The officially official Devuan Forum!

You are not logged in.

#151 Re: Other Issues » Mail server don't receive mail » 2020-09-24 10:20:11

xinomilo wrote:

assuming your organization has a domain name and that's the same you use for email addresses, you should add A/MX/SPF records in that domain's DNS server, not setup another one...

You would normally set up a MX record as mail.mydomain.tld, (though it doesn't have ot be 'mail') which is a subdomain of your domain, though it can have the same IP. You will also have to use this name in your MTA configuration and point your (external) users imap/pop3/smtp configs at it, unless you want to add additional records .

For testing purposes incoming mail should work even if you don't have a SPF record, unless you've configured your server to refuse mail that doesn't. Needless to say In my opinion a mail server should filter out email that doesn't have a SPF record, since either the email is spam or the originator hasn't set up their mailserver properly.

Reverse DNS itself is not provided by your domain name registrar (unless they also provide your IP). They come from whoever provided your IP.

In my case this is my ISP (Zen Internet). Previously I had my mailserver in the cloud and it was hosted by Linode who provided my IP (and hence SPF), however Linode wasn't my domain name provider. Of course I did have to put the IP, MX IP (in my case they are the same) and SPF record into my domain name record.

You do need to add a SPF as a TXT record to your DNS. Something like:
v=spf1 a mx ptr ip4:111.222.333.444 -all
where 111.222.333.444 is your mailserver IP4 address.

Also, though it may not be required to test your system, you should enable DKIM and DMARC and check that they are working as unless you do some email providers may reject your emails.

#152 Re: Other Issues » Mail server don't receive mail » 2020-09-23 13:16:33

Assuming you are operating a NAT, have you opened the email ports (25, 143, 443, 587, 993) in your external (router's) firewall and forwarded them to your mail server's ip?

#153 Re: Desktop and Multimedia » evolution email install » 2020-09-06 11:58:58

Likewise I have evolution for mail, running under Cinnamon (where it's been the default for a long time). Now installed in Beowulf, previously in ASCII and Mint 17.3 and Ubuntu before that.
I have the same package version as you: evolution-common 3:30.5-1.1

Looking at the installed files list there's a
/usr/share/help/ru/evolution/import-single-files.page file but not a 
/usr/share/help/ru/evolution/import-single-files.page.dpkg-new.
and a
/usr/share/help/el/evolution/tasks-usage.page but not a
/usr/share/help/el/evolution/tasks-usage.page.dpkg-new.
so something seems to be going wrong in dpkg: I don't know enough about dpkg to say whether we should expect it to produce temp files with these names.

#154 Re: Hardware & System Configuration » [SOLVED] [hardware] Initramfs mdadm assembly woes, udev not triggered? » 2020-09-06 11:34:25

Horses for courses. If a drive is rated for 70C I'd not want to load it to run at that continuously.
I have a BX500 myself in my email server but its very lightly, if continuously, loaded and currently sits at 28C (max 31C). Hopefully it will continue to provide good service. Maybe I should add disk monitoring (currently I just monitor the CPU).

#155 Re: Other Issues » [Solved] System log questions » 2020-09-05 21:28:24

OK, 'blob' is the wrong technical term: clearly they must be decodable or they'd be no use as logs, but seemingly when they get corrupted, say in a crash, you can easily lose the information you need to understand what's gone wrong.

#156 Re: Other Issues » [Solved] System log questions » 2020-09-05 18:38:29

Rolfie, on my box selecting open reverts the sidebar to show my home but the main pane still shows what's in /var/log/. You can then still open another log by double-clicking on it in the main pane, and the updated list of those you have opened reappears in the side pane.
It is all very olde-worlde gnome as I remember it though.
No doubt the newer systemd alternative is slicker - though I gather the binary blob they have made of logs is apparently more fragile if things crash.

#157 Re: Other Issues » [Solved] System log questions » 2020-09-05 11:23:26

gnome-system-log can be used to browse all your log files: they're just not shown in the sidebar by default.

Click on the settings icon ('cog in box', third from right at the top) and then select the first option 'open', this will then show you the whole of the /var/log/ directory and you can select whichever log file you want to browse. Once opened the log file is added to the list of files in the side panel.

