libera/#devuan/ Tuesday, 2020-10-20

abstracttimHi people00:31
clortusb networking is rather nice but if i put two of the same devices on the hub, i get usb 1-2.3.3 "Device not responding to setup address"01:29
clortmore bluetooth ickyness DSA-4774-1 https://lists.debian.org/debian-security-announce/2020/msg00181.html07:51
tuxd3vclort, yeah linux is starting to become a hot spot unfortunately07:59
clortle wut. this stuff happens.08:00
tuxd3vnot only that, at each time linux kernel grows, and grows, even selecting the same config, you get always a bigger kernel image..08:00
clorti'm a floofy cat with blacklisted bluetooth modules since it was introduced08:04
clortbluetooth oopsies are pretty regular occurrences08:05
tuxd3vmegi: I tested your patch to fix ethernet on reboot, it seems to be working :)08:40
tuxd3vmegi: but only if "rgmii-id" is used in the DT..08:42
clortcould we have iptables back, for devuan ceres?09:42
clort<insert random angry language here>09:42
clorti need to iptables -A POSTROUTING -t nat -s 192.168.42.2/32 -j MASQUERADE09:43
Jorilclort: It looks like the iptables package is still there...?09:50
Jorilit contains iptables-nft, that should allow you to use the iptables syntax09:51
clortptables -A POSTROUTING -t nat -s 192.168.42.2/32 -j MASQUERADE09:55
clortiptables: symbol lookup error: iptables: undefined symbol: xtables_fini09:55
clortiptables-nft -A POSTROUTING -t nat -s 192.168.42.2/32 -j MASQUERADE09:56
clortiptables-nft: symbol lookup error: iptables-nft: undefined symbol: xtables_fini09:56
clortiptables-nft -L09:56
clortiptables-nft: symbol lookup error: iptables-nft: undefined symbol: xtables_fini09:56
clortit does help me to know that it 'should work' though Joril - thank you09:57
clortdo you think it might be related to using nvidia's 4.9.140-tegra kernel?09:58
Jorilouch! Found this https://www.spinics.net/lists/netfilter-devel/msg68446.html09:58
JorilBut it looks like no one answered09:58
JorilIt could be that some other package related to iptables isn't sufficiently up-to-date... libxtables maybe?10:04
gnarfaceif it's a kernel you got from nvidia, really don't necessarily expect any competence, but don't rule out utter malice10:05
gnarfacebut it could be just a module that didn't auto-load too10:05
gnarfaceso maybe check for anything missing?10:06
gnarfaceif it's packaged right, the modules would all be in /lib/modules/ somewhere10:06
gnarface(/lib/modules/`uname -r`, specifically, but you can't trust nvidia to follow the rules that well)10:07
clorti see they have nf_tables.ko and nf_tables_set.ko and not iptables.  maybe i can build the 4.9.140 module myself and dynamically load it10:18
clortor maybe some smarty person can make a 5.8 kernel dtb for my hardware (jetson nano) that i can boot10:19
gnarfacethe dtb you have already won't work?10:23
gnarfaceor they embedded it in the binary so you can't get it?10:24
gnarfacebuilding the modules and loading them might work10:25
gnarfaceit might also work to kexec 5.8 from 4.910:25
clorteven funnier10:26
clortmodprobe: FATAL: Module nf_tables.ko not found in directory /lib/modules/4.9.140-tegra10:26
clort✠ /lib/modules/4.9.140-tegra# ls -l nf_tables.ko10:26
clort-rw-r--r-- 1 root root 216472 May 25 11:35 nf_tables.ko10:26
clortwtg nvidia10:27
clortthey don't supply a newer dtb / kernel for me10:27
clortif you'll allow me to remark, not allowing the kernel module you ship to load isn't brilliant10:46
clort* nvidia10:46
clorti hoped i'd be okay with dropping their ubuntu in favor of devuan, but clearly this is not enough10:46
clorttheir gpu and opengl support is best available, for a $99 ARM SBC though, so for that I'm happy10:48
gnarfacethe kexec trick might work, worth looking into10:56
gnarfacemake sure it won't brick it though10:57
unixbsdHello, I am using samba on raspberry pi zero. I have impression that samba is faster than NFS and sshfs. is it possible?12:55
gnarfacefaster than sshfs would be expected, faster than nfs sounds like something is wrong13:10
gnarfacebut it could be a difference in caching settings13:11
gnarfaceor a number of other bottlenecks i could imagine13:11
gnarfaceyou've ruled out issues related to flash storage, slow bus speeds, and not enough ram?13:12
gnarfacethe thing has so little ram that i could imagine a scenario where just accessing the files by samba first would cripple nfs if you repeated the test immediately there afterwards from the same device13:13
gnarfacemaybe try from a clean boot, and try it from nfs without samba running13:14
clortyou should be able to pick a low-overhead cipher for sshfs also13:18
gnarfaceyea, but nfs shouldn't be dragging i don't think...13:39
gnarfaceunless there was some problem in the broadcom firmware13:39
gnarfacebut yea using unencrypted sshfs would be a slick way to avoid dealing with it13:40
rrqmmm "icherboot"14:31
tuxd3vclort, is the support for jetison nano availlable in mainline?16:05
tuxd3vI mean also uboot?16:05
tuxd3vlet me check16:05
clorti dunno tuxd3v16:07
tuxd3vnope, in linus mainline is not present :(16:09
tuxd3vyou need to get a kernel from:16:09
tuxd3vhttps://developer.nvidia.com/embedded/downloads16:09
tuxd3vclort, its possible, but only with nvidia sources16:19
tuxd3vA devuan rootfs its also possible and easy :)16:21
clortthank you tux3dv - that would get me drivers for say, a cdrom, or iptables ?16:22
tuxd3vclork, with the kernel sources then you have to 'make menuconfig', and choose the drivers you want16:23
tuxd3viptables, cdrom and so on16:24
tuxd3vbut its a tedious task16:24
clortit's unfortunate nvidia management decided to support the Nano as an ai-appliance only, rather than a general purpose little computer.16:32
clorthowever with mainline kernel and usb OTG, along with a powered hub, a Droid4 might serve as my internet router with a usb-ethernet adapter16:36
clortalong with cdrom support ;)16:36
hightower2Hey, does anyone know (just offhand, not as a long discussion) why devuan offers the choice of linking bin to usr/bin, rather than the other way around? (that is, /usr/bin being a link to large /bin)?18:26
DHEhistorically /bin was meant to be on / which could be a small(ish) filesystem and contain mainly system-specific and recovery applications. /usr could be a shared NFS mount for many servers. install once, available everywhere18:30
DHE*system-specific configs18:30
danuantrying to run a backup script from cron, but having trouble sourcing subscripts from it without full path to them. does bash not look for (source somescript.sh) in $PATH ?18:31
hightower2DHE right, sure, historically. But I mean, when these are joined, why the decision was made that "/usr/bin" was the real one and "/bin" just a symlink to it, rather than the other way around? It would seem to me that now, when / and /usr separation is no longer relevant, things get moved from /usr/ into /, and not from / into /usr/.18:34
clortdoes cron invoke executeables with bash danuan ?18:34
hagbard_If the script is in $PATH you can execute it. But not source it.18:34
danuanclort if executable has #!/bin/bash should it not ?18:35
danuanhagbard_ so i have to cd in to the running dir within the script before sourcing or set a local $mypath18:36
hightower2danuan, if you already know which directory it's in, then don't 'cd' into it, but simply execute source /path/to/dir/script.sh18:36
clorti was imagining cron might exec a script and pass it literally to bash to interpret, without allowing bash to scan the whole path.  but i don't know.18:37
hagbard_yes. Or hashbang the script, make it executable, and execute it.18:37
hightower2(if you really needed to run 'source'... running 'source' from cron seems pretty unusual)18:37
hightower2ah you're running subscripts.. ok18:37
danuani am not sourcing from cron itself , i am sourcing from within a bash script  cron runs18:38
hightower2(even though - same question... running "scripts" using 'source' is also pretty unusual)18:38
danuanhagbard_  it is part of the script , cannot execute , need to pass variables in and out . without doing extra $1 $2 $3 s18:40
hagbard_Then you might need indeed a cd somewhere.18:41
danuanok  thanx, thought that since the subscripts were executable and .sh it would look in $PATH but guess not for sourcing18:45
ErRandirThe behaviour of source depends if bash is in posix mode. See man bash. You may also want to put 'SHELL=/bin/bash' in the crontab file18:47
ErRandirThe default shell used by cron is /bin/sh18:48
danuanErRandir but even if it is /bin/sh but you ask it to execute #!/bin/bash script  it will run is /bin/sh ?18:50
hightower2in that case it'll run bash18:52
ErRandirI do not think cron will look at that. It will apply to any subshell created from the script.18:53
hightower2but folks, wait... if this guy has a script, which has #!/bin/bash at the top... then if he calls 'source' from this script, the sourced file won't be processed by anything other than that same (bash) process itself.18:54
ErRandirit's not a bash process, it's a sh process.18:54
hightower2if he runs /path/to/script.sh from cron, and script has #!/bin/bash at the top, it'll execute as bash18:56
hightower2(the main script I mean)18:56
danuanErRandir i wrote my script as a bash one , it would error out a long time ago if it was executing in /bin/sh18:57
danuanand changing crons shell , i would assume woult throw the all the systems cron task in to a dissary i would assume ? would it not ?18:58
ErRandirso then you must indeed be in bash for the script18:58
lyubov~/buffer 3319:12
fsmithredclort, what's a low overhead cypher now that blowfish is gone?19:36
