2017-05-01 00:00:03 yeah, as an offline cache that you can easily query locally... still trying to think of when but I've been in situations where I wanted to query which package contains a file without internet access :p 2017-05-01 00:00:20 (realizing it's usually pointless since you can't install it anyawys but still) 2017-05-01 00:15:18 <__number5__> trfl: isn't that's what apk does? apk search only search local db 2017-05-01 00:15:59 not quite 2017-05-01 00:15:59 it only shows file listings for installed packages 2017-05-01 00:15:59 not for non-installed ones 2017-05-01 00:16:09 so not for all packages in its db 2017-05-01 00:18:31 <__number5__> Shiz: search file with this https://pkgs.alpinelinux.org/contents (yes, not offline) 2017-05-01 00:18:53 yes, that was exactly the point 2017-05-01 00:18:56 lol 2017-05-01 01:27:45 anyone here uses borgbackup? 2017-05-01 01:49:53 __number5__: I hate going to search online just for that, I like something like pacman -Fs. 2017-05-01 01:50:06 ACTION just found out that the online site works well with elinks. 2017-05-01 02:08:58 <__number5__> yep, any simple web form can be treated like an api ;) 2017-05-01 02:11:16 just in case it's helpful https://github.com/minipli/linux-unofficial_grsec/tree/linux-4.9.x-unofficial_grsec 2017-05-01 02:22:50 Hopefully someone can tell me that I'm doing something wrong: I am trying to create an Alpine install with a ZFS root. Firstly I installed Alpine to USB, along with ZFS packages. I then subsequently created a /boot (ext2) partition, and a ZFS partition on the disk I actually want to install on. After configuring ZFS, I mount everything up and do a `setup-disk -m sys /mnt` (/mnt is where my ZFS root, 2017-05-01 02:22:56 and /boot is mounted). 2017-05-01 02:23:59 Numerous packages fail their post-install scripts -- causing things to not work very well (the scripts exit with error 1. Which is not particularly informative). Attempting to chroot into the /mnt'ed and fix up the packages also causes the same issues with post-install/post-upgrade steps 2017-05-01 02:24:21 I believe this mode of installation is supported; but am I doing something silly? 2017-05-01 02:25:31 (I can't directly install to a ZFS root, because the default install media mounts has a read-only /, and also uses a different kernel version to the actual install) 2017-05-01 02:29:24 nymacro - What does your dataset hierarchy look like? ZFS mounts using different semantics than standard filesystems, creating the directory rather than mounting over it. 2017-05-01 02:29:49 nymacro And how are the post-install scripts failing? 2017-05-01 02:30:12 I set the alt-root of my pool to /mnt when installing 2017-05-01 02:30:58 nymacro: What does the tree under /mnt look like befor install? I'm wondering if it's something simple, like perms on /tmp. 2017-05-01 02:31:02 either via `zfs create -R /mnt` when I first created the pool, or `zfs import -N -R /mnt` after it was already created (I tried a few different times) 2017-05-01 02:31:16 No sub datasets? 2017-05-01 02:31:47 yeah; /, /home, /root, /var (and various other /var subvolumes) 2017-05-01 02:32:15 Is /tmp on a tmpfs then? 2017-05-01 02:32:35 actually. I don't think I created a /tmp on the mount ... 2017-05-01 02:32:58 Hmm, that could be a problem if you don't have the right perms... 2017-05-01 02:33:01 that might be it lol. Unfortuntely, I wasn't able to find any logs from apk, and the only error I had to go off was "error 1" 2017-05-01 02:33:27 Bugger. Yeah, try runing apk fix -v -v maybe? 2017-05-01 02:33:53 Ahh, I wasn't aware apk supported double verbose 2017-05-01 02:33:54 apk needs some help on the error info. 2017-05-01 02:34:07 I seem to recall seeing it somewhere. 2017-05-01 02:34:11 I will give it a try 2017-05-01 02:34:30 Actually, apk --help :) 2017-05-01 02:35:14 I'm curious as to what's failing and why. 2017-05-01 02:35:21 Me too. Me too :) 2017-05-01 02:35:52 I will give -vv a try, along with whether lacking a /tmp on the destination caused issues 2017-05-01 02:36:23 Thanks :) 2017-05-01 02:36:24 Yeah, check the simple stuff first, if that doesn't fix it, we can get down to brass tacks. 2017-05-01 02:38:34 Making sure all the appropriate mountpoints are present is also a consideration. Setup-disk isn't really zfs-aware AFAIK, so there may be some bad assumptions about how filesystems behave in there. 2017-05-01 03:06:28 No love: https://gist.github.com/nymacro/9980470c49b16050782dce8df3aa67be 2017-05-01 03:08:07 Given that the only thing the post-install is doing for busybox is: exec /bin/busybox --install -s 2017-05-01 03:08:16 something isn't right :( 2017-05-01 03:08:42 the busybox binary is getting installed; but the symlinks aren't there 2017-05-01 03:09:07 Although, I can manually create the symlinks 2017-05-01 03:11:02 mounting up /dev, /proc, /sys and a /tmp on my root and chrooting to try and fix the packages (apk fix) gives the same errors 2017-05-01 03:11:51 I am out of ideas 2017-05-01 03:14:42 ZFS setup is the same as https://github.com/zfsonlinux/zfs/wiki/Ubuntu-16.04-Root-on-ZFS Step 3's structure 2017-05-01 03:19:17 nymacro: Hmm, looking at that, there may be some mismatches between ubuntu an Alpine requirements -- the exec=off on /var may be an issue. 2017-05-01 03:19:46 nymacro: suid may be an issue a swell. 2017-05-01 03:22:01 nymacro: If running with -v -v doesn't lead to any lead as to what's failing why, you probably should file a bug on apk for lack of proper error handling and as much context as you do have. 2017-05-01 03:23:15 nymacro: But try with default options for all members in the dataset (other than mountpoint) and see if it fails in the same way. 2017-05-01 03:24:12 The canmount=off usage is strange, and I suspect for compatiblity, because it's not normal nor desirble. 2017-05-01 03:30:34 hmm, true 2017-05-01 03:30:40 that one is a little odd 2017-05-01 03:32:01 Off I go! (again) :) 2017-05-01 07:17:55 ryonaloli, to evade the issue of grsec being a registered trademark or whatnot, why not name the unofficial branch GARsec? :> 2017-05-01 08:53:22 That was fun. apk upgrade deleted my kernel 2017-05-01 08:53:42 I think it might be related to linux-grsec@edge being linux-hardened now? 2017-05-01 08:54:04 probably 2017-05-01 09:21:10 the ZFS root still not giving me any love :( 2017-05-01 09:48:37 i've not been successful either in setting up a zfs root 2017-05-01 16:42:29 https://pkgs.alpinelinux.org/packages - anyone know what the URL is for packages listed here that you need to put in apk/repositories such that you can install packages from here 2017-05-01 16:43:57 all our mirrors should have them 2017-05-01 16:44:06 dl-cdn.alpinelinux.org 2017-05-01 16:45:00 clandmeter: so I have that, but I can't find package exim. If i try to install it says missing. But it clearly shows up when I search for the package on https://pkgs.alpinelinux.org/packages, under community 2017-05-01 16:45:26 https://pastebin.com/3tZTUxYK 2017-05-01 17:31:30 cyrus_mc_: you're using 3.5, while exim is only available on edge 2017-05-01 18:28:16 just did a (big?) upgrade on a raspberry pi 2017-05-01 18:28:28 and it's now spitting out: [ 27.803530] usb 1-1: device descriptor read/64, error -110 2017-05-01 18:28:44 [ 54.143495] usb 1-1: device not accepting address 4, error -110, and [ 64.869591] usb usb1-port1: unable to enumerate USB device 2017-05-01 18:28:59 there was a kernel bump to 4.9 as well... wat do? 2017-05-01 18:29:28 (this is read with serial, on boot) 2017-05-01 18:29:38 (the pi doesn't boot now) 2017-05-01 18:44:29 alpine has plenty of security 2017-05-01 18:44:29 grsec is hardly the only thing we were doing. the belief that grsec was anathema to our security effort is largely because of bad marketing decisions in the past 2017-05-01 18:44:30 in fact another very recent security initiative of ours just bagged a libressl CVE 2017-05-01 18:44:31 kernel security doesn't matter if your app is vulnerable 2017-05-01 18:44:32 is grsec being killed off unfortunate? sure 2017-05-01 18:44:33 not the end of the world though, alpine has a very robust security story outside of grsec 2017-05-01 18:48:24 Why noone else tried to create a kernel and memory corruption protection besides grsecurity group? 2017-05-01 18:48:41 Is a really hard subject to study-create? 2017-05-01 18:52:55 here's the whole output if anyone is interested: http://sprunge.us/fgAU 2017-05-01 18:54:56 maybe the initrd is broken? 2017-05-01 18:55:25 <_ikke_> kaniini1: Just wondering, where did that 'rant' came from? 2017-05-01 19:02:27 what kaniini1 said can't be stressed enough: 2017-05-01 19:03:15 "the belief that grsec was anathema [sic?] to our security effort is largely because of bad marketing decision in the past" 2017-05-01 19:03:43 <_ikke_> Right, it just looked like it's a reaction to something I'm missing 2017-05-01 19:03:51 i don't see how anathema fits there at all, but "bad marketing decisions" seem to be a big theme here 2017-05-01 19:17:43 parazyd: it's a hardware-level issue, probably a driver change from the old version to the new 2017-05-01 19:18:20 qman__: implying i shouldn't use the latest kernel then? 2017-05-01 19:18:44 parazyd: it's worth trying the old kernel to see if the problem persists 2017-05-01 19:19:05 couldn't tell you about specific hardware support in various versions, I'm not that intimately familiar with them 2017-05-01 19:19:15 but the errors you're getting are hardware errors 2017-05-01 19:19:21 yeah i'm just downloading the release 2017-05-01 19:21:09 _ikke_: [22:39:59] so what's the future of Alpine now that grsec is closing up? 2017-05-01 19:21:19 pity i can't see what has been upgraded besides the kernel 2017-05-01 19:28:22 qman__: yeah, i get a shell with the old one 2017-05-01 19:28:30 Kernel 4.4.52-0-rpi on an armv6l (/dev/ttyAMA0) 2017-05-01 19:29:12 yeah, so probably a USB driver issue, or a driver issue with hardware attached to USB, like the NIC 2017-05-01 19:29:31 i think it's the ethernet indeed 2017-05-01 19:31:11 anyway, i can't provide a fix for this... but i'll gladly do testing if/when needed 2017-05-01 19:39:40 dudes, the wifi script called by the setup-alpine doesn't allow me to use spaces in my wifi password! 2017-05-01 19:40:40 heh 2017-05-01 19:40:41 udhcpc: socket(AF_PACKET,2,8): Address family not supported by protocol 2017-05-01 19:45:23 oh 2017-05-01 23:49:55 howdy folks... has anyone here installed the xen version of alpine? I know I need to monkey with the initrd for my nvme drive, just curious if it plays out the same in xen as it would in standard/extended versions of the distro 2017-05-01 23:50:49 hmm, hopefully the page on installing xen dom0 will be helpful 2017-05-02 05:26:14 Hi Folks, I want to know how to enable libvirtd service for xen 2017-05-02 05:26:35 I am using the xen boot iso image as it is. 2017-05-02 05:40:16 ? 2017-05-02 05:40:41 I want to know how to enable libvirtd service for xen, how do I configure it 2017-05-02 05:40:59 And can I install qemu with it, I cannot find it using apk search 2017-05-02 07:57:14 hi, how to enable fbtft module in alpine? (on raspberry) 2017-05-02 08:00:46 asdfasdfasd, depends on many things 2017-05-02 08:00:56 asdfasdfasd, easiest is to just use dtoverlay if one exists 2017-05-02 08:01:06 otherwise you probably need to modprobe it with right parameters 2017-05-02 08:01:21 fabled: I would like to use a small tft display on raspberry, and it says to require fbtft module 2017-05-02 08:01:43 asdfasdfasd, i have one like that. fbtft supports gazillion of different displays it needs to be configured right 2017-05-02 08:01:52 best is lookup the docs shipped with your display 2017-05-02 08:02:15 ok 2017-05-02 08:02:45 this one is http://www.neosecsolutions.com//products.php?28&cPath=17 2017-05-02 08:03:02 (just informative) 2017-05-02 11:09:40 Hi, currently setting up a new server that will only run ssh + nginx + docker. Usually I'd use Debian, but I'm considering Alpine. Could not find much info online on using Alpine as a docker host, anyone else got a similar setup? and if so any issues/considerations I should be aware of? 2017-05-02 11:21:53 <_ikke_> KLOGD: I use a vpn with alpine mainly running docker (just not that much containers) 2017-05-02 11:21:58 <_ikke_> KLOGD: No issues with it 2017-05-02 11:22:13 <_ikke_> vps* 2017-05-02 12:13:13 _ikke_: thanks, I'll give it a go and test it out :) 2017-05-02 14:46:05 Hello, in the error message of https://pastebin.com/TFPzJ5Wt - what does exactly 'world' mean? I'm just not clear how to interpret it, py-numpy is missing because it is needed by the world is the way I read it :) 2017-05-02 14:47:05 the world is in a sad state if it needs anything connected to Python 2017-05-02 14:47:19 but basically it's your repo configuration that's causing this 2017-05-02 14:47:31 I mean the error message, not the sad state the world is in 2017-05-02 14:47:42 TBB: That I get, but I just cannot find any reference to 'world' in the wiki 2017-05-02 14:53:58 dsuch: It's like all packages that you've installed explicitly 2017-05-02 14:54:25 See /etc/apk/world 2017-05-02 14:55:06 consus: Got it, thanks. 2017-05-02 14:55:24 It is closely related to Gentoo's world 2017-05-02 14:56:43 consus: Thanks, I've never used Gentoo so it didn't ring any bell. 2017-05-02 14:56:49 To be honest, wiki lacks so many essential things it's not even funny =/ 2017-05-02 14:57:13 consus: I find it very helpful though :) 2017-05-02 14:57:33 :) 2017-05-02 14:57:45 E.g. there is a special package called 'docs' 2017-05-02 14:58:14 This very particular package instructs apk to install a -doc for every that has one 2017-05-02 14:58:32 So this is good. 2017-05-02 14:58:39 *SUPER* helpful thing that has almost no mentions 2017-05-02 14:58:47 Aha. 2017-05-02 14:59:04 Which reminds me 2017-05-02 14:59:13 Gotta add it now xD 2017-05-02 15:01:30 I just did. wonderful; I had no idea 2017-05-02 19:56:30 hi all I'm setting up an alpine linux router++ box and figured out how to setup AWall, well at least I have rejected most public ports and NATing only some of them. But I can't figure out how to translate ports? What I'm trying to do is translate public 1443 to 443 on a local machine. With tcpdump I can see the SYN packet coming in on port 1443 but it isn't forwarded to the correct internal port =>?. [Slightly anoymised] config on https://pastebi 2017-05-02 20:07:54 arnotixe, your pastebin link is cut off 2017-05-02 20:14:27 oh https://pastebin.com/5d4FZS33 ? seems visible from here? 2017-05-02 20:15:42 (I get by temporarily by using straight thru ports, but it would be nice to be able to rewrite). Maybe there are example files of working port rewrite config files somewhere? 2017-05-02 23:08:51 mm 2017-05-02 23:09:03 libmagic's headers are in file-dev but libmagic itself is in libmagic 2017-05-02 23:09:13 that's a little confusing :) guess it's too late to fix that though 2017-05-03 01:03:53 Hello my screen is completely black after all the start process pass. 2017-05-03 01:04:04 i think my Xorg is not working good. 2017-05-03 01:04:37 What's the key combination to stop the login and go in to run level 1... 2017-05-03 01:22:44 alpine has extra patches to musl which provide the equivalent of FORTIFY_SOURCE=2 support, right? 2017-05-03 01:23:02 in what form do these patches come? is it simply a patch or series of patches to the musl libc itself? 2017-05-03 03:38:35 if i told you i would have to kill you 2017-05-03 03:38:58 but u can buy a license for $599 2017-05-03 03:40:31 ryonaloli: https://git.2f30.org/fortify-headers/log.html tbh 2017-05-03 03:40:58 ty 2017-05-03 07:55:54 anyone got example config files for awall with port translation (for ex public 1443 -> private 443)? I see quite some differences between https://git.alpinelinux.org/cgit/awall/about/ and https://wiki.alpinelinux.org/wiki/How-To_Alpine_Wall but nothing I try really work out... 2017-05-03 08:04:35 (I get public:443 to private:443 to work, but not port number rewrites. My current config with only public ip address changed on: http://www.teigseth.no/files/sos.json 2017-05-03 10:47:09 hmm is there an ftp server for alpine linux? 2017-05-03 10:51:52 .oO ( everyone should go sftp ... ) 2017-05-03 10:52:51 remember sftp could stand for ssh file transfer protocol, secure file transfer protocol, simple transfer protocol, etc. 2017-05-03 10:52:57 also, rsync. 2017-05-03 10:55:52 yep. However, is there a built-in sftp client in windows? I only need ftp support in case I'm dead or otherwise unavailable; just to provide an alternative way to get files off the alpine box. I of course use RSA keys with ssh, certificate-only login ;) 2017-05-03 10:56:10 no 2017-05-03 10:56:17 windows does not have sftp support out of the box 2017-05-03 10:56:25 …the ftp server would of course have root access... 2017-05-03 11:02:14 perhaps a https://user:pw@site.tld would be better, then windows would have a "native" client in MSIE/Edge 2017-05-03 11:04:52 IcePic: That was a good idea. They only need very basic one-file-at-a-time functionality anyway :) 2017-05-03 11:50:09 Anyone here on hetzner? 2017-05-03 12:22:00 Hello! The package libcgroup-tools@testing has been removed from the repos and I can't find something that would provide the "cgget" command. Am I missing anything? 2017-05-03 16:37:12 Hi everyone 2017-05-03 16:43:31 hi syx 2017-05-03 16:43:38 hi 2017-05-03 16:43:47 https://gist.github.com/thde/5312a42665c5c901aef4 this still works right? 2017-05-03 16:43:55 I'm really confused with the MBR and GPT thing 2017-05-03 16:44:16 I've got 3TB but I distinctly recall MBR not being able to do more than two 2017-05-03 16:45:36 as long as you keep your /boot on separate partition it should be all fine 2017-05-03 16:45:53 https://0x0.st/YiK.png yup 2017-05-03 16:46:41 hum 2017-05-03 16:46:55 yeah its possible you need gpt 2017-05-03 16:47:00 ugh 2017-05-03 16:47:02 or you could use lvm 2017-05-03 16:47:06 but then grub won't work :S 2017-05-03 16:47:31 what do the sgdisk lines in https://gist.github.com/thde/5312a42665c5c901aef4 do? 2017-05-03 16:47:35 hum, no you would still need the partition 2017-05-03 16:47:43 manpage doesn't say specific options for the flags used 2017-05-03 16:47:56 oh so lvm on mbr 2017-05-03 16:47:58 that'd work 2017-05-03 16:48:57 i think it maybe doesnt 2017-05-03 16:49:13 you need the boot partion to be separate 2017-05-03 16:49:33 okay so 2017-05-03 16:49:37 looks like the sgdisk lines creates partitions 2017-05-03 16:49:59 but i think you can have a gpt with bios compatitibility 2017-05-03 16:50:15 do you boot with efi or legacy bios? 2017-05-03 16:50:21 uhm 2017-05-03 16:50:34 root@rescue ~ # ls /sys/module/efivars 2017-05-03 16:50:36 uevent version 2017-05-03 16:50:45 i think this means it's just legacy bios 2017-05-03 16:50:53 i don't actually have access to the serial console 2017-05-03 16:50:58 yeah 2017-05-03 16:50:59 ok 2017-05-03 16:51:11 but the guide mentions something called gptmbr.bin 2017-05-03 16:51:54 do you have /sys/firmware/efi/efivars 2017-05-03 16:52:03 nope 2017-05-03 16:52:08 damn 2017-05-03 16:53:43 ok 2017-05-03 16:54:05 but i think it should be possible to use gpt with that gptmbr.bin 2017-05-03 16:54:12 okay 2017-05-03 16:54:12 i havent tested it though 2017-05-03 16:54:19 but it should be possible 2017-05-03 16:54:28 so im making a gpt table 2017-05-03 16:54:43 Hello, just finished running alpine-setup on my netbook, it did not display any error message, though when booting I get "mounting UUID=blah on /sysroot failed : No such file", any ideas what could cause this ? 2017-05-03 16:55:07 so like this? https://tmate.io/t/ro-rfYW96mC6p8hQpJnPvBh2ILgb 2017-05-03 16:55:13 Also I have eMMC storage, I know it causes issues sometimes, worked fine on gentoo though 2017-05-03 16:59:56 ludaota sounds like its missing some driver in initramfs 2017-05-03 17:00:18 syx possibly, i dont have experience with this kind of setup, but i think it should be possible 2017-05-03 17:00:29 Might be then, because I cannot see it in /dev/ either 2017-05-03 17:01:24 Allright I'll have a look at that then, thanks 2017-05-03 17:03:17 ludaota is it an mmc? 2017-05-03 17:03:43 i think you can fix it by editing /etc/mkinitfs/mkinitfs.conf and add mmc to the features 2017-05-03 17:03:57 then re-run mkinitfs 2017-05-03 17:04:17 i suppose you can boot from rescue usb/cdrom 2017-05-03 17:04:44 then mount the root on /mnt (mount -t ext4 /dev/sda3 /mnt) 2017-05-03 17:05:04 and mount /dev/sda1 /mnt/boot 2017-05-03 17:05:29 you might need bind mount /proc: mount --bind /proc /mnt/proc 2017-05-03 17:05:47 then edit /mnt/etc/mkinitfs/mkinitfs.conf 2017-05-03 17:05:54 and mmc to features 2017-05-03 17:06:04 and finally: apk fix --root /mnt mkinitfs 2017-05-03 17:06:28 which will reinstall mkinitfs and re-run the mkinitfs trigger 2017-05-03 17:42:38 ncopa: yes it is an internal emmc memory (the computer's an acer cloudbook 11) 2017-05-03 17:43:17 thanks 2017-05-03 17:43:38 extlinux: no previous syslinux boot sector found 2017-05-03 17:43:40 is this bad? 2017-05-03 17:45:40 okay rebooting 2017-05-03 17:45:42 wish me luck 2017-05-03 17:46:02 Yeah I'll chroot into the drive and regen the initramfs, I'll do it as soon as I get back into my office 2017-05-03 18:27:08 ncopa: which versions of grsec do you have in https://dev.alpinelinux.org/~ncopa/grsec ? 2017-05-03 18:46:46 ncopa: it worked like a charm, thanks ! 2017-05-03 19:01:01 is there an easy way to make menuconfig? 2017-05-03 20:10:12 Hello i need some help 2017-05-03 20:11:14 I tried to start lxdm on my system, and i activated it on rc-update, but now my system boot-up directly to the lxdm login and freeze in there completely in black screen. 2017-05-03 20:11:58 I need some help about how to start in terminal instead of lxdm login. 2017-05-03 20:16:14 'singlemode' kernel parameter should help you to enter the system as root, mount / and manually remove lxdm from /etc/runleves 2017-05-03 20:16:23 s/runleves/runlevels 2017-05-03 20:17:05 But how i start the kernel in singlemode? 2017-05-03 20:18:26 xentec? 2017-05-03 20:18:46 you use syslinux for booting, right? 2017-05-03 20:18:48 it should automatically appear as an option in my grub bootloader? 2017-05-03 20:18:54 No no, grub. 2017-05-03 20:20:33 then you'll find plenty of resources only how to enter singlemode with grub 2017-05-03 20:20:41 s/only/online 2017-05-03 20:21:21 xentec: I like your sed way of correcting your messages :p 2017-05-03 20:22:53 ludaota: thx, but you'll soon find out that this way is as old as irc itself :D 2017-05-03 20:23:22 oh i didn't know i could explicitly say to the kernel.. "hey you, start in singlemode" via the bootloader 2017-05-03 20:25:23 linux is still a program that takes arguments :D 2017-05-03 20:45:49 Technically, it's the initramfs /init that's handling the single option, but who's counting? :P 2017-05-03 20:51:18 Ugh.. not working :/ 2017-05-03 20:51:26 Not even showing the boot process.. just black screen 2017-05-03 20:51:49 I added "single" to the end of the linux line in the booloader. 2017-05-03 20:51:53 for Alpine 2017-05-03 21:03:27 Help..? 2017-05-03 21:12:45 Oookay so my computer boots fine, it's good, however dhcp fails somehow, altohugh it worked during the install, OpenRC loads the wlan0 interface just fine :o 2017-05-03 21:18:22 Hoe come udhcpc works fine during the install but not once the computer booted ? 2017-05-03 21:18:29 *how 2017-05-03 21:19:01 It just continuously sends discover but never succeeds somehow 2017-05-03 21:24:25 Ah nevermind, wpa_supplicant was not being started 2017-05-03 21:31:13 Dirac1, have you tried replacing 'quiet' with 'single'? 2017-05-03 21:31:47 did it.. :/ used.. single and 1... and removed quiet. 2017-05-03 21:32:07 when i used any number.. from 1 to 6.. it starts normally. 2017-05-03 21:49:55 Hi 2017-05-03 21:50:19 How could I run mkinitfs on a custom kernel? 2017-05-03 21:51:37 Hey @ all 2017-05-03 21:54:12 Is there a way, to find out which packages are installed by using "apk" or is there a completly other way? 2017-05-03 21:56:15 feuerteufel: apk info 2017-05-03 21:57:15 And that schow's only installed packages? 2017-05-03 21:57:42 Looks like it 2017-05-03 22:00:26 I think it look's good ... thank's 2017-05-03 22:06:44 xentec, couldn't find a way start ;/..i don't know if grsec blocks the single user mode.. 2017-05-03 22:06:51 but i tried doing it in recue mode. 2017-05-03 22:47:40 syx: mkinitfs takes parameters, that's how you use specific kernels to generate custom initramfs archives 2017-05-04 00:12:54 Help my Xorg configuration is broken well isn't broken if i've never been able to use it.. so.. here's the xorg log : https://ptpb.pw/UEIF 2017-05-04 03:22:02 hi any idea why i can't install go pkg? 2017-05-04 03:22:10 > go (missing) 2017-05-04 03:22:28 the package name is correct and is listed on alpine packes 2017-05-04 03:22:35 im running a fresh install of 3.5 2017-05-04 03:22:36 kvda: what version? 2017-05-04 03:23:06 did you enable the community repo? 2017-05-04 03:23:20 !!! 2017-05-04 03:23:23 forgot about that 2017-05-04 03:26:59 is there a global .profile on alpine? 2017-05-04 03:27:03 thanks btw Xe :) 2017-05-04 03:27:18 try /etc/profile? 2017-05-04 03:27:40 not there, but i guess i can create it an try 2017-05-04 03:27:42 docker image alpine:3.5 seems to have the shell config stuff in /etc/profile 2017-05-04 03:28:17 oh my bad again, it is there, tab completion didn't work :/ 2017-05-04 06:06:12 isn't it golang? 2017-05-04 06:06:27 it's just `go` 2017-05-04 06:06:32 ah 2017-05-04 06:06:37 so it is 2017-05-04 06:10:52 how do i make coffee? 2017-05-04 07:25:16 Okay so to make a ramfs for 1.2.3 I'd do mkinitramfs 1.2.3 2017-05-04 07:25:19 Right? 2017-05-04 07:29:03 mkinitfs actually, and you'll want to make sure all the required features are enabled AND that any packages you need to provide files required by the initfs are intalled. 2017-05-04 07:29:27 Alright 2017-05-04 07:29:45 All required features? 2017-05-04 07:29:53 I'm working on the replacement, but still running into apk issues. 2017-05-04 07:30:05 Yes, to support your hardware/rootfs 2017-05-04 07:30:14 see /etc/mkinitfs directory 2017-05-04 07:30:27 There's a conf file and a features.d dir 2017-05-04 07:31:15 Ah right 2017-05-04 07:31:27 So, say you need zfs, you need to both add the zfs feature to your mkinitfs.conf entry, you ALSO need to install the packages 'zfs' 'zfs-$kernelflavor' and 'spl-$kernelflavor' 2017-05-04 07:31:38 Right 2017-05-04 07:31:44 (Yes, I'm fixing that) 2017-05-04 07:32:33 But the first argument is the version, right? 2017-05-04 07:32:53 In the future, it will stage all the required files and build based on a manifest. 2017-05-04 07:33:07 The final argument is the kernel release, not version! 2017-05-04 07:33:16 I'm compiling manually too 2017-05-04 07:33:17 Ah 2017-05-04 07:33:44 Wait so 2017-05-04 07:33:46 You might have to add your own entry in features.d to make it work. 2017-05-04 07:34:09 Alright 2017-05-04 07:35:11 so for package linux-4.9.20-r2 say, you have a kernel release that is probably 4.9.20, while for linux-hardened-4.9.25-r0 you have 4.9.25-0-hardened, etc. 2017-05-04 07:35:39 Same string as the modules directory name. 2017-05-04 07:37:19 Are you compiling any externel kernel modules, or just customizing the kernel/included modules? 2017-05-04 09:00:51 TemptorSent: I'm compiling 4.9.20 with grsec 2017-05-04 09:07:09 Then running mkinitfs 4.9.20 2017-05-04 09:22:29 aight so i've done make install and modules_install 2017-05-04 09:23:02 this has given me a vmlinuz 2017-05-04 09:23:26 what do i run to make the initfs? 2017-05-04 09:25:11 then do i run extlinux too? 2017-05-04 09:26:01 or can i just edit extlinux.conf in /boot 2017-05-04 09:31:57 https://w1r3.net/pEwKLW.txt this is what happens 2017-05-04 09:32:49 https://w1r3.net/ywwbkr.txt here's the modules tree 2017-05-04 16:42:43 Hi 2017-05-04 16:42:55 Is there an alternative to who for musl based installs? 2017-05-04 17:12:20 syx: not particularly, as musl (consciously) does not support utmp 2017-05-04 17:12:33 okay 2017-05-04 17:12:48 you could check /dev/pts ownership and ps(1) output 2017-05-04 17:13:11 but that will also include virtual terminals like tmux and screen 2017-05-04 17:13:18 ah, that'd work 2017-05-04 20:55:03 HEllo 2017-05-04 20:55:05 how u all doing? 2017-05-04 20:55:15 i am trying to install cloud-init 2017-05-04 20:55:25 apk add cloud-init 2017-05-04 20:55:39 but get 2017-05-04 20:55:40 ERROR: unsatisfiable constraints: 2017-05-04 20:57:35 any idea? 2017-05-04 21:00:41 hello? 2017-05-04 21:00:43 anyone here? 2017-05-04 21:01:09 hello? 2017-05-04 21:16:21 erick3k, you need to enable testing repository for apk 2017-05-04 21:21:55 ok can you link me to a guide please? 2017-05-04 21:23:03 nvm found it 2017-05-04 21:23:08 thank you xentec 2017-05-04 21:23:54 xentec missing py-configobj (missing): 2017-05-04 21:25:00 as well as switch to edge version of the other repos 2017-05-04 21:25:19 making your installation effectively a rolling release 2017-05-04 21:25:47 or you try pinning the missing packages 2017-05-04 21:30:21 xentec got it installed, is there anything else to do to activate it? 2017-05-04 21:33:55 you can start it with # rc-service cloud-init start 2017-05-04 21:39:47 erick3k - rc-update add cloud-init default (to add the service to the runlevels) 2017-05-04 21:40:01 nice thank you 2017-05-04 21:56:38 i am trying to set data source as config drive only any idea? 2017-05-05 09:08:22 what happened to the site ? 2017-05-05 09:16:50 as it looks like its down 2017-05-05 09:17:17 seems it isn't responding to ping at all 2017-05-05 09:17:23 (dunno if it normally does) 2017-05-05 09:17:47 <_ikke_> announced maintenance 2017-05-05 09:17:52 <_ikke_> (in another channel) 2017-05-05 09:17:56 <_ikke_> but takes longer than expected 2017-05-05 09:23:00 <_ikke_> http://ikke.info/alpinelinux_status.png 2017-05-05 09:25:04 ty 2017-05-05 10:11:27 hi there 2017-05-05 10:11:48 is alpinelinux.org is down for you too? 2017-05-05 10:12:04 maintenance window 2017-05-05 10:12:14 ok, thanks scv 2017-05-05 10:20:11 ok 2017-05-05 10:20:37 I just got lwjgl 2.9.1 and jinput natives built against musl 2017-05-05 10:20:45 and minecraft works on alpine now 2017-05-05 10:21:00 well, minecraft 1.7.10 at least 2017-05-05 10:21:04 http://i.imgur.com/hT3HAEC.png 2017-05-05 10:23:57 been there, done that, heh 2017-05-05 10:24:00 all minecrafts work this way 2017-05-05 10:24:11 even did that on NetBSD, though it was a bit more involved there 2017-05-05 10:27:36 ok, so why isn't there a package? 2017-05-05 10:31:31 nobody bothered to make one 2017-05-05 10:37:52 hi guys 2017-05-05 10:37:57 is alpinelinux.org down? 2017-05-05 10:38:34 dminca: 11:23 _ikke http://ikke.info/alpinelinux_status.png 2017-05-05 10:38:49 ouch :( 2017-05-05 10:39:07 thank you hiro 2017-05-05 10:40:54 hi, how can I configure audio output to hdmi? 2017-05-05 10:41:18 attempting to achieve it through asoundrc 2017-05-05 11:19:20 hello, so I'm using alpine for my hosting 2017-05-05 11:19:22 but! 2017-05-05 11:20:15 since starting using it 3 months ago, my epenis increased only by 1cm. Such modest increase of 4% if not what I was especting by using most elite linux based secure system. 2017-05-05 11:25:54 rafalcpp: you didn't spend enough time in grsecadm 2017-05-05 11:27:19 darkfader: ah 2017-05-05 11:28:10 btw, how is Alpine dealing with grsec sort of closing it's source code? can I rebuild alpine's kernel myself, downloading all sources including grsec patch? 2017-05-05 11:28:52 rafalcpp++ 2017-05-05 11:29:09 (on the humor, not grsec, comment) 2017-05-05 11:38:31 rafalcpp++ 2017-05-05 11:38:32 :^) 2017-05-05 11:53:16 I'm also interested what is going to happen with the grsec move 2017-05-05 11:53:34 will alpine maintain the 4.4 patch until 4.4 is dead? 2017-05-05 11:53:38 and then what? 2017-05-05 11:54:16 or will the forked grsec receive forward patching? 2017-05-05 11:55:03 sorry the 4.9 version 2017-05-05 11:57:40 BlackIkeEagle: can't we donate $$$ for alpine to buy patch from grsec in a way that makes them happy when alpine publishes it? 2017-05-05 11:58:18 I guess people could sign some NDA or shit. Ask grsec what they want. Afair 1) money and 2) people not calling botchered old kernels "a grsec kernel" (brand protection) 2017-05-05 11:58:43 if I can not build own kernel from source, then it can't be used for most sensitive tasks imo 2017-05-05 11:59:21 in theory if grsec is still gplv2 you can publish it if you bought it 2017-05-05 12:01:56 didnt linksys do something like that? "if you publish the gpl stuff we gave you, you lose customer status and will receive no further patches but we cant legally prevent you from leaking it in the first place" 2017-05-05 12:02:25 if grsec has a problem with that I could sign an NDA to wave right to republish it. and alpine would have right to forward the code only for signers of NDA (e.g. organizations). maybe that is what grsec authors want 2017-05-05 12:02:32 sounds like the fsf approves :P 2017-05-05 12:04:46 wonder if grsec can just dist patches which are NOT gpl. Then people receiving them can use them locally, but not ship the combined kernel 2017-05-05 12:05:10 jesus fucking christ not this again 2017-05-05 12:05:54 How do I go about adding a trusted root certificate? I have put it in /etc/ssl/certs and run update-ca-certificates but it doesnt seem to be enough? 2017-05-05 13:48:15 so i just s/latest-stable/3.6/ in my repositories file 2017-05-05 13:48:22 turns out it isn't latest-stable :c 2017-05-05 14:03:07 hello here 2017-05-05 14:03:18 hi 2017-05-05 14:03:26 which package is `chattr' in? 2017-05-05 14:04:38 e2fsprogs-extra 2017-05-05 14:05:27 ah, thanks 2017-05-05 14:06:34 pkgs.alpine.org is your friend ;-) 2017-05-05 14:07:24 sorry pkgs.alpinelinux.org my mistake 2017-05-05 14:07:41 ah, thanks 2017-05-05 14:09:21 any help on setting up a samba domain member on alpine ? 