| asdflkj | I’ve been trying to install Devuan on a VPS. I gave Vultr the URL of the Princeton mirror’s server ISO, let it upload to their cloud, attached it to my VPS, and booted. I connected via novnc and entered the expert install menu (I wanted to install without nonfree firmware) and saw the “Check the CD-ROM(s) integrity option, so I ran it and … the screen turned red because isolinux.bin | 00:03 |
|---|---|---|
| asdflkj | “failed the MD5 checksum verification”. | 00:03 |
| asdflkj | so I repeated the whole thing with the netinstall iso, and got the same error | 00:03 |
| asdflkj | “[!] Check the CD-ROM(s) integrity” | 00:04 |
| asdflkj | “Integrity test failed” | 00:05 |
| gnarface | the latest netinstall iso? | 00:06 |
| asdflkj | https://mirror.math.princeton.edu/pub/devuan/devuan_beowulf/installer-iso/devuan_beowulf_3.0.0_amd64-netinstall.iso | 00:06 |
| fsmithred | I thought we found a workaround for that problem. | 00:06 |
| gnarface | did you checksum the iso before uploading it to the VPS, asdflkj? | 00:07 |
| gnarface | or do i understand it right that you told the vps to download it directly? | 00:08 |
| asdflkj | the latter | 00:08 |
| gnarface | hmm, any way to make it re-do? | 00:08 |
| gnarface | or for that matter make it checksum it before booting it? | 00:08 |
| asdflkj | Vultr gave me an MD5sum, but the mirror only has a SHA hash | 00:09 |
| gnarface | i mean, it's probably a bug but you wouldn't be the first person to get a corrupted download | 00:09 |
| gnarface | it's rare but it happens, it's even happened to me | 00:09 |
| fsmithred | the sha256sum posted should match what you get on the iso | 00:10 |
| fsmithred | the md5sum of isolinux.bin won't match because mkisofs changes that file when the iso is created | 00:10 |
| asdflkj | what seems really weird to me is that it happened for the server iso and the netinstall iso I downloaded ~ a week later | 00:10 |
| fsmithred | I guess we haven't fixed it. | 00:10 |
| fsmithred | it'll happen on all the installer isos, I'm pretty sure | 00:10 |
| fsmithred | Here's a discussion about it if you're interested. There's no fix in this thread. https://dev1galaxy.org/viewtopic.php?id=3145 | 00:12 |
| fsmithred | asdflkj, a week later doesn't matter. The isos were made around six months ago. | 00:13 |
| fsmithred | new isos are coming soon. | 00:13 |
| asdflkj | hmm, it’s pretty concerning to me that I can’t verify no one tampered with the file. kind of defeats one of the points of avoiding systemd | 00:17 |
| fsmithred | sure you can | 00:17 |
| fsmithred | check the sha256sum against the signed sha256sum file where you got the iso | 00:18 |
| fsmithred | sha256sum <filename> | 00:18 |
| asdflkj | I guess I’ll have to install Devuan first and then run that to tell Vultr isn’t modifying it | 00:19 |
| fsmithred | sorry, I don't understand | 00:20 |
| asdflkj | the iso is in Vultr’s cloud, I don’t have it locally to hash | 00:20 |
| asdflkj | it is a bit comforting to know this isn’t just me having the issue, so thanks for that | 00:21 |
| rrq | if you can get a shell you can run sha256sum there | 00:21 |
| rrq | before installing | 00:21 |
| rrq | sha256sum < /dev/sr0 | 00:21 |
| rrq | do you have C-A-f2 ? | 00:22 |
| asdflkj | no, but I can get a shell | 00:22 |
| rrq | also good | 00:22 |
| asdflkj | I’m hashing /dev/sr0 right now | 00:23 |
| rrq | 5844...7523 | 00:23 |
| asdflkj | got it! thanks | 00:24 |
| asdflkj | 5844e45dc6421c25dfc9fb25df9d57af8fadf12a97a2a4e0ae1931c4c3217523 | 00:25 |
| asdflkj | 5844e45dc6421c25dfc9fb25df9d57af8fadf12a97a2a4e0ae1931c4c3217523 | 00:26 |
| asdflkj | matches | 00:26 |
| rrq | yes that'd be the published devuan_beowulf_3.1.0-RC_amd64-netinstall.iso | 00:27 |
| rrq | nope | 00:28 |
| fsmithred | 3.0 | 00:28 |
| rrq | my copy and paste is wrong | 00:28 |
| rrq | devuan_beowulf_3.0.0_amd64-netinstall.iso | 00:28 |
| fsmithred | I got the same | 00:28 |
| fsmithred | here | 00:28 |
| asdflkj | done, ^D'd the shell, now I just have to figure out how to do as normal and easy a server install as possible while ideally not getting any non free firmware (none of that should be needed for a server, right?) | 00:29 |
