The officially official Devuan Forum!

You are not logged in.

#251 Re: Installation » New bpo Kernel Upgrade 6.10.11+bpo-amd64 fails to boot » 2024-11-10 03:59:00

xtrx-dkms is fixed in sid/ceres/unstable, either wait for somebody to punt it to backports or just do it yourself.

I cannot find anything on the web about this.

It literally took me longer to write this post than it did to find the information above.

Difficult to believe that I am the only one.

Why? You're running an uncommon driver for uncommon hardware, on a backported kernel.
Expect this class of problem with new kernels and out-of-tree drivers.

#252 Re: Devuan Derivatives » Darkness - ISO Devuan Testing + TDE for AMD64 » 2024-11-01 09:31:03

Tony45 wrote:

PW makes each and every distro/DE on distrowatch crackle like hell when playing Midi-files.

FWIW, pipewire works just fine with fluidsynth (via ALSA sequencer port) here, and on every distro I've used that packages those.
Timidity OTOH, AFAICT has been pretty much a zombie project since 2004.

#253 Re: Packaging for Devuan » about debian, a warning » 2024-11-01 09:19:10

usrmerge is a filesystem layout change, not some kind of "corporate" conspiracy. It's not really necessary and it breaks a bunch of old assumptions, but it's far from the end of the world. It sure doesn't need a "warning" for anyone who hasn't been living in a cave for the past 5 years.
It also has nothing whatsoever to do with 32bit support or non-x86 architectures.

OTOH, the only thing not adopting merged /usr really breaks is systemd (and compatibility with systemd-based distros), largely because that sprawling behemoth of feature-creep apparently can't keep it's tentacles out of things traditionally found under /usr and not needed to bring the system up... But that's not exactly a surprising development.

#254 Re: DIY » init bloat » 2024-11-01 08:57:05

How is this news (or "myth", "legend", "the truth", "nightmare", other infantile hyperbole in your link), or even particularly useful (beyond embedded systems with miserably small storage)?

Yes, you can compile in all the drivers you need and boot without dynamic /dev or early module loading. That's how it was done when compiling your own kernel was normal practice and booting from a floppy disk was a thing.
It's still quite possible to go that way, assuming you know what drivers you need to mount root. Systemd might make life difficult, but that's nothing new either.

I still have a bunch of Slackware 7 boot disks on my desk, and besides needing to pick the right one for your hardware (because that's the price for no initrd and a 1.4MB kernel), there's nothing particularly fun or novel about them... They're just minimal kernel images with disk controller and filesystem drivers compiled in.
So what? I mean it's trivial to boot even modern Slackware without an initrd, why the big writeup? That "guide" makes it sound like the dude just rediscovered fire or something roll

#255 Re: Desktop and Multimedia » Something rather bizarre regarding ram has happened, » 2024-09-15 10:39:41

some xorg program was using like 30+%

If it is indeed X using that much memory, xrestop may be of interest.

#256 Re: Packaging for Devuan » gksu is depreciated in Daedalus - can I still use it as .deb package » 2024-08-21 07:01:54

I would like to use it in scripts and not think about them.

Using unmaintained binaries from removed packages in scripts is the antithesis of "just forget about them". Sooner or later gksu will break (especially being GUI bloat linked against GTK), if you want reliable scripts use a supported method like pkexec.

If you must use gksu, at least port it properly (i.e. rebuild it against current libraries) rather than pulling in binary packages from an old release.

#257 Re: Other Issues » [SOLVED] Possible Malware » 2024-08-21 06:50:08

chkrootkit

False positives, read /usr/share/doc/chkrootkit/README.FALSE-POSITIVES.gz (and the other documentation).

Where can I find SCRIPTWHITELIST configuration?

In /etc/rkhunter.conf, of course.

I have no idea how to interpret these three.

The first is a list of files you should check out and whitelist if they're benign.
The second is chkrootkit being dumb, and is explained in the documentation.
The third is irrelevant, because you are not running OSX.

#258 Re: Installation » how restore default permissions root folder after copy OS to SSD? » 2024-08-20 11:20:09

copy os use midnight commander

A thouroghly terrrible idea, as is using any other TUI or GUI file manager for this. Use rsync or plain cp, in archive mode or with explicit --preserve= parameters.

needed sudo permissions for copy os

No kidding. Of course you need root.

chmod -R 775 *

Yeah, don't do that either, unless you want to completely bork permissions.

