June 2019 - openSUSE Users - openSUSE Mailing Lists

[opensuse] Question about iptables and port forward masquerading
by Marc Chamberlin 11 Jun '19

11 Jun '19

Hi - I dunno if this is a good group to ask this question but I will give it a shot and perhaps get pointed to a better group... I am running the Apache James email server on an OpenSuSE 15.0 x64 system and because of some other requirements I have to run the James daemon under a system user name and not under root. To accomplish that I had to change all the standard email ports that it listens on, to higher ones (I added 10000 to the standard port numbers so for example instead of having the smtp server listen on port 25 I configured it to listen on port 10025. Then using SuSEfirewall2 I configured it to do forward masquerading to route connections from port 25 to port 10025. So for example, and in particular for localhost which is shown here, I did the following - (sorry about the formatting, Thunderbird seems to be making choices that I don't want and I haven't got the time to figure out how to tell Thunderbird to knock it off!.) FW_FORWARD_MASQ=" ... \ (ext and int interface routing not shown but it is similar to what is shown below for localhost) 0/0,127.0.0.1,tcp,25,10025,127.0.0.1 \ 0/0,127.0.0.1,tcp,465,10465,127.0.0.1 \ 0/0,127.0.0.1,tcp,587,10587,127.0.0.1 \ 0/0,127.0.0.1,tcp,110,10110,127.0.0.1 \ 0/0,127.0.0.1,tcp,995,10995,127.0.0.1 \ 0/0,127.0.0.1,tcp,143,10143,127.0.0.1 \ 0/0,127.0.0.1,tcp,993,10993,127.0.0.1" The server is not protected from the internal network (this is a SOHO net) and all the external ports are opened. From either the internal network, or from the external network I can use telnet to connect to either the low number ports or the high numbered ports successfully. But from the localhost I can only connect to the high numbered ports. Connecting to the low number ports, such as 25, gets me a Connection Refused message when I try and do a 'telnet localhost 25'. ('telnet localhost 10025' works!) Using netstat shows that indeed Apache James (a java application) is listening on for example port 10025 - netstat -plnt Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:10025 0.0.0.0:* LISTEN 25012/java and from a snip of the iptables I see this - iptables -t nat -vnL Chain PREROUTING (policy ACCEPT 226K packets, 15M bytes) pkts bytes target prot opt in out source destination (lots of other stuff removed, in particular the external interface as I don't want to show the IP addresses, but here is a bit showing some of the internal interface) 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 192.168.10.100 tcp dpt:25 to:192.168.10.100:10025 0 0 DNAT tcp -- lo * 0.0.0.0/0 192.168.10.100 tcp dpt:25 to:192.168.10.100:10025 22 1320 DNAT tcp -- p3p1 * 0.0.0.0/0 192.168.10.100 tcp dpt:25 to:192.168.10.100:10025 0 0 DNAT tcp -- p3p2 * 0.0.0.0/0 192.168.10.100 tcp dpt:25 to:192.168.10.100:10025 0 0 DNAT tcp -- tun0 * 0.0.0.0/0 192.168.10.100 tcp dpt:25 to:192.168.10.100:10025 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 192.168.10.100 tcp dpt:465 to:192.168.10.100:10465 0 0 DNAT tcp -- lo * 0.0.0.0/0 192.168.10.100 tcp dpt:465 to:192.168.10.100:10465 9 468 DNAT tcp -- p3p1 * 0.0.0.0/0 192.168.10.100 tcp dpt:465 to:192.168.10.100:10465 0 0 DNAT tcp -- p3p2 * 0.0.0.0/0 192.168.10.100 tcp dpt:465 to:192.168.10.100:10465 (and here is some of the things showing the localhost interface) 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 127.0.0.1 tcp dpt:25 to:127.0.0.1:10025 0 0 DNAT tcp -- lo * 0.0.0.0/0 127.0.0.1 tcp dpt:25 to:127.0.0.1:10025 0 0 DNAT tcp -- p3p1 * 0.0.0.0/0 127.0.0.1 tcp dpt:25 to:127.0.0.1:10025 0 0 DNAT tcp -- p3p2 * 0.0.0.0/0 127.0.0.1 tcp dpt:25 to:127.0.0.1:10025 0 0 DNAT tcp -- tun0 * 0.0.0.0/0 127.0.0.1 tcp dpt:25 to:127.0.0.1:10025 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 127.0.0.1 tcp dpt:465 to:127.0.0.1:10465 0 0 DNAT tcp -- lo * 0.0.0.0/0 127.0.0.1 tcp dpt:465 to:127.0.0.1:10465 0 0 DNAT tcp -- p3p1 * 0.0.0.0/0 127.0.0.1 tcp dpt:465 to:127.0.0.1:10465 0 0 DNAT tcp -- p3p2 * 0.0.0.0/0 127.0.0.1 tcp dpt:465 to:127.0.0.1:10465 0 0 DNAT tcp -- tun0 * 0.0.0.0/0 127.0.0.1 tcp dpt:465 to:127.0.0.1:10465 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 127.0.0.1 tcp dpt:587 to:127.0.0.1:10587 0 0 DNAT tcp -- lo * 0.0.0.0/0 127.0.0.1 tcp dpt:587 to:127.0.0.1:10587 0 0 DNAT tcp -- p3p1 * 0.0.0.0/0 127.0.0.1 tcp dpt:587 to:127.0.0.1:10587 0 0 DNAT tcp -- p3p2 * 0.0.0.0/0 127.0.0.1 tcp dpt:587 to:127.0.0.1:10587 0 0 DNAT tcp -- tun0 * 0.0.0.0/0 127.0.0.1 tcp dpt:587 to:127.0.0.1:10587 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 127.0.0.1 tcp dpt:110 to:127.0.0.1:10110 0 0 DNAT tcp -- lo * 0.0.0.0/0 127.0.0.1 tcp dpt:110 to:127.0.0.1:10110 0 0 DNAT tcp -- p3p1 * 0.0.0.0/0 127.0.0.1 tcp dpt:110 to:127.0.0.1:10110 yada yada yada... So what am I missing? It is important that I get localhost to accept connections on the low ports since I am using other tools, such as sendmail (in non-daemon mode) and I want it to use Apache James as it's MTA. Yet I cannot get connections to the low ports on localhost to work, but I am doing exactly the same sort of setup for the internal and external interfaces and there everything does work! Thanks in advance for any thoughts and ideas. I will be happy to provide more information, just ask! Marc.. -- --... ...-- .----. ... -.. . .-- .- --... .--. -..- .-- -- .- .-. -.-. Computers: the final frontier. These are the voyages of the user Marc. His mission: to explore strange new hardware. To seek out new software and new applications. To boldly go where no Marc has gone before! -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 5

