X-Git-Url: http://pere.pagekite.me/gitweb/homepage.git/blobdiff_plain/c75c99e3db61c669fcd48cf13fbe1b7e812e5b8a..544bc31ab71c23c6b2a1ffa6677fd2329899344d:/blog/index.html diff --git a/blog/index.html b/blog/index.html index 1cf155ebb5..d7e06d2e84 100644 --- a/blog/index.html +++ b/blog/index.html @@ -20,181 +20,59 @@
-
Good causes: Debian Outreach Program for Women, EFF documenting the spying and Open access in Norway
-
15th October 2013
-

The last few days I came across a few good causes that should get -wider attention. I recommend signing and donating to each one of -these. :)

- -

Via Debian -Project News for 2013-10-14 I came across the Outreach Program for -Women program which is a Google Summer of Code like initiative to get -more women involved in free software. One debian sponsor has offered -to match any donation done to Debian -earmarked for this initiative. I donated a few minutes ago, and -hope you will to. :)

- -

And the Electronic Frontier Foundation just announced plans to -create video -documentaries about the excessive spying on every Internet user that -take place these days, and their need to fund the work. I've already -donated. Are you next?

- -

For my Norwegian audience, the organisation Studentenes og -Akademikernes Internasjonale Hjelpefond is collecting signatures for a -statement under the heading -Bloggers United for Open -Access for those of us asking for more focus on open access in the -Norwegian government. So far 499 signatures. I hope you will sign it -too.

-
-
- - - Tags: debian, english, opphavsrett, surveillance. - - -
-
-
- -
-
Oslo community mesh network - with NUUG and Hackeriet at Hausmania
-
11th October 2013
-

Wireless mesh networks are self organising and self healing -networks that can be used to connect computers across small and large -areas, depending on the radio technology used. Normal wifi equipment -can be used to create home made radio networks, and there are several -successful examples like -Freifunk and -Athens Wireless Metropolitan Network -(see -wikipedia -for a large list) around the globe. To give you an idea how it -work, check out the nice overview of the Kiel Freifunk community which -can be seen from their -dynamically -updated node graph and map, where one can see how the mesh nodes -automatically handle routing and recover from nodes disappearing. -There is also a small community mesh network group in Oslo, Norway, -and that is the main topic of this blog post.

- -

I've wanted to check out mesh networks for a while now, and hoped -to do it as part of my involvement with the NUUG member organisation community, and -my recent involvement in -the Freedombox project -finally lead me to give mesh networks some priority, as I suspect a -Freedombox should use mesh networks to connect neighbours and family -when possible, given that most communication between people are -between those nearby (as shown for example by research on Facebook -communication patterns). It also allow people to communicate without -any central hub to tap into for those that want to listen in on the -private communication of citizens, which have become more and more -important over the years.

- -

So far I have only been able to find one group of people in Oslo -working on community mesh networks, over at the hack space -Hackeriet at Husmania. They seem to -have started with some Freifunk based effort using OLSR, called -the Oslo -Freifunk project, but that effort is now dead and the people -behind it have moved on to a batman-adv based system called -meshfx. Unfortunately the wiki -site for the Oslo Freifunk project is no longer possible to update to -reflect this fact, so the old project page can't be updated to point to -the new project. A while back, the people at Hackeriet invited people -from the Freifunk community to Oslo to talk about mesh networks. I -came across this video where Hans Jørgen Lysglimt interview the -speakers about this talk (from -youtube):

- -

- -

I mentioned OLSR and batman-adv, which are mesh routing protocols. -There are heaps of different protocols, and I am still struggling to -figure out which one would be "best" for some definitions of best, but -given that the community mesh group in Oslo is so small, I believe it -is best to hook up with the existing one instead of trying to create a -completely different setup, and thus I have decided to focus on -batman-adv for now. It sure help me to know that the very cool -Serval project in Australia -is using batman-adv as their meshing technology when it create a self -organizing and self healing telephony system for disaster areas and -less industrialized communities. Check out this cool video presenting -that project (from -youtube):

- -

- -

According to the wikipedia page on -Wireless -mesh network there are around 70 competing schemes for routing -packets across mesh networks, and OLSR, B.A.T.M.A.N. and -B.A.T.M.A.N. advanced are protocols used by several free software -based community mesh networks.

- -

The batman-adv protocol is a bit special, as it provide layer 2 -(as in ethernet ) routing, allowing ipv4 and ipv6 to work on the same -network. One way to think about it is that it provide a mesh based -vlan you can bridge to or handle like any other vlan connected to your -computer. The required drivers are already in the Linux kernel at -least since Debian Wheezy, and it is fairly easy to set up. A -good -introduction is available from the Open Mesh project. These are -the key settings needed to join the Oslo meshfx network:

+ +
29th May 2014
+

Dear lazyweb. I'm planning to set up a small Raspberry Pi computer +in my car, connected to +a +small screen next to the rear mirror. I plan to hook it up with a +GPL and a USB wifi card too. The idea is to get my own +"Carputer". But I +wonder if someone already created a good free software solution for +such car computer.

+ +

This is my current wish list for such system:

-

- - - - - -
SettingValue
Protocol / kernel modulebatman-adv
ESSIDmeshfx@hackeriet
Channel / Frequency11 / 2462
Cell ID02:BA:00:00:00:01

+
    + +
  • Work on Raspberry Pi.
  • + +
  • Show current speed limit based on location, and warn if going too + fast (for example using color codes yellow and red on the screen, + or make a sound). This could be done either using either data from + Openstreetmap or OCR + info gathered from a dashboard camera.
  • + +
  • Track automatic toll road passes and their cost, show total spent + and make it possible to calculate toll costs for planned + route.
  • + +
  • Collect GPX tracks for use with OpenStreetMap.
  • + +
  • Automatically detect and use any wireless connection to connect + to home server. Try IP over DNS + (iodine) or ICMP + (Hans) if direct + connection do not work.
  • -

    The reason for setting ad-hoc wifi Cell ID is to work around bugs -in firmware used in wifi card and wifi drivers. (See a nice post from -VillageTelco about -"Information -about cell-id splitting, stuck beacons, and failed IBSS merges! -for details.) When these settings are activated and you have some -other mesh node nearby, your computer will be connected to the mesh -network and can communicate with any mesh node that is connected to -any of the nodes in your network of nodes. :)

    - -

    My initial plan was to reuse my old Linksys WRT54GL as a mesh node, -but that seem to be very hard, as I have not been able to locate a -firmware supporting batman-adv. If anyone know how to use that old -wifi access point with batman-adv these days, please let me know.

    - -

    If you find this project interesting and want to join, please join -us on IRC, either channel -#oslohackerspace -or #nuug on -irc.freenode.net.

    - -

    While investigating mesh networks in Oslo, I came across an old -research paper from the university of Stavanger and Telenor Research -and Innovation called -The -reliability of wireless backhaul mesh networks and elsewhere -learned that Telenor have been experimenting with mesh networks at -Grünerløkka in Oslo. So mesh networks are also interesting for -commercial companies, even though Telenor discovered that it was hard -to figure out a good business plan for mesh networking and as far as I -know have closed down the experiment. Perhaps Telenor or others would -be interested in a cooperation?

    - -

    Update 2013-10-12: I was just -told -by the Serval project developers that they no longer use -batman-adv (but are compatible with it), but their own crypto based -mesh system.

