| systemdlete2 | Noop. That time it worked. | 00:00 |
|---|---|---|
| systemdlete2 | Let me check c1e, bbs. | 00:00 |
| systemdlete2 | OK, so I disabled C1e on the testbox. I see that sensors is installed, but afaik, there is no monitoring going on. | 00:08 |
| systemdlete2 | At least, I don't see anything that calls out. | 00:08 |
| systemdlete2 | Oh... almost forgot. I do have xen installed on this system. But I'm not actively running any VMs with it. | 00:09 |
| systemdlete2 | (this is beowulf btw) | 00:09 |
| systemdlete2 | kernel is 5.4.0 | 00:09 |
| systemdlete2 | gnarface: Let's see if/what happens next. | 00:10 |
| Xelraa | gave up after 2 hrs trying to compile old libssl and just installed wheezy in 20 mins, those were the good times when debian didnt suck | 01:02 |
| fsmithred | yeah, I liked wheezy | 01:04 |
| fsmithred | Xelraa, I have to go out for a few minutes, but I'll be back. I don't understand why you had to compile libssl. I built partimage with no problems, both amd64 and i386. Be back soon.. | 01:06 |
| user11 | roughly what % of users are against sytemd because they're older/used to sysvinit and what % are against it for other reasons...doing all the things, centralized control by redhat/ibm, binary logs, perhaps privacy or security issues | 01:13 |
| djph | user11: 100 | 01:13 |
| user11 | i feel like the avg user here is older/"veteran" linux user, compared to other irc rooms | 01:13 |
| djph | perhaps | 01:13 |
| systemdlete | 48.73% favor biden | 01:13 |
| user11 | lol | 01:14 |
| systemdlete | about 33.3% recommend trident sugarless gum for their patients. | 01:14 |
| systemdlete | (last I heard, that is) | 01:14 |
| user11 | i mean...jokes aside, maybe debianfork is better channel for this, but Im often seeing ppl with decades experience here | 01:15 |
| systemdlete | The rest favor outlawing the law of gravity. | 01:15 |
| rrq | user11: there's no "maybe | 01:15 |
| rrq | about that | 01:15 |
| systemdlete | Have you tried googling for this info? | 01:15 |
| yanmaani | I'm the latter | 01:15 |
| yanmaani | systemdlete: I don't think there's polling on this lol | 01:16 |
| brocashelm | not true. i'm still pretty new to gnu/linux (using mint three years ago) and hate systemd. i don't like bloat/security loopholes | 01:16 |
| systemdlete | I just ***LOOOOOVE*** bloat and security holes | 01:16 |
| systemdlete | And poorly written code. | 01:16 |
| systemdlete | Love it, love it, love it! | 01:16 |
| brocashelm | rms also loves it because it's """"free software"""" anyway | 01:17 |
| djph | "loves" | 01:17 |
| yanmaani | The security is at least OK I think. I just don't trust Lennart Poettering. | 01:17 |
| user11 | its also to see if were gaining younger/newer users/devs... | 01:17 |
| djph | I believe he stated he's not familiar enough with the code to comment on it, but "yep, it's free software" | 01:18 |
| fsmithred | user11, for the first couple years we had people who did not want systemd right from the start. | 01:18 |
| fsmithred | the last couple years we've gotten a bunch of people who were fine with using systemd until they used for some time, then they came running here. | 01:18 |
| brocashelm | i never understood why devuan shipped with pulseaudio if systemd/poetteringshit is to be avoided | 01:19 |
| systemdlete | me either. Or avahi daemon | 01:19 |
| brocashelm | pulseaudio is simply broken, unstable shit | 01:19 |
| fsmithred | task-whatever-desktop packages promote bloat with all the deps | 01:19 |
| brocashelm | it can easily be replaced. avahi is harder because of so many dependencies | 01:19 |
