In the news:

* Gates approved as new defence head

How's that for frightening? But, no, it's not Bill Gates. =)

* Victoria's Secret catalogue no longer in pulp friction

At Opus a few years ago, there were some folks doing a letter writing campaign to get Victoria's Secret to stop using Caribou habitat wood in their catalogues. It seems that it's now been successful.

In other news, TD Meloche Monnex can't provide a definition of when we will be living in the new place in order for them to insure it. I've done the rounds with two people now to try and sort out whether they'd be willing to insure or not. They can't decide whether us living in the new place is when we're eating and sleeping there or when every last box has moved. They're pretty happy to tell me that it's a grey area. I hear that as a pretty clear "you're screwed if you need to make a claim". Next!

That said, I took some pictures of the place this evening while we were moving some boxes over. We're trying to make this place not look cluttered. Will post them soon.

Also, note to self: Stairs are slippery. Luckily I was near the bottom step when I discovered this. Walking is a bit sore, but still okay. *sigh*

Hello (first of all, there are new pictures of me)
I think it’s time for another blog, because I have at the moment many different projects. My prio 1 project is the new proxy server which I would like to install in the office (about 500 users) which should have complicated ACLs and SquidGuard for content filtering, a virus scanner would also be very nice. I plan to authenticate the users via winbind on Microsoft ActiveDirectory (I already blogged about it some months ago) and the embedded systems should have special rules which don’t require an authentication. I also had a look at dansguardian because the people from the AIO use this solution, but I don’t think that it’s possible to auth against AD with it and I have no experience with dansguardian. The next problem is with the downtime, I should not have any if possible. This means that I will copy the system of the old proxy into a VMWare-Machine in the intranet and NAT the public IP of the proxy to it when it’s ready. And in this time I can easily setup the new proxy on the physical proxy-machine. Then my next project is for the school - we have to write a management tool (including file-databases) for network devices such as switches or routers, I think this will be a quite funny task and 2 months are IMHO enough time. The cool thing is that we need something like that on my workplace so we will be able to use it. My program also will be licensed under a free license and maybe I will build a debian package if the upstream software is in a good shape. Then the next (maybe less important, but important for my health) project is finally stop smoking. I really didn’t think that this is so difficult because I’m not a “i need it every 2 hours”-smoker, I only need it in the evening when I come home to relax a bit and this is really quite difficult. Then my last (really hard ) project is planning my holidays, I didn’t use them since summer of this year and until next august I can have 5 weeks + the days from christmas until 3rd January, so my plan is the following: 15.12.2006 Last workday 26.12 - 30.12 23c3 in Berlin 31.12 - 1.12 Snowboarding in the mountains and sylvester party with friends Then in february 2007 I will go again snowboarding for a week somewhere And in june 2007 my last holidays for this year where I’d like to visit Debconf7 (depends if I get sponsoring for accomodation and food or not, you know… I’m still a student and edinburgh isn’t really cheap). I hope this will be my last article without the hackergotchi included, I’m not a graphics-guru so I asked in #debian.de some minutes ago and Markus Gloor made one for me, biggest thanks!

I bought a Sony DCR-HC24E for the purposes of recording my wedding ceremony. I could have borrowed my parents', but it's an ancient analogue thing and although I don't really have a use for a camcorder I talked it through with Katherine (making it clear that part of the appeal was just sheer toy value) and we went ahead with it. (I should point out the driver for recording any of the wedding came from my mother-in-law and I wasn't that fussed about the whole thing, but having experienced the "day was a blur" thing I'm glad we have it. Though I've watched it too many times as I'm about to explain.) The Sony comes with both USB and Firewire. My desktop doesn't do Firewire, but I figured USB would be fine. First issue is that Linux doesn't seem to support it in USB mode. I don't know if this is easily solved, as reading the manual I discovered that Sony claim USB isn't as good quality and Firewire is better. Huh? It's all digital. What gives? The best I could come up with is that Firewire is better at guaranteeing latency/bandwidth so you don't end up with dropped frames. Anyway. I buy a Firewire cable and dig out a Via EPIA-M board which has Firewire. Some poking about leads me to the conclusion that I want dvgrab. I fire it up, it seems to do the right thing, I end up with a huge file. Point mplayer at it and discover it's dropping frames. It appears raw DV is about 30Mb/s. The HD in the Via is an old 6GB one that only does ATA-33. So I find a newer ATA-133 capable one, double the RAM in the box (on Adam's recommendation) and try again. This goes better. So now I have a bunch of AVI files, all of them about 1G in size. avimerge is employed to combine them (I might have been able to just get dvgrab to output a big file, but I was wary of large file support). Then I did ffmpeg -i bigfile.avi -target dvd smallerfile.mpg resulting in a couple of DVD format MPEGs (one for the ceremony, one for the speeches). My first attempt at a DVD image was with DeVeDe. It seemed to work fine, but I ended up with something that the DVD player didn't like and neither did mplayer or xine. So I fell back to qdvdauthor, which I've used in the past but don't deem the most user friendly of programs. I finally end up with something that mplayer and xine seem happy with in terms of a menu and a pretty picture of us signing the register and working video. And so to burning a DVD. I used growisofs for this. Firstly with a DVD-R, which mostly worked but had annoying pauses on my real DVD player. So I tried with a DVD+R and this seems to be much better, however there are some minor pauses. This might be my ancient DVD player not coping well I guess. I'm sure DVD creation shouldn't be this painful. I bet if I ran Windows I could point and drool my way to a DVD with the software Sony supply with the camcorder. All I wanted was a basic menu with a background picture and some video attached to the menu options. I'm pondering doing a version with a picture gallery as well, but can I be bothered with the hassle?

Yesterday I was planning and prepared to hold the last session of the Obroni Computer Club that I ran at the SOS Hermann Gmeiner College. Very disappointingly, nobody showed up. Well, not entirely true: The computer lab was crammed full, as ususal around that time, but nobody was there for the club.It might have been because there were no club sessions the last two weeks because of exams, and the students forgot that I told them that there will be another session after that in a mail back then. It might have been because the IG2 class (10th grade), which presumedly make up the largest part of the club, had a meeting at that time. Or it might just be that I did not mange to awaken the student s interest and nobody cared.I have put all material for the club, together with various other documents from my SOSHGIC time, on the Ghana contents section of my now (mostly) bi-lingual and very slightly redesigned homepage.

