- openSUSE Support

chronyc looses sync
by Marco Calistri 03 Aug '21

03 Aug '21

I already asked but didn't get feedback so far. Why chronyc looses the syncing with external NTP during system st/by and it is necessary to manually re-sync? ^? time.cloudflare.com 0 6 0 - +0ns[ +0ns] +/- 0ns ^? par.cyberbits.eu 0 6 0 - +0ns[ +0ns] +/- 0ns ^? static.102.162.46.78.cli> 0 6 0 - +0ns[ +0ns] +/- 0ns ^? pob01.mulx.net 0 6 0 - +0ns[ +0ns] +/- 0ns ^? ntp.rol.net.mv 0 6 0 - +0ns[ +0ns] +/- 0ns ^? mail.masters-of-cloud.de 0 6 0 - +0ns[ +0ns] +/- 0ns sudo chronyc burst 4/4; sudo chronyc makestep [sudo] password di root: 200 OK 200 OK *^* time.cloudflare.com* 3 6 0 20m -85us[+1906us] +/- 71ms ^- par.cyberbits.eu 2 6 0 20m -4421us[-2430us] +/- 150ms ^- static.102.162.46.78.cli> 2 6 0 20m -15ms[ -15ms] +/- 162ms ^- pob01.mulx.net 2 6 0 20m +261us[ +261us] +/- 130ms ^- ntp.rol.net.mv 3 6 0 20m +1112ns[+1992us] +/- 426ms ^- mail.masters-of-cloud.de 2 6 0 20m +2603us[+2603us] +/- 108ms Thanks. Regards, -- Marco Calistri Build: openSUSE Tumbleweed 20210730 Kernel:5.13.4-1-default Desktop: XFCE (4.16.0)

