The officially official Devuan Forum!

You are not logged in.

#701 Re: Devuan » what's going on with aufs? » 2023-01-27 21:39:54

There is also aufs-dkms, aufs-dev and aufs-tools.

But as @Head_in_a_Stick mentioned, the kernel has overlayfs which provides "union mount".

You might also be interested in the overlay-boot package (in devuan experimental) which provides scripting that uses overlayfs together with netns and unshare to set up and run wafer-thin containers.

#702 Re: Hardware & System Configuration » git netfilter compile problem » 2023-01-25 04:01:40

If the git directory on your system has pathname /home/user/mygitworkspace you would remove that git directory with the terminal command sequence:

$ cd /home/user
$ rm -rf mygitworkspace

Technically, "rm" is the program to run, "-rf" asks for the command variation to delete stuff recursively and force deletion to apply also for read-only files/directories, and "mygitworkspace" identifies the top-level pathname of files and directories to remove.

#703 Re: Hardware & System Configuration » git netfilter compile problem » 2023-01-24 22:19:42

You should run

# nft -cf /etc/nftables.conf

repeatedly, and each time look at and correct only the first error, until that command no longer gives any output.

Thereafter you apply the corrected rule set with

# nft -cf /etc/nftables.conf

Hint: you current nftables.conf has 3 syntax errors.

#704 Re: Installation » why this solution not working on Devuan Chimaera? » 2023-01-24 06:17:11

@steve_v, that kind of opinionated aggression is totally uncalled for. You may consider this a warning.

#705 Re: Hardware & System Configuration » git netfilter compile problem » 2023-01-24 04:47:28

May I suggest that you don't want to compile any netfilter components?

What is your objective?

edit: why do you think that anything is missing from nftables?

#706 Re: Installation » "target_home" dir after installation? » 2023-01-22 20:16:54

Again, the desktop iso is installer (not refracta) + a package pool, and the pool1 iso is only a package pool.

The desktop package pool contains some complete desktop package collections and then topped up with 2500 "most wanted" popcon packages, whereas the pool1 package pool merely is the 5000 most wanted packages.

In both cases the choice collection is filtered against currently available packages (at building time), expanded to include the first-options Depends and Recommends, and also including first-option choices for any so called "pure virtual" packages.

#707 Re: Devuan » finit: new init system option for Devuan daedalus » 2023-01-22 11:38:50

Exciting stuff smile

sysvinit of course only does whatever /etc/inittab says it should do and one can have great fun as well editing that.

And you would find a rather extreme doing-nothing init in the overlay-boot package, where its startup relies on scripting that spawns desired services before entering its "init" (actually called "reaper") which merely reaps zombies.

#708 Re: Installation » "target_home" dir after installation? » 2023-01-22 04:36:55

devuan_chimaera_4.0.0_i386_desktop.iso is an installer iso for an i386 architecture installation, plus a package pool that includes all packages including dependencies for a number of desktop installations.

devuan_chimaera_4.1_0_amd64_pool1.iso is a package pool only iso that doesn't contain the installer software. It contains the 5000 "most popular" packages for amd64 architecture installations according to popcon.debian.org at the date of the creation of the iso, plus their "depends" and "recommends".

#709 Re: Installation » why this solution not working on Devuan Chimaera? » 2023-01-21 05:19:19

Yes, fair enough. Thanks.

And my request of respectful and purposeful dialogue does indeed apply to everyone.

#710 Re: Installation » why this solution not working on Devuan Chimaera? » 2023-01-20 22:58:17

@deepforest, why do you waste your time here?

By the looks of it, your devuan experience still leaves you so tremendously emotionally stressed that you end up with nonsense posts seemingly without purpose. Surely you have better things to do?

But maybe your purpose is really to ball-plank ideas on how to overcome whatever technical barrier you are currently at?

Indeed, there may well be people with knowledge and experience on that at this forum!

And to tap into that you simply just tune your manners more towards showing purpose and respect.

#711 Re: Off-topic » [QUESTION] UKUI DE in Devuan? » 2023-01-08 21:10:03

Looking forward to your satisfying merge request for tasksel ...

#712 Re: Hardware & System Configuration » Server lost changes and partially reverted » 2023-01-06 22:15:03

Currently I have duplicity at the top of my list of timeline backup methods as it's both fast and compact, and it's trivially easy to set up a cron job script that makes an incremental delta as often as I like.