[opensuse] A user writable directory in /run, security implications?
by Robert Hardy 11 Jun '19

11 Jun '19

For years, I have been using a user run script that globally adjusts the display for various lighting conditions (reproduced below). It writes a couple of files in the users home directory to save state, and it has always annoyed me that the globally saved state is not globally available. My thought is to write to a user writable directory in /run, perhaps /run/users, right next to /run/user, but I thought I should check with the experts as to possible security implications. I would also have to instantiate that directory on every boot, and I don't know how off the top of my head. That state is not saved across reboots is a plus. Thoughts? Perhaps such a directory should be available on every system. Here is /usr/local/bin/invert-display: #!/bin/sh if test -f ~/.altered-display; then xcalib -c; if test -f ~/.inverted-display; then rm ~/.altered-display ~/.inverted-display; #normal display else xcalib -red 0.75 0 100 -green 0.75 0 78 -blue 0.75 0 55 -i -a; mv ~/.altered-display ~/.inverted-display; #inverted display fi else if test -f ~/.inverted-display; then xcalib -co 60 -a; #nighttime away from city lights else xcalib -gc 2.2 -a; #high gamma for incident sunlight fi; touch ~/.altered-display; fi; I've used it for years on a laptop that rides around mounted in my car, where it helps deal with varying lighting such as direct sunlight and nighttime use. The idea at night is to minimize total light output so that my eyes can remain dark adapted, so it works best with light background colors. I have lightened the dark parts of the Breeze theme colors to suit, e.g., the active titlebar color matches the color for "Hover Decoration", etc. The script is run by clicking a panel button. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 2

