/srv/irclogs.ubuntu.com/2022/10/06/#ubuntu.txt

=== EriC^^ is now known as Guest5936
lagunalorrei listened to mark shuttleworth's video today about free ubuntupro security patches for 23000 apps..and i registered for it...but after logging in at the bottom of the page it wants me to attach a machine ...what is that about00:54
lagunalorrewhat would i be attaching this machine to00:55
arraybolt3[m]lagunalorre: You attach your (free) Ubuntu Pro subscription to the computer you want to have Ubuntu Pro work on.00:55
lagunalorrearraybolt3 ok...this one and a backup laptop...but there is only one token on the page00:56
sarnoldthat's fine, you can use the token on multiple computers00:56
arraybolt3[m]lagunalorre: It's kinda like a license key, as I understand it. When you update your system, it tells Canonical "I'm using Ubuntu Pro, here's the key that proves I'm licensed to do so", and then Canonical's servers can look at that key and say "Yep, this system is ready to use Ubuntu Pro, send it the Ubuntu Pro updates."00:56
lagunalorresarnold..oh ok00:57
lagunalorrearraybolt3 ok thanks for explaining that00:57
lagunalorrei haven't run into any security problems lately..and it would be tough since i am behind a firewall00:58
lagunalorrebut i registered for it anyway00:58
rob0Firewalls can't protect you as much as you may think. If a vulnerable bit of software on your system reaches out and hits something hostile, the firewall can't block that.01:00
lagunalorrerob0 but the firewall shuts down all ports except port 80...no more ftp weakness or dns weakness or any other port....and an updated browser does a lot to protect the only open port 8001:01
arraybolt3[m]Firewalls prevent software from sending data out or receiving data in without your permission, but if a piece of software is allowed through, the firewall likely won't do anything with the data that goes through. That's the weak link.01:02
arraybolt3[m](But then again, your browser is covered even without Ubuntu Pro, so if you apply updates, it shouldn't matter either way.)01:02
lagunalorrearraybolt3 yes but i don't allow apps to go out or anything to come in except for the browser01:02
lagunalorrearraybolt3 and all dns traffic is now passing through the port 80 to cloudflare only01:03
arraybolt3[m]Right, but if a piece of malicious data is downloaded by the browser from a website you visit, and that data glitches the browser and causes it to execute code it didn't mean to, then you're hacked. (Again, this is just the "how it would happen" scenario - keeping a system updated prevents that from happening in all but the rarest of situations, and you would be protected even without Ubuntu Pro.)01:03
arraybolt3[m](They call it a buffer overflow vulnerability - it's both fascinating and terrifying. It's also a good part of why I'm somewhat vigilant about keeping my system updated. :P)01:04
lagunalorrearraybolt3...yes but the browser is also clamped down not only by recent updated browser code but also ublock adblock noscript and so on01:04
arraybolt3[m]Very good.01:05
* arraybolt3[m] also uses an adblocker everywhere01:05
lagunalorrei tried to put sudo pro attach longtokennumber but it says pro is not an executable command01:06
lagunalorrewhen i tried to copy and paste the command it does not work01:07
arraybolt3[m]lagunalorre: That means you need to update the Ubuntu Advantage client. Lemme find the command...01:07
arraybolt3[m](It should autoinstall eventually, but it's not quite there yet.)01:07
sarnoldinstall ubuntu-advantage-tools01:07
arraybolt3[m]lagunalorre: Run `sudo apt install ubuntu-advantage-tools` first, then try again.01:08
arraybolt3[m]I just did it, now running "pro --version" works for me.01:08
lagunalorrearraybolt3 yes it is starting to install some stuff now01:09
lagunalorrearraybolt3 ok it enabled a couple of services and installed some dhcp patches...and i guess it is uptodate01:10
arraybolt3[m]You followed this whole guide, right? https://discourse.ubuntu.com/t/ubuntu-pro-beta-tutorial/3101801:11
sarnolddhcp was just coincidental, that would have been installed even without ubuntu pro https://ubuntu.com/security/notices/USN-5658-101:11
lagunalorrearraybolt3 i am not sure why a dhcp patch was necessary as that is only local traffic between this laptop and the wifi router01:12
lagunalorrearraybolt3 but anyway it is installed01:12
arraybolt3[m]You still need to attach your system to Ubuntu Pro and then activate the extra updates.01:12
lagunalorrearraybolt3 how do you activate the updates01:13
arraybolt3[m]sudo pro attach [YOUR_TOKEN]01:13
arraybolt3[m](Replacing [YOUR_TOKEN] as applicable.)01:13
lagunalorrearraybolt3 yes i already did that and it enabled 2 services01:13
arraybolt3[m]Then:            sudo pro enable esm-apps --beta01:13
arraybolt3[m]And you did the sudo pro enable esm-apps --beta step?01:14
lagunalorreit enabled esm-infra and livepatch01:14
arraybolt3[m]OK, then you still need to run "sudo pro enable esm-apps --beta". So far only part of Ubuntu Pro is enabled.01:15
arraybolt3[m]The above command enables the rest of it.01:15
arraybolt3[m](Here's hoping they make this more user-friendly in the future!)01:15
lagunalorrearraybolt3 ok it says esm-apps enabled01:16
arraybolt3[m]Nice! Now you should be able to do "sudo apt update && sudo apt full-upgrade".01:16
user9dcould someone survive on a 8GB RAM laptop with 1TB swap partition on the their HDD + Ubuntu 22.04 live ISO burned to a DVD that is used to boot into Ubuntu 22.04 for an average of 3.92 day uptime while using that system as a computer for daily activities of talking on irc + creating random programs in Bash 5, Perl 5, Python3, and PHP 7 for 5 years straight?01:28
