The officially official Devuan Forum!

You are not logged in.

#201 Re: Other Issues » [SOLVED] Can't connect to repos » 2024-02-09 01:51:51

Maybe that is your problem. Its a plain text file...

Try editing the file. I believe those addresses are cisco DNS routers. <edit>it's cloudfare not cisco, my bad! </edit>

you may have to stop and start the network services to get it to use the new addresses.

Some use google dns... like 8.8.8.8 but it may not be as private as you might expect.

#202 Freedom Hacks » Securing my/our computer systems » 2024-02-09 01:48:02

GlennW
Replies: 53

Securing my computer system.

Hi, at the risk of being attacked, I'd like to talk about securing our systems from outside attacks.

My biggest concern now-a-days is securing my system from being hacked, facebook I think...(and maybe forums like this one, LQ the only other forum I use)...

To help others and maybe get some advice as well, but it seems that when I ask, something is knocking on the doors... testing me.

Like all my fans shut off yesterday just after I refused a so called friend of a friend a senseless conversation, that I think was meant to enable them/it to distract me while they mined my account and system.

My cpu overheated and auto shutdown was initiated, thankfully that was immediate, but when I rebooted the bios reported overheating... and all the fan-settings were OFF!.

I'm not sure how to ask or how to compose the statement/question appropriately.

At the risk of being subverted, I'll show a bit of personal vulnerability anyhow.

some history... I began using a pc with a 486dx, running win95 bought second had from a (my now exwife's) friend.

Win95 was too much for this little pc, and we had to revert back to win3.11 and dos to get it working reliably due to memory and graphics workload.
This is where I began hacking (white/grey hat) electronics to make it work, the motive was a stable system my wife could use for her University studies.
This is where my nick name "GlennsPref" came to be. It was a way for my wife to have the desktop look she liked and for myself to have mine (which she found completely un-usable).

That was in 1996/7. In 2002/3 I did a A+ course with a very well known provider, and began learning the insides of configuring a pc for everyday use.

I read lots of PC magazines back then, Boot mag from the US and Atomic PC, later known as Maximum computing from Australian Journalists, among other magazines. My first experiences were with Knoppix, and Redhat (i still have that cd-rom).
The young guys in the workshop (An unnamed international security electronics maint and repair company, they may not be pleased I used their name, so I left it out.) would let me know what was current at that time... like my children these days with securing my phone, they seem to know everything about apps and are really helpful.

I don't share files, like they did with pirating software in the old days (share-warez), but still hold on to the tenets of making my system as invisible as possible just for privacy reasons.

From Atomic PC I followed a tute "Uber-Linux box guide: The full monty" that introduced me to Mandrake, But Mandriva had just begun as a replacement distro,. and I stuck with it for a long time. Mageia was next but began to go the bling look like ubuntu was doing, PClinux was next, but my system was shutting down un-expectedly and I was suss about that and began a search for something else that was more transparent (no systemd, journalling in jibberish and machine language) to debug when a console was all I had access to view.

Back to the current times... I discovered a Devuan release that had some choice! ;-) I was so happy even though I had to learn new distro specific tools.

So, now I don't use M$win for anything. My phone is apple... but I use it mostly as a "personal organiser" and use the web apps rarely, although I do use it to tether my laptop when required as a modem. With the help and support from this very forum, I humbly thank you! I stand on the shoulders of giants!

Let me state, I am not an expert! I do not use this for for personal profit.

I try to reduce my bandwidth, historically broadband providers were really expensive as you could easily use more data than paid for and quite often my monthly bill was over $300, very often!

With my current system I "think" i have secured it to the best of my knowledge and research with...
nftables, kernel restrictions, a vpn, ptunnel and I used to use squid as a web proxy (not anymore).

I don't serve any web-pages/sites from here or anywhere else, although I have tinkered... and had to develop a website for University studies (i did not complete due to mental health problems at that time)

I employ some tricky stuff, like privoxy and tor... but haven't really finished researching the best use of those.

I use nmap to check backdoor open ports, but I'm still figuring out just what I need to look for and lynis hardening check.
Like this youtube tute... "Nmap Tutorial to find Network Vulnerabilities"

I'd really like to stop people/systems messing with my hardware, at the bios level.

