| === aaguhagegaooeg is now known as westor | ||
| === westor is now known as Guest2739 | ||
| arraybolt3[m] | (In case anyone was alarmed seeing ArrayBolt3Quasse, that was just me testing for a Quassel IRC bug, no one's trying to hijack my username or anything.) | 01:25 |
|---|---|---|
| rob0 | well, I am, but I have not yet been caught! | 01:40 |
| arraybolt3[m] | rob0: LOL | 01:41 |
| edjin | hi all | 01:52 |
| arraybolt3[m] | edjin: Hello! How can we help you? | 01:58 |
| edjin | arraybolt3[m], I'm looking to learn, I don't want to get in the way. Thanks for asking. | 02:01 |
| arraybolt3[m] | No problem, and thanks for coming! | 02:01 |
| === ootput5 is now known as ootput | ||
| jhutchins | 1049 nicks, maybe a dozen are actuall active day to day. | 02:28 |
| jhutchins | Maybe a couple of dozen. | 02:28 |
| === Scotty_Trees3 is now known as Scotty_Trees | ||
| === Menzador is now known as [m]enzador | ||
| === [m]enzador is now known as Menzador | ||
| === KBar1 is now known as KBar | ||
| === Bencraft14192 is now known as Bencraft1419 | ||
| === ootput8 is now known as ootput | ||
| === maestronolte is now known as Guest35 | ||
| yuzi | Hi | 08:45 |
| yuzi | I have deleted a usergroup using groupdel group | 08:46 |
| yuzi | now when i list groups it gives | 08:46 |
| Lantizia | Are there any X.org commands I can use to do any diagnostics? | 08:46 |
| yuzi | groups: cannot find name for group ID 999 | 08:46 |
| KBar | yuzi: `getent group NAME/GID` | 08:46 |
| yuzi | what does that do | 08:47 |
| Lantizia | I've got a situation where if I VNC in then the screen looks like it froze yesterday at 4pm and it won't take any input (almost like that was the last pixels to be in the buffer) | 08:47 |
| Lantizia | and other apps (like NoMachine) claim there is no running X server | 08:47 |
| Lantizia | yet no errors in the X.org logs and all the files in /tmp, and ps -A... would seem to suggest it's still running with all apps | 08:47 |
| arraybolt3[m] | Lantizia: Best way to check for a running X server would be to look for an X or X.org process using something like htop. | 08:48 |
| KBar | yuzi: it reads the group file and displays information based on the keys given | 08:48 |
| Lantizia | arraybolt3[m], yeah it's running :) | 08:48 |
| yuzi | KBar, nothing output | 08:48 |
| KBar | yuzi: so? What do you expect after deleting a group? | 08:48 |
| arraybolt3[m] | Lantizia: Weird. Sounds like it's frozen to me. I don't know what commands would do the diagnostics you're looking for, though. | 08:49 |
| KBar | It doesn't exist anymore. | 08:49 |
| Lantizia | arraybolt3[m], my guess is it has somehow frozen/crashed in a way that doesn't show in any logs nor has meant the process has died | 08:49 |
| Lantizia | yeah | 08:49 |
| yuzi | groups: cannot find name for group ID 999 | 08:49 |
| yuzi | 999 | 08:49 |
| Lantizia | this happens ALOT - it's really annoying | 08:49 |
| yuzi | KBar, I am getting this | 08:49 |
| yuzi | while listing the groups | 08:49 |
| arraybolt3[m] | Lantizia: Sounds right. What hardware are you running on, graphics hardware in particular? | 08:49 |
| KBar | yuzi: how are you listing? `groups`? | 08:49 |
| yuzi | groups | 08:49 |
| Lantizia | arraybolt3[m], it's an lappy with built in intel graphics - so the standard intel xorg/kernel drivers | 08:50 |
| KBar | yuzi: what's the output of `id`? | 08:50 |
| yuzi | only 999 | 08:51 |
| yuzi | not name KBar | 08:51 |
| arraybolt3[m] | Lantizia: Weird. You might (emphasis on might) be able to kill the X server, restart the sddm service, and then log back in remotely, but I don't know if you'll have problems trying to VNC into a system that's on the login screen. There might be a way to log in with the terminal, I dunno. | 08:51 |
| ogra | how did you add that group in the first place ? | 08:52 |
| KBar | yuzi: can you share the full output? | 08:52 |
| arraybolt3[m] | Lantizia: (Intel graphics generally work well with Linux, so I doubt graphics driver issues here.) | 08:52 |
| Lantizia | arraybolt3[m], oh yeah I can easily do that and then I'd be able to VNC/NoMachine in again - that's never an issue... of course that kills all the apps and I'm lost as to what the heck I was going over 10 different workspaces :P not to mention unsaved files | 08:52 |
| yuzi | KBar, uid=1000(ptr) gid=1000(ptr) groups=1000(popr),4(adm),27(sudo),121(lpadmin),132(docker),999 | 08:53 |
| arraybolt3[m] | Lantizia: Can you run "lspci | nc termbin.com 9999" and send the link it spits out? That will give me details about your hardware that may be helpful (like the exact model of your CPU, if I'm not mistaken). | 08:53 |
| KBar | yuzi: relogin/reboot | 08:53 |
| Lantizia | arraybolt3[m], https://termbin.com/by07 | 08:54 |
| yuzi | KBar, yeah! | 08:56 |
| KBar | yuzi: what? | 08:56 |
| yuzi | KBar, sometimes all you need in life is reboot | 08:56 |
| arraybolt3[m] | Lantizia: Odd, I think that processor should have a graphics chipset that works. | 08:56 |
| yuzi | KBar, what do you work | 08:57 |
| arraybolt3[m] | Lantizia: Have you done any specific customizations to your system, especially in the area of graphics (like GNOME extensions or whatnot)? Also, do you notice this problem happen when a specific program is open? | 08:57 |
| KBar | yuzi: join #ubuntu-offtopic for casual chit chat. | 08:57 |
| Lantizia | arraybolt3[m], yeah the i7-7660U as iris built in | 08:57 |
| yuzi | KBar, why not here or pm? | 08:58 |
| arraybolt3[m] | yuzi: We generally reserve this channel for Ubuntu tech support, especially when other support sessions are happening. | 08:58 |
| Lantizia | arraybolt3[m], mostly this occurs when docking/undocking or when connecting/reconnecting via nomachine | 08:58 |
| KBar | yuzi: this channel is for Ubuntu support only. Please, stay on topic or join #ubuntu-offtopic. | 08:58 |
| Lantizia | arraybolt3[m], so basically stuff that interacts with xorg on a basic level somehow | 08:58 |
| yuzi | okk KBar thanks for help bye | 08:59 |
| KBar | Don't mention it. See you around. | 08:59 |
| yuzi | JOIN #off-topic | 08:59 |
| arraybolt3[m] | Lantizia: That makes sense. NoMachine might be causing the problem then. | 09:00 |
| arraybolt3[m] | yuzi: /join #ubuntu-offtopic | 09:00 |
| yuzi | yeah it was a typo | 09:00 |
| Lantizia | arraybolt3[m], yeah.. like I say vino-server was running in the background too when I tried to connect via nomachine this morning (only for it to say no X display available)... so I VNC'd in instead ... only to find the desktop showing exactly as it was around 4pm yesterday (as shown by the frozen time in the taskbar)... which is when I disconnected via nomachine yesterday | 09:01 |
| Lantizia | so I think that was the last thing in the buffer that the VNC server received from X.org | 09:01 |
| Lantizia | however killing VNC and starting it again (via SSH) doesn't work :P so I can't even see that now | 09:01 |
| === diskin_ is now known as diskin | ||
| arraybolt3[m] | Lantizia: Maybe it's having two remote servers running at the same time that's gumming things up? (Also, Vino isn't necessarily the best VNC server to use - I think it's been deprecated or something.) | 09:02 |
| arraybolt3[m] | Yep, Vino is now unmaintained. | 09:02 |
| arraybolt3[m] | Has been since 2020. | 09:03 |
| Lantizia | yeah I know that about vino... tbh vino was only installed a month or so ago as a get out of jail for if this situation occurred again | 09:03 |
| Lantizia | the issue has been ongoing long before I popped that on here | 09:03 |
| arraybolt3[m] | Lantizia: I've seen multiple people having similar problems with NoMachine - perhaps you can try using a different remote desktop solution as your primary solution and see if that resolves the issue? | 09:04 |
