1 <?xml version=
"1.0" encoding=
"utf-8"?>
2 <rss version='
2.0' xmlns:lj='http://www.livejournal.org/rss/lj/
1.0/' xmlns:
atom=
"http://www.w3.org/2005/Atom">
4 <title>Petter Reinholdtsen
</title>
5 <description></description>
6 <link>http://people.skolelinux.org/pere/blog/
</link>
7 <atom:link href=
"http://people.skolelinux.org/pere/blog/index.rss" rel=
"self" type=
"application/rss+xml" />
10 <title>Freedombox on Dreamplug, Raspberry Pi and virtual x86 machine
</title>
11 <link>http://people.skolelinux.org/pere/blog/Freedombox_on_Dreamplug__Raspberry_Pi_and_virtual_x86_machine.html
</link>
12 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Freedombox_on_Dreamplug__Raspberry_Pi_and_virtual_x86_machine.html
</guid>
13 <pubDate>Fri,
14 Mar
2014 11:
00:
00 +
0100</pubDate>
14 <description><p
>The
<a href=
"https://wiki.debian.org/FreedomBox
">Freedombox
15 project
</a
> is working on providing the software and hardware for
16 making it easy for non-technical people to host their data and
17 communication at home, and being able to communicate with their
18 friends and family encrypted and away from prying eyes. It has been
19 going on for a while, and is slowly progressing towards a new test
20 release (
0.2).
</p
>
22 <p
>And what day could be better than the Pi day to announce that the
23 new version will provide
"hard drive
" / SD card / USB stick images for
24 Dreamplug, Raspberry Pi and VirtualBox (or any other virtualization
25 system), and can also be installed using a Debian installer preseed
26 file. The Debian based Freedombox is now based on Debian Jessie,
27 where most of the needed packages used are already present. Only one,
28 the freedombox-setup package, is missing. To try to build your own
29 boot image to test the current status, fetch the freedom-maker scripts
31 <a href=
"http://packages.qa.debian.org/vmdebootstrap
">vmdebootstrap
</a
>
32 with a user with sudo access to become root:
35 git clone http://anonscm.debian.org/git/freedombox/freedom-maker.git \
37 sudo apt-get install git vmdebootstrap mercurial python-docutils \
38 mktorrent extlinux virtualbox qemu-user-static binfmt-support \
40 make -C freedom-maker dreamplug-image raspberry-image virtualbox-image
43 <p
>Root access is needed to run debootstrap and mount loopback
44 devices. See the README for more details on the build. If you do not
45 want all three images, trim the make line. But note that thanks to
<a
46 href=
"https://bugs.debian.org/
741407">a race condition in
47 vmdebootstrap
</a
>, the build might fail without the patch to the
48 kpartx call.
</p
>
50 <p
>If you instead want to install using a Debian CD and the preseed
51 method, boot a Debian Wheezy ISO and use this boot argument to load
52 the preseed values:
</p
>
55 url=
<a href=
"http://www.reinholdtsen.name/freedombox/preseed-jessie.dat
">http://www.reinholdtsen.name/freedombox/preseed-jessie.dat
</a
>
58 <p
>But note that due to
<a href=
"https://bugs.debian.org/
740673">a
59 recently introduced bug in apt in Jessie
</a
>, the installer will
60 currently hang while setting up APT sources. Killing the
61 '<tt
>apt-cdrom ident
</tt
>' process when it hang a few times during the
62 installation will get the installation going. This affect all
63 installations in Jessie, and I expect it will be fixed soon.
</p
>
65 Give it a go and let us know how it goes on the mailing list, and help
66 us get the new release published. :) Please join us on
67 <a href=
"irc://irc.debian.org:
6667/%
23freedombox
">IRC (#freedombox on
68 irc.debian.org)
</a
> and
69 <a href=
"http://lists.alioth.debian.org/mailman/listinfo/freedombox-discuss
">the
70 mailing list
</a
> if you want to help make this vision come true.
</p
>
75 <title>How to add extra storage servers in Debian Edu / Skolelinux
</title>
76 <link>http://people.skolelinux.org/pere/blog/How_to_add_extra_storage_servers_in_Debian_Edu___Skolelinux.html
</link>
77 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/How_to_add_extra_storage_servers_in_Debian_Edu___Skolelinux.html
</guid>
78 <pubDate>Wed,
12 Mar
2014 12:
50:
00 +
0100</pubDate>
79 <description><p
>On larger sites, it is useful to use a dedicated storage server for
80 storing user home directories and data. The design for handling this
81 in
<a href=
"http://www.skolelinux.org/
">Debian Edu / Skolelinux
</a
>, is
82 to update the automount rules in LDAP and let the automount daemon on
83 the clients take care of the rest. I was reminded about the need to
84 document this better when one of the customers of
85 <a href=
"http://www.slxdrift.no/
">Skolelinux Drift AS
</a
>, where I am
86 on the board of directors, asked about how to do this. The steps to
87 get this working are the following:
</p
>
91 <li
>Add new storage server in DNS. I use nas-server.intern as the
92 example host here.
</li
>
94 <li
>Add automoun LDAP information about this server in LDAP, to allow
95 all clients to automatically mount it on reqeust.
</li
>
97 <li
>Add the relevant entries in tjener.intern:/etc/fstab, because
98 tjener.intern do not use automount to avoid mounting loops.
</li
>
100 </ol
></p
>
102 <p
>DNS entries are added in GOsa², and not described here. Follow the
103 <a href=
"https://wiki.debian.org/DebianEdu/Documentation/Wheezy/GettingStarted
">instructions
104 in the manual
</a
> (Machine Management with GOsa² in section Getting
107 <p
>Ensure that the NFS export points on the server are exported to the
108 relevant subnets or machines:
</p
>
110 <p
><blockquote
><pre
>
111 root@tjener:~# showmount -e nas-server
112 Export list for nas-server:
115 </pre
></blockquote
></p
>
117 <p
>Here everything on the backbone network is granted access to the
118 /storage export. With NFSv3 it is slightly better to limit it to
119 netgroup membership or single IP addresses to have some limits on the
120 NFS access.
</p
>
122 <p
>The next step is to update LDAP. This can not be done using GOsa²,
123 because it lack a module for automount. Instead, use ldapvi and add
124 the required LDAP objects using an editor.
</p
>
126 <p
><blockquote
><pre
>
127 ldapvi --ldap-conf -ZD
'(cn=admin)
' -b ou=automount,dc=skole,dc=skolelinux,dc=no
128 </pre
></blockquote
></p
>
130 <p
>When the editor show up, add the following LDAP objects at the
131 bottom of the document. The
"/
&" part in the last LDAP object is a
132 wild card matching everything the nas-server exports, removing the
133 need to list individual mount points in LDAP.
</p
>
135 <p
><blockquote
><pre
>
136 add cn=nas-server,ou=auto.skole,ou=automount,dc=skole,dc=skolelinux,dc=no
137 objectClass: automount
139 automountInformation: -fstype=autofs --timeout=
60 ldap:ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no
141 add ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no
143 objectClass: automountMap
146 add cn=/,ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no
147 objectClass: automount
149 automountInformation: -fstype=nfs,tcp,rsize=
32768,wsize=
32768,rw,intr,hard,nodev,nosuid,noatime nas-server.intern:/
&
150 </pre
></blockquote
></p
>
152 <p
>The last step to remember is to mount the relevant mount points in
153 tjener.intern by adding them to /etc/fstab, creating the mount
154 directories using mkdir and running
"mount -a
" to mount them.
</p
>
156 <p
>When this is done, your users should be able to access the files on
157 the storage server directly by just visiting the
158 /tjener/nas-server/storage/ directory using any application on any
159 workstation, LTSP client or LTSP server.
</p
>
164 <title>Hvordan bør RFC
822-formattert epost lagres i en NOARK5-database?
</title>
165 <link>http://people.skolelinux.org/pere/blog/Hvordan_b_r_RFC_822_formattert_epost_lagres_i_en_NOARK5_database_.html
</link>
166 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Hvordan_b_r_RFC_822_formattert_epost_lagres_i_en_NOARK5_database_.html
</guid>
167 <pubDate>Fri,
7 Mar
2014 15:
20:
00 +
0100</pubDate>
168 <description><p
>For noen uker siden ble NXCs fri programvarelisenserte
170 <a href=
"http://www.nuug.no/aktiviteter/
20140211-noark/
">presentert hos
171 NUUG
</a
> (video
172 <a href=
"https://www.youtube.com/watch?v=JCb_dNS3MHQ
">på youtube
173 foreløbig
</a
>), og det fikk meg til å titte litt mer på NOARK5,
174 standarden for arkivhåndtering i det offentlige Norge. Jeg lurer på
175 om denne kjernen kan være nyttig i et par av mine prosjekter, og for ett
176 av dem er det mest aktuelt å lagre epost. Jeg klarte ikke finne noen
177 anbefaling om hvordan RFC
822-formattert epost (aka Internett-epost)
178 burde lagres i NOARK5, selv om jeg vet at noen arkiver tar
179 PDF-utskrift av eposten med sitt epostprogram og så arkiverer PDF-en
180 (eller enda værre, tar papirutskrift og lagrer bildet av eposten som
181 PDF i arkivet).
</p
>
183 <p
>Det er ikke så mange formater som er akseptert av riksarkivet til
184 langtidsoppbevaring av offentlige arkiver, og PDF og XML er de mest
185 aktuelle i så måte. Det slo meg at det måtte da finnes en eller annen
186 egnet XML-representasjon og at det kanskje var enighet om hvilken som
187 burde brukes, så jeg tok mot til meg og spurte
188 <a href=
"http://samdok.com/
">SAMDOK
</a
>, en gruppe tilknyttet
189 arkivverket som ser ut til å jobbe med NOARK-samhandling, om de hadde
192 <p
><blockquote
>
193 <p
>Hei.
</p
>
195 <p
>Usikker på om dette er riktig forum å ta opp mitt spørsmål, men jeg
196 lurer på om det er definert en anbefaling om hvordan RFC
197 822-formatterte epost (aka vanlig Internet-epost) bør lages håndteres
198 i NOARK5, slik at en bevarer all informasjon i eposten
199 (f.eks. Received-linjer). Finnes det en anbefalt XML-mapping ala den
201 &lt;URL:
<a href=
"https://www.informit.com/articles/article.aspx?p=
32074">https://www.informit.com/articles/article.aspx?p=
32074</a
> &gt;? Mitt
202 mål er at det skal være mulig å lagre eposten i en NOARK5-kjerne og
203 kunne få ut en identisk formattert kopi av opprinnelig epost ved
205 </blockquote
></p
>
207 <p
>Postmottaker hos SAMDOK mente spørsmålet heller burde stilles
208 direkte til riksarkivet, og jeg fikk i dag svar derfra formulert av
209 seniorrådgiver Geir Ivar Tungesvik:
</p
>
211 <p
><blockquote
>
212 <p
>Riksarkivet har ingen anbefalinger når det gjelder konvertering fra
213 e-post til XML. Det står arkivskaper fritt å eventuelt definere/bruke
214 eget format. Inklusive da - som det spørres om - et format der det er
215 mulig å re-etablere e-post format ut fra XML-en. XML (e-post)
216 dokumenter må være referert i arkivstrukturen, og det må vedlegges et
217 gyldig XML skjema (.xsd) for XML-filene. Arkivskaper står altså fritt
218 til å gjøre hva de vil, bare det dokumenteres og det kan dannes et
219 utrekk ved avlevering til depot.
</p
>
221 <p
>De obligatoriske kravene i Noark
5 standarden må altså oppfylles -
222 etter dialog med Riksarkivet i forbindelse med godkjenning. For
223 offentlige arkiv er det særlig viktig med filene loependeJournal.xml
224 og offentligJournal.xml. Private arkiv som vil forholde seg til Noark
225 5 standarden er selvsagt frie til å bruke det som er relevant for dem
226 av obligatoriske krav.
</p
>
227 </blockquote
></p
>
229 <p
>Det ser dermed ut for meg som om det er et lite behov for å
230 standardisere XML-lagring av RFC-
822-formatterte meldinger. Noen som
231 vet om god spesifikasjon i så måte? I tillegg til den omtalt over,
232 har jeg kommet over flere aktuelle beskrivelser (søk på
"rfc
822
233 xml
", så finner du aktuelle alternativer).
</p
>
237 <li
><a href=
"http://www.openhealth.org/xmtp/
">XML MIME Transformation
238 protocol (XMTP)
</a
> fra OpenHealth, sist oppdatert
2001.
</li
>
240 <li
><a href=
"https://tools.ietf.org/html/draft-klyne-message-rfc822-xml-
03">An
241 XML format for mail and other messages
</a
> utkast fra IETF datert
244 <li
><a href=
"http://www.informit.com/articles/article.aspx?p=
32074">xMail:
245 E-mail as XML
</a
> en artikkel fra
2003 som beskriver python-modulen
246 rfc822 som gir ut XML-representasjon av en RFC
822-formattert epost.
</li
>
250 <p
>Finnes det andre og bedre spesifikasjoner for slik lagring? Send
251 meg en epost hvis du har innspill.
</p
>
256 <title>Lenker for
2014-
02-
28</title>
257 <link>http://people.skolelinux.org/pere/blog/Lenker_for_2014_02_28.html
</link>
258 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Lenker_for_2014_02_28.html
</guid>
259 <pubDate>Fri,
28 Feb
2014 13:
30:
00 +
0100</pubDate>
260 <description><p
>Her er noen lenker til tekster jeg har satt pris på å lese de siste
261 månedene. Det er mye om varsleren Edward Snowden, som burde få all
262 hjelp, støtte og beskyttelse Norge kan stille opp med for å ha satt
263 totalitær overvåkning på sakskartet, men også endel annet
264 tankevekkende og interessant.
</p
>
269 <a href=
"http://www.dagbladet.no/
2013/
12/
21/nyheter/thomas_drake/nsa/overvakning/snowden/
30925886/
">-
270 NSA tenker som Stasi
</a
> - Dagbladet.no
</li
>
272 <li
>2013-
12-
19 <a href=
"http://www.dagensit.no/article2732734.ece
">-
273 Staten har ikke rett til å vite alt om deg
</a
> - DN.no
</li
>
276 <a href=
"http://www.dagbladet.no/
2013/
12/
21/nyheter/krig_og_konflikter/politikk/utenriks/
30961126/
">Nye
277 mål for NSAs spionasje avslørt
</a
> - Dagbladet.no
</li
>
280 <a href=
"http://www.dagbladet.no/
2013/
12/
19/nyheter/nsa/usa/politikk/barack_obama/
30918684/
">«NSA
281 bør fjernes fra sin makt til å samle inn metadata fra amerikanske
282 telefonsamtaler»
</a
> - Dagbladet.no
</li
>
285 <a href=
"http://www.dagbladet.no/
2013/
12/
18/kultur/meninger/hovedkronikk/debatt/snowden/
30901089/
">Etterretning,
286 overvåking, frihet og sikkerhet
</a
> - Dagbladet.no
</li
>
289 <a href=
"http://www.nrk.no/verden/snowden-vil-ha-asyl-i-brasil-
1.11423444">Snowden
290 angriper USA i åpent brev
</a
> - nrk.no
</li
>
293 <a href=
"http://www.digi.no/
925820/rettslig-nederlag-for-etterretning
">Rettslig
294 nederlag for etterretning
</a
> - digi.no
</li
>
297 <a href=
"http://www.dagbladet.no/
2013/
12/
21/kultur/meninger/hovedkommentar/kommentar/etterretning/
30963284/
">Truende
298 nedkjøling
</a
> - dagbladet.no
</li
>
301 <a href=
"http://www.aftenposten.no/viten/Matematikk-og-forstaelse-
7411849.html
">Matematikk
302 og forståelse
</a
> - aftenposten.no
</li
>
305 <a href=
"http://www.nrk.no/viten/ny-studie_sovn-reinser-hjernen-var-
1.11306106">Vi
306 søv for å reinse hjernen vår, ifølgje ny studie
</a
> - nrk.no
</li
>
309 <a href=
"http://www.nrk.no/buskerud/julebaksten-i-vasken-
1.11410033">Rotterace
310 i kloakken
</a
> - nrk.no
</li
>
313 <a href=
"http://www.aftenposten.no/viten/Apne-brev-og-frie-tanker-
7413734.html
">Åpne
314 brev og frie tanker
</a
> - aftenposten.no
</li
>
317 <a href=
"http://www.aftenposten.no/viten/Stopp-kunnskapsapartheidet-
7428229.html
">Stopp dagens kunnskapsapartheid!
