November 2023 - Arch-general - lists.archlinux.org

Why does fail2ban-client show no jails?
by David C. Rankin 04 Dec '23

04 Dec '23

All, I've configured fail2ban following the wiki, it is running, and I've enabled jails in /etc/fail2ban/jails.local, but fail2ban-client status shows no jails. The jails.local is: [DEFAULT] destemail = david(a)domain.tld sender = david(a)domain.tld # to ban & send an e-mail with whois report to the destemail. #action = %(action_mw)s # same as action_mw but also send relevant log lines action = %(action_mwl)s [DEFAULT] bantime = 2d [sshd] enable = true port = ssh,6661 [dovecot] enable = true [postfix] enable = true [smtpd] enable = true Running fail2ban-client status shows: # fail2ban-client status Status |- Number of jail: 0 `- Jail list: Reading other fail2ban configuration howtos, suggest I should be seeing the enabled jails. Is there something else I need to do on Arch? -- David C. Rankin, J.D.,P.E.

2 5

Re: makepkg
by Lone_Wolf 28 Nov '23

28 Nov '23

On 23-11-2023 17:44, Jude DaShiell wrote: > cc main.o buffers.o sendmail.o fetchmail.o html.o html-tags.o format.o > stringfile.o ebrc.o msg-strings.o http.o isup.o css.o startwindow.o > dbops.o dbodbc.o jseng-quick.o ../../quickjs/libquickjs.a -ldl -latomic > -s -lcurl -lodbc -lpcre2-8 -lreadline -lssl -lcrypto -lpthread -lm > -lssl -lcrypto -o edbrowse > /usr/bin/ld: cannot find ../../quickjs/libquickjs.a: No such file or > directory Two more changes are needed: A. edbrowse relies on *.a files (static librairies) to use quickjs . makepkg by default removes them since a few years ago. edit the quickjs PKGBUILD, increase pkgrel and change the options= line in it so it reads options=(!strip staticlibs) rebuild & reinstall quickjs B. the environment vars used by edbrowse make have been changed by upstream. replace QUICKJS_DIR="/usr/lib/quickjs/" make with QUICKJS_INCLUDE="/usr/include/quickjs" QUICKJS_LIB="/usr/lib/quickjs/" make The package builds for me that way, but I haven't ran the software. Lone_Wolf

