I'll be 0x24 (hex) or pow(6,2) (dec) years old next Sunday and it is becoming obvious that I need to change my lifestyle. On the physical side I'm sure that I have to loose between 20 and 30 Kg. if I don't want to have health problems in the future. The plan is to change my eating habits and do sport regularly. The basic idea is to do a diet seriously and keep part of the rules more or less forever (that's the habits change); the other important thing is to do some exercise, I've never liked sports too much, but I'm sure I can try to walk some days and swim others (I've been going once a week to the swimming pool during the last months and I'll be doing it twice a week starting this September). On the mental side, I need to reduce my obligations and care less about the work problems in and out of the office. To reduce my obligations and have more free time I decided a couple of months ago that I was going to leave the Uni, as it was taking away a lot of time that I can use for more important things; I notified it and after this September I won't be working for the Universitat de Val ncia anymore. Initially my idea was to keep my main work and use some hours each week to work on my PhD Thesis, but the truth is that I'm not interested anymore; I don't have anything specially interesting to say and my main motivation for getting a PhD has also disappeared (at some point I thought about becoming a full time University professor, but after three and a half years I've had enough, at least for a looong while). This leaves me with my work at the ITI as my main and only work, but after some months I'm seriously considering leaving it also. My main problem there is that I believe that I'm starting to suffer the Peter Principle or something similar; almost all my professional career I've been working as a technician, first as a programmer and sysadmin and lately as analyst and team leader or technical manager, but now, as it seems to happen always in the Spanish IT companies, I'm being forced to move to a pure project management work and, to be fair, I don't like it. I don't know if that means that I'll get to my level of incompetence, but if that is the case I think I'll have to try the Peter's Parry, that basically means to refuse a promotion (I've already done it asking to get a place under my theoretical level, although not on a convincing manner, it seems) or use the Creative Incompetence technique, that is, give the impression that you have already arrived to your incompetence level (probably it is too late to do that at my current place, but maybe on the next one I'll be able to do it). Maybe this is not the last level of the Peter Principle, as I'm sure that I can and will do this work (I'm thinking about moving, but I will not do it until I have a plan for the future, and that will probably mean a new job), but I'm also sure that I will never do it as well as I can do technical tasks because I don't have any real motivation to do it and while I plan to get the skills needed, they are not attractive to me. I understand that on the current IT world we need to have project managers, and I really hate bad managers, but that does not mean I like to become one, I prefer to be a team leader and work only on one or two projects at a time, instead of having more than five and not do real work in any of them; my main problem is that the challenges and tasks a manager has to do have nothing in common with the things I like from computer science and I'm too perfectionist to handle people that does not care about how things are done in a lazy way (a team leader with a couple of projects can handle technical people, when you are a manager with multiple projects you miss the day to day perspective and problematic people is more difficult to handle). Oh well, we will see how things evolve. The good thing is that I believe that one way or another I'll end up having a better life and, if I'm able to care less about my own work (and the one done by others) maybe I'll be able to stay at an acceptable level on the hierarchy without getting burn out and maybe some day I'll be able to work again on the things I like and keep my promises.

It turns out I was playing Don Quijote when I was trying to fix the reset issues I had with my slug.

Of course, I was suspecting the USB rack for the issues, but the issues never showed up on the laptop... until now.

I decied to temporary use a USB stick for the FS and started copying files over to the stick. During the copying the rack disconnected and everything became more clear. I was tilting at the windmills all the time.

BTW, be smarter than myself and just change the UUID to mach the old one instead of regenerating the initrd and reflashing it:

tune2fs -U the_uuid_of_the_previous_root_partition /dev/sda1


Oh, next on the agenda will be to use my ipod mini as a hdd for the slug in order to prevent ruining the stick... And another thing, total silence is really nice, even if the rack was not that noisy.

Due to the generosity of the administrator team from TuxFamily.org, I can now run rebuildd on octave, their (spare) HP NetServer LXr 8500 (8xPIII 500 MHz / 2 GB RAM). Which is quite faster that the P4 1.4 GHz I used for my first tests. I can now run 24 builds in parallel.

No, that’s not a joke. Today I had to (hard-)reboot one of my servers because the console newsreader slrn produced such a high load on the system that it was everything but responsive as a consequence. Huh. What? Yes, right. It was the fault of slrn. I had not set up any default limits on the server yet (stupid, me) but finally I could find and reproduce the source of the problem under the control of pam-limits. What was going on? slrn failed at processing a message on gmane.linux.debian.user.german. It always hang at the same message. Via setting ‘limit addressspace 62000′ and therefore causing slrn to fail with ‘Memory allocation failure.’ instead of requesting more and more resources I could find the origin of the problem: slrn fails to parse the X-Face header in my UTF8 enabled setup. *gna* Looks like I’ve to investigate on that in further detail… In the mean time I set up limits and a monitoring system…

I’ve created a page about translating my blog. Currently it has the following text: If you would like to translate any posts from my blog to a language other than English then please feel free to do so. I demand that any translations correctly cite me as the author of the original English version and give a permanent link to the original post, but I don t expect that this will cause any inconvenience. I also request that anyone who translates one of my posts gives me permission to do whatever I wish with the translated text (I want to mirror all translations of my work on my own site). I am unsure of what legal rights I have to demand this and have not yet considered whether I have a moral right to demand it. But I believe that it is the nice thing for a translator to do and hope that everyone who translates one of my posts will do so. Also I may grant permission for translations of my posts to appear on sites with Google advertising or other commercial use. I won t rule out the possibility of assigning monopoly rights on commercial use of the translations of my posts to specific individuals or organisations. Does anyone have suggestions for improvements? One of my multi-lingual friends suggested that I should be concerned about the risk of bad translations. But I desire to have people read my posts and I believe that this is a risk I just have to accept - I’m sure that there are enough multi-lingual people in the blog space to find such errors and help the translator correct them. Also I have to consider the best way to mirror the translations. I could add them to the same permalink page (producing long pages with multiple translations of my best posts), I could create a new post (resulting in English-language Planet installations getting posts that most people can’t read), or I could use a separate blog installation for the translations. Please comment if you have any suggestions. I’ll write another post in future with the solutions that I select and some analysis of the issues. Update: Thanks for the nice post Victor. It was seeing my blog in the list of “Enlaces Interesantes” on Victor’s blog that inspired my post about translation.

