=== EriC^^ is now known as Guest5936 [00:54] i listened to mark shuttleworth's video today about free ubuntupro security patches for 23000 apps..and i registered for it...but after logging in at the bottom of the page it wants me to attach a machine ...what is that about [00:55] what would i be attaching this machine to [00:55] lagunalorre: You attach your (free) Ubuntu Pro subscription to the computer you want to have Ubuntu Pro work on. [00:56] arraybolt3 ok...this one and a backup laptop...but there is only one token on the page [00:56] that's fine, you can use the token on multiple computers [00:56] lagunalorre: It's kinda like a license key, as I understand it. When you update your system, it tells Canonical "I'm using Ubuntu Pro, here's the key that proves I'm licensed to do so", and then Canonical's servers can look at that key and say "Yep, this system is ready to use Ubuntu Pro, send it the Ubuntu Pro updates." [00:57] sarnold..oh ok [00:57] arraybolt3 ok thanks for explaining that [00:58] i haven't run into any security problems lately..and it would be tough since i am behind a firewall [00:58] but i registered for it anyway [01:00] Firewalls can't protect you as much as you may think. If a vulnerable bit of software on your system reaches out and hits something hostile, the firewall can't block that. [01:01] rob0 but the firewall shuts down all ports except port 80...no more ftp weakness or dns weakness or any other port....and an updated browser does a lot to protect the only open port 80 [01:02] Firewalls prevent software from sending data out or receiving data in without your permission, but if a piece of software is allowed through, the firewall likely won't do anything with the data that goes through. That's the weak link. [01:02] (But then again, your browser is covered even without Ubuntu Pro, so if you apply updates, it shouldn't matter either way.) [01:02] arraybolt3 yes but i don't allow apps to go out or anything to come in except for the browser [01:03] arraybolt3 and all dns traffic is now passing through the port 80 to cloudflare only [01:03] Right, but if a piece of malicious data is downloaded by the browser from a website you visit, and that data glitches the browser and causes it to execute code it didn't mean to, then you're hacked. (Again, this is just the "how it would happen" scenario - keeping a system updated prevents that from happening in all but the rarest of situations, and you would be protected even without Ubuntu Pro.) [01:04] (They call it a buffer overflow vulnerability - it's both fascinating and terrifying. It's also a good part of why I'm somewhat vigilant about keeping my system updated. :P) [01:04] arraybolt3...yes but the browser is also clamped down not only by recent updated browser code but also ublock adblock noscript and so on [01:05] Very good. [01:05] * arraybolt3[m] also uses an adblocker everywhere [01:06] i tried to put sudo pro attach longtokennumber but it says pro is not an executable command [01:07] when i tried to copy and paste the command it does not work [01:07] lagunalorre: That means you need to update the Ubuntu Advantage client. Lemme find the command... [01:07] (It should autoinstall eventually, but it's not quite there yet.) [01:07] install ubuntu-advantage-tools [01:08] lagunalorre: Run `sudo apt install ubuntu-advantage-tools` first, then try again. [01:08] I just did it, now running "pro --version" works for me. [01:09] arraybolt3 yes it is starting to install some stuff now [01:10] arraybolt3 ok it enabled a couple of services and installed some dhcp patches...and i guess it is uptodate [01:11] You followed this whole guide, right? https://discourse.ubuntu.com/t/ubuntu-pro-beta-tutorial/31018 [01:11] dhcp was just coincidental, that would have been installed even without ubuntu pro https://ubuntu.com/security/notices/USN-5658-1 [01:12] arraybolt3 i am not sure why a dhcp patch was necessary as that is only local traffic between this laptop and the wifi router [01:12] arraybolt3 but anyway it is installed [01:12] You still need to attach your system to Ubuntu Pro and then activate the extra updates. [01:13] arraybolt3 how do you activate the updates [01:13] sudo pro attach [YOUR_TOKEN] [01:13] (Replacing [YOUR_TOKEN] as applicable.) [01:13] arraybolt3 yes i already did that and it enabled 2 services [01:13] Then: sudo pro enable esm-apps --beta [01:14] And you did the sudo pro