2017-05-05 14:11:49 bigtitus, wiki.alpinelinux.org is your friend ;-) 2017-05-05 14:11:54 https://wiki.alpinelinux.org/wiki/Setting_up_a_samba-ad-dc 2017-05-05 14:12:23 yep cool doc ;-) 2017-05-05 14:13:59 apart i dont want a domain controller but a member 2017-05-05 14:15:47 joining domain works, wbinfo -u gives me domain users, but they are not available on system 2017-05-05 14:18:33 bigtitus alpine doesn't use pam and there's no nsswitch, as far as i'm aware there's no way to have the system authenticate against AD 2017-05-05 14:22:22 Hm 2017-05-05 14:22:56 There is a nss-pam-ldapd 2017-05-05 14:23:02 Also there is linux-pam 2017-05-05 14:23:07 So it's quite possible 2017-05-05 14:23:24 hmm yes nsswitch make the link 2017-05-05 14:23:46 The only problem that I can see is that openssh is not built against pam, so you'll need to maintain your own copy of it 2017-05-05 14:23:49 there *is* linux-pam but yeah 2017-05-05 14:23:55 nothing is built against it by default 2017-05-05 14:24:02 shadow 2017-05-05 14:24:07 shadow is 2017-05-05 14:24:14 shadows provides login 2017-05-05 14:24:23 And you need to rebuild openssh 2017-05-05 14:24:38 After that you're good 2017-05-05 14:32:34 Good morning (EST). I have a question about apk-tools and Alpine package versioning in particular. I hope this is a good place to ask; please redirect me if not. 2017-05-05 14:32:55 I'm trying to figure out the significance of leading 0 chars in version strings, for example "2.2.003" 2017-05-05 14:33:16 specifically, should 2.2.003 be equivalent to 2.2.3, or not? 2017-05-05 14:35:57 ok thanks for help guys, looks alpine cannot do what i want easily 2017-05-05 14:43:32 goodbye 2017-05-05 14:43:44 Another happy customre 2017-05-05 14:44:14 I guess I should setup some pam-enabled-software repo =/ 2017-05-05 14:49:33 hi again - in the unlikely event that someone answered my q while I fell off the channel a few minutes ago, could someone pls paste again :) 2017-05-05 15:05:26 we aren't buying a patch from grsec people. any sort of deal like that would be most definitely in violation of our guidelines. 2017-05-05 15:05:41 buy it yourself if you want non-free software 2017-05-05 15:21:51 kaniini: mmm, what are the replacements (sorry if this has been asked already, a quick scroll through of logs didn't show anything, and I haven't really been following the conversations surrounding grsec) 2017-05-05 15:22:36 we will just maintain it ourself. this has already been occurring for 2 years already. 2017-05-05 15:23:54 good to know :) 2017-05-05 15:23:56 thanks, 2017-05-05 15:24:06 minipli is maintaining 4.9 for now 2017-05-05 15:24:09 (backporting) 2017-05-05 15:24:15 Like I said, wasn't really aware of the status is all 2017-05-05 15:29:09 hi all 2017-05-05 15:58:39 guys, i'm stuck 2017-05-05 15:59:01 i have no network, but those networking scripts that run udhcpc are in the foreground 2017-05-05 15:59:07 blocking me from logging in 2017-05-05 15:59:18 and ctrl-c doesn't arrive at the right place :( 2017-05-05 15:59:35 also this is before any ttys show up 2017-05-05 16:15:31 <_ikke_> Do they actually get a dhcp lease? 2017-05-05 16:17:31 no, i have no cable with me :) 2017-05-05 16:17:46 i just need to log in so i can switch to wifi 2017-05-05 16:17:58 i guess i can just run init=/bin/sh :) 2017-05-05 16:18:11 but i do find this a bit weird! :) 2017-05-05 16:18:20 works as specified 2017-05-05 16:18:40 i like that it blocks on boot, but i should be able to send a signal from the keyboard 2017-05-05 16:19:05 I suppose you shouldn't have networking on the default runlevel but instead on another runlevel you switch to when networking is available... I guess that's how it should be with openrc 2017-05-05 16:19:30 yeah, that would make sense 2017-05-05 16:19:51 however, it's not of much help when you're waiting for udhcpc to time out :/ 2017-05-05 16:20:09 udhcpc doesn't time out, it tries forever :) 2017-05-05 16:20:13 and I'm going to swear next 2017-05-05 16:20:21 networkmanager is in testing... 2017-05-05 16:20:25 wtf 2017-05-05 16:20:55 yeh, wonder why there's no timeout specified for udhcpc 2017-05-05 16:21:35 it misses -n 2017-05-05 16:22:43 wtf, init=/bin/sh doesn't work? 2017-05-05 16:24:51 wonder if you can blacklist your ethernet module temporarily from the kernel parms... there's an option named blacklist, at least 2017-05-05 16:25:00 did you try single? 2017-05-05 16:32:23 clandmeter: yes, that works 2017-05-05 16:33:00 then i was able to fix my issue 2017-05-05 17:08:10 Anybody provisioning their alpine boxes with ansible? I'm having trouble with the `user` module not finding the `adduser` binary .. any ideas of how to resolve this without reverting to the `shell`/`commmand` modules? 2017-05-05 17:16:15 <_ikke_> shadow contains useradd, but no adduser 2017-05-05 17:32:20 _ikke_: Yeah .. but do you have any ideas for how to get around this problem when using ansible without reverting to `shell`/`command` modules? 2017-05-05 17:59:57 <_ikke_> nope 2017-05-05 18:00:56 https://bugs.alpinelinux.org/issues/6997 i suppose none of the devs will be touching this? 2017-05-05 18:06:05 iron_houzi: adduser should be there just fine, that's weird 2017-05-05 18:06:20 it's part of busybox 2017-05-05 18:07:28 vectr0n: a stack trace would help -- what's commented there is the strace, not a stack trace 2017-05-05 18:07:45 this is the same issue as before and ncopa fixed it 2017-05-05 18:08:35 its impossible to get a hypervisor to graceful restart/shutdown w/ a alpine linux vm running atm 2017-05-05 18:54:32 vectr0n looking at it now 2017-05-05 18:54:39 i posted how to get a proper backtrace 2017-05-05 18:54:52 kk ty cuz i have 0 idea, sorry >.> will look now 2017-05-05 18:55:10 ncopa: don't you mean `backtrace full`? 2017-05-05 18:56:06 (that gives a bunch more context which is useful for this) 2017-05-05 19:02:39 might be good with full 2017-05-05 19:02:52 but probably enough with just backtrace 2017-05-05 19:03:07 i don think its same issue as last time 2017-05-05 19:05:22 now im super confused, all of a sudden it wont crash, yet same system, nothings been updated :s 2017-05-05 19:05:50 even comes back up after a reboot w/o a crash, wth is going on lol >.> 2017-05-05 19:06:13 hardware failing? 2017-05-05 19:06:33 nope 2017-05-05 19:07:36 still doesnt graceful restart/shutdown 2017-05-05 19:15:56 i found another strerror_r 2017-05-05 19:16:23 its likely the problem 2017-05-05 19:21:50 it should happen with open-vm-tools logs error 2017-05-05 19:22:09 vgauth whatever that is 2017-05-05 19:22:10 oh deary 2017-05-05 19:22:25 re:graceful shutdown: that seems like it's a missing ACPI kernel thing 2017-05-05 19:23:51 im gonna push a fix to edge 2017-05-05 19:24:01 but it would be nice with a backtrace to confirm its the same thing 2017-05-05 20:06:16 this distro sounds pretty neat 2017-05-05 20:06:26 i think i will install her 2017-05-05 20:06:44 :) 2017-05-05 20:07:18 can i use this as a desktop environment 2017-05-05 20:07:39 instead of ubuntu, mint, cent, etc. 2017-05-05 20:08:13 sure 2017-05-05 20:08:25 you'll have to install X etc yourself though 2017-05-05 20:16:52 sounds good, i will take the plunge 2017-05-05 20:32:46 ncopa, if i can get it to crash ill post one 2017-05-05 21:21:23 what would it take to get xdelta3 to be built with lzma? it'll link in xz-libs if they are present at time of compilation, and would result in a far more useful build 2017-05-05 21:21:37 seeing how most public xd3 patches were made using the (default) lzma compression 2017-05-05 21:32:53 trfl: that can be worked on 2017-05-05 21:34:43 trfl: easiest way is to submit a PR on github/to the mailing list 2017-05-05 21:35:13 aight, I'll give that a shot 2017-05-05 21:35:15 cheers! 2017-05-05 21:37:07 trfl: btw apparently lzma-by-default was only enabled in 3.0.11, from jan 2016 2017-05-05 21:37:12 sure most public patches are lzma? 2017-05-05 21:38:29 well, I've only bumped into three patches lately, but those were all unusable until I built it myself 2017-05-05 21:38:38 could be observer's perspective lol 2017-05-05 21:39:21 i mean it's probably still good to have xz if it's by default now 2017-05-05 21:39:23 just saying 2017-05-05 23:17:47 Tried to install gcc with "apk add gcc", but looks like it didnot install the ".h" files. How to make gcc function? 2017-05-05 23:18:45 apk add libc-dev 2017-05-05 23:18:48 or for a more complete package, try 2017-05-05 23:18:50 apk add build-base 2017-05-05 23:18:52 :) 2017-05-05 23:21:52 Is there an option when starting boot from USB in Live mode to retain changes made to file system? 2017-05-05 23:23:02 https://wiki.alpinelinux.org/wiki/Alpine_local_backup 2017-05-05 23:25:04 Is there a hope the Logo will get changed or elliminated alltogether? 2017-05-05 23:30:36 Many linuxes go some HDD r/w on it's own, not once, but in periods and constantly. mostly When doing windowed terminal. Why does it do it, and is there a way to turn it off 2017-05-05 23:33:10 what do you mean? 2017-05-05 23:33:39 sorry it started to flick my HDD again and doesn't stop 2017-05-05 23:34:00 uuh 2017-05-06 12:48:33 Hi! 2017-05-06 12:49:24 Is there some helper tool to fetch package sources from repository? 2017-05-06 12:50:06 And then how can I locally compile a package without using root? If I try with root it tells me to fuck off but if I try it using limited user then I have no permissions. 2017-05-06 12:52:07 Jangal: add your local user to the abuild group 2017-05-06 12:52:23 and yes, there's # abuild fetch 2017-05-06 12:53:58 Shiz: thanks, but with getting sources I meant to download ABUILD files and patches for existing packages. 2017-05-06 12:54:38 those are all stored in aports 2017-05-06 12:54:49 git clone git://git.alpinelinux.org/aports 2017-05-06 12:55:30 Thanks, I was hoping that there is some tool that fetches just some specific directories but this will be fine, thanks! 2017-05-06 12:55:30 (optionally git checkout 3.x-stable if you want to build packages that belong to a release version 3.x instead of edge) 2017-05-06 12:59:10 Shiz: after building the package, where can it be found? 2017-05-06 12:59:15 ~/packages 2017-05-06 13:00:27 you can override it by setting REPODEST= in ~/.abuild/abuild.conf 2017-05-06 13:00:35 (or /etc/abuild.conf system-wide) 2017-05-06 13:04:42 ERROR: APKINDEX.tar.gz: UNTRUSTED signature 2017-05-06 13:04:57 Can it automatically install after build without the signature? 2017-05-06 13:05:24 you probably want to add your key to the system keys 2017-05-06 13:05:45 as root: cp ~yourbuilderuser/.abuild/*.pub /etc/apk/keys 2017-05-06 13:06:34 https://wiki.alpinelinux.org/wiki/Creating_an_Alpine_package#Setup_your_system_and_account is helpful for this btw 2017-05-06 16:23:42 <^ingo^^^> I have problems so assign a static ipv6 to an interface. It always assign the dynamic one. im on 3.5.2 inside an kvm. ipv4 works es expected. Any hints where to search? 2017-05-06 16:27:39 ^ingo^^^: /etc/network/interfaces should be your go-to place 2017-05-06 16:35:48 <^ingo^^^> ok, i found the Problem. "echo "ipv6" >> /etc/modules" is not optional, it's mandetory for static ip as described in https://wiki.alpinelinux.org/wiki/Configure_Networking#IPv6_Static_Address_Configuration 2017-05-06 16:36:54 weird, why should the ipv6 module be required by static address but not dynamic?! 2017-05-06 16:36:59 that makes no sense? 2017-05-06 16:38:29 hiro: SLAAC, maybe 2017-05-06 16:38:48 it seems weird though 2017-05-06 16:38:50 hm? slaac is still ipv6 2017-05-06 16:39:13 i think ^ingo^^^ must have missed something 2017-05-06 16:39:20 what i really want to know if why we still distribute ipv6.ko as a module 2017-05-06 16:39:24 it should be =y... 2017-05-06 16:39:33 no 2017-05-06 16:39:42 ipv6 shouldn't accidentally auto-activate 2017-05-06 16:39:44 hiro: well i mean it may be handled by the kernel where otherwise the dhcpd would take care of address assignment 2017-05-06 16:40:05 yeah, but as you say, with slaac that's not the case 2017-05-06 16:40:12 <^ingo^^^> that was i also think. but it tried multiple times. only if i manualy restart the network it assigns the ip not not boot 2017-05-06 16:40:29 suddenly you're reachable not via one, but many addresses, might be above your capacity as a free-time admin 2017-05-06 16:40:44 uh 2017-05-06 16:40:53 even with ipv6 to =y ipv6 won't magically activate lol 2017-05-06 16:41:01 ^ingo^^^: there should be another reason, dig deeper :P 2017-05-06 16:41:03 you'd need an inet6 stanza in /etc/network/interfaces at the very least 2017-05-06 16:41:36 perhaps there's special magic somewhere disabling it, but i thought in the kernel slaac will be enabled by default 2017-05-06 16:43:46 net.ipv6.conf.all.autoconf = 0 2017-05-06 16:44:00 and possibly accept_ra = 0 2017-05-06 16:47:47 <^ingo^^^> I startet with the wiki-example for dual-stack. but with no success, add the "optional" step, and it works now. on centos7 i didn't have this problem. 2017-05-06 16:48:10 <^ingo^^^> will test it with a few vm, where i migrate apps. 2017-05-06 16:49:30 <^ingo^^^> on question are open. how to add multiple ipv6 addresses to an interface? on centos i have IPV6ADDR_SECONDARIES for this. 2017-05-06 17:05:46 Shiz: yes, those i mean and think they are 1 by default 2017-05-06 17:07:27 ^ingo^^^: ip a a address 2017-05-06 17:59:00 <^ingo^^^> second iface eth0 inet6 static in /etc/network/interfaces do the job 2017-05-06 20:10:01 hey guys 2017-05-06 20:10:38 I'm using zsh as my primary shell for my user on alpine on my laptop 2017-05-06 20:11:01 when I login via tty, my prompt just shows control characters for my PS1 2017-05-06 20:12:26 like \[\e[1;32m\]\h [\[\e[0m\]\w\[\e1;32m\]]\$ \[\e[0m\] 2017-05-06 20:12:51 instead of the properly colored prompt 2017-05-06 20:13:13 it works properly un urxvt once I'm logged in a graphical environment 2017-05-06 20:13:55 I know that colors work properly on the tty, cause i have zsh syntax highlighting turned on which appears to work 2017-05-06 20:14:46 howdy! 2017-05-06 20:18:30 mepholic: sure it's running zsh? 2017-05-06 20:18:40 yeah definitely 2017-05-06 20:19:02 I DO have another strange issue though, that may be related 2017-05-06 20:19:19 echo $ZSH_VERSION ? 2017-05-06 20:19:25 when zim's (zsh configuration script) ssh plugin loads 2017-05-06 20:19:28 on initial login 2017-05-06 20:19:39 mepholic: maybe TERM isn't set properly in your tty? 2017-05-06 20:19:57 it gives a busybox error for ps 2017-05-06 20:20:08 even though it should be running in zsh 2017-05-06 20:20:16 ACTION is pretty sure it's not a zsh, since \h isnt expanded :P 2017-05-06 20:20:26 Shiz: good call, i'll look into that 2017-05-06 20:20:37 though I'm skeptical, since color does seem to work 2017-05-06 20:20:59 hmm 2017-05-06 20:21:05 my TERM is set to "linux" 2017-05-06 20:21:32 leah2: $ZSH_VERSION shows 5.2 2017-05-06 20:21:48 oO 2017-05-06 20:23:08 ah 2017-05-06 20:23:08 I wish fbgrab was in the repos 2017-05-06 20:23:17 you realize that prompt is for bash? 2017-05-06 20:23:42 zsh uses %h %m etc 2017-05-06 20:23:46 I thought zsh ps1's were compatible 2017-05-06 20:23:54 let me login and check my prompt var 2017-05-06 20:23:54 nope 2017-05-06 20:23:59 hi student0 2017-05-06 20:24:17 and when I say login, I mean type startx 2017-05-06 20:24:42 huh leah2 2017-05-06 20:24:44 good call 2017-05-06 20:24:51 now I wonder where that's coming from :) 2017-05-06 20:24:53 just set it in .zshrc 2017-05-06 20:25:09 leah2: I'm using zim 2017-05-06 20:25:14 zim _should_ handle it 2017-05-06 20:25:15 whatever that is 2017-05-06 20:25:26 it's like oh-my-zsh 2017-05-06 20:25:27 or prezto 2017-05-06 20:25:33 but lighter weight 2017-05-06 20:44:40 interesting 2017-05-06 20:44:52 Shiz: it is related to my term 2017-05-06 20:45:08 :P 2017-05-06 20:45:14 try setting is to xterm or xterm-256color 2017-05-06 20:45:18 it* 2017-05-06 20:45:22 https://github.com/Eriner/zim/blob/master/modules/prompt/init.zsh 2017-05-06 20:45:32 just not how you'd expect it to be 2017-05-06 20:45:54 hehe 2017-05-06 20:46:11 what's the best way to set my prompt on a tty 2017-05-06 20:46:25 I hear that it's not good practice to set that kind of thing in your bashrc 2017-05-06 20:46:37 and generally you should let the "terminal application" decide 2017-05-06 20:46:45 uhh 2017-05-06 20:46:47 well, zshrc in this case 2017-05-06 20:47:05 and yeah 2017-05-06 20:47:12 well the thing is 2017-05-06 20:47:14 I asked the wrong question entirely 2017-05-06 20:47:16 your tty IS a linux 2017-05-06 20:47:22 so setting it to xterm wont magically make it work 2017-05-06 20:47:29 because it's still a linux TERM 2017-05-06 20:47:37 so i'd just tell you to patch the thing in your init.zsh 2017-05-06 20:47:39 :P 2017-05-06 20:47:47 I mean TERM, not prompt 2017-05-06 20:47:49 :/ 2017-05-06 20:48:06 well 2017-05-06 20:48:08 so do i 2017-05-06 20:48:10 i mean 2017-05-06 20:48:15 I wanna talk to the maintainer of the project 2017-05-06 20:48:18 simply changing your TERM will cause other issues 2017-05-06 20:48:19 and see his justification 2017-05-06 20:48:22 right 2017-05-06 20:48:27 like software believing your tty has capabilities that it doesn't 2017-05-06 20:48:29 :P 2017-05-06 20:48:34 exactly 2017-05-06 20:48:36 :) 2017-05-06 20:51:49 hmmm 2017-05-06 20:52:00 there is a linux-c terminfo file 2017-05-06 20:52:06 which appears to be for color support 2017-05-06 20:52:19 Shiz: is there any way I can change the default tty TERM? 2017-05-06 20:52:34 without hacking my zshrc file up? 2017-05-06 20:52:57 mepholic: inittab 2017-05-06 20:53:08 i still don't think that setting that kind of thing in my zshrc is the best option, even if I put it in a conditional to set it only if the term is vcurrently 'linux' 2017-05-06 20:53:10 ok 2017-05-06 20:53:33 after tty1/tty2/etc add the term type 2017-05-06 20:53:34 so e.g. 2017-05-06 20:53:38 tty1::respawn:/sbin/getty 38400 tty1 2017-05-06 20:53:42 -> tty1::respawn:/sbin/getty 38400 tty1 linux-c 2017-05-06 20:55:23 right 2017-05-06 20:55:28 just found the docs on that 2017-05-06 20:55:37 thank you very much for the help 2017-05-06 20:55:39 :) 2017-05-06 20:56:19 lets test er out 2017-05-06 20:57:42 hah 2017-05-06 20:57:47 that seemed to do the trick 2017-05-06 20:58:25 i guess the next thing to look into is why part of my zsh init scripts seem to be using busybox 2017-05-06 20:58:46 instead of coreutils 2017-05-06 20:59:01 what's the order of your PATH 2017-05-06 20:59:04 oh wait 2017-05-06 20:59:17 ps isn't part of coreutils is it 2017-05-06 20:59:21 procps 2017-05-06 20:59:28 that's it 2017-05-06 20:59:31 :^) 2017-05-06 21:00:07 neat 2017-05-06 21:01:09 awesome 2017-05-06 21:01:16 fantastic 2017-05-06 21:01:18 all of my weird login issues appear to be resolved now 2017-05-06 21:01:20 thanks all 2017-05-06 21:01:25 no problem 2017-05-06 21:01:26 glad to help 2017-05-06 21:02:08 i'm glad you could be of service :^) 2017-05-06 21:03:28 in a few months I'm probably going to find out that linux-c isn't for color and it's actually for cyrillic or something 2017-05-06 21:03:35 and I failed at looking at the docs 2017-05-06 21:03:49 ¯\_(ツ)_/¯ 2017-05-06 21:03:51 it works 2017-05-06 22:54:47 Is there a way to reinstall but still keep the files in my home directory? 2017-05-06 23:00:28 i think /home would need to be in a separate partition and if you didnt touch it on the install it would survive? 2017-05-06 23:00:40 hmm it's not in a separate partition 2017-05-06 23:01:19 your safest bet would be to back it up to another system while you do the reinstall, but there could be another way def not an expert :) 2017-05-06 23:02:15 remove everything manually and don't format or repartition anything 2017-05-06 23:03:47 good point.. 2017-05-06 23:05:09 Also my system time is wrong. It says it's 3PM but it's 7PM 2017-05-06 23:05:14 ~ > date 2017-05-06 23:05:16 Sat May 6 15:04:48 EDT 2017 2017-05-06 23:06:09 double check one of the ntp servers is installed/configured and started? 2017-05-06 23:55:29 Yay the same problem like always xD nginx not starting after adding it to the default runtime 2017-05-07 00:02:22 works for me™ 2017-05-07 00:02:49 yea for me its a 50/50 chance that it works 2017-05-07 00:03:03 on some VM it works on some not 2017-05-07 01:38:14 parazyd: Are you using alpine linux? 2017-05-07 01:38:22 on some machines 2017-05-07 01:38:27 parazyd: x220? 2017-05-07 01:38:30 nope 2017-05-07 01:38:33 Ah 2017-05-07 01:38:34 Why? 2017-05-07 01:38:37 pi1, lime2 2017-05-07 01:38:48 parazyd: What do you use on x220? 2017-05-07 01:38:54 gentoo, what else :p 2017-05-07 01:38:59 Ah 2017-05-07 01:39:11 I can't seem to build coreboot on alpine. 2017-05-07 01:39:23 Maybe because glibc is needed. 2017-05-07 01:39:25 i don't think it will build on musl 2017-05-07 01:39:30 Yeah. 2017-05-07 01:39:35 make a debian chroot with debootstrap 2017-05-07 01:39:42 Huh? 2017-05-07 01:39:50 A chroot will work? 2017-05-07 01:39:52 make a glibc chroot and build it there 2017-05-07 01:39:54 sure 2017-05-07 01:40:03 I thought chroot will use the libc outside it? No? 2017-05-07 01:40:19 I tried back then using an arch chroot, stuff still breaks. 2017-05-07 01:40:50 I think there might be something to do with kernel. 2017-05-07 01:42:40 it could be grsec blocking things in the chroot 2017-05-07 01:42:45 but this stuff works 2017-05-07 04:09:45 is there anything a new-comer to Alpine can do to help arrive at 3.6? 2017-05-07 06:33:53 Which NTP client to run? ('busybox', 'openntpd', 'chrony' or 'none') [chrony] openntpd 2017-05-07 06:33:53 ERROR: unsatisfiable constraints: 2017-05-07 06:33:54 openntpd (missing): 2017-05-07 06:33:54 required by: world[openntpd] 2017-05-07 06:33:54 * rc-update: service `openntpd' does not exist 2017-05-07 06:34:05 2 years later, install script still broken? 2017-05-07 06:34:09 :> 2017-05-07 06:35:53 How would you like to use it? ('sys', 'data', 'lvm' or '?' for help) [?] sys 2017-05-07 06:35:54 ERROR: unsatisfiable constraints: 2017-05-07 06:35:57 oh, okay 2017-05-07 06:37:52 don't worry 2017-05-07 06:37:58 solutions are only an unsatisfiable constraint away 2017-05-07 06:40:05 back then i just assumed it was just because it was a small project, but now I actually see people mentioning it 2017-05-07 06:40:15 and the install scripts are still nonsensical 2017-05-07 06:53:53 ncl: did you set up apk mirrors? 2017-05-07 06:57:27 yes, it turned out the dns i selected wasn't working 2017-05-07 07:00:11 anyway, a new installer is on the todo for 3.7 2017-05-07 07:01:23 ncl: it's still kind of a small project 2017-05-07 07:02:23 yes, lots of opportunity to make large impacts here by contributing 2017-05-07 10:05:09 hello hello.. what is rotating messages? :) 2017-05-07 10:05:33 I have logrotate.. but that is in cron and not in use as I can see.. 2017-05-07 10:08:03 it looks like syslogd is doing that itself.. 2017-05-07 10:25:26 hi Alpinists(?) 2017-05-07 10:26:20 is there a more up-to-date guide to building a custom iso? Following the instructions https://wiki.alpinelinux.org/wiki/How_to_make_a_custom_ISO_image leaves me with an iso that boots me into recovery mode 2017-05-07 11:35:48 can it be that there are no cjk fonts in alpine? (other than bitmap fonts) 2017-05-07 11:37:00 no ipafont? 2017-05-07 11:37:24 https://github.com/alpinelinux/aports/commit/cf2128830a60c4acdf7c702ce84eba30fdc666b1 2017-05-07 11:37:29 nsz: try font-ipa 2017-05-07 11:37:39 i don't think it covers all of CJK though 2017-05-07 11:37:41 just the J part 2017-05-07 11:37:52 also, it's in testing 2017-05-07 11:39:34 asie: thanks ipa font worked 2017-05-07 12:54:02 I can't mount any nfs shares. installed nfs-utils, try mounting with nfs type, mount just hangs without displaying anything, need to SIGKILL it. nfs-server is on debian and perfectly working (serves 10+ other machines) 2017-05-07 12:54:08 any idea what's going wrong there? 2017-05-07 12:54:17 using 3.5 2017-05-07 12:55:07 wow, not even SIGKILL terminates the mount command. wtf. 2017-05-07 12:58:24 ah, turns out busybox does not support mounting nfs shares with locking. needed to supply nolock option. 2017-05-07 13:26:06 hehe 2017-05-07 13:26:17 sounds like fun 2017-05-07 14:47:40 thunfisch: the fun part is that when a process is unkillable by SIGKILL, it's stuck in a non-returning syscall 2017-05-07 14:49:02 something something hell upon whoever thought it was a good to implement nfs in the kernel 2017-05-07 14:57:28 you're aware of the diff between hard and soft mounts? 2017-05-07 14:57:29 the intr flag? 2017-05-07 14:57:36 the idea of transaction safety being the default 2017-05-07 14:57:40 and kernel io states? 2017-05-07 14:58:13 not to say that the linux nfs implementation isn't the worst ever made 2017-05-07 14:58:19 becasue it is 2017-05-07 14:58:47 but the main thing is that people run it quite misconfigured to their purpose 2017-05-07 14:59:10 the defaults make sense if you want to run a database on it, or any such. to protect from idiotic dev's code 2017-05-07 14:59:19 but in any other case you'll not want a hard mount 2017-05-07 14:59:30 and if you don't use a hard mount and actually set up the timeouts etc 2017-05-07 14:59:36 then it'll work as you expect 2017-05-07 14:59:58 if you configure it different from what you want, it'll behave different from you want 2017-05-07 15:00:09 and if you just use defaults that are wrong for you, you can call it devops 2017-05-07 15:00:12 but it'll not work 2017-05-07 15:53:26 why was the tor package removed? 2017-05-07 15:57:32 libc issues? 2017-05-07 15:59:29 What? 2017-05-07 15:59:33 Why is tor removed? 2017-05-07 16:00:00 ncl: When is it removed? 2017-05-07 16:00:34 nsz: There is chinese font. I have added wqy-zenhei back then. 2017-05-07 16:00:47 Too lazy to add wqy-microhei. 2017-05-07 16:01:14 But I don't see any pinyin IME in alpine. T_T 2017-05-07 16:01:31 One of the reason I dual boot with arch. 2017-05-07 17:30:26 ncl: ? 2017-05-07 17:30:36 https://git.alpinelinux.org/cgit/aports/tree/community/tor?h=master 2017-05-07 17:30:39 tor hasn't gone anywhere 2017-05-07 17:31:06 http://pkgs.alpinelinux.org/package/v3.5/community/x86_64/tor 2017-05-07 17:35:01 /community/ 2017-05-07 17:36:01 and? :P 2017-05-07 17:36:24 it was always community 2017-05-07 17:39:56 well, testing before, but you know what I mean 2017-05-07 17:40:58 forgot about repos that have categories like that 2017-05-07 17:43:13 :P 2017-05-07 17:44:53 are there options to build packages from source, for things like openssl cipher patented ciphers 2017-05-07 17:46:17 https://wiki.alpinelinux.org/wiki/Include:Setup_your_system_and_account_for_building_packages 2017-05-07 17:54:52 do you have to use lvm for a luks root 2017-05-07 17:55:20 no 2017-05-07 18:00:17 is there just like, a tarball i can throw on the disk like gentoo or 2017-05-07 18:01:06 sure 2017-05-07 18:01:15 https://alpinelinux.org/downloads/ 2017-05-07 18:01:18 the minirootfs here :P 2017-05-07 18:01:21 it won't be complete though 2017-05-07 18:04:17 Hi, anyone have any clue about this issue: https://forum.alpinelinux.org/forum/networking/network-not-working-boot ? 2017-05-07 18:17:03 core:/# setup-lbu /mnt 2017-05-07 18:17:04 /media//mnt: not a directory 2017-05-07 18:17:06 lol 2017-05-07 18:20:57 this script really wants to use /media specifically 2017-05-07 18:21:00 nice 2017-05-07 18:22:18 who wrote this 2017-05-07 18:29:07 that's probably because the initramfs automatically mounts stuff at /media (i think) 2017-05-07 18:29:33 so it makes no sense to do it elsewhere else it won't be found anyway 2017-05-07 18:30:20 isn't setup-lbu how the rootfs is setup during the install 2017-05-07 18:30:43 setup-lbu is only relevant if you're planning to run from RAM 2017-05-07 18:30:52 it's where your local changes will be stored (and loaded by the initramfs) 2017-05-07 19:40:42 I'm pretty sure my machine isnt going to boot back up 2017-05-07 19:43:25 what did you use to install? 2017-05-07 19:45:36 I wanted a dmcrypt root on gpt 2017-05-07 19:45:43 i think it just booted to the liveusb again 2017-05-07 19:47:13 oh, great, gummiboot didn't even work apparently 2017-05-07 20:02:26 and still doesnt 2017-05-07 21:47:49 question regarding ipv4 on with the following error: 2017-05-07 21:47:49 udhcpc: socket(AF_PACKET,2,8): Address family not supported by protocol 2017-05-07 21:47:49 util-03:~# modprobe AF_PACKET 2017-05-07 21:47:49 modprobe: FATAL: Module AF_PACKET not found in directory /lib/modules/4.4.52-0-grsec 2017-05-07 21:47:49 Linux util-03 4.4.52-0-grsec #1-Alpine SMP Tue Feb 28 10:15:40 GMT 2017 x86_64 Linux 2017-05-07 21:47:49 util-03:~# uname -a 2017-05-07 21:47:49 util-03:~# cat /etc/alpine-release 2017-05-07 21:47:50 3.5.2 2017-05-07 21:49:22 damn, it's been awhile since I've irc'd, didn't realize that would appear as a bunch of messages :) 2017-05-07 21:50:42 modprobe af_packet 2017-05-07 21:50:44 no caps 2017-05-07 21:50:49 but id on't think that's it 2017-05-07 21:51:00 modprobe: FATAL: Module af_packet not found in directory /lib/modules/4.4.52-0-grsec 2017-05-07 21:51:16 anyway, this is an ipv6 thing 2017-05-07 21:51:17 try modprobe ipv6 2017-05-07 21:51:19 ls -lR /lib/modules/4.4.52-0-grsec 2017-05-07 21:51:21 modprobe: FATAL: Module af_packet not found in directory /lib/modules/4.4.52-0-grsec 2017-05-07 21:51:33 oops 2017-05-07 21:51:42 wrong buffer 2017-05-07 21:51:52 Do you have modules? 2017-05-07 21:52:29 This might have been broken by a bug that was just very recently fixed in apk. 2017-05-07 21:52:43 so, is there an apk package I need to install? 2017-05-07 21:53:11 ls -lR /lib/modules/4.4.52-0-grsec produces a bunch of output 2017-05-07 21:53:12 If you're missing the modules, you probably need to update the kernel to get a set. 2017-05-07 21:53:24 okay, I'll try that.. thanks 2017-05-07 21:53:41 weird thing is that the installer was able to lease a v4 address 2017-05-07 21:53:45 Both apk and the kernel packaging were somewhat broken. 2017-05-07 21:53:51 ah, that makes sense 2017-05-07 21:54:01 Yeah, it will have ipv4 support, but not the filters 2017-05-07 21:54:19 this isn't related to filters 2017-05-07 21:54:31 AF_PACKET 2017-05-07 21:55:18 Everything but the bare base IPV4 is compiled as a module IIRC, 2017-05-07 21:55:38 apk update && apk upgrade should upgrade the kernel, correct? (if one is available) 2017-05-07 21:55:47 fd = xsocket(PF_PACKET, SOCK_DGRAM, htons(ETH_P_IP)); 2017-05-07 21:55:51 this is the call in question 2017-05-07 21:55:55 it should not be doing htons... 2017-05-07 21:56:10 purf: add -a to # apk upgrade to be sure 2017-05-07 21:56:15 So the installer had what it needed, but upon booting with the installed kernel without modules, it can't load what's needed. 2017-05-07 21:56:15 thanks 2017-05-07 21:57:09 heh -- need an internet connection to upgrade via internets, duh 2017-05-07 21:57:19 I guess I'll have to wait for the bugfix :) 2017-05-07 21:57:20 Hmmm, yeah - not sure why the htons there -- shouldn't it already be in fixed byte order? 2017-05-07 21:57:44 actually, just running update-kernel may work... 2017-05-07 21:57:54 Twice. 2017-05-07 21:58:29 Is the apk still in your cache? 2017-05-07 21:58:41 unsure, let me give it a try 2017-05-07 21:58:53 i don't think it's a kernel issue 2017-05-07 21:59:00 purf: can you strace udhcpc? 2017-05-07 21:59:12 sure, let me try 2017-05-07 21:59:17 I think he got bit by the apk bug that wipes modules for the active kernel. 2017-05-07 21:59:34 nah, no strace, sorry 2017-05-07 22:00:01 If nothing in /lib/modules/`uname -r`/kernel nothing is going to be happy thats not already loaded from the initfs. 2017-05-07 22:00:02 I'm using the virt distribution (running as a xen domU on an alpine dom0) 2017-05-07 22:00:15 https://bugs.alpinelinux.org/issues/5730 2017-05-07 22:01:01 https://bugs.alpinelinux.org/issues/6516 2017-05-07 22:01:24 purf: ^ 2017-05-07 22:01:25 I saw 6516 2017-05-07 22:01:26 can you 2017-05-07 22:01:59 "Once the module was added and loaded dhcp worked fine." can't load the module that isn't there but I guess that's why you're suggesting to load the iso and try installing from there 2017-05-07 22:02:04 find /lib/modules -name af_packet.ko ? 2017-05-07 22:02:21 Hmm, bugs.alpinelinux isn't resolving for me at the moment for some reason. 2017-05-07 22:02:21 util-03:/lib/modules/4.4.59-0-grsec# find /lib/modules -name af_packet.ko 2017-05-07 22:02:33 util-03:/lib/modules/4.4.59-0-grsec# 2017-05-07 22:02:43 sounds like a failed kernel upgrade then 2017-05-07 22:03:16 try to get the linux-grsec .apk on something you have 2017-05-07 22:03:19 There it goes! Something in DNS is acting wonky for alpinelinux.org 2017-05-07 22:03:20 and installing it manuall 2017-05-07 22:03:22 y 2017-05-07 22:03:39 fun 2017-05-07 22:03:58 http://nl.alpinelinux.org/alpine/v3.5/main/x86_64/linux-grsec-4.4.59-r0.apk 2017-05-07 22:04:00 specifically 2017-05-07 22:04:00 Should be in /var/cache/apk 2017-05-07 22:04:03 presuming x86_64 2017-05-07 22:04:20 yep 2017-05-07 22:04:22 No net :) 2017-05-07 22:04:56 tar -tf /var/cache/apk/linux-grsec-4.4.59-r0.apk | grep af_packet then 2017-05-07 22:07:17 all I've got in /var/cache/apk is APKINDEX.c51f8f92.tar.gz 2017-05-07 22:09:30 I'm confused why the installation failed if it had net access, should just be copying over from installation media? 2017-05-07 22:09:40 unless that's the bug 2017-05-07 22:55:17 purf - Check the repo on the boot media for the file. 2017-05-07 23:01:43 TemptorSent: thanks, will do 2017-05-08 00:59:43 https://twitter.com/swiftonsecurity/status/861364611773337600 2017-05-08 03:05:09 ncopa: i forgot about the pv-grub thing, hopefully i can look at it next week when i have a few hours off 2017-05-08 10:23:06 Shiz: Sorry, been AFK over the weekend.. Sorry for the confusion, Ansible does not rely on `adduser`, but rather `useradd`. Is it possible to install useradd somehow? 2017-05-08 10:27:00 iron_houzi: install shadow? 2017-05-08 11:16:22 parazyd: That's it! Thanks! 2017-05-08 13:29:44 hey Shiz :) 2017-05-08 14:05:56 hello 2017-05-08 14:06:10 iron_houzi: shadow-utils? 