It has took a while, but after some effort and version 6 release I managed to properly compile packages for Debian of db4objects database (Mono version). It is a powerful open source object database, which is easily embedabble, with only a footprint of 3MB of memory (and the Mono stuff of course).

At work we've just bought online another server, so we have a true public/private server split. The private server is only accessible via secure methods, and the public server only has a few users to reduce the possibility of people brute-forcing their way in. However, the public server holds the APT repositories for debian.o-hand.com and maemo.o-hand.com. Before the split this was not a problem, after building the package dput was used with the scp method, and then mini-dinstall was run as the user to update the repository. Now that there are minimal accounts on the new server, we can't scp the packages to the server, or ssh in to run mini-dinstall. Running m-d in daemon mode solves the latter, but there is still the problem of getting the files on the server in the first place. Enter WebDAV. The public server already has a number of WebDAV shares (secure client shares, Subversion, and so on) so it was trivial to export the mini-dinstall incoming queues over WebDAV. With a custom init script to start mini-dinstall in daemon mode, anyone with the right permissions can upload files via WebDAV. One option here is to use Nautilus, but I like the safety of dput. A day of hacking, with lots of screaming at Python's urllib2, produced this patch to dput that adds HTTP uploading. I've been using it for a few days now and it seems to be working well, so hopefully it will be merged into Sid soon. NP: Xmas in Frisko, soma.fm

Not being one to stick with what I know, over the last few days I've been trying to put a RESTful sheen on a small app I'm toying with. It's quite simple -- there's really only one type of resource I need to deal with, and I've got a solid URI structure to refer to it all. So far, so good. I've read all the theoretical stuff about how URIs should be nouns, and the HTTP action should be the verb -- and I agree with the sentiment, at least for this system I'm writing[1]. I can even (I think) model all of that stuff using my framework of choice, the ever-hyped-but-good-despite-that Ruby on Rails. There's even fairly explicit support in Rails for a lot of what I want to do, with automatic Content-Type: and Accept: handling logic built-in. But this thing is, primarily, a web app, not a web service. I want the RESTful thing so I can interact with the app programmatically, but at the end of the day, I expect most interactions will be via the good ol' HTML. How, then, do I implement my HTML interface so that my user's browser does the right thing with my resources? My REST resource http://example.com/widgets/1337 will do the right thing if an appropriately-credentialled user issues a DELETE /widgets/1337 request, but how do I tell a browser to do that? The "traditional" way I've done that sort of thing, in Rails, is to encode the verb in the URL, like so: /widgets/delete/1337, but I completely agree with the idea that a GET request shouldn't modify data[2]. So I'm completely sold on the idea of not encoding actions into the URI itself. I'm also a DRY[3] kind of guy, and one of the things that has always slightly irritated me about web services is that, when you write them alongside a HTML-oriented webapp, you often have to duplicate logic (even if it's not very much) to get both versions working. Considering that both the webapp and the REST service are using URLs in pretty much the same fashion, it seems very wasteful to have to design two subtly different schemes to handle the two nearly-identical sets of requirements. So, having written this article without managing to figure the answer for myself, I invite comment (sent to mpalmer@hezmatt.org, and I'll summarise later). How do I tell a user's browser to issue a DELETE or PUT against a URL? Am I being overly idealistic to expect the two access methods to be somewhat comparable? Should I just give up and encode the action I want in my URL, or maybe the parameters to the POST request? Am I even completely misunderstanding REST, and trying to find answers in it that just aren't there?

---

1. I have some slight qualms about the idea that every possible interaction with any possible system could be modelled using an unlimited noun set and four verbs, but I'm happy to leave that debate alone for the moment, as I don't have anywhere near enough experience to speak intelligently, and I have more basic problems at the moment anyway. 2. I remember the common story of the website where the 'delete' hyperlinks are regular GET requests, and the first Google spidering of the website causes everything to be deleted, resulting in a very bare database. This is a result I'm keen to avoid. 3. Don't Repeat Yourself -- a phrase that should be tattooed on the inside of every developer's eyelids.

As I mentioned I saw Steve's Nokia E70 at Linux Expo and was quite impressed. After various bits of investigation into the cost of an unlocked version I thought I'd try ringing Vodafone to ask about an upgrade (thinking that I had 6 months left on my contract, but that they still might be able to do me a better deal than £290). Turns out my contract had expired back in August. Excellent. So I've been the owner of an E70 for a couple of months now. First, the bad. AFAICT this is mainly Vodafone's fault. There's a new version of the E70 firmware out, v2. However only certain variants of the E70 have been approved for this version. Vodafone haven't yet done this for their handsets. The main manifestations I see of this are the phone being slow to rotate the screen when it's opened up (at least a few seconds) and the wireless being flakey. In particular it really doesn't like my WEP enabled house network - it'll associate, get an IP address via DHCP, exchange some packets and then stop. It can see my neighbour's non protected wifi fine, and another WEP network I tried (though I saw pauses with that). This is a pain, but as most of the time when I'm using wifi out and about it's not WEPed it's not a showstopper. As a phone it's fine. I'm not a demanding user; I expect it to make and receive calls. It does. The addition of the keyboard is very useful for the few occasions I send SMSes. I haven't tried the funky SIP stuff (partly due to the WEP issue, partly as I already have a SIP hardphone). Where it's really neat is mobile web and ssh. The web browser is quite nice (suitable for checking airport flight departure boards and cinema times as I discovered last weekend). The addition of PuTTY really makes the phone for me. It's small enough that I carry it with me most of the time, and yet it has a screen that can do 80x43 (even if it's very small) and a keyboard. It's really neat for checking my mail/irc while on the move. And because it's all built in I carry it with me in a way I never managed with the Zaurus. Battery life seems better than my old v600i; with 3G turned on that managed 2 days max whereas with 3G enabled the E70 can happily manage at least 3 days and that's with a bigger screen and probably more use in general. I haven't felt the need to try it with 3G disabled yet. The main thing I need to do with it still is get round to putting some games on it. Of the sort suitable for playing while waiting for a pizza order to be ready, or waiting for one's wife[0] to do whatever it is she's doing. I'll get round to it. I like the phone though. Oh, I have a rant about the firmware upgrade. I emailed Vodafone to ask when they might approve the upgrade and moan about the wifi. They got confused about my mentioning wifi and assumed I meant GPRS, but pointed me at Nokia for firmware upgrades. I rang Nokia and they pointed me to my local Nokia Service Centre. I went to them and asked for a firmware upgrade and they said no problem and took my phone off me for 24 hours. In order to reflash the same bloody version I already had back on wiping my settings (which I'd backed up, but that's not the point). Muppets. [0] I need to blog some more on the whole wedding thing, but I thought I was due something slightly more technical.

