libera/#devuan/ Saturday, 2024-08-17

systemdleteYou know those occasional, seemingly intermittent apt update errors I get re BADSIG.   Well, I've tried the usual solution where you update the key from a keyserver.  But that doesn't always work.  This is from a post that began in 2010, and it appears to work:  https://askubuntu.com/questions/1877/what-is-the-easiest-way-to-resolve-apt-get-badsig-gpg-errors?rq=103:15
systemdleteIn particular, please see https://askubuntu.com/questions/1877/what-is-the-easiest-way-to-resolve-apt-get-badsig-gpg-errors?rq=103:16
systemdleteoh, nvm. that was the same link03:16
systemdleteanyway, do you see any potential problems doing this?  I mean it does subvert the whole apt mechanism in a way.03:17
systemdleteSo I had a problem just now with an MX Linux system, and tried this, and it worked.  Maybe not surprising that it does work, but it leaves me to wonder why the normal protocol didn't.03:18
systemdleteLet me know if I may have breached the King's Peace.03:19
rozenglasssystemdlete: which answer are we talking about, the one that cleans the package cache with "apt-get clean" then removes and recreates list files?06:12
onefangDoes Devuan have a CD or DVD iso that I can use to install on a remote server that only has console access?  They'll let me upload one and mount it, then boot from it.06:35
onefangHmm, might have to be a refracta.06:36
gnarfacethe regular netinstall can be completed from ssh, but i'm not sure if there's a way to start it from ssh... maybe with preseeding?06:37
onefangI start with console access, then I install and configure ssh, expected.06:38
gnarfaceno, what i'm saying is the netinstall itself has ssh support, you just have to turn it on first06:38
onefangAh, so I can skip the install step.  B-)06:39
gnarfacenot sure if there's a way to start it that way automatically or not06:39
gnarfaceseems like there would be though06:39
onefangThat's the point of console access.  Get all of that working before sshing in and doing the rest.06:40
gnarfaceoh you mean it doesn't have network access? i'm confused...06:41
gnarfaceby "console" i thought you meant shell06:42
gnarfaceyou mean it only has physical access, no remote?06:42
onefangMinimal live might just do what I want, it has refractainstaller.06:42
gnarfacei think if you take the desktop or server isos along with the pool iso you can have almost everything without the network06:43
gnarface(from here: https://files.devuan.org/devuan_daedalus/installer-iso/)06:43
onefangIt'll be sitting in a datacenter somewhere on the wrong side of the planet.  "console" in this situation usually means "if someone plugged in a monitor, they would see things, starting from BIOS boot.  Though sometimes all you get is text.06:43
gnarfacemaybe i'm wrong about that, not sure, but there was some way to get most of everything you'd want on a couple disks06:44
onefangBut I don't plug in a monitor, I use their web front end to the text console.06:44
gnarfacei see06:44
rrqisn't that good enough for the installers?06:45
onefangThey'll let me use this to boot some install media.  They do offer Debian, but they also offer "upload your own".06:45
onefangThat's what I'm asking.  B-)06:45
rrqthat is good enough for the installers.06:45
gnarfacethe regular netinstall should function more or less the same as the debian netinstall06:46
gnarfacesame with the other ones in "installer-iso"06:46
rrqexcept that it only uses text mode console06:46
onefangSooo, minimal live and use refractainstaller for the actual install, once I'm happy enough of things is working by running the live system.06:46
rrqjust if it was unclear: all devuan daedalua installer-iso ISOs use text mode console only06:49
onefangAh cool.06:49
systemdleterozenglass:  https://askubuntu.com/questions/1877/what-is-the-easiest-way-to-resolve-apt-get-badsig-gpg-errors?rq=1#answer-6454406:51
systemdlete(sorry, I thought I had posted that correctly)06:51
rozenglasssystemdlete: cleaning the previously downloaded packages and package lists, to download them fresh again, doesn't sound bad to me in anyway.  Worst case, if there was a real attack or corruption at the mirror server level, then downloading them again would just give you the same error when validating them with a good key.  But like you, it leaves me wondering how would the apt system get into a06:58
rozenglasssituation where it might need something like this and is unable to solve it itself.06:58
systemdleterozenglass, thank you for your feedback.  With all the supply chain attacks lately, and ever more malware being spread (right out of github, for petes sake), it is good to know that at least one other soul sees a potential issue.07:36
