- Arch-general - lists.archlinux.org

[arch-general] Arch Linux
by Bruno Delbono 16 Sep '13

16 Sep '13

Hi guys, I just wanted to say that I’ve been playing with UNIX before Linux was born. I have gone from distro to distro, OS to OS. I can admin an *nix OS with eyes closed. So you can understand my reluctance when my friend urged; well almost kicked my ass to give Arch Linux a shot. He said, "You will hate yourself for not using it before!". I don't use Linux on a desktop. I guess staring at CDE in Solaris was enough. And I am quite jaded with distros and use mostly CentOS/Ubuntu in the cloud (I have instances in AWS and lately started a few in Windows Azure). Thanks to one of the members of this group, Brian Parson - http://www.brianparsons.net/ , I launched my first instance of Arch on AWS about a week ago. Took a few hours to get the hang of how you do things in Arch. The Wiki is good, but can do with better explanation. For instance, the nginx article that talks about running it in chroot but then all instructions for varnish, php-fpm are for unchrooted nginx. Kinda annoying but I know how to get around it. As for Arch, I am now hooked. It's so awesome. It's like Gentoo, but better (I know wrong comparison). I'm loving Arch so much that I will be moving from Ubuntu/CentOS for all my instances. So basically, ya. Awesome work! This distro is really kicks ass! :D PS - I'm also planning to create an image ready for deployment for use with Windows Azure -- they don't have any Arch images so far. Cannot wait to contribute back by making images for Azure available for use :) Bruno Delbono | Cognitive Researcher - Human Behavioural Project | Real Sociedad Española De Antropología | Royal Spanish Society Of Anthropology | ☎: +1 855 253 5436 ☎: +1 424 354 4700 | ✉: Bruno.Delbono(a)Anthropology.Es | ☞: Anthropology.ES  | ✉: Bruno.Delbono(a)Secure.AF | ☞: Secure.AF | ☛: Mail.AC

6 5

[arch-general] swap not always enabled?
by phanisvara 14 Sep '13

14 Sep '13

normally conky tells me that i'm using 0% swap. just now i noticed it showing, "no swap%," which looked strange. issuing "swapon -a" as root changed the display back to "0%." now i'm wondering if i missed something, systemd changes perhaps, that swap doesn't get switched on unless it's needed, or if something went wrong on my machine. didn't notice any unmerged .pacnew files, but will check again... -- phani.

4 5

[arch-general] Fwd: [arch-dev-public] systemd 207 ignores /etc/sysctl.conf
by Martti Kühne 13 Sep '13

13 Sep '13

On Fri, Sep 13, 2013 at 1:12 PM, Pierre Schmitz <pierre(a)archlinux.de> wrote: > Hi, > > a new features in systemd 207 is to no longer read /etc/sysctl.conf. > Instead /etc/sysctl.d/*.conf has to be used. Imho this needs a news item > and we also need to think about what to do with the file we ship as part > of procps-ng. > > From the systemd changelog: > * The systemd-sysctl tool no longer natively reads the > file /etc/sysctl.conf. If desired, the file should be > symlinked from /etc/sysctl.d/99-sysctl.conf. Apart from > providing legacy support by a symlink rather than built-in > code, it also makes the otherwise hidden order of application > of the different files visible. > I may sound lazy, but can't we just provide that symlink and get done with other problems? cheers! mar77i

5 4

[arch-general] Various questions regarding keyboard configuration
by Jakub Klinkovský 12 Sep '13

12 Sep '13

Hi, I'm currently rewriting some pages on ArchWiki regarding keyboard configuration, the current state is quite a mess. Here's the most relevant discussion: https://wiki.archlinux.org/index.php/Talk:Xorg#Keyboard_settings You can watch the progress on my user-pages, any feedback is welcome: https://wiki.archlinux.org/index.php/User:Lahwaacz/Keyboard_configuration_i… https://wiki.archlinux.org/index.php/User:Lahwaacz/Keyboard_configuration_i… I've got some questions that I think should be answered before I finish: 1) Why are keycodes as reported by xev different from those reported by showkey? This is not related to configuration, but I plan to update/rewrite https://wiki.archlinux.org/index.php/Extra_Keyboard_Keys too. 2) The man page vconsole.conf(5) mentions KEYMAP_TOGGLE variable to "configure a second toggle keymap", however, that's all the documentation says. Looking at the code (vconsole-setup.c at line 120), it uses the 'loadkeys' utility, which does not document any such feature. Instead it seems that the specified keymaps are loaded serially, resulting in KEYMAP_TOGGLE overwrites KEYMAP. Am I missing something here? Regards, Jakub Klinkovský (Lahwaacz)

