/srv/irclogs.ubuntu.com/2022/08/09/#ubuntu.txt

DarkenedGentlemaDoes Ubuntu 22.04 not have ssh key support enabled by default?00:03
DarkenedGentlemadoes the ssh-server not have key auth enabled by default?00:03
sarnoldcan you rephrase your question?00:03
DarkenedGentlemathru my key into authorized_keys and it loosk like it's not using it.00:04
tmusit's enabled by default. check user, file permissions etc00:04
DarkenedGentlemaAlso this is in the sshd_config #PubkeyAuthentication yes00:05
DarkenedGentlemacommendted out00:05
sarnoldDarkenedGentlema: is it perchance an old ssh-rsa key? those are disabled by default now https://discourse.ubuntu.com/t/jammy-jellyfish-release-notes/2466800:05
DarkenedGentlemaya, it's a older key, ssh-rsa00:05
tmusDarkenedGentlema, commented out but enabled by default00:06
murmelyes, but it shows you the default00:06
sarnoldDarkenedGentlema: aha, nice; you can either configure the system to accept old keys again or generate a shiny new key00:08
DarkenedGentlemaSo is it just not supporting rsa keys anymore, or does it have to do with the key length?00:08
DarkenedGentlemaI'd rather now have to update hundreds of servers with a new key, anyway to "upgrade" my old key so that it works on old and new?00:09
DarkenedGentlemassh-keygen still looks to default to an rsa key.  I'm a bit confused here as to what's going on.  Is it just key length?00:11
sarnoldyou can stuff a Host ... HostkeyAlgorithms +ssh-rsa  PubkeyAcceptedAlgorithms +ssh-rsa  match block into your client configuratoin to allow you to connect to servers that are too old00:11
DarkenedGentlemaMust be key length because the rsa key i just generated worked fine.00:13
sarnoldit might be, I thought it was the specific hash choice, heh00:15
murmelsarnold: release notes say that rsa is disabled :/00:17
murmelahh reading the release notes of openssh, it talks about sha-1 being disabled00:19
sarnold> The available RSA signature variants are “ssh-rsa” (SHA1 signatures, not recommended), “rsa-sha2-256”, and “rsa-sha2-512” (the default).00:19
sarnoldhttps://man.openbsd.org/ssh-keygen00:20
linexttomreyn, https://i.ibb.co/3SFhfBf/image.png00:22
sarnoldlinext: namei -l /home/jesse/Downloads/kisslicer_linux64_1.6.3_release/KISSlicer  might explain something00:24
linexthttps://i.ibb.co/bbffsng/image.png00:25
sarnoldlinext: note the permissions on /home/jessie would prevent a process executing as www-data from getting to the file00:27
linextcan i grant access to www-data?00:28
linextchown ?00:28
sarnoldyou can either chmod the directory to allow the world read and execute access; you can use setfacl to add read and execute permissions specifically for www-data (or whatever process is executing); there's other choices but these are least likely to be disruptive00:30
linexthmmmm...00:35
=== gr33n7001 is now known as gr33n7007h
linexti still get permission denied00:36
sarnoldif you execute KISSlicer in the shell by hand, does it execute fine?00:37
linextyep, the command runs as my user00:37
linextdoes php on linux come with exec() and proc_open() turn on by default?00:39
linextthis is the command00:39
linexthttps://ibb.co/p1d8XK300:39
linexthere's the code: https://ibb.co/vCNqHkq00:39
sarnoldman these are fuzzy, I hope your view is way less fuzzy :)00:40
linextclick the image to zoom in00:40
sarnoldso, ahhh enable a bunch of JS and the it'll load a better version, thanks00:41
linexthttps://i.ibb.co/SDkyPBy/image.png00:41
sarnoldMUCH BETTER00:41
ladedaI am running into a really strange issue on Ubuntu 20.04 I have a local repo I use with trusted=yes set yet when I run apt it errors "The following signatures couldn't be verified" but it should not be doing this step I have verified this repo doesn't exist any where else it's only in a single place and does have the trusted option set. I try the00:41
ladedadebug options i.e. Debug::Acquire::gpgv=true and Debug::pkgAcquire::Auth but I am not seeing any useful information. Anyone ever run into this issue before?00:41
sarnoldso, I think there's a few possibilities -- first, that -o /home/jesse/.../3003.gcode sure looks like an output file. that means the /home/jesse/.../ directory needs to allow this user to WRITE to the directory00:42
sarnoldor, better yet, store the output someplace that it can write to already00:42
linextlike /var/www/html/00:43
sarnoldthe other thing that I wonder about -- the arguments to commands almost always need to be separated a bit more than these -- the '-o' should be a different array entry than the filename. quoted names usually screw up things to. maybe all that implode business means it's just building a string to hand to bash.. the 2>&1 sure suggests that's what's going on00:44
linextthe php code is solid00:44
linexti'm already running it in Windows00:44
murmelarraybolt3[m]: man, sbuild-qemu doesn't work with ubuntu :/00:44
linexti'm trying to diagnose a bug in KISSlicer to tell if it's OS specific00:45
arraybolt3[m]murmel: Bummer.00:45
murmelarraybolt3[m]: still not sure why, as it can't find ifupdown (which is in universe, and I enabled this)00:46
arraybolt3[m]Sadly I only use just plain sbuild, so sbuild-qemu is foreign territory to me.00:46
arraybolt3[m](And I use sbuild on Ubuntu, so sbuild on Debian is also foreign to me :( )00:46
murmelarraybolt3[m]: yeah, almost thinking about switching to ubuntu as the host OS, but I quite don't like it that I am being forced basically00:47
arraybolt3[m]murmel: Then don't do that. Install Lubuntu in a virt-manager VM and everything should just work.00:47
kushal_kumaranlinext: why involve php in this? You could just run that command on the shell, if that's all you need.00:47
murmelwould rather go ubuntu-server, will still think about it00:47
arraybolt3[m]murmel: Once you're running sbuild within the VM, you can use the Ubuntu version of sbuild while still having Debian on your hardware.00:48
linextkushal_kumaran, it's a web app00:48
linextthe version 2 of 3dpartprice.com00:48
linextcalculates time and material for printing STL files00:48
sarnoldhmm, why does systemctl start-service mirror-rsync.service *hang* my shell when I run it? I thought the point of a service manager was to go off and do something useful rather than hang the shell. my service file: https://termbin.com/ehsg00:50
kushal_kumaranlinext: thanks for the info. So are you specifically trying to debug the behavior when run through web? If so, then create a directory that is readable and writable by the www-data user and point your file paths to that directory. Also if you can, do show the error logs from the web server.00:51
arraybolt3[m]sarnold: For me, systemctl can always hang my shell, sometimes for a while. Maybe there's a systemctl switch to do it asynchronously or something.00:51
* arraybolt3[m] looks00:51
arraybolt3[m]sarnold: https://askubuntu.com/questions/1004853/systemd-is-hanging-when-i-start-or-restart-a-service00:52
arraybolt3[m]sarnold: Use Type=simple rather than Type=OneShot.00:53
sarnoldarraybolt3[m]: hmm now I wonder why I went with oneshot in the first place00:55
kushal_kumaranlinext: I just looked back through your previous messages. Try switching to the www-data user in a shell and trying your command. You might need to set a shell for that user00:55
sarnoldarraybolt3[m]: this isn't a persistent process, it should just execute for half an hour or something, then go away again for a few hours00:55
arraybolt3[m]sarnold: Then it will probably freeze your shell for half an hour. :)00:56
murmelsarnold: wouldn't a timer be more reasonable?00:56
arraybolt3[m]sarnold: If it's something that executes every few hours, perhaps you should shell script it with a timer like murmel suggests?00:56
arraybolt3[m]murmel: You beat me to it!00:56
murmelha :) finally my newly acquired mechanical keyboard pays off00:57
=== squareci1cle is now known as squarecircle
sarnoldarraybolt3[m], murmel, here's the timer that fires it https://termbin.com/ehe500:57
arraybolt3[m]sarnold: Also using Type=simple will leave the service dead when it finishes, so if you're ok with that I don't see why Type=simple would be bad.00:58
arraybolt3[m]sarnold: Also why use systemd at all? Wouldn't a cron job be more suited for this?00:58
sarnoldarraybolt3[m]: yes, a cronjob would have saved me about two hours of getting this thing set up :)00:59
sarnoldarraybolt3[m]: but it's been working more or less for a few years, and saving all the logs in the journal, which is pretty handy00:59
murmelarraybolt3[m]: doesn't really matter :) and honestly I would rather have everything managed by systemd00:59
sarnoldI think I'd rather it be managed by systemd, I just wish systemd weren't such crap00:59
arraybolt3[m]Eh, valid point.00:59
kushal_kumaransarnold: --no-block00:59
sarnoldkushal_kumaran: hey! I bet that'd do the trick01:00
arraybolt3[m]Oh. Welp, that should do it.01:00
sarnoldkushal_kumaran: funny, I can't recall ever seeing that before, but there it is. once again: dear system, why is this seemingly-sane thing not the default and such a loooooong name? :)01:01
=== Polo is now known as GDF
sarnoldif this rsync ever finishes..01:01
murmelhm, I still believe that OneShot should be the correct Type01:01
InPhasesarnold: This sounds like a job for crontab.01:01
arraybolt3[m]murmel: Yeah, you're not wrong, but when the thing lasts that long...01:02
murmelsure01:02
murmelsarnold: how big is the mirror? at least for 2201:02
murmel22.0401:02
arraybolt3[m]OK, so asking a systemd question will also cause an explosion of opinions. /me adds that to the list of One Hundred and One Ways to Explode an Ubuntu IRC Channel01:02
sarnoldarraybolt3[m]: lol01:03
InPhasesarnold: It just so happens I have a job running every 4 hours, crontab entry like:  0 */4 * * * /path/to/the/script   It works fine.01:03
InPhasesarnold: Rather than a mystery spacing of 4 hours and unspecified time of run, I know exactly when it launches based on time of day.01:04
murmelsarnold: the more I read, simple _is_ the correct01:04
murmelI quite like that post https://trstringer.com/simple-vs-oneshot-systemd-service/01:05
sarnoldmurmel: I rsync the whole thing, not just one release; I'm apparently around 2TB at the moment:01:05
sarnold$ zfs list srv/mirror/ubuntu01:05
sarnoldNAME                USED  AVAIL  REFER  MOUNTPOINT01:05
sarnoldsrv/mirror/ubuntu  2.01T  5.66T  1.63T  /srv/mirror/ubuntu01:05
kushal_kumaranUsing crontab for long jobs is doable. Read the man page for flock though, and consider using it. The chronic utility is also useful, and you might want to investigate an external dead man switch type monitoring solution01:05
arraybolt3[m]sarnold: Yikes, are you running a whole Ubuntu mirror?01:05
sarnoldkushal_kumaran: yeah, the whole need to use run_one or run-one or whatever, and deal with appending the output, and preventing cron from *actually* sending email, etc, was enough for me to think that I ought to try systemd timers01:06
sarnoldarraybolt3[m]: yeah01:06
murmelsarnold: welp, somebody really wants _all_ the debs01:07
InPhasesarnold: Cron won't send emails if you just dump stdout and stderr to /dev/null or to a log file.01:07
arraybolt3[m]sarnold: Cool. Does that actually help the Ubuntu project? I thought about doing that at one point.01:07
sarnoldmurmel: heh, I've even asked the archive admins if it'd be possible to get a single "combined view", with ports.ubuntu.com and archive.ubuntu.com on *one* filesystem -- like it is on the internal archive -- but sadly the only thing publically exposed is split in two :(01:08
murmelarraybolt3[m]: it does, as long as it's public01:08
murmel:/01:08
=== M4he is now known as mahe
sarnoldarraybolt3[m]: I run full archive searches on mine, unpack all the sources to have all the source files in plocate, etc. it's a bit odd :)01:08
murmelsarnold: that's weird. why wouldn't they combine it :/01:08
sarnoldmurmel: because it's work to make it happen and I'm currently the only one nutter enough to want it :)01:09
murmelsarnold: saying nothing against it. would love to have a mirror always with me01:09
sarnoldthey've offered to punch me a hole through the firewall before but I don't want the VPN on that machine01:09
murmelarraybolt3[m]: maybe i should add, that it also helps when not public, as you would run a mirror when you have multiple systems -> less traffic for the project01:11
