=== applecuckoo is now known as cuckooapple === cuckooapple is now known as applecuckoo === esv_ is now known as esv === chris is now known as DARTHLORD [01:20] Yo [01:20] hi [01:24] Is this just a dead chat for ubuntu IRC? [01:24] Hola [01:26] hi all [01:26] DARTHLORD: it depends if anyone has any questions [01:26] where is the ofical chan [01:26] this is [01:26] ok [01:27] i am tring to upgrate ubuntu 21 to 22 and i keep getting 404 errors when I run sudo apt-get update but i can browe http and have admin access [01:27] can someone assist [01:28] !eolupgrades | whoever [01:28] whoever: End-Of-Life is when security updates and support for an Ubuntu release stop. Make sure to update Ubuntu before it goes EOL so you get updates promptly for newly-discovered security vulnerabilities. See https://help.ubuntu.com/community/EOL and https://wiki.ubuntu.com/Releases for more info. Looking to upgrade from an EOL release? See https://help.ubuntu.com/community/EOLUpgrades [01:28] whoever: Click the last link in the Ubottu output, it has everything you need to know. Back up your data first please! [01:29] chances are good you waited too long to upgrade, and now it's difficult [01:32] isn't there apt-get list_upgrade ? that will update my mirror list [01:34] so do i need a live liso or can i just download the 22.04 iso and click on that and select upgrade [01:34] ? [01:34] whoever: I don't think there's an easy way to upgrade using an ISO unless you back up your data and clean install. [01:35] However, the EOLUpgrades page linked above might be able to let you upgrade despite the fact that the release is old. [01:35] (The release you're currently on, I mean.) [01:42] thank you it looks like i have to create the iso and the hardest part is that it will take about 2 hours to download and i was tring to find a faster way, thank you [01:43] arraybolt3: i will let you know how it goes, hopefully your still around in a few hours [01:50] whoever: No - the way forward is to edit your current install's sourcelist file to point to "old-releases" . [01:50] does it work? [01:51] i cant apt update [01:51] retrosenator: Can you explain in detail what you're trying to do? [01:51] apt update [01:52] it just gets stuck at 0% waiting for headers [01:52] retrosenator: Can you try to run "ping 8.8.8.8" and tell me if that works or not? [01:52] how would i be in irc? [01:52] of course that works [01:52] retrosenator: Ah, didn't know for sure if you were on the same computer. OK, nevermind. [01:53] sorry [01:53] retrosenator: Can you run "cat /etc/apt/sources.list | nc termbin.com 9999" and then share the link that spits out? That will let me see what mirrors you're using. [01:53] nifty [01:53] https://termbin.com/qmq9 [01:54] us.archive.ubuntu.com [01:54] retrosenator: What in the world... is this a live ISO that you're booted into, or an installed system? [01:55] installed system [01:55] was working ok a few months ago, but recently I can't install anything [01:55] and apt update doesnt even work anymore [01:55] Well something is severely wrong with your sources.list file. I'd be interested in knowing how you installed it, or what you did to it, since something's messed it up. [01:55] i just installed the normal way [01:55] retrosenator: Can you also run "ls /etc/apt/sources.list.d | nc termbin.com 9999" and send that link? [01:56] Also, did you use any minimal install option or something like that? [01:56] there is nothing in sources.list.d [01:56] i installed like 2 years ago regular install [01:57] That's so weird. [01:57] what is? [01:57] what do i need to change to fix it? [01:57] retrosenator: A bunch of important lines are missing, like ones for installing security updates and stuff like that. [01:58] retrosenator: Where did you download the ISO from? [01:58] its been a while but I think just ubuntu site [01:58] it was kubuntu [01:58] (At any rate it's easy to repair, but how it