stoned 2017-02-28 02:45:49
Ever used zfs?
missmbob 2017-02-28 02:45:54
no
Shadow_7 2017-02-28 02:46:03
xfs is about as branched out as I get. But mostly ext4 for me
julius 2017-02-28 02:46:26
is there a way to have tcpdump log all connections by process name?
Shadow_7 2017-02-28 02:46:41
I need at least one secondary machine with > 2GB ram before I even consider anything zfs ... IMO ...
Shadow_7 2017-02-28 02:46:51
Which I currently lack
petn-randall 2017-02-28 02:46:53
stoned: The PPAPI support in question has been in Debian at least since 2013, can't say if it was in there before or not.
stoned 2017-02-28 02:47:01
ZFS in backports, I try to make a mirro, and then file -s /dev and it says it's apple zfs but also says /dev/sdf1: Linux Software RAID version 1.2 (1) UUID=7dba5417: db48268:dcc1b56c:e29fd4d5 name=Stoned-PC:0 level=1 disks=2
stoned 2017-02-28 02:47:11
That's what the guys in #zfs also asked
stoned 2017-02-28 02:47:16
Why does it show up a linux raid?
stoned 2017-02-28 02:48:39
What does ZFS have to do w/ linux software raid?
stoned 2017-02-28 02:48:54
Isn't this an entirely own self contained volume manager, fs, etc. etc.
tw 2017-02-28 02:48:57
`file` is heuristic. It gets things wrong.
tw 2017-02-28 02:49:14
it says my linux.uImage file is a gpg key.
stoned 2017-02-28 02:49:15
hm.
stoned 2017-02-28 02:49:19
hahah
stoned 2017-02-28 02:49:39
Well, has anyone experience using ZFS on debian (from backports)
stoned 2017-02-28 02:50:14
Well, has anyone experience using ZFS on debian (from backports): I did export, then reinstalled OS, then did import, and no pools show up to be imported. I followd the oracle guide as well. I seemed to have done things right.
stoned 2017-02-28 02:50:25
Now I'm fearful of using zfs again, dont' want this to happen again.
stoned 2017-02-28 02:51:02
this guy was helping me yesterday, I forgot him name. :(
missmbob 2017-02-28 02:51:26
somiaj ? abrotman ? i think i saw them both chat with you a little
stoned 2017-02-28 02:51:39
no with a guy w/ the first name and two last initlals.
stoned 2017-02-28 02:51:53
he was talking to me about his own wheezy to jessie upgrade and his zfs issues
stoned 2017-02-28 02:51:57
maybe you remember
remem 2017-02-28 02:52:17
greate tools for debian --full-resolved:D
stoned 2017-02-28 02:52:50
Everything is hunky dory on my end, other than deciding what to do w/ my 2x 3TB (and that zfs import/exprot thing)
abrotman 2017-02-28 02:53:03
missmbob: hi?
missmbob 2017-02-28 02:53:21
abrotman: i was trying to answer stoned's question. sorry for the ping :P
abrotman 2017-02-28 02:53:23
oh
abrotman 2017-02-28 02:53:33
I see the context now
stoned 2017-02-28 02:54:49
https://imgur.com/RJWSLqC
stoned 2017-02-28 02:55:16
Just going to work on my code a bit, but if anyone comes around w/ zfs experience on debian, that'd be cool.
Donquixote 2017-02-28 02:57:28
I installed Totem
Donquixote 2017-02-28 02:57:34
When I startet it, it crashed immediatly
BluesKaj 2017-02-28 02:58:37
totem , still around ...there's ablast from the past :-)
colo-work 2017-02-28 02:59:08
on stretch, is there a directory where I can just place executable files (or symlinks pointing towards that kind) that will be executed on bootup, like /etc/rc.local (as a single file) used to? or will I have to create systemd units for each executable I'd like to run?
julius 2017-02-28 03:00:38
is it possible to run: ip netns exec test ping -c 1 google.de as user?
julius 2017-02-28 03:00:44
i mean, how would it be
Shadow_7 2017-02-28 03:01:29
totem will always be xine lite to me
julius 2017-02-28 03:04:51
Shadow_7, totem is based on xine?