arraybolt3[m]user9d: No. I see a week link here.01:28
arraybolt3[m]user9d: If you used an Ubuntu 22.04 live ISO as your main operating system solely for five years, you won't get any security updates during that time as the DVD is read-only and won't accept the security updates.01:29
arraybolt3[m]user9d: As a result, it would be just as bad as using an EOL version of Ubuntu.01:29
arraybolt3[m]What would work would be to install Ubuntu directly to a USB drive that can accept updates. Then I can see this working (though a 1 TB swap partition?!?!?! That's quite overkill.)01:29
arraybolt3[m]However, even with a USB drive installation, you probably wouldn't last for 5 years as the USB drive would likely wear out before then.01:30
arraybolt3[m]Since you'll never need the 1 TB of swap for anything (due to the speed of the partition and the intended use cases), I'd just install Ubuntu to a large portion of the hard drive, and leave yourself some swap space to cope with the 8 GB of RAM. Probably 8 GB of swap would help here, more if you intend on really pushing the system (though it will get slower when it starts swapping to disk).01:32
user9dwhy does linux care as much about security as windows os because my android 7 smartphone hasn't system updated in 5 years?01:34
arraybolt3[m]user9d: Because cellphone manufacturers don't care to keep their hardware from going obsolete and would rather make it so people have to upgrade or risk getting hacked.01:35
=== keypushe- is now known as keypusher
user9dwhat's the point of preventing getting hacked on Ubuntu when 99.9% of the time you are hacked it feels like you're 99.9% secure because it's so fast?01:37
arraybolt3[m]user9d: Good question, but I think this would be more on-topic in #ubuntu-discuss. Care to ask it over there?01:37
rob0DNS over https (DoH) is port 443; DNS over TLS (DoT) is port 853.01:39
rob0lagunalorre: ^^01:39
lagunalorrerob0 why is an extraport being opened for dns when all traffic could be handled through port 80 only02:08
rob0most web traffic has been https (443) for a long time02:09
lagunalorrerob0 yes i remember the port 443 for https compared to http at port 8002:09
lagunalorrerob0 but why don't they shut everything down except port 80..since all video communications can be handled directly through the browser02:10
lagunalorreas well as secure sockets02:11
lagunalorrerob0 nobody uses ssh,ftp,gopher,udp, or any of that other stuff anymore that was present 30 years ago02:12
rob0nobody?  I sure do.02:12
rob0well,not much ftp, and gopher is gone02:12
lagunalorrerob0 well you do so at your own risk...because opening your ports to the world leaves you vulnerable for exploits that can take advantage of inadequate buffer issue02:13
lagunalorrerob0 then they can install malicious code, rootkits, and trojan horses and all kinds of crap which are real headaches to deal with02:15
rob0I'm aware of risks, thanks. I don't lose sleep over sshd.02:15
lagunalorrerob0 i have even seen them try to embed code in simple email docs02:18
lagunalorrerob0 or use emailed links to try to lure the browser into unsafe sights of malicious coders02:19
lagunalorrerob0 that typically take advantage of buffer issues or sometimes take advantage of javascript or jre's...that is why everybody uses noscript and turns javascript off in the browser and never installs java runtime environments02:22
lagunalorrerob0 and most people try to even limit browser activites in a sandboxed fashion02:23
lagunalorrerob0 where the sandbox is isolated from the rest of the directories of your system02:24
seanhello all02:25
seanwhat do you all think of the ubuntu DDE ??02:26
lagunalorresean..what is DDE the old dynamic data exchange topic02:27
lagunalorresean when you use acronyms..we have no idea what you are referring to02:27
arraybolt3[m]I think he means Deepin Desktop Environment.02:29
lagunalorrearraybolt3 oh02:29
lagunalorrearraybolt3 i am surprised mark shuttleworth is such a young man that i saw in the video...i knew he had been around for a long time with ubuntu...so i thought he was much older like bill gates02:33
ice9why skypeforlinux process have 119 threads??03:08
sarnoldprobably one for every button, one for the camera, microphone, one for smoothing and compressing video, one for compressing audio, a bunch for dns lookups, a bunch for network communications..03:11
oerhekshow many treads has vscode?03:22
=== guiverc2 is now known as guiverc
=== LabMonkey is now known as Mechanismus
noarbwhat are the benefits of using the evdev subsystem versus libusb and hidapi? I have a feeling the differences are historical and how they were developed, but I'm not sure03:36
jhutchinslagunalorre: I think you have an unrealistic sample of "everybody" who is paranoid about web browsing.04:04
jhutchinsMost people do not take elaborate precautions, they just install a browser and browse.04:05
lagunalorrehutchins well the online world is full of victims who weren't paranoid04:05
jhutchinslagunalorre: Again,  I am suspicious of your sampling method.  You appear to be suffering from selection bias.04:06
lagunalorrejhutchins...well i have a small sample size of careful people....namely 1 me..i am not sure it is biased...because of so many naive victims of the hostile internet04:07
jhutchinslagunalorre: How have you determined that there are "many naieve victims"?04:08
lagunalorrejhutchins nearly every day you hear of internet victims falling prey to all kinds of malicious code and other scams04:08
jhutchinslagunalorre: How do we know if these are actually common, or are edge cases that make a sensational story?04:09
lagunalorrejhutchins...no they are real...i have encountered lots of attempts to sabotage or steal info/monetary assets over the last 50 or so years04:10
