blog/index.html

   1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
   2         "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
   3 <html>
   4  <head>
   5   <title>Petter Reinholdtsen</title>
   6   <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/style.css">
   7   <link rel="alternate" title="RSS Feed" href="http://people.skolelinux.org/pere/blog/index.rss" type="application/rss+xml">
   8
   9  </head>
  10  <body>
  11
  12  <div class="title">
  13   <h1>
  14        <a href="http://people.skolelinux.org/pere/blog/">Petter Reinholdtsen</a>
  15
  16   </h1>
  17
  18  </div>
  19
  20
  21
  22  <div class="entry">
  23   <div class="title"><a href="http://people.skolelinux.org/pere/blog/Lenny__Squeeze_upgrades__apt_vs_aptitude_with_the_Gnome_desktop.html">Lenny->Squeeze upgrades, apt vs aptitude with the Gnome desktop</a></div>
  24   <div class="date">2010-07-03 23:55</div>
  25   <div class="body">
  26 <p>Here is a short update on my <a
  27 href="http://people.skolelinux.org/~pere/debian-upgrade-testing/">my
  28 Debian Lenny->Squeeze upgrade testing</a>.  Here is a summary of the
  29 difference for Gnome when it is upgraded by apt-get and aptitude.  I'm
  30 not reporting the status for KDE, because the upgrade crashes when
  31 aptitude try because of missing conflicts
  32 (<a href="http://bugs.debian.org/584861">#584861</a> and
  33 <a href="http://bugs.debian.org/585716">#585716</a>).</p>
  34
  35 <p>At the end of the upgrade test script, dpkg -l is executed to get a
  36 complete list of the installed packages.  Based on this I see these
  37 differences when I did a test run today.  As usual, I do not really
  38 know what the correct set of packages would be, but thought it best to
  39 publish the difference.</p>
  40
  41 <p>Installed using apt-get, missing with aptitude</p>
  42
  43 <blockquote><p>
  44   at-spi cpp-4.3 finger gnome-spell gstreamer0.10-gnomevfs
  45   libatspi1.0-0 libcupsys2 libeel2-data libgail-common libgdl-1-common
  46   libgnomeprint2.2-data libgnomeprintui2.2-common libgnomevfs2-bin
  47   libgtksourceview-common libpt-1.10.10-plugins-alsa
  48   libpt-1.10.10-plugins-v4l libservlet2.4-java libxalan2-java
  49   libxerces2-java openoffice.org-writer2latex openssl-blacklist p7zip
  50   python-4suite-xml python-eggtrayicon python-gtkhtml2
  51   python-gtkmozembed svgalibg1 xserver-xephyr zip
  52 </p></blockquote>
  53
  54 <p>Installed using apt-get, removed with aptitude</p>
  55
  56 <blockquote><p>
  57   bluez-utils dhcdbd djvulibre-desktop epiphany-gecko
  58   gnome-app-install gnome-mount gnome-vfs-obexftp gnome-volume-manager
  59   libao2 libavahi-compat-libdnssd1 libavahi-core5 libbind9-50
  60   libbluetooth2 libcamel1.2-11 libcdio7 libcucul0 libcurl3
  61   libdirectfb-1.0-0 libdvdread3 libedata-cal1.2-6 libedataserver1.2-9
  62   libeel2-2.20 libepc-1.0-1 libepc-ui-1.0-1 libexchange-storage1.2-3
  63   libfaad0 libgd2-noxpm libgda3-3 libgda3-common libggz2 libggzcore9
  64   libggzmod4 libgksu1.2-0 libgksuui1.0-1 libgmyth0 libgnome-desktop-2
  65   libgnome-pilot2 libgnomecups1.0-1 libgnomeprint2.2-0
  66   libgnomeprintui2.2-0 libgpod3 libgraphviz4 libgtkhtml2-0
  67   libgtksourceview1.0-0 libgucharmap6 libhesiod0 libicu38 libisccc50
  68   libisccfg50 libiw29 libkpathsea4 libltdl3 liblwres50 libmagick++10
  69   libmagick10 libmalaga7 libmtp7 libmysqlclient15off libnautilus-burn4
  70   libneon27 libnm-glib0 libnm-util0 libopal-2.2 libosp5
  71   libparted1.8-10 libpisock9 libpisync1 libpoppler-glib3 libpoppler3
  72   libpt-1.10.10 libraw1394-8 libsensors3 libsmbios2 libsoup2.2-8
  73   libssh2-1 libsuitesparse-3.1.0 libswfdec-0.6-90 libtalloc1
  74   libtotem-plparser10 libtrackerclient0 libvoikko1 libxalan2-java-gcj
  75   libxerces2-java-gcj libxklavier12 libxtrap6 libxxf86misc1 libzephyr3
  76   mysql-common swfdec-gnome totem-gstreamer wodim
  77 </p></blockquote>
  78
  79 <p>Installed using aptitude, missing with apt-get</p>
  80
  81 <blockquote><p>
  82   gnome gnome-desktop-environment hamster-applet python-gnomeapplet
  83   python-gnomekeyring python-wnck rhythmbox-plugins xorg
  84   xserver-xorg-input-all xserver-xorg-input-evdev
  85   xserver-xorg-input-kbd xserver-xorg-input-mouse
  86   xserver-xorg-input-synaptics xserver-xorg-video-all
  87   xserver-xorg-video-apm xserver-xorg-video-ark xserver-xorg-video-ati
  88   xserver-xorg-video-chips xserver-xorg-video-cirrus
  89   xserver-xorg-video-dummy xserver-xorg-video-fbdev
  90   xserver-xorg-video-glint xserver-xorg-video-i128
  91   xserver-xorg-video-i740 xserver-xorg-video-mach64
  92   xserver-xorg-video-mga xserver-xorg-video-neomagic
  93   xserver-xorg-video-nouveau xserver-xorg-video-nv
  94   xserver-xorg-video-r128 xserver-xorg-video-radeon
  95   xserver-xorg-video-radeonhd xserver-xorg-video-rendition
  96   xserver-xorg-video-s3 xserver-xorg-video-s3virge
  97   xserver-xorg-video-savage xserver-xorg-video-siliconmotion
  98   xserver-xorg-video-sis xserver-xorg-video-sisusb
  99   xserver-xorg-video-tdfx xserver-xorg-video-tga
 100   xserver-xorg-video-trident xserver-xorg-video-tseng
 101   xserver-xorg-video-vesa xserver-xorg-video-vmware
 102   xserver-xorg-video-voodoo
 103 </p></blockquote>
 104
 105 <p>Installed using aptitude, removed with apt-get</p>
 106
 107 <blockquote><p>
 108   deskbar-applet xserver-xorg xserver-xorg-core
 109   xserver-xorg-input-wacom xserver-xorg-video-intel
 110   xserver-xorg-video-openchrome
 111 </p></blockquote>
 112
 113 <p>I was told on IRC that the xorg-xserver package was
 114 <a href="http://git.debian.org/?p=pkg-xorg/xserver/xorg-server.git;a=commit;h=9c8080d06c457932d3bfec021c69ac000aa60120">changed
 115 in git</a> today to try to get apt-get to not remove xorg completely.
 116 No idea when it hits Squeeze, but when it does I hope it will reduce
 117 the difference somewhat.
 118 </div>
 119   <div class="tags">
 120
 121
 122
 123    Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
 124
 125   </div>
 126  </div>
 127  <div class="padding"></div>
 128
 129  <div class="entry">
 130   <div class="title"><a href="http://people.skolelinux.org/pere/blog/Caching_password__user_and_group_on_a_roaming_Debian_laptop.html">Caching password, user and group on a roaming Debian laptop</a></div>
 131   <div class="date">2010-07-01 11:40</div>
 132   <div class="body">
 133 <p>For a laptop, centralized user directories and password checking is
 134 a bit troubling.  Laptops are typically used also when not connected
 135 to the network, and it is vital for a user to be able to log in or
 136 unlock the screen saver also when a central server is unavailable.
 137 This is possible by caching passwords and directory information (user
 138 and group attributes) locally, and the packages to do so are available
 139 in Debian.  Here follow two recipes to set this up in Debian/Squeeze.
 140 It is also possible to set up in Debian/Lenny, but require more manual
 141 setup there because pam-auth-update is missing in Lenny.</p>
 142
 143 <h2>LDAP/Kerberos + nscd + libpam-ccreds + libpam-mklocaluser/pam_mkhomedir</h2>
 144
 145 This is the traditional method with a twist.  The password caching is
 146 provided by libpam-ccreds (version 10-4 or later is needed on
 147 Squeeze), and the directory caching is done by nscd.  The directory
 148 lookup and password checking is done using LDAP.  If one want to use
 149 Kerberos for password checking the libpam-ldapd package can be
 150 replaced with libpam-krb5 or libpam-heimdal.  If one is happy having a
 151 local home directory with the path listed in LDAP, one can use the
 152 pam_mkhomedir module from pam-modules to make this happen instead of
 153 using libpam-mklocaluser.  A setup for pam-auth-update to enable
 154 pam_mkhomedir will have to be written until a fix for
 155 <a href="http://bugs.debian.org/568577">bug #568577</a> is in the
 156 archive.  Because I believe it is a bad idea to have local home
 157 directories using misleading paths like /site/server/partition/, I
 158 prefer to create a local user with the home directory in /home/.  This
 159 is done using the libpam-mklocaluser package.</p>
 160
 161 <p>These packages need to be installed and configured</p>
 162
 163 <blockquote><pre>
 164 libnss-ldapd libpam-ldapd nscd libpam-ccreds libpam-mklocaluser
 165 </pre></blockquote>
 166
 167 <p>The ldapd packages will ask for LDAP connection information, and
 168 one have to fill in the values that fits ones own site.  Make sure the
 169 PAM part uses encrypted connections, to make sure the password is not
 170 sent in clear text to the LDAP server.  I've been unable to get TLS
 171 certificate checking for a self signed certificate working, which make
 172 LDAP authentication unsafe for Debian Edu (nslcd is not checking if it
 173 is talking to the correct LDAP server), and very much welcome feedback
 174 on how to get this working.</p>
 175
 176 <p>Because nscd do not have a default configuration fit for offline
 177 caching until <a href="http://bugs.debian.org/485282">bug #485282</a>
 178 is fixed, this configuration should be used instead of the one
 179 currently in /etc/nscd.conf.  The changes are in the fields
 180 reload-count and positive-time-to-live, and is based on the
 181 instructions I found in the
 182 <a href="http://www.flyn.org/laptopldap/">LDAP for Mobile Laptops</a>
 183 instructions by Flyn Computing.</p>
 184
 185 <blockquote><pre>
 186         debug-level             0
 187         reload-count            unlimited
 188         paranoia                no
 189
 190         enable-cache            passwd          yes
 191         positive-time-to-live   passwd          2592000
 192         negative-time-to-live   passwd          20
 193         suggested-size          passwd          211
 194         check-files             passwd          yes
 195         persistent              passwd          yes
 196         shared                  passwd          yes
 197         max-db-size             passwd          33554432
 198         auto-propagate          passwd          yes
 199
 200         enable-cache            group           yes
 201         positive-time-to-live   group           2592000
 202         negative-time-to-live   group           20
 203         suggested-size          group           211
 204         check-files             group           yes
 205         persistent              group           yes
 206         shared                  group           yes
 207         max-db-size             group           33554432
 208         auto-propagate          group           yes
 209
 210         enable-cache            hosts           no
 211         positive-time-to-live   hosts           2592000
 212         negative-time-to-live   hosts           20
 213         suggested-size          hosts           211
 214         check-files             hosts           yes
 215         persistent              hosts           yes
 216         shared                  hosts           yes
 217         max-db-size             hosts           33554432
 218
 219         enable-cache            services        yes
 220         positive-time-to-live   services        2592000
 221         negative-time-to-live   services        20
 222         suggested-size          services        211
 223         check-files             services        yes
 224         persistent              services        yes
 225         shared                  services        yes
 226         max-db-size             services        33554432
 227 </pre></blockquote>
 228
 229 <p>While we wait for a mechanism to update /etc/nsswitch.conf
 230 automatically like the one provided in
 231 <a href="http://bugs.debian.org/496915">bug #496915</a>, the file
 232 content need to be manually replaced to ensure LDAP is used as the
 233 directory service on the machine.  /etc/nsswitch.conf should normally
 234 look like this:</p>
 235
 236 <blockquote><pre>
 237 passwd:         files ldap
 238 group:          files ldap
 239 shadow:         files ldap
 240 hosts:          files mdns4_minimal [NOTFOUND=return] dns mdns4
 241 networks:       files
 242 protocols:      files
 243 services:       files
 244 ethers:         files
 245 rpc:            files
 246 netgroup:       files ldap
 247 </pre></blockquote>
 248
 249 <p>The important parts are that ldap is listed last for passwd, group,
 250 shadow and netgroup.</p>
 251
 252 <p>With these changes in place, any user in LDAP will be able to log
 253 in locally on the machine using for example kdm, get a local home
 254 directory created and have the password as well as user and group
 255 attributes cached.
 256
 257 <h2>LDAP/Kerberos + nss-updatedb + libpam-ccreds +
 258   libpam-mklocaluser/pam_mkhomedir</h2>
 259
 260 <p>Because nscd have had its share of problems, and seem to have
 261 problems doing proper caching, I've seen suggestions and recipes to
 262 use nss-updatedb to copy parts of the LDAP database locally when the
 263 LDAP database is available.  I have not tested such setup, because I
 264 discovered sssd.</p>
 265
 266 <h2>LDAP/Kerberos + sssd + libpam-mklocaluser</h2>
 267
 268 <p>A more flexible and robust setup than the nscd combination
 269 mentioned earlier that has shown up recently, is the
 270 <a href="https://fedorahosted.org/sssd/">sssd</a> package from Redhat.
 271 It is part of the <a href="http://www.freeipa.org/">FreeIPA</A> project
 272 to provide a Active Directory like directory service for Linux
 273 machines.  The sssd system combines the caching of passwords and user
 274 information into one package, and remove the need for nscd and
 275 libpam-ccreds.  It support LDAP and Kerberos, but not NIS.  Version
 276 1.2 do not support netgroups, but it is said that it will support this
 277 in version 1.5 expected to show up later in 2010.  Because the
 278 <a href="http://packages.qa.debian.org/s/sssd.html">sssd package</a>
 279 was missing in Debian, I ended up co-maintaining it with Werner, and
 280 version 1.2 is now in testing.
 281
 282 <p>These packages need to be installed and configured to get the
 283 roaming setup I want</p>
 284
 285 <blockquote><pre>
 286 libpam-sss libnss-sss libpam-mklocaluser
 287 </pre></blockquote>
 288
 289 The complete setup of sssd is done by editing/creating
 290 <tt>/etc/sssd/sssd.conf</tt>.
 291
 292 <blockquote><pre>
 293 [sssd]
 294 config_file_version = 2
 295 reconnection_retries = 3
 296 sbus_timeout = 30
 297 services = nss, pam
 298 domains = INTERN
 299
 300 [nss]
 301 filter_groups = root
 302 filter_users = root
 303 reconnection_retries = 3
 304
 305 [pam]
 306 reconnection_retries = 3
 307
 308 [domain/INTERN]
 309 enumerate = false
 310 cache_credentials = true
 311
 312 id_provider = ldap
 313 auth_provider = ldap
 314 chpass_provider = ldap
 315
 316 ldap_uri = ldap://ldap
 317 ldap_search_base = dc=skole,dc=skolelinux,dc=no
 318 ldap_tls_reqcert = never
 319 ldap_tls_cacert = /etc/ssl/certs/ca-certificates.crt
 320 </pre></blockquote>
 321
 322 <p>I got the same problem here with certificate checking.  Had to set
 323 "ldap_tls_reqcert = never" to get it working.</p>
 324
 325 <p>With the libnss-sss package in testing at the moment, the
 326 nsswitch.conf file is update automatically, so there is no need to
 327 modify it manually.</p>
 328
 329 <p>If you want to help out with implementing this for Debian Edu,
 330 please contact us on debian-edu@lists.debian.org.</p>
 331 </div>
 332   <div class="tags">
 333
 334
 335
 336    Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 337
 338   </div>
 339  </div>
 340  <div class="padding"></div>
 341
 342  <div class="entry">
 343   <div class="title"><a href="http://people.skolelinux.org/pere/blog/LUMA__a_very_nice_LDAP_GUI.html">LUMA, a very nice LDAP GUI</a></div>
 344   <div class="date">2010-06-28 00:30</div>
 345   <div class="body">
 346 <p>The last few days I have been looking into the status of the LDAP
 347 directory in Debian Edu, and in the process I started to miss a GUI
 348 tool to browse the LDAP tree.  The only one I was able to find in
 349 Debian/Squeeze and Lenny is
 350 <a href="http://luma.sourceforge.net/">LUMA</a>, which has proved to
 351 be a great tool to get a overview of the current LDAP directory
 352 populated by default in Skolelinux.  Thanks to it, I have been able to
 353 find empty and obsolete subtrees, misplaced objects and duplicate
 354 objects.  It will be installed by default in Debian/Squeeze.  If you
 355 are working with LDAP, give it a go. :)</p>
 356
 357 <p>I did notice one problem with it I have not had time to report to
 358 the BTS yet.  There is no .desktop file in the package, so the tool do
 359 not show up in the Gnome and KDE menus, but only deep down in in the
 360 Debian submenu in KDE.  I hope that can be fixed before Squeeze is
 361 released.</p>
 362
 363 <p>I have not yet been able to get it to modify the tree yet.  I would
 364 like to move objects and remove subtrees directly in the GUI, but have
 365 not found a way to do that with LUMA yet.  So in the mean time, I use
 366 <a href="http://www.lichteblau.com/ldapvi/">ldapvi</a> for that.</p>
 367
 368 <p>If you have tips on other GUI tools for LDAP that might be useful
 369 in Debian Edu, please contact us on debian-edu@lists.debian.org.</p>
 370
 371 <p>Update 2010-06-29: Ross Reedstrom tipped us about the
 372 <a href="http://packages.qa.debian.org/g/gq.html">gq</a> package as a
 373 useful GUI alternative.  It seem like a good tool, but is unmaintained
 374 in Debian and got a RC bug keeping it out of Squeeze.  Unless that
 375 changes, it will not be an option for Debian Edu based on Squeeze.</p>
 376 </div>
 377   <div class="tags">
 378
 379
 380
 381    Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 382
 383   </div>
 384  </div>
 385  <div class="padding"></div>
 386
 387  <div class="entry">
 388   <div class="title"><a href="http://people.skolelinux.org/pere/blog/Idea_for_a_change_to_LDAP_schemas_allowing_DNS_and_DHCP_info_to_be_combined_into_one_object.html">Idea for a change to LDAP schemas allowing DNS and DHCP info to be combined into one object</a></div>
 389   <div class="date">2010-06-24 00:35</div>
 390   <div class="body">
 391 <p>A while back, I
 392 <a href="http://people.skolelinux.org/pere/blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html">complained
 393 about the fact</a> that it is not possible with the provided schemas
 394 for storing DNS and DHCP information in LDAP to combine the two sets
 395 of information into one LDAP object representing a computer.</p>
 396
 397 <p>In the mean time, I discovered that a simple fix would be to make
 398 the dhcpHost object class auxiliary, to allow it to be combined with
 399 the dNSDomain object class, and thus forming one object for one
 400 computer when storing both DHCP and DNS information in LDAP.</p>
 401
 402 <p>If I understand this correctly, it is not safe to do this change
 403 without also changing the assigned number for the object class, and I
 404 do not know enough about LDAP schema design to do that properly for
 405 Debian Edu.</p>
 406
 407 <p>Anyway, for future reference, this is how I believe we could change
 408 the
 409 <a href="http://tools.ietf.org/html/draft-ietf-dhc-ldap-schema-00">DHCP
 410 schema</a> to solve at least part of the problem with the LDAP schemas
 411 available today from IETF.</p>
 412
 413 <pre>
 414 --- dhcp.schema    (revision 65192)
 415 +++ dhcp.schema    (working copy)
 416 @@ -376,7 +376,7 @@
 417  objectclass ( 2.16.840.1.113719.1.203.6.6
 418         NAME 'dhcpHost'
 419         DESC 'This represents information about a particular client'
 420 -       SUP top
 421 +       SUP top AUXILIARY
 422         MUST cn
 423         MAY  (dhcpLeaseDN $ dhcpHWAddress $ dhcpOptionsDN $ dhcpStatements $ dhcpComments $ dhcpOption)
 424         X-NDS_CONTAINMENT ('dhcpService' 'dhcpSubnet' 'dhcpGroup') )
 425 </pre>
 426
 427 <p>I very much welcome clues on how to do this properly for Debian
 428 Edu/Squeeze.  We provide the DHCP schema in our debian-edu-config
 429 package, and should thus be free to rewrite it as we see fit.</p>
 430
 431 <p>If you want to help out with implementing this for Debian Edu,
 432 please contact us on debian-edu@lists.debian.org.</p>
 433 </div>
 434   <div class="tags">
 435
 436
 437
 438    Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 439
 440   </div>
 441  </div>
 442  <div class="padding"></div>
 443
 444  <div class="entry">
 445   <div class="title"><a href="http://people.skolelinux.org/pere/blog/Calling_tasksel_like_the_installer__while_still_getting_useful_output.html">Calling tasksel like the installer, while still getting useful output</a></div>
 446   <div class="date">2010-06-16 14:55</div>
 447   <div class="body">
 448 <p>A few times I have had the need to simulate the way tasksel
 449 installs packages during the normal debian-installer run.  Until now,
 450 I have ended up letting tasksel do the work, with the annoying problem
 451 of not getting any feedback at all when something fails (like a
 452 conffile question from dpkg or a download that fails), using code like
 453 this:
 454
 455 <blockquote><pre>
 456 export DEBIAN_FRONTEND=noninteractive
 457 tasksel --new-install
 458 </pre></blockquote>
 459
 460 This would invoke tasksel, let its automatic task selection pick the
 461 tasks to install, and continue to install the requested tasks without
 462 any output what so ever.
 463
 464 Recently I revisited this problem while working on the automatic
 465 package upgrade testing, because tasksel would some times hang without
 466 any useful feedback, and I want to see what is going on when it
 467 happen.  Then it occured to me, I can parse the output from tasksel
 468 when asked to run in test mode, and use that aptitude command line
 469 printed by tasksel then to simulate the tasksel run.  I ended up using
 470 code like this:
 471
 472 <blockquote><pre>
 473 export DEBIAN_FRONTEND=noninteractive
 474 cmd="$(in_target tasksel -t --new-install | sed 's/debconf-apt-progress -- //')"
 475 $cmd
 476 </pre></blockquote>
 477
 478 <p>The content of $cmd is typically something like "<tt>aptitude -q
 479 --without-recommends -o APT::Install-Recommends=no -y install
 480 ~t^desktop$ ~t^gnome-desktop$ ~t^laptop$ ~pstandard ~prequired
 481 ~pimportant</tt>", which will install the gnome desktop task, the
 482 laptop task and all packages with priority standard , required and
 483 important, just like tasksel would have done it during
 484 installation.</p>
 485
 486 <p>A better approach is probably to extend tasksel to be able to
 487 install packages without using debconf-apt-progress, for use cases
 488 like this.</p>
 489 </div>
 490   <div class="tags">
 491
 492
 493
 494    Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 495
 496   </div>
 497  </div>
 498  <div class="padding"></div>
 499
 500  <div class="entry">
 501   <div class="title"><a href="http://people.skolelinux.org/pere/blog/Vinmonopolet_bryter_loven___penlyst___og_flere_planlegger____gj__re_det_samme.html">Vinmonopolet bryter loven åpenlyst - og flere planlegger å gjøre det samme</a></div>
 502   <div class="date">2010-06-16 11:00</div>
 503   <div class="body">
 504 <p><a href="http://www.dagbladet.no/2010/06/16/nyheter/innenriks/streik/arbeidsliv/12157858/">Dagbladet
 505 melder</a> at Vinmonopolet med bakgrunn i vekterstreiken som pågår i
 506 Norge for tiden, har bestemt seg for med vitende og vilje å bryte
 507 sentralbanklovens paragraf 14 ved å nekte folk å betale med
 508 kontanter, og at flere butikker planlegger å følge deres eksempel.
 509 Jeg synes det er hårreisende hvis de slipper unna med et slikt
 510 soleklart lovbrudd, og lurer på hva slags muligheter jeg vil ha hvis
 511 jeg blir nektet å handle med kontanter.  Jeg handler i hovedsak med
 512 kontanter selv, da jeg anser det som en borgerrett å kunne handle
 513 anonymt uten at det blir registrert.  For meg er det et angrep på mitt
 514 personvern å nekte å ta imot kontant betaling.</p>
 515
 516 <p><a href="http://www.lovdata.no/all/tl-19850524-028-003.html#14">Paragrafen
 517 i sentralbankloven</a> lyder:</p>
 518
 519 <blockquote>
 520 <p>§ 14. Tvungent betalingsmiddel</p>
 521
 522 <p>Bankens sedler og mynter er tvungent betalingsmiddel i Norge. Ingen
 523 er pliktig til i én betaling å ta imot mer enn femogtyve mynter av
 524 hver enhet.</p>
 525
 526 <p>Sterkt skadde sedler og mynter er ikke tvungent
 527 betalingsmiddel. Banken gir nærmere forskrifter om erstatning for
 528 bortkomne, brente eller skadde sedler og mynter.</p>
 529
 530 <p>Selv om en avtale inneholder klausul om betaling av en
 531 pengeforpliktelse i gullverdi, kan skyldneren frigjøre seg med tvungne
 532 betalingsmidler uten hensyn til denne klausul.</p>
 533 </blockquote>
 534
 535 <p>Det er med bakgrunn i denne lovet ikke tillatt å nekte å ta imot
 536 kontakt betaling.  Det er en lov jeg har sans for, og som jeg mener må
 537 håndheves strengt.</p>
 538 </div>
 539   <div class="tags">
 540
 541
 542
 543    Tags: <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern</a>.
 544
 545   </div>
 546  </div>
 547  <div class="padding"></div>
 548
 549  <div class="entry">
 550   <div class="title"><a href="http://people.skolelinux.org/pere/blog/Officeshots_taking_shape.html">Officeshots taking shape</a></div>
 551   <div class="date">2010-06-13 11:40</div>
 552   <div class="body">
 553 <p>For those of us caring about document exchange and
 554 interoperability, <a href="http://www.officeshots.org/">OfficeShots</a>
 555 is a great service.  It is to ODF documents what
 556 <a href="http://browsershots.org/">BrowserShots</a> is for web
 557 pages.</p>
 558
 559 <p>A while back, I was contacted by Knut Yrvin at the part of Nokia
 560 that used to be Trolltech, who wanted to help the OfficeShots project
 561 and wondered if the University of Oslo where I work would be
 562 interested in supporting the project.  I helped him to navigate his
 563 request to the right people at work, and his request was answered with
 564 a spot in the machine room with power and network connected, and Knut
 565 arranged funding for a machine to fill the spot.  The machine is
 566 administrated by the OfficeShots people, so I do not have daily
 567 contact with its progress, and thus from time to time check back to
 568 see how the project is doing.</p>
 569
 570 <p>Today I had a look, and was happy to see that the Dell box in our
 571 machine room now is the host for several virtual machines running as
 572 OfficeShots factories, and the project is able to render ODF documents
 573 in 17 different document processing implementation on Linux and
 574 Windows.  This is great.</p>
 575 </div>
 576   <div class="tags">
 577
 578
 579
 580    Tags: <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/standard">standard</a>.
 581
 582   </div>
 583  </div>
 584  <div class="padding"></div>
 585
 586  <div class="entry">
 587   <div class="title"><a href="http://people.skolelinux.org/pere/blog/Lenny__Squeeze_upgrades__removals_by_apt_and_aptitude.html">Lenny->Squeeze upgrades, removals by apt and aptitude</a></div>
 588   <div class="date">2010-06-13 09:05</div>
 589   <div class="body">
 590 <p>My
 591 <a href="http://people.skolelinux.org/pere/blog/Automatic_upgrade_testing_from_Lenny_to_Squeeze.html">testing
 592 of Debian upgrades</a> from Lenny to Squeeze continues, and I've
 593 finally made the upgrade logs available from
 594 <a href="http://people.skolelinux.org/pere/debian-upgrade-testing/">http://people.skolelinux.org/pere/debian-upgrade-testing/</a>.
 595 I am now testing dist-upgrade of Gnome and KDE in a chroot using both
 596 apt and aptitude, and found their differences interesting.  This time
 597 I will only focus on their removal plans.</p>
 598
 599 <p>After installing a Gnome desktop and the laptop task, apt-get wants
 600 to remove 72 packages when dist-upgrading from Lenny to Squeeze.  The
 601 surprising part is that it want to remove xorg and all
 602 xserver-xorg-video* drivers.  Clearly not a good choice, but I am not
 603 sure why.  When asking aptitude to do the same, it want to remove 129
 604 packages, but most of them are library packages I suspect are no
 605 longer needed.  Both of them want to remove bluetooth packages, which
 606 I do not know.  Perhaps these bluetooth packages are obsolete?</p>
 607
 608 <p>For KDE, apt-get want to remove 82 packages, among them kdebase
 609 which seem like a bad idea and xorg the same way as with Gnome. Asking
 610 aptitude for the same, it wants to remove 192 packages, none which are
 611 too surprising.</p>
 612
 613 <p>I guess the removal of xorg during upgrades should be investigated
 614 and avoided, and perhaps others as well.  Here are the complete list
 615 of planned removals.  The complete logs is available from the URL
 616 above.  Note if you want to repeat these tests, that the upgrade test
 617 for kde+apt-get hung in the tasksel setup because of dpkg asking
 618 conffile questions.  No idea why.  I worked around it by using
 619 '<tt>echo >> /proc/<em>pidofdpkg</em>/fd/0</tt>' to tell dpkg to
 620 continue.</p>
 621
 622 <p><b>apt-get gnome 72</b>
 623 <br>bluez-gnome cupsddk-drivers deskbar-applet gnome
 624   gnome-desktop-environment gnome-network-admin gtkhtml3.14
 625   iceweasel-gnome-support libavcodec51 libdatrie0 libgdl-1-0
 626   libgnomekbd2 libgnomekbdui2 libmetacity0 libslab0 libxcb-xlib0
 627   nautilus-cd-burner python-gnome2-desktop python-gnome2-extras
 628   serpentine swfdec-mozilla update-manager xorg xserver-xorg
 629   xserver-xorg-core xserver-xorg-input-all xserver-xorg-input-evdev
 630   xserver-xorg-input-kbd xserver-xorg-input-mouse
 631   xserver-xorg-input-synaptics xserver-xorg-input-wacom
 632   xserver-xorg-video-all xserver-xorg-video-apm xserver-xorg-video-ark
 633   xserver-xorg-video-ati xserver-xorg-video-chips
 634   xserver-xorg-video-cirrus xserver-xorg-video-cyrix
 635   xserver-xorg-video-dummy xserver-xorg-video-fbdev
 636   xserver-xorg-video-glint xserver-xorg-video-i128
 637   xserver-xorg-video-i740 xserver-xorg-video-imstt
 638   xserver-xorg-video-intel xserver-xorg-video-mach64
 639   xserver-xorg-video-mga xserver-xorg-video-neomagic
 640   xserver-xorg-video-nsc xserver-xorg-video-nv
 641   xserver-xorg-video-openchrome xserver-xorg-video-r128
 642   xserver-xorg-video-radeon xserver-xorg-video-radeonhd
 643   xserver-xorg-video-rendition xserver-xorg-video-s3
 644   xserver-xorg-video-s3virge xserver-xorg-video-savage
 645   xserver-xorg-video-siliconmotion xserver-xorg-video-sis
 646   xserver-xorg-video-sisusb xserver-xorg-video-tdfx
 647   xserver-xorg-video-tga xserver-xorg-video-trident
 648   xserver-xorg-video-tseng xserver-xorg-video-v4l
 649   xserver-xorg-video-vesa xserver-xorg-video-vga
 650   xserver-xorg-video-vmware xserver-xorg-video-voodoo xulrunner-1.9
 651   xulrunner-1.9-gnome-support</p>
 652
 653 <p><b>aptitude gnome 129</b>
 654
 655 <br>bluez-gnome bluez-utils cpp-4.3 cupsddk-drivers dhcdbd
 656   djvulibre-desktop finger gnome-app-install gnome-mount
 657   gnome-network-admin gnome-spell gnome-vfs-obexftp
 658   gnome-volume-manager gstreamer0.10-gnomevfs gtkhtml3.14 libao2
 659   libavahi-compat-libdnssd1 libavahi-core5 libavcodec51 libbluetooth2
 660   libcamel1.2-11 libcdio7 libcucul0 libcupsys2 libcurl3 libdatrie0
 661   libdirectfb-1.0-0 libdvdread3 libedataserver1.2-9 libeel2-2.20
 662   libeel2-data libepc-1.0-1 libepc-ui-1.0-1 libfaad0 libgail-common
 663   libgd2-noxpm libgda3-3 libgda3-common libgdl-1-0 libgdl-1-common
 664   libggz2 libggzcore9 libggzmod4 libgksu1.2-0 libgksuui1.0-1 libgmyth0
 665   libgnomecups1.0-1 libgnomekbd2 libgnomekbdui2 libgnomeprint2.2-0
 666   libgnomeprint2.2-data libgnomeprintui2.2-0 libgnomeprintui2.2-common
 667   libgnomevfs2-bin libgpod3 libgraphviz4 libgtkhtml2-0
 668   libgtksourceview-common libgtksourceview1.0-0 libgucharmap6
 669   libhesiod0 libicu38 libiw29 libkpathsea4 libltdl3 libmagick++10
 670   libmagick10 libmalaga7 libmetacity0 libmtp7 libmysqlclient15off
 671   libnautilus-burn4 libneon27 libnm-glib0 libnm-util0 libopal-2.2
 672   libosp5 libparted1.8-10 libpoppler-glib3 libpoppler3 libpt-1.10.10
 673   libpt-1.10.10-plugins-alsa libpt-1.10.10-plugins-v4l libraw1394-8
 674   libsensors3 libslab0 libsmbios2 libsoup2.2-8 libssh2-1
 675   libsuitesparse-3.1.0 libswfdec-0.6-90 libtalloc1 libtotem-plparser10
 676   libtrackerclient0 libxalan2-java libxalan2-java-gcj libxcb-xlib0
 677   libxerces2-java libxerces2-java-gcj libxklavier12 libxtrap6
 678   libxxf86misc1 libzephyr3 mysql-common nautilus-cd-burner
 679   openoffice.org-writer2latex openssl-blacklist p7zip
 680   python-4suite-xml python-eggtrayicon python-gnome2-desktop
 681   python-gnome2-extras python-gtkhtml2 python-gtkmozembed
 682   python-numeric python-sexy serpentine svgalibg1 swfdec-gnome
 683   swfdec-mozilla totem-gstreamer update-manager wodim
 684   xserver-xorg-video-cyrix xserver-xorg-video-imstt
 685   xserver-xorg-video-nsc xserver-xorg-video-v4l xserver-xorg-video-vga
 686   zip</p>
 687
 688 <p><b>apt-get kde 82</b>
 689
 690 <br>cupsddk-drivers karm kaudiocreator kcoloredit kcontrol kde kde-core
 691   kdeaddons kdeartwork kdebase kdebase-bin kdebase-bin-kde3
 692   kdebase-kio-plugins kdesktop kdeutils khelpcenter kicker
 693   kicker-applets knewsticker kolourpaint konq-plugins konqueror korn
 694   kpersonalizer kscreensaver ksplash libavcodec51 libdatrie0 libkiten1
 695   libxcb-xlib0 quanta superkaramba texlive-base-bin xorg xserver-xorg
 696   xserver-xorg-core xserver-xorg-input-all xserver-xorg-input-evdev
 697   xserver-xorg-input-kbd xserver-xorg-input-mouse
 698   xserver-xorg-input-synaptics xserver-xorg-input-wacom
 699   xserver-xorg-video-all xserver-xorg-video-apm xserver-xorg-video-ark
 700   xserver-xorg-video-ati xserver-xorg-video-chips
 701   xserver-xorg-video-cirrus xserver-xorg-video-cyrix
 702   xserver-xorg-video-dummy xserver-xorg-video-fbdev
 703   xserver-xorg-video-glint xserver-xorg-video-i128
 704   xserver-xorg-video-i740 xserver-xorg-video-imstt
 705   xserver-xorg-video-intel xserver-xorg-video-mach64
 706   xserver-xorg-video-mga xserver-xorg-video-neomagic
 707   xserver-xorg-video-nsc xserver-xorg-video-nv
 708   xserver-xorg-video-openchrome xserver-xorg-video-r128
 709   xserver-xorg-video-radeon xserver-xorg-video-radeonhd
 710   xserver-xorg-video-rendition xserver-xorg-video-s3
 711   xserver-xorg-video-s3virge xserver-xorg-video-savage
 712   xserver-xorg-video-siliconmotion xserver-xorg-video-sis
 713   xserver-xorg-video-sisusb xserver-xorg-video-tdfx
 714   xserver-xorg-video-tga xserver-xorg-video-trident
 715   xserver-xorg-video-tseng xserver-xorg-video-v4l
 716   xserver-xorg-video-vesa xserver-xorg-video-vga
 717   xserver-xorg-video-vmware xserver-xorg-video-voodoo xulrunner-1.9</p>
 718
 719 <p><b>aptitude kde 192</b>
 720 <br>bluez-utils cpp-4.3 cupsddk-drivers cvs dcoprss dhcdbd
 721   djvulibre-desktop dosfstools eyesapplet fifteenapplet finger gettext
 722   ghostscript-x imlib-base imlib11 indi kandy karm kasteroids
 723   kaudiocreator kbackgammon kbstate kcoloredit kcontrol kcron kdat
 724   kdeadmin-kfile-plugins kdeartwork-misc kdeartwork-theme-window
 725   kdebase-bin-kde3 kdebase-kio-plugins kdeedu-data
 726   kdegraphics-kfile-plugins kdelirc kdemultimedia-kappfinder-data
 727   kdemultimedia-kfile-plugins kdenetwork-kfile-plugins
 728   kdepim-kfile-plugins kdepim-kio-plugins kdeprint kdesktop kdessh
 729   kdict kdnssd kdvi kedit keduca kenolaba kfax kfaxview kfouleggs
 730   kghostview khelpcenter khexedit kiconedit kitchensync klatin
 731   klickety kmailcvt kmenuedit kmid kmilo kmoon kmrml kodo kolourpaint
 732   kooka korn kpager kpdf kpercentage kpf kpilot kpoker kpovmodeler
 733   krec kregexpeditor ksayit ksim ksirc ksirtet ksmiletris ksmserver
 734   ksnake ksokoban ksplash ksvg ksysv ktip ktnef kuickshow kverbos
 735   kview kviewshell kvoctrain kwifimanager kwin kwin4 kworldclock
 736   kxsldbg libakode2 libao2 libarts1-akode libarts1-audiofile
 737   libarts1-mpeglib libarts1-xine libavahi-compat-libdnssd1
 738   libavahi-core5 libavc1394-0 libavcodec51 libbluetooth2
 739   libboost-python1.34.1 libcucul0 libcurl3 libcvsservice0 libdatrie0
 740   libdirectfb-1.0-0 libdjvulibre21 libdvdread3 libfaad0 libfreebob0
 741   libgail-common libgd2-noxpm libgraphviz4 libgsmme1c2a libgtkhtml2-0
 742   libicu38 libiec61883-0 libindex0 libiw29 libk3b3 libkcal2b libkcddb1
 743   libkdeedu3 libkdepim1a libkgantt0 libkiten1 libkleopatra1 libkmime2
 744   libkpathsea4 libkpimexchange1 libkpimidentities1 libkscan1
 745   libksieve0 libktnef1 liblockdev1 libltdl3 libmagick10 libmimelib1c2a
 746   libmozjs1d libmpcdec3 libneon27 libnm-util0 libopensync0 libpisock9
 747   libpoppler-glib3 libpoppler-qt2 libpoppler3 libraw1394-8 libsmbios2
 748   libssh2-1 libsuitesparse-3.1.0 libtalloc1 libtiff-tools
 749   libxalan2-java libxalan2-java-gcj libxcb-xlib0 libxerces2-java
 750   libxerces2-java-gcj libxtrap6 mpeglib networkstatus
 751   openoffice.org-writer2latex pmount poster psutils quanta quanta-data
 752   superkaramba svgalibg1 tex-common texlive-base texlive-base-bin
 753   texlive-common texlive-doc-base texlive-fonts-recommended
 754   xserver-xorg-video-cyrix xserver-xorg-video-imstt
 755   xserver-xorg-video-nsc xserver-xorg-video-v4l xserver-xorg-video-vga
 756   xulrunner-1.9</p>
 757
 758 </div>
 759   <div class="tags">
 760
 761
 762
 763    Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
 764
 765   </div>
 766  </div>
 767  <div class="padding"></div>
 768
 769  <div class="entry">
 770   <div class="title"><a href="http://people.skolelinux.org/pere/blog/__pne_tr__dl__snett_er_et_samfunnsgode.html">Åpne trådløsnett er et samfunnsgode</a></div>
 771   <div class="date">2010-06-12 12:45</div>
 772   <div class="body">
 773 <p>Veldig glad for å oppdage via
 774 <a href="http://yro.slashdot.org/story/10/06/11/1841256/Finland-To-Legalize-Use-of-Unsecured-Wi-Fi">Slashdot</a>
 775 at folk i Finland har forstått at åpne trådløsnett er et samfunnsgode.
 776 Jeg ser på åpne trådløsnett som et fellesgode på linje med retten til
 777 ferdsel i utmark og retten til å bevege seg i strandsonen.  Jeg har
 778 glede av åpne trådløsnett når jeg finner dem, og deler gladelig nett
 779 med andre så lenge de ikke forstyrrer min bruk av eget nett.
 780 Nettkapasiteten er sjelden en begrensning ved normal browsing og enkel
 781 SSH-innlogging (som er min vanligste nettbruk), og nett kan brukes til
 782 så mye positivt og nyttig (som nyhetslesing, sjekke været, kontakte
 783 slekt og venner, holde seg oppdatert om politiske saker, kontakte
 784 organisasjoner og politikere, etc), at det for meg er helt urimelig å
 785 blokkere dette for alle som ikke gjør en flue fortred.  De som mener
 786 at potensialet for misbruk er grunn nok til å hindre all den positive
 787 og lovlydige bruken av et åpent trådløsnett har jeg dermed ingen
 788 forståelse for.  En kan ikke eksistensen av forbrytere styre hvordan
 789 samfunnet skal organiseres.  Da får en et kontrollsamfunn de færreste
 790 ønsker å leve i, og det at vi har et samfunn i Norge der tilliten til
 791 hverandre er høy gjør at samfunnet fungerer ganske godt.  Det bør vi
 792 anstrenge oss for å beholde.</p>
 793 </div>
 794   <div class="tags">
 795
 796
 797
 798    Tags: <a href="http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>, <a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett</a>, <a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet</a>.
 799
 800   </div>
 801  </div>
 802  <div class="padding"></div>
 803
 804  <div class="entry">
 805   <div class="title"><a href="http://people.skolelinux.org/pere/blog/Automatic_upgrade_testing_from_Lenny_to_Squeeze.html">Automatic upgrade testing from Lenny to Squeeze</a></div>
 806   <div class="date">2010-06-11 22:50</div>
 807   <div class="body">
 808 <p>The last few days I have done some upgrade testing in Debian, to
 809 see if the upgrade from Lenny to Squeeze will go smoothly.  A few bugs
 810 have been discovered and reported in the process
 811 (<a href="http://bugs.debian.org/585410">#585410</a> in nagios3-cgi,
 812 <a href="http://bugs.debian.org/584879">#584879</a> already fixed in
 813 enscript and <a href="http://bugs.debian.org/584861">#584861</a> in
 814 kdebase-workspace-data), and to get a more regular testing going on, I
 815 am working on a script to automate the test.</p>
 816
 817 <p>The idea is to create a Lenny chroot and use tasksel to install a
 818 Gnome or KDE desktop installation inside the chroot before upgrading
 819 it.  To ensure no services are started in the chroot, a policy-rc.d
 820 script is inserted.  To make sure tasksel believe it is to install a
 821 desktop on a laptop, the tasksel tests are replaced in the chroot
 822 (only acceptable because this is a throw-away chroot).</p>
 823
 824 <p>A naive upgrade from Lenny to Squeeze using aptitude dist-upgrade
 825 currently always fail because udev refuses to upgrade with the kernel
 826 in Lenny, so to avoid that problem the file /etc/udev/kernel-upgrade
 827 is created.  The bug report
 828 <a href="http://bugs.debian.org/566000">#566000</a> make me suspect
 829 this problem do not trigger in a chroot, but I touch the file anyway
 830 to make sure the upgrade go well.  Testing on virtual and real
 831 hardware have failed me because of udev so far, and creating this file
 832 do the trick in such settings anyway.  This is a
 833 <a href="http://www.linuxquestions.org/questions/debian-26/failed-dist-upgrade-due-to-udev-config_sysfs_deprecated-nonsense-804130/">known
 834 issue</a> and the current udev behaviour is intended by the udev
 835 maintainer because he lack the resources to rewrite udev to keep
 836 working with old kernels or something like that.  I really wish the
 837 udev upstream would keep udev backwards compatible, to avoid such
 838 upgrade problem, but given that they fail to do so, I guess
 839 documenting the way out of this mess is the best option we got for
 840 Debian Squeeze.</p>
 841
 842 <p>Anyway, back to the task at hand, testing upgrades.  This test
 843 script, which I call <tt>upgrade-test</tt> for now, is doing the
 844 trick:</p>
 845
 846 <blockquote><pre>
 847 #!/bin/sh
 848 set -ex
 849
 850 if [ "$1" ] ; then
 851     desktop=$1
 852 else
 853     desktop=gnome
 854 fi
 855
 856 from=lenny
 857 to=squeeze
 858
 859 exec &lt; /dev/null
 860 unset LANG
 861 mirror=http://ftp.skolelinux.org/debian
 862 tmpdir=chroot-$from-upgrade-$to-$desktop
 863 fuser -mv .
 864 debootstrap $from $tmpdir $mirror
 865 chroot $tmpdir aptitude update
 866 cat > $tmpdir/usr/sbin/policy-rc.d &lt;&lt;EOF
 867 #!/bin/sh
 868 exit 101
 869 EOF
 870 chmod a+rx $tmpdir/usr/sbin/policy-rc.d
 871 exit_cleanup() {
 872     umount $tmpdir/proc
 873 }
 874 mount -t proc proc $tmpdir/proc
 875 # Make sure proc is unmounted also on failure
 876 trap exit_cleanup EXIT INT
 877
 878 chroot $tmpdir aptitude -y install debconf-utils
 879
 880 # Make sure tasksel autoselection trigger.  It need the test scripts
 881 # to return the correct answers.
 882 echo tasksel tasksel/desktop multiselect $desktop | \
 883     chroot $tmpdir debconf-set-selections
 884
 885 # Include the desktop and laptop task
 886 for test in desktop laptop ; do
 887     echo > $tmpdir/usr/lib/tasksel/tests/$test &lt;&lt;EOF
 888 #!/bin/sh
 889 exit 2
 890 EOF
 891     chmod a+rx $tmpdir/usr/lib/tasksel/tests/$test
 892 done
 893
 894 DEBIAN_FRONTEND=noninteractive
 895 DEBIAN_PRIORITY=critical
 896 export DEBIAN_FRONTEND DEBIAN_PRIORITY
 897 chroot $tmpdir tasksel --new-install
 898
 899 echo deb $mirror $to main > $tmpdir/etc/apt/sources.list
 900 chroot $tmpdir aptitude update
 901 touch $tmpdir/etc/udev/kernel-upgrade
 902 chroot $tmpdir aptitude -y dist-upgrade
 903 fuser -mv
 904 </pre></blockquote>
 905
 906 <p>I suspect it would be useful to test upgrades with both apt-get and
 907 with aptitude, but I have not had time to look at how they behave
 908 differently so far.  I hope to get a cron job running to do the test
 909 regularly and post the result on the web.  The Gnome upgrade currently
 910 work, while the KDE upgrade fail because of the bug in
 911 kdebase-workspace-data</p>
 912
 913 <p>I am not quite sure what kind of extract from the huge upgrade logs
 914 (KDE 167 KiB, Gnome 516 KiB) it make sense to include in this blog
 915 post, so I will refrain from trying.  I can report that for Gnome,
 916 aptitude report 760 packages upgraded, 448 newly installed, 129 to
 917 remove and 1 not upgraded and 1024MB need to be downloaded while for
 918 KDE the same numbers are 702 packages upgraded, 507 newly installed,
 919 193 to remove and 0 not upgraded and 1117MB need to be downloaded</p>
 920
 921 <p>I am very happy to notice that the Gnome desktop + laptop upgrade
 922 is able to migrate to dependency based boot sequencing and parallel
 923 booting without a hitch.  Was unsure if there were still bugs with
 924 packages failing to clean up their obsolete init.d script during
 925 upgrades, and no such problem seem to affect the Gnome desktop+laptop
 926 packages.</p>
 927 </div>
 928   <div class="tags">
 929
 930
 931
 932    Tags: <a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
 933
 934   </div>
 935  </div>
 936  <div class="padding"></div>
 937
 938  <p style="text-align: right;"><a href="index.rss"><img src="http://people.skolelinux.org/pere/blog/xml.gif" alt="RSS feed" width="36" height="14"></a></p>
 939
 940 <div id="sidebar">
 941
 942
 943
 944
 945
 946 <h2>Archive</h2>
 947 <ul>
 948
 949 <li>2010
 950 <ul>
 951
 952 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/01/">January (2)</a></li>
 953
 954 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/02/">February (1)</a></li>
 955
 956 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/03/">March (3)</a></li>
 957
 958 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/04/">April (3)</a></li>
 959
 960 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/05/">May (9)</a></li>
 961
 962 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/06/">June (14)</a></li>
 963
 964 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/07/">July (2)</a></li>
 965
 966 </ul></li>
 967
 968 <li>2009
 969 <ul>
 970
 971 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/01/">January (8)</a></li>
 972
 973 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/02/">February (8)</a></li>
 974
 975 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/03/">March (12)</a></li>
 976
 977 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/04/">April (10)</a></li>
 978
 979 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/05/">May (9)</a></li>
 980
 981 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/06/">June (3)</a></li>
 982
 983 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/07/">July (4)</a></li>
 984
 985 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/08/">August (3)</a></li>
 986
 987 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/09/">September (1)</a></li>
 988
 989 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/10/">October (2)</a></li>
 990
 991 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/11/">November (3)</a></li>
 992
 993 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/12/">December (3)</a></li>
 994
 995 </ul></li>
 996
 997 <li>2008
 998 <ul>
 999
1000 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/11/">November (5)</a></li>
1001
1002 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/12/">December (7)</a></li>
1003
1004 </ul></li>
1005
1006 </ul>
1007
1008
1009
1010 <h2>Tags</h2>
1011 <ul>
1012
1013  <li><a href="http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer (11)</a></li>
1014
1015  <li><a href="http://people.skolelinux.org/pere/blog/tags/amiga">amiga (1)</a></li>
1016
1017  <li><a href="http://people.skolelinux.org/pere/blog/tags/aros">aros (1)</a></li>
1018
1019  <li><a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem (10)</a></li>
1020
1021  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian">debian (30)</a></li>
1022
1023  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (30)</a></li>
1024
1025  <li><a href="http://people.skolelinux.org/pere/blog/tags/english">english (43)</a></li>
1026
1027  <li><a href="http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (1)</a></li>
1028
1029  <li><a href="http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling (7)</a></li>
1030
1031  <li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
1032
1033  <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (4)</a></li>
1034
1035  <li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
1036
1037  <li><a href="http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp (1)</a></li>
1038
1039  <li><a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia (5)</a></li>
1040
1041  <li><a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk (69)</a></li>
1042
1043  <li><a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug (80)</a></li>
1044
1045  <li><a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett (13)</a></li>
1046
1047  <li><a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern (13)</a></li>
1048
1049  <li><a href="http://people.skolelinux.org/pere/blog/tags/reprap">reprap (10)</a></li>
1050
1051  <li><a href="http://people.skolelinux.org/pere/blog/tags/rss">rss (1)</a></li>
1052
1053  <li><a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (9)</a></li>
1054
1055  <li><a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (3)</a></li>
1056
1057  <li><a href="http://people.skolelinux.org/pere/blog/tags/standard">standard (13)</a></li>
1058
1059  <li><a href="http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll (1)</a></li>
1060
1061  <li><a href="http://people.skolelinux.org/pere/blog/tags/video">video (10)</a></li>
1062
1063  <li><a href="http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (1)</a></li>
1064
1065  <li><a href="http://people.skolelinux.org/pere/blog/tags/web">web (6)</a></li>
1066
1067 </ul>
1068
1069 </div>
1070
1071 <p style="text-align: right">
1072 Created by <a href="http://steve.org.uk/Software/chronicle">Chronicle v3.7</a>
1073 </p>
1074 </body>
1075 </html>