The officially official Devuan Forum!

You are not logged in.

#1526 Re: Installation » Iptables with Devuan » 2017-11-10 22:26:58

Hmm, by attaching the loading of table rules to the event(s) of bringing up an interface, you probably make life a little bit difficult for yourself. It's not "wrong" per se, and probably the only major complication is that in a typical set up, the network interfaces are brought up by udev in the pre-pivot boot up stage.

If that is your case, you will need to ensure that the rules files are included in your initrd, as well as the iptables-restore program and its dependencies (libraries). (I believe the if-pre-up.d script gets pulled in to the initrd automagically when remaking initrd).

Or alternatively, make that not be your case by not letting udev start networking. I.e., remove all "allow-hotplug" phrases from /etc/nework/interfaces. Possibly use "auto <if>" phrases instead, which tells the post-pivot networking init script that "these are yours, mate", or if then you also have a separate network manager, you'll need to leave all song and dance to it.

EDIT: I see from your other post that you're using wicd, so my thought about udev is probably not applicable here. Maybe it's enough to make your script exit more promptly when lo is brought up; or even tie it explicitly to $IFACE=wlan0.

#1527 Re: Forum Feedback » [Discussed] Direct Search - site feature » 2017-11-06 08:01:48

I suppose one could squeeze in a small search field at the top right somewhere... or maybe with themed placement (and looks). It's added to the list; somewhere above "Swedish localization" :-)

#1528 Re: Off-topic » How to create a self-extracting, self-executing tarball » 2017-11-04 02:27:53

Surely all GNU/Linux users would have some shell installed

Yes, according to FSSTND, you'll need to venture off the ranch for that one.

#1529 Re: Off-topic » How to create a self-extracting, self-executing tarball » 2017-11-04 00:22:31

Good script.

One (small) remaining problem would be that it's still a script and not a binary; it relies on a pre-installed interpreter (bash), and is thus not fully self contained. Of course, that's not much of a problem except for those who take offence to installing bash, and those who wants a suid program.

But if you want that covered as well, you could write up that header function in C (probably with some minor variation to the separation logic), and then pack such a binary in front of a tar to make a binary, self-executable tar. The point being that you can concatenate anything to a binary executable without that destroying it.

(Or, rather than C, you could use newlisp, which in fact includes an embedding method similar to this.)

On the other hand, as a binary, it'll instead be sensitive to the architecture, and thus less universally distributable -- swings and carousels.

#1530 Re: Hardware & System Configuration » Florence on SLIM » 2017-10-28 01:11:01

Fair enough. If you are in the mood for tinkering, it's not really a difficult thing to start an X program over slim. The fundamental aspects are to have the XAUTHORITY and DISPLAY properly set when starting the program, and to start the program at the right time, i.e., after slim.

I don't have florence but can illustrate using xvkbd instead.

For example, it might be sufficient to add a line into your /etc/rc.local file, making it look like this at the end:

( sleep 5 ; XAUTHORITY=/var/run/slim.auth DISPLAY=:0 /usr/bin/xvkbd ) &
exit 0

That line supposedly will start the virtual keyboard xvkbd upon reboot, after 5 seconds, on top of the slim login splash.

You will need to adjust as appropriate for florence of course.

Note that (assuming it works) the virtual keyboard only comes up after reboot, and not again when you log out. But maybe that is sufficient.

#1531 Re: Hardware & System Configuration » Florence on SLIM » 2017-10-27 03:08:02

the.drewster wrote:

The bit I can't get working is getting Florence to work on SLIM.

Could you be specific, please. Is it that you cannot start the keyboard over slim? or that it comes up but its input is not delivered to slim's login box? Or something else. Please include any error responses of any commands that your try.

#1532 Re: Hardware & System Configuration » working method for module blacklisting? » 2017-10-26 02:56:50

Since I (and you?) don't have cups, disabling it for cups is not a solution.

I managed to get the (standard) ASCII 4.9.0-4-amd64 kernel to avoid loading parport and friends by having boot parameter

lp=none

together with blacklisting:

# echo blacklist parport > /etc/modprobe.d/blacklist-parport.conf
# echo blacklist parport_pc >> /etc/modprobe.d/blacklist-parport.conf
# update-initramfs -u

It needs both kernel parameter and blacklisting. Possibly lp=0 would work as well, but I couldn't bother testing it.

#1533 Re: Hardware & System Configuration » working method for module blacklisting? » 2017-10-25 23:13:17

Someone on a not dissimilar platform had success with the problem in 2009:
https://ubuntuforums.org/showthread.php … 455&page=2
The key was to "also disable loading lp module in default configuration of cups in /etc/default/cups".

#1534 Re: DIY » [SOLVED] GNU/Linux laptop as router, vpn router, or wifi repeater » 2017-10-20 03:14:09

btw if you care about  IEEE Registration Authority, a "locally administered mac address" needs bit 2 of first byte set and bit 1 cleared. Thus "5e" would be better than "5c".
see eg http://www.noah.org/wiki/MAC_address

#1536 Re: Hardware & System Configuration » Issues with Laptop Lid Suspend/Hibernate and Panel Plugins » 2017-10-16 22:13:05

Ideally you should insert the locking program before the suspend action as otherwise it'll wake up unlocked until the locking starts. For example:

if [  "$3" = "close" ] ; then
     DISPLAY=:0 su -c "xtrlock -b" ralph &
     /usr/bin/obsession-exit -s
fi

Note also that (afaik) the lid button script is run by acpid as root and not "the DE user", so a sudo isn't needed, but some way to ensure GUI access is. The added command line above includes the two parts of making the locking program (xtrlock) have the right $DISPLAY set up, and (via su) be the right user (for my laptop).

