[00:39] Hello friends. I'm trying to setup disk encryption on an external drive that I want auto-mounted on system start. [00:39] The main computer drive is already encrypted with LUKS and requires a password to start up. Is what I'm trying to do possible to do securely? [00:40] I found this answer on SO, but one of the comment said it isn't secure at all. https://askubuntu.com/a/709653 is that true? [00:41] automount on system start, that is hard. better automount on user login. [00:41] ecryptfs is pretty much unmaintained, so that specific answer isn't fantastic [00:44] sarnold, which answer are you referring to? [00:45] ninjarockstarjsd: the answer you linked directly [00:45] automount without password input is not secure, indeed. [00:46] but using the same password for two devices is probably possible [00:46] Is it possible to enter it only once and have both unlocked? [00:47] no. unless you write a script to do so. [00:47] https://unix.stackexchange.com/a/392286/7064 maybe? [00:47] ninjarockstarjsd, as oerheks said script and use a keyfile [00:48] cryptsetup: /lib/cryptsetup/scripts/decrypt_keyctl [00:49] use a 2fa device like yubikey? [00:49] ninjarockstarjsd: what are you trying to achieve exactly [00:49] sarnolds, but that encrypts on sartup not on login [00:49] or protect against [00:49] on startup is a bad idea, and hard to do. [00:49] I'm setting up a home media/nas server as a general storage for all my stuff [00:49] and why, you cannot access it while booting. [00:50] it does not save you time either. [00:50] ninjarockstarjsd: if someone steals the main os, he'd need the pass to decrypt it and further decrypt the ext hdd, so its safe i guess to just put the password of the ext hdd inside it to automount it [00:51] is security would be hinged on the main os's pass [00:51] *its [00:51] The reason why I wanted to mount it at boot is because I'm setting up my various media server stuff as service and start at boot. And they'd need access to the external drive [00:52] yeah that makes sense [00:52] weird. [00:53] Can't I configure whatever decrypts my main OS HD to also decrypt my external drive given that they'd share the same password? [00:53] ninjarockstarjsd: ultimately you want to protect against theft and accessing the data right? in case they steal the main pc+ext hdd, they couldnt access it without decrypting the main os first [00:54] ninjarockstarjsd: did you try /lib/cryptsetup/scripts/decrypt_keyctl from cryptsetup yet? [00:54] so putting the ext hdd's pass in plaintext on it to automount it shouldnt be an issue [00:54] sarnold Ohh I wasn't familiar with what that is. I'll look it up now [00:57] it's redundant [00:58] maybe; I just know that a stackexchange answer suggested it'd solve the problem :) [01:01] So if that's the case, why don't I just use the Disk utility's Unlock on Startup options? [01:01] Since my main OS won't be decrypted without me entering password anyway, that password isn't stored in plaintext, right? [01:02] i'd think the unlock at startup thing is stored in plaintext, could be wrong [01:02] I can test it out real quick [01:04] one very edge case advantage to using the initial password to decrypt both would be if they somehow thought to see the ext hdd password before stealing/turning off the pc [01:05] or someone you know did that before stealing, who usually has access to the pc and knows its encrypted [01:31] ok, coming back to my thinkpad X1 performance issues; I think I've narrowed it down to scaling problems with the cpu. I'm considering flattening it and going from 20.04 to 21.10. Better to flatten and go via live usb or inplace? === gry is now known as Gry [01:31] kenperkins, is there any option used to overclock that x1? [01:32] I'm not quite sure what you mean by overclock in this context oerheks; like bios or software config? [01:32] yes, in your bios [01:32] I haven't looked at bios, will boot into it momentarily [01:33] but I was seeing conflicting power profile info between locations, I think it's software [01:34] when I forced the min frequency with cpufreq-set it did go above 1600, but it doesn't do it on it' sown [01:38] kenperkins have you tried sudo cpupower frequency-set -g performance ? [01:38] Seems to work for me [01:39] But I never had any performance issues with my thinkpad x1, I just use that