Nevertheless I still personally prefer to use the cli-based log browser lnav e.g.

 sudo lnav /var/log/syslog

as it provides colour emphasis in the logs, you can use a wildcard to browse the merged logrotated set of files e.g.

 sudo lnav /var/log/syslog*

  and I find its regex filtering is a bit more intuitive to use than gnome-system-log's.

#158 Re: Hardware & System Configuration » [SOLVED] Learning to use Devuan logs (Nvidia-persistenced) » 2020-09-04 21:57:41

These might be on some help:

https://dev1galaxy.org/viewtopic.php?pid=20903#p20903
- my fixed version of /etc/init.d/nvidia-persistenced.
and
https://dev1galaxy.org/viewtopic.php?pid=20917#p20917
- which explains that you can probably also get away with simply removing or disabling nvidia-persistenced as for most use cases it's not needed unless you want to use CUDA.

#159 Re: Other Issues » security update delayed for thunderbird ? » 2020-08-31 21:25:19

The fix thunderbird 1.68.12.0.1-deb10u1  is already in Debian: https://www.debian.org/security/2020/dsa-4754, looking at my mirror with Synaptic it's in Devuan (stable -security) too.

#160 Re: News & Announcements » Latest repositories for Devuan 3 ! » 2020-08-16 12:44:08

Devuan Beowulf, like Debian Buster is the stable version, so doesn't get the latest and shiniest version of applications automatically.

Mint and Ubuntu are based on the unstable versions. If you really want new and shiny in everthing then you need to upgrade to Ceres.

Beowulf does however receive any security fixes, albeit with a slight delay, which isn't always bad since security fixes can also have bugs (vide the latest fiasco with grub).

For example the version of Firefox supplied on Devuan is Firefox-esr (the 'enterprise' version), which only resyncs with the latest Firefox once a year. However it does get all the monthly security fixes inbetween. At the moment, although there is a  newly resyced version we will continue to get the security fixed older version for an overlap period.

You can configure Devuan to install updates automatically using the unattended-upgrades package.
This can be configured to run daily from cron, or if you don't keep your computer on all the time but hibernate or suspend , from anacron. which runs a daily check and conditional install when you first resume. You get a email notification if it upgrades anything. I use it but only for security upgrades.

There is also a notifier package (not part of the official Devuan repositories) written by MiyoLinux (see https://dev1galaxy.org/viewtopic.php?pid=22152#p22152) that notifies you, and allows you to install upgrades. It's not quite as slick as the applets in Mint and Ubuntu but is quite flexible. However it doesn't yet work in Ceres: another example of how the Unstable version may break things.

Also if you find you really need a feature in a more recent version you can often get something newer from backports. I  use a LibreOffice backport as its an application where I'm always looking for new shiny but wouldn't search for a postfix backport as I value the stability of the latter. I did backport dnscrypt-proxy as I needed a fix in a feature I used and the backport had it.

Bit surprised by you find that

'the hardware desktop of Linux Mint in Xfce automatically detects the devices when you plug for to the ports,  which is not the case with Devuan Xfce in past versions.

as that's not my experience with either Ascii or Beowulf (albeit I use Cinnamon rather than Xfce). Which hardware is your system not recognising?

#161 Re: Other Issues » pm-suspend becomes catatonic - screen blanks; system never halts » 2020-08-15 23:22:03

Just to check:

As it's been suggested it may be a kernel issue have you tried using either of the two userspace, i.e. non-kernel, sleep methods (uspswap, tuxonice) instead? I recall I had to use uspswap on ascii but could use the kernel method again when I upgraded to Beowulf.

For suspend a black screen is the usual result of calling suspend and its almost instant. if you hibernate then you'll usually see some evidence of disk activity before it shuts down. How are to trying to resume? Pressing the power button is the usual method. Some laptops will suspend/resume when you close/open the lid but whether this happens depends on the laptop.

On my computer pm-utils is set up to call a screensaver on resume so that there's some superficial security (log in required).