enable esm-apps --beta step? [01:14] it enabled esm-infra and livepatch [01:15] OK, then you still need to run "sudo pro enable esm-apps --beta". So far only part of Ubuntu Pro is enabled. [01:15] The above command enables the rest of it. [01:15] (Here's hoping they make this more user-friendly in the future!) [01:16] arraybolt3 ok it says esm-apps enabled [01:16] Nice! Now you should be able to do "sudo apt update && sudo apt full-upgrade". [01:28] could someone survive on a 8GB RAM laptop with 1TB swap partition on the their HDD + Ubuntu 22.04 live ISO burned to a DVD that is used to boot into Ubuntu 22.04 for an average of 3.92 day uptime while using that system as a computer for daily activities of talking on irc + creating random programs in Bash 5, Perl 5, Python3, and PHP 7 for 5 years straight? [01:28] user9d: No. I see a week link here. [01:29] user9d: If you used an Ubuntu 22.04 live ISO as your main operating system solely for five years, you won't get any security updates during that time as the DVD is read-only and won't accept the security updates. [01:29] user9d: As a result, it would be just as bad as using an EOL version of Ubuntu. [01:29] What would work would be to install Ubuntu directly to a USB drive that can accept updates. Then I can see this working (though a 1 TB swap partition?!?!?! That's quite overkill.) [01:30] However, even with a USB drive installation, you probably wouldn't last for 5 years as the USB drive would likely wear out before then. [01:32] Since you'll never need the 1 TB of swap for anything (due to the speed of the partition and the intended use cases), I'd just install Ubuntu to a large portion of the hard drive, and leave yourself some swap space to cope with the 8 GB of RAM. Probably 8 GB of swap would help here, more if you intend on really pushing the system (though it will get slower when it starts swapping to disk). [01:34] why does linux care as much about security as windows os because my android 7 smartphone hasn't system updated in 5 years? [01:35] user9d: Because cellphone manufacturers don't care to keep their hardware from going obsolete and would rather make it so people have to upgrade or risk getting hacked. === keypushe- is now known as keypusher [01:37] what's the point of preventing getting hacked on Ubuntu when 99.9% of the time you are hacked it feels like you're 99.9% secure because it's so fast? [01:37] user9d: Good question, but I think this would be more on-topic in #ubuntu-discuss. Care to ask it over there? [01:39] DNS over https (DoH) is port 443; DNS over TLS (DoT) is port 853. [01:39] lagunalorre: ^^ [02:08] rob0 why is an extraport being opened for dns when all traffic could be handled through port 80 only [02:09] most web traffic has been https (443) for a long time [02:09] rob0 yes i remember the port 443 for https compared to http at port 80 [02:10] rob0 but why don't they shut everything down except port 80..since all video communications can be handled directly through the browser [02:11] as well as secure sockets [02:12] rob0 nobody uses ssh,ftp,gopher,udp, or any of that other stuff anymore that was present 30 years ago [02:12] nobody? I sure do. [02:12] well,not much ftp, and gopher is gone [02:13] rob0 well you do so at your own risk...because opening your ports to the world leaves you vulnerable for exploits that can take advantage of inadequate buffer issue [02:15] rob0 then they can install malicious code, rootkits, and trojan horses and all kinds of crap which are real headaches to deal with [02:15] I'm aware of risks, thanks. I don't lose sleep over sshd. [02:18] rob0 i have even seen them try to embed code in simple email docs [02:19] rob0 or use emailed links to try to lure the browser into unsafe sights of malicious coders [02:22] rob0 that typically take advantage of buffer issues or sometimes take advantage of javascript or jre's...that is why everybody uses noscript and turns javascript off in the browser and never installs java runtime environments [02:23] rob0 and most people try to even limit browser activites in a sandboxed fashion [02:24] rob0 where the sandbox is isolated from the rest of the directories of your system [02:25] hello all [02:26] what do you all think of the ubuntu DDE ?? [02:27] sean..what is DDE the old dynamic data exchange topic [02:27] sean when you use acronyms..we have no idea what you are referring to [02:29] I think he means Deepin