September 2023 - openSUSE Users - openSUSE Mailing Lists

[oS-en] WiFi problem
by Carlos E. R. 20 Sep '23

20 Sep '23

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, Some days, on return from hibernation or suspend, the WiFi doesn't get a connection. It can see the router, but something fails and there is no connection. By chance, I suspended the laptop in the middle of writing this post, and wlan is working again, so I got a workaround :-? I paste the log in case someone has an idea what is going on. However, I will not be able to do any testing on the site, as I'm crossing the pond today, back to home. I may be able to do quick tests while packing. cer@Laicolasse:~> susepaste -n "Carlos E R" -t "journal wlan" -e 40320 wifiproblemjournal.txt Pasted as: https://susepaste.org/903011e57cfa https://paste.opensuse.org/903011e57cfa Link is also in your clipboard. cer@Laicolasse:~> - -- Cheers Carlos E. R. (from openSUSE Leap 15.3 at Legolas) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCZQb/Zxwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfVmRkAoJHw0ItTV+O2z7+RqsRk vqG2NhPVAJ9j1BnWytfu1AkZZ+hEoObP4SHtvA== =03yb -----END PGP SIGNATURE-----

6 9

Update error
by Frank McCormick 19 Sep '23

19 Sep '23

During this mornings update I got this error: udevadm: error while loading shared libraries: libsystemd-shared-253.so: cannot open shared object file: No such file or directory error: lua script failed: [string "%transfiletriggerin(udev-253.8-1.1.x86_64)"]:4: Unknown error 32512 I did a search for the file but found nothing. How to handle ? Thanks

4 9

Using non-default Bluetooth Codecs
by Rui Santos 19 Sep '23

19 Sep '23

Hi all, I'm using openSUSE 15.5 (KDE) along with some bluetooth headphones. From what I could see, only the default SBC is used as an A2DP audio codec, despite the headset supporting more codecs. Please check the following (trimmed) output: ~ # pactl list Sink #2 State: RUNNING Description: WH-1000XM5 Driver: module-bluez5-device.c Sample Specification: s16le 2ch 44100Hz Owner Module: 25 Latency: 60263 usec, configured 45317 usec Flags: HARDWARE HW_VOLUME_CTRL LATENCY Properties: bluetooth.protocol = "a2dp_sink" bluetooth.codec = "sbc" device.description = "WH-1000XM5" device.api = "bluez" device.class = "sound" device.bus = "bluetooth" device.form_factor = "headset" bluez.class = "0x240404" bluez.alias = "WH-1000XM5" device.intended_roles = "phone" Porto: headset-output: Headset (type: Headset, priority: 0, available) ~ # avinfo XX:XX:XX:XX:XX:XX Connecting ... Stream End-Point #1: Audio Sink Media Codec: SBC Channel Modes: Mono DualChannel Stereo JointStereo Frequencies: 44.1Khz 48Khz Subbands: 4 8 Blocks: 4 8 12 16 Bitpool Range: 2-53 Content Protection: SCMS-T Stream End-Point #2: Audio Sink Media Codec: MPEG24 Object Types: MPEG-2 AAC LC Frequencies: 44.1kHz 48kHz Channels: 1 2 Bitrate: 320000 VBR: Yes Content Protection: SCMS-T Stream End-Point #3: Audio Sink Media Codec: Vendor Specific A2DP Codec Vendor ID 0x0000012d Vendor Specific Codec ID 0x00aa Vendor Specific Data: 0x3c 0x07 Vendor Specific Value (LDAC) Frequencies: 44.1kHz 48kHz 88.2kHz 96kHz Channel modes: Mono Dual Stereo Content Protection: SCMS-T Now, despite these headphones not supporting any of the aptX codecs, it would be a nice option to be able to at least enjoy one of the other codecs, namely LDAC, but AAC would be a welcomed addition too, and likely preferable in many situations too... It's been quite some time since I've dug this, just to remember that BT Profiles/Codecs are not a straightforward subject. Despite this, I was quite surprised that it is substantially better than a few years ago. In addition to the codecs, there's also the sound stack bluez/pulseaudio/pipewire/more (?) options... Then there's the plugins/bt_modules/more (?), I can see that I do have some bt modules on pipewire: ~ # rpm -ql pipewire-spa-plugins-0_2 | grep bluez /usr/lib64/spa-0.2/bluez5 /usr/lib64/spa-0.2/bluez5/libspa-bluez5.so /usr/lib64/spa-0.2/bluez5/libspa-codec-bluez5-aac.so /usr/lib64/spa-0.2/bluez5/libspa-codec-bluez5-faststream.so /usr/lib64/spa-0.2/bluez5/libspa-codec-bluez5-ldac.so /usr/lib64/spa-0.2/bluez5/libspa-codec-bluez5-opus.so /usr/lib64/spa-0.2/bluez5/libspa-codec-bluez5-sbc.so /usr/share/spa-0.2/bluez5 /usr/share/spa-0.2/bluez5/bluez-hardware.conf Now, for the real question(s): How can I make use of any other code with openSUSE 15.5 and KDE? Some maybe useful data: - openSUSE Leap 15.5 upstream, fully updated - This install is an upgrade from several Leap's before 15.5, hopefully done right (I've tried this on different versions too) Also maybe I have an unsupported combination of all this?! I really can't tell at this time! Feel free to also direct me to reading materials as I'll gladly go through them. Also feel free to ask for more information on my system if you believe it's relevant. Thank you all for your help! Regards, -- Rui Santos Veni, Vidi, Linux

