1 <!DOCTYPE html PUBLIC 
"-//W3C//DTD XHTML 1.0 Strict//EN" 
   2           "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> 
   3 <html xmlns=
"http://www.w3.org/1999/xhtml" dir=
"ltr"> 
   5     <meta http-equiv=
"Content-Type" content=
"text/html;charset=utf-8" /> 
   6     <title>Petter Reinholdtsen
</title> 
   7     <link rel=
"stylesheet" type=
"text/css" media=
"screen" href=
"http://people.skolelinux.org/pere/blog/style.css" /> 
   8     <link rel=
"stylesheet" type=
"text/css" media=
"screen" href=
"http://people.skolelinux.org/pere/blog/vim.css" /> 
   9     <link rel=
"alternate" title=
"RSS Feed" href=
"http://people.skolelinux.org/pere/blog/index.rss" type=
"application/rss+xml" /> 
  14      <a href=
"http://people.skolelinux.org/pere/blog/">Petter Reinholdtsen
</a> 
  23       <div class=
"title"><a href=
"http://people.skolelinux.org/pere/blog/Recipe_to_test_the_Freedombox_project_on_amd64_or_Raspberry_Pi.html">Recipe to test the Freedombox project on amd64 or Raspberry Pi
</a></div> 
  24       <div class=
"date">10th September 
2013</div> 
  25       <div class=
"body"><p>I was introduced to the
 
  26 <a href=
"http://www.freedomboxfoundation.org/">Freedombox project
</a> 
  27 in 
2010, when Eben Moglen presented his vision about serving the need
 
  28 of non-technical people to keep their personal information private and
 
  29 within the legal protection of their own homes.  The idea is to give
 
  30 people back the power over their network and machines, and return
 
  31 Internet back to its intended peer-to-peer architecture.  Instead of
 
  32 depending on a central service, the Freedombox will give everyone
 
  33 control over their own basic infrastructure.
</p> 
  35 <p>I've intended to join the effort since then, but other tasks have
 
  36 taken priority.  But this summers nasty news about the misuse of trust
 
  37 and privilege exercised by the "western" intelligence gathering
 
  38 communities increased my eagerness to contribute to a point where I
 
  39 actually started working on the project a while back.
</p> 
  41 <p>The 
<a href=
"https://alioth.debian.org/projects/freedombox/">initial
 
  42 Debian initiative
</a> based on the vision from Eben Moglen, is to
 
  43 create a simple and cheap Debian based appliance that anyone can hook
 
  44 up in their home and get access to secure and private services and
 
  45 communication.  The initial deployment platform have been the
 
  46 <a href=
"http://www.globalscaletechnologies.com/t-dreamplugdetails.aspx">Dreamplug
</a>,
 
  47 which is a piece of hardware I do not own.  So to be able to test what
 
  48 the current Freedombox setup, I had to come up with a way to install
 
  49 it on some hardware I do got access to.  I have rewritten the
 
  50 <a href=
"https://github.com/NickDaly/freedom-maker">freedom-maker
</a> 
  51 image build framework to use .deb packages instead of only copying
 
  52 setup into the boot images, and thanks to this rewrite I am able to
 
  53 set up any machine supported by Debian Wheezy as a Freedombox, using
 
  54 the previously mentioned deb (and a few support debs for packages
 
  55 missing in Debian).
</p> 
  57 <p>The current Freedombox setup consist of a set of bootstrapping
 
  59 (
<a href=
"https://github.com/petterreinholdtsen/freedombox-setup">freedombox-setup
</a>),
 
  60 and a administrative web interface
 
  61 (
<a href=
"https://github.com/NickDaly/Plinth">plinth
</a> + exmachina +
 
  62 withsqlite), as well as a privacy enhancing proxy based on
 
  63 <a href=
"http://packages.qa.debian.org/privoxy">privoxy
</a> 
  64 (freedombox-privoxy).  There is also a web/javascript based XMPP
 
  65 client (
<a href=
"http://packages.qa.debian.org/jwchat">jwchat
</a>)
 
  66 trying (unsuccessfully so far) to talk to the XMPP server
 
  67 (
<a href=
"http://packages.qa.debian.org/ejabberd">ejabberd
</a>).  The
 
  68 web interface is pluggable, and the goal is to use it to enable OpenID
 
  69 services, mesh network connectivity, use of TOR, etc, etc.  Not much of
 
  70 this is really working yet, see
 
  71 <a href=
"https://github.com/NickDaly/freedombox-todos/blob/master/TODO">the
 
  72 project TODO
</a> for links to GIT repositories.  Most of the code is
 
  73 on github at the moment.  The HTTP proxy is operational out of the
 
  74 box, and the admin web interface can be used to add/remove plinth
 
  75 users.  I've not been able to do anything else with it so far, but
 
  76 know there are several branches spread around github and other places
 
  77 with lots of half baked features.
</p> 
  79 <p>Anyway, if you want to have a look at the current stat, the
 
  80 following recipes should work to give you a test machine to poke
 
  83 <p><strong>Debian Wheezy amd64
</strong></p> 
  87 <li>Fetch normal Debian Wheezy installation ISO.
</li> 
  88 <li>Boot from it, either as CD or USB stick.
</li> 
  89 <li><p>Press [tab] on the boot prompt and add this as a boot argument
 
  90 to the Debian installer:
<p> 
  91 <pre>url=http://www.reinholdtsen.name/freedombox/preseed-wheezy.dat
</pre></li> 
  93 <li>Answer the few language/region/password questions and pick disk to
 
  96 <li>When the installation is finished and the machine have rebooted a
 
  97 few times, your Freedombox is ready for testing.
</li> 
 101 <p><strong>Raspberry Pi Raspbian
</strong></p> 
 105 <li>Fetch a Raspbian SD card image, create SD card.
</li> 
 106 <li>Boot from SD card, extend file system to fill the card completely.
</li> 
 107 <li><p>Log in and add this to /etc/sources.list:
</p> 
 109 deb http://www.reinholdtsen.name/freedombox wheezy main
 
 111 <li><p>Run this as root:
</p> 
 113 wget -O - http://www.reinholdtsen.name/freedombox/BE1A583D.asc | \
 
 116 apt-get install freedombox-setup
 
 117 /usr/lib/freedombox/setup
 
 119 <li>Reboot into your freshly created Freedombox.
</li> 
 123 <p>You can test it on other architectures too, but because the
 
 124 freedombox-privoxy package is binary, it will only work as intended on
 
 125 the architectures where I have had time to build the binary and put it
 
 126 in my APT repository.  But do not let this stop you.  It is only a
 
 127 short "
<tt>apt-get source -b freedombox-privoxy
</tt>" away. :)</p> 
 129 <p>Note that by default Freedombox is a DHCP server on the 
 130 192.168.1.0/24 subnet, so if this is your subnet be careful and turn 
 131 off the DHCP server by running "<tt>update-rc.d isc-dhcp-server
 
 132 disable
</tt>" as root.</p> 
 134 <p>Please let me know if this work for you, or if you have any 
 135 problems.  We gather on the IRC channel 
 136 <a href="irc://irc.debian.org:
6667/%
23freedombox
">#freedombox</a> on 
 137 irc.debian.org and the 
 138 <a href="http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss
">project 
 139 mailing list</a>.</p> 
 141 <p>Once you get your freedombox operational, you can visit 
 142 <tt>http://your-host-name:8001/</tt> to see the state of the plint 
 143 welcome screen (dead end - do not be surprised if you are unable to 
 144 get past it), and next visit <tt>http://your-host-name:8001/help/</tt> 
 145 to look at the rest of plinth.  The default user is 'admin' and the 
 146 default password is 'secret'.</p> 
 151         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian
">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/freedombox
">freedombox</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet
">sikkerhet</a>, <a href="http://people.skolelinux.org/pere/blog/tags/surveillance
">surveillance</a>, <a href="http://people.skolelinux.org/pere/blog/tags/web
">web</a>.  
 156     <div class="padding
"></div> 
 159       <div class="title
"><a href="http://people.skolelinux.org/pere/blog/Datalagringsdirektivet_gj_r_at_Oslo_H_yre_og_Arbeiderparti_ikke_f_r_min_stemme_i__r.html
">Datalagringsdirektivet gjør at Oslo Høyre og Arbeiderparti ikke får min stemme i år</a></div> 
 160       <div class="date
"> 8th September 2013</div> 
 161       <div class="body
"><p>I 2011 raderte et stortingsflertall bestående av Høyre og 
 162 Arbeiderpartiet vekk en betydelig del av privatsfæren til det norske 
 163 folk.  Det ble vedtatt at det skulle registreres og lagres i et halvt 
 164 år hvor alle som bærer på en mobiltelefon befinner seg, hvem de 
 165 snakker med og hvor lenge de snakket sammen.  Det skal også 
 166 registreres hvem de sendte SMS-meldinger til, hvem en har sendt epost 
 167 til, og hvilke nett-tjenere en besøkte.  Saken er kjent som 
 168 <a href="http://beta.holderdeord.no/issues/innfore-datalagringsdirektivet
">Datalagringsdirektivet 
 169 (DLD)</a>, og innebærer at alle innbyggerne og andre innenfor Norges 
 170 grenser overvåkes døgnet rundt.  Det ble i praksis innført brev og 
 171 besøkskontroll av hele befolkningen.  Rapporter fra de landene som 
 172 allerede har innført slik total lagring av borgernes 
 173 kommunikasjonsmønstre forteller at det ikke hjelper i 
 174 kriminalitetsbekjempelsen.  Den norske prislappen blir mange hundre 
 175 millioner, uten at det ser ut til å bidra positivt til politiets 
 176 arbeide.  Jeg synes flere hundre millioner i stedet burde vært brukt 
 177 på noe som kan dokumenteres å ha effekt i kriminalitetsbekjempelsen. 
 179 <a href="http://no.wikipedia.org/wiki/Datalagringsdirektivet
">Wikipedia</a> 
 180 og <a href="http://www.uhuru.biz/?cat=
84">Jon Wessel-Aas</a>.</p> 
 182 <p>Hva er problemet, tenkter du kanskje?  Et åpenbart problem er at 
 183 medienes kildevern i praksis blir radert ut.  Den innsamlede 
 184 informasjonen gjør det mulig å finne ut hvem som har snakket med 
 185 journalister på telefon, SMS og epost, og hvem som har vært i nærheten 
 186 av journalister så sant begge bar med seg en telefon.  Et annet er at 
 187 advokatvernet blir sterkt redusert, der politiet kan finne ut hvem 
 188 som har snakket med en advokat når, eller vært i møter en med advokat. 
 189 Et tredje er at svært personlig informasjon kan avledes fra hvilke 
 190 nettsteder en har besøkt.  Har en besøkt hivnorge.no, 
 191 swingersnorge.com eller andre sider som kan brukes til avlede 
 192 interesser som hører til privatsfæren, vil denne informasjonen være 
 193 tilgjengelig takket være datalagringsdirektivet.</p> 
 195 <p>De fleste partiene var mot, kun to partier stemte for.  Høyre og 
 196 Arbeiderpartiet.  Og både Høyre og Arbeiderpartiet i Oslo har 
 197 DLD-forkjempere på toppen av sine lister (har ikke sjekket de andre 
 198 fylkene).  Det er dermed helt uaktuelt for meg å stemme på disse 
 199 partiene.  Her er oversikten over partienes valglister i Oslo, med 
 200 informasjon om hvem som stemte hva i første DLD-votering i Stortinget, 
 201 basert på informasjon fra mine venner i  
 202 <a href="http://beta.holderdeord.no/votes/
1301946411e
">Holder de 
 203 Ord</a> samt <a href="http://data.stortinget.no/
">data.stortinget.no</a>. 
 204 Først ut er stortingslista fra Høyre for Oslo:</p> 
 206 <style type="text/css
"> 
 207 .for    {background-color:#F5A9A9;} 
 208 .mot    {background-color:#A9F5BC;} 
 213 <tr><th>#</th><th>Navn, fødselsår og valgkrets</th><th>Stemme/kommentar</th></tr> 
 215 <tr class="for
"><td>1.</td> 
 216 <td>Ine Marie Eriksen Søreide (1976), Gamle Oslo</td> 
 217 <td>Stemte for DLD</td></tr> 
 219 <tr class="mot
"><td>2.</td> 
 220 <td>Nikolai Astrup (1978), Frogner</td> 
 221 <td>Stemte mot DLD</td></tr> 
 223 <tr class="mot
"><td>3.</td> 
 224 <td>Michael Tetzschner (1954), Vestre Aker</td> 
 225 <td>Stemte mot DLD</td> 
 227 <tr class="ukjent
"><td>4.</td> 
 228 <td>Kristin Vinje (1963), Nordre Aker</td> 
 229 <td>Ikke til stede</td></tr> 
 231 <tr class="ukjent
"><td>5.</td> 
 232 <td>Mudassar Hussain Kapur (1976), Nordstrand</td> 
 233 <td>Ikke til stede</td></tr> 
 235 <tr class="ukjent
"><td>6.</td> 
 236 <td>Stefan Magnus B. Heggelund (1984), Grünerløkka</td> 
 237 <td>Ikke til stede</td></tr> 
 239 <tr class="ukjent
"><td>7.</td> 
 240 <td>Heidi Nordby Lunde (1973), Grünerløkka</td> 
 241 <td>Ikke til stede</td></tr> 
 243 <tr class="ukjent
"><td>8.</td> 
 244 <td>Frode Helgerud (1950), Frogner</td> 
 245 <td>Ikke til stede</td></tr> 
 247 <tr class="ukjent
"><td>9.</td> 
 248 <td>Afshan Rafiq (1975), Stovner</td> 
 249 <td>Ikke til stede</td></tr> 
 251 <tr class="ukjent
"><td>10.</td> 
 252 <td>Astrid Nøklebye Heiberg (1936), Frogner</td> 
 253 <td>Ikke til stede</td></tr> 
 255 <tr class="ukjent
"><td>11.</td> 
 256 <td>Camilla Strandskog (1984) St.Hanshaugen</td> 
 257 <td>Ikke til stede</td></tr> 
 259 <tr class="ukjent
"><td>12.</td> 
 260 <td>John Christian Elden (1967), Ullern</td> 
 261 <td>Ikke til stede</td></tr> 
 263 <tr class="ukjent
"><td>13.</td> 
 264 <td>Berit Solli (1972), Alna</td> 
 265 <td>Ikke til stede</td></tr> 
 267 <tr class="ukjent
"><td>14.</td> 
 268 <td>Ola Kvisgaard (1963), Frogner</td> 
 269 <td>Ikke til stede</td></tr> 
 271 <tr class="ukjent
"><td>15.</td> 
 272 <td>James Stove Lorentzen (1957), Vestre Aker</td> 
 273 <td>Ikke til stede</td></tr> 
 275 <tr class="ukjent
"><td>16.</td> 
 276 <td>Gülsüm Koc (1987), Stovner</td> 
 277 <td>Ikke til stede</td></tr> 
 279 <tr class="ukjent
"><td>17.</td> 
 280 <td>Jon Ole Whist (1976), Grünerløkka</td> 
 281 <td>Ikke til stede</td></tr> 
 283 <tr class="ukjent
"><td>18.</td> 
 284 <td>Maren Eline Malthe-Sørenssen (1971), Vestre Aker</td> 
 285 <td>Ikke til stede</td></tr> 
 287 <tr class="ukjent
"><td>19.</td> 
 288 <td>Ståle Hagen (1968), Søndre Nordstrand</td> 
 289 <td>Ikke til stede</td></tr> 
 291 <tr class="ukjent
"><td>20.</td> 
 292 <td>Kjell Omdal Erichsen (1978), Sagene</td> 
 293 <td>Ikke til stede</td></tr> 
 295 <tr class="ukjent
"><td>21.</td> 
 296 <td>Saida R. Begum (1987), Grünerløkka</td> 
 297 <td>Ikke til stede</td></tr> 
 299 <tr class="ukjent
"><td>22.</td> 
 300 <td>Torkel Brekke (1970), Nordre Aker</td> 
 301 <td>Ikke til stede</td></tr> 
 303 <tr class="ukjent
"><td>23.</td> 
 304 <td>Sverre K. Seeberg (1950), Vestre Aker</td> 
 305 <td>Ikke til stede</td></tr> 
 307 <tr class="ukjent
"><td>24.</td> 
 308 <td>Julie Margrethe Brodtkorb (1974), Ullern</td> 
 309 <td>Ikke til stede</td></tr> 
 311 <tr class="ukjent
"><td>25.</td> 
 312 <td>Fabian Stang (1955), Frogner</td> 
 313 <td>Ikke til stede</td></tr> 
 317 <p>Deretter har vi stortingslista fra Arbeiderpartiet for Oslo:</p> 
 321 <tr><th>#</th><th>Navn, fødselsår og valgkrets</th><th>Stemme/kommentar</th></tr> 
 323 <tr class="for
"><td>1.</td> 
 324 <td>Jens Stoltenberg (1959), Frogner</td> 
 325 <td>Ikke til stede i Stortinget, leder av regjeringen som fremmet forslaget</td></tr> 
 327 <tr class="for
"><td>2.</td> 
 328 <td>Hadia Tajik (1983), Grünerløkka</td> 
 329 <td>Stemte for DLD</td></tr> 
 331 <tr class="for
"><td> 3.</td> 
 332 <td>Jonas Gahr Støre (1960), Vestre Aker</td> 
 333 <td>Ikke til stede i Stortinget, medlem av regjeringen som fremmet forslaget</td></tr> 
 335 <tr class="for
"><td> 4.</td> 
 336 <td>Marianne Marthinsen (1980), Grünerløkka</td> 
 337 <td>Stemte for DLD</td></tr> 
 339 <tr class="for
"><td> 5.</td> 
 340 <td>Jan Bøhler (1952), Alna</td> 
 341 <td>Stemte for DLD</td></tr> 
 343 <tr class="for
"><td> 6.</td> 
 344 <td>Marit Nybakk (1947), Frogner</td> 
 345 <td>Stemte for DLD</td></tr> 
 347 <tr class="for
"><td> 7.</td> 
 348 <td>Truls Wickholm (1978), Sagene</td> 
 349 <td>Stemte for DLD</td></tr> 
 351 <tr class="ukjent
"><td> 8.</td> 
 352 <td>Prableen Kaur (1993), Grorud</td> 
 353 <td>Ikke til stede</td></tr> 
 355 <tr class="ukjent
"><td> 9.</td> 
 356 <td>Vegard Grøslie Wennesland (1983), St.Hanshaugen</td> 
 357 <td>Ikke til stede</td></tr> 
 359 <tr class="ukjent
"><td> 10.</td> 
 360 <td>Inger Helene Vaaten (1975), Grorud</td> 
 361 <td>Ikke til stede</td></tr> 
 363 <tr class="ukjent
"><td> 11.</td> 
 364 <td>Ivar Leveraas (1939), Alna</td> 
 365 <td>Ikke til stede</td></tr> 
 367 <tr class="ukjent
"><td> 12.</td> 
 368 <td>Grete Haugdal (1971), Gamle Oslo</td> 
 369 <td>Ikke til stede</td></tr> 
 371 <tr class="ukjent
"><td> 13.</td> 
 372 <td>Olav Tønsberg (1948), Alna</td> 
 373 <td>Ikke til stede</td></tr> 
 375 <tr class="ukjent
"><td> 14.</td> 
 376 <td>Khamshajiny Gunaratnam (1988), Grorud</td> 
 377 <td>Ikke til stede</td></tr> 
 379 <tr class="ukjent
"><td> 15.</td> 
 380 <td>Fredrik Mellem (1969), Sagene</td> 
 381 <td>Ikke til stede</td></tr> 
 383 <tr class="ukjent
"><td> 16.</td> 
 384 <td>Brit Axelsen (1945), Stovner</td> 
 385 <td>Ikke til stede</td></tr> 
 387 <tr class="ukjent
"><td> 17.</td> 
 388 <td>Dag Bayegan-Harlem (1977), Ullern</td> 
 389 <td>Ikke til stede</td></tr> 
 391 <tr class="ukjent
"><td> 18.</td> 
 392 <td>Kristin Sandaker (1963), Østeinsjø</td> 
 393 <td>Ikke til stede</td></tr> 
 395 <tr class="ukjent
"><td> 19.</td> 
 396 <td>Bashe Musse (1965), Grünerløkka</td> 
 397 <td>Ikke til stede</td></tr> 
 399 <tr class="ukjent
"><td> 20.</td> 
 400 <td>Torunn Kanutte Husvik (1983), St. Hanshaugen</td> 
 401 <td>Ikke til stede</td></tr> 
 403 <tr class="ukjent
"><td> 21.</td> 
 404 <td>Steinar Andersen (1947), Nordstrand</td> 
 405 <td>Ikke til stede</td></tr> 
 407 <tr class="ukjent
"><td> 22.</td> 
 408 <td>Anne Cathrine Berger (1972), Sagene</td> 
 409 <td>Ikke til stede</td></tr> 
 411 <tr class="ukjent
"><td> 23.</td> 
 412 <td>Khalid Mahmood (1959), Østensjø</td> 
 413 <td>Ikke til stede</td></tr> 
 415 <tr class="ukjent
"><td> 24.</td> 
 416 <td>Munir Jaber (1990), Alna</td> 
 417 <td>Ikke til stede</td></tr> 
 419 <tr class="ukjent
"><td> 25.</td> 
 420 <td>Libe Solberg Rieber-Mohn (1965), Frogner</td> 
 421 <td>Ikke til stede</td></tr> 
 425 <p>Hvilket parti får så min stemme i år.  Jeg tror det blir 
 426 <a href="http://piratpartiet.no/
">Piratpartiet</a>.  Hvis de kan bidra 
 427 til at det kommer noen inn på Stortinget med teknisk peiling, så får 
 428 kanskje ikke overvåkningsgalskapen like fritt spillerom som det har 
 435         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/norsk
">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/personvern
">personvern</a>, <a href="http://people.skolelinux.org/pere/blog/tags/stortinget
">stortinget</a>, <a href="http://people.skolelinux.org/pere/blog/tags/surveillance
">surveillance</a>, <a href="http://people.skolelinux.org/pere/blog/tags/valg
">valg</a>.  
 440     <div class="padding
"></div> 
 443       <div class="title
"><a href="http://people.skolelinux.org/pere/blog/Second_beta_release__beta_1__of_Debian_Edu_Skolelinux_based_on_Debian_Wheezy.html
">Second beta release (beta 1) of Debian Edu/Skolelinux based on Debian Wheezy</a></div> 
 444       <div class="date
">22nd August 2013</div> 
 445       <div class="body
"><p>The second wheezy based beta release of Debian Edu was wrapped up 
 446 today, slightly delayed because of some bugs in the initial Windows 
 447 integration fixes .  This is the release announcement:</p> 
 449 <p><strong>New features for Debian Edu 7.1+edu0~b1 released 2013-08-22</strong></p> 
 451 <p>These are the release notes for Debian Edu / Skolelinux 
 452 7.1+edu0~b1, based on Debian with codename "Wheezy".
</p> 
 454 <p><strong>About Debian Edu and Skolelinux
</strong></p> 
 456 <p><a href=
"http://www.skolelinux.org/">Debian Edu, also known as
 
