April 2023 - openSUSE Users - openSUSE Mailing Lists

Monitoring lease files for ipv6 prefix change
by Per Jessen 29 Apr '23

29 Apr '23

Per Jessen wrote: > I don't know how easy those inotify tools are to use, but it ought to > be fairly easy to monitor for a file called 'dhclient6.*ethX.lease' > being written to '/var/lib/NetworkManager/'. Something like this maybe - explicitly not intended as a ready-to-go solution, only as inspiration: inotifywait -m /var/lib/NetworkManager/ |\ egrep 'dhclient6[^.]+\.lease$' |\ while read nmdir events nmfile do echo $events $nmfile do-your-stuff-here done Alternatively, there are some dhcp hooks too, I wonder if they might also be called by NetworkManager. /etc/dhcp/dhclient.d -- Per Jessen, Zürich (11.4°C) Member, openSUSE Heroes (2016 - present) We're hiring - https://en.opensuse.org/openSUSE:Heroes

2 4

[oS-en] sed question
by Carlos E. R. 28 Apr '23

28 Apr '23

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I have a script (from somebody else) to download the image of the day from the NASA. I have modified the script quite a bit to download a range of days, even years of them. One key function is failing on today's picture. This is the relevant section of the script: +++...................... function get_page { echo "Downloading page to find image" #wget http://apod.nasa.gov/apod/ --quiet -O /tmp/apod.html wget https://apod.nasa.gov/apod/ap${SHORT_TODAY}.html --quiet -O /tmp/apod.html grep -m 1 jpg /tmp/apod.html | sed -e 's/<//' -e 's/>//' -e 's/.*=//' -e 's/"//g' -e 's/^/http:\/\/apod.nasa.gov\/apod\//' > /tmp/pic_url } get_page # Got the link to the image PICURL=`/bin/cat /tmp/pic_url` if [ -z $PICURL ]; then echo "Not found picture.jpg for $TODAY. Trying .png" try_png PICURL=`/bin/cat /tmp/pic_url` if [ -z $PICURL ]; then echo "Not found picture.png for $TODAY. html file saved" cp /tmp/apod.html $PICTURES_DIR/$TODAY.html return fi fi NAME=`basename $PICURL` PICTURE_NAME=${TODAY}_${NAME} ......................++- The script sets up variable SHORT_TODAY to 230427, so "get_page" downloads <https://apod.nasa.gov/apod/ap230426.html>. It is coughing up this error: Do 20230427 Downloading page to find image /home/cer/bin/NASA Picture-Of-The-Day Wallpaper Script, mine, loop: line 98: [: too many arguments basename: extra operand ‘Tarantula</a>’ Try 'basename --help' for more information. The problem is here: cer@Isengard:~> grep -m 1 jpg /tmp/apod.html | sed -e 's/<//' -e 's/>//' -e 's/.*=//' -e 's/"//g' -e 's/^/http:\/\/apod.nasa.gov\/apod\//' http://apod.nasa.gov/apod/image/1602/Tarantula-HST-ESO-annotated1800.jpgAro… the Tarantula</a> cer@Isengard:~> The source html goes like this: <a href="image/1602/Tarantula-HST-ESO-annotated1800.jpg">Around the Tarantula</a> are other star forming regions with young star clusters, filaments, and blown-out <a href="ap080327.html">bubble-shaped</a> clouds. On the day before, it goes like this (here the script works as expected): 2023 April 26 <br> <a href="image/2304/MoonArc_zanarello_1365.jpg"> <IMG SRC="image/2304/MoonArc_zanarello_960.jpg" alt="A nearly full Moon is seen through the famous Arc de Triomphi with trees and cars lining the foreground. Please see the explanation for more detailed information." style="max-width:100%"></a> </center> where the function generates this text: cer@Isengard:~> echo '<a href="image/2304/MoonArc_zanarello_1365.jpg">' | grep -m 1 jpg | sed -e 's/<//' -e 's/>//' -e 's/.*=//' -e 's/"//g' -e 's/^/http:\/\/apod.nasa.gov\/apod\//' http://apod.nasa.gov/apod/image/2304/MoonArc_zanarello_1365.jpg cer@Isengard:~> My problem is, I don't talk sed O:-) So, I ask here if someone knows how to change that sed command so that it works ;-) (the full script I modified is: https://paste.opensuse.org/7f484bb7c807) - -- Cheers Carlos E. R. (from 15.4 x86_64 at Telcontar) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCZErjCRwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfV7RYAnR1jKw8AXonj2E837r7L cY3g08VvAJ418VFrG/lGU3gad7PPUwFceZIfIg== =KHba -----END PGP SIGNATURE-----

