The officially official Devuan Forum!

You are not logged in.

#576 Re: Off-topic » what music are you listening to RIGHT NOW? » 2021-04-03 08:33:34

I just saw that Elton John movie "Rocket Man" this weekend, so tonight I'm binging on elton for my memory's sake.

#578 Re: Other Issues » [Solved] How to load nftables rules at boot? » 2021-03-27 11:41:12

Thank you for the correction...

As far as I'm aware open-rc run levels are "default, off, recovery and sysinit."

I thought the commented lines in the above script were left there from the sys-v script the file was used for.

I still not completely sure how this works... sorry for butting in.

I didn't see those other posts this morning when I added my 2 cents worth.

But, I'm glad I found out some more about run levels and open-rc.

#579 Re: Other Issues » [Solved] How to load nftables rules at boot? » 2021-03-26 22:40:56

Hi, my fw script is loaded by open-rc

It looks like this...

/home/glenn/build/firewall/fwautorun

#!/bin/bash
### BEGIN INIT INFO
# Provides:          scriptname
# Required-Start:    $remote_fs $syslog
# Required-Stop:     $remote_fs $syslog
# Default-Start:     2 3 4 5
# Default-Stop:      0 1 6
# Short-Description: Start daemon at boot time
# Description:       Enable service provided by daemon.
### END INIT INFO

case "$1" in
  start)

    sh /home/glenn/bin/nftfw.sh

    echo "Nftables Firewall is now ON"
    ;;
  stop)
    nft flush table filter
    nft flush table ip6 filter
    echo "NFTABLES Firewall is OFF"
    ;;
  *)
        echo "Usage: /etc/init.d/fwautorun {start|stop}"
        exit 1
        ;;
esac

exit 0

I used gentoo, arch and debian guides when I set this up...
https://wiki.gentoo.org/wiki/Nftables/E … nd_IPv6.29
https://wiki.archlinux.org/index.php/Nf … l_firewall
https://linux-audit.com/nftables-beginn … filtering/
https://wiki.debian.org/nftables#Should … les_one.3F

I found this somewhere, ... repeat, my init script is called fwautorun.sh, yours may be different.

cp  <path to init file>...fwautorun /etc/init.d

# update-rc.d nftables defaults

rc-update add nftables defaults

reboot.

you may have this part sorted, but because it's mentioned in the start up script, I'll copy it here...

/home/glenn/bin/nftfw.sh

#!/bin/bash

# /home/glenn/build/firewalls/nftfw.sh

# load templates
#nft -f /usr/share/doc/nftables/examples/syntax/ipv4-filter       #loads the ipv4 template table (OS depandant address)
#nft -f /usr/share/doc/nftables/examples/syntax/ipv6-filter       #loads the ipv6 template table (OS depandant address)

# instead of using templates, we create our own.

nft add table filter
nft add table ip6 filter

nft add chain filter input { type filter hook input priority 0 \; }
nft add chain filter forward { type filter hook forward priority 0 \; }
nft add chain filter output { type filter hook output priority 0 \; }

nft add chain ip6 filter input { type filter hook input priority 0 \; }
nft add chain ip6 filter forward { type filter hook forward priority 0 \; }
nft add chain ip6 filter output { type filter hook output priority 0 \; }

# clean out any leftovers...

nft flush table filter
nft flush table ip6 filter

nft add rule filter input ct state established accept
nft add rule filter input ct state related accept
nft add rule filter input iif lo accept
nft add rule filter input tcp dport ssh counter log accept
nft add rule filter input counter log drop

nft add rule filter output ct state established accept
nft add rule filter output ct state related accept
nft add rule filter output oif lo accept
nft add rule filter output ct state new counter accept

nft add rule ip6 filter input ct state established accept
nft add rule ip6 filter input ct state related accept
nft add rule ip6 filter input iif lo accept
nft add rule ip6 filter input tcp dport ssh counter log accept

nft add rule ip6 filter input icmpv6 type nd-neighbor-solicit accept
nft add rule ip6 filter input icmpv6 type echo-request accept
nft add rule ip6 filter input icmpv6 type nd-router-advert accept
nft add rule ip6 filter input icmpv6 type nd-neighbor-advert accept