 457 Skolelinux
</a>, is a Linux distribution based on Debian providing an
 
 458 out-of-the box environment of a completely configured school
 
 459 network. Immediately after installation a school server running all
 
 460 services needed for a school network is set up just waiting for users
 
 461 and machines being added via GOsa², a comfortable Web-UI. A netbooting
 
 462 environment is prepared using PXE, so after initial installation of
 
 463 the main server from CD or USB stick all other machines can be
 
 464 installed via the network. The provided school server provides LDAP
 
 465 database and Kerberos authentication service, centralized home
 
 466 directories, DHCP server, web proxy and many other services. The
 
 468 <a href=
"http://people.skolelinux.org/pere/blog/Educational_applications_included_in_Debian_Edu___Skolelinux__the_screenshot_collection____.html">more
 
 469 than 
60 educational software packages
</a> and more are available from
 
 470 the Debian archive, and schools can choose between KDE, Gnome, LXDE
 
 471 and Xfce desktop environment.
</p> 
 473 <p>This is the sixth test release based on Debian Wheezy. Basically this
 
 474 is an updated and slightly improved version compared to the Squeeze
 
 477 <p>ALERT: Alpha based installations should reinstall or downgrade the
 
 478 versions of gosa and libpam-mklocaluser to the ones used in this beta
 
 479 release. Both alpha and beta0 based installations should reinstall or
 
 480 deal with gosa.conf manually; there are two options: (
1) Keep
 
 481 gosa.conf and edit this file as outlined
 
 482 <a href=
"http://lists.debian.org/debian-edu/2013/08/msg00127.html">on
 
 483 the mailing list
</a>. (
2) Accept the new version of gosa.conf and
 
 484 replace both contained admin password placeholders with the password
 
 485 hashes found in the old one (backup copy!). In both cases every user
 
 486 need to change their their password to make sure a password is set for
 
 487 CIFS access to their home directory.
</p> 
 489 <p><strong>Software updates
</strong></p> 
 493 <li>Added ssh askpass packages to default installation, to ensure ssh
 
 494     work also without a attached tty.
</li> 
 495 <li>Add the command-not-found package to the default installation to
 
 496     make it easier to figure out where to find missing command line
 
 497     tools. Please note, that the command 'update-command-not-found'
 
 498     has to be run as root to actually make it useful (internet access
 
 503 <p><strong>Other changes
</strong></p> 
 507 <li>Adjusted the USB stick ISO image build to include every tool
 
 508 needed for desktop=xfce installations.
</li> 
 509 <li>Adjust thin-client-server task to work when installing from USB
 
 510 stick ISO image.
</li> 
 511 <li>Made new grub artwork (changed png from indexed to RGB format).
</li> 
 512 <li>Minor cleanup in the CUPS setup.
</li> 
 513 <li>Make sure that bootstrapping of the Samba domain really happens
 
 514     during installation of the main server and adjust SID handling to
 
 516 <li>Make Samba passwords changeable (again) via GOsa².
</li> 
 517 <li>Fix generation of LM and NT password hashes via GOsa² to avoid
 
 518     empty password hashes.
</li> 
 519 <li>Adapted Samba machine domain joining to latest change in the
 
 520     smbldap-tools Perl package, fixing bugs blocking Windows machines
 
 521     from joining the Samba domain.
</li> 
 525 <p><strong>Known issues
</strong></p> 
 529 <li>KDE fails to understand the wpad.dat file provided, causing it to
 
 530     not use the http proxy as it should.
</li> 
 531 <li>Chromium also fails to use the proxy when using the KDE desktop
 
 532     (using the KDE configuration).
</li> 
 536 <p><strong>Where to get it
</strong></p> 
 538 <p>To download the multiarch netinstall CD release you can use
</p> 
 542 <li><a href=
"ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b1-CD.iso">ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-
7.1+edu0~b1-CD.iso
</a></li> 
 544 <li><a href=
"http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b1-CD.iso">http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-
7.1+edu0~b1-CD.iso
</a></li> 
 546 <li>rsync -avzP ftp.skolelinux.org::skolelinux-cd/wheezy/debian-edu-
7.1+edu0~b1-CD.iso .
</li> 
 550 <p>The MD5SUM of this image is: 
1e357f80b55e703523f2254adde6d78b
 
 551 <br>The SHA1SUM of this image is: 
7157f9be5fd27c7694d713c6ecfed61c3edda3b2
</p> 
 553 <p>To download the multiarch USB stick ISO release you can use
</p> 
 557 <li><a href=
"ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b1-USB.iso">ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-
7.1+edu0~b1-USB.iso
</a></li> 
 558 <li><a href=
"http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b1-USB.iso">http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-
7.1+edu0~b1-USB.iso
</a></li> 
 559 <li>rsync -avzP ftp.skolelinux.org::skolelinux-cd/wheezy/debian-edu-
7.1+edu0~b1-USB.iso .
</li> 
 563 <p>The MD5SUM of this image is: 
7a8408ead59cf7e3cef25afb6e91590b
 
 564 <br>The SHA1SUM of this image is: f1817c031f02790d5edb3bfa0dcf8451088ad119
</p> 
 567 <p><strong>How to report bugs
</strong></p> 
 569 <p><a href=
"http://wiki.debian.org/DebianEdu/HowTo/ReportBugs">http://wiki.debian.org/DebianEdu/HowTo/ReportBugs
</a> 
 574         Tags: 
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>, 
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>. 
 
 579     <div class=
"padding"></div> 
 582       <div class=
"title"><a href=
"http://people.skolelinux.org/pere/blog/Intel_180_SSD_disk_with_Lenovo_firmware_can_not_use_Intel_firmware.html">Intel 
180 SSD disk with Lenovo firmware can not use Intel firmware
</a></div> 
 583       <div class=
"date">18th August 
2013</div> 
 584       <div class=
"body"><p>Earlier, I reported about
 
 585 <a href=
"http://people.skolelinux.org/pere/blog/How_to_fix_a_Thinkpad_X230_with_a_broken_180_GB_SSD_disk.html">my
 
 586 problems using an Intel SSD 
520 Series 
180 GB disk
</a>.  Friday I was
 
 587 told by IBM that the original disk should be thrown away.  And as
 
 588 there no longer was a problem if I bricked the firmware, I decided
 
 589 today to try to install Intel firmware to replace the Lenovo firmware
 
 590 currently on the disk.
</p> 
 592 <p>I searched the Intel site for firmware, and found
 
 593 <a href=
"https://downloadcenter.intel.com/Detail_Desc.aspx?agr=Y&ProdId=3472&DwnldID=18363&ProductFamily=Solid-State+Drives+and+Caching&ProductLine=Intel%c2%ae+High+Performance+Solid-State+Drive&ProductProduct=Intel%c2%ae+SSD+520+Series+(180GB%2c+2.5in+SATA+6Gb%2fs%2c+25nm%2c+MLC)&lang=eng">issdfut_2.0
.4.iso
</a> 
 594 (aka Intel SATA Solid-State Drive Firmware Update Tool) which
 
 595 according to the site should contain the latest firmware for SSD
 
 596 disks.  I inserted the broken disk in one of my spare laptops and
 
 597 booted the ISO from a USB stick.  The disk was recognized, but the
 
 598 program claimed the newest firmware already were installed and refused
 
 599 to insert any Intel firmware.  So no change, and the disk is still
 
 600 unable to handle write load. :( I guess the only way to get them
 
 601 working would be if Lenovo releases new firmware.  No idea how likely
 
 602 that is.  Anyway, just blogging about this test for completeness.  I
 
 603 got a working Samsung disk, and see no point in spending more time on
 
 604 the broken disks.
</p> 
 609         Tags: 
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>, 
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>. 
 
