2017-05-01 00:00:03 <trfl> yeah, as an offline cache that you can easily query locally... still trying to think of when but I've been in situations where I wanted to query which package contains a file without internet access :p
2017-05-01 00:00:20 <trfl> (realizing it's usually pointless since you can't install it anyawys but still)
2017-05-01 00:15:18 <__number5__> trfl: isn't that's what apk does? apk search only search local db
2017-05-01 00:15:59 <Shiz> not quite
2017-05-01 00:15:59 <Shiz> it only shows file listings for installed packages
2017-05-01 00:15:59 <Shiz> not for non-installed ones
2017-05-01 00:16:09 <Shiz> so not for all packages in its db
2017-05-01 00:18:31 <__number5__> Shiz: search file with this https://pkgs.alpinelinux.org/contents  (yes, not offline)
2017-05-01 00:18:53 <Shiz> yes, that was exactly the point
2017-05-01 00:18:56 <Shiz> lol
2017-05-01 01:27:45 <dirac1> anyone here uses borgbackup?
2017-05-01 01:49:53 <pickfire> __number5__: I hate going to search online just for that, I like something like pacman -Fs.
2017-05-01 01:50:06 <pickfire> 
ACTION just found out that the online site works well with elinks.

2017-05-01 02:08:58 <__number5__> yep, any simple web form can be treated like an api ;)
2017-05-01 02:11:16 <ryonaloli> just in case it's helpful https://github.com/minipli/linux-unofficial_grsec/tree/linux-4.9.x-unofficial_grsec
2017-05-01 02:22:50 <nymacro> Hopefully someone can tell me that I'm doing something wrong: I am trying to create an Alpine install with a ZFS root. Firstly I installed Alpine to USB, along with ZFS packages. I then subsequently created a /boot (ext2) partition, and a ZFS partition on the disk I actually want to install on. After configuring ZFS, I mount everything up and do a `setup-disk -m sys /mnt` (/mnt is where my ZFS root,
2017-05-01 02:22:56 <nymacro> and /boot is mounted).
2017-05-01 02:23:59 <nymacro> Numerous packages fail their post-install scripts -- causing things to not work very well (the scripts exit with error 1. Which is not particularly informative). Attempting to chroot into the /mnt'ed and fix up the packages also causes the same issues with post-install/post-upgrade steps
2017-05-01 02:24:21 <nymacro> I believe this mode of installation is supported; but am I doing something silly?
2017-05-01 02:25:31 <nymacro> (I can't directly install to a ZFS root, because the default install media mounts has a read-only /, and also uses a different kernel version to the actual install)
2017-05-01 02:29:24 <TemptorSent> nymacro - What does your dataset hierarchy look like? ZFS mounts using different semantics than standard filesystems, creating the directory rather than mounting over it.
2017-05-01 02:29:49 <TemptorSent> nymacro And how are the post-install scripts failing?
2017-05-01 02:30:12 <nymacro> I set the alt-root of my pool to /mnt when installing
2017-05-01 02:30:58 <TemptorSent> nymacro: What does the tree under /mnt look like befor install? I'm wondering if it's something simple, like perms on /tmp.
2017-05-01 02:31:02 <nymacro> either via `zfs create -R /mnt` when I first created the pool, or `zfs import -N -R /mnt` after it was already created (I tried a few different times)
2017-05-01 02:31:16 <TemptorSent> No sub datasets?
2017-05-01 02:31:47 <nymacro> yeah; /, /home, /root, /var (and various other /var subvolumes)
2017-05-01 02:32:15 <TemptorSent> Is /tmp on a tmpfs then?
2017-05-01 02:32:35 <nymacro> actually. I don't think I created a /tmp on the mount ...
2017-05-01 02:32:58 <TemptorSent> Hmm, that could be a problem if you don't have the right perms...
2017-05-01 02:33:01 <nymacro> that might be it lol. Unfortuntely, I wasn't able to find any logs from apk, and the only error I had to go off was "error 1"
2017-05-01 02:33:27 <TemptorSent> Bugger. Yeah, try runing apk fix -v -v maybe?
2017-05-01 02:33:53 <nymacro> Ahh, I wasn't aware apk supported double verbose
2017-05-01 02:33:54 <TemptorSent> apk needs some help on the error info.
2017-05-01 02:34:07 <TemptorSent> I seem to recall seeing it somewhere.
2017-05-01 02:34:11 <nymacro> I will give it a try
2017-05-01 02:34:30 <TemptorSent> Actually, apk --help :)
2017-05-01 02:35:14 <TemptorSent> I'm curious as to what's failing and why.
2017-05-01 02:35:21 <nymacro> Me too. Me too :)
2017-05-01 02:35:52 <nymacro> I will give -vv a try, along with whether lacking a /tmp on the destination caused issues
2017-05-01 02:36:23 <nymacro> Thanks :)
2017-05-01 02:36:24 <TemptorSent> Yeah, check the simple stuff first, if that doesn't fix it, we can get down to brass tacks.
2017-05-01 02:38:34 <TemptorSent> Making sure all the appropriate mountpoints are present is also a consideration. Setup-disk isn't really zfs-aware AFAIK, so there may be some bad assumptions about how filesystems behave in there.
2017-05-01 03:06:28 <nymacro> No love: https://gist.github.com/nymacro/9980470c49b16050782dce8df3aa67be
2017-05-01 03:08:07 <nymacro> Given that the only thing the post-install is doing for busybox is: exec /bin/busybox --install -s
2017-05-01 03:08:16 <nymacro> something isn't right :(
2017-05-01 03:08:42 <nymacro> the busybox binary is getting installed; but the symlinks aren't there
2017-05-01 03:09:07 <nymacro> Although, I can manually create the symlinks
2017-05-01 03:11:02 <nymacro> mounting up /dev, /proc, /sys and a /tmp on my root and chrooting to try and fix the packages (apk fix) gives the same errors
2017-05-01 03:11:51 <nymacro> I am out of ideas
2017-05-01 03:14:42 <nymacro> ZFS setup is the same as https://github.com/zfsonlinux/zfs/wiki/Ubuntu-16.04-Root-on-ZFS Step 3's structure
2017-05-01 03:19:17 <TemptorSent> nymacro: Hmm, looking at that, there may be some mismatches between ubuntu an Alpine requirements -- the exec=off on /var may be an issue.
2017-05-01 03:19:46 <TemptorSent> nymacro: suid may be an issue a swell.
2017-05-01 03:22:01 <TemptorSent> nymacro: If running with -v -v doesn't lead to any lead as to what's failing why, you probably should file a bug on apk for lack of proper error handling and as much context as you do have.
2017-05-01 03:23:15 <TemptorSent> nymacro: But try with default options for all members in the dataset (other than mountpoint) and see if it fails in the same way.
2017-05-01 03:24:12 <TemptorSent> The canmount=off usage is strange, and I suspect for compatiblity, because it's not normal nor desirble.
2017-05-01 03:30:34 <nymacro> hmm, true
2017-05-01 03:30:40 <nymacro> that one is a little odd
2017-05-01 03:32:01 <nymacro> Off I go! (again) :)
2017-05-01 07:17:55 <trfl> ryonaloli, to evade the issue of grsec being a registered trademark or whatnot, why not name the unofficial branch GARsec? :>
2017-05-01 08:53:22 <zhasha> That was fun. apk upgrade deleted my kernel
2017-05-01 08:53:42 <zhasha> I think it might be related to linux-grsec@edge being linux-hardened now?
2017-05-01 08:54:04 <asie> probably
2017-05-01 09:21:10 <nymacro> the ZFS root still not giving me any love :(
2017-05-01 09:48:37 <emacsomancer> i've not been successful either in setting up a zfs root
2017-05-01 16:42:29 <cyrus_mc_> https://pkgs.alpinelinux.org/packages - anyone know what the URL is for packages listed here that you need to put in apk/repositories such that you can install packages from here
2017-05-01 16:43:57 <clandmeter> all our mirrors should have them
2017-05-01 16:44:06 <clandmeter> dl-cdn.alpinelinux.org
2017-05-01 16:45:00 <cyrus_mc_> clandmeter: so I have that, but I can't find package exim. If i try to install it says missing. But it clearly shows up when I search for the package on https://pkgs.alpinelinux.org/packages, under community
2017-05-01 16:45:26 <cyrus_mc_> https://pastebin.com/3tZTUxYK
2017-05-01 17:31:30 <qman__> cyrus_mc_: you're using 3.5, while exim is only available on edge
2017-05-01 18:28:16 <parazyd> just did a (big?) upgrade on a raspberry pi
2017-05-01 18:28:28 <parazyd> and it's now spitting out: [   27.803530] usb 1-1: device descriptor read/64, error -110
2017-05-01 18:28:44 <parazyd> [   54.143495] usb 1-1: device not accepting address 4, error -110, and [   64.869591] usb usb1-port1: unable to enumerate USB device
2017-05-01 18:28:59 <parazyd> there was a kernel bump to 4.9 as well... wat do?
2017-05-01 18:29:28 <parazyd> (this is read with serial, on boot)
2017-05-01 18:29:38 <parazyd> (the pi doesn't boot now)
2017-05-01 18:44:29 <kaniini1> alpine has plenty of security
2017-05-01 18:44:29 <kaniini1> grsec is hardly the only thing we were doing.  the belief that grsec was anathema to our security effort is largely because of bad marketing decisions in the past
2017-05-01 18:44:30 <kaniini1> in fact another very recent security initiative of ours just bagged a libressl CVE
2017-05-01 18:44:31 <kaniini1> kernel security doesn't matter if your app is vulnerable
2017-05-01 18:44:32 <kaniini1> is grsec being killed off unfortunate?  sure
2017-05-01 18:44:33 <kaniini1> not the end of the world though, alpine has a very robust security story outside of grsec
2017-05-01 18:48:24 <dirac1> Why noone else tried to create a kernel and memory corruption protection besides grsecurity group?
2017-05-01 18:48:41 <dirac1> Is a really hard subject to study-create?
2017-05-01 18:52:55 <parazyd> here's the whole output if anyone is interested: http://sprunge.us/fgAU
2017-05-01 18:54:56 <parazyd> maybe the initrd is broken?
2017-05-01 18:55:25 <_ikke_> kaniini1: Just wondering, where did that 'rant' came from?
2017-05-01 19:02:27 <dalias> what kaniini1 said can't be stressed enough:
2017-05-01 19:03:15 <dalias> "the belief that grsec was anathema [sic?] to our security effort is largely because of bad marketing decision in the past"
2017-05-01 19:03:43 <_ikke_> Right, it just looked like it's a reaction to something I'm missing
2017-05-01 19:03:51 <dalias> i don't see how anathema fits there at all, but "bad marketing decisions" seem to be a big theme here
2017-05-01 19:17:43 <qman__> parazyd: it's a hardware-level issue, probably a driver change from the old version to the new
2017-05-01 19:18:20 <parazyd> qman__: implying i shouldn't use the latest kernel then?
2017-05-01 19:18:44 <qman__> parazyd: it's worth trying the old kernel to see if the problem persists
2017-05-01 19:19:05 <qman__> couldn't tell you about specific hardware support in various versions, I'm not that intimately familiar with them
2017-05-01 19:19:15 <qman__> but the errors you're getting are hardware errors
2017-05-01 19:19:21 <parazyd> yeah i'm just downloading the release
2017-05-01 19:21:09 <qman__> _ikke_: [22:39:59] <tidux> so what's the future of Alpine now that grsec is closing up?
2017-05-01 19:21:19 <parazyd> pity i can't see what has been upgraded besides the kernel
2017-05-01 19:28:22 <parazyd> qman__: yeah, i get a shell with the old one
2017-05-01 19:28:30 <parazyd> Kernel 4.4.52-0-rpi on an armv6l (/dev/ttyAMA0)
2017-05-01 19:29:12 <qman__> yeah, so probably a USB driver issue, or a driver issue with hardware attached to USB, like the NIC
2017-05-01 19:29:31 <parazyd> i think it's the ethernet indeed
2017-05-01 19:31:11 <parazyd> anyway, i can't provide a fix for this... but i'll gladly do testing if/when needed
2017-05-01 19:39:40 <hiro> dudes, the wifi script called by the setup-alpine doesn't allow me to use spaces in my wifi password!
2017-05-01 19:40:40 <parazyd> heh
2017-05-01 19:40:41 <parazyd> udhcpc: socket(AF_PACKET,2,8): Address family not supported by protocol
2017-05-01 19:45:23 <parazyd> oh
2017-05-01 23:49:55 <shadoh> howdy folks... has anyone here installed the xen version of alpine? I know I need to monkey with the initrd for my nvme drive, just curious if it plays out the same in xen as it would in standard/extended versions of the distro
2017-05-01 23:50:49 <shadoh> hmm, hopefully the page on installing xen dom0 will be helpful
2017-05-02 05:26:14 <mradi> Hi Folks, I want to know how to enable libvirtd service for xen
2017-05-02 05:26:35 <mradi> I am using the xen boot iso image as it is.
2017-05-02 05:40:16 <mradi> ?
2017-05-02 05:40:41 <mradi> I want to know how to enable libvirtd service for xen, how do I configure it
2017-05-02 05:40:59 <mradi> And can I install qemu with it, I cannot find it using apk search
2017-05-02 07:57:14 <asdfasdfasd> hi, how to enable fbtft module in alpine? (on raspberry)
2017-05-02 08:00:46 <fabled> asdfasdfasd, depends on many things
2017-05-02 08:00:56 <fabled> asdfasdfasd, easiest is to just use dtoverlay if one exists
2017-05-02 08:01:06 <fabled> otherwise you probably need to modprobe it with right parameters
2017-05-02 08:01:21 <asdfasdfasd> fabled: I would like to use a small tft display on raspberry, and it says to require fbtft module
2017-05-02 08:01:43 <fabled> asdfasdfasd, i have one like that. fbtft supports gazillion of different displays it needs to be configured right
2017-05-02 08:01:52 <fabled> best is lookup the docs shipped with your display
2017-05-02 08:02:15 <asdfasdfasd> ok
2017-05-02 08:02:45 <asdfasdfasd> this one is http://www.neosecsolutions.com//products.php?28&cPath=17
2017-05-02 08:03:02 <asdfasdfasd> (just informative)
2017-05-02 11:09:40 <KLOGD> Hi, currently setting up a new server that will only run ssh + nginx + docker. Usually I'd use Debian, but I'm considering Alpine. Could not find much info online on using Alpine as a docker host, anyone else got a similar setup? and if so any issues/considerations I should be aware of?
2017-05-02 11:21:53 <_ikke_> KLOGD: I use a vpn with alpine mainly running docker (just not that much containers)
2017-05-02 11:21:58 <_ikke_> KLOGD: No issues with it
2017-05-02 11:22:13 <_ikke_> vps*
2017-05-02 12:13:13 <KLOGD> _ikke_: thanks, I'll give it a go and test it out :)
2017-05-02 14:46:05 <dsuch> Hello, in the error message of https://pastebin.com/TFPzJ5Wt - what does exactly 'world' mean? I'm just not clear how to interpret it, py-numpy is missing because it is needed by the world is the way I read it  :)
2017-05-02 14:47:05 <TBB> the world is in a sad state if it needs anything connected to Python
2017-05-02 14:47:19 <TBB> but basically it's your repo configuration that's causing this
2017-05-02 14:47:31 <TBB> I mean the error message, not the sad state the world is in
2017-05-02 14:47:42 <dsuch> TBB: That I get, but I just cannot find any reference to 'world' in the wiki
2017-05-02 14:53:58 <consus> dsuch: It's like all packages that you've installed explicitly
2017-05-02 14:54:25 <consus> See /etc/apk/world
2017-05-02 14:55:06 <dsuch> consus: Got it, thanks.
2017-05-02 14:55:24 <consus> It is closely related to Gentoo's world
2017-05-02 14:56:43 <dsuch> consus: Thanks, I've never used Gentoo so it didn't ring any bell.
2017-05-02 14:56:49 <consus> To be honest, wiki lacks so many essential things it's not even funny =/
2017-05-02 14:57:13 <dsuch> consus: I find it very helpful though :)
2017-05-02 14:57:33 <consus> :)
2017-05-02 14:57:45 <consus> E.g. there is a special package called 'docs'
2017-05-02 14:58:14 <consus> This very particular package instructs apk to install a <pkg>-doc for every <pkg> that has one
2017-05-02 14:58:32 <dsuch> So this is good.
2017-05-02 14:58:39 <consus> *SUPER* helpful thing that has almost no mentions
2017-05-02 14:58:47 <dsuch> Aha.
2017-05-02 14:59:04 <consus> Which reminds me
2017-05-02 14:59:13 <consus> Gotta add it now xD
2017-05-02 15:01:30 <TBB> I just did. wonderful; I had no idea
2017-05-02 19:56:30 <arnotixe> hi all I'm setting up an alpine linux router++ box and figured out how to setup AWall, well at least I have rejected most public ports and NATing only some of them. But I can't figure out how to translate ports? What I'm trying to do is translate public 1443 to 443 on a local machine. With tcpdump I can see the SYN packet coming in on port 1443 but it isn't forwarded to the correct internal port =>?.  [Slightly anoymised] config on https://pastebi
2017-05-02 20:07:54 <xentec> arnotixe, your pastebin link is cut off
2017-05-02 20:14:27 <arnotixe> oh https://pastebin.com/5d4FZS33 ? seems visible from here?
2017-05-02 20:15:42 <arnotixe> (I get by temporarily by using straight thru ports, but it would be nice to be able to rewrite). Maybe there are example files of working port rewrite config files somewhere?
2017-05-02 23:08:51 <scv> mm
2017-05-02 23:09:03 <scv> libmagic's headers are in file-dev but libmagic itself is in libmagic
2017-05-02 23:09:13 <scv> that's a little confusing :) guess it's too late to fix that though
2017-05-03 01:03:53 <Dirac1> Hello my screen is completely black after all the start process pass.
2017-05-03 01:04:04 <Dirac1> i think my Xorg is not working good.
2017-05-03 01:04:37 <Dirac1> What's the key combination to stop the login and go in to run level 1...
2017-05-03 01:22:44 <ryonaloli> alpine has extra patches to musl which provide the equivalent of FORTIFY_SOURCE=2 support, right?
2017-05-03 01:23:02 <ryonaloli> in what form do these patches come? is it simply a patch or series of patches to the musl libc itself?
2017-05-03 03:38:35 <kaniini1> if i told you i would have to kill you
2017-05-03 03:38:58 <kaniini1> but u can buy a license for $599
2017-05-03 03:40:31 <kaniini1> ryonaloli: https://git.2f30.org/fortify-headers/log.html tbh
2017-05-03 03:40:58 <ryonaloli> ty
2017-05-03 07:55:54 <arnotixe> anyone got example config files for awall with port translation (for ex public 1443 -> private 443)? I see quite some differences between https://git.alpinelinux.org/cgit/awall/about/ and https://wiki.alpinelinux.org/wiki/How-To_Alpine_Wall but nothing I try really work out...
2017-05-03 08:04:35 <arnotixe> (I get public:443 to private:443 to work, but not port number rewrites. My current config with only public ip address changed on: http://www.teigseth.no/files/sos.json
2017-05-03 10:47:09 <arnotixe> hmm is there an ftp server for alpine linux?
2017-05-03 10:51:52 <IcePic> .oO ( everyone should go sftp ... )
2017-05-03 10:52:51 <armin> remember sftp could stand for ssh file transfer protocol, secure file transfer protocol, simple transfer protocol, etc.
2017-05-03 10:52:57 <armin> also, rsync.
2017-05-03 10:55:52 <arnotixe> yep. However, is there a built-in sftp client in windows? I only need ftp support in case I'm dead or otherwise unavailable; just to provide an alternative way to get files off the alpine box. I of course use RSA keys with ssh, certificate-only login ;)
2017-05-03 10:56:10 <scv> no
2017-05-03 10:56:17 <scv> windows does not have sftp support out of the box
2017-05-03 10:56:25 <arnotixe> …the ftp server would of course have root access...
2017-05-03 11:02:14 <IcePic> perhaps a https://user:pw@site.tld would be better, then windows would have a "native" client in MSIE/Edge
2017-05-03 11:04:52 <arnotixe> IcePic: That was a good idea. They only need very basic one-file-at-a-time functionality anyway :)
2017-05-03 11:50:09 <syx> Anyone here on hetzner?
2017-05-03 12:22:00 <gus-test> Hello! The package libcgroup-tools@testing has been removed from the repos and I can't find something that would provide the "cgget" command. Am I missing anything?
2017-05-03 16:37:12 <syx> Hi everyone
2017-05-03 16:43:31 <ncopa> hi syx
2017-05-03 16:43:38 <syx> hi
2017-05-03 16:43:47 <syx> https://gist.github.com/thde/5312a42665c5c901aef4 this still works right?
2017-05-03 16:43:55 <syx> I'm really confused with the MBR and GPT thing
2017-05-03 16:44:16 <syx> I've got 3TB but I distinctly recall MBR not being able to do more than two
2017-05-03 16:45:36 <ncopa> as long as you keep your /boot on separate partition it should be all fine
2017-05-03 16:45:53 <syx> https://0x0.st/YiK.png yup
2017-05-03 16:46:41 <ncopa> hum
2017-05-03 16:46:55 <ncopa> yeah its possible you need gpt
2017-05-03 16:47:00 <syx> ugh
2017-05-03 16:47:02 <ncopa> or you could use lvm
2017-05-03 16:47:06 <syx> but then grub won't work :S
2017-05-03 16:47:31 <syx> what do the sgdisk lines in https://gist.github.com/thde/5312a42665c5c901aef4 do?
2017-05-03 16:47:35 <ncopa> hum, no you would still need the partition
2017-05-03 16:47:43 <syx> manpage doesn't say specific options for the flags used
2017-05-03 16:47:56 <syx> oh so lvm on mbr
2017-05-03 16:47:58 <syx> that'd work
2017-05-03 16:48:57 <ncopa> i think it maybe doesnt
2017-05-03 16:49:13 <ncopa> you need the boot partion to be separate
2017-05-03 16:49:33 <syx> okay so
2017-05-03 16:49:37 <ncopa> looks like the sgdisk lines creates partitions
2017-05-03 16:49:59 <ncopa> but i think you can have a gpt with bios compatitibility
2017-05-03 16:50:15 <ncopa> do you boot with efi or legacy bios?
2017-05-03 16:50:21 <syx> uhm
2017-05-03 16:50:34 <syx> root@rescue ~ # ls /sys/module/efivars
2017-05-03 16:50:36 <syx> uevent  version
2017-05-03 16:50:45 <syx> i think this means it's just legacy bios
2017-05-03 16:50:53 <syx> i don't actually have access to the serial console
2017-05-03 16:50:58 <ncopa> yeah
2017-05-03 16:50:59 <ncopa> ok
2017-05-03 16:51:11 <syx> but the guide mentions something called gptmbr.bin
2017-05-03 16:51:54 <ncopa> do you have /sys/firmware/efi/efivars
2017-05-03 16:52:03 <syx> nope
2017-05-03 16:52:08 <syx> damn
2017-05-03 16:53:43 <ncopa> ok
2017-05-03 16:54:05 <ncopa> but i think it should be possible to use gpt with that gptmbr.bin
2017-05-03 16:54:12 <syx> okay
2017-05-03 16:54:12 <ncopa> i havent tested it though
2017-05-03 16:54:19 <ncopa> but it should be possible
2017-05-03 16:54:28 <syx> so im making a gpt table
2017-05-03 16:54:43 <ludaota> Hello, just finished running alpine-setup on my netbook, it did not display any error message, though when booting I get "mounting UUID=blah on /sysroot failed : No such file", any ideas what could cause this ?
2017-05-03 16:55:07 <syx> so like this? https://tmate.io/t/ro-rfYW96mC6p8hQpJnPvBh2ILgb
2017-05-03 16:55:13 <ludaota> Also I have eMMC storage, I know it causes issues sometimes, worked fine on gentoo though
2017-05-03 16:59:56 <ncopa> ludaota sounds like its missing some driver in initramfs
2017-05-03 17:00:18 <ncopa> syx possibly, i dont have experience with this kind of setup, but i think it should be possible
2017-05-03 17:00:29 <ludaota> Might be then, because I cannot see it in /dev/ either
2017-05-03 17:01:24 <ludaota> Allright I'll have a look at that then, thanks
2017-05-03 17:03:17 <ncopa> ludaota is it an mmc?
2017-05-03 17:03:43 <ncopa> i think you can fix it by editing /etc/mkinitfs/mkinitfs.conf and add mmc to the features
2017-05-03 17:03:57 <ncopa> then re-run mkinitfs
2017-05-03 17:04:17 <ncopa> i suppose you can boot from rescue usb/cdrom
2017-05-03 17:04:44 <ncopa> then mount the root on /mnt (mount -t ext4 /dev/sda3 /mnt)
2017-05-03 17:05:04 <ncopa> and mount /dev/sda1 /mnt/boot
2017-05-03 17:05:29 <ncopa> you might need bind mount /proc: mount --bind /proc /mnt/proc
2017-05-03 17:05:47 <ncopa> then edit /mnt/etc/mkinitfs/mkinitfs.conf
2017-05-03 17:05:54 <ncopa> and mmc to features
2017-05-03 17:06:04 <ncopa> and finally: apk fix --root /mnt mkinitfs
2017-05-03 17:06:28 <ncopa> which will reinstall mkinitfs and re-run the mkinitfs trigger
2017-05-03 17:42:38 <ludaota> ncopa: yes it is an internal emmc memory (the computer's an acer cloudbook 11)
2017-05-03 17:43:17 <ludaota> thanks
2017-05-03 17:43:38 <syx> extlinux: no previous syslinux boot sector found
2017-05-03 17:43:40 <syx> is this bad?
2017-05-03 17:45:40 <syx> okay rebooting
2017-05-03 17:45:42 <syx> wish me luck
2017-05-03 17:46:02 <ludaota> Yeah I'll chroot into the drive and regen the initramfs, I'll do it as soon as I get back into my office
2017-05-03 18:27:08 <syx> ncopa: which versions of grsec do you have in https://dev.alpinelinux.org/~ncopa/grsec ?
2017-05-03 18:46:46 <ludaota> ncopa: it worked like a charm, thanks !
2017-05-03 19:01:01 <syx> is there an easy way to make menuconfig?
2017-05-03 20:10:12 <Dirac1> Hello i need some help
2017-05-03 20:11:14 <Dirac1> I tried to start lxdm on my system, and i activated it on rc-update, but now my system boot-up directly to the lxdm login and freeze in there completely in black screen.
2017-05-03 20:11:58 <Dirac1> I need some help about how to start in terminal instead of lxdm login.
2017-05-03 20:16:14 <xentec> 'singlemode' kernel parameter should help you to enter the system as root, mount / and manually remove lxdm from /etc/runleves
2017-05-03 20:16:23 <xentec> s/runleves/runlevels
2017-05-03 20:17:05 <Dirac1> But how i start the kernel in singlemode?
2017-05-03 20:18:26 <Dirac1> xentec?
2017-05-03 20:18:46 <xentec> you use syslinux for booting, right?
2017-05-03 20:18:48 <Dirac1> it should automatically appear as an option in my grub bootloader?
2017-05-03 20:18:54 <Dirac1> No no, grub.
2017-05-03 20:20:33 <xentec> then you'll find plenty of resources only how to enter singlemode with grub
2017-05-03 20:20:41 <xentec> s/only/online
2017-05-03 20:21:21 <ludaota> xentec: I like your sed way of correcting your messages :p
2017-05-03 20:22:53 <xentec> ludaota: thx, but you'll soon find out that this way is as old as irc itself :D
2017-05-03 20:23:22 <Dirac1> oh i didn't know i could explicitly say to the kernel.. "hey you, start in singlemode" via the bootloader
2017-05-03 20:25:23 <xentec> linux is still a program that takes arguments :D
2017-05-03 20:45:49 <TemptorSent> Technically, it's the initramfs /init that's handling the single option, but who's counting? :P
2017-05-03 20:51:18 <Dirac1> Ugh.. not working :/
2017-05-03 20:51:26 <Dirac1> Not even showing the boot process.. just black screen
2017-05-03 20:51:49 <Dirac1> I added "single" to the end of the linux line in the booloader.
2017-05-03 20:51:53 <Dirac1> for Alpine
2017-05-03 21:03:27 <Dirac1> Help..?
2017-05-03 21:12:45 <ludaota> Oookay so my computer boots fine, it's good, however dhcp fails somehow, altohugh it worked during the install, OpenRC loads the wlan0 interface just fine :o
2017-05-03 21:18:22 <ludaota> Hoe come udhcpc works fine during the install but not once the computer booted ?
2017-05-03 21:18:29 <ludaota> *how
2017-05-03 21:19:01 <ludaota> It just continuously sends discover but never succeeds somehow
2017-05-03 21:24:25 <ludaota> Ah nevermind, wpa_supplicant was not being started
2017-05-03 21:31:13 <xentec> Dirac1, have you tried replacing 'quiet' with 'single'?
2017-05-03 21:31:47 <Dirac1> did it.. :/ used.. single and 1... and removed quiet.
2017-05-03 21:32:07 <Dirac1> when i used any number.. from 1 to 6.. it starts normally.
2017-05-03 21:49:55 <syx> Hi
2017-05-03 21:50:19 <syx> How could I run mkinitfs on a custom kernel?
2017-05-03 21:51:37 <feuerteufel> Hey @ all
2017-05-03 21:54:12 <feuerteufel> Is there a way, to find out which packages are installed by using "apk" or is there a completly other way?
2017-05-03 21:56:15 <syx> feuerteufel: apk info
2017-05-03 21:57:15 <feuerteufel> And that schow's only installed packages?
2017-05-03 21:57:42 <syx> Looks like it
2017-05-03 22:00:26 <feuerteufel> I think it look's good ... thank's
2017-05-03 22:06:44 <Dirac1> xentec, couldn't find a way start ;/..i don't know if grsec blocks the single user mode..
2017-05-03 22:06:51 <Dirac1> but i tried doing it in recue mode.
2017-05-03 22:47:40 <TBB> syx: mkinitfs takes parameters, that's how you use specific kernels to generate custom initramfs archives
2017-05-04 00:12:54 <Dirac1> Help my Xorg configuration is broken well isn't broken if i've never been able to use it.. so.. here's the xorg log : https://ptpb.pw/UEIF
2017-05-04 03:22:02 <kvda> hi any idea why i can't install go pkg?
2017-05-04 03:22:10 <kvda> > go (missing)
2017-05-04 03:22:28 <kvda> the package name is correct and is listed on alpine packes
2017-05-04 03:22:35 <kvda> im running a fresh install of 3.5
2017-05-04 03:22:36 <Xe> kvda: what version?
2017-05-04 03:23:06 <Xe> did you enable the community repo?
2017-05-04 03:23:20 <kvda> !!!
2017-05-04 03:23:23 <kvda> forgot about that
2017-05-04 03:26:59 <kvda> is there a global .profile on alpine?
2017-05-04 03:27:03 <kvda> thanks btw Xe :)
2017-05-04 03:27:18 <Xe> try /etc/profile?
2017-05-04 03:27:40 <kvda> not there, but i guess i can create it an try
2017-05-04 03:27:42 <Xe> docker image alpine:3.5 seems to have the shell config stuff in /etc/profile
2017-05-04 03:28:17 <kvda> oh my bad again, it is there, tab completion didn't work :/
2017-05-04 06:06:12 <syx> isn't it golang?
2017-05-04 06:06:27 <Xe> it's just `go`
2017-05-04 06:06:32 <syx> ah
2017-05-04 06:06:37 <syx> so it is
2017-05-04 06:10:52 <syx> how do i make coffee?
2017-05-04 07:25:16 <syx> Okay so to make a ramfs for 1.2.3 I'd do mkinitramfs 1.2.3
2017-05-04 07:25:19 <syx> Right?
2017-05-04 07:29:03 <TemptorSent> mkinitfs actually, and you'll want to make sure all the required features are enabled AND that any packages you need to provide files required by the initfs are intalled.
2017-05-04 07:29:27 <syx> Alright
2017-05-04 07:29:45 <syx> All required features?
2017-05-04 07:29:53 <TemptorSent> I'm working on the replacement, but still running into apk issues.
2017-05-04 07:30:05 <TemptorSent> Yes, to support your hardware/rootfs
2017-05-04 07:30:14 <TemptorSent> see /etc/mkinitfs directory
2017-05-04 07:30:27 <TemptorSent> There's a conf file and a features.d dir
2017-05-04 07:31:15 <syx> Ah right
2017-05-04 07:31:27 <TemptorSent> So, say you need zfs, you need to both add the zfs feature to your mkinitfs.conf entry, you ALSO need to install the packages 'zfs' 'zfs-$kernelflavor' and 'spl-$kernelflavor'
2017-05-04 07:31:38 <syx> Right
2017-05-04 07:31:44 <TemptorSent> (Yes, I'm fixing that)
2017-05-04 07:32:33 <syx> But the first argument is the version, right?
2017-05-04 07:32:53 <TemptorSent> In the future, it will stage all the required files and build based on a manifest.
2017-05-04 07:33:07 <TemptorSent> The final argument is the kernel release, not version!
2017-05-04 07:33:16 <syx> I'm compiling manually too
2017-05-04 07:33:17 <syx> Ah
2017-05-04 07:33:44 <syx> Wait so
2017-05-04 07:33:46 <TemptorSent> You might have to add your own entry in features.d to make it work.
2017-05-04 07:34:09 <syx> Alright
2017-05-04 07:35:11 <TemptorSent> so for package linux-4.9.20-r2 say, you have a kernel release that is probably 4.9.20, while for linux-hardened-4.9.25-r0 you have 4.9.25-0-hardened, etc.
2017-05-04 07:35:39 <TemptorSent> Same string as the modules directory name.
2017-05-04 07:37:19 <TemptorSent> Are you compiling any externel kernel modules, or just customizing the kernel/included modules?
2017-05-04 09:00:51 <syx> TemptorSent: I'm compiling 4.9.20 with grsec
2017-05-04 09:07:09 <syx> Then running mkinitfs 4.9.20
2017-05-04 09:22:29 <syx> aight so i've done make install and modules_install
2017-05-04 09:23:02 <syx> this has given me a vmlinuz
2017-05-04 09:23:26 <syx> what do i run to make the initfs?
2017-05-04 09:25:11 <syx> then do i run extlinux too?
2017-05-04 09:26:01 <syx> or can i just edit extlinux.conf in /boot
2017-05-04 09:31:57 <syx> https://w1r3.net/pEwKLW.txt this is what happens
2017-05-04 09:32:49 <syx> https://w1r3.net/ywwbkr.txt here's the modules tree
2017-05-04 16:42:43 <syx> Hi
2017-05-04 16:42:55 <syx> Is there an alternative to who for musl based installs?
2017-05-04 17:12:20 <Shiz> syx: not particularly, as musl (consciously) does not support utmp
2017-05-04 17:12:33 <syx> okay
2017-05-04 17:12:48 <Shiz> you could check /dev/pts ownership and ps(1) output
2017-05-04 17:13:11 <Shiz> but that will also include virtual terminals like tmux and screen
2017-05-04 17:13:18 <syx> ah, that'd work
2017-05-04 20:55:03 <erick3k> HEllo
2017-05-04 20:55:05 <erick3k> how u all doing?
2017-05-04 20:55:15 <erick3k> i am trying to install cloud-init
2017-05-04 20:55:25 <erick3k> apk add cloud-init
2017-05-04 20:55:39 <erick3k> but get
2017-05-04 20:55:40 <erick3k> ERROR: unsatisfiable constraints:
2017-05-04 20:57:35 <erick3k> any idea?
2017-05-04 21:00:41 <erick3k> hello?
2017-05-04 21:00:43 <erick3k> anyone here?
2017-05-04 21:01:09 <erick3k> hello?
2017-05-04 21:16:21 <xentec> erick3k, you need to enable testing repository for apk
2017-05-04 21:21:55 <erick3k> ok can you link me to a guide please?
2017-05-04 21:23:03 <erick3k> nvm found it
2017-05-04 21:23:08 <erick3k> thank you xentec
2017-05-04 21:23:54 <erick3k> xentec missing  py-configobj (missing):
2017-05-04 21:25:00 <xentec> as well as switch to edge version of the other repos
2017-05-04 21:25:19 <xentec> making your installation effectively a rolling release
2017-05-04 21:25:47 <xentec> or you try pinning the missing packages
2017-05-04 21:30:21 <erick3k> xentec got it installed, is there anything else to do to activate it?
2017-05-04 21:33:55 <xentec> you can start it with # rc-service cloud-init start
2017-05-04 21:39:47 <BitL0G1c> erick3k - rc-update add cloud-init default   (to add the service to the runlevels)
2017-05-04 21:40:01 <erick3k> nice thank you
2017-05-04 21:56:38 <erick3k> i am trying to set data source as config drive only any idea?
2017-05-05 09:08:22 <nekocentral> what happened to the site ?
2017-05-05 09:16:50 <nekocentral> as it looks like its down
2017-05-05 09:17:17 <scv> seems it isn't responding to ping at all
2017-05-05 09:17:23 <scv> (dunno if it normally does)
2017-05-05 09:17:47 <_ikke_> announced maintenance
2017-05-05 09:17:52 <_ikke_> (in another channel)
2017-05-05 09:17:56 <_ikke_> but takes longer than expected
2017-05-05 09:23:00 <_ikke_> http://ikke.info/alpinelinux_status.png
2017-05-05 09:25:04 <nekocentral> ty
2017-05-05 10:11:27 <Mo0O> hi there
2017-05-05 10:11:48 <Mo0O> is alpinelinux.org is down for you too?
2017-05-05 10:12:04 <scv> maintenance window
2017-05-05 10:12:14 <Mo0O> ok, thanks scv
2017-05-05 10:20:11 <mepholic> ok
2017-05-05 10:20:37 <mepholic> I just got lwjgl 2.9.1 and jinput natives built against musl
2017-05-05 10:20:45 <mepholic> and minecraft works on alpine now
2017-05-05 10:21:00 <mepholic> well, minecraft 1.7.10 at least
2017-05-05 10:21:04 <mepholic> http://i.imgur.com/hT3HAEC.png
2017-05-05 10:23:57 <asie> been there, done that, heh
2017-05-05 10:24:00 <asie> all minecrafts work this way
2017-05-05 10:24:11 <asie> even did that on NetBSD, though it was a bit more involved there
2017-05-05 10:27:36 <mepholic> ok, so why isn't there a package?
2017-05-05 10:31:31 <asie> nobody bothered to make one
2017-05-05 10:37:52 <dminca> hi guys
2017-05-05 10:37:57 <dminca> is alpinelinux.org down?
2017-05-05 10:38:34 <hiro> dminca: 11:23 _ikke http://ikke.info/alpinelinux_status.png
2017-05-05 10:38:49 <dminca> ouch :(
2017-05-05 10:39:07 <dminca> thank you hiro
2017-05-05 10:40:54 <asdlfk> hi, how can I configure audio output to hdmi?
2017-05-05 10:41:18 <asdlfk> attempting to achieve it through asoundrc
2017-05-05 11:19:20 <rafalcpp> hello, so I'm using alpine for my hosting
2017-05-05 11:19:22 <rafalcpp> but!
2017-05-05 11:20:15 <rafalcpp> since starting using it 3 months ago, my epenis increased only by 1cm. Such modest increase of 4% if not what I was especting by using most elite linux based secure system.
2017-05-05 11:25:54 <darkfader> rafalcpp: you didn't spend enough time in grsecadm
2017-05-05 11:27:19 <rafalcpp> darkfader: ah
2017-05-05 11:28:10 <rafalcpp> btw, how is Alpine dealing with grsec sort of closing it's source code?  can I rebuild alpine's kernel myself, downloading all sources including grsec patch?
2017-05-05 11:28:52 <IcePic> rafalcpp++
2017-05-05 11:29:09 <IcePic> (on the humor, not grsec, comment)
2017-05-05 11:38:31 <scv> rafalcpp++
2017-05-05 11:38:32 <scv> :^)
2017-05-05 11:53:16 <BlackIkeEagle> I'm also interested what is going to happen with the grsec move
2017-05-05 11:53:34 <BlackIkeEagle> will alpine maintain the 4.4 patch until 4.4 is dead?
2017-05-05 11:53:38 <BlackIkeEagle> and then what?
2017-05-05 11:54:16 <BlackIkeEagle> or will the forked grsec receive forward patching?
2017-05-05 11:55:03 <BlackIkeEagle> sorry the 4.9 version
2017-05-05 11:57:40 <rafalcpp> BlackIkeEagle: can't we donate $$$ for alpine to buy patch from grsec in a way that makes them happy when alpine publishes it?
2017-05-05 11:58:18 <rafalcpp> I guess people could sign some NDA or shit. Ask grsec what they want. Afair 1) money and 2) people not calling botchered old kernels "a grsec kernel" (brand protection)
2017-05-05 11:58:43 <rafalcpp> if I can not build own kernel from source, then it can't be used for most sensitive tasks imo
2017-05-05 11:59:21 <BlackIkeEagle> in theory if grsec is still gplv2 you can publish it if you bought it
2017-05-05 12:01:56 <IcePic> didnt linksys do something like that? "if you publish the gpl stuff we gave you, you lose customer status and will receive no further patches but we cant legally prevent you from leaking it in the first place"
2017-05-05 12:02:25 <rafalcpp> if grsec has a problem with that I could sign an NDA to wave right to republish it.  and alpine would have right to forward the code only for signers of NDA (e.g. organizations).  maybe that is what grsec authors want
2017-05-05 12:02:32 <leah2> sounds like the fsf approves :P
2017-05-05 12:04:46 <IcePic> wonder if grsec can just dist patches which are NOT gpl. Then people receiving them can use them locally, but not ship the combined kernel
2017-05-05 12:05:10 <kaniini> jesus fucking christ not this again
2017-05-05 12:05:54 <kvoz> How do I go about adding a trusted root certificate? I have put it in /etc/ssl/certs and run update-ca-certificates but it doesnt seem to be enough?
2017-05-05 13:48:15 <syx> so i just s/latest-stable/3.6/ in my repositories file
2017-05-05 13:48:22 <syx> turns out it isn't latest-stable :c
2017-05-05 14:03:07 <bigtitus> hello here
2017-05-05 14:03:18 <syx> hi
2017-05-05 14:03:26 <syx> which package is `chattr' in?
2017-05-05 14:04:38 <bigtitus> e2fsprogs-extra
2017-05-05 14:05:27 <syx> ah, thanks
2017-05-05 14:06:34 <bigtitus> pkgs.alpine.org is your friend ;-)
2017-05-05 14:07:24 <bigtitus> sorry pkgs.alpinelinux.org my mistake
2017-05-05 14:07:41 <syx> ah, thanks
2017-05-05 14:09:21 <bigtitus> any help on setting up a samba domain member on alpine ?
2017-05-05 14:11:49 <fcolista> bigtitus, wiki.alpinelinux.org is your friend ;-)
2017-05-05 14:11:54 <fcolista> https://wiki.alpinelinux.org/wiki/Setting_up_a_samba-ad-dc
2017-05-05 14:12:23 <bigtitus> yep cool doc ;-)
2017-05-05 14:13:59 <bigtitus> apart i dont want a domain controller but a member
2017-05-05 14:15:47 <bigtitus> joining domain works, wbinfo -u gives me domain users, but they are not available on system
2017-05-05 14:18:33 <scv> bigtitus alpine doesn't use pam and there's no nsswitch, as far as i'm aware there's no way to have the system authenticate against AD
2017-05-05 14:22:22 <consus> Hm
2017-05-05 14:22:56 <consus> There is a nss-pam-ldapd
2017-05-05 14:23:02 <consus> Also there is linux-pam
2017-05-05 14:23:07 <consus> So it's quite possible
2017-05-05 14:23:24 <bigtitus> hmm yes nsswitch make the link
2017-05-05 14:23:46 <consus> The only problem that I can see is that openssh is not built against pam, so you'll need to maintain your own copy of it
2017-05-05 14:23:49 <scv> there *is* linux-pam but yeah
2017-05-05 14:23:55 <scv> nothing is built against it by default
2017-05-05 14:24:02 <consus> shadow
2017-05-05 14:24:07 <consus> shadow is
2017-05-05 14:24:14 <consus> shadows provides login
2017-05-05 14:24:23 <consus> And you need to rebuild openssh
2017-05-05 14:24:38 <consus> After that you're good
2017-05-05 14:32:34 <j0ni> Good morning (EST). I have a question about apk-tools and Alpine package versioning in particular. I hope this is a good place to ask; please redirect me if not.
2017-05-05 14:32:55 <j0ni> I'm trying to figure out the significance of leading 0 chars in version strings, for example "2.2.003"
2017-05-05 14:33:16 <j0ni> specifically, should 2.2.003 be equivalent to 2.2.3, or not?
2017-05-05 14:35:57 <bigtitus> ok thanks for help guys, looks alpine cannot do what i want easily
2017-05-05 14:43:32 <bigtitus> goodbye
2017-05-05 14:43:44 <consus> Another happy customre
2017-05-05 14:44:14 <consus> I guess I should setup some pam-enabled-software repo =/
2017-05-05 14:49:33 <j0ni> hi again - in the unlikely event that someone answered my q while I fell off the channel a few minutes ago, could someone pls paste again :)
2017-05-05 15:05:26 <kaniini> we aren't buying a patch from grsec people.  any sort of deal like that would be most definitely in violation of our guidelines.
2017-05-05 15:05:41 <kaniini> buy it yourself if you want non-free software
2017-05-05 15:21:51 <Elizabeth> kaniini: mmm, what are the replacements (sorry if this has been asked already, a quick scroll through of logs didn't show anything, and I haven't really been following the conversations surrounding grsec)
2017-05-05 15:22:36 <kaniini> we will just maintain it ourself.  this has already been occurring for 2 years already.
2017-05-05 15:23:54 <Elizabeth> good to know :)
2017-05-05 15:23:56 <Elizabeth> thanks,
2017-05-05 15:24:06 <parazyd> minipli is maintaining 4.9 for now
2017-05-05 15:24:09 <parazyd> (backporting)
2017-05-05 15:24:15 <Elizabeth> Like I said, wasn't really aware of the status is all
2017-05-05 15:29:09 <Lucias> hi all
2017-05-05 15:58:39 <hiro> guys, i'm stuck
2017-05-05 15:59:01 <hiro> i have no network, but those networking scripts that run udhcpc are in the foreground
2017-05-05 15:59:07 <hiro> blocking me from logging in
2017-05-05 15:59:18 <hiro> and ctrl-c doesn't arrive at the right place :(
2017-05-05 15:59:35 <hiro> also this is before any ttys show up
2017-05-05 16:15:31 <_ikke_>  Do they actually get a dhcp lease?
2017-05-05 16:17:31 <hiro> no, i have no cable with me :)
2017-05-05 16:17:46 <hiro> i just need to log in so i can switch to wifi
2017-05-05 16:17:58 <hiro> i guess i can just run init=/bin/sh :)
2017-05-05 16:18:11 <hiro> but i do find this a bit weird! :)
2017-05-05 16:18:20 <TBB> works as specified
2017-05-05 16:18:40 <hiro> i like that it blocks on boot, but i should be able to send a signal from the keyboard
2017-05-05 16:19:05 <TBB> I suppose you shouldn't have networking on the default runlevel but instead on another runlevel you switch to when networking is available... I guess that's how it should be with openrc
2017-05-05 16:19:30 <hiro> yeah, that would make sense
2017-05-05 16:19:51 <TBB> however, it's not of much help when you're waiting for udhcpc to time out :/
2017-05-05 16:20:09 <hiro> udhcpc doesn't time out, it tries forever :)
2017-05-05 16:20:13 <TBB> and I'm going to swear next
2017-05-05 16:20:21 <TBB> networkmanager is in testing...
2017-05-05 16:20:25 <hiro> wtf
2017-05-05 16:20:55 <TBB> yeh, wonder why there's no timeout specified for udhcpc
2017-05-05 16:21:35 <hiro> it misses -n
2017-05-05 16:22:43 <hiro> wtf, init=/bin/sh doesn't work?
2017-05-05 16:24:51 <TBB> wonder if you can blacklist your ethernet module temporarily from the kernel parms... there's an option named blacklist, at least
2017-05-05 16:25:00 <clandmeter> did you try single?
2017-05-05 16:32:23 <hiro> clandmeter: yes, that works
2017-05-05 16:33:00 <hiro> then i was able to fix my issue
2017-05-05 17:08:10 <iron_houzi> Anybody provisioning their alpine boxes with ansible? I'm having trouble with the `user` module not finding the `adduser` binary .. any ideas of how to resolve this without reverting to the `shell`/`commmand` modules?
2017-05-05 17:16:15 <_ikke_> shadow contains useradd, but no adduser
2017-05-05 17:32:20 <iron_houzi> _ikke_: Yeah .. but do you have any ideas for how to get around this problem when using ansible without reverting to `shell`/`command` modules?
2017-05-05 17:59:57 <_ikke_> nope
2017-05-05 18:00:56 <vectr0n> https://bugs.alpinelinux.org/issues/6997 i suppose none of the devs will be touching this?
2017-05-05 18:06:05 <Shiz> iron_houzi: adduser should be there just fine, that's weird
2017-05-05 18:06:20 <Shiz> it's part of busybox
2017-05-05 18:07:28 <Shiz> vectr0n: a stack trace would help -- what's commented there is the strace, not a stack trace
2017-05-05 18:07:45 <vectr0n> this is the same issue as before and ncopa fixed it
2017-05-05 18:08:35 <vectr0n> its impossible to get a hypervisor to graceful restart/shutdown w/ a alpine linux vm running atm
2017-05-05 18:54:32 <ncopa> vectr0n looking at it now
2017-05-05 18:54:39 <ncopa> i posted how to get a proper backtrace
2017-05-05 18:54:52 <vectr0n> kk ty cuz i have 0 idea, sorry >.> will look now
2017-05-05 18:55:10 <Xe> ncopa: don't you mean `backtrace full`?
2017-05-05 18:56:06 <Xe> (that gives a bunch more context which is useful for this)
2017-05-05 19:02:39 <ncopa> might be good with full
2017-05-05 19:02:52 <ncopa> but probably enough with just backtrace
2017-05-05 19:03:07 <ncopa> i don think its same issue as last time
2017-05-05 19:05:22 <vectr0n> now im super confused, all of a sudden it wont crash, yet same system, nothings been updated :s
2017-05-05 19:05:50 <vectr0n> even comes back up after a reboot w/o a crash, wth is going on lol >.>
2017-05-05 19:06:13 <kahiru> hardware failing?
2017-05-05 19:06:33 <vectr0n> nope
2017-05-05 19:07:36 <vectr0n> still doesnt graceful restart/shutdown
2017-05-05 19:15:56 <ncopa> i found another strerror_r
2017-05-05 19:16:23 <ncopa> its likely the problem
2017-05-05 19:21:50 <ncopa> it should happen with open-vm-tools logs error
2017-05-05 19:22:09 <ncopa> vgauth whatever that is
2017-05-05 19:22:10 <Shiz> oh deary
2017-05-05 19:22:25 <Shiz> re:graceful shutdown: that seems like it's a missing ACPI kernel thing
2017-05-05 19:23:51 <ncopa> im gonna push a fix to edge
2017-05-05 19:24:01 <ncopa> but it would be nice with a backtrace to confirm its the same thing
2017-05-05 20:06:16 <thxffo> this distro sounds pretty neat
2017-05-05 20:06:26 <thxffo> i think i will install her
2017-05-05 20:06:44 <Shiz> :)
2017-05-05 20:07:18 <thxffo> can i use this as a desktop environment
2017-05-05 20:07:39 <thxffo> instead of ubuntu, mint, cent, etc.
2017-05-05 20:08:13 <Shiz> sure
2017-05-05 20:08:25 <Shiz> you'll have to install X etc yourself though
2017-05-05 20:16:52 <thxffo> sounds good, i will take the plunge
2017-05-05 20:32:46 <vectr0n> ncopa, if i can get it to crash ill post one
2017-05-05 21:21:23 <trfl> what would it take to get xdelta3 to be built with lzma? it'll link in xz-libs if they are present at time of compilation, and would result in a far more useful build
2017-05-05 21:21:37 <trfl> seeing how most public xd3 patches were made using the (default) lzma compression
2017-05-05 21:32:53 <Shiz> trfl: that can be worked on
2017-05-05 21:34:43 <Shiz> trfl: easiest way is to submit a PR on github/to the mailing list
2017-05-05 21:35:13 <trfl> aight, I'll give that a shot
2017-05-05 21:35:15 <trfl> cheers!
2017-05-05 21:37:07 <Shiz> trfl: btw apparently lzma-by-default was only enabled in 3.0.11, from jan 2016
2017-05-05 21:37:12 <Shiz> sure most public patches are lzma?
2017-05-05 21:38:29 <trfl> well, I've only bumped into three patches lately, but those were all unusable until I built it myself
2017-05-05 21:38:38 <trfl> could be observer's perspective lol
2017-05-05 21:39:21 <Shiz> i mean it's probably still good to have xz if it's by default now
2017-05-05 21:39:23 <Shiz> just saying
2017-05-05 23:17:47 <chesan> Tried to install gcc with "apk add gcc", but looks like it didnot install the ".h" files. How to make gcc function?
2017-05-05 23:18:45 <Shiz> apk add libc-dev
2017-05-05 23:18:48 <Shiz> or for a more complete package, try
2017-05-05 23:18:50 <Shiz> apk add build-base
2017-05-05 23:18:52 <Shiz> :)
2017-05-05 23:21:52 <chesan> Is there an option when starting boot from USB in Live mode to retain changes made to file system?
2017-05-05 23:23:02 <Shiz> https://wiki.alpinelinux.org/wiki/Alpine_local_backup
2017-05-05 23:25:04 <chesan> Is there a hope the Logo will get changed or elliminated alltogether?
2017-05-05 23:30:36 <chesan> Many linuxes go some HDD r/w on it's own, not once, but in periods and constantly. mostly When doing windowed terminal. Why does it do it, and is there a way to turn it off
2017-05-05 23:33:10 <Shiz> what do you mean?
2017-05-05 23:33:39 <chesan> sorry it started to flick my HDD again and doesn't stop
2017-05-05 23:34:00 <Shiz> uuh
2017-05-06 12:48:33 <Jangal> Hi!
2017-05-06 12:49:24 <Jangal> Is there some helper tool to fetch package sources from repository?
2017-05-06 12:50:06 <Jangal> And then how can I locally compile a package without using root? If I try with root it tells me to fuck off but if I try it using limited user then I have no permissions.
2017-05-06 12:52:07 <Shiz> Jangal: add your local user to the abuild group
2017-05-06 12:52:23 <Shiz> and yes, there's # abuild fetch
2017-05-06 12:53:58 <Jangal> Shiz: thanks, but with getting sources I meant to download ABUILD files and patches for existing packages.
2017-05-06 12:54:38 <Shiz> those are all stored in aports
2017-05-06 12:54:49 <Shiz> git clone git://git.alpinelinux.org/aports
2017-05-06 12:55:30 <Jangal> Thanks, I was hoping that there is some tool that fetches just some specific directories but this will be fine, thanks!
2017-05-06 12:55:30 <Shiz> (optionally git checkout 3.x-stable if you want to build packages that belong to a release version 3.x instead of edge)
2017-05-06 12:59:10 <Jangal> Shiz: after building the package, where can it be found?
2017-05-06 12:59:15 <Shiz> ~/packages
2017-05-06 13:00:27 <Shiz> you can override it by setting REPODEST= in ~/.abuild/abuild.conf
2017-05-06 13:00:35 <Shiz> (or /etc/abuild.conf system-wide)
2017-05-06 13:04:42 <Jangal> ERROR: APKINDEX.tar.gz: UNTRUSTED signature
2017-05-06 13:04:57 <Jangal> Can it automatically install after build without the signature?
2017-05-06 13:05:24 <Shiz> you probably want to add your key to the system keys
2017-05-06 13:05:45 <Shiz> as root: cp ~yourbuilderuser/.abuild/*.pub /etc/apk/keys
2017-05-06 13:06:34 <Shiz> https://wiki.alpinelinux.org/wiki/Creating_an_Alpine_package#Setup_your_system_and_account is helpful for this btw
2017-05-06 16:23:42 <^ingo^^^> I have problems so assign a static ipv6 to an interface. It always assign the dynamic one. im on 3.5.2 inside an kvm. ipv4 works es expected. Any hints where to search?
2017-05-06 16:27:39 <Shiz> ^ingo^^^: /etc/network/interfaces should be your go-to place
2017-05-06 16:35:48 <^ingo^^^> ok, i found the Problem. "echo "ipv6" >> /etc/modules" is not optional, it's mandetory for static ip as described in https://wiki.alpinelinux.org/wiki/Configure_Networking#IPv6_Static_Address_Configuration
2017-05-06 16:36:54 <hiro> weird, why should the ipv6 module be required by static address but not dynamic?!
2017-05-06 16:36:59 <hiro> that makes no sense?
2017-05-06 16:38:29 <Shiz> hiro: SLAAC, maybe
2017-05-06 16:38:48 <Shiz> it seems weird though
2017-05-06 16:38:50 <hiro> hm? slaac is still ipv6
2017-05-06 16:39:13 <hiro> i think ^ingo^^^ must have missed something
2017-05-06 16:39:20 <Shiz> what i really want to know if why we still distribute ipv6.ko as a module
2017-05-06 16:39:24 <Shiz> it should be =y...
2017-05-06 16:39:33 <hiro> no
2017-05-06 16:39:42 <hiro> ipv6 shouldn't accidentally auto-activate
2017-05-06 16:39:44 <Shiz> hiro: well i mean it may be handled by the kernel where otherwise the dhcpd would take care of address assignment
2017-05-06 16:40:05 <hiro> yeah, but as you say, with slaac that's not the case
2017-05-06 16:40:12 <^ingo^^^> that was i also think. but it tried multiple times. only if i manualy restart the network it assigns the ip not not boot
2017-05-06 16:40:29 <hiro> suddenly you're reachable not via one, but many addresses, might be above your capacity as a free-time admin
2017-05-06 16:40:44 <Shiz> uh
2017-05-06 16:40:53 <Shiz> even with ipv6 to =y ipv6 won't magically activate lol
2017-05-06 16:41:01 <hiro> ^ingo^^^: there should be another reason, dig deeper :P
2017-05-06 16:41:03 <Shiz> you'd need an inet6 stanza in /etc/network/interfaces at the very least
2017-05-06 16:41:36 <hiro> perhaps there's special magic somewhere disabling it, but i thought in the kernel slaac will be enabled by default
2017-05-06 16:43:46 <Shiz> net.ipv6.conf.all.autoconf = 0
2017-05-06 16:44:00 <Shiz> and possibly accept_ra = 0
2017-05-06 16:47:47 <^ingo^^^> I startet with the wiki-example for dual-stack. but with no success, add the "optional" step, and it works now. on centos7 i didn't have this problem.
2017-05-06 16:48:10 <^ingo^^^> will test it with a few vm, where i migrate apps.
2017-05-06 16:49:30 <^ingo^^^> on question are open. how to add multiple ipv6 addresses to an interface? on centos i have IPV6ADDR_SECONDARIES for this.
2017-05-06 17:05:46 <hiro> Shiz: yes, those i mean and think they are 1 by default
2017-05-06 17:07:27 <hiro> ^ingo^^^: ip a a address
2017-05-06 17:59:00 <^ingo^^^> second iface eth0 inet6 static in /etc/network/interfaces do the job
2017-05-06 20:10:01 <mepholic> hey guys
2017-05-06 20:10:38 <mepholic> I'm using zsh as my primary shell for my user on alpine on my laptop
2017-05-06 20:11:01 <mepholic> when I login via tty, my prompt just shows control characters for my PS1
2017-05-06 20:12:26 <mepholic> like \[\e[1;32m\]\h [\[\e[0m\]\w\[\e1;32m\]]\$ \[\e[0m\]
2017-05-06 20:12:51 <mepholic> instead of the properly colored prompt
2017-05-06 20:13:13 <mepholic> it works properly un urxvt once I'm logged in a graphical environment
2017-05-06 20:13:55 <mepholic> I know that colors work properly on the tty, cause i have zsh syntax highlighting turned on which appears to work
2017-05-06 20:14:46 <student0> howdy!
2017-05-06 20:18:30 <leah2> mepholic: sure it's running zsh?
2017-05-06 20:18:40 <mepholic> yeah definitely
2017-05-06 20:19:02 <mepholic> I DO have another strange issue though, that may be related
2017-05-06 20:19:19 <leah2> echo $ZSH_VERSION ?
2017-05-06 20:19:25 <mepholic> when zim's (zsh configuration script) ssh plugin loads
2017-05-06 20:19:28 <mepholic> on initial login
2017-05-06 20:19:39 <Shiz> mepholic: maybe TERM isn't set properly in your tty?
2017-05-06 20:19:57 <mepholic> it gives a busybox error for ps
2017-05-06 20:20:08 <mepholic> even though it should be running in zsh
2017-05-06 20:20:16 <leah2> 
ACTION is pretty sure it's not a zsh, since \h isnt expanded :P

2017-05-06 20:20:26 <mepholic> Shiz: good call, i'll look into that
2017-05-06 20:20:37 <mepholic> though I'm skeptical, since color does seem to work
2017-05-06 20:20:59 <mepholic> hmm
2017-05-06 20:21:05 <mepholic> my TERM is set to "linux"
2017-05-06 20:21:32 <mepholic> leah2: $ZSH_VERSION shows 5.2
2017-05-06 20:21:48 <leah2> oO
2017-05-06 20:23:08 <leah2> ah
2017-05-06 20:23:08 <mepholic> I wish fbgrab was in the repos
2017-05-06 20:23:17 <leah2> you realize that prompt is for bash?
2017-05-06 20:23:42 <leah2> zsh uses %h %m etc
2017-05-06 20:23:46 <mepholic> I thought zsh ps1's were compatible
2017-05-06 20:23:54 <mepholic> let me login and check my prompt var
2017-05-06 20:23:54 <leah2> nope
2017-05-06 20:23:59 <Xe> hi student0
2017-05-06 20:24:17 <mepholic> and when I say login, I mean type startx
2017-05-06 20:24:42 <mepholic> huh leah2
2017-05-06 20:24:44 <mepholic> good call
2017-05-06 20:24:51 <mepholic> now I wonder where that's coming from :)
2017-05-06 20:24:53 <leah2> just set it in .zshrc
2017-05-06 20:25:09 <mepholic> leah2: I'm using zim
2017-05-06 20:25:14 <mepholic> zim _should_ handle it
2017-05-06 20:25:15 <leah2> whatever that is
2017-05-06 20:25:26 <mepholic> it's like oh-my-zsh
2017-05-06 20:25:27 <mepholic> or prezto
2017-05-06 20:25:33 <mepholic> but lighter weight
2017-05-06 20:44:40 <mepholic> interesting
2017-05-06 20:44:52 <mepholic> Shiz: it is related to my term
2017-05-06 20:45:08 <Shiz> :P
2017-05-06 20:45:14 <Shiz> try setting is to xterm or xterm-256color
2017-05-06 20:45:18 <Shiz> it*
2017-05-06 20:45:22 <mepholic> https://github.com/Eriner/zim/blob/master/modules/prompt/init.zsh
2017-05-06 20:45:32 <mepholic> just not how you'd expect it to be
2017-05-06 20:45:54 <Shiz> hehe
2017-05-06 20:46:11 <mepholic> what's the best way to set my prompt on a tty
2017-05-06 20:46:25 <mepholic> I hear that it's not good practice to set that kind of thing in your bashrc
2017-05-06 20:46:37 <mepholic> and generally you should let the "terminal application" decide
2017-05-06 20:46:45 <Shiz> uhh
2017-05-06 20:46:47 <mepholic> well, zshrc in this case
2017-05-06 20:47:05 <mepholic> and yeah
2017-05-06 20:47:12 <Shiz> well the thing is
2017-05-06 20:47:14 <mepholic> I asked the wrong question entirely
2017-05-06 20:47:16 <Shiz> your tty IS a linux
2017-05-06 20:47:22 <Shiz> so setting it to xterm wont magically make it work
2017-05-06 20:47:29 <Shiz> because it's still a linux TERM
2017-05-06 20:47:37 <Shiz> so i'd just tell you to patch the thing in your init.zsh
2017-05-06 20:47:39 <Shiz> :P
2017-05-06 20:47:47 <mepholic> I mean TERM, not prompt
2017-05-06 20:47:49 <mepholic> :/
2017-05-06 20:48:06 <mepholic> well
2017-05-06 20:48:08 <Shiz> so do i
2017-05-06 20:48:10 <Shiz> i mean
2017-05-06 20:48:15 <mepholic> I wanna talk to the maintainer of the project
2017-05-06 20:48:18 <Shiz> simply changing your TERM will cause other issues
2017-05-06 20:48:19 <mepholic> and see his justification
2017-05-06 20:48:22 <mepholic> right
2017-05-06 20:48:27 <Shiz> like software believing your tty has capabilities that it doesn't
2017-05-06 20:48:29 <Shiz> :P
2017-05-06 20:48:34 <mepholic> exactly
2017-05-06 20:48:36 <mepholic> :)
2017-05-06 20:51:49 <mepholic> hmmm
2017-05-06 20:52:00 <mepholic> there is a linux-c terminfo file
2017-05-06 20:52:06 <mepholic> which appears to be for color support
2017-05-06 20:52:19 <mepholic> Shiz: is there any way I can change the default tty TERM?
2017-05-06 20:52:34 <mepholic> without hacking my zshrc file up?
2017-05-06 20:52:57 <Shiz> mepholic: inittab
2017-05-06 20:53:08 <mepholic> i still don't think that setting that kind of thing in my zshrc is the best option, even if I put it in a conditional to set it only if the term is vcurrently 'linux'
2017-05-06 20:53:10 <mepholic> ok
2017-05-06 20:53:33 <Shiz> after tty1/tty2/etc add the term type
2017-05-06 20:53:34 <Shiz> so e.g.
2017-05-06 20:53:38 <Shiz> tty1::respawn:/sbin/getty 38400 tty1
2017-05-06 20:53:42 <Shiz> -> tty1::respawn:/sbin/getty 38400 tty1 linux-c
2017-05-06 20:55:23 <mepholic> right
2017-05-06 20:55:28 <mepholic> just found the docs on that
2017-05-06 20:55:37 <mepholic> thank you very much for the help
2017-05-06 20:55:39 <mepholic> :)
2017-05-06 20:56:19 <mepholic> lets test er out
2017-05-06 20:57:42 <mepholic> hah
2017-05-06 20:57:47 <mepholic> that seemed to do the trick
2017-05-06 20:58:25 <mepholic> i guess the next thing to look into is why part of my zsh init scripts seem to be using busybox
2017-05-06 20:58:46 <mepholic> instead of coreutils
2017-05-06 20:59:01 <scv> what's the order of your PATH
2017-05-06 20:59:04 <mepholic> oh wait
2017-05-06 20:59:17 <mepholic> ps isn't part of coreutils is it
2017-05-06 20:59:21 <scv> procps
2017-05-06 20:59:28 <mepholic> that's it
2017-05-06 20:59:31 <mepholic> :^)
2017-05-06 21:00:07 <mepholic> neat
2017-05-06 21:01:09 <mepholic> awesome
2017-05-06 21:01:16 <luxio> fantastic
2017-05-06 21:01:18 <mepholic> all of my weird login issues appear to be resolved now
2017-05-06 21:01:20 <mepholic> thanks all
2017-05-06 21:01:25 <luxio> no problem
2017-05-06 21:01:26 <luxio> glad to help
2017-05-06 21:02:08 <mepholic> i'm glad you could be of service :^)
2017-05-06 21:03:28 <mepholic> in a few months I'm probably going to find out that linux-c isn't for color and it's actually for cyrillic or something
2017-05-06 21:03:35 <mepholic> and I failed at looking at the docs
2017-05-06 21:03:49 <mepholic> ¯\_(ツ)_/¯
2017-05-06 21:03:51 <mepholic> it works
2017-05-06 22:54:47 <luxio> Is there a way to reinstall but still keep the files in my home directory?
2017-05-06 23:00:28 <vectr0n> i think /home would need to be in a separate partition and if you didnt touch it on the install it would survive?
2017-05-06 23:00:40 <luxio> hmm it's not in a separate partition
2017-05-06 23:01:19 <vectr0n> your safest bet would be to back it up to another system while you do the reinstall, but there could be another way def not an expert :)
2017-05-06 23:02:15 <hiro> remove everything manually and don't format or repartition anything
2017-05-06 23:03:47 <vectr0n> good point..
2017-05-06 23:05:09 <luxio> Also my system time is wrong. It says it's 3PM but it's 7PM
2017-05-06 23:05:14 <luxio> ~ > date
2017-05-06 23:05:16 <luxio> Sat May  6 15:04:48 EDT 2017
2017-05-06 23:06:09 <vectr0n> double check one of the ntp servers is installed/configured and started?
2017-05-06 23:55:29 <nekocentral> Yay the same problem like always xD nginx not starting after adding it to the default runtime
2017-05-07 00:02:22 <parazyd> works for me™
2017-05-07 00:02:49 <nekocentral> yea for me its a 50/50 chance that it works
2017-05-07 00:03:03 <nekocentral> on some VM it works on some not
2017-05-07 01:38:14 <pickfire> parazyd: Are you using alpine linux?
2017-05-07 01:38:22 <parazyd> on some machines
2017-05-07 01:38:27 <pickfire> parazyd: x220?
2017-05-07 01:38:30 <parazyd> nope
2017-05-07 01:38:33 <pickfire> Ah
2017-05-07 01:38:34 <pickfire> Why?
2017-05-07 01:38:37 <parazyd> pi1, lime2
2017-05-07 01:38:48 <pickfire> parazyd: What do you use on x220?
2017-05-07 01:38:54 <parazyd> gentoo, what else :p
2017-05-07 01:38:59 <pickfire> Ah
2017-05-07 01:39:11 <pickfire> I can't seem to build coreboot on alpine.
2017-05-07 01:39:23 <pickfire> Maybe because glibc is needed.
2017-05-07 01:39:25 <parazyd> i don't think it will build on musl
2017-05-07 01:39:30 <pickfire> Yeah.
2017-05-07 01:39:35 <parazyd> make a debian chroot with debootstrap
2017-05-07 01:39:42 <pickfire> Huh?
2017-05-07 01:39:50 <pickfire> A chroot will work?
2017-05-07 01:39:52 <parazyd> make a glibc chroot and build it there
2017-05-07 01:39:54 <parazyd> sure
2017-05-07 01:40:03 <pickfire> I thought chroot will use the libc outside it? No?
2017-05-07 01:40:19 <pickfire> I tried back then using an arch chroot, stuff still breaks.
2017-05-07 01:40:50 <pickfire> I think there might be something to do with kernel.
2017-05-07 01:42:40 <parazyd> it could  be grsec blocking things in the chroot
2017-05-07 01:42:45 <parazyd> but this stuff works
2017-05-07 04:09:45 <TML> is there anything a new-comer to Alpine can do to help arrive at 3.6?
2017-05-07 06:33:53 <ncl> Which NTP client to run? ('busybox', 'openntpd', 'chrony' or 'none') [chrony] openntpd
2017-05-07 06:33:53 <ncl> ERROR: unsatisfiable constraints:
2017-05-07 06:33:54 <ncl>   openntpd (missing):
2017-05-07 06:33:54 <ncl>     required by: world[openntpd]
2017-05-07 06:33:54 <ncl>  * rc-update: service `openntpd' does not exist
2017-05-07 06:34:05 <ncl> 2 years later, install script still broken?
2017-05-07 06:34:09 <ncl> :>
2017-05-07 06:35:53 <ncl> How would you like to use it? ('sys', 'data', 'lvm' or '?' for help) [?] sys
2017-05-07 06:35:54 <ncl> ERROR: unsatisfiable constraints:
2017-05-07 06:35:57 <ncl> oh, okay
2017-05-07 06:37:52 <asie> don't worry
2017-05-07 06:37:58 <asie> solutions are only an unsatisfiable constraint away
2017-05-07 06:40:05 <ncl> back then i just assumed it was just because it was a small project, but now I actually see people mentioning it
2017-05-07 06:40:15 <ncl> and the install scripts are still nonsensical
2017-05-07 06:53:53 <kaniini> ncl: did you set up apk mirrors?
2017-05-07 06:57:27 <ncl> yes, it turned out the dns i selected wasn't working
2017-05-07 07:00:11 <kaniini> anyway, a new installer is on the todo for 3.7
2017-05-07 07:01:23 <asie> ncl: it's still kind of a small project
2017-05-07 07:02:23 <kaniini> yes, lots of opportunity to make large impacts here by contributing
2017-05-07 10:05:09 <das_ofce> hello hello.. what is rotating messages? :)
2017-05-07 10:05:33 <das_ofce> I have logrotate.. but that is in cron and not in use as I can see..
2017-05-07 10:08:03 <das_ofce> it looks like syslogd is doing that itself..
2017-05-07 10:25:26 <nymacro> hi Alpinists(?)
2017-05-07 10:26:20 <nymacro> is there a more up-to-date guide to building a custom iso? Following the instructions https://wiki.alpinelinux.org/wiki/How_to_make_a_custom_ISO_image leaves me with an iso that boots me into recovery mode
2017-05-07 11:35:48 <nsz> can it be that there are no cjk fonts in alpine? (other than bitmap fonts)
2017-05-07 11:37:00 <asie> no ipafont?
2017-05-07 11:37:24 <asie> https://github.com/alpinelinux/aports/commit/cf2128830a60c4acdf7c702ce84eba30fdc666b1
2017-05-07 11:37:29 <asie> nsz: try font-ipa
2017-05-07 11:37:39 <asie> i don't think it covers all of CJK though
2017-05-07 11:37:41 <asie> just the J part
2017-05-07 11:37:52 <asie> also, it's in testing
2017-05-07 11:39:34 <nsz> asie: thanks ipa font worked
2017-05-07 12:54:02 <thunfisch> I can't mount any nfs shares. installed nfs-utils, try mounting with nfs type, mount just hangs without displaying anything, need to SIGKILL it. nfs-server is on debian and perfectly working (serves 10+ other machines)
2017-05-07 12:54:08 <thunfisch> any idea what's going wrong there?
2017-05-07 12:54:17 <thunfisch> using 3.5
2017-05-07 12:55:07 <thunfisch> wow, not even SIGKILL terminates the mount command. wtf.
2017-05-07 12:58:24 <thunfisch> ah, turns out busybox does not support mounting nfs shares with locking. needed to supply nolock option.
2017-05-07 13:26:06 <Shiz> hehe
2017-05-07 13:26:17 <Shiz> sounds like fun
2017-05-07 14:47:40 <Xe> thunfisch: the fun part is that when a process is unkillable by SIGKILL, it's stuck in a non-returning syscall
2017-05-07 14:49:02 <Shiz> something something hell upon whoever thought it was a good to implement nfs in the kernel
2017-05-07 14:57:28 <darkfader> you're aware of the diff between hard and soft mounts?
2017-05-07 14:57:29 <darkfader> the intr flag?
2017-05-07 14:57:36 <darkfader> the idea of transaction safety being the default
2017-05-07 14:57:40 <darkfader> and kernel io states?
2017-05-07 14:58:13 <darkfader> not to say that the linux nfs implementation isn't the worst ever made
2017-05-07 14:58:19 <darkfader> becasue it is
2017-05-07 14:58:47 <darkfader> but the main thing is that people run it quite misconfigured to their purpose
2017-05-07 14:59:10 <darkfader> the defaults make sense if you want to run a database on it, or any such. to protect from idiotic dev's code
2017-05-07 14:59:19 <darkfader> but in any other case you'll not want a hard mount
2017-05-07 14:59:30 <darkfader> and if you don't use a hard mount and actually set up the timeouts etc
2017-05-07 14:59:36 <darkfader> then it'll work as you expect
2017-05-07 14:59:58 <darkfader> if you configure it different from what you want, it'll behave different from you want
2017-05-07 15:00:09 <darkfader> and if you just use defaults that are wrong for you, you can call it devops
2017-05-07 15:00:12 <darkfader> but it'll not work
2017-05-07 15:53:26 <ncl> why was the tor package removed?
2017-05-07 15:57:32 <ncl> libc issues?
2017-05-07 15:59:29 <pickfire> What?
2017-05-07 15:59:33 <pickfire> Why is tor removed?
2017-05-07 16:00:00 <pickfire> ncl: When is it removed?
2017-05-07 16:00:34 <pickfire> nsz: There is chinese font. I have added wqy-zenhei back then.
2017-05-07 16:00:47 <pickfire> Too lazy to add wqy-microhei.
2017-05-07 16:01:14 <pickfire> But I don't see any pinyin IME in alpine. T_T
2017-05-07 16:01:31 <pickfire> One of the reason I dual boot with arch.
2017-05-07 17:30:26 <Shiz> ncl: ?
2017-05-07 17:30:36 <Shiz> https://git.alpinelinux.org/cgit/aports/tree/community/tor?h=master
2017-05-07 17:30:39 <Shiz> tor hasn't gone anywhere
2017-05-07 17:31:06 <Shiz> http://pkgs.alpinelinux.org/package/v3.5/community/x86_64/tor
2017-05-07 17:35:01 <ncl> /community/
2017-05-07 17:36:01 <Shiz> and? :P
2017-05-07 17:36:24 <Shiz> it was always community
2017-05-07 17:39:56 <Shiz> well, testing before, but you know what I mean
2017-05-07 17:40:58 <ncl> forgot about repos that have categories like that
2017-05-07 17:43:13 <Shiz> :P
2017-05-07 17:44:53 <ncl> are there options to build packages from source, for things like openssl cipher patented ciphers
2017-05-07 17:46:17 <Shiz> https://wiki.alpinelinux.org/wiki/Include:Setup_your_system_and_account_for_building_packages
2017-05-07 17:54:52 <ncl> do you have to use lvm for a luks root
2017-05-07 17:55:20 <Shiz> no
2017-05-07 18:00:17 <ncl> is there just like, a tarball i can throw on the disk like gentoo or
2017-05-07 18:01:06 <Shiz> sure
2017-05-07 18:01:15 <Shiz> https://alpinelinux.org/downloads/
2017-05-07 18:01:18 <Shiz> the minirootfs here :P
2017-05-07 18:01:21 <Shiz> it won't be complete though
2017-05-07 18:04:17 <vidr> Hi, anyone have any clue about this issue: https://forum.alpinelinux.org/forum/networking/network-not-working-boot ?
2017-05-07 18:17:03 <ncl> core:/#  setup-lbu /mnt
2017-05-07 18:17:04 <ncl> /media//mnt: not a directory
2017-05-07 18:17:06 <ncl> lol
2017-05-07 18:20:57 <ncl> this script really wants to use /media specifically
2017-05-07 18:21:00 <ncl> nice
2017-05-07 18:22:18 <ncl> who wrote this
2017-05-07 18:29:07 <Shiz> that's probably because the initramfs automatically mounts stuff at /media (i think)
2017-05-07 18:29:33 <Shiz> so it makes no sense to do it elsewhere else it won't be found anyway
2017-05-07 18:30:20 <ncl> isn't setup-lbu how the rootfs is setup during the install
2017-05-07 18:30:43 <Shiz> setup-lbu is only relevant if you're planning to run from RAM
2017-05-07 18:30:52 <Shiz> it's where your local changes will be stored (and loaded by the initramfs)
2017-05-07 19:40:42 <ncl> I'm pretty sure my machine isnt going to boot back up
2017-05-07 19:43:25 <Shiz> what did you use to install?
2017-05-07 19:45:36 <ncl> I wanted a dmcrypt root on gpt
2017-05-07 19:45:43 <ncl> i think it just booted to the liveusb again
2017-05-07 19:47:13 <ncl> oh, great, gummiboot didn't even work apparently
2017-05-07 20:02:26 <ncl> and still doesnt
2017-05-07 21:47:49 <purf> question regarding ipv4 on with the following error:
2017-05-07 21:47:49 <purf> udhcpc: socket(AF_PACKET,2,8): Address family not supported by protocol
2017-05-07 21:47:49 <purf> util-03:~# modprobe AF_PACKET
2017-05-07 21:47:49 <purf> modprobe: FATAL: Module AF_PACKET not found in directory /lib/modules/4.4.52-0-grsec
2017-05-07 21:47:49 <purf> Linux util-03 4.4.52-0-grsec #1-Alpine SMP Tue Feb 28 10:15:40 GMT 2017 x86_64 Linux
2017-05-07 21:47:49 <purf> util-03:~# uname -a
2017-05-07 21:47:49 <purf> util-03:~# cat /etc/alpine-release
2017-05-07 21:47:50 <purf> 3.5.2
2017-05-07 21:49:22 <purf> damn, it's been awhile since I've irc'd, didn't realize that would appear as a bunch of messages :)
2017-05-07 21:50:42 <Shiz> modprobe af_packet
2017-05-07 21:50:44 <Shiz> no caps
2017-05-07 21:50:49 <Shiz> but id on't think that's it
2017-05-07 21:51:00 <purf> modprobe: FATAL: Module af_packet not found in directory /lib/modules/4.4.52-0-grsec
2017-05-07 21:51:16 <Shiz> anyway, this is an ipv6 thing
2017-05-07 21:51:17 <Shiz> try modprobe ipv6
2017-05-07 21:51:19 <TemptorSent> ls -lR /lib/modules/4.4.52-0-grsec
2017-05-07 21:51:21 <purf> modprobe: FATAL: Module af_packet not found in directory /lib/modules/4.4.52-0-grsec
2017-05-07 21:51:33 <purf> oops
2017-05-07 21:51:42 <purf> wrong buffer
2017-05-07 21:51:52 <TemptorSent> Do you have modules?
2017-05-07 21:52:29 <TemptorSent> This might have been broken by a bug that was just very recently fixed in apk.
2017-05-07 21:52:43 <purf> so, is there an apk package I need to install?
2017-05-07 21:53:11 <purf> ls -lR /lib/modules/4.4.52-0-grsec produces a bunch of output
2017-05-07 21:53:12 <TemptorSent> If you're missing the modules, you probably need to update the kernel to get a set.
2017-05-07 21:53:24 <purf> okay, I'll try that.. thanks
2017-05-07 21:53:41 <purf> weird thing is that the installer was able to lease a v4 address
2017-05-07 21:53:45 <TemptorSent> Both apk and the kernel packaging were somewhat broken.
2017-05-07 21:53:51 <purf> ah, that makes sense
2017-05-07 21:54:01 <TemptorSent> Yeah, it will have ipv4 support, but not the filters
2017-05-07 21:54:19 <Shiz> this isn't related to filters
2017-05-07 21:54:31 <TemptorSent> AF_PACKET
2017-05-07 21:55:18 <TemptorSent> Everything but the bare base IPV4 is compiled as a module IIRC,
2017-05-07 21:55:38 <purf> apk update && apk upgrade should upgrade the kernel, correct? (if one is available)
2017-05-07 21:55:47 <Shiz> fd = xsocket(PF_PACKET, SOCK_DGRAM, htons(ETH_P_IP));
2017-05-07 21:55:51 <Shiz> this is the call in question
2017-05-07 21:55:55 <Shiz> it should not be doing htons...
2017-05-07 21:56:10 <Shiz> purf: add -a to # apk upgrade to be sure
2017-05-07 21:56:15 <TemptorSent> So the installer had what it needed, but upon booting with the installed kernel without modules, it can't load what's needed.
2017-05-07 21:56:15 <purf> thanks
2017-05-07 21:57:09 <purf> heh -- need an internet connection to upgrade via internets, duh
2017-05-07 21:57:19 <purf> I guess I'll have to wait for the bugfix :)
2017-05-07 21:57:20 <TemptorSent> Hmmm, yeah - not sure why the htons there -- shouldn't it already be in fixed byte order?
2017-05-07 21:57:44 <TemptorSent> actually, just running update-kernel may work...
2017-05-07 21:57:54 <TemptorSent> Twice.
2017-05-07 21:58:29 <TemptorSent> Is the apk still in your cache?
2017-05-07 21:58:41 <purf> unsure, let me give it a try
2017-05-07 21:58:53 <Shiz> i don't think it's a kernel issue
2017-05-07 21:59:00 <Shiz> purf: can you strace udhcpc?
2017-05-07 21:59:12 <purf> sure, let me try
2017-05-07 21:59:17 <TemptorSent> I think he got bit by the apk bug that wipes modules for the active kernel.
2017-05-07 21:59:34 <purf> nah, no strace, sorry
2017-05-07 22:00:01 <TemptorSent> If nothing in /lib/modules/`uname -r`/kernel nothing is going to be happy thats not already loaded from the initfs.
2017-05-07 22:00:02 <purf> I'm using the virt distribution (running as a xen domU on an alpine dom0)
2017-05-07 22:00:15 <ncl> https://bugs.alpinelinux.org/issues/5730
2017-05-07 22:01:01 <Shiz> https://bugs.alpinelinux.org/issues/6516
2017-05-07 22:01:24 <Shiz> purf: ^
2017-05-07 22:01:25 <purf> I saw 6516
2017-05-07 22:01:26 <Shiz> can you
2017-05-07 22:01:59 <purf> "Once the module was added and loaded dhcp worked fine." can't load the module that isn't there but I guess that's why you're suggesting to load the iso and try installing from there
2017-05-07 22:02:04 <Shiz> find /lib/modules -name af_packet.ko ?
2017-05-07 22:02:21 <TemptorSent> Hmm, bugs.alpinelinux isn't resolving for me at the moment for some reason.
2017-05-07 22:02:21 <purf> util-03:/lib/modules/4.4.59-0-grsec# find /lib/modules -name af_packet.ko
2017-05-07 22:02:33 <purf> util-03:/lib/modules/4.4.59-0-grsec#
2017-05-07 22:02:43 <Shiz> sounds like a failed kernel upgrade then
2017-05-07 22:03:16 <Shiz> try to get the linux-grsec .apk on something you have
2017-05-07 22:03:19 <TemptorSent> There it goes! Something in DNS is acting wonky for alpinelinux.org
2017-05-07 22:03:20 <Shiz> and installing it manuall
2017-05-07 22:03:22 <Shiz> y
2017-05-07 22:03:39 <purf> fun
2017-05-07 22:03:58 <Shiz> http://nl.alpinelinux.org/alpine/v3.5/main/x86_64/linux-grsec-4.4.59-r0.apk
2017-05-07 22:04:00 <Shiz> specifically
2017-05-07 22:04:00 <TemptorSent> Should be in /var/cache/apk
2017-05-07 22:04:03 <Shiz> presuming x86_64
2017-05-07 22:04:20 <purf> yep
2017-05-07 22:04:22 <TemptorSent> No net :)
2017-05-07 22:04:56 <Shiz> tar -tf /var/cache/apk/linux-grsec-4.4.59-r0.apk | grep af_packet then
2017-05-07 22:07:17 <purf> all I've got in /var/cache/apk is APKINDEX.c51f8f92.tar.gz
2017-05-07 22:09:30 <purf> I'm confused why the installation failed if it had net access, should just be copying over from installation media?
2017-05-07 22:09:40 <purf> unless that's the bug
2017-05-07 22:55:17 <TemptorSent> purf - Check the repo on the boot media for the file.
2017-05-07 23:01:43 <purf> TemptorSent: thanks, will do
2017-05-08 00:59:43 <Shiz> https://twitter.com/swiftonsecurity/status/861364611773337600
2017-05-08 03:05:09 <darkfader> ncopa: i forgot about the pv-grub thing, hopefully i can look at it next week when i have a few hours off
2017-05-08 10:23:06 <iron_houzi> Shiz: Sorry, been AFK over the weekend.. Sorry for the confusion, Ansible does not rely on `adduser`, but rather `useradd`. Is it possible to install useradd somehow?
2017-05-08 10:27:00 <parazyd> iron_houzi: install shadow?
2017-05-08 11:16:22 <iron_houzi> parazyd: That's it! Thanks!
2017-05-08 13:29:44 <Lucias> hey Shiz :)
2017-05-08 14:05:56 <Shiz> hello
2017-05-08 14:06:10 <Shiz> iron_houzi: shadow-utils?
2017-05-08 14:06:56 <Shiz> sorry, it's just called shadow
2017-05-08 14:06:58 <Shiz> the package
2017-05-08 16:51:13 <syx> Hi
2017-05-08 16:51:18 <syx> Does this look okay? https://0x0.st/YyB.txt
2017-05-08 16:53:07 <syx> networking | boot in rc-update
2017-05-08 17:56:38 <_ikke_> syx: netmask 128 for ipv6?
2017-05-08 17:56:47 <syx> yup
2017-05-08 17:57:03 <syx> i'm just gonna use dhcp and configure ipv6 manually after boot
2017-05-08 18:14:09 <ingo__> where are set the timezone for timestamps in /var/log/messages? I'm on Europe/Berlin. date shows the correct time. but in the /var/log/messages i'm 2 hours back.
2017-05-08 18:14:34 <clandmeter> logs are always utc
2017-05-08 18:19:01 <ingo__> but only on alpine... have a few centos-kvms here, where all timestamps equal, so this is confusing. Thanks for this info
2017-05-08 18:20:08 <avih> fyi, if someone is interested, tcc (tinycc) can now built and pass all tests on alpine (vanilla only). there's still some issue with va_args though, but it's already capable of building a lot of things (including itself)
2017-05-08 18:58:45 <Shiz> ingo__: you would have to set the system timezone for that to work
2017-05-08 18:58:55 <Shiz> avih: cool, nice work
2017-05-08 18:59:20 <avih> Shiz: i [merely] didn't do anything ;)
2017-05-08 19:04:55 <gromero> hi. does apk support socks5 proxy?
2017-05-08 19:07:28 <feuerteufel> hi @ all
2017-05-08 19:09:05 <feuerteufel> Shiz: What das that mean "system timezone"? I do have the same prob. with time in logs
2017-05-08 19:14:33 <Shiz> gromero: it uses libfetch which i believe doesn't, but you may be able to use torsocks to force it through socks5
2017-05-08 19:15:41 <Shiz> feuerteufel: the present TZ variable
2017-05-08 19:15:53 <gromero> Shiz: thanks. torsocks is my second options. I'll go for it :-)
2017-05-08 19:16:03 <Shiz> I believe you can set it globally in /etc/profile, or just for the syslogger in /etc/conf.d/syslog
2017-05-08 19:18:31 <Shiz> feuerteufel: probably better: ln -sf /usr/share/zoneinfo/Your/Timezone /etc/localtime
2017-05-08 19:18:42 <clandmeter> afaik this is musl related
2017-05-08 19:18:49 <Shiz> e.g. /usr/share/zoneinfo/Europe/Berlin
2017-05-08 19:18:57 <Shiz> clandmeter: not really, it's not different from other libcs :P
2017-05-08 19:19:09 <clandmeter> setting timezone does not change syslog timezone
2017-05-08 19:19:24 <Shiz> it will if you set it at the right time
2017-05-08 19:19:32 <Shiz> so setting it that the syslogd process actually has it set correctly
2017-05-08 19:19:37 <Shiz> which means not in your local profile for instance :P
2017-05-08 19:21:18 <clandmeter> i remember it was logging in utc, maybe the changed it overtime.
2017-05-08 19:21:19 <Shiz> clandmeter: http://git.musl-libc.org/cgit/musl/tree/src/time/__tz.c#n127
2017-05-08 19:21:20 <Shiz> :)
2017-05-08 19:21:26 <clandmeter> http://www.openwall.com/lists/musl/2014/01/29/1
2017-05-08 19:21:27 <Shiz> it first reads TZ, then /etc/localtime
2017-05-08 19:21:50 <Shiz> ah
2017-05-08 19:22:01 <Shiz> right, it's the syslog() function
2017-05-08 19:22:12 <Shiz> didn't take that into account -- you're probably right
2017-05-08 19:22:20 <Shiz> not used to syslog() being part of libc
2017-05-08 19:22:28 <ingo__> Timezone was set on installation. so /etc/localtime is correct. Also set /etc/TZ. in /etc/conf.d/hwclock clock is set to local. on boot is see '[    0.556926] rtc_cmos 00:00: setting system clock to 2017-05-08 20:09:44 UTC (1494274184)' which is not UTC, but localtime
2017-05-08 19:22:43 <feuerteufel> The localetime is corekt, but the time in for exemple "/var/log/messages" is 2h late so I think there is UTC not locale time
2017-05-08 19:23:12 <Shiz> ingo__: you very much want to set hwclock to utc, not local
2017-05-08 19:23:22 <Shiz> /etc/TZ is not used by anything in the system i think
2017-05-08 19:23:46 <Shiz> finally, what clandmeter linked above seems right: in musl, applications using syslog() will always log in UTC, not the local time
2017-05-08 19:24:00 <Shiz> don't think this can be trivially changed
2017-05-08 19:24:28 <clandmeter> seems some ppl patch it according the the thread.
2017-05-08 19:25:18 <Shiz> tbh i don't disagree with dalias, i think any timezone adjusts should be done in syslogd itself, not depend per application logging to it
2017-05-08 19:35:13 <feuerteufel> Shiz: I agree, time has to be set from one point!
2017-05-08 19:35:48 <feuerteufel> But why are there 2 diffrent times on one system?
2017-05-08 19:42:11 <darkfader> example: systems might have users from different continents
2017-05-08 19:42:25 <darkfader> it's the same time, just different time zones
2017-05-08 19:42:38 <darkfader> if you put the system itself in utc and they use TZ it's a lot easier
2017-05-08 19:43:01 <syx> Hi
2017-05-08 19:43:11 <syx> https://0x0.st/YtL.txt should this work to bind the addresses and stuff?
2017-05-08 19:47:56 <feuerteufel> darkfader: you right!
2017-05-08 19:48:35 <feuerteufel> But it looks like TZ dosn't work, correct?
2017-05-08 19:51:18 <ingo__> but this works only if it's consistent. had activated the rc.log. Timestamps here are localtime. So syslog are UTC other logs are localtime.
2017-05-08 19:54:12 <ingo__> if the time offest was also printet, this makes sense. so what time is printet in which log?
2017-05-08 19:55:50 <feuerteufel> ingo__: I'll check ... yust a sec ...
2017-05-08 19:56:40 <Shiz> as mentioned above, it will always be UTC regardless of your timezone
2017-05-08 19:56:45 <Shiz> because of how musl's syslog() call works
2017-05-08 19:57:11 <dalias> syslog is not permitted by POSIX to inspect the TZ variable much less behave as if it called tzset()
2017-05-08 19:57:51 <dalias> the syslog() function that is
2017-05-08 20:01:06 <feuerteufel> Ok apache take's the locale time like that: [08/May/2017:21:58:33 +0200]
2017-05-08 20:01:49 <ingo__> dalias: that is what i have understood.
2017-05-08 20:05:00 <ingo__> the most logfileoutputs are configurable. Problem is if here, if the offset is not in the timesstamp, and you load the logfiles in a system like graylog or splunk, you have don't know anymore, how to correlate the lines for error search.
2017-05-08 20:05:32 <ingo__> think here, the solution is, to install rsyslog or so.
2017-05-08 20:05:54 <feuerteufel> A nsca-log take's also the locale time, but no daut about that! That script is build by me ;)
2017-05-08 20:06:13 <Shiz> the issue is that the syslogd format should just pass UTC timestamps
2017-05-08 20:06:24 <Shiz> and that the syslogger then can adjust it to some timezone if it desires
2017-05-08 20:06:26 <Shiz> :P
2017-05-08 20:06:39 <Shiz> 
ACTION just wrote a patch that makes busybox syslogd do that, maybe

2017-05-08 20:08:57 <dalias> yes, the syslogd should convert utc timestamps from the client sending the log message into whatever format it wants them saved in
2017-05-08 20:08:59 <ingo__> Is there some page on the wiki, where this is described? didn't found it.
2017-05-08 20:09:13 <dalias> but really everything on computers should be done in utc...
2017-05-08 20:09:30 <dalias> saving local times is a mess of ambiguity
2017-05-08 20:09:45 <dalias> esp. at daylight time change boundaries
2017-05-08 20:10:51 <ingo__> hm, i have here arround 300 server, which produce arroucht 100GB logs per day, all on localtime. it would an absolut mess to find something, if they where on UTC.
2017-05-08 20:11:42 <Shiz> i'm confused what mktime() assumes about the struct tm given
2017-05-08 20:11:44 <Shiz> :P
2017-05-08 20:12:02 <Shiz> wrt timezines
2017-05-08 20:12:42 <dalias> local
2017-05-08 20:12:44 <dalias> :(
2017-05-08 20:12:55 <dalias> that's why the timegm function (nonstd iirc) exists
2017-05-08 20:13:03 <Shiz> bleh
2017-05-08 20:13:13 <Shiz> i just want to convert a UTC struct tm to a local... thing
2017-05-08 20:13:16 <Shiz> but timegm is bleh
2017-05-08 20:13:17 <dalias> fwiw you only need time conversion functions in stdlib for local time
2017-05-08 20:13:32 <ingo__> If there is a good documentation about it, that in the syslog output is UTC used, there should be no problem.
2017-05-08 20:13:33 <dalias> for utc the formulas can just be used
2017-05-08 20:13:49 <Shiz> yeah but i'm implementing a -Z flag for busybox that converts presumed-UTC incoming timestamps to local time
2017-05-08 20:13:51 <Shiz> :)
2017-05-08 20:13:58 <Shiz> busybox syslogd*
2017-05-08 20:14:04 <dalias> well you can also use the globals that tell the tz offset
2017-05-08 20:14:30 <dalias> extern long timezone;
2017-05-08 20:14:32 <Shiz> oh?
2017-05-08 20:14:34 <Shiz> nice
2017-05-08 20:14:37 <Shiz> that's.... good enough
2017-05-08 20:14:42 <dalias> it's posix not plai nC
2017-05-08 20:15:00 <dalias> you have to add/sub it from the timestamp and set tm_isdst==0
2017-05-08 20:15:02 <Shiz> i think/hope busybox assumes posix
2017-05-08 20:15:05 <Shiz> if not, whatever
2017-05-08 20:15:07 <Shiz> :P
2017-05-08 20:15:11 <dalias> *nod* it does
2017-05-08 20:15:42 <dalias> anyway just using the posix formula is equally portable and doesn't depend on global state :-p
2017-05-08 20:17:20 <Shiz> https://txt.shiz.me/NzM4NjFjOW
2017-05-08 20:17:24 <Shiz> something like this is what i have then
2017-05-08 20:19:12 <Shiz> with an appropriate call to tzset() im init
2017-05-08 20:19:14 <Shiz> in init
2017-05-08 20:30:11 <feuerteufel> Shiz: What I have to do with that patch?
2017-05-08 20:30:26 <Shiz> what i linked isn't a patch
2017-05-08 20:31:39 <Shiz> hmm, above code snippet doesn't seem to work either
2017-05-08 20:31:51 <feuerteufel> That's why I don't know what to do with that ;)
2017-05-08 20:46:18 <Shiz> dalias: what was that posix formula? ;p
2017-05-08 20:59:14 <Shiz> hmm, somehow timezone isn't getting set properly...
2017-05-08 21:06:08 <Shiz> nvm
2017-05-08 21:06:13 <Shiz> timezone is seconds WEST of UTC....
2017-05-08 21:37:06 <nmeum> I just use this patch to overwrite the time instead of converting it http://sprunge.us/DjhF
2017-05-08 21:37:31 <Shiz> nmeum: that breaks for remote syslogd
2017-05-08 21:37:34 <Shiz> :P
2017-05-08 21:38:12 <nmeum> I don't use a remote syslogd so I don't care :p
2017-05-08 21:38:29 <nmeum> but if you write a proper patch that would be great
2017-05-08 21:39:09 <Shiz> nmeum: https://github.com/alpinelinux/aports/pull/1360
2017-05-08 21:39:11 <Shiz> ;)
2017-05-08 21:39:31 <nmeum> did you suggest that patch upstream?
2017-05-08 21:39:38 <nmeum> as in: busybox upstream
2017-05-08 21:39:59 <Shiz> not yet, considering i just wrote it 15 minutes ago
2017-05-08 21:40:05 <nmeum> :)
2017-05-08 21:54:28 <Shiz> nmeum: http://lists.busybox.net/pipermail/busybox/2017-May/085437.html
2017-05-08 21:54:30 <Shiz> :P
2017-05-08 22:06:51 <nidan_> After upgrading to 4.9.26-0-hardened, my ALSA sound is now crap, is this a known issue?
2017-05-08 22:10:46 <nidan_> ASUS Z97 MB with Realtek ALC892 btw..
2017-05-08 22:50:07 <nidan_> Nm, it's not actually ALSA, it's mplayer. Playing .wavs work nice.
2017-05-08 22:55:34 <nidan_> mplayer's mp3 decoder seems broken, it can play .flac, .wav, aac..
2017-05-08 22:56:02 <nidan_> Lot's of high-pitched artefacts when playing mp3s though.
2017-05-08 22:56:17 <Shiz> may i recommend mpv
2017-05-08 22:56:37 <hiro> disable alsa's resampler and mixer
2017-05-08 22:56:59 <hiro> it might still be using these horrible linear interpolation
2017-05-08 22:57:16 <nidan_> Shiz: I'll check it out.
2017-05-08 22:57:33 <nidan_> hiro: Don't know about alsa's resampler.
2017-05-08 22:57:45 <nidan_> hiro: alsamixer settings seem fine.
2017-05-08 22:58:23 <hiro> alsamixer is not what i said
2017-05-08 22:58:33 <hiro> good night
2017-05-08 22:59:47 <nidan_> hiro: Nah, I noticed. Care to explain?
2017-05-08 23:30:10 <nidan_> Shiz: fyi: mpv plays the mp3s fine. Something must be broken in mplayer or perhaps ffmpeg atm.
2017-05-08 23:30:25 <Shiz> i'd always recommend mpv over mplayer
2017-05-08 23:30:31 <Shiz> it's an mplayer fork that's actually maintained for the better
2017-05-08 23:30:33 <Shiz> :p
2017-05-08 23:33:58 <nidan_> Shiz: Yeah, I glanced through the options and the man-page, felt more structured than mplayer's
2017-05-09 08:40:56 <jenkins> hi I'm having trouble getting X to start in virtualbox
2017-05-09 08:41:12 <jenkins> I have installed the vmware video package, as suggested in the xfce wiki page, and the guest additions which for some reason are in the testing repo and require an hardened kernel
2017-05-09 08:41:21 <jenkins> is virtualbox not supported at the moment?
2017-05-09 08:51:10 <syx> Hi!
2017-05-09 08:51:38 <syx> I'm having some issues with /etc/network/interfaces after bootstrapping a system on hetzner
2017-05-09 08:51:57 <syx> everything works fine if i use dhcp, even if i just use static addresses
2017-05-09 08:52:05 <syx> whenever i disable dhcp, everything breaks
2017-05-09 09:32:50 <syx> so i'm doing this https://w1r3.net/LTsJud.txt
2017-05-09 09:32:57 <syx> gettin this https://w1r3.net/aFpsUV.txt
2017-05-09 10:02:33 <nidan_> syx: ip addr add ip/mask
2017-05-09 10:02:44 <syx> huh
2017-05-09 10:03:09 <syx> oh
2017-05-09 10:03:10 <nidan_> syx: iirc it defaults to a /32 so your ip route add default via won't any way to route find the ip you've specified as your gww.
2017-05-09 10:03:11 <syx> no dev
2017-05-09 10:03:37 <nidan_> Which probably explains the "no such" error you get, the first one anyway.
2017-05-09 10:03:47 <syx> so no dev argument
2017-05-09 10:04:00 <syx> and yeah i forgot the netmask
2017-05-09 10:04:03 <nidan_> You won't need it, it'll find it anyway.
2017-05-09 10:04:26 <syx> ip -6 route add default via fe80::1 dev eth0 do i still need this for link local
2017-05-09 10:05:32 <nidan_> I doubt it.
2017-05-09 10:05:45 <syx> trying now
2017-05-09 10:05:45 <nidan_> default via your localhost-addr.
2017-05-09 10:05:52 <nidan_> That sounds just wrong.
2017-05-09 10:06:08 <syx> hetzner does it via link-local
2017-05-09 10:06:26 <nidan_> Anyway, if you JUST use your IPv6 for talking to your localhost I guess it wouldn't break things, but still, why have it?
2017-05-09 10:06:38 <syx> it's my default route
2017-05-09 10:07:54 <nidan_> Well, your default route points to fe80::1, I sort of suck at IPv6, but isn't fe80::1 eqvivalent to 127.0.0.1?
2017-05-09 10:08:21 <syx> no
2017-05-09 10:08:31 <syx> ::1 is 127.0.0.1
2017-05-09 10:08:44 <nidan_> K, my bad, thought I recognized the fe80.
2017-05-09 10:08:59 <syx> ok rebooting with the dev argument for that
2017-05-09 10:10:02 <syx> doesn't look like it's working
2017-05-09 10:10:21 <nidan_> You usually don't need the dev argument; if the IP of your gateway is reachable through one of the interfaces, using that interface's IP and netmask, the kernel will find the dev itself.
2017-05-09 10:10:39 <nidan_> What errors do you get.
2017-05-09 10:10:42 <syx> usually yeah, but link locals are not unique per interface
2017-05-09 10:10:48 <syx> rebooting into rescue mode now
2017-05-09 10:11:40 <nidan_> Ok, I didn't know. Maybe I should start caring for IPv6, it has been claimed to be the next big thing for 20 years... =)
2017-05-09 10:12:14 <syx> it has to be :)
2017-05-09 10:12:27 <nidan_> "An historical note on the use of IPv9"...
2017-05-09 10:12:36 <syx> lol
2017-05-09 10:12:48 <nidan_> It's an actual RFC. =D
2017-05-09 10:12:52 <syx> lol really
2017-05-09 10:12:57 <nidan_> Yeah. =)
2017-05-09 10:13:21 <nidan_> rfc1606
2017-05-09 10:14:07 <nidan_> Anyway, you had more errors from those logs of yours, not only regarding the missing netmask.
2017-05-09 10:14:23 <syx> https://w1r3.net/ECYUMN.txt
2017-05-09 10:14:37 <nidan_> You had a bunch of "already exists" too, so the interfaces seem to have been configured already.
2017-05-09 10:15:11 <syx> lol this makes no sense
2017-05-09 10:15:24 <syx> lemme try without the up and down params
2017-05-09 10:15:31 <nidan_> So, what commands exactly cause those messages?
2017-05-09 10:15:47 <nidan_> Didn't you use ifup and ifdown?
2017-05-09 10:15:56 <nidan_> They check in /etc/interfaces/ iirc.
2017-05-09 10:16:15 <syx> okay would this work https://w1r3.net/tCdPPv.txt
2017-05-09 10:19:43 <syx> ok it sort of works
2017-05-09 10:19:51 <nidan_> I cannot give you a definitive answer, I don't use ifup/ifdown. From the top of my head it seems fine.
2017-05-09 10:19:57 <syx> lo doesn't come up
2017-05-09 10:20:01 <syx> nidan_: what do you use?
2017-05-09 10:20:43 <nidan_> I use s6-svscan / s6-rc for init so I have my own oneshot for bringing interfaces up/down the way I want.
2017-05-09 10:20:55 <nidan_> s6-rc -u change eth0
2017-05-09 10:20:57 <nidan_> s6-rc -d change eth0
2017-05-09 10:21:01 <nidan_> For example.
2017-05-09 10:21:16 <syx> lol i might just use bsd
2017-05-09 10:21:27 <syx> this is really complicated
2017-05-09 10:21:30 <syx> and should work but doesnt
2017-05-09 10:21:38 <nidan_> But it requires replacing your entire init, so if you just want to configure your interfaces it's overkill.
2017-05-09 10:21:53 <syx> yeah
2017-05-09 10:22:27 <nidan_> syx: Iirc /etc/interfaces/ are spillover from Debian/Ubuntu, so if you google for its syntax you can probably find answers in their forums.
2017-05-09 10:22:39 <nidan_> Imho it's not very well documented.
2017-05-09 10:22:57 <nidan_> syx: You can use s6-rc as init for *BSD too! Yay! \o/
2017-05-09 10:23:06 <syx> oh yay
2017-05-09 10:23:08 <syx> no thanks
2017-05-09 10:23:14 <syx> hostname.eth0 4 eva
2017-05-09 10:24:12 <syx> okay this *should* work
2017-05-09 10:24:23 <nidan_> Well, in all fairness, s6 isn't just about configuring interfaces, it's a service manager and it can be used to replace init too.
2017-05-09 10:24:29 <nidan_> Gl hf. =)
2017-05-09 10:24:37 <syx> 
ACTION waits patiently

2017-05-09 10:24:52 <syx> okay it's not pinging
2017-05-09 10:25:06 <syx> last time i'm doing this
2017-05-09 10:25:18 <nidan_> What are you trying to do actually?
2017-05-09 10:25:39 <nidan_> Apart from the obvious of getting your interfaces up..
2017-05-09 10:25:44 <syx> get normal networking up
2017-05-09 10:25:53 <syx> i'm going to use it as a host node for vms
2017-05-09 10:26:03 <syx> so the os doesn't matter that much
2017-05-09 10:26:09 <syx> but i'm not going to use systemd
2017-05-09 10:26:10 <nidan_> ok
2017-05-09 10:26:21 <nidan_> Thank god.
2017-05-09 10:26:22 <nidan_> =)
2017-05-09 10:26:55 <syx> freebsd seems to do what i want
2017-05-09 10:27:01 <syx> and i'm not a big fan of busybox :s
2017-05-09 10:27:14 <nidan_> How come?
2017-05-09 10:30:22 <syx> it just things differently to what im used to
2017-05-09 10:31:40 <syx> okay yeah, alpine isn't going to work for me
2017-05-09 10:31:49 <syx> not as a host anyway
2017-05-09 10:33:34 <nidan_> syx: If that decision is made due to networking config issues you'll have the same issue using any Debian derivative too.
2017-05-09 10:33:47 <nidan_> Just fyi, sorry.
2017-05-09 10:33:48 <syx> i know
2017-05-09 10:33:53 <syx> this is why i'm using freebsd
2017-05-09 10:33:57 <nidan_> =)
2017-05-09 11:50:55 <hiro> syx: what network stuff are you trying to do with busybox?
2017-05-09 12:34:01 <syx> hiro: nothing anymore
2017-05-09 13:45:53 <azidhaka> Hi, quick question. I am using Alpine 3.5.2-virtual on VMWare. I cannot get open-vm-tools to start with the system. Running "rc-service open-vm-tools start" starts them, but after "rc-update add open-vm-tools", rc-status does not show them in the default runlevel and they do not start with the system
2017-05-09 14:43:31 <Unode> hi all, is there any tool that allows me to find out which package provides a given (header) file?
2017-05-09 14:47:13 <Unode> I'm trying to compile some code that uses "#include <linux/types.h>" and fails to find this header.
2017-05-09 14:47:28 <arch3y_> try linux-headers
2017-05-09 14:49:59 <Shiz> Unode: http://pkgs.alpinelinux.org/contents
2017-05-09 14:50:11 <Shiz> you can e.g. search for types.h here
2017-05-09 14:50:12 <Unode> arch3y_: thanks, that seems to have done it.
2017-05-09 14:50:17 <Shiz> but yeah, it's linux-headers
2017-05-09 14:50:41 <Unode> Shiz: doh I was on the packages section. Didn't notice there was a "contents".
2017-05-09 14:50:54 <Shiz> :)
2017-05-09 14:50:54 <arch3y_> Shiz: now if you have hardended installed wouldnt it be like linux-hardend-dev
2017-05-09 14:50:58 <Shiz> arch3y_: no
2017-05-09 14:51:12 <Shiz> linux-*-dev is if you want to compile modules and the like
2017-05-09 14:51:17 <Shiz> linux-headers is for linux userspace development
2017-05-09 14:51:49 <arch3y_> Shiz: k thanks for shorting that out
2017-05-09 14:53:03 <Unode> thanks for the help. Not sure I'd be able to pick the right package since there's tons of them that have a types.h file.
2017-05-09 14:53:05 <arch3y_> I hope my pr to upgrade flex will be pushed soon
2017-05-09 14:53:25 <Shiz> Unode: it's linux-headers in your case
2017-05-09 14:53:27 <Shiz> :P
2017-05-09 14:53:50 <Shiz> but if you're looking for an include file, the correct path is likely to be /usr/include/<file>
2017-05-09 14:53:56 <arch3y_> Shiz: I need it as well for another pkg honestly
2017-05-09 14:53:57 <Shiz> so it would be the package that has /usr/include/linux/types.h
2017-05-09 14:54:11 <Shiz> arch3y_: do you have a link to the PR?
2017-05-09 14:54:14 <Shiz> i can review it at least
2017-05-09 14:54:53 <arch3y_> Shiz: yeah one sec https://github.com/alpinelinux/aports/pull/1363
2017-05-09 14:55:26 <Unode> Shiz: plenty helpful. Managed to get it as the right choice on the package content list. I get the search now. Thanks!
2017-05-09 14:58:24 <arch3y_> Shiz: am I gonna get in trouble since it looks like a PKGBUILD lol
2017-05-09 14:58:33 <Shiz> ?
2017-05-09 14:58:47 <arch3y_> Shiz: Im used to building pkgbuilds for arch
2017-05-09 14:58:56 <Shiz> the change looks fairly minor to me
2017-05-09 14:59:04 <arch3y_> yeah it was super minor
2017-05-09 14:59:16 <arch3y_> mainly just and update added the check and cleaned it up to be more modern
2017-05-09 14:59:25 <Shiz> LGTM, although minor nitpick about the commit message: preferable would be "<cat>/<pkg>: <imperative form>"
2017-05-09 14:59:42 <Shiz> not important at all and not gonna block this from being merged, just something to take into consideration
2017-05-09 14:59:49 <arch3y_> Shiz: k I tried to follow whatseem to be the standard
2017-05-09 14:59:52 <Shiz> e.g. "main/flex: upgrade to 2.6.4"
2017-05-09 15:00:02 <arch3y_> sure thanks
2017-05-09 15:00:16 <arch3y_> ah so upgrade and not updated gotcha
2017-05-09 15:00:19 <arch3y_> understood
2017-05-09 15:00:54 <Shiz> yup
2017-05-09 15:00:58 <Shiz> and : and not - :p
2017-05-09 15:01:06 <Shiz> and no need to repeat the package name in the messaget after L
2017-05-09 15:01:08 <Shiz> after :
2017-05-09 15:01:11 <Shiz> hence minor nitpicks :)
2017-05-09 15:02:22 <arch3y_> sure thanks for the feedback
2017-05-09 15:02:46 <arch3y_> Ill take all I can get I know you guys use kernel style git commits so that is new in itself
2017-05-09 15:03:46 <Shiz> what do you mean by that?
2017-05-09 15:03:54 <Shiz> we don't require signed-off-by afaik :p
2017-05-09 15:03:59 <arch3y_> thats true
2017-05-09 15:04:15 <arch3y_> well you use easier to read commits
2017-05-09 15:04:31 <arch3y_> like most ppl do git commit -m "blah"
2017-05-09 15:04:47 <arch3y_> but it should be done git commit then write it out correctly
2017-05-09 15:05:13 <sigmoidbigfoot> does anybody have experience running Alpine on via chipsets, specifically with the vx900 video card?
2017-05-09 15:06:22 <sigmoidbigfoot> i have tried to start X11 with the openchrome driver but i just get a black screen and frozen system
2017-05-09 15:06:52 <Shiz> does Xorg.log note anything of relevance?
2017-05-09 15:07:43 <sigmoidbigfoot> i cant tell, because the system is frozen. i cant switch back to the console
2017-05-09 15:07:52 <Xe> sysrq-r
2017-05-09 15:07:58 <Xe> then try to get back to the console
2017-05-09 15:08:11 <Shiz> ctrl-alt-f1 doesn't work?
2017-05-09 15:08:13 <Xe> (sysrq-r "unraws" X11's control over the input hardware)
2017-05-09 15:08:20 <sigmoidbigfoot> i will try that when i get back to my desk, Xe
2017-05-09 15:08:26 <sigmoidbigfoot> Shiz: no
2017-05-09 15:09:52 <Shiz> sigmoidbigfoot: if all else fails it may be worth upgrading to edge
2017-05-09 15:09:58 <Shiz> there's a newer version of the openchrome driver in edge
2017-05-09 15:10:16 <Shiz> but i'd first check xorg.log when you have access to your pc again (be it through sysrq trickery or a reboot)
2017-05-09 15:12:11 <sigmoidbigfoot> will do
2017-05-09 15:13:07 <sigmoidbigfoot> how can i preserve xorg.log over a reboot?
2017-05-09 15:15:18 <Shiz> it won't go anywhere
2017-05-09 15:15:25 <Shiz> it's not stored on a tmpfs or anything, just /var/log
2017-05-09 15:16:09 <clandmeter> if you run from ram, var will be tmpfs
2017-05-09 15:16:33 <sigmoidbigfoot> i am using diskless mode
2017-05-09 15:17:28 <clandmeter> you can mount var somewhere?
2017-05-09 15:17:42 <clandmeter> or setup ssh and login from another pc
2017-05-09 15:18:09 <sigmoidbigfoot> i may have to do that
2017-05-09 15:56:24 <sigmoidbigfoot> so here's xorg.log: http://tpaste.us/JM00
2017-05-09 15:57:15 <sigmoidbigfoot> if I run 'DISPLAY=:0 xrandr' in a console It says VGA-1 is disconnected
2017-05-09 16:00:18 <Shiz> yeah, it seems to not find a monitor
2017-05-09 16:00:20 <Shiz> curious
2017-05-09 16:04:19 <Shiz> sigmoidbigfoot: the arch wiki seems to suggest a special kernel is needed for VIA support
2017-05-09 16:08:05 <sigmoidbigfoot> that would be unfortunate
2017-05-09 16:08:40 <sigmoidbigfoot> [    83.458] (EE) open /dev/dri/card0: No such file or directory
2017-05-09 16:08:47 <sigmoidbigfoot> I think that's important
2017-05-09 16:10:02 <Shiz> yeah, the DRM stuff is out-of-tree
2017-05-09 16:10:09 <Shiz> https://cgit.freedesktop.org/openchrome/drm-openchrome/
2017-05-09 16:10:14 <Shiz> which is 3.19rc6...
2017-05-09 16:12:41 <sigmoidbigfoot> welp.
2017-05-09 20:16:57 <ash_workz> I'm looking at various issues about adding users and I keep seeing flags I don't know the meaning of and man isn't any help
2017-05-09 20:17:27 <ash_workz> ie `adduser -S ...` `adduser -G ... -g ... -s ...
2017-05-09 20:17:44 <ash_workz> I mean, I can kind of infer what the flags are supposed to mean but anyone know where I can get this documentation?
2017-05-09 20:22:57 <nidan_> ash_workz: In case you're talking about busybox's buildin adduser, I've never found any docs, other than reading the source.
2017-05-09 20:23:06 <nidan_> ash_workz: I might be wrong, there might be docs somewhere.
2017-05-09 20:23:16 <ash_workz> nidan_: thanks
2017-05-09 20:23:29 <nidan_> ash_workz: You could perhaps check the POSIX spec at opengroups..
2017-05-09 20:23:53 <ash_workz> nidan_: thanks I'll look for it :)
2017-05-09 20:23:54 <nidan_> ash_workz: That doesn't say if busybox has support for anything more than POSIX though, which it might..
2017-05-09 20:23:59 <nidan_> ash_workz: np
2017-05-09 20:36:41 <darkfader> normally it just has ... less ... than posix :)
2017-05-09 20:37:08 <darkfader> idk in case of user management, busybox ps is the classic
2017-05-09 20:42:00 <boojinks> Hey - was wondering if someone could give me a quick hand with wireless troubles when installing Alpine
2017-05-09 20:43:42 <boojinks> Following the instructions and when I get to the step to set wlan0 up it errors out. Wiki page says it'll be due to a lack of drivers/firmware but it's just an Intel chip - would the drivers really not be present for that?
2017-05-09 20:44:25 <TBB> how does it error out?
2017-05-09 20:46:19 <boojinks> Gimme 2s will grab the error message
2017-05-09 20:51:55 <tru_tru> does this error ring a bell to someone (perl and locale interaction?) https://gist.github.com/truatpasteurdotfr/e20019cd06027775284e19779ed79d67
2017-05-09 21:00:55 <Boojinks> TBB: weird, just rebooted the media and wireless tools seemed to install more this time and works fine. Thanks anyhow.
2017-05-09 21:46:23 <boojinks> Err, is it possible to install Alpine using the default media as a UEFI system?
2017-05-09 21:47:29 <TBB> yes
2017-05-09 21:48:01 <TBB> okay, let me take that back for a bit; I'm not entirely sure if you have all the required packages for it there
2017-05-09 21:48:43 <TBB> I know gptfdisk is there and the partitioning and other disk tools are there; what I'm not sure of is whether you have an UEFI compatible boot loader in there (gummiboot is what I strongly prefer)
2017-05-09 21:50:23 <boojinks> I did notice that there's a guide for creating a UEFI USB boot media that uses gummiboot straight from apk - would it be a similar deal to following that guide?
2017-05-09 21:51:20 <boojinks> Magic seems to be in cp /usr/lib/gummiboot/gummibootx64.efi /mnt/EFI/Boot/bootx64.efi
2017-05-09 22:07:47 <TBB> that, or "gummiboot install" or such
2017-05-09 22:17:52 <boojinks> TBB: Hm, found a handy install guide for installing gummiboot separately however it mentions that the system has to be booted from EFI media or a kernel with EFI stub support - d'you know if the latter is true/any way to check?
2017-05-09 22:20:35 <TBB> both are true
2017-05-09 22:21:52 <TBB> Alpine's kernel at least has that support in it, and the gummiboot package provides you with an EFI stub that you can combine with the kernel to make it a bootloader in itself
2017-05-09 22:24:14 <TBB> but that comes with some other details you need to take care of, for example, how you pass boot options to such a kernel
2017-05-09 22:24:22 <TBB> https://github.com/haraldh/mkrescue-uefi/blob/master/mkrescue-uefi.sh - that's a good script to read
2017-05-09 22:30:25 <boojinks> Crikey, seems an awful lot of effort... guess I'll take a look tomorrow. Thanks man.
2017-05-09 22:31:44 <TBB> yw :) it's not really that complicated though, you just need what, four files, three of which already exist if you have gummiboot and kernel installed :)
2017-05-10 03:38:38 <mystified> a few months ago I attempted to install alpine without success. I'd like to try again. the issue is my video card Nvidia g320, is only supported upto nvidia-340. I can't seem to nvidia driders on alpine what open source driver should i be using & is there a link to iluustrate the install process
2017-05-10 03:38:59 <mystified> a few months ago I attempted to install alpine without success. I'd like to try again. the issue is my video card Nvidia g210, is only supported upto nvidia-340. I can't seem to nvidia driders on alpine what open source driver should i be using & is there a link to iluustrate the install process
2017-05-10 03:39:10 <mystified> "nvidia210"
2017-05-10 04:55:55 <_ikke_> mystified: nouveau?
2017-05-10 05:07:33 <mystified> thx
2017-05-10 06:03:18 <lorddaedra> hello) I would like to install p7zip=16.02-{{ latest_revision }}, how to do that?
2017-05-10 06:03:23 <lorddaedra> current version is 16.02-r1
2017-05-10 06:10:37 <lorddaedra> for now I use `apk add --upgrade --no-cache "p7zip<$LESS_THAN_P7ZIP_VERSION"`, and set LESS_THAN_P7ZIP_VERSION to 16.03 but will be good to see some ability to specify 16.02 and `latest_revision ` to get same result
2017-05-10 06:57:48 <clandmeter> lorddaedra,  if you want 16.02 then you need to install it from edge.
2017-05-10 06:58:50 <clandmeter> oh latest stable has the same version
2017-05-10 06:59:10 <clandmeter> then i dont understand the question.
2017-05-10 07:32:28 <_ikke_> the -rx just signifies the package revision
2017-05-10 07:32:54 <_ikke_> Only when somehting in the packaging is updated/chaged will it be increased
2017-05-10 07:54:27 <lorddaedra> clandmeter if I understand correctly, there are 2 versions of package: package version + local patch version (someone from Alpine team fix security hole, for example), I would like to install 16.02 with latest local patch revision (r1 for now, may be will r2 in future)
2017-05-10 07:55:30 <lorddaedra> for now I use p7zip<16.03 but not sure it's beautiful
2017-05-10 07:57:29 <_ikke_> lorddaedra: how are you installing it? are you specifing a version?
2017-05-10 07:58:58 <lorddaedra> yes, https://dpaste.de/MiFq
2017-05-10 08:03:17 <lorddaedra> (I place 16.02 tag on this image so I can run it as `docker run -v ... username/p7zip:16.02 ...`)
2017-05-10 08:10:31 <_ikke_> but wouldn't that depend on the availability of that version in the repositories?
2017-05-10 08:16:53 <clandmeter> yes, we only have one version per branch
2017-05-10 08:18:00 <clandmeter> version differences only happen per branch. when a new version is build the old pkg will be removed from mirror.
2017-05-10 09:33:37 <orig> can't send mail by alpine
2017-05-10 09:34:11 <consus> orig: what mail server do you have?
2017-05-10 09:35:43 <orig> microsoft live.com
2017-05-10 09:35:52 <consus> nah, on the alpine
2017-05-10 09:36:00 <orig> ??
2017-05-10 09:36:04 <consus> Nevermind
2017-05-10 09:37:14 <consus> What app do you use?
2017-05-10 09:37:29 <orig> can receive mail but not send.
2017-05-10 09:37:35 <consus> Wait
2017-05-10 09:37:41 <consus> Do you use alpine mail client?
2017-05-10 09:38:02 <orig> yes, alpine
2017-05-10 09:38:03 <consus> Wrong channel. That's Alpine Linux, not a mail app.
2017-05-10 09:38:31 <consus> Or do you run alpine on alpine? :D
2017-05-10 09:38:32 <orig> -  - !
2017-05-10 09:38:44 <orig> - -!
2017-05-10 09:39:04 <orig> i am run alpine on debian
2017-05-10 09:39:10 <orig> sorry
2017-05-10 09:39:16 <consus> No problem
2017-05-10 09:39:41 <orig> thanks at all
2017-05-10 09:49:57 <parazyd> lol
2017-05-10 09:50:05 <parazyd> that was funny
2017-05-10 09:50:48 <consus> A common mistake I guess
2017-05-10 09:56:45 <clandmeter> yes, very common  :)
2017-05-10 14:47:17 <elegast> Hello folks, I've been reading from multiple sources that alpine is now capable of zfs boot out of the box, but there's zero docs on it, and also no support using the alpine-setup family of tools, so out of the box is quite a liberal statement
2017-05-10 14:47:43 <elegast> I don't mind doing some work and research for it, but I need some pointers to get started
2017-05-10 14:49:12 <clandmeter> elegast, what are those multiple sources?
2017-05-10 14:49:13 <elegast> Am I correct in understanding that the extlinux bootloader does *not* support loading zfs?
2017-05-10 14:49:31 <elegast> Some blog articles/press releases
2017-05-10 14:49:44 <elegast> Let me see if I can find them, clandmeter
2017-05-10 14:50:00 <clandmeter> i dont think our bootloader supports zfs
2017-05-10 14:50:19 <royger> you need grub for that
2017-05-10 14:50:22 <clandmeter> so you will need to have boot on a seperate partition. but thats a guess.
2017-05-10 14:50:23 <elegast> https://www.phoronix.com/scan.php?page=news_item&px=Alpine-Linux-3.5-Released
2017-05-10 14:50:30 <elegast> linuxtoday, reddit, etc
2017-05-10 14:50:50 <clandmeter> its root, not boot
2017-05-10 14:51:24 <elegast> Ah. Ok, going back to grub it is then
2017-05-10 14:51:41 <elegast> I was kind of charmed by the lack of grub when I looked at alpine
2017-05-10 14:52:01 <clandmeter> we have grub in aports, but dont support it in our setup scripts.
2017-05-10 14:53:35 <gromero> clandmeter: I guess that ppc64le will have to adapt the setup scripts since will boot using grub, correct?
2017-05-10 14:53:57 <clandmeter> gromero, i think so.
2017-05-10 14:54:06 <clandmeter> im also using grub for aarch64
2017-05-10 14:54:13 <clandmeter> but thats a custom install.
2017-05-10 14:54:29 <elegast> clandmeter and royger, thanks for the help guys, and the quick response, that's enough to get me going!
2017-05-10 14:54:48 <clandmeter> nice, good luck!
2017-05-10 14:55:07 <gromero> clandmeter: i see, ah, didn't know aarch64 was using grub as well. ok
2017-05-10 14:55:08 <elegast> Thanks!
2017-05-10 14:56:11 <elegast> Oh. Just another question, I doubt I'll have any luck with this, is there anyone running pkgsrc on alpine?
2017-05-10 14:56:17 <clandmeter> aarch64 does not support bios boot. only eufi and uboot afaik.
2017-05-10 14:56:23 <elegast> Or would I be on my own there?
2017-05-10 15:01:47 <elegast> There's not a whole lot of musl in netbsd, or any of the other unixen that use pkgsrc ofcourse, so I'm aware there wouldn't be much packages that work out of the box. It would mostly be tedious to bootstrap the whole thing, but not hard, so just wondering if anyone had already given that a shot :)
2017-05-10 15:22:30 <odc> elegast: i know the musl team back in the days patched many pkgsrc packages to work with musl
2017-05-10 15:22:42 <odc> boostrap should be very easy
2017-05-10 15:23:50 <odc> elegast: http://wiki.musl-libc.org/wiki/Pkgsrc_results
2017-05-10 15:27:22 <elegast> odc: oh wow, I had no idea, that's quite an impressive list of working packages
2017-05-10 16:48:09 <jj25> Hi everyone!  Alpine 3.5.2 setup on an HP laptop using xfce4. Created sudo user before launching slim, and desktop launches, but having tried installation three times, most times there is no sound in youtube or when other videos play on Firefox;  there was no sound on Audacious later on on two installations even with Settings/Audio/'SDL Output' (not sure whether the reason for the variations was the different ways of creating a sudo use
2017-05-10 16:48:09 <jj25> r or some other variation in the installation process).  System beeps are heard.  Other symptoms: 1. Audio Mixer/'xfce4-mixer' applet launches saying  "GStreamer was unable to detect any sound devices. Some sound system specific GStreamer packages may be missing. It may also be a permissions problem."  2. "sudo lspci | grep Audio" returns nothing.  3. "cat  /etc/asound.conf" returns nothing.  Currently installed packages include:  alsa-
2017-05-10 16:48:09 <jj25> utils alsaconf pulseaudio@testing  aumix sox phonon-backend-gstreamer gst-plugins-bad0.10 gstreamer0.10 gstreamer0.10-tools gstreamer1 gstreamer1-doc gstreamer1-tools gstreamermm@testing ffmpeg fdk-aac@testing audacious-plugins vlc vlc-plugins-codec vlc-qt.  However, I did not how to navigate aumix when following the instructions for aumix at https://wiki.alpinelinux.org/wiki/Alpine_Linux:FAQ#How_do_I_play_my_.ogg.2F.mp3_files.3F. Also
2017-05-10 16:48:14 <jj25> tried listing audio cards in desired order under /etc/modprobe.d/alsa-base.conf: "options HD-Audio Generic index=1" and on next line (without quotes): "options HDA ATI HDMI index=0". Could it be a missing instruction, a permissions problem or a missing package?
2017-05-10 16:51:59 <kaniini> elegast: using pkgsrc is not recommended, it is better to use abuild and rebuild source packages (there is no way to tell apk that a file installed on the system is provided outside of apk)
2017-05-10 16:53:32 <TemptorSent> Hmm, the ability to install external files into APK's database would be very useful.
2017-05-10 16:57:51 <elegast> kaniini: I agree mixing packaging tools is not the best idea, but I'm already maintaining a few pkgsrc packages on different platforms across different architectures, and by the looks of it, alpine can be made sufficiently bare bones to get away with it
2017-05-10 16:58:06 <elegast> and the otherway around, making pkgsrc aware of libraries outside of it is far less problematic
2017-05-10 16:58:46 <kaniini> TemptorSent: yes
2017-05-10 16:59:04 <kaniini> TemptorSent: then pkgsrc could be used on alpine safely
2017-05-10 17:01:12 <elegast> It depends on how well I can get pkgsrc to behave on alpine, if *most* of what I need from it works well out of the box, I'm willing to just rely solely on pkgsrc and use apk for a minimal alpine base install
2017-05-10 17:03:28 <darkfader> pgksrc is so non-intrusive it should be no problem
2017-05-10 17:03:47 <darkfader> i've worked on the aix and hp-ux ports long ago
2017-05-10 17:03:48 <elegast> That said, I'm not unimpressed with apk and its ports system backing it, though, I am still learning at this point
2017-05-10 17:04:01 <darkfader> apk is the nicest package manager ever made
2017-05-10 17:05:43 <elegast> darkfader: yes, I like how pkgsrc is completely mallable yet stays out of everyones way at the same time, and is designed to be cross platform oob
2017-05-10 17:06:22 <darkfader> one thing you'll need to keep in mind is that a basic alpine is a lot of busybox-ish parts
2017-05-10 17:06:46 <darkfader> so you might wanna install procps,coreutils,bash before bootstrapping
2017-05-10 17:07:51 <elegast> mhm, yeah, I hadn't considered the busybox parts yet, just the musl dependencies
2017-05-10 17:08:25 <darkfader> it's no big deal
2017-05-10 17:08:34 <darkfader> but we had a posix discussion in here one of the last days
2017-05-10 17:08:58 <darkfader> and in some ways it's a lot worse than having a 1988 sh :)
2017-05-10 17:10:00 <elegast> hehe. Yes I'm missing /usr/xpg4 ;)
2017-05-10 17:11:12 <elegast> I'd rather be dependent on busybox then on bash though.
2017-05-10 17:11:55 <elegast> Or having an sh that turns out to be just a symlink to bash, that's just ugly.
2017-05-10 17:30:31 <alsdkjfasdf> someone keen to discuss colors? (color combination for shell/terminal)
2017-05-10 17:31:35 <elegast> oh I like the vim-gotham and its contrib colorschemes
2017-05-10 17:32:06 <elegast> though I'm not a fan of anything bat related
2017-05-10 17:36:33 <elegast> kaniini: are you sure ecdsa is not already supported? I just built grub from aports/testing and the process signed with my key successfully, then it installed successfully using apk add?
2017-05-10 17:37:07 <elegast> oops this was meant to go in #alpine-devel
2017-05-10 23:59:55 <ncopa> any volunteer who want help setup-xorg-base in a vm? or on real hw?
2017-05-11 00:08:15 <parazyd> what's up?
2017-05-11 00:10:05 <parazyd> ncopa: ^^
2017-05-11 00:10:55 <ncopa> parazyd: i want test this: http://tpaste.us/djgx
2017-05-11 00:11:18 <ncopa> boot a clean 3.5 iso in a vm, setup without disk (or install to disk)
2017-05-11 00:11:24 <ncopa> then upgrade to edge
2017-05-11 00:11:43 <parazyd> grsec or vanilla?
2017-05-11 00:11:52 <ncopa> doesnt matter
2017-05-11 00:12:08 <parazyd> ack, will do vanilla since i have that iso on hand
2017-05-11 00:12:10 <ncopa> then: curl http://tpaste.us/djgx | patch /sbin/setup-xorg-base
2017-05-11 00:12:23 <ncopa> and run setup-xorg-base
2017-05-11 00:12:37 <parazyd> ok
2017-05-11 00:12:45 <ncopa> you may need install some window manager and fonts in addition
2017-05-11 00:12:53 <parazyd> sure
2017-05-11 00:13:04 <ncopa> and verify that xorg starts properly
2017-05-11 00:13:31 <Shiz> does setup-udev also start udev?
2017-05-11 00:13:38 <ncopa> yes
2017-05-11 00:15:08 <parazyd> gosh my network is lame
2017-05-11 00:15:48 <ncopa> sorry about that :-(
2017-05-11 00:16:05 <ncopa> im currently on a lame net too
2017-05-11 00:17:36 <parazyd> ncopa: your script won't pick up qemu btw, if that's of any matter
2017-05-11 00:17:48 <ncopa> what does qemu need?
2017-05-11 00:17:55 <ncopa> yes we want support qemu
2017-05-11 00:17:57 <parazyd> i don't know if it needs anything
2017-05-11 00:18:10 <parazyd> but it can emulate vmware with a command flag iirc
2017-05-11 00:18:17 <ncopa> i think it should work with xf86-video-modesetting
2017-05-11 00:18:37 <parazyd> supposedly everything works with modesetting these days
2017-05-11 00:18:39 <ncopa> yes, would be nice to test it with the different qemu vga flags
2017-05-11 00:18:49 <parazyd> (i've had trouble getting it to work with grsec though)
2017-05-11 00:18:53 <avih> Shiz: btw, tcc actually works better than i initially thought. the va_list issue, which i noticed while testing st, was that its config.mk was adding a -I /usr/include which overridden tcc's built in includes, which have stdarg.h . so if i remove this from st's config.mk, then tcc builds st fine, and it runs fine too
2017-05-11 00:19:36 <Shiz> qemu works with modesetting
2017-05-11 00:19:37 <parazyd> ncopa: -vga [std|cirrus|vmware|qxl|xenfb|tcx|cg3|virtio|none]
2017-05-11 00:19:49 <Shiz> i think
2017-05-11 00:19:57 <Shiz> we do detect the emulated vmware card :P
2017-05-11 00:20:16 <ncopa> would be nice to test them all
2017-05-11 00:20:31 <avih> there's still an issue if stdio.h is included before stdarg.h though, but st doesn't do that anyway.
2017-05-11 00:20:41 <parazyd> i can do that while waiting for the apks to dl
2017-05-11 00:27:03 <ncopa> parazyd im also interested in one or two default font packages
2017-05-11 00:27:10 <ncopa> freefont might be one option
2017-05-11 00:27:26 <parazyd> that liberation is pretty good
2017-05-11 00:27:59 <parazyd> https://fedorahosted.org/liberation-fonts (liberation-fonts in portage)
2017-05-11 00:28:24 <ncopa> its smaller than freefont too
2017-05-11 00:28:43 <ncopa> im looking for a minimal font that makes minimal usable xorg
2017-05-11 00:28:58 <avih> i like noto a lot. especially its sans
2017-05-11 00:29:41 <ncopa> noto is 16mb
2017-05-11 00:29:57 <parazyd> liberation gets pulled in by default in gentoo i believe
2017-05-11 00:30:03 <avih> get just western. the full noto covers the full unicode
2017-05-11 00:30:46 <avih> (that's their thing - to cover all the possible glyphs)
2017-05-11 00:31:28 <avih> i find the western noto sans very pleasing as default
2017-05-11 00:31:59 <ncopa> avih you are not the only one wanting noto as default
2017-05-11 00:32:38 <avih> i didn't say i want it :) you wanted something, i thought for yourself. but i did set it as my default.
2017-05-11 00:34:08 <avih> (now i'm trying to figure out why mpv's build (waf) doesn't like tcc as a compiler)
2017-05-11 00:35:16 <parazyd> ncopa: qemus: http://sprunge.us/fNKT
2017-05-11 00:35:25 <parazyd> (upgrading to edge now)
2017-05-11 00:37:32 <parazyd> ncopa: patch fails?
2017-05-11 00:37:40 <ncopa> hum
2017-05-11 00:38:01 <parazyd> this is what i got: http://sprunge.us/bMCG
2017-05-11 00:38:48 <parazyd> Hunk 1 FAILED 3/3.
2017-05-11 00:38:53 <ncopa> wget https://dev.alpinelinux.org/~ncopa/setup-xorg-base
2017-05-11 00:39:23 <parazyd> heh
2017-05-11 00:40:02 <parazyd> running...
2017-05-11 00:40:03 <ncopa> i think we maybe should install modesetting regardless if there is /dev/dri/card*
2017-05-11 00:40:09 <avih> ncopa: note, however, that some gnu apps don't play nice with noto mono. for some reason then render bold wider a bit, which accumulates and makes mono not really mono at the end of the day. liberation and many others don't have this issue. i think it's a gnu bug, but that probably doesn'tt matter much where the bug is
2017-05-11 00:40:36 <avih> s/gnu/gtk/
2017-05-11 00:40:51 <ncopa> avih: im looking for minimal font that is usable
2017-05-11 00:40:56 <ncopa> noto is too big
2017-05-11 00:41:00 <avih> k
2017-05-11 00:41:04 <ncopa> noto is like 16-17MB
2017-05-11 00:41:09 <ncopa> liberation is 4-5MB
2017-05-11 00:41:18 <avih> and you want it to cover the whole unicode?
2017-05-11 00:41:33 <ncopa> not necesarily
2017-05-11 00:41:58 <ncopa> something thats usable for most common setups
2017-05-11 00:42:06 <avih> so 16M is just the thing which alpine installs. it could, if you wanted, split it to sub packages
2017-05-11 00:42:24 <avih> i think the western is les than 1M
2017-05-11 00:42:33 <ncopa> is it usable?
2017-05-11 00:42:44 <ncopa> there is some font-misc something too
2017-05-11 00:43:01 <ncopa> but so ugly that is more or less useless
2017-05-11 00:43:28 <parazyd> ncopa: https://pub.parazyd.cf/tmp/screenshots/screenshot22.png
2017-05-11 00:43:36 <parazyd> i can't input or move the mouse
2017-05-11 00:43:48 <parazyd> (setup-xorg-base went well i'd say)
2017-05-11 00:45:06 <ncopa> no mouse?
2017-05-11 00:45:06 <avih> ncopa: how soon do you need/want to decide? i can do some test on what works minimally, but not this week
2017-05-11 00:45:18 <parazyd> ncopa: nope
2017-05-11 00:45:20 <ncopa> avhi a week or so
2017-05-11 00:45:38 <ncopa> parazyd: does it help if you install xf86-input-evdev?
2017-05-11 00:45:40 <parazyd> can't even switch to a tty
2017-05-11 00:45:49 <ncopa> so keyboard does not work either?
2017-05-11 00:45:54 <Shiz> parazyd: try sysrq-r
2017-05-11 00:45:58 <Shiz> then switch to a tty
2017-05-11 00:46:03 <parazyd> Shiz: it's a vm
2017-05-11 00:46:04 <avih> ncopa: k, i'll let you know how far i got before next week
2017-05-11 00:46:15 <ncopa> avih: thanks!
2017-05-11 00:46:49 <ncopa> parazyd this is exactly what i wanted to test
2017-05-11 00:46:55 <parazyd> :)
2017-05-11 00:46:57 <avih> i prefer it after/if i get results, but.. well.. free appreciation, i'll take it ;)
2017-05-11 00:47:04 <parazyd> i believe evdev _would_ help
2017-05-11 00:47:16 <ncopa> so xf86-input-libinput wasnt enough
2017-05-11 00:47:27 <parazyd> at least on gentoo i don't have xf86-input-{keyboard,mouse}
2017-05-11 00:47:31 <parazyd> evdev works
2017-05-11 00:47:36 <parazyd> (musl based gentoo)
2017-05-11 00:48:19 <parazyd> ok i'll redo with -vga vmware and try to patch in evdev
2017-05-11 00:48:58 <Shiz> :)
2017-05-11 00:48:59 <avih> ncopa: but liberation would be a good falllback/default regardless
2017-05-11 00:49:25 <avih> (i'll still check it during the weekend though and let you know)
2017-05-11 00:53:29 <ncopa> avih yes, i think liberation is the best fallback/default so far
2017-05-11 00:53:52 <ncopa> parazyd i wonder why libinput didnt work?
2017-05-11 00:53:57 <parazyd> no idea
2017-05-11 00:54:13 <ncopa> i kinda expected it to work on "everything"
2017-05-11 00:54:31 <parazyd> that's what you expect out of evdev usually
2017-05-11 00:54:45 <parazyd> (i also have no libinput on gentoo)
2017-05-11 00:55:05 <ncopa> i thought libinput was next gen, evdev replacement
2017-05-11 00:55:09 <ncopa> but i might be wrong
2017-05-11 00:55:22 <ncopa> i suppose its a good idea to always install evdev as fallback
2017-05-11 00:55:37 <parazyd> avoid freedesktop like the plague
2017-05-11 00:56:50 <ncopa> :)
2017-05-11 00:57:07 <ncopa> i cannot help it but i love this community :)
2017-05-11 00:57:14 <parazyd> <3
2017-05-11 00:57:36 <parazyd> it's 3AM and i'm just sitting here, installing xorgs
2017-05-11 00:57:43 <parazyd> what can you say :D
2017-05-11 00:59:15 <ncopa> sorry about that, feel free to continue tm
2017-05-11 00:59:29 <ncopa> i think we have to add evdev unconditionally
2017-05-11 01:00:39 <parazyd> nah i'll try eudev
2017-05-11 01:00:51 <parazyd> currently apk decided to download the latest firmware
2017-05-11 01:00:58 <parazyd> so that's keeping me
2017-05-11 01:01:10 <ncopa> try enable apk cache
2017-05-11 01:01:21 <ncopa> ln -s /var/cache/apk /etc/apk/cache
2017-05-11 01:01:28 <parazyd> it's nearly done
2017-05-11 01:01:31 <ncopa> should speed up things on re-installs
2017-05-11 01:01:31 <parazyd> but yeah
2017-05-11 01:01:40 <parazyd> should've done that
2017-05-11 01:02:14 <ncopa> other option is a caching reverse proxy in your lan that you use as your repo
2017-05-11 01:04:24 <ncopa> so modesetting video driver should work with most cards?
2017-05-11 01:04:39 <ncopa> can we drop the -vesa driver then?
2017-05-11 01:04:55 <parazyd> i don't think the pi1 is going to like it :D maybe when i get a new lime2 (which i'm planning to use for a DIY NAS)
2017-05-11 01:05:01 <parazyd> yep, modesetting is supposed to work
2017-05-11 01:05:11 <parazyd> although on grsec it didn't give me permissions for /dev/dri
2017-05-11 01:05:19 <parazyd> going back to intel solved it
2017-05-11 01:05:33 <parazyd> in your case, i guess modesetting is fine
2017-05-11 01:05:46 <ncopa> you need to be in the "video" group
2017-05-11 01:05:55 <parazyd> i was, it's a deeper problem
2017-05-11 01:06:02 <ncopa> ok
2017-05-11 01:06:43 <ncopa> it might be that it needs access /sys something?
2017-05-11 01:07:03 <ncopa> we have sysfs restrictions enabled in our hardened (aka grsec/unofficial) kernel
2017-05-11 01:07:27 <parazyd> who knows... i might have some time to try it again tomorrow
2017-05-11 01:07:41 <parazyd> could give it a shot; i also have /sys restrictions
2017-05-11 01:09:39 <parazyd> ncopa: are you planning to use minipli's 4.9 backports?
2017-05-11 01:10:22 <ncopa> i sort of am using it already
2017-05-11 01:10:30 <parazyd> ah cool
2017-05-11 01:10:34 <ncopa> in fact, i did the merge myself
2017-05-11 01:10:40 <ncopa> then did a diff with minipli
2017-05-11 01:10:40 <parazyd> he's doing a good job
2017-05-11 01:10:48 <ncopa> apparently
2017-05-11 01:10:58 <ncopa> he did slightly better than me
2017-05-11 01:11:14 <ncopa> so i cierripucked 2 of his commits
2017-05-11 01:11:21 <ncopa> cherry-picked*
2017-05-11 01:11:41 <ncopa> there is a logo bitmap included in the patch
2017-05-11 01:12:07 <ncopa> grsec patch has a different logo
2017-05-11 01:12:11 <ncopa> which we cannot use
2017-05-11 01:12:14 <parazyd> yes
2017-05-11 01:12:29 <ncopa> i dont think we have it enable din our kernel config
2017-05-11 01:12:36 <ncopa> but its good to clean that up regardles
2017-05-11 01:12:40 <ncopa> same with localversion
2017-05-11 01:13:08 <ncopa> other than that, there was no diff
2017-05-11 01:13:18 <parazyd> damn still no mouse in qemu
2017-05-11 01:13:20 <parazyd> or keyboard
2017-05-11 01:13:26 <ncopa> with evdev?
2017-05-11 01:13:28 <parazyd> yeah
2017-05-11 01:13:34 <parazyd> i can try it tomorrow on bare metal
2017-05-11 01:13:39 <parazyd> nothing at hand now
2017-05-11 01:13:46 <parazyd> don't want to turn this laptop off :D
2017-05-11 01:14:07 <ncopa> ok
2017-05-11 01:14:17 <ncopa> thank you very much so far for you help
2017-05-11 01:14:19 <ncopa> appreciate
2017-05-11 01:14:22 <parazyd> np
2017-05-11 01:14:37 <parazyd> hmm you don't create a Xorg.log?
2017-05-11 01:15:22 <parazyd> ok
2017-05-11 01:15:24 <parazyd> weird
2017-05-11 01:15:27 <parazyd> i restarted the vm
2017-05-11 01:15:29 <parazyd> it works now :D
2017-05-11 01:15:40 <ncopa> oh
2017-05-11 01:15:47 <ncopa> might be the udev thingy
2017-05-11 01:15:52 <ncopa> interesting
2017-05-11 01:16:10 <ncopa> we should probably make it re-trigger the uevents
2017-05-11 01:16:14 <parazyd> https://pub.parazyd.cf/tmp/screenshots/screenshot23.png
2017-05-11 01:16:26 <parazyd> could be
2017-05-11 01:16:43 <ncopa> nice!
2017-05-11 01:16:53 <ncopa> that might also be the reason why libinput didnt work
2017-05-11 01:17:00 <parazyd> let's check!
2017-05-11 01:17:51 <parazyd> hmm
2017-05-11 01:18:05 <ncopa> rc-service udev-trigger start
2017-05-11 01:18:40 <ncopa> and rc-service udev-postmount
2017-05-11 01:18:42 <parazyd> i apk del'd xf86-input-evdev, and apk add xf86-input-libinput: it works; reboot: works
2017-05-11 01:18:55 <ncopa> ok
2017-05-11 01:19:05 <ncopa> its likely the udev-trigger thats needed
2017-05-11 01:19:08 <parazyd> eudev might indeed be the reason
2017-05-11 01:19:10 <parazyd> yup
2017-05-11 01:19:26 <ncopa> so we try without evdev then
2017-05-11 01:19:33 <parazyd> do look into why there are no xorg logs
2017-05-11 01:19:38 <ncopa> in the default setup
2017-05-11 01:20:00 <parazyd> yep
2017-05-11 01:20:09 <parazyd> http://sprunge.us/bMCG
2017-05-11 01:20:17 <parazyd> see if this is helpful, probably not
2017-05-11 01:20:20 <parazyd> oh wait
2017-05-11 01:20:22 <parazyd> no
2017-05-11 01:20:27 <parazyd> this: http://sprunge.us/fNKT
2017-05-11 01:20:40 <ncopa> its handled in setup-udev nowdays
2017-05-11 01:21:06 <ncopa> this is why i started with the setup-xorg-base today in the first place
2017-05-11 01:21:19 <parazyd> i see
2017-05-11 01:21:52 <parazyd> cool! glad it worked out
2017-05-11 01:23:47 <ncopa> http://tpaste.us/40rJ
2017-05-11 01:24:50 <parazyd> :)
2017-05-11 01:25:25 <ncopa> need verify the order
2017-05-11 01:25:31 <ncopa> might also need start udev-settle
2017-05-11 01:25:41 <ncopa> to wait for the events to finish
2017-05-11 01:27:55 <parazyd> hah now you made me fiddle again
2017-05-11 01:28:01 <parazyd> going to try libinput on gentoo :p
2017-05-11 01:28:33 <ncopa> :)
2017-05-11 01:34:30 <ncopa> how do you start dwm?
2017-05-11 01:36:08 <parazyd> printf -- "#!/bin/sh\nst&\nexec dwm" > ~/.xinirc ; chmod +x ~/.xinitrc; startx
2017-05-11 01:36:32 <ncopa> nice! thanks!
2017-05-11 01:37:36 <parazyd> heh libinput works!
2017-05-11 01:37:59 <ncopa> thats a surprise :)
2017-05-11 01:38:21 <ncopa> i need libinput on my macbook to get reverse scrolling working in xfce
2017-05-11 01:39:09 <parazyd> understandable
2017-05-11 01:50:46 <ncopa> gonna sleep. thank you parazyd
2017-05-11 01:50:53 <parazyd> yw, good night ;)
2017-05-11 06:24:31 <dikaio> ping
2017-05-11 06:25:27 <ryonaloli> pong
2017-05-11 06:25:32 <dikaio> :)
2017-05-11 07:11:02 <Bun> there was an update to vte recently on arch which supposedly fixes some bracketed paste mode issue, and now I can no longer paste in an alpine tmux instance; anyone any ideas?
2017-05-11 07:15:20 <Bun> nevermind, it's an arch related issue it seems
2017-05-11 07:15:49 <Bun> then a second question, does alpine's screen not do 256 colors or am I doing something wrong?
2017-05-11 08:53:07 <alias__> I'm having issues debugging wkhtmltopdf segfaulting
2017-05-11 08:53:45 <alias__> https://pastebin.com/RVGKDvL3
2017-05-11 08:54:47 <alias__> Does anyone have a clue what I could try more? I'm using an ancient version of wkhtmltopdf (updating to a newer version is not an option)
2017-05-11 08:55:00 <alias__> https://downloads.wkhtmltopdf.org/obsolete/linux/wkhtmltopdf-0.10.0_rc2-static-amd64.tar.bz2
2017-05-11 08:55:59 <Shiz> you can't trust glibc statically linked binaries
2017-05-11 08:56:31 <Shiz> considering it's accessing the web, it likely tried to load a dynamic NSS library
2017-05-11 08:56:40 <Shiz> because glibc static linked binaries tend to do that
2017-05-11 08:56:47 <Shiz> upon failure, it likely crashed
2017-05-11 08:57:05 <Shiz> best advice i can give you is to compile it yourself
2017-05-11 08:58:13 <alias__> just checked
2017-05-11 08:58:36 <alias__> when just running -V it also segfaults
2017-05-11 08:58:44 <alias__> I'll try to compile it myself idd
2017-05-11 08:58:46 <alias__> tnx!
2017-05-11 08:59:09 <Shiz> https://github.com/wkhtmltopdf/wkhtmltopdf/archive/0.10.0_rc2.tar.gz
2017-05-11 08:59:16 <Shiz> i think this is the specific version you're looking for
2017-05-11 08:59:24 <Shiz> (be aware that it apparently has multiple security issues...)
2017-05-11 09:00:40 <alias__> yeah security wise it's a nightmare
2017-05-11 09:53:45 <danci1973> Hello...
2017-05-11 09:58:41 <kahiru> hello danci1973
2017-05-11 10:01:49 <danci1973> Can I 'apk upgrade' a single package?
2017-05-11 10:03:28 <danci1973> Apparently libreswan 3.18 that's in v3.5/community repo has a bug regarding stopping pluto daemon, so I'd like to try the 3.20 version from 'edge/community'...
2017-05-11 10:07:02 <k63ZXXguczqE> apk add -u <pkg name>
2017-05-11 10:08:49 <Shiz> don't do it like that
2017-05-11 10:09:18 <Shiz> add the edge repo with a tag in /etc/apk/repositories and do apk add libreswan@mytag
2017-05-11 10:09:26 <Shiz> but mixing 3.5 and edge is not the best idea
2017-05-11 10:13:58 <clandmeter> danci1973, bug in stopping, does  that mean rc script?
2017-05-11 10:15:16 <danci1973> clandmeter: Pluto should exit / terminate after receiving signal 15 - while it does clean-up connections, the process doesn't exit properly and just hangs there.
2017-05-11 10:15:36 <danci1973> clandmeter: This happens with rc script and with 'kill -15 PID' ...
2017-05-11 10:15:50 <clandmeter> ah ok, so its really a daemon error.
2017-05-11 10:16:17 <danci1973> And over in #swan I was told that this is a ug that has been fixed in later versions...
2017-05-11 10:17:18 <clandmeter> as Shiz suggested, its not good  to mix repos, but you can try to pin it and try.
2017-05-11 10:18:13 <Shiz> danci1973: if you can point me to a commit that fixes i can see if i can backport it to 3.5
2017-05-11 10:18:52 <clandmeter> that would be even beter.
2017-05-11 10:19:09 <danci1973> Shiz: I'll try.
2017-05-11 10:19:37 <clandmeter> danci1973, or use the 3.6 repo's already :)
2017-05-11 10:20:52 <danci1973> I didn't know there is 3.6 already.. :) https://alpinelinux.org/ doesn't mention it...
2017-05-11 10:21:41 <Shiz> we're in the middle of getting it ready for release
2017-05-11 10:21:53 <danci1973> If I change 3.5 to 3.6 in my 'repositories' and then run 'apk upgrade' - should I be fine?
2017-05-11 10:23:34 <clandmeter> you need to add --available
2017-05-11 10:24:45 <parazyd> http://www.openwall.com/lists/kernel-hardening/2017/05/11/2
2017-05-11 10:25:10 <clandmeter> danci1973, we are currently on rc1 i believe. so it should be fairly safe (no promises).
2017-05-11 10:25:11 <danci1973> Since this is a RAM based install, anything else I need to do after that? Kernel / modloop ?
2017-05-11 10:27:35 <Shiz> is rc1 released yet?
2017-05-11 10:29:44 <clandmeter> no not yet, but i remember ncopa said he wants to tag it or get it out.
2017-05-11 12:41:37 <ncopa> rc1 is not out yes
2017-05-11 12:41:50 <ncopa> seems like there are more s390x packages that needs fixing
2017-05-11 12:43:00 <ncopa> alias__ i think we might have a wkhtmltopdf package
2017-05-11 12:43:14 <Shiz> we do, but they specifically need an old version for some reason
2017-05-11 12:43:45 <ncopa> ok
2017-05-11 13:05:19 <alex88> Hi there, is there a workaround on this? https://bugs.alpinelinux.org/issues/7273
2017-05-11 13:05:29 <alex88> I've tried --allow-untrusted but it doens't work
2017-05-11 13:05:30 <parazyd> ncopa: is xorg running as root intentional in alpine?
2017-05-11 13:06:18 <Shiz> alex88: one of the mirrors is having issues
2017-05-11 13:06:25 <Shiz> please do not use --allow-untrusted as a workaround :P
2017-05-11 13:06:34 <Shiz> alex88: try changing your mirror to nl.alpinelinux.org
2017-05-11 13:06:43 <alex88> Shiz: thank you :) will try that
2017-05-11 13:06:57 <Shiz> with docker, something like  sed -i 's/dl-cdn/nl/g' /etc/apk/repositories will work
2017-05-11 13:08:38 <alex88> I was going to do a cat << EOF > /etc/apk/repositories
2017-05-11 13:08:49 <alex88> but thank you for giving the oneliner :D anyway, that works, thank a lot!
2017-05-11 13:13:58 <avih> dalias: so tcc now works with musl. i still have an issue though if stdio.h (possibly others too) come before stdarg.h in the program.  tcc has its own prioritized include dirs with stdarg.h. i'm trying to figure out musl's expectations with regards to this. i'm looking at bits/alltypes.h, does musl expects the compiler to have an intrinistic define of __DEFINED_va_list or __DEFINED___isoc_va_list ?
2017-05-11 13:14:40 <avih> (if stdarg.h is included first then va_list et al work fine with tcc+musl)
2017-05-11 13:15:02 <dalias> musl does not support compiler-provided std headers
2017-05-11 13:15:22 <Shiz> dalias: even stdarg?
2017-05-11 13:15:25 <dalias> the libc headers must come first in include path
2017-05-11 13:15:28 <Shiz> or stdint?
2017-05-11 13:15:30 <Shiz> :p
2017-05-11 13:15:33 <dalias> yes
2017-05-11 13:15:33 <avih> what's the relation between the compiler's va_list and musl?
2017-05-11 13:15:37 <Shiz> i thought some stuff came from the compiler
2017-05-11 13:15:42 <dalias> no, that's a glibcism
2017-05-11 13:15:49 <dalias> bsd doesn't work that way and musl doesn't either
2017-05-11 13:16:17 <avih> dalias: so how should the compiler expose it such that it can be used correctly?
2017-05-11 13:16:43 <Shiz> it should provide the right primitives
2017-05-11 13:16:45 <dalias> by providing the intrinsics (__builtin_va*)
2017-05-11 13:16:50 <Shiz> musl relies on __builtin_va_list and the likes
2017-05-11 13:17:04 <avih> gotcha.
2017-05-11 13:17:07 <dalias> or you could use a silently pre-included header to define them as macros
2017-05-11 13:17:16 <Shiz> parazyd: right now, i believe so
2017-05-11 13:17:18 <dalias> but that's a hack
2017-05-11 13:17:26 <Shiz> since there has simply not been resources/work on making it run not as root
2017-05-11 13:17:29 <dalias> the compiler itself could just predefine them as macros if it doesn't want real intrinsics
2017-05-11 13:17:39 <Shiz> but (at least I would) very much welcome efforts towards this
2017-05-11 13:17:41 <Shiz> :)
2017-05-11 13:17:42 <avih> dalias: you mean instead of using stdarg.h in a prioritized dir?
2017-05-11 13:17:53 <dalias> yes
2017-05-11 13:17:58 <avih> k, thx
2017-05-11 14:11:38 <ncopa> parazyd: xorg as root is sort of intentional. I havent get to fixing it to work as non-root yet
2017-05-11 14:14:42 <Bun> does screen on alpine support 256 colors?
2017-05-11 14:19:53 <ncopa> Bun i would believe so. what is required for 256 color support?
2017-05-11 14:20:06 <ncopa> how can i test it?
2017-05-11 14:22:45 <Bun> with term screen-256color in my .screenrc and this script: https://askubuntu.com/questions/821157/print-a-256-color-test-pattern-in-the-terminal it does not work
2017-05-11 14:25:28 <Bun> there's a config option --enable-colors256 which the APKBUILD does not use
2017-05-11 14:25:35 <Bun> I don't know if this implies any additional dependencies
2017-05-11 14:27:00 <ncopa> Bun looks like you are right
2017-05-11 14:27:06 <ncopa> tmux has 256 color support
2017-05-11 14:27:14 <ncopa> i'll fix it
2017-05-11 14:27:20 <Bun> great, thanks
2017-05-11 14:28:03 <Shiz> yep it's not autodetected
2017-05-11 14:28:05 <Shiz> also
2017-05-11 14:28:07 <Shiz> AC_ARG_ENABLE(telnet, [  --enable-telnet         enable builtin telnet])
2017-05-11 14:28:09 <Shiz> what the fuck
2017-05-11 14:28:29 <ncopa> ha
2017-05-11 14:29:16 <Bun> wow that's actually a thing
2017-05-11 14:29:26 <Shiz> it also apparently has PAM support
2017-05-11 14:29:30 <Shiz> don't even want to know
2017-05-11 14:29:52 <Bun> locking maybe?
2017-05-11 14:30:24 <Shiz> i lied, i do want to know
2017-05-11 14:30:26 <Shiz> it's locking, yeah
2017-05-11 14:30:35 <Shiz> /* -- original copyright by Luigi Cannelloni 1985 (luigi@faui70.UUCP) -- */
2017-05-11 14:30:39 <Shiz> hot damn that email
2017-05-11 14:39:08 <avih> dalias: i'm seeing a warning when using tcc  which does not show when using gcc, and i'm not sure who's at fault. the files which i'm building don't define/refer to this symbol directly (minor spam):
2017-05-11 14:39:10 <avih> In file included from audio/out/ao_oss.c:46:
2017-05-11 14:39:10 <avih> In file included from /usr/include/sys/soundcard.h:1:
2017-05-11 14:39:10 <avih> In file included from /usr/include/linux/soundcard.h:40:
2017-05-11 14:39:10 <avih> In file included from /usr/include/linux/ioctl.h:4:
2017-05-11 14:39:10 <avih> In file included from /usr/include/asm/ioctl.h:1:
2017-05-11 14:39:11 <avih> /usr/include/asm-generic/ioctl.h:77: warning: _IOWR redefined
2017-05-11 14:40:02 <avih> the same warning happens for _IOC, _IO, _IOR, _IOW and _IOWR
2017-05-11 14:42:56 <avih> /usr/include/sys/soundcard.h is a single line: #include <linux/soundcard.h>
2017-05-11 14:48:30 <avih> dalias: maybe imcompatible guards somehow? linux/ioctl.h guards with _LINUX_IOCTL_H . i couldn't figure out yet where the prior definition comes from
2017-05-11 14:49:04 <Shiz> (please use a pastebin)
2017-05-11 14:49:26 <avih> yeah, in general i should, possibly here too, though i'm done with those :)
2017-05-11 14:49:26 <Shiz> where does it mention the previous definition being?
2017-05-11 14:50:02 <avih> Shiz: it doesn't say
2017-05-11 14:50:18 <Shiz> right, then it's the same file
2017-05-11 14:50:25 <avih> and it also doesn't happen with gcc
2017-05-11 14:50:53 <Shiz> try just preprocessing the file
2017-05-11 14:50:58 <Shiz> if tcc has an option for that
2017-05-11 14:51:10 <Shiz> and paste the output of that somewhere
2017-05-11 14:51:12 <avih> it does have -E, but i'm not there yet :)
2017-05-11 14:51:50 <avih> (i need to figure out the exact invocation of the compile for that)
2017-05-11 14:52:58 <avih> fwiw, mpv builds fully with tcc, after very(!) little tinkering with mpv. and it also works fine. audio and opengl and all.
2017-05-11 14:53:06 <avih> on alpine, that is.
2017-05-11 14:53:32 <avih> these _IO* warnings are the only issue left
2017-05-11 15:04:19 <avih> (though mpv doesn'tt built with its own build system - waf - which doesn't support tcc. i used unofficial configure and Makefile which mpv's maintainer still uses himself)
2017-05-11 15:17:50 <Unode> Hi guys, I'm getting "BAD signature" errors on a couple of packages. ERROR: libuuid-2.28.2-r1, libblkid-2.28.2-r1: BAD signature
2017-05-11 15:18:05 <Unode> this started sometime early today.
2017-05-11 15:19:02 <Unode> This is on alpine:edge with "@testing http://dl-cdn.alpinelinux.org/alpine/edge/testing"
2017-05-11 15:19:49 <clandmeter> hi
2017-05-11 15:19:58 <clandmeter> did you report that also earlier?
2017-05-11 15:20:13 <Unode> no. Someone else perhaps.
2017-05-11 15:21:12 <clandmeter> Unode, which arch?
2017-05-11 15:21:36 <Unode> This is using docker with the alpine:edge image.
2017-05-11 15:21:42 <Unode> x86_64
2017-05-11 15:22:29 <Unode> clandmeter: http://dpaste.com/2A8W590
2017-05-11 15:22:31 <Unode> if it helps
2017-05-11 15:22:56 <Unode> those were the revisions that failed by the way.
2017-05-11 15:25:43 <clandmeter> Unode, what if you use another mirror?
2017-05-11 15:26:52 <Unode> Shouldn't they all be equivalent?
2017-05-11 15:27:34 <clandmeter> in principle yes
2017-05-11 15:27:42 <clandmeter> but its a cdn
2017-05-11 15:27:50 <clandmeter> it does caching
2017-05-11 15:28:17 <Unode> so what you are saying is that it's likely fixed already but the bad version is still cached?
2017-05-11 15:29:36 <clandmeter> i fisrst would need to know if another mirror works for you
2017-05-11 15:30:45 <Unode> any suggestion?
2017-05-11 15:32:42 <clandmeter> try cz.alpinelinux.org
2017-05-11 15:33:31 <Unode> that worked
2017-05-11 15:34:08 <Unode> it's actually the main channel that has issues.
2017-05-11 15:36:22 <Unode> and interesting. They are both v3.5.0-4813-g5fafd50b76 but http://dl-cdn.alpinelinux.org/alpine/edge/main fails
2017-05-11 15:59:48 <Shiz> dl-cdn is still having issues yes :(
2017-05-11 16:05:52 <ncopa> which package?
2017-05-11 16:05:58 <ncopa> which arch
2017-05-11 16:06:20 <Unode> ncopa: mines are mentioned above
2017-05-11 16:06:43 <ncopa> libuuid
2017-05-11 16:07:42 <ncopa> # apk verify libuuid-2.28.2-r1.apk
2017-05-11 16:07:42 <ncopa> libuuid-2.28.2-r1.apk: 0 - OK
2017-05-11 16:10:37 <clandmeter> ncopa, how do you know you are using the same cache?
2017-05-11 16:11:57 <Unode> libuuid is no longer failing. libblkid still fails
2017-05-11 16:12:11 <Unode> whatever you did, it helped.
2017-05-11 16:23:49 <ncopa> i can not be sure i am using the same cache
2017-05-11 16:24:00 <ncopa> i checked the package on dl-4.a.o
2017-05-11 16:24:17 <ncopa> which is the backend for dl-cdn
2017-05-11 16:29:35 <Unode> Thanks ncopa, purging the dl-cdn worked once I had the correct URL
2017-05-11 16:30:32 <Unode> with: curl -X PURGE http://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/libblkid-2.28.2-r1.apk
2017-05-11 16:31:26 <Shiz> that seems odd
2017-05-11 16:36:30 <ncopa> sounds like corrupt cache
2017-05-11 16:50:10 <jid> Hi. If I had an idea to use alpine as Xen-dom0 on my laptop using X forwarding over ssh to test different DomUs. Will it be a security risk? Is there any support for cpu scaling and/or S3 suspend in the host?
2017-05-11 17:01:34 <Xe> ncopa: i'm seeing dl-cdn error for apk updates: https://travis-ci.org/PonyvilleFM/aura#L419
2017-05-11 17:01:58 <ncopa> Xe yes, i have seen it too
2017-05-11 17:02:22 <Xe> +1 just making sure
2017-05-11 17:02:29 <ncopa> i get full panic messages from everywhere atm
2017-05-11 17:02:30 <ncopa> :-/
2017-05-11 17:05:54 <kaniini> we could set up an anycast mirror @ work to replace dl-cdn if interested
2017-05-11 17:08:45 <Xe> ncopa: if there's anything I can do on my end to help, lemme know
2017-05-11 17:08:58 <Xe> no panic over here
2017-05-11 17:11:01 <Diftraku> kaniini: did you mean bunnycast mirror :3
2017-05-11 17:13:11 <jmmarron> hello
2017-05-11 17:14:37 <Xe> hi jmmarron
2017-05-11 17:14:52 <jmmarron> is the alpine cdn down?
2017-05-11 17:15:18 <Xe> yeah there's known issues with it, if you need to install stuff use another mirror of the time being, they're trying to restore it
2017-05-11 17:15:37 <jmmarron> any estimation on when this will be solved?
2017-05-11 17:15:51 <Xe> when it's fixed and no sooner
2017-05-11 17:16:16 <Xe> jmmarron: http://dl-3.alpinelinux.org/alpine/v3.5/main works in the time being
2017-05-11 17:16:23 <xentec> or # setup-apkrepos
2017-05-11 17:17:45 <jmmarron> thanks
2017-05-11 17:17:51 <Xe> no problem
2017-05-11 17:24:47 <flazz> in alpine 3.4, i have a ruby script complaining that it cannot verify a server's ssl cert, but openssl seems to verify fine. are they using different certificates?
2017-05-11 17:27:12 <Xe> flazz: paste error messages?
2017-05-11 17:30:44 <flazz> Xe: https://pastebin.com/cRq54kUD
2017-05-11 17:30:54 <bwagner_> hello! I am getting timeouts (503) when trying to fetch the APKINDEX from (http://dl-cdn.alpinelinux.org/alpine/v3.4/community)
2017-05-11 17:31:04 <Xe> flazz: did you install `ca-certificates`?
2017-05-11 17:31:20 <Xe> bwagner_: Alpine CDN is down, known issue, no ETA for fix, use alternate mirrors in the meantime
2017-05-11 17:31:28 <bwagner_> is this a known issue and are there any official mirrors I can use? (I couldn't find any on the wiki or the site)
2017-05-11 17:31:38 <flazz> Xe: yes
2017-05-11 17:31:46 <Xe> http://dl-3.alpinelinux.org/alpine/v<numerical version>/<repo>
2017-05-11 17:32:09 <bwagner_> Xe: thank you!
2017-05-11 17:32:34 <flazz> how does one change from dl-cdn to dl-3 ?
2017-05-11 17:32:48 <Xe> flazz: /etc/apk/repositories
2017-05-11 17:34:38 <felixsanz> i installed rxvt-unicode-patched and looks so much worse than the rxvr-unicode package, why?
2017-05-11 17:34:44 <felixsanz> wrong channel sorry xD
2017-05-11 17:35:19 <Xe> is it the font letter spacing issue?
2017-05-11 17:35:49 <Xe> you need something like https://github.com/Xe/dotfiles/blob/master/.Xdefaults#L20 to fix that fwiw felixsanz
2017-05-11 17:37:05 <xentec> Xe, if you redirect everyone to dl-3 it'll be down too ;)
2017-05-11 17:37:37 <Xe> xentec: the mirror was chosen by fair dice roll
2017-05-11 17:38:46 <bwagner_> Xe: xentec: that mirror is unavailable too and now the wiki is down :o
2017-05-11 17:39:08 <Xe> bwagner_: acquire more alcohol, it's gonna be a long day
2017-05-11 17:39:09 <xentec> Xe: Told you so! :D
2017-05-11 17:40:25 <bwagner_> Xe: yes, hanging on tightly :)
2017-05-11 17:41:23 <bwagner_> Xe: got my cachaca ready
2017-05-11 17:41:52 <Unode> the heck guys. today the mirrors are having a lot of issues. http://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz is now 503 timeout and then 503 Backend is unhealthy
2017-05-11 17:42:52 <Xe> Unode: Alpine CDN is down, known issue, no ETA for fix, use alternate mirrors in the meantime
2017-05-11 17:42:59 <Unode> and now seems back to normal again.
