You are not logged in.
Hello:
Interesting article @The Register:
---
37signals is completing its on-prem move, deleting its AWS account to save millions
by Simon Sharwood
---
... but the industry pulled a fast one convincing everyone it's the only way,” he concluded.
“No wonder you see cloud vendors and ads and PR everywhere. There's so much money in convincing
everyone that owning your own hardware is impossible or that operating Linux servers is too hard!”
Best,
A.
Hello:
... missed the original post ...
That is not (and should not be) a problem for anyone taking the time to reply to as request for support here at Dev1.
ie: You do what you can, when you can and if you can.
My apologies if my text sounded like anything else.
Time is, indisputably, the most valuable thing anyone has.
And to dedicate a part of it, however small, to help someone is the right thing to do.
It is part of what I refer to as the 'pay it forward system'.
It goes around and (eventually) will come back to you.
Best,
A.
Hello:
... just getting around to reporting this ...
Let's see ...
Registered:
2025-01-27
Posted:
2025-01-28
Received answers:
2025-01-28 x1
2025-01-30 x1
---
A long awkward silence ensues ...
eg: crickets
---
20250504 x 2 <- valiant effort from Devarch and Rolfie ...
When I see this sort of attitude from members (most if not all, new ones) seeking help, it really makes me wonder ...
.
A.
Hello:
Thanks ...
You're welcome.
... file exists ...
Quite so ...
... strange that I can't find it ...
No.
You just need some practise on how to get around the file system.
We have *all* been there at some point.
Don't worry, you'll ge there. 8^)
See here:
https://www.youtube.com/watch?v=qCMZcUKzzKw
You should also check out the other parts of the series.
Best,
A.
Hello:
... not being able to find the /usr/share/images/desktop-base/ ...
... searched for it in Thunar with the search engine ...
Please open a terminal, do this and post the result:
$ cd /usr/share/images/desktop-baseTranslation:
Por favor abra una terminal y haga esto:
$ cd /usr/share/images/desktop-base
Best,
A.
Hello:
... using dhcpcd5 ...
Not the case.
Thanks anyhow.
grep ipv6.ko /lib/modules/6.12.21-amd64/modules.builtin
Right ...
It's built in.
Should have remembered that. 8^°
In my case it would be:
$ grep ipv6.ko /lib/modules/6.1.0-33-amd64/modules.builtin
kernel/net/ipv6/ipv6.ko
$ Thanks for your input.
Best,
A.
Hello:
Dmesg show that ipv6 is administratively disabled.
Yes.
That is what it says.
... disabled, it means it's not being used.
One would tend to think so.
... but it clearly says IPv6: Loaded, which is not what blacklisting the module should achieve.
So ...
Why is it being reported (also by dmesg) as loaded?
The clue to my post is that (apparently) blacklsting the IPv6 module is not working.
ie: it is being loaded in spite of being blacklisted with the usual *.conf file in /etc/sudoers.d.
Very sorry for not being clear enough, English not being my mother tongue and all that.
Best,
A.
Hello:
I do not use IPv6 and long ago (ascii) disabled it via the usual kernel command line stanza.
ie: ipv6.disable=1
I case that were not enough, I also blacklisted the module:
$ cat /etc/modprobe.d/blacklist-ipv6.conf
# Blacklist IPv6 module.
blacklist ipv6
$ My dmesg printout at boot time tells me about it ...
$ sudo dmesg | grep -i ipv6
--- snip ---
[ 2.834452] IPv6: Loaded, but administratively disabled, reboot required to enable
[ 2.834736] mip6: Mobile IPv6
---snip ---
$ ... but it clearly says IPv6: Loaded, which is not what blacklisting the module should achieve.
And it seems that, as a result (?), mip6 is also loaded.
That said, neither module show up with lsmod.
What's going on here?
Am I blacklisting the wrong module?
Best,
A.
Hello:
You were on the wrong archive page.
I beg to differ: I was on the right page.
The one belonging to lists.cups.org, now inaccessible.
Try this one ...
Great find ... 8^D
But that is a Wayback Machine snapshot, unsearchable (?).
Thanks for your input.
Best,
A.
Hello:
Thanks ...
You're welcome.
... didn't search much cause ...
That's the first thing to do before posting.
You don't know what you don't know till you look for it. 8^°
Funny how HP support ...
Actually it is tragic.
For years now, Bill Hewlett and David Packard (founders of the original HP) have been turning in their graves three times a minute.
To think what HP was and see the piece of crap that it has become ...
Uncanny.
Best,
A.
Hello:
... when I shut down my HP ZBook 15 G2 ...
Check here: https://discussion.fedoraproject.org/t/ … own/124911
TL;DR
Disable the “Wake on LAN” option in the BIOS.
If that does not work, check this link where you will find many hits with posts by people having the same issue.