    +
  • Set up mesh network to talk to other cars with the same system, + or some stanard car mesh protocol.
  • + +
  • Warn when approaching speed cameras and speed camera ranges + (speed calculated between two cameras).
  • + +
  • Suport dashboard/front facing camera to discover speed limits and + run OCR to track registration number of passing cars.
  • + +
+ +

If you know of any free software car computer system supporting +some or all of these features, please let me know.

- Tags: english, freedombox, nuug. + Tags: english.
@@ -202,37 +80,54 @@ mesh system.

- -
8th October 2013
-

The other day I was pleased and surprised to discover that Marcelo -Salvador had published a -video on -Youtube showing how to install the standalone Debian Edu / -Skolelinux profile. This is the profile intended for use at home or -on laptops that should not be integrated into the provided network -services (no central home directory, no Kerberos / LDAP directory etc, -in other word a single user machine). The result is 11 minutes long, -and show some user applications (seem to be rather randomly picked). -Missed a few of my favorites like celestia, planets and chromium -showing the Zygote Body 3D model -of the human body, but I guess he did not know about those or find -other programs more interesting. :) And the video do not show the -advantages I believe is one of the most valuable featuers in Debian -Edu, its central school server making it possible to run hundreds of -computers without hard drives by installing one central -LTSP server.

- -

Anyway, check out the video, embedded below and linked to above:

- - - -

Are there other nice videos demonstrating Skolelinux? Please let -me know. :)

+ +
29th April 2014
+

I've been following the Gnash +project for quite a while now. It is a free software +implementation of Adobe Flash, both a standalone player and a browser +plugin. Gnash implement support for the AVM1 format (and not the +newer AVM2 format - see +Lightspark for that one), +allowing several flash based sites to work. Thanks to the friendly +developers at Youtube, it also work with Youtube videos, because the +Javascript code at Youtube detect Gnash and serve a AVM1 player to +those users. :) Would be great if someone found time to implement AVM2 +support, but it has not happened yet. If you install both Lightspark +and Gnash, Lightspark will invoke Gnash if it find a AVM1 flash file, +so you can get both handled as free software. Unfortunately, +Lightspark so far only implement a small subset of AVM2, and many +sites do not work yet.

+ +

A few months ago, I started looking at +Coverity, the static source +checker used to find heaps and heaps of bugs in free software (thanks +to the donation of a scanning service to free software projects by the +company developing this non-free code checker), and Gnash was one of +the projects I decided to check out. Coverity is able to find lock +errors, memory errors, dead code and more. A few days ago they even +extended it to also be able to find the heartbleed bug in OpenSSL. +There are heaps of checks being done on the instrumented code, and the +amount of bogus warnings is quite low compared to the other static +code checkers I have tested over the years.

+ +

Since a few weeks ago, I've been working with the other Gnash +developers squashing bugs discovered by Coverity. I was quite happy +today when I checked the current status and saw that of the 777 issues +detected so far, 374 are marked as fixed. This make me confident that +the next Gnash release will be more stable and more dependable than +the previous one. Most of the reported issues were and are in the +test suite, but it also found a few in the rest of the code.

+ +

If you want to help out, you find us on +the +gnash-dev mailing list and on +the #gnash channel on +irc.freenode.net IRC server.

@@ -240,23 +135,94 @@ me know. :)

- -
29th September 2013
-

A few hours ago, the announcement for the first stable release of -Debian Edu Wheezy went out from the Debian publicity team. The -complete announcement text can be found at -the Debian News -section, translated to several languages. Please check it out.

- -

There is one minor known problem that we will fix very soon. One -can not install a amd64 Thin Client Server using PXE, as the /var/ -partition is too small. A workaround is to extend the partition (use -lvresize + resize2fs in tty 2 while installing).

+ +
23rd April 2014
+

It would be nice if it was easier in Debian to get all the hardware +related packages relevant for the computer installed automatically. +So I implemented one, using +my Isenkram +package. To use it, install the tasksel and isenkram packages and +run tasksel as user root. You should be presented with a new option, +"Hardware specific packages (autodetected by isenkram)". When you +select it, tasksel will install the packages isenkram claim is fit for +the current hardware, hot pluggable or not.

+ +

The implementation is in two files, one is the tasksel menu entry +description, and the other is the script used to extract the list of +packages to install. The first part is in +/usr/share/tasksel/descs/isenkram.desc and look like +this:

+ +

+Task: isenkram
+Section: hardware
+Description: Hardware specific packages (autodetected by isenkram)
+ Based on the detected hardware various hardware specific packages are
+ proposed.
+Test-new-install: mark show
+Relevance: 8
+Packages: for-current-hardware
+

+ +

The second part is in +/usr/lib/tasksel/packages/for-current-hardware and look like +this:

+ +

+#!/bin/sh
+#
+(
+    isenkram-lookup
+    isenkram-autoinstall-firmware -l
+) | sort -u
+

+ +

All in all, a very short and simple implementation making it +trivial to install the hardware dependent package we all may want to +have installed on our machines. I've not been able to find a way to +get tasksel to tell you exactly which packages it plan to install +before doing the installation. So if you are curious or careful, +check the output from the isenkram-* command line tools first.

+ +

The information about which packages are handling which hardware is +fetched either from the isenkram package itself in +/usr/share/isenkram/, from git.debian.org or from the APT package +database (using the Modaliases header). The APT package database +parsing have caused a nasty resource leak in the isenkram daemon (bugs +#719837 and +#730704). The cause is in +the python-apt code (bug +#745487), but using a +workaround I was able to get rid of the file descriptor leak and +reduce the memory leak from ~30 MiB per hardware detection down to +around 2 MiB per hardware detection. It should make the desktop +daemon a lot more useful. The fix is in version 0.7 uploaded to +unstable today.

+ +

I believe the current way of mapping hardware to packages in +Isenkram is is a good draft, but in the future I expect isenkram to +use the AppStream data source for this. A proposal for getting proper +AppStream support into Debian is floating around as +DEP-11, and +GSoC +project will take place this summer to improve the situation. I +look forward to seeing the result, and welcome patches for isenkram to +start using the information when it is ready.

+ +

If you want your package to map to some specific hardware, either +add a "Xb-Modaliases" header to your control file like I did in +the pymissile +package or submit a bug report with the details to the isenkram +package. See also +all my +blog posts tagged isenkram for details on the notation. I expect +the information will be migrated to AppStream eventually, but for the +moment I got no better place to store it.

- Tags: debian edu, english. + Tags: debian, english, isenkram.
@@ -264,65 +230,81 @@ lvresize + resize2fs in tty 2 while installing).

- -
27th September 2013
-

The Freedombox -project have been going on for a while, and have presented the -vision, ideas and solution several places. Here is a little -collection of videos of talks and presentation of the project.

- - - -

A larger list is available from -the -Freedombox Wiki.

- -

On other news, I am happy to report that Freedombox based on Debian -Jessie is coming along quite well, and soon both Owncloud and using -Tor should be available for testers of the Freedombox solution. :) In -a few weeks I hope everything needed to test it is included in Debian. -The withsqlite package is already in Debian, and the plinth package is -pending in NEW. The third and vital part of that puzzle is the -metapackage/setup framework, which is still pending an upload. Join -us on IRC -(#freedombox on irc.debian.org) and +

+
15th April 2014
+

The Freedombox +project is working on providing the software and hardware to make +it easy for non-technical people to host their data and communication +at home, and being able to communicate with their friends and family +encrypted and away from prying eyes. It is still going strong, and +today a major mile stone was reached.

