Search Results: "will"

24 May 2008

Julien Valroff: How to fix DNS zone serial numbers

A small memo in case it happens again… Maybe this can also help others… I have made a typing error when incrementing a zone serial number this morning (I though we were in year 2009!). I realized this error after the transfer was made to my secondary server, and I couldn’t figure out how I could fix this: if the serial number on the slave server is lower than the serial number on the master, the slave server will attempt to update its copy of the zone. I have read some websites explaining one should add 2147483647 (2^31-1) to the number, reload the zone, let the slave get updated and revert to the appropriate serial number. Unfortunately, this solution hasn’t worked for me. I have read in RFC 1912 (section 2.2 - SOA records), that the system was planned until year 4294. I have henced updated the number of my master server to year 4294123199 (ie. the last possible serial number), reloaded the zone. After the transfer was propagated to the slave, I could simply revert to a standard serial number.

Ondřej Čertík: Ubuntu Developer Summit in Prague

Last weekend I was at FOSSCamp. Since I live in Prague I wanted to go to Ubuntu Developer Summit (UDS) each day, but unfortunately I had some exams, so I only went on Wednesday and Friday.

On Wednesday I first met Lars Wirzenius:


we agreed to go to pub in the evening. Then I did a little work, there was quite a nice view from the window (Prague castle on the horizon):



and I went to the #ubuntu-devel-summit IRC channel and pinged Scott Kitterman, whom I new from the Debian Python Modules Team (DPMT), but didn't know how he looks like. We met and once I knew Scott, it was easy to get around, so he introduced me to Steve Langasek (pronounced Lang ek). We agreed to go to pub as well. Steve lives in Portland, OR, where I spent the summer 2005 and Scott is from Baltimore where I spent the summer 2006.
Then I also met Riku Voipio, Martin B hm, Christian Reis (whom I asked if it's possible to support Debian unstable on Ubuntu Personal Package Archives and he said that it will probably happen, so that's really cool -- I also offered my help with this) and others, so in the end, there were 14 of us going to the pub, so I chose again the same pub as with the FOSSCamp people and it seems it tasted good again:




Notice the sv kov na smetan above, my favourite meal. Good choice Scott. :)





Ok, that was on Wednesday. On Friday I arrived at around 3pm, looked at the schedule table and noticed that Matthias Klose should be at UDS too, so I started IRC and pinged him. Fortunately, Emilio Pozuelo Monfort, whom I know from DPMT as well, replied first so we met, it was cool and he showed where Matthias is. I am very glad I met him, so we discussed python-central and python-support packages and why we have them both, also with Scott later on.

When I was waiting for Matthias, I sat next to Nicolas Valc rcel, started my laptop and begun looking at some SymPy bugs and Nicolas noticed that and said -- "You are developing SymPy?", I said "Yes.", flattered. And he showed me a bug with plotting and Compiz, so we immediately reported that to pyglet.

In the evening people continued to some kind of a party, but unfortunately, I was already going to some other pub.

Overall, even though I was there for only two afternoons, it was just awesome and I utterly enjoyed meeting all the people I knew from mailinglists and IRC.

John Goerzen: How to Start Bicycling to Work

Yesterday, I wrote about bicycling to work, pointing out that it's a safe, inexpensive, way for many people (including office workers without access to showers) to get to work. There were a lot of thoughtful comments there too.

Today I'd like to provide some tips for getting started commuting on a bicycle. As I'm just getting started on this, these are mainly things I've learned from poking around online, so I'll be including lots of links.

The Bicycle

This varies from person to person, but as a general rule: if you have a very short ride -- say a mile or less -- you can probably just use any old bike and a bicycling helmet. Don't try to use a motorcycle helmet. It won't vent your head, so you could overheat. Also, it won't be comfortable.

Most people will have a longer ride and will want to get a bike that works specifically for them. Each model of bicycle comes in different frame sizes. It's important to get a bicycle that is the right size for you. Also, you'll want to get a quality bicycle that will let you be fast and won't break down along the way.

For all these reasons, I -- and every single other person I've ever seen talk about this -- highly recommend that you buy your bicycle from a bicycle shop. Don't buy a bicycle from a "big box" store like Walmart or Target. They may be cheaper up front, but you'll pay for it in the long run because they won't last as long, won't fit you as well, and may even be unsafe. Bike shop staff will help you find a bike that fits you, which is important for avoiding aches and pains and even injury. They'll be able to help you find appropriate accessories for your bike, as well as repair it. Here is a helpful article on this topic, written by a bike shop.

Generally speaking, bike shops can repair bikes bought at any other bike shops. However, they can instantly recognize bikes bought at big box stores. Many will repair those too, but some refuse to work on some of those bikes on the grounds that it is impossible to bring them to the level of service they expect their mechanics to do.

Aches and Pains

With any sport, when you start it, you can expect a little bit of aches and pains at first, as you start using muscles that you may not have really used at first. Bicycling is no exception, but it's easy to deal with.

Your first stop if you have aches and pains might be the where does it hurt page. It provides detailed, helpful advice. There are also some common things that go wrong for people.

First on the list is wrong size of bike or improper adjustment of your bike. You want a bike frame that is the right size for you, and you want the seat and handlebars adjusted properly for you. A bike shop can help you get this done easily. If your feet can reach the ground while you're on the seat, you almost certainly have the seat too low, which is a common mistake.

Sometimes the way you position yourself on the bike, or your technique, could be to blame.