| Lantizia | there isn't really one :) other than maybe rdp which has many other bugs | 09:04 |
| Lantizia | tbh I also use nomachine on a headless term serv box - that's the paid version which has it's own integrated version of x.org (so you don't need the ubuntu version of x.org installed at all) and that works just great | 09:05 |
| arraybolt3[m] | Lantizia: There's also x11vnc. | 09:06 |
| Lantizia | so I think it's something to do with how nomachine (the free version) hooks into the :0 display of the physical gpu that xorg runs on | 09:06 |
| Lantizia | but then again - i get these kinds of issues when docking/undocking so maybe it's not nomachine | 09:06 |
| arraybolt3[m] | That would make sense, but sadly I have no clue how to make NoMachine work. | 09:06 |
| Lantizia | VNC is balls though - sorry :P there is no other way to say it... horrible dual screen support and SLLoooow | 09:06 |
| arraybolt3[m] | Lantizia: I remember having similar problems looking for a good remote desktop solution... | 09:07 |
| Lantizia | yeah - even the older nomachine 3 tech (not mostly embodied in x2go) isn't much of an option now that certain apps like firefox don't play nice with it due to the hw accelerated graphics etc | 09:08 |
| Lantizia | *now mostly | 09:08 |
| Lantizia | or I might be thinking nomachine 2 tech actually - whichever one was open source-ish | 09:08 |
| Lantizia | I *really* hope that wayland/pipewire gets a proper solution going that doesn't depend on following MS's approach with RDP and doesn't depend on something slow like VNC | 09:09 |
| Lantizia | it's OVERDUE :) | 09:09 |
| arraybolt3[m] | Lantizia: Not all VNC systems are garbage. | 09:10 |
| arraybolt3[m] | I can see some that look decent here: https://www.tecmint.com/best-remote-linux-desktop-sharing-software/ | 09:10 |
| alkisg | Eh, if "implementing a protocol" is one time hard, "designing and implementing a new protocol" is two times harder | 09:10 |
| alkisg | VNC=simple, RDP=supports remotefx etc for video; good implementations of these should be enough | 09:11 |
| Lantizia | right but I don't see RDP as an open standard - so for me that shouldn't be completely depended on | 09:11 |
| arraybolt3[m] | alkisg: Meh, I disagree there - not all protocols are easy to reverse-engineer, and even ones with clear specs might have annoying limitations. GIMP had great success implementing the .xcf format rather than trying to make .psd work. | 09:11 |
| Lantizia | I'm all for VNC if there is a decently quick version, that is also free, and supports dual screen?? arraybolt3[m] do you know of one? | 09:12 |
| alkisg | https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rdpbcgr/5073f4ed-1e93-45e1-b039-6e30c385867c | 09:12 |
| alkisg | The specs are open, it's not about reverse engineering | 09:12 |
| arraybolt3[m] | alkisg: Yeah but again, open != easy to implement. xrdp is still fighting with that one. | 09:12 |
| Lantizia | plus you've got specs there that are clearly written with a completely different OS in mind | 09:13 |
| alkisg | Indeed, but also new protocol that actually takes care of hard things like forwarding video != easy to implement | 09:13 |
| arraybolt3[m] | Lantizia: The TecMint article I linked to has some good-looking ones (TigerVNC looked hopeful) | 09:13 |
| Lantizia | what is tailored for windows... isn't what would be the best approach for wayland/xorg | 09:13 |
| MilesPrower_ | hold what are we trying to do? | 09:13 |
| MilesPrower_ | hold up** | 09:13 |
| alkisg | Lantizia: read my last review there: https://epoptes.org/documentation/vnc/ | 09:13 |
| Lantizia | alkisg, you've just reviewed viewers there? | 09:14 |
| arraybolt3[m] | MilesPrower_: This started as a "why is X hanging" problem, then went to "different remote desktop solutions" and has now devolved into a proprietary-vs-OSS debate. | 09:14 |
| MilesPrower_ | ^ ty king | 09:14 |
| alkisg | Lantizia: viewer and servers but only those that were suitable for use with our epoptes tool we're developing | 09:14 |
| alkisg | I.e. only those that support reverse connections | 09:14 |
| arraybolt3[m] | It's also getting a bit off-topic, which this channel doesn't like all too much sometimes. | 09:14 |
| Lantizia | oh I've used epoptes before with ltsp | 09:15 |
| alkisg | Yeh I'm the developer of both ;) | 09:15 |
| Lantizia | I thought the name rung a bell :) | 09:15 |
| Lantizia | we (staffslug.org.uk) use it to run our PC's for our LUG workshops :P | 09:15 |
| Lantizia | when you've got something like Ubuntu MATE though.. that has *no* VNC server built in (which is why I've sometimes turned to older knowledge like vino)... what VNC server should be used that is... 1) free, 2) going to easily connect to the existing displays (more than one), 3) quick! and not laggy, 4) going to support dual screens so that the VNC viewer can know which remote display should be mapped to which local display | 09:18 |
| Lantizia | I have *yet* to find that VNC server :P | 09:18 |
| Lantizia | I'm happy to hear a recommendation :P | 09:18 |
| alkisg | You can just run x11vnc over ssh, no need for a running vnc server (which also would be unenrypted usually) | 09:19 |
| alkisg | It does support multiple screens or screen selection with command line parameters | 09:19 |
| vasilakisfil | hello, I have been using ubuntu the past 15 years and I can manage quite well console etc, but still some things I would like to learn more. Is there any course/certificate that will guide me around advanced things, like systemctl, advanced commands, grub/boot etc ? | 09:21 |
| Lantizia | alkisg, right but that's not to existing gpu displays right? | 09:24 |
| alkisg | Lantizia: you just need that command before, to discover the running xorg display: /usr/share/epoptes-client/get-display | 09:24 |
| alkisg | DISPLAY=:0 | 09:24 |
| alkisg | XAUTHORITY=/home/alkisg/.Xauthority | 09:24 |
| alkisg | As long as you export the appropriate vars, you can connect x11vnc to the existing display | 09:24 |
| alkisg | It also works from windows clients to linux servers (internal windows ssh + realvnc viewer.exe) | 09:25 |
| Lantizia | (mate-panel:19888): Gtk-WARNING **: 10:25:39.192: cannot open display: :0.0 | 09:25 |
| Lantizia | but I'm guessing that's because X.org has already frozen/crashed | 09:26 |
| Lantizia | but that's what I get when running x11vnc | 09:26 |
| alkisg | If you're running xorg normally (systemd.unit=graphical.target) it shouldn't freeze. If you ran it over some weird vnc connection, then it might be frozen until you connect from there again. | 09:27 |
| alkisg | If xorg is properly running, you should be able to export DISPLAY and XAUTHORITY and run `xrandr` and see the resolutions etc | 09:27 |
| alkisg | Even when connected via ssh | 09:27 |
| KBar | vasilakisfil: manpages to the rescue. systemctl(1) is well-documented. `info grub` is also filled with useful information | 09:27 |
| Lantizia | nah this is normal systemd.unit=graphical.target | 09:27 |
| Lantizia | alkisg, xrandr just freezes when you run it (after setting display and xauthority) | 09:28 |
| alkisg | Lantizia: and what's the output of `sudo /usr/share/epoptes-client/get-display`? It's a standalone script you can download it from github if you don't want to apt install epoptes-client | 09:28 |
| Lantizia | but that's no different than trying to run anything else either on that display via ssh | 09:28 |
| Lantizia | alkisg, I'm not using epoptes at all | 09:29 |
| Lantizia | think you've got your wires crossed there | 09:29 |
| alkisg | Nope, it's just its detection script I'm asking you to use | 09:29 |
| alkisg | That's why I said "download it from github". So that we know it's getting the correct values | 09:29 |
| alkisg | https://raw.githubusercontent.com/epoptes/epoptes/main/epoptes-client/get-display | 09:30 |
