X-Git-Url: https://pere.pagekite.me/gitweb/homepage.git/blobdiff_plain/416b9a7d901a030c301b710560fdea46357bcee3..d3a7ce86b16da092e58f0cb614bdd6fc6be5513c:/blog/index.html?ds=inline diff --git a/blog/index.html b/blog/index.html index d2b72fc237..d2e9ca02f0 100644 --- a/blog/index.html +++ b/blog/index.html @@ -20,72 +20,167 @@
-
Videos about the Freedombox project - for inspiration and learning
-
27th September 2013
-

The Freedombox -project have been going on for a while, and have presented the -vision, ideas and solution several places. Here is a little -collection of videos of talks and presentation of the project.

- - - -

A larger list is available from -the -Freedombox Wiki.

- -

On other news, I am happy to report that Freedombox based on Debian -Jessie is coming along quite well, and soon both Owncloud and using -Tor should be available for testers of the Freedombox solution. :) In -a few weeks I hope everything needed to test it is included in Debian. -The withsqlite package is already in Debian, and the plinth package is -pending in NEW. The third and vital part of that puzzle is the -metapackage/setup framework, which is still pending an upload. Join -us on IRC -(#freedombox on irc.debian.org) and -the -mailing list if you want to help make this vision come true.

+ +
3rd August 2014
+

Lenge siden jeg har hatt tid til å publisere lenker til skriverier +jeg har hatt glede og nytte av av å lese. Her er en liten norsk +lenkesamling.

+ +

    + +
  • Sjøslag +om fiskemilliardene (NRK Ytring 2014-03-03) - litt om hvordan de +norske felles matressurser røves fra felleskapet.
  • + +
  • Matkrisen +kan komme til Norge (Aftenposten 2014-4-01) - hvordan miljøendringene vil gjøre matproduksjonen i Norge mer sÃ¥rbar.
  • + +
  • Norge +trenger kornlager (NRK Ytring 2014-06-07) Chr. Anton Smedshaug +forteller litt om Norges sÃ¥rbare matsituasjon etter at Staten solgte +Norges kornlager.
  • + +
  • PST +vil overvÃ¥ke datatastaturer (NRK 2014-03-04) - PST ønsker retten +til Ã¥ bryte seg inn pÃ¥ private PC-er og legge inn spionprogrammer. +Hvilket nok vil gjøre Linux mer populært, men gjør at en i enda mindre +grad enn i dag kan stole pÃ¥ datamaskiner - neppe en god ide for +samfunnet totalt sett.
  • + +
  • «Ruter +fremstÃ¥r som et pøbelvelde» (OsloBy 2014-03-05) - et eksempel pÃ¥ +hvordan kollektivtransportselskapet i Oslo hÃ¥ndterer sine kunder.
  • + +
  • Clear +Channel nektet Ã¥ vise Greenpeace-reklame i Oslo (Dagbladet +2014-03-05) - forteller litt om hvordan hvilke budskap som nÃ¥r ut i +det offentlige rom kontrolleres i Norge.
  • + +
  • Svarte +ikke pÃ¥ kritikken (Dagbladet 2014-03-06) - innlegg fra Norsk +presseforbund der de nok en gang tar opp det forkastelige i at +politiet nÃ¥ har full tilgang til Ã¥ bedrive telefonkontroll av +advokater.
  • + +
  • «Putin +spiller poker, ikke sjakk. I sjakk har man regler.» (Aftenposten +2014-03-08) - sjakklegenden Kasparov forklarer litt om hvordan han ser +at Russlands politikk fungerer, blant annet i lys av started av +Ukraina-krisen.
  • + +
  • I +seng med fienden (Aftenposten 2014-03-10) - kronikk fra Eirik +H. Vinje om hvordan menn og kvinner settes opp mot hverandre i det +offentlige ordskiftet, kanskje pÃ¥ sviktende grunnlag.
  • + +
  • Fritt +frem for skulk (Aftenposten 2014-03-14) - skildring av hvordan +norske elever i dag ikke lenger har rimelig krav om oppmøte pÃ¥ +skolen.
  • + +
  • «Datalagringsdirektiv» +avslørte abort, sykdom og vÃ¥penkjøp (Aftenposten 2014-03-14) - om +hvordan forskere har dokumentert hvordan innsamling av metadata om +telefoni og Internett-bruk kan være svært avslørende.
  • + +
  • Konsentrasjonssvikt +pÃ¥ pensum (Dagbladet 2014-03-14) - Kommentar om hvordan (feil) +bruk IKT i skolen kan ødelegge mer enn det bidrar til læring.
  • + +
  • Reservasjonsrettsstaten +(blogg fra Doremus 2014-02-09) - morsom beskrivelse om hvordan +regjeringens forslag til reservasjonsrett for leger kan utvides til Ã¥ +gjelde alles samvittighet.
  • + +
  • Autoritær +gjøkunge (Aftenposten 2014-03-25) - Kronikk av Bjørn Stærk om +snurpenots-overvÃ¥kningen som varsleren Snowden dokumenterte.
  • + +
  • Leveransekrise +i Offentlig sektor – mener Mike Bracken, Executive Director of Digital +in the Cabinet Office (blogg fra Friprog-senteret 2014-03-26).
  • + +
  • Norge +mÃ¥ stanse avlyttingen (Dagbladet 2014-03-26) - leserinnlegg fra +Felix Horne der han ber om at Norge gjør en innsats for Ã¥ fÃ¥ slutt pÃ¥ +overvÃ¥kning av innbyggerne som gjøres i Norge av Etiopiske +myndigheter.
  • + +
  • Demokrati +er ingen naturlig styreform (Aftenposten 2014-04-01) - kronikk av +Stein Ringen om hvordan demokrati som styreform gÃ¥r tapt nÃ¥r +innbyggerne tar det for gitt.
  • + +
  • Ytringsansvar +ere Enhver tilladte! (NRK Ytring 2014-04-01) - innspill fra Trygve +Svensson og Helge Svare om at hver enkelt av oss har et ansvar for Ã¥ +ytre oss i den offentlige debatten.
  • + +
  • Jeg +er ingen god samfunnsborger (Aftenposten 2014-04-16), kronikk av +Simen Tveitereid om alternative mÃ¥ter Ã¥ motiveres i samfunnet, uten Ã¥ +hige etter mer penger og flere ting.
  • + +
  • DLD-dommen: +Avgjørelsen fÃ¥r umiddelbar virkning (Aftenposten 2014-04-10) - +kronikk av Høyres Michael Tetzschner, en partiutbryter i DLD-saken som +stemte nei til DLD i Stortinget i 2011.
  • + +
  • Datalagringsdirektivets +endelikt (blogg fra John Wessel-Aas 2014-04-11) - oppsummering +av hvordan direktivet ble funnet ugyldig i EU-domstolen.
  • + +
  • Kronikk: +Kapitulasjonspresidenten (VG 2014-04-22) - kronikk av Einar +Kr. Steffenak om hvordan Stortingspresidenten og regjeringen viser sin +prinsippløshet i møte med Kina.
  • + +
  • Innerst +inne er alle nordmenn (Aftenposten 2014-04-27) - kronikk fra Bjørn +Stærk om hvordan vi i Vesten i stor grad baserer oss pÃ¥ en fantasi om +at alle i verden bærer pÃ¥ en drøm om Ã¥ bli som oss.
  • + +
  • Det +italienske senatet gav seg selv 134 milliarder euro i sluttpakke +(Aftenposten 2014-06-19) - forsker Simen Gaure forteller hvordan +løgner og fantasi fra nettkilder i stor grad blir akseptert som +sannhet - antagelig ogsÃ¥ av deg og meg.
  • + +
  • Et +forsvar for brÃ¥kmakerne (Dagbladet 2014-05-30) - kronikk av Dag +Øystein Nome som beskriver hvordan dagens skole ikke fungerer sÃ¥ godt +for mange elever.
  • + +
  • Betalte +med slitt seddel - havnet i arresten (Osloby 2014-06-25)) - +dokumentasjon av Oslopolitiets angrep pÃ¥ vÃ¥r alles rett til Ã¥ ferdes +uten elektronisk sporing. Jeg bruker kontanter i sÃ¥ stor grad som +mulig da banken ikke har noe med hvor jeg er og hva jeg kjøper. Vi +som gjør dette risikerer som beskrevet overgrep som frihetsberøvelse +og registrering og lagring av fingeravtrykk og bilde i politiets +database over mistenkte.
  • + +
  • Fredsprisen +til Snowden (Aftenposten 2014-06-28) - leder som forklarer hvorfor +varsleren Snowden bør fÃ¥ fredsprisen.
  • + +
  • Strategi +for politistaten (Dagbladet 2014-08-01) - leder som advarer om +sterke krefter som bruker terrortrusselen til Ã¥ lirke Norge nærmere Ã¥ +bli en politistat.
  • + +
  • Vi +mÃ¥ tenke nytt om narkotika (NRK Ytring 2014-08-03) - Mark Lewis +forklarer hvorfor legalisering og offentlig kontroll av +narkotikamarkedet er mye bedre enn Ã¥ overlate det til kriminelle.
  • + + +

