]> pere.pagekite.me Git - homepage.git/blob - blog/index.rss
Generated.
[homepage.git] / blog / index.rss
1 <?xml version="1.0" encoding="utf-8"?>
2 <rss version='2.0' xmlns:lj='http://www.livejournal.org/rss/lj/1.0/' xmlns:atom="http://www.w3.org/2005/Atom">
3 <channel>
4 <title>Petter Reinholdtsen</title>
5 <description></description>
6 <link>http://people.skolelinux.org/pere/blog/</link>
7 <atom:link href="http://people.skolelinux.org/pere/blog/index.rss" rel="self" type="application/rss+xml" />
8
9 <item>
10 <title>Det er jo makta som er mest sårbar ved massiv overvåkning av Internett</title>
11 <link>http://people.skolelinux.org/pere/blog/Det_er_jo_makta_som_er_mest_s_rbar_ved_massiv_overv_kning_av_Internett.html</link>
12 <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Det_er_jo_makta_som_er_mest_s_rbar_ved_massiv_overv_kning_av_Internett.html</guid>
13 <pubDate>Sat, 26 Oct 2013 20:30:00 +0200</pubDate>
14 <description>&lt;p&gt;De siste måneders eksponering av
15 &lt;a href=&quot;http://www.aftenposten.no/nyheter/uriks/Her-er-Edvard-Snowdens-mest-omtalte-avsloringer-7351734.html&quot;&gt;den
16 totale overvåkningen som foregår i den vestlige verden dokumenterer
17 hvor sårbare vi er&lt;/a&gt;. Men det slår meg at de som er mest sårbare
18 for dette, myndighetspersoner på alle nivåer, neppe har innsett at de
19 selv er de mest interessante personene å lage profiler på, for å kunne
20 påvirke dem.&lt;/p&gt;
21
22 &lt;p&gt;For å ta et lite eksempel: Stortingets nettsted,
23 &lt;a href=&quot;http://www.stortinget.no/&quot;&gt;www.stortinget.no&lt;/a&gt; (og
24 forsåvidt også
25 &lt;a href=&quot;&gt;http://data.stortinget.no/&quot;&gt;data.stortinget.no&lt;/a&gt;),
26 inneholder informasjon om det som foregår på Stortinget, og jeg antar
27 de største brukerne av informasjonen der er representanter og
28 rådgivere på Stortinget. Intet overraskende med det. Det som derimot
29 er mer skjult er at Stortingets nettsted bruker
30 &lt;a href=&quot;http://en.wikipedia.org/wiki/Google_Analytics&quot;&gt;Google
31 Analytics&lt;/a&gt;, hvilket gjør at enhver som besøker nettsidene der også
32 rapporterer om besøket via Internett-linjer som passerer Sverige,
33 England og videre til USA. Det betyr at informasjon om ethvert besøk
34 på stortingets nettsider kan snappes opp av Svensk, britisk og USAs
35 etterretningsvesen. De kan dermed holde et øye med hvilke
36 Stortingssaker stortingsrepresentantene synes er interessante å sjekke
37 ut, og hvilke sider rådgivere og andre på stortinget synes er
38 interessant å besøke. Stortingets bruk av Google Analytics gjør det
39 dermed enkelt for utenlands etteretning å spore representantenes
40 aktivitet og interesse. Hvis noen av representantene bruker Google
41 Mail eller noen andre tjenestene som krever innlogging, så vil det
42 være enda enklere å finne ut nøyaktig hvilke personer som bruker
43 hvilke nettlesere og dermed knytte informasjonen opp til
44 enkeltpersoner på Stortinget.&lt;/p&gt;
45
46 &lt;p&gt;Og jo flere nettsteder som bruker Google Analytics, jo bedre
47 oversikt over stortingsrepresentantenes lesevaner og interesse blir
48 tilgjengelig for svensk, britisk og USAs etterretning. Hva de kan
49 bruke den informasjonen til overlater jeg til leseren å undres
50 over.&lt;/p&gt;
51 </description>
52 </item>
53
54 <item>
55 <title>A Raspberry Pi based batman-adv Mesh network node</title>
56 <link>http://people.skolelinux.org/pere/blog/A_Raspberry_Pi_based_batman_adv_Mesh_network_node.html</link>
57 <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/A_Raspberry_Pi_based_batman_adv_Mesh_network_node.html</guid>
58 <pubDate>Mon, 21 Oct 2013 11:40:00 +0200</pubDate>
59 <description>&lt;p&gt;The last few days I have been experimenting with
60 &lt;a href=&quot;http://www.open-mesh.org/projects/batman-adv/wiki&quot;&gt;the
61 batman-adv mech technology&lt;/a&gt;. I want to gain some experience to see
62 if it will fit &lt;a href=&quot;https://wiki.debian.org/FreedomBox&quot;&gt;the
63 Freedombox project&lt;/a&gt;, and together with my neighbors try to build a
64 mesh network around the park where I live. Batman-adv is a layer 2
65 mesh system (&quot;ethernet&quot; in other words), where the mesh network appear
66 as if all the mesh clients are connected to the same switch.&lt;/p&gt;
67
68 &lt;p&gt;My hardware of choice was the Linksys WRT54GL routers I had lying
69 around, but I&#39;ve been unable to get them working with batman-adv. So
70 instead, I started playing with a
71 &lt;a href=&quot;http://www.raspberrypi.org/&quot;&gt;Raspberry Pi&lt;/a&gt;, and tried to
72 get it working as a mesh node. My idea is to use it to create a mesh
73 node which function as a switch port, where everything connected to
74 the Raspberry Pi ethernet plug is connected (bridged) to the mesh
75 network. This allow me to hook a wifi base station like the Linksys
76 WRT54GL to the mesh by plugging it into a Raspberry Pi, and allow
77 non-mesh clients to hook up to the mesh. This in turn is useful for
78 Android phones using &lt;a href=&quot;http://servalproject.org/&quot;&gt;the Serval
79 Project&lt;/a&gt; voip client, allowing every one around the playground to
80 phone and message each other for free. The reason is that Android
81 phones do not see ad-hoc wifi networks (they are filtered away from
82 the GUI view), and can not join the mesh without being rooted. But if
83 they are connected using a normal wifi base station, they can talk to
84 every client on the local network.&lt;/p&gt;
85
86 &lt;p&gt;To get this working, I&#39;ve created a debian package
87 &lt;a href=&quot;https://github.com/petterreinholdtsen/meshfx-node&quot;&gt;meshfx-node&lt;/a&gt;
88 and a script
89 &lt;a href=&quot;https://github.com/petterreinholdtsen/meshfx-node/blob/master/build-rpi-mesh-node&quot;&gt;build-rpi-mesh-node&lt;/a&gt;
90 to create the Raspberry Pi boot image. I&#39;m using Debian Jessie (and
91 not Raspbian), to get more control over the packages available.
