2015-08-01 02:29:15 What are the differences between Standard, Mini & Vanilla isos? 2015-08-01 02:29:19 hi! I'm having a weird issue on my APU1d booting alpine 3.2.2 from SD card: when I reboot, not all of the packages I've installed at visible in `apk info`. If I 'apk add $whatever' then all the packages I've previously installed are installed again and everything is OK. I'm using diskless mode and am running 'lbu commit' after I install packages... 2015-08-01 02:29:32 *are visible 2015-08-01 02:31:14 anyone seen that before and know how to fix it? 2015-08-01 02:31:56 icicled: standard has grsec kernel+set of packages, mini has grsec+minimal set of packages, vanilla has plain kernel + set of packages 2015-08-01 02:32:07 icicled: if u hover over the link, the mouseover gives a description 2015-08-01 02:32:25 ah ok - it's not obvious >_> 2015-08-01 02:32:33 thanks for pointing it out 2015-08-01 02:32:36 icicled: yes, i think there is a patch for the website 2015-08-01 02:32:45 it hasnt been pushed out yet i guess 2015-08-01 02:33:23 eppa: do u have the package cache setup? 2015-08-01 02:36:07 pnutzh4x0r: as far as I know; that's just done by setup-alpine isn't it? 2015-08-01 02:36:27 eppa: http://wiki.alpinelinux.org/wiki/Local_APK_cache 2015-08-01 02:37:24 hmm 2015-08-01 02:37:28 i think it should 2015-08-01 02:37:39 u can verify if the cache has the appropriate packages though 2015-08-01 02:38:04 otherwise, im not sure what the problem is 2015-08-01 02:38:33 the only other time ive seen this problem is if i installed packages from edge or used pinning 2015-08-01 02:38:39 yeah, the cache doesn't contain any of the extra packages I've installed 2015-08-01 02:39:11 eppa, sounds like the sd card is different named during boot, and during runtime 2015-08-01 02:39:16 nothing special about this install: I booted the ISO on another machine and ran setup-bootable targeting the SD card, as usual 2015-08-01 02:39:19 so apk cache link does not work 2015-08-01 02:39:23 hmm 2015-08-01 03:03:58 hmm, I'll work on running setup-bootable actually on the APU somehow 2015-08-01 03:06:41 id love to hear how alpine works on the APU, im considering getting one myself 2015-08-01 03:07:47 it used to work great :) last year or so...it's a wireless AP with a ubiquiti SR71 inside 2015-08-01 03:13:43 i run several APUs too 2015-08-01 03:13:51 it's all good 2015-08-01 03:14:02 (for my use case at least ;) 2015-08-01 03:15:57 sweet 2015-08-01 03:16:18 i just managed to get my RPI to act as a wireless bridge 2015-08-01 03:16:34 eventually i want to use alpine as my wireless AP 2015-08-01 03:16:46 nice 2015-08-01 03:16:49 i'm off to slepe 2015-08-01 03:17:42 later 2015-08-01 03:23:50 OK here we go...setup-bootable from ISO->USB, now booting USB so I can setup-bootable USB->SD card 2015-08-01 03:48:36 well, I have no idea why that's different but it /seems/ to work OK now 2015-08-01 04:21:18 omg now my other alpine AP has lost its marbles :/ 2015-08-01 04:25:47 ah, ok, different issue 2015-08-01 04:26:01 hey, is there any way to add a pax header through gcc flags right when compiling a program? I'm building PyPy, and it needs to run itself during the setup, so unless there's some gcc flag magic I can do, I'll need to modify its build process to run paxctl at a very specific point 2015-08-01 04:26:14 working lbu is sensitive to hostname 2015-08-01 04:26:17 which is a major pain, so thought I'd ask 2015-08-01 14:32:31 greetings 2015-08-01 21:57:22 is there no easy-rsa for alpine? 2015-08-01 22:17:31 <_ikke_> vrs: easy-rsa is just a collection of scripts. Just a matter of extracting it somewhere 2015-08-01 22:47:25 _ikke_: there used to be a package, I know I can just copy it but why did the package get kicked? 2015-08-02 04:40:30 Hello how would I install the latest open-vm-tools? 2015-08-02 04:40:49 open-vm-tools in the main apk repo has some issues with vmrun 2015-08-02 04:40:52 https://bugs.alpinelinux.org/projects/alpine/repository/revisions/19f4d204da1a1a552ccf5376bb400a3404ae575d 2015-08-02 04:41:15 Hoping that a bug has been fixed or something 2015-08-02 05:04:00 or maybe it's something with acpid? 2015-08-02 05:33:40 thinking it's acpid 2015-08-02 05:48:15 I can hack it in by putting a poweroff in /etc/vmware-tools/poweroff-vm-default 2015-08-02 05:48:33 ncopa: any insight into this? 2015-08-02 12:03:50 is someone of you a mutt user? 2015-08-02 12:23:32 <_ikke_> leo-unglaub: I am, but not on alpine 2015-08-02 12:24:12 _ikke_: i am thinking about switching from thunderbird 2015-08-02 12:24:24 but ... i still didnt ... 2015-08-02 12:24:30 multiple imap accounts are a pain 2015-08-02 12:25:38 <_ikke_> I use offlineimap with gmail, though, it does hang sometimes 2015-08-02 12:26:19 <_ikke_> But I mainly use it to read mailing lists, not normal e-mail 2015-08-02 13:33:54 i am a mutt user 2015-08-02 13:34:42 but i do not use imap accounts as you. i fetchmail all of them locally, and process them there and my mutt never touches the network. 2015-08-02 13:35:07 most people expect to be able to read their mails on their phones and on their laptops. i don't. 2015-08-02 21:17:03 plJwXq5XZYFC: syncthing your maildir :D 2015-08-02 21:30:16 openipmish is really icky 2015-08-02 21:30:45 i'd like to find out what kind of watchdog i have and carefully enable it 2015-08-02 21:30:57 anyone did that? 2015-08-02 21:32:35 Hi all. I'm running alpine edge. wpa_supplicant will only associate with wpa/wpa2 settings if I connect First using WEP and just use straight iwconfig. weird. any thoughts? 2015-08-02 21:33:51 That probably sounds bizzare, which it is, but I actually do this: 1. log into router and configure for wep. 2. connect the alpine box with wep settings 3. re login to the router configure for wpa/wpa2 4. run wpa_supplicant -i wlo1 -B -c /etc/wpa_supplicant.conf 2015-08-02 21:34:36 In that scenario wpa_supplicant works. Just running wpa_supplicant after a reboot for examples claims the psk is wrong 2015-08-02 21:35:11 And no, I would rather not use wep because if I ever do get out and about most people use wpa/wpa2 2015-08-02 21:35:17 this works for me on wpa2 http://it-offshore.co.uk/linux/alpine-linux/46-alpine-linux-automatic-wireless-configuration 2015-08-02 21:36:49 i'll give it a go 2015-08-02 21:50:59 BitL0G1c: thanks. works like a charm. 2015-08-02 22:13:14 organixpear ;-) 2015-08-02 22:17:37 Don't take this as: "i could have figured it out myself" ... 2015-08-02 22:18:39 but I was playing with wpa_gui in the process and say that AES encryption was not in a drop down. So knowing alpine packaging at times excludes certain options, I was flustered about the thought that wpa_supplicant was compiled without AES 2015-08-02 22:19:02 not the case 2015-08-03 01:32:24 Has anyone successfully installed the nix package manager? 2015-08-03 01:33:27 I've gotten as far as installing nix & being able to install the hello application (just a plain c "hello world") app 2015-08-03 01:33:50 however I noticed that it is being linked against a nix provided gnulibc 2015-08-03 06:46:31 ColdHeat: I dont have vmware host to test on :-/ 2015-08-03 06:46:52 ColdHeat: what is the exact error message? 2015-08-03 06:48:39 leo-unglaub: I use claws-mail 2015-08-03 06:48:49 works good enough for me 2015-08-03 06:50:02 ncopa: i gave it a try once, but the folder tree was so damn ugly 2015-08-03 06:50:08 i could not read it at all 2015-08-03 06:50:13 because the fonts where broken 2015-08-03 06:57:39 you have a screenshot? 2015-08-03 06:58:02 no, i removed it 2015-08-03 06:58:09 but i can reinstall it and check again 2015-08-03 06:58:15 maybe it got fixed+ 2015-08-03 06:58:28 it works ok for me 2015-08-03 06:58:38 but maybe i'm just use to it :) 2015-08-03 06:58:59 there is also geary 2015-08-03 06:59:01 do you have a screenshot, maybe ugly is normal in this programm *g* 2015-08-03 07:01:06 but its my fault, i have not fixed my thunderbird build since the last update from mozill 2015-08-03 07:45:40 i am starting a new software project and i am still not sure if i should stay with C or if i should give Rust a try 2015-08-03 07:45:45 any ideas? Feedback? 2015-08-03 07:46:58 leo-unglaub: is there any particular reason why would you want to choose a language that points a gun towards your feet and puts your fingers on the trigger? 2015-08-03 07:47:31 ar: do you mean c or rust with that? because the description fits both *g* 2015-08-03 07:48:08 leo-unglaub: if you're not doing kernel development, going with go or rust should be a better idea than C 2015-08-03 07:49:10 C is just fine as long as you know what you're doing 2015-08-03 07:49:17 i am used to c and i have a lot of experience in it, but sometimes i do memory errors like every one else. so if rust gets rid of that for me it would be nice 2015-08-03 07:49:26 but rust adds so much bloat compated with c 2015-08-03 07:49:36 i mean just opening sockets is a huge overhead in rust 2015-08-03 07:49:57 don't do memory errors then 2015-08-03 07:50:01 hahaha 2015-08-03 07:50:10 good point, but at some point every one does 2015-08-03 07:50:45 modern compilers (and valgrind) can help to prevent the most common ones 2015-08-03 07:50:49 TheLemonMan: most people don't know what they're doing. most people who think they do, don't. 2015-08-03 07:51:46 TheLemonMan: people who thought they knew what they were doing brought us heartbleed 2015-08-03 07:52:37 well, i hope my coding style is better than the openssl one, but sometimes every one makes mistakes 2015-08-03 07:52:45 and if the rust compiler catches them, good for all of us 2015-08-03 07:52:55 but the bloat is really anoying me so i tend to stick with c 2015-08-03 07:53:29 i can't say much about rust, but there isn't really that much bloat on Go 2015-08-03 07:54:22 ar, well the OpenSSL codebase was huge in space and time, it's (more or less) understandable that sometimes some bugs make their way to the final product 2015-08-03 07:57:55 Go is perfect... 2015-08-03 07:58:31 please dont ask it to be added to our aports :) 2015-08-03 07:59:07 why not ? 2015-08-03 07:59:50 because its a nightmare to package properly 2015-08-03 08:00:34 it produces large statically linked bins 2015-08-03 08:01:32 and ? 2015-08-03 08:01:39 and they have a static version of the syscall table, preventing one from using things like vDSO 2015-08-03 08:02:05 the first one is already enough for me to prevent it. 2015-08-03 08:02:48 and I guess the upstream doesn't care about those issues 2015-08-03 08:03:21 they don't really see that as an issue, at least not the static binaries 2015-08-03 08:03:56 knowing where go has its roots (plan9/9front), makes me think they even see it as a feature 2015-08-03 08:03:57 we try to keep alpine small, Go isnt helping. 2015-08-03 08:04:16 i am not a big fan of large statically linked packages 2015-08-03 08:04:39 leo-unglaub: rust or C, depends completely on what kind of software project it is 2015-08-03 08:05:18 if it is like a static web page generator, then is C probably the wrong tool 2015-08-03 08:05:32 ncopa: a desktop client for the red cross to manage user accounts 2015-08-03 08:05:39 alpine linux + gtk 2015-08-03 08:05:55 gtk 2015-08-03 08:06:01 then i'd have a look at vala 2015-08-03 08:06:08 lolvala 2015-08-03 08:07:03 promoting vala over C as safer is like saying that it's safer to use the shrinkwrap instead of a condom 2015-08-03 08:07:19 vala will generate C code so you will not introduce too many new deps (like a python or ruby) 2015-08-03 08:07:32 who said it was safer than c? 2015-08-03 08:07:41 nah, i tryed vala 2015-08-03 08:07:49 its just a c generator with a lot of bloat 2015-08-03 08:07:50 leo-unglaub: you don't really want to write gui code in C 2015-08-03 08:07:55 the generated code is unreadable, hard to debug and glib-bloat ridden 2015-08-03 08:08:16 ar: propobly not, but i kno c for 10 years and i am used to it 2015-08-03 08:08:26 rust would be the only alternative i would think about 2015-08-03 08:08:27 qml might be better 2015-08-03 08:08:31 since it was gtk i kinda assumed glib-bloat 2015-08-03 08:09:09 the generated C is not supposed to be read or debugged (I assume) 2015-08-03 08:09:11 ncopa: i introduced xfce as the desktop environment after getting pissed of with windows 8 2015-08-03 08:09:40 oh 2015-08-03 08:09:54 that is actually something you might want consider 2015-08-03 08:10:07 if you want port it to windows in future 2015-08-03 08:10:17 programs that don't need to be debugged ? what year is this ? 2015-08-03 08:10:31 ncopa: nah, no windows 2015-08-03 08:10:40 i want to migrate the entire red cross austria to linux 2015-08-03 08:10:45 with alpine and xfce 2015-08-03 08:10:52 no windows anymore !!!! 2015-08-03 08:11:14 just saying that it might be an idea to not close that door in case the person who comes after you want go back to windows 2015-08-03 08:11:22 i do the red cross stuff in my spare time and i am so pissed to reinstall windows every week becase of some virus or adware 2015-08-03 08:11:27 :) 2015-08-03 08:12:15 what about Tk ? 2015-08-03 08:12:54 I guess you're after functionality rather than appearance 2015-08-03 08:12:58 i wuold probably done gui bits in vala and the non-gui parts in C/glib or similar 2015-08-03 08:13:16 there is also lua-lgi 2015-08-03 08:13:26 hmm, lua is a nice idea 2015-08-03 08:13:27 in case you like lua 2015-08-03 08:13:30 i love lua 2015-08-03 08:13:43 i think lua-lgi might need a fix or two 2015-08-03 08:13:51 last time itried it, it segfaulted 2015-08-03 08:14:05 it could be due to I used lua5.3 2015-08-03 08:15:10 may I ask why you came up with the APKBUILD format instead of recycling the PKGBUILD one ? 2015-08-03 08:16:01 hmm, but its a generall question. even the best c guys, do you really need C in userspace? or is rust/go a good sucessor? 2015-08-03 08:17:16 leo-unglaub, the emacs approach is interesting, have a minimal C core that does the heavy lifting then use something else (such as some lisp) to do the rest 2015-08-03 08:17:37 hmm, interresting idea 2015-08-03 08:17:39 TheLemonMan: because PKGBUILD depends on bash 2015-08-03 08:17:56 APKBUILD runs fine with busybox ash 2015-08-03 08:18:10 ncopa, hrm is that because of the arrays or what ? 2015-08-03 08:19:01 ncopa: APKBUILD as a lua file ... that would rock *g* 2015-08-03 08:19:14 leo-unglaub: i think C in combination with something else is a general good idea 2015-08-03 08:19:22 do a core in C, or parts in C 2015-08-03 08:19:37 and do the gui or top level things in other lang, like Lua 2015-08-03 08:19:56 re Rust/Go, those are pretty new languages 2015-08-03 08:20:20 i dont like the static link approach of Go 2015-08-03 08:20:22 in generall you are right, but i need a only compiled languages, because you have so old computers ... you would not beleave it 2015-08-03 08:20:34 yeah, the statically linking of go is horrible, i agree 2015-08-03 08:20:53 I dont know Rust, so i cannot comment on it 2015-08-03 08:21:07 then you have swift from apple too 2015-08-03 08:21:18 which was supposed to be ported to linux 2015-08-03 08:21:38 yeah, but you dont wnt swift. i am working in it right now for an iphone an 2015-08-03 08:21:38 leo-unglaub: it's not that horrible. if you want to just ship, deploy and run your binary, go is going to work well for you. 2015-08-03 08:21:39 app 2015-08-03 08:21:44 nbever again swift .. 2015-08-03 08:21:52 :) 2015-08-03 08:22:12 leo-unglaub: you won't have to care about shipping tons of libraries with your app. 2015-08-03 08:22:15 so i am going to do a combination with C and Rust 2015-08-03 08:22:28 ar: yes, but i love small stuff 2015-08-03 08:22:36 dependencies are always the distros problem 2015-08-03 08:22:41 not the applications 2015-08-03 08:22:44 leo-unglaub: and last time i checked, calling c from rust was a bit tricky 2015-08-03 08:23:19 i was about to ask that, how easy it is to call C from Rust and the other way round 2015-08-03 08:23:32 thats the good things with lua and vala 2015-08-03 08:23:45 but i wouldnt use vala for anything else except gtk gui stuff 2015-08-03 08:24:13 and you shouldnt use glib for any daemon 2015-08-03 08:24:26 for any system daemon 2015-08-03 08:24:47 why that ? I use glib in a daemon and had no problem so far 2015-08-03 08:25:01 it does not handle out of mem "correct" 2015-08-03 08:25:15 to get Rust and C to play along you'd need lot of 'unsafe' blocks 2015-08-03 08:25:34 you ususally need 'unsafe' for C play with anything 2015-08-03 08:28:26 like i said before - C points a gun to your feet and puts your fingers on the trigger 2015-08-03 08:38:09 mixing programming languages is never "clean" 2015-08-03 08:38:45 lua embeds into C really fine. 2015-08-03 08:38:47 but this actually looks not so bad: https://doc.rust-lang.org/book/ffi.html 2015-08-03 08:43:29 if you're into lisp you should give CHICKEN scheme a try, it has such a nice FFI 2015-08-03 08:46:58 do we even have rust for alpine? 2015-08-03 08:54:08 i dont think so 2015-08-03 08:54:19 but that should be possible to do 2015-08-03 08:54:26 at least i hope *g* 2015-08-03 09:57:47 i played around a little bit with rust in a vm 2015-08-03 09:57:50 and i have to say 2015-08-03 09:57:55 i dont really like it that much 2015-08-03 09:58:01 i stick with c 2015-08-03 09:58:06 :) 2015-08-03 13:15:44 im seeing other ppl running into this: 2015-08-03 13:15:44 http://lists.alpinelinux.org/alpine-devel/4853.html 2015-08-03 13:17:47 i'm not sure what's the drawback and it is quite annoying and pulls in useless dependencies 2015-08-03 13:18:59 damn, it's really leaking into every project heh 2015-08-03 13:22:00 eradicate 2015-08-03 13:28:13 i pinged the mail 2015-08-03 13:29:20 so much spam in the ML 2015-08-03 13:33:56 never seen it, google does seem to do something right. 2015-08-03 14:59:44 I see s6 is in your package repository - is the intent to provide an alternative to the openrc init system? 2015-08-03 15:45:02 jhuntwork, good systems like s6 don't impose a requirement of being a system-level singleton 2015-08-03 15:45:29 you can certainly use s6 for supervision without it being the system init system 2015-08-03 15:45:52 i have no idea whether it would be practical to use it in place of openrc on alpine tho 2015-08-03 16:18:01 runit can also be used for supervision - i use it in LXC guests 2015-08-03 16:19:16 yes 2015-08-03 16:21:22 works great with socklog 2015-08-03 16:22:48 I also got iptables logging working inside LXC guests - http://it-offshore.co.uk/linux/alpine-linux/55-alpine-linux-lxc-guest-iptables-logging 2015-08-03 16:24:25 & lxc guests running with iptables running & net_admin caps dropped 2015-08-03 16:25:36 if anyone uses debian - I've also got wheezy upgraded with debian & devuan repos without systemd 2015-08-03 16:26:40 when devuan eventually drops udev it should be possible to use oopenrc 2015-08-03 18:49:11 dalias: understood 2015-08-03 18:49:35 but there's some nice advantages to letting s6 be PID 1 2015-08-03 18:50:03 I have it working already on my distro, but I'm working alone and moving slowly - I was wondering if anyone had set it up like that for alpine 2015-08-03 18:52:39 i have not switched to pid 1 unfortunately 2015-08-03 18:52:55 porting the 1 script to execline did not seem very attractive 2015-08-03 18:53:14 execline seems daunting at first, but after working with it a bit, it makes sense 2015-08-03 18:53:18 have you seen my repo? https://github.com/stef/s6-services 2015-08-03 18:53:25 nope 2015-08-03 18:53:36 this is what is running on my notebook, sans pid1 2015-08-03 18:53:44 nice, thanks, looks like there might be some useful stuff in there ;) 2015-08-03 18:54:04 i have documented it to some degree 2015-08-03 18:54:11 https://www.ctrlc.hu/~stef/s6.txt 2015-08-03 18:55:59 I'm slowly building out a pacman/busybox/s6/musl based distro, here: https://github.com/jhuntwork/merelinux 2015-08-03 18:56:13 need to push a few commits, the s6 parts in particular I've improved recently 2015-08-03 18:57:04 and i need to publish the packages 2015-08-03 18:57:11 they're all on my local server atm 2015-08-03 18:57:54 self-signed cert on that domain? 2015-08-03 18:58:43 no. cacert 2015-08-03 18:59:46 indeed - interesting though that my browser says it's untrusted 2015-08-03 19:02:17 hmm, guess I never really looked into cacert before 2015-08-03 19:03:45 maybe this letsencrypt thing will be worthwile, under the constraints of a x509 type regime 2015-08-03 19:40:55 plJwXq5XZYFC: your .s6-scansv/finish looks particularly intriguing ;) 2015-08-03 19:42:03 :) 2015-08-03 21:20:34 if anyone also uses Debian - some scripts to upgrade wheezy to jessie without systemd https://it-offshore.co.uk/linux/debian/56-upgrading-debian-wheezy-to-jessie-without-systemd 2015-08-03 21:23:01 Hah, systemd is the only reason that I have considered installing a debian box again :D 2015-08-03 21:30:02 http://ewontfix.com/14/ 2015-08-03 21:37:14 hm what's the total size of the repos for mirroring 2015-08-03 21:39:31 BitL0G1c: all valid points, but the solution is not sticking with SysVInit 2015-08-03 21:41:59 ... what did sysv get suggested for 2015-08-03 21:43:07 yes - but it's not systemd either 2015-08-03 21:44:39 As soon as OpenRC supports parallel initiation, it's the better shit. 2015-08-03 21:45:29 openrc is very good - hopefully devuan will switch to it with vdev 2015-08-03 21:45:59 BitL0G1c: I propose looking at Alpine Linux. I think it's much better than Debian. 2015-08-03 21:46:06 snrk 2015-08-03 21:46:38 runit works p nicely for my purposes 2015-08-03 21:46:41 a lot of people came here because of systemd 2015-08-03 21:47:04 I came here because of the up to date software and the easy packaging. 2015-08-03 21:47:23 grsec+musl were my reasons 2015-08-03 21:47:42 not a big fan of OpenRC actually, there is really no need for any init or really anything to rely on deamonization 2015-08-03 21:47:45 vrs: For alpine? 2015-08-03 21:47:48 yes 2015-08-03 21:47:52 Yes, I like that a lot. 2015-08-03 21:48:03 I'm running the grsec kernel of arch on my single server now 2015-08-03 21:48:16 s6 / runit / etc. is a better init imo 2015-08-03 21:48:31 i use runit with socklog 2015-08-03 21:49:27 chris|: careful with the claims about daemonization 2015-08-03 21:49:32 *something* needs to daemonize 2015-08-03 21:49:34 I recently wanted to build a cluster based on Alpine, but the pacemaker and corosync packages are in testing. :( 2015-08-03 21:51:21 ammunta: I wouldn't necessarily say that's true 2015-08-03 21:53:15 well okay, it's not actually necessary to disown anything 2015-08-03 21:54:42 good enough 2015-08-03 21:54:56 it is however necessary to sleep, so good night 2015-08-03 21:56:47 :) 2015-08-03 21:56:56 maybe we should have a why people pick alpine survey on the website 2015-08-03 21:56:59 thermi, thankfully things seem to move pretty quickly from testing to edge/main 2015-08-03 21:57:03 <- dmvpn, then xen 2015-08-03 21:57:09 darkfader, that would be really nice 2015-08-03 21:57:33 imo you might need a "choose all that apply" rather than a mutually-exclusive list for the results to be meaningful tho 2015-08-03 21:57:40 dalias: May I point out, that those packages have been built in october? 2015-08-03 21:58:10 dalias: marketing wise the thing that lures you in is the most important one 2015-08-03 21:58:19 almost everyone stays once they found it right? :)) 2015-08-03 21:58:22 a "rate each of these reasons on a scale of 1 (unimportant) to 5 (very important)" might make sense 2015-08-03 21:58:48 i mean, like this: why i use != how i got there 2015-08-03 21:59:07 maybe track both 2015-08-03 21:59:16 yeah but i suspect there are a good # of ppl who found alpine via "musl + non-systemd" as their reasons 2015-08-03 21:59:22 but today i'm already too tired to write down the backlog 2015-08-03 22:00:02 or "non-systemd + small size" 2015-08-03 22:00:36 non-systemd + had a docker image 2015-08-03 22:04:37 yeah 2015-08-03 22:05:09 these days i think initial reason for choosing a distro almost always ends up being the intersection of AT LEAST 2 criteria 2015-08-03 22:05:29 if you only have one criterion, there are simply too many choices that meet it 2015-08-03 22:09:11 well, reason + how did you even find it 2015-08-03 22:17:49 grsecurity +no systemd is a winning combination 2015-08-03 22:29:06 I came to Alpine because of the small size and the packages available. I use it inside Docker so the init system is irrelevant to me. 2015-08-03 22:56:47 I use it inside docker so being sure that things are not expecting systemd is important to me 2015-08-04 00:06:02 is there a canonical mirror for mirroring from or 2015-08-04 11:52:07 anyone here know anything about iptables/iproute2 https://superuser.com/questions/950031/routing-subnet-to-specific-routing-table-with-fwmark-direct-to-isp-and-vpn 2015-08-04 11:52:22 i think im 98% of the way there, but i'm not sure what I'm doing wrong in regard to the iptables/iprules 2015-08-04 12:07:57 sillysausage: interesting 2015-08-04 12:08:29 yeah i'm really starting to wonder how i'm going to solve this one 2015-08-04 12:08:37 i had got it working one way, without fwmark 2015-08-04 12:08:41 but fwmark is the correct way 2015-08-04 12:08:54 and it's frustrating me i cannot find a solution really using fwmark 2015-08-04 12:09:30 i have been trawling the internets looking for solutions for quite some time 2015-08-04 12:09:38 the way i thought would work would be to copy the main routing table 2015-08-04 12:09:53 and then add a default route for the ISP table, and a default route for the VPN table 2015-08-04 12:10:14 that sounds very similar to pingu 2015-08-04 12:10:27 pingu? 2015-08-04 12:10:47 a couple of years ago i needed do proper policy routing for multi isp 2015-08-04 12:10:58 yes it is 2015-08-04 12:11:01 eg you could have dhcp eth0 + ppp0 2015-08-04 12:11:03 very similar to that 2015-08-04 12:11:21 i have looked at a few multi-isp guides 2015-08-04 12:11:23 we used shorewall back then 2015-08-04 12:11:42 but shorewall did not support dynamic ip 2015-08-04 12:11:53 you could hack it to reload on ip change etc 2015-08-04 12:12:01 but i never liked those workarounds 2015-08-04 12:12:03 yes well that's not an issue with the hooks 2015-08-04 12:12:12 because if you look there ppp0 has it's own hooks you can use 2015-08-04 12:12:19 so does openvpn has environmental variables 2015-08-04 12:12:25 also i was not happy with shorewall taking over it all 2015-08-04 12:12:32 both routing and firewalling 2015-08-04 12:12:35 yeah 2015-08-04 12:12:40 so i ended up writing a daemon in C, pingu 2015-08-04 12:12:42 i don't want to use shorewall either 2015-08-04 12:12:54 and it shouldn't be necessary either 2015-08-04 12:13:01 https://ppp.samba.org/pppd.html#sect13 2015-08-04 12:13:05 https://openvpn.net/index.php/open-source/documentation/manuals/65-openvpn-20x-manpage.html#lbAS 2015-08-04 12:13:18 getting the IP addresses of the ppp0 connection, or VPN connection isn't an issue 2015-08-04 12:13:20 what pingu does is copy main route table to alternate, per "isp" routing table 2015-08-04 12:13:25 yes 2015-08-04 12:13:34 well you can see there i flush the ISP table 2015-08-04 12:13:40 then when ppp0 comes up the script runs 2015-08-04 12:13:53 that way it stops it inserting the rules multiple times, because it flushes at the start 2015-08-04 12:13:55 i think you might be able to handle this with pingu 2015-08-04 12:14:13 i don't think i need that though 2015-08-04 12:14:27 you probaly dont 2015-08-04 12:14:41 but you will need ip rule for source ip addr too 2015-08-04 12:14:43 because getting the peer or local IP of ppp0 is easy 2015-08-04 12:15:02 DEVICE 2015-08-04 12:15:04 The name of the serial tty device being used. 2015-08-04 12:15:06 IFNAME 2015-08-04 12:15:08 The name of the network interface being used. 2015-08-04 12:15:10 IPLOCAL 2015-08-04 12:15:12 The IP address for the local end of the link. This is only set when IPCP has come up. 2015-08-04 12:15:14 IPREMOTE 2015-08-04 12:15:16 The IP address for the remote end of the link. This is only set when IPCP has come up. 2015-08-04 12:15:24 yes but then will that solution only work for ppp devices 2015-08-04 12:15:28 specifying those in /etc/ppp/ip-up certainly works 2015-08-04 12:15:37 yes, but openvpn also has it's own ones 2015-08-04 12:15:44 that do the same thing 2015-08-04 12:16:10 ifconfig_local 2015-08-04 12:16:12 The local VPN endpoint IP address specified in the --ifconfig option (first parameter). Set prior to OpenVPN calling the ifconfig or netsh (windows version of ifconfig) commands which normally occurs prior to --up script execution. 2015-08-04 12:16:14 ifconfig_remote 2015-08-04 12:16:16 The remote VPN endpoint IP address specified in the --ifconfig option (second parameter) when --dev tun is used. Set prior to OpenVPN calling the ifconfig or netsh (windows version of ifconfig) commands which normally occurs prior to --up script execution. 2015-08-04 12:16:24 route_net_gateway 2015-08-04 12:16:26 The pre-existing default IP gateway in the system routing table. Set prior to --up script execution. 2015-08-04 12:16:28 route_vpn_gateway 2015-08-04 12:16:30 The default gateway used by --route options, as specified in either the --route-gateway option or the second parameter to --ifconfig when --dev tun is specified. Set prior to --up script execution. 2015-08-04 12:16:32 (there's a heap of others too) 2015-08-04 12:16:55 ive used some of those in /etc/ppp/ip-up and /etc/openvpn/route-up.sh 2015-08-04 12:17:00 and it seems to be doing it correctly 2015-08-04 12:17:16 it's mentioned about half way down in https://superuser.com/questions/950031/routing-subnet-to-specific-routing-table-with-fwmark-direct-to-isp-and-vpn 2015-08-04 12:19:43 in any case i put a copy of the routing tables in that thread 2015-08-04 12:19:47 and i think it looks right 2015-08-04 12:20:02 what is not working? 2015-08-04 12:20:15 the fwmark part 2015-08-04 12:20:28 eg in iptables 2015-08-04 12:20:35 or possibly, some rules specific to fwmark eg 2015-08-04 12:20:38 # cat /etc/network/fwmark_rules 2015-08-04 12:20:40 #!/bin/sh 2015-08-04 12:20:42 /sbin/ip rule add fwmark 0x1/0x3 lookup ISP 2015-08-04 12:20:44 /sbin/ip rule add fwmark 0x2/0x3 lookup VPN 2015-08-04 12:20:46 if you look at the end of that post 2015-08-04 12:20:50 i have circled the part of iptables im unsure about 2015-08-04 12:20:55 # -------- Start Section I'm Unsure about ------- 2015-08-04 12:21:17 i think something is going wrong with the marking/sending to that table 2015-08-04 12:21:33 im fairly certain the tables are being created correctly, as they appear earlier in that thread 2015-08-04 12:21:37 iptables -t mangle -A OUTPUT -o tun0 -j MARK --set-mark 0x2/0x3 2015-08-04 12:22:19 i dont think that will work 2015-08-04 12:22:24 hmm 2015-08-04 12:22:46 thre reason is simple 2015-08-04 12:23:16 you need to mark the package before the routing decision is done 2015-08-04 12:23:28 oh so if i put it above 2015-08-04 12:23:31 err below 2015-08-04 12:23:38 otherwise, how would ip rule know what outing table to use? 2015-08-04 12:23:52 hmm 2015-08-04 12:24:02 so maybe i should try it below 2015-08-04 12:24:04 iptables -t nat -A POSTROUTING -s 192.168.2.0/24 -o tun0 -j MASQUERADE 2015-08-04 12:24:16 no 2015-08-04 12:24:23 you need change it to -A PREROUTING 2015-08-04 12:24:29 however 2015-08-04 12:24:34 mm 2015-08-04 12:24:39 i dont think that will work with -o tun0 2015-08-04 12:24:53 hmm 2015-08-04 12:25:00 because you dont know which the out interface will be til after the routing decision is made 2015-08-04 12:25:19 i did have some other ip rules 2015-08-04 12:25:25 but couldn't figure out if i needed them or not 2015-08-04 12:25:36 i think you might be right though 2015-08-04 12:25:41 i should not try to use tun0 2015-08-04 12:25:44 instead i should mark them 2015-08-04 12:25:57 and have generic ip rules that route those into ${IPLOCAL} 2015-08-04 12:26:19 or ${route_vpn_gateway} 2015-08-04 12:26:21 somehow 2015-08-04 12:28:00 i had been fiddling with these https://dpaste.de/xsB7 2015-08-04 12:40:29 so ncopa 2015-08-04 12:40:31 maybe something like 2015-08-04 12:40:51 what i had there would work 2015-08-04 12:41:23 i'm going to give it a try 2015-08-04 12:53:11 hmm ncopa this looks similar 2015-08-04 12:53:14 http://linux-ip.net/html/adv-multi-internet.html 2015-08-04 12:54:53 iptables -t nat -A POSTROUTING -s 192.168.2.0/24 -j MASQUERADE 2015-08-04 12:55:01 im not sure i can change that to PREROUTING 2015-08-04 13:01:42 no 2015-08-04 13:01:46 those are not the problem 2015-08-04 13:01:51 -j MASQ is ok 2015-08-04 13:02:05 problem is that you mark the packages too late 2015-08-04 13:02:22 you need to mark the package for ip rule tom amke a routing decision 2015-08-04 13:02:45 but i think the package is only marked after the reouting decision is already done 2015-08-04 13:03:04 the ip rule and routing rules are already looked up 2015-08-04 13:03:10 and then package is marked 2015-08-04 13:03:59 could you paste in a pastebin what you mean :) 2015-08-04 13:04:10 so i don't misinterpret it 2015-08-04 13:12:14 ncopa: do you mean like this https://dpaste.de/sq1v 2015-08-04 13:16:40 yes 2015-08-04 13:16:44 that looks better 2015-08-04 13:16:57 yay :) 2015-08-04 13:17:05 i dont know if it will work though :) 2015-08-04 13:17:05 do you think the routing tables will work? 2015-08-04 13:17:13 well it accepts it 2015-08-04 13:17:20 whether or not it works ^_^ is entirely different matter 2015-08-04 13:19:51 i think that also means that only the 192.168.2.0/24 net will go via vpn 2015-08-04 13:21:33 which is what i want! :D 2015-08-04 13:22:34 is that the only thing you want? 2015-08-04 13:22:42 yep, and 192.168.1.0/24 to go out of ISP 2015-08-04 13:23:00 basically what i've done is this: 2015-08-04 13:23:37 # Virtual interface 2015-08-04 13:23:40 auto eth0:2 2015-08-04 13:23:42 iface eth0:2 inet static 2015-08-04 13:23:44 address 192.168.2.1 2015-08-04 13:23:46 netmask 255.255.255.0 2015-08-04 13:23:48 post-up /etc/network/vpnOldRoute 2015-08-04 13:23:50 #post-up /etc/network/fwmark_rules 2015-08-04 13:23:52 so basically when that interface comes up it runs that file 2015-08-04 13:23:59 # cat /etc/network/fwmark_rules 2015-08-04 13:24:01 #!/bin/sh 2015-08-04 13:24:03 /sbin/ip rule add fwmark 0x1/0x3 lookup ISP pref 120 2015-08-04 13:24:05 /sbin/ip rule add fwmark 0x2/0x3 lookup VPN pref 130 2015-08-04 13:24:07 im not sure if i need anything else there 2015-08-04 13:24:36 the actual routing stuff to do with the ISP table happens in 2015-08-04 13:24:38 # cat /etc/ppp/ip-up 2015-08-04 13:24:40 #!/bin/sh 2015-08-04 13:24:42 # 2015-08-04 13:24:44 # This script is run by pppd when there's a successful ppp connection. 2015-08-04 13:24:46 # 2015-08-04 13:24:48 #/sbin/ip route flush table ISP 2015-08-04 13:24:50 #/sbin/ip route show table main | grep -Ev ^default | while read ROUTE ; do ip route add table ISP $ROUTE; done 2015-08-04 13:24:52 #/sbin/ip route add table ISP default via ${IPLOCAL} 2015-08-04 13:25:09 (so if ppp0 goes down and comes back, table is flushed, routes copied from main, default route set to ppp0's local ip) 2015-08-04 13:25:29 # cat /etc/openvpn/route-up-fwmark.sh 2015-08-04 13:25:31 #!/bin/sh 2015-08-04 13:25:33 # 2015-08-04 13:25:35 # This script is run by OpenVPN when there's a successful VPN connection. 2015-08-04 13:25:37 # 2015-08-04 13:25:39 /sbin/ip route flush table VPN 2015-08-04 13:25:41 /sbin/ip route show table main | grep -Ev ^default | while read ROUTE ; do ip route add table VPN $ROUTE; done 2015-08-04 13:25:43 /sbin/ip route add default via ${route_vpn_gateway} dev ${dev} table VPN 2015-08-04 13:25:45 the same happens there, for the VPN, eg tun0 2015-08-04 13:26:07 what i am wondering ncopa is if i am missing anything else 2015-08-04 13:27:31 is source subnet the only criteria for what goes via vpn? 2015-08-04 13:27:47 + the sip exception? 2015-08-04 13:28:01 or let me rephrace 2015-08-04 13:28:29 do you only have source or dest ip addr as criteria for if it goes via vpn? 2015-08-04 13:28:47 correct 2015-08-04 13:28:53 or so you also need criterisas tcp/udp port 2015-08-04 13:28:59 nope i don't care about ports 2015-08-04 13:28:59 then you can simplify 2015-08-04 13:29:11 basically when it has to go to a specific destination (static ip) then i might make an exception 2015-08-04 13:29:14 you dont need any fwmarking at all 2015-08-04 13:29:29 you can do all the rules with ip rule 2015-08-04 13:29:34 otherwise everything from 192.168.1.0/24 should go through ISP (no VPN), and everything from 192.168.2.0/24 should go through VPN (with VPN) 2015-08-04 13:29:47 ncopa: yes, i know which i have done, but there's a problem 2015-08-04 13:29:54 it means filtering is has to be done in both places 2015-08-04 13:29:59 which is kind of messy 2015-08-04 13:30:01 i did that in the wiki 2015-08-04 13:30:07 http://wiki.alpinelinux.org/wiki/Linux_Router_with_VPN_on_a_Raspberry_Pi#VPN_Tunnel_on_specific_subnet 2015-08-04 13:30:29 filter on both places? 2015-08-04 13:30:44 well if you look at the iptables, rules to make an exception 2015-08-04 13:30:45 you need 2015-08-04 13:30:51 # Voip Server 2015-08-04 13:30:53 iptables -A IN_PPP0 -s -j ACCEPT 2015-08-04 13:30:55 iptables -t nat -A POSTROUTING -d -o ppp0 -j MASQUERADE 2015-08-04 13:30:57 and also: 2015-08-04 13:31:01 # Some server you don't want to go through the VPN tunnel when on the 192.168.2.0/24 (eg voip server) 2015-08-04 13:31:03 # I found this useful when I wanted to receive SIP calls on my phone 2015-08-04 13:31:05 /sbin/ip rule add to table main prio 32000 2015-08-04 13:31:07 /sbin/ip rule add from table main prio 32001 2015-08-04 13:31:15 where as if you use fwmark, then all the filtering can be in iptables 2015-08-04 13:31:27 and ip rule will just do what it needs to based upon the mark 2015-08-04 13:31:36 much cleaner to use fwmark, and its what its for isn't it 2015-08-04 13:31:51 i was also thinking of using nftables when alpinelinux gets that in the future 2015-08-04 13:31:55 i think this will translate better 2015-08-04 13:32:25 no 2015-08-04 13:32:35 you can do: 2015-08-04 13:32:43 iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE 2015-08-04 13:32:48 oh 2015-08-04 13:32:58 simply drop the -s 192.168.1.0/24 2015-08-04 13:33:05 oh y eah 2015-08-04 13:33:12 yeah you're right, because fwmark will handle that 2015-08-04 13:33:20 the main reason i had that in there was from the "old setup" 2015-08-04 13:33:22 you dont need fwmark 2015-08-04 13:33:27 if the VPN went down it would fallback :) 2015-08-04 13:33:41 so it means you'd get leakages 2015-08-04 13:33:58 ie hosts on 192.168.2.0/24 if the VPN went down, would end up on a non-VPNed connection 2015-08-04 13:34:06 but this might not be the case now i have two routing tables ISP and VPN 2015-08-04 13:34:14 you can solve that too 2015-08-04 13:34:23 add a specific leak reject rule to iptables 2015-08-04 13:34:48 do i need to MASQUERADE to both tun0 and ppp0? 2015-08-04 13:34:50 or just ppp0? 2015-08-04 13:34:59 depends on the vpn net 2015-08-04 13:35:14 i would exepct it not to be needed 2015-08-04 13:35:17 but i dont know 2015-08-04 13:35:24 right, i might comment it out then 2015-08-04 13:35:28 so tell me how would i stop the leaks 2015-08-04 13:35:53 so you dont want any of the 192.168.2.0/24 to leak to ppp0 2015-08-04 13:35:59 correct 2015-08-04 13:36:06 with some exception 2015-08-04 13:36:14 of of a specific destination correct 2015-08-04 13:36:27 for example 2015-08-04 13:36:28 iptables -A -s 192.168.2.0/24 -o ppp0 -j REJECT 2015-08-04 13:36:58 add that as a fallback rule at the end 2015-08-04 13:37:02 right 2015-08-04 13:37:14 you could jave a log-and-reject chain or similar 2015-08-04 13:37:20 have* 2015-08-04 13:37:23 yeah 2015-08-04 13:37:40 https://dpaste.de/XOnu so like that? 2015-08-04 13:38:22 and before those rules i had 2015-08-04 13:38:24 iptables -t mangle -A PREROUTING -d -j MARK --set-mark 0x1/0x3 2015-08-04 13:38:31 -d is destination, is that right? 2015-08-04 13:38:33 i think so 2015-08-04 13:38:44 you replace those --set-mark with an ip rule 2015-08-04 13:38:57 oh. 2015-08-04 13:39:06 ip rule src 192.168.2.0/24 lookup VPN 2015-08-04 13:39:13 ah yeah, more a less like i had 2015-08-04 13:39:14 ip rule src 192.168.1.0/24 lookup ISP 2015-08-04 13:39:20 mm true 2015-08-04 13:39:23 actually you make a good point 2015-08-04 13:39:30 although if it's an exception 2015-08-04 13:39:37 im going to have to make an ip rule for that 2015-08-04 13:39:45 it was someone told me that all filtering should happen in iptables 2015-08-04 13:39:47 then you add it with lower pref/prio 2015-08-04 13:39:47 not with ip rule 2015-08-04 13:40:02 you can do it with ip rules 2015-08-04 13:40:13 or you can do it with fwmark 2015-08-04 13:40:26 i think the reason the fwmark is better is because you can append new rules 2015-08-04 13:40:30 fwmark is required if you want use more advanced like dest port 2015-08-04 13:40:31 eg to iptables 2015-08-04 13:40:36 yeah. 2015-08-04 13:40:43 there's really no reason not to use fwmark 2015-08-04 13:40:52 more extensible later if you want it 2015-08-04 13:41:01 simplicity 2015-08-04 13:41:25 i'd argue using ip rule and worrying about priority is more messy 2015-08-04 13:41:28 like i did 2015-08-04 13:41:30 in 2015-08-04 13:41:45 http://wiki.alpinelinux.org/wiki/Linux_Router_with_VPN_on_a_Raspberry_Pi#IPTables_Exception 2015-08-04 13:42:04 if it was only one server, then maybe 2015-08-04 13:42:26 but having to mess with prio 32000 and making sure its less than the previous thing 2015-08-04 13:42:28 is kinda annoying 2015-08-04 13:42:40 the thing i like about fwmark i think is you can use masks 2015-08-04 13:43:01 like 0x1/0x3 and 0x2/0x3 2015-08-04 13:43:09 i think 0x3 refers to both 0x1 and 0x2 does it not? 2015-08-04 13:43:18 i wasn't able to find clear definition of that anywhere 2015-08-04 13:44:15 ncopa: the main thing i like is it puts the "filtering" in "iptables" 2015-08-04 13:44:37 you're right if you don't need to sort by port, then not using fwmark is simpler, even if less correct. 2015-08-04 13:44:58 you are right. filtering ) iptables 2015-08-04 13:45:05 filtering = iptables 2015-08-04 13:45:17 but you dont really filter when you fwmark 2015-08-04 13:45:18 and as i was documenting it for others i want to be as correct as i can be 2015-08-04 13:45:21 you tag packets 2015-08-04 13:45:30 yeah and ip rule filters it based on the tag 2015-08-04 13:45:33 but it's generic then 2015-08-04 13:45:54 and with filter chains i believe you can append to a exception chain 2015-08-04 13:46:16 realistically its not all that useful, because most things are on google, akamai can't be done like that 2015-08-04 13:46:19 which again means that you do routing rules in firewall... 2015-08-04 13:46:22 :) 2015-08-04 13:46:28 anyway 2015-08-04 13:46:28 but for personal things (my own server, voip) etc i mark those exceptions 2015-08-04 13:46:57 ncopa: but you're not really, your just marking 2015-08-04 13:47:03 the routing is still happening with ip rule :) 2015-08-04 13:47:15 :) 2015-08-04 13:47:40 and who knows, someone might easily read that article 2015-08-04 13:47:47 and want to make an exception for all "ssh traffic" or something 2015-08-04 13:47:52 that way they can 2015-08-04 13:48:06 yeah 2015-08-04 13:48:15 or smtp traffic 2015-08-04 13:48:21 yeah that one in particular 2015-08-04 13:48:27 because VPNs often block SMTP for abuse 2015-08-04 13:48:44 and i dont really like to expose my VPN to everyone i send emails to 2015-08-04 13:48:48 and if you use say gmail 2015-08-04 13:48:56 you'd have to do it that way because you cannot do that by IP 2015-08-04 13:49:05 because google has a large pool of IPs, and you dont know what one you're gonna get 2015-08-04 13:49:18 the only reason im able to do it by IP is because i have my own email server. 2015-08-04 13:49:38 that's why i wanted to move it to fwmark style 2015-08-04 13:50:12 in case you would like it to work with non-ppp 2015-08-04 13:50:18 i'd reocmmend using pingu 2015-08-04 13:50:31 yeah i might look into that 2015-08-04 13:50:45 would i ever be able to do this without PPP? 2015-08-04 13:50:45 imho pingu is pretty neat 2015-08-04 13:50:52 yes 2015-08-04 13:51:15 how would i do my dialing with my modem? 2015-08-04 13:51:20 does pingu handle that? 2015-08-04 13:51:30 no no 2015-08-04 13:51:46 it only handles the routing rules 2015-08-04 13:51:51 oh 2015-08-04 13:52:08 auto copy the ISP and VPN routing tables 2015-08-04 13:52:18 yeah it might be nice if i was doing more than routing 0x1/0x3 into ISP and 0x2/0x3 into VPN tables 2015-08-04 13:52:39 you actually have one problem with your setup 2015-08-04 13:52:46 mm? 2015-08-04 13:53:05 but hum 2015-08-04 13:53:13 i dont think it is a real life problem 2015-08-04 13:53:23 do tell me 2015-08-04 13:53:26 there is one outstanding problem 2015-08-04 13:53:30 with those rules http://wiki.alpinelinux.org/wiki/Linux_Router_with_VPN_on_a_Raspberry_Pi#Advanced_IPtables_rules_that_allow_us_to_route_into_our_two_routing_tables 2015-08-04 13:53:33 if you from vpn net ping your ppp0 interface 2015-08-04 13:53:53 nah i can't do that 2015-08-04 13:54:00 or if you have an application that uses ppp0 source ip that routes via vpn 2015-08-04 13:54:02 i don't own anything up there 2015-08-04 13:54:27 as far as anything else on the VPN is untrusted 2015-08-04 13:54:40 (i don't have access to the server side of that) 2015-08-04 13:55:03 i have noticed one really weird thing though with the above rules 2015-08-04 13:55:09 there's two websites that refuse to open 2015-08-04 13:55:18 either on a 192.168.1.0/24 address or 192.168.2.0/24 address 2015-08-04 13:55:28 yeah its not a real life problem in vpn setup 2015-08-04 13:55:28 http://www.codecademy.com/ being one of them 2015-08-04 13:55:37 it is a real life problem with dual isp setup 2015-08-04 13:55:38 vice.com being the other 2015-08-04 13:55:40 right 2015-08-04 13:55:51 i am really unsure what could cause a website to not work 2015-08-04 13:55:52 in vpn setup it is just a theoretical problem :) 2015-08-04 13:56:04 what is weird is literally everything else works 2015-08-04 13:56:10 and i know those two sites are up 2015-08-04 13:56:19 its almost like, something is happening with the tcp sequencing 2015-08-04 13:56:28 that it is a non-established connection or something 2015-08-04 13:56:41 (been using this for weeks) and both those sites won't route 2015-08-04 13:56:55 (was going to fix this fwmark stuff first then investigate that) 2015-08-04 13:57:41 ncopa: i they used to work 2015-08-04 13:57:53 i seem to remember the only difference being when i went over to stateful firewall 2015-08-04 13:57:57 and connection tracking 2015-08-04 13:58:51 in any case ncopa this should be what you meant with that REJECT rule https://dpaste.de/3S6v 2015-08-04 13:59:03 it's after the MASQUERADE rule like you said 2015-08-04 13:59:32 if that doesn't work commenting out the MASQUERADE rule on line 10 i shall comment that back in 2015-08-04 14:00:35 im going to give this a shot :) 2015-08-04 14:00:41 brb 2015-08-04 14:08:50 i think you mght need that reject rule right in front of MASQUERADE 2015-08-04 14:10:57 hmm sorry did i miss something 2015-08-04 14:10:59 okay 2015-08-04 14:11:01 ill try that 2015-08-04 14:11:02 its kind of working. 2015-08-04 14:11:10 except 192.168.2.0/24 is being routed out directly 2015-08-04 14:11:35 btw the last message i saw was 2015-08-04 14:11:39 233031 sillysausage | brb 2015-08-04 14:11:42 233841 @ncopa | i think you mght need that reject rule right in front of MASQUERADE 2015-08-04 14:11:48 so if you said anything inbetween i missed it 2015-08-04 14:12:17 iptables -A -s 192.168.2.0/24 -o ppp0 -j REJECT 2015-08-04 14:12:22 also im gonna have to specify the chain type 2015-08-04 14:12:25 after -A 2015-08-04 14:12:34 shouldn't that be IN_ETH0 2015-08-04 14:14:21 btw ncopa this is what i have right now 2015-08-04 14:14:23 https://dpaste.de/jT1L 2015-08-04 14:14:27 i don't think it's working :P 2015-08-04 14:14:41 now how can i tell if it's the fwmarking or the routing hmm 2015-08-04 14:15:03 ip rule https://dpaste.de/B8Hu 2015-08-04 14:15:40 oh wait i think i know why that might be 2015-08-04 14:19:12 back, 2015-08-04 14:19:14 https://dpaste.de/AACO 2015-08-04 14:19:16 that's what the routing table looked like 2015-08-04 14:19:18 i had to undo it 2015-08-04 14:19:32 i dont think packets are making their way into the VPN table 2015-08-04 14:19:44 if i ping something like 172.16.32.1 it works though 2015-08-04 14:20:23 ncopa: how do i debug if it's fwmark in iptables 2015-08-04 14:20:28 or the ip rules on fwmark 2015-08-04 14:20:50 this is basically where i go to last night 2015-08-04 14:21:29 btw ncopa i appreciate your help lots :) 2015-08-04 14:21:37 this one has been bugging me for ages 2015-08-04 14:21:51 and im so close! 2015-08-04 14:22:55 basically what i have found 2015-08-04 14:23:00 is if im on a 192.168.2.0/24 address 2015-08-04 14:23:07 its not going in :P 2015-08-04 14:23:42 192.168.1.0/24 addresses work 2015-08-04 14:23:49 but im not sure if its going out the main table or the ISP table 2015-08-04 14:29:45 https://unix.stackexchange.com/questions/207007/ip-rule-not-acting-on-fwmark 2015-08-04 14:29:56 https://groups.google.com/forum/#!topic/comp.os.linux.networking/8KGW-M9QmGk 2015-08-04 14:30:03 its infuriating because i keep finding the same things 2015-08-04 14:30:34 if only i could count packets in the routing tables ncopa 2015-08-04 14:30:36 or something like that 2015-08-04 17:25:29 hmmm ncopa 2015-08-04 17:25:32 i think im a bit closer 2015-08-04 17:25:38 https://dpaste.de/ReAt 2015-08-04 21:58:18 how portable is exec -a 2015-08-05 02:47:51 Hola, I was wondering if somebody could point me to documentation on creating virtual/alias packages for Alpine Linux since we are moving our images over to Alpine Linux and we support apt files to install packages through apt-get on some of our images so we would like to make virtual packages for them to convert without resistance 2015-08-05 02:48:51 virtual? 2015-08-05 02:49:16 i think that means a package name that's nothing but deps on other packages 2015-08-05 02:49:33 and apk has a nice way to do it; i just don't know it right off 2015-08-05 02:50:02 see apk add --help, particularly the -t/--virtual option 2015-08-05 02:50:03 https://www.debian.org/doc/debian-policy/ch-binary.html#s-virtual_pkg 2015-08-05 02:50:28 oh that's different 2015-08-05 02:51:04 i don't know how to do the 'provides' thing in apk, but i would be very surprised if it's not possible 2015-08-05 02:51:36 I guess I could get clever and just create a ton of empty packages that depend on the ones they are aliasing 2015-08-05 03:04:47 tbh I'm not sure why you'd /want/ to use different deps in different places if you weren't actually maintaining a public repo but 2015-08-05 03:06:30 on the wiki they are meta packages http://wiki.alpinelinux.org/wiki/APKBUILD_meta:Meta 2015-08-05 03:08:38 @ammunta we are maintaining a public repo and it's available w/ signing on all of our images we just don't have anything in there yet except glibc for Java. We don't want different dependencies we want to alias Alpine Linux dependencies so that people don't have to care about whether or not we choose to use Alpine Linux they can rely on what they know, AKA we will alias build-essential (Debian) to build-base (Alpine) so that t 2015-08-05 03:09:12 I know, that's really the only use-case I came up with immediately 2015-08-05 03:09:27 also, you're getting cut off by protocol line length 2015-08-05 03:09:54 idk if your client makes that obvious 2015-08-05 03:10:00 bah, Purple must no longer split up lines, guess it's back to irssi 2015-08-05 03:10:14 I don't think irssi splits lines out of the box either 2015-08-05 03:12:22 Thanks BigL0G1c that's perfect that's what we will do then since we have a repo 2015-08-05 03:12:47 BitL0G1c* 2015-08-05 03:14:43 speaking of which, what /is/ the preferred way of keeping a local repo 2015-08-05 03:15:27 install directly from apk? appending it to /etc/apk/repos? 2015-08-05 03:19:07 What we did was generate a key, added it to our base image, installed it into /etc/apk/repositories as @envygeeks and @jekyll (so that they don't pull from our repo by default they must explicitly choose to do so) and then built an alpine-dev image that we use to build APK's for Alpine Linux through Docker on Debian and we hold, sync and attach (as a volume) the index every time we build and then rsync it to our servers 2015-08-05 03:21:57 Sorry long lines I forgot since I'm in the midst of building packages, basically yes 2015-08-05 03:41:29 envygeeks - do you have an elasticsearch package for Alpine ? 2015-08-05 03:42:24 BitL0G1c no because we supply that as a private Docker image that is go-to-deploy 2015-08-05 03:42:54 yes that was where i saw it - in docker 2015-08-05 03:43:02 uhhh how does the licensing on the aports tree work 2015-08-05 03:43:11 i need it for nginx-naxsi 2015-08-05 03:44:17 Well, since we will be making a ton of packages over the next week I'd be happy to see if I can package it, I like helping out 2015-08-05 03:45:13 would be a great help - I'm not that good with java 2015-08-05 03:45:48 I added maven so it could be built - but got stuck on the build 2015-08-05 03:46:48 https://gist.github.com/Filirom1/44282c8d385a55766600 someone put this up, didn't look too hard at it 2015-08-05 03:47:12 I think the problem is java-certificates is missing in alpine 2015-08-05 03:49:54 the pre-compiled binaries had other stuff besides java files - so I was trying to build the whole thing 2015-08-05 03:50:10 some people say installing ca-certificates will solve that but there is: https://bugs.alpinelinux.org/issues/4128 that implies that doesn't work 2015-08-05 03:52:29 yes that is the exact same error i got - alpine needs java-certificates 2015-08-05 03:56:05 ca-certificates-java 2015-08-05 05:51:21 guys, i just installed samba and acf-samba.. and i noticed there is no "pdbedit" 2015-08-05 05:51:27 what i have to install?? 2015-08-05 05:51:30 thanks 2015-08-05 06:50:53 guys, what package that provides "pdbedit"?? 2015-08-05 07:00:28 Qccpu: check pkgs.alpinelinux.org 2015-08-05 07:02:55 usually "pdbedit" is included in samba suite. 2015-08-05 07:03:30 apk search gives me nothing 2015-08-05 07:15:14 Qccpu: samba-common-tools 2015-08-05 07:15:42 Qccpu: http://pkgs.alpinelinux.org/contents?filename=pdbedit&path=&pkgname=&arch=x86_64 2015-08-05 07:16:13 we dont include the file contents in the APKINDEX 2015-08-05 07:16:22 to save space 2015-08-05 07:26:57 okay, thank you.. :) 2015-08-05 07:35:20 Hi. On http://git.alpinelinux.org/cgit/aports/commit/?h=3.2-stable&id=5a6eb2946c459470eb1ee36aca054c7440dff5f9 there is a link to http://bugs.alpinelinux.org/issues/4509 . However this bug report isn't public. Is there a reason why those bug reports are hidden? 2015-08-05 08:11:35 pluesch2 good catch, i would like to know it to 2015-08-05 08:21:40 pluesch2, crow: so far the security bugs have been kept private until alpine release containing that fix is released 2015-08-05 08:21:57 so the bug will become visible when next release is made 2015-08-05 08:22:21 ncopa, would know more on that policy 2015-08-05 08:23:54 shouldn't packages with security updates be updated irrelevant of release so why can't they be opened earlier? 2015-08-05 08:26:06 we open them once the issue is fixed in all stable branches 2015-08-05 08:26:33 regardless on when the release is 2015-08-05 08:35:19 hm... 2015-08-05 08:36:30 but details of the cve are already available on other sites (redhat bugtracker for example) 2015-08-05 08:37:00 i know 2015-08-05 08:37:05 i opened it now too 2015-08-05 08:37:13 thank you 2015-08-05 08:37:43 the ticket does not say anything more than what is in public other places 2015-08-05 08:38:03 someone complained that the unresolved sec issues was open 2015-08-05 08:38:22 you could easily get a list of all unresolved sec issues 2015-08-05 08:38:45 so to avoid make it easy to make automated attacks it was closed - on request 2015-08-05 08:38:57 til issue is fixed 2015-08-05 08:39:58 okay. makes sense. 2015-08-05 10:12:17 hallo habe hier versucht von v 2.7. auf 3.2 wechslen update & upgrade Ergebniss > Error relocating /lib/libcrypto.so.1.0.0: __ctype_b: symbol not found 2015-08-05 10:12:25 was kann ich tun? 2015-08-05 10:13:10 ncopa: you use claws-mail. is there a way to take a git patch and send it via claws-mail? 2015-08-05 10:17:01 manj_user: asking in english will give you better results, because most people here dont speak german 2015-08-05 10:25:39 hello, i want to swicth from v 2.7. to 3.2 with update & upgrade result > Error relocating /lib/libcrypto.so.1.0.0: __ctype_b: symbol not found 2015-08-05 10:25:51 what can i do? 2015-08-05 10:27:00 <_ikke_> manj_user: http://lists.alpinelinux.org/alpine-devel/3370.html 2015-08-05 10:27:15 <_ikke_> install apk-tools-static 2015-08-05 10:27:48 <_ikke_> manj_user: http://wiki.alpinelinux.org/wiki/Upgrading_Alpine#Upgrading_Alpine_v2.x_to_v3.x 2015-08-05 10:30:01 too late. I cant install apk add apk-tools-static > Error relocating /lib/libcrypto.so.1.0.0 ..... 2015-08-05 10:30:17 <_ikke_> manj_user: Then you have to use a live iso 2015-08-05 10:30:32 and then chroot? 2015-08-05 10:30:57 or fresh install 2015-08-05 10:31:02 <_ikke_> chroot 2015-08-05 10:31:10 url? 2015-08-05 10:31:23 <_ikke_> wherefor? 2015-08-05 10:31:49 for chroot repair 2015-08-05 10:35:10 <_ikke_> Just mount the fs, and chroot into it 2015-08-05 10:37:42 ok thank you 2015-08-05 10:38:03 <_ikke_> Perhaps you'd have to mount the special fs's also 2015-08-05 10:40:14 i have found http://wiki.alpinelinux.org/wiki/Chroot 2015-08-05 10:41:05 <_ikke_> yeah, that should work 2015-08-05 10:41:09 <_ikke_> the non arch-chroot version 2015-08-05 10:41:20 <_ikke_> https://wiki.archlinux.org/index.php/Change_root 2015-08-05 10:41:51 <_ikke_> your version is better of course 2015-08-05 10:42:28 thanks and bye 2015-08-05 11:03:56 leo-unglaub: i normally only use git send-email to send patches 2015-08-05 11:07:59 leo-unglaub: this appears to work: (echo "To: $address"; git format-patch -1 --stdout) | claws-mail --compose-from-file file - 2015-08-05 11:17:45 ncopa: yeah, that is even shorter than my version 2015-08-05 11:17:49 i wrote a temp file 2015-08-05 12:42:31 with windows 10 microsoft introduces the download of updates via P2P 2015-08-05 12:43:12 i think thats a great idea, it safes server bandwith and also resources and that is good for the environment. maybbe this would be a nice idea for alpine as well 2015-08-05 12:43:20 apk with a distributed hash table 2015-08-05 12:43:25 sounds interresting 2015-08-05 12:44:02 also it would improve the availability of the update servers, because there would be thousands of clients on the DHT 2015-08-05 12:44:06 i really like the idea 2015-08-05 14:29:47 leo-unglaub, funny!! I thought you told us to follow Micosoft's idea! hehehe 2015-08-05 14:29:55 ¬¬" 2015-08-05 14:57:26 bandwidth isn't always free so it should be an opt-in feature (metered in parts of the world) 2015-08-05 14:58:47 android and ios apps have already horribly broken compat with metered connections 2015-08-05 14:59:04 they assume metered if they're using _their_own_ gprs/3g/4g 2015-08-05 14:59:24 but assumed unmetered on wifi, even if the wifi is provided by another device's grps/3g/4g... 2015-08-05 14:59:27 gprs* 2015-08-05 15:01:54 of course it should be opt in 2015-08-05 15:02:02 when i am on my laptop i dont want to upload stuff 2015-08-05 15:02:12 but on my computer at home i would not mind at all 2015-08-05 15:11:22 *nod* 2015-08-05 15:17:47 maybe its just me, but i love decentralized system. they are so much more robust and harder to attack :) 2015-08-05 15:25:54 I don't know about that 2015-08-05 15:26:02 you can attack all the clients & send them all spam 2015-08-05 15:26:29 basically create chaos :P 2015-08-05 15:27:54 well, its much harder to attack all clients, than just one central server 2015-08-05 15:28:13 thats why you cannot ddos a torrent :) 2015-08-05 15:28:17 join the swarm with your own swarm :) 2015-08-05 15:30:57 communication would trickle instead of being completely shut down so...you win :) 2015-08-05 15:36:39 any ideas? the instructions here for installing debian wheezy in lxc gave me jessie: http://wiki.alpinelinux.org/wiki/LXC 2015-08-05 15:36:54 SUITE=wheezy was ignored it seems 2015-08-05 15:39:30 <_mjones> Why do you want wheezy? At the risk of stating the obvious, wheezy is 7.x and jesse is 8.x. 2015-08-05 15:39:38 right 2015-08-05 15:40:26 because i just need something simple glibc-based for some testing, it doesn't matter if it's old (in fact old is more likely to be compatible with the stuff i need), and i don't want systemd puking all over the place and breaking stuff :) 2015-08-05 15:41:12 <_mjones> oh, right. systemd. 2015-08-05 15:41:26 i have jessie without systemd in openvz 2015-08-05 15:41:32 & in lxc 2015-08-05 15:41:59 in lxc just dist-upgrade an unprivileged container 2015-08-05 15:42:27 i'm sure it could be done 2015-08-05 15:42:33 but i'd rather it just work out of the box 2015-08-05 15:43:03 any idea why lxc-create isn't using the version i asked for? 2015-08-05 15:43:33 http://it-offshore.co.uk/linux/alpine-linux/32-lxc-in-alpine-linux-with-other-distro-guests 2015-08-05 15:43:43 use the download template 2015-08-05 15:44:39 i don't use grsec kernel 2015-08-05 15:44:55 doesn't matter 2015-08-05 15:45:47 let me grab the list of images 2015-08-05 15:47:19 http://hastebin.com/zemisipeku.rb - squeeze wheezy jessie sid 2015-08-05 15:47:44 I didn't try jessie - I just dist-upgrade wheezy & it has sysvinit 2015-08-05 15:48:44 <_mjones> if you dist-upgrade it should keep sysvinit. 2015-08-05 15:48:59 <_mjones> not sure if systemd is installed-but-disabled. 2015-08-05 15:49:05 http://hastebin.com/esamitudug.hs 2015-08-05 15:49:14 no systemd on my jessie lxc 2015-08-05 15:49:34 i have no use for upgrading to jessie anyway 2015-08-05 15:50:54 i also worked out how to have jessie in openvz without systemd http://it-offshore.co.uk/linux/debian/56-upgrading-debian-wheezy-to-jessie-without-systemd - bit more hassle than lxc 2015-08-05 15:51:46 I think the wheezy unprivileged container just dist upgraded without any extra commands 2015-08-05 15:52:56 it would really be nice to know "here's why it failed" rather than "here's another completely different way you can try" ... 2015-08-05 15:53:47 it failed because by default the wheezy ovz image has upstart 2015-08-05 15:55:22 the default squeeze ovz has sysvinit - so this can be upgraded to jessie & still retain sysvinit 2015-08-05 15:57:04 the lxc wheezy unpriv image has sysvinit too - so that is upgradable to jessie still with sysvinit 2015-08-05 16:02:07 huh? 2015-08-05 16:02:23 the login prompt said "Debian 8" 2015-08-05 16:02:30 and upstart was never in debian 2015-08-05 16:03:30 btw bitl0g1c it-offshore's favicon is evil evil evil 2015-08-05 16:03:35 see firefox bug 111373 2015-08-05 16:05:56 https://packages.debian.org/jessie/init - look at the depends - upstart 2015-08-05 16:06:19 or sysvinit or systemd-sv 2015-08-05 16:07:10 also in wheezy https://packages.debian.org/wheezy/upstart 2015-08-05 16:08:51 the jessie unprivileged lxc image doesn't seem to work - wheezy upgraded to jessie with sysvinit is fine 2015-08-05 16:10:53 anyway it still doesn't answer the question 2015-08-05 16:15:37 if you didn't lxc-create -n xxx -t debian -r wheezy - you will get jessie 2015-08-05 16:15:59 ok 2015-08-05 16:16:10 so the wiki is just outdated and has the wrong way to request a version 2015-08-05 16:16:26 looks that way 2015-08-05 16:16:43 need to specify -r for release 2015-08-05 16:17:04 eh? -r does not accept an argument 2015-08-05 16:17:23 are you sure you got the right option? 2015-08-05 16:17:46 hmm weird 2015-08-05 16:17:54 it's documented inconsistently in 2 places, and not working 2015-08-05 16:17:54 maybe this is only with the download template 2015-08-05 16:18:09 with that you can choose the release 2015-08-05 16:18:33 & don't have to fiddle with any grsecurity settings 2015-08-05 16:18:40 ah need -- before the -r 2015-08-05 16:18:46 so that it gets passed to the template 2015-08-05 16:20:17 the download method also caches the image 2015-08-05 16:26:01 the jessie unpriv image looks like it has systemd 2015-08-05 16:26:10 Is there anyway to have a declarative system config defined? 2015-08-05 16:26:49 e.g. w/NixOs you can configure your system in one file & then use the installer to create/configure the system 2015-08-05 16:39:56 jessie unpriv lxc image works once you remove systemd 2015-08-05 16:44:13 <_mjones> delcici: there's no inherent capability, although something equivalent to the old ubuntu-vm-builder would do the job. Or setup, asyou say. 2015-08-05 16:56:47 haha what do you know. using wheezy instead of jessie made the bug i was experiencing go away 2015-08-05 16:57:20 somehow inside lxc, systemd started getties on both tty1 and pts/0 that were fighting for input inside lxc-console 2015-08-05 16:57:24 and i couldn't login on either 2015-08-05 17:14:06 yes - removing systemd from jessie lxc fixes the bug 2015-08-05 17:14:37 https://github.com/lxc/lxc/issues/520 2015-08-05 17:39:33 BitL0G1c: have you gotten unprivileged LXCs running on Alpine? 2015-08-05 17:40:37 no not yet - only on centos 2015-08-05 17:41:00 I've got a firewall running with net_admin caps dropped 2015-08-05 17:41:05 in alpine 2015-08-05 17:44:19 see http://hastebin.com/ejetowukit.avrasm - most caps dropped that can do any damage 2015-08-05 17:51:21 systmkor - I also have iptables logging working inside containers http://it-offshore.co.uk/linux/alpine-linux/55-alpine-linux-lxc-guest-iptables-logging 2015-08-05 17:52:59 BitL0G1c: okay cool I'll take a look at that after work today 2015-08-05 17:53:01 thnx 2015-08-05 19:19:53 Hey guys 2015-08-05 19:25:00 <_mjones> Why do you think we're all guys? 2015-08-05 19:26:25 I'm a sea slug 2015-08-05 19:27:02 some sea slugs as you know don't have a particular gender 2015-08-05 19:47:18 delcici: they are also in general heavily biased toward proprietary software, so I would call it a valid assumtion not to suspect any around here 2015-08-05 19:53:10 but here I am, stealing your internets from your underwater cables 2015-08-05 19:53:30 and wanting to run Nix on Alpine 2015-08-05 21:03:56 So I recently upgraded a v3.0.x system to v3.2, which went swimmingly until I had to reboot. Apparently I no longer have a /boot/grsec.gz (which my initrd= is set to); there are a few options such as {config,initramfs,modloop}-grsec and grsec (the kernel presumably) itself. 2015-08-05 21:04:29 I tried initramfs=/boot/initramfs-grsec but that was a no-go, so I figured I should ask. 2015-08-05 21:04:48 I'll note that the Creating_a_Bootable_USB wiki page still references a /boot/grsec.gz 2015-08-05 21:05:41 I ran `setup-bootable -u /media/usb' when I was upgrading, which replaced my /boot files. 2015-08-05 21:07:27 Alright, it's as simple as 'initrd=/boot/initramfs-grsec', good. 2015-08-05 21:07:41 I'm going to edit the wiki to reflect this. 2015-08-05 21:07:52 Welp, no, I guess it's not that simple as it can't find /sbin/init 2015-08-05 21:08:24 I got as far as decrypting my apkovl though. 2015-08-05 21:08:27 That's new. 2015-08-05 21:36:56 Yeah, I don't have a an 'sbin' in sysroot. 2015-08-05 21:37:00 Not sure why. 2015-08-05 21:37:04 an* 2015-08-05 21:37:23 Still trying to figure out where sysroot comes from, it's not in the extracted initramfs so far. 2015-08-05 21:37:33 Nor is it on a fresh 'disk' install I did in a VM. 2015-08-05 21:38:51 I guess busybox --install -s populates it? 2015-08-05 21:55:00 So if I don't try to restore an apkovl it boots just fine into 3.2 / 3.18.18-2-grsec 2015-08-05 21:55:11 But if I do try to restore one it munches /something/ to the point of failure. 2015-08-05 22:36:02 I couldn't really ever find the actual cause, but running setup-alpine (diskless), lbu ci'ing with a new hostname, rebooting, then removing the new apkovl and putting the old ones in place was sufficient to get it working again. 2015-08-05 22:36:10 I have really no idea what happened unfortunately. 2015-08-05 22:36:17 But it works. 2015-08-05 22:36:39 I did a full apk upgrade --available after I got my old system running again just to be sure. 2015-08-05 22:36:48 Since at least one package was missing. 2015-08-05 23:09:38 Well, samba seems to be broken. 2015-08-05 23:09:50 smbpasswd nor pdbedit seem to exist. 2015-08-05 23:09:56 So I can't change/figure out what my user password is. 2015-08-05 23:10:05 I could have sworn one of them existed previously. 2015-08-05 23:10:20 I can't figure out how to get apk to give a list of files installed by a particular package either. 2015-08-06 02:19:18 shardz_: if the package is already installed -> apk info -L package 2015-08-06 03:36:19 hmm ncopa, still haven't gotten this fwmark stuff to work 2015-08-06 03:36:37 i updated my post https://superuser.com/questions/950031 with the latest thing ive tried 2015-08-06 03:36:52 under # -------- Start Section I'm Unsure about ------- 2015-08-06 03:37:23 someone said i needed to j CONNMARK --restore-mark on the incoming interface 2015-08-06 03:37:25 so i did that 2015-08-06 03:37:40 i then set the mark coming out -j CONNMARK --set-mark 0x2 2015-08-06 03:37:59 and then restore the mark on established connections 2015-08-06 03:38:04 but it doesn't seem to help :( 2015-08-06 03:40:14 interesting, they used SNAT here 2015-08-06 03:40:16 https://unix.stackexchange.com/questions/87990/linux-as-router-with-multiple-internet-providers 2015-08-06 05:35:45 pnutzh4x0r: Thanks. 2015-08-06 05:35:57 I think I'm going to just do a wipe and reinstall because something is a bit weird. 2015-08-06 05:36:06 I had this nonsense with Samba on Arch about two years ago. 2015-08-06 05:36:13 Nothing logged, no reason for auth failures. 2015-08-06 05:36:19 So hopefully it magicks itself away. 2015-08-06 05:36:32 samba-tool was spitting some python errors. 2015-08-06 07:51:55 On a bare diskless install, 'blkid -U' will return nothing while 'findfs UUID=' works fine. 2015-08-06 07:52:19 This makes the dmcrypt init script not work with UUIDs; I made a patch but I noticed on a full 'sys' install blkid -U works fine. 2015-08-06 07:52:47 So perhaps it's unnecessary and there's a missing dependency for blkid -U to work, and instead it should be a dep of the cryptsetup aport? 2015-08-06 07:54:35 The patch is two lines: http://sprunge.us/XVSf 2015-08-06 11:16:45 shardz_: nice! 2015-08-06 11:17:11 shardz_: can you please: git format-patch --stdout -1 | sprunge 2015-08-06 11:17:14 so i can git am it 2015-08-06 11:17:21 also 2015-08-06 11:17:28 bump pkgrel in APKBUILD 2015-08-06 11:17:32 and do abuild checksum 2015-08-06 11:17:52 actually, i can do it 2015-08-06 11:19:20 shardz_: http://tpaste.us/2Lvl ok? 2015-08-06 16:02:25 ncopa: Sorry I fell asleep. I was going to do the to-mailing list procedure but that is totally fine with me. :) 2015-08-06 16:02:32 Insomnia followed by a hard crash. 2015-08-06 16:02:59 Only cared about the functionality for the asking part. 2015-08-06 16:03:07 But, ACK. 2015-08-06 16:41:06 ncopa: Also there's a note about dropping the dm_crypt_execute_localmount() hook in dmcrypt.init; I support this, I make a conf.d/dmcrypt entry for dmcrypt AND a fstab entry; so long as localmount comes after dmcrypt (which is not directly ensured, but I think localmount must come before fsck and dmcrypt must precede fsck) there's no issue. 2015-08-06 16:41:47 That's how it works now and it's commented out, but those are my thoughts on it. 2015-08-06 16:45:42 ncopa: You can't execute the main mkinitfs command / run the Makefile without `acct': http://sprunge.us/TTcE 2015-08-06 16:46:08 I think you can run mkinitfs -L with it but since this isn't Arch I assume you're not trying to ship half-working packages without a note. 2015-08-06 16:46:14 without it* 2015-08-06 16:46:23 (That's another patch.) 2015-08-06 16:48:22 The cryptsetup upstream url (as in url=, not source=) has changed; does this warrant another pkgrel++ or should I leave it as is? 2015-08-06 16:53:40 Also the wiki captcha has defeated me eight times: do you count digits from the left or the right, and do I enter them as text or as numbers? Apparently the answer is: "no". 2015-08-06 20:47:35 What's the difference between the ISOs? 2015-08-06 20:51:36 It feels like a FAQ that I'm failing to find, they seem self-explanatory except the difference between mini and vanilla. 2015-08-06 20:56:36 <_mjones> regular is pax+grsec kernel. Vanilla is kernel without those hardening measures. 2015-08-06 20:57:16 Oh, and mini? 2015-08-06 20:57:20 <_mjones> Mini has fewer packages so you need to install more from online repos. If you don't want to conserve bandwidth and aren't installing a lot, there's no reason not to use mini. 2015-08-06 20:57:38 So mini includes grsec? 2015-08-06 20:57:57 <_mjones> It needs a blurb right above the links. It's one of those things we don't notice because we already know, you know? 2015-08-06 20:58:13 Yep, thanks. 2015-08-06 20:58:20 <_mjones> Yeah, mini has grsec. 2015-08-07 00:05:00 Hey guys 2015-08-07 00:05:06 Maybe someone could help me with abuild 2015-08-07 00:05:28 On alpine 3.2.0 it seems like abuild undeps doesnt actually do anything 2015-08-07 00:06:06 I got an APKBUILD file with some makedepends packages, but they don't get removed 2015-08-07 00:06:37 <_mjones> what's the command line? 2015-08-07 00:07:13 abuild undeps 2015-08-07 00:07:14 That's all 2015-08-07 00:07:33 It seems like it tries to call undeps() from my APKBUILD, should I write my own function to actually loop through the deps and remove them ? 2015-08-07 00:07:47 <_mjones> no 2015-08-07 00:07:48 As they're installed automatically I thought they'd get cleaned automatically as well 2015-08-07 00:07:59 <_mjones> uh, try 'abuild -rk' 2015-08-07 00:08:28 But this will do a full build cycle right? 2015-08-07 00:08:32 <_mjones> They do get cleaned automatically. I've never used undeps on the command-line. 2015-08-07 00:08:45 <_mjones> Do -rk in the directory o fthe thing you want to build 2015-08-07 00:08:53 I just did 'abuild -r' to check if my package would build correctly, and it did 2015-08-07 00:08:55 I got my apk 2015-08-07 00:09:21 Oh nvm, I know what I did wrong 2015-08-07 00:09:28 I guess the packages are staying from a previous manual build 2015-08-07 00:09:31 Where I installed them using "apk add" 2015-08-07 04:03:01 http://www.networkworld.com/article/2965913/new-malware-turns-your-computer-into-a-cellular-antenna.html , maybe roll nfs, ssh and wifi into one 2015-08-07 04:08:06 <_mjones> Defcon must be this week. 2015-08-07 04:11:44 :) 2015-08-07 10:54:57 Hi ! 2015-08-08 01:09:31 I build my initramfs with 'bootchart' as one of the features=, but when I add 'chart' to my append line to boot I end up getting errors about '/sbin/bootchartd' not existing (in the initramfs system) and then when the real root gets mounted it complains about /bootchart and whatnot not existing, so it can't rm it. 2015-08-08 01:09:39 Not sure why that is. 2015-08-08 01:17:14 Extracting the initramfs reveals bootchart indeed is not added. 2015-08-08 01:17:26 I'll look at mkinitfs a bit later to see why, but perhaps someone knows? 2015-08-08 07:54:47 Does apk provide a way to pull packages like apt-get source? 2015-08-08 15:50:39 <_mjones> envygeeks: you mean pull source packages? No. But to get similar functionality you can pull the aports tree with git, which contains all of the build recipes, and execute them yourself. 2015-08-08 15:51:15 <_mjones> It's very similar to Arch PKGBUILD, if you know that. 2015-08-08 20:20:47 eccalla, il solito impiccione 2015-08-08 20:20:49 :P 2015-08-09 08:43:29 we don't seem to have the hping package do we 2015-08-09 08:43:34 ie to do tcp pings 2015-08-09 08:43:55 or do we use something else these days 2015-08-09 08:44:35 i did notice fping in there, but i don't think that does it 2015-08-09 08:47:02 http://www.hping.org/ 2015-08-09 15:59:11 <_mjones> I do quite a bit of tcptraceroute but for 'tcp ping' I would normally use netcat or socat. 2015-08-09 17:35:40 anybody seen this before? http://pics.deadface.org/2015-08-10-011811_1024x768_scrot.png firefox has no text in it, except for the actual webpage itself 2015-08-09 17:35:56 other apps work fine such as thunar, gnumeric, evince, abiword, audacious, ... 2015-08-09 17:55:42 qman__: http://bugs.alpinelinux.org/issues/4248 2015-08-09 17:56:15 thanks 2015-08-09 18:30:03 is there no tor package for alpine? 2015-08-09 18:30:25 no, there is a tor package 2015-08-09 18:30:39 http://pkgs.alpinelinux.org/package/testing/x86_64/tor 2015-08-09 18:30:50 hm do mirrors disagree about the packages they track sometimes? 2015-08-09 18:31:07 what mirror do you use? 2015-08-09 18:31:17 and what error do you get when you try to install that package? 2015-08-09 18:31:28 2f30 2015-08-09 18:31:45 ERROR: unsatisfiable constraints: tor (missing): required by: world[tor] 2015-08-09 18:32:17 which alpine version do you use? 2015-08-09 18:33:05 3.2 2015-08-09 18:33:52 ohi vrs!!! 2015-08-09 18:34:06 plJwXq5XZYFC: :) 2015-08-09 18:34:06 you need to add testing to your /etc/apk/repos 2015-08-09 18:34:10 ahh 2015-08-09 18:34:16 vrs: the tor package is currently in testing only 2015-08-09 18:34:49 If I am not misstaken you should only use testing on an edge system 2015-08-09 18:34:56 nah 2015-08-09 18:35:08 testing is for those packages, noone has said it works for me 2015-08-09 18:35:15 (besides the packager) 2015-08-09 18:35:38 coming from debian it sounds like a bad idea to me to mix a version and edge 2015-08-09 18:35:52 i think many of us here run edge 2015-08-09 18:37:26 btw if anybody is running bhyve, I figured out the params for running alpine there 2015-08-09 18:37:45 testing is the repo where "oh, we checked in a broken build? \(ツ)/" 2015-08-09 18:38:09 aah, my kinda stuff :) 2015-08-09 18:39:09 http://pastie.org/10320988 for the record 2015-08-09 18:39:22 it was mostly #bhyve that was interested but there may be some other users in here 2015-08-09 18:39:54 I'm p comfortable using things like e.g. runit from testing 2015-08-09 18:43:42 since firefox can't seem to display text, are there any other web browsers in main? 2015-08-09 18:45:32 <_mjones> The conventional wisdom is to run edge if you're running testing repo. And a lot of us do run edge. 2015-08-09 18:48:49 qman__: chromium, midori, lynx, elinks, … 2015-08-09 18:49:12 chromium's not in main, I'll check for midori 2015-08-09 18:49:38 midori's there, I'll give that a shot 2015-08-09 18:49:52 thanks 2015-08-09 18:51:23 chromium should be in main http://git.alpinelinux.org/cgit/aports/tree/main/chromium (at least on edge) 2015-08-09 18:55:38 it's in stable 2015-08-09 18:56:55 http://pkgs.alpinelinux.org/package/main/x86_64/godep huh, what's with the version here 2015-08-09 19:00:21 I'm running 3.2.2, x86 2015-08-09 19:00:54 I notice chromium is 64-bit only which is fine, but I'm seeing a newer firefox on the package search there than what my system can find 2015-08-09 19:01:50 so either that's mixed with edge or something else is wrong 2015-08-09 19:02:47 oh, nevermind, that's testing 2015-08-09 19:04:41 and I would be running 64-bit if the hardware supported it, it doesn't, it's an old laptop 2015-08-10 05:37:36 hmmm 2015-08-10 05:38:02 so I installed my RTC clock 2015-08-10 05:38:15 http://www.piface.org.uk/products/piface_clock/ 2015-08-10 05:38:45 and the two modules it needed were i2c_dev 2015-08-10 05:39:01 and i2c_bcm2708 2015-08-10 05:39:34 problem however seems to be /dev/misc/rtc doesn't exisy 2015-08-10 05:40:45 the manual said something about i2c-tools being installed 2015-08-10 05:40:58 but we don't have that package in alpine Linux it seems 2015-08-10 05:41:33 apparently you need it to detect if the i2c device is detected by the pi 2015-08-10 05:57:49 hmm 2015-08-10 05:57:50 2) edit /boot/config.txt 2015-08-10 05:57:52 2015-08-10 05:57:52 dtparam=i2c1=on (here one means B+, i.e., ver. 2 using bus 1) 2015-08-10 05:57:53 dtparam=i2c_arm=on 2015-08-10 05:58:01 I wonder if that's the problem 2015-08-10 06:10:48 add to /etc/rc.local (before the line exit 0) 2015-08-10 06:10:49 2015-08-10 06:10:50 echo mcp7941x 0x6f > /sys/class/i2c-adapter/i2c-1/new_device 2015-08-10 06:10:51 ( sleep 2; hwclock -s ) & 2015-08-10 06:10:59 where would one recommend that in alpine linux 2015-08-10 06:11:15 considering we don't have an rc.local 2015-08-10 06:26:06 I think hwclock is looking in the wrong place 2015-08-10 06:38:30 okay so I got it working but the problem seems to be the hwclock init script is running before local 2015-08-10 07:04:56 so now im not on my phone 2015-08-10 07:05:06 the problem seems to be I need 2015-08-10 07:05:08 echo mcp7941x 0x6f > /sys/class/i2c-adapter/i2c-1/new_device 2015-08-10 07:05:15 to run before /etc/init.d/hwclock starts 2015-08-10 07:05:55 and even with /etc/init.d/hwclock in boot run level and /etc/local.d/add_rtc_device.start (run by /etc/init.d/local) in boot 2015-08-10 07:06:12 the device still is added after /etc/init.d/hwclock tries to run 2015-08-10 07:06:52 im not sure, maybe i can get the bootloader to do it somehow? 2015-08-10 07:07:12 could i somehow put it in /media/mmcblk0p1/config.txt 2015-08-10 07:39:44 mmm ntftables really does look exciting 2015-08-10 07:39:50 *nftables 2015-08-10 07:39:55 https://home.regit.org/2014/01/why-you-will-love-nftables/ 2015-08-10 07:40:14 https://wiki.archlinux.org/index.php/Nftables#Simple_IP.2FIPv6_Firewall reminds me of pf 2015-08-10 08:33:08 oops did i miss anything 2015-08-10 10:47:57 can we file bugs for making packages 2015-08-10 10:49:49 <_ikke_> 0sure 2015-08-10 10:50:32 we really need a package for https://packages.gentoo.org/package/sys-apps/i2c-tools 2015-08-10 10:50:53 it's pretty much the go-to tool to check if you're GPIO pins are detecting the device you plugged into them 2015-08-10 10:51:10 and a lot of raspberry pi guides for debian based distributions refer to "apt-get install i2c-tools" 2015-08-10 10:52:23 what is interesting is we do have http://pkgs.alpinelinux.org/package/main/x86_64/lm_sensors 2015-08-10 10:53:05 https://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/sys-apps/i2c-tools/i2c-tools-3.1.1-r1.ebuild seems to be the only dependency 2015-08-10 12:03:55 sillysausage you can create a bug report as package request, 2015-08-10 12:04:35 i have done so http://bugs.alpinelinux.org/issues/4519 2015-08-10 12:06:13 then soneone will for sure check it. or you can try yourself to create an APKGBUILD 2015-08-10 12:06:34 yeah i haven't got a system to do that on at the moment 2015-08-10 12:06:42 otherwise i would have 2015-08-10 12:07:45 its somehow hard to create packages if there is noone to test it realy. 2015-08-10 12:26:18 wow the i2c-tools ticket was already fixed :) 2015-08-10 13:05:26 ncopa: :P 2015-08-10 13:05:32 also i noticed a bug which affects us 2015-08-10 13:05:35 https://github.com/raspberrypi/linux/issues/1032 2015-08-10 13:05:48 fix is already committed, but we dont have that yet 2015-08-10 13:06:06 basically initalizing the rtc clock 2015-08-10 13:06:35 i kind of did this hackjob http://wiki.alpinelinux.org/wiki/Saving_time_with_Hardware_Clock#.2Fetc.2Fconf.d.2Fhwclock which works 2015-08-10 13:15:16 i should probably file a bug to change http://wiki.alpinelinux.org/wiki/Saving_time_with_Hardware_Clock#Binding_the_hardware_clock_device 2015-08-10 13:15:24 when downstream gets the patch mentioned there 2015-08-10 13:15:41 ncopa: who should i assign it to? 2015-08-10 13:16:02 just so we remember to take out the ugly hack when we get the fix from upstream 2015-08-10 13:21:23 lol ncopa i thought you were the one that solved 4519 turns out it was someone else ;) 2015-08-10 13:21:43 thankyou rnalrd 2015-08-10 13:23:23 ncopa: do we have a bug that we can assign bugs to on release 2015-08-10 13:23:42 for example next release of alpinelinux that will have next RP bootloader firmware 2015-08-10 13:23:55 filing documentation change against that 2015-08-10 13:24:20 you mean a target for an issue? 2015-08-10 13:24:26 yw 2015-08-10 13:27:26 yeah 2015-08-10 13:27:43 except im trying to figure out what file they modified in https://github.com/raspberrypi/linux/issues/1032 2015-08-10 13:27:50 it's a fix that has been committed to HEAD 2015-08-10 13:27:53 so no release 2015-08-10 13:28:09 it isn't urgent, but i want to remind us to fix the wiki article (remove the hackjob) 2015-08-10 13:28:26 because it will probably be some months before we get the fix (next release) 2015-08-10 13:28:49 i don't know what version of alpine linux it will be 2015-08-10 13:36:49 @M-Reimer I've pushed an update to the overlay source that adds the "mcp7941x" parameter, so you will be able to use dtparam=i2c-rtc,mcp7941x after the next firmware build. I don't have one to verify that it functions correctly, but it looks like it should. 2015-08-10 14:34:24 it's nice to see we have someone actively maintaining the i3 packages with love 2015-08-10 14:34:37 2015-08-10 15:57:23 i am running a small bind installation with ca 150 zonefiles. now i am looking for something smaller 2015-08-10 15:57:28 any ideas? any experiences? 2015-08-10 16:04:54 leo-unglaub: My openwrt router runs dnsmasq it gets the job done, but I've only got two zones and I don't ask anything special of it. 2015-08-10 16:05:12 Missed some punctuation there but you get the idea. 2015-08-10 16:05:31 shardz_: yes, i do. thanks 2015-08-10 16:05:36 i will habe a look at it 2015-08-11 04:34:31 thunderbird, huh 2015-08-11 08:19:26 boah do i hate makefiles 2015-08-11 08:20:09 setting up the build infrastructure is more complicated than writing the actual project 2015-08-11 10:15:52 ncopa: so i got it working mostly 2015-08-11 10:16:16 i was having a problem however when the VPN link goes down, it falls over to ISP 2015-08-11 10:16:38 which is bad i want to avoid that 2015-08-11 10:16:49 https://dpaste.de/CspH are my current rules 2015-08-11 10:41:27 problem seems to be when the vpn goes down the route is removed, which causes it to fallover to the main table https://dpaste.de/2bxP 2015-08-11 11:11:43 sillysau1: on line 96 you explicitly say thaty this kind of traffic is allowed 2015-08-11 11:11:46 https://dpaste.de/CspH#L96 2015-08-11 11:12:01 sorry 2015-08-11 11:12:05 thats wrong 2015-08-11 11:12:18 i think i figured out partly what is the problem 2015-08-11 11:12:27 https://dpaste.de/2bxP 2015-08-11 11:12:37 basically i am re-arranging my rules 2015-08-11 11:12:45 so that i have say ISP related rules at 100 priority 2015-08-11 11:12:49 VPN rules at 200 2015-08-11 11:12:53 and a black hole rule at 500 2015-08-11 11:13:01 that way when the VPN comes down it wont fall back to the main route 2015-08-11 11:13:09 ie 32766 2015-08-11 11:14:28 ncopa: yes but that rule on line 96 2015-08-11 11:14:30 -A FWD_ETH0 -s 192.168.2.0/24 -d 203.2.134.1/32 -o ppp0 -j ACCEPT 2015-08-11 11:14:38 is only for the VOIP server when tthe source is 192.168.2.0/24 2015-08-11 11:15:07 i saw that afterwards 2015-08-11 11:15:15 and this does not work? # -A IN_ETH0 -s 192.168.2.0/24 -o ppp0 -j REJECT --reject-with icmp-port-unreachable 2015-08-11 11:15:19 its commented out 2015-08-11 11:16:05 yeah i commented it out because it didn't work 2015-08-11 11:16:11 but i think it didn't work for a different reason 2015-08-11 11:16:18 also 2015-08-11 11:16:22 if i did use a rule like that 2015-08-11 11:16:36 it would prevent one ie host 192.168.2.20 from accessing the VOIP server directly 2015-08-11 11:16:45 i think it's to do with the routing 2015-08-11 11:16:59 falling back to main because when the VPN goes down, the default route on the VPN and main table are deleted. 2015-08-11 11:17:24 basically the sshort of it was. 2015-08-11 11:17:42 i was tryign to write it so exceptions such as the VOIP server could be marked as 0x1 when a host like 192.168.2.20 tries to access it. 2015-08-11 11:18:04 but at the same time if the actual VPN goes down, any other traffic coming from 192.168.2.20 would *not* be routed out the ppp0 interface. 2015-08-11 11:18:40 so in other words 192.168.2.0/24 hosts would lose internet access unless it is an excepted server (like the VOIP server) 2015-08-11 11:18:58 192.168.1.0/24 hosts would be business as usual. 2015-08-11 11:24:58 sorry did i miss anything 2015-08-11 11:55:27 has someone of you a bash-completion script for apk? 2015-08-11 12:27:23 hi, here is xen 4.5.1 runnig with hvm. When i logout from windows7 there is no vnc connection more. xl list > w7 17 2048 2 ------ 25.1 no state! 2015-08-11 12:27:44 domu is hvm 2015-08-11 12:30:11 alpine-xen 3.2.2 2015-08-11 13:23:03 ncopa: figured it out! 2015-08-11 13:23:19 turns out the ip rule prohibit fwmark is what i wanted 2015-08-11 15:51:47 can I install a specific version of a package? 2015-08-11 15:52:15 <_ikke_> ekristen: If you have a repository that has the specific version of the package, then yes 2015-08-11 15:52:23 <_ikke_> (including all dependenies) 2015-08-11 15:52:29 the main repo doesn’t maintain older versions? 2015-08-11 15:52:40 <_ikke_> no 2015-08-11 16:04:01 ekristen: But it is a git repo, so you can roll back to any arbitrary version. 2015-08-11 16:04:05 If you clone it. 2015-08-11 16:09:11 kk 2015-08-11 16:09:12 thanks 2015-08-11 16:09:32 for now I just added v3.0 repo to my instance to get a specific version I needed 2015-08-11 16:24:29 is there a alpine raspi2 package now? i think but i'm not sure any more 2015-08-11 16:24:52 package as in image i guess 2015-08-11 16:25:49 shardz_: the abuilds are a git repo, I don't think the package repos are? 2015-08-11 16:26:06 <_ikke_> darkfader: there should be, yes 2015-08-11 16:27:29 _ikke_: thanks! 2015-08-11 16:34:28 ammunta: That's correct, I figured he wouldn't mind running 'abuild'. 2015-08-11 16:34:36 It's pretty hands-off. 2015-08-11 16:40:05 ncopa: good news, i got it done! 2015-08-11 16:40:14 i shall write about it now on the wiki! 2015-08-11 16:40:48 shardz_: it is, but depending on the thing it does tend to take a long time 2015-08-11 17:55:25 ncopa: all done! 2015-08-11 17:55:38 http://wiki.alpinelinux.org/wiki/Linux_Router_with_VPN_on_a_Raspberry_Pi#VPN_Tunnel_on_specific_subnet 2015-08-11 17:55:46 now with fwmark! 2015-08-11 18:39:09 router with vpn on a raspi? why would you ,_, 2015-08-11 20:44:48 I'm trying to talk to a device over spi on an rpi2. how can I turn on the spi_dev module? It doesn't show under lsmod or modprobe. 2015-08-12 01:32:45 Is there a plan to introduce grub into the standard packages? 2015-08-12 01:32:52 I can't seem to find in the repo 2015-08-12 01:33:52 I'm incharge of nothing, but I doubt it. 2015-08-12 01:34:09 Does sys/extlinux not satisfy your needs? 2015-08-12 01:34:42 no, since I'd like to boot off an encrypted lvm partition 2015-08-12 01:34:59 and IIRC grub can manage that 2015-08-12 01:35:29 dm-crypt/luks 2015-08-12 01:36:21 I've spent the evening trying to get grub & its dependencies to compile 2015-08-12 01:36:37 and its finally compiling on alpine - woo 2015-08-12 01:37:28 Well, APKBUILD is a pretty easy format, I'd suggest making a package if you've done all that work. 2015-08-12 01:37:41 its more like my free time but yea =] 2015-08-12 01:41:29 it successfully compiled! 2015-08-12 01:42:00 notes on compilation if anyone is curious - https://gist.github.com/joncfoo/9181cdac0adc4f5459ae 2015-08-12 01:44:17 neocities.org 2015-08-12 01:49:48 I put the patch on there for my own use 2015-08-12 01:50:02 I listed the original source in the next line 2015-08-12 03:20:34 when doing `lvm version` from inside a chroot I get: device-mapper: version ioctl on failed: Permission denied 2015-08-12 03:20:42 I'm assuming this is somewhat related to grsec? 2015-08-12 03:21:02 if so is there a way to turn this off temporarily in the chroot 2015-08-12 03:51:54 icicled: to fidn out if grsec related, look at dmesg 2015-08-12 03:52:02 safest way to not miss grsec issues 2015-08-12 03:53:38 grsec is relatively easy to disable but I found (at least on a non-alpine system), things that pax was squishing were not recoverable. 2015-08-12 03:54:07 hmm, has anyone used ipset in alpinelinux 2015-08-12 03:54:48 im getting errors when i start the ipset init script 2015-08-12 03:55:14 darkfader, thanks, I figured it out 2015-08-12 03:55:17 that was the case 2015-08-12 03:55:31 this fixed it: echo 0 > /proc/sys/kernel/grsecurity/chroot_caps 2015-08-12 03:55:41 i'm trying to import https://files.pfsense.org/lists/fullbogons-ipv4.txt' 2015-08-12 03:56:20 and it seems when i go ipset list they show correctly in there 2015-08-12 03:56:28 I'll write up a full post of my grub adventure on alpine when this is all over (considering I've documented all the steps thus far it would seem like a waste not to) 2015-08-12 03:56:43 but to save it don't i go ipset save > /etc/ipset.d/fullbogons-ipv4 2015-08-12 03:58:59 am i using ipset save wrong? https://dpaste.de/AhcU 2015-08-12 03:59:30 i was looking at this https://wiki.archlinux.org/index.php/Ipset 2015-08-12 04:03:50 oh maybe the problem was i wasn't invoking save 2015-08-12 04:03:53 like /etc/init.d/ipset save 2015-08-12 08:08:56 just pushed alpha, but working version of newsbeuter reader 2015-08-12 08:09:04 https://github.com/insteps/nbreader 2015-08-12 08:54:33 hello! 2015-08-12 11:08:25 hey :) 2015-08-12 11:33:29 boah, apple pisses me of so much, i am currently working with swift. you cannot have the file /src/main.swift and /src/dataprovider/main.swift. Because file names have to be unique over the entire project 2015-08-12 11:33:34 what the actual fuck???? 2015-08-12 14:14:55 leo-unglaub: there's also uh, "why does swift exist" 2015-08-12 14:18:30 hello, I couldn't find any docs on how to install the Generic ARM (alpine-uboot-3.2.2-armhf.tar.gz) release 2015-08-12 14:19:40 I'm trying to boot on a Cubieboard2 (Allwinner A20 ARM Cortex A7 Dual Core) 2015-08-12 21:00:38 search functionality is missing on the forums? 2015-08-12 21:38:54 hoi 2015-08-13 02:51:23 Is there no way to get abuild to spit out actual data that is being sent to stdout? "failed to build package" is so broad it's entirely impossible to debug 2015-08-13 12:01:33 hmm, maybe you guys can help me. i have the task of counting how much websites out there use a speciffic content management system 2015-08-13 12:01:50 any idea how i could do that without running my own crawler for the next 10 years 2015-08-13 12:01:52 ? 2015-08-13 12:04:39 leo-unglaub, maybe use google and his powerful functions? 2015-08-13 12:05:15 fcolista: i tryed that but as far as i can tell i can just look for content on a speciffic site, not a meta tag 2015-08-13 12:05:21 or did i miss something? 2015-08-13 12:35:39 leo-unglaub: you could crawl and look at percentages? 2015-08-13 12:40:07 if you are looking for a specific string on a homepage, you don't need to crawl in any depth 2015-08-13 12:40:15 i suppose 2015-08-13 12:47:38 blimey, htdig hasn't been updated since 2004 2015-08-13 13:16:33 ScrumpyJack: hmm, that sounds like a plan 2015-08-13 13:16:51 crawling 100 000 sites and then doing the statistics 2015-08-13 13:26:35 what will you use to crawl? 2015-08-13 13:31:28 ScrumpyJack: i hack something together in c 2015-08-13 13:31:34 propobly link against curl 2015-08-13 13:33:12 hmmm 2015-08-13 13:33:15 or i use lua *g* 2015-08-13 13:33:20 lua is always fun to work with 2015-08-13 13:33:22 hehehe 2015-08-13 13:33:33 and the pattern matching would be very usefull as well 2015-08-13 13:33:57 ambitious stuff. you'll need a domain database if you aren't crawling depth 2015-08-13 13:34:10 i crawl deep 2015-08-13 13:34:21 and extract everything i found in 2015-08-13 14:24:45 morning 2015-08-13 14:33:31 has anyone an idea how i can connect my android device to alpine and traisfair data between the devices? 2015-08-13 14:35:03 ssh could be an option 2015-08-13 14:35:13 using the connectbot application 2015-08-13 14:35:30 otherwise, simply use the USB data transfert 2015-08-13 14:36:18 I just use adb since I cbf dealing with the MTP 2015-08-13 15:16:33 \o/ 2015-08-13 18:44:42 what is the packaging? compatible with debian apt 2015-08-13 19:09:45 bela2: http://wiki.alpinelinux.org/wiki/Alpine_Linux_package_management 2015-08-13 19:09:52 bela2: it is not compatible with apt 2015-08-13 21:21:44 is apk actually fast or is that just the fact that it's not dealing with 10M of package db 2015-08-13 21:54:57 ammunta: both :) 2015-08-14 03:57:10 where do I submit an aport 2015-08-14 04:01:17 https://fiche.greata.uk/2ool it's a p straightfw ag build 2015-08-14 06:10:44 <_ikke_> ammunta: http://bugs.alpinelinux.org 2015-08-14 07:38:33 morning 2015-08-14 08:58:57 ncopa: what was that small caldav server you said you were using (or wanted to use)? 2015-08-14 09:00:14 i think i will try set up owncloud 2015-08-14 09:00:25 but there was somethign called radicale or similar 2015-08-14 09:00:35 http://radicale.org/ 2015-08-14 09:03:13 ah yes, in python 2015-08-14 09:23:41 the alpine for raspi is coming as a tarball... why not a dd'able image? 2015-08-14 09:24:17 i'm probably going to build one in a file image, but such a waste of time :/ 2015-08-14 15:14:20 aww damn i hoped this would make it for 3.2.3 https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23#OpenVPN2.3.8 2015-08-14 15:15:46 sillysausage: could build it yourself 2015-08-14 15:15:58 it doesn't look like a terrible aport 2015-08-14 15:16:05 and its not major 2015-08-14 20:34:39 Hey guys, I'm writing a package for our company, for a docker container, and currently we're using debian. It places files under /usr/local and I'd like to keep the same directory structure for now 2015-08-14 20:34:49 When I build I get a "Packages must not put anything under /srv, /usr/local or /opt" 2015-08-14 20:34:54 Is there anyway to bypass/force that? 2015-08-14 20:58:49 Any abuild pro here? 2015-08-14 23:15:52 Esya_: this is neither a debian nor a gentoo channel 2015-08-14 23:16:05 nmeum You got my question wrong 2015-08-14 23:16:23 In production we use debian, and I'm rewriting it so that it uses an alpine linux docker container 2015-08-14 23:16:26 So that it's much smaller. 2015-08-14 23:16:37 Therefore I'm writing an alpine package for it but would like to keep the same directory structure. That was my question 2015-08-14 23:17:05 But I actually figured out a way to do it, which was to override the postcheck APKBUILD function 2015-08-14 23:17:38 alternativly you could use the FHS compat option I guess 2015-08-14 23:18:02 use the source luke http://git.alpinelinux.org/cgit/abuild/tree/abuild.in#n624 2015-08-14 23:19:33 is that documented 2015-08-14 23:19:44 does abuild have docs 2015-08-14 23:20:47 there is some documentation on the wiki 2015-08-14 23:20:57 so ... no 2015-08-14 23:21:27 ? 2015-08-14 23:21:45 just because the documentation is located in the wiki doesn't make abuild less documented 2015-08-14 23:22:02 that option I mean 2015-08-14 23:22:28 well I might just be bad at searching the wiki but 2015-08-14 23:23:11 I couldn't find the option in the wiki either but it took two seconds to find it in the code 2015-08-14 23:37:58 also oh abuild is just a shell script, huh 2015-08-14 23:56:38 fucking hell mozilla 2015-08-14 23:56:58 "Firefox 42: Release and Beta versions of Firefox will not allow unsigned extensions to be installed, with no override." 2015-08-15 01:08:07 neovim seems great except the part where it's probably not worth trying to ensure a build is fresh and/or stable for more than an hour 2015-08-15 07:03:53 hm iptables delees are only for exact matches? 2015-08-15 07:48:03 ammunta: you mean iptables -D ? 2015-08-15 07:48:11 ammunta: you can also specify a number 2015-08-15 07:48:24 ammunta: as in, iptables -t filter -D 999 2015-08-15 13:46:20 <_ikke_> and iptables -L --line-numbers 2015-08-15 13:50:46 ncopa: perfection http://wiki.alpinelinux.org/wiki/Linux_Router_with_VPN_on_a_Raspberry_Pi 2015-08-15 13:50:48 i think 2015-08-15 18:02:13 evening :) 2015-08-15 18:02:28 ncopa: you here? 2015-08-16 08:39:56 Can someone explain to be how come a package I'm rolling manages to still include dependencies even when I issue 'abuild -d' ? 2015-08-16 09:17:38 Hi all, i'm moving from Debian/Arch Linux LXC service containers to use Alpine, but the standard command `usermod` gnu coreutils is not available default on alpine 2015-08-16 09:18:13 on the wiki there is no page about user management using CLI tools (default install, without the coreutils) 2015-08-16 10:04:05 Waf3lijz3r: I just now gave up on using Alpine for that. But you like pain.. 2015-08-16 10:04:29 ? 2015-08-16 10:04:33 Anyway - "adduser" is there. e.g. "adduser -S -s /bin/ash -h /home/myuser mysuer" would work 2015-08-16 10:05:01 Similarly, I'd expect addgroup to be there. Hunt around and you can work around those things, at least. 2015-08-16 10:05:01 Waf3lijz3r: usermod is not part of busybox, adduser and deluser are available 2015-08-16 10:05:41 in most cases, usermod is equivalent to deluser && adduser 2015-08-16 15:27:55 Waf3lijz3r - usermod is in shadow@testing 2015-08-17 09:19:02 tool seems nice for AL 2015-08-17 09:19:03 http://www.pfq.io/ 2015-08-17 09:19:04 http://blockmon.github.io/blockmon/ 2015-08-17 09:30:18 seems nice, https://github.com/zeux/qgrep 2015-08-17 10:57:08 woo 2015-08-17 10:57:10 https://www.usenix.org/system/files/conference/usenixsecurity15/sec15-paper-di-frederico.pdf 2015-08-17 10:57:54 "In particular, we found that 2015-08-17 10:57:55 the dynamic loader part of the GNU C Standard Library 2015-08-17 10:57:55 (also known as glibc and widely used in GNU/Linux distributions), 2015-08-17 10:57:55 several other Linux implementations such as 2015-08-17 10:57:55 dietlibc, uClibc and newlib (widespread in embedded systems) 2015-08-17 10:57:57 and the OpenBSD and NetBSD implementations are 2015-08-17 10:58:00 vulnerable to Leakless. Another embedded library, musl, 2015-08-17 10:58:02 instead, is not susceptible to our approach since it does not 2015-08-17 10:58:04 support lazy loading" 2015-08-17 10:59:04 btw, in the packages are PIE binaries? 2015-08-17 12:42:19 kocka - I think packages are built with -fPIE where possible to take advantage of address randomization in PaX / grsecurity. qt5 is built with --reduce-relocations which means qt apps can only be built with -fPIC (& not -fPIE) at the moment. I have held back updating bitcoin for this reason until this is resolved in qt5 2015-08-17 13:20:40 thanks 2015-08-17 15:19:03 hmm, http://bugs.alpinelinux.org/issues/4490#note-2 2015-08-17 15:19:08 i do not think it would be as simple as that 2015-08-17 15:19:14 because those things would be compiled against glibc 2015-08-17 15:19:29 or would that work on alpine linux? 2015-08-17 15:21:25 i dunno; does it contain its own glibc? :-p 2015-08-17 15:21:46 also it appears ncopa that nzbget doesn't seem to work with musl maybe? or am i missing a dep not specified in the APKBUILD https://dpaste.de/Z8De 2015-08-17 15:21:49 if so then it should work fine (albeit somewhat resource-heavy) 2015-08-17 15:22:05 i shall check if it does, i didn't think it did 2015-08-17 15:22:37 TBB 5.0 just came out 2015-08-17 15:26:46 nah it doesn't. 2015-08-17 19:38:30 hi 2015-08-17 19:39:02 any updates on this: https://bugs.alpinelinux.org/issues/3609 ? 2015-08-17 19:39:51 I've just treid to boot 3.2.3 and I get the same error with the unexpected "(" 2015-08-17 19:49:14 is there an easy way to mount mtp devices from alpine? 2015-08-17 20:08:42 I've managed to boot it by avoiding any parenthese in the grub config. but the bug itself seems to be unfixed 2015-08-17 21:22:24 is there any plan to provide uefi-compatible medias ? 2015-08-18 07:19:48 hi 2015-08-18 07:20:48 How can I clean up the /etc/apk/world? So that packages, which will be installed anyway because they depend from other packages will be removed? 2015-08-18 07:43:33 How can I get the diff between a file in my memory/on my harddisk against the original file from a package? 2015-08-18 07:44:23 How can I get a file from apkovl? Or in other words: revert? 2015-08-18 07:56:09 takeshix: i thought #3609 was resolved? 2015-08-18 07:56:28 dalias: i think there is some gvfs module for mtp. not sure if it works 2015-08-18 07:57:12 TheLemonMan: I want uefi media for v3.3, but am not sure if we will reach it 2015-08-18 07:57:54 shafire: you can tar -zxf apkovl 2015-08-18 08:00:10 ncopa: thats what the bugreport says, but I encountered the same problem yesterday with 3.2.3 2015-08-18 08:00:43 I was trying to boot it on a freebsd bhyve host 2015-08-18 08:01:21 at the end I got everything running by tweaking some grub options and avoiding most parentheses 2015-08-18 08:02:58 it seems to be somehow related to the initramfs, I'm not sure if this is exlusive for alpine, as this was the first time I've tested alpine 2015-08-18 08:13:03 i think it is exclusive alpine 2015-08-18 08:13:14 i will have a look at it when i get a chance 2015-08-18 08:17:28 it also seemed that the setup-alpine script isn't handling errors very well when there is no internet connection 2015-08-18 08:19:00 is an internet connection mandatory to install the default iso? 2015-08-18 08:19:11 I did a "sys" install 2015-08-18 08:42:53 ncopa, but nothing good uses gvfs :) 2015-08-18 08:43:24 fuse or ftp-like app would be nice... 2015-08-18 08:50:33 dalias: please stop with gvfs 2015-08-18 08:50:42 such a nice idea, but sooo much bloat ... 2015-08-18 08:50:51 i could throw up every time i see it 2015-08-18 08:51:45 right 2015-08-18 08:52:56 I guys 2015-08-18 08:54:04 Hi* 2015-08-18 08:59:16 cd 2015-08-18 08:59:17 clear 2015-08-18 08:59:21 oups :) 2015-08-18 09:02:38 shafire: who types "clear" ? 2015-08-18 09:02:46 me 2015-08-18 09:02:54 CONTROL + L 2015-08-18 09:02:55 ;) 2015-08-18 09:02:56 :D 2015-08-18 09:03:04 I don't want to delete the buffer 2015-08-18 09:03:09 oh this is + K 2015-08-18 09:03:10 :S 2015-08-18 10:10:05 ncopa: u there 2015-08-18 10:11:46 we should probably bump pkgs.alpinelinux.org/package/testing/x86_64/stunnel 2015-08-18 10:11:56 5.01-r0 is the version in the repos 2015-08-18 10:12:04 5.22 is the latest 2015-08-18 10:12:14 what i noticed was 2015-08-18 10:12:15 [.] Compiled with OpenSSL 1.0.1g 7 Apr 2014 2015-08-18 10:12:18 [.] Running with OpenSSL 1.0.2d 9 Jul 2015 2015-08-18 10:12:20 [.] Update OpenSSL shared libraries or rebuild stunnel 2015-08-18 10:13:12 also seems the APKBUILD doesn't add stunnel:stunnel 2015-08-18 10:13:14 * checkpath: owner `stunnel:stunnel' not found 2015-08-18 10:13:27 i guess i should file this as a bug 2015-08-18 10:18:49 hi 2015-08-18 10:19:13 I just noticed that the imagemagick package in alpine 3.2 doesn't seem to support TIFF files 2015-08-18 10:19:26 it does install the tiff package as a dependency, though 2015-08-18 10:20:37 is the lack of TIFF support intentional or is it a bug? 2015-08-18 10:22:33 did you check the bug tracker 2015-08-18 10:22:43 https://bugs.alpinelinux.org if not file a bug 2015-08-18 10:24:49 sillysausage: yep, I'll do that 2015-08-18 10:25:07 damn it won't boot :( 2015-08-18 11:04:38 Julian_E: sounds like a bug 2015-08-18 11:10:57 ncopa: I've just filed it 2015-08-18 11:11:16 thanks 2015-08-18 11:16:48 ncopa, is the -grsec kernel capable of using hibernation ? 2015-08-18 11:16:55 no 2015-08-18 11:17:03 there was a patch for it 2015-08-18 11:17:10 aye 2015-08-18 11:17:13 but when asking around 2015-08-18 11:17:21 spender didnt like it due to it was not safe 2015-08-18 11:17:39 (spender is the grsecurity maintainer upstream) 2015-08-18 11:18:13 so it is possible, but i am not sure it is a good idea to enable it 2015-08-18 11:18:45 gotcha 2015-08-18 11:18:58 ncopa: thanks for the fix, that was fast :-) 2015-08-18 11:19:20 Julian_E: you were lucky, fix is trivial ;) 2015-08-18 11:19:51 i think tiff was pulled in due to some indirect dependency 2015-08-18 11:20:00 cups-libs or similar probably uses tiff 2015-08-18 11:20:14 i'm gonna cherry-pick it for v3.2 too 2015-08-18 11:20:19 i've just filed another bug, it's the same with lcms 2015-08-18 11:20:25 sigh :) 2015-08-18 11:21:03 unfortunately, we need lcms too ;-) 2015-08-18 11:21:07 we want lcms2 right? 2015-08-18 11:21:56 yep 2015-08-18 11:22:43 anything else while at it? 2015-08-18 11:24:30 I don't think so 2015-08-18 11:24:34 https://dpaste.de/LLwm 2015-08-18 11:26:27 LGTM 2015-08-18 12:07:06 ncopa: i filed a bug for that 2015-08-18 12:07:08 http://bugs.alpinelinux.org/issues/4540 2015-08-18 12:07:21 im thinking of expanding my wiki article to include openvpn over stunnel :) 2015-08-18 12:07:39 because openvpn doesn't really work so well in DPI environments 2015-08-18 12:57:09 i think also because it's so old it is technically a security issue too 2015-08-18 12:57:35 ah you fixed it very efficient ncopa 2015-08-18 12:58:28 btw does anyone know if there's any plans to port SELinux to Alpine? 2015-08-18 12:58:53 because given that Alpine is quite often used to virtualize other operating systems, features like sVirtd would be of particular interest 2015-08-18 12:59:05 it's part of the reason I use gentoo hardened for my servers 2015-08-18 13:00:23 no. we will not port selinux to alpine 2015-08-18 13:00:31 http://maciej.lasyk.info/2015/May/13/selinux-svirt-vs-venom-vulnerability/ 2015-08-18 13:00:47 because in the case of venom, it helped to mitigate that before patches were available for KVM 2015-08-18 13:00:57 ncopa: is there any specific reason? 2015-08-18 13:01:08 im guessing it would be a lot of work 2015-08-18 13:03:00 sillysausage, we have grsec by default 2015-08-18 13:03:01 https://grsecurity.net/lsm.php 2015-08-18 13:03:12 ah that's true i guess 2015-08-18 13:03:23 any policies for KVM or do we have to write our own? 2015-08-18 13:05:15 i think you normally run gradm in learning mode 2015-08-18 13:05:25 and then you harden it 2015-08-18 13:05:37 http://judepereira.com/blog/playing-with-grsecurity-a-brief-tutorial/#gradm 2015-08-18 13:05:41 i never used it myself 2015-08-18 13:06:28 fair enough 2015-08-18 13:06:35 i have looked into it previously. 2015-08-18 13:06:46 i guess i shall do so again 2015-08-18 13:07:27 is it possible to recompile a kernel with alpinelinux in a ram disk install 2015-08-18 13:07:37 i assume so and just copy it to the usb stick 2015-08-18 13:07:54 ie /media/usb/boot 2015-08-18 14:03:52 hi, got a question: how do I logout and get back virtual console from awesome wm? I've posted some info here http://forum.alpinelinux.org/forum/general-discussion/how-logout-awesome-wm thanks 2015-08-18 14:18:21 <_ikke_> khoan: Default shortcut is mod+shift+q 2015-08-18 14:18:35 <_ikke_> Depends on how it's set in your rc.lua 2015-08-18 14:19:21 <_ikke_> grep awesome.quit ~/.config/awesome/rc.lua 2015-08-18 14:20:12 <_ikke_> Ok, different issue 2015-08-18 14:34:38 _ikke_: thanks, I can quit wm with mod+shift+q but there's just black blank screen after that. I don't know how to get to virtual console. 2015-08-18 14:39:34 <_ikke_> If you have awesome running, can you then get to different virtual consoles? 2015-08-18 14:53:16 while in awesome wm, ctrl+alt+F2 shows a blank screen 2015-08-18 14:53:36 ctrl+alt+F7 brings awesome wm back 2015-08-18 14:54:32 here's the sequence I got into awesome 2015-08-18 14:54:49 1. login on VT 1 2015-08-18 14:55:03 2. execute startx 2015-08-18 14:55:25 3. awesome wm started from .xinitrc 2015-08-18 14:55:41 <_ikke_> That's my same setup, but on a different os 2015-08-18 14:56:07 <_ikke_> How do you start awesome? 2015-08-18 14:56:31 <_ikke_> exec awesome? 2015-08-18 14:57:48 yes, exec awesome 2015-08-18 14:58:31 /bin/login -- khoan 2015-08-18 14:58:35 /sbin/getty 38400 tty2 2015-08-18 14:58:52 -ash 2015-08-18 14:59:04 {startx} /bin/sh /usr/bin/startx 2015-08-18 14:59:17 xinit /home/khoan/.xinitrc -- /etc/X11/xinit/xserverrc :0 -auth /tmp/serverauth.XXXXKHfGEc 2015-08-18 14:59:29 /usr/bin/X -nolisten tcp :0 -auth /tmp/serverauth.XXXXKHfGEc 2015-08-18 14:59:52 that's an extract of ps 2015-08-18 15:03:59 added ps output to http://forum.alpinelinux.org/forum/general-discussion/how-logout-awesome-wm 2015-08-18 15:04:01 <_ikke_> Looks like how it is running for me 2015-08-18 15:05:03 cool, thanks for confirmation _ikke_ 2015-08-18 15:22:52 I'm running on Intel GM45 graphics with intel driver 2015-08-18 20:23:45 Anyone here use Alpine has a desktop OS? 2015-08-18 20:25:51 yes 2015-08-18 20:32:06 for devs getting into go , https://github.com/boltdb 2015-08-18 22:47:56 Hi ncopa , just saw that you were the maintainer of the freeswitch package and was wondering 2015-08-18 22:48:13 Did you have any issues with the timers/clocks with freeswitch on alpine? 2015-08-19 07:21:54 when you have c and lua ... do you really need python? The answer is NOOOOOOOOOO 2015-08-19 09:02:28 <_ikke_> leo-unglaub: python has lots of convenient packages 2015-08-19 09:03:51 Hi everyone 2015-08-19 09:04:22 Got a script to bootstrap alpine on a remote server (at online.net) 2015-08-19 09:04:30 is it worth adding it to the wiki? 2015-08-19 09:20:19 z3bra: cool. can we see it? 2015-08-19 09:21:16 sure 2015-08-19 09:21:21 http://blog.z3bra.org/2015/08/install-alpine-at-onlinenet.html 2015-08-19 09:29:30 neat. none of it is interactive except the passwd command? 2015-08-19 09:36:28 ty for sharing z3bra 2015-08-19 09:36:44 nice blog btw. reading through it right now. 2015-08-19 09:40:30 cool, thanks :) 2015-08-19 10:25:35 I'm running alpine in a docker container. How can I install a 32bit glibc (in order to run a binary that links against this) ? 2015-08-19 10:35:31 I am Das PDF ist im Anhang, es ist 36 Seiten groß, am besten bedruckst du jede 2015-08-19 10:35:34 Seite doppelt. Ich kann dir sonst auch einfach mal neue Seiten kaufen 2015-08-19 10:35:36 oder so. 2015-08-19 10:35:37 oops, sorry 2015-08-19 10:35:44 wrong channel 2015-08-19 10:36:35 I was hoping it was an answer to my 32bit libc.so on a 64bit OS question. 2015-08-19 10:40:02 lol 2015-08-19 10:41:24 penthief: well…alpine doesn't have multilib support if I recall correctly 2015-08-19 10:42:20 thanks 2015-08-19 14:16:42 I can't mount ext2 filesystems currently, when I try to do so I get the error: "mount: unknown filesystem ext2" any idea what might be causing this? 2015-08-19 14:17:00 I tried both the busybox mount utlitly and the mount utility from util-linux neither work 2015-08-19 14:17:44 ah, the ext2 module wasn't loaded… 2015-08-19 14:36:29 starting busybox mdev on the RPi results in an error: /lib/modules no such file or directory 2015-08-19 14:37:11 i think i saw a discussion about that here. what was the outcome? 2015-08-19 14:38:08 it looks like mdev is starting too early. shouldn't it start after modloop mounts? 2015-08-19 15:48:42 hey guys, leo-unglaub here 2015-08-19 15:48:53 just a quick notice, the apline updates from today break X 2015-08-19 15:49:01 so dont update until this is fixed 2015-08-19 15:49:05 ping ncopa 2015-08-19 18:45:13 does alpine support more sophisticated DEs like lxde compiled with musl? 2015-08-19 18:45:48 the only environments i have used were made with buildroot. and i think all i had as openbox + midori 2015-08-19 18:46:11 lxde with firefox made with musl woud be pretty nice i think 2015-08-19 18:47:22 hmm yeah i see you guys have full blown DEs like xfce 2015-08-19 18:47:23 hmm 2015-08-20 02:31:40 anyone have an influxdb apk I can use? 2015-08-20 06:52:15 i set my system locale like so https://wiki.gentoo.org/wiki/UTF-8#The_system_console 2015-08-20 06:52:23 ie: To enable UTF-8 on the console edit /etc/rc.conf Set unicode="yes" 2015-08-20 06:52:34 then i made these changes to .Xdefaults and .tmux.conf 2015-08-20 06:52:45 https://dpaste.de/i6eQ 2015-08-20 06:52:55 https://i.imgur.com/a1nr00L.png everything seems to be in the right place 2015-08-20 06:53:02 its just that | is replaced with a _ 2015-08-20 06:53:16 we don't seem to have the locale command with alpinelinux 2015-08-20 09:05:44 hey 2015-08-20 09:07:04 ncopa: ping 2015-08-20 09:07:18 leooooo: pong 2015-08-20 09:09:14 ncopa: one update yesturday broke x 2015-08-20 09:09:33 i noticed it when i went to a client and i could not use my laptop 2015-08-20 09:09:46 and my office pc is broken to, i am currently on a mac from a co worker 2015-08-20 09:09:55 v3.2? 2015-08-20 09:10:00 edge 2015-08-20 09:10:28 hm 2015-08-20 09:10:32 any idea what happened? 2015-08-20 09:10:33 x starts normal, but keyboard an mouse are dead 2015-08-20 09:10:46 i had same with my laptop 2015-08-20 09:10:49 when i ssh to my laptop and to an startx i get no errors 2015-08-20 09:10:57 but i cannot use the keyboard 2015-08-20 09:11:09 is /dev/input* ok? 2015-08-20 09:11:14 permissions etc 2015-08-20 09:11:16 yeah, it is 2015-08-20 09:11:35 i onticed that there was a missing group named 'input' or so 2015-08-20 09:11:38 that eudev wanted 2015-08-20 09:12:22 okay so it seems to make tmux work correctly i had to add to /etc/profile 2015-08-20 09:12:25 export LC_ALL=en_US.UTF-8 2015-08-20 09:12:27 export LANG=en_US.UTF-8 2015-08-20 09:12:30 export LANGUAGE=en_US.UTF-8 2015-08-20 09:13:25 ncopa: what i dont get is that it worked perfectly 2 days ago 2015-08-20 09:13:33 i have no idea what changed that could cause this 2015-08-20 09:13:49 i think it might be busybox patch i added recently 2015-08-20 09:14:22 for depmod 2015-08-20 09:14:33 you think a module is missing? 2015-08-20 09:14:37 no 2015-08-20 09:15:04 but the modules.dep.bin and friends were probably generated by busybox depmod instead of kmod's depmod 2015-08-20 09:15:14 it probably confused eudev in some way 2015-08-20 09:15:21 i dont know how or why 2015-08-20 09:15:32 hm 2015-08-20 09:15:36 hmm, the strange thing is that it happened on two devices at once 2015-08-20 09:16:01 so if the problem exists longer than yesturday why was it triggered last day? 2015-08-20 09:16:15 i suppose it only happens on reboot 2015-08-20 09:16:32 for anybody who is interested, pkgs.alpinelinux.org has just been updated. 2015-08-20 09:16:38 i pushed a patch for busybox depmod the other day 2015-08-20 09:16:52 commit 0872509c4fa881ef7528e2b1302a1b42417edc1a 2015-08-20 09:16:52 Author: Natanael Copa 2015-08-20 09:16:52 Date: Tue Aug 18 12:00:09 2015 +0200 2015-08-20 09:16:52 main/busybox: backport libkmod compatible depmod 2015-08-20 09:16:57 i think that might have triggered it 2015-08-20 09:17:05 hm 2015-08-20 09:17:18 you can now flag a package out of date, and the maintainer will be notified by email. 2015-08-20 09:17:28 there is also a proper pager now. 2015-08-20 09:17:42 and there are some fixes regarding deps/revdeps 2015-08-20 09:17:53 and some cosmetics 2015-08-20 09:18:59 clandmeter: nice! +1 2015-08-20 09:19:39 ncopa: hmm, do you want to revert the patch and let me try? 2015-08-20 09:20:08 if you find any issues, please report them at https://github.com/clandmeter/aports-turbo 2015-08-20 09:21:31 leooooo: would be nice 2015-08-20 09:22:00 ncopa: i do anything to get it working again, because i am in the office an i cannot use my computer right now *g* 2015-08-20 09:54:11 ncopa: did you reverse the patch yet? 2015-08-20 09:54:19 or do you have an other idea? 2015-08-20 09:55:35 i didnt reverse it yet 2015-08-20 09:55:39 i wonder why it happens 2015-08-20 09:57:33 wifi is also broken on my laptop 2015-08-20 09:58:49 hehe, wifi never worked for me in the last 8 years *g* so i am used to cables *g* 2015-08-20 10:01:44 i need usb dongle for cable on my lappy 2015-08-20 10:04:07 ah okay, thats not very handy 2015-08-20 10:04:35 i have to correct myself, once in 8 years my wifi worked ... when i tryed an ubuntu live image ... no idea how they did it, but it worked for that sesion 2015-08-20 10:04:45 but the rest of ubuntu sucked, so i never installed it *g* 2015-08-20 10:10:10 leooooo: i think reverting that busybox patch fixes it 2015-08-20 10:10:15 i pushed revert 2015-08-20 10:10:26 at least it made my wifi go back to normal again 2015-08-20 10:10:37 lunch 2015-08-20 11:11:58 clandmeter: nice 2015-08-20 11:13:19 I was thinking something like 'flag' , but using rss feed interface 2015-08-20 11:13:41 kinda Early Updata system (EUs) 2015-08-20 11:20:10 it check rss for some strings and add maybe-update-available comment to pkg 2015-08-20 11:23:13 ncopa: did you push the update? 2015-08-20 11:23:18 because i dont have it available 2015-08-20 11:23:21 yes 2015-08-20 11:23:35 leooooo: might also help with apk fix kmod 2015-08-20 11:24:48 apk fix kmod does not work 2015-08-20 11:24:52 and i have no update available 2015-08-20 11:25:02 did you force a rebuild by buming the number? 2015-08-20 11:27:19 clandmeter: any thought on adding rest-api(json) 2015-08-20 11:30:50 ncopa: my current busybox is 1.23.2-r7 2015-08-20 11:32:59 oh 2015-08-20 11:33:02 i did nt 2015-08-20 11:45:01 ncopa: you didn't push or bumb the revison? 2015-08-20 11:45:41 pushed now 2015-08-20 11:48:51 ncopa: yeah, it works again! 2015-08-20 11:48:57 big thanks! 2015-08-20 11:54:27 yeah, sounds like the bb kmod patch is not complete 2015-08-20 11:54:30 something is subtly broke 2015-08-20 11:54:52 fabled: yeah, but the reverse now makes stuff work again 2015-08-20 11:55:26 ok 2015-08-20 11:55:33 need to look at the bb patches i made then 2015-08-20 11:59:29 that would be nice of you :) 2015-08-20 13:33:08 do we have something like this on AL, http://www.freebsd.org/cgi/man.cgi?query=dpv&sektion=1 ? 2015-08-20 18:17:50 hello 2015-08-20 18:18:47 i run alpine on a raspberry and always get, bus error when i run "apk add mariadb" - how can i repair this? 2015-08-20 18:22:02 could this be a memory problem? 2015-08-20 18:34:03 wtff, yes, i think mariadb is so large that it will not fit into RAM on rpi 2015-08-20 18:34:10 you would probably need to do disk install 2015-08-20 18:34:53 fabled: the alpine mariadb version is very outdated 2015-08-20 18:34:59 the 10.x series is a little bit better 2015-08-20 18:35:02 but not much 2015-08-20 18:35:33 leo-unglaub, bug the maintainer / file a bug 2015-08-20 18:35:45 seems it's ncopa 2015-08-20 18:35:56 fabled: its always ncopa *g* 2015-08-20 18:36:04 leo-unglaub, seems it's 10.0.21 in edge 2015-08-20 18:36:08 that guy propobly does 95% of everything *g* 2015-08-20 18:36:25 yeah, ncopa is our apkbuild energizer bunny 2015-08-20 18:36:40 but we've had more contributors recently 2015-08-20 18:36:56 and the really hard ones are split out for different people / joint work 2015-08-20 18:37:10 like gcc / openjdk 2015-08-20 18:39:03 fabled: thx for the info. what do you mean with disk install? on a usb stick? 2015-08-20 19:34:11 wtff, yeah, setup-disk so it uses the USB-disk or SD-card as rootfs 2015-08-20 19:38:30 setup-disk is not working on the raspberry cause it requires syslinux, which is not found in the armhf repo 2015-08-20 19:39:31 which setup-disk 2015-08-21 03:12:37 Hey, I got a question, would it be beneficial to run Debian or Alpine on a VPS with 1024MB of ram. 2015-08-21 03:13:05 ? 2015-08-21 03:13:18 i don't understand the question 2015-08-21 03:13:24 are you asking which of the two would be better? 2015-08-21 03:13:24 I don't know much about OSes that run off ram. 2015-08-21 03:13:33 or something else 2015-08-21 03:13:42 "run off ram" ? 2015-08-21 03:14:10 *from 2015-08-21 03:14:41 Would it put more of a strain on my VPS with less ram if I were to use Alpine, rather than Debian which doesn't run from ram. 2015-08-21 03:17:15 you seem to be under the mistaken impression that alpine should or has to "run from ram" (i assume that means install on a tmpfs rather than a disk) 2015-08-21 03:17:32 Wait, it doesn't have to run off ram? 2015-08-21 03:17:36 there's no reason you need to do that, and it's a rather bad idea if you don't have an excess of ram relative to your needs 2015-08-21 03:17:43 Oh. 2015-08-21 03:17:58 Well, I learned something new today. Thanks for the help. 2015-08-21 03:18:06 there might be other reasons you want to do it like avoiding persistent storage 2015-08-21 03:18:25 but you certainly don't have to, and shouldn't if it doesn't make sense for your usage case 2015-08-21 03:20:07 Ah okay, I understand this more clearly now. I'll just install to disk then. 2015-08-21 05:32:10 Hello 2015-08-21 05:33:30 I'm facing an issue with the last Alpine 3.2.3 isos both the full and the minimal 2015-08-21 05:34:27 If I try on my station to boot the iso like this: qemu alpine.iso, it fails 2015-08-21 05:34:47 to try to fix it, I used isohybrid 2015-08-21 05:36:09 then it boots but I have an error: initramfs emergency shell launched 2015-08-21 05:36:46 I enter _exit_ but /sbin/init can't be found 2015-08-21 05:37:45 I tried to rebuild the iso changing isolinux and syslinux conf but I haven't had any success so far 2015-08-21 05:37:47 any idea? 2015-08-21 05:41:42 same goes when I dd the iso to a usb key to install it on my test laptop, I have similar error at boot even following the wiki regarding the change to do on syslinux 2015-08-21 05:42:30 I could try to bootstrap Alpine on my laptop using a recovery disk but it is going to be a bit painful :-) 2015-08-21 09:43:46 I just tried 3.2.3 mini iso in qemu and it boots fine. come back edrian! :) 2015-08-21 15:43:13 hi. got some problems with setting up X, my input devices don't work :/ neither touchpad nor keyboard 2015-08-21 15:45:15 did you run setup-xbase or what's it called? it switches udev underneath to support input devices for xorg 2015-08-21 15:45:34 I did. 2015-08-21 15:48:05 hrmpf 2015-08-21 16:25:52 got it fixed. strange fix, but creating Option "AutoAddDevices" "false@ in xorg.conf helped. 2015-08-21 19:01:55 is there any decent photo browser that's packaged for alpine? 2015-08-21 19:20:14 ok, gpicview is usable 2015-08-21 19:20:31 feh is crap -- it doesn't honor exif orientation information when displaying 2015-08-21 19:21:45 i should just write a decent photo browser using sdl2 and libavcodec 2015-08-21 19:22:25 it should be possible to run about 5-10x faster than typical browsers just by using lavc's mjpeg codec instead of libjpeg 2015-08-21 19:23:17 and it's possible to do a preview-decode pass with the option to decode DC coefficients only that should be ~64x faster than that 2015-08-21 19:29:57 Hi, is the latest x86-64.iso built with grsecurity enabled? 2015-08-21 19:33:28 grsec kernel is default on alpine 2015-08-21 19:34:48 LinAdmin: that said grsec rbac policies are not on by default 2015-08-21 19:35:30 not sure about that 2015-08-21 19:35:49 i switch to vanilla kernel first thing because grsec is too broken 2015-08-21 19:36:33 @systmkor is there a _working_ policy file in /etc/grsec/policy? 2015-08-21 19:37:11 LinAdmin: sadly no, I started working on one but busy with work 2015-08-21 19:37:17 dalias: what's broken and how can we fix 2015-08-21 19:37:48 @dalias: by saying broken, do you mean it does not work or it is lacking a working policy? 2015-08-21 19:39:40 @systmkor: How mucht time do you think is required to get a working policy? 2015-08-21 19:40:24 idk, I was trying to get the most permissive policy first 2015-08-21 19:40:26 and then go from there 2015-08-21 19:40:37 well most permissive without being useless 2015-08-21 19:42:16 @systmkor did'nt you go the route "gradm -FL /boot.log" and then create policy from /boot.log? 2015-08-21 19:42:25 it disables a lot of stuff in /proc that's needed for any kind of resource usage monitoring 2015-08-21 19:42:43 dalias: well depends on your policy 2015-08-21 19:42:55 in particular top doesn't work :) 2015-08-21 19:43:04 run top then press s (this is how you get mem usage info) 2015-08-21 19:43:05 since you can have certain users or programs that don't have /proc hidden 2015-08-21 19:43:15 even root can't see it 2015-08-21 19:43:42 I think that's a policy configuration 2015-08-21 19:44:12 dalias: could you hit me up an email on those problems I would like to look into if there is a proper way to handle that 2015-08-21 19:44:19 @dalias: of course running top or htop requires a policy 2015-08-21 19:45:45 @systmkor did'nt you go the route "gradm -FL /boot.log" and then create policy from /boot.log?????? 2015-08-21 19:46:10 well you run full system learning on, then convert that to a policy 2015-08-21 19:46:26 but good chance that policy is far more restrictive than what you want as a non-server environment 2015-08-21 19:46:51 ok, and how much time do you estimate for tweaking the policy? 2015-08-21 19:47:27 for you or me? 2015-08-21 19:47:41 for a decent linux admin :O 2015-08-21 19:47:56 idk? I would be down to work on it with you 2015-08-21 19:48:47 i just need a rough guess about the amount of work required? 2015-08-21 19:49:06 I would guess it would be a weekend project 2015-08-21 19:49:31 assuming your talking about just a bare-bones Alpine (ignoring X-server and other things) until you get something minimal working first 2015-08-21 19:49:39 ok that is possible for me 2015-08-21 19:50:49 LinAdmin: definitely check out https://en.wikibooks.org/wiki/Grsecurity and https://forums.grsecurity.net/ for reference 2015-08-21 19:51:16 Ive learned by heart these text :p 2015-08-21 19:51:56 @systmkor: this weekend I will install alipine and I will contact you when I am ready to tweaking policy 2015-08-21 19:52:38 for sure :D 2015-08-21 19:52:49 thx everybody and cu 2015-08-21 19:52:51 bb 2015-08-21 21:08:47 Is there any way to get apk add to retry other mirrors gracefully? I used apk-setuprepos to add some mirrors but still I'll get apk add failing with temporary failures and I would like it to transparently retry. 2015-08-22 02:55:31 part of me has considered running qubes os, but it just seems too bloated for what it is 2015-08-22 02:55:46 ideally you'd want something super minimal like alpine-linux to run those VMs on 2015-08-22 05:50:26 https://bugs.alpinelinux.org/issues/4551 btw i spotted this one ncopa 2015-08-22 09:54:27 is there some reason we don't have icedove/thunderbird package? 2015-08-22 09:57:21 http://bugs.alpinelinux.org/issues/1017 2015-08-22 09:57:28 seems thunderbird was in alpinelinux at some point 2015-08-22 09:57:42 does it have problems compiling with musl? 2015-08-22 09:58:34 compiling 2015-08-22 09:58:40 compiling 2015-08-22 09:58:56 im cumpiling in your mom's vagina 2015-08-22 10:53:36 … 2015-08-22 12:03:22 nmeum: i say silly sausage things sometime 2015-08-22 12:05:28 redefinition of father struct sillystruct ^ 2015-08-22 20:07:10 Hi, I’d like to install Alpine Linux in a chroot, in order to play with musl; I have downloaded the ISO, extracted the initramfs, chrooted in it, I can use /sbin/apk, but I can’t find the other setup tools. 2015-08-22 20:07:27 Can I install the base system with just apk? 2015-08-22 20:07:52 Also, is there a list of the packages constituting the base install? 2015-08-22 20:08:21 Oh, alpine-base. 2015-08-22 20:38:02 Ow, according to strace, apk does some close(-1) at the end, when its database doesn’t exist. :/ 2015-08-22 20:40:19 I’d probably want to read this page: http://wiki.alpinelinux.org/wiki/Bootstrapping_Alpine_Linux ^^' 2015-08-22 20:41:31 apk doesn’t use the -p option as its root? 2015-08-22 20:41:45 It still requires the database to be in the readonly initramfs? 2015-08-22 21:01:43 good evening :) 2015-08-22 21:19:04 linkmauve1: the normal installation method is via setup-alpine, so it should contain calls to whatever is needed to do so manually 2015-08-22 21:20:11 qman__, I actually loosely followed this guide: http://wiki.alpinelinux.org/wiki/Installing_Alpine_Linux_in_a_chroot 2015-08-22 21:20:32 And now have a working chroot in a btrfs subvolume for me to play with. :) 2015-08-22 21:25:26 does anybody here use openntpd as ntp server? 2015-08-22 21:27:08 because it's just broken for me 2015-08-22 21:28:11 for example I get "unknown user _ntp" and when I rename the ntp user to _ntp, it complains because ntp's home directory isn't set 2015-08-22 21:34:43 I can make it run by creating another user _ntp but even then stopping the ntpd doesn't work for reason of process not found 2015-08-23 00:15:22 vrs: I think I may have caused that, I'll go check the port and see if that is fixed or needs to be 2015-08-23 00:17:27 vrs: also i think openntpd package is suppose to create /var/empty if it doesn't exist but since openssh as a daemon is so commonly installed (at least for myself) it get's created by that package 2015-08-23 00:29:52 vrs: I think I fixed it, will test and push a patch shortly 2015-08-23 00:29:58 thanks for reminding me :D 2015-08-23 15:45:06 https://github.com/fastos/fastsocket claims to improve nginx throughput by 290% 2015-08-23 17:13:37 hey guys, I followed the steps to create an alpine usb key but the key does not boot 2015-08-23 17:13:58 do you have images ready, or some troubleshooting information 2015-08-23 17:15:28 I syslinuxed the usb key, but my bios won't boot it, without even an error message 2015-08-23 17:47:50 did you write the MBR? 2015-08-23 17:48:07 did you set the bootable flag on the primary partition? 2015-08-23 17:48:39 mpu: ^ 2015-08-23 17:49:53 My Alpine-as-a-KVM-host project isn't going well -.- 2015-08-23 17:59:11 CandyAngel: how come? 2015-08-23 18:03:16 nmeum: I can't install Alpine 2015-08-23 18:03:36 lol 2015-08-23 18:03:44 unetbootin, dd'ing the ISO and burning ISO to CD all result in lack of Alpine booting :P 2015-08-23 18:04:14 CandyAngel: have you tried re-downloading the ISO? 2015-08-23 18:04:21 CandyAngel, if you already got another distribution running, you could try http://wiki.alpinelinux.org/wiki/Bootstrapping_Alpine_Linux 2015-08-23 18:04:44 EDT: The ISO works, it boots in QEMU 2015-08-23 18:04:58 I’ve used that yesterday to install it (only the part about the base system), and I managed to get a working chroot. 2015-08-23 18:06:50 I'll try the chroot 2015-08-23 18:07:26 But you know, I want this to be the host and "won't boot from ISO" isn't exactly instilling confidence it will be suitable :P 2015-08-23 18:07:34 but we'll see 2015-08-23 18:44:41 CandyAngel: well you are doing it wrong…you are using unetbootin 2015-08-23 18:46:05 unetbootin is known to cause problems thus it was removed from the wiki page http://wiki.alpinelinux.org/w/index.php?title=Create_a_Bootable_USB&diff=10650&oldid=10203 2015-08-23 18:47:51 and simplying dd it to the usb stick wont't work since it doesn't have a bootloader than 2015-08-23 18:49:42 ACTION shrugs 2015-08-23 18:49:49 I was just trying stuff to try and get it to work 2015-08-23 18:50:10 Many distributions now have their ISO act as both a disk image and an USB stick/hdd image, by having a MBR stub pointing to itself as the first partition, so the ISO 9660 will work on both. 2015-08-23 18:50:20 As the only "right" way to boot it is from CD, which doesn't work :P 2015-08-23 18:59:24 okay 2015-08-23 18:59:40 So I have it installed on the chroot 2015-08-23 19:11:21 Oh wait 2015-08-23 19:11:24 I think I've done this wrong 2015-08-23 19:11:26 CandyAngel: that's not true you can also boot it from usb 2015-08-23 19:11:43 I've made a chroot on where I want to do a sys install 2015-08-23 19:11:44 there is no "right way" 2015-08-23 19:33:55 nmeum: I did both things 2015-08-23 20:17:22 Meh, I think I will just use an Arch Linux host for no 2015-08-23 20:17:25 for now* 2015-08-23 20:17:52 Thank you for the suggestions though 2015-08-23 20:30:46 CandyAngel: you still didn't manage to create a working boot medium? 2015-08-23 20:31:42 you can just boot the iso in qemu and use setup-bootable, it shouldn't be a biggy 2015-08-23 20:33:20 <_ikke_> Or use something like unetbootin 2015-08-23 20:34:20 he already tried unetbootin it didn't work and it is known to cause problems 2015-08-23 20:34:29 it is even mentioned in the wiki anymore 2015-08-23 20:42:06 for anyone who wants to create bootable usb with dd, http://dev.alpinelinux.org/~clandmeter/alpine-mini-3.2.0-x86_64-512M.img.gz 2015-08-23 20:42:38 its not the latest version, but it should get you started. 2015-08-23 20:43:26 ACTION grabs  2015-08-23 20:55:03 ACTION also downloads 2015-08-23 20:55:06 Thankies clandmeter 2015-08-23 20:55:35 nmeum: Hm, I was thinking of using QEMU and passing the two drives I want to install it on to that 2015-08-23 20:56:02 yeah, that would work fine 2015-08-23 21:01:09 Basically, my end goal is RAID1 between those 2 drives, with LVM set up on it. Alpine host, then Windows guest (with GPU passed through with vfio) and Arch Linux guest 2015-08-23 21:01:20 When/if I achieve that, I will write a guide for the wiki *nodnod* 2015-08-23 21:36:45 nmeum: the problem was that my machine is configured in uefi boot only 2015-08-23 21:37:21 you can't activate legacy bios mode? 2015-08-23 22:52:02 nmeum: I can, I just did not, that's why it did not work, I reckon 2015-08-23 22:52:52 but, why do you require so much hacking for usb booting? 2015-08-23 22:53:14 many other distros provide isos that can readily burnt on usb 2015-08-24 11:49:53 CandyAngel http://it-offshore.co.uk/linux/alpine-linux/48-alpine-linux-usb-hybrid-iso-image - the easiest way to make a usb stick is from within Alpine running in KVM 2015-08-24 11:52:05 BitL0G1c: Thankies, I will have a look. Going to make another attempt tonight :) 2015-08-24 11:52:52 install libvirt too so you can mount the usb stick inside kvm 2015-08-24 11:52:59 Mhm 2015-08-24 11:53:23 I have it installed and stuff, but there is something broken with my Arch installation (*cough*systemd*cough*) so it doesn't work "properly" 2015-08-24 11:53:33 I have to run it as root and performance sucks 2015-08-24 11:53:54 :'( systemd 2015-08-24 11:53:58 Which is why I want Alpine as host and not Arch 2015-08-24 11:54:29 I'm hoping it will work properly but KVM VMs in Arch for me right now.. are noticeably VMs 2015-08-24 11:54:35 you could also probably do it in LXC if you mount the /mnt inside the container 2015-08-24 11:54:46 FOr example, they will randomly completely freeze for ~5 seconds 2015-08-24 11:54:55 Can see the frame dropping on HTML5 players 2015-08-24 11:54:57 Stuff like that 2015-08-24 11:55:44 something like this for LXC http://unix.stackexchange.com/questions/69072/lxc-how-do-i-mount-a-folder-from-the-host-to-the-container 2015-08-24 11:56:25 My friend has the same hardware as me and says he gets near-native performance in his VMs 2015-08-24 11:56:41 Which reminds me, I need to ask what he used for host.. 2015-08-24 11:58:47 Near-native as in "you have to benchmark to notice the difference"-esque 2015-08-24 13:32:57 Last night, I tried using QEMU and passing through the drives but Alpine wouldn't boot from them. Not sure if I didn't install the bootloader correctly or if it didn't like them being GPT or what (just said "missing OS" on reboot) 2015-08-24 13:33:23 So I will just make a bootable USB with QEMU and try that 2015-08-24 14:00:41 what the fuck, something deleted my .bash_history 2015-08-24 15:30:08 anybody using chrome here? 2015-08-24 15:30:20 on alpine that is 2015-08-24 15:58:19 clandmeter: nope, firefox user 2015-08-24 16:51:23 You know, you can clearly tell the difference between -enable-kvm and "normal" QEMU when booting Alpine 2015-08-24 16:51:28 It's near instant with KVM 2015-08-24 16:52:00 well, isn't kvm more or less direct hw? 2015-08-24 16:52:38 Mhm 2015-08-24 16:52:41 as qemu is more abstracted hw? 2015-08-24 16:52:53 yeah, but it is really noticeably slower 2015-08-24 16:53:09 So like.. how do people use it without KVM? :| 2015-08-24 16:55:13 CandyAngel, for emulation. 2015-08-24 16:55:37 Like, the other day I had to use an AArch64 userland, so I did use Qemu without KVM. 2015-08-24 16:56:19 Oh, I know that 2015-08-24 16:56:33 And yes, I still find it awesome that it is possible to do that :| 2015-08-24 16:56:36 As no matter how you try, your x86 CPU will never grow an ARM core under KVM. :D 2015-08-24 16:56:55 Huh? I thought hybrid CPUs were a thing.. 2015-08-24 16:56:58 :( 2015-08-24 16:57:01 Dreamsruined 2015-08-24 16:58:30 tbh, having an on-die arm core would not be that much of a bad thing 2015-08-24 16:58:36 there is one 2015-08-24 16:58:43 for the system management 2015-08-24 16:58:48 you just can't use it 2015-08-24 16:58:52 pity 2015-08-24 16:59:40 I prefer to have different computers instead of everything on the same die. 2015-08-24 17:06:44 You know when you do a sys install of Alpine.. does it literally just copy the current state to disk? 2015-08-24 17:06:52 (and set bootloader and such) 2015-08-24 17:08:14 yep 2015-08-24 17:08:31 if you have an already installed system, you can even copy it over to another disk 2015-08-24 17:28:59 mostly-Coolies 2015-08-24 17:29:14 I can see how that might bite you if you make the "install" environment weird somehow 2015-08-24 17:29:19 But that's pretty neat 2015-08-24 17:35:55 Boo, that didn't work either -.- 2015-08-24 17:36:15 I was just testing it out in QEMU with some disk images 2015-08-24 17:36:21 And it just says "missing OS" 2015-08-24 17:52:20 Is there a scratch area where I can write a guide or should I just write it with a note at the top that it is WIP? 2015-08-24 17:53:13 Err, on the wiki I mean :P 2015-08-24 17:57:20 It workssssssss (in QEMU)! 2015-08-24 17:58:02 Except it fails to mount /dev/md1 to /boot because the raid hasn't been brought up yet 2015-08-24 18:13:07 does apk have something similar to yum history that would allow me to reverse a sequence of package installations? 2015-08-24 18:43:19 Hm 2015-08-24 18:43:29 I guess Alpine doesn't support /boot on RAID1 2015-08-24 19:34:59 Okies 2015-08-24 19:35:09 If I add mdadm-raid to boot runlevel it works okay \o/ 2015-08-24 19:35:47 I really need to write a guide for this.. 2015-08-24 20:37:35 morning 2015-08-24 20:53:45 http://ix.io/krw 2015-08-24 20:53:57 ^ geomyidae port 2015-08-24 21:04:26 Gah! 2015-08-24 21:04:32 I nearly got it working 2015-08-24 21:04:47 It worked in QEMu, but it won't mount root on the metal install 2015-08-24 21:04:57 And I think I know why.. but no idea how to fix it 2015-08-24 21:05:07 (in the boot modules, lvm and raid1 are missing) 2015-08-24 21:10:32 I don't get why it would leave out raid1 though.. it's in /etc/modules.. 2015-08-24 21:14:50 okay 2015-08-24 21:15:02 For some reason, setup-disk didn't notice root was on RAID 2015-08-24 21:15:13 but it did in QEMU so.. huh 2015-08-24 21:27:26 You know what.. I'll just install Arch as the KVM host.. this is getting silly 2015-08-24 21:27:31 setup-disk won't even run now 2015-08-24 21:28:05 Complaining that .setup-apkrepos is missing 2015-08-24 21:49:52 \o/ 2015-08-24 21:49:59 I did it! 2015-08-24 21:50:27 I don't know what I did differently seeing as I have tried so many times I know each command by heart.. but it now boots Alpine on metal :D 2015-08-24 21:50:49 (makes writing the guide easier :]) 2015-08-24 22:06:14 ACTION takes over the channel 2015-08-24 22:06:16 Mwahahaha 2015-08-24 22:09:11 z3bra: the added user is not removed on package deletion in your aport 2015-08-24 22:09:38 also you could use the pkgusers and pkggroups variables instead of using that post install script 2015-08-24 22:13:18 nmeum, I checked the fetchmail package as a helper 2015-08-24 22:13:24 and it doesn't delete either 2015-08-24 22:13:33 maybe I just took a wrong example 2015-08-24 22:13:38 yeah, many packages don't seem to do that 2015-08-24 22:13:41 I'll change it then 2015-08-24 22:14:00 what are those pkgusers/pkggroups variables though? 2015-08-24 22:14:48 Any suggestions for what window manager I should use for KVM host... openbox maybe? 2015-08-24 22:15:39 z3bra: http://wiki.alpinelinux.org/wiki/APKBUILD_Reference#pkgusers 2015-08-24 22:21:52 thanks 2015-08-24 22:22:03 CandyAngel, cwm? 2015-08-24 22:22:07 it's fairly light 2015-08-24 22:22:44 nmeum, what's the point of the variable if you need to create them in the script? 2015-08-24 22:25:19 Hm 2015-08-24 22:25:29 I tried openbox and now my machine won't respond 2015-08-24 22:26:00 popped up with a blank screen and a cursor for a second, now everything is blank, monitor is off, keyboard unresponsive -.- 2015-08-24 22:29:51 Wow 2015-08-24 22:29:55 that's really messed up 2015-08-24 22:30:22 I can move the move around.. as soon as I right-click, the machine hardlocks.. 2015-08-24 22:30:40 Oh wait.. still responsive over network 2015-08-24 22:36:03 I can move the mouse around* 2015-08-24 22:36:08 but when I right-click, X dies 2015-08-24 22:36:19 And I don't get returned to vt :( 2015-08-24 22:44:31 .. weird 2015-08-24 22:44:34 It works okay now 2015-08-24 22:45:00 I think I had to install xf86-video-nouveau, even though nouveau module was loaded? 2015-08-24 23:20:10 Okay so Alpine is installed, but I can't boot my existing Arch install in QEMU from it so I rebooted 2015-08-24 23:20:31 (and just got a nice reminder why i don't like systemd.. getting an IP address is hard, right?) 