[00:01] a fresh install is often a good approach when you have unexplicable behavior such as those questions marks on a tmpfs on https://www.toptal.com/developers/hastebin/saceruwozo.yaml [00:02] mantis': Sadly, installing two desktop environments side by side can have serious problems, and while part of me is surprised to hear that it's GNOME and KDE that caused the mess, it's still not recommended. Once you get this sorted out, you can use a virtual machine to try out other distros with the desktop environment you want to experiment with. [00:02] Bashing-om: And even without backups, if the user data is still accessible, the thing can be recovered without too much fuss. [00:03] mantis': This might be a silly suggestion, but can you make a new user account and see what happens if you log in there? [00:06] i would think there must be system level issues affecting this installation. those question marks on tmpfs directory listing make me think an essential lib is broken, or worse, ram. time of day is apparently off, journalctl is probably full of errors. [00:06] (or dmesg even) === synapt is now known as nate === nate is now known as Guest4657 === useful_idiot16 is now known as useful_idiot1 === waxfire4 is now known as waxfire === RaGE_Syria2 is now known as RaGE_Syria === polymorp- is now known as polymorphic === toozej8517 is now known as toozej851 === djhankb2 is now known as djhankb === pasiz8 is now known as pasiz === JanC_ is now known as JanC === Furor is now known as Colere === Polo is now known as money === diskin is now known as Guest477 === diskin_ is now known as diskin === RaGE_Syria9 is now known as RaGE_Syria === waxfire1 is now known as waxfire === polymorp- is now known as polymorphic === mike is now known as Guest236 === Guest236 is now known as m === m is now known as m121 [08:06] tomreyn: ls -l /run/user/* => it's normal to have question marks in doc and gvfs there, don't you? [08:49] heya [08:49] hi [09:09] How do I enable Ubuntu to turn the display off on Ubuntu Server? This is not a desktop-installation, there is no X installed. Also, no, adding consoleblank to kernel command-line doesn't turn the display off, it just blanks it. [09:13] WereCatf: power management [09:14] That's not a very useful answer, mate. [09:17] WereCatf: define "turn off". you want something to act like a hard kill switch? [09:18] ie press the power button for ya? [09:21] KBar: No, I specifically am talking about the display, not the entire device. [09:21] Turning off a connected display has been a feature supported by PCs for over 20 years now. [09:24] WereCatf: something like this? https://askubuntu.com/questions/62858/turn-off-monitor-using-command-line [09:25] alkisg: except that's a manual process. I just wanna know why Ubuntu Server refuses to turn the display off when using consoleblank on the kernel command-line and how to make it work, when it works fine on other distros. [09:27] WereCatf: https://www.kernel.org/doc/html/latest/admin-guide/kernel-parameters.html says that consoleblank is supposed to blank the screen, not power it off [09:27] What does it do in Ubuntu, blank it or nothing? [09:29] alkisg: it blanks the screen, it doesn't turn the backlight off. Also, yes, consoleblank *can* actually turn the backlight off. [09:29] WereCatf, consoleblank has never managed DPMS ... [09:30] perhaps other distros ship vbetool by default and have it react to the blanking or some such === dibqip is now known as dbqp [09:39] How can I install flatpak in a minimal way so I can completely remove it after I check somethig? === MrA is now known as Ders === kaiseisei1 is now known as kaiseisei === polo is now known as money [10:41] When I have a question about a backport, where should I go to, as there is no backports channel :/ [10:41] Helmholtz1: there is really no minimal flatpak install as all recommends are quite useful [10:41] Helmholtz1: but what do you want to check out? [10:46] murmel, https://lists.ubuntu.com/mailman/listinfo/ubuntu-backports [10:47] ogra: eh, just for a general question, not a bugreport [10:47] yes ... this is where they discuss stuff [10:48] ogra: thanks :) just wanted to make sure [10:48] i think the throughput is too low to actually keep an IRC channel alive ... [10:48] (they seem to have regular IR meetings though) [10:48] *IRC [10:49] ahh nice, I guess it's better to ask there [10:51] last meeting seems to have been on june 15th though ... might take a while til the next one [10:52] eh, no problem, there