The Debian installer could be -a lot quicker. When we install more than 2000 packages in -Skolelinux / Debian Edu using -tasksel in the installer, unpacking the binary packages take forever. -A part of the slow I/O issue was discussed in -bug #613428 about too -much file system sync-ing done by dpkg, which is the package -responsible for unpacking the binary packages. Other parts (like code -executed by postinst scripts) might also sync to disk during -installation. All this sync-ing to disk do not really make sense to -me. If the machine crash half-way through, I start over, I do not try -to salvage the half installed system. So the failure sync-ing is -supposed to protect against, hardware or system crash, is not really -relevant while the installer is running.
- -A few days ago, I thought of a way to get rid of all the file -system sync()-ing in a fairly non-intrusive way, without the need to -change the code in several packages. The idea is not new, but I have -not heard anyone propose the approach using dpkg-divert before. It -depend on the small and clever package -eatmydata, which -uses LD_PRELOAD to replace the system functions for syncing data to -disk with functions doing nothing, thus allowing programs to live -dangerous while speeding up disk I/O significantly. Instead of -modifying the implementation of dpkg, apt and tasksel (which are the -packages responsible for selecting, fetching and installing packages), -it occurred to me that we could just divert the programs away, replace -them with a simple shell wrapper calling -"eatmydata $program $@", to get the same effect. -Two days ago I decided to test the idea, and wrapped up a simple -implementation for the Debian Edu udeb.
- -The effect was stunning. In my first test it reduced the running -time of the pkgsel step (installing tasks) from 64 to less than 44 -minutes (20 minutes shaved off the installation) on an old Dell -Latitude D505 machine. I am not quite sure what the optimised time -would have been, as I messed up the testing a bit, causing the debconf -priority to get low enough for two questions to pop up during -installation. As soon as I saw the questions I moved the installation -along, but do not know how long the question were holding up the -installation. I did some more measurements using Debian Edu Jessie, -and got these results. The time measured is the time stamp in -/var/log/syslog between the "pkgsel: starting tasksel" and the -"pkgsel: finishing up" lines, if you want to do the same measurement -yourself. In Debian Edu, the tasksel dialog do not show up, and the -timing thus do not depend on how quickly the user handle the tasksel -dialog.
- -Machine/setup | -Original tasksel | -Optimised tasksel | -Reduction | -
---|---|---|---|
Latitude D505 Main+LTSP LXDE | -64 min (07:46-08:50) | -<44 min (11:27-12:11) | ->20 min 18% | -
Latitude D505 Roaming LXDE | -57 min (08:48-09:45) | -34 min (07:43-08:17) | -23 min 40% | -
Latitude D505 Minimal | -22 min (10:37-10:59) | -11 min (11:16-11:27) | -11 min 50% | -
Thinkpad X200 Minimal | -6 min (08:19-08:25) | -4 min (08:04-08:08) | -2 min 33% | -
Thinkpad X200 Roaming KDE | -19 min (09:21-09:40) | -15 min (10:25-10:40) | -4 min 21% | -
The test is done using a netinst ISO on a USB stick, so some of the -time is spent downloading packages. The connection to the Internet -was 100Mbit/s during testing, so downloading should not be a -significant factor in the measurement. Download typically took a few -seconds to a few minutes, depending on the amount of packages being -installed.
- -The speedup is implemented by using two hooks in -Debian -Installer, the pre-pkgsel.d hook to set up the diverts, and the -finish-install.d hook to remove the divert at the end of the -installation. I picked the pre-pkgsel.d hook instead of the -post-base-installer.d hook because I test using an ISO without the -eatmydata package included, and the post-base-installer.d hook in -Debian Edu can only operate on packages included in the ISO. The -negative effect of this is that I am unable to activate this -optimization for the kernel installation step in d-i. If the code is -moved to the post-base-installer.d hook, the speedup would be larger -for the entire installation.
- -I've implemented this in the -debian-edu-install -git repository, and plan to provide the optimization as part of the -Debian Edu installation. If you want to test this yourself, you can -create two files in the installer (or in an udeb). One shell script -need do go into /usr/lib/pre-pkgsel.d/, with content like this:
- -- --#!/bin/sh -set -e -. /usr/share/debconf/confmodule -info() { - logger -t my-pkgsel "info: $*" -} -error() { - logger -t my-pkgsel "error: $*" -} -override_install() { - apt-install eatmydata || true - if [ -x /target/usr/bin/eatmydata ] ; then - for bin in dpkg apt-get aptitude tasksel ; do - file=/usr/bin/$bin - # Test that the file exist and have not been diverted already. - if [ -f /target$file ] ; then - info "diverting $file using eatmydata" - printf "#!/bin/sh\neatmydata $bin.distrib \"\$@\"\n" \ - > /target$file.edu - chmod 755 /target$file.edu - in-target dpkg-divert --package debian-edu-config \ - --rename --quiet --add $file - ln -sf ./$bin.edu /target$file - else - error "unable to divert $file, as it is missing." - fi - done - else - error "unable to find /usr/bin/eatmydata after installing the eatmydata pacage" - fi -} - -override_install -
To clean up, another shell script should go into -/usr/lib/finish-install.d/ with code like this: - -
- --#! /bin/sh -e -. /usr/share/debconf/confmodule -error() { - logger -t my-finish-install "error: $@" -} -remove_install_override() { - for bin in dpkg apt-get aptitude tasksel ; do - file=/usr/bin/$bin - if [ -x /target$file.edu ] ; then - rm /target$file - in-target dpkg-divert --package debian-edu-config \ - --rename --quiet --remove $file - rm /target$file.edu - else - error "Missing divert for $file." - fi - done - sync # Flush file buffers before continuing -} - -remove_install_override -
In Debian Edu, I placed both code fragments in a separate script -edu-eatmydata-install and call it from the pre-pkgsel.d and -finish-install.d scripts.
