Search Amazon.com:
Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us $3,400 per month for bandwidth bills alone, and since we don't believe in shoving popup ads to our registered users, we try to make the money back through forum registrations.
  • Post
  • Reply
Lukano
Apr 28, 2003



I've got a rather embarassing question, that goes to show exactly how little I know about using Linux, after nearly a decade of casual use.

I've been following the XBMC Linux & OSX port progress (http://www.xbmc.org) for a while now, and am trying to throw together a community site related to XBMC. Specifically I want to play host to 'generic' compiles of the application that users can download and run (tarball) without having to compile for themselves.

I know this isn't an ideal method of people obtaining the applications, but I'm pretty confident I can make it work.

That being said, I honestly haven't the foggiest clue how to go about compiling something (say on an Ubuntu 7.10 32bit running on an A64, Intel Centrino, or C2D machine) intended to run on other linux flavors, with various hardware implementations.

Any suggestions on where to start? Or anyone interesting in throwing in their lot with me and assisting with my little 'project'?

http://www.xbmcbuilder.com is what I've thrown together so far (yeah I know, Joomla. It was quick and easy).

Adbot
ADBOT LOVES YOU

Lukano
Apr 28, 2003



Anyone have any experience with WINE and uTorrent? I've gotten 1.8.5 working (after installing 1.8.5 in wine, then running 2.0 beta, then copying the settings.dat that 2.0 generated in appdata to the program files path) all well and good but for a problem that's plagued me with utorrent in wine for a while.

I've had the problem with both Ubuntu 9.04 and 9.10, both are running wine 1.1.32.

My speeds will climb up to the line max at times, then all of a sudden the upload speeds will bottom out and drop to 0. They'll stay there a minute or two, then jump back up again.

I've confirmed the traffic is stopping when it happens, it's not just a reporting/visual error in utorrent. I've played with all of the various disk cache options, writing directly to the path I want and through a drive mount in wine. The destination is an mdadm / lvm array with reiserfs.

I'm stumped, and the utorrent forums are useless - my post stating the same as above and more got a 'check the faq, your line might not be able to handle more than 100 connections'.

Lukano
Apr 28, 2003



Underflow posted:

Hard to tell without seeing your config. Like many others, I run an older uTorrent release on Wine and have never had any trouble.

What version of uTorrent do you run without issue? I'm willing to try an older version to see if it resolves to problem - at the very least it'll help me isolate the issue a bit.

Lukano
Apr 28, 2003



Found a way to resolve the upload drop I was getting with utorrent in wine ;

quote:

Try various uTP settings? (Set Preferences > Advanced > bt.transp_disposition to 15 to enable, 10 to force, 5 to disable)

Set mine to 15 (was 13).

Lukano
Apr 28, 2003



I may be a bit off base, but can you fail it out, then re-add it?

Lukano
Apr 28, 2003



I'm using the Ubuntu 10.04 beta, and am having a headache with the built in Gnome Remote Desktop (vino). I can connect to the server via ssh tunnel, or direct if I open the ports - but beyond that, I get nothing. It takes my password, then does not even begin to draw the screen or provide dimensions to the client.

I know there's been issues with vino and certain xorg drivers (nvidia) that are resolved by disabling desktop effects, compiz, and using noxdamage when/where possible. I've tried the first two, and can't figure out how to try the third without physical access to the machine.

Any ideas or suggestions?

Lukano
Apr 28, 2003



Can you hook the NX session in to the existing desktop session locally (like Remote Desktop does) or does it require it's own unique X session ala; x11vnc or vnc4server?

Lukano
Apr 28, 2003



GregNorc posted:

Cross posting this in the linux thread, trying to get some opinions.