3 16

Missing Key in Leap 15.3 (boo#1188475)
by Freek de Kruijf 03 Aug '21

03 Aug '21

Op dinsdag 3 augustus 2021 11:16:27 CEST schreef Andrei Borzenkov: > On Tue, Aug 3, 2021 at 12:02 PM Freek de Kruijf <freek(a)opensuse.org> wrote: > ... > > > > Install or force reinstall openSUSE-signkey-cert, reboot, perform > > > certificate enrollment in MokManager screen. The password MokManager > > > expects is operating system root user password. > > > > > > Or if package is already installed just manually create enrollment > > > request using > > > > > > mokutil --import /etc/uefi/certs/BDD31A9E-kmp.crt > > > > > > it will ask for password to use in MokManager. Reboot, confirm > > > certificate enrollment in MokManager screen. > > > > > > https://en.opensuse.org/openSUSE:UEFI#Enroll_MOK_certificate_with_mokuti > > > l_.2 8x86.2A_only.29 > > > > I tried this procedure, but did not succeed. > > Which of the two procedures listed above? I should have said tried suggestions in this article. > > > Maybe my situation is different. It is: > > Secure multi-boot laptop with openSUSE 15.2, 15.3, Tumbleweed and Windows > > Booting 15.3 gives error, caused by wrong certificate. I used Tumbleweed > > for > > the above procedure. > At which point? BIOS cannot load shim, shim cannot load grub, grub > cannot load kernel, some errors after kernel is loaded and started > (although I am not sure what would display these errors during boot)? When I boot 15.3 I from grub I get window with error ../../grub.......... bad shim signature ..... I used in Tumbleweed: mokutil --import /suse153/etc/uefi/certs/BDD31A9E-kmp.crt mokutil --import /etc/uefi/certs/BDD31A9E-kmp.crt both give: Already in kernel trusted keyring. > Did you verify that certificates are the same? I do not know. But if > you have a problem with 15.3 you should use whatever is delivered with > and for 15.3. > > > Booting 15.2 succeeds also. > > Entering both certificates using "mokutil --import" gives that they are > > already present. See above for both. > Who are "they"? But educated guess is that you are booting using > openSUSE shim which embeds openSUSE certificate which is the reason > mokutil says this certificate is already present. > > > Booting MokManager.efi and choosing Enroll from disk gives > > I never said to choose "enroll from disk" so you must have been > following some other procedure. > > > all kinds of things to choose from; in fact they are folders. I tried all, > > but afterwards I am still unable to boot 15.3. When I list available > > certificates I only see one. > > > > What am I doing wrong? > > It is difficult to understand what you are doing. Anyway, this is out > of place on this list. Post your question to support list and provide > > 1. output of efibootmgr -v BootCurrent: 0000 Timeout: 0 seconds BootOrder: 0000,0001,2001,2002,2003 Boot0000* opensuse-secureboot HD(2,GPT,4b5a9cda-e2ef-4d5f-87ee- a79393267592,0x12c800,0x96000)/File(\EFI\opensuse\shim.efi) Boot0001* Windows Boot Manager HD(2,GPT,4b5a9cda-e2ef-4d5f-87ee- a79393267592,0x12c800,0x96000)/ File(\EFI\Microsoft\Boot\bootmgfw.efi)WINDOWS.........x...B.C.D.O.B.J.E.C.T.=. {.9.d.e.a.8.6.2.c.-.5.c.d.d.-.4.e.7.0.-.a.c.c.1.-.f.3.2.b.3.4.4.d. 4.7.9.5.}.................... Boot2001* EFI USB Device RC Boot2002* EFI DVD/CDROM RC Boot2003* EFI Network RC > 2. mokutil --list-enrolled [key 1] SHA1 Fingerprint: 46:59:83:8c:82:03:fe:15:52:ad:19:e1:86:09:db:21:7e:3a:d2:4f Certificate: Data: Version: 3 (0x2) Serial Number: 1 (0x1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=openSUSE Secure Boot CA, C=DE, L=Nuremberg, O=openSUSE Project/emailAddress=build(a)opensuse.org Validity Not Before: Aug 26 16:12:07 2013 GMT Not After : Jul 22 16:12:07 2035 GMT Subject: CN=openSUSE Secure Boot CA, C=DE, L=Nuremberg, O=openSUSE Project/emailAddress=build(a)opensuse.org [rest removed...] Only one certificate. > 3. full script of "mokutil --import" including full invocation and all > messages. See above. > 4. Description at which point during boot you get an error and > screenshot/photo of this error (upload to https://susepaste.org/) See above description. > Even better would be a photo of each boot step starting from the very > first screen until you get this error. I get the grub menu and choose Leap 15.3 after that I get a subwindow with the error message mentioned above. When I use c in grub menu I enter: chainloader (hd0,2)/EFI/opensuse/MokManager.efi and boot behind grub> prompt I get the MokManager window asking password, which I enter, but after that I do NOT get Enroll Mok, only boot, enroll from disk, and enroll from hash. -- fr.gr. member openSUSE Freek de Kruijf

2 2

[support] bad documentation re allowing mounting HPFS in 15.3?
by Felix Miata 30 Jul '21

30 Jul '21

I just did an online upgrade to a multiboot system with OS/2 from 15.2 to 15.3, and got stuck in emergency mode due to the failure to mount the /hpfs/G entry in /etc/fstab. Most files in /etc/modprobe.d/ are timestamped 6 July. 60-blacklist_fs_hpfs.conf has a timestamp from the zypper dup period, but it contains nothing but comments. https://doc.opensuse.org/release-notes/x86_64/openSUSE/Leap/15.3/ apparently addresses the subject erroneously. It says unsupported modules are in kernel-default-extra, but installing kernel-default-extra didn't change anything. I had to install kernel-default-optional to get the required hpfs driver. -- Evolution as taught in public schools is, like religion, based on faith, not based on science. Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata

3 2

Login with nextcloud client
by Jogchum Reitsma 29 Jul '21

29 Jul '21

Hi, With former versions of the nextcloud client, I got a dialogue for each nextcloud account, letting me log in and grant access to it's server compartment. But with the last versions, (I'm not certain at which version the change came; I am now at 3.2.4-1.1) the dialogue let's me open the browser for the login. I still gives dialogue windows for the respective nc-users, but the link in the browser gives no possibility to enter a user name, or password. So effectively, the only one able to log in on the nc-server is the default user. The server is at 19.0.13, on Ubuntu 18.04.8 (the only version available on the odroid n2 the server is running at). The client run at TW, updated today. Anyone an idea how to solve this? Many thanks in advance, regards, Jogchum **

