July 2015 - Talk - lists.gtalug.org

Re: [GTALUG] [UPDATE] GTALUG Meeting on 14th July at 7:30pm
by Myles Braithwaite 06 Jul '15

06 Jul '15

Here is David's talk description: > Puppet is a tool for doing configuration management. This talk will go over > what puppet is, what it can do, and how to do it. There is more than one way > to do it, some lessons have been learned in the field and from the community. > The talk will be based on [Alessandro Franceschi's fine Puppet > Tutorial](http://www.example42.com/tutorials/PuppetTutorial/). Not all slides > will be discussed (developer oriented slides will be skipped), and some > topics not mentioned in the URL will be added (work flow topics). I intend > for this talk to be a dialog and support "engaged" learning, feel free to > interrupt.

1 0

[GTALUG-Announce] GTALUG Meeting on 14th July at 7:30pm
by Myles Braithwaite 06 Jul '15

06 Jul '15

<http://gtalug.org/meeting/2015-07/> # Puppet with David Thornton Puppet is an open-source configuration management utility. ## Location George Vari Engineering and Computing Centre 245 Church Street, Room 203 Ryerson University <http://goo.gl/maps/16oJ2> <http://www.openstreetmap.org/way/23447525> ## Schedule * 6:00 pm - Before each meeting a group of GTALUGers dine at Love At First Bite (96 Gerrard Street E). * 7:30 pm - Meeting and presentation. * 9:00 pm - After each meeting a group of GTALUGers move to the The Imperial Pub (54 Dundas St East) for refreshments and more socializing. # Code of Conduct We want a productive happy community that can welcome new ideas, improve every process every year, and foster collaboration between individuals with differing needs, interests and skills. We gain strength from diversity, and actively seek participation from those who enhance it. This code of conduct exists to ensure that diverse groups collaborate to mutual advantage and enjoyment. We will challenge prejudice that could jeopardize the participation of any person in the community. The Code of Conduct governs how we behave in public or in private whenever the Linux community will be judged by our actions. We expect it to be honored by everyone who represents the community officially or informally, claims affiliation, or participates directly. It applies to activities online or offline. We invite anybody to participate. Our community is open. Please read more about the GTALUG Code of Conduct here: <http://gtalug.org/about/code-of-conduct/>. If you have any questions, comments, or concerns about the GTALUG Code of Conduct please contact the GTALUG Board @ <board(a)gtalug.org>. --- GTALUG Announce mailing list announce(a)gtalug.org http://gtalug.org/mailman/listinfo/announce

1 0

random wifi disconnects
by Stewart C. Russell 04 Jul '15

04 Jul '15

Hi, Every few days I've started to get my notebook's network connection giving out. This is what the log tells me: [Sat Jun 27 17:14:38 2015] wlan0: deauthenticated from 00:xx:xx:xx:xx:xx (Reason: 7=CLASS3_FRAME_FROM_NONASSOC_STA) [Sat Jun 27 17:14:38 2015] cfg80211: Calling CRDA to update world regulatory domain [Sat Jun 27 17:14:38 2015] wlan0: authenticate with 00:xx:xx:xx:xx:xx [Sat Jun 27 17:14:38 2015] wlan0: send auth to 00:xx:xx:xx:xx:xx [Sat Jun 27 17:14:38 2015] cfg80211: World regulatory domain updated: [Sat Jun 27 17:14:38 2015] cfg80211: DFS Master region: unset [Sat Jun 27 17:14:38 2015] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time) [Sat Jun 27 17:14:38 2015] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm), (N/A) [Sat Jun 27 17:14:38 2015] cfg80211: (2457000 KHz - … etc. Restarting network-manager often fixes it, but not always. This is on Ubuntu 15.04, x86_64. Network card is Intel Centrino Advanced-N 6235, which may well be part of the problem. I realize that there's more info I should add, but short of dumping all of /etc on you, I don't know what else would be useful. cheers, Stewart