| fsmithred | so you get a FULL desktop experience | 01:19 |
| yanmaani | brocashelm: because the goal is just to make it possible to avoid systemd | 01:20 |
| yanmaani | and that needs a distro | 01:20 |
| brocashelm | i understand that | 01:20 |
| yanmaani | with patches and stuff | 01:20 |
| yanmaani | you can remove pulseaudio, no? You don't need any special patches to anything or so | 01:20 |
| fsmithred | avoiding pulseaudio and avahi are easy - just don't install them | 01:20 |
| fsmithred | or remove, yeah | 01:20 |
| brocashelm | you can. i was just wondering why they come as defaults | 01:20 |
| fsmithred | inherited defaults from debian | 01:21 |
| systemdlete | For a while, there was that nasty browsers dependency, but I think the natives got so restless that mozilla et al gave in. | 01:21 |
| fsmithred | ff-esr doesn't need PA, but I think regular ff does | 01:21 |
| systemdlete | apulse solved that... mostly. | 01:22 |
| brocashelm | yeah, apulse is good | 01:22 |
| fsmithred | yeah, apulse works with tor-browser | 01:22 |
| brocashelm | i stick with alsa and never had any problems | 01:22 |
| user11 | fsmithred: even future ff-esr's like 78 ? still no PA dep? | 01:22 |
| systemdlete | Wasn't there some huge, enormous, gargantuan software company that dominated every market space that decided to braze their browser onto their operating system kernel? It was such a great idea, that Redhat did the same. | 01:23 |
| user11 | firefox is annoying me more and more...they're discussing removing user.js, or perhaps requiring a mention in prefs.js to specifically allow it | 01:23 |
| fsmithred | I'm not sure about 78 | 01:23 |
| systemdlete | I can no longer order wings at my favorite restaurant because of js | 01:24 |
| systemdlete | Last count they had at least 29 javascripts running on the checkout page -- it no longer accepts the same credit card I've been using there for ages. | 01:24 |
| user11 | my govt is sending my medical/citizen data to big tech cloud against my will | 01:24 |
| brocashelm | what would be interesting is a debian- or devuan-based distro that not only excluded systemd, but also gnome, pulseaudio, etc. packages | 01:24 |
| brocashelm | i know slackware doesn't provide gnome packages | 01:24 |
| fsmithred | guys... OT | 01:24 |
| systemdlete | I was told to stop blocking their javascripts. Somehow, I need to give google and Mark Zuckerberg my personal info. | 01:25 |
| user11 | brocashelm: theres hyperbola thats real strict about no-poeterring, its arch | 01:25 |
| yanmaani | brocashelm: To what end? Just don't install them | 01:25 |
| systemdlete | We'd better shut it before u-no-hoo comes and makes us shut it. | 01:26 |
| fsmithred | I already did that | 01:27 |
| systemdlete | Well, you must say it LOUDER, fsmithred! | 01:27 |
| brocashelm | the OT wasn't loud enough? | 01:27 |
| systemdlete | seems not... | 01:28 |
| systemdlete | some of us are obedience challenged, sorry. | 01:28 |
| fsmithred | Xelraa, are you around? | 01:30 |
| systemdlete2 | ntp does not update my clock. I tried service ntp stop; ntpd -gq; service ntp start, but so far, not results. | 02:58 |
| systemdlete2 | I note that the server I specified in /etc/ntp.conf does not seem to be used, or at least the output of ntpd -gq does not indicate it is referencing it. | 02:58 |
| systemdlete2 | The time server seems to be working for all of my other clients. | 02:59 |
| systemdlete2 | (ntpdate is deprecated) | 02:59 |
| yanmaani | systemdlete2: what does ntpq -p give you? | 02:59 |
| yanmaani | also, ntp is slow by design | 03:00 |