 614     <div class=
"padding"></div> 
 617       <div class=
"title"><a href=
"http://people.skolelinux.org/pere/blog/90_percent_done_with_the_Norwegian_draft_translation_of_Free_Culture.html">90 percent done with the Norwegian draft translation of Free Culture
</a></div> 
 618       <div class=
"date"> 2nd August 
2013</div> 
 619       <div class=
"body"><p>It has been a while since my last update.  Since last summer, I
 
 620 have worked on a Norwegian
 
 621 <a href=
"http://www.docbook.org/">docbook
</a> version of the 
2004 book
 
 622 <a href=
"http://free-culture.cc/">Free Culture
</a> by Lawrence Lessig,
 
 623 to get a Norwegian text explaining the problems with the copyright
 
 624 law.  Yesterday, I finally broken the 
90% mark, when counting the
 
 625 number of strings to translate.  Due to real life constraints, I have
 
 626 not had time to work on it since March, but when the summer broke out,
 
 627 I found time to work on it again.  Still lots of work left, but the
 
 628 first draft is nearing completion.  I created a graph to show the
 
 629 progress of the translation:
</p> 
 631 <p><img width=
"80%" align=
"center" src=
"https://github.com/petterreinholdtsen/free-culture-lessig/raw/master/progress.png"></p> 
 633 <p>When the first draft is done, the translated text need to be
 
 634 proof read, and the remaining formatting problems with images and SVG
 
 635 drawings need to be fixed.  There are probably also some index entries
 
 636 missing that need to be added.  This can be done by comparing the
 
 637 index entries listed in the SiSU version of the book, or comparing the
 
 638 English docbook version with the paper version.  Last, the colophon
 
 639 page with ISBN numbers etc need to be wrapped up before the release is
 
 640 done.  I should also figure out how to get correct Norwegian sorting
 
 641 of the index pages.  All docbook tools I have tried so far (xmlto,
 
 642 docbook-xsl, dblatex) get the order of symbols and the special
 
 643 Norwegian letters ÆØÅ wrong.
</p> 
 645 <p>There is still need for translators and people with docbook
 
 646 knowledge, to be able to get a good looking book (I still struggle
 
 647 with dblatex, xmlto and docbook-xsl) as well as to do the draft
 
 648 translation and proof reading.  And I would like the figures to be
 
 649 redrawn as SVGs to make it easy to translate them.  Any SVG master
 
 650 around?  There are also some legal terms that are unfamiliar to me.
 
 651 If you want to help, please get in touch with me, and check out the
 
 652 project files currently available from
 
 653 <a href=
"https://github.com/petterreinholdtsen/free-culture-lessig">github
</a>.
</p> 
 655 <p>If you are curious what the translated book currently look like,
 
 657 <a href=
"https://github.com/petterreinholdtsen/free-culture-lessig/blob/master/archive/freeculture.nb.pdf?raw=true">PDF
</a> 
 659 <a href=
"https://github.com/petterreinholdtsen/free-culture-lessig/blob/master/archive/freeculture.nb.epub?raw=true">EPUB
</a> 
 660 are published on github.  The HTML version is published as well, but
 
 661 github hand it out with MIME type text/plain, confusing browsers, so I
 
 662 saw no point in linking to that version.
</p> 
 667         Tags: 
<a href=
"http://people.skolelinux.org/pere/blog/tags/docbook">docbook
</a>, 
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>, 
<a href=
"http://people.skolelinux.org/pere/blog/tags/freeculture">freeculture
</a>. 
 
 672     <div class=
"padding"></div> 
 675       <div class=
"title"><a href=
"http://people.skolelinux.org/pere/blog/First_beta_release_of_Debian_Edu_Skolelinux_based_on_Debian_Wheezy.html">First beta release of Debian Edu/Skolelinux based on Debian Wheezy
</a></div> 
 676       <div class=
"date">27th July 
2013</div> 
 677       <div class=
"body"><p>The first wheezy based beta release of Debian Edu was wrapped up
 
 678 today.  This is the release announcement:
</p> 
 680 <p><strong>New features for Debian Edu 
7.1+edu0~b0 released
 
 681 2013-
07-
27</strong></p> 
 683 <p>These are the release notes for for Debian Edu / Skolelinux
 
 684 7.1+edu0~b0, based on Debian with codename "Wheezy".
</p> 
 686 <p><strong>About Debian Edu and Skolelinux
</strong></p> 
 688 <p><a href=
"http://www.skolelinux.org/">Debian Edu, also known as
 
 689 Skolelinux
</a>, is a Linux distribution based on Debian providing an
 
 690 out-of-the box environment of a completely configured school
 
 691 network. Immediately after installation a school server running all
 
 692 services needed for a school network is set up just waiting for users
 
 693 and machines being added via GOsa², a comfortable Web-UI. A netbooting
 
 694 environment is prepared using PXE, so after initial installation of
 
 695 the main server from CD, DVD or USB stick all other machines can be
 
 696 installed via the network. The provided school server provides LDAP
 
 697 database and Kerberos authentication service, centralized home
 
 698 directories, DHCP server, web proxy and many other services. The
 
 700 <a href=
"http://people.skolelinux.org/pere/blog/Educational_applications_included_in_Debian_Edu___Skolelinux__the_screenshot_collection____.html">more
 
 701 than 
60 educational software packages
</a> and more are available from
 
 702 the Debian archive, and schools can choose between KDE, Gnome, LXDE
 
 703 and Xfce desktop environment.
</p> 
 705 <p>This is the fifth test release based on Debian Wheezy. Basically
 
 706 this is an updated and slightly improved version compared to the
 
 709 <p>ALERT: Alpha based installations should reinstall or downgrade the
 
 710 versions of gosa and libpam-mklocaluser to the ones used in this beta
 
 713 <p><strong>Software updates
</strong></p> 
 717 <li>Switched roaming workstation profiles from wicd to network-manager
 
 718    for network configuration, as wicd didn't work any more.
</li> 
 719 <li>Changed version numbers of patched gosa and libpam-mklocaluser
 
 720    packages to make sure our locally patched versions will be replaced
 
 721    by the official packages when they are released from Debian. Those
 
 722    installing alpha version need to reinstall or manually downgrade gosa
 
 723    and libpam-mklocaluser.
</li> 
 724 <li>Added bluetooth tools to the default desktop (bluedevil, blueman).
</li> 
 725 <li>Added tools for sharing the desktop on KDE (krdc, krfb).
</li> 
 726 <li>Added valgrind to the default installation for easier debugging of
 
 731 <p><strong>Other changes
</strong></p> 
 735 <li>Fixed artwork package to work with gnome, no longer break
 
 736    desktop=gnome installations.
</li> 
 737 <li>Adjusted installer to now work when forced to use a proxy with the
 
 739 <li>Fixed code detecting and setting/loading hardware specific
 
 740    setup/firmware to work more robust out of the box.
</li> 
 741 <li>Adjusted Kerberos setup to detect realm and server settings at
 
 742    install time instead of dynamically at run time. This avoid a crash
 
 743    with krb5-auth-dialog on diskless workstations without a DNS name.
</li> 
 744 <li>Worked around misfeature in network-manager not calling the dhclient
 
 745    exit hooks, causing automatic proxy configuration and automatic host
 
 746    name setting at run time to work again.
</li> 
 747 <li>Fixed feature setting the default Iceweasel start page from URL
 
 748    fetched from LDAP, to allow schools to set the global default by
 
 749    updating the dc=skole,dc=skolelinux,dc=no LDAP object.
</li> 
 750 <li>Changed default host name on all networked machines to be unique
 
 751    (generated from MAC or reverse DNS) after boot.
</li> 
 752 <li>Adjusted partition sizes to make sure they are big enough.
</li> 
 756 <p><strong>Known issues
</strong></p> 
 760 <li>Grub is missing the new artwork.
</li> 
 761 <li>KDE fail to understand the wpad.dat file provided, causing it to
 