Share This

I am playing with the thought of using IMAP to send email from my mobile clients. The way this works is that mail is actually placed into a Maildir locally and synchronised with the IMAP server using a tool such as offlineimap. The Courier IMAP server supports such an outbox feature, for other servers you can use inotify or a cron job (I am planning to publish a writeup about my new mail setup sometime soon, so no scripts linked here yet). Anyway, it's trivial to get it working, and Dann Frazier has written it all up. The question is more whether I want to, or not. I am soliciting feedback. The advantages of using an IMAP-synchronised outbox are:

• The ability to review all mail to be sent while still offline. Using mutt, you can even edit them after "sending" but before they are actually sent. Undoubtedly, doing this often should be a hint to take more time before sending a message. However, at times there are good reasons why one might want to change a message which was composed e.g. on the plane (or not send it at all), and having to remove the message from the MTA queue and recreate it with the desired changes is unnecessarily time-intensive.

• Wherever you may roam, you can send mail even if port 25 is blocked (provided that the IMAP or SSH ports are open).

• All your mail is sent by a single host, so you don't have to worry about blacklisted IPs or disclosing information about your whereabouts.

• It's trivial to post-process mail, including training spamfilters with it (as ham) through a server-side pickup script, as well as e.g. checking for missing attachments locally (you need a local sendmail script for reasons documented here).

Any solution with advantages comes with disadvantages, and these are:

• Added complexity and brittleness: having mutt pipe mail to a custom sendmail-replacement script, which puts a message in place for synchronisation with offlineimap, and a server-side cron-job calling another custom script which pipes the mail(s) to be sent to the real sendmail binary all just seems a little less trustworthy than good ol' postfix delivering mail via a TLS-encrypted, client-cert or SASL-authenticated SMTP channel to a known mail relay.
• It's non-trivial to get meaningful notifications in case delivery of a message failed.
• Messages are only sent after IMAP synchronisation carried the mails to the server and the server-side pickup process sent them on. In my setup, this could introduce a delay of 30 minutes even when online, which may be rather undesirable in urgent matters. On the other hand, such delays could easily serve to reduce stress levels (I realise that's not a problem with a technical solution though).

Can you think of any other advantages or disadvantages? Do you use an IMAP-synchronised outbox and would like to share your experiences with me? Or do you have yet another solution? Write to me! NP: OSI: Free

After reading Mike Hommey's idea about buildd network for QA testing, I decided to try to implement the 10.1 policy recommendations check using rebuildd. Here is how I proceeded. Install and configure rebuildd This is done by apt-get install rebuildd. Then, init database (I use sqlite) with rebuildd init. Then I initialized build system with rebuildd-init-build-system. I had to add nostrip to DEB_BUILD_OPTIONS, so I decided to do quick and dirty and I edited /usr/bin/dpkg-build-package adding the good export info in the first lines. Configuration file and post build cmd My configuration file is simple and the one by default: I only changed email addresses and add a post_build_cmd script. Here's the code for the script:

#!/bin/sh
dist=$1
pkg=$2
version=$3
arch= dpkg --print-architecture 
RET=0
cd /var/cache/pbuilder/result   exit 1
for file in $(grep '.deb$' $ pkg _$ version _$ arch .changes  cut -d\  -f6)
do
	echo Checking $file for stripped binaries...
	echo ---------------------------------------
	mkdir /tmp/$file
	dpkg -x $file /tmp/$file
	find /tmp/$file -type f   (while read line
	do 
		L=$(file $line   egrep 'ELF.*, stripped')
		if test ! -z "$L"
		then
			echo $L
			RET=1
		fi
	done; exit $RET)
	RET=$?
	rm -rf /tmp/$file
done
echo
echo ...done
echo Removing result files...
for file in $(grep-dctrl -sFiles . $ pkg _$ version _$ arch .changes   sed '1d'   cut -d\  -f6)
do
	rm -f $file
	rm -f /var/cache/rebuildd/build/$file
done
rm -f $ pkg _$ version _$ arch .changes
echo ...done
exit $RET

Fille the db Then I fill the database with:

grep-dctrl -sPackage,Version .  /var/lib/apt/lists/ftp.fr.debian.org_debian_dists_sid_main_source_Sources   cut -d: -f2-   tr '\n' ' '   sed 's/   /\n/g'  sed 's/  / /'   xargs -L1 -ixxxxxx echo xxxxxx sid   rebuildd-job add

And finally I just have to start rebuildd and let it do the job. Argh, already 3 build logs received with stripped binaries Update: Bug list can be found here

Update: it didn't work .... :((

eddy@ritter ~ $ grep '##### kern' -A 2000 /var/log/syslog grep -E '(reset ####)'
Aug 6 11:19:00 ritter manual message: ##### kernel was changed to linux-image-2.6.18-4-ixp4xx_2.6.18.dfsg.1-12etch2.1_arm.deb #####
Aug 6 11:23:08 ritter kernel: usb 3-1: reset high speed USB device using ehci_hcd and address 2
Aug 6 11:35:15 ritter kernel: usb 3-1: reset high speed USB device using ehci_hcd and address 2
Aug 6 11:52:41 ritter kernel: usb 3-1: reset high speed USB device using ehci_hcd and address 2
Aug 6 11:54:47 ritter kernel: usb 3-1: reset high speed USB device using ehci_hcd and address 2

---

I cross built this:

Changes:
linux-2.6 (2.6.18.dfsg.1-12etch2.1) stable; urgency=low
.
* Non-maintainer upload.
* ixp4xx kernel:
Disabled options:
- USB_EHCI_SPLIT_ISO
- USB_EHCI_ROOT_HUB_IT
Enabled options:
- USB_BANDWITH

And it took me on my amd64:

real 105m0.331s
user 79m43.423s
sys 12m46.324s

Is not an upload, is just my try to fix this issue. Let's see if it works.