nft add rule ip6 filter input counter log drop

nft add rule ip6 filter output ct state established accept
nft add rule ip6 filter output ct state related accept
nft add rule ip6 filter output oif lo accept
nft add rule ip6 filter output ct state new counter accept

echo "Nftables Firewall is now ON ... relay"

exit 0

# /home/glenn/build/firewalls/nftfw-off.sh

#!/bin/bash

# /home/glenn/build/firewalls/nftfw-off.sh

nft -f /usr/share/doc/nftables/examples/syntax/ipv4-filter             #loads the ipv4 template table
nft -f /usr/share/doc/nftables/examples/syntax/ipv6-filter             #loads the ipv6 template table

nft flush table filter
nft flush table ip6 filter

echo "Nftables Firewall is now OFF"

exit 0

I hope this helps, Glenn

#580 Re: Off-topic » What are you reading/want to read ? » 2021-03-24 23:10:26

The Body Keeps the Score – Brain, Mind, and Body in the Healing of Trauma
Bessel Van der Kolk, M.D.

...is a 2014 book by Bessel van der Kolk about the effects of psychological trauma, also known as traumatic stress.[1][2] The book describes van der Kolk's research and experiences, on how individuals are affected by traumatic stress, and its effects on the mind and body.
Synopsis

In The Body Keeps the Score, van Der Kolk focuses on survivors of psychological trauma, giving an account of how trauma has affected them.[1] He also discusses some possible routes to healing (including eye movement desensitization and reprocessing, yoga, and limbic system therapy).[3] The book has five parts: Rediscovery of Trauma, This is Your Brain on Trauma, The Minds of Children, The Imprint of Trauma and Paths to Recovery.[1]

https://en.wikipedia.org/wiki/The_Body_Keeps_the_Score

Opening my mind to other recovery methods... one day at a time.

#581 Re: Devuan » Meet Chimaera's deepsea theme » 2021-03-21 07:58:12

Thank you for your efforts, I really appreciate it.

#582 Re: Devuan » Meet Chimaera's deepsea theme » 2021-03-20 23:11:42

I use this to update/upgrade grub backgrounds...

Editing the /etc/default/grub file to reflect the name of the pic...

(I just use the largest pic I can find.)

#restore grub modifier files
rsync -avh /home/glenn/local/other/backup/backup-etc-sys/etc/default/grub /etc/default/
chown root:root /etc/default/grub
chmod a+rx /etc/default/grub

rsync -avh /home/glenn/local/other/backup/backup-etc-sys/boot/grub/*.png /boot/grub/
update-grub

I hope this gives someone an idea of the locations used.

#583 Re: Off-topic » My Ryzen 7 1700-X Cooling experience! » 2021-03-16 05:45:31

I have a Ryzen 2700+ on a ROG Strix (asus) x470-F Gaming board with a Noctua NH-U12P (se2)
and it's quite good, very quiet and surprisingly easy to configure it's speed in the bios(?) settings.
I had to get a special adaptor for it to fit this Mobo, but I'm glad I did. :-)

#584 Re: Other Issues » [Solved] Dev1Galaxy Login Problem (Palemoon) » 2021-03-10 11:28:52

I also use Palemoon for this forum and have no probs, I also use eMatrix blocker.

turn eMatrix off while you check. Once you have it working turn eMatrix back on and set it up so you get no interference.

It's probably a cache issue...

#585 Re: Off-topic » Digital minimalism. How many applications do you use daily » 2021-03-06 11:13:35

about 12 non-system gui programs
text editor: kate
Web browsers: Palemoon (browsing) and Firefox (radio)
Clementine: Music
Dolphin: file manager
vlc: video clips and movies
Steam: CounterStrike:Source
Konsole: Terminal console
Synaptic: Package Manager
gwenview: Picture organiser
fslint: file management
OpenTTD: Logistics game (virtual train set)
... Oh well, maybe 10.

#586 Re: Off-topic » Operating System Backups » 2021-03-06 01:51:14

I backup my personal data using

rsync -avh <source> <destination>

scripts (which are very basic bash commands)

I also use reverse instructions to restore. But I haven't had to do that in a long time, touch wood. :-)

I used to use "simplebackup" but it stopped working and support for it disappeared, but that was when I was still using Mageia/Mandriva (about ten years ago?).

Thankfully, Devuan Beowulf is more stable than any other OS I have ever used before.

