October 2022 - openSUSE Users - openSUSE Mailing Lists

How would you do this?
by Lew Wolfgang 12 Oct '22

12 Oct '22

Hi Folks, I'm anticipating a requirement where I'll have lots of data on a large RAID-6 partition. The data consists of many 7-GB files that were uploaded over several Ethernet channels. The files then need to be copied to individual "JBOD" disks plugged into the same chassis as the RAID-6 array. Alas, there is more data on the RAID-6 then will fit on one JBOD disk, so I've got to come up with a process that will copy the files to a disk, then stop when the disk is full, prompt the operator to unmount and remove the JBOD, then plug in another one, and mount to continue the process. Repeat until all the data are copied to as many JBOD's as it takes. I think I can convince tar to write to multiple volumes and prompt to change media, but I don't want to treat the JBOD's as character devices, or like a tape drive in other words. I'd like to take any one of the disks in a series and mount them on another host and read the files without having to load the other disks in that series. I'm thinking a fancy shell script is called for here. I bet that rsync should be leveraged to allow restarting from an aborted copy process. Any ideas? It seems to be a common requirement, maybe someone's done it already? Regards, Lew

11 36

Re: Adaptable Linux Platform v0.01 shows that the future of SLE is containerized
by Carlos E. R. 10 Oct '22

10 Oct '22

On 2022-10-10 14:14, Roger Oberholtzer wrote: > On Mon, Oct 10, 2022 at 1:56 PM Carlos E. R. <> wrote: >> On 2022-10-10 13:50, Roger Oberholtzer wrote: >>> On Mon, Oct 10, 2022 at 1:44 PM Carlos E. R. <> wrote: >>> >>>>> So the first build has BTRFS and BTRFS is linked to transactional >>>>> updates. Did it say anywhere that support for your beloved ext4 >>>>> filesystem will be removed, did it say that a package manager will be >>>>> removed? >>>> >>>> Yes. >>> >>> Surely the ext4 thing is only for / and related OS related partitions? >>> Some other data disk must surely be able to be ext4. >> AFAIK, the basic system that is installed "the ALP way" is an image >> somehow cloned to the hard disk. It is a RO filesystem done in btrfs, so >> "/" is btrfs, no way out of this. Updates and additions/modifications go >> as snapshots to this initial image. > > That's now it has been for a while if you are using btrfs/snapper. I > think it's not a bad thing. It has worked very well for me when a > Tumbleweed update borked things. I have never had an issue with btrfs. Well, I simply do not want btrfs and snapshots. I prefer plain ext4 for "/". That's enough for me to start running away from ALPS. > Having said that, on our data collection disks (not the OS), we prefer > ext4. Old habits. And we can mount them directly on Windows (via > add-on software). I don't know of an alternative like that for btrfs. > > -- Cheers / Saludos, Carlos E. R. (from 15.3 x86_64 at Telcontar)

2 1

How to get out of KDE
by Siard 10 Oct '22

10 Oct '22

Hi, I use mate and openbox in TW, and thought I'd have a look at KDE. So I installed KDE as described here: https://en.opensuse.org/SDB:KDE_install However, my display manager, lightdm, has now been replaced by KDE's display manager, SDDM I believe, with which I can only log into KDE. So I'm stuck with KDE! In YaST's sysconfig editor, Desktop > Display manager, everything is greyed out. In /etc/sysconfig/displaymanager, if I add 'DISPLAYMANAGER=lightdm', it has no effect. So how could I still log into a window manager other than KDE?

4 6

T-Bird/pwd(?) issue
by bent fender 10 Oct '22

10 Oct '22

I frown on sensitive data like passwords being stored AT ALL, so MY method and THE method for any software on MY computer has to be MANUALLY input pwds EVERY time. With every app including any trace or form of kwallet tabooed in valiant Yast, and a brand new instance of T-Bird launched, I observed that AFTER supplying my usenet provider id and pwd I could get a list of groups from which I could select any to subscribe to. Fine, all is as it should be. Next comes the fubar, on a relaunch of T-Bird after a right click on my usenet server to do more subscribes all I get is 'Please Wait'. No dialog asking for the usenet provider id/pwd any more. I can only suspoect that my usenet provider giganews is waiting for an id/pwd that isn't coming while I'm wondering where the id/pwd dialog went. openSUSE Tumbleweed , Kernel=6.0.0-1-default on x86_64, DM=sddm, DE=KDE, ST=x11,grub2, GPT, BIOS-boot -- Oh Lord of the Keyrings on high, have I got bad news for you: the word trust is nowhere to be found in my security dictionary.