3 12

WiFi regulatory domain changes between reboots
by Sadeep Madurange 28 Nov '23

28 Nov '23

Greetings all, Recently I had an issue with connecting a 5GHz AP, and as Jaron correctly pointed out, the issue was with the regdomain. The problem I'm having now is the regdomain spontaneously changes between reboots. I'm in Singapore and I bought the laptop in Singapore. I am certain that my hardware/firmware supports 5GHz networks. Following Arch Wiki [1], I installed the wireless-regdb package and uncommented WIRELESS_REGDOM="SG" line in the /etc/conf.d/wireless-regdom file. Things were working fine for a couple days after I made the changes. But then, sometimes, when I reboot, I see the regdomain changes to ID (I guess for Indonesia). I checked that ID is commented out in /etc/conf.d/wireless-regdom. I recorded the output of "iw reg get" both when it is working and when it is not. When it's working, the output is: global country 00: DFS-UNSET (2402 - 2472 @ 40), (6, 20), (N/A) (2457 - 2482 @ 20), (6, 20), (N/A), AUTO-BW, PASSIVE-SCAN (2474 - 2494 @ 20), (6, 20), (N/A), NO-OFDM, PASSIVE-SCAN (5170 - 5250 @ 80), (6, 20), (N/A), AUTO-BW, PASSIVE-SCAN (5250 - 5330 @ 80), (6, 20), (0 ms), DFS, AUTO-BW, PASSIVE-SCAN (5490 - 5730 @ 160), (6, 20), (0 ms), DFS, PASSIVE-SCAN (5735 - 5835 @ 80), (6, 20), (N/A), PASSIVE-SCAN (57240 - 63720 @ 2160), (N/A, 0), (N/A) phy#0 (self-managed) country SG: DFS-UNSET (2402 - 2437 @ 40), (6, 22), (N/A), AUTO-BW, NO-HT40MINUS, NO-80MHZ, NO-160MHZ (2422 - 2462 @ 40), (6, 22), (N/A), AUTO-BW, NO-80MHZ, NO-160MHZ (2447 - 2482 @ 40), (6, 22), (N/A), AUTO-BW, NO-HT40PLUS, NO-80MHZ, NO-160MHZ (5170 - 5190 @ 160), (6, 22), (N/A), NO-OUTDOOR, AUTO-BW, IR-CONCURRENT, NO-HT40MINUS, NO-320MHZ, PASSIVE-SCAN (5190 - 5210 @ 160), (6, 22), (N/A), NO-OUTDOOR, AUTO-BW, IR-CONCURRENT, NO-HT40PLUS, NO-320MHZ, PASSIVE-SCAN (5210 - 5230 @ 160), (6, 22), (N/A), NO-OUTDOOR, AUTO-BW, IR-CONCURRENT, NO-HT40MINUS, NO-320MHZ, PASSIVE-SCAN (5230 - 5250 @ 160), (6, 22), (N/A), NO-OUTDOOR, AUTO-BW, IR-CONCURRENT, NO-HT40PLUS, NO-320MHZ, PASSIVE-SCAN (5250 - 5270 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40MINUS, NO-320MHZ, PASSIVE-SCAN (5270 - 5290 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40PLUS, NO-320MHZ, PASSIVE-SCAN (5290 - 5310 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40MINUS, NO-320MHZ, PASSIVE-SCAN (5310 - 5330 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40PLUS, NO-320MHZ, PASSIVE-SCAN (5490 - 5510 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40MINUS, NO-320MHZ, PASSIVE-SCAN (5510 - 5530 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40PLUS, NO-320MHZ, PASSIVE-SCAN (5530 - 5550 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40MINUS, NO-320MHZ, PASSIVE-SCAN (5550 - 5570 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40PLUS, NO-320MHZ, PASSIVE-SCAN (5570 - 5590 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40MINUS, NO-320MHZ, PASSIVE-SCAN (5590 - 5610 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40PLUS, NO-320MHZ, PASSIVE-SCAN (5610 - 5630 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40MINUS, NO-320MHZ, PASSIVE-SCAN (5630 - 5650 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40PLUS, NO-320MHZ, PASSIVE-SCAN (5650 - 5670 @ 80), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40MINUS, NO-160MHZ, NO-320MHZ, PASSIVE-SCAN (5670 - 5690 @ 80), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40PLUS, NO-160MHZ, NO-320MHZ, PASSIVE-SCAN (5690 - 5710 @ 80), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40MINUS, NO-160MHZ, NO-320MHZ, PASSIVE-SCAN (5710 - 5730 @ 80), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40PLUS, NO-160MHZ, NO-320MHZ, PASSIVE-SCAN (5735 - 5755 @ 80), (6, 22), (N/A), AUTO-BW, NO-HT40MINUS, NO-160MHZ, NO-320MHZ (5755 - 5775 @ 80), (6, 22), (N/A), AUTO-BW, NO-HT40PLUS, NO-160MHZ, NO-320MHZ (5775 - 5795 @ 80), (6, 22), (N/A), AUTO-BW, NO-HT40MINUS, NO-160MHZ, NO-320MHZ (5795 - 5815 @ 80), (6, 22), (N/A), AUTO-BW, NO-HT40PLUS, NO-160MHZ, NO-320MHZ (5815 - 5835 @ 20), (6, 22), (N/A), AUTO-BW, IR-CONCURRENT, NO-HT40MINUS, NO-HT40PLUS, NO-80MHZ, NO-160MHZ, NO-320MHZ, PASSIVE-SCAN When it's not working, the output is global country 00: DFS-UNSET (2402 - 2472 @ 40), (6, 20), (N/A) (2457 - 2482 @ 20), (6, 20), (N/A), AUTO-BW, PASSIVE-SCAN (2474 - 2494 @ 20), (6, 20), (N/A), NO-OFDM, PASSIVE-SCAN (5170 - 5250 @ 80), (6, 20), (N/A), AUTO-BW, PASSIVE-SCAN (5250 - 5330 @ 80), (6, 20), (0 ms), DFS, AUTO-BW, PASSIVE-SCAN (5490 - 5730 @ 160), (6, 20), (0 ms), DFS, PASSIVE-SCAN (5735 - 5835 @ 80), (6, 20), (N/A), PASSIVE-SCAN (57240 - 63720 @ 2160), (N/A, 0), (N/A) phy#0 (self-managed) country ID: DFS-UNSET (2402 - 2437 @ 40), (6, 22), (N/A), AUTO-BW, NO-HT40MINUS, NO-80MHZ, NO-160MHZ (2422 - 2462 @ 40), (6, 22), (N/A), AUTO-BW, NO-80MHZ, NO-160MHZ (2447 - 2482 @ 40), (6, 22), (N/A), AUTO-BW, NO-HT40PLUS, NO-80MHZ, NO-160MHZ (5735 - 5815 @ 20), (6, 22), (N/A), AUTO-BW, NO-HT40MINUS, NO-HT40PLUS, NO-80MHZ, NO-160MHZ, NO-320MHZ I have been using this machine for more than 2 years, and have been connecting to 5GHz band fine in the past. This behavior is almost certainly new. I first ran into this, I think, on November 14, 2023. Appreciate any help! -- Regards, Sadeep PGP: 103BF9E3E750BF7E [1] https://wiki.archlinux.org/title/Network_configuration/Wireless#Respecting_…