Sometimes, Google can be a friend. 8^°
Best,
A.
Hello:
Ever since I installed CUPS in my Devuan systems, my go-to source of information (besides Dev1) was the https://www.cups.org/ web site.
A couple of days go I had an issue I wanted to search for and went to the archives page, only to be greeted with this:
---
Forbidden
You don't have permission to access this resource.
---
I thought that to be very strange as this was not a web page (404 Not found) problem.
I recall having accesed the archives page last May without seeing this.
But I was still receiving posts by list members and was able to post to the list. ie: posts did not bounce.
But unable to check the archives to see what was going on.
So I sent an email to cups-owner asking about this and got this rather cryptic reply:
More recent cups related stuff can be found at openprinting.org.
When apple bought cups, those lists went to their servers.
Mike quietly left apple years ago, and it appears that apple has removed the lists.
They own "cups". So Mike had to make a new name.
'Mike' refers to Michael R. Sweet, original developer of CUPS and Gimp-Print /Gutenprint who left Apple late December 2019.
Much to my chagrin, a second email asking for additional information was not replied to.
I then posted to the OpenPrinting GitHUb page asking about this and right away received a reply from M.R. Sweet himself:
Unfortunately, lists.cups.org is an Apple-managed site and we have no control over its contents or configuration...
The printing-users and printing-architecture lists on kernel.org are the current place for discussing printing-related issues.
Right ...
Whatever has transpired here is not good, not at all.
Unless there is an accesible mirror hidden somewhere, the lists.cups.org archives are, to all intent and purpose, gone.
Sequestered by Apple Inc. and with it, many years of useful CUPS related information.
Heads up:
These are the links to the current place for discussing CUPS printing-related issues.
printing-users Linux printing list for end users to discuss printing issues / feature requests
printing-architecture Printing architecture under Linux
The layout is definitely strange ie: not the usual mailing list layout.
But it is there.
[rant]
Over the years, I ended up getting used to Apple and the shenanigans I read about in the press.
Eventually nothing surprised me.
But this? ... 8^ | <---- Oracle did worse yet with the Sun Microsystems lists and file downloads.
[/rant]
That's all.
Best,
A.
Hello:
thanks ...
You're welcome.
... seems connected with this "systemd" thing,
Yes, your post is.
What I meant to say was that it is not connected to the OP by @Fjalar.
That said, let's see if we can make some sense out of what seems to be going on.
... this package has been function since "etch".
etch is a Debian release from April 2007 and Devuan did not exist at that time.
Devuan Jesse was released May 2017, roughly ten years later.
$ uname -a tells us your system runs Devuan Daedalus.
apt list | grep -i installed | grep -i open-iscsi tells us the open-iscsi package installed is open-iscsi_2.1.8-1_amd64.
Yet for some reason, attempting to run the application gets you a classic systemd error in a system that by definition does not use the systemd package for init.
In an attempt to get to the bottom of the problem, I decided to see if I could reproduce the problem:
Installation
# apt install open-iscsi
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following additional packages will be installed:
libisns0 libopeniscsiusr
Recommended packages:
finalrd
The following NEW packages will be installed:
libisns0 libopeniscsiusr open-iscsi
0 upgraded, 3 newly installed, 0 to remove and 0 not upgraded.
Need to get 464 kB of archives.
After this operation, 2152 kB of additional disk space will be used.
Do you want to continue? [Y/n]
Get:1 http://deb.devuan.org/merged daedalus/main amd64 libisns0 amd64 0.101-0.2+b1 [92.0 kB]
Get:2 http://deb.devuan.org/merged daedalus/main amd64 libopeniscsiusr amd64 2.1.8-1 [59.7 kB]
Get:3 http://deb.devuan.org/merged daedalus/main amd64 open-iscsi amd64 2.1.8-1 [312 kB]
Fetched 464 kB in 2s (187 kB/s)
Preconfiguring packages ...
Selecting previously unselected package libisns0:amd64.
(Reading database ... 188375 files and directories currently installed.)
Preparing to unpack .../libisns0_0.101-0.2+b1_amd64.deb ...
Unpacking libisns0:amd64 (0.101-0.2+b1) ...
Selecting previously unselected package libopeniscsiusr.
Preparing to unpack .../libopeniscsiusr_2.1.8-1_amd64.deb ...
Unpacking libopeniscsiusr (2.1.8-1) ...
Selecting previously unselected package open-iscsi.
Preparing to unpack .../open-iscsi_2.1.8-1_amd64.deb ...
Unpacking open-iscsi (2.1.8-1) ...
Setting up libopeniscsiusr (2.1.8-1) ...
Setting up libisns0:amd64 (0.101-0.2+b1) ...
Setting up open-iscsi (2.1.8-1) ...
Processing triggers for libc-bin (2.36-9+deb12u10) ...