jhutchinslagunalorre: This does not indicate that they were successful.04:11
lagunalorrejhutchins no they haven't been so far as i am concerned but i have heard of many other victims that did not take adequate action to protect themselves against an incredibly hostile internet04:12
jhutchinslagunalorre: I am aware of a fairly large number of users who simply are reasonably careful about what they click on and where they disclose sensitive information and have not had any trouble over the years.04:12
jhutchinslagunalorre: I should also point out that by citing a sample extending 50 years you are straying from your original topic which was web browsing.04:13
lagunalorrejhutchins...yes but thieves and saboteurs and conmen existed way back in the old bbs days before the internet04:14
jhutchinsI just realised that this is #ubuntu and we are WAY off-topic, I'm going to drop it.04:14
arraybolt3jhutchins: I actually am kind of paranoid about internet security also, not because of sample sizes of people who were or weren't pwned, but because of knowing that tools for pwning exist and that they have been deployed in terrifying ways in the past.04:14
arraybolt3For instance, the Blackhole Exploit Kit exists, and one time a malicious advertisement that I believe did a drive-by download ended up on Spotify.04:15
lagunalorrejhutchins and got worse and more plentiful when the lines were open to the world wide web of many hostile countries and gangs04:15
arraybolt3My way of protection is - a) Only visit trusted sites on my main computer, b) use an adblocker, and c) visit untrusted sites in a QEMU virtual machine.04:15
arraybolt3jhutchins: Oh, just saw your thing about off-topic. I was going to say something, but I thought discussing how to secure Ubuntu and if it was necessary was on-topic.04:15
arraybolt3(Maybe only kinda on-topic, but still...)04:16
jhutchinsarraybolt3: That may be, but we've gone beyond "how" into "why".04:16
lagunalorrejhuthins don't set people up to be victims because of laxadaisical attitudes....let them know it is better safe than sorry04:17
jhutchinsJust because you're paranoid doesn't mean they're not out to get you.04:20
lagunalorrejhutchins i am a qualified doctor and i don't believe in giving information that would cause some people to be harmed04:22
lagunalorrejhutchins as a doctor i don't take advantage of people nor do i want to see that happen to them by anyone else04:22
jhutchinslagunalorre: This is still  off-topic here.04:24
lagunalorrejhutchins well i guess security issues can be discussed elsewhere04:24
jhutchinslagunalorre: Perhaps ubuntu-offtopic.04:24
jhutchinsIf your system has a sync interval of 34m, and you suspect that something has caused drift in less than that time, is there any way (using only systemd/timesyncd) to request an immediate sync?05:39
ice9what's the difference between a package in "jammy" and "now"?05:43
tarzeauare people using jammy with or without jammy-updates?05:53
tomreyntarzeau: hopefully with?05:54
tarzeauis with recommended?05:54
tarzeaui was refering to the sources.list entry, not whether one updates or not05:54
tarzeauis without possible and supported too?05:54
tomreynhaving bug and security fixes makes sense to me05:54
jhutchinstarzeau: I suppose it depends on what you want out of it.05:55
tarzeauosn05:55
tarzeauisn't security in jammy-security separately?05:55
tarzeaujhutchins: i want stable computers for a lot of users05:55
tarzeauand i appear to have a problem with phased updates and jammy-updates that packages disappear (get moved to phased updates), while i have phased updates participation disabled05:56
arraybolt3!phasedupdates | tarzeau, you might find some info to help with that here05:56
ubottutarzeau, you might find some info to help with that here: Since Ubuntu 21.04, APT now implements phased updates. This can hold back updates on some systems while they are being phased in. See https://help.ubuntu.com/community/PhasedUpdates for more info.05:56
tarzeauthus some xymon-client/hobbit-plugins reports packages not installed from repo05:56
arraybolt3There's instructions on how to make your system ignore update phasing, as well as some reasoning behind why it's not necessary.05:56
tarzeauarraybolt3: thank you for the link, all read, and got it finally as wanted: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/198167205:57
ubottuLaunchpad bug 1981672 in aptitude (Ubuntu) "phased updates API and client for aptitude" [Wishlist, Triaged]05:57
tomreyntarzeau: https://wiki.ubuntu.com/SecurityTeam/FAQ#How_are_the_.22-updates.22_and_.22-security.22_pockets_different.3F05:57
tarzeauarraybolt3: it might not be necessary, but it's a wanted way simply because we don't have auto-app-crash-reporter running, we don't want to take part on phased updates05:57
arraybolt3tarzeau: Whatever works for you. If you know the risks and are like, "Yeah, I want to install it anyway", then great. That's what the setting is there fore.05:58
tarzeautomreyn: that faq entry explains the difference between -updates and -security, and we have -security, but no phased updates nor -updates. what am i not seeing?05:59
tarzeauarraybolt3: the most annoying part about phased updates is they can get updated while some already have it, some other machines don't, and they start from 0% with another new version again - me ending with machines with 3 different versions of software (happened shortly with systemd)06:00
tomreyntarzeau: so, for security updates, my understanding is that they are published on -security first, then also on -updates. but this would not matter to you if you have -security, i guess. but what matters to you, you said, is stability, which probably means you want bug fixes. those surely can go to 'jammy-updates' months before they hit 'jammy'06:00