It seems that some people with heavily customised Ubuntu installations have had problems upgrading from dapper to edgy. While we do test upgrades as much as we can, there’s no way to test every possible permutation, so problems do creep in. Here’s a checklist to perform before upgrading to minimise any problems you might have:

• Make sure you have the ubuntu-minimal and ubuntu-desktop packages installed (Kubuntu, Xubuntu, etc. should use the appropriate meta-packages for their distribution). This may require removing some replacement programs you have installed, but you can always put those back after the upgrade process.
• Check for any locally installed packages, you can use aptitude search '~i!~Oubuntu' to get a list of them. Some of these may cause conflicts with the upgrade process, it may be worth removing them and putting them back after the upgrade.
• If you have manually installed any software from upstream, and not used Ubuntu packages (especially the Nvidia or ATI binary drivers), revert those to the Ubuntu-provided versions before upgrading.
• Use the update manager, as described in the release notes, and not apt-get dist-upgrade. While the latter may work eventually, it will require more manual tinkering than the automatic upgrader.

If, after taking all of these precautions, your upgrade still fails; please file a bug report, and try to include as much information as possible. Provide the list of packages that failed, and if possible the error message provided by them. Provide /var/log/dpkg.log and the files in /var/log/dist-upgrade.

On Thursday, 24th of November 2006 evening (about one and a half week ago) we got an anonymous Symlink submission about gaia 0.1.0, a simple, but free (GPL‘ed) client for Google Earth, solely based on reverse engineering. Liked the idea of a really free client for such a popular service, so I posted it as Symlink article (German) quite shortly after noticing the submisson. Since it’s under GPL and uses only libraries already being in Debian (OpenGL, SCons, cURL, SDL, libjpeg, libpng, libgps and Doxygen), I really would like to see it in Debian. But since I have never programmed with most of them, I did not try to compile gaia but instead took the easy way for myself and filed an RFP bug for it in Debian. The next day in office, Gürkan, a coworker of mine and currently in NM, told me that he tries to package gaia for Debian and that it doesn’t compile on Sarge. So I gave him access to my Sid chroot and asked him if he has read about the RFP at debian-devel or debian-wnpp. To my surprise he answered that he didn’t read about it on Debian lists at all but on Symlink and therefore didn’t knew about the RFP at all. So I pointed him to the RFP just to notice, that it wasn’t an RFP anymore but already an ITP. Strangely I didn’t get any mail notice about this change although the retitling happend only shortly after the initial RFP… Of couse, Gürkan wasn’t very happy about this, since he planned to maintain gaia himself, but at least he provided his working proof of concept package for Sid to Jordà Polo who intends to maintain an official Debian package of gaia. We then also met Jordà on the #debian-games channel in OFTC. He told us, that he’ll check some more licensing issues before uploading a package of gaia. Well, since I had a working gaia package installed in my Sid chroot, you can probably imagine what I did half the evening? Right: Surfing around the earth with gaia and visiting my favourite places on earth. While virtually visiting places here and there, I listened to Venty’s first podcasts and seem to have downloaded 444 MB of Google Earth images (at least according to du -sh ~/.gaia). Goddamned addiction! ;-) During the night from Friday to Saturday, I got a mail that the RFP/ITP has been closed and that Jordà was right with his suspiciousness: Google has sent a cease and desist letter to the gaia developers and they removed the downloads from their site. (So how was that Google motto? “Don’t be evil”? Well, good joke! Yet again the monopolist clearly shows that it doesn’t really mean what it says.) Since the gaia developers were allowed to post the mail from Google on their website, you can read parts of it there. I really wonder what was written in the left out parts of the mails. Job offers? ;-) But it’s interesting to see that until one week ago gaia 0.1.0 already made it into the FreeBSD ports as well as into the ArchLinux User Repository. Both noticed, too, that gaia version 0.1.0 has been withdrawn by the authors. Today in the morning Gürkan noticed that there’s a new version (0.1.1) of gaia at SourceForge using free NASA WorldWind / OnEarth imagery. Although the imagery is far away from the detailedness of the Google Earth imagery, this has one big advantage: There wasn’t really a X port for the windows-only client from NASA until now. (No real wonder, since they use proprietary and operating specific libraries such as .NET and DirectX…) And now we have gaia, a free client for free imagery on free operating systems. That made my day! I hope that this will revive the packaging of gaia, at least Gürkan has already built a new proof of concept package of 0.1.1 for Sid. (Today in the afternoon, they released 0.1.2.) And if everything goes fine and Dunc-Bank manages to delay Etch until gaia has been 10 days in Unstable without bugs, we’ll have it even in Etch. ;-)

Over the last few weeks, I have been very busy at work, and therefore hadn't have much time for Debian. Especially, I haven't been able to help the Dunc-bank project as much as I wanted to. However, it recently became obvious that I brought my contribution to the project's impressive success (despite being not too dramatic). That was, orphaning libpng. The one thing to know about libpng is that upstream developers like to break their software at every single release. Given the number of packages depending on it, it is not reasonable to upload new versions less than 6 months before the release; this is the reason why I carefully kept the working 1.2.8 version. However, despite being warned, the new maintainer decided to upload two new upstream versions with a high urgency to fix two security issues, instead of backporting them. Looking at the rest of the changelog is eloquent :

• removal of the libpng3 package despite my explanations of why not to do so - a change reverted later;
• moving development examples to the shared library package - I'm sure the 91% of users having libpng12-0 installed, according to popularity-contest, will be glad to have them;
• last but not least, removal of a patch that was introduced to not export some useless symbols - of course, this was done without bumping the shlibs, just like the two new upstream releases.