6 13

L-15.5 1st impression
by bent fender 28 Apr '23

28 Apr '23

I hope I'm wrong but it looks like 15.4-kde will be my last one. I haven tried only the kde desktop but I see no way to set up a conventional Application launcher with thew cascading menu tree. I even pre-copied an entire user folder from 15.4 but none of that had any effect. What I do see is a smartphoneish, microcancerish, touchpadish deskdump of which I will have none. Tomorrow I'll look at the XFCE setup.

6 30

local smtp server - isp switching off tsl1.0 and tsl1.1 and no key transmissions
by Simon Becherer 28 Apr '23

28 Apr '23

Hi, because my isp has yesterday switched off unencrypted and tsl1.0 + tsl1.1 connections to smtp server, my "all in one machine" "brother mfc-7460dn" is not able to "scan to email" any more. :-(((( even with the latest firmware i installed yesterday (firmware M from 2019) so my idea is now to have a local smpt server set up at least to receive local my scans as emails. and/or if not to complicated would be nice to forward the internal unencrypted mails encrypted with more up to date tsl to the isp-mailserver that they could send it over the web. now my question: is for this there a easy way to do? on all my tumbleweed systems have postfix running. never used except for system mails, and always only send/received at localhost. (no other interface open for it) command "mailto" did anybody have something like this running and have some tips how to configure the 10000lines of postfix configuration files in etc/postfix ?? (set up the port and all this stuff)? some suggestions would be nice. simoN -- www.becherer.de

4 5

"Authorization required, but no authorization protocol specified"
by Siard 27 Apr '23

27 Apr '23

Hi, I installed a new modem. It has a wired ethernet connection to my PC. But now, every time I start an application in X, this message shows up in the terminal where it was started from: Authorization required, but no authorization protocol specified Authorization required, but no authorization protocol specified And those applications take much longer to start. For example, evince used to start in half a second without leaving any messages in the terminal. Now it takes about a minute, leaving lots of messages, see below. Searching the internet, my impression is that it has something to do with the hostname. /etc/hostname is empty. Is that normal? I also have Debian on my machine, but this phenomenon does not show up there. Any idea what could cause this? When starting evince from an x-terminal, these are the messages that show up: Authorization required, but no authorization protocol specified Authorization required, but no authorization protocol specified ** (evince:5473): WARNING **: 12:49:52.808: AT-SPI: Could not obtain desktop path or name ** (evince:5473): WARNING **: 12:49:52.817: atk-bridge: get_device_events_reply: unknown signature ** (evince:5473): WARNING **: 12:49:52.817: atk-bridge: GetRegisteredEvents returned message with unknown signature ** (evince:5473): WARNING **: 12:49:52.830: AT-SPI: Could not obtain desktop path or name ** (evince:5473): WARNING **: 12:49:52.838: AT-SPI: Could not obtain desktop path or name ** (evince:5473): WARNING **: 12:49:52.838: atk-bridge: get_device_events_reply: unknown signature ** (evince:5473): WARNING **: 12:49:52.838: atk-bridge: GetRegisteredEvents returned message with unknown signature ** (evince:5473): WARNING **: 12:49:52.838: AT-SPI: Could not obtain desktop path or name ** (evince:5473): WARNING **: 12:49:52.844: AT-SPI: Could not obtain desktop path or name ** (evince:5473): WARNING **: 12:49:52.844: atk-bridge: get_device_events_reply: unknown signature ** (evince:5473): WARNING **: 12:49:52.844: atk-bridge: GetRegisteredEvents returned message with unknown signature

