The officially official Devuan Forum!

You are not logged in.

#876 News & Announcements » [ANNOUNCE] - xorg-server 21.1.5 » 2022-12-14 10:30:34

Altoid
Replies: 0

Hello:

Got this in my mailbox this morning.

---

This release fixes 6 recently reported security vulnerabilities in various extensions.

The CVE numbers are:

CVE-2022-46340, CVE-2022-46341, CVE-2022-46342, CVE-2022-46343,
CVE-2022-46344, and CVE-2022-4283

For details on the these issues please see the security advisory here:
https://lists.x.org/archives/xorg-annou … 03302.html

https://xorg.freedesktop.org/archive/in … 1.5.tar.gz
PGP: https://xorg.freedesktop.org/archive/in … tar.gz.sig

https://xorg.freedesktop.org/archive/in … 1.5.tar.xz
PGP: https://xorg.freedesktop.org/archive/in … tar.xz.sig

---

Best,

A.

#877 Re: Installation » Devuan: Existential issues. » 2022-11-20 15:01:37

Hello:

Camtaf wrote:

I wonder how the poster will fair ...

Right ...

It would seem that those of us who had something to say have already said it and in the best possible way.
Whether it made any sense or helped at all is up to the OP and how he processes it.

But beyond that, there's no need to keep picking on the chap.

I'd like to think that we are better than that.

Best,

A.

#878 Re: Hardware & System Configuration » [SOLVED] System check/audit/rootkit tools » 2022-11-19 19:01:20

Hello:

steve_v wrote:

... appears to have very few dependencies ...
... less likely to make a mess than trying to install the chimarea binary package ...

I marked this thread as solved as I was able to update lynis without much ado or issues.
It runs properly as far as I can see, at least for the time being.

The solution is here.
Basically it involves importing a key and adding the CISOfy software repository to /etc/apt/sources.list.

Will eventually look into chkrootkit to see it the same thing can be done.
It looks like rkhunter has probably been abandoned so I will remove it.

Best,

A.

#879 Re: Hardware & System Configuration » [SOLVED] System check/audit/rootkit tools » 2022-11-19 16:39:38

Hello:

steve_v wrote:

...lynis appears to have very few dependencies ...
... amenable to a simple local backport

Thanks for the heads up.
I'll check it out.

steve_v wrote:

... some change that you need ...

I really don't know if I need it.
Because I don't know how much the threat scenario has evolved.

If it has evolved (high probability), goes to reason that newer version would address it.

steve_v wrote:

... just "newer must be better"?

Me?  8^D
Been in this far too long for that.

steve_v wrote:

... could just dist-upgrade to stable.

Yes, I could.

But first I have to make 100% sure my nvidia cards will work properly and I will still be able to use slim and wicd, among other old stuff I have installed and then comfortably get rid of the POS that Xfce is slowly turning into to get myself a set up like what Phillip Newborough's #! Waldorf* was.

* which I think should be the default template for both Devuan desktop-live and installer-iso versions.

steve_v wrote:

... going to sooner or later ...

Yes, I know. 8^°

Thanks a lot for your input.

Best,

A.

#880 Hardware & System Configuration » [SOLVED] System check/audit/rootkit tools » 2022-11-19 15:37:59

Altoid
Replies: 3

Hello:

Every so often and maybe not as regularly as I should, I run chkrootkit, rkhunterand lynis.
Always come up clean, or so it seems.

