had to create a startup script for it, it only came with a systemd unit.06:56
onefangSimple one liner that basically copied the relevant bit of the unit did the trick for me.06:57
adhocok, thanks.06:58
freaxehok07:00
freaxehhow do i install amd graphics drivers07:00
freaxehfor my rx58007:00
freaxehi ran l4d2 and it just stutters and has <1fps07:01
freaxehmore like 0.0001 fps07:01
freaxehnot in the menus tho strangely07:02
freaxehnm they are already installed07:14
freaxehtakes like 10+ minutes to launch l4d2 too, and the mouse freezes while its doing its thing07:18
gnarfacefreaxeh: make sure you have the package "firmware-amd-graphics"07:19
freaxehnot exactly a stellar impression07:19
freaxehroger07:19
freaxehi tried installing that earlier and for some reason the mirror is down...07:19
freaxehat least i couldn't access it07:19
freaxehdeb.devuan.org07:19
onefangWhich IP?07:19
gnarfaceit's a dns round-robin, if you retry it should work.07:20
onefangCoz that's a DNS-RR with a bunch of servers behind it.07:20
freaxehroger07:20
onefangAnd as I said above, if I know which of those servers is the problem one, I can investigate.07:20
gnarfacefreaxeh: make sure you have these mesa packages too https://paste.debian.net/1326450/07:20
gnarface(ignore libgl1-mesa-swx11, that's cruft)07:20
freaxehdoes apt have a way to display the ip address of the domain its connecting to?07:22
freaxehor should i just ping it07:22
gnarfacenot sure, it's easy to just sniff the traffic though...07:22
freaxehwhats the command to resolve a hostname if there is one07:23
gnarfacethere's a few07:23
freaxehi'm only familiar with wireshark07:23
gnarfacewireshark would work fine07:23
gnarfacejnettop or tcpdump would also work07:23
onefangHmmm, no such thing as libgl1-mesa-swx11 on my desktop frankenDevuan.  Cruft that has been removed, or added?07:23
gnarfaceonefang: "rc" < something that should have been removed07:23
gnarfaceonefang: (and possibly from a sid install before devuan jessie, not something to worry about)07:24
* onefang goes back to worrying about other things. There's plenty of those. lol07:24
gnarfacefreaxeh: keep in mind that whatever you get on one lookup try would be randomized again for the next lookup try. you could use "nslookup deb.devuan.org" to see the whole list, but you'll have to actually get your test on a run that fails to know for sure which one is down07:26
freaxehso far multiple tries fail07:27
onefangHave you tried apt-get, apt, and aptitude?07:30
freaxehi've tried apt07:31
freaxehand synaptic07:31
yetijust pinging the dns aliases I see 100% loss with 160.16.137.156 and 147.78.194.2207:44
gnarfacefreaxeh: maybe you have a DNS issue locally or at your ISP... make sure the contents of /etc/resolv.conf are right07:46
adhocping is less useful, have you tried tracroute or tracepath or mtr ?07:47
gnarfacehmm, yea they're not all up but they're not all down either07:47
yetiadhoc: if you know better, just do it.07:49
adhoctokyo and amsterdam, not like theuy are co-located07:49
adhocmy devuan box at home is offline for some reason =/07:49
adhocok then, the traceroute to both those IP address fail from my vps in japan07:51
gnarfacetraceroute -T succeeds for me to 147.78.194.22, could it just be blocking ping?07:51
yetiso down to 1 potential problem   \o/07:52
freaxehhow do i update resolv conf07:53
freaxehit gets overwritten on reboot07:53
adhocgnarface: good point, but no root to run it there =/07:53
gnarfacefreaxeh: if you're using dhcp it's probably set by your dhcp server. if you're using a gui for static network config it's probably set in there instead07:53
freaxehright07:54
gnarfacefreaxeh: a couple of them might be down, but you shouldn't be getting 100% failure rates so it's probably a problem with your network one way or another... maybe your ISP's DNS servers just went down?07:55
adhocsome servers do not RR the DNS entries much.07:56
adhocsome times I get stuck with the same IP on a server that is down for a few hours,07:56
freaxehi  just switched to quad9 and it fixed it07:56
adhocso I pull one of the other IPs and shove it in the /etc/hosts files07:56
adhocafter doing a traceroute to find the closest one07:56