+ +

Today, the last of the packages currently used by the project to +created the system images were accepted into Debian Unstable. It was +the freedombox-setup package, which is used to configure the images +during build and on the first boot. Now all one need to get going is +the build code from the freedom-maker git repository and packages from +Debian. And once the freedombox-setup package enter testing, we can +build everything directly from Debian. :)

+ +

Some key packages used by Freedombox are +freedombox-setup, +plinth, +pagekite, +tor, +privoxy, +owncloud and +dnsmasq. There +are plans to integrate more packages into the setup. User +documentation is maintained on the Debian wiki. Please +check out +the manual and help us improve it.

+ +

To test for yourself and create boot images with the FreedomBox +setup, run this on a Debian machine using a user with sudo rights to +become root:

+ +

+sudo apt-get install git vmdebootstrap mercurial python-docutils \
+  mktorrent extlinux virtualbox qemu-user-static binfmt-support \
+  u-boot-tools
+git clone http://anonscm.debian.org/git/freedombox/freedom-maker.git \
+  freedom-maker
+make -C freedom-maker dreamplug-image raspberry-image virtualbox-image
+

+ +

Root access is needed to run debootstrap and mount loopback +devices. See the README in the freedom-maker git repo for more +details on the build. If you do not want all three images, trim the +make line. Note that the virtualbox-image target is not really +virtualbox specific. It create a x86 image usable in kvm, qemu, +vmware and any other x86 virtual machine environment. You might need +the version of vmdebootstrap in Jessie to get the build working, as it +include fixes for a race condition with kpartx.

+ +

If you instead want to install using a Debian CD and the preseed +method, boot a Debian Wheezy ISO and use this boot argument to load +the preseed values:

+ +

+url=http://www.reinholdtsen.name/freedombox/preseed-jessie.dat
+

+ +

I have not tested it myself the last few weeks, so I do not know if +it still work.

+ +

If you wonder how to help, one task you could look at is using +systemd as the boot system. It will become the default for Linux in +Jessie, so we need to make sure it is usable on the Freedombox. I did +a simple test a few weeks ago, and noticed dnsmasq failed to start +during boot when using systemd. I suspect there are other problems +too. :) To detect problems, there is a test suite included, which can +be run from the plinth web interface.

+ +

Give it a go and let us know how it goes on the mailing list, and help +us get the new release published. :) Please join us on +IRC (#freedombox on +irc.debian.org) and the mailing list if you want to help make this vision come true.

@@ -337,119 +319,88 @@ mailing list if you want to help make this vision come true.

- -
16th September 2013
-

The third wheezy based beta release of Debian Edu was wrapped up -today. This is the release announcement from Holger Levsen:

- -
-

Hi,

+ +
11th April 2014
+

For 12 år siden, skrev jeg et lite notat om +bruk av språkkoder +i Norge. Jeg ble nettopp minnet på dette da jeg fikk spørsmål om +notatet fortsatt var aktuelt, og tenkte det var greit å repetere hva +som fortsatt gjelder. Det jeg skrev da er fortsatt like aktuelt.

-

it is my pleasure to announce the third beta release (beta 2 for -short) of Debian Edu / -Skolelinux based on Debian Wheezy!

+

Når en velger språk i programmer på unix, så velger en blant mange +språkkoder. For språk i Norge anbefales følgende språkkoder (anbefalt +locale i parantes):

-

Please test these images extensivly, if no new problems are found -we plan to do this final Debian Edu Wheezy release this coming -weekend. We are not aware of any major problems or blockers in beta2, -if you find something, please notify us immediately!

+

+
nb (nb_NO)
Bokmål i Norge
+
nn (nn_NO)
Nynorsk i Norge
+
se (se_NO)
Nordsamisk i Norge
+

-

(More about the remaining steps for the Edu Wheezy release in -another mail to the edu list tonight or tomorrow...)

+

Alle programmer som bruker andre koder bør endres.

-

Noteworthy changes and software updates for Debian Edu 7.1+edu0~b2 -compared to beta1:

- -
    +

    Språkkoden bør brukes når .po-filer navngis og installeres. Dette +er ikke det samme som locale-koden. For Norsk Bokmål, så bør filene +være navngitt nb.po, mens locale (LANG) bør være nb_NO.

    -
  • The KDE proxy setup has been adjusted to use the provided wpad.dat. This -also gets Chromium to use this proxy.
  • -
  • Install kdepim-groupware with KDE desktops to make sure korganizer -understand ical/dav sources.
  • -
  • Increased default maximum size of /var/spool/squid and /skole/backup on the -main server.
  • -
  • A source DVD image containing all source packages is now available as well.
  • -
  • Updates for chromium (29.0.1547.57-1~deb7u1), imagemagick -(6.7.7.10-5+deb7u2), php5 (5.4.4-14+deb7u4), libmodplug -(0.8.8.4-3+deb7u1+git20130828), tiff (4.0.2-6+deb7u2), linux-image -(3.2.0-4-486_3.2.46-1+deb7u1).
  • +

    Hvis vi ikke får standardisert de kodene i alle programmene med +norske oversettelser, så er det umulig å gi LANG-variablen ett innhold +som fungerer for alle programmer.

    -
+

Språkkodene er de offisielle kodene fra ISO 639, og bruken av dem i +forbindelse med POSIX localer er standardisert i RFC 3066 og ISO +15897. Denne anbefalingen er i tråd med de angitte standardene.

-

Where to get it:

+

Følgende koder er eller har vært i bruk som locale-verdier for +"norske" språk. Disse bør unngås, og erstattes når de oppdages:

-

To download the multiarch netinstall CD release you can use

+

+ + + + + + + + +
norwegian-> nb_NO
bokmål -> nb_NO
bokmal -> nb_NO
nynorsk -> nn_NO
no -> nb_NO
no_NO -> nb_NO
no_NY -> nn_NO
sme_NO -> se_NO

- +

Merk at når det gjelder de samiske språkene, at se_NO i praksis +henviser til nordsamisk i Norge, mens f.eks. smj_NO henviser til +lulesamisk. Dette notatet er dog ikke ment å gi råd rundt samiske +språkkoder, der gjør +Divvun-prosjektet en bedre +jobb.

-

The SHA1SUM of this image is: 3a1c89f4666df80eebcd46c5bf5fedb866f9472f

+

Referanser:

-

To download the multiarch USB stick ISO release you can use

- -

The SHA1SUM of this image is: 702d1718548f401c74bfa6df9f032cc3ee16597e

- -

The Source DVD image has the filename -debian-edu-7.1+edu0~b2-source-DVD.iso and the SHA1SUM -089eed8b3f962db47aae1f6a9685e9bb2fa30ca5 and is available the same way -as the other isos.

- -

How to report bugs

- -

For information how to report bugs please see -
http://wiki.debian.org/DebianEdu/HowTo/ReportBugs

- - -

About Debian Edu and Skolelinux

- -

Debian Edu, also known as Skolelinux, is a Linux distribution based -on Debian providing an out-of-the box environment of a completely -configured school network. Immediately after installation a school -server running all services needed for a school network is set up just -waiting for users and machines being added via GOsa², a comfortable -Web-UI. A netbooting environment is prepared using PXE, so after -initial installation of the main server from CD or USB stick all other -machines can be installed via the network. The provided school server -provides LDAP database and Kerberos authentication service, -centralized home directories, DHCP server, web proxy and many other -services. The desktop contains more than 60 educational software -packages and more are available from the Debian archive, and schools -can choose between KDE, Gnome, LXDE and Xfce desktop environment.

- -

This is the seventh test release based on Debian Wheezy. Basically -this is an updated and slightly improved version compared to the -Squeeze release.