3 4

Gluster peer probe fails
by Johann Behr 13 Sep '23

13 Sep '23

Hi I am currently trying to setup a gluster cluster on Tumbleweed. When trying to probe the first peer i run in to the following error: peer probe: failed: Probe returned with Transport endpoint is not connected The peer i used is pingable and firewalld is disabled and the hosts are set in /etc/hosts. Did any of you experience a similar issue?

2 2

Who has its own domain name and has an email server without the available security measures?
by Freek de Kruijf 12 Sep '23

12 Sep '23

Hi, I am trying to collect some data about the use of security measures used in an email server in your home or with a provider where you do your own configuration. Apart from doing malware checking on incoming messages, there are more measures you can take to protect the email with your own email server. The first measure is SPF checking, which means that you check that an incoming email really comes from the server it should come from. The owner of that server entered a so-called SPF TXT record in the DNS to indicate which server(s) are allowed to send messages with that domain name in the From address. You can do the same by having such a TXT record in the DNS with your domain. Obviously you rely on others to check this SPF TXT record. There might come some time that email that cannot be checked this way will be refused or at least goes into the spam folder. A second measure is DKIM checking and signing. When you inspect message from gmail.com you will see that these messages contain a DKIM signatures. The measure you take is that you check if the incoming signed message is really coming with a proper signature and is not tampered with (the content, including headers, is signed). But you can do the same. You can sign outgoing message with your DKIM signature. This means that you sign your messages with your private key and the public key is in the DNS of your domain. Signing messages this way makes it more likely that your messages are accepted. I did receive returned messages because they did not have a DKIM signature or could not be checked using SPF. The third measure is DMARC. This also twofold, checking and providing a DMARC TXT record in the DNS of your domain. A DMARC record indicates what receiving servers should do with SPF and DKIM checks. So you have some control over what will be done when checks fail or partly fail (when the From-address contains a subdomain of your domain). Please indicate whether you are interested in a script to implement these measures. -- fr.gr. member openSUSE Freek de Kruijf

3 8

[oS-EN] lists.opensuse.org is down
by Carlos E. R. 12 Sep '23

12 Sep '23

Server is down or too busy. I post this here because of unrelated problem with my email. -- Cheers / Saludos, Carlos E. R. (from openSUSE 15.5 (Laicolasse))

4 12

imagemagick: I/O error : buffer full - what does this mean?
by Daniel Bauer 12 Sep '23

12 Sep '23

Hi, since my upgrade to OS 15.5, when running a command line job for imagemagick I get I/O error : buffer full The task is finished anyway, as much as I can see, perfect. But on 15.3 I have never seen this message and I wonder what it could mean and how, if so, I could avoid it. Thanks for hints! Daniel -- Daniel Bauer photographer Basel Málaga Twitter: @Marsfotografo (often explicit nudes) https://www.patreon.com/danielbauer https://www.daniel-bauer.com (nudes)

5 10

mongodb and tumbleweed
by jdd＠dodin.org 12 Sep '23

12 Sep '23

Hello, I may have to install mongodb on tumbleweed. The page: https://en.opensuse.org/MongoDB seems obsolete for this purpose (the first link go to 13.1 repo) https://software.opensuse.org/package/mongodb says there is no official package for tumbleweed I'm aware of the licence problem thanks jdd -- c'est quoi, usenet? http://www.dodin.org/wiki/pmwiki.php?n=Usenet.Usenet

1 0

Does a python2-matplotlib exist anywhere for Leap 15.4?
by David C. Rankin 12 Sep '23

12 Sep '23

All, I have a need for python2 matplotlib. Does it exist anywhere? I can't find it on software.opensuse.org (I can for SLE). While I have it for python3, I have several old (long) python2 scripts I'd rather not have to update, but would like to compare output from. -- David C. Rankin, J.D.,P.E.

