- luv-main - luv.asn.au

Black Lives Matter
by Russell Coker 07 Jun '20

07 Jun '20

https://twitter.com/BiellaColeman/status/1268988146181648388 Biella Coleman (who is known for her anthropological research on the Debian community among other things) just Tweeted about DKG (ACLU staff and Debian Developer) being beaten by the police. Most of the time we try to avoid an overt political position for LUV, even for political issues where there is a clear and obvious issue of right and wrong. But when a member of our community is a victim of violent crime we have to speak out. LUV opposes police violence except as a last resort. Police who needlessly injure or kill people should be arrested and charged just like any other criminal. Police who are racist should be sacked and if their racist acts hurt people then they should be arrested and charged just like any other criminal. https://www.commongrace.org.au/339_recommendations_from_the_rciadic The recommendations from the Royal Commission Into Aboriginal Deaths In Custody should be applied ASAP. Australia should provide good food and healthcare to all detained people and should comply with the international obligations regarding the treatment of refugees. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

2 1

Re: sharing files - maybe OT
by ROGER LYNNE MCDONALD 07 Jun '20

07 Jun '20

Hello. I am a long time Ubuntu and Fedora user and this is probably off Topic but we solved similar issues this way. Once set up correctly we can't go past AWS S3 buckets for storage and access, Cognito for user management and Cloudfront for automatic site rebuild, etc. You describe below pretty much how our system works on AWS. We have no database and no server. Cloudfront has the advantage that if in the unlikely circumstance, our site is hacked, Cloudfront sees the change and rebuilds to the original page automatically. We have static web site menu pages built on Ubuntu using HuGo a static web site builder to display documents to relevant users, all we need to do is upload documents to the free S3 buckets of which we have several, some with folders. Our upper level managers have no programing skill can handle highly secure documentation with no understanding or effort. There is a little more to understand but these serve our purposes very well for a wide range of management, users and administrators. AWS Cognito and Cloudfront need some setting up but once done no further Admin is necessary. Much of our setup is non Public access, being AWS we have no security issues. The only html/css programing was some alteration to basic HuGo static web site themes. For members who leave, we simply change their password, when a new member arrives we allocate that password to the new member's email address. For contributor input generic blog themes work very well. AWS services cost us a few dollars a month, about 1/4 the price or less of an ISP because there is no server system and infrequent access. We have maybe 50-100 clicks a day at most and the cost for that is .02 to .08 cents per day. I hope this is of help. Roger On 6/6/20 8:53 pm, Russell Coker via luv-main wrote: Asking for a friend. She is on the committee of a small non-profit group with ten members. They're looking for a free/low cost solution for storing committee correspondence, files, images, etc in one central place. Currently the individual members share files they own via Google, and upload files to their Facebook group, or keep files on their own computers. It's messy, and they need everything to be in one place with the ability to easily control permissions. For eg when a committee member leaves, they want to be able to press a button that removes all access for that (former) member but their files will remain. And they want different levels of access, for e.g. the executive can see certain files but not general committee members (for issues where privacy is a concern). They need a structure that is easily managed, such as for eg sections on the various committee roles and relevant documentation for that role; a section for storing minutes; a section for current works in progress; collaborating on documents, etc.

2 1

sharing files
by Russell Coker 06 Jun '20

06 Jun '20

Asking for a friend. She is on the committee of a small non-profit group with ten members. They're looking for a free/low cost solution for storing committee correspondence, files, images, etc in one central place. Currently the individual members share files they own via Google, and upload files to their Facebook group, or keep files on their own computers. It's messy, and they need everything to be in one place with the ability to easily control permissions. For eg when a committee member leaves, they want to be able to press a button that removes all access for that (former) member but their files will remain. And they want different levels of access, for e.g. the executive can see certain files but not general committee members (for issues where privacy is a concern). They need a structure that is easily managed, such as for eg sections on the various committee roles and relevant documentation for that role; a section for storing minutes; a section for current works in progress; collaborating on documents, etc. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

