You are not logged in.
assuming your organization has a domain name and that's the same you use for email addresses, you should add A/MX/SPF records in that domain's DNS server, not setup another one...
You would normally set up a MX record as mail.mydomain.tld, (though it doesn't have ot be 'mail') which is a subdomain of your domain, though it can have the same IP. You will also have to use this name in your MTA configuration and point your (external) users imap/pop3/smtp configs at it, unless you want to add additional records .
For testing purposes incoming mail should work even if you don't have a SPF record, unless you've configured your server to refuse mail that doesn't. Needless to say In my opinion a mail server should filter out email that doesn't have a SPF record, since either the email is spam or the originator hasn't set up their mailserver properly.
Reverse DNS itself is not provided by your domain name registrar (unless they also provide your IP). They come from whoever provided your IP.
In my case this is my ISP (Zen Internet). Previously I had my mailserver in the cloud and it was hosted by Linode who provided my IP (and hence SPF), however Linode wasn't my domain name provider. Of course I did have to put the IP, MX IP (in my case they are the same) and SPF record into my domain name record.
You do need to add a SPF as a TXT record to your DNS. Something like:
v=spf1 a mx ptr ip4:111.222.333.444 -all
where 111.222.333.444 is your mailserver IP4 address.
Also, though it may not be required to test your system, you should enable DKIM and DMARC and check that they are working as unless you do some email providers may reject your emails.
Assuming you are operating a NAT, have you opened the email ports (25, 143, 443, 587, 993) in your external (router's) firewall and forwarded them to your mail server's ip?
Likewise I have evolution for mail, running under Cinnamon (where it's been the default for a long time). Now installed in Beowulf, previously in ASCII and Mint 17.3 and Ubuntu before that.
I have the same package version as you: evolution-common 3:30.5-1.1
Looking at the installed files list there's a
/usr/share/help/ru/evolution/import-single-files.page file but not a
/usr/share/help/ru/evolution/import-single-files.page.dpkg-new.
and a
/usr/share/help/el/evolution/tasks-usage.page but not a
/usr/share/help/el/evolution/tasks-usage.page.dpkg-new.
so something seems to be going wrong in dpkg: I don't know enough about dpkg to say whether we should expect it to produce temp files with these names.
Horses for courses. If a drive is rated for 70C I'd not want to load it to run at that continuously.
I have a BX500 myself in my email server but its very lightly, if continuously, loaded and currently sits at 28C (max 31C). Hopefully it will continue to provide good service. Maybe I should add disk monitoring (currently I just monitor the CPU).
OK, 'blob' is the wrong technical term: clearly they must be decodable or they'd be no use as logs, but seemingly when they get corrupted, say in a crash, you can easily lose the information you need to understand what's gone wrong.
Rolfie, on my box selecting open reverts the sidebar to show my home but the main pane still shows what's in /var/log/. You can then still open another log by double-clicking on it in the main pane, and the updated list of those you have opened reappears in the side pane.
It is all very olde-worlde gnome as I remember it though.
No doubt the newer systemd alternative is slicker - though I gather the binary blob they have made of logs is apparently more fragile if things crash.
gnome-system-log can be used to browse all your log files: they're just not shown in the sidebar by default.
Click on the settings icon ('cog in box', third from right at the top) and then select the first option 'open', this will then show you the whole of the /var/log/ directory and you can select whichever log file you want to browse. Once opened the log file is added to the list of files in the side panel.
Nevertheless I still personally prefer to use the cli-based log browser lnav e.g.
sudo lnav /var/log/syslogas it provides colour emphasis in the logs, you can use a wildcard to browse the merged logrotated set of files e.g.
sudo lnav /var/log/syslog*and I find its regex filtering is a bit more intuitive to use than gnome-system-log's.
These might be on some help:
https://dev1galaxy.org/viewtopic.php?pid=20903#p20903
- my fixed version of /etc/init.d/nvidia-persistenced.
and
https://dev1galaxy.org/viewtopic.php?pid=20917#p20917
- which explains that you can probably also get away with simply removing or disabling nvidia-persistenced as for most use cases it's not needed unless you want to use CUDA.
The fix thunderbird 1.68.12.0.1-deb10u1 is already in Debian: https://www.debian.org/security/2020/dsa-4754, looking at my mirror with Synaptic it's in Devuan (stable -security) too.