2017-05-08 14:06:56 sorry, it's just called shadow 2017-05-08 14:06:58 the package 2017-05-08 16:51:13 Hi 2017-05-08 16:51:18 Does this look okay? https://0x0.st/YyB.txt 2017-05-08 16:53:07 networking | boot in rc-update 2017-05-08 17:56:38 <_ikke_> syx: netmask 128 for ipv6? 2017-05-08 17:56:47 yup 2017-05-08 17:57:03 i'm just gonna use dhcp and configure ipv6 manually after boot 2017-05-08 18:14:09 where are set the timezone for timestamps in /var/log/messages? I'm on Europe/Berlin. date shows the correct time. but in the /var/log/messages i'm 2 hours back. 2017-05-08 18:14:34 logs are always utc 2017-05-08 18:19:01 but only on alpine... have a few centos-kvms here, where all timestamps equal, so this is confusing. Thanks for this info 2017-05-08 18:20:08 fyi, if someone is interested, tcc (tinycc) can now built and pass all tests on alpine (vanilla only). there's still some issue with va_args though, but it's already capable of building a lot of things (including itself) 2017-05-08 18:58:45 ingo__: you would have to set the system timezone for that to work 2017-05-08 18:58:55 avih: cool, nice work 2017-05-08 18:59:20 Shiz: i [merely] didn't do anything ;) 2017-05-08 19:04:55 hi. does apk support socks5 proxy? 2017-05-08 19:07:28 hi @ all 2017-05-08 19:09:05 Shiz: What das that mean "system timezone"? I do have the same prob. with time in logs 2017-05-08 19:14:33 gromero: it uses libfetch which i believe doesn't, but you may be able to use torsocks to force it through socks5 2017-05-08 19:15:41 feuerteufel: the present TZ variable 2017-05-08 19:15:53 Shiz: thanks. torsocks is my second options. I'll go for it :-) 2017-05-08 19:16:03 I believe you can set it globally in /etc/profile, or just for the syslogger in /etc/conf.d/syslog 2017-05-08 19:18:31 feuerteufel: probably better: ln -sf /usr/share/zoneinfo/Your/Timezone /etc/localtime 2017-05-08 19:18:42 afaik this is musl related 2017-05-08 19:18:49 e.g. /usr/share/zoneinfo/Europe/Berlin 2017-05-08 19:18:57 clandmeter: not really, it's not different from other libcs :P 2017-05-08 19:19:09 setting timezone does not change syslog timezone 2017-05-08 19:19:24 it will if you set it at the right time 2017-05-08 19:19:32 so setting it that the syslogd process actually has it set correctly 2017-05-08 19:19:37 which means not in your local profile for instance :P 2017-05-08 19:21:18 i remember it was logging in utc, maybe the changed it overtime. 2017-05-08 19:21:19 clandmeter: http://git.musl-libc.org/cgit/musl/tree/src/time/__tz.c#n127 2017-05-08 19:21:20 :) 2017-05-08 19:21:26 http://www.openwall.com/lists/musl/2014/01/29/1 2017-05-08 19:21:27 it first reads TZ, then /etc/localtime 2017-05-08 19:21:50 ah 2017-05-08 19:22:01 right, it's the syslog() function 2017-05-08 19:22:12 didn't take that into account -- you're probably right 2017-05-08 19:22:20 not used to syslog() being part of libc 2017-05-08 19:22:28 Timezone was set on installation. so /etc/localtime is correct. Also set /etc/TZ. in /etc/conf.d/hwclock clock is set to local. on boot is see '[ 0.556926] rtc_cmos 00:00: setting system clock to 2017-05-08 20:09:44 UTC (1494274184)' which is not UTC, but localtime 2017-05-08 19:22:43 The localetime is corekt, but the time in for exemple "/var/log/messages" is 2h late so I think there is UTC not locale time 2017-05-08 19:23:12 ingo__: you very much want to set hwclock to utc, not local 2017-05-08 19:23:22 /etc/TZ is not used by anything in the system i think 2017-05-08 19:23:46 finally, what clandmeter linked above seems right: in musl, applications using syslog() will always log in UTC, not the local time 2017-05-08 19:24:00 don't think this can be trivially changed 2017-05-08 19:24:28 seems some ppl patch it according the the thread. 2017-05-08 19:25:18 tbh i don't disagree with dalias, i think any timezone adjusts should be done in syslogd itself, not depend per application logging to it 2017-05-08 19:35:13 Shiz: I agree, time has to be set from one point! 2017-05-08 19:35:48 But why are there 2 diffrent times on one system? 2017-05-08 19:42:11 example: systems might have users from different continents 2017-05-08 19:42:25 it's the same time, just different time zones 2017-05-08 19:42:38 if you put the system itself in utc and they use TZ it's a lot easier 2017-05-08 19:43:01 Hi 2017-05-08 19:43:11 https://0x0.st/YtL.txt should this work to bind the addresses and stuff? 2017-05-08 19:47:56 darkfader: you right! 2017-05-08 19:48:35 But it looks like TZ dosn't work, correct? 2017-05-08 19:51:18 but this works only if it's consistent. had activated the rc.log. Timestamps here are localtime. So syslog are UTC other logs are localtime. 2017-05-08 19:54:12 if the time offest was also printet, this makes sense. so what time is printet in which log? 2017-05-08 19:55:50 ingo__: I'll check ... yust a sec ... 2017-05-08 19:56:40 as mentioned above, it will always be UTC regardless of your timezone 2017-05-08 19:56:45 because of how musl's syslog() call works 2017-05-08 19:57:11 syslog is not permitted by POSIX to inspect the TZ variable much less behave as if it called tzset() 2017-05-08 19:57:51 the syslog() function that is 2017-05-08 20:01:06 Ok apache take's the locale time like that: [08/May/2017:21:58:33 +0200] 2017-05-08 20:01:49 dalias: that is what i have understood. 2017-05-08 20:05:00 the most logfileoutputs are configurable. Problem is if here, if the offset is not in the timesstamp, and you load the logfiles in a system like graylog or splunk, you have don't know anymore, how to correlate the lines for error search. 2017-05-08 20:05:32 think here, the solution is, to install rsyslog or so. 2017-05-08 20:05:54 A nsca-log take's also the locale time, but no daut about that! That script is build by me ;) 2017-05-08 20:06:13 the issue is that the syslogd format should just pass UTC timestamps 2017-05-08 20:06:24 and that the syslogger then can adjust it to some timezone if it desires 2017-05-08 20:06:26 :P 2017-05-08 20:06:39 ACTION just wrote a patch that makes busybox syslogd do that, maybe 2017-05-08 20:08:57 yes, the syslogd should convert utc timestamps from the client sending the log message into whatever format it wants them saved in 2017-05-08 20:08:59 Is there some page on the wiki, where this is described? didn't found it. 2017-05-08 20:09:13 but really everything on computers should be done in utc... 2017-05-08 20:09:30 saving local times is a mess of ambiguity 2017-05-08 20:09:45 esp. at daylight time change boundaries 2017-05-08 20:10:51 hm, i have here arround 300 server, which produce arroucht 100GB logs per day, all on localtime. it would an absolut mess to find something, if they where on UTC. 2017-05-08 20:11:42 i'm confused what mktime() assumes about the struct tm given 2017-05-08 20:11:44 :P 2017-05-08 20:12:02 wrt timezines 2017-05-08 20:12:42 local 2017-05-08 20:12:44 :( 2017-05-08 20:12:55 that's why the timegm function (nonstd iirc) exists 2017-05-08 20:13:03 bleh 2017-05-08 20:13:13 i just want to convert a UTC struct tm to a local... thing 2017-05-08 20:13:16 but timegm is bleh 2017-05-08 20:13:17 fwiw you only need time conversion functions in stdlib for local time 2017-05-08 20:13:32 If there is a good documentation about it, that in the syslog output is UTC used, there should be no problem. 2017-05-08 20:13:33 for utc the formulas can just be used 2017-05-08 20:13:49 yeah but i'm implementing a -Z flag for busybox that converts presumed-UTC incoming timestamps to local time 2017-05-08 20:13:51 :) 2017-05-08 20:13:58 busybox syslogd* 2017-05-08 20:14:04 well you can also use the globals that tell the tz offset 2017-05-08 20:14:30 extern long timezone; 2017-05-08 20:14:32 oh? 2017-05-08 20:14:34 nice 2017-05-08 20:14:37 that's.... good enough 2017-05-08 20:14:42 it's posix not plai nC 2017-05-08 20:15:00 you have to add/sub it from the timestamp and set tm_isdst==0 2017-05-08 20:15:02 i think/hope busybox assumes posix 2017-05-08 20:15:05 if not, whatever 2017-05-08 20:15:07 :P 2017-05-08 20:15:11 *nod* it does 2017-05-08 20:15:42 anyway just using the posix formula is equally portable and doesn't depend on global state :-p 2017-05-08 20:17:20 https://txt.shiz.me/NzM4NjFjOW 2017-05-08 20:17:24 something like this is what i have then 2017-05-08 20:19:12 with an appropriate call to tzset() im init 2017-05-08 20:19:14 in init 2017-05-08 20:30:11 Shiz: What I have to do with that patch? 2017-05-08 20:30:26 what i linked isn't a patch 2017-05-08 20:31:39 hmm, above code snippet doesn't seem to work either 2017-05-08 20:31:51 That's why I don't know what to do with that ;) 2017-05-08 20:46:18 dalias: what was that posix formula? ;p 2017-05-08 20:59:14 hmm, somehow timezone isn't getting set properly... 2017-05-08 21:06:08 nvm 2017-05-08 21:06:13 timezone is seconds WEST of UTC.... 2017-05-08 21:37:06 I just use this patch to overwrite the time instead of converting it http://sprunge.us/DjhF 2017-05-08 21:37:31 nmeum: that breaks for remote syslogd 2017-05-08 21:37:34 :P 2017-05-08 21:38:12 I don't use a remote syslogd so I don't care :p 2017-05-08 21:38:29 but if you write a proper patch that would be great 2017-05-08 21:39:09 nmeum: https://github.com/alpinelinux/aports/pull/1360 2017-05-08 21:39:11 ;) 2017-05-08 21:39:31 did you suggest that patch upstream? 2017-05-08 21:39:38 as in: busybox upstream 2017-05-08 21:39:59 not yet, considering i just wrote it 15 minutes ago 2017-05-08 21:40:05 :) 2017-05-08 21:54:28 nmeum: http://lists.busybox.net/pipermail/busybox/2017-May/085437.html 2017-05-08 21:54:30 :P 2017-05-08 22:06:51 After upgrading to 4.9.26-0-hardened, my ALSA sound is now crap, is this a known issue? 2017-05-08 22:10:46 ASUS Z97 MB with Realtek ALC892 btw.. 2017-05-08 22:50:07 Nm, it's not actually ALSA, it's mplayer. Playing .wavs work nice. 2017-05-08 22:55:34 mplayer's mp3 decoder seems broken, it can play .flac, .wav, aac.. 2017-05-08 22:56:02 Lot's of high-pitched artefacts when playing mp3s though. 2017-05-08 22:56:17 may i recommend mpv 2017-05-08 22:56:37 disable alsa's resampler and mixer 2017-05-08 22:56:59 it might still be using these horrible linear interpolation 2017-05-08 22:57:16 Shiz: I'll check it out. 2017-05-08 22:57:33 hiro: Don't know about alsa's resampler. 2017-05-08 22:57:45 hiro: alsamixer settings seem fine. 2017-05-08 22:58:23 alsamixer is not what i said 2017-05-08 22:58:33 good night 2017-05-08 22:59:47 hiro: Nah, I noticed. Care to explain? 2017-05-08 23:30:10 Shiz: fyi: mpv plays the mp3s fine. Something must be broken in mplayer or perhaps ffmpeg atm. 2017-05-08 23:30:25 i'd always recommend mpv over mplayer 2017-05-08 23:30:31 it's an mplayer fork that's actually maintained for the better 2017-05-08 23:30:33 :p 2017-05-08 23:33:58 Shiz: Yeah, I glanced through the options and the man-page, felt more structured than mplayer's 2017-05-09 08:40:56 hi I'm having trouble getting X to start in virtualbox 2017-05-09 08:41:12 I have installed the vmware video package, as suggested in the xfce wiki page, and the guest additions which for some reason are in the testing repo and require an hardened kernel 2017-05-09 08:41:21 is virtualbox not supported at the moment? 2017-05-09 08:51:10 Hi! 2017-05-09 08:51:38 I'm having some issues with /etc/network/interfaces after bootstrapping a system on hetzner 2017-05-09 08:51:57 everything works fine if i use dhcp, even if i just use static addresses 2017-05-09 08:52:05 whenever i disable dhcp, everything breaks 2017-05-09 09:32:50 so i'm doing this https://w1r3.net/LTsJud.txt 2017-05-09 09:32:57 gettin this https://w1r3.net/aFpsUV.txt 2017-05-09 10:02:33 syx: ip addr add ip/mask 2017-05-09 10:02:44 huh 2017-05-09 10:03:09 oh 2017-05-09 10:03:10 syx: iirc it defaults to a /32 so your ip route add default via won't any way to route find the ip you've specified as your gww. 2017-05-09 10:03:11 no dev 2017-05-09 10:03:37 Which probably explains the "no such" error you get, the first one anyway. 2017-05-09 10:03:47 so no dev argument 2017-05-09 10:04:00 and yeah i forgot the netmask 2017-05-09 10:04:03 You won't need it, it'll find it anyway. 2017-05-09 10:04:26 ip -6 route add default via fe80::1 dev eth0 do i still need this for link local 2017-05-09 10:05:32 I doubt it. 2017-05-09 10:05:45 trying now 2017-05-09 10:05:45 default via your localhost-addr. 2017-05-09 10:05:52 That sounds just wrong. 2017-05-09 10:06:08 hetzner does it via link-local 2017-05-09 10:06:26 Anyway, if you JUST use your IPv6 for talking to your localhost I guess it wouldn't break things, but still, why have it? 2017-05-09 10:06:38 it's my default route 2017-05-09 10:07:54 Well, your default route points to fe80::1, I sort of suck at IPv6, but isn't fe80::1 eqvivalent to 127.0.0.1? 2017-05-09 10:08:21 no 2017-05-09 10:08:31 ::1 is 127.0.0.1 2017-05-09 10:08:44 K, my bad, thought I recognized the fe80. 2017-05-09 10:08:59 ok rebooting with the dev argument for that 2017-05-09 10:10:02 doesn't look like it's working 2017-05-09 10:10:21 You usually don't need the dev argument; if the IP of your gateway is reachable through one of the interfaces, using that interface's IP and netmask, the kernel will find the dev itself. 2017-05-09 10:10:39 What errors do you get. 2017-05-09 10:10:42 usually yeah, but link locals are not unique per interface 2017-05-09 10:10:48 rebooting into rescue mode now 2017-05-09 10:11:40 Ok, I didn't know. Maybe I should start caring for IPv6, it has been claimed to be the next big thing for 20 years... =) 2017-05-09 10:12:14 it has to be :) 2017-05-09 10:12:27 "An historical note on the use of IPv9"... 2017-05-09 10:12:36 lol 2017-05-09 10:12:48 It's an actual RFC. =D 2017-05-09 10:12:52 lol really 2017-05-09 10:12:57 Yeah. =) 2017-05-09 10:13:21 rfc1606 2017-05-09 10:14:07 Anyway, you had more errors from those logs of yours, not only regarding the missing netmask. 2017-05-09 10:14:23 https://w1r3.net/ECYUMN.txt 2017-05-09 10:14:37 You had a bunch of "already exists" too, so the interfaces seem to have been configured already. 2017-05-09 10:15:11 lol this makes no sense 2017-05-09 10:15:24 lemme try without the up and down params 2017-05-09 10:15:31 So, what commands exactly cause those messages? 2017-05-09 10:15:47 Didn't you use ifup and ifdown? 2017-05-09 10:15:56 They check in /etc/interfaces/ iirc. 2017-05-09 10:16:15 okay would this work https://w1r3.net/tCdPPv.txt 2017-05-09 10:19:43 ok it sort of works 2017-05-09 10:19:51 I cannot give you a definitive answer, I don't use ifup/ifdown. From the top of my head it seems fine. 2017-05-09 10:19:57 lo doesn't come up 2017-05-09 10:20:01 nidan_: what do you use? 2017-05-09 10:20:43 I use s6-svscan / s6-rc for init so I have my own oneshot for bringing interfaces up/down the way I want. 2017-05-09 10:20:55 s6-rc -u change eth0 2017-05-09 10:20:57 s6-rc -d change eth0 2017-05-09 10:21:01 For example. 2017-05-09 10:21:16 lol i might just use bsd 2017-05-09 10:21:27 this is really complicated 2017-05-09 10:21:30 and should work but doesnt 2017-05-09 10:21:38 But it requires replacing your entire init, so if you just want to configure your interfaces it's overkill. 2017-05-09 10:21:53 yeah 2017-05-09 10:22:27 syx: Iirc /etc/interfaces/ are spillover from Debian/Ubuntu, so if you google for its syntax you can probably find answers in their forums. 2017-05-09 10:22:39 Imho it's not very well documented. 2017-05-09 10:22:57 syx: You can use s6-rc as init for *BSD too! Yay! \o/ 2017-05-09 10:23:06 oh yay 2017-05-09 10:23:08 no thanks 2017-05-09 10:23:14 hostname.eth0 4 eva 2017-05-09 10:24:12 okay this *should* work 2017-05-09 10:24:23 Well, in all fairness, s6 isn't just about configuring interfaces, it's a service manager and it can be used to replace init too. 2017-05-09 10:24:29 Gl hf. =) 2017-05-09 10:24:37 ACTION waits patiently 2017-05-09 10:24:52 okay it's not pinging 2017-05-09 10:25:06 last time i'm doing this 2017-05-09 10:25:18 What are you trying to do actually? 2017-05-09 10:25:39 Apart from the obvious of getting your interfaces up.. 2017-05-09 10:25:44 get normal networking up 2017-05-09 10:25:53 i'm going to use it as a host node for vms 2017-05-09 10:26:03 so the os doesn't matter that much 2017-05-09 10:26:09 but i'm not going to use systemd 2017-05-09 10:26:10 ok 2017-05-09 10:26:21 Thank god. 2017-05-09 10:26:22 =) 2017-05-09 10:26:55 freebsd seems to do what i want 2017-05-09 10:27:01 and i'm not a big fan of busybox :s 2017-05-09 10:27:14 How come? 2017-05-09 10:30:22 it just things differently to what im used to 2017-05-09 10:31:40 okay yeah, alpine isn't going to work for me 2017-05-09 10:31:49 not as a host anyway 2017-05-09 10:33:34 syx: If that decision is made due to networking config issues you'll have the same issue using any Debian derivative too. 2017-05-09 10:33:47 Just fyi, sorry. 2017-05-09 10:33:48 i know 2017-05-09 10:33:53 this is why i'm using freebsd 2017-05-09 10:33:57 =) 2017-05-09 11:50:55 syx: what network stuff are you trying to do with busybox? 2017-05-09 12:34:01 hiro: nothing anymore 2017-05-09 13:45:53 Hi, quick question. I am using Alpine 3.5.2-virtual on VMWare. I cannot get open-vm-tools to start with the system. Running "rc-service open-vm-tools start" starts them, but after "rc-update add open-vm-tools", rc-status does not show them in the default runlevel and they do not start with the system 2017-05-09 14:43:31 hi all, is there any tool that allows me to find out which package provides a given (header) file? 2017-05-09 14:47:13 I'm trying to compile some code that uses "#include " and fails to find this header. 2017-05-09 14:47:28 try linux-headers 2017-05-09 14:49:59 Unode: http://pkgs.alpinelinux.org/contents 2017-05-09 14:50:11 you can e.g. search for types.h here 2017-05-09 14:50:12 arch3y_: thanks, that seems to have done it. 2017-05-09 14:50:17 but yeah, it's linux-headers 2017-05-09 14:50:41 Shiz: doh I was on the packages section. Didn't notice there was a "contents". 2017-05-09 14:50:54 :) 2017-05-09 14:50:54 Shiz: now if you have hardended installed wouldnt it be like linux-hardend-dev 2017-05-09 14:50:58 arch3y_: no 2017-05-09 14:51:12 linux-*-dev is if you want to compile modules and the like 2017-05-09 14:51:17 linux-headers is for linux userspace development 2017-05-09 14:51:49 Shiz: k thanks for shorting that out 2017-05-09 14:53:03 thanks for the help. Not sure I'd be able to pick the right package since there's tons of them that have a types.h file. 2017-05-09 14:53:05 I hope my pr to upgrade flex will be pushed soon 2017-05-09 14:53:25 Unode: it's linux-headers in your case 2017-05-09 14:53:27 :P 2017-05-09 14:53:50 but if you're looking for an include file, the correct path is likely to be /usr/include/ 2017-05-09 14:53:56 Shiz: I need it as well for another pkg honestly 2017-05-09 14:53:57 so it would be the package that has /usr/include/linux/types.h 2017-05-09 14:54:11 arch3y_: do you have a link to the PR? 2017-05-09 14:54:14 i can review it at least 2017-05-09 14:54:53 Shiz: yeah one sec https://github.com/alpinelinux/aports/pull/1363 2017-05-09 14:55:26 Shiz: plenty helpful. Managed to get it as the right choice on the package content list. I get the search now. Thanks! 2017-05-09 14:58:24 Shiz: am I gonna get in trouble since it looks like a PKGBUILD lol 2017-05-09 14:58:33 ? 2017-05-09 14:58:47 Shiz: Im used to building pkgbuilds for arch 2017-05-09 14:58:56 the change looks fairly minor to me 2017-05-09 14:59:04 yeah it was super minor 2017-05-09 14:59:16 mainly just and update added the check and cleaned it up to be more modern 2017-05-09 14:59:25 LGTM, although minor nitpick about the commit message: preferable would be "/: " 2017-05-09 14:59:42 not important at all and not gonna block this from being merged, just something to take into consideration 2017-05-09 14:59:49 Shiz: k I tried to follow whatseem to be the standard 2017-05-09 14:59:52 e.g. "main/flex: upgrade to 2.6.4" 2017-05-09 15:00:02 sure thanks 2017-05-09 15:00:16 ah so upgrade and not updated gotcha 2017-05-09 15:00:19 understood 2017-05-09 15:00:54 yup 2017-05-09 15:00:58 and : and not - :p 2017-05-09 15:01:06 and no need to repeat the package name in the messaget after L 2017-05-09 15:01:08 after : 2017-05-09 15:01:11 hence minor nitpicks :) 2017-05-09 15:02:22 sure thanks for the feedback 2017-05-09 15:02:46 Ill take all I can get I know you guys use kernel style git commits so that is new in itself 2017-05-09 15:03:46 what do you mean by that? 2017-05-09 15:03:54 we don't require signed-off-by afaik :p 2017-05-09 15:03:59 thats true 2017-05-09 15:04:15 well you use easier to read commits 2017-05-09 15:04:31 like most ppl do git commit -m "blah" 2017-05-09 15:04:47 but it should be done git commit then write it out correctly 2017-05-09 15:05:13 does anybody have experience running Alpine on via chipsets, specifically with the vx900 video card? 2017-05-09 15:06:22 i have tried to start X11 with the openchrome driver but i just get a black screen and frozen system 2017-05-09 15:06:52 does Xorg.log note anything of relevance? 2017-05-09 15:07:43 i cant tell, because the system is frozen. i cant switch back to the console 2017-05-09 15:07:52 sysrq-r 2017-05-09 15:07:58 then try to get back to the console 2017-05-09 15:08:11 ctrl-alt-f1 doesn't work? 2017-05-09 15:08:13 (sysrq-r "unraws" X11's control over the input hardware) 2017-05-09 15:08:20 i will try that when i get back to my desk, Xe 2017-05-09 15:08:26 Shiz: no 2017-05-09 15:09:52 sigmoidbigfoot: if all else fails it may be worth upgrading to edge 2017-05-09 15:09:58 there's a newer version of the openchrome driver in edge 2017-05-09 15:10:16 but i'd first check xorg.log when you have access to your pc again (be it through sysrq trickery or a reboot) 2017-05-09 15:12:11 will do 2017-05-09 15:13:07 how can i preserve xorg.log over a reboot? 2017-05-09 15:15:18 it won't go anywhere 2017-05-09 15:15:25 it's not stored on a tmpfs or anything, just /var/log 2017-05-09 15:16:09 if you run from ram, var will be tmpfs 2017-05-09 15:16:33 i am using diskless mode 2017-05-09 15:17:28 you can mount var somewhere? 2017-05-09 15:17:42 or setup ssh and login from another pc 2017-05-09 15:18:09 i may have to do that 2017-05-09 15:56:24 so here's xorg.log: http://tpaste.us/JM00 2017-05-09 15:57:15 if I run 'DISPLAY=:0 xrandr' in a console It says VGA-1 is disconnected 2017-05-09 16:00:18 yeah, it seems to not find a monitor 2017-05-09 16:00:20 curious 2017-05-09 16:04:19 sigmoidbigfoot: the arch wiki seems to suggest a special kernel is needed for VIA support 2017-05-09 16:08:05 that would be unfortunate 2017-05-09 16:08:40 [ 83.458] (EE) open /dev/dri/card0: No such file or directory 2017-05-09 16:08:47 I think that's important 2017-05-09 16:10:02 yeah, the DRM stuff is out-of-tree 2017-05-09 16:10:09 https://cgit.freedesktop.org/openchrome/drm-openchrome/ 2017-05-09 16:10:14 which is 3.19rc6... 2017-05-09 16:12:41 welp. 2017-05-09 20:16:57 I'm looking at various issues about adding users and I keep seeing flags I don't know the meaning of and man isn't any help 2017-05-09 20:17:27 ie `adduser -S ...` `adduser -G ... -g ... -s ... 2017-05-09 20:17:44 I mean, I can kind of infer what the flags are supposed to mean but anyone know where I can get this documentation? 2017-05-09 20:22:57 ash_workz: In case you're talking about busybox's buildin adduser, I've never found any docs, other than reading the source. 2017-05-09 20:23:06 ash_workz: I might be wrong, there might be docs somewhere. 2017-05-09 20:23:16 nidan_: thanks 2017-05-09 20:23:29 ash_workz: You could perhaps check the POSIX spec at opengroups.. 2017-05-09 20:23:53 nidan_: thanks I'll look for it :) 2017-05-09 20:23:54 ash_workz: That doesn't say if busybox has support for anything more than POSIX though, which it might.. 2017-05-09 20:23:59 ash_workz: np 2017-05-09 20:36:41 normally it just has ... less ... than posix :) 2017-05-09 20:37:08 idk in case of user management, busybox ps is the classic 2017-05-09 20:42:00 Hey - was wondering if someone could give me a quick hand with wireless troubles when installing Alpine 2017-05-09 20:43:42 Following the instructions and when I get to the step to set wlan0 up it errors out. Wiki page says it'll be due to a lack of drivers/firmware but it's just an Intel chip - would the drivers really not be present for that? 2017-05-09 20:44:25 how does it error out? 2017-05-09 20:46:19 Gimme 2s will grab the error message 2017-05-09 20:51:55 does this error ring a bell to someone (perl and locale interaction?) https://gist.github.com/truatpasteurdotfr/e20019cd06027775284e19779ed79d67 2017-05-09 21:00:55 TBB: weird, just rebooted the media and wireless tools seemed to install more this time and works fine. Thanks anyhow. 2017-05-09 21:46:23 Err, is it possible to install Alpine using the default media as a UEFI system? 2017-05-09 21:47:29 yes 2017-05-09 21:48:01 okay, let me take that back for a bit; I'm not entirely sure if you have all the required packages for it there 2017-05-09 21:48:43 I know gptfdisk is there and the partitioning and other disk tools are there; what I'm not sure of is whether you have an UEFI compatible boot loader in there (gummiboot is what I strongly prefer) 2017-05-09 21:50:23 I did notice that there's a guide for creating a UEFI USB boot media that uses gummiboot straight from apk - would it be a similar deal to following that guide? 2017-05-09 21:51:20 Magic seems to be in cp /usr/lib/gummiboot/gummibootx64.efi /mnt/EFI/Boot/bootx64.efi 2017-05-09 22:07:47 that, or "gummiboot install" or such 2017-05-09 22:17:52 TBB: Hm, found a handy install guide for installing gummiboot separately however it mentions that the system has to be booted from EFI media or a kernel with EFI stub support - d'you know if the latter is true/any way to check? 2017-05-09 22:20:35 both are true 2017-05-09 22:21:52 Alpine's kernel at least has that support in it, and the gummiboot package provides you with an EFI stub that you can combine with the kernel to make it a bootloader in itself 2017-05-09 22:24:14 but that comes with some other details you need to take care of, for example, how you pass boot options to such a kernel 2017-05-09 22:24:22 https://github.com/haraldh/mkrescue-uefi/blob/master/mkrescue-uefi.sh - that's a good script to read 2017-05-09 22:30:25 Crikey, seems an awful lot of effort... guess I'll take a look tomorrow. Thanks man. 2017-05-09 22:31:44 yw :) it's not really that complicated though, you just need what, four files, three of which already exist if you have gummiboot and kernel installed :) 2017-05-10 03:38:38 a few months ago I attempted to install alpine without success. I'd like to try again. the issue is my video card Nvidia g320, is only supported upto nvidia-340. I can't seem to nvidia driders on alpine what open source driver should i be using & is there a link to iluustrate the install process 2017-05-10 03:38:59 a few months ago I attempted to install alpine without success. I'd like to try again. the issue is my video card Nvidia g210, is only supported upto nvidia-340. I can't seem to nvidia driders on alpine what open source driver should i be using & is there a link to iluustrate the install process 2017-05-10 03:39:10 "nvidia210" 2017-05-10 04:55:55 <_ikke_> mystified: nouveau? 2017-05-10 05:07:33 thx 2017-05-10 06:03:18 hello) I would like to install p7zip=16.02-{{ latest_revision }}, how to do that? 2017-05-10 06:03:23 current version is 16.02-r1 2017-05-10 06:10:37 for now I use `apk add --upgrade --no-cache "p7zip<$LESS_THAN_P7ZIP_VERSION"`, and set LESS_THAN_P7ZIP_VERSION to 16.03 but will be good to see some ability to specify 16.02 and `latest_revision ` to get same result 2017-05-10 06:57:48 lorddaedra, if you want 16.02 then you need to install it from edge. 2017-05-10 06:58:50 oh latest stable has the same version 2017-05-10 06:59:10 then i dont understand the question. 2017-05-10 07:32:28 <_ikke_> the -rx just signifies the package revision 2017-05-10 07:32:54 <_ikke_> Only when somehting in the packaging is updated/chaged will it be increased 2017-05-10 07:54:27 clandmeter if I understand correctly, there are 2 versions of package: package version + local patch version (someone from Alpine team fix security hole, for example), I would like to install 16.02 with latest local patch revision (r1 for now, may be will r2 in future) 2017-05-10 07:55:30 for now I use p7zip<16.03 but not sure it's beautiful 2017-05-10 07:57:29 <_ikke_> lorddaedra: how are you installing it? are you specifing a version? 2017-05-10 07:58:58 yes, https://dpaste.de/MiFq 2017-05-10 08:03:17 (I place 16.02 tag on this image so I can run it as `docker run -v ... username/p7zip:16.02 ...`) 2017-05-10 08:10:31 <_ikke_> but wouldn't that depend on the availability of that version in the repositories? 2017-05-10 08:16:53 yes, we only have one version per branch 2017-05-10 08:18:00 version differences only happen per branch. when a new version is build the old pkg will be removed from mirror. 2017-05-10 09:33:37 can't send mail by alpine 2017-05-10 09:34:11 orig: what mail server do you have? 2017-05-10 09:35:43 microsoft live.com 2017-05-10 09:35:52 nah, on the alpine 2017-05-10 09:36:00 ?? 2017-05-10 09:36:04 Nevermind 2017-05-10 09:37:14 What app do you use? 2017-05-10 09:37:29 can receive mail but not send. 2017-05-10 09:37:35 Wait 2017-05-10 09:37:41 Do you use alpine mail client? 2017-05-10 09:38:02 yes, alpine 2017-05-10 09:38:03 Wrong channel. That's Alpine Linux, not a mail app. 2017-05-10 09:38:31 Or do you run alpine on alpine? :D 2017-05-10 09:38:32 - - ! 2017-05-10 09:38:44 - -! 2017-05-10 09:39:04 i am run alpine on debian 2017-05-10 09:39:10 sorry 2017-05-10 09:39:16 No problem 2017-05-10 09:39:41 thanks at all 2017-05-10 09:49:57 lol 2017-05-10 09:50:05 that was funny 2017-05-10 09:50:48 A common mistake I guess 2017-05-10 09:56:45 yes, very common :) 2017-05-10 14:47:17 Hello folks, I've been reading from multiple sources that alpine is now capable of zfs boot out of the box, but there's zero docs on it, and also no support using the alpine-setup family of tools, so out of the box is quite a liberal statement 2017-05-10 14:47:43 I don't mind doing some work and research for it, but I need some pointers to get started 2017-05-10 14:49:12 elegast, what are those multiple sources? 2017-05-10 14:49:13 Am I correct in understanding that the extlinux bootloader does *not* support loading zfs? 2017-05-10 14:49:31 Some blog articles/press releases 2017-05-10 14:49:44 Let me see if I can find them, clandmeter 2017-05-10 14:50:00 i dont think our bootloader supports zfs 2017-05-10 14:50:19 you need grub for that 2017-05-10 14:50:22 so you will need to have boot on a seperate partition. but thats a guess. 2017-05-10 14:50:23 https://www.phoronix.com/scan.php?page=news_item&px=Alpine-Linux-3.5-Released 2017-05-10 14:50:30 linuxtoday, reddit, etc 2017-05-10 14:50:50 its root, not boot 2017-05-10 14:51:24 Ah. Ok, going back to grub it is then 2017-05-10 14:51:41 I was kind of charmed by the lack of grub when I looked at alpine 2017-05-10 14:52:01 we have grub in aports, but dont support it in our setup scripts. 2017-05-10 14:53:35 clandmeter: I guess that ppc64le will have to adapt the setup scripts since will boot using grub, correct? 2017-05-10 14:53:57 gromero, i think so. 2017-05-10 14:54:06 im also using grub for aarch64 2017-05-10 14:54:13 but thats a custom install. 2017-05-10 14:54:29 clandmeter and royger, thanks for the help guys, and the quick response, that's enough to get me going! 2017-05-10 14:54:48 nice, good luck! 2017-05-10 14:55:07 clandmeter: i see, ah, didn't know aarch64 was using grub as well. ok 2017-05-10 14:55:08 Thanks! 2017-05-10 14:56:11 Oh. Just another question, I doubt I'll have any luck with this, is there anyone running pkgsrc on alpine? 2017-05-10 14:56:17 aarch64 does not support bios boot. only eufi and uboot afaik. 2017-05-10 14:56:23 Or would I be on my own there? 2017-05-10 15:01:47 There's not a whole lot of musl in netbsd, or any of the other unixen that use pkgsrc ofcourse, so I'm aware there wouldn't be much packages that work out of the box. It would mostly be tedious to bootstrap the whole thing, but not hard, so just wondering if anyone had already given that a shot :) 2017-05-10 15:22:30 elegast: i know the musl team back in the days patched many pkgsrc packages to work with musl 2017-05-10 15:22:42 boostrap should be very easy 2017-05-10 15:23:50 elegast: http://wiki.musl-libc.org/wiki/Pkgsrc_results 2017-05-10 15:27:22 odc: oh wow, I had no idea, that's quite an impressive list of working packages 2017-05-10 16:48:09 Hi everyone! Alpine 3.5.2 setup on an HP laptop using xfce4. Created sudo user before launching slim, and desktop launches, but having tried installation three times, most times there is no sound in youtube or when other videos play on Firefox; there was no sound on Audacious later on on two installations even with Settings/Audio/'SDL Output' (not sure whether the reason for the variations was the different ways of creating a sudo use 2017-05-10 16:48:09 r or some other variation in the installation process). System beeps are heard. Other symptoms: 1. Audio Mixer/'xfce4-mixer' applet launches saying "GStreamer was unable to detect any sound devices. Some sound system specific GStreamer packages may be missing. It may also be a permissions problem." 2. "sudo lspci | grep Audio" returns nothing. 3. "cat /etc/asound.conf" returns nothing. Currently installed packages include: alsa- 2017-05-10 16:48:09 utils alsaconf pulseaudio@testing aumix sox phonon-backend-gstreamer gst-plugins-bad0.10 gstreamer0.10 gstreamer0.10-tools gstreamer1 gstreamer1-doc gstreamer1-tools gstreamermm@testing ffmpeg fdk-aac@testing audacious-plugins vlc vlc-plugins-codec vlc-qt. However, I did not how to navigate aumix when following the instructions for aumix at https://wiki.alpinelinux.org/wiki/Alpine_Linux:FAQ#How_do_I_play_my_.ogg.2F.mp3_files.3F. Also 2017-05-10 16:48:14 tried listing audio cards in desired order under /etc/modprobe.d/alsa-base.conf: "options HD-Audio Generic index=1" and on next line (without quotes): "options HDA ATI HDMI index=0". Could it be a missing instruction, a permissions problem or a missing package? 