92 Unfortunately a huge binary blob need to be inserted into the boot
93 image to get it booting, but I&#39;ll ignore that for now. Also, as
94 Debian lack support for the CPU features available in the Raspberry
95 Pi, the system do not use the hardware floating point unit. I hope
96 the routing performance isn&#39;t affected by the lack of hardware FPU
97 support.&lt;/p&gt;
98
99 &lt;p&gt;To create an image, run the following with a sudo enabled user
100 after inserting the target SD card into the build machine:&lt;/p&gt;
101
102 &lt;p&gt;&lt;pre&gt;
103 % wget -O build-rpi-mesh-node \
104 https://raw.github.com/petterreinholdtsen/meshfx-node/master/build-rpi-mesh-node
105 % sudo bash -x ./build-rpi-mesh-node &gt; build.log 2&gt;&amp;1
106 % dd if=/root/rpi/rpi_basic_jessie_$(date +%Y%m%d).img of=/dev/mmcblk0 bs=1M
107 %
108 &lt;/pre&gt;&lt;/p&gt;
109
110 &lt;p&gt;Booting with the resulting SD card on a Raspberry PI with a USB
111 wifi card inserted should give you a mesh node. At least it does for
112 me with a the wifi card I am using. The default mesh settings are the
113 ones used by the Oslo mesh project at Hackeriet, as I mentioned in
114 &lt;a href=&quot;http://people.skolelinux.org/pere/blog/Oslo_community_mesh_network___with_NUUG_and_Hackeriet_at_Hausmania.html&quot;&gt;an
115 earlier blog post about this mesh testing&lt;/a&gt;.&lt;/p&gt;
116
117 &lt;p&gt;The mesh node was not horribly expensive either. I bought
118 everything over the counter in shops nearby. If I had ordered online
119 from the lowest bidder, the price should be significantly lower:&lt;/p&gt;
120
121 &lt;p&gt;&lt;table&gt;
122
123 &lt;tr&gt;&lt;th&gt;Supplier&lt;/th&gt;&lt;th&gt;Model&lt;/th&gt;&lt;th&gt;NOK&lt;/th&gt;&lt;/tr&gt;
124 &lt;tr&gt;&lt;td&gt;Teknikkmagasinet&lt;/td&gt;&lt;td&gt;Raspberry Pi model B&lt;/td&gt;&lt;td&gt;349.90&lt;/td&gt;&lt;/tr&gt;
125 &lt;tr&gt;&lt;td&gt;Teknikkmagasinet&lt;/td&gt;&lt;td&gt;Raspberry Pi type B case&lt;/td&gt;&lt;td&gt;99.90&lt;/td&gt;&lt;/tr&gt;
126 &lt;tr&gt;&lt;td&gt;Lefdal&lt;/td&gt;&lt;td&gt;Jensen Air:Link 25150&lt;/td&gt;&lt;td&gt;295.-&lt;/td&gt;&lt;/tr&gt;
127 &lt;tr&gt;&lt;td&gt;Clas Ohlson&lt;/td&gt;&lt;td&gt;Kingston 16 GB SD card&lt;/td&gt;&lt;td&gt;199.-&lt;/td&gt;&lt;/tr&gt;
128 &lt;tr&gt;&lt;td&gt;Total cost&lt;/td&gt;&lt;td&gt;&lt;/td&gt;&lt;td&gt;943.80&lt;/td&gt;&lt;/tr&gt;
129
130 &lt;/table&gt;&lt;/p&gt;
131
132 &lt;p&gt;Now my mesh network at home consist of one laptop in the basement
133 connected to my production network, one Raspberry Pi node on the 1th
134 floor that can be seen by my neighbor across the park, and one
135 play-node I use to develop the image building script. And some times
136 I hook up my work horse laptop to the mesh to test it. I look forward
137 to figuring out what kind of latency the batman-adv setup will give,
138 and how much packet loss we will experience around the park. :)&lt;/p&gt;
139 </description>
140 </item>
141
142 <item>
143 <title>Perl library to control the Spykee robot moved to github</title>
144 <link>http://people.skolelinux.org/pere/blog/Perl_library_to_control_the_Spykee_robot_moved_to_github.html</link>
145 <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Perl_library_to_control_the_Spykee_robot_moved_to_github.html</guid>
146 <pubDate>Sat, 19 Oct 2013 10:20:00 +0200</pubDate>
147 <description>&lt;p&gt;Back in 2010, I created a Perl library to talk to
148 &lt;a href=&quot;http://en.wikipedia.org/wiki/Spykee&quot;&gt;the Spykee robot&lt;/a&gt;
149 (with two belts, wifi, USB and Linux) and made it available from my
150 web page. Today I concluded that it should move to a site that is
151 easier to use to cooperate with others, and moved it to github. If
152 you got a Spykee robot, you might want to check out
153 &lt;a href=&quot;https://github.com/petterreinholdtsen/libspykee-perl&quot;&gt;the
154 libspykee-perl github repository&lt;/a&gt;.&lt;/p&gt;
155 </description>
156 </item>
157
158 <item>
159 <title>Good causes: Debian Outreach Program for Women, EFF documenting the spying and Open access in Norway</title>
160 <link>http://people.skolelinux.org/pere/blog/Good_causes__Debian_Outreach_Program_for_Women__EFF_documenting_the_spying_and_Open_access_in_Norway.html</link>
161 <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Good_causes__Debian_Outreach_Program_for_Women__EFF_documenting_the_spying_and_Open_access_in_Norway.html</guid>
162 <pubDate>Tue, 15 Oct 2013 21:30:00 +0200</pubDate>
163 <description>&lt;p&gt;The last few days I came across a few good causes that should get
164 wider attention. I recommend signing and donating to each one of
165 these. :)&lt;/p&gt;
166
167 &lt;p&gt;Via &lt;a href=&quot;http://www.debian.org/News/weekly/2013/18/&quot;&gt;Debian
168 Project News for 2013-10-14&lt;/a&gt; I came across the Outreach Program for
169 Women program which is a Google Summer of Code like initiative to get
170 more women involved in free software. One debian sponsor has offered