-

Notes for upgrades from Alpha Prereleases

+
  • RFC 3066 - Tags + for the Identification of Languages (Erstatter RFC 1766)
  • + +
  • ISO + 639 - Codes for the Representation of Names of Languages
  • -

    Alpha based installations should reinstall or downgrade the -versions of gosa and libpam-mklocaluser to the ones used in this beta -release. Both alpha and beta0 based installations should reinstall or -deal with gosa.conf manually; there are two options: (1) Keep -gosa.conf and edit this file as outlined on the mailing list. (2) -Accept the new version of gosa.conf and replace both contained admin -password placeholders with the password hashes found in the old one -(backup copy!). In both cases all users need to change their password -to make sure a password is set for CIFS access to their home -directory.

    +
  • ISO + DTR 14652 - locale-standard Specification method for cultural + conventions
  • + +
  • ISO + 15897: Registration procedures for cultural elements (cultural + registry), + (nytt + draft)
  • +
  • ISO/IEC + JTC1/SC22/WG20 - Gruppen for i18n-standardisering i ISO
  • -

    cheers, -
    Holger

    -
    +
    - Tags: debian edu, english. + Tags: norsk.
    @@ -457,135 +408,287 @@ directory.

    - -
    10th September 2013
    -

    I was introduced to the -Freedombox project -in 2010, when Eben Moglen presented his vision about serving the need -of non-technical people to keep their personal information private and -within the legal protection of their own homes. The idea is to give -people back the power over their network and machines, and return -Internet back to its intended peer-to-peer architecture. Instead of -depending on a central service, the Freedombox will give everyone -control over their own basic infrastructure.

    - -

    I've intended to join the effort since then, but other tasks have -taken priority. But this summers nasty news about the misuse of trust -and privilege exercised by the "western" intelligence gathering -communities increased my eagerness to contribute to a point where I -actually started working on the project a while back.

    - -

    The initial -Debian initiative based on the vision from Eben Moglen, is to -create a simple and cheap Debian based appliance that anyone can hook -up in their home and get access to secure and private services and -communication. The initial deployment platform have been the -Dreamplug, -which is a piece of hardware I do not own. So to be able to test what -the current Freedombox setup look like, I had to come up with a way to install -it on some hardware I do have access to. I have rewritten the -freedom-maker -image build framework to use .deb packages instead of only copying -setup into the boot images, and thanks to this rewrite I am able to -set up any machine supported by Debian Wheezy as a Freedombox, using -the previously mentioned deb (and a few support debs for packages -missing in Debian).

    - -

    The current Freedombox setup consist of a set of bootstrapping -scripts -(freedombox-setup), -and a administrative web interface -(plinth + exmachina + -withsqlite), as well as a privacy enhancing proxy based on -privoxy -(freedombox-privoxy). There is also a web/javascript based XMPP -client (jwchat) -trying (unsuccessfully so far) to talk to the XMPP server -(ejabberd). The -web interface is pluggable, and the goal is to use it to enable OpenID -services, mesh network connectivity, use of TOR, etc, etc. Not much of -this is really working yet, see -the -project TODO for links to GIT repositories. Most of the code is -on github at the moment. The HTTP proxy is operational out of the -box, and the admin web interface can be used to add/remove plinth -users. I've not been able to do anything else with it so far, but -know there are several branches spread around github and other places -with lots of half baked features.

    - -

    Anyway, if you want to have a look at the current state, the -following recipes should work to give you a test machine to poke -at.

    - -

    Debian Wheezy amd64

    - -
      - -
    1. Fetch normal Debian Wheezy installation ISO.
    2. -
    3. Boot from it, either as CD or USB stick.
    4. -
    5. Press [tab] on the boot prompt and add this as a boot argument -to the Debian installer:

      -

      url=http://www.reinholdtsen.name/freedombox/preseed-wheezy.dat
    6. - -
    7. Answer the few language/region/password questions and pick disk to -install on.
    8. - -
    9. When the installation is finished and the machine have rebooted a -few times, your Freedombox is ready for testing.
    10. - -
    - -

    Raspberry Pi Raspbian

    - -
      - -
    1. Fetch a Raspbian SD card image, create SD card.
    2. -
    3. Boot from SD card, extend file system to fill the card completely.
    4. -
    5. Log in and add this to /etc/sources.list:

      -
      -deb http://www.reinholdtsen.name/freedombox wheezy main
      -
    6. -
    7. Run this as root:

      -
      -wget -O - http://www.reinholdtsen.name/freedombox/BE1A583D.asc | \
      -   apt-key add -
      -apt-get update
      -apt-get install freedombox-setup
      -/usr/lib/freedombox/setup
      -
    8. -
    9. Reboot into your freshly created Freedombox.
    10. - -
    - -

    You can test it on other architectures too, but because the -freedombox-privoxy package is binary, it will only work as intended on -the architectures where I have had time to build the binary and put it -in my APT repository. But do not let this stop you. It is only a -short "apt-get source -b freedombox-privoxy" away. :)

    - -

    Note that by default Freedombox is a DHCP server on the -192.168.1.0/24 subnet, so if this is your subnet be careful and turn -off the DHCP server by running "update-rc.d isc-dhcp-server -disable" as root.

    - -

    Please let me know if this works for you, or if you have any -problems. We gather on the IRC channel -#freedombox on -irc.debian.org and the -project -mailing list.

    - -

    Once you get your freedombox operational, you can visit -http://your-host-name:8001/ to see the state of the plint -welcome screen (dead end - do not be surprised if you are unable to -get past it), and next visit http://your-host-name:8001/help/ -to look at the rest of plinth. The default user is 'admin' and the -default password is 'secret'.

    + +
    9th April 2014
    +

    For a while now, I have been looking for a sensible offsite backup +solution for use at home. My requirements are simple, it must be +cheap and locally encrypted (in other words, I keep the encryption +keys, the storage provider do not have access to my private files). +One idea me and my friends had many years ago, before the cloud +storage providers showed up, was to use Google mail as storage, +writing a Linux block device storing blocks as emails in the mail +service provided by Google, and thus get heaps of free space. On top +of this one can add encryption, RAID and volume management to have +lots of (fairly slow, I admit that) cheap and encrypted storage. But +I never found time to implement such system. But the last few weeks I +have looked at a system called +S3QL, a locally +mounted network backed file system with the features I need.

    + +

    S3QL is a fuse file system with a local cache and cloud storage, +handling several different storage providers, any with Amazon S3, +Google Drive or OpenStack API. There are heaps of such storage +providers. S3QL can also use a local directory as storage, which +combined with sshfs allow for file storage on any ssh server. S3QL +include support for encryption, compression, de-duplication, snapshots +and immutable file systems, allowing me to mount the remote storage as +a local mount point, look at and use the files as if they were local, +while the content is stored in the cloud as well. This allow me to +have a backup that should survive fire. The file system can not be +shared between several machines at the same time, as only one can +mount it at the time, but any machine with the encryption key and +access to the storage service can mount it if it is unmounted.

    + +

    It is simple to use. I'm using it on Debian Wheezy, where the +package is included already. So to get started, run apt-get +install s3ql. Next, pick a storage provider. I ended up picking +Greenqloud, after reading their nice recipe on +how +to use S3QL with their Amazon S3 service, because I trust the laws +in Iceland more than those in USA when it come to keeping my personal +data safe and private, and thus would rather spend money on a company +in Iceland. Another nice recipe is available from the article +S3QL +Filesystem for HPC Storage by Jeff Layton in the HPC section of +Admin magazine. When the provider is picked, figure out how to get +the API key needed to connect to the storage API. With Greencloud, +the key did not show up until I had added payment details to my +account.

