X-Git-Url: http://pere.pagekite.me/gitweb/homepage.git/blobdiff_plain/c75c99e3db61c669fcd48cf13fbe1b7e812e5b8a..7bcee7b394f4e64700ed499f6c65e02fcc053e6e:/blog/index.rss diff --git a/blog/index.rss b/blog/index.rss index 5e33e0e4a5..7741e00372 100644 --- a/blog/index.rss +++ b/blog/index.rss @@ -7,973 +7,894 @@ - Good causes: Debian Outreach Program for Women, EFF documenting the spying and Open access in Norway - http://people.skolelinux.org/pere/blog/Good_causes__Debian_Outreach_Program_for_Women__EFF_documenting_the_spying_and_Open_access_in_Norway.html - http://people.skolelinux.org/pere/blog/Good_causes__Debian_Outreach_Program_for_Women__EFF_documenting_the_spying_and_Open_access_in_Norway.html - Tue, 15 Oct 2013 21:30:00 +0200 - <p>The last few days I came across a few good causes that should get -wider attention. I recommend signing and donating to each one of -these. :)</p> - -<p>Via <a href="http://www.debian.org/News/weekly/2013/18/">Debian -Project News for 2013-10-14</a> I came across the Outreach Program for -Women program which is a Google Summer of Code like initiative to get -more women involved in free software. One debian sponsor has offered -to match <a href="http://debian.ch/opw2013">any donation done to Debian -earmarked</a> for this initiative. I donated a few minutes ago, and -hope you will to. :)</p> - -<p>And the Electronic Frontier Foundation just announced plans to -create <a href="https://supporters.eff.org/donate/nsa-videos">video -documentaries about the excessive spying</a> on every Internet user that -take place these days, and their need to fund the work. I've already -donated. Are you next?</p> - -<p>For my Norwegian audience, the organisation Studentenes og -Akademikernes Internasjonale Hjelpefond is collecting signatures for a -statement under the heading -<a href="http://saih.no/Bloggers_United/">Bloggers United for Open -Access</a> for those of us asking for more focus on open access in the -Norwegian government. So far 499 signatures. I hope you will sign it -too.</p> + S3QL, a locally mounted cloud file system - nice free software + http://people.skolelinux.org/pere/blog/S3QL__a_locally_mounted_cloud_file_system___nice_free_software.html + http://people.skolelinux.org/pere/blog/S3QL__a_locally_mounted_cloud_file_system___nice_free_software.html + Wed, 9 Apr 2014 11:30:00 +0200 + <p>For a while now, I have been looking for a sensible offsite backup +solution for use at home. My requirements are simple, it must be +cheap and locally encrypted (in other words, I keep the encryption +keys, the storage provider do not have access to my private files). +One idea me and my friends had many years ago, before the cloud +storage providers showed up, was to use Google mail as storage, +writing a Linux block device storing blocks as emails in the mail +service provided by Google, and thus get heaps of free space. On top +of this one can add encryption, RAID and volume management to have +lots of (fairly slow, I admit that) cheap and encrypted storage. But +I never found time to implement such system. But the last few weeks I +have looked at a system called +<a href="https://bitbucket.org/nikratio/s3ql/">S3QL</a>, a locally +mounted network backed file system with the features I need.</p> + +<p>S3QL is a fuse file system with a local cache and cloud storage, +handling several different storage providers, any with Amazon S3, +Google Drive or OpenStack API. There are heaps of such storage +providers. S3QL can also use a local directory as storage, which +combined with sshfs allow for file storage on any ssh server. S3QL +include support for encryption, compression, de-duplication, snapshots +and immutable file systems, allowing me to mount the remote storage as +a local mount point, look at and use the files as if they were local, +while the content is stored in the cloud as well. This allow me to +have a backup that should survive fire. The file system can not be +shared between several machines at the same time, as only one can +mount it at the time, but any machine with the encryption key and +access to the storage service can mount it if it is unmounted.</p> + +<p>It is simple to use. I'm using it on Debian Wheezy, where the +package is included already. So to get started, run <tt>apt-get +install s3ql</tt>. Next, pick a storage provider. I ended up picking +Greenqloud, after reading their nice recipe on +<a href="https://greenqloud.zendesk.com/entries/44611757-How-To-Use-S3QL-to-mount-a-StorageQloud-bucket-on-Debian-Wheezy">how +to use S3QL with their Amazon S3 service</a>, because I trust the laws +in Iceland more than those in USA when it come to keeping my personal +data safe and private, and thus would rather spend money on a company +in Iceland. Another nice recipe is available from the article +<a href="http://www.admin-magazine.com/HPC/Articles/HPC-Cloud-Storage">S3QL +Filesystem for HPC Storage</a> by Jeff Layton in the HPC section of +Admin magazine. When the provider is picked, figure out how to get +the API key needed to connect to the storage API. With Greencloud, +the key did not show up until I had added payment details to my +account.</p> + +<p>Armed with the API access details, it is time to create the file +system. First, create a new bucket in the cloud. This bucket is the +file system storage area. I picked a bucket name reflecting the +machine that was going to store data there, but any name will do. +I'll refer to it as <tt>bucket-name</tt> below. In addition, one need +the API login and password, and a locally created password. Store it +all in ~root/.s3ql/authinfo2 like this: + +<p><blockquote><pre> +[s3c] +storage-url: s3c://s.greenqloud.com:443/bucket-name +backend-login: API-login +backend-password: API-password +fs-passphrase: local-password +</pre></blockquote></p> + +<p>I create my local passphrase using <tt>pwget 50</tt> or similar, +but any sensible way to create a fairly random password should do it. +Armed with these details, it is now time to run mkfs, entering the API +details and password to create it:</p> + +<p><blockquote><pre> +# mkdir -m 700 /var/lib/s3ql-cache +# mkfs.s3ql --cachedir /var/lib/s3ql-cache --authfile /root/.s3ql/authinfo2 \ + --ssl s3c://s.greenqloud.com:443/bucket-name +Enter backend login: +Enter backend password: +Before using S3QL, make sure to read the user's guide, especially +the 'Important Rules to Avoid Loosing Data' section. +Enter encryption password: +Confirm encryption password: +Generating random encryption key... +Creating metadata tables... +Dumping metadata... +..objects.. +..blocks.. +..inodes.. +..inode_blocks.. +..symlink_targets.. +..names.. +..contents.. +..ext_attributes.. +Compressing and uploading metadata... +Wrote 0.00 MB of compressed metadata. +# </pre></blockquote></p> + +<p>The next step is mounting the file system to make the storage available. + +<p><blockquote><pre> +# mount.s3ql --cachedir /var/lib/s3ql-cache --authfile /root/.s3ql/authinfo2 \ + --ssl --allow-root s3c://s.greenqloud.com:443/bucket-name /s3ql +Using 4 upload threads. +Downloading and decompressing metadata... +Reading metadata... +..objects.. +..blocks.. +..inodes.. +..inode_blocks.. +..symlink_targets.. +..names.. +..contents.. +..ext_attributes.. +Mounting filesystem... +# df -h /s3ql +Filesystem Size Used Avail Use% Mounted on +s3c://s.greenqloud.com:443/bucket-name 1.0T 0 1.0T 0% /s3ql +# +</pre></blockquote></p> + +<p>The file system is now ready for use. I use rsync to store my +backups in it, and as the metadata used by rsync is downloaded at +mount time, no network traffic (and storage cost) is triggered by +running rsync. To unmount, one should not use the normal umount +command, as this will not flush the cache to the cloud storage, but +instead running the umount.s3ql command like this: + +<p><blockquote><pre> +# umount.s3ql /s3ql +# +</pre></blockquote></p> + +<p>There is a fsck command available to check the file system and +correct any problems detected. This can be used if the local server +crashes while the file system is mounted, to reset the "already +mounted" flag. This is what it look like when processing a working +file system:</p> + +<p><blockquote><pre> +# fsck.s3ql --force --ssl s3c://s.greenqloud.com:443/bucket-name +Using cached metadata. +File system seems clean, checking anyway. +Checking DB integrity... +Creating temporary extra indices... +Checking lost+found... +Checking cached objects... +Checking names (refcounts)... +Checking contents (names)... +Checking contents (inodes)... +Checking contents (parent inodes)... +Checking objects (reference counts)... +Checking objects (backend)... +..processed 5000 objects so far.. +..processed 10000 objects so far.. +..processed 15000 objects so far.. +Checking objects (sizes)... +Checking blocks (referenced objects)... +Checking blocks (refcounts)... +Checking inode-block mapping (blocks)... +Checking inode-block mapping (inodes)... +Checking inodes (refcounts)... +Checking inodes (sizes)... +Checking extended attributes (names)... +Checking extended attributes (inodes)... +Checking symlinks (inodes)... +Checking directory reachability... +Checking unix conventions... +Checking referential integrity... +Dropping temporary indices... +Backing up old metadata... +Dumping metadata... +..objects.. +..blocks.. +..inodes.. +..inode_blocks.. +..symlink_targets.. +..names.. +..contents.. +..ext_attributes.. +Compressing and uploading metadata... +Wrote 0.89 MB of compressed metadata. +# +</pre></blockquote></p> + +<p>Thanks to the cache, working on files that fit in the cache is very +quick, about the same speed as local file access. Uploading large +amount of data is to me limited by the bandwidth out of and into my +house. Uploading 685 MiB with a 100 MiB cache gave me 305 kiB/s, +which is very close to my upload speed, and downloading the same +Debian installation ISO gave me 610 kiB/s, close to my download speed. +Both were measured using <tt>dd</tt>. So for me, the bottleneck is my +network, not the file system code. I do not know what a good cache +size would be, but suspect that the cache should e larger than your +working set.