4 8

LEAP AArch64 ISO images won't boot on Apple Silicon running VMWare Fusion
by Simon Connah 11 Sep '23

11 Sep '23

I've just downloaded the full LEAP ISO as well as the network ISO and neither of them will boot on a Mac Studio running VMWare Fusion Pro. The error message says that x86_64 is required. I have no idea why this is happening as I have just installed Fedora 38 (AArch64) in exactly the same way and everything was fine. Any ideas what might be happening?

2 3

no tumbleweed update yesterday
by Luna Jernberg 10 Sep '23

10 Sep '23

but there was one today

1 0

pulseaudio equalizer has no effect
by Daniel Bauer 09 Sep '23

09 Sep '23

Hi, since I upgraded on OS 15.5 pulseaudio equalizer has a different user interface, and unfortunately has no effect anymore. I can change all sliders, click the on/off button... no matter what I do, it has absolutely no effect. What could be the reason? Or is there another equalizer that works? (I often listen to a radio station that obviously has a bass fetish that makes my loudspeakers vibrate on the table, and since years I used pulseaudio equalizer up to OS 15.3 to normalize that radio sound...) Thanks for hints Daniel -- Daniel Bauer photographer Basel Málaga Twitter: @Marsfotografo (often explicit nudes) https://www.patreon.com/danielbauer https://www.daniel-bauer.com (nudes)

7 23

Re: TLS certificate [5/5]
by Gerald Pfeifer 07 Sep '23

07 Sep '23

Hi Rayyan, On Mon 2023-09-04, Rayyan wrote: > I hope you have reviewed the proof of concept and have come to a > conclusion of the vulnerability report I have submitted. I have not seen a response from the admin folks yet, assume they have looked or are going to look into it. > Kindly let me know about my reward for the ethical disclosure of the > vulnerability. We are merely a not-for-profit, open source project and do not have any such program in place. Thank you for your contributions to open source! Gerald

1 0

keepassxc - is there a free mobile app for IOS/Android that has same capability?
by David C. Rankin 06 Sep '23

06 Sep '23

All, One distinct downside to moving to keepassxc is there is no mobile app for it. For the old keepassx version, there were a number of free apps that would do the same thing. On the keepassxc site they recommend strongbox or keepassium for IOS as substitutes -- but there is a rub -- the free versions are not full-featured. Are there any compatible IOS apps that are available and are not a stripped-free/paid-full version offering? -- David C. Rankin, J.D.,P.E.

5 7

[oS-en] Trick for finding hp networked printers
by Carlos E. R. 05 Sep '23

05 Sep '23

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On firewall-config, open services mDNS and slp on the services tab. But also open port 5353/udp on source ports. The last one did the trick for discovery. On yaST, hplip, Use advanced, then change discovery method to not the default SLP, but avahi or bonjour. - -- Cheers Carlos E. R. (from openSUSE Leap 15.3 at Legolas) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCZPSfEBwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfVM/8AnjYjwfh2cP5Fn8F1Bj2j SVdWL7mkAJ9L+1Y3i3X+mg33oWhKG8Bqi7weBg== =aA+4 -----END PGP SIGNATURE-----

2 6

zypper bash completion broke in 1.14.63
by Michael Andres 05 Sep '23

05 Sep '23

JFYI: The bash completion script was moved from /etc/bash_completion.d/zypper.sh to /usr/share/bash-completion/completions/zypper.sh But it also needs to be renamed to plain 'zypper' at the new location. Workaround: cd /usr/share/bash-completion/completions/ mv zypper.sh zypper Fixed in 1.14.64 -- cu, Michael Andres +------------------------------------------------------------------+ Key fingerprint = 2DFA 5D73 18B1 E7EF A862 27AC 3FB8 9E3A 27C6 B0E4 +------------------------------------------------------------------+ Michael Andres (he/him/his), Engineering & Innovation, ma(a)suse.com +------------------------------------------------------------------+ SUSE Software Solutions Germany GmbH www.suse.com Frankenstr. 146, 90461 Nuernberg, Germany Geschäftsführer: Ivo Totev, Andrew McDonald, Werner Knoblich (HRB 36809, AG Nürnberg) +------------------------------------------------------------------+

1 0

2FA - Tools that work if you unfortunately need to use them
by David C. Rankin 05 Sep '23