2017-05-10 16:51:59 elegast: using pkgsrc is not recommended, it is better to use abuild and rebuild source packages (there is no way to tell apk that a file installed on the system is provided outside of apk) 2017-05-10 16:53:32 Hmm, the ability to install external files into APK's database would be very useful. 2017-05-10 16:57:51 kaniini: I agree mixing packaging tools is not the best idea, but I'm already maintaining a few pkgsrc packages on different platforms across different architectures, and by the looks of it, alpine can be made sufficiently bare bones to get away with it 2017-05-10 16:58:06 and the otherway around, making pkgsrc aware of libraries outside of it is far less problematic 2017-05-10 16:58:46 TemptorSent: yes 2017-05-10 16:59:04 TemptorSent: then pkgsrc could be used on alpine safely 2017-05-10 17:01:12 It depends on how well I can get pkgsrc to behave on alpine, if *most* of what I need from it works well out of the box, I'm willing to just rely solely on pkgsrc and use apk for a minimal alpine base install 2017-05-10 17:03:28 pgksrc is so non-intrusive it should be no problem 2017-05-10 17:03:47 i've worked on the aix and hp-ux ports long ago 2017-05-10 17:03:48 That said, I'm not unimpressed with apk and its ports system backing it, though, I am still learning at this point 2017-05-10 17:04:01 apk is the nicest package manager ever made 2017-05-10 17:05:43 darkfader: yes, I like how pkgsrc is completely mallable yet stays out of everyones way at the same time, and is designed to be cross platform oob 2017-05-10 17:06:22 one thing you'll need to keep in mind is that a basic alpine is a lot of busybox-ish parts 2017-05-10 17:06:46 so you might wanna install procps,coreutils,bash before bootstrapping 2017-05-10 17:07:51 mhm, yeah, I hadn't considered the busybox parts yet, just the musl dependencies 2017-05-10 17:08:25 it's no big deal 2017-05-10 17:08:34 but we had a posix discussion in here one of the last days 2017-05-10 17:08:58 and in some ways it's a lot worse than having a 1988 sh :) 2017-05-10 17:10:00 hehe. Yes I'm missing /usr/xpg4 ;) 2017-05-10 17:11:12 I'd rather be dependent on busybox then on bash though. 2017-05-10 17:11:55 Or having an sh that turns out to be just a symlink to bash, that's just ugly. 2017-05-10 17:30:31 someone keen to discuss colors? (color combination for shell/terminal) 2017-05-10 17:31:35 oh I like the vim-gotham and its contrib colorschemes 2017-05-10 17:32:06 though I'm not a fan of anything bat related 2017-05-10 17:36:33 kaniini: are you sure ecdsa is not already supported? I just built grub from aports/testing and the process signed with my key successfully, then it installed successfully using apk add? 2017-05-10 17:37:07 oops this was meant to go in #alpine-devel 2017-05-10 23:59:55 any volunteer who want help setup-xorg-base in a vm? or on real hw? 2017-05-11 00:08:15 what's up? 2017-05-11 00:10:05 ncopa: ^^ 2017-05-11 00:10:55 parazyd: i want test this: http://tpaste.us/djgx 2017-05-11 00:11:18 boot a clean 3.5 iso in a vm, setup without disk (or install to disk) 2017-05-11 00:11:24 then upgrade to edge 2017-05-11 00:11:43 grsec or vanilla? 2017-05-11 00:11:52 doesnt matter 2017-05-11 00:12:08 ack, will do vanilla since i have that iso on hand 2017-05-11 00:12:10 then: curl http://tpaste.us/djgx | patch /sbin/setup-xorg-base 2017-05-11 00:12:23 and run setup-xorg-base 2017-05-11 00:12:37 ok 2017-05-11 00:12:45 you may need install some window manager and fonts in addition 2017-05-11 00:12:53 sure 2017-05-11 00:13:04 and verify that xorg starts properly 2017-05-11 00:13:31 does setup-udev also start udev? 2017-05-11 00:13:38 yes 2017-05-11 00:15:08 gosh my network is lame 2017-05-11 00:15:48 sorry about that :-( 2017-05-11 00:16:05 im currently on a lame net too 2017-05-11 00:17:36 ncopa: your script won't pick up qemu btw, if that's of any matter 2017-05-11 00:17:48 what does qemu need? 2017-05-11 00:17:55 yes we want support qemu 2017-05-11 00:17:57 i don't know if it needs anything 2017-05-11 00:18:10 but it can emulate vmware with a command flag iirc 2017-05-11 00:18:17 i think it should work with xf86-video-modesetting 2017-05-11 00:18:37 supposedly everything works with modesetting these days 2017-05-11 00:18:39 yes, would be nice to test it with the different qemu vga flags 2017-05-11 00:18:49 (i've had trouble getting it to work with grsec though) 2017-05-11 00:18:53 Shiz: btw, tcc actually works better than i initially thought. the va_list issue, which i noticed while testing st, was that its config.mk was adding a -I /usr/include which overridden tcc's built in includes, which have stdarg.h . so if i remove this from st's config.mk, then tcc builds st fine, and it runs fine too 2017-05-11 00:19:36 qemu works with modesetting 2017-05-11 00:19:37 ncopa: -vga [std|cirrus|vmware|qxl|xenfb|tcx|cg3|virtio|none] 2017-05-11 00:19:49 i think 2017-05-11 00:19:57 we do detect the emulated vmware card :P 2017-05-11 00:20:16 would be nice to test them all 2017-05-11 00:20:31 there's still an issue if stdio.h is included before stdarg.h though, but st doesn't do that anyway. 2017-05-11 00:20:41 i can do that while waiting for the apks to dl 2017-05-11 00:27:03 parazyd im also interested in one or two default font packages 2017-05-11 00:27:10 freefont might be one option 2017-05-11 00:27:26 that liberation is pretty good 2017-05-11 00:27:59 https://fedorahosted.org/liberation-fonts (liberation-fonts in portage) 2017-05-11 00:28:24 its smaller than freefont too 2017-05-11 00:28:43 im looking for a minimal font that makes minimal usable xorg 2017-05-11 00:28:58 i like noto a lot. especially its sans 2017-05-11 00:29:41 noto is 16mb 2017-05-11 00:29:57 liberation gets pulled in by default in gentoo i believe 2017-05-11 00:30:03 get just western. the full noto covers the full unicode 2017-05-11 00:30:46 (that's their thing - to cover all the possible glyphs) 2017-05-11 00:31:28 i find the western noto sans very pleasing as default 2017-05-11 00:31:59 avih you are not the only one wanting noto as default 2017-05-11 00:32:38 i didn't say i want it :) you wanted something, i thought for yourself. but i did set it as my default. 2017-05-11 00:34:08 (now i'm trying to figure out why mpv's build (waf) doesn't like tcc as a compiler) 2017-05-11 00:35:16 ncopa: qemus: http://sprunge.us/fNKT 2017-05-11 00:35:25 (upgrading to edge now) 2017-05-11 00:37:32 ncopa: patch fails? 2017-05-11 00:37:40 hum 2017-05-11 00:38:01 this is what i got: http://sprunge.us/bMCG 2017-05-11 00:38:48 Hunk 1 FAILED 3/3. 2017-05-11 00:38:53 wget https://dev.alpinelinux.org/~ncopa/setup-xorg-base 2017-05-11 00:39:23 heh 2017-05-11 00:40:02 running... 2017-05-11 00:40:03 i think we maybe should install modesetting regardless if there is /dev/dri/card* 2017-05-11 00:40:09 ncopa: note, however, that some gnu apps don't play nice with noto mono. for some reason then render bold wider a bit, which accumulates and makes mono not really mono at the end of the day. liberation and many others don't have this issue. i think it's a gnu bug, but that probably doesn'tt matter much where the bug is 2017-05-11 00:40:36 s/gnu/gtk/ 2017-05-11 00:40:51 avih: im looking for minimal font that is usable 2017-05-11 00:40:56 noto is too big 2017-05-11 00:41:00 k 2017-05-11 00:41:04 noto is like 16-17MB 2017-05-11 00:41:09 liberation is 4-5MB 2017-05-11 00:41:18 and you want it to cover the whole unicode? 2017-05-11 00:41:33 not necesarily 2017-05-11 00:41:58 something thats usable for most common setups 2017-05-11 00:42:06 so 16M is just the thing which alpine installs. it could, if you wanted, split it to sub packages 2017-05-11 00:42:24 i think the western is les than 1M 2017-05-11 00:42:33 is it usable? 2017-05-11 00:42:44 there is some font-misc something too 2017-05-11 00:43:01 but so ugly that is more or less useless 2017-05-11 00:43:28 ncopa: https://pub.parazyd.cf/tmp/screenshots/screenshot22.png 2017-05-11 00:43:36 i can't input or move the mouse 2017-05-11 00:43:48 (setup-xorg-base went well i'd say) 2017-05-11 00:45:06 no mouse? 2017-05-11 00:45:06 ncopa: how soon do you need/want to decide? i can do some test on what works minimally, but not this week 2017-05-11 00:45:18 ncopa: nope 2017-05-11 00:45:20 avhi a week or so 2017-05-11 00:45:38 parazyd: does it help if you install xf86-input-evdev? 2017-05-11 00:45:40 can't even switch to a tty 2017-05-11 00:45:49 so keyboard does not work either? 2017-05-11 00:45:54 parazyd: try sysrq-r 2017-05-11 00:45:58 then switch to a tty 2017-05-11 00:46:03 Shiz: it's a vm 2017-05-11 00:46:04 ncopa: k, i'll let you know how far i got before next week 2017-05-11 00:46:15 avih: thanks! 2017-05-11 00:46:49 parazyd this is exactly what i wanted to test 2017-05-11 00:46:55 :) 2017-05-11 00:46:57 i prefer it after/if i get results, but.. well.. free appreciation, i'll take it ;) 2017-05-11 00:47:04 i believe evdev _would_ help 2017-05-11 00:47:16 so xf86-input-libinput wasnt enough 2017-05-11 00:47:27 at least on gentoo i don't have xf86-input-{keyboard,mouse} 2017-05-11 00:47:31 evdev works 2017-05-11 00:47:36 (musl based gentoo) 2017-05-11 00:48:19 ok i'll redo with -vga vmware and try to patch in evdev 2017-05-11 00:48:58 :) 2017-05-11 00:48:59 ncopa: but liberation would be a good falllback/default regardless 2017-05-11 00:49:25 (i'll still check it during the weekend though and let you know) 2017-05-11 00:53:29 avih yes, i think liberation is the best fallback/default so far 2017-05-11 00:53:52 parazyd i wonder why libinput didnt work? 2017-05-11 00:53:57 no idea 2017-05-11 00:54:13 i kinda expected it to work on "everything" 2017-05-11 00:54:31 that's what you expect out of evdev usually 2017-05-11 00:54:45 (i also have no libinput on gentoo) 2017-05-11 00:55:05 i thought libinput was next gen, evdev replacement 2017-05-11 00:55:09 but i might be wrong 2017-05-11 00:55:22 i suppose its a good idea to always install evdev as fallback 2017-05-11 00:55:37 avoid freedesktop like the plague 2017-05-11 00:56:50 :) 2017-05-11 00:57:07 i cannot help it but i love this community :) 2017-05-11 00:57:14 <3 2017-05-11 00:57:36 it's 3AM and i'm just sitting here, installing xorgs 2017-05-11 00:57:43 what can you say :D 2017-05-11 00:59:15 sorry about that, feel free to continue tm 2017-05-11 00:59:29 i think we have to add evdev unconditionally 2017-05-11 01:00:39 nah i'll try eudev 2017-05-11 01:00:51 currently apk decided to download the latest firmware 2017-05-11 01:00:58 so that's keeping me 2017-05-11 01:01:10 try enable apk cache 2017-05-11 01:01:21 ln -s /var/cache/apk /etc/apk/cache 2017-05-11 01:01:28 it's nearly done 2017-05-11 01:01:31 should speed up things on re-installs 2017-05-11 01:01:31 but yeah 2017-05-11 01:01:40 should've done that 2017-05-11 01:02:14 other option is a caching reverse proxy in your lan that you use as your repo 2017-05-11 01:04:24 so modesetting video driver should work with most cards? 2017-05-11 01:04:39 can we drop the -vesa driver then? 2017-05-11 01:04:55 i don't think the pi1 is going to like it :D maybe when i get a new lime2 (which i'm planning to use for a DIY NAS) 2017-05-11 01:05:01 yep, modesetting is supposed to work 2017-05-11 01:05:11 although on grsec it didn't give me permissions for /dev/dri 2017-05-11 01:05:19 going back to intel solved it 2017-05-11 01:05:33 in your case, i guess modesetting is fine 2017-05-11 01:05:46 you need to be in the "video" group 2017-05-11 01:05:55 i was, it's a deeper problem 2017-05-11 01:06:02 ok 2017-05-11 01:06:43 it might be that it needs access /sys something? 2017-05-11 01:07:03 we have sysfs restrictions enabled in our hardened (aka grsec/unofficial) kernel 2017-05-11 01:07:27 who knows... i might have some time to try it again tomorrow 2017-05-11 01:07:41 could give it a shot; i also have /sys restrictions 2017-05-11 01:09:39 ncopa: are you planning to use minipli's 4.9 backports? 2017-05-11 01:10:22 i sort of am using it already 2017-05-11 01:10:30 ah cool 2017-05-11 01:10:34 in fact, i did the merge myself 2017-05-11 01:10:40 then did a diff with minipli 2017-05-11 01:10:40 he's doing a good job 2017-05-11 01:10:48 apparently 2017-05-11 01:10:58 he did slightly better than me 2017-05-11 01:11:14 so i cierripucked 2 of his commits 2017-05-11 01:11:21 cherry-picked* 2017-05-11 01:11:41 there is a logo bitmap included in the patch 2017-05-11 01:12:07 grsec patch has a different logo 2017-05-11 01:12:11 which we cannot use 2017-05-11 01:12:14 yes 2017-05-11 01:12:29 i dont think we have it enable din our kernel config 2017-05-11 01:12:36 but its good to clean that up regardles 2017-05-11 01:12:40 same with localversion 2017-05-11 01:13:08 other than that, there was no diff 2017-05-11 01:13:18 damn still no mouse in qemu 2017-05-11 01:13:20 or keyboard 2017-05-11 01:13:26 with evdev? 2017-05-11 01:13:28 yeah 2017-05-11 01:13:34 i can try it tomorrow on bare metal 2017-05-11 01:13:39 nothing at hand now 2017-05-11 01:13:46 don't want to turn this laptop off :D 2017-05-11 01:14:07 ok 2017-05-11 01:14:17 thank you very much so far for you help 2017-05-11 01:14:19 appreciate 2017-05-11 01:14:22 np 2017-05-11 01:14:37 hmm you don't create a Xorg.log? 2017-05-11 01:15:22 ok 2017-05-11 01:15:24 weird 2017-05-11 01:15:27 i restarted the vm 2017-05-11 01:15:29 it works now :D 2017-05-11 01:15:40 oh 2017-05-11 01:15:47 might be the udev thingy 2017-05-11 01:15:52 interesting 2017-05-11 01:16:10 we should probably make it re-trigger the uevents 2017-05-11 01:16:14 https://pub.parazyd.cf/tmp/screenshots/screenshot23.png 2017-05-11 01:16:26 could be 2017-05-11 01:16:43 nice! 2017-05-11 01:16:53 that might also be the reason why libinput didnt work 2017-05-11 01:17:00 let's check! 2017-05-11 01:17:51 hmm 2017-05-11 01:18:05 rc-service udev-trigger start 2017-05-11 01:18:40 and rc-service udev-postmount 2017-05-11 01:18:42 i apk del'd xf86-input-evdev, and apk add xf86-input-libinput: it works; reboot: works 2017-05-11 01:18:55 ok 2017-05-11 01:19:05 its likely the udev-trigger thats needed 2017-05-11 01:19:08 eudev might indeed be the reason 2017-05-11 01:19:10 yup 2017-05-11 01:19:26 so we try without evdev then 2017-05-11 01:19:33 do look into why there are no xorg logs 2017-05-11 01:19:38 in the default setup 2017-05-11 01:20:00 yep 2017-05-11 01:20:09 http://sprunge.us/bMCG 2017-05-11 01:20:17 see if this is helpful, probably not 2017-05-11 01:20:20 oh wait 2017-05-11 01:20:22 no 2017-05-11 01:20:27 this: http://sprunge.us/fNKT 2017-05-11 01:20:40 its handled in setup-udev nowdays 2017-05-11 01:21:06 this is why i started with the setup-xorg-base today in the first place 2017-05-11 01:21:19 i see 2017-05-11 01:21:52 cool! glad it worked out 2017-05-11 01:23:47 http://tpaste.us/40rJ 2017-05-11 01:24:50 :) 2017-05-11 01:25:25 need verify the order 2017-05-11 01:25:31 might also need start udev-settle 2017-05-11 01:25:41 to wait for the events to finish 2017-05-11 01:27:55 hah now you made me fiddle again 2017-05-11 01:28:01 going to try libinput on gentoo :p 2017-05-11 01:28:33 :) 2017-05-11 01:34:30 how do you start dwm? 2017-05-11 01:36:08 printf -- "#!/bin/sh\nst&\nexec dwm" > ~/.xinirc ; chmod +x ~/.xinitrc; startx 2017-05-11 01:36:32 nice! thanks! 2017-05-11 01:37:36 heh libinput works! 2017-05-11 01:37:59 thats a surprise :) 2017-05-11 01:38:21 i need libinput on my macbook to get reverse scrolling working in xfce 2017-05-11 01:39:09 understandable 2017-05-11 01:50:46 gonna sleep. thank you parazyd 2017-05-11 01:50:53 yw, good night ;) 2017-05-11 06:24:31 ping 2017-05-11 06:25:27 pong 2017-05-11 06:25:32 :) 2017-05-11 07:11:02 there was an update to vte recently on arch which supposedly fixes some bracketed paste mode issue, and now I can no longer paste in an alpine tmux instance; anyone any ideas? 2017-05-11 07:15:20 nevermind, it's an arch related issue it seems 2017-05-11 07:15:49 then a second question, does alpine's screen not do 256 colors or am I doing something wrong? 2017-05-11 08:53:07 I'm having issues debugging wkhtmltopdf segfaulting 2017-05-11 08:53:45 https://pastebin.com/RVGKDvL3 2017-05-11 08:54:47 Does anyone have a clue what I could try more? I'm using an ancient version of wkhtmltopdf (updating to a newer version is not an option) 2017-05-11 08:55:00 https://downloads.wkhtmltopdf.org/obsolete/linux/wkhtmltopdf-0.10.0_rc2-static-amd64.tar.bz2 2017-05-11 08:55:59 you can't trust glibc statically linked binaries 2017-05-11 08:56:31 considering it's accessing the web, it likely tried to load a dynamic NSS library 2017-05-11 08:56:40 because glibc static linked binaries tend to do that 2017-05-11 08:56:47 upon failure, it likely crashed 2017-05-11 08:57:05 best advice i can give you is to compile it yourself 2017-05-11 08:58:13 just checked 2017-05-11 08:58:36 when just running -V it also segfaults 2017-05-11 08:58:44 I'll try to compile it myself idd 2017-05-11 08:58:46 tnx! 2017-05-11 08:59:09 https://github.com/wkhtmltopdf/wkhtmltopdf/archive/0.10.0_rc2.tar.gz 2017-05-11 08:59:16 i think this is the specific version you're looking for 2017-05-11 08:59:24 (be aware that it apparently has multiple security issues...) 2017-05-11 09:00:40 yeah security wise it's a nightmare 2017-05-11 09:53:45 Hello... 2017-05-11 09:58:41 hello danci1973 2017-05-11 10:01:49 Can I 'apk upgrade' a single package? 2017-05-11 10:03:28 Apparently libreswan 3.18 that's in v3.5/community repo has a bug regarding stopping pluto daemon, so I'd like to try the 3.20 version from 'edge/community'... 2017-05-11 10:07:02 apk add -u 2017-05-11 10:08:49 don't do it like that 2017-05-11 10:09:18 add the edge repo with a tag in /etc/apk/repositories and do apk add libreswan@mytag 2017-05-11 10:09:26 but mixing 3.5 and edge is not the best idea 2017-05-11 10:13:58 danci1973, bug in stopping, does that mean rc script? 2017-05-11 10:15:16 clandmeter: Pluto should exit / terminate after receiving signal 15 - while it does clean-up connections, the process doesn't exit properly and just hangs there. 2017-05-11 10:15:36 clandmeter: This happens with rc script and with 'kill -15 PID' ... 2017-05-11 10:15:50 ah ok, so its really a daemon error. 2017-05-11 10:16:17 And over in #swan I was told that this is a ug that has been fixed in later versions... 2017-05-11 10:17:18 as Shiz suggested, its not good to mix repos, but you can try to pin it and try. 2017-05-11 10:18:13 danci1973: if you can point me to a commit that fixes i can see if i can backport it to 3.5 2017-05-11 10:18:52 that would be even beter. 2017-05-11 10:19:09 Shiz: I'll try. 2017-05-11 10:19:37 danci1973, or use the 3.6 repo's already :) 2017-05-11 10:20:52 I didn't know there is 3.6 already.. :) https://alpinelinux.org/ doesn't mention it... 2017-05-11 10:21:41 we're in the middle of getting it ready for release 2017-05-11 10:21:53 If I change 3.5 to 3.6 in my 'repositories' and then run 'apk upgrade' - should I be fine? 2017-05-11 10:23:34 you need to add --available 2017-05-11 10:24:45 http://www.openwall.com/lists/kernel-hardening/2017/05/11/2 2017-05-11 10:25:10 danci1973, we are currently on rc1 i believe. so it should be fairly safe (no promises). 2017-05-11 10:25:11 Since this is a RAM based install, anything else I need to do after that? Kernel / modloop ? 2017-05-11 10:27:35 is rc1 released yet? 2017-05-11 10:29:44 no not yet, but i remember ncopa said he wants to tag it or get it out. 2017-05-11 12:41:37 rc1 is not out yes 2017-05-11 12:41:50 seems like there are more s390x packages that needs fixing 2017-05-11 12:43:00 alias__ i think we might have a wkhtmltopdf package 2017-05-11 12:43:14 we do, but they specifically need an old version for some reason 2017-05-11 12:43:45 ok 2017-05-11 13:05:19 Hi there, is there a workaround on this? https://bugs.alpinelinux.org/issues/7273 2017-05-11 13:05:29 I've tried --allow-untrusted but it doens't work 2017-05-11 13:05:30 ncopa: is xorg running as root intentional in alpine? 2017-05-11 13:06:18 alex88: one of the mirrors is having issues 2017-05-11 13:06:25 please do not use --allow-untrusted as a workaround :P 2017-05-11 13:06:34 alex88: try changing your mirror to nl.alpinelinux.org 2017-05-11 13:06:43 Shiz: thank you :) will try that 2017-05-11 13:06:57 with docker, something like sed -i 's/dl-cdn/nl/g' /etc/apk/repositories will work 2017-05-11 13:08:38 I was going to do a cat << EOF > /etc/apk/repositories 2017-05-11 13:08:49 but thank you for giving the oneliner :D anyway, that works, thank a lot! 2017-05-11 13:13:58 dalias: so tcc now works with musl. i still have an issue though if stdio.h (possibly others too) come before stdarg.h in the program. tcc has its own prioritized include dirs with stdarg.h. i'm trying to figure out musl's expectations with regards to this. i'm looking at bits/alltypes.h, does musl expects the compiler to have an intrinistic define of __DEFINED_va_list or __DEFINED___isoc_va_list ? 2017-05-11 13:14:40 (if stdarg.h is included first then va_list et al work fine with tcc+musl) 2017-05-11 13:15:02 musl does not support compiler-provided std headers 2017-05-11 13:15:22 dalias: even stdarg? 2017-05-11 13:15:25 the libc headers must come first in include path 2017-05-11 13:15:28 or stdint? 2017-05-11 13:15:30 :p 2017-05-11 13:15:33 yes 2017-05-11 13:15:33 what's the relation between the compiler's va_list and musl? 2017-05-11 13:15:37 i thought some stuff came from the compiler 2017-05-11 13:15:42 no, that's a glibcism 2017-05-11 13:15:49 bsd doesn't work that way and musl doesn't either 2017-05-11 13:16:17 dalias: so how should the compiler expose it such that it can be used correctly? 2017-05-11 13:16:43 it should provide the right primitives 2017-05-11 13:16:45 by providing the intrinsics (__builtin_va*) 2017-05-11 13:16:50 musl relies on __builtin_va_list and the likes 2017-05-11 13:17:04 gotcha. 2017-05-11 13:17:07 or you could use a silently pre-included header to define them as macros 2017-05-11 13:17:16 parazyd: right now, i believe so 2017-05-11 13:17:18 but that's a hack 2017-05-11 13:17:26 since there has simply not been resources/work on making it run not as root 2017-05-11 13:17:29 the compiler itself could just predefine them as macros if it doesn't want real intrinsics 2017-05-11 13:17:39 but (at least I would) very much welcome efforts towards this 2017-05-11 13:17:41 :) 2017-05-11 13:17:42 dalias: you mean instead of using stdarg.h in a prioritized dir? 2017-05-11 13:17:53 yes 2017-05-11 13:17:58 k, thx 2017-05-11 14:11:38 parazyd: xorg as root is sort of intentional. I havent get to fixing it to work as non-root yet 2017-05-11 14:14:42 does screen on alpine support 256 colors? 2017-05-11 14:19:53 Bun i would believe so. what is required for 256 color support? 2017-05-11 14:20:06 how can i test it? 2017-05-11 14:22:45 with term screen-256color in my .screenrc and this script: https://askubuntu.com/questions/821157/print-a-256-color-test-pattern-in-the-terminal it does not work 2017-05-11 14:25:28 there's a config option --enable-colors256 which the APKBUILD does not use 2017-05-11 14:25:35 I don't know if this implies any additional dependencies 2017-05-11 14:27:00 Bun looks like you are right 2017-05-11 14:27:06 tmux has 256 color support 2017-05-11 14:27:14 i'll fix it 2017-05-11 14:27:20 great, thanks 2017-05-11 14:28:03 yep it's not autodetected 2017-05-11 14:28:05 also 2017-05-11 14:28:07 AC_ARG_ENABLE(telnet, [ --enable-telnet enable builtin telnet]) 2017-05-11 14:28:09 what the fuck 2017-05-11 14:28:29 ha 2017-05-11 14:29:16 wow that's actually a thing 2017-05-11 14:29:26 it also apparently has PAM support 2017-05-11 14:29:30 don't even want to know 2017-05-11 14:29:52 locking maybe? 2017-05-11 14:30:24 i lied, i do want to know 2017-05-11 14:30:26 it's locking, yeah 2017-05-11 14:30:35 /* -- original copyright by Luigi Cannelloni 1985 (luigi@faui70.UUCP) -- */ 2017-05-11 14:30:39 hot damn that email 2017-05-11 14:39:08 dalias: i'm seeing a warning when using tcc which does not show when using gcc, and i'm not sure who's at fault. the files which i'm building don't define/refer to this symbol directly (minor spam): 2017-05-11 14:39:10 In file included from audio/out/ao_oss.c:46: 2017-05-11 14:39:10 In file included from /usr/include/sys/soundcard.h:1: 2017-05-11 14:39:10 In file included from /usr/include/linux/soundcard.h:40: 2017-05-11 14:39:10 In file included from /usr/include/linux/ioctl.h:4: 2017-05-11 14:39:10 In file included from /usr/include/asm/ioctl.h:1: 2017-05-11 14:39:11 /usr/include/asm-generic/ioctl.h:77: warning: _IOWR redefined 2017-05-11 14:40:02 the same warning happens for _IOC, _IO, _IOR, _IOW and _IOWR 2017-05-11 14:42:56 /usr/include/sys/soundcard.h is a single line: #include 2017-05-11 14:48:30 dalias: maybe imcompatible guards somehow? linux/ioctl.h guards with _LINUX_IOCTL_H . i couldn't figure out yet where the prior definition comes from 2017-05-11 14:49:04 (please use a pastebin) 2017-05-11 14:49:26 yeah, in general i should, possibly here too, though i'm done with those :) 2017-05-11 14:49:26 where does it mention the previous definition being? 2017-05-11 14:50:02 Shiz: it doesn't say 2017-05-11 14:50:18 right, then it's the same file 2017-05-11 14:50:25 and it also doesn't happen with gcc 2017-05-11 14:50:53 try just preprocessing the file 2017-05-11 14:50:58 if tcc has an option for that 2017-05-11 14:51:10 and paste the output of that somewhere 2017-05-11 14:51:12 it does have -E, but i'm not there yet :) 2017-05-11 14:51:50 (i need to figure out the exact invocation of the compile for that) 2017-05-11 14:52:58 fwiw, mpv builds fully with tcc, after very(!) little tinkering with mpv. and it also works fine. audio and opengl and all. 2017-05-11 14:53:06 on alpine, that is. 2017-05-11 14:53:32 these _IO* warnings are the only issue left 2017-05-11 15:04:19 (though mpv doesn'tt built with its own build system - waf - which doesn't support tcc. i used unofficial configure and Makefile which mpv's maintainer still uses himself) 2017-05-11 15:17:50 Hi guys, I'm getting "BAD signature" errors on a couple of packages. ERROR: libuuid-2.28.2-r1, libblkid-2.28.2-r1: BAD signature 2017-05-11 15:18:05 this started sometime early today. 2017-05-11 15:19:02 This is on alpine:edge with "@testing http://dl-cdn.alpinelinux.org/alpine/edge/testing" 2017-05-11 15:19:49 hi 2017-05-11 15:19:58 did you report that also earlier? 2017-05-11 15:20:13 no. Someone else perhaps. 2017-05-11 15:21:12 Unode, which arch? 2017-05-11 15:21:36 This is using docker with the alpine:edge image. 2017-05-11 15:21:42 x86_64 2017-05-11 15:22:29 clandmeter: http://dpaste.com/2A8W590 2017-05-11 15:22:31 if it helps 2017-05-11 15:22:56 those were the revisions that failed by the way. 2017-05-11 15:25:43 Unode, what if you use another mirror? 2017-05-11 15:26:52 Shouldn't they all be equivalent? 2017-05-11 15:27:34 in principle yes 2017-05-11 15:27:42 but its a cdn 2017-05-11 15:27:50 it does caching 2017-05-11 15:28:17 so what you are saying is that it's likely fixed already but the bad version is still cached? 2017-05-11 15:29:36 i fisrst would need to know if another mirror works for you 2017-05-11 15:30:45 any suggestion? 2017-05-11 15:32:42 try cz.alpinelinux.org 2017-05-11 15:33:31 that worked 2017-05-11 15:34:08 it's actually the main channel that has issues. 2017-05-11 15:36:22 and interesting. They are both v3.5.0-4813-g5fafd50b76 but http://dl-cdn.alpinelinux.org/alpine/edge/main fails 2017-05-11 15:59:48 dl-cdn is still having issues yes :( 2017-05-11 16:05:52 which package? 2017-05-11 16:05:58 which arch 2017-05-11 16:06:20 ncopa: mines are mentioned above 2017-05-11 16:06:43 libuuid 2017-05-11 16:07:42 # apk verify libuuid-2.28.2-r1.apk 2017-05-11 16:07:42 libuuid-2.28.2-r1.apk: 0 - OK 2017-05-11 16:10:37 ncopa, how do you know you are using the same cache? 2017-05-11 16:11:57 libuuid is no longer failing. libblkid still fails 2017-05-11 16:12:11 whatever you did, it helped. 2017-05-11 16:23:49 i can not be sure i am using the same cache 2017-05-11 16:24:00 i checked the package on dl-4.a.o 2017-05-11 16:24:17 which is the backend for dl-cdn 2017-05-11 16:29:35 Thanks ncopa, purging the dl-cdn worked once I had the correct URL 2017-05-11 16:30:32 with: curl -X PURGE http://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/libblkid-2.28.2-r1.apk 2017-05-11 16:31:26 that seems odd 2017-05-11 16:36:30 sounds like corrupt cache 2017-05-11 16:50:10 Hi. If I had an idea to use alpine as Xen-dom0 on my laptop using X forwarding over ssh to test different DomUs. Will it be a security risk? Is there any support for cpu scaling and/or S3 suspend in the host? 2017-05-11 17:01:34 ncopa: i'm seeing dl-cdn error for apk updates: https://travis-ci.org/PonyvilleFM/aura#L419 2017-05-11 17:01:58 Xe yes, i have seen it too 2017-05-11 17:02:22 +1 just making sure 2017-05-11 17:02:29 i get full panic messages from everywhere atm 2017-05-11 17:02:30 :-/ 2017-05-11 17:05:54 we could set up an anycast mirror @ work to replace dl-cdn if interested 2017-05-11 17:08:45 ncopa: if there's anything I can do on my end to help, lemme know 2017-05-11 17:08:58 no panic over here 2017-05-11 17:11:01 kaniini: did you mean bunnycast mirror :3 2017-05-11 17:13:11 hello 2017-05-11 17:14:37 hi jmmarron 2017-05-11 17:14:52 is the alpine cdn down? 2017-05-11 17:15:18 yeah there's known issues with it, if you need to install stuff use another mirror of the time being, they're trying to restore it 2017-05-11 17:15:37 any estimation on when this will be solved? 2017-05-11 17:15:51 when it's fixed and no sooner 2017-05-11 17:16:16 jmmarron: http://dl-3.alpinelinux.org/alpine/v3.5/main works in the time being 2017-05-11 17:16:23 or # setup-apkrepos 2017-05-11 17:17:45 thanks 2017-05-11 17:17:51 no problem 2017-05-11 17:24:47 in alpine 3.4, i have a ruby script complaining that it cannot verify a server's ssl cert, but openssl seems to verify fine. are they using different certificates? 2017-05-11 17:27:12 flazz: paste error messages? 2017-05-11 17:30:44 Xe: https://pastebin.com/cRq54kUD 2017-05-11 17:30:54 hello! I am getting timeouts (503) when trying to fetch the APKINDEX from (http://dl-cdn.alpinelinux.org/alpine/v3.4/community) 2017-05-11 17:31:04 flazz: did you install `ca-certificates`? 2017-05-11 17:31:20 bwagner_: Alpine CDN is down, known issue, no ETA for fix, use alternate mirrors in the meantime 2017-05-11 17:31:28 is this a known issue and are there any official mirrors I can use? (I couldn't find any on the wiki or the site) 2017-05-11 17:31:38 Xe: yes 2017-05-11 17:31:46 http://dl-3.alpinelinux.org/alpine/v/ 2017-05-11 17:32:09 Xe: thank you! 2017-05-11 17:32:34 how does one change from dl-cdn to dl-3 ? 2017-05-11 17:32:48 flazz: /etc/apk/repositories 2017-05-11 17:34:38 i installed rxvt-unicode-patched and looks so much worse than the rxvr-unicode package, why? 2017-05-11 17:34:44 wrong channel sorry xD 2017-05-11 17:35:19 is it the font letter spacing issue? 2017-05-11 17:35:49 you need something like https://github.com/Xe/dotfiles/blob/master/.Xdefaults#L20 to fix that fwiw felixsanz 2017-05-11 17:37:05 Xe, if you redirect everyone to dl-3 it'll be down too ;) 2017-05-11 17:37:37 xentec: the mirror was chosen by fair dice roll 2017-05-11 17:38:46 Xe: xentec: that mirror is unavailable too and now the wiki is down :o 2017-05-11 17:39:08 bwagner_: acquire more alcohol, it's gonna be a long day 2017-05-11 17:39:09 Xe: Told you so! :D 2017-05-11 17:40:25 Xe: yes, hanging on tightly :) 2017-05-11 17:41:23 Xe: got my cachaca ready 2017-05-11 17:41:52 the heck guys. today the mirrors are having a lot of issues. http://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz is now 503 timeout and then 503 Backend is unhealthy 2017-05-11 17:42:52 Unode: Alpine CDN is down, known issue, no ETA for fix, use alternate mirrors in the meantime 2017-05-11 17:42:59 and now seems back to normal again. 2017-05-11 17:43:01 computers break, patience 2017-05-11 17:44:19 Xe: yes not complaining. Just hinting that there might be some hardware issue behind it. Thanks for looking into it. 2017-05-11 17:44:24 Xe: but thats for the patched version? 2017-05-11 17:44:46 it's a fastly issue 2017-05-11 17:44:51 mm, it looks even worse 2017-05-11 17:44:52 for whoever is having trouble, I managed to make it work with this mirror (from a brazilian university): http://ns2.c3sl.ufpr.br/latest-stable/main/ 2017-05-11 17:44:53 Is there any way to configure apk to automatically fallback to another mirror if one fails for some reason? 2017-05-11 17:45:35 Unode: unfortunately not, but i will work on it 2017-05-11 17:46:35 kaniini_: that would be great and improve reliability. Like possibly many users out there I use alpine for continuous integration and today was a sad day with a lot of red :) 2017-05-11 17:47:08 Unode: we are probably going to drop fastly for the CDN mirror. i can set up an anycast mirror to replace it. 2017-05-11 17:47:24 ACTION literally has people working on the specifics of that right now 2017-05-11 17:47:47 thanks! 2017-05-11 17:47:57 kaniini_: can you make it use HTTPS too? 2017-05-11 17:48:01 fuck no 2017-05-11 17:48:06 :D 2017-05-11 17:48:08 go burn somebody else's CPU 2017-05-11 17:48:29 everything is signed, there is literally no point in using TLS on top of that except to encrypt it 2017-05-11 17:48:55 fair point 2017-05-11 17:49:43 the https meme is strong nowadays.. 