systemdlete*in some cases, github is being used to launch malware.07:36
rwpI don't like the "mv lists lists.old" part.  That's unnecessary.  It's redundant with the "apt-get clean" which they then run subsequently.08:34
rwpJust run "apt-get clean" and it will have the same effect.08:35
systemdleteok, thanks. I will update my notes...08:35
rwpI am not sure that will solve your BADSIG errors though.  It simply cleans out the local cache of downloaded files and therefore if those files are needed they will be downloaded again.08:35
systemdleteIt worked though.08:36
systemdlete(In the most recent incident.)08:36
systemdleteAnd I even disabled the apt-cacher-ng biz.  It made no difference, no matter what I did, until I found this little gem.08:36
rwpIt would be okay to remove /var/lib/apt/lists/* the files there.08:37
rwpBut I would just remove the files and not the directories.  The directories are owned specially.08:38
rwp"find /var/lib/apt/lists/ -type f -delete" would delete just the files.  Then "apt-get update" to bring in fresh copies of them.  Try that next time.08:38
rwpHowever that still feels like a proxy problem.  I might switch to use pkgmaster.devuan.org as a temporary test as that will avoid any mirror problems.08:39
rwpBut that is the master copy of things and loading on it is desired to be avoided.  That's why there are mirrors.  But...  If I were debugging things I would do it.08:40
rwpAnd then I would walk through all of the mirrors and find a close fast one and use it.08:40
systemdleterwp, all of the files in /var/lib/apt/ and down are owned by root:root08:40
systemdletewhen you say "proxy" do you mean the mirrors?08:41
systemdletebc I am not using any proxy08:41
onefangAnother thing apt-panopticon is good for, comparing package mirrors.08:41
systemdleteweirdest thing was... and this happens fairly consistently, too... is that this one system had a problem, but not any others.08:42
systemdlete(all the others are using the cacher, btw, and I had not disabled it on those)08:43
onefangKeeping the load off pkgmaster is the reason I moved it to the end of the list.  Figured people might be more likely to pick something closer the top.08:43
rwpdrwx------   2 _apt     root            6 Aug 16 12:30 /var/lib/apt/lists/partial08:43
rwpdrwxr-xr-x   2 _apt     root            6 Sep 24  2023 /var/lib/apt/lists/auxfiles08:43
rwpThose two directories are owned by the _apt non-root user and should be maintained.08:43
systemdleterwp, mine show they are owned by root08:43
rwpThat seems like a problem.08:43
systemdleteand this is on a system I did NOT muck with08:44
systemdletenot sure how they would have been modified.  I don't normally mess around down there in /var08:44
systemdletemy report is on a completely different system.  I guess I can check around all of my systems...08:45
systemdleteno, rwp, you are right.  My bad, sorry.  Too fast examining all of this.08:46
systemdletethose two ARE owned by _apt08:46
systemdleteuhm... this might be interesting.  After rebuilding the lists/* subdirs, they are owned by _apt!08:48
systemdleteso, maybe the process restores matters to how they are supposed to be?08:48
onefangDoes seem very .. _apt.  I'll get my coat.08:48
systemdlete:p08:48
rwpProbably does restore things.  Because the download process is running as the _apt user.  As another layer of protection.08:49
rwpA layer that I think is unlikely to actually be useful given how that part works, it's the client pulling the data.  But whatever.08:49
rwpAs far as mirrors go...  Run "host deb.devuan.org" (or dig deb.devuan.org a +short) and see the long list of Round Robin addresses.  Each of those are unique systems.08:49
rwpI would work through them by picking one from the list and using it instead of deb.devuan.org and seeing if that works.  But it's tricky.  Have to put it in /etc/hosts like "147.78.194.22 deb.devuan.org" so that http virtual hosts works.08:49
systemdlete(oy godzzzzz)08:50
rwpOr use the IPv6 address with "2a01:4f8:140:1102:2b76:955d:b48f:bdf3 deb.devuan.org" and so on.08:50
systemdleteall my ipv6 is disabled around here08:50
rwpThe idea is to pick a single system instead of the Round Robin and it will almost certainly also work.08:50
rwpI don't have a working IPv6 here either.  I keep hoping that will change some day.08:51
systemdlete(ipv6 is a future project... if I live that long)08:51
onefangWalking the package mirror list is exactly what apt-panopticon does.  Think I've mentioned this before.  lol08:52
onefangIt adds those not in the DNS-RR.08:52
