libera/#devuan/ Friday, 2024-10-04

elias_a_Hello! Another tired user of Lennart's cookings here. I will migrate my laptop from Debian Bookworm to Daedalus.00:05
rwpWelcome elias_a_ to the true path of Devuan!00:09
elias_a_rwp: TY :D00:13
Xenguyrwp, pm-hibernate does indeed work on the X220 here  : -)00:30
rwpVery good!  And glad to hear you made it through your work day.  (I am still in gdb debugging here.)00:30
Xenguyrwp, The X250 on the other hand just locked up  ; -)00:32
rwpHmm...   :-(00:33
Xenguyrestarting it now00:33
rwpI just verified pm-hibernate on daedalus on my x270 works okay.00:38
ballsystemlordHello, On Sep 20th I sent a message to DNG ( dng@lists.dyne.org ). Then realized I was, for some reason, not subscribed anymore. I resubscribed and sent two messages on and 28th , but never got any replies.01:08
ballsystemlordI tried to access the archives, but I can't get to them. The page redirects back on itself.01:08
ballsystemlordhttps://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng01:09
ballsystemlordI wanted to ask if anyone received my emails from DNG.01:09
ballsystemlordJust to see if things are working.01:09
gnarfaceballsystemlord: stick around, i'm sure someone knows what's happening...01:10
ballsystemlordThey are titled "Claws-mail stuck. Bug report to Devuan devs." and "[DNG Re (2): unresponsive machine" and "Re: [DNG Re (2): unresponsive machine"01:10
ballsystemlordThanks!01:10
ballsystemlordI'll wait for a reply.01:10
golinuxHi ballsystemlord . . . try this url https://lists.dyne.org/lurker/mindex/dng@20380101.000000.00000000.en.html01:11
golinuxSomeone reported that the link on www was outdated so maybe that's the one that you tried.01:13
ballsystemlordMy messages made it to the list! I guess they just didn't provoke a reply. I thought at least a "thank you" was in order for the last two, but it doesn't really matter.01:15
Xenguygolinux, The only people than can fix the 'page linking to itself' are Dyne01:18
gnarfaceXenguy: 2-step checklist for getting hibernate working on any hardware: 1) make sure your swap partition is at least as large as the amount of physical system ram 2) regenerate your initrd.img and make sure the partition UUID it says it will attempt resume from matches the right swap partition (if not, you can set a variable in the config somewhere to override it then regenerate the initrd again)01:18
Xenguygolinux, Meanwhile I'm working on adding the real archives link to our web site, in lieu of help from Dyne et al.01:19
ballsystemlordXenguy: thanks!01:20
ballsystemlordSee you!01:20
golinuxI thought you pushed that change a while ago01:20
gnarfacei guess there's technically a 3rd step but it may only matter for very old hardware, there's a bios setting for something like "memory hole at 15MB" or 15KB or something like that, ... been so many bongs ago i don't remember if it needs to be on or off, but the setting does matter, and on such hardware it will only work in the right state01:20
Xenguygolinux, That was a minor gremlin update that updated a reference from 'freenode' to 'libera'01:21
Xenguy(we should take it to #-www I suppose)01:22
Xenguygnarface, I think maybe that might be the problem, i.e. #1...01:24
XenguyMy RAM is ~4Gb, but so is my swap01:24
XenguyDang01:24
XenguyNo wait, that's incorrect01:24
gnarfacecheck the size in bytes; rounding errors can screw you over on this01:25
XenguyHibernate works on this laptop, but specs are as above, hrm01:25
Xenguyyeah, understood01:25
XenguyIs there a good way to ascertain swap file size (I tried:  fdisk -l)01:25
XenguyFor RAM I can use 'free'01:26
gnarfaceswap space also shows in free for me01:26
Xenguyoh, hrm01:26
XenguyOh you're right, perfect01:26
gnarfaceoh, i always use swap partitions though... it might matter that it's a partition and not a swap file01:27
XenguySo yeah on this laptop where hibernate works, swap is slightly larger than RAM; let's check the other laptop01:27
gnarfacesome time ago i heard Linux gained the ability to use a dynamically scaling file as swap space from within another regular filesystem partition, the way Windows does it, but i never tested it and i don't know what sort of implications it might have for hibernation functionality01:28
Xenguygnarface, Well the ratio between RAM and swap is similar but the newer laptop has double of both, and it's the one where hibernate doesn't work01:30