The result is now, according to the unofficial RC bug list, no less than six libpng-related release-critical bugs:

• broken on amd64;
• incorrect dependency information;
• new bug introduced upstream;
• pngcrush broken.

Before anyone asks me: no, I'm not volunteering to fix these bugs. Maintaining libpng is a tedious and time-consuming task that requires more motivation than I currently have. It is way too late in the release process, and my advice for a short-term solution (suitable for a release in two months) would be to revert completely to 1.2.8 and backport the security fixes. The medium-term solution involves even more work, but I think there is no more choice: the library needs to be split in two, one private library with an unstable ABI for software like pngcrush and optipng, and one public library with a very strictly fixed ABI (probably following closely the LSB). Good luck to anyone implementing this. The long term solution is more appealing: rewrite everything from scratch. The PNG specification is much clearer than the libpng code, and calls for a clean reimplementation using modern programming techniques. For a completely unrelated, but more entertaining moment, I recommend the reading of this Bjarne Soustrup interview, where he tries to defend C++ against all common sense. The introduction really made my day: C++ remains the archetypal "high level" computer language (that is, one that preserves the features of natural, human language). Something to meditate on.

Fantastic beginning to the weekend - was in Norwich from Thursday, saw the Dave and the Becca on thursday night - many many thanks to them for floor space thurs and fri and for generally just being fantastic people (with tea *and* coffee, no less - and a silly beepy tivo box for even more fun - and for introducing me to the american chopper type show thingummy - and for letting me watch the a-team!) Then, serious amounts of thanks to Noodles and Kathy (who I appear to not be able to find a link for :( ) for inviting me to the wedding and the reception - was fantastic - you're both such absolutely lovely people! Pictures so far appear to be available from Becca and Dave, Burly and Steve McIntyre - hopefully more soon... specially from Dave Noble (can't find him *bah* he needs more google juice the damned slacker ;) which should be cool! Saturday was absolutely brilliant - including talking about atmosperic physics, failing a-levels, and random universities doing questions (hey, I can't entirely remembere - someone bought a half barrel of nero and some port, and lots of red wine... I wasn't *entirely* sober ;). Saturday morning was a bit of a blur - I remember watching the A-Team and then food in the Glass House with Dave and Becca (thanks guys, you rock!) then I wandered to the Fat Cat and met with Eli and Dave Noble, a while later Rob and James and Kaz arrived and we played Munchkin, which was a very very silly game but quite fun (thanks James and Kaz - you're both mildly insane - but it's always fun when you come to the pub!). Went home with Eli, tried to escape because of the annoying giggly evil students from hell, started wandering back towards the train station and a random bench to sleep on, then got emotional black mail and ended up back at Eli's - ho hum. Went to catch train at around 10am Sunday morning - discovered trains from Norwich weren't running - replacement bus service from Norwich to Diss left Norwich at around 10:25am, got to Diss, had a 10 to 15 minute wait there (mmmmm, bacon roll and a coffee!) then straight to Liverpool Street, wandered straight off to the underground and got the circle line to Victoria, got to Victoria around 13:40 ish, wandered to look at the boards and saw a 14:17 from Victoria round half the planet to Brighton - thought to myself "not in any rush" and wandered off and found food and then wandered round the WHSmith in Victoria station.... got out of there, glanced at the board again, Victoria to Brighton train had been cancelled - wondered what to do - announcement over the tannoy that to get to Brighton the best idea was to travel to East Croyden and the train would meet us there. So, grabbed that train, got to East Croyden, jumped on the train (first 8 carriages Brighton, back four Plymouth... so, jumped on somewhere around the 7th carriage from what I thought was the front - turned out to be the back - wasn't entirely sure what was going on so when it stopped at Gatwick wandered further to the front of the train a lot, found an empty pair of seats and sat down. Got to Three Bridges and there was a delay, it was announced on the train as "We're waiting for the conductor, he's missed a train and is currently in a taxi, there's at least a 10 minute delay before he gets here", so a load of us bundled out of the train on the basis that that was very much long enough for a cigarette break - just as we were finishing the conductor turned up, so we all got back on the train for the "scenic" route to Brighton (yay for going round the coast), finally got in to Brighton at 17:05, so wasn't too bad, only about 6 and a half hours for a 3 and a half or 4 hour train journey ;). Grabbed chinese on the way home, watched some Morse - all was well with the world. Lots of beeping this morning around 8.30am, ignored it, finally re-woke up at about 10:30am (ish) - watched some more Morse, grabbed some lunch and then watched more Morse until going to the pub quiz tonight. Charly, Julius and Pieter turned up for a quick drink and then all left me to fend for my self at the quiz - I came in my usual place - very last (by over 20 points, no less ;) - but had fun, so who cares :) Anyways - it's now tuesday morning, so probably time for some good ol' fashioned sleep type stuff... might put on the next episode of Morse for the hell of it (might even manage to stay awake through it!). Tomorrow is probably more Morse, some work on the django packages (just got the first bug report in for those) and possibly applying some of the patches to the scrobbler packages to close some of those bug reports too. It appears that upstream for xmms-scrobbler has disappeared a bit, so might have to look at that a lot closer over the next few months - have some time off work soon - last day this year being the 15th (also happens to be when work are planning the "christmas do"). Wow - that was a ridiculously longer post than I though it was going to be! Night all!

One of my projects here at the KACE in Accra, Ghana, is to make the live programming game Infon a useful tool to teach programming. Until now, programmers had to upload their code to the server over a telnet or netcat connection. To lower the initial threshold for new users, I wrote an editor for infon bugs, using python and gtk. The features are:

• lua syntax highlighting
• easy connecting and program uploading
• telnet session view, to see what s going on under the hood
• special bonus: A little bug on the margin indicates what line of code is run by the server at the moment.

You can find a screenshot on the webpage for infon-devel.I also created Debian packages for the infon server, the infon viewer and my GUI, which you can find on my people.d.o page. The server and viewer packages are currently waiting for inclusion in Debian s experimental branch in the NEW queue and infon-devel will follow that path after some positive feedback (or lack of negative, we ll see).Further plans include a comprehensive documentation of the bug s API and maybe some hints for teachers how to use the program in classes. Comments with regard to the GUI, the debian packaging or the game in general are highly appreciated. You are also invited so swing by #infon on freenode.