| Lantizia | sorry I've missed that - didn't see you mention github | 09:30 |
| Lantizia | got it - and that freezes too | 09:30 |
| KBar | vasilakisfil: you can apply for RH Certification Program, but for that, contact Red Hat. | 09:30 |
| alkisg | Then your xorg is frozen from unrelated reasons, not due to vnc or ssh | 09:31 |
| Lantizia | I know :) as it occurs sometimes when docking/undocking on thunderbolt too | 09:31 |
| Lantizia | ^ have mentioned that earlier | 09:31 |
| alkisg | Sure but that's a glitch in your hardware/drivers etc that's not related at all to the vnc questions that I was trying to answer | 09:31 |
| Lantizia | trouble is there is never anything in the xorg logs to show what is going on | 09:32 |
| alkisg | We can't tackle two issues at once; you need to separate the topics | 09:32 |
| Lantizia | xorg is still running, as are 10 workspaces worth of apps :) | 09:32 |
| Lantizia | alkisg, I never split them :) | 09:32 |
| alkisg | OK, anyway if you need anything regarding vnc feel free to ping me; I don't have anything to add to the crashing part, it's standard xorg troubleshooting | 09:32 |
| Lantizia | my opening line... <Lantizia> Are there any X.org commands I can use to do any diagnostics? | 09:32 |
| vasilakisfil | hmm but I am using ubuntu all day, never red hat and its derivatives, so while I respect the red hat certs, I would prefer something that is ubuntu oriented | 09:33 |
| vasilakisfil | but yeah, probably the man pages is the way to go | 09:33 |
| luna__ | Ubuntu is also having certs | 09:33 |
| luna__ | you can take | 09:33 |
| luna__ | also look at LPI | 09:34 |
| Lantizia | alkisg, if I do (as very likely I will.. after my usual hour or two of being annoyed has passed - this situation occurs alot) restart X and loose my apps... I will certainly give epoptes a go and uninstall nomachine if it gives me everything I need. I didn't realise until now that it could be used outside of the scope of LTSP | 09:35 |
| vasilakisfil | thanks, that looks interesting ! | 09:35 |
| alkisg | Lantizia: sure; in any case, troubleshooting xorg issues is much easier if you DONT involve vnc at all | 09:36 |
| luna__ | don't remember the name of the Canonical certification program however | 09:36 |
| Lantizia | alkisg, again originally I never even mentioned VNC :P | 09:36 |
| alkisg | Lantizia: yeh, I only answered when you mentioned vnc, not originally :) | 09:36 |
| alkisg | Each person here tries to help in the parts they can | 09:36 |
| Lantizia | appreciated :) | 09:38 |
| oxfuxxx | hi. | 09:40 |
| luna__ | hi | 09:40 |
| KBar | !ask | oxfuxxx | 09:42 |
| ubottu | oxfuxxx: Please don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-) See also !patience | 09:42 |
| === willow__ is now known as roughnecks | ||
| === morpheuz3 is now known as morpheuz | ||
| Liblx | for installing the newest version of weechat (or others) would you recommend using .deb files or including the repository of a program? | 09:59 |
| KBar | Liblx: if it's in the official Ubuntu repositories, install it from there. | 09:59 |
| Liblx | KBar: not the newest version that i need. so, i only can use .deb files or including repository. | 10:00 |
| KBar | Liblx: are you here to listen to recommedations? If not, you're welcome to decide for yourself. | 10:01 |
| Liblx | yes, what do you recommend, KBar? | 10:02 |
| === kvn__ is now known as kvn | ||
| === kvn_ is now known as kvn | ||
| === five613 is now known as five61 | ||
| === SteelRose_ is now known as SteelRose | ||
| === brassado is now known as sam_sepi0l | ||
| arraybolt3[m] | Liblx: I'd add the repo so you get automatic updates. The .deb might do that... but it might not. Make sure you're using an official source, of course. | 11:03 |
| arraybolt3[m] | (I'm not KBar, just FYI.) | 11:03 |
| Liblx | thank you very much, arraybolt3[m]. | 11:25 |
| === five611 is now known as five61 | ||
| Sbur3 | I want to recover my data from a 4tb sata drive. Dolphin 'sees" the partition sdb2, but I'm unable to mount and open it. Anyone willing to help? | 12:25 |
| Sbur3 | I'm downloading "boot-repair-disk" in case that could help | 12:26 |
| === Guest4458 is now known as puke | ||
| === puke is now known as Guest9327 | ||
| BluesKaj | Hi all | 12:34 |
| bittin | hey | 12:34 |
| === diskin_ is now known as diskin | ||
| === Raqbit6 is now known as Raqbit | ||
| mickey | i might be missing something but anything in ubuntu related to vpn clients is a wreck. i dont have any "vpn connections" in the activities menu like people show in some screenshots, openvpn in the network manager doesnt handle challenge responses at all, etc. | 13:07 |
| mickey | i just want to be able to conveniently connect/disconnect from a wireguard server, and i want to be able to do the same with an openvpn server that has OTP challenge-response.. not asking for anything much, not even adding/editing interfaces | 13:09 |
| mncheckm | on focal I run XDG_UTILS_DEBUG_LEVEL=99 ; cd ~/.local/share/applications/ && desktop-file-validate foo.desktop && xdg-desktop-menu install --mode user --novendor foo.desktop . at first this worked and I pinned the app to dash after searching it in activities/applications. after uninstalling a similarly named app, foo.desktop disappeared from both dash, and the applications list. it no longer appears after running the former command. I can see the | 13:14 |
| mncheckm | command completing properly. even after running update-desktop-database ~/.local/share/applications it doesn't show up inside the applications. UPDATE I fixed it... I had to remove TryExec=... line from .desktop file | 13:14 |
| === mrkubax101 is now known as mrkubax10 | ||
| === diskin is now known as Guest4082 | ||
| === diskin_ is now known as diskin | ||
| === maestronolte is now known as Guest35 | ||
| === Guest35 is now known as maestronolte | ||
| === Forza_ is now known as Forza | ||
| === ootput4 is now known as ootput | ||
| === KBar1 is now known as KBar | ||
| transhumanist | hi I am encountering this bug in make 4.3.4 on Ubuntu 22.04 https://bpa.st/XXRA I am trying to understand the work around . Any able to help? | 14:55 |
| samy1028b | transhumanist: it's been a while since I worked with makefiles. Which part are you having questions about in the changelog workaround? | 14:58 |
| oerheks | not sure who gave you that work around, our make is newer,... | 14:58 |
| oerheks | http://changelogs.ubuntu.com/changelogs/pool/main/m/make-dfsg/make-dfsg_4.3-4.1build1/changelog | 14:58 |
| transhumanist | https://lwn.net/Articles/810071/ the error during compile seems to show it still doesnt find it I was trying to fix it in a more general way , this is facebooks fix https://github.com/facebook/zstd/commit/06a57cf57e3c4e887cadcf688e3081154f3f6db4 I am not sure if I can use this some how as a patch file | 15:01 |
| ubottu | Commit 06a57cf in facebook/zstd "[build-issue] More portable header prefix usage (#) (#1987)" | 15:01 |
| oerheks | oke, but 4.3.4.1build1 is newer. | 15:02 |
| transhumanist | or how to set the git repository to that commit do I do somethign like git reset --hard on that long number? | 15:03 |
| transhumanist | guess that might work... let me try it | 15:05 |
| transhumanist | OMG all that and just the dev packages were not installed...sigh | 15:09 |
| sunfroggi | hey | 15:11 |
| sunfroggi | on my mac im getting virtual box error | 15:11 |
| arraybolt3[m] | sunfroggi: Let me guess... M1 Mac? | 15:12 |
| sunfroggi | my mac is reebooting rn | 15:12 |
| sunfroggi | Nope | 15:12 |
| sunfroggi | its an old one | 15:12 |
| arraybolt3[m] | Ah. OK. | 15:12 |
| sunfroggi | let me log into my log user | 15:12 |
| sunfroggi | i will get the information | 15:12 |
| sunfroggi | ok | 15:13 |
