libera/#devuan/ Wednesday, 2023-03-15

unixbsdhello04:42
unixbsdarm64  wget -c --no-check-certificate   "https://mirror.leaseweb.com/devuan/devuan_ascii/embedded/devuan_ascii_2.0.0_arm64_raspi3.tar.gz"04:42
unixbsdwhere to find devuan ascii aarch64 (with --target=aarch64) not arm64 !! ??04:42
gnarfaceit's the same thing i think04:44
gnarfacewhy use ascii?04:44
gnarfacedo you need that old of a version?04:44
gnarfacethere are newer ones04:44
unixbsdyeah but just arm6404:45
unixbsdit is not aarch6404:45
gnarfacei'm pretty sure in this context they're the same thing04:45
unixbsdnot reaslly04:45
gnarfacecheck arm-files.devuan.org for newer stuff04:46
gnarfacealso fyi there's a #devuan-arm for arm specific issues04:47
minnesotagsSo.... Now Grafana Prometheus' "node-exporter" hard depends on systemd....18:02
rwpSigh.18:02
FatPhilDo I understand the docs correctly - I can't do full disk encyption from the live installer?18:18
DashiePieminnesotags: you WILL eat the bugs, you WILL be happy18:18
FatPhilJust bought meself a Lenovo X250, and windows shite needs purging from it. Easier said than done, took me about 20 attempts to even get into the bios setup.18:19
FatPhilwait, what? What, wait? "18:20
rwpCongratulations!  I know the previous generation debian-installer works.  https://www.devuan.org/os/documentation/install-guides/beowulf/full-disk-encryption18:20
FatPhil"3.2) Encryption: The installer can only encrypt root and home filesystems." and "3.3) Boot directory encryption: By default the boot directory will be encrypted. This is generally a good idea for full disk encryption setups." seem to contradict each other18:21
rwpI am thinking the live-boot installer also works too but that one needs to set up encryption by manual or other method.18:21
rwpI have never set up /boot to be encrypted.  I always assumed that /boot was needed to bootstrap to the encrypted system.18:22
FatPhilLast devuan install I did was a couple of years back, and, like all previous ones, was from the console-based dedicated installer image.18:22
rwpI have always used encryption with LVM with one PV so that LUKS only needed to decrypt one PV and then root and swap were LVs and needed only one passphrase.18:22
FatPhilI think that's the setup I have on all the other machines.18:23
FatPhilas per the "full-disk-encryption" docs, the chimaera ones look familiar.18:24
FatPhilhoorah for not too much progress!18:24
FatPhilbollocks, being summoned to the pub...18:24
FatPhilsnigger, the memcard rescue has just gone from ETA 12 mins to ETA 2 hours - I think it's hit some bumps.18:30
knofixhi all19:03
fsmithreddevuan live installer is refractainstaller, which can do full-disk encryption (i.e. with /boot as part of the encrypted root partition.)19:13
fsmithredat the options menu, select encryption for the root and do not select a separate /boot partition. Also, don't select a separate /home partition. That too will be part of the encrypted root. (no lvm with the live-installer)19:13
FatPhilI like separate partitions for different things, so I think I'll stick with the old installer19:34
FatPhilbut I've seen the beer list here, so that's definitely tomorrow's task19:37
FatPhilthere was a time, when spinning rust was common, and the kernel didn't have a sensible elevator algorithm for scatter writes, and RAM was tight so buffers were small, that just having lappies with one FS partition made sense.19:39
FatPhilbut none of those really hold anymore. so the old protections of not letting one idiot spoil the whole system by isolating where they can write still have some use19:52
FatPhili have had a thousand spambots hammer my SMTP and completely fill /var in a few days. didn't notice until the next day, because everything else just kept working.19:57
hagbardfail2ban can help a lot to keep the size of log files in check.19:59
FatPhilhell yeah20:00
rwp+1 for fail2ban but I am also assuming that logrotate is working to rotate and expire logs too.  Though maybe not fast enough.  Might need to adjust to be more agressive at expiring old logs.20:07
FatPhillogrotate always needs half a dozen slaps, every time I install a new system20:20
FatPhilI know one of my systems isn't cleaning things up correctly, but I've not felt the need to fix it.20:21
rwpI can mostly use the defaults provided in the logrotate package.  But I also have fail2ban which acts to keep the excess log noise down too.20:24
FatPhilthere are a few packages/services that have two modes - silent, or hyper20:28
FatPhilpostfix is one of my pet hates20:28
FatPhilevery incoming spam attempt (still about every 80s) causes about 8 loooong lines of logs.20:30
