=== ihaveamac_ is now known as ihaveamac [00:38] in Files when i sort by size, it can consider a directory of 5mb in size larger than one of 5gb in size [00:38] that's annoying [00:38] can i change it? [00:39] it disregards the actual disk space for directories and instead only considers the cardinality of the directories as its size [00:39] well now i know why wayland isn't enabled when using the nvidia drivers [00:40] BinarySavior: computing the actual size of all files referenced in the directory is a significantly more expensive operation [00:40] ah i see, that makes sense then [00:41] when making a backup of my home directory i was looking for the largest files (usually binaries or datasets) and i was sorting the parent directories by size and I wasn't finding what i was looking for. In a case like this, I guess I shoudl probably use CLI to find what i'm looking for [00:42] there's probably gui tools for that [00:42] ncdu is a nice little TUI tool; du is the usual CLI tool [00:43] second that ncdu is awesome [00:44] yea ncdu is nice ty sarnold goddard [01:00] textboard.org === blackest_mamba_ is now known as blackest_mamba === M4he is now known as mahe [02:24] Does Ubuntu have any plans to switch from Firefox as default browser? === compuguy3 is now known as compuguy [02:30] ? [02:30] Hello [02:30] I need someone's help [02:31] I want install flash player for Chromium [02:31] What can I do? [02:32] Isn’t flash dead [02:32] Why would you want to do that [02:32] I want to play web games [02:32] They need flash === humberto1 is now known as humbertwoody [03:37] ooo ćao ćao. which kernel will the next point release of ubuntu have? [03:39] you've not said which release of Ubuntu you're asking about? 18.04.5 for example doesn't move off 5.4 as it's already the highest it goes if using HWE; 20.04 moves to 21.04 kernel or 5.11 when it reaches 20.04.3 [03:40] 20.04.3 [03:40] so 5.11 I presume :) [03:40] no probs [03:40] sisajte kurac [03:40] yep. HWE means it gets the stack from the stable non-LTS release [03:44] Just installed the latest Ubuntu release. All it has are a few ugly hippo wallpapers [03:46] Marz, I don't see a support question there, you can read https://discourse.ubuntu.com/t/hirsute-hippo-release-notes/19221 to find what's new but if it's just comments you're making it should be in #ubuntu-offtopic etc [03:53] Marz: you can always contribute a few good ones === apollyon is now known as kazoo === kazoo is now known as apollyon === apollyon is now known as kazoo [04:59] I wonder why drivers on 20.04 I think work fine with Steam etc but for newer Ubuntu releases but LTS AMD does not pack and release driver installer and AMD graphics driver in newer ubuntu past LTS does not work well with Steam etc. [04:59] Wouldn't newer stuff should be getting better, or it is about AMD support for LTS? If AMD graphics drivers are open source, shouldn't newer compiled drivers be the same like form AMD site, just newer and better? [05:00] nikolam: testing vs stable [05:00] newer is not always better [05:00] I would not like to go back to 20.04 just to install AMD's drivers from AMD site, just to play games. 20.10 and 21.04 are also stable.. [05:01] Testing is what you get updating past 21.04 , so you do testing. [05:02] Hey guys, I managed to upgrade Ubuntu from 20.10 to 21.04 but I think I missed the prompts that show up during the process. does anyone know how to determine what I missed? I see in the log two separate 300 second timeouts. [05:02] LTS is stable 20.04 intrim are testing versions not LTS LONG TERM Support [05:03] MrMr I suggest using Btrfs for FS and apt-btrfs-snapshot, so you can easily go back to previous system state and redo update :P [05:03] LTS is long term support, releases are also stable and supported ad i know. [05:05] @nikolam, I am not experienced with that process, seems tricky. I'm not seeing any particular issues, maybe the gui is acting stranger than usual? not sure [05:05] MrMr it's not about Gui [05:06] No generic