- -By now you might ask if this change should get into the normal -Debian installer too? I suspect it should, but am not sure the -current debian-installer coordinators find it useful enough. It also -depend on the side effects of the change. I'm not aware of any, but I -guess we will see if the change is safe after some more testing. -Perhaps there is some package in Debian depending on sync() and -fsync() having effect? Perhaps it should go into its own udeb, to -allow those of us wanting to enable it to do so without affecting -everyone.
+ +Noen finner det vanskelig å tro at Stortinget faktisk har vedtatt å +kreve at alle norske borgerne må avgi fingeravtrykk til politiet for å +fungere i samfunnet. Jeg er blitt spurt hva som er grunnlaget for +min +påstand i forrige bloggpost om at det nå blir krav om å avgi +fingeravtrykk til politiet for å fungere som borger i Norge. De som +spør klarer ikke lese det ut fra det som er vedtatt. Her er en liten +oppsummering om hva jeg baserer det på. Det sies ikke direkte i +hverken proposisjon, innstilling eller vedtak, men fremgår når en ser +på indirekte formuleringer.
+ +I +stortingsproposisjon +66, avsnitt 6.3.5 (Avgivelse av biometriske personopplysninger) +står det
+ +
+ ++ +Departementet foreslår at både ansiktsfoto og fingeravtrykk skal + kunne opptas og lagres som identifikasjonsdata i de nasjonale + ID-kortene, på samme måte som i passene. Lovforslaget er derfor + utformet i tråd med passloven § 6 annet ledd, som fastslår at det + til bruk for senere verifisering eller kontroll av passinnehaverens + identitet kan innhentes og lagres i passet biometrisk + personinformasjon i form av ansiktsfoto og fingeravtrykk (to + fingre). Dagens ordning med lagring av ansiktsfoto og fingeravtrykk + i et kontaktløst smartkort i passet er basert på internasjonale + standarder. Fingeravtrykkene i nasjonalt ID-kort vil bli beskyttet + på samme måte som fingeravtrykkene i passene.
+ +[...]
+ +For norske forhold understreker departementet at innføring av + nasjonale ID-kort sammen med innføring av nye systemer for sikrere + utstedelse og kontroll av pass og relaterte dokumenter gir mulighet + til å utforme ordningen slik at den best mulig møter utfordringene + forbundet med identitetskriminalitet. Det tilsier at fingeravtrykk + opptas og lagres i alle nasjonale ID-kort.
+
Departementet sier altså at sin anbefaling er at fingeravtrykk skal +opptas og lagres i alle nasjonale ID-kort. Det skrives som om det +blir valgfritt, på samme måten som det skrives passloven, der det i +loven sier at det kan +«innhentes +og lagres i passet biometrisk personinformasjon i form av ansiktsfoto +og fingeravtrykk (to fingre)». Men på tross av bruken av «kan» i +passloven er det innført krav om å avgi fingeravtrykk for å få et pass +i Norge. Proposisjonen sier i tillegg i del 1 (Proposisjonens +hovedinnhold) at ID-kortene skal være like pålitelig som pass og ha +samme sikkerhetsnivå som pass. Departementet foreslår altså at +ID-kortene skal gis etter samme regler som for pass.
+ +Formuleringene fra hovedinnholdet i proposisjonen er videreført i +innstillingen +fra stortingskomiteen, der det konkret står «De foreslåtte reglene +vil gi befolkningen tilbud om et offentlig utstedt identitetsbevis som +vil være like pålitelig som passet, og mer praktisk å bruke som +legitimasjon» og «Det nasjonale ID-kortet skal også holde samme +sikkerhetsnivå som passet». Komiteen har altså ingen kommentarer +eller innsigelser til dette forslaget, og gjorde i debatten da saken +ble vedtatt det klart at dette var en god sak og at en enstemmig +komité var glad for resultatet. Stortinget har dermed stilt seg helt +og fullt bak departementets forslag.
+ +For meg er det åpenbart når en leser proposisjonen at "like +pålitelig" og "samme sikkerhetsnivå" vil bli tolket av departementet +som "med samme biometrisk informasjon som i passene, og departementet +forklarer i tillegg i proposisjonen at de har tenkt at +fingeravtrykkene "vil bli beskyttet på samme måte som fingeravtrykkene +i passene". Jeg ser det dermed som åpenbart at den samme +tvangsinnhentingen av fingeravtrykk som gjelder for pass vil bli +viderført til de nasjonale ID-kortene.
+ +Det eneste som kan endre dette er massive protester fra +befolkningen på at folk som ikke er mistenkt for noe kriminelt skal +tvinges til å gi fingeravtrykket til politiet for å f.eks. kunne få +bankkonto eller stemme ved valg. Det kunne få departementet til å +snu. Det tror jeg ikke vil skje.
Yesterday, I had the pleasure of attending a talk with the -Norwegian Unix User Group about -the -OpenPGP keyserver pool sks-keyservers.net, and was very happy to -learn that there is a large set of publicly available key servers to -use when looking for peoples public key. So far I have used -subkeys.pgp.net, and some times wwwkeys.nl.pgp.net when the former -were misbehaving, but those days are ended. The servers I have used -up until yesterday have been slow and some times unavailable. I hope -those problems are gone now.
