xubuntu46w | I have an Eclipse Fit Clip Plus 8GB MP3 + Video player which I want to download music to. Windows is stated for the download on their recommendation of iTunes and I have Xubuntu with LInux and Firefox on my laptop. Can you assist me in the process I will need to download music to this new MP3 player? | 04:18 |
---|---|---|
=== mnepton is now known as mneptok | ||
xubuntu30w | Anyone here? | 05:39 |
xubuntu41o | how to upgrade zubuntu 14.04 to 14.10 online | 09:18 |
flocculant | xubuntu41o: 14.10 is out of support since the middle of last year https://wiki.ubuntu.com/Releases | 09:20 |
flocculant | the next simple upgrade for 14.04 will be when 16.04 is released, you'll get the LTS to LTS upgrade option | 09:20 |
morrowyn | hi, i need to run a program as root , how do i "run as administrator" from xfce like you have on windows? | 10:50 |
morrowyn | gksudo did the trick :) | 10:55 |
xubuntu07i | hiya! with EFI and separate /boot partition, which partition should I install the bootloader to? | 19:45 |
xubuntu07i | I selected the whole disk, /dev/sda, is that right? | 19:45 |
xubuntu07i | nevermind actually. i'll see after a reboot :D | 19:46 |
Linus_ | good question, i think the whole /dev/sda | 19:46 |
Linus_ | so which is the right answer? now i am second guessing myself | 19:52 |
Linus_ | huh? ---> "Note that in a UEFI-mode installation, Ubuntu will not ask you where to install the boot loader" | 19:59 |
Linus_ | https://help.ubuntu.com/community/UEFI | 19:59 |
xubuntu-07i | OK so installing the bootloader to /dev/sda *did* work. Also it did ask me, because I chose "something else" | 19:59 |
xubuntu-07i | HOWEVER | 19:59 |
xubuntu-07i | I had set up the luks-encrypted LVM vg already, but when I tried to use "something else" and selected those logical volumes to install the OS to, it installed, but i guess it didn't realize that those partitions were encrypted. | 20:00 |
Walliski | Cant have the boot loader encrypted I suppose, since when it runs there is no software to decrypt stuff | 20:01 |
xubuntu-07i | So I have an almost-working installation, but it doesn't ask me for the disk password on startup, so it gives up and goes to the BusyBox initramfs. | 20:01 |
Walliski | AFAIK that comes when it starts loading the initramfs? | 20:01 |
xubuntu-07i | Oh well, ESP and /boot were NOT on the vg | 20:01 |
xubuntu-07i | so they were unencrypted | 20:01 |
xubuntu-07i | but I guess i need to edit /etc/crypttab? | 20:01 |
Linus_ | xubuntu-07i: why not set up encryption, during install? | 20:02 |
Linus_ | xubuntu-07i: and why use LVM? | 20:02 |
Walliski | xubuntu-07i, unfortunately I've never done such a thing so can't help you there :P | 20:03 |
xubuntu-07i | I wanted to have a separate /home partition. If I choose "encrypt the disk" ubiquity selects "use lvm" also. So I thought i had to. Also it makes things easier to resize and stuff. | 20:03 |
xubuntu-07i | Also, if I chose "install with encrypted LVM" it would not create a home partition, so I had to do that bit myself | 20:03 |
Linus_ | xubuntu-07i: i use LUKS with no LVM, keeps it simple | 20:05 |
xubuntu-07i | hmmmm | 20:05 |
Linus_ | xubuntu-07i: you gotta do "something else" | 20:05 |
xubuntu-07i | the only way i can think of encrypting / and /home as a group would be to use LVM though... | 20:05 |
Linus_ | if you just want encrypted /home with LUKS, and no LVM | 20:06 |
xubuntu-07i | No I want encrypted / too | 20:06 |
xubuntu-07i | cause I prefer LUKS over ecryptfs (the "encrypt my home folder" option) | 20:06 |
Linus_ | yes, LUKS is best | 20:06 |
Linus_ | but you mean mean you only want to have to enter the password once? to decrypt both / & /home ? | 20:07 |
Linus_ | good question | 20:07 |
Linus_ | how do you do that? | 20:09 |
xubuntu-07i | idk but i did it before... | 20:09 |
Linus_ | i dont like LVM cuz it adds needless complexity | 20:09 |
xubuntu-07i | I especially don't want an encrypted volume inside another one because I assumed that would cause a lot of SSD-damaging writes | 20:10 |
xubuntu-07i | I have a system installed but not booting so i think lack of /etc/crypttab is the culprit | 20:10 |