Oh, thanks to Riku for pointing out that cross building the kernel is trivial.

Cerise Magazine publishes an interview from Ariel Wetzel with me in this month’s edition. Cerise is a magazine made by and for women gamers, and they are dedicated to increasing the voices of underrepresented identities in the game develop industries and in gamer communities. It is a monthly publication released in the form on an online magazine that covers video games, tabletop games, and live action role-playing. Quoting from their web page: “We are dedicated to creating an inclusive space for individuals of all identities traditionally underrepresented in the mainstream, and for our allies who support our movement to increase our presence and representation in the game industry. We are a feminist publication and oppose all forms of oppression and the ways in which that oppression manifests itself in game communities“. Yay for them!

I received a private email in response to my post about getting work in another country regarding hotel prices in London. The person who sent me the message had considered London but ended up moving to Japan instead partly due to living expenses (although Japan seems unlikely to be much cheaper). The first issue concerns security of hotels. When living in hotels (for almost a year in London and about 6 months in the Netherlands there were a few occasions (IE one brief occasion every 4+ months) when I left my laptop under my bed at a hotel, but almost all the time I took it with me. At that time I aimed to have a minimal set of luggage, one large suitcase containing clothes, books, etc (things that are generally not worth stealing) and one small case containing my laptop, digital camera, passport, and other small things that are valuable or which would cause excessive inconvenience if I lost them. Also in the small case I would take fragile items. Then when leaving my hotel I would pack most of the items from the small suitcase (pretty much everything apart from the digital camera) into my laptop bag and take it with me. This limited my losses from hotel thieves to a digital camera (no incriminating pictures and I could always buy a better one) and a couple of bottles of liquor. Good hotels have a hotel safe which you can use. But for a cheap (affordable) hotel there is no such option. Hotels in London ARE expensive, but if you are prepared to lower you standard of living they aren’t too expensive. One thing to note about UK hotels is that the idea of having a toilet and shower in every room is a new concept and all the cheaper hotels lack this. It’s a standard feature for a hotel to have a wash-basin in every room, a toilet is optional, and a bath or shower is another option. There are various types of shared bathroom in UK hotels. The better ones vaguely resemble the facilities you might expect to find at a public swimming pool (large spaces, clean tiles everywhere, and a changing area in addition to the toilet and shower cubicles). The worst ones are basically what you might expect to see in a private home but with less cleaning. To get the best deals on small hotels in London you have to find an area where there are many hotels and inspect them. It is quite acceptable to ask for the key to a room so that you can inspect it and determine if you want to rent it. One area where I lived for some time in London is near Victoria Station. Victoria is one of the largest stations in London, it has both a Tube (underground/metro for trains within the city) and a British Rail (for travel to other parts of the country) station. Victoria Station also had facilities for checking in to a flight and having your checked luggage delivered to Gatwick airport via the Gatwick Express. This was really convenient, you can check your luggage and then do some last minute shopping before going to the airport! I’m not sure if they still do this though (comments appreciated). Another good thing about Victoria Station is the large shopping area which included a tourist information centre and a store that sold freshly baked bread. Often in the morning I would buy bread from the section that had the most steam coming from it (which was the most freshly baked) before catching a train. Victoria Station is quite near many of the places you want to visit in London so I could walk to the British Museum and other places that are worth visiting (this depends on how fit you are). But the real reason for staying there is that the were many cheap hotels in the area. I could just walk down a street and know that I could find a room at one of the hotels. One feature of UK hotels is that they almost always include free breakfast as part of the deal (with no option to exclude it). Of course this means that if you are capable of eating a significant breakfast and then skipping lunch then you can save some money. A down-side to cheap hotels is that they almost never have a telephone in your room (just a pay phone in the hall), and if they do have a telephone then it will be wired in. Before wireless net access became common this was a problem as you couldn’t use a modem. More expensive hotels had an extra socket for a modem. In London there is a significant number of people who stay in hotels from Sunday night to Thursday night with their company paying (so they don’t stay in the cheap hotels). This means that most of the good hotels have cheap rooms on the weekend. So while living in London I would often stay at a good hotel on the weekend to get net access (and a few days in a luxury hotel at a cheap rate is a good change from a cheap hotel). Nowadays wireless net access is common so it would be easy to find a free access point anywhere in London and there would be no need for this. But the possibility of getting cheap hotel rooms on the weekend is something to keep in mind. One benefit of this was when I had an employer paying for my hotel bills from Sunday night to Thursday night (as part of a deal to placate my colleagues who complained about working at the other side of London). I spoke to the hotel manager and suggested that having me check out every Friday and have the room empty on the weekend was not good for them and that they should offer me a significant discount to stay 7 days a week - they made me a good deal! At that time I had the lowest cost of living apart from when I lived with my parents while the hotel in which I stayed was quite comfortable (a large comfortable room with toilet and shower and a good hotel breakfast). Moving to the Netherlands was quite easy for me as I was staying in hotels. All I had to do was to pack my suitcase, check out of the hotel, and catch the flight. One significant advantage of living in hotels is that you can easily move to another region or country. This gives the possibility of taking advantage of career opportunities that would not be possible if you owned a house and would be difficult if you rented an apartment. When in the Netherlands I ended up staying in hotels of the Bastion chain (a chain or franchise of business hotels). I stayed in a couple of other hotels first and wasn’t particularly happy but with Bastion hotels I was always happy. I arranged a deal of a small discount in exchange for not getting the breakfast that was normally included (I like to sleep in and the Dutch breakfast didn’t appeal to me). One significant benefit of the Bastion hotels over London hotels was the size. The smallest room had two single beds, a large Dutch-style bathroom, two chairs at a desk that spanned about 3M of a wall (with multiple power sockets and a phone socket), and a good TV. At the time the hotel would play two movies over the TV system every night from video cassette. The videos played on the TV in the restaurant and in the rooms (if you selected the appropriate channel). Once I became known to the staff they would do nice things such as playing the movie I requested (instead of the scheduled one) and pausing the movie when I finished dinner so I didn’t miss anything while walking to my room. Also instead of giving me a free newspaper every day (in Dutch) they gave me some free drinks vouchers every week. Once you become a regular customer at a hotel the staff are always willing to change the deal to make you happy - even when it’s a chain. One of the convenient factors of living in a business hotel is that they are located near business areas. I spent several months living in a Bastion hotel that was about 400M walk from the office where I worked. That was particularly convenient when the network broke at night - I could just walk back to the office to fix it! The deal I had with the Bastion hotels made them about 50% more expensive than the (fairly luxurious) two bedroom apartment that I later moved to. So hotels are expensive and living in them is only an option if your employer pays for it or if you work in an industry where pay is reasonably good. Given that the vast majority of people who read my blog work in the computer industry (and I suspect that they are better paid than average) this should be a viable option.

Share This

A friend recently asked for advice on a “REALLY small laptop/word processor thingy that would pretty much fit into a (big) pocket, and that only needs to write/word process“. The first problem here is that most people associate “word processing” with desktop publishing and document management. Programs such as MS-Word are considered as having the features required of a word-processor (which includes spelling and grammer checking/correcting, annotations, colours, etc). Programs that have all those features take a lot of CPU power. A Pentium-4 system might be considered the minimum requirement for running a recent version of MS-Word. But a hand-held device can’t have such a powerful CPU (it’s too small to be able to dissipate the heat from such a CPU or contain batteries that can produce enough power to tun it). The next problem is the issue of screen space. A VGA resolution screen (640×480) is regarded as high resolution in the PDA market. Such a resolution does not work with a word-processor that has three toolbars at the top of it’s screen and a paperclip taking up space at the bottom right! I’m sure that everyone who was using computers in the early 1990’s can recall the minimal word-processing programs. One thing to consider is that 640×480 in a 15 inch CRT screen is much more useful than 640×480 in a hand-held device as the larger screen can have fewer pixels per character and therefore display more text on the screen. An added complication is that there are two methods of input for PDAs. One is to have a hardware keyboard (which may be a separate device or may be part of the PDA) and the other is to have a keyboard displayed on the screen. A hardware keyboard makes the device larger and a software keyboard takes up precious screen space (you just can’t win). My PDA is an iPaQ model h3900. It has 64M of RAM, 32M of flash, no hardware keyboard, and a screen resolution of 320×240. I have done some serious writing on my iPaQ (including writing an entire article for Linux Journal) and it works reasonably well. For serious writing you can produce plain text on a PDA and then easily paste it into your program of choice on a PC later (PDAs generally support connection to a PC via serial port and/or USB). The challenge is editing files that originate on a PC using a PDA. Generally I try and use HTML and TeX for my formatted documents so the text versions of those formats are easy to edit once you have learned them. Taking data from a MD-Word file, editing it on a PDA, and then taking it back to the PC would cause many problems and probably wouldn’t be worth attempting. Recently I have been using my iPaQ for writing notes about email and blog posts that I will write. If I get an idea then I immediately write some notes about it on my iPaQ and then usually type it again instead of downloading it. For example the notes for this post were “write about RAM, storage, and screen resolution”. Often getting the initial ideas to start writing is the hard part. Writing a 500 to 1000 word blog post or message is easy once I have the ideas. If I was going to buy a new PDA now I would prefer one with a hardware keyboard, the loss of screen space for a keyboard on the touch-screen is a serious impediment to writing. The maximum amount of text that can be displayed on the screen at any one time limits the complexity of what I work on (see my post about monitors for developers). Another factor is the fact that for small notes the amount of time taken to remove the stylus from it’s bay is greater than the amount of time saved by using it. So I end up writing small notes using my finger-nail on the touch-screen which is significantly slower than using a keyboard (even the crummy ones that PDAs have). Of course the keyboard would still have to be QWERTY and have raised keys so that I can touch-type. I haven’t investigated this seriously as my iPaQ is good enough to last me for another year or two at least and I’ve got an unused spare iPaQ to replace it when it fails. But if anyone has any recommendations of Linux based PDAs with keyboards then I would appreciate some comments.

Share This

Free software projects are informal (though becoming more formal) institutions that function in multiple capacities. Foremost, they are sites that facilitate the production and distribution of technology but they certainly allow for and produce all sorts of other social facts and processes. And one of the most important is that free software projects function as quasi-educational institutions that are structured quite differently from formal educational institutions. And this blog entry by Justin Podur that reviews a book by Alfie Kohn of alternative eduction, reminded me just how much F/OSS projects are informal educational spaces but deviate significantly from traditional learning. I have more thoughts on the type of “schooling” F/OSS allows but since I am moving to my new apt. in a few hours, it will have to wait until later.

