You are not logged in.
ralph.ronnquist
(I assume "freer" is a misspelling)
No, I copied one more additional symbol from next line
Does the "same thing" happen every time?
Unfortunatelly yes.
Now I am using this mirror http://mirror.mephi.ru/devuan/devuan/di … backports/ - it is actually ru.devuan.org and have no problems.
rolfie
not
deb http://deb.devuan.org/merged backports
but
deb http://archive.devuan.org/merged chimaera-backports main contrib non-free
user@host:~# cat /etc/apt/sources.list
deb http://deb.devuan.org/merged chimaera main contrib non-free
deb http://deb.devuan.org/merged chimaera-security main contrib non-free
deb http://deb.devuan.org/merged chimaera-updates main contrib non-free
deb http://archive.devuan.org/merged chimaera-backports main contrib non-freer
There are no problems with adoptium java repo:
user@host:~# ls -l /etc/apt/sources.list.d/
-rw-r--r-- 1 root root 64 мая 29 14:57 adoptium.list
There was no any changes here:
user@host:~# ls -l /etc/apt/apt.conf.d/
-rw-r--r-- 1 root root 82 мая 29 14:34 00CDMountPoint
-rw-r--r-- 1 root root 40 мая 29 14:34 00trustcdrom
-rw-r--r-- 1 root root 630 июн 21 2021 01autoremove
-r--r--r-- 1 root root 122 мая 29 14:36 01autoremove-kernels
-rw-r--r-- 1 root root 307 мар 28 2021 20listchanges
-rw-r--r-- 1 root root 182 июн 10 2021 70debconf
I tried something like
apt-get -o Acquire::CompressionTypes::Order::=bz2 update
but it does not work
Unfortunately yes.
This message was translated:
Reading package lists… Done
E: Failed to fetch http://archive.devuan.org/merged/dists/chimaera-backports/main/i18n/Translation-en Connection timed out finally [IP: 116.202.138.216 80]
E: Some index files could not be downloaded. They were ignored or older versions were used instead.
root@ojs:~#
I can not update apt sources
bullseye-backports was allways avaliable. There was no removal. bullseye-backports was avaliable in debian archive with no delay.
And now we have no http://archive.devuan.org/merged/dists/ … slation-en in devuan archive... problem is NOT SOLVED. chimaera-backports does not working now.
Sorry, you seem to have a silly idea how Devuan works
Ok... I seem to have a silly idea.... but - https://archive.devuan.org/merged/dists … backports/
Ok.... chimaera-backports just broken now... and daedalus-backports is EOL and in archive.debian.org
Ok.... chimaera-backports just broken now...
not all distro, only backports - https://backports.debian.org/news/bulls … continued/
I saw a problems with updating repo today:
E: Репозиторий «http://deb.devuan.org/merged chimaera-backports Release» не содержит файла Release.
what about chimaera-backports in archive.devuan.org?
when?
pm2 startup actually supports "systemv" but only in redhat/centos6 way. It depends on chkconfig.
https://github.com/Unitech/pm2/issues/4180 - nobody will patch pm2 for Devuan byt may be we will make a working init script?
I found here that there is no pam_limits.so in common-session-noninteractive and common-session by design. Apache 2 can be preconfiured via /etc/apache2/envvars and what about tomcat? All manuals are only about systemd.
Now i put ulimit -n 16384 directly in /etc/init.d/tomcat9 and it is working, but what is the right way?
i made "nofile = 65535" for tomcat and "nofile = 16384" for root... after restarting tomcat, i see a changes - 1st tomcat process have nofile=16384 (cat /proc/1st_pid/limits) and ither processes has 8192.
nofile for root allows to change 1st tomcat process configuration, but not others. How to change nofile for tomcat, runned by init script?
In systemd i can make something like this:
[Service]
Type=forking
User=tomcat
Group=tomcat
LimitNOFILE = 65535
Is it possible to make the same thing in /etc/defaults/tomcat?