 762     not use the http proxy as it should.
</li> 
 763 <li>Chromium also fail to use the proxy.
</li> 
 767 <p><strong>Where to get it
</strong></p> 
 769 <p>To download the multiarch netinstall CD release you can use
</p> 
 773 <li><a href=
"ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b0-CD.iso">ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-
7.1+edu0~b0-CD.iso
</a></li> 
 775 <li><a href=
"http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b0-CD.iso">http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-
7.1+edu0~b0-CD.iso
</a></li> 
 777 <li>rsync -avzP ftp.skolelinux.org::skolelinux-cd/wheezy/debian-edu-
7.1+edu0~b0-CD.iso .
</li> 
 781 <p>The MD5SUM of this image is: 
55d5de9765b6dccd5d9ec33cf1a07109
 
 782 <br>The SHA1SUM of this image is: 
996a1d9517740e4d627d100de2d12b23dd545a3f
</p> 
 784 <p>To download the multiarch USB stick ISO release you can use
</p> 
 788 <li><a href=
"ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b0-USB.iso">ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-
7.1+edu0~b0-USB.iso
</a></li> 
 789 <li><a href=
"http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b0-USB.iso">http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-
7.1+edu0~b0-USB.iso
</a></li> 
 790 <li>rsync -avzP ftp.skolelinux.org::skolelinux-cd/wheezy/debian-edu-
7.1+edu0~b0-USB.iso .
</li> 
 794 <p>The MD5SUM of this image is: d8f0818c51a78d357de794066f289f69
 
 795 <br>The SHA1SUM of this image is: 
49185ca354e8d0543240423746924f76a6cee733
</p> 
 798 <p><strong>How to report bugs
</strong></p> 
 800 <p><a href=
"http://wiki.debian.org/DebianEdu/HowTo/ReportBugs">http://wiki.debian.org/DebianEdu/HowTo/ReportBugs
</a> 
 805         Tags: 
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>, 
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>. 
 
 810     <div class=
"padding"></div> 
 813       <div class=
"title"><a href=
"http://people.skolelinux.org/pere/blog/How_to_fix_a_Thinkpad_X230_with_a_broken_180_GB_SSD_disk.html">How to fix a Thinkpad X230 with a broken 
180 GB SSD disk
</a></div> 
 814       <div class=
"date">17th July 
2013</div> 
 815       <div class=
"body"><p>Today I switched to
 
 816 <a href=
"http://people.skolelinux.org/pere/blog/The_Thinkpad_is_dead__long_live_the_Thinkpad_X230_.html">my
 
 817 new laptop
</a>.  I've previously written about the problems I had with
 
 818 my new Thinkpad X230, which was delivered with an
 
 819 <a href=
"http://people.skolelinux.org/pere/blog/Intel_SSD_520_Series_180_GB_with_Lenovo_firmware_still_lock_up_from_sustained_writes.html">180 
 820 GB Intel SSD disk with Lenovo firmware
</a> that did not handle
 
 821 sustained writes.  My hardware supplier have been very forthcoming in
 
 822 trying to find a solution, and after first trying with another
 
 823 identical 
180 GB disks they decided to send me a 
256 GB Samsung SSD
 
 824 disk instead to fix it once and for all.  The Samsung disk survived
 
 825 the installation of Debian with encrypted disks (filling the disk with
 
 826 random data during installation killed the first two), and I thus
 
 827 decided to trust it with my data.  I have installed it as a Debian Edu
 
 828 Wheezy roaming workstation hooked up with my Debian Edu Squeeze main
 
 829 server at home using Kerberos and LDAP, and will use it as my work
 
 830 station from now on.
</p> 
 832 <p>As this is a solid state disk with no moving parts, I believe the
 
 833 Debian Wheezy default installation need to be tuned a bit to increase
 
 834 performance and increase life time of the disk.  The Linux kernel and
 
 835 user space applications do not yet adjust automatically to such
 
 836 environment.  To make it easier for my self, I created a draft Debian
 
 837 package 
<tt>ssd-setup
</tt> to handle this tuning.  The
 
 838 <a href=
"http://anonscm.debian.org/gitweb/?p=collab-maint/ssd-setup.git">source
 
 839 for the ssd-setup package
</a> is available from collab-maint, and it
 
 840 is set up to adjust the setup of the machine by just installing the
 
 841 package.  If there is any non-SSD disk in the machine, the package
 
 842 will refuse to install, as I did not try to write any logic to sort
 
 843 file systems in SSD and non-SSD file systems.
</p> 
 845 <p>I consider the package a draft, as I am a bit unsure how to best
 
 846 set up Debian Wheezy with an SSD.  It is adjusted to my use case,
 
 847 where I set up the machine with one large encrypted partition (in
 
 848 addition to /boot), put LVM on top of this and set up partitions on
 
 849 top of this again.  See the README file in the package source for the
 
 850 references I used to pick the settings.  At the moment these
 
 851 parameters are tuned:
</p> 
 855 <li>Set up cryptsetup to pass TRIM commands to the physical disk
 
 856     (adding discard to /etc/crypttab)
</li> 
 858 <li>Set up LVM to pass on TRIM commands to the underlying device (in
 
 859     this case a cryptsetup partition) by changing issue_discards from
 
 860     0 to 
1 in /etc/lvm/lvm.conf.
</li> 
 862 <li>Set relatime as a file system option for ext3 and ext4 file
 
 865 <li>Tell swap to use TRIM commands by adding 'discard' to
 
 868 <li>Change I/O scheduler from cfq to deadline using a udev rule.
</li> 
 870 <li>Run fstrim on every ext3 and ext4 file system every night (from
 
 873 <li>Adjust sysctl values vm.swappiness to 
1 and vm.vfs_cache_pressure
 
 874     to 
50 to reduce the kernel eagerness to swap out processes.
</li> 
 878 <p>During installation, I cancelled the part where the installer fill
 
 879 the disk with random data, as this would kill the SSD performance for
 
 880 little gain.  My goal with the encrypted file system is to ensure
 
 881 those stealing my laptop end up with a brick and not a working
 
 882 computer.  I have no hope in keeping the really resourceful people
 
 883 from getting the data on the disk (see
 
 884 <a href=
"http://xkcd.com/538/">XKCD #
538</a> for an explanation why).
 
 885 Thus I concluded that adding the discard option to crypttab is the
 
 886 right thing to do.
</p> 
 888 <p>I considered using the noop I/O scheduler, as several recommended
 
 889 it for SSD, but others recommended deadline and a benchmark I found
 
 890 indicated that deadline might be better for interactive use.
</p> 
 892 <p>I also considered using the 'discard' file system option for ext3
 
 893 and ext4, but read that it would give a performance hit ever time a
 
 894 file is removed, and thought it best to that that slowdown once a day
 
 895 instead of during my work.
</p> 
 897 <p>My package do not set up tmpfs on /var/run, /var/lock and /tmp, as
 
 898 this is already done by Debian Edu.
</p> 
 900 <p>I have not yet started on the user space tuning.  I expect
 
 901 iceweasel need some tuning, and perhaps other applications too, but
 
 902 have not yet had time to investigate those parts.
</p> 
 904 <p>The package should work on Ubuntu too, but I have not yet tested it
 
 907 <p>As for the answer to the question in the title of this blog post,
 
 908 as far as I know, the only solution I know about is to replace the
 
 909 disk.  It might be possible to flash it with Intel firmware instead of
 
 910 the Lenovo firmware.  But I have not tried and did not want to do so
 
 911 without approval from Lenovo as I wanted to keep the warranty on the
 
 912 disk until a solution was found and they wanted the broken disks
 
 918         Tags: 
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>, 
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>. 
 