UPD
i am use this instruction for clone os to another drive
https://askubuntu.com/a/741727

That post details using 'cp -a' to copy files, not mc. roll

The easiest way to fix this is almost certainly just copying the system again, this time with the right tools and options. You did make and test a backup before starting, right?
Personally I suggest using rsync from a liveCD/USB, or at least single-user mode so there aren't too many open files. Then run it again so it can verify the copy is correct.

#259 Re: Installation » how restore default permissions root folder after copy OS to SSD? » 2024-08-16 10:39:41

You didn't mention how you copied the system. Did you preserve extended attributes (and in particular, POSIX capabilities)?
I have no idea how thunar handles user mounts these days (still GVFS?), but I wouldn't be at all surprised if there's a binary with CAP_SYS_ADMIN set to allow (un)mounting filesystems involved.

#260 Re: Other Issues » [SOLVED] I added myself to sudoers, so why do I still have to enter my password » 2024-08-09 13:59:04

man sudoers wrote:

     PASSWD and NOPASSWD

       By default, sudo requires that a user authenticate before running a command.  This behavior can be modified via the NOPASSWD tag.

#261 Re: Off-topic » Why cloud dependency and push updates is a bad thing » 2024-07-30 05:18:55

Dependence on cloud nonsense aside, this really comes down to crowdstrike's implementation:
* Falcon sensor is an old-school kernel driver (as opposed to running in a kernel VM, e.g. eBPF modules).
* It's also marked as boot-critical, so "safe mode" doesn't bypass it.
* It loads files (and potentially executable code too) from userland without sufficient input validation.
* It's written in C++, it's not memory-safe, and invalid data (in this case a bunch of literal nothing) in a definition update caused a null-pointer dereference.

IOW, this is a crowdstrike fuckup, and a pretty serious one at that. Whoever came up with the architecture for falcon sensor (at least on Windows) should be fired immediately.
Not only is this a fragile single point of failure, the apparent lack of input validation makes it a rootkit waiting to happen as soon as somebody manages to sneak in a compromised definition update.

There are ways to do something like this without producing a massive SPOF (or at least making it more easily recoverable), and this all stinks of arrogance and "infallibility culture" at crowdstrike.
Their big shiny selling point is "instant updates", and to achieve that they sidestepped driver validation and threw out decades of best-practice when it comes to running code in kernel space. This is ring-0 plug-n-play printer driver levels of "don't do that".
Perhaps it will wake their customers up to the peril of granting IDDQD rights to a bunch of chimpanzees.

AV vendors abusing their privs to do stupid things isn't remotely new, we've had gratuitous SSL tampering for years, we've had easily hijackable update mechanisms, and we've had products that decompress potentially malicious payloads in kernel-space, to mention just a few dumb ideas off the top of my head.
Surely by now somebody has realised that giving J.Random AV slinger god-mode in the name of "muh securitee" and "users are too stupid to be trusted" is a bad plan... Surely.

#262 Re: Freedom Hacks » Frustration with Mullvad » 2024-07-21 08:29:07

You started this @Zapper, with your "bumbling morons" comment. If you expect to be treated with "decency", first try being decent yourself.
Your ongoing tendency to throw gratuitous insults at anyone and anything you perceive as an out-group or an "organisation" is infantile and irritating.

The developers behind Mullvad owe you nothing, and have done nothing to deserve your bile. They provide you software, gratis, and even go so far as to host repositories of debian packages. What exactly have you done for the FOSS community, besides whine?

#263 Re: Hardware & System Configuration » (howTo) hibernate after automatic install? » 2024-07-20 12:09:06

Because no installer default can satisfy everyone? It's your system, you get to choose the disk layout.

As for triggering hibernation from the CLI, that would be either 'loginctl hibernate' (if you have [e]logind installed, which IIRC is the default setup) or 'pm-hibernate' from the pm-utils package.

#264 Re: Off-topic » Why cloud dependency and push updates is a bad thing » 2024-07-20 12:02:54

IME most of the time this kind of thing isn't really about control, it's about liability (at least in the corporate world).
If a company contracts an external provider to handle endpoint protection, veeps who know nothing about IT get to tick their "all practicable steps to protect customer data" and "certified industry standard solution" boxes. If anything goes wrong they can just point at (and potentially sue) $external provider, with no risk of blowback.
The bigger and more widely known the provider, the harder they can lean on the "industry standard" "we're doing what everyone else is doing" angle.

This is how we end up here, not because of some grand conspiracy (not to say they're not out to get you, mind) but because big IT knows they can exploit human laziness and risk-aversion for profit, and their corporate customers often like dealing with a monopoly because of the "safety in numbers" effect.

