1 <!DOCTYPE html PUBLIC
"-//W3C//DTD XHTML 1.0 Strict//EN"
2 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
3 <html xmlns=
"http://www.w3.org/1999/xhtml" dir=
"ltr">
5 <meta http-equiv=
"Content-Type" content=
"text/html;charset=utf-8" />
6 <title>Petter Reinholdtsen: Entries Tagged debian
</title>
7 <link rel=
"stylesheet" type=
"text/css" media=
"screen" href=
"http://people.skolelinux.org/pere/blog/style.css" />
8 <link rel=
"stylesheet" type=
"text/css" media=
"screen" href=
"http://people.skolelinux.org/pere/blog/vim.css" />
9 <link rel=
"alternate" title=
"RSS Feed" href=
"debian.rss" type=
"application/rss+xml" />
14 <a href=
"http://people.skolelinux.org/pere/blog/">Petter Reinholdtsen
</a>
21 <h3>Entries tagged "debian".
</h3>
25 <a href=
"http://people.skolelinux.org/pere/blog/Git_repository_for_song_book_for_Computer_Scientists.html">Git repository for song book for Computer Scientists
</a>
32 <a href=
"http://people.skolelinux.org/pere/blog/Song_book_for_Computer_Scientists.html">mentioned
33 this summer
</a>, I have created a Computer Science song book a few
34 years ago, and today I finally found time to create a public
35 <a href=
"https://gitorious.org/pere-cs-songbook/pere-cs-songbook">Gitorious
36 repository for the project
</a>.
</p>
38 <p>If you want to help out, please clone the source and submit patches
39 to the HTML version. To generate the PDF and PostScript version,
40 please use prince XML, or let me know about a useful free software
41 processor capable of creating a good looking PDF from the HTML.
</p>
43 <p>Want to sing? You can still find the song book in HTML, PDF and
45 <a href=
"http://www.hungry.com/~pere/cs-songbook/">Petter's Computer
46 Science Songbook
</a>.
</p>
52 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia
</a>.
57 <div class=
"padding"></div>
61 <a href=
"http://people.skolelinux.org/pere/blog/Gratulerer_med_19__rsdagen__Debian_.html">Gratulerer med
19-årsdagen, Debian!
</a>
68 <a href=
"http://www.debian.org/News/2012/20120813">Debian-prosjektet
19
69 år
</a>. Jeg har fulgt det de siste
12 årene, og er veldig glad for å kunne
70 si gratulerer med dagen, Debian!
</p>
76 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/norsk">norsk
</a>.
81 <div class=
"padding"></div>
85 <a href=
"http://people.skolelinux.org/pere/blog/Song_book_for_Computer_Scientists.html">Song book for Computer Scientists
</a>
91 <p>Many years ago, while studying Computer Science at the
92 <a href=
"http://www.uit.no/">University of Tromsø
</a>, I started
93 collecting computer related songs for use at parties. The original
94 version was written in LaTeX, but a few years ago I got help from
95 Håkon W. Lie, one of the inventors of W3C CSS, to convert it to HTML
96 while keeping the ability to create a nice book in PDF format. I have
97 not had time to maintain the book for a while now, and guess I should
98 put it up on some public version control repository where others can
99 help me extend and update the book. If anyone is volunteering to help
100 me with this, send me an email. Also let me know if there are songs
101 missing in my book.
</p>
103 <p>I have not mentioned the book on my blog so far, and it occured to
104 me today that I really should let all my readers share the joys of
105 singing out load about programming, computers and computer networks.
106 Especially now that
<a href=
"http://debconf12.debconf.org/">Debconf
107 12</a> is about to start (and I am not going). Want to sing? Check
108 out
<a href=
"http://www.hungry.com/~pere/cs-songbook/">Petter's
109 Computer Science Songbook
</a>.
115 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia
</a>.
120 <div class=
"padding"></div>
124 <a href=
"http://people.skolelinux.org/pere/blog/Automatically_upgrading_server_firmware_on_Dell_PowerEdge.html">Automatically upgrading server firmware on Dell PowerEdge
</a>
130 <p>At work we have heaps of servers. I believe the total count is
131 around
1000 at the moment. To be able to get help from the vendors
132 when something go wrong, we want to keep the firmware on the servers
133 up to date. If the firmware isn't the latest and greatest, the
134 vendors typically refuse to start debugging any problems until the
135 firmware is upgraded. So before every reboot, we want to upgrade the
136 firmware, and we would really like everyone handling servers at the
137 university to do this themselves when they plan to reboot a machine.
138 For that to happen we at the unix server admin group need to provide
139 the tools to do so.
</p>
141 <p>To make firmware upgrading easier, I am working on a script to
142 fetch and install the latest firmware for the servers we got. Most of
143 our hardware are from Dell and HP, so I have focused on these servers
144 so far. This blog post is about the Dell part.
</P>
146 <p>On the Dell FTP site I was lucky enough to find
147 <a href=
"ftp://ftp.us.dell.com/catalog/Catalog.xml.gz">an XML file
</a>
148 with firmware information for all
11th generation servers, listing
149 which firmware should be used on a given model and where on the FTP
150 site I can find it. Using a simple perl XML parser I can then
151 download the shell scripts Dell provides to do firmware upgrades from
152 within Linux and reboot when all the firmware is primed and ready to
153 be activated on the first reboot.
</p>
155 <p>This is the Dell related fragment of the perl code I am working on.
156 Are there anyone working on similar tools for firmware upgrading all
157 servers at a site? Please get in touch and lets share resources.
</p>
163 use File::Temp qw(tempdir);
165 # Install needed RHEL packages if missing
167 'XML::Simple' =
> 'perl-XML-Simple',
169 for my $module (keys %rhelmodules) {
172 my $pkg = $rhelmodules{$module};
173 system("yum install -y $pkg");
178 my $errorsto = 'pere@hungry.com';
184 sub run_firmware_script {
185 my ($opts, $script) = @_;
187 print STDERR "fail: missing script name\n";
190 print STDERR "Running $script\n\n";
192 if (
0 == system("sh $script $opts")) { # FIXME correct exit code handling
193 print STDERR "success: firmware script ran succcessfully\n";
195 print STDERR "fail: firmware script returned error\n";
199 sub run_firmware_scripts {
200 my ($opts, @dirs) = @_;
201 # Run firmware packages
202 for my $dir (@dirs) {
203 print STDERR "info: Running scripts in $dir\n";
204 opendir(my $dh, $dir) or die "Unable to open directory $dir: $!";
205 while (my $s = readdir $dh) {
206 next if $s =~ m/^\.\.?/;
207 run_firmware_script($opts, "$dir/$s");
215 print STDERR "info: Downloading $url\n";
216 system("wget --quiet \"$url\"");
221 my $product = `dmidecode -s system-product-name`;
224 if ($product =~ m/PowerEdge/) {
226 # on RHEL, these pacakges are needed by the firwmare upgrade scripts
227 system('yum install -y compat-libstdc++-
33.i686 libstdc++.i686 libxml2.i686 procmail');
229 my $tmpdir = tempdir(
233 fetch_dell_fw('catalog/Catalog.xml.gz');
234 system('gunzip Catalog.xml.gz');
235 my @paths = fetch_dell_fw_list('Catalog.xml');
236 # -q is quiet, disabling interactivity and reducing console output
239 for my $url (@paths) {
242 run_firmware_scripts($fwopts, $tmpdir);
244 print STDERR
"error: Unsupported Dell model '$product'.\n";
245 print STDERR
"error: Please report to $errorsto.\n";
249 print STDERR
"error: Unsupported Dell model '$product'.\n";
250 print STDERR
"error: Please report to $errorsto.\n";
256 my $url =
"ftp://ftp.us.dell.com/$path";
260 # Using ftp://ftp.us.dell.com/catalog/Catalog.xml.gz, figure out which
261 # firmware packages to download from Dell. Only work for Linux
262 # machines and
11th generation Dell servers.
263 sub fetch_dell_fw_list {
264 my $filename = shift;
266 my $product = `dmidecode -s system-product-name`;
268 my ($mybrand, $mymodel) = split(/\s+/, $product);
270 print STDERR
"Finding firmware bundles for $mybrand $mymodel\n";
272 my $xml = XMLin($filename);
274 for my $bundle (@{$xml-
>{SoftwareBundle}}) {
275 my $brand = $bundle-
>{TargetSystems}-
>{Brand}-
>{Display}-
>{content};
276 my $model = $bundle-
>{TargetSystems}-
>{Brand}-
>{Model}-
>{Display}-
>{content};
278 if ("ARRAY" eq ref $bundle-
>{TargetOSes}-
>{OperatingSystem}) {
279 $oscode = $bundle-
>{TargetOSes}-
>{OperatingSystem}[
0]-
>{osCode};
281 $oscode = $bundle-
>{TargetOSes}-
>{OperatingSystem}-
>{osCode};
283 if ($mybrand eq $brand && $mymodel eq $model && "LIN" eq $oscode)
285 @paths = map { $_-
>{path} } @{$bundle-
>{Contents}-
>{Package}};
288 for my $component (@{$xml-
>{SoftwareComponent}}) {
289 my $componenttype = $component-
>{ComponentType}-
>{value};
291 # Drop application packages, only firmware and BIOS
292 next if 'APAC' eq $componenttype;
294 my $cpath = $component-
>{path};
295 for my $path (@paths) {
296 if ($cpath =~ m%/$path$%) {
297 push(@paths, $cpath);
305 <p>The code is only tested on RedHat Enterprise Linux, but I suspect
306 it could work on other platforms with some tweaking. Anyone know a
307 index like Catalog.xml is available from HP for HP servers? At the
308 moment I maintain a similar list manually and it is quickly getting
315 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
320 <div class=
"padding"></div>
324 <a href=
"http://people.skolelinux.org/pere/blog/How_is_booting_into_runlevel_1_different_from_single_user_boots_.html">How is booting into runlevel
1 different from single user boots?
</a>
330 <p>Wouter Verhelst have some
331 <a href=
"http://grep.be/blog/en/retorts/pere_kubuntu_boot">interesting
332 comments and opinions
</a> on my blog post on
333 <a href=
"http://people.skolelinux.org/pere/blog/What_should_start_from__etc_rcS_d__in_Debian____almost_nothing.html">the
334 need to clean up /etc/rcS.d/ in Debian
</a> and my blog post about
335 <a href=
"http://people.skolelinux.org/pere/blog/What_is_missing_in_the_Debian_desktop__or_why_my_parents_use_Kubuntu.html">the
336 default KDE desktop in Debian
</a>. I only have time to address one
337 small piece of his comment now, and though it best to address the
338 misunderstanding he bring forward:
</p>
341 Currently, a system admin has four options: [...] boot to a
342 single-user system (by adding 'single' to the kernel command line;
343 this runs rcS and rc1 scripts)
346 <p>This make me believe Wouter believe booting into single user mode
347 and booting into runlevel
1 is the same. I am not surprised he
348 believe this, because it would make sense and is a quite sensible
349 thing to believe. But because the boot in Debian is slightly broken,
350 runlevel
1 do not work properly and it isn't the same as single user
351 mode. I'll try to explain what is actually happing, but it is a bit
354 <p>Single user mode is defined like this in /etc/inittab:
355 "
<tt>~~:S:wait:/sbin/sulogin
</tt>". This means the only thing that is
356 executed in single user mode is sulogin. Single user mode is a boot
357 state "between
" the runlevels, and when booting into single user mode,
358 only the scripts in /etc/rcS.d/ are executed before the init process
359 enters the single user state. When switching to runlevel 1, the state
360 is in fact not ending in runlevel 1, but it passes through runlevel 1
361 and end up in the single user mode (see /etc/rc1.d/S03single, which
362 runs "init -t1 S
" to switch to single user mode at the end of runlevel
363 1. It is confusing that the 'S' (single user) init mode is not the
364 mode enabled by /etc/rcS.d/ (which is more like the initial boot
367 <p>This summary might make it clearer. When booting for the first
368 time into single user mode, the following commands are executed:
369 "<tt>/etc/init.d/rc S; /sbin/sulogin
</tt>". When booting into
370 runlevel 1, the following commands are executed: "<tt>/etc/init.d/rc
371 S; /etc/init.d/rc
1; /sbin/sulogin
</tt>". A problem show up when
372 trying to continue after visiting single user mode. Not all services
373 are started again as they should, causing the machine to end up in an
374 unpredicatble state. This is why Debian admins recommend rebooting
375 after visiting single user mode.</p>
377 <p>A similar problem with runlevel 1 is caused by the amount of
378 scripts executed from /etc/rcS.d/. When switching from say runlevel 2
379 to runlevel 1, the services started from /etc/rcS.d/ are not properly
380 stopped when passing through the scripts in /etc/rc1.d/, and not
381 started again when switching away from runlevel 1 to the runlevels
382 2-5. I believe the problem is best fixed by moving all the scripts
383 out of /etc/rcS.d/ that are not <strong>required</strong> to get a
384 functioning single user mode during boot.</p>
386 <p>I have spent several years investigating the Debian boot system,
387 and discovered this problem a few years ago. I suspect it originates
388 from when sysvinit was introduced into Debian, a long time ago.</p>
394 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/bootsystem
">bootsystem</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian
">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>.
399 <div class="padding
"></div>
403 <a href="http://people.skolelinux.org/pere/blog/What_should_start_from__etc_rcS_d__in_Debian____almost_nothing.html
">What should start from /etc/rcS.d/ in Debian? - almost nothing</a>
409 <p>In the Debian boot system, several packages include scripts that
410 are started from /etc/rcS.d/. In fact, there is a bite more of them
411 than make sense, and this causes a few problems. What kind of
412 problems, you might ask. There are at least two problems. The first
413 is that it is not possible to recover a machine after switching to
414 runlevel 1. One need to actually reboot to get the machine back to
415 the expected state. The other is that single user boot will sometimes
416 run into problems because some of the subsystems are activated before
417 the root login is presented, causing problems when trying to recover a
418 machine from a problem in that subsystem. A minor additional point is
419 that moving more scripts out of rcS.d/ and into the other rc#.d/
420 directories will increase the amount of scripts that can run in
421 parallel during boot, and thus decrease the boot time.</p>
423 <p>So, which scripts should start from rcS.d/. In short, only the
424 scripts that _have_ to execute before the root login prompt is
425 presented during a single user boot should go there. Everything else
426 should go into the numeric runlevels. This means things like
427 lm-sensors, fuse and x11-common should not run from rcS.d, but from
428 the numeric runlevels. Today in Debian, there are around 115 init.d
429 scripts that are started from rcS.d/, and most of them should be moved
430 out. Do your package have one of them? Please help us make single
431 user and runlevel 1 better by moving it.</p>
433 <p>Scripts setting up the screen, keyboard, system partitions
434 etc. should still be started from rcS.d/, but there is for example no
435 need to have the network enabled before the single user login prompt
438 <p>As always, things are not so easy to fix as they sound. To keep
439 Debian systems working while scripts migrate and during upgrades, the
440 scripts need to be moved from rcS.d/ to rc2.d/ in reverse dependency
441 order, ie the scripts that nothing in rcS.d/ depend on can be moved,
442 and the next ones can only be moved when their dependencies have been
443 moved first. This migration must be done sequentially while we ensure
444 that the package system upgrade packages in the right order to keep
445 the system state correct. This will require some coordination when it
446 comes to network related packages, but most of the packages with
447 scripts that should migrate do not have anything in rcS.d/ depending
448 on them. Some packages have already been updated, like the sudo
449 package, while others are still left to do. I wish I had time to work
450 on this myself, but real live constrains make it unlikely that I will
451 find time to push this forward.</p>
457 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/bootsystem
">bootsystem</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian
">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>.
462 <div class="padding
"></div>
466 <a href="http://people.skolelinux.org/pere/blog/What_is_missing_in_the_Debian_desktop__or_why_my_parents_use_Kubuntu.html
">What is missing in the Debian desktop, or why my parents use Kubuntu</a>
472 <p>While at Debconf11, I have several times during discussions
473 mentioned the issues I believe should be improved in Debian for its
474 desktop to be useful for more people. The use case for this is my
475 parents, which are currently running Kubuntu which solve the
478 <p>I suspect these four missing features are not very hard to
479 implement. After all, they are present in Ubuntu, so if we wanted to
480 do this in Debian we would have a source.</p>
484 <li><strong>Simple GUI based upgrade of packages.</strong> When there
485 are new packages available for upgrades, a icon in the KDE status bar
486 indicate this, and clicking on it will activate the simple upgrade
487 tool to handle it. I have no problem guiding both of my parents
488 through the process over the phone. If a kernel reboot is required,
489 this too is indicated by the status bars and the upgrade tool. Last
490 time I checked, nothing with the same features was working in KDE in
493 <li><strong>Simple handling of missing Firefox browser
494 plugins.</strong> When the browser encounter a MIME type it do not
495 currently have a handler for, it will ask the user if the system
496 should search for a package that would add support for this MIME type,
497 and if the user say yes, the APT sources will be searched for packages
498 advertising the MIME type in their control file (visible in the
499 Packages file in the APT archive). If one or more packages are found,
500 it is a simple click of the mouse to add support for the missing mime
501 type. If the package require the user to accept some non-free
502 license, this is explained to the user. The entire process make it
503 more clear to the user why something do not work in the browser, and
504 make the chances higher for the user to blame the web page authors and
505 not the browser for any missing features.</li>
507 <li><strong>Simple handling of missing multimedia codec/format
508 handlers.</strong> When the media players encounter a format or codec
509 it is not supporting, a dialog pop up asking the user if the system
510 should search for a package that would add support for it. This
511 happen with things like MP3, Windows Media or H.264. The selection
512 and installation procedure is very similar to the Firefox browser
513 plugin handling. This is as far as I know implemented using a
514 gstreamer hook. The end result is that the user easily get access to
515 the codecs that are present from the APT archives available, while
516 explaining more on why a given format is unsupported by Ubuntu.</li>
518 <li><strong>Better browser handling of some MIME types.</strong> When
519 displaying a text/plain file in my Debian browser, it will propose to
520 start emacs to show it. If I remember correctly, when doing the same
521 in Kunbutu it show the file as a text file in the browser. At least I
522 know Opera will show text files within the browser. I much prefer the
523 latter behaviour.</li>
527 <p>There are other nice features as well, like the simplified suite
528 upgrader, but given that I am the one mostly doing the dist-upgrade,
529 it do not matter much.</p>
531 <p>I really hope we could get these features in place for the next
532 Debian release. It would require the coordinated effort of several
533 maintainers, but would make the end user experience a lot better.</p>
539 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian
">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/multimedia
">multimedia</a>, <a href="http://people.skolelinux.org/pere/blog/tags/web
">web</a>.
544 <div class="padding
"></div>
548 <a href="http://people.skolelinux.org/pere/blog/Perl_modules_used_by_FixMyStreet_which_are_missing_in_Debian_Squeeze.html
">Perl modules used by FixMyStreet which are missing in Debian/Squeeze</a>
554 <p>The Norwegian <a href="http://www.fiksgatami.no/
">FiksGataMi</A>
555 site is build on Debian/Squeeze, and this platform was chosen because
556 I am most familiar with Debian (being a Debian Developer for around 10
557 years) because it is the latest stable Debian release which should get
558 security support for a few years.</p>
560 <p>The web service is written in Perl, and depend on some perl modules
561 that are missing in Debian at the moment. It would be great if these
562 modules were added to the Debian archive, allowing anyone to set up
563 their own <a href="http://www.fixmystreet.com
">FixMyStreet</a> clone
564 in their own country using only Debian packages. The list of modules
565 missing in Debian/Squeeze isn't very long, and I hope the perl group
566 will find time to package the 12 modules Catalyst::Plugin::SmartURI,
567 Catalyst::Plugin::Unicode::Encoding, Catalyst::View::TT, Devel::Hide,
568 Sort::Key, Statistics::Distributions, Template::Plugin::Comma,
569 Template::Plugin::DateTime::Format, Term::Size::Any, Term::Size::Perl,
570 URI::SmartURI and Web::Scraper to make the maintenance of FixMyStreet
571 easier in the future.</p>
573 <p>Thanks to the great tools in Debian, getting the missing modules
574 installed on my server was a simple call to 'cpan2deb Module::Name'
575 and 'dpkg -i' to install the resulting package. But this leave me
576 with the responsibility of tracking security problems, which I really
577 do not have time for.</p>
583 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian
">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/fiksgatami
">fiksgatami</a>.
588 <div class="padding
"></div>
592 <a href="http://people.skolelinux.org/pere/blog/A_Norwegian_FixMyStreet_have_kept_me_busy_the_last_few_weeks.html
">A Norwegian FixMyStreet have kept me busy the last few weeks</a>
598 <p>Here is a small update for my English readers. Most of my blog
599 posts have been in Norwegian the last few weeks, so here is a short
600 update in English.</p>
602 <p>The kids still keep me too busy to get much free software work
603 done, but I did manage to organise a project to get a Norwegian port
604 of the British service
605 <a href="http://www.fixmystreet.com/
">FixMyStreet</a> up and running,
606 and it has been running for a month now. The entire project has been
607 organised by me and two others. Around Christmas we gathered sponsors
608 to fund the development work. In January I drafted a contract with
609 <a href="http://www.mysociety.org/
">mySociety</a> on what to develop,
610 and in February the development took place. Most of it involved
611 converting the source to use GPS coordinates instead of British
612 easting/northing, and the resulting code should be a lot easier to get
613 running in any country by now. The Norwegian
614 <a href="http://www.fiksgatami.no/
">FiksGataMi</a> is using
615 <a href="http://www.openstreetmap.org/
">OpenStreetmap</a> as the map
616 source and the source for administrative borders in Norway, and
617 support for this had to be added/fixed.</p>
619 <p>The Norwegian version went live March 3th, and we spent the weekend
620 polishing the system before we announced it March 7th. The system is
621 running on a KVM instance of Debian/Squeeze, and has seen almost 3000
622 problem reports in a few weeks. Soon we hope to announce the Android
623 and iPhone versions making it even easier to report problems with the
624 public infrastructure.</p>
626 <p>Perhaps something to consider for those of you in countries without
633 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian
">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/fiksgatami
">fiksgatami</a>, <a href="http://people.skolelinux.org/pere/blog/tags/kart
">kart</a>.
638 <div class="padding
"></div>
642 <a href="http://people.skolelinux.org/pere/blog/Using_NVD_and_CPE_to_track_CVEs_in_locally_maintained_software.html
">Using NVD and CPE to track CVEs in locally maintained software</a>
648 <p>The last few days I have looked at ways to track open security
649 issues here at my work with the University of Oslo. My idea is that
650 it should be possible to use the information about security issues
651 available on the Internet, and check our locally
652 maintained/distributed software against this information. It should
653 allow us to verify that no known security issues are forgotten. The
654 CVE database listing vulnerabilities seem like a great central point,
655 and by using the package lists from Debian mapped to CVEs provided by
656 the testing security team, I believed it should be possible to figure
657 out which security holes were present in our free software
660 <p>After reading up on the topic, it became obvious that the first
661 building block is to be able to name software packages in a unique and
662 consistent way across data sources. I considered several ways to do
663 this, for example coming up with my own naming scheme like using URLs
664 to project home pages or URLs to the Freshmeat entries, or using some
665 existing naming scheme. And it seem like I am not the first one to
666 come across this problem, as MITRE already proposed and implemented a
667 solution. Enter the <a href="http://cpe.mitre.org/index.html
">Common
668 Platform Enumeration</a> dictionary, a vocabulary for referring to
669 software, hardware and other platform components. The CPE ids are
670 mapped to CVEs in the <a href="http://web.nvd.nist.gov/
">National
671 Vulnerability Database</a>, allowing me to look up know security
672 issues for any CPE name. With this in place, all I need to do is to
673 locate the CPE id for the software packages we use at the university.
674 This is fairly trivial (I google for 'cve cpe $package' and check the
675 NVD entry if a CVE for the package exist).</p>
677 <p>To give you an example. The GNU gzip source package have the CPE
678 name cpe:/a:gnu:gzip. If the old version 1.3.3 was the package to
679 check out, one could look up
680 <a href="http://web.nvd.nist.gov/view/vuln/search?cpe=cpe%
3A%
2Fa%
3Agnu%
3Agzip:
1.3.3">cpe:/a:gnu:gzip:1.3.3
681 in NVD</a> and get a list of 6 security holes with public CVE entries.
682 The most recent one is
683 <a href="http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-
2010-
0001">CVE-2010-0001</a>,
684 and at the bottom of the NVD page for this vulnerability the complete
685 list of affected versions is provided.</p>
687 <p>The NVD database of CVEs is also available as a XML dump, allowing
688 for offline processing of issues. Using this dump, I've written a
689 small script taking a list of CPEs as input and list all CVEs
690 affecting the packages represented by these CPEs. One give it CPEs
691 with version numbers as specified above and get a list of open
692 security issues out.</p>
694 <p>Of course for this approach to be useful, the quality of the NVD
695 information need to be high. For that to happen, I believe as many as
696 possible need to use and contribute to the NVD database. I notice
698 <a href="https://www.redhat.com/security/data/metrics/rhsamapcpe.txt
">a
699 map from CVE to CPE</a>, indicating that they are using the CPE
700 information. I'm not aware of Debian and Ubuntu doing the same.</p>
702 <p>To get an idea about the quality for free software, I spent some
703 time making it possible to compare the CVE database from Debian with
704 the CVE database in NVD. The result look fairly good, but there are
705 some inconsistencies in NVD (same software package having several
706 CPEs), and some inaccuracies (NVD not mentioning buggy packages that
707 Debian believe are affected by a CVE). Hope to find time to improve
708 the quality of NVD, but that require being able to get in touch with
709 someone maintaining it. So far my three emails with questions and
710 corrections have not seen any reply, but I hope contact can be
711 established soon.</p>
713 <p>An interesting application for CPEs is cross platform package
714 mapping. It would be useful to know which packages in for example
715 RHEL, OpenSuSe and Mandriva are missing from Debian and Ubuntu, and
716 this would be trivial if all linux distributions provided CPE entries
717 for their packages.</p>
723 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian
">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet
">sikkerhet</a>.
728 <div class="padding
"></div>
732 <a href="http://people.skolelinux.org/pere/blog/Which_module_is_loaded_for_a_given_PCI_and_USB_device_.html
">Which module is loaded for a given PCI and USB device?</a>
739 <a href="http://packages.qa.debian.org/discover-data
">discover-data</a>
740 package in Debian, there is a script to report useful information
741 about the running hardware for use when people report missing
742 information. One part of this script that I find very useful when
743 debugging hardware problems, is the part mapping loaded kernel module
744 to the PCI device it claims. It allow me to quickly see if the kernel
745 module I expect is driving the hardware I am struggling with. To see
746 the output, make sure discover-data is installed and run
747 <tt>/usr/share/bug/discover-data 3>&1</tt>. The relevant output on
748 one of my machines like this:</p>
752 10de:03eb i2c_nforce2
755 10de:03f0 snd_hda_intel
764 <p>The code in question look like this, slightly modified for
765 readability and to drop the output to file descriptor 3:</p>
768 if [ -d /sys/bus/pci/devices/ ] ; then
769 echo loaded pci modules:
771 cd /sys/bus/pci/devices/
772 for address in * ; do
773 if [ -d "$address/driver/module" ] ; then
774 module=`cd $address/driver/module ; pwd -P | xargs basename`
775 if grep -q "^$module " /proc/modules ; then
776 address=$(echo $address |sed s/
0000://)
777 id=`lspci -n -s $address | tail -n
1 | awk '{print $
3}'`
787 <p>Similar code could be used to extract USB device module
791 if [ -d /sys/bus/usb/devices/ ] ; then
792 echo loaded usb modules:
794 cd /sys/bus/usb/devices/
795 for address in * ; do
796 if [ -d "$address/driver/module" ] ; then
797 module=`cd $address/driver/module ; pwd -P | xargs basename`
798 if grep -q "^$module " /proc/modules ; then
799 address=$(echo $address |sed s/
0000://)
800 id=$(lsusb -s $address | tail -n
1 | awk '{print $
6}')
812 <p>This might perhaps be something to include in other tools as
819 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
824 <div class=
"padding"></div>
828 <a href=
"http://people.skolelinux.org/pere/blog/How_to_test_if_a_laptop_is_working_with_Linux.html">How to test if a laptop is working with Linux
</a>
834 <p>The last few days I have spent at work here at the
<a
835 href=
"http://www.uio.no/">University of Oslo
</a> testing if the new
836 batch of computers will work with Linux. Every year for the last few
837 years the university have organised shared bid of a few thousand
838 computers, and this year HP won the bid. Two different desktops and
839 five different laptops are on the list this year. We in the UNIX
840 group want to know which one of these computers work well with RHEL
841 and Ubuntu, the two Linux distributions we currently handle at the
844 <p>My test method is simple, and I share it here to get feedback and
845 perhaps inspire others to test hardware as well. To test, I PXE
846 install the OS version of choice, and log in as my normal user and run
847 a few applications and plug in selected pieces of hardware. When
848 something fail, I make a note about this in the test matrix and move
849 on. If I have some spare time I try to report the bug to the OS
850 vendor, but as I only have the machines for a short time, I rarely
851 have the time to do this for all the problems I find.
</p>
853 <p>Anyway, to get to the point of this post. Here is the simple tests
854 I perform on a new model.
</p>
858 <li>Is PXE installation working? I'm testing with RHEL6, Ubuntu Lucid
859 and Ubuntu Maverik at the moment. If I feel like it, I also test with
860 RHEL5 and Debian Edu/Squeeze.
</li>
862 <li>Is X.org working? If the graphical login screen show up after
863 installation, X.org is working.
</li>
865 <li>Is hardware accelerated OpenGL working? Running glxgears (in
866 package mesa-utils on Ubuntu) and writing down the frames per second
867 reported by the program.
</li>
869 <li>Is sound working? With Gnome and KDE, a sound is played when
870 logging in, and if I can hear this the test is successful. If there
871 are several audio exits on the machine, I try them all and check if
872 the Gnome/KDE audio mixer can control where to send the sound. I
873 normally test this by playing
874 <a href=
"http://www.nuug.no/aktiviteter/20101012-chef/ ">a HTML5
875 video
</a> in Firefox/Iceweasel.
</li>
877 <li>Is the USB subsystem working? I test this by plugging in a USB
878 memory stick and see if Gnome/KDE notices this.
</li>
880 <li>Is the CD/DVD player working? I test this by inserting any CD/DVD
881 I have lying around, and see if Gnome/KDE notices this.
</li>
883 <li>Is any built in camera working? Test using cheese, and see if a
884 picture from the v4l device show up.
</li>
886 <li>Is bluetooth working? Use the Gnome/KDE browsing tool to see if
887 any bluetooth devices are discovered. In my office, I normally see a
890 <li>For laptops, is the SD or Compaq Flash reader working. I have
891 memory modules lying around, and stick them in and see if Gnome/KDE
894 <li>For laptops, is suspend/hibernate working? I'm testing if the
895 special button work, and if the laptop continue to work after
898 <li>For laptops, is the extra buttons working, like audio level,
899 adjusting background light, switching on/off external video output,
900 switching on/off wifi, bluetooth, etc? The set of buttons differ from
901 laptop to laptop, so I just write down which are working and which are
904 <li>Some laptops have smart card readers, finger print readers,
905 acceleration sensors etc. I rarely test these, as I do not know how
906 to quickly test if they are working or not, so I only document their
911 <p>By now I suspect you are really curious what the test results are
912 for the HP machines I am testing. I'm not done yet, so I will report
913 the test results later. For now I can report that HP
8100 Elite work
914 fine, and hibernation fail with HP EliteBook
8440p on Ubuntu Lucid,
915 and audio fail on RHEL6. Ubuntu Maverik worked with
8440p. As you
916 can see, I have most machines left to test. One interesting
917 observation is that Ubuntu Lucid has almost twice the frame rate than
918 RHEL6 with glxgears. No idea why.
</p>
924 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
929 <div class=
"padding"></div>
933 <a href=
"http://people.skolelinux.org/pere/blog/Some_thoughts_on_BitCoins.html">Some thoughts on BitCoins
</a>
939 <p>As I continue to explore
940 <a href=
"http://www.bitcoin.org/">BitCoin
</a>, I've starting to wonder
941 what properties the system have, and how it will be affected by laws
942 and regulations here in Norway. Here are some random notes.
</p>
944 <p>One interesting thing to note is that since the transactions are
945 verified using a peer to peer network, all details about a transaction
946 is known to everyone. This means that if a BitCoin address has been
947 published like I did with mine in my initial post about BitCoin, it is
948 possible for everyone to see how many BitCoins have been transfered to
949 that address. There is even a web service to look at the details for
950 all transactions. There I can see that my address
951 <a href=
"http://blockexplorer.com/address/15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b">15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b
</a>
952 have received
16.06 Bitcoin, the
953 <a href=
"http://blockexplorer.com/address/1LfdGnGuWkpSJgbQySxxCWhv8MHqvwst3">1LfdGnGuWkpSJgbQySxxCWhv
8MHqvwst
3</a>
954 address of Simon Phipps have received
181.97 BitCoin and the address
955 <a href=
"http://blockexplorer.com/address/1MCwBbhNGp5hRm5rC1Aims2YFRe2SXPYKt">1MCwBbhNGp5hRm5rC1Aims2YFRe2SXPYKt
</A>
956 of EFF have received
2447.38 BitCoins so far. Thank you to each and
957 every one of you that donated bitcoins to support my activity. The
958 fact that anyone can see how much money was transfered to a given
959 address make it more obvious why the BitCoin community recommend to
960 generate and hand out a new address for each transaction. I'm told
961 there is no way to track which addresses belong to a given person or
962 organisation without the person or organisation revealing it
963 themselves, as Simon, EFF and I have done.
</p>
965 <p>In Norway, and in most other countries, there are laws and
966 regulations limiting how much money one can transfer across the border
967 without declaring it. There are money laundering, tax and accounting
968 laws and regulations I would expect to apply to the use of BitCoin.
969 If the Skolelinux foundation
970 (
<a href=
"http://linuxiskolen.no/slxdebianlabs/donations.html">SLX
971 Debian Labs
</a>) were to accept donations in BitCoin in addition to
972 normal bank transfers like EFF is doing, how should this be accounted?
973 Given that it is impossible to know if money can across the border or
974 not, should everything or nothing be declared? What exchange rate
975 should be used when calculating taxes? Would receivers have to pay
976 income tax if the foundation were to pay Skolelinux contributors in
977 BitCoin? I have no idea, but it would be interesting to know.
</p>
979 <p>For a currency to be useful and successful, it must be trusted and
980 accepted by a lot of users. It must be possible to get easy access to
981 the currency (as a wage or using currency exchanges), and it must be
982 easy to spend it. At the moment BitCoin seem fairly easy to get
983 access to, but there are very few places to spend it. I am not really
984 a regular user of any of the vendor types currently accepting BitCoin,
985 so I wonder when my kind of shop would start accepting BitCoins. I
986 would like to buy electronics, travels and subway tickets, not herbs
987 and books. :) The currency is young, and this will improve over time
988 if it become popular, but I suspect regular banks will start to lobby
989 to get BitCoin declared illegal if it become popular. I'm sure they
990 will claim it is helping fund terrorism and money laundering (which
991 probably would be true, as is any currency in existence), but I
992 believe the problems should be solved elsewhere and not by blaming
995 <p>The process of creating new BitCoins is called mining, and it is
996 CPU intensive process that depend on a bit of luck as well (as one is
997 competing against all the other miners currently spending CPU cycles
998 to see which one get the next lump of cash). The "winner" get
50
999 BitCoin when this happen. Yesterday I came across the obvious way to
1000 join forces to increase ones changes of getting at least some coins,
1001 by coordinating the work on mining BitCoins across several machines
1002 and people, and sharing the result if one is lucky and get the
50
1004 <a href=
"http://www.bluishcoder.co.nz/bitcoin-pool/">BitCoin Pool
</a>
1005 if this sounds interesting. I have not had time to try to set up a
1006 machine to participate there yet, but have seen that running on ones
1007 own for a few days have not yield any BitCoins througth mining
1010 <p>Update
2010-
12-
15: Found an
<a
1011 href=
"http://inertia.posterous.com/reply-to-the-underground-economist-why-bitcoi">interesting
1012 criticism
</a> of bitcoin. Not quite sure how valid it is, but thought
1013 it was interesting to read. The arguments presented seem to be
1014 equally valid for gold, which was used as a currency for many years.
</p>
1020 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bitcoin">bitcoin
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/personvern">personvern
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet
</a>.
1025 <div class=
"padding"></div>
1029 <a href=
"http://people.skolelinux.org/pere/blog/Now_accepting_bitcoins___anonymous_and_distributed_p2p_crypto_money.html">Now accepting bitcoins - anonymous and distributed p2p crypto-money
</a>
1035 <p>With this weeks lawless
1036 <a href=
"http://www.salon.com/news/opinion/glenn_greenwald/2010/12/06/wikileaks/index.html">governmental
1037 attacks
</a> on Wikileak and
1038 <a href=
"http://www.salon.com/technology/dan_gillmor/2010/12/06/war_on_speech">free
1039 speech
</a>, it has become obvious that PayPal, visa and mastercard can
1040 not be trusted to handle money transactions.
1042 <a href=
"http://webmink.com/2010/12/06/now-accepting-bitcoin/">Simon
1043 Phipps on bitcoin
</a> reminded me about a project that a friend of
1044 mine mentioned earlier. I decided to follow Simon's example, and get
1045 involved with
<a href=
"http://www.bitcoin.org/">BitCoin
</a>. I got
1046 some help from my friend to get it all running, and he even handed me
1047 some bitcoins to get started. I even donated a few bitcoins to Simon
1048 for helping me remember BitCoin.
</p>
1050 <p>So, what is bitcoins, you probably wonder? It is a digital
1051 crypto-currency, decentralised and handled using peer-to-peer
1052 networks. It allows anonymous transactions and prohibits central
1053 control over the transactions, making it impossible for governments
1054 and companies alike to block donations and other transactions. The
1055 source is free software, and while the key dependency wxWidgets
2.9
1056 for the graphical user interface is missing in Debian, the command
1057 line client builds just fine. Hopefully Jonas
1058 <a href=
"http://bugs.debian.org/578157">will get the package into
1059 Debian
</a> soon.
</p>
1061 <p>Bitcoins can be converted to other currencies, like USD and EUR.
1062 There are
<a href=
"http://www.bitcoin.org/trade">companies accepting
1063 bitcoins
</a> when selling services and goods, and there are even
1064 currency "stock" markets where the exchange rate is decided. There
1065 are not many users so far, but the concept seems promising. If you
1066 want to get started and lack a friend with any bitcoins to spare,
1068 <a href=
"https://freebitcoins.appspot.com/">some for free
</a> (
0.05
1069 bitcoin at the time of writing). Use
1070 <a href=
"http://www.bitcoinwatch.com/">BitcoinWatch
</a> to keep an eye
1071 on the current exchange rates.
</p>
1073 <p>As an experiment, I have decided to set up bitcoind on one of my
1074 machines. If you want to support my activity, please send Bitcoin
1075 donations to the address
1076 <b>15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b
</b>. Thank you!
</p>
1082 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bitcoin">bitcoin
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/personvern">personvern
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet
</a>.
1087 <div class=
"padding"></div>
1091 <a href=
"http://people.skolelinux.org/pere/blog/Why_isn_t_Debian_Edu_using_VLC_.html">Why isn't Debian Edu using VLC?
</a>
1097 <p>In the latest issue of Linux Journal, the readers choices were
1098 presented, and the winner among the multimedia player were VLC.
1099 Personally, I like VLC, and it is my player of choice when I first try
1100 to play a video file or stream. Only if VLC fail will I drag out
1101 gmplayer to see if it can do better. The reason is mostly the failure
1102 model and trust. When VLC fail, it normally pop up a error message
1103 reporting the problem. When mplayer fail, it normally segfault or
1104 just hangs. The latter failure mode drain my trust in the program.
<p>
1106 <p>But even if VLC is my player of choice, we have choosen to use
1107 mplayer in
<a href=
"http://www.skolelinux.org/">Debian
1108 Edu/Skolelinux
</a>. The reason is simple. We need a good browser
1109 plugin to play web videos seamlessly, and the VLC browser plugin is
1110 not very good. For example, it lack in-line control buttons, so there
1111 is no way for the user to pause the video. Also, when I
1112 <a href=
"http://wiki.debian.org/DebianEdu/BrowserMultimedia">last
1113 tested the browser plugins
</a> available in Debian, the VLC plugin
1114 failed on several video pages where mplayer based plugins worked. If
1115 the browser plugin for VLC was as good as the gecko-mediaplayer
1116 package (which uses mplayer), we would switch.
</P>
1118 <p>While VLC is a good player, its user interface is slightly
1119 annoying. The most annoying feature is its inconsistent use of
1120 keyboard shortcuts. When the player is in full screen mode, its
1121 shortcuts are different from when it is playing the video in a window.
1122 For example, space only work as pause when in full screen mode. I
1123 wish it had consisten shortcuts and that space also would work when in
1124 window mode. Another nice shortcut in gmplayer is [enter] to restart
1125 the current video. It is very nice when playing short videos from the
1126 web and want to restart it when new people arrive to have a look at
1127 what is going on.
</p>
1133 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/video">video
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/web">web
</a>.
1138 <div class=
"padding"></div>
1142 <a href=
"http://people.skolelinux.org/pere/blog/Lenny__Squeeze_upgrades_of_the_Gnome_and_KDE_desktop__now_with_apt_get_autoremove.html">Lenny-
>Squeeze upgrades of the Gnome and KDE desktop, now with apt-get autoremove
</a>
1148 <p>Michael Biebl suggested to me on IRC, that I changed my automated
1149 upgrade testing of the
1150 <a href=
"http://people.skolelinux.org/~pere/debian-upgrade-testing/">Lenny
1151 Gnome and KDE Desktop
</a> to do
<tt>apt-get autoremove
</tt> when using apt-get.
1152 This seem like a very good idea, so I adjusted by test scripts and
1153 can now present the updated result from today:
</p>
1155 <p>This is for Gnome:
</p>
1157 <p>Installed using apt-get, missing with aptitude
</p>
1164 browser-plugin-gnash
1171 freedesktop-sound-theme
1173 gconf-defaults-service
1188 gnome-desktop-environment
1192 gnome-session-canberra
1197 gstreamer0.10-fluendo-mp3
1203 libapache2-mod-dnssd
1206 libaprutil1-dbd-sqlite3
1209 libboost-date-time1.42
.0
1210 libboost-python1.42
.0
1211 libboost-thread1.42
.0
1213 libchamplain-gtk-
0.4-
0
1215 libclutter-gtk-
0.10-
0
1222 libfreerdp-plugins-standard
1237 libgnomepanel2.24-cil
1242 libgtksourceview2.0-common
1243 libmono-addins-gui0.2-cil
1244 libmono-addins0.2-cil
1245 libmono-cairo2.0-cil
1246 libmono-corlib2.0-cil
1247 libmono-i18n-west2.0-cil
1248 libmono-posix2.0-cil
1249 libmono-security2.0-cil
1250 libmono-sharpzip2.84-cil
1251 libmono-system2.0-cil
1254 libndesk-dbus-glib1.0-cil
1255 libndesk-dbus1.0-cil
1265 libtelepathy-farsight0
1274 nautilus-sendto-empathy
1278 python-aptdaemon-gtk
1280 python-beautifulsoup
1295 python-gtksourceview2
1306 python-pkg-resources
1313 python-twisted-conch
1319 python-zope.interface
1324 rhythmbox-plugin-cdrecorder
1331 system-config-printer-udev
1333 telepathy-mission-control-
5
1346 <p>Installed using apt-get, removed with aptitude
</p>
1354 fast-user-switch-applet
1373 libgtksourceview2.0-
0
1375 libsdl1.2debian-alsa
1381 system-config-printer
1388 <p>Installed using aptitude, missing with apt-get
</p>
1391 gstreamer0.10-gnomevfs
1394 <p>Installed using aptitude, removed with apt-get
</p>
1400 <p>This is for KDE:
</p>
1402 <p>Installed using apt-get, missing with aptitude
</p>
1408 <p>Installed using apt-get, removed with aptitude
</p>
1415 <p>Installed using aptitude, missing with apt-get
</p>
1431 kdeartwork-emoticons
1433 kdeartwork-theme-icon
1437 kdebase-workspace-bin
1438 kdebase-workspace-data
1452 kscreensaver-xsavers
1467 plasma-dataengines-workspace
1469 plasma-desktopthemes-artwork
1470 plasma-runners-addons
1471 plasma-scriptengine-googlegadgets
1472 plasma-scriptengine-python
1473 plasma-scriptengine-qedje
1474 plasma-scriptengine-ruby
1475 plasma-scriptengine-webkit
1476 plasma-scriptengines
1477 plasma-wallpapers-addons
1478 plasma-widget-folderview
1479 plasma-widget-networkmanagement
1483 xscreensaver-data-extra
1485 xscreensaver-gl-extra
1486 xscreensaver-screensaver-bsod
1489 <p>Installed using aptitude, removed with apt-get
</p>
1493 google-gadgets-common
1511 libggadget-qt-
1.0-
0b
1516 libkonqsidebarplugin4a
1525 libplasma-geolocation-interface4
1527 libplasmagenericshell4
1541 libsmokeknewstuff2-
3
1542 libsmokeknewstuff3-
3
1544 libsmokektexteditor3
1552 libsmokeqtnetwork4-
3
1558 libsmokeqtuitools4-
3
1570 plasma-dataengines-addons
1571 plasma-scriptengine-superkaramba
1572 plasma-widget-lancelot
1573 plasma-widgets-addons
1574 plasma-widgets-workspace
1578 update-notifier-common
1581 <p>Running apt-get autoremove made the results using apt-get and
1582 aptitude a bit more similar, but there are still quite a lott of
1583 differences. I have no idea what packages should be installed after
1584 the upgrade, but hope those that do can have a look.
</p>
1590 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
1595 <div class=
"padding"></div>
1599 <a href=
"http://people.skolelinux.org/pere/blog/Migrating_Xen_virtual_machines_using_LVM_to_KVM_using_disk_images.html">Migrating Xen virtual machines using LVM to KVM using disk images
</a>
1605 <p>Most of the computers in use by the
1606 <a href=
"http://www.skolelinux.org/">Debian Edu/Skolelinux project
</a>
1607 are virtual machines. And they have been Xen machines running on a
1608 fairly old IBM eserver xseries
345 machine, and we wanted to migrate
1609 them to KVM on a newer Dell PowerEdge
2950 host machine. This was a
1610 bit harder that it could have been, because we set up the Xen virtual
1611 machines to get the virtual partitions from LVM, which as far as I
1612 know is not supported by KVM. So to migrate, we had to convert
1613 several LVM logical volumes to partitions on a virtual disk file.
</p>
1616 <a href=
"http://searchnetworking.techtarget.com.au/articles/35011-Six-steps-for-migrating-Xen-virtual-machines-to-KVM">a
1617 nice recipe
</a> to do this, and wrote the following script to do the
1618 migration. It uses qemu-img from the qemu package to make the disk
1619 image, parted to partition it, losetup and kpartx to present the disk
1620 image partions as devices, and dd to copy the data. I NFS mounted the
1621 new servers storage area on the old server to do the migration.
</p>
1627 # http://searchnetworking.techtarget.com.au/articles/
35011-Six-steps-for-migrating-Xen-virtual-machines-to-KVM
1632 if [ -z "$
1" ] ; then
1633 echo "Usage: $
0 <hostname
>"
1639 if [ ! -e /dev/vg_data/$host-disk ] ; then
1640 echo "error: unable to find LVM volume for $host"
1644 # Partitions need to be a bit bigger than the LVM LVs. not sure why.
1645 disksize=$( lvs --units m | grep $host-disk | awk '{sum = sum + $
4} END { print int(sum *
1.05) }')
1646 swapsize=$( lvs --units m | grep $host-swap | awk '{sum = sum + $
4} END { print int(sum *
1.05) }')
1647 totalsize=$(( ( $disksize + $swapsize ) ))
1650 #dd if=/dev/zero of=$img bs=
1M count=$(( $disksize + $swapsize ))
1651 qemu-img create $img ${totalsize}MMaking room on the Debian Edu/Sqeeze DVD
1653 parted $img mklabel msdos
1654 parted $img mkpart primary linux-swap
0 $disksize
1655 parted $img mkpart primary ext2 $disksize $totalsize
1656 parted $img set
1 boot on
1659 losetup /dev/loop0 $img
1660 kpartx -a /dev/loop0
1662 dd if=/dev/vg_data/$host-disk of=/dev/mapper/loop0p1 bs=
1M
1663 fsck.ext3 -f /dev/mapper/loop0p1 || true
1664 mkswap /dev/mapper/loop0p2
1666 kpartx -d /dev/loop0
1667 losetup -d /dev/loop0
1670 <p>The script is perhaps so simple that it is not copyrightable, but
1671 if it is, it is licenced using GPL v2 or later at your discretion.
</p>
1673 <p>After doing this, I booted a Debian CD in rescue mode in KVM with
1674 the new disk image attached, installed grub-pc and linux-image-
686 and
1675 set up grub to boot from the disk image. After this, the KVM machines
1676 seem to work just fine.
</p>
1682 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
1687 <div class=
"padding"></div>
1691 <a href=
"http://people.skolelinux.org/pere/blog/Lenny__Squeeze_upgrades__apt_vs_aptitude_with_the_Gnome_and_KDE_desktop.html">Lenny-
>Squeeze upgrades, apt vs aptitude with the Gnome and KDE desktop
</a>
1697 <p>I'm still running upgrade testing of the
1698 <a href=
"http://people.skolelinux.org/~pere/debian-upgrade-testing/">Lenny
1699 Gnome and KDE Desktop
</a>, but have not had time to spend on reporting the
1700 status. Here is a short update based on a test I ran
20101118.
</p>
1702 <p>I still do not know what a correct migration should look like, so I
1703 report any differences between apt and aptitude and hope someone else
1704 can see if anything should be changed.
</p>
1706 <p>This is for Gnome:
</p>
1708 <p>Installed using apt-get, missing with aptitude
</p>
1711 apache2.2-bin aptdaemon at-spi baobab binfmt-support
1712 browser-plugin-gnash cheese-common cli-common cpp-
4.3 cups-pk-helper
1713 dmz-cursor-theme empathy empathy-common finger
1714 freedesktop-sound-theme freeglut3 gconf-defaults-service gdm-themes
1715 gedit-plugins geoclue geoclue-hostip geoclue-localnet geoclue-manual
1716 geoclue-yahoo gnash gnash-common gnome gnome-backgrounds
1717 gnome-cards-data gnome-codec-install gnome-core
1718 gnome-desktop-environment gnome-disk-utility gnome-screenshot
1719 gnome-search-tool gnome-session-canberra gnome-spell
1720 gnome-system-log gnome-themes-extras gnome-themes-more
1721 gnome-user-share gs-common gstreamer0.10-fluendo-mp3
1722 gstreamer0.10-tools gtk2-engines gtk2-engines-pixbuf
1723 gtk2-engines-smooth hal-info hamster-applet libapache2-mod-dnssd
1724 libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap
1725 libart2.0-cil libatspi1.0-
0 libboost-date-time1.42
.0
1726 libboost-python1.42
.0 libboost-thread1.42
.0 libchamplain-
0.4-
0
1727 libchamplain-gtk-
0.4-
0 libcheese-gtk18 libclutter-gtk-
0.10-
0
1728 libcryptui0 libcupsys2 libdiscid0 libeel2-data libelf1 libepc-
1.0-
2
1729 libepc-common libepc-ui-
1.0-
2 libfreerdp-plugins-standard
1730 libfreerdp0 libgail-common libgconf2.0-cil libgdata-common libgdata7
1731 libgdl-
1-common libgdu-gtk0 libgee2 libgeoclue0 libgexiv2-
0 libgif4
1732 libglade2.0-cil libglib2.0-cil libgmime2.4-cil libgnome-vfs2.0-cil
1733 libgnome2.24-cil libgnomepanel2.24-cil libgnomeprint2.2-data
1734 libgnomeprintui2.2-common libgnomevfs2-bin libgpod-common libgpod4
1735 libgtk2.0-cil libgtkglext1 libgtksourceview-common
1736 libgtksourceview2.0-common libmono-addins-gui0.2-cil
1737 libmono-addins0.2-cil libmono-cairo2.0-cil libmono-corlib2.0-cil
1738 libmono-i18n-west2.0-cil libmono-posix2.0-cil
1739 libmono-security2.0-cil libmono-sharpzip2.84-cil
1740 libmono-system2.0-cil libmtp8 libmusicbrainz3-
6
1741 libndesk-dbus-glib1.0-cil libndesk-dbus1.0-cil libopal3.6
.8
1742 libpolkit-gtk-
1-
0 libpt-
1.10.10-plugins-alsa
1743 libpt-
1.10.10-plugins-v4l libpt2.6
.7 libpython2.6 librpm1 librpmio1
1744 libsdl1.2debian libservlet2.4-java libsrtp0 libssh-
4
1745 libtelepathy-farsight0 libtelepathy-glib0 libtidy-
0.99-
0
1746 libxalan2-java libxerces2-java media-player-info mesa-utils
1747 mono-
2.0-gac mono-gac mono-runtime nautilus-sendto
1748 nautilus-sendto-empathy openoffice.org-writer2latex
1749 openssl-blacklist p7zip p7zip-full pkg-config python-
4suite-xml
1750 python-aptdaemon python-aptdaemon-gtk python-axiom
1751 python-beautifulsoup python-bugbuddy python-clientform
1752 python-coherence python-configobj python-crypto python-cupshelpers
1753 python-cupsutils python-eggtrayicon python-elementtree
1754 python-epsilon python-evolution python-feedparser python-gdata
1755 python-gdbm python-gst0.10 python-gtkglext1 python-gtkmozembed
1756 python-gtksourceview2 python-httplib2 python-louie python-mako
1757 python-markupsafe python-mechanize python-nevow python-notify
1758 python-opengl python-openssl python-pam python-pkg-resources
1759 python-pyasn1 python-pysqlite2 python-rdflib python-serial
1760 python-tagpy python-twisted-bin python-twisted-conch
1761 python-twisted-core python-twisted-web python-utidylib python-webkit
1762 python-xdg python-zope.interface remmina remmina-plugin-data
1763 remmina-plugin-rdp remmina-plugin-vnc rhythmbox-plugin-cdrecorder
1764 rhythmbox-plugins rpm-common rpm2cpio seahorse-plugins shotwell
1765 software-center svgalibg1 system-config-printer-udev
1766 telepathy-gabble telepathy-mission-control-
5 telepathy-salut tomboy
1767 totem totem-coherence totem-mozilla totem-plugins
1768 transmission-common xdg-user-dirs xdg-user-dirs-gtk xserver-xephyr
1772 Installed using apt-get, removed with aptitude
1775 arj bluez-utils cheese dhcdbd djvulibre-desktop ekiga eog
1776 epiphany-extensions epiphany-gecko evolution-exchange
1777 fast-user-switch-applet file-roller gcalctool gconf-editor gdm gedit
1778 gedit-common gnome-app-install gnome-games gnome-games-data
1779 gnome-nettool gnome-system-tools gnome-themes gnome-utils
1780 gnome-vfs-obexftp gnome-volume-manager gnuchess gucharmap
1781 guile-
1.8-libs hal libavahi-compat-libdnssd1 libavahi-core5
1782 libavahi-ui0 libbind9-
50 libbluetooth2 libcamel1.2-
11 libcdio7
1783 libcucul0 libcurl3 libdirectfb-
1.0-
0 libdmx1 libdvdread3
1784 libedata-cal1.2-
6 libedataserver1.2-
9 libeel2-
2.20 libepc-
1.0-
1
1785 libepc-ui-
1.0-
1 libexchange-storage1.2-
3 libfaad0 libgadu3
1786 libgalago3 libgd2-noxpm libgda3-
3 libgda3-common libggz2 libggzcore9
1787 libggzmod4 libgksu1.2-
0 libgksuui1.0-
1 libgmyth0 libgnome-desktop-
2
1788 libgnome-pilot2 libgnomecups1.0-
1 libgnomeprint2.2-
0
1789 libgnomeprintui2.2-
0 libgpod3 libgraphviz4 libgtk-vnc-
1.0-
0
1790 libgtkhtml2-
0 libgtksourceview1.0-
0 libgtksourceview2.0-
0
1791 libgucharmap6 libhesiod0 libicu38 libisccc50 libisccfg50 libiw29
1792 libjaxp1.3-java-gcj libkpathsea4 liblircclient0 libltdl3 liblwres50
1793 libmagick++
10 libmagick10 libmalaga7 libmozjs1d libmpfr1ldbl libmtp7
1794 libmysqlclient15off libnautilus-burn4 libneon27 libnm-glib0
1795 libnm-util0 libopal-
2.2 libosp5 libparted1.8-
10 libpisock9
1796 libpisync1 libpoppler-glib3 libpoppler3 libpt-
1.10.10 libraw1394-
8
1797 libsdl1.2debian-alsa libsensors3 libsexy2 libsmbios2 libsoup2.2-
8
1798 libspeexdsp1 libssh2-
1 libsuitesparse-
3.1.0 libsvga1
1799 libswfdec-
0.6-
90 libtalloc1 libtotem-plparser10 libtrackerclient0
1800 libvoikko1 libxalan2-java-gcj libxerces2-java-gcj libxklavier12
1801 libxtrap6 libxxf86misc1 libzephyr3 mysql-common rhythmbox seahorse
1802 sound-juicer swfdec-gnome system-config-printer totem-common
1803 totem-gstreamer transmission-gtk vinagre vino w3c-dtd-xhtml wodim
1806 <p>Installed using aptitude, missing with apt-get
</p>
1809 gstreamer0.10-gnomevfs
1812 <p>Installed using aptitude, removed with apt-get
</p>
1818 <p>This is for KDE:
</p>
1820 <p>Installed using apt-get, missing with aptitude
</p>
1823 autopoint bomber bovo cantor cantor-backend-kalgebra cpp-
4.3 dcoprss
1824 edict espeak espeak-data eyesapplet fifteenapplet finger gettext
1825 ghostscript-x git gnome-audio gnugo granatier gs-common
1826 gstreamer0.10-pulseaudio indi kaddressbook-plugins kalgebra
1827 kalzium-data kanjidic kapman kate-plugins kblocks kbreakout kbstate
1828 kde-icons-mono kdeaccessibility kdeaddons-kfile-plugins
1829 kdeadmin-kfile-plugins kdeartwork-misc kdeartwork-theme-window
1830 kdeedu kdeedu-data kdeedu-kvtml-data kdegames kdegames-card-data
1831 kdegames-mahjongg-data kdegraphics-kfile-plugins kdelirc
1832 kdemultimedia-kfile-plugins kdenetwork-kfile-plugins
1833 kdepim-kfile-plugins kdepim-kio-plugins kdessh kdetoys kdewebdev
1834 kdiamond kdnssd kfilereplace kfourinline kgeography-data kigo
1835 killbots kiriki klettres-data kmoon kmrml knewsticker-scripts
1836 kollision kpf krosspython ksirk ksmserver ksquares kstars-data
1837 ksudoku kubrick kweather libasound2-plugins libboost-python1.42
.0
1838 libcfitsio3 libconvert-binhex-perl libcrypt-ssleay-perl libdb4.6++
1839 libdjvulibre-text libdotconf1.0 liberror-perl libespeak1
1840 libfinance-quote-perl libgail-common libgsl0ldbl libhtml-parser-perl
1841 libhtml-tableextract-perl libhtml-tagset-perl libhtml-tree-perl
1842 libio-stringy-perl libkdeedu4 libkdegames5 libkiten4 libkpathsea5
1843 libkrossui4 libmailtools-perl libmime-tools-perl
1844 libnews-nntpclient-perl libopenbabel3 libportaudio2 libpulse-browse0
1845 libservlet2.4-java libspeechd2 libtiff-tools libtimedate-perl
1846 libunistring0 liburi-perl libwww-perl libxalan2-java libxerces2-java
1847 lirc luatex marble networkstatus noatun-plugins
1848 openoffice.org-writer2latex palapeli palapeli-data parley
1849 parley-data poster psutils pulseaudio pulseaudio-esound-compat
1850 pulseaudio-module-x11 pulseaudio-utils quanta-data rocs rsync
1851 speech-dispatcher step svgalibg1 texlive-binaries texlive-luatex
1855 <p>Installed using apt-get, removed with aptitude
</p>
1858 amor artsbuilder atlantik atlantikdesigner blinken bluez-utils cvs
1859 dhcdbd djvulibre-desktop imlib-base imlib11 kalzium kanagram kandy
1860 kasteroids katomic kbackgammon kbattleship kblackbox kbounce kbruch
1861 kcron kdat kdemultimedia-kappfinder-data kdeprint kdict kdvi kedit
1862 keduca kenolaba kfax kfaxview kfouleggs kgeography kghostview
1863 kgoldrunner khangman khexedit kiconedit kig kimagemapeditor
1864 kitchensync kiten kjumpingcube klatin klettres klickety klines
1865 klinkstatus kmag kmahjongg kmailcvt kmenuedit kmid kmilo kmines
1866 kmousetool kmouth kmplot knetwalk kodo kolf kommander konquest kooka
1867 kpager kpat kpdf kpercentage kpilot kpoker kpovmodeler krec
1868 kregexpeditor kreversi ksame ksayit kshisen ksig ksim ksirc ksirtet
1869 ksmiletris ksnake ksokoban kspaceduel kstars ksvg ksysv kteatime
1870 ktip ktnef ktouch ktron kttsd ktuberling kturtle ktux kuickshow
1871 kverbos kview kviewshell kvoctrain kwifimanager kwin kwin4 kwordquiz
1872 kworldclock kxsldbg libakode2 libarts1-akode libarts1-audiofile
1873 libarts1-mpeglib libarts1-xine libavahi-compat-libdnssd1
1874 libavahi-core5 libavc1394-
0 libbind9-
50 libbluetooth2
1875 libboost-python1.34
.1 libcucul0 libcurl3 libcvsservice0
1876 libdirectfb-
1.0-
0 libdjvulibre21 libdvdread3 libfaad0 libfreebob0
1877 libgd2-noxpm libgraphviz4 libgsmme1c2a libgtkhtml2-
0 libicu38
1878 libiec61883-
0 libindex0 libisccc50 libisccfg50 libiw29
1879 libjaxp1.3-java-gcj libk3b3 libkcal2b libkcddb1 libkdeedu3
1880 libkdegames1 libkdepim1a libkgantt0 libkleopatra1 libkmime2
1881 libkpathsea4 libkpimexchange1 libkpimidentities1 libkscan1
1882 libksieve0 libktnef1 liblockdev1 libltdl3 liblwres50 libmagick10
1883 libmimelib1c2a libmodplug0c2 libmozjs1d libmpcdec3 libmpfr1ldbl
1884 libneon27 libnm-util0 libopensync0 libpisock9 libpoppler-glib3
1885 libpoppler-qt2 libpoppler3 libraw1394-
8 librss1 libsensors3
1886 libsmbios2 libssh2-
1 libsuitesparse-
3.1.0 libswfdec-
0.6-
90
1887 libtalloc1 libxalan2-java-gcj libxerces2-java-gcj libxtrap6 lskat
1888 mpeglib network-manager-kde noatun pmount tex-common texlive-base
1889 texlive-common texlive-doc-base texlive-fonts-recommended tidy
1890 ttf-dustin ttf-kochi-gothic ttf-sjfonts
1893 <p>Installed using aptitude, missing with apt-get
</p>
1896 dolphin kde-core kde-plasma-desktop kde-standard kde-window-manager
1897 kdeartwork kdebase kdebase-apps kdebase-workspace
1898 kdebase-workspace-bin kdebase-workspace-data kdeutils kscreensaver
1899 kscreensaver-xsavers libgle3 libkonq5 libkonq5-templates libnetpbm10
1900 netpbm plasma-widget-folderview plasma-widget-networkmanagement
1901 xscreensaver-data-extra xscreensaver-gl xscreensaver-gl-extra
1902 xscreensaver-screensaver-bsod
1905 <p>Installed using aptitude, removed with apt-get
</p>
1908 kdebase-bin konq-plugins konqueror
1915 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
1920 <div class=
"padding"></div>
1924 <a href=
"http://people.skolelinux.org/pere/blog/Gnash_buildbot_slave_and_Debian_kfreebsd.html">Gnash buildbot slave and Debian kfreebsd
</a>
1931 <a href=
"http://www.listware.net/201011/gnash-dev/67431-gnash-dev-buildbot-looking-for-slaves.html">the
1932 call from the Gnash project
</a> for
1933 <a href=
"http://www.gnashdev.org:8010">buildbot
</a> slaves to test the
1934 current source, I have set up a virtual KVM machine on the Debian
1935 Edu/Skolelinux virtualization host to test the git source on
1936 Debian/Squeeze. I hope this can help the developers in getting new
1937 releases out more often.
</p>
1939 <p>As the developers want less main-stream build platforms tested to,
1940 I have considered setting up a
<a
1941 href=
"http://www.debian.org/ports/kfreebsd-gnu/">Debian/kfreebsd
</a>
1942 machine as well. I have also considered using the kfreebsd
1943 architecture in Debian as a file server in NUUG to get access to the
5
1944 TB zfs volume we currently use to store DV video. Because of this, I
1945 finally got around to do a test installation of Debian/Squeeze with
1946 kfreebsd. Installation went fairly smooth, thought I noticed some
1947 visual glitches in the cdebconf dialogs (black cursor left on the
1948 screen at random locations). Have not gotten very far with the
1949 testing. Noticed cfdisk did not work, but fdisk did so it was not a
1950 fatal problem. Have to spend some more time on it to see if it is
1951 useful as a file server for NUUG. Will try to find time to set up a
1952 gnash buildbot slave on the Debian Edu/Skolelinux this weekend.
</p>
1958 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
1963 <div class=
"padding"></div>
1967 <a href=
"http://people.skolelinux.org/pere/blog/Debian_in_3D.html">Debian in
3D
</a>
1973 <p><img src=
"http://thingiverse-production.s3.amazonaws.com/renders/23/e0/c4/f9/2b/debswagtdose_preview_medium.jpg"></p>
1975 <p>3D printing is just great. I just came across this Debian logo in
1977 <a href=
"http://blog.thingiverse.com/2010/11/09/participatory-branding/">the
1978 thingiverse blog
</a>.
</p>
1984 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
1989 <div class=
"padding"></div>
1993 <a href=
"http://people.skolelinux.org/pere/blog/Software_updates_2010_10_24.html">Software updates
2010-
10-
24</a>
1999 <p>Some updates.
</p>
2001 <p>My
<a href=
"http://pledgebank.com/gnash-avm2">gnash pledge
</a> to
2002 raise money for the project is going well. The lower limit of
10
2003 signers was reached in
24 hours, and so far
13 people have signed it.
2004 More signers and more funding is most welcome, and I am really curious
2005 how far we can get before the time limit of December
24 is reached.
2008 <p>On the #gnash IRC channel on irc.freenode.net, I was just tipped
2009 about what appear to be a great code coverage tool capable of
2010 generating code coverage stats without any changes to the source code.
2012 <a href=
"http://simonkagstrom.github.com/kcov/index.html">kcov
</a>,
2013 and can be used using
<tt>kcov
<directory
> <binary
></tt>.
2014 It is missing in Debian, but the git source built just fine in Squeeze
2015 after I installed libelf-dev, libdwarf-dev, pkg-config and
2016 libglib2.0-dev. Failed to build in Lenny, but suspect that is
2017 solvable. I hope kcov make it into Debian soon.
</p>
2019 <p>Finally found time to wrap up the release notes for
<a
2020 href=
"http://lists.debian.org/debian-edu-announce/2010/10/msg00002.html">a
2021 new alpha release of Debian Edu
</a>, and just published the second
2022 alpha test release of the Squeeze based Debian Edu /
2023 <a href=
"http://www.skolelinux.org/">Skolelinux
</a>
2024 release. Give it a try if you need a complete linux solution for your
2025 school, including central infrastructure server, workstations, thin
2026 client servers and diskless workstations. A nice touch added
2027 yesterday is RDP support on the thin client servers, for windows
2028 clients to get a Linux desktop on request.
</p>
2034 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia
</a>.
2039 <div class=
"padding"></div>
2043 <a href=
"http://people.skolelinux.org/pere/blog/Some_notes_on_Flash_in_Debian_and_Debian_Edu.html">Some notes on Flash in Debian and Debian Edu
</a>
2049 <p>In the
<a href=
"http://popcon.debian.org/unknown/by_vote">Debian
2050 popularity-contest numbers
</a>, the adobe-flashplugin package the
2051 second most popular used package that is missing in Debian. The sixth
2052 most popular is flashplayer-mozilla. This is a clear indication that
2053 working flash is important for Debian users. Around
10 percent of the
2054 users submitting data to popcon.debian.org have this package
2057 <p>In the report written by Lars Risan in August
2008
2058 («
<a href=
"http://wiki.skolelinux.no/Dokumentasjon/Rapporter?action=AttachFile&do=view&target=Skolelinux_i_bruk_rapport_1.0.pdf">Skolelinux
2059 i bruk – Rapport for Hurum kommune, Universitetet i Agder og
2060 stiftelsen SLX Debian Labs
</a>»), one of the most important problems
2061 schools experienced with
<a href=
"http://www.skolelinux.org/">Debian
2062 Edu/Skolelinux
</a> was the lack of working Flash. A lot of educational
2063 web sites require Flash to work, and lacking working Flash support in
2064 the web browser and the problems with installing it was perceived as a
2065 good reason to stay with Windows.
</p>
2067 <p>I once saw a funny and sad comment in a web forum, where Linux was
2068 said to be the retarded cousin that did not really understand
2069 everything you told him but could work fairly well. This was a
2070 comment regarding the problems Linux have with proprietary formats and
2071 non-standard web pages, and is sad because it exposes a fairly common
2072 understanding of whose fault it is if web pages that only work in for
2073 example Internet Explorer
6 fail to work on Firefox, and funny because
2074 it explain very well how annoying it is for users when Linux
2075 distributions do not work with the documents they receive or the web
2076 pages they want to visit.
</p>
2078 <p>This is part of the reason why I believe it is important for Debian
2079 and Debian Edu to have a well working Flash implementation in the
2080 distribution, to get at least popular sites as Youtube and Google
2081 Video to working out of the box. For Squeeze, Debian have the chance
2082 to include the latest version of Gnash that will make this happen, as
2083 the new release
0.8.8 was published a few weeks ago and is resting in
2084 unstable. The new version work with more sites that version
0.8.7.
2085 The Gnash maintainers have asked for a freeze exception, but the
2086 release team have not had time to reply to it yet. I hope they agree
2087 with me that Flash is important for the Debian desktop users, and thus
2088 accept the new package into Squeeze.
</p>
2094 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/video">video
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/web">web
</a>.
2099 <div class=
"padding"></div>
2103 <a href=
"http://people.skolelinux.org/pere/blog/Circular_package_dependencies_harms_apt_recovery.html">Circular package dependencies harms apt recovery
</a>
2109 <p>I discovered this while doing
2110 <a href=
"http://people.skolelinux.org/pere/blog/Automatic_upgrade_testing_from_Lenny_to_Squeeze.html">automated
2111 testing of upgrades from Debian Lenny to Squeeze
</a>. A few packages
2112 in Debian still got circular dependencies, and it is often claimed
2113 that apt and aptitude should be able to handle this just fine, but
2114 some times these dependency loops causes apt to fail.
</p>
2116 <p>An example is from todays
2117 <a href=
"http://people.skolelinux.org/~pere/debian-upgrade-testing//test-20100727-lenny-squeeze-kde-aptitude.txt">upgrade
2118 of KDE using aptitude
</a>. In it, a bug in kdebase-workspace-data
2119 causes perl-modules to fail to upgrade. The cause is simple. If a
2120 package fail to unpack, then only part of packages with the circular
2121 dependency might end up being unpacked when unpacking aborts, and the
2122 ones already unpacked will fail to configure in the recovery phase
2123 because its dependencies are unavailable.
</p>
2125 <p>In this log, the problem manifest itself with this error:
</p>
2128 dpkg: dependency problems prevent configuration of perl-modules:
2129 perl-modules depends on perl (
>=
5.10.1-
1); however:
2130 Version of perl on system is
5.10.0-
19lenny
2.
2131 dpkg: error processing perl-modules (--configure):
2132 dependency problems - leaving unconfigured
2135 <p>The perl/perl-modules circular dependency is already
2136 <a href=
"http://bugs.debian.org/527917">reported as a bug
</a>, and will
2137 hopefully be solved as soon as possible, but it is not the only one,
2138 and each one of these loops in the dependency tree can cause similar
2139 failures. Of course, they only occur when there are bugs in other
2140 packages causing the unpacking to fail, but it is rather nasty when
2141 the failure of one package causes the problem to become worse because
2142 of dependency loops.
</p>
2145 <a href=
"http://lists.debian.org/debian-devel/2010/06/msg00116.html">the
2146 tireless effort by Bill Allombert
</a>, the number of circular
2148 <a href=
"http://debian.semistable.com/debgraph.out.html">left in Debian
2149 is dropping
</a>, and perhaps it will reach zero one day. :)
</p>
2151 <p>Todays testing also exposed a bug in
2152 <a href=
"http://bugs.debian.org/590605">update-notifier
</a> and
2153 <a href=
"http://bugs.debian.org/590604">different behaviour
</a> between
2154 apt-get and aptitude, the latter possibly caused by some circular
2155 dependency. Reported both to BTS to try to get someone to look at
2162 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
2167 <div class=
"padding"></div>
2171 <a href=
"http://people.skolelinux.org/pere/blog/What_are_they_searching_for___PowerDNS_and_ISC_DHCP_in_LDAP.html">What are they searching for - PowerDNS and ISC DHCP in LDAP
</a>
2178 <a href=
"http://people.skolelinux.org/pere/blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html">followup
</a>
2180 <a href=
"http://people.skolelinux.org/pere/blog/Idea_for_a_change_to_LDAP_schemas_allowing_DNS_and_DHCP_info_to_be_combined_into_one_object.html">previous
2182 <a href=
"http://people.skolelinux.org/pere/blog/Combining_PowerDNS_and_ISC_DHCP_LDAP_objects.html">merging
2183 all
</a> the computer related LDAP objects in Debian Edu.
</p>
2185 <p>As a step to try to see if it possible to merge the DNS and DHCP
2186 LDAP objects, I have had a look at how the packages pdns-backend-ldap
2187 and dhcp3-server-ldap in Debian use the LDAP server. The two
2188 implementations are quite different in how they use LDAP.
</p>
2190 To get this information, I started slapd with debugging enabled and
2191 dumped the debug output to a file to get the LDAP searches performed
2192 on a Debian Edu main-server. Here is a summary.
2194 <p><strong>powerdns
</strong></p>
2196 <a href=
"http://www.linuxnetworks.de/doc/index.php/PowerDNS_LDAP_Backend">Clues
2197 on how to
</a> set up PowerDNS to use a LDAP backend is available on
2200 <p>PowerDNS have two modes of operation using LDAP as its backend.
2201 One "strict" mode where the forward and reverse DNS lookups are done
2202 using the same LDAP objects, and a "tree" mode where the forward and
2203 reverse entries are in two different subtrees in LDAP with a structure
2204 based on the DNS names, as in tjener.intern and
2205 2.2.0.10.in-addr.arpa.
</p>
2207 <p>In tree mode, the server is set up to use a LDAP subtree as its
2208 base, and uses a "base" scoped search for the DNS name by adding
2209 "dc=tjener,dc=intern," to the base with a filter for
2210 "(associateddomain=tjener.intern)" for the forward entry and
2211 "dc=
2,dc=
2,dc=
0,dc=
10,dc=in-addr,dc=arpa," with a filter for
2212 "(associateddomain=
2.2.0.10.in-addr.arpa)" for the reverse entry. For
2213 forward entries, it is looking for attributes named dnsttl, arecord,
2214 nsrecord, cnamerecord, soarecord, ptrrecord, hinforecord, mxrecord,
2215 txtrecord, rprecord, afsdbrecord, keyrecord, aaaarecord, locrecord,
2216 srvrecord, naptrrecord, kxrecord, certrecord, dsrecord, sshfprecord,
2217 ipseckeyrecord, rrsigrecord, nsecrecord, dnskeyrecord, dhcidrecord,
2218 spfrecord and modifytimestamp. For reverse entries it is looking for
2219 the attributes dnsttl, arecord, nsrecord, cnamerecord, soarecord,
2220 ptrrecord, hinforecord, mxrecord, txtrecord, rprecord, aaaarecord,
2221 locrecord, srvrecord, naptrrecord and modifytimestamp. The equivalent
2222 ldapsearch commands could look like this:
</p>
2225 ldapsearch -h ldap \
2226 -b dc=tjener,dc=intern,ou=hosts,dc=skole,dc=skolelinux,dc=no \
2227 -s base -x '(associateddomain=tjener.intern)' dNSTTL aRecord nSRecord \
2228 cNAMERecord sOARecord pTRRecord hInfoRecord mXRecord tXTRecord \
2229 rPRecord aFSDBRecord KeyRecord aAAARecord lOCRecord sRVRecord \
2230 nAPTRRecord kXRecord certRecord dSRecord sSHFPRecord iPSecKeyRecord \
2231 rRSIGRecord nSECRecord dNSKeyRecord dHCIDRecord sPFRecord modifyTimestamp
2233 ldapsearch -h ldap \
2234 -b dc=
2,dc=
2,dc=
0,dc=
10,dc=in-addr,dc=arpa,ou=hosts,dc=skole,dc=skolelinux,dc=no \
2235 -s base -x '(associateddomain=
2.2.0.10.in-addr.arpa)'
2236 dnsttl, arecord, nsrecord, cnamerecord soarecord ptrrecord \
2237 hinforecord mxrecord txtrecord rprecord aaaarecord locrecord \
2238 srvrecord naptrrecord modifytimestamp
2241 <p>In Debian Edu/Lenny, the PowerDNS tree mode is used with
2242 ou=hosts,dc=skole,dc=skolelinux,dc=no as the base, and these are two
2243 example LDAP objects used there. In addition to these objects, the
2244 parent objects all th way up to ou=hosts,dc=skole,dc=skolelinux,dc=no
2248 dn: dc=tjener,dc=intern,ou=hosts,dc=skole,dc=skolelinux,dc=no
2250 objectclass: dnsdomain
2251 objectclass: domainrelatedobject
2254 associateddomain: tjener.intern
2256 dn: dc=
2,dc=
2,dc=
0,dc=
10,dc=in-addr,dc=arpa,ou=hosts,dc=skole,dc=skolelinux,dc=no
2258 objectclass: dnsdomain2
2259 objectclass: domainrelatedobject
2261 ptrrecord: tjener.intern
2262 associateddomain:
2.2.0.10.in-addr.arpa
2265 <p>In strict mode, the server behaves differently. When looking for
2266 forward DNS entries, it is doing a "subtree" scoped search with the
2267 same base as in the tree mode for a object with filter
2268 "(associateddomain=tjener.intern)" and requests the attributes dnsttl,
2269 arecord, nsrecord, cnamerecord, soarecord, ptrrecord, hinforecord,
2270 mxrecord, txtrecord, rprecord, aaaarecord, locrecord, srvrecord,
2271 naptrrecord and modifytimestamp. For reverse entires it also do a
2272 subtree scoped search but this time the filter is "(arecord=
10.0.2.2)"
2273 and the requested attributes are associateddomain, dnsttl and
2274 modifytimestamp. In short, in strict mode the objects with ptrrecord
2275 go away, and the arecord attribute in the forward object is used
2278 <p>The forward and reverse searches can be simulated using ldapsearch
2282 ldapsearch -h ldap -b ou=hosts,dc=skole,dc=skolelinux,dc=no -s sub -x \
2283 '(associateddomain=tjener.intern)' dNSTTL aRecord nSRecord \
2284 cNAMERecord sOARecord pTRRecord hInfoRecord mXRecord tXTRecord \
2285 rPRecord aFSDBRecord KeyRecord aAAARecord lOCRecord sRVRecord \
2286 nAPTRRecord kXRecord certRecord dSRecord sSHFPRecord iPSecKeyRecord \
2287 rRSIGRecord nSECRecord dNSKeyRecord dHCIDRecord sPFRecord modifyTimestamp
2289 ldapsearch -h ldap -b ou=hosts,dc=skole,dc=skolelinux,dc=no -s sub -x \
2290 '(arecord=
10.0.2.2)' associateddomain dnsttl modifytimestamp
2293 <p>In addition to the forward and reverse searches , there is also a
2294 search for SOA records, which behave similar to the forward and
2295 reverse lookups.
</p>
2297 <p>A thing to note with the PowerDNS behaviour is that it do not
2298 specify any objectclass names, and instead look for the attributes it
2299 need to generate a DNS reply. This make it able to work with any
2300 objectclass that provide the needed attributes.
</p>
2302 <p>The attributes are normally provided in the cosine (RFC
1274) and
2303 dnsdomain2 schemas. The latter is used for reverse entries like
2304 ptrrecord and recent DNS additions like aaaarecord and srvrecord.
</p>
2306 <p>In Debian Edu, we have created DNS objects using the object classes
2307 dcobject (for dc), dnsdomain or dnsdomain2 (structural, for the DNS
2308 attributes) and domainrelatedobject (for associatedDomain). The use
2309 of structural object classes make it impossible to combine these
2310 classes with the object classes used by DHCP.
</p>
2312 <p>There are other schemas that could be used too, for example the
2313 dnszone structural object class used by Gosa and bind-sdb for the DNS
2314 attributes combined with the domainrelatedobject object class, but in
2315 this case some unused attributes would have to be included as well
2316 (zonename and relativedomainname).
</p>
2318 <p>My proposal for Debian Edu would be to switch PowerDNS to strict
2319 mode and not use any of the existing objectclasses (dnsdomain,
2320 dnsdomain2 and dnszone) when one want to combine the DNS information
2321 with DHCP information, and instead create a auxiliary object class
2322 defined something like this (using the attributes defined for
2323 dnsdomain and dnsdomain2 or dnszone):
</p>
2326 objectclass ( some-oid NAME 'dnsDomainAux'
2329 MAY ( ARecord $ MDRecord $ MXRecord $ NSRecord $ SOARecord $ CNAMERecord $
2330 DNSTTL $ DNSClass $ PTRRecord $ HINFORecord $ MINFORecord $
2331 TXTRecord $ SIGRecord $ KEYRecord $ AAAARecord $ LOCRecord $
2332 NXTRecord $ SRVRecord $ NAPTRRecord $ KXRecord $ CERTRecord $
2333 A6Record $ DNAMERecord
2337 <p>This will allow any object to become a DNS entry when combined with
2338 the domainrelatedobject object class, and allow any entity to include
2339 all the attributes PowerDNS wants. I've sent an email to the PowerDNS
2340 developers asking for their view on this schema and if they are
2341 interested in providing such schema with PowerDNS, and I hope my
2342 message will be accepted into their mailing list soon.
</p>
2344 <p><strong>ISC dhcp
</strong></p>
2346 <p>The DHCP server searches for specific objectclass and requests all
2347 the object attributes, and then uses the attributes it want. This
2348 make it harder to figure out exactly what attributes are used, but
2349 thanks to the working example in Debian Edu I can at least get an idea
2350 what is needed without having to read the source code.
</p>
2352 <p>In the DHCP server configuration, the LDAP base to use and the
2353 search filter to use to locate the correct dhcpServer entity is
2354 stored. These are the relevant entries from
2355 /etc/dhcp3/dhcpd.conf:
</p>
2358 ldap-base-dn "dc=skole,dc=skolelinux,dc=no";
2359 ldap-dhcp-server-cn "dhcp";
2362 <p>The DHCP server uses this information to nest all the DHCP
2363 configuration it need. The cn "dhcp" is located using the given LDAP
2364 base and the filter "(&(objectClass=dhcpServer)(cn=dhcp))". The
2365 search result is this entry:
</p>
2368 dn: cn=dhcp,dc=skole,dc=skolelinux,dc=no
2371 objectClass: dhcpServer
2372 dhcpServiceDN: cn=DHCP Config,dc=skole,dc=skolelinux,dc=no
2375 <p>The content of the dhcpServiceDN attribute is next used to locate the
2376 subtree with DHCP configuration. The DHCP configuration subtree base
2377 is located using a base scope search with base "cn=DHCP
2378 Config,dc=skole,dc=skolelinux,dc=no" and filter
2379 "(&(objectClass=dhcpService)(|(dhcpPrimaryDN=cn=dhcp,dc=skole,dc=skolelinux,dc=no)(dhcpSecondaryDN=cn=dhcp,dc=skole,dc=skolelinux,dc=no)))".
2380 The search result is this entry:
</p>
2383 dn: cn=DHCP Config,dc=skole,dc=skolelinux,dc=no
2386 objectClass: dhcpService
2387 objectClass: dhcpOptions
2388 dhcpPrimaryDN: cn=dhcp, dc=skole,dc=skolelinux,dc=no
2389 dhcpStatements: ddns-update-style none
2390 dhcpStatements: authoritative
2391 dhcpOption: smtp-server code
69 = array of ip-address
2392 dhcpOption: www-server code
72 = array of ip-address
2393 dhcpOption: wpad-url code
252 = text
2396 <p>Next, the entire subtree is processed, one level at the time. When
2397 all the DHCP configuration is loaded, it is ready to receive requests.
2398 The subtree in Debian Edu contain objects with object classes
2399 top/dhcpService/dhcpOptions, top/dhcpSharedNetwork/dhcpOptions,
2400 top/dhcpSubnet, top/dhcpGroup and top/dhcpHost. These provide options
2401 and information about netmasks, dynamic range etc. Leaving out the
2402 details here because it is not relevant for the focus of my
2403 investigation, which is to see if it is possible to merge dns and dhcp
2404 related computer objects.
</p>
2406 <p>When a DHCP request come in, LDAP is searched for the MAC address
2407 of the client (
00:
00:
00:
00:
00:
00 in this example), using a subtree
2408 scoped search with "cn=DHCP Config,dc=skole,dc=skolelinux,dc=no" as
2409 the base and "(&(objectClass=dhcpHost)(dhcpHWAddress=ethernet
2410 00:
00:
00:
00:
00:
00))" as the filter. This is what a host object look
2414 dn: cn=hostname,cn=group1,cn=THINCLIENTS,cn=DHCP Config,dc=skole,dc=skolelinux,dc=no
2417 objectClass: dhcpHost
2418 dhcpHWAddress: ethernet
00:
00:
00:
00:
00:
00
2419 dhcpStatements: fixed-address hostname
2422 <p>There is less flexiblity in the way LDAP searches are done here.
2423 The object classes need to have fixed names, and the configuration
2424 need to be stored in a fairly specific LDAP structure. On the
2425 positive side, the invidiual dhcpHost entires can be anywhere without
2426 the DN pointed to by the dhcpServer entries. The latter should make
2427 it possible to group all host entries in a subtree next to the
2428 configuration entries, and this subtree can also be shared with the
2429 DNS server if the schema proposed above is combined with the dhcpHost
2430 structural object class.
2432 <p><strong>Conclusion
</strong></p>
2434 <p>The PowerDNS implementation seem to be very flexible when it come
2435 to which LDAP schemas to use. While its "tree" mode is rigid when it
2436 come to the the LDAP structure, the "strict" mode is very flexible,
2437 allowing DNS objects to be stored anywhere under the base cn specified
2438 in the configuration.
</p>
2440 <p>The DHCP implementation on the other hand is very inflexible, both
2441 regarding which LDAP schemas to use and which LDAP structure to use.
2442 I guess one could implement ones own schema, as long as the
2443 objectclasses and attributes have the names used, but this do not
2444 really help when the DHCP subtree need to have a fairly fixed
2447 <p>Based on the observed behaviour, I suspect a LDAP structure like
2448 this might work for Debian Edu:
</p>
2452 cn=machine-info (dhcpService) - dhcpServiceDN points here
2453 cn=dhcp (dhcpServer)
2454 cn=dhcp-internal (dhcpSharedNetwork/dhcpOptions)
2455 cn=
10.0.2.0 (dhcpSubnet)
2456 cn=group1 (dhcpGroup/dhcpOptions)
2457 cn=dhcp-thinclients (dhcpSharedNetwork/dhcpOptions)
2458 cn=
192.168.0.0 (dhcpSubnet)
2459 cn=group1 (dhcpGroup/dhcpOptions)
2460 ou=machines - PowerDNS base points here
2461 cn=hostname (dhcpHost/domainrelatedobject/dnsDomainAux)
2464 <P>This is not tested yet. If the DHCP server require the dhcpHost
2465 entries to be in the dhcpGroup subtrees, the entries can be stored
2466 there instead of a common machines subtree, and the PowerDNS base
2467 would have to be moved one level up to the machine-info subtree.
</p>
2469 <p>The combined object under the machines subtree would look something
2473 dn: dc=hostname,ou=machines,cn=machine-info,dc=skole,dc=skolelinux,dc=no
2476 objectClass: dhcpHost
2477 objectclass: domainrelatedobject
2478 objectclass: dnsDomainAux
2479 associateddomain: hostname.intern
2480 arecord:
10.11.12.13
2481 dhcpHWAddress: ethernet
00:
00:
00:
00:
00:
00
2482 dhcpStatements: fixed-address hostname.intern
2485 </p>One could even add the LTSP configuration associated with a given
2486 machine, as long as the required attributes are available in a
2487 auxiliary object class.
</p>
2493 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/ldap">ldap
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
2498 <div class=
"padding"></div>
2502 <a href=
"http://people.skolelinux.org/pere/blog/Combining_PowerDNS_and_ISC_DHCP_LDAP_objects.html">Combining PowerDNS and ISC DHCP LDAP objects
</a>
2508 <p>For a while now, I have wanted to find a way to change the DNS and
2509 DHCP services in Debian Edu to use the same LDAP objects for a given
2510 computer, to avoid the possibility of having a inconsistent state for
2511 a computer in LDAP (as in DHCP but no DNS entry or the other way
2512 around) and make it easier to add computers to LDAP.
</p>
2514 <p>I've looked at how powerdns and dhcpd is using LDAP, and using this
2515 information finally found a solution that seem to work.
</p>
2517 <p>The old setup required three LDAP objects for a given computer.
2518 One forward DNS entry, one reverse DNS entry and one DHCP entry. If
2519 we switch powerdns to use its strict LDAP method (ldap-method=strict
2520 in pdns-debian-edu.conf), the forward and reverse DNS entries are
2521 merged into one while making it impossible to transfer the reverse map
2522 to a slave DNS server.
</p>
2524 <p>If we also replace the object class used to get the DNS related
2525 attributes to one allowing these attributes to be combined with the
2526 dhcphost object class, we can merge the DNS and DHCP entries into one.
2527 I've written such object class in the dnsdomainaux.schema file (need
2528 proper OIDs, but that is a minor issue), and tested the setup. It
2531 <p>With this test setup in place, we can get away with one LDAP object
2532 for both DNS and DHCP, and even the LTSP configuration I suggested in
2533 an earlier email. The combined LDAP object will look something like
2537 dn: cn=hostname,cn=group1,cn=THINCLIENTS,cn=DHCP Config,dc=skole,dc=skolelinux,dc=no
2539 objectClass: dhcphost
2540 objectclass: domainrelatedobject
2541 objectclass: dnsdomainaux
2542 associateddomain: hostname.intern
2543 arecord:
10.11.12.13
2544 dhcphwaddress: ethernet
00:
00:
00:
00:
00:
00
2545 dhcpstatements: fixed-address hostname
2549 <p>The DNS server uses the associateddomain and arecord entries, while
2550 the DHCP server uses the dhcphwaddress and dhcpstatements entries
2551 before asking DNS to resolve the fixed-adddress. LTSP will use
2552 dhcphwaddress or associateddomain and the ldapconfig* attributes.
</p>
2554 <p>I am not yet sure if I can get the DHCP server to look for its
2555 dhcphost in a different location, to allow us to put the objects
2556 outside the "DHCP Config" subtree, but hope to figure out a way to do
2557 that. If I can't figure out a way to do that, we can still get rid of
2558 the hosts subtree and move all its content into the DHCP Config tree
2559 (which probably should be renamed to be more related to the new
2560 content. I suspect cn=dnsdhcp,ou=services or something like that
2561 might be a good place to put it.
</p>
2563 <p>If you want to help out with implementing this for Debian Edu,
2564 please contact us on debian-edu@lists.debian.org.
</p>
2570 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/ldap">ldap
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
2575 <div class=
"padding"></div>
2579 <a href=
"http://people.skolelinux.org/pere/blog/Idea_for_storing_LTSP_configuration_in_LDAP.html">Idea for storing LTSP configuration in LDAP
</a>
2585 <p>Vagrant mentioned on IRC today that ltsp_config now support
2586 sourcing files from /usr/share/ltsp/ltsp_config.d/ on the thin
2587 clients, and that this can be used to fetch configuration from LDAP if
2588 Debian Edu choose to store configuration there.
</p>
2590 <p>Armed with this information, I got inspired and wrote a test module
2591 to get configuration from LDAP. The idea is to look up the MAC
2592 address of the client in LDAP, and look for attributes on the form
2593 ltspconfigsetting=value, and use this to export SETTING=value to the
2596 <p>The goal is to be able to store the LTSP configuration attributes
2597 in a "computer" LDAP object used by both DNS and DHCP, and thus
2598 allowing us to store all information about a computer in one place.
</p>
2600 <p>This is a untested draft implementation, and I welcome feedback on
2601 this approach. A real LDAP schema for the ltspClientAux objectclass
2602 need to be written. Comments, suggestions, etc?
</p>
2605 # Store in /opt/ltsp/$arch/usr/share/ltsp/ltsp_config.d/ldap-config
2607 # Fetch LTSP client settings from LDAP based on MAC address
2609 # Uses ethernet address as stored in the dhcpHost objectclass using
2610 # the dhcpHWAddress attribute or ethernet address stored in the
2611 # ieee802Device objectclass with the macAddress attribute.
2613 # This module is written to be schema agnostic, and only depend on the
2614 # existence of attribute names.
2616 # The LTSP configuration variables are saved directly using a
2617 # ltspConfig prefix and uppercasing the rest of the attribute name.
2618 # To set the SERVER variable, set the ltspConfigServer attribute.
2620 # Some LDAP schema should be created with all the relevant
2621 # configuration settings. Something like this should work:
2623 # objectclass (
1.1.2.2 NAME 'ltspClientAux'
2626 # MAY ( ltspConfigServer $ ltsConfigSound $ ... )
2628 LDAPSERVER=$(debian-edu-ldapserver)
2629 if [ "$LDAPSERVER" ] ; then
2630 LDAPBASE=$(debian-edu-ldapserver -b)
2631 for MAC in $(LANG=C ifconfig |grep -i hwaddr| awk '{print $
5}'|sort -u) ; do
2632 filter="(|(dhcpHWAddress=ethernet $MAC)(macAddress=$MAC))"
2633 ldapsearch -h "$LDAPSERVER" -b "$LDAPBASE" -v -x "$filter" | \
2634 grep '^ltspConfig' | while read attr value ; do
2635 # Remove prefix and convert to upper case
2636 attr=$(echo $attr | sed 's/^ltspConfig//i' | tr a-z A-Z)
2637 # bass value on to clients
2638 eval "$attr=$value; export $attr"
2644 <p>I'm not sure this shell construction will work, because I suspect
2645 the while block might end up in a subshell causing the variables set
2646 there to not show up in ltsp-config, but if that is the case I am sure
2647 the code can be restructured to make sure the variables are passed on.
2648 I expect that can be solved with some testing. :)
</p>
2650 <p>If you want to help out with implementing this for Debian Edu,
2651 please contact us on debian-edu@lists.debian.org.
</p>
2653 <p>Update
2010-
07-
17: I am aware of another effort to store LTSP
2654 configuration in LDAP that was created around year
2000 by
2655 <a href=
"http://www.pcxperience.com/thinclient/documentation/ldap.html">PC
2656 Xperience, Inc.,
2000</a>. I found its
2657 <a href=
"http://people.redhat.com/alikins/ltsp/ldap/">files
</a> on a
2658 personal home page over at redhat.com.
</p>
2664 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/ldap">ldap
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
2669 <div class=
"padding"></div>
2673 <a href=
"http://people.skolelinux.org/pere/blog/jXplorer__a_very_nice_LDAP_GUI.html">jXplorer, a very nice LDAP GUI
</a>
2680 <a href=
"http://people.skolelinux.org/pere/blog/LUMA__a_very_nice_LDAP_GUI.html">my
2681 last post
</a> about available LDAP tools in Debian, I was told about a
2682 LDAP GUI that is even better than luma. The java application
2683 <a href=
"http://jxplorer.org/">jXplorer
</a> is claimed to be capable of
2684 moving LDAP objects and subtrees using drag-and-drop, and can
2685 authenticate using Kerberos. I have only tested the Kerberos
2686 authentication, but do not have a LDAP setup allowing me to rewrite
2687 LDAP with my test user yet. It is
2688 <a href=
"http://packages.qa.debian.org/j/jxplorer.html">available in
2689 Debian
</a> testing and unstable at the moment. The only problem I
2690 have with it is how it handle errors. If something go wrong, its
2691 non-intuitive behaviour require me to go through some query work list
2692 and remove the failing query. Nothing big, but very annoying.
</p>
2698 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/ldap">ldap
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
2703 <div class=
"padding"></div>
2707 <a href=
"http://people.skolelinux.org/pere/blog/Lenny__Squeeze_upgrades__apt_vs_aptitude_with_the_Gnome_desktop.html">Lenny-
>Squeeze upgrades, apt vs aptitude with the Gnome desktop
</a>
2713 <p>Here is a short update on my
<a
2714 href=
"http://people.skolelinux.org/~pere/debian-upgrade-testing/">my
2715 Debian Lenny-
>Squeeze upgrade testing
</a>. Here is a summary of the
2716 difference for Gnome when it is upgraded by apt-get and aptitude. I'm
2717 not reporting the status for KDE, because the upgrade crashes when
2718 aptitude try because of missing conflicts
2719 (
<a href=
"http://bugs.debian.org/584861">#
584861</a> and
2720 <a href=
"http://bugs.debian.org/585716">#
585716</a>).
</p>
2722 <p>At the end of the upgrade test script, dpkg -l is executed to get a
2723 complete list of the installed packages. Based on this I see these
2724 differences when I did a test run today. As usual, I do not really
2725 know what the correct set of packages would be, but thought it best to
2726 publish the difference.
</p>
2728 <p>Installed using apt-get, missing with aptitude
</p>
2731 at-spi cpp-
4.3 finger gnome-spell gstreamer0.10-gnomevfs
2732 libatspi1.0-
0 libcupsys2 libeel2-data libgail-common libgdl-
1-common
2733 libgnomeprint2.2-data libgnomeprintui2.2-common libgnomevfs2-bin
2734 libgtksourceview-common libpt-
1.10.10-plugins-alsa
2735 libpt-
1.10.10-plugins-v4l libservlet2.4-java libxalan2-java
2736 libxerces2-java openoffice.org-writer2latex openssl-blacklist p7zip
2737 python-
4suite-xml python-eggtrayicon python-gtkhtml2
2738 python-gtkmozembed svgalibg1 xserver-xephyr zip
2741 <p>Installed using apt-get, removed with aptitude
</p>
2744 bluez-utils dhcdbd djvulibre-desktop epiphany-gecko
2745 gnome-app-install gnome-mount gnome-vfs-obexftp gnome-volume-manager
2746 libao2 libavahi-compat-libdnssd1 libavahi-core5 libbind9-
50
2747 libbluetooth2 libcamel1.2-
11 libcdio7 libcucul0 libcurl3
2748 libdirectfb-
1.0-
0 libdvdread3 libedata-cal1.2-
6 libedataserver1.2-
9
2749 libeel2-
2.20 libepc-
1.0-
1 libepc-ui-
1.0-
1 libexchange-storage1.2-
3
2750 libfaad0 libgd2-noxpm libgda3-
3 libgda3-common libggz2 libggzcore9
2751 libggzmod4 libgksu1.2-
0 libgksuui1.0-
1 libgmyth0 libgnome-desktop-
2
2752 libgnome-pilot2 libgnomecups1.0-
1 libgnomeprint2.2-
0
2753 libgnomeprintui2.2-
0 libgpod3 libgraphviz4 libgtkhtml2-
0
2754 libgtksourceview1.0-
0 libgucharmap6 libhesiod0 libicu38 libisccc50
2755 libisccfg50 libiw29 libkpathsea4 libltdl3 liblwres50 libmagick++
10
2756 libmagick10 libmalaga7 libmtp7 libmysqlclient15off libnautilus-burn4
2757 libneon27 libnm-glib0 libnm-util0 libopal-
2.2 libosp5
2758 libparted1.8-
10 libpisock9 libpisync1 libpoppler-glib3 libpoppler3
2759 libpt-
1.10.10 libraw1394-
8 libsensors3 libsmbios2 libsoup2.2-
8
2760 libssh2-
1 libsuitesparse-
3.1.0 libswfdec-
0.6-
90 libtalloc1
2761 libtotem-plparser10 libtrackerclient0 libvoikko1 libxalan2-java-gcj
2762 libxerces2-java-gcj libxklavier12 libxtrap6 libxxf86misc1 libzephyr3
2763 mysql-common swfdec-gnome totem-gstreamer wodim
2766 <p>Installed using aptitude, missing with apt-get
</p>
2769 gnome gnome-desktop-environment hamster-applet python-gnomeapplet
2770 python-gnomekeyring python-wnck rhythmbox-plugins xorg
2771 xserver-xorg-input-all xserver-xorg-input-evdev
2772 xserver-xorg-input-kbd xserver-xorg-input-mouse
2773 xserver-xorg-input-synaptics xserver-xorg-video-all
2774 xserver-xorg-video-apm xserver-xorg-video-ark xserver-xorg-video-ati
2775 xserver-xorg-video-chips xserver-xorg-video-cirrus
2776 xserver-xorg-video-dummy xserver-xorg-video-fbdev
2777 xserver-xorg-video-glint xserver-xorg-video-i128
2778 xserver-xorg-video-i740 xserver-xorg-video-mach64
2779 xserver-xorg-video-mga xserver-xorg-video-neomagic
2780 xserver-xorg-video-nouveau xserver-xorg-video-nv
2781 xserver-xorg-video-r128 xserver-xorg-video-radeon
2782 xserver-xorg-video-radeonhd xserver-xorg-video-rendition
2783 xserver-xorg-video-s3 xserver-xorg-video-s3virge
2784 xserver-xorg-video-savage xserver-xorg-video-siliconmotion
2785 xserver-xorg-video-sis xserver-xorg-video-sisusb
2786 xserver-xorg-video-tdfx xserver-xorg-video-tga
2787 xserver-xorg-video-trident xserver-xorg-video-tseng
2788 xserver-xorg-video-vesa xserver-xorg-video-vmware
2789 xserver-xorg-video-voodoo
2792 <p>Installed using aptitude, removed with apt-get
</p>
2795 deskbar-applet xserver-xorg xserver-xorg-core
2796 xserver-xorg-input-wacom xserver-xorg-video-intel
2797 xserver-xorg-video-openchrome
2800 <p>I was told on IRC that the xorg-xserver package was
2801 <a href=
"http://git.debian.org/?p=pkg-xorg/xserver/xorg-server.git;a=commit;h=9c8080d06c457932d3bfec021c69ac000aa60120">changed
2802 in git
</a> today to try to get apt-get to not remove xorg completely.
2803 No idea when it hits Squeeze, but when it does I hope it will reduce
2804 the difference somewhat.
2810 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
2815 <div class=
"padding"></div>
2819 <a href=
"http://people.skolelinux.org/pere/blog/LUMA__a_very_nice_LDAP_GUI.html">LUMA, a very nice LDAP GUI
</a>
2825 <p>The last few days I have been looking into the status of the LDAP
2826 directory in Debian Edu, and in the process I started to miss a GUI
2827 tool to browse the LDAP tree. The only one I was able to find in
2828 Debian/Squeeze and Lenny is
2829 <a href=
"http://luma.sourceforge.net/">LUMA
</a>, which has proved to
2830 be a great tool to get a overview of the current LDAP directory
2831 populated by default in Skolelinux. Thanks to it, I have been able to
2832 find empty and obsolete subtrees, misplaced objects and duplicate
2833 objects. It will be installed by default in Debian/Squeeze. If you
2834 are working with LDAP, give it a go. :)
</p>
2836 <p>I did notice one problem with it I have not had time to report to
2837 the BTS yet. There is no .desktop file in the package, so the tool do
2838 not show up in the Gnome and KDE menus, but only deep down in in the
2839 Debian submenu in KDE. I hope that can be fixed before Squeeze is
2842 <p>I have not yet been able to get it to modify the tree yet. I would
2843 like to move objects and remove subtrees directly in the GUI, but have
2844 not found a way to do that with LUMA yet. So in the mean time, I use
2845 <a href=
"http://www.lichteblau.com/ldapvi/">ldapvi
</a> for that.
</p>
2847 <p>If you have tips on other GUI tools for LDAP that might be useful
2848 in Debian Edu, please contact us on debian-edu@lists.debian.org.
</p>
2850 <p>Update
2010-
06-
29: Ross Reedstrom tipped us about the
2851 <a href=
"http://packages.qa.debian.org/g/gq.html">gq
</a> package as a
2852 useful GUI alternative. It seem like a good tool, but is unmaintained
2853 in Debian and got a RC bug keeping it out of Squeeze. Unless that
2854 changes, it will not be an option for Debian Edu based on Squeeze.
</p>
2860 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/ldap">ldap
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
2865 <div class=
"padding"></div>
2869 <a href=
"http://people.skolelinux.org/pere/blog/Idea_for_a_change_to_LDAP_schemas_allowing_DNS_and_DHCP_info_to_be_combined_into_one_object.html">Idea for a change to LDAP schemas allowing DNS and DHCP info to be combined into one object
</a>
2876 <a href=
"http://people.skolelinux.org/pere/blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html">complained
2877 about the fact
</a> that it is not possible with the provided schemas
2878 for storing DNS and DHCP information in LDAP to combine the two sets
2879 of information into one LDAP object representing a computer.
</p>
2881 <p>In the mean time, I discovered that a simple fix would be to make
2882 the dhcpHost object class auxiliary, to allow it to be combined with
2883 the dNSDomain object class, and thus forming one object for one
2884 computer when storing both DHCP and DNS information in LDAP.
</p>
2886 <p>If I understand this correctly, it is not safe to do this change
2887 without also changing the assigned number for the object class, and I
2888 do not know enough about LDAP schema design to do that properly for
2891 <p>Anyway, for future reference, this is how I believe we could change
2893 <a href=
"http://tools.ietf.org/html/draft-ietf-dhc-ldap-schema-00">DHCP
2894 schema
</a> to solve at least part of the problem with the LDAP schemas
2895 available today from IETF.
</p>
2898 --- dhcp.schema (revision
65192)
2899 +++ dhcp.schema (working copy)
2901 objectclass (
2.16.840.1.113719.1.203.6.6
2903 DESC 'This represents information about a particular client'
2907 MAY (dhcpLeaseDN $ dhcpHWAddress $ dhcpOptionsDN $ dhcpStatements $ dhcpComments $ dhcpOption)
2908 X-NDS_CONTAINMENT ('dhcpService' 'dhcpSubnet' 'dhcpGroup') )
2911 <p>I very much welcome clues on how to do this properly for Debian
2912 Edu/Squeeze. We provide the DHCP schema in our debian-edu-config
2913 package, and should thus be free to rewrite it as we see fit.
</p>
2915 <p>If you want to help out with implementing this for Debian Edu,
2916 please contact us on debian-edu@lists.debian.org.
</p>
2922 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/ldap">ldap
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
2927 <div class=
"padding"></div>
2931 <a href=
"http://people.skolelinux.org/pere/blog/Calling_tasksel_like_the_installer__while_still_getting_useful_output.html">Calling tasksel like the installer, while still getting useful output
</a>
2937 <p>A few times I have had the need to simulate the way tasksel
2938 installs packages during the normal debian-installer run. Until now,
2939 I have ended up letting tasksel do the work, with the annoying problem
2940 of not getting any feedback at all when something fails (like a
2941 conffile question from dpkg or a download that fails), using code like
2945 export DEBIAN_FRONTEND=noninteractive
2946 tasksel --new-install
2949 This would invoke tasksel, let its automatic task selection pick the
2950 tasks to install, and continue to install the requested tasks without
2951 any output what so ever.
2953 Recently I revisited this problem while working on the automatic
2954 package upgrade testing, because tasksel would some times hang without
2955 any useful feedback, and I want to see what is going on when it
2956 happen. Then it occured to me, I can parse the output from tasksel
2957 when asked to run in test mode, and use that aptitude command line
2958 printed by tasksel then to simulate the tasksel run. I ended up using
2962 export DEBIAN_FRONTEND=noninteractive
2963 cmd="$(in_target tasksel -t --new-install | sed 's/debconf-apt-progress -- //')"
2967 <p>The content of $cmd is typically something like "
<tt>aptitude -q
2968 --without-recommends -o APT::Install-Recommends=no -y install
2969 ~t^desktop$ ~t^gnome-desktop$ ~t^laptop$ ~pstandard ~prequired
2970 ~pimportant
</tt>", which will install the gnome desktop task, the
2971 laptop task and all packages with priority standard , required and
2972 important, just like tasksel would have done it during
2975 <p>A better approach is probably to extend tasksel to be able to
2976 install packages without using debconf-apt-progress, for use cases
2983 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian
">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug
">nuug</a>.
2988 <div class="padding
"></div>
2992 <a href="http://people.skolelinux.org/pere/blog/Lenny__Squeeze_upgrades__removals_by_apt_and_aptitude.html
">Lenny->Squeeze upgrades, removals by apt and aptitude</a>
2999 <a href="http://people.skolelinux.org/pere/blog/Automatic_upgrade_testing_from_Lenny_to_Squeeze.html
">testing
3000 of Debian upgrades</a> from Lenny to Squeeze continues, and I've
3001 finally made the upgrade logs available from
3002 <a href="http://people.skolelinux.org/pere/debian-upgrade-testing/
">http://people.skolelinux.org/pere/debian-upgrade-testing/</a>.
3003 I am now testing dist-upgrade of Gnome and KDE in a chroot using both
3004 apt and aptitude, and found their differences interesting. This time
3005 I will only focus on their removal plans.</p>
3007 <p>After installing a Gnome desktop and the laptop task, apt-get wants
3008 to remove 72 packages when dist-upgrading from Lenny to Squeeze. The
3009 surprising part is that it want to remove xorg and all
3010 xserver-xorg-video* drivers. Clearly not a good choice, but I am not
3011 sure why. When asking aptitude to do the same, it want to remove 129
3012 packages, but most of them are library packages I suspect are no
3013 longer needed. Both of them want to remove bluetooth packages, which
3014 I do not know. Perhaps these bluetooth packages are obsolete?</p>
3016 <p>For KDE, apt-get want to remove 82 packages, among them kdebase
3017 which seem like a bad idea and xorg the same way as with Gnome. Asking
3018 aptitude for the same, it wants to remove 192 packages, none which are
3021 <p>I guess the removal of xorg during upgrades should be investigated
3022 and avoided, and perhaps others as well. Here are the complete list
3023 of planned removals. The complete logs is available from the URL
3024 above. Note if you want to repeat these tests, that the upgrade test
3025 for kde+apt-get hung in the tasksel setup because of dpkg asking
3026 conffile questions. No idea why. I worked around it by using
3027 '<tt>echo >> /proc/<em>pidofdpkg</em>/fd/0</tt>' to tell dpkg to
3030 <p><b>apt-get gnome 72</b>
3031 <br>bluez-gnome cupsddk-drivers deskbar-applet gnome
3032 gnome-desktop-environment gnome-network-admin gtkhtml3.14
3033 iceweasel-gnome-support libavcodec51 libdatrie0 libgdl-1-0
3034 libgnomekbd2 libgnomekbdui2 libmetacity0 libslab0 libxcb-xlib0
3035 nautilus-cd-burner python-gnome2-desktop python-gnome2-extras
3036 serpentine swfdec-mozilla update-manager xorg xserver-xorg
3037 xserver-xorg-core xserver-xorg-input-all xserver-xorg-input-evdev
3038 xserver-xorg-input-kbd xserver-xorg-input-mouse
3039 xserver-xorg-input-synaptics xserver-xorg-input-wacom
3040 xserver-xorg-video-all xserver-xorg-video-apm xserver-xorg-video-ark
3041 xserver-xorg-video-ati xserver-xorg-video-chips
3042 xserver-xorg-video-cirrus xserver-xorg-video-cyrix
3043 xserver-xorg-video-dummy xserver-xorg-video-fbdev
3044 xserver-xorg-video-glint xserver-xorg-video-i128
3045 xserver-xorg-video-i740 xserver-xorg-video-imstt
3046 xserver-xorg-video-intel xserver-xorg-video-mach64
3047 xserver-xorg-video-mga xserver-xorg-video-neomagic
3048 xserver-xorg-video-nsc xserver-xorg-video-nv
3049 xserver-xorg-video-openchrome xserver-xorg-video-r128
3050 xserver-xorg-video-radeon xserver-xorg-video-radeonhd
3051 xserver-xorg-video-rendition xserver-xorg-video-s3
3052 xserver-xorg-video-s3virge xserver-xorg-video-savage
3053 xserver-xorg-video-siliconmotion xserver-xorg-video-sis
3054 xserver-xorg-video-sisusb xserver-xorg-video-tdfx
3055 xserver-xorg-video-tga xserver-xorg-video-trident
3056 xserver-xorg-video-tseng xserver-xorg-video-v4l
3057 xserver-xorg-video-vesa xserver-xorg-video-vga
3058 xserver-xorg-video-vmware xserver-xorg-video-voodoo xulrunner-1.9
3059 xulrunner-1.9-gnome-support</p>
3061 <p><b>aptitude gnome 129</b>
3063 <br>bluez-gnome bluez-utils cpp-4.3 cupsddk-drivers dhcdbd
3064 djvulibre-desktop finger gnome-app-install gnome-mount
3065 gnome-network-admin gnome-spell gnome-vfs-obexftp
3066 gnome-volume-manager gstreamer0.10-gnomevfs gtkhtml3.14 libao2
3067 libavahi-compat-libdnssd1 libavahi-core5 libavcodec51 libbluetooth2
3068 libcamel1.2-11 libcdio7 libcucul0 libcupsys2 libcurl3 libdatrie0
3069 libdirectfb-1.0-0 libdvdread3 libedataserver1.2-9 libeel2-2.20
3070 libeel2-data libepc-1.0-1 libepc-ui-1.0-1 libfaad0 libgail-common
3071 libgd2-noxpm libgda3-3 libgda3-common libgdl-1-0 libgdl-1-common
3072 libggz2 libggzcore9 libggzmod4 libgksu1.2-0 libgksuui1.0-1 libgmyth0
3073 libgnomecups1.0-1 libgnomekbd2 libgnomekbdui2 libgnomeprint2.2-0
3074 libgnomeprint2.2-data libgnomeprintui2.2-0 libgnomeprintui2.2-common
3075 libgnomevfs2-bin libgpod3 libgraphviz4 libgtkhtml2-0
3076 libgtksourceview-common libgtksourceview1.0-0 libgucharmap6
3077 libhesiod0 libicu38 libiw29 libkpathsea4 libltdl3 libmagick++10
3078 libmagick10 libmalaga7 libmetacity0 libmtp7 libmysqlclient15off
3079 libnautilus-burn4 libneon27 libnm-glib0 libnm-util0 libopal-2.2
3080 libosp5 libparted1.8-10 libpoppler-glib3 libpoppler3 libpt-1.10.10
3081 libpt-1.10.10-plugins-alsa libpt-1.10.10-plugins-v4l libraw1394-8
3082 libsensors3 libslab0 libsmbios2 libsoup2.2-8 libssh2-1
3083 libsuitesparse-3.1.0 libswfdec-0.6-90 libtalloc1 libtotem-plparser10
3084 libtrackerclient0 libxalan2-java libxalan2-java-gcj libxcb-xlib0
3085 libxerces2-java libxerces2-java-gcj libxklavier12 libxtrap6
3086 libxxf86misc1 libzephyr3 mysql-common nautilus-cd-burner
3087 openoffice.org-writer2latex openssl-blacklist p7zip
3088 python-4suite-xml python-eggtrayicon python-gnome2-desktop
3089 python-gnome2-extras python-gtkhtml2 python-gtkmozembed
3090 python-numeric python-sexy serpentine svgalibg1 swfdec-gnome
3091 swfdec-mozilla totem-gstreamer update-manager wodim
3092 xserver-xorg-video-cyrix xserver-xorg-video-imstt
3093 xserver-xorg-video-nsc xserver-xorg-video-v4l xserver-xorg-video-vga
3096 <p><b>apt-get kde 82</b>
3098 <br>cupsddk-drivers karm kaudiocreator kcoloredit kcontrol kde kde-core
3099 kdeaddons kdeartwork kdebase kdebase-bin kdebase-bin-kde3
3100 kdebase-kio-plugins kdesktop kdeutils khelpcenter kicker
3101 kicker-applets knewsticker kolourpaint konq-plugins konqueror korn
3102 kpersonalizer kscreensaver ksplash libavcodec51 libdatrie0 libkiten1
3103 libxcb-xlib0 quanta superkaramba texlive-base-bin xorg xserver-xorg
3104 xserver-xorg-core xserver-xorg-input-all xserver-xorg-input-evdev
3105 xserver-xorg-input-kbd xserver-xorg-input-mouse
3106 xserver-xorg-input-synaptics xserver-xorg-input-wacom
3107 xserver-xorg-video-all xserver-xorg-video-apm xserver-xorg-video-ark
3108 xserver-xorg-video-ati xserver-xorg-video-chips
3109 xserver-xorg-video-cirrus xserver-xorg-video-cyrix
3110 xserver-xorg-video-dummy xserver-xorg-video-fbdev
3111 xserver-xorg-video-glint xserver-xorg-video-i128
3112 xserver-xorg-video-i740 xserver-xorg-video-imstt
3113 xserver-xorg-video-intel xserver-xorg-video-mach64
3114 xserver-xorg-video-mga xserver-xorg-video-neomagic
3115 xserver-xorg-video-nsc xserver-xorg-video-nv
3116 xserver-xorg-video-openchrome xserver-xorg-video-r128
3117 xserver-xorg-video-radeon xserver-xorg-video-radeonhd
3118 xserver-xorg-video-rendition xserver-xorg-video-s3
3119 xserver-xorg-video-s3virge xserver-xorg-video-savage
3120 xserver-xorg-video-siliconmotion xserver-xorg-video-sis
3121 xserver-xorg-video-sisusb xserver-xorg-video-tdfx
3122 xserver-xorg-video-tga xserver-xorg-video-trident
3123 xserver-xorg-video-tseng xserver-xorg-video-v4l
3124 xserver-xorg-video-vesa xserver-xorg-video-vga
3125 xserver-xorg-video-vmware xserver-xorg-video-voodoo xulrunner-1.9</p>
3127 <p><b>aptitude kde 192</b>
3128 <br>bluez-utils cpp-4.3 cupsddk-drivers cvs dcoprss dhcdbd
3129 djvulibre-desktop dosfstools eyesapplet fifteenapplet finger gettext
3130 ghostscript-x imlib-base imlib11 indi kandy karm kasteroids
3131 kaudiocreator kbackgammon kbstate kcoloredit kcontrol kcron kdat
3132 kdeadmin-kfile-plugins kdeartwork-misc kdeartwork-theme-window
3133 kdebase-bin-kde3 kdebase-kio-plugins kdeedu-data
3134 kdegraphics-kfile-plugins kdelirc kdemultimedia-kappfinder-data
3135 kdemultimedia-kfile-plugins kdenetwork-kfile-plugins
3136 kdepim-kfile-plugins kdepim-kio-plugins kdeprint kdesktop kdessh
3137 kdict kdnssd kdvi kedit keduca kenolaba kfax kfaxview kfouleggs
3138 kghostview khelpcenter khexedit kiconedit kitchensync klatin
3139 klickety kmailcvt kmenuedit kmid kmilo kmoon kmrml kodo kolourpaint
3140 kooka korn kpager kpdf kpercentage kpf kpilot kpoker kpovmodeler
3141 krec kregexpeditor ksayit ksim ksirc ksirtet ksmiletris ksmserver
3142 ksnake ksokoban ksplash ksvg ksysv ktip ktnef kuickshow kverbos
3143 kview kviewshell kvoctrain kwifimanager kwin kwin4 kworldclock
3144 kxsldbg libakode2 libao2 libarts1-akode libarts1-audiofile
3145 libarts1-mpeglib libarts1-xine libavahi-compat-libdnssd1
3146 libavahi-core5 libavc1394-0 libavcodec51 libbluetooth2
3147 libboost-python1.34.1 libcucul0 libcurl3 libcvsservice0 libdatrie0
3148 libdirectfb-1.0-0 libdjvulibre21 libdvdread3 libfaad0 libfreebob0
3149 libgail-common libgd2-noxpm libgraphviz4 libgsmme1c2a libgtkhtml2-0
3150 libicu38 libiec61883-0 libindex0 libiw29 libk3b3 libkcal2b libkcddb1
3151 libkdeedu3 libkdepim1a libkgantt0 libkiten1 libkleopatra1 libkmime2
3152 libkpathsea4 libkpimexchange1 libkpimidentities1 libkscan1
3153 libksieve0 libktnef1 liblockdev1 libltdl3 libmagick10 libmimelib1c2a
3154 libmozjs1d libmpcdec3 libneon27 libnm-util0 libopensync0 libpisock9
3155 libpoppler-glib3 libpoppler-qt2 libpoppler3 libraw1394-8 libsmbios2
3156 libssh2-1 libsuitesparse-3.1.0 libtalloc1 libtiff-tools
3157 libxalan2-java libxalan2-java-gcj libxcb-xlib0 libxerces2-java
3158 libxerces2-java-gcj libxtrap6 mpeglib networkstatus
3159 openoffice.org-writer2latex pmount poster psutils quanta quanta-data
3160 superkaramba svgalibg1 tex-common texlive-base texlive-base-bin
3161 texlive-common texlive-doc-base texlive-fonts-recommended
3162 xserver-xorg-video-cyrix xserver-xorg-video-imstt
3163 xserver-xorg-video-nsc xserver-xorg-video-v4l xserver-xorg-video-vga
3171 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian
">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu
">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>.
3176 <div class="padding
"></div>
3180 <a href="http://people.skolelinux.org/pere/blog/Automatic_upgrade_testing_from_Lenny_to_Squeeze.html
">Automatic upgrade testing from Lenny to Squeeze</a>
3186 <p>The last few days I have done some upgrade testing in Debian, to
3187 see if the upgrade from Lenny to Squeeze will go smoothly. A few bugs
3188 have been discovered and reported in the process
3189 (<a href="http://bugs.debian.org/
585410">#585410</a> in nagios3-cgi,
3190 <a href="http://bugs.debian.org/
584879">#584879</a> already fixed in
3191 enscript and <a href="http://bugs.debian.org/
584861">#584861</a> in
3192 kdebase-workspace-data), and to get a more regular testing going on, I
3193 am working on a script to automate the test.</p>
3195 <p>The idea is to create a Lenny chroot and use tasksel to install a
3196 Gnome or KDE desktop installation inside the chroot before upgrading
3197 it. To ensure no services are started in the chroot, a policy-rc.d
3198 script is inserted. To make sure tasksel believe it is to install a
3199 desktop on a laptop, the tasksel tests are replaced in the chroot
3200 (only acceptable because this is a throw-away chroot).</p>
3202 <p>A naive upgrade from Lenny to Squeeze using aptitude dist-upgrade
3203 currently always fail because udev refuses to upgrade with the kernel
3204 in Lenny, so to avoid that problem the file /etc/udev/kernel-upgrade
3205 is created. The bug report
3206 <a href="http://bugs.debian.org/
566000">#566000</a> make me suspect
3207 this problem do not trigger in a chroot, but I touch the file anyway
3208 to make sure the upgrade go well. Testing on virtual and real
3209 hardware have failed me because of udev so far, and creating this file
3210 do the trick in such settings anyway. This is a
3211 <a href="http://www.linuxquestions.org/questions/debian-
26/failed-dist-upgrade-due-to-udev-config_sysfs_deprecated-nonsense-
804130/
">known
3212 issue</a> and the current udev behaviour is intended by the udev
3213 maintainer because he lack the resources to rewrite udev to keep
3214 working with old kernels or something like that. I really wish the
3215 udev upstream would keep udev backwards compatible, to avoid such
3216 upgrade problem, but given that they fail to do so, I guess
3217 documenting the way out of this mess is the best option we got for
3220 <p>Anyway, back to the task at hand, testing upgrades. This test
3221 script, which I call <tt>upgrade-test</tt> for now, is doing the
3239 mirror=http://ftp.skolelinux.org/debian
3240 tmpdir=chroot-$from-upgrade-$to-$desktop
3242 debootstrap $from $tmpdir $mirror
3243 chroot $tmpdir aptitude update
3244 cat
> $tmpdir/usr/sbin/policy-rc.d
<<EOF
3248 chmod a+rx $tmpdir/usr/sbin/policy-rc.d
3252 mount -t proc proc $tmpdir/proc
3253 # Make sure proc is unmounted also on failure
3254 trap exit_cleanup EXIT INT
3256 chroot $tmpdir aptitude -y install debconf-utils
3258 # Make sure tasksel autoselection trigger. It need the test scripts
3259 # to return the correct answers.
3260 echo tasksel tasksel/desktop multiselect $desktop | \
3261 chroot $tmpdir debconf-set-selections
3263 # Include the desktop and laptop task
3264 for test in desktop laptop ; do
3265 echo
> $tmpdir/usr/lib/tasksel/tests/$test
<<EOF
3269 chmod a+rx $tmpdir/usr/lib/tasksel/tests/$test
3272 DEBIAN_FRONTEND=noninteractive
3273 DEBIAN_PRIORITY=critical
3274 export DEBIAN_FRONTEND DEBIAN_PRIORITY
3275 chroot $tmpdir tasksel --new-install
3277 echo deb $mirror $to main
> $tmpdir/etc/apt/sources.list
3278 chroot $tmpdir aptitude update
3279 touch $tmpdir/etc/udev/kernel-upgrade
3280 chroot $tmpdir aptitude -y dist-upgrade
3284 <p>I suspect it would be useful to test upgrades with both apt-get and
3285 with aptitude, but I have not had time to look at how they behave
3286 differently so far. I hope to get a cron job running to do the test
3287 regularly and post the result on the web. The Gnome upgrade currently
3288 work, while the KDE upgrade fail because of the bug in
3289 kdebase-workspace-data
</p>
3291 <p>I am not quite sure what kind of extract from the huge upgrade logs
3292 (KDE
167 KiB, Gnome
516 KiB) it make sense to include in this blog
3293 post, so I will refrain from trying. I can report that for Gnome,
3294 aptitude report
760 packages upgraded,
448 newly installed,
129 to
3295 remove and
1 not upgraded and
1024MB need to be downloaded while for
3296 KDE the same numbers are
702 packages upgraded,
507 newly installed,
3297 193 to remove and
0 not upgraded and
1117MB need to be downloaded
</p>
3299 <p>I am very happy to notice that the Gnome desktop + laptop upgrade
3300 is able to migrate to dependency based boot sequencing and parallel
3301 booting without a hitch. Was unsure if there were still bugs with
3302 packages failing to clean up their obsolete init.d script during
3303 upgrades, and no such problem seem to affect the Gnome desktop+laptop
3310 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
3315 <div class=
"padding"></div>
3319 <a href=
"http://people.skolelinux.org/pere/blog/Upstart_or_sysvinit___as_init_d_scripts_see_it.html">Upstart or sysvinit - as init.d scripts see it
</a>
3325 <p>If Debian is to migrate to upstart on Linux, I expect some init.d
3326 scripts to migrate (some of) their operations to upstart job while
3327 keeping the init.d for hurd and kfreebsd. The packages with such
3328 needs will need a way to get their init.d scripts to behave
3329 differently when used with sysvinit and with upstart. Because of
3330 this, I had a look at the environment variables set when a init.d
3331 script is running under upstart, and when it is not.
</p>
3333 <p>With upstart, I notice these environment variables are set when a
3334 script is started from rcS.d/ (ignoring some irrelevant ones like
3343 UPSTART_EVENTS=startup
3345 UPSTART_JOB=rc-sysinit
3348 <p>With sysvinit, these environment variables are set for the same
3352 INIT_VERSION=sysvinit-
2.88
3359 <p>The RUNLEVEL and PREVLEVEL environment variables passed on from
3360 sysvinit are not set by upstart. Not sure if it is intentional or not
3361 to not be compatible with sysvinit in this regard.
</p>
3363 <p>For scripts needing to behave differently when upstart is used,
3364 looking for the UPSTART_JOB environment variable seem to be a good
3371 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
3376 <div class=
"padding"></div>
3380 <a href=
"http://people.skolelinux.org/pere/blog/A_manual_for_standards_wars___.html">A manual for standards wars...
</a>
3387 <a href=
"http://feedproxy.google.com/~r/robweir/antic-atom/~3/QzU4RgoAGMg/weekly-links-10.html">blog
3388 of Rob Weir
</a> I came across the very interesting essay named
3389 <a href=
"http://faculty.haas.berkeley.edu/shapiro/wars.pdf">The Art of
3390 Standards Wars
</a> (PDF
25 pages). I recommend it for everyone
3391 following the standards wars of today.
</p>
3397 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/standard">standard
</a>.
3402 <div class=
"padding"></div>
3406 <a href=
"http://people.skolelinux.org/pere/blog/Sitesummary_tip__Listing_computer_hardware_models_used_at_site.html">Sitesummary tip: Listing computer hardware models used at site
</a>
3412 <p>When using sitesummary at a site to track machines, it is possible
3413 to get a list of the machine types in use thanks to the DMI
3414 information extracted from each machine. The script to do so is
3415 included in the sitesummary package, and here is example output from
3416 the Skolelinux build servers:
</p>
3419 maintainer:~# /usr/lib/sitesummary/hardware-model-summary
3421 Dell Computer Corporation
1
3424 eserver xSeries
345 -[
8670M1X]-
1
3430 <p>The quality of the report depend on the quality of the DMI tables
3431 provided in each machine. Here there are Intel machines without model
3432 information listed with Intel as vendor and no model, and virtual Xen
3433 machines listed as [no-dmi-info]. One can add -l as a command line
3434 option to list the individual machines.
</p>
3437 <a href=
"http://narvikskolen.no/sitesummary/">available from the the
3438 city of Narvik
</a>, which uses Skolelinux on all their shools and also
3439 provide the basic sitesummary report publicly. In their report there
3440 are ~
1400 machines. I know they use both Ubuntu and Skolelinux on
3441 their machines, and as sitesummary is available in both distributions,
3442 it is trivial to get all of them to report to the same central
3449 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary
</a>.
3454 <div class=
"padding"></div>
3458 <a href=
"http://people.skolelinux.org/pere/blog/KDM_fail_at_boot_with_NVidia_cards___and_no_one_try_to_fix_it_.html">KDM fail at boot with NVidia cards - and no one try to fix it?
</a>
3464 <p>It is strange to watch how a bug in Debian causing KDM to fail to
3465 start at boot when an NVidia video card is used is handled. The
3466 problem seem to be that the nvidia X.org driver uses a long time to
3467 initialize, and this duration is longer than kdm is configured to
3470 <p>I came across two bugs related to this issue,
3471 <a href=
"http://bugs.debian.org/583312">#
583312</a> initially filed
3472 against initscripts and passed on to nvidia-glx when it became obvious
3473 that the nvidia drivers were involved, and
3474 <a href=
"http://bugs.debian.org/524751">#
524751</a> initially filed against
3475 kdm and passed on to src:nvidia-graphics-drivers for unknown reasons.
</p>
3477 <p>To me, it seem that no-one is interested in actually solving the
3478 problem nvidia video card owners experience and make sure the Debian
3479 distribution work out of the box for these users. The nvidia driver
3480 maintainers expect kdm to be set up to wait longer, while kdm expect
3481 the nvidia driver maintainers to fix the driver to start faster, and
3482 while they wait for each other I guess the users end up switching to a
3483 distribution that work for them. I have no idea what the solution is,
3484 but I am pretty sure that waiting for each other is not it.
</p>
3486 <p>I wonder why we end up handling bugs this way.
</p>
3492 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
3497 <div class=
"padding"></div>
3501 <a href=
"http://people.skolelinux.org/pere/blog/Parallellized_boot_seem_to_hold_up_well_in_Debian_testing.html">Parallellized boot seem to hold up well in Debian/testing
</a>
3507 <p>A few days ago, parallel booting was enabled in Debian/testing.
3508 The feature seem to hold up pretty well, but three fairly serious
3509 issues are known and should be solved:
3513 <li>The wicd package seen to
3514 <a href=
"http://bugs.debian.org/508289">break NFS mounting
</a> and
3515 <a href=
"http://bugs.debian.org/581586">network setup
</a> when
3516 parallel booting is enabled. No idea why, but the wicd maintainer
3517 seem to be on the case.
</li>
3519 <li>The nvidia X driver seem to
3520 <a href=
"http://bugs.debian.org/583312">have a race condition
</a>
3521 triggered more easily when parallel booting is in effect. The
3522 maintainer is on the case.
</li>
3524 <li>The sysv-rc package fail to properly enable dependency based boot
3525 sequencing (the shutdown is broken) when old file-rc users
3526 <a href=
"http://bugs.debian.org/575080">try to switch back
</a> to
3527 sysv-rc. One way to solve it would be for file-rc to create
3528 /etc/init.d/.legacy-bootordering, and another is to try to make
3529 sysv-rc more robust. Will investigate some more and probably upload a
3530 workaround in sysv-rc to help those trying to move from file-rc to
3531 sysv-rc get a working shutdown.
</li>
3535 <p>All in all not many surprising issues, and all of them seem
3536 solvable before Squeeze is released. In addition to these there are
3537 some packages with bugs in their dependencies and run level settings,
3538 which I expect will be fixed in a reasonable time span.
</p>
3540 <p>If you report any problems with dependencies in init.d scripts to
3541 the BTS, please usertag the report to get it to show up at
3542 <a href=
"http://bugs.debian.org/cgi-bin/pkgreport.cgi?users=initscripts-ng-devel@lists.alioth.debian.org">the
3543 list of usertagged bugs related to this
</a>.
</p>
3545 <p>Update: Correct bug number to file-rc issue.
</p>
3551 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
3556 <div class=
"padding"></div>
3560 <a href=
"http://people.skolelinux.org/pere/blog/More_flexible_firmware_handling_in_debian_installer.html">More flexible firmware handling in debian-installer
</a>
3566 <p>After a long break from debian-installer development, I finally
3567 found time today to return to the project. Having to spend less time
3568 working dependency based boot in debian, as it is almost complete now,
3569 definitely helped freeing some time.
</p>
3571 <p>A while back, I ran into a problem while working on Debian Edu. We
3572 include some firmware packages on the Debian Edu CDs, those needed to
3573 get disk and network controllers working. Without having these
3574 firmware packages available during installation, it is impossible to
3575 install Debian Edu on the given machine, and because our target group
3576 are non-technical people, asking them to provide firmware packages on
3577 an external medium is a support pain. Initially, I expected it to be
3578 enough to include the firmware packages on the CD to get
3579 debian-installer to find and use them. This proved to be wrong.
3580 Next, I hoped it was enough to symlink the relevant firmware packages
3581 to some useful location on the CD (tried /cdrom/ and
3582 /cdrom/firmware/). This also proved to not work, and at this point I
3583 found time to look at the debian-installer code to figure out what was
3586 <p>The firmware loading code is in the hw-detect package, and a closer
3587 look revealed that it would only look for firmware packages outside
3588 the installation media, so the CD was never checked for firmware
3589 packages. It would only check USB sticks, floppies and other
3590 "external" media devices. Today I changed it to also look in the
3591 /cdrom/firmware/ directory on the mounted CD or DVD, which should
3592 solve the problem I ran into with Debian edu. I also changed it to
3593 look in /firmware/, to make sure the installer also find firmware
3594 provided in the initrd when booting the installer via PXE, to allow us
3595 to provide the same feature in the PXE setup included in Debian
3598 <p>To make sure firmware deb packages with a license questions are not
3599 activated without asking if the license is accepted, I extended
3600 hw-detect to look for preinst scripts in the firmware packages, and
3601 run these before activating the firmware during installation. The
3602 license question is asked using debconf in the preinst, so this should
3603 solve the issue for the firmware packages I have looked at so far.
</p>
3605 <p>If you want to discuss the details of these features, please
3606 contact us on debian-boot@lists.debian.org.
</p>
3612 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
3617 <div class=
"padding"></div>
3621 <a href=
"http://people.skolelinux.org/pere/blog/Parallellized_boot_is_now_the_default_in_Debian_unstable.html">Parallellized boot is now the default in Debian/unstable
</a>
3627 <p>Since this evening, parallel booting is the default in
3628 Debian/unstable for machines using dependency based boot sequencing.
3629 Apparently the testing of concurrent booting has been wider than
3630 expected, if I am to believe the
3631 <a href=
"http://lists.debian.org/debian-devel/2010/05/msg00122.html">input
3632 on debian-devel@
</a>, and I concluded a few days ago to move forward
3633 with the feature this weekend, to give us some time to detect any
3634 remaining problems before Squeeze is frozen. If serious problems are
3635 detected, it is simple to change the default back to sequential boot.
3636 The upload of the new sysvinit package also activate a new upstream
3639 More information about
3640 <a href=
"http://wiki.debian.org/LSBInitScripts/DependencyBasedBoot">dependency
3641 based boot sequencing
</a> is available from the Debian wiki. It is
3642 currently possible to disable parallel booting when one run into
3643 problems caused by it, by adding this line to /etc/default/rcS:
</p>
3649 <p>If you report any problems with dependencies in init.d scripts to
3650 the BTS, please usertag the report to get it to show up at
3651 <a href=
"http://bugs.debian.org/cgi-bin/pkgreport.cgi?users=initscripts-ng-devel@lists.alioth.debian.org">the
3652 list of usertagged bugs related to this
</a>.
</p>
3658 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
3663 <div class=
"padding"></div>
3667 <a href=
"http://people.skolelinux.org/pere/blog/Sitesummary_tip__Listing_MAC_address_of_all_clients.html">Sitesummary tip: Listing MAC address of all clients
</a>
3673 <p>In the recent Debian Edu versions, the
3674 <a href=
"http://wiki.debian.org/DebianEdu/HowTo/SiteSummary">sitesummary
3675 system
</a> is used to keep track of the machines in the school
3676 network. Each machine will automatically report its status to the
3677 central server after boot and once per night. The network setup is
3678 also reported, and using this information it is possible to get the
3679 MAC address of all network interfaces in the machines. This is useful
3680 to update the DHCP configuration.
</p>
3682 <p>To give some idea how to use sitesummary, here is a one-liner to
3683 ist all MAC addresses of all machines reporting to sitesummary. Run
3684 this on the collector host:
</p>
3687 perl -MSiteSummary -e 'for_all_hosts(sub { print join(" ", get_macaddresses(shift)), "\n"; });'
3690 <p>This will list all MAC addresses assosiated with all machine, one
3691 line per machine and with space between the MAC addresses.
</p>
3693 <p>To allow system administrators easier job at adding static DHCP
3694 addresses for hosts, it would be possible to extend this to fetch
3695 machine information from sitesummary and update the DHCP and DNS
3696 tables in LDAP using this information. Such tool is unfortunately not
3703 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary
</a>.
3708 <div class=
"padding"></div>
3712 <a href=
"http://people.skolelinux.org/pere/blog/systemd__an_interesting_alternative_to_upstart.html">systemd, an interesting alternative to upstart
</a>
3718 <p>The last few days a new boot system called
3719 <a href=
"http://www.freedesktop.org/wiki/Software/systemd">systemd
</a>
3721 <a href=
"http://0pointer.de/blog/projects/systemd.html">introduced
</a>
3723 to the free software world. I have not yet had time to play around
3724 with it, but it seem to be a very interesting alternative to
3725 <a href=
"http://upstart.ubuntu.com/">upstart
</a>, and might prove to be
3726 a good alternative for Debian when we are able to switch to an event
3727 based boot system. Tollef is
3728 <a href=
"http://bugs.debian.org/580814">in the process
</a> of getting
3729 systemd into Debian, and I look forward to seeing how well it work. I
3730 like the fact that systemd handles init.d scripts with dependency
3731 information natively, allowing them to run in parallel where upstart
3732 at the moment do not.
</p>
3734 <p>Unfortunately do systemd have the same problem as upstart regarding
3735 platform support. It only work on recent Linux kernels, and also need
3736 some new kernel features enabled to function properly. This means
3737 kFreeBSD and Hurd ports of Debian will need a port or a different boot
3738 system. Not sure how that will be handled if systemd proves to be the
3741 <p>In the mean time, based on the
3742 <a href=
"http://lists.debian.org/debian-devel/2010/05/msg00122.html">input
3743 on debian-devel@
</a> regarding parallel booting in Debian, I have
3744 decided to enable full parallel booting as the default in Debian as
3745 soon as possible (probably this weekend or early next week), to see if
3746 there are any remaining serious bugs in the init.d dependencies. A
3747 new version of the sysvinit package implementing this change is
3748 already in experimental. If all go well, Squeeze will be released
3749 with parallel booting enabled by default.
</p>
3755 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
3760 <div class=
"padding"></div>
3764 <a href=
"http://people.skolelinux.org/pere/blog/Parallellizing_the_boot_in_Debian_Squeeze___ready_for_wider_testing.html">Parallellizing the boot in Debian Squeeze - ready for wider testing
</a>
3770 <p>These days, the init.d script dependencies in Squeeze are quite
3771 complete, so complete that it is actually possible to run all the
3772 init.d scripts in parallell based on these dependencies. If you want
3773 to test your Squeeze system, make sure
3774 <a href=
"http://wiki.debian.org/LSBInitScripts/DependencyBasedBoot">dependency
3775 based boot sequencing
</a> is enabled, and add this line to
3776 /etc/default/rcS:
</p>
3779 CONCURRENCY=makefile
3782 <p>That is it. It will cause sysv-rc to use the startpar tool to run
3783 scripts in parallel using the dependency information stored in
3784 /etc/init.d/.depend.boot, /etc/init.d/.depend.start and
3785 /etc/init.d/.depend.stop to order the scripts. Startpar is configured
3786 to try to start the kdm and gdm scripts as early as possible, and will
3787 start the facilities required by kdm or gdm as early as possible to
3788 make this happen.
</p>
3790 <p>Give it a try, and see if you like the result. If some services
3791 fail to start properly, it is most likely because they have incomplete
3792 init.d script dependencies in their startup script (or some of their
3793 dependent scripts have incomplete dependencies). Report bugs and get
3794 the package maintainers to fix it. :)
</p>
3796 <p>Running scripts in parallel could be the default in Debian when we
3797 manage to get the init.d script dependencies complete and correct. I
3798 expect we will get there in Squeeze+
1, if we get manage to test and
3799 fix the remaining issues.
</p>
3801 <p>If you report any problems with dependencies in init.d scripts to
3802 the BTS, please usertag the report to get it to show up at
3803 <a href=
"http://bugs.debian.org/cgi-bin/pkgreport.cgi?users=initscripts-ng-devel@lists.alioth.debian.org">the
3804 list of usertagged bugs related to this
</a>.
</p>
3810 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
3815 <div class=
"padding"></div>
3819 <a href=
"http://people.skolelinux.org/pere/blog/Debian_has_switched_to_dependency_based_boot_sequencing.html">Debian has switched to dependency based boot sequencing
</a>
3825 <p>Since this evening, with the upload of sysvinit version
2.87dsf-
2,
3826 and the upload of insserv version
1.12.0-
10 yesterday, Debian unstable
3827 have been migrated to using dependency based boot sequencing. This
3828 conclude work me and others have been doing for the last three days.
3829 It feels great to see this finally part of the default Debian
3830 installation. Now we just need to weed out the last few problems that
3831 are bound to show up, to get everything ready for Squeeze.
</p>
3833 <p>The next step is migrating /sbin/init from sysvinit to upstart, and
3834 fixing the more fundamental problem of handing the event based
3835 non-predictable kernel in the early boot.
</p>
3841 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
3846 <div class=
"padding"></div>
3850 <a href=
"http://people.skolelinux.org/pere/blog/Taking_over_sysvinit_development.html">Taking over sysvinit development
</a>
3856 <p>After several years of frustration with the lack of activity from
3857 the existing sysvinit upstream developer, I decided a few weeks ago to
3858 take over the package and become the new upstream. The number of
3859 patches to track for the Debian package was becoming a burden, and the
3860 lack of synchronization between the distribution made it hard to keep
3861 the package up to date.
</p>
3863 <p>On the new sysvinit team is the SuSe maintainer Dr. Werner Fink,
3864 and my Debian co-maintainer Kel Modderman. About
10 days ago, I made
3865 a new upstream tarball with version number
2.87dsf (for Debian, SuSe
3866 and Fedora), based on the patches currently in use in these
3867 distributions. We Debian maintainers plan to move to this tarball as
3868 the new upstream as soon as we find time to do the merge. Since the
3869 new tarball was created, we agreed with Werner at SuSe to make a new
3870 upstream project at
<a href=
"http://savannah.nongnu.org/">Savannah
</a>, and continue
3871 development there. The project is registered and currently waiting
3872 for approval by the Savannah administrators, and as soon as it is
3873 approved, we will import the old versions from svn and continue
3874 working on the future release.
</p>
3876 <p>It is a bit ironic that this is done now, when some of the involved
3877 distributions are moving to upstart as a syvinit replacement.
</p>
3883 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
3888 <div class=
"padding"></div>
3892 <a href=
"http://people.skolelinux.org/pere/blog/Debian_boots_quicker_and_quicker.html">Debian boots quicker and quicker
</a>
3898 <p>I spent Monday and tuesday this week in London with a lot of the
3899 people involved in the boot system on Debian and Ubuntu, to see if we
3900 could find more ways to speed up the boot system. This was an Ubuntu
3902 <a href=
"https://wiki.ubuntu.com/FoundationsTeam/BootPerformance/DebianUbuntuSprint">developer
3903 gathering
</a>. It was quite productive. We also discussed the future
3904 of boot systems, and ways to handle the increasing number of boot
3905 issues introduced by the Linux kernel becoming more and more
3906 asynchronous and event base. The Ubuntu approach using udev and
3907 upstart might be a good way forward. Time will show.
</p>
3909 <p>Anyway, there are a few ways at the moment to speed up the boot
3910 process in Debian. All of these should be applied to get a quick
3915 <li>Use dash as /bin/sh.
</li>
3917 <li>Disable the init.d/hwclock*.sh scripts and make sure the hardware
3918 clock is in UTC.
</li>
3920 <li>Install and activate the insserv package to enable
3921 <a href=
"http://wiki.debian.org/LSBInitScripts/DependencyBasedBoot">dependency
3922 based boot sequencing
</a>, and enable concurrent booting.
</li>
3926 These points are based on the Google summer of code work done by
3927 <a href=
"http://initscripts-ng.alioth.debian.org/soc2006-bootsystem/">Carlos
3930 <p>Support for makefile-style concurrency during boot was uploaded to
3931 unstable yesterday. When we tested it, we were able to cut
6 seconds
3932 from the boot sequence. It depend on very correct dependency
3933 declaration in all init.d scripts, so I expect us to find edge cases
3934 where the dependences in some scripts are slightly wrong when we start
3937 <p>On our IRC channel for this effort, #pkg-sysvinit, a new idea was
3938 introduced by Raphael Geissert today, one that could affect the
3939 startup speed as well. Instead of starting some scripts concurrently
3940 from rcS.d/ and another set of scripts from rc2.d/, it would be
3941 possible to run a of them in the same process. A quick way to test
3942 this would be to enable insserv and run 'mv /etc/rc2.d/S* /etc/rcS.d/;
3943 insserv'. Will need to test if that work. :)
</p>
3949 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
3954 <div class=
"padding"></div>
3958 <a href=
"http://people.skolelinux.org/pere/blog/BSAs_p_stander_om_piratkopiering_m_ter_motstand.html">BSAs påstander om piratkopiering møter motstand
</a>
3964 <p>Hvert år de siste årene har BSA, lobbyfronten til de store
3965 programvareselskapene som Microsoft og Apple, publisert en rapport der
3966 de gjetter på hvor mye piratkopiering påfører i tapte inntekter i
3967 ulike land rundt om i verden. Resultatene er tendensiøse. For noen
3969 <a href=
"http://global.bsa.org/globalpiracy2008/studies/globalpiracy2008.pdf">siste
3970 rapport
</a>, og det er flere kritiske kommentarer publisert de siste
3971 dagene. Et spesielt interessant kommentar fra Sverige,
3972 <a href=
"http://www.idg.se/2.1085/1.229795/bsa-hoftade-sverigesiffror">BSA
3973 höftade Sverigesiffror
</a>, oppsummeres slik:
</p>
3976 I sin senaste rapport slår BSA fast att
25 procent av all mjukvara i
3977 Sverige är piratkopierad. Det utan att ha pratat med ett enda svenskt
3978 företag. "Man bör nog kanske inte se de här siffrorna som helt
3979 exakta", säger BSAs Sverigechef John Hugosson.
3982 <p>Mon tro om de er like metodiske når de gjetter på andelen piratkopiering i Norge? To andre kommentarer er
<a
3983 href=
"http://www.vnunet.com/vnunet/comment/2242134/bsa-piracy-figures-shot-reality">BSA
3984 piracy figures need a shot of reality
</a> og
<a
3985 href=
"http://www.michaelgeist.ca/content/view/3958/125/">Does The WIPO
3986 Copyright Treaty Work?
</a></p>
3988 <p>Fant lenkene via
<a
3989 href=
"http://tech.slashdot.org/article.pl?sid=09/05/17/1632242">oppslag
3990 på Slashdot
</a>.
</p>
3996 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/bsa">bsa
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/norsk">norsk
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/personvern">personvern
</a>.
4001 <div class=
"padding"></div>
4005 <a href=
"http://people.skolelinux.org/pere/blog/IDG_mener_linux_i_servermarkedet_vil_vokse_med_21__i_2009.html">IDG mener linux i servermarkedet vil vokse med
21% i
2009</a>
4012 <a href=
"http://news.cnet.com/8301-13505_3-10216873-16.html">interessante
4013 tall
</a> fra IDG om utviklingen av linuxservermarkedet. Fikk meg til
4014 å tenke på antall tjenermaskiner ved Universitetet i Oslo der jeg
4015 jobber til daglig. En rask opptelling forteller meg at vi har
490
4016 (
61%) fysiske unix-tjener (mest linux men også noen solaris) og
196
4017 (
25%) windowstjenere, samt
112 (
14%) virtuelle unix-tjenere. Med den
4018 bakgrunnskunnskapen kan jeg godt tro at IDG er inne på noe.
</p>
4024 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/norsk">norsk
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
4029 <div class=
"padding"></div>
4033 <a href=
"http://people.skolelinux.org/pere/blog/Kryptert_harddisk___naturligvis.html">Kryptert harddisk - naturligvis
</a>
4039 <p><a href=
"http://www.dagensit.no/trender/article1658676.ece">Dagens
4040 IT melder
</a> at Intel hevder at det er dyrt å miste en datamaskin,
4041 når en tar tap av arbeidstid, fortrolige dokumenter,
4042 personopplysninger og alt annet det innebærer. Det er ingen tvil om
4043 at det er en kostbar affære å miste sin datamaskin, og det er årsaken
4044 til at jeg har kryptert harddisken på både kontormaskinen og min
4045 bærbare. Begge inneholder personopplysninger jeg ikke ønsker skal
4046 komme på avveie, den første informasjon relatert til jobben min ved
4047 Universitetet i Oslo, og den andre relatert til blant annet
4048 foreningsarbeide. Kryptering av diskene gjør at det er lite
4049 sannsynlig at dophoder som kan finne på å rappe maskinene får noe ut
4050 av dem. Maskinene låses automatisk etter noen minutter uten bruk,
4051 og en reboot vil gjøre at de ber om passord før de vil starte opp.
4052 Jeg bruker Debian på begge maskinene, og installasjonssystemet der
4053 gjør det trivielt å sette opp krypterte disker. Jeg har LVM på toppen
4054 av krypterte partisjoner, slik at alt av datapartisjoner er kryptert.
4055 Jeg anbefaler alle å kryptere diskene på sine bærbare. Kostnaden når
4056 det er gjort slik jeg gjør det er minimale, og gevinstene er
4057 betydelige. En bør dog passe på passordet. Hvis det går tapt, må
4058 maskinen reinstalleres og alt er tapt.
</p>
4060 <p>Krypteringen vil ikke stoppe kompetente angripere som f.eks. kjøler
4061 ned minnebrikkene før maskinen rebootes med programvare for å hente ut
4062 krypteringsnøklene. Kostnaden med å forsvare seg mot slike angripere
4063 er for min del høyere enn gevinsten. Jeg tror oddsene for at
4064 f.eks. etteretningsorganisasjoner har glede av å titte på mine
4065 maskiner er minimale, og ulempene jeg ville oppnå ved å forsøke å
4066 gjøre det vanskeligere for angripere med kompetanse og ressurser er
4073 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/norsk">norsk
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet
</a>.
4078 <div class=
"padding"></div>
4082 <a href=
"http://people.skolelinux.org/pere/blog/Two_projects_that_have_improved_the_quality_of_free_software_a_lot.html">Two projects that have improved the quality of free software a lot
</a>
4088 <p>There are two software projects that have had huge influence on the
4089 quality of free software, and I wanted to mention both in case someone
4090 do not yet know them.
</p>
4092 <p>The first one is
<a href=
"http://valgrind.org/">valgrind
</a>, a
4093 tool to detect and expose errors in the memory handling of programs.
4094 It is easy to use, all one need to do is to run 'valgrind program',
4095 and it will report any problems on stdout. It is even better if the
4096 program include debug information. With debug information, it is able
4097 to report the source file name and line number where the problem
4098 occurs. It can report things like 'reading past memory block in file
4099 X line N, the memory block was allocated in file Y, line M', and
4100 'using uninitialised value in control logic'. This tool has made it
4101 trivial to investigate reproducible crash bugs in programs, and have
4102 reduced the number of this kind of bugs in free software a lot.
4104 <p>The second one is
4105 <a href=
"http://en.wikipedia.org/wiki/Coverity">Coverity
</a> which is
4106 a source code checker. It is able to process the source of a program
4107 and find problems in the logic without running the program. It
4108 started out as the Stanford Checker and became well known when it was
4109 used to find bugs in the Linux kernel. It is now a commercial tool
4110 and the company behind it is running
4111 <a href=
"http://www.scan.coverity.com/">a community service
</a> for the
4112 free software community, where a lot of free software projects get
4113 their source checked for free. Several thousand defects have been
4114 found and fixed so far. It can find errors like 'lock L taken in file
4115 X line N is never released if exiting in line M', or 'the code in file
4116 Y lines O to P can never be executed'. The projects included in the
4117 community service project have managed to get rid of a lot of
4118 reliability problems thanks to Coverity.
</p>
4120 <p>I believe tools like this, that are able to automatically find
4121 errors in the source, are vital to improve the quality of software and
4122 make sure we can get rid of the crashing and failing software we are
4123 surrounded by today.
</p>
4129 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
4134 <div class=
"padding"></div>
4138 <a href=
"http://people.skolelinux.org/pere/blog/No_patch_is_not_better_than_a_useless_patch.html">No patch is not better than a useless patch
</a>
4145 <a href=
"http://blog.technologeek.org/2009/04/12/214">claim that no
4146 patch is better than a useless patch
</a>. I completely disagree, as a
4147 patch allow one to discuss a concrete and proposed solution, and also
4148 prove that the issue at hand is important enough for someone to spent
4149 time on fixing it. No patch do not provide any of these positive
4156 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
4161 <div class=
"padding"></div>
4165 <a href=
"http://people.skolelinux.org/pere/blog/Standardize_on_protocols_and_formats__not_vendors_and_applications.html">Standardize on protocols and formats, not vendors and applications
</a>
4171 <p>Where I work at the University of Oslo, one decision stand out as a
4172 very good one to form a long lived computer infrastructure. It is the
4173 simple one, lost by many in todays computer industry: Standardize on
4174 open network protocols and open exchange/storage formats, not applications.
4175 Applications come and go, while protocols and files tend to stay, and
4176 thus one want to make it easy to change application and vendor, while
4177 avoiding conversion costs and locking users to a specific platform or
4180 <p>This approach make it possible to replace the client applications
4181 independently of the server applications. One can even allow users to
4182 use several different applications as long as they handle the selected
4183 protocol and format. In the normal case, only one client application
4184 is recommended and users only get help if they choose to use this
4185 application, but those that want to deviate from the easy path are not
4186 blocked from doing so.
</p>
4188 <p>It also allow us to replace the server side without forcing the
4189 users to replace their applications, and thus allow us to select the
4190 best server implementation at any moment, when scale and resouce
4191 requirements change.
</p>
4193 <p>I strongly recommend standardizing - on open network protocols and
4194 open formats, but I would never recommend standardizing on a single
4195 application that do not use open network protocol or open formats.
</p>
4201 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/standard">standard
</a>.
4206 <div class=
"padding"></div>
4210 <a href=
"http://people.skolelinux.org/pere/blog/Returning_from_Skolelinux_developer_gathering.html">Returning from Skolelinux developer gathering
</a>
4216 <p>I'm sitting on the train going home from this weekends Debian
4217 Edu/Skolelinux development gathering. I got a bit done tuning the
4218 desktop, and looked into the dynamic service location protocol
4219 implementation avahi. It look like it could be useful for us. Almost
4220 30 people participated, and I believe it was a great environment to
4221 get to know the Skolelinux system. Walter Bender, involved in the
4222 development of the Sugar educational platform, presented his stuff and
4223 also helped me improve my OLPC installation. He also showed me that
4224 his Turtle Art application can be used in standalone mode, and we
4225 agreed that I would help getting it packaged for Debian. As a
4226 standalone application it would be great for Debian Edu. We also
4227 tried to get the video conferencing working with two OLPCs, but that
4228 proved to be too hard for us. The application seem to need more work
4229 before it is ready for me. I look forward to getting home and relax
4236 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
4241 <div class=
"padding"></div>
4245 <a href=
"http://people.skolelinux.org/pere/blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html">Time for new LDAP schemas replacing RFC
2307?
</a>
4251 <p>The state of standardized LDAP schemas on Linux is far from
4252 optimal. There is RFC
2307 documenting one way to store NIS maps in
4253 LDAP, and a modified version of this normally called RFC
2307bis, with
4254 some modifications to be compatible with Active Directory. The RFC
4255 specification handle the content of a lot of system databases, but do
4256 not handle DNS zones and DHCP configuration.
</p>
4258 <p>In
<a href=
"http://www.skolelinux.org/">Debian Edu/Skolelinux
</a>,
4259 we would like to store information about users, SMB clients/hosts,
4260 filegroups, netgroups (users and hosts), DHCP and DNS configuration,
4261 and LTSP configuration in LDAP. These objects have a lot in common,
4262 but with the current LDAP schemas it is not possible to have one
4263 object per entity. For example, one need to have at least three LDAP
4264 objects for a given computer, one with the SMB related stuff, one with
4265 DNS information and another with DHCP information. The schemas
4266 provided for DNS and DHCP are impossible to combine into one LDAP
4267 object. In addition, it is impossible to implement quick queries for
4268 netgroup membership, because of the way NIS triples are implemented.
4269 It just do not scale. I believe it is time for a few RFC
4270 specifications to cleam up this mess.
</p>
4272 <p>I would like to have one LDAP object representing each computer in
4273 the network, and this object can then keep the SMB (ie host key), DHCP
4274 (mac address/name) and DNS (name/IP address) settings in one place.
4275 It need to be efficently stored to make sure it scale well.
</p>
4277 <p>I would also like to have a quick way to map from a user or
4278 computer and to the net group this user or computer is a member.
</p>
4280 <p>Active Directory have done a better job than unix heads like myself
4281 in this regard, and the unix side need to catch up. Time to start a
4282 new IETF work group?
</p>
4288 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/ldap">ldap
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
4293 <div class=
"padding"></div>
4297 <a href=
"http://people.skolelinux.org/pere/blog/Endelig_er_Debian_Lenny_gitt_ut.html">Endelig er Debian Lenny gitt ut
</a>
4303 <p>Endelig er
<a href=
"http://www.debian.org/">Debian
</a>
4304 <a href=
"http://www.debian.org/News/2009/20090214">Lenny
</a> gitt ut.
4305 Et langt steg videre for Debian-prosjektet, og en rekke nye
4306 programpakker blir nå tilgjengelig for de av oss som bruker den
4307 stabile utgaven av Debian. Neste steg er nå å få
4308 <a href=
"http://www.skolelinux.org/">Skolelinux
</a> /
4309 <a href=
"http://wiki.debian.org/DebianEdu/">Debian Edu
</a> ferdig
4310 oppdatert for den nye utgaven, slik at en oppdatert versjon kan
4311 slippes løs på skolene. Takk til alle debian-utviklerne som har
4312 gjort dette mulig. Endelig er f.eks. fungerende avhengighetsstyrt
4313 bootsekvens tilgjengelig i stabil utgave, vha pakken
4314 <tt>insserv
</tt>.
</p>
4320 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/norsk">norsk
</a>.
4325 <div class=
"padding"></div>
4329 <a href=
"http://people.skolelinux.org/pere/blog/Devcamp_brought_us_closer_to_the_Lenny_based_Debian_Edu_release.html">Devcamp brought us closer to the Lenny based Debian Edu release
</a>
4335 <p>This weekend we had a small developer gathering for Debian Edu in
4336 Oslo. Most of Saturday was used for the general assemly for the
4337 member organization, but the rest of the weekend I used to tune the
4338 LTSP installation. LTSP now work out of the box on the
10-network.
4339 Acer Aspire One proved to be a very nice thin client, with both
4340 screen, mouse and keybard in a small box. Was working on getting the
4341 diskless workstation setup configured out of the box, but did not
4342 finish it before the weekend was up.
</p>
4344 <p>Did not find time to look at the
4 VGA cards in one box we got from
4345 the Brazilian group, so that will have to wait for the next
4346 development gathering. Would love to have the Debian Edu installer
4347 automatically detect and configure a multiseat setup when it find one
4354 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp
</a>.
4359 <div class=
"padding"></div>
4363 <a href=
"http://people.skolelinux.org/pere/blog/The_sorry_state_of_multimedia_browser_plugins_in_Debian.html">The sorry state of multimedia browser plugins in Debian
</a>
4369 <p>Recently I have spent some time evaluating the multimedia browser
4370 plugins available in Debian Lenny, to see which one we should use by
4371 default in Debian Edu. We need an embedded video playing plugin with
4372 control buttons to pause or stop the video, and capable of streaming
4373 all the multimedia content available on the web. The test results and
4374 notes are available on
4375 <a href=
"http://wiki.debian.org/DebianEdu/BrowserMultimedia">the
4376 Debian wiki
</a>. I was surprised how few of the plugins are able to
4377 fill this need. My personal video player favorite, VLC, has a really
4378 bad plugin which fail on a lot of the test pages. A lot of the MIME
4379 types I would expect to work with any free software player (like
4380 video/ogg), just do not work. And simple formats like the
4381 audio/x-mplegurl format (m3u playlists), just isn't supported by the
4382 totem and vlc plugins. I hope the situation will improve soon. No
4383 wonder sites use the proprietary Adobe flash to play video.
</p>
4385 <p>For Lenny, we seem to end up with the mplayer plugin. It seem to
4386 be the only one fitting our needs. :/
</p>
4392 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/web">web
</a>.
4397 <div class=
"padding"></div>
4399 <p style=
"text-align: right;"><a href=
"debian.rss"><img src=
"http://people.skolelinux.org/pere/blog/xml.gif" alt=
"RSS Feed" width=
"36" height=
"14" /></a></p>
4410 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/01/">January (
7)
</a></li>
4412 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/02/">February (
10)
</a></li>
4414 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/03/">March (
17)
</a></li>
4416 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/04/">April (
12)
</a></li>
4418 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/05/">May (
12)
</a></li>
4420 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/06/">June (
20)
</a></li>
4422 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/07/">July (
17)
</a></li>
4424 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/08/">August (
6)
</a></li>
4426 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/09/">September (
9)
</a></li>
4428 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/10/">October (
17)
</a></li>
4430 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/11/">November (
10)
</a></li>
4432 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/12/">December (
2)
</a></li>
4439 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/01/">January (
16)
</a></li>
4441 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/02/">February (
6)
</a></li>
4443 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/03/">March (
6)
</a></li>
4445 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/04/">April (
7)
</a></li>
4447 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/05/">May (
3)
</a></li>
4449 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/06/">June (
2)
</a></li>
4451 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/07/">July (
7)
</a></li>
4453 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/08/">August (
6)
</a></li>
4455 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/09/">September (
4)
</a></li>
4457 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/10/">October (
2)
</a></li>
4459 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/11/">November (
3)
</a></li>
4461 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/12/">December (
1)
</a></li>
4468 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/01/">January (
2)
</a></li>
4470 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/02/">February (
1)
</a></li>
4472 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/03/">March (
3)
</a></li>
4474 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/04/">April (
3)
</a></li>
4476 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/05/">May (
9)
</a></li>
4478 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/06/">June (
14)
</a></li>
4480 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/07/">July (
12)
</a></li>
4482 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/08/">August (
13)
</a></li>
4484 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/09/">September (
7)
</a></li>
4486 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/10/">October (
9)
</a></li>
4488 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/11/">November (
13)
</a></li>
4490 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/12/">December (
12)
</a></li>
4497 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/01/">January (
8)
</a></li>
4499 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/02/">February (
8)
</a></li>
4501 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/03/">March (
12)
</a></li>
4503 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/04/">April (
10)
</a></li>
4505 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/05/">May (
9)
</a></li>
4507 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/06/">June (
3)
</a></li>
4509 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/07/">July (
4)
</a></li>
4511 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/08/">August (
3)
</a></li>
4513 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/09/">September (
1)
</a></li>
4515 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/10/">October (
2)
</a></li>
4517 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/11/">November (
3)
</a></li>
4519 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/12/">December (
3)
</a></li>
4526 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2008/11/">November (
5)
</a></li>
4528 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2008/12/">December (
7)
</a></li>
4539 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer (
13)
</a></li>
4541 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/amiga">amiga (
1)
</a></li>
4543 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/aros">aros (
1)
</a></li>
4545 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/bankid">bankid (
3)
</a></li>
4547 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/bitcoin">bitcoin (
3)
</a></li>
4549 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem (
12)
</a></li>
4551 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/bsa">bsa (
2)
</a></li>
4553 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian (
57)
</a></li>
4555 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (
116)
</a></li>
4557 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/digistan">digistan (
9)
</a></li>
4559 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/docbook">docbook (
7)
</a></li>
4561 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/drivstoffpriser">drivstoffpriser (
4)
</a></li>
4563 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/english">english (
161)
</a></li>
4565 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (
21)
</a></li>
4567 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling (
12)
</a></li>
4569 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/freeculture">freeculture (
9)
</a></li>
4571 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/frikanalen">frikanalen (
9)
</a></li>
4573 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/intervju">intervju (
32)
</a></li>
4575 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/kart">kart (
17)
</a></li>
4577 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/ldap">ldap (
8)
</a></li>
4579 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/lenker">lenker (
5)
</a></li>
4581 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp (
1)
</a></li>
4583 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia (
25)
</a></li>
4585 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/norsk">norsk (
217)
</a></li>
4587 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug (
147)
</a></li>
4589 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/offentlig innsyn">offentlig innsyn (
6)
</a></li>
4591 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/open311">open311 (
2)
</a></li>
4593 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett (
39)
</a></li>
4595 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/personvern">personvern (
60)
</a></li>
4597 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/raid">raid (
1)
</a></li>
4599 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/reprap">reprap (
11)
</a></li>
4601 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/rfid">rfid (
2)
</a></li>
4603 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/robot">robot (
4)
</a></li>
4605 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/rss">rss (
1)
</a></li>
4607 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/ruter">ruter (
4)
</a></li>
4609 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/scraperwiki">scraperwiki (
2)
</a></li>
4611 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (
28)
</a></li>
4613 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (
4)
</a></li>
4615 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/skepsis">skepsis (
4)
</a></li>
4617 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/standard">standard (
39)
</a></li>
4619 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll (
3)
</a></li>
4621 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/stortinget">stortinget (
5)
</a></li>
4623 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance (
12)
</a></li>
4625 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/sysadmin">sysadmin (
1)
</a></li>
4627 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/valg">valg (
7)
</a></li>
4629 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/video">video (
35)
</a></li>
4631 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (
4)
</a></li>
4633 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/web">web (
26)
</a></li>
4639 <p style=
"text-align: right">
4640 Created by
<a href=
"http://steve.org.uk/Software/chronicle">Chronicle v4.4
</a>