Also, clothing can be a problem. A good place to start here is with some cycling shorts. Another common complaint from new cyclists appears to be blisters on the feet. This can be caused by improper positioning on the pedals, or by using the wrong type of sock. Typical socks absorb moisture and trap it next to the skin; bicycling socks will wick it away and let it evaporate. In fact, cycling clothes: socks, shorts, and jerseys (shirts) are all designed to wick moisture away from you and let it evaporate, which keeps you cooler and more comfortable. Bicycling gloves are cheap and can help your hands stay comfortable.

Expense

You can easily save thousands of dollars by riding a bicycle instead of driving a car. Bicycles do need periodic maintenance, just like a car. Usually you can do a lot of that yourself. It probably will pay off to take your bike in to the shop for an annual tuneup. If you have no bicycling equipment at all, and buy your equipment at a bike shop new, you can probably get started for around $500. Even that will probably pay for itself in less than a year if you average riding your bike at least a few times a week.

Safety

Safety on a bicycle can usually be summed up with three rules: be visible, be predictable, and ride with traffic.

Unless there are dedicated bicycle-only lanes or paths, the safest way (in the United States) to ride your bike is on the road, riding with traffic (acting like a car). Don't ride on a sidewalk, and never ride against traffic. This may sound counter-intuitive, but it is backed up by solid research. It all has to do with being predictable. Nobody is looking for something the speed of a bicycle to emerge from a sidewalk to cross a road or driveway. Sidewalks often aren't that visible and frequently don't provide enough room to pass. Sidewalk-riding cyclists get into accidents all the time with cars backing pulling out of driveways, making turns, or even just driving down a road where the cyclist cuts in front of them to cross a street.

A great book for learning how to ride in traffic can be viewed free online: the Bicycling Street Smarts book. There are also some safety videos online that are helpful.

Staying visible is certainly important. In some places, like cities where cyclists are common, drivers are going to be on the lookout for you already. In my case, I'm riding on rural roads that have some hills, where cyclists are rare, so I'm putting extra effort into this.

Staying visible in the day or at night starts with high-visibility clothing. A "screaming yellow" jersey or an ANSI safety reflective vest (less than $10) are good ways to do that. Several people recommend a Cateye TL-LD1100 flashing tail light for use at night, or even for daytime use when visibility is critical (such as my situation). If you will ever ride at night, laws require you to have the proper reflectors on your bike. And, you must also have a white headlight that does not cover up your front reflector (in some locations, you may also be required to have a red tail light that doesn't cover up your reflector). Companies like Cateye carry those products as well.

Other tips: avoid drainage covers; they sometimes have slats that a bicycle tire could fall into.

Accessories

Here are some suggestions you might consider as a commuter.

Start with pannier bags. They mount over your rear tire and are cooler for you than a backpack because your back can still breathe. They're more aerodynamic than a front basket. You can get bags suitable for carrying papers, laptops, a change of clothes, etc.

Next on your list might be a bicycle lock, to help keep it from being stolen. Your local bike shop can make suggestions here.

You might want to consider a spare inner tube (about $5) and tire-changing tools (also about $5) to carry with you in your bag. You wouldn't want to have to walk 5 miles if you get a flat.

Along with that goes an air pump. I suggest a frame pump -- it's a small pump that can clip on to your bicycle's frame, so you always have it handy. Obviously you will need this if you have to change a tube, but it could be handy even if you don't.

You can find some more suggestions from bicycling.about.com and from Mike or your local bike shop.

Where to buy

Besides your local bike shop, you can buy a lot of accessories online. I wouldn't suggest buying a bicycle online, because you really want to get a good fit at a bike shop.

When I asked at bikeforums.net, readers suggested three online stores:

www.pricepoint.com
www.bikenashbar.com
www.performancebike.com

You can also find some bicycling accessories at general-purpose stores like Amazon or sporting goods stores like REI. I personally wouldn't recommend local "big box" sporting goods stores any more than I would Walmart or Target for this stuff, though.

More info

For more information, check out my bicycling links at del.icio.us.

Russell Coker: IPSEC is Pain

I’ve been trying to get ipsec to work correctly as a basic VPN between two CentOS 5 systems. I set up the ipsec devices according to the IPSEC section of the RHEL4 security guide [1] (which is the latest documentation available and it seems that nothing has changed since). The documentation is quite good, but getting IPSEC working is really difficult. One thing I really don’t like about IPSEC is the way that it doesn’t have a device, I prefer to have my VPN have it’s own device so that I can easily run tcpdump on the encrypted or the unencrypted stream (or two separate tcpdump sessions) if that’s necessary to discover the cause of the problem). I’ve got IPSEC basically working, and I probably could get it working fully, but it doesn’t seem worth the effort. While fighting with IPSEC at the more complex site (multiple offices which each have multiple networks, and switching paths to route around unreliable networks) I set up an IPSEC installation at a very simple site (two offices within 200 meters both with static public IP addresses, no dynamic routing or anything else complex). The simple site STILL doesn’t work as well as desired, one issue that still concerns me is the arbitrary MTU sizes in some routing gear which (for some reason I haven’t diagnosed yet) lose packets if I have an MTU over 1470 bytes. So today I set up a test network with OpenVPN [2]. It was remarkably simple, the server config file (/etc/openvpn/server.conf) is as follows:
dev tun
ifconfig 10.8.0.1 10.8.0.2
secret static.key
comp-lzo This means that the IP address 10.8.0.1 will be used for the “server” end of the tunnel, and 10.8.0.2 is the “client” end. The secret is stored in /etc/openvpn/static.key (which is the same on both machines and is generated by “openvpn --genkey --secret static.key“). The client config file (/etc/openvpn/client.conf) is as follows:
remote 10.5.0.2
dev tun
ifconfig 10.8.0.2 10.8.0.1
secret static.key
comp-lzo Then I enable IP forwarding on both VPN machines, open UDP port 1194 (the command “lokkit -q -p 1194:udp” does this) and start the daemon on each end. The script /etc/init.d/openvpn (in Dag Wieers package for CentOS 5 - which I believe is the standard script) will just take every file matching /etc/openvpn/*.conf as a service to start. The end result is a point to point link that I can easily route other packets to, I can easily get dynamic routing daemons to add routes pointing to it. Nothing like the IPSEC configuration where the config file needs to have the IP address range hard-coded, I can just add routes whenever I want. This isn’t necessarily going to be the way I deploy it. The documentation notes that a disadvantage is “lack of perfect forward secrecy — key compromise results in total disclosure of previous sessions“. But what gives me confidence is the fact that it was so easy to get it going, if I have problems in adding further features to the configuration it should be easy to debug. As opposed to IPSEC where it’s all complex and if it doesn’t work then it’s all pain. Also I tested this out with four Xen DomU’s, two running as VPN routers and two as clients on separate segments of the VPN. They were connected with three bridge devices. I’ll blog about how to set this up if there is interest.

