+ <div class="entry">
+ <div class="title"><a href="http://people.skolelinux.org/pere/blog/Skolelinux___Debian_Edu_7_1_install_and_overview_video_from_Marcelo_Salvador.html">Skolelinux / Debian Edu 7.1 install and overview video from Marcelo Salvador</a></div>
+ <div class="date"> 8th October 2013</div>
+ <div class="body"><p>The other day I was pleased and surprised to discover that Marcelo
+Salvador had published a
+<a href="https://www.youtube.com/watch?v=w-GgpdqgLFc">video on
+Youtube</a> showing how to install the standalone Debian Edu /
+Skolelinux profile. This is the profile intended for use at home or
+on laptops that should not be integrated into the provided network
+services (no central home directory, no Kerberos / LDAP directory etc,
+in other word a single user machine). The result is 11 minutes long,
+and show some user applications (seem to be rather randomly picked).
+Missed a few of my favorites like celestia, planets and chromium
+showing the <a href="http://www.zygotebody.com/">Zygote Body 3D model
+of the human body</a>, but I guess he did not know about those or find
+other programs more interesting. :) And the video do not show the
+advantages I believe is one of the most valuable featuers in Debian
+Edu, its central school server making it possible to run hundreds of
+computers without hard drives by installing one central
+<a href="http://www.ltsp.org/">LTSP server</a>.</p>
+
+<p>Anyway, check out the video, embedded below and linked to above:</p>
+
+<iframe width="420" height="315" src="http://www.youtube.com/embed/w-GgpdqgLFc" frameborder="0" allowfullscreen></iframe>
+
+<p>Are there other nice videos demonstrating Skolelinux? Please let
+me know. :)</p>
+</div>
+ <div class="tags">
+
+
+ Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/video">video</a>.
+
+
+ </div>
+ </div>
+ <div class="padding"></div>
+
+ <div class="entry">
+ <div class="title"><a href="http://people.skolelinux.org/pere/blog/Finally__Debian_Edu_Wheezy_is_released_today_.html">Finally, Debian Edu Wheezy is released today!</a></div>
+ <div class="date">29th September 2013</div>
+ <div class="body"><p>A few hours ago, the announcement for the first stable release of
+Debian Edu Wheezy went out from the Debian publicity team. The
+complete announcement text can be found at
+<a href="http://www.debian.org/News/2013/20130928">the Debian News
+section</a>, translated to several languages. Please check it out.</p>
+
+<p>There is one minor known problem that we will fix very soon. One
+can not install a amd64 Thin Client Server using PXE, as the /var/
+partition is too small. A workaround is to extend the partition (use
+lvresize + resize2fs in tty 2 while installing).</p>
+</div>
+ <div class="tags">
+
+
+ Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
+
+
+ </div>
+ </div>
+ <div class="padding"></div>
+
+ <div class="entry">
+ <div class="title"><a href="http://people.skolelinux.org/pere/blog/Videos_about_the_Freedombox_project___for_inspiration_and_learning.html">Videos about the Freedombox project - for inspiration and learning</a></div>
+ <div class="date">27th September 2013</div>
+ <div class="body"><p>The <a href="http://www.freedomboxfoundation.org/">Freedombox
+project</a> have been going on for a while, and have presented the
+vision, ideas and solution several places. Here is a little
+collection of videos of talks and presentation of the project.</p>
+
+<ul>
+
+<li><a href="http://www.youtube.com/watch?v=ukvUz5taxvA">FreedomBox -
+2,5 minute marketing film</a> (Youtube)</li>
+
+<li><a href="http://www.youtube.com/watch?v=SzW25QTVWsE">Eben Moglen
+discusses the Freedombox on CBS news 2011</a> (Youtube)</li>
+
+<li><a href="http://www.youtube.com/watch?v=Ae8SZbxfE0g">Eben Moglen -
+Freedom in the Cloud - Software Freedom, Privacy and and Security for
+Web 2.0 and Cloud computing at ISOC-NY Public Meeting 2010</a>
+(Youtube)</li>
+
+<li><a href="http://www.youtube.com/watch?v=vNaIji_3xBE">Fosdem 2011
+Keynote by Eben Moglen presenting the Freedombox</a> (Youtube)</li>
+
+<li><a href="http://www.youtube.com/watch?v=9bDDUyJSQ9s">Presentation of
+the Freedombox by James Vasile at Elevate in Gratz 2011</a> (Youtube)</li>
+
+<li><a href="http://www.youtube.com/watch?v=zQTmnk27g9s"> Freedombox -
+Discovery, Identity, and Trust by Nick Daly at Freedombox Hackfest New
+York City in 2012</a> (Youtube)</li>
+
+<li><a href="http://www.youtube.com/watch?v=tkbSB4Ba7Ck">Introduction
+to the Freedombox at Freedombox Hackfest New York City in 2012</a>
+(Youtube)</li>
+
+<li><a href="http://www.youtube.com/watch?v=z-P2Jaeg0aQ">Freedom, Out
+of the Box! by Bdale Garbee at linux.conf.au Ballarat, 2012</a> (Youtube) </li>
+
+<li><a href="https://archive.fosdem.org/2013/schedule/event/freedombox/">Freedombox
+1.0 by Eben Moglen and Bdale Garbee at Fosdem 2013</a> (FOSDEM) </li>
+
+<li><a href="http://www.youtube.com/watch?v=e1LpYX2zVYg">What is the
+FreedomBox today by Bdale Garbee at Debconf13 in Vaumarcus
+2013</a> (Youtube)</li>
+
+</ul>
+
+<p>A larger list is available from
+<a href="https://wiki.debian.org/FreedomBox/TalksAndPresentations">the
+Freedombox Wiki</a>.</p>
+
+<p>On other news, I am happy to report that Freedombox based on Debian
+Jessie is coming along quite well, and soon both Owncloud and using
+Tor should be available for testers of the Freedombox solution. :) In
+a few weeks I hope everything needed to test it is included in Debian.