3 3

[oS-en] Apps crashing.
by Carlos E. R. 10 Oct '22

10 Oct '22

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I have apps randomly crashing, and I suspect they are "hiting a limit". Currently I have: cer@Telcontar:~> ulimit -a core file size (blocks, -c) unlimited data seg size (kbytes, -d) unlimited scheduling priority (-e) 0 file size (blocks, -f) unlimited pending signals (-i) 128109 max locked memory (kbytes, -l) 64 max memory size (kbytes, -m) unlimited open files (-n) 2048 pipe size (512 bytes, -p) 8 POSIX message queues (bytes, -q) 819200 real-time priority (-r) 0 stack size (kbytes, -s) 8192 cpu time (seconds, -t) unlimited max user processes (-u) 4096 virtual memory (kbytes, -v) unlimited file locks (-x) unlimited cer@Telcontar:~> Files I have doubled about a week ago, when I noticed that opening several firefox instances would crash. max user processes I increased years ago, also because of firefox. Now it is happening to other apps, like gkrellm or thunar. See a coredump: <1.2> 2022-10-08T17:35:59.893333+02:00 Telcontar systemd-coredump 1129 - - Process 22105 (Thunar) of user 1000 dumped core.#012#012Stack trace of thread 22105:#012#0 0x00005558bb51b430 n/a (thunar + 0x4e430)#012#1 0x00005558bb52d4bd n/a (thunar + 0x604bd)#012#2 0x00007f3222910546 n/a (libgtk-3.so.0 + 0x353546)#012#3 0x00007f32227033b0 n/a (libgtk-3.so.0 + 0x1463b0)#012#4 0x00007f3220bb3180 g_hash_table_foreach (libglib-2.0.so.0 + 0x41180)#012#5 0x00007f322270328b n/a (libgtk-3.so.0 + 0x14628b)#012#6 0x00007f3222708b19 n/a (libgtk-3.so.0 + 0x14bb19)#012#7 0x00007f322299c51f n/a (libgtk-3.so.0 + 0x3df51f)#012#8 0x00007f3220eaae26 n/a (libgobject-2.0.so.0 + 0x13e26)#012#9 0x00007f3220ec740c g_signal_emit_valist (libgobject-2.0.so.0 + 0x3040c)#012#10 0x00007f3220ec795f g_signal_emit (libgobject-2.0.so.0 + 0x3095f)#012#11 0x00007f3222704d1a gtk_cell_area_apply_attributes (libgtk-3.so.0 + 0x147d1a)#012#12 0x00007f3222923f5d n/a (libgtk-3.so.0 + 0x366f5d)#012#13 0x00007f32229260c a n/a (libgtk-3.so.0 + 0x3690ca)#012#14 0x00007f322292c095 n/a (libgtk-3.so.0 + 0x36f095)#012#15 0x00007f32222edcb0 n/a (libgdk-3.so.0 + 0x2fcb0)#012#16 0x00007f3220bc1007 n/a (libglib-2.0.so.0 + 0x4f007)#012#17 0x00007f3220bc4624 g_main_context_dispatch (libglib-2.0.so.0 + 0x52624)#012#18 0x00007f3220bc49c0 n/a (libglib-2.0.so.0 + 0x529c0)#012#19 0x00007f3220bc4a4c g_main_context_iteration (libglib-2.0.so.0 + 0x52a4c)#012#20 0x00007f32211ce8fd g_application_run (libgio-2.0.so.0 + 0xdb8fd)#012#21 0x00005558bb4f72a2 n/a (thunar + 0x2a2a2)#012#22 0x00007f322058f29d __libc_start_main (libc.so.6 + 0x3529d)#012#23 0x00005558bb4f730a n/a (thunar + 0x2a30a)#012#012Stack trace of thread 22123:#012#0 0x00007f32206651c9 __poll (libc.so.6 + 0x10b1c9)#012#1 0x00007f3220bc4939 n/a (libglib-2.0.so.0 + 0x52939)#012#2 0x00007f3220bc4a4c g_main_context_iteration (libglib-2.0.so.0 + 0x52a4c)#012#3 0x00007f3207bf363d n/a (libdconfsettings.so + 0x963d)#012#4 0x00007f3220bedf5e n/a (libglib-2.0.so. 0 + 0x7bf5e)#012#5 0x00007f32209596ea start_thread (libpthread.so.0 + 0xa6ea)#012#6 0x00007f3220671a6f __clone (libc.so.6 + 0x117a6f)#012#012Stack trace of thread 22120:#012#0 0x00007f32206651c9 __poll (libc.so.6 + 0x10b1c9)#012#1 0x00007f3220bc4939 n/a (libglib-2.0.so.0 + 0x52939)#012#2 0x00007f3220bc4c82 g_main_loop_run (libglib-2.0.so.0 + 0x52c82)#012#3 0x00007f3221208c86 n/a (libgio-2.0.so.0 + 0x115c86)#012#4 0x00007f3220bedf5e n/a (libglib-2.0.so.0 + 0x7bf5e)#012#5 0x00007f32209596ea start_thread (libpthread.so.0 + 0xa6ea)#012#6 0x00007f3220671a6f __clone (libc.so.6 + 0x117a6f)#012#012Stack trace of thread 22119:#012#0 0x00007f32206651c9 __poll (libc.so.6 + 0x10b1c9)#012#1 0x00007f3220bc4939 n/a (libglib-2.0.so.0 + 0x52939)#012#2 0x00007f3220bc4a4c g_main_context_iteration (libglib-2.0.so.0 + 0x52a4c)#012#3 0x00007f3220bc4a91 n/a (libglib-2.0.so.0 + 0x52a91)#012#4 0x00007f3220bedf5e n/a (libglib-2.0.so.0 + 0x7bf5e)#012#5 0x00007f32209596ea start_thread (libpthrea d.so.0 + 0xa6ea)#012#6 0x00007f3220671a6f __clone (libc.so.6 + 0x117a6f) How can I find out which of the limits, in any, are being hit? Say, "ulimit -a" prints all the limits. Can I also print the current number used, somehow? man ulimit doesn't seem to say. There is also no entry in syslog about a limit being hit, one has to guess. - -- Cheers Carlos E. R. (from 15.3 x86_64 at Telcontar) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCY0GmFBwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfV7UsAn02y/CaKSawVEyTP2Wmt TNV59qTuAJ45vDQFXRtHi60VtfQeLH3szxInKw== =4SB4 -----END PGP SIGNATURE-----