@@ -93,119 +188,134 @@ mailing list if you want to help make this vision come true.

- -
16th September 2013
-

The third wheezy based beta release of Debian Edu was wrapped up -today. This is the release announcement from Holger Levsen:

- -
-

Hi,

- -

it is my pleasure to announce the third beta release (beta 2 for -short) of Debian Edu / -Skolelinux based on Debian Wheezy!

- -

Please test these images extensivly, if no new problems are found -we plan to do this final Debian Edu Wheezy release this coming -weekend. We are not aware of any major problems or blockers in beta2, -if you find something, please notify us immediately!

- -

(More about the remaining steps for the Edu Wheezy release in -another mail to the edu list tonight or tomorrow...)

- -

Noteworthy changes and software updates for Debian Edu 7.1+edu0~b2 -compared to beta1:

- -
    - -
  • The KDE proxy setup has been adjusted to use the provided wpad.dat. This -also gets Chromium to use this proxy.
  • -
  • Install kdepim-groupware with KDE desktops to make sure korganizer -understand ical/dav sources.
  • -
  • Increased default maximum size of /var/spool/squid and /skole/backup on the -main server.
  • -
  • A source DVD image containing all source packages is now available as well.
  • -
  • Updates for chromium (29.0.1547.57-1~deb7u1), imagemagick -(6.7.7.10-5+deb7u2), php5 (5.4.4-14+deb7u4), libmodplug -(0.8.8.4-3+deb7u1+git20130828), tiff (4.0.2-6+deb7u2), linux-image -(3.2.0-4-486_3.2.46-1+deb7u1).
  • - -
- -

Where to get it:

- -

To download the multiarch netinstall CD release you can use

- - - -

The SHA1SUM of this image is: 3a1c89f4666df80eebcd46c5bf5fedb866f9472f

- -

To download the multiarch USB stick ISO release you can use -

- -

The SHA1SUM of this image is: 702d1718548f401c74bfa6df9f032cc3ee16597e

- -

The Source DVD image has the filename -debian-edu-7.1+edu0~b2-source-DVD.iso and the SHA1SUM -089eed8b3f962db47aae1f6a9685e9bb2fa30ca5 and is available the same way -as the other isos.

- -

How to report bugs

- -

For information how to report bugs please see -
http://wiki.debian.org/DebianEdu/HowTo/ReportBugs

- - -

About Debian Edu and Skolelinux

- -

Debian Edu, also known as Skolelinux, is a Linux distribution based -on Debian providing an out-of-the box environment of a completely -configured school network. Immediately after installation a school -server running all services needed for a school network is set up just -waiting for users and machines being added via GOsa², a comfortable -Web-UI. A netbooting environment is prepared using PXE, so after -initial installation of the main server from CD or USB stick all other -machines can be installed via the network. The provided school server -provides LDAP database and Kerberos authentication service, -centralized home directories, DHCP server, web proxy and many other -services. The desktop contains more than 60 educational software -packages and more are available from the Debian archive, and schools -can choose between KDE, Gnome, LXDE and Xfce desktop environment.

- -

This is the seventh test release based on Debian Wheezy. Basically -this is an updated and slightly improved version compared to the -Squeeze release.

- -

Notes for upgrades from Alpha Prereleases

+ +
31st July 2014
+

The complete and free “out of the box” software solution for +schools, Debian Edu / +Skolelinux, is used quite a lot in Germany, and one of the people +involved is Bernd Zeitzen, who show up on the project mailing lists +from time to time with interesting questions and tips on how to adjust +the setup. I managed to interview him this summer.

+ +

Who are you, and how do you spend your days?

+ +

My name is Bernd Zeitzen and I'm married with Hedda, a self +employed physiotherapist. My former profession is tool maker, but I +haven't worked for 30 years in this job. 30 years ago I started to +support my wife and become her officeworker and a few years later the +administrator for a small computer network, today based on Ubuntu +Server (Samba, OpenVPN). For her daily work she has to use Windows +Desktops because the software she needs to organize her business only +works with Windows . :-(

+ +

In 1988 we started with one PC and DOS, then I learned to use +Windows 98, 2000, XP, …, 8, Ubuntu, MacOSX. Today we are running a +Linux server with 6 Windows clients and 10 persons (teacher of +children with special needs, speech therapist, occupational therapist, +psychologist and officeworkers) using our Samba shares via OpenVPN to +work with the documentations of our patients.

+ +

How did you get in contact with the Skolelinux / Debian Edu +project?

+ +

Two years ago a friend of mine asked me, if I want to get a job in +his school (Gymnasium +Harsewinkel). They started with Skolelinux / Debian Edu and they +were looking for people to give support to the teachers using the +software and the network and teaching the pupils increasing their +computer skills in optional lessons. I'm spending 4-6 hours a week +with this job.

+ +

What do you see as the advantages of Skolelinux / Debian +Edu?

+ +

The independence.

+ +

First: Every person is allowed to use, share and develop the +software. Even if you are poor, you are allowed to use the software +included in Skolelinux/Debian Edu and all the other Free Software.

+ +

Second: The software runs on old machines and this gives us the +possibility to recycle computers, weeded out from offices. The +servers and desktops are running for more than two years and they are +working reliable.

+ +

We have two servers (one tjener and one terminal server), 45 +workstations in three classrooms and seven laptops as a mobile +solution for all classrooms. These machines are all booting from the +terminal server. In the moment we are installing 30 laptops as mobile +workstations. Then the pupils have the possibility to work with these +machines in their classrooms. Internet access is realized by a WLAN +router, connected to the schools network. This is all done without a +dedicated system administrator or a computer science teacher.

+ +

What do you see as the disadvantages of Skolelinux / Debian +Edu?

+ +

Teachers and pupils are Windows users. <Irony on> And Linux +isn't cool. It's software for freaks using the command line. <Irony +off> They don't realize the stability of the system.

+ +

Which free software do you use daily?

+ +

Firefox, Thunderbird, LibreOffice, Ubuntu Server 12.04 (Samba, +Apache, MySQL, Joomla!, … and Skolelinux / Debian Edu)

+ +

Which strategy do you believe is the right one to use to +get schools to use free software?

+ +

In Germany we have the situation: every school is free to decide +which software they want to use. This decision is influenced by +teachers who learned to use Windows and MS Office. They buy a PC with +Windows preinstalled and an additional testing version of MS +Office. They don't know about the possibility to use Free Software +instead. Another problem are the publisher of school books. They +develop their software, added to the school books, for Windows.