+The withsqlite package is already in Debian, and the plinth package is
+pending in NEW. The third and vital part of that puzzle is the
+metapackage/setup framework, which is still pending an upload. Join
+us on <a href="irc://irc.debian.org:6667/%23freedombox">IRC
+(#freedombox on irc.debian.org)</a> and
+<a href="http://lists.alioth.debian.org/mailman/listinfo/freedombox-discuss">the
+mailing list</a> if you want to help make this vision come true.</p>
+</div>
+ <div class="tags">
+
+
+ Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet</a>, <a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance</a>, <a href="http://people.skolelinux.org/pere/blog/tags/web">web</a>.
+
+
+ </div>
+ </div>
+ <div class="padding"></div>
+
+ <div class="entry">
+ <div class="title"><a href="http://people.skolelinux.org/pere/blog/Third_and_probably_last_beta_release_of_Debian_Edu_Wheezy.html">Third and probably last beta release of Debian Edu Wheezy</a></div>
+ <div class="date">16th September 2013</div>
+ <div class="body"><p>The third wheezy based beta release of Debian Edu was wrapped up
+today. This is the release announcement from Holger Levsen:</p>
+
+<blockquote>
+<p>Hi,</p>
+
+<p>it is my pleasure to announce the third beta release (beta 2 for
+short) of <a href="http://www.skolelinux.org/">Debian Edu /
+Skolelinux</a> based on Debian Wheezy!</p>
+
+<p>Please test these images extensivly, if no new problems are found
+we plan to do this final Debian Edu Wheezy release this coming
+weekend. We are not aware of any major problems or blockers in beta2,
+if you find something, please notify us immediately!</p>
+
+<p>(More about the remaining steps for the Edu Wheezy release in
+another mail to the edu list tonight or tomorrow...)</p>
+
+<p>Noteworthy changes and software updates for Debian Edu 7.1+edu0~b2
+compared to beta1:</p>
+
+<ul>
+
+<li>The KDE proxy setup has been adjusted to use the provided wpad.dat. This
+also gets Chromium to use this proxy.</li>
+<li>Install kdepim-groupware with KDE desktops to make sure korganizer
+understand ical/dav sources.</li>
+<li>Increased default maximum size of /var/spool/squid and /skole/backup on the
+main server.</li>
+<li>A source DVD image containing all source packages is now available as well.</li>
+<li>Updates for chromium (29.0.1547.57-1~deb7u1), imagemagick
+(6.7.7.10-5+deb7u2), php5 (5.4.4-14+deb7u4), libmodplug
+(0.8.8.4-3+deb7u1+git20130828), tiff (4.0.2-6+deb7u2), linux-image
+(3.2.0-4-486_3.2.46-1+deb7u1).</li>
+
+</ul>
+
+<p>Where to get it:</p>
+
+<p>To download the multiarch netinstall CD release you can use</p>
+
+<ul>
+<li><a href="ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-CD.iso">ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-CD.iso</a></li>
+<li><a href="http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-CD.iso">http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-CD.iso</a></li>
+<li>rsync -avzP ftp.skolelinux.org::skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-CD.iso .</li>
+</ul>
+
+<p>The SHA1SUM of this image is: 3a1c89f4666df80eebcd46c5bf5fedb866f9472f</p>
+
+<p>To download the multiarch USB stick ISO release you can use
+<ul>
+<li><a href="ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-USB.iso">ftp://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-USB.iso</a></li>
+<li><a href="http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-USB.iso">http://ftp.skolelinux.org/skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-USB.iso</a></li>
+<li>rsync -avzP ftp.skolelinux.org::skolelinux-cd/wheezy/debian-edu-7.1+edu0~b2-USB.iso .</li>
+</ul>
+
+<p>The SHA1SUM of this image is: 702d1718548f401c74bfa6df9f032cc3ee16597e</p>
+
+<p>The Source DVD image has the filename
+debian-edu-7.1+edu0~b2-source-DVD.iso and the SHA1SUM
+089eed8b3f962db47aae1f6a9685e9bb2fa30ca5 and is available the same way
+as the other isos.</p>
+
+<p>How to report bugs</p>
+
+<p>For information how to report bugs please see
+<br><a href="http://wiki.debian.org/DebianEdu/HowTo/ReportBugs">http://wiki.debian.org/DebianEdu/HowTo/ReportBugs</a></p>
+
+
+<p>About Debian Edu and Skolelinux</p>
+
