Fail2ban
by Jeffrey Ross
Fedora 27 system
Trying to get Fail2ban to work properly on the system and I'm looking
for a good example to follow for the firewall portion.
Some of the challenges I've had is when shutting down the system it can
take a very very long time to "unban" all the banned addresses and it
can take equally as long to reban ip addresses on start-up.
Does somebody have a good example of their firewall jail configuration
they can share?
Thanks, Jeff
6 years, 4 months
Problem browsing at some hotspots
by JD
Hi all,
some hotspots are censoring many websites which they find offensive or
objectionable,
including websites that discuss evolution and the possible changes that
can occur
due to the current weakening of Earth's magnetic field, and the
expanding south atlantic
hole in the magnetic field... This is just one example.
So, I would like to know if there are members on this list who know how
to get around
such blocking by these hotspots? Are there FF add-ons that can do it?
Thanx!!
6 years, 4 months
Re: Testers for LCD Panel Self Refresh on laptops with Intel graphics
wanted
by Hans de Goede
Hi Andrew,
On 05-02-18 23:02, Andrew Lutomirski wrote:
> On Thu, Feb 1, 2018 at 11:34 AM, Hans de Goede <hdegoede(a)redhat.com> wrote:
>>
>> Hi All,
>>
>> For the "Improved Laptop Battery Life" feature:
>> https://fedoraproject.org/wiki/Changes/ImprovedLaptopBatteryLife
>>
>> I'm working on for Fedora 28 I would like to also try and enable
>> Panel Self Refresh on laptops with Intel graphics, some quick tests
>> have shown this to save another 0.5W (when idle / nothing on the
>> screen changes). This is currently off be default because it is
>> known to cause issues on some devices. So I think we will probably
>> need a white- or black-list. But first we need more data on this.
>>
>> If you can spare 10 minutes, please see my blogpost for how to test
>> this and send me a mail with the info request in the blogpost:
>> https://hansdegoede.livejournal.com/18653.html
>>
>
> I suspect that the results may be odd. After falling into a rabbit
> hole when I tried to do this test, I learned a few things about the
> i915 driver's PSR support:
>
> - Intel doesn't currently have any working CI coverage for PSR.
>
> - There's an Intel person who seems to be actively trying to fix PSR.
>
> - PSR on 4.15 on newish hardware (at least Skylake) is completely broken.
>
> - There are other known bugs.
>
> So I'm not sure that trying to tabulate PSR functionality based on
> panel type seems like it may be the wrong approach.
Thank you for your poking around wrt this. Can you send me an (off-list)
email with the contact info for the Intel person you are talking about,
before spending more time on this I would like to touch base with him/her.
Regards,
Hans
6 years, 4 months
Permission Problems on NAS
by Robert McBroom
For years I've kept a local repo on NAS so that I can update several
systems without having to download everything for each one. The drives
on the NAS are formatted as ntfs for communication with Win systems.
Now I'm getting all kinds of file attributes problems with rsync
transferring the files from the dnf updates directory to the packages
file on the NAS. "find . -print|cpio ---" still works and appropriately
transfers the new files with their attributes although with complaints
about transfer of the permissions on the files. However, createrepo
gets into trouble and gives errors of the form
C_CREATEREPOLIB: Warning: Cannot copy
Packages/repodata/1f3b3f3f1e6f83cd3ce15c483203d0233352bef2c1fb9bdc84cf264c24637984-other.sqlite.bz2
->
Packages/.repodata/1f3b3f3f1e6f83cd3ce15c483203d0233352bef2c1fb9bdc84cf264c24637984-other.sqlite.bz2:
cp: preserving permissions for
?Packages/.repodata/1f3b3f3f1e6f83cd3ce15c483203d0233352bef2c1fb9bdc84cf264c24637984-other.sqlite.bz2?:
Permission denied : Child process exited with code 1
C_CREATEREPOLIB: Warning: Cannot copy
Packages/repodata/3ab748ea9b0272e92fe69078cf2dfc11a728656f1b6a4ca0a61a861e17c89b64-filelists.xml.gz
->
Packages/.repodata/3ab748ea9b0272e92fe69078cf2dfc11a728656f1b6a4ca0a61a861e17c89b64-filelists.xml.gz:
cp: preserving permissions for
?Packages/.repodata/3ab748ea9b0272e92fe69078cf2dfc11a728656f1b6a4ca0a61a861e17c89b64-filelists.xml.gz?:
Permission denied : Child process exited with code 1
C_CREATEREPOLIB: Warning: Cannot copy
Packages/repodata/4da1215cadf7eca76485c8e9ddf17ba687f6ade39b36a75eea40315f344e4663-filelists.sqlite.bz2
->
Packages/.repodata/4da1215cadf7eca76485c8e9ddf17ba687f6ade39b36a75eea40315f344e4663-filelists.sqlite.bz2:
cp: preserving permissions for
?Packages/.repodata/4da1215cadf7eca76485c8e9ddf17ba687f6ade39b36a75eea40315f344e4663-filelists.sqlite.bz2?:
Permission denied : Child process exited with code 1
Makes no difference whether the repodata and .repodata directories
pre-exist or not. The NAS local repo is not usable. The files can be
migrated to a local system drive and a working repo created. Totally
defeating the idea of having a single set of files usable from multiple
systems.
6 years, 4 months
gedit/editor with autosave
by Alex
Hi,
I used gedit frequently for note taking on a fedora27 system. The
latest kernels have been quite unstable for me here (plug in a USB
stick and the whole thing crashes, for example), taking down all my
unsaved notes with it.