2015-08-24 23:20:51 Tomorrows project: install Arch in a VM 2015-08-24 23:20:55 :) 2015-08-24 23:37:20 CandyAngel: What's your issue? If you migrated a real installation to a VM, then the device names are probably all kinds of messed up 2015-08-24 23:37:59 You'll need to run the livecd in the VM and use arch-chroot and other means to fix fstab 2015-08-24 23:38:10 Then regenerate the initcpio using mkinitcpio. 2015-08-24 23:38:37 You'll also need to regenerate the grub config, if you use grub 2015-08-24 23:38:55 If you use other boot loaders, you'll do it for them, too. 2015-08-24 23:39:30 It starts booting, but /dev/md3 never shows up 2015-08-24 23:39:41 and in the recovery bit, ls /dev | grep sd gives no results ;| 2015-08-24 23:39:43 :| 2015-08-24 23:40:03 You probably use virtio virtualization for the hard drives, so the device names will be vd* 2015-08-24 23:40:12 Get your shit together 2015-08-24 23:40:25 Also: ls -l /dev/sd* 2015-08-24 23:40:28 no need for grep 2015-08-24 23:41:50 Again, you need to regenerate the initcpio. Probably the fstab, too. And your raid devices, too, if you use raid. 2015-08-24 23:42:24 I wasn't using virtio 2015-08-24 23:42:33 And I didn't want to convert it to a VM, just run it 2015-08-24 23:42:38 Well, /something/ must have happened. 2015-08-24 23:42:48 Post your qemu command line. 2015-08-24 23:42:54 And dmesg from the VM. 2015-08-24 23:43:12 Use a pastebin. 2015-08-25 00:14:23 Also, I know I don't have to use grep, I just do out of habit because I edit similar commands a lot 2015-08-25 09:16:04 ef 03 46 00 00 00 a0 00 12d+04:27:13.546 SET FEATURES [Set transfer mode] 2015-08-25 09:16:16 whopos, sorry 2015-08-25 09:31:50 I have a new plan: Create an Alpine VM (instead of Arch) because I can install that really quickly and get a "day-to-day" Linux environment working 2015-08-25 09:35:49 sounds a good plan, CandyAngel ;) 2015-08-25 09:40:07 Just need to wait to go home -.- 2015-08-25 09:40:23 Stupid work getting in the way of doing cool things :P 2015-08-25 11:26:34 hello masters 2015-08-25 12:00:35 ACTION waves to eto 2015-08-25 14:41:33 postfix is returning: "unsupported dictionary type: ldap" 2015-08-25 14:41:56 but it is weird: postfix-ldap is installed 2015-08-25 14:42:04 any clue 2015-08-25 14:42:05 ? 2015-08-25 16:54:18 what's up with 'apk search' repeating results? 2015-08-25 16:55:54 https://www.irccloud.com/pastebin/0Ae4dKtB/ 2015-08-25 17:01:09 maybe it is searching multiple repos pcarrier 2015-08-25 17:01:17 what do your repo config look like? 2015-08-25 17:01:27 dlaube: there are 34 results for openjdk8-jre-base... 2015-08-25 17:01:43 $ xargs < /etc/apk/repositories 2015-08-25 17:01:43 http://nl.alpinelinux.org/alpine/v3.2/main @testing http://nl.alpinelinux.org/alpine/edge/testing 2015-08-25 17:05:36 CandyAngel: ? 2015-08-25 17:13:52 does alpine have some automation mechanism to build stuff in chroots/containers? I'd rather not have alpine-sdk on my main system 2015-08-25 17:17:50 use an LXC container as a build environment 2015-08-25 17:18:46 the depends are automatically removed from the fakeroot by abuild 2015-08-25 18:27:52 so it looks like /usr/bin/Xorg doesn't need to be SetUID!? 2015-08-25 18:45:54 eto: Nothing, just waving hello to you :P 2015-08-25 19:00:56 hm, does lxc-attach work for anyone on linux-grsec? 2015-08-25 19:17:49 xorg doesn't seem to find any input devices 2015-08-25 19:18:05 I'm in crouton (on a chromebook), so not sure how it's supposed to figure stuff out :) 2015-08-25 20:02:32 interesting, http://twister.net.co/ 2015-08-25 20:17:11 can I easily yet cleanly disable a trigger? (mdocml...) 2015-08-25 22:00:39 Okay 2015-08-25 22:01:03 I'm in my Alpine VM on my Alpine KVM host \o/ 2015-08-25 22:41:36 pcarrier: I had a similar problem and it got solved by adding Option "AutoAddDevices" "false" 2015-08-25 22:41:47 in xorg.conf's InputDevice Section 2015-08-25 22:42:00 I don't really understand why this fixed the problem, but it did. 2015-08-25 22:44:38 I guess it's about missing udev rules though, as alpine's udev comes with nearly no rules, but it pulls udev for xorg usage 2015-08-25 22:45:11 I didn't examine it further - too many other interesting things ;) 2015-08-25 22:55:20 CandyAngel: alpine can do raid1 on /boot, but our non-installer doesn't support srtting it up for you 2015-08-25 22:59:34 kaniini: I got it to work by adding mdadm-raid to the boot runlevel instead of default 2015-08-25 23:02:57 Whether I should have done that is another matter entirely 2015-08-25 23:03:24 but after 2 days of trying to get Alpine to install, don't care, totally works :P 2015-08-25 23:03:49 On the other hand, seems like Alpine doesn't have packages for some stuff I want to install :( 2015-08-25 23:07:28 CandyAngel, same here, but its packaging is so close from Arch’ that you can pick it up in a few minutes. 2015-08-25 23:08:39 Ah okies 2015-08-25 23:09:08 In this VM, I just wanted to install Leo, Gnucash and Weechat as they are what I use all the time 2015-08-25 23:09:25 Weechat doesn't like something though (fails to start) and Leo/Gnucash aren't in the repos 2015-08-25 23:11:51 what is leo 2015-08-25 23:12:19 Outline editor: http://leoeditor.com/ 2015-08-25 23:12:33 I use it for my coding and my personal wiki 2015-08-25 23:12:52 (in the Alpine VM, it would just be wiki though) 2015-08-25 23:17:19 My idea is to have an Alpine VM with things I use *all* the time (which is those three things), then my Arch VM can be for other stuff that can be interrupted (e.g. coding, watching videos, music etc.) 2015-08-25 23:17:26 ANd then a Windows VM for games 2015-08-26 00:40:03 hm is it much work to get a working ocaml 2015-08-26 00:57:25 it shouldn't be 2015-08-26 01:04:33 it doesn't seem to be 2015-08-26 01:05:04 trying to get a working ghc was disastrous though so 2015-08-26 01:06:12 uhg, does ocaml need ghc now? 2015-08-26 01:06:28 ocaml used to be one of the easiest things to get working on musl 2015-08-26 01:06:35 ~5 years ago 2015-08-26 01:06:36 it doesn't 2015-08-26 01:06:45 oh, was it 2015-08-26 01:06:58 yeah 2015-08-26 01:07:05 anyway, it was quite pleasant, just a bit of a slow compile 2015-08-26 01:08:30 :) 2015-08-26 01:08:59 i never learned the language or anything but i always had a good feeling towards ocaml 2015-08-26 01:21:52 A statically linked hello world from ocaml + musl clocks in at 188kbyte. Kind of cool. 2015-08-26 01:49:33 :) 2015-08-26 01:49:38 that's not bad 2015-08-26 01:49:47 considering with c++ it's like 600k 2015-08-26 08:14:44 Hey, I have a some problems getting nss-pam-ldapd running on alpine. I start nslcd and get the error that libnss_ldap.so.2 can't be found. Also sshd seems not able to use PAM is that correct? 2015-08-26 08:47:24 Howdy all. Anybody have a idea on how to fix the Firefox address field? I just upgraded my laptop to Alpine 3.2 and now that I start Firefox, I cant really see what I am typing in the addressbar (or searchbar) in Firefox 2015-08-26 08:48:21 that's wierd. firefox 40 ? 2015-08-26 08:48:47 could be a fonts issue 2015-08-26 08:49:38 Hmm... strange... seems there is some strange settings for my FF that causes it behave strange. I clicked "Settings" button to see the 'About' field, but the menu popping up on right hand side is too small 2015-08-26 08:50:02 so maybe I should just remove the old firefox settings folder and see if that resolves the issue 2015-08-26 08:51:33 nah - didn't help :-/ 2015-08-26 08:52:55 midori seems to work fine though 2015-08-26 08:53:57 can you scrot? 2015-08-26 09:18:40 mhavela: When I first started Firefox, all the tab buttons were huge, I had to fix it with 'xrandr --dpi 72'. Long shot but might work..? 2015-08-26 09:19:38 mhavela: x86 or x86_64? 2015-08-26 09:20:31 sounds like #4248 2015-08-26 09:23:41 ff 40.0.2 craches on me once in a while 2015-08-26 09:23:45 does not segfault though 2015-08-26 09:23:56 as they probably try to catch the segfault 2015-08-26 09:27:51 ncopa: same here 2015-08-26 09:28:03 i have no idea why though 2015-08-26 09:28:12 well 2015-08-26 09:28:20 i'm pretty sure firefox is trying to do something stupid 2015-08-26 09:28:45 is 40 in main or edge only 2015-08-26 09:29:09 i'd use midori, but it's missing icons, despite faenza *and* gnome icon themes being present 2015-08-26 09:38:08 ScrumpyJack: 40.0.2 is in testing 2015-08-26 09:39:27 yeah, so am i. just wondered if it was in main 2015-08-26 09:40:19 alpine-dev-edge:~$ grep ^pkgver aports/main/firefox/APKBUILD 2015-08-26 09:40:19 pkgver=38.1.1 2015-08-26 12:17:23 systmkor: out of curiosity, how did you break openntpd? 2015-08-26 12:19:53 (I'm poor english speaker) what is difference between standard and mini edition? 2015-08-26 12:27:48 vinniec: fewer packages are included on the ISO compared to standard 2015-08-26 12:28:28 ok but mini edition is enough to use wifi connection? 2015-08-26 12:28:58 yes 2015-08-26 12:29:20 i recommend you start with the mini version 2015-08-26 12:29:53 ScrumpyJack: mini doesn't have wpa_supplicant. that may be a problem? 2015-08-26 12:30:33 wpa_supplicant is not necessary to use wifi? 2015-08-26 12:30:37 (I'm looking at http://git.alpinelinux.org/cgit/alpine-iso/tree/alpine-mini.packages vs http://git.alpinelinux.org/cgit/alpine-iso/tree/alpine.packages) 2015-08-26 12:31:22 now i'm watch 2015-08-26 12:33:01 uhm standard edition is too big for me, is there a method to install wpa_supplicant without conneciton? 2015-08-26 12:35:21 vinniec: go download the .apk from a mirror (http://nl.alpinelinux.org/alpine/v3.2/main/) and put it on the ISO somehow or on a USB drive 2015-08-26 12:35:41 ok 2015-08-26 12:36:06 vinniec: make sure you download any dependencies too (https://pkgs.alpinelinux.org/package/main/x86_64/wpa_supplicant) 2015-08-26 12:36:13 and for the dependencies? 2015-08-26 12:36:17 ah ok 2015-08-26 12:36:33 vinniec: you may also find this useful: http://wiki.alpinelinux.org/wiki/How_to_make_a_custom_ISO_image 2015-08-26 12:36:53 ok i watch 2015-08-26 12:39:41 but to launch this script you must have already started alpine? 2015-08-26 12:39:53 "apk add alpine-sdk" 2015-08-26 15:00:37 interesting dilemma vinniec. should mini have wifi support. 2015-08-26 15:00:55 uhm 2015-08-26 15:01:33 anyway. I take if your box doesn't have ethernet. did you manage to get it to work? you'll need wireless-tools package as well. 2015-08-26 15:01:51 yep i do not have eternet (3g wifi box) 2015-08-26 15:01:54 *ethernet 2015-08-26 15:02:06 usb port? 2015-08-26 15:02:19 uhm 2015-08-26 15:02:29 have you installed alpine linux mini? 2015-08-26 15:02:31 yep the pc have usb (not the router) 2015-08-26 15:03:12 i try alpine for first time today, now I was trying to configure vbox to share the iso created with the script 2015-08-26 15:03:33 this my actual idea 2015-08-26 15:03:41 *this is 2015-08-26 15:04:59 guest and host now is connected via lan (card with bridged) 2015-08-26 15:05:19 now i search a command to share file (maybe netcat) 2015-08-26 15:05:35 you've lost me :) 2015-08-26 15:06:23 bontibon said that you can create a custom iso alpine with a script 2015-08-26 15:06:42 yup 2015-08-26 15:07:00 my idea is: start alpine on vbox, create a iso with wpa_supplicant, share file with host 2015-08-26 15:07:19 use iso with the real machine 2015-08-26 15:08:11 i have that set up. give me a few minutes and i'll build alpine-mini with wpa and wifi tools 2015-08-26 15:08:22 OH 2015-08-26 15:08:25 thanks XD 2015-08-26 15:09:57 i am very noob in linux administration, I hope to be able to understand alpine 2015-08-26 15:13:21 why are you creating an iso yourself? 2015-08-26 15:16:33 to add wireless support to mini iso 2015-08-26 15:17:01 it's building. build box is a bit slow 2015-08-26 15:17:17 yep, in the meantimes i try nc 2015-08-26 15:17:39 from guest to host (might be useful in the future) 2015-08-26 15:21:17 ok, just testing it 2015-08-26 15:23:09 ok 2015-08-26 15:24:10 boots fine and the packages are there 2015-08-26 15:24:13 http://st.ilet.to/alpine-miniwifi-150826-x86_64.iso 2015-08-26 15:25:54 thank 2015-08-26 15:26:03 now i download it 2015-08-26 15:27:02 x86_64 is ok right? 2015-08-26 15:33:58 yep 2015-08-26 15:34:00 it is ok :) 2015-08-26 15:34:30 cool 2015-08-26 15:35:53 yesterday i bought this only for alpine: http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c01342908 2015-08-26 15:37:30 cool. i can't see pictures here, only text but i get the idea 2015-08-26 15:37:50 alpine is perfect for a thin client 2015-08-26 15:38:03 yes, i think too 2015-08-26 15:41:46 what is the TC connecting to? 2015-08-26 15:42:46 i do not understand, uhm for thinclinet i use a wifi usb dongle to connect 2015-08-26 15:42:55 if this is your question 2015-08-26 15:45:29 what's uhm? 2015-08-26 15:57:14 uhm is "i am thinking" 2015-08-26 16:05:06 :) 2015-08-26 16:05:26 i mean software/protocol 2015-08-26 16:05:53 from thin client to server. vnc? X11? citrix etc 2015-08-26 16:10:29 uhm (i am thinking) 2015-08-26 16:11:01 i have a monitor for think client 2015-08-26 16:11:07 i use tc standalone 2015-08-26 16:11:44 (for now) 2015-08-26 16:12:34 ah 2015-08-26 16:13:05 have you installed alpine linux? wifi working? 2015-08-26 16:15:48 no, wget is in 56% 2015-08-26 16:15:49 :P 2015-08-26 16:16:03 (i think my isp filter .iso file) 2015-08-26 16:19:14 *blink* 2015-08-26 16:20:18 try st.ilet.to/alpine-miniwifi 2015-08-26 16:44:00 is there a description on the difference between the different ISO types somewhere? I can't find any relevant information within 1-2 clicks from the wiki install page, faq, or download section 2015-08-26 17:06:20 Sleaker - standard is useful for ram only / usb installs (or a machine without internet) - mini is just the bare essential packages + gresecurity kernel - vanilla is the same as mini but with a standard (non grsecurity) kernel 2015-08-26 17:06:42 if your machine has internet - the mini iso is a good choice 2015-08-26 17:11:11 if you want to install to gpt or a custom partition scheme these scripts make it a bit easier http://it-offshore.co.uk/linux/alpine-linux/25-alpine-linux-luks-encrypted-installations 2015-08-26 17:12:38 (in this moment i stay with my parent, im so busy) 2015-08-26 17:27:01 BitL0G1c: thanks, might be helpfulto have that info on the download page 2015-08-26 17:27:13 ended up grabbing the standard and setup to USB. 2015-08-26 17:59:53 hmm so I'm using a usb boot system, and it saved my etc/network settings properly when I did lbu commit. then rebooted. but it doesn't seem to save apk installed stuff 2015-08-26 18:00:58 the info seemed to indicate lbu would backup installed packages, does it only backup the list of installed packages so you have to rerun apk upgrade? 2015-08-26 18:03:00 <_ikke_> Sleaker: It should also restore installed packaged 2015-08-26 18:03:02 <_ikke_> packages 2015-08-26 18:03:15 lbu stat doesn't seem to detect installed packages 2015-08-26 18:03:23 do I need to add directories? 2015-08-26 18:03:24 <_ikke_> There is a world file that contains it 2015-08-26 18:03:30 <_ikke_> contains the package names 2015-08-26 18:03:43 <_ikke_> it reinstalls them at boot 2015-08-26 18:03:59 <_ikke_> from a local cache 2015-08-26 18:04:06 hmm, didn't seem to reinstall them at boot, but they are in the world list 2015-08-26 18:04:49 <_ikke_> Is the apk cache present 2015-08-26 18:05:01 <_ikke_> /etc/apk/cache should be a symlink to the usb device I believe 2015-08-26 18:05:15 I haven't done anything to setup the cache yet 2015-08-26 18:05:31 <_ikke_> did you run the setup-alpine script? 2015-08-26 18:05:45 no I used setup-bootable only 2015-08-26 18:05:56 and then rebooted to the usb device 2015-08-26 18:06:29 and then manually setup my /etc/interfaces, then ran setup-apkrepos 2015-08-26 18:06:40 then tried to use setup-xorg-base 2015-08-26 18:06:55 <_ikke_> use the setup-alpine script, it manages stuff like that 2015-08-26 18:09:05 ah k, thanks 2015-08-26 18:12:03 hmm ok, what should I see in the cache directory when I install a package? 2015-08-26 18:13:13 <_ikke_> the packages 2015-08-26 18:16:31 kk. thanks. I'm guess they wont show up until I rerun like an apk install/add on a package. 2015-08-26 18:16:39 <_ikke_> right 2015-08-26 18:16:45 anyway to get stuff into the cache that I have already installed from before it was setup? 2015-08-26 18:17:02 <_ikke_> not sure 2015-08-26 18:18:03 oh I'm silly 2015-08-26 18:18:08 there's an apk cache command :D 2015-08-26 18:18:31 <_ikke_> oh, good 2015-08-26 18:27:53 in alpine firewall is enablet by default? 2015-08-26 18:27:59 *enabled 2015-08-26 18:30:36 <_ikke_> no 2015-08-26 18:35:41 hmm, package cache is there now. but not seeing it re-install on reboot. I'm thinking the setup-alpine might have wiped the packages that I had in my world 2015-08-26 18:35:44 ACTION checks 2015-08-26 18:36:02 nope. 2015-08-26 18:36:04 hmm that's odd 2015-08-26 18:36:43 ok 2015-08-26 18:36:52 I'm liking how everything is setup for sure, overall. Nice distro 2015-08-26 18:42:57 busybox ntp seems broken 2015-08-26 18:43:04 or atleast the defaults 2015-08-26 18:45:01 hmm also seems like setup-xorg-base doesn't allow for startx as it looks for xfce 2015-08-26 19:01:12 Sleaker: !!! 2015-08-26 19:01:20 sup? 2015-08-26 19:02:06 for security i control /media/cdrom/apk/x86_64 2015-08-26 19:02:25 and there is wpa supplicant eand wireless tool! 2015-08-26 19:02:38 in mini without your mod 2015-08-26 19:02:55 one moment 2015-08-26 19:05:26 http://sprunge.us/LBAf 2015-08-26 19:05:41 this is the list of all package in alpine mini 2015-08-26 19:06:06 ops 2015-08-26 19:06:10 ScrumpyJack not Sleaker 2015-08-26 19:06:12 scuse me Sleaker 2015-08-26 19:06:19 ScrumpyJack: ^ 2015-08-26 19:14:34 hmm _ikke_ what seems lke is happening is when I reboot, packages don't get pre-installed again until I run like an apk add command, then everything gets sucked back in and reinstalled 2015-08-26 19:14:59 <_ikke_> That's odd, but I know too little of it to be of any help 2015-08-26 19:19:13 hmm yah also graphical desktops seem to hardlock the VM 2015-08-26 20:02:46 ScrumpyJack: I did a diff between two versions of packages http://sprunge.us/LHcG 2015-08-26 20:20:03 https://pkgs.alpinelinux.org/package/main/x86/network-extras 2015-08-26 20:30:56 vrs: I think there was a change in the new version that broke the sed command 2015-08-26 20:31:08 however I think I have it fixed, there is just a dependency issue which I'm not sure how to handle 2015-08-26 20:31:35 since openssh and openntpd both depend on having /var/empty existing 2015-08-26 20:46:31 uhm 2015-08-26 20:46:50 apk add mkfs.ext4 ? 2015-08-26 20:46:58 where is mkfs.ext4? 2015-08-26 20:47:28 <_ikke_> something like fstools 2015-08-26 20:48:11 ok thanks 2015-08-26 20:50:58 <_ikke_> e2fsprogs is it 2015-08-26 21:02:24 https://pkgs.alpinelinux.org/contents?filename=mkfs.ext4&path=&pkgname=&repo=all&arch=x86_64 2015-08-26 21:02:25 yep :) 2015-08-26 21:02:31 thanks _ikke_ 2015-08-26 22:46:40 vrs: I'm submitting a patch for openntpd shortly 2015-08-26 23:17:06 well I kind of found my issue. 2015-08-26 23:17:16 vmgrfx_dri.so is missing so X locks up right away 2015-08-26 23:18:38 might have been cause I was missing the mesa driver, so I'll try that first 2015-08-26 23:19:34 and yah looks like packages aren't restored on boot for me right now :( 2015-08-26 23:19:40 hmm need to resolve this tomorrow 2015-08-27 08:04:58 hi 2015-08-27 08:23:11 Hello... 2015-08-27 08:23:59 Does Alpine have 'multicast routing' capabilities? I've been looking for 'mrouted', but it's not available as apk... Is there something else / newer? 2015-08-27 08:53:57 ncopa: grsecurity will now provide stable patches only for paid customers. How do you feel about it? 2015-08-27 08:54:16 https://grsecurity.net/announce.php 2015-08-27 08:57:16 danci1973, i've done only very limited multicast routing tests. mostly with igmpproxy 2015-08-27 08:59:25 fabled: Thanks, will look into igmpproxy... I haven't done any multicast routing so far, but apparently some Java clustering software requires multicast, so I'm looking into it beforehand. 2015-08-27 08:59:49 igmpproxy does not scale. it's mostly just to get multicast from WAN to LAN 2015-08-27 09:00:02 if you need full internal multicast routing, it requires PIM or similar 2015-08-27 09:24:13 fabled: PIM ? :) 2015-08-27 09:49:06 slashbeast: we saw it 2015-08-27 09:49:43 i will probably be busy today 2015-08-27 11:50:18 Sleaker: you resolved your issue? 2015-08-27 14:33:58 ScrumpyJack: not quite, was just opening up the VM here. 2015-08-27 14:34:08 still not sure why apks don't get installed at boot from the cache 2015-08-27 14:34:48 maybe I need to add a init script for that but I thought alpine would auto-load that from the /etc/apk/world and restore those packages if they were in the cache automatically 2015-08-27 14:41:46 ScrumpyJack: so Xorg doesn't blow up anymore, and it looks like the vmwgfx is loading properly, but I still don't get any input when it's running. 2015-08-27 14:53:39 so you have alpine as a guest VM on a ESXi host? 2015-08-27 14:54:03 or is "VM" used lightly to mean guest. what product? 2015-08-27 14:54:11 yah VMware Workstation 10 2015-08-27 14:54:49 seems to run okay, but Xorg seems to not accept input if I try to install like xfce4 or awesome. 2015-08-27 14:55:20 not really seeing any logs in here that can tell me why either. but the other issue was that I wasn't seeing alpine restore installed packages from cache on reboot even though I've used lbu ci to store changes 2015-08-27 14:55:43 try rc-update add dbus && rc-update add udev 2015-08-27 14:55:44 also /etc/apk/cache/installed is a blank file, not sure if that has anything to do with it 2015-08-27 14:57:42 oh hmm, dbus wasn't running heh. 2015-08-27 14:58:06 in VMware workstation, present a disk to the alpine guest, and do a disk install. that might get round the cache issue. the workaround is "apk fix" after a boot to load the apks from cache 2015-08-27 14:58:08 welp that fixed the input issue 2015-08-27 14:58:19 \o/ 2015-08-27 14:58:51 ScrumpyJack: well, it loads my committed backup just fine on boot. and has all my settings, it's just not re-installing packages? 2015-08-27 14:59:27 trying to get this working on a VM cause I'm wanting to just reboot into the USB and run that live eventually not using the vm guest. 2015-08-27 15:00:15 i see 2015-08-27 15:00:30 so more of a testbed to make sure things go smoothly at this point. 2015-08-27 15:01:20 does apk fix load your extra apks? 2015-08-27 15:01:43 let me reboot and see 2015-08-27 15:01:52 I think it probably does, apk upgrade does. 2015-08-27 15:02:32 yup 2015-08-27 15:03:00 apk update && apk upgrade && lbu commit && reboot 2015-08-27 15:03:32 also, try apk cache sync 2015-08-27 15:04:01 apk update && apk upgrade && apk cache sync && lbu commit && reboot :) 2015-08-27 15:04:17 I can see everything in /etc/apk/cache. 2015-08-27 15:04:24 but yah after reboot still no change 2015-08-27 15:04:51 you may want to fsck your usb stick too 2015-08-27 15:05:16 can you poweroff and fsck it on a linux box? what's the fs? 2015-08-27 15:05:23 fat32. 2015-08-27 15:06:20 ok, dosfsck /dev/id 2015-08-27 15:06:32 windows doesn't detect any problems with the drive itself 2015-08-27 15:06:40 it will tell you if the dirty bit is set 2015-08-27 15:06:52 and ask to clear it 2015-08-27 15:06:56 like I can make changes to the base os with lbu ci 2015-08-27 15:07:12 and settings hold, it just never tries to reinstall packages is all 2015-08-27 15:07:23 there any documentation on what triggers that, and when it should happen? 2015-08-27 15:07:39 give fsck a shot 2015-08-27 15:08:47 nothing wrong 2015-08-27 15:08:49 (usb stick unmounted of course) - you confortable with all this, or do you want the command? 2015-08-27 15:08:52 ok 2015-08-27 15:09:12 yah I do systembuilder stuff with Ubuntu so nothing is really out of comfort :P 2015-08-27 15:10:38 what's in /etc/apk/repositories ? 2015-08-27 15:10:50 ignore that, as apk fix works 2015-08-27 15:13:00 yah just seems odd :P 2015-08-27 15:23:42 perhaps apk sees the original world file when it checks for packages to install, and the one from your apkovl hasn't made it to /etc/apk yet 2015-08-27 15:24:42 or perhaps the simlink /etc/apk/cache doesn't resolve at that point cause /media/usb/ isn't mounted 2015-08-27 15:24:49 all speculation 2015-08-27 15:25:14 yah 2015-08-27 15:25:26 do you know when it does the checks for all that? which scripts they are in? 2015-08-27 15:25:35 I guess I could resolve it by just adding an init script. 2015-08-27 15:28:28 world contains /media/dev/apks so it's the path to the original apks, not the ones you add. the ones you add go in cache, along with updates of the originals 2015-08-27 15:28:57 (i'm thinking aloud) 2015-08-27 15:35:27 Sleaker: my guess is that the usb isn't mounted to /media/usb/ at the point it tries to install packages on the boot, so the cache symlink doesn't work 2015-08-27 15:35:52 might need to change the cache symlink to whatever mount point is available during boot 2015-08-27 15:36:13 ACTION seems to remember something like this before, but can't remember more details 2015-08-27 15:36:48 hmm, the fstab in the initramfs tries to mount /dev/usbdisk /media/usb vfat 2015-08-27 15:37:09 yah it definitely mounts it as readonly 2015-08-27 15:37:57 does /dev/usbdisk exist at that point? 2015-08-27 15:38:10 yes. 2015-08-27 15:38:22 points to /dev/sda1 as does /dev/usba1 2015-08-27 15:38:33 I dont have a HD installed on the VM atm 2015-08-27 15:41:32 the init script in the initramfs is your answer 2015-08-27 15:45:16 thanks 2015-08-27 15:57:55 do you have another usb stick you could try? something expensive and "fast" 2015-08-27 16:00:55 i have found a usb stick with the same problem 2015-08-27 16:01:43 fsck says: 0x41: Dirty bit is set. Fs was not properly unmounted and some data may be corrupt. 2015-08-27 16:06:00 what does mount -v|grep usb say? 2015-08-27 16:09:35 ok, so changing ro to rw for /dev/usbdisk in fstab helped 2015-08-27 16:11:05 the apks load at boot, but i get an error on boot: 2015-08-27 16:11:41 mount: mounting /dev/id on /media/usb failed: resource busy 2015-08-27 16:13:45 that looks like it's from init 2015-08-27 16:21:35 where are you seeing those logs? dmesg? 2015-08-27 16:27:18 k testing with rw instead of ro 2015-08-27 16:27:26 not sure I like that change though 2015-08-27 16:28:06 seemed to work 2015-08-27 16:30:12 ScrumpyJack: is there a way to get a /var/log/syslog like other systems? alpine doesn't seem to generate one by default just a messages directory. seems like since there's no rsyslog I'm at a loss as to where syslog is configured too 2015-08-27 16:30:27 I guess I could install rsyslog to take over 2015-08-27 16:37:12 inetutils-syslogd will also give you split logs http://hastebin.com/fukupofuye.avrasm & run a little lighter than rsyslog 2015-08-27 16:52:47 ah sweet thanks BitL0G1c 2015-08-27 16:53:43 socklog is quite good too - it also has built in log rotation 2015-08-27 16:53:59 hmm is that syslog-ng ? 2015-08-27 16:54:07 cause inetutils-syslog isn't a valid apk 2015-08-27 16:54:22 inetutils is in testing repo 2015-08-27 16:54:41 ncopa, any idea why the busybox package has a /linuxrc symlink? 2015-08-27 16:54:58 afaik it's not useful for anything and it makes tab-completion for /lib/ fail :-p 2015-08-27 16:55:19 Sleaker uncomment testing in /etc/apk/rep* 2015-08-27 16:55:26 ah 2015-08-27 16:55:48 I'm not on edge atm 2015-08-27 16:55:57 what's the difference between edge and edge/testing 2015-08-27 16:57:08 testing is testing - new aports live there until someone besides the maintainer asks for the package to go into main 2015-08-27 16:57:29 edge is bleeding edge versions of software in main 2015-08-27 16:58:21 Hello, what distro is alpine based? 2015-08-27 16:58:33 it's its own distro 2015-08-27 16:58:37 not based on anything else 2015-08-27 16:58:51 Does the packages are signed with gpg? 2015-08-27 16:58:56 yes 2015-08-27 16:59:00 oh wow 2015-08-27 16:59:10 wow? 2015-08-27 16:59:19 there is a distribution that doesn't sign packages? 2015-08-27 16:59:26 gentoo? 2015-08-27 16:59:31 :P 2015-08-27 16:59:31 gentoo sign portage 2015-08-27 16:59:36 ^ 2015-08-27 16:59:47 Not on default settings, do they? 2015-08-27 16:59:56 no, not in default 2015-08-27 17:00:03 isn't that because gentoo is source based? 2015-08-27 17:00:25 can I ask what is alpine exactly? 2015-08-27 17:00:33 doesn't make a difference, it would be great to have signed ebuilds by default :) 2015-08-27 17:01:12 newuseralpine: distrowatch has a definition if you want that link 2015-08-27 17:01:24 http://distrowatch.com/table.php?distribution=alpine 2015-08-27 17:01:27 Sleaker: I mean, busybox+gresecurity? 2015-08-27 17:01:41 jersey-security 2015-08-27 17:01:57 and openrc :D 2015-08-27 17:02:14 but honestly that's just what binaries it uses to setup the system 2015-08-27 17:02:38 Is it Alpine audited?. Or has it been audited? 2015-08-27 17:02:48 What do you want to get audited? 2015-08-27 17:02:54 alpine is a Linux distribution that is security focused and lightwight built on musl and busybox 2015-08-27 17:02:55 the code? 2015-08-27 17:03:17 The code of what exactly? 2015-08-27 17:03:33 the base distro 2015-08-27 17:03:38 to start :P 2015-08-27 17:03:58 that's a no, I imagine 2015-08-27 17:04:19 Your question doesn't make much sense 2015-08-27 17:04:36 Audited by who? What do you mean by base distro? The whole linux kernel? grsec? bash? 2015-08-27 17:05:16 Does your distro had been audited? Doesn't make sense?. The other things had been audited, yes. But I imagine Alpine have custom stuff, right? 2015-08-27 17:05:56 newuseralpine: from what I can see so far alpine only has setup scripts to install stuff, I'm not sure that is relevant for security auditing. 2015-08-27 17:06:04 the base system is root open with no password. 2015-08-27 17:06:16 I see, thanks 2015-08-27 17:06:20 it's up to the user to configure the distribution 2015-08-27 17:06:36 and/or during install. 2015-08-27 17:07:34 but the about page explicitly states they compile the packages Position Independent to prevent stack smashing, along with using grsec/PaX kernel out of the box 2015-08-27 17:08:14 newuseralpine: are you mistaking user security for code audit? 2015-08-27 17:08:20 no 2015-08-27 17:09:15 http://git.alpinelinux.org/ <- that's alpines repos 2015-08-27 17:09:22 thx! 2015-08-27 18:50:50 ScrumpyJack: well when I switched it to rw I don't see the error message you were getting anywhere so I think that's working fine,. 2015-08-27 19:57:17 hello 2015-08-27 19:57:23 i need some help 2015-08-27 19:57:45 alpine is rejecting console login using getty 2015-08-27 19:57:50 for some reason 2015-08-27 19:57:59 works over ssh 2015-08-27 20:38:17 api984: same or different user? 2015-08-27 20:39:00 root does not work 2015-08-27 20:39:07 and new user does not work 2015-08-27 20:39:13 ssh login works 2015-08-27 20:39:25 getty is having trouble or? 2015-08-27 20:39:29 inittab? 2015-08-27 20:39:35 strange 2015-08-27 20:39:39 alpine linux 2.6 2015-08-27 20:41:17 hmm sorry, dunno I'm using latest 2015-08-27 20:42:11 same rules apply 2015-08-27 20:42:19 kind of. 2015-08-27 20:42:23 i dont think tere is that much difference 2015-08-27 20:43:01 where is auth on alpine 2015-08-27 20:43:08 only /etc/shadow? 2015-08-27 20:43:31 /etc/passwd and /etc/shadow 2015-08-27 20:43:40 pretty sure that's just linux normal stuff 2015-08-27 20:44:14 can you check messages 2015-08-27 20:44:24 and see what it shows when you attempt the login? 2015-08-27 20:44:44 or auth.log might show too. 2015-08-27 20:51:31 seems odd, but ps doesn't show a getty process running for me on tty1 ever 2015-08-27 20:58:15 ah I was still logged in 2015-08-27 20:58:34 api984: if you login on ssh are the getty processes still running? 2015-08-27 21:06:20 Any news on what's happening? 2015-08-27 21:06:24 With grsec and all? 2015-08-27 21:06:26 yes they are 2015-08-27 21:06:39 They are what? 2015-08-27 21:11:20 oh he was having login issues locally but can login fine over ssh 2015-08-27 21:11:41 api984: anything show in /var/log/messages ? 2015-08-27 21:16:55 no … thats bad 2015-08-27 21:17:01 i enabled sshd logging 2015-08-27 21:17:04 not sure why 2015-08-27 21:17:14 do you have a syslog? 2015-08-27 21:17:17 might be in there too 2015-08-27 21:17:31 yes 2015-08-27 21:17:35 also when you say it can't login, does it just give a rejection? 2015-08-27 21:17:38 i will try another thing to configure 2015-08-27 21:17:41 or does it hang 2015-08-27 21:19:05 does not hang 2015-08-28 12:46:01 hi all. is there any repo for alpha or beta software? i want to build proto3 (beta) to use in my alpine + go apps but not sure if i should maintain my own repo for that or use a repo you guys may have for this sort of thing. 2015-08-28 12:47:25 btw, proto3 is protobuf-3.0.0-beta-1 2015-08-28 13:27:07 ppires, isn't it the testing repo? 2015-08-28 13:30:34 GM 2015-08-28 13:30:57 there is any project to translate the wiki? 2015-08-28 13:37:07 hmm is there no openjdk-jdk for alpine? 2015-08-28 13:37:26 not seeing it anywhere. there's jre but not jdk, I find it a bit odd that it's missing 2015-08-28 13:40:02 openjdk8 2015-08-28 13:40:03 in edge 2015-08-28 13:41:11 there's no openjdk8-jdk ncopa 2015-08-28 13:41:21 looks like alpine only builds jre-base 2015-08-28 13:41:24 and jre 2015-08-28 13:41:40 and then openjdk8 package itels? 2015-08-28 13:41:44 itself? 2015-08-28 13:41:47 ah 2015-08-28 13:42:04 i thought of it the other day though 2015-08-28 13:42:15 i think we shoudl have a -headless package or similar 2015-08-28 13:42:18 just named differently 2015-08-28 13:42:21 yeah 2015-08-28 13:42:54 yah used to debian naming scheme which just uses the main package name as a virtual package 2015-08-28 13:43:18 and then has openjdk-X-jre openjdk-X-jdk openjdk-X-jre-headless etc 2015-08-28 14:05:37 ncopa: I don't know if you saw my earlier message when I was going to install alpine, but currently the webpage/wiki have no information on the difference between the images. 2015-08-28 14:06:20 it would be helpful to have a small page or link to wiki that gives a short explanation of the differences or what comes pre-installed on them. 2015-08-28 14:06:31 Sleaker: yes 2015-08-28 14:06:37 i agree 2015-08-28 14:06:39 infact 2015-08-28 14:06:46 it should be on the download page 2015-08-28 14:06:57 also, are there instructions on how to remaster? 2015-08-28 14:07:33 http://wiki.alpinelinux.org/wiki/How_to_make_a_custom_ISO_image 2015-08-28 14:07:36 like I'm using a USB install with lbu, and there are a few things I'd like in the base system 2015-08-28 14:07:45 i havent verified it it is up2date 2015-08-28 14:07:53 awesome, that's alright 2015-08-28 14:08:05 you have hover the mouse on http://alpinelinux.org/downloads/ 2015-08-28 14:08:13 but i agree, downloads page needs a remake 2015-08-28 14:08:58 and this isn't noted anywhere but lbu/restore of packages doesn't work on USB boot unless you change /media/usbdisk in fstab to mount,rw (it's defaulted to mount,ro) 2015-08-28 14:09:16 not sure why it needs write permissions to reload the apks 2015-08-28 14:09:23 but currently that seems to be the case 2015-08-28 14:09:34 hm 2015-08-28 14:09:40 i thought that should have worked 2015-08-28 14:10:00 i think it is enough that /media/usbdisk is in fstab 2015-08-28 14:10:06 lbu restored properly 2015-08-28 14:10:07 even if it is mount ro 2015-08-28 14:10:11 but it never loads the apks 2015-08-28 14:10:32 do you have the apk cache setup? 2015-08-28 14:10:37 yah 2015-08-28 14:10:40 all the links were there 2015-08-28 14:10:49 as soon as I logged in I could run apk fix and it reinstalled everything 2015-08-28 14:11:03 ok 2015-08-28 14:11:15 i think it is a bug 2015-08-28 14:11:28 I can file on the tracker if that would help 2015-08-28 14:11:43 when you use /dev/usbdisk in lbu.conf 2015-08-28 14:11:57 /media/usb that is 2015-08-28 14:12:08 and in syslinux have alpine_dev=UUID=.... 2015-08-28 14:12:34 seems odd that it would work with rw set in fstab though. 2015-08-28 14:12:49 yes hm 2015-08-28 14:13:41 i have a plan for remove the need of alpine_dev 2015-08-28 14:13:45 as boot option 2015-08-28 14:13:58 and have a new, magic /media/bootdev 2015-08-28 14:14:08 currently it only works if you boot from media that is on USB bus 2015-08-28 14:14:13 and if it is fat 2015-08-28 14:14:44 i have an idea how to do it 2015-08-28 14:15:15 it should also make it easier to do efi and iso hybrid 2015-08-28 14:15:27 hmm, well current system seems to be working except that one minor thing. not sure if setting the /media/usbdisk to rw is really a problem. 2015-08-28 14:15:47 normally not 2015-08-28 14:26:34 lol apk add failing now cause tmpfs is 100% 2015-08-28 14:26:48 hmmm 2015-08-28 14:27:16 Sleaker, yes, the tmpfs run format is not suitable for all installs... if you want to add all gazillion packages. 2015-08-28 14:27:38 but it's superior if you just want simple host; or to run a router with simple services 2015-08-28 14:27:59 oh yah 2015-08-28 14:28:09 I'm playing around with things fabled 2015-08-28 14:29:13 also not a gazillion :P 2015-08-28 14:29:18 only 200ish right now 2015-08-28 14:29:40 obv java is the culprit here though 2015-08-28 14:29:48 it's what? 140mb or so by itself 2015-08-28 14:32:30 yeah 2015-08-28 14:33:30 java in tmpfs.. 2015-08-28 14:33:33 :) 2015-08-28 14:40:32 lol yah that's why I was mentioning remastering :P 2015-08-28 15:00:18 alacerda: probably, not sure 2015-08-28 15:00:49 thought testing was intended for testing to-be-releases packages, not beta stuff. 2015-08-28 15:00:56 please correct my assumption if wrong! 2015-08-28 15:01:09 s/to-be-releases/to-be-released 2015-08-28 15:03:07 im kinda happy that support for jumboframes went in to lxc 2015-08-28 15:58:09 anybody gotten nodejs to run on the arm version of alpine? 2015-08-28 16:20:25 atomi, have not tried. though arm/edge is having issue currently due to gcc5.1. i'm working on it currently. 2015-08-28 16:20:33 is nodejs built even? 2015-08-28 16:20:44 seems it should be 2015-08-28 16:22:03 lol 2015-08-28 16:22:04 ../deps/v8/src/base/atomicops_internals_arm_gcc.h:258:4: error: #error "Your CPU's ARM architecture is not supported yet" 2015-08-28 16:22:04 # error "Your CPU's ARM architecture is not supported yet" 2015-08-28 21:42:22 is there an up-to-date guide to installing alpine on a vps over top of an existing distro? 2015-08-28 22:59:31 dalias: i don't think so 2015-08-28 23:00:22 if it's tolerable to need a few quick attempts, it'd probably go the very cowboy way of making an alpine install in a vm 2015-08-28 23:00:41 and then tar - -czf / to ssh cd / ; tar -xf 2015-08-28 23:00:57 i don't think there's much to go wrong 2015-08-28 23:01:10 need to bind mount / some place and do mknods for /dev 2015-08-28 23:01:13 installing the kernel? 2015-08-28 23:01:15 fs uuids 2015-08-28 23:01:21 well also copy /boot? 2015-08-28 23:01:32 mknod should not be needed. you want devtmpfs 2015-08-28 23:01:41 then even easier 2015-08-28 23:02:13 if you can break it without harm, it could be worth a try to do the easiest thing around 2015-08-28 23:02:25 instead of treating it like a prod box :) 2015-08-28 23:02:42 but of course a guide would be helpful 2015-08-28 23:03:35 oh YUCK 2015-08-28 23:03:44 you just made me log on a vps host of mine 2015-08-28 23:03:48 found out it's running 3.0 2015-08-28 23:03:49 :) 2015-08-28 23:09:16 :) 2015-08-28 23:09:23 it would be really nice to have a script to do this 2015-08-28 23:13:59 clandmeter, are you around? just tried xterm package and it's broken :-p 2015-08-28 23:14:15 clandmeter, it looks like it selected legacy bsd ptys rather than posix ones at compile-time 2015-08-28 23:14:26 judging from the error messages and strace 2015-08-28 23:49:33 clandmeter, http://sprunge.us/fKJA <-- xterm fixes 2015-08-28 23:57:00 darkfaded, it seems to me that there should be some way to extract the installer cd's initrd to a tmpfs, chroot into that tmpfs, and have it run the installer just like it booted off a cd 2015-08-29 00:15:15 dalias & clandmeter http://patchwork.alpinelinux.org/patch/518/ - tested & works ok 2015-08-29 00:16:16 :) 2015-08-29 00:16:36 now does anyone have install-on-vps ideas for me? :( 2015-08-29 00:20:34 I run dnscrypt+ unbound is great for dns & fwknop is great for completely stealthing ssh & psad for an auto ids 2015-08-29 00:21:45 setup-dnscrypt takes care of the settings 2015-08-29 00:24:29 some notes for fwknop http://it-offshore.co.uk/security/53-stealth-your-ssh-port-ssh-into-lxc-containers 2015-08-29 00:40:18 ? 2015-08-29 00:42:27 i'm just looking for an idea how to do the installation when the host doesn't provide a "provide your own iso" option 2015-08-29 00:44:52 maybe i should just go with vultr 2015-08-29 01:02:17 dalias - something like http://www.lowendtalk.com/discussion/2830/kvm-install-any-os-if-the-host-doesn-t-allow-custom-isos-or-you-need-more-ram-for-the-installer 2015-08-29 01:05:55 heh that's not a bad method :-p 2015-08-29 01:06:26 simple & effective 2015-08-29 04:29:12 anybody here come to alpine from arch linux? 2015-08-29 05:49:56 alipne edge armhf seems to have nodejs-0.12.7-r0.apk and it installed 2015-08-29 05:50:18 but neither npm nor node command is found 2015-08-29 05:53:10 hmmm okay I got the right image 2015-08-29 05:53:20 seems to just exit without any error 2015-08-29 06:03:07 yeah npm isn't working on edge for armhf 2015-08-29 06:22:28 oh the version in edge is designed for Armv7 2015-08-29 06:44:18 where can I request a package be added? 2015-08-29 10:08:39 atomi: bugs.alpinelinux.org 2015-08-29 11:57:35 Hi I'm trying to use the graphicsmagick@testing package however i'm getting a ' No decode delegate for this image format' error which suggests that gm on alpine isn't configured to process images to jpgs. Anyone have any experience with this? 2015-08-29 13:44:21 nvm just going to use imagemagick instead. 2015-08-29 22:32:59 anybody here using weechat under alpine? 2015-08-29 22:33:26 whey I try to run weechat, it fails with Could not find platform independent libraries 2015-08-29 22:33:31 (and some more) 2015-08-29 22:34:43 ah, python is an undeclared dep 2015-08-29 22:34:46 installing it fixed it 2015-08-29 22:48:27 vrs - weechat is v1.3 now 2015-08-29 22:49:08 ah right, edge repo 2015-08-29 22:50:34 oh snrk it needs an update too 2015-08-29 22:50:50 oh well 2015-08-29 22:51:12 yes - I can send with the update & depends 2015-08-29 23:11:13 sent update to 1.3 + python depends 2015-08-30 02:29:08 wow the ocaml in testing is ... old 2015-08-30 03:36:40 <_xs> ola! migrating an old website spliced in three CMS, using apache2.4 mariadb5.5 and php5; adodb connection for the first always fail, the others CMS are working perfectly with the same user and the same DB. There is same php extensions, same apache modules and mysql modules than the other server. 2015-08-30 03:36:47 <_xs> what should i check ? 2015-08-30 03:47:26 <_xs> Fixed: wrong mysqli backend from the old config file of the CMS . sorry 2015-08-30 07:35:33 var/cache/misc/mdocml-1.13.3-r4.trigger: exec: line 4: /usr/sbin/makewhatis: not found 2015-08-30 07:36:31 <_xs> install it 2015-08-30 07:36:47 <_xs> ? 2015-08-30 07:37:18 makewhatis (missing) 2015-08-30 07:37:35 <_xs> isn't a part of the doc system ? 2015-08-30 07:37:42 man is installed 2015-08-30 07:51:07 apropos, whatis and makewhatis have been splited from the mdocml package 2015-08-30 07:51:18 and man is just a deprecated alias for mdocml 2015-08-30 07:51:21 see: http://git.alpinelinux.org/cgit/aports/commit/?id=8d777a4e2a8eaf92f9cca8d9d64f5d84ca9e53ba 2015-08-30 07:52:11 atomi: why don't you upgrade it then? 2015-08-30 13:52:08 nmeum, upgrade what? 2015-08-30 13:58:35 hi 2015-08-30 13:59:35 atomi: sorry, that was a tab completion fail 2015-08-30 14:00:44 i'm trying to find a driver for my wifi card and after writing lspci command get a bounch of numbers i dont understand 2015-08-30 14:01:20 could you please tell me how to decode it sa i know what driver is there to use ? 2015-08-30 14:01:29 i'm new to linux 2015-08-30 14:01:50 so* 2015-08-30 14:04:13 lspci | grep -i wireless shows nothing 2015-08-30 14:20:10 finally got it ;> BCM4318 [AirForce One 54g] 802.11g Wireless LAN Controller 2015-08-30 14:21:22 serpent: busybox version of 'lspci' doesn't show everything 2015-08-30 14:33:02 yes it was some of copy and paste task :D 2015-08-30 15:05:35 \o/ 2015-08-30 15:05:41 I am on my Alpine guest now 2015-08-30 15:05:48 With weechat working (needed me to install python) 2015-08-30 15:12:56 <_xs> great! 2015-08-30 15:13:57 <_xs> serpent: look at the kernel driver in use field 2015-08-30 15:14:15 <_xs> it's the last one using lspci -v 2015-08-30 15:14:59 <_xs> you'll have to install lscpi from linux utils i guess 2015-08-30 15:24:21 thx 2015-08-30 15:24:41 im gonna get a breake now :D 2015-08-30 15:24:45 c u 2015-08-30 17:51:45 package website down? 2015-08-30 19:54:41 <_ikke_> aparently 2015-08-30 20:01:46 I am having some problems compiling Minetest on Alpine Linux. I get the following "Could NOT find CURL (missing: CURL_LIBRARY CURL_INCLUDE_DIR)", but Curl is installed. Running curl -V gives me "curl 7.42.1 (i486-alpine-linux-musl) libcurl/7.42.1 OpenSSL/1.0.2d zlib/1.2.8 libssh2/1.5.0", do I perhaps need another package? 2015-08-30 20:02:11 iio7: you need the dev package of curl 2015-08-30 20:02:16 so that you get the header files 2015-08-30 20:02:51 leo-unglaub, thank you very much! 2015-08-30 21:44:52 compiling 2015-08-30 21:45:03 my beer is compiling 2015-08-30 21:45:14 :3 2015-08-31 08:38:40 dalias: http://git.alpinelinux.org/cgit/aports/commit/?id=4bec2947 2015-08-31 14:07:57 clandmeter, :) 2015-08-31 14:32:42 does anyone where use hexchat? 2015-08-31 14:41:09 what about it 2015-08-31 14:41:57 sillysausage, why? 2015-08-31 14:42:11 i was having issues with it finding the certs 2015-08-31 14:42:19 for example i connected to a network (with a signed cert) 2015-08-31 14:42:34 and was getting Verify E: unable to get local issuer certificate.? (20) -- Ignored 2015-08-31 14:42:52 what about #hexchat ? 2015-08-31 14:43:19 i did ask in there but nobody answered, i thought it might have been something wrong with the package 2015-08-31 14:43:22 not finding /etc/ssl/certs/ 2015-08-31 14:43:25 as that exists. 2015-08-31 14:45:01 https://github.com/hexchat/hexchat/issues/965 2015-08-31 14:45:12 accepting invalid certs is hardly a workaround 2015-08-31 14:45:51 what was interesting is freenode worked with it 2015-08-31 14:45:53 and ssl 2015-08-31 14:46:37 maybe it doesn't have the StartSSL CA 2015-08-31 14:48:10 err StartCom 2015-08-31 14:50:37 ca-cert-StartCom_Certification_Authority.pem 2015-08-31 14:50:39 ca-cert-StartCom_Certification_Authority_2.pem 2015-08-31 14:50:41 ca-cert-StartCom_Certification_Authority_G2.pem 2015-08-31 14:50:45 well those seem to be in my /etc/certs/ssl 2015-08-31 16:06:32 Hello, I have a question 2015-08-31 16:07:32 How does Alpine Linux compare to QubesOs? 2015-08-31 16:07:58 In security I mean 2015-08-31 16:11:58 Newask: I'm not sure how you plan to compare them. Alpine Linux is just a "regular" Linux distribution, while QuebesOS is an OS based on security through isolation, everything (if desired) is run inside of a different VM. 2015-08-31 16:13:26 Couldn't this be done in Alpine Linux through virtual machines? 2015-08-31 16:13:56 Newask: yes, but it's going to take a _huge_ amount of work, and you will have to code a lot of stuff if you want to get the same functionality 2015-08-31 16:15:09 Newask: you can of course create VMs on Alpine, but you won't get all the desktop integration (you will have to connect to each VM using vnc and launch the apps inside) 2015-08-31 16:15:38 Thank you royger, you are awesome :) 2015-08-31 18:14:55 ncopa: are packages in the APK_REPOS just installed at boot time into the environment? when creating a custom image. 2015-08-31 18:15:09 like do they end up in tmpfs or a different location 2015-08-31 21:33:17 ncopa: out of curiousity, do you make alpine for free, or do you sell support, etc? 2015-08-31 21:33:40 feel free to not answer.