Re: [opensuse] Question about iptables and port forward masquerading
by Marc Chamberlin 11 Jun '19

11 Jun '19

Aw but Jeffrey you may indeed be partially correct! My own additional research has now found that apparently localhost does not use the PREROUTING chain in the iptables and this is where SuSEfirewall2 is putting these FW_FORWARD_MASQ rules. I think what I have to do is coax SuSEFirewall2 to put the localhost port routing rules in the OUTPUT chain instead. So now the question is how do I do that? Back to Google and searching, hopefully someone here knows and/or will beat me to the answer and share it with this poor lost soul!? ;-) Marc... P.S. Jeffrey had replied privately to me so I have removed identifying information in order to respect that, but wanted to give him kudos and let him and the group see where he has lead me in my search for a solution to this problem. On 6/10/19 6:32 PM, Jeffrey ***** wrote: > My statement is incorrect. > > Sorry, > Jeffrey > > On Mon, Jun 10, 2019, 8:15 PM Jeffrey (email deleted since Jeffery > replied to me privately) wrote: > > I don't think connections to localhost go thru the firewall. > > Jeffrey > > On Mon, Jun 10, 2019, 7:49 PM Marc Chamberlin > <marc(a)marcchamberlin.com <mailto:marc@marcchamberlin.com>> wrote: > > > Hi - I dunno if this is a good group to ask this question but > I will > give it a shot and perhaps get pointed to a better group... > > I am running the Apache James email server on an OpenSuSE 15.0 x64 > system and because of some other requirements I have to run > the James > daemon under a system user name and not under root. To > accomplish that I > had to change all the standard email ports that it listens on, > to higher > ones (I added 10000 to the standard port numbers so for > example instead > of having the smtp server listen on port 25 I configured it to > listen on > port 10025. Then using SuSEfirewall2 I configured it to do forward > masquerading to route connections from port 25 to port 10025. > So for > example, and in particular for localhost which is shown here, > I did the > following - (sorry about the formatting, Thunderbird seems to > be making > choices > that I don't want and I haven't got the time to figure out how > to tell > Thunderbird to knock it off!.) > > FW_FORWARD_MASQ=" ... \ > (ext and int interface routing not shown but it is similar to > what is > shown below for localhost) > 0/0,127.0.0.1,tcp,25,10025,127.0.0.1 \ > 0/0,127.0.0.1,tcp,465,10465,127.0.0.1 \ > 0/0,127.0.0.1,tcp,587,10587,127.0.0.1 \ > 0/0,127.0.0.1,tcp,110,10110,127.0.0.1 \ > 0/0,127.0.0.1,tcp,995,10995,127.0.0.1 \ > 0/0,127.0.0.1,tcp,143,10143,127.0.0.1 \ > 0/0,127.0.0.1,tcp,993,10993,127.0.0.1" > > The server is not protected from the internal network (this is > a SOHO > net) and all the external ports are opened. From either the > internal > network, or from the external network I can use telnet to > connect to > either the low number ports or the high numbered ports > successfully. But > from the localhost I