February 2015 - Talk - lists.gtalug.org

meeting tomorrow: topic?
by D. Hugh Redelmeier 15 Jul '15

15 Jul '15

According to <http://gtalug.org/> : "GTALUG is currently looking for speakers for the 9th December, 2014 meeting. If you are interested in speaking please contact our talks coordinator." Let's brainstorm on this. Here's a poorly organized dump of some of my thoughts. - I'd love to hear Lennart talk about what he's learned working on routers. - I'd like to learn what each of you has learned using Linux (or perhaps, not able to do using Linux) and what your current Linux-related interests are. - I'd like to hear how people have set up their internet gatways. What's worth doing, what's easy, what's hard. (It's time for me to revisit this after having a pretty static setup for a decade. I'd be willing to talk about what I've done but it is pretty stale.) - I'm interested in setting up my in-house services like a cloud. Perhaps <http://owncloud.org/>. Motivation: I want to keep control of my own data as much as possible. Can anyone speak to this? - Subproblem of above: I run MediaWiki already. Tips and tricks (eg. from Drew) about care, feeding, and use would be welcome. - I'd be willing to share 10 minutes worth of what I've learned about little Windows gadgets as Linux platforms. - I'd love to discuss whether this is interesting and useful <http://www.banana-pi.com/eacp_view.asp?id=64> This is a version of the Banana Pi with an added ethernet switch: 5 x 1G eithernet ports. The Banana Pi is intended to mimic the Raspberry Pi in some ways but with a stronger processor; my impression has been that this is goofy and that the Cubieboard2 and Cubietruck <http://cubieboard.org/> were more transparent uses of the Allwinner chips. But gluing on a switch seems very attractive. - chatting about peoples' workflow always seems useful: it's not just the tools, its how we use them, how we find them useful, and where they don't quite meet expectations. Examples: backup methodology, distro update methodology, favourite editor (leave out tribalism), programming language, etc. - why Go is interesting <https://golang.org/>. Why Rust is interesting <http://www.rust-lang.org/>. Why Python 2.x still has a loyal following. - what are you doing with your _____? Example: Raspberry Pi. - How you make your mobile device work with your desktop? Summary: we've had Question and Answer sessions, how about an Answer and Question session? By that I meen: people give a mini-chat about something they think is interesting and have the rest of us ask questions in response.

24 52

2 networks under ip (iproute2)
by Walter Dnes 02 Mar '15

02 Mar '15

This is frustrating, because it works for me under ifconfig, but not under ip (iproute2). I have 3 devices in this scenario... * my desktop PC 192.168.123.251/29 * an HDHomerun TV tuner that comes up in the 169.254.0.0/16 block * the ADSL router/modem at 192.168.123.254/29 to which the PC and the tuner are connected. I'm trying to get my desktop PC to talk to the TV tuner using ip. What am I doing wrong in the following set of commands? ip address flush dev eth0 ip link set eth0 down ip link set eth0 up ip address add 192.168.123.251/29 dev eth0 ip route add default via 192.168.123.254 ip address add 169.254.1.1/16 dev eth0 ip route delete 169.254.0.0/16 dev eth0 ip route add 169.254.0.0/16 via 192.168.123.254 ip address show ip route show The ouput from the 2 "show" commands is... 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 brd 127.255.255.255 scope host lo valid_lft forever preferred_lft forever 2: eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN group default qlen 1000 link/ether 00:1d:09:96:6c:1c brd ff:ff:ff:ff:ff:ff inet 192.168.123.251/29 scope global eth0 valid_lft forever preferred_lft forever inet 169.254.1.1/16 scope global eth0 valid_lft forever preferred_lft forever default via 192.168.123.254 dev eth0 127.0.0.0/8 dev lo scope host 169.254.0.0/16 via 192.168.123.254 dev eth0 192.168.123.248/29 dev eth0 proto kernel scope link src 192.168.123.251 -- Walter Dnes <waltdnes(a)waltdnes.org>