4 12

Chromium vs. Firefox
by Nicolas Kovacs 08 Oct '22

08 Oct '22

Hi, After last night's update (Tumbleweed), Chromium starts every now and then, and Firefox works in the sense that chickens fly and horses swim. Which means I can't get any work done on my OpenSUSE workstation. Now what ? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

10 23

Using Let's Encrypt SSL Certificates with Postfix/Dovecot
by David C. Rankin 04 Oct '22

04 Oct '22

All, If you host a mail server, you know the painful reality of new security restrictions imposed by mail programs refusing to send or receive mail due to SSL/TLS certificate complaints. E.g. self-signed, expired ... The good news is if you also run a web server and have SSL certificates for your domain, you can use the same certificates for your mail host. I use letsencrypt.org for the web certs (free as open-source and Linux should be). After the latest round of IOS updates and having my self-signed cert expire, I decided to just bite the bullet and put my mail server(s) on real certificates so I don't have to deal with this again -- it worked. The changes for dovecot are simple, just remove any self-signed cert you were using with `ssl_dh=...` and then add the path to your full certificates in conf.d/10-ss.conf, e.g. /etc/dovecot/conf.d/10-ssl.conf ssl_cert = </etc/letsencrypt/live/rlfpllc.com/fullchain.pem ssl_key = </etc/letsencrypt/live/rlfpllc.com/privkey.pem You also need to add the cert paths to your postfix main.cf config: /etc/postfix/main.cf smtpd_tls_cert_file = /etc/letsencrypt/live/rlfpllc.com/fullchain.pem smtpd_tls_key_file = /etc/letsencrypt/live/rlfpllc.com/privkey.pem Now IOS is happy with your mail cert chain, but .. Thunderbird needs a few additional tweaks. The Thunderbird config editor changes needed are: security.OCSP.GET.enabled: true security.OCSP.enabled: 1 security.OCSP.require: true security.ssl.enable_ocsp_must_staple: false security.ssl.enable_ocsp_stapling: true Of those settings, the only one I needed to add was the first one, and the only other chnage was to toggle the setting on enable_ocsp_must_staple. The rest are already the default. If you don't run web and mail servers -- disregard :) -- David C. Rankin, J.D.,P.E.

1 0

Crappy video playback
by Nicolas Kovacs 04 Oct '22

04 Oct '22

Hi, Yesterday evening a watched a movie (MP4, ffh264) and playback was annoyingly crappy. I had updated my Tumbleweed install just before. Did OpenSUSE do the same thing as Fedora and remove hardware acceleration for h264 and h265 ? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

5 8

VSCodium on Tumbleweed ?
by Nicolas Kovacs 04 Oct '22

04 Oct '22

Hi, I have to install VSCodium on our local school's computers running Tumbleweed. Doesn't look like it's provided by the official repos. Before I dive off into a sunny afternoon of fiddling around on a sandbox PC, do you have any recommendations for running the application under Tumbleweed ? - Download the RPM and install it from the site ? - Use the Flatpak ? - Use some third-party repository ? - Something else ? Thanks & cheers from the sunny South of France, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

2 3

mariadb update gives warning about insecure path owner mysql
by David C. Rankin 04 Oct '22

04 Oct '22

All, This was odd, but understandable. zypper up on 15.4 tonight produced the following warning on mariadb update: /usr/lib64/mysql/plugin/auth_pam_tool_dir/auth_pam_tool: on an insecure path - /usr/lib64/mysql/plugin/auth_pam_tool_dir has different non-root owner who could tamper with the file. Well, not quite the hair-on-fire tamper opening you would expect. The parent directory owner is our good friend mysql from days gone by which I suspect has just been happily carried over release after release, etc... The directory in question: l /usr/lib64/mysql/plugin/auth_pam_tool_dir total 20 drwxr-x--- 2 root mysql 4096 Oct 4 01:41 . drwxr-xr-x 3 root root 4096 Oct 4 01:41 .. -rwsr-xr-x 1 root root 10408 Sep 16 05:12 auth_pam_tool So if this is even worth worrying about, it looks like the warning needs to be fixed somewhere to recognize group mysql as the proper group for directory ownership. -- David C. Rankin, J.D.,P.E.

1 0