+
+
+ + + Tags: debian edu, english, intervju. + + +
+
+
+ +
+ +
23rd July 2014
+

This summer I finally had time to continue working on the Norwegian +docbook version of the 2004 book +Free Culture by Lawrence Lessig, +to get a Norwegian text explaining the problems with todays copyright +law. Yesterday, I finally completed translated the book text. There +are still some foot/end notes left to translate, the colophon page +need to be rewritten, and a few words and phrases still need to be +translated, but the Norwegian text is ready for the first proof +reading. :) More spell checking is needed, and several illustrations +need to be cleaned up. The work stopped up because I had to give +priority to other projects the last year, and the progress graph of +the translation show this very well:

-

Alpha based installations should reinstall or downgrade the -versions of gosa and libpam-mklocaluser to the ones used in this beta -release. Both alpha and beta0 based installations should reinstall or -deal with gosa.conf manually; there are two options: (1) Keep -gosa.conf and edit this file as outlined on the mailing list. (2) -Accept the new version of gosa.conf and replace both contained admin -password placeholders with the password hashes found in the old one -(backup copy!). In both cases all users need to change their password -to make sure a password is set for CIFS access to their home -directory.

+

+

If you want to read the result, check out the +github +project pages and the +PDF, +EPUB +and HTML version available in the +archive +directory.

-

cheers, -
Holger

- +

Please report typos, bugs and improvements to the github project if +you find any.

@@ -213,135 +323,111 @@ directory.

- -
10th September 2013
-

I was introduced to the -Freedombox project -in 2010, when Eben Moglen presented his vision about serving the need -of non-technical people to keep their personal information private and -within the legal protection of their own homes. The idea is to give -people back the power over their network and machines, and return -Internet back to its intended peer-to-peer architecture. Instead of -depending on a central service, the Freedombox will give everyone -control over their own basic infrastructure.

- -

I've intended to join the effort since then, but other tasks have -taken priority. But this summers nasty news about the misuse of trust -and privilege exercised by the "western" intelligence gathering -communities increased my eagerness to contribute to a point where I -actually started working on the project a while back.

- -

The initial -Debian initiative based on the vision from Eben Moglen, is to -create a simple and cheap Debian based appliance that anyone can hook -up in their home and get access to secure and private services and -communication. The initial deployment platform have been the -Dreamplug, -which is a piece of hardware I do not own. So to be able to test what -the current Freedombox setup look like, I had to come up with a way to install -it on some hardware I do have access to. I have rewritten the -freedom-maker -image build framework to use .deb packages instead of only copying -setup into the boot images, and thanks to this rewrite I am able to -set up any machine supported by Debian Wheezy as a Freedombox, using -the previously mentioned deb (and a few support debs for packages -missing in Debian).

- -

The current Freedombox setup consist of a set of bootstrapping -scripts -(freedombox-setup), -and a administrative web interface -(plinth + exmachina + -withsqlite), as well as a privacy enhancing proxy based on -privoxy -(freedombox-privoxy). There is also a web/javascript based XMPP -client (jwchat) -trying (unsuccessfully so far) to talk to the XMPP server -(ejabberd). The -web interface is pluggable, and the goal is to use it to enable OpenID -services, mesh network connectivity, use of TOR, etc, etc. Not much of -this is really working yet, see -the -project TODO for links to GIT repositories. Most of the code is -on github at the moment. The HTTP proxy is operational out of the -box, and the admin web interface can be used to add/remove plinth -users. I've not been able to do anything else with it so far, but -know there are several branches spread around github and other places -with lots of half baked features.

- -

Anyway, if you want to have a look at the current state, the -following recipes should work to give you a test machine to poke -at.

- -

Debian Wheezy amd64

- -
    - -
  1. Fetch normal Debian Wheezy installation ISO.
  2. -
  3. Boot from it, either as CD or USB stick.
  4. -
  5. Press [tab] on the boot prompt and add this as a boot argument -to the Debian installer:

    -

    url=http://www.reinholdtsen.name/freedombox/preseed-wheezy.dat
  6. - -
  7. Answer the few language/region/password questions and pick disk to -install on.
  8. - -
  9. When the installation is finished and the machine have rebooted a -few times, your Freedombox is ready for testing.
  10. - -
- -

Raspberry Pi Raspbian

- -
    - -
  1. Fetch a Raspbian SD card image, create SD card.
  2. -
  3. Boot from SD card, extend file system to fill the card completely.
  4. -
  5. Log in and add this to /etc/sources.list:

    -
    -deb http://www.reinholdtsen.name/freedombox wheezy main
    -
  6. -
  7. Run this as root:

    -
    -wget -O - http://www.reinholdtsen.name/freedombox/BE1A583D.asc | \
    -   apt-key add -
    -apt-get update
    -apt-get install freedombox-setup
    -/usr/lib/freedombox/setup
    -
  8. -
  9. Reboot into your freshly created Freedombox.
  10. - -
- -

You can test it on other architectures too, but because the -freedombox-privoxy package is binary, it will only work as intended on -the architectures where I have had time to build the binary and put it -in my APT repository. But do not let this stop you. It is only a -short "apt-get source -b freedombox-privoxy" away. :)

- -

Note that by default Freedombox is a DHCP server on the -192.168.1.0/24 subnet, so if this is your subnet be careful and turn -off the DHCP server by running "update-rc.d isc-dhcp-server -disable" as root.

- -

Please let me know if this works for you, or if you have any -problems. We gather on the IRC channel -#freedombox on -irc.debian.org and the -project -mailing list.

- -

Once you get your freedombox operational, you can visit -http://your-host-name:8001/ to see the state of the plint -welcome screen (dead end - do not be surprised if you are unable to -get past it), and next visit http://your-host-name:8001/help/ -to look at the rest of plinth. The default user is 'admin' and the -default password is 'secret'.

+ +
17th June 2014
+

The Debian Edu / Skolelinux +project provide an instruction manual for teachers, system +administrators and other users that contain useful tips for setting up +and maintaining a Debian Edu installation. This text is about how the +text processing of this manual is handled in the project.

+ +

One goal of the project is to provide information in the native +language of its users, and for this we need to handle translations. +But we also want to make sure each language contain the same +information, so for this we need a good way to keep the translations +in sync. And we want it to be easy for our users to improve the +documentation, avoiding the need to learn special formats or tools to +contribute, and the obvious way to do this is to make it possible to +edit the documentation using a web browser. We also want it to be +easy for translators to keep the translation up to date, and give them +help in figuring out what need to be translated. Here is the list of +tools and the process we have found trying to reach all these +goals.

+ +

We maintain the authoritative source of our manual in the +Debian +wiki, as several wiki pages written in English. It consist of one +front page with references to the different chapters, several pages +for each chapter, and finally one "collection page" gluing all the +chapters together into one large web page (aka +the +AllInOne page). The AllInOne page is the one used for further +processing and translations. Thanks to the fact that the +MoinMoin installation on +wiki.debian.org support exporting pages in +the Docbook format, we can fetch +the list of pages to export using the raw version of the AllInOne +page, loop over each of them to generate a Docbook XML version of the +manual. This process also download images and transform image +references to use the locally downloaded images. The generated +Docbook XML files are slightly broken, so some post-processing is done +using the documentation/scripts/get_manual program, and the +result is a nice Docbook XML file (debian-edu-wheezy-manual.xml) and +a handfull of images. The XML file can now be used to generate PDF, HTML +and epub versions of the English manual. This is the basic step of +our process, making PDF (using dblatex), HTML (using xsltproc) and +epub (using dbtoepub) version from Docbook XML, and the resulting files +are placed in the debian-edu-doc-en binary package.

