You are not logged in.
Hello:
Ahh ...
Thanks a lot for that. ;^ )
I'll have a look and see what I get from using that method.
Best,
A.
Hello:
@OP: create a file at /etc/sysctl.d/reisub.conf ...
Yes.
Creating the file in my box made it work.
And yes, it did work before without the /etc/sysctl.d/reisub.conf file.
Now, how long ago was before, I have not had a chance to use it much, so I really can't say.
O.
Hello:
... can't actually disable encryption over ssh ...
... use a simple cipher like Blowfish ...# rsync -e "ssh -o compression=no -c blowfish" -a -stats ~/media/bckups root@192.168.1.3:/mnt/sda3
I'm afraid that dropbear does not do blowfish.
~$ rsync -e "ssh -o compression=no -c blowfish" -a --stats /media/bckups root@192.168.1.3:/mnt/sda3
Unknown cipher type 'blowfish'
rsync: connection unexpectedly closed (0 bytes received so far) [sender]
rsync error: unexplained error (code 255) at io.c(235) [sender=3.1.3]
~$ See: https://dropbear.nl/mirror/CHANGES
CBC ciphers, 3DES, hmac-sha1-96, and x11 forwarding are now disabled by default.
They can be set in localoptions.h if required.
Blowfish has been removed.
... without encryption use rsh instead, as supplied by the rsh-client & rsh-server packages ...
Unfortunately, I have not found the rsh package in the OpenWRT repository so that's a dead end.
Looking around for similar situations, I found this:
https://www.glidk.com/2021/12/22/benchm … ppy-router
It's a post by a chap using a small travel router with a lower spec than the WD-MBL:
Brand/Name WD-MBL GL-AR750
CPU: PowePC 44x Qualcomm Atheros
Model: APM82181 QCA9531
CPU Cores: 1 1
CPU MHz: 800 650 <----- #
Flash Mb: 512 16
RAM MB: 256 128 <----- #
BogoMIPS: 1600 432.53 <----- # It would seem that he achieved speeds using just the rsync protocol and bypassing ssh.
I don't undertand how he's set this up and cannot find how to contact the guy.
The WD-MBL, save for the HDD/SD card difference, seems to be much heftier.
Could I be able to get at least his 10.0Mb/s?
Can you make any sense of what he's done there?
Thanks in advance.
A.
Hello:
... backup my desktop and nas with rclone ("rsync for the cloud") ...
Hmm ...
Sorry, I don't do anything cloudy and have no trust in that type of thing.
But that's just me, YMMV.
Notwithstanding, thank you very much for your input. ;^)
Best,
A.
Hello:
Disable encryption for rsync operations over ssh ...
My box has an on-board 82566DM-2 Gigabit Network adapter.
The WD My Book NAS has a Gigabit Ethernet port.
---
Forgot to mention that at this point I purchased/installed a four/five port unmanaged Gb switch (TL-SG105).
---
Part of this problem had to do with the CAT5e cables I was using.
Found out when I used ethtool to check the on-board ethernet adapter on the NAS and saw it was reporting 100M:
root@OpenWrt:~# ethtool eth0
Settings for eth0:
--- snip ---
Advertised auto-negotiation: Yes
Advertised FEC modes: Not reported
Speed: 100Mb/s <-------------------------- #####
Duplex: Full
--- snip ---
root@OpenWrt:~# With a set of new CAT5e cables and properly negotiating 1000Mb/s between my box and the NAS, I tested the link with iperf:
root@OpenWrt:~# iperf -s
------------------------------------------------------------
Server listening on TCP port 5001
TCP window size: 128 KByte (default)
------------------------------------------------------------
[ 4] local 192.168.1.3 port 5001 connected with 192.168.1.2 port 35408
[ ID] Interval Transfer Bandwidth
[ 4] 0.0-10.0 sec 771 MBytes 645 Mbits/sec
root@OpenWrt:~# groucho@devuan:~$ iperf -c 192.168.1.3
------------------------------------------------------------
Client connecting to 192.168.1.3, TCP port 5001
TCP window size: 85.0 KByte (default)
------------------------------------------------------------
[ 3] local 192.168.1.2 port 35408 connected with 192.168.1.3 port 5001
[ ID] Interval Transfer Bandwidth
[ 3] 0.0-10.0 sec 771 MBytes 646 Mbits/sec
pcl@devuan:~$ Good enough, I guess.
