| lubot | David Groves was added by: David Groves | 04:23 |
|---|---|---|
| lubot | <David Groves> Hopefully someone can help me a bit here, I am dual booting Windows 10 and Lubuntu. Windows 10 runs great, fast and snappy with no issues at all, but Lubuntu is running terribly. Slow to boot, slow to open applications, sometimes refusal to open apps from my desktop but launching them from the program menu works fine... its a wei | 04:25 |
| lubot | rd mishmash of slow usability and refusal to do what I ask, but Windows works great. Could this be an OS issue or just my hardware? | 04:25 |
| lubot | <David Groves> I have pretty good specs on this laptop too, more than capable of running Lubuntu... | 04:26 |
| lubot | <The_LoudSpeaker> @David Groves [Hopefully someone can help me a bit here, I am dual booting Windows 10 and Lubun …], Which lubuntu version? | 04:55 |
| lubot | <The_LoudSpeaker> Also, did you check the iso? MD5 checksum are available on lubuntu.me | 05:00 |
| === neo is now known as Guest72302 | ||
| airwind | Hey, any initramfs-tools guys about? | 10:26 |
| airwind | Lubuntu uses Calamares to install from live to a HDD | 10:27 |
| airwind | Calamares has an option to encrypt the installation, and it is using the newer encryption method with /boot folder also encrypted | 10:28 |
| airwind | the old method was to leave an unencrypted /boot partition and only encrypt the rootfs | 10:28 |
| airwind | anyway | 10:28 |
| airwind | this method with encrypted /boot uses two keyslots on the LUKS partition - one is used by GRUB2 to initially decrypt the rootfs and copy initramfs to RAM | 10:29 |
| airwind | the second is used later on and it uses a keyfile to avoid making the user type in the decryption password twice | 10:29 |
| airwind | this keyfile normally resides in the encrypted rootfs as /crypto_keyfile.bin | 10:31 |
| airwind | so in order for the boot process to decrypt the rootfs it needs this keyfile | 10:31 |
| airwind | I did some research here and I found out that the process is still similar to that which Pavel Kogan described in his blog | 10:32 |
| airwind | what basically happens is that initramfs-tools has a hook that copies the file into the initrd image which is then loaded into memory by GRUB2 | 10:33 |
| airwind | The thing is that the /crypto_keyfile.bin is 600 or rw- --- --- | 10:33 |
| airwind | but the initrd image that contains the same secret file is 644 or rw- r-- r-- | 10:34 |
| airwind | which means that any user or script with read privileges can extract the secret key from an initrd image | 10:35 |
| airwind | $ unmkinitramfs /boot/initrd.img /tmp/somefolder | 10:36 |
| airwind | $ hexdump -C /tmp/somefolder/main/crypto_keyfile.bin | 10:37 |
| airwind | Any way initramfs-tools can be updated to produce new images with 600 permission flags instead of 644? | 10:38 |
| linux | testando conexão com o grupo | 10:51 |
| lubot | <aptghetto> Hi airwind thank you very much for your descriptions. Do you have the possibility to create a bug report on launchpad.net? | 11:10 |
| airwind | Not right now, sorry. | 11:13 |
| airwind | also, there's another potential bug in Calamares - when setting up encryption like this the system will use whatever keyboard layout has been set during the installer session, but once the system is installed and the GRUB2 password prompt up, the layout will be switched back to US. This might confuse some users why their passwords no longer work. | 11:16 |
| lubot | <aptghetto> I understand the problem and I will create a bug report on launchpad after work (in a few hours). | 11:17 |
| airwind | hehe, I'm in the same boat as you (work) :) | 11:17 |
| lubot | <aptghetto> For the second issue, there is already a bug report | 11:17 |
| airwind | oh, ok. | 11:17 |
| lubot | <aptghetto> It‘s #1827501 on launchpad.net | 11:19 |