+ +

But English documentation is not enough for us. We want translated +documentation too, and we want to make it easy for translators to +track the English original. For this we use the +poxml package, +which allow us to transform the English Docbook XML file into a +translation file (a .pot file), usable with the normal gettext based +translation tools used by those translating free software. The pot +file is used to create and maintain translation files (several .po +files), which the translations update with the native language +translations of all titles, paragraphs and blocks of text in the +original. The next step is combining the original English Docbook XML +and the translation file (say debian-edu-wheezy-manual.nb.po), to +create a translated Docbook XML file (in this case +debian-edu-wheezy-manual.nb.xml). This translated (or partly +translated, if the translation is not complete) Docbook XML file can +then be used like the original to create a PDF, HTML and epub version +of the documentation.

+ +

The translators use different tools to edit the .po files. We +recommend using +lokalize, +while some use emacs and vi, others can use web based editors like +Poodle or +Transifex. All we care about +is where the .po file end up, in our git repository. Updated +translations can either be committed directly to git, or submitted as +bug reports +against the debian-edu-doc package.

+ +

One challenge is images, which both might need to be translated (if +they show translated user applications), and are needed in different +formats when creating PDF and HTML versions (epub is a HTML version in +this regard). For this we transform the original PNG images to the +needed density and format during build, and have a way to provide +translated images by storing translated versions in +images/$LANGUAGECODE/. I am a bit unsure about the details here. The +package maintainers know more.

+ +

If you wonder what the result look like, we provide +the content +of the documentation packages on the web. See for example the +Italian +PDF version or the +German +HTML version. We do not yet build the epub version by default, +but perhaps it will be done in the future.

+ +

To learn more, check out +the +debian-edu-doc package, +the +manual on the wiki and +the +translation instructions in the manual.

@@ -349,283 +435,57 @@ default password is 'secret'.

- -
8th September 2013
-

I 2011 raderte et stortingsflertall bestående av Høyre og -Arbeiderpartiet vekk en betydelig del av privatsfæren til det norske -folk. Det ble vedtatt at det skulle registreres og lagres i et halvt -år hvor alle som bærer på en mobiltelefon befinner seg, hvem de -snakker med og hvor lenge de snakket sammen. Det skal også -registreres hvem de sendte SMS-meldinger til, hvem en har sendt epost -til, og hvilke nett-tjenere en besøkte. Saken er kjent som -Datalagringsdirektivet -(DLD), og innebærer at alle innbyggerne og andre innenfor Norges -grenser overvåkes døgnet rundt. Det ble i praksis innført brev og -besøkskontroll av hele befolkningen. Rapporter fra de landene som -allerede har innført slik total lagring av borgernes -kommunikasjonsmønstre forteller at det ikke hjelper i -kriminalitetsbekjempelsen. Den norske prislappen blir mange hundre -millioner, uten at det ser ut til å bidra positivt til politiets -arbeide. Jeg synes flere hundre millioner i stedet burde vært brukt -på noe som kan dokumenteres å ha effekt i kriminalitetsbekjempelsen. -Se mer på -Wikipedia -og Jon Wessel-Aas.

- -

Hva er problemet, tenkter du kanskje? Et åpenbart problem er at -medienes kildevern i praksis blir radert ut. Den innsamlede -informasjonen gjør det mulig å finne ut hvem som har snakket med -journalister på telefon, SMS og epost, og hvem som har vært i nærheten -av journalister så sant begge bar med seg en telefon. Et annet er at -advokatvernet blir sterkt redusert, der politiet kan finne ut hvem -som har snakket med en advokat når, eller vært i møter en med advokat. -Et tredje er at svært personlig informasjon kan avledes fra hvilke -nettsteder en har besøkt. Har en besøkt hivnorge.no, -swingersnorge.com eller andre sider som kan brukes til avlede -interesser som hører til privatsfæren, vil denne informasjonen være -tilgjengelig takket være datalagringsdirektivet.

- -

De fleste partiene var mot, kun to partier stemte for. Høyre og -Arbeiderpartiet. Og både Høyre og Arbeiderpartiet i Oslo har -DLD-forkjempere på toppen av sine lister (har ikke sjekket de andre -fylkene). Det er dermed helt uaktuelt for meg å stemme på disse -partiene. Her er oversikten over partienes valglister i Oslo, med -informasjon om hvem som stemte hva i første DLD-votering i Stortinget, -basert på informasjon fra mine venner i -Holder de -Ord samt data.stortinget.no. -Først ut er stortingslista fra Høyre for Oslo:

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
#Navn, fødselsår og valgkretsStemme/kommentar
1.Ine Marie Eriksen Søreide (1976), Gamle OsloStemte for DLD
2.Nikolai Astrup (1978), FrognerStemte mot DLD
3.Michael Tetzschner (1954), Vestre AkerStemte mot DLD
4.Kristin Vinje (1963), Nordre AkerIkke til stede
5.Mudassar Hussain Kapur (1976), NordstrandIkke til stede
6.Stefan Magnus B. Heggelund (1984), GrünerløkkaIkke til stede
7.Heidi Nordby Lunde (1973), GrünerløkkaIkke til stede
8.Frode Helgerud (1950), FrognerIkke til stede
9.Afshan Rafiq (1975), StovnerIkke til stede
10.Astrid Nøklebye Heiberg (1936), FrognerIkke til stede
11.Camilla Strandskog (1984) St.HanshaugenIkke til stede
12.John Christian Elden (1967), UllernIkke til stede
13.Berit Solli (1972), AlnaIkke til stede
14.Ola Kvisgaard (1963), FrognerIkke til stede
15.James Stove Lorentzen (1957), Vestre AkerIkke til stede
16.Gülsüm Koc (1987), StovnerIkke til stede
17.Jon Ole Whist (1976), GrünerløkkaIkke til stede
18.Maren Eline Malthe-Sørenssen (1971), Vestre AkerIkke til stede
19.Ståle Hagen (1968), Søndre NordstrandIkke til stede
20.Kjell Omdal Erichsen (1978), SageneIkke til stede
21.Saida R. Begum (1987), GrünerløkkaIkke til stede
22.Torkel Brekke (1970), Nordre AkerIkke til stede
23.Sverre K. Seeberg (1950), Vestre AkerIkke til stede
24.Julie Margrethe Brodtkorb (1974), UllernIkke til stede
25.Fabian Stang (1955), FrognerIkke til stede
- -

Deretter har vi stortingslista fra Arbeiderpartiet for Oslo:

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
#Navn, fødselsår og valgkretsStemme/kommentar
1.Jens Stoltenberg (1959), FrognerIkke til stede i Stortinget, leder av regjeringen som fremmet forslaget
2.Hadia Tajik (1983), GrünerløkkaStemte for DLD
3.Jonas Gahr Støre (1960), Vestre AkerIkke til stede i Stortinget, medlem av regjeringen som fremmet forslaget
4.Marianne Marthinsen (1980), GrünerløkkaStemte for DLD
5.Jan Bøhler (1952), AlnaStemte for DLD
6.Marit Nybakk (1947), FrognerStemte for DLD
7.Truls Wickholm (1978), SageneStemte for DLD
8.Prableen Kaur (1993), GrorudIkke til stede
9.Vegard Grøslie Wennesland (1983), St.HanshaugenIkke til stede
10.Inger Helene Vaaten (1975), GrorudIkke til stede
11.Ivar Leveraas (1939), AlnaIkke til stede
12.Grete Haugdal (1971), Gamle OsloIkke til stede
13.Olav Tønsberg (1948), AlnaIkke til stede
14.Khamshajiny Gunaratnam (1988), GrorudIkke til stede
15.Fredrik Mellem (1969), SageneIkke til stede
16.Brit Axelsen (1945), StovnerIkke til stede
17.Dag Bayegan-Harlem (1977), UllernIkke til stede
18.Kristin Sandaker (1963), ØsteinsjøIkke til stede
19.Bashe Musse (1965), GrünerløkkaIkke til stede
20.Torunn Kanutte Husvik (1983), St. HanshaugenIkke til stede
21.Steinar Andersen (1947), NordstrandIkke til stede
22.Anne Cathrine Berger (1972), SageneIkke til stede
23.Khalid Mahmood (1959), ØstensjøIkke til stede
24.Munir Jaber (1990), AlnaIkke til stede
25.Libe Solberg Rieber-Mohn (1965), FrognerIkke til stede
- -

Hvilket parti får så min stemme i år. Jeg tror det blir -Piratpartiet. Hvis de kan bidra -til at det kommer noen inn på Stortinget med teknisk peiling, så får -kanskje ikke overvåkningsgalskapen like fritt spillerom som det har -hatt så langt.