got there is beyond me.) [01:58] retrosenator: arraybolt3: I can accept too that "focal jammy-updates main restricted universe multiverse " must also be enabled. [01:58] well how do I easily repair (lol) [01:59] Bashing-om: I don't see jammy-updates enabled [01:59] retrosenator: Just to be sure, is this Ubuntu 20.04 or 22.04? [01:59] I believe 20.04 [01:59] (And yes, I'll get to the "how to repair" very soon.) [01:59] how do I test? [01:59] retrosenator: lsb_release --all [01:59] That will tell you for sure. [01:59] oh yeah 20.04.1 LSB [02:00] Perfect, ok one moment. [02:00] I mean LTS [02:00] (Whoa, 20.04.1? This thing hasn't updated in a *while*.) [02:00] i didnt update it [02:00] if it aint broke dont fix it lol [02:00] now its broke [02:00] updating evry 5 days uses bandwidth [02:01] not everyone has unlimited data nor wants to constantly do that [02:01] retrosenator: Valid point, but do be aware that not updating your system *will* leave security vulnerabilities in it, which could go poorly. [02:02] such as? [02:02] One of the main reasons for constant software updates is to avoid security problems from being left open. [02:02] being unable to update later? [02:02] well ive never been hacked [02:02] ever, never in my life [02:02] retrosenator: There's a whole list of them here: https://ubuntu.com/security/notices [02:02] Anyway, I get limited bandwidth, it stinks. Maybe you can update your system over public WiFi every now and again. [02:02] none of that applies to me [02:02] i dont have public wifi [02:03] i'm on a hotspot with wpa encryption, dont have a remote ip address [02:03] Oh yuck. [02:03] i dont think its possible someone to hack me [02:04] Ok, I won't keep pushing the danger point anymore, but here's a list of vulns you're probably at risk of, that would actually be a real problem: https://ubuntu.com/security/notices?order=newest&release=focal&details=firefox [02:04] (A solid chunk of that list likely applies to your system.) [02:04] i'm interested though [02:04] you mean firefox can delete my files if I go to certain sites? [02:04] 20.04.1 was released August 6 2020, so everything newer than that, your Firefox is vulnerable to. [02:05] retrosenator: Yes, quite possibly. [02:05] i'm not using firefox lol but wow [02:05] ok that is pretty bad [02:05] Welcome to software bugs. Sorry, it's crummy. [02:05] Anyway, I'll make a sources.list file that *only* gives you critical security updates, so that you can update frequently without eating too much bandwidth. [02:06] that would be interesting [02:06] OK, can you run "sudo nano /etc/apt/sources.list", then press and hold Ctrl+K until the file is empty? [02:06] When that's done, place the following two lines into the file: [02:06] GNU nano 6.2 New Buffer * [02:06] deb http://us.archive.ubuntu.com/ubuntu/ jammy main universe restricted multiverse [02:06] deb http://us.archive.ubuntu.com/ubuntu/ jammy-security main universe restricted multiverse [02:06] (Er, ignore the GNU nano line.) [02:07] jammy? [02:07] NO! [02:07] My mistake, sorry. [02:07] will that work on focal? [02:07] should i change it? [02:07] Nope. [02:07] Do **NOT** use jammy, that was a boffo. [02:07] ok [02:07] (I copy-pasted from my own sources.list, and I use jammy, so...) [02:08] ok [02:08] retrosenator: OK, here's what the file should contain: https://termbin.com/ktfz [02:08] i mean.. the other way is to backup all my data and reinstall [02:08] retrosenator: No need to do that. [02:08] well its the same as before [02:08] apt update [02:08] Just copy the data from that pastebin into the file (you can paste into the terminal with Ctrl+Shift+V). [02:08] it hangs [02:08] retrosenator: You already saved the file? [02:09] yes [02:09] i dont have ipv6 [02:09] retrosenator: Where are you geographically? [02:09] is that the problem? [02:09] (ipv6 shouldn't be necessary.) [02:09] only ipv4 works [02:09] i'm in southeast US [02:09] it