Desktop Environment. [02:29] arraybolt3 oh [02:33] arraybolt3 i am surprised mark shuttleworth is such a young man that i saw in the video...i knew he had been around for a long time with ubuntu...so i thought he was much older like bill gates [03:08] why skypeforlinux process have 119 threads?? [03:11] probably one for every button, one for the camera, microphone, one for smoothing and compressing video, one for compressing audio, a bunch for dns lookups, a bunch for network communications.. [03:22] how many treads has vscode? === guiverc2 is now known as guiverc === LabMonkey is now known as Mechanismus [03:36] what are the benefits of using the evdev subsystem versus libusb and hidapi? I have a feeling the differences are historical and how they were developed, but I'm not sure [04:04] lagunalorre: I think you have an unrealistic sample of "everybody" who is paranoid about web browsing. [04:05] Most people do not take elaborate precautions, they just install a browser and browse. [04:05] hutchins well the online world is full of victims who weren't paranoid [04:06] lagunalorre: Again, I am suspicious of your sampling method. You appear to be suffering from selection bias. [04:07] jhutchins...well i have a small sample size of careful people....namely 1 me..i am not sure it is biased...because of so many naive victims of the hostile internet [04:08] lagunalorre: How have you determined that there are "many naieve victims"? [04:08] jhutchins nearly every day you hear of internet victims falling prey to all kinds of malicious code and other scams [04:09] lagunalorre: How do we know if these are actually common, or are edge cases that make a sensational story? [04:10] jhutchins...no they are real...i have encountered lots of attempts to sabotage or steal info/monetary assets over the last 50 or so years [04:11] lagunalorre: This does not indicate that they were successful. [04:12] jhutchins no they haven't been so far as i am concerned but i have heard of many other victims that did not take adequate action to protect themselves against an incredibly hostile internet [04:12] lagunalorre: I am aware of a fairly large number of users who simply are reasonably careful about what they click on and where they disclose sensitive information and have not had any trouble over the years. [04:13] lagunalorre: I should also point out that by citing a sample extending 50 years you are straying from your original topic which was web browsing. [04:14] jhutchins...yes but thieves and saboteurs and conmen existed way back in the old bbs days before the internet [04:14] I just realised that this is #ubuntu and we are WAY off-topic, I'm going to drop it. [04:14] jhutchins: I actually am kind of paranoid about internet security also, not because of sample sizes of people who were or weren't pwned, but because of knowing that tools for pwning exist and that they have been deployed in terrifying ways in the past. [04:15] For instance, the Blackhole Exploit Kit exists, and one time a malicious advertisement that I believe did a drive-by download ended up on Spotify. [04:15] jhutchins and got worse and more plentiful when the lines were open to the world wide web of many hostile countries and gangs [04:15] My way of protection is - a) Only visit trusted sites on my main computer, b) use an adblocker, and c) visit untrusted sites in a QEMU virtual machine. [04:15] jhutchins: Oh, just saw your thing about off-topic. I was going to say something, but I thought discussing how to secure Ubuntu and if it was necessary was on-topic. [04:16] (Maybe only kinda on-topic, but still...) [04:16] arraybolt3: That may be, but we've gone beyond "how" into "why". [04:17] jhuthins don't set people up to be victims because of laxadaisical attitudes....let them know it is better safe than sorry [04:20] Just because you're paranoid doesn't mean they're not out to get you. [04:22] jhutchins i am a qualified doctor and i don't believe in giving information that would cause some people to be harmed [04:22] jhutchins as a doctor i don't take advantage of people nor do i want to see that happen to them by anyone else [04:24] lagunalorre: This is still off-topic here. [04:24] jhutchins well i guess security issues can be discussed elsewhere [04:24] lagunalorre: Perhaps ubuntu-offtopic. [05:39] If your system has a sync interval of 34m, and you suspect that something has caused drift in less than that