| systemdlete2 | well, considering ntpd is running, ntpq fails | 03:00 |
| systemdlete2 | ah, restarted the daemon | 03:00 |
| systemdlete2 | I forgot it was down thanks to all my fiddling trying to make it work | 03:00 |
| fsmithred | ntpdate still works | 03:01 |
| systemdlete2 | yeah, ntpq does show that it is seeing my LAN time server | 03:01 |
| systemdlete2 | fsmithred: Hasn't the pope declared that ntpdate is no longer holy? | 03:01 |
| gnarface | is the time server linux, or BSD? | 03:01 |
| systemdlete2 | Linux | 03:02 |
| gnarface | same version? | 03:02 |
| systemdlete2 | eh... not sure | 03:02 |
| systemdlete2 | wouldn't there be errors somewhere showing incompatibility? | 03:02 |
| gnarface | yes | 03:02 |
| systemdlete2 | I don't see /var/log/ntp.log or anything like it. Just /var/log/ntpstats, which is empty directory | 03:03 |
| gnarface | in /var/log or somewhere in ntpq (or both, i would presume) | 03:03 |
| fsmithred | I just ran ntpdate in chmaera 10 seconds ago | 03:03 |
| danuan | never used ntp, but cant it be launched in debug mode and not a service ? | 03:03 |
| gnarface | ah | 03:03 |
| gnarface | systemdlete2: fyi *all* daemons default to outputting to /var/log/daemon.log, just fyi | 03:03 |
| systemdlete2 | yeah, ok | 03:03 |
| systemdlete2 | that's true | 03:03 |
| gnarface | systemdlete2: (a debianism, i think) | 03:03 |
| systemdlete2 | kernel reports TIME_ERROR: 0x2041: Clock Unsynchronized | 03:04 |
| systemdlete2 | might be the smoking gun | 03:04 |
| danuan | is it not there to synchronize it ? | 03:05 |
| yanmaani | systemdlete2: Does the delay column in ntpq say anything? | 03:05 |
| danuan | :0 | 03:05 |
| systemdlete2 | the ntp server is 4.2.8p15 | 03:05 |
| systemdlete2 | delay is .572 | 03:05 |
| yanmaani | Well, is the time server synchronized? | 03:06 |
| systemdlete2 | Yes! I checked it against nist.gov | 03:06 |
| systemdlete2 | The server is within a second of the actual time. | 03:06 |
| gnarface | well, here's what i would do, i would stop it, then run ntpdate, then start it again, and see if it behaves itself after that, and if not, blame the time server | 03:07 |
| systemdlete2 | And other systems on the network are sync'ing fine. The problem is on beowulf btw | 03:07 |
| crashoverride | fsmithred: could you maybe copy debian/grubx64.efi to BOOT/bootx64.efi during the installation process? | 03:07 |
| yanmaani | I would consider just adding another server | 03:07 |
| yanmaani | to the ntpd list | 03:07 |
| yanmaani | and see what happens | 03:07 |
| crashoverride | fsmithred: the standard sets this location ans those names | 03:07 |
| fsmithred | crashoverride, you probably could do that | 03:08 |
| fsmithred | alt-f2 in the installer will bring you to a root console | 03:08 |
| crashoverride | I mean, as the installer default | 03:08 |
| systemdlete2 | gnarface: If I had ntpdate installed, I'd have done that already. But the regime has declared ntpdate an outlaw. (It's not, I know. But every web page I hit says don't use it anymore) | 03:08 |
| systemdlete2 | yanmaani: I'll try that. | 03:08 |
| fsmithred | probably, but I don't hack on that installer | 03:08 |
| fsmithred | and it might break secure boot | 03:09 |
| crashoverride | fsmithred: it is verbatim from debian? | 03:09 |
| fsmithred | no, we make changes | 03:09 |
| crashoverride | so | 03:09 |
| fsmithred | but the signed grub is from debian | 03:09 |
| crashoverride | how about an extra screen tp copy that efi file? | 03:10 |
| crashoverride | just in case | 03:10 |
| crashoverride | s/tp/to/ | 03:10 |
| fsmithred | I think the installer already asks about that | 03:10 |