I'm getting a new thinkpad and trying to pick a distro... narrowed it down to three:

Ubuntu
CentOS
FreeBSD (yes I realize BSD != Linux but they're so similar I'm gonna lump them together anyways )

I was hoping to get some opinions on what's the best of the three for my purposes (security geek, so FreeBSD appeals in that egard, but also busy as hell so out of the box functionality and sheer amount of documentation makes Ubuntu a strong candidate. CentOS seems like it might be a decent middle ground - enough businesses using Redhat to make it stable and have good documentation, but a bit more streamlined than say, Ubuntu.)

Thoughts?

I'd suggest Ubuntu as well. You can go feral and switch over to Gentoo or Slackware later, but if you're just getting started - it'll be the easiest transition from Windows. A wealth of online resources, and it's just easy and works.

Lukano
Apr 28, 2003



Bob Morales posted:

Is it bad that after close to 15 years of mIRC, I finally just started using a IRC client on Linux in a shell account?

I'm in the same boat. Been using mIRC since at least ~1994, and was always wishing for something a little more like the good old bbs door clients I started out on. It took me until early this year to really and truly try irssi, and I'm now set for life. I can't believe I made do without for that long!

Lukano
Apr 28, 2003



..

Lukano fucked around with this message at Dec 6, 2011 around 03:34

Lukano
Apr 28, 2003



..

Lukano fucked around with this message at Dec 6, 2011 around 03:35

Lukano
Apr 28, 2003



..

Lukano fucked around with this message at Dec 6, 2011 around 03:35

Lukano
Apr 28, 2003



Lukano posted:

I know I'm likely to get a lot of 'rawr, circumventing corporate security policies!!!' feedback from this question, but I'll ask it anyways;

How would I go about forcing split-tunnelling with linux and an openconnect client, on a VPN connect that technically has split-tunnelling disabled server-side?

There's a convoluted side-explanation to my search, involving me having a spare laptop I brought in to work - connect to the 'public' wifi AP, and VPN in to the corporate network all in order to use Synergy+ for keyboard and mouse sharing.

The hitch is that they've disabled split-tunnelling on the employee VPN in order to prevent accidental bridging and whatnot, which while I don't really agree with - I can't do much about. Various other VPN policies prevent me from SSH'ing and VNC'ing to my server at home once I'm connected to the VPN, which is a further frustration for me.

That said, I've seen it referenced quite often in my searching today, that there's really nothing the VPN host can do to dictate behavior of the remote machine, including forcing a split tunnel on a VPN connection that has split-tunnel disable being pushed out to the remote machine. I just can't seem to find any examples of how to do so.

I've played with the various network-manager and route defenitions, if only to prove that they do infact have split-tunnelling disabled properly. As for manually specifying the route and whatnot, I'm at a bit of a loss. I also took a peek at the openconnect cli tool, but no obvious luck their either.

Any linux smartypants have some alternate suggestions? Ubuntu 64bit on the laptop.

I take no credit for the solution, as I had some assistance from anothr party - but in the interest of sharing my solution, this is all it took ;

when connected to the VPN;

route del default gw 0.0.0.0
route add default gw 172.19.6.1
route add -net 172.16.0.0 netmask 255.240.0.0 dev tun0

Simple as that, synergy's connecting to my workstation via the VPN, but everything outside of that network is routing out of the WLAN. Yay!

Lukano
Apr 28, 2003



GringoGrande posted:

Any time spent using any editor other than vim is a colossal waste of time. If you are inclined to use emacs, you are better off using vim at a weird angle, that way you get the RSI and a usable editor.

This man speaks the truth. VIM is all you want, all you'll ever need, and all you should be using.

It's also the most awesomest thing that ever awesomed.

Lukano
Apr 28, 2003



Is there a way to hook mutt in to an existing POP mailbox created by and running in Evolution? Say I want to check my email, but don't want to fire up a VNC session - how would I get mutt to use the evolution mailbox. Also if the above is possible, can mutt be used to send/retrieve and write new/sent messages to the shared mailbox in such a way that evolution can read it later, or would it be rather hacky at best having Mutt for view-only?

edit - I'm trying to avoid imap here, as I'd rather the mail be off the remote server and on my local machine in this particular case.

edit2 - after rethinking, perhaps imap of some sort may be the route I want to take. Looking for some suggestions here, my scenario laid out below;

I have a handful of POP/IMAP accessible accounts through my ISP, webhost, and gmail that I want to aggregate in to a single local store of some sort. I then want to be able to access this local combination of various mail sources, via mutt, evolution, outlook, or whatever client I have handy at that point. The end goal is to pull mail off of the remote POP/IMAP servers as it's checked, and keep it stored locally in an easily-accessible, multi-client scenario.

Pipe dream? Take the easy route and install CitadelSuite or Zimbra and monkey with it that way? Better methods to acheive the same or similar results?

Lukano fucked around with this message at Jul 28, 2010 around 21:31

Lukano
Apr 28, 2003



A crossposted question from the IRC Best Practice thread, but it's driving me nuts - I assume there has to be something plugin / script wise that does what I want, but I'm drawing a blank;

Kind of a random shot in the dark question.

I'm using irssi and bitlbee, and am loving it - with the exception of no previous-conversation chat history when you open a new window with someone you've chatted with prior. It's a pretty common feature in GUI IM clients these days, but I can't seem to find a script that'll replicate the functionality for irssi.

It really would be hugely beneficial, especially in regards to bitlbee. Not to mention reading missed messages from unplanned restarts, without having to check the logs themselves.

Lukano
Apr 28, 2003



waffle iron posted:

/lastlog?

Well jeez, that's pretty much perfect (but for it not being automated, but I can deal).

edit - actually upon further review, it's not what I'm looking for. What I'd like is to be able to open a msg window with an irc or bitlbee contact, and have that window show/push/replay the last X lines of my log with them (even if from a prior session).

ZNC does this for channels, but not for msg windows (so that chat-history that I really wanted most for bitlbee and irc msgs).

Lukano fucked around with this message at Sep 15, 2010 around 14:01

Lukano
Apr 28, 2003



Crossposting this from the 'IRC Best Practices' thread as I doubt it'll get much attention or assistance there;

Urgh, I've had a ping timeout issue with irssi for about a year now, and it's driving me fricking insane (I hate waking up in the morning to see 3+ nickserv identify responses, from 5-6 individual servers - every time like clockwork).

Ubuntu 10.10 host, irssi (latest stable), UFW on ubuntu disabled. I did replace the stock firmware on the Netgear WNDR3700 with dd-wrt about a year back, and while I can't promise that it's related - I don't recall pinging out this frequently before doing so. That said I've updated and reflashed multiple newer versions of DD-WRT with no change since / many 30/30/30 resets / restore to factory, etc.

The issue is a ping/pong timeout with IRC servers, with irssi as the client. The problem was not present with the original firmware, only came up with the installation of dd-wrt.

Irssi's logs show something along the lines of;

quote:

12:05 ::: No PONG reply from server blahblah.net in 301 seconds, disconnecting
12:05 ::: Connection lost to blahblah.net

I've tried changing the TCP and UDP timeouts, I've tried disabling SPI filtering for ident and WAN pings, I've even tried increasing irssi's ping timeout to 30mins (1800s) all with no change.

I've read various reports of this in relation to dd-wrt, and it seems the most common fix is either a ping script for irssi (any suggestions?) or disabling the SPI firewall (uhm, no I'd rather not).

Kind of a shot in the dark posting here, but fingers crossed someone can point me in the right direction as to resolving it. Same goes for suggestions for ping scripts for irssi that would also mitigate the issue perhaps?

(edit - as further troubleshooting in the past few days, I've tried setting the irssi setting of max_lag_before_disconnect to 30min (1800s) as well as 0min, with no change in behavior - other than 0min just going into an unresponsive lag spiral).