XenguySo, still a mystery I suppose01:30
gnarfaceoff the top of my head, i don't know how to check list entry #2 without regenerating the initramfs01:31
rwpcat /etc/initramfs-tools/conf.d/resume01:31
gnarfacebut it's possible if the swap partition's UUID changed since install, it could be wrong01:31
gnarfacethe bios setting should be easy to check thoguh01:31
gnarface*though01:31
gnarfacerwp: afaik that is only set if you manually set it though, it has a default that never shows up in the config files unless you do01:32
gnarface(and the default i think is just whatever swap partition it finds first when the initramfs is generated)01:32
rwpThat's set if one is using a swap partition.  Xenguy said using LVM in the normal way.  So it should be set to /dev/mapper/$VG-swap with $VG-swap being whatever is the swap partition.01:33
gnarfacehmmm...01:33
* gnarface also isn't using LVM01:33
* Xenguy knows jack about initramfs ...01:34
rwp"swapon -s" will list the swap device which will be /dev/dm-1 for me and ls -l /dev/mapper/ will show (for me) v4-swap -> ../dm-1 there01:35
rwpLVM uses UUIDs internally so using LVM LV names effectively use UUIDs too.01:35
Xenguy^^ Do I need to run that as root?01:35
* adhoc prefers to set the swap device to a floppy01:35
adhocor tape01:35
rwpIf it gives an error as non-root then yes you will need to run it as root.01:36
Xenguyfair enough01:36
adhocthat way you know when your machine has run out of ram and you need to go kill some crap01:36
rwpWorks for me as non-root.  But I did run it here as root.01:36
XenguyDoesn't work as root here01:37
XenguyLet's see if I get /kicked01:37
Xenguy# swapon -s01:37
XenguyFilename                                Type            Size    Used    Priority01:37
rwpReading the man page it says we are supposed to use "swapon --show" now.  Who knew?01:37
Xenguy/dev/dm-2                               partition       4075516 2101880 -201:38
rwpSo dm-2 and then look at "ls -l /dev/mapper/" to see what is pointing to dm-201:39
Xenguy# swapon --show01:39
XenguyNAME      TYPE      SIZE USED PRIO01:39
Xenguy/dev/dm-2 partition 3.9G   2G   -201:39
Xenguyrwp, https://paste.debian.net/hidden/f1ba52da/01:41
rwpThe line is "devuan--vg-swap_1 -> ../dm-2" so /dev/mapper/devuan--vg-swap_101:41
XenguyI have no clue about this stuff01:41
adhocis this thing a VM you are putting swap on?01:42
XenguyThis is a bare metal laptop01:42
adhocok01:42
rwpIf you run "lvs" it will list out the LVs logical volumes and you will see "swap devuan-vg" listed there.  But a single - is escaped to -- through that so devuan--vg is what it becomes.01:42
rwpcat /etc/initramfs-tools/conf.d/resume01:42
XenguyAgain no clue01:42
adhocwhy mess with LVs and VGs if you are not using extenable storage in a laptop ?01:43
rwpMine says: RESUME=/dev/mapper/v4-swap01:43
Xenguy# cat /etc/initramfs-tools/conf.d/resume01:43
XenguyRESUME=/dev/mapper/devuan--vg-swap_101:43
rwpBecause I don't like the long dashed names and renamed devuan-vg into v4 on my machine.01:43
adhocthat is a lot of over head in block mapping01:43
rwpXenguy, That's perfect!  All good.01:43
XenguyMeaning what?01:43
XenguyOh wait, crap, I'm giving you the info from the laptop that works, hah01:44
XenguyGah01:44
rwpadhoc, The strategy is to use exactly one LVM PV physical volume encrypted with LUKS and that way there is one passphrase query at boot time.  Then that results in the ability to have everything encrypted.  The LVs then can have root and swap and both are encrypted with one passphrase.01:44
XenguyOkay, taking a break for a bite to eat, and then will try that sequence again with the laptop that *doesn't* work01:45
rwpXenguy, You now have the working A case.  Look at the non-working B case.  The A-B comparison will hopefully show something not configured to work on the B case.01:45
adhocthe whole poiont of VGs and LVs is that you *can* extend storage combined across remote SCSI LUNs on large arrays or fibre channel01:45
rwpThat may have been an original point of LVM but we have abused it into the current strategy for fully encrypted laptops.01:46
adhocrwp: is this enterprise requirement ?01:46
Xenguyrwp, Okay, soon enough then, but time for some chow01:46
rwpadhoc, It's everyones' requirement.01:46
adhoci hope you keep backups.01:47
rwpEveryone should also keep backups too.01:47
