Search Results: "rul"

11 May 2006

Jacobo Tarrío Barreiro: DebConf6 rules or rules for DebConf6

Apparently DebConfers are misbehaving. I think signage should be distributed around the vacational centre. Here is my contribution, to be put on top of the 10-metre diving board. Or by the pool. Warning: No computers or electronics past this point
Click on the thumbnail for the good stuff.

10 May 2006

Aigars Mahinovs: Debconf6 day -5: Manyana and it is still hot

It is evening of the third day and we are still netless - "manyana" is all that we know and people have accepted that. Hacking is being conduced efficiently - the local network is up and there is local Debian mirror in the LAN. The mornings are very nice here - it is not too hot yet and the water sprinklers also improve the situation further. I took a walk to the Oaxtepec town itself which is a couple minutes away from the Debconf6 venue. I hoped to find a currency exchange, but I had no idea where to go and the city is planned rather randomly, so I did not find it and got lost. Additionally I was brave^Wstupid enough to take this walk barefoot and by the middle of the day the asphalt was getting very hot. Luckily I managed to find a person who spoke tiny bit of English, showed him the wristband of the hotel and he immediately suggested to drive me there as he was just going to go in that direction. So I got back fast and relatively safe. People are getting a bit bored without the Internet. And what do Debian people do when they get bored? Right, they start playing Mao. I joined after the game was running for an hour and with a bit of luck won once before the game ended in implosion. My rule went unused. It is late in the evening but the Internet is finally up. Hurray! In seconds the hacklab become much more quiet - the number of people there doubled, but the talking seized. People flooded the IRC. In an hour the spell was broken - the lunch is here, and the hacklab is to be closed for the night. Hard choice. After my failure to find a currency exchange during the day, Enrico agreed to help me - he would withdraw some money from a local ATM and give it to me in exchange for my pounds and euros. The closest ATM is in the town, so we went there after the dinner. It is strange that I did not notice the bank with the ATM before because it has an advertisement put up on a ~30 meter pole. It seems that in Mexico the cooler you are the higher your advert is. On the way back operation "thirst clenching" commenced - beer was acquired from the local 24 hour shop. We were told before that the security guards of the hotel did not want us to bring any alcohol from the town following the "pool accident", but the operation went on anyway. It was a long walk and now I finally now some places in the town that have some value to them. Thanks for the help, Enrico! I will need that money very much tomorrow. Why? Read on :) Note: I have decided to not put photos inside these blog entries for now because it consumes too much time. Instead I will do an update of these pages sometime after the Debconf is over and will also upload all pictures to gallery.debconf.org at the same time. I will also then make a new post in the blog saying that I did so and having in it links to all appropriate locations.

Jesus Climent: Permission to complain

On friday the 5th I started my trip to MX. I am assisting to Debconf 6 from the very first day, so that I can help the local team (at least with translations and such). I arrived to the airport early, so that I didnt have to suffer last minute stress if I see that the line is way too long and I have too little time to catch the plane. It all started fine (well, I forgot my keys at home when taking the dog for a walk, but I managed to reach my girlfriend and she came back to open the door for me). I must be the worst traveler in the world, since I seem to be causing only problems. Or maybe is that I question too many things that are the status quo and seem reasonable for other people. From the begining. It was check-in time, and the lady ask me about my hand luggage. I mentioned that since my friends were going to be waiting for me at the airport for almost 2 hours, I had prepared all my stuff so that I was not carrying anything dangerous in my two backpacks. Heck, I even left behind the regular tools that I carry with me, including the nail scissors,... The lady said it was not possible. "Sir, you can only carry 8 kilos of hand luggage". I looked around and saw people with lighter bags, but bulkier than mine. "Sorry, but, what is the reason? My luggage is smaller that the regular luggage, and I just need to get out asap". "Security reasons, sir". "Could you describe those reasons?". "... ... (surprise face) Security, sir. I would like to travel with my 20 kilos os luggage with me, sir". Yeah, sure. I am happy about that. I dont recall going away for such an extended period with such an small amount of things. When did all this madness start? Well, she did not manage to give me any reason why I could not take my things with me, but she got her sweet revenge. She put me on the back of the plane, with a guy who had at least 50k more on than I, although we both paid the same price for the ticket. I wonder where the security reasons are then, for those 50k... (Mental note: add to the travel checklist not to EVER forget deodorant and to take a shower before leaving home. Two showers. I had enough torture with the guy beside me...) The nice part of the flight was that for the first time i traveled on a Jet. Boy, is nice. Landed in Germany. The plane went to park on the backyard of the airport. We had a long 10min trip back to the terminal. The check-in for the plane to MX was a full hour set in advance, so that the HUGE amount of people that fits on one of those 747 had the time to show (for the 10th time) the passport. But looking aroung one wonders again where those security reasons not to let me carry my 8 kilos of luggage are: people around me had bought nearly their year salary on duty free stuff that wights more than 15k. Oh, boy, now I am confused. Is it so that someone has decided to add a rule in the name of security at some point after 11/9 and they forgot why? What difference does it make to get the luggage with 8 kilos from outside the terminal than from inside? As a side note, one can see that mexicans still keep much of the Spanish attitude. The speaker goes on, a man speaks in German and explains that people with children will board before anyone else. Nobody has understood anything, but they are already piling before the boarding gate. Once the man speaks in English, only the ones who dont understand English still await impatientily at the gate, mostly disturbing the check-in procedure for the flight, which will probably be delayed because of that. The second part of the trip was a bit more relaxed... I will skip the story about the looks-like-it-is-not-her-day flight attendant who could not understand a shit, and will only mention that when she served me a light coke and I handed her the empty can for dispossal, she gave me another full can with a face of "take-this-and-shut-up,dont-you-see-i-am-not-having-a-good-day?". I did not know Mexico was in the south hemisphere. At least that was the reason given for the satellite-linked internet only working the first three hours, although we were flying through Greenland, Canada, USA and Mexico's gulf for the 12h of flight, and Mexico IS on the (using the lonstanding critizised convention of not putting the map upside-down and say that is the right possition) north side. After landing it was a bit of rush, until I had to wait for my luggage, which of course came after waiting for almost 40min (Revenge of the Check-in Lady, take three... hi, if you read me). The people who create those inmigration forms MUST have short names. They have a big horizontal box with small vertical lines on the boxes to put your data trying to force you to put every character of your name in one small designated area. So there you go: "J E S U S _ D A N I E L _ C L I M E" That's right. Not even my first surname fits. Forget the second. This are the times that a friend of mine comes to mind: Enrique Garcia-Villarubia Gomez-Limon (Hi, if you read me). After all this I went out to find Amaya and h01ger waiting for me. We met Ganneff, Stockholm, Sam and Jeroen, and Damog, along with Agi, were coming right after picking up the van. We put Ganneff and Stockholm on a taxi and sent them to Oaxtepec, and left the airport for some dinner. Mexico is BIG, BIG, BIG. After driving for more than half an hour we got to a bridge from where you could see the city lights. And still, they were covering the horizon. HUGE. That realization is something I have not digested yet. Some local beers and tacos made the end of the night and we headed to Hector's place, where we were going to spend the night. From a not so negative point of view, the whole experience has been positive, and enlightening, to say it mildly. The food is mostly spicy. It could burn hell. Amaya is trying to get use to it by eating an insane amount of hot stuff but I refuse to do so. For the scared (hi, helix) I have not managed to get anything from the tap water. So nobody is dead, yet, although rumor has it that some are in comas. The net is here, although the roundtrip values are not very exciting. Mao has visited already the place, and said it is here to stay. Summary for the ones to come: this is HOT. I mean, really HOT. Forget your long jeans and bring shorts, even if you dont like to show your legs, sun screen cream, t-shirts, deodorant, swimming suit, and keep a bottle of water all the time with you. Food is served at a more sensible time than in Finland: 02:00h and 20:00h. See you in MX.