4 5

Fwd: Living in Virtual Machines
by Giles Orr 02 Jul '15

02 Jul '15

Forwarded from Jamon, with a similar idea to Daniel's. I looked at containers and haven't totally ruled it out, but I think I prefer full OS installs. Obviously containers would use a lot less hard drive space, but full virtualization offers more isolation. ---------- Forwarded message ---------- From: Jamon Camisso Date: 2 July 2015 at 15:14 Subject: Re: [GTALUG] Living in Virtual Machines Hey top posting from an email that isn't able to post to tlug ... feel free to forward this link to the list if you like: https://blog.jessfraz.com/post/docker-containers-on-the-desktop/ Using docker's volumes feature to bind mount directories and files into a container allows things like running Xorg, with persistent writes to shared files. No NFS needed even. Jamon On 07/02/2015 12:09 PM, Giles Orr wrote: > I have this idea that's been slowly forming in my head. I wanted to > run it by TLUG for opinions to find out if I'm totally crazy or if it > might work. > > I hope to set up my desktop (and probably my laptop as well) to have a > Debian stable base OS - about as stripped as I can manage, just X with > a lightweight window manager (probably OpenBox). On top of that would > be VirtualBox, the idea being to run all my applications from virtual > machines. > > Since I'd have multiple machines accessing the same /home/, I'd want > NFS. That could be run by the host OS, but I was thinking about using > OpenWRT as the NFS server. But that immediately runs into a > difficulty: it appears that getting the VirtualBox Guest Additions > running in OpenWRT is (very?) difficult, so I'd probably have to use > raw partition access. The problem with that is that if the partition > is accessed simultaneously by any application on the host OS, you can > munge the partition. > > I'm also planning on running another OpenWRT instance: this would be > used for routing, with all the other virtual machines going through it > to access the outside world. Among other things, that would mean I > only have to administer a firewall in one place. One idea I'm still > considering is giving full control of the network card to the OpenWRT > instance and making the host OS go through OpenWRT to get to the > outside world ... > > This could all probably be done with KVM rather than VirtualBox, but I > prefer VB not only because I'm more familiar with it, but also because > .VDI disc images can vary in size (Qemu's .qcow2 image format are > fixed size) and because VirtualBox handles full screen display of OSes > better (at least once Guest Additions is installed). I'm happy to > listen to reasons in favour of KVM. > > Other virtual machines would include TinyCore, SliTaz, and Debian > Stretch. The latter would probably be my primary OS. The thought was > to ssh from the host OS to the guest with X forwarding, and then run a > launcher from the guest on the host so any applications run from the > launcher were from the guest. > > Advantages: > - I get to tinker with multiple OSes (something I enjoy) > - if I'm about to go to a dubious website, I can clone a virtual > machine, use it for the dubious visit, then destroy it > > Disadvantages that I've thought of so far: > - memory usage > - speed reduction > - hard drive usage for disk images > - complexity > - mounting USB sticks on guests is extremely problematic > - playing sound/video from guests through the host is imperfect > - hard to determine where an application is running from > > I'm sure there are many, many other problems with this idea. Go to > town, that's why I'm here. -- Giles http://www.gilesorr.com/ gilesorr(a)gmail.com

2 1

Living in Virtual Machines
by Giles Orr 02 Jul '15

02 Jul '15

I have this idea that's been slowly forming in my head. I wanted to run it by TLUG for opinions to find out if I'm totally crazy or if it might work. I hope to set up my desktop (and probably my laptop as well) to have a Debian stable base OS - about as stripped as I can manage, just X with a lightweight window manager (probably OpenBox). On top of that would be VirtualBox, the idea being to run all my applications from virtual machines. Since I'd have multiple machines accessing the same /home/, I'd want NFS. That could be run by the host OS, but I was thinking about using OpenWRT as the NFS server. But that immediately runs into a difficulty: it appears that getting the VirtualBox Guest Additions running in OpenWRT is (very?) difficult, so I'd probably have to use raw partition access. The problem with that is that if the partition is accessed simultaneously by any application on the host OS, you can munge the partition. I'm also planning on running another OpenWRT instance: this would be used for routing, with all the other virtual machines going through it to access the outside world. Among other things, that would mean I only have to administer a firewall in one place. One idea I'm still considering is giving full control of the network card to the OpenWRT instance and making the host OS go through OpenWRT to get to the outside world ... This could all probably be done with KVM rather than VirtualBox, but I prefer VB not only because I'm more familiar with it, but also because .VDI disc images can vary in size (Qemu's .qcow2 image format are fixed size) and because VirtualBox handles full screen display of OSes better (at least once Guest Additions is installed). I'm happy to listen to reasons in favour of KVM. Other virtual machines would include TinyCore, SliTaz, and Debian Stretch. The latter would probably be my primary OS. The thought was to ssh from the host OS to the guest with X forwarding, and then run a launcher from the guest on the host so any applications run from the launcher were from the guest. Advantages: - I get to tinker with multiple OSes (something I enjoy) - if I'm about to go to a dubious website, I can clone a virtual machine, use it for the dubious visit, then destroy it Disadvantages that I've thought of so far: - memory usage - speed reduction - hard drive usage for disk images - complexity - mounting USB sticks on guests is extremely problematic - playing sound/video from guests through the host is imperfect - hard to determine where an application is running from I'm sure there are many, many other problems with this idea. Go to town, that's why I'm here. -- Giles http://www.gilesorr.com/ gilesorr(a)gmail.com

3 2

accessing smtp server with weak dh encryption?
by Matt Price 02 Jul '15

02 Jul '15

Hi, I use the u of t smtp servers for outgoing mail from my laptop, including some automated mails that I send out. Postfix's sendmail will no longer complete the TLS handshake with the server, because the U of T server hasn't been updated to fix the logjam attack (still using a 512kb temporary key). Current thunderbird breaks, too, though if I use an old version I can still get mail out. Does anyone know if there's any way to instruct postfix (or is it maybe openssl) to violate protocol and permit me to interact with this server? I know there are security risks but I'm kind of screwed if I can't send out mail. Thanks, matt

4 3