171 to match &lt;a href=&quot;http://debian.ch/opw2013&quot;&gt;any donation done to Debian
172 earmarked&lt;/a&gt; for this initiative. I donated a few minutes ago, and
173 hope you will to. :)&lt;/p&gt;
174
175 &lt;p&gt;And the Electronic Frontier Foundation just announced plans to
176 create &lt;a href=&quot;https://supporters.eff.org/donate/nsa-videos&quot;&gt;video
177 documentaries about the excessive spying&lt;/a&gt; on every Internet user that
178 take place these days, and their need to fund the work. I&#39;ve already
179 donated. Are you next?&lt;/p&gt;
180
181 &lt;p&gt;For my Norwegian audience, the organisation Studentenes og
182 Akademikernes Internasjonale Hjelpefond is collecting signatures for a
183 statement under the heading
184 &lt;a href=&quot;http://saih.no/Bloggers_United/&quot;&gt;Bloggers United for Open
185 Access&lt;/a&gt; for those of us asking for more focus on open access in the
186 Norwegian government. So far 499 signatures. I hope you will sign it
187 too.&lt;/p&gt;
188 </description>
189 </item>
190
191 <item>
192 <title>Oslo community mesh network - with NUUG and Hackeriet at Hausmania</title>
193 <link>http://people.skolelinux.org/pere/blog/Oslo_community_mesh_network___with_NUUG_and_Hackeriet_at_Hausmania.html</link>
194 <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Oslo_community_mesh_network___with_NUUG_and_Hackeriet_at_Hausmania.html</guid>
195 <pubDate>Fri, 11 Oct 2013 14:10:00 +0200</pubDate>
196 <description>&lt;p&gt;Wireless mesh networks are self organising and self healing
197 networks that can be used to connect computers across small and large
198 areas, depending on the radio technology used. Normal wifi equipment
199 can be used to create home made radio networks, and there are several
200 successful examples like
201 &lt;a href=&quot;http://www.freifunk.net/&quot;&gt;Freifunk&lt;/a&gt; and
202 &lt;a href=&quot;http://www.awmn.net/&quot;&gt;Athens Wireless Metropolitan Network&lt;/a&gt;
203 (see
204 &lt;a href=&quot;http://en.wikipedia.org/wiki/List_of_wireless_community_networks_by_region#Greece&quot;&gt;wikipedia
205 for a large list&lt;/a&gt;) around the globe. To give you an idea how it
206 work, check out the nice overview of the Kiel Freifunk community which
207 can be seen from their
208 &lt;a href=&quot;http://freifunk.in-kiel.de/ffmap/nodes.html&quot;&gt;dynamically
209 updated node graph and map&lt;/a&gt;, where one can see how the mesh nodes
210 automatically handle routing and recover from nodes disappearing.
211 There is also a small community mesh network group in Oslo, Norway,
212 and that is the main topic of this blog post.&lt;/p&gt;
213
214 &lt;p&gt;I&#39;ve wanted to check out mesh networks for a while now, and hoped
215 to do it as part of my involvement with the &lt;a
216 href=&quot;http://www.nuug.no/&quot;&gt;NUUG member organisation&lt;/a&gt; community, and
217 my recent involvement in
218 &lt;a href=&quot;https://wiki.debian.org/FreedomBox&quot;&gt;the Freedombox project&lt;/a&gt;
219 finally lead me to give mesh networks some priority, as I suspect a
220 Freedombox should use mesh networks to connect neighbours and family
221 when possible, given that most communication between people are
222 between those nearby (as shown for example by research on Facebook
223 communication patterns). It also allow people to communicate without
224 any central hub to tap into for those that want to listen in on the
225 private communication of citizens, which have become more and more
226 important over the years.&lt;/p&gt;
227
228 &lt;p&gt;So far I have only been able to find one group of people in Oslo
229 working on community mesh networks, over at the hack space
230 &lt;a href=&quot;http://hackeriet.no/&quot;&gt;Hackeriet&lt;/a&gt; at Husmania. They seem to
231 have started with some Freifunk based effort using OLSR, called
232 &lt;a href=&quot;http://oslo.freifunk.net/index.php?title=Main_Page&quot;&gt;the Oslo
233 Freifunk project&lt;/a&gt;, but that effort is now dead and the people
234 behind it have moved on to a batman-adv based system called
235 &lt;a href=&quot;http://meshfx.org/trac&quot;&gt;meshfx&lt;/a&gt;. Unfortunately the wiki
236 site for the Oslo Freifunk project is no longer possible to update to
237 reflect this fact, so the old project page can&#39;t be updated to point to
238 the new project. A while back, the people at Hackeriet invited people
239 from the Freifunk community to Oslo to talk about mesh networks. I
240 came across this video where Hans Jørgen Lysglimt interview the
241 speakers about this talk (from
242 &lt;a href=&quot;https://www.youtube.com/watch?v=N2Kd7CLkhSY&quot;&gt;youtube&lt;/a&gt;):&lt;/p&gt;
243
244 &lt;p&gt;&lt;iframe width=&quot;420&quot; height=&quot;315&quot; src=&quot;https://www.youtube.com/embed/N2Kd7CLkhSY&quot; frameborder=&quot;0&quot; allowfullscreen&gt;&lt;/iframe&gt;&lt;/p&gt;
245
246 &lt;p&gt;I mentioned OLSR and batman-adv, which are mesh routing protocols.