to switch between powersave mode and performance mode [01:41] 1 minute; debating dinner with wife xD [01:41] ooh ooh pick pizza pick pizza! [01:45] just had pizza [01:48] here's a quick look at what's wrong [01:48] https://pastebin.ubuntu.com/p/X6P8yKm2bS/ [01:48] going to run the cpupower command now [01:51] failed, need to install kernel specific packages sec [01:52] ok succeded [01:53] well the command that is, so now running `stress -c 6 -t 60` and lscpu | grep MHz doesn't show anything over 1600 [01:53] most are down at 1100 [01:54] how about processor temps? anything in dmesg? these cute little machines often have pretty poor thermals [01:55] I set up LUKS on an external drive, but when I unplug it, my boot up time is close to 5 minutes LOL [01:55] sensors doesn't show any cpu above 58 [01:56] I'll re-run during stress to confirm [01:56] I'm hitting 3Ghz just fine with the performance mode command [01:57] ninjarockstarjsd: ouch :) [01:59] ok, 2 minute stress on 6 cores, heat not above 62c, fastest core at 1600 [01:59] (plugged in) [01:59] Which CPU do you have? And what's the advertised speed on it? [02:00] The Thinkpad X1 comes in a few different ones [02:00] 10710u, max should be 4.7 on one, 3.9 on all 6 [02:01] Are you sure it's not a BIOS thing? maybe turning off power-stepping there will help performance? [02:01] double checking now [02:02] it might be called frequency stepping too [02:02] ack [02:05] I don't see anything re: speed in bios, there's almost nothing for cpu config [02:05] Sorry, I'm out of ideas then :( [02:06] the only cpu config setting in bios, that I see, is hyper threading, which is enabled [02:12] found it [02:13] I had a tuned-adm profile that was overriding the other profiles [02:13] what tool? [02:14] I ran `tuned-adm off` [02:14] but I still can't seem to get above 3900MHz, but that's way better than 1600 max [02:14] yea, and the power reflects it on sensors, up to 71c on the package and core 1 [02:15] I bet it's throttled a bit [02:15] thanks, I've never heard of tuned before [02:15] it's opaque to me how tuned-adm, cpufreq-set -g govenor, etc, interoperate [02:15] http://manpages.ubuntu.com/manpages/bionic/man8/tuned-adm.8.html [02:16] sorry this one [02:16] http://manpages.ubuntu.com/manpages/focal/man8/tuned-adm.8.html [02:17] still feel like I should go fresh and upgrade to 21.10 (is 22.04 going to be LTS I think?) [02:17] Yeo [02:18] not till april or so tho right [02:18] yeah, probably late april [02:19] no reason to rush to 21.10 if the frequency issue is addressed, might as well wait for 22.04 [02:19] kenperkins: There is thought: Call for testing: preliminary 20.04.4 release candidate images ready! -> https://lists.ubuntu.com/archives/ubuntu-release/2022-February/005317.html . [02:19] plus gives me time to finish my bootstrap ubuntu ansible [02:22] @sarnold, I must have installed this at some point and don't remember; probably brekaing my machine in the process: https://tuned-project.org/ [02:23] it's always user error, amiright? ;) [02:23] kenperkins: it certainly does explain why you were having uncommon problems ;) hehe [02:25] here's a more appropriate question; out of the box, how does performance management work on laptops? should it "do the right thing" when you plug in to power? [02:33] my biggest mistake on this damn thinkpad was getting the 4k screen [02:34] What size of Thinkpad? Because I'd personally love a 4k screen on my 14" daily driver instead of 1080p. [02:35] It's the X1, so 12? idk remember exactly [02:35] The X1 is 14" unless they've changed that. [02:35] ah, yes, it's that then [02:35] hah yeah, I did my setup on my x1 4k with the debootstrap method and the font was *so* tiny, I managed to make , vs . typo in /etc/crypttab when setting it up, and it took me forever to find that [02:36] yea I have the config in the boot menu to make it easier to see grub too [02:36] first thing I did [02:36] oooh? I can't read that at all :) === M4he is now known as mahe [02:39] sarnold, do you nnot have "GRUB_GFXMODE=1366x768" or what not in your /etc/default/grub? === OurRoyalGabe_ is now known as OurRoyalGabe [02:42] Somewhat odd question, but was there an ongoing troll raid going on recently? I help run a large-ish SubReddit and Discord and received a very angry report that someone was spamming using our custom URL and wanted to check things out and talk to any OPs about helping with the situation (as the same troll or troll group is targeting us as well but [02:42] seems to have started switching to targeting others and attaching our URL to the posts). And the person who contact me claimed there was an active raid - but things seem quiet so they might have been lying. === evanextreme is now known as evanextreme[away [02:42] PCBuilder, how is that related to ubuntu support? [02:43] try #ubuntu-ops maybe? [02:43] "if you join #ubuntu on libera which is currently being raided you can see your idiocacy" <-- This was the last message the person reporting the issue sent. [02:44] no. [02:44] they're trying to get you to do the trolling for them [02:45] I figured it might be a false report, hence asking. This is the ideal outcome. [02:46] Thanks for confirming that. [02:46] kenperkins: sweet! I'll have to fiddle with that, thanks :D [02:48] hello everyone. hows your night going. [02:48] is there an easy way to connect to a windows share with ubuntu? [02:48] PCBuilder: heh yeah that doesn't sound familiar, but I lost scrollback beyond a dozen hours ago or something [02:49] donnie, what windows share? samba? [02:49] donnie: smbclient on the command line, mount cifs via the kernel, and both kde and gnome have things built into their "virtualized filesystem" framework things, so using their explorer.exe clones or their applications would work easy enough [02:51] ok. it's doing an update now but i froze the file window. have to wait until the update is done so i dont break anything. lol [02:52] thanks for the info. will that do it on startup or will i have to? doesn't really matter if it wont. it's only a quick connection anyway [02:52] is there a task manager like windows that i can kill the running process [02:52] kill? [02:53] stop. [02:53] oh [02:53] gui [02:53] system monitor [02:53] right click kill [02:53] cool thanks. [02:53] haven't played around with that too much. [02:54] I work in IT so I know windows much better. more businesses use it. [02:54] :) [02:55] tomreyn: https://paste.ubuntu.com/p/TfVrpGrzQz/ [02:55] All I found were these logs. [02:55] system monitor doesnt seem to want to open either. must be the update. i'll hae to wait. thanks for the info though [02:56] yeah good to reboot or use liveupdate when updating [02:57] Wouldn't it be easier to end the process using sudo -kill? [02:57] yea i seen live update when i installed ubuntu this time. Clean install when i switched over from mint. is that reliable? [02:57] Though I guess that lacks the GUI element and is less user friendly. [02:58] I'm fine with both really pcbuilder. [02:58] I dont mind terminal either [02:58] xkill can be handy if you don't know which process you want gone, but do know which window you want gone [02:58] it's not nearly as powerful as kill, but it sometimes does the trick :) [02:59] is that an application sarnold [02:59] can you tag people in this chat so they see your response? [03:00] just type their name will do [03:00] donnie: most clients let you type a few letters and hit tab to complete the rest [03:00] sar[tab] [03:01] yep that worked. easier to keep that chat straight that way [03:01] donnie: x11-utils: /usr/bin/xkill [03:02] not found in my terminal. I just put the whole thing in that you send though [03:03] donnie: then sudo apt install x11-utils -- then start something like xeyes, so you can kill it with xkill :) [03:03] lol. ok. will do. [03:04] thanks again guys for the info and patients. i'm sure i'll be back multiple times [03:05] cool :) [03:05] yep. just tried it. that would come in handy. works perfectly. closed my terminal though. lol [03:43] I have an external HDD connected via USB, but for some reason, I can't get it to mount unless I log in using the GUI. It gets mounted fine when I few it with nautilus. [03:44] It seems to completely ignore the /etc/fstab file. It will only get mounted at the location specified in the /etc/fstab file when I log in using the GUI [03:44] This is the /etc/fstab line for this drive: [03:44] UUID=XYZZZZZZ /mount/extern1 ext4 nosuid,nodev,nofail,x-gvfs-show 0 1 [03:46] USB isn't always available super early [03:46] does /mount/extern1 exist? why not use /mnt/ ? [03:46] you know what all those mount options are for? [03:46] matsaman