</p> + +<p>I mentioned that only one machine can mount the file system at the +time. If another machine try, it is told that the file system is +busy:</p> + +<p><blockquote><pre> +# mount.s3ql --cachedir /var/lib/s3ql-cache --authfile /root/.s3ql/authinfo2 \ + --ssl --allow-root s3c://s.greenqloud.com:443/bucket-name /s3ql +Using 8 upload threads. +Backend reports that fs is still mounted elsewhere, aborting. +# +</pre></blockquote></p> + +<p>The file content is uploaded when the cache is full, while the +metadata is uploaded once every 24 hour by default. To ensure the +file system content is flushed to the cloud, one can either umount the +file system, or ask S3QL to flush the cache and metadata using +s3qlctrl: + +<p><blockquote><pre> +# s3qlctrl upload-meta /s3ql +# s3qlctrl flushcache /s3ql +# +</pre></blockquote></p> + +<p>If you are curious about how much space your data uses in the +cloud, and how much compression and deduplication cut down on the +storage usage, you can use s3qlstat on the mounted file system to get +a report:</p> + +<p><blockquote><pre> +# s3qlstat /s3ql +Directory entries: 9141 +Inodes: 9143 +Data blocks: 8851 +Total data size: 22049.38 MB +After de-duplication: 21955.46 MB (99.57% of total) +After compression: 21877.28 MB (99.22% of total, 99.64% of de-duplicated) +Database size: 2.39 MB (uncompressed) +(some values do not take into account not-yet-uploaded dirty blocks in cache) +# +</pre></blockquote></p> + +<p>I mentioned earlier that there are several possible suppliers of +storage. I did not try to locate them all, but am aware of at least +<a href="https://www.greenqloud.com/">Greenqloud</a>, +<a href="http://drive.google.com/">Google Drive</a>, +<a href="http://aws.amazon.com/s3/">Amazon S3 web serivces</a>, +<a href="http://www.rackspace.com/">Rackspace</a> and +<a href="http://crowncloud.net/">Crowncloud</A>. The latter even +accept payment in Bitcoin. Pick one that suit your need. Some of +them provide several GiB of free storage, but the prize models are +quite different and you will have to figure out what suits you +best.</p> + +<p>While researching this blog post, I had a look at research papers +and posters discussing the S3QL file system. There are several, which +told me that the file system is getting a critical check by the +science community and increased my confidence in using it. One nice +poster is titled +"<a href="http://www.lanl.gov/orgs/adtsc/publications/science_highlights_2013/docs/pg68_69.pdf">An +Innovative Parallel Cloud Storage System using OpenStack’s SwiftObject +Store and Transformative Parallel I/O Approach</a>" by Hsing-Bung +Chen, Benjamin McClelland, David Sherrill, Alfred Torrez, Parks Fields +and Pamela Smith. Please have a look.</p> + +<p>Given my problems with different file systems earlier, I decided to +check out the mounted S3QL file system to see if it would be usable as +a home directory (in other word, that it provided POSIX semantics when +it come to locking and umask handling etc). Running +<a href="http://people.skolelinux.org/pere/blog/Testing_if_a_file_system_can_be_used_for_home_directories___.html">my +test code to check file system semantics</a>, I was happy to discover that +no error was found. So the file system can be used for home +directories, if one chooses to do so.</p> + +<p>If you do not want a locally file system, and want something that +work without the Linux fuse file system, I would like to mention the +<a href="http://www.tarsnap.com/">Tarsnap service</a>, which also +provide locally encrypted backup using a command line client. It have +a nicer access control system, where one can split out read and write +access, allowing some systems to write to the backup and others to +only read from it.</p> + +<p>As usual, if you use Bitcoin and want to show your support of my +activities, please send Bitcoin donations to my address +<b><a href="bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&label=PetterReinholdtsenBlog">15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b</a></b>.</p> - Oslo community mesh network - with NUUG and Hackeriet at Hausmania - http://people.skolelinux.org/pere/blog/Oslo_community_mesh_network___with_NUUG_and_Hackeriet_at_Hausmania.html - http://people.skolelinux.org/pere/blog/Oslo_community_mesh_network___with_NUUG_and_Hackeriet_at_Hausmania.html - Fri, 11 Oct 2013 14:10:00 +0200 - <p>Wireless mesh networks are self organising and self healing -networks that can be used to connect computers across small and large -areas, depending on the radio technology used. Normal wifi equipment -can be used to create home made radio networks, and there are several -successful examples like -<a href="http://www.freifunk.net/">Freifunk</a> and -<a href="http://www.awmn.net/">Athens Wireless Metropolitan Network</a> -(see -<a href="http://en.wikipedia.org/wiki/List_of_wireless_community_networks_by_region#Greece">wikipedia -for a large list</a>) around the globe. To give you an idea how it -work, check out the nice overview of the Kiel Freifunk community which -can be seen from their -<a href="http://freifunk.in-kiel.de/ffmap/nodes.html">dynamically -updated node graph and map</a>, where one can see how the mesh nodes -automatically handle routing and recover from nodes disappearing. -There is also a small community mesh network group in Oslo, Norway, -and that is the main topic of this blog post.</p> - -<p>I've wanted to check out mesh networks for a while now, and hoped -to do it as part of my involvement with the <a -href="http://www.nuug.no/">NUUG member organisation</a> community, and -my recent involvement in -<a href="https://wiki.debian.org/FreedomBox">the Freedombox project</a> -finally lead me to give mesh networks some priority, as I suspect a -Freedombox should use mesh networks to connect neighbours and family -when possible, given that most communication between people are -between those nearby (as shown for example by research on Facebook -communication patterns). It also allow people to communicate without -any central hub to tap into for those that want to listen in on the -private communication of citizens, which have become more and more -important over the years.</p> - -<p>So far I have only been able to find one group of people in Oslo -working on community mesh networks, over at the hack space -<a href="http://hackeriet.no/">Hackeriet</a> at Husmania. They seem to -have started with some Freifunk based effort using OLSR, called -<a href="http://oslo.freifunk.net/index.php?title=Main_Page">the Oslo -Freifunk project</a>, but that effort is now dead and the people -behind it have moved on to a batman-adv based system called -<a href="http://meshfx.org/trac">meshfx</a>. Unfortunately the wiki -site for the Oslo Freifunk project is no longer possible to update to -reflect this fact, so the old project page can't be updated to point to -the new project. A while back, the people at Hackeriet invited people -from the Freifunk community to Oslo to talk about mesh networks. I -came across this video where Hans Jørgen Lysglimt interview the -speakers about this talk (from -<a href="https://www.youtube.com/watch?v=N2Kd7CLkhSY">youtube</a>):</p> - -<p><iframe width="420" height="315" src="https://www.youtube.com/embed/N2Kd7CLkhSY" frameborder="0" allowfullscreen></iframe></p> - -<p>I mentioned OLSR and batman-adv, which are mesh routing protocols. -There are heaps of different protocols, and I am still struggling to -figure out which one would be "best" for some definitions of best, but -given that the community mesh group in Oslo is so small, I believe it -is best to hook up with the existing one instead of trying to create a -completely different setup, and thus I have decided to focus on -batman-adv for now. It sure help me to know that the very cool -<a href="http://www.servalproject.org/">Serval project in Australia</a> -is using batman-adv as their meshing technology when it create a self -organizing and self healing telephony system for disaster areas and -less industrialized communities. Check out this cool video presenting -that project (from -<a href="https://www.youtube.com/watch?v=30qNfzJCQOA">youtube</a>):</p> - -<p><iframe width="560" height="315" src="https://www.youtube.com/embed/30qNfzJCQOA" frameborder="0" allowfullscreen></iframe></p> - -<p>According to the wikipedia page on -<a href="http://en.wikipedia.org/wiki/Wireless_mesh_network">Wireless -mesh network</a> there are around 70 competing schemes for routing -packets across mesh networks, and OLSR, B.A.T.M.A.N. and -B.A.T.M.A.N. advanced are protocols used by several free software -based community mesh networks.</p> - -<p>The batman-adv protocol is a bit special, as it provide layer 2 -(as in ethernet ) routing, allowing ipv4 and ipv6 to work on the same -network. One way to think about it is that it provide a mesh based -vlan you can bridge to or handle like any other vlan connected to your -computer. The required drivers are already in the Linux kernel at -least since Debian Wheezy, and it is fairly easy to set up. A -<a href="http://www.open-mesh.org/projects/batman-adv/wiki/Quick-start-guide">good -introduction</a> is available from the Open Mesh project. These are -the key settings needed to join the Oslo meshfx network:</p> - -<p><table> -<tr><th>Setting</th><th>Value</th></tr> -<tr><td>Protocol / kernel module</td><td>batman-adv</td></tr> -<tr><td>ESSID</td><td>meshfx@hackeriet</td></tr> -<td>Channel / Frequency</td><td>11 / 2462</td></tr> -<td>Cell ID</td><td>02:BA:00:00:00:01</td> -</table></p> - -<p>The reason for setting ad-hoc wifi Cell ID is to work around bugs -in firmware used in wifi card and wifi drivers. (See a nice post from -VillageTelco about -"<a href="http://tiebing.blogspot.no/2009/12/ad-hoc-cell-splitting-re-post-original.html">Information -about cell-id splitting, stuck beacons, and failed IBSS merges!</a> -for details.) When these settings are activated and you have some -other mesh node nearby, your computer will be connected to the mesh -network and can communicate with any mesh node that is connected to -any of the nodes in your network of nodes. :)</p> - -<p>My initial plan was to reuse my old Linksys WRT54GL as a mesh node, -but that seem to be very hard, as I have not been able to locate a -firmware supporting batman-adv. If anyone know how to use that old -wifi access point with batman-adv these days, please let me know.</p> - -<p>If you find this project interesting and want to join, please join -us on IRC, either channel -<a href="irc://irc.freenode.net/#oslohackerspace">#oslohackerspace</a> -or <a href="irc://irc.freenode.net/#nuug">#nuug</a> on -irc.freenode.net.</p> - -<p>While investigating mesh networks in Oslo, I came across an old -research paper from the university of Stavanger and Telenor Research -and Innovation called -<a href="http://folk.uio.no/paalee/publications/netrel-egeland-iswcs-2008.pdf">The -reliability of wireless backhaul mesh networks</a> and elsewhere -learned that Telenor have been experimenting with mesh networks at -Grünerløkka in Oslo. So mesh networks are also interesting for -commercial companies, even though Telenor discovered that it was hard -to figure out a good business plan for mesh networking and as far as I -know have closed down the experiment. Perhaps Telenor or others would -be interested in a cooperation?