1 <?xml version=
"1.0" encoding=
"utf-8"?>
2 <rss version='
2.0' xmlns:lj='http://www.livejournal.org/rss/lj/
1.0/' xmlns:
atom=
"http://www.w3.org/2005/Atom">
4 <title>Petter Reinholdtsen
</title>
5 <description></description>
6 <link>http://people.skolelinux.org/pere/blog/
</link>
7 <atom:link href=
"http://people.skolelinux.org/pere/blog/index.rss" rel=
"self" type=
"application/rss+xml" />
10 <title>Freedombox on Dreamplug, Raspberry Pi and virtual x86 machine
</title>
11 <link>http://people.skolelinux.org/pere/blog/Freedombox_on_Dreamplug__Raspberry_Pi_and_virtual_x86_machine.html
</link>
12 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Freedombox_on_Dreamplug__Raspberry_Pi_and_virtual_x86_machine.html
</guid>
13 <pubDate>Fri,
14 Mar
2014 11:
00:
00 +
0100</pubDate>
14 <description><p
>The
<a href=
"https://wiki.debian.org/FreedomBox
">Freedombox
15 project
</a
> is working on to providing the software and hardware for
16 making it easy for non-technical people to host their data and
17 communication at home, and being able to communicate with their
18 friends and family encrypted and away from prying eyes. It has been
19 going on for a while, and is slowly progressing towards a new test
20 release (
0.2). And what day could be better than the Pi day to
21 announce that the new version will provide
"hard drive
"/SD card/USB
22 stick images for Dreamplug, Raspberry Pi and VirtualBox (or any other
23 virtualization system), and can also be installed using a Debian
24 installer preseed file. The Debian based Freedombox is now based on
25 Debian Jessie, where most of the needed packages used are already
26 present. Only one, the freedombox-setup package, is missing. To try
27 to build your own boot image to test the current status, fetch the
28 freedom-maker scripts and build using
29 <a href=
"http://packages.qa.debian.org/vmdebootstrap
">vmdebootstrap
</a
>
30 with a user with sudo access to become root:
33 git clone http://anonscm.debian.org/git/freedombox/freedom-maker.git \
35 sudo apt-get install git vmdebootstrap mercurial python-docutils \
36 mktorrent extlinux virtualbox qemu-user-static binfmt-support \
38 make -C freedom-maker dreamplug-image raspberry-image virtualbox-image
41 <p
>Root access is needed to run debootstrap and mount loopback
42 devices. See the README for more details on the build. If you do not
43 want all three images, trim the make line. But note that thanks to
<a
44 href=
"https://bugs.debian.org/
741407">a race condition in
45 vmdebootstrap
</a
>, the build might fail without the patch to the
46 kpartx call.
</p
>
48 <p
>If you instead want to install using a Debian CD and the preseed
49 method, boot a Debian Wheezy ISO and use this boot argument to load
50 the preseed values:
</p
>
53 url=
<a href=
"http://www.reinholdtsen.name/freedombox/preseed-jessie.dat
">http://www.reinholdtsen.name/freedombox/preseed-jessie.dat
</a
>
56 <p
>But note that due to
<a href=
"https://bugs.debian.org/
740673">a
57 recently introduced bug in apt in Jessie
</a
>, the installer will
58 currently hang while setting up APT sources. Killing the
59 '<tt
>apt-cdrom ident
</tt
>' process when it hang a few times during the
60 installation will get the installation going. This affect all
61 installations in Jessie, and I expect it will be fixed soon.
</p
>
63 Give it a go and let us know how it goes on the mailing list, and help
64 us get the new release published. :) Please join us on
65 <a href=
"irc://irc.debian.org:
6667/%
23freedombox
">IRC (#freedombox on
66 irc.debian.org)
</a
> and
67 <a href=
"http://lists.alioth.debian.org/mailman/listinfo/freedombox-discuss
">the
68 mailing list
</a
> if you want to help make this vision come true.
</p
>
73 <title>How to add extra storage servers in Debian Edu / Skolelinux
</title>
74 <link>http://people.skolelinux.org/pere/blog/How_to_add_extra_storage_servers_in_Debian_Edu___Skolelinux.html
</link>
75 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/How_to_add_extra_storage_servers_in_Debian_Edu___Skolelinux.html
</guid>
76 <pubDate>Wed,
12 Mar
2014 12:
50:
00 +
0100</pubDate>
77 <description><p
>On larger sites, it is useful to use a dedicated storage server for
78 storing user home directories and data. The design for handling this
79 in
<a href=
"http://www.skolelinux.org/
">Debian Edu / Skolelinux
</a
>, is
80 to update the automount rules in LDAP and let the automount daemon on
81 the clients take care of the rest. I was reminded about the need to
82 document this better when one of the customers of
83 <a href=
"http://www.slxdrift.no/
">Skolelinux Drift AS
</a
>, where I am
84 on the board of directors, asked about how to do this. The steps to
85 get this working are the following:
</p
>
89 <li
>Add new storage server in DNS. I use nas-server.intern as the
90 example host here.
</li
>
92 <li
>Add automoun LDAP information about this server in LDAP, to allow
93 all clients to automatically mount it on reqeust.
</li
>
95 <li
>Add the relevant entries in tjener.intern:/etc/fstab, because
96 tjener.intern do not use automount to avoid mounting loops.
</li
>
100 <p
>DNS entries are added in GOsa², and not described here. Follow the
101 <a href=
"https://wiki.debian.org/DebianEdu/Documentation/Wheezy/GettingStarted
">instructions
102 in the manual
</a
> (Machine Management with GOsa² in section Getting
105 <p
>Ensure that the NFS export points on the server are exported to the
106 relevant subnets or machines:
</p
>
108 <p
><blockquote
><pre
>
109 root@tjener:~# showmount -e nas-server
110 Export list for nas-server:
113 </pre
></blockquote
></p
>
115 <p
>Here everything on the backbone network is granted access to the
116 /storage export. With NFSv3 it is slightly better to limit it to
117 netgroup membership or single IP addresses to have some limits on the
118 NFS access.
</p
>
120 <p
>The next step is to update LDAP. This can not be done using GOsa²,
121 because it lack a module for automount. Instead, use ldapvi and add
122 the required LDAP objects using an editor.
</p
>
124 <p
><blockquote
><pre
>
125 ldapvi --ldap-conf -ZD
'(cn=admin)
' -b ou=automount,dc=skole,dc=skolelinux,dc=no
126 </pre
></blockquote
></p
>
128 <p
>When the editor show up, add the following LDAP objects at the
129 bottom of the document. The
"/
&" part in the last LDAP object is a
130 wild card matching everything the nas-server exports, removing the
131 need to list individual mount points in LDAP.
</p
>
133 <p
><blockquote
><pre
>
134 add cn=nas-server,ou=auto.skole,ou=automount,dc=skole,dc=skolelinux,dc=no
135 objectClass: automount
137 automountInformation: -fstype=autofs --timeout=
60 ldap:ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no
139 add ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no
141 objectClass: automountMap
144 add cn=/,ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no
145 objectClass: automount
147 automountInformation: -fstype=nfs,tcp,rsize=
32768,wsize=
32768,rw,intr,hard,nodev,nosuid,noatime nas-server.intern:/
&
148 </pre
></blockquote
></p
>
150 <p
>The last step to remember is to mount the relevant mount points in
151 tjener.intern by adding them to /etc/fstab, creating the mount
152 directories using mkdir and running
"mount -a
" to mount them.
</p
>
154 <p
>When this is done, your users should be able to access the files on
155 the storage server directly by just visiting the
156 /tjener/nas-server/storage/ directory using any application on any
157 workstation, LTSP client or LTSP server.
</p
>
162 <title>Hvordan bør RFC
822-formattert epost lagres i en NOARK5-database?
</title>
163 <link>http://people.skolelinux.org/pere/blog/Hvordan_b_r_RFC_822_formattert_epost_lagres_i_en_NOARK5_database_.html
</link>
164 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Hvordan_b_r_RFC_822_formattert_epost_lagres_i_en_NOARK5_database_.html
</guid>
165 <pubDate>Fri,
7 Mar
2014 15:
20:
00 +
0100</pubDate>
166 <description><p
>For noen uker siden ble NXCs fri programvarelisenserte
168 <a href=
"http://www.nuug.no/aktiviteter/
20140211-noark/
">presentert hos
169 NUUG
</a
> (video
170 <a href=
"https://www.youtube.com/watch?v=JCb_dNS3MHQ
">på youtube
171 foreløbig
</a
>), og det fikk meg til å titte litt mer på NOARK5,
172 standarden for arkivhåndtering i det offentlige Norge. Jeg lurer på
173 om denne kjernen kan være nyttig i et par av mine prosjekter, og for ett
174 av dem er det mest aktuelt å lagre epost. Jeg klarte ikke finne noen
175 anbefaling om hvordan RFC
822-formattert epost (aka Internett-epost)
176 burde lagres i NOARK5, selv om jeg vet at noen arkiver tar
177 PDF-utskrift av eposten med sitt epostprogram og så arkiverer PDF-en
178 (eller enda værre, tar papirutskrift og lagrer bildet av eposten som
179 PDF i arkivet).
</p
>
181 <p
>Det er ikke så mange formater som er akseptert av riksarkivet til
182 langtidsoppbevaring av offentlige arkiver, og PDF og XML er de mest
183 aktuelle i så måte. Det slo meg at det måtte da finnes en eller annen
184 egnet XML-representasjon og at det kanskje var enighet om hvilken som
185 burde brukes, så jeg tok mot til meg og spurte
186 <a href=
"http://samdok.com/
">SAMDOK
</a
>, en gruppe tilknyttet
187 arkivverket som ser ut til å jobbe med NOARK-samhandling, om de hadde
190 <p
><blockquote
>
191 <p
>Hei.
</p
>
193 <p
>Usikker på om dette er riktig forum å ta opp mitt spørsmål, men jeg
194 lurer på om det er definert en anbefaling om hvordan RFC
195 822-formatterte epost (aka vanlig Internet-epost) bør lages håndteres
196 i NOARK5, slik at en bevarer all informasjon i eposten
197 (f.eks. Received-linjer). Finnes det en anbefalt XML-mapping ala den
199 &lt;URL:
<a href=
"https://www.informit.com/articles/article.aspx?p=
32074">https://www.informit.com/articles/article.aspx?p=
32074</a
> &gt;? Mitt
200 mål er at det skal være mulig å lagre eposten i en NOARK5-kjerne og
201 kunne få ut en identisk formattert kopi av opprinnelig epost ved
203 </blockquote
></p
>
205 <p
>Postmottaker hos SAMDOK mente spørsmålet heller burde stilles
206 direkte til riksarkivet, og jeg fikk i dag svar derfra formulert av
207 seniorrådgiver Geir Ivar Tungesvik:
</p
>
209 <p
><blockquote
>
210 <p
>Riksarkivet har ingen anbefalinger når det gjelder konvertering fra
211 e-post til XML. Det står arkivskaper fritt å eventuelt definere/bruke
212 eget format. Inklusive da - som det spørres om - et format der det er
213 mulig å re-etablere e-post format ut fra XML-en. XML (e-post)
214 dokumenter må være referert i arkivstrukturen, og det må vedlegges et
215 gyldig XML skjema (.xsd) for XML-filene. Arkivskaper står altså fritt
216 til å gjøre hva de vil, bare det dokumenteres og det kan dannes et
217 utrekk ved avlevering til depot.
</p
>
219 <p
>De obligatoriske kravene i Noark
5 standarden må altså oppfylles -
220 etter dialog med Riksarkivet i forbindelse med godkjenning. For
221 offentlige arkiv er det særlig viktig med filene loependeJournal.xml
222 og offentligJournal.xml. Private arkiv som vil forholde seg til Noark
223 5 standarden er selvsagt frie til å bruke det som er relevant for dem
224 av obligatoriske krav.
</p
>
225 </blockquote
></p
>
227 <p
>Det ser dermed ut for meg som om det er et lite behov for å
228 standardisere XML-lagring av RFC-
822-formatterte meldinger. Noen som
229 vet om god spesifikasjon i så måte? I tillegg til den omtalt over,
230 har jeg kommet over flere aktuelle beskrivelser (søk på
"rfc
822
231 xml
", så finner du aktuelle alternativer).
</p
>
235 <li
><a href=
"http://www.openhealth.org/xmtp/
">XML MIME Transformation
236 protocol (XMTP)
</a
> fra OpenHealth, sist oppdatert
2001.
</li
>
238 <li
><a href=
"https://tools.ietf.org/html/draft-klyne-message-rfc822-xml-
03">An
239 XML format for mail and other messages
</a
> utkast fra IETF datert
242 <li
><a href=
"http://www.informit.com/articles/article.aspx?p=
32074">xMail:
243 E-mail as XML
</a
> en artikkel fra
2003 som beskriver python-modulen
244 rfc822 som gir ut XML-representasjon av en RFC
822-formattert epost.
</li
>
248 <p
>Finnes det andre og bedre spesifikasjoner for slik lagring? Send
249 meg en epost hvis du har innspill.
</p
>
254 <title>Lenker for
2014-
02-
28</title>
255 <link>http://people.skolelinux.org/pere/blog/Lenker_for_2014_02_28.html
</link>
256 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Lenker_for_2014_02_28.html
</guid>
257 <pubDate>Fri,
28 Feb
2014 13:
30:
00 +
0100</pubDate>
258 <description><p
>Her er noen lenker til tekster jeg har satt pris på å lese de siste
259 månedene. Det er mye om varsleren Edward Snowden, som burde få all
260 hjelp, støtte og beskyttelse Norge kan stille opp med for å ha satt
261 totalitær overvåkning på sakskartet, men også endel annet
262 tankevekkende og interessant.
</p
>
267 <a href=
"http://www.dagbladet.no/
2013/
12/
21/nyheter/thomas_drake/nsa/overvakning/snowden/
30925886/
">-
268 NSA tenker som Stasi
</a
> - Dagbladet.no
</li
>
270 <li
>2013-
12-
19 <a href=
"http://www.dagensit.no/article2732734.ece
">-
271 Staten har ikke rett til å vite alt om deg
</a
> - DN.no
</li
>
274 <a href=
"http://www.dagbladet.no/
2013/
12/
21/nyheter/krig_og_konflikter/politikk/utenriks/
30961126/
">Nye
275 mål for NSAs spionasje avslørt
</a
> - Dagbladet.no
</li
>
278 <a href=
"http://www.dagbladet.no/
2013/
12/
19/nyheter/nsa/usa/politikk/barack_obama/
30918684/
">«NSA
279 bør fjernes fra sin makt til å samle inn metadata fra amerikanske
280 telefonsamtaler»
</a
> - Dagbladet.no
</li
>
283 <a href=
"http://www.dagbladet.no/
2013/
12/
18/kultur/meninger/hovedkronikk/debatt/snowden/
30901089/
">Etterretning,
284 overvåking, frihet og sikkerhet
</a
> - Dagbladet.no
</li
>
287 <a href=
"http://www.nrk.no/verden/snowden-vil-ha-asyl-i-brasil-
1.11423444">Snowden
288 angriper USA i åpent brev
</a
> - nrk.no
</li
>
291 <a href=
"http://www.digi.no/
925820/rettslig-nederlag-for-etterretning
">Rettslig
292 nederlag for etterretning
</a
> - digi.no
</li
>
295 <a href=
"http://www.dagbladet.no/
2013/
12/
21/kultur/meninger/hovedkommentar/kommentar/etterretning/
30963284/
">Truende
296 nedkjøling
</a
> - dagbladet.no
</li
>
299 <a href=
"http://www.aftenposten.no/viten/Matematikk-og-forstaelse-
7411849.html
">Matematikk
300 og forståelse
</a
> - aftenposten.no
</li
>
303 <a href=
"http://www.nrk.no/viten/ny-studie_sovn-reinser-hjernen-var-
1.11306106">Vi
304 søv for å reinse hjernen vår, ifølgje ny studie
</a
> - nrk.no
</li
>
307 <a href=
"http://www.nrk.no/buskerud/julebaksten-i-vasken-
1.11410033">Rotterace
308 i kloakken
</a
> - nrk.no
</li
>
311 <a href=
"http://www.aftenposten.no/viten/Apne-brev-og-frie-tanker-
7413734.html
">Åpne
312 brev og frie tanker
</a
> - aftenposten.no
</li
>
315 <a href=
"http://www.aftenposten.no/viten/Stopp-kunnskapsapartheidet-
7428229.html
">Stopp dagens kunnskapsapartheid!
</a
> - aftenposten.no
</li
>
318 <a href=
"http://www.aftenposten.no/nyheter/uriks/EU-rapport-Britisk-og-amerikansk-overvaking-ser-ut-til-a-vare-ulovlig-
7428933.html
">EU-rapport:
319 Britisk og amerikansk overvåking ser ut til å være ulovlig
</a
> -
320 aftenposten.no
</li
>
322 <li
>2013-
10-
23 Professor Jan Arild Audestad
323 <a href=
"http://www.digi.no/
924008/advarer-mot-konspirasjonsteori
">Advarer
324 mot konspirasjonsteori
</a
> i digi.no og sier han ikke tror NSA kan
325 avlytte mobiltelefoner, mens han noen måneder senere forteller:
</li
>
328 <a href=
"http://www.aftenposten.no/nyheter/iriks/--Vi-ble-presset-til-a-svekke-mobilsikkerheten-pa-
80-tallet-
7410467.html
">-
329 Vi ble presset til å svekke mobilsikkerheten på
80-tallet
</a
> -
330 aftenposten.no
</li
>
333 <a href=
"http://tv.nrk.no/program/koid20005814/et-moete-med-edward-snowden
">Et
334 møte med Edward Snowden
</a
> - intervju sendt av nrk, tilgjengelig til
335 2015-
01-
31</li
>
338 <a href=
"http://politiken.dk/debat/profiler/jessteinpedersen/ECE2210356/litteraturredaktoeren-helle-thornings-tavshed-om-snowden-er-en-skandale/
">Litteraturredaktøren:
339 Helle Thornings tavshed om Snowden er en skandale
</a
> -
340 politiken.dk
</li
>
343 <a href=
"http://www.aftenposten.no/meninger/kronikker/Bra-a-ha-en-Storebror-
7476734.html
">Bra å ha en «Storebror»
</a
> - aftenposten.no
</li
>
346 <a href=
"http://johnchristianelden.blogg.no/
1393536806_narkotikasiktet_stort.html
">"Narkotikasiktet
347 Stortingsmann
" - Spillet bak kulissene
</a
> - John Christian Eldens
351 <a href=
"http://www.aftenposten.no/meninger/Heksejakt-pa-hasjbrukere-
7486283.html
">Heksejakt
352 på hasjbrukere
</a
> - aftenposten.no
</li
>
359 <title>New home and release
1.0 for netgroup and innetgr (aka ng-utils)
</title>
360 <link>http://people.skolelinux.org/pere/blog/New_home_and_release_1_0_for_netgroup_and_innetgr__aka_ng_utils_.html
</link>
361 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/New_home_and_release_1_0_for_netgroup_and_innetgr__aka_ng_utils_.html
</guid>
362 <pubDate>Sat,
22 Feb
2014 21:
45:
00 +
0100</pubDate>
363 <description><p
>Many years ago, I wrote a GPL licensed version of the netgroup and
364 innetgr tools, because I needed them in
365 <a href=
"http://www.skolelinux.org/
">Skolelinux
</a
>. I called the project
366 ng-utils, and it has served me well. I placed the project under the
367 <a href=
"http://www.hungry.com/
">Hungry Programmer
</a
> umbrella, and it was maintained in our CVS
368 repository. But many years ago, the CVS repository was dropped (lost,
369 not migrated to new hardware, not sure), and the project have lacked a
370 proper home since then.
</p
>
372 <p
>Last summer, I had a look at the package and made a new release
373 fixing a irritating crash bug, but was unable to store the changes in
374 a proper source control system. I applied for a project on
375 <a href=
"https://alioth.debian.org/
">Alioth
</a
>, but did not have time
376 to follow up on it. Until today. :)
</p
>
378 <p
>After many hours of cleaning and migration, the ng-utils project
379 now have a new home, and a git repository with the highlight of the
380 history of the project. I published all release tarballs and imported
381 them into the git repository. As the project is really stable and not
382 expected to gain new features any time soon, I decided to make a new
383 release and call it
1.0. Visit the new project home on
384 <a href=
"https://alioth.debian.org/projects/ng-utils/
">https://alioth.debian.org/projects/ng-utils/
</a
>
385 if you want to check it out. The new version is also uploaded into
386 <a href=
"http://packages.qa.debian.org/n/ng-utils.html
">Debian Unstable
</a
>.
</p
>
391 <title>Testing sysvinit from experimental in Debian Hurd
</title>
392 <link>http://people.skolelinux.org/pere/blog/Testing_sysvinit_from_experimental_in_Debian_Hurd.html
</link>
393 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Testing_sysvinit_from_experimental_in_Debian_Hurd.html
</guid>
394 <pubDate>Mon,
3 Feb
2014 13:
40:
00 +
0100</pubDate>
395 <description><p
>A few days ago I decided to try to help the Hurd people to get
396 their changes into sysvinit, to allow them to use the normal sysvinit
397 boot system instead of their old one. This follow up on the
398 <a href=
"https://teythoon.cryptobitch.de//categories/gsoc.html
">great
399 Google Summer of Code work
</a
> done last summer by Justus Winter to
400 get Debian on Hurd working more like Debian on Linux. To get started,
401 I downloaded a prebuilt hard disk image from
402 <a href=
"http://ftp.debian-ports.org/debian-cd/hurd-i386/current/debian-hurd.img.tar.gz
">http://ftp.debian-ports.org/debian-cd/hurd-i386/current/debian-hurd.img.tar.gz
</a
>,
403 and started it using virt-manager.
</p
>
405 <p
>The first think I had to do after logging in (root without any
406 password) was to get the network operational. I followed
407 <a href=
"https://www.debian.org/ports/hurd/hurd-install
">the
408 instructions on the Debian GNU/Hurd ports page
</a
> and ran these
409 commands as root to get the machine to accept a IP address from the
410 kvm internal DHCP server:
</p
>
412 <p
><blockquote
><pre
>
413 settrans -fgap /dev/netdde /hurd/netdde
414 kill $(ps -ef|awk
'/[p]finet/ { print $
2}
')
415 kill $(ps -ef|awk
'/[d]evnode/ { print $
2}
')
417 </pre
></blockquote
></p
>
419 <p
>After this, the machine had internet connectivity, and I could
420 upgrade it and install the sysvinit packages from experimental and
421 enable it as the default boot system in Hurd.
</p
>
423 <p
>But before I did that, I set a password on the root user, as ssh is
424 running on the machine it for ssh login to work a password need to be
425 set. Also, note that a bug somewhere in openssh on Hurd block
426 compression from working. Remember to turn that off on the client
429 <p
>Run these commands as root to upgrade and test the new sysvinit
432 <p
><blockquote
><pre
>
433 cat
> /etc/apt/sources.list.d/experimental.list
&lt;
&lt;EOF
434 deb http://http.debian.net/debian/ experimental main
438 apt-get install -t experimental initscripts sysv-rc sysvinit \
439 sysvinit-core sysvinit-utils
440 update-alternatives --config runsystem
441 </pre
></blockquote
></p
>
443 <p
>To reboot after switching boot system, you have to use
444 <tt
>reboot-hurd
</tt
> instead of just
<tt
>reboot
</tt
>, as there is not
445 yet a sysvinit process able to receive the signals from the normal
446 'reboot
' command. After switching to sysvinit as the boot system,
447 upgrading every package and rebooting, the network come up with DHCP
448 after boot as it should, and the settrans/pkill hack mentioned at the
449 start is no longer needed. But for some strange reason, there are no
450 longer any login prompt in the virtual console, so I logged in using
453 <p
>Note that there are some race conditions in Hurd making the boot
454 fail some times. No idea what the cause is, but hope the Hurd porters
455 figure it out. At least Justus said on IRC (#debian-hurd on
456 irc.debian.org) that they are aware of the problem. A way to reduce
457 the impact is to upgrade to the Hurd packages built by Justus by
458 adding this repository to the machine:
</p
>
460 <p
><blockquote
><pre
>
461 cat
> /etc/apt/sources.list.d/hurd-ci.list
&lt;
&lt;EOF
462 deb http://darnassus.sceen.net/~teythoon/hurd-ci/ sid main
464 </pre
></blockquote
></p
>
466 <p
>At the moment the prebuilt virtual machine get some packages from
467 http://ftp.debian-ports.org/debian, because some of the packages in
468 unstable do not yet include the required patches that are lingering in
469 BTS. This is the completely list of
"unofficial
" packages installed:
</p
>
471 <p
><blockquote
><pre
>
472 # aptitude search
'?narrow(?version(CURRENT),?origin(Debian Ports))
'
473 i emacs - GNU Emacs editor (metapackage)
475 i hurd-recommended - Miscellaneous translators
476 i isc-dhcp-client - ISC DHCP client
477 i isc-dhcp-common - common files used by all the isc-dhcp* packages
478 i libc-bin - Embedded GNU C Library: Binaries
479 i libc-dev-bin - Embedded GNU C Library: Development binaries
480 i libc0.3 - Embedded GNU C Library: Shared libraries
481 i A libc0.3-dbg - Embedded GNU C Library: detached debugging symbols
482 i libc0.3-dev - Embedded GNU C Library: Development Libraries and Hea
483 i multiarch-support - Transitional package to ensure multiarch compatibilit
484 i A x11-common - X Window System (X.Org) infrastructure
485 i xorg - X.Org X Window System
486 i A xserver-xorg - X.Org X server
487 i A xserver-xorg-input-all - X.Org X server -- input driver metapackage
489 </pre
></blockquote
></p
>
491 <p
>All in all, testing hurd has been an interesting experience. :)
492 X.org did not work out of the box and I never took the time to follow
493 the porters instructions to fix it. This time I was interested in the
494 command line stuff.
<p
>
499 <title>A fist full of non-anonymous Bitcoins
</title>
500 <link>http://people.skolelinux.org/pere/blog/A_fist_full_of_non_anonymous_Bitcoins.html
</link>
501 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/A_fist_full_of_non_anonymous_Bitcoins.html
</guid>
502 <pubDate>Wed,
29 Jan
2014 14:
10:
00 +
0100</pubDate>
503 <description><p
>Bitcoin is a incredible use of peer to peer communication and
504 encryption, allowing direct and immediate money transfer without any
505 central control. It is sometimes claimed to be ideal for illegal
506 activity, which I believe is quite a long way from the truth. At least
507 I would not conduct illegal money transfers using a system where the
508 details of every transaction are kept forever. This point is
510 <a href=
"https://www.usenix.org/publications/login
">USENIX ;login:
</a
>
511 from December
2013, in the article
512 "<a href=
"https://www.usenix.org/system/files/login/articles/
03_meiklejohn-online.pdf
">A
513 Fistful of Bitcoins - Characterizing Payments Among Men with No
514 Names
</a
>" by Sarah Meiklejohn, Marjori Pomarole,Grant Jordan, Kirill
515 Levchenko, Damon McCoy, Geoffrey M. Voelker, and Stefan Savage. They
516 analyse the transaction log in the Bitcoin system, using it to find
517 addresses belong to individuals and organisations and follow the flow
518 of money from both Bitcoin theft and trades on Silk Road to where the
519 money end up. This is how they wrap up their article:
</p
>
521 <p
><blockquote
>
522 <p
>"To demonstrate the usefulness of this type of analysis, we turned
523 our attention to criminal activity. In the Bitcoin economy, criminal
524 activity can appear in a number of forms, such as dealing drugs on
525 Silk Road or simply stealing someone else’s bitcoins. We followed the
526 flow of bitcoins out of Silk Road (in particular, from one notorious
527 address) and from a number of highly publicized thefts to see whether
528 we could track the bitcoins to known services. Although some of the
529 thieves attempted to use sophisticated mixing techniques (or possibly
530 mix services) to obscure the flow of bitcoins, for the most part
531 tracking the bitcoins was quite straightforward, and we ultimately saw
532 large quantities of bitcoins flow to a variety of exchanges directly
533 from the point of theft (or the withdrawal from Silk Road).
</p
>
535 <p
>As acknowledged above, following stolen bitcoins to the point at
536 which they are deposited into an exchange does not in itself identify
537 the thief; however, it does enable further de-anonymization in the
538 case in which certain agencies can determine (through, for example,
539 subpoena power) the real-world owner of the account into which the
540 stolen bitcoins were deposited. Because such exchanges seem to serve
541 as chokepoints into and out of the Bitcoin economy (i.e., there are
542 few alternative ways to cash out), we conclude that using Bitcoin for
543 money laundering or other illicit purposes does not (at least at
544 present) seem to be particularly attractive.
"</p
>
545 </blockquote
><p
>
547 <p
>These researches are not the first to analyse the Bitcoin
548 transaction log. The
2011 paper
549 "<a href=
"http://arxiv.org/abs/
1107.4524">An Analysis of Anonymity in
550 the Bitcoin System
</A
>" by Fergal Reid and Martin Harrigan is
551 summarized like this:
</p
>
553 <p
><blockquote
>
554 "Anonymity in Bitcoin, a peer-to-peer electronic currency system, is a
555 complicated issue. Within the system, users are identified by
556 public-keys only. An attacker wishing to de-anonymize its users will
557 attempt to construct the one-to-many mapping between users and
558 public-keys and associate information external to the system with the
559 users. Bitcoin tries to prevent this attack by storing the mapping of
560 a user to his or her public-keys on that user
's node only and by
561 allowing each user to generate as many public-keys as required. In
562 this chapter we consider the topological structure of two networks
563 derived from Bitcoin
's public transaction history. We show that the
564 two networks have a non-trivial topological structure, provide
565 complementary views of the Bitcoin system and have implications for
566 anonymity. We combine these structures with external information and
567 techniques such as context discovery and flow analysis to investigate
568 an alleged theft of Bitcoins, which, at the time of the theft, had a
569 market value of approximately half a million U.S. dollars.
"
570 </blockquote
></p
>
572 <p
>I hope these references can help kill the urban myth that Bitcoin
573 is anonymous. It isn
't really a good fit for illegal activites. Use
574 cash if you need to stay anonymous, at least until regular DNA
575 sampling of notes and coins become the norm. :)
</p
>
577 <p
>As usual, if you use Bitcoin and want to show your support of my
578 activities, please send Bitcoin donations to my address
579 <b
><a href=
"bitcoin:
15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b
&label=PetterReinholdtsenBlog
">15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b
</a
></b
>.
</p
>
584 <title>New chrpath release
0.16</title>
585 <link>http://people.skolelinux.org/pere/blog/New_chrpath_release_0_16.html
</link>
586 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/New_chrpath_release_0_16.html
</guid>
587 <pubDate>Tue,
14 Jan
2014 11:
00:
00 +
0100</pubDate>
588 <description><p
><a href=
"http://www.coverity.com/
">Coverity
</a
> is a nice tool to
589 find problems in C, C++ and Java code using static source code
590 analysis. It can detect a lot of different problems, and is very
591 useful to find memory and locking bugs in the error handling part of
592 the source. The company behind it provide
593 <a href=
"https://scan.coverity.com/
">check of free software projects as
594 a community service
</a
>, and many hundred free software projects are
595 already checked. A few days ago I decided to have a closer look at
596 the Coverity system, and discovered that the
597 <a href=
"http://www.gnu.org/software/gnash/
">gnash
</a
> and
598 <a href=
"http://sourceforge.net/projects/ipmitool/
">ipmitool
</a
>
599 projects I am involved with was already registered. But these are
600 fairly big, and I would also like to have a small and easy project to
601 check, and decided to
<a href=
"http://scan.coverity.com/projects/
1179">request
602 checking of the chrpath project
</a
>. It was
603 added to the checker and discovered seven potential defects. Six of
604 these were real, mostly resource
"leak
" when the program detected an
605 error. Nothing serious, as the resources would be released a fraction
606 of a second later when the program exited because of the error, but it
607 is nice to do it right in case the source of the program some time in
608 the future end up in a library. Having fixed all defects and added
609 <a href=
"https://lists.alioth.debian.org/mailman/listinfo/chrpath-devel
">a
610 mailing list for the chrpath developers
</a
>, I decided it was time to
611 publish a new release. These are the release notes:
</p
>
613 <p
>New in
0.16 released
2014-
01-
14:
</p
>
617 <li
>Fixed all minor bugs discovered by Coverity.
</li
>
618 <li
>Updated config.sub and config.guess from the GNU project.
</li
>
619 <li
>Mention new project mailing list in the documentation.
</li
>
624 <a href=
"https://alioth.debian.org/frs/?group_id=
31052">download the
625 new version
0.16 from alioth
</a
>. Please let us know via the Alioth
626 project if something is wrong with the new release. The test suite
627 did not discover any old errors, so if you find a new one, please also
628 include a test suite check.
</p
>
633 <title>Debian Edu interview: Dominik George
</title>
634 <link>http://people.skolelinux.org/pere/blog/Debian_Edu_interview__Dominik_George.html
</link>
635 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Debian_Edu_interview__Dominik_George.html
</guid>
636 <pubDate>Wed,
25 Dec
2013 13:
40:
00 +
0100</pubDate>
637 <description><p
>The
<a href=
"http://www.skolelinux.org/
">Debian Edu / Skolelinux
638 project
</a
> consist of both newcomers and old timers, and this time I
639 was able to get an interview with a newcomer in the project who showed
640 up on the IRC channel a few weeks ago to let us know about his
641 successful installation of Debian Edu Wheezy in his School. Say hello
642 to
<a href=
"https://www.ohloh.net/accounts/Natureshadow
">Dominik
643 George
</a
>.
</p
>
645 <!-- http://www.dominik-george.de/images/foto.jpg --
>
647 <p
><strong
>Who are you, and how do you spend your days?
</strong
></p
>
649 <p
>I am a
23 year-old student from Germany who has spent half of his
650 life with open source. In
"real life
", I am, as already mentioned, a
651 student in the fields of Computer Science, Electrical Engineering,
652 Information Technologies and Anglistics. Due to my (only partially
653 voluntary) huge engagement in the open source world, these things are
654 a bit vacant right now however.
</p
>
656 <p
>I also have been working as a project teacher at a Gymasnium
657 (public school) for various years now. I took up that work some time
658 around
2005 when still attending that school myself and have continued
659 it until today. I also had been running the (kind of very advanced)
660 network of that school together with a team of very interested and
661 talented students in the age of
11 to
15 years, who took the chance to
662 learn a lot about open source and networking before I left the school
663 to help building another school
's informational education concept from
666 <p
>That said, one might see me as a kind of
"glue
" between school kids
667 and the elderly of teachers as well as between the open source
668 ecosystem and the (even more complex) educational ecosystem.
</p
>
670 <p
>When I am not busy with open source or education, I like Geocaching
671 and cycling.
</p
>
673 <p
><strong
>How did you get in contact with the Skolelinux / Debian Edu
674 project?
</strong
></p
>
676 <p
>I think that happened some time around
2009 when I first attended
677 <a href=
"http://www.froscon.org
">FrOSCon
</a
> and visited the project
678 booth. I think I wasn
't too interested back then because I used to
679 have an attitude of disliking software that does too much stuff on its
680 own. Maybe I was too inexperienced to realise the upsides of an
681 "out-of-the-box
" solution ;).
</p
>
683 <p
>The first time I actively talked to Skolelinux people was at
684 <a href=
"http://www.openrheinruhr.de
">OpenRheinRuhr
</a
> 2011 when the
685 BiscuIT project, a home-grewn software used by my school for various
686 really cool things from timetables and class contact lists to lunch
687 ordering, student ID card printing and project elections first got to
688 a stage where it could have been published. I asked the Skolelinux
689 guys running the booth if the project were interested in it and gave a
690 small demonstration, but there wasn
't any real feedback and the guys
691 seemed rather uninterested.
</p
>
693 <p
>After I left the school where I developed the software, it got
694 mostly lost, but I am now reimplementing it for my new school. I have
695 reusability and compatibility in mind, and I hop there will be a new
696 basis for contributing it to the Skolelinux project ;)!
</p
>
698 <p
><strong
>What do you see as the advantages of Skolelinux / Debian
699 Edu?
</strong
></p
>
701 <p
>The most important advantage seems to be that it
"just
702 works
". After overcoming some minor (but still very annoying) glitches
703 in the installer, I got a fully functional, working school network,
704 without the month-long hassle I experienced when setting all that up
705 from scratch in earlier years. And above that, it rocked - I didn
't
706 have any real hardware at hand, because the school was just founded
707 and has no money whatsoever, so I installed a combined server (main
708 server, terminal services and workstation) in a VM on my personal
709 notebook, bridging the LTSP network interface to the ethernet port,
710 and then PXE-booted the Windows notebooks that were lying around from
711 it. I could use
8 clients without any performance issues, by using a
712 tiny little VM on a tiny little notebook. I think that
's enough to say
713 that it rocks!
</p
>
715 <p
>Secondly, there are marketing reasons. Life
's bad, and so no
716 politician will ever permit a setup described as
"Debian, an universal
717 operating system, with some really cool educational tools
" while they
718 will be jsut fine with
"Skolelinux, a single-purpose solution for your
719 school network
", even if both turn out to be the very same thing (yes,
720 this is unfair towards the Skolelinux project, and must not be taken
721 too seriously - you get the idea, anyway).
</p
>
723 <p
><strong
>What do you see as the disadvantages of Skolelinux / Debian
724 Edu?
</strong
></p
>
726 <p
>I have not been involved with Skolelinux long enough to really
727 answer this question in a fair way. Thus, please allow me to put it in
728 other words:
"What do you expect from Skolelinux to keep liking it?
" I
729 can list a few points about that:
</p
>
733 <li
>always strive to get all things integrated into Debian upstream
734 <li
>be open to discussion about changes and the like, even with newcomers
735 <li
>be helpful at being helpful ;)
739 <p
>I
'm really sorry I cannot say much more about that :(!
</p
>
741 <p
><strong
>Which free software do you use daily?
</strong
></p
>
743 <p
>First of all, all software I use is free and open. I have abandoned
744 all non-free software (except for firmware on my darned phone) this
747 <p
>I run Debian GNU/Linux on all PC systems I use. On that, I mostly
748 run text tools. I use
749 <a href=
"https://www.mirbsd.org/mksh.htm
">mksh
</a
> as shell,
750 <a href=
"https://www.mirbsd.org/jupp.htm
">jupp
</a
> as very advanced
751 text editor (I even got the developer to help me write a script/macro
752 based full-featured student management software with the two),
753 <a href=
"http://mcabber.com/
">mcabber
</a
> for XMPP and
754 <a href=
"http://www.irssi.org/
">irssi
</a
> for IRC. For that overly
755 coloured world called the WWW, I use
756 <a href=
"https://www.mozilla.org/en-US/firefox/new/
">Iceweasel
757 (Firefox)
</a
>. Oh, and
<a href=
"http://www.mutt.org/
">mutt
</a
> for
760 <p
>However, while I am personally aware of the fact that text tools
761 are more efficient and powerful than anything else, I also use (or at
762 least operate) some tools that are suitable to bring open source to
763 kids. One of these things is
<a href=
"http://jappix.org/
">Jappix
</a
>,
764 which I already introduced to some kids even before they got aware of
765 Facebook, making them see for themselves that they do not need
766 Facebook now ;).
</p
>
768 <p
><strong
>Which strategy do you believe is the right one to use to
769 get schools to use free software?
</strong
></p
>
771 <p
>Well, that
's a two-sided thing. One side is what I believe, and one
772 side is what I have experienced.
</p
>
774 <p
>I believe that the right strategy is showing them the benefits. But
775 that won
't work out as long as the acceptance of free alternatives
776 grows globally. What I mean is that if all the kids are almost forced
777 to use Windows, Facebook, Skype, you name it at home, they will not
778 see why they would want to use alternatives at school. I have seen
779 students take seat in front of a fully-functional, modern Debian
780 desktop that could do anything their Windows at home could do, and
781 they jsut refused to use it because
"Linux sucks
". It is something
782 that makes the council of our city spend around
600000 € to buy
783 software - not including hardware, mind you - for operating school
784 networks, and for installing a system that, as has been proved, does
785 not work. For those of you readers who are good at maths, have you
786 already found out how many lives could have been saved with that money
787 if we had instead used it to bring education to parts of the world
788 that need it? I have, and found it to be nothing less dramatic than
789 plain criminal.
</p
>
791 <p
>That said, the only feasible way appears to be the bottom up
792 method. We have to bring free software to kids and parents. I have
793 founded an association named
794 <a href=
"https://www.teckids.org
">Teckids
</a
> here in Germany that does
795 just that. We organise several events for kids and adolescents in the
796 area of free and open source software, for example the
797 <a href=
"http://kids.froscon.org
">FrogLabs
</a
>, which share staff with
798 Teckids and are the youth programme of
799 <a href=
"http://www.froscon.org
">the Free and Open Source Software
800 Conference (FrOSCon)
</a
>. We do a lot more than most other conferences
801 - this year, we first offered the FrogLabs as a holiday camp for kids
802 aged
10 to
16. It was a huge success, with approx.
30 kids taking part
803 and learning with and about free software through a whole weekend. All
804 of us had a lot of fun, and the results were really exciting.
</p
>
806 <p
>Apart from that, we are preparing a campaign that is supposed to bring
807 the message of free alternatives to stuff kids use every day to them and
808 their parents, e.g. the use of Jabber / Jappix instead of Facebook and
809 Skype. To make that possible, we are planning to get together a team of
810 clever kids who understand very well what their peers need and can bring
811 it across to them. So we will have a peer-driven network of adolescents
812 who teach each other and collect feedback from the community of minors.
813 We then take that feedback and our own experience to work closely with
814 open source projects, such as Skolelinux or Jappix, at improving their
815 software in a way that makes it more and more attractive for the target
816 group. At least I hope that we will have good cooperation with
817 Skolelinux in the future ;)!
</p
>
819 <p
>So in conclusion, what I believe is that, if it weren
't for the world
820 being so bad, it should be very clear to the political decision makers
821 that the only way to go nowadays is free software for various reasons,
822 but I have learnt that the only way that seems to work is bottom up.
</p
>
826 > * Who should be interviewed with this questions in the future?
828 That
's probably the hardest question of them all, as I do not know the
829 community. However, I would be willing to do the following:
831 <li
>Run an interview with a German headteacher who is very open to
832 free software, and also prefers it, but cannot really use it because
833 of the decision makers above;
834 <li
>Run interviews with some kids, both with and without previous
835 knowledge about free software
837 If that is wanted, just let me know ;).
844 <title>Dugnadsnett for alle stiller på Oslo Maker Faire i januar
2014</title>
845 <link>http://people.skolelinux.org/pere/blog/Dugnadsnett_for_alle_stiller_p__Oslo_Maker_Faire_i_januar_2014.html
</link>
846 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Dugnadsnett_for_alle_stiller_p__Oslo_Maker_Faire_i_januar_2014.html
</guid>
847 <pubDate>Tue,
10 Dec
2013 19:
20:
00 +
0100</pubDate>
848 <description><p
>Helga
18. og
19. januar
2014 arrangeres
849 <a href=
"http://makerfaireoslo.no/no/program/dugnadsnett
">Oslo Maker
850 Faire
</a
>, og
<a href=
"http://www.dugnadsnett.no/
">Dugnadsnett for
851 alle
</a
> har fått plass! Planen er å ha et bord med en plakat der vi
852 forteller om hva Dugnadsnett for alle er for noe, og et lite verksted
853 der vi hjelper folk som er interessert i å få opp sin egen mesh-node.
854 Jeg gleder meg til å se hvordan prosjektet blir mottatt der.
</p
>
856 <p
>Målet med dugnadsnett for alle i Oslo er å få på plass et datanett
857 for kommunikasjon ved hjelp av radio-repeaterstasjoner (kalt
858 mesh-noder) som gjør at en kan direkte kommunisere med slekt, venner
859 og bekjente i Oslo via andre som deltar i dugnadsnettet, samt gjøre
860 det mulig komme ut på internett via dugnadsnettet. Første delmål er å
861 kunne sende SMS-meldinger vha. IP-telefoni løsningen
862 <a href=
"http://www.servalproject.org/
">Serval project
</a
> mellom
863 deltagerne i Dugnadsnett for alle i Oslo. Formålet er å ta tilbake
864 kontrollen over egen nett-infrastruktur og gjøre det dyrere å bedrive
865 massiv innsamling av informasjon om borgernes bruk av datanett.
</p
>
867 <p
>Høres dette interessant ut? Bli med på prosjektet, fortell oss
868 hvor du kunne tenke deg å sette opp en radio-repeater (slik at folk i
869 nærheten kan finne hverandre ved hjelp av
870 <a href=
"http://flynor.net/mesh/mesh.php
">kartet over planlagte og
871 eksisterende radio-repeatere
</A
>), bli med på epostlisten
872 <a href=
"http://lists.nuug.no/mailman/listinfo/dugnadsnett
">dugnadsnett
873 (at) nuug.no
</a
> og stikk innom
874 <a href=
"irc://irc.freenode.net/#dugnadsnett.no
">IRC-kanalen
875 #dugnadsnett.no
</a
>. Så langt er det planlagt over
40
876 radio-repeatere, med VPN-forbindelser via Internet for å la de delene
877 av nettet som ikke når hverandre via radio kunne snakke med hverandre