=== foxide is now known as Guest89247 [00:42] hi all [00:43] I am running Ubuntu/Groovy and having issues getting DisableWhileTyping to turn off when playing games on Steam. [00:43] Seems I don't have syndaemon support [00:43] No synaptics properties on device 'SYNA1202:00 06CB:CD65 Touchpad'. [00:43] ^ When trying to run `syndaemon` [00:44] xinput list-props on all of my mouse-related devices doesn't show any options for DisableWhileTyping as an option/property to set to disable it. [00:45] Put a config file in /etc/X11/xorg.conf.d/41-touchpad.conf to modify an option as well, restarted X (even tried full reboot) and no dice === codebam__ is now known as codebam_ === Sven_vB_ is now known as Sven_vB === zbenjamin_ is now known as zbenjamin === disillusion- is now known as disillusion === de-facto_ is now known as de-facto === de-facto_ is now known as de-facto [03:34] Is there a way to see if doing an apt upgrade will require a reboot or not? === y0sh_ is now known as y0sh === codebam__ is now known as codebam_ === KL5AY2 is now known as KL5AY [06:13] tacomaster: if a reboot is required, the file /var/un/reboot-required is created, and /var/un/reboot-required.pkgs contains the packages demanding reboot [06:14] but in advance of an upgrade, no, not apart from experience [06:22] Hello [06:23] I am happy to report that 18.04 to 20.04 upgrade on vps went fine, after which I enabled the custom repositories again === denningsrogue9 is now known as denningsrogue [07:22] hi, i recently moved my Ubuntu workstation and forgot an external monitor. all i have is my laptop. is there a way to use my laptop monitor as the primary monitor for my workstation? [07:22] i've tried directly connecting my laptop to my workstation via HDMI, but i have no way to access my Ubuntu workstation to configure any display settings... === Metamorphosis is now known as The_Metamorphosi === The_Metamorphosi is now known as Metamorphosis [07:59] I am trying to figure out what exactly triggers the "Install Ubuntu" window in a ubuntu iso installer [07:59] I checked the /etc/rc*.d scripts [07:59] As well as the /etc/systemd/system/getty.target.wants/getty@tty1.service [07:59] .Can someone point me towards the right directory and files to look at? === denningsrogue0 is now known as denningsrogue === Hash is now known as chown [10:01] Hi guys i need help ,my ubuntu distro has reached end of life for long time (18.04) is there any way to upgrade? === chown is now known as Hash === CyberHacker_ is now known as CyberHacker [10:21] sanbot, Ubuntu 18.04 LTS reaches EOL in 2023-April, flavors of Ubuntu 18.04 LTS reach EOL in 2021-April (Ubuntu-Studio 18.04 had extended support available via PPA until 2021-April too) [10:22] guiverc: omg! Now i remember ,mine ubuntu is server edition 😑 [10:23] Ubuntu 18.04 LTS (Server & Desktop) were released 2018-April (thus 18.04) with 5 years of support; which can be extended further via ESM.. it's still supported; use `ubuntu-support-status` to confirm for your actual system [10:25] * guiverc note packages on install media, or from 'main' repo have 5 years of support; other 'universe' packages have shorter lives so depending on what you've added to your system, not all may have 5 years.. [10:25] guiverc: ok thanks ,let me see ,why its showing me not supported [10:26] Hello [10:26] wondering how is linux ntfs hardlink support ? [10:27] I need to customize some windows file and on windows touching one of the hardlinks will ofcourse update all of them automatically because they all point to the same data right [10:31] Kurozen, this is a Ubuntu support room, not a Linux support room [10:33] whatever, i'm using ubuntu [10:33] 20.04 LTS to be precise [10:34] sorry, you should say that (over a generic Linux) [10:35] I used that because I meant it to sound more linux-es vs windows, and not between linux distros [10:36] Basically I don't need support in viewing or anything, just in editing [10:37] Kurozen: ntfs-3g, the default ntfs driver Ubuntu uses, supports hard links according to its manual page. [10:37] but the best approach you could take is probably to just give it a try. [10:37] So I have this Bless Hex editor and I'll be editing several binary files which are hardlinks, they have 2 links usually, rarely 3. [10:38] Heh, in this case it's a live Windows instllation, this "giving a try" may ruin the whole windows installation so that's why I came here to talk a bit :) [10:39] Err, not a live, it's not running tho, I have it mounted on a Sata-to-USB3 adapter [10:44] man: By default, ntfs-3g will only read the unnamed data stream. [10:44] So