2017-05-11 17:43:01 <Xe> computers break, patience
2017-05-11 17:44:19 <Unode> Xe: yes not complaining. Just hinting that there might be some hardware issue behind it. Thanks for looking into it.
2017-05-11 17:44:24 <felixsanz> Xe: but thats for the patched version?
2017-05-11 17:44:46 <kaniini> it's a fastly issue
2017-05-11 17:44:51 <felixsanz> mm, it looks even worse
2017-05-11 17:44:52 <bwagner_> for whoever is having trouble, I managed to make it work with this mirror (from a brazilian university): http://ns2.c3sl.ufpr.br/latest-stable/main/
2017-05-11 17:44:53 <Unode> Is there any way to configure apk to automatically fallback to another mirror if one fails for some reason?
2017-05-11 17:45:35 <kaniini_> Unode: unfortunately not, but i will work on it
2017-05-11 17:46:35 <Unode> kaniini_: that would be great and improve reliability. Like possibly many users out there I use alpine for continuous integration and today was a sad day with a lot of red :)
2017-05-11 17:47:08 <kaniini_> Unode: we are probably going to drop fastly for the CDN mirror.  i can set up an anycast mirror to replace it.
2017-05-11 17:47:24 <kaniini_> 
ACTION literally has people working on the specifics of that right now

2017-05-11 17:47:47 <Unode> thanks!
2017-05-11 17:47:57 <Xe> kaniini_: can you make it use HTTPS too?
2017-05-11 17:48:01 <kaniini_> fuck no
2017-05-11 17:48:06 <Unode> :D
2017-05-11 17:48:08 <kaniini_> go burn somebody else's CPU
2017-05-11 17:48:29 <kaniini_> everything is signed, there is literally no point in using TLS on top of that except to encrypt it
2017-05-11 17:48:55 <Unode> fair point
2017-05-11 17:49:43 <xentec> the https meme is strong nowadays..
2017-05-11 17:50:10 <kaniini_> yes
2017-05-11 17:50:18 <kaniini_> TLS certificates are free
2017-05-11 17:50:23 <kaniini_> because of lets encrypt
2017-05-11 17:50:44 <kaniini_> but if you consider how busy an alpine mirror is (especially dl-cdn), TLS is insane :P
2017-05-11 17:51:06 <arch3y_> about how  much traffic is done monthly
2017-05-11 17:51:09 <arch3y_> just curious
2017-05-11 17:51:31 <kaniini_> i have no idea honestly, but literally whenever fastly screws up, people show up literally in seconds
2017-05-11 17:51:34 <kaniini_> soooo
2017-05-11 17:51:39 <kaniini_> i am assuming it is pretty busy ;P
2017-05-11 17:51:42 <arch3y_> yeah thats good
2017-05-11 17:52:02 <arch3y_> I used to run a mirror netowrk and we did around 2T a month which wasnt bad
2017-05-11 17:52:10 <IcePic> the load on decent cpus isnt that bad anymore.
2017-05-11 17:52:12 <arch3y_> but we didnt have the community that you guys
2017-05-11 17:52:28 <xentec> but it's still load, IcePic
2017-05-11 17:52:40 <arch3y_> most of the time the boxes were doing close to 50-100Mpbs at times but it wasnt doing too much
2017-05-11 17:52:48 <arch3y_> but thats probably small numbers compared to you guys
2017-05-11 17:53:22 <kaniini_> IcePic: it's unnecessary load.  TLS does not protect you any more than the signatures already
2017-05-11 17:53:47 <vifino> Many people seem to want https on sites which don't need it. Why would anyone need encryption on a public site with no login possibility?
2017-05-11 17:53:50 <IcePic> I'm not trying to argue that TLS will give you much, just saying that modern CPUs handle it rather well
2017-05-11 17:55:26 <ncopa> dl-cdn should be back now
2017-05-11 17:55:31 <IcePic> our backupserver at work only accept TLS'ed connections and it does around 100MB/s per core (ie, per stream sent from clients)
2017-05-11 17:55:32 <ryonaloli> vifino: to prevent people from tampering with the contents of the site
2017-05-11 17:55:55 <ryonaloli> i've fucked with people's unencrypted sites and given them quite the scare, along with more malicious things.
2017-05-11 17:56:03 <IcePic> so as long as noone wants single streams faster than normal gig link, you're fine. =)
2017-05-11 17:56:07 <ryonaloli> including sites which were completely public
2017-05-11 17:56:13 <ryonaloli> static webpages
2017-05-11 17:56:18 <kaniini_> sure
2017-05-11 17:56:20 <kaniini_> however
2017-05-11 17:56:27 <IcePic> BUT, as long as the stuff you get is checksummed and validated otherwise, the transport doesnt matter
2017-05-11 17:56:31 <kaniini_> that isn't relevant here as the packages and indices are *signed*
2017-05-11 17:56:52 <ryonaloli> never been able to do so on pages which used tls (excepting badly broken tls, i imagine it'd be easy to do that)
2017-05-11 17:57:01 <ryonaloli> kaniini_: oh is this about downloading packages over tls?
2017-05-11 17:57:06 <kaniini_> yes
2017-05-11 17:57:08 <ncopa> yes
2017-05-11 17:57:11 <xentec> yes
2017-05-11 17:57:14 <Xe> yes
2017-05-11 17:57:15 <ryonaloli> does the package manager do anything before verification?
2017-05-11 17:57:16 <kaniini_> they can MITM a backdoor into a package all they want, but it won't do any good because the signature check will fail
2017-05-11 17:57:26 <ryonaloli> e.g. decompressing
2017-05-11 17:57:30 <kaniini_> no
2017-05-11 17:58:04 <ncopa> i think signature is compressed, so yes we decompress before verifying
2017-05-11 17:58:30 <ryonaloli> ncopa: compressed like, gzip compressed? or internal signature compression like ed25519 being "compressed"?
2017-05-11 17:58:32 <kaniini_> ncopa: checksum is checked against the index before decompression though
2017-05-11 17:58:57 <ncopa> its checked while decompressing
2017-05-11 17:59:06 <ncopa> but yes, checksum in index
2017-05-11 17:59:10 <ryonaloli> then it has a greater attack surface area than with tls
2017-05-11 17:59:13 <ryonaloli> potentialy
2017-05-11 17:59:16 <ryonaloli> *potentially
2017-05-11 17:59:22 <ncopa> yes
2017-05-11 17:59:34 <kaniini_> not worth the expense on the mirrors to have TLS though
2017-05-11 17:59:40 <ryonaloli> since you could exploit the decompressor as well as the signature verification tool
2017-05-11 17:59:48 <ncopa> yes
2017-05-11 17:59:56 <xentec> but you need to compromise the system first
2017-05-11 18:00:07 <ncopa> his point is that its easier with http
2017-05-11 18:00:08 <ryonaloli> plus tls would be useful for paranoid people who do not want the specific things they are downloading to be known.
2017-05-11 18:00:15 <kaniini_> ok
2017-05-11 18:00:17 <kaniini_> well
2017-05-11 18:00:19 <ryonaloli> for example, you download a known vulnerable network facing daemon.
2017-05-11 18:00:23 <kaniini_> whoever wants to front the money for that
2017-05-11 18:00:36 <ncopa> i still dont know if https for apk mirrors is worth it
2017-05-11 18:00:48 <ryonaloli> ncopa: use a light tls suite then
2017-05-11 18:00:51 <kaniini_> to pay for TLS-enabled mirrors and the hardware upgrades the mirror operators would need to make TLS inexpensive
2017-05-11 18:01:02 <kaniini_> anyway, i'm out of this conversation
2017-05-11 18:01:06 <Bun> well, TLS doesn't hide size, and I bet the plaintext is fairly predictable, so you could guess what someone is downloading even with TLS ;p
2017-05-11 18:01:13 <ryonaloli> chacha20-poly1305 or aes128-gcm and ecdhe with curve25519 or secp251
2017-05-11 18:01:26 <kaniini_> blah blah blah grsec blah blah blah lolicon blah blah blah security
2017-05-11 18:01:43 <ryonaloli> Bun: indeed, and that's a big issue with tls
2017-05-11 18:01:54 <Bun> so clearly, alpine needs to start padding packages!
2017-05-11 18:01:56 <ryonaloli> but it requires having a database of the file sizes and keeping such a database up to date
2017-05-11 18:02:04 <kaniini_> Bun: yes i propose a 16GB pad for each package
2017-05-11 18:02:07 <ryonaloli> pad all packages to the size of the largest package!
2017-05-11 18:02:15 <ryonaloli> but then that leaks when you are updating
2017-05-11 18:02:22 <xentec> kaniini_: how often does the tls discussion happen here? :D
2017-05-11 18:02:23 <kaniini_> each package will now be 16GB
2017-05-11 18:02:26 <ryonaloli> so let's transfer dummy updates every 5 minutes
2017-05-11 18:02:34 <feuerteufel> Hi @ all
2017-05-11 18:02:36 <kaniini_> xentec: "discussion"
2017-05-11 18:02:43 <TBB> often
2017-05-11 18:02:51 <ncopa> ryonaloli thanks for your feedback
2017-05-11 18:02:58 <ryonaloli> lol
2017-05-11 18:02:59 <ncopa> we will consider enabling tls
2017-05-11 18:03:13 <TBB> funnily enough I'm just working on running our internal repositories on https
2017-05-11 18:03:13 <ryonaloli> ncopa: i assume the servers have aesni?
2017-05-11 18:03:26 <ryonaloli> and pclmulqdq?
2017-05-11 18:03:29 <ncopa> i dont have controll over all mirrors
2017-05-11 18:03:29 <ryonaloli> (in cpuinfo0
2017-05-11 18:03:31 <ryonaloli> *)
2017-05-11 18:03:39 <kaniini_> our servers are hosted by NSA as directed by Trump himself
2017-05-11 18:03:53 <kaniini_> i am being sarcastic :)
2017-05-11 18:04:00 <IcePic> nah, then you would be using russian GOST crypto on them
2017-05-11 18:04:03 <IcePic> =)
2017-05-11 18:04:15 <sebumd> Is there a workaround for the CDN issue? Lol this is my first time using the alpine docker images and it's not a good look for the rest of my team :)
2017-05-11 18:04:18 <ncopa> ryonaloli: how is tampering with static generated pages easier with http over https?
2017-05-11 18:04:24 <ncopa> sebumd it should be back now
2017-05-11 18:04:34 <xentec> sebumd: bad luck, but should be working
2017-05-11 18:04:52 <ryonaloli> ncopa: because https provides integrity
2017-05-11 18:04:52 <ncopa> sebumd sorry about that :-(
2017-05-11 18:04:53 <kaniini> hm
2017-05-11 18:05:02 <ryonaloli> i mean if it's http, then you can just mitm it and inject whatever you want
2017-05-11 18:05:05 <ryonaloli> otherwise it's opaque
2017-05-11 18:05:12 <kaniini_> you can do that with TLS too
2017-05-11 18:05:41 <kaniini_> for only $99.95 comodo will happily sign whatever you want
2017-05-11 18:05:46 <ryonaloli> heh
2017-05-11 18:05:49 <ryonaloli> well there's always hpkp :P
2017-05-11 18:05:59 <ryonaloli> and for something like alpine, you can just pin the keys
2017-05-11 18:06:04 <ryonaloli> *pin the fingerprint
2017-05-11 18:06:21 <kaniini_> is this the part where you propose using DANE and then secure DANE using DNSSEC too?
2017-05-11 18:06:23 <kaniini_> ;)
2017-05-11 18:06:30 <IcePic> ryonaloli: I think you mean well, but I don't believe they need to get more of "you can just do this, you can do that.."
2017-05-11 18:06:39 <sebumd> Hmm ncopa: Trying to apy add mongodb, am I doing something wrong?
2017-05-11 18:06:55 <ncopa> sebumd what error do you get?
2017-05-11 18:07:06 <IcePic> by all means, set up an https alpine and see how it fares. but asking $someone else to do all the work isnt really nice.
2017-05-11 18:07:19 <kaniini_> IcePic: yes, we can 'just' fork grsec and have it be 'instantly' as good as the original
2017-05-11 18:07:27 <kaniini_> IcePic: so we should 'just do it'
2017-05-11 18:07:42 <sebumd> ncopa, Error: unsatisfiable constraints: mongodb (missing) required by world[mongodb]
2017-05-11 18:07:44 <TBB> if I can ever get any performance stats on hosting repos on https I'll be glad to share them
2017-05-11 18:07:59 <ncopa> would be interesting to know the exact cost for https
2017-05-11 18:07:59 <ryonaloli> IcePic: it's not like it's difficult to do
2017-05-11 18:08:01 <feuerteufel> does anyone Know if the Alpine-Kernel supports frequency scaling and am I able to use that also on a XEN (dom0) installation?
2017-05-11 18:08:07 <ryonaloli> i think the problem they're facing is the performance issue
2017-05-11 18:08:11 <kaniini_> TBB: i dont think it is that bad, and if mirror operators wish to support TLS, i think we should record it
2017-05-11 18:08:20 <IcePic> ryonaloli: nothing that is set on someone else ever is.
2017-05-11 18:08:25 <kaniini_> TBB: but i don't think we should also say "TLS is required for alpine mirrors"
2017-05-11 18:08:30 <ncopa> but, even if we do https for all our mirrors
2017-05-11 18:08:33 <ryonaloli> and that's something i don't know. it depends on if they have aesni and pclmulqdq.
2017-05-11 18:08:37 <ncopa> what about rsync://
2017-05-11 18:08:53 <kaniini_> rsync over ssh obviously
2017-05-11 18:08:55 <TBB> yeh, I'm not too sceptical about the performance per se
2017-05-11 18:09:16 <ncopa> pointless to enforce https unless we fix rsync first
2017-05-11 18:09:18 <kaniini_> it's not about the performance, it's about getting the mirror operators to do it
2017-05-11 18:09:32 <kaniini_> and, hahaha, you cant get me to fight that battle
2017-05-11 18:10:21 <ncopa> also https and rsync+ssh does not solve the issue when a mailcius mirror admin injects things
2017-05-11 18:10:32 <kaniini_> it's okay
2017-05-11 18:10:49 <kaniini_> we just solve that by requiring the mirror admin submit their social insurance number when applying
2017-05-11 18:10:54 <kaniini_> then if they inject malicious things
2017-05-11 18:10:55 <ncopa> :)
2017-05-11 18:11:01 <kaniini_> we just go open a $100,000 credit card in their name
2017-05-11 18:11:02 <iadknet> The CDN issue helped me uncover an inefficient ordering of one of our docker images (we were reinstalling git on every build by having it too low in the dockerfile)... so, thanks! :D
2017-05-11 18:11:05 <kaniini_> and use it to fund development
2017-05-11 18:11:16 <Bun> will they be posted on the wiki? because how else do I know to trust them as an end user
2017-05-11 18:11:19 <sebumd> Also ncopa: this is the alpine:latest docker image that I'm running this in
2017-05-11 18:11:25 <ncopa> my point is, https alone does not not solve all worlds problems
2017-05-11 18:11:52 <kaniini_> Bun: no, but the credit card will be.
2017-05-11 18:11:54 <kaniini_> :D
2017-05-11 18:12:17 <ncopa> sebumd: i will check
2017-05-11 18:12:39 <Unode> kaniini_: go watch http://www.imdb.com/title/tt3173594 it matches.
2017-05-11 18:12:48 <sebumd> ncopa, this link helped, but I'm not sure why I had to do it: https://forums.docker.com/t/docker-apk-package-for-alpine-linux-has-an-unresolved-dependency-to-libseccomp/9604/2 ("Or in one command..")
2017-05-11 18:13:34 <kaniini_> Unode: that seems awful
2017-05-11 18:13:46 <kaniini_> oh
2017-05-11 18:13:51 <kaniini_> ncopa is also not thinking too widely
2017-05-11 18:13:53 <Unode> it's a pretty shitty movie but the story line fits.
2017-05-11 18:14:04 <kaniini_> what if some alpine developer goes rogue
2017-05-11 18:14:17 <kaniini_> and pushes a package that has rm -rf /* in post-install
2017-05-11 18:14:52 <kaniini_> my point is
2017-05-11 18:14:54 <Bun> guess I'm gonna install my updates in a VM first..
2017-05-11 18:14:57 <kaniini_> at some point, using binary packages
2017-05-11 18:15:03 <kaniini_> incurs some sort of risk
2017-05-11 18:15:07 <ncopa> +1
2017-05-11 18:15:37 <ncopa> and you have to calculate the cost vs the benefit (or risk)
2017-05-11 18:15:54 <Unode> Well... using any distro out there incurs in risk :)
2017-05-11 18:16:01 <ncopa> exactly
2017-05-11 18:16:26 <ncopa> but if you use a distro that uses https only, then you are perfectly safe!
2017-05-11 18:16:26 <Xe> (i only really have https set up for my alpine packages because my setup makes it harder to not setup https than it is to setup https)
2017-05-11 18:16:27 <kaniini_> i think a malicious dev is more concerning than a malicious mirror admin
2017-05-11 18:16:41 <ncopa> kaniini_ because they can do more damage
2017-05-11 18:16:45 <kaniini_> now to be clear
2017-05-11 18:16:52 <kaniini_> it is very hard to become an alpine dev
2017-05-11 18:17:00 <kaniini_> it is a process that takes most people literally years
2017-05-11 18:17:16 <kaniini_> so the odds of that happening are hopefully quite low
2017-05-11 18:17:32 <kaniini_> but it's still more likely than a malicious mirror admin imo
2017-05-11 18:17:38 <kaniini_> because it's easier to do
2017-05-11 18:18:14 <kaniini_> a malicious package from a mirror admin has to have the right size and checksum in the APKINDEX, and the right signature itself
2017-05-11 18:18:30 <xentec> kaniini_: how would malicious mirror admin even work? The packages are signed by buildservers, aren't they?
2017-05-11 18:18:42 <kaniini_> or, alternatively, it has to have 0day exploit code that can break the decompressor (zlib)
2017-05-11 18:19:18 <kaniini_> xentec: in theory, if they could exploit zlib they could bypass the security in some theoretical case that seems not likely to be fixable
2017-05-11 18:19:46 <TBB> so, what does attacking via a mirror require... re-signing all packages using self-generated keys placed in a specially crafted alpine-keys package and a self-signed index (since you pretty much have to start the install with --allow-untrusted)=
2017-05-11 18:19:54 <TBB> ?
2017-05-11 18:20:07 <kaniini_> you dont have to start the install iwht --allow-untrusted
2017-05-11 18:20:08 <ncopa> re package sizes
2017-05-11 18:20:12 <ncopa> the size is in index
2017-05-11 18:20:16 <kaniini_> that's just what silly people do
2017-05-11 18:20:16 <ncopa> and i think apk uses that
2017-05-11 18:20:19 <kaniini_> it does
2017-05-11 18:20:28 <ncopa> so we could have a max size for index
2017-05-11 18:20:49 <TBB> silly people, or people unable for whatever reason to run the install on a platform other than Alpine
2017-05-11 18:20:56 <Xe> TBB: set up something like https://github.com/Xe/aports/blob/master/core/xeserv-keys/APKBUILD
2017-05-11 18:21:24 <kaniini_> TBB: they can download the keyring package itself
2017-05-11 18:21:42 <xentec> TBB: https://git.alpinelinux.org/cgit/aports/tree/main/alpine-keys
2017-05-11 18:21:51 <xentec> has even https in it :D
2017-05-11 18:22:19 <TBB> (of course those concerned with security will pre-check the keys used in any case, and those who don't can blame themselves)
2017-05-11 18:24:31 <TBB> I mean, you do check the signatures of the install images too, it's in no way different from installing from packages
2017-05-11 18:26:14 <TBB> Xe: naturally I do that in our environment :)
2017-05-11 18:29:28 <shodan45> how's everyone in alpine land?
2017-05-11 18:29:41 <shodan45> wait for it.... "cold!"
2017-05-11 18:29:42 <IcePic> tls-encrypted we're not.
2017-05-11 18:29:44 <IcePic> ;)
2017-05-11 18:29:59 <shodan45> get it? :P
2017-05-11 18:30:09 <kaniini> 
ACTION gets the hook

2017-05-11 18:30:15 <shodan45> 
ACTION bows

2017-05-11 18:30:27 <kaniini> 
ACTION removes shodan45 from the stage with said hook

2017-05-11 18:35:16 <xentec> ncopa: on edge without cache: (1/1) [APK unavailable, skipped] Reinstalling libblkid (2.28.2-r1)
2017-05-11 18:35:23 <xentec> I thought this was fixed?
2017-05-11 18:40:25 <ncopa> xentec got bigger issues. the backend for dl-cdn died
2017-05-11 18:40:39 <ncopa> it crashed, rebooted then died again
2017-05-11 18:40:54 <ncopa> we are working on it
2017-05-11 18:41:28 <xentec> I tought both issues were connected but ok.
2017-05-11 18:41:32 <xentec> hang in there!
2017-05-11 19:16:00 <Shiz> ncopa: can we at least put dl-cdn on another mirror in the meantime
2017-05-11 19:16:02 <Shiz> or did we do that already
2017-05-11 19:16:04 <Shiz> :p
2017-05-11 19:41:00 <ncopa> we did already
2017-05-11 19:41:05 <ncopa> should be working now
2017-05-11 22:55:16 <boojinks> Hey guys. Has anyone got any ideas on how to view the contents of my efivars?
2017-05-11 23:04:17 <xentec> boojinks: # mount -t efivarfs efivarfs <mountpoint>
2017-05-11 23:06:25 <boojinks> xentec: they're mounted but binary so cat just corrupts the terminal - was wondering if there was any easy tool to read them/anyone knows the encoding?
2017-05-11 23:06:50 <xentec> less?
2017-05-12 01:01:42 <luxio> o
2017-05-12 01:01:44 <luxio> o/
2017-05-12 01:12:18 <Shiz> heyo
2017-05-12 01:19:57 <luxio> I currently have zsh and ash installed, how do I remove zsh, install bash, and make bash my default shell?
2017-05-12 01:20:01 <luxio> Is there a wiki page on this?
2017-05-12 01:21:40 <scv> just remove and add the relevant packages? there's no chsh so i'd probably just edit passwd but there's likely a proper way to change the shell
2017-05-12 01:26:46 <luxio> i think I got it. brb logging out
2017-05-12 01:28:10 <luxio> Yep! It's working
2017-05-12 01:28:16 <luxio> thanks scv !!
2017-05-12 01:28:19 <scv> np
2017-05-12 03:43:47 <ryonaloli> i've been told that fortify-headers are incomplete and have perf issues compared to a true _FORTIFY_SOURCE=2 implementation. what is the extent of the incompleteness?
2017-05-12 03:44:04 <ryonaloli> and are there any plans to actually upstream improved _FORTIFY_SOURCE to musl?
2017-05-12 04:21:21 <nwmcsween> what perf issues?
2017-05-12 04:23:41 <ryonaloli> this is just something i was told. i am not sure what the perf issues are. i haven't looked into it deeply.
2017-05-12 04:24:23 <dalias> i haven't heard anything like that
2017-05-12 04:24:36 <dalias> it might be true but would need to be measured
2017-05-12 04:25:00 <dalias> re: =2, it's a really bad idea because it results in a nonconforming implementation
2017-05-12 04:25:11 <dalias> it will introduce DoS bugs into correct prograsm
2017-05-12 04:25:24 <dalias> and it's hard to know in advance which programs that will happen to
2017-05-12 04:25:26 <ryonaloli> well programs don't have to be compiled with =2
2017-05-12 04:25:57 <dalias> right but people don't tend to understand that and just throw =2 at things without knowing what it means
2017-05-12 04:26:17 <nwmcsween> I sort of doubt it would be slower unless glibc has some chummy stuff going on with gcc
2017-05-12 04:26:36 <nwmcsween> (some sort of builtin)
2017-05-12 04:26:56 <dalias> while i can't control what alpine does, hardening hacks that break correct programs by violating interface contracts aren't welcome upstream in musl
2017-05-12 04:27:16 <ryonaloli> that's scary :/
2017-05-12 04:30:16 <ryonaloli> a current list of important security features which are missing from musl which i need to implement currently are fn ptr protection (whether xor mangling, PROT_READ for the fn ptrs, or both, for things like pthread_atform, atexit, at_quick_exit, C++11 local dtors), setjmp protection, cross-dso cfi support and safestack support, thread stack randomization, a hardened allocator (a really hardened one
2017-05-12 04:30:22 <ryonaloli> , with out of line metadata, etc), _FORTIFY_SOURCE=2 or improved fortify-headers, and possibly library load order randomization, though that's not as important.
2017-05-12 04:31:02 <ryonaloli> currently bionic has all of those to the best of my understanding, which makes it the most secure libc, but it's targeted for arm and android platforms in particular, so it's not viable.
2017-05-12 04:31:20 <ryonaloli> glibc is huge and a real pain, so it's really only musl where implementing any of those is possible.
2017-05-12 04:33:17 <nwmcsween> selfrando iirc does func randomization and runtime
2017-05-12 04:33:53 <ryonaloli> idk much about selfrando. does it require libc support like cross-dso cfi?
2017-05-12 04:34:30 <ryonaloli> (regardless, apparently there are many simple programs it can't even compile with, so it's out of the question for now until it's better understood)
2017-05-12 04:37:51 <nwmcsween> how would you use PROT_READ for fps?
2017-05-12 04:40:51 <nwmcsween> also wasn't xoring fn ptrs a bad form of sec?
2017-05-12 04:42:29 <ryonaloli> xor mangling is the fastest and avoids a race condition around the PROT_READ method that occurs with atexit, but it can infoleak.
2017-05-12 04:43:12 <ryonaloli> PROT_READ is slower and more complicated and avoids the issue of having a leakable cookie, but there's a race condition for atexit-related functions. having a mix of the two is ideal, but xor mangling or the PROT_READ method alone is still not bad.
2017-05-12 04:43:38 <ryonaloli> i wouldn't be surprised if openbsd (which uses the PROT_READ method) has solved the race issue, though.
2017-05-12 05:00:15 <dalias> ryonaloli, "most secure libc" is a joke
2017-05-12 05:00:30 <dalias> hardening features are one small aspect of security
2017-05-12 05:00:57 <TBB> it's one layer, that's what it is. nothing less, nothing more
2017-05-12 05:01:12 <ryonaloli> hardening features provide a strong scaffold, but of course it's just one aspect.
2017-05-12 05:01:38 <ryonaloli> CFI makes ROP extremely difficult, but it won't prevent already executing malware from running, you need a MAC for that.
2017-05-12 05:02:03 <dalias> usually hardening features just make significantly more work for an attacker
2017-05-12 05:02:07 <dalias> sometimes they prevent attacks
2017-05-12 05:02:37 <dalias> but the case where they help is where you already have a severe security bug
2017-05-12 05:02:37 <ryonaloli> indeed
2017-05-12 05:03:03 <dalias> avoiding having those bugs in the first place is much more important
2017-05-12 05:03:04 <ryonaloli> and a libc is used for effectively all programs on a computer, many of which are going to have security bugs.
2017-05-12 05:03:21 <ryonaloli> "just don't have bugs in the first place" is, of course, the antithesis of hardening.
2017-05-12 05:03:23 <dalias> yes but most of them are going to be exploitable regardless of what libc does
2017-05-12 05:03:39 <dalias> that doesn't mean don't harden
2017-05-12 05:03:52 <ryonaloli> the libc still plays an important factor, because the lack of support for cross-dso cfi for example makes rop much easier.
2017-05-12 05:03:56 <dalias> but it does mean hardening that increases complexity is a serious tradeoff not a clear win
2017-05-12 05:04:15 <ryonaloli> oh yeah, i don't think that extreme increases in complexity for a small benefit are worth it.
2017-05-12 05:04:25 <ryonaloli> because it risks introducing new bugs (e.g. KASLR, VMAP_STACK, etc)
2017-05-12 05:05:17 <dalias> btw re: hardened allocator it's interesting that ppl consider out-of-line more hardened
2017-05-12 05:06:03 <ryonaloli> well that alone doesn't harden.
2017-05-12 05:06:11 <dalias> inline-but-validated seems stronger in many ways; it helps detect overflows that would go uncaught with no inline metadata
2017-05-12 05:06:11 <ryonaloli> look at the copperhead bionic forkl.
2017-05-12 05:06:12 <ryonaloli> *fork
2017-05-12 05:06:34 <dalias> i'll probably go for a mix in the next-gen malloc for musl
2017-05-12 05:07:14 <dalias> minor validatable info inline with the important data that would be dangerous if corrupted kept out-of-line
2017-05-12 05:08:10 <ryonaloli> would you accept patches for cross-dso cfi support?
2017-05-12 05:08:27 <ryonaloli> it protects fn ptrs outside of the libc as well.
2017-05-12 05:09:16 <dalias> not sure. i haven't seen what's involved in it.
2017-05-12 05:09:56 <ryonaloli> https://android-review.googlesource.com/#/c/246837/ https://android-review.googlesource.com/#/c/326011/ https://android-review.googlesource.com/#/c/248499/ https://android-review.googlesource.com/#/c/170988/ and https://android-review.googlesource.com/#/c/304676/ is what bionic did for cross-dso cfi support (and safestack)
2017-05-12 05:10:04 <ryonaloli> though they did a lot more
2017-05-12 05:10:33 <ryonaloli> so it can be made simpler. most of that code is test cases for android-specific stuff.
2017-05-12 05:11:01 <ryonaloli> as for xor mangling/PROT_READ fn ptrs, that should be easy (not much complexity there) and has a good security improvement.
2017-05-12 05:11:13 <ryonaloli> probably something i can add myself. i'm gonna add it to a musl fork anyhow, so i can work on upstreaming it.
2017-05-12 05:11:29 <ryonaloli> though cross-dso cfi support is currently out of my league.
2017-05-12 05:13:00 <dalias> in general i'm very skeptical of anti-rop stuff though; it's usually huge complexity cost relative to actual protection it provides
2017-05-12 05:13:14 <dalias> and the good stuff requires incompatible ABI
2017-05-12 05:13:20 <ryonaloli> the anti-rop stuff is not part of libc. it's just support that the libc needs.
2017-05-12 05:13:31 <ryonaloli> the anti-rop stuff is done by the compiler if applications want it.
2017-05-12 05:13:55 <ryonaloli> and the complexity is pretty low since it's only forward edge. also 1% perf hit.
2017-05-12 05:15:05 <dalias> this kind of thing == huge complexity: https://android-review.googlesource.com/#/c/304676/
2017-05-12 05:15:44 <dalias> and it introduces bugs almost surely..
2017-05-12 05:16:34 <ryonaloli> which one?
2017-05-12 05:17:01 <ryonaloli> sigaction.cpp?
2017-05-12 05:17:11 <dalias> yeah
2017-05-12 05:17:26 <dalias> wrapping signal handlers like this is a known-super-difficult problem with lots of nasty corner cases
2017-05-12 05:17:28 <ryonaloli> the complexity there does not seem that huge
2017-05-12 05:17:32 <dalias> glibc considered doing it for other reasons
2017-05-12 05:17:46 <ryonaloli> though i could ask bionic devs if they've had any problems or what their solutions were
2017-05-12 05:17:47 <dalias> and dropped that consideration after realizing how difficut it was to get right
2017-05-12 05:18:03 <dalias> they haven't had any problems because they're not aware of the problems
2017-05-12 05:18:07 <dalias> :)
2017-05-12 05:18:18 <dalias> same as how dietlibc has not had any problems :)
2017-05-12 05:18:43 <dalias> complexity does not mean the code as written is complex
2017-05-12 05:19:07 <dalias> it means there are complex hidden interactions with other things that are difficult to reason about or prove correct
2017-05-12 05:19:21 <dalias> and that the code will grow much more complex as people realize that and try to fix it to adapt :)
2017-05-12 05:19:23 <ryonaloli> 
ACTION asking to see how bionic delt with it

2017-05-12 05:19:49 <TBB> just kill off C, finally
2017-05-12 05:20:21 <dalias> just stop using low-quality software written in C without proper sandboxing
2017-05-12 05:20:23 <ryonaloli> oh also
2017-05-12 05:20:25 <ryonaloli> dalias: that's for safestack
2017-05-12 05:20:28 <ryonaloli> not cross-dso cfi
2017-05-12 05:20:30 <ryonaloli> it looks like
2017-05-12 05:20:31 <dalias> *nod*
2017-05-12 05:21:07 <ryonaloli> so that would likely not even be needed for cross-dso cfi support (though safestack support that works for dsos is also very important)
2017-05-12 05:21:09 <dalias> it's the same issue as in the 90s with bind, wuftpd, etc.
2017-05-12 05:21:41 <dalias> it's not the people running vsftpd or running less-secure junk in a nobody chroot who are getting rooted
2017-05-12 05:22:10 <dalias> it's the people running known-utter-crap software with permissions to do everything important
2017-05-12 05:22:47 <ryonaloli> people with secure setups also get rooted. they just tend to need to get targeted (more often)
2017-05-12 05:24:36 <ryonaloli> so what i gather is that cross-dso cfi does not look *too* complex, safestack, at the moment, looks too complex due to requiring wrapping signal handlers in a way that cannot be proven correct. xor mangling/PROT_READ fn ptr protection is ok to upstream. _FORTIFY_SOURCE=2 is not good because it breaks programs that blindly try to use it.
2017-05-12 05:24:45 <ryonaloli> what about thread stack randomization?
2017-05-12 05:25:08 <ryonaloli> that's another thing i plan to implement in my own musl fork, so i can try to upstream that as well.
2017-05-12 05:25:13 <ryonaloli> it should also be simple.
2017-05-12 05:25:45 <ryonaloli> will improve security against remote and scriptless exploits, which are common and getting more common as the complexity of formats grow.
2017-05-12 05:30:33 <ryonaloli> dalias: and do you think using a combination of xor mangling and PROT_READ is best? that's my opinion, and the opinion of some other folk i have talked to, as it would both prevent the race issues and the issue of a leakable cookie.
2017-05-12 05:31:41 <dalias> what would thread stack randomization do?
2017-05-12 05:31:48 <dalias> just random offset for initial sp?
2017-05-12 05:32:30 <dalias> done naively that breaks the ability to run with small stacks in an unpredictable/unreproducible way
2017-05-12 05:32:55 <dalias> (apps that are close to the limit will randomly stack-overflow depending on the offset)
2017-05-12 05:33:16 <ryonaloli> dalias: randomize more than just the lower bits, which the kernel can already do (for the main thread stack)
2017-05-12 05:33:29 <dalias> ?
2017-05-12 05:33:41 <dalias> the upper bits are already randomized as much as ASLR gives you
2017-05-12 05:34:24 <dalias> i'm not sure what you mean by PROT_READ
2017-05-12 05:34:46 <dalias> most interesting function pointers are not in places where you can make the whole page read-only
2017-05-12 05:43:42 <ryonaloli> (resending because i pinged out) dalias: randomizes more than the lower bits, which the kernel can already do (for the main thread stack). but, looking through my logs at least, it looks like the implementation is non-page aligned randomization of the secondary stacks as well. copperhead bionic (and i think openbsd's libc?) already do this correctly, so no need to find a new way to reimplement it,
2017-05-12 05:43:48 <ryonaloli> potentially naively.
2017-05-12 05:43:58 <ryonaloli> and i missed anything you said after "(apps that are close to the limit will ..."
2017-05-12 06:42:34 <avih> dalias: if i read the correct standard, it says "The macro NAN is defined if and only if the implementation supports quiet NaNs for the float type. It expands to a constant expression of type float representing a quiet NaN.". however, musl seems to define NAN as (0.0f/0.0f) if it's not __GNUC__ > 3.03.  should that definition be allowed in a constant? tcc complains about division by zero in a constant. tcc does have __nan__ which works correctly if used
2017-05-12 06:42:34 <avih> . is there a way to communicate this to musl headers?
2017-05-12 06:54:16 <ocb> hello
2017-05-12 06:58:12 <Shiz> avih: then tcc's analyzer is broken
2017-05-12 06:58:22 <Shiz> division by zero is perfectly valid for floating point
2017-05-12 06:58:38 <avih> also in a constant?
2017-05-12 06:59:11 <avih> the analyzer is not broken though. but it interprets it incorrectly if it's allowerd
2017-05-12 07:00:19 <avih> i'm trying to figure out where the solution is. could be tcc, or somehow communicate the support for NAN.
2017-05-12 07:04:19 <Shiz> constant or not doesn't really change anything
2017-05-12 07:04:27 <ocb> I'm kind of new to linux, have setup 3 alpine linux apache+php in docker container few weeks ago. Have setup another one today but can't seem to get mod_rewrite work. Enabled the module in httpd.conf, set AllowOverride All for /web/html dir, rebooted docker, mod_rewrite.so corresponds to path but rewrite does not work and haven't got it loaded in phpinfo(). Any suggestion what to check, as mod_rewrite
2017-05-12 07:04:29 <ocb> works on other 3 alpine linux dockers created from same template. Also did diff check of httpd.conf and everything corresponds to other docker containers except the ServerName of course.
2017-05-12 07:04:40 <Shiz> more importantly, it shouldn't warn on system headers avih
2017-05-12 07:05:25 <avih> Shiz: not sure i follow. there was no warning involved. tcc just fails with "division by zero in a constant"
2017-05-12 07:05:42 <Shiz> oh, then it's even worse
2017-05-12 07:06:01 <avih> ok, that's why i'm asking :) to understand where the issue is
2017-05-12 07:07:38 <Shiz> are you using tcc or the tinycc fork?
2017-05-12 07:07:55 <avih> Shiz: it's not tcc which breaks. it just considers the source invalid.
2017-05-12 07:08:04 <Shiz> well, that is its breakage
2017-05-12 07:08:06 <Shiz> :P
2017-05-12 07:08:26 <avih> i started by asking if it should be allowed in a constant expression :)
2017-05-12 07:08:42 <avih> if i knew that, i'd know where the issue is :)
2017-05-12 07:08:52 <Shiz> http://repo.or.cz/w/tinycc.git btw this is the fork
2017-05-12 07:08:55 <Shiz> that i know of
2017-05-12 07:09:46 <avih> Shiz: i don't think there's more than one tcc/tinycc. it's the one started by fabrice bellard, now hosted on http://repo.or.cz/w/tinycc.git , where the main dev branch is "mob", which is relatively active
2017-05-12 07:13:19 <avih> and there have been talks about releasing 0.9.27 for some months now, though fixes still go in. most recently - musl related.
2017-05-12 07:13:23 <Shiz> https://txt.shiz.me/YzllOWMwMW.txt
2017-05-12 07:13:25 <Shiz> :P
2017-05-12 07:13:43 <Shiz> it looks like it was mindlessly copied from the integer generation code
2017-05-12 07:13:48 <Shiz> where division by zero is of course invalid
2017-05-12 07:14:56 <Shiz> constant vs non-constant is not relevant as it just follows IEEE 754 semantics
2017-05-12 07:15:01 <Shiz> afaik
2017-05-12 07:15:54 <avih> Shiz: could you point me to where the c99 standard says or implies that 0.0f/0.0f should be allowed in a constant?
2017-05-12 07:16:48 <avih> (i was still reading through it when you started replying and interrupted me ;) )
2017-05-12 07:17:19 <Shiz> http://www.open-std.org/jtc1/sc22/wg14/www/docs/n1256.pdf
2017-05-12 07:17:21 <Shiz> F7.4
2017-05-12 07:17:35 <Shiz> the specific code example even includes division by floating point zero
2017-05-12 07:17:48 <Shiz> (specifying run-time exceptions when FENV_ACCESS is on, but it proves the source code is correct)
2017-05-12 07:18:03 <avih> "7.4 Character handling <ctype.h>" ??
2017-05-12 07:18:28 <Shiz> F7.4
2017-05-12 07:18:30 <Shiz> not 7.4
2017-05-12 07:18:46 <Shiz> furthermore, from F3:
2017-05-12 07:18:51 <Shiz> "— The +, −, *, and / operators provide the IEC 60559 add, subtract, multiply, and divide operations"
2017-05-12 07:19:02 <Shiz> IEC 60559 being of course IEEE 754 and defining floating point division by zero as valid
2017-05-12 07:19:34 <avih> i don't think i can find "F7.4" in the pdf i have.
2017-05-12 07:20:07 <Shiz> try F.7.4
2017-05-12 07:20:20 <Shiz> it's on page 449
2017-05-12 07:20:36 <avih> found it. (good thing you quoted :p )
2017-05-12 07:21:13 <Shiz> it seems like the tcc error is just from copying the integer constant propagation code
2017-05-12 07:21:16 <Shiz> for floating point
2017-05-12 07:21:21 <Shiz> and not removing the 0 case
2017-05-12 07:21:47 <avih> yeah, possibly. fixing isn't hard if one knows where the issue is ;)
2017-05-12 07:22:06 <avih> and i wasn't sure what should be supported. thanks :)
2017-05-12 07:22:16 <Shiz> just gave you a patch even
2017-05-12 07:22:26 <avih> push it yourself :)
2017-05-12 07:22:35 <avih> no registration required :)
2017-05-12 07:25:54 <Shiz> i'm busy ;p
2017-05-12 07:26:02 <avih> of course you are :)
2017-05-12 07:26:49 <avih> it should probably come with a test though, to make sure it fails for integers and works for floats
2017-05-12 07:36:49 <avih> Shiz: also, your patch doesn't fix it. it makes instead show "error: initializer element is not constant"
2017-05-12 07:37:36 <avih> it should be using it's __nan__ there instead
2017-05-12 07:37:40 <avih> its*
2017-05-12 07:37:54 <Shiz> it shouldn't
2017-05-12 07:38:14 <Shiz> it should be left to be generated at runtime
2017-05-12 07:38:30 <Shiz> and only be statically generated when it has to be
2017-05-12 07:38:31 <avih> as a constant expression??
2017-05-12 07:38:32 <Shiz> see F.7.4
2017-05-12 07:38:53 <Shiz> it specifically mentions that if used as part of a static initialiser expression it's fine to be constant-propagated
2017-05-12 07:39:00 <Shiz> however, when not, it must be subject to FENV_ACCESS requirements
2017-05-12 07:39:12 <Shiz> which can mean throwing an exception at runtime
2017-05-12 07:39:26 <avih> "other than one in an initializer for an object that has static storage duration"
2017-05-12 07:39:42 <avih> which is my initial use case. i'm adding now.
2017-05-12 07:40:58 <avih> specifically: float w[] = { 0.0/0.0 }; // raises an exception
2017-05-12 07:41:28 <avih> and that's the exact case where the source code uses NAN, and musl replaces it with 0.0f/0.0f
2017-05-12 07:42:16 <avih> hence, so far i still think it should be using its __nan__ there
2017-05-12 07:47:16 <avih> it also has a comment "        /* NOTE: we only do constant propagation if finite number (not NaN or infinity) (ANSI spec) */
2017-05-12 07:47:36 <avih> so it seems rather intentional
2017-05-12 07:48:02 <avih> (could of course be erroneously so)
2017-05-12 07:48:38 <avih> also, it might have changed in c99
2017-05-12 10:30:13 <russkel> hey all, question I couldn't find an answer for: why is it that a standard disk install is taking up more than 500mb? I thought it was supposed to be ~130mb install?
2017-05-12 10:40:18 <Shiz> russkel: that doesn't seem like it should be right
2017-05-12 10:43:07 <russkel> Shiz: it's running in virtual box, I set up a 500mb HDD and simply booted the standard iso, did setup-alpine and it failed install
2017-05-12 10:43:29 <russkel> just created a 2gb hdd and the install has worked
2017-05-12 10:43:31 <Shiz> it might be temporary files
2017-05-12 10:43:33 <Shiz> ?
2017-05-12 10:43:51 <russkel> potentially, RAM is limited to 256MB if that makes a difference
2017-05-12 11:15:27 <klogd> Anyone had any weird permission issues when running Alpine as a docker host? Have a fresh install of 3.5.2 running docker 17.04.0-ce (installed via apk). Trying to run a very simple container I've run on lots of other computers and I'm getting "murmur.x86: mprotect: Permission denied (13)"
2017-05-12 11:25:06 <Shiz> klogd: that makes sense
2017-05-12 11:25:41 <Shiz> alpine ships with a hardened kernel, but if your containers aren't equipped for that (e.g. ubuntu-based), they don't have the required exemption markings on binaries to indicate that it can do certain otherwise naughty stuff
2017-05-12 11:25:51 <Shiz> all alpine binaries ship with those markings of course where needed
2017-05-12 11:25:56 <Shiz> but e.g. ubuntu and debian do not apply them
2017-05-12 11:36:48 <klogd> Shiz: I've tried 3 containers, the one based on ubuntu:14.04 works, but jessie-slim and busybox. From what you said I was expecting the ubuntu one to be failing as well?
2017-05-12 11:38:39 <klogd> The ubuntu based one is the only one making a dedicated user account for the program, the other two run as root, if that makes any difference
2017-05-12 11:43:45 <Shiz> it depends on the binaries inside of the container
2017-05-12 11:59:46 <klogd> ah, I see. I ended up cloning the mumble server and changing it to alpine:latest and then everything is working a lot better. Thanks for the info
2017-05-12 13:24:24 <Xanza> I'm trying to install and run Alpine from a USB drive via VMDK image which uses the USB drive as a virtual disk. I've done it successfully in the past, but the installer seems to hang here every time: https://a.safe.moe/dsjYy.png Any advice or guidance?
2017-05-12 18:57:18 <mauli> after trying to debug but failing woud anyone be able to help me with alpine-iso: am trying to make with APKOVL, it is set, but the make (make -d) does not seem to use it, anything I am missing ?
2017-05-12 19:15:38 <clandmeter> alpine-iso had been superseded
2017-05-12 19:15:57 <clandmeter> Check root of aports
2017-05-12 19:17:35 <mauli> ah okay, the wiki referenzed it, thx
2017-05-12 19:21:10 <TemptorSent> Uhoh, who was looking at alpine-iso?
2017-05-12 19:22:20 <TemptorSent> I went down that road before... then found out it was out of date for years already.
2017-05-12 19:26:56 <TemptorSent> The current mkimage is about to be superseded as well.
2017-05-12 21:11:49 <mauli> so what to use to build an image ?
2017-05-12 21:12:48 <Shiz> mauli: scripts/mkimage.sh in the aports repo
2017-05-12 21:13:09 <Shiz> the dependencies are commented in the first few lines of the script
2017-05-12 21:28:03 <mauli> hm, weird am getting ERROR: unsatisfiable constraints ( alpine-base (missing), linux-firmware ...)
2017-05-12 21:29:51 <TemptorSent> Error while doing what?
2017-05-12 21:29:54 <Shiz> does it also say '>>> WARNING: no repository set' perhaps? ;p
2017-05-12 21:30:53 <Shiz> it is intended to be pointed to a one (or more repos) that have aports build
2017-05-12 21:30:58 <Shiz> not sure if fully built is necessary
2017-05-12 21:31:12 <mauli> damn ,yes ... warnings should not be ignored
2017-05-12 21:32:12 <Shiz> e.g. to build the latest edge/main
2017-05-12 21:32:14 <Shiz> $ ./scripts/mkimage.sh --repository http://nl.alpinelinux.org/alpine/edge/main
2017-05-12 21:32:22 <Shiz> and you can supply extra repositories through --extra-repository
2017-05-12 21:32:30 <Shiz> e.g. your local ones that have your own packages you want to add
2017-05-12 21:33:28 <TemptorSent> Also, make sure you add the option to include host keys, otherwise you'll get an unusable image.
2017-05-12 21:33:58 <mauli> thought it might be using system repo per default, my mistake
2017-05-12 21:33:58 <Xe> TemptorSent: it'll be useful, just oneshot :D
2017-05-12 21:34:32 <TemptorSent> Xe: It won't boot because the repo can't be verified.
2017-05-12 21:34:44 <Xe> oh, gg
2017-05-12 21:35:04 <TemptorSent> mauli: Yeah, you have to be explicit.
2017-05-12 21:35:47 <TemptorSent> mauli: What are you trying to do with the image? The existing mkimage.sh is rather limited.
2017-05-12 21:35:58 <mauli> am trying to setup an image with working live from scratch yea, alpine-iso had the possibility to use lbu file
2017-05-12 21:37:17 <Shiz> you can still do that
2017-05-12 21:37:36 <TemptorSent> mauli: Okay, you're getting out of the realm of what the existing mkimage can do happily. I have a complete rewrite that's waiting on a couple changes in APK to make the switch.
2017-05-12 21:39:14 <Shiz> mauli: add a profile in mkimg.yourname.sh and set apkovl=
2017-05-12 21:40:04 <TemptorSent> see https://github.com/TemptorSent/aports/tree/mkimage-refactor-scripts/scripts for details.
2017-05-12 21:40:20 <Shiz> more specifically: mkdir ~/.mkimage, edit ~/.mkimage/mkimg.whatever.sh, add something like profile_mauli() { profile_standard; apkovl="my-apkovl-generation-script.sh" }
2017-05-12 21:40:26 <Shiz> then call mkimage.sh with --profile mauli
2017-05-12 21:40:33 <Shiz> and have that script existing
2017-05-12 21:40:43 <mauli> already setup a profile^^, thx
2017-05-12 21:43:46 <flazz> upgrading from 3.4 to 3.5 seems to cause curl to not get some intermediate certs, anyone have any advice?
2017-05-12 21:51:36 <flazz> but funny enough openssl seems to verify the whole chain
2017-05-13 09:22:47 <TML> I have created a new zfs pool on my Alpine Linux box, but it disappears every time I boot. How do I make it persist?
2017-05-13 15:39:14 <black_ant> Hi guys anyone knows why I am getting "required by: world[openjdk8]" when I do "apk add openjdk8"?
2017-05-13 15:39:50 <Shiz> it presumably says more than just that
2017-05-13 15:40:43 <black_ant> full error -> https://pastebin.com/UEfCbL6e
2017-05-13 15:41:10 <Shiz> openjdk8 (missing) just means the package you're trying to add does not exist
2017-05-13 15:41:28 <Shiz> did you add the community repo to your /etc/apk/repositories?
2017-05-13 15:41:33 <TML> I have created a new zfs pool on my Alpine Linux box, but it disappears every time I boot. How do I make it persist?
2017-05-13 15:42:58 <black_ant> Shiz: you mean this one? -> https://pkgs.alpinelinux.org/package/v3.5/community/x86_64/openjdk8-jre-base
2017-05-13 15:43:19 <Shiz> I mean that if openjdk8 is missing you likely don't have the community repo in your /etc/apk/repositories
2017-05-13 15:43:31 <Shiz> http://dl-cdn.alpinelinux.org/alpine/v3.5/community that is
2017-05-13 15:44:01 <Shiz> add it, apk update, and try again
2017-05-13 15:46:21 <black_ant> Shiz: it worked like a magic - dude you're the man ;) I owe a beer.
2017-05-13 15:47:30 <Shiz> :p
2017-05-13 17:51:45 <agb> have any decisions been made about the future state of alpine grsec-patched kernels given last month's discontinuation of the grsec testing patchset?
2017-05-13 20:17:30 <Xanza> Does `@reboot` work with alpine? I can't seem to get it to work correctly with `root`.
2017-05-13 20:55:09 <nidan_> agb: +1
2017-05-14 21:14:51 <avih> ncopa: i didn't get to test the minimal x fonts thing, sorry. i guess liberation it is then..
2017-05-14 22:57:07 <mitchty> random question, is anyone running jenkins as an ssh slave on alpine linux via openjdk? seems like jenkins doesn't run on openjdk at all but just wondering if its just the apk I've picked or not
2017-05-14 23:07:08 <agb> mitchty: this isn't super helpful, but I can confirm jenkins running fine under openjdk 7 and 8 under debian stable.
2017-05-14 23:07:48 <mitchty> agb: out of curiosity what version of jenkins? i'm on 2.5.7 and it looks like 2.5.4 dropped java 7 support so wondering if it might be related
2017-05-14 23:10:08 <agb> uhhh, the version that I previously had running under openjdk 7 was whatever the last LTS was before 2.0.  maybe 1.651.x?
2017-05-14 23:13:19 <mitchty> ok np, i'm trying to bisect whats wrong, so far negated ssh, dns, /etc/host related stuff, etc... and am down to jenkins version and java versions, slightly annoying as i've had this work in the past, hate the update treadmill
2017-05-15 05:25:41 <kaniini> agb: we will continue to maintain it for 3.6 period, we intend to work with KSPP and other initiatives for future
2017-05-15 11:40:42 <rivarun> it's nice to have found alpine. i'm sticking to gentoo on the desktop, but alpine seems great for my server
2017-05-15 14:22:00 <Kachel> Why does a added user get deleted after reboot?
2017-05-15 14:23:03 <Shiz> are you running from RAM?
2017-05-15 14:24:55 <Kachel> I'm using the default alpine image for the raspberry pi 2
2017-05-15 14:25:39 <clandmeter> Kachel: https://wiki.alpinelinux.org/wiki/Alpine_local_backup
2017-05-15 14:25:44 <Kachel> Running nano after lbu commit still works but not adding a user
2017-05-15 14:26:57 <pickfire> Kachel: What do you mean?
2017-05-15 14:27:00 <pickfire> I am sure it works.
2017-05-15 14:27:14 <pickfire> It works here as well but I use sys mode on rpi 2.
2017-05-15 14:27:39 <Kachel> Let me try it again
2017-05-15 14:28:38 <Kachel> [# adduser test]
2017-05-15 14:28:59 <Kachel> [lbu commit]
2017-05-15 14:29:12 <Kachel> [reboot]
2017-05-15 14:29:39 <Kachel> I managed to switch to swclock after install
2017-05-15 14:30:28 <Shiz> and the apkovl is saved to the right location?
2017-05-15 14:30:43 <Kachel> [vault0 login: test]
2017-05-15 14:31:06 <Kachel> [Password](blank)
2017-05-15 14:31:27 <Kachel> [login incorrect]
2017-05-15 14:31:57 <Kachel> Shiz I will check
2017-05-15 14:32:15 <Kachel> Logging into root works fine
2017-05-15 14:32:29 <IcePic> Kachel: and the test user doesn't exist when root checks?
2017-05-15 14:33:08 <Kachel> No folder in /home/
2017-05-15 14:33:09 <IcePic> (just being cautious here since you did test two things at the same time, something else could in theory have prevented test from logging in, like "never empty passwords" or so)
2017-05-15 14:33:43 <Kachel> I used valid passwords before
2017-05-15 14:34:02 <Kachel> Everzthing works normal before reboot
2017-05-15 14:34:13 <Kachel> *everything
2017-05-15 14:36:09 <Kachel> I found /media/mmcblk0p1/vault0.apkovl.tar.gz
2017-05-15 14:36:28 <Kachel> Is it in the right place?
2017-05-15 14:38:43 <Kachel> Running [lbu include -l] I see nothing
2017-05-15 17:26:27 <xet7> setup-xorg-base says "ERROR: unsatisfiable constraints". How can I fix it?
2017-05-15 20:37:57 <randomuser1452> Can you run virtualbox host on alpine musl?
2017-05-15 20:42:56 <untoreh> randomuser1452: nope
2017-05-15 20:43:10 <agb> kaniini: awesome, good to know that the distro already has a direction in mind regarding ongoing security protections.
2017-05-15 20:46:33 <randomuser1452> untoreh: do you know if virtualbox supports uclibc?
2017-05-15 20:48:15 <untoreh> randomuser1452: sry dunno but I doubt it
2017-05-15 21:19:00 <norii> randomuser1452: idk about vbox but would kernel/userspace containerization work for your needs? do you need full hvm?
2017-05-15 21:44:00 <BitL0G1c> http://www.tbyil.com/Banned_Toxic_Foods_Tony_Isaacs.htm
2017-05-15 21:45:57 <_ikke_> BitL0G1c: Why are you spamming that link?
2017-05-15 21:48:46 <BitL0G1c> _ikke - wrong window sorry (I use pidgin with tabs)
2017-05-15 21:58:44 <_ikke_> ok
2017-05-15 22:27:49 <trfl> randomuser1452, virtualbox on alpine will probably not happen
2017-05-15 22:27:54 <trfl> look into qemu as a replacement
2017-05-15 22:28:15 <trfl> fair warning, network configuration is fair bit more tricky...
2017-05-15 22:29:36 <randomuser1452> trfl: is it due to the lack of glibc or some other differences?
2017-05-15 22:30:06 <trfl> just a guess but I think it's due to requiring certain modules being built 32bit
2017-05-15 22:30:47 <trfl> similar to wine being mostly useless because it can only run 64bit windows applications
2017-05-15 22:35:43 <norii> trfl: you can set wine to a 32 bit prefix fyi
2017-05-15 22:36:23 <trfl> I tried that at some point but got a different error, can't recall what...
2017-05-15 22:36:23 <norii> idk about other distros but at least with arch the 64bit is just the default
2017-05-15 22:36:32 <trfl> now you got me curious, gonna boot up my laptop and check :p
2017-05-15 22:37:16 <norii> its possible you were almost there and had a common windows lib you needed to override. hit up in #wine or #arch they might be able to help you
2017-05-15 22:37:29 <norii> #archlinux rather
2017-05-15 22:40:17 <trfl> ...that's strange, the wine package in 3.3 and 3.4 provides /usr/bin/wine but 3.5 and edge does not
2017-05-15 22:40:55 <TBB> I haven't looked at wine in a while but I think it's just named wine64
2017-05-15 22:41:18 <TBB> and no, it won't work with a 32-bit prefix
2017-05-15 22:41:43 <trfl> ah yep you're right, and that was unfortunately my previous experience with it
2017-05-15 22:43:01 <TBB> and installing 32-bit wine next to it doesn't work either because Alpine (for a good reason) doesn't do multilib IIRC
2017-05-15 22:45:57 <TBB> however... I haven't tried this but a 32-bit chroot just might be capable of doing the trick
2017-05-16 11:49:04 <amosbird> hi
2017-05-16 11:49:15 <amosbird> how can I install tup in alpine?
2017-05-16 11:49:23 <amosbird> is there a existing repo containing tup?