anwer here [05:07] nikolam, if there's no easy way to reverse engineer or investigate, I'm fine waiting till next october I guess.. [05:11] Seems that answer is not that, but asking why external creators (Steam) support only LTS with their SteamPlay. And how drivers from AMD site differs from open source drivers, shipped with Ubuntu. [06:40] hello [06:40] help me [06:40] how? [06:41] The chrome or firefox have not flash plgin [06:41] How to Install [06:41] flash has been end of life for a while now. why do you need it? [06:41] 4399 player [06:41] game [06:42] game or 酷家乐 [06:42] wujie: chrome has a program that runs most flash programs but as ThinkT510 says flash has been discontiued [06:44] How to use wine sketchup,I jop is Dsginer [06:44] CAD or Sketchup or 3dmaks [06:45] who is jop same to me [06:45] wujie: check the wine webpage for a list of programs that work in wine [06:45] winehd? [06:45] apt-get [06:45] apt install wine [06:45] ok ,But not have CN [06:45] very so hard [06:47] wine adapts window programs to run on linux but not any program [06:47] winehd vray good for the linux [06:48] toddc ,where are your come from? [06:48] I coming PRC [06:48] there are a lot of other programs that do the same thing but work better on linux but that is not my area us arizona [06:49] UOA? WOOO very good [06:50] Nice too meet you [06:51] wujie: nice to meet you too I am just a local sysadmin [06:52] Can you speak Chinese? [06:55] wujie: no [06:57] what is Time now US? [06:57] 23:58 [06:58] 14:58 [06:58] HAA [06:58] :D [06:59] what do you play game name :CO go? [07:01] wujie: I am not a gamer [07:02] What do you like? [07:17] hello [07:17] hello [07:17] freade [07:51] hi friend === denningsrogue2 is now known as denningsrogue === denningsrogue8 is now known as denningsrogue [08:31] how come there isn't a "lubuntu" release for 20.10? [08:31] ummm... is "lubuntu" an official flavor? or to put it in other words, am I being offtopic? === keypushe- is now known as keypusher === keypushe- is now known as keypusher [09:09] olspookishmagus: https://lubuntu.me/groovy-released/ [09:17] toddc: thank you [09:17] consider this matter resolved [09:21] i'm seeing this on one of my servers: https://dpaste.org/v7Oa [09:21] so resolved is not able to start [09:21] and i can't perform dns lookups [09:22] sorry, this: https://dpaste.org/BWN4 [09:52] I want to run a command automatically after Busybox startup , how can I do that? [09:55] to clarify, I've encrypted my whole disk with LUKS and I've installed Busybox with the network configuration. So when VM has been rebooted, I can connect to Busybox with SSH to enter my LUKS password. I want to run a command automatically after Busybox startup, to know the VM needs to enter the LUKS password, how can I do that? [09:57] punkgeek: stick around I am sure someone will know the answer [09:58] Actually I want something like rc.local on busybox, what is option's name? [10:11] i installed anbox in Ubuntu 2.04 it's installed and i pulled whatsapp app and installed playstore grom github script but it's not connecting to internet is there any solution? for this [10:12] david1: try androidx86 iso on virtualbox on ubuntu, works much better then anbox [10:14] david1: alternate, there's an #anbox channel too if you like [10:17] hello [10:17] hello [10:17] how are you [10:17] well [10:18] enought [10:18] fe [10:18] wsa [10:18] e [10:18] wa [10:19] varga kde si === pong is now known as beaver [10:35] hey, aanyone in SEO using ubuntu? [10:35] I know SEO and I use Linux [10:36] What's your question [10:36] If you can pretty much do everything using linux :) [10:36] or are there gaps [10:36] i can game almost 100% of my games besides COD [10:38] I'm not a gamer, mostly if all seo tools work for you [10:57] hi, fresh install of 21.04, i noticed when I suspend the desktop then wake it back up I lose my NIC [10:57] it's a wired connection, integrated on mobo [10:58] then after a proper restart i get my network connection back === diskin is now