1 <?xml version=
"1.0" encoding=
"utf-8"?>
2 <rss version='
2.0' xmlns:lj='http://www.livejournal.org/rss/lj/
1.0/' xmlns:
atom=
"http://www.w3.org/2005/Atom">
4 <title>Petter Reinholdtsen
</title>
5 <description></description>
6 <link>http://people.skolelinux.org/pere/blog/
</link>
7 <atom:link href=
"http://people.skolelinux.org/pere/blog/index.rss" rel=
"self" type=
"application/rss+xml" />
10 <title>A Debian package for SMTP via Tor (aka SMTorP) using exim4
</title>
11 <link>http://people.skolelinux.org/pere/blog/A_Debian_package_for_SMTP_via_Tor__aka_SMTorP__using_exim4.html
</link>
12 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/A_Debian_package_for_SMTP_via_Tor__aka_SMTorP__using_exim4.html
</guid>
13 <pubDate>Mon,
10 Nov
2014 13:
40:
00 +
0100</pubDate>
14 <description><p
>The right to communicate with your friends and family in private,
15 without anyone snooping, is a right every citicen have in a liberal
16 democracy. But this right is under serious attack these days.
</p
>
18 <p
>A while back it occurred to me that one way to make the dragnet
19 surveillance conducted by NSA, GCHQ, FRA and others (and confirmed by
20 the whisleblower Snowden) more expensive for Internet email,
21 is to deliver all email using SMTP via Tor. Such SMTP option would be
22 a nice addition to the FreedomBox project if we could send email
23 between FreedomBox machines without leaking metadata about the emails
24 to the people peeking on the wire. I
25 <a href=
"http://lists.alioth.debian.org/pipermail/freedombox-discuss/
2014-October/
006493.html
">proposed
26 this on the FreedomBox project mailing list in October
</a
> and got a
27 lot of useful feedback and suggestions. It also became obvious to me
28 that this was not a novel idea, as the same idea was tested and
29 documented by Johannes Berg as early as
2006, and both
30 <a href=
"https://github.com/pagekite/Mailpile/wiki/SMTorP
">the
31 Mailpile
</a
> and
<a href=
"http://dee.su/cables
">the Cables
</a
> systems
32 propose a similar method / protocol to pass emails between users.
</p
>
34 <p
>To implement such system one need to set up a Tor hidden service
35 providing the SMTP protocol on port
25, and use email addresses
36 looking like username@hidden-service-name.onion. With such addresses
37 the connections to port
25 on hidden-service-name.onion using Tor will
38 go to the correct SMTP server. To do this, one need to configure the
39 Tor daemon to provide the hidden service and the mail server to accept
40 emails for this .onion domain. To learn more about Exim configuration
41 in Debian and test the design provided by Johannes Berg in his FAQ, I
42 set out yesterday to create a Debian package for making it trivial to
43 set up such SMTP over Tor service based on Debian. Getting it to work
45 <a href=
"https://github.com/petterreinholdtsen/exim4-smtorp
">the
46 source code for the Debian package
</a
> is available from github. I
47 plan to move it into Debian if further testing prove this to be a
48 useful approach.
</p
>
50 <p
>If you want to test this, set up a blank Debian machine without any
51 mail system installed (or run
<tt
>apt-get purge exim4-config
</tt
> to
52 get rid of exim4). Install tor, clone the git repository mentioned
53 above, build the deb and install it on the machine. Next, run
54 <tt
>/usr/lib/exim4-smtorp/setup-exim-hidden-service
</tt
> and follow
55 the instructions to get the service up and running. Restart tor and
56 exim when it is done, and test mail delivery using swaks like
59 <p
><blockquote
><pre
>
60 torsocks swaks --server dutlqrrmjhtfa3vp.onion \
61 --to fbx@dutlqrrmjhtfa3vp.onion
62 </pre
></blockquote
></p
>
64 <p
>This will test the SMTP delivery using tor. Replace the email
65 address with your own address to test your server. :)
</p
>
67 <p
>The setup procedure is still to complex, and I hope it can be made
68 easier and more automatic. Especially the tor setup need more work.
69 Also, the package include a tor-smtp tool written in C, but its task
70 should probably be rewritten in some script language to make the deb
71 architecture independent. It would probably also make the code easier
72 to review. The tor-smtp tool currently need to listen on a socket for
73 exim to talk to it and is started using xinetd. It would be better if
74 no daemon and no socket is needed. I suspect it is possible to get
75 exim to run a command line tool for delivery instead of talking to a
76 socket, and hope to figure out how in a future version of this
79 <p
>Until I wipe my test machine, I can be reached using the
80 <tt
>fbx@dutlqrrmjhtfa3vp.onion
</tt
> mail address, deliverable over
86 <title>First Jessie based Debian Edu released (alpha0)
</title>
87 <link>http://people.skolelinux.org/pere/blog/First_Jessie_based_Debian_Edu_released__alpha0_.html
</link>
88 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/First_Jessie_based_Debian_Edu_released__alpha0_.html
</guid>
89 <pubDate>Mon,
27 Oct
2014 20:
40:
00 +
0100</pubDate>
90 <description><p
>I am happy to report that I on behalf of the Debian Edu team just
92 <a href=
"https://lists.debian.org/debian-edu-announce/
2014/
10/msg00000.html
">this
93 announcement
</a
>:
</p
>
96 The Debian Edu Team is pleased to announce the release of Debian Edu
97 Jessie
8.0+edu0~alpha0
99 Debian Edu is a complete operating system for schools. Through its
100 various installation profiles you can install servers, workstations
101 and laptops which will work together on the school network. With
102 Debian Edu, the teachers themselves or their technical support can
103 roll out a complete multi-user multi-machine study environment within
104 hours or a few days. Debian Edu comes with hundreds of applications
105 pre-installed, but you can always add more packages from Debian.
107 For those who want to give Debian Edu Jessie a try, download and
108 installation instructions are available, including detailed
109 instructions in the manual[
1] explaining the first steps, such as
110 setting up a network or adding users. Please note that the password
111 for the user your prompted for during installation must have a length
112 of at least
5 characters!
114 [
1]
&lt;URL:
<a href=
"https://wiki.debian.org/DebianEdu/Documentation/Jessie
">https://wiki.debian.org/DebianEdu/Documentation/Jessie
</a
> &gt;
116 Would you like to give your school
's computer a longer life? Are you
117 tired of sneaker administration, running from computer to computer
118 reinstalling the operating system? Would you like to administrate all
119 the computers in your school using only a couple of hours every week?
120 Check out Debian Edu Jessie!
122 Skolelinux is used by at least two hundred schools all over the world,
123 mostly in Germany and Norway.
125 About Debian Edu and Skolelinux
126 ===============================
128 Debian Edu, also known as Skolelinux[
2], is a Linux distribution based
129 on Debian providing an out-of-the box environment of a completely
130 configured school network. Immediately after installation a school
131 server running all services needed for a school network is set up just
132 waiting for users and machines being added via GOsa², a comfortable
133 Web-UI. A netbooting environment is prepared using PXE, so after
134 initial installation of the main server from CD or USB stick all other
135 machines can be installed via the network. The provided school server
136 provides LDAP database and Kerberos authentication service,
137 centralized home directories, DHCP server, web proxy and many other
138 services. The desktop contains more than
60 educational software
139 packages[
3] and more are available from the Debian archive, and
140 schools can choose between KDE, Gnome, LXDE, Xfce and MATE desktop
143 [
2]
&lt;URL:
<a href=
"http://www.skolelinux.org/
">http://www.skolelinux.org/
</a
> &gt;
144 [
3]
&lt;URL:
<a href=
"http://people.skolelinux.org/pere/blog/Educational_applications_included_in_Debian_Edu___Skolelinux__the_screenshot_collection____.html
">http://people.skolelinux.org/pere/blog/Educational_applications_included_in_Debian_Edu___Skolelinux__the_screenshot_collection____.html
</a
> &gt;
146 Full release notes and manual
147 =============================
149 Below the download URLs there is a list of some of the new features
150 and bugfixes of Debian Edu
8.0+edu0~alpha0 Codename Jessie. The full
151 list is part of the manual. (See the feature list in the manual[
4] for
152 the English version.) For some languages manual translations are
153 available, see the manual translation overview[
5].
155 [
4]
&lt;URL:
<a href=
"https://wiki.debian.org/DebianEdu/Documentation/Jessie/Features
">https://wiki.debian.org/DebianEdu/Documentation/Jessie/Features
</a
> &gt;
156 [
5]
&lt;URL:
<a href=
"http://maintainer.skolelinux.org/debian-edu-doc/
">http://maintainer.skolelinux.org/debian-edu-doc/
</a
> &gt;
161 To download the multiarch netinstall CD release (
624 MiB) you can use
163 *
<a href=
"ftp://ftp.skolelinux.org/skolelinux-cd/debian-edu-
8.0+edu0~alpha0-CD.iso
">ftp://ftp.skolelinux.org/skolelinux-cd/debian-edu-
8.0+edu0~alpha0-CD.iso
</a
>
164 *
<a href=
"http://ftp.skolelinux.org/skolelinux-cd/debian-edu-
8.0+edu0~alpha0-CD.iso
">http://ftp.skolelinux.org/skolelinux-cd/debian-edu-
8.0+edu0~alpha0-CD.iso
</a
>
165 * rsync -avzP ftp.skolelinux.org::skolelinux-cd/debian-edu-
8.0+edu0~alpha0-CD.iso .
167 The SHA1SUM of this image is:
361188818e036ce67280a572f757de82ebfeb095
169 New features for Debian Edu
8.0+edu0~alpha0 Codename Jessie released
2014-
10-
27
170 ===============================================================================
176 * PXE installation now installs firmware automatically for the hardware present.
181 Everything which is new in Debian Jessie
8.0, eg:
183 * Linux kernel
3.16.x
184 * Desktop environments KDE
"Plasma
" 4.11.12, GNOME
3.14, Xfce
4.10,
185 LXDE
0.5.6 and MATE
1.8 (KDE
"Plasma
" is installed by default; to
186 choose one of the others see manual.)
187 * the browsers Iceweasel
31 ESR and Chromium
38
191 * CUPS print system
1.7.5
192 * new boot framework: systemd
193 * Educational toolbox GCompris
14.07
194 * Music creator Rosegarden
14.02
195 * Image editor Gimp
2.8.14
196 * Virtual stargazer Stellarium
0.13.0
199 * New version of debian-installer from Debian Jessie.
200 * Debian Jessie includes about
42000 packages available for
202 * More information about Debian Jessie
8.0 is provided in the release
203 notes[
6] and the installation manual[
7].
205 [
6]
&lt;URL:
<a href=
"http://www.debian.org/releases/jessie/releasenotes
">http://www.debian.org/releases/jessie/releasenotes
</a
> &gt;
206 [
7]
&lt;URL:
<a href=
"http://www.debian.org/releases/jessie/installmanual
">http://www.debian.org/releases/jessie/installmanual
</a
> &gt;
211 * Inserting incorrect DNS information in Gosa will no longer break
212 DNS completely, but instead stop DNS updates until the incorrect
213 information is corrected (Debian bug #
710362)
216 Documentation and translation updates
217 -------------------------------------
219 * The Debian Edu Jessie Manual is fully translated to German, French,
220 Italian, Danish and Dutch. Partly translated versions exist for
221 Norwegian Bokmal and Spanish.
226 * Due to new Squid settings, powering off or rebooting the main
227 server takes more time.
228 * To manage printers localhost:
631 has to be used, currently www:
631
231 Regressions / known problems
232 ----------------------------
234 * Installing LTSP chroot fails with a bug related to eatmydata about
235 exim4-config failing to run its postinst (see Debian bug #
765694
236 and Debian bug #
762103).
237 * Munin collection is not properly configured on clients (Debian bug
238 #
764594). The fix is available in a newer version of munin-node.
239 * PXE setup for Main Server and Thin Client Server setup does not
240 work when installing on a machine without direct Internet access.
241 Will be fixed when Debian bug #
766960 is fixed in Jessie.
243 See the status page[
8] for the complete list.
245 [
8]
&lt;URL:
<a href=
"https://wiki.debian.org/DebianEdu/Status/Jessie
">https://wiki.debian.org/DebianEdu/Status/Jessie
</a
> &gt;
250 &lt;URL:
<a href=
"http://wiki.debian.org/DebianEdu/HowTo/ReportBugs
">http://wiki.debian.org/DebianEdu/HowTo/ReportBugs
</a
> &gt;
255 The Debian Project was founded in
1993 by Ian Murdock to be a truly
256 free community project. Since then the project has grown to be one of
257 the largest and most influential open source projects. Thousands of
258 volunteers from all over the world work together to create and
259 maintain Debian software. Available in
70 languages, and supporting a
260 huge range of computer types, Debian calls itself the universal
264 For further information, please visit the Debian web pages[
9] or send
265 mail to press@debian.org.
267 [
9]
&lt;URL:
<a href=
"http://www.debian.org/
">http://www.debian.org/
</a
> &gt;
273 <title>I spent last weekend recording MakerCon Nordic
</title>
274 <link>http://people.skolelinux.org/pere/blog/I_spent_last_weekend_recording_MakerCon_Nordic.html
</link>
275 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/I_spent_last_weekend_recording_MakerCon_Nordic.html
</guid>
276 <pubDate>Thu,
23 Oct
2014 23:
00:
00 +
0200</pubDate>
277 <description><p
>I spent last weekend at
<a href=
"http://www.makercon.no/
">Makercon
278 Nordic
</a
>, a great conference and workshop for makers in Norway and
279 the surrounding countries. I had volunteered on behalf of the
280 Norwegian Unix Users Group (NUUG) to video record the talks, and we
281 had a great and exhausting time recording the entire day, two days in
282 a row. There were only two of us, Hans-Petter and me, and we used the
283 regular video equipment for NUUG, with a
284 <a href=
"http://dvswitch.alioth.debian.org/wiki/
">dvswitch
</a
>, a
285 camera and a VGA to DV convert box, and mixed video and slides
288 <p
>Hans-Petter did the post-processing, consisting of uploading the
289 around
180 GiB of raw video to Youtube, and the result is
290 <a href=
"https://www.youtube.com/user/MakerConNordic/
">now becoming
291 public
</a
> on the MakerConNordic account. The videos have the license
292 NUUG always use on our recordings, which is
293 <a href=
"http://creativecommons.org/licenses/by-sa/
3.0/no/
">Creative
294 Commons Navngivelse-Del på samme vilkår
3.0 Norge
</a
>. Many great
295 talks available. Check it out! :)
</p
>
300 <title>listadmin, the quick way to moderate mailman lists - nice free software
</title>
301 <link>http://people.skolelinux.org/pere/blog/listadmin__the_quick_way_to_moderate_mailman_lists___nice_free_software.html
</link>
302 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/listadmin__the_quick_way_to_moderate_mailman_lists___nice_free_software.html
</guid>
303 <pubDate>Wed,
22 Oct
2014 20:
00:
00 +
0200</pubDate>
304 <description><p
>If you ever had to moderate a mailman list, like the ones on
305 alioth.debian.org, you know the web interface is fairly slow to
306 operate. First you visit one web page, enter the moderation password
307 and get a new page shown with a list of all the messages to moderate
308 and various options for each email address. This take a while for
309 every list you moderate, and you need to do it regularly to do a good
310 job as a list moderator. But there is a quick alternative,
311 <a href=
"http://heim.ifi.uio.no/kjetilho/hacks/#listadmin
">the
312 listadmin program
</a
>. It allow you to check lists for new messages
313 to moderate in a fraction of a second. Here is a test run on two
314 lists I recently took over:
</p
>
316 <p
><blockquote
><pre
>
317 % time listadmin xiph
318 fetching data for pkg-xiph-commits@lists.alioth.debian.org ... nothing in queue
319 fetching data for pkg-xiph-maint@lists.alioth.debian.org ... nothing in queue
325 </pre
></blockquote
></p
>
327 <p
>In
1.7 seconds I had checked two mailing lists and confirmed that
328 there are no message in the moderation queue. Every morning I
329 currently moderate
68 mailman lists, and it normally take around two
330 minutes. When I took over the two pkg-xiph lists above a few days
331 ago, there were
400 emails waiting in the moderator queue. It took me
332 less than
15 minutes to process them all using the listadmin
335 <p
>If you install
336 <a href=
"https://tracker.debian.org/pkg/listadmin
">the listadmin
337 package
</a
> from Debian and create a file
<tt
>~/.listadmin.ini
</tt
>
338 with content like this, the moderation task is a breeze:
</p
>
340 <p
><blockquote
><pre
>
341 username username@example.org
344 discard_if_reason
"Posting restricted to members only. Remove us from your mail list.
"
347 adminurl https://{domain}/mailman/admindb/{list}
348 mailman-list@lists.example.com
351 other-list@otherserver.example.org
352 </pre
></blockquote
></p
>
354 <p
>There are other options to set as well. Check the manual page to
355 learn the details.
</p
>
357 <p
>If you are forced to moderate lists on a mailman installation where
358 the SSL certificate is self signed or not properly signed by a
359 generally accepted signing authority, you can set a environment
360 variable when calling listadmin to disable SSL verification:
</p
>
362 <p
><blockquote
><pre
>
363 PERL_LWP_SSL_VERIFY_HOSTNAME=
0 listadmin
364 </pre
></blockquote
></p
>
366 <p
>If you want to moderate a subset of the lists you take care of, you
367 can provide an argument to the listadmin script like I do in the
368 initial screen dump (the xiph argument). Using an argument, only
369 lists matching the argument string will be processed. This make it
370 quick to accept messages if you notice the moderation request in your
373 <p
>Without the listadmin program, I would never be the moderator of
68
374 mailing lists, as I simply do not have time to spend on that if the
375 process was any slower. The listadmin program have saved me hours of
376 time I could spend elsewhere over the years. It truly is nice free
379 <p
>As usual, if you use Bitcoin and want to show your support of my
380 activities, please send Bitcoin donations to my address
381 <b
><a href=
"bitcoin:
15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b
&label=PetterReinholdtsenBlog
">15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b
</a
></b
>.
</p
>
383 <p
>Update
2014-
10-
27: Added missing
'username
' statement in
384 configuration example. Also, I
've been told that the
385 PERL_LWP_SSL_VERIFY_HOSTNAME=
0 setting do not work for everyone. Not
391 <title>Debian Jessie, PXE and automatic firmware installation
</title>
392 <link>http://people.skolelinux.org/pere/blog/Debian_Jessie__PXE_and_automatic_firmware_installation.html
</link>
393 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Debian_Jessie__PXE_and_automatic_firmware_installation.html
</guid>
394 <pubDate>Fri,
17 Oct
2014 14:
10:
00 +
0200</pubDate>
395 <description><p
>When PXE installing laptops with Debian, I often run into the
396 problem that the WiFi card require some firmware to work properly.
397 And it has been a pain to fix this using preseeding in Debian.
398 Normally something more is needed. But thanks to
399 <a href=
"https://packages.qa.debian.org/i/isenkram.html
">my isenkram
400 package
</a
> and its recent tasksel extension, it has now become easy
401 to do this using simple preseeding.
</p
>
403 <p
>The isenkram-cli package provide tasksel tasks which will install
404 firmware for the hardware found in the machine (actually, requested by
405 the kernel modules for the hardware). (It can also install user space
406 programs supporting the hardware detected, but that is not the focus
407 of this story.)
</p
>
409 <p
>To get this working in the default installation, two preeseding
410 values are needed. First, the isenkram-cli package must be installed
411 into the target chroot (aka the hard drive) before tasksel is executed
412 in the pkgsel step of the debian-installer system. This is done by
413 preseeding the base-installer/includes debconf value to include the
414 isenkram-cli package. The package name is next passed to debootstrap
415 for installation. With the isenkram-cli package in place, tasksel
416 will automatically use the isenkram tasks to detect hardware specific
417 packages for the machine being installed and install them, because
418 isenkram-cli contain tasksel tasks.
</p
>
420 <p
>Second, one need to enable the non-free APT repository, because
421 most firmware unfortunately is non-free. This is done by preseeding
422 the apt-mirror-setup step. This is unfortunate, but for a lot of
423 hardware it is the only option in Debian.
</p
>
425 <p
>The end result is two lines needed in your preseeding file to get
426 firmware installed automatically by the installer:
</p
>
428 <p
><blockquote
><pre
>
429 base-installer base-installer/includes string isenkram-cli
430 apt-mirror-setup apt-setup/non-free boolean true
431 </pre
></blockquote
></p
>
433 <p
>The current version of isenkram-cli in testing/jessie will install
434 both firmware and user space packages when using this method. It also
435 do not work well, so use version
0.15 or later. Installing both
436 firmware and user space packages might give you a bit more than you
437 want, so I decided to split the tasksel task in two, one for firmware
438 and one for user space programs. The firmware task is enabled by
439 default, while the one for user space programs is not. This split is
440 implemented in the package currently in unstable.
</p
>
442 <p
>If you decide to give this a go, please let me know (via email) how
443 this recipe work for you. :)
</p
>
445 <p
>So, I bet you are wondering, how can this work. First and
446 foremost, it work because tasksel is modular, and driven by whatever
447 files it find in /usr/lib/tasksel/ and /usr/share/tasksel/. So the
448 isenkram-cli package place two files for tasksel to find. First there
449 is the task description file (/usr/share/tasksel/descs/isenkram.desc):
</p
>
451 <p
><blockquote
><pre
>
452 Task: isenkram-packages
454 Description: Hardware specific packages (autodetected by isenkram)
455 Based on the detected hardware various hardware specific packages are
457 Test-new-install: show show
459 Packages: for-current-hardware
461 Task: isenkram-firmware
463 Description: Hardware specific firmware packages (autodetected by isenkram)
464 Based on the detected hardware various hardware specific firmware
465 packages are proposed.
466 Test-new-install: mark show
468 Packages: for-current-hardware-firmware
469 </pre
></blockquote
></p
>
471 <p
>The key parts are Test-new-install which indicate how the task
472 should be handled and the Packages line referencing to a script in
473 /usr/lib/tasksel/packages/. The scripts use other scripts to get a
474 list of packages to install. The for-current-hardware-firmware script
475 look like this to list relevant firmware for the machine:
477 <p
><blockquote
><pre
>
482 isenkram-autoinstall-firmware -l
483 </pre
></blockquote
></p
>
485 <p
>With those two pieces in place, the firmware is installed by
486 tasksel during the normal d-i run. :)
</p
>
488 <p
>If you want to test what tasksel will install when isenkram-cli is
489 installed, run
<tt
>DEBIAN_PRIORITY=critical tasksel --test
490 --new-install
</tt
> to get the list of packages that tasksel would
493 <p
><a href=
"https://wiki.debian.org/DebianEdu/
">Debian Edu
</a
> will be
494 pilots in testing this feature, as isenkram is used there now to
495 install firmware, replacing the earlier scripts.
</p
>
500 <title>Ubuntu used to show the bread prizes at ICA Storo
</title>
501 <link>http://people.skolelinux.org/pere/blog/Ubuntu_used_to_show_the_bread_prizes_at_ICA_Storo.html
</link>
502 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Ubuntu_used_to_show_the_bread_prizes_at_ICA_Storo.html
</guid>
503 <pubDate>Sat,
4 Oct
2014 15:
20:
00 +
0200</pubDate>
504 <description><p
>Today I came across an unexpected Ubuntu boot screen. Above the
505 bread shelf on the ICA shop at Storo in Oslo, the grub menu of Ubuntu
506 with Linux kernel
3.2.0-
23 (ie probably version
12.04 LTS) was stuck
507 on a screen normally showing the bread types and prizes:
</p
>
509 <p align=
"center
"><img width=
"70%
" src=
"http://people.skolelinux.org/pere/blog/images/
2014-
10-
04-ubuntu-ica-storo-crop.jpeg
"></p
>
511 <p
>If it had booted as it was supposed to, I would never had known
512 about this hidden Linux installation. It is interesting what
513 <a href=
"http://revealingerrors.com/
">errors can reveal
</a
>.
</p
>
518 <title>New lsdvd release version
0.17 is ready
</title>
519 <link>http://people.skolelinux.org/pere/blog/New_lsdvd_release_version_0_17_is_ready.html
</link>
520 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/New_lsdvd_release_version_0_17_is_ready.html
</guid>
521 <pubDate>Sat,
4 Oct
2014 08:
40:
00 +
0200</pubDate>
522 <description><p
>The
<a href=
"https://sourceforge.net/p/lsdvd/
">lsdvd project
</a
>
523 got a new set of developers a few weeks ago, after the original
524 developer decided to step down and pass the project to fresh blood.
525 This project is now maintained by Petter Reinholdtsen and Steve
528 <p
>I just wrapped up
529 <a href=
"https://sourceforge.net/p/lsdvd/mailman/message/
32896061/
">a
530 new lsdvd release
</a
>, available in git or from
531 <a href=
"https://sourceforge.net/projects/lsdvd/files/lsdvd/
">the
532 download page
</a
>. This is the changelog dated
2014-
10-
03 for version
537 <li
>Ignore
'phantom
' audio, subtitle tracks
</li
>
538 <li
>Check for garbage in the program chains, which indicate that a track is
539 non-existant, to work around additional copy protection
</li
>
540 <li
>Fix displaying content type for audio tracks, subtitles
</li
>
541 <li
>Fix pallete display of first entry
</li
>
542 <li
>Fix include orders
</li
>
543 <li
>Ignore read errors in titles that would not be displayed anyway
</li
>
544 <li
>Fix the chapter count
</li
>
545 <li
>Make sure the array size and the array limit used when initialising
546 the palette size is the same.
</li
>
547 <li
>Fix array printing.
</li
>
548 <li
>Correct subsecond calculations.
</li
>
549 <li
>Add sector information to the output format.
</li
>
550 <li
>Clean up code to be closer to ANSI C and compile without warnings
551 with more GCC compiler warnings.
</li
>
555 <p
>This change bring together patches for lsdvd in use in various
556 Linux and Unix distributions, as well as patches submitted to the
557 project the last nine years. Please check it out. :)
</p
>
562 <title>How to test Debian Edu Jessie despite some fatal problems with the installer
</title>
563 <link>http://people.skolelinux.org/pere/blog/How_to_test_Debian_Edu_Jessie_despite_some_fatal_problems_with_the_installer.html
</link>
564 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/How_to_test_Debian_Edu_Jessie_despite_some_fatal_problems_with_the_installer.html
</guid>
565 <pubDate>Fri,
26 Sep
2014 12:
20:
00 +
0200</pubDate>
566 <description><p
>The
<a href=
"http://www.skolelinux.org/
">Debian Edu / Skolelinux
567 project
</a
> provide a Linux solution for schools, including a
568 powerful desktop with education software, a central server providing
569 web pages, user database, user home directories, central login and PXE
570 boot of both clients without disk and the installation to install Debian
571 Edu on machines with disk (and a few other services perhaps to small
572 to mention here). We in the Debian Edu team are currently working on
573 the Jessie based version, trying to get everything in shape before the
574 freeze, to avoid having to maintain our own package repository in the
576 <a href=
"https://wiki.debian.org/DebianEdu/Status/Jessie
">current
577 status
</a
> can be seen on the Debian wiki, and there is still heaps of
578 work left. Some fatal problems block testing, breaking the installer,
579 but it is possible to work around these to get anyway. Here is a
580 recipe on how to get the installation limping along.
</p
>
582 <p
>First, download the test ISO via
583 <a href=
"ftp://ftp.skolelinux.no/cd-edu-testing-nolocal-netinst/debian-edu-amd64-i386-NETINST-
1.iso
">ftp
</a
>,
584 <a href=
"http://ftp.skolelinux.no/cd-edu-testing-nolocal-netinst/debian-edu-amd64-i386-NETINST-
1.iso
">http
</a
>
586 ftp.skolelinux.org::cd-edu-testing-nolocal-netinst/debian-edu-amd64-i386-NETINST-
1.iso).
587 The ISO build was broken on Tuesday, so we do not get a new ISO every
588 12 hours or so, but thankfully the ISO we already got we are able to
589 install with some tweaking.
</p
>
591 <p
>When you get to the Debian Edu profile question, go to tty2
592 (use Alt-Ctrl-F2), run
</p
>
594 <p
><blockquote
><pre
>
595 nano /usr/bin/edu-eatmydata-install
596 </pre
></blockquote
></p
>
598 <p
>and add
'exit
0' as the second line, disabling the eatmydata
599 optimization. Return to the installation, select the profile you want
600 and continue. Without this change, exim4-config will fail to install
601 due to a known bug in eatmydata.
</p
>
603 <p
>When you get the grub question at the end, answer /dev/sda (or if
604 this do not work, figure out what your correct value would be. All my
605 test machines need /dev/sda, so I have no advice if it do not fit
608 <p
>If you installed a profile including a graphical desktop, log in as
609 root after the initial boot from hard drive, and install the
610 education-desktop-XXX metapackage. XXX can be kde, gnome, lxde, xfce
611 or mate. If you want several desktop options, install more than one
612 metapackage. Once this is done, reboot and you should have a working
613 graphical login screen. This workaround should no longer be needed
614 once the education-tasks package version
1.801 enter testing in two
617 <p
>I believe the ISO build will start working on two days when the new
618 tasksel package enter testing and Steve McIntyre get a chance to
619 update the debian-cd git repository. The eatmydata, grub and desktop
620 issues are already fixed in unstable and testing, and should show up
621 on the ISO as soon as the ISO build start working again. Well the
622 eatmydata optimization is really just disabled. The proper fix
623 require an upload by the eatmydata maintainer applying the patch
624 provided in bug
<a href=
"https://bugs.debian.org/
702711">#
702711</a
>.
625 The rest have proper fixes in unstable.
</p
>
627 <p
>I hope this get you going with the installation testing, as we are
628 quickly running out of time trying to get our Jessie based
629 installation ready before the distribution freeze in a month.
</p
>
634 <title>Suddenly I am the new upstream of the lsdvd command line tool
</title>
635 <link>http://people.skolelinux.org/pere/blog/Suddenly_I_am_the_new_upstream_of_the_lsdvd_command_line_tool.html
</link>
636 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Suddenly_I_am_the_new_upstream_of_the_lsdvd_command_line_tool.html
</guid>
637 <pubDate>Thu,
25 Sep
2014 11:
20:
00 +
0200</pubDate>
638 <description><p
>I use the
<a href=
"https://sourceforge.net/p/lsdvd/
">lsdvd tool
</a
>
639 to handle my fairly large DVD collection. It is a nice command line
640 tool to get details about a DVD, like title, tracks, track length,
641 etc, in XML, Perl or human readable format. But lsdvd have not seen
642 any new development since
2006 and had a few irritating bugs affecting
643 its use with some DVDs. Upstream seemed to be dead, and in January I
644 sent a small probe asking for a version control repository for the
645 project, without any reply. But I use it regularly and would like to
646 get
<a href=
"https://packages.qa.debian.org/lsdvd
">an updated version
647 into Debian
</a
>. So two weeks ago I tried harder to get in touch with
648 the project admin, and after getting a reply from him explaining that
649 he was no longer interested in the project, I asked if I could take
650 over. And yesterday, I became project admin.
</p
>
652 <p
>I
've been in touch with a Gentoo developer and the Debian
653 maintainer interested in joining forces to maintain the upstream
654 project, and I hope we can get a new release out fairly quickly,
655 collecting the patches spread around on the internet into on place.
656 I
've added the relevant Debian patches to the freshly created git
657 repository, and expect the Gentoo patches to make it too. If you got
658 a DVD collection and care about command line tools, check out
659 <a href=
"https://sourceforge.net/p/lsdvd/git/ci/master/tree/
">the git source
</a
> and join
660 <a href=
"https://sourceforge.net/p/lsdvd/mailman/
">the project mailing
661 list
</a
>. :)
</p
>
666 <title>Hva henger under skibrua over E16 på Sollihøgda?
</title>
667 <link>http://people.skolelinux.org/pere/blog/Hva_henger_under_skibrua_over_E16_p__Sollih_gda_.html
</link>
668 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Hva_henger_under_skibrua_over_E16_p__Sollih_gda_.html
</guid>
669 <pubDate>Sun,
21 Sep
2014 09:
50:
00 +
0200</pubDate>
670 <description><p
>Rundt omkring i Oslo og Østlandsområdet henger det bokser over
671 veiene som jeg har lurt på hva gjør. De har ut fra plassering og
672 vinkling sett ut som bokser som sniffer ut et eller annet fra
673 forbipasserende trafikk, men det har vært uklart for meg hva det er de
674 leser av. Her om dagen tok jeg bilde av en slik boks som henger under
675 <a href=
"http://www.openstreetmap.no/?zoom=
19&mlat=
59.96396&mlon=
10.34443&layers=B00000
">ei
676 skibru på Sollihøgda
</a
>:
</p
>
678 <p align=
"center
"><img width=
"60%
" src=
"http://people.skolelinux.org/pere/blog/images/
2014-
09-
13-kapsch-sollihogda-crop.jpeg
"></p
>
680 <p
>Boksen er tydelig merket «Kapsch
>>>», logoen til
681 <a href=
"http://www.kapsch.net/
">det sveitsiske selskapet Kapsch
</a
> som
682 blant annet lager sensorsystemer for veitrafikk. Men de lager mye
683 forskjellig, og jeg kjente ikke igjen boksen på utseendet etter en
684 kjapp titt på produktlista til selskapet.
</p
>
686 <p
>I og med at boksen henger over veien E16, en riksvei vedlikeholdt
687 av Statens Vegvesen, så antok jeg at det burde være mulig å bruke
688 REST-API-et som gir tilgang til vegvesenets database over veier,
689 skilter og annet veirelatert til å finne ut hva i alle dager dette
690 kunne være. De har både
691 <a href=
"https://www.vegvesen.no/nvdb/api/dokumentasjon/datakatalog
">en
692 datakatalog
</a
> og
693 <a href=
"https://www.vegvesen.no/nvdb/api/dokumentasjon/sok
">et
694 søk
</a
>, der en kan søke etter ulike typer oppføringer innen for et
695 gitt geografisk område. Jeg laget et enkelt shell-script for å hente
696 ut antall av en gitt type innenfor området skibrua dekker, og listet
697 opp navnet på typene som ble funnet. Orket ikke slå opp hvordan
698 URL-koding av aktuelle strenger kunne gjøres mer generisk, og brukte
699 en stygg sed-linje i stedet.
</p
>
701 <blockquote
><pre
>
705 -e
's/ / /g
' -e
's/{/%
7B/g
' \
706 -e
's/}/%
7D/g
' -e
's/\[/%
5B/g
' \
707 -e
's/\]/%
5D/g
' -e
's/ /%
20/g
' \
708 -e
's/,/%
2C/g
' -e
's/\
"/%
22/g
' \
709 -e
's/:/%
3A/g
'
714 curl -s -H
'Accept: application/vnd.vegvesen.nvdb-v1+xml
' \
715 "https://www.vegvesen.no/nvdb/api$url
" | xmllint --format -
718 for id in $(seq
1 874) ; do
721 bbox: \
"10.34425,
59.96386,
10.34458,
59.96409\
",
722 srid: \
"WGS84\
"
729 query=/sok?kriterie=$(echo $search | urlmap)
730 if lookup
"$query
" |
731 grep -q
'&lt;totaltAntallReturnert
>0&lt;
'
736 lookup
"/datakatalog/objekttyper/$id
" |grep
'^
&lt;navn
>'
741 </pre
></blockquote
>
743 Aktuelt ID-område
1-
874 var riktig i datakatalogen da jeg laget
744 scriptet. Det vil endre seg over tid. Skriptet listet så opp
745 aktuelle typer i og rundt skibrua:
747 <blockquote
><pre
>
749 &lt;navn
>Rekkverk
&lt;/navn
>
751 &lt;navn
>Rekkverksende
&lt;/navn
>
753 &lt;navn
>Trafikklomme
&lt;/navn
>
755 &lt;navn
>Trafikkøy
&lt;/navn
>
757 &lt;navn
>Bru
&lt;/navn
>
759 &lt;navn
>Stikkrenne/Kulvert
&lt;/navn
>
761 &lt;navn
>Grøft, åpen
&lt;/navn
>
763 &lt;navn
>Belysningsstrekning
&lt;/navn
>
765 &lt;navn
>Skiltpunkt
&lt;/navn
>
767 &lt;navn
>Skiltplate
&lt;/navn
>
769 &lt;navn
>Referansestolpe
&lt;/navn
>
771 &lt;navn
>Vegoppmerking, langsgående
&lt;/navn
>
773 &lt;navn
>Fartsgrense
&lt;/navn
>
775 &lt;navn
>Vinterdriftsstrategi
&lt;/navn
>
777 &lt;navn
>Trafikkdeler
&lt;/navn
>
779 &lt;navn
>Vegdekke
&lt;/navn
>
781 &lt;navn
>Breddemåling
&lt;/navn
>
783 &lt;navn
>Kantklippareal
&lt;/navn
>
785 &lt;navn
>Snø-/isrydding
&lt;/navn
>
787 &lt;navn
>Skred
&lt;/navn
>
789 &lt;navn
>Dokumentasjon
&lt;/navn
>
791 &lt;navn
>Undergang
&lt;/navn
>
793 &lt;navn
>Tverrprofil
&lt;/navn
>
795 &lt;navn
>Vegreferanse
&lt;/navn
>
797 &lt;navn
>Region
&lt;/navn
>
799 &lt;navn
>Fylke
&lt;/navn
>
801 &lt;navn
>Kommune
&lt;/navn
>
803 &lt;navn
>Gate
&lt;/navn
>
805 &lt;navn
>Transportlenke
&lt;/navn
>
807 &lt;navn
>Trafikkmengde
&lt;/navn
>
809 &lt;navn
>Trafikkulykke
&lt;/navn
>
811 &lt;navn
>Ulykkesinvolvert enhet
&lt;/navn
>
813 &lt;navn
>Ulykkesinvolvert person
&lt;/navn
>
815 &lt;navn
>Politidistrikt
&lt;/navn
>
817 &lt;navn
>Vegbredde
&lt;/navn
>
819 &lt;navn
>Høydebegrensning
&lt;/navn
>
821 &lt;navn
>Nedbøyningsmåling
&lt;/navn
>
823 &lt;navn
>Støy-luft, Strekningsdata
&lt;/navn
>
825 &lt;navn
>Oppgravingsdata
&lt;/navn
>
827 &lt;navn
>Oppgravingslag
&lt;/navn
>
829 &lt;navn
>PMS-parsell
&lt;/navn
>
831 &lt;navn
>Vegnormalstrekning
&lt;/navn
>
833 &lt;navn
>Værrelatert strekning
&lt;/navn
>
835 &lt;navn
>Feltstrekning
&lt;/navn
>
837 &lt;navn
>Adressepunkt
&lt;/navn
>
839 &lt;navn
>Friksjonsmåleserie
&lt;/navn
>
841 &lt;navn
>Vegdekke, flatelapping
&lt;/navn
>
843 &lt;navn
>Kurvatur, horisontalelement
&lt;/navn
>
845 &lt;navn
>Kurvatur, vertikalelement
&lt;/navn
>
847 &lt;navn
>Kurvatur, vertikalpunkt
&lt;/navn
>
849 &lt;navn
>Statistikk, trafikkmengde
&lt;/navn
>
851 &lt;navn
>Statistikk, vegbredde
&lt;/navn
>
853 &lt;navn
>Nedbøyningsmåleserie
&lt;/navn
>
855 &lt;navn
>ATK, influensstrekning
&lt;/navn
>
857 &lt;navn
>Systemobjekt
&lt;/navn
>
859 &lt;navn
>Vinterdriftsklasse
&lt;/navn
>
861 &lt;navn
>Funksjonell vegklasse
&lt;/navn
>
863 &lt;navn
>Kurvatur, stigning
&lt;/navn
>
865 &lt;navn
>Vegbredde, beregnet
&lt;/navn
>
867 &lt;navn
>Reisetidsregistreringspunkt
&lt;/navn
>
869 &lt;navn
>Bruksklasse
&lt;/navn
>
870 </pre
></blockquote
>
872 <p
>Av disse ser ID
775 og
862 mest relevant ut. ID
775 antar jeg
873 refererer til fotoboksen som står like ved brua, mens
874 «Reisetidsregistreringspunkt» kanskje kan være boksen som henger der.
875 Hvordan finner jeg så ut hva dette kan være for noe. En titt på
876 <a href=
"http://labs.vegdata.no/nvdb-datakatalog/
862-Reisetidsregistreringspunkt/
">datakatalogsiden
877 for ID
862/Reisetidsregistreringspunkt
</a
> viser at det er finnes
53
878 slike målere i Norge, og hvor de er plassert, men gir ellers få
879 detaljer. Det er plassert
40 på østlandet og
13 i Trondheimsregionen.
880 Men siden nevner «AutoPASS», og hvis en slår opp oppføringen på
881 Sollihøgda nevner den «Ciber AS» som ID for eksternt system. (Kan det
883 <a href=
"http://www.proff.no/selskap/ciber-norge-as/oslo/internettdesign-og-programmering/Z0I3KMF4/
">Ciber
884 Norge AS
</a
>, et selskap eid av Ciber Europe Bv?) Et nettsøk på
885 «Ciber AS autopass» fører meg til en artikkel fra NRK Trøndelag i
887 «
<a href=
"http://www.nrk.no/trondelag/sjekk-dette-hvis-du-vil-unnga-ko-
1.11327947">Sjekk
888 dette hvis du vil unngå kø
</a
>». Artikkelen henviser til vegvesenets
890 <a href=
"http://www.reisetider.no/reisetid/forside.html
">reisetider.no
</a
>
892 <a href=
"http://www.reisetider.no/reisetid/omrade.html?omrade=
5">kartside
893 for Østlandet
</a
> som viser at det måles mellom Sandvika og Sollihøgda.
894 Det kan dermed se ut til at jeg har funnet ut hva boksene gjør.
</p
>
896 <p
>Hvis det stemmer, så er dette bokser som leser av AutoPASS-ID-en
897 til alle passerende biler med AutoPASS-brikke, og dermed gjør det mulig
898 for de som kontrollerer boksene å holde rede på hvor en gitt bil er
899 når den passerte et slikt målepunkt. NRK-artikkelen forteller at
900 denne informasjonen i dag kun brukes til å koble to
901 AutoPASS-brikkepasseringer passeringer sammen for å beregne
902 reisetiden, og at bruken er godkjent av Datatilsynet. Det er desverre
903 ikke mulig for en sjåfør som passerer under en slik boks å kontrollere
904 at AutoPASS-ID-en kun brukes til dette i dag og i fremtiden.
</p
>
906 <p
>I tillegg til denne type AutoPASS-sniffere vet jeg at det også
907 finnes mange automatiske stasjoner som tar betalt pr. passering (aka
908 bomstasjoner), og der lagres informasjon om tid, sted og bilnummer i
909 10 år. Finnes det andre slike sniffere plassert ut på veiene?
</p
>
911 <p
>Personlig har jeg valgt å ikke bruke AutoPASS-brikke, for å gjøre
912 det vanskeligere og mer kostbart for de som vil invadere privatsfæren
913 og holde rede på hvor bilen min beveger seg til enhver tid. Jeg håper
914 flere vil gjøre det samme, selv om det gir litt høyere private
915 utgifter (dyrere bompassering). Vern om privatsfæren koster i disse
918 <p
>Takk til Jan Kristian Jensen i Statens Vegvesen for tips om
919 dokumentasjon på vegvesenets REST-API.
</p
>