    + +

    Armed with the API access details, it is time to create the file +system. First, create a new bucket in the cloud. This bucket is the +file system storage area. I picked a bucket name reflecting the +machine that was going to store data there, but any name will do. +I'll refer to it as bucket-name below. In addition, one need +the API login and password, and a locally created password. Store it +all in ~root/.s3ql/authinfo2 like this: + +

    +[s3c]
    +storage-url: s3c://s.greenqloud.com:443/bucket-name
    +backend-login: API-login
    +backend-password: API-password
    +fs-passphrase: local-password
    +

    + +

    I create my local passphrase using pwget 50 or similar, +but any sensible way to create a fairly random password should do it. +Armed with these details, it is now time to run mkfs, entering the API +details and password to create it:

    + +

    +# mkdir -m 700 /var/lib/s3ql-cache
    +# mkfs.s3ql --cachedir /var/lib/s3ql-cache --authfile /root/.s3ql/authinfo2 \
    +  --ssl s3c://s.greenqloud.com:443/bucket-name
    +Enter backend login: 
    +Enter backend password: 
    +Before using S3QL, make sure to read the user's guide, especially
    +the 'Important Rules to Avoid Loosing Data' section.
    +Enter encryption password: 
    +Confirm encryption password: 
    +Generating random encryption key...
    +Creating metadata tables...
    +Dumping metadata...
    +..objects..
    +..blocks..
    +..inodes..
    +..inode_blocks..
    +..symlink_targets..
    +..names..
    +..contents..
    +..ext_attributes..
    +Compressing and uploading metadata...
    +Wrote 0.00 MB of compressed metadata.
    +# 

    + +

    The next step is mounting the file system to make the storage available. + +

    +# mount.s3ql --cachedir /var/lib/s3ql-cache --authfile /root/.s3ql/authinfo2 \
    +  --ssl --allow-root s3c://s.greenqloud.com:443/bucket-name /s3ql
    +Using 4 upload threads.
    +Downloading and decompressing metadata...
    +Reading metadata...
    +..objects..
    +..blocks..
    +..inodes..
    +..inode_blocks..
    +..symlink_targets..
    +..names..
    +..contents..
    +..ext_attributes..
    +Mounting filesystem...
    +# df -h /s3ql
    +Filesystem                              Size  Used Avail Use% Mounted on
    +s3c://s.greenqloud.com:443/bucket-name  1.0T     0  1.0T   0% /s3ql
    +#
    +

    + +

    The file system is now ready for use. I use rsync to store my +backups in it, and as the metadata used by rsync is downloaded at +mount time, no network traffic (and storage cost) is triggered by +running rsync. To unmount, one should not use the normal umount +command, as this will not flush the cache to the cloud storage, but +instead running the umount.s3ql command like this: + +

    +# umount.s3ql /s3ql
    +# 
    +

    + +

    There is a fsck command available to check the file system and +correct any problems detected. This can be used if the local server +crashes while the file system is mounted, to reset the "already +mounted" flag. This is what it look like when processing a working +file system:

    + +

    +# fsck.s3ql --force --ssl s3c://s.greenqloud.com:443/bucket-name
    +Using cached metadata.
    +File system seems clean, checking anyway.
    +Checking DB integrity...
    +Creating temporary extra indices...
    +Checking lost+found...
    +Checking cached objects...
    +Checking names (refcounts)...
    +Checking contents (names)...
    +Checking contents (inodes)...
    +Checking contents (parent inodes)...
    +Checking objects (reference counts)...
    +Checking objects (backend)...
    +..processed 5000 objects so far..
    +..processed 10000 objects so far..
    +..processed 15000 objects so far..
    +Checking objects (sizes)...
    +Checking blocks (referenced objects)...
    +Checking blocks (refcounts)...
    +Checking inode-block mapping (blocks)...
    +Checking inode-block mapping (inodes)...
    +Checking inodes (refcounts)...
    +Checking inodes (sizes)...
    +Checking extended attributes (names)...
    +Checking extended attributes (inodes)...
    +Checking symlinks (inodes)...
    +Checking directory reachability...
    +Checking unix conventions...
    +Checking referential integrity...
    +Dropping temporary indices...
    +Backing up old metadata...
    +Dumping metadata...
    +..objects..
    +..blocks..
    +..inodes..
    +..inode_blocks..
    +..symlink_targets..
    +..names..
    +..contents..
    +..ext_attributes..
    +Compressing and uploading metadata...
    +Wrote 0.89 MB of compressed metadata.
    +# 
    +

    + +

    Thanks to the cache, working on files that fit in the cache is very +quick, about the same speed as local file access. Uploading large +amount of data is to me limited by the bandwidth out of and into my +house. Uploading 685 MiB with a 100 MiB cache gave me 305 kiB/s, +which is very close to my upload speed, and downloading the same +Debian installation ISO gave me 610 kiB/s, close to my download speed. +Both were measured using dd. So for me, the bottleneck is my +network, not the file system code. I do not know what a good cache +size would be, but suspect that the cache should e larger than your +working set.

    + +

    I mentioned that only one machine can mount the file system at the +time. If another machine try, it is told that the file system is +busy:

    + +

    +# mount.s3ql --cachedir /var/lib/s3ql-cache --authfile /root/.s3ql/authinfo2 \
    +  --ssl --allow-root s3c://s.greenqloud.com:443/bucket-name /s3ql
    +Using 8 upload threads.
    +Backend reports that fs is still mounted elsewhere, aborting.
    +#
    +

    + +

    The file content is uploaded when the cache is full, while the +metadata is uploaded once every 24 hour by default. To ensure the +file system content is flushed to the cloud, one can either umount the +file system, or ask S3QL to flush the cache and metadata using +s3qlctrl: + +

    +# s3qlctrl upload-meta /s3ql
    +# s3qlctrl flushcache /s3ql
    +# 
    +

    + +

    If you are curious about how much space your data uses in the +cloud, and how much compression and deduplication cut down on the +storage usage, you can use s3qlstat on the mounted file system to get +a report:

    + +

    +# s3qlstat /s3ql
    +Directory entries:    9141
    +Inodes:               9143
    +Data blocks:          8851
    +Total data size:      22049.38 MB
    +After de-duplication: 21955.46 MB (99.57% of total)
    +After compression:    21877.28 MB (99.22% of total, 99.64% of de-duplicated)
    +Database size:        2.39 MB (uncompressed)
    +(some values do not take into account not-yet-uploaded dirty blocks in cache)
    +#
    +

    + +

    I mentioned earlier that there are several possible suppliers of +storage. I did not try to locate them all, but am aware of at least +Greenqloud, +Google Drive, +Amazon S3 web serivces, +Rackspace and +Crowncloud. The latter even +accept payment in Bitcoin. Pick one that suit your need. Some of +them provide several GiB of free storage, but the prize models are +quite different and you will have to figure out what suits you +best.

    + +

    While researching this blog post, I had a look at research papers +and posters discussing the S3QL file system. There are several, which +told me that the file system is getting a critical check by the +science community and increased my confidence in using it. One nice +poster is titled +"An +Innovative Parallel Cloud Storage System using OpenStack’s SwiftObject +Store and Transformative Parallel I/O Approach" by Hsing-Bung +Chen, Benjamin McClelland, David Sherrill, Alfred Torrez, Parks Fields +and Pamela Smith. Please have a look.