9 May 2006

Martin F. Krafft: Choosing a new cellphone

For the past two years, I have been a moderately satisfied user of the Nokia 6230 cellphone, which does all a cellphone should do ("it even has a camera!"). However, it suffers from some shortcomings, namely:
  • While it's surely possible to connect a laptop to the Internet via bluetooth to the phone, then GSM, UMTS, or GPRS to the provider, it's not possible to do it the other way, phone via bluetooth to laptop, then Ethernet. This is annoying for two reasons: one, I have to pay expensive GPRS charges even if I am downloading something to the phone in the office, and two, I cannot use my SyncML server, because the perimeter firewall blocks access to its port from the outside. See these threads: A B C.
  • When connected to the headset, the phone cannot establish other bluetooth connections. So while it's possible for me to dial numbers from the laptop or my Palm (quite convenient), I cannot do that for calls using the headset. I'd really like to be able to stow my cellphone in the bag, and do communications with the Palm (which can also read and send SMS via the phone) and the headset only. Right now, I might have to search for the number on the Palm, dial it by hand, then stash the phone away to complete the call via headset.
  • I store all my contacts on the phone memory, not on the SIM card, for two reasons: the SIM card memory can only store one number per name, and I really don't want separate records for "John Home", "John Office", and "John Cell", and two, I often switch SIM cards when travelling to other countries. But switching the SIM card will always configure the phone to use phone and SIM memory for the addressbook, so I always have to change that back.
  • Even though the phone comes with timezone support, I have to press at least 10 keys to change the timezone.
  • The phone has five caller groups, to which you can assign separate ringing tones. I often wanted to be able to set ring tones per person instead.
Now, my provider is offering me a new phone if I choose to renew the contract (which I will). Thus, I am faced with a new choice, and so ventured out to the stores to get myself informed. I have somewhat of a preference for Nokia phones simply because I already have a set of chargers for them. My requirements for a phone are:
  • It has to be small, light, and sturdy.
  • It has to have bluetooth, ideally without the aforementioned shortcomings.
  • It has to have a long battery life, standby time of at least a week.
  • It should interface (via bluetooth) with the Palm Tungsten T5 as well as Linux (Gammu, or something else).
  • It has to have quick and intuitive navigation (this pretty much rules out Sony Ericsson, where it can be a second between keypress and display update, or so I've seen).
  • It has to have voice-activated dialing, but instead of pressing a key, speaking the name, then having the phone dial, I would like to press a key, speak the name, confirm the call within a set amount of time, and only then have the phone call. Alternatively, I'd accept if I had to keep a button pressed while speaking the name. Also, the phone should acknowledge failure to determine a name rather than choosing the closest one; it happened too many times that the key would be accidentally pressed while the phone was in my pocket, followed by the phone's "smart" decision to call some random person in my address book after listening to the background noise or the rustling of my pocket.
My most-wanted feature has always been a button you can press, which would make the phone ring 10 seconds later -- a great way to get out of an annoying conversation. Unfortunately, no manufacturer even bothered to reply to my feature request sent maybe 4 years ago, so it's unlikely I'll find a phone with this capability anytime soon. Another nice feature to have would be an in-phone answering machine, like the Sony CMD-Z5 used to have. Of course, the provider lobby is not going to let that happen, as they'd lose revenue not being able to charge people normal connection charges for calls to their own mailbox. What I don't need (but would not care about anyway) are:
  • Camera, video camera
  • MP3 player, other multimedia support
  • MMS support
  • Games, Java, other applications
Given all of the above, it seems that I only have one phone to choose: The Nokia 6230i, where the i stands for "improved", I guess. But before you get your hops up high (as I did mine), check out the list of improvements and join me in a big sigh. While every manufacturer, including Nokia, has released several new phones over the last two years, they have all been down their multimedia lines. In fact, it seems that the only improvements Nokia and the other manufacturers performed on their business lines was to make the phones larger, add keyboards, and turn them more into PDAs. How sad. Then again, a lot of new models are announced. I may well have to put off the decision until the 6233 is out, the 6021 available here, or I've had a chance to check out the 6822. Also, the E60 and E70 look like worth a look, especially because they integrate Voice-over-IP. And I feel I should have another look at Motorola, Samsung, and Siemens phones. However, so far I have not heard too many good things about any of these, and haven't seen models that are small and light. I really don't need to slide or fold the phone to use it. PS: if you are a phone manufacturer and read this, maybe you could again consider normal user needs when designing your next line of phones, rather than trying to forcefully push more multimedia upon our entertainment society, which nobody really needs but everyone ends up using.