247 There are heaps of different protocols, and I am still struggling to
248 figure out which one would be &quot;best&quot; for some definitions of best, but
249 given that the community mesh group in Oslo is so small, I believe it
250 is best to hook up with the existing one instead of trying to create a
251 completely different setup, and thus I have decided to focus on
252 batman-adv for now. It sure help me to know that the very cool
253 &lt;a href=&quot;http://www.servalproject.org/&quot;&gt;Serval project in Australia&lt;/a&gt;
254 is using batman-adv as their meshing technology when it create a self
255 organizing and self healing telephony system for disaster areas and
256 less industrialized communities. Check out this cool video presenting
257 that project (from
258 &lt;a href=&quot;https://www.youtube.com/watch?v=30qNfzJCQOA&quot;&gt;youtube&lt;/a&gt;):&lt;/p&gt;
259
260 &lt;p&gt;&lt;iframe width=&quot;560&quot; height=&quot;315&quot; src=&quot;https://www.youtube.com/embed/30qNfzJCQOA&quot; frameborder=&quot;0&quot; allowfullscreen&gt;&lt;/iframe&gt;&lt;/p&gt;
261
262 &lt;p&gt;According to the wikipedia page on
263 &lt;a href=&quot;http://en.wikipedia.org/wiki/Wireless_mesh_network&quot;&gt;Wireless
264 mesh network&lt;/a&gt; there are around 70 competing schemes for routing
265 packets across mesh networks, and OLSR, B.A.T.M.A.N. and
266 B.A.T.M.A.N. advanced are protocols used by several free software
267 based community mesh networks.&lt;/p&gt;
268
269 &lt;p&gt;The batman-adv protocol is a bit special, as it provide layer 2
270 (as in ethernet ) routing, allowing ipv4 and ipv6 to work on the same
271 network. One way to think about it is that it provide a mesh based
272 vlan you can bridge to or handle like any other vlan connected to your
273 computer. The required drivers are already in the Linux kernel at
274 least since Debian Wheezy, and it is fairly easy to set up. A
275 &lt;a href=&quot;http://www.open-mesh.org/projects/batman-adv/wiki/Quick-start-guide&quot;&gt;good
276 introduction&lt;/a&gt; is available from the Open Mesh project. These are
277 the key settings needed to join the Oslo meshfx network:&lt;/p&gt;
278
279 &lt;p&gt;&lt;table&gt;
280 &lt;tr&gt;&lt;th&gt;Setting&lt;/th&gt;&lt;th&gt;Value&lt;/th&gt;&lt;/tr&gt;
281 &lt;tr&gt;&lt;td&gt;Protocol / kernel module&lt;/td&gt;&lt;td&gt;batman-adv&lt;/td&gt;&lt;/tr&gt;
282 &lt;tr&gt;&lt;td&gt;ESSID&lt;/td&gt;&lt;td&gt;meshfx@hackeriet&lt;/td&gt;&lt;/tr&gt;
283 &lt;td&gt;Channel / Frequency&lt;/td&gt;&lt;td&gt;11 / 2462&lt;/td&gt;&lt;/tr&gt;
284 &lt;td&gt;Cell ID&lt;/td&gt;&lt;td&gt;02:BA:00:00:00:01&lt;/td&gt;
285 &lt;/table&gt;&lt;/p&gt;
286
287 &lt;p&gt;The reason for setting ad-hoc wifi Cell ID is to work around bugs
288 in firmware used in wifi card and wifi drivers. (See a nice post from
289 VillageTelco about
290 &quot;&lt;a href=&quot;http://tiebing.blogspot.no/2009/12/ad-hoc-cell-splitting-re-post-original.html&quot;&gt;Information
291 about cell-id splitting, stuck beacons, and failed IBSS merges!&lt;/a&gt;
292 for details.) When these settings are activated and you have some
293 other mesh node nearby, your computer will be connected to the mesh
294 network and can communicate with any mesh node that is connected to
295 any of the nodes in your network of nodes. :)&lt;/p&gt;
296
297 &lt;p&gt;My initial plan was to reuse my old Linksys WRT54GL as a mesh node,
298 but that seem to be very hard, as I have not been able to locate a
299 firmware supporting batman-adv. If anyone know how to use that old
300 wifi access point with batman-adv these days, please let me know.&lt;/p&gt;
301
302 &lt;p&gt;If you find this project interesting and want to join, please join
303 us on IRC, either channel
304 &lt;a href=&quot;irc://irc.freenode.net/#oslohackerspace&quot;&gt;#oslohackerspace&lt;/a&gt;
305 or &lt;a href=&quot;irc://irc.freenode.net/#nuug&quot;&gt;#nuug&lt;/a&gt; on
306 irc.freenode.net.&lt;/p&gt;
307
308 &lt;p&gt;While investigating mesh networks in Oslo, I came across an old
309 research paper from the university of Stavanger and Telenor Research
310 and Innovation called
311 &lt;a href=&quot;http://folk.uio.no/paalee/publications/netrel-egeland-iswcs-2008.pdf&quot;&gt;The
312 reliability of wireless backhaul mesh networks&lt;/a&gt; and elsewhere
313 learned that Telenor have been experimenting with mesh networks at
314 Grünerløkka in Oslo. So mesh networks are also interesting for
315 commercial companies, even though Telenor discovered that it was hard
316 to figure out a good business plan for mesh networking and as far as I
317 know have closed down the experiment. Perhaps Telenor or others would
318 be interested in a cooperation?&lt;/p&gt;
319
320 &lt;p&gt;&lt;strong&gt;Update 2013-10-12&lt;/strong&gt;: I was just
321 &lt;a href=&quot;http://lists.alioth.debian.org/pipermail/freedombox-discuss/2013-October/005900.html&quot;&gt;told
322 by the Serval project developers&lt;/a&gt; that they no longer use
323 batman-adv (but are compatible with it), but their own crypto based
324 mesh system.&lt;/p&gt;
325 </description>
326 </item>
327
328 <item>
329 <title>Skolelinux / Debian Edu 7.1 install and overview video from Marcelo Salvador</title>
330 <link>http://people.skolelinux.org/pere/blog/Skolelinux___Debian_Edu_7_1_install_and_overview_video_from_Marcelo_Salvador.html</link>
331 <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Skolelinux___Debian_Edu_7_1_install_and_overview_video_from_Marcelo_Salvador.html</guid>
332 <pubDate>Tue, 8 Oct 2013 17:10:00 +0200</pubDate>
333 <description>&lt;p&gt;The other day I was pleased and surprised to discover that Marcelo
334 Salvador had published a
335 &lt;a href=&quot;https://www.youtube.com/watch?v=w-GgpdqgLFc&quot;&gt;video on
336 Youtube&lt;/a&gt; showing how to install the standalone Debian Edu /
337 Skolelinux profile. This is the profile intended for use at home or
338 on laptops that should not be integrated into the provided network
339 services (no central home directory, no Kerberos / LDAP directory etc,
340 in other word a single user machine). The result is 11 minutes long,
341 and show some user applications (seem to be rather randomly picked).
