1 <!DOCTYPE html PUBLIC
"-//W3C//DTD XHTML 1.0 Strict//EN"
2 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
3 <html xmlns=
"http://www.w3.org/1999/xhtml" dir=
"ltr">
5 <meta http-equiv=
"Content-Type" content=
"text/html;charset=utf-8" />
6 <title>Petter Reinholdtsen: Entries Tagged debian
</title>
7 <link rel=
"stylesheet" type=
"text/css" media=
"screen" href=
"http://people.skolelinux.org/pere/blog/style.css" />
8 <link rel=
"stylesheet" type=
"text/css" media=
"screen" href=
"http://people.skolelinux.org/pere/blog/vim.css" />
9 <link rel=
"alternate" title=
"RSS Feed" href=
"debian.rss" type=
"application/rss+xml" />
14 <a href=
"http://people.skolelinux.org/pere/blog/">Petter Reinholdtsen
</a>
21 <h3>Entries tagged "debian".
</h3>
25 <a href=
"http://people.skolelinux.org/pere/blog/The_sorry_state_of_multimedia_browser_plugins_in_Debian.html">The sorry state of multimedia browser plugins in Debian
</a>
31 <p>Recently I have spent some time evaluating the multimedia browser
32 plugins available in Debian Lenny, to see which one we should use by
33 default in Debian Edu. We need an embedded video playing plugin with
34 control buttons to pause or stop the video, and capable of streaming
35 all the multimedia content available on the web. The test results and
36 notes are available on
37 <a href=
"http://wiki.debian.org/DebianEdu/BrowserMultimedia">the
38 Debian wiki
</a>. I was surprised how few of the plugins are able to
39 fill this need. My personal video player favorite, VLC, has a really
40 bad plugin which fail on a lot of the test pages. A lot of the MIME
41 types I would expect to work with any free software player (like
42 video/ogg), just do not work. And simple formats like the
43 audio/x-mplegurl format (m3u playlists), just isn't supported by the
44 totem and vlc plugins. I hope the situation will improve soon. No
45 wonder sites use the proprietary Adobe flash to play video.
</p>
47 <p>For Lenny, we seem to end up with the mplayer plugin. It seem to
48 be the only one fitting our needs. :/
</p>
54 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/web">web
</a>.
59 <div class=
"padding"></div>
63 <a href=
"http://people.skolelinux.org/pere/blog/Devcamp_brought_us_closer_to_the_Lenny_based_Debian_Edu_release.html">Devcamp brought us closer to the Lenny based Debian Edu release
</a>
69 <p>This weekend we had a small developer gathering for Debian Edu in
70 Oslo. Most of Saturday was used for the general assemly for the
71 member organization, but the rest of the weekend I used to tune the
72 LTSP installation. LTSP now work out of the box on the
10-network.
73 Acer Aspire One proved to be a very nice thin client, with both
74 screen, mouse and keybard in a small box. Was working on getting the
75 diskless workstation setup configured out of the box, but did not
76 finish it before the weekend was up.
</p>
78 <p>Did not find time to look at the
4 VGA cards in one box we got from
79 the Brazilian group, so that will have to wait for the next
80 development gathering. Would love to have the Debian Edu installer
81 automatically detect and configure a multiseat setup when it find one
88 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp
</a>.
93 <div class=
"padding"></div>
97 <a href=
"http://people.skolelinux.org/pere/blog/Endelig_er_Debian_Lenny_gitt_ut.html">Endelig er Debian Lenny gitt ut
</a>
103 <p>Endelig er
<a href=
"http://www.debian.org/">Debian
</a>
104 <a href=
"http://www.debian.org/News/2009/20090214">Lenny
</a> gitt ut.
105 Et langt steg videre for Debian-prosjektet, og en rekke nye
106 programpakker blir nå tilgjengelig for de av oss som bruker den
107 stabile utgaven av Debian. Neste steg er nå å få
108 <a href=
"http://www.skolelinux.org/">Skolelinux
</a> /
109 <a href=
"http://wiki.debian.org/DebianEdu/">Debian Edu
</a> ferdig
110 oppdatert for den nye utgaven, slik at en oppdatert versjon kan
111 slippes løs på skolene. Takk til alle debian-utviklerne som har
112 gjort dette mulig. Endelig er f.eks. fungerende avhengighetsstyrt
113 bootsekvens tilgjengelig i stabil utgave, vha pakken
114 <tt>insserv
</tt>.
</p>
120 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/norsk">norsk
</a>.
125 <div class=
"padding"></div>
129 <a href=
"http://people.skolelinux.org/pere/blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html">Time for new LDAP schemas replacing RFC
2307?
</a>
135 <p>The state of standardized LDAP schemas on Linux is far from
136 optimal. There is RFC
2307 documenting one way to store NIS maps in
137 LDAP, and a modified version of this normally called RFC
2307bis, with
138 some modifications to be compatible with Active Directory. The RFC
139 specification handle the content of a lot of system databases, but do
140 not handle DNS zones and DHCP configuration.
</p>
142 <p>In
<a href=
"http://www.skolelinux.org/">Debian Edu/Skolelinux
</a>,
143 we would like to store information about users, SMB clients/hosts,
144 filegroups, netgroups (users and hosts), DHCP and DNS configuration,
145 and LTSP configuration in LDAP. These objects have a lot in common,
146 but with the current LDAP schemas it is not possible to have one
147 object per entity. For example, one need to have at least three LDAP
148 objects for a given computer, one with the SMB related stuff, one with
149 DNS information and another with DHCP information. The schemas
150 provided for DNS and DHCP are impossible to combine into one LDAP
151 object. In addition, it is impossible to implement quick queries for
152 netgroup membership, because of the way NIS triples are implemented.
153 It just do not scale. I believe it is time for a few RFC
154 specifications to cleam up this mess.
</p>
156 <p>I would like to have one LDAP object representing each computer in
157 the network, and this object can then keep the SMB (ie host key), DHCP
158 (mac address/name) and DNS (name/IP address) settings in one place.
159 It need to be efficently stored to make sure it scale well.
</p>
161 <p>I would also like to have a quick way to map from a user or
162 computer and to the net group this user or computer is a member.
</p>
164 <p>Active Directory have done a better job than unix heads like myself
165 in this regard, and the unix side need to catch up. Time to start a
166 new IETF work group?
</p>
172 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/ldap">ldap
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
177 <div class=
"padding"></div>
181 <a href=
"http://people.skolelinux.org/pere/blog/Returning_from_Skolelinux_developer_gathering.html">Returning from Skolelinux developer gathering
</a>
187 <p>I'm sitting on the train going home from this weekends Debian
188 Edu/Skolelinux development gathering. I got a bit done tuning the
189 desktop, and looked into the dynamic service location protocol
190 implementation avahi. It look like it could be useful for us. Almost
191 30 people participated, and I believe it was a great environment to
192 get to know the Skolelinux system. Walter Bender, involved in the
193 development of the Sugar educational platform, presented his stuff and
194 also helped me improve my OLPC installation. He also showed me that
195 his Turtle Art application can be used in standalone mode, and we
196 agreed that I would help getting it packaged for Debian. As a
197 standalone application it would be great for Debian Edu. We also
198 tried to get the video conferencing working with two OLPCs, but that
199 proved to be too hard for us. The application seem to need more work
200 before it is ready for me. I look forward to getting home and relax
207 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
212 <div class=
"padding"></div>
216 <a href=
"http://people.skolelinux.org/pere/blog/Standardize_on_protocols_and_formats__not_vendors_and_applications.html">Standardize on protocols and formats, not vendors and applications
</a>
222 <p>Where I work at the University of Oslo, one decision stand out as a
223 very good one to form a long lived computer infrastructure. It is the
224 simple one, lost by many in todays computer industry: Standardize on
225 open network protocols and open exchange/storage formats, not applications.
226 Applications come and go, while protocols and files tend to stay, and
227 thus one want to make it easy to change application and vendor, while
228 avoiding conversion costs and locking users to a specific platform or
231 <p>This approach make it possible to replace the client applications
232 independently of the server applications. One can even allow users to
233 use several different applications as long as they handle the selected
234 protocol and format. In the normal case, only one client application
235 is recommended and users only get help if they choose to use this
236 application, but those that want to deviate from the easy path are not
237 blocked from doing so.
</p>
239 <p>It also allow us to replace the server side without forcing the
240 users to replace their applications, and thus allow us to select the
241 best server implementation at any moment, when scale and resouce
242 requirements change.
</p>
244 <p>I strongly recommend standardizing - on open network protocols and
245 open formats, but I would never recommend standardizing on a single
246 application that do not use open network protocol or open formats.
</p>
252 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/standard">standard
</a>.
257 <div class=
"padding"></div>
261 <a href=
"http://people.skolelinux.org/pere/blog/No_patch_is_not_better_than_a_useless_patch.html">No patch is not better than a useless patch
</a>
268 <a href=
"http://blog.technologeek.org/2009/04/12/214">claim that no
269 patch is better than a useless patch
</a>. I completely disagree, as a
270 patch allow one to discuss a concrete and proposed solution, and also
271 prove that the issue at hand is important enough for someone to spent
272 time on fixing it. No patch do not provide any of these positive
279 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
284 <div class=
"padding"></div>
288 <a href=
"http://people.skolelinux.org/pere/blog/Two_projects_that_have_improved_the_quality_of_free_software_a_lot.html">Two projects that have improved the quality of free software a lot
</a>
294 <p>There are two software projects that have had huge influence on the
295 quality of free software, and I wanted to mention both in case someone
296 do not yet know them.
</p>
298 <p>The first one is
<a href=
"http://valgrind.org/">valgrind
</a>, a
299 tool to detect and expose errors in the memory handling of programs.
300 It is easy to use, all one need to do is to run 'valgrind program',
301 and it will report any problems on stdout. It is even better if the
302 program include debug information. With debug information, it is able
303 to report the source file name and line number where the problem
304 occurs. It can report things like 'reading past memory block in file
305 X line N, the memory block was allocated in file Y, line M', and
306 'using uninitialised value in control logic'. This tool has made it
307 trivial to investigate reproducible crash bugs in programs, and have
308 reduced the number of this kind of bugs in free software a lot.
311 <a href=
"http://en.wikipedia.org/wiki/Coverity">Coverity
</a> which is
312 a source code checker. It is able to process the source of a program
313 and find problems in the logic without running the program. It
314 started out as the Stanford Checker and became well known when it was
315 used to find bugs in the Linux kernel. It is now a commercial tool
316 and the company behind it is running
317 <a href=
"http://www.scan.coverity.com/">a community service
</a> for the
318 free software community, where a lot of free software projects get
319 their source checked for free. Several thousand defects have been
320 found and fixed so far. It can find errors like 'lock L taken in file
321 X line N is never released if exiting in line M', or 'the code in file
322 Y lines O to P can never be executed'. The projects included in the
323 community service project have managed to get rid of a lot of
324 reliability problems thanks to Coverity.
</p>
326 <p>I believe tools like this, that are able to automatically find
327 errors in the source, are vital to improve the quality of software and
328 make sure we can get rid of the crashing and failing software we are
329 surrounded by today.
</p>
335 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
340 <div class=
"padding"></div>
344 <a href=
"http://people.skolelinux.org/pere/blog/Kryptert_harddisk___naturligvis.html">Kryptert harddisk - naturligvis
</a>
350 <p><a href=
"http://www.dagensit.no/trender/article1658676.ece">Dagens
351 IT melder
</a> at Intel hevder at det er dyrt å miste en datamaskin,
352 når en tar tap av arbeidstid, fortrolige dokumenter,
353 personopplysninger og alt annet det innebærer. Det er ingen tvil om
354 at det er en kostbar affære å miste sin datamaskin, og det er årsaken
355 til at jeg har kryptert harddisken på både kontormaskinen og min
356 bærbare. Begge inneholder personopplysninger jeg ikke ønsker skal
357 komme på avveie, den første informasjon relatert til jobben min ved
358 Universitetet i Oslo, og den andre relatert til blant annet
359 foreningsarbeide. Kryptering av diskene gjør at det er lite
360 sannsynlig at dophoder som kan finne på å rappe maskinene får noe ut
361 av dem. Maskinene låses automatisk etter noen minutter uten bruk,
362 og en reboot vil gjøre at de ber om passord før de vil starte opp.
363 Jeg bruker Debian på begge maskinene, og installasjonssystemet der
364 gjør det trivielt å sette opp krypterte disker. Jeg har LVM på toppen
365 av krypterte partisjoner, slik at alt av datapartisjoner er kryptert.
366 Jeg anbefaler alle å kryptere diskene på sine bærbare. Kostnaden når
367 det er gjort slik jeg gjør det er minimale, og gevinstene er
368 betydelige. En bør dog passe på passordet. Hvis det går tapt, må
369 maskinen reinstalleres og alt er tapt.
</p>
371 <p>Krypteringen vil ikke stoppe kompetente angripere som f.eks. kjøler
372 ned minnebrikkene før maskinen rebootes med programvare for å hente ut
373 krypteringsnøklene. Kostnaden med å forsvare seg mot slike angripere
374 er for min del høyere enn gevinsten. Jeg tror oddsene for at
375 f.eks. etteretningsorganisasjoner har glede av å titte på mine
376 maskiner er minimale, og ulempene jeg ville oppnå ved å forsøke å
377 gjøre det vanskeligere for angripere med kompetanse og ressurser er
384 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/norsk">norsk
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet
</a>.
389 <div class=
"padding"></div>
393 <a href=
"http://people.skolelinux.org/pere/blog/IDG_mener_linux_i_servermarkedet_vil_vokse_med_21__i_2009.html">IDG mener linux i servermarkedet vil vokse med
21% i
2009</a>
400 <a href=
"http://news.cnet.com/8301-13505_3-10216873-16.html">interessante
401 tall
</a> fra IDG om utviklingen av linuxservermarkedet. Fikk meg til
402 å tenke på antall tjenermaskiner ved Universitetet i Oslo der jeg
403 jobber til daglig. En rask opptelling forteller meg at vi har
490
404 (
61%) fysiske unix-tjener (mest linux men også noen solaris) og
196
405 (
25%) windowstjenere, samt
112 (
14%) virtuelle unix-tjenere. Med den
406 bakgrunnskunnskapen kan jeg godt tro at IDG er inne på noe.
</p>
412 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/norsk">norsk
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
417 <div class=
"padding"></div>
421 <a href=
"http://people.skolelinux.org/pere/blog/BSAs_p_stander_om_piratkopiering_m_ter_motstand.html">BSAs påstander om piratkopiering møter motstand
</a>
427 <p>Hvert år de siste årene har BSA, lobbyfronten til de store
428 programvareselskapene som Microsoft og Apple, publisert en rapport der
429 de gjetter på hvor mye piratkopiering påfører i tapte inntekter i
430 ulike land rundt om i verden. Resultatene er tendensiøse. For noen
432 <a href=
"http://global.bsa.org/globalpiracy2008/studies/globalpiracy2008.pdf">siste
433 rapport
</a>, og det er flere kritiske kommentarer publisert de siste
434 dagene. Et spesielt interessant kommentar fra Sverige,
435 <a href=
"http://www.idg.se/2.1085/1.229795/bsa-hoftade-sverigesiffror">BSA
436 höftade Sverigesiffror
</a>, oppsummeres slik:
</p>
439 I sin senaste rapport slår BSA fast att
25 procent av all mjukvara i
440 Sverige är piratkopierad. Det utan att ha pratat med ett enda svenskt
441 företag. "Man bör nog kanske inte se de här siffrorna som helt
442 exakta", säger BSAs Sverigechef John Hugosson.
445 <p>Mon tro om de er like metodiske når de gjetter på andelen piratkopiering i Norge? To andre kommentarer er
<a
446 href=
"http://www.vnunet.com/vnunet/comment/2242134/bsa-piracy-figures-shot-reality">BSA
447 piracy figures need a shot of reality
</a> og
<a
448 href=
"http://www.michaelgeist.ca/content/view/3958/125/">Does The WIPO
449 Copyright Treaty Work?
</a></p>
451 <p>Fant lenkene via
<a
452 href=
"http://tech.slashdot.org/article.pl?sid=09/05/17/1632242">oppslag
459 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bsa">bsa
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/norsk">norsk
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/personvern">personvern
</a>.
464 <div class=
"padding"></div>
468 <a href=
"http://people.skolelinux.org/pere/blog/Debian_boots_quicker_and_quicker.html">Debian boots quicker and quicker
</a>
474 <p>I spent Monday and tuesday this week in London with a lot of the
475 people involved in the boot system on Debian and Ubuntu, to see if we
476 could find more ways to speed up the boot system. This was an Ubuntu
478 <a href=
"https://wiki.ubuntu.com/FoundationsTeam/BootPerformance/DebianUbuntuSprint">developer
479 gathering
</a>. It was quite productive. We also discussed the future
480 of boot systems, and ways to handle the increasing number of boot
481 issues introduced by the Linux kernel becoming more and more
482 asynchronous and event base. The Ubuntu approach using udev and
483 upstart might be a good way forward. Time will show.
</p>
485 <p>Anyway, there are a few ways at the moment to speed up the boot
486 process in Debian. All of these should be applied to get a quick
491 <li>Use dash as /bin/sh.
</li>
493 <li>Disable the init.d/hwclock*.sh scripts and make sure the hardware
494 clock is in UTC.
</li>
496 <li>Install and activate the insserv package to enable
497 <a href=
"http://wiki.debian.org/LSBInitScripts/DependencyBasedBoot">dependency
498 based boot sequencing
</a>, and enable concurrent booting.
</li>
502 These points are based on the Google summer of code work done by
503 <a href=
"http://initscripts-ng.alioth.debian.org/soc2006-bootsystem/">Carlos
506 <p>Support for makefile-style concurrency during boot was uploaded to
507 unstable yesterday. When we tested it, we were able to cut
6 seconds
508 from the boot sequence. It depend on very correct dependency
509 declaration in all init.d scripts, so I expect us to find edge cases
510 where the dependences in some scripts are slightly wrong when we start
513 <p>On our IRC channel for this effort, #pkg-sysvinit, a new idea was
514 introduced by Raphael Geissert today, one that could affect the
515 startup speed as well. Instead of starting some scripts concurrently
516 from rcS.d/ and another set of scripts from rc2.d/, it would be
517 possible to run a of them in the same process. A quick way to test
518 this would be to enable insserv and run 'mv /etc/rc2.d/S* /etc/rcS.d/;
519 insserv'. Will need to test if that work. :)
</p>
525 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
530 <div class=
"padding"></div>
534 <a href=
"http://people.skolelinux.org/pere/blog/Taking_over_sysvinit_development.html">Taking over sysvinit development
</a>
540 <p>After several years of frustration with the lack of activity from
541 the existing sysvinit upstream developer, I decided a few weeks ago to
542 take over the package and become the new upstream. The number of
543 patches to track for the Debian package was becoming a burden, and the
544 lack of synchronization between the distribution made it hard to keep
545 the package up to date.
</p>
547 <p>On the new sysvinit team is the SuSe maintainer Dr. Werner Fink,
548 and my Debian co-maintainer Kel Modderman. About
10 days ago, I made
549 a new upstream tarball with version number
2.87dsf (for Debian, SuSe
550 and Fedora), based on the patches currently in use in these
551 distributions. We Debian maintainers plan to move to this tarball as
552 the new upstream as soon as we find time to do the merge. Since the
553 new tarball was created, we agreed with Werner at SuSe to make a new
554 upstream project at
<a href=
"http://savannah.nongnu.org/">Savannah
</a>, and continue
555 development there. The project is registered and currently waiting
556 for approval by the Savannah administrators, and as soon as it is
557 approved, we will import the old versions from svn and continue
558 working on the future release.
</p>
560 <p>It is a bit ironic that this is done now, when some of the involved
561 distributions are moving to upstart as a syvinit replacement.
</p>
567 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
572 <div class=
"padding"></div>
576 <a href=
"http://people.skolelinux.org/pere/blog/Debian_has_switched_to_dependency_based_boot_sequencing.html">Debian has switched to dependency based boot sequencing
</a>
582 <p>Since this evening, with the upload of sysvinit version
2.87dsf-
2,
583 and the upload of insserv version
1.12.0-
10 yesterday, Debian unstable
584 have been migrated to using dependency based boot sequencing. This
585 conclude work me and others have been doing for the last three days.
586 It feels great to see this finally part of the default Debian
587 installation. Now we just need to weed out the last few problems that
588 are bound to show up, to get everything ready for Squeeze.
</p>
590 <p>The next step is migrating /sbin/init from sysvinit to upstart, and
591 fixing the more fundamental problem of handing the event based
592 non-predictable kernel in the early boot.
</p>
598 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
603 <div class=
"padding"></div>
607 <a href=
"http://people.skolelinux.org/pere/blog/Parallellizing_the_boot_in_Debian_Squeeze___ready_for_wider_testing.html">Parallellizing the boot in Debian Squeeze - ready for wider testing
</a>
613 <p>These days, the init.d script dependencies in Squeeze are quite
614 complete, so complete that it is actually possible to run all the
615 init.d scripts in parallell based on these dependencies. If you want
616 to test your Squeeze system, make sure
617 <a href=
"http://wiki.debian.org/LSBInitScripts/DependencyBasedBoot">dependency
618 based boot sequencing
</a> is enabled, and add this line to
619 /etc/default/rcS:
</p>
625 <p>That is it. It will cause sysv-rc to use the startpar tool to run
626 scripts in parallel using the dependency information stored in
627 /etc/init.d/.depend.boot, /etc/init.d/.depend.start and
628 /etc/init.d/.depend.stop to order the scripts. Startpar is configured
629 to try to start the kdm and gdm scripts as early as possible, and will
630 start the facilities required by kdm or gdm as early as possible to
631 make this happen.
</p>
633 <p>Give it a try, and see if you like the result. If some services
634 fail to start properly, it is most likely because they have incomplete
635 init.d script dependencies in their startup script (or some of their
636 dependent scripts have incomplete dependencies). Report bugs and get
637 the package maintainers to fix it. :)
</p>
639 <p>Running scripts in parallel could be the default in Debian when we
640 manage to get the init.d script dependencies complete and correct. I
641 expect we will get there in Squeeze+
1, if we get manage to test and
642 fix the remaining issues.
</p>
644 <p>If you report any problems with dependencies in init.d scripts to
645 the BTS, please usertag the report to get it to show up at
646 <a href=
"http://bugs.debian.org/cgi-bin/pkgreport.cgi?users=initscripts-ng-devel@lists.alioth.debian.org">the
647 list of usertagged bugs related to this
</a>.
</p>
653 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
658 <div class=
"padding"></div>
662 <a href=
"http://people.skolelinux.org/pere/blog/systemd__an_interesting_alternative_to_upstart.html">systemd, an interesting alternative to upstart
</a>
668 <p>The last few days a new boot system called
669 <a href=
"http://www.freedesktop.org/wiki/Software/systemd">systemd
</a>
671 <a href=
"http://0pointer.de/blog/projects/systemd.html">introduced
</a>
673 to the free software world. I have not yet had time to play around
674 with it, but it seem to be a very interesting alternative to
675 <a href=
"http://upstart.ubuntu.com/">upstart
</a>, and might prove to be
676 a good alternative for Debian when we are able to switch to an event
677 based boot system. Tollef is
678 <a href=
"http://bugs.debian.org/580814">in the process
</a> of getting
679 systemd into Debian, and I look forward to seeing how well it work. I
680 like the fact that systemd handles init.d scripts with dependency
681 information natively, allowing them to run in parallel where upstart
682 at the moment do not.
</p>
684 <p>Unfortunately do systemd have the same problem as upstart regarding
685 platform support. It only work on recent Linux kernels, and also need
686 some new kernel features enabled to function properly. This means
687 kFreeBSD and Hurd ports of Debian will need a port or a different boot
688 system. Not sure how that will be handled if systemd proves to be the
691 <p>In the mean time, based on the
692 <a href=
"http://lists.debian.org/debian-devel/2010/05/msg00122.html">input
693 on debian-devel@
</a> regarding parallel booting in Debian, I have
694 decided to enable full parallel booting as the default in Debian as
695 soon as possible (probably this weekend or early next week), to see if
696 there are any remaining serious bugs in the init.d dependencies. A
697 new version of the sysvinit package implementing this change is
698 already in experimental. If all go well, Squeeze will be released
699 with parallel booting enabled by default.
</p>
705 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
710 <div class=
"padding"></div>
714 <a href=
"http://people.skolelinux.org/pere/blog/Sitesummary_tip__Listing_MAC_address_of_all_clients.html">Sitesummary tip: Listing MAC address of all clients
</a>
720 <p>In the recent Debian Edu versions, the
721 <a href=
"http://wiki.debian.org/DebianEdu/HowTo/SiteSummary">sitesummary
722 system
</a> is used to keep track of the machines in the school
723 network. Each machine will automatically report its status to the
724 central server after boot and once per night. The network setup is
725 also reported, and using this information it is possible to get the
726 MAC address of all network interfaces in the machines. This is useful
727 to update the DHCP configuration.
</p>
729 <p>To give some idea how to use sitesummary, here is a one-liner to
730 ist all MAC addresses of all machines reporting to sitesummary. Run
731 this on the collector host:
</p>
734 perl -MSiteSummary -e 'for_all_hosts(sub { print join(" ", get_macaddresses(shift)), "\n"; });'
737 <p>This will list all MAC addresses assosiated with all machine, one
738 line per machine and with space between the MAC addresses.
</p>
740 <p>To allow system administrators easier job at adding static DHCP
741 addresses for hosts, it would be possible to extend this to fetch
742 machine information from sitesummary and update the DHCP and DNS
743 tables in LDAP using this information. Such tool is unfortunately not
750 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary
</a>.
755 <div class=
"padding"></div>
759 <a href=
"http://people.skolelinux.org/pere/blog/Parallellized_boot_is_now_the_default_in_Debian_unstable.html">Parallellized boot is now the default in Debian/unstable
</a>
765 <p>Since this evening, parallel booting is the default in
766 Debian/unstable for machines using dependency based boot sequencing.
767 Apparently the testing of concurrent booting has been wider than
768 expected, if I am to believe the
769 <a href=
"http://lists.debian.org/debian-devel/2010/05/msg00122.html">input
770 on debian-devel@
</a>, and I concluded a few days ago to move forward
771 with the feature this weekend, to give us some time to detect any
772 remaining problems before Squeeze is frozen. If serious problems are
773 detected, it is simple to change the default back to sequential boot.
774 The upload of the new sysvinit package also activate a new upstream
777 More information about
778 <a href=
"http://wiki.debian.org/LSBInitScripts/DependencyBasedBoot">dependency
779 based boot sequencing
</a> is available from the Debian wiki. It is
780 currently possible to disable parallel booting when one run into
781 problems caused by it, by adding this line to /etc/default/rcS:
</p>
787 <p>If you report any problems with dependencies in init.d scripts to
788 the BTS, please usertag the report to get it to show up at
789 <a href=
"http://bugs.debian.org/cgi-bin/pkgreport.cgi?users=initscripts-ng-devel@lists.alioth.debian.org">the
790 list of usertagged bugs related to this
</a>.
</p>
796 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
801 <div class=
"padding"></div>
805 <a href=
"http://people.skolelinux.org/pere/blog/More_flexible_firmware_handling_in_debian_installer.html">More flexible firmware handling in debian-installer
</a>
811 <p>After a long break from debian-installer development, I finally
812 found time today to return to the project. Having to spend less time
813 working dependency based boot in debian, as it is almost complete now,
814 definitely helped freeing some time.
</p>
816 <p>A while back, I ran into a problem while working on Debian Edu. We
817 include some firmware packages on the Debian Edu CDs, those needed to
818 get disk and network controllers working. Without having these
819 firmware packages available during installation, it is impossible to
820 install Debian Edu on the given machine, and because our target group
821 are non-technical people, asking them to provide firmware packages on
822 an external medium is a support pain. Initially, I expected it to be
823 enough to include the firmware packages on the CD to get
824 debian-installer to find and use them. This proved to be wrong.
825 Next, I hoped it was enough to symlink the relevant firmware packages
826 to some useful location on the CD (tried /cdrom/ and
827 /cdrom/firmware/). This also proved to not work, and at this point I
828 found time to look at the debian-installer code to figure out what was
831 <p>The firmware loading code is in the hw-detect package, and a closer
832 look revealed that it would only look for firmware packages outside
833 the installation media, so the CD was never checked for firmware
834 packages. It would only check USB sticks, floppies and other
835 "external" media devices. Today I changed it to also look in the
836 /cdrom/firmware/ directory on the mounted CD or DVD, which should
837 solve the problem I ran into with Debian edu. I also changed it to
838 look in /firmware/, to make sure the installer also find firmware
839 provided in the initrd when booting the installer via PXE, to allow us
840 to provide the same feature in the PXE setup included in Debian
843 <p>To make sure firmware deb packages with a license questions are not
844 activated without asking if the license is accepted, I extended
845 hw-detect to look for preinst scripts in the firmware packages, and
846 run these before activating the firmware during installation. The
847 license question is asked using debconf in the preinst, so this should
848 solve the issue for the firmware packages I have looked at so far.
</p>
850 <p>If you want to discuss the details of these features, please
851 contact us on debian-boot@lists.debian.org.
</p>
857 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
862 <div class=
"padding"></div>
866 <a href=
"http://people.skolelinux.org/pere/blog/Parallellized_boot_seem_to_hold_up_well_in_Debian_testing.html">Parallellized boot seem to hold up well in Debian/testing
</a>
872 <p>A few days ago, parallel booting was enabled in Debian/testing.
873 The feature seem to hold up pretty well, but three fairly serious
874 issues are known and should be solved:
878 <li>The wicd package seen to
879 <a href=
"http://bugs.debian.org/508289">break NFS mounting
</a> and
880 <a href=
"http://bugs.debian.org/581586">network setup
</a> when
881 parallel booting is enabled. No idea why, but the wicd maintainer
882 seem to be on the case.
</li>
884 <li>The nvidia X driver seem to
885 <a href=
"http://bugs.debian.org/583312">have a race condition
</a>
886 triggered more easily when parallel booting is in effect. The
887 maintainer is on the case.
</li>
889 <li>The sysv-rc package fail to properly enable dependency based boot
890 sequencing (the shutdown is broken) when old file-rc users
891 <a href=
"http://bugs.debian.org/575080">try to switch back
</a> to
892 sysv-rc. One way to solve it would be for file-rc to create
893 /etc/init.d/.legacy-bootordering, and another is to try to make
894 sysv-rc more robust. Will investigate some more and probably upload a
895 workaround in sysv-rc to help those trying to move from file-rc to
896 sysv-rc get a working shutdown.
</li>
900 <p>All in all not many surprising issues, and all of them seem
901 solvable before Squeeze is released. In addition to these there are
902 some packages with bugs in their dependencies and run level settings,
903 which I expect will be fixed in a reasonable time span.
</p>
905 <p>If you report any problems with dependencies in init.d scripts to
906 the BTS, please usertag the report to get it to show up at
907 <a href=
"http://bugs.debian.org/cgi-bin/pkgreport.cgi?users=initscripts-ng-devel@lists.alioth.debian.org">the
908 list of usertagged bugs related to this
</a>.
</p>
910 <p>Update: Correct bug number to file-rc issue.
</p>
916 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
921 <div class=
"padding"></div>
925 <a href=
"http://people.skolelinux.org/pere/blog/KDM_fail_at_boot_with_NVidia_cards___and_no_one_try_to_fix_it_.html">KDM fail at boot with NVidia cards - and no one try to fix it?
</a>
931 <p>It is strange to watch how a bug in Debian causing KDM to fail to
932 start at boot when an NVidia video card is used is handled. The
933 problem seem to be that the nvidia X.org driver uses a long time to
934 initialize, and this duration is longer than kdm is configured to
937 <p>I came across two bugs related to this issue,
938 <a href=
"http://bugs.debian.org/583312">#
583312</a> initially filed
939 against initscripts and passed on to nvidia-glx when it became obvious
940 that the nvidia drivers were involved, and
941 <a href=
"http://bugs.debian.org/524751">#
524751</a> initially filed against
942 kdm and passed on to src:nvidia-graphics-drivers for unknown reasons.
</p>
944 <p>To me, it seem that no-one is interested in actually solving the
945 problem nvidia video card owners experience and make sure the Debian
946 distribution work out of the box for these users. The nvidia driver
947 maintainers expect kdm to be set up to wait longer, while kdm expect
948 the nvidia driver maintainers to fix the driver to start faster, and
949 while they wait for each other I guess the users end up switching to a
950 distribution that work for them. I have no idea what the solution is,
951 but I am pretty sure that waiting for each other is not it.
</p>
953 <p>I wonder why we end up handling bugs this way.
</p>
959 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
964 <div class=
"padding"></div>
968 <a href=
"http://people.skolelinux.org/pere/blog/Sitesummary_tip__Listing_computer_hardware_models_used_at_site.html">Sitesummary tip: Listing computer hardware models used at site
</a>
974 <p>When using sitesummary at a site to track machines, it is possible
975 to get a list of the machine types in use thanks to the DMI
976 information extracted from each machine. The script to do so is
977 included in the sitesummary package, and here is example output from
978 the Skolelinux build servers:
</p>
981 maintainer:~# /usr/lib/sitesummary/hardware-model-summary
983 Dell Computer Corporation
1
986 eserver xSeries
345 -[
8670M1X]-
1
992 <p>The quality of the report depend on the quality of the DMI tables
993 provided in each machine. Here there are Intel machines without model
994 information listed with Intel as vendor and no model, and virtual Xen
995 machines listed as [no-dmi-info]. One can add -l as a command line
996 option to list the individual machines.
</p>
999 <a href=
"http://narvikskolen.no/sitesummary/">available from the the
1000 city of Narvik
</a>, which uses Skolelinux on all their shools and also
1001 provide the basic sitesummary report publicly. In their report there
1002 are ~
1400 machines. I know they use both Ubuntu and Skolelinux on
1003 their machines, and as sitesummary is available in both distributions,
1004 it is trivial to get all of them to report to the same central
1011 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary
</a>.
1016 <div class=
"padding"></div>
1020 <a href=
"http://people.skolelinux.org/pere/blog/A_manual_for_standards_wars___.html">A manual for standards wars...
</a>
1027 <a href=
"http://feedproxy.google.com/~r/robweir/antic-atom/~3/QzU4RgoAGMg/weekly-links-10.html">blog
1028 of Rob Weir
</a> I came across the very interesting essay named
1029 <a href=
"http://faculty.haas.berkeley.edu/shapiro/wars.pdf">The Art of
1030 Standards Wars
</a> (PDF
25 pages). I recommend it for everyone
1031 following the standards wars of today.
</p>
1037 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/standard">standard
</a>.
1042 <div class=
"padding"></div>
1046 <a href=
"http://people.skolelinux.org/pere/blog/Upstart_or_sysvinit___as_init_d_scripts_see_it.html">Upstart or sysvinit - as init.d scripts see it
</a>
1052 <p>If Debian is to migrate to upstart on Linux, I expect some init.d
1053 scripts to migrate (some of) their operations to upstart job while
1054 keeping the init.d for hurd and kfreebsd. The packages with such
1055 needs will need a way to get their init.d scripts to behave
1056 differently when used with sysvinit and with upstart. Because of
1057 this, I had a look at the environment variables set when a init.d
1058 script is running under upstart, and when it is not.
</p>
1060 <p>With upstart, I notice these environment variables are set when a
1061 script is started from rcS.d/ (ignoring some irrelevant ones like
1070 UPSTART_EVENTS=startup
1072 UPSTART_JOB=rc-sysinit
1075 <p>With sysvinit, these environment variables are set for the same
1079 INIT_VERSION=sysvinit-
2.88
1086 <p>The RUNLEVEL and PREVLEVEL environment variables passed on from
1087 sysvinit are not set by upstart. Not sure if it is intentional or not
1088 to not be compatible with sysvinit in this regard.
</p>
1090 <p>For scripts needing to behave differently when upstart is used,
1091 looking for the UPSTART_JOB environment variable seem to be a good
1098 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
1103 <div class=
"padding"></div>
1107 <a href=
"http://people.skolelinux.org/pere/blog/Automatic_upgrade_testing_from_Lenny_to_Squeeze.html">Automatic upgrade testing from Lenny to Squeeze
</a>
1113 <p>The last few days I have done some upgrade testing in Debian, to
1114 see if the upgrade from Lenny to Squeeze will go smoothly. A few bugs
1115 have been discovered and reported in the process
1116 (
<a href=
"http://bugs.debian.org/585410">#
585410</a> in nagios3-cgi,
1117 <a href=
"http://bugs.debian.org/584879">#
584879</a> already fixed in
1118 enscript and
<a href=
"http://bugs.debian.org/584861">#
584861</a> in
1119 kdebase-workspace-data), and to get a more regular testing going on, I
1120 am working on a script to automate the test.
</p>
1122 <p>The idea is to create a Lenny chroot and use tasksel to install a
1123 Gnome or KDE desktop installation inside the chroot before upgrading
1124 it. To ensure no services are started in the chroot, a policy-rc.d
1125 script is inserted. To make sure tasksel believe it is to install a
1126 desktop on a laptop, the tasksel tests are replaced in the chroot
1127 (only acceptable because this is a throw-away chroot).
</p>
1129 <p>A naive upgrade from Lenny to Squeeze using aptitude dist-upgrade
1130 currently always fail because udev refuses to upgrade with the kernel
1131 in Lenny, so to avoid that problem the file /etc/udev/kernel-upgrade
1132 is created. The bug report
1133 <a href=
"http://bugs.debian.org/566000">#
566000</a> make me suspect
1134 this problem do not trigger in a chroot, but I touch the file anyway
1135 to make sure the upgrade go well. Testing on virtual and real
1136 hardware have failed me because of udev so far, and creating this file
1137 do the trick in such settings anyway. This is a
1138 <a href=
"http://www.linuxquestions.org/questions/debian-26/failed-dist-upgrade-due-to-udev-config_sysfs_deprecated-nonsense-804130/">known
1139 issue
</a> and the current udev behaviour is intended by the udev
1140 maintainer because he lack the resources to rewrite udev to keep
1141 working with old kernels or something like that. I really wish the
1142 udev upstream would keep udev backwards compatible, to avoid such
1143 upgrade problem, but given that they fail to do so, I guess
1144 documenting the way out of this mess is the best option we got for
1147 <p>Anyway, back to the task at hand, testing upgrades. This test
1148 script, which I call
<tt>upgrade-test
</tt> for now, is doing the
1166 mirror=http://ftp.skolelinux.org/debian
1167 tmpdir=chroot-$from-upgrade-$to-$desktop
1169 debootstrap $from $tmpdir $mirror
1170 chroot $tmpdir aptitude update
1171 cat
> $tmpdir/usr/sbin/policy-rc.d
<<EOF
1175 chmod a+rx $tmpdir/usr/sbin/policy-rc.d
1179 mount -t proc proc $tmpdir/proc
1180 # Make sure proc is unmounted also on failure
1181 trap exit_cleanup EXIT INT
1183 chroot $tmpdir aptitude -y install debconf-utils
1185 # Make sure tasksel autoselection trigger. It need the test scripts
1186 # to return the correct answers.
1187 echo tasksel tasksel/desktop multiselect $desktop | \
1188 chroot $tmpdir debconf-set-selections
1190 # Include the desktop and laptop task
1191 for test in desktop laptop ; do
1192 echo
> $tmpdir/usr/lib/tasksel/tests/$test
<<EOF
1196 chmod a+rx $tmpdir/usr/lib/tasksel/tests/$test
1199 DEBIAN_FRONTEND=noninteractive
1200 DEBIAN_PRIORITY=critical
1201 export DEBIAN_FRONTEND DEBIAN_PRIORITY
1202 chroot $tmpdir tasksel --new-install
1204 echo deb $mirror $to main
> $tmpdir/etc/apt/sources.list
1205 chroot $tmpdir aptitude update
1206 touch $tmpdir/etc/udev/kernel-upgrade
1207 chroot $tmpdir aptitude -y dist-upgrade
1211 <p>I suspect it would be useful to test upgrades with both apt-get and
1212 with aptitude, but I have not had time to look at how they behave
1213 differently so far. I hope to get a cron job running to do the test
1214 regularly and post the result on the web. The Gnome upgrade currently
1215 work, while the KDE upgrade fail because of the bug in
1216 kdebase-workspace-data
</p>
1218 <p>I am not quite sure what kind of extract from the huge upgrade logs
1219 (KDE
167 KiB, Gnome
516 KiB) it make sense to include in this blog
1220 post, so I will refrain from trying. I can report that for Gnome,
1221 aptitude report
760 packages upgraded,
448 newly installed,
129 to
1222 remove and
1 not upgraded and
1024MB need to be downloaded while for
1223 KDE the same numbers are
702 packages upgraded,
507 newly installed,
1224 193 to remove and
0 not upgraded and
1117MB need to be downloaded
</p>
1226 <p>I am very happy to notice that the Gnome desktop + laptop upgrade
1227 is able to migrate to dependency based boot sequencing and parallel
1228 booting without a hitch. Was unsure if there were still bugs with
1229 packages failing to clean up their obsolete init.d script during
1230 upgrades, and no such problem seem to affect the Gnome desktop+laptop
1237 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
1242 <div class=
"padding"></div>
1246 <a href=
"http://people.skolelinux.org/pere/blog/Lenny__Squeeze_upgrades__removals_by_apt_and_aptitude.html">Lenny-
>Squeeze upgrades, removals by apt and aptitude
</a>
1253 <a href=
"http://people.skolelinux.org/pere/blog/Automatic_upgrade_testing_from_Lenny_to_Squeeze.html">testing
1254 of Debian upgrades
</a> from Lenny to Squeeze continues, and I've
1255 finally made the upgrade logs available from
1256 <a href=
"http://people.skolelinux.org/pere/debian-upgrade-testing/">http://people.skolelinux.org/pere/debian-upgrade-testing/
</a>.
1257 I am now testing dist-upgrade of Gnome and KDE in a chroot using both
1258 apt and aptitude, and found their differences interesting. This time
1259 I will only focus on their removal plans.
</p>
1261 <p>After installing a Gnome desktop and the laptop task, apt-get wants
1262 to remove
72 packages when dist-upgrading from Lenny to Squeeze. The
1263 surprising part is that it want to remove xorg and all
1264 xserver-xorg-video* drivers. Clearly not a good choice, but I am not
1265 sure why. When asking aptitude to do the same, it want to remove
129
1266 packages, but most of them are library packages I suspect are no
1267 longer needed. Both of them want to remove bluetooth packages, which
1268 I do not know. Perhaps these bluetooth packages are obsolete?
</p>
1270 <p>For KDE, apt-get want to remove
82 packages, among them kdebase
1271 which seem like a bad idea and xorg the same way as with Gnome. Asking
1272 aptitude for the same, it wants to remove
192 packages, none which are
1275 <p>I guess the removal of xorg during upgrades should be investigated
1276 and avoided, and perhaps others as well. Here are the complete list
1277 of planned removals. The complete logs is available from the URL
1278 above. Note if you want to repeat these tests, that the upgrade test
1279 for kde+apt-get hung in the tasksel setup because of dpkg asking
1280 conffile questions. No idea why. I worked around it by using
1281 '
<tt>echo
>> /proc/
<em>pidofdpkg
</em>/fd/
0</tt>' to tell dpkg to
1284 <p><b>apt-get gnome
72</b>
1285 <br>bluez-gnome cupsddk-drivers deskbar-applet gnome
1286 gnome-desktop-environment gnome-network-admin gtkhtml3.14
1287 iceweasel-gnome-support libavcodec51 libdatrie0 libgdl-
1-
0
1288 libgnomekbd2 libgnomekbdui2 libmetacity0 libslab0 libxcb-xlib0
1289 nautilus-cd-burner python-gnome2-desktop python-gnome2-extras
1290 serpentine swfdec-mozilla update-manager xorg xserver-xorg
1291 xserver-xorg-core xserver-xorg-input-all xserver-xorg-input-evdev
1292 xserver-xorg-input-kbd xserver-xorg-input-mouse
1293 xserver-xorg-input-synaptics xserver-xorg-input-wacom
1294 xserver-xorg-video-all xserver-xorg-video-apm xserver-xorg-video-ark
1295 xserver-xorg-video-ati xserver-xorg-video-chips
1296 xserver-xorg-video-cirrus xserver-xorg-video-cyrix
1297 xserver-xorg-video-dummy xserver-xorg-video-fbdev
1298 xserver-xorg-video-glint xserver-xorg-video-i128
1299 xserver-xorg-video-i740 xserver-xorg-video-imstt
1300 xserver-xorg-video-intel xserver-xorg-video-mach64
1301 xserver-xorg-video-mga xserver-xorg-video-neomagic
1302 xserver-xorg-video-nsc xserver-xorg-video-nv
1303 xserver-xorg-video-openchrome xserver-xorg-video-r128
1304 xserver-xorg-video-radeon xserver-xorg-video-radeonhd
1305 xserver-xorg-video-rendition xserver-xorg-video-s3
1306 xserver-xorg-video-s3virge xserver-xorg-video-savage
1307 xserver-xorg-video-siliconmotion xserver-xorg-video-sis
1308 xserver-xorg-video-sisusb xserver-xorg-video-tdfx
1309 xserver-xorg-video-tga xserver-xorg-video-trident
1310 xserver-xorg-video-tseng xserver-xorg-video-v4l
1311 xserver-xorg-video-vesa xserver-xorg-video-vga
1312 xserver-xorg-video-vmware xserver-xorg-video-voodoo xulrunner-
1.9
1313 xulrunner-
1.9-gnome-support
</p>
1315 <p><b>aptitude gnome
129</b>
1317 <br>bluez-gnome bluez-utils cpp-
4.3 cupsddk-drivers dhcdbd
1318 djvulibre-desktop finger gnome-app-install gnome-mount
1319 gnome-network-admin gnome-spell gnome-vfs-obexftp
1320 gnome-volume-manager gstreamer0.10-gnomevfs gtkhtml3.14 libao2
1321 libavahi-compat-libdnssd1 libavahi-core5 libavcodec51 libbluetooth2
1322 libcamel1.2-
11 libcdio7 libcucul0 libcupsys2 libcurl3 libdatrie0
1323 libdirectfb-
1.0-
0 libdvdread3 libedataserver1.2-
9 libeel2-
2.20
1324 libeel2-data libepc-
1.0-
1 libepc-ui-
1.0-
1 libfaad0 libgail-common
1325 libgd2-noxpm libgda3-
3 libgda3-common libgdl-
1-
0 libgdl-
1-common
1326 libggz2 libggzcore9 libggzmod4 libgksu1.2-
0 libgksuui1.0-
1 libgmyth0
1327 libgnomecups1.0-
1 libgnomekbd2 libgnomekbdui2 libgnomeprint2.2-
0
1328 libgnomeprint2.2-data libgnomeprintui2.2-
0 libgnomeprintui2.2-common
1329 libgnomevfs2-bin libgpod3 libgraphviz4 libgtkhtml2-
0
1330 libgtksourceview-common libgtksourceview1.0-
0 libgucharmap6
1331 libhesiod0 libicu38 libiw29 libkpathsea4 libltdl3 libmagick++
10
1332 libmagick10 libmalaga7 libmetacity0 libmtp7 libmysqlclient15off
1333 libnautilus-burn4 libneon27 libnm-glib0 libnm-util0 libopal-
2.2
1334 libosp5 libparted1.8-
10 libpoppler-glib3 libpoppler3 libpt-
1.10.10
1335 libpt-
1.10.10-plugins-alsa libpt-
1.10.10-plugins-v4l libraw1394-
8
1336 libsensors3 libslab0 libsmbios2 libsoup2.2-
8 libssh2-
1
1337 libsuitesparse-
3.1.0 libswfdec-
0.6-
90 libtalloc1 libtotem-plparser10
1338 libtrackerclient0 libxalan2-java libxalan2-java-gcj libxcb-xlib0
1339 libxerces2-java libxerces2-java-gcj libxklavier12 libxtrap6
1340 libxxf86misc1 libzephyr3 mysql-common nautilus-cd-burner
1341 openoffice.org-writer2latex openssl-blacklist p7zip
1342 python-
4suite-xml python-eggtrayicon python-gnome2-desktop
1343 python-gnome2-extras python-gtkhtml2 python-gtkmozembed
1344 python-numeric python-sexy serpentine svgalibg1 swfdec-gnome
1345 swfdec-mozilla totem-gstreamer update-manager wodim
1346 xserver-xorg-video-cyrix xserver-xorg-video-imstt
1347 xserver-xorg-video-nsc xserver-xorg-video-v4l xserver-xorg-video-vga
1350 <p><b>apt-get kde
82</b>
1352 <br>cupsddk-drivers karm kaudiocreator kcoloredit kcontrol kde kde-core
1353 kdeaddons kdeartwork kdebase kdebase-bin kdebase-bin-kde3
1354 kdebase-kio-plugins kdesktop kdeutils khelpcenter kicker
1355 kicker-applets knewsticker kolourpaint konq-plugins konqueror korn
1356 kpersonalizer kscreensaver ksplash libavcodec51 libdatrie0 libkiten1
1357 libxcb-xlib0 quanta superkaramba texlive-base-bin xorg xserver-xorg
1358 xserver-xorg-core xserver-xorg-input-all xserver-xorg-input-evdev
1359 xserver-xorg-input-kbd xserver-xorg-input-mouse
1360 xserver-xorg-input-synaptics xserver-xorg-input-wacom
1361 xserver-xorg-video-all xserver-xorg-video-apm xserver-xorg-video-ark
1362 xserver-xorg-video-ati xserver-xorg-video-chips
1363 xserver-xorg-video-cirrus xserver-xorg-video-cyrix
1364 xserver-xorg-video-dummy xserver-xorg-video-fbdev
1365 xserver-xorg-video-glint xserver-xorg-video-i128
1366 xserver-xorg-video-i740 xserver-xorg-video-imstt
1367 xserver-xorg-video-intel xserver-xorg-video-mach64
1368 xserver-xorg-video-mga xserver-xorg-video-neomagic
1369 xserver-xorg-video-nsc xserver-xorg-video-nv
1370 xserver-xorg-video-openchrome xserver-xorg-video-r128
1371 xserver-xorg-video-radeon xserver-xorg-video-radeonhd
1372 xserver-xorg-video-rendition xserver-xorg-video-s3
1373 xserver-xorg-video-s3virge xserver-xorg-video-savage
1374 xserver-xorg-video-siliconmotion xserver-xorg-video-sis
1375 xserver-xorg-video-sisusb xserver-xorg-video-tdfx
1376 xserver-xorg-video-tga xserver-xorg-video-trident
1377 xserver-xorg-video-tseng xserver-xorg-video-v4l
1378 xserver-xorg-video-vesa xserver-xorg-video-vga
1379 xserver-xorg-video-vmware xserver-xorg-video-voodoo xulrunner-
1.9</p>
1381 <p><b>aptitude kde
192</b>
1382 <br>bluez-utils cpp-
4.3 cupsddk-drivers cvs dcoprss dhcdbd
1383 djvulibre-desktop dosfstools eyesapplet fifteenapplet finger gettext
1384 ghostscript-x imlib-base imlib11 indi kandy karm kasteroids
1385 kaudiocreator kbackgammon kbstate kcoloredit kcontrol kcron kdat
1386 kdeadmin-kfile-plugins kdeartwork-misc kdeartwork-theme-window
1387 kdebase-bin-kde3 kdebase-kio-plugins kdeedu-data
1388 kdegraphics-kfile-plugins kdelirc kdemultimedia-kappfinder-data
1389 kdemultimedia-kfile-plugins kdenetwork-kfile-plugins
1390 kdepim-kfile-plugins kdepim-kio-plugins kdeprint kdesktop kdessh
1391 kdict kdnssd kdvi kedit keduca kenolaba kfax kfaxview kfouleggs
1392 kghostview khelpcenter khexedit kiconedit kitchensync klatin
1393 klickety kmailcvt kmenuedit kmid kmilo kmoon kmrml kodo kolourpaint
1394 kooka korn kpager kpdf kpercentage kpf kpilot kpoker kpovmodeler
1395 krec kregexpeditor ksayit ksim ksirc ksirtet ksmiletris ksmserver
1396 ksnake ksokoban ksplash ksvg ksysv ktip ktnef kuickshow kverbos
1397 kview kviewshell kvoctrain kwifimanager kwin kwin4 kworldclock
1398 kxsldbg libakode2 libao2 libarts1-akode libarts1-audiofile
1399 libarts1-mpeglib libarts1-xine libavahi-compat-libdnssd1
1400 libavahi-core5 libavc1394-
0 libavcodec51 libbluetooth2
1401 libboost-python1.34
.1 libcucul0 libcurl3 libcvsservice0 libdatrie0
1402 libdirectfb-
1.0-
0 libdjvulibre21 libdvdread3 libfaad0 libfreebob0
1403 libgail-common libgd2-noxpm libgraphviz4 libgsmme1c2a libgtkhtml2-
0
1404 libicu38 libiec61883-
0 libindex0 libiw29 libk3b3 libkcal2b libkcddb1
1405 libkdeedu3 libkdepim1a libkgantt0 libkiten1 libkleopatra1 libkmime2
1406 libkpathsea4 libkpimexchange1 libkpimidentities1 libkscan1
1407 libksieve0 libktnef1 liblockdev1 libltdl3 libmagick10 libmimelib1c2a
1408 libmozjs1d libmpcdec3 libneon27 libnm-util0 libopensync0 libpisock9
1409 libpoppler-glib3 libpoppler-qt2 libpoppler3 libraw1394-
8 libsmbios2
1410 libssh2-
1 libsuitesparse-
3.1.0 libtalloc1 libtiff-tools
1411 libxalan2-java libxalan2-java-gcj libxcb-xlib0 libxerces2-java
1412 libxerces2-java-gcj libxtrap6 mpeglib networkstatus
1413 openoffice.org-writer2latex pmount poster psutils quanta quanta-data
1414 superkaramba svgalibg1 tex-common texlive-base texlive-base-bin
1415 texlive-common texlive-doc-base texlive-fonts-recommended
1416 xserver-xorg-video-cyrix xserver-xorg-video-imstt
1417 xserver-xorg-video-nsc xserver-xorg-video-v4l xserver-xorg-video-vga
1425 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
1430 <div class=
"padding"></div>
1434 <a href=
"http://people.skolelinux.org/pere/blog/Calling_tasksel_like_the_installer__while_still_getting_useful_output.html">Calling tasksel like the installer, while still getting useful output
</a>
1440 <p>A few times I have had the need to simulate the way tasksel
1441 installs packages during the normal debian-installer run. Until now,
1442 I have ended up letting tasksel do the work, with the annoying problem
1443 of not getting any feedback at all when something fails (like a
1444 conffile question from dpkg or a download that fails), using code like
1448 export DEBIAN_FRONTEND=noninteractive
1449 tasksel --new-install
1452 This would invoke tasksel, let its automatic task selection pick the
1453 tasks to install, and continue to install the requested tasks without
1454 any output what so ever.
1456 Recently I revisited this problem while working on the automatic
1457 package upgrade testing, because tasksel would some times hang without
1458 any useful feedback, and I want to see what is going on when it
1459 happen. Then it occured to me, I can parse the output from tasksel
1460 when asked to run in test mode, and use that aptitude command line
1461 printed by tasksel then to simulate the tasksel run. I ended up using
1465 export DEBIAN_FRONTEND=noninteractive
1466 cmd="$(in_target tasksel -t --new-install | sed 's/debconf-apt-progress -- //')"
1470 <p>The content of $cmd is typically something like "
<tt>aptitude -q
1471 --without-recommends -o APT::Install-Recommends=no -y install
1472 ~t^desktop$ ~t^gnome-desktop$ ~t^laptop$ ~pstandard ~prequired
1473 ~pimportant
</tt>", which will install the gnome desktop task, the
1474 laptop task and all packages with priority standard , required and
1475 important, just like tasksel would have done it during
1478 <p>A better approach is probably to extend tasksel to be able to
1479 install packages without using debconf-apt-progress, for use cases
1486 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian
">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug
">nuug</a>.
1491 <div class="padding
"></div>
1495 <a href="http://people.skolelinux.org/pere/blog/Idea_for_a_change_to_LDAP_schemas_allowing_DNS_and_DHCP_info_to_be_combined_into_one_object.html
">Idea for a change to LDAP schemas allowing DNS and DHCP info to be combined into one object</a>
1502 <a href="http://people.skolelinux.org/pere/blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html
">complained
1503 about the fact</a> that it is not possible with the provided schemas
1504 for storing DNS and DHCP information in LDAP to combine the two sets
1505 of information into one LDAP object representing a computer.</p>
1507 <p>In the mean time, I discovered that a simple fix would be to make
1508 the dhcpHost object class auxiliary, to allow it to be combined with
1509 the dNSDomain object class, and thus forming one object for one
1510 computer when storing both DHCP and DNS information in LDAP.</p>
1512 <p>If I understand this correctly, it is not safe to do this change
1513 without also changing the assigned number for the object class, and I
1514 do not know enough about LDAP schema design to do that properly for
1517 <p>Anyway, for future reference, this is how I believe we could change
1519 <a href="http://tools.ietf.org/html/draft-ietf-dhc-ldap-schema-
00">DHCP
1520 schema</a> to solve at least part of the problem with the LDAP schemas
1521 available today from IETF.</p>
1524 --- dhcp.schema (revision 65192)
1525 +++ dhcp.schema (working copy)
1527 objectclass ( 2.16.840.1.113719.1.203.6.6
1529 DESC 'This represents information about a particular client'
1533 MAY (dhcpLeaseDN $ dhcpHWAddress $ dhcpOptionsDN $ dhcpStatements $ dhcpComments $ dhcpOption)
1534 X-NDS_CONTAINMENT ('dhcpService' 'dhcpSubnet' 'dhcpGroup') )
1537 <p>I very much welcome clues on how to do this properly for Debian
1538 Edu/Squeeze. We provide the DHCP schema in our debian-edu-config
1539 package, and should thus be free to rewrite it as we see fit.</p>
1541 <p>If you want to help out with implementing this for Debian Edu,
1542 please contact us on debian-edu@lists.debian.org.</p>
1548 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian
">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu
">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap
">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug
">nuug</a>.
1553 <div class="padding
"></div>
1557 <a href="http://people.skolelinux.org/pere/blog/LUMA__a_very_nice_LDAP_GUI.html
">LUMA, a very nice LDAP GUI</a>
1563 <p>The last few days I have been looking into the status of the LDAP
1564 directory in Debian Edu, and in the process I started to miss a GUI
1565 tool to browse the LDAP tree. The only one I was able to find in
1566 Debian/Squeeze and Lenny is
1567 <a href="http://luma.sourceforge.net/
">LUMA</a>, which has proved to
1568 be a great tool to get a overview of the current LDAP directory
1569 populated by default in Skolelinux. Thanks to it, I have been able to
1570 find empty and obsolete subtrees, misplaced objects and duplicate
1571 objects. It will be installed by default in Debian/Squeeze. If you
1572 are working with LDAP, give it a go. :)</p>
1574 <p>I did notice one problem with it I have not had time to report to
1575 the BTS yet. There is no .desktop file in the package, so the tool do
1576 not show up in the Gnome and KDE menus, but only deep down in in the
1577 Debian submenu in KDE. I hope that can be fixed before Squeeze is
1580 <p>I have not yet been able to get it to modify the tree yet. I would
1581 like to move objects and remove subtrees directly in the GUI, but have
1582 not found a way to do that with LUMA yet. So in the mean time, I use
1583 <a href="http://www.lichteblau.com/ldapvi/
">ldapvi</a> for that.</p>
1585 <p>If you have tips on other GUI tools for LDAP that might be useful
1586 in Debian Edu, please contact us on debian-edu@lists.debian.org.</p>
1588 <p>Update 2010-06-29: Ross Reedstrom tipped us about the
1589 <a href="http://packages.qa.debian.org/g/gq.html
">gq</a> package as a
1590 useful GUI alternative. It seem like a good tool, but is unmaintained
1591 in Debian and got a RC bug keeping it out of Squeeze. Unless that
1592 changes, it will not be an option for Debian Edu based on Squeeze.</p>
1598 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian
">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu
">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap
">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug
">nuug</a>.
1603 <div class="padding
"></div>
1607 <a href="http://people.skolelinux.org/pere/blog/Lenny__Squeeze_upgrades__apt_vs_aptitude_with_the_Gnome_desktop.html
">Lenny->Squeeze upgrades, apt vs aptitude with the Gnome desktop</a>
1613 <p>Here is a short update on my <a
1614 href="http://people.skolelinux.org/~pere/debian-upgrade-testing/
">my
1615 Debian Lenny->Squeeze upgrade testing</a>. Here is a summary of the
1616 difference for Gnome when it is upgraded by apt-get and aptitude. I'm
1617 not reporting the status for KDE, because the upgrade crashes when
1618 aptitude try because of missing conflicts
1619 (<a href="http://bugs.debian.org/
584861">#584861</a> and
1620 <a href="http://bugs.debian.org/
585716">#585716</a>).</p>
1622 <p>At the end of the upgrade test script, dpkg -l is executed to get a
1623 complete list of the installed packages. Based on this I see these
1624 differences when I did a test run today. As usual, I do not really
1625 know what the correct set of packages would be, but thought it best to
1626 publish the difference.</p>
1628 <p>Installed using apt-get, missing with aptitude</p>
1631 at-spi cpp-4.3 finger gnome-spell gstreamer0.10-gnomevfs
1632 libatspi1.0-0 libcupsys2 libeel2-data libgail-common libgdl-1-common
1633 libgnomeprint2.2-data libgnomeprintui2.2-common libgnomevfs2-bin
1634 libgtksourceview-common libpt-1.10.10-plugins-alsa
1635 libpt-1.10.10-plugins-v4l libservlet2.4-java libxalan2-java
1636 libxerces2-java openoffice.org-writer2latex openssl-blacklist p7zip
1637 python-4suite-xml python-eggtrayicon python-gtkhtml2
1638 python-gtkmozembed svgalibg1 xserver-xephyr zip
1641 <p>Installed using apt-get, removed with aptitude</p>
1644 bluez-utils dhcdbd djvulibre-desktop epiphany-gecko
1645 gnome-app-install gnome-mount gnome-vfs-obexftp gnome-volume-manager
1646 libao2 libavahi-compat-libdnssd1 libavahi-core5 libbind9-50
1647 libbluetooth2 libcamel1.2-11 libcdio7 libcucul0 libcurl3
1648 libdirectfb-1.0-0 libdvdread3 libedata-cal1.2-6 libedataserver1.2-9
1649 libeel2-2.20 libepc-1.0-1 libepc-ui-1.0-1 libexchange-storage1.2-3
1650 libfaad0 libgd2-noxpm libgda3-3 libgda3-common libggz2 libggzcore9
1651 libggzmod4 libgksu1.2-0 libgksuui1.0-1 libgmyth0 libgnome-desktop-2
1652 libgnome-pilot2 libgnomecups1.0-1 libgnomeprint2.2-0
1653 libgnomeprintui2.2-0 libgpod3 libgraphviz4 libgtkhtml2-0
1654 libgtksourceview1.0-0 libgucharmap6 libhesiod0 libicu38 libisccc50
1655 libisccfg50 libiw29 libkpathsea4 libltdl3 liblwres50 libmagick++10
1656 libmagick10 libmalaga7 libmtp7 libmysqlclient15off libnautilus-burn4
1657 libneon27 libnm-glib0 libnm-util0 libopal-2.2 libosp5
1658 libparted1.8-10 libpisock9 libpisync1 libpoppler-glib3 libpoppler3
1659 libpt-1.10.10 libraw1394-8 libsensors3 libsmbios2 libsoup2.2-8
1660 libssh2-1 libsuitesparse-3.1.0 libswfdec-0.6-90 libtalloc1
1661 libtotem-plparser10 libtrackerclient0 libvoikko1 libxalan2-java-gcj
1662 libxerces2-java-gcj libxklavier12 libxtrap6 libxxf86misc1 libzephyr3
1663 mysql-common swfdec-gnome totem-gstreamer wodim
1666 <p>Installed using aptitude, missing with apt-get</p>
1669 gnome gnome-desktop-environment hamster-applet python-gnomeapplet
1670 python-gnomekeyring python-wnck rhythmbox-plugins xorg
1671 xserver-xorg-input-all xserver-xorg-input-evdev
1672 xserver-xorg-input-kbd xserver-xorg-input-mouse
1673 xserver-xorg-input-synaptics xserver-xorg-video-all
1674 xserver-xorg-video-apm xserver-xorg-video-ark xserver-xorg-video-ati
1675 xserver-xorg-video-chips xserver-xorg-video-cirrus
1676 xserver-xorg-video-dummy xserver-xorg-video-fbdev
1677 xserver-xorg-video-glint xserver-xorg-video-i128
1678 xserver-xorg-video-i740 xserver-xorg-video-mach64
1679 xserver-xorg-video-mga xserver-xorg-video-neomagic
1680 xserver-xorg-video-nouveau xserver-xorg-video-nv
1681 xserver-xorg-video-r128 xserver-xorg-video-radeon
1682 xserver-xorg-video-radeonhd xserver-xorg-video-rendition
1683 xserver-xorg-video-s3 xserver-xorg-video-s3virge
1684 xserver-xorg-video-savage xserver-xorg-video-siliconmotion
1685 xserver-xorg-video-sis xserver-xorg-video-sisusb
1686 xserver-xorg-video-tdfx xserver-xorg-video-tga
1687 xserver-xorg-video-trident xserver-xorg-video-tseng
1688 xserver-xorg-video-vesa xserver-xorg-video-vmware
1689 xserver-xorg-video-voodoo
1692 <p>Installed using aptitude, removed with apt-get</p>
1695 deskbar-applet xserver-xorg xserver-xorg-core
1696 xserver-xorg-input-wacom xserver-xorg-video-intel
1697 xserver-xorg-video-openchrome
1700 <p>I was told on IRC that the xorg-xserver package was
1701 <a href="http://git.debian.org/?p=pkg-xorg/xserver/xorg-server.git;a=commit;h=
9c8080d06c457932d3bfec021c69ac000aa60120
">changed
1702 in git</a> today to try to get apt-get to not remove xorg completely.
1703 No idea when it hits Squeeze, but when it does I hope it will reduce
1704 the difference somewhat.
1710 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian
">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu
">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>.
1715 <div class="padding
"></div>
1719 <a href="http://people.skolelinux.org/pere/blog/jXplorer__a_very_nice_LDAP_GUI.html
">jXplorer, a very nice LDAP GUI</a>
1726 <a href="http://people.skolelinux.org/pere/blog/LUMA__a_very_nice_LDAP_GUI.html
">my
1727 last post</a> about available LDAP tools in Debian, I was told about a
1728 LDAP GUI that is even better than luma. The java application
1729 <a href="http://jxplorer.org/
">jXplorer</a> is claimed to be capable of
1730 moving LDAP objects and subtrees using drag-and-drop, and can
1731 authenticate using Kerberos. I have only tested the Kerberos
1732 authentication, but do not have a LDAP setup allowing me to rewrite
1733 LDAP with my test user yet. It is
1734 <a href="http://packages.qa.debian.org/j/jxplorer.html
">available in
1735 Debian</a> testing and unstable at the moment. The only problem I
1736 have with it is how it handle errors. If something go wrong, its
1737 non-intuitive behaviour require me to go through some query work list
1738 and remove the failing query. Nothing big, but very annoying.</p>
1744 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian
">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu
">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap
">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug
">nuug</a>.
1749 <div class="padding
"></div>
1753 <a href="http://people.skolelinux.org/pere/blog/Idea_for_storing_LTSP_configuration_in_LDAP.html
">Idea for storing LTSP configuration in LDAP</a>
1759 <p>Vagrant mentioned on IRC today that ltsp_config now support
1760 sourcing files from /usr/share/ltsp/ltsp_config.d/ on the thin
1761 clients, and that this can be used to fetch configuration from LDAP if
1762 Debian Edu choose to store configuration there.</p>
1764 <p>Armed with this information, I got inspired and wrote a test module
1765 to get configuration from LDAP. The idea is to look up the MAC
1766 address of the client in LDAP, and look for attributes on the form
1767 ltspconfigsetting=value, and use this to export SETTING=value to the
1770 <p>The goal is to be able to store the LTSP configuration attributes
1771 in a "computer" LDAP object used by both DNS and DHCP, and thus
1772 allowing us to store all information about a computer in one place.
</p>
1774 <p>This is a untested draft implementation, and I welcome feedback on
1775 this approach. A real LDAP schema for the ltspClientAux objectclass
1776 need to be written. Comments, suggestions, etc?
</p>
1779 # Store in /opt/ltsp/$arch/usr/share/ltsp/ltsp_config.d/ldap-config
1781 # Fetch LTSP client settings from LDAP based on MAC address
1783 # Uses ethernet address as stored in the dhcpHost objectclass using
1784 # the dhcpHWAddress attribute or ethernet address stored in the
1785 # ieee802Device objectclass with the macAddress attribute.
1787 # This module is written to be schema agnostic, and only depend on the
1788 # existence of attribute names.
1790 # The LTSP configuration variables are saved directly using a
1791 # ltspConfig prefix and uppercasing the rest of the attribute name.
1792 # To set the SERVER variable, set the ltspConfigServer attribute.
1794 # Some LDAP schema should be created with all the relevant
1795 # configuration settings. Something like this should work:
1797 # objectclass (
1.1.2.2 NAME 'ltspClientAux'
1800 # MAY ( ltspConfigServer $ ltsConfigSound $ ... )
1802 LDAPSERVER=$(debian-edu-ldapserver)
1803 if [ "$LDAPSERVER" ] ; then
1804 LDAPBASE=$(debian-edu-ldapserver -b)
1805 for MAC in $(LANG=C ifconfig |grep -i hwaddr| awk '{print $
5}'|sort -u) ; do
1806 filter="(|(dhcpHWAddress=ethernet $MAC)(macAddress=$MAC))"
1807 ldapsearch -h "$LDAPSERVER" -b "$LDAPBASE" -v -x "$filter" | \
1808 grep '^ltspConfig' | while read attr value ; do
1809 # Remove prefix and convert to upper case
1810 attr=$(echo $attr | sed 's/^ltspConfig//i' | tr a-z A-Z)
1811 # bass value on to clients
1812 eval "$attr=$value; export $attr"
1818 <p>I'm not sure this shell construction will work, because I suspect
1819 the while block might end up in a subshell causing the variables set
1820 there to not show up in ltsp-config, but if that is the case I am sure
1821 the code can be restructured to make sure the variables are passed on.
1822 I expect that can be solved with some testing. :)
</p>
1824 <p>If you want to help out with implementing this for Debian Edu,
1825 please contact us on debian-edu@lists.debian.org.
</p>
1827 <p>Update
2010-
07-
17: I am aware of another effort to store LTSP
1828 configuration in LDAP that was created around year
2000 by
1829 <a href=
"http://www.pcxperience.com/thinclient/documentation/ldap.html">PC
1830 Xperience, Inc.,
2000</a>. I found its
1831 <a href=
"http://people.redhat.com/alikins/ltsp/ldap/">files
</a> on a
1832 personal home page over at redhat.com.
</p>
1838 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/ldap">ldap
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
1843 <div class=
"padding"></div>
1847 <a href=
"http://people.skolelinux.org/pere/blog/Combining_PowerDNS_and_ISC_DHCP_LDAP_objects.html">Combining PowerDNS and ISC DHCP LDAP objects
</a>
1853 <p>For a while now, I have wanted to find a way to change the DNS and
1854 DHCP services in Debian Edu to use the same LDAP objects for a given
1855 computer, to avoid the possibility of having a inconsistent state for
1856 a computer in LDAP (as in DHCP but no DNS entry or the other way
1857 around) and make it easier to add computers to LDAP.
</p>
1859 <p>I've looked at how powerdns and dhcpd is using LDAP, and using this
1860 information finally found a solution that seem to work.
</p>
1862 <p>The old setup required three LDAP objects for a given computer.
1863 One forward DNS entry, one reverse DNS entry and one DHCP entry. If
1864 we switch powerdns to use its strict LDAP method (ldap-method=strict
1865 in pdns-debian-edu.conf), the forward and reverse DNS entries are
1866 merged into one while making it impossible to transfer the reverse map
1867 to a slave DNS server.
</p>
1869 <p>If we also replace the object class used to get the DNS related
1870 attributes to one allowing these attributes to be combined with the
1871 dhcphost object class, we can merge the DNS and DHCP entries into one.
1872 I've written such object class in the dnsdomainaux.schema file (need
1873 proper OIDs, but that is a minor issue), and tested the setup. It
1876 <p>With this test setup in place, we can get away with one LDAP object
1877 for both DNS and DHCP, and even the LTSP configuration I suggested in
1878 an earlier email. The combined LDAP object will look something like
1882 dn: cn=hostname,cn=group1,cn=THINCLIENTS,cn=DHCP Config,dc=skole,dc=skolelinux,dc=no
1884 objectClass: dhcphost
1885 objectclass: domainrelatedobject
1886 objectclass: dnsdomainaux
1887 associateddomain: hostname.intern
1888 arecord:
10.11.12.13
1889 dhcphwaddress: ethernet
00:
00:
00:
00:
00:
00
1890 dhcpstatements: fixed-address hostname
1894 <p>The DNS server uses the associateddomain and arecord entries, while
1895 the DHCP server uses the dhcphwaddress and dhcpstatements entries
1896 before asking DNS to resolve the fixed-adddress. LTSP will use
1897 dhcphwaddress or associateddomain and the ldapconfig* attributes.
</p>
1899 <p>I am not yet sure if I can get the DHCP server to look for its
1900 dhcphost in a different location, to allow us to put the objects
1901 outside the "DHCP Config" subtree, but hope to figure out a way to do
1902 that. If I can't figure out a way to do that, we can still get rid of
1903 the hosts subtree and move all its content into the DHCP Config tree
1904 (which probably should be renamed to be more related to the new
1905 content. I suspect cn=dnsdhcp,ou=services or something like that
1906 might be a good place to put it.
</p>
1908 <p>If you want to help out with implementing this for Debian Edu,
1909 please contact us on debian-edu@lists.debian.org.
</p>
1915 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/ldap">ldap
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
1920 <div class=
"padding"></div>
1924 <a href=
"http://people.skolelinux.org/pere/blog/What_are_they_searching_for___PowerDNS_and_ISC_DHCP_in_LDAP.html">What are they searching for - PowerDNS and ISC DHCP in LDAP
</a>
1931 <a href=
"http://people.skolelinux.org/pere/blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html">followup
</a>
1933 <a href=
"http://people.skolelinux.org/pere/blog/Idea_for_a_change_to_LDAP_schemas_allowing_DNS_and_DHCP_info_to_be_combined_into_one_object.html">previous
1935 <a href=
"http://people.skolelinux.org/pere/blog/Combining_PowerDNS_and_ISC_DHCP_LDAP_objects.html">merging
1936 all
</a> the computer related LDAP objects in Debian Edu.
</p>
1938 <p>As a step to try to see if it possible to merge the DNS and DHCP
1939 LDAP objects, I have had a look at how the packages pdns-backend-ldap
1940 and dhcp3-server-ldap in Debian use the LDAP server. The two
1941 implementations are quite different in how they use LDAP.
</p>
1943 To get this information, I started slapd with debugging enabled and
1944 dumped the debug output to a file to get the LDAP searches performed
1945 on a Debian Edu main-server. Here is a summary.
1947 <p><strong>powerdns
</strong></p>
1949 <a href=
"http://www.linuxnetworks.de/doc/index.php/PowerDNS_LDAP_Backend">Clues
1950 on how to
</a> set up PowerDNS to use a LDAP backend is available on
1953 <p>PowerDNS have two modes of operation using LDAP as its backend.
1954 One "strict" mode where the forward and reverse DNS lookups are done
1955 using the same LDAP objects, and a "tree" mode where the forward and
1956 reverse entries are in two different subtrees in LDAP with a structure
1957 based on the DNS names, as in tjener.intern and
1958 2.2.0.10.in-addr.arpa.
</p>
1960 <p>In tree mode, the server is set up to use a LDAP subtree as its
1961 base, and uses a "base" scoped search for the DNS name by adding
1962 "dc=tjener,dc=intern," to the base with a filter for
1963 "(associateddomain=tjener.intern)" for the forward entry and
1964 "dc=
2,dc=
2,dc=
0,dc=
10,dc=in-addr,dc=arpa," with a filter for
1965 "(associateddomain=
2.2.0.10.in-addr.arpa)" for the reverse entry. For
1966 forward entries, it is looking for attributes named dnsttl, arecord,
1967 nsrecord, cnamerecord, soarecord, ptrrecord, hinforecord, mxrecord,
1968 txtrecord, rprecord, afsdbrecord, keyrecord, aaaarecord, locrecord,
1969 srvrecord, naptrrecord, kxrecord, certrecord, dsrecord, sshfprecord,
1970 ipseckeyrecord, rrsigrecord, nsecrecord, dnskeyrecord, dhcidrecord,
1971 spfrecord and modifytimestamp. For reverse entries it is looking for
1972 the attributes dnsttl, arecord, nsrecord, cnamerecord, soarecord,
1973 ptrrecord, hinforecord, mxrecord, txtrecord, rprecord, aaaarecord,
1974 locrecord, srvrecord, naptrrecord and modifytimestamp. The equivalent
1975 ldapsearch commands could look like this:
</p>
1978 ldapsearch -h ldap \
1979 -b dc=tjener,dc=intern,ou=hosts,dc=skole,dc=skolelinux,dc=no \
1980 -s base -x '(associateddomain=tjener.intern)' dNSTTL aRecord nSRecord \
1981 cNAMERecord sOARecord pTRRecord hInfoRecord mXRecord tXTRecord \
1982 rPRecord aFSDBRecord KeyRecord aAAARecord lOCRecord sRVRecord \
1983 nAPTRRecord kXRecord certRecord dSRecord sSHFPRecord iPSecKeyRecord \
1984 rRSIGRecord nSECRecord dNSKeyRecord dHCIDRecord sPFRecord modifyTimestamp
1986 ldapsearch -h ldap \
1987 -b dc=
2,dc=
2,dc=
0,dc=
10,dc=in-addr,dc=arpa,ou=hosts,dc=skole,dc=skolelinux,dc=no \
1988 -s base -x '(associateddomain=
2.2.0.10.in-addr.arpa)'
1989 dnsttl, arecord, nsrecord, cnamerecord soarecord ptrrecord \
1990 hinforecord mxrecord txtrecord rprecord aaaarecord locrecord \
1991 srvrecord naptrrecord modifytimestamp
1994 <p>In Debian Edu/Lenny, the PowerDNS tree mode is used with
1995 ou=hosts,dc=skole,dc=skolelinux,dc=no as the base, and these are two
1996 example LDAP objects used there. In addition to these objects, the
1997 parent objects all th way up to ou=hosts,dc=skole,dc=skolelinux,dc=no
2001 dn: dc=tjener,dc=intern,ou=hosts,dc=skole,dc=skolelinux,dc=no
2003 objectclass: dnsdomain
2004 objectclass: domainrelatedobject
2007 associateddomain: tjener.intern
2009 dn: dc=
2,dc=
2,dc=
0,dc=
10,dc=in-addr,dc=arpa,ou=hosts,dc=skole,dc=skolelinux,dc=no
2011 objectclass: dnsdomain2
2012 objectclass: domainrelatedobject
2014 ptrrecord: tjener.intern
2015 associateddomain:
2.2.0.10.in-addr.arpa
2018 <p>In strict mode, the server behaves differently. When looking for
2019 forward DNS entries, it is doing a "subtree" scoped search with the
2020 same base as in the tree mode for a object with filter
2021 "(associateddomain=tjener.intern)" and requests the attributes dnsttl,
2022 arecord, nsrecord, cnamerecord, soarecord, ptrrecord, hinforecord,
2023 mxrecord, txtrecord, rprecord, aaaarecord, locrecord, srvrecord,
2024 naptrrecord and modifytimestamp. For reverse entires it also do a
2025 subtree scoped search but this time the filter is "(arecord=
10.0.2.2)"
2026 and the requested attributes are associateddomain, dnsttl and
2027 modifytimestamp. In short, in strict mode the objects with ptrrecord
2028 go away, and the arecord attribute in the forward object is used
2031 <p>The forward and reverse searches can be simulated using ldapsearch
2035 ldapsearch -h ldap -b ou=hosts,dc=skole,dc=skolelinux,dc=no -s sub -x \
2036 '(associateddomain=tjener.intern)' dNSTTL aRecord nSRecord \
2037 cNAMERecord sOARecord pTRRecord hInfoRecord mXRecord tXTRecord \
2038 rPRecord aFSDBRecord KeyRecord aAAARecord lOCRecord sRVRecord \
2039 nAPTRRecord kXRecord certRecord dSRecord sSHFPRecord iPSecKeyRecord \
2040 rRSIGRecord nSECRecord dNSKeyRecord dHCIDRecord sPFRecord modifyTimestamp
2042 ldapsearch -h ldap -b ou=hosts,dc=skole,dc=skolelinux,dc=no -s sub -x \
2043 '(arecord=
10.0.2.2)' associateddomain dnsttl modifytimestamp
2046 <p>In addition to the forward and reverse searches , there is also a
2047 search for SOA records, which behave similar to the forward and
2048 reverse lookups.
</p>
2050 <p>A thing to note with the PowerDNS behaviour is that it do not
2051 specify any objectclass names, and instead look for the attributes it
2052 need to generate a DNS reply. This make it able to work with any
2053 objectclass that provide the needed attributes.
</p>
2055 <p>The attributes are normally provided in the cosine (RFC
1274) and
2056 dnsdomain2 schemas. The latter is used for reverse entries like
2057 ptrrecord and recent DNS additions like aaaarecord and srvrecord.
</p>
2059 <p>In Debian Edu, we have created DNS objects using the object classes
2060 dcobject (for dc), dnsdomain or dnsdomain2 (structural, for the DNS
2061 attributes) and domainrelatedobject (for associatedDomain). The use
2062 of structural object classes make it impossible to combine these
2063 classes with the object classes used by DHCP.
</p>
2065 <p>There are other schemas that could be used too, for example the
2066 dnszone structural object class used by Gosa and bind-sdb for the DNS
2067 attributes combined with the domainrelatedobject object class, but in
2068 this case some unused attributes would have to be included as well
2069 (zonename and relativedomainname).
</p>
2071 <p>My proposal for Debian Edu would be to switch PowerDNS to strict
2072 mode and not use any of the existing objectclasses (dnsdomain,
2073 dnsdomain2 and dnszone) when one want to combine the DNS information
2074 with DHCP information, and instead create a auxiliary object class
2075 defined something like this (using the attributes defined for
2076 dnsdomain and dnsdomain2 or dnszone):
</p>
2079 objectclass ( some-oid NAME 'dnsDomainAux'
2082 MAY ( ARecord $ MDRecord $ MXRecord $ NSRecord $ SOARecord $ CNAMERecord $
2083 DNSTTL $ DNSClass $ PTRRecord $ HINFORecord $ MINFORecord $
2084 TXTRecord $ SIGRecord $ KEYRecord $ AAAARecord $ LOCRecord $
2085 NXTRecord $ SRVRecord $ NAPTRRecord $ KXRecord $ CERTRecord $
2086 A6Record $ DNAMERecord
2090 <p>This will allow any object to become a DNS entry when combined with
2091 the domainrelatedobject object class, and allow any entity to include
2092 all the attributes PowerDNS wants. I've sent an email to the PowerDNS
2093 developers asking for their view on this schema and if they are
2094 interested in providing such schema with PowerDNS, and I hope my
2095 message will be accepted into their mailing list soon.
</p>
2097 <p><strong>ISC dhcp
</strong></p>
2099 <p>The DHCP server searches for specific objectclass and requests all
2100 the object attributes, and then uses the attributes it want. This
2101 make it harder to figure out exactly what attributes are used, but
2102 thanks to the working example in Debian Edu I can at least get an idea
2103 what is needed without having to read the source code.
</p>
2105 <p>In the DHCP server configuration, the LDAP base to use and the
2106 search filter to use to locate the correct dhcpServer entity is
2107 stored. These are the relevant entries from
2108 /etc/dhcp3/dhcpd.conf:
</p>
2111 ldap-base-dn "dc=skole,dc=skolelinux,dc=no";
2112 ldap-dhcp-server-cn "dhcp";
2115 <p>The DHCP server uses this information to nest all the DHCP
2116 configuration it need. The cn "dhcp" is located using the given LDAP
2117 base and the filter "(&(objectClass=dhcpServer)(cn=dhcp))". The
2118 search result is this entry:
</p>
2121 dn: cn=dhcp,dc=skole,dc=skolelinux,dc=no
2124 objectClass: dhcpServer
2125 dhcpServiceDN: cn=DHCP Config,dc=skole,dc=skolelinux,dc=no
2128 <p>The content of the dhcpServiceDN attribute is next used to locate the
2129 subtree with DHCP configuration. The DHCP configuration subtree base
2130 is located using a base scope search with base "cn=DHCP
2131 Config,dc=skole,dc=skolelinux,dc=no" and filter
2132 "(&(objectClass=dhcpService)(|(dhcpPrimaryDN=cn=dhcp,dc=skole,dc=skolelinux,dc=no)(dhcpSecondaryDN=cn=dhcp,dc=skole,dc=skolelinux,dc=no)))".
2133 The search result is this entry:
</p>
2136 dn: cn=DHCP Config,dc=skole,dc=skolelinux,dc=no
2139 objectClass: dhcpService
2140 objectClass: dhcpOptions
2141 dhcpPrimaryDN: cn=dhcp, dc=skole,dc=skolelinux,dc=no
2142 dhcpStatements: ddns-update-style none
2143 dhcpStatements: authoritative
2144 dhcpOption: smtp-server code
69 = array of ip-address
2145 dhcpOption: www-server code
72 = array of ip-address
2146 dhcpOption: wpad-url code
252 = text
2149 <p>Next, the entire subtree is processed, one level at the time. When
2150 all the DHCP configuration is loaded, it is ready to receive requests.
2151 The subtree in Debian Edu contain objects with object classes
2152 top/dhcpService/dhcpOptions, top/dhcpSharedNetwork/dhcpOptions,
2153 top/dhcpSubnet, top/dhcpGroup and top/dhcpHost. These provide options
2154 and information about netmasks, dynamic range etc. Leaving out the
2155 details here because it is not relevant for the focus of my
2156 investigation, which is to see if it is possible to merge dns and dhcp
2157 related computer objects.
</p>
2159 <p>When a DHCP request come in, LDAP is searched for the MAC address
2160 of the client (
00:
00:
00:
00:
00:
00 in this example), using a subtree
2161 scoped search with "cn=DHCP Config,dc=skole,dc=skolelinux,dc=no" as
2162 the base and "(&(objectClass=dhcpHost)(dhcpHWAddress=ethernet
2163 00:
00:
00:
00:
00:
00))" as the filter. This is what a host object look
2167 dn: cn=hostname,cn=group1,cn=THINCLIENTS,cn=DHCP Config,dc=skole,dc=skolelinux,dc=no
2170 objectClass: dhcpHost
2171 dhcpHWAddress: ethernet
00:
00:
00:
00:
00:
00
2172 dhcpStatements: fixed-address hostname
2175 <p>There is less flexiblity in the way LDAP searches are done here.
2176 The object classes need to have fixed names, and the configuration
2177 need to be stored in a fairly specific LDAP structure. On the
2178 positive side, the invidiual dhcpHost entires can be anywhere without
2179 the DN pointed to by the dhcpServer entries. The latter should make
2180 it possible to group all host entries in a subtree next to the
2181 configuration entries, and this subtree can also be shared with the
2182 DNS server if the schema proposed above is combined with the dhcpHost
2183 structural object class.
2185 <p><strong>Conclusion
</strong></p>
2187 <p>The PowerDNS implementation seem to be very flexible when it come
2188 to which LDAP schemas to use. While its "tree" mode is rigid when it
2189 come to the the LDAP structure, the "strict" mode is very flexible,
2190 allowing DNS objects to be stored anywhere under the base cn specified
2191 in the configuration.
</p>
2193 <p>The DHCP implementation on the other hand is very inflexible, both
2194 regarding which LDAP schemas to use and which LDAP structure to use.
2195 I guess one could implement ones own schema, as long as the
2196 objectclasses and attributes have the names used, but this do not
2197 really help when the DHCP subtree need to have a fairly fixed
2200 <p>Based on the observed behaviour, I suspect a LDAP structure like
2201 this might work for Debian Edu:
</p>
2205 cn=machine-info (dhcpService) - dhcpServiceDN points here
2206 cn=dhcp (dhcpServer)
2207 cn=dhcp-internal (dhcpSharedNetwork/dhcpOptions)
2208 cn=
10.0.2.0 (dhcpSubnet)
2209 cn=group1 (dhcpGroup/dhcpOptions)
2210 cn=dhcp-thinclients (dhcpSharedNetwork/dhcpOptions)
2211 cn=
192.168.0.0 (dhcpSubnet)
2212 cn=group1 (dhcpGroup/dhcpOptions)
2213 ou=machines - PowerDNS base points here
2214 cn=hostname (dhcpHost/domainrelatedobject/dnsDomainAux)
2217 <P>This is not tested yet. If the DHCP server require the dhcpHost
2218 entries to be in the dhcpGroup subtrees, the entries can be stored
2219 there instead of a common machines subtree, and the PowerDNS base
2220 would have to be moved one level up to the machine-info subtree.
</p>
2222 <p>The combined object under the machines subtree would look something
2226 dn: dc=hostname,ou=machines,cn=machine-info,dc=skole,dc=skolelinux,dc=no
2229 objectClass: dhcpHost
2230 objectclass: domainrelatedobject
2231 objectclass: dnsDomainAux
2232 associateddomain: hostname.intern
2233 arecord:
10.11.12.13
2234 dhcpHWAddress: ethernet
00:
00:
00:
00:
00:
00
2235 dhcpStatements: fixed-address hostname.intern
2238 </p>One could even add the LTSP configuration associated with a given
2239 machine, as long as the required attributes are available in a
2240 auxiliary object class.
</p>
2246 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/ldap">ldap
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
2251 <div class=
"padding"></div>
2255 <a href=
"http://people.skolelinux.org/pere/blog/Circular_package_dependencies_harms_apt_recovery.html">Circular package dependencies harms apt recovery
</a>
2261 <p>I discovered this while doing
2262 <a href=
"http://people.skolelinux.org/pere/blog/Automatic_upgrade_testing_from_Lenny_to_Squeeze.html">automated
2263 testing of upgrades from Debian Lenny to Squeeze
</a>. A few packages
2264 in Debian still got circular dependencies, and it is often claimed
2265 that apt and aptitude should be able to handle this just fine, but
2266 some times these dependency loops causes apt to fail.
</p>
2268 <p>An example is from todays
2269 <a href=
"http://people.skolelinux.org/~pere/debian-upgrade-testing//test-20100727-lenny-squeeze-kde-aptitude.txt">upgrade
2270 of KDE using aptitude
</a>. In it, a bug in kdebase-workspace-data
2271 causes perl-modules to fail to upgrade. The cause is simple. If a
2272 package fail to unpack, then only part of packages with the circular
2273 dependency might end up being unpacked when unpacking aborts, and the
2274 ones already unpacked will fail to configure in the recovery phase
2275 because its dependencies are unavailable.
</p>
2277 <p>In this log, the problem manifest itself with this error:
</p>
2280 dpkg: dependency problems prevent configuration of perl-modules:
2281 perl-modules depends on perl (
>=
5.10.1-
1); however:
2282 Version of perl on system is
5.10.0-
19lenny
2.
2283 dpkg: error processing perl-modules (--configure):
2284 dependency problems - leaving unconfigured
2287 <p>The perl/perl-modules circular dependency is already
2288 <a href=
"http://bugs.debian.org/527917">reported as a bug
</a>, and will
2289 hopefully be solved as soon as possible, but it is not the only one,
2290 and each one of these loops in the dependency tree can cause similar
2291 failures. Of course, they only occur when there are bugs in other
2292 packages causing the unpacking to fail, but it is rather nasty when
2293 the failure of one package causes the problem to become worse because
2294 of dependency loops.
</p>
2297 <a href=
"http://lists.debian.org/debian-devel/2010/06/msg00116.html">the
2298 tireless effort by Bill Allombert
</a>, the number of circular
2300 <a href=
"http://debian.semistable.com/debgraph.out.html">left in Debian
2301 is dropping
</a>, and perhaps it will reach zero one day. :)
</p>
2303 <p>Todays testing also exposed a bug in
2304 <a href=
"http://bugs.debian.org/590605">update-notifier
</a> and
2305 <a href=
"http://bugs.debian.org/590604">different behaviour
</a> between
2306 apt-get and aptitude, the latter possibly caused by some circular
2307 dependency. Reported both to BTS to try to get someone to look at
2314 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
2319 <div class=
"padding"></div>
2323 <a href=
"http://people.skolelinux.org/pere/blog/Some_notes_on_Flash_in_Debian_and_Debian_Edu.html">Some notes on Flash in Debian and Debian Edu
</a>
2329 <p>In the
<a href=
"http://popcon.debian.org/unknown/by_vote">Debian
2330 popularity-contest numbers
</a>, the adobe-flashplugin package the
2331 second most popular used package that is missing in Debian. The sixth
2332 most popular is flashplayer-mozilla. This is a clear indication that
2333 working flash is important for Debian users. Around
10 percent of the
2334 users submitting data to popcon.debian.org have this package
2337 <p>In the report written by Lars Risan in August
2008
2338 («
<a href=
"http://wiki.skolelinux.no/Dokumentasjon/Rapporter?action=AttachFile&do=view&target=Skolelinux_i_bruk_rapport_1.0.pdf">Skolelinux
2339 i bruk – Rapport for Hurum kommune, Universitetet i Agder og
2340 stiftelsen SLX Debian Labs
</a>»), one of the most important problems
2341 schools experienced with
<a href=
"http://www.skolelinux.org/">Debian
2342 Edu/Skolelinux
</a> was the lack of working Flash. A lot of educational
2343 web sites require Flash to work, and lacking working Flash support in
2344 the web browser and the problems with installing it was perceived as a
2345 good reason to stay with Windows.
</p>
2347 <p>I once saw a funny and sad comment in a web forum, where Linux was
2348 said to be the retarded cousin that did not really understand
2349 everything you told him but could work fairly well. This was a
2350 comment regarding the problems Linux have with proprietary formats and
2351 non-standard web pages, and is sad because it exposes a fairly common
2352 understanding of whose fault it is if web pages that only work in for
2353 example Internet Explorer
6 fail to work on Firefox, and funny because
2354 it explain very well how annoying it is for users when Linux
2355 distributions do not work with the documents they receive or the web
2356 pages they want to visit.
</p>
2358 <p>This is part of the reason why I believe it is important for Debian
2359 and Debian Edu to have a well working Flash implementation in the
2360 distribution, to get at least popular sites as Youtube and Google
2361 Video to working out of the box. For Squeeze, Debian have the chance
2362 to include the latest version of Gnash that will make this happen, as
2363 the new release
0.8.8 was published a few weeks ago and is resting in
2364 unstable. The new version work with more sites that version
0.8.7.
2365 The Gnash maintainers have asked for a freeze exception, but the
2366 release team have not had time to reply to it yet. I hope they agree
2367 with me that Flash is important for the Debian desktop users, and thus
2368 accept the new package into Squeeze.
</p>
2374 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/video">video
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/web">web
</a>.
2379 <div class=
"padding"></div>
2383 <a href=
"http://people.skolelinux.org/pere/blog/Software_updates_2010_10_24.html">Software updates
2010-
10-
24</a>
2389 <p>Some updates.
</p>
2391 <p>My
<a href=
"http://pledgebank.com/gnash-avm2">gnash pledge
</a> to
2392 raise money for the project is going well. The lower limit of
10
2393 signers was reached in
24 hours, and so far
13 people have signed it.
2394 More signers and more funding is most welcome, and I am really curious
2395 how far we can get before the time limit of December
24 is reached.
2398 <p>On the #gnash IRC channel on irc.freenode.net, I was just tipped
2399 about what appear to be a great code coverage tool capable of
2400 generating code coverage stats without any changes to the source code.
2402 <a href=
"http://simonkagstrom.github.com/kcov/index.html">kcov
</a>,
2403 and can be used using
<tt>kcov
<directory
> <binary
></tt>.
2404 It is missing in Debian, but the git source built just fine in Squeeze
2405 after I installed libelf-dev, libdwarf-dev, pkg-config and
2406 libglib2.0-dev. Failed to build in Lenny, but suspect that is
2407 solvable. I hope kcov make it into Debian soon.
</p>
2409 <p>Finally found time to wrap up the release notes for
<a
2410 href=
"http://lists.debian.org/debian-edu-announce/2010/10/msg00002.html">a
2411 new alpha release of Debian Edu
</a>, and just published the second
2412 alpha test release of the Squeeze based Debian Edu /
2413 <a href=
"http://www.skolelinux.org/">Skolelinux
</a>
2414 release. Give it a try if you need a complete linux solution for your
2415 school, including central infrastructure server, workstations, thin
2416 client servers and diskless workstations. A nice touch added
2417 yesterday is RDP support on the thin client servers, for windows
2418 clients to get a Linux desktop on request.
</p>
2424 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia
</a>.
2429 <div class=
"padding"></div>
2433 <a href=
"http://people.skolelinux.org/pere/blog/Debian_in_3D.html">Debian in
3D
</a>
2439 <p><img src=
"http://thingiverse-production.s3.amazonaws.com/renders/23/e0/c4/f9/2b/debswagtdose_preview_medium.jpg"></p>
2441 <p>3D printing is just great. I just came across this Debian logo in
2443 <a href=
"http://blog.thingiverse.com/2010/11/09/participatory-branding/">the
2444 thingiverse blog
</a>.
</p>
2450 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
2455 <div class=
"padding"></div>
2459 <a href=
"http://people.skolelinux.org/pere/blog/Gnash_buildbot_slave_and_Debian_kfreebsd.html">Gnash buildbot slave and Debian kfreebsd
</a>
2466 <a href=
"http://www.listware.net/201011/gnash-dev/67431-gnash-dev-buildbot-looking-for-slaves.html">the
2467 call from the Gnash project
</a> for
2468 <a href=
"http://www.gnashdev.org:8010">buildbot
</a> slaves to test the
2469 current source, I have set up a virtual KVM machine on the Debian
2470 Edu/Skolelinux virtualization host to test the git source on
2471 Debian/Squeeze. I hope this can help the developers in getting new
2472 releases out more often.
</p>
2474 <p>As the developers want less main-stream build platforms tested to,
2475 I have considered setting up a
<a
2476 href=
"http://www.debian.org/ports/kfreebsd-gnu/">Debian/kfreebsd
</a>
2477 machine as well. I have also considered using the kfreebsd
2478 architecture in Debian as a file server in NUUG to get access to the
5
2479 TB zfs volume we currently use to store DV video. Because of this, I
2480 finally got around to do a test installation of Debian/Squeeze with
2481 kfreebsd. Installation went fairly smooth, thought I noticed some
2482 visual glitches in the cdebconf dialogs (black cursor left on the
2483 screen at random locations). Have not gotten very far with the
2484 testing. Noticed cfdisk did not work, but fdisk did so it was not a
2485 fatal problem. Have to spend some more time on it to see if it is
2486 useful as a file server for NUUG. Will try to find time to set up a
2487 gnash buildbot slave on the Debian Edu/Skolelinux this weekend.
</p>
2493 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
2498 <div class=
"padding"></div>
2502 <a href=
"http://people.skolelinux.org/pere/blog/Lenny__Squeeze_upgrades__apt_vs_aptitude_with_the_Gnome_and_KDE_desktop.html">Lenny-
>Squeeze upgrades, apt vs aptitude with the Gnome and KDE desktop
</a>
2508 <p>I'm still running upgrade testing of the
2509 <a href=
"http://people.skolelinux.org/~pere/debian-upgrade-testing/">Lenny
2510 Gnome and KDE Desktop
</a>, but have not had time to spend on reporting the
2511 status. Here is a short update based on a test I ran
20101118.
</p>
2513 <p>I still do not know what a correct migration should look like, so I
2514 report any differences between apt and aptitude and hope someone else
2515 can see if anything should be changed.
</p>
2517 <p>This is for Gnome:
</p>
2519 <p>Installed using apt-get, missing with aptitude
</p>
2522 apache2.2-bin aptdaemon at-spi baobab binfmt-support
2523 browser-plugin-gnash cheese-common cli-common cpp-
4.3 cups-pk-helper
2524 dmz-cursor-theme empathy empathy-common finger
2525 freedesktop-sound-theme freeglut3 gconf-defaults-service gdm-themes
2526 gedit-plugins geoclue geoclue-hostip geoclue-localnet geoclue-manual
2527 geoclue-yahoo gnash gnash-common gnome gnome-backgrounds
2528 gnome-cards-data gnome-codec-install gnome-core
2529 gnome-desktop-environment gnome-disk-utility gnome-screenshot
2530 gnome-search-tool gnome-session-canberra gnome-spell
2531 gnome-system-log gnome-themes-extras gnome-themes-more
2532 gnome-user-share gs-common gstreamer0.10-fluendo-mp3
2533 gstreamer0.10-tools gtk2-engines gtk2-engines-pixbuf
2534 gtk2-engines-smooth hal-info hamster-applet libapache2-mod-dnssd
2535 libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap
2536 libart2.0-cil libatspi1.0-
0 libboost-date-time1.42
.0
2537 libboost-python1.42
.0 libboost-thread1.42
.0 libchamplain-
0.4-
0
2538 libchamplain-gtk-
0.4-
0 libcheese-gtk18 libclutter-gtk-
0.10-
0
2539 libcryptui0 libcupsys2 libdiscid0 libeel2-data libelf1 libepc-
1.0-
2
2540 libepc-common libepc-ui-
1.0-
2 libfreerdp-plugins-standard
2541 libfreerdp0 libgail-common libgconf2.0-cil libgdata-common libgdata7
2542 libgdl-
1-common libgdu-gtk0 libgee2 libgeoclue0 libgexiv2-
0 libgif4
2543 libglade2.0-cil libglib2.0-cil libgmime2.4-cil libgnome-vfs2.0-cil
2544 libgnome2.24-cil libgnomepanel2.24-cil libgnomeprint2.2-data
2545 libgnomeprintui2.2-common libgnomevfs2-bin libgpod-common libgpod4
2546 libgtk2.0-cil libgtkglext1 libgtksourceview-common
2547 libgtksourceview2.0-common libmono-addins-gui0.2-cil
2548 libmono-addins0.2-cil libmono-cairo2.0-cil libmono-corlib2.0-cil
2549 libmono-i18n-west2.0-cil libmono-posix2.0-cil
2550 libmono-security2.0-cil libmono-sharpzip2.84-cil
2551 libmono-system2.0-cil libmtp8 libmusicbrainz3-
6
2552 libndesk-dbus-glib1.0-cil libndesk-dbus1.0-cil libopal3.6
.8
2553 libpolkit-gtk-
1-
0 libpt-
1.10.10-plugins-alsa
2554 libpt-
1.10.10-plugins-v4l libpt2.6
.7 libpython2.6 librpm1 librpmio1
2555 libsdl1.2debian libservlet2.4-java libsrtp0 libssh-
4
2556 libtelepathy-farsight0 libtelepathy-glib0 libtidy-
0.99-
0
2557 libxalan2-java libxerces2-java media-player-info mesa-utils
2558 mono-
2.0-gac mono-gac mono-runtime nautilus-sendto
2559 nautilus-sendto-empathy openoffice.org-writer2latex
2560 openssl-blacklist p7zip p7zip-full pkg-config python-
4suite-xml
2561 python-aptdaemon python-aptdaemon-gtk python-axiom
2562 python-beautifulsoup python-bugbuddy python-clientform
2563 python-coherence python-configobj python-crypto python-cupshelpers
2564 python-cupsutils python-eggtrayicon python-elementtree
2565 python-epsilon python-evolution python-feedparser python-gdata
2566 python-gdbm python-gst0.10 python-gtkglext1 python-gtkmozembed
2567 python-gtksourceview2 python-httplib2 python-louie python-mako
2568 python-markupsafe python-mechanize python-nevow python-notify
2569 python-opengl python-openssl python-pam python-pkg-resources
2570 python-pyasn1 python-pysqlite2 python-rdflib python-serial
2571 python-tagpy python-twisted-bin python-twisted-conch
2572 python-twisted-core python-twisted-web python-utidylib python-webkit
2573 python-xdg python-zope.interface remmina remmina-plugin-data
2574 remmina-plugin-rdp remmina-plugin-vnc rhythmbox-plugin-cdrecorder
2575 rhythmbox-plugins rpm-common rpm2cpio seahorse-plugins shotwell
2576 software-center svgalibg1 system-config-printer-udev
2577 telepathy-gabble telepathy-mission-control-
5 telepathy-salut tomboy
2578 totem totem-coherence totem-mozilla totem-plugins
2579 transmission-common xdg-user-dirs xdg-user-dirs-gtk xserver-xephyr
2583 Installed using apt-get, removed with aptitude
2586 arj bluez-utils cheese dhcdbd djvulibre-desktop ekiga eog
2587 epiphany-extensions epiphany-gecko evolution-exchange
2588 fast-user-switch-applet file-roller gcalctool gconf-editor gdm gedit
2589 gedit-common gnome-app-install gnome-games gnome-games-data
2590 gnome-nettool gnome-system-tools gnome-themes gnome-utils
2591 gnome-vfs-obexftp gnome-volume-manager gnuchess gucharmap
2592 guile-
1.8-libs hal libavahi-compat-libdnssd1 libavahi-core5
2593 libavahi-ui0 libbind9-
50 libbluetooth2 libcamel1.2-
11 libcdio7
2594 libcucul0 libcurl3 libdirectfb-
1.0-
0 libdmx1 libdvdread3
2595 libedata-cal1.2-
6 libedataserver1.2-
9 libeel2-
2.20 libepc-
1.0-
1
2596 libepc-ui-
1.0-
1 libexchange-storage1.2-
3 libfaad0 libgadu3
2597 libgalago3 libgd2-noxpm libgda3-
3 libgda3-common libggz2 libggzcore9
2598 libggzmod4 libgksu1.2-
0 libgksuui1.0-
1 libgmyth0 libgnome-desktop-
2
2599 libgnome-pilot2 libgnomecups1.0-
1 libgnomeprint2.2-
0
2600 libgnomeprintui2.2-
0 libgpod3 libgraphviz4 libgtk-vnc-
1.0-
0
2601 libgtkhtml2-
0 libgtksourceview1.0-
0 libgtksourceview2.0-
0
2602 libgucharmap6 libhesiod0 libicu38 libisccc50 libisccfg50 libiw29
2603 libjaxp1.3-java-gcj libkpathsea4 liblircclient0 libltdl3 liblwres50
2604 libmagick++
10 libmagick10 libmalaga7 libmozjs1d libmpfr1ldbl libmtp7
2605 libmysqlclient15off libnautilus-burn4 libneon27 libnm-glib0
2606 libnm-util0 libopal-
2.2 libosp5 libparted1.8-
10 libpisock9
2607 libpisync1 libpoppler-glib3 libpoppler3 libpt-
1.10.10 libraw1394-
8
2608 libsdl1.2debian-alsa libsensors3 libsexy2 libsmbios2 libsoup2.2-
8
2609 libspeexdsp1 libssh2-
1 libsuitesparse-
3.1.0 libsvga1
2610 libswfdec-
0.6-
90 libtalloc1 libtotem-plparser10 libtrackerclient0
2611 libvoikko1 libxalan2-java-gcj libxerces2-java-gcj libxklavier12
2612 libxtrap6 libxxf86misc1 libzephyr3 mysql-common rhythmbox seahorse
2613 sound-juicer swfdec-gnome system-config-printer totem-common
2614 totem-gstreamer transmission-gtk vinagre vino w3c-dtd-xhtml wodim
2617 <p>Installed using aptitude, missing with apt-get
</p>
2620 gstreamer0.10-gnomevfs
2623 <p>Installed using aptitude, removed with apt-get
</p>
2629 <p>This is for KDE:
</p>
2631 <p>Installed using apt-get, missing with aptitude
</p>
2634 autopoint bomber bovo cantor cantor-backend-kalgebra cpp-
4.3 dcoprss
2635 edict espeak espeak-data eyesapplet fifteenapplet finger gettext
2636 ghostscript-x git gnome-audio gnugo granatier gs-common
2637 gstreamer0.10-pulseaudio indi kaddressbook-plugins kalgebra
2638 kalzium-data kanjidic kapman kate-plugins kblocks kbreakout kbstate
2639 kde-icons-mono kdeaccessibility kdeaddons-kfile-plugins
2640 kdeadmin-kfile-plugins kdeartwork-misc kdeartwork-theme-window
2641 kdeedu kdeedu-data kdeedu-kvtml-data kdegames kdegames-card-data
2642 kdegames-mahjongg-data kdegraphics-kfile-plugins kdelirc
2643 kdemultimedia-kfile-plugins kdenetwork-kfile-plugins
2644 kdepim-kfile-plugins kdepim-kio-plugins kdessh kdetoys kdewebdev
2645 kdiamond kdnssd kfilereplace kfourinline kgeography-data kigo
2646 killbots kiriki klettres-data kmoon kmrml knewsticker-scripts
2647 kollision kpf krosspython ksirk ksmserver ksquares kstars-data
2648 ksudoku kubrick kweather libasound2-plugins libboost-python1.42
.0
2649 libcfitsio3 libconvert-binhex-perl libcrypt-ssleay-perl libdb4.6++
2650 libdjvulibre-text libdotconf1.0 liberror-perl libespeak1
2651 libfinance-quote-perl libgail-common libgsl0ldbl libhtml-parser-perl
2652 libhtml-tableextract-perl libhtml-tagset-perl libhtml-tree-perl
2653 libio-stringy-perl libkdeedu4 libkdegames5 libkiten4 libkpathsea5
2654 libkrossui4 libmailtools-perl libmime-tools-perl
2655 libnews-nntpclient-perl libopenbabel3 libportaudio2 libpulse-browse0
2656 libservlet2.4-java libspeechd2 libtiff-tools libtimedate-perl
2657 libunistring0 liburi-perl libwww-perl libxalan2-java libxerces2-java
2658 lirc luatex marble networkstatus noatun-plugins
2659 openoffice.org-writer2latex palapeli palapeli-data parley
2660 parley-data poster psutils pulseaudio pulseaudio-esound-compat
2661 pulseaudio-module-x11 pulseaudio-utils quanta-data rocs rsync
2662 speech-dispatcher step svgalibg1 texlive-binaries texlive-luatex
2666 <p>Installed using apt-get, removed with aptitude
</p>
2669 amor artsbuilder atlantik atlantikdesigner blinken bluez-utils cvs
2670 dhcdbd djvulibre-desktop imlib-base imlib11 kalzium kanagram kandy
2671 kasteroids katomic kbackgammon kbattleship kblackbox kbounce kbruch
2672 kcron kdat kdemultimedia-kappfinder-data kdeprint kdict kdvi kedit
2673 keduca kenolaba kfax kfaxview kfouleggs kgeography kghostview
2674 kgoldrunner khangman khexedit kiconedit kig kimagemapeditor
2675 kitchensync kiten kjumpingcube klatin klettres klickety klines
2676 klinkstatus kmag kmahjongg kmailcvt kmenuedit kmid kmilo kmines
2677 kmousetool kmouth kmplot knetwalk kodo kolf kommander konquest kooka
2678 kpager kpat kpdf kpercentage kpilot kpoker kpovmodeler krec
2679 kregexpeditor kreversi ksame ksayit kshisen ksig ksim ksirc ksirtet
2680 ksmiletris ksnake ksokoban kspaceduel kstars ksvg ksysv kteatime
2681 ktip ktnef ktouch ktron kttsd ktuberling kturtle ktux kuickshow
2682 kverbos kview kviewshell kvoctrain kwifimanager kwin kwin4 kwordquiz
2683 kworldclock kxsldbg libakode2 libarts1-akode libarts1-audiofile
2684 libarts1-mpeglib libarts1-xine libavahi-compat-libdnssd1
2685 libavahi-core5 libavc1394-
0 libbind9-
50 libbluetooth2
2686 libboost-python1.34
.1 libcucul0 libcurl3 libcvsservice0
2687 libdirectfb-
1.0-
0 libdjvulibre21 libdvdread3 libfaad0 libfreebob0
2688 libgd2-noxpm libgraphviz4 libgsmme1c2a libgtkhtml2-
0 libicu38
2689 libiec61883-
0 libindex0 libisccc50 libisccfg50 libiw29
2690 libjaxp1.3-java-gcj libk3b3 libkcal2b libkcddb1 libkdeedu3
2691 libkdegames1 libkdepim1a libkgantt0 libkleopatra1 libkmime2
2692 libkpathsea4 libkpimexchange1 libkpimidentities1 libkscan1
2693 libksieve0 libktnef1 liblockdev1 libltdl3 liblwres50 libmagick10
2694 libmimelib1c2a libmodplug0c2 libmozjs1d libmpcdec3 libmpfr1ldbl
2695 libneon27 libnm-util0 libopensync0 libpisock9 libpoppler-glib3
2696 libpoppler-qt2 libpoppler3 libraw1394-
8 librss1 libsensors3
2697 libsmbios2 libssh2-
1 libsuitesparse-
3.1.0 libswfdec-
0.6-
90
2698 libtalloc1 libxalan2-java-gcj libxerces2-java-gcj libxtrap6 lskat
2699 mpeglib network-manager-kde noatun pmount tex-common texlive-base
2700 texlive-common texlive-doc-base texlive-fonts-recommended tidy
2701 ttf-dustin ttf-kochi-gothic ttf-sjfonts
2704 <p>Installed using aptitude, missing with apt-get
</p>
2707 dolphin kde-core kde-plasma-desktop kde-standard kde-window-manager
2708 kdeartwork kdebase kdebase-apps kdebase-workspace
2709 kdebase-workspace-bin kdebase-workspace-data kdeutils kscreensaver
2710 kscreensaver-xsavers libgle3 libkonq5 libkonq5-templates libnetpbm10
2711 netpbm plasma-widget-folderview plasma-widget-networkmanagement
2712 xscreensaver-data-extra xscreensaver-gl xscreensaver-gl-extra
2713 xscreensaver-screensaver-bsod
2716 <p>Installed using aptitude, removed with apt-get
</p>
2719 kdebase-bin konq-plugins konqueror
2726 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
2731 <div class=
"padding"></div>
2735 <a href=
"http://people.skolelinux.org/pere/blog/Migrating_Xen_virtual_machines_using_LVM_to_KVM_using_disk_images.html">Migrating Xen virtual machines using LVM to KVM using disk images
</a>
2741 <p>Most of the computers in use by the
2742 <a href=
"http://www.skolelinux.org/">Debian Edu/Skolelinux project
</a>
2743 are virtual machines. And they have been Xen machines running on a
2744 fairly old IBM eserver xseries
345 machine, and we wanted to migrate
2745 them to KVM on a newer Dell PowerEdge
2950 host machine. This was a
2746 bit harder that it could have been, because we set up the Xen virtual
2747 machines to get the virtual partitions from LVM, which as far as I
2748 know is not supported by KVM. So to migrate, we had to convert
2749 several LVM logical volumes to partitions on a virtual disk file.
</p>
2752 <a href=
"http://searchnetworking.techtarget.com.au/articles/35011-Six-steps-for-migrating-Xen-virtual-machines-to-KVM">a
2753 nice recipe
</a> to do this, and wrote the following script to do the
2754 migration. It uses qemu-img from the qemu package to make the disk
2755 image, parted to partition it, losetup and kpartx to present the disk
2756 image partions as devices, and dd to copy the data. I NFS mounted the
2757 new servers storage area on the old server to do the migration.
</p>
2763 # http://searchnetworking.techtarget.com.au/articles/
35011-Six-steps-for-migrating-Xen-virtual-machines-to-KVM
2768 if [ -z "$
1" ] ; then
2769 echo "Usage: $
0 <hostname
>"
2775 if [ ! -e /dev/vg_data/$host-disk ] ; then
2776 echo "error: unable to find LVM volume for $host"
2780 # Partitions need to be a bit bigger than the LVM LVs. not sure why.
2781 disksize=$( lvs --units m | grep $host-disk | awk '{sum = sum + $
4} END { print int(sum *
1.05) }')
2782 swapsize=$( lvs --units m | grep $host-swap | awk '{sum = sum + $
4} END { print int(sum *
1.05) }')
2783 totalsize=$(( ( $disksize + $swapsize ) ))
2786 #dd if=/dev/zero of=$img bs=
1M count=$(( $disksize + $swapsize ))
2787 qemu-img create $img ${totalsize}MMaking room on the Debian Edu/Sqeeze DVD
2789 parted $img mklabel msdos
2790 parted $img mkpart primary linux-swap
0 $disksize
2791 parted $img mkpart primary ext2 $disksize $totalsize
2792 parted $img set
1 boot on
2795 losetup /dev/loop0 $img
2796 kpartx -a /dev/loop0
2798 dd if=/dev/vg_data/$host-disk of=/dev/mapper/loop0p1 bs=
1M
2799 fsck.ext3 -f /dev/mapper/loop0p1 || true
2800 mkswap /dev/mapper/loop0p2
2802 kpartx -d /dev/loop0
2803 losetup -d /dev/loop0
2806 <p>The script is perhaps so simple that it is not copyrightable, but
2807 if it is, it is licenced using GPL v2 or later at your discretion.
</p>
2809 <p>After doing this, I booted a Debian CD in rescue mode in KVM with
2810 the new disk image attached, installed grub-pc and linux-image-
686 and
2811 set up grub to boot from the disk image. After this, the KVM machines
2812 seem to work just fine.
</p>
2818 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
2823 <div class=
"padding"></div>
2827 <a href=
"http://people.skolelinux.org/pere/blog/Lenny__Squeeze_upgrades_of_the_Gnome_and_KDE_desktop__now_with_apt_get_autoremove.html">Lenny-
>Squeeze upgrades of the Gnome and KDE desktop, now with apt-get autoremove
</a>
2833 <p>Michael Biebl suggested to me on IRC, that I changed my automated
2834 upgrade testing of the
2835 <a href=
"http://people.skolelinux.org/~pere/debian-upgrade-testing/">Lenny
2836 Gnome and KDE Desktop
</a> to do
<tt>apt-get autoremove
</tt> when using apt-get.
2837 This seem like a very good idea, so I adjusted by test scripts and
2838 can now present the updated result from today:
</p>
2840 <p>This is for Gnome:
</p>
2842 <p>Installed using apt-get, missing with aptitude
</p>
2849 browser-plugin-gnash
2856 freedesktop-sound-theme
2858 gconf-defaults-service
2873 gnome-desktop-environment
2877 gnome-session-canberra
2882 gstreamer0.10-fluendo-mp3
2888 libapache2-mod-dnssd
2891 libaprutil1-dbd-sqlite3
2894 libboost-date-time1.42
.0
2895 libboost-python1.42
.0
2896 libboost-thread1.42
.0
2898 libchamplain-gtk-
0.4-
0
2900 libclutter-gtk-
0.10-
0
2907 libfreerdp-plugins-standard
2922 libgnomepanel2.24-cil
2927 libgtksourceview2.0-common
2928 libmono-addins-gui0.2-cil
2929 libmono-addins0.2-cil
2930 libmono-cairo2.0-cil
2931 libmono-corlib2.0-cil
2932 libmono-i18n-west2.0-cil
2933 libmono-posix2.0-cil
2934 libmono-security2.0-cil
2935 libmono-sharpzip2.84-cil
2936 libmono-system2.0-cil
2939 libndesk-dbus-glib1.0-cil
2940 libndesk-dbus1.0-cil
2950 libtelepathy-farsight0
2959 nautilus-sendto-empathy
2963 python-aptdaemon-gtk
2965 python-beautifulsoup
2980 python-gtksourceview2
2991 python-pkg-resources
2998 python-twisted-conch
3004 python-zope.interface
3009 rhythmbox-plugin-cdrecorder
3016 system-config-printer-udev
3018 telepathy-mission-control-
5
3031 <p>Installed using apt-get, removed with aptitude
</p>
3039 fast-user-switch-applet
3058 libgtksourceview2.0-
0
3060 libsdl1.2debian-alsa
3066 system-config-printer
3073 <p>Installed using aptitude, missing with apt-get
</p>
3076 gstreamer0.10-gnomevfs
3079 <p>Installed using aptitude, removed with apt-get
</p>
3085 <p>This is for KDE:
</p>
3087 <p>Installed using apt-get, missing with aptitude
</p>
3093 <p>Installed using apt-get, removed with aptitude
</p>
3100 <p>Installed using aptitude, missing with apt-get
</p>
3116 kdeartwork-emoticons
3118 kdeartwork-theme-icon
3122 kdebase-workspace-bin
3123 kdebase-workspace-data
3137 kscreensaver-xsavers
3152 plasma-dataengines-workspace
3154 plasma-desktopthemes-artwork
3155 plasma-runners-addons
3156 plasma-scriptengine-googlegadgets
3157 plasma-scriptengine-python
3158 plasma-scriptengine-qedje
3159 plasma-scriptengine-ruby
3160 plasma-scriptengine-webkit
3161 plasma-scriptengines
3162 plasma-wallpapers-addons
3163 plasma-widget-folderview
3164 plasma-widget-networkmanagement
3168 xscreensaver-data-extra
3170 xscreensaver-gl-extra
3171 xscreensaver-screensaver-bsod
3174 <p>Installed using aptitude, removed with apt-get
</p>
3178 google-gadgets-common
3196 libggadget-qt-
1.0-
0b
3201 libkonqsidebarplugin4a
3210 libplasma-geolocation-interface4
3212 libplasmagenericshell4
3226 libsmokeknewstuff2-
3
3227 libsmokeknewstuff3-
3
3229 libsmokektexteditor3
3237 libsmokeqtnetwork4-
3
3243 libsmokeqtuitools4-
3
3255 plasma-dataengines-addons
3256 plasma-scriptengine-superkaramba
3257 plasma-widget-lancelot
3258 plasma-widgets-addons
3259 plasma-widgets-workspace
3263 update-notifier-common
3266 <p>Running apt-get autoremove made the results using apt-get and
3267 aptitude a bit more similar, but there are still quite a lott of
3268 differences. I have no idea what packages should be installed after
3269 the upgrade, but hope those that do can have a look.
</p>
3275 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
3280 <div class=
"padding"></div>
3284 <a href=
"http://people.skolelinux.org/pere/blog/Why_isn_t_Debian_Edu_using_VLC_.html">Why isn't Debian Edu using VLC?
</a>
3290 <p>In the latest issue of Linux Journal, the readers choices were
3291 presented, and the winner among the multimedia player were VLC.
3292 Personally, I like VLC, and it is my player of choice when I first try
3293 to play a video file or stream. Only if VLC fail will I drag out
3294 gmplayer to see if it can do better. The reason is mostly the failure
3295 model and trust. When VLC fail, it normally pop up a error message
3296 reporting the problem. When mplayer fail, it normally segfault or
3297 just hangs. The latter failure mode drain my trust in the program.
<p>
3299 <p>But even if VLC is my player of choice, we have choosen to use
3300 mplayer in
<a href=
"http://www.skolelinux.org/">Debian
3301 Edu/Skolelinux
</a>. The reason is simple. We need a good browser
3302 plugin to play web videos seamlessly, and the VLC browser plugin is
3303 not very good. For example, it lack in-line control buttons, so there
3304 is no way for the user to pause the video. Also, when I
3305 <a href=
"http://wiki.debian.org/DebianEdu/BrowserMultimedia">last
3306 tested the browser plugins
</a> available in Debian, the VLC plugin
3307 failed on several video pages where mplayer based plugins worked. If
3308 the browser plugin for VLC was as good as the gecko-mediaplayer
3309 package (which uses mplayer), we would switch.
</P>
3311 <p>While VLC is a good player, its user interface is slightly
3312 annoying. The most annoying feature is its inconsistent use of
3313 keyboard shortcuts. When the player is in full screen mode, its
3314 shortcuts are different from when it is playing the video in a window.
3315 For example, space only work as pause when in full screen mode. I
3316 wish it had consisten shortcuts and that space also would work when in
3317 window mode. Another nice shortcut in gmplayer is [enter] to restart
3318 the current video. It is very nice when playing short videos from the
3319 web and want to restart it when new people arrive to have a look at
3320 what is going on.
</p>
3326 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/video">video
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/web">web
</a>.
3331 <div class=
"padding"></div>
3335 <a href=
"http://people.skolelinux.org/pere/blog/Now_accepting_bitcoins___anonymous_and_distributed_p2p_crypto_money.html">Now accepting bitcoins - anonymous and distributed p2p crypto-money
</a>
3341 <p>With this weeks lawless
3342 <a href=
"http://www.salon.com/news/opinion/glenn_greenwald/2010/12/06/wikileaks/index.html">governmental
3343 attacks
</a> on Wikileak and
3344 <a href=
"http://www.salon.com/technology/dan_gillmor/2010/12/06/war_on_speech">free
3345 speech
</a>, it has become obvious that PayPal, visa and mastercard can
3346 not be trusted to handle money transactions.
3348 <a href=
"http://webmink.com/2010/12/06/now-accepting-bitcoin/">Simon
3349 Phipps on bitcoin
</a> reminded me about a project that a friend of
3350 mine mentioned earlier. I decided to follow Simon's example, and get
3351 involved with
<a href=
"http://www.bitcoin.org/">BitCoin
</a>. I got
3352 some help from my friend to get it all running, and he even handed me
3353 some bitcoins to get started. I even donated a few bitcoins to Simon
3354 for helping me remember BitCoin.
</p>
3356 <p>So, what is bitcoins, you probably wonder? It is a digital
3357 crypto-currency, decentralised and handled using peer-to-peer
3358 networks. It allows anonymous transactions and prohibits central
3359 control over the transactions, making it impossible for governments
3360 and companies alike to block donations and other transactions. The
3361 source is free software, and while the key dependency wxWidgets
2.9
3362 for the graphical user interface is missing in Debian, the command
3363 line client builds just fine. Hopefully Jonas
3364 <a href=
"http://bugs.debian.org/578157">will get the package into
3365 Debian
</a> soon.
</p>
3367 <p>Bitcoins can be converted to other currencies, like USD and EUR.
3368 There are
<a href=
"http://www.bitcoin.org/trade">companies accepting
3369 bitcoins
</a> when selling services and goods, and there are even
3370 currency "stock" markets where the exchange rate is decided. There
3371 are not many users so far, but the concept seems promising. If you
3372 want to get started and lack a friend with any bitcoins to spare,
3374 <a href=
"https://freebitcoins.appspot.com/">some for free
</a> (
0.05
3375 bitcoin at the time of writing). Use
3376 <a href=
"http://www.bitcoinwatch.com/">BitcoinWatch
</a> to keep an eye
3377 on the current exchange rates.
</p>
3379 <p>As an experiment, I have decided to set up bitcoind on one of my
3380 machines. If you want to support my activity, please send Bitcoin
3381 donations to the address
3382 <b>15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b
</b>. Thank you!
</p>
3388 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bitcoin">bitcoin
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/personvern">personvern
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet
</a>.
3393 <div class=
"padding"></div>
3397 <a href=
"http://people.skolelinux.org/pere/blog/Some_thoughts_on_BitCoins.html">Some thoughts on BitCoins
</a>
3403 <p>As I continue to explore
3404 <a href=
"http://www.bitcoin.org/">BitCoin
</a>, I've starting to wonder
3405 what properties the system have, and how it will be affected by laws
3406 and regulations here in Norway. Here are some random notes.
</p>
3408 <p>One interesting thing to note is that since the transactions are
3409 verified using a peer to peer network, all details about a transaction
3410 is known to everyone. This means that if a BitCoin address has been
3411 published like I did with mine in my initial post about BitCoin, it is
3412 possible for everyone to see how many BitCoins have been transfered to
3413 that address. There is even a web service to look at the details for
3414 all transactions. There I can see that my address
3415 <a href=
"http://blockexplorer.com/address/15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b">15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b
</a>
3416 have received
16.06 Bitcoin, the
3417 <a href=
"http://blockexplorer.com/address/1LfdGnGuWkpSJgbQySxxCWhv8MHqvwst3">1LfdGnGuWkpSJgbQySxxCWhv
8MHqvwst
3</a>
3418 address of Simon Phipps have received
181.97 BitCoin and the address
3419 <a href=
"http://blockexplorer.com/address/1MCwBbhNGp5hRm5rC1Aims2YFRe2SXPYKt">1MCwBbhNGp5hRm5rC1Aims2YFRe2SXPYKt
</A>
3420 of EFF have received
2447.38 BitCoins so far. Thank you to each and
3421 every one of you that donated bitcoins to support my activity. The
3422 fact that anyone can see how much money was transfered to a given
3423 address make it more obvious why the BitCoin community recommend to
3424 generate and hand out a new address for each transaction. I'm told
3425 there is no way to track which addresses belong to a given person or
3426 organisation without the person or organisation revealing it
3427 themselves, as Simon, EFF and I have done.
</p>
3429 <p>In Norway, and in most other countries, there are laws and
3430 regulations limiting how much money one can transfer across the border
3431 without declaring it. There are money laundering, tax and accounting
3432 laws and regulations I would expect to apply to the use of BitCoin.
3433 If the Skolelinux foundation
3434 (
<a href=
"http://linuxiskolen.no/slxdebianlabs/donations.html">SLX
3435 Debian Labs
</a>) were to accept donations in BitCoin in addition to
3436 normal bank transfers like EFF is doing, how should this be accounted?
3437 Given that it is impossible to know if money can across the border or
3438 not, should everything or nothing be declared? What exchange rate
3439 should be used when calculating taxes? Would receivers have to pay
3440 income tax if the foundation were to pay Skolelinux contributors in
3441 BitCoin? I have no idea, but it would be interesting to know.
</p>
3443 <p>For a currency to be useful and successful, it must be trusted and
3444 accepted by a lot of users. It must be possible to get easy access to
3445 the currency (as a wage or using currency exchanges), and it must be
3446 easy to spend it. At the moment BitCoin seem fairly easy to get
3447 access to, but there are very few places to spend it. I am not really
3448 a regular user of any of the vendor types currently accepting BitCoin,
3449 so I wonder when my kind of shop would start accepting BitCoins. I
3450 would like to buy electronics, travels and subway tickets, not herbs
3451 and books. :) The currency is young, and this will improve over time
3452 if it become popular, but I suspect regular banks will start to lobby
3453 to get BitCoin declared illegal if it become popular. I'm sure they
3454 will claim it is helping fund terrorism and money laundering (which
3455 probably would be true, as is any currency in existence), but I
3456 believe the problems should be solved elsewhere and not by blaming
3459 <p>The process of creating new BitCoins is called mining, and it is
3460 CPU intensive process that depend on a bit of luck as well (as one is
3461 competing against all the other miners currently spending CPU cycles
3462 to see which one get the next lump of cash). The "winner" get
50
3463 BitCoin when this happen. Yesterday I came across the obvious way to
3464 join forces to increase ones changes of getting at least some coins,
3465 by coordinating the work on mining BitCoins across several machines
3466 and people, and sharing the result if one is lucky and get the
50
3468 <a href=
"http://www.bluishcoder.co.nz/bitcoin-pool/">BitCoin Pool
</a>
3469 if this sounds interesting. I have not had time to try to set up a
3470 machine to participate there yet, but have seen that running on ones
3471 own for a few days have not yield any BitCoins througth mining
3474 <p>Update
2010-
12-
15: Found an
<a
3475 href=
"http://inertia.posterous.com/reply-to-the-underground-economist-why-bitcoi">interesting
3476 criticism
</a> of bitcoin. Not quite sure how valid it is, but thought
3477 it was interesting to read. The arguments presented seem to be
3478 equally valid for gold, which was used as a currency for many years.
</p>
3484 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bitcoin">bitcoin
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/personvern">personvern
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet
</a>.
3489 <div class=
"padding"></div>
3493 <a href=
"http://people.skolelinux.org/pere/blog/How_to_test_if_a_laptop_is_working_with_Linux.html">How to test if a laptop is working with Linux
</a>
3499 <p>The last few days I have spent at work here at the
<a
3500 href=
"http://www.uio.no/">University of Oslo
</a> testing if the new
3501 batch of computers will work with Linux. Every year for the last few
3502 years the university have organised shared bid of a few thousand
3503 computers, and this year HP won the bid. Two different desktops and
3504 five different laptops are on the list this year. We in the UNIX
3505 group want to know which one of these computers work well with RHEL
3506 and Ubuntu, the two Linux distributions we currently handle at the
3509 <p>My test method is simple, and I share it here to get feedback and
3510 perhaps inspire others to test hardware as well. To test, I PXE
3511 install the OS version of choice, and log in as my normal user and run
3512 a few applications and plug in selected pieces of hardware. When
3513 something fail, I make a note about this in the test matrix and move
3514 on. If I have some spare time I try to report the bug to the OS
3515 vendor, but as I only have the machines for a short time, I rarely
3516 have the time to do this for all the problems I find.
</p>
3518 <p>Anyway, to get to the point of this post. Here is the simple tests
3519 I perform on a new model.
</p>
3523 <li>Is PXE installation working? I'm testing with RHEL6, Ubuntu Lucid
3524 and Ubuntu Maverik at the moment. If I feel like it, I also test with
3525 RHEL5 and Debian Edu/Squeeze.
</li>
3527 <li>Is X.org working? If the graphical login screen show up after
3528 installation, X.org is working.
</li>
3530 <li>Is hardware accelerated OpenGL working? Running glxgears (in
3531 package mesa-utils on Ubuntu) and writing down the frames per second
3532 reported by the program.
</li>
3534 <li>Is sound working? With Gnome and KDE, a sound is played when
3535 logging in, and if I can hear this the test is successful. If there
3536 are several audio exits on the machine, I try them all and check if
3537 the Gnome/KDE audio mixer can control where to send the sound. I
3538 normally test this by playing
3539 <a href=
"http://www.nuug.no/aktiviteter/20101012-chef/ ">a HTML5
3540 video
</a> in Firefox/Iceweasel.
</li>
3542 <li>Is the USB subsystem working? I test this by plugging in a USB
3543 memory stick and see if Gnome/KDE notices this.
</li>
3545 <li>Is the CD/DVD player working? I test this by inserting any CD/DVD
3546 I have lying around, and see if Gnome/KDE notices this.
</li>
3548 <li>Is any built in camera working? Test using cheese, and see if a
3549 picture from the v4l device show up.
</li>
3551 <li>Is bluetooth working? Use the Gnome/KDE browsing tool to see if
3552 any bluetooth devices are discovered. In my office, I normally see a
3555 <li>For laptops, is the SD or Compaq Flash reader working. I have
3556 memory modules lying around, and stick them in and see if Gnome/KDE
3559 <li>For laptops, is suspend/hibernate working? I'm testing if the
3560 special button work, and if the laptop continue to work after
3563 <li>For laptops, is the extra buttons working, like audio level,
3564 adjusting background light, switching on/off external video output,
3565 switching on/off wifi, bluetooth, etc? The set of buttons differ from
3566 laptop to laptop, so I just write down which are working and which are
3569 <li>Some laptops have smart card readers, finger print readers,
3570 acceleration sensors etc. I rarely test these, as I do not know how
3571 to quickly test if they are working or not, so I only document their
3576 <p>By now I suspect you are really curious what the test results are
3577 for the HP machines I am testing. I'm not done yet, so I will report
3578 the test results later. For now I can report that HP
8100 Elite work
3579 fine, and hibernation fail with HP EliteBook
8440p on Ubuntu Lucid,
3580 and audio fail on RHEL6. Ubuntu Maverik worked with
8440p. As you
3581 can see, I have most machines left to test. One interesting
3582 observation is that Ubuntu Lucid has almost twice the frame rate than
3583 RHEL6 with glxgears. No idea why.
</p>
3589 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
3594 <div class=
"padding"></div>
3598 <a href=
"http://people.skolelinux.org/pere/blog/Which_module_is_loaded_for_a_given_PCI_and_USB_device_.html">Which module is loaded for a given PCI and USB device?
</a>
3605 <a href=
"http://packages.qa.debian.org/discover-data">discover-data
</a>
3606 package in Debian, there is a script to report useful information
3607 about the running hardware for use when people report missing
3608 information. One part of this script that I find very useful when
3609 debugging hardware problems, is the part mapping loaded kernel module
3610 to the PCI device it claims. It allow me to quickly see if the kernel
3611 module I expect is driving the hardware I am struggling with. To see
3612 the output, make sure discover-data is installed and run
3613 <tt>/usr/share/bug/discover-data
3>&
1</tt>. The relevant output on
3614 one of my machines like this:
</p>
3618 10de:
03eb i2c_nforce2
3621 10de:
03f0 snd_hda_intel
3630 <p>The code in question look like this, slightly modified for
3631 readability and to drop the output to file descriptor
3:
</p>
3634 if [ -d /sys/bus/pci/devices/ ] ; then
3635 echo loaded pci modules:
3637 cd /sys/bus/pci/devices/
3638 for address in * ; do
3639 if [ -d "$address/driver/module" ] ; then
3640 module=`cd $address/driver/module ; pwd -P | xargs basename`
3641 if grep -q "^$module " /proc/modules ; then
3642 address=$(echo $address |sed s/
0000://)
3643 id=`lspci -n -s $address | tail -n
1 | awk '{print $
3}'`
3653 <p>Similar code could be used to extract USB device module
3657 if [ -d /sys/bus/usb/devices/ ] ; then
3658 echo loaded usb modules:
3660 cd /sys/bus/usb/devices/
3661 for address in * ; do
3662 if [ -d "$address/driver/module" ] ; then
3663 module=`cd $address/driver/module ; pwd -P | xargs basename`
3664 if grep -q "^$module " /proc/modules ; then
3665 address=$(echo $address |sed s/
0000://)
3666 id=$(lsusb -s $address | tail -n
1 | awk '{print $
6}')
3678 <p>This might perhaps be something to include in other tools as
3685 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
3690 <div class=
"padding"></div>
3694 <a href=
"http://people.skolelinux.org/pere/blog/Using_NVD_and_CPE_to_track_CVEs_in_locally_maintained_software.html">Using NVD and CPE to track CVEs in locally maintained software
</a>
3700 <p>The last few days I have looked at ways to track open security
3701 issues here at my work with the University of Oslo. My idea is that
3702 it should be possible to use the information about security issues
3703 available on the Internet, and check our locally
3704 maintained/distributed software against this information. It should
3705 allow us to verify that no known security issues are forgotten. The
3706 CVE database listing vulnerabilities seem like a great central point,
3707 and by using the package lists from Debian mapped to CVEs provided by
3708 the testing security team, I believed it should be possible to figure
3709 out which security holes were present in our free software
3712 <p>After reading up on the topic, it became obvious that the first
3713 building block is to be able to name software packages in a unique and
3714 consistent way across data sources. I considered several ways to do
3715 this, for example coming up with my own naming scheme like using URLs
3716 to project home pages or URLs to the Freshmeat entries, or using some
3717 existing naming scheme. And it seem like I am not the first one to
3718 come across this problem, as MITRE already proposed and implemented a
3719 solution. Enter the
<a href=
"http://cpe.mitre.org/index.html">Common
3720 Platform Enumeration
</a> dictionary, a vocabulary for referring to
3721 software, hardware and other platform components. The CPE ids are
3722 mapped to CVEs in the
<a href=
"http://web.nvd.nist.gov/">National
3723 Vulnerability Database
</a>, allowing me to look up know security
3724 issues for any CPE name. With this in place, all I need to do is to
3725 locate the CPE id for the software packages we use at the university.
3726 This is fairly trivial (I google for 'cve cpe $package' and check the
3727 NVD entry if a CVE for the package exist).
</p>
3729 <p>To give you an example. The GNU gzip source package have the CPE
3730 name cpe:/a:gnu:gzip. If the old version
1.3.3 was the package to
3731 check out, one could look up
3732 <a href=
"http://web.nvd.nist.gov/view/vuln/search?cpe=cpe%3A%2Fa%3Agnu%3Agzip:1.3.3">cpe:/a:gnu:gzip:
1.3.3
3733 in NVD
</a> and get a list of
6 security holes with public CVE entries.
3734 The most recent one is
3735 <a href=
"http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-0001">CVE-
2010-
0001</a>,
3736 and at the bottom of the NVD page for this vulnerability the complete
3737 list of affected versions is provided.
</p>
3739 <p>The NVD database of CVEs is also available as a XML dump, allowing
3740 for offline processing of issues. Using this dump, I've written a
3741 small script taking a list of CPEs as input and list all CVEs
3742 affecting the packages represented by these CPEs. One give it CPEs
3743 with version numbers as specified above and get a list of open
3744 security issues out.
</p>
3746 <p>Of course for this approach to be useful, the quality of the NVD
3747 information need to be high. For that to happen, I believe as many as
3748 possible need to use and contribute to the NVD database. I notice
3750 <a href=
"https://www.redhat.com/security/data/metrics/rhsamapcpe.txt">a
3751 map from CVE to CPE
</a>, indicating that they are using the CPE
3752 information. I'm not aware of Debian and Ubuntu doing the same.
</p>
3754 <p>To get an idea about the quality for free software, I spent some
3755 time making it possible to compare the CVE database from Debian with
3756 the CVE database in NVD. The result look fairly good, but there are
3757 some inconsistencies in NVD (same software package having several
3758 CPEs), and some inaccuracies (NVD not mentioning buggy packages that
3759 Debian believe are affected by a CVE). Hope to find time to improve
3760 the quality of NVD, but that require being able to get in touch with
3761 someone maintaining it. So far my three emails with questions and
3762 corrections have not seen any reply, but I hope contact can be
3763 established soon.
</p>
3765 <p>An interesting application for CPEs is cross platform package
3766 mapping. It would be useful to know which packages in for example
3767 RHEL, OpenSuSe and Mandriva are missing from Debian and Ubuntu, and
3768 this would be trivial if all linux distributions provided CPE entries
3769 for their packages.
</p>
3775 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet
</a>.
3780 <div class=
"padding"></div>
3784 <a href=
"http://people.skolelinux.org/pere/blog/A_Norwegian_FixMyStreet_have_kept_me_busy_the_last_few_weeks.html">A Norwegian FixMyStreet have kept me busy the last few weeks
</a>
3790 <p>Here is a small update for my English readers. Most of my blog
3791 posts have been in Norwegian the last few weeks, so here is a short
3792 update in English.
</p>
3794 <p>The kids still keep me too busy to get much free software work
3795 done, but I did manage to organise a project to get a Norwegian port
3796 of the British service
3797 <a href=
"http://www.fixmystreet.com/">FixMyStreet
</a> up and running,
3798 and it has been running for a month now. The entire project has been
3799 organised by me and two others. Around Christmas we gathered sponsors
3800 to fund the development work. In January I drafted a contract with
3801 <a href=
"http://www.mysociety.org/">mySociety
</a> on what to develop,
3802 and in February the development took place. Most of it involved
3803 converting the source to use GPS coordinates instead of British
3804 easting/northing, and the resulting code should be a lot easier to get
3805 running in any country by now. The Norwegian
3806 <a href=
"http://www.fiksgatami.no/">FiksGataMi
</a> is using
3807 <a href=
"http://www.openstreetmap.org/">OpenStreetmap
</a> as the map
3808 source and the source for administrative borders in Norway, and
3809 support for this had to be added/fixed.
</p>
3811 <p>The Norwegian version went live March
3th, and we spent the weekend
3812 polishing the system before we announced it March
7th. The system is
3813 running on a KVM instance of Debian/Squeeze, and has seen almost
3000
3814 problem reports in a few weeks. Soon we hope to announce the Android
3815 and iPhone versions making it even easier to report problems with the
3816 public infrastructure.
</p>
3818 <p>Perhaps something to consider for those of you in countries without
3825 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/kart">kart
</a>.
3830 <div class=
"padding"></div>
3834 <a href=
"http://people.skolelinux.org/pere/blog/Perl_modules_used_by_FixMyStreet_which_are_missing_in_Debian_Squeeze.html">Perl modules used by FixMyStreet which are missing in Debian/Squeeze
</a>
3840 <p>The Norwegian
<a href=
"http://www.fiksgatami.no/">FiksGataMi
</A>
3841 site is build on Debian/Squeeze, and this platform was chosen because
3842 I am most familiar with Debian (being a Debian Developer for around
10
3843 years) because it is the latest stable Debian release which should get
3844 security support for a few years.