23 May 2008

Chris Lawrence: CECB mini-review: LG/Zenith DTT900

To continue the CECB mini-review series, I picked up an LG/Zenith DTT900 at Circuit City in Southaven this evening with one of my two digital converter box coupons (and $24ish of my hard-earned money at Sam’s Town’s blackjack tables). With essentially the same setup and conditions (same television and el-cheapo VHF/UHF indoor antenna) as the RCA DTA800B tested before, the initial channel scan found the same 17 channels/sub-channels. However, the Zenith’s ability to manually add channels meant that I was able to add WMC-DT/NBC 5 (RF channel 52) and with some fiddling get a reasonably stable signal, something I was unable to accomplish with the RCA—this isn’t that surprising, since the Zenith is based on LG’s ATSC digital tuner chipset, which is known for its superior reception capabilities over most other silicon. In addition, other channels (WHBQ-DT/Fox 13, WPTY-DT/ABC 24, and WLMT-DT/CW 30) that were less-than-stable with the RCA were rock-solid with the Zenith. Bear in mind that WMC is running on a different frequency (and lower on its tower) than it will after the transition is complete in nine months, so indoor antennas in Shelby County at least should cope better with WMC when it is back on VHF channel 5. The built-in guide is a little weaker than that included on the RCA model; the Zenith’s only shows program data for one channel at a time. The Zenith, however, has more functionality accessible from the remote control, including a “favorite channels” feature that would be useful for the compulsive surfer who isn’t interested in switching past the news and weather loops on 3–2 and 5–3 when doing the Letterman/Leno (or Conan/Craig) shuffle, and a sleep button. I also thought the Zenith’s menus were a little more polished and better organized. On the antenna front, the Zenith, unlike the RCA, does not provide an attachment for digitally-steered “SmartAntennas,” which may be a consideration if you already have one of these (they are apparently uncommon at present) or have hard-to-tune channels in multiple directions which might benefit from this high-tech solution. The Zenith’s better signal-handling may reduce the need for a fancy antenna, however; either way, you should probably check out TVFool’s antenna aiming guide or the somewhat less-friendly CEA/NAB-sponsored AntennaWeb website to determine what sort of antenna solution is going to be necessary for you before spending money on one. The only real problem I encountered in testing was that the “zoom” setting seemed to behave oddly; at first, letting it decide on its own seemed to work OK on some channels, but then I ended up with some bizarre “squeezed” pictures on several HD channels. Expect to manually fiddle with the zoom setting when channels switch between showing native 16:9 and pillarboxed 4:3 programs. Those who use closed captioning will also find that it seems to forget the CC setting when you switch channels, although I think there’s a menu option to leave closed captioning on all the time. Finally, caveat emptor: many manufacturing runs of this converter, and its near twin sold by Best Buy under its Insignia house brand, apparently have an audio problem that certain TVs seem to be more susceptible to than others. The converter I purchased had a manufacturing date of April 2008, which has been reported to be the run in which this problem was fixed, and I observed no audio problems during my testing (on an admittedly low-end CRT stereo television/VCR over RCA cables). Overall, I’d assess the LG/Zenith DTT900 as a better option for those who are planning to use the converter on a regular basis; however, if you’re simply buying a converter to serve as a “lifeline” when cable or satellite television is disrupted, or if you would like to take advantage of the SmartAntenna connectivity on that unit, the RCA model is probably adequate for most needs and seems to retail for about $10 less.

John Goerzen: Bicycling to Work

We hear a lot these days about the price of gas, energy efficiency, and the like. But, in the United States, outside of a few progressive cities, there aren't a lot of people that are using the ultimate zero-emissions transportation technology: bicycles.

That's really too bad, because bicycles are a lot cheaper to operate than cars even before you consider gas prices. They also are great exercise and are probably faster, safer, and more convenient than you think.

I live about 10 miles (16 km) from work, which includes several miles on sand roads. I haven't bicycled in about 6 years. Last week, I got my bicycle out, touched it up a bit, and started riding. Sunday I rode in to work and back as a test. As soon as I get a bit of gear (hopefully by the middle of next week), I plan to start riding bike to work at least 3 days a week.