1 0

LXQt under Leap 15.3
by Chris Wong 28 Jul '21

28 Jul '21

Hi, During update to Leap 15.3 I also switched my Desktop from LXDE to LXQt. I found that all menu entries under "Preferences" that related to sub entries of YaST are not working as expected after sudo verification. This may due to the emitted command are being quoted i.e. '/sbin/yast2 sound' by LXQt sudo applet. Please advice on how can I do a temporary fix. Best Regards Chris

2 1

Leap 15.3 + SLE = Confusion
by Robin Klitscher 21 Jul '21

21 Jul '21

I've read the following announcement through multiple times: https://news.opensuse.org/2021/07/19/leap-gains-maintenance-update-improvem… but, being a bear of very little brain, I've failed to understand it. What does it mean? More specifically, what do I have to do to set up the repositories for keeping Leap 15.3 properly updated (when I get around to installing it, that is)? I'm flummoxed ...... -- Robin K Wellington "Harbour City" New Zealand

7 20

Hugin fails on TW - cannot initialise GLEW
by Rodney Baker 20 Jul '21

20 Jul '21

Hi all, I've just tried to run Hugin to stitch some recent photos together into panoramas, but it fails to run (last time I used it was about 4 years ago). When I run it from a konsole window I get the following: bakerr@mako /home $ hugin (hugin:15406): Gtk-CRITICAL **: 20:41:54.916: gtk_widget_set_size_request: assertion 'height >= -1' failed (hugin:15406): Gtk-CRITICAL **: 20:41:54.946: gtk_widget_set_size_request: assertion 'height >= -1' failed (hugin:15406): Gtk-CRITICAL **: 20:41:55.101: gtk_widget_set_size_request: assertion 'height >= -1' failed (hugin:15406): Gtk-CRITICAL **: 20:41:55.102: gtk_widget_set_size_request: assertion 'height >= -1' failed (hugin:15406): Gtk-CRITICAL **: 20:41:55.104: gtk_widget_set_size_request: assertion 'height >= -1' failed (hugin:15406): Gtk-CRITICAL **: 20:41:55.105: gtk_widget_set_size_request: assertion 'height >= -1' failed (hugin:15406): Gtk-CRITICAL **: 20:41:55.105: gtk_widget_set_size_request: assertion 'height >= -1' failed (hugin:15406): Gtk-CRITICAL **: 20:41:55.113: gtk_widget_set_size_request: assertion 'height >= -1' failed (hugin:15406): Gtk-CRITICAL **: 20:41:55.114: gtk_widget_set_size_request: assertion 'height >= -1' failed (hugin:15406): Gtk-CRITICAL **: 20:41:55.115: gtk_widget_set_size_request: assertion 'height >= -1' failed (hugin:15406): Gtk-CRITICAL **: 20:41:55.115: gtk_widget_set_size_request: assertion 'height >= -1' failed (hugin:15406): Gtk-CRITICAL **: 20:41:55.115: gtk_widget_set_size_request: assertion 'height >= -1' failed ERROR: 20:41:55.509290 (/home/abuild/rpmbuild/BUILD/hugin-2020.0.0/src/hugin1/ hugin/GLViewer.cpp:133) SetUpContext(): Error initialising GLEW: Unknown error. Segmentation fault (core dumped) I have no idea what's with the /home/abuild/rpmbuild/BUILD/hugin-2020.0.0/ reference - hugin was installed via zypper and that directory does not exist at all. LibGLEW is installed (although it is not listed as a dependency and zypper does not report any missing dependencies or recommends when installing). Regards, Rodney. -- ================================================================================================================== Rodney Baker rodney.baker(a)iinet.net.au ==================================================================================================================