was so beautiful when we were close to each other and you were playing with my hairs [02:09] oops [02:09] retrosenator: Hmm... that's odd. [02:10] Can you try "ping us.archive.ubuntu.com"? [02:10] 64 bytes from kazooie.canonical.com (91.189.91.39): icmp_seq=1 ttl=49 time=63.1 ms [02:10] See if that works, then press Ctrl+C to make it stop. [02:10] yes it works [02:10] retrosenator: Maybe you need to just wait, sometimes apt update hangs for a while for me but then it starts working. [02:10] like how long? [02:11] retrosenator: Also, if you're on a hotspot, what APN are you using? Can you find out using the hotspot's web UI? [02:11] (For me it hangs, in some instances, for, oh, 30 seconds?) [02:11] its an android phone [02:11] (It doesn't always hang, but sometimes.) [02:11] is there also a banjo? [02:11] retrosenator: Oh tar. [02:11] give me internet via 4g [02:11] i wonder if that is the issue [02:11] https://en.wikipedia.org/wiki/Banjo-Kazooie [02:11] I'm using internet over 4g and that works just fine. [02:12] well the other thing is, I have sudo sysctl -w net.ipv4.ip_default_ttl=65 [02:12] at boot [02:12] otherwise it wont give me internet [02:12] no idea if that matters [02:12] banjo should be the iso builder ;D [02:12] apt update used to work few months ago [02:12] chromebittin: This is off-topic in the middle of a support session, could you take it elsewhere? [02:12] sorry [02:12] i'm trying to learn how to fix this for future [02:12] retrosenator: Maybe try switching to USB tethering. [02:13] i dont have a usb-c cable with data [02:13] i need to get one [02:13] that really probably should not matter [02:13] Well crud, I'm running out of ideas here :( [02:13] it times out [02:13] Connection failed [IP: 91.189.91.39 80] [02:14] which is weird because i can connect to that ip and port [02:14] using telnet [02:14] retrosenator: Can you do "cat /etc/apt/apt.conf | nc termbin.com 9999"? [02:15] cat: /etc/apt/apt.conf: No such file or directory [02:15] lol [02:15] * arraybolt3 laughs in chagrin [02:15] i bet that is a problem actually [02:15] Hmm, I don't have that file either... [02:16] oh :-/ [02:16] ping kazooie.canonical.com [02:16] See if that works or not. [02:16] i have a raspberry pi with raspbian and it works [02:16] it can apt update [02:16] but only after i disable ipv6 [02:17] othrwise it tries to use ipv6 and cant because the phone wont do it [02:17] i can ping fin [02:17] no issues pinging [02:17] ... :/ [02:17] its fine if you are out of ideas [02:17] i dont know what i will do.. maybe try reinstall [02:17] What's /etc/resolv.conf look like? [02:18] "cat /etc/resolv.conf | nc termbin.com 9999" [02:18] nameserver 127.0.0.53 [02:18] thats all that is /etc/resolv.conf [02:18] i can try 8.8.8.8 ... [02:18] smells like unbound [02:19] doesnt make a difference [02:19] no that is the ip of the phone [02:19] actually [02:19] retrosenator: I have an idea, one moment... [02:19] i dont know but I can ping 127.0.0.53 [02:19] it is somehow localhost [02:19] It is. [02:20] OK that seem wrong. [02:20] Do you have any proxy software installed? [02:20] well there is some kind if nameserver locally [02:20] Yeah but that should be on the phone. [02:20] port 53 shows open in nmap [02:20] There must be. It's probably unbound. [02:20] locally i think it caches name requests or something [02:20] My nameserver is 192.168.0.1. [02:20] I am not sure.. this stuff moves faster than I know what is going on [02:21] ss -nlupOh, not, that's systemd-resolv [02:21] retrosenator: What happens if you do "dpkg-query -s unbound"? Please don't paste the output here. [02:21] UNCONN 0 0 127.0.0.53%lo:53 0.0.0.0:* users:(("systemd-resolve",pid=832,fd=13)) [02:21] It's not unbound, though unbound also uses that 127.0.0.53 usually [02:21] dpkg-query: package 'unbound' is not installed and no information is available [02:21] sudo ss -nlup, you'll see it running on that