sarnoldmost people would probably be better served with a squid-deb-proxy on their network01:12
arraybolt3[m]murmel: Makes sense. I guess it depends on how many systems you're running - when the total bandwidth of a single upgrade operation approaches the size of just pulling the whole archive, it's time to think about running a personal mirror.01:12
murmelarraybolt3[m]: for example01:13
InPhaseHow much traffic would the rsync be transmitting every 4 hours just to check for updates on all 2TB of that?01:14
murmelInPhase: afaik not that much, as it's checking hashes01:14
InPhaseMust be a lot of files though.01:14
murmeldefinitely01:15
sarnoldhere's a run from a few days ago https://termbin.com/1b7m01:15
InPhaseIf I learned it was 20GB, I wouldn't be too shocked.  :)01:15
kushal_kumaranIn default configuration, rsync only compares file sizes and mtime AFAIK.01:15
* arraybolt3[m] realizes I way overestimated when it would be time to set up a personal mirror - if you're running enough computers to download nearly 2 TB in a single update you're already WAY past the point of needing your own mirror01:16
murmelI always like the bytes/sec :S01:16
InPhasesarnold: Is that a full run there, showing about 1.5GB of traffic to do the check across 13 minutes?01:18
InPhasesarnold: Oh, I guess more than checking.  It shows changes there.  So the checking was some amount less.01:19
sarnoldInPhase: yeah, that's both phases of a two-phase copy https://termbin.com/p8ht01:20
sarnoldmy machine has been off for the weekend (it's too stupid hot here these days) and it ran for 28m42s before giving me the prompt back :)01:20
murmelInPhase: you see with the second run is only a few hundred megs01:20
InPhasearraybolt3[m]: Well bandwidth is still cheap compared to disks, so it takes a lot of such updates before the mirror system pays for itself.01:21
InPhasemurmel: Am I supposed to believe that 6 second interval is a full check?01:22
InPhaseIs the mirroring software using a special rsync setup that pre-stores the info on the files or something that the rsync would need to know?01:22
arraybolt3[m]InPhase: Yeah but using bandwidth is still sapping money away from Canonical and their helpers, so using tons of bandwidth would be detrimental to the Ubuntu project. Reducing bandwidth = reducing cost = keep the project alive! And so much the better if you donate bandwidth, which is what I wanted to do.01:23
murmelInPhase: idk the second run is almost 4 mins01:23
InPhasemurmel: Oh, 2 minutes 8 seconds.  Eyes and math failed me both at the same time.  :)01:23
InPhasearraybolt3[m]: Agreed on those points.  Different group calculation there, but important.01:26
=== amurray_ is now known as amurray
=== calwig_ is now known as calwig
DarkenedGentlemain netplan's routes, can i specify a dev rather than IP?02:10
=== kevr_ is now known as kevr
jhutchins!netplan02:20
ubottuNetplan is a network configuration abstraction renderer which uses YAML descriptions of a network to work with either a NetworkManager or Systemd-networkd "renderer". More information at https://netplan.io/02:20
jhutchinsDarkenedGentlema: Maybe work directly with the filters/tables?02:21
=== thegodsq- is now known as ident_
=== ident_ is now known as thegodsquirrel
=== Turgenevskaya is now known as TortillaSandwich
=== xMopxx is now known as xMopx
HashIf you have a btrfs @ and @home/subvolume, and if you need to reinstall, and then how does it know to only install over @ and leave @home alone?04:56
alkisgMorning all; which package displays this dialog on apt upgrades? I'd like to remove it:05:18
alkisg> Newer kernel available The currently running kernel version is 5.4.0-122-generic which is not the expected kernel  version 5.15.0-43-generic.  Restarting the system to load the new kernel will not be handled automatically, so you should consider rebooting.05:18
alkisgI think it's an apt hook that got installed when I installed something related to ubuntu-advantage, esm etc, but when I removed these, it wasn't removed...05:24
=== SwedMike is now known as SwedeMike
alkisgComparing /etc with another server that doesn't show that dialog, I see no related differences...05:29
=== origintopleft` is now known as origintopleft
geirhaif it's terminal dialog boxes, it's likely whiptail06:47
geirhaMh, nevermind, I didn't read the problem thoroughly06:50
alkisgIt's indeed whiptail but I didn't manage to find out what triggers it in one server (making apt full-upgrade annoying) and not on all the other servers06:51
fawani got a question about asterisk and odoo voip connection07:05
fawanhttps://serverfault.com/questions/1107543/my-asterisk-server-cant-read-extensions-conf07:05
=== jelly-home is now known as jelly
=== pah is now known as pa
=== Guest4572 is now known as POLO
=== diskin is now known as Guest7326
=== diskin_ is now known as diskin
EckoHi, I'm getting the following message: "Unattended upgrade result: Lock could not be acquired"07:52
EckoNow I see that /var/lib/dpkg/lock exists, but read that the lock file is there to stay permanently. So now I'm kinda lost on where to look on getting this fixed07:53
EckoCan anyone point me in the right direction?07:53
=== elias_a_ is now known as elias_a
elias_aEcko: Is your root partition out of space?08:03
EckoNo, 40% used08:03
elias_aalkisg: Σας εύχομαι καλή μέρα!08:04
alkisgΚαλημέρα elias_a :)08:05
elias_aEcko: Are you using GUI or CLI?08:05
Eckocli08:06
elias_aEcko: Could there be another update process that is locking the file? Perhaps a GUI window lurking among the dozens of other windows? :)08:07
EckoNot sure. Atleast no GUI, since it's a server. Already checked logfiles to see which processes are running, but can't quite find it yet08:11
elias_aOk. I'm not that fluent with all the possible processes that might lock the file. Let's wait for answers from other users.08:13
Eckosure, thanks for the help so far :)08:14
elias_aNP :)08:22
sr-is there a page that shows if/which version of mesa the next HWE stack (20.04.5) will contain? and also, I saw mentions of an "early preview" for those hwe releases. how can I opt in to those?08:41