8 33

SSH Hangs
by Dev Guy 02 Mar '15

02 Mar '15

Hi All, I am having a real nagging problem with ssh. I setup dynamic dns so I could I connect to my box from outside. My basic setup is a router connected to a cable modem. I've opened the firewall port 22 tcp/udp on my router. However he is the problem I am having. I can ssh into my box from inside my LAN like, ssh 192.168.0.100, works fine! However when I try to ssh using my dynamic dns (or the external IP), ssh will hang and never return. 1) I've tried running my sshd in debug mode and here is the output =====(SERVER SIDE)===== debug1: sshd version OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014 debug1: key_parse_private2: missing begin marker debug1: read PEM private key done: type RSA debug1: private host key: #0 type 1 RSA debug1: key_parse_private2: missing begin marker debug1: read PEM private key done: type DSA debug1: private host key: #1 type 2 DSA debug1: key_parse_private2: missing begin marker debug1: read PEM private key done: type ECDSA debug1: private host key: #2 type 3 ECDSA debug1: private host key: #3 type 4 ED25519 debug1: rexec_argv[0]='/usr/sbin/sshd' debug1: rexec_argv[1]='-d' Set /proc/self/oom_score_adj from 0 to -1000 debug1: Bind to port 22 on 0.0.0.0. Server listening on 0.0.0.0 port 22. debug1: Bind to port 22 on ::. Server listening on :: port 22. debug1: Server will not fork when running in debugging mode. debug1: rexec start in 5 out 5 newsock 5 pipe -1 sock 8 debug1: inetd sockets after dupping: 3, 3 Connection from 192.168.0.1 port 48996 on 192.168.0.100 port 22 2) Here is the ssh verbose output =====(CLIENT SIDE)===== OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014 debug1: Reading configuration data /etc/ssh/ssh_config debug1: /etc/ssh/ssh_config line 19: Applying options for * debug2: ssh_connect: needpriv 0 debug1: Connecting to yadav.duckdns.org [209.122.208.175] port 22. debug1: Connection established. debug3: Incorrect RSA1 identifier debug3: Could not load "/home/yadav/.ssh/id_rsa" as a RSA1 public key debug1: identity file /home/yadav/.ssh/id_rsa type 1 debug1: identity file /home/yadav/.ssh/id_rsa-cert type -1 debug1: identity file /home/yadav/.ssh/id_dsa type -1 debug1: identity file /home/yadav/.ssh/id_dsa-cert type -1 debug1: identity file /home/yadav/.ssh/id_ecdsa type -1 debug1: identity file /home/yadav/.ssh/id_ecdsa-cert type -1 debug1: identity file /home/yadav/.ssh/id_ed25519 type -1 debug1: identity file /home/yadav/.ssh/id_ed25519-cert type -1 debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-8 As you can see from the server output the connection gets established, but then the hang happens and I can't figure out what's going on? Someone suggested that sshd might be trying to do a reverse lookup and to add, 'UseDNS no' to /etc/ssh/sshd_config and restarting the daemon. This didn't work! Any ideas? I can't seem to find anything for my particular problem on the Internet.

5 6

Libre Graphics in Toronto
by Martin Owens 27 Feb '15

27 Feb '15

Dear lug, The Libre Graphics meeting is coming in April[1] and I was wondering if anyone had posted a message about the event here? I know LUGs tend to be more technical/sysadmin, but since this is a bunch of Linux software developers getting together, then I'd encourage everyone interested to check out their page: [1] http://libregraphicsmeeting.org/2015/ I'm actually with the Inkscape project and we're looking for local people who are interested in inkscape and future development etc. We've got a contact form if interested: https://inkscape.org/contact/us/ Thanks! Best Regards, Martin Owens

3 2

OT: Canadian source for electronics hobby gear, parts
by William Witteman 25 Feb '15

25 Feb '15

This is off topic, but I thought I might get some advice here. I have been asked to make a small electronic device. I have instructions, but the supplies are sourced from US or UK companies, which of course incur heavy shipping and exchange-rate taxes. Does anyone have a source for electronics gear (I'll need a bluetooth LE module, a Wixel, battery, resistors, heat-shrink tubing, a small enclosure, soldering iron, etc) in Canada, or someone you've had good experiences with? Thanks! William

10 13

[GTALUG-Announce] Meeting 10th March, 2015 at 7:30 pm
by Myles Braithwaite 24 Feb '15