- + +
16th June 2014
+

Jeg har fortsatt behov for å kunne laste ned innslag fra NRKs +nettsted av og til for å se senere når jeg ikke er på nett, men +min +oppskrift fra 2011 sluttet å fungere da NRK byttet +avspillermetode. I dag fikk jeg endelig lett etter oppdatert løsning, +og jeg er veldig glad for å fortelle at den enkleste måten å laste ned +innslag er å bruke siste versjon 2014.06.07 av +youtube-dl. Støtten i +youtube-dl kom +inn for 23 dager siden og +versjonen i +Debian fungerer fint også som backport til Debian Wheezy. Det er +et lite problem, det håndterer kun URLer med små bokstaver, men hvis +en har en URL med store bokstaver kan en bare gjøre alle store om til +små bokstaver for å få youtube-dl til å laste ned. Rapporterte +nettopp +problemet til +utviklerne, og antar de får fikset det snart.

+ +

Dermed er alt klart til å laste ned dokumentarene om +USAs +hemmelige avlytting og +Selskapene +bak USAs avlytting, i tillegg til +intervjuet +med Edward Snowden gjort av den tyske tv-kanalen ARD. Anbefaler +alle å se disse, sammen med +foredraget +til Jacob Appelbaum på siste CCC-konferanse, for å forstå mer om +hvordan overvåkningen av borgerne brer om seg.

+ +

Takk til gode venner på foreningen NUUGs IRC-kanal +#nuug på irc.freenode.net +for tipsene som fikk meg i mål.

+ +

Oppdatering 2014-06-17: Etter at jeg publiserte +denne, ble jeg tipset om bloggposten +"Downloading +HD content from tv.nrk.no" av Ingvar Hagelund, som har alternativ +implementasjon og tips for å lage mkv-fil med undertekstene inkludert. +Kanskje den passer bedre for deg? I tillegg ble feilen i youtube-dl +ble fikset litt senere ut på dagen i går, samt at youtube-dl fikk +støtte for å laste ned undertitler. Takk til Anders Einar Hilden for +god innsats og youtube-dl-utviklerne for rask respons.

@@ -633,138 +493,59 @@ hatt så langt.

- -
22nd August 2013
-

The second wheezy based beta release of Debian Edu was wrapped up -today, slightly delayed because of some bugs in the initial Windows -integration fixes . This is the release announcement:

- -

New features for Debian Edu 7.1+edu0~b1 released 2013-08-22

- -

These are the release notes for Debian Edu / Skolelinux -7.1+edu0~b1, based on Debian with codename "Wheezy".

- -

About Debian Edu and Skolelinux

- -

Debian Edu, also known as -Skolelinux, is a Linux distribution based on Debian providing an -out-of-the box environment of a completely configured school -network. Immediately after installation a school server running all -services needed for a school network is set up just waiting for users -and machines being added via GOsa², a comfortable Web-UI. A netbooting -environment is prepared using PXE, so after initial installation of -the main server from CD or USB stick all other machines can be -installed via the network. The provided school server provides LDAP -database and Kerberos authentication service, centralized home -directories, DHCP server, web proxy and many other services. The -desktop contains -more -than 60 educational software packages and more are available from -the Debian archive, and schools can choose between KDE, Gnome, LXDE -and Xfce desktop environment.

- -

This is the sixth test release based on Debian Wheezy. Basically this -is an updated and slightly improved version compared to the Squeeze -release.

- -

ALERT: Alpha based installations should reinstall or downgrade the -versions of gosa and libpam-mklocaluser to the ones used in this beta -release. Both alpha and beta0 based installations should reinstall or -deal with gosa.conf manually; there are two options: (1) Keep -gosa.conf and edit this file as outlined -on -the mailing list. (2) Accept the new version of gosa.conf and -replace both contained admin password placeholders with the password -hashes found in the old one (backup copy!). In both cases every user -need to change their their password to make sure a password is set for -CIFS access to their home directory.

- -

Software updates

- -
    - -
  • Added ssh askpass packages to default installation, to ensure ssh - work also without a attached tty.
  • -
  • Add the command-not-found package to the default installation to - make it easier to figure out where to find missing command line - tools. Please note, that the command 'update-command-not-found' - has to be run as root to actually make it useful (internet access - required).
  • - -
- -

Other changes

- -
    - -
  • Adjusted the USB stick ISO image build to include every tool -needed for desktop=xfce installations.
  • -
  • Adjust thin-client-server task to work when installing from USB -stick ISO image.
  • -
  • Made new grub artwork (changed png from indexed to RGB format).
  • -
  • Minor cleanup in the CUPS setup.
  • -
  • Make sure that bootstrapping of the Samba domain really happens - during installation of the main server and adjust SID handling to - cope with this.
  • -
  • Make Samba passwords changeable (again) via GOsa².
  • -
  • Fix generation of LM and NT password hashes via GOsa² to avoid - empty password hashes.
  • -
  • Adapted Samba machine domain joining to latest change in the - smbldap-tools Perl package, fixing bugs blocking Windows machines - from joining the Samba domain.
  • - -
- -

Known issues

+ +
29th May 2014
+

Dear lazyweb. I'm planning to set up a small Raspberry Pi computer +in my car, connected to +a +small screen next to the rear mirror. I plan to hook it up with a +GPS and a USB wifi card too. The idea is to get my own +"Carputer". But I +wonder if someone already created a good free software solution for +such car computer.

+ +

This is my current wish list for such system:

    -
  • KDE fails to understand the wpad.dat file provided, causing it to - not use the http proxy as it should.
  • -
  • Chromium also fails to use the proxy when using the KDE desktop - (using the KDE configuration).
  • +
  • Work on Raspberry Pi.
  • -
+
  • Show current speed limit based on location, and warn if going too + fast (for example using color codes yellow and red on the screen, + or make a sound). This could be done either using either data from + Openstreetmap or OCR + info gathered from a dashboard camera.
  • -

    Where to get it

    +
  • Track automatic toll road passes and their cost, show total spent + and make it possible to calculate toll costs for planned + route.
  • -

    To download the multiarch netinstall CD release you can use

    +
  • Collect GPX tracks for use with OpenStreetMap.
  • - -

    The MD5SUM of this image is: 1e357f80b55e703523f2254adde6d78b -
    The SHA1SUM of this image is: 7157f9be5fd27c7694d713c6ecfed61c3edda3b2

    - -

    To download the multiarch USB stick ISO release you can use

    - - - -

    The MD5SUM of this image is: 7a8408ead59cf7e3cef25afb6e91590b -
    The SHA1SUM of this image is: f1817c031f02790d5edb3bfa0dcf8451088ad119

    - - -

    How to report bugs

    - -

    http://wiki.debian.org/DebianEdu/HowTo/ReportBugs +

    If you know of any free software car computer system supporting +some or all of these features, please let me know.