| crashoverride | nope | 03:10 |
| fsmithred | asks to put grub in the removable device something or other | 03:11 |
| fsmithred | I've seen it numerous times but never selected it | 03:11 |
| systemdlete2 | yanmaani: ntpd -gq is hanging forever it seems, unlike when I was hitting my LAN time server | 03:11 |
| systemdlete2 | I set server to ntp.pool.org | 03:11 |
| systemdlete2 | commented out my LAN ntp server | 03:12 |
| crashoverride | [ -n "$copyefi" ] && mkdir -p /boot/efi/EFI/BOOT/ && cp /boot/efi/EFI/debian/grubx64.efi /boot/efi/EFI/BOOT/bootx64.efi | 03:12 |
| crashoverride | that would ensure proper booting with EFI firmware using the hardcoded location from the spec | 03:13 |
| crashoverride | such as VM firmwares | 03:13 |
| crashoverride | like bhyve's | 03:13 |
| systemdlete2 | fsmithred: Where do I find ntpdate for beowulf? | 03:14 |
| crashoverride | that would definitely not break the signed boot | 03:14 |
| crashoverride | and it would allow people to boot properly in VMs | 03:15 |
| fsmithred | crashoverride, maybe file a bug report against the installer | 03:15 |
| fsmithred | that way the right people will see it | 03:15 |
| crashoverride | on devuan.org? | 03:15 |
| gnarface | systemdlete2: there is literally a ntpdate package | 03:15 |
| crashoverride | ok | 03:15 |
| systemdlete2 | apt search ntpdate comes up nil. | 03:16 |
| systemdlete2 | repo problem? | 03:16 |
| crashoverride | night for now | 03:16 |
| crashoverride | o/ | 03:16 |
| gnarface | hmm, maybe, or they just removed it like assholes | 03:16 |
| gnarface | i'm not seeing it in ceres either, but pkginfo.devuan.org lists it in beowulf | 03:16 |
| systemdlete2 | It is deprecated, officially | 03:16 |
| fsmithred | systemdlete2, something is wrong with your sources | 03:16 |
| systemdlete2 | maybe I need to push the keys harder? | 03:16 |
| systemdlete2 | which repo do I need for ntpdate? | 03:17 |
| gnarface | it's marked deprecated in the package description but probably just because they replaced it with systemd... i think we still need this | 03:17 |
| fsmithred | *** 1:4.2.8p12+dfsg-4 500 | 03:17 |
| fsmithred | 500 http://deb.devuan.org/merged beowulf/main amd64 Packages | 03:17 |
| systemdlete2 | gnarface; Are you able to install ntpdate on beowulf? | 03:17 |
| gnarface | systemdlete2: well at some point i did | 03:17 |
| systemdlete2 | deb http://deb.devuan.org/merged beowulf main contrib non-free | 03:18 |
| gnarface | systemdlete2: https://pkginfo.devuan.org/stage/beowulf/beowulf/ntpdate_4.2.8p12+dfsg-4.html | 03:18 |
| systemdlete2 | wait | 03:18 |
| systemdlete2 | beowulf main or beowulf/main? | 03:18 |
| fsmithred | yes | 03:18 |
| systemdlete2 | yes... which? | 03:18 |
| fsmithred | depends on where you look | 03:18 |
| fsmithred | I showed the output of 'apt policy ntpdate' | 03:19 |
| systemdlete2 | deb http://deb.devuan.org/merged beowulf main contrib non-free | 03:19 |
| fsmithred | correct | 03:19 |
| systemdlete2 | ok | 03:19 |
| systemdlete2 | but apt search ntpdate comes up nothing | 03:19 |
| fsmithred | not for me | 03:19 |
| gnarface | systemdlete2: make sure you have beowulf-updates and beowulf-security too | 03:20 |
| systemdlete2 | I'll try apt update again (even though I just did it a while ago) | 03:20 |
| systemdlete2 | now it shows. | 03:20 |
| systemdlete2 | ?????? | 03:20 |
| systemdlete2 | Did I catch an incomplete apt update previously maybe? | 03:20 |
| systemdlete2 | Like a repo was getting updated and didn't complete the update? | 03:21 |
| systemdlete2 | odd... | 03:22 |
