Search Results: "zed"

25 May 2006

Uwe Hermann: OS Install Experiences - Part 2: SUSE Linux


Note: This article is part of my OS Install Experiences series.
Next up: a SUSE 10.1 install. It's been a few years since I touched a SUSE distribution (it was something like SUSE Linux 5.3 or so), a lot has happened since then... Here's a rough sketch of the installation and a few superficial remarks and facts related to security. Install
  1. First, I downloaded a SUSE 10.1 CD image, burned it on a CD, and booted from that.
  2. The installer that showed up is graphical, and you can choose between a normal installation, booting a rescue system, or running a memory test (uses memtest86, I presume).
  3. While the installer runs it merely shows a rotating logo, but you can switch to other consoles (ALT+F1, ALT+F3, ALT+F4) for watching log messages passing by.
  4. You can choose the language used in the installer, later also your timezone and keyboard layout. You can also check the installation medium, which verifies the checksum of the CD, I guess.
  5. Next, you'll be asked to accept a license agreement (yeeaah, whatever).
  6. Your hardware will be automatically detected (worked quite well for me), and after that you can choose between a new install or a system upgrade.
  7. As for the desktop, you can use GNOME, KDE, text-mode (no desktop), or a "minimal graphical system" (it turns out that means fvwm, at least that's what I think).
  8. The graphical partitioning tool feels a bit awkward at first, I needed several tries until I figured out how to make it use the layout I wanted it to. The default file system suggested by the tool is ReiserFS.
  9. There's an explicit option which lets you choose the default run-level for the system (run-level 5 is pre-configured).
  10. The bootloader, GRUB, recognized the other partitions (Debian stable + unstable), added an entry for SUSE Linux, and created a working setup. Nice, although more control over the process (e.g. naming of the boot options) would be nice.
  11. Reboot.
  12. I'm asked to insert CDs 2 and 3, which I don't have (or want), as I only burned CD 1. Clicking "abort" a few times does the trick, and I can continue by choosing a hostname and domain name for the box (hydra + local.domain).
  13. Now I must enter the root password. Very nice: I have the choice between DES, MD5, or Blowfish (SUSE default) for the hashing/encryption of user passwords.
  14. Afterwards, the network is configured (automatically, via DHCP). You can enable a firewall at this point, and enable/disable access to the ssh port explicitly. It's also possible to enable "VNC remote administration" (default: off), or configure a proxy.
  15. Authentication methods for users, available from the installer: local (/etc/passwd), LDAP, NIS, Windows Domain.
  16. When adding a new user, there are some options. Per default, the user is in the groups "users" (no per-user groups, it seems), "dialout" and "video", but that can be configured. Password expiration is disabled. The default shell is bash.
  17. And now... another registration message (in the release notes, actually). May I quote (from my head): The registration procedure transfers zmd's unique device identifier to Novell's registration web service. The information sent may also include OS, version, architecture, and the output of uname and hwinfo, according to that text. More on that later, maybe...
  18. Of course, SUSE Linux comes with SUSE's/Novell's AppArmor enabled by default, but I haven't looked into it, yet.
  19. Now some problems appeared. More hardware discovery took place, it seems, then the screen turned black (with only a non-blinking cursor in the upper left), no reaction to any input -> I performed a hard reboot.
  20. After booting, I'm dropped into fvwm (although I chose GNOME in the installer), the reason probably being the forced reboot. After looking around a bit in the menus and stuff, I wanted to start sax2 (to find out what it does), but the screen turned black again -> another hard reboot. Could it be that I don't have enough RAM for this (256 MB)?
  21. Anyways, at this point I lost interest in playing with the system any further, and gathered the below information for comparison reasons...
Security That's it. Comments, suggestions, flames?

Wouter Verhelst: IceWM

I had been an Enlightenment user for a long time—halfway the Summer of 2000 up to the early fall of 2004—before someone finally decided to pick up the pieces where they were left somewhere around 2000 and restart its development. Unfortunately, that also meant causing #219925, which was irritating me more and more each day. Eventually, in the early fall of 2004 (almost a year after I filed that bug), I gave up and started looking for something else. The problem, of course, was that I'd grown so accustomed to using Enlightenment and its way of doing things that I felt at a loss. I wanted to be able to move windows above the upper edge of my screen again. I needed focus-follows-mouse. I was having a hard time without edge-flipping. Eventually I found that there was functionality for all of the above, but it wasn't flawless. Especially not the edge flipping—GNOME implements that in a truly horrible way1. Not to mention the fact that brightside, the application which implements edge-flipping for GNOME, segfaulted on me an annoyingly high number of times, sometimes even taking away my entire session with it. Even Enlightenment never did that; it would just misbehave instead. Apart from that, of course GNOME also had some extra annoyances that I didn't get rid of. The fact that it insists on mucking with my keyboard settings, to name just one example. Even so, I used it for about nine months. Then, slightly after DebConf5 in Helsinki, I realized what the true horror of GNOME is: not the fact that they hide away features or try to make the desktop void of superfluous options; the fact that they remove features that are critical to some of its users. I know I was horrified to find out that something I really used a lot had been removed in that new release. I kept using it for three more months before I threw in the towel and tried something totally different. Ion3. After coming from the mostly mouse-oriented interfaces that GNOME and Enlightenment were, ion3 was truly different. I liked it at first; it was a welcome change from what I'd previously been doing. Eventually, though, I found that the ion way of doing things just wasn't my way. The fact that, by default, it puts new windows right in front of the window you're working on was rather offputting. Any serious attempt at configuring the thing involves learning lua which, though supposedly not hard to do, is not something I ever found the time for. In the end, I discovered that I disliked working with ion, as I often felt that it gave me a fragmented and tunneled view on the world, and that it was working with me instead of the other way around. In short, it was getting the fun out of computing for me. Which wasn't good, at all. So that's when I started looking for something else again. When I'd made the decision to move way from ion3, I didn't want to keep using that "until I'd found something else"; instead, I quickly installed IceWM instead—which I still knew from back when I had a Yopy YP3000—and used that until I had found something better. Little did I know the beaty of IceWM. I've decided, by now, that it does all I need, and more: By default, it tries the best it can to put a window on your screen so that it overlaps with as little other windows as possible. I can have it not focus a new window by default. I does focus-follows-mouse, if enabled. It even does edge-flipping. Of course it's not perfect—the edge-flipping, though not as horrible as the GNOME implementation, can still use some improvement. As if to prove my point, I accidentally closed the window in which I was writing this very post before it had been written to disk, the cause of which could be described as an interface problem in IceWM (though it's more likely an example of PEBMAC (Problem Exists Between Mouse And Chair). But, all in all, using IceWM feels like finally coming home. Thanks, Marko and Mathias, for a truly wonderful piece of software. 1 I know that there are a lot of people who dislike edge-flipping. I am 99% sure that this is because they've never seen it implemented right. Edge-flipping is great, if done right; it's nightmare if done wrong. GNOME does it horribly wrong. IceWM does it better, though not perfect. The implementation in Enlightenment is perfect. I'll discuss the details in another post.