This is what I have installed:

~$ apt-cache policy chkrootkit && apt-cache policy rkhunter && apt-cache policy lynis
chkrootkit:
  Installed: 0.52-3+b10
  Candidate: 0.52-3+b10
  Version table:
 *** 0.52-3+b10 500
        500 http://deb.devuan.org/merged beowulf/main amd64 Packages
        100 /var/lib/dpkg/status
rkhunter:
  Installed: 1.4.6-5
  Candidate: 1.4.6-5
  Version table:
 *** 1.4.6-5 500
        500 http://deb.devuan.org/merged beowulf/main amd64 Packages
        500 http://deb.devuan.org/merged beowulf/main i386 Packages
        100 /var/lib/dpkg/status
lynis:
  Installed: 2.6.2-1
  Candidate: 2.6.2-1
  Version table:
 *** 2.6.2-1 500
        500 http://deb.devuan.org/merged beowulf/main amd64 Packages
        500 http://deb.devuan.org/merged beowulf/main i386 Packages
        100 /var/lib/dpkg/status
~$ 

Now, when I check available versions on-line I find that lynis seems to be the one with most active development, the latest version being 3.0.8 from last June while chkrootkit latest is at version 0.55 from June last year.

See https://cisofy.com/downloads/lynis/ and http://www.chkrootkit.org/

By comparison, rkhunter version 1.4.6 does not seem to have had any work done since 1.4.6 (2018).

See https://rkhunter.sourceforge.net/

My Beowulf installation runs on a backported kernel:

~$ uname -a
Linux devuan 5.10.0-0.deb10.16-amd64 #1 SMP Debian 5.10.127-2~bpo10+1 (2022-07-28) x86_64 GNU/Linux
~$ 

But there are no Beowulf backports to any of these tools, not even for lynis but the Chimaera repository has version 3.0.2-1 available.

Would it work on my backported system?
If so, how can I install it without making a mess?

Thanks in advance.

Best,

A.

#881 Re: Installation » Devuan: Existential issues. » 2022-11-19 11:47:17

Hello:

devuanuser wrote:

... With all due respect.
... mole on my lawn would be ...

I have followed this thread on and off, more than anything out of curiosity and to see just how far it would go.

There's not much to add to the more than suitable/correct answers you have received, save this:

I take personal exception to the tone in your posts, which I consider both unwarranted and absolutely out of place.
I would appreciate your showing more respect to those who volunteer their time and efforts to keep both Devuan and this site working.

I'm sure my words represent the opinion of an overwhelming majority here at Dev1, so please do take them into account.

And stop behaving like a five year old.

Best,

A.

#882 Re: Installation » [SOLVED] Is it possible to exclude a mirror? » 2022-11-18 17:01:44

Hello:

l3u wrote:

... Chimaera ...

Right.

l3u wrote:

... kernel version is not really relevant here, is it? ...

No.
But I like to see what the output says, just habit.

l3u wrote:
deb http://deb.devuan.org/merged chimaera main contrib non-free
deb http://deb.devuan.org/merged chimaera-updates main contrib non-free
deb http://deb.devuan.org/devuan chimaera-proposed-updates main contrib non-free
deb http://deb.devuan.org/merged chimaera-security main contrib non-free
deb http://deb.devuan.org/merged chimaera-backports main contrib non-free

Seems correct.
I would not use devuan chimaera-proposed-updates, because proposed.
Obviously, YMMV.

I think the explanation could be here.

Devuan has a network of package repository mirrors in place. The mirror network is accessible using the FQDN "deb.devuan.org" via http NOT https. Country Codes (CC) are currently unavailable but a specific mirror from the list can be accessed using the corresponding BaseURL.

The list is here.

There is/maybe some issue with FQDN "deb.devuan.org" and how/when it connects to debian.bio.lmu.de.

You could be able to solve the problem by following the suggestion above.
ie: ... a specific mirror from the list can be accessed ...

Best,

A.

#883 Re: Installation » [SOLVED] Is it possible to exclude a mirror? » 2022-11-18 11:19:06

Hello:

l3u wrote:

can I exclude a mirror ...

What Devuan version are you running and what mirrors are you using?

Please post the output of uname -a and cat /etc/apt/sources.list.

Also, have a look at this page.
ie: the "Default configurations" list

Best,

O.

#884 Re: Hardware & System Configuration » Nvidia drivers : No login console updating 470 to 510.85.2 » 2022-11-17 22:21:00

Hello:

thierrybo wrote:

... boot in console mode then "startx".
... no "X" involved yet.

