- Arch-general - lists.archlinux.org

[arch-general] Fwd: Re: GRUB doesn't boot Windows behind Secure Boot
by Giovanni Santini 23 Dec '16

23 Dec '16

Il 07/12/2016 17:25, Giovanni Santini ha scritto: > Il 29/11/2016 10:49, David Phillips ha scritto: >> >> I'm not familiar with GRUB anymore, but it sounds like perhaps the file >> bootmgfw.efi has not been signed with a key that is trusted by your board's >> SecureBoot feature. Hence, booting with SB enabled causes a load failure >> while booting without SB fixes the problem. >> > Good afternoon, as here I had no major suggestion about what to do, I decided to ask help in the official mailing list as you can see in [1]. After some tests, we found a small bug in grub that prevented the chainload of EFI executables. This fixes my problem. However, it is not present in the official package yet; I suppose that opening a bug report online should be enough. [1] http://lists.gnu.org/archive/html/help-grub/2016-12/msg00001.html [2] http://git.savannah.gnu.org/cgit/grub.git/commit/?id=ce95549cc54b5d6f494608… -- Giovanni Santini My blog: http://giovannisantini.tk My code: https://git{hub,lab}.com/ItachiSan My GPG: 2FADEBF5

1 0

[arch-general] UID/GID of a systemd container
by arnaud gaboury 22 Dec '16

22 Dec '16

% systemctl --version systemd 232 +PAM -AUDIT -SELINUX -IMA -APPARMOR +SMACK -SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +IDN % uname -r 4.8.13-1-hortensia (username space is set to YES) ------------------------------------------------ My setup: Archlinux host managing through systemd-nspawn a Fedora container on Btrfs. I don't know what upgrade (kernel, Fedora 24 --> 25, systemd....) trigered this change, but UID/GID of my container are no more shown as before. list container directory from host: # ls -al /var/lib/machines/poppy dr-xr-xr-x 1 vu-poppy-0 vg-poppy-0 198 Dec 16 17:32 ./ drwx------ 3 root root 4.0K Dec 15 17:08 ../ dr-xr-xr-x 1 vu-poppy-0 vg-poppy-0 0 Feb 3 2016 boot/ drwxrwxr-x 1 vu-poppy-0 vg-poppy-0 62 Aug 26 19:59 db/ drwxr-xr-x 1 vu-poppy-0 vg-poppy-0 8 Apr 27 2015 dev/ drwxr-xr-x 1 vu-poppy-0 vg-poppy-0 4.2K Feb 3 2016 etc/ drwxr-xr-x 1 vu-poppy-0 vg-poppy-0 86 Feb 3 2016 home/ Before it was like this: # ls -al /var/lib/machines/poppy/ dr-xr-xr-x 1 363397120 363397120 198 Oct 4 15:54 ./ drwx------ 3 root root 4.0K Oct 1 15:53 ../ dr-xr-xr-x 1 363397120 363397120 0 Feb 3 2016 boot/ drwxrwxr-x 1 363397120 363397120 62 Aug 26 19:59 db/ drwxr-xr-x 1 363397120 363397120 8 Apr 27 2015 dev/ drwxr-xr-x 1 363397120 363397120 4.1K Feb 3 2016 etc/ drwxr-xr-x 1 363397120 363397120 76 Feb 3 2016 home/ ------------------------------------------------------------ Thank you for any hint, link to documentation about this new way to show UID/GID of a container.

2 3

[arch-general] Screen lock stopped working
by David Rosenstrauch 22 Dec '16

22 Dec '16

I've noticed that my screen lock / screensaver has stopped engaging as of a couple of days ago. I check the settings (which I haven't changed recently), but they seem to be set correctly. Anyone have an idea what package upgrade might have caused this and/or which bugs I should watch for a resolution? I'm running XFCE desktop btw. Thanks, DR

4 8

[arch-general] [OT] Settings problem: Why is Thunderbird so silly?
by Peter Nabbefeld 22 Dec '16

22 Dec '16

Hi all, I want to select an application for opening an attachment with an alternative editor (a PDF file with LibreOffice Draw in this case). When I want to select the application, I get the list of last opened files (i.e. text files, which obviously are not able to run ...). Trying to search for "sdraw" presents me with a waiting cursor ... waiting endlessly. I'd guess I have to set some options somewhere, but I don't know which - or do I even have to edit some XUL file? I doubt, that Thunderbird is really so "silly" just not being able to find some application. BTW, my desktop is XFCE, latest firefox (latest system update today). Kind regards Peter

2 1

Re: [arch-general] [OT] Settings problem: Why is Thunderbird so silly?
by ber532k 22 Dec '16

22 Dec '16

Hi, what worked for me was navigating to /usr/bin or even /bin within the "Choose Helper Application" dialogue and then selecting an executable (in this case libreoffice). The "Choose Helper Application" dialogue will even remember it was in /usr/bin when you invoke it again. Reminds me of the way to do stuff in Windows Vista - back when I was young and ignorant ;) - where you'd "Open with" something like "C:\Program Files\Microsoft\Microsoft Office\WINWORD.EXE". Not quite an elegant way of managing programms, but it works most of the time. Regards