Apart from bios level password protection, and grub sec, which is a pain in the ass putting in a password at that level each time I reboot (up to 10 times a day sometimes). My bios settings are backed up to a profile, and that makes it easy to reset when I need to.

Anyone want to talk about this?

I'll share what techniques I can where and when I can.

Thank you for reading.

Sincerely, Regards Glenn

#203 Re: Other Issues » [SOLVED] Can't connect to repos » 2024-02-09 00:18:41

p.ps. I'm using Daedalus, but I also keep Beowulf and Chimaera in my sources list for easy access, and backports.

root@GamesBox:/root  apt update && apt upgrade -y && apt autoremove -y
Hit:1 http://deb.devuan.org/merged daedalus InRelease                                                                                                      
Get:2 http://download.opensuse.org/repositories/hardware:/razer/Debian_12  InRelease [1,519 B]                                                             
Get:3 http://deb.devuan.org/merged daedalus-security InRelease [32.5 kB]                                                     
Get:4 http://download.opensuse.org/repositories/openSUSE:/Tools/Debian_12  InRelease [1,552 B]                   
Hit:5 https://dl.winehq.org/wine-builds/debian bookworm InRelease                                                 
Hit:6 https://repo.nordvpn.com/deb/nordvpn/debian stable InRelease              
Hit:7 http://deb.devuan.org/merged daedalus-updates InRelease
Hit:8 http://deb.devuan.org/merged daedalus-backports InRelease
Hit:9 http://deb.devuan.org/merged daedalus-proposed-updates InRelease
Hit:10 http://deb.devuan.org/merged chimaera InRelease
Hit:11 http://deb.devuan.org/merged chimaera-backports InRelease
Get:12 http://deb.devuan.org/merged chimaera-security InRelease [26.2 kB]
Hit:13 http://deb.devuan.org/merged beowulf InRelease
Get:14 http://deb.devuan.org/merged beowulf-security InRelease [26.1 kB]
Hit:15 http://deb.devuan.org/merged beowulf-backports InRelease
Get:16 http://deb.devuan.org/merged chimaera-security/main amd64 Packages [267 kB]
Get:17 http://deb.devuan.org/merged chimaera-security/main i386 Packages [266 kB]                                                                          
Fetched 621 kB in 7s (86.0 kB/s)                                                                                                                           
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
All packages are up to date.
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Calculating upgrade... Done
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
root@GamesBox:/root  

#204 Re: Other Issues » [SOLVED] Can't connect to repos » 2024-02-09 00:13:28

Hi, check your DNS is resolving...

I get no such errors when I check for updates each morning...

I'm using these now a days...

/etc/resolv.conf

# Generated by NetworkManager
search GamesBox.GlennsPref
nameserver 1.1.1.1
nameserver 1.0.0.1
nameserver 192.168.0.1 #home router... optus australia dsl modem

I get some errors/warning messages from using my domain-name but it's not fatal.

I keep a copy backed up so I can change it when it gets over-written from updates, clean installs, etcetera.

All the best.

#205 Re: Off-topic » "Picking" up on things » 2024-02-09 00:02:31

That's fantastic. I once played Sister Golden Hair for my little sister at her wedding reception, I was sweating bullets and quaking inside, and messed it up a few times... when I finished I asked, "want me to do it again?" they all shook their heads and laughed. It was a great experience, first public performance with a PA, but thankfully all friends and family. lol.

Yeah, bragbook is a farce!

#207 Re: Off-topic » "Picking" up on things » 2024-02-08 22:57:51

The list of bands and types of music I appreciate is too long to list,
I'd forget some of the best and that would not be fair to all those wonderful musicians who shaped my life.
I haven't heard of Triumph... thanks, I look into that.

There's a special kind of bliss I experience when engaged in playing music, and singing (and whistling too).
In a world of Tech I have that escape.

Currently I'm teaching myself some finger picking, Dust in the Wind, by Kansas... and Landslide by Fleetwood Mac. It excites my brain. ;-)

When it comes to playback quallity, I rip my cd's to flac and really don't have change any eq settings. But I do have mp3's for in the car... it's so noisy it dosen't really matter, it seems my memory of the tunes fills in the gaps. Getting a constant volume level across all tracks and albums is the hardest part I feel.