Julien's blog entry and some spare time lead me to try this powertop utility which I never heard about before. As a consequence, I ended up tine tuning a few parameters on my laptop, mostly sound card and wireless card energy saving parameters. I also finally turned "noatime" ON on my mounted partitions when the laptop runs on battery (I use laptop-mode for such automation). I was prevented to do so util now because mutt relies on access times to define whether mailboxes got new mail or not. However, recent mutt version now have "set check_mbox_size" which make mutt rely on the mailboxes sizes I still have fine tuning to do, mostly trying to get my hard disk really spin down in some occasions (mail reading, mostly) as well as automate the screen brightness, but this powertop utility is really worth it in the hunt for wasted energy. And, of course, installing it is just a matter of "aptitude install powertop", thanks to Patrick Winnertz who packages it. And thanks to Julien who blogged about Powertop, even for ranting about it...:-)

Anyway, back to pure Linux stuff. A while ago, the Ubuntu Technical Board were asked to take a look at Automatix. I've finally got around to doing so, and here are my initial conclusions. I'd appreciate any factual corrections, and note that at this point this is my individual opinion rather than any sort of official statement.

Automatix is a combination system configuration/package installation
tool, aimed at making it easy for users to install features like
graphics drivers, media codecs and software not distributed as part of
the Ubuntu distribution. It is provided as a .deb file containing a
python GUI frontend that calls out to a shell backend. The frontend
parses an XML file which contains module descriptions and function
names for installing and uninstalling modules, with these functions
being part of the shell backend. An install module will typically
check whether another package manager is running, and if not either
install a set of debs or download and manually install a
tarball. Uninstall modules generally remove the same software or clean
up the manually installed files.

The following is a list of identified issues with the current version
of Automatix - it is the result of a few hours of investigation, so
may not be complete.

• Automatix is, in itself, a poor quality package which fails to
  conform to Debian or Ubuntu policy.
  
  
  • It is inappropriately flagged as belonging to base
    
  • Depends on essential packages
    
  • Has a short description of more than 80 characters and no long
    description
    
  • Provides no email address in the maintainer field
    
  • Contains no copyright information in the standard locations
    
  • Ships a TODO file as a control file
    
  • Provides no man pages
    
  • Ships files in /usr/etc
    
  • Contains many files inappropriately flagged as executable
    
  • Changelog is in /usr/etc/automatix2/ax_data ?
  
  These issues are primarily cosmetic and in themselves are unlikely to
  cause any harm to the system.
  
• In debug mode, automatix will write files to your home directory as
  root. Again, more of an irritation than anything dangerous.
  
• Provides platform-specific data in /usr/share. Potentially an issue
  if /usr/share is shared between multiple architectures, but since
  Automatix is x86/amd64 only probably not a real problem.
  

• #!/bin/bash
  #created by arnieboy 
  foo= gksudo -u root -k -m "enter your password for gedit root access" /bin/echo "Do you have root access?" 
  sudo gedit $NAUTILUS_SCRIPT_SELECTED_URIS

  appears to be an attempt to ensure that the user has sudo rights. This
  will break if timestamp_timeout is set to 0 in sudoers - gedit should
  be run directly from gksudo. This is repeated in more than one
  place. The assumption that sudo will not need to prompt appears
  prevalent throughout the code.
  
• catagory_data.xml - nitpick, but should be category
  
• "Please NOTE that downloading and installing w32codecs, libdvdcss2
  and other non-free codecs without paying a fee to the concerned
  authorities constitutes a CRIME in the United States of America"
  
  Somewhat dubious legal advice - the issue has nothing to do with fees,
  and isn't just limited to the USA.
  
• Automatix checks that other package managers aren't running at
  startup (by grepping for a static list of application names in the
  proces list), but doesn't enforce this by carrying out any locking of
  its own. This leaves Automatix open to race conditions.
  

• if ps -U root -u root u   grep "dpkg"   grep -v grep;
     then
       killall -9 dpkg

  May well leave the system in an inconsistent and unbootable state, and
  is carried out without warning. This is entirely unacceptable and will
  leave a stale lockfile in any case.
  

• function reloadnautilus  
         killall -9 nautilus
   

  Not actually used anywhere, but could potentially lose user
  information without warning.
  
• Most install functions contain a sleep statement for no obvious
  reason. They then call dpkg_check, which sleeps again. It's not at all
  clear what this is meant to be doing.
  
• Passes --assume-yes to apt-get, which will (as a result) happily
  remove packages without giving the user an opportunity to
  intervene. This is especially bad when removing Automatix modules -
  any package that depends on one of the packages being removed will
  also be uninstalled, even if the package was originally installed via
  something other than Automatix!
  
• Has no internal dependency management. Unable to keep track of why
  packages were installed, so prevents the removal of the multimedia
  module because that would remove sections of other modules without
  explicitly removing that module. Installing swiftfoxplugins will pull
  in several plugin packages, but removing swiftfoxplugins will not
  remove them even if nothing else depends on them. Also means that
  package installation and uninstallation have to be manually kept in
  sync - uninstall will not always remove all packages that were
  installed.
  
• Has no concept of file tracking, so will just remove entire
  directories. Makes no attempt to ensure that a user-installed version
  is not already installed in the same location, so effectively assumes
  that the /opt namespace belongs to it.
  
• Will remove Ubuntu repository packages in favour of tarballs with
  no warning.
  
• Setting ctrl-alt-del to open gnome system monitor will destroy any
  existing user configuration for run_command_9
  
• Installing streamtuner will create a world writable directory in
  /opt/ripped with no sticky bit, allowing users to interfere with other
  users' files.
  