I've picked up some tips along the way. Let's talk about a few of them.

Safety

Many people think bicycling is dangerous. In fact, bicycling is about as safe as driving an SUV. Not only that, but only 10% of bicycling accidents occur when you are hit from behind (and 90% of those produce only minor injuries). It turns out that the vast majority of bicycling accidents occur because people are not riding on the road with traffic, or are acting unpredictably. Following some basic safety advice can make you safer in a bicycle than an SUV. Oh, and don't drink and ride; 24% of fatal bicycle accidents involve an intoxicated rider.

Distance

Think it's too far? Think again. It's fairly easy for an untrained, unfit person to ride a bicycle up to 10 miles without working hard at it. That can probably be done in about an hour. As you get more fit and used to the bike, you may be able to go that distance in half that time. Also, get pannier bags for your bicycle. They attach in back and let you carry work clothes, laptops, etc. without having to use a backpack.

Smell

Many people with office jobs are concerned about this. Not everywhere has a convenient shower. Check out these tips from the Tips and Tricks for Biking to Work manual.

I'm excited about it, and will be sure to post more here on how it goes.

Lucas Nussbaum: FOSSCAMP

Last week-end, I was in Prague for FOSSCAMP, a Canonical-sponsor event aiming at bringing together people from various Free Software projects. Such an event is a very good idea, especially after the openssl debacle, where we saw how difficult it is to build good relationships with other Free Software projects. The event was organized in a rather interesting way: the attendees make up the schedule as the event happens, by adding sessions to the timetable using marker pens on a whiteboard (see picture, hi Jorge!). If we have a spare BOF room at Debconf, it would be great to do the same thing: I always find it frustrating that many important discussions at Debconf happen outside BOFs/lectures, and are so easy to miss, simply because you submit talk proposals months before Debconf, so you can’t know yet what will be the hot stuff when Debconf finally arrives :-) It was also interesting to see all the different ways people organized BOFs. It might be interesting to write a list of DOes and DON’T about BOFs (not that the sessions weren’t of good quality!). Does anyone know if such a list already exist? And finally, as usual, it was great to meet all those people from this nice community again. If you still believe that some projects are fighting with each other, you need to attend such an event. And special thanks go to Ond ej ert k for guiding me through a visit of Prague!

Russell Coker: School Bag Weight

Matt Bottrell has written about some issues related to the acceptable weight of laptops for school use [1]. Matt cites a reference from the Victorian government stating that a school bag should not be heavier than 10% of the body weight of the child who carries it [2]. So the next thing we need to do is to calculate what a student can carry without being at risk of spinal injuries. Firstly we need to determine what children weigh, if we restrict this to the 14+ age range (the older children have more need of computers) then children are almost as heavy as they will be when they are 18 and can carry significantly heavier bags than those in the 10+ age range. Also it seems reasonable to consider the 25th percentile weight (the weight which is exceeded by 75% of children). Of course this means that 25% would be carrying overly heavy bags but it does give us a bit more weight allowance. The 25th percentile weight for white girls in the US is 48Kg [3]. The 25th percentile weight for white boys in the US is also 48Kg [4]. When considering the Australian situation it seems that white children in the US will be most similar (in terms of genetics and diet). The 25th percentile weights at age 18 are 53Kg for girls and 64Kg for boys. So the acceptable bag weights would be 4.8Kg for 14yos, 5.3Kg for 18yo girls, and 6.4Kg for 18yo boys. The next step is to determine the weight carried to school. The weight of one of my laptop bags is almost 1Kg, I think that a school-bag would have a similar weight. When I was at school I recall that the worst days for carrying baggage were when I had PE (Physical Education - sports), the weight of PE gear was a significant portion of the overall weight I carried. I tried to estimate this by weighing a track-suit top, a t-shirt, and a pair of board-shorts (the only shorts I could find at short notice), and it was almost 1Kg. While the board-shorts might weigh more than PE uniform shorts I didn’t include the weight of track-suit pants. Assuming that a female PE uniform has the same weight as a male uniform is the least of my assumptions. The weight of a good pair of sneakers (suitable for playing basketball and other school sports) that is in my size is just over 1Kg. To get a rough estimate of the weight of lunch I put six slices of bread and a small apple in a lunch box and found that it weighed 500g. A real lunch would probably include four slices of bread but the other things would weigh at least as much as the extra two slices. If a drink was included then it could be more than 500g. So the total is 3.5Kg for bare essentials (including PE gear) without including any books! It seems that it would be impossible to stick to the government recommendations for school bag weight if a full set of PE gear is included. Probably the best thing that could be done would be to make a school uniform allow wearing sneakers which removes 1Kg from the overall bag weight. So a bag with lunch and PE gear (minus sneakers) is about 2.5Kg, leaving 2.3Kg for books etc at age 14. As text books for 14yo children are considerably thinner than those for 18yo children, it seems that this might be achievable. Fitting a couple of text books and an EeePC into the 2.3Kg weight budget should be achievable. But fitting a full size laptop (which seems to start at about 1.8Kg) and some text books into a 2.3Kg budget will be a challenge - it might be possible to do that but wouldn’t leave any budget for the random junk that children tend to carry around. For an 18yo girl, the weight budget (after the basics have been deducted) is 2.8Kg, it seems likely that on occasion the weight of year-12 text books will exceed that. Therefore it seems that the only way of avoiding spinal injuries in year-12 girls would be to have text books stored in digital form on a light laptop such as an EeePC. Rather than avoiding the use of laptops because of weight (as some people suggest), laptops with electronic text books should be used to replace traditional text books! An EeePC weighing less than 1Kg will give a significant amount of extra capacity for any other things that need to be carried. If there is little other stuff to be carried then 75% of 18yo girls should be able to carry a full size laptop plus PE gear without risk of back injuries. If digital text books are used then if in any journey two text books (which according to my previous measurements can be as much as 1.6Kg [5]) can be replaced with an EeePC then overall something like 600g is saved (depending on the configuration of the EeePC, if one battery was stored at home and another at school then it could save more than that). It seems that a year 12 girl who has PE and three science subjects scheduled on the same day would be most likely to exceed the recommended weight in the current situation (even without having to carry a spare pair of shoes), and that carrying a laptop with digital text books would be the only way of avoiding back injury. For an 18yo boy the weight budget is 3.9Kg after the basics have been deducted. So if they don’t carry other random stuff in their bag (I probably had 1Kg of random junk in my bag on occasion) then they could carry PE gear, a full sized laptop, AND a full set of text books. It seems to me that there is no situation where children would be unable to have a laptop within the reasonable weight allowance if digital text books were used. The only way that the weight of a laptop could be a problem would be if it was carried in addition to all the text books. One final point, it would be good if books from the Gutenberg project were used for studying English literature, that’s one easy way of reducing weight (and cost). Also it would be good if there was an option for a non-literature based English subject. Knowledge of English literature is of no value to most students. It would be better to teach students how to write while using topics that interest them. Maybe have blogging as an English project. ;)