2017-05-16 11:55:20 <_ikke_> amosbird: https://pkgs.alpinelinux.org/packages?name=tup&branch=&repo=&arch=&maintainer=
2017-05-16 12:41:11 <k63ZXXguczqE> maybe it would make sense to have a faq link in the topic to the questions #is there a pkg/where is the pkg/what does "required by [world] mean"#
2017-05-16 12:45:41 <k63ZXXguczqE> huh, actually none of those 3 questions seem to be covered in that faq
2017-05-16 12:46:06 <k63ZXXguczqE> while subjectively they have a frequency of at least 1/day
2017-05-16 12:52:21 <k63ZXXguczqE> https://wiki.alpinelinux.org/wiki/Alpine_Linux:FAQ#What_does_.22required_by:_world.5B.24pkgname.5D.22_mean.3F
2017-05-16 12:57:25 <k63ZXXguczqE> https://wiki.alpinelinux.org/wiki/Alpine_Linux:FAQ#How_can_i_find_out_if_a_certain_package_exists_in_alpine.3F
2017-05-16 12:57:51 <k63ZXXguczqE> i think those two should cover 99% of all questions here in the chan
2017-05-16 15:16:08 <Kachel> I get the "We trust you have received the usual lecture from the local System Administrator..."-message every time when running sudo after reboot
2017-05-16 15:17:00 <Kachel> which directories should be in the lbu list when adding a user with sudo priviliges?
2017-05-16 15:19:57 <feuerteufel> Kachel: Hello, are you still trying to use a user named "test"?
2017-05-16 15:20:21 <Kachel> yes
2017-05-16 15:20:36 <Kachel> but under a differrent name
2017-05-16 15:21:04 <Kachel> I've added /home/ and /etc/sudoers to the lbu list
2017-05-16 15:21:05 <feuerteufel> You know that "test ist a keyword in Linux based OS
2017-05-16 15:21:34 <Kachel> I didn't literally use "test" as the username
2017-05-16 15:22:04 <scv> regardless of that it would work fine with 'test' as a username
2017-05-16 15:23:37 <Kachel> I anyway used something else as stated above
2017-05-16 15:24:27 <Kachel> but are there any directorys that needed to be added so that sudo doesn't make a first-run on every reboot?
2017-05-16 15:24:47 <scv> i believe it is in /var/db/sudo
2017-05-16 15:26:14 <Kachel> There is only a "lectured"-file in that directory
2017-05-16 15:29:00 <Kachel> And the first-run message is gone after reboot when adding it to lbu
2017-05-16 15:32:03 <scv> that's a folder
2017-05-16 15:32:08 <scv> it will have files for each user inside
2017-05-16 15:32:12 <EFknockr> Boop Boop bidoop!
2017-05-16 15:32:13 <EFknockr> m355 w17h 7h3 b357
2017-05-16 15:32:14 <EFknockr> d13 l1k3 7h3 r357!
2017-05-16 15:32:14 <EFknockr> https://skeax.ninja/
2017-05-16 15:32:15 <EFknockr> <3
2017-05-16 15:32:15 <scv> nope
2017-05-16 15:32:16 <EFknockr> 
DCC SEND " wvkekpglxtbaewspgdcagfqkybs bcqqpacnmndlenddsrneftgodkwkofkprxnnoj vukmabnnmhrkysqzlsanjjyitdvbgpeaiktgvxszudrjipjjxtkdbovndebhmqdpln

2017-05-16 15:32:16 <EFknockr> flazz1 ogres Kachel mortis304 t0mmy ahrs cyteen rxc fabled Emperor_Earth_ blueness xentec kunev fcolista farosas Kooda[b] gromero nikolaosk Skele lesion jomat thunfisch czart avih ^7heo __number5__ MuffinMedic Keverw Bureaucat royger jlyo scv greguu mattk tmh1999 s33se_ BitL0G1c andypost
2017-05-16 15:32:17 <EFknockr> sparklyballs rivarun CcxWrk untoreh dikaio mmlb norii mitchty k0nsl kidneb Fishfish0001 johansglock triple systmkor_ ageis JStoker is_null IcePic ghavil hecliunyx sagebind ScrumpyJack Metacity TBB nsz mosez Kruge marcelius_ SirCmpwn codex Graypup_ Amplificator rotcpy bontibon algitbot telling
2017-05-16 15:32:17 <EFknockr> grugly iron_houzi ddollar Sandlayth vifino darkfader dlewen chamunks nwmcsween coredumb qrwteyrutiy feepo odc Elizabeth Ganwell nightmared mitemite iamthemcmaster nshp reda Klowner saarg chris| xmux geekblogtv squaremo asie shodan45 programmerq systo hiro Janhouse ammunta wycats EnTeQuAk Chloe
2017-05-16 15:32:18 <EFknockr> sigtrm nbastin ryanlelek asonge jcp___ zoidbergwill flyinprogrammer dalias robogoat pmcg trn StarWarsFan shansen goberle_ Wayward_One thebadshepperd nixdork rymax99_ mpapec Antarez hadret haarts dbarrett lonix nmeum colstrom saintdev grepory littleli Mo0O mepholic jcloud roolebo Peasant65 moul
2017-05-16 15:32:19 <EFknockr> amosbird black_rez ericnoan irclogger_com bfritz TML leah2 jailbox das_ofce skee mauli YoursTruly radhus tg sigjuice James_T manacit_ stwa tdtrask skjoldr Spydemon TomJepp firstlast psychi[m] tobias1 hl ganlub dhole[m] julius_ ovf rafalcpp zopsi clandmeter ncopa tru_tru stateless peterrus z1mme
2017-05-16 15:32:20 <EFknockr> hanez FierceDeityLink duncaen plow xsteadfastx k63ZXXguczqE andor2007 mbentley Nycatelos vaelen cartwright Bun alias__ joshwget Unode frew TemptorSent InAnimaTe Tritlo aemadrid kaniini_ sebumd arenstar switchy ryonaloli nepochal rnalrd afics atomi felixsanz Diftraku hackerhercules madknight
2017-05-16 15:32:20 <scv> lol
2017-05-16 15:32:23 <scv> wow
2017-05-16 15:32:27 <tmh1999> lol
2017-05-16 15:32:33 <scv> the weechat bug?
2017-05-16 15:33:10 <Kachel> what did I miss?
2017-05-16 15:33:25 <tmh1999> a bullet
2017-05-16 15:33:28 <scv> Kachel: it's a folder
2017-05-16 15:33:31 <dbarrett> 
ACTION goes back to idling

2017-05-16 15:33:33 <scv> and there's a file for each user inside
2017-05-16 15:34:39 <Kachel> do you mean the "test"-user in the lectured folder?
2017-05-16 15:34:48 <scv> there should be
2017-05-16 15:34:56 <Kachel> I saw it
2017-05-16 15:35:51 <Sandlayth> alright
2017-05-16 15:35:58 <Sandlayth> is everybody awake?
2017-05-16 15:36:12 <scv> no
2017-05-16 15:36:33 <Bun> maybe
2017-05-16 15:37:03 <grugly> brutal..
2017-05-16 15:37:45 <scv> they should've updated their irc client >_>
2017-05-16 15:38:10 <Kachel> But what should be added to the lbu-list when installing docker?
2017-05-16 15:38:20 <scv> no idea, sorry
2017-05-16 15:38:22 <scv> don't use either
2017-05-16 15:38:50 <Kachel> and with python?
2017-05-16 15:40:00 <ncl> zzz
2017-05-16 15:55:44 <pickfire> What is EFknockr up to? Sending dcc to everyone? Lucky I am using irssi here.
2017-05-16 15:56:30 <rivarun> weechat was patched
2017-05-16 18:18:31 <Peasant65> why have i been pinged ^
2017-05-16 18:18:33 <Peasant65> ?
2017-05-16 18:19:18 <scadu> ??
2017-05-16 18:19:55 <_ikke_> Peasant65: Someone trying to exploit vulnerable IRC clients
2017-05-16 18:20:22 <Peasant65> oh.. which clients ?
2017-05-16 18:20:33 <Bun> weechat
2017-05-16 18:20:38 <_ikke_> weechat had a recent vuln
2017-05-16 18:54:32 <Peasant65> ah ok
2017-05-16 18:55:07 <Peasant65> hey I got a question. I´m trying to install php7-gd on alpine 3.5 but i´m getting unstatisfyable dependencies
2017-05-16 18:55:23 <Peasant65> so:libwebp.so.7 (missing):
2017-05-16 18:55:38 <Peasant65> I´ve tried installing libwebp but that doesnt solve it.
2017-05-16 18:56:04 <Peasant65> any idea on how to solve this without compiling packages myself ?
2017-05-16 18:56:18 <Peasant65> I´d rather use apk to keep everything up-to-date
2017-05-16 19:00:59 <hiro> pickfire: i don't like the development pace of current irssi (everything >=1.0)
2017-05-16 19:01:22 <Peasant65> So gd needs libwebp.so.7 and libwebp provides libwebp.so.6
2017-05-16 19:01:46 <Peasant65> any idea on how to fix this trough official channels ?
2017-05-16 19:01:58 <hiro> pickfire: also they stopped listing the 0.8 branch on the download page
2017-05-16 19:02:19 <hiro> pickfire: just after having to patch a vulnerability in the 1.0 branch
2017-05-16 19:02:53 <Peasant65> It´s available in edge. Would you considder edge somewhat stable ?
2017-05-16 19:03:05 <Bun> you can install just libwebp from edge at least
2017-05-16 19:03:09 <Peasant65> or is edge really bleeding edge bughunting stuff ?
2017-05-16 19:05:48 <Peasant65> Can I install only libwebp from edge and keep the rest on 3.5 ?
2017-05-16 19:06:10 <Bun> see https://wiki.alpinelinux.org/wiki/Alpine_Linux_package_management#Repository_pinning
2017-05-16 19:07:05 <Peasant65> ah great Bun !
2017-05-16 19:12:59 <Peasant65> why is half of the php7 modules in community not compatible without edge ??
2017-05-16 19:13:13 <Peasant65> Can´t even install mysqli/mysqlnd
2017-05-16 19:13:44 <Bun> seems very odd indeed
2017-05-16 19:18:51 <Peasant65> mysqli needs php openssl which needs libressl2.5, but c3.5 is only on 2.4 yet
2017-05-16 19:19:17 <scv> probably because it was built against edge
2017-05-16 19:19:29 <scv> it's community, not guaranteed to be correct or even functional
2017-05-16 19:19:42 <_ikke_> community should be stable
2017-05-16 19:19:57 <_ikke_> The only difference is that it has a shorter support cycle
2017-05-16 19:57:20 <Kruge> Afternoon.  Did the "fonts-base" package get renamed / migrated to something else in 3.5?
2017-05-16 20:05:36 <_ikke_> was it part of testing?
2017-05-16 20:08:10 <_ikke_> Kruge: It has been moved to unmaintained
2017-05-16 20:09:48 <Kruge> Oh.  That's not great.  Thanks for the info though.
2017-05-16 20:09:53 <Kruge> Is there a replacement package?
2017-05-16 20:09:57 <Kruge> Sorry to bother you
2017-05-16 20:26:49 <_ikke_> I don't know, what did it provide?
2017-05-16 20:27:45 <_ikke_> Looks like just a meta-package (only has dependecies)
2017-05-16 20:28:54 <_ikke_> Kruge: apk add ttf-dejavu ttf-courier-prime ttf-heuristica ttf-liberation ttf-noto tf-symbola
2017-05-16 20:34:35 <Bureaucat> I got ping'd which means I have likely been pinged by a spambot.
2017-05-16 20:34:41 <Bureaucat> yep
2017-05-16 20:34:47 <Bureaucat> 
ACTION goes back to hiding.

2017-05-16 20:46:55 <Peasant65> hey! I have a box with internal ipv4 and public ipv6. Can i configure apk to use ipv6 only ?
2017-05-16 20:47:37 <Peasant65> ping6 google.com wors fine so the ipv6 is allready configured
2017-05-16 20:50:21 <Peasant65> does alpine support ipv6 repo´s ?
2017-05-16 20:59:55 <sebumd> Does anyone have a good example of how to run java processes as a user other than root using openjdk:8-jre-alpine? I'm having a ton of issues, such as not allowing the java process to run as a port <1000, so I have to run setpcap, which creates an issue with libjli.so :/
2017-05-16 21:03:13 <_ikke_> Peasant65: dl-cdn does support ipv6
2017-05-16 21:04:25 <Peasant65> _ikke_, so what repo should i use ?
2017-05-16 21:04:37 <Peasant65> Right now it´s by default on the netherlands
2017-05-16 21:04:42 <_ikke_> Peasant65: sorry, false positive, it returned a cname which has no AAAA record
2017-05-16 21:05:01 <Peasant65> ah alright
2017-05-16 21:05:03 <_ikke_> iirc, they do not support ipv6
2017-05-16 21:05:18 <Peasant65> i allready tried ping6ing dl-x but no luck
2017-05-16 21:05:23 <Peasant65> oh well...
2017-05-16 21:05:41 <_ikke_> right
2017-05-16 21:57:26 <RomeuMello> Hello there, I'm trying to install Kodi, but theres no documentation how to run it
2017-05-16 21:58:00 <RomeuMello> I need to install some desktop system? before run Kodi?
2017-05-16 21:58:41 <Xe> RomeuMello: what do you mean?
2017-05-16 21:59:39 <RomeuMello> Xe, I just installed Kodi, with apk add kodi, and also setup-xorg-base, but can't run Kodi
2017-05-16 21:59:52 <Xe> define "can't run"?
2017-05-16 22:01:04 <RomeuMello> Error: Unable to create GUI. Exiting on segmentation fault
2017-05-16 22:01:21 <RomeuMello> so, theres some log
2017-05-16 22:02:02 <Xe> if you run it from a terminal, what is the output?
2017-05-16 22:02:24 <RomeuMello> actually is from terminal
2017-05-16 22:02:36 <Xe> yeah
2017-05-16 22:02:39 <Xe> what is the output
2017-05-16 22:02:42 <Xe> pastebin it
2017-05-16 22:02:57 <RomeuMello> log output?
2017-05-16 22:10:54 <peterrus> hey, how would I go about limiting bandwidth in alpine? I want to make sure that a certain ethernet interface doesnt upload with more than x kb/s
2017-05-16 22:12:46 <peterrus> I wanted to use trickle, but there is no package for it, and I am trying to keep my environment as easy reproduceable as possible, so I prefer no compling.
2017-05-16 22:14:14 <peterrus> sebumd: isnt that as easy as creating a new user, and then run su - thatuser -c "java bla bla"
2017-05-16 22:17:52 <RomeuMello> Xe, sorry I can't copy from virtualbox terminal
2017-05-16 22:18:29 <Xe> RomeuMello: screenshot? something?
2017-05-16 22:20:12 <RomeuMello> yeah
2017-05-16 22:23:39 <RomeuMello> Xe, http://imgur.com/a/UFSEQ
2017-05-16 22:24:54 <RomeuMello> xe, continuing http://imgur.com/a/Zy3mm
2017-05-17 08:27:30 <helpImStuck> Anyone using alpine as their main system? As desktop
2017-05-17 08:28:15 <Shiz> yes
2017-05-17 08:31:37 <clandmeter> yes
2017-05-17 08:31:46 <clandmeter> :)
2017-05-17 08:32:28 <fcolista> yes
2017-05-17 08:32:29 <fcolista> :)
2017-05-17 08:37:15 <helpImStuck> How much drive space does it take?
2017-05-17 08:37:52 <ScrumpyJack> helpImStuck: yes
2017-05-17 08:38:39 <ScrumpyJack> depends on the amount of packages you install :)
2017-05-17 08:38:52 <helpImStuck> cool, I couldn't get the basic xorg nor the gparted to work.. guess i need to read more about it and study the logfiles
2017-05-17 08:39:49 <helpImStuck> I was planning to use alpine as a xen for virt-manager.. all the packages are there but i got i/o-errors creating vm:s
2017-05-17 08:39:50 <ScrumpyJack> there is quite a lot of into about setting up xorg on the forums, wiki and bug tracker
2017-05-17 08:40:58 <helpImStuck> okey :)
2017-05-17 08:41:07 <ScrumpyJack> can you create a xen-hvm by hand? does booting just an iso work?
2017-05-17 08:41:37 <ScrumpyJack> "alpine as a xen" do you mean dom0 or domU?
2017-05-17 08:41:42 <ScrumpyJack> or both
2017-05-17 08:42:15 <helpImStuck> there are a release of alpine built on xen
2017-05-17 08:42:36 <helpImStuck> alpine as dom0
2017-05-17 08:43:27 <ScrumpyJack> neat. it's excellent for that.
2017-05-17 08:44:18 <helpImStuck> and the edge repos has got the latest libvirt.. it should work just fine, but i can't find any howtos
2017-05-17 08:44:21 <ScrumpyJack> create a simple xen hvm domU config file to boot an iso, see if you get i/o errors
2017-05-17 08:44:53 <helpImStuck> Creating the config file in virt-manager
2017-05-17 08:46:06 <ScrumpyJack> i would recommend not using libvirt/virt-manager to start with.
2017-05-17 08:46:56 <helpImStuck> why?
2017-05-17 08:47:15 <helpImStuck> xl command stack in pythonscripts..
2017-05-17 08:47:43 <helpImStuck> sure, there are some bugs. But yes, it's always better to do it from the ground up
2017-05-17 08:48:00 <helpImStuck> ground and up even
2017-05-17 08:48:52 <ScrumpyJack> if this is early days for you and xen, edit config files and use xl (xl doesn't have any python deps), you'll get a much better feel for how things work :)
2017-05-17 08:53:35 <ScrumpyJack> there are a few wiki entries here that may help https://wiki.alpinelinux.org/wiki/Tutorials_and_Howtos#Virtualization
2017-05-17 09:03:44 <helpImStuck> ScrumpyJack, been reading most of it and tried the alpine release with xen preinstalled
2017-05-17 09:06:29 <helpImStuck> https://wiki.alpinelinux.org/wiki/Xen_LiveCD  this one
2017-05-17 09:23:15 <ScrumpyJack> perfect. install alpine-zen onto a usb stick or an SD card in run-from-ram mode. that way you can boot from it and use your hosts's storage with more freedom
2017-05-17 09:23:38 <ScrumpyJack> for your VMs
2017-05-17 09:26:08 <ScrumpyJack> take a look at https://wiki.alpinelinux.org/wiki/Create_a_Bootable_USB (the make-bootable way is prefered) and check out the alpinelinux specific features that are LBU and apkovl https://wiki.alpinelinux.org/wiki/Alpine_local_backup
2017-05-17 09:36:33 <helpImStuck> ScrumpyJack, thanks, very interesting
2017-05-17 09:43:20 <helpImStuck> ScrumpyJack, do i really need one cd-rom and one usb-stick? Or can i use 2 usb-sticks?
2017-05-17 10:09:00 <peterrus> hey, how would I go about limiting bandwidth in alpine? I want to make sure that a certain ethernet interface doesnt upload with more than x kb/s
2017-05-17 10:10:29 <hiro> as in any other os, use tc
2017-05-17 10:10:48 <hiro> s/os/distro/
2017-05-17 11:14:17 <ScrumpyJack> helpImStuck: you need one USB stick only. make it bootable with alpine-xen, boot from it, run setup-alpine and choose data with cache on usb
2017-05-17 11:16:22 <ScrumpyJack> peterrus: for traffic shaping in linux, take a look at tc. It's quite a complext tool, but it's traffic shaping is quite a complex topic
2017-05-17 11:16:43 <ScrumpyJack> arg, should have read hiro's response
2017-05-17 11:17:43 <ScrumpyJack> here is a good place to start http://lartc.org/
2017-05-17 11:27:20 <helpImStuck> ScrumpyJack, followd the links you sent and got alpine xen installed from one usb drive to another
2017-05-17 11:27:25 <helpImStuck> greate succcess
2017-05-17 11:29:55 <helpImStuck> waste of time?
2017-05-17 11:31:09 <helpImStuck> And the keymap does not stick.. i have to change it on every boot.. it's been one of the major things for me.. how can i make it stick?
2017-05-17 11:32:32 <kahiru> helpImStuck: set keymap in /etc/onf.d/keymaps and enable the keymaps service (just guessing)?
2017-05-17 11:45:29 <helpImStuck> it's still a jungle for me..
2017-05-17 12:28:14 <ScrumpyJack> helpImStuck: can you try adding rc_sys="xen0" to /etc/rc.conf for the keymap issue?
2017-05-17 12:30:17 <ScrumpyJack> if you are booting from the USB and running from ram, run setup-apkcache and setup-lbu first, then remember to run lbu commit before each reboot
2017-05-17 12:38:03 <helpImStuck> i did a sys install for now. i'll try to add it
2017-05-17 12:39:27 <helpImStuck> ScrumpyJack, we'll see if it works
2017-05-17 12:42:25 <helpImStuck> lol, get an error message /etc/rc.d.conf line 200 syntax error unexpected "in"
2017-05-17 12:42:46 <helpImStuck> and now i can't edit the file, it tells me it's unwriteble
2017-05-17 12:43:12 <helpImStuck> :)
2017-05-17 12:44:34 <helpImStuck> read only filesystem
2017-05-17 12:47:01 <Guest80397> Is there an Alpine equivalent for the linux file command? https://linux.die.net/man/1/file
2017-05-17 12:48:28 <_ikke_> Guest80397: There is a file package
2017-05-17 12:48:31 <_ikke_> https://pkgs.alpinelinux.org/packages?name=file&branch=&repo=&arch=&maintainer=
2017-05-17 12:51:00 <Guest80397> Thanks - when I try `apk add file` I get an error:
2017-05-17 12:51:03 <Guest80397> ERROR: unsatisfiable constraints:   file (missing):     required by: world[file]
2017-05-17 12:51:28 <_ikke_> Guest80397: What version of alpine are you on?
2017-05-17 12:52:09 <_ikke_> And what repositories do you have enabled
2017-05-17 12:53:46 <Guest80397> 3.4.6
2017-05-17 12:59:50 <ScrumpyJack> Guest80397: try apk update && apk add file
2017-05-17 13:00:11 <Guest80397> will do, thanks
2017-05-17 13:11:32 <helpImStuck> ScrumpyJack, i fixed the keymap problem.. i had to ad the whole path to the keymap file in rc.local.. KEYMAP=/etc/keymaps/keymap..
2017-05-17 13:27:04 <_ikke_> It looks like 3.4 on dl-cdn does not have a file package
2017-05-17 13:28:00 <_ikke_> Oh, it does
2017-05-17 13:39:45 <ScrumpyJack> helpImStuck: nice
2017-05-17 13:41:04 <ScrumpyJack> helpImStuck: if you feel generous, you could add an entry in the FAQ pages of the wiki. that problems comes up a lot https://wiki.alpinelinux.org/wiki/Alpine_Linux:FAQ
2017-05-17 13:45:23 <helpImStuck> ScrumpyJack, i'll do it after dinner :) 20 min or so.. brb
2017-05-17 13:58:48 <helpImStuck> ScrumpyJack, do i need to register to change the text?
2017-05-17 14:32:43 <helpImStuck> ScrumpyJack, It's better you do it, if you have access. When the keymap is selected either by setup-alpine of setup-keymap it will be available in /etc/keymap/yourkeymap. To make alpine use your newly downloaded keymap you need to edit /etc/rc.local and put KEYMAP=/Full/path/to/keymapfile . And that should do it. :)
2017-05-17 14:33:26 <Shiz> helpImStuck: setup-keymap should also update your /etc/conf.d/keymaps
2017-05-17 14:33:30 <Shiz> no need to edit /etc/rc.local...
2017-05-17 14:34:46 <helpImStuck> but that is the only way to get the right keymap after a reboot
2017-05-17 14:34:51 <helpImStuck> for me
2017-05-18 07:06:45 <marramiau> Hi, I need a little help :)
2017-05-18 07:07:14 <marramiau> I'm trying to install the VirtualBox Guest Additions in an Alpine installation.
2017-05-18 07:07:31 <marramiau> I'm stuck at trying to mount the Guest Utils CD.
2017-05-18 07:10:30 <marramiau> Hum... strange... it wasn't working, but now it did. I don't know what I've done differently :-S
2017-05-18 11:50:58 <Tsutsukakushi> this jannisch guy on the forums is quite wrong about linux-libre
2017-05-18 11:51:07 <Tsutsukakushi> it's actively maintained
2017-05-18 11:51:17 <Tsutsukakushi> latest release was this month
2017-05-18 11:51:42 <Tsutsukakushi> there was also release 15 days before his comment
2017-05-18 11:52:00 <Tsutsukakushi> how is that "outdated"?
2017-05-18 21:21:38 <jvoisin> hello, I have a reproductible segfault with `apk`
2017-05-18 21:21:44 <jvoisin> https://paste.debian.net/933111/
2017-05-18 21:31:31 <jvoisin> solved by `mount -o remount,rw /media/mmcblk0p1/`
2017-05-18 21:33:22 <kaniini> jvoisin: ls -al /etc/apk | grep cache
2017-05-18 21:34:16 <jvoisin> lrwxrwxrwx    1 root     root            22 Jan  1  1970 cache -> /media/mmcblk0p1/cache
2017-05-18 21:34:47 <kaniini> k.. thanks..
2017-05-18 21:34:53 <kaniini> i'll look into fixing it in a bit
2017-05-18 21:35:42 <jvoisin> wonderful ♥
2017-05-18 21:46:58 <jvoisin> yet another alpine-powered tor relay :)
2017-05-18 23:13:58 <devth> is the index down? ERROR: http://dl-cdn.alpinelinux.org/alpine/v3.5/main: temporary error (try again later)
2017-05-18 23:23:30 <fern> Anyone know when alpine will have a kernel with Ryzen support? I'm looking for a new distro.
2017-05-18 23:24:58 <Shiz> does ryzen require specific support?
2017-05-18 23:25:04 <Shiz> if so, do you have a kernel version?
2017-05-18 23:25:16 <fern> 4.10 I think.
2017-05-18 23:25:41 <fern> I doubt it will be backported
2017-05-18 23:26:04 <Shiz> hmm
2017-05-18 23:26:14 <Shiz> alpine 3.6 is scheduled to ship with 4.9 and for various reasons that is unlikely to change
2017-05-18 23:26:29 <fern> Looks like it was backported to 4.9.10
2017-05-18 23:26:37 <Shiz> then it's fine
2017-05-18 23:26:42 <Shiz> currently edge ships 4.9.28
2017-05-18 23:26:52 <Shiz> so with alpine 3.6 out you will be fine
2017-05-18 23:27:10 <fern> Is that because the Grsec patches are going subscription only after 4.9?
2017-05-18 23:27:23 <Shiz> yes
2017-05-18 23:27:28 <Shiz> among others
2017-05-18 23:29:37 <fern> Is 3.6 coming soon (tm) or is it going to be a few months?
2017-05-18 23:30:22 <Shiz> think within a week
2017-05-18 23:30:24 <Shiz> likely
2017-05-18 23:31:49 <fern> I'll just run 3.5 till then, Ryzen does work(ish) just not very well. But I can live with weird scheduling till then.
2017-05-18 23:31:50 <Shiz> at least the rcs
2017-05-18 23:31:54 <fern> Thanks for the help.
2017-05-18 23:32:01 <Shiz> no prob
2017-05-18 23:32:27 <fern> See you fellow mountaineers'
2017-05-18 23:32:34 <Shiz> .o7
2017-05-19 10:19:56 <pihpah> Any idea why I can't install this package: https://pkgs.alpinelinux.org/package/edge/community/x86_64/vnstat
2017-05-19 10:20:04 <pihpah> apk search vnstat does not find it.
2017-05-19 10:20:35 <Tsutsukakushi> are you using edge?
2017-05-19 10:22:02 <pihpah> VERSION_ID=3.4.6
2017-05-19 10:22:18 <pihpah> Guess I don't
2017-05-19 10:22:27 <Shiz> the link you posted is an edge packae
2017-05-19 10:22:29 <Shiz> package
2017-05-19 10:22:42 <Shiz> right now vnstat is only in edge
2017-05-19 10:22:49 <Shiz> it will be in 3.6 when it releases in a short while
2017-05-19 10:22:50 <pihpah> Ah
2017-05-19 10:22:55 <Shiz> we're tagging 3.6rc1 today, i think?
2017-05-19 10:23:16 <pihpah> Is there any way to install it right now?
2017-05-19 10:23:31 <Shiz> yeah, you can update to edge :P
2017-05-19 10:23:42 <Shiz> in the case of vnstat, you can add the community repo as a tagged one
2017-05-19 10:24:00 <Shiz> add @edge-community http://nl.alpinelinux.org/alpine/edge/community to /etc/apk/repositories
2017-05-19 10:24:05 <Shiz> apk -U add vnstat@edge-community
2017-05-19 10:24:16 <Shiz> that prevents you from having to update your entire system to edge, but it may also not work
2017-05-19 10:24:26 <Shiz> if it doesn't, updating your system to edge is the only way
2017-05-19 10:25:09 <Shiz> or to 3.6 when it's released, of course
2017-05-19 10:25:16 <Shiz> https://wiki.alpinelinux.org/wiki/Edge
2017-05-19 10:27:38 <pihpah> ERROR: http://nl.alpinelinux.org/alpine/edge/community : No such file or directory
2017-05-19 10:27:54 <pihpah> I followed your steps up to apk -U add vnstat@edge-community
2017-05-19 10:29:07 <Shiz> it seems you added a space at the end
2017-05-19 10:29:11 <Shiz> don't :P
2017-05-19 10:31:17 <pihpah> hallelujah! Thanks.
2017-05-19 10:44:24 <nbastin> is there any recommended/standard method for caching packages in the network?
2017-05-19 10:45:14 <ncopa> for a single machine or multiple?
2017-05-19 10:45:50 <royger> http proxy?
2017-05-19 10:45:55 <ncopa> setup-apkcache will set up local apk cache
2017-05-19 10:46:37 <nbastin> for multiple machines
2017-05-19 10:46:50 <ncopa> you can also set up a local caching reverse proxy (varnish/nginx) and use that as your repository
2017-05-19 10:47:09 <nbastin> http proxy is a problem because stale-if-error doesn't work all that well (and the internet-draft seems to have died anyhow)
2017-05-19 10:47:35 <nbastin> hrm, varnish is not something I have tried
2017-05-19 10:48:11 <nbastin> will it serve cached content if offline?
2017-05-19 10:48:25 <ncopa> depends on your setup i suppose
2017-05-19 10:48:27 <nbastin> (trying to get something as close to the behaviour of apt-cacher-ng as possible, generally)
2017-05-19 10:48:44 <nbastin> I was using squid but if the network drops or is flaky it won't serve the content
2017-05-19 10:48:56 <nbastin> as it still tries to HEAD for the cache date
2017-05-19 10:49:34 <nbastin> alternatively possibly I should just have a local mirror, but I was hoping to build it up on demand.. :-)
2017-05-19 10:51:06 <ncopa> yes i understand your problem and im a bit interested in something similar myself
2017-05-19 10:51:33 <ncopa> shouldnt be too hard to implement something with nginx or similar
2017-05-19 10:51:56 <ncopa> but then again, a caching reverse proxy might to the job aswell
2017-05-19 10:52:22 <nbastin> and then I guess I need to wrap apk in something that sets the http_proxy env var?
2017-05-19 10:52:33 <ncopa> no
2017-05-19 10:52:37 <nbastin> (I don't want the proxy used for anything other than packages)
2017-05-19 10:52:57 <nbastin> I couldn't find any way to configure it system wide, maybe I missed something
2017-05-19 10:52:57 <ncopa> you just add your varnish ip to /etc/apk/repository, as if it was a mirror
2017-05-19 10:53:56 <helpImStuck> has anyone tried to use alpine in a lxd container on, let's say an ubuntu server host?
2017-05-19 10:54:17 <ncopa> you configure varnish or ngingx as reverse proxy, enable caching, then use an alpine mirror close to you as backend
2017-05-19 10:54:22 <Tsutsukakushi> >let's say an ubuntu server host?
2017-05-19 10:54:29 <Tsutsukakushi> are there any alternatives
2017-05-19 10:54:36 <ncopa> and you use your reverse proxy as repo mirror
2017-05-19 10:54:37 <Tsutsukakushi> it's not packaged for anything else afaik
2017-05-19 10:54:41 <helpImStuck> Tsutsukakushi, yes there are. arch for example
2017-05-19 10:54:46 <nbastin> ncopa: and then...dig into the iso to change the repo list in it?  I guess probably
2017-05-19 10:55:37 <ncopa> nbastin: you add your "mirror" (cache) to /etc/apk/repositories
2017-05-19 10:55:47 <Tsutsukakushi> helpImStuck: https://www.archlinux.org/packages/?sort=&q=lxd&maintainer=&flagged=
2017-05-19 10:55:59 <Tsutsukakushi> orly?
2017-05-19 10:56:26 <nbastin> ncopa: i think probably I have two problems - one is automated disk install, and one is cached packages, and probably trying to solve them both at once is problematic
2017-05-19 10:56:33 <helpImStuck> Tsutsukakushi, https://wiki.archlinux.org/index.php/LXD
2017-05-19 10:56:37 <ncopa> helpImStuck: i am using alpine in a lxc container on ubuntu on ppc64le and s390x currently, so yes it works
2017-05-19 10:56:45 <ncopa> i havent tried lxd though
2017-05-19 10:56:57 <Tsutsukakushi> >AUR
2017-05-19 10:57:36 <helpImStuck> lxd -should- make the config of the containers easier but it's still new and too little documentation yet
2017-05-19 10:57:41 <Tsutsukakushi> lxc-alpine template that doesn't require root would be nice
2017-05-19 10:57:49 <ncopa> i htink we even have lxd for alpine
2017-05-19 10:57:49 <nbastin> ncopa: I need to have the iso install leave me with a system (which I can't really reach anymore) that is properly configured to use the cache, which is why the transparent proxy was appealing
2017-05-19 10:57:50 <helpImStuck> Tsutsukakushi, aur is a big part of arch ;)
2017-05-19 10:57:51 <Tsutsukakushi> "new"
2017-05-19 10:58:29 <Tsutsukakushi> the reason lxd lacks documentation is that almost no one uses it
2017-05-19 10:58:29 <Tsutsukakushi> as a result of it not being packaged for almost any distro
2017-05-19 10:58:44 <Tsutsukakushi> i wouldn't install something like that from AUR
2017-05-19 10:58:44 <Tsutsukakushi> debian still has no lxd package
2017-05-19 10:58:54 <Tsutsukakushi> lxd is a failed project
2017-05-19 11:01:34 <helpImStuck> Tsutsukakushi, lxd 2.13 is the latest stable.. it's a headache-project.. I wanted to create a vpn as router with dnscrypt-proxy and make it give out dns and ip via dhcp to other containers but after some days playing around with it, it seams possible but it would take too many hours
2017-05-19 11:03:09 <helpImStuck> it's better i modify esxi 6.5 to have support for my old nics than playing around with other "solutions"..
2017-05-19 11:05:02 <helpImStuck> alpine with xen and libvirtd was one of my projects
2017-05-19 11:05:26 <helpImStuck> Couldn't get it to work as i wanted. With virt-manager..
2017-05-19 11:09:31 <helpImStuck> It would be a perfect setup using alpine with xen and openbox+virt-manager but xorg did not start for me.. and i couldn't find a fix for it
2017-05-19 23:27:57 <chamunks> php-pgsql (missing): \n     required by: world[php-pgsql]
2017-05-19 23:28:18 <chamunks> Why is it not working finding this package... https://pkgs.alpinelinux.org/package/v3.3/main/x86/php-pgsql
2017-05-19 23:28:28 <chamunks> Its sitting right there for all 3 architectures...
2017-05-19 23:29:52 <Shiz> because you're looking at a package for alpine v3.3
2017-05-19 23:30:10 <Shiz> it was renamed to php5-mysql / php7-mysql depending on your php version
2017-05-19 23:30:19 <Shiz> in v3.4+
2017-05-19 23:30:35 <chamunks> mysql for pgsql?
2017-05-19 23:30:52 <Shiz> sorry
2017-05-19 23:30:54 <chamunks> I suppose I could try php7-pgsql
2017-05-19 23:30:57 <Shiz> php5-pgsql / php7-pgsql
2017-05-19 23:31:28 <chamunks> basically the same issue.  http://i.imgur.com/6PiB1aE.png
2017-05-19 23:32:14 <Shiz> do you have the community repository enabled?
2017-05-19 23:32:19 <Shiz> grep community /etc/apk/repositories
2017-05-19 23:32:29 <Shiz> actually,
2017-05-19 23:32:35 <chamunks> I've not changed anything from this container yet.
2017-05-19 23:32:40 <Shiz> if you didn't you couldn't have installed php7
2017-05-19 23:32:46 <Shiz> so are you sure php7 is your installed php version :p
2017-05-19 23:32:59 <Shiz> a bare container does not have the community repo enabled, i think -- lemme check
2017-05-19 23:33:05 <chamunks> http://i.imgur.com/8U1X3zr.png
2017-05-19 23:33:18 <Shiz> oh, it does
2017-05-19 23:33:22 <chamunks> its not bare its someone elses container I'm just trying to get a Laravel project going.
2017-05-19 23:33:45 <Shiz> grep pgsql /etc/apk/world ?
2017-05-19 23:34:13 <chamunks> it returned with php-pgsql
2017-05-19 23:34:26 <chamunks> seems kind of odd.
2017-05-19 23:34:29 <Shiz> somehow that made its way into your world file
2017-05-19 23:34:36 <Shiz> remove it from there, then just # apk add php7-pgsql
2017-05-19 23:34:40 <chamunks> I might have -f'd it
2017-05-19 23:39:00 <chamunks> okay so it seems to have accepted that.
2017-05-19 23:39:07 <Shiz> :)
2017-05-19 23:39:23 <chamunks> Now on to bigger and better problems to smash through.
2017-05-20 00:36:08 <chamunks> Is there a new name that I need to look for to obtain pdo_pgsql?
2017-05-20 00:36:39 <Shiz> http://pkgs.alpinelinux.org or # apk search
2017-05-20 00:36:40 <Shiz> :P
2017-05-20 00:38:27 <chamunks> searching "pgsql" with a pile of settings on that seems to be just coming up empty.
2017-05-20 00:39:46 <chamunks> even just searching for php I'm not getting anything even in incognito
2017-05-20 00:40:00 <chamunks> ah nvm its like an oldschool search gotcha
2017-05-20 00:40:14 <chamunks> sorry I'll rewind my brain a little and do some digging.
2017-05-20 00:40:37 <chamunks> got it
2017-05-20 00:40:37 <chamunks> php7-pdo_pgsql
2017-05-20 00:40:53 <Shiz> :)
2017-05-20 00:40:57 <Shiz> apk search doesn't need wildcards btw
2017-05-20 00:41:08 <chamunks> fair enough.
2017-05-20 00:41:15 <Shiz> and it has the advantage of automatically filtering your repo/arch as it searches your local cache
2017-05-20 00:41:26 <chamunks> theres too many package managers I have to keep track of and all of their syntax.
2017-05-20 00:41:33 <Shiz> understandable
2017-05-20 00:41:51 <chamunks> apk, apt, yum, brew, bleh...
2017-05-20 00:42:07 <chamunks> I won't forget that one though ty
2017-05-20 00:42:21 <Shiz> dnf, yast, pkg, nix
2017-05-20 00:42:25 <Shiz> :P
2017-05-20 00:42:32 <chamunks> pkg almost forgot bsd
2017-05-20 00:42:45 <chamunks> heard of yast no idea where its for and dnf and nix idk
2017-05-20 00:43:11 <Shiz> dnf is the replacement for yum
2017-05-20 00:43:13 <Shiz> yast is opensuse
2017-05-20 00:43:33 <Shiz> nix is for nixos, it's a bit special
2017-05-20 00:45:13 <chamunks> I'm slightly annoyed at the https://nixos.org expansion on "Declarative" it makes it seem like it's going to elaborate on what they mean and in the first sentence they just say the same thing their tagline says at the top of the page.
2017-05-20 00:45:33 <chamunks> Still kinda neat though.
2017-05-20 00:52:49 <darkfader> chamunks: i played with nixos/nixops a bit in 2015, it's great fun from an admin point of view
2017-05-20 00:53:32 <chamunks> darkfader I'm watching https://www.youtube.com/watch?v=YbUPdv03ciI while I work on this container.  I'm looking to personally work on moving towards rancher/rancherOS
2017-05-20 00:53:38 <darkfader> some systems of this kind force you to use their model everywhere and have limited features, so you'll not even be stuff you did as a junior admin
2017-05-20 00:54:09 <darkfader> but in nixos you can still (properly, no wild bash scripts or other hacks as a dockerfile i.e. could have)
2017-05-20 00:54:22 <darkfader> ... declare what you want if they didn't foresee it
2017-05-20 00:54:28 <darkfader> so you don't feel patronized using it
2017-05-20 00:54:45 <darkfader> rancher i think is good, but didn't get close to trying yet
2017-05-20 00:55:46 <chamunks> darkfader Someone installed nix into an alpine container on hub.docker.com
2017-05-20 00:56:03 <darkfader> ah
2017-05-20 00:56:17 <chamunks> I just like rancher to an extent because I just want microservices and the OS to stay out of my way mostly.  Then I build the containers I deploy on Alpine
2017-05-20 00:59:04 <darkfader> ... which is also good at staying out of the way, it seems a good plan :)
2017-05-20 01:01:57 <chamunks> For the most part I just want an ultra lean no features added platform underneath exactly what I want and nothing more.
2017-05-20 01:01:59 <chamunks> ideally.
2017-05-20 01:02:28 <chamunks> I'm old enough to remember when you would avoid doing something on the off chance that it might use too much resources.
2017-05-20 01:18:17 <chamunks> darkfader thanks for the vouch on it though I'll look it over, it never hurts to learn a better way to get good reproducibility.  Its why I took the time to learn Salt-Stack
2017-05-20 01:19:06 <Shiz> i just run alpine as my container host
2017-05-20 01:19:14 <Shiz> i see no reason to use anything else personally :P
2017-05-20 08:45:46 <florian> i try to install zeromq on alpine 3.4 docker container, but get this error ERROR: unsatisfiable constraints:  zeromq-4.1.4-r0 (missing):    required by: world[zeromq-4.1.4-r0]
2017-05-20 08:45:52 <florian> i did an apk update before thate
2017-05-20 11:10:29 <danci1973|2> Hello...
2017-05-20 11:11:47 <danci1973|2> I installed 'libreswan' which provides '/etc/init.d/ipsec' - but when I boot my firewall, I get an error 'Error: ipsec is the name of a real and virtual service' - it still says '[ ok ]', but it isn't really started.
2017-05-20 15:36:29 <lxGzx53qO34r> huh, just realized a drawback of using libressl is that it lacks curve25519 support
2017-05-20 15:56:17 <Shiz> lxGzx53qO34r: it doesn't, as far as I know?
2017-05-20 15:56:26 <Shiz> curve25519 is part of libressl's libcrypto
2017-05-20 16:01:52 <lxGzx53qO34r> `openssl ecparam -list_curves` does not list any of the djb curves
2017-05-20 16:04:33 <lxGzx53qO34r> while openssl-1.1.0 does
2017-05-20 16:40:39 <Shiz> seems like it lacks integration then i suppose
2017-05-20 18:34:00 <mcon> I would like to use Alpine to build a small Virtual Machine to be used as routing host toward a specific VPN (IPSec), so I need vpnc which I believe is not available via apk. I tried compiling it directly but I don't know which are the needed packages. I installed gcc and make, but something is still missing as I get "fatal error: unistd.h: No such file or directory". any hint?
2017-05-20 18:35:00 <_ikke_> alpine-sdk (or build-base) gives you all the build tools
2017-05-20 18:35:39 <_ikke_> linux-<flavor>-dev should give you the header files
2017-05-20 18:35:46 <_ikke_> mcon: I would recommend building it as a package
2017-05-20 18:36:29 <_ikke_> mcon: https://www.unix-ag.uni-kl.de/~massar/vpnc/ this is what you try to build?
2017-05-20 18:53:44 <mcon> _ikke_: https://github.com/solarsea/vpnc
2017-05-20 18:54:34 <mcon> _ikke_: ... which I think it's pretty much the same.
2017-05-20 18:55:11 <mcon> _ikke_: I have no experience in building ALpine packages.
2017-05-20 18:58:12 <_ikke_> It's not that hard
2017-05-20 18:58:26 <mcon> _ikke_: pointers?
2017-05-20 18:58:52 <_ikke_> https://wiki.alpinelinux.org/wiki/Creating_an_Alpine_package
2017-05-20 18:59:23 <mcon> _ikke_: what should I put as "<flavor>"? "virtual" is not accepted.
2017-05-20 19:01:15 <_ikke_> good question, it does not seem to exist
2017-05-20 19:02:29 <Shiz> <flavor>?
2017-05-20 19:04:06 <_ikke_> kernel flavor
2017-05-20 19:04:21 <Shiz> why is that needed?
2017-05-20 19:04:37 <Shiz> why/where
2017-05-20 19:04:41 <_ikke_> Shiz: he wants to compile vpnc
2017-05-20 19:04:43 <mcon> Shiz: _ikke_ suggested me: linux-<flavor>-dev should give you the header files
2017-05-20 19:04:44 <_ikke_> but linux-headers has it
2017-05-20 19:04:54 <Shiz> oh
2017-05-20 19:05:02 <_ikke_> https://pkgs.alpinelinux.org/contents?file=unistd.h&path=&name=linux-headers&branch=v3.5&repo=main&arch=x86_64
2017-05-20 19:05:40 <mcon> _ikke_: thanks. trying...
2017-05-20 19:05:45 <Shiz> yes don't ever use linux-<flavor>-dev
2017-05-20 19:05:50 <Shiz> unless you're compiling kernel modules
2017-05-20 19:05:58 <_ikke_> ah ok
2017-05-20 19:09:21 <mcon> Grrr... still something is amiss: /usr/include/netinet/if_ether.h:97:8: error: redefinition of 'struct ethhdr'
2017-05-20 19:10:49 <mcon> Any hint ?
2017-05-20 19:11:19 <Shiz> ah that's a known issue
2017-05-20 19:11:30 <Shiz> it's because the linux headers can be somewhat wonky w.r.t. userspace headers
2017-05-20 19:11:33 <Shiz> let me dig up the fix you need to apply
2017-05-20 19:16:23 <Shiz> mcon: this fix:
2017-05-20 19:16:27 <Shiz> https://lists.gt.net/vpnc/devel/4166?page=last
2017-05-20 19:18:30 <_ikke_> mcon: http://lists.busybox.net/pipermail/buildroot/2016-February/152499.html
2017-05-20 19:18:35 <_ikke_> just ran into this
2017-05-20 19:22:23 <Shiz> yeah that patch includes the one i linked
2017-05-20 19:35:25 <_ikke_> right, but there are more
2017-05-20 19:35:31 <_ikke_> error.h is also missing
2017-05-20 19:37:02 <mcon> _ikke_: That should be fixed by the git repo I linked before.
2017-05-20 19:37:16 <_ikke_> ah ok, I switched to the original one
2017-05-20 19:37:28 <_ikke_> but both had the same tags
2017-05-20 19:39:23 <mcon> _ikke_: I'm a bit confused. The patch You linked is for Buildroot. How does that relate to Alpine?
2017-05-20 19:40:41 <_ikke_> mcon: musl fixes
2017-05-20 19:40:48 <_ikke_> both use musl apparently
2017-05-20 19:44:17 <mcon> _ikke_: Yup, but there's a big difference (IMHO): Buildroot is a cross-compilation environment and has *no* compilation capability on target, while Alpine is a "normal" distribution and I'm trying to compile natively. I fear I will have to apply the patches manually. I'm surprised they are not applied "upstream" (i.e.: in the Alpine distribution).
2017-05-20 19:45:19 <Shiz> ?
2017-05-20 19:45:30 <Shiz> these are patches for vpnc
2017-05-20 19:45:33 <Shiz> not for alpine
2017-05-20 19:48:28 <mcon> Shiz: Ok. I see. Unfortunately they are patches adding patches to Buildroot package definition for vpnc, so I  can't use them "as is", but I know what to do. thanks doe the clarification.
2017-05-20 19:48:57 <mcon> doe -> for
2017-05-20 19:49:00 <Shiz> there are two patches for vpnc itself in there
2017-05-20 19:49:28 <Shiz> actually
2017-05-20 19:49:31 <Shiz> it seems like they took these patches fom us
2017-05-20 19:49:33 <Shiz> ...
2017-05-20 19:49:49 <Shiz> mcon: https://git.alpinelinux.org/cgit/aports/tree/unmaintained/vpnc
2017-05-20 19:49:50 <mcon> Shiz: ?
2017-05-20 19:49:56 <Shiz> seems like we already have vpnc in unmaintained
2017-05-20 19:50:11 <Shiz> it would be easier for you to update it and submit a PR including the updates and moving it to tesing
2017-05-20 19:50:12 <Shiz> testing
2017-05-20 19:50:14 <Shiz> :)
2017-05-20 19:50:32 <Shiz> ah, but it's also already the latest
2017-05-20 19:50:35 <Shiz> i wonder why it got moved to unmaintained
2017-05-20 19:51:01 <Shiz> okay, it was part of a mass update
2017-05-20 19:51:06 <Shiz> i'll moderqnize the APKBUILD and put it back
2017-05-20 19:51:11 <mcon> Shiz: sorry, I don't follow You.
2017-05-20 19:51:32 <Shiz> we already have a recipe for vpnc, it was just moved to the unmaintained section for some reason
2017-05-20 19:51:36 <Shiz> and thus not included in alpine anymore
2017-05-20 19:51:51 <Shiz> seems like including it is as simple as moving it back, and modernizing the recipe a bit
2017-05-20 19:51:51 <mcon> Shiz: Please remember it's the first time I use Alpine.
2017-05-20 19:53:08 <mcon> Shiz: Are You suggesting I should wait for the update and drop my recompilation attempts?
2017-05-20 19:53:20 <Shiz> I'm going to push it now, actually
2017-05-20 19:53:22 <Shiz> :P
2017-05-20 19:54:06 <Shiz> mcon: yeah, it turns out we already have a working package for vpnc
2017-05-20 19:54:19 <Shiz> it was just not included in the main repositories anymore because it was bogusly flagged as unmaintained
2017-05-20 19:54:21 <Shiz> does that make sense?
2017-05-20 19:54:30 <mcon> Shiz: What does it mean to me? Should I retry a "apk add vpnc"?
2017-05-20 19:54:49 <Shiz> as soon as I push the package back to the repos, yes
2017-05-20 19:55:37 <mcon> Shiz: Ok. I get you (I think). How much time it will need to propagate?
2017-05-20 19:55:49 <Shiz> a few minutes once i push it
2017-05-20 19:56:00 <Shiz> testing it right now
2017-05-20 19:56:55 <mcon> Shiz: Ok. thanks. Just let me know when I can try. In the meantime I will revert to the snapshot before my attempts.
2017-05-20 20:26:17 <Shiz> mcon: it should be in the testing repository now
2017-05-20 20:26:21 <Shiz> make sure to enable it
2017-05-20 20:35:23 <mcon> I have "http://dl-5.alpinelinux.org/alpine/edge/testing" now, but: "ERROR: unsatisfiable constraints:  vpnc (missing):    required by: world[vpnc]"
2017-05-20 20:35:43 <scv> and you ran apk update after adding it?
2017-05-20 20:36:15 <_ikke_> You need to add your own repository
2017-05-20 20:36:33 <_ikke_> juist building a package does not make it available to apk
2017-05-20 20:39:43 <mcon> scv: yes, I did.
2017-05-20 20:40:09 <Shiz> _ikke_: i just pushed it to testing
2017-05-20 20:40:10 <mcon> _ikke_: I have no repo. Shiz did the hard work ;)
2017-05-20 20:40:11 <Shiz> so no he doesn't :P
2017-05-20 20:40:21 <Shiz> mcon: try rsync instead of dl-5
2017-05-20 20:40:26 <Shiz> in your repos file for testing
2017-05-20 20:40:30 <Shiz> it may take a bit to propagate...
2017-05-20 20:42:40 <mcon> Shiz: ok. I got it!  THANKS. Now I "just" have to make it work ;)
2017-05-20 20:42:49 <Shiz> :) good luck
2017-05-21 02:11:59 <shodan45> trying to figure out libvirtd.... anyone know if it *requires* dbus?
2017-05-21 02:15:11 <shodan45> looking thru its logs, it's not entirely clear if it can live without it
2017-05-21 04:07:18 <BitL0G1c> shodan45 - libvirt needs dbus-libs in alpine https://pkgs.alpinelinux.org/package/edge/main/x86_64/libvirt - arch has dbus as a depends too
2017-05-21 12:31:45 <helpImStuck> are there any howto's on how to user alpine xen to virtualize other os:es?
2017-05-21 18:39:38 <johefernan> Doe anybody tried Xen over Alpine?
2017-05-21 18:41:49 <_ikke_> Probably, but not me
2017-05-21 19:15:16 <darkfader> johefernan: what do you mean over alpine?
2017-05-21 19:15:31 <darkfader> i have dom0 and domU in alpine, although only one host these days
2017-05-21 19:35:31 <johefernan> darkfader: There' s a build-in support for Xen Hypervisor
2017-05-21 19:35:38 <johefernan> https://nl.alpinelinux.org/alpine/v3.5/releases/x86_64/alpine-xen-3.5.2-x86_64.iso
2017-05-21 19:36:28 <darkfader> is there
2017-05-21 19:36:31 <darkfader> ...
2017-05-21 19:36:51 <darkfader> normally i don't use the iso but install xen after successful install
2017-05-21 19:36:56 <darkfader> you can try the iso
2017-05-21 19:37:06 <Shiz> the -xen iso isn't that different from the normal one afaik
2017-05-21 19:37:25 <darkfader> i thought it boots to ram or so
2017-05-21 19:37:31 <Shiz> it just has a bunch of packages pre-installed
2017-05-21 19:37:33 <Shiz> all isos boot to ram
2017-05-21 19:37:34 <darkfader> ah
2017-05-21 19:37:35 <Shiz> :P
2017-05-21 19:37:38 <johefernan> Exactly
2017-05-21 19:37:40 <johefernan> Ok
2017-05-21 19:37:41 <darkfader> true :)
2017-05-21 19:37:49 <johefernan> Deal is I wanna try alpine
2017-05-21 19:37:54 <johefernan> And Xen
2017-05-21 19:37:59 <johefernan> 1 shot u know
2017-05-21 19:38:45 <johefernan> I got a PowerEdge R320 to play with
2017-05-21 19:38:56 <Shiz> go for it :p
2017-05-21 19:56:45 <stevenroose> Is there a way to give an OpenRC service more time to shutdown?
2017-05-21 19:57:37 <stevenroose> I have a daemon program that wen I shut it down, it takes some seconds, but rc-service restart complaints that it fails to shut down after 3 seconds or so
2017-05-21 19:57:47 <stevenroose> Can I increase that time somehow?
2017-05-21 19:59:32 <Shiz> hmm
2017-05-21 19:59:49 <stevenroose> I guess with start-stop-daemon args
2017-05-21 20:00:00 <stevenroose> Shiz, where can I find the default ones?
2017-05-21 20:00:25 <Shiz> i think you can set retry=
2017-05-21 20:00:30 <Shiz> in /etc/conf.d/<svcname>
2017-05-21 20:00:46 <Shiz> in seconds
2017-05-21 20:01:00 <Shiz>      retry            Retry schedule to use when stopping the daemon. It can
2017-05-21 20:01:02 <Shiz>                       either be a timeout in seconds or multiple
2017-05-21 20:01:04 <Shiz>                       signal/timeout pairs (like SIGTERM/5).
2017-05-21 20:01:06 <Shiz> from the openrc-run manpage
2017-05-21 20:01:08 <stevenroose> yeah start-stop-daemon has --retry
2017-05-21 20:01:16 <stevenroose> oh
2017-05-21 20:01:21 <Shiz> you don't need to set start-stop-daemon args manually
2017-05-21 20:01:22 <stevenroose> retry=[time] ?
2017-05-21 20:01:25 <Shiz> just set retry and openrc will take care of it
2017-05-21 20:01:27 <Shiz> :)
2017-05-21 20:01:35 <Shiz> yeah i believe so
2017-05-21 20:02:15 <stevenroose> Shiz, where can I find documentation on those openrc service variables?
2017-05-21 20:02:21 <Shiz> man openrc-run
2017-05-21 20:02:52 <stevenroose> awesome
2017-05-21 20:02:54 <stevenroose> thanks a lot
2017-05-21 20:03:08 <Shiz> in the openrc-doc package, fwiw
2017-05-21 20:03:10 <Shiz> np
2017-05-21 20:06:22 <stevenroose> I man in google here, don't have man installed on the machine :)
2017-05-21 20:06:42 <Shiz> yeah i usually do something similar, because lazy
2017-05-21 20:06:47 <Shiz> but local manpages may be more uptodate :p
2017-05-21 20:57:14 <shodan45> what's the difference between qemu-$arch and qemu-system-$arch?
2017-05-21 20:57:46 <shodan45> is qemu-system-$arch for VM "clients"?
2017-05-21 20:58:13 <shodan45> I just installed it, and it installed wayland(?!)
2017-05-21 20:59:19 <shodan45> and, well... this should be obvious :/
2017-05-21 20:59:34 <scv> qemu-system is full system emulation while qemu- is just processor emulation for binaries
2017-05-21 21:05:34 <Shiz> i... dont think it should install wayland?
2017-05-21 21:14:12 <shodan45> scv: that's what I assumed at first
2017-05-21 21:16:18 <shodan45> but.... https://pastebin.mozilla.org/9022324
2017-05-21 21:16:30 <shodan45> also added alsa-lib
2017-05-21 21:16:39 <shodan45> mesa-gbm
2017-05-21 21:16:45 <shodan45> .... weird
2017-05-21 21:18:20 <shodan45> looks like mesa-gbm is to blame for req'ing wayland
2017-05-21 21:20:37 <stevenroose> I'm trying to set up an OpenVPN and I get ERROR: Linux route add command failed: external program exited with error status: 2
2017-05-21 21:20:48 <stevenroose> Is this because there is a package missing maybe?