2017-05-11 17:50:10 yes 2017-05-11 17:50:18 TLS certificates are free 2017-05-11 17:50:23 because of lets encrypt 2017-05-11 17:50:44 but if you consider how busy an alpine mirror is (especially dl-cdn), TLS is insane :P 2017-05-11 17:51:06 about how much traffic is done monthly 2017-05-11 17:51:09 just curious 2017-05-11 17:51:31 i have no idea honestly, but literally whenever fastly screws up, people show up literally in seconds 2017-05-11 17:51:34 soooo 2017-05-11 17:51:39 i am assuming it is pretty busy ;P 2017-05-11 17:51:42 yeah thats good 2017-05-11 17:52:02 I used to run a mirror netowrk and we did around 2T a month which wasnt bad 2017-05-11 17:52:10 the load on decent cpus isnt that bad anymore. 2017-05-11 17:52:12 but we didnt have the community that you guys 2017-05-11 17:52:28 but it's still load, IcePic 2017-05-11 17:52:40 most of the time the boxes were doing close to 50-100Mpbs at times but it wasnt doing too much 2017-05-11 17:52:48 but thats probably small numbers compared to you guys 2017-05-11 17:53:22 IcePic: it's unnecessary load. TLS does not protect you any more than the signatures already 2017-05-11 17:53:47 Many people seem to want https on sites which don't need it. Why would anyone need encryption on a public site with no login possibility? 2017-05-11 17:53:50 I'm not trying to argue that TLS will give you much, just saying that modern CPUs handle it rather well 2017-05-11 17:55:26 dl-cdn should be back now 2017-05-11 17:55:31 our backupserver at work only accept TLS'ed connections and it does around 100MB/s per core (ie, per stream sent from clients) 2017-05-11 17:55:32 vifino: to prevent people from tampering with the contents of the site 2017-05-11 17:55:55 i've fucked with people's unencrypted sites and given them quite the scare, along with more malicious things. 2017-05-11 17:56:03 so as long as noone wants single streams faster than normal gig link, you're fine. =) 2017-05-11 17:56:07 including sites which were completely public 2017-05-11 17:56:13 static webpages 2017-05-11 17:56:18 sure 2017-05-11 17:56:20 however 2017-05-11 17:56:27 BUT, as long as the stuff you get is checksummed and validated otherwise, the transport doesnt matter 2017-05-11 17:56:31 that isn't relevant here as the packages and indices are *signed* 2017-05-11 17:56:52 never been able to do so on pages which used tls (excepting badly broken tls, i imagine it'd be easy to do that) 2017-05-11 17:57:01 kaniini_: oh is this about downloading packages over tls? 2017-05-11 17:57:06 yes 2017-05-11 17:57:08 yes 2017-05-11 17:57:11 yes 2017-05-11 17:57:14 yes 2017-05-11 17:57:15 does the package manager do anything before verification? 2017-05-11 17:57:16 they can MITM a backdoor into a package all they want, but it won't do any good because the signature check will fail 2017-05-11 17:57:26 e.g. decompressing 2017-05-11 17:57:30 no 2017-05-11 17:58:04 i think signature is compressed, so yes we decompress before verifying 2017-05-11 17:58:30 ncopa: compressed like, gzip compressed? or internal signature compression like ed25519 being "compressed"? 2017-05-11 17:58:32 ncopa: checksum is checked against the index before decompression though 2017-05-11 17:58:57 its checked while decompressing 2017-05-11 17:59:06 but yes, checksum in index 2017-05-11 17:59:10 then it has a greater attack surface area than with tls 2017-05-11 17:59:13 potentialy 2017-05-11 17:59:16 *potentially 2017-05-11 17:59:22 yes 2017-05-11 17:59:34 not worth the expense on the mirrors to have TLS though 2017-05-11 17:59:40 since you could exploit the decompressor as well as the signature verification tool 2017-05-11 17:59:48 yes 2017-05-11 17:59:56 but you need to compromise the system first 2017-05-11 18:00:07 his point is that its easier with http 2017-05-11 18:00:08 plus tls would be useful for paranoid people who do not want the specific things they are downloading to be known. 2017-05-11 18:00:15 ok 2017-05-11 18:00:17 well 2017-05-11 18:00:19 for example, you download a known vulnerable network facing daemon. 2017-05-11 18:00:23 whoever wants to front the money for that 2017-05-11 18:00:36 i still dont know if https for apk mirrors is worth it 2017-05-11 18:00:48 ncopa: use a light tls suite then 2017-05-11 18:00:51 to pay for TLS-enabled mirrors and the hardware upgrades the mirror operators would need to make TLS inexpensive 2017-05-11 18:01:02 anyway, i'm out of this conversation 2017-05-11 18:01:06 well, TLS doesn't hide size, and I bet the plaintext is fairly predictable, so you could guess what someone is downloading even with TLS ;p 2017-05-11 18:01:13 chacha20-poly1305 or aes128-gcm and ecdhe with curve25519 or secp251 2017-05-11 18:01:26 blah blah blah grsec blah blah blah lolicon blah blah blah security 2017-05-11 18:01:43 Bun: indeed, and that's a big issue with tls 2017-05-11 18:01:54 so clearly, alpine needs to start padding packages! 2017-05-11 18:01:56 but it requires having a database of the file sizes and keeping such a database up to date 2017-05-11 18:02:04 Bun: yes i propose a 16GB pad for each package 2017-05-11 18:02:07 pad all packages to the size of the largest package! 2017-05-11 18:02:15 but then that leaks when you are updating 2017-05-11 18:02:22 kaniini_: how often does the tls discussion happen here? :D 2017-05-11 18:02:23 each package will now be 16GB 2017-05-11 18:02:26 so let's transfer dummy updates every 5 minutes 2017-05-11 18:02:34 Hi @ all 2017-05-11 18:02:36 xentec: "discussion" 2017-05-11 18:02:43 often 2017-05-11 18:02:51 ryonaloli thanks for your feedback 2017-05-11 18:02:58 lol 2017-05-11 18:02:59 we will consider enabling tls 2017-05-11 18:03:13 funnily enough I'm just working on running our internal repositories on https 2017-05-11 18:03:13 ncopa: i assume the servers have aesni? 2017-05-11 18:03:26 and pclmulqdq? 2017-05-11 18:03:29 i dont have controll over all mirrors 2017-05-11 18:03:29 (in cpuinfo0 2017-05-11 18:03:31 *) 2017-05-11 18:03:39 our servers are hosted by NSA as directed by Trump himself 2017-05-11 18:03:53 i am being sarcastic :) 2017-05-11 18:04:00 nah, then you would be using russian GOST crypto on them 2017-05-11 18:04:03 =) 2017-05-11 18:04:15 Is there a workaround for the CDN issue? Lol this is my first time using the alpine docker images and it's not a good look for the rest of my team :) 2017-05-11 18:04:18 ryonaloli: how is tampering with static generated pages easier with http over https? 2017-05-11 18:04:24 sebumd it should be back now 2017-05-11 18:04:34 sebumd: bad luck, but should be working 2017-05-11 18:04:52 ncopa: because https provides integrity 2017-05-11 18:04:52 sebumd sorry about that :-( 2017-05-11 18:04:53 hm 2017-05-11 18:05:02 i mean if it's http, then you can just mitm it and inject whatever you want 2017-05-11 18:05:05 otherwise it's opaque 2017-05-11 18:05:12 you can do that with TLS too 2017-05-11 18:05:41 for only $99.95 comodo will happily sign whatever you want 2017-05-11 18:05:46 heh 2017-05-11 18:05:49 well there's always hpkp :P 2017-05-11 18:05:59 and for something like alpine, you can just pin the keys 2017-05-11 18:06:04 *pin the fingerprint 2017-05-11 18:06:21 is this the part where you propose using DANE and then secure DANE using DNSSEC too? 2017-05-11 18:06:23 ;) 2017-05-11 18:06:30 ryonaloli: I think you mean well, but I don't believe they need to get more of "you can just do this, you can do that.." 2017-05-11 18:06:39 Hmm ncopa: Trying to apy add mongodb, am I doing something wrong? 2017-05-11 18:06:55 sebumd what error do you get? 2017-05-11 18:07:06 by all means, set up an https alpine and see how it fares. but asking $someone else to do all the work isnt really nice. 2017-05-11 18:07:19 IcePic: yes, we can 'just' fork grsec and have it be 'instantly' as good as the original 2017-05-11 18:07:27 IcePic: so we should 'just do it' 2017-05-11 18:07:42 ncopa, Error: unsatisfiable constraints: mongodb (missing) required by world[mongodb] 2017-05-11 18:07:44 if I can ever get any performance stats on hosting repos on https I'll be glad to share them 2017-05-11 18:07:59 would be interesting to know the exact cost for https 2017-05-11 18:07:59 IcePic: it's not like it's difficult to do 2017-05-11 18:08:01 does anyone Know if the Alpine-Kernel supports frequency scaling and am I able to use that also on a XEN (dom0) installation? 2017-05-11 18:08:07 i think the problem they're facing is the performance issue 2017-05-11 18:08:11 TBB: i dont think it is that bad, and if mirror operators wish to support TLS, i think we should record it 2017-05-11 18:08:20 ryonaloli: nothing that is set on someone else ever is. 2017-05-11 18:08:25 TBB: but i don't think we should also say "TLS is required for alpine mirrors" 2017-05-11 18:08:30 but, even if we do https for all our mirrors 2017-05-11 18:08:33 and that's something i don't know. it depends on if they have aesni and pclmulqdq. 2017-05-11 18:08:37 what about rsync:// 2017-05-11 18:08:53 rsync over ssh obviously 2017-05-11 18:08:55 yeh, I'm not too sceptical about the performance per se 2017-05-11 18:09:16 pointless to enforce https unless we fix rsync first 2017-05-11 18:09:18 it's not about the performance, it's about getting the mirror operators to do it 2017-05-11 18:09:32 and, hahaha, you cant get me to fight that battle 2017-05-11 18:10:21 also https and rsync+ssh does not solve the issue when a mailcius mirror admin injects things 2017-05-11 18:10:32 it's okay 2017-05-11 18:10:49 we just solve that by requiring the mirror admin submit their social insurance number when applying 2017-05-11 18:10:54 then if they inject malicious things 2017-05-11 18:10:55 :) 2017-05-11 18:11:01 we just go open a $100,000 credit card in their name 2017-05-11 18:11:02 The CDN issue helped me uncover an inefficient ordering of one of our docker images (we were reinstalling git on every build by having it too low in the dockerfile)... so, thanks! :D 2017-05-11 18:11:05 and use it to fund development 2017-05-11 18:11:16 will they be posted on the wiki? because how else do I know to trust them as an end user 2017-05-11 18:11:19 Also ncopa: this is the alpine:latest docker image that I'm running this in 2017-05-11 18:11:25 my point is, https alone does not not solve all worlds problems 2017-05-11 18:11:52 Bun: no, but the credit card will be. 2017-05-11 18:11:54 :D 2017-05-11 18:12:17 sebumd: i will check 2017-05-11 18:12:39 kaniini_: go watch http://www.imdb.com/title/tt3173594 it matches. 2017-05-11 18:12:48 ncopa, this link helped, but I'm not sure why I had to do it: https://forums.docker.com/t/docker-apk-package-for-alpine-linux-has-an-unresolved-dependency-to-libseccomp/9604/2 ("Or in one command..") 2017-05-11 18:13:34 Unode: that seems awful 2017-05-11 18:13:46 oh 2017-05-11 18:13:51 ncopa is also not thinking too widely 2017-05-11 18:13:53 it's a pretty shitty movie but the story line fits. 2017-05-11 18:14:04 what if some alpine developer goes rogue 2017-05-11 18:14:17 and pushes a package that has rm -rf /* in post-install 2017-05-11 18:14:52 my point is 2017-05-11 18:14:54 guess I'm gonna install my updates in a VM first.. 2017-05-11 18:14:57 at some point, using binary packages 2017-05-11 18:15:03 incurs some sort of risk 2017-05-11 18:15:07 +1 2017-05-11 18:15:37 and you have to calculate the cost vs the benefit (or risk) 2017-05-11 18:15:54 Well... using any distro out there incurs in risk :) 2017-05-11 18:16:01 exactly 2017-05-11 18:16:26 but if you use a distro that uses https only, then you are perfectly safe! 2017-05-11 18:16:26 (i only really have https set up for my alpine packages because my setup makes it harder to not setup https than it is to setup https) 2017-05-11 18:16:27 i think a malicious dev is more concerning than a malicious mirror admin 2017-05-11 18:16:41 kaniini_ because they can do more damage 2017-05-11 18:16:45 now to be clear 2017-05-11 18:16:52 it is very hard to become an alpine dev 2017-05-11 18:17:00 it is a process that takes most people literally years 2017-05-11 18:17:16 so the odds of that happening are hopefully quite low 2017-05-11 18:17:32 but it's still more likely than a malicious mirror admin imo 2017-05-11 18:17:38 because it's easier to do 2017-05-11 18:18:14 a malicious package from a mirror admin has to have the right size and checksum in the APKINDEX, and the right signature itself 2017-05-11 18:18:30 kaniini_: how would malicious mirror admin even work? The packages are signed by buildservers, aren't they? 2017-05-11 18:18:42 or, alternatively, it has to have 0day exploit code that can break the decompressor (zlib) 2017-05-11 18:19:18 xentec: in theory, if they could exploit zlib they could bypass the security in some theoretical case that seems not likely to be fixable 2017-05-11 18:19:46 so, what does attacking via a mirror require... re-signing all packages using self-generated keys placed in a specially crafted alpine-keys package and a self-signed index (since you pretty much have to start the install with --allow-untrusted)= 2017-05-11 18:19:54 ? 2017-05-11 18:20:07 you dont have to start the install iwht --allow-untrusted 2017-05-11 18:20:08 re package sizes 2017-05-11 18:20:12 the size is in index 2017-05-11 18:20:16 that's just what silly people do 2017-05-11 18:20:16 and i think apk uses that 2017-05-11 18:20:19 it does 2017-05-11 18:20:28 so we could have a max size for index 2017-05-11 18:20:49 silly people, or people unable for whatever reason to run the install on a platform other than Alpine 2017-05-11 18:20:56 TBB: set up something like https://github.com/Xe/aports/blob/master/core/xeserv-keys/APKBUILD 2017-05-11 18:21:24 TBB: they can download the keyring package itself 2017-05-11 18:21:42 TBB: https://git.alpinelinux.org/cgit/aports/tree/main/alpine-keys 2017-05-11 18:21:51 has even https in it :D 2017-05-11 18:22:19 (of course those concerned with security will pre-check the keys used in any case, and those who don't can blame themselves) 2017-05-11 18:24:31 I mean, you do check the signatures of the install images too, it's in no way different from installing from packages 2017-05-11 18:26:14 Xe: naturally I do that in our environment :) 2017-05-11 18:29:28 how's everyone in alpine land? 2017-05-11 18:29:41 wait for it.... "cold!" 2017-05-11 18:29:42 tls-encrypted we're not. 2017-05-11 18:29:44 ;) 2017-05-11 18:29:59 get it? :P 2017-05-11 18:30:09 ACTION gets the hook 2017-05-11 18:30:15 ACTION bows 2017-05-11 18:30:27 ACTION removes shodan45 from the stage with said hook 2017-05-11 18:35:16 ncopa: on edge without cache: (1/1) [APK unavailable, skipped] Reinstalling libblkid (2.28.2-r1) 2017-05-11 18:35:23 I thought this was fixed? 2017-05-11 18:40:25 xentec got bigger issues. the backend for dl-cdn died 2017-05-11 18:40:39 it crashed, rebooted then died again 2017-05-11 18:40:54 we are working on it 2017-05-11 18:41:28 I tought both issues were connected but ok. 2017-05-11 18:41:32 hang in there! 2017-05-11 19:16:00 ncopa: can we at least put dl-cdn on another mirror in the meantime 2017-05-11 19:16:02 or did we do that already 2017-05-11 19:16:04 :p 2017-05-11 19:41:00 we did already 2017-05-11 19:41:05 should be working now 2017-05-11 22:55:16 Hey guys. Has anyone got any ideas on how to view the contents of my efivars? 2017-05-11 23:04:17 boojinks: # mount -t efivarfs efivarfs 2017-05-11 23:06:25 xentec: they're mounted but binary so cat just corrupts the terminal - was wondering if there was any easy tool to read them/anyone knows the encoding? 2017-05-11 23:06:50 less? 2017-05-12 01:01:42 o 2017-05-12 01:01:44 o/ 2017-05-12 01:12:18 heyo 2017-05-12 01:19:57 I currently have zsh and ash installed, how do I remove zsh, install bash, and make bash my default shell? 2017-05-12 01:20:01 Is there a wiki page on this? 2017-05-12 01:21:40 just remove and add the relevant packages? there's no chsh so i'd probably just edit passwd but there's likely a proper way to change the shell 2017-05-12 01:26:46 i think I got it. brb logging out 2017-05-12 01:28:10 Yep! It's working 2017-05-12 01:28:16 thanks scv !! 2017-05-12 01:28:19 np 2017-05-12 03:43:47 i've been told that fortify-headers are incomplete and have perf issues compared to a true _FORTIFY_SOURCE=2 implementation. what is the extent of the incompleteness? 2017-05-12 03:44:04 and are there any plans to actually upstream improved _FORTIFY_SOURCE to musl? 2017-05-12 04:21:21 what perf issues? 2017-05-12 04:23:41 this is just something i was told. i am not sure what the perf issues are. i haven't looked into it deeply. 2017-05-12 04:24:23 i haven't heard anything like that 2017-05-12 04:24:36 it might be true but would need to be measured 2017-05-12 04:25:00 re: =2, it's a really bad idea because it results in a nonconforming implementation 2017-05-12 04:25:11 it will introduce DoS bugs into correct prograsm 2017-05-12 04:25:24 and it's hard to know in advance which programs that will happen to 2017-05-12 04:25:26 well programs don't have to be compiled with =2 2017-05-12 04:25:57 right but people don't tend to understand that and just throw =2 at things without knowing what it means 2017-05-12 04:26:17 I sort of doubt it would be slower unless glibc has some chummy stuff going on with gcc 2017-05-12 04:26:36 (some sort of builtin) 2017-05-12 04:26:56 while i can't control what alpine does, hardening hacks that break correct programs by violating interface contracts aren't welcome upstream in musl 2017-05-12 04:27:16 that's scary :/ 2017-05-12 04:30:16 a current list of important security features which are missing from musl which i need to implement currently are fn ptr protection (whether xor mangling, PROT_READ for the fn ptrs, or both, for things like pthread_atform, atexit, at_quick_exit, C++11 local dtors), setjmp protection, cross-dso cfi support and safestack support, thread stack randomization, a hardened allocator (a really hardened one 2017-05-12 04:30:22 , with out of line metadata, etc), _FORTIFY_SOURCE=2 or improved fortify-headers, and possibly library load order randomization, though that's not as important. 2017-05-12 04:31:02 currently bionic has all of those to the best of my understanding, which makes it the most secure libc, but it's targeted for arm and android platforms in particular, so it's not viable. 2017-05-12 04:31:20 glibc is huge and a real pain, so it's really only musl where implementing any of those is possible. 2017-05-12 04:33:17 selfrando iirc does func randomization and runtime 2017-05-12 04:33:53 idk much about selfrando. does it require libc support like cross-dso cfi? 2017-05-12 04:34:30 (regardless, apparently there are many simple programs it can't even compile with, so it's out of the question for now until it's better understood) 2017-05-12 04:37:51 how would you use PROT_READ for fps? 2017-05-12 04:40:51 also wasn't xoring fn ptrs a bad form of sec? 2017-05-12 04:42:29 xor mangling is the fastest and avoids a race condition around the PROT_READ method that occurs with atexit, but it can infoleak. 2017-05-12 04:43:12 PROT_READ is slower and more complicated and avoids the issue of having a leakable cookie, but there's a race condition for atexit-related functions. having a mix of the two is ideal, but xor mangling or the PROT_READ method alone is still not bad. 2017-05-12 04:43:38 i wouldn't be surprised if openbsd (which uses the PROT_READ method) has solved the race issue, though. 2017-05-12 05:00:15 ryonaloli, "most secure libc" is a joke 2017-05-12 05:00:30 hardening features are one small aspect of security 2017-05-12 05:00:57 it's one layer, that's what it is. nothing less, nothing more 2017-05-12 05:01:12 hardening features provide a strong scaffold, but of course it's just one aspect. 2017-05-12 05:01:38 CFI makes ROP extremely difficult, but it won't prevent already executing malware from running, you need a MAC for that. 2017-05-12 05:02:03 usually hardening features just make significantly more work for an attacker 2017-05-12 05:02:07 sometimes they prevent attacks 2017-05-12 05:02:37 but the case where they help is where you already have a severe security bug 2017-05-12 05:02:37 indeed 2017-05-12 05:03:03 avoiding having those bugs in the first place is much more important 2017-05-12 05:03:04 and a libc is used for effectively all programs on a computer, many of which are going to have security bugs. 2017-05-12 05:03:21 "just don't have bugs in the first place" is, of course, the antithesis of hardening. 2017-05-12 05:03:23 yes but most of them are going to be exploitable regardless of what libc does 2017-05-12 05:03:39 that doesn't mean don't harden 2017-05-12 05:03:52 the libc still plays an important factor, because the lack of support for cross-dso cfi for example makes rop much easier. 2017-05-12 05:03:56 but it does mean hardening that increases complexity is a serious tradeoff not a clear win 2017-05-12 05:04:15 oh yeah, i don't think that extreme increases in complexity for a small benefit are worth it. 2017-05-12 05:04:25 because it risks introducing new bugs (e.g. KASLR, VMAP_STACK, etc) 2017-05-12 05:05:17 btw re: hardened allocator it's interesting that ppl consider out-of-line more hardened 2017-05-12 05:06:03 well that alone doesn't harden. 2017-05-12 05:06:11 inline-but-validated seems stronger in many ways; it helps detect overflows that would go uncaught with no inline metadata 2017-05-12 05:06:11 look at the copperhead bionic forkl. 2017-05-12 05:06:12 *fork 2017-05-12 05:06:34 i'll probably go for a mix in the next-gen malloc for musl 2017-05-12 05:07:14 minor validatable info inline with the important data that would be dangerous if corrupted kept out-of-line 2017-05-12 05:08:10 would you accept patches for cross-dso cfi support? 2017-05-12 05:08:27 it protects fn ptrs outside of the libc as well. 2017-05-12 05:09:16 not sure. i haven't seen what's involved in it. 2017-05-12 05:09:56 https://android-review.googlesource.com/#/c/246837/ https://android-review.googlesource.com/#/c/326011/ https://android-review.googlesource.com/#/c/248499/ https://android-review.googlesource.com/#/c/170988/ and https://android-review.googlesource.com/#/c/304676/ is what bionic did for cross-dso cfi support (and safestack) 2017-05-12 05:10:04 though they did a lot more 2017-05-12 05:10:33 so it can be made simpler. most of that code is test cases for android-specific stuff. 2017-05-12 05:11:01 as for xor mangling/PROT_READ fn ptrs, that should be easy (not much complexity there) and has a good security improvement. 2017-05-12 05:11:13 probably something i can add myself. i'm gonna add it to a musl fork anyhow, so i can work on upstreaming it. 2017-05-12 05:11:29 though cross-dso cfi support is currently out of my league. 2017-05-12 05:13:00 in general i'm very skeptical of anti-rop stuff though; it's usually huge complexity cost relative to actual protection it provides 2017-05-12 05:13:14 and the good stuff requires incompatible ABI 2017-05-12 05:13:20 the anti-rop stuff is not part of libc. it's just support that the libc needs. 2017-05-12 05:13:31 the anti-rop stuff is done by the compiler if applications want it. 2017-05-12 05:13:55 and the complexity is pretty low since it's only forward edge. also 1% perf hit. 2017-05-12 05:15:05 this kind of thing == huge complexity: https://android-review.googlesource.com/#/c/304676/ 2017-05-12 05:15:44 and it introduces bugs almost surely.. 2017-05-12 05:16:34 which one? 2017-05-12 05:17:01 sigaction.cpp? 2017-05-12 05:17:11 yeah 2017-05-12 05:17:26 wrapping signal handlers like this is a known-super-difficult problem with lots of nasty corner cases 2017-05-12 05:17:28 the complexity there does not seem that huge 2017-05-12 05:17:32 glibc considered doing it for other reasons 2017-05-12 05:17:46 though i could ask bionic devs if they've had any problems or what their solutions were 2017-05-12 05:17:47 and dropped that consideration after realizing how difficut it was to get right 2017-05-12 05:18:03 they haven't had any problems because they're not aware of the problems 2017-05-12 05:18:07 :) 2017-05-12 05:18:18 same as how dietlibc has not had any problems :) 2017-05-12 05:18:43 complexity does not mean the code as written is complex 2017-05-12 05:19:07 it means there are complex hidden interactions with other things that are difficult to reason about or prove correct 2017-05-12 05:19:21 and that the code will grow much more complex as people realize that and try to fix it to adapt :) 2017-05-12 05:19:23 ACTION asking to see how bionic delt with it 2017-05-12 05:19:49 just kill off C, finally 2017-05-12 05:20:21 just stop using low-quality software written in C without proper sandboxing 2017-05-12 05:20:23 oh also 2017-05-12 05:20:25 dalias: that's for safestack 2017-05-12 05:20:28 not cross-dso cfi 2017-05-12 05:20:30 it looks like 2017-05-12 05:20:31 *nod* 2017-05-12 05:21:07 so that would likely not even be needed for cross-dso cfi support (though safestack support that works for dsos is also very important) 2017-05-12 05:21:09 it's the same issue as in the 90s with bind, wuftpd, etc. 2017-05-12 05:21:41 it's not the people running vsftpd or running less-secure junk in a nobody chroot who are getting rooted 2017-05-12 05:22:10 it's the people running known-utter-crap software with permissions to do everything important 2017-05-12 05:22:47 people with secure setups also get rooted. they just tend to need to get targeted (more often) 2017-05-12 05:24:36 so what i gather is that cross-dso cfi does not look *too* complex, safestack, at the moment, looks too complex due to requiring wrapping signal handlers in a way that cannot be proven correct. xor mangling/PROT_READ fn ptr protection is ok to upstream. _FORTIFY_SOURCE=2 is not good because it breaks programs that blindly try to use it. 2017-05-12 05:24:45 what about thread stack randomization? 2017-05-12 05:25:08 that's another thing i plan to implement in my own musl fork, so i can try to upstream that as well. 2017-05-12 05:25:13 it should also be simple. 2017-05-12 05:25:45 will improve security against remote and scriptless exploits, which are common and getting more common as the complexity of formats grow. 2017-05-12 05:30:33 dalias: and do you think using a combination of xor mangling and PROT_READ is best? that's my opinion, and the opinion of some other folk i have talked to, as it would both prevent the race issues and the issue of a leakable cookie. 2017-05-12 05:31:41 what would thread stack randomization do? 2017-05-12 05:31:48 just random offset for initial sp? 2017-05-12 05:32:30 done naively that breaks the ability to run with small stacks in an unpredictable/unreproducible way 2017-05-12 05:32:55 (apps that are close to the limit will randomly stack-overflow depending on the offset) 2017-05-12 05:33:16 dalias: randomize more than just the lower bits, which the kernel can already do (for the main thread stack) 2017-05-12 05:33:29 ? 2017-05-12 05:33:41 the upper bits are already randomized as much as ASLR gives you 2017-05-12 05:34:24 i'm not sure what you mean by PROT_READ 2017-05-12 05:34:46 most interesting function pointers are not in places where you can make the whole page read-only 2017-05-12 05:43:42 (resending because i pinged out) dalias: randomizes more than the lower bits, which the kernel can already do (for the main thread stack). but, looking through my logs at least, it looks like the implementation is non-page aligned randomization of the secondary stacks as well. copperhead bionic (and i think openbsd's libc?) already do this correctly, so no need to find a new way to reimplement it, 2017-05-12 05:43:48 potentially naively. 2017-05-12 05:43:58 and i missed anything you said after "(apps that are close to the limit will ..." 2017-05-12 06:42:34 dalias: if i read the correct standard, it says "The macro NAN is defined if and only if the implementation supports quiet NaNs for the float type. It expands to a constant expression of type float representing a quiet NaN.". however, musl seems to define NAN as (0.0f/0.0f) if it's not __GNUC__ > 3.03. should that definition be allowed in a constant? tcc complains about division by zero in a constant. tcc does have __nan__ which works correctly if used 2017-05-12 06:42:34 . is there a way to communicate this to musl headers? 2017-05-12 06:54:16 hello 2017-05-12 06:58:12 avih: then tcc's analyzer is broken 2017-05-12 06:58:22 division by zero is perfectly valid for floating point 2017-05-12 06:58:38 also in a constant? 2017-05-12 06:59:11 the analyzer is not broken though. but it interprets it incorrectly if it's allowerd 2017-05-12 07:00:19 i'm trying to figure out where the solution is. could be tcc, or somehow communicate the support for NAN. 2017-05-12 07:04:19 constant or not doesn't really change anything 2017-05-12 07:04:27 I'm kind of new to linux, have setup 3 alpine linux apache+php in docker container few weeks ago. Have setup another one today but can't seem to get mod_rewrite work. Enabled the module in httpd.conf, set AllowOverride All for /web/html dir, rebooted docker, mod_rewrite.so corresponds to path but rewrite does not work and haven't got it loaded in phpinfo(). Any suggestion what to check, as mod_rewrite 2017-05-12 07:04:29 works on other 3 alpine linux dockers created from same template. Also did diff check of httpd.conf and everything corresponds to other docker containers except the ServerName of course. 2017-05-12 07:04:40 more importantly, it shouldn't warn on system headers avih 2017-05-12 07:05:25 Shiz: not sure i follow. there was no warning involved. tcc just fails with "division by zero in a constant" 2017-05-12 07:05:42 oh, then it's even worse 2017-05-12 07:06:01 ok, that's why i'm asking :) to understand where the issue is 2017-05-12 07:07:38 are you using tcc or the tinycc fork? 2017-05-12 07:07:55 Shiz: it's not tcc which breaks. it just considers the source invalid. 2017-05-12 07:08:04 well, that is its breakage 2017-05-12 07:08:06 :P 2017-05-12 07:08:26 i started by asking if it should be allowed in a constant expression :) 2017-05-12 07:08:42 if i knew that, i'd know where the issue is :) 2017-05-12 07:08:52 http://repo.or.cz/w/tinycc.git btw this is the fork 2017-05-12 07:08:55 that i know of 2017-05-12 07:09:46 Shiz: i don't think there's more than one tcc/tinycc. it's the one started by fabrice bellard, now hosted on http://repo.or.cz/w/tinycc.git , where the main dev branch is "mob", which is relatively active 2017-05-12 07:13:19 and there have been talks about releasing 0.9.27 for some months now, though fixes still go in. most recently - musl related. 2017-05-12 07:13:23 https://txt.shiz.me/YzllOWMwMW.txt 2017-05-12 07:13:25 :P 2017-05-12 07:13:43 it looks like it was mindlessly copied from the integer generation code 2017-05-12 07:13:48 where division by zero is of course invalid 2017-05-12 07:14:56 constant vs non-constant is not relevant as it just follows IEEE 754 semantics 2017-05-12 07:15:01 afaik 2017-05-12 07:15:54 Shiz: could you point me to where the c99 standard says or implies that 0.0f/0.0f should be allowed in a constant? 2017-05-12 07:16:48 (i was still reading through it when you started replying and interrupted me ;) ) 2017-05-12 07:17:19 http://www.open-std.org/jtc1/sc22/wg14/www/docs/n1256.pdf 2017-05-12 07:17:21 F7.4 2017-05-12 07:17:35 the specific code example even includes division by floating point zero 2017-05-12 07:17:48 (specifying run-time exceptions when FENV_ACCESS is on, but it proves the source code is correct) 2017-05-12 07:18:03 "7.4 Character handling " ?? 2017-05-12 07:18:28 F7.4 2017-05-12 07:18:30 not 7.4 2017-05-12 07:18:46 furthermore, from F3: 2017-05-12 07:18:51 "— The +, −, *, and / operators provide the IEC 60559 add, subtract, multiply, and divide operations" 2017-05-12 07:19:02 IEC 60559 being of course IEEE 754 and defining floating point division by zero as valid 2017-05-12 07:19:34 i don't think i can find "F7.4" in the pdf i have. 2017-05-12 07:20:07 try F.7.4 2017-05-12 07:20:20 it's on page 449 2017-05-12 07:20:36 found it. (good thing you quoted :p ) 2017-05-12 07:21:13 it seems like the tcc error is just from copying the integer constant propagation code 2017-05-12 07:21:16 for floating point 2017-05-12 07:21:21 and not removing the 0 case 2017-05-12 07:21:47 yeah, possibly. fixing isn't hard if one knows where the issue is ;) 2017-05-12 07:22:06 and i wasn't sure what should be supported. thanks :) 2017-05-12 07:22:16 just gave you a patch even 2017-05-12 07:22:26 push it yourself :) 2017-05-12 07:22:35 no registration required :) 2017-05-12 07:25:54 i'm busy ;p 2017-05-12 07:26:02 of course you are :) 2017-05-12 07:26:49 it should probably come with a test though, to make sure it fails for integers and works for floats 2017-05-12 07:36:49 Shiz: also, your patch doesn't fix it. it makes instead show "error: initializer element is not constant" 2017-05-12 07:37:36 it should be using it's __nan__ there instead 2017-05-12 07:37:40 its* 2017-05-12 07:37:54 it shouldn't 2017-05-12 07:38:14 it should be left to be generated at runtime 2017-05-12 07:38:30 and only be statically generated when it has to be 2017-05-12 07:38:31 as a constant expression?? 2017-05-12 07:38:32 see F.7.4 2017-05-12 07:38:53 it specifically mentions that if used as part of a static initialiser expression it's fine to be constant-propagated 2017-05-12 07:39:00 however, when not, it must be subject to FENV_ACCESS requirements 2017-05-12 07:39:12 which can mean throwing an exception at runtime 2017-05-12 07:39:26 "other than one in an initializer for an object that has static storage duration" 2017-05-12 07:39:42 which is my initial use case. i'm adding now. 2017-05-12 07:40:58 specifically: float w[] = { 0.0/0.0 }; // raises an exception 2017-05-12 07:41:28 and that's the exact case where the source code uses NAN, and musl replaces it with 0.0f/0.0f 2017-05-12 07:42:16 hence, so far i still think it should be using its __nan__ there 2017-05-12 07:47:16 it also has a comment " /* NOTE: we only do constant propagation if finite number (not NaN or infinity) (ANSI spec) */ 2017-05-12 07:47:36 so it seems rather intentional 2017-05-12 07:48:02 (could of course be erroneously so) 2017-05-12 07:48:38 also, it might have changed in c99 2017-05-12 10:30:13 hey all, question I couldn't find an answer for: why is it that a standard disk install is taking up more than 500mb? I thought it was supposed to be ~130mb install? 