can only connect to the high numbered ports. > Connecting to the low number ports, such as 25, gets me a > Connection > Refused message when I try and do a 'telnet localhost 25'. > ('telnet > localhost 10025' works!) > > Using netstat shows that indeed Apache James (a java > application) is > listening on for example port 10025 - > > netstat -plnt > Active Internet connections (only servers) > Proto Recv-Q Send-Q Local Address Foreign > Address > State PID/Program name > > tcp 0 0 0.0.0.0:10025 > <http://0.0.0.0:10025> 0.0.0.0:* > LISTEN 25012/java > > and from a snip of the iptables I see this - > > iptables -t nat -vnL > Chain PREROUTING (policy ACCEPT 226K packets, 15M bytes) > pkts bytes target prot opt in out > source > destination > > (lots of other stuff removed, in particular the external > interface as I > don't want to show the IP addresses, but here is a bit showing > some of > the internal interface) > > 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 > <http://0.0.0.0/0> > 192.168.10.100 tcp dpt:25 to:192.168.10.100:10025 > <http://192.168.10.100:10025> > 0 0 DNAT tcp -- lo * 0.0.0.0/0 > <http://0.0.0.0/0> > 192.168.10.100 tcp dpt:25 to:192.168.10.100:10025 > <http://192.168.10.100:10025> > 22 1320 DNAT tcp -- p3p1 * 0.0.0.0/0 > <http://0.0.0.0/0> > 192.168.10.100 tcp dpt:25 to:192.168.10.100:10025 > <http://192.168.10.100:10025> > 0 0 DNAT tcp -- p3p2 * 0.0.0.0/0 > <http://0.0.0.0/0> > 192.168.10.100 tcp dpt:25 to:192.168.10.100:10025 > <http://192.168.10.100:10025> > 0 0 DNAT tcp -- tun0 * 0.0.0.0/0 > <http://0.0.0.0/0> > 192.168.10.100 tcp dpt:25 to:192.168.10.100:10025 > <http://192.168.10.100:10025> > 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 > <http://0.0.0.0/0> > 192.168.10.100 tcp dpt:465 to:192.168.10.100:10465 > <http://192.168.10.100:10465> > 0 0 DNAT tcp -- lo * 0.0.0.0/0 > <http://0.0.0.0/0> > 192.168.10.100 tcp dpt:465 to:192.168.10.100:10465 > <http://192.168.10.100:10465> > 9 468 DNAT tcp -- p3p1 * 0.0.0.0/0 > <http://0.0.0.0/0> > 192.168.10.100 tcp dpt:465 to:192.168.10.100:10465 > <http://192.168.10.100:10465> > 0 0 DNAT tcp -- p3p2 * 0.0.0.0/0 > <http://0.0.0.0/0> > 192.168.10.100 tcp dpt:465 to:192.168.10.100:10465 > <http://192.168.10.100:10465> > > (and here is some of the things showing the localhost interface) > > 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 > <http://0.0.0.0/0> > 127.0.0.1 tcp dpt:25 to:127.0.0.1:10025 > <http://127.0.0.1:10025> > 0 0 DNAT tcp -- lo * 0.0.0.0/0 > <http://0.0.0.0/0> > 127.0.0.1 tcp dpt:25 to:127.0.0.1:10025 > <http://127.0.0.1:10025> > 0 0 DNAT tcp -- p3p1 * 0.0.0.0/0 > <http://0.0.0.0/0> > 127.0.0.1 tcp dpt:25 to:127.0.0.1:10025 > <http://127.0.0.1:10025> > 0 0 DNAT tcp -- p3p2 * 0.0.0.0/0 > <http://0.0.0.0/0> > 127.0.0.1 tcp dpt:25 to:127.0.0.1:10025 > <http://127.0.0.1:10025> > 0 0 DNAT tcp -- tun0 * 0.0.0.0/0 > <http://0.0.0.0/0> > 127.0.0.1 tcp dpt:25 to:127.0.0.1:10025 > <http://127.0.0.1:10025> > 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 > <http://0.0.0.0/0> > 