3 6

[oS-en] Firewall and IPv6
by Carlos E. R. 25 Apr '23

25 Apr '23

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I discovered that my ISP provided "router" does not do any firewalling on IPv6. All my IPv6 capable machines are fully visible from internet. My Linux machines have a firewall. On some of them, I opened ports to be used in the intranet. It was obvious, an address such as 192.1.1.50 was in my intranet. Now, how the $%&# can the firewall that an incoming IPv6 address is actually in my intranet, or is external? Consider that my ISP provided prefix is not fixed, but is dynamic. I can not write the address in any script, because it changes when the router reboots. Ideas? - -- Cheers Carlos E. R. (from 15.4 x86_64 at Telcontar) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCZEGwWxwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfV5REAoIRuza8qZ9ujSodV19fR 3ct3DQWAAKCXvRiIuzBRKmDm4QLg9gCnqEgnew== =RRvf -----END PGP SIGNATURE-----

10 163

[oS-en] Migrating SuSEfirewall2 to firewalld
by Carlos E. R. 25 Apr '23

25 Apr '23

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I have to finally do that migration. There is a script and some docs: https://en.opensuse.org/Firewalld https://github.com/openSUSE/susefirewall2-to-firewalld/blob/master/README.md The sequence of commands is: susefirewall2-to-firewalld If you like the output, then susefirewall2-to-firewalld -c To commit. This prints at the end (after a run of 14 minutes): INFO: ################################################################################## INFO: INFO: Your SuSEfirewall2 rules have been migrated to FirewallD. A celebration is in order! INFO: INFO: Please note that the firewalld rules haven't been made permanent yet. INFO: Use 'firewall-cmd --list-all-zones' to verify you are happy with the proposed INFO: configuration and then use 'firewall-cmd --runtime-to-permanent' to make it permanent. INFO: However, you are advised to look at the following resources and/or INFO: commands before making permanent changes to your firewall: So I do that (claims success). But something is wrong, the rules are not actually written. I confirm with "firewall-config" that there are no rich rules at all. I saw while the script was running text like these: INFO: Enabling rich rule="rule family=ipv4 source address=192.168.1.1/32 port port=514 protocol=udp accept" for zone="external" INFO: Enabling rich rule="rule family=ipv4 source address=192.168.1.1/32 protocol value=icmp accept" for zone="external" INFO: Enabling rich rule="rule family=ipv4 source address=192.168.1.1/32 port port=162 protocol=udp accept" for zone="external" INFO: Enabling rich rule="rule family=ipv4 source address=192.168.1.1/32 port port=53792 protocol=tcp accept" for zone="external" INFO: Enabling rich rule="rule family=ipv4 source address=192.168.1.5/32 port port=514 protocol=udp accept" for zone="external" INFO: Enabling rich rule="rule family=ipv4 source address=192.168.1.5/32 protocol value=icmp accept" for zone="external" INFO: Enabling rich rule="rule family=ipv4 source address=192.168.1.5/32 port port=162 protocol=udp accept" for zone="external" INFO: Enabling rich rule="rule family=ipv4 source address=192.168.1.7/32 port port=514 protocol=udp accept" for zone="external" INFO: Enabling rich rule="rule family=ipv4 source address=192.168.1.7/32 port port=53 protocol=udp accept" for zone="external" INFO: Enabling rich rule="rule family=ipv4 source address=192.168.1.7/32 port port=139 protocol=tcp accept" for zone="external" INFO: Enabling rich rule="rule family=ipv4 source address=192.168.1.7/32 port port=137 protocol=tcp accept" for zone="external" INFO: Enabling rich rule="rule family=ipv4 source address=192.168.1.7/32 port port=5353 protocol=tcp accept" for zone="external" INFO: Enabling rich rule="rule family=ipv4 source address=192.168.1.7/32 port port=515 protocol=tcp accept" for zone="external" INFO: Enabling rich rule="rule family=ipv4 source address=192.168.1.7/32 port port=3553 protocol=udp accept" for zone="external" INFO: Enabling rich rule="rule family=ipv4 source address=192.168.1.14/32 port port=514 protocol=udp accept" for zone="external" INFO: Enabling rich rule="rule family=ipv4 source address=192.168.1.14/32 port port=514 protocol=tcp accept" for zone="external" INFO: Enabling rich rule="rule family=ipv4 source address=192.168.1.14/32 port port=6666 protocol=udp accept" for zone="external" INFO: Enabling rich rule="rule family=ipv4 source address=192.168.1.14/32 protocol value=icmp accept" for zone="external" But they were not actually written. Not in "runtime", nor in "permanent". Nor in /etc/zones. This is the content of /etc/firewalld/zones/external.xml: <?xml version="1.0" encoding="utf-8"?> <zone> <short>External</short> <description>For use on external networks. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description> <service name="ssh"/> <masquerade/> <interface name="eth0"/> <interface name="wlan0"/> </zone> /etc/firewalld/policies/allow-host-ipv6.xml: <?xml version="1.0" encoding="utf-8"?> <policy priority="-15000" target="CONTINUE"> <short>Allow host IPv6</short> <description>Allows basic IPv6 functionality for the host running firewalld.</description> <rule family="ipv6"> <icmp-type name="neighbour-advertisement"/> <accept/> </rule> <rule family="ipv6"> <icmp-type name="neighbour-solicitation"/> <accept/> </rule> <rule family="ipv6"> <icmp-type name="router-advertisement"/> <accept/> </rule> <rule family="ipv6"> <icmp-type name="redirect"/> <accept/> </rule> <ingress-zone name="ANY"/> <egress-zone name="HOST"/> </policy> Isengard:~ # firewall-cmd --list-all external (active) target: default icmp-block-inversion: no interfaces: eth0 wlan0 sources: services: ssh ports: protocols: forward: no masquerade: yes forward-ports: source-ports: icmp-blocks: rich rules: Isengard:~ # Isengard:~ # firewall-cmd --list-rich-rules Isengard:~ # That's all. Nothing was actually migrated from SuSEfirewal2. So, what can I do to actually migrate SuSEfirewall2 to firewalld? - -- Cheers Carlos E. R. (from 15.4 x86_64 at Telcontar) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCZEekoRwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfVOisAmwfwhICegxmduEAav/Nu QM3NpQDtAJ45OmpRadedzwYYm4rLj011abVMtg== =MQ0M -----END PGP SIGNATURE-----