fougaHello everyone,08:42
fouga I would like to fix issue with my ubuntu using kerberos (client).08:42
fouga"klist: Credentials cache keyring persistant not found"08:42
fougaCan someone help me please?08:42
fougaI have to do kinit everytime.08:42
fougaThanks08:42
=== keypushe- is now known as keypusher
seecretsspyware OS09:17
ponythey all are09:17
seecrets"they"?09:18
ponyall oses09:19
seecretswhat os do you use pony09:19
=== gr33n7001 is now known as gr33n7007h
circuitbonehe uses pwnyos but its a secret10:12
ferzHi, on Ubuntu 20.04.4 LTS with one of last upgrade I'm not able to disable touchpad anymore using xinput.11:10
ferzhttp://paste.scsys.co.uk/48311:11
ferzI've tested using id 9 and someother without success11:12
ferzPlease have you hint to achieve to disable touchpad.  It's a mess typing on keyboard while the pointer moves the cursor of text.11:14
=== average-guy is now known as YourNick2
=== YourNick2 is now known as rfinley
=== rfinley is now known as average-guy
BluesKajHi all12:33
=== wyre_ is now known as wyre
=== Gambino is now known as Polo
seecretspony i didnt see ur reply if you sent it13:25
seecretswhat os do you use13:25
seecretstempleos?13:25
=== silentfury9 is now known as silentfury
=== leftyfb_ is now known as leftyfb
leftyfbseecrets: can we help you with something?13:28
seecretsyes, tell me what ubuntu is doing contacting snapcraft during installation13:29
seecretsand why does it have to check for connectivity so frequently13:29
leftyfbsame thing it does checking the ubuntu deb repositories13:30
leftyfbseecrets: you do know that ubuntu desktop uses snaps by default for some applications now right?13:31
seecretsyes13:31
leftyfbthen what is your concern?13:32
seecretsubuntu provides spyware applications by default13:32
leftyfbseecrets: false. Feel free to go to #ubuntu-offtopic to rant though. This is a support channel13:33
seecretsso a browser that provides google as the default search engine isnt spyware13:33
seecretshttps://imgur.com/a/YDi3xUT13:33
seecretsmind debunking this too13:33
seecretsso from what i can tell13:34
seecretsim telling someone everytime i install ubuntu13:35
BluesKajoh lord, another troll looking for an argument...sigh13:35
seecretsand im telling someone everytime im using my ubuntu machine13:35
seecretsfor the duration im using it13:35
seecretsim not trolling13:35
leftyfbseecrets: this isn't the place for your rants. Again, this is a support channel. Go to #ubuntu-offtopic13:35
seecretsokay13:36
=== JoelJoel is now known as Joel
PrunersI'm in Ubuntu, is there a way I can save an internet URL, to a desktop alias?14:45
wezPruners: There is14:50
wezPruners: https://www.google.com/search?q=ubuntu+url+launcher&oq=ubuntu+url+launcher14:50
=== Starmina8790 is now known as Starmina879
=== Starmina8791 is now known as Starmina879
arkanoidHello! I'm installing ubuntu desktop 22.04 and I'm puzzled by the dropdown menu "device for boot loader installation"15:45
leftyfbarkanoid: pick your hard drive15:45
arkanoidContext: UEFI system, EFI partition already exists as sdb1, I've created a partire for /boot in sdb215:46
arraybolt3[m]arkanoid: The program your computer loads when it first boots up is the bootloader. The bootloader is what then starts Ubuntu. That bootloader has to be located somewhere, that option tells the Ubuntu installer where you want to put the bootloader. It should be put on whatever drive you want the system to boot from.15:46
arraybolt3[m]With that context, the bootloader should go in /dev/sdb1 I believe.15:46
leftyfbarkanoid: is there a reason why you're manually creating partitions, especially boot?15:47
arkanoidleftyfb:  yes, I'm doing some quite convoluted operation (after backup of course). I start from a dual boot windows + ubuntu, I want to remove windows and get ubuntu + ubuntu, but new ubuntu has LUKS working. I will remove old ubuntu after moving everything15:48
arkanoidSo I am replacing windows partitions at the beginning of sdb with /boot and encrypted device as /15:49
arraybolt3[m]arkanoid: Your system does use EFI, right?15:50
arraybolt3[m](Asking because I know Ubuntu will create an EFI partition even on a BIOS system, and so whether your system is EFI or BIOS will influence where you probably want to put the bootloader.)15:51
arkanoidCurrent situation is: sdb1 EFI, sdb2 /boot (new ubuntu), sdb3 / (encrypted new ubuntu), sdb4 / (old ubuntu without separate boot partition)15:51
arkanoidSystem is UEFI, yes. I've started the installer from UEFI and uefivars is mounted in installer15:52
arraybolt3[m]arkanoid: OK, then the bootloader goes on /dev/sdb1.15:52
imbezolis there a way to disable the firefox snap update warning? says 13 days left to close it. problem is i close it, do a refresh, and then the next day there's another update. so this popup has become a part of my life every 5 minutes.15:52
imbezoli think i've closed that popup a thousand times15:53
leftyfbimbezol: it's a known bug they are working on15:53
arkanoidarraybolt3[m]:  what sdb2 /boot used for, then?15:53
imbezolsuper super annoying. i hope they fix it soon.15:53
=== Guest6481 is now known as gr33n7007h
arraybolt3[m]arkanoid: OK, so the bootloader has two parts.15:58
arraybolt3[m]arkanoid: There's an "early bootloader" that goes in the EFI partition.15:58
arraybolt3[m]arkanoid: Then there's the "rest of the bootloader" that goes in /boot and has things like extra modules for certain uses, along with the configuration file for GRUB.15:58
arraybolt3[m]arkanoid: Also the /boot partition holds the kernel and initramfs.15:58
arraybolt3[m]arkanoid: The early bootloader goes wherever you select as the boot loader installation device.15:59
arraybolt3[m]arkanoid: So you want GRUB to go in the EFI partition, /dev/sdb1. The system will autopopulate /dev/sdb2 with all the necessary extras (the rest of the bootloader) as well as other files critical to the boot process.15:59
jhutchinshttps://opensource.com/article/17/2/linux-boot-and-startup16:01
arraybolt3[m](A similar process is used on BIOS systems, but the early bootloader and rest of the bootloader are somewhat different, though the same concepts still exist.)16:02