Martin F. Krafft: Choosing a new cellphone

For the past two years, I have been a moderately satisfied user of the Nokia 6230 cellphone, which does all a cellphone should do ("it even has a camera!"). However, it suffers from some shortcomings, namely:
  • While it's surely possible to connect a laptop to the Internet via bluetooth to the phone, then GSM, UMTS, or GPRS to the provider, it's not possible to do it the other way, phone via bluetooth to laptop, then Ethernet. This is annoying for two reasons: one, I have to pay expensive GPRS charges even if I am downloading something to the phone in the office, and two, I cannot use my SyncML server, because the perimeter firewall blocks access to its port from the outside. See these threads: A B C.
  • When connected to the headset, the phone cannot establish other bluetooth connections. So while it's possible for me to dial numbers from the laptop or my Palm (quite convenient), I cannot do that for calls using the headset. I'd really like to be able to stow my cellphone in the bag, and do communications with the Palm (which can also read and send SMS via the phone) and the headset only. Right now, I might have to search for the number on the Palm, dial it by hand, then stash the phone away to complete the call via headset.
  • I store all my contacts on the phone memory, not on the SIM card, for two reasons: the SIM card memory can only store one number per name, and I really don't want separate records for "John Home", "John Office", and "John Cell", and two, I often switch SIM cards when travelling to other countries. But switching the SIM card will always configure the phone to use phone and SIM memory for the addressbook, so I always have to change that back.
  • Even though the phone comes with timezone support, I have to press at least 10 keys to change the timezone.
  • The phone has five caller groups, to which you can assign separate ringing tones. I often wanted to be able to set ring tones per person instead.
Now, my provider is offering me a new phone if I choose to renew the contract (which I will). Thus, I am faced with a new choice, and so ventured out to the stores to get myself informed. I have somewhat of a preference for Nokia phones simply because I already have a set of chargers for them. My requirements for a phone are:
  • It has to be small, light, and sturdy.
  • It has to have bluetooth, ideally without the aforementioned shortcomings.
  • It has to have a long battery life, standby time of at least a week.
  • It should interface (via bluetooth) with the Palm Tungsten T5 as well as Linux (Gammu, or something else).
  • It has to have quick and intuitive navigation (this pretty much rules out Sony Ericsson, where it can be a second between keypress and display update, or so I've seen).
  • It has to have voice-activated dialing, but instead of pressing a key, speaking the name, then having the phone dial, I would like to press a key, speak the name, confirm the call within a set amount of time, and only then have the phone call. Alternatively, I'd accept if I had to keep a button pressed while speaking the name. Also, the phone should acknowledge failure to determine a name rather than choosing the closest one; it happened too many times that the key would be accidentally pressed while the phone was in my pocket, followed by the phone's "smart" decision to call some random person in my address book after listening to the background noise or the rustling of my pocket.
My most-wanted feature has always been a button you can press, which would make the phone ring 10 seconds later -- a great way to get out of an annoying conversation. Unfortunately, no manufacturer even bothered to reply to my feature request sent maybe 4 years ago, so it's unlikely I'll find a phone with this capability anytime soon. Another nice feature to have would be an in-phone answering machine, like the Sony CMD-Z5 used to have. Of course, the provider lobby is not going to let that happen, as they'd lose revenue not being able to charge people normal connection charges for calls to their own mailbox. What I don't need (but would not care about anyway) are:
  • Camera, video camera
  • MP3 player, other multimedia support
  • MMS support
  • Games, Java, other applications
Given all of the above, it seems that I only have one phone to choose: The Nokia 6230i, where the i stands for "improved", I guess. But before you get your hops up high (as I did mine), check out the list of improvements and join me in a big sigh. While every manufacturer, including Nokia, has released several new phones over the last two years, they have all been down their multimedia lines. In fact, it seems that the only improvements Nokia and the other manufacturers performed on their business lines was to make the phones larger, add keyboards, and turn them more into PDAs. How sad. Then again, a lot of new models are announced. I may well have to put off the decision until the 6233 is out, the 6021 available here, or I've had a chance to check out the 6822. Also, the E60 and E70 look like worth a look, especially because they integrate Voice-over-IP. And I feel I should have another look at Motorola, Samsung, and Siemens phones. However, so far I have not heard too many good things about any of these, and haven't seen models that are small and light. I really don't need to slide or fold the phone to use it. PS: if you are a phone manufacturer and read this, maybe you could again consider normal user needs when designing your next line of phones, rather than trying to forcefully push more multimedia upon our entertainment society, which nobody really needs but everyone ends up using.

6 May 2006

Gergely Nagy: Narnia in Warcraftian light

Tonight, we've watched Chronicles of Narnia, girlfriend and I, and we came to a few interesting observations. Really, they're quite amazing! Someone has been playing World of Warcraft decades before it was released! Spoilers ahead, beware! For example, let us have a look at the Witch. She was surely a mage, as she could conjure food and water. However, she appeared to be buffed a lot, as she could dual wield swords as well - and she wasn't all that bad at that, either. She also had an instant-cast frost spell.. This latter lead to a little debate among us, as I was asserting she must have been a shaman, using frost shock. Would have fit quite well, if only she wouldn't have been able to conjure food... And the fact, that after Aslan killed her, she didn't self-res. I doubt there's any worthy shaman out there who doesn't have a stack of ankhs in the bags. That's just not possible, really. Not to mention she always wore cloth, while we all know, shamans wear mail. Next on the table - the stone-table, hah! - is Aslan. Unlike the witch, he really was a shaman. The best proof: he self-ressed.. Albeit it took him a while. However, he did not appear to have any durability loss - on the contrary, he had his mane grown back! What kind of armor he wore, I do not know, he was in ghost lion form all through the movie, sadly. We also saw him resurrect others, that part fits too. Totems - we missed those, yes... But... if a shaman is fighting in ghost lion form, he must be so powerful, decked out in epics, he does not need them anyway. And this is where we come to the part of investigation where we have a look at the levels of the characters. Aslan and the Witch were skull-level bosses for sure. Most of the armies must have been lowbies, judging by their puny equipment - and most of the time, their puny skills aswell. Thus, it is no wonder that a single boss - the Witch - could tear through almost a whole army of poor newbies. It took another boss to stop her for good. Kinda like summoning your side's bosses in Alterac Valley. With the exception that in Alterac Valley, a raid is enough - here, one needed a whole lot more than a single 40-man raid. So far, this is what we figured out. I expect more details will see the light as we watch the film over and over again, in the hope of discovering more connections between the Chronicles and Warcraft.

1 May 2006

Gustavo Noronha Silva: 1 May 2006

So, long time no blog entry. Work has been sucking my blood these days, but I managed to do some stuff recently that I feel like sharing. First of all, I've been enjoying TurboGears a bunch. Unfortunately I didn't get around to playing with it as much as I would have liked. Some time ago I became the maintainer of cherrypy, and that became an important piece of TG some time later. Now TG has been using something called Python eggs, and its versioning and dependency information. We fought a bunch on the debian-python mailing list trying to figure out how to handle that stuff in Debian packages and it seems like the best solution is the one which ended up on the new python-cherrypy package, which packaged CherryPy 2.1, and right now contains CherryPy 2.2. Most of the efforts of the Debian Python people has been documented on the Debian Python FAQ. Also, let me say that python-support is really cool; Thanks Joss! Also, I'm now a member of the Debian Python Modules maintainers team! Team maintainership is a really good idea, and I'm happy that it is becoming more and more the rule, not the exception; and I am very happy to be part of many very good teams. In other news, I've been working on the new version of libgksu/gksu. The API for libgksu has been greatly improved and simplified. The new design also allowed me to handle some situations in a much saner way; some things that bothered me for a long time are now gone. Packages are on their way to experimental, but if you want to take a look at what is happening, and comment on the new API (please, do!), you can look here: http://people.debian.org/~kov/gksu/libgksu2/ I'll upload some packages to http://people.debian.org/~kov/gksu/debian/ while the packages which are on NEW are not processed.

27 April 2006

Martin F. Krafft: Almost crying in Bagan

I guess you could say I am now on the verge of tears, or at least have been for a while (and it's wearing off) -- since I came back from a little expedition on a horse cart around Bagan, visiting some of the poorest villages in the area to drop off a good share of the presents I still have with me (like marbles, balloons (latex ones, so biodegradable), soap bubbles, hair pins, fake jewellery, balls, and pens and paper), as well as a bunch of tubes of toothpaste, bars of soap, and bottles of shampoo, which I had picked up on the way just before. My sadness comes from two aspects of this experience. The first, which is minor because I had expected it, was simply to (once again) witness the conditions under which the poorest of the poor live: in bamboo houses together with their cattle and pigs (everyone here seems well aware of bird flu and have taken the appropriate precautions; the government apparently did a good job in educating its people), with trash and feces all over the place, kids with almost no clothing and the elderly obviously sick from a distance. But I've actually seen worse in Laos and expected it, so that wasn't the main source of my tristesse. What almost made my eyes water was rather the fact that in the first village of the two I managed today, my arrival and obvious wish to give out gifts resulted in fights among the kids, and in dishonest behaviour by some, while the mob was almost ready to run me over as everyone (including grownups) was stretching out the hand and grabbing at whatever I pulled out of my bag. Call me naive, but that part I did not expect. It's understandable, as for these people, anything makes a difference, sometime and existential one, but they are Bhuddist after all, and among the teachings of the Bhudda you can find such lines as "do not be dishonest", and its philosophy (which carries throughout many non-Bhuddist Asian countries) includes the rule to never lose one's face, which covers shouting or fighting. On my first trip to Southeast Asia -- Vietnam -- I reached some remote villages in the Tonkinese Alps in the country's north -- villages which where equally poor, but which were also quite detached from civilisation as found around larger cities. While money still served as the main means of exchange, it appears to have a much lesser meaning to the people, who are mostly self-sufficient to a point of independence from the government as far as you can get (I guess). In these villages, I also passed out presents, but never had an experience such as the one today (nor did we experience something of this sort in some of the villages in Laos, equally removed from the main lines of infrastructure). Rather than fighting for the gifts, the kids would share them. Rather than tears, the gifts brought smiles. It thus seems that civilisation as we know it causes the competition even among kids, and that's the part that fills me with sadness at the same time as it disillusions me quite a bit, because that kind of civilisation will inevitably spread. Going off on a tangent (without the intention to return), I have been thinking a lot about my "mission" in Myanmar, which was to bring clothing and medication, as well as gifts to the poor. While one could interpret this mission -- carrying more than 15 kg of "stuff" through the stifling heat -- as an altruistic act, I also cannot deny the selfish component, because I take great joy in helping people. If you recall, dropping off the clothing I had brought in a village a couple of miles outside of Pyin Oo Lwin didn't fill me with the satisfaction I had hoped to gain, mainly because I was obviously misinformed about Myanmar (btw: I am calling it Myanmar again, which is actually what locals use, unless they speak with tourists). Fortunately, however, I quite easily managed to accept that the mission was still a success for the people undoubtedly were helped quite a lot. If there is one thing I have learnt for sure this time around, then it's that I will return, sooner rather than later, and hopefully with a lot more goods than this time around. This trip has been self-funded, which is why I am also (trying to) spend most time on vacation. I could well imagine that the next time might see me just running the goods there and fly back after only a couple of days. Of course, there are no details, but keep this in the back of your heads (and pass it on), just in case you'd be willing to donate funds to finance the trip. This brings me to another, somewhat related topic, which I have been pondering ever since I arrived in Myanmar, and especially so after I met and talked to a Portuguese globetrotter, last night: the topics of beggars and how to support these countries in effective ways. Let me address those in turn, the second one first as it's more closely related to my braindump you just read (thanks for that), and because I am nowhere near a resolution and can thus sum it up in three sentences: even though individual aid trips, like the one I am on, are helping, I would guess their effectiveness to be quite low, and raising this effectiveness certainly requires a lot of effort and infrastructure. Thus, it may be more beneficial if I were to donate my will to help to an existing organisation already established and connected in the Southeast Asian countries. I am not talking Unicef and other, similar large organisations (some of which I do support already, and if only financially), but rather much smaller endeavours that concentrate on this area only -- surely the need for help exists in all developing countries, but I am most interested in helping Southeast Asia, for the people here have taught me so many valuable things that have changed my life. On the first topic -- beggars -- let me say this much: if you've been to developing countries, you know what I am talking about. If you have not, just imagine all sorts of people (but mostly poor-looking) coming up to you with their hand stretched out, saying "money, money" repeatedly and not respecting a "no" in any way. Any guide book advises you not to give any money, because it will increase the "nuisance" these beggars are to future tourists. But at one point during my time here, I was as far as giving a small amount to everyone who came up (unless there were more around, at which point it would just get out of control too fast) by reason that it doesn't hurt me a bit, and that despite the syndicates and other arguments against it, if you are actually helping one out of ten beggars, that's one more than zero. Since then, however, I've found some more compelling arguments, and the one that's been the most persuasive so far is that a beggar's success attracts more beggars, and while the guide books call that a "nuisance", the real problem is that these people come from villages to cities, from places where they are self-sufficient (at least in Myanmar with its vast resources) to places where they'll end up sleeping on the streets. Enough of that for now, you can be sure there will be more another time; on to something completely different: This is the first time I am travelling Southeast Asia while blogging, and I have very mixed feelings about it. First of all, Myanmar isn't the place for easy Internet access, so it's been quite painful to keep publishing (which was only possible thanks to the help of Hanspeter back at home; thanks), nor is it the place where you'd be inclined to spend a couple of pensive hours in front of the screen while serialising your thoughts into writing -- the power keeps coming and going every couple of minutes, and frequently the battery-backed power supplies most people have cannot bridge the downtime. But that's not the reason why I am not really too satisfied with my blog entries so far. I have found it difficult to write even in Thailand, where Internet access was excellent, and I guess it's mainly due to two reasons: first, there is too much going on outside and the fear of losing a minute of "street action" to these godaweful computers just keeps me from taking the time to think before writing. The second reason is related: impressions need time to settle, and I guess in some ways I do prefer very much to just "be", rather than experiencing with the objective to blog about it in the back of your head at all times (I am a geek after all, don't forget that). I guess I'll try it another time since having Aline along for the first part, and then being subjected to Myanmar's suboptimal information infrastructure, may be factors of larger value than I see them right now. By the way: this blog does not contain all of my writings while I am here, for obvious reasons, so there is more to come if you are interested, but not via this channel. I'll let you know. Now, on the boring side: I returned to the temples in the late afternoon yesterday and saw another three or four, before sprawling out on top of another in aspiration of the sunset to be Obscured By Clouds (which is when I talked to the aforementioned globetrotter for an hour or so). I did find that after all, Bagan didn't have much in store for me, having seen some of the temples at Angkor. The scenery is breathtaking, and some temples are really astonishing views, but as soon as you get on the inside, they are mostly walls and Bhuddas, one similar to the others, and thus quite unlike to what I'd seen in Angkor last year. Since I am also not the type of guy to go off meditating for a day in a remote location, or take my book far away to read in peace, I think that this one day between the temples was enough for me. Maybe the temperature did play a role too, but there was no question for me: I was to do something else the next day (which is today), rather than go out again on that horse cart. I thus joined up with some Australian travellers on their overland way to their new home, London, and hired a taxi to Mount Popa, home of the 37 Nats (spirits) which are closely knit into the Burmese culture. After a 25 minute climb up steep stairs, I found myself again disappointed by a somewhat dirty and absolutely non-pretty stupa on the top of the hill. The view (and temperature) was great though, so no hard feelings, but also no time lost to head back to the hotel, to get on with the village hopping I had planned for the afternoon. Tomorrow morning I am leaving for Hohe and Inle Lake, where it'll be much cooler (or so they say). Stay tuned. PS: And of course, Murakami's novel is not called "Kafka at the Beach", as I wrote in yesterday's entry, but "Kafka on the Shore". I guess it must have been yesterday's intense heat causing that Freudian slip. Anyway, the book is truly captivating and I am afraid I'll zoom through those 600 pages faster than I'd like, given that it's the last of the books I brought. Hopefully I'll find something to pick up on the way that's not Agatha Christie, Dan Brown, Jane Austen, or the other wonderful writers of entertainment fiction, which I'd rather not read even if you paid me for it.

Neil McGovern: Shooting yourself in the foot with MTAs

Care of SlayerXP from #uknot:

postfix
the bullet zips back and forth between pipes and processes and barely has enough momentum left to enter your foot

sendmail
There was a bang, and there's a pain in your foot, but you don't understand sendmail rulesets well enough to work out what happened

qmail
You shoot yourself in the knee, and it's your fault for not understanding mail systems as well as DJB that it happened. (and it's not a bug, oh no.)


Submissions being taken for others

Neil McGovern: Choosing a CMS system

Well, I volunteered at the last SPI board meeting to re-do the SPI website, as it was old and outdated.

So, I posted a message over to spi-private and spi-www asking for ideas.

The main one that came up was using a CMS. Now, I've had a look at various CMSs in the past, and none of them have come up trumps. Also suggested were other options such as using Embperl and svn (which I use for the Debconf site), but this isn't user friendly enough for many people, and a wiki, but I'm not convinced a wiki is the best thing for a static site.

The main issue that I saw with using a CMS for the SPI site is the requirement for it to be truly multilinugual. Unfortunately, this does sort of knock out a SPI Project, Drupal. Another less important issue is the storage engine. Ideally, this should be postgres, as it's another associated project :) Thirdly, the software should be free (as in DFSG, not beer).

So, this leaves a few options. After many hours googling and lots of suggestions from the lists, I had a short list. This leaves one which I've found, Plone. It has issues, but it's the best I've found. Namely, it requires Zope. This means that every time you change it's skin, the entire Zope server requires a restart. Not even a reload, but a full restart. However, it's multilinugal facilities are very good, and it has a nice management interface. It does have lots of plugins that extend it's functionality, which is nice.

One of the problems I'm having at the moment is to get news items to have a 'Effective Date' of 1998, as the management interface only seems to go back to 1999, and I need to put old items on there. I also need to work out how to run it under Apache, and possibly use postgres as a storage engine.

So, all in all, Plone wins the day, due to it's ability to host multilinugal sites, and it having a management interface that doesn't suck.

For those that want a sneak preview, see the testbed, but don't expect it to work perfectly :)

26 April 2006

Martin F. Krafft: Mandalay to Bagan, and 2700 temples

Leaving the computer centre in Mandalay, I decided to settle my further itineraries and headed to an Internet shop in the hope to arrange some online bookings, using Aline's credit card (because mine was lost and I would rather preserve the cash dollars I have, given that there is no way to get more money in this country. I managed to book myself hotel rooms for the One Night in Bangkok I have before returning home, as well as the five days of Yangon before. Other than that, however, I could not get any flights; Myanmar-internal flights cannot be booked online, and Thai Airways refuses to take passengers when the name on the credit card does not match the passenger's. Given that my plans for the evening where set, I had to leave the place with my mission unaccomplished and headed for the Green Elephant restaurant, which the Lonely Planet describes as up-scale. For a whopping $7, I treated myself to beer, pickled ginger and green tea leaves, and butter fish in a tomato curry. Very delicious. Afterwards I attended the Mandalay Marionette & Culture Show, which was quite lovely despite the atonal music that came with it. Mandalay marionettes (or Myanmar marionettes in general) are very elaborately made, and the style to guide them is very unique to the country, the art having been the popular art back in the days when kings ruled the land. The artists are devoted to keeping this art alive, and you could really feel their enjoyment as they showed fights between ogres, princes and snakes, riding horses and trolling monkeys, princes engaging in "hackysack"-style football artistics (which is very popular over here, and people are rather good), as well as synchronised dances between marionettes and real dancers. I can recommend this show to anyone visiting (as I recommend to anyone visiting Hanoi to see the water puppet theatre) and am glad I chose this option over the "Moustache Brothers" performance, which is political satire and slapstick on the edge of legality. I ended the evening talking to some other travellers, most of which had no interest in listening to others but to tell their stories instead. The next morning saw me rising at 4:30 to catch the ferry to Bagan at 6:00 o'clock. The boat had comfortable seats and a restaurant, and only a handful passengers, so the 10 hours went by reasonably fast (no comparison to the ride we took on the Mekhong last year to get from Chiang Khong in Thailand to Luang Phrabang in Laos). We arrived in Bagan on time and together with some Australians I found the May Kha Lar guesthouse (following again the Lonely Planet), which is a rather pleasant place with a lovely, elderly, English-speaking lady running it. SHe also arranged my further air travel for me and wanted about $30 less than the official booking offices. I decided to spend an additional day in Bagan, so I am heading out from here by plane on the 28th, going to Heho, then spending two and a half days at Inle Lake, and flying to Yangon on the 30th. From there, I am leaving for Bangkok on 4 May. With the tickets in my pocket, I felt relieved, showered, and went for a traditional Burmese massage, which turns out to be completely different from the Thai style (which Laos and Vietnam copied more or less) and was rather painful, both because the lady literally tormented my legs far too long and spent only a very short time on my pained shoulders, and because neither the mosquito coils nor my repellents warded off the beasts as I was lying there out in the darkening sky right at dusk. No Malaria in this region, fortunately. Following a very traditional Burmese dinner (goat meat curry), I went to bed because... ... the next day I rose again at 4:30 to meet a guide, and left the hotel at 5:00 o'clock on a horse cart for a tour of the temples. Bagan is what could be called the heart of Myanmar, and on a 42 square kilometre area, you can find 2700 temples (of the 4500 originally built), dating back to the 10th century AD. Unfortunately, the wall carvings and paintings in most temples has been washed away, and it was nowhere near as fascinating to stroll along the endless corridors as it had been in Angkor Wat or Bayon Wat in Cambodia, but from the outside, these temples still look spectacular and are well preserved or restored. Also, climbing up on one or the other, the sight was almost overwhelming: a vast landscape of strupas and temples as far as the eye would reach, and all that under a lovely sunny sky. Haha. The "sunny" bit is what made me get up so early, because the temperatures are bearable only up until 11 o'clock or so. Between noon and 16:00 o'clock today, the thermometre measured 46 degrees Celsius -- I don't think I've ever been in a place so hot (if you leave out our trip to Death Valley in an airconditioned van. So in order to escape the heat, I went to the archaeological museum at noon, then back to the city and into the swimming pool of one of the nicer hotels in town, which cost me $3 for a pool that was green (they don't have the money for chemicals), and the water about the temperature of my bathtub at home. I did not swim, but fortunately, the showers there were pleasantly cold, so I lay in the shade to read ("Kafka on the Short" by Haruki Murakami), taking a shower every ten minutes to cool down. Going back to the hotel, I find the electricity to be gone once again. I think that this town (and Mandalay as well) has maybe 4 hours of electricity a day, it coming and going every few minutes (which makes computer use quite unpleasant). This also means that there is no aircondition most of the day, at least in the budget hotels which don't have their own generator. I am meeting my guide again at 16:00 hours for another 2-3 hours, then will follow the hotel owner's suggestion for a "back massage expert", eat, sleep, and climb Mount Popa tomorrow morning. I'll try to get online again in the afternoon. Thanks for reading along.

Neil McGovern: Shooting yourself in the foot with MTAs

Care of SlayerXP from #uknot:

postfix
the bullet zips back and forth between pipes and processes and barely has enough momentum left to enter your foot

sendmail
There was a bang, and there's a pain in your foot, but you don't understand sendmail rulesets well enough to work out what happened

qmail
You shoot yourself in the knee, and it's your fault for not understanding mail systems as well as DJB that it happened. (and it's not a bug, oh no.)


Submissions being taken for others

Alexander Schmehl: [DebConf] Sometimes I like my job

It is for example fun to be one of the first who heard about a new award Debian got, and add it to our website (should be up there soon, thanks again to Cyril Brulebois from the french language team for translating). The not fun part of my job seems to be to try to write polite mails, asking people for something without stepping on their toes. Well, let's not talk about that; after having spend several hours on writing an other mail I just feld like blow my stack but deleted the stuff I just wrote... so let's go one. Another not that funny part of my work were the proceedings I just finished. After I lost somehow last years work (I had a very nice system of texing all those papers, creating a big PDF for printing and several small ones for download), I needed to do a complete rewrite, which got complicated by people submitting their papers in neither LaTeX nor plain text as we asked to do. Some could be fixed by some sed magic, but I'm impressed what ugly code some automated conversion tools can create. But that's done, too, and we even had the great idea of adding a credits section for all the volunteers helping to make DebConf become reality. Having that done, I couldn't resist and added a small joke. One of those insiders not everyone will get... Forgive me :) While talking about jokes: Did anyone noticed our quite new DebConf fortunes section? Feel free to submitt new ones. Some other news: No, Gustavo, we didn't decided yet where DebConf7 will take place, but one thing is for sure: Since DebConf6 will be in Latin America the next one won't. We have several offers, including (but maybe not limited to, I might have forgot one or the other) Edinburgh, Brixen, somewhere in Greece, Sarajevo and... uhm... some people would like to have one in Germany but don't think we could afford that, so it's quite sure DebConf7 won't be here. But as said, decision has not been made (but it looks like it will be in Europe ;) and currently we don't have the time to think much about that. Let's try to get DebConf6 done first ;) PS: Civilization has reached me! But they marked the wrong house! It is the one to the south east, the one with the empty parking lot.

PPS: No, this blog entry has no deeper meaning; I just feld like bloging.

25 April 2006

Erich Schubert: More thoughts on XML differencing

Last year, I gave a talk on XML differencing at the Extreme Markup Languages 2005 conference in Montr al. Since then I didn't have much time to work on that project. The prototype app is opensource, and available at ssddiff.alioth.debian.org. The slides are there, too, and so is a link to the article. XML differencing is actually a two phase process; I've been mostly working on the first phase. Traditional approaches intertwine the two phases. In the first phase, you build a mapping between the two documents. I called this a "nodeset correspondence" in the slides. Basically you decide which node from the first document corresponds to which node in the second document. When you have found this mapping (the "marked" output writer of ssddiff will output this information in form of two XML documents marked with numbers in a certain attribute), the actual differencing is done. But much of the work remains. When doing a diff, the output (format) is just as important as the actual result. While the "marked" output explained above is very precise, it doesn't give the user an overview of what has changed in the document. That's why I added two more output writers, the "xupdate" writer and the "merged" writer. The "xupdate" writer does obviously produce an XUpdate script. It goes a long way to optimizing the output (read: minimizing the number of operations), and employs a longest-common-subsequence algorithm for that (LCS is what regular diff uses on lines!). Fortunately we already have a 1:1 mapping, so this boils down to a longest-increasing-subsequence which can be computed very efficiently. Then the writer employs some XUpdate tricks to do real moves (by storing parts of the tree in variables to be inserted later), and avoids collapsing of text nodes (it will eventually insert dummy nodes for that). But all this gives just a glimpse of the complexity I've encountered in what I considered to be a "remote" part of my project. It isn't even described in the paper, because I just hacked this code together to work somewhat (attribute handling is incomplete IIRC). The "merged" writer turned out to be much more powerful than I had imagined and actually rather easy. After "merging" two version of an HTML document, I could add some CSS rules and have a visual presentation of the changes in my browser. Very cool. I'd love to add this html merge functionality to the prototype, but I didn't have enough time yet (you'll find some refactoring of the merged writer in SVN though to get there someday). But let me get back to the difficulties in the "XUpdate" writer. Not all of these difficulties are actually of technical nature. It is (like with the semantics of differencing) a matter of the intended data model and use. When you are doing a diff to be applied by a computer (e.g. via XUpdate), you may have the requirement, that the resulting document is identical to the original document. In that case, the diff is likely to have to restore whitespace. If you are interested in analyzing the differences, you will want to skip any irrelevant information. Let's assume we have an address book:
<abook><entry name="tom" /><entry name="jerry" /></abook>
Ordering of the entry nodes is likely to be irrelevant. You address book applications will sort the entries on demand. So a "semantic diff" shouldn't include any changes to the ordering of "entry" nodes, should it? The XUpdate writer doesn't have any functionality in place to skip such changes from being written to the output file. This will likely be not possible without some DTD magic and extra user information. However, to have the benefits of the "-u" context option of good old "diffutils" - fuzzy matches, and somewhat reliable merging of changes without having all revisions available - such semantics are needed, too. But this will even further increase complexity of the output writer, which for example would need to detect somehow that the "name" attribute in my address book is a unique key, and therefore xpath expressions like /abook/entry[@name='tom'] are preferrable to expressions such as /abook/entry[1], which will easily break when merging. The specification of an "XUpdate-replacement with context information" is probably a whole thesis in itself, I guess. P.S. I'm occasionally asked about a Java version of ssddiff. Sorry that I have to disappoint you there. First of all, I'm very short of time. Then I'm not too comfortable in Java, and I estimated that the Java version would need at least twice as much memory, because of certain optimizations I can't easily access in Java that I can just hide in a template in C++. And memory is the key limiting factor at least in exact mode.

21 April 2006

MJ Ray: Spammers: point and laugh

Over at the Register, they think it's good to simply point and laugh when spammers claim to be Tom Jones, son of a Python. Yes, some of this spam is truly bizarre. Do spammers like ridicule?

