blog/index.html

   1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
   2           "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
   3 <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr">
   4   <head>
   5     <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
   6     <title>Petter Reinholdtsen</title>
   7     <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/style.css" />
   8     <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/vim.css" />
   9     <link rel="alternate" title="RSS Feed" href="http://people.skolelinux.org/pere/blog/index.rss" type="application/rss+xml" />
  10   </head>
  11   <body>
  12     <div class="title">
  13  <h1>
  14      <a href="http://people.skolelinux.org/pere/blog/">Petter Reinholdtsen</a>
  15
  16  </h1>
  17
  18 </div>
  19
  20
  21
  22     <div class="entry">
  23       <div class="title"><a href="http://people.skolelinux.org/pere/blog/S3QL__a_locally_mounted_cloud_file_system___nice_free_software.html">S3QL, a locally mounted cloud file system - nice free software</a></div>
  24       <div class="date"> 9th April 2014</div>
  25       <div class="body"><p>For a while now, I have been looking for a sensible offsite backup
  26 solution for use at home.  My requirements are simple, it must be
  27 cheap and locally encrypted (in other words, I keep the encryption
  28 keys, the storage provider do not have access to my private files).
  29 One idea me and my friends had many years ago, before the cloud
  30 storage providers showed up, was to use Google mail as storage,
  31 writing a Linux block device storing blocks as emails in the mail
  32 service provided by Google, and thus get heaps of free space.  On top
  33 of this one can add encryption, RAID and volume management to have
  34 lots of (fairly slow, I admit that) cheap and encrypted storage.  But
  35 I never found time to implement such system.  But the last few weeks I
  36 have looked at a system called
  37 <a href="https://bitbucket.org/nikratio/s3ql/">S3QL</a>, a locally
  38 mounted network backed file system with the features I need.</p>
  39
  40 <p>S3QL is a fuse file system with a local cache and cloud storage,
  41 handling several different storage providers, any with Amazon S3,
  42 Google Drive or OpenStack API.  There are heaps of such storage
  43 providers.  S3QL can also use a local directory as storage, which
  44 combined with sshfs allow for file storage on any ssh server.  S3QL
  45 include support for encryption, compression, de-duplication, snapshots
  46 and immutable file systems, allowing me to mount the remote storage as
  47 a local mount point, look at and use the files as if they were local,
  48 while the content is stored in the cloud as well.  This allow me to
  49 have a backup that should survive fire.  The file system can not be
  50 shared between several machines at the same time, as only one can
  51 mount it at the time, but any machine with the encryption key and
  52 access to the storage service can mount it if it is unmounted.</p>
  53
  54 <p>It is simple to use.  I'm using it on Debian Wheezy, where the
  55 package is included already.  So to get started, run <tt>apt-get
  56 install s3ql</tt>.  Next, pick a storage provider.  I ended up picking
  57 Greenqloud, after reading their nice recipe on
  58 <a href="https://greenqloud.zendesk.com/entries/44611757-How-To-Use-S3QL-to-mount-a-StorageQloud-bucket-on-Debian-Wheezy">how
  59 to use S3QL with their Amazon S3 service</a>, because I trust the laws
  60 in Iceland more than those in USA when it come to keeping my personal
  61 data safe and private, and thus would rather spend money on a company
  62 in Iceland.  Another nice recipe is available from the article
  63 <a href="http://www.admin-magazine.com/HPC/Articles/HPC-Cloud-Storage">S3QL
  64 Filesystem for HPC Storage</a> by Jeff Layton in the HPC section of
  65 Admin magazine.  When the provider is picked, figure out how to get
  66 the API key needed to connect to the storage API.  With Greencloud,
  67 the key did not show up until I had added payment details to my
  68 account.</p>
  69
  70 <p>Armed with the API access details, it is time to create the file
  71 system.  First, create a new bucket in the cloud.  This bucket is the
  72 file system storage area.  I picked a bucket name reflecting the
  73 machine that was going to store data there, but any name will do.
  74 I'll refer to it as <tt>bucket-name</tt> below.  In addition, one need
  75 the API login and password, and a locally created password.  Store it
  76 all in ~root/.s3ql/authinfo2 like this:
  77
  78 <p><blockquote><pre>
  79 [s3c]
  80 storage-url: s3c://s.greenqloud.com:443/bucket-name
  81 backend-login: API-login
  82 backend-password: API-password
  83 fs-passphrase: local-password
  84 </pre></blockquote></p>
  85
  86 <p>I create my local passphrase using <tt>pwget 50</tt> or similar,
  87 but any sensible way to create a fairly random password should do it.
  88 Armed with these details, it is now time to run mkfs, entering the API
  89 details and password to create it:</p>
  90
  91 <p><blockquote><pre>
  92 # mkdir -m 700 /var/lib/s3ql-cache
  93 # mkfs.s3ql --cachedir /var/lib/s3ql-cache --authfile /root/.s3ql/authinfo2 \
  94   --ssl s3c://s.greenqloud.com:443/bucket-name
  95 Enter backend login:
  96 Enter backend password:
  97 Before using S3QL, make sure to read the user's guide, especially
  98 the 'Important Rules to Avoid Loosing Data' section.
  99 Enter encryption password:
 100 Confirm encryption password:
 101 Generating random encryption key...
 102 Creating metadata tables...
 103 Dumping metadata...
 104 ..objects..
 105 ..blocks..
 106 ..inodes..
 107 ..inode_blocks..
 108 ..symlink_targets..
 109 ..names..
 110 ..contents..
 111 ..ext_attributes..
 112 Compressing and uploading metadata...
 113 Wrote 0.00 MB of compressed metadata.
 114 # </pre></blockquote></p>
 115
 116 <p>The next step is mounting the file system to make the storage available.
 117
 118 <p><blockquote><pre>
 119 # mount.s3ql --cachedir /var/lib/s3ql-cache --authfile /root/.s3ql/authinfo2 \
 120   --ssl --allow-root s3c://s.greenqloud.com:443/bucket-name /s3ql
 121 Using 4 upload threads.
 122 Downloading and decompressing metadata...
 123 Reading metadata...
 124 ..objects..
 125 ..blocks..
 126 ..inodes..
 127 ..inode_blocks..
 128 ..symlink_targets..
 129 ..names..
 130 ..contents..
 131 ..ext_attributes..
 132 Mounting filesystem...
 133 # df -h /mnt
 134 Filesystem                              Size  Used Avail Use% Mounted on
 135 s3c://s.greenqloud.com:443/bucket-name  1.0T     0  1.0T   0% /s3ql
 136 #
 137 </pre></blockquote></p>
 138
 139 <p>The file system is now ready for use.  I use rsync to store my
 140 backups in it, and as the metadata used by rsync is downloaded at
 141 mount time, no network traffic (and storage cost) is triggered by
 142 running rsync.  To unmount, one should not use the normal umount
 143 command, as this will not flush the cache to the cloud storage, but
 144 instead running the umount.s3ql command like this:
 145
 146 <p><blockquote><pre>
 147 # umount.s3ql /s3ql
 148 #
 149 </pre></blockquote></p>
 150
 151 <p>There is a fsck command available to check the file system and
 152 correct any problems detected.  This can be used if the local server
 153 crashes while the file system is mounted, to reset the "already
 154 mounted" flag.  This is what it look like when processing a working
 155 file system:</p>
 156
 157 <p><blockquote><pre>
 158 # fsck.s3ql --force --ssl s3c://s.greenqloud.com:443/bucket-name
 159 Using cached metadata.
 160 File system seems clean, checking anyway.
 161 Checking DB integrity...
 162 Creating temporary extra indices...
 163 Checking lost+found...
 164 Checking cached objects...
 165 Checking names (refcounts)...
 166 Checking contents (names)...
 167 Checking contents (inodes)...
 168 Checking contents (parent inodes)...
 169 Checking objects (reference counts)...
 170 Checking objects (backend)...
 171 ..processed 5000 objects so far..
 172 ..processed 10000 objects so far..
 173 ..processed 15000 objects so far..
 174 Checking objects (sizes)...
 175 Checking blocks (referenced objects)...
 176 Checking blocks (refcounts)...
 177 Checking inode-block mapping (blocks)...
 178 Checking inode-block mapping (inodes)...
 179 Checking inodes (refcounts)...
 180 Checking inodes (sizes)...
 181 Checking extended attributes (names)...
 182 Checking extended attributes (inodes)...
 183 Checking symlinks (inodes)...
 184 Checking directory reachability...
 185 Checking unix conventions...
 186 Checking referential integrity...
 187 Dropping temporary indices...
 188 Backing up old metadata...
 189 Dumping metadata...
 190 ..objects..
 191 ..blocks..
 192 ..inodes..
 193 ..inode_blocks..
 194 ..symlink_targets..
 195 ..names..
 196 ..contents..
 197 ..ext_attributes..
 198 Compressing and uploading metadata...
 199 Wrote 0.89 MB of compressed metadata.
 200 #
 201 </pre></blockquote></p>
 202
 203 <p>Thanks to the cache, working on files that fit in the cache is very
 204 quick, about the same speed as local file access.  Uploading large
 205 amount of data is to me limited by the bandwidth out of and into my
 206 house.  Uploading 685 MiB with a 100 MiB cache gave me 305 kiB/s,
 207 which is very close to my upload speed, and downloading the same
 208 Debian installation ISO gave me 610 kiB/s, close to my download speed.
 209 Both were measured using <tt>dd</tt>.  So for me, the bottleneck is my
 210 network, not the file system code.  I do not know what a good cache
 211 size would be, but suspect that the cache should e larger than your
 212 working set.</p>
 213
 214 <p>I mentioned that only one machine can mount the file system at the
 215 time.  If another machine try, it is told that the file system is
 216 busy:</p>
 217
 218 <p><blockquote><pre>
 219 # mount.s3ql --cachedir /var/lib/s3ql-cache --authfile /root/.s3ql/authinfo2 \
 220   --ssl --allow-root s3c://s.greenqloud.com:443/bucket-name /s3ql
 221 Using 8 upload threads.
 222 Backend reports that fs is still mounted elsewhere, aborting.
 223 #
 224 </pre></blockquote></p>
 225
 226 <p>The file content is uploaded when the cache is full, while the
 227 metadata is uploaded once every 24 hour by default.  To ensure the
 228 file system content is flushed to the cloud, one can either umount the
 229 file system, or ask S3QL to flush the cache and metadata using
 230 s3qlctrl:
 231
 232 <p><blockquote><pre>
 233 # s3qlctrl upload-meta /s3ql
 234 # s3qlctrl flushcache /s3ql
 235 #
 236 </pre></blockquote></p>
 237
 238 <p>If you are curious about how much space your data uses in the
 239 cloud, and how much compression and deduplication cut down on the
 240 storage usage, you can use s3qlstat on the mounted file system to get
 241 a report:</p>
 242
 243 <p><blockquote><pre>
 244 # s3qlstat /s3ql
 245 Directory entries:    9141
 246 Inodes:               9143
 247 Data blocks:          8851
 248 Total data size:      22049.38 MB
 249 After de-duplication: 21955.46 MB (99.57% of total)
 250 After compression:    21877.28 MB (99.22% of total, 99.64% of de-duplicated)
 251 Database size:        2.39 MB (uncompressed)
 252 (some values do not take into account not-yet-uploaded dirty blocks in cache)
 253 #
 254 </pre></blockquote></p>
 255
 256 <p>I mentioned earlier that there are several possible suppliers of
 257 storage.  I did not try to locate them all, but am aware of at least
 258 <a href="https://www.greenqloud.com/">Greenqloud</a>,
 259 <a href="http://drive.google.com/">Google Drive</a>,
 260 <a href="http://aws.amazon.com/s3/">Amazon S3 web serivces</a>,
 261 <a href="http://www.rackspace.com/">Rackspace</a> and
 262 <a href="http://crowncloud.net/">Crowncloud</A>.  The latter even
 263 accept payment in Bitcoin.  Pick one that suit your need.  Some of
 264 them provide several GiB of free storage, but the prize models are
 265 quire different and you will have to figure out what suit you
 266 best.</p>
 267
 268 <p>While researching this blog post, I had a look at research papers
 269 and posters discussing the S3QL file system.  There are several, which
 270 told me that the file system is getting a critical check by the
 271 science community and increased my confidence in using it.  One nice
 272 poster is titled
 273 "<a href="http://www.lanl.gov/orgs/adtsc/publications/science_highlights_2013/docs/pg68_69.pdf">An
 274 Innovative Parallel Cloud Storage System using OpenStack’s SwiftObject
 275 Store and Transformative Parallel I/O Approach</a>" by Hsing-Bung
 276 Chen, Benjamin McClelland, David Sherrill, Alfred Torrez, Parks Fields
 277 and Pamela Smith.  Please  have a look.</p>
 278
 279 <p>Given my problems with different file systems earlier, I decided to
 280 check out the mounted S3QL file system to see if it would be usable as
 281 a home directory (in other word, that it provided POSIX semantics when
 282 it come to locking and umask handling etc).  Running
 283 <a href="http://people.skolelinux.org/pere/blog/Testing_if_a_file_system_can_be_used_for_home_directories___.html">my
 284 test code to check file system semantics</a>, I was happy to discover that
 285 no error was found.  So the file system can be used for home
 286 directories, if one chooses to do so.</p>
 287
 288 <p>If you do not want a locally file system, and want something that
 289 work without the Linux fuse file system, I would like to mention the
 290 <a href="http://www.tarsnap.com/">Tarsnap service</a>, which also
 291 provide locally encrypted backup using a command line client.  It have
 292 a nicer access control system, where one can split out read and write
 293 access, allowing some systems to write to the backup and others to
 294 only read from it.</p>
 295
 296 <p>As usual, if you use Bitcoin and want to show your support of my
 297 activities, please send Bitcoin donations to my address
 298 <b><a href="bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&label=PetterReinholdtsenBlog">15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b</a></b>.</p>
 299 </div>
 300       <div class="tags">
 301
 302
 303         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet</a>.
 304
 305
 306       </div>
 307     </div>
 308     <div class="padding"></div>
 309
 310     <div class="entry">
 311       <div class="title"><a href="http://people.skolelinux.org/pere/blog/EU_domstolen_bekreftet_i_dag_at_datalagringsdirektivet_er_ulovlig.html">EU-domstolen bekreftet i dag at datalagringsdirektivet er ulovlig</a></div>
 312       <div class="date"> 8th April 2014</div>
 313       <div class="body"><p>I dag kom endelig avgjørelsen fra EU-domstolen om
 314 datalagringsdirektivet, som ikke overraskende ble dømt ulovlig og i
 315 strid med borgernes grunnleggende rettigheter.  Hvis du lurer på hva
 316 datalagringsdirektivet er for noe, så er det
 317 <a href="http://tv.nrk.no/program/koid75005313/tema-dine-digitale-spor-datalagringsdirektivet">en
 318 flott dokumentar tilgjengelig hos NRK</a> som jeg tidligere
 319 <a href="http://people.skolelinux.org/pere/blog/Dokumentaren_om_Datalagringsdirektivet_sendes_endelig_p__NRK.html">har
 320 anbefalt</a> alle å se.</p>
 321
 322 <p>Her er et liten knippe nyhetsoppslag om saken, og jeg regner med at
 323 det kommer flere ut over dagen.  Flere kan finnes
 324 <a href="http://www.mylder.no/?drill=datalagringsdirektivet&intern=1">via
 325 mylder</a>.</p>
 326
 327 <p><ul>
 328
 329 <li><a href="http://e24.no/digital/eu-domstolen-datalagringsdirektivet-er-ugyldig/22879592">EU-domstolen:
 330 Datalagringsdirektivet er ugyldig</a> - e24.no 2014-04-08
 331
 332 <li><a href="http://www.aftenposten.no/nyheter/iriks/EU-domstolen-Datalagringsdirektivet-er-ulovlig-7529032.html">EU-domstolen:
 333 Datalagringsdirektivet er ulovlig</a> - aftenposten.no 2014-04-08
 334
 335 <li><a href="http://www.aftenposten.no/nyheter/iriks/politikk/Krever-DLD-stopp-i-Norge-7530086.html">Krever
 336 DLD-stopp i Norge</a> - aftenposten.no 2014-04-08
 337
 338 <li><a href="http://www.p4.no/story.aspx?id=566431">Apenes: - En
 339 gledens dag</a> - p4.no 2014-04-08
 340
 341 <li><a href="http://www.nrk.no/norge/_-datalagringsdirektivet-er-ugyldig-1.11655929">EU-domstolen:
 342 – Datalagringsdirektivet er ugyldig</a> - nrk.no 2014-04-08</li>
 343
 344 <li><a href="http://www.vg.no/nyheter/utenriks/data-og-nett/eu-domstolen-datalagringsdirektivet-er-ugyldig/a/10130280/">EU-domstolen:
 345 Datalagringsdirektivet er ugyldig</a> - vg.no 2014-04-08</li>
 346
 347 <li><a href="http://www.dagbladet.no/2014/04/08/nyheter/innenriks/datalagringsdirektivet/personvern/32711646/">-
 348 Vi bør skrote hele datalagringsdirektivet</a> - dagbladet.no
 349 2014-04-08</li>
 350
 351 <li><a href="http://www.digi.no/928137/eu-domstolen-dld-er-ugyldig">EU-domstolen:
 352 DLD er ugyldig</a> - digi.no 2014-04-08</li>
 353
 354 <li><a href="http://www.irishtimes.com/business/sectors/technology/european-court-declares-data-retention-directive-invalid-1.1754150">European
 355 court declares data retention directive invalid</a> - irishtimes.com
 356 2014-04-08</li>
 357
 358 <li><a href="http://www.reuters.com/article/2014/04/08/us-eu-data-ruling-idUSBREA370F020140408?feedType=RSS">EU
 359 court rules against requirement to keep data of telecom users</a> -
 360 reuters.com 2014-04-08</li>
 361
 362 </ul>
 363 </p>
 364
 365 <p>Jeg synes det er veldig fint at nok en stemme slår fast at
 366 totalitær overvåkning av befolkningen er uakseptabelt, men det er
 367 fortsatt like viktig å beskytte privatsfæren som før, da de
 368 teknologiske mulighetene fortsatt finnes og utnyttes, og jeg tror
 369 innsats i prosjekter som
 370 <a href="https://wiki.debian.org/FreedomBox">Freedombox</a> og
 371 <a href="http://www.dugnadsnett.no/">Dugnadsnett</a> er viktigere enn
 372 noen gang.</p>
 373
 374 <p><strong>Update 2014-04-08 12:10</strong>: Kronerullingen for å
 375 stoppe datalagringsdirektivet i Norge gjøres hos foreningen
 376 <a href="http://www.digitaltpersonvern.no/">Digitalt Personvern</a>,
 377 som har samlet inn 843 215,- så langt men trenger nok mye mer hvis
 378
 379 ikke Høyre og Arbeiderpartiet bytter mening i saken.  Det var
 380 <a href="http://www.holderdeord.no/parliament-issues/48650">kun
 381 partinene Høyre og Arbeiderpartiet</a> som stemte for
 382 Datalagringsdirektivet, og en av dem må bytte mening for at det skal
 383 bli flertall mot i Stortinget.  Se mer om saken
 384 <a href="http://www.holderdeord.no/issues/69-innfore-datalagringsdirektivet">Holder
 385 de ord</a>.</p>
 386 </div>
 387       <div class="tags">
 388
 389
 390         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet</a>, <a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance</a>.
 391
 392
 393       </div>
 394     </div>
 395     <div class="padding"></div>
 396
 397     <div class="entry">
 398       <div class="title"><a href="http://people.skolelinux.org/pere/blog/ReactOS_Windows_clone___nice_free_software.html">ReactOS Windows clone - nice free software</a></div>
 399       <div class="date"> 1st April 2014</div>
 400       <div class="body"><p>Microsoft have announced that Windows XP reaches its end of life
 401 2014-04-08, in 7 days.  But there are heaps of machines still running
 402 Windows XP, and depending on Windows XP to run their applications, and
 403 upgrading will be expensive, both when it comes to money and when it
 404 comes to the amount of effort needed to migrate from Windows XP to a
 405 new operating system.  Some obvious options (buy new a Windows
 406 machine, buy a MacOSX machine, install Linux on the existing machine)
 407 are already well known and covered elsewhere.  Most of them involve
 408 leaving the user applications installed on Windows XP behind and
 409 trying out replacements or updated versions. In this blog post I want
 410 to mention one strange bird that allow people to keep the hardware and
 411 the existing Windows XP applications and run them on a free software
 412 operating system that is Windows XP compatible.</p>
 413
 414 <p><a href="http://www.reactos.org/">ReactOS</a> is a free software
 415 operating system (GNU GPL licensed) working on providing a operating
 416 system that is binary compatible with Windows, able to run windows
 417 programs directly and to use Windows drivers for hardware directly.
 418 The project goal is for Windows user to keep their existing machines,
 419 drivers and software, and gain the advantages from user a operating
 420 system without usage limitations caused by non-free licensing.  It is
 421 a Windows clone running directly on the hardware, so quite different
 422 from the approach taken by <a href="http://www.winehq.org/">the Wine
 423 project</a>, which make it possible to run Windows binaries on
 424 Linux.</p>
 425
 426 <p>The ReactOS project share code with the Wine project, so most
 427 shared libraries available on Windows are already implemented already.
 428 There is also a software manager like the one we are used to on Linux,
 429 allowing the user to install free software applications with a simple
 430 click directly from the Internet.  Check out the
 431 <a href="http://www.reactos.org/screenshots">screen shots on the
 432 project web site</a> for an idea what it look like (it looks just like
 433 Windows before metro).</p>
 434
 435 <p>I do not use ReactOS myself, preferring Linux and Unix like
 436 operating systems.  I've tested it, and it work fine in a virt-manager
 437 virtual machine.  The browser, minesweeper, notepad etc is working
 438 fine as far as I can tell.  Unfortunately, my main test application
 439 is the software included on a CD with the Lego Mindstorms NXT, which
 440 seem to install just fine from CD but fail to leave any binaries on
 441 the disk after the installation.  So no luck with that test software.
 442 No idea why, but hope someone else figure out and fix the problem.
 443 I've tried the ReactOS Live ISO on a physical machine, and it seemed
 444 to work just fine.  If you like Windows and want to keep running your
 445 old Windows binaries, check it out by
 446 <a href="http://www.reactos.org/download">downloading</a> the
 447 installation CD, the live CD or the preinstalled virtual machine
 448 image.</p>
 449 </div>
 450       <div class="tags">
 451
 452
 453         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/reactos">reactos</a>.
 454
 455
 456       </div>
 457     </div>
 458     <div class="padding"></div>
 459
 460     <div class="entry">
 461       <div class="title"><a href="http://people.skolelinux.org/pere/blog/Debian_Edu_interview__Roger_Marsal.html">Debian Edu interview: Roger Marsal</a></div>
 462       <div class="date">30th March 2014</div>
 463       <div class="body"><p><a href="http://www.skolelinux.org/">Debian Edu / Skolelinux</a>
 464 keep gaining new users.  Some weeks ago, a person showed up on IRC,
 465 <a href="irc://irc.debian.org/#debian-edu">#debian-edu</a>, with a
 466 wish to contribute, and I managed to get a interview with this great
 467 contributor Roger Marsal to learn more about his background.</p>
 468
 469 <p><strong>Who are you, and how do you spend your days?</strong></p>
 470
 471 <p>My name is Roger Marsal, I'm 27 years old (1986 generation) and I
 472 live in Barcelona, Spain. I've got a strong business background and I
 473 work as a patrimony manager and as a real estate agent.  Additionally,
 474 I've co-founded a British based tech company that is nowadays on the
 475 last development phase of a new social networking concept.</p>
 476
 477 <p>I'm a Linux enthusiast that started its journey with Ubuntu four years
 478 ago and have recently switched to Debian seeking rock solid stability
 479 and as a necessary step to gain expertise.</p>
 480
 481 <p>In a nutshell, I spend my days working and learning as much as I
 482 can to face both my job, entrepreneur project and feed my Linux
 483 hunger.</p>
 484
 485 <p><strong>How did you get in contact with the Skolelinux / Debian Edu
 486 project?</strong></p>
 487
 488 <p>I discovered the <a href="http://www.ltsp.org/">LTSP</a> advantages
 489 with "Ubuntu 12.04 alternate install" and after a year of use I
 490 started looking for an alternative.  Even though I highly value and
 491 respect the Ubuntu project, I thought it was necessary for me to
 492 change to a more robust and stable alternative.  As far as I was using
 493 Debian on my personal laptop I thought it would be fine to install
 494 Debian and configure an LTSP server myself.  Surprised, I discovered
 495 that the Debian project also supported a kind of Edubuntu equivalent,
 496 and after having some pain I obtained a Debian Edu network up and
 497 running.  I just loved it.</p>
 498
 499 <p><strong>What do you see as the advantages of Skolelinux / Debian
 500 Edu?</strong></p>
 501
 502 <p>I found a main advantage in that, once you know "the tips and
 503 tricks", a new installation just works out of the box. It's the most
 504 complete alternative I've found to create an LTSP network. All the
 505 other distributions seems to be made of plastic, Debian Edu seems to
 506 be made of steel.</p>
 507
 508 <p><strong>What do you see as the disadvantages of Skolelinux / Debian
 509 Edu?</strong></p>
 510
 511 <p>I found two main disadvantages.</p>
 512
 513 <p>I'm not an expert but I've got notions and I had to spent a considerable
 514 amount of time trying to bring up a standard network topology. I'm quite
 515 stubborn and I just worked until I did but I'm sure many people with few
 516 resources (not big schools, but academies for example) would have switched
 517 or dropped.</p>
 518
 519 <p>It's amazing how such a complex system like Debian Edu has achieved
 520 this out-of-the-box state. Even though tweaking without breaking gets
 521 more difficult, as more factors have to be considered. This can
 522 discourage many people too.</p>
 523
 524 <p><strong>Which free software do you use daily?</strong></p>
 525
 526 <p>I use Debian, Firefox, Okular, Inkscape, LibreOffice and
 527 Virtualbox.</p>
 528
 529
 530 <p><strong>Which strategy do you believe is the right one to use to
 531 get schools to use free software?</strong></p>
 532
 533 <p>I don't think there is a need for a particular strategy. The free
 534 attribute in both "freedom" and "no price" meanings is what will
 535 really bring free software to schools. In my experience I can think of
 536 the <a href="http://www.r-project.org/">"R" statistical language</a>; a
 537 few years a ago was an extremely nerd tool for university people.
 538 Today it's being increasingly used to teach statistics at many
 539 different level of studies.  I believe free and open software will
 540 increasingly gain popularity, but I'm sure schools will be one of the
 541 first scenarios where this will happen.</p>
 542 </div>
 543       <div class="tags">
 544
 545
 546         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju</a>.
 547
 548
 549       </div>
 550     </div>
 551     <div class="padding"></div>
 552
 553     <div class="entry">
 554       <div class="title"><a href="http://people.skolelinux.org/pere/blog/Dokumentaren_om_Datalagringsdirektivet_sendes_endelig_p__NRK.html">Dokumentaren om Datalagringsdirektivet sendes endelig på NRK</a></div>
 555       <div class="date">26th March 2014</div>
 556       <div class="body"><p><a href="http://www.nuug.no/">Foreningen NUUG</a> melder i natt at
 557 NRK nå har bestemt seg for
 558 <a href="http://www.nuug.no/news/NRK_viser_filmen_om_Datalagringsdirektivet_f_rste_gang_2014_03_31.shtml">når
 559 den norske dokumentarfilmen om datalagringsdirektivet skal
 560 sendes</a> (se <a href="http://www.imdb.com/title/tt2832844/">IMDB</a>
 561 for detaljer om filmen) . Første visning blir på NRK2 mandag
 562 2014-03-31 kl. 19:50, og deretter visninger onsdag 2014-04-02
 563 kl. 12:30, fredag 2014-04-04 kl. 19:40 og søndag 2014-04-06 kl. 15:10.
 564 Jeg har sett dokumentaren, og jeg anbefaler enhver å se den selv.  Som
 565 oppvarming mens vi venter anbefaler jeg Bjørn Stærks kronikk i
 566 Aftenposten fra i går,
 567 <a href="http://www.aftenposten.no/meninger/kronikker/Autoritar-gjokunge-7514915.html">Autoritær
 568 gjøkunge</a>, der han gir en grei skisse av hvor ille det står til med
 569 retten til privatliv og beskyttelsen av demokrati i Norge og resten
 570 verden, og helt riktig slår fast at det er vi i databransjen som
 571 sitter med nøkkelen til å gjøre noe med dette.  Jeg har involvert meg
 572 i prosjektene <a href="http://www.dugnadsnett.no/">dugnadsnett.no</a>
 573 og <a href="https://wiki.debian.org/FreedomBox">FreedomBox</a> for å
 574 forsøke å gjøre litt selv for å bedre situasjonen, men det er mye
 575 hardt arbeid fra mange flere enn meg som gjenstår før vi kan sies å ha
 576 gjenopprettet balansen.</p>
 577
 578 <p>Jeg regner med at nettutgaven dukker opp på
 579 <a href="http://tv.nrk.no/program/koid75005313/tema-dine-digitale-spor-datalagringsdirektivet">NRKs
 580 side om filmen om datalagringsdirektivet</a> om fem dager.  Hold et
 581 øye med siden, og tips venner og slekt om at de også bør se den.</p>
 582 </div>
 583       <div class="tags">
 584
 585
 586         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox</a>, <a href="http://people.skolelinux.org/pere/blog/tags/mesh network">mesh network</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet</a>, <a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance</a>.
 587
 588
 589       </div>
 590     </div>
 591     <div class="padding"></div>
 592
 593     <div class="entry">
 594       <div class="title"><a href="http://people.skolelinux.org/pere/blog/Public_Trusted_Timestamping_services_for_everyone.html">Public Trusted Timestamping services for everyone</a></div>
 595       <div class="date">25th March 2014</div>
 596       <div class="body"><p>Did you ever need to store logs or other files in a way that would
 597 allow it to be used as evidence in court, and needed a way to
 598 demonstrate without reasonable doubt that the file had not been
 599 changed since it was created?  Or, did you ever need to document that
 600 a given document was received at some point in time, like some
 601 archived document or the answer to an exam, and not changed after it
 602 was received?  The problem in these settings is to remove the need to
 603 trust yourself and your computers, while still being able to prove
 604 that a file is the same as it was at some given time in the past.</p>
 605
 606 <p>A solution to these problems is to have a trusted third party
 607 "stamp" the document and verify that at some given time the document
 608 looked a given way.  Such
 609 <a href="https://en.wikipedia.org/wiki/Notarius">notarius</a> service
 610 have been around for thousands of years, and its digital equivalent is
 611 called a
 612 <a href="http://en.wikipedia.org/wiki/Trusted_timestamping">trusted
 613 timestamping service</a>.  <a href="http://www.ietf.org/">The Internet
 614 Engineering Task Force</a> standardised how such service could work a
 615 few years ago as <a href="http://tools.ietf.org/html/rfc3161">RFC
 616 3161</a>.  The mechanism is simple.  Create a hash of the file in
 617 question, send it to a trusted third party which add a time stamp to
 618 the hash and sign the result with its private key, and send back the
 619 signed hash + timestamp.  Both email, FTP and HTTP can be used to
 620 request such signature, depending on what is provided by the service
 621 used. Anyone with the document and the signature can then verify that
 622 the document matches the signature by creating their own hash and
 623 checking the signature using the trusted third party public key.
 624 There are several commercial services around providing such
 625 timestamping.  A quick search for
 626 "<a href="https://duckduckgo.com/?q=rfc+3161+service">rfc 3161
 627 service</a>" pointed me to at least
 628 <a href="https://www.digistamp.com/technical/how-a-digital-time-stamp-works/">DigiStamp</a>,
 629 <a href="http://www.quovadisglobal.co.uk/CertificateServices/SigningServices/TimeStamp.aspx">Quo
 630 Vadis</a>,
 631 <a href="https://www.globalsign.com/timestamp-service/">Global Sign</a>
 632 and <a href="http://www.globaltrustfinder.com/TSADefault.aspx">Global
 633 Trust Finder</a>.  The system work as long as the private key of the
 634 trusted third party is not compromised.</p>
 635
 636 <p>But as far as I can tell, there are very few public trusted
 637 timestamp services available for everyone.  I've been looking for one
 638 for a while now. But yesterday I found one over at
 639 <a href="https://www.pki.dfn.de/zeitstempeldienst/">Deutches
 640 Forschungsnetz</a> mentioned in
 641 <a href="http://www.d-mueller.de/blog/dealing-with-trusted-timestamps-in-php-rfc-3161/">a
 642 blog by David Müller</a>.  I then found
 643 <a href="http://www.rz.uni-greifswald.de/support/dfn-pki-zertifikate/zeitstempeldienst.html">a
 644 good recipe on how to use the service</a> over at the University of
 645 Greifswald.</p>
 646
 647 <p><a href="http://www.openssl.org/">The OpenSSL library</a> contain
 648 both server and tools to use and set up your own signing service.  See
 649 the ts(1SSL), tsget(1SSL) manual pages for more details.  The
 650 following shell script demonstrate how to extract a signed timestamp
 651 for any file on the disk in a Debian environment:</p>
 652
 653 <p><blockquote><pre>
 654 #!/bin/sh
 655 set -e
 656 url="http://zeitstempel.dfn.de"
 657 caurl="https://pki.pca.dfn.de/global-services-ca/pub/cacert/chain.txt"
 658 reqfile=$(mktemp -t tmp.XXXXXXXXXX.tsq)
 659 resfile=$(mktemp -t tmp.XXXXXXXXXX.tsr)
 660 cafile=chain.txt
 661 if [ ! -f $cafile ] ; then
 662     wget -O $cafile "$caurl"
 663 fi
 664 openssl ts -query -data "$1" -cert | tee "$reqfile" \
 665     | /usr/lib/ssl/misc/tsget -h "$url" -o "$resfile"
 666 openssl ts -reply -in "$resfile" -text 1>&2
 667 openssl ts -verify -data "$1" -in "$resfile" -CAfile "$cafile" 1>&2
 668 base64 < "$resfile"
 669 rm "$reqfile" "$resfile"
 670 </pre></blockquote></p>
 671
 672 <p>The argument to the script is the file to timestamp, and the output
 673 is a base64 encoded version of the signature to STDOUT and details
 674 about the signature to STDERR.  Note that due to
 675 <a href="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742553">a bug
 676 in the tsget script</a>, you might need to modify the included script
 677 and remove the last line.  Or just write your own HTTP uploader using
 678 curl. :) Now you too can prove and verify that files have not been
 679 changed.</p>
 680
 681 <p>But the Internet need more public trusted timestamp services.
 682 Perhaps something for <a href="http://www.uninett.no/">Uninett</a> or
 683 my work place the <a href="http://www.uio.no/">University of Oslo</a>
 684 to set up?</p>
 685 </div>
 686       <div class="tags">
 687
 688
 689         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet</a>.
 690
 691
 692       </div>
 693     </div>
 694     <div class="padding"></div>
 695
 696     <div class="entry">
 697       <div class="title"><a href="http://people.skolelinux.org/pere/blog/Video_DVD_reader_library___python_dvdvideo___nice_free_software.html">Video DVD reader library / python-dvdvideo - nice free software</a></div>
 698       <div class="date">21st March 2014</div>
 699       <div class="body"><p>Keeping your DVD collection safe from scratches and curious
 700 children fingers while still having it available when you want to see a
 701 movie is not straight forward.  My preferred method at the moment is
 702 to store a full copy of the ISO on a hard drive, and use VLC, Popcorn
 703 Hour or other useful players to view the resulting file.  This way the
 704 subtitles and bonus material are still available and using the ISO is
 705 just like inserting the original DVD record in the DVD player.</p>
 706
 707 <p>Earlier I used dd for taking security copies, but it do not handle
 708 DVDs giving read errors (which are quite a few of them).  I've also
 709 tried using
 710 <a href="http://people.skolelinux.org/pere/blog/Ripping_problematic_DVDs_using_dvdbackup_and_genisoimage.html">dvdbackup
 711 and genisoimage</a>, but these days I use the marvellous python library
 712 and program
 713 <a href="http://bblank.thinkmo.de/blog/new-software-python-dvdvideo">python-dvdvideo</a>
 714 written by Bastian Blank.  It is
 715 <a href="http://packages.qa.debian.org/p/python-dvdvideo.html">in Debian
 716 already</a> and the binary package name is python3-dvdvideo. Instead
 717 of trying to read every block from the DVD, it parses the file
 718 structure and figure out which block on the DVD is actually in used,
 719 and only read those blocks from the DVD.  This work surprisingly well,
 720 and I have been able to almost backup my entire DVD collection using
 721 this method.</p>
 722
 723 <p>So far, python-dvdvideo have failed on between 10 and
 724 20 DVDs, which is a small fraction of my collection.  The most common
 725 problem is
 726 <a href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=720831">DVDs
 727 using UTF-16 instead of UTF-8 characters</a>, which according to
 728 Bastian is against the DVD specification (and seem to cause some
 729 players to fail too).  A rarer problem is what seem to be inconsistent
 730 DVD structures, as the python library
 731 <a href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=723079">claim
 732 there is a overlap between objects</a>.  An equally rare problem claim
 733 <a href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741878">some
 734 value is out of range</a>.  No idea what is going on there.  I wish I
 735 knew enough about the DVD format to fix these, to ensure my movie
 736 collection will stay with me in the future.</p>
 737
 738 <p>So, if you need to keep your DVDs safe, back them up using
 739 python-dvdvideo. :)</p>
 740 </div>
 741       <div class="tags">
 742
 743
 744         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia</a>, <a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett</a>, <a href="http://people.skolelinux.org/pere/blog/tags/video">video</a>.
 745
 746
 747       </div>
 748     </div>
 749     <div class="padding"></div>
 750
 751     <div class="entry">
 752       <div class="title"><a href="http://people.skolelinux.org/pere/blog/Norsk_utgave_av_Alaveteli___WhatDoTheyKnow_p__trappene.html">Norsk utgave av Alaveteli / WhatDoTheyKnow på trappene</a></div>
 753       <div class="date">16th March 2014</div>
 754       <div class="body"><p>Det offentlige Norge har mye kunnskap og informasjon.  Men hvordan
 755 kan en få tilgang til den på en enkel måte?  Takket være et lite
 756 knippe lover og tilhørende forskrifter, blant annet
 757 <a href="http://lovdata.no/dokument/NL/lov/2006-05-19-16">offentlighetsloven</a>,
 758 <a href="http://lovdata.no/dokument/NL/lov/2003-05-09-31">miljøinformasjonsloven</a>
 759 og
 760 <a href="http://lovdata.no/dokument/NL/lov/1967-02-10/">forvaltningsloven</a>
 761 har en rett til å spørre det offentlige og få svar.  Men det finnes
 762 intet offentlig arkiv over hva andre har spurt om, og dermed risikerer en
 763 å måtte forstyrre myndighetene gang på gang for å få tak i samme
 764 informasjonen på nytt.  <a href="http://www.mysociety.org/">Britiske
 765 mySociety</a> har laget tjenesten
 766 <a href="http://www.whatdotheyknow.com/">WhatDoTheyKnow</a> som gjør
 767 noe med dette.  I Storbritannia blir WhatdoTheyKnow brukt i
 768 <a href="http://www.mysociety.org/2011/07/01/whatdotheyknows-share-of-central-government-foi-requests-q2-2011/">ca
 769 15% av alle innsynsforespørsler mot sentraladministrasjonen</a>.
 770 Prosjektet heter <a href="http://www.alaveteli.org/">Alaveteli</A>, og
 771 er takk i bruk en rekke steder etter at løsningen ble generalisert og
 772 gjort mulig å oversette.  Den hjelper borgerne med å be om innsyn,
 773 rådgir ved purringer og klager og lar alle se hvilke henvendelser som
 774 er sendt til det offentlige og hvilke svar som er kommet inn, i et
 775 søkpart arkiv.  Her i Norge holder vi i foreningen NUUG på å få opp en
 776 norsk utgave av Alaveteli, og her trenger vi din hjelp med
 777 oversettelsen.</p>
 778
 779 <p>Så langt er 76 % av Alaveteli oversatt til norsk bokmål, men vi
 780 skulle gjerne vært oppe i 100 % før lansering.  Oversettelsen gjøres
 781 på <a href="https://www.transifex.com/projects/p/alaveteli/">Transifex,
 782 der enhver som registrerer seg</a> og ber om tilgang til
 783 bokmålsoversettelsen får bidra.  Vi har satt opp en test av tjenesten
 784 (som ikke sender epost til det offentlige, kun til oss som holder på å
 785 sette opp tjenesten) på maskinen
 786 <a href="http://alaveteli-dev.nuug.no/">alaveteli-dev.nuug.no</a>, der
 787 en kan se hvordan de oversatte meldingen blir seende ut på nettsiden.
 788 Når tjenesten lanseres vil den hete
 789 <a href="https://www.mimesbrønn.no/">Mimes brønn</a>, etter
 790 visdomskilden som Odin måtte gi øyet sitt for å få drikke i.  Den
 791 nettsiden er er ennå ikke klar til bruk.</p>
 792
 793 <p>Hvis noen vil oversette til nynorsk også, så skal vi finne ut
 794 hvordan vi lager en flerspråklig tjeneste.  Men i første omgang er
 795 fokus på bokmålsoversettelsen, der vi selv har nok peiling til å ha
 796 fått oversatt 76%, men trenger hjelp for å komme helt i mål. :)</p>
 797 </div>
 798       <div class="tags">
 799
 800
 801         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>, <a href="http://people.skolelinux.org/pere/blog/tags/offentlig innsyn">offentlig innsyn</a>.
 802
 803
 804       </div>
 805     </div>
 806     <div class="padding"></div>
 807
 808     <div class="entry">
 809       <div class="title"><a href="http://people.skolelinux.org/pere/blog/Freedombox_on_Dreamplug__Raspberry_Pi_and_virtual_x86_machine.html">Freedombox on Dreamplug, Raspberry Pi and virtual x86 machine</a></div>
 810       <div class="date">14th March 2014</div>
 811       <div class="body"><p>The <a href="https://wiki.debian.org/FreedomBox">Freedombox
 812 project</a> is working on providing the software and hardware for
 813 making it easy for non-technical people to host their data and
 814 communication at home, and being able to communicate with their
 815 friends and family encrypted and away from prying eyes.  It has been
 816 going on for a while, and is slowly progressing towards a new test
 817 release (0.2).</p>
 818
 819 <p>And what day could be better than the Pi day to announce that the
 820 new version will provide "hard drive" / SD card / USB stick images for
 821 Dreamplug, Raspberry Pi and VirtualBox (or any other virtualization
 822 system), and can also be installed using a Debian installer preseed
 823 file.  The Debian based Freedombox is now based on Debian Jessie,
 824 where most of the needed packages used are already present.  Only one,
 825 the freedombox-setup package, is missing.  To try to build your own
 826 boot image to test the current status, fetch the freedom-maker scripts
 827 and build using
 828 <a href="http://packages.qa.debian.org/vmdebootstrap">vmdebootstrap</a>
 829 with a user with sudo access to become root:
 830
 831 <pre>
 832 git clone http://anonscm.debian.org/git/freedombox/freedom-maker.git \
 833   freedom-maker
 834 sudo apt-get install git vmdebootstrap mercurial python-docutils \
 835   mktorrent extlinux virtualbox qemu-user-static binfmt-support \
 836   u-boot-tools
 837 make -C freedom-maker dreamplug-image raspberry-image virtualbox-image
 838 </pre>
 839
 840 <p>Root access is needed to run debootstrap and mount loopback
 841 devices.  See the README for more details on the build. If you do not
 842 want all three images, trim the make line.  But note that thanks to <a
 843 href="https://bugs.debian.org/741407">a race condition in
 844 vmdebootstrap</a>, the build might fail without the patch to the
 845 kpartx call.</p>
 846
 847 <p>If you instead want to install using a Debian CD and the preseed
 848 method, boot a Debian Wheezy ISO and use this boot argument to load
 849 the preseed values:</p>
 850
 851 <pre>
 852 url=<a href="http://www.reinholdtsen.name/freedombox/preseed-jessie.dat">http://www.reinholdtsen.name/freedombox/preseed-jessie.dat</a>
 853 </pre>
 854
 855 <p>But note that due to <a href="https://bugs.debian.org/740673">a
 856 recently introduced bug in apt in Jessie</a>, the installer will
 857 currently hang while setting up APT sources.  Killing the
 858 '<tt>apt-cdrom ident</tt>' process when it hang a few times during the
 859 installation will get the installation going.  This affect all
 860 installations in Jessie, and I expect it will be fixed soon.</p>
 861
 862 <p>Give it a go and let us know how it goes on the mailing list, and help
 863 us get the new release published. :) Please join us on
 864 <a href="irc://irc.debian.org:6667/%23freedombox">IRC (#freedombox on
 865 irc.debian.org)</a> and
 866 <a href="http://lists.alioth.debian.org/mailman/listinfo/freedombox-discuss">the
 867 mailing list</a> if you want to help make this vision come true.</p>
 868 </div>
 869       <div class="tags">
 870
 871
 872         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet</a>, <a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance</a>, <a href="http://people.skolelinux.org/pere/blog/tags/web">web</a>.
 873
 874
 875       </div>
 876     </div>
 877     <div class="padding"></div>
 878
 879     <div class="entry">
 880       <div class="title"><a href="http://people.skolelinux.org/pere/blog/How_to_add_extra_storage_servers_in_Debian_Edu___Skolelinux.html">How to add extra storage servers in Debian Edu / Skolelinux</a></div>
 881       <div class="date">12th March 2014</div>
 882       <div class="body"><p>On larger sites, it is useful to use a dedicated storage server for
 883 storing user home directories and data.  The design for handling this
 884 in <a href="http://www.skolelinux.org/">Debian Edu / Skolelinux</a>, is
 885 to update the automount rules in LDAP and let the automount daemon on
 886 the clients take care of the rest.  I was reminded about the need to
 887 document this better when one of the customers of
 888 <a href="http://www.slxdrift.no/">Skolelinux Drift AS</a>, where I am
 889 on the board of directors, asked about how to do this.  The steps to
 890 get this working are the following:</p>
 891
 892 <p><ol>
 893
 894 <li>Add new storage server in DNS.  I use nas-server.intern as the
 895 example host here.</li>
 896
 897 <li>Add automoun LDAP information about this server in LDAP, to allow
 898 all clients to automatically mount it on reqeust.</li>
 899
 900 <li>Add the relevant entries in tjener.intern:/etc/fstab, because
 901 tjener.intern do not use automount to avoid mounting loops.</li>
 902
 903 </ol></p>
 904
 905 <p>DNS entries are added in GOsa², and not described here.  Follow the
 906 <a href="https://wiki.debian.org/DebianEdu/Documentation/Wheezy/GettingStarted">instructions
 907 in the manual</a> (Machine Management with GOsa² in section Getting
 908 started).</p>
 909
 910 <p>Ensure that the NFS export points on the server are exported to the
 911 relevant subnets or machines:</p>
 912
 913 <p><blockquote><pre>
 914 root@tjener:~# showmount -e nas-server
 915 Export list for nas-server:
 916 /storage         10.0.0.0/8
 917 root@tjener:~#
 918 </pre></blockquote></p>
 919
 920 <p>Here everything on the backbone network is granted access to the
 921 /storage export.  With NFSv3 it is slightly better to limit it to
 922 netgroup membership or single IP addresses to have some limits on the
 923 NFS access.</p>
 924
 925 <p>The next step is to update LDAP.  This can not be done using GOsa²,
 926 because it lack a module for automount.  Instead, use ldapvi and add
 927 the required LDAP objects using an editor.</p>
 928
 929 <p><blockquote><pre>
 930 ldapvi --ldap-conf -ZD '(cn=admin)' -b ou=automount,dc=skole,dc=skolelinux,dc=no
 931 </pre></blockquote></p>
 932
 933 <p>When the editor show up, add the following LDAP objects at the
 934 bottom of the document.  The "/&" part in the last LDAP object is a
 935 wild card matching everything the nas-server exports, removing the
 936 need to list individual mount points in LDAP.</p>
 937
 938 <p><blockquote><pre>
 939 add cn=nas-server,ou=auto.skole,ou=automount,dc=skole,dc=skolelinux,dc=no
 940 objectClass: automount
 941 cn: nas-server
 942 automountInformation: -fstype=autofs --timeout=60 ldap:ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no
 943
 944 add ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no
 945 objectClass: top
 946 objectClass: automountMap
 947 ou: auto.nas-server
 948
 949 add cn=/,ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no
 950 objectClass: automount
 951 cn: /
 952 automountInformation: -fstype=nfs,tcp,rsize=32768,wsize=32768,rw,intr,hard,nodev,nosuid,noatime nas-server.intern:/&
 953 </pre></blockquote></p>
 954
 955 <p>The last step to remember is to mount the relevant mount points in
 956 tjener.intern by adding them to /etc/fstab, creating the mount
 957 directories using mkdir and running "mount -a" to mount them.</p>
 958
 959 <p>When this is done, your users should be able to access the files on
 960 the storage server directly by just visiting the
 961 /tjener/nas-server/storage/ directory using any application on any
 962 workstation, LTSP client or LTSP server.</p>
 963 </div>
 964       <div class="tags">
 965
 966
 967         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>.
 968
 969
 970       </div>
 971     </div>
 972     <div class="padding"></div>
 973
 974     <p style="text-align: right;"><a href="index.rss"><img src="http://people.skolelinux.org/pere/blog/xml.gif" alt="RSS feed" width="36" height="14" /></a></p>
 975     <div id="sidebar">
 976
 977
 978
 979 <h2>Archive</h2>
 980 <ul>
 981
 982 <li>2014
 983 <ul>
 984
 985 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/01/">January (2)</a></li>
 986
 987 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/02/">February (3)</a></li>
 988
 989 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/03/">March (8)</a></li>
 990
 991 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/04/">April (3)</a></li>
 992
 993 </ul></li>
 994
 995 <li>2013
 996 <ul>
 997
 998 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/01/">January (11)</a></li>
 999
1000 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/02/">February (9)</a></li>
1001
1002 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/03/">March (9)</a></li>
1003
1004 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/04/">April (6)</a></li>
1005
1006 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/05/">May (9)</a></li>
1007
1008 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/06/">June (10)</a></li>
1009
1010 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/07/">July (7)</a></li>
1011
1012 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/08/">August (3)</a></li>
1013
1014 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/09/">September (5)</a></li>
1015
1016 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/10/">October (7)</a></li>
1017
1018 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/11/">November (9)</a></li>
1019
1020 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/12/">December (3)</a></li>
1021
1022 </ul></li>
1023
1024 <li>2012
1025 <ul>
1026
1027 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/01/">January (7)</a></li>
1028
1029 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/02/">February (10)</a></li>
1030
1031 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/03/">March (17)</a></li>
1032
1033 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/04/">April (12)</a></li>
1034
1035 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/05/">May (12)</a></li>
1036
1037 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/06/">June (20)</a></li>
1038
1039 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/07/">July (17)</a></li>
1040
1041 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/08/">August (6)</a></li>
1042
1043 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/09/">September (9)</a></li>
1044
1045 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/10/">October (17)</a></li>
1046
1047 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/11/">November (10)</a></li>
1048
1049 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/12/">December (7)</a></li>
1050
1051 </ul></li>
1052
1053 <li>2011
1054 <ul>
1055
1056 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/01/">January (16)</a></li>
1057
1058 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/02/">February (6)</a></li>
1059
1060 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/03/">March (6)</a></li>
1061
1062 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/04/">April (7)</a></li>
1063
1064 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/05/">May (3)</a></li>
1065
1066 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/06/">June (2)</a></li>
1067
1068 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/07/">July (7)</a></li>
1069
1070 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/08/">August (6)</a></li>
1071
1072 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/09/">September (4)</a></li>
1073
1074 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/10/">October (2)</a></li>
1075
1076 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/11/">November (3)</a></li>
1077
1078 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/12/">December (1)</a></li>
1079
1080 </ul></li>
1081
1082 <li>2010
1083 <ul>
1084
1085 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/01/">January (2)</a></li>
1086
1087 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/02/">February (1)</a></li>
1088
1089 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/03/">March (3)</a></li>
1090
1091 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/04/">April (3)</a></li>
1092
1093 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/05/">May (9)</a></li>
1094
1095 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/06/">June (14)</a></li>
1096
1097 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/07/">July (12)</a></li>
1098
1099 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/08/">August (13)</a></li>
1100
1101 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/09/">September (7)</a></li>
1102
1103 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/10/">October (9)</a></li>
1104
1105 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/11/">November (13)</a></li>
1106
1107 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/12/">December (12)</a></li>
1108
1109 </ul></li>
1110
1111 <li>2009
1112 <ul>
1113
1114 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/01/">January (8)</a></li>
1115
1116 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/02/">February (8)</a></li>
1117
1118 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/03/">March (12)</a></li>
1119
1120 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/04/">April (10)</a></li>
1121
1122 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/05/">May (9)</a></li>
1123
1124 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/06/">June (3)</a></li>
1125
1126 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/07/">July (4)</a></li>
1127
1128 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/08/">August (3)</a></li>
1129
1130 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/09/">September (1)</a></li>
1131
1132 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/10/">October (2)</a></li>
1133
1134 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/11/">November (3)</a></li>
1135
1136 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/12/">December (3)</a></li>
1137
1138 </ul></li>
1139
1140 <li>2008
1141 <ul>
1142
1143 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/11/">November (5)</a></li>
1144
1145 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/12/">December (7)</a></li>
1146
1147 </ul></li>
1148
1149 </ul>
1150
1151
1152
1153 <h2>Tags</h2>
1154 <ul>
1155
1156  <li><a href="http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer (13)</a></li>
1157
1158  <li><a href="http://people.skolelinux.org/pere/blog/tags/amiga">amiga (1)</a></li>
1159
1160  <li><a href="http://people.skolelinux.org/pere/blog/tags/aros">aros (1)</a></li>
1161
1162  <li><a href="http://people.skolelinux.org/pere/blog/tags/bankid">bankid (4)</a></li>
1163
1164  <li><a href="http://people.skolelinux.org/pere/blog/tags/bitcoin">bitcoin (8)</a></li>
1165
1166  <li><a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem (14)</a></li>
1167
1168  <li><a href="http://people.skolelinux.org/pere/blog/tags/bsa">bsa (2)</a></li>
1169
1170  <li><a href="http://people.skolelinux.org/pere/blog/tags/chrpath">chrpath (2)</a></li>
1171
1172  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian">debian (96)</a></li>
1173
1174  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (146)</a></li>
1175
1176  <li><a href="http://people.skolelinux.org/pere/blog/tags/digistan">digistan (10)</a></li>
1177
1178  <li><a href="http://people.skolelinux.org/pere/blog/tags/docbook">docbook (10)</a></li>
1179
1180  <li><a href="http://people.skolelinux.org/pere/blog/tags/drivstoffpriser">drivstoffpriser (4)</a></li>
1181
1182  <li><a href="http://people.skolelinux.org/pere/blog/tags/english">english (243)</a></li>
1183
1184  <li><a href="http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (21)</a></li>
1185
1186  <li><a href="http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling (12)</a></li>
1187
1188  <li><a href="http://people.skolelinux.org/pere/blog/tags/freeculture">freeculture (12)</a></li>
1189
1190  <li><a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox (7)</a></li>
1191
1192  <li><a href="http://people.skolelinux.org/pere/blog/tags/frikanalen">frikanalen (11)</a></li>
1193
1194  <li><a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju (40)</a></li>
1195
1196  <li><a href="http://people.skolelinux.org/pere/blog/tags/isenkram">isenkram (7)</a></li>
1197
1198  <li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (18)</a></li>
1199
1200  <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (9)</a></li>
1201
1202  <li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (7)</a></li>
1203
1204  <li><a href="http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp (1)</a></li>
1205
1206  <li><a href="http://people.skolelinux.org/pere/blog/tags/mesh network">mesh network (8)</a></li>
1207
1208  <li><a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia (26)</a></li>
1209
1210  <li><a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk (244)</a></li>
1211
1212  <li><a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug (162)</a></li>
1213
1214  <li><a href="http://people.skolelinux.org/pere/blog/tags/offentlig innsyn">offentlig innsyn (11)</a></li>
1215
1216  <li><a href="http://people.skolelinux.org/pere/blog/tags/open311">open311 (2)</a></li>
1217
1218  <li><a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett (46)</a></li>
1219
1220  <li><a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern (72)</a></li>
1221
1222  <li><a href="http://people.skolelinux.org/pere/blog/tags/raid">raid (1)</a></li>
1223
1224  <li><a href="http://people.skolelinux.org/pere/blog/tags/reactos">reactos (1)</a></li>
1225
1226  <li><a href="http://people.skolelinux.org/pere/blog/tags/reprap">reprap (11)</a></li>
1227
1228  <li><a href="http://people.skolelinux.org/pere/blog/tags/rfid">rfid (2)</a></li>
1229
1230  <li><a href="http://people.skolelinux.org/pere/blog/tags/robot">robot (9)</a></li>
1231
1232  <li><a href="http://people.skolelinux.org/pere/blog/tags/rss">rss (1)</a></li>
1233
1234  <li><a href="http://people.skolelinux.org/pere/blog/tags/ruter">ruter (4)</a></li>
1235
1236  <li><a href="http://people.skolelinux.org/pere/blog/tags/scraperwiki">scraperwiki (2)</a></li>
1237
1238  <li><a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (39)</a></li>
1239
1240  <li><a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (4)</a></li>
1241
1242  <li><a href="http://people.skolelinux.org/pere/blog/tags/skepsis">skepsis (4)</a></li>
1243
1244  <li><a href="http://people.skolelinux.org/pere/blog/tags/standard">standard (44)</a></li>
1245
1246  <li><a href="http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll (3)</a></li>
1247
1248  <li><a href="http://people.skolelinux.org/pere/blog/tags/stortinget">stortinget (9)</a></li>
1249
1250  <li><a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance (24)</a></li>
1251
1252  <li><a href="http://people.skolelinux.org/pere/blog/tags/sysadmin">sysadmin (1)</a></li>
1253
1254  <li><a href="http://people.skolelinux.org/pere/blog/tags/valg">valg (8)</a></li>
1255
1256  <li><a href="http://people.skolelinux.org/pere/blog/tags/video">video (40)</a></li>
1257
1258  <li><a href="http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (4)</a></li>
1259
1260  <li><a href="http://people.skolelinux.org/pere/blog/tags/web">web (29)</a></li>
1261
1262 </ul>
1263
1264
1265     </div>
1266     <p style="text-align: right">
1267  Created by <a href="http://steve.org.uk/Software/chronicle">Chronicle v4.6</a>
1268 </p>
1269
1270   </body>
1271 </html>