#588 Re: Desktop and Multimedia » [SOLVED] No svg icons on display » 2021-03-04 08:53:26

Thanks for that, I've seen the same error message lately, when installing netbeans.

#589 Re: Installation » ASCII package installation » 2021-03-02 17:45:14

I managed to get netbeans to run, but I had to remove all the java jre and jdk packages from the Beowulf 3.1 install first. There were many conflicts.

But if you can expand/extract the pacakges from the ascii 2.1 iso, you may have joy with this list...

dpkg -i /home/glenn/local/archive/src/apt/debs-ascii2.1/pool/DEBIAN/main/s/subversion/subversion_1.9.5-1+deb9u4_amd64.deb /home/glenn/local/archive/src/apt/debs-ascii2.1/pool/DEBIAN/main/a/apr-util/libaprutil1_1.5.4-3_amd64.deb /home/glenn/local/archive/src/apt/debs-ascii2.1/pool/DEBIAN/main/a/apr/libapr1_1.5.2-5_amd64.deb /home/glenn/local/archive/src/apt/debs-ascii2.1/pool/DEBIAN/main/s/subversion/libsvn1_1.9.5-1+deb9u4_amd64.deb /home/glenn/local/archive/src/apt/debs-ascii2.1/pool/DEBIAN/main/g/gdbm/libgdbm3_1.8.3-14_amd64.deb /home/glenn/local/archive/src/apt/debs-ascii2.1/pool/DEBIAN/main/s/serf/libserf-1-1_1.3.9-3+deb9u1_amd64.deb

dpkg -i --force-downgrade /home/glenn/local/archive/src/apt/debs-ascii2.1/pool/DEBIAN/main/j/java-common/default-jdk_1.8-58+deb9u1_amd64.deb /home/glenn/local/archive/src/apt/debs-ascii2.1/pool/DEBIAN/main/j/java-common/default-jdk-headless_1.8-58+deb9u1_amd64.deb /home/glenn/local/archive/src/apt/debs-ascii2.1/pool/DEBIAN/main/j/java-common/default-jre-headless_1.8-58+deb9u1_amd64.deb /home/glenn/local/archive/src/apt/debs-ascii2.1/pool/DEBIAN/main/j/java-common/default-jre_1.8-58+deb9u1_amd64.deb /home/glenn/local/archive/src/apt/debs-ascii2.1/pool/DEBIAN/main/o/openjdk-8/openjdk-8-jre-headless_8u222-b10-1~deb9u1_amd64.deb /home/glenn/local/archive/src/apt/debs-ascii2.1/pool/DEBIAN/main/o/openjdk-8/openjdk-8-jre_8u222-b10-1~deb9u1_amd64.deb /home/glenn/local/archive/src/apt/debs-ascii2.1/pool/DEBIAN/main/o/openjdk-8/openjdk-8-jdk-headless_8u222-b10-1~deb9u1_amd64.deb /home/glenn/local/archive/src/apt/debs-ascii2.1/pool/DEBIAN/main/o/openjdk-8/openjdk-8-jdk_8u222-b10-1~deb9u1_amd64.deb /home/glenn/local/archive/src/apt/debs-ascii2.1/pool/DEBIAN/main/c/ca-certificates-java/ca-certificates-java_20170929~deb9u3_all.deb /home/glenn/local/archive/src/apt/debs-ascii2.1/pool/DEBIAN/main/j/java-common/java-common_0.58+deb9u1_all.deb

#install netbeans as (user) from the download directory
./netbeans-8.2-linux.sh
#run netbeans as (user)
/home/glenn/netbeans-8.2rc/bin/netbeans

I hope this helps you

ps, here is the list...