rwpWhen installing the debian-installer dialogs basically ask you questions and depending upon the answers if you answer that you want encryption then this is what you get and if you answer that you don't want encryption then you don't get encryption.  The choice is your choice when you install.01:48
rwpEveryone should have backups regardless though.01:49
jjakobhow would you approach building preinstalled images of devuan for raspberry pi 3's? years ago I used https://github.com/TheSin-/rpi-img-builder for raspbian (debian) and made a custom config to mount root read-only with an overlayfs08:33
jjakobI guess I can take that and see if I can make it work with devuan08:33
jjakobmaybe I can do a one-off install and manually configure the overlayfs but it's nice to have an automated build08:34
gnarfacejjakob: someone has the build scripts we use, or you can just use one of our own already-built rpi3 images: arm-files.devuan.org08:35
gnarfacei think fsmithred has the build scripts somewhere...08:35
jjakobI looked at the arm build scripts on devuan's gitea08:35
gnarfacemaybe someone in #devuan-arm knows08:35
gnarfacethere's buildscripts on git.devuan.org too, but i think the one they're actually using for the arm images may be listed elsewhere08:36
jjakobhttps://gitea.devuan.org/devuan-sdk/arm-sdk08:36
gnarfacei've seen the link but i don't remember it, but i'm pretty sure the channel logs will include fsmithred posting the link08:37
jjakobit's not immediately obvious how to customize the build though, like installing more packages, editing/installing config files into the target, changing cmdline and so on08:38
gnarfaceyea, i'm sure he'd know that too08:39
jjakobgrepped through channel logs and only saw http://arm-files.devuan.org/ and refracta-installer-base being mentioned, and #devuan-arm08:45
gnarfacehmm, maybe i'm thinking of the x86 or refracta build scripts or something08:46
gnarfacewell, slow channels. be patient.08:47
jjakobpbuilder, sbuild, cowbuilder, #arm-img-builder08:51
jjakobseems like those are just package building, not whole bootable os, other than the last one08:52
gnarfacewell, there's not much to it aside from getting a working kernel and running debootstrap, especially for the rpi images08:53
jjakobhttps://arm-files.devuan.org/README.txt08:53
gnarfaceit wouldn't be so difficult for you to make your own image from scratch if it came to that08:53
jjakob> For Raspberry Pi Beowulf 3.1.0 images, the build system that generated the images is at https://github.com/pyavitz/rpi-img-builder, configured with Raspberry Pi Foundation non-mainline kernel built from source on RPi3 arm64 running Beowulf 3.1.0.08:53
gnarface...but i'm certain someone around here will have actually good answers once they wake up08:53
gnarfaceyea, so beowulf was a long time ago, and that information could be out of date08:54
gnarfacewe're on daedalus (5) now08:54
gnarfaceheh08:55
gnarfaceyeti in #devuan-arm just now suggested also that you could simply use the debian one and then transgrade to devuan08:55
jjakobyeah I guess it wouldn't be that hard to adapt any builder for debian to devuan08:57
jjakobanyway I went to #devuan-arm for further discussion08:58
xrogaanSomething weird is going on with apt. It tells me updates are available for libre office, from the backport channel. Thing is, I didn't install the backport version of libreoffice10:39
xrogaanlibreoffice/stable-backports 4:24.8.2-1~bpo12+1 amd64 [upgradable from: 4:7.4.7-1+deb12u5]10:40
xrogaannot only that, but the versionning seems off10:41
xrogaanI don't understand why backports priority became the same as stable for this packet10:43
gnarfacei just typically keep backports commented out in the sources.list unless i'm planning on using it11:00
xrogaanI'm using some backports, not all11:04
xrogaanIt's just forcing me to install libreoffice from backports and git from backports staging.11:04
xrogaanthey're both from the stable channel, so I don't get why it happens.11:05
xrogaanI mean, the version I have installed isn't a backport. So the priority should take precedence over the version.11:05
gnarfacehmm, not sure, maybe you've installed the backports version of something it depends on?11:05
gnarfaceonly other guess i have (besides packaging error obviously) is maybe it's a "recommend" somehow?11:06