| fsmithred | non-free is usually needed for hardware - wireless, graphics cards top the list | 00:29 |
| rrq | a Vultr VPS shouldn't need any non-free | 00:29 |
| fsmithred | so no | 00:30 |
| fsmithred | I recommend unchecking everything except standard system utilities, and I guess you want ssh-server too | 00:30 |
| fsmithred | then add what you want after you reboot into the new system | 00:30 |
| n4dir | and make sure you secure ssh-server if you got it anywhere but in the LAN | 00:31 |
| n4dir | i didn't follow that closely, but it might be something to keep in mind | 00:31 |
| fsmithred | oh yeah, the default setting is to use auth keys now | 00:31 |
| n4dir | hmm. then it seems good. Not on the "raspian" i just installed. | 00:32 |
| fsmithred | oh, maybe that's just for root | 00:32 |
| n4dir | they also don't have that root-path madness, it seems | 00:32 |
| rrq | I think the default sshd config accept password login for non-root users | 00:33 |
| fsmithred | yeah | 00:33 |
| n4dir | this way or that way, if installed with taskfel it might be an idea to "check" it, if running on a VSP (VPS? something) | 00:33 |
| asdflkj | I’ll make sure to disable password login, right now I just need to figure out how to install Devuan | 00:34 |
| n4dir | asdflkj: sorry for distracting from the real issue. back to idle | 00:35 |
| asdflkj | n4dir: no problem, good advice | 00:35 |
| asdflkj | I think my locale, keyboard, etc. are standard (US), so do I just choose “Detect and mount CD-ROM”? | 00:36 |
| n4dir | :-) | 00:36 |
| rrq | I alwasy do non-expert install :) ... but that should start it off I think | 00:36 |
| asdflkj | yeah, I’m definetely not an expert. I just don’t want nonfree stuff | 00:37 |
| asdflkj | maybe I should just do non-expert and delete the firmware afterwards | 00:37 |
| n4dir | sure most easy solution | 00:38 |
| n4dir | (that far my idle promise goes ... ) | 00:38 |
| rrq | should be fine ... no non-free gets installed as a default, except that the sources.list will have that section enabled | 00:38 |
| n4dir | i recall expert mode to be mainly shitloads of more "clicks". Very time-consuming, but sure not hard | 00:38 |
| asdflkj | rrq: great, I think I use it and save myself those “clicks” | 00:39 |
| rrq | the VPS h/w model is pretty standard execpt having virtio ethernet controller, scsi controller and memory ballon | 00:40 |
| rrq | those modules are not non-free either | 00:40 |
| asdflkj | n4dir: no need to be idle, this is my first server ever and if I hadn’t happened to know to disable password login it might end ugly-ly (how do you say that‽ lol) | 00:40 |
| n4dir | sure, but one problem after the other. Anyway: good luck, fun, and all that | 00:41 |
| fsmithred | fwiw, on the install I did today, contrib and non-free are in the commented cdrom lines, but only main is in the active lines in sources.list | 00:43 |
| fsmithred | but that's a newer iso. I don't know if that was changed. | 00:44 |
| rrq | right; non-expert netinstall only gets the "main" section set up | 00:56 |
| FlibberTGibbet | hi, just installed beowulf on my new machine. have amd 4650G cpu -- "vega 7" inbuilt grahics. have installed the non-free firmware etc, the amdgpu and radeonn drivers -- still stuck in console... | 15:51 |
| FlibberTGibbet | according to lsmod neither of those drivers is loaded against 'video' | 15:51 |
| Joril | firmware-amd-graphics ? | 15:52 |
| FlibberTGibbet | latest version, yes | 15:52 |
| FlibberTGibbet | and libdrm-amdgpu1 | 15:52 |
| FlibberTGibbet | plus mesa and vulkan stuff | 15:52 |
| Joril | mmh found a post mentioning the kernel parameter amdgpu.exp_hw_support=1 | 15:54 |
| Joril | not sure if it could help | 15:54 |
| FlibberTGibbet | worth a try, thanks! | 15:56 |
| Joril | Hope it helps :) | 15:59 |
| FlibberTGibbet | sadly not :( | 16:03 |
| Joril | Are you running the "stock" kernel or one from backports? | 16:12 |
| gnarface | FlibberTGibbet: that hardware might be new enough to need the backports kernel, firmware, and mesa versions | 16:16 |