342 Missed a few of my favorites like celestia, planets and chromium
343 showing the &lt;a href=&quot;http://www.zygotebody.com/&quot;&gt;Zygote Body 3D model
344 of the human body&lt;/a&gt;, but I guess he did not know about those or find
345 other programs more interesting. :) And the video do not show the
346 advantages I believe is one of the most valuable featuers in Debian
347 Edu, its central school server making it possible to run hundreds of
348 computers without hard drives by installing one central
349 &lt;a href=&quot;http://www.ltsp.org/&quot;&gt;LTSP server&lt;/a&gt;.&lt;/p&gt;
350
351 &lt;p&gt;Anyway, check out the video, embedded below and linked to above:&lt;/p&gt;
352
353 &lt;iframe width=&quot;420&quot; height=&quot;315&quot; src=&quot;http://www.youtube.com/embed/w-GgpdqgLFc&quot; frameborder=&quot;0&quot; allowfullscreen&gt;&lt;/iframe&gt;
354
355 &lt;p&gt;Are there other nice videos demonstrating Skolelinux? Please let
356 me know. :)&lt;/p&gt;
357 </description>
358 </item>
359
360 <item>
361 <title>Finally, Debian Edu Wheezy is released today!</title>
362 <link>http://people.skolelinux.org/pere/blog/Finally__Debian_Edu_Wheezy_is_released_today_.html</link>
363 <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Finally__Debian_Edu_Wheezy_is_released_today_.html</guid>
364 <pubDate>Sun, 29 Sep 2013 10:20:00 +0200</pubDate>
365 <description>&lt;p&gt;A few hours ago, the announcement for the first stable release of
366 Debian Edu Wheezy went out from the Debian publicity team. The
367 complete announcement text can be found at
368 &lt;a href=&quot;http://www.debian.org/News/2013/20130928&quot;&gt;the Debian News
369 section&lt;/a&gt;, translated to several languages. Please check it out.&lt;/p&gt;
370
371 &lt;p&gt;There is one minor known problem that we will fix very soon. One
372 can not install a amd64 Thin Client Server using PXE, as the /var/
373 partition is too small. A workaround is to extend the partition (use
374 lvresize + resize2fs in tty 2 while installing).&lt;/p&gt;
375 </description>
376 </item>
377
378 <item>
379 <title>Videos about the Freedombox project - for inspiration and learning</title>
380 <link>http://people.skolelinux.org/pere/blog/Videos_about_the_Freedombox_project___for_inspiration_and_learning.html</link>
381 <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Videos_about_the_Freedombox_project___for_inspiration_and_learning.html</guid>
382 <pubDate>Fri, 27 Sep 2013 14:10:00 +0200</pubDate>
383 <description>&lt;p&gt;The &lt;a href=&quot;http://www.freedomboxfoundation.org/&quot;&gt;Freedombox
384 project&lt;/a&gt; have been going on for a while, and have presented the
385 vision, ideas and solution several places. Here is a little
386 collection of videos of talks and presentation of the project.&lt;/p&gt;
387
388 &lt;ul&gt;
389
390 &lt;li&gt;&lt;a href=&quot;http://www.youtube.com/watch?v=ukvUz5taxvA&quot;&gt;FreedomBox -
391 2,5 minute marketing film&lt;/a&gt; (Youtube)&lt;/li&gt;
392
393 &lt;li&gt;&lt;a href=&quot;http://www.youtube.com/watch?v=SzW25QTVWsE&quot;&gt;Eben Moglen
394 discusses the Freedombox on CBS news 2011&lt;/a&gt; (Youtube)&lt;/li&gt;
395
396 &lt;li&gt;&lt;a href=&quot;http://www.youtube.com/watch?v=Ae8SZbxfE0g&quot;&gt;Eben Moglen -
397 Freedom in the Cloud - Software Freedom, Privacy and and Security for
398 Web 2.0 and Cloud computing at ISOC-NY Public Meeting 2010&lt;/a&gt;
399 (Youtube)&lt;/li&gt;
400
401 &lt;li&gt;&lt;a href=&quot;http://www.youtube.com/watch?v=vNaIji_3xBE&quot;&gt;Fosdem 2011
402 Keynote by Eben Moglen presenting the Freedombox&lt;/a&gt; (Youtube)&lt;/li&gt;
403
404 &lt;li&gt;&lt;a href=&quot;http://www.youtube.com/watch?v=9bDDUyJSQ9s&quot;&gt;Presentation of
405 the Freedombox by James Vasile at Elevate in Gratz 2011&lt;/a&gt; (Youtube)&lt;/li&gt;
406
407 &lt;li&gt;&lt;a href=&quot;http://www.youtube.com/watch?v=zQTmnk27g9s&quot;&gt; Freedombox -
408 Discovery, Identity, and Trust by Nick Daly at Freedombox Hackfest New
409 York City in 2012&lt;/a&gt; (Youtube)&lt;/li&gt;
410
411 &lt;li&gt;&lt;a href=&quot;http://www.youtube.com/watch?v=tkbSB4Ba7Ck&quot;&gt;Introduction
412 to the Freedombox at Freedombox Hackfest New York City in 2012&lt;/a&gt;
413 (Youtube)&lt;/li&gt;
414
415 &lt;li&gt;&lt;a href=&quot;http://www.youtube.com/watch?v=z-P2Jaeg0aQ&quot;&gt;Freedom, Out
416 of the Box! by Bdale Garbee at linux.conf.au Ballarat, 2012&lt;/a&gt; (Youtube) &lt;/li&gt;
417
418 &lt;li&gt;&lt;a href=&quot;https://archive.fosdem.org/2013/schedule/event/freedombox/&quot;&gt;Freedombox
419 1.0 by Eben Moglen and Bdale Garbee at Fosdem 2013&lt;/a&gt; (FOSDEM) &lt;/li&gt;
420
421 &lt;li&gt;&lt;a href=&quot;http://www.youtube.com/watch?v=e1LpYX2zVYg&quot;&gt;What is the
422 FreedomBox today by Bdale Garbee at Debconf13 in Vaumarcus
423 2013&lt;/a&gt; (Youtube)&lt;/li&gt;
424
425 &lt;/ul&gt;
426
427 &lt;p&gt;A larger list is available from