time, is there any way (using only systemd/timesyncd) to request an immediate sync? [05:43] what's the difference between a package in "jammy" and "now"? [05:53] are people using jammy with or without jammy-updates? [05:54] tarzeau: hopefully with? [05:54] is with recommended? [05:54] i was refering to the sources.list entry, not whether one updates or not [05:54] is without possible and supported too? [05:54] having bug and security fixes makes sense to me [05:55] tarzeau: I suppose it depends on what you want out of it. [05:55] osn [05:55] isn't security in jammy-security separately? [05:55] jhutchins: i want stable computers for a lot of users [05:56] and i appear to have a problem with phased updates and jammy-updates that packages disappear (get moved to phased updates), while i have phased updates participation disabled [05:56] !phasedupdates | tarzeau, you might find some info to help with that here [05:56] tarzeau, you might find some info to help with that here: Since Ubuntu 21.04, APT now implements phased updates. This can hold back updates on some systems while they are being phased in. See https://help.ubuntu.com/community/PhasedUpdates for more info. [05:56] thus some xymon-client/hobbit-plugins reports packages not installed from repo [05:56] There's instructions on how to make your system ignore update phasing, as well as some reasoning behind why it's not necessary. [05:57] arraybolt3: thank you for the link, all read, and got it finally as wanted: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1981672 [05:57] Launchpad bug 1981672 in aptitude (Ubuntu) "phased updates API and client for aptitude" [Wishlist, Triaged] [05:57] tarzeau: https://wiki.ubuntu.com/SecurityTeam/FAQ#How_are_the_.22-updates.22_and_.22-security.22_pockets_different.3F [05:57] arraybolt3: it might not be necessary, but it's a wanted way simply because we don't have auto-app-crash-reporter running, we don't want to take part on phased updates [05:58] tarzeau: Whatever works for you. If you know the risks and are like, "Yeah, I want to install it anyway", then great. That's what the setting is there fore. [05:59] tomreyn: that faq entry explains the difference between -updates and -security, and we have -security, but no phased updates nor -updates. what am i not seeing? [06:00] arraybolt3: the most annoying part about phased updates is they can get updated while some already have it, some other machines don't, and they start from 0% with another new version again - me ending with machines with 3 different versions of software (happened shortly with systemd) [06:00] tarzeau: so, for security updates, my understanding is that they are published on -security first, then also on -updates. but this would not matter to you if you have -security, i guess. but what matters to you, you said, is stability, which probably means you want bug fixes. those surely can go to 'jammy-updates' months before they hit 'jammy' [06:01] tarzeau: i don't know about / can't comment on the phased updates issue you're dicsussing. [06:02] tarzeau: There's a setting for making machines all "phase together", which I didn't document in the above link. Info on that is here: https://askubuntu.com/a/1431742/1598467 [06:03] arraybolt3: i was aware of that setting, thanks for pointing out [06:05] jhutchins: sudo kill -1 $(pgrep --full --oldest systemd-timesyncd) [06:08] jhutchins: tcpdump tells me this make timesyncd connect to ntp.canonical.com:123 [06:21] tomreyn: Thanks. Seems pretty roundabout. === Mibix is now known as Mibixaurus [07:06] Hi, I have xubuntu-22.04 but I am pretty sure the issue is related to ubuntu. I am trying to import gpg public key, and I am receving an error [07:06] gpg --import public.key [07:06] gpg: nie odnaleziono poprawnych danych w formacie OpenPGP. [07:06] gpg: Ogółem przetworzonych kluczy: 0 [07:06] on another ubuntu station, I can import it [07:07] I did not find anything in the net :( [08:00] marcin_: can you please translate the error to English? [08:04] @steelRose: gpg: no correct/proper data found in OpenPGP format [08:06] marcin_: how did you transfer the file over to the affected Ubuntu system? [08:07] copied form 1password, where I store it, and try to store it with echo, echo -n, vi & nano [08:07] none worked [08:09] marcin_: why don't you scp the file? [08:10] Hi [08:10] How do I add a sudo user, and i must be administrator?? [08:10] SteelRose: i can not