clortick. maybe arcfour according to websearch19:38
clorti shall test19:38
fsmithredI don't see that in the list generated by 'ssh -Q cipher'19:39
hagbard_I'd assume that aes is quite low overhead, since modern cpus have hardware support for it.19:39
fsmithredoh, so we have to test on every machine19:40
clortaes128?19:41
fsmithredmaybe. The 128 is a good sign.19:41
fsmithredthey are not in alphabetical order19:42
fsmithredso maybe they get stronger as you go down the list?19:42
clortwell to my phone i get 4.3MB/s with aes128-ctr and 4.1MB/s with aes128-gcm@openssh.com19:47
fsmithredI got 95MB/s and 109MB/s with those same two, respectively. They reversed.19:54
clortgoing  the other way gcm@openssh.com is 6.4% faster19:55
fsmithredfor aes256-gcm@openssh.com I got 107-108MB/s. Almost the same as the 128.19:57
fsmithredFWIW these are both core i5 about 10-11 years old.19:57
clorti should have monitored cpu more closely, neither time was i saturating one core19:58
fsmithred110MB/s if I don't specify which cipher to use.19:59
fsmithredso, no significant difference. I don't need to do the extra typing20:00
fsmithredthanks for testing20:00
clorti try to cat file | nc to another computer but it doesn't end at eof20:11
clortah -q 020:13
clortreading from microsd, sending to ssd, over usb3 network with netcat i get 11.1MB/s20:15
clortreading from microsd to dev null i get 20.9MB/s20:20
deadromhi20:24
deadromhow different is devuan from debian, how alike? is stable production stable?20:27
masondeadrom: Very similar. Most packages are built by Debian, except those that have to be forked because they require systemd.20:28
ErRandirmy system is definitely production stable. My only time I do a reboot is when there is a power outage.20:30
clorttoo many variables between use-cases for blanket statements21:26
clorti haven't noticed any drawbacks vs debian for myself21:27
sgagedeadrom: one caveat re: repos. Debian's 'testing' becomes 'stable'21:31
sgagesome time before Devuan. E.g., currently, Devuan testing is tracking21:32
deadromumm, no, did not get that21:32
sgageDebian testing (bullseye) (Devuan testing is chimaera)21:32
sgageWhen bullseye becomes stable, chimaera will still be tracking it,21:33
sgagealthough it will still be Devuan's testing.21:33
sgageLong and short - use the names (ascii, beowulf, chimaera) in21:34
deadrombut Devuan has its own repos it sticks too?21:34
sgagesources.list instead of stable/testing21:34
deadromok21:34
sgageDevuan has its own repos, but if apt requests a file that did not in21:34
sgageany way have to be tweaked to work with systemd, the magical amprolla21:35
sgagegets it from the Debian repo. If the package has -devuan in the name21:36
sgageit has been forked by Devuan and is on their own servers.21:36
sgageplenty of info on devuan.org and the forum. If you21:37
sgagewant to experiment with Devuan, it is worth understanding the model21:37
sgageof how the packaging system works.21:37
deadromok, thanks21:39
golinuxdeadrom: How devuan repos work: https://dev1galaxy.org/viewtopic.php?id=319221:41
danuanwondering if it would be safe to dd backup a mounted  system disk from singleuser runlevel. usually i boot off usb to do a full system dd image , but what about automatic switch to runlevel 1 remount ro run dd and back to normal runlevel21:58
danuanand yes i do rsync also , but its nice  to have a ready to go identical disk21:59
fsmithreddanuan, you have to exclude some things if you want to boot.22:01
fsmithredanything that doesn't exist when the machine is turned off should be excluded22:01
fsmithredif you want to dd the whole drive, boot from usb like you already do22:02
danuanexclude in a dd ? and  point is not to turn off the machine , do it while it is running22:02
fsmithredno, exclude with rsync22:03
danuanohh yes i know22:03
fsmithredor exclude with tar22:03
fsmithredor dd a hibernated image?22:03
fsmithredbut that involves off22:03
danuanbut the actuall question, does that seem safe ? dd a readonly mounted system ? ive never done dd on mounted running system22:05
fsmithredHow will you bring it up if you ever need to use that image?22:06
fsmithredIt already thinks it is up and running.22:06
danuanto backup, without shutting down22:07
danuannot to replace a running system22:07
fsmithredyou just want to back up data?22:07
fsmithrednot the OS?22:07
danuanno the whole system disk22:08
danuanbackup with dd while it is running22:08
fsmithredand do you expect to ever use that backup image to restore to disk and then run that system?22:08
danuanyes22:08
fsmithredhow can you boot an already running system?22:08
fsmithredthat's what your image will be22:09
fsmithredI'm talking about after you restore the image22:09
danuanbackup running system without shutdown , and off course reboot when need to restore22:09