tomreyntarzeau: i don't know about / can't comment on the phased updates issue you're dicsussing.06:01
arraybolt3tarzeau: There's a setting for making machines all "phase together", which I didn't document in the above link. Info on that is here: https://askubuntu.com/a/1431742/159846706:02
tarzeauarraybolt3: i was aware of that setting, thanks for pointing out06:03
tomreynjhutchins: sudo kill -1 $(pgrep --full --oldest systemd-timesyncd)06:05
tomreynjhutchins: tcpdump tells me this make timesyncd connect to ntp.canonical.com:12306:08
jhutchinstomreyn: Thanks.  Seems pretty roundabout.06:21
=== Mibix is now known as Mibixaurus
marcin_Hi, I have xubuntu-22.04 but I am pretty sure the issue is related to ubuntu. I am trying to import gpg public key, and I am receving an error07:06
marcin_gpg --import public.key07:06
marcin_gpg: nie odnaleziono poprawnych danych w formacie OpenPGP.07:06
marcin_gpg: Ogółem przetworzonych kluczy: 007:06
marcin_on another ubuntu station, I can import it07:06
marcin_I did not find anything in the net :(07:07
SteelRosemarcin_: can you please translate the error to English?08:00
marcin_@steelRose: gpg: no correct/proper data found in OpenPGP format08:04
SteelRosemarcin_: how did you transfer the file over to the affected Ubuntu system?08:06
marcin_copied form 1password, where I store it, and try to store it with echo, echo -n, vi & nano08:07
marcin_none worked08:07
SteelRosemarcin_: why don't you scp the file?08:09
SrainUser111Hi08:10
SrainUser111How do I add a sudo user, and i must be administrator??08:10
marcin_SteelRose: i can not do it with scp08:10
SteelRosemarcin_: another option would be to select everything with the mouse, save it to the clipboard... then, on the target host run: cat > foobar.gpg   and paste everything... then hit ctrl-d to save08:10
SteelRoseSrainUser111: you must be either root to do it or have your user already added to the sudoers file08:11
SrainUser111ok08:11
marcin_SteelRose: I will try08:12
SteelRoseSrainUser111: if regular users could promote themselves to root that would be a security flaw...08:12
marcin_and let you know08:12
SteelRosemarcin_: OK08:12
=== ss is now known as Guest1629
marcin_SteelRose: I did: gpg --import, pasted everything. pressed enter, then Ctrl + D and still the same08:29
SteelRosemarcin_: did you paste the contents to a file before doing the import?08:34
marcin_yes, then cat it08:34
SteelRosemarcin_: no :-) Please take a look at this: https://pastebin.com/amJSsSS008:36
nikolamI can't ser Other os to boot as defaut in XUbuntu's GNOME. I think I tried all I found.09:16
=== mkv is now known as m4v
alkisgnikolam: run `sudo -i` first, and then:09:26
alkisgmkdir -p /etc/default/grub.d &&09:26
alkisgwget https://gitlab.com/sch-scripts/sch-scripts/raw/main/share/sch-scripts/grub.cfg -O /etc/default/grub.d/sch-scripts.cfg && update-grub09:26
alkisgIt makes grub show the menu, REMEMBER the last default, and boot it in 5 seconds09:26
alkisgSo if you reboot from windows, it'll boot windows, if you reboot from linux, it'll boot linux09:27
ikoniaanyone know if ubuntu is shipping their work on microk8 anywhere outside of snap packages ?09:38
nikolamalkisg: I'll try it and report. I think I used to try saved and savedefault, will try it his way.09:59
nikolamThanks09:59
alkisg👍️10:00
=== zakalwe` is now known as zakalwe
Ricohello. using ubuntu-mate 22.04, how can I start an application (from terminal) on a specific display ? (I have 2 screens)10:25
agent_whiteRico: I would look into xdotool.10:27
SteelRoseRico: do an "echo $DISPLAY" on each screen... then set it as needed before starting the application10:27
agent_white^ that too.10:28
RicoSteelRose: it returns :0 on each screen10:28
SteelRoseRico: that's normal... try setting it to :0.0 and :0.110:29
SteelRoseDISPLAY=:0.1 ; firefox10:29
SteelRosefor example10:29
SteelRoseRico: other than that, you can tell MATE to remember where the windows were when you close the session10:30
Ricoonly :0.0 works and it opens app on the current screen10:30
ograRico, https://ubuntu-mate.community/t/open-application-on-current-workspace/1350410:33
Ricoogra: thanks, but that's not what I asked for10:35
ograRico, yu want tuy app to be tied to a certain screen (workspace) don't you ?10:35
ogra*you want your app ...10:36
agent_whiteRico: This is a more intense option, but if you use a tiling window manager, opening under your mouse cursor (or having the abiliity to quickly move/do this) is the default.10:36
Ricoogra: no. I want to be able to chose the screen on which my app will popup when I start it via terminal10:36
ogra"close the screen" ?? you mean unplug the monitor ?10:37
ograbah, can't read10:37
ograsorry10:37
agent_whiteI would whip up a little script using xdotool.10:37
agent_whiteand xrandr.10:37
ograRico, and according to that discussion you can only do this with compiz10:37
agent_whiteTo take in the screens available, resolution, shift your mouse and spawn it... is one option.10:38
ograagent_white, how would xrandr help here ?10:38
agent_whiteJust for measuring screens. Ideally, you take that full width, shift 75% either way and you will hop screens.10:38
ograit wont manage anything application specific ...10:38
agent_whiteCorrect, which is why it's good.10:39
agent_whiteUse output from xrandr to feed xdotool which can be used to manipulate x11 windows.10:39
agent_whiteOr since your monitors don't change all the time, hardcode it.10:39
agent_white(excluse xrandr)10:39
Ricostrange thing that xrandr only shows one screen10:39