do it with scp [08:10] marcin_: another option would be to select everything with the mouse, save it to the clipboard... then, on the target host run: cat > foobar.gpg and paste everything... then hit ctrl-d to save [08:11] SrainUser111: you must be either root to do it or have your user already added to the sudoers file [08:11] ok [08:12] SteelRose: I will try [08:12] SrainUser111: if regular users could promote themselves to root that would be a security flaw... [08:12] and let you know [08:12] marcin_: OK === ss is now known as Guest1629 [08:29] SteelRose: I did: gpg --import, pasted everything. pressed enter, then Ctrl + D and still the same [08:34] marcin_: did you paste the contents to a file before doing the import? [08:34] yes, then cat it [08:36] marcin_: no :-) Please take a look at this: https://pastebin.com/amJSsSS0 [09:16] I can't ser Other os to boot as defaut in XUbuntu's GNOME. I think I tried all I found. === mkv is now known as m4v [09:26] nikolam: run `sudo -i` first, and then: [09:26] mkdir -p /etc/default/grub.d && [09:26] wget https://gitlab.com/sch-scripts/sch-scripts/raw/main/share/sch-scripts/grub.cfg -O /etc/default/grub.d/sch-scripts.cfg && update-grub [09:26] It makes grub show the menu, REMEMBER the last default, and boot it in 5 seconds [09:27] So if you reboot from windows, it'll boot windows, if you reboot from linux, it'll boot linux [09:38] anyone know if ubuntu is shipping their work on microk8 anywhere outside of snap packages ? [09:59] alkisg: I'll try it and report. I think I used to try saved and savedefault, will try it his way. [09:59] Thanks [10:00] 👍️ === zakalwe` is now known as zakalwe [10:25] hello. using ubuntu-mate 22.04, how can I start an application (from terminal) on a specific display ? (I have 2 screens) [10:27] Rico: I would look into xdotool. [10:27] Rico: do an "echo $DISPLAY" on each screen... then set it as needed before starting the application [10:28] ^ that too. [10:28] SteelRose: it returns :0 on each screen [10:29] Rico: that's normal... try setting it to :0.0 and :0.1 [10:29] DISPLAY=:0.1 ; firefox [10:29] for example [10:30] Rico: other than that, you can tell MATE to remember where the windows were when you close the session [10:30] only :0.0 works and it opens app on the current screen [10:33] Rico, https://ubuntu-mate.community/t/open-application-on-current-workspace/13504 [10:35] ogra: thanks, but that's not what I asked for [10:35] Rico, yu want tuy app to be tied to a certain screen (workspace) don't you ? [10:36] *you want your app ... [10:36] Rico: This is a more intense option, but if you use a tiling window manager, opening under your mouse cursor (or having the abiliity to quickly move/do this) is the default. [10:36] ogra: no. I want to be able to chose the screen on which my app will popup when I start it via terminal [10:37] "close the screen" ?? you mean unplug the monitor ? [10:37] bah, can't read [10:37] sorry [10:37] I would whip up a little script using xdotool. [10:37] and xrandr. [10:37] Rico, and according to that discussion you can only do this with compiz [10:38] To take in the screens available, resolution, shift your mouse and spawn it... is one option. [10:38] agent_white, how would xrandr help here ? [10:38] Just for measuring screens. Ideally, you take that full width, shift 75% either way and you will hop screens. [10:38] it wont manage anything application specific ... [10:39] Correct, which is why it's good. [10:39] Use output from xrandr to feed xdotool which can be used to manipulate x11 windows. [10:39] Or since your monitors don't change all the time, hardcode it. [10:39] (excluse xrandr) [10:39] strange thing that xrandr only shows one screen [10:39] well, ten you should probably rather use something like devilspie and simply tell your WM where to place it ... [10:40] Rico: That's my point. [10:40] It sees multiple displays as one single screen. They compose it. [10:40] xdotool can help you narrow down to a specific place on your desktops to place it. Just look into it. [10:41] ok thanks [11:25] SteelRose: the same unfortunately :( [11:27] I just found out the docker snap auto-updates daily, if there's an update available. is anyone using that in production? === scoobydoo_ is now known as scoobydoo [11:36] you can probably turn that off, but that's not a nice default. desktop users already have a different auto-update mechanism, so that should be used. server