September 2013 - Arch-general - lists.archlinux.org

[arch-general] arch install issues with 2013.09 iso & vfat device
by arnaud gaboury 18 Sep '13

18 Sep '13

Dear all, this is my second arch install this month (archlinux-2013.09.01-dual.iso) on an usb key to get a live Arch. Both installs failed on a vfat formated device, when they succed on ext2. $ pacstrap /mnt base returns lot of these erros: warning: warning given when extracting usr/bin/vgrename (Can't create '/mnt/usr/bin/vgrename') ...... It seems, even in chroot, that I can't write the vfat formated device I would like to use vfat as these keys are aimed to boot Arch from windows machines and share files. I used gdisk and fdisk to partition, then mkfs.vfat to format, on clean usb keys. Is there anything I missed ? Then, there is an issue with package vi: error: could not open file /mnt/var/cache/pacman/pkg/vi-1:050325-3-x86_64.pkg.tar.xz.part: Invalid argument I first # pacman-key --init && pacman-key --populate archlinux and # pacman -Syy The only way to succed the install was : # pacstrap -i /mnt base --ignore vi I must add that earlier installs with earlier iso did not show this issue. Maybe shall I open a bug report, or is this a known issue ? Last, the above command returns : :: vi is in IgnorePkg/IgnoreGroup. Install anyway? [Y/n] It seems weird to me that default is Yes, as I specified --ignore vi. Would' nt it makes more sense to default No ? Regards.

5 7

[arch-general] linux 3.11.1 and udev 204
by Leonid Isaev 18 Sep '13

18 Sep '13

Hi, There has been some changes in driver handling in core/linux-3.11-1 which require latest udev (>204) [1]. However, udev in [core] is still at v204 which will break some systems [2]. Is it possible to move systemd 207-2 or backport udev changes [1] to 204? [1] http://cgit.freedesktop.org/systemd/systemd/commit?id=bf7f800f2b3e93ccd1229… [2] https://bbs.archlinux.org/viewtopic.php?pid=1325729 Thanks, -- Leonid Isaev GnuPG key: 0x164B5A6D Fingerprint: C0DF 20D0 C075 C3F1 E1BE 775A A7AE F6CB 164B 5A6D

1 0

[arch-general] systemd start a daemon after the Internet connection is established
by Bill Sun 17 Sep '13

17 Sep '13

Hi, I have a web proxy that can only initiate itself online, otherwise it would exit with an error. To daemonize that proxy, I wrote the following systemd service file: [Unit] Description=A Proxy Server After=network.target [Service] Type=simple ExecStart=/srv/proxy/aproxy/bin/main [Install] WantedBy=multi-user.target When the server is connected to the Internet, this service file can launch the proxy successfully, but it doesn't work on system startup, supposedly due to the lack of an connection with Internet access. So I need systemd to make sure the connect has been established before it launch this daemon. Regards.

4 4

[arch-general] Arch Linux
by Bruno Delbono 17 Sep '13

17 Sep '13

Hi guys, I just wanted to say that I’ve been playing with UNIX before Linux was born. I have gone from distro to distro, OS to OS. I can admin an *nix OS with eyes closed. So you can understand my reluctance when my friend urged; well almost kicked my ass to give Arch Linux a shot. He said, "You will hate yourself for not using it before!". I don't use Linux on a desktop. I guess staring at CDE in Solaris was enough. And I am quite jaded with distros and use mostly CentOS/Ubuntu in the cloud (I have instances in AWS and lately started a few in Windows Azure). Thanks to one of the members of this group, Brian Parson - http://www.brianparsons.net/ , I launched my first instance of Arch on AWS about a week ago. Took a few hours to get the hang of how you do things in Arch. The Wiki is good, but can do with better explanation. For instance, the nginx article that talks about running it in chroot but then all instructions for varnish, php-fpm are for unchrooted nginx. Kinda annoying but I know how to get around it. As for Arch, I am now hooked. It's so awesome. It's like Gentoo, but better (I know wrong comparison). I'm loving Arch so much that I will be moving from Ubuntu/CentOS for all my instances. So basically, ya. Awesome work! This distro is really kicks ass! :D PS - I'm also planning to create an image ready for deployment for use with Windows Azure -- they don't have any Arch images so far. Cannot wait to contribute back by making images for Azure available for use :) Bruno Delbono | Cognitive Researcher - Human Behavioural Project | Real Sociedad Española De Antropología | Royal Spanish Society Of Anthropology | ☎: +1 855 253 5436 ☎: +1 424 354 4700 | ✉: Bruno.Delbono(a)Anthropology.Es | ☞: Anthropology.ES  | ✉: Bruno.Delbono(a)Secure.AF | ☞: Secure.AF | ☛: Mail.AC