But I was expecting something like the 94Mb /s I get between the NAS and my netbook which has a 10/100 ethernet adapter.
ie: if with a 10/100 connection I can get 94% of 100M, I was expecting at least 85% from the box to NAS connection at 1000M - 850 Mbits /s instead of 645 Mbits /s.
I'm assuming it is proportional, it probably isn't.
I've just finished running the same rsync job that took over 18 hours (first time/empty destination) the last time I ran it ie: before switching all the patch cables for new CAT5e ones and as a result getting the iperf speeds reported above, 646 Mbits/sec
All through the job, my conky panel reported a speed of ~7.45MiB /s
Incoming: 114KiB /s
Outgoing: 7.46MiB /sThese were the NAS's CPU/Memory loads during the job:
PID Owner CPU Mem Process
213 root 9% 0% kswapd0
1904 root 67% 0% Dropbear
1905 root 0% 7% rsync --server
1906 root 22% 13% rsync --serverMy guess is that NAS's CPU is totally maxed out.
ie: just kswap 9% + dropbear 67% + rsync 22% =>>> 98%
dropbear is the SSH2 server/client included in OpenWRT installation image, only 82k.
Evidently, with this hardware* a 67% CPU load is rather expensive to run.
*Applied Micro APM82181 @800 MHz + 256 MB RAM
... use rsh instead of ssh (but only do the latter on a local network ...
I don't really neeed encryption as it is all local traffic.
ie: going nowhere else but from a back-up drive inside my box to the NAS under my desk.
But I do need rsync.
I use ssh to login to the NAS, how do I disable encryption?
Have never used/heard of rsh, have to look it up.
Thank you very much for your input.
Best,
A.
Hello:
... fixed the bug with patches that introduced more bugs?
Yes ...
Which would mean that maybe they really didn't fix anything.
ie: just made it worse.
Fortunately I was able to purge that from my box.
Best,
A.
Hello:
... had been very similiar to yours ...
Probably with the same infamous Telefonica ADSL routers. 8^|
You are correct ...
... with 4 up to 16 ports.
Great.
But I have no need for more than 4 ports at the moment.
Unless I get a very good price for one with more.
Thanks a lot for for your input.
Best,
A.
Hello:
For the initial transfer, maybe you can bypass the router ...
Yes, that would work.
But it's rather a hassle to do the setup.
... you could add a faster router ...
I've been looking at second hand 4/5 port gigabit routers and desktop switches to plug in all my gear ie: box, netbook and NAS.
Nothing into the router save the new router/switch.
That way the link from box to NAS would go through the GB router/switch and not through the telco router with the 100M ports.
Am I correct?
If so, maybe just a 'dumb' desktop switch would do the trick?
Not sure about how the phone works but it might be possible ...
I am having a contentious issue with the local telco regarding VoIP, which they are intent in shoving down my throat.
I don't want it but they insist, to the point of threatening to cut my land line and leave me without a phone.
So I'd rather not muck with the ADSL router's setup.
They have a habit of resetting it remotely and screwing up the DNS settings pointing to a VM running inside my box (Pi-Hole+Unbound).
Think a 'dumb' switch may do well enough?
Thanks for your input.
Best,
A.
Hello:
... 11MB/s with rsync or sftp on the local network, Cat6 with gigabit router.
My telco provided ADSL router config page says that LAN/WAN speed in both ports (my box and the NAS) is 100M/Full.
My box has an on-board 82566DM-2 Gigabit Network adapter.
The WD My Book NAS has a Gigabit Ethernet port.