Lukano
Apr 28, 2003



elite burrito posted:

What did you change the TCP timeout to? For this to work, it needs to be greater than the interval at which the irc server pings you (more specifically, greater than the longest interval between any two packets that will match the firewall rule allowing you to connect to the IRC server).

Don't think of IRC ping as ICMP ping. It is just a command sent over the irc TCP session, not a "true ping".

Some stateful firewalls have a feature that will allow an ACK packet that doesn't match the state table to be compared against the firewall rulebase, in reverse. I do not know if DD-WRT would have this, it is typically seen in enterprise firewalls. In checkpoint it is called "Allow out of state TCP packet". If DD-WRTs firewall has a feature like this, I think it would help you.

Any kind of IRC script that sent data over the connection at an interval rate shorter than your TCP timeout should help you.


I don't know what your firewall policy is set up like or what your network is set up like, but you could always write a rule above the ESTABLISHED rules (I assume DD-WRT is driven by iptables) saying anything from irc server to your pc, accept, and the reverse. Of course you need to work out things like port forwarding and NATs as they pertain to your network.

Ninja Rope posted:

Maybe dd-wrt is removing state table entries after a period of time that is less than the interval between irc server ping attempts.

I'm about 90% sure this isn't the case, as irssi's max_lag_before_disconnect (which seems to be driving the ping timeout disconnects) is set to 5 minutes, while the current TCP timeout in dd-wrt is set to 3600s.

I do see that the latest build of dd-wrt I flashed to this router now has a drop-down field for 'tcp congestion control' with a bunch of oddly named schemes - I'll do some digging and see if any apply.

Otherwise, I'm starting to blame this on NAT table / translation / redirection issues from the 2wire modem that stands infront of the WNDR3700 router. It' a 3800 series 2wire, the router is in DMZ+ mode, and while dhcp is enabled on the 2wire (so I can easily pop back in to check settings as I try to troubleshoot this) it's on a 172.x subnet - so no risk of oddball collision scenarios I don't think.

In regards to 2wire, it does sound like a buddy who works for the telco that provides it is having similar issues, and it may be some level of NAT corruption taking place on that series modem/gateway (as it happens well before the NAT table should be anywhere close to full). If the tcp congestion control schemes don't change anything in DD-WRT, I think it's time to order that static IP I've been putting off and force my ISP to give me a new gateway/modem.

Lukano
Apr 28, 2003



elite burrito posted:

If state aging is indeed the problem, It doesn't have to do with lag, it has to do with an idle connection. If there is nothing going across the TCP socket, irssi won't see any lag. And if nothing goes over the TCP socket for an hour, your TCP socket will be aged from the state table, and only a SYN packet from you to irc server will be allowed through.

Simple way to find out for sure: turn full logging on on irssi, and the next time it happens. check to see if anything has come across in the last hour.

Wow good idea, not sure why I didn't think of upping the log level for irssi to diagnose.

I've bumped TCP timeout to 7200 and I'll try irssi logging as well.

edit - ok silly question, what do I need to turn on full logging for irssi to watch for those errors / timeouts?

Lukano fucked around with this message at Nov 24, 2010 around 14:27

Lukano
Apr 28, 2003



elite burrito posted:

/set autolog_level ALL
/set autolog on

I think.

Thanks. Those commands worked at the very least, I'll have to wait and dig through logs should I see the timeouts persist (and/or hope that changing TCP Congestion Control to CUBIC and increasing max TCP connections / timeout a bit fixed the issue - though they haven't in the past).

Active connections vary, I'd say a few thousand peak at any given time, with my current count being a pretty meager 200-300 (it is a home network after all) on a 25/3 VDSL line.

Lukano
Apr 28, 2003



As a followup to my question / frustrations detailed on the last page of the thread ;

I dropped DD-WRT from my router (WNDR3700) and replaced it with OpenWRT. Now going on 16hrs since doing so, and haven't dropped from IRC once - no missing IM messages via bitlbee - basically none of the issues I was having previously.