Devuan Beowulf, like Debian Buster is the stable version, so doesn't get the latest and shiniest version of applications automatically.
Mint and Ubuntu are based on the unstable versions. If you really want new and shiny in everthing then you need to upgrade to Ceres.
Beowulf does however receive any security fixes, albeit with a slight delay, which isn't always bad since security fixes can also have bugs (vide the latest fiasco with grub).
For example the version of Firefox supplied on Devuan is Firefox-esr (the 'enterprise' version), which only resyncs with the latest Firefox once a year. However it does get all the monthly security fixes inbetween. At the moment, although there is a newly resyced version we will continue to get the security fixed older version for an overlap period.
You can configure Devuan to install updates automatically using the unattended-upgrades package.
This can be configured to run daily from cron, or if you don't keep your computer on all the time but hibernate or suspend , from anacron. which runs a daily check and conditional install when you first resume. You get a email notification if it upgrades anything. I use it but only for security upgrades.
There is also a notifier package (not part of the official Devuan repositories) written by MiyoLinux (see https://dev1galaxy.org/viewtopic.php?pid=22152#p22152) that notifies you, and allows you to install upgrades. It's not quite as slick as the applets in Mint and Ubuntu but is quite flexible. However it doesn't yet work in Ceres: another example of how the Unstable version may break things.
Also if you find you really need a feature in a more recent version you can often get something newer from backports. I use a LibreOffice backport as its an application where I'm always looking for new shiny but wouldn't search for a postfix backport as I value the stability of the latter. I did backport dnscrypt-proxy as I needed a fix in a feature I used and the backport had it.
Bit surprised by you find that
'the hardware desktop of Linux Mint in Xfce automatically detects the devices when you plug for to the ports, which is not the case with Devuan Xfce in past versions.
as that's not my experience with either Ascii or Beowulf (albeit I use Cinnamon rather than Xfce). Which hardware is your system not recognising?
Just to check:
As it's been suggested it may be a kernel issue have you tried using either of the two userspace, i.e. non-kernel, sleep methods (uspswap, tuxonice) instead? I recall I had to use uspswap on ascii but could use the kernel method again when I upgraded to Beowulf.
For suspend a black screen is the usual result of calling suspend and its almost instant. if you hibernate then you'll usually see some evidence of disk activity before it shuts down. How are to trying to resume? Pressing the power button is the usual method. Some laptops will suspend/resume when you close/open the lid but whether this happens depends on the laptop.
On my computer pm-utils is set up to call a screensaver on resume so that there's some superficial security (log in required).
Also (but it only affect hibernate so can't be your present problem) have you got a resume=/dev/dm-2 parameter in the linux /boot/vmlinuz... line(s) of your /boot/grub/grub.cfg? It should point to your swap partition, You need this for the system to know where to save/reload its memory state when hibernating.
My own choice is to use dnscrypt-proxy, which:
1) Gives you a wide choice of DNS provider, including Cloudflare, using either DoH or Dnscrypt. You can choose from a large number of non-logging (or at least services that say they are) and/or DNSSEC and/or filtered/non-filtered DNS providers.
2) You get periodically to randomise your DNS provider, so no one service sees it all.
3) You will usually choose nearer DNS providers with a lower RTT than Cloudflare (at least here where Ii am in the UK).
4) You can cache your queries, reducing what hits your provider and proving near-instant lookups on your most used sites.
5) You can select from multiple blocklists.
6) it works for all your internet traffic, not just your browser. On mine I also provide a DNS service for other nodes on my network.
7) In the latest versions you can set up a (set of) DNS relays between you and the DNS provider, which masks your IP from them and your query form the relays.
In Firefox (about:config) you set your Network.TRR.mode to 5, so bypass the internal DoH with /etc/resolv.conf pointing to your dnscrypt-proxy. There is also an option that allows you to provide a DoH server for Firefox, which then connects to the internet using any of the other dnscrypt-proxy options.
I have only seen the block device allocation change when disks were added. I have never seen the block device allocation change on a single disk system. Regardless, using UUIDs is a much safer practice long term.
It also happens if you unplug the drives and put them back in a different order.
I did this once, OK, I was adding new drives for a RAID1 install, and forgot to record which socket each disk was plugged in to originally and got some what confused for a while. However even if you don't add drives just permuting the existing drives would do it.
Just to provide another example.