24 Feb '15

<http://gtalug.org/meeting/2015-03/> # Short Talks on Productivity Tools ownCloud - Alex Volkov todo.sh - Christopher Browne todo.sh Touch - Scott Sullivan jrnl - Myles Braithwaite If you are interested in doing a short talk at this meeting please contact the speaker coordinator: <speaker-coordinator(a)gtalug.org>. ## Location George Vari Engineering and Computing Centre 245 Church Street, Room 203 Ryerson University <http://goo.gl/maps/16oJ2> <http://www.openstreetmap.org/way/23447525> ## Schedule * 6:00 pm - Before each meeting a group of GTALUGers dine at Ethiopiques (227 Church Street). * 7:30 pm - Meeting and presentation. * 9:00 pm - After each meeting a group of GTALUGers move to the The Imperial Pub (54 Dundas St East) for refreshments and more socializing. ## Code of Conduct We want a productive happy community that can welcome new ideas, improve every process every year, and foster collaboration between individuals with differing needs, interests and skills. We gain strength from diversity, and actively seek participation from those who enhance it. This code of conduct exists to ensure that diverse groups collaborate to mutual advantage and enjoyment. We will challenge prejudice that could jeopardize the participation of any person in the community. The Code of Conduct governs how we behave in public or in private whenever the Linux community will be judged by our actions. We expect it to be honored by everyone who represents the community officially or informally, claims affiliation, or participates directly. It applies to activities online or offline. We invite anybody to participate. Our community is open. Please read more about the GTALUG Code of Conduct here: <http://gtalug.org/about/code-of-conduct/>. If you have any questions, comments, or concerns about the GTALUG Code of Conduct please contact one of the GTALUG Board Members. --- GTALUG Announce mailing list announce(a)gtalug.org http://gtalug.org/mailman/listinfo/announce

1 1

interesting new approach to forking
by D. Hugh Redelmeier 22 Feb '15

22 Feb '15

Cyanogen mod is forking Android (we knew that) but it how seems to be a big-money commercial play. <http://www.zdnet.com/article/cyanogen-looks-to-amazon-microsoft-funds-to-ta…> And here I thought it was just a "community". This has happened a bit in the past with a fork of XBMC. It didn't turn out well.

13 35

Connection Refused
by Randy Jonasz 22 Feb '15

22 Feb '15

Hello, I have an ubuntu 14.04 server running postfix. I wanted to test it with telnet on port 25. Alas I receive connection refused errors although I can ssh to the server fine and see that master is listening on port 25. I ssh'd to another machine outside of my lan and tried telnet from there. I was able to connect fine. Does anyone have any suggestions how I can troubleshoot this? My hosts.deny file is empty. Here's the server's iptables -L output. My wan address is not listed. Thanks for your help! Randy root@foucault:/etc/postfix# iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination fail2ban-ErrorAccess tcp -- anywhere anywhere multiport dports http,https fail2ban-ReqLimit tcp -- anywhere anywhere multiport dports http,https fail2ban-dovecot tcp -- anywhere anywhere multiport dports smtp,urd,submission,imap2,imap3,imaps,pop3,pop3s fail2ban-postfix tcp -- anywhere anywhere multiport dports smtp,urd,submission fail2ban-ssh-ddos tcp -- anywhere anywhere multiport dports ssh fail2ban-ssh tcp -- anywhere anywhere multiport dports ssh Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain fail2ban-ErrorAccess (1 references) target prot opt source destination RETURN all -- anywhere anywhere Chain fail2ban-ReqLimit (1 references) target prot opt source destination REJECT all -- hosted-by.sistem724.com.tr anywhere reject-with icmp-port-unreachable RETURN all -- anywhere anywhere Chain fail2ban-dovecot (1 references) target prot opt source destination RETURN all -- anywhere anywhere Chain fail2ban-postfix (1 references) target prot opt source destination RETURN all -- anywhere anywhere Chain fail2ban-ssh (1 references) target prot opt source destination REJECT all -- www.albena.bg anywhere reject-with icmp-port-unreachable REJECT all -- 182.100.67.115 anywhere reject-with icmp-port-unreachable REJECT all -- dynamicip-188-232-146-41.pppoe.omsk.ertelecom.ru anywhere reject-with icmp-port-unreachable REJECT all -- outgoing-auas.carlson.com anywhere reject-with icmp-port-unreachable REJECT all -- 221.233.125.180 anywhere reject-with icmp-port-unreachable REJECT all -- 2h56.xjtu.edu.cn anywhere reject-with icmp-port-unreachable REJECT all -- vps3d196-static.vdrs.net anywhere reject-with icmp-port-unreachable REJECT all -- static.vdc.vn anywhere reject-with icmp-port-unreachable REJECT all -- grupoazul130.static.host.gvt.net.br anywhere reject-with icmp-port-unreachable REJECT all -- 182.100.67.114 anywhere reject-with icmp-port-unreachable REJECT all -- luna933.server4you.de anywhere reject-with icmp-port-unreachable REJECT all -- 115.231.222.45 anywhere reject-with icmp-port-unreachable REJECT all -- 115.239.228.7 anywhere reject-with icmp-port-unreachable REJECT all -- 115.239.228.15 anywhere reject-with icmp-port-unreachable REJECT all -- static.vdc.vn anywhere reject-with icmp-port-unreachable REJECT all -- 218.205.48.105 anywhere reject-with icmp-port-unreachable REJECT all -- 115.239.228.4 anywhere reject-with icmp-port-unreachable REJECT all -- 5-14-20-84.residential.rdsnet.ro anywhere reject-with icmp-port-unreachable REJECT all -- 94.102.53.182 anywhere reject-with icmp-port-unreachable REJECT all -- dynamic.vdc.vn anywhere reject-with icmp-port-unreachable REJECT all -- 59.57.253.94 anywhere reject-with icmp-port-unreachable REJECT all -- 115.239.228.9 anywhere reject-with icmp-port-unreachable REJECT all -- 183.136.216.4 anywhere reject-with icmp-port-unreachable RETURN all -- anywhere anywhere