6 5

[arch-general] swap not always enabled?
by phanisvara 15 Sep '13

15 Sep '13

normally conky tells me that i'm using 0% swap. just now i noticed it showing, "no swap%," which looked strange. issuing "swapon -a" as root changed the display back to "0%." now i'm wondering if i missed something, systemd changes perhaps, that swap doesn't get switched on unless it's needed, or if something went wrong on my machine. didn't notice any unmerged .pacnew files, but will check again... -- phani.

4 5

[arch-general] Fwd: [arch-dev-public] systemd 207 ignores /etc/sysctl.conf
by Martti Kühne 13 Sep '13

13 Sep '13

On Fri, Sep 13, 2013 at 1:12 PM, Pierre Schmitz <pierre(a)archlinux.de> wrote: > Hi, > > a new features in systemd 207 is to no longer read /etc/sysctl.conf. > Instead /etc/sysctl.d/*.conf has to be used. Imho this needs a news item > and we also need to think about what to do with the file we ship as part > of procps-ng. > > From the systemd changelog: > * The systemd-sysctl tool no longer natively reads the > file /etc/sysctl.conf. If desired, the file should be > symlinked from /etc/sysctl.d/99-sysctl.conf. Apart from > providing legacy support by a symlink rather than built-in > code, it also makes the otherwise hidden order of application > of the different files visible. > I may sound lazy, but can't we just provide that symlink and get done with other problems? cheers! mar77i

5 4

[arch-general] Various questions regarding keyboard configuration
by Jakub Klinkovský 12 Sep '13

12 Sep '13

Hi, I'm currently rewriting some pages on ArchWiki regarding keyboard configuration, the current state is quite a mess. Here's the most relevant discussion: https://wiki.archlinux.org/index.php/Talk:Xorg#Keyboard_settings You can watch the progress on my user-pages, any feedback is welcome: https://wiki.archlinux.org/index.php/User:Lahwaacz/Keyboard_configuration_i… https://wiki.archlinux.org/index.php/User:Lahwaacz/Keyboard_configuration_i… I've got some questions that I think should be answered before I finish: 1) Why are keycodes as reported by xev different from those reported by showkey? This is not related to configuration, but I plan to update/rewrite https://wiki.archlinux.org/index.php/Extra_Keyboard_Keys too. 2) The man page vconsole.conf(5) mentions KEYMAP_TOGGLE variable to "configure a second toggle keymap", however, that's all the documentation says. Looking at the code (vconsole-setup.c at line 120), it uses the 'loadkeys' utility, which does not document any such feature. Instead it seems that the specified keymaps are loaded serially, resulting in KEYMAP_TOGGLE overwrites KEYMAP. Am I missing something here? Regards, Jakub Klinkovský (Lahwaacz)

