- Arch-general - lists.archlinux.org

[arch-general] Linux container
by arnaud gaboury 13 Feb '14

13 Feb '14

Dear all, I am slowly building a Arch Linux VM guest on my Arch Linux host. The guest machine is now built and is recognized as shown by this command : gabx@hortensia ➤➤ ~ % machinectl list MACHINE CONTAINER SERVICE dahlia container nspawn 1 machines listed. I an following the libvirt.org documentation. Now, according this page[1] about lxc driver, i am dealing with namespace requirements. This sentence, in bold, puzzles me: A suitably configured UID/GID mapping is a pre-requisite to making containers secure, in the absence of sVirt confinement. If I understand what a namespace is, I have no idea how to make sure my UIG/GID mapping is well configured. I would appreciate having any hints abut this part of the settings. Another question : is there any advantage/disadvantage using the lxc Userspace tools[2] instead of libvirt to manage these namespaces ? Thank you for help. [1]http://libvirt.org/drvlxc.html [2]http://linuxcontainers.org/

6 11

[arch-general] "Automatic" upgrade
by Ismael Bouya 12 Feb '14

12 Feb '14

Hi, I know it is highly discouraged and that it can break the machine, but I have a good reason to do it anyway: It's highly unpractical to me to access the machine from where I am -- even remotely: I need someone to manually open a tunnel each time I want to access the machine --, and the other person who has root access to the machine doesn't think of doing the upgrade regularly: Last upgrade was 2 months ago, despite regular reminders. However I want to do it the best way: - Check that the Arch news didn't change - ssh is run as a service and not a socket (it's a headless machine) - Ignore ssh, linux, grub upgrades - Transmit the log by email (I *will* read it) - Send by email the list that will be upgraded before doing the upgrade Anything else I should check before running an automatic upgrade? Any other advice? Thanks in advance for any advice! Best regards, -- Ismaël

9 14

[arch-general] Arch VM + QEMU/KVM + libvirt + Systemd
by arnaud gaboury 11 Feb '14

11 Feb '14

Dear all, I have been reading and working hard these past few days to set up a Arch VM guest on my Arch host. The guest partition is on /dev/sdc and mounted on my root partition as /dahlia (name of the machine). First question : is this Ok or shall I instead use /machine/dahlia as container directory. Then, this partition is mounted twice indeed. One time on my host fstab as /dahlia and a second time on my guest fstab as /. It sounds to me redundant. Then I installed Arch with pacstrap on /dahlia. No bootloader but Linux (i will remove the last one later as I want to share the kernel with the host). After many errors due to some missing libs, installation went fine. I managed everything about cgroups, even spent hours on /etc/cgconfig.conf which is not mandatory since systemd 205. I can see a dahlia folder in all controllers (sys/fs/cgroup/$CONTROLLER-NAME). As for systemd, I enabled cgconfig , libvirt-guest.service and systemd-machined.service gabx@hortensia ➤➤ ~ % systemctl status systemd-machined.service systemd-machined.service - Virtual Machine and Container Registration Service Loaded: loaded (/usr/lib/systemd/system/systemd-machined.service; static) Active: active (running) since Tue 2014-02-11 08:09:25 CET; 12min ago Docs: man:systemd-machined.service(8) http://www.freedesktop.org/wiki/Software/systemd/machined Main PID: 980 (systemd-machine) CGroup: /system.slice/systemd-machined.service └─980 /usr/lib/systemd/systemd-machined Feb 11 08:09:25 hortensia systemd[1]: Starting Virtual Machine and Container Registration Service... Feb 11 08:09:25 hortensia systemd[1]: Started Virtual Machine and Container Registration Service. Hint: Some lines were ellipsized, use -l to show in full. Now comes the tricky part : registering my container with slice mechanism. $ machine ctl returns empty. /sys/fs/cgroup/systemd/machine.slice directory contains nothing about dahlia container. gabx@hortensia ➤➤ ~ # systemd-nspawn -M /dahlia Invalid machine name: /dahlia gabx@hortensia ➤➤ ~ # systemd-nspawn -bD /dahlia Spawning namespace container on /dahlia (console is /dev/pts/1). Init process in the container running as PID 1208. execv() failed: No such file or directory Container failed with error code 1. I put a machine-dahlia.slice unit file in /etc/systemd/system, but I am not sure it is enough. I read I shall register the container with logind, but no idea how. How can I register my container for systemd to recognize it ? Shall I use the usual way with libvirt and virsh ? Thank you for help in such a tricky set up. --

1 1

[arch-general] Forum registration requires INSANE captcha.
by Feliz Xett 11 Feb '14