- -Behind the round robin DNS entry of the -sks-keyservers.net service -there is a pool of more than 100 keyservers which are checked every -day to ensure they are well connected and up to date. It must be -better than what I have used so far. :)
- -Yesterdays speaker told me that the service is the default -keyserver provided by the default configuration in GnuPG, but this do -not seem to be used in Debian. Perhaps it should?
- -Anyway, I've updated my ~/.gnupg/options file to now include this -line:
- -- --keyserver pool.sks-keyservers.net -
With GnuPG version 2 one can also locate the keyserver using SRV -entries in DNS. Just for fun, I did just that at work, so now every -user of GnuPG at the University of Oslo should find a OpenGPG -keyserver automatically should their need it:
- -- --% host -t srv _pgpkey-http._tcp.uio.no -_pgpkey-http._tcp.uio.no has SRV record 0 100 11371 pool.sks-keyservers.net. -% -
Now if only -the -HKP lookup protocol supported finding signature paths, I would be -very happy. It can look up a given key or search for a user ID, but I -normally do not want that, but to find a trust path from my key to -another key. Given a user ID or key ID, I would like to find (and -download) the keys representing a signature path from my key to the -key in question, to be able to get a trust path between the two keys. -This is as far as I can tell not possible today. Perhaps something -for a future version of the protocol?
+ +5 days ago, the Norwegian Parliament decided, unanimously, that all +citizens of Norway, no matter if they are suspected of something +criminal or not, are +required to +give fingerprints to the police (vote details from Holder de +ord). The law make it sound like it will be optional, but in a few +years there will be no option any more. The ID will be required to +vote, to get a bank account, a bank card, to change address on the +post office, to receive an electronic ID or to get a drivers license +and many other tasks required to function in Norway. The banks plan +to stop providing their own ID on the bank cards when this new +national ID is introduced, and the national road authorities plan to +change the drivers license to no longer be usable as identity cards. +In effect, to function as a citizen in Norway a national ID card will +be required, and to get it one need to provide the fingerprints to +the police.
+ +In addition to handing the fingerprint to the police (which +promised to not make a copy of the fingerprint image at that point in +time, but say nothing about doing it later), a picture of the +fingerprint will be stored on the RFID chip, along with a picture of +the face and other information about the person. Some of the +information will be encrypted, but the encryption will be the same +system as currently used in the passports. The codes to decrypt will +be available to a lot of government offices and their suppliers around +the globe, but for those that do now know anyone in those circles it +is good to know that + +the +encryption is already broken. And they +can +be read from 70 meters away. This can be mitigated a bit by +keeping it in a Faraday cage (metal box or metal wire container), but +one will be required to take it out of there often enough to expose +ones private and personal information to a lot of people that have no +business getting access to that information.
+ +The new Norwegian national IDs are a vehicle for identity theft, +and I feel sorry for us all having politicians accepting such invasion +of privacy without any objections. So are the Norwegian passports, +but it has been possible to function in Norway without those so far. +That option is going away with the passing of the new law. In this, I +envy the Germans, because for them it is optional how much biometric +information is stored in their national ID.
+ +And if forced collection of fingerprints was not bad enough, the +information collected in the national ID card register can be handed +over to foreign intelligence services and police authorities, "when +extradition is not considered disproportionate".
Two years later, I am still not sure if it is legal here in Norway -to use or publish a video in H.264 or MPEG4 format edited by the -commercially licensed video editors, without limiting the use to -create "personal" or "non-commercial" videos or get a license -agreement with MPEG LA. If one -want to publish and broadcast video in a non-personal or commercial -setting, it might be that those tools can not be used, or that video -format can not be used, without breaking their copyright license. I -am not sure. -Back -then, I found that the copyright license terms for Adobe Premiere -and Apple Final Cut Pro both specified that one could not use the -program to produce anything else without a patent license from MPEG -LA. The issue is not limited to those two products, though. Other -much used products like those from Avid and Sorenson Media have terms -of use are similar to those from Adobe and Apple. The complicating -factor making me unsure if those terms have effect in Norway or not is -that the patents in question are not valid in Norway, but copyright -licenses are.
- -These are the terms for Avid Artist Suite, according to their -published -end user -license -text (converted to lower case text for easier reading):
- --- -18.2. MPEG-4. MPEG-4 technology may be included with the -software. MPEG LA, L.L.C. requires this notice:
- -This product is licensed under the MPEG-4 visual patent portfolio -license for the personal and non-commercial use of a consumer for (i) -encoding video in compliance with the MPEG-4 visual standard (âMPEG-4 -videoâ) and/or (ii) decoding MPEG-4 video that was encoded by a -consumer engaged in a personal and non-commercial activity and/or was -obtained from a video provider licensed by MPEG LA to provide MPEG-4 -video. No license is granted or shall be implied for any other -use. Additional information including that relating to promotional, -internal and commercial uses and licensing may be obtained from MPEG -LA, LLC. See http://www.mpegla.com. This product is licensed under -the MPEG-4 systems patent portfolio license for encoding in compliance -with the MPEG-4 systems standard, except that an additional license -and payment of royalties are necessary for encoding in connection with -(i) data stored or replicated in physical media which is paid for on a -title by title basis and/or (ii) data which is paid for on a title by -title basis and is transmitted to an end user for permanent storage -and/or use, such additional license may be obtained from MPEG LA, -LLC. See http://www.mpegla.com for additional details.