| systemdlete2 | I run ntpdate on the testbox, but when it completes after several seconds, it still has the wrong time | 03:23 |
| systemdlete2 | It's about 7 minutes fast | 03:23 |
| systemdlete2 | fsmithred -- any idea how my apt was missing the package? | 03:24 |
| fsmithred | nope | 03:24 |
| fsmithred | unfinished update maybe? | 03:25 |
| fsmithred | misspelled search term? | 03:25 |
| systemdlete2 | that's what I asked -- maybe the update was interrupted due to a repo update? | 03:25 |
| fsmithred | I'd be more concerned with the seven minutes | 03:26 |
| systemdlete2 | anyway, neither ntpdate nor ntpd -gq will coerce the clock to the correct time. | 03:26 |
| systemdlete2 | (I am, believe me) | 03:26 |
| fsmithred | what time server are you using? | 03:26 |
| fsmithred | I use ntpdate-debian sometimes | 03:26 |
| systemdlete2 | I've tried a couple. One is my local time server, which has the correct time and my VM's and other systems have no problems with it | 03:26 |
| systemdlete2 | I also tried ntp.pool.org | 03:27 |
| systemdlete2 | but that just hung... for many minutes | 03:27 |
| systemdlete2 | I tried ntpdate -u myntpserver and that returned, but did not set the date | 03:28 |
| systemdlete2 | I just rebooted that box about an hour ago, while investigating a different problem. | 03:28 |
| systemdlete2 | I also tried ntpdate-debian, same result | 03:29 |
| systemdlete2 | does ntp require an incoming port as well as outgoing -- I mean do I need to open 123 for incoming as well as outgoing? | 03:30 |
| yanmaani | systemdlete2: I'd advise you to add different NTP servers | 03:30 |
| yanmaani | try 0.debian.pool.ntp.org | 03:30 |
| yanmaani | because ntp.pool.org is not an NTP server | 03:30 |
| user12 | on other debian-deriv distros (systemd and not) i usually have to sudo ntpdate-debian or something like that | 03:31 |
| user12 | systemdlete2: ^ | 03:31 |
| systemdlete2 | no, not any better. Let me see if I open 123 for incoming... | 03:31 |
| fsmithred | only thing I've ever had to do when installing ntp is edit /etc/ntp.conf to add some time servers | 03:31 |
| user12 | sorry if it was already tried im surprised the issue is still unresolved all this time, | 03:31 |
| systemdlete2 | gufw does not show anything trying to enter on 123 | 03:33 |
| yanmaani | systemdlete2: does ntpq still hang? | 03:33 |
| systemdlete2 | I'm logged in as root, user12, so no need for sudo in this case. No, normally I don't run as root | 03:33 |
| yanmaani | (and you've reloaded the config) | 03:34 |
| systemdlete2 | ntpq worked better with the url you gave me, yes. But still no time update | 03:34 |
| yanmaani | systemdlete2: What does it say under 'delay'? | 03:34 |
| systemdlete2 | I'm just doing ntpd -gq | 03:34 |
| systemdlete2 | not running the daemon as such | 03:34 |
| yanmaani | if you run ntpq -p | 03:34 |
| yanmaani | what does it tell you about 'delay' | 03:34 |
| systemdlete2 | ok, I restarted the daemon and ran -p | 03:35 |
| yanmaani | or no, sorry, offset | 03:35 |
| systemdlete2 | delay is still half a second | 03:35 |
| systemdlete2 | offset -0.072 | 03:35 |
| user12 | i dunno, the -debian one is present on antix/mxlinux and is the only one that works there for some reason | 03:35 |
| yanmaani | those units are milliseconds I think | 03:35 |
| yanmaani | so delay 0.5 = ping 0.5 ms to your time server | 03:35 |
| systemdlete2 | right. So .531 is half a second | 03:35 |
| yanmaani | No, 531.0 is half a seconnd | 03:36 |
| systemdlete2 | no? | 03:36 |
| systemdlete2 | oh | 03:36 |
| systemdlete2 | I see what you are saying | 03:36 |