known as Guest7490 === diskin_ is now known as diskin [11:02] BinarySavior: did you try restarting network-manager ? [11:07] hello [11:07] gruss got sod [11:14] what [11:14] pomaže bog majmune [11:15] ok [11:21] EriC^^, I will try that next time [11:21] systemctl restart NetworkManager.service? [11:22] BinarySavior: if it works you can add it to /etc/pm/sleep.d/ so it runs after you come from suspend [11:22] cool ty [11:23] BinarySavior: yeah that's the command [11:23] or ...restart network-manager for short === Avago_Broadqual1 is now known as Avago_Broadqual === mh3f_ is now known as mh3f === pikapika is now known as ronald_mcdonald === ronald_mcdonald is now known as pikapika === pong is now known as beaver [12:46] Hi all === Guest32 is now known as thematrix [12:57] sudo hell all [12:57] sudo hello all [13:47] hello [13:47] francais [13:47] !english | bedo [13:47] bedo: The main Ubuntu IRC channels are English only. For a complete list of channels in other languages, please visit https://wiki.ubuntu.com/IRC/ChannelList [13:49] thank [13:49] bedo, do /join #ubuntu-fr === genii-core is now known as genii [14:21] can anybody help me with a Ubuntu DDE problem? [14:23] DDE? [14:26] /(7//(/(())===(/&%%$$$§§"!"§$%&/()=? [14:27] Thanks [14:28] ThinkT510, https://ubuntudde.com/ [14:28] Heh, the #deepin channel has 2 users [14:30] BluesKaj: is that official? also I don't respect websites that don't respect adblockers [14:33] !ask | beun [14:33] beun: Please don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-) See also !patience [14:34] ThinkT510, I use anadblocker, but didn't have a problem with the site, using ublock origin [14:34] beun: Ubuntu DDE isn't a supported distribution here. You'll need to seek support from the Ubuntu DDE project [14:35] oops I thought DDE was just a fancy new ubuntu desktop [14:37] leftyfb: thanks, I had a feeling it wasn't official [15:00] leftyfb: i looked into setting up my job as a systemd timer but i don't think it's going to work for me because i most definitely don't want my output to go into the journal [15:00] beun: please don't cross post [15:01] Mekaneck: they've already been told we can't support DDE here. Where else have they posted? [15:01] leftyfb: in the kubuntu channel [15:01] beun: https://ubuntudde.com/support/ [15:02] lantech19446: then don't have your script output, or have it output to whatever log you want. [15:03] lantech19446: you can also set this in the .service file: StandardOutput=null and StandardError=null [15:03] lantech19446: systemd service and timers are WAY more powerful than cron [15:04] i don't so much need powerful for this i just need it to work and for some reason my monday script only ran for one monday and then decided to shit the bed === fsamareanu is now known as NIGGE[RS] === prxq_ is now known as prxq [16:07] I've hit `Ctrl+C` while `apt remove`ing a package. What happens now? [16:07] It was unsetting some paths [16:07] Helmholtz: re-install the package since it's half-installed/broken now [16:07] !op | NIGGE[RS] [16:07] leftyfb: I was using a `.deb` file [16:07] NIGGE[RS]: Help! Channel emergency! (ONLY use this trigger in emergencies) - Pici, Myrtti, jrib, Amaranth, tonyyarusso, Nalioth, lamont, CarlK, elky, mneptok, Tm_T, jpds, ikonia, Flannel, wgrant, stdin, h00k, IdleOne, Jordan_U, popey, Corey, ocean, cprofitt, djones, Madpilot, gnomefreak, lhavelund, phunyguy, chu [16:08] leftyfb: should I find that deb file and install again :( [16:08] Helmholtz: if you want it installed, sure [16:09] Helmholtz: what package is it? [16:09] leftyfb: no I want it uninstalled [16:09] Helmholtz: oh, then try to remove/purge it again [16:09] I think I've used this: https://packages.ubuntu.com/focal/amd64/libolm3/download [16:09] hi there [16:09] Helmholtz: that's not how you install packages properly [16:09] leftyfb: It says not found [16:10] leftyfb: yeah it was a test [16:10] leftyfb: I mean should I install, then uninstall it? [16:10] Is there a `clean dangling` option? === seednode2 