arkanoidarraybolt3[m]: thanks, it makes sense now. I have question then. What is generally called "stage 2 bootloader" is what runs from EFI partition or what runs from /boot?16:02
jhutchinsarkanoid: That's one of the stages for Grub (or possibly other bootloaders).16:05
jhutchinshttps://www.linuxquestions.org/questions/linux-newbie-8/what-is-grub-loading-stage2-745986/16:08
jhutchinsarkanoid: A /boot partition is a mistake that will sooner or later run out of space and not allow you to upgrade your kernel.16:09
jhutchinsThere is no reason /boot should be a separate partition.16:09
jhutchinsOn archaic multi-user systems, /boot was mounted separately and unmounted at runtime so that malicious usrers could not tamper with the boot files.16:10
arkanoidjhutchins: I've been reading that separate /boot is required for booting when root is behind LUKS16:10
jhutchinshttps://www.techeblog.com/5mb-hard-drive-being-loaded-onto-a-plane-in-1956-and-35-more-cool-historical-photos/16:11
jhutchinsarkanoid: There is a way to have /boot encrypted, I don't mess with such things.16:12
jhutchinsarkanoid: It does provide additional entertainment when things go wrong.16:12
arkanoidI have (not yet) secure boot enabled (this will be my final target). So the boot process is currently efi in sdb1 >  grub in sdb2 > boots only with decryption password (this is working  now)16:12
jhutchinsarkanoid: The purpose of "Secure Boot" is to prevent you from booting Linux install media and installing Linux.16:15
arkanoidjhutchins:  yeah, no. Please. I know what root of trust is16:16
arkanoidI can understand how firmware flashers deliver tpm with pre-flashed ms$ keys, but this doesn't mean what you say16:17
leftyfblets try to stay on topic here16:17
arkanoidjhutchins:  also, my (very old) previous ubuntu installation with no separate boot partition has a /boot folder of 286MB16:17
arraybolt3[m]arkanoid: Keep in mind that is very very small for modern-day Ubuntu systems. 4 GB would be a safer /boot size IMO.16:18
jhutchinsarkanoid: Yes, the boot folder is part of a standard Linux system.16:19
arkanoidI'm still in time for re-installing ubuntu with larger /boot partition or without it, but I want encrypted root and smooth daily sail like I've been experiencing so far without luks16:19
arraybolt3[m](I saw someone in here with a /boot that was about that small. It was... not fun.)16:19
jhutchinsIt's convenient to have all of the required boot files in the same place, rather than breaking them out by version like the libraries and drivers.16:19
jhutchinsThere are a few distributions that do that, a seperate file tree for each kernel and a symlink in / that points to that tree.16:20
jhutchinsThat symlink also exists on some more standard systems for compatibility.16:21
arkanoidRhel uses separate /boot16:21
jhutchinsarkanoid: If you mean a separate partition, that's optional there as well.16:21
arkanoidjhutchins:  by default, you have separate boot partition16:23
arkanoidI'd like to get some confirmation about: is it really a risk having separate boot partition of 512MB size? Is it really a risk having boot embedded in root while keeping root encrypted with luks?16:24
arraybolt3[m]arkanoid: I would keep /boot separate since it's what Ubuntu does by default.16:25
arraybolt3[m]arkanoid: I would give at least 1GB to the /boot partition so that you have breathing room if things go haywire, maybe even 2 GB.16:25
arkanoidarraybolt3[m]: official docs says 256 - 1GB, I went 512, but I will reinstall now https://help.ubuntu.com/community/DiskSpace16:26
arraybolt3[m]arkanoid: It is not a risk to have boot embedded in root while root is encrypted, but it does require that things be configured in just the right way. Ubuntu doesn't do it that way by default, though Lubuntu and Ubuntu Studio do. So it's possible, but I don't know how to do that.16:26
arraybolt3[m](On stock Ubuntu I mean.)16:26
arraybolt3[m]Also, the docs are generally a good source of info, but they're also miserably outdated in some instances, and I wouldn't be surprised if this is one of those instances.16:27
arraybolt3[m]Yeah, I'm seeing a mention of Ubuntu 10.04 (?!) in that Wiki article. I should edit that to reflect modern versions of Ubuntu.16:28
arkanoidarraybolt3[m]: I don't want to step too far away from defaults. Separate unencrypted boot seems not an higher risk for me. I mean, I would need an evil maid that tampers the boot/kernel. I just want to stay safe if laptop got lost/stolen16:29
arkanoidubuntu core uses unencrypted boot while calling it Full Disk Encryption with chain of trust base don TPM2.0 enabled https://ubuntu.com/core/docs/uc20/full-disk-encryption16:32
jhutchinsIn spite of good intentions, the kernel and boot files do keep growing.16:33
leftyfbarkanoid: ubuntu core != ubuntu desktop/server. Feel free to discuss Ubuntu core in #snappy16:33
jhutchinsIt's been a long time since you could boot a system off of one floppy.16:33
arkanoidjhutchins: my other ubuntu installation went from 16.04 to 22.04 with daily usage, and /boot is 286MB16:34
leftyfbarkanoid: lets stay on topic with support questions you need help with16:34
arraybolt3[m]arkanoid: Then you should be fine with a separate unencrypted boot.16:34
arkanoidleftyfb: sure, but it's still an indicator that while encrypted /boot is possible, is not done even when secure boot is enabled by default16:35
jhutchinsleftyfb: The question is how much space is adequate for /boot.16:35
arraybolt3[m]Were you to ever find your laptop again, you'd probably want to wipe and reinstall, restoring your data from a backup, but just LUKS'ing root and leaving boot unencrypted will work fine from a data security standpoint.16:35
leftyfbjhutchins: apparently in their case, they believe 286MB is adequate and don't seem interested in anyone elses opinion16:36
arraybolt3[m]leftyfb: They're just making a point trying to reason about wwhat is and isn't secure.16:36
arraybolt3[m]leftyfb: They said they were going to reinstall to make a bigger boot partition.16:36
leftyfbarraybolt3[m]: if the discussion were to continue to it's conclusion, throwing the PC into a fire is the most secure16:37