- -18.3. H.264/AVC. H.264/AVC technology may be included with the -software. MPEG LA, L.L.C. requires this notice:
- -This product is licensed under the AVC patent portfolio license for -the personal use of a consumer or other uses in which it does not -receive remuneration to (i) encode video in compliance with the AVC -standard (âAVC videoâ) and/or (ii) decode AVC video that was encoded -by a consumer engaged in a personal activity and/or was obtained from -a video provider licensed to provide AVC video. No license is granted -or shall be implied for any other use. Additional information may be -obtained from MPEG LA, L.L.C. See http://www.mpegla.com.
-
Note the requirement that the videos created can only be used for -personal or non-commercial purposes.
- -The Sorenson Media software have -similar terms:
- -- -- -With respect to a license from Sorenson pertaining to MPEG-4 Video -Decoders and/or Encoders: Any such product is licensed under the -MPEG-4 visual patent portfolio license for the personal and -non-commercial use of a consumer for (i) encoding video in compliance -with the MPEG-4 visual standard (âMPEG-4 videoâ) and/or (ii) decoding -MPEG-4 video that was encoded by a consumer engaged in a personal and -non-commercial activity and/or was obtained from a video provider -licensed by MPEG LA to provide MPEG-4 video. No license is granted or -shall be implied for any other use. Additional information including -that relating to promotional, internal and commercial uses and -licensing may be obtained from MPEG LA, LLC. See -http://www.mpegla.com.
- -With respect to a license from Sorenson pertaining to MPEG-4 -Consumer Recorded Data Encoder, MPEG-4 Systems Internet Data Encoder, -MPEG-4 Mobile Data Encoder, and/or MPEG-4 Unique Use Encoder: Any such -product is licensed under the MPEG-4 systems patent portfolio license -for encoding in compliance with the MPEG-4 systems standard, except -that an additional license and payment of royalties are necessary for -encoding in connection with (i) data stored or replicated in physical -media which is paid for on a title by title basis and/or (ii) data -which is paid for on a title by title basis and is transmitted to an -end user for permanent storage and/or use. Such additional license may -be obtained from MPEG LA, LLC. See http://www.mpegla.com for -additional details.
- -
Some free software like -Handbrake and -FFMPEG uses GPL/LGPL licenses and do -not have any such terms included, so for those, there is no -requirement to limit the use to personal and non-commercial.
+ +Many years ago, a friend of mine calculated how much it would cost +to store the sound of all phone calls in Norway, and came up with the +cost of around 20 million NOK (2.4 mill EUR) for all the calls in a +year. I got curious and wondered what the same calculation would look +like today. To do so one need an idea of how much data storage is +needed for each minute of sound, how many minutes all the calls in +Norway sums up to, and the cost of data storage.
+ +The 2005 numbers are from +digi.no, +the 2012 numbers are from +a +NKOM report, and I got the 2013 numbers after asking NKOM via +email. I was told the numbers for 2014 will be presented May 20th, +and decided not to wait for those, as I doubt they will be very +different from the numbers from 2013.
+ +The amount of data storage per minute sound depend on the wanted +quality, and for phone calls it is generally believed that 8 Kbit/s is +enough. See for example a +summary +on voice quality from Cisco for some alternatives. 8 Kbit/s is 60 +Kbytes/min, and this can be multiplied with the number of call minutes +to get the storage requirements.
+ +Storage prices varies a lot, depending on speed, backup strategies, +availability requirements etc. But a simple way to calculate can be +to use the price of a TiB-disk (around 1000 NOK / 120 EUR) and double +it to take space, power and redundancy into account. It could be much +higher with high speed and good redundancy requirements.
+ +But back to the question, What would it cost to store all phone +calls in Norway? Not much. Here is a small table showing the +estimated cost, which is within the budget constraint of most medium +and large organisations:
+ +Year | Call minutes | Size | Price in NOK / EUR |
---|---|---|---|
2005 | 24 000 000 000 | 1.3 PiB | 3 mill / 358 000 |
2012 | 18 000 000 000 | 1.0 PiB | 2.2 mill / 262 000 |
2013 | 17 000 000 000 | 950 TiB | 2.1 mill / 250 000 |
This is the cost of buying the storage. Maintenance need to be +taken into account too, but calculating that is left as an exercise +for the reader. But it is obvious to me from those numbers that +recording the sound of all phone calls in Norway is not going to be +stopped because it is too expensive. I wonder if someone already is +collecting the data?
Lenge siden jeg har hatt tid til å publisere lenker til skriverier -jeg har hatt glede og nytte av av å lese. Her er en liten norsk -lenkesamling.