port. [02:22] systemd-resolv [02:22] yup [02:22] i mean systemd-resolve [02:22] retrosenator: Yeah that seems normal. [02:23] it seems normal to me, but I am not familiar with systemd-resolve [02:23] resolvectl-status [02:23] I'm not either. I didn't ask for it but something shoved it on this thing. [02:23] bougyman: I don't think there's a - in it, but that's what I'd run next. [02:23] right, no - [02:23] resolvectl status [02:24] yeah it works, but prints a bunch of stuff [02:24] i dont think resolving names to ip is the issue with apt update though [02:24] retrosenator: Try "resolvectl status | nc termbin.com 9999" and share the link. [02:24] https://termbin.com/8a2ev [02:24] retrosenator: It might be, I found something that looked hopeful. [02:24] didnt we already establish that he can resolve DNS just fine? [02:24] ravage: Yes, but one moment, I'll send you the link I found... [02:25] if it is dns that would be insidious [02:25] ravage: https://github.com/NLnetLabs/dnssec-trigger/issues/5 [02:25] -ubottu:#ubuntu- Issue 5 in NLnetLabs/dnssec-trigger "resolv.conf needs option trust-ad in order for glibc to trust it" [Closed] [02:25] Yeah I have trust-ad in my resolv.conf here. [02:26] nameserver 127.0.0.53 [02:26] options edns0 trust-ad [02:26] but like I said, I tried 8.8.8.8 in resolv.conf and apt update still hangs [02:26] his apt command also already shows the IP [02:26] retrosenator: Try adding "options edns0 trust-ad" do the end of your resolv.conf file. [02:26] s/do/to/ [02:27] The bug above might explain why DNS resolution works but only for some programs. [02:27] what about different mirrors [02:27] arraybolt3: it makes no difference [02:27] retrosenator: That's an option too, but us.archive.ubuntu.com *should* just work. [02:27] that is what i would try too [02:27] remove the "us." [02:27] and see what happens [02:27] I mean it's working here. [02:27] oh [02:27] But yeah, go ahead and try ravage's suggestion. [02:27] its http:// not https:// [02:27] is that normal? [02:27] Yes. [02:27] http is fine [02:28] removing us makes no change [02:28] i hope it shows another IP at least [02:28] no problem opening http://archive.ubuntu.com/ubuntu/ in a browser [02:28] I know it seems like that would be a security risk, but apt does signature verifications that make it not needed IIUC. [02:29] does "wget http://archive.ubuntu.com/ubuntu/ls-lR.gz" work? [02:29] re comparing Chromium and more commercial browsers. A couple of folks here were scolding me re using chrome but didnt have much reason except stick-with-your-team. Here are some actual reasons: https://www.brightworkresearch.com/the-enormous-difference-in-memory-consumption-between-google-chrome-microsoft-edge-and-chromium/ [02:29] ravage: no [02:29] it hangs [02:29] but... opening the same url in a browser works [02:29] Y'know what, Firefox uses DNS-over-HTTPS I believe. I bet that's why it works and this other stuff doesn't. [02:29] and downloads the file [02:29] 04:27 < Khaytsus> Foxes make noises you would not expect... I want to think they'd sound like dogs. they are really high pitched, more like..........cats [02:29] 04:27 < Khaytsus> Foxes make noises you would not expect... I want to think they'd sound like dogs. they are really high pitched, more like..........cats [02:30] chromebittin: Wrong channel, please, stop it. [02:30] tomreyn, oerheks, launchdemon look at my previous contribution of interest: not a question. [02:30] retrosenator, can you paste the output? [02:30] arraybolt3: copy paste by mistake, not used to Chromebook [02:30] yeah.. wget and curl dont work on that url [02:30] but chrome browser can download the file fine [02:30] also try "wget https://mirror.united-gameserver.de/ubuntu/ls-lR.gz" [02:30] chromebittin: No problem, I've done that. :) [02:31] ravage: works [02:31] ah arraybolt3 too. ya'll have been helpful to me. [02:31] morgan-wp: hm? [02:31] ok so this is a bit weird. we seem