[00:25] <Boffey> All updated.  Now, I'm off to bed - it's after midnight. gn all.
[01:05] <conr> weird question, does anybody have trouble with asian languages while vnc'ing into a ubuntu desktop 20.04?
[01:06] <conr> typing
[01:13] <quadrathoch2> conr typing or displaying?
[01:13] <conr> typing, it wont build the characters on each other
[01:14] <conr> it will work directly on desktop
[01:16] <quadrathoch2> conr sorry, can't help you with that :/
[01:21] <conr> no prob. it was a long shot.
[01:32] <Maik> conr: i had a similar problem with Barrier but solved it by choosing the same keyboardlayout during the re-install of Ubuntu on one of my machines. Just changing the layout on a installed system didn't work properly and i still can't figure out why.
[01:32] <conr> re-install the OS or just the language input?
[01:35] <Maik> i re-installed the os. As i said, just changing the layout/input didn't work, at least not properly, a lot of characters just didn't seem to work.
[02:06] <TJ-> do we have a channel that deals with microk8s ?
[02:12] <jefferoonie> Hello..  I am running xubuntu 20.10..  I noticed after an update Ubuntu Software went away and the only thing available is "Snap Store".... Does that seem correct?
[02:21] <Epexo1999> Hello
[02:23] <Epexo1999> Idle rarely chatting i guess lol
[03:08] <Apachez> is it just me or does https://help.ubuntu.com/ timeout right now?
[03:08] <lotuspsychje> its just you
[03:09] <quadrathoch2> yup lotuspsychje
[03:37] <alazy> System won't boot, trying to rescue. First problem is I can't read most output because of 640x480 resolution. All instructions I find online require editing files and rebooting - is it possible within rescue mode?
[03:39] <quadrathoch2> possible what alazy?
[03:40] <alazy> increase the resolution
[03:41] <alazy> quadrathoch2: vbeinfo seems to list available resolutions, but how do I apply one of them while in grub rescue?
[03:47] <alazy> never mind. Rebooted and I got 1920x1080 resolution in grub. Dunno what went wrong. Still having to manually adjust grub by setting bios-hint = fd1 instead of hd1
[03:58] <nerdthatnoonelik> hi
[04:27] <john_rambo> I just downloaded Google Chrome (.deb) & installed it by doing #sudo dpkg -i filename.deb .... Will this automatically add an entry for Google Chrome in sources.list?
[04:29] <quadrathoch2> john_rambo yes
[04:29] <john_rambo> quadrathoch2, Thanks
[04:29] <quadrathoch2> you should be able to find the file in /etc/apt/sources.list.d/
[05:30] <samantha-> is there a way to install deluge 1.3x on 20.10?
[05:40] <Bashing-om> !info deluge groovy | samantha-
[05:41] <samantha-> yes. i'd like an old version.
[05:42] <samantha-> i'm trying to connect to a deluged on a debian box, and it's a 1.3.x installation. you can not mix and match a 1.3/2.0 daemon/client combination.
[05:44] <Bashing-om> samantha-: 'apt depends deluge' >> python3 - looks to be a system breaker to mess about with.
[05:45] <samantha-> ugh. debian testing doesn't have it, and i'm not putting sid on a public armhf box.
[05:50] <TJ-> samantha-: maybe find an older release that has the deluge version you need, and create an LXD container with that release and use deluge (client) within it?
[05:51] <TJ-> samantha-: e.g "lxc launch ubuntu:18.04 my_deluge1.3; lxc exec my_deluge1.3 deluge"
[09:47] <raecarruth> hello
[09:49] <lotuspsychje> welcome raecarruth
[09:49] <raecarruth> does anyone here use lltag?
[09:51] <lotuspsychje> raecarruth: ask your question to the channel please, so volunteers can think a long with you for a solution
[09:51] <raecarruth> i need a working cddb_server_name
[09:52] <raecarruth> freedb.org was shut down
[09:52] <raecarruth> and musicbrainz doesn't appear to work
[09:52] <raecarruth> for grabbing tags
[09:52] <tatertots> wow..that's a blast from the past throw back
[09:52] <raecarruth> indeed but it's worked so well for me
[09:53] <raecarruth> why change now :)
[09:55] <raecarruth> also, puddletag crashed when i tried to write the tags
[09:56] <raecarruth> and i don't trust easytag
[10:46] <Kokpit> Hello people, I'm using Ubuntu 18.04.5 LTS bionic and I want to see my DNS forward servers how should I find that? no BIND or any other DNS tools were installed (just as it comes from the box)
[10:46] <Kokpit> out of the box*
[10:49] <xtao> resolvectl status
[11:11] <Kokpit> ubuntu-user001@APC:~$ resolvectl status
[11:11] <Kokpit> resolvectl: command not foun
[11:13] <Maik> Kokpit: sudo?
[11:13] <Kokpit> Maik, not working... command not found
[11:13] <xtao> oh. maybe that's a thing from 20.04 then
[11:14] <xtao> cat /etc/resolv.conf ?
[11:14] <Kokpit> I have that
[11:14] <Kokpit> the cat /etc/resolv.conf
[11:15] <xtao> does it show your DNS servers in it? or one that says 127.0.0.53
[11:15] <Kokpit> one that says 127.0.0.53
[11:15] <Kokpit> a one*
[11:16] <xtao> ok. that's systemd-resolved then. which on 20.04 has a resolvectl command to show the status. not sure how you see in 18.04 then. hrm
[11:19] <Kokpit> xtao, thanks mate.. any others?
[11:21] <TJ-> Kokpit: systemd-resolve --status" I think
[11:24] <Kokpit> TJ-, oh works for me...
[11:25] <Kokpit> TJ-, so the"DNS SERVERS:" are the DNS forwarding servers?
[11:25] <TJ-> Kokpit: yeah, I checked in a container to be sure after suggesting it... couldn't recall when it siwtched from that to resolvectl
[11:25] <Kokpit> TJ-, I can't find a forward related word
[11:25] <TJ-> Kokpit: it could be per-link or it might be global
[11:26] <TJ-> Kokpit: I assume you want to know which upstream resolvers systemd-resolved is using?