    + +

    Given my problems with different file systems earlier, I decided to +check out the mounted S3QL file system to see if it would be usable as +a home directory (in other word, that it provided POSIX semantics when +it come to locking and umask handling etc). Running +my +test code to check file system semantics, I was happy to discover that +no error was found. So the file system can be used for home +directories, if one chooses to do so.

    + +

    If you do not want a locally file system, and want something that +work without the Linux fuse file system, I would like to mention the +Tarsnap service, which also +provide locally encrypted backup using a command line client. It have +a nicer access control system, where one can split out read and write +access, allowing some systems to write to the backup and others to +only read from it.

    + +

    As usual, if you use Bitcoin and want to show your support of my +activities, please send Bitcoin donations to my address +15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b.

    @@ -593,283 +696,86 @@ default password is 'secret'.

    - -
    8th September 2013
    -

    I 2011 raderte et stortingsflertall bestående av Høyre og -Arbeiderpartiet vekk en betydelig del av privatsfæren til det norske -folk. Det ble vedtatt at det skulle registreres og lagres i et halvt -år hvor alle som bærer på en mobiltelefon befinner seg, hvem de -snakker med og hvor lenge de snakket sammen. Det skal også -registreres hvem de sendte SMS-meldinger til, hvem en har sendt epost -til, og hvilke nett-tjenere en besøkte. Saken er kjent som -Datalagringsdirektivet -(DLD), og innebærer at alle innbyggerne og andre innenfor Norges -grenser overvåkes døgnet rundt. Det ble i praksis innført brev og -besøkskontroll av hele befolkningen. Rapporter fra de landene som -allerede har innført slik total lagring av borgernes -kommunikasjonsmønstre forteller at det ikke hjelper i -kriminalitetsbekjempelsen. Den norske prislappen blir mange hundre -millioner, uten at det ser ut til å bidra positivt til politiets -arbeide. Jeg synes flere hundre millioner i stedet burde vært brukt -på noe som kan dokumenteres å ha effekt i kriminalitetsbekjempelsen. -Se mer på -Wikipedia -og Jon Wessel-Aas.

    - -

    Hva er problemet, tenkter du kanskje? Et åpenbart problem er at -medienes kildevern i praksis blir radert ut. Den innsamlede -informasjonen gjør det mulig å finne ut hvem som har snakket med -journalister på telefon, SMS og epost, og hvem som har vært i nærheten -av journalister så sant begge bar med seg en telefon. Et annet er at -advokatvernet blir sterkt redusert, der politiet kan finne ut hvem -som har snakket med en advokat når, eller vært i møter en med advokat. -Et tredje er at svært personlig informasjon kan avledes fra hvilke -nettsteder en har besøkt. Har en besøkt hivnorge.no, -swingersnorge.com eller andre sider som kan brukes til avlede -interesser som hører til privatsfæren, vil denne informasjonen være -tilgjengelig takket være datalagringsdirektivet.

    - -

    De fleste partiene var mot, kun to partier stemte for. Høyre og -Arbeiderpartiet. Og både Høyre og Arbeiderpartiet i Oslo har -DLD-forkjempere på toppen av sine lister (har ikke sjekket de andre -fylkene). Det er dermed helt uaktuelt for meg å stemme på disse -partiene. Her er oversikten over partienes valglister i Oslo, med -informasjon om hvem som stemte hva i første DLD-votering i Stortinget, -basert på informasjon fra mine venner i -Holder de -Ord samt data.stortinget.no. -Først ut er stortingslista fra Høyre for Oslo:

    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    #Navn, fødselsår og valgkretsStemme/kommentar
    1.Ine Marie Eriksen Søreide (1976), Gamle OsloStemte for DLD
    2.Nikolai Astrup (1978), FrognerStemte mot DLD
    3.Michael Tetzschner (1954), Vestre AkerStemte mot DLD
    4.Kristin Vinje (1963), Nordre AkerIkke til stede
    5.Mudassar Hussain Kapur (1976), NordstrandIkke til stede
    6.Stefan Magnus B. Heggelund (1984), GrünerløkkaIkke til stede
    7.Heidi Nordby Lunde (1973), GrünerløkkaIkke til stede
    8.Frode Helgerud (1950), FrognerIkke til stede
    9.Afshan Rafiq (1975), StovnerIkke til stede
    10.Astrid Nøklebye Heiberg (1936), FrognerIkke til stede
    11.Camilla Strandskog (1984) St.HanshaugenIkke til stede
    12.John Christian Elden (1967), UllernIkke til stede
    13.Berit Solli (1972), AlnaIkke til stede
    14.Ola Kvisgaard (1963), FrognerIkke til stede
    15.James Stove Lorentzen (1957), Vestre AkerIkke til stede
    16.Gülsüm Koc (1987), StovnerIkke til stede
    17.Jon Ole Whist (1976), GrünerløkkaIkke til stede
    18.Maren Eline Malthe-Sørenssen (1971), Vestre AkerIkke til stede
    19.Ståle Hagen (1968), Søndre NordstrandIkke til stede
    20.Kjell Omdal Erichsen (1978), SageneIkke til stede
    21.Saida R. Begum (1987), GrünerløkkaIkke til stede
    22.Torkel Brekke (1970), Nordre AkerIkke til stede
    23.Sverre K. Seeberg (1950), Vestre AkerIkke til stede
    24.Julie Margrethe Brodtkorb (1974), UllernIkke til stede
    25.Fabian Stang (1955), FrognerIkke til stede
    - -

    Deretter har vi stortingslista fra Arbeiderpartiet for Oslo:

    - - - - - - - - - - - - - - - - - - - - - - - - + +
    8th April 2014
    +

    I dag kom endelig avgjørelsen fra EU-domstolen om +datalagringsdirektivet, som ikke overraskende ble dømt ulovlig og i +strid med borgernes grunnleggende rettigheter. Hvis du lurer på hva +datalagringsdirektivet er for noe, så er det +en +flott dokumentar tilgjengelig hos NRK som jeg tidligere +har +anbefalt alle å se.

    -
    - - +

    Her er et liten knippe nyhetsoppslag om saken, og jeg regner med at +det kommer flere ut over dagen. Flere kan finnes +via +mylder.