| asdflkj2 | my devuan installer is looking glitchy: http://0x0.st/--hj.png | 16:40 |
| hemimaniac | asdflkj2: I see the low memory mode in the left, RAM bad? is this a really old machine? | 16:45 |
| hemimaniac | did you verify the .iso after download | 16:45 |
| asdflkj2 | this is the VPS I was asking about yesterday | 16:49 |
| asdflkj2 | I went to sleep part way through installing | 16:50 |
| asdflkj2 | I had chosen the settings for full disk encryption before bed | 16:50 |
| asdflkj2 | then I confirmed them and let it install this morning | 16:51 |
| asdflkj2 | the dialog asking if I wanted to scan more disks looked like that | 16:52 |
| asdflkj2 | but it still let me choose not to | 16:52 |
| asdflkj2 | and went to the screen I linked to | 16:52 |
| asdflkj2 | but when I saw it still looked glitchy I got worried enough to post it here | 16:53 |
| gnarface | has anyone had problems with the shader cache size on amdgpu? | 18:05 |
| gnarface | docs suggest it defaults to 1GB, which should be enough, but i'm only seeing about 100MB on disk, and experiencing a performance regression that matches the symptoms for shader cache failure on nvidia | 18:06 |
| gnarface | could be coincidental | 18:07 |
| gnarface | but i figure someone else might have noticed | 18:07 |
| Guest70 | should i purge my xfce desktop before upgrading to ceres | 18:35 |
| Guest70 | i used the live iso to install and i wasn't able to do a minimal install | 18:36 |
| theManPager | i was stupid and decided to manually rename my user account | 19:08 |
| theManPager | i changed the username and home directory strings in /etc/password | 19:08 |
| theManPager | and i'm checking the /etc/group file | 19:08 |
| theManPager | do i just replace all cases of the old username with the new one i want | 19:08 |
| gnarface | that will probably work for the filesystem rules, but some of your user's config files may have got the old username into them statically... you might want to grep | 19:17 |
| Wonka | Err:7 http://deb.devuan.org/merged testing-security InRelease | 19:26 |
| Wonka | 403 Forbidden [IP: 2a02:2a38:1:400:422a:422a:422a:422a 80] | 19:26 |
| Wonka | wot? | 19:26 |
| markthegoat | using search and replace with vim in /etc/shadow, /etc/gshadow, /etc/passwd and /etc/group made this work for me | 19:28 |
| markthegoat | idk if i missed any config files though | 19:28 |
| markthegoat | i didn't know grep did search and replace | 19:29 |
| gnarface | well, it doesn't really, but it can give you line numbers and file names | 19:29 |
| gnarface | then you can manually replace or whatever | 19:29 |
| gnarface | if it's a fresh install it's unlikely to find a lot of such incidents | 19:30 |
| gnarface | but if you're carrying over hundreds of ~/.* files from an old home directory, god only knows... | 19:30 |
| markthegoat | oh no it's a fresh install | 19:30 |
| gnarface | mostly that's only likely to sabotage userspace stuff anyway, but if you don't know about it it can be maddening | 19:31 |
| gnarface | especially if it's something like years later pulseaudio is telling you you're not you and you can't remember why that could be | 19:31 |
| markthegoat | hm | 19:31 |
| markthegoat | alright so grep oldname in /etc/ should check for this right? | 19:31 |
| gnarface | grep -rni 'oldname' /etc | 19:31 |
| markthegoat | alr | 19:31 |
| gnarface | grep -rni 'oldname' /home | 19:31 |
| gnarface | should spit out a list of file names with line numbers and the matched line in question, or just nothing if you're clean | 19:32 |
| markthegoat | came up in hostname bc my old name was the same as my hostname | 19:34 |
| markthegoat | also comes up on /etc/hosts as the localhost | 19:34 |
| markthegoat | so i think i'm good | 19:34 |
| markthegoat | at least for /etc | 19:35 |
| markthegoat | in /home i see a lot of entries in the refracta installer log | 19:36 |
| markthegoat | and in .x session errors, but that makes sense bc when i changed my home dir name, the desktop environment disappeared, leaving only the windows open | 19:37 |