2 4

Repository "Update Repository (Debug)" warning
by J Leslie Turriff 15 Jul '21

15 Jul '21

For several days, I have been getting this warning while using zypper: | Warning: Repository 'Update Repository (Debug)' appears to be outdated. Consider using a different mirror or server. zypper lr -u shows | 14 | repo-debug-update | Update Repository (Debug) | Yes | (r ) Yes | Yes | http://download.opensuse.org/debug/update/leap/15.3/oss/ for this repository. I finally decided to follow the warning's recommendation, and started looking for a mirror, but on this page | https://mirrors.opensuse.org/list/all.html I see a different recommendation: | "The information on this page is generated directly off the database used by the master download server every 30 minutes. Under normal circumstances, there should be no need to use mirrors directly, and look at this table for that purpose. If you do see the need, there might be something wrong and it would be appreciated if you notify the admins about it, so it can be fixed for the benefit of yourself, and possibly many other users." So, is there indeed something wrong with the configuration of the Update Repository (Debug)? Leslie -- Distribution: openSUSE Leap 15.3 x86_64

4 5

problems getting masquerade to work
by L A Walsh 12 Jul '21

12 Jul '21

Have my linux box with internal+external interfaces and trying to enable masquerading so that a win-machine on the internal side (192.168.3.0/24) gets packets forwarded back and forth through the linux box. This used to work some time ago, but hasn't worked since I lost my disks yr ago last April (since restored, but not everything is working). Have a script 'masquerade' I think derived from a suse RC script that produces output like: > sudo ./masquerade2 status Intf-Addr-map: eth0 192.168.3.1 eth5 192.168.3.1 eth2 173.164.175.65 br0 192.168.3.1 External Interfaces: eth2 Internal Interfaces: eth0 eth5 br0 Internal Nets: 192.168.3.0 > >>./masquerade2#447(status_masquerade2)> iptables -t nat -L POSTROUTING Chain POSTROUTING (policy ACCEPT) target prot opt source destination > >>./masquerade2#448(status_masquerade2)> iptables -L FORWARD Chain FORWARD (policy ACCEPT) target prot opt source destination DROP all -- anywhere anywhere DROP all -- anywhere anywhere > >>./masquerade2#449(status_masquerade2)> set +x IPV4 Forwarding: 1 Interface fwd eth2: 1 Interface fwd eth0: 1 Interface fwd eth5: 1 Interface fwd br0: 1 Chain FORWARD (policy ACCEPT) ..running ----- eth0+5 form an internal net 'br0'. That's the one I'm trying to forward out eth2. When I try to ping google.com from inside, I can see the packets going out of windows toward it, but nothing coming back is seen on the linux-router (or on the client). the linux machine can ping google just fine (same addr). Are there modules that need loading that perhaps I don't have loadeD? lsmod shows: > lsmod Module Size Used by iptable_nat 16384 0 nf_nat 45056 1 iptable_nat nf_conntrack 151552 1 nf_nat nf_defrag_ipv4 16384 1 nf_conntrack loop 40960 2 brd 16384 1 md4 16384 0 md5 16384 1 sha512_generic 16384 1 cmac 16384 1 sha256_generic 16384 1 libsha256 24576 1 sha256_generic hmac 16384 2 cifs 1044480 2 libdes 24576 1 cifs fscache 405504 1 cifs libarc4 16384 1 cifs bridge 212992 0 stp 