    - - - +

      -
    - - +
  • EU-domstolen: +Datalagringsdirektivet er ugyldig - e24.no 2014-04-08 -
  • - - +
  • EU-domstolen: +Datalagringsdirektivet er ulovlig - aftenposten.no 2014-04-08 -
  • - - +
  • Krever +DLD-stopp i Norge - aftenposten.no 2014-04-08 -
  • - - +
  • Apenes: - En +gledens dag - p4.no 2014-04-08 -
  • - - +
  • EU-domstolen: +– Datalagringsdirektivet er ugyldig - nrk.no 2014-04-08
  • - - - +
  • EU-domstolen: +Datalagringsdirektivet er ugyldig - vg.no 2014-04-08
  • - - - +
  • - +Vi bør skrote hele datalagringsdirektivet - dagbladet.no +2014-04-08
  • - - - +
  • EU-domstolen: +DLD er ugyldig - digi.no 2014-04-08
  • - - - +
  • European +court declares data retention directive invalid - irishtimes.com +2014-04-08
  • - - - +
  • EU +court rules against requirement to keep data of telecom users - +reuters.com 2014-04-08
  • - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    #Navn, fødselsår og valgkretsStemme/kommentar
    1.Jens Stoltenberg (1959), FrognerIkke til stede i Stortinget, leder av regjeringen som fremmet forslaget
    2.Hadia Tajik (1983), GrünerløkkaStemte for DLD
    3.Jonas Gahr Støre (1960), Vestre AkerIkke til stede i Stortinget, medlem av regjeringen som fremmet forslaget
    4.Marianne Marthinsen (1980), GrünerløkkaStemte for DLD
    5.Jan Bøhler (1952), AlnaStemte for DLD
    6.Marit Nybakk (1947), FrognerStemte for DLD
    7.Truls Wickholm (1978), SageneStemte for DLD
    8.Prableen Kaur (1993), GrorudIkke til stede
    9.Vegard Grøslie Wennesland (1983), St.HanshaugenIkke til stede
    10.Inger Helene Vaaten (1975), GrorudIkke til stede
    11.Ivar Leveraas (1939), AlnaIkke til stede
    12.Grete Haugdal (1971), Gamle OsloIkke til stede
    13.Olav Tønsberg (1948), AlnaIkke til stede
    14.Khamshajiny Gunaratnam (1988), GrorudIkke til stede
    15.Fredrik Mellem (1969), SageneIkke til stede
    16.Brit Axelsen (1945), StovnerIkke til stede
    17.Dag Bayegan-Harlem (1977), UllernIkke til stede
    18.Kristin Sandaker (1963), ØsteinsjøIkke til stede
    19.Bashe Musse (1965), GrünerløkkaIkke til stede
    20.Torunn Kanutte Husvik (1983), St. HanshaugenIkke til stede
    21.Steinar Andersen (1947), NordstrandIkke til stede
    22.Anne Cathrine Berger (1972), SageneIkke til stede
    23.Khalid Mahmood (1959), ØstensjøIkke til stede
    24.Munir Jaber (1990), AlnaIkke til stede
    25.Libe Solberg Rieber-Mohn (1965), FrognerIkke til stede
    - -

    Hvilket parti får så min stemme i år. Jeg tror det blir -Piratpartiet. Hvis de kan bidra -til at det kommer noen inn på Stortinget med teknisk peiling, så får -kanskje ikke overvåkningsgalskapen like fritt spillerom som det har -hatt så langt.

    + +

    +

    Jeg synes det er veldig fint at nok en stemme slår fast at +totalitær overvåkning av befolkningen er uakseptabelt, men det er +fortsatt like viktig å beskytte privatsfæren som før, da de +teknologiske mulighetene fortsatt finnes og utnyttes, og jeg tror +innsats i prosjekter som +Freedombox og +Dugnadsnett er viktigere enn +noen gang.

    + +

    Update 2014-04-08 12:10: Kronerullingen for å +stoppe datalagringsdirektivet i Norge gjøres hos foreningen +Digitalt Personvern, +som har samlet inn 843 215,- så langt men trenger nok mye mer hvis + +ikke Høyre og Arbeiderpartiet bytter mening i saken. Det var +kun +partinene Høyre og Arbeiderpartiet som stemte for +Datalagringsdirektivet, og en av dem må bytte mening for at det skal +bli flertall mot i Stortinget. Se mer om saken +Holder +de ord.

    @@ -877,138 +783,62 @@ hatt så langt.

    - -
    22nd August 2013
    -

    The second wheezy based beta release of Debian Edu was wrapped up -today, slightly delayed because of some bugs in the initial Windows -integration fixes . This is the release announcement:

    - -

    New features for Debian Edu 7.1+edu0~b1 released 2013-08-22

    - -

    These are the release notes for Debian Edu / Skolelinux -7.1+edu0~b1, based on Debian with codename "Wheezy".

    - -

    About Debian Edu and Skolelinux

    - -

    Debian Edu, also known as -Skolelinux, is a Linux distribution based on Debian providing an -out-of-the box environment of a completely configured school -network. Immediately after installation a school server running all -services needed for a school network is set up just waiting for users -and machines being added via GOsa², a comfortable Web-UI. A netbooting -environment is prepared using PXE, so after initial installation of -the main server from CD or USB stick all other machines can be -installed via the network. The provided school server provides LDAP -database and Kerberos authentication service, centralized home -directories, DHCP server, web proxy and many other services. The -desktop contains -more -than 60 educational software packages and more are available from -the Debian archive, and schools can choose between KDE, Gnome, LXDE -and Xfce desktop environment.

    - -

    This is the sixth test release based on Debian Wheezy. Basically this -is an updated and slightly improved version compared to the Squeeze -release.

    - -

    ALERT: Alpha based installations should reinstall or downgrade the -versions of gosa and libpam-mklocaluser to the ones used in this beta -release. Both alpha and beta0 based installations should reinstall or -deal with gosa.conf manually; there are two options: (1) Keep -gosa.conf and edit this file as outlined -on -the mailing list. (2) Accept the new version of gosa.conf and -replace both contained admin password placeholders with the password -hashes found in the old one (backup copy!). In both cases every user -need to change their their password to make sure a password is set for -CIFS access to their home directory.

    - -

    Software updates

    - -
      - -
    • Added ssh askpass packages to default installation, to ensure ssh - work also without a attached tty.
    • -
    • Add the command-not-found package to the default installation to - make it easier to figure out where to find missing command line - tools. Please note, that the command 'update-command-not-found' - has to be run as root to actually make it useful (internet access - required).
    • - -
    - -

    Other changes

    - -
      - -
    • Adjusted the USB stick ISO image build to include every tool -needed for desktop=xfce installations.
    • -
    • Adjust thin-client-server task to work when installing from USB -stick ISO image.
    • -
    • Made new grub artwork (changed png from indexed to RGB format).
    • -
    • Minor cleanup in the CUPS setup.
    • -
    • Make sure that bootstrapping of the Samba domain really happens - during installation of the main server and adjust SID handling to - cope with this.
    • -
    • Make Samba passwords changeable (again) via GOsa².
    • -
    • Fix generation of LM and NT password hashes via GOsa² to avoid - empty password hashes.
    • -
    • Adapted Samba machine domain joining to latest change in the - smbldap-tools Perl package, fixing bugs blocking Windows machines - from joining the Samba domain.
    • - -
    - -

    Known issues

    - -
      - -
    • KDE fails to understand the wpad.dat file provided, causing it to - not use the http proxy as it should.
    • -
    • Chromium also fails to use the proxy when using the KDE desktop - (using the KDE configuration).
    • - -
    - -

    Where to get it

    - -

    To download the multiarch netinstall CD release you can use

    - - - -

    The MD5SUM of this image is: 1e357f80b55e703523f2254adde6d78b -
    The SHA1SUM of this image is: 7157f9be5fd27c7694d713c6ecfed61c3edda3b2

    - -

    To download the multiarch USB stick ISO release you can use

    - - - -

    The MD5SUM of this image is: 7a8408ead59cf7e3cef25afb6e91590b -
    The SHA1SUM of this image is: f1817c031f02790d5edb3bfa0dcf8451088ad119

    - - -

    How to report bugs

    - -

    http://wiki.debian.org/DebianEdu/HowTo/ReportBugs +

    +
    1st April 2014
    +

    Microsoft have announced that Windows XP reaches its end of life +2014-04-08, in 7 days. But there are heaps of machines still running +Windows XP, and depending on Windows XP to run their applications, and +upgrading will be expensive, both when it comes to money and when it +comes to the amount of effort needed to migrate from Windows XP to a +new operating system. Some obvious options (buy new a Windows +machine, buy a MacOSX machine, install Linux on the existing machine) +are already well known and covered elsewhere. Most of them involve +leaving the user applications installed on Windows XP behind and +trying out replacements or updated versions. In this blog post I want +to mention one strange bird that allow people to keep the hardware and +the existing Windows XP applications and run them on a free software +operating system that is Windows XP compatible.