Also (but it only affect hibernate so can't be your present problem) have you got a resume=/dev/dm-2 parameter in the linux /boot/vmlinuz... line(s) of your /boot/grub/grub.cfg? It should point to your swap partition, You need this for the system to know where to save/reload its memory state when hibernating.

#162 Re: Documentation » HOWTO: Firefox DoH (DNS over HTTPS) » 2020-08-11 20:49:34

My own choice is to use dnscrypt-proxy, which:

1) Gives you a wide choice of DNS provider, including Cloudflare, using either DoH or Dnscrypt. You can choose from a large number of non-logging (or at least services that say they are) and/or DNSSEC and/or filtered/non-filtered DNS providers.

2) You get periodically to randomise your DNS provider, so no one service sees it all.

3) You will usually choose nearer DNS providers with a lower RTT than Cloudflare (at least here where Ii am in the UK).

4) You can cache your queries, reducing what hits your provider and proving near-instant lookups on your most used sites.

5) You can select from multiple blocklists.

6) it works for all your internet traffic, not just your browser. On mine I also provide a DNS service for other nodes on my network.

7) In the latest versions you can set up a (set of) DNS relays between you and the DNS provider, which masks your IP from them and your query form the relays.

In Firefox (about:config) you set your Network.TRR.mode to 5, so bypass the internal DoH with /etc/resolv.conf pointing to your dnscrypt-proxy. There is also an option that allows you to provide a DoH server for Firefox, which then connects to the internet using any of the other dnscrypt-proxy options.

#163 Re: Documentation » Replace GRUB with alternate bootloader: extlinux » 2020-08-06 21:15:11

Vernon wrote:

I have only seen the block device allocation change when disks were added. I have never seen the block device allocation change on a single disk system. Regardless, using UUIDs is a much safer practice long term.

It also happens if you unplug the drives and put them back in a different order.
I did this once, OK, I was adding new drives for a RAID1 install, and forgot to record which socket each disk was plugged in to originally and got some what confused for a while. However even if you don't add drives just permuting the existing drives would do it.

#164 Re: Hardware & System Configuration » [ SOLVED ] cant run command from commandsline » 2020-08-04 22:00:08

Just to provide another example.

Beowulf/Cinnamon, default terminal is gnome-terminal and I've not noticed any issues using it (including a display from the xpra server over ssh on another machine), but I'm running it from an applet, so I don't see any messages.

However:

marjorie@grendel:~$ gnome-terminal
# watch_fast: "/org/gnome/terminal/legacy/" (establishing: 0, active: 0)
# unwatch_fast: "/org/gnome/terminal/legacy/" (active: 0, establishing: 1)
# watch_established: "/org/gnome/terminal/legacy/" (establishing: 0)

and child terminal opens OK.

marjorie@grendel:~$   

And then as sudo:

marjorie@grendel:~$ sudo gnome-terminal
# posix_spawn avoided (fd close requested) 
# watch_fast: "/org/gnome/terminal/legacy/" (establishing: 0, active: 0)
# unwatch_fast: "/org/gnome/terminal/legacy/" (active: 0, establishing: 1)
# watch_established: "/org/gnome/terminal/legacy/" (establishing: 0)

and child terminal opens OK as root in my home directory.

root@grendel:/home/marjorie#      

I don't have ash, nor xterm for that matter.

#166 Re: Installation » [Solved]Grub failing to boot - grub_calloc not found » 2020-07-31 12:24:58

Logged on this afternoon and unattended-upgrade has just updated grub-common.

Start-Date: 2020-07-31  12:10:26                                       
Commandline: /usr/bin/unattended-upgrade
Requested-By: marjorie (1000)
Upgrade: grub-common:amd64 (2.02+dfsg1-20+deb10u1, 2.02+dfsg1-20+deb10u2)
End-Date: 2020-07-31  12:10:28 

Maybe this fixes the problem?

https://linuxsecurity.com/advisories/de … e-17-52-37

Package        : grub2
Debian Bug     : 966554

The update for grub2 released as DSA 4735-1 caused a boot-regression
when chainloading another bootlaoder and breaking notably dual-boot with
Windows. Updated grub2 packages are now available to correct this issue.