My work permit in Canada expired on December 1 (that's 10 Frimaire for you French Revolutionary Calendar fanatics), so I needed to renew it. It's possible to renew these things by mail, which is worrisome and time-consuming, or even to go into an office in Montreal (near-mythical, crowded, reportedly ineffective). I've never liked doing either, so whenever we have to deal with immigration, our family drives the 50km down to the border with the US. They have a big immigration facility there, and if you drive out of Canada and back in again, they have lots of nice officers in bullet-proof vests to deal with any immigration issues on the spot. It's called "driving around the flagpole" here, but Maj and I try to make a trip out of it when we have to go. So we drove down to Lake Placid in the Adirondacks last Friday morning -- sufficiently distant and different to seem exotic, without being too far away for a weekend trip. Plattsburgh, the nearest American town to us, is, well, kinda boring. We've spent a day in Burlington (Vermont) before, and that was pretty fun, but we wanted to try something different -- so Lake Placid it was. Friday was a crummy day for a drive, though -- there was snow and freezing rain in equal measures, so the roads were a little dangerous. The hood of our car kept building up this several-inches-thick icy-snowy mass that I was afraid would rip off the hood and go careening into the dark, so I kept stopping to chip it off with my handy ice scraper. Once we got down to the Adirondack park, though, the rain was just a regular drizzly non-freezing kind, and we could actually enjoy the scenery. The roads in were remarkably small -- hard to believe that not one but two Winter Olympics were held at this remote location. When we got to town, we took a look around at the main drag -- a single street that fronts onto Mirror Lake and points directly into the Olympic centre. We stopped at the Great Adirondack Brewing Company for a late lunch, and had a nice crabcake and caesar salad with roasted shrimp. Maj is a little squeamish about eating seafood in the mountains -- with good reason, since she's been burnt before -- but we both ate up anyways, and it was real good. Amita June had a grilled-cheese sandwich that came with french fries shaped like little happy faces. Awww. We then went to check into our motel, the Wildwood Inn. I've got a weakness for a certain kind of woodsy mountain motel -- lots of wood paneling and alpine flavor -- and I especially like paying motel prices. The Wildwood was just what I like -- clean, inexpensive ($65/night), and charming, with a nice view from our room out onto Lake Placid proper. It also had a nice big indoor heated pool complex and free WiFi. (On that subject -- why is it that so many motels in North America now have perfectly acceptable free WiFi, but major hotels in big cities charge you $30/night for crummy WiFi with complicated authentication schemes that take half an hour to configure? Is it just because the big hotels charge too much for everything, or is it because they know they can rake business travelers over the coals and it all will go on the expense report? It makes me really mad to pay for WiFi, and it makes me extra-mad that it's usually so complicated and of such poor quality. Anyways.) We took a big nap and went out after dark (4:30PM) to look at the town and get some dinner. Unfortunately, it was still raining big fat cold raindrops all over downtown. The ski season was supposed to start this weekend in the Adirondacks, but with all the rain they canceled opening the runs, and with the bad weather and no skiing the town was pretty empty. Most of the restaurants we passed were closed, and when we eventually got to one, the Black Bear, we were the only people there. The Black Bear turned out to be really nice. They had a good selection of organic vegetables and seafood nicely prepared but not too fancy -- what we Californians call "California cuisine". I dunno what anyone else calls it. Amita liked it because they had a big chalkboard on the wall and she spent most of her time running between our table and the board or drawing big jagged marks on the wall. That night the wind and storm howled outside our motel room -- I dreamed the place was falling down. When we got up in the morning, though, there was a light dusting of snow on the ground outside -- the first one of the season! Maj and Amita June went outside on the motel lawn to play around -- Amita doesn't remember last winter, I don't think, so snow is new all over again for her -- and I went to clear off the car. Then we went downtown to get some breakfast. We shopped for books (I bought James Fenimore Cooper's The Pathfinder) and winter gear (Maj almost but didn't buy some boots) walking up and down the main street in the light snow, then piled into the Soulshine Bagel shop for some bagel sandwiches and coffee. The food was good -- the bagels were thick and doughy, not like the little Montreal bagels I've grown fond of -- but the place only took cash, and we hadn't gotten out any American money yet. Oops. They were nice enough to take our Canadian cash, which earned them a decent tip, and then the three of us walked back to the car in the snow, Amita trying for the first time to catch snowflakes on her tongue. After our nap, we went out with good intentions to go visit the Olympic Centre and get ourselves a little bit of cultural value from the trip, but the early dark and our darker natures drove us instead to the Lake Placid Pub in a residential area right by Mirror Lake. The Pub was great -- really good beers (I liked the 7% Ubu Ale) and fine pub-grub. There was a table of kids next to our table, and they had a little table barbecue on which they were making s'mores. They kept handing Amita their extra graham crackers, which she noshed contentedly. This morning we went to the Saranac Sourdough deli and bakery for an early breakfast. It was right across highway 86 from our motel, and they had great pancakes. I had a big spinach-crab frittata with sourdough rye toast -- really satisfying. We took the long route back to Montreal -- west through Saranac Lake then north up to Malone (New York), a little town on the Salmon River with a big collapsed mill in the middle of downtown. By the time we got down to Malone, all the snow was gone, and it was back to that bitter snowless winter look all over the place. Malone had some nice architecture, but we ducked into the homey Nancy's Village Diner for some lunch. Then out onto the road again, through Chateaugay and Mooers and back to the border after a brief stop at duty-free. Our immigration issues took about an hour -- that was pretty good turnaround -- and we were on autoroute 15 back home to Montreal pretty quick. Not far from the border, though, the snow started coming down hard, and by the time we got to the St. Laurent river it was sticking to the road, making driving a little hazardous. But we managed to get home OK, glad for a nice little weekender. tags: lake placid montreal new york saranac lake adirondacks immigration snow maj amitajune

WTF IS THIS SHIT? Ok, that above would be what a newly-baptized “FOSS advocate-slash-zealot” would say upon seeing Federico Pascual Jr.’s PostScript regarding the FOSS bill. I suppose I could have said that myself a couple of lifetimes ago. But, there is more than meets the eye. While I would like to think of myself as a “FOSS veteran”–believe me, I have still so much to learn about it–I would like to step into the shoes of such a person when approaching an article as sensational as Mr. Pascual’s. Despite what seems to be a most interesting article on the mechanics of government software usage, it fails to address the one particular bit that is just as important as the proposed bill itself: the real Free and Open Source Software. Let me nitpick this article bit by bit:

FREE RIDE: A bill is being pushed in Congress forbidding all government agencies and state-controlled firms from buying and using any of the computer software sold in the market!