1 0

Laptop storage issues
by Russell Coker 02 Jun '20

02 Jun '20

At the bottom of the message I pasted kernel messages relating to storage hangs on my laptop. So far I have only seen one SSD properly fail (it would just deny all writes) so don't have experience of failure cases. Might the below be due to motherboard or storage problems? https://support.lenovo.com/au/en/solutions/pd027202#stor The above page has specs for my laptop, Thinkpad X1 Carbon type 3460-2B9. INTEL SSDSCMMW18 LE9i /dev/sda 180GB Above is the output of "lsscsi -s". Googling the Intel part number gives me nothing useful. https://www.windowscentral.com/how-upgrade-ssd-lenovo-thinkpad-x1-carbon The above states that M.2 SATA is the type of device. Is it likely to take an NVMe device? [683642.347249] ata1.00: status: { DRDY } [683642.347250] ata1.00: failed command: READ FPDMA QUEUED [683642.347253] ata1.00: cmd 60/08:d8:88:8a:5a/00:00:03:00:00/40 tag 27 ncq dma 4096 in res 40/00:01:00:00:00/00:00:00:00:00/e0 Emask 0x4 (timeout) [683642.347254] ata1.00: status: { DRDY } [683642.347255] ata1.00: failed command: READ FPDMA QUEUED [683642.347257] ata1.00: cmd 60/08:e0:d0:8a:5a/00:00:03:00:00/40 tag 28 ncq dma 4096 in res 40/00:01:00:00:00/00:00:00:00:00/e0 Emask 0x4 (timeout) [683642.347259] ata1.00: status: { DRDY } [683642.347260] ata1.00: failed command: READ FPDMA QUEUED [683642.347262] ata1.00: cmd 60/08:e8:d0:8b:5a/00:00:03:00:00/40 tag 29 ncq dma 4096 in res 40/00:01:00:00:00/00:00:00:00:00/e0 Emask 0x4 (timeout) [683642.347264] ata1.00: status: { DRDY } [683642.347265] ata1.00: failed command: READ FPDMA QUEUED [683642.347267] ata1.00: cmd 60/38:f0:48:8c:5a/00:00:03:00:00/40 tag 30 ncq dma 28672 in res 40/00:00:00:4f:c2/00:00:00:00:00/00 Emask 0x4 (timeout) [683642.347268] ata1.00: status: { DRDY } [683642.347269] ata1.00: failed command: READ FPDMA QUEUED [683642.347272] ata1.00: cmd 60/08:f8:38:92:5a/00:00:03:00:00/40 tag 31 ncq dma 4096 in res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout) [683642.347273] ata1.00: status: { DRDY } [683642.347276] ata1: hard resetting link [683642.661304] ata1: SATA link up 6.0 Gbps (SStatus 133 SControl 300) [683642.672851] ata1.00: ACPI cmd ef/02:00:00:00:00:a0 (SET FEATURES) succeeded [683642.672853] ata1.00: ACPI cmd f5/00:00:00:00:00:a0 (SECURITY FREEZE LOCK) filtered out [683642.672855] ata1.00: ACPI cmd ef/10:03:00:00:00:a0 (SET FEATURES) filtered out [683642.692818] ata1.00: ACPI cmd ef/02:00:00:00:00:a0 (SET FEATURES) succeeded [683642.692820] ata1.00: ACPI cmd f5/00:00:00:00:00:a0 (SECURITY FREEZE LOCK) filtered out [683642.692822] ata1.00: ACPI cmd ef/10:03:00:00:00:a0 (SET FEATURES) filtered out [683642.702477] ata1.00: configured for UDMA/133 [683642.702838] ata1.00: device reported invalid CHS sector 0 [683642.702848] sd 0:0:0:0: [sda] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE [683642.702850] sd 0:0:0:0: [sda] tag#0 Sense Key : Illegal Request [current] [683642.702852] sd 0:0:0:0: [sda] tag#0 Add. Sense: Unaligned write command [683642.702854] sd 0:0:0:0: [sda] tag#0 CDB: Read(10) 28 00 03 5a 8c 98 00 00 10 00 [683642.702855] print_req_error: I/O error, dev sda, sector 56265880 [683642.702874] sd 0:0:0:0: [sda] tag#1 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE [683642.702875] sd 0:0:0:0: [sda] tag#1 Sense Key : Illegal Request [current] [683642.702876] sd 0:0:0:0: [sda] tag#1 Add. Sense: Unaligned write command [683642.702877] sd 0:0:0:0: [sda] tag#1 CDB: Read(10) 28 00 03 5a 8c b8 00 00 30 00 [683642.702878] print_req_error: I/O error, dev sda, sector 56265912 [683642.702883] sd 0:0:0:0: [sda] tag#2 FAILED Result: hostbyte=DID_O -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

1 0

Re: Open Bug Bounty
by Russell Coker 28 May '20

28 May '20

On Thursday, 28 May 2020 9:13:27 AM AEST James McGlashan via luv-main wrote: > (Redacted retransmit. Unsure if Russell received unredacted version after no > response and the issue remaining unpatched. Added a note about TeamHash' > low prices and implied low time.) Yes I got it thanks. I'm dealing with things as I have time and energy for them. While the pandemic has given me more free time it has given me less energy for significant things. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

1 0

Re: Open Bug Bounty
by James McGlashan 28 May '20

28 May '20

(On-list resend; accidentally replied directly to Sam.) On Thu, May 28, 2020 at 10:15:32AM +1000, Sam Varghese via luv-main wrote: > Where do you get this figure from? It sounds wildly optimistic, even > after > passage of the Code on Wages Act, 2019 in August last year. Ah, I misread a resource. Discard that figure. Thanks for pointing this out Sam. I can't find any hourly rate. Hmm. Wikipedia states the minimum daily wage can vary between cities; as low as 160 rupees to as high as 750. This approximates to 1.33, 6.66, and 2.66 days respectively for 750. Or with the lower rate of 160; 6.24, 31.24, and 12.5 days. However, we're talking about a team of security researchers; not a single person and not a low paying job. I don't know enough about Indian work to say; so take all this with a grain of salt. https://en.wikipedia.org/wiki/List_of_minimum_wages_by_country