that has to be configured for Ubuntu too ? [10:45] I don't have a problem editing things twice to make it "stick" if that's the case, as long as I don't ruin something [10:45] you could just create a separate ntfs file system. [10:45] and experiment with that [10:46] Oh, right [10:47] I think using another Windows machine patch a windows instllation is actualy the way to go, why I'm even bothering with this. [10:50] It's all doable live, but the hex editor there would give me error that file is in use and can't be modified even tho it really isn't, it's some bug or something, but fundamentally it's permissions and trying to manually fiddle setting up permissions to editing and then setting them back to default is a time consuming process so that's why I need a faster alternative [10:50] Another OS just won't care about permissions if you mount it as a non-live system [10:51] i mean non-live usb/disk [11:47] I did a do-release-upgrade to 20.04. And now i cant install php. It says The following packages have unmet dependencies:php : Depends: php7.4 but it is not going to be installed [11:47] ANyone has any idea? [11:49] show the full output of sudo apt update; sudo apt full-upgrade -sV [11:50] @tomreyn: https://paste.ubuntu.com/p/X6bXpQ8fm6/ [11:53] rightnow: how about: apt-cache policy [11:54] @tomreyn https://paste.ubuntu.com/p/jqZMPFcNg4/ [11:55] rightnow: okay, install apt-forktracer, run it, show its output [11:56] hey: on Sound and Video---> Pulseaudio Volume Control I only see "Dummy output" for output devices. No HDMI. How can I fix this? (I can't hear audio) [11:58] faLUKE, what's your graphic card? Are drivers installed? [11:58] @tomreyn thank you! found the broken package. removed it. and now apt-get install php worked [11:59] DragonRiver: it's embedded in my Gigabyte mobo [11:59] rightnow: you're welcome. can you tel me what it was? [12:00] @tomreyn i removed php7.4-common and php-common [12:00] faLUKE, so what? What is it? [12:00] rightnow: hmm, i see, so i guess one of those were leftovers from what you upgraded from [12:00] yeah i guess i had that before [12:00] faLUKE, lspci if you need to identify it. Or the CPU model. [12:00] now i just need to figure out what is wrong apache2 [12:00] Syntax error on line 189 of /etc/apache2/apache2.conf: /etc/apache2/apache2.conf:189: was not closed. [12:01] DragonRiver: 00:0e.0 Audio device: Intel Corporation Celeron N3350/Pentium N4200/Atom E3900 Series Audio Cluster (rev 0b) [12:01] Is there any way i can install a new apache2.conf ? i think this one is broken [12:03] faLUKE, you're GPU is an Intel HD 505. If you don't see it under pavucontrol, good luck. Intel is the best supported hardware. [12:03] DragonRiver: so basically I have to find intel's drivers, right= [12:03] ? [12:04] faLUKE, no. Intel is really well supported. You shouldn't need drivers. Mesa should handle all. It's an ALSA/PulseAudio problem, maybe. [12:05] You can reboot, disconnect the cable and reconnect it. Maybe that works. Otherwise, I have no advice. Intel Audio usually always works out of the box. [12:05] rightnow: rname the existing file, then sudo apt install --reinstall -o 'Dpkg::Options::=--force-confmiss' apache2 [12:05] *rename [12:08] faLUKE: which ubuntu release is this ( lsb_release -ds ), which kernel version and options ( cat /proc/{version,cmdline} )? [12:10] also provide what'S returned by lspci -knnv | grep 'Audio device' [12:10] !paste [12:10] For posting multi-line texts into the channel, please use https://paste.ubuntu.com | To post !screenshots use https://imgur.com/ !pastebinit to paste directly from command line | Make sure you give us the URL for your paste - see also the channel topic. [12:10] @tomreyn worked thank you! [12:10] you're welcome [12:11] you're awesome! will write up forktracer for the future [12:11] tomreyn: Ubuntu 20.04.1 LTS, 00:0e.0 Audio device [0403]: Intel Corporation Celeron N3350/Pentium N4200/Atom E3900 Series Audio Cluster [8086:5a98] (rev 0b) [12:13] faLUKE: hmm this doesn't say anything about hdmi. do you actually have an hdmi connected display with an audio device? [12:13] faLUKE: also, you didn't provide all the info, yet [12:15] tomreyn: [12:15] Linux version 5.4.0-58-generic (buildd@lcy01-amd64-004) (gcc version 9.3.0 (Ubuntu 9.3.0-17ubuntu1~20.04)) #64-Ubuntu SMP Wed Dec 9 08:16:25 UTC 2020 [12:15] BOOT_IMAGE=/boot/vmlinuz-5.4.0-58-generic root=UUID=6d0f0646-fce0-4bc9-a9f5-5f52844808e4 ro quiet splash vt.handoff=7 [12:18] tomreyn: yes, I have that display [12:19] does it work after running this in a terminal window? xrandr --output