Shadow_7 2017-02-28 03:05:06
in the early days it looks a lot like xine
Shadow_7 2017-02-28 03:05:29
and maybe some totem-xine package naming. I mostly just installed xine
Shadow_7 2017-02-28 03:07:02
although back then I preferred xmms for cds and ogle for dvds
abrotman 2017-02-28 03:07:47
totem can have more than one backend (or used to anyway), and probably uses gstreamer by default now
cybrNaut 2017-02-28 03:07:52
after doing "aptitude install ocrodjvu", i run it and get "ocrodjvu: error: OCR engine (ocropus) was not found". Shouldn't the package have automatically installed its dependencies?
cybrNaut 2017-02-28 03:08:54
doing "apt-file search ocropus" gives "ocrodjvu: /usr/share/ocrodjvu/lib/engines/ocropus.py" (a file that exists)
mjnovice 2017-02-28 03:09:57
Hello people, I am trying to use overlayfs on debian 8.6 with kernel 3.16. Any way of doing it ?
ksk 2017-02-28 03:10:52
Hey Guys. is there anything cool to restrict a (ssh) user to rsync and sftp access only?
Shadow_7 2017-02-28 03:12:07
ksk: couldn't they sftp additional functionality?
ksk 2017-02-28 03:12:39
Shadow_7: pardon?
Shadow_7 2017-02-28 03:13:43
ksk: use fstp to get executables to do other things. just thinking out loud
koollman 2017-02-28 03:14:16
ksk: rssh
ksk 2017-02-28 03:15:37
koollman: thanks!
mflow 2017-02-28 03:18:25
Is there a libpng16-16 in Debian Jessie? I cannot find any here: https://packages.debian.org/search?keywords=libpng16-16 How can I install libpng 1.6.x then if I don't have sid or stretch or experimental? Manually compilling it from source? Or enabling testing repo and installing the libpng from there?
Shadow_7 2017-02-28 03:18:58
libpng12-0 for jessie it seems
Shadow_7 2017-02-28 03:19:27
don't know about backports
mflow 2017-02-28 03:19:42
I need libpng 1.6.x otherwise my code won't compile
missmbob 2017-02-28 03:20:33
,checkbackport libpng-dev
judd 2017-02-28 03:20:34
Backporting package libpng-dev in sid→jessie/amd64: all build-dependencies satisfied using jessie, jessie-backports.
missmbob 2017-02-28 03:20:48
that's 1.6.28
mflow 2017-02-28 03:24:11
missmbob: you mean, that there is a backport? Why this doesn't return any results https://packages.debian.org/search?keywords=libpng-dev&searchon=names§ion=all&suite=jessie-backports ?
mflow 2017-02-28 03:25:19
missmbob: or it is the process of being backported?
jelly 2017-02-28 03:26:39
that's looking at feasibility of making a backport
mflow 2017-02-28 03:28:49
,checkbackport libpng16-16
judd 2017-02-28 03:28:50
Backporting package libpng16-16 in sid→jessie/amd64: all build-dependencies satisfied using jessie, jessie-backports.
missmbob 2017-02-28 03:29:21
!tell mflow about ssb
missmbob 2017-02-28 03:29:31
note that one also requires jessie-backports, which is fun
Shadow_7 2017-02-28 03:29:42
super sayen brother?
cybrNaut 2017-02-28 03:33:36
nevermind.. turns out a non-obligatory CLI optoin is really needed
tdn 2017-02-28 03:33:50
I use TinyCA2 to manage my certificates, but testing them via ssllabs.com/ssltest, I recently discovered, that they all use a weak signature (SHA1). It appears that TinyCA2 does not support SHA2. What other tools similar to TinyCA2 are there for Debian? (I use Debian 7, but am willing to upgrade to 8 in order to fix this)
missmbob 2017-02-28 03:35:04
i use letsencrypt
tw 2017-02-28 03:35:24
mjnovice: overlayfs is in 3.18 and later, but you want the 4.0+ version anyway.
tw 2017-02-28 03:35:56
There may be external patches for 3.16, but I would pull a 4.8 or 4.9 kernel from backports anyway.
bezaban 2017-02-28 03:36:12
openssl, ejbca (not packaged)
bezaban 2017-02-28 03:36:24
there was another one I gave a spin
missmbob 2017-02-28 03:36:51
,i certbot
bezaban 2017-02-28 03:36:52
,v dogtag
judd 2017-02-28 03:36:53
No package named 'certbot' was found in jessie/amd64.
judd 2017-02-28 03:36:54
No package named 'dogtag' was found in amd64.
bezaban 2017-02-28 03:37:18
and ejbca may be *slightly* overkill
colo-work 2017-02-28 03:37:32
tdn, just use the OpenSSL ca tool(s) directly?
tw 2017-02-28 03:37:49
tdn: update the openssl.cnf for sha256. Change default_md from default to sha256.
tsuyubo 2017-02-28 03:37:51
hi, all, excuse me. I have downloaded girara source code,but how to install it?
tw 2017-02-28 03:38:00
tinyca2 probably just wraps up the openssl calls.