+<p>Debian Edu, also known as Skolelinux, is a Linux distribution based
+on Debian providing an out-of-the box environment of a completely
+configured school network. Immediately after installation a school
+server running all services needed for a school network is set up just
+waiting for users and machines being added via GOsa², a comfortable
+Web-UI. A netbooting environment is prepared using PXE, so after
+initial installation of the main server from CD or USB stick all other
+machines can be installed via the network. The provided school server
+provides LDAP database and Kerberos authentication service,
+centralized home directories, DHCP server, web proxy and many other
+services. The desktop contains more than 60 educational software
+packages and more are available from the Debian archive, and schools
+can choose between KDE, Gnome, LXDE and Xfce desktop environment.</p>
+
+<p>This is the seventh test release based on Debian Wheezy. Basically
+this is an updated and slightly improved version compared to the
+Squeeze release.</p>
+
+<p>Notes for upgrades from Alpha Prereleases</p>
+
+<p>Alpha based installations should reinstall or downgrade the
+versions of gosa and libpam-mklocaluser to the ones used in this beta
+release. Both alpha and beta0 based installations should reinstall or
+deal with gosa.conf manually; there are two options: (1) Keep
+gosa.conf and edit this file as outlined on the mailing list. (2)
+Accept the new version of gosa.conf and replace both contained admin
+password placeholders with the password hashes found in the old one
+(backup copy!). In both cases all users need to change their password
+to make sure a password is set for CIFS access to their home
+directory.</p>
+
+
+<p>cheers,
+<br> Holger</p>
+</blockquote>
+</div>
+ <div class="tags">
+
+
+ Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
+
+
+ </div>
+ </div>
+ <div class="padding"></div>
+
+ <div class="entry">
+ <div class="title"><a href="http://people.skolelinux.org/pere/blog/Recipe_to_test_the_Freedombox_project_on_amd64_or_Raspberry_Pi.html">Recipe to test the Freedombox project on amd64 or Raspberry Pi</a></div>
+ <div class="date">10th September 2013</div>
+ <div class="body"><p>I was introduced to the
+<a href="http://www.freedomboxfoundation.org/">Freedombox project</a>
+in 2010, when Eben Moglen presented his vision about serving the need
+of non-technical people to keep their personal information private and
+within the legal protection of their own homes. The idea is to give
+people back the power over their network and machines, and return
+Internet back to its intended peer-to-peer architecture. Instead of
+depending on a central service, the Freedombox will give everyone
+control over their own basic infrastructure.</p>
+
+<p>I've intended to join the effort since then, but other tasks have
+taken priority. But this summers nasty news about the misuse of trust
+and privilege exercised by the "western" intelligence gathering
+communities increased my eagerness to contribute to a point where I
+actually started working on the project a while back.</p>
+
+<p>The <a href="https://alioth.debian.org/projects/freedombox/">initial
+Debian initiative</a> based on the vision from Eben Moglen, is to
+create a simple and cheap Debian based appliance that anyone can hook
+up in their home and get access to secure and private services and
+communication. The initial deployment platform have been the
+<a href="http://www.globalscaletechnologies.com/t-dreamplugdetails.aspx">Dreamplug</a>,
+which is a piece of hardware I do not own. So to be able to test what
+the current Freedombox setup look like, I had to come up with a way to install
+it on some hardware I do have access to. I have rewritten the
+<a href="https://github.com/NickDaly/freedom-maker">freedom-maker</a>
+image build framework to use .deb packages instead of only copying
+setup into the boot images, and thanks to this rewrite I am able to
+set up any machine supported by Debian Wheezy as a Freedombox, using
+the previously mentioned deb (and a few support debs for packages
+missing in Debian).</p>
+
+<p>The current Freedombox setup consist of a set of bootstrapping