I also see no "pam_limits.so"
here:
/etc/pam.d/common-session-noninteractive
/etc/pam.d/common-session
I asked same question about tomcat. I will try to post here what I see in same situation:
All settings seems to be good and in the right places:
root@host:~# cat /etc/sysctl.conf | grep file-max
fs.file-max = 65535
root@host:~# cat /etc/security/limits.d/nofile.conf
tomcat hard nofile 65535
tomcat soft nofile 65535
Tomcat user shows right values:
root@host:~# sudo su -l tomcat -s /bin/bash
tomcat@host:~$ ulimit -n
65535
tomcat@host:~$ ulimit -Hn
65535
tomcat@host:~$ ulimit -Sn
65535
Looking for tomcat pids:
root@host:~# lsof -t -i:8080
10832
10893
12255
12304
12339
12383
12578
Checking limits, and found 8192 but not 65536:
root@host:~# cat /proc/12578/limits
Limit Soft Limit Hard Limit Units
Max cpu time unlimited unlimited seconds
Max file size unlimited unlimited bytes
Max data size unlimited unlimited bytes
Max stack size 8388608 unlimited bytes
Max core file size 0 unlimited bytes
Max resident set unlimited unlimited bytes
Max processes 192572 192572 processes
Max open files 8192 8192 files
Max locked memory 65536 65536 bytes
Max address space unlimited unlimited bytes
Max file locks unlimited unlimited locks
Max pending signals 192572 192572 signals
Max msgqueue size 819200 819200 bytes
Max nice priority 0 0
Max realtime priority 0 0
Max realtime timeout unlimited unlimited us
root@host:~# cat /proc/12383/limits
Limit Soft Limit Hard Limit Units
Max cpu time unlimited unlimited seconds
Max file size unlimited unlimited bytes
Max data size unlimited unlimited bytes
Max stack size 8388608 unlimited bytes
Max core file size 0 unlimited bytes
Max resident set unlimited unlimited bytes
Max processes 192572 192572 processes
Max open files 8192 8192 files
Max locked memory 65536 65536 bytes
Max address space unlimited unlimited bytes
Max file locks unlimited unlimited locks
Max pending signals 192572 192572 signals
Max msgqueue size 819200 819200 bytes
Max nice priority 0 0
Max realtime priority 0 0
Max realtime timeout unlimited unlimited us
Hi. I have some problems with tomcat:
1. It is unclear for me how to change running user. All modern manuals are for systemd. I tried to edit /etc/defaults/tomcat in tomcat7 style, but it is not working fine. I tried to edit /etc/init.d/tomcat9, but... Deviuan is not LFS.
2. It is unclear for me how tomcat security is working now. In systemd based systems I usually need only to put RW paths in unit file. In devuan I tried ro use tomcat9 security switch in /etc/defaults/tomcat and additional configs in policy.d. It is working now, but I found no documentation about it.
3. It is unclear for me how to run tomcat in 80 port on modern devuan. I want to find a silution wothout firewalls anp proxies. Solutions form tomcat7 and systemd based solutions are not working.
3. "Too many open files". Now i see 1024 when run "ulimit -n". I can run "ulimit -n 4096", but i can not store 4096 after reboot. I tried to add in /etc/security/limits.conf something like this
* soft nofile 2048
* hard nofile 2048
But i see 1024 after reboot. I need to change this option only for "tomcat" process or "tomcat" user. All manuals are about how to edit systemd unit to make another limit value.
As far as I understand, the package is created on the Debian side. The package creator thought about Debian users, implementing the transfer of control to systemd and about other good people... that's good.
The lack of a hook for restarting Apache is probably also somehow justified.
I changed the settings. Made updates weekly and added an action for Apache.
I have a similar opinion on this issue. That's why I asked questions about the standard script. The frequency of script launch and the lack of hooks is most likely the responsibility of the maintainer in debian. I think he was guided by the recommendations of the certbot developers.
test -x /usr/bin/certbot -a \! -d /run/systemd/system && perl -e 'sleep int(rand(43200))'
This code raises questions for me.
Accordingly, it seems to me that the standard cron task is either not quite suitable for devuan or in principle needs to be improved by the administrator.
One more question. Does this mean that the apache2 service will reload (not restart) twice a day (*/12)? It's not scary, but it's not necessary. IMHO.
Dhould i add --post-hook "service apache2 reload" to
0 */12 * * * root test -x /usr/bin/certbot -a \! -d /run/systemd/system && perl -e 'sleep int(rand(43200))' && certbot -q renew
The main question is... should certbot deb package from Debian be patched for Devuan?
this cron task is from original package:
0 */12 * * * root test -x /usr/bin/certbot -a \! -d /run/systemd/system && perl -e 'sleep int(rand(43200))' && certbot -q renew
Hi.
Is it good for devuan?
cat /etc/cron.d/certbot
# /etc/cron.d/certbot: crontab entries for the certbot package
#
# Upstream recommends attempting renewal twice a day
#
# Eventually, this will be an opportunity to validate certificates
# haven't been revoked, etc. Renewal will only occur if expiration
# is within 30 days.
#
# Important Note! This cronjob will NOT be executed if you are
# running systemd as your init system. If you are running systemd,
# the cronjob.timer function takes precedence over this cronjob. For
# more details, see the systemd.timer manpage, or use systemctl show
# certbot.timer.
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
0 */12 * * * root test -x /usr/bin/certbot -a \! -d /run/systemd/system && perl -e 'sleep int(rand(43200))' && certbot -q renew
I think about something loke this:
0 */12 * * * root certbot renew --post-hook "service apache2 reload"
0 0,12 * * * certbot renew --post-hook "service apache2 reload"
Hi.
All manuals are about systemd units. I tried to edit /etc/default/tomcat9 with this lines
AUTHBIND=yes
TOMCAT9_SECURITY=yes
SECURITY_MANAGER="true"
Also i made /etc/tomcat9/policy.d/06my.policy
with text inside:
grant codeBase "file:/opt/dir1/-" {
permission java.security.AllPermission;
};
grant codeBase "file:/tmp/-" {
permission java.security.AllPermission;
};
but it is not working at all.
subj.
Is this really necessary?
Linux web 6.1.0-23-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.99-1 (2024-07-15) x86_64 GNU/Linux
daedalus