For the stable distribution (buster), this problem has been fixed in
version 2.02+dfsg1-20+deb10u2.

We recommend that you upgrade your grub2 packages.

For the detailed security status of grub2 please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/grub2

Oddly 'grub-common' is the only grub package I have on this PC, my other (my mail server) has 'grub-common', 'grub2-common', 'grub-pc' and and 'grub-pc-bin'. Both were fresh Beowulf Beta installs.

#167 Re: Installation » [Solved]Grub failing to boot - grub_calloc not found » 2020-07-30 21:27:13

Very odd. I got the same version (2.02+dfsg1-20+deb10u1) of grub-common with unattended -upgrades (which is for security updates only) at 9:45 this morning and it works fine (legacy-bios, not EFI-signed).

#168 Re: Devuan » Best Practices for preinst / postinst dpkg Compatibility » 2020-07-30 20:04:14

As I understand it the correct way is to re-build the .deb package from the source using deb_helper.
There a tutorial on the overall process here: https://wiki.debian.org/BuildingTutorial.
Though the tutorial uses an example where you want to change the source code (and recompile) not just the packaging.

Essentially to create a Devuan compatible .deb you need to:
1) add a suitable init script to the files tree (your /etc/init.d/zoneminder). As has been pointed out by Head_on_a_Stick you can generate one from the systemd service file using the sysv2d.sh script.
2) Adding a Debian rule to generate the sysvinit additions to the postinst and postrm scripts.
The rule will be a parametrisation of the deb helper program dh_installinit.
3) Change the version number and annotate the change.
4) If you then want to submit as a bug to Debian create a diff on the original and submit  it with the bug report.

When you've recreated your .deb you might see in your postinst file something like this :

# Automatically added by dh_installinit/12.1.1
if [ "$1" = "configure" ] || [ "$1" = "abort-upgrade" ] || [ "$1" = "abort-deconfigure" ] || [ "$1" = "abort-remove" ] ; then
	if [ -x "/etc/init.d/chrony" ]; then
		update-rc.d chrony defaults >/dev/null
		if [ -n "$2" ]; then
			_dh_action=restart
		else
			_dh_action=start
		fi
		invoke-rc.d --skip-systemd-native chrony $_dh_action || exit 1
	fi
fi
# End automatically added section

This example (for chrony) enables (using update-rc.d) and starts (using invoke-rc.d) the init.

The corresponding addition to postrm is:

# Automatically added by dh_installinit/12.1.1
if [ "$1" = "purge" ] ; then
	update-rc.d chrony remove >/dev/null
fi
# End automatically added section

However some maintainers don't provide an init file and don't run dh_installinit, which is where we get problems.

Here is an example of the rules for another deb (nftables) that doesn't. As you can see, dh_installinit is called but just with the -n parameter and so doesn'r run. Run without any parameters it will create the postinst code to enable and start the init and the postrm code to remove it. For some programs you might not want to have enable or start (in this case for dh_installsystemd they are turned off by parameters --no-enable- -no-start).

#!/usr/bin/make -f

ifeq (,$(filter terse,$(DEB_BUILD_OPTIONS)))
export DH_VERBOSE=1
endif
export PYBUILD_NAME = nftables
export DEB_BUILD_MAINT_OPTIONS = hardening=+all

configure_opts	:= --with-xtables --with-json --with-python-bin=/usr/bin/python3

override_dh_auto_configure:
	dh_auto_configure -- $(configure_opts) --

%:
	dh $@ --with python3

override_dh_fixperms:
	dh_fixperms
	chmod a+x debian/nftables/etc/nftables.conf

override_dh_installsystemd:
	dh_installsystemd --no-enable --no-start

override_dh_installinit:
	# dh_installinit will try to mess with /etc/init.d/nftables in
	# the maintainer scripts, but we don't ship it
	dh_installinit -n

override_dh_installexamples:
	dh_installexamples -XMakefile
	# upstream examples are installed in by the 'install' target to '/etc/nftables'
	mv debian/tmp/etc/nftables/*.nft debian/nftables/usr/share/doc/nftables/examples/
	rm -rf debian/nftables/etc/nftables

#169 Re: Desktop and Multimedia » xfce4-alsa-plugin now available for Debian-based systems (0.3.0-2) » 2020-07-29 10:54:18

jobbautista9 wrote:

The sysd2v script did work, however the iwd sysvinit script generated doesn't autostart at boot, so I have to "service iwd start" as root once I logged in. I'm using openrc..