| markthegoat | idk what dbus-update activation environment does but it seems like it sets the user account up | 19:39 |
| markthegoat | and that went ok when i logged out and the logged in again | 19:39 |
| markthegoat | it also had some issues with .ICEauthority and stuff | 19:40 |
| markthegoat | everything is fine though | 19:40 |
| markthegoat | so | 19:40 |
| markthegoat | i'm not sure if i should worry about it | 19:40 |
| gnarface | nah, probably not | 19:42 |
| gnarface | it's probably fine | 19:42 |
| markthegoat | yeah they were just in the error logs | 19:44 |
| conifer | hi, I have a couple of unrelated questions. Q1 - I reported an odd issue on the forum some, uhh, half a year ago, and I found a workaround since then | 19:52 |
| conifer | should I add it to my post, or such thread necromancy would be frowned upon? | 19:53 |
| conifer | Q2 - I installed a tool that relies on docker, but I only use it once in a blue moon. can I make docker only run when it's needed, instead of starting with each boot? | 19:55 |
| gnarface | conifer: check to see if it made it into the bug tracker | 19:55 |
| gnarface | for docker not to run on every boot, if it doesn't have it's own config flag for that (check /etc/defaults/, i dunno) you can rename the /etc/rc?.d/* symlinks pointing to it's init script | 19:56 |
| conifer | you mean debian bugtracker? I don't think so, it was kind of mystery bug | 19:57 |
| gnarface | (you an also use a tool like sysv-rc-conf or update-rc.d to automate that, but renaming them by hand to start with a "K" instead of a "S" is easy, if tedious) | 19:57 |
| gnarface | oh, well i'd necro the post just for posterity but i don't moderate that forum, so i dunno if that'll get you flak | 19:58 |
| gnarface | but no, i don't mean the debian bug tracker, i meant bugs.devuan.org | 19:58 |
| gnarface | if it's something specific to a devuan-forked package, or a package that might need to get forked specifically for devuan, then people are probably gonna want the info | 19:59 |
| gnarface | if it's something that also affects debian there's little that can be done | 19:59 |
| conifer | it was related to apt not recognizing repository keys, but I couldn't figure out what was up, so not sure if anyone could reproduce it | 20:01 |
| markthegoat | had some trouble installing weechat | 20:12 |
| markthegoat | i think there wasn't a ruby thing on devuan's repos | 20:12 |
| markthegoat | i'll have to try again once i've switched to ceres | 20:12 |
| conifer | gnarface: I found I have a file /etc/init/docker.conf that includes | 20:27 |
| conifer | start on (filesystem and net-device-up IFACE!=lo) | 20:27 |
| conifer | stop on runlevel [!2345] | 20:27 |
| conifer | will this clash with the renaming in /etc/rc?.d ? | 20:28 |
| gnarface | conifer: well, "clash" isn't the right connotation, but yes, basically renaming the symlinks will supersede that config line. You should use the config line, don't mess with the symlinks in this case. | 20:36 |
| conifer | how do I change it to only run docker on-demand? | 20:41 |
| conifer | anyway, Q3 - in mate system monitor and xfce task manager I can see the cpu and memory usage of each app. I'd like to view how much network traffic each app generates | 20:42 |
| conifer | is there a program that would let me see it? doesn't need to be gui | 20:44 |
| gnarface | conifer: if you only want docker to run on demand, you'd want to configure it to STOP in all runlevels (not start) - that config line you pasted seems to be using "!" in the traditional form as a negation operator. so it's saying stop in not all the runlevels (i know, it's weird) | 21:05 |
| gnarface | conifer: for per-program bandwidth usage check out jnettop | 21:06 |
| conifer | so I should leave the "start" line as it is, and only remove the negation in the "stop" line? | 21:08 |
| gnarface | i don't know, what does the start line say? | 21:08 |
| gnarface | you might have to change both, sorry i'm not a docker expert | 21:08 |
| gnarface | but maybe all you have to do is move the "!" from one line to the other | 21:08 |
