libera/#devuan/ Sunday, 2024-09-15

rwpXenguy, JFRT that X terminate key sequence has always been Control-Alt-***BACKSPACE*** not Control-Alt-Delete which is different key.00:47
rwpIt's disabled by default now.  Because...  Pranks!  But when enabled it will IMMEDIATELY terminate X and of course anything running in X.  There is no dialog prompt asking if that is okay.  It just drops immediately.00:48
Xenguyrwp, Aha, good point, I stand corrected (in the old daze on the old OS C-A-D used to reboot the system)01:11
XenguyDo you happen to know the file that would get configured?01:11
fsmithreddpkg-reconfigure xserver-xorg I think01:12
rwpI put that in ~/.xsessionrc for use by slim, lightdm, and the other xdm DEs.01:12
XenguySo you configure that file for C-A-B to restart Xorg then?01:13
Xenguyfsmithred, Always appreciate the tips, so much I don't know01:14
rwpYes.  Configuring X is running commands and "setxkbmap -option terminate:ctrl_alt_bksp -option compose:menu" is a command that can be run from the command line.01:14
fsmithred^^^ is that what goes in ~/.xsessionrc?01:14
rwpI also run xmodmap which is the somewhat older way to configure the keyboard.  setxkbmap resets xmodmap settings.  So I first run setxkbmap (which might possibly do everything that is needed) and then run "xmodmap ~/.xmodmap" to finish up.  Then additionally I put "xset r rate 275 45" to adjust the keyboard repeat rate to my liking.01:15
XenguyLooks like I have no such file on this system, so I'd have to set it up afresh01:16
rwpfsmithred, When Xsession starts up it runs all of the parts in /etc/X11/Xsession.d/* which includes the /bin/sh sourcing ~/.xsessionrc if it exists.  The syntax therefore must be /bin/sh syntax and not bash or csh or zsh or other shell.01:16
rwpIt's the /etc/X11/Xsession.d/40x11-common_xsessionrc which does it if you want to look at the actual script that does the work.01:17
rwpSince we are talking about slim then ~/.xsessionrc is the shared file for the DEs to source.01:17
XenguyGood to know, thanks kindly01:18
rwpAnd also for startx too.  So people using startx will also have that work for them too.01:18
fsmithredthanks01:19
rwpI am not the typical person and I log into the vt console text mode first and then I run xinit which means I am actually using ~/.xinitrc file there.  But anyone who is doing this is already old-school and going to know that they need to do things the old way.  ~/.xsessionrc is the shared file for all of the newer X start-up processes.01:19
rwpI feel I should mention another file which has a similar name but a different purpose.  I recommend not using it.  I shouldn't mention it.  But it has such a similar name that it gets confused with .xsessionrc because the name is .xsession which can be used in a roundabout way.  I recommend to ignore it and stick with .xsessionrc which is well understood.01:21
Xenguy:nod:01:23
rwpOh and I was wrong about startx which uses either .xinitrc or .xserverrc files but not .xsessionrc my bad for confusing those on startx.01:24
freemI asked here a while ago why I would not get coredumps with a program on my VPS. I suspected it was because of a crash handler. I just tried to nuke it (got busy in the meantime) and indeed, I was right. I do not remember who helped me back then, but maybe you'll recognize yourself.11:45
hagbardQ-Sig22rt13:08
hagbardwrong window13:09
CueXXIIIfreem: what does "ulimit -c" show? if you want core files and have the space, i suggest setting it to unlimited (ulimit -c unlimited)15:51
freemulimit was correctly setup :)15:57
freemas said, the real problem was this signal handler which would prevent coredumps to happen15:58
freembecause some daemon-engine contributor thought it was smart to put a signal handler even in the dedicated server binary15:58
CueXXIIIah, if your program has a handler for sigsegv then of course you get no coredump15:58
freemwhich is ... say politely, at least, quite dubious15:58
freemexactly15:59
freemI am trying to not say my impolite opinion, but I'm certain you can guess it15:59
CueXXIIIyeah. but that's an issue with one particular program16:00
freem(and sorry for the probably incorrect word, I'm not sure I know the correct english one)16:00
freemyes16:00
freemwhich is open source, so I could patch it16:00
freembut someone here helped me on this, so I wanted them to have a chance to know the end of the story, even if after few weeks16:00
freemI kind of consider it a duty, that, when you asked for help in a place, when you get the final solution, you share it in the same place, even if unrelated to the direct topic16:01
freemthis info might also be helpful to programmers idling around and who might create a daemon one day. Please: do not *not* catch signals without a good reason, and please give at least a build option to get rid of that, as it is directly harmful for debugging purposes.16:02
freembut really, my main intent was to thank the time someone spent to help me (including with the ulimit thing) by giving the full story16:03
freemI should have tried earlier, but got busy and distracted16:03
CueXXIIIor maybe ehen have a runtime option/config to disable the sigsegv handler16:04
CueXXIIIi can't think of a case where a segv would be expected in a well written program and not be the source of some security problem16:05
* joerg absolutely agrees on >><freem> I kind of consider it a duty, that, when you asked for help in a place, when you get the final solution, you share it in the same place, even if unrelated to the direct topic<<16:51
freemCueXXIII: yes, a runtime option would be ideal, but I do not have enough time to dive in the game engine's internals, I want to make a game out of it :)17:22