</p>
3846 <p>The web service is written in Perl, and depend on some perl modules
3847 that are missing in Debian at the moment. It would be great if these
3848 modules were added to the Debian archive, allowing anyone to set up
3849 their own
<a href=
"http://www.fixmystreet.com">FixMyStreet
</a> clone
3850 in their own country using only Debian packages. The list of modules
3851 missing in Debian/Squeeze isn't very long, and I hope the perl group
3852 will find time to package the
12 modules Catalyst::Plugin::SmartURI,
3853 Catalyst::Plugin::Unicode::Encoding, Catalyst::View::TT, Devel::Hide,
3854 Sort::Key, Statistics::Distributions, Template::Plugin::Comma,
3855 Template::Plugin::DateTime::Format, Term::Size::Any, Term::Size::Perl,
3856 URI::SmartURI and Web::Scraper to make the maintenance of FixMyStreet
3857 easier in the future.
</p>
3859 <p>Thanks to the great tools in Debian, getting the missing modules
3860 installed on my server was a simple call to 'cpan2deb Module::Name'
3861 and 'dpkg -i' to install the resulting package. But this leave me
3862 with the responsibility of tracking security problems, which I really
3863 do not have time for.
</p>
3869 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami
</a>.
3874 <div class=
"padding"></div>
3878 <a href=
"http://people.skolelinux.org/pere/blog/What_is_missing_in_the_Debian_desktop__or_why_my_parents_use_Kubuntu.html">What is missing in the Debian desktop, or why my parents use Kubuntu
</a>
3884 <p>While at Debconf11, I have several times during discussions
3885 mentioned the issues I believe should be improved in Debian for its
3886 desktop to be useful for more people. The use case for this is my
3887 parents, which are currently running Kubuntu which solve the
3890 <p>I suspect these four missing features are not very hard to
3891 implement. After all, they are present in Ubuntu, so if we wanted to
3892 do this in Debian we would have a source.
</p>
3896 <li><strong>Simple GUI based upgrade of packages.
</strong> When there
3897 are new packages available for upgrades, a icon in the KDE status bar
3898 indicate this, and clicking on it will activate the simple upgrade
3899 tool to handle it. I have no problem guiding both of my parents
3900 through the process over the phone. If a kernel reboot is required,
3901 this too is indicated by the status bars and the upgrade tool. Last
3902 time I checked, nothing with the same features was working in KDE in
3905 <li><strong>Simple handling of missing Firefox browser
3906 plugins.
</strong> When the browser encounter a MIME type it do not
3907 currently have a handler for, it will ask the user if the system
3908 should search for a package that would add support for this MIME type,
3909 and if the user say yes, the APT sources will be searched for packages
3910 advertising the MIME type in their control file (visible in the
3911 Packages file in the APT archive). If one or more packages are found,
3912 it is a simple click of the mouse to add support for the missing mime
3913 type. If the package require the user to accept some non-free
3914 license, this is explained to the user. The entire process make it
3915 more clear to the user why something do not work in the browser, and
3916 make the chances higher for the user to blame the web page authors and
3917 not the browser for any missing features.
</li>
3919 <li><strong>Simple handling of missing multimedia codec/format
3920 handlers.
</strong> When the media players encounter a format or codec
3921 it is not supporting, a dialog pop up asking the user if the system
3922 should search for a package that would add support for it. This
3923 happen with things like MP3, Windows Media or H
.264. The selection
3924 and installation procedure is very similar to the Firefox browser
3925 plugin handling. This is as far as I know implemented using a
3926 gstreamer hook. The end result is that the user easily get access to
3927 the codecs that are present from the APT archives available, while
3928 explaining more on why a given format is unsupported by Ubuntu.
</li>
3930 <li><strong>Better browser handling of some MIME types.
</strong> When
3931 displaying a text/plain file in my Debian browser, it will propose to
3932 start emacs to show it. If I remember correctly, when doing the same
3933 in Kunbutu it show the file as a text file in the browser. At least I
3934 know Opera will show text files within the browser. I much prefer the
3935 latter behaviour.
</li>
3939 <p>There are other nice features as well, like the simplified suite
3940 upgrader, but given that I am the one mostly doing the dist-upgrade,
3941 it do not matter much.
</p>
3943 <p>I really hope we could get these features in place for the next
3944 Debian release. It would require the coordinated effort of several
3945 maintainers, but would make the end user experience a lot better.
</p>
3951 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/web">web
</a>.
3956 <div class=
"padding"></div>
3960 <a href=
"http://people.skolelinux.org/pere/blog/What_should_start_from__etc_rcS_d__in_Debian____almost_nothing.html">What should start from /etc/rcS.d/ in Debian? - almost nothing
</a>
3966 <p>In the Debian boot system, several packages include scripts that
3967 are started from /etc/rcS.d/. In fact, there is a bite more of them
3968 than make sense, and this causes a few problems. What kind of
3969 problems, you might ask. There are at least two problems. The first
3970 is that it is not possible to recover a machine after switching to
3971 runlevel
1. One need to actually reboot to get the machine back to
3972 the expected state. The other is that single user boot will sometimes
3973 run into problems because some of the subsystems are activated before
3974 the root login is presented, causing problems when trying to recover a
3975 machine from a problem in that subsystem. A minor additional point is
3976 that moving more scripts out of rcS.d/ and into the other rc#.d/
3977 directories will increase the amount of scripts that can run in
3978 parallel during boot, and thus decrease the boot time.
</p>
3980 <p>So, which scripts should start from rcS.d/. In short, only the
3981 scripts that _have_ to execute before the root login prompt is
3982 presented during a single user boot should go there. Everything else
3983 should go into the numeric runlevels. This means things like
3984 lm-sensors, fuse and x11-common should not run from rcS.d, but from
3985 the numeric runlevels. Today in Debian, there are around
115 init.d
3986 scripts that are started from rcS.d/, and most of them should be moved
3987 out. Do your package have one of them? Please help us make single
3988 user and runlevel
1 better by moving it.
</p>
3990 <p>Scripts setting up the screen, keyboard, system partitions
3991 etc. should still be started from rcS.d/, but there is for example no
3992 need to have the network enabled before the single user login prompt
3995 <p>As always, things are not so easy to fix as they sound. To keep
3996 Debian systems working while scripts migrate and during upgrades, the
3997 scripts need to be moved from rcS.d/ to rc2.d/ in reverse dependency
3998 order, ie the scripts that nothing in rcS.d/ depend on can be moved,
3999 and the next ones can only be moved when their dependencies have been
4000 moved first. This migration must be done sequentially while we ensure
4001 that the package system upgrade packages in the right order to keep
4002 the system state correct. This will require some coordination when it
4003 comes to network related packages, but most of the packages with
4004 scripts that should migrate do not have anything in rcS.d/ depending
4005 on them. Some packages have already been updated, like the sudo
4006 package, while others are still left to do. I wish I had time to work
4007 on this myself, but real live constrains make it unlikely that I will
4008 find time to push this forward.
</p>
4014 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
4019 <div class=
"padding"></div>
4023 <a href=
"http://people.skolelinux.org/pere/blog/How_is_booting_into_runlevel_1_different_from_single_user_boots_.html">How is booting into runlevel
1 different from single user boots?
</a>
4029 <p>Wouter Verhelst have some
4030 <a href=
"http://grep.be/blog/en/retorts/pere_kubuntu_boot">interesting
4031 comments and opinions
</a> on my blog post on
4032 <a href=
"http://people.skolelinux.org/pere/blog/What_should_start_from__etc_rcS_d__in_Debian____almost_nothing.html">the
4033 need to clean up /etc/rcS.d/ in Debian
</a> and my blog post about
4034 <a href=
"http://people.skolelinux.org/pere/blog/What_is_missing_in_the_Debian_desktop__or_why_my_parents_use_Kubuntu.html">the
4035 default KDE desktop in Debian
</a>. I only have time to address one
4036 small piece of his comment now, and though it best to address the
4037 misunderstanding he bring forward:
</p>
4040 Currently, a system admin has four options: [...] boot to a
4041 single-user system (by adding 'single' to the kernel command line;
4042 this runs rcS and rc1 scripts)
4045 <p>This make me believe Wouter believe booting into single user mode
4046 and booting into runlevel
1 is the same. I am not surprised he
4047 believe this, because it would make sense and is a quite sensible
4048 thing to believe. But because the boot in Debian is slightly broken,
4049 runlevel
1 do not work properly and it isn't the same as single user
4050 mode. I'll try to explain what is actually happing, but it is a bit
4051 hard to explain.
</p>
4053 <p>Single user mode is defined like this in /etc/inittab:
4054 "
<tt>~~:S:wait:/sbin/sulogin
</tt>". This means the only thing that is
4055 executed in single user mode is sulogin. Single user mode is a boot
4056 state "between
" the runlevels, and when booting into single user mode,
4057 only the scripts in /etc/rcS.d/ are executed before the init process
4058 enters the single user state. When switching to runlevel 1, the state
4059 is in fact not ending in runlevel 1, but it passes through runlevel 1
4060 and end up in the single user mode (see /etc/rc1.d/S03single, which
4061 runs "init -t1 S
" to switch to single user mode at the end of runlevel
4062 1. It is confusing that the 'S' (single user) init mode is not the
4063 mode enabled by /etc/rcS.d/ (which is more like the initial boot
4066 <p>This summary might make it clearer. When booting for the first
4067 time into single user mode, the following commands are executed:
4068 "<tt>/etc/init.d/rc S; /sbin/sulogin
</tt>". When booting into
4069 runlevel 1, the following commands are executed: "<tt>/etc/init.d/rc
4070 S; /etc/init.d/rc
1; /sbin/sulogin
</tt>". A problem show up when
4071 trying to continue after visiting single user mode. Not all services
4072 are started again as they should, causing the machine to end up in an
4073 unpredicatble state. This is why Debian admins recommend rebooting
4074 after visiting single user mode.</p>
4076 <p>A similar problem with runlevel 1 is caused by the amount of
4077 scripts executed from /etc/rcS.d/. When switching from say runlevel 2
4078 to runlevel 1, the services started from /etc/rcS.d/ are not properly
4079 stopped when passing through the scripts in /etc/rc1.d/, and not
4080 started again when switching away from runlevel 1 to the runlevels
4081 2-5. I believe the problem is best fixed by moving all the scripts
4082 out of /etc/rcS.d/ that are not <strong>required</strong> to get a
4083 functioning single user mode during boot.</p>
4085 <p>I have spent several years investigating the Debian boot system,
4086 and discovered this problem a few years ago. I suspect it originates
4087 from when sysvinit was introduced into Debian, a long time ago.</p>
4093 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/bootsystem
">bootsystem</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian
">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>.
4098 <div class="padding
"></div>
4102 <a href="http://people.skolelinux.org/pere/blog/Automatically_upgrading_server_firmware_on_Dell_PowerEdge.html
">Automatically upgrading server firmware on Dell PowerEdge</a>
4108 <p>At work we have heaps of servers. I believe the total count is
4109 around 1000 at the moment. To be able to get help from the vendors
4110 when something go wrong, we want to keep the firmware on the servers
4111 up to date. If the firmware isn't the latest and greatest, the
4112 vendors typically refuse to start debugging any problems until the
4113 firmware is upgraded. So before every reboot, we want to upgrade the
4114 firmware, and we would really like everyone handling servers at the
4115 university to do this themselves when they plan to reboot a machine.
4116 For that to happen we at the unix server admin group need to provide
4117 the tools to do so.</p>
4119 <p>To make firmware upgrading easier, I am working on a script to
4120 fetch and install the latest firmware for the servers we got. Most of
4121 our hardware are from Dell and HP, so I have focused on these servers
4122 so far. This blog post is about the Dell part.</P>
4124 <p>On the Dell FTP site I was lucky enough to find
4125 <a href="ftp://ftp.us.dell.com/catalog/Catalog.xml.gz
">an XML file</a>
4126 with firmware information for all 11th generation servers, listing
4127 which firmware should be used on a given model and where on the FTP
4128 site I can find it. Using a simple perl XML parser I can then
4129 download the shell scripts Dell provides to do firmware upgrades from
4130 within Linux and reboot when all the firmware is primed and ready to
4131 be activated on the first reboot.</p>
4133 <p>This is the Dell related fragment of the perl code I am working on.
4134 Are there anyone working on similar tools for firmware upgrading all
4135 servers at a site? Please get in touch and lets share resources.</p>
4141 use File::Temp qw(tempdir);
4143 # Install needed RHEL packages if missing
4145 'XML::Simple' => 'perl-XML-Simple',
4147 for my $module (keys %rhelmodules) {
4148 eval "use $module;";
4150 my $pkg = $rhelmodules{$module};
4151 system("yum install -y $pkg");
4152 eval "use $module;";
4156 my $errorsto = 'pere@hungry.com';
4162 sub run_firmware_script {
4163 my ($opts, $script) = @_;
4165 print STDERR "fail: missing script name\n";
4168 print STDERR "Running $script\n\n";
4170 if (
0 == system("sh $script $opts")) { # FIXME correct exit code handling
4171 print STDERR "success: firmware script ran succcessfully\n";
4173 print STDERR "fail: firmware script returned error\n";
4177 sub run_firmware_scripts {
4178 my ($opts, @dirs) = @_;
4179 # Run firmware packages
4180 for my $dir (@dirs) {
4181 print STDERR "info: Running scripts in $dir\n";
4182 opendir(my $dh, $dir) or die "Unable to open directory $dir: $!";
4183 while (my $s = readdir $dh) {
4184 next if $s =~ m/^\.\.?/;
4185 run_firmware_script($opts, "$dir/$s");
4193 print STDERR "info: Downloading $url\n";
4194 system("wget --quiet \"$url\"");
4199 my $product = `dmidecode -s system-product-name`;
4202 if ($product =~ m/PowerEdge/) {
4204 # on RHEL, these pacakges are needed by the firwmare upgrade scripts
4205 system('yum install -y compat-libstdc++-
33.i686 libstdc++.i686 libxml2.i686 procmail');
4207 my $tmpdir = tempdir(
4211 fetch_dell_fw('catalog/Catalog.xml.gz');
4212 system('gunzip Catalog.xml.gz');
4213 my @paths = fetch_dell_fw_list('Catalog.xml');
4214 # -q is quiet, disabling interactivity and reducing console output
4217 for my $url (@paths) {
4218 fetch_dell_fw($url);
4220 run_firmware_scripts($fwopts, $tmpdir);
4222 print STDERR
"error: Unsupported Dell model '$product'.\n";
4223 print STDERR
"error: Please report to $errorsto.\n";
4227 print STDERR
"error: Unsupported Dell model '$product'.\n";
4228 print STDERR
"error: Please report to $errorsto.\n";
4234 my $url =
"ftp://ftp.us.dell.com/$path";
4238 # Using ftp://ftp.us.dell.com/catalog/Catalog.xml.gz, figure out which
4239 # firmware packages to download from Dell. Only work for Linux
4240 # machines and
11th generation Dell servers.
4241 sub fetch_dell_fw_list {
4242 my $filename = shift;
4244 my $product = `dmidecode -s system-product-name`;
4246 my ($mybrand, $mymodel) = split(/\s+/, $product);
4248 print STDERR
"Finding firmware bundles for $mybrand $mymodel\n";
4250 my $xml = XMLin($filename);
4252 for my $bundle (@{$xml-
>{SoftwareBundle}}) {
4253 my $brand = $bundle-
>{TargetSystems}-
>{Brand}-
>{Display}-
>{content};
4254 my $model = $bundle-
>{TargetSystems}-
>{Brand}-
>{Model}-
>{Display}-
>{content};
4256 if ("ARRAY" eq ref $bundle-
>{TargetOSes}-
>{OperatingSystem}) {
4257 $oscode = $bundle-
>{TargetOSes}-
>{OperatingSystem}[
0]-
>{osCode};
4259 $oscode = $bundle-
>{TargetOSes}-
>{OperatingSystem}-
>{osCode};
4261 if ($mybrand eq $brand && $mymodel eq $model && "LIN" eq $oscode)
4263 @paths = map { $_-
>{path} } @{$bundle-
>{Contents}-
>{Package}};
4266 for my $component (@{$xml-
>{SoftwareComponent}}) {
4267 my $componenttype = $component-
>{ComponentType}-
>{value};
4269 # Drop application packages, only firmware and BIOS
4270 next if 'APAC' eq $componenttype;
4272 my $cpath = $component-
>{path};
4273 for my $path (@paths) {
4274 if ($cpath =~ m%/$path$%) {
4275 push(@paths, $cpath);
4283 <p>The code is only tested on RedHat Enterprise Linux, but I suspect
4284 it could work on other platforms with some tweaking. Anyone know a
4285 index like Catalog.xml is available from HP for HP servers? At the
4286 moment I maintain a similar list manually and it is quickly getting
4293 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
4298 <div class=
"padding"></div>
4300 <p style=
"text-align: right;"><a href=
"debian.rss"><img src=
"http://people.skolelinux.org/pere/blog/xml.gif" alt=
"RSS Feed" width=
"36" height=
"14" /></a></p>
4311 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/01/">January (
7)
</a></li>
4313 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/02/">February (
10)
</a></li>
4315 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/03/">March (
17)
</a></li>
4317 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/04/">April (
12)
</a></li>
4319 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/05/">May (
11)
</a></li>
4326 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/01/">January (
16)
</a></li>
4328 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/02/">February (
6)
</a></li>
4330 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/03/">March (
6)
</a></li>
4332 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/04/">April (
7)
</a></li>
4334 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/05/">May (
3)
</a></li>
4336 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/06/">June (
2)
</a></li>
4338 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/07/">July (
7)
</a></li>
4340 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/08/">August (
6)
</a></li>
4342 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/09/">September (
4)
</a></li>
4344 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/10/">October (
2)
</a></li>
4346 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/11/">November (
3)
</a></li>
4348 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/12/">December (
1)
</a></li>
4355 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/01/">January (
2)
</a></li>
4357 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/02/">February (
1)
</a></li>
4359 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/03/">March (
3)
</a></li>
4361 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/04/">April (
3)
</a></li>
4363 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/05/">May (
9)
</a></li>
4365 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/06/">June (
14)
</a></li>
4367 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/07/">July (
12)
</a></li>
4369 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/08/">August (
13)
</a></li>
4371 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/09/">September (
7)
</a></li>
4373 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/10/">October (
9)
</a></li>
4375 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/11/">November (
13)
</a></li>
4377 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/12/">December (
12)
</a></li>
4384 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/01/">January (
8)
</a></li>
4386 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/02/">February (
8)
</a></li>
4388 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/03/">March (
12)
</a></li>
4390 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/04/">April (
10)
</a></li>
4392 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/05/">May (
9)
</a></li>
4394 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/06/">June (
3)
</a></li>
4396 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/07/">July (
4)
</a></li>
4398 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/08/">August (
3)
</a></li>
4400 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/09/">September (
1)
</a></li>
4402 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/10/">October (
2)
</a></li>
4404 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/11/">November (
3)
</a></li>
4406 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/12/">December (
3)
</a></li>
4413 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2008/11/">November (
5)
</a></li>
4415 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2008/12/">December (
7)
</a></li>
4426 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer (
13)
</a></li>
4428 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/amiga">amiga (
1)
</a></li>
4430 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/aros">aros (
1)
</a></li>
4432 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/bitcoin">bitcoin (
2)
</a></li>
4434 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem (
12)
</a></li>
4436 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/bsa">bsa (
2)
</a></li>
4438 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian (
54)
</a></li>
4440 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (
102)
</a></li>
4442 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/digistan">digistan (
8)
</a></li>
4444 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/english">english (
129)
</a></li>
4446 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (
15)
</a></li>
4448 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling (
12)
</a></li>
4450 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/intervju">intervju (
26)
</a></li>
4452 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/kart">kart (
16)
</a></li>
4454 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/ldap">ldap (
8)
</a></li>
4456 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/lenker">lenker (
4)
</a></li>
4458 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp (
1)
</a></li>
4460 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia (
16)
</a></li>
4462 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/norsk">norsk (
167)
</a></li>
4464 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug (
127)
</a></li>
4466 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/open311">open311 (
2)
</a></li>
4468 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett (
24)
</a></li>
4470 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/personvern">personvern (
47)
</a></li>
4472 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/raid">raid (
1)
</a></li>
4474 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/reprap">reprap (
11)
</a></li>
4476 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/rfid">rfid (
2)
</a></li>
4478 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/robot">robot (
4)
</a></li>
4480 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/rss">rss (
1)
</a></li>
4482 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/ruter">ruter (
4)
</a></li>
4484 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/scraperwiki">scraperwiki (
1)
</a></li>
4486 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (
23)
</a></li>
4488 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (
4)
</a></li>
4490 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/standard">standard (
29)
</a></li>
4492 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll (
1)
</a></li>
4494 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/stortinget">stortinget (
4)
</a></li>
4496 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance (
9)
</a></li>
4498 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/valg">valg (
6)
</a></li>
4500 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/video">video (
25)
</a></li>
4502 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (
1)
</a></li>
4504 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/web">web (
19)
</a></li>
4510 <p style=
"text-align: right">
4511 Created by
<a href=
"http://steve.org.uk/Software/chronicle">Chronicle v4.4
</a>