| arraybolt3[m] | sunfroggi: If it's an M1, probably the error you're getting trying to start Ubuntu will be the most helpful. | 15:13 |
| arraybolt3[m] | *NOT an M1 (gosh, what's wrong with my typing?) | 15:13 |
| sunfroggi | no its 2014 | 15:13 |
| === KBar1 is now known as KBar | ||
| sunfroggi | runing macOS monterey | 15:14 |
| arraybolt3[m] | Yeah, I know, I just did a bad mistype the second time. | 15:14 |
| sunfroggi | version 12.3.1 | 15:14 |
| sunfroggi | ok i will share the error | 15:14 |
| oerheks | so is it a virtualbox error or ubuntu error? | 15:14 |
| sunfroggi | kernel driver not installed error | 15:15 |
| sunfroggi | im on my laptop let me send the error first | 15:15 |
| oerheks | !paste | 15:16 |
| ubottu | For posting multi-line texts into the channel, please use https://paste.ubuntu.com | To post !screenshots use https://imgur.com/ !pastebinit to paste directly from command line | Make sure you give us the URL for your paste - see also the channel topic. | 15:16 |
| === KBar1 is now known as KBar | ||
| sunfroggi | https://imgs.search.brave.com/EQZlOV3WRlRVf6cZLxtdV9xOihWTlRbEUvFd3GJ8bIE/rs:fit:600:402:1/g:ce/aHR0cHM6Ly9pLnBp/bmltZy5jb20vb3Jp/Z2luYWxzLzBhL2Fl/LzFiLzBhYWUxYjBh/OTQwY2FiOGMyZjNj/NWE4NmEyOGZiN2Ey/LnBuZw | 15:17 |
| sunfroggi | this is the exact error | 15:17 |
| oerheks | oh no, a picture.. | 15:17 |
| sunfroggi | ? | 15:17 |
| sunfroggi | whats wrong | 15:17 |
| arraybolt3[m] | oerheks: Kernel driver not installed (rc=-1908) Make sure the kernel module has been loaded successfully. | 15:17 |
| arraybolt3[m] | oerheks: where: suplibOsInit what: 3 VERR_VM_DRIVER_NOT_INSTALLED (-1908) - The support driver is not installed. On linux, open returened ENOENT. | 15:18 |
| sunfroggi | how do i do that | 15:18 |
| oerheks | so it is a virtualbox error | 15:18 |
| oerheks | https://techgenix.com/fix-virtualbox-1908-error/#:~:text=The%20rc%3D%2D1908%20error,permissions%20to%20the%20VM%20software. | 15:18 |
| oerheks | answer ^ | 15:18 |
| sunfroggi | thank u | 15:19 |
| mncheckm | recommend me a localhost scoped gui chat application please? | 15:19 |
| arraybolt3[m] | mncheckm: What's localhost scoped mean? | 15:19 |
| oerheks | chat apps that can connect to #libera https://libera.chat/guides/sasl | 15:19 |
| mncheckm | arraybolt3[m], it should not use IP, at most unix domain sockets | 15:20 |
| arraybolt3[m] | mncheckm: You have to use IP in order to access the Internet at all, so this would be restricted to chatting just between users on the same system, which Linux has a bit of support for already IIRC. | 15:21 |
| mncheckm | arraybolt3[m], I want to chat with users shown in command "who" but for security reasons the chat program should be unable to use any kind of remote network. I have a LAN that is disconnected from the internet and I can ssh between the machines, but I don't want the chat program to use the LAN at all. | 15:22 |
| arraybolt3[m] | mncheckm: Try running "man write" in a terminal - that should show you how Linux's built-in chat works, if that's what you're looking for. | 15:22 |
| mncheckm | arraybolt3[m], talk is not graphical. I wish for it to show up in the notification are or something | 15:22 |
| arraybolt3[m] | Oh right, you said GUI. Hmm... | 15:23 |
| oerheks | so, a local chat service? | 15:23 |
| mncheckm | oerheks, hm, yes, but I don't know any | 15:23 |
| oerheks | rocketchat perhaps? https://ubuntu.com/tutorials/setup-rocketchat-server-on-ubuntu#1-overview | 15:24 |
| mncheckm | basically my problem with talk or write is I don't think a GUI user would notice if I write | 15:24 |
| oerheks | it supports ssl | 15:24 |
| mncheckm | oerheks, I want it not to use networking | 15:24 |
| arraybolt3[m] | mncheckm: I think Linux gives you a notification when a write comes through to you - you could try it and see. | 15:24 |
| wez | oerheks: I hope it doesn't, ssl has been deprecated for years and is insecure | 15:24 |
| oerheks | wez, from what planet are you? | 15:24 |
| mncheckm | arraybolt3[m], I just did and it didnt | 15:25 |
| arraybolt3[m] | I thought that was TLS that was deprecated. | 15:25 |
| wez | oerheks: The planet where anything below TLS version 1.2 is considered insecure and broken | 15:25 |
| arraybolt3[m] | mncheckm: You might need to use "mesg" to enable receiving writes. | 15:25 |
| wez | oerheks: Which includes SSL | 15:25 |
| arraybolt3[m] | Try getting someone to run "mesg y" and then "write" to them, see how that works. | 15:25 |
| mncheckm | arraybolt3[m], one user says mesg y , other user says echo hi | write otheruser . but no notification | 15:26 |
| sunfroggi | i reinstalled virtual box | 15:26 |
| wez | oerheks: I suggest you upgrade | 15:26 |
| mncheckm | probably should have chatted | write oneuser for clarity | 15:26 |
| arraybolt3[m] | Crud. OK, then that won't work. | 15:26 |
| sunfroggi | but the popup for the orace america didnt pop up | 15:26 |
| sunfroggi | :( | 15:26 |
| wez | oerheks: If you are using TLS 1.2 already, then upgrade your terminology. | 15:27 |
| arraybolt3[m] | sunfroggie: Try using the permissions trick oerheks linked to. | 15:27 |
| sunfroggi | yea im following that guide | 15:28 |
| sunfroggi | https://www.youtube.com/watch?v=Ftj0LvzN5Cw | 15:29 |
| sunfroggi | im watching this | 15:29 |
| sunfroggi | ill do it this way and tell u what happeneds | 15:30 |
| arraybolt3[m] | mncheckm: You might be able to craft what you're looking for with the info here: https://superuser.com/questions/31917/is-there-a-way-to-show-notification-from-bash-script-in-ubuntu (Sorry, I have no clue what GUI program that do what you're looking for.) | 15:37 |
| arraybolt3[m] | (That do. Really...) | 15:38 |
| sunfroggi | its not working :( | 15:44 |
| sunfroggi | the error is not popping up after a reinstall | 15:44 |
| sunfroggi | i mean the allow button | 15:44 |
| sunfroggi | in security and orivaty | 15:44 |
| tomreyn | sunfroggi: you are really looking for virtualbox on OS X / Apple OS support. This channel is for Ubuntu support. | 15:46 |
| tomreyn | there is #vbox on irc.oftc.net | 15:46 |
| mncheckm | arraybolt3[m], thank you for caring :) | 15:47 |
| n25803 | hello | 15:54 |
| luna__ | hi | 15:54 |
| Release_ | greetz, when using ssh to an ubuntu box how would we connect to root dir using a sftp client like winscp ? | 16:05 |
| oerheks | Release_, enable root login, edit /etc/ssh/sshd_config > PermitRootLogin yes | 16:08 |
| oerheks | https://help.ubuntu.com/community/SSH | 16:09 |
| tomreyn | Release_: there are few scenarios where you should need to access files of user root, though. is yours actually one of them? | 16:10 |
| tomreyn | (is there a better way to achieve the same, with lower permissions?) | 16:10 |
| Release_ | to edit files i usually use winscp | 16:11 |
| Release_ | i find easier | 16:11 |
| Release_ | then the usual nano vim and such | 16:11 |
| Release_ | but it proofs tricky to get to root dir with winscp | 16:12 |
| Release_ | with command line its fine | 16:12 |
| tomreyn | why do you need to edit files in /root ? | 16:12 |
| Release_ | for software that runs in root | 16:12 |
| Release_ | the question wasnt why ? my question was how to access root with winscp | 16:13 |
| tomreyn | and you got your answer, and even someone suggesting that you may need to rethink your approach if you want to handle things safely. | 16:14 |
| Release_ | hm ok | 16:15 |
| Release_ | i would prefer the recommended way | 16:15 |
| Release_ | but i rather use winscp for it | 16:15 |
| Release_ | if there is a way to use the recommended way and still be able to use winscp to edit files i would prefer that | 16:15 |
| oerheks | winscp has nothing to do with it, set permissions serverside to grant root login, simple | 16:16 |
| Release_ | i wouldnt want to insist on using a possible u`nsafe way | 16:16 |
| Release_ | oerheks but tomreyn said its not recommended | 16:16 |
| Release_ | ive also reado that as well | 16:17 |
| tomreyn | software running as root is probably bad practice by either the software (it shouold drop permissions, running as a different user, unless it strictly must run as root for one of the few reasons there can be), or those setting up this software. | 16:17 |
| oerheks | sure it is discussable, you must havea reason to do so. | 16:17 |
| Release_ | that its changed not to use root login as default anymore | 16:17 |
| tomreyn | if you cnan tell us more about what this software does, we may be able to provide better recommendations | 16:17 |
| Release_ | i try to avoid runnin software as root | 16:18 |
| Release_ | as much as possible | 16:18 |
| arraybolt3[m] | Release_: I'm not sure how to make a file transfer protocol be able to get root privileges, that sounds difficult without using an insecure method. The way I would do this would be to SSH into the computer and then use "sudo" when I need to edit a file as root. You could use WinSCP to copy files you need and then edit them locally, then copy them back to a user-accessible directory and plug them in with terminal commands in SSH. | 16:18 |
| oerheks | group policies.. | 16:18 |
| Release_ | arraybolt3[m] it wont allow u | 16:19 |
| Release_ | as u arent in root yet | 16:19 |
| arraybolt3[m] | Release_: OK, then use SSH to copy the file from a root location to a non-root location and set the permissions as needed, WinSCP it out, edit it, WinSCP it into a user-accessible location, copy it over the actual file, and you're done. At this point, though, it would be easier to just use nano and vim directly on the server through the SSH session. | 16:19 |
| Release_ | that defeats the poropse of using winscp for that arraybolt3[m] | 16:20 |
| Release_ | as i mainly use winscp to edit files | 16:20 |
| tomreyn | winscp for editing configuration files is not really a good approach. | 16:20 |
| arraybolt3[m] | Release_: So you'd do "ssh user@computer.com", then "sudo nano /root/myfile", edit away, save, done. (Just throwing ideas out there.) | 16:21 |
| tomreyn | or sftp in general | 16:21 |
| Release_ | yea ive read that somewhere as well tomreyn | 16:21 |
| Release_ | that is may work but may not be always safe and may result in weird results | 16:21 |
| tomreyn | if this software really must run as root (i'm not convinved, yet), you should learn about software configuration deployment | 16:22 |
| tomreyn | actually in either case you should, if oyu need to make such changes regularly | 16:22 |
| amosbird | Hi! What's the correct way to get current LLVM_VERSION_FULL of a given LLVM_VERSION on ubuntu? For example, I'd like to install llvm-14 but before installing it, I'd like to know if the version is 14.0.5 or 14.0.6 | 16:22 |
| arraybolt3[m] | amosbird: Try running "apt-cache show llvm-14", maybe. | 16:23 |
| arraybolt3[m] | On my Jammy system it's 14.0.0. | 16:23 |
| tomreyn | and thus does not give away which minor version it is | 16:24 |
| arraybolt3[m] | (If you want more concise output, do "apt-cache show llvm-14 | grep Version") | 16:24 |
| arraybolt3[m] | tomreyn: I figured it was actually 14.0.0, i.e., major version bump with no subsequent minor version bumps. Do things no always work like that? | 16:25 |
| arraybolt3[m] | s/no/not/ | 16:25 |
| tomreyn | sorry, i meant it does not give away the patch version, major and minor versions are probably 14.0, but the one after that you won't be able to tell from inspecting the apt version | 16:25 |
| arraybolt3[m] | Well crud. I guess that solution won't work, in which event I'm out of ideas. | 16:26 |
| tomreyn | apt changelog llvm-14 should tell | 16:27 |
| oerheks | next Kinetic will have 14.0.6-1 https://launchpad.net/ubuntu/+source/llvm-toolchain-14 | 16:28 |
| arraybolt3[m] | tomreyn: Trying that, I can see the minor number (the .0 at the very end) isn't always .0 in all version numbers (i.e., 13.0.1 is in there), but it is at .0 for the most recent one in Ubuntu (14.0.0). | 16:29 |
| tomreyn | hmm, maybe this means i'm wrong and a debian package version of 14.0.0-something really means the software will consider itself to be 14.0.0 or 14.0.0-something, too. | 16:29 |
| tomreyn | amosbird: which ubuntu version are you running there? | 16:31 |
| arraybolt3[m] | tomreyn: The llvm-14 package in Jammy has a changelog timestamp of 24 Mar 2022, and the LLVM website has 14.0.0 released on 25 Mar 2022, so I'm inclined to think it really is 14.0.0 that's in Jammy. | 16:32 |
| arraybolt3[m] | I also see many LLVM version numbers usually only end in 0 or 1, and this particular year they've gone a bit crazy and now have it going up to as high as 6. | 16:33 |
| tomreyn | arraybolt3[m]: thanks for looking this up. i guess, yes, 14.0.0 + backported patches in jammy | 16:33 |
| tanul1989 | Hey, hope all are doing great.. Need to ask a small query. If we are downloading any package in dockerfile or even in the linux OS using apt install.. Then is it always a suggested approach to run apt update and apt upgrade first and then install the packages. | 16:47 |
| arraybolt3[m] | tanul1989: Yes, otherwise you may end up with an older version of the package, and I think there's other bad things that can happen if you don't. | 16:52 |
| jhutchins | Remember, older versions of packages are always bad, they do not include the latest bugs and security vulnerabilities. | 16:57 |
| tanul1989 | arraybolt3[m] @jhu | 16:58 |
| arraybolt3[m] | ? | 16:58 |
| tanul1989 | yup actually same thing is happening | 16:58 |
| arraybolt3[m] | (Sorry, I'm not familiar with that term.) | 16:58 |
| tanul1989 | sorry by mistake I wrote | 16:58 |
| tanul1989 | in my docker file I'm installing libssl1.1 | 16:59 |
| tanul1989 | but because of not running update and upgrade in start I was always getting the packages | 16:59 |
| tanul1989 | having security issues | 16:59 |
| tanul1989 | arraybolt3[m], jhutchins, Thanks a lot for the confirmation.. Going forward i will always perform update and upgrade first and then run apt install packages etc.... | 17:00 |
| enigma9o7[m] | At least update before installing. | 17:00 |
| arraybolt3[m] | tanul1989: 👍️ | 17:00 |
| tanul1989 | enigma9o7[m], Correct.. | 17:01 |
| enigma9o7[m] | If you dont update the database first, you might not be getting the latest version of what you try to install. | 17:01 |
| tanul1989 | but without running upgrade the old packages with security issues doesn't remove | 17:01 |
| enigma9o7[m] | But upgrading isn't necessarily going to affect the folliwing package install, that upgrades what you already have installed. | 17:01 |
| tanul1989 | ok | 17:02 |
| enigma9o7[m] | Correct tanul good to be updated anytime, but its not related to installing something new. | 17:02 |
| sunfroggi | i couldnn not find the solution | 17:02 |
| sunfroggi | i have tired your answers and when i un/reinstall vboc | 17:02 |
| oerheks | wb sunfroggi , solution for macvirtualbox? | 17:02 |
| tanul1989 | One last question.. does upgrading has any disadvantages as only update is also helping me | 17:03 |
| sunfroggi | yea | 17:03 |
| sunfroggi | u watched 3 videos | 17:03 |
| oerheks | if that page does not help, seek support in virtualbox? | 17:03 |
| sunfroggi | i went to vbox | 17:03 |
| sunfroggi | noone is answering lol | 17:03 |
| oerheks | their..forum? | 17:03 |
| arraybolt3[m] | tanul1989: An update refreshes the package database on your system so your computer knows what software and versions are available. An upgrade actually installs the newer versions of outdated packages. | 17:04 |
| tanul1989 | oops.. Ok.. Then its necessary | 17:04 |
| tanul1989 | Thank you so much for the help.. I'll change my docker file right away.. Have a great day ahead.. Stay safe :) | 17:05 |