[11:27] <TJ-> Kokpit: you'll likely need to check the link in use to see, it'll show all the alternates, and the currently used
[11:28] <Kokpit> I assume you want to know which upstream resolvers systemd-resolved is using?: yes
[11:28] <Kokpit> which link mate?
[11:31] <xtao> it lists each network interface like wifi, ethernet ports, or VPNs. just find whichever one you're connected by and it should list the DNS servers in that section, or it'll be under the global section if it applies to all interfaces
[12:02] <motz> hi, I have huge problems with dns. I always get the nxdomain thing. I'd like to purge the whole dns-server and reinstall it again. COuld someone help me?
[12:17] <TJ-> motz: you'd better give more details. what release/flavour is it? desktop or server? anything special in DNS settings/config you're doing?
[12:18] <motz> TJ: 18.04 LTS
[12:18] <motz> TJ-, 18.04 LTS
[12:19] <motz> TJ-, 18.04 LTS, desktop, I have expressvpn
[12:20] <TJ-> motz: I have no idea what expressvpn is, but assuming it is some external VPN provider, and you've added some config for it, I'd strongly suggest investigating that first
[12:20] <motz> TJ-, I'm not able to investigate. I just want to purge everything about dns and reinstall
[12:22] <TJ-> motz: you don't "purge everything about dns" ! -- you fix the thing that is creating a bad configuration. check what the current configuration is with "resolvectl status" and for each link check if and what DNS servers are set.
[12:23] <TJ-> motz: config is done per-interface as they are brought up and taken down
[12:24] <tomreyn> there's no resolvectl on 18.04, but there is    systemd-resolve --status
[12:25] <TJ-> aha I just said that earlier; misread as 20.04 :)
[12:25] <TJ-> too busy on my own work
[12:26] <tomreyn> :) don't get side tracked too much.
[12:26] <TJ-> motz: sorry, as tomreyn  said, "systemd-resolve --status" on 18.04
[12:26] <TJ-> tomreyn: pfft - trying to install a pure IPv6 only k8s across aarch64 and amd64 cluster
[12:27] <tomreyn> uh. "have fun?"
[12:27]  * TJ- nods
[12:28] <MrCollins> oh man
[12:29] <MrCollins> I dont envy your work TJ-
[12:34] <Hamidreza> Hi guys, I would appreciate if you could help me: https://github.com/ceph/ceph-iscsi/issues/224
[12:38] <MrCollins> brb testing irc script.
[12:43] <tomreyn> Hamidreza: personally, i won't be able to help for lack of ceph-iscsi experience. but i can provide a suggestion, to make it mor elikely for you to get support: make it as easy as possible for those you're hoping to assist you to review the problem. these logs are unreadable in the current formatting.
[12:45] <Hamidreza> tomreyn, Thanks for your point
[12:46] <motz> TJ-, tomreyn TJ-, this is interesting: the output of the systemd-resolve --status in wireless mode is slightely different from the other one: https://pastebin.ubuntu.com/p/yWN3XkHqCT/
[12:48] <TJ-> motz: as I thought; expressvon appears to have set a global DNS server 10.139.0.1
[12:48] <TJ-> motz: give us an example of a hostname that returns NXDOMAIN
[12:55] <OnkelBlade> Hi all. On Kbuntu 20.04 there is not python, only python3
[12:55] <OnkelBlade> How can I get it automatically? I don't want to play with alternatives
[12:55] <OnkelBlade> Let it point to python3 - I don't care really
[12:56] <OnkelBlade> there is no*
[12:57] <EriC^^> OnkelBlade: sudo ln -s /usr/bin/python3 /usr/bin/python
[12:57] <OnkelBlade> hehe
[12:57] <OnkelBlade> that's a hack!
[12:57] <EriC^^> you said, "let it point to python3, idc"
[12:58] <EriC^^> OnkelBlade: try sudo apt-get install python i guess, something is wrong if you dont have /usr/bin/python, for sure they didnt remove it
[12:58] <EriC^^> probably on the newer systems with just python3 there's some symlink pointing to python3
[12:59] <EriC^^> OnkelBlade: try "dpkg -S /usr/bin/python"
[13:00] <OnkelBlade> EriC^^: lol, it turns out there is a package for it, just like I wanted. Guess its name!
[13:00] <OnkelBlade> sudo apt-get install python-is-python3
[13:00] <EriC^^> !info python-is-python3
[13:00] <OnkelBlade> Yeah, exactly. I love it
[13:01] <EriC^^> OnkelBlade: great
[13:01] <EriC^^> still cant believe they dont have /usr/bin/python by default, it would break so many stuff xD
[13:01] <EriC^^> anyways good find
[13:18] <motz> TJ- almost every hostname except for google, youtube and facebook
[13:18] <motz> TJ-, for example repubblica.it
[13:19] <motz> TJ-, almost every hostname except for google, youtube and facebook
[13:22] <TJ-> motz: OK, now try that directly against the expressvpn DNS server, with "dig repubblica.it @10.139.0.1" --- in theory that'll report the same result, which indicates it is the cause. THEN, try it with one of the other link-specific  DNS servers: e.g: "dig republica.it @2a02:2457:20c:101::126"
[13:23] <motz> TJ-, I'm wired connected now. Is it ok?
[13:33] <BluesKaj> Hi all
[13:37] <aldcor> hi! I installed rofi. Added shortcut key to mate. Command looks like this rofi -dmenu but there are no programs listed whatever I type.
[13:39] <tomreyn> aldcor: there's #ubuntu-mate for mate specific questions, in case you can't get answers here.
[13:42] <aldcor> ok thanks tomreyn
[13:45] <motz> TJ-, sorry , I was away
[13:46] <motz> TJ-, you were saying?
[13:46] <motz> TJ-, I'm wired connected now. Is it ok?