Beowulf/Cinnamon, default terminal is gnome-terminal and I've not noticed any issues using it (including a display from the xpra server over ssh on another machine), but I'm running it from an applet, so I don't see any messages.
However:
marjorie@grendel:~$ gnome-terminal
# watch_fast: "/org/gnome/terminal/legacy/" (establishing: 0, active: 0)
# unwatch_fast: "/org/gnome/terminal/legacy/" (active: 0, establishing: 1)
# watch_established: "/org/gnome/terminal/legacy/" (establishing: 0)and child terminal opens OK.
marjorie@grendel:~$ And then as sudo:
marjorie@grendel:~$ sudo gnome-terminal
# posix_spawn avoided (fd close requested)
# watch_fast: "/org/gnome/terminal/legacy/" (establishing: 0, active: 0)
# unwatch_fast: "/org/gnome/terminal/legacy/" (active: 0, establishing: 1)
# watch_established: "/org/gnome/terminal/legacy/" (establishing: 0)and child terminal opens OK as root in my home directory.
root@grendel:/home/marjorie# I don't have ash, nor xterm for that matter.
Init Freedom Hacks?
Logged on this afternoon and unattended-upgrade has just updated grub-common.
Start-Date: 2020-07-31 12:10:26
Commandline: /usr/bin/unattended-upgrade
Requested-By: marjorie (1000)
Upgrade: grub-common:amd64 (2.02+dfsg1-20+deb10u1, 2.02+dfsg1-20+deb10u2)
End-Date: 2020-07-31 12:10:28 Maybe this fixes the problem?
https://linuxsecurity.com/advisories/de … e-17-52-37
Package : grub2
Debian Bug : 966554
The update for grub2 released as DSA 4735-1 caused a boot-regression
when chainloading another bootlaoder and breaking notably dual-boot with
Windows. Updated grub2 packages are now available to correct this issue.
For the stable distribution (buster), this problem has been fixed in
version 2.02+dfsg1-20+deb10u2.
We recommend that you upgrade your grub2 packages.
For the detailed security status of grub2 please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/grub2Oddly 'grub-common' is the only grub package I have on this PC, my other (my mail server) has 'grub-common', 'grub2-common', 'grub-pc' and and 'grub-pc-bin'. Both were fresh Beowulf Beta installs.
Very odd. I got the same version (2.02+dfsg1-20+deb10u1) of grub-common with unattended -upgrades (which is for security updates only) at 9:45 this morning and it works fine (legacy-bios, not EFI-signed).
As I understand it the correct way is to re-build the .deb package from the source using deb_helper.
There a tutorial on the overall process here: https://wiki.debian.org/BuildingTutorial.
Though the tutorial uses an example where you want to change the source code (and recompile) not just the packaging.
Essentially to create a Devuan compatible .deb you need to:
1) add a suitable init script to the files tree (your /etc/init.d/zoneminder). As has been pointed out by Head_on_a_Stick you can generate one from the systemd service file using the sysv2d.sh script.
2) Adding a Debian rule to generate the sysvinit additions to the postinst and postrm scripts.
The rule will be a parametrisation of the deb helper program dh_installinit.
3) Change the version number and annotate the change.
4) If you then want to submit as a bug to Debian create a diff on the original and submit it with the bug report.
When you've recreated your .deb you might see in your postinst file something like this :
# Automatically added by dh_installinit/12.1.1
if [ "$1" = "configure" ] || [ "$1" = "abort-upgrade" ] || [ "$1" = "abort-deconfigure" ] || [ "$1" = "abort-remove" ] ; then
if [ -x "/etc/init.d/chrony" ]; then
update-rc.d chrony defaults >/dev/null
if [ -n "$2" ]; then
_dh_action=restart
else
_dh_action=start
fi
invoke-rc.d --skip-systemd-native chrony $_dh_action || exit 1
fi
fi
# End automatically added sectionThis example (for chrony) enables (using update-rc.d) and starts (using invoke-rc.d) the init.
The corresponding addition to postrm is:
# Automatically added by dh_installinit/12.1.1
if [ "$1" = "purge" ] ; then
update-rc.d chrony remove >/dev/null
fi
# End automatically added sectionHowever some maintainers don't provide an init file and don't run dh_installinit, which is where we get problems.
Here is an example of the rules for another deb (nftables) that doesn't. As you can see, dh_installinit is called but just with the -n parameter and so doesn'r run. Run without any parameters it will create the postinst code to enable and start the init and the postrm code to remove it. For some programs you might not want to have enable or start (in this case for dh_installsystemd they are turned off by parameters --no-enable- -no-start).