ograwell, ten you should probably rather use something like devilspie and simply tell your WM where to place it ...10:39
agent_whiteRico: That's my point.10:40
agent_whiteIt sees multiple displays as one single screen. They compose it.10:40
agent_whitexdotool can help you narrow down to a specific place on your desktops to place it. Just look into it.10:40
Ricook thanks10:41
marcin_SteelRose: the same unfortunately :(11:25
TomyLoboI just found out the docker snap auto-updates daily, if there's an update available. is anyone using that in production?11:27
=== scoobydoo_ is now known as scoobydoo
TomyLoboyou can probably turn that off, but that's not a nice default. desktop users already have a different auto-update mechanism, so that should be used. server users can install unattended-upgrades if they so choose11:36
SteelRosemarcin_: can you compare the files on one server where it works and on the other where it doesn't?12:17
SteelRosemarcin_: run an md5sum private.key on both (where "private.key" is the file you want to check)12:17
alkinoHello, I want to know if it is possible to have several "desktops" with basic ubuntu?12:56
alkinoin tiling we call it "tag" sometimes12:57
SteelRosealkino: yes12:58
SteelRosealkino: do you mean virtual desktops?12:58
alkinoSteelRose: maybe, I find nothing because I don't know the name under ubuntu12:58
alkinoI will lool for that ;)12:58
alkinoit works with gnome-tweaks13:03
alkinothanks ;)13:03
BluesKajHi all13:09
SteelRosealkino: np13:21
=== diskin is now known as Guest6392
=== diskin_ is now known as diskin
=== LanDi1 is now known as LanDi
=== ajfriesen4 is now known as ajfriesen
edduhola15:01
oerheks:-)15:02
eddu:)15:04
=== LanDi1 is now known as LanDi
=== LanDi1 is now known as LanDi
=== EriC^^_ is now known as EriC^^
=== LanDi1 is now known as LanDi
=== J-ro1 is now known as J-ro
=== x__ is now known as wellwm
alkisgSome teachers have managed to move their "Public" dir around in the file manager, so that `grep PUBLIC /home/teacher/.config/user-dirs.dirs` now shows `XDG_PUBLICSHARE_DIR="/home/teacher"` (their home dir instead of the Public subfolder).17:00
alkisgE.g. if you move "Public" into "Documents" in nautilus or caja, you'll see user-dirs.dirs automatically reflecting the change.17:00
alkisgI'm testing moving around "Public", but I can't reproduce that exact outcome, to make it the same as the home folder... any bright ideas on how to reproduce it?17:00
=== x1 is now known as wellwm
alkisgWhoops I just got it. Deleting the "Public" folder and logging in again, runs xdg-user-dirs-update, which then says "reassigning PUBLICSHARE to homedir"17:01
PRETEXTATOHeLLo! I Am Using UBUNTU 20.04.05 and THis VerSion has OpenSSL.v1.1.1.F InsTalled BY DEFAULT. I TRied Upgrade To 1.1.1.O BuiLding From SourCe CodE And I AlMosT BroKe THe OS. So... I WouLd LiKe To InsTall OpenSSL.v3.0.5 From SourCe CodE On /OPT DIrecTorY And Use iT WITH AnoTHer CURL VerSion I WILL BuILd On /OPT DIrecTorY. WHo CouLd HeLp Me WITH THaT TasK?17:28
PRETEXTATOI WANT THaT OpenSSL.v1.1.1.F ConTine being THe DEFAULT.17:30
cbreakwhat you need is a working shift key17:30
lotuspsychjePRETEXTATO: we dont advice to build packages from source, use the packages from the official repos17:31
cbreakand when you compile alternative software, set a fitting install prefix17:31
cbreakdo not mess with the OS paths17:31
cbreakdo not install self-compiled things directly into /usr, that's bound to end up badly17:31
PRETEXTATOI SaW.17:31
PRETEXTATOI almosT broke THe OS.17:32
leftyfbPRETEXTATO: please fix your shift/caps lock key17:32
PRETEXTATOI Fixed.17:32
cbreakmust have smashed his monitor with his keyboard. I've seen this happen in other cases (on youtube :)17:32
PRETEXTATOOpenSSL.v1.1.1.F is NormaL NoW.17:33
PRETEXTATOOH!17:33
cbreakso, read the manual for the software you want to install17:33
PRETEXTATOI WRITE THIS WAY.17:33
iomari891greetings, is there a timeout option for fstab to avoid long delays when a drive is not present?17:33
PRETEXTATO:)17:33
leftyfbPRETEXTATO: please stop intermittently hitting shift/caps17:33
leftyfbPRETEXTATO: do not write that way17:34
PRETEXTATOI HaVe DisLexia.17:34
* ogra just doesnt read this way ... 17:34
leftyfbPRETEXTATO: Dislexia does not cause you to randomly hit shift. More than likely you're using some application/plugin that is doing this. Please disable it17:35
PRETEXTATOI Am Serious, DudE.17:35
cbreakiomari891: I'm assuming you're already using nofail17:36
cbreakiomari891: do you have to use fstab?17:36
cbreakyou could use https://www.freedesktop.org/software/systemd/man/systemd.mount.html instead17:37
PRETEXTATOI BuiLd A OpenSSL.v3.0.5 Using THis Command...17:39
PRETEXTATO"/config  --prefix=/opt/OPEN-SSL.v3.00.05.RELEASE/  --openssldir=/opt/OPEN-SSL.v3.00.05.RELEASE/  zlib  enable-md2   enable-rc5   enable-gost   shared"17:39
PRETEXTATOAFTer THaT... MaKe, MaKe TesT And MaKe InsTaLL17:40
cbreakthat's not going to work17:40
PRETEXTATOWHY?17:40
cbreakyour shell is case sensitive.17:40
ograPRETEXTATO, ths is really offtopic here ...17:40
PRETEXTATOSo, WHeRe SHouLd I GeT SoMe HeLp17:41
PRETEXTATO?17:41
ograPRETEXTATO, dunno, perhaps here is some openssl channel17:41
ogra*there17:42
PRETEXTATONoT THe oFFiciaL One.17:43
ograwel, this isnt either the official openssl channel, nor a channel to talk about building random stuff17:43
PRETEXTATOI See.17:44
leftyfbthat was painful and unnecessary17:46
=== Eickmeyer is now known as NotEickmeyer
=== Eickmeyer5 is now known as Eickmeyer
alexiafoxhi all :)17:55
arraybolt3o/17:55
alexiafoxthis my first time using irc, liking it so far. hope everyone's well17:56
=== beaver is now known as Guest0110
arraybolt3[m]alexiafox: Nice!17:57