2017-05-21 21:22:54 <shodan45> stevenroose: maybe - I would guess that "route" is symlinked to busybox?
2017-05-21 21:23:07 <shodan45> I bet openvpn needs the real route
2017-05-21 21:24:07 <stevenroose> hmm
2017-05-21 21:24:30 <stevenroose> which route gives /sbin/route
2017-05-21 21:24:48 <stevenroose> route --help gives BusyBox v1.25.1 (2016-10-26 16:15:20 GMT) multi-call binary.
2017-05-21 21:24:53 <shodan45> :)
2017-05-21 21:25:09 <Shiz> ah, it's because of the SPICE stuff
2017-05-21 21:25:17 <Shiz> stevenroose: yeah you want uhm
2017-05-21 21:25:29 <ncl> net-tools?
2017-05-21 21:25:29 <Shiz> net-tools
2017-05-21 21:25:32 <Shiz> :P
2017-05-21 21:27:14 <stevenroose> net-tools package?
2017-05-21 21:27:53 <stevenroose> getting the same error, does it require a reboot?
2017-05-21 21:28:03 <ncl> no
2017-05-21 21:28:25 <ncl> try /bin/route/
2017-05-21 21:28:31 <ncl> try /bin/route
2017-05-21 21:28:56 <ncl> may need to unlink /sbin/route or fixup PATH
2017-05-21 21:28:56 <stevenroose> ncl, thing is, I'm not using it
2017-05-21 21:29:18 <shodan45> is there a doc somewhere that lists packages like net-tools and procps? stuff to make alpine more heavy-weight & more like a "normal" distro?
2017-05-21 21:29:19 <stevenroose> i just execute `sudo openvpn vpnconfig.ovpn`
2017-05-21 21:30:33 <shodan45> don't get me wrong, I love alpine's light-weight-ness :)
2017-05-21 21:30:54 <shodan45> but I'm used to centos :)
2017-05-21 21:32:34 <stevenroose> shodan45, there are separate installation "bundles" iirc
2017-05-21 21:32:56 <shodan45> stevenroose: you mean ISOs?
2017-05-21 21:33:10 <shodan45> or like a meta-package?
2017-05-21 21:33:13 <stevenroose> shodan45, uhu, from minimal to somewhat complete distro :p
2017-05-21 21:34:38 <stevenroose> https://alpinelinux.org/downloads/
2017-05-21 21:38:19 <stevenroose> shodan45, if openvpn needs a different route, how can that be fixed?
2017-05-21 21:38:52 <stevenroose> lrwxrwxrwx    1 root     root          12 Apr 12 18:01 /sbin/route -> /bin/busybox
2017-05-21 21:39:06 <stevenroose> I installed net-tools
2017-05-21 21:40:11 <scv> fwiw /sbin/route has been deprecated for like ... 15 years?
2017-05-21 21:40:48 <shodan45> stevenroose: just rm /sbin/route.... but busybox's package will re-add it later..... hmm :/
2017-05-21 21:41:26 <shodan45> IIRC I ran into this problem with something else busybox does
2017-05-21 21:41:35 <shodan45> ohh... it was top
2017-05-21 21:42:29 <stevenroose> it's weird that I cannot find anything about this on google, no?
2017-05-21 21:42:37 <stevenroose> scv, what do you mean with deprecated?
2017-05-21 21:43:16 <stevenroose> There is no manual route command in the OpenVPN file, so it must be one of the standard procedures that openvpn does..
2017-05-21 21:43:32 <stevenroose> I have no prior experience with setting up a vpn in linux
2017-05-21 21:45:11 <Shiz> then openvpn uses deprecated tools
2017-05-21 21:45:13 <Shiz> :P
2017-05-21 21:45:21 <Shiz> # route has been superceded by # ip route for a good 10 years now
2017-05-21 21:45:27 <Shiz> but yeah, it should still work
2017-05-21 21:45:29 <shodan45> libvirtd's log file uses UTC, not the system time zone. cute.
2017-05-21 21:46:02 <Shiz> hmm
2017-05-21 21:46:18 <Shiz> it seems net-tools install /bin/route which is then not detected by busybox postinstall as overriding /sbin/route
2017-05-21 21:46:20 <Shiz> this needs fixing
2017-05-21 21:47:40 <Shiz> stevenroose: for now i would manually rm /sbin/route
2017-05-21 21:47:43 <Shiz> it will work
2017-05-21 21:47:57 <shodan45> Shiz: like I was saying earlier, the same thing happens with top - procps adds /bin/top, but /usr/bin/top still exists & points to busybox
2017-05-21 21:48:13 <scv> yeah there's quite a few random packages that are like that
2017-05-21 21:48:45 <Shiz> did anyone have that curl oneliner to query the alpine web api for which package a file belongs to?
2017-05-21 21:48:49 <shodan45> deleting the /usr/bin/top symlink only works until the busybox package's script re-runs
2017-05-21 21:49:16 <shodan45> Shiz: such a thing exists? I want that too :)
2017-05-21 21:49:31 <Shiz> someone posted a curl+grep a while back
2017-05-21 21:49:32 <shodan45> heck, one could argue it should be part of apk
2017-05-21 21:49:43 <Shiz> it can't be part of apk right now
2017-05-21 21:49:51 <Shiz> APKINDEX does not have a list of contents for all packages
2017-05-21 21:49:56 <Shiz> pkgs.a.o generates this manually
2017-05-21 21:50:35 <Shiz> and including full file lists in APKINDEX would bloat it severely...
2017-05-21 21:51:06 <Shiz> found it: 2017-04-30 22:07:47     qman__  armin: FILE="host"; curl -s "https://pkgs.alpinelinux.org/contents?file=$FILE" | grep package | cut -d\> -f3 | cut -d\< -f1 | uniq
2017-05-21 21:51:55 <shodan45> 
ACTION steals that

2017-05-21 21:52:45 <xentec> is out there somewhere a doc about how busybox handles network/interfaces in detail?
2017-05-21 21:57:26 <Shiz> xentec: it's similar to debian's config: the core of it is the ifup utility
2017-05-21 21:57:56 <stevenroose> Shiz, I get the same error
2017-05-21 21:58:05 <stevenroose> and route now is /bin/route
2017-05-21 21:58:27 <xentec> Shiz: I've already guessed that :). my question is, how far the config is supported by busybox
2017-05-21 21:58:27 <Shiz> i would try to see if openvpn logs the route output somewhere
2017-05-21 21:58:33 <stevenroose> It looks like it's using ip though
2017-05-21 21:58:46 <Shiz> stevenroose: you can try installing iproute2
2017-05-21 21:58:48 <Shiz> :P
2017-05-21 21:59:16 <stevenroose> Shiz, I have that one, apparently
2017-05-21 21:59:30 <stevenroose> I also did the modprobe tun thing that the wiki describes
2017-05-21 22:00:18 <stevenroose> this is the whole output
2017-05-21 22:00:18 <stevenroose> https://gist.github.com/stevenroose/f70c106b771902a407a36ce0a3210186
2017-05-21 22:00:22 <stevenroose> maybe I'm overseeing things
2017-05-21 22:03:20 <Shiz> i found a bunch of mismatches, oh dear
2017-05-21 22:03:25 <Shiz> stevenroose: hmm
2017-05-21 22:04:44 <Shiz> okay so it seems that addr add command fails
2017-05-21 22:05:17 <Shiz> or does it
2017-05-21 22:05:19 <Shiz> no, it doesn't
2017-05-21 22:06:02 <stevenroose> :p yeah it doesnt seem to be fully synced
2017-05-21 22:06:31 <Shiz> i'd run openvpn in debug mode
2017-05-21 22:06:41 <Shiz> that should make it print D_ROUTE messages that tell you the ip route command it tried to invoke
2017-05-21 22:07:55 <Shiz> --verb 3
2017-05-21 22:07:59 <stevenroose> grep also seems to be symlinked to busybox and doesnt allow grep -5
2017-05-21 22:09:20 <Shiz> that's probably because you don't have the grep package
2017-05-21 22:09:26 <Shiz> (what does grep -5 even do...?)
2017-05-21 22:10:54 <stevenroose> its the same as -C 5
2017-05-21 22:10:59 <stevenroose> context above and below match
2017-05-21 22:11:48 <Shiz> why not just do -C 5 then
2017-05-21 22:11:49 <Shiz> :P
2017-05-21 22:12:38 <stevenroose> ughh openvpn --verb 3 (specify verbosity level) complains "Options error: You must define TUN/TAP device (--dev)"
2017-05-21 22:12:40 <stevenroose> pff
2017-05-21 22:12:52 <stevenroose> yeah did -C 5 :p just used to -5, was curious why it didnt work
2017-05-21 22:14:07 <Shiz> maybe put 'verb 3' in your conf file
2017-05-21 22:15:30 <xentec> I wonder: shouldn't all init scripts which 'need net' also 'need dns'?
2017-05-21 22:15:58 <stevenroose> https://gist.github.com/stevenroose/2b3510774b0839dcbe26af8afe094c1e
2017-05-21 22:17:15 <Shiz> well, there's the route command that fails at least
2017-05-21 22:17:23 <Shiz> yo ucan apk del net-tools btw, it's not relevant
2017-05-21 22:19:34 <stevenroose> thanks
2017-05-21 22:19:59 <Shiz> you can try to re-execute the commands it executes in order
2017-05-21 22:20:04 <Shiz> and then get what the error message it gives you was
2017-05-21 22:29:19 <stevenroose> Shiz, the ones with /sbin/ip, right?
2017-05-21 22:29:27 <Shiz> yus
2017-05-21 22:30:39 <stevenroose> Cannot find device "tun0"
2017-05-21 22:30:49 <stevenroose> for first one /sbin/ip link set dev tun0 up mtu 1500
2017-05-21 22:31:00 <stevenroose> haha, I guess openvpn does some preparation before those commands
2017-05-21 22:32:08 <Shiz> yeah it does create the tun device first
2017-05-21 22:32:13 <Shiz> but that should be easy
2017-05-21 22:32:56 <Shiz> ip tuntap add mode tun dev tun0
2017-05-21 22:32:57 <Shiz> :)
2017-05-21 23:14:26 <stevenroose> oh missed your message
2017-05-21 23:15:27 <stevenroose> Shiz, RTNETLINK answers: File exists
2017-05-21 23:15:32 <stevenroose> that's what I get
2017-05-21 23:15:49 <stevenroose> I saw that before in my log output, I guess tee only forwards stdout to the file instead of both stdout and stderr
2017-05-21 23:15:58 <stevenroose> can you make anything of that?
2017-05-21 23:16:45 <stevenroose> "Because it's already there - this is what RTNETLINK answers: File exists is telling you."
2017-05-21 23:16:57 <Shiz> on the ip tuntap command?
2017-05-21 23:17:10 <stevenroose> no the ones exactly above the error line
2017-05-21 23:17:15 <stevenroose> https://gist.github.com/stevenroose/2b3510774b0839dcbe26af8afe094c1e#file-gistfile1-txt-L42
2017-05-21 23:17:29 <stevenroose> (do I have to undo those commands after doing them manually?)
2017-05-21 23:17:31 <Shiz> that's odd
2017-05-21 23:17:35 <Shiz> the other commands worked?
2017-05-21 23:17:39 <stevenroose> yes
2017-05-21 23:17:44 <stevenroose> well, no output, so I guess so
2017-05-21 23:17:48 <Shiz> yes
2017-05-21 23:17:50 <Shiz> can you do
2017-05-21 23:18:01 <Shiz> ip route list
2017-05-21 23:19:22 <stevenroose> ip route lsit
2017-05-21 23:19:23 <stevenroose> https://gist.github.com/stevenroose/2b3510774b0839dcbe26af8afe094c1e#file-gistfile2-txt
2017-05-21 23:19:30 <stevenroose> (how do I undo those routes?)
2017-05-21 23:21:52 <Shiz> just execute them in reverse order with s/add/del/
2017-05-21 23:24:52 <Shiz> seems like it tries to add duplicate routes
2017-05-21 23:25:47 <stevenroose> yeah indeed
2017-05-21 23:25:56 <stevenroose> google is not very helpful with that error message
2017-05-21 23:28:22 <stevenroose> does this make any sense to you? "yours problem - routes. the simplest method to send all traffic via you VPN gateway - add to the client config: redirect-gateway def1"
2017-05-21 23:30:24 <scv> well
2017-05-21 23:30:37 <scv> the first issue you have that's preventing communication is cipher/hash mismatch
2017-05-21 23:30:42 <scv> Mon May 22 00:14:55 2017 WARNING: 'cipher' is used inconsistently, local='cipher BF-CBC', remote='cipher AES-256-CBC'
2017-05-21 23:31:06 <scv> cipher auth and keysize need to be set properly
2017-05-21 23:31:27 <Shiz> it seems the vpn config is a bit wonkey, yeah
2017-05-21 23:31:41 <ncl> is that
2017-05-21 23:31:43 <ncl> blowfish cbc?
2017-05-21 23:31:49 <Shiz> yes
2017-05-21 23:32:51 <scv> that's the default in openvpn iirc
2017-05-21 23:33:08 <stevenroose> would the config file help?
2017-05-21 23:33:11 <stevenroose> I'll add it to the gist
2017-05-21 23:33:17 <scv> you're missing lines in the config file
2017-05-21 23:33:25 <scv> namely cipher, auth and keysize
2017-05-21 23:33:31 <stevenroose> I downloaded it from my VPN provider
2017-05-21 23:33:36 <stevenroose> but it's an amateur one
2017-05-21 23:33:51 <scv> the warnings in your debug log tell you what options to configure
2017-05-21 23:34:33 <stevenroose> https://gist.github.com/stevenroose/2b3510774b0839dcbe26af8afe094c1e#file-neutrinet-ovpn
2017-05-21 23:34:44 <stevenroose> scv but those are warnings, no?
2017-05-21 23:34:54 <scv> yes?
2017-05-21 23:35:09 <scv> you can't communicate if each end is using a different cipher though
2017-05-21 23:35:24 <stevenroose> isn't the definition of a warning that it's bad but should not hinder further execution? :)
2017-05-21 23:35:38 <scv> it doesn't hinder further execution
2017-05-21 23:35:41 <scv> you're just not able to send any data :p
2017-05-21 23:36:13 <stevenroose> scv, makes sense :D
2017-05-21 23:36:20 <stevenroose> I asked the provider
2017-05-21 23:36:31 <scv> there's no cipher/auth lines in your config at all
2017-05-21 23:36:41 <scv> so it'll default to blowfish and sha1
2017-05-21 23:36:51 <scv> which is incorrect, the correct options are listed in those warnings
2017-05-21 23:40:14 <stevenroose> that might make sense
2017-05-21 23:40:24 <stevenroose> so the mentioned error might not be the cause of it not working?
2017-05-21 23:40:39 <scv> it isn't working because the cipher and auth types are mismatched
2017-05-21 23:40:42 <stevenroose> I sent an email and IRC message to the maintainers of the vpn, I guess they'll have a look at it
2017-05-21 23:40:47 <scv> you'll get a connection with zero traffic passing
2017-05-21 23:40:47 <stevenroose> many thanks for pointing that out though
2017-05-21 23:41:11 <stevenroose> scv, you say the cipher conf values that should be specified are mentioned in the warnings..
2017-05-21 23:41:20 <stevenroose> why doesn't openvpn use those then?
2017-05-21 23:42:01 <scv> because they aren't specified in the config
2017-05-21 23:42:12 <scv> if it isn't specified it defaults to blowfish and sha1
2017-05-21 23:42:21 <scv> defaults are still considered configured options
2017-05-21 23:42:28 <scv> it isn't just going to override what's configured
2017-05-21 23:42:56 <stevenroose> oh
2017-05-21 23:43:28 <stevenroose> well, I have to go to bed now, I'll try to set the cipher details tomorrow
2017-05-21 23:43:29 <stevenroose> should do
2017-05-21 23:43:34 <stevenroose> thanks a lot folks!!
2017-05-21 23:43:37 <stevenroose> you are awesome!
2017-05-22 00:00:20 <Classsic> hi, newbie to alpine here...
2017-05-22 00:00:41 <Shiz> welcome
2017-05-22 00:01:00 <Classsic> i need compile nginx with libaio support, but get this error : ./configure: no supported file AIO was found
2017-05-22 00:01:13 <Classsic> already install libaio-dev
2017-05-22 00:01:29 <Classsic> thanks :-)
2017-05-22 00:02:24 <Classsic> i good place for this question, or have to move to alpine-devel?
2017-05-22 00:02:58 <Shiz> no, here is fine
2017-05-22 00:03:03 <Shiz> try installing the linux-headers package
2017-05-22 00:04:57 <tmh1999> nginx already compiled with aio ? https://git.alpinelinux.org/cgit/aports/tree/main/nginx/APKBUILD#n145
2017-05-22 00:05:32 <Classsic> no, I need compile with some extra modules, with rtmp, and kaltura vod
2017-05-22 00:05:44 <Shiz> we also ship nginx-rtmp
2017-05-22 00:05:46 <Shiz> :P
2017-05-22 00:06:11 <Shiz> sorry
2017-05-22 00:06:14 <Shiz> nginx-mod-rtmp
2017-05-22 00:06:19 <Classsic> yes, I see but I modified specific module for my needs
2017-05-22 00:06:37 <Shiz> anyway, I'd suggest to just use abuild to compile nginx, and do your modifications in the abuild
2017-05-22 00:06:43 <Shiz> that way you won't have issues with dependencie s;p
2017-05-22 00:06:49 <Shiz> ;p *
2017-05-22 00:07:04 <Classsic> yes, but need more control of all configs.
2017-05-22 00:07:49 <Shiz> you can change them in the abuild, or am I missing something specific?
2017-05-22 00:07:49 <Classsic> Is pretty nice project, more flexible than busybox
2017-05-22 00:09:03 <Classsic> maybe, I´m so new to alpine.
2017-05-22 00:09:50 <Shiz> basically my proposal is since the APKBUILD recipe contains all the necessary modifications/dependencies already, it may be easier for you to modify it to your needs and use abuild to build your nginx
2017-05-22 00:09:59 <Classsic> after install headers, not recognized openssl
2017-05-22 00:10:03 <Shiz> instead of a manual source compile
2017-05-22 00:11:23 <Classsic> ok I will tryit
2017-05-22 00:11:34 <Classsic> https://wiki.alpinelinux.org/wiki/Creating_an_Alpine_package#Requirements is ok?
2017-05-22 00:12:33 <Shiz> yeah that'll tell you how to setup your system for building packages
2017-05-22 00:12:41 <Shiz> our recipe for nginx is located in the aports git repo
2017-05-22 00:13:33 <Classsic> ok, a lot to read, but if you thinks is easier than my way, let's tryit.
2017-05-22 00:29:30 <Classsic> add linux-headers and works!
2017-05-22 00:29:54 <Classsic> thanks Shiz
2017-05-22 00:45:52 <Shiz> np
2017-05-22 01:45:08 <Classsic> hi, if I get this error : "ERROR: unsatisfiable constraints:" is repo dead?
2017-05-22 01:45:20 <Classsic> I try to install tinc-pre package.
2017-05-22 01:45:53 <Xe> Classsic: what version of alpine?
2017-05-22 01:48:34 <Classsic> 3.5
2017-05-22 01:48:45 <Shiz> it just means the package doesn't exist
2017-05-22 01:48:47 <Shiz> ususally
2017-05-22 01:48:57 <Shiz> paste your full error
2017-05-22 01:49:04 <Shiz> if it says '[missing]' the package doesn't exist
2017-05-22 01:50:39 <Classsic> ERROR: unsatisfiable constraints:   tinc-pre (missing):     required by: world[tinc-pre]
2017-05-22 01:50:55 <Classsic> http://pkgs.alpinelinux.org/package/edge/community/x86_64/tinc-pre
2017-05-22 01:51:17 <Classsic> http://dl-3.alpinelinux.org/alpine/edge/main
2017-05-22 01:51:21 <Classsic> this is my repo
2017-05-22 01:52:13 <xentec> did you run 'apk update'?
2017-05-22 01:54:32 <Classsic> I launch apk --update package
2017-05-22 01:55:44 <Shiz> well
2017-05-22 01:55:59 <Shiz> the url you linked said in which repo tinc-pre is
2017-05-22 01:56:01 <Shiz> and it's not main :P
2017-05-22 01:58:41 <Classsic> i'm confused,this is my repo file:http://dl-cdn.alpinelinux.org/alpine/v3.5/main http://dl-cdn.alpinelinux.org/alpine/v3.5/community http://dl-5.alpinelinux.org/alpine/v3.5/main http://dl-5.alpinelinux.org/alpine/v3.5/community http://dl-cdn.alpinelinux.org/alpine/edge/community
2017-05-22 01:59:21 <Classsic> apk search tinc-pre --------->tinc-pre-1.1.14-r1
2017-05-22 01:59:33 <xentec> now that you have community on edge, you should be able to install  tinc-pre
2017-05-22 01:59:48 <Classsic> apk add tinc-pre-1.1.14-r1------------------>ERROR: unsatisfiable constraints:   tinc-pre-1.1.14-r1 (missing):     required by: world[tinc-pre-1.1.14-r1]
2017-05-22 01:59:58 <scv> just do apk add tinc-pre
2017-05-22 02:00:33 <Shiz> ^
2017-05-22 02:00:57 <Classsic> apk add tinc-pre ------------------>ERROR: unsatisfiable constraints:   so:libcrypto.so.41 (missing):     required by: tinc-pre-1.1.14-r1[so:libcrypto.so.41]
2017-05-22 02:01:11 <xentec> you need main on edge too
2017-05-22 02:01:18 <Xe> you're mixing edge and a release
2017-05-22 02:01:25 <Xe> edge is the rolling release "git head" branch of alpine
2017-05-22 02:01:57 <Classsic> so....how can install this package, or have to build from source?
2017-05-22 02:02:25 <Shiz> you have to upgrade your system to edge entirely
2017-05-22 02:02:29 <Shiz> don't mix 3.5 and edge
2017-05-22 02:03:10 <Classsic> ok, I see. there is a command to do that? I`m running inside docker
2017-05-22 02:03:20 <Xe> pull from alpine:edge
2017-05-22 02:03:33 <Shiz> ^ then there's no need to edit your repo file either
2017-05-22 02:03:39 <Shiz> the edge tag will always be the latest edge
2017-05-22 02:04:00 <Shiz> (of note: we are releasing 3.6 soon-ish, which will include tinc-pre: when that happens, you can switch your dockerfile back to alpine:3.6)
2017-05-22 02:04:02 <Xe> (just make sure to rebuild your images at least once a month to avoid bitrot)
2017-05-22 02:05:00 <Shiz> edge is the latest development version of alpine: you shouldn't mix stable and edge as it will give you wierd errors like that
2017-05-22 02:09:11 <Classsic> ok, so I have to wait to 3.6 or change alpine:edge, right?
2017-05-22 02:09:35 <Shiz> correct
2017-05-22 02:19:34 <Classsic> perfect! I run docker run --name alpine -ti alpine:edge apk add --update --no-cache tinc-pre.
2017-05-22 02:19:42 <Classsic> and work like a charm ;-)
2017-05-22 02:20:02 <Classsic> thanks.
2017-05-22 02:21:38 <Shiz> when doing a package search, it's good to note on which versions/repos the package actually is ;)
2017-05-22 02:33:38 <Classsic> how I know from wich repo is a package?
2017-05-22 02:34:53 <Shiz> it tells you in the search UI
2017-05-22 02:34:58 <Shiz> on pkgs.alpinelinux.org
2017-05-22 02:35:10 <Shiz> http://pkgs.alpinelinux.org/packages?name=tinc-pre&branch=&repo=&arch=&maintainer=
2017-05-22 02:35:15 <Shiz> note the 'branch' and 'repository' labels
2017-05-22 02:48:49 <Classsic> yes, thanks
2017-05-22 02:49:04 <Classsic> I will try to move all my system to alpine
2017-05-22 02:49:11 <Classsic> is exact what we need
2017-05-22 03:06:20 <Shiz> :)
2017-05-22 03:15:58 <Classsic> exists something like crontab for exec any script on boot?
2017-05-22 03:18:39 <ncl> rc.local
2017-05-22 03:19:19 <Shiz> yep, rc.local
2017-05-22 03:19:43 <Shiz> throw a file in there ending in start and it wil lget executed on boot
2017-05-22 03:19:46 <Shiz> that's /etc/local.d
2017-05-22 03:19:55 <Shiz> ending in .start *
2017-05-22 03:20:15 <Shiz> as long as you add the 'local' service to boot: # rc-update add local default
2017-05-22 03:22:12 <Classsic> perfect, it works.
2017-05-22 06:34:04 <ScrumpyJack> morning. Happy Monday
2017-05-22 07:04:03 <nindustries> Hi, where is php71 in the repos?
2017-05-22 07:04:10 <nindustries> I enabled edge
2017-05-22 07:08:10 <_ikke_> `It's just called php7
2017-05-22 07:08:17 <_ikke_> in edge/community
2017-05-22 07:10:27 <nindustries> Ah, I was looking in main. Thanks
2017-05-22 07:53:11 <AlexIncogito> Classsic: Just curious, what motivated the use of tinc-pre instead of a classic solution such as openvpn or IPSec ?
2017-05-22 07:54:45 <scv> most people i hear using tinc for easy 1500 mtu in-tunnel
2017-05-22 07:55:09 <scv> not sure what else is good about it, never personally used
2017-05-22 07:57:21 <AlexIncogito> scv: I see, thanks for the input
2017-05-22 07:58:08 <clandmeter> AlexIncogito, it supports automatic routing.
2017-05-22 07:58:20 <clandmeter> between different spokes
2017-05-22 07:59:51 <AlexIncogito> So basically, it is easier on the config side
2017-05-22 08:00:06 <clandmeter> yes
2017-05-22 08:00:17 <clandmeter> with ipsec you could use dmvpn
2017-05-22 08:01:14 <clandmeter> not sure which tools are available for openvpn
2017-05-22 08:05:18 <AlexIncogito> Interesting, I had never heard of dynamic multipoint VPN. It appears to pack a lot of advantages compared with traditional client-server VPN approach
2017-05-22 08:11:32 <clandmeter> AlexIncogito, and the author is a member of alpine :)
2017-05-22 08:16:10 <IcePic> openvpn has an on/off switch to allow or disallow routing between established tunnels
2017-05-22 08:26:11 <clandmeter> openvpn doesnt handle dynamic routing
2017-05-22 08:26:24 <scv> it can with tap
2017-05-22 08:27:21 <clandmeter> a good read is https://wiki.alpinelinux.org/wiki/Dynamic_Multipoint_VPN_(DMVPN)
2017-05-22 14:10:44 <mnemoc> hi, I use alpine as builder for golang, unfortunatelly even for an empty  main .go it's using cgo and needing libc.musl-x86_64.so.1 to run. is this known? fixable? I `echo "@edge http://dl-cdn.alpinelinux.org/alpine/edge/main" >> /etc/apk/repositories` but go@edge is still pointing to the same old build (1.7.3-r0). any pointer on what I'm doing wrong?
2017-05-22 14:39:57 <mnemoc> even when cross-compiling it uses cgo now :(
2017-05-22 14:40:57 <Shiz> can't you pass --ldflags '-extldflags "-static"' to go build?
2017-05-22 14:41:02 <Shiz> that'll just statically link in the libc
2017-05-22 14:41:17 <Shiz> also, two things
2017-05-22 14:41:24 <Shiz> 1) go is in the community repo, not the main repo
2017-05-22 14:42:06 <Shiz> 2) if you plan to use the main or community repo from edge, it's best to just base off edge entirely -- FROM alpine:edge
2017-05-22 14:42:17 <Shiz> mixing stable and edge for those two repos is not the best idea
2017-05-22 14:44:04 <mnemoc> thanks, I'll change to FROM alpine:edge  and try again because --ldflags '-extldflags "-static"' is not working for me
2017-05-22 14:44:18 <Shiz> hmm
2017-05-22 14:44:25 <Shiz> that /should/ work in my experience
2017-05-22 14:44:51 <Classsic> hi, I try run docker on alpine host, but get segmentation fault when execute nodejs
2017-05-22 14:45:54 <Classsic> try with different versions of nodejs, and this docker run ok in debian host.
2017-05-22 14:46:20 <Shiz> mnemoc: / # go build --ldflags '-extldflags "-static"' t.go
2017-05-22 14:46:27 <Shiz> this worked for me just now in a fresh edge container
2017-05-22 14:46:30 <Shiz> outputs a static binary
2017-05-22 14:46:35 <Shiz> Classsic: nodejs from the repos?
2017-05-22 14:47:40 <Classsic> nope, I have a docker debian based, with nodejs install inside this docker.
2017-05-22 14:48:25 <Classsic> alpine host-------->docker-debian------->nodejs-
2017-05-22 14:48:31 <Shiz> ah
2017-05-22 14:48:36 <Shiz> i have a feeling what's going on then
2017-05-22 14:49:19 <Shiz> the alpine kernel is hardened and will kill binaries that are behaving naughtily, like having a writable and executable mapping in memory at the same time
2017-05-22 14:49:31 <Shiz> sometimes this is needed, so there is a mechanism to mark binaries as safe
2017-05-22 14:49:48 <Classsic> ok, is there a way to fixit?
2017-05-22 14:49:51 <Shiz> but debian doesn't apply this marking to their binaries as they don't (officially supported at least) ship the same hardened kernel
2017-05-22 14:49:57 <Shiz> we do, of course
2017-05-22 14:50:04 <Shiz> yeah, there's two things you can do
2017-05-22 14:50:06 <Shiz> well, three
2017-05-22 14:50:27 <Shiz> 1) make all containers you run alpine-based with node.js, as we apply those markings to the binaries we ship
2017-05-22 14:50:38 <mnemoc> Shiz: thanks! works :)
2017-05-22 14:50:55 <mnemoc> using alpine:latest didn't
2017-05-22 14:51:01 <Shiz> 2) inside of your Dockerfile, manually mark the binaries yourself (needs the paxctl package, and an invocation like: paxctl -m /path/to/nodejs)
2017-05-22 14:51:04 <Shiz> or
2017-05-22 14:51:10 <Shiz> 3) switch your alpine host kernel to the vanilla variant
2017-05-22 14:51:23 <Shiz> I personally recommend either of the former two if it's possible
2017-05-22 14:52:47 <Shiz> should write a FAQ entry about this
2017-05-22 14:54:20 <mnemoc> Shiz: btw, cross-compiling is broken. GOARCH=arm GOARM=7 leads to: gcc: error: unrecognized command line option '-marm'; did you mean '-mabm'?"   is it possible to use go's own compiler instead of gcc?
2017-05-22 14:54:52 <Classsic> paxctl -m /usr/bin/node -----> file /usr/bin/node does not have a PT_PAX_FLAGS program header, try conversion
2017-05-22 14:55:02 <Classsic> get the same results.
2017-05-22 14:55:23 <IcePic> mnemoc: almost smells like you got the wrong gcc, and the native doesnt know about -m<arm stuff>
2017-05-22 14:55:37 <Shiz> Classsic: ah, add -c too
2017-05-22 14:55:39 <Shiz> paxctl -cm
2017-05-22 14:56:47 <Classsic> great!
2017-05-22 14:57:10 <Classsic> its work, is this stable, and safe?
2017-05-22 14:57:31 <Shiz> yes, it should pose no further problems
2017-05-22 14:57:37 <Shiz> and safer than running on a vanilla kernel ;)
2017-05-22 14:58:03 <Shiz> https://git.alpinelinux.org/cgit/aports/tree/community/nodejs-current/APKBUILD#n44
2017-05-22 14:58:09 <Shiz> as you can see, we apply the same marking to our packages
2017-05-22 14:58:17 <Shiz> line 53, sorry
2017-05-22 14:58:31 <Shiz> using a different tool, but it applies the same marking
2017-05-22 15:00:47 <Classsic> perfect, my vbox machine goin down, from 2.1gb to 350mb.
2017-05-22 15:00:52 <Classsic> :-)
2017-05-22 15:01:21 <Shiz> :)
2017-05-22 15:10:28 <mnemoc> IcePic: http://sprunge.us/NbVj :(
2017-05-22 15:11:35 <Classsic> thanks.
2017-05-22 15:18:24 <IcePic> mnemoc: wonder if that last -extld=gcc should have been with a full path to the cross-arm gcc?
2017-05-22 15:18:54 <IcePic> for the record, I havent ever crosscompiled like this on alpine, just thinking out loud
2017-05-22 15:19:24 <Shiz> yes, it would be
2017-05-22 15:19:30 <Shiz> mnemoc: oh that reminds me
2017-05-22 15:19:39 <Shiz> you should probably install the relevant go-cross-* package?
2017-05-22 15:19:55 <Shiz> oh, but that's only for other OSes -- nvm
2017-05-22 15:20:40 <Shiz> mnemoc: we don't psas anything in specific to make go not use the native cc, for what it's worth...
2017-05-22 15:20:44 <Shiz> i wonder what the issue would be
2017-05-22 15:20:54 <Shiz> sorry, s/native/integrated/
2017-05-22 15:30:39 <Classsic> hi again, another little problem, I run docker with hdparm inside, with --privileged flag, but get when execute "hdparm /dev/sda"----------> /dev/sda: Operation not permitted
2017-05-22 15:37:40 <Shiz> hmm
2017-05-22 15:38:12 <Shiz> check your dmesg
2017-05-22 15:38:34 <Shiz> it may be GRKERNSEC_CHROOT_CAPS
2017-05-22 15:40:25 <Classsic> use of CAP_SYS_RAWIO in chroot denied for /sbin/hdparm[hdparm:4828
2017-05-22 15:41:35 <Shiz> there we go
2017-05-22 15:41:40 <Shiz> easy fix, I think
2017-05-22 15:42:03 <Classsic> from run command?
2017-05-22 15:42:28 <Shiz> nah, you need to fix this on the host
2017-05-22 15:42:39 <Shiz> this is another restriction by the hardened kernel, but one that can be disabled at runtime
2017-05-22 15:43:05 <Shiz> (a quite logical restriction imo --- usually you don't want chroots/containers accessing your raw original disk)
2017-05-22 15:43:25 <mnemoc> IcePic: I would have expected -extld=arm-blah-eabi-gcc
2017-05-22 15:43:39 <Shiz> Classsic: try running # sysctl -w kernel.grsecurity.chroot_caps=0   on your host
2017-05-22 15:43:45 <Shiz> see if that fixes it
2017-05-22 15:43:46 <Classsic> yeap, that have sense
2017-05-22 15:44:08 <mnemoc> what package provides the cross compiler?
2017-05-22 15:44:29 <mnemoc> gcc for arm etc
2017-05-22 15:44:31 <Classsic> it works, thanks.
2017-05-22 15:44:34 <Shiz> if it does, do "echo kernel.grsecurity.chroot_caps=0 > /etc/sysctl.d/disable-chroot-caps.conf"
2017-05-22 15:44:40 <Classsic> this is persistent?
2017-05-22 15:44:43 <Shiz> and make sure the sysctl service is enabled at boot
2017-05-22 15:44:49 <Shiz> what i just told you makes it persistent
2017-05-22 15:44:51 <Shiz> :)
2017-05-22 15:45:23 <Shiz> mnemoc: i sadly don't think we package cross-compilers as packages right now
2017-05-22 15:45:44 <Classsic> yes, I try now
2017-05-22 15:45:59 <mnemoc> Shiz: fair enough.. so I have to make it not-use gcc
2017-05-22 15:46:35 <Xe> mnemoc: i think the best alpine has atm is using Go with `CGO_ENABLED=0 GOARCH=arm go build`
2017-05-22 15:46:35 <Shiz> either that, or use something like musl-cross-make to make your own cross-gcc
2017-05-22 15:46:37 <Shiz> :P
2017-05-22 15:46:49 <Xe> the `CGO_ENABLED=0` part is the critical one
2017-05-22 15:46:50 <Shiz> oh, if CGO_ENABLED=0 works, all the easier
2017-05-22 15:46:58 <mnemoc> it's ignored
2017-05-22 15:47:01 <Xe> also -tags netgo
2017-05-22 15:47:29 <Xe> mnemoc: what package are you trying to x-compile for arm?
2017-05-22 15:47:42 <Xe> i have some free time and an alpine install that I know go works on
2017-05-22 15:47:44 <mnemoc> currently, an empty main()
2017-05-22 15:49:31 <Xe> https://gist.githubusercontent.com/Xe/21ff5b7f9cd7d7e70204727b9bf3605a/raw/c4d69552303123987f532f99e4af90a19c848755/gistfile1.txt works for me
2017-05-22 15:49:38 <Xe> go version go1.8.1 linux/amd64
2017-05-22 15:52:34 <mnemoc> using gcc or go's linker?
2017-05-22 15:52:55 <Xe> one sec lemme get a full debug output of the build
2017-05-22 15:53:21 <mnemoc> env GOPATH=/home/amery/projects/go GOARCH=arm GOARM=7 CGO_ENABLED=0 go build  t.go     ----> gcc: error: unrecognized command line option '-marm'; did you mean '-mabm'?
2017-05-22 15:53:34 <Shiz> i'm getting the same issue as mnemoc in a fresh container fwiw
2017-05-22 15:53:39 <mnemoc> \o/
2017-05-22 15:53:49 <mnemoc> :)
2017-05-22 15:53:52 <Shiz> not sure if that should be a \o/
2017-05-22 15:53:54 <Shiz> :p
2017-05-22 15:53:57 <Xe> oh
2017-05-22 15:54:03 <Xe> i think i found the difference
2017-05-22 15:54:08 <mnemoc> I'm glad you could reproduce it
2017-05-22 15:54:09 <Xe> i'm using Go that's linked against glibc
2017-05-22 15:54:25 <mnemoc> that's cheating
2017-05-22 15:54:32 <Xe> https://gist.github.com/Xe/211ba82e3f0058be24d0451f07696205
2017-05-22 15:54:49 <Xe> will go build without the alpine patches?
2017-05-22 15:55:07 <Shiz> https://txt.shiz.me/N2EzN2MwNz
2017-05-22 15:55:32 <Shiz> yes it will build
2017-05-22 15:55:37 <Shiz> but not work for dynamically linked binaries
2017-05-22 15:55:44 <Shiz> and will have no PIE
2017-05-22 15:56:01 <Xe> is this a musl problem or an upstream go problem?
2017-05-22 15:56:03 <mnemoc> could the pie integration be breaking it?
2017-05-22 15:57:29 <Shiz> does go even have an internal linker...?
2017-05-22 15:58:01 <mnemoc> yes
2017-05-22 15:58:59 <Shiz> the pie integration does nothing special, so i don't think that's it
2017-05-22 15:59:12 <Shiz> but maybe
2017-05-22 16:00:17 <Shiz> mnemoc: it seems like it wants to build the entire stdlib, which includes the cgo parts
2017-05-22 16:00:25 <Shiz> so it will always use an external linker
2017-05-22 16:00:53 <mnemoc> on ubuntu I get -extld=gcc -buildmode=exe  and succeeds. static arm binary
2017-05-22 16:01:56 <Shiz> welp
2017-05-22 16:01:59 <Shiz> -buildmode=exe does make it work
2017-05-22 16:02:01 <Shiz> on my box
2017-05-22 16:02:21 <Shiz> https://txt.shiz.me/NWM3YTkzYT
2017-05-22 16:02:33 <Shiz> / # file t
2017-05-22 16:02:35 <Shiz> t: ELF 32-bit LSB executable, ARM, EABI5 version 1 (SYSV), statically linked, not stripped, with debug_info
2017-05-22 16:04:56 <Shiz> looking at the internal ld config
2017-05-22 16:05:05 <Shiz> but i suspect the default go linker doesn't like PIE
2017-05-22 16:05:33 <Shiz> / Internal linking does not support TLS_IE.
2017-05-22 16:05:35 <Shiz> return true, "buildmode=pie"
2017-05-22 16:05:37 <Shiz> there we go
2017-05-22 16:05:43 <Shiz> from the go source code
2017-05-22 16:06:29 <Shiz> i wonder if this is relevant for us
2017-05-22 16:08:26 <mnemoc> but we are using the external linker
2017-05-22 16:08:50 <mnemoc> which somehow manages to cross compiler without been a cross compiler
2017-05-22 16:09:00 <mnemoc> compile*
2017-05-22 16:09:23 <Shiz> yes
2017-05-22 16:09:27 <Shiz> it forces the external linker
2017-05-22 16:09:31 <Shiz> because of what I just pasted
2017-05-22 16:11:13 <Shiz> we patch PIE as default build mode -> cross-compilation sees this and forces external linker (except on amd64) -> gcc is not a cross-compiler -> linking fails
2017-05-22 16:11:38 <mnemoc> If I don't pass -buildmode=exe the magic will still put -extld=gcc there
2017-05-22 16:12:37 <Shiz> that doesn't matter
2017-05-22 16:12:46 <Shiz> -extld= will not be used if external linking isn't used
2017-05-22 16:12:54 <Shiz> the mere presence of an -extld argument doesn't force it to use external linkin
2017-05-22 16:13:03 <mnemoc> oh, i see
2017-05-22 16:13:12 <Shiz> ~ # CGO_ENABLED=0 GOARCH=arm GOARM=7 go build -v -x -ldflags '-v -v' t.go 2>&1 | grep external
2017-05-22 16:13:13 <Shiz> 2017/05/22 16:12:30 external linking is forced by: buildmode=pie
2017-05-22 16:13:15 <Shiz> :P
2017-05-22 16:13:24 <Shiz> i think we need to refine our go patch then
2017-05-22 16:13:30 <Shiz> thanks for the report
2017-05-22 16:13:35 <Shiz> /research
2017-05-22 16:13:45 <mnemoc> thanks for giving me a work-around :)
2017-05-22 16:14:02 <Shiz> keep in mind that this means your binaries won't benefit from ASLR
2017-05-22 16:14:08 <Shiz> or to a reduced degree
2017-05-22 16:14:11 <Shiz> which is not exactly great
2017-05-22 16:14:15 <Shiz> with -buildmode=exe i mean
2017-05-22 16:17:33 <mnemoc> Shiz: I'm confident you'll get pie working before I reach production ;-)
2017-05-22 19:56:37 <stevenroose> does openrc have an alternative for systemctl enable openvpn@myconfigfile?
2017-05-22 20:00:11 <Shiz> stevenroose: ln -s openvpn /etc/init.d/openvpn.myconfigfile
2017-05-22 20:00:19 <Shiz> rc-update add openvpn.myconfigfile
2017-05-22 20:00:21 <Shiz> i think that works
2017-05-22 20:03:43 <stevenroose> huh, will openvpn know where to look for the config file?
2017-05-22 20:04:04 <Shiz> it will look in /etc/openvpn/myconfigfile.conf
2017-05-22 20:04:06 <stevenroose> it's in /etc/openvpn/myconfigfile.conf and with systemd, that;s where openvpn will look
2017-05-22 20:04:13 <Shiz> the initscript takes care of that
2017-05-22 20:04:14 <stevenroose> really?
2017-05-22 20:04:15 <stevenroose> cool
2017-05-22 20:04:22 <stevenroose> by looking at itself?
2017-05-22 20:04:27 <stevenroose> osom, but weird :p
2017-05-22 20:04:28 <Shiz> yeah
2017-05-22 20:04:47 <Shiz> https://git.alpinelinux.org/cgit/aports/tree/main/openvpn/openvpn.initd
2017-05-22 20:04:51 <Shiz> VPN=${SVCNAME#*.}
2017-05-22 20:04:58 <Shiz> it removes everything before the . in the service name
2017-05-22 20:05:06 <Shiz> (or just gets 'openvpn' if there is no dot)
2017-05-22 20:05:52 <stevenroose> WARNING: openvpn.neutrinet has started, but is inactive
2017-05-22 20:06:02 <stevenroose> I did rc-update add before rc-service start and got thi
2017-05-22 20:06:22 <stevenroose> I guess that's fine? the vpn works, so
2017-05-22 20:06:35 <Shiz> probablyy :P
2017-05-22 20:37:13 <clandmeter> yes its fine, i have it as well
2017-05-22 22:52:19 <Classsic> hi, somebody know if motion package will avaiable in 3.6 release?
2017-05-22 22:53:30 <Shiz> no, as it's in testing right now
2017-05-22 22:53:48 <Shiz> when 3.6 releases, it will contain every package from the main and community repositories from edge at that time
2017-05-23 00:18:03 <lestus> heya
2017-05-23 00:18:31 <Shiz> hello
2017-05-23 00:18:36 <lestus> discovered alpine 2 days ago
2017-05-23 00:18:41 <lestus> o.0
2017-05-23 00:18:49 <lestus> feel like i been living under a rock
2017-05-23 00:19:18 <lestus> exactly what i needed
2017-05-23 00:20:31 <lestus> Shiz: how's things?
2017-05-23 00:27:06 <Shiz> welp
2017-05-23 04:04:39 <tbrock> hey everyone, i'm trying to run crond as a non-root user within a container, specifying a specific crondir that only contains my user's crontab
2017-05-23 04:04:49 <tbrock> however when it runs I see crond: "can't set groups: Operation not permitted"
2017-05-23 04:04:57 <tbrock> and the command does not execute
2017-05-23 04:05:16 <tbrock> when i run the container as the root user with docker's -u flag specifying root, it runs just fine
2017-05-23 04:05:24 <tbrock> any ideas on why that may be the case?
2017-05-23 04:33:23 <Shiz> tbrock: crond is not meant to be ran as non-root
2017-05-23 04:34:18 <Shiz> at least not busybox crond
2017-05-23 04:34:25 <Shiz> maybe another cron will do what you want
2017-05-23 04:47:25 <tbrock> @Shiz why not? doesn't that seem odd (not trying to be argumentative)
2017-05-23 04:47:38 <tbrock> thanks for responding btw
2017-05-23 04:47:53 <Shiz> I dunno, I didn't develop it :P
2017-05-23 04:48:03 <Shiz> but looking at the source code it very much expects to be ran as root
2017-05-23 04:48:08 <Shiz> as a system cron I'd imagine
2017-05-23 04:48:51 <Shiz> we package a few other crons like fcron and dcron, they may be able to run as a normal user
2017-05-23 04:51:09 <tbrock> ok, cool thanks
2017-05-23 04:51:30 <tbrock> what was the giveaway that it expects to run as root?
2017-05-23 04:51:39 <tbrock> if i take a look at the code myself
2017-05-23 04:51:44 <Shiz> it dropping permissions :P
2017-05-23 04:51:52 <Shiz> you can't drop permissions as a normal user to yourself
2017-05-23 04:52:16 <Shiz> https://git.busybox.net/busybox/tree/miscutils/crond.c#n592
2017-05-23 04:53:54 <Shiz> as well as a more explicit reference here: https://git.busybox.net/busybox/tree/miscutils/crond.c#n118
2017-05-23 04:54:43 <Shiz> and here: https://git.busybox.net/busybox/tree/miscutils/crond.c#n3
2017-05-23 09:24:22 <amosbird> Hi, why am I getting this    https://la.wentropy.com/KyT4 ?
2017-05-23 11:11:01 <mnemoc> Shiz: hi, another cross-compile related problem :(   http://sprunge.us/PXXN   .... it shouldn't be mkdir-ing in /usr/lib/go/ but in $WORK
2017-05-23 11:15:47 <mnemoc> Shiz: same happens doing FROM alpine:edge instead of node:alpine + go@edge
2017-05-23 11:38:25 <mnemoc> Shiz: http://sprunge.us/STIN <--- native too :'(
2017-05-23 11:41:31 <mnemoc> 
ACTION scratches his head

2017-05-23 14:20:23 <mnemoc> Shiz: btw, passing -pkgdir solves the "write to /usr/lib/go/" thing
2017-05-23 14:33:23 <ncopa> hm.. setup-xorg-base does not work with qemu
2017-05-23 14:33:26 <ncopa> std vga
2017-05-23 14:33:38 <ncopa> i dont know which xf86-video-* that should be used
2017-05-23 14:36:36 <_ikke_> hold on, i've set it up once, with guidance from someone here
2017-05-23 14:38:19 <BitL0G1c> qemu + spice uses xf86-video-qxl
2017-05-23 14:38:52 <BitL0G1c> ncopa ^^^
2017-05-23 14:39:44 <ncopa> that is -vga qxl right?
2017-05-23 14:39:48 <ncopa> i've used that too
2017-05-23 14:40:36 <BitL0G1c> I used virt-viewer to connect
2017-05-23 14:40:37 <ncopa> but the qemu default '-vga std' does not work
2017-05-23 14:41:05 <ncopa> hm
2017-05-23 14:41:26 <ncopa> qemu with gtk support and -vga vmware does not seem to work either
2017-05-23 14:42:59 <parazyd> ncopa: it complains about not finding /dev/dri or no permissions?
2017-05-23 14:43:09 <ncopa> no
2017-05-23 14:44:02 <BitL0G1c> my old notes for spice https://it-offshore.co.uk/linux/alpine-linux/30-alpine-linux-spice-kvm-desktop
2017-05-23 14:44:07 <_ikke_> ncopa: apparently I did not use -vga at all
2017-05-23 14:44:24 <_ikke_> ncopa: just -spice port=...
2017-05-23 14:44:56 <ncopa> the default since qem 2.2 is -vga std
2017-05-23 14:45:00 <ncopa> as i understand
2017-05-23 14:45:04 <ncopa> but i cannot get it work
2017-05-23 14:45:20 <_ikke_> ncopa: what is the issue?
2017-05-23 14:45:28 <ncopa> xorg does not start at all
2017-05-23 14:45:51 <ncopa> would be nice to be able to set up xorg in a default qemu
2017-05-23 14:47:29 <_ikke_> ncopa: I did have it working
2017-05-23 14:47:46 <parazyd> me too
2017-05-23 14:48:03 <Shiz> ncopa: got any /dev/dri devices?
2017-05-23 14:48:53 <ncopa> yes
2017-05-23 14:49:10 <ncopa> it just exited with error
2017-05-23 14:49:23 <ncopa> when i installed mesa-dri-swrast it would hang
2017-05-23 14:49:25 <parazyd> so what does the xorg log say?
2017-05-23 14:49:42 <ncopa> i'll grep EE
2017-05-23 14:49:56 <parazyd> (also keep in mind in gentoo modesetting still isn't working properly on musl)
2017-05-23 14:51:08 <ncopa> aha
2017-05-23 14:51:34 <ncopa> with mesa swrast installed it just hanged im rebooting now to look at the xorg.log
2017-05-23 14:52:42 <ncopa> http://tpaste.us/xWr1
2017-05-23 14:54:40 <ncopa> and without mesa-dri-swrast installed: http://tpaste.us/ya0p
2017-05-23 14:54:55 <ncopa> http://tpaste.us/yaOp
2017-05-23 14:58:05 <Shiz> ncopa: id drop mesa-dri-swrast and try xf86-video-fbdev
2017-05-23 14:59:04 <parazyd> hmm never seen that happen before
2017-05-23 14:59:04 <ncopa> with xf86-video-fbdev: grep EE /var/log/Xorg.0.log
2017-05-23 14:59:15 <ncopa> http://tpaste.us/Yn0r
2017-05-23 14:59:23 <parazyd> try vesa and/or fbdev indeed
2017-05-23 15:00:12 <ncopa> same error with xf86-video-vesa installed
2017-05-23 15:00:26 <ncopa> apk search glamor
2017-05-23 15:00:50 <parazyd> ncopa: make sure swrast_dri isn't in /usr/lib/dri rather than /usr/lib/xorg/modules/dri
2017-05-23 15:01:23 <ncopa> thats how it is
2017-05-23 15:01:32 <ncopa> i wonder if i am missing some kernel module
2017-05-23 15:01:46 <parazyd> no, i thought... where is swrast_dri.so on your system?
2017-05-23 15:02:10 <ncopa> http://tpaste.us/vMWo
2017-05-23 15:03:00 <parazyd> stupid questions now, but did you try to `ldd` it?
2017-05-23 15:03:36 <parazyd> i'm not sure what's the culprit of this error
2017-05-23 15:03:59 <ncopa> the error happens when mesa-dri-swrast is not installed at all
2017-05-23 15:04:06 <ncopa> when it is installed it will hang
2017-05-23 15:04:36 <parazyd> i see. hmm that's even a tougher nut
2017-05-23 15:06:27 <ncopa> ok this is intersting, glamor-egl has conflict with xorg-server
2017-05-23 15:06:31 <Classsic> hi, somebody try install alpine on baytrail device?
2017-05-23 15:19:44 <ncopa> i think i give up this qemu xorg thing
2017-05-23 15:27:46 <_ikke_> ncopa: :-(
2017-05-23 15:28:55 <parazyd> ncopa: have you tried with -vga virtio
2017-05-23 15:29:01 <parazyd> that's the only useful one tbh
2017-05-23 15:29:43 <parazyd> at least gives you a proper screen resolution rather than these tiny ones
2017-05-23 15:30:34 <ncopa> which xf86-video- driver should be used with virtio?
2017-05-23 15:34:41 <ncopa> looks like both arch linux and fedora has some patches to xorg-server
2017-05-23 15:35:34 <_ikke_> ncopa: hold on, I'm starting my qemu vm again to see what I've installed
2017-05-23 15:46:50 <_ikke_> ncopa: so I have my vm running
2017-05-23 15:47:55 <_ikke_> ncopa: I have xf86-video-vesa and xf86-video-modesetting installed
2017-05-23 15:48:17 <_ikke_> ncopa: running without -vga settings
2017-05-23 15:49:11 <ncopa> which xorg server version and what version of libdrm?
2017-05-23 15:50:05 <_ikke_> xorg-server-1.18.4-r3
2017-05-23 15:50:22 <_ikke_> libdrm-2.4.74-r0
2017-05-23 15:53:11 <ncopa> ok so something broken in xorg-1.19
2017-05-23 15:53:54 <_ikke_> performing an upgrade now, see if it breaks
2017-05-23 15:54:25 <parazyd> ncopa: iirc 1.19 merged the modesetting driver
2017-05-23 15:54:38 <parazyd> it's not separate from xorg-server anymore
2017-05-23 15:55:14 <ncopa> there is a modesetting_drv.so
2017-05-23 15:56:35 <_ikke_> ncopa: working with 1.19
2017-05-23 16:09:28 <ncopa> hm
2017-05-23 16:10:19 <_ikke_> Is vim broken in edge?
2017-05-23 16:10:28 <ncopa> not that i know
2017-05-23 16:10:40 <_ikke_> I get a whole load of lua_* symbol not found errors
2017-05-23 16:20:38 <_ikke_> ncopa: weird glitch with my system, reboot fixed it
2017-05-23 16:20:54 <_ikke_> mount somehow got read-only
2017-05-23 23:09:03 <atrigent> I have a docker image where I'm running the unzip command, and I get this error: "error:  zipfile probably corrupt (illegal instruction)" when trying to unzip a file
2017-05-23 23:09:16 <atrigent> this file unzip fine with other copies of unzip
2017-05-23 23:09:29 <atrigent> i.e. copies other than alpine's
2017-05-23 23:11:15 <atrigent> I ran the command with gdb and it seems that unzip is deliberately raising an illegal instruction exception with the ud2 instruction
2017-05-23 23:11:39 <atrigent> so, like, what???
2017-05-23 23:24:47 <Shiz> atrigent: ub possibly
2017-05-23 23:24:50 <BitL0G1c> atrigent - check the command line switches on busybox unzip - or add unzip to the docker image
2017-05-23 23:25:19 <atrigent> BitL0G1c: I don't think I'm using busybox unzip, I wasn't even aware there was such a thing
2017-05-23 23:25:53 <Shiz> if you haven't installed any unzip package, yo're using busybox unzi
2017-05-23 23:25:55 <Shiz> p
2017-05-23 23:25:58 <BitL0G1c> lrwxrwxrwx    1 root     root          12 Sep 14  2016 /usr/bin/unzip -> /bin/busybox*
2017-05-23 23:26:32 <atrigent> I installed unzip
2017-05-23 23:26:40 <Shiz> try just using busybox unzip :p
2017-05-23 23:26:56 <Shiz> atrigent: btw the reason for the ud2 instruction is likely musl
2017-05-23 23:27:12 <Shiz> on fatal API abuses, it invokes a_crash() (which is the ud2 instr on x86_64)
2017-05-23 23:27:42 <Shiz> to ease debuggability, because now your backtrace directly leads to the offending call
2017-05-23 23:27:48 <atrigent> in gdb, it looked like the ud2 instruction was inside the unzip command itself, not musl
2017-05-23 23:27:54 <atrigent> but I dunno, maybe something got inlined
2017-05-23 23:28:15 <BitL0G1c> busybox unzip cmd switches - https://pastebin.com/raw/j5Phs4BG
2017-05-23 23:28:33 <Shiz> if you can use the busybox unzip impl, i'd try to see if that works
2017-05-23 23:29:03 <atrigent> so, the reason that I'm having to use the unzip command is that I need to extract some files that use deflate64 compression, and busybox does not seem to support that
2017-05-23 23:29:17 <atrigent> I'd be using the python zipfile module otherwise
2017-05-23 23:29:23 <Shiz> ah, right
2017-05-23 23:30:14 <atrigent> Shiz: any way to get debug info for the unzip command...?
2017-05-23 23:30:40 <Shiz> sadly doesn't seem that way, some packages have a -dbg subpackage, but it seems unzip doesn't right now
2017-05-23 23:30:48 <Shiz> it's something we are looking into extending across all packages...
2017-05-23 23:31:31 <atrigent> ah ok yeah, I guess I can't tell whether it's in musl or not
2017-05-23 23:32:07 <Shiz> it seems there is no direct use ud2 within unzop
2017-05-23 23:32:09 <Shiz> unzip
2017-05-23 23:32:19 <atrigent> any way to get musl to be more verbose?
2017-05-23 23:32:42 <Shiz> oh, hmm
2017-05-23 23:32:49 <Shiz> it seems musl a_crash() uses halt, not ud2
2017-05-23 23:33:49 <Shiz> so it seems gcc generates ud2 instructions in some cases, likely for a similar reason
2017-05-23 23:33:53 <Shiz> fatal runtime error
2017-05-23 23:34:05 <Shiz> probably because there's UB in the unzip source code
2017-05-23 23:35:30 <Shiz> atrigent: what alpine version is this?