Alas, when I first heard of the FOSS bill sometime before September, I also had a bad impression of it. Perhaps I was just too politically allergic at that time (yeah right,) but I tried to adopt a wait-and-see’ approach first and let the dice roll. Perhaps because this bill was to be introduced by a very visible congressman with alleged leftist ties made me feel uncomfortable, but then, so was (and still is) with the current administration. Or perhaps I just felt it wasn’t damn right to legislate FOSS as an end-all solution, preferring instead of presenting is as a process for reforming the local software industry. Looks like first impressions definitely make a difference.

The proposed law to be called “Free/Open Source Software (FOSS) Act of 2006″ commands government offices to use only information and communications software that are given away for free and have no restrictions as to their use. The objectives appear to be to save money for the government and to encourage the making of free (non-commercial) software.

So? What’s wrong with these objectives? FWIW, the early FOSS bill draft did seem to have such a Draconian section as forcing the government and allied offices to use, and use only, FOSS. IMHO that by itself ran against the very fundamental ideal of FOSS: the freedom of choice. Not Hobson’s choice, but real choice. The current bill IIRC now allows this true choice; unless there is an extreme case where FOSS cannot be applied without becoming non-self-sustaining (not to mention self-liquidating,) agencies may implement their infrastructure using FOSS as their primary instrument, with the application of open standards (that is, open document formats, open communications protocols, etc) unifying the disparate components. Perhaps right now, this situation may seem kind of far-fetched, but its not really that far-off, considering what other nations and cities have done (or not done) with FOSS. Munich, Extremadura, Beijing… the list is not yet that long, but its bound to go a long way Now, while the government may now adopt open standards and open-everything, does not mean that the openness’ forgoes security, either; the government may opt to use well-known encryption protocols and even base their own security infrastructure on them. In fact, they are free to even look inside the source of these well-known standards, to study them, and to branch off new implementation that may even change the way these standards work. In fact, even without this bill in place, the government can participate in the production and development of FOSS!!! Wait a minute, wasn’t I supposed to defend this bill? Eh, well. I suppose this bill is good and all, but like I said earlier, there are those first impressions made by the parties involved in the making of this bill which unsettles me. IMHO I would rather see applications of this first in key cities (the happy works in Munich and in Extremadura are no accident, believe me) which in turn, would allow both local the national government to see just exactly how this FOSS magic works. Then, when the observations have been made, the papers are in, and the workers get hired, then, maybe, we’ll have a nation where FOSS can be mandated as a very strong preference, but never a forced one. Its all about growing up, really. I’m being reminded of Tom DeMarco’s The Deadline, where a newly-retrenched guy from a telco literally lands into the fantastic job of his life, managing an entire nation of software engineers and architects to develop several killer apps within a year (or so; raid you nearest Book Sale and be lucky Its a great experiment: when it succeeds, you’ll be the first to be present, but when it fails, you’ll be the first to be nowhere.

But I can also hear in the background a call to an unholy war against multinationals whose popular software run virtually all maybe 95 percent? of the computers of the world.

Now this is a low blow. Maybe partly because of the prevailing images of the advocates–geeks and leftists, my, what a c-c-c-combo!–is what drives Mr. Pascual to make this point. But really, multinationals are not the main concern. FWIW, FOSS is multinational in nature: it is even multi-denominational and multidisciplinary. FOSS is one of the things that make anonymous people like you and me Internet superheroes. FOSS connects the Internet’s tubes and keeps away the trucks. FOSS makes the Internet serious business, yet also drives them crazy. The Linux distros that I have worked, am working, and continue to work on, are all multinational: Debian and Ubuntu. People from all over the world, from all 7 continents, participate and work on what would arguably be the biggest software distribution the human world may ever produce, freely, regardless of motivation or goal. I suppose all the folks involved have only one common goal, and that is to see a work created for the benefit of the community by the community. I suppose the background howl comes from somewhere altogether, but its hardly just from FOSS. FOSS is the epitome of what is truly multinational, and one thing that is not truly controlled by any one single person, corporation or not.

I have been really busy until two weeks ago [Shameless plug: If you need a (technical) project manager and/or hands-on Basis person to get your SAP R/3 system upgraded to ECC6, get in touch.]. Which means I've been a bit slack - so slack in fact that Andreas Barth had to resolve an RC bug in one of my packages - mea culpa.

Ridden by guilt I decided to finally do what I've been wanting to for some time: Putting the steps together to do a Debian test upgrade using QEMU. I chose QEMU because it is free and readily comes with Debian. It is slower than VMware, at least without the non-free kernel module, but still usable on somewhat reasonable hardware. The actual upgrade steps given below are independent of the virtualisation technology used, so they will apply to VMware as well.

Without further ado, here goes:

• install the qemu package
• optionally install the kqemu module:
• install the kqemu-source package (from 'non-free')
  
• run 'module-assistant prepare'
• run 'module-assistant auto-build kqemu' (Daniel, in case you read this: This may be easier than running make-kpkg as suggested in the README.)
  
• install built package with 'dpkg -i kqemu-modules-[kernel version]'
• possibly change permisisons/ownership of '/dev/kqemu' to allow non-root users
  
• run 'depmod -a' and 'modprobe kqemu' to load module
  
• create a disk image (Using qcow means we are not using a sparse file, so compressing and decompressing does not inflate the file.): qemu-img create -f qcow hda_40GB_sarge.qcow 40G
• get a sarge install CD, e.g. 31r4 netinst
• install the initial sarge system:
• start qemu e.g. like this: qemu -m 512 -hda ./hda_40GB_sarge.qcow -cdrom ./sarge-31r4-i386-netinst.iso -boot d
• start the installer and go through the normal motions
• restart qemu like this: qemu -m 512 -hda ./hda_40GB_sarge.qcow
• finish the installation:
• select a mirror (Note that DNS is not setup - fix this or use IP addresses for repositories. Also, something like apt-proxy comes in quite handy.)
• choose 'manual package selection' in the installer
• update the packages as suggested by aptitude
• quit aptitude and finish the installation
• now would be a good time to take a copy of the fresh sarge install before continuing:
• halt the (qemu) system
• copy the image file, e.g.: cp hda_40GB_sarge.qcow hda_40GB_sarge_pristine.qcow
• compress the copy (The uncompressed image is ~ 1GB, the bzip'ed one ~ 100MB.)
  
• install X:
• start aptitude, select 'x-window-system-core' and install
• leave all X config settings standard, except:
• mouse device: /dev/psaux
• mouse type: PS/2
• screen size: 1024x768 (or similar)
• install Gnome (That's just what I use, KDE or others are equally fine.):
• start aptitude and select the following packages and install:
  
• 'gnome-desktop-environment'
• 'xscreensaver'
• 'gdm'
• 'gdm-thmes'
• 'synaptic'
• 'menu'
• 'menu-xdg'
• quit aptitude
• restart gdm: invoke-rc.d gdm restart
• now might be a good time to take another copy of the sarge install before continuing:
• halt the (qemu) system
• copy the image file, e.g.: cp hda_40GB_sarge.qcow hda_40GB_sarge_gnome.qcow
• compress the new copy (The uncompressed image is now ~ 2GB, the bzip'ed one ~ 540MB.)
  
• install other software as desired that you want test the upgrade with, e.g.:
• 'mondo'
• 'mondo-doc'
• perform the upgrade (following the preliminary Release Notes):
• get to the command line in the qemu system, e.g. by running 'invoke-rc.d gdm stop' in a gnome-terminal
• change apt source from sarge to etch
• run 'apt-get update'
• upgrade the kernel by running 'aptitude install linux-image-2.6-486' (This is not what the Release Notes say but it works for me.) (Say 'Yes' to removing the running kernel.)
• upgrade aptitude by running 'aptitude update aptitude'
• upgrade the system by running 'aptitude -f --with-recommends dist-upgrade'
• if applicable, rerun and keep rejecting offerings to resolve conflicts until the one upgrading mondo is offered (I'll have to look into this.)
• run 'aptitude -f --with-recommends install gnome-desktop-environment' to reinstall Gnome

All in all, things seem to work ok. However, this is far from hitting the friendly green upgrade button and it just happens. So, I thought I try the next best thing to the friendly green upgrade button which is synaptic. Doing an upgrade with synaptic does actually work quite smoothly. It needs to be restarted a few times, leaves some cruft in terms of obsolete and orphan packages and the reboot doesn't really work from within Gnome, but other than that it is ok. Most notably, it didn't leave me with an unusable system in the middle of it all.

Robert Collins made some interesting remarks about the challenges of upgrades last week when we had dinner with Martin Krafft and a number of other great people. It looks like the Ubuntu folks are working on improving update-manager but also the underlying infrastructure to smooth out the upgrade process. Maybe there could be an opportunity to work together on this and achieve a situation where upgrades become as smooth as installs are now due to the fantastic work of the d-i people.

Venkatesh Hariharan recently wrote an article on Indias traditions of knowledge and how Open Source meshes with them. Now having met him at foss.in and knowing of his work, I am 100% convinced he is on the side of the angels and their is no malice in what he wrote. However, his interpretation (really not his, but the conventional wisdom amongst the Indian elite.) of Indian history and culture is so monumentally wrong it bears correction. While I admit my hackles were raised by the cultural and theological mistakes made, there are implications for Open Source advocacy in India and the world at large too. He starts by giving the example of Nalanda, supposedly "the first university in the world." but more accurately a Buddhist vihara (monastery.) Its' very name indicated sharing. I use the past tense because Nalanda doesn't exist anymore. In fact except in a few border areas influenced by Tibet or Burma, Buddhism itself is so thoroughly extinct in the land of its birth, the place where it flourished for over 1500 years, that the only reason people like Hariharan or myself only know that there ever was such a thing due to the work of 19th century Western Indologists. How could this be? One theory is that a resurgent Hinduism coopted or persecuted the Buddhists into oblivion. However this is unsatisfactory. It does not explain why Jainism (a religion as old as Buddhism and equally heretical for exactly the same reasons from the Hindu point of view) still survives to this day and it doesn't explain how it could have happened for even the most advanced genocidal regimes of the 20th century have been unable to "disappear" undesirables to the extent which Buddhism disappeared. A more plausible explanation revolves around the fact that, as I mentioned before, places like Nalanda were Viharas. This doesn't mean that they can't have university-like properties too; after all the great academic institutions of Europe also had religious foundations but the monastic nature of a vihara is salient. A monastery is not a place you go to engage the world, its a place you go to escape it. To mix metaphors a bit, the viharas were cathedrals not bazaars. While there may have been a lively intellectual life within its walls, there is no evidence that Nalanda and its denizens interacted much with the surrounding culture. An economically unproductive institution of such vast size (15,000 monks at its peak) could only survive by the patronage of kings and other rich people. When that patronage dried up as for example when the medieval Muslim invasions swept away the old royalty, Nalanda and its sisters couldn't survive. Just as when a proprietary software company dies, its "intellectual property" often dies with it, when centralized Buddhism died, Buddhist ideas died with it. (Luckily Buddhism had spread to other countries by then and developed new, less monolithic forms so it was not lost to the world altogether.) In contrast Hinduism (and for that matter Jainism) while having all due respect for monks were and are primarily lay movements. The pursuit of morality (Dharma), wealth (artha) and pleasure (kama) in this world are equally valid human goals alongside liberation from the world (moksha.) and this manifested as the much maligned institution of caste. Hariharan quotes the conventional view probably familiar to Westerners from Anthropology 101, a lock-step hierarchy of four classes (varna is the Sanskrt word) with fixed occupations, with knowledge and privilege on top and ignorance and oppression at the bottom. The thing is, this view bears no relationship whatsoever with social reality in India now or historically. There is another Sanskrit word, jati, which can be translated as caste. There are thousands of these jatis and while Indian thinkers have periodically attempted to try and shoehorn them into the varna framework, they have had little success and varna is for all practical purposes just a theory. And this is not just a fall from some putative golden age (Like the canard that once caste was flexible and merit based and only later became rigid.) but the state of affairs throughout recorded history.