Axel Beckert: Favourite Linux Desktop Applications

foosel tagged me, whatever that means. Perhaps it’s the English word for “Stöckchen” (German for “small stick”) of which I always wondered how the English blogging part of the blogosphere is calling that kind of coercing blog posts… ;-) So these are the rules:
  1. blog a list with your favorite desktop Linux software (as many or few you want)
  2. add links to the software project’s websites
  3. post these rules
  4. tag three other Linux using bloggers
Interestingly splitbrain, who started the thing just calls it “Meme”, but to me memes are the same thing just without duress. ;-) So you want to know about what Linux desktop software I like and use, hmm? Desktop means GUI, doesn’t it? There are only a few GUI application I really use often since, as you probably know, X is primarily a terminal multiplexer and screen resolutions are compared by how many 80×25 xterms with fixed font you can get on one screen without overlapping. ;-) But to be honest: Although I’m more the command line guy hacking cryptic lines into windows with small fonts, there are a few thing where I don’t want to miss X and the GUI applications: For all things web – that means web browser, feed reader, etc. But then there is also a bunch of GUI software I use occasionally or as alternative tool to some text mode or command line software. WebX / Desktop Environment
  • xtrlock – the simplest tool to lock you desktop: The mouse turns into a lock and it only goes away if you enter the right password. No screen saver included though and everyone can see what’s on your desk. I like it though. Use it on low-end machines.
  • XScreenSaver and Really Slick Screensavers (GLX Port) – Configurable and command controllable screen saver daemon. Favourite modes: GLMatrix and Substrate from XScreenSaver and Lattice Sky Rocket and Hufo’s Smoke from RSS GLX.
  • xosview – my favourite system monitor since more than a decade.
  • TerminalsAudio and VideoEditing and DevelopingGraphicsChatOther ToolsGamesNon-Desktop Applications In case someone wonders about my mail client, Jabber client, IRC client, ICQ client, file manager, notes taking application, shell and versioning system – they’re all command line or text-mode applications: Who’s next? That’s difficult: Hmmm, I think I have to look in a different corner of my circle of friends. Hmm. Ah, now I know: And no, I don’t expect posts as comprehensive as mine. :-)

    Jan Wagner: Kabel Deutschland breaks DNS System for it s customers

    Last week I noticed, that Kabel Deutschland, a cable provider in germany, returns for any non existing hosts “204.9.89.60″. It seems, thats it is rolled out since last fall. Even for DNSSEC enabled infrastructure it breaks it totally:

    ; <<>> DiG 9.3.4 <<>> +dnssec web.pixaco.se @83.169.184.161
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
    ;; ANSWER SECTION:
    web.pixaco.se. 0 IN A 204.9.89.60 Beside that, this behavour breaks the whole DNS, since many mechanism rely on a negative answer. The most visible effect for the users is, that when having a typo on surfing, he will forwarded to http://suche.kabeldeutschland.de/de.kde.assist/?domain=<domainyoutypedinyourprompt>. Since 204.9.88.0/21 is located at our transatlantic friends from US, there might be some problem with leaking privacy informations. I don’t feel happy, if I had a typo in my URL and getting listed for it on any terror list or providing the newest porno links to my american friends inside the organisations with the tree capitals. All that for getting some extra money, but racing pricedumping for connectivity, this sucks a lot.
    If you are a customer and feel pissed, you can send a friendly note to them:

    Kabel Deutschland Vertrieb und Service GmbH & Co. KG
    Beschwerdestelle
    99116 Erfurt
    kundenservice@kabeldeutschland.de
    Fax: 01805299925
    A quick and dirty workaround for dnsmasq maybe to add “bogus-nxdomain=204.9.89.60″ to your config file. This doesn’t fix the DNSSEC problem.
    The problem also pops up at dns-operations and there are traces at google too.