| arraybolt3[m] | tanul1989: You too! | 17:05 |
| Hanumaan | Unable to use the boot repair it says create partition or activate EFI partition and it is not possible : https://paste.ubuntu.com/p/GGcdZydPZB/ | 17:22 |
| oerheks | line 821 legacy Windows detected... and some more tips from that, you seem to have a mix of mbr/gpt and uefi.. | 17:28 |
| oerheks | repair windows first? | 17:30 |
| oerheks | or not repair; do it right | 17:30 |
| sunfroggi | :( | 17:33 |
| kabuda | hi | 17:33 |
| kabuda | open vlc | 17:33 |
| kabuda | jey | 17:33 |
| arraybolt3[m] | kabuda: Is VLC glitching out or causing problems in some way? | 17:34 |
| kabuda | yes | 17:34 |
| oerheks | arraybolt3[m], we need to ask for details | 17:35 |
| arraybolt3[m] | oerheks: I know, I'm just trying to get a general idea, plus I'm talking in two or three channels at once. | 17:36 |
| oerheks | #debian has this short factoid with a list of information we need as minimum... | 17:37 |
| ravage | I usually wait until I read at least something that can be recognized as a question :) | 17:37 |
| ravage | but that factoid would be very helpful too | 17:38 |
| arraybolt3[m] | OK guys, yes, I realize the initial response was kind of vague, and y'all don't like answering users like that. I do, if you don't like it, leave me to it. :-P Besides, looks like our talk chased them off, which is exactly what I wanted to NOT happen. | 17:38 |
| ravage | 90% of "hi" users leave after 1 minute. we should not flatter ourselves | 17:39 |
| === realivanjx8 is now known as realivanjx | ||
| Hanumaan | oerheks, I'm not concerned about the Windows .. I'm concerned about Fedora and Ubuntu. However, at later stage I would have windows | 17:46 |
| Hanumaan | oerheks, should I use mbr or gpt? | 17:47 |
| Hanumaan | and is it with UEFI or not? | 17:47 |
| ravage | if you can always use UEFI and GPT | 17:47 |
| amosbird | tomreyn: 18.04 LTS | 17:49 |
| tomreyn | amosbird: llvm-14 is not available for ubuntu 18.04 LTS. consider a release upgrade. (you might find a PPA providing this version on 18.04, though.) | 18:22 |
| ice9 | how to run a script after initramfs is executed, I added it in /etc/initramfs-tools/post-update.d/ but didn't run at all | 18:22 |
| jhutchins | ice9: I think you are confused, do you mean to run a script after initramfs is rebuilt? | 18:28 |
| oerheks | confused, asking in 2 channels .. again | 18:31 |
| oerheks | ice9, and what answer did you get everywhere? | 18:33 |
| Supervisor | hello :-) | 18:34 |
| ice9 | jhutchins, exactly | 18:35 |
| Supervisor | how are you guys | 18:38 |
| transhumanist | is there an easy fix for one CPU core almost always be prefered over the second cpu? | 18:39 |
| transhumanist | thats almost all automated | 18:39 |
| === morpheuz6 is now known as morpheuz | ||
| tomreyn | over the second cpu or the second cpu core (of the same cpu)? | 18:40 |
| Supervisor | has that always been happening? | 18:40 |
| oerheks | if gpu-core 2 kicks in, core 1 is buzy? | 18:41 |
| transhumanist | nm I am reading gnomes utilty wrong I thought the second bar was the second cpu (below the first chart , but its the swap space, so all good | 18:41 |
| Supervisor | oooh | 18:41 |
| Supervisor | oh ok | 18:41 |
| transhumanist | dah on my part | 18:41 |
| Supervisor | welcome is0ke3 | 18:41 |
| Supervisor | im on windows vista rn | 18:41 |
| tomreyn | Supervisor: please keep in mind this is an ubuntu (only) support (only) channel. thanks. | 18:42 |
| transhumanist | for those who helped me out with zswap, zram and compression enhancement Here is my installation instructions (not a script as of yet) https://imgur.com/a/HR4mCKc before and immediately after stress test with facebook Z multithreading libary running during stress test. also see this : https://bpa.st/FXWA , wishing I had like 8 cpus instead of two though | 18:44 |
| Supervisor | this is the most active IRC server | 18:47 |
| oerheks | time to register, Supervisor .. it is not that expensive | 18:48 |
| sunfroggi | im annoyed | 18:48 |
| sunfroggi | nothing is working | 18:48 |
| sunfroggi | ;-; | 18:48 |
| oerheks | then more channels are open for you | 18:49 |
| Supervisor | register? | 18:49 |
| oerheks | joinm #libera for register help | 18:49 |
| Psil0[m] | Basically message nickserv | 18:54 |
| Supervisor | i did it | 18:54 |
| Supervisor | so i always have to login | 18:54 |
| Supervisor | ? | 18:54 |
| Psil0[m] | Use the command /msg nickserv register or help | 18:54 |
| Psil0[m] | To your email correct | 18:55 |
| Psil0[m] | Login and register like any service | 18:55 |
| Psil0[m] | To authenticate did you get a reply ro rhe help command | 18:55 |
| Supervisor | ok i registered | 18:56 |
| Supervisor | but how do i login everytime i open up the server | 18:56 |
| gpettey | Is there a way to make do-release-upgrade support applying "-legacy_renegotiation" flag for openssl? | 18:56 |
| oerheks | use a proper client, that stores your cred.? | 18:57 |
| gpettey | I am behind one of those wonderful SSL-intercepting-and-replacing proxies. | 18:57 |
| tomreyn | gpettey: i'm not convinced that trying to make ubuntu work insecurely to make it work in insecurely configured entvironments is the right thing to do. | 18:59 |
| oerheks | gpettey, not sure why you think that is awesome, normally i would give the url for a normal proxy https://linuxiac.com/how-to-use-apt-with-proxy/ | 18:59 |
| gpettey | Corporate firewall kind of proxy. | 19:00 |
| Supervisor | so | 19:01 |
| Supervisor | RAISANS | 19:02 |
| kovacs-andras | Hi! Is there anyone here with some grub, initramfs and maybe luks knowledge? | 19:02 |
| Supervisor | i barely know how to use grub... sorry. | 19:02 |
| kovacs-andras | I have the following line in my grub config: GRUB_CMDLINE_LINUX_DEFAULT="console=tty0 console=ttyS1,115200n8" | 19:02 |
| tomreyn | Supervisor: do you have an ubuntu support question? | 19:02 |
| Supervisor | no | 19:03 |
| arraybolt3[m] | Supervisor: Thank you for wanting to help us out. We generally refrain from answering support questions unless we know the answer or can be helpful in some way. | 19:03 |
| arraybolt3[m] | kovacs-andras: I know quite a bit about GRUB and some about luks. What do you need? | 19:04 |
| kovacs-andras | Previously, when I booted my Ubuntu 20.04 server it asked for my luks2 password on all consoles I have. Now it it only asks on the last one. | 19:04 |
| sunfroggi | speaking of password | 19:05 |
| sunfroggi | i am not able to set a lowercase password can i override taht? | 19:05 |
| gneeriiloeepdeer | can you please paste the snap command to execute if I want to force update firefox? | 19:05 |
| gneeriiloeepdeer | 'close the app to avoid disruptions' | 19:05 |
| kovacs-andras | So cryptroot-unlock was executed on all my terminals, but now it only runs on the last one :( | 19:05 |
| arraybolt3[m] | gneeriiloeepdeer: sudo snap refresh firefox | 19:05 |
| gneeriiloeepdeer | arraybolt3[m], \o/ thanks! | 19:06 |
| arraybolt3[m] | sunfroggi: Do "sudo su -", type your password, then do "passwd <username>" replacing the placeholder as appropriate, it will let you use whatever password you want if you do that (I use a single lowercase "z" for a lot of my VMs and whatnot where I couldn't care less about even having a password). | 19:07 |
| arraybolt3[m] | sunfroggi: Make sure to do "exit" after you're done setting the password so that you don't have a root shell open for any longer than you need, since it could be a security risk to leave it open. | 19:08 |
| enigma9o7[m] | or just sudo passwd $USER | 19:09 |
| enigma9o7[m] | I use one of my favorite letters for my password. | 19:09 |