2017-05-12 10:40:18 russkel: that doesn't seem like it should be right 2017-05-12 10:43:07 Shiz: it's running in virtual box, I set up a 500mb HDD and simply booted the standard iso, did setup-alpine and it failed install 2017-05-12 10:43:29 just created a 2gb hdd and the install has worked 2017-05-12 10:43:31 it might be temporary files 2017-05-12 10:43:33 ? 2017-05-12 10:43:51 potentially, RAM is limited to 256MB if that makes a difference 2017-05-12 11:15:27 Anyone had any weird permission issues when running Alpine as a docker host? Have a fresh install of 3.5.2 running docker 17.04.0-ce (installed via apk). Trying to run a very simple container I've run on lots of other computers and I'm getting "murmur.x86: mprotect: Permission denied (13)" 2017-05-12 11:25:06 klogd: that makes sense 2017-05-12 11:25:41 alpine ships with a hardened kernel, but if your containers aren't equipped for that (e.g. ubuntu-based), they don't have the required exemption markings on binaries to indicate that it can do certain otherwise naughty stuff 2017-05-12 11:25:51 all alpine binaries ship with those markings of course where needed 2017-05-12 11:25:56 but e.g. ubuntu and debian do not apply them 2017-05-12 11:36:48 Shiz: I've tried 3 containers, the one based on ubuntu:14.04 works, but jessie-slim and busybox. From what you said I was expecting the ubuntu one to be failing as well? 2017-05-12 11:38:39 The ubuntu based one is the only one making a dedicated user account for the program, the other two run as root, if that makes any difference 2017-05-12 11:43:45 it depends on the binaries inside of the container 2017-05-12 11:59:46 ah, I see. I ended up cloning the mumble server and changing it to alpine:latest and then everything is working a lot better. Thanks for the info 2017-05-12 13:24:24 I'm trying to install and run Alpine from a USB drive via VMDK image which uses the USB drive as a virtual disk. I've done it successfully in the past, but the installer seems to hang here every time: https://a.safe.moe/dsjYy.png Any advice or guidance? 2017-05-12 18:57:18 after trying to debug but failing woud anyone be able to help me with alpine-iso: am trying to make with APKOVL, it is set, but the make (make -d) does not seem to use it, anything I am missing ? 2017-05-12 19:15:38 alpine-iso had been superseded 2017-05-12 19:15:57 Check root of aports 2017-05-12 19:17:35 ah okay, the wiki referenzed it, thx 2017-05-12 19:21:10 Uhoh, who was looking at alpine-iso? 2017-05-12 19:22:20 I went down that road before... then found out it was out of date for years already. 2017-05-12 19:26:56 The current mkimage is about to be superseded as well. 2017-05-12 21:11:49 so what to use to build an image ? 2017-05-12 21:12:48 mauli: scripts/mkimage.sh in the aports repo 2017-05-12 21:13:09 the dependencies are commented in the first few lines of the script 2017-05-12 21:28:03 hm, weird am getting ERROR: unsatisfiable constraints ( alpine-base (missing), linux-firmware ...) 2017-05-12 21:29:51 Error while doing what? 2017-05-12 21:29:54 does it also say '>>> WARNING: no repository set' perhaps? ;p 2017-05-12 21:30:53 it is intended to be pointed to a one (or more repos) that have aports build 2017-05-12 21:30:58 not sure if fully built is necessary 2017-05-12 21:31:12 damn ,yes ... warnings should not be ignored 2017-05-12 21:32:12 e.g. to build the latest edge/main 2017-05-12 21:32:14 $ ./scripts/mkimage.sh --repository http://nl.alpinelinux.org/alpine/edge/main 2017-05-12 21:32:22 and you can supply extra repositories through --extra-repository 2017-05-12 21:32:30 e.g. your local ones that have your own packages you want to add 2017-05-12 21:33:28 Also, make sure you add the option to include host keys, otherwise you'll get an unusable image. 2017-05-12 21:33:58 thought it might be using system repo per default, my mistake 2017-05-12 21:33:58 TemptorSent: it'll be useful, just oneshot :D 2017-05-12 21:34:32 Xe: It won't boot because the repo can't be verified. 2017-05-12 21:34:44 oh, gg 2017-05-12 21:35:04 mauli: Yeah, you have to be explicit. 2017-05-12 21:35:47 mauli: What are you trying to do with the image? The existing mkimage.sh is rather limited. 2017-05-12 21:35:58 am trying to setup an image with working live from scratch yea, alpine-iso had the possibility to use lbu file 2017-05-12 21:37:17 you can still do that 2017-05-12 21:37:36 mauli: Okay, you're getting out of the realm of what the existing mkimage can do happily. I have a complete rewrite that's waiting on a couple changes in APK to make the switch. 2017-05-12 21:39:14 mauli: add a profile in mkimg.yourname.sh and set apkovl= 2017-05-12 21:40:04 see https://github.com/TemptorSent/aports/tree/mkimage-refactor-scripts/scripts for details. 2017-05-12 21:40:20 more specifically: mkdir ~/.mkimage, edit ~/.mkimage/mkimg.whatever.sh, add something like profile_mauli() { profile_standard; apkovl="my-apkovl-generation-script.sh" } 2017-05-12 21:40:26 then call mkimage.sh with --profile mauli 2017-05-12 21:40:33 and have that script existing 2017-05-12 21:40:43 already setup a profile^^, thx 2017-05-12 21:43:46 upgrading from 3.4 to 3.5 seems to cause curl to not get some intermediate certs, anyone have any advice? 2017-05-12 21:51:36 but funny enough openssl seems to verify the whole chain 2017-05-13 09:22:47 I have created a new zfs pool on my Alpine Linux box, but it disappears every time I boot. How do I make it persist? 2017-05-13 15:39:14 Hi guys anyone knows why I am getting "required by: world[openjdk8]" when I do "apk add openjdk8"? 2017-05-13 15:39:50 it presumably says more than just that 2017-05-13 15:40:43 full error -> https://pastebin.com/UEfCbL6e 2017-05-13 15:41:10 openjdk8 (missing) just means the package you're trying to add does not exist 2017-05-13 15:41:28 did you add the community repo to your /etc/apk/repositories? 2017-05-13 15:41:33 I have created a new zfs pool on my Alpine Linux box, but it disappears every time I boot. How do I make it persist? 2017-05-13 15:42:58 Shiz: you mean this one? -> https://pkgs.alpinelinux.org/package/v3.5/community/x86_64/openjdk8-jre-base 2017-05-13 15:43:19 I mean that if openjdk8 is missing you likely don't have the community repo in your /etc/apk/repositories 2017-05-13 15:43:31 http://dl-cdn.alpinelinux.org/alpine/v3.5/community that is 2017-05-13 15:44:01 add it, apk update, and try again 2017-05-13 15:46:21 Shiz: it worked like a magic - dude you're the man ;) I owe a beer. 2017-05-13 15:47:30 :p 2017-05-13 17:51:45 have any decisions been made about the future state of alpine grsec-patched kernels given last month's discontinuation of the grsec testing patchset? 2017-05-13 20:17:30 Does `@reboot` work with alpine? I can't seem to get it to work correctly with `root`. 2017-05-13 20:55:09 agb: +1 2017-05-14 21:14:51 ncopa: i didn't get to test the minimal x fonts thing, sorry. i guess liberation it is then.. 2017-05-14 22:57:07 random question, is anyone running jenkins as an ssh slave on alpine linux via openjdk? seems like jenkins doesn't run on openjdk at all but just wondering if its just the apk I've picked or not 2017-05-14 23:07:08 mitchty: this isn't super helpful, but I can confirm jenkins running fine under openjdk 7 and 8 under debian stable. 2017-05-14 23:07:48 agb: out of curiosity what version of jenkins? i'm on 2.5.7 and it looks like 2.5.4 dropped java 7 support so wondering if it might be related 2017-05-14 23:10:08 uhhh, the version that I previously had running under openjdk 7 was whatever the last LTS was before 2.0. maybe 1.651.x? 2017-05-14 23:13:19 ok np, i'm trying to bisect whats wrong, so far negated ssh, dns, /etc/host related stuff, etc... and am down to jenkins version and java versions, slightly annoying as i've had this work in the past, hate the update treadmill 2017-05-15 05:25:41 agb: we will continue to maintain it for 3.6 period, we intend to work with KSPP and other initiatives for future 2017-05-15 11:40:42 it's nice to have found alpine. i'm sticking to gentoo on the desktop, but alpine seems great for my server 2017-05-15 14:22:00 Why does a added user get deleted after reboot? 2017-05-15 14:23:03 are you running from RAM? 2017-05-15 14:24:55 I'm using the default alpine image for the raspberry pi 2 2017-05-15 14:25:39 Kachel: https://wiki.alpinelinux.org/wiki/Alpine_local_backup 2017-05-15 14:25:44 Running nano after lbu commit still works but not adding a user 2017-05-15 14:26:57 Kachel: What do you mean? 2017-05-15 14:27:00 I am sure it works. 2017-05-15 14:27:14 It works here as well but I use sys mode on rpi 2. 2017-05-15 14:27:39 Let me try it again 2017-05-15 14:28:38 [# adduser test] 2017-05-15 14:28:59 [lbu commit] 2017-05-15 14:29:12 [reboot] 2017-05-15 14:29:39 I managed to switch to swclock after install 2017-05-15 14:30:28 and the apkovl is saved to the right location? 2017-05-15 14:30:43 [vault0 login: test] 2017-05-15 14:31:06 [Password](blank) 2017-05-15 14:31:27 [login incorrect] 2017-05-15 14:31:57 Shiz I will check 2017-05-15 14:32:15 Logging into root works fine 2017-05-15 14:32:29 Kachel: and the test user doesn't exist when root checks? 2017-05-15 14:33:08 No folder in /home/ 2017-05-15 14:33:09 (just being cautious here since you did test two things at the same time, something else could in theory have prevented test from logging in, like "never empty passwords" or so) 2017-05-15 14:33:43 I used valid passwords before 2017-05-15 14:34:02 Everzthing works normal before reboot 2017-05-15 14:34:13 *everything 2017-05-15 14:36:09 I found /media/mmcblk0p1/vault0.apkovl.tar.gz 2017-05-15 14:36:28 Is it in the right place? 2017-05-15 14:38:43 Running [lbu include -l] I see nothing 2017-05-15 17:26:27 setup-xorg-base says "ERROR: unsatisfiable constraints". How can I fix it? 2017-05-15 20:37:57 Can you run virtualbox host on alpine musl? 2017-05-15 20:42:56 randomuser1452: nope 2017-05-15 20:43:10 kaniini: awesome, good to know that the distro already has a direction in mind regarding ongoing security protections. 2017-05-15 20:46:33 untoreh: do you know if virtualbox supports uclibc? 2017-05-15 20:48:15 randomuser1452: sry dunno but I doubt it 2017-05-15 21:19:00 randomuser1452: idk about vbox but would kernel/userspace containerization work for your needs? do you need full hvm? 2017-05-15 21:44:00 http://www.tbyil.com/Banned_Toxic_Foods_Tony_Isaacs.htm 2017-05-15 21:45:57 <_ikke_> BitL0G1c: Why are you spamming that link? 2017-05-15 21:48:46 _ikke - wrong window sorry (I use pidgin with tabs) 2017-05-15 21:58:44 <_ikke_> ok 2017-05-15 22:27:49 randomuser1452, virtualbox on alpine will probably not happen 2017-05-15 22:27:54 look into qemu as a replacement 2017-05-15 22:28:15 fair warning, network configuration is fair bit more tricky... 2017-05-15 22:29:36 trfl: is it due to the lack of glibc or some other differences? 2017-05-15 22:30:06 just a guess but I think it's due to requiring certain modules being built 32bit 2017-05-15 22:30:47 similar to wine being mostly useless because it can only run 64bit windows applications 2017-05-15 22:35:43 trfl: you can set wine to a 32 bit prefix fyi 2017-05-15 22:36:23 I tried that at some point but got a different error, can't recall what... 2017-05-15 22:36:23 idk about other distros but at least with arch the 64bit is just the default 2017-05-15 22:36:32 now you got me curious, gonna boot up my laptop and check :p 2017-05-15 22:37:16 its possible you were almost there and had a common windows lib you needed to override. hit up in #wine or #arch they might be able to help you 2017-05-15 22:37:29 #archlinux rather 2017-05-15 22:40:17 ...that's strange, the wine package in 3.3 and 3.4 provides /usr/bin/wine but 3.5 and edge does not 2017-05-15 22:40:55 I haven't looked at wine in a while but I think it's just named wine64 2017-05-15 22:41:18 and no, it won't work with a 32-bit prefix 2017-05-15 22:41:43 ah yep you're right, and that was unfortunately my previous experience with it 2017-05-15 22:43:01 and installing 32-bit wine next to it doesn't work either because Alpine (for a good reason) doesn't do multilib IIRC 2017-05-15 22:45:57 however... I haven't tried this but a 32-bit chroot just might be capable of doing the trick 2017-05-16 11:49:04 hi 2017-05-16 11:49:15 how can I install tup in alpine? 2017-05-16 11:49:23 is there a existing repo containing tup? 2017-05-16 11:55:20 <_ikke_> amosbird: https://pkgs.alpinelinux.org/packages?name=tup&branch=&repo=&arch=&maintainer= 2017-05-16 12:41:11 maybe it would make sense to have a faq link in the topic to the questions #is there a pkg/where is the pkg/what does "required by [world] mean"# 2017-05-16 12:45:41 huh, actually none of those 3 questions seem to be covered in that faq 2017-05-16 12:46:06 while subjectively they have a frequency of at least 1/day 2017-05-16 12:52:21 https://wiki.alpinelinux.org/wiki/Alpine_Linux:FAQ#What_does_.22required_by:_world.5B.24pkgname.5D.22_mean.3F 2017-05-16 12:57:25 https://wiki.alpinelinux.org/wiki/Alpine_Linux:FAQ#How_can_i_find_out_if_a_certain_package_exists_in_alpine.3F 2017-05-16 12:57:51 i think those two should cover 99% of all questions here in the chan 2017-05-16 15:16:08 I get the "We trust you have received the usual lecture from the local System Administrator..."-message every time when running sudo after reboot 2017-05-16 15:17:00 which directories should be in the lbu list when adding a user with sudo priviliges? 2017-05-16 15:19:57 Kachel: Hello, are you still trying to use a user named "test"? 2017-05-16 15:20:21 yes 2017-05-16 15:20:36 but under a differrent name 2017-05-16 15:21:04 I've added /home/ and /etc/sudoers to the lbu list 2017-05-16 15:21:05 You know that "test ist a keyword in Linux based OS 2017-05-16 15:21:34 I didn't literally use "test" as the username 2017-05-16 15:22:04 regardless of that it would work fine with 'test' as a username 2017-05-16 15:23:37 I anyway used something else as stated above 2017-05-16 15:24:27 but are there any directorys that needed to be added so that sudo doesn't make a first-run on every reboot? 2017-05-16 15:24:47 i believe it is in /var/db/sudo 2017-05-16 15:26:14 There is only a "lectured"-file in that directory 2017-05-16 15:29:00 And the first-run message is gone after reboot when adding it to lbu 2017-05-16 15:32:03 that's a folder 2017-05-16 15:32:08 it will have files for each user inside 2017-05-16 15:32:12 Boop Boop bidoop! 2017-05-16 15:32:13 m355 w17h 7h3 b357 2017-05-16 15:32:14 d13 l1k3 7h3 r357! 2017-05-16 15:32:14 https://skeax.ninja/ 2017-05-16 15:32:15 <3 2017-05-16 15:32:15 nope 2017-05-16 15:32:16 DCC SEND " wvkekpglxtbaewspgdcagfqkybs bcqqpacnmndlenddsrneftgodkwkofkprxnnoj vukmabnnmhrkysqzlsanjjyitdvbgpeaiktgvxszudrjipjjxtkdbovndebhmqdpln 2017-05-16 15:32:16 flazz1 ogres Kachel mortis304 t0mmy ahrs cyteen rxc fabled Emperor_Earth_ blueness xentec kunev fcolista farosas Kooda[b] gromero nikolaosk Skele lesion jomat thunfisch czart avih ^7heo __number5__ MuffinMedic Keverw Bureaucat royger jlyo scv greguu mattk tmh1999 s33se_ BitL0G1c andypost 2017-05-16 15:32:17 sparklyballs rivarun CcxWrk untoreh dikaio mmlb norii mitchty k0nsl kidneb Fishfish0001 johansglock triple systmkor_ ageis JStoker is_null IcePic ghavil hecliunyx sagebind ScrumpyJack Metacity TBB nsz mosez Kruge marcelius_ SirCmpwn codex Graypup_ Amplificator rotcpy bontibon algitbot telling 2017-05-16 15:32:17 grugly iron_houzi ddollar Sandlayth vifino darkfader dlewen chamunks nwmcsween coredumb qrwteyrutiy feepo odc Elizabeth Ganwell nightmared mitemite iamthemcmaster nshp reda Klowner saarg chris| xmux geekblogtv squaremo asie shodan45 programmerq systo hiro Janhouse ammunta wycats EnTeQuAk Chloe 2017-05-16 15:32:18 sigtrm nbastin ryanlelek asonge jcp___ zoidbergwill flyinprogrammer dalias robogoat pmcg trn StarWarsFan shansen goberle_ Wayward_One thebadshepperd nixdork rymax99_ mpapec Antarez hadret haarts dbarrett lonix nmeum colstrom saintdev grepory littleli Mo0O mepholic jcloud roolebo Peasant65 moul 2017-05-16 15:32:19 amosbird black_rez ericnoan irclogger_com bfritz TML leah2 jailbox das_ofce skee mauli YoursTruly radhus tg sigjuice James_T manacit_ stwa tdtrask skjoldr Spydemon TomJepp firstlast psychi[m] tobias1 hl ganlub dhole[m] julius_ ovf rafalcpp zopsi clandmeter ncopa tru_tru stateless peterrus z1mme 2017-05-16 15:32:20 hanez FierceDeityLink duncaen plow xsteadfastx k63ZXXguczqE andor2007 mbentley Nycatelos vaelen cartwright Bun alias__ joshwget Unode frew TemptorSent InAnimaTe Tritlo aemadrid kaniini_ sebumd arenstar switchy ryonaloli nepochal rnalrd afics atomi felixsanz Diftraku hackerhercules madknight 2017-05-16 15:32:20 lol 2017-05-16 15:32:23 wow 2017-05-16 15:32:27 lol 2017-05-16 15:32:33 the weechat bug? 2017-05-16 15:33:10 what did I miss? 2017-05-16 15:33:25 a bullet 2017-05-16 15:33:28 Kachel: it's a folder 2017-05-16 15:33:31 ACTION goes back to idling 2017-05-16 15:33:33 and there's a file for each user inside 2017-05-16 15:34:39 do you mean the "test"-user in the lectured folder? 2017-05-16 15:34:48 there should be 2017-05-16 15:34:56 I saw it 2017-05-16 15:35:51 alright 2017-05-16 15:35:58 is everybody awake? 2017-05-16 15:36:12 no 2017-05-16 15:36:33 maybe 2017-05-16 15:37:03 brutal.. 2017-05-16 15:37:45 they should've updated their irc client >_> 2017-05-16 15:38:10 But what should be added to the lbu-list when installing docker? 2017-05-16 15:38:20 no idea, sorry 2017-05-16 15:38:22 don't use either 2017-05-16 15:38:50 and with python? 2017-05-16 15:40:00 zzz 2017-05-16 15:55:44 What is EFknockr up to? Sending dcc to everyone? Lucky I am using irssi here. 2017-05-16 15:56:30 weechat was patched 2017-05-16 18:18:31 why have i been pinged ^ 2017-05-16 18:18:33 ? 2017-05-16 18:19:18 ?? 2017-05-16 18:19:55 <_ikke_> Peasant65: Someone trying to exploit vulnerable IRC clients 2017-05-16 18:20:22 oh.. which clients ? 2017-05-16 18:20:33 weechat 2017-05-16 18:20:38 <_ikke_> weechat had a recent vuln 2017-05-16 18:54:32 ah ok 2017-05-16 18:55:07 hey I got a question. I´m trying to install php7-gd on alpine 3.5 but i´m getting unstatisfyable dependencies 2017-05-16 18:55:23 so:libwebp.so.7 (missing): 2017-05-16 18:55:38 I´ve tried installing libwebp but that doesnt solve it. 2017-05-16 18:56:04 any idea on how to solve this without compiling packages myself ? 2017-05-16 18:56:18 I´d rather use apk to keep everything up-to-date 2017-05-16 19:00:59 pickfire: i don't like the development pace of current irssi (everything >=1.0) 2017-05-16 19:01:22 So gd needs libwebp.so.7 and libwebp provides libwebp.so.6 2017-05-16 19:01:46 any idea on how to fix this trough official channels ? 2017-05-16 19:01:58 pickfire: also they stopped listing the 0.8 branch on the download page 2017-05-16 19:02:19 pickfire: just after having to patch a vulnerability in the 1.0 branch 2017-05-16 19:02:53 It´s available in edge. Would you considder edge somewhat stable ? 2017-05-16 19:03:05 you can install just libwebp from edge at least 2017-05-16 19:03:09 or is edge really bleeding edge bughunting stuff ? 2017-05-16 19:05:48 Can I install only libwebp from edge and keep the rest on 3.5 ? 2017-05-16 19:06:10 see https://wiki.alpinelinux.org/wiki/Alpine_Linux_package_management#Repository_pinning 2017-05-16 19:07:05 ah great Bun ! 2017-05-16 19:12:59 why is half of the php7 modules in community not compatible without edge ?? 2017-05-16 19:13:13 Can´t even install mysqli/mysqlnd 2017-05-16 19:13:44 seems very odd indeed 2017-05-16 19:18:51 mysqli needs php openssl which needs libressl2.5, but c3.5 is only on 2.4 yet 2017-05-16 19:19:17 probably because it was built against edge 2017-05-16 19:19:29 it's community, not guaranteed to be correct or even functional 2017-05-16 19:19:42 <_ikke_> community should be stable 2017-05-16 19:19:57 <_ikke_> The only difference is that it has a shorter support cycle 2017-05-16 19:57:20 Afternoon. Did the "fonts-base" package get renamed / migrated to something else in 3.5? 2017-05-16 20:05:36 <_ikke_> was it part of testing? 2017-05-16 20:08:10 <_ikke_> Kruge: It has been moved to unmaintained 2017-05-16 20:09:48 Oh. That's not great. Thanks for the info though. 2017-05-16 20:09:53 Is there a replacement package? 2017-05-16 20:09:57 Sorry to bother you 2017-05-16 20:26:49 <_ikke_> I don't know, what did it provide? 2017-05-16 20:27:45 <_ikke_> Looks like just a meta-package (only has dependecies) 2017-05-16 20:28:54 <_ikke_> Kruge: apk add ttf-dejavu ttf-courier-prime ttf-heuristica ttf-liberation ttf-noto tf-symbola 2017-05-16 20:34:35 I got ping'd which means I have likely been pinged by a spambot. 2017-05-16 20:34:41 yep 2017-05-16 20:34:47 ACTION goes back to hiding. 2017-05-16 20:46:55 hey! I have a box with internal ipv4 and public ipv6. Can i configure apk to use ipv6 only ? 2017-05-16 20:47:37 ping6 google.com wors fine so the ipv6 is allready configured 2017-05-16 20:50:21 does alpine support ipv6 repo´s ? 2017-05-16 20:59:55 Does anyone have a good example of how to run java processes as a user other than root using openjdk:8-jre-alpine? I'm having a ton of issues, such as not allowing the java process to run as a port <1000, so I have to run setpcap, which creates an issue with libjli.so :/ 2017-05-16 21:03:13 <_ikke_> Peasant65: dl-cdn does support ipv6 2017-05-16 21:04:25 _ikke_, so what repo should i use ? 2017-05-16 21:04:37 Right now it´s by default on the netherlands 2017-05-16 21:04:42 <_ikke_> Peasant65: sorry, false positive, it returned a cname which has no AAAA record 2017-05-16 21:05:01 ah alright 2017-05-16 21:05:03 <_ikke_> iirc, they do not support ipv6 2017-05-16 21:05:18 i allready tried ping6ing dl-x but no luck 2017-05-16 21:05:23 oh well... 2017-05-16 21:05:41 <_ikke_> right 2017-05-16 21:57:26 Hello there, I'm trying to install Kodi, but theres no documentation how to run it 2017-05-16 21:58:00 I need to install some desktop system? before run Kodi? 2017-05-16 21:58:41 RomeuMello: what do you mean? 2017-05-16 21:59:39 Xe, I just installed Kodi, with apk add kodi, and also setup-xorg-base, but can't run Kodi 2017-05-16 21:59:52 define "can't run"? 2017-05-16 22:01:04 Error: Unable to create GUI. Exiting on segmentation fault 2017-05-16 22:01:21 so, theres some log 2017-05-16 22:02:02 if you run it from a terminal, what is the output? 2017-05-16 22:02:24 actually is from terminal 2017-05-16 22:02:36 yeah 2017-05-16 22:02:39 what is the output 2017-05-16 22:02:42 pastebin it 2017-05-16 22:02:57 log output? 2017-05-16 22:10:54 hey, how would I go about limiting bandwidth in alpine? I want to make sure that a certain ethernet interface doesnt upload with more than x kb/s 2017-05-16 22:12:46 I wanted to use trickle, but there is no package for it, and I am trying to keep my environment as easy reproduceable as possible, so I prefer no compling. 2017-05-16 22:14:14 sebumd: isnt that as easy as creating a new user, and then run su - thatuser -c "java bla bla" 2017-05-16 22:17:52 Xe, sorry I can't copy from virtualbox terminal 2017-05-16 22:18:29 RomeuMello: screenshot? something? 2017-05-16 22:20:12 yeah 2017-05-16 22:23:39 Xe, http://imgur.com/a/UFSEQ 2017-05-16 22:24:54 xe, continuing http://imgur.com/a/Zy3mm 2017-05-17 08:27:30 Anyone using alpine as their main system? As desktop 2017-05-17 08:28:15 yes 2017-05-17 08:31:37 yes 2017-05-17 08:31:46 :) 2017-05-17 08:32:28 yes 2017-05-17 08:32:29 :) 2017-05-17 08:37:15 How much drive space does it take? 2017-05-17 08:37:52 helpImStuck: yes 2017-05-17 08:38:39 depends on the amount of packages you install :) 2017-05-17 08:38:52 cool, I couldn't get the basic xorg nor the gparted to work.. guess i need to read more about it and study the logfiles 2017-05-17 08:39:49 I was planning to use alpine as a xen for virt-manager.. all the packages are there but i got i/o-errors creating vm:s 2017-05-17 08:39:50 there is quite a lot of into about setting up xorg on the forums, wiki and bug tracker 2017-05-17 08:40:58 okey :) 2017-05-17 08:41:07 can you create a xen-hvm by hand? does booting just an iso work? 2017-05-17 08:41:37 "alpine as a xen" do you mean dom0 or domU? 2017-05-17 08:41:42 or both 2017-05-17 08:42:15 there are a release of alpine built on xen 2017-05-17 08:42:36 alpine as dom0 2017-05-17 08:43:27 neat. it's excellent for that. 2017-05-17 08:44:18 and the edge repos has got the latest libvirt.. it should work just fine, but i can't find any howtos 2017-05-17 08:44:21 create a simple xen hvm domU config file to boot an iso, see if you get i/o errors 2017-05-17 08:44:53 Creating the config file in virt-manager 2017-05-17 08:46:06 i would recommend not using libvirt/virt-manager to start with. 2017-05-17 08:46:56 why? 2017-05-17 08:47:15 xl command stack in pythonscripts.. 2017-05-17 08:47:43 sure, there are some bugs. But yes, it's always better to do it from the ground up 2017-05-17 08:48:00 ground and up even 2017-05-17 08:48:52 if this is early days for you and xen, edit config files and use xl (xl doesn't have any python deps), you'll get a much better feel for how things work :) 2017-05-17 08:53:35 there are a few wiki entries here that may help https://wiki.alpinelinux.org/wiki/Tutorials_and_Howtos#Virtualization 2017-05-17 09:03:44 ScrumpyJack, been reading most of it and tried the alpine release with xen preinstalled 2017-05-17 09:06:29 https://wiki.alpinelinux.org/wiki/Xen_LiveCD this one 2017-05-17 09:23:15 perfect. install alpine-zen onto a usb stick or an SD card in run-from-ram mode. that way you can boot from it and use your hosts's storage with more freedom 2017-05-17 09:23:38 for your VMs 2017-05-17 09:26:08 take a look at https://wiki.alpinelinux.org/wiki/Create_a_Bootable_USB (the make-bootable way is prefered) and check out the alpinelinux specific features that are LBU and apkovl https://wiki.alpinelinux.org/wiki/Alpine_local_backup 2017-05-17 09:36:33 ScrumpyJack, thanks, very interesting 2017-05-17 09:43:20 ScrumpyJack, do i really need one cd-rom and one usb-stick? Or can i use 2 usb-sticks? 2017-05-17 10:09:00 hey, how would I go about limiting bandwidth in alpine? I want to make sure that a certain ethernet interface doesnt upload with more than x kb/s 2017-05-17 10:10:29 as in any other os, use tc 2017-05-17 10:10:48 s/os/distro/ 2017-05-17 11:14:17 helpImStuck: you need one USB stick only. make it bootable with alpine-xen, boot from it, run setup-alpine and choose data with cache on usb 2017-05-17 11:16:22 peterrus: for traffic shaping in linux, take a look at tc. It's quite a complext tool, but it's traffic shaping is quite a complex topic 2017-05-17 11:16:43 arg, should have read hiro's response 2017-05-17 11:17:43 here is a good place to start http://lartc.org/ 2017-05-17 11:27:20 ScrumpyJack, followd the links you sent and got alpine xen installed from one usb drive to another 2017-05-17 11:27:25 greate succcess 2017-05-17 11:29:55 waste of time? 2017-05-17 11:31:09 And the keymap does not stick.. i have to change it on every boot.. it's been one of the major things for me.. how can i make it stick? 2017-05-17 11:32:32 helpImStuck: set keymap in /etc/onf.d/keymaps and enable the keymaps service (just guessing)? 2017-05-17 11:45:29 it's still a jungle for me.. 2017-05-17 12:28:14 helpImStuck: can you try adding rc_sys="xen0" to /etc/rc.conf for the keymap issue? 2017-05-17 12:30:17 if you are booting from the USB and running from ram, run setup-apkcache and setup-lbu first, then remember to run lbu commit before each reboot 2017-05-17 12:38:03 i did a sys install for now. i'll try to add it 2017-05-17 12:39:27 ScrumpyJack, we'll see if it works 2017-05-17 12:42:25 lol, get an error message /etc/rc.d.conf line 200 syntax error unexpected "in" 2017-05-17 12:42:46 and now i can't edit the file, it tells me it's unwriteble 2017-05-17 12:43:12 :) 2017-05-17 12:44:34 read only filesystem 2017-05-17 12:47:01 Is there an Alpine equivalent for the linux file command? https://linux.die.net/man/1/file 2017-05-17 12:48:28 <_ikke_> Guest80397: There is a file package 2017-05-17 12:48:31 <_ikke_> https://pkgs.alpinelinux.org/packages?name=file&branch=&repo=&arch=&maintainer= 2017-05-17 12:51:00 Thanks - when I try `apk add file` I get an error: 2017-05-17 12:51:03 ERROR: unsatisfiable constraints: file (missing): required by: world[file] 2017-05-17 12:51:28 <_ikke_> Guest80397: What version of alpine are you on? 2017-05-17 12:52:09 <_ikke_> And what repositories do you have enabled 2017-05-17 12:53:46 3.4.6 2017-05-17 12:59:50 Guest80397: try apk update && apk add file 2017-05-17 13:00:11 will do, thanks 2017-05-17 13:11:32 ScrumpyJack, i fixed the keymap problem.. i had to ad the whole path to the keymap file in rc.local.. KEYMAP=/etc/keymaps/keymap.. 2017-05-17 13:27:04 <_ikke_> It looks like 3.4 on dl-cdn does not have a file package 2017-05-17 13:28:00 <_ikke_> Oh, it does 2017-05-17 13:39:45 helpImStuck: nice 2017-05-17 13:41:04 helpImStuck: if you feel generous, you could add an entry in the FAQ pages of the wiki. that problems comes up a lot https://wiki.alpinelinux.org/wiki/Alpine_Linux:FAQ 2017-05-17 13:45:23 ScrumpyJack, i'll do it after dinner :) 20 min or so.. brb 2017-05-17 13:58:48 ScrumpyJack, do i need to register to change the text? 2017-05-17 14:32:43 ScrumpyJack, It's better you do it, if you have access. When the keymap is selected either by setup-alpine of setup-keymap it will be available in /etc/keymap/yourkeymap. To make alpine use your newly downloaded keymap you need to edit /etc/rc.local and put KEYMAP=/Full/path/to/keymapfile . And that should do it. :) 2017-05-17 14:33:26 helpImStuck: setup-keymap should also update your /etc/conf.d/keymaps 2017-05-17 14:33:30 no need to edit /etc/rc.local... 2017-05-17 14:34:46 but that is the only way to get the right keymap after a reboot 2017-05-17 14:34:51 for me 2017-05-18 07:06:45 Hi, I need a little help :) 2017-05-18 07:07:14 I'm trying to install the VirtualBox Guest Additions in an Alpine installation. 2017-05-18 07:07:31 I'm stuck at trying to mount the Guest Utils CD. 2017-05-18 07:10:30 Hum... strange... it wasn't working, but now it did. I don't know what I've done differently :-S 2017-05-18 11:50:58 this jannisch guy on the forums is quite wrong about linux-libre 2017-05-18 11:51:07 it's actively maintained 2017-05-18 11:51:17 latest release was this month 2017-05-18 11:51:42 there was also release 15 days before his comment 2017-05-18 11:52:00 how is that "outdated"? 2017-05-18 21:21:38 hello, I have a reproductible segfault with `apk` 2017-05-18 21:21:44 https://paste.debian.net/933111/ 2017-05-18 21:31:31 solved by `mount -o remount,rw /media/mmcblk0p1/` 2017-05-18 21:33:22 jvoisin: ls -al /etc/apk | grep cache 2017-05-18 21:34:16 lrwxrwxrwx 1 root root 22 Jan 1 1970 cache -> /media/mmcblk0p1/cache 2017-05-18 21:34:47 k.. thanks.. 2017-05-18 21:34:53 i'll look into fixing it in a bit 2017-05-18 21:35:42 wonderful ♥ 2017-05-18 21:46:58 yet another alpine-powered tor relay :) 2017-05-18 23:13:58 is the index down? ERROR: http://dl-cdn.alpinelinux.org/alpine/v3.5/main: temporary error (try again later) 2017-05-18 23:23:30 Anyone know when alpine will have a kernel with Ryzen support? I'm looking for a new distro. 2017-05-18 23:24:58 does ryzen require specific support? 2017-05-18 23:25:04 if so, do you have a kernel version? 2017-05-18 23:25:16 4.10 I think. 2017-05-18 23:25:41 I doubt it will be backported 2017-05-18 23:26:04 hmm 2017-05-18 23:26:14 alpine 3.6 is scheduled to ship with 4.9 and for various reasons that is unlikely to change 2017-05-18 23:26:29 Looks like it was backported to 4.9.10 2017-05-18 23:26:37 then it's fine 2017-05-18 23:26:42 currently edge ships 4.9.28 2017-05-18 23:26:52 so with alpine 3.6 out you will be fine 2017-05-18 23:27:10 Is that because the Grsec patches are going subscription only after 4.9? 2017-05-18 23:27:23 yes 2017-05-18 23:27:28 among others 2017-05-18 23:29:37 Is 3.6 coming soon (tm) or is it going to be a few months? 2017-05-18 23:30:22 think within a week 2017-05-18 23:30:24 likely 2017-05-18 23:31:49 I'll just run 3.5 till then, Ryzen does work(ish) just not very well. But I can live with weird scheduling till then. 2017-05-18 23:31:50 at least the rcs 2017-05-18 23:31:54 Thanks for the help. 2017-05-18 23:32:01 no prob 2017-05-18 23:32:27 See you fellow mountaineers' 2017-05-18 23:32:34 .o7 2017-05-19 10:19:56 Any idea why I can't install this package: https://pkgs.alpinelinux.org/package/edge/community/x86_64/vnstat 2017-05-19 10:20:04 apk search vnstat does not find it. 2017-05-19 10:20:35 are you using edge? 2017-05-19 10:22:02 VERSION_ID=3.4.6 2017-05-19 10:22:18 Guess I don't 2017-05-19 10:22:27 the link you posted is an edge packae 2017-05-19 10:22:29 package 2017-05-19 10:22:42 right now vnstat is only in edge 2017-05-19 10:22:49 it will be in 3.6 when it releases in a short while 2017-05-19 10:22:50 Ah 2017-05-19 10:22:55 we're tagging 3.6rc1 today, i think? 2017-05-19 10:23:16 Is there any way to install it right now? 2017-05-19 10:23:31 yeah, you can update to edge :P 2017-05-19 10:23:42 in the case of vnstat, you can add the community repo as a tagged one 2017-05-19 10:24:00 add @edge-community http://nl.alpinelinux.org/alpine/edge/community to /etc/apk/repositories 2017-05-19 10:24:05 apk -U add vnstat@edge-community 2017-05-19 10:24:16 that prevents you from having to update your entire system to edge, but it may also not work 2017-05-19 10:24:26 if it doesn't, updating your system to edge is the only way 2017-05-19 10:25:09 or to 3.6 when it's released, of course 2017-05-19 10:25:16 https://wiki.alpinelinux.org/wiki/Edge 2017-05-19 10:27:38 ERROR: http://nl.alpinelinux.org/alpine/edge/community : No such file or directory 2017-05-19 10:27:54 I followed your steps up to apk -U add vnstat@edge-community 2017-05-19 10:29:07 it seems you added a space at the end 2017-05-19 10:29:11 don't :P 2017-05-19 10:31:17 hallelujah! Thanks. 