gnarfacedo you have recommends disabled?11:06
xrogaando you know how to get the value of a config variable from apt?11:09
xrogaanyeah, it's not set on true11:11
gnarfacei forget how to get the defaults11:12
gnarfaceyou can override them in /etc/apt/preferences.d/ though11:12
gnarfacei keep being told that the defaults should prevent this, but sometimes they don't so that's why i keep it commented out11:14
xrogaanoh, maybe the package was removed from stable?11:22
xrogaanholding the package does nothing11:33
xrogaanIt's just weird.11:33
xrogaanSo it's the repository that determines if packages are automatically installed (NotAutomatic: yes) and if updated are automatic also (ButAutomaticUpgrades: yes).  So there has to be something that requires the backport version, but here is no other package installed or updated than libreoffice.11:46
xrogaan(the suite of libreoffice, should I say)11:46
gnarfaceare you sure about that?11:54
gnarfacedpkg -l |grep bpo11:54
gnarfacei've seen nvidia drivers pull extra stuff when installing from backports, it stands to reason libreoffice could do it too11:55
gnarfaceit'd be really weird for them to remove a package from stable11:56
xrogaangnarface: I have bpo stuff installed. libreoffice isn't one of those. LO is kind of self contained too, without broad dependencies.12:03
xrogaana depends on libreoffice only show it being suggested by spelling packages12:03
xrogaanah, might be ure12:12
xrogaanokay, went nuclear and purged libreoffice from my system12:16
xrogaanand reinstalling install from stable, not backports ¯\_(ツ)_/¯12:18
kairuHi, I am also investigating the problem with the libreoffice backports.13:37
kairuMaybe it's because version 4:7.4.7-1+deb12u5 was installed but is no longer available.13:38
kairuIt was installed by daedalus-security main. Somehow this repo seems to be empty.13:38
xrogaanoh?14:21
xrogaanright14:21
xrogaanWho's in charge of the repo, onefang?14:22
rrqlibreoffice=4:7.4.7-1+deb12u5 is in daedalus-proposed-updates14:39
xrogaanI had u5 installed, but got u4 on reinstall.15:07
xrogaandeb12u5 should be from security15:07
xrogaanhttps://tracker.debian.org/news/1566837/accepted-libreoffice-4747-1deb12u5-source-into-stable-security/15:08
Alverstoneabuse me21:18
AlverstoneI got a working devuan chroot via apt-rdepends, ar/tar and Debian's buster repos21:19
Alverstonedon't know why I bothered with buster21:19
Alverstoneprobably though to use DPKG_ROOT at first, but it didn't work out21:19
AlverstoneSo I ended up using ar/tar21:19
AlverstoneIt's the ugliest thing I've ever done to a system21:19
Alverstonewhy I'm smiling is beyond me21:20
AlverstoneIt's also so minimal that I'm afraid I'm gonna spend a few days making it functional21:21
AlverstoneBut here are serious questions21:21
AlverstoneIs testing reliable on Devuan?21:21
AlverstoneHow quickly are security fixes merged?21:22
fsmithredno longer than a week, I think21:22
fsmithredthat's the usual time for things to move down from ceres/sid21:22
fsmithredor maybe it's 5 days21:22
fsmithredsometimes it's faster if it's important21:23
AlverstoneIs it OK for downstream to have security fixes delayed? I though maybe there's some coordination21:23
AlverstoneAlso what about testing?21:24
fsmithredand I want to add that I don't understand half of what you said above.21:24
AlverstoneThey say it doesn't break often on Debian, so I suppose I can safely use it on Devuan as well?21:24
Alverstone> I don't understand half of what you said above21:25
AlverstoneYou don't need to21:25
fsmithredfor a chroot tarball, I would just do a debootstrap and then tar it21:25
fsmithredyeah, I know21:25
AlverstoneI can explain though21:25
fsmithred99% of the packages devuan provides come straight from debian and are unchanged21:25
Alverstoneapt-rdepends coreutils binutils libc-bin $whatever | awk '!/^ .*/' | xargs -I, apt download ,21:26
fsmithredso testing is pretty much the same as testing21:26
Alverstoneand then ar/tar unpack into new root21:26
Alverstoneugly isn't it21:26
fsmithredI could see doing something like that just to know if it works21:26
AlverstoneYeah it works, at least half of it21:27
AlverstoneI just got an error saying unknown user root:root21:27
AlverstoneI guess that's what you get for being dumb)21:27
fsmithredprobably something was missing21:28
fsmithredwild guess21:28