[13:46] <motz> TJ-, dig repubblica.it @10.139.0.1 -  - ; <<>> DiG 9.11.3-1ubuntu1.13-Ubuntu <<>> repubblica.it @10.139.0.1 - ;; global options: +cmd - ;; connection timed out; no servers could be reached
[13:48] <motz> TJ-, dig republica.it @2a02:2457:20c:101::126 -  - ; <<>> DiG 9.11.3-1ubuntu1.13-Ubuntu <<>> republica.it @2a02:2457:20c:101::126 - ;; global options: +cmd - ;; Got answer: - ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8482 - ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 -  - ;; OPT PSEUDOSECTION: - ; EDNS: version: 0, flags:; udp: 4096 - ;; QUESTION SECTION: - ;republica.it.			IN	A -  - ;; ANSWER SECTION:
[13:48] <motz> - republica.it.		14400	IN	A	37.9.228.228 -  - ;; Query time: 211 msec - ;; SERVER: 2a02:2457:20c:101::126#53(2a02:2457:20c:101::126) - ;; WHEN: Sun Nov 22 14:47:35 CET 2020 - ;; MSG SIZE  rcvd: 57
[13:48] <motz> TJ-, what does this mean? It works with ipv6 but not with ipv4
[13:48] <MonkeyDust> !paste | motz
[13:48] <motz> ok
[13:51] <motz> TJ-, what's the solution then?
[13:52] <aldcor> interesting. When I used recommended nvidia driver my laptop was much louder. When I used noveau it's silent or `normal` sounding.
[13:56] <motz> TJ-, are you still there?
[13:57] <Maik> motz: appearantly not at the moment
[14:01] <motz> TJ-, sorry, I disconncted
[14:01] <motz> TJ-, you were saying?
[14:36] <lotuspsychje> MonkeyDust: o/
[14:40] <MonkeyDust> hi lotuspsychje \o
[15:09] <Simplar> When recording Ubuntu *.iso on a flash drive, which cluster size should I choose?
[15:12] <compdoc> youre trying to create a bootable flash drive?
[15:13] <Simplar> compdoc: yes
[15:13] <Simplar> I want to be aware of the best cluster size
[15:13] <compdoc> Ive never seen that option
[15:13] <EriC^^> Simplar: how are you creating it and what os?
[15:13] <compdoc> how are you writing the iso to the drive?
[15:13] <Simplar> Through Rufus, Windows 10 x64
[15:14] <compdoc> I use imageUSB from passmark. works great
[15:14] <Maik> https://ubuntu.com/tutorials/create-a-usb-stick-on-windows#1-overview
[15:14] <EriC^^> i dont think it really matters much, what will you be using the live usb for? just to install?
[15:15] <Simplar> Just to install. But the larger cluster size would allow for less read-write operations and prolong life of flash drive
[15:21] <jayjo> I've been researching for a few weeks into how to make an ubuntu installer with custom packages available, with a completely offline installation. Does anyone have experience with this? Would I be better served customizing the iso (with schroot, etc) or to keep a repository with my necessary deb's on a usb stick?
[15:27] <Fractalis> is there an argument for flatpaks being better than package installations for apps?
[15:27] <TJ-> Simplar: there is no such thing as 'cluster size' in that respect. Cluster's are an abstraction of FAT file systems. Writing ISO9660 hybrid bootable images is just a case of copying from start of file to end
[15:28] <TJ-> jayjo: latter would be quicker and easier if it is build as a real debian archive layout, since you'd only have to add an entry to the installer's apt sources.list to use it
[15:29] <lotuspsychje> Fractalis: come join #ubuntu-discuss for that
[15:30] <Fractalis> lotuspsychje: sure, thank you for the reply
[15:34] <thelounge40> I can't connect my Xbox controller by bluetooth on 20.10. Have I install some particular driver?
[15:35] <MrCollins> thelounge40, I would suggest posting any error messages you get? Try to find where the log entries are for the joystick or controller
[15:35] <MrCollins> I am not an expert but I have been in here enough to know I think that is where you would start.
[15:41] <jayjo> TJ-: could that location on a usb stick partition then be referenced from a d-i preseed or the new cloud-init config files?
[15:42] <TJ-> jayjo: not sure about cloud-config but certainly from d-i you can add repositories
[15:43] <MrCollins> I added a hard drive and found it by doing 'ls /dev/sd*' it is /dev/sdb
[15:43] <thelounge40> thelounge40 https://www.reddit.com/r/Ubuntu/comments/g884xe/2004_xbox_one_controller_no_longer_works_over/ solved
[15:43] <MrCollins> I have yet to add any partition to it etc. I want this drive to be a storage drive for several samba clients
[15:44] <TJ-> MrCollins: other ways are "ls -l /sys/block/" and "lsblk"
[15:44] <MrCollins> should I make this part of a volume group or as a physical volume?
[15:44] <MrCollins> TJ-,  ok
[15:45] <MrCollins> thank you
[15:45] <MrCollins> thelounge40, did that page fix you?
[15:45] <TJ-> MrCollins: for LVM, if you want it as part of an existing volume group, you'd first do "pvcreate /dev/sdX" then "vgextend MY_VG /dev/sdX"
[15:46] <TJ-> MrCollins: if you want a new VG, then "vgcreate MY_NEW_VG /dev/sdX"
[15:47] <MrCollins> TJ-, which would be a better choice in your opinion if several samba (win64) clients are going to connect and have their own shares?
[15:47] <MrCollins> to this particular drive*
[15:47] <MrCollins> thank you for your help.
[15:47] <jayjo> is there a way to get the official iso installers from the archive? Or do you need to reference releases.ubuntu.com or ubuntu.com/download? I keep landing on "try the new installer pages": http://archive.ubuntu.com/ubuntu/dists/devel/main/installer-amd64/current/legacy-images/
[15:49] <TJ-> MrCollins: it depends how isolated you want it - if you want the new device to be the only device where they store data then create a new VG for it
[15:50] <MrCollins> VG got it. Thank you. Yes I want it isolated.
[15:50] <TJ-> MrCollins: otherwise, when you create LVs in a VG that is spread across several drives, you've got to specify to lvcreate which PV to place the LV on
[15:50]  * MrCollins nods with thanks
[15:50] <MrCollins> thank you.
[15:52] <thelounge40> thelounge40 yes I've solved the problem.
[15:52] <MrCollins> awesome. Sorry I wasnt much help.
[15:53] <thelounge40> editing sysfs.cond and disabling ertm from bluetooth module.
[16:02] <KOLANICH> Hi everybody
[16:03] <KOLANICH> Is lac of support of https for official apt repos of Ubuntu should be considered to be a backdoor?