2017-05-19 10:44:24 is there any recommended/standard method for caching packages in the network? 2017-05-19 10:45:14 for a single machine or multiple? 2017-05-19 10:45:50 http proxy? 2017-05-19 10:45:55 setup-apkcache will set up local apk cache 2017-05-19 10:46:37 for multiple machines 2017-05-19 10:46:50 you can also set up a local caching reverse proxy (varnish/nginx) and use that as your repository 2017-05-19 10:47:09 http proxy is a problem because stale-if-error doesn't work all that well (and the internet-draft seems to have died anyhow) 2017-05-19 10:47:35 hrm, varnish is not something I have tried 2017-05-19 10:48:11 will it serve cached content if offline? 2017-05-19 10:48:25 depends on your setup i suppose 2017-05-19 10:48:27 (trying to get something as close to the behaviour of apt-cacher-ng as possible, generally) 2017-05-19 10:48:44 I was using squid but if the network drops or is flaky it won't serve the content 2017-05-19 10:48:56 as it still tries to HEAD for the cache date 2017-05-19 10:49:34 alternatively possibly I should just have a local mirror, but I was hoping to build it up on demand.. :-) 2017-05-19 10:51:06 yes i understand your problem and im a bit interested in something similar myself 2017-05-19 10:51:33 shouldnt be too hard to implement something with nginx or similar 2017-05-19 10:51:56 but then again, a caching reverse proxy might to the job aswell 2017-05-19 10:52:22 and then I guess I need to wrap apk in something that sets the http_proxy env var? 2017-05-19 10:52:33 no 2017-05-19 10:52:37 (I don't want the proxy used for anything other than packages) 2017-05-19 10:52:57 I couldn't find any way to configure it system wide, maybe I missed something 2017-05-19 10:52:57 you just add your varnish ip to /etc/apk/repository, as if it was a mirror 2017-05-19 10:53:56 has anyone tried to use alpine in a lxd container on, let's say an ubuntu server host? 2017-05-19 10:54:17 you configure varnish or ngingx as reverse proxy, enable caching, then use an alpine mirror close to you as backend 2017-05-19 10:54:22 >let's say an ubuntu server host? 2017-05-19 10:54:29 are there any alternatives 2017-05-19 10:54:36 and you use your reverse proxy as repo mirror 2017-05-19 10:54:37 it's not packaged for anything else afaik 2017-05-19 10:54:41 Tsutsukakushi, yes there are. arch for example 2017-05-19 10:54:46 ncopa: and then...dig into the iso to change the repo list in it? I guess probably 2017-05-19 10:55:37 nbastin: you add your "mirror" (cache) to /etc/apk/repositories 2017-05-19 10:55:47 helpImStuck: https://www.archlinux.org/packages/?sort=&q=lxd&maintainer=&flagged= 2017-05-19 10:55:59 orly? 2017-05-19 10:56:26 ncopa: i think probably I have two problems - one is automated disk install, and one is cached packages, and probably trying to solve them both at once is problematic 2017-05-19 10:56:33 Tsutsukakushi, https://wiki.archlinux.org/index.php/LXD 2017-05-19 10:56:37 helpImStuck: i am using alpine in a lxc container on ubuntu on ppc64le and s390x currently, so yes it works 2017-05-19 10:56:45 i havent tried lxd though 2017-05-19 10:56:57 >AUR 2017-05-19 10:57:36 lxd -should- make the config of the containers easier but it's still new and too little documentation yet 2017-05-19 10:57:41 lxc-alpine template that doesn't require root would be nice 2017-05-19 10:57:49 i htink we even have lxd for alpine 2017-05-19 10:57:49 ncopa: I need to have the iso install leave me with a system (which I can't really reach anymore) that is properly configured to use the cache, which is why the transparent proxy was appealing 2017-05-19 10:57:50 Tsutsukakushi, aur is a big part of arch ;) 2017-05-19 10:57:51 "new" 2017-05-19 10:58:29 the reason lxd lacks documentation is that almost no one uses it 2017-05-19 10:58:29 as a result of it not being packaged for almost any distro 2017-05-19 10:58:44 i wouldn't install something like that from AUR 2017-05-19 10:58:44 debian still has no lxd package 2017-05-19 10:58:54 lxd is a failed project 2017-05-19 11:01:34 Tsutsukakushi, lxd 2.13 is the latest stable.. it's a headache-project.. I wanted to create a vpn as router with dnscrypt-proxy and make it give out dns and ip via dhcp to other containers but after some days playing around with it, it seams possible but it would take too many hours 2017-05-19 11:03:09 it's better i modify esxi 6.5 to have support for my old nics than playing around with other "solutions".. 2017-05-19 11:05:02 alpine with xen and libvirtd was one of my projects 2017-05-19 11:05:26 Couldn't get it to work as i wanted. With virt-manager.. 2017-05-19 11:09:31 It would be a perfect setup using alpine with xen and openbox+virt-manager but xorg did not start for me.. and i couldn't find a fix for it 2017-05-19 23:27:57 php-pgsql (missing): \n required by: world[php-pgsql] 2017-05-19 23:28:18 Why is it not working finding this package... https://pkgs.alpinelinux.org/package/v3.3/main/x86/php-pgsql 2017-05-19 23:28:28 Its sitting right there for all 3 architectures... 2017-05-19 23:29:52 because you're looking at a package for alpine v3.3 2017-05-19 23:30:10 it was renamed to php5-mysql / php7-mysql depending on your php version 2017-05-19 23:30:19 in v3.4+ 2017-05-19 23:30:35 mysql for pgsql? 2017-05-19 23:30:52 sorry 2017-05-19 23:30:54 I suppose I could try php7-pgsql 2017-05-19 23:30:57 php5-pgsql / php7-pgsql 2017-05-19 23:31:28 basically the same issue. http://i.imgur.com/6PiB1aE.png 2017-05-19 23:32:14 do you have the community repository enabled? 2017-05-19 23:32:19 grep community /etc/apk/repositories 2017-05-19 23:32:29 actually, 2017-05-19 23:32:35 I've not changed anything from this container yet. 2017-05-19 23:32:40 if you didn't you couldn't have installed php7 2017-05-19 23:32:46 so are you sure php7 is your installed php version :p 2017-05-19 23:32:59 a bare container does not have the community repo enabled, i think -- lemme check 2017-05-19 23:33:05 http://i.imgur.com/8U1X3zr.png 2017-05-19 23:33:18 oh, it does 2017-05-19 23:33:22 its not bare its someone elses container I'm just trying to get a Laravel project going. 2017-05-19 23:33:45 grep pgsql /etc/apk/world ? 2017-05-19 23:34:13 it returned with php-pgsql 2017-05-19 23:34:26 seems kind of odd. 2017-05-19 23:34:29 somehow that made its way into your world file 2017-05-19 23:34:36 remove it from there, then just # apk add php7-pgsql 2017-05-19 23:34:40 I might have -f'd it 2017-05-19 23:39:00 okay so it seems to have accepted that. 2017-05-19 23:39:07 :) 2017-05-19 23:39:23 Now on to bigger and better problems to smash through. 2017-05-20 00:36:08 Is there a new name that I need to look for to obtain pdo_pgsql? 2017-05-20 00:36:39 http://pkgs.alpinelinux.org or # apk search 2017-05-20 00:36:40 :P 2017-05-20 00:38:27 searching "pgsql" with a pile of settings on that seems to be just coming up empty. 2017-05-20 00:39:46 even just searching for php I'm not getting anything even in incognito 2017-05-20 00:40:00 ah nvm its like an oldschool search gotcha 2017-05-20 00:40:14 sorry I'll rewind my brain a little and do some digging. 2017-05-20 00:40:37 got it 2017-05-20 00:40:37 php7-pdo_pgsql 2017-05-20 00:40:53 :) 2017-05-20 00:40:57 apk search doesn't need wildcards btw 2017-05-20 00:41:08 fair enough. 2017-05-20 00:41:15 and it has the advantage of automatically filtering your repo/arch as it searches your local cache 2017-05-20 00:41:26 theres too many package managers I have to keep track of and all of their syntax. 2017-05-20 00:41:33 understandable 2017-05-20 00:41:51 apk, apt, yum, brew, bleh... 2017-05-20 00:42:07 I won't forget that one though ty 2017-05-20 00:42:21 dnf, yast, pkg, nix 2017-05-20 00:42:25 :P 2017-05-20 00:42:32 pkg almost forgot bsd 2017-05-20 00:42:45 heard of yast no idea where its for and dnf and nix idk 2017-05-20 00:43:11 dnf is the replacement for yum 2017-05-20 00:43:13 yast is opensuse 2017-05-20 00:43:33 nix is for nixos, it's a bit special 2017-05-20 00:45:13 I'm slightly annoyed at the https://nixos.org expansion on "Declarative" it makes it seem like it's going to elaborate on what they mean and in the first sentence they just say the same thing their tagline says at the top of the page. 2017-05-20 00:45:33 Still kinda neat though. 2017-05-20 00:52:49 chamunks: i played with nixos/nixops a bit in 2015, it's great fun from an admin point of view 2017-05-20 00:53:32 darkfader I'm watching https://www.youtube.com/watch?v=YbUPdv03ciI while I work on this container. I'm looking to personally work on moving towards rancher/rancherOS 2017-05-20 00:53:38 some systems of this kind force you to use their model everywhere and have limited features, so you'll not even be stuff you did as a junior admin 2017-05-20 00:54:09 but in nixos you can still (properly, no wild bash scripts or other hacks as a dockerfile i.e. could have) 2017-05-20 00:54:22 ... declare what you want if they didn't foresee it 2017-05-20 00:54:28 so you don't feel patronized using it 2017-05-20 00:54:45 rancher i think is good, but didn't get close to trying yet 2017-05-20 00:55:46 darkfader Someone installed nix into an alpine container on hub.docker.com 2017-05-20 00:56:03 ah 2017-05-20 00:56:17 I just like rancher to an extent because I just want microservices and the OS to stay out of my way mostly. Then I build the containers I deploy on Alpine 2017-05-20 00:59:04 ... which is also good at staying out of the way, it seems a good plan :) 2017-05-20 01:01:57 For the most part I just want an ultra lean no features added platform underneath exactly what I want and nothing more. 2017-05-20 01:01:59 ideally. 2017-05-20 01:02:28 I'm old enough to remember when you would avoid doing something on the off chance that it might use too much resources. 2017-05-20 01:18:17 darkfader thanks for the vouch on it though I'll look it over, it never hurts to learn a better way to get good reproducibility. Its why I took the time to learn Salt-Stack 2017-05-20 01:19:06 i just run alpine as my container host 2017-05-20 01:19:14 i see no reason to use anything else personally :P 2017-05-20 08:45:46 i try to install zeromq on alpine 3.4 docker container, but get this error ERROR: unsatisfiable constraints: zeromq-4.1.4-r0 (missing): required by: world[zeromq-4.1.4-r0] 2017-05-20 08:45:52 i did an apk update before thate 2017-05-20 11:10:29 Hello... 2017-05-20 11:11:47 I installed 'libreswan' which provides '/etc/init.d/ipsec' - but when I boot my firewall, I get an error 'Error: ipsec is the name of a real and virtual service' - it still says '[ ok ]', but it isn't really started. 2017-05-20 15:36:29 huh, just realized a drawback of using libressl is that it lacks curve25519 support 2017-05-20 15:56:17 lxGzx53qO34r: it doesn't, as far as I know? 2017-05-20 15:56:26 curve25519 is part of libressl's libcrypto 2017-05-20 16:01:52 `openssl ecparam -list_curves` does not list any of the djb curves 2017-05-20 16:04:33 while openssl-1.1.0 does 2017-05-20 16:40:39 seems like it lacks integration then i suppose 2017-05-20 18:34:00 I would like to use Alpine to build a small Virtual Machine to be used as routing host toward a specific VPN (IPSec), so I need vpnc which I believe is not available via apk. I tried compiling it directly but I don't know which are the needed packages. I installed gcc and make, but something is still missing as I get "fatal error: unistd.h: No such file or directory". any hint? 2017-05-20 18:35:00 <_ikke_> alpine-sdk (or build-base) gives you all the build tools 2017-05-20 18:35:39 <_ikke_> linux--dev should give you the header files 2017-05-20 18:35:46 <_ikke_> mcon: I would recommend building it as a package 2017-05-20 18:36:29 <_ikke_> mcon: https://www.unix-ag.uni-kl.de/~massar/vpnc/ this is what you try to build? 2017-05-20 18:53:44 _ikke_: https://github.com/solarsea/vpnc 2017-05-20 18:54:34 _ikke_: ... which I think it's pretty much the same. 2017-05-20 18:55:11 _ikke_: I have no experience in building ALpine packages. 2017-05-20 18:58:12 <_ikke_> It's not that hard 2017-05-20 18:58:26 _ikke_: pointers? 2017-05-20 18:58:52 <_ikke_> https://wiki.alpinelinux.org/wiki/Creating_an_Alpine_package 2017-05-20 18:59:23 _ikke_: what should I put as ""? "virtual" is not accepted. 2017-05-20 19:01:15 <_ikke_> good question, it does not seem to exist 2017-05-20 19:02:29 ? 2017-05-20 19:04:06 <_ikke_> kernel flavor 2017-05-20 19:04:21 why is that needed? 2017-05-20 19:04:37 why/where 2017-05-20 19:04:41 <_ikke_> Shiz: he wants to compile vpnc 2017-05-20 19:04:43 Shiz: _ikke_ suggested me: linux--dev should give you the header files 2017-05-20 19:04:44 <_ikke_> but linux-headers has it 2017-05-20 19:04:54 oh 2017-05-20 19:05:02 <_ikke_> https://pkgs.alpinelinux.org/contents?file=unistd.h&path=&name=linux-headers&branch=v3.5&repo=main&arch=x86_64 2017-05-20 19:05:40 _ikke_: thanks. trying... 2017-05-20 19:05:45 yes don't ever use linux--dev 2017-05-20 19:05:50 unless you're compiling kernel modules 2017-05-20 19:05:58 <_ikke_> ah ok 2017-05-20 19:09:21 Grrr... still something is amiss: /usr/include/netinet/if_ether.h:97:8: error: redefinition of 'struct ethhdr' 2017-05-20 19:10:49 Any hint ? 2017-05-20 19:11:19 ah that's a known issue 2017-05-20 19:11:30 it's because the linux headers can be somewhat wonky w.r.t. userspace headers 2017-05-20 19:11:33 let me dig up the fix you need to apply 2017-05-20 19:16:23 mcon: this fix: 2017-05-20 19:16:27 https://lists.gt.net/vpnc/devel/4166?page=last 2017-05-20 19:18:30 <_ikke_> mcon: http://lists.busybox.net/pipermail/buildroot/2016-February/152499.html 2017-05-20 19:18:35 <_ikke_> just ran into this 2017-05-20 19:22:23 yeah that patch includes the one i linked 2017-05-20 19:35:25 <_ikke_> right, but there are more 2017-05-20 19:35:31 <_ikke_> error.h is also missing 2017-05-20 19:37:02 _ikke_: That should be fixed by the git repo I linked before. 2017-05-20 19:37:16 <_ikke_> ah ok, I switched to the original one 2017-05-20 19:37:28 <_ikke_> but both had the same tags 2017-05-20 19:39:23 _ikke_: I'm a bit confused. The patch You linked is for Buildroot. How does that relate to Alpine? 2017-05-20 19:40:41 <_ikke_> mcon: musl fixes 2017-05-20 19:40:48 <_ikke_> both use musl apparently 2017-05-20 19:44:17 _ikke_: Yup, but there's a big difference (IMHO): Buildroot is a cross-compilation environment and has *no* compilation capability on target, while Alpine is a "normal" distribution and I'm trying to compile natively. I fear I will have to apply the patches manually. I'm surprised they are not applied "upstream" (i.e.: in the Alpine distribution). 2017-05-20 19:45:19 ? 2017-05-20 19:45:30 these are patches for vpnc 2017-05-20 19:45:33 not for alpine 2017-05-20 19:48:28 Shiz: Ok. I see. Unfortunately they are patches adding patches to Buildroot package definition for vpnc, so I can't use them "as is", but I know what to do. thanks doe the clarification. 2017-05-20 19:48:57 doe -> for 2017-05-20 19:49:00 there are two patches for vpnc itself in there 2017-05-20 19:49:28 actually 2017-05-20 19:49:31 it seems like they took these patches fom us 2017-05-20 19:49:33 ... 2017-05-20 19:49:49 mcon: https://git.alpinelinux.org/cgit/aports/tree/unmaintained/vpnc 2017-05-20 19:49:50 Shiz: ? 2017-05-20 19:49:56 seems like we already have vpnc in unmaintained 2017-05-20 19:50:11 it would be easier for you to update it and submit a PR including the updates and moving it to tesing 2017-05-20 19:50:12 testing 2017-05-20 19:50:14 :) 2017-05-20 19:50:32 ah, but it's also already the latest 2017-05-20 19:50:35 i wonder why it got moved to unmaintained 2017-05-20 19:51:01 okay, it was part of a mass update 2017-05-20 19:51:06 i'll moderqnize the APKBUILD and put it back 2017-05-20 19:51:11 Shiz: sorry, I don't follow You. 2017-05-20 19:51:32 we already have a recipe for vpnc, it was just moved to the unmaintained section for some reason 2017-05-20 19:51:36 and thus not included in alpine anymore 2017-05-20 19:51:51 seems like including it is as simple as moving it back, and modernizing the recipe a bit 2017-05-20 19:51:51 Shiz: Please remember it's the first time I use Alpine. 2017-05-20 19:53:08 Shiz: Are You suggesting I should wait for the update and drop my recompilation attempts? 2017-05-20 19:53:20 I'm going to push it now, actually 2017-05-20 19:53:22 :P 2017-05-20 19:54:06 mcon: yeah, it turns out we already have a working package for vpnc 2017-05-20 19:54:19 it was just not included in the main repositories anymore because it was bogusly flagged as unmaintained 2017-05-20 19:54:21 does that make sense? 2017-05-20 19:54:30 Shiz: What does it mean to me? Should I retry a "apk add vpnc"? 2017-05-20 19:54:49 as soon as I push the package back to the repos, yes 2017-05-20 19:55:37 Shiz: Ok. I get you (I think). How much time it will need to propagate? 2017-05-20 19:55:49 a few minutes once i push it 2017-05-20 19:56:00 testing it right now 2017-05-20 19:56:55 Shiz: Ok. thanks. Just let me know when I can try. In the meantime I will revert to the snapshot before my attempts. 2017-05-20 20:26:17 mcon: it should be in the testing repository now 2017-05-20 20:26:21 make sure to enable it 2017-05-20 20:35:23 I have "http://dl-5.alpinelinux.org/alpine/edge/testing" now, but: "ERROR: unsatisfiable constraints: vpnc (missing): required by: world[vpnc]" 2017-05-20 20:35:43 and you ran apk update after adding it? 2017-05-20 20:36:15 <_ikke_> You need to add your own repository 2017-05-20 20:36:33 <_ikke_> juist building a package does not make it available to apk 2017-05-20 20:39:43 scv: yes, I did. 2017-05-20 20:40:09 _ikke_: i just pushed it to testing 2017-05-20 20:40:10 _ikke_: I have no repo. Shiz did the hard work ;) 2017-05-20 20:40:11 so no he doesn't :P 2017-05-20 20:40:21 mcon: try rsync instead of dl-5 2017-05-20 20:40:26 in your repos file for testing 2017-05-20 20:40:30 it may take a bit to propagate... 2017-05-20 20:42:40 Shiz: ok. I got it! THANKS. Now I "just" have to make it work ;) 2017-05-20 20:42:49 :) good luck 2017-05-21 02:11:59 trying to figure out libvirtd.... anyone know if it *requires* dbus? 2017-05-21 02:15:11 looking thru its logs, it's not entirely clear if it can live without it 2017-05-21 04:07:18 shodan45 - libvirt needs dbus-libs in alpine https://pkgs.alpinelinux.org/package/edge/main/x86_64/libvirt - arch has dbus as a depends too 2017-05-21 12:31:45 are there any howto's on how to user alpine xen to virtualize other os:es? 2017-05-21 18:39:38 Doe anybody tried Xen over Alpine? 2017-05-21 18:41:49 <_ikke_> Probably, but not me 2017-05-21 19:15:16 johefernan: what do you mean over alpine? 2017-05-21 19:15:31 i have dom0 and domU in alpine, although only one host these days 2017-05-21 19:35:31 darkfader: There' s a build-in support for Xen Hypervisor 2017-05-21 19:35:38 https://nl.alpinelinux.org/alpine/v3.5/releases/x86_64/alpine-xen-3.5.2-x86_64.iso 2017-05-21 19:36:28 is there 2017-05-21 19:36:31 ... 2017-05-21 19:36:51 normally i don't use the iso but install xen after successful install 2017-05-21 19:36:56 you can try the iso 2017-05-21 19:37:06 the -xen iso isn't that different from the normal one afaik 2017-05-21 19:37:25 i thought it boots to ram or so 2017-05-21 19:37:31 it just has a bunch of packages pre-installed 2017-05-21 19:37:33 all isos boot to ram 2017-05-21 19:37:34 ah 2017-05-21 19:37:35 :P 2017-05-21 19:37:38 Exactly 2017-05-21 19:37:40 Ok 2017-05-21 19:37:41 true :) 2017-05-21 19:37:49 Deal is I wanna try alpine 2017-05-21 19:37:54 And Xen 2017-05-21 19:37:59 1 shot u know 2017-05-21 19:38:45 I got a PowerEdge R320 to play with 2017-05-21 19:38:56 go for it :p 2017-05-21 19:56:45 Is there a way to give an OpenRC service more time to shutdown? 2017-05-21 19:57:37 I have a daemon program that wen I shut it down, it takes some seconds, but rc-service restart complaints that it fails to shut down after 3 seconds or so 2017-05-21 19:57:47 Can I increase that time somehow? 2017-05-21 19:59:32 hmm 2017-05-21 19:59:49 I guess with start-stop-daemon args 2017-05-21 20:00:00 Shiz, where can I find the default ones? 2017-05-21 20:00:25 i think you can set retry= 2017-05-21 20:00:30 in /etc/conf.d/ 2017-05-21 20:00:46 in seconds 2017-05-21 20:01:00 retry Retry schedule to use when stopping the daemon. It can 2017-05-21 20:01:02 either be a timeout in seconds or multiple 2017-05-21 20:01:04 signal/timeout pairs (like SIGTERM/5). 2017-05-21 20:01:06 from the openrc-run manpage 2017-05-21 20:01:08 yeah start-stop-daemon has --retry 2017-05-21 20:01:16 oh 2017-05-21 20:01:21 you don't need to set start-stop-daemon args manually 2017-05-21 20:01:22 retry=[time] ? 2017-05-21 20:01:25 just set retry and openrc will take care of it 2017-05-21 20:01:27 :) 2017-05-21 20:01:35 yeah i believe so 2017-05-21 20:02:15 Shiz, where can I find documentation on those openrc service variables? 2017-05-21 20:02:21 man openrc-run 2017-05-21 20:02:52 awesome 2017-05-21 20:02:54 thanks a lot 2017-05-21 20:03:08 in the openrc-doc package, fwiw 2017-05-21 20:03:10 np 2017-05-21 20:06:22 I man in google here, don't have man installed on the machine :) 2017-05-21 20:06:42 yeah i usually do something similar, because lazy 2017-05-21 20:06:47 but local manpages may be more uptodate :p 2017-05-21 20:57:14 what's the difference between qemu-$arch and qemu-system-$arch? 2017-05-21 20:57:46 is qemu-system-$arch for VM "clients"? 2017-05-21 20:58:13 I just installed it, and it installed wayland(?!) 2017-05-21 20:59:19 and, well... this should be obvious :/ 2017-05-21 20:59:34 qemu-system is full system emulation while qemu- is just processor emulation for binaries 2017-05-21 21:05:34 i... dont think it should install wayland? 2017-05-21 21:14:12 scv: that's what I assumed at first 2017-05-21 21:16:18 but.... https://pastebin.mozilla.org/9022324 2017-05-21 21:16:30 also added alsa-lib 2017-05-21 21:16:39 mesa-gbm 2017-05-21 21:16:45 .... weird 2017-05-21 21:18:20 looks like mesa-gbm is to blame for req'ing wayland 2017-05-21 21:20:37 I'm trying to set up an OpenVPN and I get ERROR: Linux route add command failed: external program exited with error status: 2 2017-05-21 21:20:48 Is this because there is a package missing maybe? 2017-05-21 21:22:54 stevenroose: maybe - I would guess that "route" is symlinked to busybox? 2017-05-21 21:23:07 I bet openvpn needs the real route 2017-05-21 21:24:07 hmm 2017-05-21 21:24:30 which route gives /sbin/route 2017-05-21 21:24:48 route --help gives BusyBox v1.25.1 (2016-10-26 16:15:20 GMT) multi-call binary. 2017-05-21 21:24:53 :) 2017-05-21 21:25:09 ah, it's because of the SPICE stuff 2017-05-21 21:25:17 stevenroose: yeah you want uhm 2017-05-21 21:25:29 net-tools? 2017-05-21 21:25:29 net-tools 2017-05-21 21:25:32 :P 2017-05-21 21:27:14 net-tools package? 2017-05-21 21:27:53 getting the same error, does it require a reboot? 2017-05-21 21:28:03 no 2017-05-21 21:28:25 try /bin/route/ 2017-05-21 21:28:31 try /bin/route 2017-05-21 21:28:56 may need to unlink /sbin/route or fixup PATH 2017-05-21 21:28:56 ncl, thing is, I'm not using it 2017-05-21 21:29:18 is there a doc somewhere that lists packages like net-tools and procps? stuff to make alpine more heavy-weight & more like a "normal" distro? 2017-05-21 21:29:19 i just execute `sudo openvpn vpnconfig.ovpn` 2017-05-21 21:30:33 don't get me wrong, I love alpine's light-weight-ness :) 2017-05-21 21:30:54 but I'm used to centos :) 2017-05-21 21:32:34 shodan45, there are separate installation "bundles" iirc 2017-05-21 21:32:56 stevenroose: you mean ISOs? 2017-05-21 21:33:10 or like a meta-package? 2017-05-21 21:33:13 shodan45, uhu, from minimal to somewhat complete distro :p 2017-05-21 21:34:38 https://alpinelinux.org/downloads/ 2017-05-21 21:38:19 shodan45, if openvpn needs a different route, how can that be fixed? 2017-05-21 21:38:52 lrwxrwxrwx 1 root root 12 Apr 12 18:01 /sbin/route -> /bin/busybox 2017-05-21 21:39:06 I installed net-tools 2017-05-21 21:40:11 fwiw /sbin/route has been deprecated for like ... 15 years? 2017-05-21 21:40:48 stevenroose: just rm /sbin/route.... but busybox's package will re-add it later..... hmm :/ 2017-05-21 21:41:26 IIRC I ran into this problem with something else busybox does 2017-05-21 21:41:35 ohh... it was top 2017-05-21 21:42:29 it's weird that I cannot find anything about this on google, no? 2017-05-21 21:42:37 scv, what do you mean with deprecated? 2017-05-21 21:43:16 There is no manual route command in the OpenVPN file, so it must be one of the standard procedures that openvpn does.. 2017-05-21 21:43:32 I have no prior experience with setting up a vpn in linux 2017-05-21 21:45:11 then openvpn uses deprecated tools 2017-05-21 21:45:13 :P 2017-05-21 21:45:21 # route has been superceded by # ip route for a good 10 years now 2017-05-21 21:45:27 but yeah, it should still work 2017-05-21 21:45:29 libvirtd's log file uses UTC, not the system time zone. cute. 2017-05-21 21:46:02 hmm 2017-05-21 21:46:18 it seems net-tools install /bin/route which is then not detected by busybox postinstall as overriding /sbin/route 2017-05-21 21:46:20 this needs fixing 2017-05-21 21:47:40 stevenroose: for now i would manually rm /sbin/route 2017-05-21 21:47:43 it will work 2017-05-21 21:47:57 Shiz: like I was saying earlier, the same thing happens with top - procps adds /bin/top, but /usr/bin/top still exists & points to busybox 2017-05-21 21:48:13 yeah there's quite a few random packages that are like that 2017-05-21 21:48:45 did anyone have that curl oneliner to query the alpine web api for which package a file belongs to? 2017-05-21 21:48:49 deleting the /usr/bin/top symlink only works until the busybox package's script re-runs 2017-05-21 21:49:16 Shiz: such a thing exists? I want that too :) 2017-05-21 21:49:31 someone posted a curl+grep a while back 2017-05-21 21:49:32 heck, one could argue it should be part of apk 2017-05-21 21:49:43 it can't be part of apk right now 2017-05-21 21:49:51 APKINDEX does not have a list of contents for all packages 2017-05-21 21:49:56 pkgs.a.o generates this manually 2017-05-21 21:50:35 and including full file lists in APKINDEX would bloat it severely... 2017-05-21 21:51:06 found it: 2017-04-30 22:07:47 qman__ armin: FILE="host"; curl -s "https://pkgs.alpinelinux.org/contents?file=$FILE" | grep package | cut -d\> -f3 | cut -d\< -f1 | uniq 2017-05-21 21:51:55 ACTION steals that 2017-05-21 21:52:45 is out there somewhere a doc about how busybox handles network/interfaces in detail? 2017-05-21 21:57:26 xentec: it's similar to debian's config: the core of it is the ifup utility 2017-05-21 21:57:56 Shiz, I get the same error 2017-05-21 21:58:05 and route now is /bin/route 2017-05-21 21:58:27 Shiz: I've already guessed that :). my question is, how far the config is supported by busybox 2017-05-21 21:58:27 i would try to see if openvpn logs the route output somewhere 2017-05-21 21:58:33 It looks like it's using ip though 2017-05-21 21:58:46 stevenroose: you can try installing iproute2 2017-05-21 21:58:48 :P 2017-05-21 21:59:16 Shiz, I have that one, apparently 2017-05-21 21:59:30 I also did the modprobe tun thing that the wiki describes 2017-05-21 22:00:18 this is the whole output 2017-05-21 22:00:18 https://gist.github.com/stevenroose/f70c106b771902a407a36ce0a3210186 2017-05-21 22:00:22 maybe I'm overseeing things 2017-05-21 22:03:20 i found a bunch of mismatches, oh dear 2017-05-21 22:03:25 stevenroose: hmm 2017-05-21 22:04:44 okay so it seems that addr add command fails 2017-05-21 22:05:17 or does it 2017-05-21 22:05:19 no, it doesn't 2017-05-21 22:06:02 :p yeah it doesnt seem to be fully synced 2017-05-21 22:06:31 i'd run openvpn in debug mode 2017-05-21 22:06:41 that should make it print D_ROUTE messages that tell you the ip route command it tried to invoke 2017-05-21 22:07:55 --verb 3 2017-05-21 22:07:59 grep also seems to be symlinked to busybox and doesnt allow grep -5 2017-05-21 22:09:20 that's probably because you don't have the grep package 2017-05-21 22:09:26 (what does grep -5 even do...?) 2017-05-21 22:10:54 its the same as -C 5 2017-05-21 22:10:59 context above and below match 2017-05-21 22:11:48 why not just do -C 5 then 2017-05-21 22:11:49 :P 2017-05-21 22:12:38 ughh openvpn --verb 3 (specify verbosity level) complains "Options error: You must define TUN/TAP device (--dev)" 2017-05-21 22:12:40 pff 2017-05-21 22:12:52 yeah did -C 5 :p just used to -5, was curious why it didnt work 2017-05-21 22:14:07 maybe put 'verb 3' in your conf file 2017-05-21 22:15:30 I wonder: shouldn't all init scripts which 'need net' also 'need dns'? 2017-05-21 22:15:58 https://gist.github.com/stevenroose/2b3510774b0839dcbe26af8afe094c1e 2017-05-21 22:17:15 well, there's the route command that fails at least 2017-05-21 22:17:23 yo ucan apk del net-tools btw, it's not relevant 2017-05-21 22:19:34 thanks 2017-05-21 22:19:59 you can try to re-execute the commands it executes in order 2017-05-21 22:20:04 and then get what the error message it gives you was 2017-05-21 22:29:19 Shiz, the ones with /sbin/ip, right? 2017-05-21 22:29:27 yus 2017-05-21 22:30:39 Cannot find device "tun0" 2017-05-21 22:30:49 for first one /sbin/ip link set dev tun0 up mtu 1500 2017-05-21 22:31:00 haha, I guess openvpn does some preparation before those commands 2017-05-21 22:32:08 yeah it does create the tun device first 2017-05-21 22:32:13 but that should be easy 2017-05-21 22:32:56 ip tuntap add mode tun dev tun0 2017-05-21 22:32:57 :) 2017-05-21 23:14:26 oh missed your message 2017-05-21 23:15:27 Shiz, RTNETLINK answers: File exists 2017-05-21 23:15:32 that's what I get 2017-05-21 23:15:49 I saw that before in my log output, I guess tee only forwards stdout to the file instead of both stdout and stderr 2017-05-21 23:15:58 can you make anything of that? 2017-05-21 23:16:45 "Because it's already there - this is what RTNETLINK answers: File exists is telling you." 2017-05-21 23:16:57 on the ip tuntap command? 2017-05-21 23:17:10 no the ones exactly above the error line 2017-05-21 23:17:15 https://gist.github.com/stevenroose/2b3510774b0839dcbe26af8afe094c1e#file-gistfile1-txt-L42 2017-05-21 23:17:29 (do I have to undo those commands after doing them manually?) 2017-05-21 23:17:31 that's odd 2017-05-21 23:17:35 the other commands worked? 2017-05-21 23:17:39 yes 2017-05-21 23:17:44 well, no output, so I guess so 2017-05-21 23:17:48 yes 2017-05-21 23:17:50 can you do 2017-05-21 23:18:01 ip route list 2017-05-21 23:19:22 ip route lsit 2017-05-21 23:19:23 https://gist.github.com/stevenroose/2b3510774b0839dcbe26af8afe094c1e#file-gistfile2-txt 2017-05-21 23:19:30 (how do I undo those routes?) 2017-05-21 23:21:52 just execute them in reverse order with s/add/del/ 2017-05-21 23:24:52 seems like it tries to add duplicate routes 2017-05-21 23:25:47 yeah indeed 2017-05-21 23:25:56 google is not very helpful with that error message 2017-05-21 23:28:22 does this make any sense to you? "yours problem - routes. the simplest method to send all traffic via you VPN gateway - add to the client config: redirect-gateway def1" 2017-05-21 23:30:24 well 2017-05-21 23:30:37 the first issue you have that's preventing communication is cipher/hash mismatch 2017-05-21 23:30:42 Mon May 22 00:14:55 2017 WARNING: 'cipher' is used inconsistently, local='cipher BF-CBC', remote='cipher AES-256-CBC' 2017-05-21 23:31:06 cipher auth and keysize need to be set properly 2017-05-21 23:31:27 it seems the vpn config is a bit wonkey, yeah 2017-05-21 23:31:41 is that 2017-05-21 23:31:43 blowfish cbc? 2017-05-21 23:31:49 yes 2017-05-21 23:32:51 that's the default in openvpn iirc 2017-05-21 23:33:08 would the config file help? 2017-05-21 23:33:11 I'll add it to the gist 2017-05-21 23:33:17 you're missing lines in the config file 2017-05-21 23:33:25 namely cipher, auth and keysize 2017-05-21 23:33:31 I downloaded it from my VPN provider 2017-05-21 23:33:36 but it's an amateur one 2017-05-21 23:33:51 the warnings in your debug log tell you what options to configure 2017-05-21 23:34:33 https://gist.github.com/stevenroose/2b3510774b0839dcbe26af8afe094c1e#file-neutrinet-ovpn 2017-05-21 23:34:44 scv but those are warnings, no? 2017-05-21 23:34:54 yes? 2017-05-21 23:35:09 you can't communicate if each end is using a different cipher though 2017-05-21 23:35:24 isn't the definition of a warning that it's bad but should not hinder further execution? :) 2017-05-21 23:35:38 it doesn't hinder further execution 2017-05-21 23:35:41 you're just not able to send any data :p 2017-05-21 23:36:13 scv, makes sense :D 2017-05-21 23:36:20 I asked the provider 2017-05-21 23:36:31 there's no cipher/auth lines in your config at all 2017-05-21 23:36:41 so it'll default to blowfish and sha1 2017-05-21 23:36:51 which is incorrect, the correct options are listed in those warnings 2017-05-21 23:40:14 that might make sense 2017-05-21 23:40:24 so the mentioned error might not be the cause of it not working? 2017-05-21 23:40:39 it isn't working because the cipher and auth types are mismatched 2017-05-21 23:40:42 I sent an email and IRC message to the maintainers of the vpn, I guess they'll have a look at it 2017-05-21 23:40:47 you'll get a connection with zero traffic passing 2017-05-21 23:40:47 many thanks for pointing that out though 2017-05-21 23:41:11 scv, you say the cipher conf values that should be specified are mentioned in the warnings.. 2017-05-21 23:41:20 why doesn't openvpn use those then? 2017-05-21 23:42:01 because they aren't specified in the config 2017-05-21 23:42:12 if it isn't specified it defaults to blowfish and sha1 2017-05-21 23:42:21 defaults are still considered configured options 2017-05-21 23:42:28 it isn't just going to override what's configured 2017-05-21 23:42:56 oh 2017-05-21 23:43:28 well, I have to go to bed now, I'll try to set the cipher details tomorrow 2017-05-21 23:43:29 should do 2017-05-21 23:43:34 thanks a lot folks!! 2017-05-21 23:43:37 you are awesome! 