2 2

when are sound servers necessary?
by Jude DaShiell 27 Nov '23

27 Nov '23

When is it a good choice to install a sound server and when is installing a sound server a waste of disk space? -- Jude <jdashiel at panix dot com> "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." Ed Howdershelt 1940.

3 5

re: vlc-nox
by Jude DaShiell 27 Nov '23

27 Nov '23

Once ffmpeg got deleted vlc-nox installed here with no problems. So that comment from what I can figure is mostly correct except may ought to be changed to will. -- Jude <jdashiel at panix dot com> "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." Ed Howdershelt 1940.

1 0

vlc for command line users
by Jude DaShiell 27 Nov '23

27 Nov '23

The package installs and is not functional. Why it's not functional is the package is missing .config/vlc/vlcrc so vlc has no clue how to do anything on a linux system. If a way exists for command line users of vlc to cause vlc to make a vlcrc file even if basic that would be a good addition to the vlc documentation on the archwiki. For whatever reason I couldn't get vlc-nox to install on this system error exit 4 manual intervention is needed. Was this manual intervention documented on arch-announce? I'll check the saved messages from that list to find out later. I have a vlcrc file I got from a contact on another list and found the vlcrc file I have enables vlc to work correctly to the extent I've used vlc so far. The vlcrc file I have is 83k in size so I can understand why videolan either omitted the documentation on how to build one of these ourselves when vlc is missing a vlcrc file or I didn't do a good enough web search with ddgr to find the documentation. -- Jude <jdashiel at panix dot com> "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." Ed Howdershelt 1940.

4 5

multimedia broken by updates
by Jude DaShiell 25 Nov '23

25 Nov '23

pipewire and wireplumber were on this system before the updates happened and I had mpv and vlc playing files. I cleaned the pipewire packages from the system and put pulseaudio on the system and that hasn't improved anything either. mpv generates error output when I try playing a file with it and vlc is silent. mpv.err [E] pw.loop [loop.c:67 pw_loop_new()] 0x55a96c0d3be0: can't make support.system handle: No such file or directory -- Jude <jdashiel at panix dot com> "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." Ed Howdershelt 1940.