[16:03] <KOLANICH> *lack
[16:04] <MrCollins> Is Cockpit a useful utility? Does anyone in here use it and find it helpful?
[16:04] <lotuspsychje> !discuss | MrCollins
[16:04] <MrCollins> Ill ask this in ubuntu discuss
[16:04] <MrCollins> thank you sorry
[16:08] <quadrathoch2> KOLANICH nope
[16:09] <KOLANICH> quadrathoch2: why nope, there already we vulnrs in apt, which could have been mitigated by using TLS for a repo
[16:10] <jayjo> what's the difference between the archives and the releases.ubuntu.com and ubunt.com/download pages?
[16:11] <quadrathoch2> KOLANICH if you really want to, why not switch to a mirror which supports https?
[16:12] <KOLANICH> quadrathoch2: security.ubuntu.com has no TLS, neither does ppa.launchpad.net
[16:13] <quadrathoch2> idk about launchpad, but as I said, just switch to a mirror with tls support (http://mirrors.ubuntu.com/mirrors.txt a list for example)
[16:14] <KOLANICH> quadrathoch2: I have already (in 2015 in fact) switched the ones that can be switched.
[16:14] <KOLANICH> quadrathoch2: but not all can be switched
[16:15] <quadrathoch2> so why is it that the security repo is not switchable?
[16:16] <KOLANICH> quadrathoch2: not only security, but also launchpad and the official repo. It looks like a corporate policy "there will be no TLSed official repos"
[16:16] <TJ-> the usual excuse from Canonical has been 'server load' and 'its complex'
[16:17] <KOLANICH> and this is very suspicious in 2020, especially after the vulnrs that could have been mitigated with tls
[16:17] <KOLANICH> TJ-: it is the usual excuse of everyone not using TLS
[16:18] <quadrathoch2> KOLANICH i don't get you, you are telling me that there are no mirrors with tls support, but there are literally mirrors on the official mirrors list on ubuntu.com with tls
[16:18] <TJ-> KOLANICH: the argument is that due to list/package signing HTTPS isn't vital
[16:18] <quadrathoch2> plus, it's not cachable
[16:18] <TJ-> KOLANICH: we've had this argument with Canonical for years
[16:19] <KOLANICH> quadrathoch2: security. is without TLS, so are launchpad repos. mirrors.kernel.org has TLS, but it is a mirror, not a sourse, and it lags by 6 hours
[16:19] <quadrathoch2> on top of that, if people are really so infuriated with canonical why not just switch distributions?
[16:20] <quadrathoch2> nobody is forcing you to use ubuntu
[16:20] <quadrathoch2> (except jobs)
[16:21] <KOLANICH> TJ-: there were vulnrs in APT that have showed that with such a piece of ... code, as apt, they are vital
[16:22] <quadrathoch2> KOLANICH so? i mean every piece of software has security issues at some point (except hello world programs)
[16:22] <TJ-> KOLANICH: no point telling me!
[16:26] <KOLANICH> quadrathoch2: The usual rhethorics. Don't like google spying on GMail? Don't use gmail! Don't like chinese phones spying? Don't use phones at all. Don't like UK laws? Don't live in UK! No state wants you alive on its territory after you have left UK? Just don't live! Nice position.
[16:28] <KOLANICH> quadrathoch2: defence in depth is a necessity in current world. that's why we need mitigations. All software is likely to be vulnerable, but some software is especially.
[16:28] <quadrathoch2> KOLANICH welp, it's your choice, i'm moving on
[16:34] <chull_> If I copy a directory from my old Ubuntu 18.04 drive to my new Ubuntu 20.04 drive, will it move all the subdirectories and files?
[16:34] <quadrathoch2> chull_ yes
[16:57] <jpds> KOLANICH: How on earth could it possibly be a backdoor?
[16:58] <jpds> Given every single package is signed
[17:02] <jayjo> sorry to ask again, can't seem to find modern installers on the archive. Are they available? I keep finding splash pages http://archive.ubuntu.com/ubuntu/dists/devel/main/installer-amd64/current/legacy-images/
[17:02] <quadrathoch2> which modern installers? jayjo
[17:03] <quadrathoch2> i mean the live server installer is linked on the page you linked
[17:03] <jayjo> you mean linked at https://ubuntu.com/download/server?
[17:03] <jayjo> so not available on the archive?
[17:03] <quadrathoch2> it is, you need to choose option 3
[17:05] <jayjo> that link (option 3) seems to direct to https://releases.ubuntu.com/20.04.1/ubuntu-20.04.1-live-server-amd64.iso
[17:07] <KOLANICH> jpds: Please, read the discussion. there was a vulnr in apt allowing to install any package of mitmer choice. it could have been mitigated with TLS. Knowing the quality of code of apt, and quality of its arcuitecture, it is obvious that it still contains remotely exploitable vulnrs. We just don't know them. So refusal to apply mitigations may be a kinda "intelligence operation", where the persons in power to make decisions intentionally make deciâ
[17:07] <KOLANICH> …sions which profit specific parties. When such persons are government officials and the fact of being an agent is discovered, they usually get long jail terms. When such persons work in large businesses, and cooperate with "domestic" intelligence agencies, like GCHQ in order to allow them to hack anyone using the products of the company, these people usually don't get jail terms.
[17:07] <quadrathoch2> yeah, sorry, jayjo. misunderstood you
[17:08] <jpds> KOLANICH: It doesn't matter if there would be a vulnerability in APT, everything is still signed by GPG
[17:09] <ioria> jayjo, are you looking for  the 20.04.1 legacy server installer ?
[17:09] <KOLANICH> jpds: the vulnr was that signature verification was bypassed since inband-signalling was used in apt and the remote party was able to insert the signal "the sig is ok"
[17:10] <jpds> KOLANICH: Have a link for the source for that?