Linus_ | when doing "something else" i select "Primary, "physical volume for encryption" ext4" <--- that does LUKS | 20:11 |
Walliski | With unlocking Home there seems to be a way to do this using keys that are saved in files also? | 20:12 |
Walliski | If I with my 10 minute googling understand it correctly | 20:12 |
Linus_ | xubuntu-07i: also make sure it's formatted to GPT before you start | 20:12 |
Walliski | That you could have the / unlocked by password, and then automatically unlock rest by keys stored in files on the root partition | 20:12 |
Linus_ | xubuntu-07i: and before that, do a ATA secure erase, if it is a used drive (that speeds it up) GNOME disks does it | 20:13 |
Linus_ | for SSD ^ | 20:13 |
Walliski | Since the keys would then be encrypted by the first password, and readable only by root (in which case someone has root access on your machine you have bigger problems) | 20:13 |
Walliski | Suppose I should stop rambling now :D | 20:13 |
xubuntu-07i | Walliski I would do that but I think crypto-in-crypto is bad for SSDs | 20:13 |
xubuntu-07i | Oh and if adding crypttab doesn't work, Linus_ I'll try that | 20:14 |
Walliski | Humm ? | 20:14 |
Linus_ | http://worldofgnome.org/uploads/2012/08/erase-options.png | 20:15 |
Walliski | Wouldnt that be 2 different encryptions on 2 different partitions, but the first one unlocks the second? | 20:15 |
xubuntu-07i | Well I think you implied there would be /, which is encrypted and then a file in the / part needed to unlock the /home part, right? | 20:15 |
xubuntu-07i | Ohhh | 20:15 |
Linus_ | http://worldofgnome.org/a-preview-of-gnome-disks-3-6/ | 20:15 |
Linus_ | http://www.anandtech.com/show/2738/8 | 20:15 |
xubuntu-07i | Linus_ I'll do that if this crypttab thing doesn't work | 20:15 |
Linus_ | https://wiki.archlinux.org/index.php/SSD_Memory_Cell_Clearing | 20:15 |
xubuntu-07i | Unfortunately I'm on IRC from the live medium so I'd have to reconnect to test it out | 20:15 |
xubuntu-07i | which would be now, brb | 20:16 |
* xubuntu-07i sighs | 20:23 | |
xubuntu-07i | it didn't work this time | 20:24 |
Walliski | :( | 20:24 |
xubuntu-07i | Linus_ what was your approach for separate /home again? | 20:25 |
Linus_ | xubuntu-07i: what didnt work? | 20:25 |
xubuntu-07i | adding an entry for magnesium (my vg's name) to /etc/crypttab | 20:26 |
Linus_ | my way works, except you need to input the password twice--- now i'm curious, as to a way around thta | 20:26 |
xubuntu-07i | I think LVM is that way... | 20:26 |
Linus_ | VG means, LVM right | 20:26 |
Linus_ | why do you want LVM? | 20:26 |
bekks | Because still using partitions is a bit oldskool. | 20:27 |
xubuntu-07i | I don't want an encrypted home folder inside of the encrypted root volume, I *do* want them both encrypted, and I want them on separate volumes | 20:28 |
xubuntu-07i | that's why | 20:28 |
Linus_ | LVM adds complexity/overhead, more chance of corruption, --- encryption is already doing enough of that :P | 20:28 |
bekks | Then dont encrypt your home folder, when having a fully encrypted system already. | 20:28 |
bekks | Linus_: LVM is state of the art, nowadays. | 20:28 |
Linus_ | bekks: he wants separate partitions though | 20:29 |
Linus_ | xubuntu-07i: that is another option, use one parition | 20:29 |
bekks | LVM, multiple volumes, done. | 20:29 |
xubuntu-07i | The problem is that Ubiquity didn't see /dev/mapper/magnesium-{root,home,swap} as encrypted partitions, it saw them as separate disks. So if I install to those separate volumes using ubiquity, it thinks the system has three unencrypted disks. | 20:30 |
xubuntu-07i | Which results in my laptop not asking for my passphrase on boot, which is where I am now. | 20:30 |
Linus_ | you can have separate partitions, for / /home, with LUKS. you dont need LVM for that | 20:30 |
xubuntu-07i | Though if I do that, can I encrypt them as one volume? | 20:31 |
Linus_ | xubuntu-07i: i think you need to enter ur password twice | 20:31 |
bekks | xubuntu-07i: You can encrypt your disk fully, then setup LVM inside your encrypted disk. | 20:32 |