is no rush. as I am trying to get myself into packaging and trying to selfbackport some stuff, but a package in bpo (trying to compile myself) I can't get it quite to work. whatever I try to do :/ [11:09] Hello [11:09] hi [11:09] We have reboot-required file in /var/run [11:10] After reboot.. Does this file remains there or it will delete automatically [11:15] tanul1989: it will be deleted [11:17] oh ok.. Thanks === realivanjx3 is now known as realivanjx [11:48] Hi all [11:55] hey === Polo is now known as money === mitch is now known as MitchGaines === useful_idiot11 is now known as useful_idiot1 === manfromafar7 is now known as manfromafar [13:33] hi all [13:33] are there any fixed IP mirrors? === leftyfb_ is now known as leftyfb [13:38] what are fixed IP mirrors? [13:39] canonical mirrors at fixed IPs I can put in sources instead of dns names === jess is now known as JESS [13:40] deadrom: why would you do such a thing? [13:40] leftyfb, eliminate DNS issues [13:40] for security [13:40] fix the DNS issues [13:41] I don't run the internet's DNS [13:41] using ip's over DNS does not improve security [13:41] deadrom: then you don't use the internet [13:42] There are DNS attacks that's been done in the past. No DNS resolving, talk to static IP, no risk of going to fake hosts [13:42] deadrom: good luck with that [13:42] deadrom: the internet without DNS is called a broken internet [13:43] i see no list of available mirrors and their IP, dig the one you are currently using? [13:43] i see a whole range.. dig +short $(grep -Pho '^\s*[^#].*?https?://\K[^/]+' /etc/apt/sources.list /etc/apt/sources.list.d/*.list | sort -u) | sort -u [13:43] deadrom: try 91.189.91.39 & 185.125.190.36 [13:43] so no, just one hard ip will not work [13:44] deadrom: there have been attacks on IRC, web browsers and operating systems. You should just use the internet without those as well [13:45] leftyfb, that discussion leads nowhere. a certain other OS manufacturer has IP ranges reserved for update servers and they will give in writing that when I takl to these IPs I will be talking to their servers. [13:45] Now I want to know is there such athing for canonical, too, or not [13:46] there probably is [13:46] for enterprise customers [13:46] only if you run yoru own mirror, still snaps are on a different IP [13:46] KBar, good point. I shall talk to Canonical. [13:47] try to contact https://ubuntu.com/support [13:48] deadrom: mirrors are often over HTTP, so even if you were to get those fixed IPs, you'd still have unencrypted traffic that is easy to modify (from the perspective of an ISP or goverment) [13:48] deadrom: however that wont work, because ubuntu has some client-side checks to protect against that [13:48] so your quest to find fixed IPs makes no sense at all. [13:49] one can test this with that one-liner [13:50] dsc_, have you heard of https? [13:50] deadrom: i dont think you understand what I just said [13:51] dsc_, you said yOuR TrAfFiC WiLl bE uNeNcrYptEd CuZ HtTP [13:52] yes, canonical ships ubuntu with http mirrors, see also your /etc/apt/sources.list [13:52] a while back I was in a google meet and tried to open audacity to record it. [13:52] ever since, I can't use a microphone with my laptop. [13:53] alsamixer shows the mic input as disabled. --- [13:53] deadrom: they are cryptographically signed [13:53] dsc_, I know. [13:53] I was thinking of turning it off and on again, but maybe there's an incantation? [13:54] deadrom: so you want fixed IPs "for security" but it helps nothing. [13:54] xheimlich: what version of ubuntu? what kind of a mic? internal/external? did you upgrade Ubuntu to 22.04 recently? [13:54] xheimlich: say it in an Irish accent? [13:54] I updated to 20.04 recently. My keyboard is also messed up. [13:54] external, the internal mic still works. [13:54] install apt-transport-https and grab one supporting https https://launchpad.net/ubuntu/+archivemirrors [13:55] headphone with mic. [13:55] now lets tackle one problem at a time [13:55] yes. I tried to get help here about my keyboard once and gave up. anyway, about the sound. [13:55] xheimlich: first, make sure it works at all. got a spare computer/device? [13:56] uname says (Linux xheimlich 5.4.0.120-generic #136-Ubuntu SMP x86_64 GNU/Linux [13:56] the headphones? I've been using them on my phone since I can't attend meetings on my computer. [13:56] xheimlich: the mic on the headphones [13:57] yes. [13:57] the internal mic also works. It's not a good solution because I live at a