+scripts
+(<a href="https://github.com/petterreinholdtsen/freedombox-setup">freedombox-setup</a>),
+and a administrative web interface
+(<a href="https://github.com/NickDaly/Plinth">plinth</a> + exmachina +
+withsqlite), as well as a privacy enhancing proxy based on
+<a href="http://packages.qa.debian.org/privoxy">privoxy</a>
+(freedombox-privoxy). There is also a web/javascript based XMPP
+client (<a href="http://packages.qa.debian.org/jwchat">jwchat</a>)
+trying (unsuccessfully so far) to talk to the XMPP server
+(<a href="http://packages.qa.debian.org/ejabberd">ejabberd</a>). The
+web interface is pluggable, and the goal is to use it to enable OpenID
+services, mesh network connectivity, use of TOR, etc, etc. Not much of
+this is really working yet, see
+<a href="https://github.com/NickDaly/freedombox-todos/blob/master/TODO">the
+project TODO</a> for links to GIT repositories. Most of the code is
+on github at the moment. The HTTP proxy is operational out of the
+box, and the admin web interface can be used to add/remove plinth
+users. I've not been able to do anything else with it so far, but
+know there are several branches spread around github and other places
+with lots of half baked features.</p>
+
+<p>Anyway, if you want to have a look at the current state, the
+following recipes should work to give you a test machine to poke
+at.</p>
+
+<p><strong>Debian Wheezy amd64</strong></p>
+
+<ol>
+
+<li>Fetch normal Debian Wheezy installation ISO.</li>
+<li>Boot from it, either as CD or USB stick.</li>
+<li><p>Press [tab] on the boot prompt and add this as a boot argument
+to the Debian installer:<p>
+<pre>url=<a href="http://www.reinholdtsen.name/freedombox/preseed-wheezy.dat">http://www.reinholdtsen.name/freedombox/preseed-wheezy.dat</a></pre></li>
+
+<li>Answer the few language/region/password questions and pick disk to
+install on.</li>
+
+<li>When the installation is finished and the machine have rebooted a
+few times, your Freedombox is ready for testing.</li>
+
+</ol>
+
+<p><strong>Raspberry Pi Raspbian</strong></p>
+
+<ol>
+
+<li>Fetch a Raspbian SD card image, create SD card.</li>
+<li>Boot from SD card, extend file system to fill the card completely.</li>
+<li><p>Log in and add this to /etc/sources.list:</p>
+<pre>
+deb <a href="http://www.reinholdtsen.name/freedombox/">http://www.reinholdtsen.name/freedombox</a> wheezy main
+</pre></li>
+<li><p>Run this as root:</p>
+<pre>
+wget -O - http://www.reinholdtsen.name/freedombox/BE1A583D.asc | \
+ apt-key add -
+apt-get update
+apt-get install freedombox-setup
+/usr/lib/freedombox/setup
+</pre></li>
+<li>Reboot into your freshly created Freedombox.</li>
+
+</ol>
+
+<p>You can test it on other architectures too, but because the
+freedombox-privoxy package is binary, it will only work as intended on
+the architectures where I have had time to build the binary and put it
+in my APT repository. But do not let this stop you. It is only a
+short "<tt>apt-get source -b freedombox-privoxy</tt>" away. :)</p>
+
+<p>Note that by default Freedombox is a DHCP server on the
+192.168.1.0/24 subnet, so if this is your subnet be careful and turn
+off the DHCP server by running "<tt>update-rc.d isc-dhcp-server
+disable</tt>" as root.</p>
+
+<p>Please let me know if this works for you, or if you have any
+problems. We gather on the IRC channel
+<a href="irc://irc.debian.org:6667/%23freedombox">#freedombox</a> on
+irc.debian.org and the
+<a href="http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss">project
+mailing list</a>.</p>
+
+<p>Once you get your freedombox operational, you can visit
+<tt>http://your-host-name:8001/</tt> to see the state of the plint
+welcome screen (dead end - do not be surprised if you are unable to
+get past it), and next visit <tt>http://your-host-name:8001/help/</tt>
+to look at the rest of plinth. The default user is 'admin' and the
+default password is 'secret'.</p>
+</div>
+ <div class="tags">
+
+
+ Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet</a>, <a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance</a>, <a href="http://people.skolelinux.org/pere/blog/tags/web">web</a>.