</p> - -<p><strong>Update 2013-10-12</strong>: I was just -<a href="http://lists.alioth.debian.org/pipermail/freedombox-discuss/2013-October/005900.html">told -by the Serval project developers</a> that they no longer use -batman-adv (but are compatible with it), but their own crypto based -mesh system.</p> - - - - - Skolelinux / Debian Edu 7.1 install and overview video from Marcelo Salvador - http://people.skolelinux.org/pere/blog/Skolelinux___Debian_Edu_7_1_install_and_overview_video_from_Marcelo_Salvador.html - http://people.skolelinux.org/pere/blog/Skolelinux___Debian_Edu_7_1_install_and_overview_video_from_Marcelo_Salvador.html - Tue, 8 Oct 2013 17:10:00 +0200 - <p>The other day I was pleased and surprised to discover that Marcelo -Salvador had published a -<a href="https://www.youtube.com/watch?v=w-GgpdqgLFc">video on -Youtube</a> showing how to install the standalone Debian Edu / -Skolelinux profile. This is the profile intended for use at home or -on laptops that should not be integrated into the provided network -services (no central home directory, no Kerberos / LDAP directory etc, -in other word a single user machine). The result is 11 minutes long, -and show some user applications (seem to be rather randomly picked). -Missed a few of my favorites like celestia, planets and chromium -showing the <a href="http://www.zygotebody.com/">Zygote Body 3D model -of the human body</a>, but I guess he did not know about those or find -other programs more interesting. :) And the video do not show the -advantages I believe is one of the most valuable featuers in Debian -Edu, its central school server making it possible to run hundreds of -computers without hard drives by installing one central -<a href="http://www.ltsp.org/">LTSP server</a>.</p> - -<p>Anyway, check out the video, embedded below and linked to above:</p> - -<iframe width="420" height="315" src="http://www.youtube.com/embed/w-GgpdqgLFc" frameborder="0" allowfullscreen></iframe> - -<p>Are there other nice videos demonstrating Skolelinux? Please let -me know. :)</p> - - - - - Finally, Debian Edu Wheezy is released today! - http://people.skolelinux.org/pere/blog/Finally__Debian_Edu_Wheezy_is_released_today_.html - http://people.skolelinux.org/pere/blog/Finally__Debian_Edu_Wheezy_is_released_today_.html - Sun, 29 Sep 2013 10:20:00 +0200 - <p>A few hours ago, the announcement for the first stable release of -Debian Edu Wheezy went out from the Debian publicity team. The -complete announcement text can be found at -<a href="http://www.debian.org/News/2013/20130928">the Debian News -section</a>, translated to several languages. Please check it out.</p> - -<p>There is one minor known problem that we will fix very soon. One -can not install a amd64 Thin Client Server using PXE, as the /var/ -partition is too small. A workaround is to extend the partition (use -lvresize + resize2fs in tty 2 while installing).</p> - - - - - Videos about the Freedombox project - for inspiration and learning - http://people.skolelinux.org/pere/blog/Videos_about_the_Freedombox_project___for_inspiration_and_learning.html - http://people.skolelinux.org/pere/blog/Videos_about_the_Freedombox_project___for_inspiration_and_learning.html - Fri, 27 Sep 2013 14:10:00 +0200 - <p>The <a href="http://www.freedomboxfoundation.org/">Freedombox -project</a> have been going on for a while, and have presented the -vision, ideas and solution several places. Here is a little -collection of videos of talks and presentation of the project.</p> + EU-domstolen bekreftet i dag at datalagringsdirektivet er ulovlig + http://people.skolelinux.org/pere/blog/EU_domstolen_bekreftet_i_dag_at_datalagringsdirektivet_er_ulovlig.html + http://people.skolelinux.org/pere/blog/EU_domstolen_bekreftet_i_dag_at_datalagringsdirektivet_er_ulovlig.html + Tue, 8 Apr 2014 11:30:00 +0200 + <p>I dag kom endelig avgjørelsen fra EU-domstolen om +datalagringsdirektivet, som ikke overraskende ble dømt ulovlig og i +strid med borgernes grunnleggende rettigheter. Hvis du lurer på hva +datalagringsdirektivet er for noe, så er det +<a href="http://tv.nrk.no/program/koid75005313/tema-dine-digitale-spor-datalagringsdirektivet">en +flott dokumentar tilgjengelig hos NRK</a> som jeg tidligere +<a href="http://people.skolelinux.org/pere/blog/Dokumentaren_om_Datalagringsdirektivet_sendes_endelig_p__NRK.html">har +anbefalt</a> alle å se.</p> -<ul> +<p>Her er et liten knippe nyhetsoppslag om saken, og jeg regner med at +det kommer flere ut over dagen. Flere kan finnes +<a href="http://www.mylder.no/?drill=datalagringsdirektivet&intern=1">via +mylder</a>.</p> -<li><a href="http://www.youtube.com/watch?v=ukvUz5taxvA">FreedomBox - -2,5 minute marketing film</a> (Youtube)</li> +<p><ul> -<li><a href="http://www.youtube.com/watch?v=SzW25QTVWsE">Eben Moglen -discusses the Freedombox on CBS news 2011</a> (Youtube)</li> +<li><a href="http://e24.no/digital/eu-domstolen-datalagringsdirektivet-er-ugyldig/22879592">EU-domstolen: +Datalagringsdirektivet er ugyldig</a> - e24.no 2014-04-08 -<li><a href="http://www.youtube.com/watch?v=Ae8SZbxfE0g">Eben Moglen - -Freedom in the Cloud - Software Freedom, Privacy and and Security for -Web 2.0 and Cloud computing at ISOC-NY Public Meeting 2010</a> -(Youtube)</li> +<li><a href="http://www.aftenposten.no/nyheter/iriks/EU-domstolen-Datalagringsdirektivet-er-ulovlig-7529032.html">EU-domstolen: +Datalagringsdirektivet er ulovlig</a> - aftenposten.no 2014-04-08 -<li><a href="http://www.youtube.com/watch?v=vNaIji_3xBE">Fosdem 2011 -Keynote by Eben Moglen presenting the Freedombox</a> (Youtube)</li> +<li><a href="http://www.aftenposten.no/nyheter/iriks/politikk/Krever-DLD-stopp-i-Norge-7530086.html">Krever +DLD-stopp i Norge</a> - aftenposten.no 2014-04-08 -<li><a href="http://www.youtube.com/watch?v=9bDDUyJSQ9s">Presentation of -the Freedombox by James Vasile at Elevate in Gratz 2011</a> (Youtube)</li> +<li><a href="http://www.p4.no/story.aspx?id=566431">Apenes: - En +gledens dag</a> - p4.no 2014-04-08 -<li><a href="http://www.youtube.com/watch?v=zQTmnk27g9s"> Freedombox - -Discovery, Identity, and Trust by Nick Daly at Freedombox Hackfest New -York City in 2012</a> (Youtube)</li> +<li><a href="http://www.nrk.no/norge/_-datalagringsdirektivet-er-ugyldig-1.11655929">EU-domstolen: +– Datalagringsdirektivet er ugyldig</a> - nrk.no 2014-04-08</li> -<li><a href="http://www.youtube.com/watch?v=tkbSB4Ba7Ck">Introduction -to the Freedombox at Freedombox Hackfest New York City in 2012</a> -(Youtube)</li> +<li><a href="http://www.vg.no/nyheter/utenriks/data-og-nett/eu-domstolen-datalagringsdirektivet-er-ugyldig/a/10130280/">EU-domstolen: +Datalagringsdirektivet er ugyldig</a> - vg.no 2014-04-08</li> -<li><a href="http://www.youtube.com/watch?v=z-P2Jaeg0aQ">Freedom, Out -of the Box! by Bdale Garbee at linux.conf.au Ballarat, 2012</a> (Youtube) </li> +<li><a href="http://www.dagbladet.no/2014/04/08/nyheter/innenriks/datalagringsdirektivet/personvern/32711646/">- +Vi bør skrote hele datalagringsdirektivet</a> - dagbladet.no +2014-04-08</li> -<li><a href="https://archive.fosdem.org/2013/schedule/event/freedombox/">Freedombox -1.0 by Eben Moglen and Bdale Garbee at Fosdem 2013</a> (FOSDEM) </li> +<li><a href="http://www.digi.no/928137/eu-domstolen-dld-er-ugyldig">EU-domstolen: +DLD er ugyldig</a> - digi.no 2014-04-08</li> -<li><a href="http://www.youtube.com/watch?v=e1LpYX2zVYg">What is the -FreedomBox today by Bdale Garbee at Debconf13 in Vaumarcus -2013</a> (Youtube)</li> +<li><a href="http://www.irishtimes.com/business/sectors/technology/european-court-declares-data-retention-directive-invalid-1.1754150">European +court declares data retention directive invalid</a> - irishtimes.com +2014-04-08</li> -</ul> +<li><a href="http://www.reuters.com/article/2014/04/08/us-eu-data-ruling-idUSBREA370F020140408?feedType=RSS">EU +court rules against requirement to keep data of telecom users</a> - +reuters.com 2014-04-08</li> -<p>A larger list is available from -<a href="https://wiki.debian.org/FreedomBox/TalksAndPresentations">the -Freedombox Wiki</a>.</p> - -<p>On other news, I am happy to report that Freedombox based on Debian -Jessie is coming along quite well, and soon both Owncloud and using -Tor should be available for testers of the Freedombox solution. :) In -a few weeks I hope everything needed to test it is included in Debian. -The withsqlite package is already in Debian, and the plinth package is -pending in NEW. The third and vital part of that puzzle is the -metapackage/setup framework, which is still pending an upload. Join -us on <a href="irc://irc.debian.org:6667/%23freedombox">IRC -(#freedombox on irc.debian.org)</a> and -<a href="http://lists.alioth.debian.org/mailman/listinfo/freedombox-discuss">the -mailing list</a> if you want to help make this vision come true.</p> +</ul> +</p> + +<p>Jeg synes det er veldig fint at nok en stemme slår fast at +totalitær overvåkning av befolkningen er uakseptabelt, men det er +fortsatt like viktig å beskytte privatsfæren som før, da de +teknologiske mulighetene fortsatt finnes og utnyttes, og jeg tror +innsats i prosjekter som +<a href="https://wiki.debian.org/FreedomBox">Freedombox</a> og +<a href="http://www.dugnadsnett.no/">Dugnadsnett</a> er viktigere enn +noen gang.</p> + +<p><strong>Update 2014-04-08 12:10</strong>: Kronerullingen for å +stoppe datalagringsdirektivet i Norge gjøres hos foreningen +<a href="http://www.digitaltpersonvern.no/">Digitalt Personvern</a>, +som har samlet inn 843 215,- så langt men trenger nok mye mer hvis + +ikke Høyre og Arbeiderpartiet bytter mening i saken. Det var +<a href="http://www.holderdeord.no/parliament-issues/48650">kun +partinene Høyre og Arbeiderpartiet</a> som stemte for +Datalagringsdirektivet, og en av dem må bytte mening for at det skal +bli flertall mot i Stortinget. Se mer om saken +<a href="http://www.holderdeord.no/issues/69-innfore-datalagringsdirektivet">Holder +de ord</a>.</p> - Third and probably last beta release of Debian Edu Wheezy - http://people.skolelinux.org/pere/blog/Third_and_probably_last_beta_release_of_Debian_Edu_Wheezy.html - http://people.skolelinux.org/pere/blog/Third_and_probably_last_beta_release_of_Debian_Edu_Wheezy.html - Mon, 16 Sep 2013 21:30:00 +0200 - <p>The third wheezy based beta release of Debian Edu was wrapped up -today. This is the release announcement from Holger Levsen:</p> - -<blockquote> -<p>Hi,</p> - -<p>it is my pleasure to announce the third beta release (beta 2 for -short) of <a href="http://www.skolelinux.org/">Debian Edu / -Skolelinux</a> based on Debian Wheezy!</p> - -<p>Please test these images extensivly, if no new problems are found -we plan to do this final Debian Edu Wheezy release this coming -weekend. We are not aware of any major problems or blockers in beta2, -if you find something, please notify us immediately!