Carlos Parra Camargo: I mean Planet Debian

Ok, the order matters in this case, you are right Brett, i mean Planet Debian. This morning a lot of my old posts have been in Planet Debian, now seems to be fixed. Ouch, I've just realized that i need a hackergotchi :D

Martin F. Krafft: Post-Debconf

One thing that never really came to my mind during Debconf6 in Oaxtepec, Mexico, was blogging about what went on. In part, that's because I never had a minute to spare, plenty of other people were blogging about the event on the planet, and definitely also because I developed a dislike to play-by-play blogging, which I certainly do not like to read for my part. But now, sitting in Oaxaca in the Hostel Pochon (which has free wireless, imagine that), I feel like at least jotting down some of the highlights. My favourite non-Debian related happening must have been the descent to Mexico City airport. I am willing to bet that our pilots either had too much to drink or way too much fun, because we literally zig-zagged across this amazing city. It's about 2200 metres above sea level and our inflight information system noted our altitude at 3500m for at least 20 minutes, so glued to the window, I felt in a miniature world, hovering above a city that extends to all sides however far the eyes could see (I conclude that in all miniature worlds I've seen so far, such as the Eisenbahnmuseum Hamburg and Swiss Miniature, trains and cars are generally moving too fast). The population of "la Ciudad de Mexico" (which the locals just call "Mexico") is estimated to be somewhere between 20 and 24 million, which makes it the largest city in the world, and it was not hard to believe that during the descent (and afterwards). I arrived at Oaxtepec, a government-run vacational complex, some three or four hours after touchdown and didn't last very long until the jetlag took me to bed. That was Saturday night. With Sunday morning, the official Debconf conference had started and was to last for seven days. In general, that meant talks and BoF sessions throughout the day, loads of hacking and socialising in between, food, and drinks with more socialising in the evening (and throughout the night in some cases). I really enjoyed seeing many of the folks I had met at last year's conference in Helsinki, while some others' absence was equally prevalent. I spent most of the week hanging out with Biella Coleman, Micah Anderson, Sean Finney, Clint Adams, and a bunch of others, I also managed to make the real-life acquaintance of some people I had known online for a long time. In retrospect though, I should have spent less time with the regular clique (with whom I was to go to the post-Debconf trip anyway) and spent more time getting to know more of the attendants. The vacational complex was interesting, and unlike many others, I didn't get annoyed by the long distances between presentation room, my accomodation, the hacklab, and the place where we were served edible lunches and dinners. Rather, I enjoyed walking with others, engaged in discussions on some of the more prevalent topics filling my life with Debian (such as version control, low-level Debian tools, security issues, and social challenges). The only nuisance was the long walk to the nearby town and its market, from where I would get most of my food and drink throughout the week -- but even that walk I rarely had to manage alone. The massive pool (with a ten metre diving board) that lay in the middle of it all didn't really attract me that much, but then again I've never been much of a pool person. In the interest of various people worrying about my safety in Mexico, as well as some of my clients, I purchased a Mexican prepaid SIM card for my cellphone and linked up with the world (after two attempts and an accumulated 2.5 hour wait). The fun was only short though, when I found out that in Mexico, phone charges are ridiculously expensive, and receiving calls on a mobile phone costs exactly the same as making them. At USD 1/Minute to and from Europe, I ended up limiting my air time to a minimum. I spent most of the first couple days getting mdadm back into shape, bug triaging and uploading a new upstream to experimental, except for Monday, which I spent together with Joey Hess, Micah, and Biella trying to recover files from her wrecked filesystem, which we managed in the end using a simple fsck to at least recover her presentation. I'd be sitting on the terrace in front of the "hacklab" where people kept passing by, so my work certainly wasn't focused and without interruptions, but in the end I was still satisfied with the end result. And in the evenings, it was usually the same terrace, sampling the local beer, enjoying cheese from all over the world at the cheese party on Tuesday night, trying liquors from other parts of the globe, and talking and joking and meeting great people (I truly love the Debian crowd). Out of the large assortment of talks available, I attended several but found that front-up presentations aren't my thing and I would have to let the topic simmer a bit (along with some research) before delivering my questions to the speakers outside of the talk (where I finally got some interesting answers to long-standing questions). Thanks to the awesome work by our video team, which recorded every single presentation to tape, streaming it live and also intending to publish it on a post-conference DVD, I found myself often listening in on talks I wouldn't have gone to, while hacking away on said porch. Noticing, however, that many talk slots were left unfilled at the start of the conference (they did quickly fill with impromptu presentations and BoF sessions once the inertia of the event picked up), I was a little annoyed that my proposal was turned down in the first phase of selection. Wednesday was the day of the day trip. Against my recommendations of an early departure, we left the site at 11:30 with six busses (remarkably on time), heading for Xochicalco for a rather boring tour of the museum, and a vastly more interesting, two hour stroll (in the midday sun) around the actual archeological site, which was quite impressive despite mostly being artificially built or rebuilt by the government. We went on for an excellent buffet-style lunch (which was amazingly well organised), and then headed on for Cuernevaca, a small, romantic town where we had only an hour to spend before heading back home (who recommended starting the day earlier?). When we finally made it back to the conference, most of us were just tired and the evening wasn't as wild as some of the other ones during the week. Come Thursday, my mission was to attack the thinkpad packages, which