So something is still funky with DD-WRT (and/or flashing back to the stock firmware then back to a WRT variant fixed it) for that router.

Lukano
Apr 28, 2003



A shot in the dark question for here, though perhaps the NAS/storage thread is a better place for it;

I've got an old beast of a server I picked up surplus from work. IBM 8870 1RX xSeries 450, with 8 2.0ghz 32bit Xeon MP's and 16gigs of DDR1. It's a fine workhorse for farming out VM's, but ESXi 3.5 didn't play well with raw-disk stuff for my existing SATA mdadm array, so I went to Debian instead with VMWare workstation ontop.

The existing mdadm/lvm array runs off a pair of SIL 3114 cards. I've noticed that they're notoriously difficult to get working right, and while I'm tempted to just replace them with something that will work, I can't afford to currently.

As I put load on the array, I see things like the following in dmesg - and they start dropping from UDMA100, to UDMA66 to UDMA33. For the record they're mostly WD Green 1.5tb's.

code:
[ 1760.733055] ata5.00: exception Emask 0x0 SAct 0x0 SErr 0x280000 action 0x0
[ 1760.733069] ata5.00: BMDMA2 stat 0x80d0009
[ 1760.733080] ata5: SError: { 10B8B BadCRC }
[ 1760.733094] ata5.00: failed command: READ DMA EXT
[ 1760.733113] ata5.00: cmd 25/00:28:3f:08:07/00:02:07:00:00/e0 tag 0 dma 282624 in
[ 1760.733116]          res 51/04:d7:3f:08:07/00:01:07:00:00/f0 Emask 0x1 (device error)
[ 1760.733124] ata5.00: status: { DRDY ERR }
[ 1760.733128] ata5.00: error: { ABRT }
[ 1760.756403] ata5.00: configured for UDMA/100
[ 1760.756456] ata5: EH complete
[ 1790.952123] ata4: lost interrupt (Status 0x51)
[ 1790.952168] ata4.00: exception Emask 0x0 SAct 0x0 SErr 0x280000 action 0x6 frozen
[ 1790.952177] ata4: SError: { 10B8B BadCRC }
[ 1790.952185] ata4.00: failed command: READ DMA EXT
[ 1790.952198] ata4.00: cmd 25/00:00:3f:08:07/00:04:07:00:00/e0 tag 0 dma 524288 in
[ 1790.952201]          res 40/00:00:00:4f:c2/00:00:00:00:00/10 Emask 0x4 (timeout)
[ 1790.952207] ata4.00: status: { DRDY }
[ 1790.952235] ata4: hard resetting link
[ 1791.272098] ata4: SATA link up 1.5 Gbps (SStatus 113 SControl 310)
[ 1791.288821] ata4.00: configured for UDMA/100
[ 1791.288840] ata4.00: device reported invalid CHS sector 0
[ 1791.288863] ata4: EH complete
[ 5566.193583] ata5.00: BMDMA2 stat 0x80d0009
[ 5566.193593] ata5: SError: { 10B8B BadCRC }
[ 5566.193604] ata5.00: failed command: READ DMA EXT
[ 5566.193621] ata5.00: cmd 25/00:20:4f:d6:fd/00:01:06:00:00/e0 tag 0 dma 147456 in
[ 5566.193624]          res 51/04:af:4f:d6:fd/00:00:06:00:00/f0 Emask 0x1 (device error)
[ 5566.193632] ata5.00: status: { DRDY ERR }
[ 5566.193637] ata5.00: error: { ABRT }
[ 5566.216943] ata5.00: configured for UDMA/100
[ 5566.216977] ata5: EH complete
[ 5894.026370] ata3.00: exception Emask 0x0 SAct 0x0 SErr 0x280000 action 0x0
[ 5894.026389] ata3.00: BMDMA2 stat 0x686d0009
[ 5894.026398] ata3: SError: { 10B8B BadCRC }
[ 5894.026409] ata3.00: failed command: READ DMA EXT
[ 5894.026426] ata3.00: cmd 25/00:20:77:d8:fd/00:01:06:00:00/e0 tag 0 dma 147456 in
[ 5894.026429]          res 51/04:5f:77:d8:fd/00:00:06:00:00/f0 Emask 0x1 (device error)
[ 5894.026437] ata3.00: status: { DRDY ERR }
[ 5894.026442] ata3.00: error: { ABRT }
[ 5894.042141] ata3.00: configured for UDMA/100
[ 5894.042200] ata3: EH complete
All of the drives have passed smartctl -t long tests and show no other smart indicated issues. I've replaced all of the sata cables as well. The 3114 cards are both in the 66mhz bus slots for the server.