* arraybolt3 is using both IRC and Matrix, thus why there's two similar but different nicks that both look like me because they both are me17:57
lotuspsychjealexiafox: welcome, this channel can be used to ask ubuntu related issues if you want to know something17:58
alexiafox:)17:58
alexiafoxthanks!17:58
=== y0sh- is now known as y0sh_
other_rickHi, How do I get a kernel package to test OpenSSL with 'enable-fips'?18:43
=== pizzaiolo is now known as pizza
oerheks!info linux-image-fips19:26
ubottuPackage linux-image-fips does not exist in jammy19:26
arraybolt3oerheks: That might require that Ubuntu Advantage/Ubuntu Pro be enabled?19:27
oerheksarraybolt3, yes, i see now19:28
oerheksother_rick, you need UA to enable https://ubuntu.com/security/certifications/docs/fips-faq19:28
oerheksnormally one does that in a container, tons of howtos19:29
oerhekshttps://canonical.com/blog/fips-ubuntu-container-security-updates19:29
=== floown_ is now known as floown
samy1028Thinking of FIPS - I saw this last night:  https://ubuntu.com/blog/ubuntu-pro-beta-release19:38
samy1028they now provide up to 5 free Ubuntu Pro licenses which include FIPS 140-2 packages.19:38
aib18hello20:05
lotuspsychjewelcome aib1820:06
fluxcapacitorHas anyone had any luck installing minimal gnome over the standard snaps? I am trying to avoid instability but, at the same time, my system has become bloated and I am looking for a quick fix to avoid a full reinstall ...20:28
oerhekswhat is ' bloated'?20:29
other_rickthanks oerheks and samy102820:29
=== justHaunted is now known as _justHaunted
=== _justHaunted is now known as justHaunted
fluxcapacitorWell, it depends on who you ask. For me, it means that unnecessary packages have broken the system through updates I did not ask for. Snap will update without asking and that itself may have caused weird issues. In my case, there are weird issues with my browser that I had to fix through a cheap hack in the way of installing imwheel. But that's not20:31
fluxcapacitorthe best way to fix things. I am thinking about just throwing on a different variant of gnome ...20:31
explodesOne of my disks is sometimes just not mounted (manifested by Steam not being able to access the SteamLibrary folder on that disk)20:31
oerheksgnome minimal, that does not have unnecessary packages.20:31
explodesI have checked "Disks" to ensure the disk is set to mount on boot, but it just "disconnects" periodically after boot.20:32
oerhekssnap updates itself, that is normal.20:32
explodesI have to click on it from the sidebar and then it is available20:32
oerheksexplodes, add that disk to fstab, to have it automounted https://help.ubuntu.com/community/Fstab20:33
oerhekshttps://help.ubuntu.com/community/InstallingANewHardDrive#Automatic_Mount_At_Boot20:34
explodeswhy does it mount at boot but disconnect randomly?20:34
explodesIs this possibly a loose wire or smth?20:34
oerheksif you did not add it to fstab, it should not automount.20:35
explodesUUID=2a5c9033-65d7-4d4c-907b-1bdf80501699/media/libraryext4rw,nosuid,nodev,relatime,data=ordered,uhelper=udisks2 0 020:37
explodesIt already is in fstab20:38
explodes...tabs got eaten20:38
oerheksoke, that clears up why it is mounted20:38
oerheksonly when that (ntfs?) partition is closed dirty, it will fail automount20:38
oerhekselse yes, power, not enough power, wonky connector, everything is possible20:39
=== feelingsreal is now known as Guest1615
morgan-laptop ubuntu what is fstab20:45
wez_hnfile system table?20:45
explodesTry `cat /etc/fstab` to see what you have20:45
oerheksread back for the wiki20:46
explodesIt defines which disks to mount and how20:46
fluxcapacitorSnaps are bad, I think. I'm not a snap hater like some but I think they are unpopular for a reason. Lots of people will not use Ubuntu simply because of the Canonical Snap craze. There is an anti-Snap culture you could say. I hear riots have broken out and citizens have found themselves in a state of social unrest - all over the great difficulties20:53
fluxcapacitorof Snap20:53
leftyfbfluxcapacitor: or you could just go with your own experience and try them and decide for yourself instead of buying into the FUD20:54
fluxcapacitorI've been using Ubuntu for about five years as a daily - maybe eight years as a dual boot if not longer20:55
fluxcapacitorI am not new to Ubuntu, my friend. I am a die hard user.20:55
oerheksif one wants to avoid snaps, change distro?20:56
leftyfbthen even more reason not to buy into the FUD and decide for yourself20:56
fluxcapacitorI am the alpha of Ubuntu. Your grandchildren whom you chaperone into the distro will ask me what it was like in the golden days.20:56
fluxcapacitorI was here long before this channel was a fart in the wind20:56
oerheksfrom hearsay we have no answer to, mostly unfounded claims20:56
ravagefluxcapacitor, do you have an Ubuntu support question? if yes please ask. if not use the other rooms provided for chat like #ubuntu-discuss or #ubuntu-offtopic. thanks!20:56
fluxcapacitorjoin #ubuntu-discuss20:57
fluxcapacitorwrong command - no slash20:57
fluxcapacitorSorry20:57
Auctushas anyone else seen an issue in 22.04 where if youre using, say, firefox, and you press "ctrl+S", it opens like a thousand file save dialogs and you have to close them all21:00
Auctusthis has been happening over and over since i installed 22.04 last week (upgrade from 20.04)21:01
Auctusits ONLY if you ctrl+s, not right click -> save as21:02
oerheksAuctus, just tested: confirmed!21:02
oerheksi just kill firefox over that :-(21:03
oerheksi find no simular bugreports..21:06
* ogra can't reproduce ... 21:07
ravageonly one dialog here too21:08
oerhekscancel, save, or change type does not respond21:09
Auctusit doesnt happen every time, to me, but on certain links it will21:10