gnarfacefreaxeh: if it turns out to be a persistent problem with your ISP, you can easily just run a local DNS server instead07:57
adhocquad9 used to have some privacy concerns07:57
adhocnot sure what their policies are now07:58
onefangIf you want to pick a close mirror, https://pkgmaster.devuan.org/mirror_list.txt lists their countries at least.07:58
gnarfacefreaxeh: let me know if those packages fix it; you should be getting like 300FPS in l4d2 with that hardware07:58
gnarfacefreaxeh: (native or proton, but i recommend native)07:58
adhocBBL08:00
onefangBoth of those mirrors have been passing the apt-panopticon tests.  Though the 147.78.194.22 (mirror.ungleich.ch) has a complication with the way they set up their DNS.  The tests are run from two different locations, soon to be three again.08:04
freaxehgnarface: about 6 packages in that list are missing from my repo https://paste.debian.net/1326450/08:07
gnarfacefreaxeh: well, maybe they're deprecated ones, this is an upgraded system...08:10
freaxehok08:10
gnarfaceyou're not missing mesa-utils, or any of the ones with the version "22.3.6-1+deb12u1" are you?08:10
freaxehgnarface im launching l4d2 now08:10
gnarface(exact versions not really important, i haven't upgraded in a few weeks, the important part is you get the latest version of the ones l4d2 needs, and i'm not sure)08:11
freaxehayeee it works08:12
freaxehhigh fps08:12
gnarfacecool08:12
gnarfaceputting settings on max shouldn't even make a dent08:12
gnarfacein fact i recommend you turn on vsync to avoid overheating your video card unnecessarily08:12
onefangYay!08:12
freaxehdont think so gnarface08:16
freaxehso far so good, its more stable than linux mint, hasnt crashed once yet08:28
onefangEven more yay!  B-)08:28
onefangOr, um, give it time.08:29
freaxehshe crashed08:53
gnarfaceproton or native?08:59
gnarfacei'm telling you though... try vsync, it might be overheating09:00
gnarfaceyou got lm-sensors installed?09:00
xnovaxrwp: sorry for the late response, ended up finding the issue, was on my end, with the caching proxy.09:02
xnovaxjust did some rm'ing of the bad cache09:03
freaxehgnarface: vsync is enabled so she aint overheating at least i dont think she is, i'll install lm-sensors and check.12:25
freaxehhow the heck do i use lm-sensors on this system12:46
CueXXIIIfreaxeh: start "senors" - if that outputs nothing, you might need to run sensors-detect13:03
stripinska8Your advice from yesterday was very helpful. I deleted the file in etc/apt/apt.conf.d/* then purged apt-listchanges and proceeded with apt --fix-broken install, and to reinstall any missing packages.14:38
stripinska8for the most part this worked well but I have the following packages which can't be configured it seems because they depend on python3 and python3 can't be configured due to an problem in the file.14:39
stripinska8Unconfigureable packages python3 python3-setuptools-scm14:40
stripinska8 python3-packaging python3-typing-extensions14:40
stripinska8 emacs-gtk python3-pluggy14:40
stripinska8 python3-trove-classifiers python3-hatchling14:40
stripinska8 sane-utils python3-pathspec14:40
stripinska8 python3-lib2to3 plasma-desktop-data14:40
stripinska8 python3-hatch-vcs python3-pkg-resources14:40
stripinska8 kwin-data emacs14:40
stripinska8 python3-setuptools plasma-desktop14:40
stripinska8 python3-tomli python3-gdbm:amd6414:40
stripinska8 python3.12-full python3-debconf14:40
stripinska8 python3-tk:amd64 kwin-common14:40
stripinska8 kwin-wayland kde-plasma-desktop14:40
stripinska8 plasma-workspace-wayland idle-python3.1214:40
stripinska8 kde-standard task-kde-desktop14:40
stripinska8 kwin-x11 plasma-workspace14:40
stripinska8 plasma-widgets-addons kinfocenter14:40
stripinska8 sddm-theme-breeze sddm-theme-debian-breeze14:40
stripinska8First of many error messages when apt --fix-broken install tries to configure python314:41
stripinska8Setting up python3 (3.12.4-1) ...14:42
stripinska8running python rtupdate hooks for python3.12...14:42
stripinska8Traceback (most recent call last):14:42
stripinska8  File "/usr/bin/py3clean", line 210, in <module>14:42
stripinska8    main()14:42
stripinska8  File "/usr/bin/py3clean", line 196, in main14:42
stripinska8    pfiles = set(dpf.from_package(options.package))14:42