+
+
+ </div>
+ </div>
+ <div class="padding"></div>
+
<div class="entry">
<div class="title"><a href="http://people.skolelinux.org/pere/blog/Datalagringsdirektivet_gj_r_at_Oslo_H_yre_og_Arbeiderparti_ikke_f_r_min_stemme_i__r.html">Datalagringsdirektivet gjør at Oslo Høyre og Arbeiderparti ikke får min stemme i år</a></div>
<div class="date"> 8th September 2013</div>
registreres hvem de sendte SMS-meldinger til, hvem en har sendt epost
til, og hvilke nett-tjenere en besøkte. Saken er kjent som
<a href="http://beta.holderdeord.no/issues/innfore-datalagringsdirektivet">Datalagringsdirektivet
-(DLD)</a>, og innebærer at alle innbyggerne og andre innenfor norges
+(DLD)</a>, og innebærer at alle innbyggerne og andre innenfor Norges
grenser overvåkes døgnet rundt. Det ble i praksis innført brev og
besøkskontroll av hele befolkningen. Rapporter fra de landene som
allerede har innført slik total lagring av borgernes
-kommunkasjonsmønstre forteller at det ikke hjelper i
+kommunikasjonsmønstre forteller at det ikke hjelper i
kriminalitetsbekjempelsen. Den norske prislappen blir mange hundre
millioner, uten at det ser ut til å bidra positivt til politiets
arbeide. Jeg synes flere hundre millioner i stedet burde vært brukt
informasjonen gjør det mulig å finne ut hvem som har snakket med
journalister på telefon, SMS og epost, og hvem som har vært i nærheten
av journalister så sant begge bar med seg en telefon. Et annet er at
-aadvokatvernet blir sterkt redusert, der politiet kan finne ut hvem
+advokatvernet blir sterkt redusert, der politiet kan finne ut hvem
som har snakket med en advokat når, eller vært i møter en med advokat.
Et tredje er at svært personlig informasjon kan avledes fra hvilke
nettsteder en har besøkt. Har en besøkt hivnorge.no,
</div>
<div class="padding"></div>
- <div class="entry">
- <div class="title"><a href="http://people.skolelinux.org/pere/blog/How_to_fix_a_Thinkpad_X230_with_a_broken_180_GB_SSD_disk.html">How to fix a Thinkpad X230 with a broken 180 GB SSD disk</a></div>
- <div class="date">17th July 2013</div>
- <div class="body"><p>Today I switched to
-<a href="http://people.skolelinux.org/pere/blog/The_Thinkpad_is_dead__long_live_the_Thinkpad_X230_.html">my
-new laptop</a>. I've previously written about the problems I had with
-my new Thinkpad X230, which was delivered with an
-<a href="http://people.skolelinux.org/pere/blog/Intel_SSD_520_Series_180_GB_with_Lenovo_firmware_still_lock_up_from_sustained_writes.html">180
-GB Intel SSD disk with Lenovo firmware</a> that did not handle
-sustained writes. My hardware supplier have been very forthcoming in
-trying to find a solution, and after first trying with another
-identical 180 GB disks they decided to send me a 256 GB Samsung SSD
-disk instead to fix it once and for all. The Samsung disk survived
-the installation of Debian with encrypted disks (filling the disk with
-random data during installation killed the first two), and I thus
-decided to trust it with my data. I have installed it as a Debian Edu
-Wheezy roaming workstation hooked up with my Debian Edu Squeeze main
-server at home using Kerberos and LDAP, and will use it as my work
-station from now on.</p>
-
-<p>As this is a solid state disk with no moving parts, I believe the
-Debian Wheezy default installation need to be tuned a bit to increase
-performance and increase life time of the disk. The Linux kernel and
-user space applications do not yet adjust automatically to such
-environment. To make it easier for my self, I created a draft Debian
-package <tt>ssd-setup</tt> to handle this tuning. The
-<a href="http://anonscm.debian.org/gitweb/?p=collab-maint/ssd-setup.git">source
-for the ssd-setup package</a> is available from collab-maint, and it
-is set up to adjust the setup of the machine by just installing the
-package. If there is any non-SSD disk in the machine, the package
-will refuse to install, as I did not try to write any logic to sort
-file systems in SSD and non-SSD file systems.</p>
-
-<p>I consider the package a draft, as I am a bit unsure how to best
-set up Debian Wheezy with an SSD. It is adjusted to my use case,
-where I set up the machine with one large encrypted partition (in
-addition to /boot), put LVM on top of this and set up partitions on
-top of this again. See the README file in the package source for the
-references I used to pick the settings. At the moment these
-parameters are tuned:</p>
-
-<ul>
-
-<li>Set up cryptsetup to pass TRIM commands to the physical disk
- (adding discard to /etc/crypttab)</li>
-
-<li>Set up LVM to pass on TRIM commands to the underlying device (in
- this case a cryptsetup partition) by changing issue_discards from
- 0 to 1 in /etc/lvm/lvm.conf.</li>
-
-<li>Set relatime as a file system option for ext3 and ext4 file
- systems.</li>
-
-<li>Tell swap to use TRIM commands by adding 'discard' to
- /etc/fstab.</li>
-
-<li>Change I/O scheduler from cfq to deadline using a udev rule.</li>
-
-<li>Run fstrim on every ext3 and ext4 file system every night (from
- cron.daily).</li>
-
-<li>Adjust sysctl values vm.swappiness to 1 and vm.vfs_cache_pressure
- to 50 to reduce the kernel eagerness to swap out processes.</li>
-
-</ul>
-
-<p>During installation, I cancelled the part where the installer fill
-the disk with random data, as this would kill the SSD performance for
-little gain. My goal with the encrypted file system is to ensure
-those stealing my laptop end up with a brick and not a working
-computer. I have no hope in keeping the really resourceful people
-from getting the data on the disk (see
-<a href="http://xkcd.com/538/">XKCD #538</a> for an explanation why).
