April 2023 - openSUSE Users - openSUSE Mailing Lists

Tumbleweed install with secure boot failing
by Wolfgang Rosenauer 01 May '23

01 May '23

Hi, just got a new laptop with Windows 11 installed and I'm not supposed to remove Win 11 completely ;-) but want to install Tumbleweed in dual boot. Since apparently I'm installing only every few years it's always again "interesting". I downloaded a recent Tumbleweed snapshot and wrote it to a USB stick but I cannot boot from it as the system tells me that the secure boot signature is invalid. When trying to search for the issue I cannot find much. I found that Tumbleweed should be supporting secure boot completely and therefore I have no idea what might be wrong as apparently is meant to just work. Any pointers? Thanks, Wolfgang

5 11

sfw2 to firewalld conversion
by Per Jessen 01 May '23

01 May '23

Carlos was right, it is ancient news - the script is dated 2016. I guess it is well off-topic too, but at least it is SUSE related :-) I needed a bit of a distraction, I've been working on a website, so after dinner I installed the migration script on my tw64 test box, along with firewalld. If need be, I can wipe the whole slate clean. After starting firewalld (with an empty config I presume), I tried the first run of susefirewall2-to-firewalld. It took 5m49s - seemed to spend much of it with a whole slew of icmps. Two initial comments - after looking at the output - the conversion script isn't quite ipv6 aware: INFO: RICH: Adding rich rule="rule family=ipv4 source address=fe80::/64 port port=5353 protocol=udp accept" to zone="ext" INFO: RICH: Adding rich rule="rule family=ipv4 source address=fc00::/64 port port=5353 protocol=udp accept" to zone="ext" INFO: RICH: Adding rich rule="rule family=ipv4 source address=fe80::/64 port port=5353 protocol=udp accept" to zone="int" It does however seem to understand your "from:to": port-range syntax: INFO: Adding port(s)="30000-30010/tcp" to zone="external" INFO: Adding port(s)="4664/tcp" to zone="external" INFO: Adding port(s)="427/tcp" to zone="external" INFO: Adding port(s)="5060-5100/udp" to zone="external" -- Per Jessen, Zürich (14.6°C) Member, openSUSE Heroes (2016 - present) We're hiring - https://en.opensuse.org/openSUSE:Heroes

2 11

Re: What will IPv6 actually do for you?
by Per Jessen 30 Apr '23

30 Apr '23

Lew Wolfgang wrote: > On 4/28/23 04:18, Carlos E. R. wrote: >>> If you are not going to use IPv6 internally, having source zone for >>> 192.168.1.0/24 (or whatever your internal addresses are) and >>> fallback zone for external traffic would be much more clean. >> >> I expect^H^H^H^H^H^Hhope to have proper IPv6 one day... > > What will IPv6 actually do for you? It's a serious question, > what will it give you that you don't already have with > IPv4 and NAT? > > From my experience at work it's nothing but a PITA that > reduces reliability. Really?? or are you just trolling? I certainly can't say that matches my experience, at all. I have been running ipv6 since around 2007, first with a tunnel, later with fixed ISP ranges and since 2015 with our own /28. We also still have a number of leased external machines, all with ipv6. Reliability is fine, I don't understand how ipv6 could possibly reduce reliability of anything. Some PIT ... minor issues: * Wifi access points by Tp-Link have had trouble with ipv6. (okay, identifying that issue was a royal PITA) * dynamic ipv6 dns updates worked until we upgraded bind (they work again now) * recently, radvd threw a wobbly, still pondering that. * androids don't work with dhcpv6. I have one issue I have only just this week picked up - we need to get the reverse zone dynamic updates to work too. There is some odd bind error when we enable updates. Some days our public opensuse mirror has up to 33% ipv6 traffic. (from http://mirror.hostsuisse.com/stats/opensuse) Switzerland - 19.4% of traffic, 169 unique clients France - 34.6% of traffic, 473 unique clients Germany - 18.7% of traffic, 3333 unique clients Portugal - 47.5% of traffic, 63 unique clients Netherlands - 18.4% of traffic, 152 unique clients Spain - 3.5% of traffic, 9 unique clients However, the question in $SUBJ _is_ certainly valid, Andrei brought it up too. Well, for Joe Consumer in his armchair it brings nothing, and he or she will not even notice. When I started playing with ipv6, I think I had the following reasons - * ipv4 is boring, btdt. * need to have ipv6, to write/test code for it. * want to know ipv6, it's a challenge and fun learning. * avoid problems when the ipv4 pool is exhausted. -- Per Jessen, Zürich (17.5°C) Member, openSUSE Heroes (2016 - present) We're hiring - https://en.opensuse.org/openSUSE:Heroes