is now known as seednode [16:12] Helmholtz: what release of ubuntu is this? cat /etc/os-release | nc termbin.com 9999 [16:12] bionic [16:13] Helmholtz: sudo apt remove --purge libolm3 [16:14] leftyfb: ok thakns [16:19] leftyfb: It says `E: Unable to locate package libolm3` [16:19] `sudo apt purge libolm3 libolm-dev` [16:25] leftyfb: hey, what's up? [16:26] Please change your nick [16:29] NIGGE[RS]: i'd change your nick asap because it's inappropriate [16:29] you could get kicked/banned for that [16:30] Mekaneck: Nigge is my actual surname, it's fairly common in Germany [16:30] it was a polite warning [16:30] change it to Nigge then [16:31] the [RS] stands for Rennsport [16:31] just do as told please [16:31] I don't think I'm doing anything wrong [16:32] sigh [16:32] \o/ [16:33] what the... [16:34] libera staff have obviously had enough of that silliness === humvee is now known as NIGGE[RS] [16:37] !ops [16:37] Help! Channel emergency! (ONLY use this trigger in emergencies) - Pici, Myrtti, jrib, Amaranth, tonyyarusso, Nalioth, lamont, CarlK, elky, mneptok, Tm_T, jpds, ikonia, Flannel, wgrant, stdin, h00k, IdleOne, Jordan_U, popey, Corey, ocean, cprofitt, djones, Madpilot, gnomefreak, lhavelund, phunyguy, chu [16:38] RikMills, no need, he is gone now [16:38] coconut: he's not [16:38] Mekaneck: indeed [16:39] NIGGE[RS], hello [16:39] oh... sorry [16:39] dealing with another troll i guess [16:39] NIGGE[RS]: you just won't quit won't you... [16:44] question from another channel: please stop poking him [16:47] @coconut, with such a nick IMHO he deserves it e.g. RS ->Rennsport is totally unrelated to technical things and Nigge the lastname he claims to be common in Germany, well it is not [16:48] Plus, if it really were his last name he would be sensitive to this issues and try to avoid it, [16:48] 100% they knew what they were doing, and the reaction they were going for [16:48] first grade template approach of the alt right, causing a rocus and then claiming to be the victim [16:48] ramblebamble, he just got kicked out from linux channel [16:49] yeah I saw I think he just joins every channel he finds and thinks he is lit [16:50] Problem with those boneheads, if you ignore them you do society a disservice if you don't they knuckle down and dig in [16:50] Learning through pain is a much too underapprechiated concept these days IMHO [16:51] please dont discuss this here, leave room for support issues [16:51] let's just leave it at that and not fill this support channel with it [16:51] Hi is there any preferred way to replace certain binaries? For instance you can easily replace shell because /bin/sh is a symbolic link. Most of binaries aren't that way. [16:51] anonymous12059: you can use a bash alias [16:52] leftyfb: I want to replace sendmail [16:52] anonymous12059, ubuntu hast the concept of alternatives, for this type of override, but what are you trying to do? or bashalias as leftyfb said [16:52] anonymous12059: why? [16:52] I want to force encryption on outgoing mail from different other binaries that use sendmail [16:53] (and I don't mean TLS/SSL) [16:53] anonymous12059, how is that program using sendmail? maybe a simple pipe will suffice? [16:53] anonymous12059: dpkg-divert can also sometime help: https://www.debian.org/doc/debian-policy/ap-pkg-diversions.html [16:53] anonymous12059: what type of SMTP encryption are you using if not TLS/SSL? [16:54] I wanted to force gpg encryption if it is a known recipient [16:55] anonymous12059: that should be done on the client side, not the server side [16:56] Well sendmail isn't a client, am I wrong? I am fine with sendmail knowing the contents [16:56] *is a client [16:57] As I understand it sendmail is intermediate between the sending process which calls it and local SMTP server which then delivers/relays e-mails === october is now known as [n]iggers [17:13] RikMills: I don't know if this will help, but thanks for suggestion [17:18] Hi , I have a query related to automated installation of Ubuntu 