/pool/DEBIAN/main/s/subversion/subversion_1.9.5-1+deb9u4_amd64.deb
/pool/DEBIAN/main/a/apr-util/libaprutil1_1.5.4-3_amd64.deb
/pool/DEBIAN/main/a/apr/libapr1_1.5.2-5_amd64.deb
/pool/DEBIAN/main/s/subversion/libsvn1_1.9.5-1+deb9u4_amd64.deb
/pool/DEBIAN/main/g/gdbm/libgdbm3_1.8.3-14_amd64.deb
/pool/DEBIAN/main/s/serf/libserf-1-1_1.3.9-3+deb9u1_amd64.deb
/pool/DEBIAN/main/j/java-common/default-jdk_1.8-58+deb9u1_amd64.deb
/pool/DEBIAN/main/j/java-common/default-jdk-headless_1.8-58+deb9u1_amd64.deb
/pool/DEBIAN/main/j/java-common/default-jre-headless_1.8-58+deb9u1_amd64.deb
/pool/DEBIAN/main/j/java-common/default-jre_1.8-58+deb9u1_amd64.deb
/pool/DEBIAN/main/o/openjdk-8/openjdk-8-jre-headless_8u222-b10-1~deb9u1_amd64.deb
/pool/DEBIAN/main/o/openjdk-8/openjdk-8-jre_8u222-b10-1~deb9u1_amd64.deb
/pool/DEBIAN/main/o/openjdk-8/openjdk-8-jdk-headless_8u222-b10-1~deb9u1_amd64.deb
/pool/DEBIAN/main/o/openjdk-8/openjdk-8-jdk_8u222-b10-1~deb9u1_amd64.deb
/pool/DEBIAN/main/c/ca-certificates-java/ca-certificates-java_20170929~deb9u3_all.deb
/pool/DEBIAN/main/j/java-common/java-common_0.58+deb9u1_all.deb

#591 Re: Installation » [Solved] firefox-esr installed by Beowulf 3.1 dist-upgrade » 2021-02-25 11:34:07

It's a program that saves/backs-up websites. Mostly used by web site sys-admin types.

I used it to save neets, a navy electronics course site. :-)

You can save web page/s or entire sites (if you have permissions)

hope this helps.

#592 Re: Devuan » Meet Chimaera's deepsea theme » 2021-02-25 11:23:03

Looks great, very cool colours.

#594 Re: Desktop and Multimedia » PulseAudio always resets to mute » 2021-02-17 00:25:45

Head_on_a_Stick wrote:

For those who have laptops with HDMI outputs see this guide for setting the non-HDMI output as the default:

https://wiki.archlinux.org/index.php/Ad … sound_card

I'm using "~/.asoundrc" to personalise my sound config for the user.

#595 Re: Off-topic » Question about Linux kernel (as relates to systemd) » 2021-02-07 11:03:13

No, I was thinking of pulse source code, and no I can't prove that. Off topic, sorry about that.

#596 Re: Off-topic » Question about Linux kernel (as relates to systemd) » 2021-02-07 08:07:25

imho, I thought it, systemd stepped outside the FOSS agreement(?)/standards because the source code was not readily readable by a human.

#597 Re: Desktop and Multimedia » [Solved] On-line video viewing problem with Palemoon » 2021-02-04 23:36:14

Ron wrote:

For the Washington Post video, go to Tools > Preferences > Content, and at the bottom uncheck "Enable MSE for MP4 video." Didn't check the rest of your links, but if it's the audio that's the problem in all of them, they should all work properly now.

I'm testing Ron's suggestion, and just ran a Ted Talk "https://www.ted.com/talks/richard_coffi … anguage=en",

And the audio is fine. Thank you Ron. ;-)

I must add, most of the ted talks I have tried to play lately have been through FaceBook, so I'll check those links in future as well.

The vids were playing at normal speed, but with the audio pitch-shifted to Darthvader-like unintelligible.

Thank you

#598 Re: Desktop and Multimedia » [Solved] On-line video viewing problem with Palemoon » 2021-02-04 07:50:16

I also use Palemoon and have playback problems with TED talks, the audio sounds pitch-shifted down a couple of octaves... Following your post seeking tips.

#599 Re: Hardware & System Configuration » [SOLVED] Realtek r8153 USB-RJ45 » 2021-01-17 07:28:06

Make sure you have permission to use the device... someone here may tell us how.

perhaps like this...

lsusb
#Bus 003 Device 002: ID 0bda:8771 Realtek Semiconductor Corp.
chown -R glenn:glenn /dev/bus/usb/003/002

#600 Re: Installation » SOLVED: Devuan's "systemctl daemon-reload" » 2021-01-08 22:20:55

I use open-rc and I am able to control services with "service $service start|stop|restart|status".

Not all services are the same, ymmv.

rc-update and rc-service come in handy too.

Board footer

Forum Software