The first thing I'd do would be to check the logs.
/var/log/Xorg.0.log in particular.

I use a pair of older nvidia cards (Quadro FX580) with three monitors and legacy 340.108 drivers from nvidia.
Although it is supposed to be able to work without it, I have never been able to do it without a properly configured xorg.conf.

To the extent of using the same xorg.conf for the last seven years or so and over three different distributions.
With Devuan since 2017.

Best,

A.

#885 Re: Desktop and Multimedia » Can you suggest some tips and tricks for speed up Devuan? » 2022-11-17 11:05:00

Hello:

aluma wrote:

... remind my colleagues of the ancient optimization algorithm ...
... assembly of the kernel for specific conditions ...

+1
With all the crap permanently being crammed into the kernel (much of it without comment), compiling the kernel will eventually become a must do for many.
ie: you end up finding out about them long after the fact when you have look at dmesg or system logs, something I do often.
That's what they are there for.

aluma wrote:

... an example ...
... modules in the kernel waiting for apparmor and tomoyo.
... have neither one nor the other, why load them ...

Well ...

Probably because there are quite a bit of aspiring Poetterings amidst the Debian devs/maintainers.
Fortunately there are ways to avoid loading them, for the time being.

aluma wrote:

... already played enough in the compilation ...

I never got around to doing that.
Too much time and energy needed.

A.

#886 Re: Other Issues » [SOLVED] update problems » 2022-11-14 15:19:03

Hello:

pootler wrote:

Thanks ...

You're welcome.

pootler wrote:

Sorry, doesn't take long ...

No need.
Absolutely no one is born knowing. 8^)

The code and /code bits have to be put between brackets ie: [ ], like all the other ones you see at the top following "Post a reply -  ".
Find your post with the terminal output, click on Edit and add the flags.

You can also select multiple lines (ie: paint) and click on the flag you want to use and all that you painted will start and end with the proper flag.

Best,

A.

#887 Re: Other Issues » [SOLVED] update problems » 2022-11-12 23:28:21

Hello:

pootler wrote:

THanks ...

You're welcome.

pootler wrote:

output here ...

Right.

But first I'll ask you to edit your previous post so that the terminal output is seen as code.
That way it is easier to see and check separately from the text.

To do that, you have to add the code and /code tags to the start and end (respectively) of the output you copied/pasted on the screen.

Do a preview and check if it is seen like this:

Linux devuan 4.19.0-22-amd64 #1 SMP Debian 4.19.260-1 (2022-09-29) x86_64 GNU/Linux

Best,

A.

#888 Re: Other Issues » [SOLVED] update problems » 2022-11-12 11:40:57

Hello:

pootler wrote:

Linux newbie ...

Right.

Most important when asking for assistance is to provide as much information as possible.

Devuan is mostly what people ask about here.
But it could be Devuan Chimaera 4.0 (stable) or Devuan Beowulf 3.0 (oldstable) or maybe an older version.

It would be a start in the right direction but not enough.
No one here can see your deskop (eventually but not just yet) so they will need to know a bit more than that ...  8^°

So, for starters, please post the terminal printout result of this:

~$ uname -a

And these:

~$ apt list | grep installed | grep desk
~$ sudo dmesg | grep -i "error\|warning\|fail\|segfault\|fatal\|not"

All the information you post will enable those who can help you to actually be able to do it.

Best,

A.

Edit: grammar, syntax, etc.

#889 Re: Desktop and Multimedia » How disable apparmor? » 2022-11-01 16:13:38

Hello:

Evenson wrote:

Is it really needed to have boot command security=none ?
... was not aware of this extra step.

You would be if you had taken the time to read the whole thread.  8^D

Altoid wrote:

Check if you have some other stuff called tomoyo, another gift from the Debian devs.
You have to add security=none to the kernel command line to avoid that one.

Best,

A.

#890 Re: Desktop and Multimedia » How disable apparmor? » 2022-10-31 22:59:57

Hello:

deepforest wrote:

so, solution here is remove apparmor?