[17:11] <KOLANICH> jpds: it would take some time to search
[17:11] <ioria> jayjo, http://cdimage.ubuntu.com/ubuntu-legacy-server/releases/20.04.1/release/
[17:12] <jpds> KOLANICH: Anyhow, if you want APT + HTTPS - I suggest you just run your own mirror
[17:13] <KOLANICH> jpds: https://security-tracker.debian.org/tracker/CVE-2019-3462
[17:17] <KOLANICH> some also vulnrs that could have been mitigated with tls: CVE-2014-6273 CVE-2014-0487
[17:20] <jpds> KOLANICH: Not really, a malicious mirror serving the invalid content at you over TLS would have exploited the same thing
[17:21] <jayjo> ioria: thanks, is cdimage.ubuntu.com the upstream for releases.ubuntu.com?
[17:22] <KOLANICH> jpds: a malicious mirror, but not any AS in the route
[17:23] <TJ-> KOLANICH: the best place to argue for HTTPS is in #ubuntu-hardened and #canonical-sysadmin
[17:25] <KOLANICH> TJ-: thank you, I will go there too, but I don't expect that they will react at my message at all. At least they are employees, and employees must do the things that their boss has ordered them to do.
[17:25] <KOLANICH> jpds: running an own mirror is not an option for the most users. And everyone knows it, including Ubuntu decision-makers. The vulnrs mentioned are also public knowledge. The lack of TLS means that security is not the goal of Ubuntu project. It is extremily strange.
[17:26] <jpds> I suspect they'll tell you to do as I did: run your own mirror if it's that important to you
[17:26] <jpds> KOLANICH: The Ubuntu decision makes also know that having hundreds of thousands of users on the mirrors at a time doesn't scale with TLS
[17:29] <KOLANICH> jpds: these is what mirrors are for. But security.ubuntu.com has no mirrors, and given that it is with9ut tls, it itself becomes a source of insecurity
[17:29] <jpds> KOLANICH: security.u.c does have mirrors
[17:30] <lotuspsychje> !discuss
[17:30] <jpds> KOLANICH: It's exactly the same archive as the rest of the archive
[17:30] <lotuspsychje> lets keep the channel free for ubuntu issues please
[17:31] <lotuspsychje> or as TJ- adviced in -hardened and -sysadmin
[17:33] <quadrathoch2> jpds i stopped arguing, after he doesn't understand that there are no exceptions on what is mirrored
[17:36] <jpds> KOLANICH: Here you go, a mirror with HTTPS: https://mirror.bytemark.co.uk/ubuntu/dists/ - all the -security directories are what security.u.c has
[17:38] <KOLANICH> jpds: thanks, will look at it.
[17:56] <KOLANICH> BTW, does Ubuntu have anything like https://mirror-master.debian.org/status/mirror-status.html
[17:56] <KOLANICH> ?
[18:02] <tomreyn> KOLANICH: have you tried a web search, yet?
[18:03] <KOLANICH> tomreyn: all that I have found is mirrors.ubuntu.com Though DDG is shit, and google + bing have banned me.
[18:03] <jpds> KOLANICH: https://launchpad.net/ubuntu/+archivemirrors
[18:03] <KOLANICH> jpds: thanks, will look into it
[18:06] <Maik> "google + bing have banned me." lol, yeah right... search engines don't ban you
[18:07] <KOLANICH> jpds: thanks, that what is needed. Maik: yes, it's me who bans their JS-based malware ;)
[18:08] <Maik> alrighty then :)
[18:14] <pavlos> KOLANICH: there is a mirmon package (sudo apt install mirmon) but you need to do some configuration to get the webpage status (http://localhost/mirmon)
[18:20] <MonkeyDust> why the fuzz about mirrors?
[18:21] <shogo2040> exit
[18:41] <jayjo> is cdimage.ubuntu.com considered upstream to releases.ubuntu.com? Where does that releases.ubuntu.com come from? I do see that they both have their specific Teams
[19:03] <tomreyn> jayjo: releases hosts release ISOs (and auxiliary files) for official releases for supported platforms, cdimage hosts alternative release formats and and platform targets,
[19:06] <jayjo> tomreyn: so is my assumption backwards: release -> cdimage? Or are they more independent than that
[19:07] <tomreyn> neihter is upstream for the other.
[19:08] <tomreyn> https://askubuntu.com/questions/458480/why-do-cdimage-ubuntu-com-and-releases-ubuntu-com-list-different-images
[19:18] <cads> hey all, I'm in WSL ubuntu 20.04. I am trying to install ppa:hvr/ghc
[19:18] <cads> . I can install the ppa, but when I do apt-cache policy ghc, I only find the standard version
[19:25] <Makerblaker> anyone having issues downloading from http://ca.archive.ubuntu.com/ubuntu today? This seems to be very slow
[19:29] <krytarik> cads: Did you do "sudo apt update" afterwards?
[19:29] <lotuspsychje> Makerblaker: there is #ubuntu-mirrors for issues about the repos, but they mostly operate during office hours
[19:31] <Makerblaker> Things are coming down now. Just very slow. Checked my internet and everything is good. Thanks lotuspsychje
[19:31] <quadrathoch2> cads did you apt update?
[19:31] <quadrathoch2> ahh krytarik was faster
[19:53] <sn00p> Hello, I am  having a problem in ubunti in hexchat not able to connect to my bounce, i never had this problem before debian, gentoo, and all the others connect fine, any reason why it wouldn't connecct?
[19:54] <quadrathoch2> sn00p well it should give you an error
[19:54] <sn00p> it just says unknown host
[19:55] <quadrathoch2> sn00p so now you know the issue (or should know where to look for the problem)
[19:55] <cads> quadrathoch2, krytarik, yup, but of course
[19:55] <quadrathoch2> sounds like dns
[19:55] <quadrathoch2> cads working now?
[19:55] <cads> no
[19:56] <cads> that's why I'm here ;)
[19:56] <sn00p> quadrathoch2, everything else is working fine
[19:56] <sn00p> i can ssh into my server
[19:56] <quadrathoch2> maybe you should ask in the specific wsl channel
[19:56] <quadrathoch2> !wsl
[19:56] <quadrathoch2> sn00p firewall?
[19:56] <sn00p> no firewall
[19:56] <sn00p> it worked in gentoo debian and all t he others
[19:57] <sn00p> i'm using  ubuntu fine on this network
[19:57] <cads> sorry, didn't know! Any way you could drop that in the topic? I'm cringing just thinking about it, lol
[19:57] <quadrathoch2> cads i'm not a mod, so nope can't put it into the topic :/
[19:57] <quadrathoch2> sn00p what happens when you telnet the server at the specific port?