20.04. I have been using a preseed file and the following file. This has been working fine with Ubuntu 18.04 but not with 20.04:>https://paste.ubuntu.com/p/SZd9SsVYJw/ [17:18] The preseed file I am using is based out of https://help.ubuntu.com/20.04/installation-guide/example-preseed.txt [17:19] Are there any changes in 20.04 w.r.t automatic installer? === tinyhippo is now known as nigge[r] === JanC_ is now known as JanC === manjaro is now known as manjar [18:21] I'm trying to bring up an LXC instance. I use --config=user.network-config... when creating it. In /var/lib/cloud/seed/nocloud-net/network-config it has the config I passed in, but /etc/netplan is empty. I'm using images:ubuntu/18.04/cloud [18:21] How can I figure out what's going wrong? [18:24] If I run `cloud-init init` then /etc/netplan/50-cloud-init.yaml shows up, and then `netplan apply` brings up the interface, but why isn't this happening automatically? [18:26] bahamat: try #lxc [18:28] leftyfb: I figured this is more of an ubuntu specific issue since the seed data is showing up correctly [18:30] bahamat: can I ask why you're using a cloud image as opposed to just ubuntu:18.04 ? Also, why 18.04 as opposed to 20.04? [18:32] hi, I use a small remote webserver VM. Last week I finally had a bit of time, so I ran distro upgrade from 16 to 18 (successfully), and then from 18 to 20. The VM is no longer network reachable so it died during boot. The server operator finally got back to me, saying 'it was "$vt_handoff" in the grub boot config' and neither he nor I have an idea what that sentence means. I'd like to assist him in [18:32] fixing it. Can you point me to an obvious explanation what it is and what to do? [18:33] leftyfb: Because I have another system that I set up some time ago that's working and I'm trying to replicate this on a new system and it's not working. So I'm trying to reduce variables. [18:34] leftyfb: The non-cloud image didn't work either. It just had /etc/netplan/10-lxc.yaml set for dhcp, not my config, and it didn't have cloud-init installed. [18:34] the cloud image at least has cloud-init installed. [18:34] bahamat: ok, so you need to utilize cloud-init then? I usually remove that first :) [18:35] I need to configure the network from the hypervisor side. [18:35] cloud-init seems the way to go. [18:37] bahamat: lxc.network.ipv4 = 1xx.2x.1xx.2x [18:38] leftyfb: Yeah, I don't know where to put that. [18:39] Nothing seems to explain that part. [18:39] But also everything seems to indicate that that's for lxc alone, not lxc with lxd, and for lxc/lxd you're supposed to just use cloud-init. [18:41] bahamat: lxc config device set containername eth0 ipv4.address 1xx.2x.1xx.2x [18:41] ok, let me try that. [18:43] ultramage: seeing "$vt_handoff" listed as a boot parameter is not wrong, and does not explain why the system would not boot. [18:45] hmm, actually there are some old posts on the web which say that removing it heled systems boot. so maybe you should have them do so. [18:46] leftyfb: I'm using macvlan which doesn't accept that property. And if I try ipvlan it says it's not compiled in. [18:52] bahamat: personally, I setup a bridge interface for my containers to not be NAT'd and use ansible to configure them which includes networking [18:54] leftyfb: I need these to have direct network connections. [18:54] bahamat: yes, that's what a bridge interface does [18:54] nat out with no incoming is kind of worthless to me. [18:54] bahamat: a bridge is a lot cleaner than macvlan [18:54] IMHO [18:54] I also need the interfaces to be locked to a specific vlan. [18:55] bahamat: yup, I do that as well in the netplan config in the container [18:57] Yes, but I can't allow the guest to just go choosing whatever vlan they want. [18:57] The guest needs to be set on a specific vlan. It's not up to them to choose. [18:58] bahamat: then tag the bridged interface instead [18:58] Having to create potentially hundreds of vlan bridges isn't something I'm looking forward to. [18:59] bahamat: you have hundreds of vlans? [18:59] you only need 1 bridge per vlan [18:59] Especially when I can just use macvlan and it behave and it works the way I want. Except for the fact that cloud-init just doesn't run. [18:59] leftyfb: Yes, I do. [19:00] Which brings me back to my original question: why doesn't cloud-init run automatically at boot like it's supposed to? [19:01] If it did, I'd be done. [19:01] bahamat: in my experience, it does, which is why I remove it [19:02] bahamat: again, you might be better off in #lxc because they are cloud images or #ubuntu-server since cloud-init isn't installed by default in a typical ubuntu desktop install [19:02] tomreyn: it is unclear what he meant by that or where it got it from. I cannot tell if it's related or not since the vm is offline. All web references I found were super old. This was a fresh ubuntu16 install with minimal configuration changes, so there shouldn't be any ancient cruft in the boot files (and if there was, I assume the updater would take care of that) [19:02] I'll try #ubuntu-server then [19:05] bahamat: you're using images:... and not ubuntu:...? [19:05] I am under the impression you need to use the latter if you want cloud-init to work, since the latter are cloud images and the former are not. [19:09] ultramage: well, 16.04 has been EOL for some months, i'm not sure the upgrade path is still supported. === Starmina_ is now known as Starmina [19:10] !yy.mm | ultramage [19:10] ultramage: Ubuntu version numbers are: YY.MM (YY=release year,MM=release month). Each year sees two releases, so just specifying YY is imprecise. See also https://www.ubuntu.com/about/release-cycle [19:11] rbasak: Currently, yes. [19:11] I'd like to be able to use any distro, and not just ubuntu [19:12] tomreyn: as I stated, I first upgraded from 16.04 to 18.04 using the command that the motd instructions suggested. That upgrade completed without issue, which motivated me to then do it once more (since it was now suggesting to upgrade to 20.04). [19:14] ultramage: if this was a "fresh ubuntu16 install" , why don't you just install 20.04 fresh? [19:15] bahamat: then I think you need some source of images with cloud-init enabled, I think? [19:16] leftyfb: it was a fresh ubuntu install when 16 was the shiny new thing. I held off on OS uprades until now since it is a production VM and I was not familiar enough with it to risk a large upgrade like that. I figured that summer holidays was as good a time as any. [19:16] Official Ubuntu cloud images do that already, but not every distro ships cloud images [19:16] rbasak: I thought that's what a cloud image was supposed to be :-/ [19:20] bahamat: that's what a cloud image is. [19:20] bahamat: the images shipped by lxd upstream at images:... are not cloud images [19:20] It's installed, but it's just not ever run [19:21] I don't understand why this is a problem for you. [19:21] it's called images:ubuntu/18.04/cloud, and it does have cloud-init installed. [19:21] rbasak: I don't either, honestly. [19:21] If you want Ubuntu cloud images, use ubuntu:bionic [19:21] I want debian and alpine images too. [19:21] For other distros, you need to use cloud images if they ship them, or figure out how to build cloud images for those distros [19:21] Sure [19:22] ultramage: ok, i see. i think you'll need to get more information from the server operator. this 'it was "$vt_handoff" in the grub boot config' info is definitely not enough to tell what's wrong with it. [19:22] However that's a separate problem that we can't really help with here, and meanwhile you should have no problem on Ubuntu. [19:28] tomreyn: if you have ESM enabled then 16.04 is actually still supported until 2024. [19:34] Mekaneck: yes, if so, partially. see https://ubuntu.com/legal/ubuntu-advantage-service-description#uasd-support-levels [19:34] tomreyn: yeah I e-mailed him back. According to docs, that variable is just to set focus on the graphic terminal, only affects the physical screen and can be trivially