HDMI-1 --set audio on [12:22] tomreyn: doesn't work yet but something has changed (I see more controls now). Thanks for your help! I have to go now, be back in one hour [12:49] faLUKE: maybe give this a try later on https://bkhome.org/news/201912/sound-fix-for-54-kernel-on-apollo-lake.html [12:56] hi all, having real trouble getting an integrated webcam to work on Lubuntu, anyone fancy a challenge? [12:58] Why not. Go ahead VinnySauce [12:58] so it's an HP Pavilion X2 notebook, which uses an Intel Atom chip [12:58] we've identified the device via lspci: [12:58] https://linux-hardware.org/index.php?id=pci:8086-22b8-103c-813e [12:59] we've disabled secure boot, and loaded the atomisp module [13:00] the module is showing as loaded, but we still have no /dev/video* devices, and v4l2 can't find any video devices [13:00] lspci -k shows that the module atomisp is in use by the PCI device [13:02] What's your kernel version? uname -a [13:03] Prior to 4.12 there were issues [13:04] i'm afraid I have to be "that guy", as I'm acting as a middleman for someone else who isn't tech-savvy, so I am relaying things back and forth (sorry!) [13:04] will get uname shortly but I know we're on kernel 5.8 [13:05] Ok, that eliminates things. [13:05] as I read a Phoronix article about atomisp being added back into the kernel for 5.8, so we upgraded to latest Lubuntu stable [13:05] 5.8 is enough info for that [13:05] fab [13:12] VinnySauce, I heard you might need to reboot, go into BIOS (F12 when booting), and System Configuration > Miscellaneous Devices > Enable Camera [13:14] nice one, trying now [13:15] BTW, VinnySauce, if that actually works, please do us a favor and never buy HP hardware again. [13:17] haha, unfortunately that's not in our BIOS [13:17] no option for Webcam [13:17] rebooting back into Lubuntu now [13:19] hmm... this "Encrypted ZFS" install method in 20.10 doesn't seem very reliable [13:19] DragonRiver, here's the uname: Linux hppavilionx2detachable 5.8.0-33-generic #36-Ubuntu SMP Wed Dec 9 09:14:40 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux [13:20] after the first update, I can no longer boot :) [13:23] Hi everyone, happy new year! im wondering, i installed fprint and enrolled my finger but on login the fingerprint sensoris not prompted on ubuntu and it only aks me to enter my password. ubuntu 20.10 unityt === retentiveboy__ is now known as retentiveboy [14:39] [14:39] [14:39] oops [14:47] Linux 5.8 supposedly contains kernel-level support for integrated Intel Atom webcams, called atomisp. We've been able to load the module on boot by making a file in /etc/modprobe.d, and the module is associated with the relevant PCI device (as per lspci -k), but v4l2 still can't see any webcams. Am I missing anything? It's an HP Pavilion x2 Detachable. === VinnySauce2 is now known as VinnySauce [14:48] VinnySauce, what is the lspci output for that device? [14:49] @oerheks, thanks for picking this up. I'm the middleman for the end-user as they're not that tech-savvy, so I don't have all info available at the moment, but here you go: [14:50] @oerheks, https://i.imgur.com/EISCAfS.png [14:50] the relevant device is the Multimedia Controller [14:51] hard to read that way [14:51] try using a pastebin VinnySauce [14:52] maybe it is the non-vga [14:52] aye, asking the end-user at the moment. we know it's the Multimedia controller [14:52] "Intel Corporation (...) Series Imaging Unit" [14:52] here's the device on linux-hardware.org https://linux-hardware.org/index.php?id=pci:8086-22b8-103c-813e [14:53] afraid I only have what screenshots I've already taken :( just some pointers into anything we may have missed are more than welcome, I appreciate the difficulty without direct pastes [14:56] what I can tell you is that when running lspci -k, it shows "Kernel modules: atomisp" under the correct device [14:56] but it doesn't show "Kernel driver in use:" [14:57] VinnySauce: what happens if you do this in terminal> sudo modprobe -v atomisp [14:57] that hp x2 is surely a trouble maker, sound and webcam issues, i find no fix [14:57] ah, we never ran that with the verbose flag jeremy31 unfortunately [14:58] what about without? VinnySauce [14:58] initially it returned an error message because Secure Boot was enabled. after disabling it in the BIOS, it ran with no output (successful?) jeremy31 [14:58] oerheks, yup it's a total lemon :P [14:59] jeremy31, after disabling Secure Boot in the BIOS * [14:59] VinnySauce: might have to check the logs to see what is going on [15:00] yup, probably worth waiting until the end-user is free, eh? jeremy31 [15:00] tomreyn: I'm back and now I can follow your tips. [15:00] VinnySauce: journalctl -f while you playing around, maybe test cheese aswell instead of lubuntu cam package [15:01] I remember that lsmod was returning atomisp as one of the loaded modules. does that mean that it was successfully associated with a device? or can kernel modules be loaded without a device to talk to? jeremy31 [15:01] I have only "dummy output" on the "output devices list" of pavucontrol [15:01] and I can't see the HDMI output [15:01] lotuspsychje, thanks, will write that down. Cheese wasn't seeing anything, nor v4l2-ctl [15:02] I don't know where to start... [15:02] it he user on that x2 member of the video group? [15:02] VinnySauce, ^ [15:03] oerheks, I KNEW there was something we didn't check! remember reading but not trying it [15:03] it's a fresh Lubuntu install, so perhaps not by default... [15:06] well, let's try to upgrade to 20.10 [15:08] many thanks jeremy31 oerheks lotuspsychje we will try those suggestions, and see how we get on. happy new year! [15:53] Hi, on 18.04, does anyone else notice latest Chromium (v87.0.4280.66) to now automatically suspending some tabs? When I bring a tab in focus it automatically reloads. How can I turn that off? [16:05] depends on what tab, news site refresh indeed [16:07] https://browserhow.com/how-to-stop-auto-reload-refresh-in-chrome-browser-tabs/ [16:20] how can i get my workspaces from re-arranging themselves every time i plug in/out an external monitor? [16:33] Hello [16:34] Since the old netboot images are not supported anymore I failed to install an ubuntu 20.04 instance on my centos 7 kvm server using virsh-install --location http://de.archive.ubuntu.com/ubuntu/dists/focal/main/installer-amd64/ ... and some other parameters. [16:35] What's the best way to install ubuntu 20.04 on this centos 7 kvm server using an automated preseed file? [16:35] hello, I am curious that if ubuntu is still sending data from my computer after installation? I heard it couple years ago, not sure if its fixed? [16:37] jennie: are you talking about amazon on ubuntu or send system info to canonical after install? [16:38] jennie: check in terminal> ls ~/.cache/ubuntu-report [16:39] lotuspsychje, yes [16:39] andi: autoinstall. https://ubuntu.com/server/docs/install/netboot-amd64 https://ubuntu.com/server/docs/install/autoinstall [16:40] yes to wich jennie ? [16:40] also does ubuntu allow to login as root? [16:40] send system info to canonical after install - yes to this [16:41] andi, http://archive.ubuntu.com/ubuntu/dists/focal/main/installer-amd64/current/legacy-images/netboot/ [16:41] jennie: send info to canonical is a feature, not something that needs to be fixed, its optional and the users choice [16:41] jennie: login to root as su is disabled [16:42] thanks jeremy31 [16:51] is someone willing to test this out ? I get an error on ( touch "foo.bar-a:g"; echo +([a-z]).+([a-z])-[a-z]:[a-z] [16:52] Lutin: a question more for ##linux perhaps? [16:53] lotuspsychje possible but as Im running Ubuntu I thought [17:16] salut, vreun roman pe aici ? : ) [17:16] !english | zeek [17:16] zeek: Please avoid any language that may be considered offensive, including acronyms and obfuscation of such - also see https://wiki.ubuntu.com/IRC/Guidelines || The main channels are English only, for other languages, see https://wiki.ubuntu.com/IRC/ChannelList [17:16] hello [17:16] maybe not. :D [17:17] zeek: see above. [17:17] i need help to install wifi driver on a laptop without eth cable [17:17] find a cable, easiest way. [17:17] usb stick? [17:18] oh the laptop doesnt have an ethernet port [17:18] that laptop doesent have any eth [17:18] shit tay [17:18] yea.. [17:18] !english | phc [17:18] phc: Please avoid any language that may be considered offensive, including acronyms and obfuscation of such - also see https://wiki.ubuntu.com/IRC/Guidelines || The main channels are English only, for other languages, see https://wiki.ubuntu.com/IRC/ChannelList [17:18] lol [17:18] i did found an tutorial.. but im stuck on it [17:19] unlikely .. what laptop is this? [17:19] hp 15s-fq0024na [17:19] wifi card is rtl8821ce [17:19] it has ethernet then. [17:19] oerheks: I'm talking about any tab, usually I have JS disabled in tabs, but they still reload. I also can't seem to find chrome://flags/#automatic-tab-discarding or chrome://flags/#enable-tab-discarding ... I did find a post which is last updated in 2019-01-14: https://developers.google.com/web/updates/2015/09/tab-discarding - but there it references chrome://flags/#enable-tab-discarding (which I also don't