127.0.0.1 tcp dpt:465 to:127.0.0.1:10465 > <http://127.0.0.1:10465> > 0 0 DNAT tcp -- lo * 0.0.0.0/0 > <http://0.0.0.0/0> > 127.0.0.1 tcp dpt:465 to:127.0.0.1:10465 > <http://127.0.0.1:10465> > 0 0 DNAT tcp -- p3p1 * 0.0.0.0/0 > <http://0.0.0.0/0> > 127.0.0.1 tcp dpt:465 to:127.0.0.1:10465 > <http://127.0.0.1:10465> > 0 0 DNAT tcp -- p3p2 * 0.0.0.0/0 > <http://0.0.0.0/0> > 127.0.0.1 tcp dpt:465 to:127.0.0.1:10465 > <http://127.0.0.1:10465> > 0 0 DNAT tcp -- tun0 * 0.0.0.0/0 > <http://0.0.0.0/0> > 127.0.0.1 tcp dpt:465 to:127.0.0.1:10465 > <http://127.0.0.1:10465> > 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 > <http://0.0.0.0/0> > 127.0.0.1 tcp dpt:587 to:127.0.0.1:10587 > <http://127.0.0.1:10587> > 0 0 DNAT tcp -- lo * 0.0.0.0/0 > <http://0.0.0.0/0> > 127.0.0.1 tcp dpt:587 to:127.0.0.1:10587 > <http://127.0.0.1:10587> > 0 0 DNAT tcp -- p3p1 * 0.0.0.0/0 > <http://0.0.0.0/0> > 127.0.0.1 tcp dpt:587 to:127.0.0.1:10587 > <http://127.0.0.1:10587> > 0 0 DNAT tcp -- p3p2 * 0.0.0.0/0 > <http://0.0.0.0/0> > 127.0.0.1 tcp dpt:587 to:127.0.0.1:10587 > <http://127.0.0.1:10587> > 0 0 DNAT tcp -- tun0 * 0.0.0.0/0 > <http://0.0.0.0/0> > 127.0.0.1 tcp dpt:587 to:127.0.0.1:10587 > <http://127.0.0.1:10587> > 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 > <http://0.0.0.0/0> > 127.0.0.1 tcp dpt:110 to:127.0.0.1:10110 > <http://127.0.0.1:10110> > 0 0 DNAT tcp -- lo * 0.0.0.0/0 > <http://0.0.0.0/0> > 127.0.0.1 tcp dpt:110 to:127.0.0.1:10110 > <http://127.0.0.1:10110> > 0 0 DNAT tcp -- p3p1 * 0.0.0.0/0 > <http://0.0.0.0/0> > 127.0.0.1 tcp dpt:110 to:127.0.0.1:10110 > <http://127.0.0.1:10110> > yada yada yada... > > So what am I missing? It is important that I get localhost to > accept > connections on the low ports since I am using other tools, such as > sendmail (in non-daemon mode) and I want it to use Apache > James as it's > MTA. Yet I cannot get connections to the low ports on > localhost to work, > but I am doing exactly the same sort of setup for the internal and > external interfaces and there everything does work! > > Thanks in advance for any thoughts and ideas. I will be happy > to provide > more information, just ask! Marc.. > > -- > > --... ...-- .----. ... -.. . .-- .- --... .--. > -..- .-- -- .- .-. -.-. > Computers: the final frontier. These are the voyages of the > user Marc. His mission: to explore strange new hardware. > To seek out new software and new applications. To boldly > go where no Marc has gone before! > > > -- > To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org > <mailto:opensuse%2Bunsubscribe@opensuse.org> > To contact the owner, e-mail: opensuse+owner(a)opensuse.org > <mailto:opensuse%2Bowner@opensuse.org> > -- --... ...-- .----. ... -.. . .-- .- --... .--. -..- .-- -- .- .-. -.-. Computers: the final frontier. These are the voyages of the user Marc. His mission: to explore strange new hardware. To seek out new software and new applications. To boldly go where no Marc has gone before! -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0