7 84

Boot Problem
by Mark Misulich 29 Apr '23

29 Apr '23

Hi, I restarted my computer and when it attempted to restart, it didn't boot to the opensuse grub operating system selection screen for my multiboot computer with Opensuse Tumbleweed and Windows11. It instead booted to grub command line. I tried to research the problem on the internet to try to correct this problem from grub command line, but none of the attempts I have made have worked. The commands only bring up the response "file system unknown" instead of the expected response. I've gotten Tumbleweed to boot with supergrub2-206s2-beta1-multiarch-USB, where no other version of supergrub2 would work to boot Tumbleweed from the bios bootmenu. I thought, "Great, I'm out of the woods. I'll just reinstall the grub2-efi bootloader via yast2, and I'll be back in business!" But it didn't work out that way. When I try to do that, I get this message: Error Execution of command "[["/usr/sbin/shim-install", "-config-file=/boot/grub2/grub.cfg"]]" failed. Exit code: 1 Error output: /usr/sbin/grub2-probe: error: ../grub-core/kern/fs.c: 121:unknown filesystem. I've been launched into another Linux learning adventure without asking for the opportunity, so can the list advise me how to get this problem fixed? This may not be pertinent to this problem, but when I select Windows boot manager from the bios boot list, windows boots normally from that point. I'm running opensuse Tumbleweed 20230416 with KDE PLasma version: 5.27.4 KDE Frameworks Version: 5.105.0 Qt Version: 5.15.8 Kernel Version: 6.2.10-1-default (64-bit) Thanks, Mark

3 9

Monitoring lease files for ipv6 prefix change
by Per Jessen 29 Apr '23

29 Apr '23

Per Jessen wrote: > I don't know how easy those inotify tools are to use, but it ought to > be fairly easy to monitor for a file called 'dhclient6.*ethX.lease' > being written to '/var/lib/NetworkManager/'. Something like this maybe - explicitly not intended as a ready-to-go solution, only as inspiration: inotifywait -m /var/lib/NetworkManager/ |\ egrep 'dhclient6[^.]+\.lease$' |\ while read nmdir events nmfile do echo $events $nmfile do-your-stuff-here done Alternatively, there are some dhcp hooks too, I wonder if they might also be called by NetworkManager. /etc/dhcp/dhclient.d -- Per Jessen, Zürich (11.4°C) Member, openSUSE Heroes (2016 - present) We're hiring - https://en.opensuse.org/openSUSE:Heroes

2 4

[oS-en] sed question
by Carlos E. R. 28 Apr '23

28 Apr '23

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I have a script (from somebody else) to download the image of the day from the NASA. I have modified the script quite a bit to download a range of days, even years of them. One key function is failing on today's picture. This is the relevant section of the script: +++...................... function get_page { echo "Downloading page to find image" #wget http://apod.nasa.gov/apod/ --quiet -O /tmp/apod.html wget https://apod.nasa.gov/apod/ap${SHORT_TODAY}.html --quiet -O /tmp/apod.html grep -m 1 jpg /tmp/apod.html | sed -e 's/<//' -e 's/>//' -e 's/.*=//' -e 's/"//g' -e 's/^/http:\/\/apod.nasa.gov\/apod\//' > /tmp/pic_url } get_page # Got the link to the image PICURL=`/bin/cat /tmp/pic_url` if [ -z $PICURL ]; then echo "Not found picture.jpg for $TODAY. Trying .png" try_png PICURL=`/bin/cat /tmp/pic_url` if [ -z $PICURL ]; then echo "Not found picture.png for $TODAY. html file saved" cp /tmp/apod.html $PICTURES_DIR/$TODAY.html return fi fi NAME=`basename $PICURL` PICTURE_NAME=${TODAY}_${NAME} ......................++- The script sets up variable SHORT_TODAY to 230427, so "get_page" downloads <https://apod.nasa.gov/apod/ap230426.html>. It is coughing up this error: Do 20230427 Downloading page to find image /home/cer/bin/NASA Picture-Of-The-Day Wallpaper Script, mine, loop: line 98: [: too many arguments basename: extra operand ‘Tarantula</a>’ Try 'basename --help' for more information. The problem is here: cer@Isengard:~> grep -m 1 jpg /tmp/apod.html | sed -e 's/<//' -e 's/>//' -e 's/.*=//' -e 's/"//g' -e 's/^/http:\/\/apod.nasa.gov\/apod\//' http://apod.nasa.gov/apod/image/1602/Tarantula-HST-ESO-annotated1800.jpgAro… the Tarantula</a> cer@Isengard:~> The source html goes like this: <a href="image/1602/Tarantula-HST-ESO-annotated1800.jpg">Around the Tarantula</a> are other star forming regions with young star clusters, filaments, and blown-out <a href="ap080327.html">bubble-shaped</a> clouds. On the day before, it goes like this (here the script works as expected): 2023 April 26 <br> <a href="image/2304/MoonArc_zanarello_1365.jpg"> <IMG SRC="image/2304/MoonArc_zanarello_960.jpg" alt="A nearly full Moon is seen through the famous Arc de Triomphi with trees and cars lining the foreground. Please see the explanation for more detailed information." style="max-width:100%"></a> </center> where the function generates this text: cer@Isengard:~> echo '<a href="image/2304/MoonArc_zanarello_1365.jpg">' | grep -m 1 jpg | sed -e 's/<//' -e 's/>//' -e 's/.*=//' -e 's/"//g' -e 's/^/http:\/\/apod.nasa.gov\/apod\//' http://apod.nasa.gov/apod/image/2304/MoonArc_zanarello_1365.jpg cer@Isengard:~> My problem is, I don't talk sed O:-) So, I ask here if someone knows how to change that sed command so that it works ;-) (the full script I modified is: https://paste.opensuse.org/7f484bb7c807) - -- Cheers Carlos E. R. (from 15.4 x86_64 at Telcontar) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCZErjCRwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfV7RYAnR1jKw8AXonj2E837r7L cY3g08VvAJ418VFrG/lGU3gad7PPUwFceZIfIg== =KHba -----END PGP SIGNATURE-----