    Edd Dumbill: Badges, blogging and bragging

    Back from my travels, it's time for a few updates. I've mostly blogged about these elsewhere, so I'll just give some pointers here. The launch of magnetic-stripe cards at Where 2.0 went well. We had some initial teething issues with Linux talking to the card printers, which was resolved by backing down to Linux kernel 2.6.22 from 2.6.24. I'm not entirely sure what's up with 2.6.24, but it exhibited strange behavior talking to the card printers over ethernet — as if there were MTU misconfigurations. It's a big nuisance, as 2.6.24 is the default kernel shipped with Ubuntu Hardy, an otherwise excellent release. I've been paying some attention to OpenID 2.0 recently, as it's time for me to upgrade my OpenID accepting websites to use the new release of the specification — if for no other reason than Yahoo! OpenIDs are 2.0-only. This investigation led me to notice XRIs again, which are the confusing underbelly of the OpenID specs. The W3C Technical Architecture Group recently advised against using XRIs. I wrote about this over on my XML.com blog. I've not used for that blog for a long time, but will try to do so more. I've realized that I've still got a lot to say about the web, XML and open standards, and the XML.com blog seems like a good place to say it. Finally, to brag for a short moment. Another XTech has been and gone, and this year's was a great experience for everybody involved. This quote from attendee Paul Smith summed things up nicely, as it tells me I succeeded in my main goal for the conference:
    What I really liked about this conference was the mix of attendees and presenters, both from academia, and the commercial world both and small. It made it feel much more valid, and it really felt like everyone was there for the right reasons - not trying to sell anything, but out of a genuinely altruistic wish to make the web better.
    My sincere thanks to everybody involved in XTech this year.

    Enrico Zini: Conditional partitioning in debian installer

    Conditional partitioning in debian installer I needed to create an automatic, unattended installer that would repartition the whole disk, but keep an existing home partition if it is already existing. The idea is to replace the operating system, but keep the user's home files. If the home partition does not exist, however, we need to create it. The starting point for this is in Holger's website, which does everything except create the partition if it's missing. The technique I used is to create a udeb that would scan the partitions using /usr/lib/partconf/find-partitions and then load the right preseeding for partman-auto, the automatic partitioner. Here you find the udeb source. I'll comment the most important bits: First, the two partman-auto recipes that we are going to preseed. The format is documented in the debian-installer documentation. This will create /home if missing:
            d-i partman-auto/expert_recipe string                           \
                    condpart ::                                             \
                    2048 2048 2048 ext3                                     \
                            $primary    $bootable                           \
                            method  format   format                         \
                            use_filesystem    filesystem  ext3              \
                            mountpoint  /                                   \
                    .                                                       \
                    1024 1024 1024 linux-swap                               \
                            method  swap   format                           \
                    .                                                       \
                    1024 4096 10000000 ext3                                 \
                            method  format   format                         \
                            use_filesystem    filesystem  ext3              \
                            mountpoint  /home                               \
                    .
    
    And this will keep /home if it exists:
            d-i partman-auto/expert_recipe string                           \
                    condpart ::                                             \
                    2048 2048 2048 ext3                                     \
                            $primary    $bootable                           \
                            method  format   format                         \
                            use_filesystem    filesystem  ext3              \
                            mountpoint  /                                   \
                    .                                                       \
                    1024 1024 1024 linux-swap                               \
                            method  swap   format                           \
                    .                                                       \
                    1024 4096 10000000 ext3                                 \
                            method  keep                                    \
                            use_filesystem    filesystem  ext3              \
                            mountpoint  /home                               \
                    .
    
    Then the postinst file of the package, where the logic is. Otavio and Daniel on #debian-boot have taught me that udebs are, simply put, just big postinsts (installer wise, apart from shipping binaries). Postinst is where the logic is done, or applications are started.
    #!/bin/sh
    # Copyright 2008 Enrico Zini <enrico@truelite.it>
    # Licensed under the terms of the GNU General Public License,
    # version 3 or any later version.
    set -e
    FINDPARTS="/usr/lib/partconf/find-partitions"
    notice ()  
        logger -t condpart "$@"
     
    error ()  
        logger -t condpart "error: $@"
     
    # load debconf
    . /usr/share/debconf/confmodule
    notice "Checking if we need to recreate /home"
    if [ ! -x $FINDPARTS ]
    then
        error "$FINDPARTS not found"
        exit 1
    fi
    if $FINDPARTS   grep -q part6
    then
        # Keep
        notice "/home exists: we keep it"
        debconf-set-selections /usr/lib/condpart/part-keep.preseed
    else
        # Format
        notice "/home does not exist: we create it"
        debconf-set-selections /usr/lib/condpart/part-create.preseed
    fi
    notice "Finished special handling of /home"
    #DEBHELPER#
    exit 0
    
    Finally, debian/control. The basic bits about creating a d-i udeb are to put it in Section: debian-installer and to use XC-Package-Type: udeb. Then there is XB-Installer-Menu-Item, that defines the order of execution of postinsts. The d-i documentation lists the numbers that are currently assigned.
    Source: condpart
    Section: debian-installer
    Priority: optional
    Maintainer: Enrico Zini <enrico@debian.org>
    Build-Depends: debhelper (>= 4.0.0), cdbs
    Standards-Version: 3.7.2.1
    Package: condpart
    Architecture: any
    XC-Package-Type: udeb
    XB-Installer-Menu-Item: 38
    Description: Conditional partitioning
     Tells partman-auto to create /home if it's missing, or if it exists, to keep
     it.
    