428 &lt;a href=&quot;https://wiki.debian.org/FreedomBox/TalksAndPresentations&quot;&gt;the
429 Freedombox Wiki&lt;/a&gt;.&lt;/p&gt;
430
431 &lt;p&gt;On other news, I am happy to report that Freedombox based on Debian
432 Jessie is coming along quite well, and soon both Owncloud and using
433 Tor should be available for testers of the Freedombox solution. :) In
434 a few weeks I hope everything needed to test it is included in Debian.
435 The withsqlite package is already in Debian, and the plinth package is
436 pending in NEW. The third and vital part of that puzzle is the
437 metapackage/setup framework, which is still pending an upload. Join
438 us on &lt;a href=&quot;irc://irc.debian.org:6667/%23freedombox&quot;&gt;IRC
439 (#freedombox on irc.debian.org)&lt;/a&gt; and
440 &lt;a href=&quot;http://lists.alioth.debian.org/mailman/listinfo/freedombox-discuss&quot;&gt;the
441 mailing list&lt;/a&gt; if you want to help make this vision come true.&lt;/p&gt;
442 </description>
443 </item>
444
445 <item>
446 <title>Third and probably last beta release of Debian Edu Wheezy</title>
447 <link>http://people.skolelinux.org/pere/blog/Third_and_probably_last_beta_release_of_Debian_Edu_Wheezy.html</link>
448 <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Third_and_probably_last_beta_release_of_Debian_Edu_Wheezy.html</guid>
449 <pubDate>Mon, 16 Sep 2013 21:30:00 +0200</pubDate>
450 <description>&lt;p&gt;The third wheezy based beta release of Debian Edu was wrapped up
451 today. This is the release announcement from Holger Levsen:&lt;/p&gt;
452
453 &lt;blockquote&gt;
454 &lt;p&gt;Hi,&lt;/p&gt;
455
456 &lt;p&gt;it is my pleasure to announce the third beta release (beta 2 for
457 short) of &lt;a href=&quot;http://www.skolelinux.org/&quot;&gt;Debian Edu /
458 Skolelinux&lt;/a&gt; based on Debian Wheezy!&lt;/p&gt;
459
460 &lt;p&gt;Please test these images extensivly, if no new problems are found
461 we plan to do this final Debian Edu Wheezy release this coming
462 weekend. We are not aware of any major problems or blockers in beta2,
463 if you find something, please notify us immediately!&lt;/p&gt;
464
465 &lt;p&gt;(More about the remaining steps for the Edu Wheezy release in
466 another mail to the edu list tonight or tomorrow...)&lt;/p&gt;
467
468 &lt;p&gt;Noteworthy changes and software updates for Debian Edu 7.1+edu0~b2
469 compared to beta1:&lt;/p&gt;
470
471 &lt;ul&gt;
472
473 &lt;li&gt;The KDE proxy setup has been adjusted to use the provided wpad.dat. This
474 also gets Chromium to use this proxy.&lt;/li&gt;
475 &lt;li&gt;Install kdepim-groupware with KDE desktops to make sure korganizer
476 understand ical/dav sources.&lt;/li&gt;
477 &lt;li&gt;Increased default maximum size of /var/spool/squid and /skole/backup on the
478 main server.&lt;/li&gt;
479 &lt;li&gt;A source DVD image containing all source packages is now available as well.&lt;/li&gt;
480 &lt;li&gt;Updates for chromium (29.0.1547.57-1~deb7u1), imagemagick
481 (6.7.7.10-5+deb7u2), php5 (5.4.4-14+deb7u4), libmodplug
482 (0.8.8.4-3+deb7u1+git20130828), tiff (4.0.2-6+deb7u2), linux-image
483 (3.2.0-4-486_3.2.46-1+deb7u1).&lt;/li&gt;
484
485 &lt;/ul&gt;
486
487 &lt;p&gt;Where to get it:&lt;/p&gt;
488
489 &lt;p&gt;To download the multiarch netinstall CD release you can use&lt;/p&gt;
490
491 &lt;ul&gt;
492 &lt;li&gt;&lt;a href=&quot;ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-CD.iso&quot;&gt;ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-CD.iso&lt;/a&gt;&lt;/li&gt;
493 &lt;li&gt;&lt;a href=&quot;http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-CD.iso&quot;&gt;http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-CD.iso&lt;/a&gt;&lt;/li&gt;
494 &lt;li&gt;rsync -avzP ftp.skolelinux.org::skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-CD.iso .&lt;/li&gt;
495 &lt;/ul&gt;
496
497 &lt;p&gt;The SHA1SUM of this image is: 3a1c89f4666df80eebcd46c5bf5fedb866f9472f&lt;/p&gt;
498
499 &lt;p&gt;To download the multiarch USB stick ISO release you can use
500 &lt;ul&gt;
501 &lt;li&gt;&lt;a href=&quot;ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-USB.iso&quot;&gt;ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-USB.iso&lt;/a&gt;&lt;/li&gt;
502 &lt;li&gt;&lt;a href=&quot;http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-USB.iso&quot;&gt;http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-USB.iso&lt;/a&gt;&lt;/li&gt;
503 &lt;li&gt;rsync -avzP ftp.skolelinux.org::skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-USB.iso .&lt;/li&gt;
504 &lt;/ul&gt;
505
506 &lt;p&gt;The SHA1SUM of this image is: 702d1718548f401c74bfa6df9f032cc3ee16597e&lt;/p&gt;
507
508 &lt;p&gt;The Source DVD image has the filename
509 debian-edu-7.1+edu0~b2-source-DVD.iso and the SHA1SUM
510 089eed8b3f962db47aae1f6a9685e9bb2fa30ca5 and is available the same way
511 as the other isos.&lt;/p&gt;
512
513 &lt;p&gt;How to report bugs&lt;/p&gt;