ravageyep21:10
ograwell, right after i typed the above i actually *could* repro it ... lol21:12
ograthis is a horrid bug21:12
WeeBeyQuick question frens. If I want to use dd to clone my computer drive (nvme on a laptop), I should boot from a live disk to do it, correct?21:13
ravageall on wayland? im trying different configs atm21:13
Auctusravage: yes wayland21:13
ravagestill trying to reproduce it with xorg21:13
murmelWeeBey: especially when talking about boot drive21:13
oerheksWeeBey, yes, when not in use21:13
Auctusi think wayland broke a whoooole bunch of stuff, sometimes some windows wont "resize", theyll just turn black on the area that was "resized"21:13
WeeBeymurmel, oerheks ; cool.  ok ok. It doesn't look complicated. I'm excited.21:14
oerheksand after cloning, the UUID changes on the target drive.21:14
ogra"gnome-shell[10437]: Key repeat discarded, Wayland compositor doesn't seem to be processing events fast enough!"21:14
WeeBeyoerheks, ooooh. Interesting. So, it would not be immediately bootable?21:14
ograi see a lot of this in my journal for the time the FF issue happened21:14
WeeBey(given that grub may not find the 'old' drive?)21:14
oerheksWeeBey, indeed, patition UUID does not match fstab anymore21:15
oerhekshttps://help.ubuntu.com/community/Fstab21:15
ravageok so it may be wayland related. i tried about 10 sites on xorg and could not reproduce it. i also run xorg on my main system and could not reproduce21:15
oerheksblkid would show them correct21:15
WeeBeyoerheks, thanks for the input. End goal is to install Windows 10, update my bios, and revert back to my Ubuntu system.21:17
ravageWeeBey, maybe just look for a bootable windows PE usb drive and do the upgrade from there?21:18
murmelno way in linux?21:18
ravage"Hiren's BootCD PE" for example21:18
ravagethere are a few21:18
WeeBeysadly no murmel. It's a Razer. Very windows-centric.21:19
murmelya21:19
WeeBey(It still can't suspend without losing trackpad. I'm even running kernel 5.19.5 and still can't make it suspend without losing touchpad. That's why I think bios update may help.21:20
oerheksread the changelog of that biosupdate, it might give a clue21:23
WeeBeygood idea. I'll have a look21:24
gurkiWeeBey: well. does suspend without loosing touchpad work from windows?21:25
gurkiif yes, what makes you think that a bios update is changing the situation?21:26
WeeBeygurki, I read some similar issues from users under windows.21:26
WeeBeyBut I cannot be sure if it would help.21:26
gurkii wouldnt tinker around my bios on a hunch, i would verify that if i were you21:27
gurkiultimately its your hardware, so your call :321:27
murmeleh, firmware updates are not that scary anymore21:27
gurkiuntil theyre not.21:27
WeeBey:p21:27
gurkiim fine with flashing bios chips manually, ive been there. but for your average person that might brick a device.21:28
murmelidk, since i tinkered with technology, I never had issues, and that was true in the 90s21:28
gurkii wont be mad about you not having issues :)21:28
murmel:)21:28
murmelon the other hand, I don't have keyboards/touchpads which need firmware updates xD21:29
gurki:D21:29
WeeBeythere's no changelog on the bios update.21:30
WeeBey:-/21:30
oerheksmaybe in the package/zip?21:30
murmelyeah, that's normal nowadays21:30
ograoerheks, Auctus, did one of you open a bug for the firefox issue ?21:31
wez_hngurki: there's a nice jbod tool you can buy21:32
wez_hnunbricking device21:32
WeeBeyIt's an .exe app with the update baked in somewhere21:32
WeeBeyI ran it in a VM and said, "just told me it's not a razer device. lol"21:33
WeeBeyimproper use of quotes there...21:33
murmelWeeBey: did you pass through the device? not sure if it's possible with your config21:34
WeeBeymurmel, I don't think it is. I was using the VM just to see if it would extract the update and i would get a change log.21:34
wez_hnWeeBey: .exe doesn't sound portable.21:34
murmelWeeBey: I was just trying to say that you shouldn't pass through devices for firmware updates, as things can go _very_ wrong21:35
oerheksogra, no, i was waiting21:36
WeeBeyYep. I'm with you.21:36
oerheksthe firmware tool in ubuntu is pretty neat21:37
arraybolt3[m]WeeBey: Sometimes you can update the BIOS from within the BIOS itself. What's your system's model?21:38
murmelyeah only if more hw would be supported :S21:38
murmelarraybolt3[m]: firmware of touchpad, not bios bios21:38
arraybolt3[m](FreeDOS can also do the trick in some instances but that's scary IMO.)21:39
arraybolt3murmel: I'd probably have known that if Matrix hadn't just slowed to a crawl. It got so bad I just had sarnold mute my Matrix account in #ubuntu-discuss because it was taking so long for messages to get through and stuff that made no sense any longer was in the queue.21:39
arraybolt3In fact, you're seeing messages I sent quite a bit ago coming through now.21:39
murmelarraybolt3: yeah, I read that ;)21:39
murmelahh makes sense21:39
arraybolt3[m]WeeBey: But at any rate, if you're looking to clone your drive so you can install Windows for a BIOS upgrade, there's no need to make the drive bootable.21:39
arraybolt3At least this time my messages actually make some degree of sense.21:40
arraybolt3[m]WeeBey: Clone the whole entire drive (like /dev/sda, not the partition /dev/sda1) into a file on an external drive. Then install Windows over the top of Ubuntu, do your BIOS update (carefully!), then boot into the live USB and reflash your disk image back over the top of the drive.21:41
arraybolt3[m](Note that this is somewhat of a strain on the drive since you'll be overwriting the whole thing. How old is the system's internal drive?)21:42
WeeBeyarraybolt3[m], Oh, ok. That's what I was going to do--the entire drive, not the partition.21:42