[19:57] <chown> Hello. Ubuntu 18.04. I am trying to figure out how to get the 'heal transparency' plugin in gimp 2.8. Any ideas?
[19:57] <sn00p> quadrathoch2, it connects
[19:58] <quadrathoch2> hexchat through apt? sn00p
[19:59] <sn00p> ryes
[19:59] <sn00p> yes
[20:01] <quadrathoch2> hm, sorry, then I'm out of ideas :/
[20:03] <TJ-> sn00p: maybe an IPv6 vs IPv4 issue? trying to connect over IPv6 maybe but no path?
[20:03] <sn00p> no, it worked in all other linux
[20:06] <TJ-> sn00p: have you checked which address family hexchat is trying to use?
[20:06] <sn00p> its just the ip and port number ip/port number
[20:07] <TJ-> sn00p: "unknown host" suggests it si (trying to ) use a hostname not an IP address
[20:39] <chown> Hello guys
[20:40] <chown> I am trying to clean my system and make space on /
[20:40] <chown> because of this  /dev/sda2        25G   24G  687M  98% /
[20:40] <chown> dpkg-query -Wf '${Installed-Size}\t${Package}\n' | sort -n|nc termbin.com 9999
[20:40] <chown> https://termbin.com/eu0h here is the result of this
[20:40] <TJ-> chown: "sudo du -xhd 2 / | sort -h"
[20:41] <chown> How can I safely remove all the old kernel/header/module packages (I know how to remove the largest packages like redeclipse and games and texlive)
[20:41] <TJ-> chown: ^^^ this will list the directories using most space, with largest last
[20:41] <chown> I can do that with ncdu as well, which is nicer
[20:41] <chown> Could you tell me how to do what I seekt to do?
[20:42] <chown> A lot of space is taken by packages like linux-image-5.4.0-54-generic from 42 to 54
[20:42] <chown> Headers, modules, etc. etc.
[20:42] <chown> I would like to remove all the packags except the ones needed by ubuntu 18.04
[20:42] <chown> That should save some space, I think
[20:43] <TJ-> chown: there should only be 3 kernel/header package versions retained; that is set at /etc/apt/apt.conf.d/01autoremove-kernels
[20:43] <chown> https://termbin.com/m0k0
[20:43] <TJ-> chown: "sudo apt autoremove" ought to remove those
[20:44] <chown> It doesn't say it wants to remove anything
[20:44] <chown> Thers is a never autoremove list
[20:45] <chown> Hmm
[20:45] <TJ-> chown: hmm indeed
[20:46] <chown> I can use sudo synaptic and sort by size
[20:46] <chown> That also helps, easy to remove larger packages I dont' need
[20:48] <TJ-> chown: the kernels that are still installed - are those versions listed in that 01autoremove-kernels file?
[20:48] <TJ-> chown: if so, I suspect the /etc/kernel/postinst.d/apt-auto-removal script isn't running correctly to update that list after new kernels get installed OR you've got the config option set to never remove kernels
[20:49] <tomreyn> chown: what's the output of     dpkg -l linux-generic-hwe-18.04 | nc termbin.com 9999
[20:49] <chown> sec
[20:49] <chown> https://termbin.com/wab5o
[20:49] <chown> tomreyn:
[20:49] <tomreyn> hmm, okay, it was worth a try.
[20:50] <chown> TJ-: I did not set any option to do that.
[20:50] <chown> How can I list intalled kernel packages
[20:50] <TJ-> chown: "apt list --installed 'linux-image*'
[20:52] <chown> 21 packages to remove in synaptic (games and stuff) 1739mb will be freed
[20:56] <chown> couldn't get windows stuff to run in linux so removing mono* and blender and inkscape etc. etc.
[20:57] <chown> made 2gb so far
[20:57] <chown> after which autoremove should remove some more
[20:58] <chown> another 807mb freed by autoremove
[20:58] <chown> I was shortsighted when I made this / partition
[20:58] <chown> What do you guys make your / partition to be? I did 20gb
[20:58] <chown> Apparently not enough. Maybe 40? but I dont 'want the space to sit idly by and not be used
[20:58] <chown> So 30? I don't know.
[20:59] <TJ-> chown: I use LVM, and rootfs is 12G, /var 12G, /home 20G
[20:59] <chown> What is lvm?
[20:59] <TJ-> !lvm | chown
[20:59] <chown> I have a 120gb ssd with 40gb for windows, too low, so may reformat. 20gb for / and rest for /home
[20:59] <chown> Ok
[21:00] <TJ-> chown: Logical Volume Management; allows you to create volumes much more flexibly and at will
[21:00] <chown> hey great success /dev/sda2        25G   20G  4.3G  83% /
[21:00] <chown> whew!
[21:00] <chown> and home is /dev/sda3        56G   50G  6.6G  89% /home
[21:00] <chown> I will check out this lvm
[21:01] <chown> linux-image-5.4.0-53-generic, linux-image-5.4.0-54-generic, and linux-image-generic-hwe-18.04
[21:02] <chown> These three packages are installed when I run the command from TJ-
[21:02] <chown> I guess I don't need 53?
[21:02] <TJ-> chown: that seems correct then
[21:02] <quadrathoch2> sounds good, 1 for backup, and the last package is a virtual one, so maybe a few kbs
[21:02] <chown> oh ok
[21:02] <TJ-> chown: the last 2 are kept in case of problems
[21:02] <quadrathoch2> i would keep it for backup, if something happens
[21:02] <chown> 53 kernel is backup?
[21:02] <chown> I gotcha
[21:02] <chown> Ok thanks
[21:03] <chown> I was trying to get the gimp plugins to work, but I discovered I insalled a python 3 alternative in update-alternatives so all the scripts were failing.
[21:03] <chown> Last time I installed plugins in manually  in .gimp but now I see packages ubutnu org says heal-selection.py is in plugin registry package
[21:03] <chown> BRB
[21:04] <chown> Also, how can I remove all the flatpak and all the other stuff that runs in a app container, what's it called?