users can install unattended-upgrades if they so choose [12:17] marcin_: can you compare the files on one server where it works and on the other where it doesn't? [12:17] marcin_: run an md5sum private.key on both (where "private.key" is the file you want to check) [12:56] Hello, I want to know if it is possible to have several "desktops" with basic ubuntu? [12:57] in tiling we call it "tag" sometimes [12:58] alkino: yes [12:58] alkino: do you mean virtual desktops? [12:58] SteelRose: maybe, I find nothing because I don't know the name under ubuntu [12:58] I will lool for that ;) [13:03] it works with gnome-tweaks [13:03] thanks ;) [13:09] Hi all [13:21] alkino: np === diskin is now known as Guest6392 === diskin_ is now known as diskin === LanDi1 is now known as LanDi === ajfriesen4 is now known as ajfriesen [15:01] hola [15:02] :-) [15:04] :) === LanDi1 is now known as LanDi === LanDi1 is now known as LanDi === EriC^^_ is now known as EriC^^ === LanDi1 is now known as LanDi === J-ro1 is now known as J-ro === x__ is now known as wellwm [17:00] Some teachers have managed to move their "Public" dir around in the file manager, so that `grep PUBLIC /home/teacher/.config/user-dirs.dirs` now shows `XDG_PUBLICSHARE_DIR="/home/teacher"` (their home dir instead of the Public subfolder). [17:00] E.g. if you move "Public" into "Documents" in nautilus or caja, you'll see user-dirs.dirs automatically reflecting the change. [17:00] I'm testing moving around "Public", but I can't reproduce that exact outcome, to make it the same as the home folder... any bright ideas on how to reproduce it? === x1 is now known as wellwm [17:01] Whoops I just got it. Deleting the "Public" folder and logging in again, runs xdg-user-dirs-update, which then says "reassigning PUBLICSHARE to homedir" [17:28] HeLLo! I Am Using UBUNTU 20.04.05 and THis VerSion has OpenSSL.v1.1.1.F InsTalled BY DEFAULT. I TRied Upgrade To 1.1.1.O BuiLding From SourCe CodE And I AlMosT BroKe THe OS. So... I WouLd LiKe To InsTall OpenSSL.v3.0.5 From SourCe CodE On /OPT DIrecTorY And Use iT WITH AnoTHer CURL VerSion I WILL BuILd On /OPT DIrecTorY. WHo CouLd HeLp Me WITH THaT TasK? [17:30] I WANT THaT OpenSSL.v1.1.1.F ConTine being THe DEFAULT. [17:30] what you need is a working shift key [17:31] PRETEXTATO: we dont advice to build packages from source, use the packages from the official repos [17:31] and when you compile alternative software, set a fitting install prefix [17:31] do not mess with the OS paths [17:31] do not install self-compiled things directly into /usr, that's bound to end up badly [17:31] I SaW. [17:32] I almosT broke THe OS. [17:32] PRETEXTATO: please fix your shift/caps lock key [17:32] I Fixed. [17:32] must have smashed his monitor with his keyboard. I've seen this happen in other cases (on youtube :) [17:33] OpenSSL.v1.1.1.F is NormaL NoW. [17:33] OH! [17:33] so, read the manual for the software you want to install [17:33] I WRITE THIS WAY. [17:33] greetings, is there a timeout option for fstab to avoid long delays when a drive is not present? [17:33] :) [17:33] PRETEXTATO: please stop intermittently hitting shift/caps [17:34] PRETEXTATO: do not write that way [17:34] I HaVe DisLexia. [17:34] * ogra just doesnt read this way ... [17:35] PRETEXTATO: Dislexia does not cause you to randomly hit shift. More than likely you're using some application/plugin that is doing this. Please disable it [17:35] I Am Serious, DudE. [17:36] iomari891: I'm assuming you're already using nofail [17:36] iomari891: do you have to use fstab? [17:37] you could use https://www.freedesktop.org/software/systemd/man/systemd.mount.html instead [17:39] I BuiLd A OpenSSL.v3.0.5 Using THis Command... [17:39] "/config --prefix=/opt/OPEN-SSL.v3.00.05.RELEASE/ --openssldir=/opt/OPEN-SSL.v3.00.05.RELEASE/ zlib enable-md2 enable-rc5 enable-gost shared" [17:40] AFTer THaT... MaKe, MaKe TesT And MaKe InsTaLL [17:40] that's not going to work [17:40] WHY? [17:40] your shell is case sensitive. [17:40] PRETEXTATO, ths is really offtopic here ... [17:41] So, WHeRe SHouLd I GeT SoMe HeLp [17:41] ? [17:41] PRETEXTATO, dunno, perhaps here is some openssl channel [17:42] *there [17:43] NoT THe oFFiciaL One. [17:43] wel, this isnt either the official openssl channel, nor a channel to talk about building random stuff [17:44] I See. [17:46] that was painful and unnecessary === Eickmeyer is now known as NotEickmeyer === Eickmeyer5 is