05 Sep '23

All, Github is forcing 2FA (two factor authentication) beginning Oct 12 for accounts that make contributions to other repositories or otherwise contribute. Why a goofy algorithm from my computer is better than my 2048 byte RSA key doesn't make much sense. (though likely a way to dupe users into providing a mobile phone number that can be monetized) If you find yourself having to come up with 2FA codes, then there are a few apps that do it without involving your phone. Commandline: The "oath-toolkit" package provides the oathtool command line utility to generate the timed one time passwords given the secret key you are assigned from the site: $ oathtool --totp --base32 KEY (the options needed depend on the key format) where KEY is the secret key you were given. If you have a number of sites, you can create a short script to read the key from a file which is fairly convenient. With a little thought you can have the function accept a filename or key. GUI App: keepassxc has a totp function and allows assigning the secret key to each entry in your password database. (rather odd interface done though the context menu - Right-click -> TOTP -> Set up TOTP, add your key, then you can open a window to see the timed one time password to use) After you configure it, you can just double-click the little timer icon next to the entry to copy to the clipboard (nice touch, somebody had their thinking cap on...) Phone: It kills me, but the google-authenticator is about a well recommended as anything else. You can use it without a google-account. Just add your key and it spits out the timed one time password. Summary: Another solution just looking for a problem to solve, but at least there are tools to combat the latest unwanted "feature" of the web. -- David C. Rankin, J.D.,P.E.

9 12

[oS-EN] Question on full disk encription
by Carlos E. R. 02 Sep '23

02 Sep '23

Hi, new laptop here, and I decided to install Leap 15.4 with full disk encryption, no LVM (a feature I wanted to have for years, so I'm happy). It asks for the password twice (contrary to my customs, I'm using plymouth). It asks once before grub loads. Well, ok, there is no separate /boot, so it has to read "/" which is encrypted. Nice. But after selecting the boot entry in grub, it asks again. Once, despite being 3 partitions ("/", "/boot" and swap). Ok. Is there some way to make it ask only once? I guess not, but perhaps I'm wrong. -- Cheers / Saludos, Carlos E. R. (from Elesar, using openSUSE Leap 15.4)

10 60

bluetooth audio only connects after several tries
by Markus Feilner 01 Sep '23

01 Sep '23

Hi there, am I the only one with problems getting bluetooth to work in a 1:1 setup? My Ryzen 7 machine should always autoconnect on boot to its dedicated stereo. Both turn on at the same time, no other machine connects to the BT reciever I am running Tumbleweed with KDE, plasma and pulseaudio 16.1 on a kernel 6.4.11-1-default, the CPU is an AMD Ryzen 7 PRO 5850U Here's a script that I have to run - sometimes several times, and often I still have to power on bluetooth and connect to the stereo manually, in the KDE widget (strangely, bluetoothctl won't do the trick, most of the times). Once connected, Bluetooth works as desired, until the next reboot. I am still digging in the logfiles, but maybe these commands here are helpful for someone... Feel free to PM me if you have similar problems and / or send me links, any help is much appreciated. I know there's better ways of doing the following, esp. the sudo sections... :-) #!/bin/bash # sudo /sbin/modprobe -r btusb -r btintel sudo /sbin/modprobe btusb btintel sudo rfkill unblock bluetooth sudo service bluetooth restart sleep 3s bluetoothctl power on bluetoothctl connect 0C:A6:94:D1:77:5D sleep 3s sudo service bluetooth restart bluetoothctl connect 0C:A6:94:D1:77:5D pactl get-default-sink pactl set-default-sink bluez_sink.0C_A6_94_D1_77_5D.a2dp_sink -- Best Regards - Mit freundlichen Grüßen, Markus Feilner, Feilner IT - 20 years of open services - Sustainable Open Source Strategy, Networking, Politics, Journalism Knowledge Management, Rubber Ducks, Trainings, Workshops, Documentation https://www.feilner-it.net, 93059 Regensburg Wöhrdstr. 10, +49 170 302 7092 (+Signal) https://mastodon.cloud/@mfeilner https://mastodon.social/@FeilnerIT PGP: 40A3C306F96133067C11CFD9A958A906268C9F0A http://www.feilner-it.net/files/MFpub.asc Xing: http://www.xing.com/profile/Markus_Feilner LinkedIn: https://www.linkedin.com/in/markusfeilner @mfeilner: Mastodon, Matrix, Jabber, ...

3 8

[oS-EN] I found out a new trick on Thunderbird
by Carlos E. R. 01 Sep '23

01 Sep '23

Hi, I get a bunch of commercial email that pollutes one of my inboxes, as does everybody. I found a new trick: Create a filter that matches on the From address and "age > 3 days", with an action that can be delete, but I simply move to a folder in the same imap server, so that the mail is still accessible in any of my computers. I'm happy :-) I could also use this age trick to purge/archive the mail list folder, after 90 days. -- Cheers / Saludos, Carlos E. R. (from openSUSE 15.5 (Laicolasse))

5 11