make Debian on IBM laptops a lot more of a pleasure to use. Unfortunately, I didn't get anywhere (yet) with that work, simply because most of my time was spent battling the weird hacks that make up module-assistant, which actually makes it a lot harder for developers to provide kernel module packages (while really improving the end-user's experience). But of course, there was a positive twist to this issue, as I would now leave my screen in frustration much more frequently and socialise with the others. For the evening, the organisers had prepared the "formal dinner" (which isn't so formal at all). A bunch of busses took us to a nearby shed, where we found all tables arranged in a massive swirl, and when we were all seated, a Mariachi band entered, at the same time as the rain outside picked up -- I thought one of the Mariachis was playing the snare drum but as the rain grew stronger, I concluded it must instead be the drops on the metal roof causing the noise. Generally in love with rain, I made my way to the door while others lined up to fetch dinner and stood in awe for a bunch of minutes at the sight of the marble-sized drops descending from the sky. ... when suddenly I saw one of Debian's troublemakers, Jonathan/Ted Walther, running at me, chased by three developers and found myself amidst their altercation before I could do anything. People screaming, one reaching over my shoulder to push Ted, it was all too much. I told everyone to calm down, to which Jonathan/Ted reacted, vigorously shaking and foaming, with a "get out of my fucking way, you fucking Nazi" and I knew that stuff had gone wrong. I withdrew, and in an attempt to find out what had happened managed to piss off one of the three involved developers, who'd then later refuse to hear me out for an explanation. All that really left me in a depressed state mainly because I simply hadn't expected Debian developers getting physical at each other, and this time it was Erinn Clark who consoled me and turned the night around for the better. I still had no appetite and took the first bus home, sent an apologetic email to the offended developer (who never acknowledged receipt but seemed to have forgotten the incident the next day), and enjoyed beers while the others kept returning to the hacklab. Apparently, people were quite aware of my (passive) involvement during the incident, so I was bombarded with plenty questions, most of which I refused to answer for lack of knowledge of the actual facts. Still, when I saw one girl in another altercation with Jonathan/Ted later that night in response to severe offences he published on his blog, which led her to come close to tears, I decided it was time to pull him off the planet. He re-added himself shortly afterwards by "fixing a typo" (according to the CVS changelog), but by that time, I couldn't care less no more and simply resumed the discussions, which eventually turned into topics of life, intelligence, and the bottom-up vs. top-down debate. I am a strong supporter of bottom-up (as many of you know), and I somehow regret the way I approached the discussion, because in retrospect I see myself as somewhat arrogant during it; fortunately, noone seemed to hold it against me the next day. Throughout the entire week, I built up a reputation of the guy that needs no sleep: staying up until the early morning hours, yet rarely missing any of the first talks at 10 in the morning, and even joining with people for breakfast at the market before. Friday morning, however, I just couldn't get up. We talked until six in the morning, and when my eyelids finally moved after I dropped into bed, it was already noon and I dragged myself to the next talk. after which I simply returned to the hacklab and developed more of my dislike towards module-assistant, before the call for the official Debconf6 group picture rescued me (and those around me). The keysigning party followed and I made the mistake to offer to coordinate it (picking up where Anibal's great preparation left off), without really running the process through my head before. Standing up on the diving tower and screaming to the crowd of 140 participants, it was in part due to Moray Allen's comments that the party went more or less without any complications; I did get to conduct another experiment though. During the keysigning, Mark Shuttleworth invited a bunch of us to join him for dinner to discuss the Debian-Ubuntu situation (no bribes involved; we paid for ourselves). I'll have more on this in a separate post when it's ready. The discussion continued after we arrived back at the hacklab, and once again, I didn't go to bed at a civilised hour... ... but I did get up in time for Biella's talk, during which she employed very effective techniques to get me to actually pay attention (which I would have done anyway): she required my laptop for the presentation. Again, the talk didn't do much to me (which is not Biella's fault), but I am certainly interested in reading the relevant parts of her dissertation. At the same time, however, it made me realise how far from reality the academic world is: big words and complicated concepts just don't count when it comes to getting your hands dirty, and I will try my best not to go down that route when my own dissertation gets more serious. Two other memorable events happened on Saturday: the fun group photos (I was determined to get the participants to line up in a swirl in the pool, and partly succeeded), and the last-night-party on the porch of the hacklab, which was mighty fun, in part because we had speakers blasting tunes for the first time that week (thanks to the dance BoF the night before), and Ryan Murray was playing some of the truly excellent mixes of a close friend of his, which are available from mux.ca. I didn't sleep that night. And then Sunday had arrived, the sad last day of a great conference. I would like to thank all the organisers and helpers for making this event possible! I know some of you had some reservations before and during the event, but in the end it's the result that counts, and I was only one of many who were absolutely satisfied by the week. A great big THANK YOU to you! Following the last bits of socialising and copying Biella's harddrive image to Micah's drive for later rescue of some of her precious videos, we were off to Mexico city for the vacational part of the trip. Some of us went by bus, Vagrant and myself hopped onto the bus to assist one of our developers with his wheelchair at the airport. When the group reconvened in front of our hotel for the night in the centre of Mexico city, the vacation had started (blog post forthcoming sometime...)