Seems the problem is the bloody router as everything goes through there.
No wonder.
Can't change the telco router. I'd lose my landline.
Any suggestions?
Thanks in advance.
Best,
A.
Hello:
For backing up what I have in my box I use two applications: Timeshift and BackInTime.
Timeshift takes system snapshots and BackInTime takes /user/home snapshots with the usual exclusions.
It has always worked quite well.
Up to now, all the generated snapshots were stored on a separate 2.5" SATA 500Gb drive rigged into the box.
It has one partition and two directories: /media/bkups/backintime and /media/bkups/timeshift.
This was not the ideal solution and after procrastinating for the longest while got a 1TB NAS to back-up the contents of that 500Gb drive.
The back-up drive inside the box is 38% used ie: 174GiB / 457GiB according to my conky panel.
Late yesterday I set about doing the first rsync from my box to the NAS.
[root@devuan ~]# rsync -a -stats ~/media/bckups root@192.168.1.3:/mnt/sda3I started it @22:55 last night and it is still going ... @17:00 !
I understand that a first sync to an empty drive takes much longer and that file size ie: a great many small files can make the operation last a lot longer.
But it's been almost 18 hours.
Maybe I should have cp'd everything over first?
The conky panel says:
Outgoing: 6.57MiB /s total: 410GiB
Does that not seem like a lot of overhead?
Thanks in advance,
A.
Hello:
For those who have not purged log4j from their systems:
Originally mentioned here (late December 2021) at Dev1 by hevidevi here ...
https://dev1galaxy.org/viewtopic.php?id=4715
... and then press here:
https://www.theregister.com/2022/03/16/ … net_log4j/
We now have this:
https://www.theregister.com/2022/04/20/ … j_patches/
Amazon Web Services has updated its Log4j security patches after it was discovered the original fixes made customer deployments vulnerable to container escape and privilege escalation.
The vulnerabilities introduced by Amazon's Log4j hotpatch – CVE-2021-3100, CVE-2021-3101, CVE-2022-0070, CVE-2022-0071 – are all high-severity bugs rated 8.8 out of 10 on the CVSS.
A.
Hello:
/usr/local/bin/ is not in your user's PATH ...
Yes. v
I did not want to get into fussing with PATH.
I still have to find where it is set ... 8^|
No idea ...
It is not in the *.img and editing /etc/*preinit did not work.
You have to create /etc/profile.d and populate it accordingly.
Thanks for your input.
Best,
A.
Hello:
Thanks ...
You're welcome.
... a try myself.
Obviously, the use you can give it depends on the hardware you run it on.
eg: I use a MyBook Live which has a SATA HD instead of firmware.
As this would be OT/non Devuan, feel free to contact me.
Best,
A.
Hello:
... a way to create a regular user on this OpenWrt ...
Yes.
It is not as straight forward as in a regular distribution because the tools are not installed by default.
In these router firmwares such as OpenWRT (an OS by any other name), space is at a premium.
So if it is not needed, it is not in the image to install.
And if you need it, make sure it is not in BusyBox before you install it.
That said, first you have to install at least these files from the OpenWRT repository:
To manage groups in your system.
shadow-groups
shadow-groupadd
shadow-groupdel
To manage users in your system:
shadow-useradd
shadow-userdel
shadow-usermod
You may also want to install sudo to put your user in /etc/sudoers.d/ with strict premissions for specific tasks that require elevated privileges.
You then proceed more or less as would be usual in a regular distributions.
Some things you'll have to do by hand.
There are quite a few more shadow-* files available but I still have to see what they are about.
eg: shadow-login, shadow-logout.d, shadow-passwd, etc.
Unfortunately, the wiki pages about OpenWRT packages are all but empty.
Check this page: https://openwrt.org/docs/guide-user/base-system/users
groucho@OpenWrt:~$ whoami
groucho
groucho@OpenWrt:~$groucho@OpenWrt:~$ groups
adm ftp users network ntp groucho
groucho@OpenWrt:~$ Edit: keep in mind that a regular user ie: not root can only log in via ssh.