    - Tags: debian edu, english. + Tags: english.
    @@ -772,34 +553,54 @@ stick ISO image.
    - -
    18th August 2013
    -

    Earlier, I reported about -my -problems using an Intel SSD 520 Series 180 GB disk. Friday I was -told by IBM that the original disk should be thrown away. And as -there no longer was a problem if I bricked the firmware, I decided -today to try to install Intel firmware to replace the Lenovo firmware -currently on the disk.

    - -

    I searched the Intel site for firmware, and found -issdfut_2.0.4.iso -(aka Intel SATA Solid-State Drive Firmware Update Tool) which -according to the site should contain the latest firmware for SSD -disks. I inserted the broken disk in one of my spare laptops and -booted the ISO from a USB stick. The disk was recognized, but the -program claimed the newest firmware already were installed and refused -to insert any Intel firmware. So no change, and the disk is still -unable to handle write load. :( I guess the only way to get them -working would be if Lenovo releases new firmware. No idea how likely -that is. Anyway, just blogging about this test for completeness. I -got a working Samsung disk, and see no point in spending more time on -the broken disks.

    + +
    29th April 2014
    +

    I've been following the Gnash +project for quite a while now. It is a free software +implementation of Adobe Flash, both a standalone player and a browser +plugin. Gnash implement support for the AVM1 format (and not the +newer AVM2 format - see +Lightspark for that one), +allowing several flash based sites to work. Thanks to the friendly +developers at Youtube, it also work with Youtube videos, because the +Javascript code at Youtube detect Gnash and serve a AVM1 player to +those users. :) Would be great if someone found time to implement AVM2 +support, but it has not happened yet. If you install both Lightspark +and Gnash, Lightspark will invoke Gnash if it find a AVM1 flash file, +so you can get both handled as free software. Unfortunately, +Lightspark so far only implement a small subset of AVM2, and many +sites do not work yet.

    + +

    A few months ago, I started looking at +Coverity, the static source +checker used to find heaps and heaps of bugs in free software (thanks +to the donation of a scanning service to free software projects by the +company developing this non-free code checker), and Gnash was one of +the projects I decided to check out. Coverity is able to find lock +errors, memory errors, dead code and more. A few days ago they even +extended it to also be able to find the heartbleed bug in OpenSSL. +There are heaps of checks being done on the instrumented code, and the +amount of bogus warnings is quite low compared to the other static +code checkers I have tested over the years.

    + +

    Since a few weeks ago, I've been working with the other Gnash +developers squashing bugs discovered by Coverity. I was quite happy +today when I checked the current status and saw that of the 777 issues +detected so far, 374 are marked as fixed. This make me confident that +the next Gnash release will be more stable and more dependable than +the previous one. Most of the reported issues were and are in the +test suite, but it also found a few in the rest of the code.

    + +

    If you want to help out, you find us on +the +gnash-dev mailing list and on +the #gnash channel on +irc.freenode.net IRC server.

    - Tags: debian, english. + Tags: english, multimedia, video, web.
    @@ -807,57 +608,94 @@ the broken disks.

    - -
    2nd August 2013
    -

    It has been a while since my last update. Since last summer, I -have worked on a Norwegian -docbook version of the 2004 book -Free Culture by Lawrence Lessig, -to get a Norwegian text explaining the problems with the copyright -law. Yesterday, I finally broken the 90% mark, when counting the -number of strings to translate. Due to real life constraints, I have -not had time to work on it since March, but when the summer broke out, -I found time to work on it again. Still lots of work left, but the -first draft is nearing completion. I created a graph to show the -progress of the translation:

    - -

    - -

    When the first draft is done, the translated text need to be -proof read, and the remaining formatting problems with images and SVG -drawings need to be fixed. There are probably also some index entries -missing that need to be added. This can be done by comparing the -index entries listed in the SiSU version of the book, or comparing the -English docbook version with the paper version. Last, the colophon -page with ISBN numbers etc need to be wrapped up before the release is -done. I should also figure out how to get correct Norwegian sorting -of the index pages. All docbook tools I have tried so far (xmlto, -docbook-xsl, dblatex) get the order of symbols and the special -Norwegian letters ÆØÅ wrong.

    - -

    There is still need for translators and people with docbook -knowledge, to be able to get a good looking book (I still struggle -with dblatex, xmlto and docbook-xsl) as well as to do the draft -translation and proof reading. And I would like the figures to be -redrawn as SVGs to make it easy to translate them. Any SVG master -around? There are also some legal terms that are unfamiliar to me. -If you want to help, please get in touch with me, and check out the -project files currently available from -github.

    - -

    If you are curious what the translated book currently look like, -the updated -PDF -and -EPUB -are published on github. The HTML version is published as well, but -github hand it out with MIME type text/plain, confusing browsers, so I -saw no point in linking to that version.

    + +
    23rd April 2014
    +

    It would be nice if it was easier in Debian to get all the hardware +related packages relevant for the computer installed automatically. +So I implemented one, using +my Isenkram +package. To use it, install the tasksel and isenkram packages and +run tasksel as user root. You should be presented with a new option, +"Hardware specific packages (autodetected by isenkram)". When you +select it, tasksel will install the packages isenkram claim is fit for +the current hardware, hot pluggable or not.

    + +

    The implementation is in two files, one is the tasksel menu entry +description, and the other is the script used to extract the list of +packages to install. The first part is in +/usr/share/tasksel/descs/isenkram.desc and look like +this:

    + +

    +Task: isenkram
    +Section: hardware
    +Description: Hardware specific packages (autodetected by isenkram)
    + Based on the detected hardware various hardware specific packages are
    + proposed.
    +Test-new-install: mark show
    +Relevance: 8
    +Packages: for-current-hardware
    +

    + +

    The second part is in +/usr/lib/tasksel/packages/for-current-hardware and look like +this:

    + +

    +#!/bin/sh
    +#
    +(
    +    isenkram-lookup
    +    isenkram-autoinstall-firmware -l
    +) | sort -u
    +

    + +

    All in all, a very short and simple implementation making it +trivial to install the hardware dependent package we all may want to +have installed on our machines. I've not been able to find a way to +get tasksel to tell you exactly which packages it plan to install +before doing the installation. So if you are curious or careful, +check the output from the isenkram-* command line tools first.

    + +

    The information about which packages are handling which hardware is +fetched either from the isenkram package itself in +/usr/share/isenkram/, from git.debian.org or from the APT package +database (using the Modaliases header). The APT package database +parsing have caused a nasty resource leak in the isenkram daemon (bugs +#719837 and +#730704). The cause is in +the python-apt code (bug +#745487), but using a +workaround I was able to get rid of the file descriptor leak and +reduce the memory leak from ~30 MiB per hardware detection down to +around 2 MiB per hardware detection. It should make the desktop +daemon a lot more useful. The fix is in version 0.7 uploaded to +unstable today.

    + +

    I believe the current way of mapping hardware to packages in +Isenkram is is a good draft, but in the future I expect isenkram to +use the AppStream data source for this. A proposal for getting proper +AppStream support into Debian is floating around as +DEP-11, and +GSoC +project will take place this summer to improve the situation. I +look forward to seeing the result, and welcome patches for isenkram to +start using the information when it is ready.

    + +

    If you want your package to map to some specific hardware, either +add a "Xb-Modaliases" header to your control file like I did in +the pymissile +package or submit a bug report with the details to the isenkram +package. See also +all my +blog posts tagged isenkram for details on the notation. I expect +the information will be migrated to AppStream eventually, but for the +moment I got no better place to store it.

    @@ -865,137 +703,88 @@ saw no point in linking to that version.

    - -
    27th July 2013
    -

    The first wheezy based beta release of Debian Edu was wrapped up -today. This is the release announcement:

    - -

    New features for Debian Edu 7.1+edu0~b0 released -2013-07-27

    - -

    These are the release notes for for Debian Edu / Skolelinux -7.1+edu0~b0, based on Debian with codename "Wheezy".