| gnarface | also it's listing runlevels 2, 3, 4, 5... which is basically all of them but just fyi you're only ever going to use #2 | 21:10 |
| gnarface | redhat and derivatives do different stuff with the runlevels but debian just puts everything in #2 and reserves the others for your own customization | 21:10 |
| conifer | ok, so you mean I should put the ! in the "start" line? where exactly? it doesn't have runlevels, I pasted it as it is | 21:13 |
| conifer | or should I rather consult docker people? | 21:13 |
| gnarface | oh i see | 21:13 |
| gnarface | that IS the start line and the stop line you're saying | 21:14 |
| gnarface | well, you SHOULD read the docker docs, yes. but i recommend you just try removing the "!" from the stop line to see if that's enough | 21:14 |
| gnarface | if it's programmed so the stop rules supersede the start rules, then that should be sufficient | 21:15 |
| gnarface | otherwise you'll have to figure out what passes for a null set in the context of that start line | 21:15 |
| gnarface | or just feed it an impossible situation | 21:16 |
| gnarface | (like start on an interface you don't have or !filesystem or something i dunno... yea reading the documentation is the smart approach) | 21:16 |
| gnarface | the syntax they're using shows elements of regexp and boolean operator awareness, but i would be wary of assuming too much | 21:18 |
| conifer | OK, I'll either try to get more information, or try removing the ! and see if it works | 21:21 |
| conifer | thanks for your help! | 21:22 |
| gnarface | no problem | 21:22 |
| gnarface | good luck and happy friday :) | 21:22 |
| conifer | oh, and concerning my Q1 - do you know if the forum mods hang out here? so I could ask them how to handle my old post? | 21:24 |
| gnarface | golinux: ^ | 21:24 |
| conifer | thanks, enjoy your weekend! :) | 21:24 |
| golinux | Yes? | 21:24 |
| golinux | conifer: PM me | 21:25 |
| golinux | I haven't be following this channel very closely. | 21:25 |
| conifer | hi, I reported an odd issue half a year ago or so | 21:25 |
| conifer | gnarface: sorry for bugging you again - docker folks told me basically to set it to start never. should I literally make the docker.conf say "start never"? or what is the correct sysvinit syntax? | 22:04 |
| gnarface | conifer: uh... i honestly can't tell you for sure if they meant to literally put the word "never" in the config file on the start line. i *can* tell you the docker project generates a disproportionate amount of helpdesk noise, which has negatively impacted my opinion of it without having ever used it, and that the sysvinit "syntax" is to just rename all these symlinks so they start with a "K" instead of an "S": ls -l | 22:07 |
| gnarface | /etc/rc?.d/*dock* | 22:07 |
| gnarface | conifer: (note that i'm assuming the name of the init script for docker contains the word "dock" in it, and that it's the only thing on your system that does... two possibly flawed assumptions you should really double-check yourself) | 22:08 |
| gnarface | you don't even have to double-check it yourself, in fact. if you /msg me the output of that ls -l i'll double-check it for you | 22:09 |
| conifer | docker people say this needs to be done outside of docker itself, at sysvinit level | 22:09 |
| gnarface | ok, do the symlink then | 22:09 |
| gnarface | symlinks | 22:09 |
| gnarface | they just point to a script in /etc/init.d/ | 22:10 |
| conifer | I already did the renaming when you first advised it, then I noticed the /etc/init/docker.conf file | 22:10 |
| gnarface | or they should anyway | 22:10 |
| gnarface | ah i see | 22:10 |
| conifer | and was going to undo the renaming | 22:10 |
| gnarface | ah i see | 22:10 |
| conifer | to do it in a less-hacky way | 22:10 |
| gnarface | well i agree, that's what i'd want to to too. it's weird that they go through all the trouble of putting such complex rule syntax in their config and not supporting an "off" state | 22:11 |
| gnarface | in fact so much so that i'd hesitate to even bet on it not being possible | 22:12 |