1 0

Upgrading LUV server
by Russell Coker 27 May '20

27 May '20

In preparation for a Drupal upgrade I've just upgraded to MariaDB on the LUV server. Everything seems to work ok, if you notice anything broken then let me know. Also I removed the DNS entry for members.luv.asn.au as that wasn't configured in the web server. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

2 1

Open Bug Bounty
by Russell Coker 26 May '20

26 May '20

https://www.openbugbounty.org/reports/1170432/ Is this some kind of scam? The web page in question is a static page with an embedded Google search field. Unless there's a problem with the Google search (which would probably be more of a problem for Google than for me) then I can't imagine what the issue might be. Details aren't provided, presumably they want me to pay for that. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

2 2

iotop and kvm
by Russell Coker 21 May '20

21 May '20

When I run iotop on a kvm server I see the qemu processes for KVM being listed as between 1MB/s and 8MB/s for writes, the aggregate of those processes is about 10MB/s. This isn't an impossible number as the image files for KVM are stored on a RAID-1 array of SSDs. Reads tend to be about zero because there is a lot of cache and the system has been running for a while. When I run iostat on the block devices for the RAID-1 I see the average write speed reported at something that's always below 2MB/s and which is often below 1MB/s for a 10 second reporting period. Could iotop be considering writes to /dev/kvm or /dev/net/tun as disk IO? What else could be the explanation for this? How could I work this out? -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

1 0

Strange load average
by Russell Coker 15 May '20

15 May '20

At the bottom of this message is an extract from the monitoring system for the LUV server. Load average spikes to over 20, but at the time of monitoring there was only 1 D state process and nothing was using much CPU time or much RAM. At the same time other VMs didn't report high load so it wasn't an issue of the disk capacity of the hardware being saturated (which would be difficult for a RAID array of SSDs on a mostly quiet server). 09:55:01 CPU %user %nice %system %iowait %steal %idle 12:35:02 all 4.28 0.00 1.15 17.87 1.40 75.29 12:45:01 all 4.82 0.00 1.54 17.73 1.57 74.35 12:55:01 all 5.00 0.00 1.20 18.15 0.91 74.75 13:05:01 all 5.60 0.00 1.33 17.79 1.00 74.28 13:15:01 all 14.11 0.00 2.70 16.95 1.56 64.69 13:25:01 all 4.21 0.00 1.52 20.83 0.89 72.56 Average: all 5.15 0.00 1.31 19.99 1.09 72.45 Above is part of the sar output. Note that at around the time of the high load average there was a higher than usual amount of user CPU time. The iowait while not correlated with this issue was higher than I expected, I ran "iotop -o -d5 -b -P" which indicated that writes from mysqld was the main disk access. I ran "fatrace -f W" which indicated that mysqld was writing to deleted files in /tmp. | 68991 | luv_drupal | localhost | luv_drupal | Query | 0 | Creating sort index | SELECT v.vid, v.*, n.type FROM vocabulary v LEFT JOIN vocabulary_node_types n ON v.vid = n.vid WHERE | The only time I caught an access with the "show processlist;" SQL command was the above, might "Creating sort index" mean writing to deleted files in /tmp? ALERT itmustbe/loadavg: 21.27 6.84 3.01 >= 7 5 4 (Wed May 13 13:06:39) Summary output : 21.27 6.84 3.01 >= 7 5 4 Detailed text (if any) follows: ------------------------------- Here are D state processes: USER PID VSZ RSS TTY COMMAND root 157 0B 0B [jbd2/vda-8] Here are processes with the top CPU percentages: USER PID CPU TTY COMMAND mon 1630 7.0 /usr/bin/perl /usr/lib/mon/mon-local.d/ loadavg.monitor 7 5 4 mon 1629 6.0 /usr/bin/perl /usr/lib/mon/mon.d/msql- mysql.monitor --mode m www-data 1445 5.1 /usr/sbin/apache2 -k start Here are processes with the top RAM use: USER PID VIRT RES TTY COMMAND clamav 335 1.12GB 874MB /usr/sbin/clamd --foreground=true mysql 1392 1.7GB 613MB /usr/sbin/mysqld --basedir=/usr -- datadir=/var/lib/mysql --p spamassassin 20347 101MB 89.3MB spamd child spamassassin 29351 97MB 84.9MB spamd child root 1047 94.5MB 84.1MB /usr/bin/perl -T -w /usr/sbin/spamd -d --pidfile=/var/run/sp Swap Used: 7.8MB / 256MB -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

2 3