| yanmaani | .531 = 0.5 milliseconds = 0.0005 seconds | 03:36 |
| yanmaani | I think it's fine | 03:36 |
| systemdlete2 | seems | 03:36 |
| yanmaani | it probably sees that it's 7 minutes off | 03:36 |
| yanmaani | and tries to slowly fix it | 03:36 |
| systemdlete2 | but now it lists 2 entries, not one | 03:36 |
| yanmaani | instead of jerking the time forward | 03:36 |
| yanmaani | yeah, and both have offset close to 0? | 03:36 |
| systemdlete2 | yes, esp the stratum 2 | 03:37 |
| systemdlete2 | it's perfect 0 | 03:37 |
| systemdlete2 | delay, offset, jitter on the stratum 2 is zero | 03:37 |
| yanmaani | yeah then just wait a day or two. Also why don't you run it as a service | 03:37 |
| yanmaani | Wait, what | 03:37 |
| yanmaani | oh it's on lan? | 03:37 |
| systemdlete2 | I do, normally. I only took it down to investigate this | 03:37 |
| systemdlete2 | there are 2 entries, first one my lan ntp server, 2nd is the url you gave | 03:38 |
| systemdlete2 | yanmaani: It's only a testbox. | 03:38 |
| systemdlete2 | So I can jerk the time forward by a few minutes | 03:39 |
| systemdlete2 | but it is still weird it is not updating. | 03:39 |
| systemdlete2 | OK, yanmaani: I see. I commented out my own ntp server again. Restarted and ran the ntpq -p again. Now it shows delay and offset non-zero | 03:41 |
| systemdlete2 | also, I'm still seeing the error in the log: kernel reports TIME_ERROR: 0x2041: Clock Unsynchronized | 03:43 |
| systemdlete2 | Could the kernel version be the issue here? Idk, but https://www.linuxquestions.org/questions/slackware-14/ntpd-kernel-reports-time_error-0x2041-clock-unsynchronized-4175636606/ seems to indicate that in some cases, it could be. | 03:50 |
| systemdlete2 | (just a thought) | 03:50 |
| danuan | if posting something a bit more extended then a simple post to dev1galaxy.org , is there a simple BBcode editor like mousepad with preview . tried retext which looked good on screenshots but pulled in too many dependancies and did not deliver on simple BBCode previews that dev1galaxy.org would accept | 06:11 |
| gnarface | i don't know of anything, but that doesn't mean it doesn't exist | 06:25 |
| gnarface | you could install it locally | 06:25 |
| gnarface | in theory | 06:25 |
| danuan | huh ? i was just weirded out editing a long howto by hand without instant preview , and to install it locally ? | 06:29 |
| danuan | what would that get me ? | 06:30 |
| golinux | All available bb code on the forum is listed at the top of the write screen | 06:33 |
| golinux | danuan | 06:34 |
| golinux | ^^^ | 06:34 |
| Dzwiedziu | Hello: I've got myself stumped | 19:35 |
| Dzwiedziu | e: The repository 'http://deb.devuan.org/merged bewoulf-backports Release' does not have a Release file. | 19:35 |
| Dzwiedziu | bewoulf-backports.list : deb http://deb.devuan.org/merged bewoulf-backports main | 19:36 |
| rwp | I don't know but I ran into that myself a couple of days ago on the main repository. I was using a proxy and the proxy was in a bad state. | 19:39 |
| rwp | I removed the proxy, ran "apt-get update" again, and it was also later so things may have changed upstream, and things became okay. | 19:39 |
| Dzwiedziu | no proxy here, at least as far as my router goes | 19:39 |
| rwp | For me I was using my own apt-cacher-ng as I have several systems and they can all share the cache that way. | 19:40 |
| rwp | For whatever reason I see apt-cacher-ng freak out every six months or so. | 19:40 |
| rwp | I have given up trying to figure out why. But if I purge it and reinstall it then it resets and becomes happy again. | 19:40 |
| Dzwiedziu | errr... | 19:41 |