Alex de Landgraaf: Debtags SoC project starts

Still amazed I actually got my proposal accepted. Considering I started writing it 3 hours before the (extended) deadline it was closer than that I'd like to, but lets hope the summer is long and I'll be able to do a lot of Debtags-hacking without too many close calls :) As for most of my recent projects, I've started a Trac environment and SVN repository. Doesn't contain much now besides my SoC proposal and a few links, but I'll get up to speed soon enough...

24 May 2006

Andres Salomon: social fallacies

This bit entitled “Five Geek Social Fallacies” was really well done. Go read it. Think about it. As a homework assignment, find one example of each fallacy that was expressed in a post on a public debian mailing list, by a (then registered) debian developer. Bonus points if an example that you cite is in a post of your own, and you’ve actually recognized that your opinion was based on a fallacy. (As seen in gravity’s blog)

Andres Salomon: Actually, they re kinda bland till you scoop sugar on em.

Last night, I opened up a jar of Mott’s Apple Sauce and proceeded to eat half the jar. At some point, I looked at the ingredients; basically apples, high fructose corn syrup, and water. Just how much high fructose corn syrup? I looked at the nutrition facts and realized that I was eating 25g of sugar *per serving*. 5 servings (which is how many are in the jar) would have amounted to eating 125 sugar packets! I tossed the rest of the jar in the garbage. The apple sauce was a lot more appealing when I thought it might actually be healthy. [edit] No, I don’t normally eat a jar of apple sauce; the rest of the food is packed away in boxes, however. Looking at the unsweetened apple sauce, it looks like it has 12g of sugar in the apples themselves. So to correct my figures, eating the jar would have amounted to eating 65 sugar packets, plus some apples.

23 May 2006

Biella Coleman: Mexican Bribes

Another Debconf has come and passed. This was my 3rd conference and surely to be one of the more memorable, partly because I showed up for the whole time (and am now traveling with 4 other DD’s in Mexico) and partly because of a few problems that plagued my visit. There is no doubt that I had a wonderful time but some of my attention was drawn away from enjoyment toward crisis management. For the first few days, it was due to computer problems (now sort of fixed) and then the last few days I had “Biella Hardware” problems in the form of one of the worst combo sore throats/ body aches that I have had in recent memory (now sort of fixed but not entirely). Now that I am in Oxaca, I hope to spend a little time blogging about this year’s Debconf but before I wanted to pass along what I think has been one of the more amusing experiences thus far in Mexico. So yesterday a group of us (Jeroeun, Martin K, Micah, Vagrant) rented a car to head off to the Southern city of Oxaca. I have actually never rented a car in a foreign country, and I was a little concerned about everything from price to roads to cops. Amid my nervousness, the employee at Thrify was sort of reassuing and quite nice but he gave us some unfortunate news: he warned us that as we reached this one particular circular intersection in Mexico City we would be stopped by a cop (because we are tourists) and basically bribed. This was not surprising news to be but I was surprised at how upset this made me. (maybe because I have never had such an experience and thought I would mangle it when the time came to pass off the money or offset the bribe or whatever). Anyway, after we packed 5 bodies and copious luggage into our compact Nissan, we headed off somewhat prepared to face off the cop and decided it was best I drive as I was the Spanish speaker. We made our way through the congested streets and headed toward the intersection and as we got closer, I thought to myself how are they going to spot us within all this traffic? But you see, the thing about this intersection is as soon as you make the turn left, you hit a light and need to stop for a long time. And you see, this gives the cop ample time to switch on the tourist radar and spot the noticeable white bodies. Sure enough, within 30 seconds of stopping at the intersection, a Mexican cop walks over and there is where the fun began. So he basically told me that I did not use my signal lights for turning when I made a left and that this infraction would cost me US $120. At this point I started to get a little freaked (I already dropped too much money on a rental car) but I remained calm and told him basically in Spanish With all respect, officer, I think I used my light because I am in a foreign country and am very aware that I must follow all traffic rules. After a little back and forth, I moved on to the bribe stage. While we were told that 100 pesos (10 US) was the typical bribe, we, being cheapskates, just offered 5 US. And then, magically, at that point, the officer said, ok just go ahead and be careful not to repeat the offense next time. I was shocked. I mean there was some money being offered right there and I was sure he was going to ask for a little more. But he backed off. Why? I think it was a combination of factors. Ok so perhaps he was surprised that I knew what was going on. Perhaps he was uncomfortable that I knew Spanish. But I think he the tipping point was due to cultural factors. I think he found it odd that there was this little woman driving a car with 4 grown and pretty large men. Given the gender dynamics in the country, this was just beyond his cultural comfort zone and he realized that I was badassss, and he just backed off. Ok, so I don’t really know if that is what happened but I like the explanation and am glad I got off the hook :-)