| arraybolt3[m] | enigma9o7: That's a better way to do it - I got multiple things in my head at the same time and ended up with a less-than-awesome answer as a result. | 19:10 |
| tomreyn | gpettey: this might help https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1963834/comments/7 | 19:10 |
| ubottu | Launchpad bug 1963834 in openssl (Ubuntu) "openssl 3.0 - SSL: UNSAFE_LEGACY_RENEGOTIATION_DISABLED]" [Undecided, Won't Fix] | 19:10 |
| gpettey | tomeryn: Thanks. | 19:12 |
| arraybolt3[m] | kovacs-andras: By "last one", do you mean TTY6? Or...? | 19:13 |
| kovacs-andras | The last in my list in the GRUB_CMDLINE_LINUX_DEFAULT. If it's a tty then it will be a tty. If it's a ttyS then it will be that. | 19:14 |
| gpettey | tomeryn: Looks like I'm going to need that for *every* external https connection now that openssl-3 is secure by default :) | 19:14 |
| arraybolt3[m] | Oh, the last in the list. I totally skipped over the list 🤦♂️ | 19:14 |
| arraybolt3[m] | kovacs-andras: OK, well, when things used to work and then they broke, easiest way to troubleshoot it is to figure out what changed when it broke. Do you remember the last change or last few changes you made just before things went wonky? | 19:15 |
| arraybolt3[m] | (System updates count as changes, btw.) | 19:16 |
| tomreyn | gpettey: most likely. your problem is not openssl. | 19:16 |
| tomreyn | well, not the openssl of ubuntu anyways | 19:16 |
| kovacs-andras | ~5-6 months ago it worked just fine. Since then I used only the ttyS1 to unlock my server (luks) on reboot. Now I wanted to use the tty input-output and it didn't work. The config hasn't changed. And it's the same now on Ubuntu 22.04 also. | 19:16 |
| arraybolt3[m] | Crud, that means either someone else changed it, or a system update broke it. | 19:17 |
| gpettey | Nope, not openssl. The problem is the silly decrypt-reencrypt sniffing proxy. Just needed a way to tell openssl to get around it. | 19:17 |
| kovacs-andras | It's a HP gen 9? maybe with iLO4. I could make the VSP (virtual serial port) work with ttyS1 and tty0 was the html5-based input. | 19:18 |
| kovacs-andras | I tired ttys with other numbers too but it was the same. :( | 19:18 |
| sunfroggi | arraybolt3[m], thank you! | 19:19 |
| arraybolt3[m] | sunfroggi: No problem. | 19:19 |
| tomreyn | gpettey: i agree (but don't knwo which software the 'decrypt-reencrypt sniffing proxy' uses (could be openssl as well). at least you can now tell the network admins (or whoever manages this system) that a major linux distro now breaks because of their environmental service not just supporting, but actually depending on outdated, insecure, crypto. | 19:21 |
| arraybolt3[m] | kovacs-andras: Silly question possibly, but how wide is the terminal that tty0 gives you? | 19:25 |
| jhutchins | gpettey: I'd be real careful about circumventing a firewall if you're an employe or contractor for the company running it. | 19:26 |
| arraybolt3[m] | (This is me grasping at straws here - the closest bug I can see to what you're describing is that a terminal width of 50 or lower will cause cryptroot-unlock to go crazy for reasons, so I'm wondering if maybe you're accessing your terminal from a smaller screen or with an unmaximized window or something.) | 19:27 |
| jhutchins | gpettey: I would expect that there's a clause in your employment contract that refers to network security policies. | 19:27 |
| arraybolt3[m] | jhutchins: I think they want openssl to accept the insecure connection, not bypass a firewall. | 19:28 |
| jhutchins | gpettey: An easy way around the firewall if you really, really need to upgrade something is to download the current repos on a system that's not firewalled and use physical media to transport them. | 19:28 |
| kovacs-andras | It's not a silly question. 160 cols, 64 lines right now. | 19:29 |
| arraybolt3[m] | (Which is insane that they have to do this at all - the company ought to have better security than that unless there's something I'm missing, but sometimes life is what it is.) | 19:29 |
| kovacs-andras | (as tput reported) | 19:29 |
| arraybolt3[m] | kovacs-andras: Well so much for that. Hmm... | 19:29 |
| kovacs-andras | but when I change the order of tty0 and ttyS1 one of them always works. But always the last one in the row only. | 19:30 |
| arraybolt3[m] | gpettey: You can do what jhutchins suggested with a nifty tool called apt-offline. | 19:30 |
| arraybolt3[m] | (It's a pain to use, but it works. Source: Experience.) | 19:30 |
| kovacs-andras | I only updated the servers and haven't change it's initramfs config. I haven't found any clue in the changelogs yet. :( | 19:30 |
| kovacs-andras | *server | 19:31 |
| arraybolt3[m] | kovacs-andras: Maybe each time a new prompt launches, the old one gets overridden and turned off? | 19:31 |
| kovacs-andras | It can be possible. But when I enter the luks password and the system loads further, all terminals are live again. | 19:32 |
| tomreyn | kovacs-andras: https://kevin-wang-xin.medium.com/how-to-enable-ipmitool-vsp-login-on-hpe-server-ilo5-e1d2475901e9 actually seems to suggest what you have now is correct. | 19:33 |
| kovacs-andras | thanks! But the GRUB_TERMINAL=serial part is not working for me when secure boot is on - it doesn't allow to load the serial.mod | 19:36 |
| kovacs-andras | it's also good to see ilo5 didn't change a lot in this sense :D | 19:38 |
| arraybolt3[m] | kovacs-andras: Is there potentially some way you can send the unlock key through another route? Say SSH into the server, unlock the drive, then access the serial ports however you want? | 19:38 |
| kovacs-andras | Yes, I use dropbear-initramfs too on a different port on boot time which executes cryptroot-unlock directly. It works just fine when there is a working network. | 19:40 |
| arraybolt3[m] | Ah, and therein lies the rub. Working networks can be an elusive thing sometimes. | 19:41 |
| arraybolt3[m] | Out of curiosity, is there any particular need to have Secure Boot on in your environment? | 19:42 |
| kovacs-andras | the iLO and the server are on 2 different networks, different ethernet ports and cables | 19:42 |
| kovacs-andras | My boot is not encrypted so secureboot makes me sleep better. :D | 19:43 |
| arraybolt3[m] | Ah. That makes sense. Then is there any particular reason you can't sign the modules yourself? | 19:43 |
| kovacs-andras | pure laziness | 19:44 |
| arraybolt3[m] | LOL | 19:44 |
| kovacs-andras | IMHO the serial.mod would be necessary an another input-output trough the HP iLO, they call it TEXTCONS. I don't use that one. I only use VSP. | 19:45 |
| arraybolt3[m] | kovacs-andras: This is very much on-topic for this channel, but if you find that you're not getting answers, you might try over at #ubuntu-server and see what they know. | 19:45 |
| kovacs-andras | *for an another input-output | 19:45 |
| kovacs-andras | many thanks! Even questions can help sometimes to make things see from a different aspect. | 19:46 |
| maars | hello | 19:47 |
| === ingsock95 is now known as ingsock9 | ||
| g3poandlsl | Is there a way to set the default GDM3 session to Ubuntu Wayland for all users, other than modifying /var/lib/AccountService/users/* ? | 19:56 |
| tomreyn | g3poandlsl: shoould not be necessary unless you uncommented WaylandEnable=false in /etc/gdm3/custom.conf | 20:00 |
| transhumanist | is this the right channel for multipass server questions? | 20:00 |
| transhumanist | (ubuntu multipass) | 20:00 |
| tomreyn | transhumanist: i think there is #multipass, check with alis | 20:00 |
| transhumanist | ok thanks tomreyn | 20:00 |
| === ootput9 is now known as ootput | ||
| Lantizia | Hey, I've turned on the built in rdp on ubuntu 22.04 (well it looks like it was already turned on after installing)... and then also turned on "remote control" | 20:11 |