19 April 2006

Steve Kemp: You ve got to manage

Large Scale Automation I’ve been revisiting CFEngine recently in anticipation of installing it on around 50 notes. Matthew Palmer has given me a lot to think about, suggesting that maybe CFengine isn’t the right tool for the job and suggesting I look at Puppet. It seems very new, and I’m not overly fond of the Rubyness - but otherwise it looks good. There are some things that CFEngine gets right, and some things it gets wrong. One of the biggest “right” things is the split of the code: That strikes me as being a perfect split. The “script” file which is executed cfagent.conf is really a ruleset which is executed once on each host. The rest of the CFEngine setup is mostly concerned with distributing this file, handling updates, logging, security etc. If I were to code a similar system that is exactly how I’d seperate it. Now we come to the rules themselves. What do we do inside them? Well in my use of it to date I’m mostly doing a small number of things: So those are my primitives. They can actually be reduced further. Assume that the central server runs a HTTP server - then “copying a file” becomes “execute a command (wget/curl)”. None of these jobs is complex. None of them are things that couldn’t be written with a simple scripting language such as perl, lua, etc. It is almost tempting to write a simple rule-file-intepretter/parser. But down that path lies madness. I’m going to install Puppet tonight and play with it. Gotta love Xen :) If that works out nicely I might switch to using it, despite my concerns that it isn’t mature and is Ruby based. If it doesn’t it becomes a choice of writing a simple intepretter + deamon which accepts SSL connections with client certificates, or living with CFEngine.

14 April 2006

Amaya Rodrigo: Mallorca

I was invited to give a talk on Debian Women in Mallorca, last weekend, during the Jornades de Programari Lliure hosted by Bulma, the LUG from Mallorca. The island is a beautiful place, sure, over exploited because of tourism, and full of Germans, which is not intrinsically bad in itself, but if you know where to look, there s still virgin beaches with no electricity (power is provided by the sun) or tap water. There is 350 sunny days a year in Mallorca. Amazing. My pics are up at My gallery. My slides are also here. I even run into a mgp bug that I still need to report.

The organizers treated us wonderfully, we were hosted in a luxurious countryside hotel, where I found a cat that was Vi s wild twin, it was semi-feral, but enjoyed having (mooching) breakfast next to us in the sunny patio. Speakers even got a rental car to get around the island, which was greatly appreciated. If you want to meet some of us, download the hello world video . The organizers went out of their way to make us feel comfortable and at home, had video-streaming during the talks, real-time screenshots of the speaker s slides on a website, and every single detail that makes you realize they are one of a kind. I want to thank them for a wonderful weekend, that really recharged my batteries and karma, and also helped me remind the reasons of my involvement in Free Software, (total world domination, and of course, changing this ugly world into a more fair place), and why Free Software is (or should be declared) Heritage of Humanity.

Marcelo Branco attended with his wonderful namorada, Renata, a great girl. You might have met Marcelo in Debconf4 in Porto Alegre. He is in part responsible for Brazil s embracing free software, the point of reference in every party, and now employed by the Spanish Administration to build an international network of Public Administrations throughout the world to make Governments use, defend and embrace Free Software. His talk was one of those critical moments in life after which you find find yourself thinking faster and harder, on why. The figures he gave were hair-raising. Brazil s annual budget to put an end to hunger in the country is roughly half of the money spent on proprietary software licenses. It is a hell of a lot of money, given that only 8% of the population use software at all, and only half of them, that is 4%, is actually paying for a license. We also rode one of those rental cars around Mallorca, spotting the loveliest of places, wanting to retire there, after we change the world.

Ricardo Galli, upstream for Men ame.net, an improved digg in Spanish, also gave a mind blowing talk on ethical responsibility, intellectual property, and introduced me to the whole Zen-talk concept. His slides were awesome, so was his talk, and he was a pleasure to listen to.

Dato also gave a talk, on Debian, very complete, and very to the point. He could not make us play Mao, though, we were too tired at night.

Antonio Larrosa, one of our national glories. He is a KDE developer since KDE was born, and even got to work for Suse until it became Novell. As far as I remember, he was one of my youth idols in the times when Linux was still not ready for the desktop, he was one of the many that changed this. And we made a deal that turns him into one of my all-time heroes. He will write a KDE client for Mao, according to my specs, but I will have to switch to KDE. Therefore, here is my gpg-signed part of the deal:
I hereby declare that I will switch my desktop to KDE if my friend, Antonio
Larrosa, writes a Mao Client for me. This client will be networked, and have a
Chat window. It will follow the Cambridge Standard Five-Card Mao rules.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
iD8DBQFEP/FONFDtUT/MKpARAiiaAKCZUGEzGDA1ioCFK60TrS7APp71/ACgsMJh
rENpTKAsUSmPf/YzDkY7wU4=
=OHpi
-----END PGP SIGNATURE-----

13 April 2006

Martin F. Krafft: Soaking the city

We spent eight hours today, starting at around 10:00 o'clock, completely soaked with water. I had read about the Thai New Year celebration "Song Khran," but I would not have believed it to be as extreme as it turned out to be. But let me start where I left off: Phitsanulok. Following the recommendation of the director of the lower northern Thailand Tourist Authority (TAT), we spent the evening by the river running through Phitsanulok, where the Thai were celebrating the "food festival" -- it seems to me that the Thai, or Southeast Asian folk have a festival for almost anything to make it around the year... The road along the river was banked with little booths selling just about everything, from edible to handicrafts, with fair booths offering games such as darts, jumping castles, and live bands in between. Strolling around, we had a bite of the most appealing things -- I did stay away from roasted cockroaches, maggots, and other bugs this time, for I had already sampled them in Vietnam and felt no particular need to repeat the experience, although it was not revolting back then at all: it's just a little meat with a lot of crust that you don't want to eat, and the taste isn't particular. An excellent meal of noodles with some sort of sweet-spicy sauce, together with a beer and the company of some young Thai boys ended the evening for us and we returned to our hotel rather soon, with the intention to get up early to finish our errands and make a run for Sukhothai. So with our plane tickets and some fresh cash, we set out for "Sgt. Tawnee's Folklore Museum", a private collection of traditional Thai "things" -- tools, traps, toys, instruments, clothing, ... just about everything... Sgt. Tawnee was a poor soldier who realised that people were forgetting about how their ancestors went about to solve everyday's problems and consequently started collecting anything and everything -- a truly remarkable and beautiful collection! After a so-so Thai massage (see forthcoming blog entry), we quit the city by bus to arrive in Sukhothai about an hour later, where we were met by the pickup van of the guesthouse we had booked, also following the recommendation of the TAT director: we are staying at the Ruean Thai Guesthouse, a place with cozy rooms, a swimming pool, and very friendly staff, for about 10 EUR a night -- the best guesthouse I have been to in three vacations in Southeastasian countries, three thumbs up, I can recommend it to anyone coming to the area! We had just settled and taken a shower when the hotel clerk notified us that the director was waiting downstairs to take us to the "light show". We boarded his van, together with his family and colleagues, and drove about an hour to Srisatchamalai Historical Park, where we arrived just in time to witness an impressive ceremony, part of the New Year celebration: old people were sitting in rows on chairs, and younger folk passed from one to the next, pouring drops of water into their hands as a form of respect to the elderly to help them stay cool in the dreadful heat of the month. Naturally, we lined up and did as the others did -- and found us filmed and greeted by a television crew afterwards for an interview. Not wanting to be a burden to the director and his family, we followed the suggestion to stroll around in the park for about an hour, until we returned to the agreed meeting point. There, we found that mats had been rolled out on the lawn in front of one of the temples, and maybe 200 Thais were sitting and dining. The director invited us to join them, and we enjoyed Thai cuisine until dusk, when everyone got up for the national anthem and the show began. At first, a famous Thai singer (so we were told) performed a couple of folk songs and we learnt that, (to my knowledge) unlike European folk songs, the Thai sing songs telling real events in history. A fashion show of old, traditional Thai clothing followed, and finally, the stage was set for a performance of the history of Sukhothai. People were all over the place, fighting, dancing, or just "ruling" (as the king(s) would do), and a voice recounted the story, which one of the director's daughters translated for Aline, I was busy taking pictures. Fireworks accompanied the scene, along with flying objects consisting of a real flame underneath a balloon made of rice paper. Most flew high and far away, some got stuck in trees and went up in flames. After the show, I had a chance to see some of the costumes and must say that I am deeply impressed, not only by how Thai people used to dress, but also by the love and care the people put into the show to make it as authentic as possible. Interestingly, only one other tourist ("fallang") was at the event, something the tourist director wants to change in the future -- good thing we witnessed the "pure event"... I seem to prefer places not frequented by tourists, and in the Thais seem to be continuously surprised that we are not heading for the beaches in the south following our time in the north. Back at the hotel, we fell into bed, exhausted from the day and the nightswim in the pool. I got up this morning to find my ear clogged with water -- must have been the late swim. The guesthouse owner insisted to take me to a pharmacy to find some eardrops, and I hope this nuisance will go away soon. We rented a motorcycle for the day and headed in direction of the old Sukhothai city, or the Sukhotai History Park, as it is also called. Waiting for our photo chip to be beamed to CD, we made our first encounter with the way young people like to celebrate the New Year (which officially started today): all over the city, people rode around on the back of pickup trucks, emptying buckets of water over other people. We bought ourselves a water gun and plunged in for the fun. It didn't take 30 minutes until we were soaked, but nothing could stop us. The old city is maybe 10 kilometres away, and the drive was the most unforgetable motorcycle ride I'd ever had: all along the sides of the road, people were filling buckets and splashing everything that passed -- being on a motorcycle with merely a water gun, and as "fallang" (foreigners), we were naturally the primary target for just about everyone, so by the time we had reached the city, we had soaked up half an ocean each. We stopped by a group of kids, gave our water gun to the smallest one, bought a new one, and teamed up with them to fight the passing vehicles. Oh what fun! Dripping, we made our way to the park after a while, and strolled around some temples, the market, and many more water fights. Even though the water obscured the heat, we still didn't feel like taking the barrels of water we had collected for a walk and didn't last too long before we were on our way back, destined to stop again with our allies (the kids) to make sure no car and no passenger got by unwashed. The Thai also crumble up chalk, mix it with water, and smear it into each other's face -- you can imagine how we looked like after a few minutes: soggy and chalked. Finally, we made a run for the hotel and got back at about 16:00 o'clock for the first time of feeling "dry" in eight hours. Now, after some time at the pool, we are loathing for dinner but daren't go for the city as we are wearing our last set of clean, dry clothing; I doubt the Thai lay their buckets to rest at seven and call it an evening. Fortunately the hotel offers food too, so we'll likely be boring and stay in. Tomorrow morning is our flight to Chiang Mai for more of the wet fun. I'll keep you posted. Thanks for reading along.

12 April 2006

Matt Brown: Loading GPG / SSH Keys from a USB Key, Round 2

Back in January I talked about setting up some scripts to automatically load ssh/gpg keys into the appropriate agents when you plugged in a UBS key. I had quite a number of people ask me for my scripts, but they just weren’t quite ready. I’m still not entirely happy with the solution that I’ve come up with, but I figure its working well enough to get some feedback now. It’s based very heavily on the usb-storage script originally written by Sean Finney, so I think that means I owe him Pizza now. However while its based on the usb-storage script it has changed in a few major ways: The mounting of the partition is the key change and I’m still tossing up whether the way I’m doing it is best or whether I should return to having it handled by the script. The primary reason for changing it was to allow the partition to be mounted in a stable location (as opposed to a random directory under /var/tmp) so that I could symlink from appropriate places in my home directory to the partition on the key. The symlinking is needed to keep GPG happy as the gpg-agent seems to store only the passphrase and requires access to the private key whenever you need to sign/encrypt something. The way ssh-agent works is much nicer in this respect, in that once you’ve loaded a key into the agent it doesn’t need to refer to it on disk again. Currently I’m using autofs to mount the partition as needed and this seems to be working well. It’s probably possible to go back to mounting the partition at a stable location from within the script without too much hassle. You can grab the script from http://www.mattb.net.nz/debian/misc/manage-keys The remaining details for my configuration are below: First, setup udev to rename the key partitions to a static name and then fire the script at the appropriate times
/etc/udev/rules.d/usbkey.rules

ACTION=="add", KERNEL=="sd?2", SYSFS serial ="A0494386139B005B", NAME="%k", SYMLINK="usbkeys", RUN+="/usr/local/bin/manage-keys"
ACTION=="remove", KERNEL=="sd?2", RUN+="/usr/local/bin/manage-keys"
Then setup autofs to mount the partition on demand
/etc/auto.master

/media/usb /etc/auto.usbkey --timeout=10

/etc/auto.usbkey

keys -fstype=ext3,ro,noatime,nosuid,nodev :/dev/usbkeys
I keep only id_dsa and secring.gpg on the key and symlink from the appropriate places in my homedir to /media/usb/keys/

matt@argon:~$ ls -l .ssh/
total 76
-rw------- 1 matt matt 612 2006-04-12 22:45 authorized_keys
-rw-r--r-- 1 matt matt 2694 2006-04-12 22:46 config
lrwxrwxrwx 1 matt matt 22 2006-04-13 01:08 id_dsa -> /media/usb/keys/id_dsa
-rw-r--r-- 1 matt matt 612 2006-04-12 22:46 id_dsa.pub
-rw-r--r-- 1 matt matt 58851 2006-04-12 23:10 known_hosts
matt@argon:~$ ls -l .gnupg/
total 2336
-rw-r--r-- 1 matt matt 126 2006-04-12 22:56 gpg.conf
drwx------ 2 matt matt 4096 2006-04-12 23:07 private-keys-v1.d
-rw------- 1 matt matt 1175737 2006-04-12 23:29 pubring.gpg
-rw------- 1 matt matt 600 2006-04-13 01:51 random_seed
lrwxrwxrwx 1 matt matt 27 2006-04-13 01:08 secring.gpg -> /media/usb/keys/secring.gpg
-rw------- 1 matt matt 10560 2006-04-12 23:27 trustdb.gpg
And that’s basically it. The script takes care of the rest. The main problem I’m having with the script at the moment is that it doesn’t autolock the screen when you remove the key because gnome-screensaver-command is lacking the necessary environment variables to find the DBUS socket it needs to talk to its backend. Need to read up on DBUS/gnome-screensaver and sort out how to fix that tommorrow. Update: Updated example udev config so it doesn’t run a script out of /home

11 April 2006

Christine Spang: Voting

I’m finding it kind of ironic that only 43% of Debian Developers voted in the DPL Election, while there are other, non-DD contributors that have expressed an interest in voting but can’t with the current rules.

Next.

Previous.