[opensuse] How to connect two servers through an Ethernet A/B switch and not change the upstream MAC addy?
by Lew Wolfgang 10 Jun '19

10 Jun '19

Hi Folks, I've got an interesting network configuration problem that I'd like to run by you all. At this time I've got a server that connects to a switch at 1GbE over Cat-6 copper with RJ-45 connections. I don't have admin rights on the switch and it uses MAC address authentication to turn on the port. The server is rather important and contains about 400-TB of data in multiple RAID-6 arrays. I've received authorization to purchase a second "mirror" server to act as a warm spare. They will have a private 192.168 subnet via second Ethernet ports, maybe 10GbE, to synchronize the data on a regular basis between the servers. What's the best way to hook these up? I'm thinking of something like an RJ-45 A/B switch to manually connect one or the other server to the upstream switch. But then, it looks like simple switches just pass through the two back MAC addresses, and I need the A/B switch to present the same MAC to upstream at all times. Could I use macchanger on each of the servers to keep the same MAC presented through the switch? Or is there a better way? Thanks, Lew -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

6 22

[opensuse] About tail -f
by Carlos E. R. 10 Jun '19

10 Jun '19

Hi, I have a bunch of terminals running "tail -f /some/logfile" (directly from the terminal without bash). The problem is that when the logfile is rotated, it does not catch the "new" log. I have to terminate that tail and start another. How could I automate this, another tail program? (on some tail -f terminals I have, rotate works automatically) To be exact, I use this: xfce4-terminal \ --tab --command="/home/cer/bin/terminales_one /var/log/warn" --title="* Warn *" \ --tab --command="/home/cer/bin/terminales_one /var/log/messages" --title=messages \ Where terminales_one is: while true ; do tail -f -n 1000 $1 ; sleep 5 ; done Maybe this is the trick: -f, --follow[={name|descriptor}] output appended data as the file grows; an absent option argument means 'descriptor' -F same as --follow=name --retry So use -F instead? I'm going to try that, but it may take days till I notice if it works or not. -- Cheers / Saludos, Carlos E. R. (from 15.0 x86_64 at Telcontar)

2 1

[opensuse] Mirroring some files locally from a repository
by Carlos E. R. 10 Jun '19

10 Jun '19

Hi, I copy or mirror the 15.1 kernel and other files locally. I use: #!/bin/bash wget -r -l1 --no-parent -nd -A "kernel*rpm" -A "nfs-kernel*rpm" -A "virtualbox*rpm" "http://download.opensuse.org/distribution/leap/15.1/repo/oss/x86_64/" wget -r -l1 --no-parent -nd -A "kernel*rpm" -A "virtualbox*rpm" "http://download.opensuse.org/distribution/leap/15.1/repo/oss/noarch/" I see this in the output: --2019-06-10 18:33:55-- http://download.opensuse.org/distribution/leap/15.1/repo/oss/x86_64/kernel-… Connecting to download.opensuse.org (download.opensuse.org)|195.135.221.134|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 8040856 (7,7M) [application/x-rpm] Saving to: ‘kernel-vanilla-devel-4.12.14-lp151.26.4.x86_64.rpm.1.tmp’ kernel-vanilla-devel-4.12.14-lp151.26.4.x86_64.rpm 100%[=============================================================================================================>] 7,67M 1,63MB/s in 5,3s 2019-06-10 18:34:00 (1,46 MB/s) - ‘kernel-vanilla-devel-4.12.14-lp151.26.4.x86_64.rpm.1.tmp’ saved [8040856/8040856] Removing kernel-vanilla-devel-4.12.14-lp151.26.4.x86_64.rpm.1.tmp since it should be rejected. So first it downloads that file (slowly sometimes), then removes it, probably because there is already a local copy. How could I improve my download command line so that it doesn't download things that it is going to delete later, wasting time? -- Cheers / Saludos, Carlos E. R. (from 15.0 x86_64 at Telcontar)

2 2

[opensuse] Help locating text file in remote repository
by Dutch Ingraham 10 Jun '19