So I'm assuming this is directly related to the cards. They're flashed with the raid bios's, and I can't seem to find a downloadable reflash (the ones on silicon's website are not intended to be flashed directly to the cards) with strictly IDE bios to test. edit - okay I was wrong, looks like those packs just include bios for cards and motherboards with the 3114's integrated. I'll give that a try tonight if I don't get any other suggestions.

The server itself is old enough that there's no obvious way to enable or disable AHCI for testing either.

Lukano fucked around with this message at Mar 14, 2011 around 21:29

Lukano
Apr 28, 2003



To throw you a little more of a bone that Mr. LMGTFY above me ;

Two options, either the OpenVPN on OpenWRT route that you're currently looking down, check the OpenWRT wiki for details/instructions. It'll require some telnetting/ssh'ing into your router to monkey with things most likely, and not entirely achievable from the Luci webgui.

I personally just open a single port for SSH, and tunnel all my various port-forwards through the SSH session (rpd, vnc, scp, vmware vclient, etc). It requires a bit more work to set up on the client side than opening a premade VPN.exe of some sort, but it's also less to set up to begin with.

As to the efficacy of VPN vs SSH tunnel for encryption level and security, I'm honestly not sure.

Lukano
Apr 28, 2003



Bob Morales posted:

That's probably your problem, WD Green's aren't for RAID.

Derp, thanks.

Ignoring the obvious above, there's still many thousands of others who've used WD Green's in a variety of soft / software / fake raid setups without issues.

And as noted in my previous post edit, it's likely the controllers themselves needing to be reflashed - but I didn't get to it last night.

Lukano
Apr 28, 2003



Here's a situation that's been bugging me for a while.

I've an old IBM xSeries 450 (8870-1RX) server that I picked up surplus from work. It's got 8x 2.0ghz Xeon MP CPU's (so they're hyperthreading capable, but not 64bit or dual-core).

Debian sees it as 16 cores, 8 primary and the 8 hyperthreading cores. The issue comes with VMWare Workstation v7, where VM's are given 1-4 processors apiece - but the host is by all appearances doubling up load on processors between VM's, or apparently treating the HT cores it sees as fully capable processors and assigning a VM to one of them. This is all fairly subjective I admit, but I see IO and performance go out the window when the above happens, typically when more than 1-2 single core VM's are running.

I know that I can set processor affinity in the vm config file itself, and have started to do so - then realized I don't actually know which of the 16 CPU's I see are HT and which are physical cores.

Anyone have any suggestions on how to figure out what is what, so I can set some proper processor affinity?

Also, thoughts on if a VM that thinks it has 2 cpu's (or 1 cpu/dual core) would be better off being given a physical/ht core pair, or two physicals and just ignore the HT cores altogether when assigning affinity?

Lukano
Apr 28, 2003



I've tried, but the system hangs before grub loads with HT disabled (be it on a debian live/install cd or an existing install). I'm assuming there's to grub to fix that, but I admit I'm not sure what.

The server did come to me with HT cores disabled, and I left them off while I dabbled with ESXi 3.5, but turned them back on as I switched from ESXi 3.5 to debian as the host.

Lukano
Apr 28, 2003



No, APIC / SMP is still enabled currently as I haven't added noapic to the boot params (yet).

