You are not logged in.
from Windows to systemD :b
The correct spelling is systemd, all lower case.
Does not Linux kernel contain some obfuscated code except firmware BLOBs?
No, not that I'm aware of.
I trust Debian to remove any non-free code from the kernel and Devuan draw their kernel from them.
Please open a new thread if you want to continue this discussion, it is off-topic here.
Follow the instructions given in the Debian wiki, they also apply to Devuan.
what do I do with /etc/X11/xorg.conf.d/20-intel.conf?
You should delete it if you want to use 20-modesetting.conf
Sorry, I should have said that.
Why not to add a Libre (deblobed) kernel directly to Devuan distro?
The Devuan kernel is already de-blobbed, that's why they have separate firmware packages.
It could also be the more practical reason that they do not want to moderate comments on controversial subjects because it's likely that commenters could show up who post offending content that violates various laws.
Quoted for truth.
If you're really paranoid about CPU manufacturers then you could buy an FPGA and create an OpenSPARC, POWER9 or RISC-V microarchitecture on the chip, for example:
https://www.microsemi.com/product-direc … n-your-own
Not very practical though
The UXA acceleration method is ancient, have you tried Xorg's built-in modesetting DDX driver?
/etc/X11/xorg.conf.d/20-modesetting.conf:
Section "Device"
Identifier "Device0"
Driver "modesetting"
EndSection
^ Sorry Miyo, it was the first link in the startpage search for the song.
I look forward to you growing up.
*blows raspberry*
That is strange, the configuration file should work (I think).
Is there anything in the logs?
It may be worth trying pavucontrol to see if changes made by that program "stick" for the next boot.
Or add the relevant pactl commands to your desktop startup file(s).
EDIT: try putting your configuration in ~/.config/pulse/daemon instead (if that's not where it already is).
00:02.0 VGA compatible controller [0300]: Intel Corporation Mobile 945GSE Express Integrated Graphics Controller [8086:27ae] (rev 03) Subsystem: ASUSTeK Computer Inc. Mobile 945GSE Express Integrated Graphics Controller [1043:8340] Kernel driver in use: i915 Kernel modules: i915 00:02.1 Display controller [0380]: Intel Corporation Mobile 945GM/GMS/GME, 943/940GML Express Integrated Graphics Controller [8086:27a6] (rev 03) Subsystem: ASUSTeK Computer Inc. Mobile 945GM/GMS/GME, 943/940GML Express Integrated Graphics Controller [1043:8340]
That's interesting, you have two entries for the same device, no idea why
The i915 kernel driver is loaded though so you should be fine.
Care to explain why i had to go through all this in order to get the codecs that should have been installed as part of the VLC package?
Because Devuan derives it's packages from Debian and the extra content needed to play DVDs violates the DSFG and so cannot be included in the official repositories.
You would already know this if you spent your time researching the subject instead of whinging like a spoilt little baby.
Can you post
lspci -knn | grep -iA2 'vga\|3d\|display'
It returns nothing.
How about without my silly grep? What does the plain lspci -knn report about your graphics card?
Oh, and leave that poor cat(1) alone:
grep -i _OS dsdt.dsl
my kernel command line does not have acpi_osi="Linux" or acpi_osi="!Windows 2009".
You could try clearing the string by using
acpi_osi=
Reference: https://github.com/torvalds/linux/blob/ … s.txt#L153
I did find an unclaimed device
I'm not really familiar with lshw(1) but could that be for an unused display output?
Can you post
lspci -knn | grep -iA2 'vga\|3d\|display'
I've done my homework and tried to add set-default-sink and set-default-source in pulse audio config file
Please post your configuration files.
Background for everybody else: http://forums.debian.net/viewtopic.php?f=3&t=141895
Please use code tags when posting terminal output.
Seems like it should tell you to exit synaptic first, if you don't things are locked.
Seems like the error message given if you try that is quite sufficient.
Devuan is intended for competent GNU/Linux users, perhaps try one of the derivatives if you're finding it a challenge.
dvd's are no-go
Try
# apt install libdvdread4
To get DVDs working install libdvd-pkg.
What do you think about LibertyBSD compared to OpenBSD?
I think their criticisms of the firmware included with OpenBSD are not valid.
AFAIUI, the OpenBSD developers' attitude is that if the user has hardware that needs blobs to function then it should be installed automatically because if the user didn't want this then they wouldn't buy that hardware.
After all, any hardware that doesn't download the firmware from the operating system has the firmware installed at the factory instead so just de-blobbing the operating system does not fix the problem (this also applies to the Libreboot project).
And what do you think about HardenedBSD compared to OpenBSD?
Yes, HardenedBSD has some neat features but it's based on FreeBSD and the developers of that operating system have the same "features first" attitude as the Linux devs so the changes are a sticking plaster rather than a from-scratch "correct" implementation.
But I'm no expert
secure ZFS server
IMO this is an oxymoron due to the complexity of ZFS.
Is it possible to manually remove firmware blobs from OpenBSD and HBSD without many scripts like in LibertyBSD?
Yes, just read their scripts to see what they do
Just not installing non-free packages and remove any blob files like firmwares from file system? Shall OpenBSD/HBSD kernel still be recompiled to avoid ALL blobs?
There are no non-free packages in OpenBSD.
The firmware included in the source tree for OpenBSD is CPU microcode, which is needed to prevent instabilities in the hardware so I don't think removing it would help.
I would be more worried about hard drive controllers and other components that don't upload firmware from the OS.
What do you think about security of Talos II hardware platform?
Yes, I am a big fan of Talos & POWER9, that architecture is much better than the x86 garbage.
If I was in the market for a desktop system then I would buy one of their Blackbird systems in preference to any of that Xeon nonsense.
But the problem of embedded firmware for the other components on the motherboard remains no matter what the hype from Talos may claim...
Well, around 32:40 he says:
"I think that the last really important thing that things like systemd enable through the use of cgroups and stuff like that is containers".
I think he's using "enable" to mean "make easier".
Given that the speaker is a FreeBSD developer I think it's safe to assume that he knows containers can work without systemd.
https://www.freebsd.org/doc/handbook/jails.html
Later he goes on that the barrier for using containers is reduced by systemd. And I don't see any arguments that support this claim
He's just stating his opinion, which is based on his experience in a job working for a company that made large storage appliances.
FWIW, I find systemd-nspawn a lot easier to use than LXC, particularly in respect of networking.
Use bootchart to analyse boot performance.
EDIT: typo.
which suggests that we need systemd for properly running containers
That's not what the bloke says at all, he just claims that systemd makes it easier to manage containers.
Nice troll though, well done
Head_on_a_Stick wrote:I thought it is a comparison to old KSPP.
The page was updated last year so it is quite old, check the commits to the KSPP repository since then to see if anything has changed.
loosing to Grsecurity very much
Yes indeed, the kernel devs have never been very interested in security-related issues and the KSPP looks like lip-service to me (not that I'm qualified to judge).
I wouldn't use Linux for anything important, OpenBSD is my preferred choice for serious stuff.
Do underground groups exist who resell up to date releases of Grsecurity patches for a lower price than original with modern kernels in sources?
I don't know.
The last freely-available grsec patches don't protect against Spectre or Meltdown so they're useless now.
Does Grsecurity company watermark their patches per each client?
No idea.
This tries to remove my wine installation
No it doesn't, it just marks the packages as auto-removable — they won't actually be removed until you use apt autoremove (or aptitude, which auto-autoremoves).
This thread from fdn explains how to deal with situations like this: