Search Results: "ag"

15 November 2009

Russell Coker: Backing up MySQL

I run a number of MySQL databases, the number of mysqld installations that I run is something like 8, but I may have forgotten some. With the number of servers that I run on a do nothing except when it breaks basis it s difficult to remember the details. The number of actual databases that I run would be something like 30, four databases running on a database server (not counting mysql is fairly common. Now I need to maintain some sort of automated backup of these, this fact became obvious to me a couple of days ago when I found myself trying to recreate blog entries and comments from Google s cache There are two types of database that I run. There are ones of significant size (more than 1GB) and tiny ones I don t think I run any database which has a MySQL dump file that is more than 20M and less than 2G in size. For the machines with small databases I have the following script run daily from a cron job (with db1 etc replaced with real database names and /mysql-backup replaced by something more appropriate). The --skip-extended-insert option allows the possibility of running diff on the dump files but at the cost of increasing file size, when the raw file size is less than 20M this overhead doesn t matter and gzip should handle some extra redundancy well. #!/bin/bash -e for n in db1 etc ; do
/usr/bin/mysqldump --skip-extended-insert $n gzip -9 > /mysql-backup/$n- date +%Y-%m-%d .gz
done Then I have a backup server running the following script from a cron job to copy all the dump files off the machines. #!/bin/bash -e
cd /backup-store
for n in server1 server2 ; do
scp $n:/mysql-backup/*- date +%Y-%m-%d .gz $n
done This script relies on being run after the script that generates the dump files. Which is a little more tricky than it should be, it s a pity that cron jobs can t be set to have UTC run times. I could have run the dumps more frequently and used rsync to transfer the data, but it seems that the risk of losing one day s worth of data is acceptable. For my blog I can get any posts that I might lose from Planet installations in that time period. For the bigger databases my backup method starts by putting the database and the binary log files on the same filesystem not /var. This requires some minor hackery of the MySQL configuration. Then I use rsync to copy the contents of an LVM snapshot of the block device. The risks of data consistency problems involved in doing this should be no greater than the risks from an unexpected power fluctuation and the system should be able to recover from that without any problems. My experience with MySQL dumps is that they take too long and too much system resources for large databases so I only use them for backing up small databases (where a dump can be completed in a matter of seconds so even without using a transaction it doesn t hurt).

John Goerzen: Jacob and I Visit Wichita

Today didn t exactly go as planned. Terah woke up feeling sick, and by mid-morning was really wanting a nap. Not that that is likely to happen with a 3-year-old and a 4-month-old in the house. I needed to visit the WSU bookstore sometime anyhow, so I suggested I d take Jacob to Wichita for awhile. Jacob had been talking of seeing the trains again for awhile, so he chose these overalls for the day: 2009-11-14 11.23.26.jpg He wanted me to sing Home On The Range several times as we drove. We stopped at WSU first, and he enjoyed running down the wide sidewalks and trying to hide behind bushes. Then it was on to lunch at HuHot Mongolian Grill. Jacob chose his own ingredients (with some help from me). He chose fish, which noodles he wanted, and of course had some baby corn and carrots. He got a full bowl of ingredients, and of course his favorite part was watching them grill it. He polished off most of his plate, too. 2009-11-14 13.28.22.jpg He had been talking about ice cream all day. In fact, mention Wichita to Jacob, and he ll almost immediately say, Shall we get some ice cream? I wonder who he gets that from Terah usually takes him to Cold Stone Creamery, but we didn t have enough time to go there. So we went to The Old Mill Tasy Shop, something of along-time local legend in downtown Wichita. Jacob enjoyed noticing that the old brick wall had holes in it while they scooped out his chocolate ice cream and my strawberry sundae. He was too busy devouring his ice cream to notice it came in a metal bowl until I pointed it out to him. 2009-11-14 14.16.43.jpg Then it was off to the Great Plains Transportation Museum. It was a quiet afternoon in November; not the packed crowd like the last time we were there. He went for the old Santa Fe diesel passenger locomotive first (which he insists is a freight train ). Of course you get to go inside almost everything, and he enjoyed going inside that one, sitting on the engineer s chair, and playing with handles and knobs. We went in several of the cabooses, and he noticed the train potty in one. It s the old open to the ground type, and if you look down inside it, you see the rocks that are underneath the caboose. Jacob thought it was very interesting that the train potty has rocks in it. The museum is right next to some active freight tracks, and Jacob was very much hoping that there d be a freight train going past. He wasn t disappointed; we saw two, plus an airplane and a helicopter. A successful visit, I d say. <object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" data="http://www.flickr.com/apps/video/stewart.swf?v=71377" height="267" type="application/x-shockwave-flash" width="400"><param name="flashvars" value="intl_lang=en-us&amp;photo_secret=8517185815&amp;photo_id=4104904370"><param name="movie" value="http://www.flickr.com/apps/video/stewart.swf?v=71377"><param name="bgcolor" value="#000000"><param name="allowFullScreen" value="true"><embed allowfullscreen="true" bgcolor="#000000" flashvars="intl_lang=en-us&amp;photo_secret=8517185815&amp;photo_id=4104904370" height="267" src="http://www.flickr.com/apps/video/stewart.swf?v=71377" type="application/x-shockwave-flash" width="400"></embed></object> So I didn t really get done anything I had planned to today, but in spite of being behind on stuff, it s a better day than I had planned. I really enjoy going off and doing things with Jacob. While we were eating lunch, I asked him if he had fun at the bookstore. Yeah! I have fun EVERYWHERE! What a fun perspective, huh?

Stefano Zacchiroli: RC bugs of the week - week 10

RCBW - week #10 Here is this week squashes, by yours truly (also truly amazed by the simple fact of having reached the 10th RCBW week, my DDPO NMU section probably hates me now): This week I've made (once more) a friday/saturdary rush to keep up, mostly because during the week I've been traveling (again) back to Italy and also because on mon/tue we invited Luk in Paris to discuss some Mancoosi-powered Britney (potential) improvements (and yes, have some fun also. BTW, Yves, Ralf was not visiting, he has been teaching in Paris for quite a while now :-) ). More on this as soon as the advantages will turn potentiality into reality. To conclude ... drum roll ... please join me in cherishing this week new RCBW participant, welcome on board Tim!

14 November 2009

Andre Luis Lopes: Public service announcement : A LDAP directory won t do it all by itself

Recently I ve been dealing with requests for LDAP directories configs which clearly demonstrates how little people understand about directories and what they are capable of doing. A significant amount of people I know seems to really get it wrong when it comes to what they want from a directory. Actually, they somehow think that a LDAP directory will do whatever is needed for their application to store, retrieve, validate, authenticate and even take decisions based on no data provided at all. These people think that one should just deploy a directory using the minimum effort approach and suddenly everything will just work. They don t seem to realize that for their application to make use of a directory it should be prepared to do so. They can t accept it when they are told that the directory won t just work and by some unknow enchantment get their systems data stored, validated, authenticated and, shockingly for them, that it won t make their credentials consolidated so lots of different services will out of the box just start working using the same username/password pair. Also, some people don t understand the difference between a LDAP directory and a single sign-on (SSO) system. They don t realize that a directory won t, by itself (i.e. without additional software and some respectable amount of tweaking), provide them the ability to authenticate against it only a single time and have their credentials shared among all their systems. That s it. Said. Don t get me wrong. All that was metioned above is possible, but it isn t done by LDAP alone. LDAP is just a bunch of protocols and a directory is only one nice place to store information. What will be done with this information, how it wll be treated and how it could be used to produce meaningful results are almost always up to the application and/or to some middleware or added plugin/overlay/connector/whatever. Next time someone ask you to install LDAP so I can get rid of all my different username/passwords and use only one instead , be afraid. Be very afraid and present him/her some theorical knowledgment regarding the topic. Or, better said, insert some clue into his/her brain.

Tim Retout: RC bug roundup

On Wednesday, I fixed #551228 in libgstreamer-perl - from the bug log, it looked like it would be an intriguing parallel-build problem, but I reckon it was just a faulty test. Next I applied a patch from the upstream bug tracker for #544894 in libtk-filedialog-perl, which was fine; but then we noticed that there was no explicit copyright notice in the source, so it hasn't been uploaded yet. The code is from 1996, so we would request removal from Debian if it weren't for 'horae' depending on it. Hmm... Then yesterday I found the time to test #520406 in libdbd-mysql-perl, which I remember being open as long ago as DebConf. It turns out it's dead easy - there's already a test case and a patch upstream, which was applied a while ago, so the bug is already fixed in squeeze. Today I prepared an updated package to fix this in lenny. So, I'm still falling short of one RC bug a day, and pkg-perl has more RC bugs open than at the start of the week. :( The weekend's not over yet, though.

Adam Rosi-Kessel: Comcast Upgrade

Not bad!

Not bad!

Eddy Petri&#537;or: Presidential debate

I can't believe this happened. It seems the important presidential candidates have agreed for a face to face debate. I am leaning to thinking that the questions are prepared in advance, but that's better than no debate.

The debate will take place today, 14th of November at 15:00, but I am unsure if this will be broadcasted live since is not clear from the article.

Mircea Geoan challenged Traian B sescu to the debate, the later accepted but considered normal the liberal candidate should be there. Crin Antonescu accepted the challenge, too. Remus Cernea confirmed his presence, too. The funny thing is that Mircea Geoan will not participate.


So, I hope some television will broadcast this live at 15:00.

Steve Kemp: And if you fail gym, you'll never get into college.

Today I rebooted my desktop for the first time in a few months. This did not go well. Probably as a result of this issue with lvm/dmsetup/cryptsetup conflicting my system didn't boot, and the error message was non-helpful. The error shown just after grub2 had started to load a system was :
Cannot find LVM volume group gold-vol
The actual cause was that I was missing the mdadm package. D'oh. My desktop has 2x500Gb drives setup as:
 sda1 + sdb1 = md1  = /boot [1Gb]
 sda2 + sdb2 = md0  = LVM storage [460Gb]
(It's only as I write this that I'm surprised that md1 + md0 are opposite to the fashion I'd have expected them to be. I guess I just created them in the "wrong" order at install time. Oops) So without mdadm the LVM volume group on /dev/md0 couldn't be found, and that in turn meant my root filesystem couldn't be accessed at /dev/gold-vol/root. Fixing this was a real pain. Because the system is the PXE network host on my LAN I couldn't boot it that way, and the machine has no CD-ROM drive connected. My solution was to download and install System Rescue CD, which I placed upon a USB stick. This worked beautifully once I realised I had to boot with rescue64 to get a 64-bit kernel capable of letting me run chroot. Oddly enough I had problems booting from USB. If I powered down my system and hit the "on" switch the system just ignored the USB stick. I noticed that my USB mouse and card reader didn't show any power lights at all - not until after grub had failed to boot the system. So the process of booting from USB was eventually determined to be: Very very odd. I guess its a question of what does the "USB enabling". I'd previously assumed the BIOS would do this setup - but looking over at another system I notice that the USB mouse doesn't "come alive" until mid-way through the Linux boot process even though I know that BIOS has options for "Enabling USB mouse & keyboard". Maybe I'm missing something obvious ..? In conclusion .. I restarted GDM for the first time in weeks and rebooted, and this was a bad idea. ObFilm: Never Been Kissed

13 November 2009

C.J. Adams-Collier: Xen PV network driver

I haven t used Xen HVM until recently. When I was at Amazon and
hanging with the Xen provisioning folks, I recall complaints about the
performance of network drivers on HVM instances. I ve recently
discovered that this was due to the use of the ioemu virtual interface
(vif) system. In paravirtualized environments, Xen vif devices are
more efficient because the guest kernel can talk to the hypervisor to
schedule I/O. In hardware virtualized environments, the hypervisor
emulates the back end of a common network driver and the guest uses it
as if it is the real thing. The Xen team (or was it RedHat?) patched the 2.6.18 kernel such that
HVM guests got the best of both worlds. The guest ran in a HVM
environment, but also had a way of talking with the hypervisor by way
of the xen-vnif kernel driver
(kernel/drivers/xenpv_hvm/netfront/xen-vnif.ko). I may not be looking in the right places, but I can t seem to find
such a paravirtualized network driver for any kernels more recent than
2.6.18. This has recently become a bit of an issue, since karmic (and probably sid)
depends on udev 145, which depends on signalfd, and thus won t run on
kernels before (something like) 2.6.25. Unless I miss my guess (which is quite possible =]), this means one of
the following needs to happen: Has this already happened? Am I missing something?
<script>//<script language="javascript" src="http://reddit.com/button.js?t=1"></script>

Eddy Petri&#537;or: This Sunday, already 5 years...

This Sunday, we celebrate already 5 years since the initiation of the successful Save Carol Park civic action. Back then, the park and the mausoleum were in danger of being destroyed to make room for a cathedral, in spite of special status of the park, the already too low green spaces per capita ratio, in spite of the legal status and in spite of public opposition.

Nice to see it will be celebrated Sunday, 15th at 13:00 at Arenele Romane, and regular people being invited there (linked page in Romanian):

http://remuscernea.ro/2009/11/sarbatorim-5-ani-de-la-salvarea-parcului-carol/

I'll certainly be there!

<iframe frameborder="0" height="350" marginheight="0" marginwidth="0" scrolling="no" src="http://www.openstreetmap.org/export/embed.html?bbox=26.091198,44.41135,26.09513,44.414235&amp;layer=mapnik" style="border: 1px solid black" width="400"></iframe>
View Larger Map

Stefano Zacchiroli: jane street core 0.6.0 has arrived

Debian "Core" 0.6.0 packages ready I've completed the packaging of the new release of (Jane Street) Core, version 0.6.0. Core is (yet another) extended / alternative standard library for OCaml, integrating not only the much needed "everyday functions" but also offering consistent abstractions throughout all stdlib modules (with a lot of inspiration from well-known type classes from the Haskell stdlib), consistent naming conventions (e.g. all functions using exceptions as meaningful return values ends in _exn), and significant syntax extensions. While I've been thus far an OCaml Batteries Included fanboy, I confess that nowadays I'm more skeptical about its success than in the past, in spite of having contributed a tad of code to it. The reason is simply that the lead of the project is now gone and, more importantly, has done so without having (yet?) clearly appointed/found a new lead. That does not change the fact that David has only to be kudoed for his amount of impressive work on Batteries. Still, as a matter of fact right there is no stable release yet and there is no one that will be taking the project to deliver one, since no one else has stepped forward (yet?). In this interim the OCaml problems in delivering, on top of an amazing core language, an amazing development platform in which programmers are not forced to reinvent wheels, stand. Core fills such a gap properly. I was preferring Batteries to it due to its more open development process, but in spite of that Core is a pretty damn good stdlib. Long life to Jane Street that currently maintains it :-) Now, back to the main topic of this post, Debian packages for Core 0.6.0 are now available; you will be able to get it from the main/unstable archive soon (some manual NEW processing is required). In the meantime they can be fetched from my personal APT repository, as usual:
    deb http://people.debian.org/~zack/debian zack-unstable/
    deb-src http://people.debian.org/~zack/debian zack-unstable/

A few noteworthy changes from the past package releases: Update 18/10/2009: core 0.6.0 and all its components have passed through NEW, they are now available in the Debian archive as usual

Matthew Garrett: Legacy PC design misery

I've spent chunks of the last couple of days fighting a problem that's existed for about 25 years. The 8086 was a 16-bit processor with a 20-bit address space, limiting the maximum physical address that could be accessed to 1MB. However, quirks of the segmented memory system meant that addresses greater than 1MB could be constructed - these would wrap around to the bottom of memory. Because loading the segment registers was a time consuming operation, some programmers used this behaviour as a performance optimisation.

The 80286 introduced 24 bit address space. Unfortunately, this meant that the addresses that previously wrapped to the bottom of memory now pointed at real addresses - not ideal if you were expecting the old behaviour. IBM fixed this by tying the 21st address line (A20 - they're zero indexed) through an and gate, with the default behaviour being to keep it tied at 0 and thus maintaining the old wraparound behaviour. Applications that wanted to access the full address space needed to enable the A20 logic gate. IBM didn't want to add any extra hardware to their system if they could avoid it, so tied the other side of the and gate to a spare pin on the keyboard controller. By writing a couple of bytes to the keyboard controller, your PC-AT stopped pretending to be an XT and gave you access to all of the insanely expensive RAM it had stuffed in it. Hurray!

PCs have been emulating this behaviour since the AT was first cloned. Of course, this being the PC industry, many have got it wrong. There's a set of approaches for controlling the A20 gate that may work, varying in terms of performance and desirability. Most hardware will give the desired result (ie, I have no desire to run DOS executables from 1982, make my A20 work damnit) using any of the various methods of A20 enabling. Some hardware doesn't. The most common method used in bootloaders (where we still have access to system BIOS services) is to call int 15h with an ax of 0x2401, which asks the BIOS to enable A20 for us. This isn't implemented on all hardware, but we should get a failure back that lets us go and bang on the keyboard controller in an attempt to get it to pay attention[1].

Enter the Kohjinsha SC3.

I picked this up second hand in Japan. It's a ridiculously cute little tablet, only slightly larger than hardware that's comfortably in the MID range. It booted a Fedora liveCD perfectly, though having GMA500 graphics meant that what appeared wasn't terribly attractive. Installation proceeded happily enough, followed by a reboot and... nothing. Grub loaded the kernel and initrd, jumped to the kernel and everything hung.

So, for the past couple of days, I was stepping through the kernel setup code, trying to work out where and why it was hanging. I'd got it narrowed down to the region where the kernel tried to free the memory used by the initramfs, but the failure hopped around depending on my kernel build. Something was clearly very wrong. The strangest thing about this was that if I booted the liveCD boot menu and selected "Boot from local drive", everything worked perfectly. isolinux was clearly doing something that grub wasn't, but there's rather a lot of code to step through there.

Things became a lot easier once I found that the OpenSuse version of grub worked. Their grub has a rather smaller set of patches than ours, and only a few looked even plausibly relevant. It only took ten minutes or so to figure out that it was one that altered the A20 code. Things became much clearer then.

The main functional difference between the Suse A20 implementation and the upstream one[2] is that the Suse one explicitly tests whether the A20 enabling worked by putting values at two different addresses that would be the same if A20 is disabled. By comparing them, we know whether A20 is working properly or not. If not it can then fall back to other mechanisms. The Fedora code trusted the BIOS's claim that the int 15 call had worked. The Kohjinsha's BIOS lied, A20 remained disabled, grub copied the kernel and initramfs to chunks of address space that contained lies rather than RAM and everything fell over horribly.

Thankfully, not a difficult fix once the problem was identified. But seriously, people. How hard can it be not to screw this up?

(For an excrutiatingly detailed analysis of how hard it can be not to screw this up, see here)

[1] the Intel Macs don't implement the int 15 approach, but return a failure. They also don't have a legacy keyboard controller, so attempting to hit that resulted in grub falling over. The magic IO port approach works. Another example of how the Intel Macs aren't really PCs...

[2] grub2 implements the more paranoid check

Martin F. Krafft: Successful BIOS flash with flashrom

An older machine of mine previously ran off 7 harddisks, which were added over the years. Initially, there were two 80Gb drives, then one failed and I replaced it with a 160Gb drive, leaving 80Gb of unused space. At some point I had two 120Gb drives, which I also added, and then another 160Gb and a 250Gb drive, and finally I replaced the first 160Gb with a 320Gb one. Between the different RAID1 and RAID5 arrays across these disks, as well as the LVM configuration atop, I had completely lost overview of the assembly. It didn t help that the drives were all IDE (PATA), so you can imagine the cable mess! When two drives started reporting S.M.A.R.T. errors, I took the opportunity to replace the mess with the four 250Gb SATA drives I had lying around at home. The problem was that two of the four SATA ports apparently didn t work. Hence I went to try a BIOS upgrade for the plain Asus K8V motherboard (Via VT8237 chipset). I don t remember what floppies look like, and I hate all these DOS-based flasher programs anyway, so this time around I gave flashrom a try (using the outdated version in Debian lenny). I managed to read out the existing ROM image, but even after verifying that it looked very similar to the new one, I was still scared of turning my computer into a brick. While waiting for people on the #flashrom/irc.freenode.org channel to reassure me, I managed to wipe the saved image and essentially had no other way but to move forward. I used flashrom to verify that the image was written and rebooted and the system came back up, this time with support for all four SATA drives. Thank you, flashrom people!

Russ Allbery: Lintian 2.2.18

It's been a long time since a release, and we were overdue. And I finally got some time to catch up from having been on vacation. There are a bunch of bug fixes in this version, and I tried to clean up the lowest-hanging fruit from the BTS, but a lot of the changes came from the discussion around the new rejects from ftp-master if certain Lintian tags are found. The subsequent discussion in debian-devel, and some other threads in debian-mentors, turned up a few problems and short-comings, most of which should now be fixed. I also went through all of the tags that can result in an automated reject and made sure that nearly all of them were severity: serious. The ones that cannot be overridden are certainty: certain; the rest are mostly certainty: possible, although some of them are reliable enough that they're still certain. While doing that work, I also filed bugs against debian-policy for all of the reject tags that aren't documented in Policy now. These are mostly obvious gaps. This version removes the flawed check for dh-make boilerplate for the upstream author (the infamous "Author(s)") and replaces it with much more reliable checks for template phrases that are only going to be generated by the helper problems and which don't make sense in the completed copyright file for a package.

Russell Coker: What to do When You Break a Server

Everyone who does any significant amount of sysadmin work will break a server. Most people who have any significant experience will have broken several. Anyone who has never broken one should be treated with suspicion by other members of the sysadmin team, they probably haven t learned the caution that most of us learn from stuffing something up badly. When you break a server there are some things that you can do to greatly mitigate the scale of the disaster. Firstly carefully watch what happens, for example don t type rm -rf * and then walk away, watch the command if it takes unusually long then press ^C and double-check that you are removing the right files. Fixing a half broken server is often easier than fixing one that has been broken properly and completely! If you don t know what to do then do nothing! Doing the wrong thing can make things worse. Seek advice from the most experienced sysadmin who is available. If backups are inadequate then leave the server in a broken state while seeking advice, particularly if you were working at the end of the day and it doesn t need to be up for a while. There is often time to seek advice by email before doing something. Do not reboot the system! Even if your backups are perfect there is probably some important data that has been recently modified and can be salvaged. Certain types of corruption (such as filesystem metadata corruption) will leave good data in memory where it can be recovered. Do not logout! If you do then you may not be able to login again and this may destroy your chances of fixing the system or recovering data. Do not terminate any programs that you have running. There have been more than a few instances where the first step towards recovering from disaster involved using an open editor session (such as vi or emacs). If the damage prevents an editor from being used (EG by removing the editor s program or a shared object it relies on) then having one running is very important. These procedures are particularly important if you are unable to visit the server. For example when using a hosted server at an ISP the more cost effective plans give you no option to ever gain physical access. So plugging the disks into another machine for recovery is not an option. Does anyone have any other suggestions as to what to do in such a catastrophy? PS This post is related to the fact that I had to recover the last couple of weeks of blog comments and posts from Google s cache Update: I got my data back, not I have to copy one day of blog stuff from one database to another.

12 November 2009

Russell Coker: Links November 2009

Credit Writedowns has a populist interpretation of the latest Boom-Bust cycle [1]. It s an interesting analysis of the way the US economy is working. Bono writes for the NY Times about Rebranding America [2]. He praises Barack Obama suggesting a different reason to believe that the peace prize is deserved and describes what he believes to be the world s hope for the US. IsMyBlogWorking.com is a useful site that analyses your blog [3]. It gives some advice on how to improve some things as well as links to feed validation sites. Evgeny Morozov gave an interesting TED talk How the Net Aids Dictatorships [4]. I don t agree with his conclusion, he has some evidence to support his claims but I think that a large part of that is due to people not using the Internet well. I expect things to improve. The one claim that was particularly weak was when he mentioned radio stations in Rwanda as an example of technology being used for bad purposes the entire point about the first-world discussion about such things is the radio vs the Internet. Ray Anderson gave an inspiring talk about The Business Logic of Sustainability [5]. He transformed his carpet company, decreasing it s environmental impact by 82% and it s impact per volume of product by more than 90% while also significantly increasing it s profitability. He says that corporate managers who don t protect the environment should be regarded as criminals. Making his company more environmentally friendly reduced expenses (through efficiency), attracted more skillful employees, and attracted environmentally aware customers. Managers who don t follow Ray s example are not only doing the wrong thing for the environment, they are doing the wrong thing for their stockholders! Ray s company Flor takes carpet orders over the web [6]. They won t ship a catalogue outside the US, so presumably they only sell carpet to the US too. Marc Koska gave an interesting TED talk about a new syringe design that prevents re-use [7]. His main aim is to prevent the spread of AIDS in the developing world where even hospital staff knowingly reuse syringes. It will also do some good in developed countries that try to prohibit drug use. David Logan gave an interesting TED talk about tribal leadership [8]. His use of the word tribe seems rather different from most other uses, and I am a bit dubious about some of his points. But it is definitely a talk worth seeing and considering. Deirdre Walker is a recently retired Assistant Chief of Police who has worked for 24 years as a police officer, she describes in detail her analysis of the flaws in the TSA security checks at US airports [9]. Brian Krebs wrote an article for the Washington Post recommending that Linux Live CDs be used for Internet banking [10]. Windows trojans have been used to take over bank accounts that were accessed by security tokens, that could only be accessed by certain IP addresses, and that required two people to login. It seems that nothing less than a Linux system that is solely used for banking is adequate when a lot of money is at stake. The NY Times has an interesting review of the book Ayn Rand and the World She Made [11]. It seems that Ayn was even madder than I thought. Gary Murphy has written an interesting analysis of the latest stage in the collapse of the US Republican party [12]. The ABC (AU) Law Report has an interesting article about Evony s (of China and the US) attempting to sue Bruce Everiss (of the UK) in Australia [13]. The Guardian has an insightful article about the IEA making bogus claims about the remaining oil reserves [14]. It seems that the experts who work for the IEA estimate that oil is running out rapidly while the US is forcing them to claim otherwise. Dean Baker of the Center for Economic and Policy Research has written an interesting article about the economic effects of the war in Iraq [15]. Apparently it caused the loss of over 2,000,000 jobs considerably more than the job losses that could ever result from efforts to combat global warming.

Holger Levsen: Customized Blends

Almost exactly a year ago, the term "Custom Debian Distribution" was changed to [1 "Debian Pure Blends"] to better reflect what it is about: a variation of Debian within Debian. So far, so good. Then there are also "Debian Blends", which are not pure, meaning they have some parts which are not yet in Debian.

But the intention is clear, a Debian Blend aims to be fully part of Debian.

This week it occured to me that there is something else, something which is widely done and which is something else, so it should have it's own term: "Customized Blends", where some parts of the "distribution" is taken from a Debian Blend, while there are others, which are customisations, which are not likely or even desired/possible to end up in Debian.

As I see it, LiMUX is such a distribution, or what is installed in the schools in Extremadura or Rheinland-Pfalz atm. Mostly the software they use is Debian (either from stable or backported version), while some parts are not, like bookmarks, wallpapers, custom (sometimes propietary) software or firmware for specific hardware.

My motivation in pointing this is out, is to create an awareness that those "Customized Blends" are an important and frequent part of the Debian Blends ecosystem _and_ that it's for their own benefit to contribute back. Minimising the diff to a "real" pure Blend is good :-)

Ross Burton: New Maintainer for Postr!

After months of neglect by myself, Postr has a new maintainer! Step forward Germ n P o-Caama o, everyone's favourite Chilean, who has been hard at work migrating to git.gnome.org, merging patches and fixing bugs (the Upload button works!), and creating a new project page. Now all I need is for someone to adopt Sound Juicer...

Ingo Juergensmann: Debian Sid, Asterisk and AVM FritzCard B1 PCI

At work I'm currently working on IP telephony with Cisco products, so it's a natural thing to try similar at home as well. I've a AVM Fritz B1 PCI card, hooked up that to the ISDN PSTN and see some calls coming and going in the syslog. Then I installed asterisk packages and now the problems arise:
Is there a current HowTo or a good documentation how to setup asterisk with an AVM Fritz B1 PCI card? There seems to be some older stuff on the net. One describes the installation with CAPI, another one with mISDN. mISDN seems to be missing in Debian for whatever reasons. It would be nice to know for sure what ISDN stack I need to deal with: hisax, CAPI or mISDN.
The next step would be the proper configuration of asterisk, which is already complex enough compared to the commercial products... ;-)

11 November 2009

Mike Hommey: RM cascades, checky and tabextensions

Iceape 2.0 is going to hit unstable in a few days, and as such, the few packages that are only compatible with Iceape 1.x will stop working. I therefore asked for removal of cascades, checky and tabextensions, 3 packages I ve been maintaining for a little while. Actually, 2 of them are my two very first Debian packages: cascades and checky. A page is turned.

Next.

Previous.