As for "cloud" more generally, my answer (both personally and professionally) is "go away"... Unless the rep brought biscuits, in which case I'll pretend to listen while I eat them*. It simply does not and can not meet my reliability, serviceability and redundancy requirements.

I don't like surprises, and if I really do need to call somebody at 3am to figure out why a critical system isn't working, I expect the answer to be "I'll be on site, with parts, in 30 minutes" not some phone droid with "looks like $cloud whatever is down, better file a ticket".
'tis the same reason I prefer hardware solutions over inscrutable software "fixes", and local contractors over megacorps with 15 layers of bumbling bureaucracy between their technicians and reality.

*the biscuits, not the rep... Though the reverse is often tempting.

#265 Re: Freedom Hacks » Frustration with Mullvad » 2024-07-20 10:55:20

its the librewolf approach that they don't do that annoys me. They could just make it so derivatives default to a debian release like bookworm . But they don't.

The only difference is that the librewolf download page gives you a lazy copy-paste command to run with a scrap of shell doing "if not [list of supported releases] then use ubuntu focal"... Which is something neither are in any way obliged to provide, and one anyone with two brain cells to rub together could implement themselves or fix manually by changing a single word in the resulting source line.

The reason you are getting flack for your post is that you are calling people "bumbling morons" for not spoon-feeding you. Grow up, and learn to deal with the fact that you are running a distribution with a small userbase and will need to make your own decisions when it comes to compatibility with third-party repositories.

That is fundamentally annoying.

So are people who get out of sorts and start slinging shit like a brat when they're not spoon-fed copy-paste solutions to every little thing.

debian derivatives default to debian codenames. Is that unreasonable?

Yes, expecting third-party developers to be aware of every derivative and which debian codenames it's compatible with is unreasonable. They're already providing you software for nothing, if you want to use their convenient repository too then figuring out which release is appropriate for your system is your problem.

Hell, librewolf doesn't "default to debian codenames" anyway. Had you made the effort to actually read that shell snippet you'd see they default to "focal" for any release not on their list, and that's not the right choice for devuan either.

To wit:

Attention. We only build LibreWolf for Debian 11/12, Ubuntu 20/21/22 and Mint 20.2/20.3/21. If you don't use one of those distros, the above commands will install the Ubuntu 20 build for you which may or may not work. If you want to manually choose a different distro's build, then change the first of the above commands to point at that distro. E.g. to install the Debian 11 build, run distro=bullseye.

What, pray tell, is so "frustrating" about applying the same logic to mullvad, and setting the codename yourself in mullvad.list, or wherever else you choose to put the source definition?

As for what mulvad stuff you can "get to show up", how about you go look at the contents of the repository you added... Or perhaps you expect somebody else to take care of that for you (and call them morons if they don't) as well?

#266 Re: Freedom Hacks » Frustration with Mullvad » 2024-07-20 07:09:02

As far as I can see, yeah.
i.e. a bunch of whining because copy-pasting commands without understanding what they do or checking the result doesn't work on Devuan...
Apparently needing to change the distro name yourself rather than being spoon-fed an inline if statement makes for "frustration times a million" and the mullvad folks "bumbling morons". roll

#267 Re: Freedom Hacks » Frustration with Mullvad » 2024-07-17 12:11:45

Zapper whining about "them", calling names, and crying "Oh, the huge manatee, this is terrible, won't somebody do something" rather than taking any kind of remotely productive action... What else is new roll

#268 Re: Freedom Hacks » A scientific test for resamplers. » 2024-07-13 21:08:12

it was detected by an OSS4/Gentoo user in a "blind test"

(emphasis mine) One anecdotal sample is barely a "test" at all, and not even remotely scientific.
Then you go on to claim that blind tests have problems, because the usual "bit-perfect" "exclusive mode" audiophool nonsense. roll

As for "old theory", I've been there, done that, (as well as built and tested plenty of proper HiFi gear) so I'm no longer gullible enough to get sucked into such arguments... I'm out of here, have fun.

#269 Re: Freedom Hacks » A scientific test for resamplers. » 2024-07-13 12:59:36

Further to^

If you cannot hear the difference between Petrov's dct and fft resamplers

Then any further testing is but a curiosity, because at the end of the day, differences you can't hear are irrelevant for anything you intend to listen to.

Human hearing sucks, and the vast majority of final reproduction equipment (i.e. speakers and their environment) sucks as well... because so long as the latter suck significantly less than the former, nobody will hear it and it doesn't matter.
Trivial differences in resampling are irrelevant, and unless you are doing digital mastering, so are bit depths >16 and sampling rates significantly above the Nyquist limit. Fight me.