WeeBeyarraybolt3[m], like 1 year21:42
WeeBeyarraybolt3[m], I read that there's issues when cloning and loading onto other partitions/drives but a copy of itself back onto itself should be OK... even grub should be intact, i reckon21:43
arraybolt3WeeBey: Exactly.21:43
arraybolt3WeeBey: If you're cloning *partitions*, things get very messy very quickly, but for whole drives, it should be simple.21:43
WeeBeyNice nice. Ok, sounds like a 'fun' project for when I get some time.21:44
WeeBeySide story. When I got this laptop (razer 15 2021). Before first boot, I formatted and installed 20.04... No wifi and a bunch of issues. Then formatted and installed 21.10 (or whatever) and wifi and boatload of issues. Finally fixed most and now at 22.04 and a 90% happy camper.21:45
WeeBeyBut.. i should have let it boot and updated the bios. Haha.21:46
murmelyeah, that's always the first thing I do, then wipe :)21:46
MacwinnerHi, i was wondering if someone could point me to the process of reporting a missing config parameter during building of the saslauthd package.  We are migrating to Ubuntu from Centos.  We noticed that the Ubuntu package doesn't have a configure flag set21:52
MacwinnerI'm wondering if there is a standard ticketing system to report this and see if it could be added21:53
ograMacwinner, ubuntu-bug sasl2-bin21:53
ograrun that in a terminal21:54
Macwinnerwow!21:54
webchat56Hello I'm back21:55
Macwinnerthanks ogra21:58
ograMacwinner, you're welcome 🙂21:58
=== lisix is now known as cybxrl
mko_how can I merge two files by adding only the missing lines and preventing the lines that are existing in one to be added? I have a list of configurations that I want to add to sysctl.config. But some of the lines are already in the original config file22:44
=== mko_ is now known as brkroot
ash_worksiwhat's the easiest way to install a set of packages previously installed on another machine on a new one?22:45
ash_worksi(sans conf-mgmt tool)22:45
ash_worksiI think there's a dpkg command that can just list everything you should `apt-get install`22:46
murmelash_worksi: dpkg --get-selections // dpkg --set-selections22:46
brkroothow can I merge two files by adding only the missing lines and preventing the lines that are existing in one to be added? I have a list of configurations that I want to add to sysctl.config. But some of the lines are already in the original config file22:52
ednashyou could do cat file1 file2 | sort | uniq22:53
brkrootdo you reckon it will work. Please have a look the both files https://pastebin.com/DYJ14cTY ----> https://pastebin.com/MKsKhdVR22:59
brkrootIts for virtual machines and I don't want to manually add all these lines to each machine.23:03
brkrootSo i need to copy all lines after sudo vi/etc/sysctl  and paste them in to the original file in the new vm23:05
brkrootor even to remove the #explanations and just add the lines23:05
murmelbrkroot: huh, why not do everything with echo >> file23:06
murmelif you have multiple settings for one, the last one applies23:06
murmelit's literally one command to put all the lines in the file23:07
brkrootwell thats great, how do i do this with echo?23:07
murmelbrkroot: echo -e "setting1\nsetting2\netc" >> file23:08
murmeleh with spaces between \n and next line23:08
brkrootok will copy file1 to the virtual machine and will try the command23:09
brkrootmurmel, does tboth files have to be in same dir to run this command? should I place my new file with the settings to the existing /etc/?23:13
brkrootor do I add the paths for both files?23:13
murmelbrkroot: no, there is no second file, you just throw in that echo command, what you want to have in the sysctl.conf23:13
brkrootoh ok23:13
murmelbrkroot: as I said, if you have for example net.ipv4.conf.all.log_martians = 1 and net.ipv4.conf.all.log_martians = 0, the second "overwrites" the first one23:14
brkrootokay, thats great! But then will it add new line as well, or just overrides the existing ones?23:16
murmelit just adds everything at the end of the file23:17
brkrootok23:17
brkrootill try23:17
LartzaHi! 22.04, upgrades kept back, full-upgrade doesn't work either, no reason given? Kind of rusty with deb systems at this point23:24
LartzaJust a few packages to be clear not all upgrades, libnfsidmap1 nfs-common ubuntu-advantage-tools23:24
murmel!phasedupdates23:25
ubottuSince Ubuntu 21.04, APT now implements phased updates. This can hold back updates on some systems while they are being phased in. See https://help.ubuntu.com/community/PhasedUpdates for more info.23:25
murmelLartza: ^23:25
brkrootOMG! murmel it worked perfectly! :)23:25
brkrootthank you!23:25
murmelbrkroot: yw23:25
LartzaAaah so also not just a deb thing but an Ubuntu thing, thank you23:25
brkrootso all that happened tnx to echo? I should learn about it!23:26
murmelbrkroot: it's defintely more versatile than most people think ;)23:30
chindorhello anyone can help me fix a mixrophone problem plz23:31
VMGuy23Hi, what's the issue?23:31
ednashyeah23:32
chindorthe mic just not work23:33
chindori id use it as usual, but this time not working i dont know why23:34
brkroot murmel thanks a ton! one last thing please, is there a difference in the syntax (in regards to the spacing in front of the values) --> between ""net.ipv4.icmp_echo_ignore_broadcasts = 1"" and ""net.ipv4.icmp_echo_ignore_broadcasts=1""23:34
VMGuy23chindor: is the volume of the microphone turned up? Check in settings.23:34
murmelbrkroot: there is no difference, with spaces looks better that's why most people do it23:35
chindoryes it is23:35
brkrootmurmel, oh okay, well yeah, kind of looks neat with the space! thanks.23:36

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!