 923     <div class=
"padding"></div> 
 926       <div class=
"title"><a href=
"http://people.skolelinux.org/pere/blog/Intel_SSD_520_Series_180_GB_with_Lenovo_firmware_still_lock_up_from_sustained_writes.html">Intel SSD 
520 Series 
180 GB with Lenovo firmware still lock up from sustained writes
</a></div> 
 927       <div class=
"date">10th July 
2013</div> 
 928       <div class=
"body"><p>A few days ago, I wrote about
 
 929 <a href=
"http://people.skolelinux.org/pere/blog/The_Thinkpad_is_dead__long_live_the_Thinkpad_X230_.html">the
 
 930 problems I experienced with my new X230 and its SSD disk
</a>, which
 
 931 was dying during installation because it is unable to cope with
 
 932 sustained write.  My supplier is in contact with
 
 933 <a href=
"http://www.lenovo.com/">Lenovo
</a>, and they wanted to send a
 
 934 replacement disk to try to fix the problem.  They decided to send an
 
 935 identical model, so my hopes for a permanent fix was slim.
</p> 
 937 <p>Anyway, today I got the replacement disk and tried to install
 
 938 Debian Edu Wheezy with encrypted disk on it.  The new disk have the
 
 939 same firmware version as the original.  This time my hope raised
 
 940 slightly as the installation progressed, as the original disk used to
 
 941 die after 
4-
7% of the disk was written to, while this time it kept
 
 942 going past 
10%, 
20%, 
40% and even past 
50%.  But around 
60%, the disk
 
 943 died again and I was back on square one.  I still do not have a new
 
 944 laptop with a disk I can trust.  I can not live with a disk that might
 
 945 lock up when I download a new
 
 946 <a href=
"http://www.skolelinux.org/">Debian Edu / Skolelinux
</a> ISO or
 
 947 other large files.  I look forward to hearing from my supplier with
 
 948 the next proposal from Lenovo.
</p> 
 950 <p>The original disk is marked Intel SSD 
520 Series 
180 GB,
 
 951 11S0C38722Z1ZNME35X1TR, ISN: CVCV321407HB180EGN, SA: G57560302, FW:
 
 952 LF1i, 
29MAY2013, PBA: G39779-
300, LBA 
351,
651,
888, LI P/N: 
0C38722,
 
 953 Pb-free 
2LI, LC P/N: 
16-
200366, WWN: 
55CD2E40002756C4, Model:
 
 954 SSDSC2BW180A3L 
2.5" 
6Gb/s SATA SSD 
180G 
5V 
1A, ASM P/N 
0C38732, FRU
 
 955 P/N 
45N8295, P0C38732.
</p> 
 957 <p>The replacement disk is marked Intel SSD 
520 Series 
180 GB,
 
 958 11S0C38722Z1ZNDE34N0L0, ISN: CVCV315306RK180EGN, SA: G57560-
302, FW:
 
 959 LF1i, 
22APR2013, PBA: G39779-
300, LBA 
351,
651,
888, LI P/N: 
0C38722,
 
 960 Pb-free 
2LI, LC P/N: 
16-
200366, WWN: 
55CD2E40000AB69E, Model:
 
 961 SSDSC2BW180A3L 
2.5" 
6Gb/s SATA SSD 
180G 
5V 
1A, ASM P/N 
0C38732, FRU
 
 962 P/N 
45N8295, P0C38732.
</p> 
 964 <p>The only difference is in the first number (serial number?), ISN,
 
 965 SA, date and WNPP values.  Mentioning all the details here in case
 
 966 someone is able to use the information to find a way to identify the
 
 967 failing disk among working ones (if any such working disk actually
 
 973         Tags: 
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>, 
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>. 
 
 978     <div class=
"padding"></div> 
 981       <div class=
"title"><a href=
"http://people.skolelinux.org/pere/blog/July_13th__Debian_Ubuntu_BSP_and_Skolelinux_Debian_Edu_developer_gathering_in_Oslo.html">July 
13th: Debian/Ubuntu BSP and Skolelinux/Debian Edu developer gathering in Oslo
</a></div> 
 982       <div class=
"date"> 9th July 
2013</div> 
 983       <div class=
"body"><p>The upcoming Saturday, 
2013-
07-
13, we are organising a combined
 
 984 Debian Edu developer gathering and Debian and Ubuntu bug squashing
 
 985 party in Oslo.  It is organised by 
<a href=
"http://www.nuug.no/">the
 
 986 member assosiation NUUG
</a> and
 
 987 <a href=
"http://www.skolelinux.org/">the Debian Edu / Skolelinux
 
 988 project
</a> together with 
<a href=
"http://bitraf.no/">the hack space
 
 991 <p>It starts 
10:
00 and continue until late evening.  Everyone is
 
 992 welcome, and there is no fee to participate.  There is on the other
 
 993 hand limited space, and only room for 
30 people.  Please put your name
 
 994 on 
<a href=
"http://wiki.debian.org/BSP/2013/07/13/no/Oslo">the event
 
 995 wiki page
</a> if you plan to join us.
</p> 
1000         Tags: 
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>, 
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>, 
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>, 
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>. 
 
1005     <div class=
"padding"></div> 
1008       <div class=
"title"><a href=
"http://people.skolelinux.org/pere/blog/The_Thinkpad_is_dead__long_live_the_Thinkpad_X230_.html">The Thinkpad is dead, long live the Thinkpad X230?
</a></div> 
1009       <div class=
"date"> 5th July 
2013</div> 
1010       <div class=
"body"><p>Half a year ago, I reported that I had to find a
 
1011 <a href=
"http://people.skolelinux.org/pere/blog/Thank_you_Thinkpad_X41__for_your_long_and_trustworthy_service.html">replacement
 
1012 for my trusty old Thinkpad X41
</a>.  Unfortunately I did not have much
 
1013 time to spend on it, and it took a while to find a model I believe
 
1014 will do the job, but two days ago the replacement finally arrived.  I
 
1016 <a href=
"http://www.linlap.com/lenovo_thinkpad_x230">Thinkpad X230
</a> 
1017 with SSD disk (NZDAJMN).  I first test installed Debian Edu Wheezy as
 
1018 a roaming workstation, and it seemed to work flawlessly.  But my
 
1019 second installation with encrypted disk was not as successful.  More
 
1022 <p>I had a hard time trying to track down a good laptop, as my most
 
1023 important requirements (robust and with a good keyboard) are never
 
1024 listed in the feature list.  But I did get good help from the search
 
1025 feature at 
<a href=
"http://www.prisjakt.no/">Prisjakt
</a>, which
 
1026 allowed me to limit the list of interesting laptops based on my other
 
1027 requirements.  A bit surprising that SSD disk are not disks according
 
1028 to that search interface, so I had to drop specifying the number of
 
1029 disks from my search parameters.  I also asked around among friends to
 
1030 get their impression on keyboards and robustness.
</p> 
1032 <p>So the new laptop arrived, and it is quite a lot wider than the
 
1033 X41.  I am not quite convinced about the keyboard, as it is
 
1034 significantly wider than my old keyboard, and I have to stretch my
 
1035 hand a lot more to reach the edges.  But the key response is fairly
 
1036 good and the individual key shape is fairly easy to handle, so I hope
 
1037 I will get used to it.  My old X40 was starting to fail, and I really
 
1038 needed a new laptop now. :)
</p> 
1040 <p>Turning off the touch pad was simple.  All it took was a quick
 
1041 visit to the BIOS during boot it disable it.
</p> 
1043 <p>But there is a fatal problem with the laptop.  The 
180 GB SSD disk
 
1044 lock up during load.  And this happen when installing Debian Wheezy
 
1045 with encrypted disk, while the disk is being filled with random data.
 