• mplayerplugin moves totem plugin files to a backup, but does
  nothing to prevent package upgrades of totem replacing them.
  
• Only updates the java link after installing new java, not the rest
  of the java alternatives
  
• amsninstall installs tls libs that are never removed, copying over
  the ones in the tcltls package. This means that the md5sums in the
  tcltls package will no longer validate.
  

• sudo ln -s /usr/lib/libesd.so.0 /usr/lib/libesd.so.1

  is really not
  such a good idea.
  

• ln -s /tmp/.esd-1000 /tmp/.esd

  looks like it'll only ever work for
  the first user on the system, and there's nothing to recreate it on
  boot.
  

• sudo sed -i "s/^vboxusers\(.*\):$/vboxusers\1:$AXUSER/" /etc/group

  - assumes that the system isn't using some sort of user directory
  service.
  
• installs truecrypt suid root - not ideal, given its less than
  stellar security record
  
• Unmounts filesystems without checking to ensure that the unmount
  succeeded.
  
• Deletes lines from fstab and replaces them with device nodes
  rather than uuids.
  
• Includes acroread 7.0.9, despite the new Acrobat license appearing
  to grant no right to redistribute.

Conclusion:

Automatix exists to satisfy a genuine need, and further work should be
carried out to determine whether these user requirements can be
satisfied within the distribution as a whole. However, in its current
form Automatix is actively dangerous to systems - ranging from damage
to small items of user configuration, through removing user-installed
packages without adequate prompting or warning and up to the (small
but existing) potential to leave a system in an unbootable state.

The current design of Automatix precludes any reasonable way to fix
some of these problems. It is attempting to fulfil the role of a
high-level package manager without actually handling any sort of
dependency resolution itself.

A more reasonable method of integrating Automatix's functionality into
Ubuntu would be for the Automatix team to provide deb files to act as
installers for the software currently provided. These could then be
installed through the existing package manager interfaces. This would
solve many of the above problems while still providing the same level
of functionality.

In its current form Automatix is unsupportable, and a mechanism for
flagging bugs from machines with Automatix installed may provide a
valuable aid for determining whether issues are due to supported
distribution packages or third party software installers.

The downside of NYC is that it is pricey but the upside is that there are a lot of free events to balance out the equation. Last night, I went to one of such free events at Lincoln center to see one of my favorite Puerto Rican folk singers, Roy Brown who was opening for Arlo Guthrie During Roy Brown’s last song, he called out another folk singer who I had never heard of Tao Rodriguez-Seeger to join him and I think that was probably one of my favorite songs of the night. Tao who comes from a family of folk singer types, usually performs with The Mammals and less frequently with The Anarchist Orchestra. His voice, at least in Spanish, is resounding and overpowering yet at the same time sports a certain type of gentle softness. It is striking and beautiful. If you like folk music, in English or Spanish, I would check him out. Here is a clip of a song recorded with Tito Auger and Roy Brown and a link to their recent complilation CD.

The main reason for the lack of activity during this week was that I had some problems with my router, a NSLU2 running the debian arm port. This was the machine I wanted the softfloat rrdtool I was talking about in these 2 posts.

It turns out that for some weird reason the USB controller of the slug resets when there is too much traffic going on. I got lots and lots of messages like:


$ grep reset -A 1 /var/log/syslog grep -E '(reset repeated)'
Aug 3 07:02:27 ritter kernel: usb 3-1: reset high speed USB device using ehci_hcd and address 2
...
Aug 3 11:50:29 ritter kernel: usb 3-1: reset high speed USB device using ehci_hcd and address 2
Aug 3 11:51:03 ritter last message repeated 4 times
Aug 3 11:53:15 ritter kernel: usb 3-1: reset high speed USB device using ehci_hcd and address 2
Aug 3 11:53:46 ritter kernel: usb 3-1: reset high speed USB device using ehci_hcd and address 2
Aug 3 11:55:48 ritter kernel: usb 3-1: reset high speed USB device using ehci_hcd and address 2
Aug 3 11:56:07 ritter last message repeated 2 times
Aug 3 11:56:52 ritter kernel: usb 3-1: reset high speed USB device using ehci_hcd and address 2
Aug 3 11:56:57 ritter kernel: usb 3-1: reset high speed USB device using ehci_hcd and address 2


That wouldn't have been a problem as long as the damn thing worked, but in some cases after the reset the root filesystem was lost and all the services running on the machine died (except the networking itself since all of that is part of the kernel and is loaded in memory).

It took me about three evenings to get to this conclusion (imagine being locked out of a machine which advertised running ssh, http, and dns services, being able to telnet and getting a respons, but the full protocol failed).

It all became more clear when, while being connected via ssh I got his result:

eddy@ritter ~ $ ls
-bash: ls: command not found

"WHAT?" was the first reaction, then I figured that life without ls is unbearable and came up with this bit:

alias ls='for I in * ; do echo $I ; done'

Quite cool to understand a little bit about the system. Still, cat was unavailable so having /proc and /sys available did not help that much. At some point I was thinking about a busybox shell, tried that, it didn't work since it wanted to remove some important bits like the initramfs tools.


I googled again and found a good starting point for a discussion of the same problem someone else was having. I ended up trying all the proposed solutions: rmmod-ing ehci-hcd, blacklisting the module, regenerating a initrd image with the blacklisted module... None of these worked (individually) and I ended up having an even more unstable system when ehci was not present (I was loosing the root FS after aprox. 1 min after logging in remotely immediately after start). Restoring the image with ehci was a pain (not to mention the time spent trying to figure a way to revert the change safely, since bricking the machine was not out of the question - imagine loosing the FS while flashing the ram drive image).