arkanoidI'm not saying it's adeguate, I actually said the opposite: I will reinstall now and use 2GB for /boot. What I just wanted to point out, is that a very old and frequently updated ubuntu installation still has a clean /boot folder of 286MB, and also the official docs says 256Mb to 1GB of size recommended.16:38
arraybolt3[m]leftyfb: I do a lot of security stuff and I can understand his concerns (since I've had those same concerns). And I'm still using a PC.16:38
jhutchinsActual use of the computer is discouraged as a security risk.16:39
arraybolt3[m]arkanoid: True. And it will stay that way if everything goes perfectly well (though it will grow a bit and then shrink again). But when something unexpected happens and kernels start piling up... (I've had that happen to me a few times.) So that's why you want a good buffer of breathing room.16:39
arraybolt3[m]jhutchins: C'mon. I get where he's coming from. I don't know what he said that has you and leftyfb doing this to him, but please stop. It's not appreciated, especially as someone who's in the same boat.16:40
arkanoidarraybolt3[m]: thanks. I'm now curious when the piling up happens. Never happened in my experience. What takes update to save copies and copies of kernel versions / initrd images?16:40
jhutchinsarkanoid: It's an old joke.16:40
jhutchinsarkanoid: With the realease of 22.04 we've seen people here run into space limits with /boot partitions, so it's a valid issue.16:41
arraybolt3[m]arkanoid: If something occurs that makes a kernel marked as manually installed, it will then stay there and not get autoremoved. That will cause there to be at least one extra kernel laying around.16:41
jhutchins... plus config and initrd.16:42
jhutchinsDoes Ubuntu do the root symlink to the boot files?16:43
arkanoidk, reinstalling with 2GB now. If everything goes well like previous go, I will end up with two ubuntu installs like now. The only "obscure point" here to me yet is how grub "detects" other OSs16:43
arraybolt3[m]arkanoid: There's a special config file that gets built by grub-mkconfig that tells GRUB where the other operating systems are and how to boot them.16:44
arraybolt3[m]That tool will automatically run during install time.16:44
arraybolt3[m](However do note that only one OS will be detected in Ubuntu 22.04 since os-prober was disabled, there's a way to re-enable that if that's undesirable, but in your instance it sounds like it's just fine.)16:44
arkanoidthe tools is detecting deleted windows as still present then. I guess because there are some leftovers in EFI (sdb1) partition?16:45
arraybolt3[m]arkanoid: Quite possibly. If you're OK with potentially rendering all operating systems except the one you're installing now unbootable, you could (maybe even should) wipe the EFI partition and make a new one.16:45
arkanoidarraybolt3[m]: no, I'm interested in having old ubuntu still working as before. This until I end my experiments with luks/secure boot on new installation16:46
arraybolt3[m]arkanoid: OK. Actually, in that instance, what I'd do is go ahead and wipe the EFI partition, and then we'll just re-enable os-prober to pick up the original installation.16:47
arraybolt3[m](I'll link to the instructions on re-enabling os-prober.)16:47
arraybolt3[m]https://askubuntu.com/questions/1410398/just-installed-ubuntu-22-04-on-a-dual-boot-setup-now-my-other-os-isnt-showing16:48
arkanoidarraybolt3[m]: I'm puzzled. If os-prober is disabled in 22.04, why I have grub showing 3 OSs (deleted windows, old ubuntu, new ubuntu with encrypted root) after the operation of deleting windows partitions to install new ubuntu?16:49
arraybolt3[m]arkanoid: Are you using Ubuntu 20.04?16:49
arkanoidno, 22.0416:50
arkanoidboth old ubuntu installation and new ubuntu installation are ubuntu 22.0416:50
arraybolt3[m]Hmm... then you might be looking at your UEFI boot menu and not GRUB. Does the bootloader say "GNU GRUB" up at the top?16:50
arkanoidwell, let me reboot to double check, but yeah I am quite sure. 1 minute16:51
arraybolt3[m]Maybe it's still picking up stuff from the EFI partition but not mounting things from other partitions then. I dunno.16:52
arkanoidI confirm GNU GRUB at boot with 3 OS options16:52
arkanoidWell whatever it is doing, it is making things work out of the box. Let's see what happens now that I'm going to reinstall new ubuntu ...16:53
arkanoidWhat should happen in EFI if I have more than one ubuntu installation on same system? Should I have one or two grub entries there?16:54
arkanoidI currently have EFI folder with Boot, Microsoft and ubuntu subfolders16:55
arkanoidThe EFI/ubuntu/grub.cfg points to blkid of sdb2, so /boot of new ubuntu.16:59
arkanoidIt means that os probe is working somehow on 22.04 as it detected all 3 OSs on installation16:59
arkanoidLet me double check in /boot/grub.cfg of newly installed Ubuntu if it matches the boot entries17:00
arkanoidYep, I confirm /boot/grub/grub.cfg of newly installed Ubuntu contains entries for previously installed OSs, so probing is working17:02
* ogra notes that there is no unencrypted /boot in Ubuntu Core systems that use secureboot with full disk encryption ... (and there is no way to have either/or, they only go together)17:04
arg_anyone using ubuntu on the HDMI TV sticks like the 1 from aliexpress, they say its ubuntu compatible, but it runs windows natively, just to hear how it runs, they have 2 and 4GB version.17:10
arg_sort of like the arm android tv sticks but its x86-64.17:11
arg_size of a usb stick.17:11
leftyfbarg_: https://ubuntu.com/certified17:11
leftyfbarg_: for anything else, you would just have to try it17:11
arg_leftyfb: yeah they are not branded things tho, i'm gonna hack 1 out to bring back a ubuntu phone competitor to the pine64. With a tiny hdmi touchscreen lol ;]17:16
arraybolt3[m]arkanoid: Hmm, not sure why it's picking them up then. I don't know if it's to be expected or not.17:16
leftyfbarg_: good luck17:16
forgotmynicki have rsyslog listening on a socket. how do i send test entries to that socket?17:18
sarnoldforgotmynick: try logger17:19
forgotmynicksarnold: i love you17:21
sarnoldforgotmynick: <3  :D17:22