11 Feb '14

Hi all! I hope it's ok to bother this list with this question/suggestion/rant about the forum registration process. I've been using arch for a couple of months now and I'm very happy with it. Today, I somewhat broke my box so I was excited to post my first question to the forums at bbs.archlinux.org. On the bottom of the registration page there was a very clever "captcha". The question was: What is the output of "date -u +%V$(uname)|sha256sum|sed 's/\W//g'"? I might even have found this funny if I wasn't ON A NON-LINUX LAPTOP. <rant> I'm sorry, but this is ridiculous. To be honest I am extremely annoyed because this barrier is so unnecessary. Why is there not just a simple normal captcha that helps Google with house numbers or something. It looks to me like someone wanted to demonstrate that whoever is not able to find the solution to *such* a simple question is not worthy of the forums. Only they failed to consider that possibly there might be situations where even the cleverest person just *can't* find the solution to a question like this. </rant> Could this please please please be replaced with a real captcha? Also, this is obviously absolutely unsuitable to tell computers and humans apart (if that's what was intended), considering that the result only changes once a week and any unix machine could easily calculate the result. Aaanyway. Could someone please give me the solution? I'd still like to join the forums once I calmed down :) FE

24 29

[arch-general] Permanently allow root access
by piruthiviraj natarajan 11 Feb '14

11 Feb '14

I want to run root X application in a terminal. [root@archbox ~]# smplayer smplayer: cannot connect to X server [root@archbox ~]# I followed the wiki https://wiki.archlinux.org/index.php/Running_X_apps_as_root added export XAUTHORITY=/home/archie/.Xauthority to /etc/profile. After this I am not able to login with my user account archie through gdm. Deleting the added line to /etc/profile let me log back in. How can I get this thing working as I wish? I definitely don't prefer the method given under temporarily allow root access as per the wiki page, since in other distribution I can start the X applications in a root terminal without a hitch. I would like to start root X applications in a terminal.

5 8

Re: [arch-general] Permanently allow root access
by Martti Kühne 10 Feb '14

10 Feb '14

Hey guys I'll just throw my more local (than probably necessary) .bashrc function in here... sudo () { local env; if [[ -n "$DISPLAY" ]]; then command sudo "XAUTHORITY=$HOME/.Xauthority" "$@"; else command sudo "$@"; fi } You don't give up on X11 cookies, you don't need to touch pam and can go on hoping it works in your favor, and thridly, there's even a mention of .Xauthority in the stock sudoers file, so, you'll never find where these things are set up on a running system anyway... cheers! mar77i

2 3

[arch-general] journalctl and I/O errors
by Janna Martl 08 Feb '14

08 Feb '14

A couple months ago, I started getting I/O errors (see below) whenever I tried to do journalctl -n X for sufficiently large X (and journalctl would segfault). I assumed my hard drive was going to die, but in the mean time this was annoying so I did: # cp -rp /var/log/journal{,-clone} # rm -rf /var/log/journal # mv /var/log/journal{-clone,} There were a few errors after step 1 but this made the segfaulting stop. A few weeks later, same problem, same "fix". A few weeks later, ditto. In all this time, the only I/O errors I've ever seen have been related to accessing the journal. The SMART data for the drive says that the current pending sector count is 57, but the reallocated sector count is 0. So if I'm reading this correctly, there have been a bunch of instances of unreadable sectors, somehow only pertaining to one directory despite efforts to make an independent copy of the data (which should put it in random other sectors), but none of them have been confirmed bad. So at this point I'm guessing it's a systemd bug (and there are no actual bad sectors), but it would be great if someone could confirm that any of this actually makes sense before I file a bug report based on ignorance and speculation. Thanks! - J.M. ------------------------------------------- Example I/O error: ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 ata1.00: BMDMA stat 0x5 ata1.00: failed command: READ DMA EXT ata1.00: cmd 25/00:08:c8:ca:92/00:00:2e:00:00/e0 tag 0 dma 4096 in res 51/40:05:cb:ca:92/40:00:2e:00:00/ee Emask 0x9 (media error) ata1.00: status: { DRDY ERR } ata1.00: error: { UNC } ata1.00: configured for UDMA/100 sd 0:0:0:0: [sda] Unhandled sense code sd 0:0:0:0: [sda] mResult: hostbyte=0x00 driverbyte=0x08 sd 0:0:0:0: [sda] mSense Key : 0x3 [current] [descriptor] mDescriptor sense data with sense descriptors (in hex): 72 03 11 04 00 00 00 0c 00 0a 80 00 00 00 00 00 2e 92 ca cb sd 0:0:0:0: [sda] mASC=0x11 ASCQ=0x4 sd 0:0:0:0: [sda] CDB: mcdb[0]=0x28: 28 00 2e 92 ca c8 00 00 08 00 end_request: I/O error, dev sda, sector 781372107 ata1: EH complete