Christian Perrier: Note to self

Never ever fly on Iberia anymore unless they can certify that only Finnish or Norwegian people are in the flight. Or that I have my wooden base-ball bat handy to puch the two jerks who speak (loud) all night long in the two seats in front of me (and Petr)....and laugh louder and louder as long as they keep drinking the whishy-cokes offered by an incompetent and inefficient crew. First time this happens to me in transatlantic flights where, usually, people are more civilized. PS, later: these morons were indeed Mexican, not Spanish.

22 May 2006

Uwe Hermann: Podsploiting

The RedTeam, a penetration testing group, has released two security advisories which explain security holes in two podcast clients (podcatchers). Both exploits are possible because the input of the programs is not properly (or at all) sanitized. Basically, they call system($wget_cmd) where $wget_cmd is shell (/bin/sh) code which shall download a file via wget. As the $wget_cmd string contains contents from an untrusted source (HTML/XML on some random server), this results in an "arbitrary code execution" vulnerability, the worst-case scenario you could imagine. If someone is naive enough to even run such a podcatcher as root, this means a remote root exploit! Anyways, the RedTeam is definately correct in saying that more and more people start listening to podcasts, and more and more podcatchers are written. But few of them are written with security in mind, which leaves many listeners at risk... I wonder how popular closed-source podcatchers such as iTunes are affected here. Are there any published audits/audit-results (black-box auditing, obviously, as you don't have the source code) for iTunes? As for Free Software implementations... consider this a call for reviews and audits! If you know/use one of the many podcatchers (or an RSS feed aggregator, which are affected by similar issues), and have some knowledge on secure programming, get the source and review the application. Make the software you use, and the world at large, a little safer. I'll definately have a look at the programs I'm using soonish...

21 May 2006

Aigars Mahinovs: Fun group photos

The next day after the main group photo we decided to try and make something that is more funny and more sunny, so we decided to try to make a group photo in the pool. The event was completely voluntary and meant more for fun. At first we tried to create a shape of the Debian swirl in the pool. Debconf6 pool swirl It really was the real thing: the shape was never perfect or to the spec, more people were coming in all the time, some people stood back and watched, some sprayed others with water, some tried to organize, some almost drowned ... all in all just like the Debian project. :) After that we also took a simpler group picture in the pool Debconf6 pool group After I left, a flame^Wsplashwar ensued. Loads of fun.

Norbert Tretkowski: World domination

I'm really amazed to see so many users of the ion3 window manager here at DebConf6 in Oaxtepec.

20 May 2006

Junichi Uekawa: Updated libpkg-guide.

I've made a major re-ordering of chapters. I'm looking atreducing some text from the document so that it's betterorganized.

Aigars Mahinovs: Debconf6 group photo AKA bits from the official Debconf6 photographer

After a bit of stress, sweat and tears (only from the rain) the annual Debconf official group photo has been created. Enjoy. Debconf6 group photo PS. Later there will be a post about how the photo was created and other events that happened today, and maybe tomorrow there will be another Debconf group photo - a smaller, but warmer one. Stay tuned :)

19 May 2006

Ted Walther: Report from Debconf, Day Five


Me and Anthony Towns
A Debian Pope is born. Tonight was Debians formal night. Fabio drove John Sokol, Hilda, and myself to the auditorium where the dinner was being held. Fabio owns the local internet cafe and provides the internet connection to Debconf. Hilda is a local businesswoman, who owns a dental supply company. Very nice people; a real slice of the real Mexico. Hospitable, friendly, and helpful. We arrived just after the buses arrived and people chose their seats. As a formal diner, I had to wear my official costume, the crown and the clue bat. If anyone wants a genuine replica of the clue bat, the price is $50. If you don't buy it for your office, buy it for your kids; the foam is four inches thick and cannot bruise, cut, or hurt anyone. As soon as I entered the auditorium where the dinner was set up, Juan Diaz from Argentina took the crown from my head and raced away. I chased him with the clue bat. Then I saw that his intention was to put the crown on AJ, Debians newly elected project leader. He did it hastily, illegitimately, and backwards. Reaching AJ, I put down my clue bat and told him to hold still. To the cheers and applause of the entire auditorium, I lifted up the crown, and then placed it on AJ's head correctly, in a style befitting a pope crowning an emperor. Immediately after, we hugged and waved to the happy crowd. By the act of crowning, I am now the Debian Pope. This isn't the cushy job it might seem; some members of Debian really hate popes of any sort. Mariachi rain dance. Soon after the crowning, the food and drink started arriving. The mariachi band started playing their trumpets and guitars, starting off with the Mexican national anthem, which is a fun song to sing but I didn't understand a word of it. The newly crowned AJ came along the tables and organized "the wave" like at a football game. We all stood up and sat down as the wave came around, and made the low moaning WHOOOP sound as it came by us. A few minutes after this the food was set on buffet tables, so everyone got into line to get their meals. The meals were simple. Some meat, some rice and bread, and some salad. A nice meal after a week of rich eating. Beer flowed freely, and toward the end some wine was passed around too. The mariachis must have been a signal, because the rainy season started right after they started playing. First the rain bounced off the tin roof so we could hardly hear the band. As dinner went on the clattering of rain got louder, then flashes of lighting showed through the windows. The roof leaked onto many peoples dinner plates and heads, so we all got cozy with each other, finding places out of the rain. At one end of the hall the rain gushed out of the roof so strongly that the entire wall became a waterfall. Finally the lights went out. Cell phones and cigarette lighters quickly waved around, lighting up the place. Strobe lights from digital cameras gave the place a disco atmosphere. Slowly the emergency backup lights came on, then a few minutes later full power was restored. The rain did stop after that, but many people chose to leave shortly after, including yours truly. The Pope is assaulted. Several acts of rudeness and aggression were committed against myself and my guest, a local businessperson. I'm going to wait until tomorrow to see how Debian responds to this inappropriate behavior. If it is resolved to my satisfaction, I'll see no need to name names or post the details in public.