Devarch wrote:

What is wrong with apparmor?

Please take a few minutes and read the thread and the content of the links posted.

As I see it, both questions have already been answered.
As always, YMMV.

Best,

A.

#891 Re: Desktop and Multimedia » How disable apparmor? » 2022-10-31 15:52:09

Hello:

delgado wrote:

What about

apt remove apparmor

Yes.
But then you upgrade the kernel and there it is again.

At least that's what happens to me (Beowulf with backported kernel) when I upgrade the kernel.
Even though my kernel command line clearly says apparmor=0 (!)

What I always do is purge apparmor after the upgrade and before rebooting and make sure the kernel comand line has not been edited.

[root@devuan ~]# apt purge apparmor

If it is now a module, one sure way is to blacklist it.

Check if you have some other stuff called tomoyo, another gift from the Debian devs.
You have to add security=none to the kernel command line to avoid that one.

See these two three posts:

https://dev1galaxy.org/viewtopic.php?id=2630
https://dev1galaxy.org/viewtopic.php?id=4329
https://dev1galaxy.org/viewtopic.php?id=4750

Best,

A.

#892 Re: Installation » How to make sure that the system is restored after a breakdown? » 2022-10-23 00:40:06

Hello:

deepforest wrote:

... manually install some x32 packages, my Devuan Ceres x64 is broke.

Devuan Ceres is unreleased/unstable. ie: where developers refine and stabilize the latest package versions.
It will break because that is what it does best.

In my opinion, your best bet is to reinstall from nought or use a stable release to avoid this type of issues.

Best,

A.

#893 Re: Hardware & System Configuration » ACPI 2.0 question » 2022-10-20 22:35:18

Hello:

pcalvert wrote:

Thanks ...

You're welcome.

pcalvert wrote:

... most ...  ... are related to missing firmware.

All the hardware works properly?

pcalvert wrote:

... couple are related to ACPI ...

Yes, I'd say those are more or less standard.
Like this one I have in my box:

[ 1.324984] acpi PNP0A08:00: ignoring host bridge window [mem 0x000d0000-0x000dffff window] (conflicts with Adapter ROM [mem 0x000ce000-0x000d3bff])
[ 1.327999] pci 0000:00:1f.0: quirk: [io  0x0800-0x087f] claimed by ICH6 ACPI/GPIO/TCO

This type of memory conflict is due (so I have had explained to me) to a badly written BIOS.

As the kernel evolves, these messages/warnings also evolve/change.
In time, some messages end up going away.

This is all crud generated by the fact that OEMs and BIOS writers are ruled by what MS wants and nothing else.

But this should not happen, much less in a box like mine, a Sun Microsystems Ultra24 WS which was released 15 years ago (10/2007) with the most basic configuration going for ~ US$1.000, a very hefty price tag at the time. (I purchased it used in 2011, of course)

OEMs (Sun included) didn't/don't give a monkey's toss if the BIOS they slapped together from bits and pieces of other older ones does or does not comply with what ACPI says in their specifications, as long as it certifies for hardware that ships with Windows OSs.

And if they have to do it the MS way because the ACPI way does not play ball with the currently shipping Windows OS, they just do it.
Otherwise their hardware will not be "Windows Certified", which means that it won't sell.

That's about it, you have to endure it.
Till we get open source BIOSes and that will be the end of it.

But I really don't see it coming any time soon.

Best,

A.

#894 Re: Devuan » Devuan kFreeBSD » 2022-10-14 12:03:56

Hello:

Danielsan wrote:

... fantastic if Devuan could inherit and revive ...

I beg to differ, it would be anything but fantastic.

Please don't take it personally but I find it really hard to get my head around what you are proposing.

Devuan quite definitely does not need to inherit other people's projects or invest time and manpower to revive anything.
Much less something that no one else seems to have any interest in.

What the Devuan project needs, in the face of its present situation, is to manage to stay alive.

Like I recently posted elsewhere:

Altoid wrote:

I'm quite sure there are a great many areas where your expertise could be very useful to the Devuan project.