have it [17:19] seems) [17:20] So it looks like Chromium made this feature default behavior with no possibility to turn it off. [17:20] https://tutorialforlinux.com/2020/01/12/step-by-step-kali-linux-realtek-rtl8821ce-driver-installation-guide/ [17:20] zeek: this is #ubuntu, NOT Kali. [17:21] i know , but on kali channel died all of them [17:21] !offline [17:21] If you need to download Ubuntu packages using another machine or OS, check the desired packages in Synaptic and select File > Generate package download script. See also !APTonCD [17:21] so? read the topic zeek... [17:21] lets say i install ubundu on thtat laptop [17:21] same issue [17:21] let's say this isn't Kali. [17:21] :D [17:22] i agree you could have given the ubuntu tutorial https://askubuntu.com/questions/1071299/how-to-install-wi-fi-driver-for-realtek-rtl8821ce-on-ubuntu-18-04 [17:22] kali drives are mostly a hack. [17:22] c/drivers [17:22] zeek: "Unofficial derivatives: use your distro's support channel, not here." [17:22] on that tutorial they allready have eth [17:22] if it does not work, don't bother us. [17:23] what oerheks said. [17:23] no, see the !offline tutoria first [17:23] then do the git install ad such [17:23] 160 users in #kali-linux [17:23] ok ,thx === PowaBanga_ is now known as PowaBanga === pavlushka_ is now known as pavlushka [18:10] i'm looking for Chris anyone seen him? [18:13] Blade-Runner: re-ask your ubuntu issue here where you left, other volunteers can also help you [18:13] i have and got no response and a varied bad response [18:14] likely he is not here [18:14] i know its volunteer so i have no issues with that [18:15] he just left me in a lurch [18:15] ok i'll try it one more time [18:15] Blade-Runner: well, you can either continue talking about it or re-ask your question/doubt and increase the chances of getting help [18:15] Blade-Runner: usualy bad responses get corrected by other volunteers if bad [18:16] ok here goes [18:16] what a drama.. [18:16] nevermind then [18:17] heh [18:17] oerheks: what a drama queen* fixed it for you. ;P [18:17] and your a jerk [18:18] oh :( left before I could say it's "you're" lol [18:18] haha [18:19] "kids these days" [18:19] poor guy :( [18:19] :D [18:35] well done guys... well done [18:35] Maik: oh, why so serious????? :D [18:36] Deano59: don't start again. Thanks in advance [18:36] Maik: it's *NOT* my fault you're always grumpy :/ [18:36] ubuntu loves drama :P [18:36] Hi, By creating any Ubuntu machine within VMware (vCenter), another IP is automatically assigned to the machine! Then we should go to /etc/netplan and remove related config to remove that IP! Do you know why this happens? [18:36] mind stop the trolling in this support channel? [18:36] Maik: trolling? how? [18:37] frenda, why would you block assigning an ip to a vm? [18:37] have a beer, stop being so damn grumpy all the god damn time. bye. :D [18:37] 1. You guys made a user leave and 2nd it's getting annoying Deano59 [18:38] Maik: /care - it was a kid who wouldn't ask his question. no loss here. [18:38] oerheks: during creating I assign an IP manually, another one is assigned automatically --> machines gets 2 IPs! [18:39] frenda: how are you assigning them? [18:39] Deano59: go have fun in offtopic but not the support channel. Thanks. [18:39] Maik: you really are a grumpy old man. lol [18:40] see, troll [18:40] Maik: don't feed it [18:40] Maik: I'm not a troll. mefistofeles: again, not a troll. [18:40] then cut the crap for once [18:40] k [18:40] Maik: don't feed it ;) [18:41] mefistofeles: pleas explain how I'm a troll in #ubuntu-offtopic - thanks. [18:42] mefistofeles: I assign the IP (given by the Network team) when I arrive to the 'creation of customize file' step in the process of creating a VM in VMware. [18:42] frenda: yeah, not sure if ubuntu is aware of that, probably not [18:43] I don't know about VMWare [19:35] Can anyone advise? I'm having difficulty connecting my wireless headphones on ubuntu 18.04. Bluemon does not pick them up and the other/regular bluetooth settings does not pick them up but I do hear the headphones say "pariing" after powring them up. Just that they never show up in the list and don't actually work when testing by playing something on the computer. [19:35] Bueman I mean [19:37] I found this: https://freedompenguin.com/ubuntu-bluetooth-headphones-fix/ and was starting to read it but it sounds pretty invasive [20:00] blahboybaz, for BT issues on 18.04, i installed bluez package ( works better IMHO) [20:00] !info bluez bionic [20:00] bluez (source: bluez): Bluetooth tools and daemons. In component