- --
-
-
- Sjøslag -om fiskemilliardene (NRK Ytring 2014-03-03) - litt om hvordan de -norske felles matressurser røves fra felleskapet. - -
- Matkrisen -kan komme til Norge (Aftenposten 2014-4-01) - hvordan miljøendringene vil gjøre matproduksjonen i Norge mer sårbar. - -
- Norge -trenger kornlager (NRK Ytring 2014-06-07) Chr. Anton Smedshaug -forteller litt om Norges sårbare matsituasjon etter at Staten solgte -Norges kornlager. - -
- PST -vil overvåke datatastaturer (NRK 2014-03-04) - PST ønsker retten -til å bryte seg inn på private PC-er og legge inn spionprogrammer. -Hvilket nok vil gjøre Linux mer populært, men gjør at en i enda mindre -grad enn i dag kan stole på datamaskiner - neppe en god ide for -samfunnet totalt sett. - -
- «Ruter -fremstår som et pøbelvelde» (OsloBy 2014-03-05) - et eksempel på -hvordan kollektivtransportselskapet i Oslo håndterer sine kunder. - -
- Clear -Channel nektet å vise Greenpeace-reklame i Oslo (Dagbladet -2014-03-05) - forteller litt om hvordan hvilke budskap som når ut i -det offentlige rom kontrolleres i Norge. - -
- Svarte -ikke på kritikken (Dagbladet 2014-03-06) - innlegg fra Norsk -presseforbund der de nok en gang tar opp det forkastelige i at -politiet nå har full tilgang til å bedrive telefonkontroll av -advokater. - -
- «Putin -spiller poker, ikke sjakk. I sjakk har man regler.» (Aftenposten -2014-03-08) - sjakklegenden Kasparov forklarer litt om hvordan han ser -at Russlands politikk fungerer, blant annet i lys av started av -Ukraina-krisen. - -
- I -seng med fienden (Aftenposten 2014-03-10) - kronikk fra Eirik -H. Vinje om hvordan menn og kvinner settes opp mot hverandre i det -offentlige ordskiftet, kanskje på sviktende grunnlag. - -
- Fritt -frem for skulk (Aftenposten 2014-03-14) - skildring av hvordan -norske elever i dag ikke lenger har rimelig krav om oppmøte på -skolen. - -
- «Datalagringsdirektiv» -avslørte abort, sykdom og våpenkjøp (Aftenposten 2014-03-14) - om -hvordan forskere har dokumentert hvordan innsamling av metadata om -telefoni og Internett-bruk kan være svært avslørende. - -
- Konsentrasjonssvikt -på pensum (Dagbladet 2014-03-14) - Kommentar om hvordan (feil) -bruk IKT i skolen kan ødelegge mer enn det bidrar til læring. - -
- Reservasjonsrettsstaten -(blogg fra Doremus 2014-02-09) - morsom beskrivelse om hvordan -regjeringens forslag til reservasjonsrett for leger kan utvides til å -gjelde alles samvittighet. - -
- Autoritær -gjøkunge (Aftenposten 2014-03-25) - Kronikk av Bjørn Stærk om -snurpenots-overvåkningen som varsleren Snowden dokumenterte. - -
- Leveransekrise -i Offentlig sektor â mener Mike Bracken, Executive Director of Digital -in the Cabinet Office (blogg fra Friprog-senteret 2014-03-26). - -
- Norge -må stanse avlyttingen (Dagbladet 2014-03-26) - leserinnlegg fra -Felix Horne der han ber om at Norge gjør en innsats for å få slutt på -overvåkning av innbyggerne som gjøres i Norge av Etiopiske -myndigheter. - -
- Demokrati -er ingen naturlig styreform (Aftenposten 2014-04-01) - kronikk av -Stein Ringen om hvordan demokrati som styreform går tapt når -innbyggerne tar det for gitt. - -
- Ytringsansvar -ere Enhver tilladte! (NRK Ytring 2014-04-01) - innspill fra Trygve -Svensson og Helge Svare om at hver enkelt av oss har et ansvar for å -ytre oss i den offentlige debatten. - -
- Jeg -er ingen god samfunnsborger (Aftenposten 2014-04-16), kronikk av -Simen Tveitereid om alternative måter å motiveres i samfunnet, uten å -hige etter mer penger og flere ting. - -
- DLD-dommen: -Avgjørelsen får umiddelbar virkning (Aftenposten 2014-04-10) - -kronikk av Høyres Michael Tetzschner, en partiutbryter i DLD-saken som -stemte nei til DLD i Stortinget i 2011. - -
- Datalagringsdirektivets -endelikt (blogg fra John Wessel-Aas 2014-04-11) - oppsummering -av hvordan direktivet ble funnet ugyldig i EU-domstolen. - -
- Kronikk: -Kapitulasjonspresidenten (VG 2014-04-22) - kronikk av Einar -Kr. Steffenak om hvordan Stortingspresidenten og regjeringen viser sin -prinsippløshet i møte med Kina. - -
- Innerst -inne er alle nordmenn (Aftenposten 2014-04-27) - kronikk fra Bjørn -Stærk om hvordan vi i Vesten i stor grad baserer oss på en fantasi om -at alle i verden bærer på en drøm om å bli som oss. - -
- Det -italienske senatet gav seg selv 134 milliarder euro i sluttpakke -(Aftenposten 2014-06-19) - forsker Simen Gaure forteller hvordan -løgner og fantasi fra nettkilder i stor grad blir akseptert som -sannhet - antagelig også av deg og meg. - -
- Et -forsvar for brÃ¥kmakerne (Dagbladet 2014-05-30) - kronikk av Dag -Ãystein Nome som beskriver hvordan dagens skole ikke fungerer sÃ¥ godt -for mange elever. - -
- Betalte -med slitt seddel - havnet i arresten (Osloby 2014-06-25)) - -dokumentasjon av Oslopolitiets angrep på vår alles rett til å ferdes -uten elektronisk sporing. Jeg bruker kontanter i så stor grad som -mulig da banken ikke har noe med hvor jeg er og hva jeg kjøper. Vi -som gjør dette risikerer som beskrevet overgrep som frihetsberøvelse -og registrering og lagring av fingeravtrykk og bilde i politiets -database over mistenkte. - -
- Fredsprisen -til Snowden (Aftenposten 2014-06-28) - leder som forklarer hvorfor -varsleren Snowden bør få fredsprisen. - -
- Strategi -for politistaten (Dagbladet 2014-08-01) - leder som advarer om -sterke krefter som bruker terrortrusselen til å lirke Norge nærmere å -bli en politistat. - -
- Vi -må tenke nytt om narkotika (NRK Ytring 2014-08-03) - Mark Lewis -forklarer hvorfor legalisering og offentlig kontroll av -narkotikamarkedet er mye bedre enn å overlate det til kriminelle. - - -
I am happy to report that the Debian Edu team sent out +this +announcement today:
+ ++the Debian Edu / Skolelinux project is pleased to announce the first +*beta* release of Debian Edu "Jessie" 8.0+edu0~b1, which for the first +time is composed entirely of packages from the current Debian stable +release, Debian 8 "Jessie". + +(As most reading this will know, Debian "Jessie" hasn't actually been +released by now. The release is still in progress but should finish +later today ;) + +We expect to make a final release of Debian Edu "Jessie" in the coming +weeks, timed with the first point release of Debian Jessie. Upgrades +from this beta release of Debian Edu Jessie to the final release will +be possible and encouraged! + +Please report feedback to debian-edu@lists.debian.org and/or submit +bugs: http://wiki.debian.org/DebianEdu/HowTo/ReportBugs + +Debian Edu - sometimes also known as "Skolelinux" - is a complete +operating system for schools, universities and other +organisations. Through its pre- prepared installation profiles +administrators can install servers, workstations and laptops which +will work in harmony on the school network. With Debian Edu, the +teachers themselves or their technical support staff can roll out a +complete multi-user, multi-machine study environment within hours or +days. + +Debian Edu is already in use at several hundred schools all over the +world, particularly in Germany, Spain and Norway. Installations come +with hundreds of applications pre-installed, plus the whole Debian +archive of thousands of compatible packages within easy reach. + +For those who want to give Debian Edu Jessie a try, download and +installation instructions are available, including detailed +instructions in the manual explaining the first steps, such as setting +up a network or adding users. Please note that the password for the +user your prompted for during installation must have a length of at +least 5 characters! + +== Where to download == + +A multi-architecture CD / usbstick image (649 MiB) for network booting +can be downloaded at the following locations: + + http://ftp.skolelinux.org/skolelinux-cd/debian-edu-8.0+edu0~b1-CD.iso + rsync -avzP ftp.skolelinux.org::skolelinux-cd/debian-edu-8.0+edu0~b1-CD.iso . + +The SHA1SUM of this image is: 54a524d16246cddd8d2cfd6ea52f2dd78c47ee0a + +Alternatively an extended DVD / usbstick image (4.9 GiB) is also +available, with more software included (saving additional download +time): + + http://ftp.skolelinux.org/skolelinux-cd/debian-edu-8.0+edu0~b1-USB.iso + rsync -avzP ftp.skolelinux.org::skolelinux-cd/debian-edu-8.0+edu0~b1-USB.iso + +The SHA1SUM of this image is: fb1f1504a490c077a48653898f9d6a461cb3c636 + +Sources are available from the Debian archive, see +http://ftp.debian.org/debian-cd/8.0.0/source/ for some download +options. + +== Debian Edu Jessie manual in seven languages == + +Please see https://wiki.debian.org/DebianEdu/Documentation/Jessie/ for +the English version of the Debian Edu jessie manual. + +This manual has been fully translated to German, French, Italian, +Danish, Dutch and Norwegian Bokmål. A partly translated version exists +for Spanish. See http://maintainer.skolelinux.org/debian-edu-doc/ for +online version of the translated manual. + +More information about Debian 8 "Jessie" itself is provided in the +release notes and the installation manual: +- http://www.debian.org/releases/jessie/releasenotes +- http://www.debian.org/releases/jessie/installmanual + + +== Errata / known problems == + + It takes up to 15 minutes for a changed hostname to be updated via + DHCP (#780461). + + The hostname script fails to update LTSP server hostname (#783087). + +Workaround: run update-hostname-from-ip on the client to update the +hostname immediately. + +Check https://wiki.debian.org/DebianEdu/Status/Jessie for a possibly +more current and complete list. + +== Some more details about Debian Edu 8.0+edu0~b1 Codename Jessie released 2015-04-25 == + +=== Software updates === + +Everything which is new in Debian 8 Jessie, e.g.: + + * Linux kernel 3.16.7-ctk9; for the i386 architecture, support for + i486 processors has been dropped; oldest supported ones: i586 (like + Intel Pentium and AMD K5). + + * Desktop environments KDE Plasma Workspaces 4.11.13, GNOME 3.14, + Xfce 4.12, LXDE 0.5.6 + * new optional desktop environment: MATE 1.8 + * KDE Plasma Workspaces is installed by default; to choose one of + the others see the manual. + * the browsers Iceweasel 31 ESR and Chromium 41 + * LibreOffice 4.3.3 + * GOsa 2.7.4 + * LTSP 5.5.4 + * CUPS print system 1.7.5 + * new boot framework: systemd + * Educational toolbox GCompris 14.12 + * Music creator Rosegarden 14.02 + * Image editor Gimp 2.8.14 + * Virtual stargazer Stellarium 0.13.1 + * golearn 0.9 + * tuxpaint 0.9.22 + * New version of debian-installer from Debian Jessie. + * Debian Jessie includes about 43000 packages available for installation. + * More information about Debian 8 Jessie is provided in its release + notes and the installation manual, see the link above. + +=== Installation changes === + + Installations done via PXE now also install firmware automatically + for the hardware present. + +=== Fixed bugs === + +A number of bugs have been fixed in this release; the most noticeable +from a user perspective: + + * Inserting incorrect DNS information in Gosa will no longer break + DNS completely, but instead stop DNS updates until the incorrect + information is corrected (710362) + + * shutdown-at-night now shuts the system down if gdm3 is used (775608). + +=== Sugar desktop removed === + +As the Sugar desktop was removed from Debian Jessie, it is also not +available in Debian Edu jessie. + + +== About Debian Edu / Skolelinux == + +Debian Edu, also known as Skolelinux, is a Linux distribution based on +Debian providing an out-of-the box environment of a completely +configured school network. Directly after installation a school server +running all services needed for a school network is set up just +waiting for users and machines being added via GOsa², a comfortable +Web-UI. A netbooting environment is prepared using PXE, so after +initial