| Dzwiedziu | a bit new for me for the apt-cacher-ng to behave like that. | 19:41 |
| rwp | I only mentioned it in the case that you happened to also be using something like it. But if not then it is something else. | 19:41 |
| Dzwiedziu | well, I don't have anything better to do, so I'll try the reverse ^^ | 19:42 |
| rwp | Hmm... I backed up and read your posting very carefully. "bewoulf-backports" Shouldn't that be beowulf-backports ?? | 19:44 |
| rwp | Sorry I did not notice the spelling on the first reading of it. | 19:46 |
| Dzwiedziu | Well of course it is! | 19:46 |
| Dzwiedziu | -_-' | 19:46 |
| Dzwiedziu | Strange, now it works \s | 19:47 |
| rwp | A second set of eyes! :-) | 19:47 |
| Dzwiedziu | Thanks! :D | 19:47 |
| Dzwiedziu | bugger, it seems not to have current dropbear versions | 19:53 |
| rwp | Dzwiedziu, What version are you looking for and what feature in that newer version is what you are looking for from it? | 20:01 |
| Dzwiedziu | ed25519 support | 20:02 |
| Dzwiedziu | but I'll revert to RSA as I'm not adventurous today to mix-and-match with testing | 20:02 |
| rwp | ed25519 isn't in version 2018.76-5 from Buster/Beowulf? Hmm... | 20:03 |
| rwp | I can see why that would be annoying. I pretty much have converted to using ed25519 myself. But I have both it and the previous available too. | 20:03 |
| Dzwiedziu | No, it was patched in 6mo ago, according to their Github. | 20:04 |
| Dzwiedziu | https://github.com/mkj/dropbear/pull/91/files | 20:05 |
| rwp | Yes but Buster, the basis of Beowulf, was frozen before then. | 20:06 |
| rwp | For newer you would need to use Ceres. Which I would not recommend for production units. | 20:07 |
| Dzwiedziu | double yeah on those; Debian has the 2020 version in testing also | 20:08 |
| rwp | I am curious... Upon what device are you using dropbear for ssh instead of using openssh-server for it? (I assume some small dedicated router hardware or something...) | 20:09 |
| Dzwiedziu | remote LUKS unlock | 20:09 |
| rwp | Ah... | 20:09 |
| Dzwiedziu | Well, at a time I've used a separate RSA key for this. | 20:10 |
| rwp | I haven't set that up myself yet but it is on my todo list for the future. Is that using mandos too? | 20:10 |
| rwp | I would think that rsa keys should be okay except that large 4k size keys can take a long time on slower devices. Hence the desire for the more bit efficient ed25519 keys. | 20:11 |
| Dzwiedziu | What's mandos? Still saying that I'm pretty sure that it doesn't ^^ | 20:11 |
| rwp | https://www.recompile.se/mandos | 20:12 |
| Dzwiedziu | Interesting | 20:12 |
| rwp | That tool seems to be the standard method of people I have asked about this so far. | 20:13 |
| Dzwiedziu | usually, from where I've got most of my experience, the thing was basically as here: https://hamy.io/post/0009/how-to-install-luks-encrypted-ubuntu-18.04.x-server-and-enable-remote-unlocking/ | 20:14 |
| Dzwiedziu | TL;DR: initramfs with dropbear+key+script, giving you an input to the prompt | 20:15 |
| Dzwiedziu | But Mandos now, this looks way better for a VM farm. | 20:16 |
| rwp | It's all still on my todo list to learn about and do. But life and time are what keep everything from happening all at once. | 20:42 |
| SuaveDandy | Mentlegen? | 20:54 |
| DHE | laddies? | 21:06 |
| Dzwiedziu | yeah, todo vs life | 21:07 |
| Dzwiedziu | And about that, I'm off to do something unproductive. Rimworld maybe. | 21:09 |
| SuaveDandy | I just wanted to ask something. | 21:09 |
| SuaveDandy | Moved to #devuan-offtopic | 21:09 |
Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!