arkanoidarraybolt3[m]:  I can confirm after reinstalling ubuntu plus deleting old EFI partition and recreating from scratch that the installer creates a grub config that permits loading old ubuntu install and all "advanced" sub options17:27
arraybolt3[m]Hmm. Maybe they changed something... though I'm not sure how that would make sense. Well, woot! Glad it's working, now I have one more thing confusing the sap out of my brain! 🤪17:28
HashHi17:44
HashWhat is ~/.xtoolkit used by?17:44
tomreynIf i had to guess, i'd say the X Toolkit17:47
leftyfbI do not see that file mentioned anywhere having to do with ubuntu17:47
leftyfbthe only thing I can find is a 3rd party tool not included in ubuntu called incubator-weex-cli17:48
leftyfbmaybe week-tookit npm package17:50
HashI thought that too, but it seems to have some node packages in there...17:50
leftyfbsorry, weex-toolkit17:50
HashIsn't X toolkit just x libs and stuff? What what that have to do with node/npm17:50
leftyfbright, it's probably related to some npm package you installed17:51
HashUnless it's like that intel cross platform mobnile app dev toolkit I might have instaleld once17:51
Hash\o/17:51
leftyfbah right, Hash has me on ignore so didn't see any of this17:51
sarnoldleftyfb: lol that's got to save a huge amount of time :)18:01
skullone_Is there a way in preseed to change the partman options to modify XFS filesystem format options? (ie. turn off reflinks, or other custom oddities)18:28
tomreynskullone_: i don't know your answer, if the question refers to ubuntu desktop (it seems to). i also don't know your answer if the question would also extend to ubuntu server (which can be converted into a desktop installation), but assume you may have more options with subiquity + autoinstall (via curtin)18:45
BeheritBluesKaj: Hi !19:40
arraybolt3[m]Beherit: 👋19:40
Beherithi array!19:41
Beheritfirst signs of life! hah!19:41
arraybolt3[m]Beherit: Anything we can help you with?19:41
Beheritbeen years since i actually used the MIRC , just logged in as an opportunity when i was sorting out thunderbird.19:41
Beheritno arraybolt, thanks. just saying hi.19:42
arraybolt3[m]Nice. If you ever run into anything that goes wrong with your Ubuntu system, feel free to ask for help here. Also, if you're interested in general conversation, we have #ubuntu-offtopic:libera.chat.19:42
Beheritah Thank you!!19:43
=== blackest_mamba_ is now known as blackest_mamba
murmelarraybolt3[m]: may I pm you?20:08
arraybolt3[m]murmel: Yeah, sure. Matrix preferred, IRC will work too but I might be slow.20:08
=== scoobydoob is now known as scoobydoo
murmelis there a reason why ubuntu removes the rootless install script from docker.io?20:57
murmelcan't find anything about it20:57
de-factowhy is ctrl alt backspace not killing Xorg in Ubuntu?20:58
leftyfbde-facto: pretty sure that was removed years ago21:00
de-factowhy would one remove such a useful thing?21:01
de-factognome shell freezes from time to time, so it would be useful to be able to kill it21:01
leftyfbde-facto: you should be focusing more on the freezes and less the workaround21:02
murmelyeah it's definitely not normal that gnome freezes21:02
de-factoit never was stable for me, so i got used to it freezing from time to time21:03
de-factosame with pulseaudio, it just corrupts from time to time, so killing it solves the issue with both21:04
de-factowas Ctrl Alt Backspace completely removed or just diabled?21:05
leftyfbde-facto: a quick google search shows it was "disabled" 13 years ago https://www.linuxjournal.com/content/tech-tip-restore-ctrl-alt-backspace-ubuntu21:06
gordonjcpyeah21:07
gordonjcpctrl-alt-backspace to "zap" X hasn't been a thing for years21:07
leftyfbde-facto: are you running Ubuntu 20.04 or 22.04 and gnome is still freezing for you?21:08
de-facto22.0421:08
leftyfbde-facto: is gnome freezing up on you?21:09
de-factoyeah its freezing from time to time21:09
leftyfbde-facto: is this a fresh install of ubuntu or have you been upgrading since 2009?21:09
de-factofresh21:10
leftyfbde-facto: ok, maybe file a bug or ask someone here for help troubleshooting the issue21:10
de-factoi just assumed that gnome shell is not really stable yet21:10
de-factoyeah i just want ctrl alt backspace21:10
de-factoi dont want to dig into Xorg, thats too crazy21:10
de-factothey disabled it because users could "accidentally trigger it" lol21:11
de-factoaha, hmm21:11
leftyfbde-facto: you'll probably need to dig into "Xorg" (not the default unless you have Nvidia) in order to write the code back in to give you your workaround for a problem you aren't interested in getting resolved21:11
leftyfbbtw, gnome shell was released 11 years ago21:12
de-factoyeah still not stable for me, sorry, but its how it is21:13
leftyfbde-facto: your issues could be related to bad memory, cpu, gpu, overheating, wrong drivers installed, faulty software installed or lack of resources. Since you don't know or are interested in resolving the issue, it's not yet valid to say gnome shell isn't stable21:16
de-factoall problems observed could be caused by such generic implied causes, to me gnome shell freezes from time to time, so thats an observation, hence it is not stable for me, what is the cause? i do not know, but i want to be able to kill it when it freezes21:20
leftyfbde-facto: wouldn't you prefer it not happen?21:20
de-factoyes i can buy a new pc, debug xorg on both my old and the new pc and compare, or i just could kill it and continue with what i do21:21
de-factofound it21:24
de-factogsettings set org.gnome.desktop.input-sources xkb-options "['terminate:ctrl_alt_bksp']"21:24
de-factonice it works, should be enabled by default in my opinion, very useful and widely known21:36
ogragiven it has been disabled in most distros a decade and more ago, i wonder if it is actually still known at all by general users21:43
ZenexerI'm seeing that 22.04.1 was delayed until Aug 11.  However, all of my systems seem to already be on 22.04.1.  Anyone know what that's about?22:01
leftyfbZenexer: only the 22.04.1 image releases have been delayed. You are running 22.04.122:04