2017-05-23 23:35:37 <atrigent> 3.5
2017-05-23 23:36:00 <Shiz> i'll take a look at it, but there's no direct solution i can offer you right now
2017-05-23 23:36:06 <Shiz> except from using an alternative zip impl, of course
2017-05-23 23:36:41 <atrigent> as far as I can tell the only other open-source implementation that supports deflate64 is 7zip, which doesn't seem to be in alpine
2017-05-23 23:36:53 <Shiz> but it is
2017-05-23 23:36:59 <Shiz> the p7zip package :)
2017-05-23 23:37:40 <atrigent> alright, I spose I'll try that
2017-05-23 23:40:06 <atrigent> seems to be working better
2017-05-23 23:40:35 <Shiz> my current idea is that unzip does something to invoke gcc's __builtin_trap()
2017-05-23 23:40:38 <Shiz> which compiles to ud2
2017-05-23 23:53:01 <atrigent> Shiz: does alpine compile stuff with more flags for detecting ub? because a copy of the same version of unzip running on ubuntu does not crash
2017-05-23 23:53:25 <Xe> atrigent: are you running on grsec or non-grsec kernel?
2017-05-23 23:53:49 <atrigent> uh I dunno, it's an ec2 instance
2017-05-23 23:53:51 <atrigent> hah
2017-05-23 23:53:55 <atrigent> probably not?
2017-05-23 23:54:00 <Xe> $ uname -av
2017-05-23 23:54:34 <Shiz> ec2 wont be hardened, probabl
2017-05-23 23:54:46 <Xe> Shiz: depends on who made the image :P
2017-05-23 23:54:46 <Shiz> and also, the kernel won't emit ud2's in userspace for you
2017-05-23 23:54:48 <Shiz> lol
2017-05-23 23:54:51 <atrigent> yeah looks like not
2017-05-23 23:54:55 <Shiz> it'll just send the proc a SIGKILL
2017-05-23 23:54:58 <Shiz> or SIGSEGV
2017-05-23 23:55:02 <Shiz> depending on the violation
2017-05-23 23:55:17 <Shiz> atrigent: no additional flags that i directly can see, no
2017-05-23 23:58:05 <atrigent> the ubuntu copy was compiled with an older version of gcc, so maybe some stuff just got turned on by default or something
2017-05-23 23:58:07 <atrigent> meh
2017-05-24 00:00:55 <atrigent> hmm, so, unzip actually catches the SIGILL
2017-05-24 00:01:10 <atrigent> I wonder if there would be a proper error message if it didn't
2017-05-24 00:02:56 <Shiz> that is actually scary on its own, btw
2017-05-24 00:03:12 <atrigent> that it catches it? yeah
2017-05-24 00:04:06 <Shiz> but the unzip code is pretty scary
2017-05-24 00:04:08 <atrigent> I mean, it doesn't ignore it, it prints this error "error:  zipfile probably corrupt (illegal instruction)" and exits
2017-05-24 00:04:12 <Shiz> it still seems to live in the world of segmented 16-bit memory too
2017-05-24 00:04:20 <Shiz>         Info(slide, 0x421, ((char *)slide, LoadFarString(ZipfileCorrupt),
2017-05-24 00:04:21 <Shiz>           "illegal instruction"));
2017-05-24 00:04:36 <atrigent> but yeah, sorta scary how an illegal instruction could be caused by a corrupt input file...?
2017-05-24 00:04:52 <Shiz> very much so
2017-05-24 00:05:00 <Shiz> it sounds like "we expect the compiler to do our input checking for us"
2017-05-24 00:05:02 <Shiz> :p
2017-05-24 00:51:50 <Xe> atrigent: that's the power (and horrifying results) of C!
2017-05-24 00:53:31 <Shiz> more like of bad C
2017-05-24 05:00:31 <_ikke_> ncopa: I had to add mesa-dri-swrast and mesa-egl
2017-05-24 08:00:54 <ncopa> _ikke_: didnt seem enough for me
2017-05-24 08:01:35 <_ikke_> How did you start the vm?
2017-05-24 08:02:18 <ncopa> qemu-system-x86_64-gtk -enable-kvm -m 1G -cdrom out/alpine-standard-edge-x86_64.iso
2017-05-24 08:29:43 <_ikke_> ncopa: I used spice as a graphical backend: -spice port=5930,disable-ticketing
2017-05-24 08:30:04 <ncopa> spice probably works
2017-05-24 08:30:08 <ncopa> with qxl
2017-05-24 08:30:49 <ncopa> i was trying to make it work with the qemu default vga
2017-05-24 08:30:56 <_ikke_> ok
2017-05-24 08:54:23 <pandamatt> Hi, can I ask a question about apk?
2017-05-24 08:54:55 <_ikke_> just ask
2017-05-24 08:57:18 <pandamatt> Thanks. I have a script installing a package: apk add libressl2.4-libcrypto@edge. I would like to change this line to match any version of libressl*-libcrypto, but I can't find how to do that. If it were another package, for instance, libressl, I could just write it without the version number, but here I need to match libressl*-libcrypto. I've tried Any idea of to do that?
2017-05-24 09:13:25 <pandamatt> Actually, my problem is that I see that libressl*-libcrypto is dependent upon a given version of libressl, but I just want to install the latest, but it doesn't look doable to ask for libressl*-libcrypto without specifying a version for libressl
2017-05-24 09:32:09 <pandamatt> Never mind, I found a better way of doing what I wanted
2017-05-24 09:36:26 <c2h2> Hey, I could not find anything on the forums about the future of alpine post-grsec, any info to be found here?
2017-05-24 09:37:17 <_ikke_> c2h2: For now, they try to keep the 4.9 patches alive for as long as possible
2017-05-24 09:40:51 <c2h2> Yeah but does that mean that it will not evolve anymore? I have no clue on how much grsec costs, nor on who buys what, but since alpine's security seems to rely on it, I was wondering what would become of this "hardened" feature :/
2017-05-24 09:41:35 <_ikke_> c2h2: 'Buying' grsec is not an option for Alpine Linux
2017-05-24 09:41:47 <c2h2> OK, I guess this answers that ^^
2017-05-24 09:42:44 <c2h2> I was looking into void vs alpine, I feel like now both will become closer to each other. The hardened part really interested me into alpine :)
2017-05-24 09:48:11 <parazyd> userspace is still hardened on apline
2017-05-24 09:48:23 <parazyd> eh, alpine
2017-05-24 09:50:25 <c2h2> With PIE?
2017-05-24 09:52:23 <parazyd> also ssp i believe
2017-05-24 10:14:19 <pmoust> Hi there
2017-05-24 10:14:26 <pmoust> What's the license of the OS itself?
2017-05-24 10:25:40 <_ikke_> I don't think the OS itself has a license associated with it
2017-05-24 10:26:16 <pmoust> Is there an official answer/wiki to this?
2017-05-24 10:26:35 <pmoust> I couldn't find _anything_ on the web, apart from notes on APKBUILD per package
2017-05-24 10:28:10 <_ikke_> https://pkgs.alpinelinux.org/package/edge/main/aarch64/alpine-base
2017-05-24 10:28:13 <_ikke_> says MIT
2017-05-24 10:29:09 <pmoust> Thanks, that should do it I think
2017-05-24 13:16:57 <dave_9911> hi, it there a way to download the whole mirror to cache and install from there? and then update the whole cache upon internet access?
2017-05-24 14:05:02 <_ikke_> dave_9911: https://wiki.alpinelinux.org/wiki/How_to_setup_a_Alpine_Linux_mirror?
2017-05-24 14:44:38 <dave_9911> yeah was looking at that, was hoping for a apk fetch all kinda thing, to fetch all of repo and the use apk with --no-network, ill guess i got set up a mirror locally then, and have it to come up every boot, and sync it manually when network is connected. thanks
2017-05-24 15:06:34 <dave_9911> Then again it only make sense to have packages only for one architecture (and only last release)..
2017-05-24 15:11:07 <dave_9911> Guess I look somewhere else for a offline system, if installing new packages always needs network connection.
2017-05-24 15:24:26 <dave_9911> So I downloaded a repo to disk/dvd, then use it as offline repo, for updating those files, Ill try to run some rsync, otherwise just re-download all again to disk/dvd. Not too hard was it? (hope this scheme will work, I like to ditch "bloated dists" and cd/dvd-sets. Still looking here! :D Cheers
2017-05-24 21:43:33 <kolev> 3.6.0 is released now! congrats!
2017-05-24 21:44:28 <Shiz> \o/
2017-05-24 22:08:20 <shodan45> 3.6?! awesome! oh wait, now I have to update everything. :O
2017-05-25 01:12:58 <Classsic_> hi, somebody know if alpine works on efi32 but system 64bit?
2017-05-25 01:13:13 <Classsic_> like baytrail devices.
2017-05-25 02:11:39 <dmtd> Hi all! I'm trying to run lsyncd as a daemon, but I'm not sure how to start and stop it in Alpine. I know alpine doesn't have systemd and I saw it has OpenRC, but rc-service says command not found. Did apk add openrc, and when I run it, it freaks out about not being the boot system. Just wanna run my service. Help!
2017-05-25 02:13:36 <dmtd> also I'm on Alpine 3.5
2017-05-25 02:13:56 <Xe> dmtd: inside a container?
2017-05-25 02:14:08 <dmtd> Xe: Correct. Inside a docker container
2017-05-25 02:14:38 <Xe> well, generally you run it as the only process in the container
2017-05-25 02:15:50 <dmtd> Xe: ah. I have a python script which is doing a bunch of config stuff as PID 1...which I guess is because I made that my entrypoint in my docker file? What do I need to do to get some sort of daemon management working?
2017-05-25 02:16:32 <Xe> dmtd: have your entrypoint be a shell script that templates out the config and then runs `exec lsyncd`
2017-05-25 02:16:36 <Xe> you don't need daemon management
2017-05-25 02:17:53 <dmtd> Xe: ok I guess that makes sense. I really just want to be able to call service lsyncd start from the python script but I guess that works too. Thanks!
2017-05-25 02:19:29 <Xe> dmtd: you can do that (you'd need to use runit, i have it already set up in `xena/alpine`), but you don't _need_ it, less complexity means fewer things break
2017-05-25 02:20:16 <Xe> also, you'd need something to wait forever in the pid1 role anyways
2017-05-25 02:20:30 <Xe> (otherwise docker will just reap your container instantly)
2017-05-25 02:20:56 <dmtd> Xe: right, the python script runs for the life of the container
2017-05-25 02:21:08 <dmtd> Xe: but that is helpful. I'll keep that in mind
2017-05-25 02:21:47 <Xe> :+1:
2017-05-25 08:49:02 <magellanic> any ideas when 3.6 will show up and be the "latest" tag at https://hub.docker.com/_/alpine/ ?
2017-05-25 10:32:08 <consus> Has anyone upgraded to 3.6 yet? Any troubles?
2017-05-25 10:34:09 <magellanic> I'm waiting for docker hub "latest" to point to 3.6 first :D
2017-05-25 10:46:38 <mauli> hi, am bulding an iso with aports mkimage.sh, but it seems the apks are not installed?
2017-05-25 10:47:39 <mauli> (is also the case for mkimage.sh extended)
2017-05-25 11:52:39 <andypost> magellanic, follow https://github.com/gliderlabs/docker-alpine/pull/285
2017-05-25 11:57:55 <magellanic> ah cool :) it is just waiting to be merged then, I guess?
2017-05-25 12:01:31 <ncopa> magellanic: yes
2017-05-25 12:03:14 <magellanic> cool, sounds good :D
2017-05-25 12:07:35 <HoloIRCUser2bnnn> Hey
2017-05-25 12:07:41 <HoloIRCUser2bnnn> anyone ol ?
2017-05-25 12:09:15 <magellanic> ask and wait? :)
2017-05-25 12:11:05 <HoloIRCUser2bnnn> Is der a php7 redis client on Alpine Os ?
2017-05-25 12:11:24 <HoloIRCUser2bnnn> I didn't find ny client
2017-05-25 12:12:13 <andypost> HoloIRCUser2bnnn, http://pkgs.alpinelinux.org/packages?name=php7-redis
2017-05-25 12:14:51 <HoloIRCUser2bnnn> I was searching for version 3.5 so I didn't get ny
2017-05-25 12:15:54 <HoloIRCUser2bnnn> The latest image of alpine in docker hub is v 3.5
2017-05-25 12:16:23 <HoloIRCUser2bnnn> Is der a way around ?
2017-05-25 12:16:45 <HoloIRCUser2bnnn> I'm using alpine as base image for my container
2017-05-25 12:20:57 <kahiru> well, you can always build the base image yourself
2017-05-25 12:22:50 <ncopa> or sed -i -e 's/3.5/3.6/g' /etc/apk/repositories && apk upgrade -U -a
2017-05-25 12:23:06 <ncopa> or wait til tomorrow, when alpine:3.6 image should be out
2017-05-25 12:25:01 <HoloIRCUser2bnnn> I will wait for tomorrow...
2017-05-25 12:25:49 <HoloIRCUser2bnnn> or else go by the solution u provided
2017-05-25 12:27:16 <HoloIRCUser2bnnn> is der ny document on building the base image ?
2017-05-25 12:28:40 <magellanic> HoloIRCUser2bnnn: you can follow https://github.com/gliderlabs/docker-alpine/pull/285
2017-05-25 12:31:17 <magellanic> the release should coincide with the docker image release, mostly because many people use alpine for container images. More use it in containers than desktop?
2017-05-25 12:34:07 <HoloIRCUser2bnnn> Thanks
2017-05-25 12:46:12 <helpImStuck> how do I make alpine a torrent seedbox behind vpn?
2017-05-25 14:11:41 <budric[m]> Hi, i'm trying to upgrade to 3.6.0 following https://wiki.alpinelinux.org/wiki/Upgrading_Alpine.  A bunch of packages were upgraded, but on next apk update I still get my local repository show up as: 3.5.2 [/media/mmcblk0p1/apks].  I'm wondering if this is normal or if the upgrade wasn't complete.
2017-05-25 14:12:08 <budric[m]> I did run apk cache sync as well
2017-05-25 14:24:26 <Shiz> hmm
2017-05-25 14:27:12 <pickfire> Wow, 3.6.0 release
2017-05-25 15:57:07 <pickfire> Oh, pi broke after update to 3.6
2017-05-25 15:57:19 <pickfire> Not booting up
2017-05-25 16:04:18 <pickfire> What should I do?
2017-05-25 16:18:41 <budric[m]> pickfire: I upgraded my rpi3, didn't have an issue.  It reboots fine.  Aside from copying your data off and reinstalling I'm not sure what to recommend for you.
2017-05-25 16:19:21 <pickfire> budric[m]: I am using rpi3 as well. But I uses sys mode.
2017-05-25 16:19:28 <pickfire> Is that the cause?
2017-05-25 16:19:43 <pickfire> What do you mean by copying your data off?
2017-05-25 16:22:13 <budric[m]> pickfire: oh, I didn't do the hard disk install on mine, it's running from RAM.
2017-05-25 16:22:45 <budric[m]> I mean take the card out, plug it in a working system and copy whatever data you care about - like /etc/ configurations.  Reinstall, and copy the data back.
2017-05-25 16:28:13 <pickfire> Ah, I think that is a nice choice as well.
2017-05-25 16:28:34 <pickfire> budric[m]: If you run the RAM mode, how do you do backup and stuffs?
2017-05-25 16:30:49 <budric[m]> I run nextcloud, the data directory is nfs mounted and the nfs server backs that up.  I occasionally dump database to the nfs mount as well.
2017-05-25 16:30:59 <budric[m]> so it's not really an issue for me
2017-05-25 16:32:37 <pickfire> Nextcloud?
2017-05-25 16:32:41 <pickfire> Haven't heard ofit.
2017-05-25 16:33:28 <pickfire> budric[m]: Do you find any differences in RAM mode compared to traditional sys mode?
2017-05-25 16:33:39 <pickfire> Like pros and cons?
2017-05-25 17:09:25 <pickfire> I tried reinstalling but doesn't look like it boots as well.
2017-05-25 17:11:47 <pickfire> I did sudo fdisk /dev/mmcblk0, o, n, <Enter> multiple times, t, c, a, w. Next, sudo mkfs.vfat /dev/mmcblk0p1. Lastly, mount /dev/mmcblk0p1 /mnt && cd /mnt && sudo tar xf /tmp/alpine-rpi-<version>-armhf.rpi.tar.gz
2017-05-25 17:12:35 <pickfire> But it doesn't look like it works as well, not booting, just saw green light turn on and off once during power on and red light stays on.
2017-05-25 17:12:55 <pickfire> Bye, need to sleep.
2017-05-25 17:15:22 <pickfire> Too bad I can't keep my laptop on while pi is down. budric[m] just message me, I will go check the logs.
2017-05-25 18:44:27 <helpImStuck> to alpine or not to alpine ..
2017-05-25 19:25:06 <mauli> hi, I'm bulding an iso with aports mkimage.sh, but it seems the apks are not installed? ( also when using mkimage.sh extended )
2017-05-25 20:03:24 <TemptorSent> mauli: The current mkimage does not install apks, just provides them in the media-repository.
2017-05-25 20:17:59 <mauli> aah, bummer
2017-05-25 20:18:04 <mauli> thx
2017-05-25 20:19:59 <TemptorSent> mauli: You can manually add packages to install at boot in the world file in the image's initramfs, but it's not automatic.
2017-05-25 20:35:28 <TemptorSent> kaniini: Would doing something simple like adding an interposer function between apk_tar_parse and apk_sign_ctx_verify_tar that prints the manifest line for each entry be a reasonable approach to implementing manifest-apk-file?
2017-05-25 20:35:54 <TemptorSent> Oops, wrong channel.
2017-05-26 07:57:03 <magellanic> thanks for the 3.6 docker image to latest :)
2017-05-26 08:10:36 <netmoleCBA> good morning  i have question  i am installed first time alpine linux and now i cant ssh to it i am installed openssh properly
2017-05-26 08:25:12 <jomat> did you start sshd?
2017-05-26 08:25:41 <stevenroose> How do I prevent DHCP from updating resolv.conf in Alpine?
2017-05-26 08:25:42 <jomat> installation only won't start services
2017-05-26 08:25:57 <xentec> netmoleCBA: # rc-update add sshd
2017-05-26 08:26:08 <stevenroose> I read about updating dhclient conf at /etc/dhcp/dhclient.conf, but Alpine doesnt hve that file and doesnt have dhclient
2017-05-26 08:26:08 <stevenroose> (it does have _dhclient, weirdly)
2017-05-26 08:26:32 <netmoleCBA> yes i did
2017-05-26 08:31:01 <netmoleCBA> ssh says access denied  any idea why i cant ssh in
2017-05-26 08:32:22 <Bun> stevenroose: https://forum.alpinelinux.org/forum/networking/how-avoid-overwriting-etcresolvconf-dhcp ?
2017-05-26 08:37:13 <stevenroose> Bun that seems helpful! thansk al ot
2017-05-26 09:28:10 <boris> hello, seems that the alpine 3.6 image for rpi is not booting on my pi3 ...
2017-05-26 09:29:12 <boris> nothing on the screen so it's hard to say what's wrong
2017-05-26 09:30:20 <xentec> boris: how many times does the rpi3 ACT-LED blink in succession?
2017-05-26 09:31:18 <xentec> if it's 7 and you have labeled your FAT partiton, then reformat without the label and try again
2017-05-26 09:32:07 <boris> xentec: 1 time orange blink
2017-05-26 09:32:22 <boris> like with a working boot with v3.5.2
2017-05-26 09:51:41 <boris> same partitions with 3.5.2 and it works
2017-05-26 09:52:14 <Bun> someone else earlier had a similar problem, so maybe it's broken
2017-05-26 09:54:47 <boris> ok :\
2017-05-26 09:57:01 <Bun> maybe you can e.g. try 3.6 without updating the kernel?
2017-05-26 10:00:43 <boris> yes I just need the latest version of docker so I can wait
2017-05-26 10:04:14 <Bun> you can try package pinning if you're desperate
2017-05-26 15:35:32 <vezult> Using a script based on these instructions: https://wiki.alpinelinux.org/wiki/Installing_Alpine_Linux_in_a_chroot
2017-05-26 15:35:49 <vezult> I'm seeing ERROR: alpine-baselayout-3.0.4-r0: BAD signature
2017-05-26 15:36:07 <vezult> but just on that package, none of the others
2017-05-26 15:36:51 <vezult> is this a known issue? am I doing something wrong?
2017-05-26 15:41:40 <vezult> to be clear, that's when running: ./sbin/apk.static -X ${mirror}/latest-stable/main -U --allow-untrusted --root ${chroot_dir} --initdb add alpine-base
2017-05-26 16:29:15 <luxio> I'm not getting image previews in Thunar, I have tumbler installed
2017-05-26 17:19:34 <pepan123> hello
2017-05-26 17:20:26 <pepan123> I would like to build a kernel module under alpine linux, but even after installing linux-headers, there is no build in /lib/modules/<kernel version>, may I ask in which package can I find it?
2017-05-26 19:54:06 <pavlix> how are you all?
2017-05-26 19:54:19 <_ikke_> doing okay
2017-05-26 20:15:18 <budric[m]> hi, does alpine come with "useradd" binary that allows specifying password hash on commandline for new user?  I'm trying to write some bash scripts to provision a system but can't figure out how to set password for user.
2017-05-26 20:19:32 <ncl> chpasswd?
2017-05-26 20:19:59 <Shiz> yeah, chpasswd is what you want
2017-05-26 20:20:19 <Shiz> echo "username:$crypthash" | chpasswd -e
2017-05-26 20:20:21 <Shiz> should work
2017-05-26 20:20:49 <Shiz> budric[m]: ^
2017-05-26 20:21:43 <vezult> so, just in case someone is now present who knows something about this...I'm building an alpine chroot (https://wiki.alpinelinux.org/wiki/Installing_Alpine_Linux_in_a_chroot)
2017-05-26 20:22:12 <vezult> when I run /sbin/apk.static -X ${mirror}/latest-stable/main -U --allow-untrusted --root ${chroot_dir} --initdb add alpine-base ...
2017-05-26 20:22:32 <vezult> it installs a bunch of base packages
2017-05-26 20:22:40 <vezult> but I get ERROR: alpine-baselayout-3.0.4-r0: BAD signature
2017-05-26 20:22:45 <vezult> only on that one package
2017-05-26 20:23:01 <Shiz> oh dear, i hope dl-cdn isn't having issues again
2017-05-26 20:23:13 <Shiz> vezult: what if you set your mirror to cz.alpinelinux.org/alpine ?
2017-05-26 20:23:24 <vezult> hmm, let me try
2017-05-26 20:24:24 <vezult> that seems to be fine
2017-05-26 20:24:45 <Shiz> thanks for reporting that, seems like dl-cdn has issues then :/
2017-05-26 20:25:22 <vezult> Shiz: thanks
2017-05-26 20:25:42 <Shiz> i've relayed it, hope someone with access will take a look at it asap
2017-05-26 20:25:43 <Shiz> :P
2017-05-26 21:23:42 <budric[m]> Shiz: thanks for the suggestion, works great!
2017-05-26 22:00:34 <luxio> is there anything I should know before creating a package for alpine?
2017-05-26 22:07:50 <Shiz> luxio: there's a page on how to setup your system for building alpine packages
2017-05-26 22:08:11 <Shiz> aside from that, the musl FAQ can be handy if you run into issues
2017-05-26 22:08:14 <Shiz> it addresses some common issues
2017-05-27 00:39:35 <dka_> Hi everyone!
2017-05-27 00:39:51 <dka_> I have the following error during a build in Alpine Linux : "error while loading shared libraries: libpng12.so.0:"
2017-05-27 00:40:05 <dka_> Do you know what dependency I am missing ? I have tried to install libpng and gd but it didn't change
2017-05-27 00:40:25 <scv> that's the bit before the error, not the actual error
2017-05-27 00:41:50 <dka_> ERROR in ./app/static/StarterTemplateExample.png
2017-05-27 00:41:50 <dka_> Module build failed: Error: /mnt/mesos/sandbox/builds/docs/bootstrap-styled/node_modules/pngquant-bin/vendor/pngquant: error while loading shared libraries: libpng12.so.0: cannot open shared object file: No such file or directory
2017-05-27 00:44:08 <scv> well, the version of libpng shipped in alpine is 1.6 - i.e. libpng16
2017-05-27 00:44:18 <scv> if your code absolutely requires 1.2 you may need to build it yourself
2017-05-27 00:45:04 <dka_> scv, I have tried to install libpng16 but it wasn't found
2017-05-27 00:45:09 <dka_> instead I have installed libpng
2017-05-27 00:45:29 <scv> that is libpng16
2017-05-27 00:45:38 <dka_> can I have both ?
2017-05-27 00:45:44 <scv> there is no libpng12 package
2017-05-27 00:45:58 <scv> if your code absolutely requires that version you'll need to build it yourself
2017-05-27 00:47:39 <Bun> seems like the pngquant-bin npm hasn't updated its stuff in a couple of years: https://github.com/imagemin/pngquant-bin/tree/master/vendor/linux
2017-05-27 00:54:21 <Shiz> dka_: you should probably definitely not use precompiled packages
2017-05-27 00:54:33 <Shiz> there is a very high chance that it will not work on alpine
2017-05-27 00:54:41 <Shiz> third-party precompiled packages that is, like that pngquant
2017-05-27 00:55:03 <dka_> well. it is one of the sub sub sub library of one of my npm dependency
2017-05-27 00:55:24 <dka_> I think it is the npm package "image-webpack-loader"
2017-05-27 00:55:31 <dka_> I have updated from v2 to v3 and I am trying again
2017-05-27 00:56:09 <dka_> Shiz if there is an high chance that it does not work in alpine
2017-05-27 00:56:33 <dka_> the problem I have is that I am working within a docker container. And for some reason, it must be a Dockerfile created using `FROM docker:latest`
2017-05-27 00:56:43 <dka_> I have checked all the docker Dockerfile and they are all using alpine
2017-05-27 00:57:00 <dka_> so I guess I am a bit stuck with alpine. So is it possible to do that build in any way ?
2017-05-27 00:57:15 <Shiz> what you could do, and mind you i have no idea if this works
2017-05-27 00:57:22 <Shiz> because i don't know how npm works
2017-05-27 00:57:43 <Shiz> is install alpine pngquant and remove the offending precompiled binary
2017-05-27 00:57:47 <Shiz> and symlink it to alpine pngquant
2017-05-27 00:58:10 <Shiz> # apk add pngquant  and then   ln -sf /usr/bin/pngquant /mnt/mesos/sandbox/builds/docs/bootstrap-styled/node_modules/pngquant-bin/vendor/pngquant
2017-05-27 00:58:29 <Shiz> I don't have enough knowledge of npm to tell you if this is possible between installing the package and it trying to invoke it, though
2017-05-27 00:59:26 <dka_> Yes
2017-05-27 00:59:28 <dka_> it will work
2017-05-27 00:59:32 <dka_> I guess
2017-05-27 00:59:35 <dka_> but that's ugly
2017-05-27 00:59:51 <Shiz> not as ugly as people shipping precompiled binaries :)
2017-05-27 01:00:03 <Shiz> horrible practice on Linux machines imo, especially dynamically linked as that one seems to be
2017-05-27 01:00:23 <Shiz> but personal opinions and all that
2017-05-27 01:00:45 <Shiz> a more cleaner solution, I presume, would involve making your own fake pngquant-bin package and have npm pick up on it
2017-05-27 01:00:55 <Shiz> that ships no binaries and its entry point just points at the system pngquant
2017-05-27 01:01:07 <Shiz> but again, not enough knowledge of npm here to tell you how to exactly do that
2017-05-27 01:01:20 <dka_> it will work
2017-05-27 01:01:35 <dka_> I guess, I don't see why. But this will fix this error for I guess another one
2017-05-27 01:02:16 <dka_> I was having the dependency from this bundle: https://github.com/tcoopman/image-webpack-loader/blob/v2.0.0/package.json
2017-05-27 01:02:18 <Shiz> because precompiled binaries are not guaranteed to work across all Linux machines, as you just saw
2017-05-27 01:02:26 <Shiz> especially dynamically linked ones
2017-05-27 01:02:38 <dka_> I am trying to replace it for that one https://github.com/tcoopman/image-webpack-loader/blob/v3.3.1/package.json though I am not even sure if it will change anything
2017-05-27 01:02:42 <Shiz> only the ones the author happens to have on hand, which is usually ubuntu and with some luck centos :P
2017-05-27 01:03:04 <Shiz> i don't think it will
2017-05-27 01:03:24 <scv> its possible to build semi-universal bins but nobody ever seems to bother
2017-05-27 01:03:35 <scv> mainly because anybody who understands how also understands why its a bad idea :p
2017-05-27 01:03:37 <Shiz> yeah, you can do it with statically-linked musl binaries :P
2017-05-27 01:05:06 <Bun> that module pulls in a bunch of other packages that has similarly old (and even older) binaries, so probably not going to help you
2017-05-27 01:05:48 <scv> ah, the wonderful world of nodejs packages
2017-05-27 01:06:17 <scv> just stuff it into some opaque package, nobody's ever gonna need to touch it (/s)
2017-05-27 01:06:47 <Bun> that's why you put it in a container, so you never have to update it :^)
2017-05-27 01:11:30 <dka_> ok
2017-05-27 01:11:32 <dka_> So I guess
2017-05-27 01:11:44 <dka_> my best option is not to use alpine for the build
2017-05-27 01:12:04 <dka_> may I ask how can I have a docker without alpine (debian)
2017-05-27 01:12:21 <Bun> you change the FROM part to something else
2017-05-27 01:12:29 <dka_> it needs to be docker
2017-05-27 01:12:32 <dka_> otherwise it doesn't work
2017-05-27 01:12:55 <scv> that's a docker question rather than an alpine question
2017-05-27 01:13:12 <Bun> the FROM thing selects the base "OS", so that's what you need to change
2017-05-27 01:13:29 <dka_> If you look at all the example of docker in docker (dind), you will notice that they use "docker" as image. This is the only image that work with dind. What I did is to extend this image and installed nodejs, jdk, etc... myself
2017-05-27 01:14:28 <Bun> if you have docker in docker, why not put your debian container in the docker in the docker
2017-05-27 01:14:39 <scv> infinitely docked
2017-05-27 01:15:52 <dka_> because when I install docker inside debian, I have this error "Cannot connect to the Docker daemon. Is the docker daemon running on this host?"
2017-05-27 01:16:13 <dka_> this error doesn't happen when I use docker image
2017-05-27 01:16:16 <Bun> no no, you have docker running on alpine, and on that docker instance you install your debian container
2017-05-27 01:16:54 <dka_> it's not how gitlab-ci work
2017-05-27 01:16:57 <dka_> :D
2017-05-27 01:17:08 <Bun> sounds terrible
2017-05-27 01:17:19 <dka_> I know. But I must say thanks a lot for trying so hard
2017-05-27 01:18:28 <scv> boy that sounds rough
2017-05-27 01:18:55 <dka_> Yes you are right image-webpack-loader@3.3.1 doesn't change anything, same error.
2017-05-27 01:19:11 <dka_> So I need to reproduce docker:latest on a base image debian
2017-05-27 01:19:50 <dka_> This is the Dockerfile: https://github.com/docker-library/docker/blob/5a196cae40e2a0ab5050cf6d79b697e032352b24/17.05/Dockerfile
2017-05-27 01:19:55 <dka_> any idea how I could start ?
2017-05-27 01:20:36 <scv> lol
2017-05-27 01:20:46 <dka_> Oh I think I got it
2017-05-27 01:20:51 <Bun> s/apk add/apt install/ probably
2017-05-27 01:21:44 <scv> stuff like this makes me regret being interested in computers, i should just go run a taco truck and not subject myself to this madness :D
2017-05-27 01:22:07 <Bun> sounds good, can I visit
2017-05-27 01:22:13 <scv> sure
2017-05-27 02:42:03 <mepholic> honk hole
2017-05-27 03:22:17 <Classsic_> hi, somebody know how create custom iso?
2017-05-27 08:32:17 <thestranjer> Hey
2017-05-27 08:32:21 <thestranjer> Is anybody on?
2017-05-27 08:34:22 <Bun> guess not
2017-05-27 08:36:44 <thestranjer> Kek
2017-05-27 08:36:54 <thestranjer> Are you an Alpine "expert" by any chance, Bun?
2017-05-27 08:37:25 <Bun> alpine certified engineer, yes; how can I help you today?
2017-05-27 08:40:10 <thestranjer> Alright, well, I'm new, so sorry if this question is super duper obvious.
2017-05-27 08:40:33 <thestranjer> I have an HP Stream 13, and the NIC on that does not play nice with Linux. It's a BCM43142
2017-05-27 08:40:43 <thestranjer> Now, I can get it running on Ubuntu by install a couple of packages with dpkg
2017-05-27 08:40:56 <thestranjer> However, I'm not sure if that's appropriate -- or would even work -- using Alpine.
2017-05-27 08:41:29 <thestranjer> Also I'm aware that you may have been joking about being an Alpine certified engineer but I don't care.
2017-05-27 08:41:34 <thestranjer> Even if you were you might know what the deal is.
2017-05-27 08:41:44 <Bun> well, that depends on what is in those debs or whathaveyou
2017-05-27 08:41:59 <Bun> just the kernel module? and/or firmware?
2017-05-27 08:43:54 <Bun> this seems relevant: https://pkgs.alpinelinux.org/package/v3.6/main/x86/b43-fwcutter
2017-05-27 08:43:57 <thestranjer> Well, one of them was dkms, and the other one is bcmwl-kernel-source
2017-05-27 08:44:27 <thestranjer> That seems extremely relevant actually
2017-05-27 08:46:23 <Bun> https://wiki.alpinelinux.org/wiki/Connecting_to_a_wireless_access_point also some special instructions here in the bottom section
2017-05-27 08:46:54 <thestranjer> Oh wow, this is great, man.
2017-05-27 08:51:00 <thestranjer> Thanks a lot
2017-05-27 13:42:45 <Tsutsukakushi>  https://ollieparanoid.github.io/post/postmarketOS/ <= you guys seen this?
2017-05-27 13:42:55 <Tsutsukakushi> (alpine based)
2017-05-27 13:43:24 <scadu> posted on another Alpine channel
2017-05-27 15:52:14 <Shiz> Tsutsukakushi: neat
2017-05-27 18:57:26 <Guest58142> Hi! Any of your are using Alpine as your main OS? I mean, in your laptop or desktop PC, and not inside a VirtualMachine.
2017-05-27 18:58:06 <Guest58142> (I'm considering install Alpine as my main OS, but I want to know your experiences first, thanks)
2017-05-27 18:58:26 <Guest58142> (I'm currently using ArchLinux, used Debian, Ubuntu in the past)
2017-05-27 19:21:03 <Shiz> Guest58142: I ran it on my desktop for a while before I ditched my desktop
2017-05-27 19:21:08 <Shiz> I am currently running it on all of my servers
2017-05-27 19:21:13 <Shiz> and I know at least two people who use it as laptop OS
2017-05-27 19:21:14 <Shiz> :P
2017-05-27 19:26:53 <Guest58142> Shiz: tks!
2017-05-27 19:51:24 <fweinb> Hi there. Just trying to get Alpine Linux to boot on the new Udoo X86 board (https://www.udoo.org/docs-x86/Introduction/Introduction.html) setup-alpine works great but after rebooting it can't find the boot device. I tried to install it to the internal emmc (/dev/mmcblk0). It looks like that the initramfs can't access emmc devices. Any hints?
2017-05-27 19:54:36 <Shiz> hmm, sounds like you may need to add the relevant modules to mkinitfs.conf
2017-05-27 19:58:26 <fweinb> I just used the alpine standard iso from the website. So I need to build the initramfs myself?
2017-05-27 19:59:13 <Shiz> the initramfs is always built locally when you do an install
2017-05-27 19:59:15 <Shiz> :)
2017-05-27 19:59:24 <Shiz> mkinitfs.conf just tells it which kernel modules etc it should contain
2017-05-27 20:06:37 <fweinb> Sorry but I am new to this and can't find the mkinitfs.conf when I boot from the usb stick i created
2017-05-27 20:07:20 <Shiz> it should be present after you run setup-alpine, on your target disk
2017-05-27 20:08:02 <fweinb> But I can't boot into the target disk? Can I modify it after the installation from the usb boot?
2017-05-27 20:08:56 <Shiz> yeah
2017-05-27 20:12:32 <fweinb> I mounted mmcblk0p3 to /mnt/system/ and can now access /etc/mkinitfs/mkinitfs.conf now I do need to find the emmc driver and add it into the features string, right?
2017-05-27 20:14:21 <Shiz> right, if you chrooted into that rootfs, you should find the kernel module that applies to your mmc device and add it to /etc/mkinitfs/mmc.modules
2017-05-27 20:14:28 <Shiz> and make sure mmc is in the features string in mkinitfs.conf
2017-05-27 20:14:50 <Shiz> lspci -k   can help you with figuring out the module name
2017-05-27 20:15:01 <Shiz> sorry, /etc/mkinitfs/features.d/mmc.modules
2017-05-27 20:17:32 <fweinb> Okay. added the string "mmc" to the feature list. Now I need to find which module I need for mmc support. lspci -k just lists some classes and names hard to guess which one is the right one. I have no idea how to chroot the rootfs
2017-05-27 20:19:04 <Shiz> oh, mmc wasn't already in there?
2017-05-27 20:19:57 <fweinb> lspci -k is kinda cryptic. Nothing named mmc
2017-05-27 20:20:19 <Shiz> in the feature list, I mean
2017-05-27 20:20:29 <Shiz> if it wasn't already in the feature list, that may be enough to make it work :p
2017-05-27 20:20:39 <Shiz> do you have a separate boot partition?
2017-05-27 20:21:05 <fweinb> Yeah boot is on mmcblk0p1
2017-05-27 20:22:11 <Shiz> and root on p2?
2017-05-27 20:22:51 <fweinb> p3 i guess, that is what I mounted to edit the mkinitfs.conf
2017-05-27 20:22:55 <Shiz> right
2017-05-27 20:22:59 <Shiz> then p2 is probably swap
2017-05-27 20:23:01 <Shiz> what you want to do is
2017-05-27 20:23:24 <Shiz> chroot into the installed system, as such:
2017-05-27 20:23:32 <Shiz> mount /dev/mmcblk0p1 /mnt/system/boot
2017-05-27 20:23:37 <Shiz> mount --rbind /dev /mnt/system/dev
2017-05-27 20:23:42 <Shiz> mount -t proc none /mnt/system/proc
2017-05-27 20:23:48 <Shiz> mount -t sysfs none /mnt/system/sys
2017-05-27 20:23:52 <Shiz> chroot /mnt/system
2017-05-27 20:24:04 <Shiz> you should now be 'inside' the installed system with everything properly mounted
2017-05-27 20:24:36 <Shiz> can you btw answer my above question if mmc was already in the feature list or not? :p
2017-05-27 20:24:50 <fweinb> No it was not.
2017-05-27 20:24:54 <Shiz> ah, okay
2017-05-27 20:25:01 <Shiz> that's weird, I thought it was by default
2017-05-27 20:25:28 <Shiz> what does your /etc/mkinitfs/mkinitfs.conf look like now?
2017-05-27 20:27:36 <fweinb> sorry give me a sec to chroot.
2017-05-27 20:29:44 <Shiz> np
2017-05-27 20:32:17 <fweinb> featrues="ata base ide scsi usb virtio ext4 mmc" (mmc was added by me)
2017-05-27 20:39:24 <fweinb> So I assume I just no run "mkinitfs -c /etc/mkinitfs/mkinitfs.conf -b /" to recreate the initfs?
2017-05-27 20:44:07 <Shiz> fweinb: just # mkinitfs  should be enough
2017-05-27 20:44:14 <Shiz> also i hope you spelt features right in the actual file ;)
2017-05-27 20:44:33 <fweinb> Oh yes just a typo here.
2017-05-27 20:45:30 <fweinb> I will try rebooting. Thanks for your help.
2017-05-27 20:46:07 <fweinb> Awesome! Its running!
2017-05-27 20:48:25 <fweinb> But maybe mmc should be included by default.
2017-05-27 20:53:57 <Shiz> yes, I think it was before...
2017-05-27 20:54:03 <Shiz> Sorry you had to deal with that :P
2017-05-27 20:57:36 <fweinb> No problem. Amazing support! Thank you.
2017-05-27 20:58:01 <Shiz> \o
2017-05-27 21:22:11 <hmrodrigues> hey guys, I'm trying to run alpine on kvm but it doesn't detect the network interface
2017-05-27 21:23:18 <hmrodrigues> I use libvirt.
2017-05-27 21:23:29 <Shiz> what NIC type are you using?
2017-05-27 21:23:33 <hmrodrigues> the cmd I used to create the vm: virt-install --connect qemu:///system --name alpine --memory 2048 --vcpus 1 --cpu host --cdrom /var/lib/libvirt/iso/alpine-virt-3.6.0-x86_64.iso --disk size=10 --network network=default --graphics spice --video qxl --channel spicevm
2017-05-27 21:27:50 <scv> so what sort of emulated NIC are you using?
2017-05-27 21:30:10 <scv>  alternatively have you configured the network in libvirt?
2017-05-27 21:36:56 <hmrodrigues> How can I see the type? I just use the default network
2017-05-27 21:36:59 <hmrodrigues> network works on other virtual machines out of the box
2017-05-27 21:41:13 <BitL0G1c> hmrodrigues - inside alpiine you need to run /sbin/setup-interfaces
2017-05-27 21:42:27 <BitL0G1c> & probably - rc-update add networking
2017-05-27 21:44:03 <hmrodrigues> @BiL0GIc ip a still only shows lo
2017-05-27 21:44:57 <hmrodrigues> if I add eth0 to /etc/networking/interfaces it says that it can't find the device
2017-05-27 21:46:42 <Shiz> hmrodrigues: uuh
2017-05-27 21:47:33 <Shiz> hmrodrigues: dump the libvirt xml, it should be in a <model> field within <devices> -> <interfaces>
2017-05-27 21:49:07 <hmrodrigues> rtl8139'
2017-05-27 21:49:40 <Shiz> ah
2017-05-27 21:49:45 <darkfader> wtf
2017-05-27 21:49:53 <darkfader> ah, emulated
2017-05-27 21:49:59 <darkfader> i was in shock for a moment
2017-05-27 21:50:02 <Shiz> lol
2017-05-27 21:50:36 <Shiz> hmrodrigues: one sec
2017-05-27 21:51:14 <hmrodrigues> @Shiz alright
2017-05-27 21:51:57 <Shiz> okay, what happens if you # modprobe 8139cp
2017-05-27 21:52:37 <hmrodrigues> not found in modules.dep
2017-05-27 21:52:50 <Bun> the virt kernel only has virtio iirc
2017-05-27 21:53:44 <Shiz> ah
2017-05-27 21:53:48 <Shiz> hmrodrigues: are you using the virt kernel?
2017-05-27 21:55:15 <hmrodrigues> yes
2017-05-27 21:56:00 <hmrodrigues> working now, I told libvirt to use virtio
2017-05-27 22:00:56 <hmrodrigues> as I'm already here, when should I run alpine from the disk and when it should run from tmpfs in virtual machines?
2017-05-27 22:02:32 <hmrodrigues> is tmpfs only for data storage or it can be used to deploy an app or host postgres?
2017-05-27 22:03:38 <Bun> the name tmpfs gives it away doesn't it? if you want persistance, store things on disk
2017-05-27 22:04:25 <Bun> and running postgres purely from memory/swap may or may not work depending on how much memory you have available
2017-05-27 22:05:21 <hmrodrigues> when I say tmps I'm saying run alpine from tmpfs. like when running setup-disk the step where is asks how to use the drive
2017-05-27 22:05:45 <hmrodrigues> postgres was an example haha
2017-05-27 22:05:58 <kaniini> if you are running postgresql, you most likely do not want to run from tmpfs
2017-05-27 22:06:13 <kaniini> tmpfs is mostly for setups where configuration is separate from data
2017-05-27 22:06:18 <kaniini> such as hypervisor control planes
2017-05-27 22:06:39 <kaniini> in such case, you would run from tmpfs and store your disk images on your disks (provisioning them however you wish, likely with lvm(8))
2017-05-27 22:07:11 <kaniini> that way if there is a disk problem you can log in and diagnose the issue
2017-05-27 22:07:12 <hmrodrigues> oh ok I understand
2017-05-28 14:20:34 <_spOOn_> hey guys, I'm new to alpine, and I'm going through https://wiki.alpinelinux.org/wiki/Creating_an_Alpine_package to create a package
2017-05-28 14:21:44 <_spOOn_> during abuild -r it appears to be failing, as its trying to perform the install, and the user I'm running it as doesn't have permissions to write to the destination dir (ie, /usr)
2017-05-28 14:23:31 <_ikke_> _spOOn_: you need to install to $pkgdir
2017-05-28 14:23:37 <_ikke_> not to /
2017-05-28 14:24:13 <_spOOn_> _ikke_: if I share my APKBUILD, are you able to point out where I've stuffed up?
2017-05-28 14:24:22 <_spOOn_> again, sorry for the dumb questions...
2017-05-28 14:24:31 <_ikke_> _spOOn_: Don't worry
2017-05-28 14:24:36 <_spOOn_> new to alpine
2017-05-28 14:24:36 <_ikke_> _spOOn_: I can take a look
2017-05-28 14:25:32 <_ikke_> https://wiki.alpinelinux.org/wiki/APKBUILD_Reference#pkgdir
2017-05-28 14:25:54 <_ikke_> https://wiki.alpinelinux.org/wiki/APKBUILD_examples:Simple\
2017-05-28 14:29:52 <_spOOn_> _ikke_: https://paste.ee/p/i6TN2
2017-05-28 14:30:03 <_spOOn_> thats what I've put together so far...
2017-05-28 14:32:00 <_ikke_> _spOOn_: let me see
2017-05-28 14:32:32 <_ikke_> https://wiki.alpinelinux.org/wiki/APKBUILD_examples:Python
2017-05-28 14:32:48 <_spOOn_> yeah I looked through those...
2017-05-28 14:32:48 <_ikke_> you need to add --root="$pkgdir" to the install command
2017-05-28 14:33:02 <_spOOn_> okies, ill give that a shot
2017-05-28 14:35:15 <_spOOn_> hmm, getting closer...
2017-05-28 14:39:02 <_spOOn_> okies, think I have it all set to go now, needed the doc subpackage, and not a dev subpackage...
2017-05-28 14:39:31 <_spOOn_> _ikke_: thanks for the help
2017-05-28 14:40:47 <_ikke_> np
2017-05-28 14:44:19 <_spOOn_> _ikke_: one last question
2017-05-28 14:45:09 <_spOOn_> now that I have it working, am I just dumping the APKBUILD in aports/testing and then creating a pull request?
2017-05-28 14:45:39 <_ikke_> You need to create a subdir
2017-05-28 14:45:48 <_ikke_> but then, yes
2017-05-28 14:46:39 <_spOOn_> cool, thanks
2017-05-28 14:46:51 <_spOOn_> again, sorry for the dumb questions :)
2017-05-28 14:49:59 <_ikke_> no need to excuse
2017-05-28 15:19:44 <_spOOn_> hmm, seems my tests in travis ci have failed :(
2017-05-28 15:35:27 <_ikke_> link?
2017-05-28 21:34:55 <thestranjer> Hey
2017-05-28 22:38:44 <thestranjer> So I'm getting an odd error.
2017-05-28 22:39:12 <thestranjer> It says permission denied when I try to SSH into my little box
2017-05-28 22:40:36 <kaniini> password ?
2017-05-28 22:41:05 <thestranjer> Yeah
2017-05-28 22:41:31 <kaniini> go into /etc/ssh/sshd_config and change the PermitRootLogin setting
2017-05-28 22:41:42 <kaniini> since alpine 3.6, it defaults to requiring SSH keys instead of password
2017-05-28 22:42:13 <thestranjer> Oh, well, okay
2017-05-28 22:42:40 <kaniini> (or just use an SSH key)
2017-05-28 22:42:56 <thestranjer> Madness.
2017-05-28 22:43:52 <thestranjer> Alright that worked.
2017-05-28 22:44:45 <thestranjer> Thank you for the advice
2017-05-28 22:53:36 <Xe> thestranjer: i don't think it's madness tbh
2017-05-28 22:53:58 <Xe> anyone can have a password, crypto keypairs are less easy to steal
2017-05-28 23:31:52 <Tahr-user> hello
2017-05-28 23:35:25 <Classsic_> hi, how is the best way to upgrade 3.3 version to 3.6?
2017-05-29 01:37:27 <TBB> in general, backup your data and reinstall. it's in no way Alpine specific, and it's less risk free than taking your chances upgrading
2017-05-29 01:37:39 <TBB> oh wait
2017-05-29 01:37:54 <TBB> 4:37 am, making silly mistakes
2017-05-29 01:38:07 <TBB> it's more risk free than upgrading
2017-05-29 04:18:08 <thestranjer> Alrihgt, I found a weird bug
2017-05-29 04:18:56 <thestranjer> When your WiFi password has spaces in it, the setup-alpine script fails
2017-05-29 04:19:19 <ncl> lol
2017-05-29 04:19:23 <thestranjer> It only takes in the first word.
2017-05-29 04:19:30 <ncl> sounds like unquoted variables
2017-05-29 04:19:35 <thestranjer> Agreed
2017-05-29 04:19:58 <thestranjer> So I'm going to futz around with it a bit and look at stuff like 'setup-alpine'. Is that a bash script? About to find out.
2017-05-29 04:21:30 <thestranjer> It is!
2017-05-29 04:22:54 <thestranjer> Alright let's see if I can find where it passes this off to whatever other script that gets passwords from you
2017-05-29 04:40:07 <thestranjer> Also, you better not run setup-alpine more than once.
2017-05-29 04:55:42 <thestranjer> Alright, so I got it to work by modifying /sbin/setup-interfaces to use quotation marks
2017-05-29 04:55:51 <thestranjer> But it's now, after the reboot, not getting a DHCP lease.
2017-05-29 05:17:39 <thestranjer> Yeah so.
2017-05-29 05:17:53 <thestranjer> UDHCP is not working.
2017-05-29 05:18:21 <thestranjer> It just sends a discover a few times, and then fails.
2017-05-29 05:30:23 <thestranjer> Yeah, it looks like Alpine doesn't function correctly with a WiFi card
2017-05-29 05:30:25 <thestranjer> Unfortunate.
2017-05-29 07:18:52 <freyr> Wiki states that edge is unstable and not meant to be used. However many packages exist only in edge/testing. Is it safe to use edge/testing along with stable/main?
2017-05-29 07:20:28 <Shiz> it's not unsafe, but it may also simply not work
2017-05-29 07:21:01 <thestranjer1> Hi there.
2017-05-29 07:21:06 <Shiz> packages in testing are compiled against edge, so if library dependencies in edge are incompatible with those in stable, it will simply refuse to execute
2017-05-29 07:21:12 <Shiz> think for instance soname bumps
2017-05-29 07:21:15 <Shiz> hello
2017-05-29 07:21:26 <TheStranjer> Alright, so I'm new.
2017-05-29 07:21:36 <TheStranjer> To this distribution, anyway.
2017-05-29 07:22:24 <Shiz> welcome
2017-05-29 07:22:30 <TheStranjer> I'm hoping to install qbittorrent. I'm looking to make a seedbox. However, it's not in the repositories for apk add, and I'm not sure how I'd go about installing it.
2017-05-29 07:22:41 <TheStranjer> I'm mostly used to Debian-based distributions so, this is a bit alien to me.
2017-05-29 07:24:05 <Shiz> seems like we don't package qbittorrent right now
2017-05-29 07:24:16 <freyr> @Shiz: Oh, I've forgotten it is not source based. Is there any way to help with testing packages (to push them into stable)? Do you have some testing infrastructure like fedora's bodhi?
2017-05-29 07:24:31 <Shiz> isn't qbittorrent a graphical client, though TheStranjer
2017-05-29 07:24:44 <Shiz> that seems like it wouldn't be that fit for a seedbox
2017-05-29 07:24:48 <Shiz> but maybe i'm mistaken
2017-05-29 07:25:23 <TheStranjer> I thought it was command line.
2017-05-29 07:25:32 <Shiz> freyr: packages tend to get moved into the community repos after we get confirmation from people that they work and someone is willing to maintain them, essentially
2017-05-29 07:25:43 <Shiz> so if a package from testing works from you, great! let us know
2017-05-29 07:25:44 <TheStranjer> Now that you mention it, the "q" in the beginning should be a tell-tale sign that it's a GUI-based one.
2017-05-29 07:26:15 <Shiz> TheStranjer: i may recommend rtorrent or transmission-cli; we package both :)
2017-05-29 07:26:21 <TheStranjer> That said, I see everything wants a Docker container on here when I look for it.
2017-05-29 07:26:30 <TheStranjer> Yeah.
2017-05-29 07:26:37 <TheStranjer> I was going by a recommendation from someone else.
2017-05-29 07:26:41 <TheStranjer> I'm a huge fan of Transmission, anyway
2017-05-29 07:26:53 <TheStranjer> And `apk add transmission-cli` worked with zero hassle, so
2017-05-29 07:26:55 <TheStranjer> Thanks for the advice.
2017-05-29 07:26:59 <Shiz> :)
2017-05-29 07:27:06 <Shiz> sorry about your wifi issue, btw
2017-05-29 07:27:21 <Shiz> could you tell me what kind of chipset you use?
2017-05-29 07:27:57 <TheStranjer> Honestly, I was just bitching into the wind on that one. I decided to do what I should have done anyway: use the Ethernet port.
2017-05-29 07:28:24 <Shiz> eh, if something doesnt work its annoying, no need to blame yourself there
2017-05-29 07:28:56 <TheStranjer> That said, I was futzing around with some of the bash scripts that came with it, and there WAS an issue where it wasn't quoting the WiFi password right.
2017-05-29 07:29:06 <TheStranjer> So my gut says that this was just a recurring issue and I couldn't find the other case of it.
2017-05-29 07:29:30 <Shiz> yeah, I recall an issue like that a bit back
2017-05-29 07:29:31 <TheStranjer> I think this is so because I could get it to connect and obtain an IP address through DHCP during installation, but not after the reboot.
2017-05-29 07:29:55 <TheStranjer> So it's likely not saving the right password, or not submitting the right password to wpa_supplicant at some point, or something like that.
2017-05-29 07:30:13 <Shiz> i'll bump that issue in our backlog if i can find it
2017-05-29 07:30:22 <TheStranjer> I mean that's my guess. Like I said, I don't really know.
2017-05-29 07:31:03 <Shiz> well, at least the spaces-in-password is a known issue, so that's definitely worth bumping in prio
2017-05-29 07:31:10 <Shiz> i thought it already had been fixed, but I guess not
2017-05-29 07:32:07 <TheStranjer> Well, I was also on 3.5.2
2017-05-29 07:32:11 <TheStranjer> And I just noticed that there's a 3.6
2017-05-29 07:32:47 <clandmeter> I fixed WiFi psk in 3.6
2017-05-29 07:32:57 <Shiz> :)
2017-05-29 07:33:31 <TheStranjer> So there you have it.
2017-05-29 07:33:37 <clandmeter> We should probably backport it
2017-05-29 07:33:58 <clandmeter> But I'm on holiday
2017-05-29 07:34:07 <TheStranjer> Yeah, when I first found it, I was like "SCORE! Now I get to make a pull request and I'm just a nooblet to this distro still"
2017-05-29 07:34:19 <TheStranjer> But then I looked at the GitHub repository and it had already been fixed
2017-05-29 07:34:36 <TheStranjer> Blast! Another day to put my name on an obvious fix (that only becomes obvious when you use the app)
2017-05-29 07:35:53 <Shiz> :P
2017-05-29 07:35:59 <Shiz> don't worry, I'm sure there are many more opportunities
2017-05-29 07:38:27 <TheStranjer> So I'm not the first to turn an old beat up craptop into a seedbox out of Alpine, huh.
2017-05-29 07:38:30 <TheStranjer> I'm not surprised.
2017-05-29 07:39:06 <Shiz> not sure about seedboxes, but i know someone running alpine on their netbook
2017-05-29 07:39:19 <Shiz> i used to run it on my desktop until i ditched that thing and run it on all my servers :P
2017-05-29 07:41:58 <TheStranjer> I mean, I will admit I've caved to The Man and will use Ubuntu on desktops.
2017-05-29 07:42:12 <TheStranjer> And really, laptops that are meant for everyday use for, you know, regular stuff.
2017-05-29 07:43:19 <TheStranjer> I use the weirder distributions to run servers and specific use case boxes.
2017-05-29 07:43:19 <TheStranjer> I mean, I know a lot of people say systemd is basically malware, but I'll eat it in the interest of convenience.
2017-05-29 07:58:10 <krmela> hi there
2017-05-29 08:03:28 <Marc1n> hi
2017-05-29 08:05:26 <krmela> i am new at alpine linux   but with some history in  linux i have problem to install  postrgresql-dev but it conflicts with openssl-dev which i need to have installed  any advice
2017-05-29 08:09:33 <Marc1n> paste the error :d
2017-05-29 08:10:13 <fabled> krmela, we build things by default against libressl
2017-05-29 08:10:39 <fabled> trying to have libressl-dev and openssl-dev installed same time is not supported; could you build your things against libressl?
2017-05-29 08:10:51 <fabled> if not, you may need to switch installed packages in between
2017-05-29 08:18:46 <scippio> hi all...
2017-05-29 08:19:58 <krmela> well i am trying use alpine as host for rails app
2017-05-29 08:20:03 <scippio> I was upgrading certbot package to newer version (0.7.0-r0 -> 0.14.0-r0), but when I want run it I get: "pkg_resources.DistributionNotFound: The 'pyrfc3339' distribution was not found and is required by certbot"
2017-05-29 08:20:53 <scippio> but package "py-rfc3339" is installed...