</p> - -<p>(More about the remaining steps for the Edu Wheezy release in -another mail to the edu list tonight or tomorrow...)</p> - -<p>Noteworthy changes and software updates for Debian Edu 7.1+edu0~b2 -compared to beta1:</p> - -<ul> - -<li>The KDE proxy setup has been adjusted to use the provided wpad.dat. This -also gets Chromium to use this proxy.</li> -<li>Install kdepim-groupware with KDE desktops to make sure korganizer -understand ical/dav sources.</li> -<li>Increased default maximum size of /var/spool/squid and /skole/backup on the -main server.</li> -<li>A source DVD image containing all source packages is now available as well.</li> -<li>Updates for chromium (29.0.1547.57-1~deb7u1), imagemagick -(6.7.7.10-5+deb7u2), php5 (5.4.4-14+deb7u4), libmodplug -(0.8.8.4-3+deb7u1+git20130828), tiff (4.0.2-6+deb7u2), linux-image -(3.2.0-4-486_3.2.46-1+deb7u1).</li> - -</ul> - -<p>Where to get it:</p> - -<p>To download the multiarch netinstall CD release you can use</p> - -<ul> -<li><a href="ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-CD.iso">ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-CD.iso</a></li> -<li><a href="http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-CD.iso">http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-CD.iso</a></li> -<li>rsync -avzP ftp.skolelinux.org::skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-CD.iso .</li> -</ul> - -<p>The SHA1SUM of this image is: 3a1c89f4666df80eebcd46c5bf5fedb866f9472f</p> - -<p>To download the multiarch USB stick ISO release you can use -<ul> -<li><a href="ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-USB.iso">ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-USB.iso</a></li> -<li><a href="http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-USB.iso">http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-USB.iso</a></li> -<li>rsync -avzP ftp.skolelinux.org::skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-USB.iso .</li> -</ul> - -<p>The SHA1SUM of this image is: 702d1718548f401c74bfa6df9f032cc3ee16597e</p> - -<p>The Source DVD image has the filename -debian-edu-7.1+edu0~b2-source-DVD.iso and the SHA1SUM -089eed8b3f962db47aae1f6a9685e9bb2fa30ca5 and is available the same way -as the other isos.</p> - -<p>How to report bugs</p> - -<p>For information how to report bugs please see -<br><a href="http://wiki.debian.org/DebianEdu/HowTo/ReportBugs">http://wiki.debian.org/DebianEdu/HowTo/ReportBugs</a></p> - - -<p>About Debian Edu and Skolelinux</p> - -<p>Debian Edu, also known as Skolelinux, is a Linux distribution based -on Debian providing an out-of-the box environment of a completely -configured school network. Immediately after installation a school -server running all services needed for a school network is set up just -waiting for users and machines being added via GOsa², a comfortable -Web-UI. A netbooting environment is prepared using PXE, so after -initial installation of the main server from CD or USB stick all other -machines can be installed via the network. The provided school server -provides LDAP database and Kerberos authentication service, -centralized home directories, DHCP server, web proxy and many other -services. The desktop contains more than 60 educational software -packages and more are available from the Debian archive, and schools -can choose between KDE, Gnome, LXDE and Xfce desktop environment.</p> - -<p>This is the seventh test release based on Debian Wheezy. Basically -this is an updated and slightly improved version compared to the -Squeeze release.</p> - -<p>Notes for upgrades from Alpha Prereleases</p> - -<p>Alpha based installations should reinstall or downgrade the -versions of gosa and libpam-mklocaluser to the ones used in this beta -release. Both alpha and beta0 based installations should reinstall or -deal with gosa.conf manually; there are two options: (1) Keep -gosa.conf and edit this file as outlined on the mailing list. (2) -Accept the new version of gosa.conf and replace both contained admin -password placeholders with the password hashes found in the old one -(backup copy!). In both cases all users need to change their password -to make sure a password is set for CIFS access to their home -directory.</p> - - -<p>cheers, -<br> Holger</p> -</blockquote> + ReactOS Windows clone - nice free software + http://people.skolelinux.org/pere/blog/ReactOS_Windows_clone___nice_free_software.html + http://people.skolelinux.org/pere/blog/ReactOS_Windows_clone___nice_free_software.html + Tue, 1 Apr 2014 12:10:00 +0200 + <p>Microsoft have announced that Windows XP reaches its end of life +2014-04-08, in 7 days. But there are heaps of machines still running +Windows XP, and depending on Windows XP to run their applications, and +upgrading will be expensive, both when it comes to money and when it +comes to the amount of effort needed to migrate from Windows XP to a +new operating system. Some obvious options (buy new a Windows +machine, buy a MacOSX machine, install Linux on the existing machine) +are already well known and covered elsewhere. Most of them involve +leaving the user applications installed on Windows XP behind and +trying out replacements or updated versions. In this blog post I want +to mention one strange bird that allow people to keep the hardware and +the existing Windows XP applications and run them on a free software +operating system that is Windows XP compatible.</p> + +<p><a href="http://www.reactos.org/">ReactOS</a> is a free software +operating system (GNU GPL licensed) working on providing a operating +system that is binary compatible with Windows, able to run windows +programs directly and to use Windows drivers for hardware directly. +The project goal is for Windows user to keep their existing machines, +drivers and software, and gain the advantages from user a operating +system without usage limitations caused by non-free licensing. It is +a Windows clone running directly on the hardware, so quite different +from the approach taken by <a href="http://www.winehq.org/">the Wine +project</a>, which make it possible to run Windows binaries on +Linux.</p> + +<p>The ReactOS project share code with the Wine project, so most +shared libraries available on Windows are already implemented already. +There is also a software manager like the one we are used to on Linux, +allowing the user to install free software applications with a simple +click directly from the Internet. Check out the +<a href="http://www.reactos.org/screenshots">screen shots on the +project web site</a> for an idea what it look like (it looks just like +Windows before metro).</p> + +<p>I do not use ReactOS myself, preferring Linux and Unix like +operating systems. I've tested it, and it work fine in a virt-manager +virtual machine. The browser, minesweeper, notepad etc is working +fine as far as I can tell. Unfortunately, my main test application +is the software included on a CD with the Lego Mindstorms NXT, which +seem to install just fine from CD but fail to leave any binaries on +the disk after the installation. So no luck with that test software. +No idea why, but hope someone else figure out and fix the problem. +I've tried the ReactOS Live ISO on a physical machine, and it seemed +to work just fine. If you like Windows and want to keep running your +old Windows binaries, check it out by +<a href="http://www.reactos.org/download">downloading</a> the +installation CD, the live CD or the preinstalled virtual machine +image.</p> - Recipe to test the Freedombox project on amd64 or Raspberry Pi - http://people.skolelinux.org/pere/blog/Recipe_to_test_the_Freedombox_project_on_amd64_or_Raspberry_Pi.html - http://people.skolelinux.org/pere/blog/Recipe_to_test_the_Freedombox_project_on_amd64_or_Raspberry_Pi.html - Tue, 10 Sep 2013 14:20:00 +0200 - <p>I was introduced to the -<a href="http://www.freedomboxfoundation.org/">Freedombox project</a> -in 2010, when Eben Moglen presented his vision about serving the need -of non-technical people to keep their personal information private and -within the legal protection of their own homes. The idea is to give -people back the power over their network and machines, and return -Internet back to its intended peer-to-peer architecture. Instead of -depending on a central service, the Freedombox will give everyone -control over their own basic infrastructure.</p> - -<p>I've intended to join the effort since then, but other tasks have -taken priority. But this summers nasty news about the misuse of trust -and privilege exercised by the "western" intelligence gathering -communities increased my eagerness to contribute to a point where I -actually started working on the project a while back.</p> - -<p>The <a href="https://alioth.debian.org/projects/freedombox/">initial -Debian initiative</a> based on the vision from Eben Moglen, is to -create a simple and cheap Debian based appliance that anyone can hook -up in their home and get access to secure and private services and -communication. The initial deployment platform have been the -<a href="http://www.globalscaletechnologies.com/t-dreamplugdetails.aspx">Dreamplug</a>, -which is a piece of hardware I do not own. So to be able to test what -the current Freedombox setup look like, I had to come up with a way to install -it on some hardware I do have access to. I have rewritten the -<a href="https://github.com/NickDaly/freedom-maker">freedom-maker</a> -image build framework to use .deb packages instead of only copying -setup into the boot images, and thanks to this rewrite I am able to -set up any machine supported by Debian Wheezy as a Freedombox, using -the previously mentioned deb (and a few support debs for packages -missing in Debian).</p> - -<p>The current Freedombox setup consist of a set of bootstrapping -scripts -(<a href="https://github.com/petterreinholdtsen/freedombox-setup">freedombox-setup</a>), -and a administrative web interface -(<a href="https://github.com/NickDaly/Plinth">plinth</a> + exmachina + -withsqlite), as well as a privacy enhancing proxy based on -<a href="http://packages.qa.debian.org/privoxy">privoxy</a> -(freedombox-privoxy). There is also a web/javascript based XMPP -client (<a href="http://packages.qa.debian.org/jwchat">jwchat</a>) -trying (unsuccessfully so far) to talk to the XMPP server -(<a href="http://packages.qa.debian.org/ejabberd">ejabberd</a>). The -web interface is pluggable, and the goal is to use it to enable OpenID -services, mesh network connectivity, use of TOR, etc, etc. Not much of -this is really working yet, see -<a href="https://github.com/NickDaly/freedombox-todos/blob/master/TODO">the -project TODO</a> for links to GIT repositories. Most of the code is -on github at the moment. The HTTP proxy is operational out of the -box, and the admin web interface can be used to add/remove plinth -users. I've not been able to do anything else with it so far, but -know there are several branches spread around github and other places -with lots of half baked features.