#1537 Re: Hardware & System Configuration » [SOLVED] ascii wicd naming issue » 2017-10-16 21:14:54

Just picking up the smallest of your crumbs:

you can bold inside a quote block smile

which could provide a similar layout separation as a code block, though not scrolling.

As for network interface re-naming, I can't offer anything not already said. Basically it's a udev thingy, and (stupid as it is, one might think), one of those warts that come with the "modern" and "improved" wheel. Slightly easier to fix than rid yourself of avahi and gvfs and packaged and uuidd and whatnot, I think.

#1538 Re: Hardware & System Configuration » How to send a signal whenever mouse button is clicked? [SOLVED] » 2017-10-11 12:38:51

A smaller footprint  solution would simply read byte triplets from /dev/input/mice, where <9,0,0> means left button down, and <8,0,0> means left button up; all other triplets mean other things. I would use newlisp, of course, to remain in small foot print scripting, but a small C program could also do.

#1539 Re: Off-topic » Arguments against systemd » 2017-10-08 00:37:42

I liked post #19 though; it was short and succinct, and its mere presence so elegantly violated its own sentiment.

#1540 Re: Off-topic » Arguments against systemd » 2017-10-07 08:45:13

Sorry. I lost interest there. Too many words. To paraphrase Ramsey: "What you can't say in just a few words, you should whistle.".

#1541 Re: Off-topic » Arguments against systemd » 2017-10-07 05:59:43

Why don't you find yourself a blog site somewhere, where it'd be good and natural to line up all those beautiful words. This forum is populated by mostly intelligent people with no need or desire to waste (more) time and thought on systemd.

#1542 Re: DIY » UFW Rules: Can anyone confirm this? » 2017-10-02 21:20:17

To be clear, ICMP is a protocol and not a port; it's the Internet Control Message Protocol, whereby routers may exchange meta-data about IP level connectivity. There are several networking protocols to consider, both within the IP class (such as in particular TCP and UDP), and outside the IP class (in a range of varying obscurity).

As said before, there is no such thing as "invisible" on the Internet, short of not being connected at all. But there is a gray scale of "protection layers" of setting blockages for certain network traffic, depending on how you want your host to handle it. I'.e., like the rules you showed on top, which indeed tells the host to drop certain incoming ICMP packets, rather than deliver them to their normal handling (by the kernel). I think you'd do well in dropping IGMP as well, and then consider blocks for TCP and UDP messaging, which offer the majority of intentionally harmful networking.

#1544 Re: Devuan » can be udevil a alternative to udev? » 2017-09-29 07:24:22

You can install eudev=220:3.2.2-devuan1 from experimental on Jessie, but you need to make sure to also install libudev1=220:3.2.2-devuan1, which is its companion (despite the name).  The latter might be noted as a downgrade (relative jessie-backports), but that's nothing to worry about.

#1545 Re: Other Issues » [SOLVED]I cannot make "locate" work » 2017-09-24 10:59:56

Thank you, and welcome. Good practice for another time, when you run into something harder. cool

#1546 Re: Desktop and Multimedia » flash player plugin not run in Devuan » 2017-09-24 10:56:55

Nothing to worry about. I'm pretty sure it's the right pathname.
But it just made me think about the Bellman.

#1547 Re: Desktop and Multimedia » flash player plugin not run in Devuan » 2017-09-24 06:05:01

You mention /usr/lib/mozilla/plugins/flash-mozilla.so twice already, so if I mention it once more, it'll sure be the right place smile

#1548 Re: Hardware & System Configuration » SOLVED Brother Scanner not detected by Sane » 2017-09-19 23:23:56

To be sure, each rule is on a single line. Refer to

man udev

for details.

#1549 Re: Hardware & System Configuration » SOLVED Brother Scanner not detected by Sane » 2017-09-19 22:19:33

I'm not too well versed in this, but I might be able to help.

Firstly, I think that your /etc/udev/rules.d/10-scanner.rules should have a single rule line. It should be read "if the vendor is 0x04f9 and the product is 0x0330, then make the /dev/whatever pathname have group scanner". All that needs to be on a single line.

What you have done is rather three independent statements: "if the vendor is 0x04f9, then eeh nothing", "if the product is 0x0330, then ehh nothing", "if whatever, then set /dev/whatever to have group scanner". That last one in particular is quite "destructive" (although there might be some kind of protection in udev for that kind of mistake).

But, when I look at the libsane rules (i.e., /lib/udev/rules.d/60-libsane.rules) it suggests that you should rather have the assignment

..., ENV{libsane_matched}="yes"

as effect instead of setting access group. I think the deal is that the scanner dev's (for whatever [expletive] reason) have decided to use "acl" rather than unix file protection, and they also have programmed their rules to use a common, actual effect via the setting of the libsane_matched variable.

So, if making it a single line doesn't work, you might try replacing the GROUP assignment with that assignment.

EDIT: note the comma (",") between the terms; i.e., when you join your lines, you need to add "," comma between them.

#1550 Re: Other Issues » [Solved] Minor issue with shutdown, some process failing to stop » 2017-09-15 07:28:25

Make a failed login attempt and see that btmp has grown smile

man last
man lastb

Board footer

Forum Software