    + +

    ReactOS is a free software +operating system (GNU GPL licensed) working on providing a operating +system that is binary compatible with Windows, able to run windows +programs directly and to use Windows drivers for hardware directly. +The project goal is for Windows user to keep their existing machines, +drivers and software, and gain the advantages from user a operating +system without usage limitations caused by non-free licensing. It is +a Windows clone running directly on the hardware, so quite different +from the approach taken by the Wine +project, which make it possible to run Windows binaries on +Linux.

    + +

    The ReactOS project share code with the Wine project, so most +shared libraries available on Windows are already implemented already. +There is also a software manager like the one we are used to on Linux, +allowing the user to install free software applications with a simple +click directly from the Internet. Check out the +screen shots on the +project web site for an idea what it look like (it looks just like +Windows before metro).

    + +

    I do not use ReactOS myself, preferring Linux and Unix like +operating systems. I've tested it, and it work fine in a virt-manager +virtual machine. The browser, minesweeper, notepad etc is working +fine as far as I can tell. Unfortunately, my main test application +is the software included on a CD with the Lego Mindstorms NXT, which +seem to install just fine from CD but fail to leave any binaries on +the disk after the installation. So no luck with that test software. +No idea why, but hope someone else figure out and fix the problem. +I've tried the ReactOS Live ISO on a physical machine, and it seemed +to work just fine. If you like Windows and want to keep running your +old Windows binaries, check it out by +downloading the +installation CD, the live CD or the preinstalled virtual machine +image.

    - Tags: debian edu, english. + Tags: english, reactos.
    @@ -1016,34 +846,132 @@ stick ISO image.
    - -
    18th August 2013
    -

    Earlier, I reported about -my -problems using an Intel SSD 520 Series 180 GB disk. Friday I was -told by IBM that the original disk should be thrown away. And as -there no longer was a problem if I bricked the firmware, I decided -today to try to install Intel firmware to replace the Lenovo firmware -currently on the disk.

    - -

    I searched the Intel site for firmware, and found -issdfut_2.0.4.iso -(aka Intel SATA Solid-State Drive Firmware Update Tool) which -according to the site should contain the latest firmware for SSD -disks. I inserted the broken disk in one of my spare laptops and -booted the ISO from a USB stick. The disk was recognized, but the -program claimed the newest firmware already were installed and refused -to insert any Intel firmware. So no change, and the disk is still -unable to handle write load. :( I guess the only way to get them -working would be if Lenovo releases new firmware. No idea how likely -that is. Anyway, just blogging about this test for completeness. I -got a working Samsung disk, and see no point in spending more time on -the broken disks.

    + +
    30th March 2014
    +

    Debian Edu / Skolelinux +keep gaining new users. Some weeks ago, a person showed up on IRC, +#debian-edu, with a +wish to contribute, and I managed to get a interview with this great +contributor Roger Marsal to learn more about his background.

    + +

    Who are you, and how do you spend your days?

    + +

    My name is Roger Marsal, I'm 27 years old (1986 generation) and I +live in Barcelona, Spain. I've got a strong business background and I +work as a patrimony manager and as a real estate agent. Additionally, +I've co-founded a British based tech company that is nowadays on the +last development phase of a new social networking concept.

    + +

    I'm a Linux enthusiast that started its journey with Ubuntu four years +ago and have recently switched to Debian seeking rock solid stability +and as a necessary step to gain expertise.

    + +

    In a nutshell, I spend my days working and learning as much as I +can to face both my job, entrepreneur project and feed my Linux +hunger.

    + +

    How did you get in contact with the Skolelinux / Debian Edu +project?

    + +

    I discovered the LTSP advantages +with "Ubuntu 12.04 alternate install" and after a year of use I +started looking for an alternative. Even though I highly value and +respect the Ubuntu project, I thought it was necessary for me to +change to a more robust and stable alternative. As far as I was using +Debian on my personal laptop I thought it would be fine to install +Debian and configure an LTSP server myself. Surprised, I discovered +that the Debian project also supported a kind of Edubuntu equivalent, +and after having some pain I obtained a Debian Edu network up and +running. I just loved it.

    + +

    What do you see as the advantages of Skolelinux / Debian +Edu?

    + +

    I found a main advantage in that, once you know "the tips and +tricks", a new installation just works out of the box. It's the most +complete alternative I've found to create an LTSP network. All the +other distributions seems to be made of plastic, Debian Edu seems to +be made of steel.

    + +

    What do you see as the disadvantages of Skolelinux / Debian +Edu?

    + +

    I found two main disadvantages.

    + +

    I'm not an expert but I've got notions and I had to spent a considerable +amount of time trying to bring up a standard network topology. I'm quite +stubborn and I just worked until I did but I'm sure many people with few +resources (not big schools, but academies for example) would have switched +or dropped.

    + +

    It's amazing how such a complex system like Debian Edu has achieved +this out-of-the-box state. Even though tweaking without breaking gets +more difficult, as more factors have to be considered. This can +discourage many people too.

    + +

    Which free software do you use daily?

    + +

    I use Debian, Firefox, Okular, Inkscape, LibreOffice and +Virtualbox.

    + + +

    Which strategy do you believe is the right one to use to +get schools to use free software?

    + +

    I don't think there is a need for a particular strategy. The free +attribute in both "freedom" and "no price" meanings is what will +really bring free software to schools. In my experience I can think of +the "R" statistical language; a +few years a ago was an extremely nerd tool for university people. +Today it's being increasingly used to teach statistics at many +different level of studies. I believe free and open software will +increasingly gain popularity, but I'm sure schools will be one of the +first scenarios where this will happen.

    - Tags: debian, english. + Tags: debian edu, english, intervju. + + +
    +
    +
    + +
    + +
    26th March 2014
    +

    Foreningen NUUG melder i natt at +NRK nå har bestemt seg for +når +den norske dokumentarfilmen om datalagringsdirektivet skal +sendes (se IMDB +for detaljer om filmen) . Første visning blir på NRK2 mandag +2014-03-31 kl. 19:50, og deretter visninger onsdag 2014-04-02 +kl. 12:30, fredag 2014-04-04 kl. 19:40 og søndag 2014-04-06 kl. 15:10. +Jeg har sett dokumentaren, og jeg anbefaler enhver å se den selv. Som +oppvarming mens vi venter anbefaler jeg Bjørn Stærks kronikk i +Aftenposten fra i går, +Autoritær +gjøkunge, der han gir en grei skisse av hvor ille det står til med +retten til privatliv og beskyttelsen av demokrati i Norge og resten +verden, og helt riktig slår fast at det er vi i databransjen som +sitter med nøkkelen til å gjøre noe med dette. Jeg har involvert meg +i prosjektene dugnadsnett.no +og FreedomBox for å +forsøke å gjøre litt selv for å bedre situasjonen, men det er mye +hardt arbeid fra mange flere enn meg som gjenstår før vi kan sies å ha +gjenopprettet balansen.

    + +

    Jeg regner med at nettutgaven dukker opp på +NRKs +side om filmen om datalagringsdirektivet om fem dager. Hold et +øye med siden, og tips venner og slekt om at de også bør se den.

    +
    + @@ -1058,6 +986,21 @@ the broken disks.

    Archive