I hope you had a good vacation, a break from work is a necessity these days more and more for our mental health.

Thank you for your replies, you put a smile on my face and lighten my moods this time of a morning (here in Australia).

(Off-topic, Off-topic)
My biggest concern now-a-days is securing my system from being hacked, facebook I think...(and maybe forums like this one LQ) I'm saving that for another post here... to help others and maybe get some advice as well, but it seems that when I ask, something is knocking on the doors... testing me. Like all my fans shut off yesterday just after I refused a so called friend of a friend a senseless conversation, that I think was meant to enable them/it to distract me while they mined my account and system. My cpu overheated and auto shutdown was initiated, thankfully that was immediate, but when I rebooted the bios reported overheating... and all the fansettings were OFF!. I'm not sure how to ask or how to compose the statement/question appropriately. anyhow, I'll get to that soon.

aluma, what was/is the name of your pop group? I have some demos I put up on Jamendo.

These recording were mostly done to test equipment, and are not even demo quality, but just hard and fast recordings some of the songs I have written.

I can only find one song up there now, but here it is...
https://www.jamendo.com/track/570749/reita

ps, here's the rest... some were done with friends. https://www.jamendo.com/album/65893/no-edits
all the best, Regards Glenn

#208 Re: Installation » all the new kernel disturb some old PC's! » 2024-02-07 02:58:45

Thank you, I'll check when my new battery arrives. the speakers look like they are built into a tube, like a labyrinth resonator... for bass/low freq.

#209 Re: Desktop and Multimedia » [SOLVED] OpenRC warning during screen log at rebooting or turning off pc » 2024-02-05 21:45:29

Hi, here are MY most frequently used message lookups...

cat /home/glenn/.xsession-errors | grep -i "(EE)\|(??)|fail \|segfault"
cat /var/log/Xorg.0.log | grep -i "(WW)\|(EE)\|(??)"
cat /var/log/syslog | tail

you may use the same lookups with dmesg,  and swap the filtering around to search for a match of what your looking for.

I also have sys-type logs sent to tty11 & tty12 so I can easily switch to those consoles and see if anything has changed.

I hope this gives you some tips to work with.

all the best, GlennW (aka, GlennsPref)

#210 Re: Installation » all the new kernel disturb some old PC's! » 2024-02-04 23:44:50

aluma:
P.S. As far as I understand the description, your laptop has 4 speakers. That's why I asked.
But yes, in mine, too, only one remained alive.

Since my last post here, I have taken the back off again to replace the battery and had a quick look,

yes I have 4 rectangle speakers, but some of them must not be working like new.

Parts are hard to come by... The wifi and bt work well. as with the dvd/cd player, flawless.

And great for ripping my new audio cd's to my music collection via usb flash-drives.

After all this time I still prefer to setup this way instead of using local networking. (mainly because I break my system so often hacking to customise the OS)

Just last night I removed some stubborn pulseaudio *.so for KDE/Plasma files and borked it again, but used my ubuntu studio install to copy the files back, lol)

A couple of reboots and it's back up and running without a complete reinstall of the OS. ;-) (I'm glad I took notes)

I haven't tried to use the screen brightness or most of the 'Fn' keys. But I will when the new battery arrives later this week.

I was fortunate enough to study and work at an Audio Engineering school and learned about acoustics and speaker design, x-overs before I got married and had children and then started to build a rehearsal/listening studio come 'home theatre' and got divorced. My maths skills were not up to it, but I did learn a lot along the way.  How to make do on a low budget.

Back on topic... I found studying the IBM tuorials for sed, grep, vi and awk really helped me when I was living on the bleeding edge, using Mandriva, Magiea and pclinux... for about 10 years. It was a great adventure, but I have found using 2nd or 3rd gen hardware the kernel is sufficent to not have to use 'make' to customise my setup. (for graphics cards, wifi cards, and usb sound modules, and speed)

This link may help...
https://www.ubuntupit.com/simple-and-us … d-in-unix/

All the best

#211 Re: Installation » all the new kernel disturb some old PC's! » 2024-02-03 22:24:41

I bought it off a IT tech friend when he upgraded his life. ;-)

I am not satisfied with the sound, headphone socket broken.