1 0

gitlab ban cf tld and bugtracker migration to gitlab
by u34＠net9.cf 24 Nov '23

24 Nov '23

Hello, I tried register gitlab by the same email address I am using for this list. Their online form replied that Email is not allowed for sign-up. Please use your regular email address. Check with your administrator. (https://imgur.com/a/fszgDHA) The email address is a sub domain in the .cf tld. Gitlab support response was Emails from the `cf` domain are restricted from registering due to their frequent use for abusive practices. Please use an email from another domain if you wish to register. One can also register gitlab by using his account at google, github, bitbucket or salesforce. My only motive to register is arch bugtracker. https://gitlab.archlinux.org/groups/flyspray-migration/packaging/packages/-… . Though, if I am registered, I might use my account for other purposes. As of now, I am reluctant to become a gitlab user. Not a lost for archlinux, or to gitlab. Still, for your information. -- u34

3 2

pacman errors running hook Updating the MIME type database...
by David C. Rankin 24 Nov '23

24 Nov '23

Devs, This was a bit strange and the first time in almost 15 years I've seen pacman do this, e.g. <snip> Packages (22) appstream-1.0.0-4 btrfs-progs-6.6.2-1 c-ares-1.22.0-1 freecad-0.21.1-6 gnutls-3.8.2-1 inkscape-1.3.1-1 libadwaita-1:1.4.0-2 libdrm-2.4.117-2 libgcrypt-1.10.3-1 libp11-kit-0.25.3-1 libxml2-2.12.0-1 libxslt-1.1.39-1 m17n-db-1.8.4-1 opencascade-1:7.7.2-4 p11-kit-0.25.3-1 perl-image-exiftool-12.70-1 python-scipy-1.11.4-1 python-trove-classifiers-2023.11.13-1 rust-1:1.74.0-1 shaderc-2023.5-1 texinfo-7.1-2 vtk-9.3.0-3 <snip> :: Running post-transaction hooks... ( 1/10) Reloading system manager configuration... ( 2/10) Reloading device manager configuration... ( 3/10) Arming ConditionNeedsUpdate... ( 4/10) Updating the MIME type database... Error in type 'application/x-core' (in /usr/share/mime/packages/freedesktop.org.xml): Error in <match> element: Mask is longer than value. Error in type 'image/jp2' (in /usr/share/mime/packages/freedesktop.org.xml): Error in <match> element: Mask is longer than value. Error in type 'image/jpx' (in /usr/share/mime/packages/freedesktop.org.xml): Error in <match> element: Mask is longer than value. Error in type 'image/jpm' (in /usr/share/mime/packages/freedesktop.org.xml): Error in <match> element: Mask is longer than value. Error in type 'video/mj2' (in /usr/share/mime/packages/freedesktop.org.xml): Error in <match> element: Mask is longer than value. Error in type 'image/vnd.adobe.photoshop' (in /usr/share/mime/packages/freedesktop.org.xml): Error in <match> element: Mask is longer than value. ( 5/10) Updating linux initcpios... <snip> What are the mime database errors and should I be concerned? -- David C. Rankin, J.D.,P.E.

3 2

makepkg
by Jude DaShiell 23 Nov '23

23 Nov '23

I failed to install edbrowse-git and in doing so one of the failure messages was some warnings being treated as errors. man makepkg didn't show me any switch to prevent warnings being treated as errors unless maybe force does that. Even with force the package didn't install. Did anyone manage to get that to install correctly who could share some ideas what I'm doing wrong? Usually when I run makepkg I do: makepkg --needed -cimrs and very often that actually works. -- Jude <jdashiel at panix dot com> "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." Ed Howdershelt 1940.

3 5