16384 1 bridge llc 16384 2 bridge,stp ebtable_filter 16384 0 ebtables 36864 1 ebtable_filter nfnetlink_queue 24576 0 nfnetlink_log 20480 0 nfnetlink 16384 2 nfnetlink_queue,nfnetlink_log iptable_filter 16384 1 ip_tables 28672 2 iptable_filter,iptable_nat bfq 77824 4 input_leds 16384 0 coretemp 20480 0 led_class 20480 1 input_leds mousedev 20480 1 hwmon 32768 1 coretemp kvm_intel 237568 0 kvm 770048 1 kvm_intel irqbypass 16384 1 kvm crc32c_intel 24576 0 intel_cstate 20480 0 intel_uncore 176128 0 bnx2 90112 0 ses 20480 0 enclosure 16384 1 ses serio_raw 20480 0 dcdbas 20480 0 ipmi_ssif 36864 0 wdat_wdt 20480 0 button 20480 0 gpio_ich 16384 0 i2c_core 90112 1 ipmi_ssif acpi_cpufreq 28672 1 wmi 32768 0 i7core_edac 28672 0 edac_core 69632 2 i7core_edac ----------------------------- I have a bunch more modules that aren 't loaded: # modprobe Display all 478 possibilities? (y or n) 8021q acpi_configfs acpi_extlog acpi_ipmi acpi_pad acpi_tad act_bpf act_connmark act_ctinfo act_gate act_ife act_ipt act_meta_mark act_meta_skbprio act_meta_skbtcindex act_mirred act_nat act_pedit act_police act_sample act_skbedit act_skbmod act_tunnel_key act_vlan af_packet_diag ahci ahci_platform arc4 arp_tables arpt_mangle arptable_filter asn1_decoder at24 bareudp bcache bcm-phy-lib blake2b_generic blake2s-x86_64 bonding br_netfilter broadcom btrfs cachefiles ccm chacha-x86_64 cls_basic cls_bpf cls_cgroup cls_flow cls_flower cls_fw cls_matchall cls_route cls_rsvp cls_tcindex cls_u32 configfs cpufreq_powersave cpufreq_userspace crc16 crc64 ctr curve25519-x86_64 cuse custom_method dccp dccp_diag dccp_ipv4 deflate dell-smbios dell-wmi-descriptor dell_rbu des_generic dm-clone dm-log dm-mirror dm-region-hash dm-thin-pool dm-unstripe dm-writecache dmi-sysfs dptf_power drbg drivetemp ebt_802_3 ebt_among ebt_arp ebt_arpreply ebt_dnat ebt_ip ebt_limit ebt_log ebt_mark ebt_mark_m ebt_nflog ebt_pkttype ebt_redirect ebt_snat ebt_stp ebt_vlan ebtable_broute ebtable_nat ecb edd eeprom efi-pstore efibc efivarfs efivars em_ipset em_ipt em_meta em_nbyte em_text em_u32 exfat ext4 failover fan ff-memless firewire-core firewire-ohci firewire-sbp2 fou fuse gameport gcm geneve gf128mul ghash-generic gpio-aggregator gpio-generic gre hangcheck-timer hid-kensington hid-microsoft hid-steam i2c-algo-bit i2c-dev i2c-gpio i2c-i801 i2c-isch i2c-mux i2c-mux-gpio i2c-mux-pca9541 i2c-mux-pca954x i2c-nvidia-gpu i2c-scmi i2c-smbus i5500_temp i5k_amb iTCO_wdt ifb ife input-polldev intel-wmi-sbl-fw-update intel_pch_thermal ip_gre ip_set ip_set_bitmap_ip ip_set_bitmap_ipmac ip_set_bitmap_port ip_set_hash_ip ip_set_hash_ipmac ip_set_hash_ipmark ip_set_hash_ipport ip_set_hash_ipportip ip_set_hash_ipportnet ip_set_hash_mac ip_set_hash_net ip_set_hash_netiface ip_set_hash_netnet ip_set_hash_netport ip_set_hash_netportnet ip_set_list_set ip_tunnel ip_vti ipip ipmi_poweroff ipmi_watchdog ipt_ECN ipt_REJECT ipt_SYNPROXY ipt_rpfilter iptable_mangle iptable_raw ipvlan ipvtap iscsi_boot_sysfs iscsi_ibft iscsi_target_mod iscsi_tcp isofs jbd2 jitterentropy_rng kcm kheaders kyber-iosched l2tp_core l2tp_debugfs l2tp_eth l2tp_ip l2tp_netlink ledtrig-audio libahci libahci_platform libblake2s libblake2s-generic libchacha libchacha20poly1305 libcurve25519 libcurve25519-generic libiscsi libiscsi_tcp