8 12

[arch-general] No user sound - only root has access alsamixer on virtualbox?
by David C. Rankin 04 Feb '14

04 Feb '14

Guys, I've run into a problem with sound on a new archlinux guest install on virtualbox (v4.36). Only root can see/access the sound system. From the asla page, I've tried 'alsactl init' and I've also tried adding user to the audio group as mentioned in old forum pages, but still only root sees sound. The guest is a fully updated Arch install (with updates through today) Here are the details: As user: 19:46 valhalla:~> alsamixer cannot open mixer: No such file or directory 19:51 valhalla:~> cat /proc/asound/cards 0 [I82801AAICH ]: ICH - Intel 82801AA-ICH Intel 82801AA-ICH with STAC9700,83,84 at irq 11 19:53 valhalla:~> lsmod | grep snd snd_intel8x0 23757 0 snd_ac97_codec 89404 1 snd_intel8x0 ac97_bus 878 1 snd_ac97_codec snd_pcm 63880 2 snd_ac97_codec,snd_intel8x0 snd_page_alloc 5978 2 snd_intel8x0,snd_pcm snd_timer 14946 1 snd_pcm snd 44598 4 snd_ac97_codec,snd_intel8x0,snd_timer,snd_pcm soundcore 4386 1 snd 20:00 valhalla:~> aplay -l aplay: device_list:268: no soundcards found... 20:00 valhalla:~> aplay -L null Discard all samples (playback) or generate zero samples (capture) pulse PulseAudio Sound Server default Default ALSA Output (currently PulseAudio Sound Server) As root: [20:01 valhalla:/home/david] # alsamixer (works fine) No protocol specified xcb_connection_has_error() returned true [20:02 valhalla:/home/david] # aplay -l **** List of PLAYBACK Hardware Devices **** card 0: I82801AAICH [Intel 82801AA-ICH], device 0: Intel ICH [Intel 82801AA-ICH] Subdevices: 1/1 Subdevice #0: subdevice #0 [20:02 valhalla:/home/david] # aplay -L null Discard all samples (playback) or generate zero samples (capture) pulse PulseAudio Sound Server default Default ALSA Output (currently PulseAudio Sound Server) sysdefault:CARD=I82801AAICH Intel 82801AA-ICH, Intel 82801AA-ICH Default Audio Device front:CARD=I82801AAICH,DEV=0 Intel 82801AA-ICH, Intel 82801AA-ICH Front speakers surround40:CARD=I82801AAICH,DEV=0 Intel 82801AA-ICH, Intel 82801AA-ICH 4.0 Surround output to Front and Rear speakers surround41:CARD=I82801AAICH,DEV=0 Intel 82801AA-ICH, Intel 82801AA-ICH 4.1 Surround output to Front, Rear and Subwoofer speakers surround50:CARD=I82801AAICH,DEV=0 Intel 82801AA-ICH, Intel 82801AA-ICH 5.0 Surround output to Front, Center and Rear speakers surround51:CARD=I82801AAICH,DEV=0 Intel 82801AA-ICH, Intel 82801AA-ICH 5.1 Surround output to Front, Center, Rear and Subwoofer speakers iec958:CARD=I82801AAICH,DEV=0 Intel 82801AA-ICH, Intel 82801AA-ICH IEC958 (S/PDIF) Digital Audio Output I have since removed the user from audio group since it didn't help. I cannot find a solution. Any thoughts? -- David C. Rankin, J.D.,P.E.

2 8

[arch-general] Problem with cups 1.71 when restart service
by Maykel Franco 04 Feb '14

04 Feb '14

Hi, I have problem with cups in arch. This is the log error_log the cups: E [04/Feb/2014:12:52:24 +0100] Unable to bind socket for address [v1.::1]:631 - Address already in use. E [04/Feb/2014:12:52:24 +0100] Unable to bind socket for address 127.0.0.1:631 - Address already in use. And the printing not works... Thanks in advanced.

7 12

[arch-general] TDE binaries for pre-R14 testing are available (i686 & x86_64)
by David C. Rankin 02 Feb '14

02 Feb '14

Package for the Trinity Desktop upcoming R14 release are available for testing. These packages are within a few commits of what RC1 for the release will be. see: https://wiki.archlinux.org/index.php/Trinity Short version: pacman.conf (i686 or x86_64 as necessary): [trinity] SigLevel = Never Server = http://trinity.ceux.org/r14/x86_64 use meta-package "group" install: pacman -Sy group with "group" tde-core : minimal install - no koffice tde-extra : moderate install - with koffice tde-base : almost all of TDE pacman -Sl trinity to veiw complete list of packages available. Feedback directly to me or to http://bugs.pearsoncomputing.net/enter_bug.cgi?product=TDE -- David C. Rankin, J.D.,P.E.

2 5