noisy home. [13:58] remove .config/pulse and restart pulseaudio? [13:58] deadrom: consider if you perhaps fell for the marketing gimmicks of a certain OS manufacturer [13:58] xheimlich, pulse or plain alsa? [13:58] deadrom: I don't know. [13:58] xheimlich, ps ax | grep pulse [13:58] I installed 18.04 about three years ago and updated to 20.04 just two weeks ago. But that didn't produce sound problems imediately. [13:59] ah, it's there. /usr/bin/pulseaudio [13:59] xheimlich, check your pulseaudio mixer what it thinks of your mic [14:00] I use alsamixer to adjust volumes. (I use a tiling wm instead of gnome and tend to use TUI tools like nmtui, etc_ [14:01] anyway, instead of a volume bar, it literally says "-------". Is there an image pastebin to post a screenshot? [14:01] xheimlich, pamix or pulsemixer [14:01] xheimlich, pasteboard.co [14:02] I have neither pamix or pulsemixer installed. [14:02] apt install? :) [14:03] and maybe kill your Zoom client.. it starts up automatic, IIRC [14:03] https://pasteboard.co/deHjDbeLsu55.png [14:03] yeah, I uninstalled zoom and teams. [14:04] also the slack linux channel is horrible. I have brave set up so it doesn't do tabs and instead all browser windows show up on alt-tab. [14:04] (meaning rofi) [14:04] s/linux channel/linux port/ [14:05] meanwhile I'm installing pulsemixer. [14:05] xheimlich, in alsamixer, can you umute the mic pressing M? [14:06] Can't. Usually I have internal mic and speaker perma muted because the baby sleeps in my office in the mornings and afternoons. [14:06] it's not a case of that. [14:06] (getting pulsemixer.......) [14:07] check alsamixer to enable said mic [14:09] (We were discussing the headphone. It works with an external USB sound card too. Just not when plugged in straight into the laptop.) [14:09] somehow apt is stuck at Progress: [ 80%]. I'll report back. [14:10] sry, my mistake [14:10] what the hell, kitty didn't repaint the bottom of the window. it's been done for a while. [14:12] yeah. without a headphone plugged in, pulsemixer shows the built-in audio analog stereo fine. [14:12] plugging in a headphone makes it gray out. [14:13] https://pasteboard.co/1jSli6Z0502N.png [14:17] anyway, I think tonight I'll just power cycle the thing. [14:17] I need to get back to work. [14:32] HI! Whats wrong with this deboostrap line that it actually creates a file called --include=net-tools ? https://bpa.st/WENQ [14:32] for some reason its not interpeting it as a valid command? [14:33] transhumanist: try net-tools,iputils-ping,... (without spaces) [14:34] hola? [14:34] hi? [14:34] ah ok I also notice its out of order with the options as listed in the man pages does that matter [14:35] transhumanist: no [14:35] ok thanks a lot we will see that's great! [14:36] hola}?? [14:37] !es [14:37] En la mayoría de los canales de Ubuntu, se habla sólo en inglés. Si busca ayuda en español entre al canal #ubuntu-es; escriba " /join #ubuntu-es " (sin comillas) y presione intro. === Polo is now known as money === JESS is now known as jess [15:15] Having intermittent SSL issues with 22.04 Postfix 3.6.4/OpenSSL 3.0 [15:16] 2 clients (both Java/JavaMail) get intermittent issues when connecting: [15:17] warning: TLS library problem: error:0A0003F2:SSL routines::sslv3 alert unexpected message:../ssl/record/rec_layer_s3.c:1584:SSL alert number 10: [15:17] How do I best report this? Expecting an incompatibility issue between OpenSSL 3.0 and JavaMail mostly [15:18] you should report that those clients should not be allowed to connect to the internet anymore [15:19] Or: fixing it would be a shame as it may fix an issue that skiddies will have [15:20] Don't even get me started on the version of the JavaMail package that at least one of them runs... [15:21] But still: best way to report issues? [15:32] hi all [15:32] I am having network (wifi) issues on my fresh ubuntu 22.04 install via live usb [15:33] it's a rtl 8822 BE [15:33] Nothing too crazy [15:34] I had a look but couldn't find any DMKS or whatever it is driver for that specific chipset [15:35] I also then found a few github projects saying their thing could basically make it run with dkms driver [15:35] because it's foundationally identical I think maybe it just doesn't identify under the ubuntu device lists or something [15:35] the closest match I found on apt was I think the 8811 [15:36] which I'm pretty sure would probably work just fine but [15:36] any advice appreciated -- I can provide some more info as well but don't want to flood