    - -

    About Debian Edu and Skolelinux

    - -

    Debian Edu, also known as -Skolelinux, is a Linux distribution based on Debian providing an -out-of-the box environment of a completely configured school -network. Immediately after installation a school server running all -services needed for a school network is set up just waiting for users -and machines being added via GOsa², a comfortable Web-UI. A netbooting -environment is prepared using PXE, so after initial installation of -the main server from CD, DVD or USB stick all other machines can be -installed via the network. The provided school server provides LDAP -database and Kerberos authentication service, centralized home -directories, DHCP server, web proxy and many other services. The -desktop contains -more -than 60 educational software packages and more are available from -the Debian archive, and schools can choose between KDE, Gnome, LXDE -and Xfce desktop environment.

    - -

    This is the fifth test release based on Debian Wheezy. Basically -this is an updated and slightly improved version compared to the -Squeeze release.

    - -

    ALERT: Alpha based installations should reinstall or downgrade the -versions of gosa and libpam-mklocaluser to the ones used in this beta -release.

    - -

    Software updates

    - -
      - -
    • Switched roaming workstation profiles from wicd to network-manager - for network configuration, as wicd didn't work any more.
    • -
    • Changed version numbers of patched gosa and libpam-mklocaluser - packages to make sure our locally patched versions will be replaced - by the official packages when they are released from Debian. Those - installing alpha version need to reinstall or manually downgrade gosa - and libpam-mklocaluser.
    • -
    • Added bluetooth tools to the default desktop (bluedevil, blueman).
    • -
    • Added tools for sharing the desktop on KDE (krdc, krfb).
    • -
    • Added valgrind to the default installation for easier debugging of - crash bugs.
    • - -
    - -

    Other changes

    - -
      - -
    • Fixed artwork package to work with gnome, no longer break - desktop=gnome installations.
    • -
    • Adjusted installer to now work when forced to use a proxy with the - netinst CD.
    • -
    • Fixed code detecting and setting/loading hardware specific - setup/firmware to work more robust out of the box.
    • -
    • Adjusted Kerberos setup to detect realm and server settings at - install time instead of dynamically at run time. This avoid a crash - with krb5-auth-dialog on diskless workstations without a DNS name.
    • -
    • Worked around misfeature in network-manager not calling the dhclient - exit hooks, causing automatic proxy configuration and automatic host - name setting at run time to work again.
    • -
    • Fixed feature setting the default Iceweasel start page from URL - fetched from LDAP, to allow schools to set the global default by - updating the dc=skole,dc=skolelinux,dc=no LDAP object.
    • -
    • Changed default host name on all networked machines to be unique - (generated from MAC or reverse DNS) after boot.
    • -
    • Adjusted partition sizes to make sure they are big enough.
    • - -
    - -

    Known issues

    - -
      - -
    • Grub is missing the new artwork.
    • -
    • KDE fail to understand the wpad.dat file provided, causing it to - not use the http proxy as it should.
    • -
    • Chromium also fail to use the proxy.
    • - -
    - -

    Where to get it

    - -

    To download the multiarch netinstall CD release you can use

    - - - -

    The MD5SUM of this image is: 55d5de9765b6dccd5d9ec33cf1a07109 -
    The SHA1SUM of this image is: 996a1d9517740e4d627d100de2d12b23dd545a3f

    - -

    To download the multiarch USB stick ISO release you can use

    - - - -

    The MD5SUM of this image is: d8f0818c51a78d357de794066f289f69 -
    The SHA1SUM of this image is: 49185ca354e8d0543240423746924f76a6cee733

    - - -

    How to report bugs

    - -

    http://wiki.debian.org/DebianEdu/HowTo/ReportBugs +

    +
    15th April 2014
    +

    The Freedombox +project is working on providing the software and hardware to make +it easy for non-technical people to host their data and communication +at home, and being able to communicate with their friends and family +encrypted and away from prying eyes. It is still going strong, and +today a major mile stone was reached.

    + +

    Today, the last of the packages currently used by the project to +created the system images were accepted into Debian Unstable. It was +the freedombox-setup package, which is used to configure the images +during build and on the first boot. Now all one need to get going is +the build code from the freedom-maker git repository and packages from +Debian. And once the freedombox-setup package enter testing, we can +build everything directly from Debian. :)

    + +

    Some key packages used by Freedombox are +freedombox-setup, +plinth, +pagekite, +tor, +privoxy, +owncloud and +dnsmasq. There +are plans to integrate more packages into the setup. User +documentation is maintained on the Debian wiki. Please +check out +the manual and help us improve it.

    + +

    To test for yourself and create boot images with the FreedomBox +setup, run this on a Debian machine using a user with sudo rights to +become root:

    + +

    +sudo apt-get install git vmdebootstrap mercurial python-docutils \
    +  mktorrent extlinux virtualbox qemu-user-static binfmt-support \
    +  u-boot-tools
    +git clone http://anonscm.debian.org/git/freedombox/freedom-maker.git \
    +  freedom-maker
    +make -C freedom-maker dreamplug-image raspberry-image virtualbox-image
    +

    + +

    Root access is needed to run debootstrap and mount loopback +devices. See the README in the freedom-maker git repo for more +details on the build. If you do not want all three images, trim the +make line. Note that the virtualbox-image target is not really +virtualbox specific. It create a x86 image usable in kvm, qemu, +vmware and any other x86 virtual machine environment. You might need +the version of vmdebootstrap in Jessie to get the build working, as it +include fixes for a race condition with kpartx.

    + +

    If you instead want to install using a Debian CD and the preseed +method, boot a Debian Wheezy ISO and use this boot argument to load +the preseed values:

    + +

    +url=http://www.reinholdtsen.name/freedombox/preseed-jessie.dat
    +

    + +

    I have not tested it myself the last few weeks, so I do not know if +it still work.

    + +

    If you wonder how to help, one task you could look at is using +systemd as the boot system. It will become the default for Linux in +Jessie, so we need to make sure it is usable on the Freedombox. I did +a simple test a few weeks ago, and noticed dnsmasq failed to start +during boot when using systemd. I suspect there are other problems +too. :) To detect problems, there is a test suite included, which can +be run from the plinth web interface.

    + +

    Give it a go and let us know how it goes on the mailing list, and help +us get the new release published. :) Please join us on +IRC (#freedombox on +irc.debian.org) and +the +mailing list if you want to help make this vision come true.

    @@ -1003,167 +792,88 @@ release.

    - -
    17th July 2013
    -

    Today I switched to -my -new laptop. I've previously written about the problems I had with -my new Thinkpad X230, which was delivered with an -180 -GB Intel SSD disk with Lenovo firmware that did not handle -sustained writes. My hardware supplier have been very forthcoming in -trying to find a solution, and after first trying with another -identical 180 GB disks they decided to send me a 256 GB Samsung SSD -disk instead to fix it once and for all. The Samsung disk survived -the installation of Debian with encrypted disks (filling the disk with -random data during installation killed the first two), and I thus -decided to trust it with my data. I have installed it as a Debian Edu -Wheezy roaming workstation hooked up with my Debian Edu Squeeze main -server at home using Kerberos and LDAP, and will use it as my work -station from now on.

    - -

    As this is a solid state disk with no moving parts, I believe the -Debian Wheezy default installation need to be tuned a bit to increase -performance and increase life time of the disk. The Linux kernel and -user space applications do not yet adjust automatically to such -environment. To make it easier for my self, I created a draft Debian -package ssd-setup to handle this tuning. The -source -for the ssd-setup package is available from collab-maint, and it -is set up to adjust the setup of the machine by just installing the -package. If there is any non-SSD disk in the machine, the package -will refuse to install, as I did not try to write any logic to sort -file systems in SSD and non-SSD file systems.