-Thus I concluded that adding the discard option to crypttab is the
-right thing to do.</p>
-
-<p>I considered using the noop I/O scheduler, as several recommended
-it for SSD, but others recommended deadline and a benchmark I found
-indicated that deadline might be better for interactive use.</p>
-
-<p>I also considered using the 'discard' file system option for ext3
-and ext4, but read that it would give a performance hit ever time a
-file is removed, and thought it best to that that slowdown once a day
-instead of during my work.</p>
-
-<p>My package do not set up tmpfs on /var/run, /var/lock and /tmp, as
-this is already done by Debian Edu.</p>
-
-<p>I have not yet started on the user space tuning. I expect
-iceweasel need some tuning, and perhaps other applications too, but
-have not yet had time to investigate those parts.</p>
-
-<p>The package should work on Ubuntu too, but I have not yet tested it
-there.</p>
-
-<p>As for the answer to the question in the title of this blog post,
-as far as I know, the only solution I know about is to replace the
-disk. It might be possible to flash it with Intel firmware instead of
-the Lenovo firmware. But I have not tried and did not want to do so
-without approval from Lenovo as I wanted to keep the warranty on the
-disk until a solution was found and they wanted the broken disks
-back.</p>
-</div>
- <div class="tags">
-
-
- Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
-
-
- </div>
- </div>
- <div class="padding"></div>
-
- <div class="entry">
- <div class="title"><a href="http://people.skolelinux.org/pere/blog/Intel_SSD_520_Series_180_GB_with_Lenovo_firmware_still_lock_up_from_sustained_writes.html">Intel SSD 520 Series 180 GB with Lenovo firmware still lock up from sustained writes</a></div>
- <div class="date">10th July 2013</div>
- <div class="body"><p>A few days ago, I wrote about
-<a href="http://people.skolelinux.org/pere/blog/The_Thinkpad_is_dead__long_live_the_Thinkpad_X230_.html">the
-problems I experienced with my new X230 and its SSD disk</a>, which
-was dying during installation because it is unable to cope with
-sustained write. My supplier is in contact with
-<a href="http://www.lenovo.com/">Lenovo</a>, and they wanted to send a
-replacement disk to try to fix the problem. They decided to send an
-identical model, so my hopes for a permanent fix was slim.</p>
-
-<p>Anyway, today I got the replacement disk and tried to install
-Debian Edu Wheezy with encrypted disk on it. The new disk have the
-same firmware version as the original. This time my hope raised
-slightly as the installation progressed, as the original disk used to
-die after 4-7% of the disk was written to, while this time it kept
-going past 10%, 20%, 40% and even past 50%. But around 60%, the disk
-died again and I was back on square one. I still do not have a new
-laptop with a disk I can trust. I can not live with a disk that might
-lock up when I download a new
-<a href="http://www.skolelinux.org/">Debian Edu / Skolelinux</a> ISO or
-other large files. I look forward to hearing from my supplier with
-the next proposal from Lenovo.</p>
-
-<p>The original disk is marked Intel SSD 520 Series 180 GB,
-11S0C38722Z1ZNME35X1TR, ISN: CVCV321407HB180EGN, SA: G57560302, FW:
-LF1i, 29MAY2013, PBA: G39779-300, LBA 351,651,888, LI P/N: 0C38722,
-Pb-free 2LI, LC P/N: 16-200366, WWN: 55CD2E40002756C4, Model:
-SSDSC2BW180A3L 2.5" 6Gb/s SATA SSD 180G 5V 1A, ASM P/N 0C38732, FRU
-P/N 45N8295, P0C38732.</p>
-
-<p>The replacement disk is marked Intel SSD 520 Series 180 GB,
-11S0C38722Z1ZNDE34N0L0, ISN: CVCV315306RK180EGN, SA: G57560-302, FW:
-LF1i, 22APR2013, PBA: G39779-300, LBA 351,651,888, LI P/N: 0C38722,
-Pb-free 2LI, LC P/N: 16-200366, WWN: 55CD2E40000AB69E, Model:
-SSDSC2BW180A3L 2.5" 6Gb/s SATA SSD 180G 5V 1A, ASM P/N 0C38732, FRU
-P/N 45N8295, P0C38732.</p>
-
-<p>The only difference is in the first number (serial number?), ISN,
-SA, date and WNPP values. Mentioning all the details here in case
-someone is able to use the information to find a way to identify the
-failing disk among working ones (if any such working disk actually
-exist).</p>
-</div>
- <div class="tags">
-
-
- Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
-
-
- </div>
- </div>
- <div class="padding"></div>
-
- <div class="entry">
- <div class="title"><a href="http://people.skolelinux.org/pere/blog/July_13th__Debian_Ubuntu_BSP_and_Skolelinux_Debian_Edu_developer_gathering_in_Oslo.html">July 13th: Debian/Ubuntu BSP and Skolelinux/Debian Edu developer gathering in Oslo</a></div>