AlverstoneI didn't want to install Devuan's debootstrap into my Debian that badly. Reason isn't applicable21:28
fsmithredI've thought about providing a root tarball for people to start with.21:28
fsmithredbut I don't suppose many would go that way21:29
fsmithredabout testing: until freeze, there are many updates21:29
fsmithredso you can do a bunch every day or do hundreds every week or month21:30
AlverstoneYes I can21:31
AlverstoneBut do I have to?21:31
fsmithredI have a print server here that's running excalibur and it works21:31
fsmithredno, if you have a working system, you don't have to keep doing the upgrades21:31
fsmithredbut if you want security fixes fast, you'll probably want to upgrade every day21:31
AlverstoneYou can do something like Void Linux does, providing a very small rootfs. It will take about 40-50mb of space, so can't be an issue for your servers21:32
AlverstoneInstall apt/dpkg there and the most basic things, like hostname etc etc21:32
fsmithredor do a mixed excalibur/ceres and pin ceres to lower priority. Then if something gets fixed that you need right away, you can install that package from ceres and get it a few days earlier.21:32
Alverstonewho's testing? excalibur?21:33
fsmithredyes21:33
fsmithred=trixie21:33
fsmithredI do think I have some problems in my excalibur install. If I try to upgrade with aptitude, it pukes. But apt upgrade works fine.21:34
Alverstonehappens on Debian?21:35
fsmithredI haven't tried to figure out what the problem is.21:35
AlverstoneI never used Debian testing tbh21:35
freemthis apt-rdepends thing is an interesting, thx. I'll toy with it to replace the debootstrap of my scripts, just because why not.21:35
AlverstoneDo you guys stick to openrc? I've had a brief experience with runit, so I thought about using it, but if openrc is more convenient I'll try to figure it out instead21:36
freemI never used openrc. I switched myself to runit when I learned about it, which is a bit before devuan was born21:37
freemI love runit, most of my files are just including a 35 long file for basic helpers in a 2-lines long "script", and adding a log/run symlink21:38
freemthe only limitation it have is when you need a daemon to be launched and *ready* before another one, but that is not exactly a common need, in practice21:39
freemand you handle this anyway, by implementing the check script in a correct way for that required daemon, after all. If said daemon provides a reliable tool to hint that it is, indeed, ready, that is. But if not, no can do anyway.21:41
AlverstoneI remember somebody suggesting doing the dumb fail-until-succeed21:42
freemI never managed a machine hosting a standard website with it, though. By standard website, I mean a CGI-able httpd, some SQL db, and some various related tools.21:42
freemyes, that is the traditional way in daemontools/runit21:42
freemwell, there are no other way, actually21:42
freembut you do not have to actually launch the daemon, if your run script uses the "sv check $foobar" command, instead of stupidly being just "exec barfoo"21:43
freemanything better than that will require communication between the daemons and the supervisor. We probably all know about the last systemd fail on that point, right?21:44
freemwell, systemd-related, the patches in question were from distros which added unneeded bloat21:44
Alverstoneahem testing doesn't have security and update branches right?21:45
freembut either you periodically checks that the target is up, or you communicate with it's responsible to know when it is. There are no other ways21:45
* freem will stop here before being told to go offtopic though21:45
fsmithredsysvinit is the default in devuan. The installer gives you a choice of that or openrc or runit.21:46
fsmithredopenrc and runit will use sysvinit scripts21:46
fsmithredrunit will use run scripts if they exist21:46
freemthis ^ as a replacement for the rc.d ones, that is21:46
fsmithredI don't know what you have to do with openrc to replace the sysvinit scripts21:47
fsmithredyes21:47
freemand you need the folder to match the name of the init.d/ one, which can be surprising when it comes to, say, ssh (you need to name ssh, not sshd)21:47
fsmithredand there are a few already configured in runit-services package21:47
AlverstoneSo what benefits does sysvinit have compared to runit21:48
freemnone.21:48
fsmithredit's more mature by decades21:48