Uwe Hermann: OS Install Experiences - Part 1: Debian stable + unstable [Update]

Debian Open Use Logo
Note: This article is part of my OS Install Experiences series.
OK, so let's start with something simple: Debian. Simple in the sense that there probably won't be too many surprises for me as a Debian developer (or for most readers of Planet Debian). For other people this might be interesting, though, and some facts are probably interesting to one or the other experienced Debian user/developer, too... Hardware A few words on the hardware I'll be installing all these OSes on. It's a cheapo (200 Euros) x86 PC (Intel Celeron, 2 GHz), 80 GB IDE hard drive, 256 MB RAM, ATI Radeon 9200 SE graphics adapter, Realtek PCI ethernet controller, CDROM, USB, and all the other standard stuff. Nothing fancy, really. Install
  1. First, I downloaded a Debian sarge 3.1r2 CD image, burned it on a CD, and booted from that.
  2. An installer menu showed up, where you can press F3 for boot options. I chose "expert26", which will ask me more questions and give me a 2.6 Linux kernel instead of 2.4.
  3. The installer (newt-based, i.e. not graphical) will now start to boot a base Linux system.
  4. Now, you can choose your language (used in the installer), country, region, and keyboard layout.
  5. You'll be asked which additional kernel modules you want to load (default: all), and whether you want PCMCIA support. Also, you can choose which extra installer components should be loaded (LVM, PPP, serial, IrDA, ...).
  6. Your hardware can be automatically detected (my Realtek card was successfully detected, the "8139too" kernel module was then loaded).
  7. The network was successfully auto-configured via DHCP within seconds.
  8. Now you can choose a hostname and domain name for the box. I used "hydra" as hostname (guess why), and "local.domain" as domain name.
Partitioning Now the funny part starts: partitioning the disk. As I will be installing >= 10 OSes, this needs a bit of consideration. I have chosen to create a 10 GB (primary) partition for a Redmond OS I'll be installing later (for games, testing, proprietary software I'm forced to use, and similar things). This will be the first partition and I marked it bootable, as Windows might choke otherwise. For the rest, I reserved 5 GB for each OS — that should do. So the next two (primary) partitions are 5 GB each. I'll leave these empty for now, as I might encounter obscure OSes which must be installed on primary partitions. Let's hope it won't be more than two ;-) As you can only have four primary partitions, I then had to create a logical partition, which will "contain" any further partitions. The next three (secondary) partitions are 1 GB each, intended to be used as swap. One of those I marked as swap in order to use it for Debian. Other Linux installations will be able to reuse this one. The other two are reserved in case I encounter OSes which have another form of swap and cannot use Linux swap partitions... The rest is easy: create twelve 5 GB partitions => lots of space for more OSes. Here's the resulting fdisk output:
Disk /dev/hda: 81.9 GB, 81964302336 bytes
255 heads, 63 sectors/track, 9964 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
      Device Boot      Start         End      Blocks   Id  System
   /dev/hda1   *           1        1216     9767488+  83  Linux
   /dev/hda2            1217        1824     4883760   83  Linux
   /dev/hda3            1825        2432     4883760   83  Linux
   /dev/hda4            2433        9964    60500790    5  Extended
   /dev/hda5            2433        2554      979933+  82  Linux swap / Solaris
   /dev/hda6            2555        2676      979933+  83  Linux
   /dev/hda7            2677        2798      979933+  83  Linux
   /dev/hda8            2799        3406     4883728+  83  Linux
   /dev/hda9            3407        4014     4883728+  83  Linux
   /dev/hda10           4015        4622     4883728+  83  Linux
   /dev/hda11           4623        5230     4883728+  83  Linux
   /dev/hda12           5231        5838     4883728+  83  Linux
   /dev/hda13           5839        6446     4883728+  83  Linux
   /dev/hda14           6447        7054     4883728+  83  Linux
   /dev/hda15           7055        7662     4883728+  83  Linux
   /dev/hda16           7663        8270     4883728+  83  Linux
   /dev/hda17           8271        8878     4883728+  83  Linux
   /dev/hda18           8879        9486     4883728+  83  Linux
   /dev/hda19           9487        9964     3839503+  83  Linux
Install, continued
  1. The Debian partitioning tool allowed me to do all of the above via a friendly menu. As it does not modify the partition table until you say "done", I could revert many changes, and play around with different layout ideas until I was satisfied.
  2. Next thing you can choose is the Kernel flavor (386, 686, smp).
  3. You may now configure and install GRUB, the bootloader. I installed it at "(hd0)", the master boot record of the hard disk.
  4. Soon the CD ejects, and you have to reboot.
  5. After a restart (which also shows whether GRUB works fine), you can now choose your timezone, and decide whether you want shadow passwords (say yes!).
  6. Now enter the root password, and decide whether you want to create an additional user account (say yes, and enter a different password here).
  7. You can now configure apt, e.g. tell it which sources you'd like to use (CDROM, FTP, HTTP, ...). You'll be asked whether you want to install software from Debian's "non-free" archive. After choosing a mirror (and proxy settings, if you like), you can (should!) also say yes to the question whether you want security updates...
  8. Finally, you may now choose "tasks" (desktop, web server, file server, ...) your machine should be able to perform; this will influence which packages will be installed. You may choose "manual package selection", of course, if you want more control. I used "desktop".
  9. That's about it. You'll see a few more application-specific questions (configuration of MTA, ssh, fonts, X11, gdm, and others), and after that you'll be left with a GNOME login window.
Security I collected some (partly) security-relevant information after that. Ok, so that's it for Debian stable. Unstable is 99% the same, except that you do a "vi /etc/apt/sources.list; apt-get update; apt-get dist-upgrade". I'll do that later maybe, compare the findings, and report notable differences here, but it shouldn't be too many (I guess). Not today, though, I need some sleep now. Comments, suggestions, flames? Update 2006-05-19: Updated "why is Debian-exim capitalized?" info as per comments, thanks!