514
515 &lt;p&gt;For information how to report bugs please see
516 &lt;br&gt;&lt;a href=&quot;http://wiki.debian.org/DebianEdu/HowTo/ReportBugs&quot;&gt;http://wiki.debian.org/DebianEdu/HowTo/ReportBugs&lt;/a&gt;&lt;/p&gt;
517
518
519 &lt;p&gt;About Debian Edu and Skolelinux&lt;/p&gt;
520
521 &lt;p&gt;Debian Edu, also known as Skolelinux, is a Linux distribution based
522 on Debian providing an out-of-the box environment of a completely
523 configured school network. Immediately after installation a school
524 server running all services needed for a school network is set up just
525 waiting for users and machines being added via GOsa², a comfortable
526 Web-UI. A netbooting environment is prepared using PXE, so after
527 initial installation of the main server from CD or USB stick all other
528 machines can be installed via the network. The provided school server
529 provides LDAP database and Kerberos authentication service,
530 centralized home directories, DHCP server, web proxy and many other
531 services. The desktop contains more than 60 educational software
532 packages and more are available from the Debian archive, and schools
533 can choose between KDE, Gnome, LXDE and Xfce desktop environment.&lt;/p&gt;
534
535 &lt;p&gt;This is the seventh test release based on Debian Wheezy. Basically
536 this is an updated and slightly improved version compared to the
537 Squeeze release.&lt;/p&gt;
538
539 &lt;p&gt;Notes for upgrades from Alpha Prereleases&lt;/p&gt;
540
541 &lt;p&gt;Alpha based installations should reinstall or downgrade the
542 versions of gosa and libpam-mklocaluser to the ones used in this beta
543 release. Both alpha and beta0 based installations should reinstall or
544 deal with gosa.conf manually; there are two options: (1) Keep
545 gosa.conf and edit this file as outlined on the mailing list. (2)
546 Accept the new version of gosa.conf and replace both contained admin
547 password placeholders with the password hashes found in the old one
548 (backup copy!). In both cases all users need to change their password
549 to make sure a password is set for CIFS access to their home
550 directory.&lt;/p&gt;
551
552
553 &lt;p&gt;cheers,
554 &lt;br&gt; Holger&lt;/p&gt;
555 &lt;/blockquote&gt;
556 </description>
557 </item>
558
559 <item>
560 <title>Recipe to test the Freedombox project on amd64 or Raspberry Pi</title>
561 <link>http://people.skolelinux.org/pere/blog/Recipe_to_test_the_Freedombox_project_on_amd64_or_Raspberry_Pi.html</link>
562 <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Recipe_to_test_the_Freedombox_project_on_amd64_or_Raspberry_Pi.html</guid>
563 <pubDate>Tue, 10 Sep 2013 14:20:00 +0200</pubDate>
564 <description>&lt;p&gt;I was introduced to the
565 &lt;a href=&quot;http://www.freedomboxfoundation.org/&quot;&gt;Freedombox project&lt;/a&gt;
566 in 2010, when Eben Moglen presented his vision about serving the need
567 of non-technical people to keep their personal information private and
568 within the legal protection of their own homes. The idea is to give
569 people back the power over their network and machines, and return
570 Internet back to its intended peer-to-peer architecture. Instead of
571 depending on a central service, the Freedombox will give everyone
572 control over their own basic infrastructure.&lt;/p&gt;
573
574 &lt;p&gt;I&#39;ve intended to join the effort since then, but other tasks have
575 taken priority. But this summers nasty news about the misuse of trust
576 and privilege exercised by the &quot;western&quot; intelligence gathering
577 communities increased my eagerness to contribute to a point where I
578 actually started working on the project a while back.&lt;/p&gt;
579
580 &lt;p&gt;The &lt;a href=&quot;https://alioth.debian.org/projects/freedombox/&quot;&gt;initial
581 Debian initiative&lt;/a&gt; based on the vision from Eben Moglen, is to
582 create a simple and cheap Debian based appliance that anyone can hook
583 up in their home and get access to secure and private services and
584 communication. The initial deployment platform have been the
585 &lt;a href=&quot;http://www.globalscaletechnologies.com/t-dreamplugdetails.aspx&quot;&gt;Dreamplug&lt;/a&gt;,
586 which is a piece of hardware I do not own. So to be able to test what
587 the current Freedombox setup look like, I had to come up with a way to install
588 it on some hardware I do have access to. I have rewritten the
589 &lt;a href=&quot;https://github.com/NickDaly/freedom-maker&quot;&gt;freedom-maker&lt;/a&gt;
590 image build framework to use .deb packages instead of only copying
591 setup into the boot images, and thanks to this rewrite I am able to
592 set up any machine supported by Debian Wheezy as a Freedombox, using
593 the previously mentioned deb (and a few support debs for packages
594 missing in Debian).&lt;/p&gt;
595