</p> - -<p>Anyway, if you want to have a look at the current state, the -following recipes should work to give you a test machine to poke -at.</p> - -<p><strong>Debian Wheezy amd64</strong></p> - -<ol> - -<li>Fetch normal Debian Wheezy installation ISO.</li> -<li>Boot from it, either as CD or USB stick.</li> -<li><p>Press [tab] on the boot prompt and add this as a boot argument -to the Debian installer:<p> -<pre>url=<a href="http://www.reinholdtsen.name/freedombox/preseed-wheezy.dat">http://www.reinholdtsen.name/freedombox/preseed-wheezy.dat</a></pre></li> - -<li>Answer the few language/region/password questions and pick disk to -install on.</li> - -<li>When the installation is finished and the machine have rebooted a -few times, your Freedombox is ready for testing.</li> - -</ol> - -<p><strong>Raspberry Pi Raspbian</strong></p> - -<ol> - -<li>Fetch a Raspbian SD card image, create SD card.</li> -<li>Boot from SD card, extend file system to fill the card completely.</li> -<li><p>Log in and add this to /etc/sources.list:</p> -<pre> -deb <a href="http://www.reinholdtsen.name/freedombox/">http://www.reinholdtsen.name/freedombox</a> wheezy main -</pre></li> -<li><p>Run this as root:</p> -<pre> -wget -O - http://www.reinholdtsen.name/freedombox/BE1A583D.asc | \ - apt-key add - -apt-get update -apt-get install freedombox-setup -/usr/lib/freedombox/setup -</pre></li> -<li>Reboot into your freshly created Freedombox.</li> - -</ol> - -<p>You can test it on other architectures too, but because the -freedombox-privoxy package is binary, it will only work as intended on -the architectures where I have had time to build the binary and put it -in my APT repository. But do not let this stop you. It is only a -short "<tt>apt-get source -b freedombox-privoxy</tt>" away. :)</p> - -<p>Note that by default Freedombox is a DHCP server on the -192.168.1.0/24 subnet, so if this is your subnet be careful and turn -off the DHCP server by running "<tt>update-rc.d isc-dhcp-server -disable</tt>" as root.</p> - -<p>Please let me know if this works for you, or if you have any -problems. We gather on the IRC channel -<a href="irc://irc.debian.org:6667/%23freedombox">#freedombox</a> on -irc.debian.org and the -<a href="http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss">project -mailing list</a>.</p> - -<p>Once you get your freedombox operational, you can visit -<tt>http://your-host-name:8001/</tt> to see the state of the plint -welcome screen (dead end - do not be surprised if you are unable to -get past it), and next visit <tt>http://your-host-name:8001/help/</tt> -to look at the rest of plinth. The default user is 'admin' and the -default password is 'secret'.</p> + Debian Edu interview: Roger Marsal + http://people.skolelinux.org/pere/blog/Debian_Edu_interview__Roger_Marsal.html + http://people.skolelinux.org/pere/blog/Debian_Edu_interview__Roger_Marsal.html + Sun, 30 Mar 2014 11:40:00 +0200 + <p><a href="http://www.skolelinux.org/">Debian Edu / Skolelinux</a> +keep gaining new users. Some weeks ago, a person showed up on IRC, +<a href="irc://irc.debian.org/#debian-edu">#debian-edu</a>, with a +wish to contribute, and I managed to get a interview with this great +contributor Roger Marsal to learn more about his background.</p> + +<p><strong>Who are you, and how do you spend your days?</strong></p> + +<p>My name is Roger Marsal, I'm 27 years old (1986 generation) and I +live in Barcelona, Spain. I've got a strong business background and I +work as a patrimony manager and as a real estate agent. Additionally, +I've co-founded a British based tech company that is nowadays on the +last development phase of a new social networking concept.</p> + +<p>I'm a Linux enthusiast that started its journey with Ubuntu four years +ago and have recently switched to Debian seeking rock solid stability +and as a necessary step to gain expertise.</p> + +<p>In a nutshell, I spend my days working and learning as much as I +can to face both my job, entrepreneur project and feed my Linux +hunger.</p> + +<p><strong>How did you get in contact with the Skolelinux / Debian Edu +project?</strong></p> + +<p>I discovered the <a href="http://www.ltsp.org/">LTSP</a> advantages +with "Ubuntu 12.04 alternate install" and after a year of use I +started looking for an alternative. Even though I highly value and +respect the Ubuntu project, I thought it was necessary for me to +change to a more robust and stable alternative. As far as I was using +Debian on my personal laptop I thought it would be fine to install +Debian and configure an LTSP server myself. Surprised, I discovered +that the Debian project also supported a kind of Edubuntu equivalent, +and after having some pain I obtained a Debian Edu network up and +running. I just loved it.</p> + +<p><strong>What do you see as the advantages of Skolelinux / Debian +Edu?</strong></p> + +<p>I found a main advantage in that, once you know "the tips and +tricks", a new installation just works out of the box. It's the most +complete alternative I've found to create an LTSP network. All the +other distributions seems to be made of plastic, Debian Edu seems to +be made of steel.</p> + +<p><strong>What do you see as the disadvantages of Skolelinux / Debian +Edu?</strong></p> + +<p>I found two main disadvantages.</p> + +<p>I'm not an expert but I've got notions and I had to spent a considerable +amount of time trying to bring up a standard network topology. I'm quite +stubborn and I just worked until I did but I'm sure many people with few +resources (not big schools, but academies for example) would have switched +or dropped.</p> + +<p>It's amazing how such a complex system like Debian Edu has achieved +this out-of-the-box state. Even though tweaking without breaking gets +more difficult, as more factors have to be considered. This can +discourage many people too.</p> + +<p><strong>Which free software do you use daily?</strong></p> + +<p>I use Debian, Firefox, Okular, Inkscape, LibreOffice and +Virtualbox.</p> + + +<p><strong>Which strategy do you believe is the right one to use to +get schools to use free software?</strong></p> + +<p>I don't think there is a need for a particular strategy. The free +attribute in both "freedom" and "no price" meanings is what will +really bring free software to schools. In my experience I can think of +the <a href="http://www.r-project.org/">"R" statistical language</a>; a +few years a ago was an extremely nerd tool for university people. +Today it's being increasingly used to teach statistics at many +different level of studies. I believe free and open software will +increasingly gain popularity, but I'm sure schools will be one of the +first scenarios where this will happen.</p> - Datalagringsdirektivet gjør at Oslo Høyre og Arbeiderparti ikke får min stemme i år - http://people.skolelinux.org/pere/blog/Datalagringsdirektivet_gj_r_at_Oslo_H_yre_og_Arbeiderparti_ikke_f_r_min_stemme_i__r.html - http://people.skolelinux.org/pere/blog/Datalagringsdirektivet_gj_r_at_Oslo_H_yre_og_Arbeiderparti_ikke_f_r_min_stemme_i__r.html - Sun, 8 Sep 2013 20:40:00 +0200 - <p>I 2011 raderte et stortingsflertall bestående av Høyre og -Arbeiderpartiet vekk en betydelig del av privatsfæren til det norske -folk. Det ble vedtatt at det skulle registreres og lagres i et halvt -år hvor alle som bærer på en mobiltelefon befinner seg, hvem de -snakker med og hvor lenge de snakket sammen. Det skal også -registreres hvem de sendte SMS-meldinger til, hvem en har sendt epost -til, og hvilke nett-tjenere en besøkte. Saken er kjent som -<a href="http://beta.holderdeord.no/issues/innfore-datalagringsdirektivet">Datalagringsdirektivet -(DLD)</a>, og innebærer at alle innbyggerne og andre innenfor Norges -grenser overvåkes døgnet rundt. Det ble i praksis innført brev og -besøkskontroll av hele befolkningen. Rapporter fra de landene som -allerede har innført slik total lagring av borgernes -kommunikasjonsmønstre forteller at det ikke hjelper i -kriminalitetsbekjempelsen. Den norske prislappen blir mange hundre -millioner, uten at det ser ut til å bidra positivt til politiets -arbeide. Jeg synes flere hundre millioner i stedet burde vært brukt -på noe som kan dokumenteres å ha effekt i kriminalitetsbekjempelsen. -Se mer på -<a href="http://no.wikipedia.org/wiki/Datalagringsdirektivet">Wikipedia</a> -og <a href="http://www.uhuru.biz/?cat=84">Jon Wessel-Aas</a>.</p> - -<p>Hva er problemet, tenkter du kanskje? Et åpenbart problem er at -medienes kildevern i praksis blir radert ut. Den innsamlede -informasjonen gjør det mulig å finne ut hvem som har snakket med -journalister på telefon, SMS og epost, og hvem som har vært i nærheten -av journalister så sant begge bar med seg en telefon. Et annet er at -advokatvernet blir sterkt redusert, der politiet kan finne ut hvem -som har snakket med en advokat når, eller vært i møter en med advokat. -Et tredje er at svært personlig informasjon kan avledes fra hvilke -nettsteder en har besøkt. Har en besøkt hivnorge.no, -swingersnorge.com eller andre sider som kan brukes til avlede -interesser som hører til privatsfæren, vil denne informasjonen være -tilgjengelig takket være datalagringsdirektivet.</p> - -<p>De fleste partiene var mot, kun to partier stemte for. Høyre og -Arbeiderpartiet. Og både Høyre og Arbeiderpartiet i Oslo har -DLD-forkjempere på toppen av sine lister (har ikke sjekket de andre -fylkene). Det er dermed helt uaktuelt for meg å stemme på disse -partiene. Her er oversikten over partienes valglister i Oslo, med -informasjon om hvem som stemte hva i første DLD-votering i Stortinget, -basert på informasjon fra mine venner i -<a href="http://beta.holderdeord.no/votes/1301946411e">Holder de -Ord</a> samt <a href="http://data.stortinget.no/">data.stortinget.no</a>. -Først ut er stortingslista fra Høyre for Oslo:</p> - -<style type="text/css"> -.for {background-color:#F5A9A9;} -.mot {background-color:#A9F5BC;} -.ukjent { } -</style> - -<table> -<tr><th>#</th><th>Navn, fødselsår og valgkrets</th><th>Stemme/kommentar</th></tr> - -<tr class="for"><td>1.</td> -<td>Ine Marie Eriksen Søreide (1976), Gamle Oslo</td> -<td>Stemte for DLD</td></tr> - -<tr class="mot"><td>2.</td> -<td>Nikolai Astrup (1978), Frogner</td> -<td>Stemte mot DLD</td></tr> - -<tr class="mot"><td>3.</td> -<td>Michael Tetzschner (1954), Vestre Aker</td> -<td>Stemte mot DLD</td> - -<tr class="ukjent"><td>4.</td> -<td>Kristin Vinje (1963), Nordre Aker</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>5.</td> -<td>Mudassar Hussain Kapur (1976), Nordstrand</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>6.