Processing triggers for man-db (2.11.2-2) ...
Processing triggers for initramfs-tools (0.142+deb12u1) ...
update-initramfs: Generating /boot/initrd.img-6.1.0-33-amd64
live-boot: core filesystems dm-verity devices utils udev blockdev iscsi dns.
#The package installed properly.
Attempt to run the application using your same parameters:
$ iscsiadm --mode discovery --type sendtargets --portal 192.168.178.100
sh: 1: /bin/systemctl: not found # <---- same error
iscsiadm: can not connect to iSCSI daemon (111)!
iscsiadm: Could not make /etc/iscsi/send_targets: Permission denied # <---- this neeeds root
iscsiadm: Could not add new discovery record.Same error.
Try as root, again using your same parameters:
# iscsiadm --mode discovery --type sendtargets --portal 192.168.178.100
sh: 1: /bin/systemctl: not found # <---- same error
iscsiadm: can not connect to iSCSI daemon (111)!
iscsiadm: Could not scan /sys/class/iscsi_transport.
sh: 1: /bin/systemctl: not found # <---- same error
iscsiadm: can not connect to iSCSI daemon (111)!
iscsiadm: Cannot perform discovery. Initiatorname required.
iscsiadm: Could not perform SendTargets discovery: could not connect to iscsid
# Same error.
---
From what I see, it seems that this is a problem with the open-iscsi_2.1.8-1_amd64 package.
It requies a Devuan bug report to the maintainers.
See here on how to do that.
Note: Being a topic not related to the original post, please continue anything related to this issue on another, new thread.
Best,
A.
Hello:
... nothing with the systemd gets installed ...
Indeed.
As it should be.
This provided that the package installed (like the printout you posted shows) actually comes from the Devuan repository.
Like I pointed out, the problem* posted by kapqa (not related to the original post) would seem to indicate that the package installed may not be from the Devuan repository. * printout points to a typical error in Linux systems using systemd.
That said, note that the link posted leads to a Debian open-iscsi wiki page.
@kapqa
You may want to consider opening a separate thread with your problem and start by posting the terminal printout from this:
$ uname -a$ cat /etc/apt/sources.list$ apt list | grep -i installed | grep -i open-iscsiBest,
A.
Hello:
... using "open-iscsi" there is error with devuan
https://wiki.debian.org/SAN/iSCSI/open-iscsisystemctl not found
The printout points to a typical error in Linux systems using systemd.
Devuan is not one of them.
From the web:
If systemctl is not found on your system, it usually means the systemd service manager is not installed or configured correctly.
This can happen if the system is not fully updated or if you've removed systemd accidentally.
To fix this, you'll need to install or reinstall systemd.
systemd has been intentionally removed from Devuan, no failed update or accident to speak of there. 8^°
The installed open-iscsi application is looking for systemctl (part of the systemd package) but cannot find it, hence the error printout.
At the risk of stating the obvious, this should not happen* if the installed open-iscsi package is the one present in the Devuan repositories.
* unless there has been some error in the processing / sanitising for use in Devuan for which a bug report should be filed with the Devuan maintainers.
HTH.
Best,
A.
Hello:
... spelling mistake is one thing ...
Crikey !...
Seems espresso had not kicked in yet.
But not a proper excuse though.
The thing is that I'm just lowly hack who most always finds the answers to difficult stuff under the same two names.
ie: fsmithred / ralph.ronnquist
Yes, that's the best (true one) I can come up with. 8^D
Best,
A.
Hello:
... disable this kernel module either modularly ...
Does not seem possible.
I have not found a way to disable any of those modules.
ie: ima, evm, selinux, etc.
Whatever methods I found searching on-line did not work.
The main thing to disable would be LSM which seems to orchestrate all of them, including this latest Microsoft contribution to the Linux kernel.
But I have not been able to find a working method.
... or when building the kernel ...
Right ... 8^°
... distros may integrate ...
Debian obviously does, no options to disable or heads-up given.
No surprise there ...
As a result, Devuan is stuck with all this crap.
Best,
A.
Hello:
3 years later ...
... anything with "viber" in it. # <- Actually it was ralph.ronnquist
There is no viber package in the Debian repositories.
As a result, there is no viber package in the Devuan repositories either.
The reason being (most probably) that viber is "Proprietary cross-platform IM and VoIP software".
With respect to it working on Arch, bear in mind that the package in queston is part of their user repository ie: not an official AUR package.
DISCLAIMER: AUR packages are user produced content. Any use of the provided files is at your own risk.
Seems that none of that has changed in the last three years.
Best,
A.
Hello:
That is one of the basic characteristics these security features have.
The main one one being that they are both installed and enabled by default / without your consent or knowledge.
Some fresh news with respect to LSM (Linux Security Modules).
Yes, those modules.