bekks | xubuntu-07i: You will have one encryption level, and as many volumes as you want. | 20:32 |
=== mnepton is now known as mneptok | ||
xubuntu-07i | Yes! OK how do I do that? I'm on the installation medium, and I have a backup of /home | 20:33 |
xubuntu-07i | That's how it was before | 20:33 |
Linus_ | that is the other option, but is adding the complexity of LVM, worth the couple seconds you save entering password once. IMO, no | 20:33 |
xubuntu-07i | bekks: Linus_: LVM is state of the art, nowadays. | 20:33 |
bekks | xubuntu-07i: I know. Thats what I told you. | 20:34 |
xubuntu-07i | Right. I feel like we're going in circles? | 20:34 |
Linus_ | ur choice, i just like to keep things simple, streamlined. i hate corrupted disks, problems, etc | 20:34 |
bekks | xubuntu-07i: So you want full disk encryption, and LVM? | 20:34 |
xubuntu-07i | Yes that's right | 20:34 |
bekks | xubuntu-07i: OK. :) | 20:35 |
Linus_ | now i am curious , if there is a way to enter password once, *without* LVM, hmmmm, any linux wizards in here? | 20:35 |
Linus_ | becuase that is what you really want right? ^ | 20:35 |
bekks | xubuntu-07i: https://help.ubuntu.com/community/FullDiskEncryptionHowto | 20:35 |
xubuntu-07i | http://i.imgur.com/izFv7j0.png if that's what I did, couldn't I just add a /home partition after the install? | 20:36 |
xubuntu-07i | I think that tutorial is pre-EFI bekks | 20:37 |
bekks | xubuntu-07i: I never used the graphical installer until now. | 20:37 |
Linus_ | another downside of that option, is you cant do GPT xubuntu-07i | 20:37 |
Linus_ | GPT is "state of the art" :P | 20:37 |
xubuntu-07i | which option, the screenshot i posted or the wiki tutorial | 20:38 |
bekks | Only if your computer fully supported UEFI. | 20:38 |
xubuntu-07i | It does | 20:38 |
bekks | Linus_: And why cant he use GPT? | 20:38 |
xubuntu-07i | ^ | 20:38 |
xubuntu-07i | erm... they/them/their please | 20:38 |
Linus_ | oh, i thought that was a link to the auto-installation. if you click auto-install/encrypt. it forces MBR, and swap. correct? | 20:39 |
bekks | Linus_: No. | 20:39 |
Walliski | If you are doing it again from the beginning, take a look at the Arch wiki | 20:40 |
Walliski | Since there were different ways of doing it | 20:40 |
xubuntu-07i | Mind resending that link? | 20:40 |
Walliski | Of which some are mentioned already, e.g. creating encrypted drive, and LVM inside that... or LVM on outside, and encrypting afterwards... | 20:40 |
Walliski | https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system#Overview | 20:40 |
Linus_ | i'm pretty that his screenshot does MBR-only (not GPT) , but maybe newer versions of ubuntu fixed that? | 20:41 |
Walliski | Then again it might need some magic to fit toghether with the xubuntu installation, however it says which steps are required | 20:43 |
Linus_ | xubuntu-07i: if you want to get real fancy, you can recompile cryptsetup, to give you better key-stretching :) | 20:43 |
Linus_ | oh, wait, you dont have to recompile, but IMO , it is easier that way | 20:44 |
xubuntu-07i | Last time I did that it worked with EFI (don't ask why there *was* a last time, though :P) | 20:44 |
Linus_ | xubuntu-07i: ur screenshot works with EFI, i think.... but not GPT, iirc | 20:46 |
xubuntu-07i | .................................. | 20:46 |
xubuntu-07i | I think as long as my EFI can boot to my drive it doesn't matter the partition scheme :P | 20:46 |
bekks | Start the ubuntu server install, create the full disk encryption using GPT, and you are fine. Instead discussing it in here, endlessly. | 20:47 |
xubuntu-07i | ubuntu server eh? | 20:47 |
Linus_ | xubuntu-07i: the screenshot, also makes a SWAP. which i dont like | 20:47 |
xubuntu-07i | why not? | 20:47 |
bekks | xubuntu-07i: text based installation, option to create full disk encryption. | 20:48 |
Linus_ | RAM is cheap. xubuntu-07i | 20:48 |
bekks | xubuntu-07i: Because he dont like suspend to disk. | 20:48 |
xubuntu-07i | yea i want that | 20:48 |
bekks | Then you need swap. | 20:48 |
xubuntu-07i | right | 20:48 |
xubuntu-07i | ok | 20:48 |
bekks | As large as your RAM, plus about 100M. | 20:49 |