</td> -<td>Stefan Magnus B. Heggelund (1984), Grünerløkka</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>7.</td> -<td>Heidi Nordby Lunde (1973), Grünerløkka</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>8.</td> -<td>Frode Helgerud (1950), Frogner</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>9.</td> -<td>Afshan Rafiq (1975), Stovner</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>10.</td> -<td>Astrid Nøklebye Heiberg (1936), Frogner</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>11.</td> -<td>Camilla Strandskog (1984) St.Hanshaugen</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>12.</td> -<td>John Christian Elden (1967), Ullern</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>13.</td> -<td>Berit Solli (1972), Alna</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>14.</td> -<td>Ola Kvisgaard (1963), Frogner</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>15.</td> -<td>James Stove Lorentzen (1957), Vestre Aker</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>16.</td> -<td>Gülsüm Koc (1987), Stovner</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>17.</td> -<td>Jon Ole Whist (1976), Grünerløkka</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>18.</td> -<td>Maren Eline Malthe-Sørenssen (1971), Vestre Aker</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>19.</td> -<td>Ståle Hagen (1968), Søndre Nordstrand</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>20.</td> -<td>Kjell Omdal Erichsen (1978), Sagene</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>21.</td> -<td>Saida R. Begum (1987), Grünerløkka</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>22.</td> -<td>Torkel Brekke (1970), Nordre Aker</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>23.</td> -<td>Sverre K. Seeberg (1950), Vestre Aker</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>24.</td> -<td>Julie Margrethe Brodtkorb (1974), Ullern</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td>25.</td> -<td>Fabian Stang (1955), Frogner</td> -<td>Ikke til stede</td></tr> - -</table> - -<p>Deretter har vi stortingslista fra Arbeiderpartiet for Oslo:</p> - -<table> - -<tr><th>#</th><th>Navn, fødselsår og valgkrets</th><th>Stemme/kommentar</th></tr> - -<tr class="for"><td>1.</td> -<td>Jens Stoltenberg (1959), Frogner</td> -<td>Ikke til stede i Stortinget, leder av regjeringen som fremmet forslaget</td></tr> - -<tr class="for"><td>2.</td> -<td>Hadia Tajik (1983), Grünerløkka</td> -<td>Stemte for DLD</td></tr> - -<tr class="for"><td> 3.</td> -<td>Jonas Gahr Støre (1960), Vestre Aker</td> -<td>Ikke til stede i Stortinget, medlem av regjeringen som fremmet forslaget</td></tr> - -<tr class="for"><td> 4.</td> -<td>Marianne Marthinsen (1980), Grünerløkka</td> -<td>Stemte for DLD</td></tr> - -<tr class="for"><td> 5.</td> -<td>Jan Bøhler (1952), Alna</td> -<td>Stemte for DLD</td></tr> - -<tr class="for"><td> 6.</td> -<td>Marit Nybakk (1947), Frogner</td> -<td>Stemte for DLD</td></tr> - -<tr class="for"><td> 7.</td> -<td>Truls Wickholm (1978), Sagene</td> -<td>Stemte for DLD</td></tr> - -<tr class="ukjent"><td> 8.</td> -<td>Prableen Kaur (1993), Grorud</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td> 9.</td> -<td>Vegard Grøslie Wennesland (1983), St.Hanshaugen</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td> 10.</td> -<td>Inger Helene Vaaten (1975), Grorud</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td> 11.</td> -<td>Ivar Leveraas (1939), Alna</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td> 12.</td> -<td>Grete Haugdal (1971), Gamle Oslo</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td> 13.</td> -<td>Olav Tønsberg (1948), Alna</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td> 14.</td> -<td>Khamshajiny Gunaratnam (1988), Grorud</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td> 15.</td> -<td>Fredrik Mellem (1969), Sagene</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td> 16.</td> -<td>Brit Axelsen (1945), Stovner</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td> 17.</td> -<td>Dag Bayegan-Harlem (1977), Ullern</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td> 18.</td> -<td>Kristin Sandaker (1963), Østeinsjø</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td> 19.</td> -<td>Bashe Musse (1965), Grünerløkka</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td> 20.</td> -<td>Torunn Kanutte Husvik (1983), St. Hanshaugen</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td> 21.</td> -<td>Steinar Andersen (1947), Nordstrand</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td> 22.</td> -<td>Anne Cathrine Berger (1972), Sagene</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td> 23.</td> -<td>Khalid Mahmood (1959), Østensjø</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td> 24.</td> -<td>Munir Jaber (1990), Alna</td> -<td>Ikke til stede</td></tr> - -<tr class="ukjent"><td> 25.</td> -<td>Libe Solberg Rieber-Mohn (1965), Frogner</td> -<td>Ikke til stede</td></tr> - -</table> - -<p>Hvilket parti får så min stemme i år. Jeg tror det blir -<a href="http://piratpartiet.no/">Piratpartiet</a>. Hvis de kan bidra -til at det kommer noen inn på Stortinget med teknisk peiling, så får -kanskje ikke overvåkningsgalskapen like fritt spillerom som det har -hatt så langt.</p> - + Dokumentaren om Datalagringsdirektivet sendes endelig på NRK + http://people.skolelinux.org/pere/blog/Dokumentaren_om_Datalagringsdirektivet_sendes_endelig_p__NRK.html + http://people.skolelinux.org/pere/blog/Dokumentaren_om_Datalagringsdirektivet_sendes_endelig_p__NRK.html + Wed, 26 Mar 2014 09:50:00 +0100 + <p><a href="http://www.nuug.no/">Foreningen NUUG</a> melder i natt at +NRK nå har bestemt seg for +<a href="http://www.nuug.no/news/NRK_viser_filmen_om_Datalagringsdirektivet_f_rste_gang_2014_03_31.shtml">når +den norske dokumentarfilmen om datalagringsdirektivet skal +sendes</a> (se <a href="http://www.imdb.com/title/tt2832844/">IMDB</a> +for detaljer om filmen) . Første visning blir på NRK2 mandag +2014-03-31 kl. 19:50, og deretter visninger onsdag 2014-04-02 +kl. 12:30, fredag 2014-04-04 kl. 19:40 og søndag 2014-04-06 kl. 15:10. +Jeg har sett dokumentaren, og jeg anbefaler enhver å se den selv. Som +oppvarming mens vi venter anbefaler jeg Bjørn Stærks kronikk i +Aftenposten fra i går, +<a href="http://www.aftenposten.no/meninger/kronikker/Autoritar-gjokunge-7514915.html">Autoritær +gjøkunge</a>, der han gir en grei skisse av hvor ille det står til med +retten til privatliv og beskyttelsen av demokrati i Norge og resten +verden, og helt riktig slår fast at det er vi i databransjen som +sitter med nøkkelen til å gjøre noe med dette. Jeg har involvert meg +i prosjektene <a href="http://www.dugnadsnett.no/">dugnadsnett.no</a> +og <a href="https://wiki.debian.org/FreedomBox">FreedomBox</a> for å +forsøke å gjøre litt selv for å bedre situasjonen, men det er mye +hardt arbeid fra mange flere enn meg som gjenstår før vi kan sies å ha +gjenopprettet balansen.</p> + +<p>Jeg regner med at nettutgaven dukker opp på +<a href="http://tv.nrk.no/program/koid75005313/tema-dine-digitale-spor-datalagringsdirektivet">NRKs +side om filmen om datalagringsdirektivet</a> om fem dager. Hold et +øye med siden, og tips venner og slekt om at de også bør se den.</p> - Second beta release (beta 1) of Debian Edu/Skolelinux based on Debian Wheezy - http://people.skolelinux.org/pere/blog/Second_beta_release__beta_1__of_Debian_Edu_Skolelinux_based_on_Debian_Wheezy.html - http://people.skolelinux.org/pere/blog/Second_beta_release__beta_1__of_Debian_Edu_Skolelinux_based_on_Debian_Wheezy.html - Thu, 22 Aug 2013 09:30:00 +0200 - <p>The second wheezy based beta release of Debian Edu was wrapped up -today, slightly delayed because of some bugs in the initial Windows -integration fixes . This is the release announcement:</p> - -<p><strong>New features for Debian Edu 7.1+edu0~b1 released 2013-08-22</strong></p> - -<p>These are the release notes for Debian Edu / Skolelinux -7.1+edu0~b1, based on Debian with codename "Wheezy".</p> - -<p><strong>About Debian Edu and Skolelinux</strong></p> - -<p><a href="http://www.skolelinux.org/">Debian Edu, also known as -Skolelinux</a>, is a Linux distribution based on Debian providing an -out-of-the box environment of a completely configured school -network. Immediately after installation a school server running all -services needed for a school network is set up just waiting for users -and machines being added via GOsa², a comfortable Web-UI. A netbooting -environment is prepared using PXE, so after initial installation of -the main server from CD or USB stick all other machines can be -installed via the network. The provided school server provides LDAP -database and Kerberos authentication service, centralized home -directories, DHCP server, web proxy and many other services. The -desktop contains -<a href="http://people.skolelinux.org/pere/blog/Educational_applications_included_in_Debian_Edu___Skolelinux__the_screenshot_collection____.html">more -than 60 educational software packages</a> and more are available from -the Debian archive, and schools can choose between KDE, Gnome, LXDE -and Xfce desktop environment.</p> - -<p>This is the sixth test release based on Debian Wheezy. Basically this -is an updated and slightly improved version compared to the Squeeze -release.</p> - -<p>ALERT: Alpha based installations should reinstall or downgrade the -versions of gosa and libpam-mklocaluser to the ones used in this beta -release. Both alpha and beta0 based installations should reinstall or -deal with gosa.conf manually; there are two options: (1) Keep -gosa.conf and edit this file as outlined -<a href="http://lists.debian.org/debian-edu/2013/08/msg00127.html">on -the mailing list</a>. (2) Accept the new version of gosa.conf and -replace both contained admin password placeholders with the password -hashes found in the old one (backup copy!). In both cases every user -need to change their their password to make sure a password is set for -CIFS access to their home directory.</p> - -<p><strong>Software updates</strong></p> - -<ul> - -<li>Added ssh askpass packages to default installation, to ensure ssh - work also without a attached tty.</li> -<li>Add the command-not-found package to the default installation to - make it easier to figure out where to find missing command line - tools. Please note, that the command 'update-command-not-found' - has to be run as root to actually make it useful (internet access - required).</li> - -</ul> - -<p><strong>Other changes</strong></p> - -<ul> - -<li>Adjusted the USB stick ISO image build to include every tool -needed for desktop=xfce installations.</li> -<li>Adjust thin-client-server task to work when installing from USB -stick ISO image.</li> -<li>Made new grub artwork (changed png from indexed to RGB format).