I only know what the nofail option does :D [03:47] oerheks I'd be fine with using /mnt, i was just following a guide on the web [03:47] weird guide then.. [03:47] and yes /mount/extern1 does exist [03:47] change nosuid,nodev,nofail,x-gvfs-show to 'defaults' and try again? [03:48] I can change it to /mnt if that's the right place [03:48] Does defaults include nofail? I didn't have it connected earlier and my boot time was more than 5 minutes [03:48] ninjarockstarjsd: as long as the dir path exists [03:49] rebooting.. [03:51] Using "defaults" didn't make a difference [03:54] Any other ideas to try? [03:54] you just want it mounted by the time you log in? [03:55] Well, it's for a home NAS/Media server, so ideally, I don't want to have to log in [03:56] well you might have to give us real information then [03:56] but [03:56] Sure, what info would be helpful? [03:56] what happens when you try to mount it from a terminal? [03:57] I haven't tried that yet [03:57] Looking up how to do that [03:58] ninjarockstarjsd: mount /dev/whatever /mount/extern1 [04:00] It doesn't like that it's encrypted: unknown filesystem type type 'crypto_LUKS' [04:00] But the drive gets unlocked already during bootup with a password prompt [04:04] what makes you think it's unlocked before you open it in the file manager [04:05] Because it forces me to enter the encryption password when I start up [04:06] is that what you want? [04:06] how can I test that it's decrypted without mounting it? [04:06] Yeah, decrypt at startup, and auto-mount. That way my services can start automatically after I decrypt [04:07] When I specify the mount type (-t) it complains that /dev/sdb is already mounted or mount point busy.. [04:09] to clarify, I set the type to ext4 when it gave me that error [04:10] Figured it out [04:11] the decrypted drive is at /dev/mapper for some reason.... extremely intuitive [04:15] of course, it has to map somewhere [04:15] can't map over /dev/sdb [04:20] Please help! I was just, umm, doing my thing and I saw this video.Yeah, so this guy told me to run rm -rf / ... now all my stuff is gone! [04:20] I heard that with mechanical drives thingys don't permanently delete; is that truth? [04:21] some guy? [04:21] troll be trollin' [04:21] haha, we do not care about trolls [04:23] I'm not a full-time troll though. And, seriously, outright harassment isn't OK. [04:23] Trolling isn't what it used to be. It used to be little more than little pranks. Now it's devolved into criminal shit. [04:23] we do understand you are lonely, that is oke [04:23] I'd say my technical jokes are safe from that [04:24] I was lonely until I found you [04:24] I thought all I needed was Debian and her cousins then I saw you as my shining star. And we all shine on ... like the John Lennon song. [04:24] anyway, rm -rf / does not work on ubuntu [04:24] I got a dumb question. /etc/fstab wants a UUID=XXXYYYZZ, but my drive is in /dev/mapper/... how do I format that for /etc/fstab? [04:24] I tried replacing the UUID=... with the /dev/mapper/... path, but it doesn't get mounted [04:24] Well, no, it doesn't work without a warning. Correct [04:25] But you could set your system up to ignore those warnings. Thing is, if you know how to manually bypass warnings or eradicate them, you are probabbly wise enough to not run rm -rf / in the first place. [04:25] rm -rf rm-rf [04:26] That looks super mean. spammy just said that I should go down a blackhole. I thought this was about community and acceptance. [04:26] I feel unsafe now [04:26] He wants to delete me for good. I assume he means Secure Erase! [04:26] And I'm all made up of SSD cells. No turning back. [04:28] rm-rf, google for fork-bomb, that is much more fun, non-destructive [04:28] will also put you on some lists :} [04:30] Gentlemen, I've done it. I've mastered Linux. I can now book with an encrypted external drive [04:30] awesome [04:33] congrats [04:33] how did you do it? [04:34] with sweat and tears [04:34] encrypt the os with dm-crypt or whatever, then have it set up to decrypt it once that's open? [04:34] either way, way to go. when you finally get over the frustration, comprehension is like mmmm that's the stuff. [04:35] Since I have a main drive which uses LUKS and and external one also and they both use the same encryption password, I used this method