fsmithredas it starts to reboot, it will see stuff that should not exist22:10
fsmithredI think you'll need to back up the contents of memory and restore that, too. I don't even think that's possible.22:10
danuanahh i think i get it , i am trying to backup a running state22:10
fsmithredyeah22:10
fsmithredall of /sys /proc /dev and /run should be empty22:11
fsmithredand I'm not sure what else22:11
fsmithreda different approach would be to make a bootable live-iso of the system using refractasnapshot22:12
fsmithredand include refractainstaller, so you can install it if you need to restore22:12
fsmithredback up all your data separately, so you don't make a huge iso22:12
fsmithredthat way, it doesn't even need to be restored to the same hardware.22:13
danuanok, i get it , not the greatest idea22:13
danuanwill stick with periodic dds from shutdown state and rsyncs to get back to latest22:13
fsmithredI've done the dd method for a whole drive, and it is nice. Just attach and boot the copy if you need to.22:13
danuanyea its great untill you leave both drives attached and then it can mount some partitions from one drive soem from other as uuids match :)22:14
fsmithredwhat you're doing makes sense. OS doesn't change that often.22:14
fsmithredlol22:15
fsmithredI found out that happens with lvm, too22:15
fsmithredif the names match22:15
fsmithredI need to go outside. bbl.22:16
n4dirwhenever i backup with the rsync command  from arch.wiki, it rsyncs "swap" file too (swap iirc). I don't remember that exactly though. Else their excludes seem to be what does it22:22
n4dirwhenever i backup with the rsync command  from arch.wiki, it rsyncs "swap" file too (swap iirc). I don't remember that exactly though. Else their excludes seem to be what does it22:22
n4dirwhenever i backup with the rsync command  from arch.wiki, it rsyncs "swap" file too (swap iirc). I don't remember that exactly though. Else their excludes seem to be what does it22:22
n4diroh my god. Sorry folks22:22
syco-man rsync22:29
danuanexclude paths are relative , i ran it to that rsyncing home dirs trying to exclude .cache , needs a bit of thinking22:30
danuanrelative to current things you are trying to rsync22:30
danuanfsmithred ps dd is not rsync so i think that /sys /proc /dev/ /run would not be backed up as they are not on the actual hard filesystem  just virtual one22:32
n4dirah yeah, cache, that sucks too22:40
n4dirsyco-: why would man rsync help with that, or with what you think it might help?22:41
fsmithreddanuan, interesting idea. I've never tried it.22:50
danuansound like a perfect test for qemu-kvm  a script that  switches runlevel , remounts ro does a dd backup to a drive or an image and change runlevel back again , and  then see if that image would boot normaly22:52
frej00it should be utterly fine22:52
frej00It would be the same thing as a sudden power outage, and then booting up the machine later22:53
danuanyesnot a sudden as all caches would flush normaly when going ro22:54
fsmithreddoes it even need to be remounted ro?22:55
frej00it would be wise22:55
frej00otherwise things could be inconsistent22:56
danuanyes , otherwise you could just dd a fully running system and hope for fsck to fix it later from midwrite files and such things22:58
danuanfsmithred and frej00 , just tried it under qemu-kvm ,  seems to have worked just fine , boots to a new image without problems23:34
fsmithredcool23:34
frej00sweet23:34
danuanmakes me wonder now , for shits and giggles while it is under ro  is it possible to switch /dev/drive1 to /dev/drive223:35
fsmithredyou mean like hotplugging drives?23:36
danuanlike after you do dd copy while in single user , switch the running system from one drive to the other and bring it back up to normal runlevel23:37
danuanjust for experiments sake23:37
fsmithredhow do you switch which drive you're running?23:37
danuando not know yet , but interisting to see if i can23:38
DHEthe command is pivot_root however programs running from the old drive are still running from the old drive. might be a problem with pid 1 and require an init reload23:38
danuanbut running while mounted ro in single user and after dd copy drives are identical23:39
danuanso it is possible to switch system drive on a running system then ?23:39
DHEyes, but it's a fair amount of work on its own23:39
onefangThere will be a bunch of things with open files on the old system drive.23:58
DHEhopefully in single user mode there's little more than init (which should be reloaded) and the shell you are using for single user mode which can also be reloaded. but anything else will likely be a concern23:59
danuancannot be that easy  i just typed mount /dev/sb1 /  and it overmounted old /dev/sda123:59

Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!