2017-05-29 08:21:31 <scippio> :'(
2017-05-29 08:23:34 <mystified> hi Guys just attempted install with setup-alpine
2017-05-29 08:23:51 <mystified> Ive come to selecting drive.
2017-05-29 08:23:56 <mystified> Sys lvm etc
2017-05-29 08:24:45 <mystified> my partitions i wish to choose is Gpt dev/sda4
2017-05-29 08:25:05 <mystified> I select sda
2017-05-29 08:25:44 <mystified> I dont have an option to install sda4 that I have already partitioned
2017-05-29 08:25:59 <mystified> as ext4
2017-05-29 08:29:23 <Marc1n> have you check the wiki?
2017-05-29 08:29:41 <mystified> looking right now
2017-05-29 08:30:39 <mystified> Note: When the setup-alpine script asks for a disk, say "none". It will then prompt whether you'd like to preserve modifications on any writable medium
2017-05-29 08:30:55 <mystified> I'll try that
2017-05-29 08:31:33 <mystified> no thats not it.
2017-05-29 08:31:39 <mystified> thats for diskless
2017-05-29 08:32:16 <Marc1n> what about part Installing alpine on hdd dualbooting?
2017-05-29 08:33:41 <mystified> looking at that
2017-05-29 08:33:44 <Shiz> mystified: you should mount the FS as you'd like it to a mountpoint (including /boot parts and the like)
2017-05-29 08:33:49 <Shiz> and then run setup-disk /that/mnt/point
2017-05-29 08:34:04 <mystified> i'm not a techie
2017-05-29 08:34:17 <mystified> mount -t ext3 /dev/sda4 /mnt
2017-05-29 08:34:24 <mystified> with that
2017-05-29 08:34:44 <mystified> Shiz at what point
2017-05-29 08:35:04 <mystified> do I mount the drive &
2017-05-29 08:35:26 <mystified> so I should not run the full installer
2017-05-29 09:49:20 <TheStranjer> You guys even package Ruby! Sweet.
2017-05-29 09:54:16 <alpinist-> hi, I'm using coreboot with a GRUB2 payload and I'm not able to boot alpine-linux after I've installed it to a hard drive. where do I find the kernel and initrd to boot manually?
2017-05-29 10:07:17 <Marc1n> alpinist-: 3.6.0?
2017-05-29 10:07:51 <alpinist-> Marc1n: Yes.
2017-05-29 10:09:22 <Marc1n> during installation you choosed "sys" ?
2017-05-29 10:10:00 <alpinist-> Marc1n: let me do install it again and get back at you, I'm unsure.
2017-05-29 10:10:08 <alpinist-> -do
2017-05-29 10:10:55 <Marc1n> cool , check it
2017-05-29 10:17:35 <alpinist-> Marc1n: yes, "sys".
2017-05-29 10:20:28 <Marc1n> and still no luck huh?
2017-05-29 10:20:47 <alpinist-> nope
2017-05-29 10:21:27 <Bun> does that work, grub2 payload + syslinux?
2017-05-29 10:23:21 <Bun> the kernel and initrd are in /boot called vmlinuz and initramfs (if vanilla) or vmlinuz-suffix/initramfs-suffix for non-vanilla kernels
2017-05-29 10:23:58 <Marc1n>   LINUX vmlinuz-virthardened
2017-05-29 10:23:58 <Marc1n>   INITRD initramfs-virthardened
2017-05-29 10:24:05 <Marc1n> in  /boot
2017-05-29 10:25:19 <Marc1n> but in my case i use version for virtualization
2017-05-29 10:27:08 <Marc1n> maybe you will need to install bootloader manually after instalation
2017-05-29 10:27:28 <Marc1n> everything is on wiki ( installing alipne on hdd dualbooting ) / Installing bootloader manually
2017-05-29 10:34:00 <alpinist-> bun Marc1n: I've mounted the disk from the alpine-linux USB stick and had a look; it should be "/boot/vmlinuz-hardened". However, if I try to load it from the GRUB command line, I get "error: file '/boot/vmlinuz-hardened' not found".
2017-05-29 10:36:47 <Shiz> can grub find your usb stick?
2017-05-29 10:36:56 <Shiz> try ls and see the device nodes it returns
2017-05-29 10:36:59 <alpinist-> Shiz: yes, that works.
2017-05-29 10:37:07 <Shiz> so e.g.
2017-05-29 10:37:11 <Shiz> ls (hd0)/ gives the contents?
2017-05-29 10:37:27 <alpinist-> yes, the lvm device is there (I'm using "lvm" & "sys" during installation)
2017-05-29 10:37:36 <alpinist-> oh, wait
2017-05-29 10:38:16 <alpinist-> Shiz: well, it's lvm, so I guess "ls lvm/vg0-lv_root" won't work =)
2017-05-29 10:38:32 <Shiz> no :p
2017-05-29 10:38:40 <Shiz> kernel on lvm is not gonna work
2017-05-29 10:38:46 <Shiz> your boot part would need to be separate
2017-05-29 10:39:01 <alpinist-> okay, so should I use "sys" without lvm and try again?
2017-05-29 10:39:17 <Shiz> by default it will create a separate boot part
2017-05-29 10:39:52 <Shiz> whats your part layout look like?
2017-05-29 10:40:59 <alpinist-> Shiz: setup-alpine did that for me
2017-05-29 10:41:16 <alpinist-> so I had one lv "root" and one lv "swap" IIRC
2017-05-29 10:41:23 <Shiz> hmm
2017-05-29 10:42:08 <Shiz> well, can you verify your part layout? :P
2017-05-29 10:42:44 <alpinist-> Shiz: yes, I can. Right now I'm installing it again without lvm just to see if that works...
2017-05-29 10:43:09 <Shiz> aight
2017-05-29 10:45:35 <alpinist-> <@Shiz> ls (hd0)/ gives the contents? -> No, it doesn't (I have "memdisk", "proc", "cbfdisk", "ahci0",  "ahci0,msdos3", "ahci0,msdos2" and "ahci0,msdos1" available from grub>).
2017-05-29 10:46:01 <Shiz> what about ahci0,msdos1
2017-05-29 10:46:08 <Shiz> ls (ahci0,msdos1)
2017-05-29 10:46:17 <Shiz> optionally with slash behind
2017-05-29 10:46:44 <alpinist-> all "ls ahci....) outputs return an empty line
2017-05-29 10:47:28 <alpinist-> ah
2017-05-29 10:47:29 <alpinist-> wait
2017-05-29 10:47:55 <alpinist-> so I do have to use the brackets as well^^
2017-05-29 10:49:20 <alpinist-> Shiz: "grub> ls (ahci0,msdos1)" returns "filesystem ext*" and the UUID, "Partition start at 1024KiB - Total size 102400KiB"
2017-05-29 10:49:46 <Shiz> add a / at the end of that ls
2017-05-29 10:50:25 <alpinist-> now vmlinuz-hardened shows up
2017-05-29 10:50:40 <alpinist-> I'll try using that
2017-05-29 10:50:43 <alpinist-> just a sec
2017-05-29 10:52:25 <Shiz> yeah i don't htink you need to add an explicit /boot
2017-05-29 10:52:28 <Shiz> since it's already the boot part
2017-05-29 10:52:51 <alpinist-> I wonder what my "root" is, "root='(ahci,msdos1)'" won't work.
2017-05-29 10:53:10 <Shiz> that should work, weird
2017-05-29 10:54:25 <alpinist-> typo, it works. :/
2017-05-29 10:56:47 <alpinist-> I'll need to do that again, "grub> boot" won't do anything, no output, no new line, just the fan of the laptop blowing...
2017-05-29 11:01:25 <alpinist-> Shiz: here's what I do: "grub> set root='(ahci0,msdos1)'" > "grub> linux /vmlinuz-hardened root=(ahci0,msdos1)" > "grub> initrd /initramfs-hardened" > "grub> boot"
2017-05-29 11:01:39 <alpinist-> ^^ the HDD LED blinks a couple of times and then nothing happens.
2017-05-29 11:01:53 <alpinist-> I wonder where the error lies
2017-05-29 11:01:55 <alpinist-> any ideas?
2017-05-29 11:03:07 <Shiz> probably missing command line args
2017-05-29 11:03:39 <Shiz> alpinist-: linux isn't going to like root=(ahci0,msdos1) much
2017-05-29 11:03:41 <Shiz> that's grub syntax
2017-05-29 11:03:47 <Shiz> (as kernel command line)
2017-05-29 11:03:54 <alpinist-> hmmm
2017-05-29 11:04:03 <alpinist-> I just tried without, no difference.
2017-05-29 11:04:07 <Shiz> check if you have an extlinux.conf
2017-05-29 11:04:12 <alpinist-> I do have that
2017-05-29 11:04:13 <Shiz> take the command line params from that file
2017-05-29 11:04:15 <Shiz> :P
2017-05-29 11:04:20 <Shiz> (after the APPEND statement)
2017-05-29 11:04:23 <alpinist-> that's a splendid idea :)
2017-05-29 11:04:53 <damongant> quick question, can I get the rpi build to DHCP + SSH on boot, don't have an HDMI cable or USB keyboard here right now.
2017-05-29 11:04:56 <damongant> ethernet tho
2017-05-29 11:05:25 <Shiz> damongant: yes, should be possible
2017-05-29 11:05:30 <Shiz> you may need an apkovl file
2017-05-29 11:05:40 <Shiz> to start sshd on boot and add your authorized keys
2017-05-29 11:05:47 <Shiz> brb, lunch
2017-05-29 11:11:21 <alpinist-> Shiz: Using the parameters from extlinux.conf worked. My guess is that it's about "ext4". Thank you very much indeed for the help! =)
2017-05-29 11:12:56 <wenubuntu> hh
2017-05-29 11:38:58 <Shiz> alpinist-: np, glad it worked out :)
2017-05-29 14:10:43 <TBB> is there documentation for APKBUILD directives like provides and such, or should I just read the source?
2017-05-29 14:56:26 <TBB> (no; reading the source :)
2017-05-29 15:25:07 <clandmeter> TBB, check our wiki
2017-05-29 16:42:52 <TBB> clandmeter, I did but besides the "Abuild and helpers" page didn't find much else
2017-05-29 16:43:34 <TBB> however, I did read the source and made notes as I went through it, a couple more things are now clearer for me
2017-05-29 16:47:12 <clandmeter> documentation is not alpine's best part.
2017-05-29 16:47:17 <clandmeter> sorry about that.
2017-05-29 17:00:47 <TemptorSent> TBB - there is some documentation under https://wiki.alpinelinux.org/wiki/APKBUILD_Reference that may be of help.
2017-05-29 17:14:54 <magellanic> hi, what defines package python to be python2 in 3.6? I cannot find the meta package for it, so I'm curious
2017-05-29 17:15:21 <magellanic> closest I can find is, https://git.alpinelinux.org/cgit/aports/tree/main/python/APKBUILD?h=3.3-stable
2017-05-29 17:16:09 <magellanic> and https://pkgs.alpinelinux.org/package/v3.3/main/x86_64/python
2017-05-29 17:16:28 <magellanic> if I change 3.3 to 3.6 in either link it fails
2017-05-29 17:21:35 <Shiz> magellanic: https://git.alpinelinux.org/cgit/aports/tree/main/python2?h=3.6-stable
2017-05-29 17:21:45 <Shiz> in the APKBUILD:
2017-05-29 17:21:47 <Shiz> provides="python=$pkgver-r$pkgrel"
2017-05-29 17:21:49 <Shiz> replaces="python"
2017-05-29 17:23:47 <magellanic> ah okay, hmm. So in 3.6 if you apk add python, it knows to fetch python2, I was just wondering how, because there are python2 and python3 packages as well
2017-05-29 17:25:25 <Shiz> well, there you go :P
2017-05-29 17:25:33 <Shiz> there is not necessarily a 1-to-1 mapping from APKBUILD to package
2017-05-29 17:25:37 <magellanic> makes sense thought, thanks. So if I want python3 specifically I should say apk add python3...
2017-05-29 17:25:44 <Shiz> most APKBUILDs provide multiple packages (think subpackages and the like)
2017-05-29 17:25:47 <Shiz> yeap
2017-05-29 17:26:10 <magellanic> cool, thanks
2017-05-29 17:51:24 <discensa> hi all, the gnome shell de is not yet on alpine is it? better to use xfce?
2017-05-29 17:53:06 <TBB> I'd recommend using XFCE for now at least
2017-05-29 17:53:35 <TBB> it's the most stable of the DE's I've tried on Alpine so far
2017-05-29 17:54:11 <discensa> thanks TBB, that's not a problem
2017-05-29 19:03:49 <TheStranjer> By the way.
2017-05-29 19:03:54 <TheStranjer> I got Alpine working for my purposes entirely
2017-05-29 19:03:56 <TheStranjer> Great stuff man
2017-05-29 19:04:14 <_ikke_> TheStranjer: \o/
2017-05-29 19:14:21 <magellanic> alpine is a wonderful container distro, security focus and small, love it
2017-05-29 19:24:17 <Shiz> it's also a wonderful non-container distro ;p
2017-05-29 19:25:23 <scv> containers in 2017
2017-05-29 19:25:25 <scv> what a thought
2017-05-29 19:28:41 <magellanic> true, I'm just too used to a bloated desktop I guess ;p
2017-05-29 19:32:33 <TheStranjer> I'm not actually in a container
2017-05-29 19:32:36 <TheStranjer> I put this thing directly onto the drive
2017-05-29 19:34:46 <TheStranjer> Wait.
2017-05-29 19:34:55 <TheStranjer> It's in MusicBrainz but it's not getting it
2017-05-29 19:52:50 <discensa2> I was just wondering, does Alpine provide packages for video & audio codecs like gstreamer? Or is that not the kind of thing it's for?
2017-05-29 19:53:17 <clandmeter> we provide them yes.
2017-05-29 19:54:16 <clandmeter> discensa2: check http://pkgs.alpinelinux.org/packages?name=*gst*&branch=edge&repo=&arch=x86_64&maintainer=
2017-05-29 19:55:15 <discensa2> great, thanks. they're in the edge repo! that's why I couldn't find em. cheers
2017-05-29 19:57:13 <discensa2> my final question. it doesn't seem like thunderbird is there. not necessarily a problem, I can use claws, I was just curious as to why
2017-05-29 19:57:44 <Shiz> doesn't seem like anyone bothered to package it :P
2017-05-29 19:57:50 <Shiz> didn't mozilla drop thunderbird too?
2017-05-29 19:58:09 <Shiz> oh, it got decoupled
2017-05-29 19:58:34 <discensa2> yeah they dropped it half-way
2017-05-29 19:58:57 <discensa2> i'll take the opportunity to discover claws :)
2017-05-29 19:59:30 <discensa2> i'm really excited about alpine, keep up the good work guys!
2017-05-29 20:00:01 <Shiz> \o
2017-05-29 22:39:07 <dunx> stable DEs?
2017-05-29 22:39:15 <dunx> what about something more simple, like Ratpoison?
2017-05-30 00:15:45 <oppenhizzy> I'm trying to get connman working but I keep getting a "/net/connman/technology/wifi: Not supported" error when I try to scan. Anyone have any suggestions?
2017-05-30 00:19:05 <Shiz> do you have wpa_supplicant installed?
2017-05-30 00:19:23 <Shiz> if so, try starting it
2017-05-30 00:23:09 <oppenhizzy> Lemme try that out. I assumed connman would start it on its own.
2017-05-30 00:24:26 <Shiz> apparently it may fail too
2017-05-30 00:24:29 <Shiz> to*
2017-05-30 00:29:55 <Shiz> ah, hmm
2017-05-30 00:30:23 <Shiz> yeah i think it just wants it already running
2017-05-30 00:32:13 <oppenhizzy> No luck. Still same error.
2017-05-30 00:32:50 <Shiz> i guess try starting connmand in debug mode
2017-05-30 00:32:50 <oppenhizzy> Yeah, that's what I tried.
2017-05-30 00:32:57 <Shiz> service connman stop and
2017-05-30 00:33:03 <Shiz> connmand -dn
2017-05-30 00:33:09 <Shiz> and see what goes awry
2017-05-30 00:33:27 <oppenhizzy> Ok
2017-05-30 00:40:02 <oppenhizzy>  The debug messages don't seem terribly enlightening.
2017-05-30 05:01:55 <jpas> Hey, is anyone else having issues booting fresh alpine 3.6 on a raspberry pi 3?
2017-05-30 07:40:53 <pickfire> jpas: I am also having issues booting alpine linux 3.6 on raspberry pi 2/3.
2017-05-30 10:47:22 <_ikke_> What can prevent root login on a serial interface? It does not even ask for a password
2017-05-30 10:47:53 <_ikke_> hmm, looks like I need to update /etc/inittab
2017-05-30 10:48:52 <IcePic> mmm, root logins on serial. That was a while ago. logindevperms and marking the console as "secure" to getty springs to mind, from ~20 years ago.
2017-05-30 10:48:53 <_ikke_> hmm, might be something scaleway specific
2017-05-30 10:49:19 <przemoc> you need to add your serial tty to /etc/securetty too if it's not there already
2017-05-30 10:49:41 <_ikke_> It's not there
2017-05-30 10:50:05 <_ikke_> przemoc: that was it, thanks!
2017-05-30 12:24:02 <_spOOn_> anyone here using virtualbox on alpine?
2017-05-30 12:29:18 <asie> i used to for a bit
2017-05-30 12:29:21 <asie> way back when
2017-05-30 12:37:09 <_spOOn_> asie: did you have the readlink: unrecognized option: e issue back then :)
2017-05-30 12:41:58 <mips> Hi, need some help with the installer, I keep on getting sfdisk (missing):
2017-05-30 12:41:59 <mips>  required by: world[sfdisk]
2017-05-30 12:41:59 <mips> syslinux (missing):
2017-05-30 12:41:59 <mips>   required by: world[syslinux] and the installer-exits. I find no solution on google just other people with the same issue.
2017-05-30 12:45:14 <asie> _spOOn_: no, sorry
2017-05-30 12:50:46 <mips> Could anybody assist by any chance?
2017-05-30 12:55:43 <mips> seems some of the repos are are fubar, got a progress bar going now
2017-05-30 13:58:01 <TheStranjer> I should figure out how to hook this thing up to my PureVPN account.
2017-05-30 13:58:14 <TheStranjer> So that way my ISP can't give me a hard time for being on a bunch of trackers
2017-05-30 14:27:33 <iron_houzi> Where can I see the actual difference between the different alpine iso's apart from guessing based on the bullet points on the download page?
2017-05-30 14:28:11 <TheStranjer> There's a repository, right?
2017-05-30 14:28:36 <iron_houzi> TheStranjer: Is that last comment addressed to me?
2017-05-30 14:28:43 <TheStranjer> Yeah.
2017-05-30 14:28:55 <TheStranjer> Don't they ship a commit number or something with it?
2017-05-30 14:31:29 <iron_houzi> TheStranjer: Not sure how this is answering my question, but that's probably my fault. Let me try to be more specific: the download page presents options. Standard, Vanilla, Virtual, etc .. along with bullet points that allude to the differences. What I am looking for is concrete differences in terms of preinstalled packages and differences in configuration or some other significant factors.
2017-05-30 14:31:58 <TheStranjer> Yeah I get that. I made a mistake myself.
2017-05-30 14:32:05 <TheStranjer> I saw a SHA256 and thought they meant the git commit.
2017-05-30 14:32:29 <iron_houzi> That's probably just the hash of the ISO
2017-05-30 14:32:44 <TheStranjer> Yeah I know.
2017-05-30 14:32:51 <TheStranjer> Hence why it was an error on my part.
2017-05-30 14:34:06 <iron_houzi> In particular, I'd like to know what these virtual system optimizations are..
2017-05-30 14:46:30 <Classsic>    hi, somebody know how create custom iso of alpine installation?
2017-05-30 14:50:31 <Bun> Classsic: https://wiki.alpinelinux.org/wiki/How_to_make_a_custom_ISO_image ?
2017-05-30 14:50:31 <fcolista> Classsic,
2017-05-30 14:50:32 <fcolista> https://wiki.alpinelinux.org/wiki/How_to_make_a_custom_ISO_image_with_mkimage
2017-05-30 14:50:37 <Bun> ;)
2017-05-30 14:50:55 <Classsic> great, let's try
2017-05-30 14:50:57 <Classsic> thanks
2017-05-30 14:51:34 <Bun> iron_houzi: I'm not sure if there's a difference in preinstalled packages; the page does say what the difference is in terms of kernels though
2017-05-30 14:52:02 <Bun> https://git.alpinelinux.org/cgit/alpine-iso/tree/ but the package lists can be found here (as well)
2017-05-30 14:52:03 <Classsic> but this methods keep users files?
2017-05-30 14:54:10 <Bun> what exactly are you planning to do with the ISO?
2017-05-30 14:54:38 <Bun> also check out https://wiki.alpinelinux.org/wiki/Alpine_local_backup
2017-05-30 14:57:34 <iron_houzi> What is the best way to automate alpine linux creation on a VM bundled with some apk packages?
2017-05-30 14:59:54 <Shiz> iron_houzi: apkovls, mayb
2017-05-30 14:59:54 <Bun> I personally just use a small script in combination with apk.static (apk-tools-static) package, but I have to build very specific disk images so
2017-05-30 15:00:18 <Shiz> TheStranjer: https://github.com/alpinelinux/aports/tree/master/scripts
2017-05-30 15:00:25 <Shiz> oh, sorry
2017-05-30 15:00:27 <Shiz> iron_houzi: https://github.com/alpinelinux/aports/tree/master/scripts
2017-05-30 15:00:37 <Shiz> the various profile_*() functions in the mkimg.* files here
2017-05-30 15:00:40 <Shiz> have the concrete differences
2017-05-30 15:00:57 <Shiz> e.g. https://github.com/alpinelinux/aports/blob/master/scripts/mkimg.standard.sh
2017-05-30 15:03:06 <iron_houzi> Shiz: Thanks!
2017-05-30 15:04:05 <iron_houzi> Bun: What is the logic behind your script? Does it build an iso?
2017-05-30 15:11:57 <iron_houzi> What are the system requirements for standard/extended on sys mode? With 512MB RAM and 500MB HDD, I'm getting "No space left on device" right after the HDD is mounted on /mnt/sda1 ..
2017-05-30 15:13:39 <TBB> 500 MB?
2017-05-30 15:14:26 <iron_houzi> TBB: Yeah .. not enough?
2017-05-30 15:16:41 <Bun> no, I install alpine-base (and many other packages) to a loopback-mounted file with an ext4 fs
2017-05-30 15:16:53 <Shiz> likely not
2017-05-30 15:17:09 <Shiz> an installed alpine system should be ~200mb (mostly because kernel modules), but it may need more than that during installation
2017-05-30 15:17:14 <TBB> I suppose it's enough considering neither install media takes that much space; I've got a rather fresh system next to me with the build bits and gnu utils in it and it's 734 MB so a minimal install will definitely fit into 500 MB
2017-05-30 15:17:32 <Shiz> because of .apk caching/unpacking/etc
2017-05-30 19:27:11 <parazyd> what's a sane approach to bootstrapping custom alpine builds?
2017-05-30 19:27:32 <parazyd> apk and busybox in a chroot and continuing from there? or is there a specific way to do it
2017-05-30 19:27:52 <Shiz> ./scripts/bootstrap.sh
2017-05-30 19:27:54 <Shiz> :P
2017-05-30 19:27:56 <Shiz> in aports
2017-05-30 19:28:44 <parazyd> oh ok. i haven't yet looked into anything. just having some thoughts.
2017-05-30 19:30:02 <parazyd> <3
2017-05-30 21:08:09 <ses1984> i'm not certain if this is an alpine question. when I `drill hostname` I get the ANSWER section I expect, but when I `curl hostname` I get "Couldn't resolve host" -- i'm not sure what to make of that
2017-05-30 21:08:53 <Shiz> drill checks upstream dns directly, no?
2017-05-30 21:08:59 <Shiz> seems like your system resolver may be acting funny
2017-05-30 21:09:29 <trfl> is there some way to list all packages you have installed which are not currently available in the repo you've pinned it to? at some point I've managed to unpin mpv from @community, so when I did a system upgrade it couldn't find it in @main and it was never upgraded
2017-05-30 21:10:10 <ses1984> when i try to `nslookup host` i see "nslookup: can't resolve '(null)': Name does not resolve"
2017-05-30 21:10:17 <ses1984> i don't think i touched the system resolver
2017-05-30 21:10:40 <Shiz> /etc/resolv.conf ?
2017-05-30 21:11:09 <Shiz> i see the (null) issue too
2017-05-30 21:11:12 <Shiz> but correct results after that
2017-05-30 21:13:30 <ses1984> cat /etc/resolv.conf shows `nameserver 10.254.16.10\n search ...` where ... is a bunch of k8s and GKE specific stuff...but not the domain i want to resolve
2017-05-30 21:14:10 <ses1984> if i `drill @10.254.16.10 host` it does return what i expect, but i guess because the domain is not in the list to search, it doesn't work?
2017-05-30 21:15:17 <Shiz> oh yeah, there was something with search/ndots stuff in musl
2017-05-30 21:16:08 <Shiz> do you haven ndots stanza in resolv.conf?
2017-05-30 21:19:33 <ses1984> options ndots:5
2017-05-30 21:20:37 <ses1984> the domain i'm trying to resolve is vault.service.consul.$corp.$tld
2017-05-30 21:21:19 <ses1984> this is a container running in k8s and i'm wondering if k8s is supposed to update my resolv conf or if i need to tell it to do that -- totally not an alpine problem now :)
2017-05-30 21:27:02 <Shiz> it seems like k8s manages that resolv.conf
2017-05-30 21:27:24 <Shiz> but i think it should work with ndots 5...
2017-05-30 21:34:31 <ses1984> for added context i'm trying to get this to work http://blog.kubernetes.io/2017/04/configuring-private-dns-zones-upstream-nameservers-kubernetes.html
2017-05-30 21:35:29 <ses1984> i think i have everything working except the system resolver doesn't know what do about my stubDomain
2017-05-30 21:36:34 <Shiz> I'm not quite sure from the top of my head, sadly, and I'm a bit too busy right now to be able to effectively help you, sorry :(
2017-05-30 21:36:42 <Shiz> I wonder if a simple local dnsmasq proxy would solve your usecase
2017-05-30 21:36:47 <Shiz> bypassing the system resolver
2017-05-30 21:46:55 <ses1984> yes, it would, i'm trying to leverage a feature in k8s that would let me configure that in one place rather than configure it for each container/pod
2017-05-30 21:54:57 <ben-alpineq> Hey I've been looking for some documentation for mkimage, I'd like to build an image for pxe, so I'd like to do squashfs and extrat the kernel too
2017-05-30 21:55:07 <ben-alpineq> extract*
2017-05-30 21:56:53 <ben-alpineq> Also reading the code I can see plugin support but not what it does, I imagine I could probably extract the kernel that way but there's no examples :(
2017-05-30 21:57:55 <ben-alpineq> fcolista: perhaps you could help? :)
2017-05-31 02:52:22 <_spOOn_> anyone managed to get thunderbird to work on apline?
2017-05-31 02:53:38 <Shiz> i'd imagine it'd take some effort to compile if it's any similar to firefox
2017-05-31 02:56:02 <_spOOn_> im new to alpine, so still trying to get my head around it
2017-05-31 02:56:57 <Shiz> it seems like it's not packaged at least
2017-05-31 02:57:03 <_spOOn_> I take it it would need re-compiling due to the use of musl vs gcc?
2017-05-31 02:57:16 <_spOOn_> Shiz: yeah, thanks
2017-05-31 02:57:16 <Shiz> musl versus glibc, yes
2017-05-31 02:57:21 <Shiz> gcc is a compiler :P
2017-05-31 02:57:26 <_spOOn_> sorry, wrong wording
2017-05-31 02:57:28 <_spOOn_> :)
2017-05-31 02:57:52 <_spOOn_> so, does anyone use alpine as a desktop/laptop os? or is most use for servers etc?
2017-05-31 03:00:06 <Shiz> i ran it on my desktop for a while, know two people who run it on their laptop
2017-05-31 03:00:17 <Shiz> (i stopped running it because i ditched the desktop :P)
2017-05-31 03:00:36 <Shiz> it needs a bit more setup as desktop since you need to install xorg and the likes but it's very usable imo
2017-05-31 03:00:43 <Shiz> of course, my opinion is tainted
2017-05-31 03:02:58 <_spOOn_> yeah, ive got it on my lappy at the moment, and its working really well
2017-05-31 03:03:45 <_spOOn_> but I really need thunderbird + virtualbox and openfortivpn, and I'm struggling a little with what I Need to do to get it working...
2017-05-31 03:06:01 <Shiz> you'd probably need to compile it
2017-05-31 03:06:07 <_spOOn_> packaging seems straight forward, and I've submitted one (zim),
2017-05-31 03:06:14 <Shiz> that's good :)
2017-05-31 03:06:30 <Shiz> it may be useful to look at the firefox apkbuild for inspiration as how to get the build system to do what you want
2017-05-31 03:06:39 <Shiz> if thunderbird is as similar to firefox as i remember it being
2017-05-31 03:07:27 <_spOOn_> from the page mozilla put out on their source, it says you need like 20GB of space!
2017-05-31 03:07:32 <_spOOn_> that seems overkill :)
2017-05-31 03:07:56 <_spOOn_> I've been in gentoo for a while, and it never needed that much space, but hey, what do I know :)
2017-05-31 03:11:46 <_spOOn_> also, it seems that virtualbox requires some 32bit libraries... Does alpine support a multilib type setup?
2017-05-31 03:13:06 <Shiz> none whatsoever
2017-05-31 03:13:20 <Shiz> supporting multilib is an explicit non-goal :P
2017-05-31 03:13:35 <Shiz> what kind of libraries does it need?
2017-05-31 03:14:14 <_spOOn_>     ia32-libs (various libraries needed for compiling the 32-bit guest additions)
2017-05-31 03:14:17 <_spOOn_>     libc6-dev-i386 (libc6 i386 development headers)
2017-05-31 03:14:20 <_spOOn_>     lib32gcc1 (gcc support for i386)
2017-05-31 03:14:22 <_spOOn_>     gcc-multilib (gcc support for i386)
2017-05-31 03:14:25 <_spOOn_>     lib32stdc++6 (libstdc++ for i386)
2017-05-31 03:14:27 <_spOOn_>     g++-multilib (g++ support for i386)
2017-05-31 03:14:29 <Shiz> that's all debian libraries, not gonna work anyway
2017-05-31 03:14:46 <Shiz> seems like you're trying a prebuilt binary -- in general, those will not work
2017-05-31 03:15:43 <Shiz> oh, you're looking at the build instructions
2017-05-31 03:15:54 <_spOOn_> yup yup
2017-05-31 03:16:47 <Shiz> yeah this the point at which i'd personally patch the package to not need 32-bit stuff
2017-05-31 03:17:55 <_spOOn_> also, I've taken a look at the installer last night, and it seems the readline binary they're expecting is different to that which is in alpine (ie, it looks for a -e option, which alines coreutils doesnt include)
2017-05-31 03:18:12 <_spOOn_> seems like -f would be an OK substitute though...
2017-05-31 03:19:06 <_spOOn_> which is why I thought I'd ask, because I was starting to think that perhaps I'm trying to bend alpine to my will, and it wasn't really meant to be used like this :)
2017-05-31 03:19:30 <Shiz> you mean readlink?
2017-05-31 03:19:38 <_spOOn_> sorry, fat finger
2017-05-31 03:19:39 <Shiz> yeah, generally in those cases s/-e/-f/ works fine
2017-05-31 03:19:41 <_spOOn_> yes
2017-05-31 03:19:58 <Shiz> we explicitly don't support multilib, so patching out required multilib nonsense from packages is all the more welcome :P
2017-05-31 03:20:51 <_spOOn_> hehe, I'm not sure youd appriciate any patches I submitted...
2017-05-31 03:21:21 <Xe> _spOOn_: worst case it needs to be fixed to meet the standards
2017-05-31 03:21:42 <Xe> there's no reason to reject patches unless they are filed maliciously
2017-05-31 03:21:55 <_spOOn_> :)
2017-05-31 03:22:25 <_spOOn_> no malace, just not a developer
2017-05-31 03:22:43 <_spOOn_> I can fumble my way through, but yeah, needs someone wiser to review etc
2017-05-31 03:22:53 <Xe> that's part of the patch submission process
2017-05-31 03:23:12 <Xe> humans are prone to error, patch review is all about mitigating that as much as possible
2017-05-31 03:25:32 <Shiz> yeah, don't worry bout it
2017-05-31 03:25:42 <Shiz> we don't hate you for submitting patches that may be suboptimal
2017-05-31 03:25:52 <Shiz> if they turn out to be, it's a learning experience, right :)
2017-05-31 06:34:47 <clandmeter> _spOOn_: https://github.com/alpinelinux/aports/blob/2c0574a6346498c2ca27459818d4b4556246a67d/unmaintained/thunderbird/APKBUILD
2017-05-31 06:35:21 <clandmeter> little old though :)
2017-05-31 07:36:32 <_spOOn_> clandmeter: thanks, Ill take a look
2017-05-31 09:52:26 <mrgreen> Does anyone use Network Manager under Alpine?
2017-05-31 10:10:27 <_spOOn_> I would second mrgreens question
2017-05-31 10:10:53 <_spOOn_> does anyone use network-manager in alpine?
2017-05-31 10:11:05 <_spOOn_> more specifically, nm-applet?
2017-05-31 10:21:09 <IcePic> "network damager" ...
2017-05-31 10:24:45 <_spOOn_> indeed, I preferred wicd
2017-05-31 10:25:11 <_spOOn_> but have to connect to wpa2 enterprise networks for work, and nm works better sadly
2017-05-31 10:44:48 <hiro> wtf dudes
2017-05-31 10:44:57 <hiro> wpa_supplicant comes with a wpa_gui
2017-05-31 10:45:06 <hiro> it supports all your silly enterprises
2017-05-31 10:45:49 <consus> wpa_gui goddamn ugly
2017-05-31 10:45:51 <hiro> i don't get why people bother with shit like wicd when there's something so obviously more complete
2017-05-31 10:45:59 <hiro> consus: who the fuck cares about ugly, buy a mac.
2017-05-31 10:46:18 <hiro> i rarely ever have to open up wpa_gui either
2017-05-31 10:46:30 <consus> hiro: Why do you hate yourself so much?
2017-05-31 10:47:18 <_spOOn_> hiro: I have to connect to a number of wireless networks, depending on sites, and I also have to use a number of VPNs.
2017-05-31 10:47:18 <yangby_> hello, i try to create a sbcl docker, but i got error `stop using LD_ASSUME_KERNEL`,
2017-05-31 10:47:28 <_spOOn_> whilst there are probably better tools for the job
2017-05-31 10:47:37 <hiro> 12:47 _spOO hiro: I have to connect to a number of wireless networks, depending on sites, and I also have to use a number of VPNs.
2017-05-31 10:47:37 <_spOOn_> wicd/nm seem to work ok for me
2017-05-31 10:47:38 <hiro> same here
2017-05-31 10:47:47 <hiro> wicd and nm never worked for anything i do
2017-05-31 10:48:00 <hiro> but then i guess i do more complex things than you do
2017-05-31 10:48:00 <yangby_> so, it means i can not use alpine for a sbcl docker?
2017-05-31 10:48:31 <_spOOn_> hiro: lol, im sure you probably do
2017-05-31 10:49:49 <hiro> i have a script that handles wpa_supplicant and starts udhcpc, or does static network configuration depending on ssid, also it receives udhcpc events and then acts on them accordingly in case vpnc has to be started
2017-05-31 10:50:16 <hiro> it also connects to LTE, UMTS, etc via a couple stupid competing protocols (AT, qmi, etc.).
2017-05-31 10:50:41 <hiro> in order to do anything i just use the software that does the actual work, directly from my scripts.
2017-05-31 10:50:41 <_spOOn_> hiro: sounds great
2017-05-31 10:50:52 <_spOOn_> are you willing to share with us then?
2017-05-31 10:51:07 <hiro> nope, it's all special casing
2017-05-31 10:51:18 <consus> Linux in a nutshell xD
2017-05-31 10:51:39 <hiro> all you need to know that is generic is the idea to either run wpa_supplicant in foreground or use wpa_cli -a
2017-05-31 10:52:06 <hiro> also replace /usr/share/udhcpc/default.script with your own shit
2017-05-31 10:52:16 <consus> Err
2017-05-31 10:52:25 <consus> > replace /usr/share/udhcpc/default.script
2017-05-31 10:52:36 <consus> It's it a bad idead to touch package-managed stuff?
2017-05-31 10:52:45 <hiro> i don't care about package management
2017-05-31 10:52:50 <consus> Lol
2017-05-31 10:52:58 <hiro> i don't know how it works exactly on alpine
2017-05-31 10:53:04 <consus> Well
2017-05-31 10:53:09 <consus> Like any other package manager
2017-05-31 10:53:16 <hiro> i try to avoid having to learn these choreographed dances
2017-05-31 10:53:17 <consus> It rewrites your shit on every update
2017-05-31 10:53:43 <hiro> ok, well use udhcpc -s and point to your own script then
2017-05-31 10:53:44 <consus> Except for a couple of items marked DO NOT REWRITE THIS KIND OF SHIT
2017-05-31 10:53:55 <consus> Mostly in /etc
2017-05-31 10:53:57 <hiro> i don't give tutorials, i give idea recipes.
2017-05-31 10:54:13 <consus> Eh, wicd worked fine for the ethernet auth
2017-05-31 10:54:15 <hiro> i just tell you what i wish i had heard before i figured it out the long and painful way
2017-05-31 10:54:42 <_spOOn_> hiro: appriciate the thought, thanks
2017-05-31 10:54:44 <_spOOn_> :)
2017-05-31 10:54:56 <consus> Though writing a configuration file for wpa_supplicant is not that hard either
2017-05-31 10:55:16 <consus> It even has a manual page, rare thing these days
2017-05-31 10:55:29 <TBB> depends -entirely- what you try to accomplish with wpa_supplicant
2017-05-31 10:55:37 <hiro> true, once you have seen the output that gets generated by wpa_gui you can copy paste it for a network with same setup
2017-05-31 10:56:03 <consus> It handles basic 'auth me pleeeeze' very well
2017-05-31 10:56:09 <hiro> but normally wpa_gui creates correct output, whereas stackexchange and other google results never take into account your specific setup
2017-05-31 10:56:17 <hiro> and are often wrong
2017-05-31 10:56:23 <hiro> and missing stuff like tls certs
2017-05-31 10:56:50 <hiro> this is super useful for example
2017-05-31 10:56:52 <hiro> network={
2017-05-31 10:56:52 <hiro>         key_mgmt=NONE
2017-05-31 10:56:52 <hiro>         priority=-10
2017-05-31 10:56:52 <hiro>         disabled=1
2017-05-31 10:56:52 <hiro> }
2017-05-31 10:57:17 <hiro> actually i should enable this. what was i thinking.
2017-05-31 10:57:50 <consus> man wpa_supplicant.conf
2017-05-31 10:57:59 <consus> That's all you've need most of the time
2017-05-31 10:58:20 <hiro> consus: no, i hate that man page. too much work.
2017-05-31 10:58:25 <consus> xD
2017-05-31 10:58:29 <hiro> but better than using nm or wicd
2017-05-31 10:58:31 <consus> Okay
2017-05-31 10:58:46 <consus> It's pretty incomplete, yes
2017-05-31 10:58:51 <consus> That's what I love openbsd for
2017-05-31 10:58:56 <consus> Great manual pages
2017-05-31 10:59:06 <hiro> the time i save by using wpa_gui i can use to automate all the other shit i want run by my script once it automatically connects to a given network
2017-05-31 11:13:52 <_spOOn_> hiro: just looking at wpa_gui, and doesnt appear to be workiung... get a could not get status from wpa_supplicant...
2017-05-31 11:14:07 <_spOOn_> service is obviously running
2017-05-31 11:14:14 <_spOOn_> have you had this in the past?
2017-05-31 11:15:30 <hiro> sure, just make sure you use the correct ctrl_interface and ctrl_interface_group
2017-05-31 11:15:50 <hiro> wpa_supplicant must be running with these config
2017-05-31 11:15:52 <IcePic> google has gotten that error also
2017-05-31 11:16:06 <_spOOn_> thanks
2017-05-31 11:16:12 <_spOOn_> will go through the doco
2017-05-31 11:16:27 <IcePic> that's also an option
2017-05-31 11:16:34 <hiro> many linux distributions love to put an insane nonstandard interface and then connect their shitsoftware like networkmanager to it
2017-05-31 11:17:01 <hiro> if you haven't removed network-manager yet then i can't-help-you
2017-05-31 11:18:09 <_spOOn_> hiro: removed :)
2017-05-31 11:18:13 <hiro> that's another reason i don't use supplied helpers by stupid operating systems normally
2017-05-31 11:18:17 <hiro> i run my OWN wpa_supplicant
2017-05-31 11:18:37 <hiro> i don't need systemd to do this for me and then i don't even know the used flags or can't find the configuration file it comes with
2017-05-31 11:18:52 <hiro> and then that configuration file would normally be completely different than any other distribution's
2017-05-31 11:19:15 <hiro> remove all "services", kill all processes. start your own. then it works.
2017-05-31 11:20:25 <_spOOn_> hiro: working now
2017-05-31 11:20:28 <_spOOn_> thanks for the advice
2017-05-31 11:21:17 <hiro> np
2017-05-31 12:40:12 <TBB> gotta love my job, I get to spend time on IRC and get paid for doing it <3
2017-05-31 12:40:20 <TBB> aaaaanyway
2017-05-31 12:40:52 <TBB> I had a look at some of the magical 16 packages that initially installing alpine-base brings in
2017-05-31 12:41:43 <TBB> alpine-base has 'replaces="alpine-baselayout"' and alpine-keys has 'replaces="alpine-base"' in their APKBUILDs
2017-05-31 12:41:58 <TBB> that, to me, makes no sense whatsoever
2017-05-31 12:42:28 <fabled> probably some old legacy reasons
2017-05-31 12:42:35 <fabled> some of those could probably be removed
2017-05-31 12:44:09 <TBB> what I'm trying to accomplish, basically, is to replace alpine-keys with my own. my initial attempt was to create a version of alpine-base that doesn't require that key and in the initial apk add install both the new alpine-base and the keys package
2017-05-31 12:44:20 <TBB> well, didn't end well, that one
2017-05-31 12:45:18 <TBB> the new base package is in another repository than its dependencies, and apk add -X doesn't accept multiple -X's, so I tried a proper repository file for the initial apk add... didn't work
2017-05-31 12:46:02 <TBB> I could of course just make my own key package, but I'm not convinced I can install that in that initial add ...
2017-05-31 12:46:22 <TBB> fabled: legacy sounds like a logical explanation for that
2017-05-31 12:47:40 <Bun> since you'll have to build (or at least sign) all packages anyway, wouldn't it indeed make more sense to make your own repo with a custom alpine-keys?
2017-05-31 12:49:10 <TBB> since I tried that approach with a custom alpine-base and it didn't quite work (two repositories in an initial apk add seems to not work)...
2017-05-31 12:49:40 <Bun> why would you need two though?
2017-05-31 12:50:18 <TBB> I guess I can try something like 'replaces="alpine-keys"' in my custom keys package, but would that actually deal with (=remove) the distro keys package
2017-05-31 12:51:04 <TBB> Bun, I don't basically want to add custom-built packages to the upstream mirror, although, if I have no other choice, I pretty much have to
2017-05-31 12:52:59 <TBB> doing that adds new steps to the mirroring process, and I don't like the idea
2017-05-31 12:53:01 <Bun> well, instead of adding to the upstream, you could always proxy from your repo to the upstream and replace things as needed
2017-05-31 12:55:33 <Bun> not sure how this is supposed to work anyway, you have an upstream but you don't want to use the alpine-keys they provide, yet you still want to use their packages (and so also need to support their keys anyway?)
2017-05-31 12:56:59 <TBB> of course the proper process for what I do would be to actually build every single package myself, but resources are limited so for the time being I must use upstream-provided packages
2017-05-31 13:00:58 <TBB> however now that I think about it... perhaps the mirroring process isn't that bad a place to modify how I do things. For me Alpine's own keys mostly serve as a means of checking the packages are from where they claim to be from; and since I already do package re-signing, it's not that much of a hassle to check their signatures and, if the signatures are okay, re-sign them with my own. that together with a custom keys package should work...
2017-05-31 13:03:28 <TBB> Bun, the whole case I'm working on is quite special and involves many, many reasons that block me from doing things the regular way... otherwise I would already be done :)
2017-05-31 15:00:17 <TBB> okay, 'replaces' didn't quite do exactly what I wanted, but it's a starting point
2017-05-31 15:05:24 <blatty> hi, i've been trying to update testing/mono to 5.0.1.1, but both on a local build and, as i thought it was related to my docker setup and sent a pr anyway, on my pr's travis build (https://github.com/alpinelinux/aports/pull/1598) i get "attr_set: Operation not permitted" from paxmark on the main mono binary
2017-05-31 15:05:48 <blatty> is the travis environment also somehow not handling paxmark, or do i need to do something weird to allow this to happen as non-root user, or?
2017-05-31 15:06:26 <blatty> there's a few other ports that do paxmark (due to JIT), and the original mono buildfile did as well, yet - somehow now it doesn't work anymore :\
2017-05-31 15:21:42 <Shiz> blatty: PR LGTM, may be a CI malfunction
2017-05-31 15:21:53 <Shiz> I'll try building it locally and merge if it works
2017-05-31 15:48:15 <blatty> Shiz: ah, so xattrs are screwy in a lot of cases? noted.
2017-05-31 15:49:10 <Xe> what package is the `tun` module for the kernel in?
2017-05-31 15:49:59 <TBB> in the kernel package itself?
2017-05-31 15:50:18 <TBB> I mean, that's the only logical place for it
2017-05-31 15:51:26 <TBB> but would you ask if it was there...
2017-05-31 15:54:06 <Shiz> blatty: i haven't seem them being screwy before, so it's a bit weird
2017-05-31 15:54:12 <Shiz> but there's no reason paxmark shouldn't work normally
2017-05-31 17:37:29 <snappy> q: does the alpine linux iso work over serial console? i want to install it, but my server's ilom uses java console crap and it just doesn't work whatsoever
2017-05-31 17:38:01 <snappy> but i think via ipmi i can ssh and drop into serial
2017-05-31 17:42:15 <snappy> actually nevermind, i think i figured out the mystery
2017-05-31 17:47:38 <snappy> also is there any documentation on how to do alpine zfs on root?
2017-05-31 17:52:55 <Xe> snappy: i think you have to do the install by hand for that
2017-05-31 17:53:47 <Xe> snappy: http://irclogger.com/.alpine-linux/2017-04-28#1493340916
2017-05-31 17:54:01 <Xe> lol
2017-05-31 18:02:24 <snappy> Xe: thanks, also cool site
2017-05-31 18:02:57 <scadu> or just https://dev.alpinelinux.org/irclogs/
2017-05-31 18:19:51 <Xe> scadu: when you google "alpine linux zfs root install", ya forward people the most accurate link you can
2017-05-31 18:20:42 <Shiz> hush algitbot
2017-05-31 18:21:35 <scadu> Xe: oh sorry, I just saw irclogger, which is not official source of irc logs. please accept my apologies ;f
2017-05-31 19:05:16 <bison> having trouble connecting to a mirror (dl-4.alpinelinux.org) that runs on Packet, but only from other Packet instances
2017-05-31 19:05:25 <bison> anyone else?
2017-05-31 19:05:50 <_ikke_> not using packet
2017-05-31 19:06:21 <_ikke_> dl-4 is apparently hosted at packet
2017-05-31 19:06:32 <_ikke_> so internal routing issue?
2017-05-31 19:06:47 <_ikke_> bison: where does dl-4.alpinelinux.org resolve to for you?
2017-05-31 19:06:59 <bison> 147.75.32.21
2017-05-31 19:07:33 <_ikke_> same for me
2017-05-31 19:07:40 <_ikke_> can you try a traceroute?
2017-05-31 19:13:50 <bison> _ikke_: https://pastebin.com/raw/iugfWQWX
2017-05-31 19:15:55 <_ikke_> Looks like a routing issue
2017-05-31 19:16:16 <bison> yeah, I can open a ticket with Packet
2017-05-31 19:16:43 <_ikke_> Weird that it goes via telia and then back to packet
2017-05-31 19:16:45 <bison> I've tried from multiple Packet accounts and DCs
2017-05-31 19:28:13 <_ikke_> bison: looking at the latency, it looks like it gets routed around the world
2017-05-31 19:30:04 <bison> looks like it ends up in Amsterdam
2017-05-31 19:30:33 <_ikke_> How do you determine hat?
2017-05-31 19:32:39 <bison> from the host names in the tracroute, I can see it bounces to london and then to a router in Packet's AMS1 region, which is Amsterdam
2017-05-31 19:32:50 <_ikke_> ah ok
2017-05-31 19:32:57 <bison> and 147.75.32.21 is registered with RIPE
2017-05-31 19:35:03 <bison> kind of strange that I had servers in NJ getting routed to Amsterdam in the first place, but I don't know anything about how the balancing works on the Alpine side
2017-05-31 19:35:37 <_ikke_> This is just a single mirror
2017-05-31 19:35:39 <_ikke_> nothing is balanced
2017-05-31 19:35:47 <_ikke_> (for me, it returns the same IP)
2017-05-31 19:41:01 <bison> right, that's a good point... dl-cdn.alpinelinux.org is working. Maybe I just have something stale in the apk config.
2017-05-31 19:42:42 <_ikke_> dl-cdn is pointing to dl-4
2017-05-31 19:43:04 <_ikke_> weird that that one is working for you
2017-05-31 19:43:13 <_ikke_> it just does redirect to dl-4.a.o
2017-05-31 19:46:55 <bison> from here, dl-cdn is a CNAME for global.prod.fastly.net
2017-05-31 19:49:01 <bison> if dl-4 is an upstream there, would still probably work since the fastly hosts aren't on Packet's network
2017-05-31 19:53:54 <_ikke_> bison: it literally does an http redirect
2017-05-31 19:54:10 <_ikke_> so you are not getting the data via fastly
2017-05-31 19:56:26 <bison> not what I'm seeing when I'm just testing with curl...
2017-05-31 19:56:39 <bison> curl -v http://dl-cdn.alpinelinux.org/alpine/v3.2/main/x86_64/APKINDEX.tar.gz -o apk
2017-05-31 19:57:43 <_ikke_> ah, ok, might be that / is only redirected, but the files themself not
2017-05-31 20:01:33 <bison> I have a ticket open with Packet to see if there's anything on their side, though the tracroute looks the same from hosts that are working
2017-05-31 20:44:44 <alpine-mkimageq> Hey I'd like to use the aports mkimage script to build an image for PXE booting, could anyone whip up a quick example for me to reference? Unfortunately the examples in aports don't really work
2017-05-31 20:44:51 <alpine-mkimageq> (for my use case)
2017-05-31 20:45:28 <alpine-mkimageq> fcolista: sorry if you replied yesterday, I don't have a bouncer up
2017-05-31 21:35:00 <xentec> I've just noticed that syslog (bb) timestamps on my rpi stay always the same. bugs.a.o seems to have nothing on it.
2017-05-31 21:35:24 <xentec> anyone with an idea what's going on with syslog?
2017-05-31 21:35:47 <qman__> rpi doesn't have a real-time clock, so you have to have a working ntp client
2017-05-31 21:37:58 <xentec> I do (chronyd)
2017-05-31 21:38:37 <xentec> 'date' also shows correct system time
2017-05-31 21:45:05 <xentec> now thats even more stange: https://dpaste.de/QMiq
2017-05-31 21:45:26 <xentec> restart messages are in current time, but normal ones in broken time
2017-05-31 21:46:53 <qman__> interesting
2017-05-31 21:48:36 <xentec> Shiz: since you patched syslog a while ago.. any ideas?
2017-05-31 21:56:06 <Shiz> xentec: all syslog messages?
2017-05-31 21:56:11 <Shiz> the timestamp is given to syslog by the sender, usually
2017-05-31 22:00:57 <xentec> hah, first one ('...syslogd started...') has correct time. all subsequent messages get 'Jan  1 01:59:59' timestamp
2017-05-31 22:01:41 <Shiz> do those all come from the same service too?
2017-05-31 22:02:07 <xentec> nope
2017-05-31 22:03:25 <xentec> https://dpaste.de/4YDC
2017-05-31 22:19:37 <Krutonium> Hello, Anyone around?
2017-05-31 22:20:17 <Shiz> plenty
2017-05-31 22:21:30 <Krutonium> Just wanted to share that I managed to build OpenRCT2 for Alpine. :)
2017-05-31 22:21:43 <Shiz> nice :)
2017-05-31 22:22:29 <Krutonium> It revealed a bug and an optimization that we can do in our codebase, so I just want to say Hi.
2017-05-31 22:23:56 <Shiz> if you're interested in supplying an APKBUILD i'll be glad to take a look at it too ;p
2017-05-31 22:24:43 <Krutonium> Show me where and I'll try to make that happen
2017-05-31 22:24:54 <Krutonium> And how
2017-05-31 22:25:11 <Shiz> https://github.com/alpinelinux/aports is the repo, https://wiki.alpinelinux.org/wiki/Creating_an_Alpine_package is the documentation
2017-05-31 22:25:50 <Krutonium> Thank you, I'm going to hang out in case I have questions. Here's one immediatly though, in the AUR there is -git packages, is there somthing similar here?
2017-05-31 22:26:17 <Shiz> questions are always welcome :)
2017-05-31 22:26:34 <Shiz> we typically don't have -git packages no, at least I haven't seen any yet
2017-05-31 22:26:58 <Shiz> one reason is that 1) abuild doesnt support git pulling automatically properly and 2) APKBUILDs embed checksums of source files that break if the upstream is unstable
2017-05-31 22:27:33 <Krutonium> Most of our users use the nightly builds, since they tend to be stable, and the Multiplayer Servers all use the nightlies as well.
2017-05-31 22:28:06 <Krutonium> Ignoring that, the next stable won't be for a while, and the last stable won't build on Alpine
2017-05-31 22:28:27 <Shiz> hmm
2017-05-31 22:29:24 <Shiz> well something I don't think we can support properly right now is what I think Arch does where the PKGBUILD just supplies a git url and every build can be different
2017-05-31 22:29:44 <Shiz> but, I wouldn't mind having a newer-than-stable-git-build if it's tested and such
2017-05-31 22:30:09 <Shiz> it'd just have a version number of <latest-stable>_git and would need a pkgrel bump every time you'd want to bump the git revision we package
2017-05-31 22:30:31 <Krutonium> Yep, that is the case for the most part. Basically every build of the game is regularly tested by ~100 or more people, depending on how long it stays fresh - we actually do a build -> update clients for every push.
2017-05-31 22:32:33 <Krutonium> Another Part of the problem is that I don't plan to keep Alpine around on my system, it was a "Hm, I wonder what issues musl will turn up" type deal.
2017-05-31 22:32:39 <Krutonium> I need to think about this.
2017-05-31 22:32:47 <Shiz> sure :)
2017-05-31 22:33:04 <Shiz> nothing's obliging you to, it was more of a "hey if you're up for this we wouldn't mind" thng on my part
2017-05-31 22:33:13 <Shiz> no hard feelings whatsoever if you don't or can't :p
2017-05-31 22:33:29 <Shiz> still cool to know that stuff works regardless
2017-05-31 22:33:52 <Krutonium> Agreed, I love throwing myself into a new environment with a goal and working my way to it :)
2017-05-31 22:34:12 <Krutonium> I managed to compile a game, but still havn't managed to install a Browser ;P
2017-05-31 22:35:02 <Shiz> hey, we package firefox-esr ;)
2017-05-31 22:35:02 <Krutonium> https://files.gitter.im/OpenRCT2/OpenRCT2/non-dev/7wzd/2017-05-31-170004_1920x1080_scrot.png
2017-05-31 22:35:28 <Krutonium> Ah, lets see then...
2017-05-31 22:35:32 <Shiz> lookin good
2017-05-31 22:36:41 <Krutonium> That's a Multiplayer park on a server that tends to be good for Benchmarking :)
2017-05-31 22:37:02 <Krutonium> Also love the fact that LibreSSL works as a drop in replacement for OpenSSL, havn't tried that before.
2017-05-31 23:06:27 <Krutonium> @Shiz I put this in our Wiki, https://github.com/OpenRCT2/OpenRCT2/wiki/Building-OpenRCT2-on-Linux#alpine-linux so it doesn't get lost, in case anyone wishes to take up the task.
2017-05-31 23:07:54 <Shiz> Krutonium: fwiw, you can replace 'git gcc g++' by 'build-base' and remove all the packages that also have a -dev variant already listed
2017-05-31 23:07:58 <Shiz> (x-dev automatically pulls in x)
2017-05-31 23:08:21 <Shiz> otherwise, nice
2017-05-31 23:08:34 <Krutonium> Ah, did not know that. I'll edit accordingly!
2017-05-31 23:09:23 <Shiz> something else that may be useful, but i'm not sure if it should be noted there, is that you can add things as a virtual
2017-05-31 23:09:25 <Shiz> e.g.
2017-05-31 23:09:32 <Shiz> apk add --virtual .openrct2-deps <pkg1> <pkg2> <etc>
2017-05-31 23:09:34 <Shiz> then when you're done building
2017-05-31 23:09:37 <Shiz> you can just
2017-05-31 23:09:39 <Shiz> apk del .openrct2-deps
2017-05-31 23:09:46 <Shiz> and it will delete all those packages except the ones you had already installed before
2017-05-31 23:09:48 <Shiz> :)
2017-05-31 23:14:31 <Krutonium> to the best of my knowledge, most of them are still needed afterwards
2017-05-31 23:22:13 <Shiz> right
2017-05-31 23:22:32 <Shiz> I'm too used to abuild where it automatically infers dependencies for packages and installs them when you install the .apk
2017-05-31 23:22:33 <Shiz> ;P
2017-05-31 23:22:44 <Xe> abuild is kinda magic