main, is optional. Version 5.48-0ubuntu3.4 (bionic), package size 924 kB, installed size 4488 kB [20:01] oerheks: ty. I'll check that [20:01] oerheks: is it best to remove blueman then (so that only one of them are installed)? [20:02] no need for that. [20:53] does anyone know if the autoinstall-editor snap mentioned for 20.04 in this question is available yet? https://askubuntu.com/questions/1262301 [20:54] is multipass hosted? or is it self-hosted? [20:54] for ubuntu server [20:55] i want to replace proxmox [20:55] potentially [21:07] snake: multipass is not really a solution to be hosted as a server [21:08] snake: but to answer, it's self-hosted [21:09] if you want to replace proxmox with multipass you might as well just use libvirt [21:09] *virsh [21:10] oh ok, i found out i can install the proxmox web thing over another distro like debian and possibly ubuntu server i assume [21:10] its called proxmox ve [21:10] and multipass is essentially small wrapper with cloud init support which creates VMs [21:10] might do that to get full disk encryption [21:10] snake: you could, but why would you do that tho [21:11] full disk encryption .... isnt it better to encrypt vms ? [21:12] installing proxmox-ve on ubuntu is going to be a nightmare not even mentioning it will most likely break [21:12] + you can have full encryption on proxmox itself, I dont see your problem [21:12] encrypting hypervisor seems a bit weird tbh, just encrypt VMs [21:13] hmm [21:13] or just encrypt entire data volume with zfs https://pve.proxmox.com/wiki/ZFS_on_Linux#zfs_encryption [21:14] ok i didnt realize there was any option to do full-disk encryption on proxmox itself [21:14] thanks [21:14] you can definitely encrypt the data volumes thats for sure [21:15] though i might consider just encrypting the vms now that you mention it [21:15] in terms of encrypting the proxmox intself you can also do that just the same way you would encrypt debian [21:15] in fact you can install proxmox on top of debian so you could just go with debian installation with encryption + install proxmox on it [21:15] https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_Buster [21:16] hmm [21:16] many options, think i need to weigh the pros and cons [21:16] If you have separate disk for VMs I would eithere create ZFS pool and encrypt that using their guide. This way all your vms will be encrypted. Or just encrypt each VM separately [21:20] with encrypted guests i would have to remember twice as many passwords unless i make them all the same or something [21:21] im leaning either towards a zfs encrypted host disk, or an encrypted vm pool [21:21] on proxmox (sorry it's not ubuntu) [21:30] oerheks: thanks [21:33] in terms of encrypting the proxmox intself you can also do that just the same way you would encrypt debian [21:33] ? [21:33] JayDoubleu, what do you mean? I didn't see an option in the proxmox installer... well that's what ubuntu usually offers, but i'm not sure about debian [21:34] because proxmox is based on debian buster they provide you with a guide on how you can install on your on debian [21:34] https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_Buster [21:34] so essentially, install debian, encrypt it, add their repos and follow instructions [21:35] ah right [21:35] which is essentially what you wanted to do on ubuntu but sane way ;) [21:36] lol [21:36] how stable would it run I'm not sure. It's better to go with encrypted VM pool tbh [21:38] I have a normal proxmox install from the iso and datasets created from web ui with ZFS(not encrypted) and it works like a charm [21:41] JayDoubleu, zfs native encryption is software level encryption right? not hardware? [21:44] snake: zfs encryption is just the same as luks which is software level encryption. It might be backed up by whatever security chip or CPU instructions available on the system [21:44] ah ok [21:53] If its backed up by hardware instructions, then its encryption in hardware. [21:55] ah really? [21:55] honestly im not koalafied for this stuff [21:56] it's too hard [21:56] i used to use linux all the time, but now i just use windows and only use linux for a server i have. not sure why i have this server though... it's kinda a hobby project i suppose [21:56] Hardware encryption really just means that there is a processor or subset of one (in the case of AES instructions) dedicated to those crypto functions. [21:57] indeed, one could tweak luks with hw AES .. https://serverfault.com/a/510995 [21:57] foxide, yeah i heard those are often badly implimented though [21:57] or um, insecure [21:57] snake: Not sure where you heard that. [21:58] https://redmondmag.com/articles/2018/11/06/microsoft-ssd-security-advisory.aspx [21:59] That is a specific case of bad implementation. [21:59] The AES instructions in modern processors have nothing to do with that advisory. [21:59] yeah as i said i don't really understand all this stuff [21:59] there's so many details and ambiguous terms [21:59] i could be reading manuals all day and still not know what the best strategy is [22:01] it depends if you are are hiding from NSA or just want to encrypt your system [22:01] It's a matter of study and experience, really. I've been in the security/crypto realm for about 20-odd years, now. [22:01] And there's still stuff that makes me go "huh." [22:01] if the latter just install proxmox on main partition without encryption then create encrypted ZFS volume for vms [22:01] If you're hiding from the NSA, you've already lost. :P [22:01] foxide, lol [22:01] yeah lets not even go there ;) [22:02] guys, lets get back to support please, thanks. [22:02] JayDoubleu, ah ok, that could be a partition i suppose, but i do have a new ssd coming. i have a 500gb now, and a 1tb one coming soon [22:02] wonder if i should raid these [22:02] having 500gb just for the host OS is a bit excessive.. [22:02] just because you could doesnt mean you should [22:03] get yourself a small partition> install proxmox > create zfs volumes on the rest, then when new ssd arrives just create it as new volume and store stuff there [22:03] yeah i'm running proxmox on 16gb root [22:04] its better to install proxmox separately tho, it doesnt need any speed or nothing [22:04] so your best aproach would be a tiny hdd for the proxmox OS then two separate SSD's and you will be a happy champ [22:04] can i make snapshots with proxmox? (snapshots of the linux vm?) [22:05] cmdaltescape: yes both live and non-live snapshots [22:05] same for containers [22:06] nah i'm done buying hardware. but i will go with your earlier suggestion. i'll reinstall proxmox on a small partition, and make a zfs for the pool, and maybe another pool on the other disk [22:06] thanks! [22:06] you also have backup functionality separately as well as VM templates (clonning) + cloud init support [22:14] JayDoubleu, about the zfs pool: how do your VMs access it? with nfs? [22:15] cmdaltescape: it doesnt. You can create another large virtual machine and share it's hard drive over NFS [22:15] cmdaltescape: you can access directory from the host using containers tho [22:16] so technically if you would install ganesha nfs on a container you can share entire zfs pool out over nfs https://forum.proxmox.com/threads/mount-host-directory-into-lxc-container.66555/ [22:17] i have one ubuntu box that does 2 things: 1) zfs pool, 2) my dev environment [22:17] maybe i can do even more with that box if i put proxmox on it :) [22:17] you can manually share the host directory with VM using Virtio-FS however it's a manual work and not supported by proxmox https://forum.proxmox.com/threads/virtiofs-support.77889/ [22:18] JayDoubleu, i suspect Proxmox can also pass through hardware [22:18] cmdaltescape: you can definitely do a lot with it ;) I literally have my main VM running on proxmox with GPU attached to it and other VMs and containers I use for development [22:18] (perhaps you could feed your SATA drives directly to your vm) [22:19] Yes you can, I have a dedicated SSD passed through for windows VM [22:20] Virtio-FS is cool tho [22:22] https://www.modelio.org/ would be nice to have it in the repo [22:30] Proxmox looks really cool :) - JayDoubleu, do you use your windows vm as a normal desktop? (gpu + ssd pass through? ) [22:31] cmdaltescape: I use linux as normal desktop with GPU passthrough and I have a second GFX also with GPU passthrough and then use looking glass to access it [22:32] really fast cpu? [22:35] JayDoubleu, interesting stuff. I feel you have "fixed" the 2 - computers in - 1 box problem. (i sometimes wanna do that too :) ) - i always thought Proxmox was for servers only [22:36] well actually more than 2 computers in 1 box but yeah :) I coudnt be happier with proxmox ( well maybe if they would add Virtio-FS into the web configurator) But other than that I am over the moon with it. If I want to develop something I can either create a VM from template or container with all my settings in it under few clicks, I can access my desktop using web ui, I have backups, snapshots etc. Its really the [22:36] ultimate dev machine ;) [22:37] put tailscale on the host or vm it and you can be anywhere in the world and still acesss your