[21:04] <chown> snap
[21:05] <chown> I would like to remove all the snap and flatpak stuff from my system. Any idea how?
[21:05] <chown> Can it all be done in one go, or do I have to use snap uninstal this and that and then flatpak uninstall this and that manually
[21:06] <quadrathoch2> afair, you should be able to remove it in one go, but not 100% sure
[21:07] <chown> If you know how to, that'd be wonderful
[21:07] <chown> guess it's manually i think
[21:08] <jpds> chown: https://www.kevin-custer.com/blog/disabling-snaps-in-ubuntu-20-04/
[21:10] <chown> yeah I did it manually
[21:10] <chown> There wasn't a way to remove all in one shot
[21:10] <chown> now the snap loopbacks are gone too, great
[21:11] <chown> and now 77% free on /
[21:11] <quadrathoch2> chown imho, it should have been possible to just sudo apt purge snapd
[21:11] <quadrathoch2> but idk
[21:12] <chown> you can do that, but it leaves behind some stuff I think.
[21:12] <chown> I could be wrong
[21:12] <jpds> chown: If you want to totally remove it; just use Debian
[21:12] <chown> I used to
[21:14] <chown> from 2000 to 1016
[21:15] <chown> Then I switched to Ubuntu LTS because it was already setup for me.
[21:15] <chown> Plus stable is old, testing sometimes breaks, and sid is too tedious to keep up with
[21:15] <chown> Though, this whole upgrade/reinstall ubuntu every few years because of LTS upgrade
[21:16] <chown> That's killing me since 2016, man. OOF
[21:16] <chown> I'm seriously considering switch to some more 'stable~ish' rolling-release.
[21:16] <chown> But that's neither here nor there.
[21:16] <jpds> It's life, if you're not happy with that: use Gentoo
[21:16] <tomreyn> this is rapidly turning into !chat now. unkless you have an ubuntu support question?
[21:17] <tomreyn> there's also ##linux for discussing the various distros
[21:17] <chown> Awesome
[21:17] <chown> Ty
[21:52] <lucenera> Hi, I’ve a laptop with Atheros QCA9377 wi-fi card. I have speed issues on Ubuntu 20.10. I have a 1 Gb/s FTTH line and Asus ROG Rapture AX-11000 router. Both the line and the router are perfect with all the other devices in the house. The same laptop with Windows 10 has no problems (the card is slow, but I still reach 400 Mb/s in download). With
[21:52] <lucenera> Ubuntu, I don't exceed 30 Mb/s.
[21:53] <jeremy31> lucenera: post URL from terminal for>  iwconfig | nc termbin.com 9999
[21:53] <FreeBDSM> hello, how to install a package from a local deb file yet tell it to install deps from the apt?
[21:54] <Maik> FreeBDSM: just use gdebi...?
[21:55] <lucenera> jeremy31 https://termbin.com/xtov
[21:56] <jeremy31> lucenera: The wifi power management is enabled, run this command in terminal, it will disconnect you for a few seconds>  sudo sed -i 's/wifi.powersave = 3/wifi.powersave = 2/' /etc/NetworkManager/conf.d/default-wifi-powersave-on.conf && systemctl restart network-manager.service
[21:57] <MrCollins> I was looking at his link quality 37/70
[21:58] <quadrathoch2> FreeBDSM sudo apt install ./*deb
[21:58] <FreeBDSM> Maik: thanks, that worked
[21:58] <jeremy31> MrCollins: Slightly over 50% signal on RX, I can't fix that
[21:58] <FreeBDSM> Maik: is it more preferred than apt?
[21:59] <Maik> FreeBDSM: Sofware center does the same if you use main Ubuntu by the way.
[21:59] <FreeBDSM> Maik: I don't use software center
[21:59] <Maik> there's no prefered way, just what you are used too :)
[22:01] <lucenera> jeremy31 https://www.speedtest.net/result/10465221411.png
[22:02] <lucenera> Nothing seems to have changed after switching to 2.
[22:03] <jeremy31> lucenera: also in terminal>  sudo iwconfig wlp4s0 power off
[22:04] <lucenera> What exactly does it do? Meanwhile, I did.
[22:04] <jeremy31> It should disable power management for wifi even if the other command didn't work
[22:05] <jeremy31> lucenera: Check wifi router encryption settings, do not use WEP or TKIP
[22:05] <lucenera> WPA2
[22:05] <lucenera> WPA3 not supported from my laptop.
[22:05] <jeremy31> lucenera: AES/CCMP?
[22:06] <lucenera> AES
[22:06] <lucenera> https://askubuntu.com/questions/1239188/slow-wifi-atheros-qca9377-speed-on-ubuntu-20-04-lts
[22:07] <lucenera> I found many similar posts.
[22:07] <lucenera> Only solution: change the network card.
[22:08] <jeremy31> lucenera: ignore that question.  See https://askubuntu.com/a/425180/300665 and give me a link to the script results
[22:09] <lucenera> jeremy31 https://www.speedtest.net/my-result/i/4265681523 same ftth on iPad.
[22:11] <lucenera> jeremy31 https://termbin.com/46a2
[22:13] <jeremy31> lucenera: URL for>  dmesg | grep ath | nc termbin.com 9999
[22:14] <lucenera> https://termbin.com/0783
[22:23] <jeremy31> lucenera: you can try https://askubuntu.com/a/1262429/300665  if it fails, try a sudo apt-get install reinstall linux-firmware
[22:24] <lucenera> jeremy31 ok thanks now I try.
[22:33] <TheFu> Having issues running snaps. Looked for answers, but they don't seem to apply in this situation.  Error is: cannot create user data directory: /home/ubuntu/snap/jami/108: Permission denied
[22:33] <TheFu> username is "ubuntu"
[22:34] <TheFu> File and directory permissions are 755 ubuntu:ubuntu .
[22:34] <TheFu> No NFS.
[22:35] <TheFu>  /home/ubuntu/ is in the passwd, no need for bind mounts.
[22:36] <TheFu> I do use LVM, so the file system is an LV.
[22:36] <lucenera> jeremy31 I fail in this step: ls -R /lib/firmware/ath10k/QCA9377/hw1.0/ | grep '. * WLAN.TF. <here you should fill with your dmesg result>'
[22:36] <TheFu> Any ideas?  Multiple end-user program snaps are failing with the same error, but the lxd snap has always worked.