Linus_ | and swap is security vuln.. like i said, i like my computer streamlined :P | 20:49 |
xubuntu-07i | How dangerous would it be to write the ubuntu server iso to the USB drive i'm booted on? live boots from ramdisk right? | 20:49 |
Linus_ | http://thesimplecomputer.info/full-disk-encryption-with-ubuntu | 20:49 |
Linus_ | http://thesimplecomputer.info/pages/ubuntu-fde-condensed | 20:49 |
Linus_ | great info, explains what i've been saying, but he is more hardcore than me :P | 20:50 |
bekks | xubuntu-07i: No ramdisk involved. | 20:50 |
bekks | xubuntu-07i: It would be booting the ubuntu server installer from USB. | 20:50 |
Linus_ | plus, i've went thru corrupted HDDs,---- not fun. Clean-room prices suck. | 20:51 |
bekks | You didnt have backups then, right? | 20:51 |
xubuntu-07i | I would assume not. | 20:52 |
bekks | Then the data was not worth being kept. | 20:52 |
Linus_ | what is the big benefit of suspend-to-disk, anyway? | 20:53 |
bekks | Continuing a pointless discussion. | 20:53 |
Linus_ | not pointless, i'm asking what i'm missing.. | 20:53 |
xubuntu-07i | Sometimes I need to suspend for a long time, or because I left the battery at home to reduce weight. | 21:00 |
Linus_ | i just log out. safer. but if you r gonna stay logged in.... use "vlock -sn" instead of xscreensaver, to lock ur screen | 21:03 |
xubuntu-07i | why not xscreensaver? | 21:03 |
Linus_ | not hardcore enough :P | 21:03 |
xubuntu-07i | usually suspend to disk locks first | 21:04 |
Walliski | then again if you log out you loose your session, and would need to open all programs and stuff again | 21:04 |
Walliski | O:) | 21:04 |
Linus_ | xubuntu-07i: oh wait...... if you use a Password for "/" and a keyfile for "/home" , that should work, with one password | 21:05 |
Linus_ | No LVM needed.... Tada! | 21:05 |
xubuntu-07i | If home fills up I'd like to be able to resize it later | 21:06 |
xubuntu-07i | I think I've got it from here. I'm using http://thesimplecomputer.info/full-disk-encryption-with-ubuntu and adjusting for LVM | 21:07 |
bekks | xubuntu-07i: Just use the ubuntu server installer. | 21:07 |
bekks | xubuntu-07i: No need for weirdo 3rd party howtos. | 21:07 |
xubuntu-07i | ok yea i'll try that instead | 21:07 |
Linus_ | :P | 21:07 |
xubuntu-07i | forgot about it | 21:07 |
xubuntu-07i | that'll work for GPT, EFI, the whole lot, right? | 21:07 |
bekks | 5Sure. | 21:07 |
bekks | Even without the 5. | 21:08 |
xubuntu-07i | lol | 21:08 |
Linus_ | i like my weirdo how-tos | 21:08 |
Linus_ | xubuntu-07i: also, if your /Home fills up, remember, you can also move files to / | 21:09 |
Linus_ | you dont need LVM for that, or to resize ur partition | 21:09 |
bekks | Moving files does not solve the problem of resizing. | 21:09 |
xubuntu-07i | right | 21:09 |
Linus_ | it solves the problem of a full drive | 21:09 |
xubuntu-07i | there will be no /home2! | 21:09 |
bekks | So can we finally end this pointless discussion bout using LVM? | 21:09 |
xubuntu-07i | i think so :D | 21:09 |
bekks | Them/they/their want to use LVM, period. | 21:10 |
Linus_ | i'm just tryin' to help a brother out, giving options :) | 21:10 |
xubuntu-07i | Thanks for that | 21:10 |
xubuntu-07i | Yea thanks everyone! | 21:10 |
* Linus_ pats himself on the back for figuring out the password + keyfile trick, for /home | 21:12 | |
xubuntu07i | OK so I just used the default graphical installer. I don't have a /home partition but I can live with that :) | 23:07 |
xubuntu07i | It's encrypted, and hibernate works, so I'm good | 23:08 |
xubuntu07i | hey that rhymes (DoomBoom left the room) | 23:09 |
xubuntu07i | But I forgot the dotfiles when I backed up, and that includes ~/.minecraft! I lost all my saves. | 23:16 |
xangua | You don't have a/home partition? :-/ | 23:17 |
xangua | If you mean you installed all in a single partition, you'll find a separate partition is more useful for backup or reinstall | 23:18 |
xubuntu07i | I know, and for backup I usually do `cp -a` or `tar c` anyway, so it isn't necessary really unless I install another OS, which I don't plan on doing. | 23:21 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!