18 May 2006

Simon Law: Debconf 6, Day 3


Diving board
Originally uploaded by sfllaw.
The Internet connectivity here is not so great, which is why I'm posting journal entries in batch mode. The fact that we have Internet here is fairly impressive, because of all the awesome people who have climbed up on roofs and things. Now, the resort does not supply Internet so people had to figure something out. There's an ISP and Internet caf in town, but no physical link between them. So they've set up two antennas, one on the roof of the ISP, and we've got a wireless link. Then, they've strung switches and access points along the roofs of walkways to cover large parts of the resort with Internet connectivity. Sadly, there's a lot of latency associated with this. I went to talks for most of the day and was wandering around the HackLab at dinner time. I convinced [info]ze_dinosaur, and then Agnieszka and David, to go out to a steakhouse in town. We walked out of the complex and back into Rinc n del Viejo, where we all decided to order beef. My filet mignon was huge and tender and juicy and flavourful. The vegetables on the side were insipid, but the beef was just marvellous. Other people had other steaks, which were equally as tasty. We stuffed ourselves silly and then waddled out of the restaurant. There was some beer shopping done after dinner and I picked up of tuna. My companions thought I was crazy, but I thought it was brilliant.

Yum!
Originally uploaded by sfllaw.
After returning to the HackLab, we discovered that the Internet connectivity was being rejiggered to work better. So people were holding an impromptu dancing BOF, which looked quite fun. I found the wine and cheese BOF nearby and found a bit of room to eat some fancy cheeses. Some of them were very creamy, others very sharp, and still more which were deliciously pungent. Eric and I left for our room, where I put some tuna in a bowl. We then took them out to a walkway where we had some kitten sightings. After a bit of hesitation, some little furballs realized that the bowl was full of delicious food. I managed to get quite close to them and took as many photographs as I could. Their mother sat nearby, guarding them from predators, and keeping a watchful eye on me. There are four kittens in that litter and they are all so adorable. At one point, the orange kitten had his entire body in the bowl, to prevent everyone else from eating. After they had stuffed themselves, they started playing happily. They chased each other around, bounced about, and climbed trees. Then, the two big ones decided to play wrestle all over the grass. We basically suffered from cute overload and spent a long time going, "Awww."

Simon Law: Debconf 6, Day 2


Guacamole y totopos
Originally uploaded by sfllaw.
I woke up early Monday morning, showered and got dressed. You know there are now six people in our hotel room. Simon, Eric, Blars, M ritz, Jimmy, and I have to share one shower which makes the process a bit slow. And this shower is a push-button shower that you have to hold in order to keep the water running. And the water never really gets hot. I was typing on IRC and found Matt Zimmerman on-line. We started chatting and noticed that we were in the same room. I tried looking for someone wearing a grey hat, but couldn't find him until I looked beside me. There he was, having sat down right next to [info]ze_dinosaur. Since Mark Shuttleworth is my boss, I paid attention to his talk, and noticed that bug 35051 popped up during the presentation. You know you've been staring at too many bugs when you know which ones they are in the bug tracking system. I talked to Matt a bit about work, because Debconf is a good time to talk about QA, right? We finished up our discussion, typed a bit on our laptops, and decided that food would be a good idea. We found some people from Intel, who introduced themselves as Mike, Mark, and Denise. I thought that Denise's name sounded familiar and then I realised that she's Denise Cooper, who worked on opening up Sun's source code. I was so happy to finally meet her, since we had talked years ago. We walked towards town to get some better food and picked up Blars. Then we saw [info]xtat, whom I knew only from LiveJournal, and his girlfriend. I invited them to join us and we walked around town for a while. We went to this Argentinian restaurant, called Rinc n del Viejo, that had napkins on the table. I didn't want to get my hopes up, so I expected something plain, but everything was incredibly delicious. We started with some wonderful empanadas, a delicious tomato salad, and guacamole y totopos. Then I ate queso con chorizo. By the time we finished, we were all completely stuffed.