But if I use my USB sound device the sound is good.

Mine also has a nVidia 750m graphics, but haven't got it working as far as I can remember it defaults to the intel ....

Congrats with the tube amp, I have an el84 18w marshal clone on the shelf waiting for me to get organised. I really love this stuff! :-)

I only use the laptop when travelling and when I have broken my main desktop system.

But the keyboard lights work as expected, dimming, full on and off. and it's quite fast, even for 10yo.

I have no secrets, just privacy issues from advertisers. (mostly to save on bandwidth)

#212 Re: Installation » all the new kernel disturb some old PC's! » 2024-02-03 04:59:11

aluma
"P.S.  Google and DDG do not know ASUS RJ552 touch-screen laptop."

sorry, My mistake, it's an r552jv from ~2013

Still working quite well.

glenn@devuan:~$ inxi
CPU: quad core Intel Core i7-4700HQ (-MT MCP-)
speed/min/max: 1012/800/3400 MHz Kernel: 6.1.0-13-amd64 x86_64 Up: 4m
Mem: 1108.1/7383.4 MiB (15.0%) Storage: 238.47 GiB (9.1% used) Procs: 215
Shell: Bash inxi: 3.3.26
glenn@devuan:~$ 

#213 Re: Desktop and Multimedia » [SOLVED] OpenRC warning during screen log at rebooting or turning off pc » 2024-01-31 21:25:18

I agree with Andre4freedom. I also get an error message that a service has no stop. But it does not affect the general operation of my 'stable' system.

I also use open-rc but with sddm with kde5/plasma.

I also turn off all services I do not want to start at boot, like mail, printing, brail and other accessibility apps, like speak and screen-readers..

The bleeding edge is exciting, I used to live there too.

#214 Re: Desktop and Multimedia » StartX doesn't work after a fresh install (segmentation fault 0x20) » 2024-01-31 21:16:37

Hi, I can't see the error log you pasted...

please post it here in code tags.

#215 Re: Installation » all the new kernel disturb some old PC's! » 2024-01-31 21:09:43

I have an ASUS RJ552 touch-screen laptop. It came with win8 installed... I have no problems with everything working. fyi.

I bought it second-hand from a tech friend...

the only probs is battery life and the speakers sound off balance, and the headphone socket...

but works perfectly with my usb sound box.. Edirole UA-25EX.

This is just info... I'm running Daedalus on it as well as my desktop.

#216 Re: Off-topic » "Picking" up on things » 2024-01-31 21:00:13

Hi, Thanks for the video link. I have been lucky enough to be at one of Phil's shows (as a punter, I used to work in the industry for a few years) and had a drink with him after the show... It was my birthday gift from my Wife at the time, dinner and drinks and live one man show. It was fantastic! I was also fortunate enough to have one of Tommy's coaching videos, but a work mate borrowed it and couldn't find it to return it to me, the little rotter. I play more like Phil, but I love how Tommy plays.

#217 Re: Installation » all the new kernel disturb some old PC's! » 2024-01-29 23:07:24

Hi, this is from the far-outside... but,

Have you considered installing a kernel that works and then getting the source and rebuilding a kernel just for your computer?

like make oldconfig...new kernel with old kernel settings.

There are quite a few different ways, but make old can be made to work, also make ...

here is a snippet of some notes I have... but I haven't had to compile my own kernel for a long time now. So your mileage may vary.

* Restart config...

"localmodconfig" make target. It does pretty much what you ask—it determines what modules you have running, and generates a .config making sure those modules are built. The 

"localyesconfig" target will compile those modules statically into the kernel rather than creating modules.

make
make modules
make install

You may look this up on the web. kernel.org comes to mind.

#218 Re: Installation » Runlevel 3 or "manual mode" fails to start X11 » 2024-01-27 22:17:17

Hi, I found a similar error starting X when first-boot of a clean install...

I checked is seatd was installed and it was not.

I'm running KDE/Plasma, not better but ...

Your error is different... the error I had was something like, seatd could not be found.