missmbob 2017-02-28 03:38:14
tsuyubo: i assume there are instructions where you downloaded it from
tsuyubo 2017-02-28 03:38:24
Here are no makefile or
jelly 2017-02-28 03:38:32
tw: you get the Most Sensible Guess Award
bezaban 2017-02-28 03:38:58
that wasn't the question! Although probably the best answer :>
tsuyubo 2017-02-28 03:39:05
missmbob: en..I think it should have instructions
tdn 2017-02-28 03:39:30
colo-work, using openssl directly from commandline does not give me any governance options, etc.
tsuyubo 2017-02-28 03:39:41
missmbob: but,, here are a file named rules
tdn 2017-02-28 03:39:49
colo-work, then I need to create my own tools around it to manage the certs, keys, etc.
colo-work 2017-02-28 03:39:56
tdn, what "governance options" are you speaking of?
tdn 2017-02-28 03:40:05
tw, that might work.
tdn 2017-02-28 03:40:16
colo-work, do you know tinyca2?
tsuyubo 2017-02-28 03:40:16
missmbob: and libgirara-dev.install
colo-work 2017-02-28 03:40:18
(I'm note sure what those CA mgmt tools do, but I manage three CAs with openssl's "native" tooling, on top of git, and do just fine)
jelly 2017-02-28 03:40:52
colo-work: does git warn you of certs that need refreshing?
jelly 2017-02-28 03:41:16
and of users that are not in your org. any more so their user certs need revoking
colo-work 2017-02-28 03:41:21
jelly, our monitoring takes care of that. yes, even for end-user certs that are committed to the repo.
mflow 2017-02-28 03:41:22
missmbob: thanks, I will try to do a backport for libpng 1.6.x
jelly 2017-02-28 03:41:33
colo-work: so it's not just git
tsuyubo 2017-02-28 03:41:35
could you give me a hint?
tw 2017-02-28 03:42:16
It's probably a buttload of scripts on top of git. That's how mine has to work because I was too foolish to just set up the CA role in win server.
colo-work 2017-02-28 03:43:15
jelly, no, but I wouldn't expect it to do so :) I guess tinyca also "isn't just tinyca", but it'd also require a cron-like facility, and MTA, etc. to perform its notification stuff.
tdn 2017-02-28 03:43:25
tw, exactly. That buttload of scripts is what I want to avoid having to implement if TinyCA can give me that.
tsuyubo 2017-02-28 03:43:27
missmbob: sorry, i have git clone it's source code .I will try it again
bezaban 2017-02-28 03:44:17
the CA part is just a subset of PKI
missmbob 2017-02-28 03:44:38
tsuyubo: i just went to their github and it tells you exactly how to install. seriously just go read
boser 2017-02-28 03:47:38
so now, i have a problem in cinnamon. when i move the mause over same icons in the Menu, than the pictures are disapers. it look like, that a blank space are overdraw than. The information about this icon are still avalible.
tsuyubo 2017-02-28 03:48:52
missmbob: yes, it is my fault. I downloaded a girara_0.2.7-1.debian.tar.xz and got lost how to insatll it. Thanks again!
tdn 2017-02-28 03:50:22
tw, I changed default_md to sha256. Now I try to issue a new certificate in TinyCA2. It then forces me to chose one of the following digests: SHA1, MD2, MDC2, MD4, MD5, RIPEMD-160. No way to select "none, use default"
jelly 2017-02-28 03:53:10
that sounds like some rather outdated piece of software
tdn 2017-02-28 03:54:01
jelly, yeah, I think there is a debian bug from 2014 on this issue (not supporting SHA2)
colo-work 2017-02-28 03:54:20
considering how long openssl has supported sha2 sigs, that's kinda odd :)
tdn 2017-02-28 03:54:54
colo-work, I agree
DexterF 2017-02-28 04:04:48
say I've drawn a full debian mirror but now want to get rid of specific branches *afterwards*, can do somehow? I pulled one for a project, so I need to keep the versions from that date
tdn 2017-02-28 04:05:10
DexterF, just curious: what is the size of the full mirror?
DexterF 2017-02-28 04:05:26
tdn, 350GB or so
tdn 2017-02-28 04:05:39
damn
DexterF 2017-02-28 04:08:17
my thought. hastily got everything with wget (I think..) now I need to slim down...
DexterF 2017-02-28 04:08:28
should have a look at debmirror I guess
tdn 2017-02-28 04:08:42
DexterF, are you creating a public mirror?
tdn 2017-02-28 04:08:46
DexterF, or for internal use?
tdn 2017-02-28 04:09:14
DexterF, if it is for internal use, you might want to consider an apt proxy instead. I used this some years ago. Then I only need to cache all packages that are actually used.
DexterF 2017-02-28 04:21:06
tdn, internal. need to create a black box device that won't talk to the internet afterwards
DexterF 2017-02-28 04:21:18
key feature is "same package versions"