    I am using 38 rather than 3800 because I'm targeting etch d-i. After etch, "numbers have been multiplied by 100 from what they were before to give us more space". This is it. debian/rules is just boilerplate, except installing the preseed files in the right place. CDBS is useful to make this self-evident:
    #!/usr/bin/make -f
    include /usr/share/cdbs/1/rules/debhelper.mk
    install/condpart::
      install -o root -g root -m 0644 *.preseed debian/$(cdbs_curpkg)/usr/lib/condpart/
    
    To build the installer CD with this d-i, I'm using simple-cdd; here are the profile files I'm using at the moment, with the main preseeding for fully unattended install (it is designed to trash your hard disk if you boot it, so only test it in an emulated environment) and the inclusion of the custom udeb.

    22 May 2008

    Lior Kaplan: Ubuntu s reportbug-ng send bug reports to Debian s BTS


    I checked the Debian firefox bugs page and noticed a new bug was reported against firefox. Checking the bug report showed the bug is new as it reported against version 3.0b5. As there’s now firefox package in debian testing/unstable that was weired enough. Reading the bug report revealed these details:
    Package: firefox
    Version: 3.0~b5+nobinonly-0ubuntu3
    and
    Debian Release: lenny/sid
    500 hardy-updates us.archive.ubuntu.com
    500 hardy-security security.ubuntu.com
    500 hardy us.archive.ubuntu.com
    I mailed the user to see why does he reports Ubuntu’s bugs to Debian. He replied that he’s using the reportbug-ng program and wasn’t aware that his bug have been sent to Debian. I check the reportbug and reportbug-ng in Ubuntu and found that reportbug has the needed patch for Ubuntu:
    diff -pruN 3.39/reportbug.conf 3.39ubuntu3/reportbug.conf
    — 3.39/reportbug.conf 2004-12-06 13:59:04.000000000 +0000
    +++ 3.39ubuntu3/reportbug.conf 2007-10-25 07:22:47.000000000 +0100
    @@ -6,7 +6,7 @@
    # severity normal
    # BTS to use
    -#bts debian
    +bts ubuntu
    # See ‘reportbug –bts help’ for a current list of supported BTSes # Submission address: default is ’submit’
    but since hardy reportbug-ng package in Ubuntu is identical to the one in Debian.
    $ rmadison -u ubuntu reportbug-ng
    reportbug-ng 0.2007.10.30~feisty1 feisty-backports/universe source, all
    reportbug-ng 0.2007.06.27 gutsy/universe source, amd64, i386, powerpc
    reportbug-ng 0.2007.10.30~gutsy1 gutsy-backports/universe source, all
    reportbug-ng 0.2007.10.30 hardy/universe source, all
    reportbug-ng 0.2008.03.28 intrepid/universe source, all
    Doing more checks reveals that this is a known problem in Ubuntu and is already reported at Bug #175508. This was also discussed three weeks ago on “Ubuntu Open Week - Reporting Bugs“. A quick look at the reportbug-ng code makes it clear that reportbug-ng will require more work to support the Ubuntu BTS. There were also some comments about the configuration for Ubuntu in reportbug, as it just send the reports to ubuntu-users mailing list and not to the real BTS at https://bugs.launchpad.net/ubuntu/.

    Lior Kaplan: Ubuntu s reportbug-ng sends bug reports to Debian s BTS


    I checked the Debian firefox bugs page and noticed a new bug was reported against firefox. Checking the bug report showed the bug is new as it reported against version 3.0b5. As there’s now firefox package in debian testing/unstable that was weired enough. Reading the bug report revealed these details:
    Package: firefox
    Version: 3.0~b5+nobinonly-0ubuntu3
    and
    Debian Release: lenny/sid
    500 hardy-updates us.archive.ubuntu.com
    500 hardy-security security.ubuntu.com
    500 hardy us.archive.ubuntu.com
    I mailed the user to see why does he reports Ubuntu’s bugs to Debian. He replied that he’s using the reportbug-ng program and wasn’t aware that his bug have been sent to Debian. I check the reportbug and reportbug-ng in Ubuntu and found that reportbug has the needed patch for Ubuntu:
    diff -pruN 3.39/reportbug.conf 3.39ubuntu3/reportbug.conf
    — 3.39/reportbug.conf 2004-12-06 13:59:04.000000000 +0000
    +++ 3.39ubuntu3/reportbug.conf 2007-10-25 07:22:47.000000000 +0100
    @@ -6,7 +6,7 @@
    # severity normal
    # BTS to use
    -#bts debian
    +bts ubuntu
    # See ‘reportbug –bts help’ for a current list of supported BTSes # Submission address: default is ’submit’
    but since hardy reportbug-ng package in Ubuntu is identical to the one in Debian.
    $ rmadison -u ubuntu reportbug-ng
    reportbug-ng 0.2007.10.30~feisty1 feisty-backports/universe source, all
    reportbug-ng 0.2007.06.27 gutsy/universe source, amd64, i386, powerpc
    reportbug-ng 0.2007.10.30~gutsy1 gutsy-backports/universe source, all
    reportbug-ng 0.2007.10.30 hardy/universe source, all
    reportbug-ng 0.2008.03.28 intrepid/universe source, all
    Doing more checks reveals that this is a known problem in Ubuntu and is already reported at Bug #175508. This was also discussed three weeks ago on “Ubuntu Open Week - Reporting Bugs“. A quick look at the reportbug-ng code makes it clear that reportbug-ng will require more work to support the Ubuntu BTS. There were also some comments about the configuration for Ubuntu in reportbug, as it just send the reports to ubuntu-users mailing list and not to the real BTS at https://bugs.launchpad.net/ubuntu/. I’m still not sure what to do about the bug. On one hand, that package originates in Debian, and the bug is probably relevant. On the other hand, the cause might be a change from Ubuntu. In any case, I
    don’t see the user following our BTS, and I don’t way to fixed package (if and when created) to propagate to Ubuntu.