systemdletehow often do you find deviants, onefang?08:53
systemdletewhat are the punishments for violators?08:53
onefangShit happens.  Usually I try to get them to fix it if it isn't fixed soonish.08:54
onefangThere's two I'm likely to just remove from the list soon.  Done that before.08:54
systemdleteyeah, but roughly speaking... how often do you have to take action w/r/t some mirror or another?08:55
systemdlete(trying to figure out if I sense any correlation to the problem incidents I've run into)08:55
onefangNot that often really.  Most issues tend to be temporary, and get fixed anyway before I get around to it.08:56
rwpI think you should switch to testing using pkgmaster directly as then I think you won't have a problem.  Because pkgmaster is by definition always the up to date reference copy.08:57
onefangThat's why apt-panopticon has weekly stats.08:57
systemdlete(hmmm, never thought of looking at those, but ok)08:57
onefangTesting with pkgmaster sounds good to me.08:57
systemdleteso let's say I run into an apt update problem, switch the repo in sources to pkgmaster, and it magically works08:58
systemdletethen what?08:58
systemdletereport problem to you?08:58
systemdleteget their license plate numbers, etc?08:58
onefangIf you can find the IP of the ... yep license plate numbers.08:59
systemdletearen't there like  couple dozen mirrors?08:59
rwpI would think that at that moment apt-panopticon is probably logging at least one error with at least one mirror already.08:59
systemdleteso maybe I should just look at pan-opticon first before switching to pkgmaster?09:00
systemdletesounds like it already knows about a problem09:00
systemdletebut my brains have already turned into apple sauce09:00
onefangAh I see dist-mirror.fem.tu-ilmenau.de seems to be degrading slowly.  It's not in the DNS-RR though.09:00
onefangSpeaking of brains turning into sauce, weekend here, I'd much prefer that right now than working on mirror problems.  B-)09:01
systemdleteI'd vote for that09:02
rwpLooking at apt-panopticon is good for understanding the state of things.  But looking there won't get you an error free update and upgrade.09:02
rwpSince you are having repeating problems the most easy thing would be switching to pkgmaster and seeing if all of your problems go away.09:02
onefangAgreed.09:03
systemdleteand become a pariah, always hitting the master09:03
onefangBut switch back after, this is only for testing.09:03
systemdleteoh, ok09:03
onefangBTW, we don't have any deviants, we have devuants.  B-)09:04
systemdletevery clever09:04
systemdleteI see what you did there09:04
richard`Since upgrading to Excalibur it is impossible to to configure or delete python313:24
richard`python3 -V shows Python 3.12.513:30
richard`sudo apt remove --purge python13:31
richard` python3 -V Python 3.12.513:31
richard`sudo apt install python313:34
richard`Exception: cannot get content of solaar13:34
richard`error running python rtupdate hook solaar13:34
richard`dpkg: error processing package python3 (--configure):13:34
richard` installed python3 package post-installation script subprocess returned error exit status 413:34
richard`dpkg: error processing package emacs-gtk (--configure):13:34
richard` package is in a very bad inconsistent state; you should13:35
richard` reinstall it before attempting configuration13:35
richard`Setting up sane-utils (1.3.0-1) ...13:35
richard`usermod: no changes██████████████████████████▉13:35
richard`Solaar is not installed and emacs-gtk is inconsistent but can't be reinstalled or removed. There are a lot of other things dependent on python3 which will I assume sort out when I can fix whatever it is that is broken in python. I think the problem is inconsisten python version numbers python -V shows Python 3.12.5 but apt download python3 downloads python3_3.12.4-1_amd64.deb13:39
richard`At least I managed to get python completely removed I think. Now I only have to sort out emacs-gtk which is broken, can't be configured with apt --fix-broken install or with dpkg-reconfigure and can't be removed or reinstalled due to errors in the package pre-removal script.14:58
freaxehdoes Devuan support a Silicon Image SIL 3114 host controller chip out of the box?15:23
fsmithredfreaxeh, that would be something to do with what's in the kernel? All our kernels are made by debian. Same with the firmware.15:29
freaxehty15:33
freaxehtry it and find out basically15:33
buZzfreaxeh: does linux support it?15:38
buZzoh lol, a sata2 controller15:38
buZzyeah retro hardware in general is very well supported by linux15:38
freaxehty15:41

Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!