8 12

Raid 10 repair question
by o1bigtenor 21 Feb '15

21 Feb '15

Greetings I have been running a raid 10 array for almost 3 years. Last September on a reboot (forced by Firefox and kernel memory interaction problems) came up with one of the drives being listed as DOA. The raid array has continued to run on 3 drives although on reboots there is much complaining from whatever in the boot up process. I had the replacement drive sent to me and today I installed the drive. I was under the assumption that the raid array would rebuild itself upon startup with a new drive (4th out of 4). This did not happen. I am running Debian Jessie (testing) and have the whole time in question. I can mount the array and it is visible. I'm looking at backing up the array (on blu-ray discs) but as I'm now to circa 45 GB of data and I was at about 22 GB when I last did a backup this is going to be a momentous event. How do I ask mdadm to include this new drive into the array? (Without borking everything!! I have found lots of instructions on how to create but none in an hour of trying different search phrases on how to rebuild or how to cause the array to rebuild itself. I have only been able to find instructions for when the array is totally sick and I'm not there (yet - - - grin!) but I don't want to wait until another drive craps out to get things going.) TIA Dee

5 23

RAID and IX-2-dl
by D. Hugh Redelmeier 20 Feb '15

20 Feb '15

I just bought a LenovoEMC / IOmega IX2-dl NAS box (cheap, of course). It has a pair of WD Green 2T disk drives. The supplied firmware is Linux, of course. With a pretty face. /proc/cpuid says "Feroceon 88FR131 rev 1 (v5l)" which I think is an unfortunately old ARM family. It has 256M of RAM. The kernel is "2.6.31.8". It offers me RAID 1, RAID 0, and "none". I don't think that I want either RAID and I'm not sure what "none" is. I don't want RAID 1 because It doesn't give me much reliability improvement for the price (halving the space) and it doesn't give me any speed improvement. I don't want RAID 0 since it gives me less reliability than no RAID. I want two different filesystems so that when one goes south, the other isn't lost. Any advice on how to lightly prod this system to do what I want? Here's some configuration information. /etc/fstab doesn't mention the hard drives First, here's how it looks with the RAID1 setup. lsblk(8) says. (This command is new to me. I think that I like it): NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT loop0 7:0 0 680.4M 1 loop /mnt/apps loop1 7:1 0 8M 0 loop /mnt/etc loop2 7:2 0 100K 0 loop /oem sda 8:0 0 1.8T 0 disk ├─sda1 8:1 0 20G 0 part │ └─md0 9:0 0 20G 0 raid1 │ ├─md0_vg-BFDlv (dm-0) 253:0 0 4G 0 lvm /boot │ └─md0_vg-vol1 (dm-1) 253:1 0 16G 0 lvm /mnt/system └─sda2 8:2 0 1.8T 0 part └─md1 9:1 0 1.8T 0 raid1 └─6366c931_vg-lv163c50af (dm-2) 253:2 0 1.8T 0 lvm /mnt/pools/A/A0 sdb 8:16 