- luv-main - example.com

ethernet failure on local network using debian - second post
by bnis＠fastmail.fm 25 Nov '18

25 Nov '18

Hello all again, Further info on my problem, here is a dmesg readout which strikes me as unusual because it names both ethernets in the first place with the same name: eth0, whereas on other dmesg readouts from other machines with multiple ethernets it's always been a different name for each ethernet card, i.e. eth0 and eth1 etc. <snip> [ 0.925002] r8169 Gigabit Ethernet driver 2.3LK-NAPI loaded [ 0.925162] r8169 0000:03:00.0: not PCI Express [ 0.925483] r8169 0000:03:00.0 eth0: RTL8169sb/8110sb, 30:b5:c2:05:28:70, XID 10000000, IRQ 20 [ 0.925605] r8169 0000:03:00.0 eth0: jumbo features [frames: 7152 bytes, tx checksumming: ok] [ 0.925853] ehci-pci 0000:00:1a.0: cache line size of 64 is not supported [ 0.925865] ehci-pci 0000:00:1a.0: irq 16, io mem 0xf7238000 [ 0.929154] r8169 0000:03:00.0 enp3s0: renamed from eth0 <snip> [ 1.005911] e1000e 0000:00:19.0 0000:00:19.0 (uninitialized): registered PHC clock 624 [ 1.109277] e1000e 0000:00:19.0 eth0: (PCI Express:2.5GT/s:Width x1) f0:92:1c:f2:8f:6a 625 [ 1.109378] e1000e 0000:00:19.0 eth0: Intel(R) PRO/1000 Network Connection 626 [ 1.109486] e1000e 0000:00:19.0 eth0: MAC: 10, PHY: 11, PBA No: 0100FF-0FF 627 [ 1.110291] e1000e 0000:00:19.0 eno1: renamed from eth0 <snip> [ben@til ~]$ uname -a Linux til 4.18.0-2-amd64 #1 SMP Debian 4.18.10-2 (2018-11-02) x86_64 GNU/Linux Is this identity oddness part of the problem, and what could I do about it? ben

1 0

Does anyone know of a Linux equivalent to tableau?
by h 13 Nov '18

13 Nov '18

Hi, I'm a linux hobbyist who has tinkered with postgis and apache to manipulate data for display in QGis and as tables and charts using apache. - I like to think I have a reasonable knowledge of databases but don't do it all day every day ;) I have recently been introduced to Tableau (https://www.tableau.com) which operates on Windows and on Mac clients. It seems to me to be a GUI for what I do with Postgis and apache (with a bit of R functionality added - Learning R is on my 'to do' list) Does anyone know about tableau, and whether there is a FOSS equivalent? I am on and off line at the moment, so may be slow to respond to comments. With thanks

5 7

Noscript warning
by Lindsay W 09 Nov '18

09 Nov '18

I belong to an historic radio club and I get there newsletter as an attachment to to an email. The most recent arrived today. On trying either to download or view Firefox's Noscript attachment gives a warning and on the browsers current page an error message something like "web page not availible" is displayed. I have never struck this behaviour on downloading an email attachment before. I know little about web page security but this I do regard as suspicious. Lindsay

2 2

SSL improvements
by Russell Coker 04 Nov '18

04 Nov '18

https://www.ssllabs.com/ssltest/analyze.html?d=www.luv.asn.au&s=46.4.124.163 Based on the above (and some other reading) I made some changes to the LUV configuration. SSLProtocol all -SSLv3 -TLSv1 I used the above to remove support for TLSv1. That prevents Android versions below 4.3 from connecting as well as ancient versions of IE on Windows. I'm pretty sure that every Windows system that still has MS support can run a browser that supports TLS version 1.1. As for the tiny minority of devices running Android 4.3 and earlier, that's going to be a problem for them if they aren't using Chrome. I believe that the main purpose of LUV is education. If someone has a problem with a LUV web site then they can talk to us and get some help with that. While if they encounter the same issue on some corporate site they probably won't. # from https://mozilla.github.io/server-side-tls/ssl-config-generator/ # HSTS (mod_headers is required) (15768000 seconds = 6 months) Header always set Strict-Transport-Security "max-age=15768000" I've had the above in the LUV configuration for some time. That means that browsers will cache the fact that they should use HTTPS so if you manually type in a URL the browser will use HTTPS instead. IN CAA 0 issue "letsencrypt.org" IN CAA 0 issuewild ";" IN CAA 0 iodef "mailto:russell@coker.com.au" I've also added the above DNS entries to lock the luv.asn.au domain to only certificates from letsencrypt.org. I don't think that this is going to give us a significant benefit as letsencrypt gives out certificates based on connecting to the name in question. So the task of fooling letsencrypt is probably easier than fooling a regular HTTP session. This also means that the Strict-Transport-Security also probably provides minimal benefit. Also the LUV web site doesn't need a lot of security, we aren't going online banking or anything. But again we are about education, so if LUV doing this helps others learn about configuration options and promote them for other organisations with greater security needs then that's a good thing. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