If it disables SMP it kind of defeats the purpose of 8 CPU's though doesn't it?

Lukano
Apr 28, 2003



Martytoof posted:

Just for shits and giggles, is there a tool that will scrub your system log for obviously malicious ssh connections, whois the IP in search of an abuse email address, and mail those logs to said address with some sort of form letter?

To be clear, I'm aware of all the tools to actively shut down ssh scanners, I'm just curious if a thing like I described above exists

It's been like 6-8 years since I last used it, but MyNetWatchman does all that and more, especially with some IDS in place.

http://www.mynetwatchman.com/

I used to run it on Smoothwall ages ago, keep meaning to see if I can get it running on OpenWRT but haven't had the time.

Lukano
Apr 28, 2003



Now that I've actually sat down and taken a look at the MNW website, it doesn't look like they've actively aggregated / identified / reported incidents since like Nov 2009. They still track firewall events, but they don't do anything with the data anymore

On the upside, the source to the mnwclient is there to poke at should someone want to pick up the torch I guess :P

Lukano
Apr 28, 2003



Martytoof posted:

Okay so I have an existing Linux-RAID raid10 array. Four 2TB drives, for a total of 4TB of storage which is no longer sufficient for my users.

I think I will be adding another four 2TB drives to double the array to an 8TB raid10 array.

Has anyone had any firsthand experience with growing an array like this before? I can prep the drives just fine, but I'm not sure how best to handle the growing of the array AND expanding the ext4 partition.

I'll go out on a limb and assume this is a md or mdadm or similar setup, using lvm(2)? If so, as long as ext4 fully supports a grow now (last time i usef ext4 on an mdadm array, i could not, but this was ages ago before ext4 was stable/mainstream) then you're fine, or at worst have 15mins of googling for examples/experiences/feedback forum posts of others who've done the same.

Edit -oops forgot to finish my thought. So yeah, the above advice from spankmeister is spot on for order/process.

Lukano fucked around with this message at May 13, 2012 around 02:32

Lukano
Apr 28, 2003



So I've run into an odd situation with irssi that I can't make sense of.

I compiled the latest irssi from source on Debian Squeeze, set up shells for a couple of users, and confirmed they could connect to our server with SSL, and all was good.

Then I got around to copying my irssi config over, fired it up - and get a GLib SSL handshake error. I don't get it, the configs for that server are identical for me and the other users - they can connect fine and I can not.

Edit - i should also note that I can connect to other SSL capable servers with SSL no problem. It's just this one that throws a handshake error, and only for me.

I've also now tried a blank config, and adding the server manually (as opposed to my usual method of editing the config) with '/server add -ssl -ssl_verify -ssl_capath /etc/ssl/certs -auto -network NetworkName -port 6797 irc.address.net'. Still the same glib ssl handshake failure.

edit - as followup, after like 5 hours of mucking with certs and configs and googling everything under the sun.... it turns out the server had a 3 connections per IP cap in place, and as the other 3 clients i set up were on the same machine... well the rest is obvious and I'm dumb.

Lukano fucked around with this message at May 25, 2012 around 18:10

Lukano
Apr 28, 2003



I'e got a screen related question ;

Once I've got my screen set up the way I want, with various horizontal and vertical splits, etc... is it possible to somehow save that layout, or at least be able to reattach that screen later/elsewhere and maintain those split windows. (As opposed to just a screen -dr and spending another minute or two splitting everything again and cycling through the sessions to put everything back?)

Lukano
Apr 28, 2003



Yup, just use Synaptic or apt-get to install the appropriate packages for gnome-desktop, kde-desktop, and/or whatever mate-desktop might be named. Those aren't the actual names I'm sure, but a little searching in Synaptic o apt-cache search will clarify things.

Once they're installed, your default boot manager (kdm, gdm, ldm, whatever) will let you picked the environment you want to boot in to on the same screen where you'd enter your username and password.