remedied by Alt+F1. [19:35] ultramage: that's my understanding of it, too. good luck. [19:38] ultramage, can he boot the vm with a live cd and give you access that way? [19:50] I have a test ecryptfs mount point. I can manually mount it, all is good. When I try and to it from a command line with the params and a file with the pw, it seems to work but fails. See: [19:50] https://paste.ubuntu.com/p/RHJytgvhyf/ [19:50] what am I missing here? [19:58] a verb between "When I try and" and "to it from a command line" [19:58] jpmh: ^ [20:00] jpmh: are you aware of bug 1756840 ? [20:00] Bug 1756840 in ecryptfs-utils (Ubuntu) "Buggy, under-maintained, not fit for main anymore; alternatives exist" [Undecided, Fix Released] https://launchpad.net/bugs/1756840 === Azonic_ is now known as Azonic [20:16] tomreyn: I was not - I am now - TY so much - and sorry about te delat, for some reason I did not get the alert that you had respoded [20:18] jpmh: you're welcome. if dmcrypt-luks isn't a suitable option, consider fscrypt. [20:21] tomreyn: YEP [20:58] Hi. Is the key 3B4FE6ACC0B21F32 in some ubuntu-keyring package? [20:59] https://paste.debian.net/1205790/ [21:00] PaulePanter: that's due to your 3rd part "debian.charite.de" repo [21:00] Doesn’t Ubuntu support mirrors? [21:01] PaulePanter: sure, but that particular mirror has an issue [21:01] leftyfb: How so? [21:01] PaulePanter: your error messages [21:02] PaulePanter: I would use a different mirror [21:02] I don't think that'll solve this [21:03] sarnold: what makes you say that? [21:03] it's also an easy and quick test === TheRedQueen is now known as Drone [21:05] leftyfb: because that key is used by ubuntu archives https://wiki.ubuntu.com/SecurityTeam/FAQ#GPG_Keys_used_by_Ubuntu [21:05] leftyfb: so "something" has gone wrong that caused that key to not be used to verify this mirror [21:05] sarnold: so maybe there's a date/time problem or blocking the keyserver? [21:06] leftyfb: no keyserver should be necessary, it's provided on the installation images [21:06] ± dpkg -S /usr/share/keyrings/ubuntu-archive-keyring.gpg [21:06] ubuntu-keyring: /usr/share/keyrings/ubuntu-archive-keyring.gpg [21:07] I hate these things so much :) I *think* that key should be in /etc/apt/trusted.gpg.d/ubuntu-keyring-2012-archive.gpg by default, but if that file isn't there any more, I'm not sure if you can just copy over the /usr/share/keyrings/ubuntu-archive-keyring.gpg file directly or not. heh. [21:09] PaulePanter: so is the "ubuntu-keyring" package not installed on this system? [21:10] I have ubuntu-keyring 2018.09.18.1 installed. [21:10] https://packages.ubuntu.com/bionic-updates/ubuntu-keyring [21:10] 2018.09.18.1~18.04.2 would be current on 18.04 LTS [21:10] does: debsums -sa ubuntu-keyring report anything? [21:13] tomreyn: Sorry, terminal cut of `dpkg -i ubuntu-keyring` column. [21:13] ii ubuntu-keyring 2018.09.18.1~18.04.2 all GnuPG keys of the Ubuntu archive [21:14] i assume you don't have debsums installed, and can't currently install it? [21:15] tomreyn: Indeed, as it’s in universe. [21:16] 1a4dd63e5c76728960a2edddae22e2e0fc53df8e8b87806deb971030ac704eb0 /usr/share/keyrings/ubuntu-archive-keyring.gpg [21:16] sha256sum? [21:16] yes [21:16] Seems to match: [21:16] # sha256sum /usr/share/keyrings/ubuntu-archive-keyring.gpg [21:16] 1a4dd63e5c76728960a2edddae22e2e0fc53df8e8b87806deb971030ac704eb0 /usr/share/keyrings/ubuntu-archive-keyring.gpg [21:17] now i don't know for sure that this key is in this very keyring. but sarnold seemed to say so, [21:18] EriC^^, hey i tried restarting network manager and it was unable to reach NIC [21:18] (after coming back from sleep [21:18] ) [21:18] https://paste.debian.net/1205791/ [21:19] unfortunately, relying on "long key ids", as i think apt-secure tooling sadly still does, has been considered insufficiently secure for 10 or so years now [21:25] PaulePanter: does "apt-key list" output "/etc/apt/trusted.gpg.d/ubuntu-keyring-2012-archive.gpg"? [21:26] do you also have file /etc/apt/trusted.gpg.d/ubuntu-keyring-2012-archive.gpg ? [21:26] is the system date set correctly? [21:26] +time [21:27] is this an ubuntu installation, or a derivative? [21:27] Yes. # date -u [21:27] Tue Jul 27 21:27:03 UTC 2021 [21:27] tomreyn: Installed using debootstrap. [21:27] which of my questions did you reply "Yes" to? [21:28] tomreyn: Sorry. The time question. [21:29] tomreyn: The installation was done using debootstrap. [21:29] PaulePanter: does "apt-key list" output "/etc/apt/trusted.gpg.d/ubuntu-keyring-2012-archive.gpg"? [21:29] do you also have file /etc/apt/trusted.gpg.d/ubuntu-keyring-2012-archive.gpg ? [21:31] tomreyn: Yes it does: https://paste.debian.net/1205792/ [21:31] * PaulePanter is very confused. [21:32] Maybe I should try the Ubuntu mirrors first. [21:33] official mirrors and theior synchronization status are listed here: https://launchpad.net/ubuntu/+archivemirrors [21:33] you need to click on each mirror to get the details for each release [21:34] Same issue with de.archive.ubuntu.com: Err:1 http://de.archive.ubuntu.com/ubuntu bionic InRelease The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 3B4FE6ACC0B21F32 [21:38] PaulePanter: no idea. you'd need to go into debugging and gpgv there. [21:39] PaulePanter: check your data and time on the machine [21:40] this had been done [21:41] maybe apt is using a broken gpgv? [21:41] sorry, just noticed that [21:41] maybe there's a http proxy being used? [21:43] sudo apt-get -o 'Debug::Acquire::gpgv 1' update [21:44] see the bottom of apt.conf(5) for more options [21:47] PaulePanter: ^ [21:47] https://paste.debian.net/1205794/ [21:49] do these files in /tmp still exist? [21:49] what does gpgv --version report? [21:50] No, they do not exist. [21:50] # gpgv --version [21:50] gpgv (GnuPG) 2.2.4 [21:50] libgcrypt 1.8.1 [21:50] is /tmp writable ? [21:51] tomreyn: Yes. `touch /tmp/a` worked. [21:51] those version numbers match mine. gpgv package version is 2.2.4-1ubuntu1.4 [21:52] $ file /usr/bin/gpgv [21:52] /usr/bin/gpgv: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=4fdf68e0aa83984ed629d230f3ad1ab059a44f9f, stripped [21:52] $ sha256sum /usr/bin/gpgv [21:52] a35217c60803d39bd8cc1118c11e4215a4b91c9ede29c66ad51a60446b7f5718 /usr/bin/gpgv [21:54] tomreyn, PaulePanter, sorry I didn't paste more before heading out -- https://paste.ubuntu.com/p/Ymjtc6ZyNq/ may be useful [21:54] tomreyn: I have version 2.2.4-1ubuntu1, as that’s what is in *main*. [21:54] sarnold: Thanks, but I have that too. [21:55] apt-key list from tomreyn showed it. [21:55] PaulePanter: aha, cool [21:56] PaulePanter: here's (the relevant part of) what i get when i run sudo apt-get -o 'Debug::Acquire::gpgv=1' update https://paste.ubuntu.com/p/Gdy8yZvzCC/ [22:00] now i'm not sure whether "NO_PUBKEY 3B4FE6ACC0B21F32" is just a misleading follow-up error of the failed signature verification in your "ERRSIG 3B4FE6ACC0B21F32 1 10 01 1524785920 9" [22:01] or whether its the actual root cause of the verification failing. [22:02] if its the root cause, then it's weird that apt does not find / properly use the signing key, even though it's there. [22:03] if the signature verification fails even though apt can actually access the signing key, then it's unclear why the verification (gpgv) fails [22:09] tomreyn: Thank you for your help. I am going to hit the sheets now, and continue tomorrow with strace. [22:12] good luck, hope you can get to the bottom of if === cncr04s_ is now known as cncr04s === genii is now known as genii-core [23:27] set irssiproxy_password p4zzw0rd [23:28] redbunny: it'd probably be better to pick a better password [23:29] sarnold +1 ... 32 characters+, to avoid most rainbowtables [23:31] oerheks: though if someone grabs your bouncer's password database the password probablydoesn't matter much :) [23:31] oerheks: 20+ should sufice even against rainbow tables but it depends on how well security is on the other end if it isnt stored properly sometimes evne 100+ cant help === sn1tch3r_ is now known as sn1tch3r