libpoly1305 llc2 lpc_sch lz4 lz4_compress lz4hc lz4hc_compress lzo_compress macvlan macvtap matroxfb_DAC1064 matroxfb_Ti3026 matroxfb_accel matroxfb_base matroxfb_misc mbcache mei mei-me mq-deadline msdos net_failover netconsole netlink_diag nf_conncount nf_conntrack_amanda nf_conntrack_bridge nf_conntrack_broadcast nf_conntrack_ftp nf_conntrack_h323 nf_conntrack_irc nf_conntrack_netbios_ns nf_conntrack_netlink nf_conntrack_pptp nf_conntrack_sane nf_conntrack_sip nf_conntrack_snmp nf_conntrack_tftp nf_dup_ipv4 nf_log_arp nf_log_common nf_log_ipv4 nf_log_netdev nf_nat_amanda nf_nat_ftp nf_nat_h323 nf_nat_irc nf_nat_pptp nf_nat_sip nf_nat_snmp_basic nf_nat_tftp nf_reject_ipv4 nf_socket_ipv4 nf_synproxy_core nf_tproxy_ipv4 nfnetlink_acct nfnetlink_cthelper nfnetlink_cttimeout nfnetlink_osf nlmon nls_ascii ntfs nvme nvme-core overlay p8022 parport parport_pc pci-stub pktcdvd pmbus pmbus_core poly1305-x86_64 psample psnap qemu_fw_cfg raid6_pq ramoops rapl raw_diag rds rds_tcp reed_solomon regmap-i2c rpmsg_core sch_cake sch_cbq sch_cbs sch_choke sch_codel sch_drr sch_dsmark sch_etf sch_ets sch_fq sch_fq_codel sch_fq_pie sch_gred sch_hfsc sch_hhf sch_htb sch_ingress sch_mqprio sch_multiq sch_netem sch_pie sch_plug sch_prio sch_qfq sch_red sch_sfb sch_sfq sch_skbprio sch_taprio sch_tbf sch_teql scsi_transport_iscsi scsi_transport_spi scsi_transport_srp sctp sctp_diag seqiv serport sha1_generic softdog squashfs tap target_core_file target_core_iblock target_core_mod tcp_bbr tcp_bic tcp_cdg tcp_cubic tcp_dctcp tcp_hybla tcp_illinois tcp_nv tcp_vegas tcp_veno tcp_westwood tcp_yeah team team_mode_roundrobin thermal timeriomem-rng ts_bm ts_fsm ts_kmp ttynull tun tunnel4 udp_diag udp_tunnel uio usb-storage usbip-core usbip-host usbtouchscreen utf8-selftest uvesafb vboxguest vboxsf veth vga16fb vgastate vhci-hcd vhost vhost_iotlb vhost_net virtio virtio-rng virtio_balloon virtio_blk virtio_console virtio_input virtio_mmio virtio_net virtio_pci virtio_ring virtio_rpmsg_bus virtio_scsi virtiofs vmw_vmci vmxnet3 vrf vxlan wacom wacom_serial4 wacom_w8001 wireguard x86_pkg_temp_thermal xor xpad xt_AUDIT xt_CHECKSUM xt_CLASSIFY xt_CT xt_DSCP xt_HL xt_HMARK xt_IDLETIMER xt_LED xt_LOG xt_MASQUERADE xt_NETMAP xt_NFLOG xt_NFQUEUE xt_RATEEST xt_REDIRECT xt_TCPMSS xt_TCPOPTSTRIP xt_TEE xt_TPROXY xt_TRACE xt_addrtype xt_bpf xt_cgroup xt_cluster xt_comment xt_connbytes xt_connlabel xt_connlimit xt_connmark xt_conntrack xt_cpu xt_dccp xt_devgroup xt_dscp xt_ecn xt_esp xt_hashlimit xt_helper xt_hl xt_ipcomp xt_iprange xt_l2tp xt_length xt_limit xt_mac xt_mark xt_multiport xt_nat xt_nfacct xt_osf xt_owner xt_physdev xt_pkttype xt_policy xt_quota xt_rateest xt_realm xt_recent xt_sctp xt_set xt_socket xt_state xt_statistic xt_string xt_tcpmss xt_time xt_u32 xxhash_generic zlib_deflate zstd_compress ---------------- my modprobe complete only shows unloaded modules Any ideas? Thanks!

3 5

Re: Help - Realtek RTL8852AE WiFi
by Ariez Vachha - openSUSE 06 Jul '21

06 Jul '21

On 06/07/2021 01:06, Larry Finger wrote: > The code will not build on Leap 15.3 as I have not backported the kernel > API changes past kernel v5.4. > > Larry Thanks Larry, Good to know! I'm using TW now, but I would imagine there will be Leap demand down the line. Ariez

1 0