libera/#devuan/ Saturday, 2024-05-04

watognarface: I managed to get the cpu governor script running02:31
watoeverything working nice02:31
watotomorrow i will install docker02:31
gnarfacecool!03:03
NrmlHowdy everyone. Just stumbled on this: https://twitter.com/DevuanOrg/status/178629889987697462912:19
NrmlWhat does it mean? Some new vulnerability present in Debian but not in Devuan, I'd say. But which one?12:21
sixwheeledbeastI suppose that is referring to systemd-run012:29
Nrmlsixwheeledbeast: thanks for the info, I was totally unaware of systemd-run0. Some googling brought this up: https://twitter.com/hackerfantastic/status/1785495587514638559, which I guess is what that Devuan's tweet is referring to...14:54
NrmlLooks like not only systemd is the 'gift that can't stop giving', but Poettering aka Agent Lennard can“t stop 'giving', either...14:59
Xenguyrun0 is just the latest stupid idea from the systemd camp14:59
Xenguysystemd, just an init, um sure14:59
NrmlXenguy: you will get no argument from me ;-)15:00
XenguyIndeed, preaching to the converted I am  : -)15:00
Xenguysystemd is just an ever growing attack vector, from what I can see15:01
NrmlAnd all this brand new crap barely a few weeks after the libxz/ssh embarassment...15:01
XenguyYeah, smart like streetcar15:02
NrmlSeriously, the only thing I wonder is how can intelligent, reasonable people keep using systemd after all that (and all that has already happened, and the almost infinite possibilities for more similar crap happening in the future).15:03
NrmlI really think it's a mix of lazyness and FUD that keeps them stuck with systemd.15:04
rustyaxeI'm all for idiot friendliness, which is their claimed goal.. But let me opt out plz.15:04
rustyaxeThe effort to break anything that tries to avoid systemd is what irritates me15:04
Nrmlrustyaxe: ditto15:04
rustyaxei've been doing this linux thing for 1/4 century. I got this. Just let me configure my machines to do exactly what i want, the way i want it, and leave me alone.15:04
NrmlThese kinds of stuff make me simultaneously happy and proud to be a Devuan user and be able to avoid all that crap with near-zero effort.15:06
Xenguy+115:06
NrmlFolks, also related to security, I'm seeing some strange stuff when I had a look at this: https://lists.debian.org/debian-security-announce/2024/msg00087.html15:41
NrmlIt's not directy related to Devuan as I understand it, because Devuan takes glibc entirely from upstream, correct?15:42
Nrml("upstream" in this case, meaning Debian)15:42
XenguyNrml, I'm not sure what the point of confusion is...15:58
XenguyDebian gets security advisories all the time, and the security fixes are inherited by Devuan of course15:59
XenguyAFAIK yes, glibc et al. all originate from upstream/Debian16:00
rustyaxeyay more glibc bugs16:06
rustyaxedidnt we have one of those a few weeks ago with php? :o16:06
NrmlXenguy: sorry, I did not explain what the "strange stuff" I'm seeing is -- I was first trying to make sure it's not Devuan-related (which you just confirmed it isn't) before bringing up more details.16:30
XenguyFair enough16:31
NrmlXenguy: thanks -- so, better not to bring these details here after all -- so I have just one more question: what there a debian-security IRC channel somewhere? Can't find anything here on Libera16:32
XenguyI'm not aware of one, but I don't really follow Debian closely anymore either16:33
XenguyOFTC might be another IRC to check16:34
Xenguy*IRC network16:34
NrmlSeems I was wrong presuming everyone had moved here to Libera -- Google probably knows where Debian IRC is, will look it up. Thanks for the tip.16:36
Xenguyo/16:36
debdogdebian is on OFTC16:36
debdogand irc.debian.org points there, too16:37
NrmlFound this here: libera/#debian16:39
NrmlWill check OFTC too, thanks debdog16:39
NrmlXenguy, debdog, rustyaxe and everyone that might have noticed my messages about "strange stuff" in a particular upstream security announcement: I've just clarified matters with the folks on OFTC/#debian-security, and there are actually no issues: the weirdness I noticed was actually a mispercerption on my part, caused by a misunderstanding about the meaning of certain fields in the DSA notice, and about the19:29
Nrmlrebuilding of a source package. So everything is good ITR on upstream.19:29
XenguyNrml, Glad you got that clarified19:29
NrmlXenguy: yeah, and learned a couple of things / cleared a couple of misconceptions in the process.19:40

Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!