A jati consists of people who share a common (or fictive) kinship, who have particular food and ritual choices, and marry endogamously. While many jatis are associated with a particular occupation, many others are not. This is what caste means to a typical Indian (it is also the social organization prevalent amongst Jains, Sikhs, Muslims and Christians even if they don't accept its theological basis.) Yes, hierarchy and concommitantly oppression, are in some cases a byproduct of casteist thinking but they are hardly its raison d'etre. A comparison can be made to the Western nuclear family system. Some people think it is superior to any other form of social organization. Most people wouldn't go that far but go along with it as "the way it is." Some of those of a liberal persuasion might want tweaks of certain aspects of it. A very small fringe think it is nothing more than a nefarious plot to spread patriarchy, subjugation and racism etc. They are mostly considered kooks by the other groups. (Unfortunately when India and caste are concerned, the kooks are ruling the roost.) The diversity of jatis like the diversity of open source creates a certain resistence to disruption that a monoculture cannot. Thus though Hinduism also suffered grievously from invasions, it was able to hold on where Indian Buddhism could not. Brahmin (sic. That's an English mispronounciation.) is also misinterpreted as one who knows Brahma (masculine noun. The Creator God.) instead of Brahman (neuter noun. The supreme spirit pervading the Universe.) though even then it would be wrong because Brahmin, Brahma, and Brahman all come from a common root word brhati (feminine noun. Sacred speech.) as any Sanskrit dictionary will attest. Hariharan cites the example of the sacred scriptures (Sic. He means the Vedas) and the notorious statement of the Manusmrti saying that an unqualified person who hears them should have molten lead poured into their ears as examples of the proprietarization of knowledge. Now the long-suffering untouchables may have been afraid of many things but having lead earplugs was not one of them. There is no historical evidence that any such action was ever attempted. You can criticize the Manusmrti for even saying such a thing but that is a far cry from using it as evidence of historical attitudes. You see, the Manusmrti is not even in the most orthodox conception Hindu Sharia and the Vedas are not "Sacred Scriptures" in the sense that the Bible or Koran are. Rather they are part of a wide range of significant literary works respected in Hinduism of which other important examples are the two Epics the Mahabharata (which includes the Bhagavadgita), and the Ramayana, and the vast compendia of geneologies, philosophy, lore and legend called the Puranas. Hariharan actually missed a good chance to make his point here because while the Vedas are indeed "proprietary" the other works I mentioned are not and have in fact permeated all over India and even beyond its borders. Many Indian languages owe their literary existence to translation of the epics or Puranas. For instance one of the earliest monuments of Hindi literature is the Ramacharitamanasa, Saint Tulsidas's translation of the Ramayana. When he wrote it in the 16th century, he did face some opposition from those who didn't think such an august work should be rendered into a "vulgar" tongue, he also received encouragement from equally orthodox people (including those who believed the Vedas should be restricted to Brahmins) Today it is by many accounts the most popular Hindu holy book in existence. So really the whole idea that the Hindu canon shows a fall from open grace to rigidly controlled private property is just bogus. To those who have slogged their way though all this verbiage wondering what it has do with Linux and Open Source, let me assure you I am getting to the point :-) It's bad enough from my point of view as a devout Hindu that my religion would be misrepresented this way but from my point of view as a supporter of Free Software ideals, it is catastrophic. Linux and Open Source in India has spread, as in most parts of the world, primararily as a hobby amongst computer enthusiasts and for a hobby it's doing ok. However if you think of it as more than that, as a tool to enhance society and empower peoples lives, that is not nearly good enough. But how can one serve a society if one apparently has no clue about that societies history and mores? The developing world is littered with failed projects that were carried out with the purest of motives but no regard to what the putative clients actually wanted. Do we want Linux and Open Source deployments to go the same way? For a couple of years now I've been trying to get Indian and NRI programmers to get involved in localization in debian-installer and elsewhere but even with the small minority that are sympathetic to Open Source (a scandal in itself.) it is like pulling teeth. To their credit, Red Hat India pays people to work on such things but volunteerism is the heart of the Open Source movement as we all know so the apathy of Indian IT professionals is deeply troubling. Hariharan is trying to increase interest by appealing to the Indians' sense of cultural pride which is a good tactic--it has been successfuly applied by many non-western or minority cultures--but he is not going to be very successful if the vision of Indian culture he is presenting is as alien as Eskimo culture to the vast majority of the people. Western Open Source advocates also run into difficulties due to being tone-deaf in their understanding of how third-world cultures actually operate. When India declined to participate in the One Laptop Per Child (OLPC) project, some commentators on places like Slashdot were perplexed. Wouldn't a poor country want an inexpensive yet efficient pc using free software instead of high-priced imports? The thing they missed is that while people in India may be poor, thanks to a more-or-less democratic polity and more-or-less open communications, their frame of reference is no longer their village. Their trends are increasingly set in Mumbai, New York, Paris, and London. The forward-thinking amongst them know that computers are the key to the future. They also know Bill Gates is the richest man in the world thanks to something called "Windows" knowing which can get you a green card and your own chance of becoming rich. So if Linux comes along, presented as a cheap alternative which is "just as good", the fake Gucci handbag of IT if you will, it is not going to impress. Thinkpads and Dells appeal to the upwardly-mobile persons vanity, a third-world hand-cranked laptop does not. (This incidently is what is behind the "Nalanda university" meme too. Monasteries are yesterday. Universities are the in thing so we have to have some in our past and not just any but by golly, the first university in the world.) When they venture from pure technology into the realm of culture, Open Source advocates need to be a lot more sophisticated, not to mention accurate, in their arguments lest they fall on deaf ears. Platitudes and sentimentality about "spiritual" versus "material" culture aren't enough. There must be concrete demonstrations of the benefits of why the Open Source approach to knowledge is better. They must be more sensitive in their presentation to avoid needlessly antagonizing people who might otherwise be natural allies. I believe the Open Source ideal is good for India and the whole world, not just in software but for society at large and I wish Venkatesh Hariharan and all the others on the frontlines of the fight for openness the best of luck. But good intentions cannot excuse sloppy thinking.