stripinska8In spite of these errors the box boots and runs fine. I assume some of this will resolve automatically at some time and if anything gets too annoying I will dig into it another day to see if I can find the actual problem.14:44
stripinska8Thank you all for your help.14:44
golinuxNot a good idea to post multiple lines at once. You may get kicked. Post elsewhere and link16:26
rwpxnovax, Are you using apt-cacher-ng?  I had to stop using it in order to avoid problems.16:52
dvbsthello, how do i install devuan with the installer but use my own partitions? (the catch: they are encrypted)19:39
dvbstand also, do i just leave the partitions as they are or do i put some filesystem there before i let the installer run the rest of the show?19:43
fsmithreddvbst, I think if you unlock the encrypted volume(s) first and then run the partitioner, it will see them and you can select them for use. (/dev/mapper/whatever)19:44
fsmithredI'm not sure if you have to go to another console to open them manually or if you can run the advanced boot to rescue or whatever it's called and then back up into the installer.19:45
dvbstokay but will it make the filesystems itself or does it just expect to dump files on whatever i provide?19:46
fsmithredwhen you set up which partitions will be used, you can select whether to format it or not19:46
dvbsti see19:46
plasma41dvbst: [Obligatory warning to make backups first]20:10
dvbsttheres nothing to backup20:10
plasma41So you encrypted... empty space?20:14
dvbstyea, im about to20:33
fsmithredAre you using an installer iso or a live iso?20:35
dvbstnetinstall20:40
dvbsti mean, i made the partitions on this other live iso cuz for the love of god i cannot use the shell in the netinstall20:41
dvbstthat thing doesnt even have lsblk20:41
sgagedvbst: you can manually install to the existing partion(s)21:04
sgageof your choice with the manual option in the partition-selection21:05
sgagephase of the install. Make sure to NOT check the format box!21:05
sgageand your existing setup will be all good.21:06
dvbstwhat would the format box do21:06
sgageProbably mess up your encryption scheme. No need to format if21:07
sgageyou're planning on installing into an empty partition.21:07
dvbstbut do i need to put a file system on there?21:08
sgageOh, I thought you already had given it a fs. Use gparted or something21:10
sgageand install an fs. To be honest, I'm not sure how it all works21:10
sgagewith encryption.21:11
dvbstdamn21:12
sgageI'm not really sure what the installer would do to your21:15
dvbsthow do i list devices without lsblk21:16
sgageencryption if you formatted it. I think that if you do choose to21:16
sgagehave the installer format it, it asks for a filesystem to format to.21:16
sgageNot sure what would happen to the encryption - not something21:17
sgageI've played with.21:17
xnovaxrwp: yes acng.21:26
xnovaxrwp: rarely do i ever have issues with it across multiple devuan/debian hosts. 99% of the time it works fine, just a random fluke here and there21:27
dvbstso i made the partitions on the other iso, but didnt format them, now i opened the encrypted drive, and i want to mkswap the swap partition but mkswap says it cant open it21:29
dvbstbut lvdisplay shows both things correctly21:30
fsmithredOh, it's encrypted lvm? Why won't you use the installer to do that?21:33
dvbstbecause it falls apart21:34
dvbstdidnt i say that before?21:35
fsmithrednot sure21:35
dvbstso thats what i wanted to do before too21:36
dvbstand i selected the disk that i want to format21:36
dvbstall went nice21:36
fsmithredI always get lost doing encrypted installs.21:36
dvbstbut for some reason it formatted that disk, and also the live iso21:36
dvbstand as you know, it wasnt really able to do much else21:37
fsmithredoh yeah, you mentioned that yesterday, I think21:37
dvbstbut the installer was never good21:37
dvbstit worked, and the system it made was working fine21:37
dvbstbut every single time, it makes a sda1 for boot, (thats good), a 1bk sda2 with nothing on it, then some empty space that lsblk doesnt list and sda5 is the encrypted partition with lvm on it21:38
dvbstlike how do you even fuck it up?21:38
dvbstwho wrote this?21:38