freemI believe the signal handler was placed for the *client* side binary of the game engine17:22
freemso that it is possible to show a dialog box to the user. This makes sense. Lot of. But... I'm rather annoyed by... bunch of things, including past drama between me and others17:24
freemlet's be honest.17:24
CueXXIIIfreem: ah, a game engine could make sense. so the game can capture the coredump when it occurs and send it to the developer as bugreport17:24
freemand it is not drama in which I am innocent neither, I have had my misbehaviors17:24
freemno17:24
freemthe signal handler is not made in a way that a coredump is done, otherwise I would not have had a problem with this17:25
freemit is done to only show a meaningless dialog box saying the game crashed with, usually, a completely meaningless message even for devs, of which I was in the past17:25
cakebanditI made a tutorial on installing Devuan on a Odroid, similar to a raspi4, its here https://forum.odroid.com/viewtopic.php?f=217&t=4907017:26
freemanyway, I have resent and tend to be rather acidic, which is a stupid and childish behavior.17:26
cakebanditI was wondering why the urls in /etc/apt/sources.list are http and not https?17:26
freemcakebandit: what would be https interest in debian/devuan's sources.list?17:27
CueXXIIIbecause anything is checked with signatures and hashes anyways17:27
freemthe packages are each individually signed, in a much more robust and reliable way than the stupid chain of lies the interweb loves so much17:27
cakebanditoh, okay, I want sure17:27
CueXXIIIand https used to be much more burden on the servers, and nobody changed it since then17:28
cakebandit*wasnt17:28
cakebanditthanks17:28
freemit is not unheard of TLS providers to be buggy or corrupted after all17:28
freemI personnally trust debian and devuan maintainers a lot more than those who maintain the TLS stuff17:29
cakebanditok , I use letsencrypt for my web server17:30
freemthe main problem with the web's "chain of trust" is that any part of the chain being corrupted corrupts the whole17:30
freemI exagerate a bit, ofc17:31
freemI still would pick TOFU over chain of trust any day17:31
cakebanditTOFU?17:32
freembecause I have strictly no idea and no trust in who might eventually sign the upper certificate17:32
freemtrust on first use17:32
freembasically, you query a resource. There is a cert, you accept it, or not. It is registered and remembered. If the same resource get a cert change, you are asked if that is normal.17:33
CueXXIIIyou could change the sources.list to https, that won't change the additional integrity checking of the archive anyways, it would just be another transport layer17:33
freemunlike the chain of trust, you actually *see* that something happenened, so have more control17:33
cakebanditIm no expert, thanks for the answer. cheers17:33
freemI'm no expert neither17:34
CueXXIIIbut it would prevent a mitm to know which packages you have installed (by knowing which packages you upgrade)17:34
freemtechnically, https does not prevent tofu, though, only main browsers actively fight that idea17:34
freemlet's encrypt is just a workaround their mindset17:35
Hurgotronfreem: "certificate patrol" for Firefox17:35
cakebanditlol17:35
freem:)17:35
freemthe only thing I know about this is that if I had to have a real trust in interweb, I would patch my browser and OS to get rid of the certificates, so that I would validate them myself17:36
freemand it would still be weak because the chain *can* be corrupted. It happened in the past, in will happen anew.17:36
freemI believe more in showing things to users, even if I know that most users don't care17:37
CueXXIIIfreem: good luck trying to verify the certs yourself. try calling your bank and checking their cert fingerpring17:37
freemyes17:38
freemit is why I do not trust the web17:38
freemI rarely buy on internet because it is impossible to actually understand what happens when you click on a button on a website17:38
freemthose days, web devs seems to even have forgotten about the <a href=...> thing17:39
freemthey use javascript to do it17:39
freemeither they're stupid, or they're malicious and do this to pwn you17:39
freemone way or another17:39
freembut I'm afraid I'm offtopic, my bad :)17:40
user71It might be about the 'secure connection' symbols in their browsers.17:40
cakebanditpassionate :-)17:40
user71'unsecure' gets a bad rap17:41
freemI forgot to go to bed last night, that helps a bit with lack of restraint :D17:41
freemuser71: yes, and notably, firefox the "hero" of freedom contributed to make it hard to self-sign your own website17:42
freemin the meantime, they do sell your data to google, ofc17:42
freemIIRC even their add-on page would send data to google, ain't it a joke?17:43
cakebanditI'm using librewolf, but that has been controversial lately. There is another browser I may switch to that uses a file to disable various things, I forgot the name.17:44
freemthe one browser I have some hope into is otter browser18:07
freemsadly not packaged, and have bad perfs on my debian for some reason I don't know18:07
freemit is one of the offspring of opera12 with vivaldi, but it is open source and supports several rendering engines18:08
freemunlike vivaldi, I feel it focuses more on the privacy features than eye candiness, but still have mouse gestures and other classical opera 12 features18:08
freem(not all, though, foss, indie project, you know)18:09
cakebanditah, well I guess you can modify a file called user.js and use default firefox, here is one https://github.com/yokoffing/Betterfox ,but its not the one that was being talked about on 4chan18:09

Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!