6 13

L-15.5 1st impression
by bent fender 28 Apr '23

28 Apr '23

I hope I'm wrong but it looks like 15.4-kde will be my last one. I haven tried only the kde desktop but I see no way to set up a conventional Application launcher with thew cascading menu tree. I even pre-copied an entire user folder from 15.4 but none of that had any effect. What I do see is a smartphoneish, microcancerish, touchpadish deskdump of which I will have none. Tomorrow I'll look at the XFCE setup.

6 30

local smtp server - isp switching off tsl1.0 and tsl1.1 and no key transmissions
by Simon Becherer 28 Apr '23

28 Apr '23

Hi, because my isp has yesterday switched off unencrypted and tsl1.0 + tsl1.1 connections to smtp server, my "all in one machine" "brother mfc-7460dn" is not able to "scan to email" any more. :-(((( even with the latest firmware i installed yesterday (firmware M from 2019) so my idea is now to have a local smpt server set up at least to receive local my scans as emails. and/or if not to complicated would be nice to forward the internal unencrypted mails encrypted with more up to date tsl to the isp-mailserver that they could send it over the web. now my question: is for this there a easy way to do? on all my tumbleweed systems have postfix running. never used except for system mails, and always only send/received at localhost. (no other interface open for it) command "mailto" did anybody have something like this running and have some tips how to configure the 10000lines of postfix configuration files in etc/postfix ?? (set up the port and all this stuff)? some suggestions would be nice. simoN -- www.becherer.de

4 5

"Authorization required, but no authorization protocol specified"
by Siard 27 Apr '23

27 Apr '23

Hi, I installed a new modem. It has a wired ethernet connection to my PC. But now, every time I start an application in X, this message shows up in the terminal where it was started from: Authorization required, but no authorization protocol specified Authorization required, but no authorization protocol specified And those applications take much longer to start. For example, evince used to start in half a second without leaving any messages in the terminal. Now it takes about a minute, leaving lots of messages, see below. Searching the internet, my impression is that it has something to do with the hostname. /etc/hostname is empty. Is that normal? I also have Debian on my machine, but this phenomenon does not show up there. Any idea what could cause this? When starting evince from an x-terminal, these are the messages that show up: Authorization required, but no authorization protocol specified Authorization required, but no authorization protocol specified ** (evince:5473): WARNING **: 12:49:52.808: AT-SPI: Could not obtain desktop path or name ** (evince:5473): WARNING **: 12:49:52.817: atk-bridge: get_device_events_reply: unknown signature ** (evince:5473): WARNING **: 12:49:52.817: atk-bridge: GetRegisteredEvents returned message with unknown signature ** (evince:5473): WARNING **: 12:49:52.830: AT-SPI: Could not obtain desktop path or name ** (evince:5473): WARNING **: 12:49:52.838: AT-SPI: Could not obtain desktop path or name ** (evince:5473): WARNING **: 12:49:52.838: atk-bridge: get_device_events_reply: unknown signature ** (evince:5473): WARNING **: 12:49:52.838: atk-bridge: GetRegisteredEvents returned message with unknown signature ** (evince:5473): WARNING **: 12:49:52.838: AT-SPI: Could not obtain desktop path or name ** (evince:5473): WARNING **: 12:49:52.844: AT-SPI: Could not obtain desktop path or name ** (evince:5473): WARNING **: 12:49:52.844: atk-bridge: get_device_events_reply: unknown signature ** (evince:5473): WARNING **: 12:49:52.844: atk-bridge: GetRegisteredEvents returned message with unknown signature

3 6

[oS-en] Firewall and IPv6
by Carlos E. R. 25 Apr '23

25 Apr '23

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I discovered that my ISP provided "router" does not do any firewalling on IPv6. All my IPv6 capable machines are fully visible from internet. My Linux machines have a firewall. On some of them, I opened ports to be used in the intranet. It was obvious, an address such as 192.1.1.50 was in my intranet. Now, how the $%&# can the firewall that an incoming IPv6 address is actually in my intranet, or is external? Consider that my ISP provided prefix is not fixed, but is dynamic. I can not write the address in any script, because it changes when the router reboots. Ideas? - -- Cheers Carlos E. R. (from 15.4 x86_64 at Telcontar) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCZEGwWxwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfV5REAoIRuza8qZ9ujSodV19fR 3ct3DQWAAKCXvRiIuzBRKmDm4QLg9gCnqEgnew== =RRvf -----END PGP SIGNATURE-----

10 163