Lukano
Apr 28, 2003



Elias_Maluco posted:

That may be harder than that. I searched for "kde" in synaptic and it gives me a like hundreds of results, I have no idea what should I install.

Try kde-desktop or 'kde desktop'. Yes you'll have to refine the search a bit from kde* .

Its been a long time since I've run anything but debian. Ubuntu derivatives might have it under '<foo>-desktop-environment.

Lukano
Apr 28, 2003



Morkai posted:

Hello Linux Goons! I have some questions for you!

I essentially want to treat every network other than my home WiFi as hostile. My purpose isn't terribly nefarious: I just don't want ads injected, DNS hijacked, habits profiled, and potentially credentials stolen just because I use some coffee shop or hotel's WiFi.

I have the following:

I'm very interested in the results of your project. I've been considering a very similar setup myself, for iphones as well. I'm not at all adverse to jailbreaking mine or my wifes iphones specifically for this purpose (openvpn), but I've still not gotten to it. I could save myself time and have it working already using something other than openvpn, as you mentioned, but I figure I may as well future proof my solution so I'm not revisiting it in a year or two if L2TP/IPSEC suddenly becomes trivial to crack (if not already).

I hadn't thought of going so far as to use Squid, nevermind Tor. Specifically Tor, would that not cause some significant degredation on speed (3g or pubic wifi)? I find the idea of anonymizing smartphone use interesting on an academic level.

Lukano
Apr 28, 2003



Ugh, I think I may be setting myself up for sleeping on the couch for the rest of my life, if I can't fix this before my wife realizes I've lost tons of family photos and stuff. Here's the situation, in as condensed a version as I can manage.

- Had a RAID1 MDADM array consisting of 2x 500gig partitions.
- Wanted to grow two more 500gig partitions into the array, and convert to RAID5. Threw a mdadm --grow /dev/md0 --level=5 --devices=4 blah blah at it. No biggy there.
- My server was restarted due to other issues, and the resync on the RAID1->RAID5 was still pending, so I started work on assembling a second 4x 500gig array, this one RAID6.
- Due to the server restart, drive letters had changed, and due to me being in a rush, I wasn't paying enough attention. I threw it a mdadm --create, don't recall seeing any warnings about those drives already being in an array (likely due to being pending resync to RAID5 already), and didn't notice until this morning that I've effectively trashed the first array, containing nearly a hundred gigs of family photos (nevermind other documents and stuff on there).

As for the filesystem on the array, it was LVM with a cryptsetup luks container ontop of it, and an EXT4 filesystem within the encrypted storage.

Am I all sorts of poo poo out of luck here, or do I have a snowballs chance at recovery here?

Lukano
Apr 28, 2003



Yeah I have cloud backups of the photos, but apparently Jungledisk for linux stopped updating those backups sometime last June. I had been meaning to drop jungledisk/S3 and move to hosting those backups in an offshore VPS, but hadn't gotten to it yet.

Thanks for the links though, I'll poke at it and see what results I get. I'll check back for other more specific suggestions if anyone has them.

edit - and while I am perfectly capable of googling, sheer panic and adrenaline had me overlooking the obvious things to try in those sites you linked (which I had already visited) so thanks again! I'm going to start by forcing them back to the original 2 disk RAID1 instance and see how that goes.

edit2 - and yes, that seems to have done it already. a vgchange -ay has the volume group for that array showing up again, luks container opened fine, and contents appear generally instact. I'll leave it resyncing and then fsck it later, but thank you very much

Lukano fucked around with this message at Mar 27, 2013 around 22:33

Adbot
ADBOT LOVES YOU

Lukano
Apr 28, 2003



Yeah, I'm moving the backups to the offshore VPS as soon as the resync and fsck are complete. Nothing like a moment of sheer unadulterated panic to remind oneself to have proper backups. I'm just exceptionally happy this story ended well for me.

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply