1 <?xml version=
"1.0" encoding=
"utf-8"?>
2 <rss version='
2.0' xmlns:lj='http://www.livejournal.org/rss/lj/
1.0/' xmlns:
atom=
"http://www.w3.org/2005/Atom">
4 <title>Petter Reinholdtsen
</title>
5 <description></description>
6 <link>http://people.skolelinux.org/pere/blog/
</link>
7 <atom:link href=
"http://people.skolelinux.org/pere/blog/index.rss" rel=
"self" type=
"application/rss+xml" />
10 <title>FreedomBox milestone - all packages now in Debian Sid
</title>
11 <link>http://people.skolelinux.org/pere/blog/FreedomBox_milestone___all_packages_now_in_Debian_Sid.html
</link>
12 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/FreedomBox_milestone___all_packages_now_in_Debian_Sid.html
</guid>
13 <pubDate>Tue,
15 Apr
2014 22:
10:
00 +
0200</pubDate>
14 <description><p
>The
<a href=
"https://wiki.debian.org/FreedomBox
">Freedombox
15 project
</a
> is working on providing the software and hardware to make
16 it easy for non-technical people to host their data and communication
17 at home, and being able to communicate with their friends and family
18 encrypted and away from prying eyes. It is still going strong, and
19 today a major mile stone was reached.
</p
>
21 <p
>Today, the last of the packages currently used by the project to
22 created the system images were accepted into Debian Unstable. It was
23 the freedombox-setup package, which is used to configure the images
24 during build and on the first boot. Now all one need to get going is
25 the build code from the freedom-maker git repository and packages from
26 Debian. And once the freedombox-setup package enter testing, we can
27 build everything directly from Debian. :)
</p
>
29 <p
>Some key packages used by Freedombox are
30 <a href=
"http://packages.qa.debian.org/freedombox-setup
">freedombox-setup
</a
>,
31 <a href=
"http://packages.qa.debian.org/plinth
">plinth
</a
>,
32 <a href=
"http://packages.qa.debian.org/pagekite
">pagekite
</a
>,
33 <a href=
"http://packages.qa.debian.org/tor
">tor
</a
>,
34 <a href=
"http://packages.qa.debian.org/privoxy
">privoxy
</a
>,
35 <a href=
"http://packages.qa.debian.org/owncloud
">owncloud
</a
> and
36 <a href=
"http://packages.qa.debian.org/dnsmasq
">dnsmasq
</a
>. There
37 are plans to integrate more packages into the setup. User
38 documentation is maintained on the Debian wiki. Please
39 <a href=
"https://wiki.debian.org/FreedomBox/Manual/Jessie
">check out
40 the manual
</a
> and help us improve it.
</p
>
42 <p
>To test for yourself and create boot images with the FreedomBox
43 setup, run this on a Debian machine using a user with sudo rights to
44 become root:
</p
>
47 sudo apt-get install git vmdebootstrap mercurial python-docutils \
48 mktorrent extlinux virtualbox qemu-user-static binfmt-support \
50 git clone http://anonscm.debian.org/git/freedombox/freedom-maker.git \
52 make -C freedom-maker dreamplug-image raspberry-image virtualbox-image
53 </pre
></p
>
55 <p
>Root access is needed to run debootstrap and mount loopback
56 devices. See the README in the freedom-maker git repo for more
57 details on the build. If you do not want all three images, trim the
58 make line. Note that the virtualbox-image target is not really
59 virtualbox specific. It create a x86 image usable in kvm, qemu,
60 vmware and any other x86 virtual machine environment. You might need
61 the version of vmdebootstrap in Jessie to get the build working, as it
62 include fixes for a race condition with kpartx.
</p
>
64 <p
>If you instead want to install using a Debian CD and the preseed
65 method, boot a Debian Wheezy ISO and use this boot argument to load
66 the preseed values:
</p
>
69 url=
<a href=
"http://www.reinholdtsen.name/freedombox/preseed-jessie.dat
">http://www.reinholdtsen.name/freedombox/preseed-jessie.dat
</a
>
70 </pre
></p
>
72 <p
>I have not tested it myself the last few weeks, so I do not know if
73 it still work.
</p
>
75 <p
>If you wonder how to help, one task you could look at is using
76 systemd as the boot system. It will become the default for Linux in
77 Jessie, so we need to make sure it is usable on the Freedombox. I did
78 a simple test a few weeks ago, and noticed dnsmasq failed to start
79 during boot when using systemd. I suspect there are other problems
80 too. :) To detect problems, there is a test suite included, which can
81 be run from the plinth web interface.
</p
>
83 <p
>Give it a go and let us know how it goes on the mailing list, and help
84 us get the new release published. :) Please join us on
85 <a href=
"irc://irc.debian.org:
6667/%
23freedombox
">IRC (#freedombox on
86 irc.debian.org)
</a
> and
87 <a href=
"http://lists.alioth.debian.org/mailman/listinfo/freedombox-discuss
">the
88 mailing list
</a
> if you want to help make this vision come true.
</p
>
93 <title>Språkkoder for POSIX locale i Norge
</title>
94 <link>http://people.skolelinux.org/pere/blog/Spr_kkoder_for_POSIX_locale_i_Norge.html
</link>
95 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Spr_kkoder_for_POSIX_locale_i_Norge.html
</guid>
96 <pubDate>Fri,
11 Apr
2014 21:
30:
00 +
0200</pubDate>
97 <description><p
>For
12 år siden, skrev jeg et lite notat om
98 <a href=
"http://i18n.skolelinux.no/localekoder.txt
">bruk av språkkoder
99 i Norge
</a
>. Jeg ble nettopp minnet på dette da jeg fikk spørsmål om
100 notatet fortsatt var aktuelt, og tenkte det var greit å repetere hva
101 som fortsatt gjelder. Det jeg skrev da er fortsatt like aktuelt.
</p
>
103 <p
>Når en velger språk i programmer på unix, så velger en blant mange
104 språkkoder. For språk i Norge anbefales følgende språkkoder (anbefalt
105 locale i parantes):
</p
>
108 <dt
>nb (nb_NO)
</dt
><dd
>Bokmål i Norge
</dd
>
109 <dt
>nn (nn_NO)
</dt
><dd
>Nynorsk i Norge
</dd
>
110 <dt
>se (se_NO)
</dt
><dd
>Nordsamisk i Norge
</dd
>
111 </dl
></p
>
113 <p
>Alle programmer som bruker andre koder bør endres.
</p
>
115 <p
>Språkkoden bør brukes når .po-filer navngis og installeres. Dette
116 er ikke det samme som locale-koden. For Norsk Bokmål, så bør filene
117 være navngitt nb.po, mens locale (LANG) bør være nb_NO.
</p
>
119 <p
>Hvis vi ikke får standardisert de kodene i alle programmene med
120 norske oversettelser, så er det umulig å gi LANG-variablen ett innhold
121 som fungerer for alle programmer.
</p
>
123 <p
>Språkkodene er de offisielle kodene fra ISO
639, og bruken av dem i
124 forbindelse med POSIX localer er standardisert i RFC
3066 og ISO
125 15897. Denne anbefalingen er i tråd med de angitte standardene.
</p
>
127 <p
>Følgende koder er eller har vært i bruk som locale-verdier for
128 "norske
" språk. Disse bør unngås, og erstattes når de oppdages:
</p
>
130 <p
><table
>
131 <tr
><td
>norwegian
</td
><td
>-
> nb_NO
</td
></tr
>
132 <tr
><td
>bokmål
</td
><td
>-
> nb_NO
</td
></tr
>
133 <tr
><td
>bokmal
</td
><td
>-
> nb_NO
</td
></tr
>
134 <tr
><td
>nynorsk
</td
><td
>-
> nn_NO
</td
></tr
>
135 <tr
><td
>no
</td
><td
>-
> nb_NO
</td
></tr
>
136 <tr
><td
>no_NO
</td
><td
>-
> nb_NO
</td
></tr
>
137 <tr
><td
>no_NY
</td
><td
>-
> nn_NO
</td
></tr
>
138 <tr
><td
>sme_NO
</td
><td
>-
> se_NO
</td
></tr
>
139 </table
></p
>
141 <p
>Merk at når det gjelder de samiske språkene, at se_NO i praksis
142 henviser til nordsamisk i Norge, mens f.eks. smj_NO henviser til
143 lulesamisk. Dette notatet er dog ikke ment å gi råd rundt samiske
145 <a href=
"http://www.divvun.no/
">Divvun-prosjektet
</a
> en bedre
148 <p
><strong
>Referanser:
</strong
></p
>
152 <li
><a href=
"http://www.rfc-base.org/rfc-
3066.html
">RFC
3066 - Tags
153 for the Identification of Languages
</a
> (Erstatter RFC
1766)
</li
>
155 <li
><a href=
"http://www.loc.gov/standards/iso639-
2/langcodes.html
">ISO
156 639</a
> - Codes for the Representation of Names of Languages
</li
>
158 <li
><a href=
"http://std.dkuug.dk/jtc1/sc22/wg20/docs/n897-
14652w25.pdf
">ISO
159 DTR
14652</a
> - locale-standard Specification method for cultural
160 conventions
</li
>
162 <li
><a href=
"http://std.dkuug.dk/jtc1/sc22/wg20/docs/n610.pdf
">ISO
163 15897: Registration procedures for cultural elements (cultural
165 <a href=
"http://std.dkuug.dk/jtc1/sc22/wg20/docs/n849-
15897wd6.pdf
">(nytt
166 draft)
</a
></li
>
168 <li
><a href=
"http://std.dkuug.dk/jtc1/sc22/wg20/
">ISO/IEC
169 JTC1/SC22/WG20
</a
> - Gruppen for i18n-standardisering i ISO
</li
>
176 <title>S3QL, a locally mounted cloud file system - nice free software
</title>
177 <link>http://people.skolelinux.org/pere/blog/S3QL__a_locally_mounted_cloud_file_system___nice_free_software.html
</link>
178 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/S3QL__a_locally_mounted_cloud_file_system___nice_free_software.html
</guid>
179 <pubDate>Wed,
9 Apr
2014 11:
30:
00 +
0200</pubDate>
180 <description><p
>For a while now, I have been looking for a sensible offsite backup
181 solution for use at home. My requirements are simple, it must be
182 cheap and locally encrypted (in other words, I keep the encryption
183 keys, the storage provider do not have access to my private files).
184 One idea me and my friends had many years ago, before the cloud
185 storage providers showed up, was to use Google mail as storage,
186 writing a Linux block device storing blocks as emails in the mail
187 service provided by Google, and thus get heaps of free space. On top
188 of this one can add encryption, RAID and volume management to have
189 lots of (fairly slow, I admit that) cheap and encrypted storage. But
190 I never found time to implement such system. But the last few weeks I
191 have looked at a system called
192 <a href=
"https://bitbucket.org/nikratio/s3ql/
">S3QL
</a
>, a locally
193 mounted network backed file system with the features I need.
</p
>
195 <p
>S3QL is a fuse file system with a local cache and cloud storage,
196 handling several different storage providers, any with Amazon S3,
197 Google Drive or OpenStack API. There are heaps of such storage
198 providers. S3QL can also use a local directory as storage, which
199 combined with sshfs allow for file storage on any ssh server. S3QL
200 include support for encryption, compression, de-duplication, snapshots
201 and immutable file systems, allowing me to mount the remote storage as
202 a local mount point, look at and use the files as if they were local,
203 while the content is stored in the cloud as well. This allow me to
204 have a backup that should survive fire. The file system can not be
205 shared between several machines at the same time, as only one can
206 mount it at the time, but any machine with the encryption key and
207 access to the storage service can mount it if it is unmounted.
</p
>
209 <p
>It is simple to use. I
'm using it on Debian Wheezy, where the
210 package is included already. So to get started, run
<tt
>apt-get
211 install s3ql
</tt
>. Next, pick a storage provider. I ended up picking
212 Greenqloud, after reading their nice recipe on
213 <a href=
"https://greenqloud.zendesk.com/entries/
44611757-How-To-Use-S3QL-to-mount-a-StorageQloud-bucket-on-Debian-Wheezy
">how
214 to use S3QL with their Amazon S3 service
</a
>, because I trust the laws
215 in Iceland more than those in USA when it come to keeping my personal
216 data safe and private, and thus would rather spend money on a company
217 in Iceland. Another nice recipe is available from the article
218 <a href=
"http://www.admin-magazine.com/HPC/Articles/HPC-Cloud-Storage
">S3QL
219 Filesystem for HPC Storage
</a
> by Jeff Layton in the HPC section of
220 Admin magazine. When the provider is picked, figure out how to get
221 the API key needed to connect to the storage API. With Greencloud,
222 the key did not show up until I had added payment details to my
225 <p
>Armed with the API access details, it is time to create the file
226 system. First, create a new bucket in the cloud. This bucket is the
227 file system storage area. I picked a bucket name reflecting the
228 machine that was going to store data there, but any name will do.
229 I
'll refer to it as
<tt
>bucket-name
</tt
> below. In addition, one need
230 the API login and password, and a locally created password. Store it
231 all in ~root/.s3ql/authinfo2 like this:
233 <p
><blockquote
><pre
>
235 storage-url: s3c://s.greenqloud.com:
443/bucket-name
236 backend-login: API-login
237 backend-password: API-password
238 fs-passphrase: local-password
239 </pre
></blockquote
></p
>
241 <p
>I create my local passphrase using
<tt
>pwget
50</tt
> or similar,
242 but any sensible way to create a fairly random password should do it.
243 Armed with these details, it is now time to run mkfs, entering the API
244 details and password to create it:
</p
>
246 <p
><blockquote
><pre
>
247 # mkdir -m
700 /var/lib/s3ql-cache
248 # mkfs.s3ql --cachedir /var/lib/s3ql-cache --authfile /root/.s3ql/authinfo2 \
249 --ssl s3c://s.greenqloud.com:
443/bucket-name
251 Enter backend password:
252 Before using S3QL, make sure to read the user
's guide, especially
253 the
'Important Rules to Avoid Loosing Data
' section.
254 Enter encryption password:
255 Confirm encryption password:
256 Generating random encryption key...
257 Creating metadata tables...
267 Compressing and uploading metadata...
268 Wrote
0.00 MB of compressed metadata.
269 #
</pre
></blockquote
></p
>
271 <p
>The next step is mounting the file system to make the storage available.
273 <p
><blockquote
><pre
>
274 # mount.s3ql --cachedir /var/lib/s3ql-cache --authfile /root/.s3ql/authinfo2 \
275 --ssl --allow-root s3c://s.greenqloud.com:
443/bucket-name /s3ql
276 Using
4 upload threads.
277 Downloading and decompressing metadata...
287 Mounting filesystem...
289 Filesystem Size Used Avail Use% Mounted on
290 s3c://s.greenqloud.com:
443/bucket-name
1.0T
0 1.0T
0% /s3ql
292 </pre
></blockquote
></p
>
294 <p
>The file system is now ready for use. I use rsync to store my
295 backups in it, and as the metadata used by rsync is downloaded at
296 mount time, no network traffic (and storage cost) is triggered by
297 running rsync. To unmount, one should not use the normal umount
298 command, as this will not flush the cache to the cloud storage, but
299 instead running the umount.s3ql command like this:
301 <p
><blockquote
><pre
>
304 </pre
></blockquote
></p
>
306 <p
>There is a fsck command available to check the file system and
307 correct any problems detected. This can be used if the local server
308 crashes while the file system is mounted, to reset the
"already
309 mounted
" flag. This is what it look like when processing a working
310 file system:
</p
>
312 <p
><blockquote
><pre
>
313 # fsck.s3ql --force --ssl s3c://s.greenqloud.com:
443/bucket-name
314 Using cached metadata.
315 File system seems clean, checking anyway.
316 Checking DB integrity...
317 Creating temporary extra indices...
318 Checking lost+found...
319 Checking cached objects...
320 Checking names (refcounts)...
321 Checking contents (names)...
322 Checking contents (inodes)...
323 Checking contents (parent inodes)...
324 Checking objects (reference counts)...
325 Checking objects (backend)...
326 ..processed
5000 objects so far..
327 ..processed
10000 objects so far..
328 ..processed
15000 objects so far..
329 Checking objects (sizes)...
330 Checking blocks (referenced objects)...
331 Checking blocks (refcounts)...
332 Checking inode-block mapping (blocks)...
333 Checking inode-block mapping (inodes)...
334 Checking inodes (refcounts)...
335 Checking inodes (sizes)...
336 Checking extended attributes (names)...
337 Checking extended attributes (inodes)...
338 Checking symlinks (inodes)...
339 Checking directory reachability...
340 Checking unix conventions...
341 Checking referential integrity...
342 Dropping temporary indices...
343 Backing up old metadata...
353 Compressing and uploading metadata...
354 Wrote
0.89 MB of compressed metadata.
356 </pre
></blockquote
></p
>
358 <p
>Thanks to the cache, working on files that fit in the cache is very
359 quick, about the same speed as local file access. Uploading large
360 amount of data is to me limited by the bandwidth out of and into my
361 house. Uploading
685 MiB with a
100 MiB cache gave me
305 kiB/s,
362 which is very close to my upload speed, and downloading the same
363 Debian installation ISO gave me
610 kiB/s, close to my download speed.
364 Both were measured using
<tt
>dd
</tt
>. So for me, the bottleneck is my
365 network, not the file system code. I do not know what a good cache
366 size would be, but suspect that the cache should e larger than your
367 working set.
</p
>
369 <p
>I mentioned that only one machine can mount the file system at the
370 time. If another machine try, it is told that the file system is
373 <p
><blockquote
><pre
>
374 # mount.s3ql --cachedir /var/lib/s3ql-cache --authfile /root/.s3ql/authinfo2 \
375 --ssl --allow-root s3c://s.greenqloud.com:
443/bucket-name /s3ql
376 Using
8 upload threads.
377 Backend reports that fs is still mounted elsewhere, aborting.
379 </pre
></blockquote
></p
>
381 <p
>The file content is uploaded when the cache is full, while the
382 metadata is uploaded once every
24 hour by default. To ensure the
383 file system content is flushed to the cloud, one can either umount the
384 file system, or ask S3QL to flush the cache and metadata using
387 <p
><blockquote
><pre
>
388 # s3qlctrl upload-meta /s3ql
389 # s3qlctrl flushcache /s3ql
391 </pre
></blockquote
></p
>
393 <p
>If you are curious about how much space your data uses in the
394 cloud, and how much compression and deduplication cut down on the
395 storage usage, you can use s3qlstat on the mounted file system to get
398 <p
><blockquote
><pre
>
400 Directory entries:
9141
403 Total data size:
22049.38 MB
404 After de-duplication:
21955.46 MB (
99.57% of total)
405 After compression:
21877.28 MB (
99.22% of total,
99.64% of de-duplicated)
406 Database size:
2.39 MB (uncompressed)
407 (some values do not take into account not-yet-uploaded dirty blocks in cache)
409 </pre
></blockquote
></p
>
411 <p
>I mentioned earlier that there are several possible suppliers of
412 storage. I did not try to locate them all, but am aware of at least
413 <a href=
"https://www.greenqloud.com/
">Greenqloud
</a
>,
414 <a href=
"http://drive.google.com/
">Google Drive
</a
>,
415 <a href=
"http://aws.amazon.com/s3/
">Amazon S3 web serivces
</a
>,
416 <a href=
"http://www.rackspace.com/
">Rackspace
</a
> and
417 <a href=
"http://crowncloud.net/
">Crowncloud
</A
>. The latter even
418 accept payment in Bitcoin. Pick one that suit your need. Some of
419 them provide several GiB of free storage, but the prize models are
420 quite different and you will have to figure out what suits you
423 <p
>While researching this blog post, I had a look at research papers
424 and posters discussing the S3QL file system. There are several, which
425 told me that the file system is getting a critical check by the
426 science community and increased my confidence in using it. One nice
428 "<a href=
"http://www.lanl.gov/orgs/adtsc/publications/science_highlights_2013/docs/pg68_69.pdf
">An
429 Innovative Parallel Cloud Storage System using OpenStack’s SwiftObject
430 Store and Transformative Parallel I/O Approach
</a
>" by Hsing-Bung
431 Chen, Benjamin McClelland, David Sherrill, Alfred Torrez, Parks Fields
432 and Pamela Smith. Please have a look.
</p
>
434 <p
>Given my problems with different file systems earlier, I decided to
435 check out the mounted S3QL file system to see if it would be usable as
436 a home directory (in other word, that it provided POSIX semantics when
437 it come to locking and umask handling etc). Running
438 <a href=
"http://people.skolelinux.org/pere/blog/Testing_if_a_file_system_can_be_used_for_home_directories___.html
">my
439 test code to check file system semantics
</a
>, I was happy to discover that
440 no error was found. So the file system can be used for home
441 directories, if one chooses to do so.
</p
>
443 <p
>If you do not want a locally file system, and want something that
444 work without the Linux fuse file system, I would like to mention the
445 <a href=
"http://www.tarsnap.com/
">Tarsnap service
</a
>, which also
446 provide locally encrypted backup using a command line client. It have
447 a nicer access control system, where one can split out read and write
448 access, allowing some systems to write to the backup and others to
449 only read from it.
</p
>
451 <p
>As usual, if you use Bitcoin and want to show your support of my
452 activities, please send Bitcoin donations to my address
453 <b
><a href=
"bitcoin:
15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b
&label=PetterReinholdtsenBlog
">15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b
</a
></b
>.
</p
>
458 <title>EU-domstolen bekreftet i dag at datalagringsdirektivet er ulovlig
</title>
459 <link>http://people.skolelinux.org/pere/blog/EU_domstolen_bekreftet_i_dag_at_datalagringsdirektivet_er_ulovlig.html
</link>
460 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/EU_domstolen_bekreftet_i_dag_at_datalagringsdirektivet_er_ulovlig.html
</guid>
461 <pubDate>Tue,
8 Apr
2014 11:
30:
00 +
0200</pubDate>
462 <description><p
>I dag kom endelig avgjørelsen fra EU-domstolen om
463 datalagringsdirektivet, som ikke overraskende ble dømt ulovlig og i
464 strid med borgernes grunnleggende rettigheter. Hvis du lurer på hva
465 datalagringsdirektivet er for noe, så er det
466 <a href=
"http://tv.nrk.no/program/koid75005313/tema-dine-digitale-spor-datalagringsdirektivet
">en
467 flott dokumentar tilgjengelig hos NRK
</a
> som jeg tidligere
468 <a href=
"http://people.skolelinux.org/pere/blog/Dokumentaren_om_Datalagringsdirektivet_sendes_endelig_p__NRK.html
">har
469 anbefalt
</a
> alle å se.
</p
>
471 <p
>Her er et liten knippe nyhetsoppslag om saken, og jeg regner med at
472 det kommer flere ut over dagen. Flere kan finnes
473 <a href=
"http://www.mylder.no/?drill=datalagringsdirektivet
&intern=
1">via
474 mylder
</a
>.
</p
>
478 <li
><a href=
"http://e24.no/digital/eu-domstolen-datalagringsdirektivet-er-ugyldig/
22879592">EU-domstolen:
479 Datalagringsdirektivet er ugyldig
</a
> - e24.no
2014-
04-
08
481 <li
><a href=
"http://www.aftenposten.no/nyheter/iriks/EU-domstolen-Datalagringsdirektivet-er-ulovlig-
7529032.html
">EU-domstolen:
482 Datalagringsdirektivet er ulovlig
</a
> - aftenposten.no
2014-
04-
08
484 <li
><a href=
"http://www.aftenposten.no/nyheter/iriks/politikk/Krever-DLD-stopp-i-Norge-
7530086.html
">Krever
485 DLD-stopp i Norge
</a
> - aftenposten.no
2014-
04-
08
487 <li
><a href=
"http://www.p4.no/story.aspx?id=
566431">Apenes: - En
488 gledens dag
</a
> - p4.no
2014-
04-
08
490 <li
><a href=
"http://www.nrk.no/norge/_-datalagringsdirektivet-er-ugyldig-
1.11655929">EU-domstolen:
491 – Datalagringsdirektivet er ugyldig
</a
> - nrk.no
2014-
04-
08</li
>
493 <li
><a href=
"http://www.vg.no/nyheter/utenriks/data-og-nett/eu-domstolen-datalagringsdirektivet-er-ugyldig/a/
10130280/
">EU-domstolen:
494 Datalagringsdirektivet er ugyldig
</a
> - vg.no
2014-
04-
08</li
>
496 <li
><a href=
"http://www.dagbladet.no/
2014/
04/
08/nyheter/innenriks/datalagringsdirektivet/personvern/
32711646/
">-
497 Vi bør skrote hele datalagringsdirektivet
</a
> - dagbladet.no
498 2014-
04-
08</li
>
500 <li
><a href=
"http://www.digi.no/
928137/eu-domstolen-dld-er-ugyldig
">EU-domstolen:
501 DLD er ugyldig
</a
> - digi.no
2014-
04-
08</li
>
503 <li
><a href=
"http://www.irishtimes.com/business/sectors/technology/european-court-declares-data-retention-directive-invalid-
1.1754150">European
504 court declares data retention directive invalid
</a
> - irishtimes.com
505 2014-
04-
08</li
>
507 <li
><a href=
"http://www.reuters.com/article/
2014/
04/
08/us-eu-data-ruling-idUSBREA370F020140408?feedType=RSS
">EU
508 court rules against requirement to keep data of telecom users
</a
> -
509 reuters.com
2014-
04-
08</li
>
514 <p
>Jeg synes det er veldig fint at nok en stemme slår fast at
515 totalitær overvåkning av befolkningen er uakseptabelt, men det er
516 fortsatt like viktig å beskytte privatsfæren som før, da de
517 teknologiske mulighetene fortsatt finnes og utnyttes, og jeg tror
518 innsats i prosjekter som
519 <a href=
"https://wiki.debian.org/FreedomBox
">Freedombox
</a
> og
520 <a href=
"http://www.dugnadsnett.no/
">Dugnadsnett
</a
> er viktigere enn
523 <p
><strong
>Update
2014-
04-
08 12:
10</strong
>: Kronerullingen for å
524 stoppe datalagringsdirektivet i Norge gjøres hos foreningen
525 <a href=
"http://www.digitaltpersonvern.no/
">Digitalt Personvern
</a
>,
526 som har samlet inn
843 215,- så langt men trenger nok mye mer hvis
528 ikke Høyre og Arbeiderpartiet bytter mening i saken. Det var
529 <a href=
"http://www.holderdeord.no/parliament-issues/
48650">kun
530 partinene Høyre og Arbeiderpartiet
</a
> som stemte for
531 Datalagringsdirektivet, og en av dem må bytte mening for at det skal
532 bli flertall mot i Stortinget. Se mer om saken
533 <a href=
"http://www.holderdeord.no/issues/
69-innfore-datalagringsdirektivet
">Holder
534 de ord
</a
>.
</p
>
539 <title>ReactOS Windows clone - nice free software
</title>
540 <link>http://people.skolelinux.org/pere/blog/ReactOS_Windows_clone___nice_free_software.html
</link>
541 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/ReactOS_Windows_clone___nice_free_software.html
</guid>
542 <pubDate>Tue,
1 Apr
2014 12:
10:
00 +
0200</pubDate>
543 <description><p
>Microsoft have announced that Windows XP reaches its end of life
544 2014-
04-
08, in
7 days. But there are heaps of machines still running
545 Windows XP, and depending on Windows XP to run their applications, and
546 upgrading will be expensive, both when it comes to money and when it
547 comes to the amount of effort needed to migrate from Windows XP to a
548 new operating system. Some obvious options (buy new a Windows
549 machine, buy a MacOSX machine, install Linux on the existing machine)
550 are already well known and covered elsewhere. Most of them involve
551 leaving the user applications installed on Windows XP behind and
552 trying out replacements or updated versions. In this blog post I want
553 to mention one strange bird that allow people to keep the hardware and
554 the existing Windows XP applications and run them on a free software
555 operating system that is Windows XP compatible.
</p
>
557 <p
><a href=
"http://www.reactos.org/
">ReactOS
</a
> is a free software
558 operating system (GNU GPL licensed) working on providing a operating
559 system that is binary compatible with Windows, able to run windows
560 programs directly and to use Windows drivers for hardware directly.
561 The project goal is for Windows user to keep their existing machines,
562 drivers and software, and gain the advantages from user a operating
563 system without usage limitations caused by non-free licensing. It is
564 a Windows clone running directly on the hardware, so quite different
565 from the approach taken by
<a href=
"http://www.winehq.org/
">the Wine
566 project
</a
>, which make it possible to run Windows binaries on
569 <p
>The ReactOS project share code with the Wine project, so most
570 shared libraries available on Windows are already implemented already.
571 There is also a software manager like the one we are used to on Linux,
572 allowing the user to install free software applications with a simple
573 click directly from the Internet. Check out the
574 <a href=
"http://www.reactos.org/screenshots
">screen shots on the
575 project web site
</a
> for an idea what it look like (it looks just like
576 Windows before metro).
</p
>
578 <p
>I do not use ReactOS myself, preferring Linux and Unix like
579 operating systems. I
've tested it, and it work fine in a virt-manager
580 virtual machine. The browser, minesweeper, notepad etc is working
581 fine as far as I can tell. Unfortunately, my main test application
582 is the software included on a CD with the Lego Mindstorms NXT, which
583 seem to install just fine from CD but fail to leave any binaries on
584 the disk after the installation. So no luck with that test software.
585 No idea why, but hope someone else figure out and fix the problem.
586 I
've tried the ReactOS Live ISO on a physical machine, and it seemed
587 to work just fine. If you like Windows and want to keep running your
588 old Windows binaries, check it out by
589 <a href=
"http://www.reactos.org/download
">downloading
</a
> the
590 installation CD, the live CD or the preinstalled virtual machine
596 <title>Debian Edu interview: Roger Marsal
</title>
597 <link>http://people.skolelinux.org/pere/blog/Debian_Edu_interview__Roger_Marsal.html
</link>
598 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Debian_Edu_interview__Roger_Marsal.html
</guid>
599 <pubDate>Sun,
30 Mar
2014 11:
40:
00 +
0200</pubDate>
600 <description><p
><a href=
"http://www.skolelinux.org/
">Debian Edu / Skolelinux
</a
>
601 keep gaining new users. Some weeks ago, a person showed up on IRC,
602 <a href=
"irc://irc.debian.org/#debian-edu
">#debian-edu
</a
>, with a
603 wish to contribute, and I managed to get a interview with this great
604 contributor Roger Marsal to learn more about his background.
</p
>
606 <p
><strong
>Who are you, and how do you spend your days?
</strong
></p
>
608 <p
>My name is Roger Marsal, I
'm
27 years old (
1986 generation) and I
609 live in Barcelona, Spain. I
've got a strong business background and I
610 work as a patrimony manager and as a real estate agent. Additionally,
611 I
've co-founded a British based tech company that is nowadays on the
612 last development phase of a new social networking concept.
</p
>
614 <p
>I
'm a Linux enthusiast that started its journey with Ubuntu four years
615 ago and have recently switched to Debian seeking rock solid stability
616 and as a necessary step to gain expertise.
</p
>
618 <p
>In a nutshell, I spend my days working and learning as much as I
619 can to face both my job, entrepreneur project and feed my Linux
622 <p
><strong
>How did you get in contact with the Skolelinux / Debian Edu
623 project?
</strong
></p
>
625 <p
>I discovered the
<a href=
"http://www.ltsp.org/
">LTSP
</a
> advantages
626 with
"Ubuntu
12.04 alternate install
" and after a year of use I
627 started looking for an alternative. Even though I highly value and
628 respect the Ubuntu project, I thought it was necessary for me to
629 change to a more robust and stable alternative. As far as I was using
630 Debian on my personal laptop I thought it would be fine to install
631 Debian and configure an LTSP server myself. Surprised, I discovered
632 that the Debian project also supported a kind of Edubuntu equivalent,
633 and after having some pain I obtained a Debian Edu network up and
634 running. I just loved it.
</p
>
636 <p
><strong
>What do you see as the advantages of Skolelinux / Debian
637 Edu?
</strong
></p
>
639 <p
>I found a main advantage in that, once you know
"the tips and
640 tricks
", a new installation just works out of the box. It
's the most
641 complete alternative I
've found to create an LTSP network. All the
642 other distributions seems to be made of plastic, Debian Edu seems to
643 be made of steel.
</p
>
645 <p
><strong
>What do you see as the disadvantages of Skolelinux / Debian
646 Edu?
</strong
></p
>
648 <p
>I found two main disadvantages.
</p
>
650 <p
>I
'm not an expert but I
've got notions and I had to spent a considerable
651 amount of time trying to bring up a standard network topology. I
'm quite
652 stubborn and I just worked until I did but I
'm sure many people with few
653 resources (not big schools, but academies for example) would have switched
654 or dropped.
</p
>
656 <p
>It
's amazing how such a complex system like Debian Edu has achieved
657 this out-of-the-box state. Even though tweaking without breaking gets
658 more difficult, as more factors have to be considered. This can
659 discourage many people too.
</p
>
661 <p
><strong
>Which free software do you use daily?
</strong
></p
>
663 <p
>I use Debian, Firefox, Okular, Inkscape, LibreOffice and
664 Virtualbox.
</p
>
667 <p
><strong
>Which strategy do you believe is the right one to use to
668 get schools to use free software?
</strong
></p
>
670 <p
>I don
't think there is a need for a particular strategy. The free
671 attribute in both
"freedom
" and
"no price
" meanings is what will
672 really bring free software to schools. In my experience I can think of
673 the
<a href=
"http://www.r-project.org/
">"R
" statistical language
</a
>; a
674 few years a ago was an extremely nerd tool for university people.
675 Today it
's being increasingly used to teach statistics at many
676 different level of studies. I believe free and open software will
677 increasingly gain popularity, but I
'm sure schools will be one of the
678 first scenarios where this will happen.
</p
>
683 <title>Dokumentaren om Datalagringsdirektivet sendes endelig på NRK
</title>
684 <link>http://people.skolelinux.org/pere/blog/Dokumentaren_om_Datalagringsdirektivet_sendes_endelig_p__NRK.html
</link>
685 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Dokumentaren_om_Datalagringsdirektivet_sendes_endelig_p__NRK.html
</guid>
686 <pubDate>Wed,
26 Mar
2014 09:
50:
00 +
0100</pubDate>
687 <description><p
><a href=
"http://www.nuug.no/
">Foreningen NUUG
</a
> melder i natt at
688 NRK nå har bestemt seg for
689 <a href=
"http://www.nuug.no/news/NRK_viser_filmen_om_Datalagringsdirektivet_f_rste_gang_2014_03_31.shtml
">når
690 den norske dokumentarfilmen om datalagringsdirektivet skal
691 sendes
</a
> (se
<a href=
"http://www.imdb.com/title/tt2832844/
">IMDB
</a
>
692 for detaljer om filmen) . Første visning blir på NRK2 mandag
693 2014-
03-
31 kl.
19:
50, og deretter visninger onsdag
2014-
04-
02
694 kl.
12:
30, fredag
2014-
04-
04 kl.
19:
40 og søndag
2014-
04-
06 kl.
15:
10.
695 Jeg har sett dokumentaren, og jeg anbefaler enhver å se den selv. Som
696 oppvarming mens vi venter anbefaler jeg Bjørn Stærks kronikk i
697 Aftenposten fra i går,
698 <a href=
"http://www.aftenposten.no/meninger/kronikker/Autoritar-gjokunge-
7514915.html
">Autoritær
699 gjøkunge
</a
>, der han gir en grei skisse av hvor ille det står til med
700 retten til privatliv og beskyttelsen av demokrati i Norge og resten
701 verden, og helt riktig slår fast at det er vi i databransjen som
702 sitter med nøkkelen til å gjøre noe med dette. Jeg har involvert meg
703 i prosjektene
<a href=
"http://www.dugnadsnett.no/
">dugnadsnett.no
</a
>
704 og
<a href=
"https://wiki.debian.org/FreedomBox
">FreedomBox
</a
> for å
705 forsøke å gjøre litt selv for å bedre situasjonen, men det er mye
706 hardt arbeid fra mange flere enn meg som gjenstår før vi kan sies å ha
707 gjenopprettet balansen.
</p
>
709 <p
>Jeg regner med at nettutgaven dukker opp på
710 <a href=
"http://tv.nrk.no/program/koid75005313/tema-dine-digitale-spor-datalagringsdirektivet
">NRKs
711 side om filmen om datalagringsdirektivet
</a
> om fem dager. Hold et
712 øye med siden, og tips venner og slekt om at de også bør se den.
</p
>
717 <title>Public Trusted Timestamping services for everyone
</title>
718 <link>http://people.skolelinux.org/pere/blog/Public_Trusted_Timestamping_services_for_everyone.html
</link>
719 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Public_Trusted_Timestamping_services_for_everyone.html
</guid>
720 <pubDate>Tue,
25 Mar
2014 12:
50:
00 +
0100</pubDate>
721 <description><p
>Did you ever need to store logs or other files in a way that would
722 allow it to be used as evidence in court, and needed a way to
723 demonstrate without reasonable doubt that the file had not been
724 changed since it was created? Or, did you ever need to document that
725 a given document was received at some point in time, like some
726 archived document or the answer to an exam, and not changed after it
727 was received? The problem in these settings is to remove the need to
728 trust yourself and your computers, while still being able to prove
729 that a file is the same as it was at some given time in the past.
</p
>
731 <p
>A solution to these problems is to have a trusted third party
732 "stamp
" the document and verify that at some given time the document
733 looked a given way. Such
734 <a href=
"https://en.wikipedia.org/wiki/Notarius
">notarius
</a
> service
735 have been around for thousands of years, and its digital equivalent is
737 <a href=
"http://en.wikipedia.org/wiki/Trusted_timestamping
">trusted
738 timestamping service
</a
>.
<a href=
"http://www.ietf.org/
">The Internet
739 Engineering Task Force
</a
> standardised how such service could work a
740 few years ago as
<a href=
"http://tools.ietf.org/html/rfc3161
">RFC
741 3161</a
>. The mechanism is simple. Create a hash of the file in
742 question, send it to a trusted third party which add a time stamp to
743 the hash and sign the result with its private key, and send back the
744 signed hash + timestamp. Both email, FTP and HTTP can be used to
745 request such signature, depending on what is provided by the service
746 used. Anyone with the document and the signature can then verify that
747 the document matches the signature by creating their own hash and
748 checking the signature using the trusted third party public key.
749 There are several commercial services around providing such
750 timestamping. A quick search for
751 "<a href=
"https://duckduckgo.com/?q=rfc+
3161+service
">rfc
3161
752 service
</a
>" pointed me to at least
753 <a href=
"https://www.digistamp.com/technical/how-a-digital-time-stamp-works/
">DigiStamp
</a
>,
754 <a href=
"http://www.quovadisglobal.co.uk/CertificateServices/SigningServices/TimeStamp.aspx
">Quo
756 <a href=
"https://www.globalsign.com/timestamp-service/
">Global Sign
</a
>
757 and
<a href=
"http://www.globaltrustfinder.com/TSADefault.aspx
">Global
758 Trust Finder
</a
>. The system work as long as the private key of the
759 trusted third party is not compromised.
</p
>
761 <p
>But as far as I can tell, there are very few public trusted
762 timestamp services available for everyone. I
've been looking for one
763 for a while now. But yesterday I found one over at
764 <a href=
"https://www.pki.dfn.de/zeitstempeldienst/
">Deutches
765 Forschungsnetz
</a
> mentioned in
766 <a href=
"http://www.d-mueller.de/blog/dealing-with-trusted-timestamps-in-php-rfc-
3161/
">a
767 blog by David Müller
</a
>. I then found
768 <a href=
"http://www.rz.uni-greifswald.de/support/dfn-pki-zertifikate/zeitstempeldienst.html
">a
769 good recipe on how to use the service
</a
> over at the University of
770 Greifswald.
</p
>
772 <p
><a href=
"http://www.openssl.org/
">The OpenSSL library
</a
> contain
773 both server and tools to use and set up your own signing service. See
774 the ts(
1SSL), tsget(
1SSL) manual pages for more details. The
775 following shell script demonstrate how to extract a signed timestamp
776 for any file on the disk in a Debian environment:
</p
>
778 <p
><blockquote
><pre
>
781 url=
"http://zeitstempel.dfn.de
"
782 caurl=
"https://pki.pca.dfn.de/global-services-ca/pub/cacert/chain.txt
"
783 reqfile=$(mktemp -t tmp.XXXXXXXXXX.tsq)
784 resfile=$(mktemp -t tmp.XXXXXXXXXX.tsr)
786 if [ ! -f $cafile ] ; then
787 wget -O $cafile
"$caurl
"
789 openssl ts -query -data
"$
1" -cert | tee
"$reqfile
" \
790 | /usr/lib/ssl/misc/tsget -h
"$url
" -o
"$resfile
"
791 openssl ts -reply -in
"$resfile
" -text
1>&2
792 openssl ts -verify -data
"$
1" -in
"$resfile
" -CAfile
"$cafile
" 1>&2
793 base64
< "$resfile
"
794 rm
"$reqfile
" "$resfile
"
795 </pre
></blockquote
></p
>
797 <p
>The argument to the script is the file to timestamp, and the output
798 is a base64 encoded version of the signature to STDOUT and details
799 about the signature to STDERR. Note that due to
800 <a href=
"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=
742553">a bug
801 in the tsget script
</a
>, you might need to modify the included script
802 and remove the last line. Or just write your own HTTP uploader using
803 curl. :) Now you too can prove and verify that files have not been
806 <p
>But the Internet need more public trusted timestamp services.
807 Perhaps something for
<a href=
"http://www.uninett.no/
">Uninett
</a
> or
808 my work place the
<a href=
"http://www.uio.no/
">University of Oslo
</a
>
814 <title>Video DVD reader library / python-dvdvideo - nice free software
</title>
815 <link>http://people.skolelinux.org/pere/blog/Video_DVD_reader_library___python_dvdvideo___nice_free_software.html
</link>
816 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Video_DVD_reader_library___python_dvdvideo___nice_free_software.html
</guid>
817 <pubDate>Fri,
21 Mar
2014 15:
25:
00 +
0100</pubDate>
818 <description><p
>Keeping your DVD collection safe from scratches and curious
819 children fingers while still having it available when you want to see a
820 movie is not straight forward. My preferred method at the moment is
821 to store a full copy of the ISO on a hard drive, and use VLC, Popcorn
822 Hour or other useful players to view the resulting file. This way the
823 subtitles and bonus material are still available and using the ISO is
824 just like inserting the original DVD record in the DVD player.
</p
>
826 <p
>Earlier I used dd for taking security copies, but it do not handle
827 DVDs giving read errors (which are quite a few of them). I
've also
829 <a href=
"http://people.skolelinux.org/pere/blog/Ripping_problematic_DVDs_using_dvdbackup_and_genisoimage.html
">dvdbackup
830 and genisoimage
</a
>, but these days I use the marvellous python library
832 <a href=
"http://bblank.thinkmo.de/blog/new-software-python-dvdvideo
">python-dvdvideo
</a
>
833 written by Bastian Blank. It is
834 <a href=
"http://packages.qa.debian.org/p/python-dvdvideo.html
">in Debian
835 already
</a
> and the binary package name is python3-dvdvideo. Instead
836 of trying to read every block from the DVD, it parses the file
837 structure and figure out which block on the DVD is actually in used,
838 and only read those blocks from the DVD. This work surprisingly well,
839 and I have been able to almost backup my entire DVD collection using
840 this method.
</p
>
842 <p
>So far, python-dvdvideo have failed on between
10 and
843 20 DVDs, which is a small fraction of my collection. The most common
845 <a href=
"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=
720831">DVDs
846 using UTF-
16 instead of UTF-
8 characters
</a
>, which according to
847 Bastian is against the DVD specification (and seem to cause some
848 players to fail too). A rarer problem is what seem to be inconsistent
849 DVD structures, as the python library
850 <a href=
"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=
723079">claim
851 there is a overlap between objects
</a
>. An equally rare problem claim
852 <a href=
"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=
741878">some
853 value is out of range
</a
>. No idea what is going on there. I wish I
854 knew enough about the DVD format to fix these, to ensure my movie
855 collection will stay with me in the future.
</p
>
857 <p
>So, if you need to keep your DVDs safe, back them up using
858 python-dvdvideo. :)
</p
>
863 <title>Norsk utgave av Alaveteli / WhatDoTheyKnow på trappene
</title>
864 <link>http://people.skolelinux.org/pere/blog/Norsk_utgave_av_Alaveteli___WhatDoTheyKnow_p__trappene.html
</link>
865 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Norsk_utgave_av_Alaveteli___WhatDoTheyKnow_p__trappene.html
</guid>
866 <pubDate>Sun,
16 Mar
2014 09:
30:
00 +
0100</pubDate>
867 <description><p
>Det offentlige Norge har mye kunnskap og informasjon. Men hvordan
868 kan en få tilgang til den på en enkel måte? Takket være et lite
869 knippe lover og tilhørende forskrifter, blant annet
870 <a href=
"http://lovdata.no/dokument/NL/lov/
2006-
05-
19-
16">offentlighetsloven
</a
>,
871 <a href=
"http://lovdata.no/dokument/NL/lov/
2003-
05-
09-
31">miljøinformasjonsloven
</a
>
873 <a href=
"http://lovdata.no/dokument/NL/lov/
1967-
02-
10/
">forvaltningsloven
</a
>
874 har en rett til å spørre det offentlige og få svar. Men det finnes
875 intet offentlig arkiv over hva andre har spurt om, og dermed risikerer en
876 å måtte forstyrre myndighetene gang på gang for å få tak i samme
877 informasjonen på nytt.
<a href=
"http://www.mysociety.org/
">Britiske
878 mySociety
</a
> har laget tjenesten
879 <a href=
"http://www.whatdotheyknow.com/
">WhatDoTheyKnow
</a
> som gjør
880 noe med dette. I Storbritannia blir WhatdoTheyKnow brukt i
881 <a href=
"http://www.mysociety.org/
2011/
07/
01/whatdotheyknows-share-of-central-government-foi-requests-q2-
2011/
">ca
882 15% av alle innsynsforespørsler mot sentraladministrasjonen
</a
>.
883 Prosjektet heter
<a href=
"http://www.alaveteli.org/
">Alaveteli
</A
>, og
884 er takk i bruk en rekke steder etter at løsningen ble generalisert og
885 gjort mulig å oversette. Den hjelper borgerne med å be om innsyn,
886 rådgir ved purringer og klager og lar alle se hvilke henvendelser som
887 er sendt til det offentlige og hvilke svar som er kommet inn, i et
888 søkpart arkiv. Her i Norge holder vi i foreningen NUUG på å få opp en
889 norsk utgave av Alaveteli, og her trenger vi din hjelp med
890 oversettelsen.
</p
>
892 <p
>Så langt er
76 % av Alaveteli oversatt til norsk bokmål, men vi
893 skulle gjerne vært oppe i
100 % før lansering. Oversettelsen gjøres
894 på
<a href=
"https://www.transifex.com/projects/p/alaveteli/
">Transifex,
895 der enhver som registrerer seg
</a
> og ber om tilgang til
896 bokmålsoversettelsen får bidra. Vi har satt opp en test av tjenesten
897 (som ikke sender epost til det offentlige, kun til oss som holder på å
898 sette opp tjenesten) på maskinen
899 <a href=
"http://alaveteli-dev.nuug.no/
">alaveteli-dev.nuug.no
</a
>, der
900 en kan se hvordan de oversatte meldingen blir seende ut på nettsiden.
901 Når tjenesten lanseres vil den hete
902 <a href=
"https://www.mimesbrønn.no/
">Mimes brønn
</a
>, etter
903 visdomskilden som Odin måtte gi øyet sitt for å få drikke i. Den
904 nettsiden er er ennå ikke klar til bruk.
</p
>
906 <p
>Hvis noen vil oversette til nynorsk også, så skal vi finne ut
907 hvordan vi lager en flerspråklig tjeneste. Men i første omgang er
908 fokus på bokmålsoversettelsen, der vi selv har nok peiling til å ha
909 fått oversatt
76%, men trenger hjelp for å komme helt i mål. :)
</p
>