10 Jun '19

Hi everyone: I ask for your help in finding a specific file in a remote repository. Specifically, I am looking for an Haskell file named "Prelude.html." For those unfamiliar with Haskell, there are a number of files with this name; I am looking for a specific one canonically located in the ../base-4.12.0.0-docs/src directory [1]. I have tried searching with zypper to no avail: dutch@tumbleweed3500:~> zypper se --provides Prelude.html Loading repository data... Reading installed packages... No matching items found. Using the full path to the file does work, though: dutch@tumbleweed3500:~> zypper se --provides /usr/share/doc/ghc-8.6.5/html/libraries/base-4.12.0.0/Prelude.html Loading repository data... Reading installed packages... S | Name | Summary | Type --+----------------+----------------------------------------+-------- i | ghc-base-devel | Haskell base library development files | package However, I am looking for the version of Prelude.html that resides in the src/ subdirectory, but the canonical location provides no results: dutch@tumbleweed3500:~> zypper se --provides /usr/share/doc/ghc-8.6.5/html/libraries/base-4.12.0.0/src/Prelude.html Loading repository data... Reading installed packages... No matching items found. I also tried using zypper se --file-list Prelude, but that only returns package names including "prelude," not packages including a file named "Prelude." I have also tried a couple of utilities (scout, cnf) but they don't seem to search for text files. So, I have two questions: (1) is it possible to search a remote repository for opensuse files WITHOUT first having the full path name to the file? and (2) does opensuse package the specific file I'm looking for? Thanks for your help. [1] http://hackage.haskell.org/package/base-4.12.0.0/docs/. There are two Prelude.html files listed here; note about half way down the page there is a src/ entry with the second Prelude.html file. This is the file I am searching for. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 10

[opensuse] KDE Connect doesn't work - 15.1
by James Knott 09 Jun '19

09 Jun '19

KDE Connect, in openSUSE 15.1, doesn't seem to work. When I try to refresh the devices, neither my cell phone nor tablet are found. If I try to use the previously saved connection on either device, it fails. Both devices work fine with my notebook computer, running openSUSE 15.0. Has anyone else experienced this? Any ideas? tnx jk -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 3

[opensuse] OT: only a rspamd test
by Günther J. Niederwimmer 09 Jun '19

09 Jun '19

Test -- mit freundliche Grüßen / best regards, Günther J. Niederwimmer -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

5 6

[opensuse] Leap 15.1 Installation Experience
by Lew Wolfgang 09 Jun '19

09 Jun '19

Hi Folks, I just had a "bad" experience while doing a full install of Leap 15.1 from DVD. I'll relate my trials here just in case others might be affected too. I normally like to wait a bit before using a new release, but some "political" considerations overrode my usual caution. I've done one full install and maybe six or so upgrades from 15.0 without any unexpected issues. Nice job, developers! But this particular desktop was running 42.3, and had been running well for years since 13.2. It has an Nvidia GeForce GTS 250 frame buffer running on an Intel DP55KG mobo with an I7 CPU. So I installed 15.1 on an available SSD partition formatted with Ext-4. Things went well until the first boot, when the entire system froze. Black screen, no flashing lights, nothing. I was able to successfully boot with nomodeset, but the display was kind of funky in a number of different ways. I added the nvidia repository and the modules appeared to load after a zypper dup, but it didn't fix the problem. Further, rpm -qa didn't list the nvidia drivers! Maybe I was seeing things? So I next tried downloading and installing the proprietary Nvidia binary blob, which also didn't work. Strange. Given that the box was working well with 42.3 and earlier, and that I hadn't seen any issues like this with 15.0, I tried a 15.0 full-install from DVD and it worked! I added the nvidia repo and things continued to work after a zypper dup. Then, I ran a DVD upgrade, not full install, to 15.1 and it also worked! Add the nvidia repo again, and we're all happy as clams. Bottom line: Upgrade to 15.1 from 15.0 worked when a direct install of 15.1 failed. I suspect something is going on with the Nvidia frame buffer. I was kind of rushed with this install, the user isn't working this week and I needed to get it ready for his return, or I would have taken more time document and understand things a bit more. Maybe next time, I have a few more identical desktops to work through. I do notice some lingering bugs in things like kdesvn, coolkey, pam_pkcs11, and kscreenlocker, but I'll report those in bugzilla. Regards, Lew -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 10