the channel [15:39] (Good thing Diet Coke is not here! Talk about flooding the channel!) [15:39] !paste [15:39] For posting multi-line texts into the channel, please use https://paste.ubuntu.com | To post !screenshots use https://imgur.com/ !pastebinit to paste directly from command line | Make sure you give us the URL for your paste - see also the channel topic. [15:40] Mentos, odds are if you didn't find it with apt, its not in ubuntu repo. Some of those realtek drivers have to be installed manually cuz some weird license issues makes them non distritutable. === Polo is now known as money [15:49] a bit strange that an increasingly number of users report problems with their rtl network adapters [15:49] on 22.04 [15:52] Mentos: did you try rtl8821ce-dkms ? [15:54] Mentos: `apt install rtl8821ce-dkms` [15:59] gconftool-2 -t bool --set /apps/gnome-terminal/profiles/Default/scrollback_unlimited 1 <<< this appears to do nothing anyone know why? is a log out and log back in required or something [16:01] I am on Ubuntu 22.04 [16:01] KBar: but it's the 8822 though [16:01] produces no errors though [16:01] I will try [16:01] it looked like the tools I saw were basically to fool the identifier to use the ""wrong"" driver [16:01] which is ofc like 100% compatible [16:02] I will try though [16:03] it makes it hard because I have to use my phone as a hotspot because it has no wifi lol [16:03] Mentos: ?? it has modules for 8822 the name is confusing [16:03] er ethernet [16:03] check the package content [16:03] KBar: the package for 8821 has 8822 ? [16:03] can you link me [16:03] <3 [16:04] Mentos: https://packages.ubuntu.com/search?searchon=contents&keywords=rtl8822&mode=filename&suite=jammy&arch=any [16:04] I feel frustrated by the whole thing tbh because I know the driver WILL work [16:04] you could do with apt-file, but its not installed by default [16:04] `apt-file list pck-name` [16:04] so why isn't the device ident more like, either signed like windows for a whole host of devices [16:04] or soft/fuzzy logic [16:05] It's going to be a problem for people in the future because they make such arbitrary chips for random items let alone whole models [16:05] and Ethernet is oft expected to be added via usb-c [16:05] as with my device [16:05] anyway I will network it up using my phone and give it a go [16:05] thanks! [16:05] did you install the package? [16:11] one moment i'm setting up a bluetooth PAN to my desktop -- easier than phone hostpot [16:11] hotspot* [16:21] ya cuz plugging a cable between phone and pc is difficult [16:29] it is when all it's non-usb-c ports are "dodgy" [16:29] aka propping the cable/device up to work reliably [16:29] xD [16:29] though windows 10 has confused me [16:30] it used to be a trivial thing [16:32] meh sidebarring that cause legit windows 10 has tried to transition it to the new UI but missed it or something [16:32] to wifi we go [16:47] Urgh ok usb was totally unworkable without a usb-c to usb-c cable [16:48] it was dropping every few seconds even [16:48] but managed to get bt PAN working from my phone [16:48] (again they really messed up the UI for where/how lol) [16:48] ok trying now -- sorry for delays, it's frustrating to NEED networking but not have networking despite having a pretty dang generic realtek lol [16:50] Mentos: wich kernel are you on currently? [16:52] am currently doing a (second since install) 500mb upgrade [16:52] so will let you know once that completes/reboots [16:53] I am not entirely sure if it's relevant though -- afaik I just need a compatible dkms driver (third party to some degree possibly) and have the system go "yep, use this" [16:54] from what I was finding, that's basically what the tools on github did in a more robust way than ubuntu and then forced/faked it to load properly or something [16:54] it's not going very fast unfortunately because [16:54] Mentos: most cases realtek chipsets are kernel itchy, works on one and not on another [16:54] well if it's dkms as I have seen then it's at a minimum outside the kernel afaik [16:54] could be wrong [16:54] it should show up as a "third party" driver [16:55] and again if I had like a 8811 from what I understand it'd work perfectly [16:55] and I think the 8822 just added newer wifi specs lol [16:55] Mentos: you might wanna checkup some recent bugs like; bug #1972091 [16:55] ie "n" onwards [16:55] Bug 1972091 in rtl8821ce (Ubuntu) "rtl8821ce wifi not working ubuntu 22.04" [Undecided, Confirmed] https://launchpad.net/bugs/1972091 === PsiloCybin is now known as Psilo-mobile [16:56] what is the difference between Ubuntu Server regular install and Ubuntu Server (minimized)? it says that the minimized version has a "small runtime footprint in environments where humans are not expected to log in". so if i plan to use this server via ssh, should i be using the regular install? [16:56] ubottu: 8821ce is the driver I was just told to try [16:56] Launchpad bug 8678 in control-center (Ubuntu) "Gnome session will not start when no audio device present" [Medium, Fix Released] [duplicate: 8821] https://launchpad.net/bugs/8678 [16:56] er lotuspsychje * [16:56] but I am unsure if, without said random tools, it will actually allow itself to use that [16:56] given it's [16:57] the "more robust tool" I saw was basically using fuzzy logic for it I belief [16:57] instead of direct identifiers [16:58] also wonder if, just randomly, I might have better luck with say 20.04 [16:58] or 18.04 [16:58] andro, where did you read that? [16:58] oerheks: both options are available [16:59] I am unsure how you would exactly list all the packages of both [16:59] in theory say, synaptic should be able to... ? [16:59] oerheks: its on the ubuntu server install screen [16:59] word for word [16:59] andro: from my experience [16:59] oh i see https://wiki.ubuntu.com/Minimal [16:59] the server install wont even do xorg [17:00] it's purely CLI [17:00] so no libre-stuff etc [17:00] well, on both you need to install the ssh service [17:00] no you don't... ? [17:00] on literally either of them ? [17:00] lolz [17:00] please easy on the enter mentos [17:01] I don't need Xorg [17:01] this will be a server machine [17:02] andro, ignore those comment.. server does no xorg/wayland [17:03] that's what I said [17:03] and that is the core difference [17:03] why does it say that the minimized environment is one where humans are not expected to log in? [17:04] and also won't include anything ie libre etc [17:04] andro: where? [17:04] sounds weird [17:05] Mentos: in the server install screen, it says: Ubuntu Server\n The default install contains a curated set of packages that provide a comfortable experience for operating your server.\n Ubuntu Server (minimized)\n This version has been customized to have a small runtime footprint in environments where humans are not expected to log in. [17:08] see those minimized images as host for docker or a service. [17:09] andro: it's just minimized more aka no gui side at all which eliminates a lot of requirements [17:09] as I say there SHOULD be a page where you can view each specific forks package requirements [17:09] but not any easy tool to compare them directly [17:10] but that's ESSENTIALLY the difference between the two, and nothing to do with "if humans log in" [17:10] not sure where you read that thus why I asked for a link [17:10] they both come stock with SSH part of the same kernel ready to go [17:10] they will both have you make "a user" [17:19] i think it means to say that nerds arent humans [17:19] so logging in through ssh doesnt count [17:21] Hello [17:22] I need to know exactly which dates of patch is installed in my ubuntu.. If someone open this url [17:22] https://ubuntu.com/security/CVE-2022-1664 [17:22] Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.t... [17:23] you can see that for bionic one it is resolved in Released (1.19.0.5ubuntu2.4) [17:23] look at the package for your version, then check out launchpad [17:23] ... if you're not running atleast bionic... [17:23] then yeah [17:23] Hmm [17:24] https://launchpad.net/ubuntu/bionic/+source/dpkg [17:24] This is my OS details [17:24] DISTRIB_ID=Ubuntu [17:24] DISTRIB_RELEASE=18.04 [17:24] DISTRIB_CODENAME=bionic [17:24] DISTRIB_DESCRIPTION="Ubuntu 18.04.6 LTS" [17:24] NAME="Ubuntu" [17:24] Uploaded: 2022-05-25 [17:24] !paste | tanul1989 [17:24] tanul1989: For posting multi-line texts into the channel, please use https://paste.ubuntu.com | To post !screenshots use https://imgur.com/ !pastebinit to paste directly from command line | Make sure you give us the URL for your paste - see also the channel topic. [17:26] This are my OS details: DISTRIB_ID=Ubuntu, DISTRIB_RELEASE=18.04, DISTRIB_CODENAME=bionic, DISTRIB_DESCRIPTION="Ubuntu 18.04.6 LTS", NAME="Ubuntu" , [17:26] VERSION="18.04.6 LTS (Bionic Beaver)", ID=ubuntu, ID_LIKE=debian, PRETTY_NAME="Ubuntu 18.04.6 LTS", VERSION_ID="18.04" [17:26] i already gave the answer, read back [17:28] oerheks, Oh ok.. Microsoft told me to update the OS to at least 