1046 I also tested to install Ubuntu Raring, and it happen there too if I
 
1047 reenable the code to fill the disk with random data (it is disabled by
 
1048 default in Ubuntu).  And the bug with is already known.  It was
 
1049 reported to Debian as 
<a href=
"http://bugs.debian.org/691427">BTS
 
1050 report #
691427 2012-
10-
25</a> (journal commit I/O error on brand-new
 
1051 Thinkpad T430s ext4 on lvm on SSD).  It is also reported to the Linux
 
1052 kernel developers as
 
1053 <a href=
"https://bugzilla.kernel.org/show_bug.cgi?id=51861">Kernel bugzilla
 
1054 report #
51861 2012-
12-
20</a> (Intel SSD 
520 stops working under load
 
1055 (SSDSC2BW180A3L in Lenovo ThinkPad T430s)). It is also reported on the
 
1056 Lenovo forums, both for
 
1057 <a href=
"http://forums.lenovo.com/t5/T400-T500-and-newer-T-series/T430s-Intel-SSD-520-180GB-issue/m-p/1070549">T430
 
1058 2012-
11-
10</a> and for
 
1059 <a href=
"http://forums.lenovo.com/t5/X-Series-ThinkPad-Laptops/x230-SATA-errors-with-180GB-Intel-520-SSD-under-heavy-write-load/m-p/1068147">X230
 
1060 03-
20-
2013</a>.  The problem do not only affect installation.  The
 
1061 reports state that the disk lock up during use if many writes are done
 
1062 on the disk, so it is much no use to work around the installation
 
1063 problem and end up with a computer that can lock up at any moment.
 
1065 <a href=
"https://git.efficios.com/?p=test-ssd.git">small C program
 
1066 available
</a> that will lock up the hard drive after running a few
 
1067 minutes by writing to a file.
</p> 
1069 <p>I've contacted my supplier and asked how to handle this, and after
 
1070 contacting PCHELP Norway (request 
01D1FDP) which handle support
 
1071 requests for Lenovo, his first suggestion was to upgrade the disk
 
1072 firmware.  Unfortunately there is no newer firmware available from
 
1073 Lenovo, as my disk already have the most recent one (version LF1i).  I
 
1074 hope to hear more from him today and hope the problem can be
 
1080         Tags: 
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>, 
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>. 
 
1085     <div class=
"padding"></div> 
1087     <p style=
"text-align: right;"><a href=
"index.rss"><img src=
"http://people.skolelinux.org/pere/blog/xml.gif" alt=
"RSS feed" width=
"36" height=
"14" /></a></p> 
1098 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2013/01/">January (
11)
</a></li> 
1100 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2013/02/">February (
9)
</a></li> 
1102 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2013/03/">March (
9)
</a></li> 
1104 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2013/04/">April (
6)
</a></li> 
1106 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2013/05/">May (
9)
</a></li> 
1108 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2013/06/">June (
10)
</a></li> 
1110 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2013/07/">July (
7)
</a></li> 
1112 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2013/08/">August (
3)
</a></li> 
1114 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2013/09/">September (
2)
</a></li> 
1121 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/01/">January (
7)
</a></li> 
1123 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/02/">February (
10)
</a></li> 
1125 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/03/">March (
17)
</a></li> 
1127 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/04/">April (
12)
</a></li> 
1129 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/05/">May (
12)
</a></li> 
1131 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/06/">June (
20)
</a></li> 
1133 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/07/">July (
17)
</a></li> 
1135 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/08/">August (
6)
</a></li> 
1137 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/09/">September (
9)
</a></li> 
1139 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/10/">October (
17)
</a></li> 
1141 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/11/">November (
10)
</a></li> 
1143 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2012/12/">December (
7)
</a></li> 
1150 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/01/">January (
16)
</a></li> 
1152 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/02/">February (
6)
</a></li> 
1154 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/03/">March (
6)
</a></li> 
1156 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/04/">April (
7)
</a></li> 
1158 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/05/">May (
3)
</a></li> 
1160 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/06/">June (
2)
</a></li> 
1162 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/07/">July (
7)
</a></li> 
1164 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/08/">August (
6)
</a></li> 
1166 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/09/">September (
4)
</a></li> 
1168 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/10/">October (
2)
</a></li> 
1170 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/11/">November (
3)
</a></li> 
1172 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2011/12/">December (
1)
</a></li> 
1179 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/01/">January (
2)
</a></li> 
1181 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/02/">February (
1)
</a></li> 
1183 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/03/">March (
3)
</a></li> 
1185 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/04/">April (
3)
</a></li> 
1187 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/05/">May (
9)
</a></li> 
1189 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/06/">June (
14)
</a></li> 
1191 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/07/">July (
12)
</a></li> 
1193 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/08/">August (
13)
</a></li> 
1195 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/09/">September (
7)
</a></li> 
1197 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/10/">October (
9)
</a></li> 
1199 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/11/">November (
13)
</a></li> 
1201 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/12/">December (
12)
</a></li> 
1208 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/01/">January (
8)
</a></li> 
1210 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/02/">February (
8)
</a></li> 
1212 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/03/">March (
12)
</a></li> 
1214 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/04/">April (
10)
</a></li> 
1216 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/05/">May (
9)
</a></li> 
1218 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/06/">June (
3)
</a></li> 
1220 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/07/">July (
4)
</a></li> 
1222 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/08/">August (
3)
</a></li> 
1224 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/09/">September (
1)
</a></li> 
1226 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/10/">October (
2)
</a></li> 
1228 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/11/">November (
3)
</a></li> 
1230 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/12/">December (
3)
</a></li> 
1237 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2008/11/">November (
5)
</a></li> 
1239 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2008/12/">December (
7)
</a></li> 
1250  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer (
13)
</a></li> 
1252  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/amiga">amiga (
1)
</a></li> 
1254  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/aros">aros (
1)
</a></li> 
1256  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/bankid">bankid (
4)
</a></li> 
1258  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/bitcoin">bitcoin (
7)
</a></li> 
1260  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem (
12)
</a></li> 
1262  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/bsa">bsa (
2)
</a></li> 
1264  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian (
85)
</a></li> 
1266  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (
139)
</a></li> 
1268  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/digistan">digistan (
10)
</a></li> 
1270  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/docbook">docbook (
10)
</a></li> 
1272  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/drivstoffpriser">drivstoffpriser (
4)
</a></li> 
1274  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/english">english (
214)
</a></li> 
1276  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (
21)
</a></li> 
1278  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling (
12)
</a></li> 
1280  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/freeculture">freeculture (
12)
</a></li> 
1282  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox (
1)
</a></li> 
1284  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/frikanalen">frikanalen (
11)
</a></li> 
1286  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/intervju">intervju (
37)
</a></li> 
1288  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/isenkram">isenkram (
7)
</a></li> 
1290  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/kart">kart (
18)
</a></li> 
1292  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/ldap">ldap (
8)
</a></li> 
1294  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/lenker">lenker (
6)
</a></li> 
1296  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp (
1)
</a></li> 
1298  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia (
25)
</a></li> 
1300  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/norsk">norsk (
235)
</a></li> 
1302  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug (
153)
</a></li> 
1304  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/offentlig innsyn">offentlig innsyn (
8)
</a></li> 
1306  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/open311">open311 (
2)
</a></li> 
1308  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett (
44)
</a></li> 
1310  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/personvern">personvern (
66)
</a></li> 
1312  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/raid">raid (
1)
</a></li> 
1314  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/reprap">reprap (
11)
</a></li> 
1316  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/rfid">rfid (
2)
</a></li> 
1318  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/robot">robot (
7)
</a></li> 
1320  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/rss">rss (
1)
</a></li> 
1322  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/ruter">ruter (
4)
</a></li> 
1324  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/scraperwiki">scraperwiki (
2)
</a></li> 
1326  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (
30)
</a></li> 
1328  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (
4)
</a></li> 
1330  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/skepsis">skepsis (
4)
</a></li> 
1332  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/standard">standard (
43)
</a></li> 
1334  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll (
3)
</a></li> 
1336  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/stortinget">stortinget (
8)
</a></li> 
1338  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance (
17)
</a></li> 
1340  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/sysadmin">sysadmin (
1)
</a></li> 
1342  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/valg">valg (
8)
</a></li> 
1344  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/video">video (
38)
</a></li> 
1346  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (
4)
</a></li> 
1348  <li><a href=
"http://people.skolelinux.org/pere/blog/tags/web">web (
27)
</a></li> 
1354     <p style=
"text-align: right"> 
1355  Created by 
<a href=
"http://steve.org.uk/Software/chronicle">Chronicle v4.6
</a>