</a
> - aftenposten.no
</li
>
320 <a href=
"http://www.aftenposten.no/nyheter/uriks/EU-rapport-Britisk-og-amerikansk-overvaking-ser-ut-til-a-vare-ulovlig-
7428933.html
">EU-rapport:
321 Britisk og amerikansk overvåking ser ut til å være ulovlig
</a
> -
322 aftenposten.no
</li
>
324 <li
>2013-
10-
23 Professor Jan Arild Audestad
325 <a href=
"http://www.digi.no/
924008/advarer-mot-konspirasjonsteori
">Advarer
326 mot konspirasjonsteori
</a
> i digi.no og sier han ikke tror NSA kan
327 avlytte mobiltelefoner, mens han noen måneder senere forteller:
</li
>
330 <a href=
"http://www.aftenposten.no/nyheter/iriks/--Vi-ble-presset-til-a-svekke-mobilsikkerheten-pa-
80-tallet-
7410467.html
">-
331 Vi ble presset til å svekke mobilsikkerheten på
80-tallet
</a
> -
332 aftenposten.no
</li
>
335 <a href=
"http://tv.nrk.no/program/koid20005814/et-moete-med-edward-snowden
">Et
336 møte med Edward Snowden
</a
> - intervju sendt av nrk, tilgjengelig til
337 2015-
01-
31</li
>
340 <a href=
"http://politiken.dk/debat/profiler/jessteinpedersen/ECE2210356/litteraturredaktoeren-helle-thornings-tavshed-om-snowden-er-en-skandale/
">Litteraturredaktøren:
341 Helle Thornings tavshed om Snowden er en skandale
</a
> -
342 politiken.dk
</li
>
345 <a href=
"http://www.aftenposten.no/meninger/kronikker/Bra-a-ha-en-Storebror-
7476734.html
">Bra å ha en «Storebror»
</a
> - aftenposten.no
</li
>
348 <a href=
"http://johnchristianelden.blogg.no/
1393536806_narkotikasiktet_stort.html
">"Narkotikasiktet
349 Stortingsmann
" - Spillet bak kulissene
</a
> - John Christian Eldens
353 <a href=
"http://www.aftenposten.no/meninger/Heksejakt-pa-hasjbrukere-
7486283.html
">Heksejakt
354 på hasjbrukere
</a
> - aftenposten.no
</li
>
361 <title>New home and release
1.0 for netgroup and innetgr (aka ng-utils)
</title>
362 <link>http://people.skolelinux.org/pere/blog/New_home_and_release_1_0_for_netgroup_and_innetgr__aka_ng_utils_.html
</link>
363 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/New_home_and_release_1_0_for_netgroup_and_innetgr__aka_ng_utils_.html
</guid>
364 <pubDate>Sat,
22 Feb
2014 21:
45:
00 +
0100</pubDate>
365 <description><p
>Many years ago, I wrote a GPL licensed version of the netgroup and
366 innetgr tools, because I needed them in
367 <a href=
"http://www.skolelinux.org/
">Skolelinux
</a
>. I called the project
368 ng-utils, and it has served me well. I placed the project under the
369 <a href=
"http://www.hungry.com/
">Hungry Programmer
</a
> umbrella, and it was maintained in our CVS
370 repository. But many years ago, the CVS repository was dropped (lost,
371 not migrated to new hardware, not sure), and the project have lacked a
372 proper home since then.
</p
>
374 <p
>Last summer, I had a look at the package and made a new release
375 fixing a irritating crash bug, but was unable to store the changes in
376 a proper source control system. I applied for a project on
377 <a href=
"https://alioth.debian.org/
">Alioth
</a
>, but did not have time
378 to follow up on it. Until today. :)
</p
>
380 <p
>After many hours of cleaning and migration, the ng-utils project
381 now have a new home, and a git repository with the highlight of the
382 history of the project. I published all release tarballs and imported
383 them into the git repository. As the project is really stable and not
384 expected to gain new features any time soon, I decided to make a new
385 release and call it
1.0. Visit the new project home on
386 <a href=
"https://alioth.debian.org/projects/ng-utils/
">https://alioth.debian.org/projects/ng-utils/
</a
>
387 if you want to check it out. The new version is also uploaded into
388 <a href=
"http://packages.qa.debian.org/n/ng-utils.html
">Debian Unstable
</a
>.
</p
>
393 <title>Testing sysvinit from experimental in Debian Hurd
</title>
394 <link>http://people.skolelinux.org/pere/blog/Testing_sysvinit_from_experimental_in_Debian_Hurd.html
</link>
395 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Testing_sysvinit_from_experimental_in_Debian_Hurd.html
</guid>
396 <pubDate>Mon,
3 Feb
2014 13:
40:
00 +
0100</pubDate>
397 <description><p
>A few days ago I decided to try to help the Hurd people to get
398 their changes into sysvinit, to allow them to use the normal sysvinit
399 boot system instead of their old one. This follow up on the
400 <a href=
"https://teythoon.cryptobitch.de//categories/gsoc.html
">great
401 Google Summer of Code work
</a
> done last summer by Justus Winter to
402 get Debian on Hurd working more like Debian on Linux. To get started,
403 I downloaded a prebuilt hard disk image from
404 <a href=
"http://ftp.debian-ports.org/debian-cd/hurd-i386/current/debian-hurd.img.tar.gz
">http://ftp.debian-ports.org/debian-cd/hurd-i386/current/debian-hurd.img.tar.gz
</a
>,
405 and started it using virt-manager.
</p
>
407 <p
>The first think I had to do after logging in (root without any
408 password) was to get the network operational. I followed
409 <a href=
"https://www.debian.org/ports/hurd/hurd-install
">the
410 instructions on the Debian GNU/Hurd ports page
</a
> and ran these
411 commands as root to get the machine to accept a IP address from the
412 kvm internal DHCP server:
</p
>
414 <p
><blockquote
><pre
>
415 settrans -fgap /dev/netdde /hurd/netdde
416 kill $(ps -ef|awk
'/[p]finet/ { print $
2}
')
417 kill $(ps -ef|awk
'/[d]evnode/ { print $
2}
')
419 </pre
></blockquote
></p
>
421 <p
>After this, the machine had internet connectivity, and I could
422 upgrade it and install the sysvinit packages from experimental and
423 enable it as the default boot system in Hurd.
</p
>
425 <p
>But before I did that, I set a password on the root user, as ssh is
426 running on the machine it for ssh login to work a password need to be
427 set. Also, note that a bug somewhere in openssh on Hurd block
428 compression from working. Remember to turn that off on the client
431 <p
>Run these commands as root to upgrade and test the new sysvinit
434 <p
><blockquote
><pre
>
435 cat
> /etc/apt/sources.list.d/experimental.list
&lt;
&lt;EOF
436 deb http://http.debian.net/debian/ experimental main
440 apt-get install -t experimental initscripts sysv-rc sysvinit \
441 sysvinit-core sysvinit-utils
442 update-alternatives --config runsystem
443 </pre
></blockquote
></p
>
445 <p
>To reboot after switching boot system, you have to use
446 <tt
>reboot-hurd
</tt
> instead of just
<tt
>reboot
</tt
>, as there is not
447 yet a sysvinit process able to receive the signals from the normal
448 'reboot
' command. After switching to sysvinit as the boot system,
449 upgrading every package and rebooting, the network come up with DHCP
450 after boot as it should, and the settrans/pkill hack mentioned at the
451 start is no longer needed. But for some strange reason, there are no
452 longer any login prompt in the virtual console, so I logged in using
455 <p
>Note that there are some race conditions in Hurd making the boot
456 fail some times. No idea what the cause is, but hope the Hurd porters
457 figure it out. At least Justus said on IRC (#debian-hurd on
458 irc.debian.org) that they are aware of the problem. A way to reduce
459 the impact is to upgrade to the Hurd packages built by Justus by
460 adding this repository to the machine:
</p
>
462 <p
><blockquote
><pre
>
463 cat
> /etc/apt/sources.list.d/hurd-ci.list
&lt;
&lt;EOF
464 deb http://darnassus.sceen.net/~teythoon/hurd-ci/ sid main
466 </pre
></blockquote
></p
>
468 <p
>At the moment the prebuilt virtual machine get some packages from
469 http://ftp.debian-ports.org/debian, because some of the packages in
470 unstable do not yet include the required patches that are lingering in
471 BTS. This is the completely list of
"unofficial
" packages installed:
</p
>
473 <p
><blockquote
><pre
>
474 # aptitude search
'?narrow(?version(CURRENT),?origin(Debian Ports))
'
475 i emacs - GNU Emacs editor (metapackage)
477 i hurd-recommended - Miscellaneous translators
478 i isc-dhcp-client - ISC DHCP client
479 i isc-dhcp-common - common files used by all the isc-dhcp* packages
480 i libc-bin - Embedded GNU C Library: Binaries
481 i libc-dev-bin - Embedded GNU C Library: Development binaries
482 i libc0.3 - Embedded GNU C Library: Shared libraries
483 i A libc0.3-dbg - Embedded GNU C Library: detached debugging symbols
484 i libc0.3-dev - Embedded GNU C Library: Development Libraries and Hea
485 i multiarch-support - Transitional package to ensure multiarch compatibilit
486 i A x11-common - X Window System (X.Org) infrastructure
487 i xorg - X.Org X Window System
488 i A xserver-xorg - X.Org X server
489 i A xserver-xorg-input-all - X.Org X server -- input driver metapackage
491 </pre
></blockquote
></p
>
493 <p
>All in all, testing hurd has been an interesting experience. :)
494 X.org did not work out of the box and I never took the time to follow
495 the porters instructions to fix it. This time I was interested in the
496 command line stuff.
<p
>
501 <title>A fist full of non-anonymous Bitcoins
</title>
502 <link>http://people.skolelinux.org/pere/blog/A_fist_full_of_non_anonymous_Bitcoins.html
</link>
503 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/A_fist_full_of_non_anonymous_Bitcoins.html
</guid>
504 <pubDate>Wed,
29 Jan
2014 14:
10:
00 +
0100</pubDate>
505 <description><p
>Bitcoin is a incredible use of peer to peer communication and
506 encryption, allowing direct and immediate money transfer without any
507 central control. It is sometimes claimed to be ideal for illegal
508 activity, which I believe is quite a long way from the truth. At least
509 I would not conduct illegal money transfers using a system where the
510 details of every transaction are kept forever. This point is
512 <a href=
"https://www.usenix.org/publications/login
">USENIX ;login:
</a
>
513 from December
2013, in the article
514 "<a href=
"https://www.usenix.org/system/files/login/articles/
03_meiklejohn-online.pdf
">A
515 Fistful of Bitcoins - Characterizing Payments Among Men with No
516 Names
</a
>" by Sarah Meiklejohn, Marjori Pomarole,Grant Jordan, Kirill
517 Levchenko, Damon McCoy, Geoffrey M. Voelker, and Stefan Savage. They
518 analyse the transaction log in the Bitcoin system, using it to find
519 addresses belong to individuals and organisations and follow the flow
520 of money from both Bitcoin theft and trades on Silk Road to where the
521 money end up. This is how they wrap up their article:
</p
>
523 <p
><blockquote
>
524 <p
>"To demonstrate the usefulness of this type of analysis, we turned
525 our attention to criminal activity. In the Bitcoin economy, criminal
526 activity can appear in a number of forms, such as dealing drugs on
527 Silk Road or simply stealing someone else’s bitcoins. We followed the
528 flow of bitcoins out of Silk Road (in particular, from one notorious
529 address) and from a number of highly publicized thefts to see whether
530 we could track the bitcoins to known services. Although some of the
531 thieves attempted to use sophisticated mixing techniques (or possibly
532 mix services) to obscure the flow of bitcoins, for the most part
533 tracking the bitcoins was quite straightforward, and we ultimately saw
534 large quantities of bitcoins flow to a variety of exchanges directly
535 from the point of theft (or the withdrawal from Silk Road).
</p
>
537 <p
>As acknowledged above, following stolen bitcoins to the point at
538 which they are deposited into an exchange does not in itself identify
539 the thief; however, it does enable further de-anonymization in the
540 case in which certain agencies can determine (through, for example,
541 subpoena power) the real-world owner of the account into which the
542 stolen bitcoins were deposited. Because such exchanges seem to serve
543 as chokepoints into and out of the Bitcoin economy (i.e., there are
544 few alternative ways to cash out), we conclude that using Bitcoin for
545 money laundering or other illicit purposes does not (at least at
546 present) seem to be particularly attractive.
"</p
>
547 </blockquote
><p
>
549 <p
>These researches are not the first to analyse the Bitcoin
550 transaction log. The
2011 paper
551 "<a href=
"http://arxiv.org/abs/
1107.4524">An Analysis of Anonymity in
552 the Bitcoin System
</A
>" by Fergal Reid and Martin Harrigan is
553 summarized like this:
</p
>
555 <p
><blockquote
>
556 "Anonymity in Bitcoin, a peer-to-peer electronic currency system, is a
557 complicated issue. Within the system, users are identified by
558 public-keys only. An attacker wishing to de-anonymize its users will
559 attempt to construct the one-to-many mapping between users and
560 public-keys and associate information external to the system with the
561 users. Bitcoin tries to prevent this attack by storing the mapping of
562 a user to his or her public-keys on that user
's node only and by
563 allowing each user to generate as many public-keys as required. In
564 this chapter we consider the topological structure of two networks
565 derived from Bitcoin
's public transaction history. We show that the
566 two networks have a non-trivial topological structure, provide
567 complementary views of the Bitcoin system and have implications for
568 anonymity. We combine these structures with external information and
569 techniques such as context discovery and flow analysis to investigate
570 an alleged theft of Bitcoins, which, at the time of the theft, had a
571 market value of approximately half a million U.S. dollars.
"
572 </blockquote
></p
>
574 <p
>I hope these references can help kill the urban myth that Bitcoin
575 is anonymous. It isn
't really a good fit for illegal activites. Use
576 cash if you need to stay anonymous, at least until regular DNA
577 sampling of notes and coins become the norm. :)
</p
>
579 <p
>As usual, if you use Bitcoin and want to show your support of my
580 activities, please send Bitcoin donations to my address
581 <b
><a href=
"bitcoin:
15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b
&label=PetterReinholdtsenBlog
">15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b
</a
></b
>.
</p
>
586 <title>New chrpath release
0.16</title>
587 <link>http://people.skolelinux.org/pere/blog/New_chrpath_release_0_16.html
</link>
588 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/New_chrpath_release_0_16.html
</guid>
589 <pubDate>Tue,
14 Jan
2014 11:
00:
00 +
0100</pubDate>
590 <description><p
><a href=
"http://www.coverity.com/
">Coverity
</a
> is a nice tool to
591 find problems in C, C++ and Java code using static source code
592 analysis. It can detect a lot of different problems, and is very
593 useful to find memory and locking bugs in the error handling part of
594 the source. The company behind it provide
595 <a href=
"https://scan.coverity.com/
">check of free software projects as
596 a community service
</a
>, and many hundred free software projects are
597 already checked. A few days ago I decided to have a closer look at
598 the Coverity system, and discovered that the
599 <a href=
"http://www.gnu.org/software/gnash/
">gnash
</a
> and
600 <a href=
"http://sourceforge.net/projects/ipmitool/
">ipmitool
</a
>
601 projects I am involved with was already registered. But these are
602 fairly big, and I would also like to have a small and easy project to
603 check, and decided to
<a href=
"http://scan.coverity.com/projects/
1179">request
604 checking of the chrpath project
</a
>. It was
605 added to the checker and discovered seven potential defects. Six of
606 these were real, mostly resource
"leak
" when the program detected an
607 error. Nothing serious, as the resources would be released a fraction
608 of a second later when the program exited because of the error, but it
609 is nice to do it right in case the source of the program some time in
610 the future end up in a library. Having fixed all defects and added
611 <a href=
"https://lists.alioth.debian.org/mailman/listinfo/chrpath-devel
">a
612 mailing list for the chrpath developers
</a
>, I decided it was time to
613 publish a new release. These are the release notes:
</p
>
615 <p
>New in
0.16 released
2014-
01-
14:
</p
>
619 <li
>Fixed all minor bugs discovered by Coverity.
</li
>
620 <li
>Updated config.sub and config.guess from the GNU project.
</li
>
621 <li
>Mention new project mailing list in the documentation.
</li
>
626 <a href=
"https://alioth.debian.org/frs/?group_id=
31052">download the
627 new version
0.16 from alioth
</a
>. Please let us know via the Alioth
628 project if something is wrong with the new release. The test suite
629 did not discover any old errors, so if you find a new one, please also
630 include a test suite check.
</p
>
635 <title>Debian Edu interview: Dominik George
</title>
636 <link>http://people.skolelinux.org/pere/blog/Debian_Edu_interview__Dominik_George.html
</link>
637 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Debian_Edu_interview__Dominik_George.html
</guid>
638 <pubDate>Wed,
25 Dec
2013 13:
40:
00 +
0100</pubDate>
639 <description><p
>The
<a href=
"http://www.skolelinux.org/
">Debian Edu / Skolelinux
640 project
</a
> consist of both newcomers and old timers, and this time I
641 was able to get an interview with a newcomer in the project who showed
642 up on the IRC channel a few weeks ago to let us know about his
643 successful installation of Debian Edu Wheezy in his School. Say hello
644 to
<a href=
"https://www.ohloh.net/accounts/Natureshadow
">Dominik
645 George
</a
>.
</p
>
647 <!-- http://www.dominik-george.de/images/foto.jpg --
>
649 <p
><strong
>Who are you, and how do you spend your days?
</strong
></p
>
651 <p
>I am a
23 year-old student from Germany who has spent half of his
652 life with open source. In
"real life
", I am, as already mentioned, a
653 student in the fields of Computer Science, Electrical Engineering,
654 Information Technologies and Anglistics. Due to my (only partially
655 voluntary) huge engagement in the open source world, these things are
656 a bit vacant right now however.
</p
>
658 <p
>I also have been working as a project teacher at a Gymasnium
659 (public school) for various years now. I took up that work some time
660 around
2005 when still attending that school myself and have continued
661 it until today. I also had been running the (kind of very advanced)
662 network of that school together with a team of very interested and
663 talented students in the age of
11 to
15 years, who took the chance to
664 learn a lot about open source and networking before I left the school
665 to help building another school
's informational education concept from
668 <p
>That said, one might see me as a kind of
"glue
" between school kids
669 and the elderly of teachers as well as between the open source
670 ecosystem and the (even more complex) educational ecosystem.
</p
>
672 <p
>When I am not busy with open source or education, I like Geocaching
673 and cycling.
</p
>
675 <p
><strong
>How did you get in contact with the Skolelinux / Debian Edu
676 project?
</strong
></p
>
678 <p
>I think that happened some time around
2009 when I first attended
679 <a href=
"http://www.froscon.org
">FrOSCon
</a
> and visited the project
680 booth. I think I wasn
't too interested back then because I used to
681 have an attitude of disliking software that does too much stuff on its
682 own. Maybe I was too inexperienced to realise the upsides of an
683 "out-of-the-box
" solution ;).
</p
>
685 <p
>The first time I actively talked to Skolelinux people was at
686 <a href=
"http://www.openrheinruhr.de
">OpenRheinRuhr
</a
> 2011 when the
687 BiscuIT project, a home-grewn software used by my school for various
688 really cool things from timetables and class contact lists to lunch
689 ordering, student ID card printing and project elections first got to
690 a stage where it could have been published. I asked the Skolelinux
691 guys running the booth if the project were interested in it and gave a
692 small demonstration, but there wasn
't any real feedback and the guys
693 seemed rather uninterested.
</p
>
695 <p
>After I left the school where I developed the software, it got
696 mostly lost, but I am now reimplementing it for my new school. I have
697 reusability and compatibility in mind, and I hop there will be a new
698 basis for contributing it to the Skolelinux project ;)!
</p
>
700 <p
><strong
>What do you see as the advantages of Skolelinux / Debian
701 Edu?
</strong
></p
>
703 <p
>The most important advantage seems to be that it
"just
704 works
". After overcoming some minor (but still very annoying) glitches
705 in the installer, I got a fully functional, working school network,
706 without the month-long hassle I experienced when setting all that up
707 from scratch in earlier years. And above that, it rocked - I didn
't
708 have any real hardware at hand, because the school was just founded
709 and has no money whatsoever, so I installed a combined server (main
710 server, terminal services and workstation) in a VM on my personal
711 notebook, bridging the LTSP network interface to the ethernet port,
712 and then PXE-booted the Windows notebooks that were lying around from
713 it. I could use
8 clients without any performance issues, by using a
714 tiny little VM on a tiny little notebook. I think that
's enough to say
715 that it rocks!
</p
>
717 <p
>Secondly, there are marketing reasons. Life
's bad, and so no
718 politician will ever permit a setup described as
"Debian, an universal
719 operating system, with some really cool educational tools
" while they
720 will be jsut fine with
"Skolelinux, a single-purpose solution for your
721 school network
", even if both turn out to be the very same thing (yes,
722 this is unfair towards the Skolelinux project, and must not be taken
723 too seriously - you get the idea, anyway).
</p
>
725 <p
><strong
>What do you see as the disadvantages of Skolelinux / Debian
726 Edu?
</strong
></p
>
728 <p
>I have not been involved with Skolelinux long enough to really
729 answer this question in a fair way. Thus, please allow me to put it in
730 other words:
"What do you expect from Skolelinux to keep liking it?
" I
731 can list a few points about that:
</p
>
735 <li
>always strive to get all things integrated into Debian upstream
736 <li
>be open to discussion about changes and the like, even with newcomers
737 <li
>be helpful at being helpful ;)
741 <p
>I
'm really sorry I cannot say much more about that :(!
</p
>
743 <p
><strong
>Which free software do you use daily?
</strong
></p
>
745 <p
>First of all, all software I use is free and open. I have abandoned
746 all non-free software (except for firmware on my darned phone) this
749 <p
>I run Debian GNU/Linux on all PC systems I use. On that, I mostly
750 run text tools. I use
751 <a href=
"https://www.mirbsd.org/mksh.htm
">mksh
</a
> as shell,
752 <a href=
"https://www.mirbsd.org/jupp.htm
">jupp
</a
> as very advanced
753 text editor (I even got the developer to help me write a script/macro
754 based full-featured student management software with the two),
755 <a href=
"http://mcabber.com/
">mcabber
</a
> for XMPP and
756 <a href=
"http://www.irssi.org/
">irssi
</a
> for IRC. For that overly
757 coloured world called the WWW, I use
758 <a href=
"https://www.mozilla.org/en-US/firefox/new/
">Iceweasel
759 (Firefox)
</a
>. Oh, and
<a href=
"http://www.mutt.org/
">mutt
</a
> for
762 <p
>However, while I am personally aware of the fact that text tools
763 are more efficient and powerful than anything else, I also use (or at
764 least operate) some tools that are suitable to bring open source to
765 kids. One of these things is
<a href=
"http://jappix.org/
">Jappix
</a
>,
766 which I already introduced to some kids even before they got aware of
767 Facebook, making them see for themselves that they do not need
768 Facebook now ;).
</p
>
770 <p
><strong
>Which strategy do you believe is the right one to use to
771 get schools to use free software?
</strong
></p
>
773 <p
>Well, that
's a two-sided thing. One side is what I believe, and one
774 side is what I have experienced.
</p
>
776 <p
>I believe that the right strategy is showing them the benefits. But
777 that won
't work out as long as the acceptance of free alternatives
778 grows globally. What I mean is that if all the kids are almost forced
779 to use Windows, Facebook, Skype, you name it at home, they will not
780 see why they would want to use alternatives at school. I have seen
781 students take seat in front of a fully-functional, modern Debian
782 desktop that could do anything their Windows at home could do, and
783 they jsut refused to use it because
"Linux sucks
". It is something
784 that makes the council of our city spend around
600000 € to buy
785 software - not including hardware, mind you - for operating school
786 networks, and for installing a system that, as has been proved, does
787 not work. For those of you readers who are good at maths, have you
788 already found out how many lives could have been saved with that money
789 if we had instead used it to bring education to parts of the world
790 that need it? I have, and found it to be nothing less dramatic than
791 plain criminal.
</p
>
793 <p
>That said, the only feasible way appears to be the bottom up
794 method. We have to bring free software to kids and parents. I have
795 founded an association named
796 <a href=
"https://www.teckids.org
">Teckids
</a
> here in Germany that does
797 just that. We organise several events for kids and adolescents in the
798 area of free and open source software, for example the
799 <a href=
"http://kids.froscon.org
">FrogLabs
</a
>, which share staff with
800 Teckids and are the youth programme of
801 <a href=
"http://www.froscon.org
">the Free and Open Source Software
802 Conference (FrOSCon)
</a
>. We do a lot more than most other conferences
803 - this year, we first offered the FrogLabs as a holiday camp for kids
804 aged
10 to
16. It was a huge success, with approx.
30 kids taking part
805 and learning with and about free software through a whole weekend. All
806 of us had a lot of fun, and the results were really exciting.
</p
>
808 <p
>Apart from that, we are preparing a campaign that is supposed to bring
809 the message of free alternatives to stuff kids use every day to them and
810 their parents, e.g. the use of Jabber / Jappix instead of Facebook and
811 Skype. To make that possible, we are planning to get together a team of
812 clever kids who understand very well what their peers need and can bring
813 it across to them. So we will have a peer-driven network of adolescents
814 who teach each other and collect feedback from the community of minors.
815 We then take that feedback and our own experience to work closely with
816 open source projects, such as Skolelinux or Jappix, at improving their
817 software in a way that makes it more and more attractive for the target
818 group. At least I hope that we will have good cooperation with
819 Skolelinux in the future ;)!
</p
>
821 <p
>So in conclusion, what I believe is that, if it weren
't for the world
822 being so bad, it should be very clear to the political decision makers
823 that the only way to go nowadays is free software for various reasons,
824 but I have learnt that the only way that seems to work is bottom up.
</p
>
828 > * Who should be interviewed with this questions in the future?
830 That
's probably the hardest question of them all, as I do not know the
831 community. However, I would be willing to do the following:
833 <li
>Run an interview with a German headteacher who is very open to
834 free software, and also prefers it, but cannot really use it because
835 of the decision makers above;
836 <li
>Run interviews with some kids, both with and without previous
837 knowledge about free software
839 If that is wanted, just let me know ;).
846 <title>Dugnadsnett for alle stiller på Oslo Maker Faire i januar
2014</title>
847 <link>http://people.skolelinux.org/pere/blog/Dugnadsnett_for_alle_stiller_p__Oslo_Maker_Faire_i_januar_2014.html
</link>
848 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Dugnadsnett_for_alle_stiller_p__Oslo_Maker_Faire_i_januar_2014.html
</guid>
849 <pubDate>Tue,
10 Dec
2013 19:
20:
00 +
0100</pubDate>
850 <description><p
>Helga
18. og
19. januar
2014 arrangeres
851 <a href=
"http://makerfaireoslo.no/no/program/dugnadsnett
">Oslo Maker
852 Faire
</a
>, og
<a href=
"http://www.dugnadsnett.no/
">Dugnadsnett for
853 alle
</a
> har fått plass! Planen er å ha et bord med en plakat der vi
854 forteller om hva Dugnadsnett for alle er for noe, og et lite verksted
855 der vi hjelper folk som er interessert i å få opp sin egen mesh-node.
856 Jeg gleder meg til å se hvordan prosjektet blir mottatt der.
</p
>
858 <p
>Målet med dugnadsnett for alle i Oslo er å få på plass et datanett
859 for kommunikasjon ved hjelp av radio-repeaterstasjoner (kalt
860 mesh-noder) som gjør at en kan direkte kommunisere med slekt, venner
861 og bekjente i Oslo via andre som deltar i dugnadsnettet, samt gjøre
862 det mulig komme ut på internett via dugnadsnettet. Første delmål er å
863 kunne sende SMS-meldinger vha. IP-telefoni løsningen
864 <a href=
"http://www.servalproject.org/
">Serval project
</a
> mellom
865 deltagerne i Dugnadsnett for alle i Oslo. Formålet er å ta tilbake
866 kontrollen over egen nett-infrastruktur og gjøre det dyrere å bedrive
867 massiv innsamling av informasjon om borgernes bruk av datanett.
</p
>
869 <p
>Høres dette interessant ut? Bli med på prosjektet, fortell oss
870 hvor du kunne tenke deg å sette opp en radio-repeater (slik at folk i
871 nærheten kan finne hverandre ved hjelp av
872 <a href=
"http://flynor.net/mesh/mesh.php
">kartet over planlagte og
873 eksisterende radio-repeatere
</A
>), bli med på epostlisten
874 <a href=
"http://lists.nuug.no/mailman/listinfo/dugnadsnett
">dugnadsnett
875 (at) nuug.no
</a
> og stikk innom
876 <a href=
"irc://irc.freenode.net/#dugnadsnett.no
">IRC-kanalen
877 #dugnadsnett.no
</a
>. Så langt er det planlagt over
40
878 radio-repeatere, med VPN-forbindelser via Internet for å la de delene
879 av nettet som ikke når hverandre via radio kunne snakke med hverandre