    - -

    I consider the package a draft, as I am a bit unsure how to best -set up Debian Wheezy with an SSD. It is adjusted to my use case, -where I set up the machine with one large encrypted partition (in -addition to /boot), put LVM on top of this and set up partitions on -top of this again. See the README file in the package source for the -references I used to pick the settings. At the moment these -parameters are tuned:

    + +
    11th April 2014
    +

    For 12 år siden, skrev jeg et lite notat om +bruk av språkkoder +i Norge. Jeg ble nettopp minnet på dette da jeg fikk spørsmål om +notatet fortsatt var aktuelt, og tenkte det var greit å repetere hva +som fortsatt gjelder. Det jeg skrev da er fortsatt like aktuelt.

    + +

    Når en velger språk i programmer på unix, så velger en blant mange +språkkoder. For språk i Norge anbefales følgende språkkoder (anbefalt +locale i parantes):

    + +

    +
    nb (nb_NO)
    Bokmål i Norge
    +
    nn (nn_NO)
    Nynorsk i Norge
    +
    se (se_NO)
    Nordsamisk i Norge
    +

    + +

    Alle programmer som bruker andre koder bør endres.

    + +

    Språkkoden bør brukes når .po-filer navngis og installeres. Dette +er ikke det samme som locale-koden. For Norsk Bokmål, så bør filene +være navngitt nb.po, mens locale (LANG) bør være nb_NO.

    + +

    Hvis vi ikke får standardisert de kodene i alle programmene med +norske oversettelser, så er det umulig å gi LANG-variablen ett innhold +som fungerer for alle programmer.

    + +

    Språkkodene er de offisielle kodene fra ISO 639, og bruken av dem i +forbindelse med POSIX localer er standardisert i RFC 3066 og ISO +15897. Denne anbefalingen er i tråd med de angitte standardene.

    + +

    Følgende koder er eller har vært i bruk som locale-verdier for +"norske" språk. Disse bør unngås, og erstattes når de oppdages:

    + +

    + + + + + + + + +
    norwegian-> nb_NO
    bokmål -> nb_NO
    bokmal -> nb_NO
    nynorsk -> nn_NO
    no -> nb_NO
    no_NO -> nb_NO
    no_NY -> nn_NO
    sme_NO -> se_NO

    + +

    Merk at når det gjelder de samiske språkene, at se_NO i praksis +henviser til nordsamisk i Norge, mens f.eks. smj_NO henviser til +lulesamisk. Dette notatet er dog ikke ment å gi råd rundt samiske +språkkoder, der gjør +Divvun-prosjektet en bedre +jobb.

    + +

    Referanser:

      -
    • Set up cryptsetup to pass TRIM commands to the physical disk - (adding discard to /etc/crypttab)
    • - -
    • Set up LVM to pass on TRIM commands to the underlying device (in - this case a cryptsetup partition) by changing issue_discards from - 0 to 1 in /etc/lvm/lvm.conf.
    • - -
    • Set relatime as a file system option for ext3 and ext4 file - systems.
    • - -
    • Tell swap to use TRIM commands by adding 'discard' to - /etc/fstab.
    • +
    • RFC 3066 - Tags + for the Identification of Languages (Erstatter RFC 1766)
    • + +
    • ISO + 639 - Codes for the Representation of Names of Languages
    • -
    • Change I/O scheduler from cfq to deadline using a udev rule.
    • - -
    • Run fstrim on every ext3 and ext4 file system every night (from - cron.daily).
    • +
    • ISO + DTR 14652 - locale-standard Specification method for cultural + conventions
    • + +
    • ISO + 15897: Registration procedures for cultural elements (cultural + registry), + (nytt + draft)
    • -
    • Adjust sysctl values vm.swappiness to 1 and vm.vfs_cache_pressure - to 50 to reduce the kernel eagerness to swap out processes.
    • +
    • ISO/IEC + JTC1/SC22/WG20 - Gruppen for i18n-standardisering i ISO
    • -
    - -

    During installation, I cancelled the part where the installer fill -the disk with random data, as this would kill the SSD performance for -little gain. My goal with the encrypted file system is to ensure -those stealing my laptop end up with a brick and not a working -computer. I have no hope in keeping the really resourceful people -from getting the data on the disk (see -XKCD #538 for an explanation why). -Thus I concluded that adding the discard option to crypttab is the -right thing to do.

    - -

    I considered using the noop I/O scheduler, as several recommended -it for SSD, but others recommended deadline and a benchmark I found -indicated that deadline might be better for interactive use.

    - -

    I also considered using the 'discard' file system option for ext3 -and ext4, but read that it would give a performance hit ever time a -file is removed, and thought it best to that that slowdown once a day -instead of during my work.

    - -

    My package do not set up tmpfs on /var/run, /var/lock and /tmp, as -this is already done by Debian Edu.

    - -

    I have not yet started on the user space tuning. I expect -iceweasel need some tuning, and perhaps other applications too, but -have not yet had time to investigate those parts.

    - -

    The package should work on Ubuntu too, but I have not yet tested it -there.

    - -

    As for the answer to the question in the title of this blog post, -as far as I know, the only solution I know about is to replace the -disk. It might be possible to flash it with Intel firmware instead of -the Lenovo firmware. But I have not tried and did not want to do so -without approval from Lenovo as I wanted to keep the warranty on the -disk until a solution was found and they wanted the broken disks -back.

    -
    -
    - - - Tags: debian, english. - - -
    -
    -
    - -
    - -
    10th July 2013
    -

    A few days ago, I wrote about -the -problems I experienced with my new X230 and its SSD disk, which -was dying during installation because it is unable to cope with -sustained write. My supplier is in contact with -Lenovo, and they wanted to send a -replacement disk to try to fix the problem. They decided to send an -identical model, so my hopes for a permanent fix was slim.

    - -

    Anyway, today I got the replacement disk and tried to install -Debian Edu Wheezy with encrypted disk on it. The new disk have the -same firmware version as the original. This time my hope raised -slightly as the installation progressed, as the original disk used to -die after 4-7% of the disk was written to, while this time it kept -going past 10%, 20%, 40% and even past 50%. But around 60%, the disk -died again and I was back on square one. I still do not have a new -laptop with a disk I can trust. I can not live with a disk that might -lock up when I download a new -Debian Edu / Skolelinux ISO or -other large files. I look forward to hearing from my supplier with -the next proposal from Lenovo.

    - -

    The original disk is marked Intel SSD 520 Series 180 GB, -11S0C38722Z1ZNME35X1TR, ISN: CVCV321407HB180EGN, SA: G57560302, FW: -LF1i, 29MAY2013, PBA: G39779-300, LBA 351,651,888, LI P/N: 0C38722, -Pb-free 2LI, LC P/N: 16-200366, WWN: 55CD2E40002756C4, Model: -SSDSC2BW180A3L 2.5" 6Gb/s SATA SSD 180G 5V 1A, ASM P/N 0C38732, FRU -P/N 45N8295, P0C38732.

    - -

    The replacement disk is marked Intel SSD 520 Series 180 GB, -11S0C38722Z1ZNDE34N0L0, ISN: CVCV315306RK180EGN, SA: G57560-302, FW: -LF1i, 22APR2013, PBA: G39779-300, LBA 351,651,888, LI P/N: 0C38722, -Pb-free 2LI, LC P/N: 16-200366, WWN: 55CD2E40000AB69E, Model: -SSDSC2BW180A3L 2.5" 6Gb/s SATA SSD 180G 5V 1A, ASM P/N 0C38732, FRU -P/N 45N8295, P0C38732.

    - -

    The only difference is in the first number (serial number?), ISN, -SA, date and WNPP values. Mentioning all the details here in case -someone is able to use the information to find a way to identify the -failing disk among working ones (if any such working disk actually -exist).

    +
    - Tags: debian, english. + Tags: norsk.
    @@ -1178,6 +888,27 @@ exist).

    Archive