now known as Eickmeyer [17:55] hi all :) [17:55] o/ [17:56] this my first time using irc, liking it so far. hope everyone's well === beaver is now known as Guest0110 [17:57] alexiafox: Nice! [17:57] * arraybolt3 is using both IRC and Matrix, thus why there's two similar but different nicks that both look like me because they both are me [17:58] alexiafox: welcome, this channel can be used to ask ubuntu related issues if you want to know something [17:58] :) [17:58] thanks! === y0sh- is now known as y0sh_ [18:43] Hi, How do I get a kernel package to test OpenSSL with 'enable-fips'? === pizzaiolo is now known as pizza [19:26] !info linux-image-fips [19:26] Package linux-image-fips does not exist in jammy [19:27] oerheks: That might require that Ubuntu Advantage/Ubuntu Pro be enabled? [19:28] arraybolt3, yes, i see now [19:28] other_rick, you need UA to enable https://ubuntu.com/security/certifications/docs/fips-faq [19:29] normally one does that in a container, tons of howtos [19:29] https://canonical.com/blog/fips-ubuntu-container-security-updates === floown_ is now known as floown [19:38] Thinking of FIPS - I saw this last night: https://ubuntu.com/blog/ubuntu-pro-beta-release [19:38] they now provide up to 5 free Ubuntu Pro licenses which include FIPS 140-2 packages. [20:05] hello [20:06] welcome aib18 [20:28] Has anyone had any luck installing minimal gnome over the standard snaps? I am trying to avoid instability but, at the same time, my system has become bloated and I am looking for a quick fix to avoid a full reinstall ... [20:29] what is ' bloated'? [20:29] thanks oerheks and samy1028 === justHaunted is now known as _justHaunted === _justHaunted is now known as justHaunted [20:31] Well, it depends on who you ask. For me, it means that unnecessary packages have broken the system through updates I did not ask for. Snap will update without asking and that itself may have caused weird issues. In my case, there are weird issues with my browser that I had to fix through a cheap hack in the way of installing imwheel. But that's not [20:31] the best way to fix things. I am thinking about just throwing on a different variant of gnome ... [20:31] One of my disks is sometimes just not mounted (manifested by Steam not being able to access the SteamLibrary folder on that disk) [20:31] gnome minimal, that does not have unnecessary packages. [20:32] I have checked "Disks" to ensure the disk is set to mount on boot, but it just "disconnects" periodically after boot. [20:32] snap updates itself, that is normal. [20:32] I have to click on it from the sidebar and then it is available [20:33] explodes, add that disk to fstab, to have it automounted https://help.ubuntu.com/community/Fstab [20:34] https://help.ubuntu.com/community/InstallingANewHardDrive#Automatic_Mount_At_Boot [20:34] why does it mount at boot but disconnect randomly? [20:34] Is this possibly a loose wire or smth? [20:35] if you did not add it to fstab, it should not automount. [20:37] UUID=2a5c9033-65d7-4d4c-907b-1bdf80501699/media/libraryext4rw,nosuid,nodev,relatime,data=ordered,uhelper=udisks2 0 0 [20:38] It already is in fstab [20:38] ...tabs got eaten [20:38] oke, that clears up why it is mounted [20:38] only when that (ntfs?) partition is closed dirty, it will fail automount [20:39] else yes, power, not enough power, wonky connector, everything is possible === feelingsreal is now known as Guest1615 [20:45] ubuntu what is fstab [20:45] file system table? [20:45] Try `cat /etc/fstab` to see what you have [20:46] read back for the wiki [20:46] It defines which disks to mount and how [20:53] Snaps are bad, I think. I'm not a snap hater like some but I think they are unpopular for a reason. Lots of people will not use Ubuntu simply because of the Canonical Snap craze. There is an anti-Snap culture you could say. I hear riots have broken out and citizens have found themselves in a state of social unrest - all over the great difficulties [20:53] of Snap [20:54] fluxcapacitor: or you could just go with your own experience and try them and decide for yourself instead of buying into the FUD [20:55] I've been using Ubuntu for about five years as a daily - maybe eight years as a dual boot if not longer [20:55] I am not new to Ubuntu, my friend. I am a die hard user. [20:56] if one wants to avoid snaps, change distro? [20:56] then even more reason not to buy into the FUD and decide for yourself [20:56] I am