The ones you cannot disable or have any control over.
Microsoft's newest open-source contribution to the Linux kernel being proposed is ... Hornet,
a Linux security module (LSM) for providing signature verification of eBPF programs.
About eBPF
TL;DR
What is eBPF used for?
eBPF lets you gather detailed information about low-level networking, security, and other system-level activities within the kernel.
Better yet, it works without requiring direct modifications to kernel code.
Absolutely wonderful !!!
Just what we were needing.
Linux kernel with Microsoft security module integration doing all of that.
Check the Phoronix note here.
Best,
A.
Hello:
... same errors at boot time.These are not errors.
What you are seeing is information related to EVM being enabled, not errors.
And it seems that there is no easy or documented way to avoid / disable security which (for a desktop system) is probably not needed.
As always, YMMV.
That said, the usual/basic way to check for errors is to look at dmesg in a terminal:
1. in a line by line fashion:
sudo dmesg | more
2. using grep:
sudo dmesg | grep -i "error\|warning\|fail\|segfault\|fatal\|not"
3. sifting by type of message
sudo dmesg --level=alert,crit,err,warn
4. with a real time rolling printout:
sudo dmesg -wH
As this is Linux*, there are probably more ways to get that done as there are other logfies in human readable format which you can look at to get a more detailed idea as to what is going on.
* 8^D !
Best,
A.
Hello:
... sysvinit follows a design principle which states that designs and/or systems should be as simple as possible.
Maybe I'm just as dumb as a (rusty) doornail, but after all these years (~12) with Linux I still fail to grasp the need for anything but one properly working init package for my systems* which have always worked wthout a hitch.
* desktop, netbook, RPi
Of course, as many others have, I came across more than one issue.
But none in any way related to the default init software, which was always* sysvinit.
* save experiments with Debian/Debian based dists which I abandoned as systemd was adopted.
... *nix method of do one thing and do it well, a concept seemingly lost to many of today's programmers.
+1
Best,
A.
Hello:
... sounds like a pain to get rid of and/or disable ...
Indeed ...
That is one of the basic characteristics these security features have.
The main one one being that they are both installed and enabled by default / without your consent or knowledge.
Something that should be getting everyone thinking about it and the reasons for it being so.
We are slowly but steadily arriving at the point where booting a computer will require signatures, code or features over which you will have no control or access to.
Unless certain requirements are met, of course.
Best,
A.
Hello:
... if you haven't disabled apparmor ...
I disabled apparmor from the first time I saw it has been installed and enabled without my intervention.
So no, I do not have the problem you have.
My way of dealing with it is adding security=none apparmor=0 nmi_watchdog=0 to my kernel command line.
That said, I am not too sure the stanza is quite as effective as I believe it is because early on, my dmesg printout also reveals this:
--- snip ---
[ 3.066032] evm: Initialising EVM extended attributes:
[ 3.066218] evm: security.selinux # <-
[ 3.066338] evm: security.SMACK64 (disabled)
[ 3.066493] evm: security.SMACK64EXEC (disabled)
[ 3.066660] evm: security.SMACK64TRANSMUTE (disabled)
[ 3.066842] evm: security.SMACK64MMAP (disabled)
[ 3.067009] evm: security.apparmor # <-
[ 3.067132] evm: security.ima # <-
[ 3.067239] evm: security.capability # <-
[ 3.067369] evm: HMAC attrs: 0x1
--- snip --- As you can see, evm* does not indicate apparmor (and other security features) as being disabled.
ie: adding security=none to the kernel command line should have disabled all that.
* https://linux-ima.sourceforge.net/linux … l-20110907
Edit:
At some point, someone posted a request to disable EVM and IMA.
While reading and testing LSM code, I found IMA/EVM consume per inode
storage even when they are not in use. Add options to diable them in
kernel command line. The logic and syntax is mostly borrowed from an
old serious [1].
I have tried (adding lsm= to the kernel command line but it does not work, at least in the latest Daedalus 6.1.0-33-amd64:
$ grep -o "lsm=.*" /proc/cmdline
lsm=
$
$ ls /sys/kernel/security/
evm ima integrity lockdown lsm # <- this should read "integrity lsm"
$ Apparently it requires a patch. (?)
Best,
A.
Hello:
Filed using ...
Hmm ...
Good luck with that. 8^°
Last time I followed an issue here at Dev1, it required a Debian bug report, which I encouraged the author of the OP to file.
The reply was this:
Since sysvinit is not enabled by default in Debian, I do not consider this
bug as release-critical. Downgrading the bug severity to "normal"*.
* "won't fix" "get lost".
You may (or may not) want to consider reading the whole Dev1 thread and the Debian bug report to get an idea of the severity of the (properly investigated) problem the OP reported to see where any non-systemd bug report stands.
Best,
A.