I finally managed to revert the ehci enabled image and tried the workaround proposed in this gentoo BR. I tried 128 and now I am at 64 and I am still getting those resets; Still something good came out of this, I followed Michael Prokop's Use root=UUID on NSLU2 article and I think I have now a stable root file system just thanks to him.

Now I am stuck:


grep -E '(max_sect reset)' /var/log/syslog
Aug 3 07:02:27 ritter kernel: usb 3-1: reset high speed USB device using ehci_hcd and address 2
Aug 3 08:27:38 ritter kernel: usb 3-1: reset high speed USB device using ehci_hcd and address 2
Aug 3 08:38:43 ritter manual message: max_sectors was set to 128
Aug 3 08:55:25 ritter kernel: usb 3-1: reset high speed USB device using ehci_hcd and address 2
Aug 3 09:31:47 ritter kernel: usb 3-1: reset high speed USB device using ehci_hcd and address 2
Aug 3 09:54:11 ritter set_max_sectors: max_sectors was set to 128
Aug 3 10:09:32 ritter set_max_sectors: max_sectors was set to 128
Aug 3 10:15:27 ritter set_max_sectors: sda's max_sectors was set to 128
Aug 3 10:24:24 ritter set_max_sectors: sda's max_sectors was set to 128
Aug 3 10:38:12 ritter set_max_sectors: sda's max_sectors was set to 128
Aug 3 10:47:04 ritter kernel: usb 3-1: reset high speed USB device using ehci_hcd and address 2
Aug 3 10:48:27 ritter set_max_sectors: sda's max_sectors was set to 64
Aug 3 11:04:36 ritter kernel: usb 3-1: reset high speed USB device using ehci_hcd and address 2
Aug 3 11:06:16 ritter kernel: usb 3-1: reset high speed USB device using ehci_hcd and address 2
....
Aug 3 15:05:58 ritter kernel: usb 3-1: reset high speed USB device using ehci_hcd and address 2

Should I try setting to 32?

In case you're wondering, I am doing the setting with this script:

#!/bin/sh

MAX_SECTORS=64
DISK=$(ls -l grep 'uuid.* / ' /etc/fstab awk ' print $1; ' sed 's#.*/\(.*\)$#\1#' tr -d '[0-9]')

[ -z "$DISK" ] && logger -t 'set_max_sectors' "error: could not detect root disk" && exit

echo "$MAX_SECTORS" > /sys/block/$DISK/device/max_sectors
logger -t 'set_max_sectors' "$ DISK 's max_sectors was set to $ MAX_SECTORS "

exit 0


Dear (not at all) lazy web, what can I do to fix/workaround this issue? Any help would be gratly appreciated (personal mail or comments).

Note: I am reluctant to try the fix proposed in the last comment that claims to fix the issue since compiling an arm kernel natively is a pain and I would like to have an official kernel from Debian Etch, as I do now.

A recent thread which started on the Debian Release mailing list caught my eye this week. I attempted to aid the migration of this thread to the debian-ipv6 mailing list, which is really a better place for this and sorely in need of controversial topics for discussion. It is interesting how people can so blindly decide that broken things should be destroyed. Repair often appears not to be an option, even for a long-term, wide-reaching effort like this, though we are all working on open-source software! In this case there are an unknown number of less fortunate people in the world who are located behind some kinds of broken DNS infrastructure which discards 'AAAA' lookups. Of course 'AAAA' lookups are attempts to resolve a name to an IPv6 address, and the resolver in a 'modern' libc (i.e. one from the last five years or so :-) will try to retrieve an IPv6 address before it attempts to resolve a name as IPv4 with an 'A' lookup. That is how the standard is written, so if you want to comply with the standard you have to do it that way. Other things also interfere, but this element of the specified behaviour seems to cause the most annoying and pointless whingeing I have heard. I suppose that the people who want working IPv6 make it so, and do not have problems with this behaviour. But it seems that people who are behind this kind of broken DNS either disable IPv6, or they have to whine about IPv6 being turned on by default, and can't we please all go back to the good old days. What's wrong with IPv4 anyway? Doesn't NAT solve all of it's problems? Are we sure this new (heh!) technology is safe? Fortunately some people are so good at making their pain felt by other people that they can get other people to do their work for them. So Mithrandir has written a nice elegant patch for libc6 so that it won't do the IPv6 lookups unless you have a usable IPv6 configuration. I've filed bug #435646 against Debian to get this included, but Aurelian Jarno justifiably wants a few people to test it a bit harder... So I've taken the original patch and tweaked it to apply against current libc6 sources (2.6-5) and tested it for myself. It works as desired, as far as I can see, when comparing behaviour with an unpatched system. The patch is attached to the bug report, of course. Perhaps some other people out there can put a wee bit of CPU into testing this for other environments so that we can make life easier for those people with no time / inclination to use IPv6, to ensure that they don't just disable it because it is making life too painful for them in it's current form? How to build libc6 for fun and proft If you have appropriate deb-src URLs configured, and are running Sid, then the following will let you build a local copy of libc6 with the patch. This is probably better testing than if I just make my packages available (which are only i386 in any case).

apt-get build-dep glibc
apt-get source glibc
cd glibc-2.6
debian/rules unpack
cd build-tree/glibc-2.6
wget http://tinyurl.com/3xzm3o
patch -p0 <glibc-only-lookup-ipv6-if-it-makes-sense-debian.patch
cd -
dch --newversion 2.6-5+v6 "Apply IPv6 Resolver Sanity"
fakeroot debian/rules binary