1 0

LAN-only chat?
by Craig Sanders 03 Nov '18

03 Nov '18

Anyone know of a decent local-LAN chat program? I've tried the Bonjour (i.e. avahi) module for pidin but it's just unreliable. I don't know whether it's pidgin that's the problem or whether it's because avahi is more half-arsed Poettering garbage, but I've spent hours fucking around with it on multiple occasions, think i've got it working OK, and then the next time either I or my partner try to use it to send notes to each other, it just doesn't fucking work. I suspect, but am not sure, that either pidgin or avahi gets confused because all machines on my LAN have multiple addresses on different subnets - this is too useful for VMs and docker images and other stuff to even consider changing just for a chat program. If I had to, I could set up an irc or xmpp server or something but that seems like overkill for this. So, can anyone recommend a no-frills, no-fuss LAN chat that just works? Even tips on making pidgin + bonjour work reliably would be great. Preferably something better than the ancient ytalk. craig -- craig sanders <cas(a)taz.net.au>

6 7

IBM Acquires Red Hat
by Lev Lafayette 30 Oct '18

30 Oct '18

This is fairly big deal.. https://www.cnbc.com/2018/10/28/ibm-is-reportedly-nearing-deal-to-acquire-r… Prior to the acquisition, Red Hat's market capitalization stood at approximately $20.5 billion. The acquisition is by far IBM's largest deal ever, and the third-biggest in the history of U.S. tech. -- Lev Lafayette, BA (Hons), GradCertTerAdEd (Murdoch), GradCertPM, MBA (Tech Mngmnt) (Chifley) mobile: 0432 255 208 RFC 1855 Netiquette Guidelines http://www.ietf.org/rfc/rfc1855.txt

3 2

Dropbox and zfs
by stripes theotoky 28 Oct '18

28 Oct '18

As of November Dropbox are dropping support for Linux file systems other than ext4, as I run zfs this is less than helpful. I am wondering as a temporary measure until I move to Pcloud if it would be possible to format a 64GB SD card as ext4, copy the contents of my Dropbox folder to it and then mount it at /home/<username>/Dropbox. Assuming this works it would leave the system drive as zfs and Dropbox in its own ext4 flashcard. Are there better ways to do this and if so how? What will happen with the zfs snapshots that the box takes every minute? What is the life expectancy of an SD card used like this? Thanks in advance Stripes -- Stripes Theotoky -37 .713869 145.050562

4 3

Symmetric Key Management and Distribution
by Usman Saeed 28 Oct '18

28 Oct '18

Hi, I am working on a project involving distributed radio nodes connected over a wireless network. We are using symmetric key cryptography for ciphering (AES-256). The radio nodes are running Linux on a 250MHz processor. I need a solution to manage the symmetric keys in this network of nodes, written in C/C++. The solution should be able to manage the life cycle of the keys. It should be able to auto-generate a new key (upon expiry or when manually instructed by the user) and securely disseminate it in the network and archive the old key after activation of the new key. I have looked at Key Management Interoperability Protocol (KMIP). It provides all of these features but sadly there is no open-source implementation available in C. Does anyone know a solution for symmetric key management that can provide these features and implemented in the open-source domain? Thanks, Usman

5 6

noobish help with Virtualisation (virtual box)
by h 23 Oct '18

23 Oct '18

I am a hobbyist, running a desktop, latest version, open-suse (15.0) system. I have recently changed to an AMD processor having used intel for a long time. I generally format and do a clean install on /, but have a /home partition which has been around for many years and may contain entries related to the intel processor rather than the amd one. I am trying to install and run virtual box. On starting a virtual machine I get a message: AMD-V is disabled in the BIOS (or by the host OS) (VERR_SVM_DISABLED). My BIOS says that "Secure Virtual Machine" is enabled. cat cpuinfo |grep svm shows that svm is on each core. dmidecode does NOT list the svm flag Further system info: Base Board Information Manufacturer: Micro-Star International Co., Ltd. Product Name: B350M PRO-VDH (MS-7A38) Version: 2.0 Processor Information Socket Designation: AM4 Type: Central Processor Family: Zen Manufacturer: Advanced Micro Devices, Inc. Signature: Family 23, Model 1, Stepping 1 Thinking there may be detritus in my /home partition, I have created a new user, but experienced the same problem when starting the virtual machine. Any help on 'how to make virtual box work' would be appreciated, also any info on why cpuinfo says svm is available, but dmidecode does not? I am on and off line at the moment, so may take time to respond. Thank you in advance! H

2 2

strange date issue
by Russell Coker 14 Oct '18

14 Oct '18

I'm running kvm with the -rtc option to try and test a bug related to the start of daylight savings time. Anyway when the VM boots up it gets the acutal time rather than the hwclock time: root@stretch:/etc# hwclock 2018-10-05 10:39:30.993531+1000 root@stretch:/etc# date Sun 14 Oct 13:17:23 AEDT 2018 root@stretch:/etc# cat /etc/systemd/timesyncd.conf # This file is part of systemd. # # systemd is free software; you can redistribute it and/or modify it # under the terms of the GNU Lesser General Public License as published by # the Free Software Foundation; either version 2.1 of the License, or # (at your option) any later version. # # Entries in this file show the compile time defaults. # You can change settings by editing this file. # Defaults can be restored by simply deleting this file. # # See timesyncd.conf(5) for details. [Time] #NTP= #FallbackNTP=0.debian.pool.ntp.org 1.debian.pool.ntp.org 2.debian.pool.ntp.org 3.debian.pool.ntp.org root@stretch:/etc# dpkg -l "*ntp*"|grep ^ii Any ideas for where this might be set? It's a fairly standard Debian/Stretch system with systemd. When I boot with "init=/bin/bash" it has the correct time, so something after going multi-user sets the time via NTP (presumably). -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

2 2