to have a problem only with http [02:31] i don’t even use ubuntu [02:31] does "echo $HTTP_PROXY" output anything? [02:31] ravage: Maybe the hotspot is blocking connections to archive.ubuntu.com to avoid people using it for OS updates. [02:32] (Connections to port 80 at least.) [02:32] if I remember you were helpful to me. that's all. if you dont use ubuntu, then what are you doing here? morgan must have a small brain launchdemon [02:32] oh maybe it is... its verizon [02:32] I could imagine a phone company doing that to avoid hotspot abuse. [02:32] retrosenator: In which case... you're going to love my next suggestion. Let's put a proxy into the mess and see what happens. [02:32] i think they did that [02:33] retrosenator: Can you install SimpleSSHD onto the phone? [02:33] yeah i’m a debian guy :P [02:33] i tried using the united-gameserver... it doesnt work for apt-update for not trusted cert [02:33] you are fine to use my mirror of course [02:33] uh [02:33] then your OS got no updates for a long time [02:33] arraybolt3: i can try... [02:33] ravage: He's on 20.04.1... [02:33] ravage: that is very true lol [02:33] So yeah, no OS updates for a loooooooong time. [02:33] I think he's over 2 years behind. [02:34] retrosenator: I'm assuming you're on an android phone, if you use an iPhone we're pretty much out of luck with my next solution. [02:34] we may be able to fix that cert thing [02:34] there is a way to allow it right? [02:34] arraybolt3: its android [02:34] i wonder if a vpn would fix this [02:34] retrosenator: That's what I'm trying to do. Tunnel your update traffic through a proxy so that it looks like it's coming from the phone and not the computer itself. [02:34] well even if I reinstall.. I will have this issue [02:35] arraybolt3: i am already sort of doing that [02:35] it wont let me have internet at all without changing the ttl count [02:35] retrosenator: Right, but if you tunnel through SimpleSSHD, it might let you bypass the block. [02:37] Basically, SimpleSSHD acts as an SSH server on the phone, then you connect to it using ssh on the laptop and create a proxy with it. Then you tell apt to use the proxy, then attempt an apt update and see what happens. It's very kludgy, but it might work. [02:37] so I create a proxy just for apt? [02:37] retrosenator, can you download "http://mirrors.kernel.org/ubuntu/pool/main/c/ca-certificates/ca-certificates_20211016~20.04.1_all.deb" in your browser? [02:37] retrosenator: Yes. [02:38] ravage: yes, in a browser, but not with wget [02:38] what is up with that? [02:38] morgan-hp: Glad to have been able to help! [02:38] and then "sudo apt install ~/Downloads/ca-certificates_20211016~20.04.1_all.deb" [02:38] that may at least make my mirror work [02:38] but you can follow the proxy way too [02:38] arraybolt3: i will hold onto that suggestion... [02:39] ravage: any idea why the browser can download it but not wget? [02:39] retrosenator: Go with what ravage is suggesting. Use the proxy thing as an absolute last resort, it's a lot of work. [02:39] because that would explain why the original ubuntu mirror doesnt work [02:39] firefox has his own certificate store [02:39] oh [02:39] ravage: Yeah but it's http, certificates shouldn't matter here. [02:39] But I could be wrong, sometimes things work weird. [02:40] the mirror on port 80 should really just work [02:40] you mean dpkg -i right? [02:40] it may be that firefox auto configures a proxy [02:40] you could check the settings [02:40] this is chrome [02:40] retrosenator: No, just sudo apt install should work. [02:40] then chrome [02:40] i think i stopped using firefox a while ago because it didnt work lol [02:40] I could try using it again lol [02:41] dpkg -i will also work in this case [02:41] but apt will do just fine [02:41] oh wow! apt update works now [02:41] whew, thanks! [02:41] After installing that file? [02:41] now you can at least get your system up to