dvbstbut the upside is that it does in fact work21:39
dvbstand the daedalus installer doesnt21:39
fsmithredI always use manual partitioning21:39
dvbstyea thats what i shouldve done too21:39
dvbstbut i noticed it months after i installed it on both of my computers21:40
dvbstand was too lazy to reinstall21:40
dvbstnvm, the mkswap is good, its just that the lvs werent active21:43
dvbstwow, even with the manual installation it wants to tamper with the install media21:51
dvbstunable to install grub in dummy22:11
dvbstexcecuting 'grub-install dummy' failed22:11
dvbstthis is a fatal error22:11
dvbstwhat now?22:11
plasma41dvbst: What disk are you attempting to install grub onto?22:14
dvbstwhat exactly are you asking for?22:16
dvbstits a m.2 sata ssd22:17
dvbstif thats what you mean22:17
plasma41What is 'dummy'? The argument to grub-install should be a device such as /dev/sda.22:18
dvbsti have no clue22:24
dvbstthats what the installer did22:24
dvbstok so it says that this step depends on the partitioning step22:36
dvbstand im pretty sure ive set up my /boot partition correctly22:37
dvbstthe /dev/sda1 is a primary part, has 1gb of space there, use as ext2 file system, mount point /boot, defaults, bootable flag on22:38
dvbstis there something i am doing wrong?22:38
rwpxnovax, apt-cacher-ng for reasons not completely understood (but I have suspicions) does not work well with the rsync mirror update of Devuan mirrors.  I still use it for Debian mirrors.  But I stopped using it for Devuan mirrors.23:18
dvbsti just checked, and im using the same parameters as the boot partition on a system where the installer managed to successfuly install all the stuff with encrypted lvm23:19
dvbsti have no idea what could the problem be, the mountpoint is specified and all that23:19
onefangI've had no problem with apt-cachec-ng, but only used it during testing.23:20
onefangOn the other hand, my testing involved "install Devuan to a test VM, test it, repeat", so it was being hit hard.  But I was only using my own mirror, so perhaps it's other mirrors?23:27
rwpSo when I have had the time to debug particular files with hash mismatches everything always seemed perfectly correct about apt-cacher-ng following all of the rules that it had been told.  But the files were stale regardless.23:29
rwpIn particular a mirror serving the files with a web server has set a TTL on the file.  It is still within the cache TTL time.  But if I fetch from upstream I can see the file has been updated.  Which changed the file on disk through rsync out from under the web server's cache time.23:30
rwpI didn't spend the full time needed for me to write a  congress and feel confident presenting it under cross examination though.  So I haven't really dug into it more.  But I think things like that are the problem.23:32
rwpAnother thing that makes this inconsistent is that every mirror sets their own web server up uniquely different.  Round Robin DNS means files are being pulled from here, from there, from another place, and each web server sets their own cache time on the files.23:34
onefangI have a TODO item to investigate the stuff Debian uses for updating their mirrors.23:34
rwpLife and time is what keeps things from happening all at once.23:34
rwpThe fallback is to not use a caching proxy.  And pretty much so far as far as I can tell that always works.23:35
onefangCrisis after crisis is what keeps me from getting shit done.  lol23:35
rwpIt's been like that for me too.  Travel.  Family stuff.  Volunteer stuff.  Storms draining being overwhelmed and making my basement wet.  It's a problem!23:36
onefangKeep me informed if you find out anything more about these apt-cacher-ng problems.  I really only installed and tested it coz you where having problems, but I didn't spot them myself.23:38
rwpIf I can find the time I have this idea as a way to verify a test case.  I will certainly tell you if I find anything.23:42
onefangCool.23:42
rwpBut you can't deny that there are many reports with that combination reporting problems.  I think we would say, where there is smoke there is fire.23:42
onefangWhich is why I have TODO items for these things.23:43

Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!