- <div class="date"> 9th July 2013</div>
- <div class="body"><p>The upcoming Saturday, 2013-07-13, we are organising a combined
-Debian Edu developer gathering and Debian and Ubuntu bug squashing
-party in Oslo. It is organised by <a href="http://www.nuug.no/">the
-member assosiation NUUG</a> and
-<a href="http://www.skolelinux.org/">the Debian Edu / Skolelinux
-project</a> together with <a href="http://bitraf.no/">the hack space
-Bitraf</a>.</p>
-
-<p>It starts 10:00 and continue until late evening. Everyone is
-welcome, and there is no fee to participate. There is on the other
-hand limited space, and only room for 30 people. Please put your name
-on <a href="http://wiki.debian.org/BSP/2013/07/13/no/Oslo">the event
-wiki page</a> if you plan to join us.</p>
-</div>
- <div class="tags">
-
-
- Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
-
-
- </div>
- </div>
- <div class="padding"></div>
-
- <div class="entry">
- <div class="title"><a href="http://people.skolelinux.org/pere/blog/The_Thinkpad_is_dead__long_live_the_Thinkpad_X230_.html">The Thinkpad is dead, long live the Thinkpad X230?</a></div>
- <div class="date"> 5th July 2013</div>
- <div class="body"><p>Half a year ago, I reported that I had to find a
-<a href="http://people.skolelinux.org/pere/blog/Thank_you_Thinkpad_X41__for_your_long_and_trustworthy_service.html">replacement
-for my trusty old Thinkpad X41</a>. Unfortunately I did not have much
-time to spend on it, and it took a while to find a model I believe
-will do the job, but two days ago the replacement finally arrived. I
-ended up picking a
-<a href="http://www.linlap.com/lenovo_thinkpad_x230">Thinkpad X230</a>
-with SSD disk (NZDAJMN). I first test installed Debian Edu Wheezy as
-a roaming workstation, and it seemed to work flawlessly. But my
-second installation with encrypted disk was not as successful. More
-on that below.</p>
-
-<p>I had a hard time trying to track down a good laptop, as my most
-important requirements (robust and with a good keyboard) are never
-listed in the feature list. But I did get good help from the search
-feature at <a href="http://www.prisjakt.no/">Prisjakt</a>, which
-allowed me to limit the list of interesting laptops based on my other
-requirements. A bit surprising that SSD disk are not disks according
-to that search interface, so I had to drop specifying the number of
-disks from my search parameters. I also asked around among friends to
-get their impression on keyboards and robustness.</p>
-
-<p>So the new laptop arrived, and it is quite a lot wider than the
-X41. I am not quite convinced about the keyboard, as it is
-significantly wider than my old keyboard, and I have to stretch my
-hand a lot more to reach the edges. But the key response is fairly
-good and the individual key shape is fairly easy to handle, so I hope
-I will get used to it. My old X40 was starting to fail, and I really
-needed a new laptop now. :)</p>
-
-<p>Turning off the touch pad was simple. All it took was a quick
-visit to the BIOS during boot it disable it.</p>
-
-<p>But there is a fatal problem with the laptop. The 180 GB SSD disk
-lock up during load. And this happen when installing Debian Wheezy
-with encrypted disk, while the disk is being filled with random data.
-I also tested to install Ubuntu Raring, and it happen there too if I
-reenable the code to fill the disk with random data (it is disabled by
-default in Ubuntu). And the bug with is already known. It was
-reported to Debian as <a href="http://bugs.debian.org/691427">BTS
-report #691427 2012-10-25</a> (journal commit I/O error on brand-new
-Thinkpad T430s ext4 on lvm on SSD). It is also reported to the Linux
-kernel developers as
-<a href="https://bugzilla.kernel.org/show_bug.cgi?id=51861">Kernel bugzilla
-report #51861 2012-12-20</a> (Intel SSD 520 stops working under load
-(SSDSC2BW180A3L in Lenovo ThinkPad T430s)). It is also reported on the
-Lenovo forums, both for
-<a href="http://forums.lenovo.com/t5/T400-T500-and-newer-T-series/T430s-Intel-SSD-520-180GB-issue/m-p/1070549">T430
-2012-11-10</a> and for
-<a href="http://forums.lenovo.com/t5/X-Series-ThinkPad-Laptops/x230-SATA-errors-with-180GB-Intel-520-SSD-under-heavy-write-load/m-p/1068147">X230
-03-20-2013</a>. The problem do not only affect installation. The
-reports state that the disk lock up during use if many writes are done
-on the disk, so it is much no use to work around the installation
-problem and end up with a computer that can lock up at any moment.