1 0

[arch-general] iptables script
by F. Gr. 11 Sep '13

11 Sep '13

I'm newbie about iptables. I use this script <http://pastebin.ca/2447430> for my system. It is based on <http://wiki.archlinux.org/index.php/Simple_stateful_firewall>. Now I want to add an iptables log chain and others. What is the correct line to start adding the following? <script> ## Logging $IPT -N LOGDROP $IPT -A LOGDROP -m limit --limit 5/m --limit-burst 8 -j LOG --log-prefix "IPTables-Dropped: " $IPT -A LOGDROP -j DROP # log and drop packets that hit this rule $IPT -A INPUT -m conntrack --ctstate INVALID -j LOGDROP </script> Supposing I want to add the following lines as well, is there any rules that is superfluous? These rules have to place after or before the rule "$IPT -A INPUT -m conntrack --ctstate INVALID -j DROP"? <script> # SSH bruteforce attacks $IPT -N IN_SSH $IPT -A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW -j IN_SSH $IPT -A IN_SSH -m recent --name sshbf --rttl --rcheck --hitcount 3 --seconds 10 -j DROP $IPT -A IN_SSH -m recent --name sshbf --rttl --rcheck --hitcount 4 --seconds 1800 -j DROP $IPT -A IN_SSH -m recent --name sshbf --set -j ACCEPT $IPT -A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW -j IN_SSH ## Local Area Network Denial (LAND) attack # Block all packets from your own IP $IPT -A INPUT -s 192.168.201.2/32 -j DROP # Block any packet from local network $IPT -A INPUT -s 127.0.0.0/8 -j DROP # SYN Flood $IPT -A FORWARD -p tcp --syn -m limit --limit 1/s -j ACCEPT # SYN packets # Drop any tcp packet that does not start a connection with a syn flag $IPT -A INPUT -p tcp ! --syn -m conntrack --ctstate NEW -j DROP # NULL packets $IPT -A INPUT -p tcp --tcp-flags ALL NONE -j DROP # XMAS packets $IPT -A INPUT -p tcp --tcp-flags ALL ALL -j DROP # Fragments Packet $IPT -A INPUT -f -j DROP # ping of death $IPT -A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT # Furtive port scanner $IPT -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT </script>

3 3

Re: [arch-general] [arch-dev-public] Dropping LXDM
by Christian Hesse 11 Sep '13

11 Sep '13

Gaetan Bisson <bisson(a)archlinux.org> on Tue, 2013/09/10 21:21: > [2013-09-11 08:56:42 +0200] Bartłomiej Piotrowski: > > On 2013-09-11 00:53, Allan McRae wrote: > > > Also "thanks to its developers and recent changes in package" and > > > "during 2 years since last release" make zero sense taken together. > > > > What exactly doesn't make sense? The fact that LXDM is based on > > ConsoleKit and even with git patch is unable to utilize logind correctly? > > Upstream seems pretty active; do you mean that all the problems we have > with our package are still present in git master? If not, we should try > to convince upstream to make a release - and if they are not willing to > we can always package a git snapshot. I vote for this. A lot of issues have been resolved in git master, some by myself. I have not followed the changes in community package but used the git package from AUR instead. It works great for me so far. Some time ago dgod (the developer) stated he "would like to release it, but the lxde release team has some problems to release it". He also thinks one should not wait for a release but using git is stable enough. I do not have any more information, but contacting him may be worth it. For me git is just fine, I do understand packagers do prefer releases, though. ;) -- main(a){char*c=/* Schoene Gruesse */"B?IJj;MEH" "CX:;",b;for(a/* Chris get my mail address: */=0;b=c[a++];) putchar(b-1/(/* gcc -o sig sig.c && ./sig */b/42*2-3)*42);}

1 0

[arch-general] new arch installation: user login not possible on virtual console
by Friedrich Strohmaier 11 Sep '13

11 Sep '13

Hi all, this is the first time writing to this list so first: hello to all. I'm a quite happy user of arch-linux since december last year, and up to now I managed to solve all tasks and difficulties using the rtfm button. ;o)) Now installing a further box (x86) I get this strange behaviour never met during ~15 years of linux usage: After setting up a new user I cannot login to it's account on the virtual console. I get: Login incorrect No matter whether password is set or not # passwd -S <user>: <user> P ... # password set <user> NP ... # password not set login as root works with and without password set (both times unset by deleting the /etc/shadow passwd entry). this also occured on another box currently installed - latter one a x86_64 user was added through # useradd -m -g <group> <user> password was set through # passwd user changing user from root via sudo or su works, as does login via xdm. login via lxdm and gdm doesn't, if that is of any help. If I do the same on my box writing this mail from (x86_64 - all updates included) everything works as expected. Couldn't find anything at the bugtracker. Before digging deeper my question: Any known issues or ideas on that? Friedrich

4 5