Perhaps removing and installing seatd may drag in any other dependants. FWIW, i havent seen keeptty. but that may be because I rarely use light-weight WM/DM's since I stopped using openbox, with kde apps.

Also check to see if there is a newer iso, I have Daedalus 5.1. The installer program may have changed when bugs were found (not that I heard about any).

#219 Re: Off-topic » "Picking" up on things » 2024-01-27 22:03:23

I learned all kinds of styles, but I'm a Rocker, but anything with guitar in it. Alice Cooper, Areosmith... plenty of Aussie bands too.

70's mostly the stuff I heard as a pre-teen... I eventually made my way back there.

I love Joe Satriani, when his tune "Always with you, Always with me" came on the radio I bought my first electric guitar (later upgraded to a new 1991 Fender American Standard Stratocaster), and I had a Laney L50R (?) amp in 1993. Now I can make stuff up to please myself, console myself, amaze listeners and try to setup my pc as a DAW. I hope you are all having a great weekend.

Thank you Golinux for your indulgences during these posts. I felt guilty cross-talking.

#220 Re: Hardware & System Configuration » iwd Daemon Not Starting at Boot » 2024-01-27 05:24:55

change this to

# Default-Start:  2 3 4 5
# Default-Stop:   0 1 6

to...

# Default-Start:  S
# Default-Stop:   0 6

I hope this helps.

#221 Re: Hardware & System Configuration » iwd Daemon Not Starting at Boot » 2024-01-27 05:13:26

One more thing, not about the startup delay, I understand that.

I was also instructed to install orphan-sysvinit-scripts

package description info...

Orphaned System-V-like init scripts
 
This package provides System-V init scripts for packages whose maintainers
have chosen to drop them from the distribution in favour of only supplying
a systemd service file.

It will only put files into /etc/init.d/ when the relevant package is
installed on your system.

rc.local worked for me, but I can't remember what it was now I needed it for, the devuan system has evolved and matured.

<edit> it was for starting nftables.
the files will be at /usr/share/orphan-sysvinit-scripts/...</edit>

#222 Re: Off-topic » "Picking" up on things » 2024-01-27 05:06:36

Funny, when I was busking the police had a hard time making me move on, they liked the colours (team colours) as well. :-)

#223 Re: Freedom Hacks » To permanently block installation of Pulseaudio. » 2024-01-27 05:04:37

Hi, I'm trying to block any re-installation of accessibility (brail, screen readers and speech recognition...) packages, as well as printing, scanning and mail.

I will try the example above.

#225 Re: Hardware & System Configuration » iwd Daemon Not Starting at Boot » 2024-01-27 03:10:08

Hi, I install iwd like this... For my tethering to iPhone (as a modem...)

apt install iwd

sh /home/glenn/bin/sysd2v-0.3.sh /lib/systemd/system/iwd.service
#rsync -avh /home/glenn/local/other/backup/backup-etc-sys/etc/init.d/iwd.initd /etc/init.d/iwd.initd
rsync -avh /home/glenn/local/other/backup/backup-etc-sys/etc/init.d/iwd.initd /etc/init.d/
rsync -avh /home/glenn/local/other/backup/backup-etc-sys/etc/runlevels/iwd.initd /etc/runlevels/
rsync -avh /home/glenn/local/other/backup/backup-etc-sys/etc/systemd/system/multi-user.target.wants/iwd.service /etc/systemd/system/multi-user.target.wants/
chmod +x /lib/systemd/system/iwd.service
chmod +x /etc/init.d/iwd.initd
service iwd.initd start
update-rc.d iwd.initd defaults

# udev rules for iPhones
rm /lib/udev/rules.d/*-usbmuxd.rules # 85-(?)
rsync -avh /home/glenn/local/data/build/39-usbmuxd.rules /lib/udev/rules.d/
chmod -R 744 /lib/udev/rules.d/39-usbmuxd.rules
chown -Rh root:root /lib/udev/rules.d/39-usbmuxd.rules

As you can see I'm using backups to restore the files.

The sysd2v-0.3.sh script does most of the work. I got this from more experienced users than I.

If you search here for sysd2v script, you should be able to find it.

I hope this helps.

Board footer

Forum Software