    Julian Andres Klode: The future of dir2ogg - gstreamer?


    After playing a bit with gst-launch, I found out that it can convert music files and keeps the tags. Therefore, I think it would be great to rewrite dir2ogg using gstreamer (the python bindings). This version of dir2ogg will be much much smaller, and is really easy to extend. It will also support multiple output formats and does not need to know about the input files (use -i ‘SHELL PATTERN’ to include other files). But it will not really replace dir2ogg. The old dir2ogg will still be supported.

    Julian Andres Klode: swfdec working perfectly with gstreamer


    After the trouble with swfdec and gstreamer, I found out the source of the issue (the fluendo mp3 plugin, see below), and can now use swfdec with gstreamer. Warning: Do not use the mp3 plugin from fluendo.com swfdec does not always work with the binary mp3 plugin from fluendo.com, at least not in Ubuntu 8.04 64bit. It works with the version shipped in Ubuntu (gstreamer0.10-fluendo-mp3) and with the mad plugin in gstreamer0.10-plugins-ugly. An example is http://youtube.com/watch?v=CSp7jsV7oG0 Installation of missing gstreamer plugins This works on both, Debian and Ubuntu, provided gnome-app-install is installed (default in Ubuntu). Simply open a youtube video, and you will be asked for searching the missing codecs. This also works in almost any other gstreamer application, like rhythmbox or totem. Builds of the development branch I will provide builds of the 0.7.1 git versions of swfdec and swfdec-mozilla in my PPA soon. This version even supports fullscreen mode in youtube! The PPA will build versions for hardy and intrepid.

    Lior Kaplan: What can Debian learn from Fedora about recruiting new people?


    I’ve been visiting the fedora website in the last couple of days. One thing caught my interest, and that’s the “join Fedora” link just bellow the “get Fedora” one. I clicked on it and got to this very simple “Join Fedora” page. The appealing part is the large icons which roughly lists the main ways to contribute to Fedora:
    • Content Writer
    • Designer
    • People Person
    • OS Developer
    • Translator
    • Web Developer or Administrator
    Clicking etch icon gives you a description of relevant skills, related teams and typical tasks of this role. This is very useful for people not sure about what can they do or where exactly their skills are needed. On the Debian’s website we have a “help debian” page which lists very similar functions the user can help with. The difference is that we list them at text which is less appealing than the Fedora’s icons. Fedora does have similar text to Debian, but it is organized into roles instead of suggesting everything to everyone. I also think there’s a semantic difference with the term help and join. To me joining a project sounds more strong than helping it. Probably because joining something makes you a part of it, while helping does not. Although in the end both term have the exact same meaning in for the project themselves - users getting involved. Openoffice.org has a big “I want to participate in openoffice.org” text in their font page, which like Fedora leads to a set of defined roles. Same thing in Ubuntu with their “Get Involved” page. It is important that each role page will have links the to tools people need in order to start contribute. I don’t have the required graphical skills to do such icons, but I’m willing to create/edit the pages on the Debian website. I’ll be happy to hear comments before I approach the debian-www people.

    Julian Andres Klode: Ubuntu: swfdec using ffmpeg in PPA


    I created a version of swfdec 0.6.6 using mad and ffmpeg instead of gstreamer, because with gstreamer it failed to play multiple videos on youtube.com. The release is available in my PPA at:
    deb http://ppa.launchpad.net/juliank/ubuntu hardy main
    deb-src http://ppa.launchpad.net/juliank/ubuntu hardy main
    I will also provide some builds of the development branch (0.7.1) soon. Update:Maybe it was not clear, but the videos crashed the browser. It also didn’t really work in totem and I’m still looking for the source of the problem. I have every available gstreamer plugin package installed. Try it yourself, http://de.youtube.com/watch?v=CSp7jsV7oG0. It works with gnash, but gnash does not work with wordpress stats page. Update 2: I now found the real problem: I had an binary version of fluendo’s mp3 plugin installed (from fluendo.com), which caused the crash. After removing the file, everything works. (using fluendo-mp3 shipped with Ubuntu). Update 3: I removed the ffmpeg version from my PPA, as it is not needed.

    Biella Coleman: Comics: some help

    So, the last day of my class on hacking, we are going to spend some time on geeky comics and talking about this pictorial genre. I have started collecting a set of examples that I think are particularly strong and funny reflections of geek/hacker life but I am looking for more. So what are some of your all-time favorite episodes/examples from a comic strip? I am looking for stuff that someone who is not necessarily technically oriented will understand but who will be armed with a fairly broad sense of this world too. Any suggestions would be really appreciated.

    Biella Coleman: Comics: some help

    So, the last day of my class on hacking, we are going to spend some time on geeky comics and talking about this pictorial genre. I have started collecting a set of examples that I think are particularly strong and funny reflections of geek/hacker life but I am looking for more. So what are some of your all-time favorite episodes/examples from a comic strip? I am looking for stuff that someone who is not necessarily technically oriented will understand but who will be armed with a fairly broad sense of this world too. Any suggestions would be really appreciated.

    Next.

    Previous.