I think there may be a file in the repository that would add something to the UI to be able to add another user.
Can't recall if it was OpenWRT or the WD software.
If you find anything interesting, please let let me know.
Best,
A.
Hello:
... could have moved /root/shutdown to /usr/bin/ ...
Originally I had it in /usr/local/bin.
As I could not get it to work unless I used ./, I moved it.
I did not want to get into fussing with PATH.
I still have to find where it is set ... 8^|
... could have added /root/ to PATH ...
Hmm ...
I may have a thing for abusing cat ...
But I do know that is not a thing to do.
... placing the actual script itself at /usr/bin/shutdown seems more sensible.
OK.
It works well as it is but I'll move it to its proper place later today.
Thanks for your input.
Best,
A.
Hello:
# mv /usr/bin/closebook.sh /usr/bin/shutdown
Perfect. 8^)
Thank you very much.
Could you tell me what I was doing wrong?
Was it having script to call another one?
Thanks in advance,
A.
Hello:
... maybe in your closebook.sh script you should not declare the PATH=/bin:/sbin ...
I put it in just in case the system path has some issue.
Belt and suspenders thing.
But that would not seem to be the problem because the script is found and the executables in it are run properly.
What is not being found is the script that calls closebook.sh unless I run it as ./shutdown.
I just realised that the /root folder is not in the system PATH variable:
root@OpenWrt:~# $PATH
-ash: /usr/sbin:/usr/bin:/sbin:/bin: not found
root@OpenWrt:~# This one:
root@OpenWrt:~# ls
shutdown
root@OpenWrt:~# Which you can see here:
root@OpenWrt:/# ls
bin dev lib mnt proc # root # srv tmp var
boot etc lost+found overlay rom sbin sys usr www
root@OpenWrt:/# No idea as to how to follow up.
Surely it is not a good idea to have the root folder in the path.
Thanks for your input.
Best,
A.
Hello:
Still playing around with my new My Book Live thingy, trying to set up a solution to the lack of a shutdown command in this PowerPC 44x processor.
This is the OpenWRT installed on the unit:
~# uname -a
Linux_book 5.4.179 #0 Wed Feb 16 20:29:10 2022 ppc GNU/Linux
~# I wrote a script to shut down the board gracefully:
root@OpenWrt:/usr/bin# cat closebook.sh
#!/bin/sh
# script to stop drive and shut down MBL
# gives ~15s from blue led <on> to unplug unit
PATH=/bin:/sbin
sync && wait && hdparm -Y /dev/sda && wait && halt
root@OpenWrt:/usr/bin# The script is executable:
root@OpenWrt:~# ls -l /usr/bin/closebook.sh
-rwxr-xr-x 1 root root 166 Apr 17 08:40 /usr/bin/closebook.sh
root@OpenWrt:~# Once the front LED goes from green to blue, you have to physically disconnect power to the board within ~15s, otherwise a watchdog will sense the new situation and proceed to reboot the board.
For the time being, I call the /usr/bin/closebook.sh from ~/ with another script:
root@OpenWrt:~# cat shutdown
#!/bin/sh
sh -c '/usr/bin/closebook.sh'
root@OpenWrt:~# The script is executable:
root@OpenWrt:~# ls -l shutdown
-rwxr--r-- 1 root root 40 Apr 17 10:07 shutdown
root@OpenWrt:~# It works as intended and have not had an instance where the plug was pulled late or where the watchdog reboot caused any issues.
Unsurprisingly, not shutting down in this manner will always cause dmesg to print this:
[ 0.907630] EXT4-fs (sda2): warning: mounting unchecked fs, running e2fsck is recommended
[ 5.802598] EXT4-fs (sda1): warning: mounting unchecked fs, running e2fsck is recommendedThe main problem is that while /dev/sda1 but can be unmounted to run e2fsck, /dev/sda2 holds the rootfs and cannot be unmounted:
root@OpenWrt:~# blkid
--- snip ---
/dev/sda2: LABEL="rootfs" UUID="ff313567-e9f1-5a5d-9895-3ba130b4a864" BLOCK_SIZE="4096" TYPE="ext4" PARTUUID="228c756a-02"
--- snip ---
root@OpenWrt:~# But I digress ...