installation of the main server from CD or USB stick all other +machines can be installed via the network. The provided school server +provides LDAP database and Kerberos authentication service, +centralized home directories, DHCP server, web proxy and many other +services. The desktop contains more than 60 educational software +packages and more are available from the Debian archive, and schools +can choose between KDE, GNOME, LXDE, Xfce and MATE desktop +environment. + +== About Debian == + +The Debian Project was founded in 1993 by Ian Murdock to be a truly +free community project. Since then the project has grown to be one of +the largest and most influential open source projects. Thousands of +volunteers from all over the world work together to create and +maintain Debian software. Available in 70 languages, and supporting a +huge range of computer types, Debian calls itself the universal +operating system. + +== Thanks == + +Thanks to everyone making Debian and Debian Edu / Skolelinux happen! +You rock. +
The complete and free âout of the boxâ software solution for -schools, Debian Edu / -Skolelinux, is used quite a lot in Germany, and one of the people -involved is Bernd Zeitzen, who show up on the project mailing lists -from time to time with interesting questions and tips on how to adjust -the setup. I managed to interview him this summer.
+ +It was a surprise to me to learn that project to create a complete +computer system for schools I've involved in, +Debian Edu / Skolelinux, was +being used in India. But apparently it is, and I managed to get an +interview with one of the friends of the project there, Shirish +Agarwal.
Who are you, and how do you spend your days?
-My name is Bernd Zeitzen and I'm married with Hedda, a self -employed physiotherapist. My former profession is tool maker, but I -haven't worked for 30 years in this job. 30 years ago I started to -support my wife and become her officeworker and a few years later the -administrator for a small computer network, today based on Ubuntu -Server (Samba, OpenVPN). For her daily work she has to use Windows -Desktops because the software she needs to organize her business only -works with Windows . :-(
- -In 1988 we started with one PC and DOS, then I learned to use -Windows 98, 2000, XP, â¦, 8, Ubuntu, MacOSX. Today we are running a -Linux server with 6 Windows clients and 10 persons (teacher of -children with special needs, speech therapist, occupational therapist, -psychologist and officeworkers) using our Samba shares via OpenVPN to -work with the documentations of our patients.
+My name is Shirish Agarwal. Based out of the educational and +historical city of Pune, from the western state of Maharashtra, India. +My bread comes from giving training, giving policy tips, +installations on free software to mom and pop shops in different +fields from Desktop publishing to retail shops as well as work with +few software start-ups as well.
How did you get in contact with the Skolelinux / Debian Edu project?
-Two years ago a friend of mine asked me, if I want to get a job in -his school (Gymnasium -Harsewinkel). They started with Skolelinux / Debian Edu and they -were looking for people to give support to the teachers using the -software and the network and teaching the pupils increasing their -computer skills in optional lessons. I'm spending 4-6 hours a week -with this job.
+It started innocently enough. I have been using Debian for a few +years and in one local minidebconf / debutsav I was asked if there was +anything for schools or education. I had worked / played with free +educational softwares such as Gcompris and Stellarium for my many +nieces and nephews so researched and found Debian Edu or Skolelinux as +it was known then. Since then I have started using the various +education meta-packages provided by the project.
What do you see as the advantages of Skolelinux / Debian Edu?
-The independence.
- -First: Every person is allowed to use, share and develop the -software. Even if you are poor, you are allowed to use the software -included in Skolelinux/Debian Edu and all the other Free Software.
- -Second: The software runs on old machines and this gives us the -possibility to recycle computers, weeded out from offices. The -servers and desktops are running for more than two years and they are -working reliable.
- -We have two servers (one tjener and one terminal server), 45 -workstations in three classrooms and seven laptops as a mobile -solution for all classrooms. These machines are all booting from the -terminal server. In the moment we are installing 30 laptops as mobile -workstations. Then the pupils have the possibility to work with these -machines in their classrooms. Internet access is realized by a WLAN -router, connected to the schools network. This is all done without a -dedicated system administrator or a computer science teacher.
+It's closest I have seen where a package full of educational +software are packed, which are free and open (both literally and +figuratively). Even if I take the simplest software which is +gcompris, the number of activities therein are amazing. Another one of +the softwares that I have liked for a long time is stellarium. Even +pysycache is cool except for couple of issues I encountered +#781841 and +#781842.
+ +I prefer software installed on the system over web based solutions, +as a web site can disappear any time but the software on disk has the +possibility of a larger life span. Of course with both it's more a +question if it has enough users who make it fun or sustainable or both +for the developer per-se.
What do you see as the disadvantages of Skolelinux / Debian Edu?
-Teachers and pupils are Windows users. <Irony on> And Linux -isn't cool. It's software for freaks using the command line. <Irony -off> They don't realize the stability of the system.