date :) [02:41] yes [02:41] I 20% understand what is going on [02:41] * arraybolt3 throws everything I thought I knew about http out the window [02:42] arraybolt3, he uses my mirror with https [02:42] i have https in the sources.list [02:42] * arraybolt3 picks back up everything I thought I knew about http [02:42] thats why i fixed the ca-certificates after i saw that https works [02:42] yeah its verizon doing this [02:42] retrosenator: I'm guessing Verizon is blocking http stuff somehow or other. Makes sense why, but it's also profoundly annoying. Glad there was a solution! [02:43] i hd to use adb shell on the phone to delete a ton of apps [02:43] ravage: Thanks for bailing me out here, I was running low on ideas and the last trick I had is somewhat of a nightmare to use. [02:43] only way to get rid of them, and it was constantly poping up telling me I can't enable a hotspot, so I deleted that app [02:43] they dont want you using devices besides the phone to access internet [02:43] retrosenator: Not without a more expensive plan, no. [02:44] well they didnt have a more expensive plan at the time, but I think they recently added one [02:44] retrosenator: You might look into https://calyxinstitute.org/, they're cheap and don't have this kind of shenanigans. [02:44] (It's a mobile hotspot with unlimited data, I use it as my sole source of Internet. Requires T-Mobile cell coverage, though.) [02:44] I was in a remote area and verizon was the only carrier.. i've since moved somewhere with more but yeah [02:44] and if you cant change the plan maybe a VPN could work [02:44] yeah tmobile doesnt have as good coverage [02:44] i'm thinking vpn too yes [02:45] +1 for VPN, I use Riseup for when I need one. It's in the Snap store. [02:45] snap search riseup-vpn [02:45] thanks guys! [02:45] retrosenator: No problem, glad to be able to help! And thank ravage, he's the one who knew what he was doing here :) [02:45] 502 packages can be upgraded. Run 'apt list --upgradable' to see them. [02:45] wow [02:46] go for it :D [02:46] Sheesh. [02:46] or drive to a mcdonalds :D [02:46] i'm afraid it will not reboot if I do... [02:46] updates usually really dont break stuff [02:46] Guess that's what 2 years of security updates look like. [02:46] I will backup all my data to a hard disk first === NeoFAT32__ is now known as NeoFAT32 [02:46] but backups are always a good idea [02:46] ravage: i dont drive lol [02:46] retrosenator: Good idea. It should be safe, but "should be" isn't something to bet on here. [02:46] bike? :D [02:47] ravage: i only walk [02:47] i'm the only one it seems... society here frustrates me [02:47] i dont drive either [02:47] I mean.. walking 5 miles each way to the store isnt that far [02:47] but here i really dont need to [02:47] but when i tell people this they think its impossible [02:47] retrosenator: I can't even walk one mile very easily. [02:47] supermarket is like 50m. same for public transportation [02:48] I've biked several miles before. [02:48] there is no public transportation [02:48] and i already put 2 wifi routers at the bars i like around here [02:49] they did not have wifi for guests [02:49] now they do [02:49] i used to have a bike.. would pedal > 100 miles for day after day crossing states etc [02:49] well wifi is harder and harder to find [02:49] its mostly locked [02:49] but we can maybe move this to #ubuntu-offtopic . nice talk but really off topic here :D [02:50] back to topic... would it be possible for apt to somehow detect this situation and provide more helpful messages? [02:50] or is it not worth bothering? [02:51] retrosenator: I think "Connection timed out" is the best it can do, since that's all it sees happening. [02:51] well. it detects that it cant connect to that IP on port 80 [02:51] what do you want it to do? :) [02:51] whatever the web browser does to be able to obtain the data?? [02:51] i guess that is a wget thing [02:51]