Wait a few hours for it to build... Install... And then confirm that this only does 'AAAA' lookups if (when) you actually have a global or site scoped IPv6 address. When you only have a loopback or link local IPv6 address then you should only see 'A' record lookups. Step 3: profit! Whoops! I forgot the fun bit: please update the bug report :-) What the patch does In my opinion this is quite an elegant solution from Tolleff. He has picked a single characteristic of the IPv6 interfaces to further refine whether the IPv6 configuration of some interface is actually usable. With IPv6 it is much more common to have multiple addresses assigned to a single interface. Interfaces are automatically configured with a link-local address which is not globally routable, and the loopback interface is also configured with the IPv6 equivalent of 127.0.0.1 (which is "::1"). To get a usable IPv6 setup you will also end up with a more widely usable address. In most cases this will be a global address, meaning that it is (in theory) globally routable from other people who also have global addresses, or you could have a "site" address, which is the IPv6 equivalent of RFC1918 addressing. The patch considers that for the purposes of name resolution, it will be pointless to do AAAA lookups unless you have an address of the second kind. This means that people behind broken DNS won't be impacted unless the try and set up IPv6, and people who don't try and set up IPv6 won't get the 'hesitation' while their system attempts to resolve each address in IPv6 space first. It will also mean that when people start to enable IPv6 around them, their setup will continue to work correctly.

In case you think that greylisting might have some disadvantages but give you also some benefits, you probably have thought about to use greylisting with some conditions. For example if you checked some parameters of the mail and you (or better your mailsystem) guess it may be spam, greylisting could be very usefull.
Until now, I was using plain policyd-weight. But mails with $REJECTLEVEL <= score <= $DEFER_LEVEL where in some conditions defered (see policyd-weight default) and if they come back with the same conditions, they will be defered twice. So it makes sence to me to greylist them and if they return within $DEFER_LEVEL, they will pass cause the greylist will allow them.
At first let’s create a restriction class which we can call from policyd-weight within main.cf of postfix:

# restriction class for use with polw (DEFER_ACTION)
smtpd_restriction_classes = greylist
greylist = check_policy_service inet:127.0.0.1:60000 To call postgrey for $REJECTLEVEL <= score <= $DEFER_LEVEL you need to make use of the restriction class “greylist” and let $DEFER_STRING match all defer strings, to get them all greylisted:

# echo “\$DEFER_STRING = ‘NOT’;” >> /etc/policyd-weight.conf
# echo “\$DEFER_ACTION = ‘rc:greylist’;” >> /etc/policyd-weight.conf
# /etc/init.d/postgrey restart Also you may have a look into The DNSBL countries.nerd.dk. This might be a way to score connections comming from well known spamming countries. But keep in mind, that there may also legitim mails comming from those! ;) planet, policyd weight, Postfix, spam

OK, so I've setup a RAID5 at home because I'm getting tired of failed disk drives and data losses. Some notes:

• The system consists of 3 x 300 GB IDE drives in software RAID5 (standard Linux kernel and mdadm), thus ca. 600 GB usable storage space.
• I've used the stock Debian installer to set up all of this, no custom hacks or anything needed.
• Each drive is on an extra IDE bus/controller (1x onboard/internal, 2x on an PCI IDE controller card), as broken IDE disks (lacking hot-swap capabilities) often take down the whole IDE bus with them; it's not a good idea to put two disks on one IDE bus.
• The software stack is: RAID5 at the botton, dm-crypt on top of that to encrypt the whole RAID, LVM on top of that to partition the system into /, /usr, /var, /tmp, /home, and swap.
• /boot is on an extra 1 GB partition (replicated on each drive) as GRUB doesn't work on RAIDed disks and I want to use GRUB, not LILO. GRUB is also installed on the MBR of each drive, so if one of them fails, the other two can still come up.
• I installed and configured smartmontools to check the status of the drives, and hddtemp to check their temperature.
• Stability tests so far: While the system is running, pull out one of the IDE drives (yes, they're not hot-swappable and that may not be such a good idea, usually). The system survived without data loss. Time for rebuilding the array: ca. 1 hour. Second test: while the system is running, pull the plug. The system survived that, too.

Some stats from bonnie++ if anybody cares:

Version  1.03       ------Sequential Output------ --Sequential Input- --Random-
                    -Per Chr- --Block-- -Rewrite- -Per Chr- --Block-- --Seeks--
Machine        Size K/sec %CP K/sec %CP K/sec %CP K/sec %CP K/sec %CP  /sec %CP
bonsai           2G 26727  72 39426  19 16690   7 28725  65 34164   7 215.3   0
                    ------Sequential Create------ --------Random Create--------
                    -Create-- --Read--- -Delete-- -Create-- --Read--- -Delete--
              files  /sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec %CP
                 16 +++++ +++ +++++ +++ +++++ +++ +++++ +++ +++++ +++ +++++ +++
bonsai,2G,26727,72,39426,19,16690,7,28725,65,34164,7,215.3,0,16,+++++,+++,+++++,+++,+++++,+++,+++++,+++,+++++,+++,+++++,+++

(Now, if I only knew what all those figures mean ;-) No, neither the software RAID5, nor the dm-crypt layer nor LVM cause any measurable performance degradation whatsoever (from my subjective feeling). I don't care enough to measure anything. The CPU is idling all the time. Power consumption is rather high (partly due to the mainboard and CPU, but also because of the disks + fans) and the system is pretty loud, which both sucks on the long run. I plan an ultra-silent, ultra-low-power RAID5 with 2.5" disks attached via USB to a (silent, low-power) NSLU2 for later.

The Bad: The kid in the lab next door had Boston's "More Than A Feeling" on repeat for about half an hour today. I don't even know where to begin.

The Good: The gym that I get to use for free at work is very small but fairly complete. Due to these two attributes, there's very little free space to use for jumping rope, which is something I like to do very much. Tuesday I saw a guy stake out a very small space and managed to do just that, so I tried it myself today and was able to get in jumping rope in to my workout for the first time in months. Much sweat did ensue.