Mural
Originally uploaded by sfllaw.
We picked up some pesos and then decided to walk off this big meal. We went exploring the town and wandered about a bit. We hiked up a hill and found a street full of vibrant colours. I realized that we were in the construction district, with stores selling paint, lumber, sinks, pools, and even hand-painted tiles. A little bit further on, past some clothing stores, we found a very cute hotel that looks like it would be really fun to stay in. We found a daycare with an awesome wall, with little figures dancing about. There was a little kid who was standing inside a florists, drumming on the counter and looking very bored. Another child ducked into a used television shop. After about an hour or so, we were hot and thirsty so we decided to head back. But before we returned to the resort, we stopped at a fruit store and picked up some fruit for breakfast. Boy, oh boy, is that fruit every good. Mangos were fragrant and sweet and juicy. Bananas are just heavenly. The plantains were just wonderful. If only we could get fruit like this in Canada. And I don't even like eating fruit.

Adam Rosi-Kessel: Webloyalty Call Center Reps

My blog has apparently become a canonical source (at least by PageRank) for the Webloyalty Scam (see also this update). It’s been about 18 months since I first posted about it—since then that page has gotten over 40,000 hits and over 1,000 comments. Perhaps the best testimony about this company comes from its own employees. At least two people purporting to be Webloyalty Call Center Representatives have posted comments to that entry; in both cases, the IP addresses resolved to a Connecticut location, so it is at least plausible that these people really work for Webloyalty. Here’s the most recent comment, posted from 69.183.205.129:
WOW!! The level of stupidity on this board is incredible. You people don’t get it, do you?? Webloyalty didn’t sign you up for anything. You signed yourselves up. The details are right there, in plain sight, in normal sized text, right in front of your faces. It details EVERYTHING, including the cost of the service and the billing cycle. The problem is that all of you idiots chose not to read it. You saw “free”, and figured “gee, something free for me? golly, I must be special”. WRONG!! YOU’RE NOT SPECIAL, YOU’RE JUST FUCKING LAZY AND STUPID!! YOU SIGNED YOURSELF UP! NOTHING HAPPENED AUTOMATICALLY!! THERE WAS NO SLIGHT OF HAND OR MISLEADING WORDING!! The bottom line is you’re all a bunch of stupid, lazy, crybabies who don’t want to take any responsability for your actions. NONE! Well, thats what you get for being stupid and lazy. LEARN TO TAKE RESPONSABILITY FOR YOUR OWN ACTIONS. DON’T POINT THE FINGER AT OTHERS AND CALL THEM “THEIVES” AND “SCAM ARTISTS” AND BLAME THEM FOR YOUR OWN STUPIDITY. YOU ALL MAKE ME SICK!! FUCKING CRYBABIES!!!!
And here’s another for a few months ago:
comment: I’m a rep in the call center at Webloyalty. I have no pity for any of you people. You’re all suckers, plain and simple. Didn’t anybody ever teach you that nothing is free? When all of you idiots made your purchases on whatever website you did business on at the end of your transaction there was an offer asking if you wanted to save $10, or get award miles, or whatever. When you clicked on that link you were not automatically signed up. What happens is that you’re brought to the Reservations Rewards website. On that website it tells you that you are on the website for Reservations Rewards. You see, you can tell that because the banner at the top of the site says “Reservations Rewards”. Unfortunately you were too stupid to notice or remember. It then gives you instructions on how to redeem your “reward”. At that point you are instructed to enter you email address in twice and click accept. Now you have to manually type in the email twice in those boxes. No cut and paste is allowed. Then it tells you to click accept. Now, if you had any fucking brains in your head you would have noticed that right above the box where you enter your email mail address its says, in regular sized type, in plain sight, right out in the open, that entering your email twice will act as an electronic signature and that by clicking accept you are accepting that the website you just made a purchase on can share the billing information with Reservation Rewards. Also in the big box next all of this it gives the exact details of what you are signing up for, again in regular sized print, in plain sight, right out in the open. If you are too stupid to take the time to notice all of that then you deserve what you got. which was a membership in a overpriced bullshit ptogram.
>



Webloyalty depends on idiots like you to not notice this stuff. To be blinded by the idea that you are getting something for “free”. To not look at you credit card statement so charges go through every month. Its unbelievable the amount of dummies out there that fall for this stuff. Even if you do catch the charges eventually, and get a refund they still made money off of you by collecting interest on your money when they had possesion of it. Stay a member or cancel its win-win for webloyalty.
>



So, anyway I hope all you dummies learned a valuable lesson and wont fall for this again. I’m sure many of you will, though. You’d be shocked at how many people are repeat members where they canceled the service a while back but fell for the scam again a few months later.
>



Perhaps the funniest thing about my Reservation Rewards entry is that I get emails every day or two from people asking me how to get them to stop taking their money. There are, in fact, over 1,000 testimonials (including my own entry) explaining exactly how to get them to stop charging. Every few months, I receive an email from someone furious at me for charging them all this money. I wonder who these people are who get as far as doing a Google search to find my entry, but can’t seem to figure out that I have nothing to do with the company.

16 May 2006

Wouter Verhelst: Kerberos: final note.

Just a little followup to my two previous blog posts about kerberos: Kerberos needs a few things to be set up correctly before it'll work. If you've set up everything correctly as I explained it previously, and it doesn't work, make sure you have these done right: Posted since I just revived newwave, my Quara 700, which hadn't been kerberized yet, bumped against the latter of the above two points, and played with the machine for a few hours until I realized what the problem was... and because this wasn't the first time that it happened and, I guess, not the last time either.

Next.

Previous.