stuff. [22:38] and if you have supported hardware for this type of stuff its a pleasure to configure as you dont have to install anything special on the host and keep it nice and clean and mess up the VMs when needed. [22:38] Highly recommended [22:39] i struggle to find a guide on how to remap keys by user. All guides revolve around hacking away on /usr/share files [22:40] ...sure there are forum posts but they seem too hackey to be 2020 [22:40] sorry 2021 [22:41] Squarism: what do you mean by remap keys? cant you just use the xmodmap ? [22:42] JayDoubleu, i read xmodmap is made obsolte / not a recommended route? [22:42] Squarism: who cares, if package is there just use it [22:43] i do care. Hacks just leads to entropy [22:43] if its packaged in your distro and it works there is nothing wrong with using it at all [22:46] https://linux.die.net/man/1/setxkbmap [22:46] Hi, I'm trying to figure out apparmor. I need to "add" a script into whatever profile is used for libvirt. How would I see what profile is being used for libvirt, and how would I add my script to that profile? [22:47] google seems to show me a lot about creating a _new_ profile, which I don't want to do. [22:53] strixdio: https://gitlab.com/apparmor/apparmor/-/wikis/Libvirt [22:59] can you do-release-upgrade without installing some of the new packages it wants to install? [22:59] JayDoubleu Thanks, I'll have to read through that a few times, because I'm not sure if it actually explains how to do what I am looking to do. [23:00] Particularly, it looks like libvirtd should already have access to it, so, idk. [23:00] so, are you getting some aa errors or what ? [23:06] `use virt-aa-helper to manipulate AppArmor profiles. virt-aa-helper [23:06] is a helper application that can add, remove, modify, load and [23:06] unload AppArmor profiles in a limited and restricted way` I dont know but it kind of answers the original question ;) [23:08] also this https://ubuntu.com/server/docs/virtualization-libvirt and section "Apparmor isolation" has a nice explaination [23:14] Hi, I've noticed that after I close the lid on my Thinkpad T480 laptop, the battery will get drained pretty quickly, e.g. it would take ~12 hours for it to run out of battery. Any idea why this is happening? I'm running latest LTS (20.04). [23:15] I've read I should turn on hibernation instead of suspend but I didn't find that setting anywhere. [23:28] JayDoubleu well, with selinux, there's a way to view what "type" the file is [23:29] not really seeing how to do that, or something similar, with apparmor. [23:30] i.e. look at a specific file and find out what apparmor policy it falls under [23:36] strixdio: apparmor is using file paths rather than labels [23:36] its all described there on those links I gave you [23:36] its like whitelisting file paths [23:37] so in that manual you have the cat /etc/apparmor.d/libvirt/libvirt-a22e3930-d87a-584e-22b2-1d8950212bac.files [23:37] libvirt managed that directlyu [23:38] right, and that's kinda how it seems, but what confuses me is: '/usr/bin/* PUx,' is in usr.sbin.libvirtd, and my script falls under there. IDK what "PUx" stands for, or what those are called? [23:38] #include this like tells it to look for those file paths [23:38] so you could include your own and add your file paths there [23:39] just add it as full paths [23:39] hmm [23:39] so, #include ? [23:41] no that's not right. [23:42] no #include [23:42] then in mystuff.files "/usr/bin/qemu-system-x86_64.vga" rw, [23:44] or just use `virt-aa-helper --help` [23:44] " -f | --add-file add file to profile\n" [23:44] " -F | --append-file append file to profile\n" [23:47] also have a look at this guys section https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1515791/comments/5 ` ` [23:47] Launchpad bug 1552241 in libvirt (Ubuntu Zesty) "duplicate for #1515791 libvirt-bin apparmor settings for usb host device" [Undecided,Confirmed] [23:47] JayDoubleu okay I'll give that a try, thanks. Where can I see a list of the "rw," permissions? [23:48] here: https://gitlab.com/apparmor/apparmor/-/wikis/Libvirt ;) [23:48] https://gitlab.com/apparmor/apparmor/-/wikis/Libvirt#basic-usage [23:49] What are those called? They're like file permissions in a way [23:51] https://manpages.ubuntu.com/manpages/bionic/man5/apparmor.d.5.html , look under "link rules" [23:52] or better, look here: https://gitlab.com/apparmor/apparmor/-/wikis/AppArmor_Core_Policy_Reference#file-permissions [23:56] Thanks. I'm not sure what I'm doing wrong, still getting permission denied. I wish I didn't accidentally delete what I had done previously.