</li> -<li>Minor cleanup in the CUPS setup.</li> -<li>Make sure that bootstrapping of the Samba domain really happens - during installation of the main server and adjust SID handling to - cope with this.</li> -<li>Make Samba passwords changeable (again) via GOsa².</li> -<li>Fix generation of LM and NT password hashes via GOsa² to avoid - empty password hashes.</li> -<li>Adapted Samba machine domain joining to latest change in the - smbldap-tools Perl package, fixing bugs blocking Windows machines - from joining the Samba domain.</li> - -</ul> - -<p><strong>Known issues</strong></p> - -<ul> - -<li>KDE fails to understand the wpad.dat file provided, causing it to - not use the http proxy as it should.</li> -<li>Chromium also fails to use the proxy when using the KDE desktop - (using the KDE configuration).</li> - -</ul> - -<p><strong>Where to get it</strong></p> - -<p>To download the multiarch netinstall CD release you can use</p> - -<ul> - -<li><a href="ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b1-CD.iso">ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b1-CD.iso</a></li> - -<li><a href="http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b1-CD.iso">http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b1-CD.iso</a></li> - -<li>rsync -avzP ftp.skolelinux.org::skolelinux-cd/wheezy/debian-edu-7.1+edu0~b1-CD.iso .</li> - -</ul> - -<p>The MD5SUM of this image is: 1e357f80b55e703523f2254adde6d78b -<br>The SHA1SUM of this image is: 7157f9be5fd27c7694d713c6ecfed61c3edda3b2</p> - -<p>To download the multiarch USB stick ISO release you can use</p> - -<ul> - -<li><a href="ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b1-USB.iso">ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b1-USB.iso</a></li> -<li><a href="http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b1-USB.iso">http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b1-USB.iso</a></li> -<li>rsync -avzP ftp.skolelinux.org::skolelinux-cd/wheezy/debian-edu-7.1+edu0~b1-USB.iso .</li> - -</ul> - -<p>The MD5SUM of this image is: 7a8408ead59cf7e3cef25afb6e91590b -<br>The SHA1SUM of this image is: f1817c031f02790d5edb3bfa0dcf8451088ad119</p> - + Public Trusted Timestamping services for everyone + http://people.skolelinux.org/pere/blog/Public_Trusted_Timestamping_services_for_everyone.html + http://people.skolelinux.org/pere/blog/Public_Trusted_Timestamping_services_for_everyone.html + Tue, 25 Mar 2014 12:50:00 +0100 + <p>Did you ever need to store logs or other files in a way that would +allow it to be used as evidence in court, and needed a way to +demonstrate without reasonable doubt that the file had not been +changed since it was created? Or, did you ever need to document that +a given document was received at some point in time, like some +archived document or the answer to an exam, and not changed after it +was received? The problem in these settings is to remove the need to +trust yourself and your computers, while still being able to prove +that a file is the same as it was at some given time in the past.</p> + +<p>A solution to these problems is to have a trusted third party +"stamp" the document and verify that at some given time the document +looked a given way. Such +<a href="https://en.wikipedia.org/wiki/Notarius">notarius</a> service +have been around for thousands of years, and its digital equivalent is +called a +<a href="http://en.wikipedia.org/wiki/Trusted_timestamping">trusted +timestamping service</a>. <a href="http://www.ietf.org/">The Internet +Engineering Task Force</a> standardised how such service could work a +few years ago as <a href="http://tools.ietf.org/html/rfc3161">RFC +3161</a>. The mechanism is simple. Create a hash of the file in +question, send it to a trusted third party which add a time stamp to +the hash and sign the result with its private key, and send back the +signed hash + timestamp. Both email, FTP and HTTP can be used to +request such signature, depending on what is provided by the service +used. Anyone with the document and the signature can then verify that +the document matches the signature by creating their own hash and +checking the signature using the trusted third party public key. +There are several commercial services around providing such +timestamping. A quick search for +"<a href="https://duckduckgo.com/?q=rfc+3161+service">rfc 3161 +service</a>" pointed me to at least +<a href="https://www.digistamp.com/technical/how-a-digital-time-stamp-works/">DigiStamp</a>, +<a href="http://www.quovadisglobal.co.uk/CertificateServices/SigningServices/TimeStamp.aspx">Quo +Vadis</a>, +<a href="https://www.globalsign.com/timestamp-service/">Global Sign</a> +and <a href="http://www.globaltrustfinder.com/TSADefault.aspx">Global +Trust Finder</a>. The system work as long as the private key of the +trusted third party is not compromised.</p> + +<p>But as far as I can tell, there are very few public trusted +timestamp services available for everyone. I've been looking for one +for a while now. But yesterday I found one over at +<a href="https://www.pki.dfn.de/zeitstempeldienst/">Deutches +Forschungsnetz</a> mentioned in +<a href="http://www.d-mueller.de/blog/dealing-with-trusted-timestamps-in-php-rfc-3161/">a +blog by David Müller</a>. I then found +<a href="http://www.rz.uni-greifswald.de/support/dfn-pki-zertifikate/zeitstempeldienst.html">a +good recipe on how to use the service</a> over at the University of +Greifswald.</p> + +<p><a href="http://www.openssl.org/">The OpenSSL library</a> contain +both server and tools to use and set up your own signing service. See +the ts(1SSL), tsget(1SSL) manual pages for more details. The +following shell script demonstrate how to extract a signed timestamp +for any file on the disk in a Debian environment:</p> + +<p><blockquote><pre> +#!/bin/sh +set -e +url="http://zeitstempel.dfn.de" +caurl="https://pki.pca.dfn.de/global-services-ca/pub/cacert/chain.txt" +reqfile=$(mktemp -t tmp.XXXXXXXXXX.tsq) +resfile=$(mktemp -t tmp.XXXXXXXXXX.tsr) +cafile=chain.txt +if [ ! -f $cafile ] ; then + wget -O $cafile "$caurl" +fi +openssl ts -query -data "$1" -cert | tee "$reqfile" \ + | /usr/lib/ssl/misc/tsget -h "$url" -o "$resfile" +openssl ts -reply -in "$resfile" -text 1>&2 +openssl ts -verify -data "$1" -in "$resfile" -CAfile "$cafile" 1>&2 +base64 < "$resfile" +rm "$reqfile" "$resfile" +</pre></blockquote></p> + +<p>The argument to the script is the file to timestamp, and the output +is a base64 encoded version of the signature to STDOUT and details +about the signature to STDERR. Note that due to +<a href="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742553">a bug +in the tsget script</a>, you might need to modify the included script +and remove the last line. Or just write your own HTTP uploader using +curl. :) Now you too can prove and verify that files have not been +changed.</p> + +<p>But the Internet need more public trusted timestamp services. +Perhaps something for <a href="http://www.uninett.no/">Uninett</a> or +my work place the <a href="http://www.uio.no/">University of Oslo</a> +to set up?</p> + + + + + Video DVD reader library / python-dvdvideo - nice free software + http://people.skolelinux.org/pere/blog/Video_DVD_reader_library___python_dvdvideo___nice_free_software.html + http://people.skolelinux.org/pere/blog/Video_DVD_reader_library___python_dvdvideo___nice_free_software.html + Fri, 21 Mar 2014 15:25:00 +0100 + <p>Keeping your DVD collection safe from scratches and curious +children fingers while still having it available when you want to see a +movie is not straight forward. My preferred method at the moment is +to store a full copy of the ISO on a hard drive, and use VLC, Popcorn +Hour or other useful players to view the resulting file. This way the +subtitles and bonus material are still available and using the ISO is +just like inserting the original DVD record in the DVD player.</p> + +<p>Earlier I used dd for taking security copies, but it do not handle +DVDs giving read errors (which are quite a few of them). I've also +tried using +<a href="http://people.skolelinux.org/pere/blog/Ripping_problematic_DVDs_using_dvdbackup_and_genisoimage.html">dvdbackup +and genisoimage</a>, but these days I use the marvellous python library +and program +<a href="http://bblank.thinkmo.de/blog/new-software-python-dvdvideo">python-dvdvideo</a> +written by Bastian Blank. It is +<a href="http://packages.qa.debian.org/p/python-dvdvideo.html">in Debian +already</a> and the binary package name is python3-dvdvideo. Instead +of trying to read every block from the DVD, it parses the file +structure and figure out which block on the DVD is actually in used, +and only read those blocks from the DVD. This work surprisingly well, +and I have been able to almost backup my entire DVD collection using +this method.</p> + +<p>So far, python-dvdvideo have failed on between 10 and +20 DVDs, which is a small fraction of my collection. The most common +problem is +<a href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=720831">DVDs +using UTF-16 instead of UTF-8 characters</a>, which according to +Bastian is against the DVD specification (and seem to cause some +players to fail too). A rarer problem is what seem to be inconsistent +DVD structures, as the python library +<a href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=723079">claim +there is a overlap between objects</a>. An equally rare problem claim +<a href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741878">some +value is out of range</a>. No idea what is going on there. I wish I +knew enough about the DVD format to fix these, to ensure my movie +collection will stay with me in the future.</p> + +<p>So, if you need to keep your DVDs safe, back them up using +python-dvdvideo. :)</p> + + + + + Norsk utgave av Alaveteli / WhatDoTheyKnow på trappene + http://people.skolelinux.org/pere/blog/Norsk_utgave_av_Alaveteli___WhatDoTheyKnow_p__trappene.html + http://people.skolelinux.org/pere/blog/Norsk_utgave_av_Alaveteli___WhatDoTheyKnow_p__trappene.html + Sun, 16 Mar 2014 09:30:00 +0100 + <p>Det offentlige Norge har mye kunnskap og informasjon. Men hvordan +kan en få tilgang til den på en enkel måte? Takket være et lite +knippe lover og tilhørende forskrifter, blant annet +<a href="http://lovdata.no/dokument/NL/lov/2006-05-19-16">offentlighetsloven</a>, +<a href="http://lovdata.no/dokument/NL/lov/2003-05-09-31">miljøinformasjonsloven</a> +og +<a href="http://lovdata.no/dokument/NL/lov/1967-02-10/">forvaltningsloven</a> +har en rett til å spørre det offentlige og få svar. Men det finnes +intet offentlig arkiv over hva andre har spurt om, og dermed risikerer en +å måtte forstyrre myndighetene gang på gang for å få tak i samme +informasjonen på nytt. <a href="http://www.mysociety.org/">Britiske +mySociety</a> har laget tjenesten +<a href="http://www.whatdotheyknow.com/">WhatDoTheyKnow</a> som gjør +noe med dette. I Storbritannia blir WhatdoTheyKnow brukt i +<a href="http://www.mysociety.org/2011/07/01/whatdotheyknows-share-of-central-government-foi-requests-q2-2011/">ca +15% av alle innsynsforespørsler mot sentraladministrasjonen</a>. +Prosjektet heter <a href="http://www.alaveteli.org/">Alaveteli</A>, og +er takk i bruk en rekke steder etter at løsningen ble generalisert og +gjort mulig å oversette. Den hjelper borgerne med å be om innsyn, +rådgir ved purringer og klager og lar alle se hvilke henvendelser som +er sendt til det offentlige og hvilke svar som er kommet inn, i et +søkpart arkiv. Her i Norge holder vi i foreningen NUUG på å få opp en +norsk utgave av Alaveteli, og her trenger vi din hjelp med +oversettelsen.