[22:37] <lucenera> I am not getting results to identify the firmware I am using.
[22:37] <jeremy31> lucenera: You are using firmware-6.bin
[22:38] <lucenera> ah ok.
[22:38] <lucenera> Now I replace. Where did you read it from?
[22:38] <jeremy31> For that it might be WLAN.TF.2.1-00021-QCARMSWP-1   It was in results for dmesg | grep ath
[22:40] <jeremy31> lucenera: The file from github will have to be renamed to firmware-6.bin in the ath10k/QCA9377/hw1.0 directory
[22:43] <lucenera> I don't have the WLAN.TF.etcetc folder
[22:43] <lucenera> cd /lib/firmware/ath10k/QCA9377/hw1.0 = board-2.bin  board.bin  firmware-5.bin  firmware-6.bin  firmware-6.bin.old
[22:44] <lucenera> no directory
[22:46] <jeremy31> lucenera: the WLAN.TF is from the github site
[22:47] <lucenera> Ok, got it and done. Renamed the old firmware-6.bin and replaced with the one in the repository. Now reboot?
[22:49] <jeremy31> lucenera: give it a try
[22:51] <lucenera> https://www.speedtest.net/result/10465357778.png
[22:51] <lucenera> Improved, but still far from Windows.
[22:52] <lucenera> In Ubuntu 18.04 and 18.10 I had no problems. Speed was normal. Just below the other operating systems.
[22:53] <lucenera> Ubuntu 20.x much worse.
[22:53] <lucenera> Will it be the new kernel?
[22:54] <tomreyn> combination of new kernel version and no vendor support
[22:55] <lucenera> tomreyn it's true.
[22:55] <lucenera> Only Apple in the world can give you everything. But everything else is missing.
[22:56] <jeremy31> lucenera: Can you use 2.4 GHz access point?
[22:56] <lucenera> jeremy31 yes, But that is already very slow on its own. Now I try though.
[22:56] <jeremy31> tomreyn: Atheros has good vendor support compared to Realtek
[22:57] <jeremy31> lucenera: what country are you in?
[22:57] <lucenera> In theory Atheros is also much more supported for routers, such as Turris Omnia and MOX.
[22:57] <lucenera> jeremy31 Italy
[22:57] <jeremy31> lucenera: In terminal>  sudo iw reg set IT
[22:58] <jeremy31> And it might help to go into Network Manager settings for the wifi and set IPv6 to ignore/disable
[22:59] <lucenera> jeremy31 Made for both.
[22:59] <lucenera> restart NetworkManager?
[22:59] <jeremy31> lucenera: reboot or restart NM
[23:01] <lucenera> The service restarted. But the thing is, it doesn't drop from 6Mbit/s for link speed in Network Manager GUI.
[23:01] <lucenera> Now I try on 2.4 GHz.
[23:03] <lucenera> https://www.speedtest.net/result/10465390108.png
[23:04] <lucenera> Still improved on 2.4 GHz. But it's not the best. Now I try on the other 5 GHz. The router is tri-band.
[23:08] <jeremy31> lucenera: Any options in the BIOS to disable IOMMU?
[23:09] <lucenera> jeremy31 yes.
[23:10] <lucenera> Could there be a link?
[23:10] <gordonjcp> wifi should always be the connection of last resort
[23:10] <jeremy31> Might want to try with IOMMU disabled.  Your log also showed AMD-Vi: Event logged [IO_PAGE_FAULT domain=0x000c address=0xfbe27ad0 flags=0x0070]  and the search I did leads to IOMMU
[23:11] <lucenera> Yes, linux doesn't get along very well with this feature.
[23:11] <lucenera> Now I disable it.
[23:16] <lucenera> gordonjcpThe ethernet cable is better, but in a home it is not always possible for everything.
[23:16] <lucenera> gordonjcp
[23:16] <lucenera> jeremy31 IOMMU option disabled, but the network speed is the same. I have only the third band left. However on 2.4 GHz it is much better.
[23:17] <jatt> is it safe to resize the partition holding the master boot record (MBR)?
[23:17] <shibboleth> the mbr isn't *on* a partition
[23:18] <shibboleth> it's the master boot record
[23:18] <shibboleth> and where partition offsets are... defined
[23:18] <jatt> I've the following:
[23:18] <jatt> /dev/sdb2  *    1023999165 1228795784  204796620  97,7G 83 Linux
[23:19] <jatt> df -h
[23:19] <jatt> /dev/sdb2        96G  757M   91G   1%
[23:20] <jatt> only 1% is used in /dev/sdb2 and I'd like to resize it to make smaller and create a new partition so I can use around 90GB
[23:20] <shibboleth> and?
[23:20] <shibboleth> thats likely conversion between MB and MiB
[23:20] <shibboleth> also, you can't extend a partition *backwards*
[23:21] <jatt> I wonder if resizing /dev/sdb2 is OK not sure if the MBR might be damaged if I resize /dev/sdb2
[23:21] <shibboleth> well, you can, but the filesystem will take issue with it
[23:21] <shibboleth> jatt, you even know what the mbr is?
[23:23] <jatt> for instance, in OS X such resizing is not allowed:
[23:23] <jatt> https://superuser.com/questions/655960/os-x-10-8-cant-resize-partitions-on-mbr-disk
[23:24] <jatt> not sure whether a similar thing happens in Ubuntu
[23:24] <shibboleth> ...
[23:26] <lucenera> jeremy31 Thanks for everything and for your interest. Only on 2.4 GHz the speed is decent. Maybe in a future version of the kernel / firmware it will be better. With the latest from Fedora and with Archlinux the same result.
[23:26] <shibboleth> jatt, that's the "boot partition"
[23:26] <shibboleth> completely different from the *MBR*
[23:27] <shibboleth> and if you wanna resize the bootpart to free up space behind it, you can't just extend to following partition to use the new free space in front of it
[23:28] <shibboleth> filesystems work on offsets
[23:39] <jeremy31> lucenera: It might take a kernel bug to be filed to fix it
[23:43] <lucenera> jeremy31 I think so.