I use sysvinit not openrc, however with sysvinit you would also need to (as root, I use sudo)

1) ensure the execute bit is set for your init script

sudo chmod +x  /etc/init.d/your_script_name

though I'm guessing you must have done this for the service command to work.

2)  and run

sudo update-rc.d your_script-name defaults

this creates the sym links ( /etc/rc.x/SNNyour_script_name and /etc/rc.x/KNNyour_script_name) from your_script_name in the various (NN=00..06,S) run level directories needed to trigger starting/stopping the init script at boot.

#170 Re: Off-topic » New forum member » 2020-07-19 15:32:44

golinux wrote:

golinux misses gksu  . . .

Amen.

#171 Re: Off-topic » New forum member » 2020-07-19 12:01:23

There's obviously more than one way to skin a cat :-)

If I know exactly where a file I want to edit is:

~$ sudoedit /full/path/to/file

(having previously put

export EDITOR=/usr/bin/gedit

in my .bashrc).

#172 Re: Off-topic » New forum member » 2020-07-18 22:42:02

If you're a system admin and don't want to use/don't have a root login/ password (I don't) then open a user terminal and type:

~$ sudo nemo

or whatever's your graphical file manager and then at the prompt enter your user password..
This work just as well.

nb. I use Cinnamon (I'm another pre-systemd Mint refugee) so my main file manager is nemo and my file editor is gedit.

I find this a particularly useful way of finding my way around/editing system files when I've ssh -X in order to work on a remote PC.

#173 Re: Other Issues » File /etc/protocols not found!!! » 2020-07-18 21:48:22

Not sure what you are doing that's not providing the expected result.

There's nothing wrong with the netbase package.
Check the files list in synaptic: /etc/protocols is listed there.
As far as I'm aware on my PCs it came with my initial, clean, Beowulf Beta installs.

#174 Re: Other Issues » [Solved] linux-5.6.0-0.bpo.2 stucks at "waiting for /dev.... udevd" » 2020-07-06 22:23:42

Head_on_a_Stick wrote:
Debuser2018 wrote:

thermald, has only systemd script /lib/systemd/system/thermald.service . No /etc/rc* or /etc/init.d/ script for startup.

You can convert a systemd unit file to a sysvinit script with sysd2v.

Then copy your_init_script to /etc/init.d/ Make it executable (+x). Change the owner:group to root:root.

You'll then need to run:

sudo update-rc.d your_init_script defaults

to set up the /etc/rc* files (which are symlinks back to your_init_script)

and

sudo invoke-rc.d your_init_script start

to start the daemon immediately.

sudo service your_init_script start

should also work.

#175 Re: Other Issues » File /etc/protocols not found!!! » 2020-07-02 21:35:50

Head_on_a_Stick wrote:

The netbase package supplies /etc/protocols.

Eaglet wrote:

ebtables

That's obsolete, use nftables instead.

See also https://www.debian.org/releases/stable/ … l#nftables

Yes, nftabes is a better system. I use it myself. However be aware that from a Devuan perspective the Debian packaging is broken, some of it by design:

1) the automatic sysvinit installer script (in the deb postinst), which should set it up if systemd is missing, it's not there. Of course it wouldn't work anyway because
2) etc/init.d/nftables is not there. There is a version provided (named nftables.init), but only as an example, and it doesn't work because the LSB header run-levels are wrong. Not too difficult to fix, but does need fixing. And the execute bit is not set.
3) However nftables itself works fine without systemd.

See our discussion at https://dev1galaxy.org/viewtopic.php?id=2889

NB. this doesn't seem to be the only non-Devuanised Debian package I've wanted to use that is not non-systemd ready. Shouldn't it be a requirement?

Board footer

Forum Software