to only input password once: [04:35] https://unix.stackexchange.com/a/392286 [04:35] Then I had to figure out where the unencrypted drive actually lives so I can mount it somewhere useful for use. This took forever, because I wasn't sure why it wasn't mounting [04:36] "Unfortunately, this currently doesn't work on Debian systems using systemd" makes me happy [04:36] :D [04:36] i had to use the hack it mentions there [04:37] just use a simple 2fa usb thingy like jubykey [04:38] Ohhh I didn't know that was a possibility [04:38] I just might do that [04:39] thanks [04:39] I wish more websites supported ubikey type 2fa [04:40] I wish fewer everythings required MFA [04:40] i loath getting SMS on my phone that then I have to type on my computer [04:40] yup, it's idiotic [04:41] or even more annoying is the time-based ones where if you're close ot the end of the window, you just sit there and wait for it to change before you can enter it into your computer [04:41] it's like a punishment for people who don't write their four-char passwords down on postits on their front doors [04:54] Yes, how does the forkbomb thingy work? [04:54] Is that the stuff that makes other stuff toast? Wooo-weeee! [04:54] fork, then fork again, and again, and again.... [04:54] Fork you ... and sell you on Github to China [04:54] it just fills your RAM [04:55] no worry [04:55] fork until you can fork no more [04:55] We're assuming the guy who prefers to go by rm -rf /* hasn't tried such things? [04:55] spoon it [04:55] rm-rf, tell the truth; you are that guy === blackest_mamba_ is now known as blackest_mamba [04:59] I am which guy again? === genii is now known as genii-core [05:59] Is NFS extremely unstable for anyone else? I mounted an NFS drive within the same LAN and tried transfering a 5GB file, and nautilus keeps freezing or crashing [06:00] NFS is constantly complained about iME [06:00] IME* [06:01] What's IME? [06:01] in my experience [06:01] ohh [06:01] Is samba more stable? [06:01] I was told NFS is faster and better in an all Linux environment [06:01] dunno, samba is Windows nonsense though [06:02] I usually use sshfs [06:02] you can disable encryption if you want [06:03] Looking into sshfs, thanks [06:09] ninjarockstarjsd, I have had no problem with NFS for many decades; How are you mounting the remote fs? If it's via the nautilus gui it might be going thru some gvfs/fuse thing; real kernel nfs via mount (or /etc/fstab) might work better [06:11] I'm mounting with just the mount command [06:13] I disabled network on my NFS server for a second, and my nautilus on my nfs client computer became very unstable and crashed. Even after restarting, I wasn't able to open it up again because I had a mount in my home dir [06:13] I had to do a umount -f to get it working again [06:13] I'm testing it again, and it's fine. Just a really bad first impression [06:15] ninjarockstarjsd, certainly if you have your home dir on nfs and stop the server it will be bad (we used to run that way at Sun) [06:15] ohh no, my home directory isn't on NFS, i just had a mount within my home directory [06:16] I think I can mitigate it with using a soft mount [06:16] ninjarockstarjsd, soft mounts are ok if they are read only [06:16] ninjarockstarjsd, I do that for stuff in my $PATH [06:17] Reading up on it now, and it could lead to data lose :| [06:19] A hard mount would mean that you would be able to restart your nfs server, and the client (e.g. nautilus) would continue writing the file from where it left off. Sometimes that's desired, e.g. for rootfs and /home, sometimes not [06:23] ninjarockstarjsd, I think the best advice is, don't stop or reboot your file server if you're not in a spot where you can reboot the clients... [06:27] I will try [06:31] Gah, getting this issue: #6 26.38 E: Unable to locate package postgresql-dev -> any two cents? [06:32] I ran it again on my Ubuntu today. Ubuntu still shows no package upgrade and LivePatch doesn't work, is there any solution? [06:34] My package hasn't been upgraded for a long time. I think there might be a security issue [06:45] Persuader: which one is "my package"? [06:47] alkisg: It's all the packages on my system. [06:47] Persuader: what's the output of `sudo apt update | nc termbin.com 9999` ? [06:48] Let me try. [06:49] hello [06:52] alkisg: The terminal says