596 &lt;p&gt;The current Freedombox setup consist of a set of bootstrapping
597 scripts
598 (&lt;a href=&quot;https://github.com/petterreinholdtsen/freedombox-setup&quot;&gt;freedombox-setup&lt;/a&gt;),
599 and a administrative web interface
600 (&lt;a href=&quot;https://github.com/NickDaly/Plinth&quot;&gt;plinth&lt;/a&gt; + exmachina +
601 withsqlite), as well as a privacy enhancing proxy based on
602 &lt;a href=&quot;http://packages.qa.debian.org/privoxy&quot;&gt;privoxy&lt;/a&gt;
603 (freedombox-privoxy). There is also a web/javascript based XMPP
604 client (&lt;a href=&quot;http://packages.qa.debian.org/jwchat&quot;&gt;jwchat&lt;/a&gt;)
605 trying (unsuccessfully so far) to talk to the XMPP server
606 (&lt;a href=&quot;http://packages.qa.debian.org/ejabberd&quot;&gt;ejabberd&lt;/a&gt;). The
607 web interface is pluggable, and the goal is to use it to enable OpenID
608 services, mesh network connectivity, use of TOR, etc, etc. Not much of
609 this is really working yet, see
610 &lt;a href=&quot;https://github.com/NickDaly/freedombox-todos/blob/master/TODO&quot;&gt;the
611 project TODO&lt;/a&gt; for links to GIT repositories. Most of the code is
612 on github at the moment. The HTTP proxy is operational out of the
613 box, and the admin web interface can be used to add/remove plinth
614 users. I&#39;ve not been able to do anything else with it so far, but
615 know there are several branches spread around github and other places
616 with lots of half baked features.&lt;/p&gt;
617
618 &lt;p&gt;Anyway, if you want to have a look at the current state, the
619 following recipes should work to give you a test machine to poke
620 at.&lt;/p&gt;
621
622 &lt;p&gt;&lt;strong&gt;Debian Wheezy amd64&lt;/strong&gt;&lt;/p&gt;
623
624 &lt;ol&gt;
625
626 &lt;li&gt;Fetch normal Debian Wheezy installation ISO.&lt;/li&gt;
627 &lt;li&gt;Boot from it, either as CD or USB stick.&lt;/li&gt;
628 &lt;li&gt;&lt;p&gt;Press [tab] on the boot prompt and add this as a boot argument
629 to the Debian installer:&lt;p&gt;
630 &lt;pre&gt;url=&lt;a href=&quot;http://www.reinholdtsen.name/freedombox/preseed-wheezy.dat&quot;&gt;http://www.reinholdtsen.name/freedombox/preseed-wheezy.dat&lt;/a&gt;&lt;/pre&gt;&lt;/li&gt;
631
632 &lt;li&gt;Answer the few language/region/password questions and pick disk to
633 install on.&lt;/li&gt;
634
635 &lt;li&gt;When the installation is finished and the machine have rebooted a
636 few times, your Freedombox is ready for testing.&lt;/li&gt;
637
638 &lt;/ol&gt;
639
640 &lt;p&gt;&lt;strong&gt;Raspberry Pi Raspbian&lt;/strong&gt;&lt;/p&gt;
641
642 &lt;ol&gt;
643
644 &lt;li&gt;Fetch a Raspbian SD card image, create SD card.&lt;/li&gt;
645 &lt;li&gt;Boot from SD card, extend file system to fill the card completely.&lt;/li&gt;
646 &lt;li&gt;&lt;p&gt;Log in and add this to /etc/sources.list:&lt;/p&gt;
647 &lt;pre&gt;
648 deb &lt;a href=&quot;http://www.reinholdtsen.name/freedombox/&quot;&gt;http://www.reinholdtsen.name/freedombox&lt;/a&gt; wheezy main
649 &lt;/pre&gt;&lt;/li&gt;
650 &lt;li&gt;&lt;p&gt;Run this as root:&lt;/p&gt;
651 &lt;pre&gt;
652 wget -O - http://www.reinholdtsen.name/freedombox/BE1A583D.asc | \
653 apt-key add -
654 apt-get update
655 apt-get install freedombox-setup
656 /usr/lib/freedombox/setup
657 &lt;/pre&gt;&lt;/li&gt;
658 &lt;li&gt;Reboot into your freshly created Freedombox.&lt;/li&gt;
659
660 &lt;/ol&gt;
661
662 &lt;p&gt;You can test it on other architectures too, but because the
663 freedombox-privoxy package is binary, it will only work as intended on
664 the architectures where I have had time to build the binary and put it
665 in my APT repository. But do not let this stop you. It is only a
666 short &quot;&lt;tt&gt;apt-get source -b freedombox-privoxy&lt;/tt&gt;&quot; away. :)&lt;/p&gt;
667
668 &lt;p&gt;Note that by default Freedombox is a DHCP server on the
669 192.168.1.0/24 subnet, so if this is your subnet be careful and turn
670 off the DHCP server by running &quot;&lt;tt&gt;update-rc.d isc-dhcp-server
671 disable&lt;/tt&gt;&quot; as root.&lt;/p&gt;
672
673 &lt;p&gt;Please let me know if this works for you, or if you have any
674 problems. We gather on the IRC channel
675 &lt;a href=&quot;irc://irc.debian.org:6667/%23freedombox&quot;&gt;#freedombox&lt;/a&gt; on
676 irc.debian.org and the
677 &lt;a href=&quot;http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss&quot;&gt;project
678 mailing list&lt;/a&gt;.&lt;/p&gt;
679
680 &lt;p&gt;Once you get your freedombox operational, you can visit
681 &lt;tt&gt;http://your-host-name:8001/&lt;/tt&gt; to see the state of the plint
682 welcome screen (dead end - do not be surprised if you are unable to
683 get past it), and next visit &lt;tt&gt;http://your-host-name:8001/help/&lt;/tt&gt;
684 to look at the rest of plinth. The default user is &#39;admin&#39; and the
685 default password is &#39;secret&#39;.&lt;/p&gt;
686 </description>
687 </item>
688
689 </channel>
690 </rss>