| lubot | <aptghetto> FYI: @tsimonq2 @wxl @HMollerCl @kc2bez please read the comments above | 11:25 |
| kc2bez | ack | 11:25 |
| kc2bez | I fail to find a crypto_keyfile outside of / and it is set to 600 Perhaps I am looking in the wrong place. | 11:27 |
| airwind | I was using Lubuntu 19.04 Live to perform this test | 11:29 |
| kc2bez | So you see the file during the installation process? | 11:30 |
| kc2bez | That would be cleared on a reboot. | 11:30 |
| airwind | eh? | 11:30 |
| kc2bez | The live image is loaded in RAM | 11:30 |
| airwind | After a complete installation you reboot into the HDD installation, and the keyfile is present on / | 11:31 |
| kc2bez | correct | 11:31 |
| airwind | the permissions are 600 | 11:31 |
| kc2bez | yes | 11:31 |
| airwind | but the same keyfile is also present inside initrd image on /boot | 11:31 |
| airwind | and the permission of initrd image is 644 | 11:31 |
| airwind | meaning any user can extract the keyfile and read it | 11:32 |
| kc2bez | Ah, that was the part I was missing | 11:32 |
| kc2bez | Let me take a look | 11:32 |
| airwind | $ unmkinitramfs /boot/initrd.img /tmp/somefolder | 11:32 |
| airwind | $ hexdump -C /tmp/somefolder/main/crypto_keyfile.bin | 11:32 |
| kc2bez | airwind: $ unmkinitramfs /boot/initrd.img /tmp/somefolder results in a crypto_keyfile that is 600 | 12:11 |
| airwind | kc2bez: yeah, but the owner is user:user | 12:12 |
| airwind | not root:root | 12:12 |
| kc2bez | mine is root | 12:12 |
| airwind | hmm | 12:12 |
| airwind | did you run those commands as root or user? | 12:12 |
| kc2bez | root | 12:13 |
| airwind | try user then | 12:13 |
| kc2bez | will do | 12:13 |
| airwind | $ = user, # = root | 12:13 |
| kc2bez | understood | 12:14 |
| kc2bez | You are correct, I would encourage you to submit a bug report as aptghetto suggests. When you get a chance of course. | 12:19 |
| airwind | ok, I'll see, if my launchpad account is still active, haven't used it in a long while. | 12:21 |
| kc2bez | Thank you. | 12:21 |
| JohnGavr | Hello guys | 15:56 |
| JohnGavr | i am very new to lxqt DE and i want some advices | 15:56 |
| lubot | <The_LoudSpeaker> Sure. We are here to help. Ehat do you need advice about? | 15:57 |
| JohnGavr | First, in qterminal can i remove the tabs? | 15:57 |
| JohnGavr | I take a look on settings and i don't find something | 15:58 |
| lubot | <The_LoudSpeaker> You can resize them. So that they are small enough to hardly notice. | 15:59 |
| apt-ghetto | If I understand you correctly, then you can hide the tabs: View > second checkbox | 15:59 |
| JohnGavr | oh my god... i look only in Preferences | 16:00 |
| JohnGavr | Thanks apt-ghetto | 16:00 |
| JohnGavr | Second question, on Desktop Switcher, can i add more desktop?? | 16:02 |
| JohnGavr | Now i have 4 | 16:02 |
| lubot | <The_LoudSpeaker> You can. Search for openbox settings in menu. There is a section for desktops in it. | 16:09 |
| JohnGavr | lubot: you are right! Thank you | 16:12 |
| lubot | <The_LoudSpeaker> Lol! I am not lubot. Lubot is the postman between telegram and IRC. Telegram channel and IRC channel are bridged. | 16:15 |
| teward | yes you should ping @The_LoudSpeaker | 16:15 |
| === JohnGavr is now known as Guest62404 | ||
| JohnGavr_ | One more question, on desktop switcher, can i add photo in someway?? | 16:29 |
| lubot | <The_LoudSpeaker> Umm. No i guess. | 16:32 |
| JohnGavr_ | and the font change in openbox settings? | 16:33 |
| lubot | <David Groves> @The_LoudSpeaker [Also, did you check the iso? MD5 checksum are available on lubuntu.me], It is the most recent version of Lubuntu 19.04 and yes I checked the ISO | 17:10 |
| lubot | <The_LoudSpeaker> @JohnGavr_ [<JohnGavr_> and the font change in openbox settings?], Yep! You can use that. | 17:11 |