xinomilopostscreen would help with spambots20:31
FatPhilpostgrey works well for me20:31
xinomilodifferent thing, that too... +120:31
FatPhildelivery to users is only about 1/10020:31
FatPhildon't know postscreen, should look into it20:32
xinomilohttps://www.postfix.org/POSTSCREEN_README.html20:32
FatPhiljust the default paranoid filters in postfix removed 90-95& of the spam, and postgrey removed more that 90& of those that reached it.20:36
FatPhilI don't have a percent on my broken phone kbd20:36
FatPhillittle bit worried that the release page lists: "devuan_chimaera/                 14-Oct-2021 12:53"20:58
FatPhilit is 2023, stuff should have changed20:58
FatPhilwhat's the good old-fashioned debian "net install" image?20:59
FatPhil"installer-iso/" would have seemed to be it, as it's the only one with "install" in the name, but the "cd4" bit tells me no.21:00
FatPhilAnd everything else is "live" which was not a feature I need from an installer.21:01
FatPhilAnd, other issues aside, whose idea was it to use CSS to ensure that the thing I actually see is "devuan_chimaera_4.0.2_amd64_minimal-live.iso       10-Sep-2022 15:45    58"21:03
FatPhilrather than "devuan_chimaera_4.0.2_amd64_minimal-live.iso       10-Sep-2022 15:45    586M"21:03
FatPhilThe former is useless, the latter is informative.21:03
FatPhilapparently someone has decided that I only need to see 888 pixels on my 1920 pixel-wide screen21:06
FatPhilbecause >50% total blankness is the future21:06
rrqyou're looking for a chimaera installer iso?21:12
FatPhilI'm looking for the "netinstall", should be an image of ~200MB21:14
FatPhilall previous devuans I've installed, and all prior debians before that, have been via that route.21:15
rrqthat one is actually with the packages, on pkgmaster21:15
rrq(or a mirror, deb.devuan.org)21:15
fsmithredinstaller isos are in the installer-iso directory21:15
fsmithrednot with the minimal-live21:15
FatPhilwhat does "with" and "the packages" mean in that sentence21:15
rrqeg https://pkgmaster.devuan.org/devuan/dists/chimaera/main/installer-amd64/current/images/cdrom/gtk/mini.iso21:16
FatPhilfsmithred: Oh - you're right - I MIGHT HAVE NOTICES21:16
FatPhilD THEM HAD CSS NOT BEEN CREATED TO MAKE THEM NON-OBVIOUS21:16
FatPhilWell done web-designer, you've not just wasted my time, you've wasted fsmithred's too.21:17
FatPhilwow, they've bloated to "37" nowadays21:17
rrqyeah, we can't do much about your web client21:18
fsmithredFatPhil, I don't understand why the size is getting cut off on your screen. I see "586M" here.21:18
FatPhilIn that case, things are more fucked21:19
FatPhilbecause when I scroll the internal unnecessary scrolly thing, I see "vuan_chimaera_4.0.0_amd64_netinstall.iso         12-Oct-2021 10:48    372M"21:20
FatPhilbecause fuck "de"21:20
fsmithred1920 should be more than enough pixels21:23
fsmithredI only have 1600 here, and i don't even have my window maximized. No horizontal scrollbar here.21:23
FatPhilhttp://fatphil.org/tmp/what_part_of.png http://fatphil.org/tmp/this_is_useful.png21:24
rrqwhat's your zoom setting?21:25
FatPhilcorrect for my eyesight21:26
FatPhiland I just selected "view > zoom > reset" and nothing changed.21:27
FatPhilooops, ignore that - maybe in wrong window21:27
FatPhilnope, confirmed, 100%, reset changes nothing21:29
fsmithredctrl +/- ?21:29
fsmithredwhat web browser are you using?21:29
FatPhilthe last palemoon that let me have control over cookies21:30
rrqanyhow those *netinstall.iso are the chimaera ones21:31
FatPhilthank you, yup, that's what I'll grab21:31
rrqmy previous link is the smallest installation iso, which is built from the debian-installer package and that iso doesn't offer a "working system" without network21:35
rrqthe installer-iso isos are built slightly differently and fluffed up to offer a "working system" also without network (ne desktop of course)21:37
rrqne=no21:37
rrqthe *server.iso and *desktop.iso are the same installer, with more sideload.21:39
rrqthen, the "live" installers, which you don't want, are built in a third way, and they offer almost literally a WYSIWYG installation option on the non-intrusive "Try it out first" presentation. Certainly good for the less experienced, and handy as a rescue option.21:52
RhineDevilHello! I'm on devuan testing, I have a laptop with a Radeon HD 8210, recently if I load games or stuff using OpenGL or similar hardware acceleration, but later I see a video with mpv hardware acceleration, the system freezes23:15
RhineDevil*with mpv using VAAPI23:16
RhineDevilApparently firmware-amd-graphics wasn't updated, see you all later23:19

Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!