ZenexerGot it.  Does that have anything to do with apt dist-upgrade holding back python3-distupgrade and ubuntu-release-upgrader-core?22:04
leftyfbno22:05
leftyfbwell, not sure about the last package22:05
ZenexerHmm22:05
leftyfbwell, maybe both22:05
leftyfbit's only a couple more days. Those shouldn't affect you though22:06
ZenexerI'm getting weird apt behavior.  The repos all seemed to be down for about 15 minutes, and now that they're back, apt list --upgradable shows both of those packages are ready to upgrade, but dist-upgrade doesn't want to go through with it unless I explicitly pass those two packages as args.22:06
oerheksthe fix is to install ubuntu-release-upgrader-core, it pulls in the other 2 ?22:06
ZenexerYeah, just making sure I'm not going to mess anything up by upgrading (or not upgrading)22:06
leftyfbyou could just wait a couple days if you want to be safe22:07
ZenexerSeems like any systems that ran apt update shortly prior to the outage are affected, whereas any systems that waited until after are able to upgrade without issue.  I don't think I've ever seen that before.22:07
oerheksi had that issue too, the single package install fixed it22:08
ZenexerYeah, it seems to be upgrading fine on other systems, so I just went ahead and upgraded.  Guess I'll just ignore it.22:09
leftyfbZenexer: I just ran a full-upgrade, both of those packages installed just fine but snapd was held back. Which I'm ok with just leaving till it's not held back anymorw22:09
oerheksoh, it is something about phased updates .. i am not one of them22:18
oerhekshttps://askubuntu.com/questions/1420969/how-to-force-packages-that-have-been-kept-back-to-be-installed-as-automat/1421130#142113022:18
PReTeXTAToCanonical has plans to launch Ubuntu for VisionFive Board V1 Model?22:35
sarnoldheh, the release notes of the next release are mighty thin still https://discourse.ubuntu.com/t/kinetic-kudu-release-notes/2797622:42
ograPReTeXTATo, https://discourse.ubuntu.com/t/ubuntu-on-the-visionfive-and-the-nezha-boards/2985822:47
=== skullone_ is now known as skullone
PReTeXTAToTHanKs.22:52
=== apex is now known as apex_
=== apex_ is now known as _apex_
junebugI'm trying to get this crontab to run on reboot but no luck: reboot /home/myhome/bin/disable_touchscreen && echo "disabled touchscreen" >> /home/myhome/startup23:01
junebugusing @reboot23:01
sarnoldjunebug: try: namei -l /home/myhome/bin/disable_touG23:02
junebugsarnold, you mean @reboot myname -l /my/command?23:03
sarnoldjunebug: no, run namei -l /home/myhome/bin/disable_touG   at a shell prompt right now -- my guess is that file, or a directory above it, has incorrect permissions23:03
junebugOh ok23:03
junebugX for everyone23:04
=== chris is now known as Guest1789
junebugI'm on Ubuntu 20.04.4 LTS if that helps23:05
sarnoldmurmel: hey! I finally got around to reading that https://trstringer.com/simple-vs-oneshot-systemd-service/ article and it nails *exactly* why I picked oneshot rather than simple! the follow-up units wait until the oneshot finishes before they start23:07
sarnoldjunebug: and can the user in question also read the script?23:07
junebugyes23:07
junebuguser writing the crontab -e is me23:08
junebugI have rx on all directories and rwx on the files23:08
sarnoldjunebug: okay.. the next usual problem with cronjobs is the PATH is quite a bit more restricted than usual -- take a look at the script and make sure that the shebang line is correct, make sure that every single executable that is used is in /bin or /usr/bin  or has an explicit path23:08
junebugsarnold, yes every executable in the script is in the /bin  or /usr/bin directory23:11
=== blackest_mamba_ is now known as blackest_mamba
sarnoldjunebug: hmm, okay, a good challenge then :) check your mail? cron mails stderr output, maybe you've got a friendly error message saved in a spool file23:13
junebugsarnold, what is the command to check cron mail?23:14
sarnoldjunebug: it depends upon your system's email configuration23:14
sarnoldjunebug: /var/spool/mail/junebug maybe? or if you've got a working mail server on the system, maybe it goes somewhere else..23:15
junebugI don't use email...23:15
junebugI just saw this in the cron.d folder. I think it's an example:23:16
junebugSHELL=/bin/sh23:16
junebugPATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin23:16
junebug8 0 * * *   root    test -x /etc/cron.daily/popularity-contest && /etc/cron.daily/popularity-contest --crond23:16
junebugDo I need to set the shell and the user?23:16
junebugnah that didn't work23:21
sarnoldjunebug: it depends upon the specific crontab -- the "system" crontabs often do require a user name23:24
junebugman cron reveals my system is using cron 8. I do a /reboot and don't find reboot anywhere in the manual23:25
junebugBut I do see @reboot in man crontab which is crontab 523:26
sarnoldare you sure you're checking the right section? ± MANPAGER=cat man 5 crontab | grep reboot23:27
sarnold              @reboot        Run once, at startup.23:27
junebugYeah I see it in crontab but not cron23:27
junebugSo here's the thing23:28
junebugI know @reboot works23:28
junebugBecause I can do @reboot echo "hello" >> /my/home/somefile23:28
junebugAnd it's there23:28
junebugIt just doesn't like the script or how I'm calling the script23:28
sarnoldcan you run that script by hand fine?23:29
junebugYes23:29
junebugI run it every time I start up my computer23:29
sarnoldmaybe instead of trying to find error output, try redirecting the output to a file? @reboot /home/myhome/bin/disable_touchscreen > /tmp/out 2>&1   ?23:33
junebugSmart23:33
junebuglet me try that23:33
jokesarnold: hehe you are everywhere23:35
sarnoldayup :) heya joke23:36
junebugsarnold, I see this printed twice: Unable to connect to X server23:38
sarnoldjunebug: aha!23:38
junebugShould I add sleep 120?23:39
sarnoldyou'll also need to supply the XAUTHORITY and DISPLAY environment variables to it to connect to the running X. it'd probably be easier to just move the script to an X11 autostart service23:40
sarnoldmost desktop environments have an autostart thingy23:40
junebugok let me google that23:40
junebugThank you23:40

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!