Is there a simple, lightweight graphical editor that I can replace
gedit with and has more features to autosave and prevent losing data?
I don't need (want) the features of libreoffice or another more
advanced editor. Maybe even a graphical front-end to vim that's as
quick and lightweight?
6 years, 4 months
Renaming USB WD 2TB drives
by Max Pyziur
Greetings,
I've been trying to use fatlabel to rename a Western Digital 2TB
USB/external drive. However, the results have been with no success either
with the drive mounted or not.
Much thanks for any advice on how to proceed.
(Related output is appended below),
Max Pyziur
pyz(a)brama.com
#################
root@pegasus ~> lsusb -d 1058:25e1
Bus 002 Device 005: ID 1058:25e1 Western Digital Technologies, Inc.
root@pegasus ~> dmesg | tail
[ 7678.356619] ses 6:0:0:1: Attached Enclosure device
[ 7678.356860] ready
[ 7678.357476] sd 6:0:0:0: [sdb] 3906963456 512-byte logical blocks: (2.00
TB/1.82 TiB)
[ 7678.359054] sd 6:0:0:0: [sdb] Write Protect is off
[ 7678.359056] sd 6:0:0:0: [sdb] Mode Sense: 47 00 10 08
[ 7678.360087] sd 6:0:0:0: [sdb] No Caching mode page found
[ 7678.360104] sd 6:0:0:0: [sdb] Assuming drive cache: write through
[ 7678.421927] sdb: sdb1
[ 7678.425461] sd 6:0:0:0: [sdb] Attached SCSI disk
root@pegasus ~> fatlabel /dev/sdb1 EPRINC2TB
Currently, only 1 or 2 FATs are supported, not 0.
6 years, 4 months
What is this gibberish?
by Tom Horsley
Just did a dnf update, this comes out:
...
Running scriptlet: firefox-58.0.1-1.fc27.x86_64 18/18
Running scriptlet: firefox-58.0-4.fc27.x86_64 18/18
Running as unit: run-r1880116b569f49288e6d0da0c5832367.service
Running as unit: run-r329e01978cfe43258a05456898834edb.service
Verifying : GraphicsMagick-1.3.28-1.fc27.x86_64 1/18
Verifying : GraphicsMagick-c++-1.3.28-1.fc27.x86_64 2/18
...
Running as unit? Huh?
6 years, 4 months
Re: Riddle me this: grep / regx experts
by R. G. Newbury
Subject: Re: Riddle me this: grep / regx experts
> Allegedly, on or about 2 February 2018, R. G. Newbury sent:
>> I am cleaning up some html code, using sed to standardize the
>> formatting. I was searching for specific instances of code to amend
>> using grep.
>
> In case you're not aware of it, there's a HTML tidy command that
> neatens up HTML.
I am using sed basically for search and replace.
I already use tidy, but it does not deal with my problem which is that
the text has multiple variations in the *text* formatting in the many
different files. This screws up the parsing and requires normalization.
Tidy does not touch that. Unfortunately.
Geoff
R. Geoffrey Newbury
954 Owenwood Drive
Mississauga, Ontario, L5H 3J2
t905-271-9600 newbury(a)mandamus.org
6 years, 4 months
Copying/duplicating files from ServerA to ServerB
by bruce
Hi.
Looking to completely duplicate/replicate one server to
another.Running Centos/Fed. I've seen a number of different
articles/etc on different ways of doing this.
Assuming I'm not using chef/puppet/ansible/etc can anyone give
thoughts on best approaches for this. Articles are cool as well.
Key Items:
-Need to Maintain same users/passwds
-Need to maintain all dirs/files heirarchy
-Need all system/3rd party processes/apps running
-All config/cron files
-All port/db/ssh functions..
I'm testing the process to do this on cheap cloud vms so I can screw
up as I figure out best approach for this.
Thoughts/comments?
thanks
6 years, 4 months
fedora27: ypbind intermittent startup
by Terry Barnaby
I am finding on my systems that ypbind is failing occasionally at boot
(about 30% of the time).
[ OK ] Started Network Manager Wait Online.
[ OK ] Reached target Network is Online.
Mounting /src...
Mounting /scratch...
Starting NIS/YP (Network Information Service) Clients to NIS
Domain Binder...
Mounting /home...
Mounting /opt...
Mounting /dist...
Starting Notify NFS peers of a restart...
Starting Beam BOAP Name Server...
Mounting /usr/beam...
Mounting /var/cache/dnf...
[ OK ] Started Notify NFS peers of a restart.
[ OK ] Started Beam BOAP Name Server.
[FAILED] Failed to start NIS/YP (Network Information Service) Clients to
NIS Domain Binder.
See 'systemctl status ypbind.service' for details.
[ OK ] Reached target User and Group Name Lookups.
The error is:
Feb 1 10:34:36 beam1 ypbind[788]: No NIS server and no -broadcast
option specified.
Feb 1 10:34:36 beam1 ypbind[788]: Add a NIS server to the /etc/yp.conf
configuration file,
Feb 1 10:34:36 beam1 ypbind[788]: or start ypbind with the -broadcast
option.
But /etc/yp.conf has:
# generated by /sbin/dhclient-script
domain beamnet server 192.168.201.1
ypbind starts fine after the system has booted.
I assume that ypbind is being started by systemd before the dhcp client
has actually written into /etc/yp.conf.
Does the system " target Network is Online" get reached after DHCP
configuration ?
6 years, 4 months