+I do see that the Debian Edu team seems to be short-handed and I +think more efforts should be made to make it popular and ask and take +help from people and the larger community wherever possible.
+ +I don't see any disadvantage to use Skolelinux apart from the fact +that most apps. are generic which is good or bad how you see it. +However, saying that I do acknowledge the fact that the canvas is +pretty big and there are lot of interesting ideas that could be done +but for reasons not known not done or if done I don't know about them. +Let me share some of the ideas (these are more upstream based but +still) I have had for a long time :
+ +1. Classical maths question of two trains in opposing directions +each running @x kmph/mph at y distance, when they will meet and how +far would each travel and similar questions like these. + +
The computer is a fantastic system where questions like these can +be drawn, animated and the methodology and answers teased out in +interactive manner. While sites such as the +Ask +Dr. Math FAQ on The Two Trains problem (as an example or point of +inspiration) can be used there is lot more that can be done. I dunno +if there is a free software which does something like this. The idea +being a blend of objects + animation + interaction which does +this. The whole interaction could be gamified with points or sounds or +colourful celebration whenever the user gets even part of the question +or/and methodology right. That would help reinforce good behaviour. +This understanding could be used to share/showcase everything from how +the first wheel came to be, to evolution to how astronomy started, +psychics and everything in-between.
+ +One specific idea in the train part was having the Linux mascot on +one train and the BSD or GNU mascot on the other train and they +meeting somewhere in-between. Characters from blender movies could +also be used.
+ +2. Loads of crossword-puzzles with reference to subjects: We have +enormous data sets in Wikipedia and Wikitionary. I don't think it +should be a big job to design crossword puzzles. Using categories and +sub-categories it should be doable to have Q&A single word answers +from the existing data-sets. What would make it easy or hard could be +the length of the word + existence of many or few vowels depending on +the user's input.
+ +3. Jigsaw puzzles - We already have a great software called +palapeli with number of slicers making it pretty interesting. What +needs to be done is to download large number of public domain and +copyleft images, tease and use IPTC tags to categorise them into +nature, history etc. and let it loose. This could turn to be really +huge collection of images. One source could be taken from +commons.wikimedia.org, others could be huge collection of royalty-free +stock photos. Potential is immense.
+ +Apart from this, free software suffers in two directions, we lag +both in development (of using new features per-se) and maintenance a +lot. This is more so in educational software as these applications +need to be timely and the opportunity cost of missing deadlines is +immense. If we are able to solve issues of funding for development and +maintenance of such software I don't see any big difficulties. I know +of few start-ups in and around India who would love to develop and +maintain such software if funding issues could be solved.
Which free software do you use daily?
-Firefox, Thunderbird, LibreOffice, Ubuntu Server 12.04 (Samba, -Apache, MySQL, Joomla!, ⦠and Skolelinux / Debian Edu)
+That would be huge list. Some of the softwares are obviously apt, +aptitude, debdelta, leafpad, the shell of course (zsh nowadays), +quassel for IRC. In games I use shisen-sho while card-games are evenly +between kpat and Aiselriot. In desktops it's a tie between +gnome-flashback and mate.
Which strategy do you believe is the right one to use to get schools to use free software?
-In Germany we have the situation: every school is free to decide -which software they want to use. This decision is influenced by -teachers who learned to use Windows and MS Office. They buy a PC with -Windows preinstalled and an additional testing version of MS -Office. They don't know about the possibility to use Free Software -instead. Another problem are the publisher of school books. They -develop their software, added to the school books, for Windows.
+I think it should first start with using specific FOSS apps. in +whatever environment they are. If it's MS-Windows or Mac so be it. +Once they are habitual with the apps. and there is buy-in from the +school management then it could be installed anywhere. Most of the +people now understand the concept of a repository because of the +various online stores so it isn't hard to convince on that front.
+ +What is harder is having enough people with technical skills and +passion to service them. If you get buy-in from one or two teachers +then ideas like above could also be asked to be done as a project as +well.
+ +I think where we fall short more than anything is in marketing. For +instance, Debian has this whole range of fonts in its archive but +there isn't even a page where all those different fonts in the La +Ipsum format could be tried out for newcomers.
+ +One of the issues faced constantly in installations is with updates +and upgrades. People have this myth that each update and upgrade +means the user interface will / has to change. I have seen this +innumerable times. That perhaps is one of the reasons which browsers +like Iceweasel / Firefox change user interfaces so much, not because +it might be needed or be functional but because people believe that +changed user interfaces are better. This, can easily be pointed with +the user interfaces changed with almost every MS-Windows and Mac OS +releases.
+ +The problems with Debian Edu for deployment are many. The biggest +is the huge gap between what is taught in schools and what Debian Edu +is aimed at. + +
Me and my friends did teach on week-ends in a government school for +around 2 years, and +gathered +some experience there. Some of the things we learnt/discovered +there was :
+ +-
+
+
- Most of the teachers are very territorial about their subjects + and they do not want you to teach anything out of the + portion/syllabus given. + +
- They want any activity on the system in accordance to whatever + is in the syllabus. + +
- There are huge barriers both with the English language and at + times with objects or whatever. An example, let's say in gcompris + you have objects falling down and you have to name them and let's + say the falling object is a hat or a fedora hat, this would not be + as recognizable as say a + Puneri + Pagdi so there is need to inject local objects, words wherever + possible. Especially for word-games there are so many hindi words + which have become part of english vocabulary (for instance in + parley), those could be made into a hinglish collection or + something but that is something for upstream to do. + +