The thing is that to run the script I have to do it with ./, otherwise it is not found:
root@OpenWrt:~# shutdown
-ash: shutdown: not found
root@OpenWrt:~# This even though I am running it as root and it is located in what would be home directory:
root@OpenWrt:~# ls
shutdown
root@OpenWrt:~# The system's $PATH:
root@OpenWrt:~# $PATH
-ash: /usr/sbin:/usr/bin:/sbin:/bin: not found
root@OpenWrt:~# I'm sure it is a $PATH issue ...
What am I doing wrong?
Thanks in advance,
A.
Hello:
... that system would have to enable some sort of admin ...
... possible to build busybox ash, bash with certain flags to enable ...
Could be.
But the idea is to avoid building anything with/for OpenWRT as it would complicate eventual sysupgrades.
I found this:
https://forum.sailfishos.org/t/busybox- … sh/6808/11
Not really a big deal.
When I finally get this NAS figured out and running as I want, I won't be needing access all the time like I'm having to do now.
I'll mark this thread solved.
Thanks for your input.
A.
Hello:
Why would anyone want systemd in the first place?
Indeed ...
+1 8^D
systemd is the absolute opposite of basic Linux philosophy.
ie: Write programs that do one thing and do it well.
A.
Hello:
try these in your .bashrc if you do not already have them.
export HISTSIZE=10000 export HISTFILESIZE=10000 export HISTCONTROL=ignorespace:ignoredups
Hmm ...
I don't have a user set up on this system.
Maybe that's the reason? Have not had time to set up sudo either yet.
Edit:
I keep forgetting that this is a small footprint OS for embedded systems, a very different type of Linux.
That means that I should look in the right place and not bug my fellow Dev1 members.
OpenWRT does not use bash but ash.
From: https://forum.openwrt.org/t/enable-bash-history/70815
Ash (mainly the dash fork) is also fairly popular in embedded Linux systems. dash version 0.3.8-5 was incorporated into BusyBox 3, the catch-all executable often employed in this area, and is used in distributions like DSLinux, Alpine Linux 1, Tiny Core Linux and Linux-based router firmware such as OpenWrt, Tomato and DD-WRT.
and
ash is provided by busybox, which provides all basic shell & Linux default app features in OpenWrt.
You can enable the history feature in busybox and recompile a personal version of it for yourself, so that you can have ash that remembers history.
ash is part of the firmware image and while I can install the bash package, it will not survive a system upgrade.
There seems to be a work-around, I'll have to investigate further.
Thanks a lot for your input.
Best,
A.
Hello:
Playing around with SSH and my new My Book Live thingy, i have found a few things I'm used to do not work as expected.
This is the OpenWRT installed on the unit:
~# uname -a
Linux_book 5.4.179 #0 Wed Feb 16 20:29:10 2022 ppc GNU/Linux
~#
dmesg shows this:
One of those things is the bash history I use a lot.
It is an important part of my slow-ish training to eventually master the use of the terminal as much as possible.
eg: the history does not survive a reboot of the system.
How can I fix this?
Thanks in advance,
A.
Hello:
... example of 2020's firmware for this system ...
... OpenWRT
... if anyone here has done anything on these WD thinguies.
Seems I'm the only one here scavenging on old hardware. 8^D
I'll mark this thread as solved.
I have managed to successfully install OpenWRT 21.02.2 to the WD-MBL and it is working, albeit with an expected issue: it seems that the APM821xx processor does not have a way to poweroff or even halt.
So while I'm installing a couple of missing utils I see if I can find a suitable work around, maybe with a script and a switch for when it needs to be moved or taken off-line for a few days.