I know of the front-end duply but only by name. (It's so rare that I need to peep into the backup)

#713 Re: Hardware & System Configuration » Server lost changes and partially reverted » 2023-01-06 03:56:30

Well, a composite raid1 device would indeed typically be named /dev/md0, but it doesn't necessarily need to be mounted. However it does need to be "assembled" at the first-stage boot (initrd) before this pivots into a raided root filesystem.

And yes, side mounting raided partitions separately is a sure way for interesting experiences.

But I'm not a raid supporter so it's better I'll be quiet and let a friendly raid1 supporter give some guidance.

#714 Re: Hardware & System Configuration » [SOLVED] Good nginx ssl instructions » 2023-01-04 05:33:17

Or you may need something like

        ip protocol icmp accept
        ip6 nexthdr ipv6-icmp accept
        ip protocol igmp accept

in the output filtering as well for ping responses.

#715 Re: Hardware & System Configuration » [SOLVED] Good nginx ssl instructions » 2023-01-04 05:27:01

That doesn't look ok. Not that I really know nft syntax but by the looks of it ports 80 and 443 are now blocked, and it no longer responds to ping either. Do you need all that...

I think you'll need

tcp dport {22, 80, 443} accept

in the input filtering..

and do you really need to filter output at all? though it looks like it wold work...

#716 Re: Hardware & System Configuration » [SOLVED] Good nginx ssl instructions » 2023-01-04 04:21:16

Well I prefer the iptables rule syntax myself but if you prefer nftables then that's of course fine with me. Afaik, it's just a matter of syntax; either way it uses the kernel's network filtering rules, so I wouldn't be surprised if you can view the rules with iptables syntax or nftables syntax regardless of how you make the rules.

Whichever way, you need the input/output holes for 443 traffic similar to the current 80 or 22 traffic.

#717 Re: Hardware & System Configuration » [SOLVED] Good nginx ssl instructions » 2023-01-04 03:38:48

Obviously you have a firewall setup with ufw. That's fine. Just make holes for 80 and 443.

#718 Re: Hardware & System Configuration » [SOLVED] Good nginx ssl instructions » 2023-01-04 03:15:57

That's good; nginx does listen on port 443.

What do you get from

# iptables-save

EDIT: I reduced to the generic prompt "#"

#719 Re: Hardware & System Configuration » [SOLVED] Good nginx ssl instructions » 2023-01-04 03:11:02

However nmap still says https is closed.
Please stop nginx and start it again.
use the following on the Dell-Devuan server: 

# netstat -anp | grep -w LISTEN

to verify that it listens to port 443.

#720 Re: Hardware & System Configuration » [SOLVED] Good nginx ssl instructions » 2023-01-04 03:08:08

Your last wget test some posts ago looked all fine. I wold not suggest that you start from the top.

#721 Re: Hardware & System Configuration » [SOLVED] Good nginx ssl instructions » 2023-01-03 04:38:00

I meant the host that runs nginx; would be "the Dell-Devuan server" in your house smile

My port probing says that port 80 is open and port 443 is closed; other ports called filtered.

Since you also don't get service on port 443 it means that either nginx does not listen at all, or there is some firewall block in between.

Just for completeness, you should generate the dhparam.pem file:

# openssl dhparam -out /etc/ssl/certs/dhparam.pem 2048

and add an ssl_dhparam directive as new line 25 in realupnow.com.conf:

    ssh_dhparam /etc/ssl/certs/dhparam.pem ;

And restart nginx.

After that nginx you could try on that host
# wget -H -O/dev/null http://realupnow.com/
in order to verify that nginx services port 443 (ssl).

EDIT: added semi-colon to the config line.

#722 Re: Hardware & System Configuration » [SOLVED] Good nginx ssl instructions » 2023-01-03 04:12:28

Yes all configuration looks fine, although some ssl settings can probably be tuned. But it should connect and allow access. One thing missing is the ssl_dhparam setting which according to doc is required when/if DH ciphers are used. But I would have thought nginx would issue an error message when started/restarted if that would stop it from opening the ssl listener. Try with stopping nginx, then starting it, and check the error log.

Does that host have any local firewall?

#723 Re: Hardware & System Configuration » [SOLVED] Good nginx ssl instructions » 2023-01-03 03:21:36

Is there a recent /var/log/php7.4-fpm.log and how does that look, if so?

#725 Re: Hardware & System Configuration » [SOLVED] Good nginx ssl instructions » 2023-01-03 02:40:23

The error.log I just posted is the most recent

Did you confirm that? I accessed your server more recent than that and before I made my post.

Board footer

Forum Software