no Release file was found [06:53] Persuader: did it show a termbin.com/qwer URL? Paste it here [06:53] alkisg: https://termbin.com/2e5n [06:55] I checked the APT log records before and found no useful information. [06:55] Persuader: you're missing some sources; run `software-properties-gtk` and enable the updates for universe etc === adderall is now known as rm_rf [06:58] alkisg: I've always turned these options on, using the default Settings. But I can't open the livepatch, before can be open [06:59] I'm not using livepatch, I'm just saying about the apt sources.list, you're missing things from there [07:03] Well, I haven't found any missing options yet [07:06] hi everybody [07:06] i have a problem with find [07:06] find $PWD -type f -name 'Backup files *.zip' exec unzip {} \; [07:06] find: paths must precede expression: `exec' [07:07] when i writte the "exec...", find crash .... why ? [07:18] how do I make a bootable ubuntu usb on freebsd? [07:19] can I use dd? [07:19] I tried with the ubuntu-20.04.3-desktop-amd64.iso [07:19] and it didn't work === Scotty_Trees3 is now known as Scotty_Trees [07:34] alkisg: When I just re-tested the update address of the package, the computer gave me several urls that could not be connected normally. I removed these urls, and now the update has been successful [07:38] Thanks === rm_rf is now known as johntheripper === johntheripper is now known as rm_rf === polve2 is now known as polve [09:43] Hi, If I add "IP Name" to resolve.conf file on server A, and put IP of server A in server B resolve.conf as nameserver, shouldn't I be able to ping server A by its name from server B? [09:44] !resolvconf [09:44] resolvconf is a set of scripts that's used to manage /etc/resolv.conf in 12.04 and later, for more information please see: http://www.stgraber.org/2012/02/24/dns-in-ubuntu-12-04/ and https://help.ubuntu.com/lts/serverguide/network-configuration.html#name-resolution [09:46] mhmd: if i understand you correctly, you might be confusing /etc/hosts with resolv.conf [09:47] oh right [09:48] thanks! [09:48] you put individual name lookups in hosts === tom is now known as Guest8302 === Guest8302 is now known as tfree [11:08] hey guys [11:09] Guest1736 hi [11:09] u using anonymous os? [11:09] anyone? [11:11] kostkon_ do u use Anonymous OS? [11:13] no I don't, ghost of past Guest1736 [12:22] Hi folks, i am getting a network interface error on SUSPEND with my laptop using a dock station, resulting not being able to use the wired network connection on suspend. 'e1000e 0000:00:1f.6 enp0s31f6: NIC Link is Down' [12:23] I am using a .13.0-28-generic #31~20.04.1-Ubuntu Kernel for x86_64 [12:23] 5.13.0-28-generic #31~20.04.1-Ubuntu Kernel for x86_64 [12:25] any ideas? [12:38] in ubuntu 20.04. the option isn't there for me [12:38] can you use fingerprint login in ubuntu 20.04? the option isn't there for me [12:42] how names the default panel in lxqt? [12:45] i need to restart it, because the language choose hanged himself === Hash is now known as stoned [12:47] hm === adderall1 is now known as rm_rf [12:49] how names the config of lxqt-panel? === stoned is now known as Hash [12:53] Hey does anybody know about the missing set-default-plymouth-theme command? i need it [13:03] im seeing no help so far, i have another question i need an anwser to [13:03] answer* [13:03] How do i host an irc channel in Ubuntu 20.04.3? [13:13] hmpf properly a bug in ibus? [13:14] i have a bug [13:15] the menu icon by ibus-daemon remains in lxqt-panel [13:16] i mean the language choose at the icon in lxqt-panel [13:19] i have only one language installed, i have lxqt-panel and ibus-daemon installed [13:20] * alkisg removes ibus as it's too problematic... [13:29] jsbach: try a bios update on the laptop and a firmware upgrade on the dock station === adderall1 is now known as rm_rf [13:40] hmpf, lxqt-panel is compiled with old Qt5DBus lib? [13:43] BlackMage, what you mean by 'old' ? [13:46] i cant compile the newest lxqt-panel, because of old Qt5DBus, 5.15.0 is needed, but 5.12.8 is available [13:47] I guess the first question is why do you want the later lxqt-pannel version ? [13:48] !info libqt5dbus5 [13:48] libqt5dbus5 (5.15.2+dfsg-12ubuntu1.1, impish): Qt 5 D-Bus module. In component universe, is optional. Built by qtbase-opensource-src. Size 218 kB / 791 kB [13:48] BlackMage: Qt5.12 is out of support, you need to upgrade it. [13:48] a bug with ibus-daemon [13:50] BlackMage: I didn't think ibus-daemon was part of the lxqt pannel ? [13:50] BlackMage, 5.15 is available in impish [13:54] but the language chooser has a bug with ibus-daemon [13:56] BlackMage: would it not be better to fix that bug ? rather than upgrade to version miss-match components ? [13:59] when i click on the button the language choose opens and due a bug the language choose doesnt close [14:00] Hi folks [14:00] it has to do with ibus-daemon, but dont ask me how [14:02] when i kill ibus-daemon and restart it, then language choose left [14:02] and why Xterm uses not ibus-daemon? [14:03] (that saves me) === fling is now known as swing [14:06] but that was good, otherwise I would have had to do it on a virtual console (i.e. kill and restart the ibus daemon) [14:07] i think something hang at the ibus-daemon [14:08] or a deadlock at the call at lxqt-panel, idk [14:08] what's the generic name for a non-root user for deploying software? [14:09] e.g. i have a vps and i want to run a webserver, but not as root [14:09] deploy != run [14:09] there is none. you could say "restricted user for running a webserver" [14:33] tomreyn, thanks. That will do i guess: UEFI: 1.43 / ECP: 1.35 (Fix) Fixed an issue where system may hang up if ThinkPad USB Universal Type-C dock with USB 3.0 Ethernet Adapter is attached. [14:34] tomreyn, how do i figure out which uefi or ecp am i running? [14:35] jsbach: journalctl -b | grep DMI: for the UEFI version, EC you'll need to check from the setup tool pre-boot [14:37] tomreyn, great thanks. I am running out of the box BIOS N34ET41W (1.41 ) 07/08/2021 [14:37] some thinkpad UEFIs can be upgraded via LVFS / fwupd [14:38] tomreyn, i also have snapd showing me that i could update from 0.1.41 to 0.1,47 [14:39] i am using traditionally apt-get maangement, i don't truly understand why snap software management is also offered. [14:39] jsbach: i don't see how that's related to snapd, but generally installing software updates is - most of the time - a good thing [14:41] current ubuntu releases provide snap(d) as a secondary package management system in addition to apt/dpkg [14:42] tomreyn, does that mean that apt is going to be deprecated sometime? [14:42] so, using snap parallel to the apt would not cause any problems at the moment. [14:44] under some conditions, snap can be useful for software which exposes a greater attack surface (such as web browsers and email clients on a desktop computer) and where packaging the software as .deb's would take more effort. [14:44] using apt and snap in parallel should not cause problems [14:45] tomreyn, thanks for the security info. wouldn't have noticed [14:45] i do not know whether apt will be deprecated in ubuntu sometime. at some time snap packages were preferred in ubuntu GUI package manegment applications, you could say ti was the case then. [14:46] ok, i'll just take the chance and update the uefi and ecp through snap and see what happens [14:47] so far, the majority of software is still installed, by default, via apt (and with the current state of the snap ecosystem, i like it that way) [14:48] jsbach: good luck with the upgrades. out of interest, does it list both uefi and ecp upgrades seperately? [14:49] I understand that HWE provides the latest possible kernel with patches right? so how "linux-image-generic-hwe-20.04" is the latest package in ubuntu 21.10? [14:50] ice9: what do you mean by "the latest package"? [14:51] and yes, HWE provides the latest supported (with security and bug fix patches applied) kernel package version on LTS releases [14:52] (althrough there is usually also linux-image-generic-hwe-yy.mm-edge - but that's not really supported) [14:53] 21.10 is not an LTS release [14:54] ice9: some more info on the kernel series: https://gist.github.com/tomreyn/8d7675840d7bc7389b32e4d8887ca449 [14:59] Hi guys, can I create a paste without creating an account and logging in or are sites like pastebin.com allowed? === Guest9898 is now known as Alex948 [14:59] Guest9898: yeah just head over to http://paste.ubuntu.com [14:59] Guest1566, all pastebins are allowed here afaik [14:59] tomreyn, you mean that HWE is intended for LTS releases but for others, it's already using a recent kernel? [15:00]