0 1.8T 0 disk ├─sdb1 8:17 0 20G 0 part │ └─md0 9:0 0 20G 0 raid1 │ ├─md0_vg-BFDlv (dm-0) 253:0 0 4G 0 lvm /boot │ └─md0_vg-vol1 (dm-1) 253:1 0 16G 0 lvm /mnt/system └─sdb2 8:18 0 1.8T 0 part └─md1 9:1 0 1.8T 0 raid1 └─6366c931_vg-lv163c50af (dm-2) 253:2 0 1.8T 0 lvm /mnt/pools/A/A0 mtdblock0 31:0 0 504K 0 disk mtdblock1 31:1 0 4K 0 disk mtdblock2 31:2 0 4K 0 disk df(1) says: Filesystem 1K-blocks Used Available Use% Mounted on rootfs 51200 4216 46984 9% / /dev/root.old 11339 3185 8154 29% /initrd none 51200 4216 46984 9% / /dev/md0_vg/BFDlv 4128448 714776 3203960 19% /boot /dev/loop0 691776 619873 71903 90% /mnt/apps /dev/loop1 7657 1010 6238 14% /mnt/etc none 7657 1010 6238 14% /etc /dev/loop2 128 128 0 100% /oem tmpfs 24776 80 24696 1% /run tmpfs 5120 4 5116 1% /run/lock tmpfs 49540 0 49540 0% /run/shm /dev/mapper/md0_vg-vol1 16493480 975280 15350636 6% /mnt/system /dev/mapper/6366c931_vg-lv163c50af 1902053516 202188 1901851328 1% /mnt/pools/A/A0 /dev/mapper/6366c931_vg-lv163c50af 1902053516 202188 1901851328 1% /nfs/Backups /dev/mapper/6366c931_vg-lv163c50af 1902053516 202188 1901851328 1% /nfs/Documents /dev/mapper/6366c931_vg-lv163c50af 1902053516 202188 1901851328 1% /nfs/Movies /dev/mapper/6366c931_vg-lv163c50af 1902053516 202188 1901851328 1% /nfs/Music /dev/mapper/6366c931_vg-lv163c50af 1902053516 202188 1901851328 1% /nfs/SharedMedia /dev/mapper/6366c931_vg-lv163c50af 1902053516 202188 1901851328 1% /nfs/Pictures After I switched from RAID1 to "none": NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT loop0 7:0 0 680.4M 1 loop /mnt/apps loop1 7:1 0 8M 0 loop /mnt/etc loop2 7:2 0 100K 0 loop /oem sda 8:0 0 1.8T 0 disk ├─sda1 8:1 0 20G 0 part │ └─md0 9:0 0 20G 0 raid1 │ ├─md0_vg-BFDlv (dm-0) 253:0 0 4G 0 lvm /boot │ └─md0_vg-vol1 (dm-1) 253:1 0 16G 0 lvm /mnt/system └─sda2 8:2 0 1.8T 0 part └─md1 9:1 0 3.6T 0 linear └─529a853a_vg-lv1ac0e3be (dm-2) 253:2 0 3.6T 0 lvm /mnt/pools/A/A0 sdb 8:16 0 1.8T 0 disk ├─sdb2 8:18 0 1.8T 0 part │ └─md1 9:1 0 3.6T 0 linear │ └─529a853a_vg-lv1ac0e3be (dm-2) 253:2 0 3.6T 0 lvm /mnt/pools/A/A0 └─sdb1 8:17 0 20G 0 part └─md0 9:0 0 20G 0 raid1 ├─md0_vg-BFDlv (dm-0) 253:0 0 4G 0 lvm /boot └─md0_vg-vol1 (dm-1) 253:1 0 16G 0 lvm /mnt/system mtdblock0 31:0 0 504K 0 disk mtdblock1 31:1 0 4K 0 disk mtdblock2 31:2 0 4K 0 disk Filesystem 1K-blocks Used Available Use% Mounted on rootfs 51200 4264 46936 9% / /dev/root.old 11339 3185 8154 29% /initrd none 51200 4264 46936 9% / /dev/md0_vg/BFDlv 4128448 714776 3203960 19% /boot /dev/loop0 691776 619873 71903 90% /mnt/apps /dev/loop1 7657 1013 6235 14% /mnt/etc none 7657 1013 6235 14% /etc /dev/loop2 128 128 0 100% /oem tmpfs 24776 80 24696 1% /run tmpfs 5120 4 5116 1% /run/lock tmpfs 49540 0 49540 0% /run/shm /dev/mapper/md0_vg-vol1 16493480 975516 15350400 6% /mnt/system /dev/mapper/529a853a_vg-lv1ac0e3be 3804366528 200884 3804165644 1% /mnt/pools/A/A0

5 6