| lubot | <The_LoudSpeaker> @David Groves [It is the most recent version of Lubuntu 19.04 and yes I checked the ISO], Can you list the specs please? | 17:12 |
| tomreyn | airwind: intersting bug report (i just read it). FDE isn't easy and is basically impossible to achieve (unless you want to fully trust a (f)TPM) :-/ but i'd concur that the key ownership is an issue which could probably be overcome. | 17:18 |
| tomreyn | there's also this issue where grub only supports LUKS 1.0 but LUKS 2.0 provides remarkable improvements. | 17:20 |
| lubot | <The_LoudSpeaker> @David Groves [<reply to image>], The specs are sound. There should be no problem. But wait for sometime. Others might be able to help. wxl: @kc2bez @aptghetto @teward001 ? | 17:21 |
| lubot | <David Groves> Okay will do. Idk what it is, Windows runs great. I may just distro hop for a bit and find something that works well... | 17:21 |
| lubot | <The_LoudSpeaker> Maybe something with ryzen processor? | 17:37 |
| lubot | <teward001> @The_LoudSpeaker [The specs are sound. There should be no problem. But wait for sometime. Others m …], not sure I was pinged? | 17:54 |
| lubot | <teward001> what's the issue? | 17:54 |
| lubot | <The_LoudSpeaker> @David Groves [Hopefully someone can help me a bit here, I am dual booting Windows 10 and Lubun …], Here: @teward001 | 17:56 |
| lubot | <teward001> might be a Ryzen issue, but I avoid AMD processors like the plague right now so 😐 | 17:56 |
| lubot | <kc2bez> I am thinking more the AMD GPU. Mesa drivers can be an issue on the really new stuff. | 18:16 |
| lubot | <kc2bez> Totally a guess though. | 18:16 |
| lubot | <aptghetto> David install` htop `David install `htop` and monitor the ressources. … Ch` journalctl -xb -p warning` | 18:16 |
| lubot | <lynorian> @teward001 [might be a Ryzen issue, but I avoid AMD processors like the plague right now so …], they are not space heaters anymore at least | 18:20 |
| teward | :P | 18:25 |
| tomreyn | it's tough to follow the chat with the brigde. i don't understand which possibly AMD related issue is being discussed? | 18:47 |
| teward | i think the thing was too long to traverse the bridge | 18:50 |
| teward | > Hopefully someone can help me a bit here, I am dual booting Windows 10 and Lubuntu. Windows 10 runs great, fast and snappy with no issues at all, but Lubuntu is running terribly. Slow to boot, slow to open applications, sometimes refusal to open apps from my desktop but launching them from the program menu works fine... its a weird mishmash of slow usability and refusal to do what I ask, but Windows works great. Could this be an OS issue or just | 18:50 |
| teward | my hardware? | 18:50 |
| teward | this was their message tomreyn | 18:50 |
| lubot | <The_LoudSpeaker> @teward> [<teward> > Hopefully someone can help me a bit here, I am dual booting Windows 1 …], wxl: here ^ | 18:51 |
| lubot | <The_LoudSpeaker> @teward [<teward> this was their message tomreyn], Yup! | 18:51 |
| lubot | <aptghetto> On Telegram, you can download a text file with the specs | 18:51 |
| tomreyn | ah it actually arrived on IRC, i just didn't scroll up enough | 18:51 |
| tomreyn | thanks | 18:52 |
| lubot | <aptghetto> It is not an image, as it was written on IRC | 18:52 |
| tomreyn | So I guess @David Groves should post the output of journalctl -b | nc termbin.com 9999 | 18:54 |
| tomreyn | but then i could not tell whether David is still around ;) | 18:55 |
| lubot | <The_LoudSpeaker> @tomreyn [<tomreyn> So I guess @David Groves should post the output of journalctl -b | …], David ^ | 19:00 |
| wxl | David should give himself a username so we can actually @ him on IRC | 19:01 |
| lubot | <Mrdavidagroves> I have a username now lol. I'll try all that when I get home! | 19:29 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!