3 4

[oS-en] Suddenly, mouse wheel doesn't work.
by Carlos E. R. 25 Apr '23

25 Apr '23

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, Suddenly, mouse wheel doesn't work. It was working, and suddenly it stopped working. I was seeing strange messages in log related to usb, so I unplugged/replugged the mouse, no effect. I downgraded the kernel several versions, no effect. Middle button, which shares the wheel, works. Leap 15.4. XFCE. What can I do to diagnose? This one is a trackball. I connected at the same time a second mouse, cheapo, and it works fine. Telcontar:~ # hwinfo --mouse 59: USB 00.1: 10503 USB Mouse [Created at usb.122] Unique ID: PsRb.FBtr+tYVKV1 Parent ID: k4bc.029GFTetOb3 SysFS ID: /devices/pci0000:00/0000:00:01.3/0000:03:00.0/usb1/1-13/1-13:1.1 SysFS BusID: 1-13:1.1 Hardware Class: mouse Model: "Holtek USB Keyboard" Hotplug: USB Vendor: usb 0x04d9 "Holtek Semiconductor, Inc." Device: usb 0x2020 "USB Keyboard" Revision: "1.01" Compatible to: int 0x0200 0x0001 "Generic USB Mouse" <=== WTF? No such thing. Driver: "usbhid" Driver Modules: "usbhid" Device File: /dev/input/event3 Device Files: /dev/input/event3, /dev/input/by-id/usb-CYKB13_USB_Keyboard-event-if01, /dev/input/by-path/pci-0000:03:00.0-usb-0:13:1.1-event Device Number: char 13:67 Speed: 1.5 Mbps Module Alias: "usb:v04D9p2020d0101dc00dsc00dp00ic03isc01ip02in01" Driver Info #0: XFree86 Protocol: explorerps/2 GPM Protocol: exps2 Config Status: cfg=new, avail=yes, need=no, active=unknown Attached to: #62 (Hub) 61: USB 00.0: 10503 USB Mouse [Created at usb.122] Unique ID: Mwf_.z_8Swe_nwg5 Parent ID: 2XnU.BpLUUanApo2 SysFS ID: /devices/pci0000:00/0000:00:08.1/0000:29:00.3/usb5/5-3/5-3:1.0 SysFS BusID: 5-3:1.0 Hardware Class: mouse Model: "Logitech TrackMan Wheel" <========= Hotplug: USB Vendor: usb 0x046d "Logitech, Inc." Device: usb 0xc404 "TrackMan Wheel" Revision: "2.20" Compatible to: int 0x0210 0x0023 Driver: "usbhid" Driver Modules: "usbhid" Device File: /dev/input/mice (/dev/input/mouse0) Device Files: /dev/input/mice, /dev/input/mouse0, /dev/input/event0, /dev/input/by-path/pci-0000:29:00.3-usb-0:3:1.0-event-mouse, /dev/input/by-id/usb-Logitech_Trackball-event-mouse, /dev/input/by-id/usb-Logitech_Trackball-mouse, /dev/input/by-path/pci-0000:29:00.3-usb-0:3:1.0-mouse Device Number: char 13:63 (char 13:32) Speed: 1.5 Mbps Module Alias: "usb:v046DpC404d0220dc00dsc00dp00ic03isc01ip02in00" Driver Info #0: Buttons: 3 Wheels: 1 XFree86 Protocol: explorerps/2 GPM Protocol: exps2 Config Status: cfg=new, avail=yes, need=no, active=unknown Attached to: #64 (Hub) Telcontar:~ # - -- Cheers Carlos E. R. (from 15.4 x86_64 at Telcontar) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCY9gjZRwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfV/vAAmwYh1wv5utPK0ta/zdr5 cu6bp5ThAJ9nYxhbeAvQzSu6GWB0joUYDysLsg== =TWyg -----END PGP SIGNATURE-----

8 23

rtkit-daemon
by mh＠mike.franken.de 24 Apr '23

24 Apr '23

Hi *, is there any documentation on how to configure rtkit-daemon for openSUSE? I found a few hints regarding pipewire, but they seem to be at least in part inconsistent with each other. And I couldn't find any more general doc. Especially I have the following questions: Do I have to put a user in the rtkit group, if he wants to run a program like Citrix, which requests realtime capabilites? Or do I have to create a config file in /usr/etc/security/limits.d/? Is so, what should it contain? Do I have to configure something else? TIA. Bye. Michael.

4 14

Little TW nuisances
by Per Jessen 24 Apr '23

24 Apr '23

>> Patrick Shanahan wrote: >> >>> * Per Jessen <per(a)opensuse.org> [04-23-23 10:54]: >>>> I don't rememeber the last time I did a TW installation from >>>> scratch. >>> >>> >>> yeah, once you get it installed the first time, "It Just Works" :) >> >> Still, occasionally some minor surprises - network config now is >> networkmanager only, at least by default. It was easy to install >> wicked though. Next I had to add 'net.ifnames=0' to the boot config. >> Good stuff. > > Another small surprise - unable to restart syslog. "Unit > var-run.mount not found". It does in fact not exist. On a 2nd TW > system, that unit seems to have been provided by systemd-sysvcompat. nscd complains about not finding /etc/services and /etc/nsswitch.conf - (the symlinks to /usr/etc are missing). question - do files in /etc/ override same-named files in /usr/etc ? For instance, I want to change the logrotate config for /var/log/messages. Do I create /etc/logrotate.d/syslog with the new definition or should I give that config file a different name? syslog-ng doesn't seem to use /usr/etc, the default config went into /etc. -- Per Jessen, Zürich (14.1°C) Member, openSUSE Heroes (2016 - present) We're hiring - https://en.opensuse.org/openSUSE:Heroes

4 25