#270 Re: Off-topic » End-to-End Encryption (E2E) is Dead » 2024-06-28 10:24:04

soren wrote:

Im not up to speed on my acronym's, what are these?

Shiny New Shit
Embrace, Extend, Extinguish

As for FOSS and systemd... systemd is FOSS, and while I don't particularly agree with the design or the attitude of the designer(s), that's not really what I was referring to.

#271 Re: Off-topic » End-to-End Encryption (E2E) is Dead » 2024-06-27 22:50:23

No real reason, mostly just more familiarity.
For a security-focused appliance (e.g. router / server etc) I'd probably pick OpenBSD, but last time I played with the desktop usecase FreeBSD had better hardware support and was easier to get the software I wanted installed.

#272 Re: Off-topic » End-to-End Encryption (E2E) is Dead » 2024-06-27 22:31:38

This is definitely bad news.

For people running proprietary black-box systems... Which is, at least for the most part, not us.

Video summary: Windows bad, Apple bad, Google bad, AI bad, everyone and their dog wants endpoint control and uses FUD and "think of the children" to get it.
IOW, corporate big-tech abuses their power and their users, and normies just don't care because herd-mentality and convenience. Same old, same old. *yawn*

All this really does is incentivise me to avoid buying SNS hardware (instead donating further to the FSF), and keep a weather eye on FreeBSD and OpenRISC in preparation for the day GNU/Linux finally falls to Microsoft EEE and the horde of clueless ex-windows users pushing non-FOSS software and non-FOSS attitudes.

#273 Re: Off-topic » Firefox is becoming too chrome like. » 2024-06-04 09:38:18

I'll waste my time fighting the search system for references just as soon as I see the same for claims of one specific wireless driver making a system more "private" or teddybears breaking WPA encryption. tongue

Examples of people conflating the freedom to choose your init with general anti-establishmentarianism and standing up to "them" (whomever that means this week) shouldn't be too hard to find around here though. Guess I could revisit it, when I'm done arguing about python 3.12 targets in gentoo that is.

#274 Re: Off-topic » Firefox is becoming too chrome like. » 2024-06-04 05:31:16

quickfur wrote:

in these days of IoT devices that come built in with WiFi connectors and other phone-home devices, you can't even be sure about privacy anymore even if you didn't personally connect your devices online: they can and do automatically connect themselves.

If they have a path to the internet at large, which they won't if you properly secure your wireless AP.
They could of course come with a cell modem, but that's relatively expensive and would require cooperation from a cellular carrier. Manufacturers of two-bit crap don't like to spend any more than they need to, and the reason many devices have onboard wifi is that it costs nothing because it's built into the SoC they're using.

The real solution of course is not to purchase IoT garbage to begin with, such things tend to be bottom-dollar never-patched security nightmares even on a good day.

quickfur wrote:

One of my son's stuffed teddy bears came with a built-in Wi-Fi interface that I didn't even know existed until someone managed to download a custom voice clip into it. It's only a small step from this to a toy that contains a hidden microphone and transmitter that uploads your conversations to some unknown server somewhere out there.

Yes yes, old news, such toys already exist (microphone included). Don't allow them to connect to your wireless (infrastructure), and don't have devices around that mindlessly try to connect to open networks in general (ad-hoc). Better yet, don't buy them to begin with.

Nobody makes talking teddy bears or "smart" toasters internet capable to spy on you, they do it because "cloud" is the cheapest possible way to implement the features they think will sell more units or because it allows them to milk you for some kind of subscription service.
The most effective thing you can do about this practice is to vote with your wallet and not buy such things.

zapper wrote:

My goal is more to protest

Riiiight. Who exactly do you think is noticing your "protest"? The same people whose "eyes" you are "opening" with constant whining and opining that "somebody" needs to do "something" about [childish adjective of the day] "evil" corporation?

Buying an off-the-shelf router and installing openwrt on it isn't protesting, the manufacturer made a sale and that's all they care about.
If you want to protest, go organise a protest.

If you ask me, the relentless ill-informed tinfoil-hat noise on this board is the biggest problem with Devuan right now. It's leading the wider community to view the whole distro as a "fringe OS for conspiracy theorists", and people are laughing at us. Please stop already, it's embarrassing.

#275 Re: Desktop and Multimedia » [SOLVED] Skype, snap and how to run on Devuan? » 2024-06-01 12:47:13

Fun fact, synaptic (2001) predates the introduction of the 'apt' command (2014). Also: mouse? where? *meow* I see no mouse (any more). tongue

Board footer

Forum Software