2022.05.31.. As per my understanding this update is already in my node.. I just wanted to check if its already there oo not [17:28] How to check that [17:29] apt list or apt-cache policy [17:30] ok.. just checking.. the command will be apt list dpkg right?? [17:30] try it? [17:31] sure.. [17:33] The output of apt list is dpkg/bionic-updates,bionic-security,now 1.19.0.5ubuntu2.4 amd64 [installed,automatic] [17:33] N: There is 1 additional version. Please use the '-a' switch to see it [17:34] I think it has the the correct version right oerheks [17:35] yes you do. [17:41] hmm.. I don't know why prisma cloud is giving this vulnerability CVE-2022-1664.. And, suggesting me to update the version to 1.20.10 [17:41] Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.t... === vxwarlock is now known as vx_darkfallen [17:42] tanul1989: CVE detecting tools may simply be checking the software version, not the actual presence of the vuln. If you're using an old but patched software version (like Ubuntu does all over the place), you may still be told about the CVE even if it isn't actually there. [17:43] tanul1989: If you have someone who skilled at cybersecurity in your corner, you could ask them to try and hit the vulnerability to see if it's there or not. [17:43] oh ok.. So that's the game [17:43] tanul1989: This is why penetration testers exist - nothing tells you a vuln exists like having someone exploit it, and if the person exploiting it also happens to be on your side, then everything's good. So long as you prepare for any mayhem that ensues when the vuln is exploited (so probably don't run a penetration test on production!). [17:44] https://snapcraft.io/cvescan [17:48] actually this cvescan I can't install.. Its a Azure kubernetes node [17:49] But that is problem with prisma cloud. Now my security team is forcing me to resolve them.. Where as they are actually already resolved.. [17:49] tomreyn, Are you here? [17:50] For example I have just checked for one more CVE-2022-1292.. Its in openssl.. And resolved in Released (1.1.1-1ubuntu2.1~18.04.17) [17:50] The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced b... [17:50] oerheks, arraybolt3[m], But when I'm checking my version then this is installed 1.1.1-1ubuntu2.1~18.04.19 [17:51] I think this is also the same thing which arraybolt3[m].. Is referring Am I correct [17:51] the last number is higher than 17, so .. [17:51] The vulnerability patch is already there but prisma is showing on the basis of version.. Am I correct?? [17:52] yes mine one is higher than 17.. [17:52] prisma cloud, is it in our repos? [17:52] if not, contact the maintainer? [17:53] Hmm.. i need ot check with the prisma cloud community [17:54] im a subtraction expert, and actually 19 is two higher than 17 [17:55] amazing... [17:57] Prisma cloud already has a slack channel.. Asking over there.. What's going on with them [18:01] sexchat [18:01] sexchat [18:02] !ot > AntiGamerPlayzz [18:02] AntiGamerPlayzz: Please see my private message [18:02] ? [18:02] you gotta put /j first [18:02] i.e. /j #sexchat [18:02] L [18:04] windows: i hope this dosent have a virus mac os:if its on the app store i can run it linux: i hope this command dosent take forever to fill out [18:04] windows: i hope this dosent have a virus. mac os:if its on the app store i can run it linux: i hope this command dosent take forever to fill out [18:04] AntiGamerPlayzz: This is the Ubuntu support channel. Off-topic discussions are generally not permitted here. [18:13] Last week I added a ZFS pool to my Ubuntu Desktop 22.04 install. Today, I found it completely removed. I had to import it by hand for it to become present again. What's the correct way to add pools to Ubuntu so I don't have to fight the OS? :( [18:14] https://ubuntu.com/tutorials/setup-zfs-storage-pool#1-overview handy wiki [18:15] javaJake: there are known bugs around on 22.04 + zfs + encrypted aswell (if thats your case) [18:15] I'm not doing anything fancy. I am using a vanilla Ubuntu 22.04 Desktop with the official ZFS support enabled. I don't tweak my system much at all. I used all the included zfs/zpool tools that are installed by default. [18:15] oerheks: this is what I did [18:16] Hi, all. What is the safest and most reasonable way to uninstall old kernels? In the past year or so, I built mainline kernels from source and installed them (mostly to try new features). I am currently running 5.16.0+ on Ubuntu 22.04. I would like to remove all others. https://termbin.com/6kfb [18:16] lotuspsychje: I don't use encryption. The only ZFS option I changed is the mountpoint for the new pool. [18:16] one small question does dpkg version 1.20.10 comes with ubuntu18.04.6 LTS [18:17] ok, then the bug prob wont be your case then javaJake [18:17] manwhowouldbekin: sudo apt remove [18:17] How did you install them? You can autoremove a lot of headeras nd stuff, then just apt remove the rest.... [18:17] manwhowouldbekin: I would not recommend removing all of the native(supported) kernels [18:17] i have dpkg 1.19.0.5 on bionic tanul [18:19] Me too have the same version [18:20] nope, there is no such 1.20.10 .... https://launchpad.net/ubuntu/+source/dpkg [18:20] I don't know what prisma cloud wants.. I think they have some place from where they get 2 know the latest version of packages and start throwing the vulnerabilities [18:21] and unlikely it will be backported, you will get bugsfixes, but numbering stays the same [18:21] you might want to switch to Jammy 22.04... [18:21] oerheks, is it.. Man what is happening with prisma cloud. Can some one suggest how to share a screenshot here [18:21] I'll show you the prisma screen shot [18:22] prisma is not under our support. why do you need a higher dpkg? [18:22] it got the latest bugfixes, so.. [18:23] tanul1989: third party software may be unaware of how Ubuntu backports security fixes. See: https://ubuntu.com/security/notices and https://ubuntu.com/security/cves [18:24] I don't want latest.. The thing is that our prisma cloud is showing that dpkg version 1.20.10 has resolved this cv 2022-1664.. My point is when this version of package doesn't exist then how they are referring that as a solution [18:25] leftyfb, How can I distinguish native(supported) kernels from others? Are native ones the ones I have not built and installed? [18:25] tanul1989: again, prisma cloud is probably not aware of Ubuntu's security procedures. Here's the CVE you are referencing: https://ubuntu.com/security/CVE-2022-1664 [18:25] Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.t... [18:25] tanul1989: What exactly Prisma Cloud does, we have no idea, as we have no control over them or what they do. You might be able to file a bug report with them or contact their support so they can fix their software. [18:25] tanul1989, but you found out already for bionic one it is resolved in Released (1.19.0.5ubuntu2.4) [18:25] so, it does not match their story [18:25] manwhowouldbekin: yes [18:26] Yeah not a problem. But thank you so much. for redirecting me in correct direction and help resolving the things.. Really helpful. Thank so very much [18:26] tanul1989: You'd be surprised what some companies outside the Linux world tell people to do to their Linux systems. I saw some company's technical support tell someone to try to install a driver for Linux kernel 5.19 on an Ubuntu system with Linux 5.19 is still experimental AFAIK. Prisma Cloud having a meltdown over a misunderstanding is not all that surprising to me, sadly. [18:28] hmm correct. Its been 8 days.. I'm talking day and night with different people here, microsoft.. Updating aazure kubernetes, its nodes.. Asking in so many communities. Sleeping for max 3 to 4 hours in a day.. And this is what is happening [18:30] tanul1989: I'm so sorry. That sounds awful. As a general rule, if your Ubuntu system is fully updated, you're good. And you can always double-check against the Ubuntu security advisories if you're unsure. Here's the search tool: https://ubuntu.com/security/cves [18:33] Thank you so much for sharing.. I'll keep that in my notebook.. First thing in the morning.. On slack channel no one is replying in prisma cloud.. First thing in the morning I'll connect with the team who hosted prisma cloud and check with them on this [18:34] In my node this is clearly showing that security updates are installed using uattended-upgrades...dpkg/bionic-updates,bionic-security,now 1.19.0.5ubuntu2.4 amd64 [installed,automatic] [18:36] > to try to install a driver for Linux kernel 5.19 on an Ubuntu system with Linux 5.19 [18:36] I mean... Those things match lol ? [18:36] Mentos: s/with/when [18:36] Meant to say "to try to install a driver for Linux kernel 5.19 on an Ubuntu system, when Linux 5.19 is still experimental AFAIK." [18:37] (Ubuntu Kinetic, the latest development version, is still on kernel 5.15.) [18:37] but if that's what they're running.... [18:37] that still makes sense [18:37] ok.. See ya.. Take care.. [18:37] It may be ""experimental"" [18:37]