The most delicate part of the balance the Devuan project has achieved is related the dependency it has on Debian.

eg:
As most of us know, Debian's systemd brainchild (pun intended) has left Debian and now works for MS.

Now, if in spite of his having left Debian, Poettering's accolytes decide to continue to push things even further and eventually manage to alter that delicate balance, the Devuan project will undoubtedly be in great danger.

ie: Debian software which now can run on Devuan thanks to the efforts of the Devuan developers/maintainers could directly cease to be available or be too time-expensive for the project's team to adjust them to the systemd-less Devuan.

Eventually, Devuan would have no applications to run and cease to exist.

And, as you surely grasp, that is something that would affect all Devuan based distributions.

The Devuan project cannot under any circumstance afford to undertake this sort of thing.
Makes no sense at all.
What the $%#" for, to what end?

As if it does not already have more than enough on it's developer's/maintainer's plates.

Like I said: the Devuan project, first and foremost, needs to be able to survive.
And that, by itself, is a huge undertaking.

And if it can be pulled off, it will truly be a huge accomplishment.

Best,

A.

#895 Re: Hardware & System Configuration » ACPI 2.0 question » 2022-10-13 01:45:14

Hello:

pcalvert wrote:

... noticed that ACPI 2.0 is disabled by default.
Should I enable it ...
... computer shuts down, hibernates, and suspends normally ...

If everything works properly ...  8^°

But just for curiosity's sake, you can have a good look at your dmesg printout and see if there are any ACPI errors.
Run this and see what you get:

sudo dmesg | grep -i "error\|warning\|fail\|segfault\|fatal"

Bear in mind that some ACPI errors are a permenent fixture in older boards but the kernel takes care of it:

user@devuan:~$ sudo dmesg | grep -i "error\|warning\|fail\|segfault\|fatal"
--- snip ---
[  0.021101] ACPI BIOS Warning (bug): 32/64X length mismatch in FADT/Gpe0Block: 128/64 (20200925/tbfadt-569)
[  1.318080] ACPI BIOS Error (bug): Could not resolve symbol [\_SB._OSC.SUPP], AE_NOT_FOUND (20200925/psargs-330)
[  1.318088] ACPI Error: Aborting method \_SB._OSC due to previous error (AE_NOT_FOUND) (20200925/psparse-531)
--- snip ---
user@devuan:~$ 

I don't use suspend or hibernate and as my Sun Ultra 24's BIOS is an absolute POS, I have to bear an ocassional, totally random and non-reproducible shutdown issue which I think is related to some internal temp sensor and how it interacts with the box's ventilation.

Best,

A.

#896 Re: Other Issues » [SOLVED] optimized initramfs howto » 2022-10-09 13:39:24

Hello:

Head_on_a_Stick wrote:

... refers to Arch's udev hook.
Debian does not use the same methods as Arch ...

Indeed ...
I noted that after posting but forgot all about it.
Sorry about that.

Head_on_a_Stick wrote:

... so the statement is irrelevant.

Quite so.

But I'm sure it had not escaped you that the OP had already answered my post.
And in doing so, gracefully pointed out the difference between Debian and Arch to me.

Nevertheless, thanks for your input.   8^D

Best,

A.

#897 Re: Other Issues » [SOLVED] optimized initramfs howto » 2022-10-08 11:17:14

Hello:

amc252 wrote:

... anyone point me to an howto?

Besides following HoaS' instructions, to may find this link (or parts of it) useful.

If you need udev, your minimization efforts will most likely be in vain.

Best,

A.

#898 Re: Off-topic » Best plan of action - Porting Debian based distros to a Devuan base » 2022-10-08 11:01:34

Hello:

Welcome to Dev1.  8^)

b1t5murf wrote:

Devuan has saved the day many times for me ...

Indeed.
I dare say for all of us here.

b1t5murf wrote:

... able to contribute back in some way to further advance the adoption of Devuan.

I'm quite sure there are a great many areas where your expertise could be very useful to the Devuan project.