| Lantizia | but from my rdp client (latest remmina) I can't seem to control anything - only view | 20:11 |
| oerheks | No, on 22.04 sharing is not enabled by default. see systemsettings > sharing, and you find those options, remote control | 20:16 |
| oerheks | and more | 20:17 |
| jhutchins | Lantizia: https://ubuntu.com/tutorials/access-remote-desktop#1-overview | 20:17 |
| oerheks | if it was enabled by default, i filed a bugreport | 20:17 |
| Lantizia | yeah it was :) | 20:18 |
| Lantizia | not the 'Remote Control' option but the 'Remote Desktop' option | 20:18 |
| Lantizia | fresh 22.04 iso downloaded today and installed in a vmware workstation vm | 20:18 |
| Lantizia | and the 'Remote Control' option started working after I did some updates and rebooted the vm | 20:18 |
| oerheks | no, not on ubuntu. | 20:19 |
| Lantizia | well I'm using a fish for an OS... yes on Ubuntu | 20:19 |
| Lantizia | I guess it's not an issue - as people can try to RDP all they like... it comes with a random password so no one can get in | 20:19 |
| oerheks | must be a vmware thing, not ubuntu. | 20:20 |
| Lantizia | lol whatever helps you sleep | 20:20 |
| arraybolt3[m] | Lantizia: That may not be a bad security hole, but that's still unnerving. Maybe they changed something with the switch to GNOME Remote Desktop. I'd file a bug anyway. | 20:20 |
| Lantizia | it's not like I let vmware automate the install - this was a manual install from the iso | 20:20 |
| jhutchins | oerheks: VMWare has no effect on the installation or configuration of the software on a VM. | 20:20 |
| oerheks | well, you know where to look to change settings. | 20:20 |
| arraybolt3[m] | I'll try and verify it at some point on my own system, just to be doubly sure. If it's true, bug reports will be on the way. | 20:21 |
| Lantizia | i'm fine with it... like I say having the RDP service enabled out the box isn't that bad a thing imo - as long as no one knows the password | 20:21 |
| oerheks | jhutchins, i dont think that either too, just saying it is not ubuntu/default. | 20:21 |
| Lantizia | arraybolt3[m], since our conversation earlier about xorg crashing and vnc/nomachine... i'm just using this VM to test to see how far along wayland/rdp has come basically - maybe make the switch from Ubuntu MATE back to regular Ubuntu | 20:22 |
| Lantizia | although I can't see anyway to do multimonitor here :P although the VM can emulate two monitors - my rdp connection can only access one of them | 20:23 |
| arraybolt3[m] | Lantizia: At least performance seems better than last I tried. I'm using Remmina + SSH on a Chromebook, x11vnc + SSHd as my server, running over a painfully slow WiFi connection, and am very happy with the results. | 20:26 |
| arraybolt3[m] | Last I tried with a different client set, it was an awful mess even with gigabit ethernet. | 20:26 |
| Lantizia | arraybolt3[m], yeah I looked at xorgxdrp as supposedly that works better than x11vnc | 20:26 |
| Lantizia | but I was confused how on earth it was meant to both be a xorg driver in its own right (so the x.org apps are drawn to that instead of the gpu) but then somehow appear on a physical screen also - odd | 20:27 |
| Lantizia | tbh this rdp on ubuntu 22.04 is already a let down for 3 reasons... 1) the auth isn't from pam (i.e. you have to make up a new rdp password)... 2) no multimonitor support... 3) doesn't lock the physical screen when in use | 20:28 |
| arraybolt3[m] | Ah, the physical screen bit is sad. My computer looks like I've been hacked into when I'm remoting in LOL | 20:28 |
| arraybolt3[m] | You might actually try xorgxrdp on Ubuntu MATE, if MATE still uses X (I think it does?). Ubuntu has transitioned to Wayland for the most part if I'm understanding correctly, so not much other than the built-in features will work. | 20:30 |
| Psil0[m] | Hey ab someone gell me | 20:31 |
| Psil0[m] | Using matix no one can decrypt my msgs on fkuffycjat what do I do | 20:32 |
| Psil0[m] | I can't find any room related to matidx help | 20:32 |
| arraybolt3[m] | Psil0: Does your client support encryption? Not all do, Element does. | 20:33 |
| Psil0[m] | I'm using fluffycjat it shows a lock on top and says each dm is encrypted so I'm completely lost if it's the client or my account lol | 20:33 |
| Psil0[m] | Like am I missing a setting? | 20:33 |
| arraybolt3[m] | Psil0: As of 2021 FluffyChat isn't in development, and it does not support encryption without an additional program installed alongside. Element just works. Try switching to them. You can use them in a web browser. | 20:35 |
| oerheks | i find with dconf editor a hidden setting in standard RDP ; https://imgur.com/gallery/ASYQopq | 20:35 |
| oerheks | disable default and extend appears :-D | 20:36 |
| arraybolt3[m] | Psil0: (btw I left the broken DM session, but you can always open it up again if you want to test or if you want to DM me - I only left it since it wasn't working.) | 20:36 |
| arraybolt3[m] | Actually, I'm wrong about FluffyChat being dead - apparently a forum fed me fuzzy facts. | 20:37 |
| Lantizia | oerheks, i'm sure the gnome developers thought we were too simple minded to be allowed to have the choice :) | 20:37 |
| Psil0[m] | Yea so I'm lost | 20:38 |
| Psil0[m] | Do I ditc5 this client or eat did I did wrong lol do wrong | 20:38 |
| Psil0[m] | Makes mo sense | 20:38 |
| oerheks | Lantizia, you certainly have a point, and it should not be added to gnome tweaks, just in the main settings | 20:38 |
| arraybolt3[m] | It's supposed to work by default according to the changelog. | 20:38 |
| Psil0[m] | Going through all settings lolonlybdm saysbits encrypted than I getbabmsg dsyingbno one can read 8tbloo | 20:39 |
| * Lantizia runs gsettings set org.gnome.desktop.remote-desktop.rdp screen-share-mode extend | 20:39 | |
| Psil0[m] | Wow | 20:39 |
| Psil0[m] | What the heck | 20:39 |
| arraybolt3[m] | Psil0: I'd say try Element for now (or go back to IRC, the typo quality coming through Matrix is extreme), and if it works, yay. | 20:39 |
| Lantizia | hmm not quite as I'd hoped - now I get blackness :) | 20:40 |
| Lantizia | lol worse than that - it crashes wayland! | 20:41 |
| Lantizia | I think I'm going to have to stick to NoMachine :S | 20:42 |
| oerheks | oh nice :-D | 20:42 |
| arraybolt3[m] | arraybolt3[m]: Sorry if this sounded wrong - I was trying to be funny. | 20:42 |
| Lantizia | nini folks | 20:44 |
| arraybolt3[m] | Lantizia: Wow, sorry it's going that poorly. That's just crummy. | 20:45 |
| === NotEickmeyer is now known as Eickmeyer | ||
| Psil0[m] | <arraybolt3[m]> "Sorry if this sounded wrong..." <- Dang okay | 20:48 |
| Psil0[m] | Weird really weird I wish I could figure out what I had done wrong here | 20:48 |
| arraybolt3[m] | I don't think you did anything wrong, I think it's just not working right. "Encrypted by default" should not equal "no one can read my DMs". | 20:49 |
| Psil0[m] | Hmm what the heck okay | 20:55 |
| Psil0[m] | I'm lost nice clientb but this is weird | 20:55 |
| Psil0[m] | Sucks | 20:55 |
| Psil0[m] | I tried logging in and back and trying to entree my key for chat backup thing it would have an option to change something nut nopeb | 20:56 |
| arraybolt3[m] | If you're not really attached to FluffyChat, I know Element works. And since that's the best solution I know and I'm one of the few other people in here who use Matrix, that's probably the only solution I'll come up with sadly. | 20:56 |
| arraybolt3[m] | Would be nice if I knew how to make FluffyChat work. | 20:56 |
| Psil0[m] | Lol well it's decrypting but can't send lol lol | 20:58 |
| Psil0[m] | Let me try element | 20:58 |
| Psil0[m] | Hey can someone try now yaya | 21:05 |
| === five617 is now known as five61 | ||
| === brassado is now known as sam_sepi0l | ||
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!