freemwell, it's historically used everywhere21:48
freembut I don't see any techincal one... oh, actual runlevel support, perhaps?21:48
fsmithredthere aren't run scripts for all services yet21:48
freemrunit-init specifically does not21:48
fsmithredyeah, runlevels. I miss that in runit.21:49
freemwhat is the use case?21:49
fsmithredinit 1 instead of reboot21:49
freemso that init just restarts at it's entry point?21:49
fsmithredyeah, restarts all the services21:49
freemand goes through all the init sequence, except for kernel loading?21:49
freemI see21:50
freemany other use case for runlevels? I'm curious. And *not* saying this is not a valid one, I can think of diskless systems for example21:50
freemor live CD or anything which have slow storage read, I guess21:51
fsmithredwell, debian/devuan makes 2-5 the same, but redhat, suse and I'm not sure about slackware, use 2,3 for multi-user non-graphical login, 4,5 for graphical21:51
freemthat stuff is easy to do with runit though21:52
fsmithredgood, I'll ask you for help some time.21:52
freemIIRC it's even documented somewhere... lemme search21:52
fsmithredI can arrange graphical vs. non-graphical logins, but I can't change from one to the other easily21:53
fsmithredwithout rebooting21:53
freemfsmithred: I think this: https://smarden.org/runit/runlevels handles the use case of switching between single/multi/graphical users21:53
fsmithredthanks21:53
freemI do not know, though, I never got the usecase, so never tried. Please tell me when you will have toyed with it, I'm curious21:53
freem(and incidentally am planning to rewrite runit in modern C, and perhaps in C++ actually, just for my fun and maybe to put that djb code into a nice system C++ lib which does not throw nor abort() nor exit() nor allocates memory randomly...)21:54
freemaka: something very different from the STL21:55
freemso I suppose while I'll be at it, I could keep in mind some use cases which are not handled yet. Will probably never be done, though, don't hope too much :)21:56
freemoh, this makes me think... fsmithred: do you know if devuan's prepared runit scripts get some handling for cgroups/namespaces/[selinux|apparmor]? I know it is technically possible, but myself never got the motivation to go that far21:57
freem(technically just need to call the cgroups tooling and toy with the kernel's filesystem API...)21:58
freem(just...)21:58
fsmithredI don't know. If you want to see the source code, it's at salsa.debian.org22:00
freemoh, I thought you used them22:01
freemsince you knew about some details of the runit integration that I would not expect someone who is not writting their own runit scripts themselves to know22:02
fsmithredI've made some live-isos with runit and I've written a few run scripts22:03
freemthis explains that22:04
fsmithredI have only a vague notion of cgroups22:04
freemI know the general idea of cgroups, namespaces and selinux/apparmor, because at some point I wanted to become admin for real, but my hacker mind is unable to accept using high level tools like docker I don't understand how they work internally22:05
fsmithredI know nothing. I just kick it around until it does what I want.22:05
freemI don't even know how to kick it around :D I never implemented it myself, and by default it's out of the way22:05
freembeing out of the way by default is not a wisdom lost by everyone after all22:06
fsmithredoh, I was referring to linux in general.22:06
freemah lol22:06
freemI don't even dare touching the kernel except by poking random /proc or /sys files22:06
freemone of my many lacks.22:07
fsmithredwe should be in OT for this22:08
freemyes22:08
freemfsmithred: when you will be back, I think I should mention about runit's "runlevel" situation that it does not touch the init at all (I was unsure): it only changes the directory targeted by the service-handled (runsvdir) which will thus start or end daemons depending on the difference. The runit-init scripts `1`, `2` and `3` are not executed, which means the one-shot services will not re-run. I do not know if this is how sysvinit+rc.d runlevels work22:26
freemas well, but I kind of doubt it? I guess one could migrate those to proper runit scripts, but I never went to do that myself as it might be more complicated for a quite small benefit (for me)22:26

Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!