The most delicate part of the balance the Devuan project has achieved is related the dependency it has on Debian.

eg:
As most of us know, Debian's systemd brainchild (pun intended) has left Debian and now works for MS.

Now, if in spite of his having left Debian, Poettering's accolytes decide to continue to push things even further and eventually manage to alter that delicate balance, the Devuan project will undoubtedly be in great danger.

ie: Debian software which now can run on Devuan thanks to the efforts of the Devuan developers/maintainers could directly cease to be available or be too time-expensive for the project's team to adjust them to the systemd-less Devuan. ..

Eventually, Devuan would have no applications to run and cease to exist.

And, as you surely grasp, that is something that would affect all Devuan based distributions.

In my opinion (YMMD) the Devuan project does not need to find a way for Debian based distibutions to be easily converted to Devuan.
The Devuan project, first and foremost, needs to be able to survive.

And that, by itself, is "... a massive undertaking".

If the Devuan project can manage that, everything else will fall in place by itself.

b1t5murf wrote:

... input or suggestions are very welcome

Done.

Best,

A.

Edit: spelling/syntax

#899 Re: Off-topic » Xfce 4.18 at Christmas » 2022-10-03 13:26:29

Hello:

andyprough wrote:

... not trying to stir up anything ...

No ...
Gods forbid.  8^°

andyprough wrote:

... do like obsolete software ...

In my opinion, the term obsolete is a (highly) relative one.

And like many other things in life, it all depends.

eg:
I have heard my (much younger) colleagues say that if you don't know CAD (I refused to ever use it) you are obsolete as an architect.
Somehow they have developed the idea that if you know how to use CAD, not only it turns you into an architect but a good one at that.

But what happens when power goes down, their software goes south just because liucence or whatever or they lose their day's work due to HDD problems?

I'll keep drawing free-hand or with my wooden T-square, triple scale and squares on my drafting table.   
And quickly draw up a set of multi direction internal/aerial views of the project, something which they never learnt how to do without CAD.

I will be able to see and explain the whole project, not just a small sector on a screen, and anyone with a set of eyes will be able to understand it.

So ...
Just who became obsolete in an instant?  8^\*

But I digress ...

andyprough wrote:

... still find the 11.1.0 ISO of SharpBang from last October ...

Indeed, here.(?)
Some backgound also.

Seems like very good quality work, had not seen it before.
IMO, if at all possible, it would be great to add a strictly Devuan version (a meta package?) to the repository as a tool to set up Openbox/Tint2 as the default Devuan desktop.

ie: for those of us who appreciate obsolete things for their true value.

Best,

A.

#900 Re: Off-topic » Xfce 4.18 at Christmas » 2022-10-02 17:07:55

Hello:

MiyoLinux wrote:

I never had the pleasure of using #!

Then see if you can get yourself an install or live *.iso.

Just to try it out and see how very good it was.
The Waldorf version may be a bit dated but should without issues run on common 4/5 year old hardware.
ie: not bleeding edge stuff.

It was (at the time) a real eye opener for me and led me straight to Devuan.

MiyoLinux wrote:

... would appear to me that both the Star and Crowz derivatives of Devuan are similar to what #! was?

No idea, have never tried/installed them.

I may have downloaded them both (when I was looking for a new distribution to replace Mint/PCLinuxOS, etc. and burned the *.iso to a stick.
But if after all the routine checks (file and media) it did not boot the first time around, I would discard it from the list.

I stopped looking when I found Devuan.
And I will stay with it even if the powers that be insist on Xfce.

I'll just see how I can manage to do things the #! way.

Or maybe the Devuan maintainers could eventually write up a script to set up a #! type desktop in Devuan.
ie: an Openbox meta package of sorts.

I seem to recall PCLinuxOS (?) had a meta package for installing PegasusMail which pulled in all the necessary files and configurations to set it up along Wine.

Very neat, simple and straightforward as you did not have to wrangle with Wine.

Best,

A.

Board footer

Forum Software