| gnarface | s/to to too/to do too/ | 22:12 |
| conifer | well, I had the impression they thought it was weird for devuan & sysvinit to do this through such complex rule syntax in the config file :P | 22:13 |
| * gnarface shrugs | 22:13 | |
| conifer | so maybe this is how maintainers handle the docker package for debian/devuan? | 22:14 |
| gnarface | yea it could be non-standard | 22:14 |
| gnarface | i don't know, but that is a thing that distro-native versions of stuff often do | 22:14 |
| gnarface | where'd you get that docker package? is it a devuan-forked one? | 22:14 |
| gnarface | in most cases, it's gonna be something debian added | 22:15 |
| fsmithred | Looks like there is /etc/default/docker | 22:15 |
| gnarface | oh | 22:16 |
| conifer | the tool I wanted to use suggested to use the docker repo as it is fresher than debian's | 22:16 |
| fsmithred | that might have on/off | 22:16 |
| gnarface | if there is, there's probably a flag to disable it in there | 22:16 |
| fsmithred | it's in docker.io package | 22:16 |
| conifer | so I did that, so probably made things less-standard | 22:16 |
| fsmithred | and FTR I have no clue about any of this | 22:16 |
| conifer | I have a /etc/default/docker, but there isn't much in it, and it's all commented out | 22:17 |
| fsmithred | nothing to disable? | 22:18 |
| gnarface | well read it ffs | 22:18 |
| gnarface | it was intended to be read | 22:18 |
| conifer | no on/off things | 22:18 |
| conifer | just proxy settings, temp files location etc | 22:18 |
| gnarface | bummer | 22:18 |
| conifer | gnarface: I did when you first mentioned it! | 22:19 |
| gnarface | sorry, you didn't say anything so i just assumed you ignored that part | 22:20 |
| conifer | I saw it's a dead end so tried the other things | 22:20 |
| gnarface | i talk alot and most people read about half of it, it's not your fault | 22:20 |
| fsmithred | I tuned in a little late and didn't read everything. What was problem with disabling the symlinks? | 22:21 |
| fsmithred | that's what I do with services I only want to use occasionally. | 22:21 |
| conifer | well, maybe I could add some option to this file, but it's not obvious to me, not as simple as changing on to off | 22:21 |
| fsmithred | with easy checkboxy method sysv-rc-conf | 22:21 |
| conifer | once in a blue moon I use a tool that it relies on docker, I want it to only start when needed, not on every boot | 22:22 |
| fsmithred | about as often as I want to run samba | 22:22 |
| fsmithred | does /etc/init.d/docker respond normally to stop|start|restart? | 22:23 |
| conifer | how do I invoke it? | 22:25 |
| fsmithred | oh | 22:26 |
| fsmithred | /etc/init.d/docker stop | 22:26 |
| fsmithred | or start | 22:26 |
| fsmithred | or with nothing and it should tell you what words you can use | 22:26 |
| conifer | I was thinking systemctl or whatever | 22:26 |
| fsmithred | lol | 22:26 |
| fsmithred | service docker stop | 22:27 |
| conifer | service docker stop worked | 22:27 |
| fsmithred | and the sysvinit people had the sense to put the actual command at the end | 22:27 |
| fsmithred | so you can just up-arrow, backspace a couple | 22:28 |
| conifer | sorry, I'm a pretty basic person and don't know much about stuff | 22:28 |
| fsmithred | and change stop to start | 22:28 |
| fsmithred | ps ax |grep dock | 22:29 |
| fsmithred | see if anything is left running | 22:29 |
| fsmithred | so you could disable docker and just start it manually when you need it | 22:29 |
| conifer | fsmithred: could you tell me more about the sysv-rc-conf thing? | 22:39 |
| conifer | I already renamed the symlinks manually, but if there is a nicer way to handle it... | 22:40 |
| gnarface | just run it | 22:41 |
| gnarface | install and run it | 22:41 |
| gnarface | should be self-explanatory | 22:41 |
| conifer | it is, indeed | 22:55 |
| conifer | very user friendly :) | 22:55 |
| conifer | thank you guys once more for your help and patience! | 22:57 |
| conifer | have a nice weekend! | 22:57 |
| fsmithred | :) | 22:57 |
Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!