</p> + +<p>Så langt er 76 % av Alaveteli oversatt til norsk bokmål, men vi +skulle gjerne vært oppe i 100 % før lansering. Oversettelsen gjøres +på <a href="https://www.transifex.com/projects/p/alaveteli/">Transifex, +der enhver som registrerer seg</a> og ber om tilgang til +bokmålsoversettelsen får bidra. Vi har satt opp en test av tjenesten +(som ikke sender epost til det offentlige, kun til oss som holder på å +sette opp tjenesten) på maskinen +<a href="http://alaveteli-dev.nuug.no/">alaveteli-dev.nuug.no</a>, der +en kan se hvordan de oversatte meldingen blir seende ut på nettsiden. +Når tjenesten lanseres vil den hete +<a href="https://www.mimesbrønn.no/">Mimes brønn</a>, etter +visdomskilden som Odin måtte gi øyet sitt for å få drikke i. Den +nettsiden er er ennå ikke klar til bruk.</p> + +<p>Hvis noen vil oversette til nynorsk også, så skal vi finne ut +hvordan vi lager en flerspråklig tjeneste. Men i første omgang er +fokus på bokmålsoversettelsen, der vi selv har nok peiling til å ha +fått oversatt 76%, men trenger hjelp for å komme helt i mål. :)</p> + + + + + Freedombox on Dreamplug, Raspberry Pi and virtual x86 machine + http://people.skolelinux.org/pere/blog/Freedombox_on_Dreamplug__Raspberry_Pi_and_virtual_x86_machine.html + http://people.skolelinux.org/pere/blog/Freedombox_on_Dreamplug__Raspberry_Pi_and_virtual_x86_machine.html + Fri, 14 Mar 2014 11:00:00 +0100 + <p>The <a href="https://wiki.debian.org/FreedomBox">Freedombox +project</a> is working on providing the software and hardware for +making it easy for non-technical people to host their data and +communication at home, and being able to communicate with their +friends and family encrypted and away from prying eyes. It has been +going on for a while, and is slowly progressing towards a new test +release (0.2).</p> + +<p>And what day could be better than the Pi day to announce that the +new version will provide "hard drive" / SD card / USB stick images for +Dreamplug, Raspberry Pi and VirtualBox (or any other virtualization +system), and can also be installed using a Debian installer preseed +file. The Debian based Freedombox is now based on Debian Jessie, +where most of the needed packages used are already present. Only one, +the freedombox-setup package, is missing. To try to build your own +boot image to test the current status, fetch the freedom-maker scripts +and build using +<a href="http://packages.qa.debian.org/vmdebootstrap">vmdebootstrap</a> +with a user with sudo access to become root: -<p><strong>How to report bugs</strong></p> +<pre> +git clone http://anonscm.debian.org/git/freedombox/freedom-maker.git \ + freedom-maker +sudo apt-get install git vmdebootstrap mercurial python-docutils \ + mktorrent extlinux virtualbox qemu-user-static binfmt-support \ + u-boot-tools +make -C freedom-maker dreamplug-image raspberry-image virtualbox-image +</pre> + +<p>Root access is needed to run debootstrap and mount loopback +devices. See the README for more details on the build. If you do not +want all three images, trim the make line. But note that thanks to <a +href="https://bugs.debian.org/741407">a race condition in +vmdebootstrap</a>, the build might fail without the patch to the +kpartx call.</p> + +<p>If you instead want to install using a Debian CD and the preseed +method, boot a Debian Wheezy ISO and use this boot argument to load +the preseed values:</p> -<p><a href="http://wiki.debian.org/DebianEdu/HowTo/ReportBugs">http://wiki.debian.org/DebianEdu/HowTo/ReportBugs</a> +<pre> +url=<a href="http://www.reinholdtsen.name/freedombox/preseed-jessie.dat">http://www.reinholdtsen.name/freedombox/preseed-jessie.dat</a> +</pre> + +<p>But note that due to <a href="https://bugs.debian.org/740673">a +recently introduced bug in apt in Jessie</a>, the installer will +currently hang while setting up APT sources. Killing the +'<tt>apt-cdrom ident</tt>' process when it hang a few times during the +installation will get the installation going. This affect all +installations in Jessie, and I expect it will be fixed soon.</p> + +<p>Give it a go and let us know how it goes on the mailing list, and help +us get the new release published. :) Please join us on +<a href="irc://irc.debian.org:6667/%23freedombox">IRC (#freedombox on +irc.debian.org)</a> and +<a href="http://lists.alioth.debian.org/mailman/listinfo/freedombox-discuss">the +mailing list</a> if you want to help make this vision come true.</p> - Intel 180 SSD disk with Lenovo firmware can not use Intel firmware - http://people.skolelinux.org/pere/blog/Intel_180_SSD_disk_with_Lenovo_firmware_can_not_use_Intel_firmware.html - http://people.skolelinux.org/pere/blog/Intel_180_SSD_disk_with_Lenovo_firmware_can_not_use_Intel_firmware.html - Sun, 18 Aug 2013 14:00:00 +0200 - <p>Earlier, I reported about -<a href="http://people.skolelinux.org/pere/blog/How_to_fix_a_Thinkpad_X230_with_a_broken_180_GB_SSD_disk.html">my -problems using an Intel SSD 520 Series 180 GB disk</a>. Friday I was -told by IBM that the original disk should be thrown away. And as -there no longer was a problem if I bricked the firmware, I decided -today to try to install Intel firmware to replace the Lenovo firmware -currently on the disk.</p> - -<p>I searched the Intel site for firmware, and found -<a href="https://downloadcenter.intel.com/Detail_Desc.aspx?agr=Y&ProdId=3472&DwnldID=18363&ProductFamily=Solid-State+Drives+and+Caching&ProductLine=Intel%c2%ae+High+Performance+Solid-State+Drive&ProductProduct=Intel%c2%ae+SSD+520+Series+(180GB%2c+2.5in+SATA+6Gb%2fs%2c+25nm%2c+MLC)&lang=eng">issdfut_2.0.4.iso</a> -(aka Intel SATA Solid-State Drive Firmware Update Tool) which -according to the site should contain the latest firmware for SSD -disks. I inserted the broken disk in one of my spare laptops and -booted the ISO from a USB stick. The disk was recognized, but the -program claimed the newest firmware already were installed and refused -to insert any Intel firmware. So no change, and the disk is still -unable to handle write load. :( I guess the only way to get them -working would be if Lenovo releases new firmware. No idea how likely -that is. Anyway, just blogging about this test for completeness. I -got a working Samsung disk, and see no point in spending more time on -the broken disks.</p> + How to add extra storage servers in Debian Edu / Skolelinux + http://people.skolelinux.org/pere/blog/How_to_add_extra_storage_servers_in_Debian_Edu___Skolelinux.html + http://people.skolelinux.org/pere/blog/How_to_add_extra_storage_servers_in_Debian_Edu___Skolelinux.html + Wed, 12 Mar 2014 12:50:00 +0100 + <p>On larger sites, it is useful to use a dedicated storage server for +storing user home directories and data. The design for handling this +in <a href="http://www.skolelinux.org/">Debian Edu / Skolelinux</a>, is +to update the automount rules in LDAP and let the automount daemon on +the clients take care of the rest. I was reminded about the need to +document this better when one of the customers of +<a href="http://www.slxdrift.no/">Skolelinux Drift AS</a>, where I am +on the board of directors, asked about how to do this. The steps to +get this working are the following:</p> + +<p><ol> + +<li>Add new storage server in DNS. I use nas-server.intern as the +example host here.</li> + +<li>Add automoun LDAP information about this server in LDAP, to allow +all clients to automatically mount it on reqeust.</li> + +<li>Add the relevant entries in tjener.intern:/etc/fstab, because +tjener.intern do not use automount to avoid mounting loops.</li> + +</ol></p> + +<p>DNS entries are added in GOsa², and not described here. Follow the +<a href="https://wiki.debian.org/DebianEdu/Documentation/Wheezy/GettingStarted">instructions +in the manual</a> (Machine Management with GOsa² in section Getting +started).</p> + +<p>Ensure that the NFS export points on the server are exported to the +relevant subnets or machines:</p> + +<p><blockquote><pre> +root@tjener:~# showmount -e nas-server +Export list for nas-server: +/storage 10.0.0.0/8 +root@tjener:~# +</pre></blockquote></p> + +<p>Here everything on the backbone network is granted access to the +/storage export. With NFSv3 it is slightly better to limit it to +netgroup membership or single IP addresses to have some limits on the +NFS access.</p> + +<p>The next step is to update LDAP. This can not be done using GOsa², +because it lack a module for automount. Instead, use ldapvi and add +the required LDAP objects using an editor.</p> + +<p><blockquote><pre> +ldapvi --ldap-conf -ZD '(cn=admin)' -b ou=automount,dc=skole,dc=skolelinux,dc=no +</pre></blockquote></p> + +<p>When the editor show up, add the following LDAP objects at the +bottom of the document. The "/&" part in the last LDAP object is a +wild card matching everything the nas-server exports, removing the +need to list individual mount points in LDAP.</p> + +<p><blockquote><pre> +add cn=nas-server,ou=auto.skole,ou=automount,dc=skole,dc=skolelinux,dc=no +objectClass: automount +cn: nas-server +automountInformation: -fstype=autofs --timeout=60 ldap:ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no + +add ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no +objectClass: top +objectClass: automountMap +ou: auto.nas-server + +add cn=/,ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no +objectClass: automount +cn: / +automountInformation: -fstype=nfs,tcp,rsize=32768,wsize=32768,rw,intr,hard,nodev,nosuid,noatime nas-server.intern:/& +</pre></blockquote></p> + +<p>The last step to remember is to mount the relevant mount points in +tjener.intern by adding them to /etc/fstab, creating the mount +directories using mkdir and running "mount -a" to mount them.</p> + +<p>When this is done, your users should be able to access the files on +the storage server directly by just visiting the +/tjener/nas-server/storage/ directory using any application on any +workstation, LTSP client or LTSP server.</p>