#!/usr/bin/make -f
ifeq (,$(filter terse,$(DEB_BUILD_OPTIONS)))
export DH_VERBOSE=1
endif
export PYBUILD_NAME = nftables
export DEB_BUILD_MAINT_OPTIONS = hardening=+all
configure_opts := --with-xtables --with-json --with-python-bin=/usr/bin/python3
override_dh_auto_configure:
dh_auto_configure -- $(configure_opts) --
%:
dh $@ --with python3
override_dh_fixperms:
dh_fixperms
chmod a+x debian/nftables/etc/nftables.conf
override_dh_installsystemd:
dh_installsystemd --no-enable --no-start
override_dh_installinit:
# dh_installinit will try to mess with /etc/init.d/nftables in
# the maintainer scripts, but we don't ship it
dh_installinit -n
override_dh_installexamples:
dh_installexamples -XMakefile
# upstream examples are installed in by the 'install' target to '/etc/nftables'
mv debian/tmp/etc/nftables/*.nft debian/nftables/usr/share/doc/nftables/examples/
rm -rf debian/nftables/etc/nftablesThe sysd2v script did work, however the iwd sysvinit script generated doesn't autostart at boot, so I have to "service iwd start" as root once I logged in. I'm using openrc..
I use sysvinit not openrc, however with sysvinit you would also need to (as root, I use sudo)
1) ensure the execute bit is set for your init script
sudo chmod +x /etc/init.d/your_script_namethough I'm guessing you must have done this for the service command to work.
2) and run
sudo update-rc.d your_script-name defaultsthis creates the sym links ( /etc/rc.x/SNNyour_script_name and /etc/rc.x/KNNyour_script_name) from your_script_name in the various (NN=00..06,S) run level directories needed to trigger starting/stopping the init script at boot.
golinux misses gksu . . .
Amen.
There's obviously more than one way to skin a cat :-)
If I know exactly where a file I want to edit is:
~$ sudoedit /full/path/to/file(having previously put
export EDITOR=/usr/bin/geditin my .bashrc).
If you're a system admin and don't want to use/don't have a root login/ password (I don't) then open a user terminal and type:
~$ sudo nemo
or whatever's your graphical file manager and then at the prompt enter your user password..
This work just as well.
nb. I use Cinnamon (I'm another pre-systemd Mint refugee) so my main file manager is nemo and my file editor is gedit.
I find this a particularly useful way of finding my way around/editing system files when I've ssh -X in order to work on a remote PC.
Not sure what you are doing that's not providing the expected result.
There's nothing wrong with the netbase package.
Check the files list in synaptic: /etc/protocols is listed there.
As far as I'm aware on my PCs it came with my initial, clean, Beowulf Beta installs.
Debuser2018 wrote:thermald, has only systemd script /lib/systemd/system/thermald.service . No /etc/rc* or /etc/init.d/ script for startup.
You can convert a systemd unit file to a sysvinit script with sysd2v.
Then copy your_init_script to /etc/init.d/ Make it executable (+x). Change the owner:group to root:root.
You'll then need to run:
sudo update-rc.d your_init_script defaultsto set up the /etc/rc* files (which are symlinks back to your_init_script)
and
sudo invoke-rc.d your_init_script startto start the daemon immediately.
sudo service your_init_script startshould also work.
The netbase package supplies /etc/protocols.
Eaglet wrote:ebtables
That's obsolete, use nftables instead.
See also https://www.debian.org/releases/stable/ … l#nftables
Yes, nftabes is a better system. I use it myself. However be aware that from a Devuan perspective the Debian packaging is broken, some of it by design:
1) the automatic sysvinit installer script (in the deb postinst), which should set it up if systemd is missing, it's not there. Of course it wouldn't work anyway because
2) etc/init.d/nftables is not there. There is a version provided (named nftables.init), but only as an example, and it doesn't work because the LSB header run-levels are wrong. Not too difficult to fix, but does need fixing. And the execute bit is not set.
3) However nftables itself works fine without systemd.
See our discussion at https://dev1galaxy.org/viewtopic.php?id=2889
NB. this doesn't seem to be the only non-Devuanised Debian package I've wanted to use that is not non-systemd ready. Shouldn't it be a requirement?