the alpha of Ubuntu. Your grandchildren whom you chaperone into the distro will ask me what it was like in the golden days. [20:56] I was here long before this channel was a fart in the wind [20:56] from hearsay we have no answer to, mostly unfounded claims [20:56] fluxcapacitor, do you have an Ubuntu support question? if yes please ask. if not use the other rooms provided for chat like #ubuntu-discuss or #ubuntu-offtopic. thanks! [20:57] join #ubuntu-discuss [20:57] wrong command - no slash [20:57] Sorry [21:00] has anyone else seen an issue in 22.04 where if youre using, say, firefox, and you press "ctrl+S", it opens like a thousand file save dialogs and you have to close them all [21:01] this has been happening over and over since i installed 22.04 last week (upgrade from 20.04) [21:02] its ONLY if you ctrl+s, not right click -> save as [21:02] Auctus, just tested: confirmed! [21:03] i just kill firefox over that :-( [21:06] i find no simular bugreports.. [21:07] * ogra can't reproduce ... [21:08] only one dialog here too [21:09] cancel, save, or change type does not respond [21:10] it doesnt happen every time, to me, but on certain links it will [21:10] yep [21:12] well, right after i typed the above i actually *could* repro it ... lol [21:12] this is a horrid bug [21:13] Quick question frens. If I want to use dd to clone my computer drive (nvme on a laptop), I should boot from a live disk to do it, correct? [21:13] all on wayland? im trying different configs atm [21:13] ravage: yes wayland [21:13] still trying to reproduce it with xorg [21:13] WeeBey: especially when talking about boot drive [21:13] WeeBey, yes, when not in use [21:13] i think wayland broke a whoooole bunch of stuff, sometimes some windows wont "resize", theyll just turn black on the area that was "resized" [21:14] murmel, oerheks ; cool. ok ok. It doesn't look complicated. I'm excited. [21:14] and after cloning, the UUID changes on the target drive. [21:14] "gnome-shell[10437]: Key repeat discarded, Wayland compositor doesn't seem to be processing events fast enough!" [21:14] oerheks, ooooh. Interesting. So, it would not be immediately bootable? [21:14] i see a lot of this in my journal for the time the FF issue happened [21:14] (given that grub may not find the 'old' drive?) [21:15] WeeBey, indeed, patition UUID does not match fstab anymore [21:15] https://help.ubuntu.com/community/Fstab [21:15] ok so it may be wayland related. i tried about 10 sites on xorg and could not reproduce it. i also run xorg on my main system and could not reproduce [21:15] blkid would show them correct [21:17] oerheks, thanks for the input. End goal is to install Windows 10, update my bios, and revert back to my Ubuntu system. [21:18] WeeBey, maybe just look for a bootable windows PE usb drive and do the upgrade from there? [21:18] no way in linux? [21:18] "Hiren's BootCD PE" for example [21:18] there are a few [21:19] sadly no murmel. It's a Razer. Very windows-centric. [21:19] ya [21:20] (It still can't suspend without losing trackpad. I'm even running kernel 5.19.5 and still can't make it suspend without losing touchpad. That's why I think bios update may help. [21:23] read the changelog of that biosupdate, it might give a clue [21:24] good idea. I'll have a look [21:25] WeeBey: well. does suspend without loosing touchpad work from windows? [21:26] if yes, what makes you think that a bios update is changing the situation? [21:26] gurki, I read some similar issues from users under windows. [21:26] But I cannot be sure if it would help. [21:27] i wouldnt tinker around my bios on a hunch, i would verify that if i were you [21:27] ultimately its your hardware, so your call :3 [21:27] eh, firmware updates are not that scary anymore [21:27] until theyre not. [21:27] :p [21:28] im fine with flashing bios chips manually, ive been there. but for your average person that might brick a device. [21:28] idk, since i tinkered with technology, I never had issues, and that was true in the 90s [21:28] i wont be mad about you not having issues :) [21:28] :) [21:29] on the other hand, I don't have keyboards/touchpads which need firmware updates xD [21:29] :D [21:30] there's no changelog on the bios update. [21:30] :-/ [21:30] maybe in the package/zip? [21:30] yeah, that's normal nowadays [21:31] oerheks, Auctus, did one of you open a bug for the firefox issue ? [21:32] gurki: there's a nice jbod tool you can buy [21:32]