1 0

[arch-general] iptables script
by F. Gr. 11 Sep '13

11 Sep '13

I'm newbie about iptables. I use this script <http://pastebin.ca/2447430> for my system. It is based on <http://wiki.archlinux.org/index.php/Simple_stateful_firewall>. Now I want to add an iptables log chain and others. What is the correct line to start adding the following? <script> ## Logging $IPT -N LOGDROP $IPT -A LOGDROP -m limit --limit 5/m --limit-burst 8 -j LOG --log-prefix "IPTables-Dropped: " $IPT -A LOGDROP -j DROP # log and drop packets that hit this rule $IPT -A INPUT -m conntrack --ctstate INVALID -j LOGDROP </script> Supposing I want to add the following lines as well, is there any rules that is superfluous? These rules have to place after or before the rule "$IPT -A INPUT -m conntrack --ctstate INVALID -j DROP"? <script> # SSH bruteforce attacks $IPT -N IN_SSH $IPT -A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW -j IN_SSH $IPT -A IN_SSH -m recent --name sshbf --rttl --rcheck --hitcount 3 --seconds 10 -j DROP $IPT -A IN_SSH -m recent --name sshbf --rttl --rcheck --hitcount 4 --seconds 1800 -j DROP $IPT -A IN_SSH -m recent --name sshbf --set -j ACCEPT $IPT -A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW -j IN_SSH ## Local Area Network Denial (LAND) attack # Block all packets from your own IP $IPT -A INPUT -s 192.168.201.2/32 -j DROP # Block any packet from local network $IPT -A INPUT -s 127.0.0.0/8 -j DROP # SYN Flood $IPT -A FORWARD -p tcp --syn -m limit --limit 1/s -j ACCEPT # SYN packets # Drop any tcp packet that does not start a connection with a syn flag $IPT -A INPUT -p tcp ! --syn -m conntrack --ctstate NEW -j DROP # NULL packets $IPT -A INPUT -p tcp --tcp-flags ALL NONE -j DROP # XMAS packets $IPT -A INPUT -p tcp --tcp-flags ALL ALL -j DROP # Fragments Packet $IPT -A INPUT -f -j DROP # ping of death $IPT -A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT # Furtive port scanner $IPT -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT </script>

3 3

Re: [arch-general] [arch-dev-public] Dropping LXDM
by Christian Hesse 11 Sep '13

11 Sep '13

Gaetan Bisson <bisson(a)archlinux.org> on Tue, 2013/09/10 21:21: > [2013-09-11 08:56:42 +0200] Bartłomiej Piotrowski: > > On 2013-09-11 00:53, Allan McRae wrote: > > > Also "thanks to its developers and recent changes in package" and > > > "during 2 years since last release" make zero sense taken together. > > > > What exactly doesn't make sense? The fact that LXDM is based on > > ConsoleKit and even with git patch is unable to utilize logind correctly? > > Upstream seems pretty active; do you mean that all the problems we have > with our package are still present in git master? If not, we should try > to convince upstream to make a release - and if they are not willing to > we can always package a git snapshot. I vote for this. A lot of issues have been resolved in git master, some by myself. I have not followed the changes in community package but used the git package from AUR instead. It works great for me so far. Some time ago dgod (the developer) stated he "would like to release it, but the lxde release team has some problems to release it". He also thinks one should not wait for a release but using git is stable enough. I do not have any more information, but contacting him may be worth it. For me git is just fine, I do understand packagers do prefer releases, though. ;) -- main(a){char*c=/* Schoene Gruesse */"B?IJj;MEH" "CX:;",b;for(a/* Chris get my mail address: */=0;b=c[a++];) putchar(b-1/(/* gcc -o sig sig.c && ./sig */b/42*2-3)*42);}

1 0

[arch-general] new arch installation: user login not possible on virtual console
by Friedrich Strohmaier 10 Sep '13

10 Sep '13

Hi all, this is the first time writing to this list so first: hello to all. I'm a quite happy user of arch-linux since december last year, and up to now I managed to solve all tasks and difficulties using the rtfm button. ;o)) Now installing a further box (x86) I get this strange behaviour never met during ~15 years of linux usage: After setting up a new user I cannot login to it's account on the virtual console. I get: Login incorrect No matter whether password is set or not # passwd -S <user>: <user> P ... # password set <user> NP ... # password not set login as root works with and without password set (both times unset by deleting the /etc/shadow passwd entry). this also occured on another box currently installed - latter one a x86_64 user was added through # useradd -m -g <group> <user> password was set through # passwd user changing user from root via sudo or su works, as does login via xdm. login via lxdm and gdm doesn't, if that is of any help. If I do the same on my box writing this mail from (x86_64 - all updates included) everything works as expected. Couldn't find anything at the bugtracker. Before digging deeper my question: Any known issues or ideas on that? Friedrich

4 5

[arch-general] System-Wide Pulseaudio
by Dennis Lange 09 Sep '13

09 Sep '13

Hi everybody, I like to run more than one user in more than one X session at the same time and want to hear the audio from all users together. So i thought it would be nice to have a System-Wide Pulseaudio setup. I try to use this package: https://aur.archlinux.org/packages/pulseaudio-systemd/ and like shown here: http://www.freedesktop.org/wiki/Software/PulseAudio/Documentation/User/Syst… I put all users into pulse-access group after installing the pulseaudio-systemd package and reboot, but it will not work. Have anyone a hint for this situation?

7 22

[arch-general] Arch Linux Community on Gittip
by Karol Blazewicz 06 Sep '13

06 Sep '13

I asked about this before: https://mailman.archlinux.org/pipermail/arch-general/2013-May/033590.html but now Dusty wants to make it official (or "official") https://bbs.archlinux.org/viewtopic.php?id=169356 Some people didn't like the Official Arch Linux Google+ page, so I want to make sure if the kind of official Arch Linux community Dusty wants is OK with the Arch Overlords. It seems OK to me.

3 2

[arch-general] kernel 3.11 and virtualbox kernel module
by Genes Lists 03 Sep '13

03 Sep '13

Heads up - noew that 3.11 is out, there is a patch in upstream virtualbox which is not in vbox 4.2.16 that is necessary otherwise the kernel modules wont compile for 3.11 kernel. The file needing fixing is /usr/src/vboxguest-4.2.16/vboxsf/dirops.c I am happy to send the required patch if its needed. Gene/

2 4