1 0

[arch-general] Google Summer of Code 2017
by Jonas Verschueren 21 Dec '16

21 Dec '16

Hi everyone, I am currently thinking about applying for the 2017 run of Google Summer of Code. Because I am an avid Arch user and general Linux enthusiast I thought it would be nice to work on Arch and make my contribution back to the community. This discussion seems to come up most years and I don’t know what the outcome of this was previously but I thought I’d ask anyway. I am a PhD student in theoretical and computational materials science based in London. I am an experienced c++ and python user but I am getting more and more interested in the inner workings of the linux kernel and the way various distributions are built on top of it, which also explains my interest in doing this. Anyone know whether someone of the Arch developers could be interested in (or gently persuaded into) mentoring a Summer of code project? Best wishes, Jonas

5 4

[arch-general] Why was wpa_supplicant.conf renamed wpa_supplicant.conf.pacsav??
by David C. Rankin 19 Dec '16

19 Dec '16

Arch devs, I'm left wondering what purpose was served by not providing a pre-update note or post-install restoration of any existing .pacsave found? The new sample wpa_supplicant.conf is in /usr/share/doc/wpa_supplicant/wpa_supplicant.conf. If this was simply due to a pacman default action where /etc/wpa_supplicant/wpa_supplicant.conf was removed upstream, could a one-off 'post-install' script check for the original .pacsave and restore it? I know this is small-potatoes stuff, but I just wonder if in these instances, it may not be better to either provide pre-update notice or do a post-install script rather than relying on a post update action by the user? At least in the cases where you know up-front that existing functionality will be disabled by the upgrade. (which was apparent from the comment) Food for thought for the packagers. In these cases, I would think we would either want some type of pre-update note on archlinux.org (like for ttf-dejavu) or some post install restoration of the original config. I'll reiterate, at least for the cases where the packager 'knows' a broken config will result. Here, anyone relying on remote access via wpa_supplicant is left dead in the water unless they catch the comment as it scrolls by before rebooting. (yes they should review the comments, but with human nature what it is...) -- David C. Rankin, J.D.,P.E.

7 7

Re: [arch-general] Regular service freezes the system
by Guus Snijders 16 Dec '16

16 Dec '16

Op 16 dec. 2016 10:24 schreef "Jeanette C." <julien(a)mail.upb.de>: Hi List, I have encountered this issue several times now. I can't be sure, which job actually freezes the system, a good runner up is updatedb, [...] Sounds like your system has either too little memory for your workload or has a problem with (heavy) IO. By freezing; do you mean that the system feels slow, or does it hang completely? In either case, you might want to check dmesg for errors. If everything is working but just slow, check your memory usage and/or try to reschedule both tasks (updatedb and mandb) to a more convenient time. I think the cgroups can also help here, but that's a bit of longshot for me. Mvg, Guus Snijders

1 0

[arch-general] Stronger Hashes for PKGBUILDs
by fnodeuser 16 Dec '16

16 Dec '16

hello eli, you have misread and misunderstood a few things. reread carefully all the messages about the subject, and check the links in my second email. i will write only about things that are not covered by the previous messages. >Sure they're the same. It is the same underlying technology you have some studying to do about checksums and message digests. >Um, what? `pacman -Syu` does, in fact, check that every package is >signed by a Developer or Trusted User whose key is in archlinux-keyring. what i said is that the users must check the integrity of the sources too. it is not something that only the package maintainers must do. the users must check the PKGBUILD files to compare message digests and key fingerprints. >sha256sums is plenty secure enough. So I assume the Firefox maintainer >uses that mega-file to validate the download, then uses updpkgsums to >update the current sha256sums rather than using copypasta on Firefox's >SHA512SUMS file. no. you will never use less secure than upstream. the best must be used to future-proof also. copypasta? no one said to copy-paste anything without verifying first. >Arch Linux doesn't even have a gnupg1 package, if you want to blame >someone for the absolute inability to validate that key on Arch Linux >(independent of makepkg) blame the GnuPG developers for dropping support >of insecure and tremendously outdated keys. it does not matter. he will download it on his own to verify it, and then he will add the sha512 message digest in the PKGBUILD file to future-proof it. >Assuming they care about being securely identified on IRC. Maybe they do >connect securely when they care about proving their identity for a >specific conversation where it matters. > >I will grant you that for common sense alone you might as well connect >securely whenever possible as it doesn't cost anything. But equally, it >doesn't cost anything to *not* do so. "With great power comes great responsibility." -Uncle Ben AL team members must be responsible with their power. they must follow best security practices.

5 5

[arch-general] Regular service freezes the system
by Jeanette C. 16 Dec '16

16 Dec '16

Hi List, I have encountered this issue several times now. I can't be sure, which job actually freezes the system, a good runner up is updatedb, though I have a feeling that somethi9ng ran after that one. updatedb (mlocate) definitely eats a lot of system resources, eventhough it only concentrates on my internal sata disk with ext3/ext4 only filesystems. The last entries in the journal are related to the update of the mandb. The issue in question doesn't arise every day, thus it may be a service run weekly - or even more infrequently - or some other interaction of my own causes these freezes. I don't always work on my computer around midnight. Can anyone help or guide me in further research, please? Best wishes, Jeanette -------- When you need someone, you just turn around and I will be there <3

1 0