Best,
A.
Hello:
You may find this helpful.
Thanks but I finally managed to successfully reset the unit late tonight.
After that it got assigned a proper IP by the router and I can access it via ssh and the UI via a browser.
After checking it out, I see it runs on an old linux kernel:
~# uname -a
Linux MyBookLive 2.6.32.11-svn70860 #1 Thu May 17 13:32:51 PDT 2012 ppc GNU/Linux
~# I have to look into something newer without all the media suff the original FW has as I want to use it as a backup drive.
eg: Twonky, iTunes, etc.
But there's does not seem to be much available for PowerPC/ppc32 these days as Debian dropped support when Debian 8 came out.
The only example of 2020's firmware for this system that I have come across is OpenWRT which also has regular updates.
Also found someone who says he's been running Gentoo for about 10 years on his various units but he has now switched them all to OpenWRT.
I wonder if anyone here has done anything on these WD thinguies.
Thanks for your input.
Best,
O.
Hello:
Yewsterday I came across a practically new 1Tb MyBook Live for a bit under US$30 (!) and as I am needing a better backup routine, I went for it.
My only worry was that the 1Tb SATA drive would have some dings but even if it did, the hardware in the box was worth it.
The thing runs on an APM82181@800 MHz CPU, 256MB + 512Kb flash.
It has a SATA bay and Gigabit Ethernet LAN but no USB port.
After resetting it, when I hooked it up to the router it reported the proper MAC address with a 169.254.7.194 IP address.
Not the expected 192.168.1.1 or thereabouts.
As I was not able to get into the UI via browser, ssh or in any way get into the system and as I still had to check the drive before going forward, I decided to disassemble the case to remove the drive and hook it up to my main box with the idea of modifying a configuration file to set up another IP.
disks and gparted reported nothing nasty and gsmartcontrol gave it a clean bill of health.
No grown defects.
This is the drive's data and layout:
Model: WDC WD10EURX-63FH1Y0 (01.01A01)
Size: 1.0 TB (1,000,204,886,016 bytes)
Partitioning: GUID Partition Table
Serial: WD-WMC1U7235566
freespace | swap partition 3 | partition 1 | partition 2 | partition 4: primary
16Mb | 513Mb | 2.0Gb | 2.0Gb | 996Gb
unallocated | basic data | linux raid | linux raid | filesystem
| linux raid member | linux raid member | ext4Unfortunately, I cannot mount the primary partition and get this error:
Error mounting /dev/sda4 at /media/groucho/7599bee0-ee74-4354-9c41-dbc05d70b49d: wrong fs type, bad option, bad superblock on /dev/sda4, missing codepage or helper program, or other errorWhen I try lsblk to see what's there I get this:
~$ lsblk
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 931.5G 0 disk
|-sda1 8:1 0 1.9G 0 part
|-sda2 8:2 0 1.9G 0 part
|-sda3 8:3 0 489M 0 part
`-sda4 8:4 0 927.2G 0 part
--- snip ---
~$ When I try parted to see what's there I get this:
~$ parted -l
[sudo] password for groucho:
Model: ATA WDC WD10EURX-63F (scsi)
Disk /dev/sda: 1000GB
Sector size (logical/physical): 512B/4096B
Partition Table: gpt
Disk Flags:
Number Start End Size File system Name Flags
3 15.7MB 528MB 513MB primary msftdata
1 528MB 2576MB 2048MB ext3 primary raid
2 2576MB 4624MB 2048MB ext3 primary raid
4 4624MB 1000GB 996GB ext4 primary msftdata
--- snip ---
~$ What confounds me is the gpt partition table, this is a 1TB drive and other configurations only go to 3Tb.
And the msftdata flag.
I have no Windows installation to do anything with.
There is the also possibility of using WRT instead of the WD software.
I'm sure it won't have the problems thousands of users had last year.
Any ideas?
Thanks in advance.
Best,
A.