-There is even a
-<a href="https://git.efficios.com/?p=test-ssd.git">small C program
-available</a> that will lock up the hard drive after running a few
-minutes by writing to a file.</p>
-
-<p>I've contacted my supplier and asked how to handle this, and after
-contacting PCHELP Norway (request 01D1FDP) which handle support
-requests for Lenovo, his first suggestion was to upgrade the disk
-firmware. Unfortunately there is no newer firmware available from
-Lenovo, as my disk already have the most recent one (version LF1i). I
-hope to hear more from him today and hope the problem can be
-fixed. :)</p>
-</div>
- <div class="tags">
-
-
- Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
-
-
- </div>
- </div>
- <div class="padding"></div>
-
- <div class="entry">
- <div class="title"><a href="http://people.skolelinux.org/pere/blog/The_Thinkpad_is_dead__long_live_the_Thinkpad_X230.html">The Thinkpad is dead, long live the Thinkpad X230</a></div>
- <div class="date"> 4th July 2013</div>
- <div class="body"><p>Half a year ago, I reported that I had to find a replacement for my
-trusty old Thinkpad X41. Unfortunately I did not have much time to
-spend on it, but today the replacement finally arrived. I ended up
-picking a <a href="http://www.linlap.com/lenovo_thinkpad_x230">Thinkpad
-X230</a> with SSD disk (NZDAJMN). I first test installed Debian Edu
-Wheezy as a roaming workstation, and it worked flawlessly. As I write
-this, it is installing what I hope will be a more final installation,
-with a encrypted hard drive to ensure any dope head stealing it end up
-with an expencive door stop.</p>
-
-<p>I had a hard time trying to track down a good laptop, as my most
-important requirements (robust and with a good keyboard) are never
-listed in the feature list. But I did get good help from the search
-feature at <ahref="http://www.prisjakt.no/">Prisjakt</a>, which
-allowed me to limit the list of interesting laptops based on my other
-requirements. A bit surprising that SSD disk are not disks, so I had
-to drop number of disks from my search parameters.</p>
-
-<p>I am not quite convinced about the keyboard, as it is significantly
-wider than my old keyboard, and I have to stretch my hand a lot more
-to reach the edges. But the key response is fairly good and the
-individual key shape is fairly easy to handle, so I hope I will get
-used to it. My old X40 was starting to fail, and I really needed a
-new laptop now. :)</p>
-
-<p>I look forward to figuring out how to turn off the touch pad.</p>
-</div>
- <div class="tags">
-
-
- Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
-
-
- </div>
- </div>
- <div class="padding"></div>
-
<p style="text-align: right;"><a href="index.rss"><img src="http://people.skolelinux.org/pere/blog/xml.gif" alt="RSS feed" width="36" height="14" /></a></p>
<div id="sidebar">
<li><a href="http://people.skolelinux.org/pere/blog/archive/2013/08/">August (3)</a></li>
-<li><a href="http://people.skolelinux.org/pere/blog/archive/2013/09/">September (1)</a></li>
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2013/09/">September (5)</a></li>
+
+<li><a href="http://people.skolelinux.org/pere/blog/archive/2013/10/">October (1)</a></li>
</ul></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/bsa">bsa (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/debian">debian (84)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/debian">debian (86)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (139)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (142)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/digistan">digistan (10)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/drivstoffpriser">drivstoffpriser (4)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/english">english (213)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/english">english (218)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (21)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/freeculture">freeculture (12)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox (2)</a></li>
+
<li><a href="http://people.skolelinux.org/pere/blog/tags/frikanalen">frikanalen (11)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju (37)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/scraperwiki">scraperwiki (2)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (29)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (31)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (4)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/stortinget">stortinget (8)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance (16)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance (18)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/sysadmin">sysadmin (1)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/valg">valg (8)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/video">video (38)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/video">video (39)</a></li>
<li><a href="http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (4)</a></li>
- <li><a href="http://people.skolelinux.org/pere/blog/tags/web">web (26)</a></li>
+ <li><a href="http://people.skolelinux.org/pere/blog/tags/web">web (28)</a></li>
</ul>
projects / homepage.git / blobdiff