2017-05-22 00:00:20 hi, newbie to alpine here... 2017-05-22 00:00:41 welcome 2017-05-22 00:01:00 i need compile nginx with libaio support, but get this error : ./configure: no supported file AIO was found 2017-05-22 00:01:13 already install libaio-dev 2017-05-22 00:01:29 thanks :-) 2017-05-22 00:02:24 i good place for this question, or have to move to alpine-devel? 2017-05-22 00:02:58 no, here is fine 2017-05-22 00:03:03 try installing the linux-headers package 2017-05-22 00:04:57 nginx already compiled with aio ? https://git.alpinelinux.org/cgit/aports/tree/main/nginx/APKBUILD#n145 2017-05-22 00:05:32 no, I need compile with some extra modules, with rtmp, and kaltura vod 2017-05-22 00:05:44 we also ship nginx-rtmp 2017-05-22 00:05:46 :P 2017-05-22 00:06:11 sorry 2017-05-22 00:06:14 nginx-mod-rtmp 2017-05-22 00:06:19 yes, I see but I modified specific module for my needs 2017-05-22 00:06:37 anyway, I'd suggest to just use abuild to compile nginx, and do your modifications in the abuild 2017-05-22 00:06:43 that way you won't have issues with dependencie s;p 2017-05-22 00:06:49 ;p * 2017-05-22 00:07:04 yes, but need more control of all configs. 2017-05-22 00:07:49 you can change them in the abuild, or am I missing something specific? 2017-05-22 00:07:49 Is pretty nice project, more flexible than busybox 2017-05-22 00:09:03 maybe, I´m so new to alpine. 2017-05-22 00:09:50 basically my proposal is since the APKBUILD recipe contains all the necessary modifications/dependencies already, it may be easier for you to modify it to your needs and use abuild to build your nginx 2017-05-22 00:09:59 after install headers, not recognized openssl 2017-05-22 00:10:03 instead of a manual source compile 2017-05-22 00:11:23 ok I will tryit 2017-05-22 00:11:34 https://wiki.alpinelinux.org/wiki/Creating_an_Alpine_package#Requirements is ok? 2017-05-22 00:12:33 yeah that'll tell you how to setup your system for building packages 2017-05-22 00:12:41 our recipe for nginx is located in the aports git repo 2017-05-22 00:13:33 ok, a lot to read, but if you thinks is easier than my way, let's tryit. 2017-05-22 00:29:30 add linux-headers and works! 2017-05-22 00:29:54 thanks Shiz 2017-05-22 00:45:52 np 2017-05-22 01:45:08 hi, if I get this error : "ERROR: unsatisfiable constraints:" is repo dead? 2017-05-22 01:45:20 I try to install tinc-pre package. 2017-05-22 01:45:53 Classsic: what version of alpine? 2017-05-22 01:48:34 3.5 2017-05-22 01:48:45 it just means the package doesn't exist 2017-05-22 01:48:47 ususally 2017-05-22 01:48:57 paste your full error 2017-05-22 01:49:04 if it says '[missing]' the package doesn't exist 2017-05-22 01:50:39 ERROR: unsatisfiable constraints: tinc-pre (missing): required by: world[tinc-pre] 2017-05-22 01:50:55 http://pkgs.alpinelinux.org/package/edge/community/x86_64/tinc-pre 2017-05-22 01:51:17 http://dl-3.alpinelinux.org/alpine/edge/main 2017-05-22 01:51:21 this is my repo 2017-05-22 01:52:13 did you run 'apk update'? 2017-05-22 01:54:32 I launch apk --update package 2017-05-22 01:55:44 well 2017-05-22 01:55:59 the url you linked said in which repo tinc-pre is 2017-05-22 01:56:01 and it's not main :P 2017-05-22 01:58:41 i'm confused,this is my repo file:http://dl-cdn.alpinelinux.org/alpine/v3.5/main http://dl-cdn.alpinelinux.org/alpine/v3.5/community http://dl-5.alpinelinux.org/alpine/v3.5/main http://dl-5.alpinelinux.org/alpine/v3.5/community http://dl-cdn.alpinelinux.org/alpine/edge/community 2017-05-22 01:59:21 apk search tinc-pre --------->tinc-pre-1.1.14-r1 2017-05-22 01:59:33 now that you have community on edge, you should be able to install tinc-pre 2017-05-22 01:59:48 apk add tinc-pre-1.1.14-r1------------------>ERROR: unsatisfiable constraints: tinc-pre-1.1.14-r1 (missing): required by: world[tinc-pre-1.1.14-r1] 2017-05-22 01:59:58 just do apk add tinc-pre 2017-05-22 02:00:33 ^ 2017-05-22 02:00:57 apk add tinc-pre ------------------>ERROR: unsatisfiable constraints: so:libcrypto.so.41 (missing): required by: tinc-pre-1.1.14-r1[so:libcrypto.so.41] 2017-05-22 02:01:11 you need main on edge too 2017-05-22 02:01:18 you're mixing edge and a release 2017-05-22 02:01:25 edge is the rolling release "git head" branch of alpine 2017-05-22 02:01:57 so....how can install this package, or have to build from source? 2017-05-22 02:02:25 you have to upgrade your system to edge entirely 2017-05-22 02:02:29 don't mix 3.5 and edge 2017-05-22 02:03:10 ok, I see. there is a command to do that? I`m running inside docker 2017-05-22 02:03:20 pull from alpine:edge 2017-05-22 02:03:33 ^ then there's no need to edit your repo file either 2017-05-22 02:03:39 the edge tag will always be the latest edge 2017-05-22 02:04:00 (of note: we are releasing 3.6 soon-ish, which will include tinc-pre: when that happens, you can switch your dockerfile back to alpine:3.6) 2017-05-22 02:04:02 (just make sure to rebuild your images at least once a month to avoid bitrot) 2017-05-22 02:05:00 edge is the latest development version of alpine: you shouldn't mix stable and edge as it will give you wierd errors like that 2017-05-22 02:09:11 ok, so I have to wait to 3.6 or change alpine:edge, right? 2017-05-22 02:09:35 correct 2017-05-22 02:19:34 perfect! I run docker run --name alpine -ti alpine:edge apk add --update --no-cache tinc-pre. 2017-05-22 02:19:42 and work like a charm ;-) 2017-05-22 02:20:02 thanks. 2017-05-22 02:21:38 when doing a package search, it's good to note on which versions/repos the package actually is ;) 2017-05-22 02:33:38 how I know from wich repo is a package? 2017-05-22 02:34:53 it tells you in the search UI 2017-05-22 02:34:58 on pkgs.alpinelinux.org 2017-05-22 02:35:10 http://pkgs.alpinelinux.org/packages?name=tinc-pre&branch=&repo=&arch=&maintainer= 2017-05-22 02:35:15 note the 'branch' and 'repository' labels 2017-05-22 02:48:49 yes, thanks 2017-05-22 02:49:04 I will try to move all my system to alpine 2017-05-22 02:49:11 is exact what we need 2017-05-22 03:06:20 :) 2017-05-22 03:15:58 exists something like crontab for exec any script on boot? 2017-05-22 03:18:39 rc.local 2017-05-22 03:19:19 yep, rc.local 2017-05-22 03:19:43 throw a file in there ending in start and it wil lget executed on boot 2017-05-22 03:19:46 that's /etc/local.d 2017-05-22 03:19:55 ending in .start * 2017-05-22 03:20:15 as long as you add the 'local' service to boot: # rc-update add local default 2017-05-22 03:22:12 perfect, it works. 2017-05-22 06:34:04 morning. Happy Monday 2017-05-22 07:04:03 Hi, where is php71 in the repos? 2017-05-22 07:04:10 I enabled edge 2017-05-22 07:08:10 <_ikke_> `It's just called php7 2017-05-22 07:08:17 <_ikke_> in edge/community 2017-05-22 07:10:27 Ah, I was looking in main. Thanks 2017-05-22 07:53:11 Classsic: Just curious, what motivated the use of tinc-pre instead of a classic solution such as openvpn or IPSec ? 2017-05-22 07:54:45 most people i hear using tinc for easy 1500 mtu in-tunnel 2017-05-22 07:55:09 not sure what else is good about it, never personally used 2017-05-22 07:57:21 scv: I see, thanks for the input 2017-05-22 07:58:08 AlexIncogito, it supports automatic routing. 2017-05-22 07:58:20 between different spokes 2017-05-22 07:59:51 So basically, it is easier on the config side 2017-05-22 08:00:06 yes 2017-05-22 08:00:17 with ipsec you could use dmvpn 2017-05-22 08:01:14 not sure which tools are available for openvpn 2017-05-22 08:05:18 Interesting, I had never heard of dynamic multipoint VPN. It appears to pack a lot of advantages compared with traditional client-server VPN approach 2017-05-22 08:11:32 AlexIncogito, and the author is a member of alpine :) 2017-05-22 08:16:10 openvpn has an on/off switch to allow or disallow routing between established tunnels 2017-05-22 08:26:11 openvpn doesnt handle dynamic routing 2017-05-22 08:26:24 it can with tap 2017-05-22 08:27:21 a good read is https://wiki.alpinelinux.org/wiki/Dynamic_Multipoint_VPN_(DMVPN) 2017-05-22 14:10:44 hi, I use alpine as builder for golang, unfortunatelly even for an empty main .go it's using cgo and needing libc.musl-x86_64.so.1 to run. is this known? fixable? I `echo "@edge http://dl-cdn.alpinelinux.org/alpine/edge/main" >> /etc/apk/repositories` but go@edge is still pointing to the same old build (1.7.3-r0). any pointer on what I'm doing wrong? 2017-05-22 14:39:57 even when cross-compiling it uses cgo now :( 2017-05-22 14:40:57 can't you pass --ldflags '-extldflags "-static"' to go build? 2017-05-22 14:41:02 that'll just statically link in the libc 2017-05-22 14:41:17 also, two things 2017-05-22 14:41:24 1) go is in the community repo, not the main repo 2017-05-22 14:42:06 2) if you plan to use the main or community repo from edge, it's best to just base off edge entirely -- FROM alpine:edge 2017-05-22 14:42:17 mixing stable and edge for those two repos is not the best idea 2017-05-22 14:44:04 thanks, I'll change to FROM alpine:edge and try again because --ldflags '-extldflags "-static"' is not working for me 2017-05-22 14:44:18 hmm 2017-05-22 14:44:25 that /should/ work in my experience 2017-05-22 14:44:51 hi, I try run docker on alpine host, but get segmentation fault when execute nodejs 2017-05-22 14:45:54 try with different versions of nodejs, and this docker run ok in debian host. 2017-05-22 14:46:20 mnemoc: / # go build --ldflags '-extldflags "-static"' t.go 2017-05-22 14:46:27 this worked for me just now in a fresh edge container 2017-05-22 14:46:30 outputs a static binary 2017-05-22 14:46:35 Classsic: nodejs from the repos? 2017-05-22 14:47:40 nope, I have a docker debian based, with nodejs install inside this docker. 2017-05-22 14:48:25 alpine host-------->docker-debian------->nodejs- 2017-05-22 14:48:31 ah 2017-05-22 14:48:36 i have a feeling what's going on then 2017-05-22 14:49:19 the alpine kernel is hardened and will kill binaries that are behaving naughtily, like having a writable and executable mapping in memory at the same time 2017-05-22 14:49:31 sometimes this is needed, so there is a mechanism to mark binaries as safe 2017-05-22 14:49:48 ok, is there a way to fixit? 2017-05-22 14:49:51 but debian doesn't apply this marking to their binaries as they don't (officially supported at least) ship the same hardened kernel 2017-05-22 14:49:57 we do, of course 2017-05-22 14:50:04 yeah, there's two things you can do 2017-05-22 14:50:06 well, three 2017-05-22 14:50:27 1) make all containers you run alpine-based with node.js, as we apply those markings to the binaries we ship 2017-05-22 14:50:38 Shiz: thanks! works :) 2017-05-22 14:50:55 using alpine:latest didn't 2017-05-22 14:51:01 2) inside of your Dockerfile, manually mark the binaries yourself (needs the paxctl package, and an invocation like: paxctl -m /path/to/nodejs) 2017-05-22 14:51:04 or 2017-05-22 14:51:10 3) switch your alpine host kernel to the vanilla variant 2017-05-22 14:51:23 I personally recommend either of the former two if it's possible 2017-05-22 14:52:47 should write a FAQ entry about this 2017-05-22 14:54:20 Shiz: btw, cross-compiling is broken. GOARCH=arm GOARM=7 leads to: gcc: error: unrecognized command line option '-marm'; did you mean '-mabm'?" is it possible to use go's own compiler instead of gcc? 2017-05-22 14:54:52 paxctl -m /usr/bin/node -----> file /usr/bin/node does not have a PT_PAX_FLAGS program header, try conversion 2017-05-22 14:55:02 get the same results. 2017-05-22 14:55:23 mnemoc: almost smells like you got the wrong gcc, and the native doesnt know about -m 2017-05-22 14:55:37 Classsic: ah, add -c too 2017-05-22 14:55:39 paxctl -cm 2017-05-22 14:56:47 great! 2017-05-22 14:57:10 its work, is this stable, and safe? 2017-05-22 14:57:31 yes, it should pose no further problems 2017-05-22 14:57:37 and safer than running on a vanilla kernel ;) 2017-05-22 14:58:03 https://git.alpinelinux.org/cgit/aports/tree/community/nodejs-current/APKBUILD#n44 2017-05-22 14:58:09 as you can see, we apply the same marking to our packages 2017-05-22 14:58:17 line 53, sorry 2017-05-22 14:58:31 using a different tool, but it applies the same marking 2017-05-22 15:00:47 perfect, my vbox machine goin down, from 2.1gb to 350mb. 2017-05-22 15:00:52 :-) 2017-05-22 15:01:21 :) 2017-05-22 15:10:28 IcePic: http://sprunge.us/NbVj :( 2017-05-22 15:11:35 thanks. 2017-05-22 15:18:24 mnemoc: wonder if that last -extld=gcc should have been with a full path to the cross-arm gcc? 2017-05-22 15:18:54 for the record, I havent ever crosscompiled like this on alpine, just thinking out loud 2017-05-22 15:19:24 yes, it would be 2017-05-22 15:19:30 mnemoc: oh that reminds me 2017-05-22 15:19:39 you should probably install the relevant go-cross-* package? 2017-05-22 15:19:55 oh, but that's only for other OSes -- nvm 2017-05-22 15:20:40 mnemoc: we don't psas anything in specific to make go not use the native cc, for what it's worth... 2017-05-22 15:20:44 i wonder what the issue would be 2017-05-22 15:20:54 sorry, s/native/integrated/ 2017-05-22 15:30:39 hi again, another little problem, I run docker with hdparm inside, with --privileged flag, but get when execute "hdparm /dev/sda"----------> /dev/sda: Operation not permitted 2017-05-22 15:37:40 hmm 2017-05-22 15:38:12 check your dmesg 2017-05-22 15:38:34 it may be GRKERNSEC_CHROOT_CAPS 2017-05-22 15:40:25 use of CAP_SYS_RAWIO in chroot denied for /sbin/hdparm[hdparm:4828 2017-05-22 15:41:35 there we go 2017-05-22 15:41:40 easy fix, I think 2017-05-22 15:42:03 from run command? 2017-05-22 15:42:28 nah, you need to fix this on the host 2017-05-22 15:42:39 this is another restriction by the hardened kernel, but one that can be disabled at runtime 2017-05-22 15:43:05 (a quite logical restriction imo --- usually you don't want chroots/containers accessing your raw original disk) 2017-05-22 15:43:25 IcePic: I would have expected -extld=arm-blah-eabi-gcc 2017-05-22 15:43:39 Classsic: try running # sysctl -w kernel.grsecurity.chroot_caps=0 on your host 2017-05-22 15:43:45 see if that fixes it 2017-05-22 15:43:46 yeap, that have sense 2017-05-22 15:44:08 what package provides the cross compiler? 2017-05-22 15:44:29 gcc for arm etc 2017-05-22 15:44:31 it works, thanks. 2017-05-22 15:44:34 if it does, do "echo kernel.grsecurity.chroot_caps=0 > /etc/sysctl.d/disable-chroot-caps.conf" 2017-05-22 15:44:40 this is persistent? 2017-05-22 15:44:43 and make sure the sysctl service is enabled at boot 2017-05-22 15:44:49 what i just told you makes it persistent 2017-05-22 15:44:51 :) 2017-05-22 15:45:23 mnemoc: i sadly don't think we package cross-compilers as packages right now 2017-05-22 15:45:44 yes, I try now 2017-05-22 15:45:59 Shiz: fair enough.. so I have to make it not-use gcc 2017-05-22 15:46:35 mnemoc: i think the best alpine has atm is using Go with `CGO_ENABLED=0 GOARCH=arm go build` 2017-05-22 15:46:35 either that, or use something like musl-cross-make to make your own cross-gcc 2017-05-22 15:46:37 :P 2017-05-22 15:46:49 the `CGO_ENABLED=0` part is the critical one 2017-05-22 15:46:50 oh, if CGO_ENABLED=0 works, all the easier 2017-05-22 15:46:58 it's ignored 2017-05-22 15:47:01 also -tags netgo 2017-05-22 15:47:29 mnemoc: what package are you trying to x-compile for arm? 2017-05-22 15:47:42 i have some free time and an alpine install that I know go works on 2017-05-22 15:47:44 currently, an empty main() 2017-05-22 15:49:31 https://gist.githubusercontent.com/Xe/21ff5b7f9cd7d7e70204727b9bf3605a/raw/c4d69552303123987f532f99e4af90a19c848755/gistfile1.txt works for me 2017-05-22 15:49:38 go version go1.8.1 linux/amd64 2017-05-22 15:52:34 using gcc or go's linker? 2017-05-22 15:52:55 one sec lemme get a full debug output of the build 2017-05-22 15:53:21 env GOPATH=/home/amery/projects/go GOARCH=arm GOARM=7 CGO_ENABLED=0 go build t.go ----> gcc: error: unrecognized command line option '-marm'; did you mean '-mabm'? 2017-05-22 15:53:34 i'm getting the same issue as mnemoc in a fresh container fwiw 2017-05-22 15:53:39 \o/ 2017-05-22 15:53:49 :) 2017-05-22 15:53:52 not sure if that should be a \o/ 2017-05-22 15:53:54 :p 2017-05-22 15:53:57 oh 2017-05-22 15:54:03 i think i found the difference 2017-05-22 15:54:08 I'm glad you could reproduce it 2017-05-22 15:54:09 i'm using Go that's linked against glibc 2017-05-22 15:54:25 that's cheating 2017-05-22 15:54:32 https://gist.github.com/Xe/211ba82e3f0058be24d0451f07696205 2017-05-22 15:54:49 will go build without the alpine patches? 2017-05-22 15:55:07 https://txt.shiz.me/N2EzN2MwNz 2017-05-22 15:55:32 yes it will build 2017-05-22 15:55:37 but not work for dynamically linked binaries 2017-05-22 15:55:44 and will have no PIE 2017-05-22 15:56:01 is this a musl problem or an upstream go problem? 2017-05-22 15:56:03 could the pie integration be breaking it? 2017-05-22 15:57:29 does go even have an internal linker...? 2017-05-22 15:58:01 yes 2017-05-22 15:58:59 the pie integration does nothing special, so i don't think that's it 2017-05-22 15:59:12 but maybe 2017-05-22 16:00:17 mnemoc: it seems like it wants to build the entire stdlib, which includes the cgo parts 2017-05-22 16:00:25 so it will always use an external linker 2017-05-22 16:00:53 on ubuntu I get -extld=gcc -buildmode=exe and succeeds. static arm binary 2017-05-22 16:01:56 welp 2017-05-22 16:01:59 -buildmode=exe does make it work 2017-05-22 16:02:01 on my box 2017-05-22 16:02:21 https://txt.shiz.me/NWM3YTkzYT 2017-05-22 16:02:33 / # file t 2017-05-22 16:02:35 t: ELF 32-bit LSB executable, ARM, EABI5 version 1 (SYSV), statically linked, not stripped, with debug_info 2017-05-22 16:04:56 looking at the internal ld config 2017-05-22 16:05:05 but i suspect the default go linker doesn't like PIE 2017-05-22 16:05:33 / Internal linking does not support TLS_IE. 2017-05-22 16:05:35 return true, "buildmode=pie" 2017-05-22 16:05:37 there we go 2017-05-22 16:05:43 from the go source code 2017-05-22 16:06:29 i wonder if this is relevant for us 2017-05-22 16:08:26 but we are using the external linker 2017-05-22 16:08:50 which somehow manages to cross compiler without been a cross compiler 2017-05-22 16:09:00 compile* 2017-05-22 16:09:23 yes 2017-05-22 16:09:27 it forces the external linker 2017-05-22 16:09:31 because of what I just pasted 2017-05-22 16:11:13 we patch PIE as default build mode -> cross-compilation sees this and forces external linker (except on amd64) -> gcc is not a cross-compiler -> linking fails 2017-05-22 16:11:38 If I don't pass -buildmode=exe the magic will still put -extld=gcc there 2017-05-22 16:12:37 that doesn't matter 2017-05-22 16:12:46 -extld= will not be used if external linking isn't used 2017-05-22 16:12:54 the mere presence of an -extld argument doesn't force it to use external linkin 2017-05-22 16:13:03 oh, i see 2017-05-22 16:13:12 ~ # CGO_ENABLED=0 GOARCH=arm GOARM=7 go build -v -x -ldflags '-v -v' t.go 2>&1 | grep external 2017-05-22 16:13:13 2017/05/22 16:12:30 external linking is forced by: buildmode=pie 2017-05-22 16:13:15 :P 2017-05-22 16:13:24 i think we need to refine our go patch then 2017-05-22 16:13:30 thanks for the report 2017-05-22 16:13:35 /research 2017-05-22 16:13:45 thanks for giving me a work-around :) 2017-05-22 16:14:02 keep in mind that this means your binaries won't benefit from ASLR 2017-05-22 16:14:08 or to a reduced degree 2017-05-22 16:14:11 which is not exactly great 2017-05-22 16:14:15 with -buildmode=exe i mean 2017-05-22 16:17:33 Shiz: I'm confident you'll get pie working before I reach production ;-) 2017-05-22 19:56:37 does openrc have an alternative for systemctl enable openvpn@myconfigfile? 2017-05-22 20:00:11 stevenroose: ln -s openvpn /etc/init.d/openvpn.myconfigfile 2017-05-22 20:00:19 rc-update add openvpn.myconfigfile 2017-05-22 20:00:21 i think that works 2017-05-22 20:03:43 huh, will openvpn know where to look for the config file? 2017-05-22 20:04:04 it will look in /etc/openvpn/myconfigfile.conf 2017-05-22 20:04:06 it's in /etc/openvpn/myconfigfile.conf and with systemd, that;s where openvpn will look 2017-05-22 20:04:13 the initscript takes care of that 2017-05-22 20:04:14 really? 2017-05-22 20:04:15 cool 2017-05-22 20:04:22 by looking at itself? 2017-05-22 20:04:27 osom, but weird :p 2017-05-22 20:04:28 yeah 2017-05-22 20:04:47 https://git.alpinelinux.org/cgit/aports/tree/main/openvpn/openvpn.initd 2017-05-22 20:04:51 VPN=${SVCNAME#*.} 2017-05-22 20:04:58 it removes everything before the . in the service name 2017-05-22 20:05:06 (or just gets 'openvpn' if there is no dot) 2017-05-22 20:05:52 WARNING: openvpn.neutrinet has started, but is inactive 2017-05-22 20:06:02 I did rc-update add before rc-service start and got thi 2017-05-22 20:06:22 I guess that's fine? the vpn works, so 2017-05-22 20:06:35 probablyy :P 2017-05-22 20:37:13 yes its fine, i have it as well 2017-05-22 22:52:19 hi, somebody know if motion package will avaiable in 3.6 release? 2017-05-22 22:53:30 no, as it's in testing right now 2017-05-22 22:53:48 when 3.6 releases, it will contain every package from the main and community repositories from edge at that time 2017-05-23 00:18:03 heya 2017-05-23 00:18:31 hello 2017-05-23 00:18:36 discovered alpine 2 days ago 2017-05-23 00:18:41 o.0 2017-05-23 00:18:49 feel like i been living under a rock 2017-05-23 00:19:18 exactly what i needed 2017-05-23 00:20:31 Shiz: how's things? 2017-05-23 00:27:06 welp 2017-05-23 04:04:39 hey everyone, i'm trying to run crond as a non-root user within a container, specifying a specific crondir that only contains my user's crontab 2017-05-23 04:04:49 however when it runs I see crond: "can't set groups: Operation not permitted" 2017-05-23 04:04:57 and the command does not execute 2017-05-23 04:05:16 when i run the container as the root user with docker's -u flag specifying root, it runs just fine 2017-05-23 04:05:24 any ideas on why that may be the case? 2017-05-23 04:33:23 tbrock: crond is not meant to be ran as non-root 2017-05-23 04:34:18 at least not busybox crond 2017-05-23 04:34:25 maybe another cron will do what you want 2017-05-23 04:47:25 @Shiz why not? doesn't that seem odd (not trying to be argumentative) 2017-05-23 04:47:38 thanks for responding btw 2017-05-23 04:47:53 I dunno, I didn't develop it :P 2017-05-23 04:48:03 but looking at the source code it very much expects to be ran as root 2017-05-23 04:48:08 as a system cron I'd imagine 2017-05-23 04:48:51 we package a few other crons like fcron and dcron, they may be able to run as a normal user 2017-05-23 04:51:09 ok, cool thanks 2017-05-23 04:51:30 what was the giveaway that it expects to run as root? 2017-05-23 04:51:39 if i take a look at the code myself 2017-05-23 04:51:44 it dropping permissions :P 2017-05-23 04:51:52 you can't drop permissions as a normal user to yourself 2017-05-23 04:52:16 https://git.busybox.net/busybox/tree/miscutils/crond.c#n592 2017-05-23 04:53:54 as well as a more explicit reference here: https://git.busybox.net/busybox/tree/miscutils/crond.c#n118 2017-05-23 04:54:43 and here: https://git.busybox.net/busybox/tree/miscutils/crond.c#n3 2017-05-23 09:24:22 Hi, why am I getting this https://la.wentropy.com/KyT4 ? 2017-05-23 11:11:01 Shiz: hi, another cross-compile related problem :( http://sprunge.us/PXXN .... it shouldn't be mkdir-ing in /usr/lib/go/ but in $WORK 2017-05-23 11:15:47 Shiz: same happens doing FROM alpine:edge instead of node:alpine + go@edge 2017-05-23 11:38:25 Shiz: http://sprunge.us/STIN <--- native too :'( 2017-05-23 11:41:31 ACTION scratches his head 2017-05-23 14:20:23 Shiz: btw, passing -pkgdir solves the "write to /usr/lib/go/" thing 2017-05-23 14:33:23 hm.. setup-xorg-base does not work with qemu 2017-05-23 14:33:26 std vga 2017-05-23 14:33:38 i dont know which xf86-video-* that should be used 2017-05-23 14:36:36 <_ikke_> hold on, i've set it up once, with guidance from someone here 2017-05-23 14:38:19 qemu + spice uses xf86-video-qxl 2017-05-23 14:38:52 ncopa ^^^ 2017-05-23 14:39:44 that is -vga qxl right? 2017-05-23 14:39:48 i've used that too 2017-05-23 14:40:36 I used virt-viewer to connect 2017-05-23 14:40:37 but the qemu default '-vga std' does not work 2017-05-23 14:41:05 hm 2017-05-23 14:41:26 qemu with gtk support and -vga vmware does not seem to work either 2017-05-23 14:42:59 ncopa: it complains about not finding /dev/dri or no permissions? 2017-05-23 14:43:09 no 2017-05-23 14:44:02 my old notes for spice https://it-offshore.co.uk/linux/alpine-linux/30-alpine-linux-spice-kvm-desktop 2017-05-23 14:44:07 <_ikke_> ncopa: apparently I did not use -vga at all 2017-05-23 14:44:24 <_ikke_> ncopa: just -spice port=... 2017-05-23 14:44:56 the default since qem 2.2 is -vga std 2017-05-23 14:45:00 as i understand 2017-05-23 14:45:04 but i cannot get it work 2017-05-23 14:45:20 <_ikke_> ncopa: what is the issue? 2017-05-23 14:45:28 xorg does not start at all 2017-05-23 14:45:51 would be nice to be able to set up xorg in a default qemu 2017-05-23 14:47:29 <_ikke_> ncopa: I did have it working 2017-05-23 14:47:46 me too 2017-05-23 14:48:03 ncopa: got any /dev/dri devices? 2017-05-23 14:48:53 yes 2017-05-23 14:49:10 it just exited with error 2017-05-23 14:49:23 when i installed mesa-dri-swrast it would hang 2017-05-23 14:49:25 so what does the xorg log say? 2017-05-23 14:49:42 i'll grep EE 2017-05-23 14:49:56 (also keep in mind in gentoo modesetting still isn't working properly on musl) 2017-05-23 14:51:08 aha 2017-05-23 14:51:34 with mesa swrast installed it just hanged im rebooting now to look at the xorg.log 2017-05-23 14:52:42 http://tpaste.us/xWr1 2017-05-23 14:54:40 and without mesa-dri-swrast installed: http://tpaste.us/ya0p 2017-05-23 14:54:55 http://tpaste.us/yaOp 2017-05-23 14:58:05 ncopa: id drop mesa-dri-swrast and try xf86-video-fbdev 2017-05-23 14:59:04 hmm never seen that happen before 2017-05-23 14:59:04 with xf86-video-fbdev: grep EE /var/log/Xorg.0.log 2017-05-23 14:59:15 http://tpaste.us/Yn0r 2017-05-23 14:59:23 try vesa and/or fbdev indeed 2017-05-23 15:00:12 same error with xf86-video-vesa installed 2017-05-23 15:00:26 apk search glamor 2017-05-23 15:00:50 ncopa: make sure swrast_dri isn't in /usr/lib/dri rather than /usr/lib/xorg/modules/dri 2017-05-23 15:01:23 thats how it is 2017-05-23 15:01:32 i wonder if i am missing some kernel module 2017-05-23 15:01:46 no, i thought... where is swrast_dri.so on your system? 2017-05-23 15:02:10 http://tpaste.us/vMWo 2017-05-23 15:03:00 stupid questions now, but did you try to `ldd` it? 2017-05-23 15:03:36 i'm not sure what's the culprit of this error 2017-05-23 15:03:59 the error happens when mesa-dri-swrast is not installed at all 2017-05-23 15:04:06 when it is installed it will hang 2017-05-23 15:04:36 i see. hmm that's even a tougher nut 2017-05-23 15:06:27 ok this is intersting, glamor-egl has conflict with xorg-server 2017-05-23 15:06:31 hi, somebody try install alpine on baytrail device? 2017-05-23 15:19:44 i think i give up this qemu xorg thing 2017-05-23 15:27:46 <_ikke_> ncopa: :-( 2017-05-23 15:28:55 ncopa: have you tried with -vga virtio 2017-05-23 15:29:01 that's the only useful one tbh 2017-05-23 15:29:43 at least gives you a proper screen resolution rather than these tiny ones 2017-05-23 15:30:34 which xf86-video- driver should be used with virtio? 2017-05-23 15:34:41 looks like both arch linux and fedora has some patches to xorg-server 2017-05-23 15:35:34 <_ikke_> ncopa: hold on, I'm starting my qemu vm again to see what I've installed 2017-05-23 15:46:50 <_ikke_> ncopa: so I have my vm running 2017-05-23 15:47:55 <_ikke_> ncopa: I have xf86-video-vesa and xf86-video-modesetting installed 2017-05-23 15:48:17 <_ikke_> ncopa: running without -vga settings 2017-05-23 15:49:11 which xorg server version and what version of libdrm? 2017-05-23 15:50:05 <_ikke_> xorg-server-1.18.4-r3 2017-05-23 15:50:22 <_ikke_> libdrm-2.4.74-r0 2017-05-23 15:53:11 ok so something broken in xorg-1.19 2017-05-23 15:53:54 <_ikke_> performing an upgrade now, see if it breaks 2017-05-23 15:54:25 ncopa: iirc 1.19 merged the modesetting driver 2017-05-23 15:54:38 it's not separate from xorg-server anymore 2017-05-23 15:55:14 there is a modesetting_drv.so 2017-05-23 15:56:35 <_ikke_> ncopa: working with 1.19 2017-05-23 16:09:28 hm 2017-05-23 16:10:19 <_ikke_> Is vim broken in edge? 2017-05-23 16:10:28 not that i know 2017-05-23 16:10:40 <_ikke_> I get a whole load of lua_* symbol not found errors 2017-05-23 16:20:38 <_ikke_> ncopa: weird glitch with my system, reboot fixed it 2017-05-23 16:20:54 <_ikke_> mount somehow got read-only 2017-05-23 23:09:03 I have a docker image where I'm running the unzip command, and I get this error: "error: zipfile probably corrupt (illegal instruction)" when trying to unzip a file 2017-05-23 23:09:16 this file unzip fine with other copies of unzip 2017-05-23 23:09:29 i.e. copies other than alpine's 2017-05-23 23:11:15 I ran the command with gdb and it seems that unzip is deliberately raising an illegal instruction exception with the ud2 instruction 2017-05-23 23:11:39 so, like, what??? 2017-05-23 23:24:47 atrigent: ub possibly 2017-05-23 23:24:50 atrigent - check the command line switches on busybox unzip - or add unzip to the docker image 2017-05-23 23:25:19 BitL0G1c: I don't think I'm using busybox unzip, I wasn't even aware there was such a thing 2017-05-23 23:25:53 if you haven't installed any unzip package, yo're using busybox unzi 2017-05-23 23:25:55 p 2017-05-23 23:25:58 lrwxrwxrwx 1 root root 12 Sep 14 2016 /usr/bin/unzip -> /bin/busybox* 2017-05-23 23:26:32 I installed unzip 2017-05-23 23:26:40 try just using busybox unzip :p 2017-05-23 23:26:56 atrigent: btw the reason for the ud2 instruction is likely musl 2017-05-23 23:27:12 on fatal API abuses, it invokes a_crash() (which is the ud2 instr on x86_64) 2017-05-23 23:27:42 to ease debuggability, because now your backtrace directly leads to the offending call 2017-05-23 23:27:48 in gdb, it looked like the ud2 instruction was inside the unzip command itself, not musl 2017-05-23 23:27:54 but I dunno, maybe something got inlined 2017-05-23 23:28:15 busybox unzip cmd switches - https://pastebin.com/raw/j5Phs4BG 2017-05-23 23:28:33 if you can use the busybox unzip impl, i'd try to see if that works 2017-05-23 23:29:03 so, the reason that I'm having to use the unzip command is that I need to extract some files that use deflate64 compression, and busybox does not seem to support that 2017-05-23 23:29:17 I'd be using the python zipfile module otherwise 2017-05-23 23:29:23 ah, right 2017-05-23 23:30:14 Shiz: any way to get debug info for the unzip command...? 2017-05-23 23:30:40 sadly doesn't seem that way, some packages have a -dbg subpackage, but it seems unzip doesn't right now 2017-05-23 23:30:48 it's something we are looking into extending across all packages... 2017-05-23 23:31:31 ah ok yeah, I guess I can't tell whether it's in musl or not 2017-05-23 23:32:07 it seems there is no direct use ud2 within unzop 2017-05-23 23:32:09 unzip 2017-05-23 23:32:19 any way to get musl to be more verbose? 2017-05-23 23:32:42 oh, hmm 2017-05-23 23:32:49 it seems musl a_crash() uses halt, not ud2 2017-05-23 23:33:49 so it seems gcc generates ud2 instructions in some cases, likely for a similar reason 2017-05-23 23:33:53 fatal runtime error 2017-05-23 23:34:05 probably because there's UB in the unzip source code 2017-05-23 23:35:30 atrigent: what alpine version is this? 2017-05-23 23:35:37 3.5 2017-05-23 23:36:00 i'll take a look at it, but there's no direct solution i can offer you right now 2017-05-23 23:36:06 except from using an alternative zip impl, of course 2017-05-23 23:36:41 as far as I can tell the only other open-source implementation that supports deflate64 is 7zip, which doesn't seem to be in alpine 2017-05-23 23:36:53 but it is 2017-05-23 23:36:59 the p7zip package :) 2017-05-23 23:37:40 alright, I spose I'll try that 2017-05-23 23:40:06 seems to be working better 2017-05-23 23:40:35 my current idea is that unzip does something to invoke gcc's __builtin_trap() 2017-05-23 23:40:38 which compiles to ud2 2017-05-23 23:53:01 Shiz: does alpine compile stuff with more flags for detecting ub? because a copy of the same version of unzip running on ubuntu does not crash 2017-05-23 23:53:25 atrigent: are you running on grsec or non-grsec kernel? 2017-05-23 23:53:49 uh I dunno, it's an ec2 instance 2017-05-23 23:53:51 hah 2017-05-23 23:53:55 probably not? 2017-05-23 23:54:00 $ uname -av 2017-05-23 23:54:34 ec2 wont be hardened, probabl 2017-05-23 23:54:46 Shiz: depends on who made the image :P 2017-05-23 23:54:46 and also, the kernel won't emit ud2's in userspace for you 2017-05-23 23:54:48 lol 2017-05-23 23:54:51 yeah looks like not 2017-05-23 23:54:55 it'll just send the proc a SIGKILL 2017-05-23 23:54:58 or SIGSEGV 2017-05-23 23:55:02 depending on the violation 2017-05-23 23:55:17 atrigent: no additional flags that i directly can see, no 2017-05-23 23:58:05 the ubuntu copy was compiled with an older version of gcc, so maybe some stuff just got turned on by default or something 2017-05-23 23:58:07 meh 2017-05-24 00:00:55 hmm, so, unzip actually catches the SIGILL 2017-05-24 00:01:10 I wonder if there would be a proper error message if it didn't 2017-05-24 00:02:56 that is actually scary on its own, btw 2017-05-24 00:03:12 that it catches it? yeah 2017-05-24 00:04:06 but the unzip code is pretty scary 2017-05-24 00:04:08 I mean, it doesn't ignore it, it prints this error "error: zipfile probably corrupt (illegal instruction)" and exits 2017-05-24 00:04:12 it still seems to live in the world of segmented 16-bit memory too 2017-05-24 00:04:20 Info(slide, 0x421, ((char *)slide, LoadFarString(ZipfileCorrupt), 2017-05-24 00:04:21 "illegal instruction")); 2017-05-24 00:04:36 but yeah, sorta scary how an illegal instruction could be caused by a corrupt input file...? 2017-05-24 00:04:52 very much so 2017-05-24 00:05:00 it sounds like "we expect the compiler to do our input checking for us" 2017-05-24 00:05:02 :p 2017-05-24 00:51:50 atrigent: that's the power (and horrifying results) of C! 2017-05-24 00:53:31 more like of bad C 2017-05-24 05:00:31 <_ikke_> ncopa: I had to add mesa-dri-swrast and mesa-egl 2017-05-24 08:00:54 _ikke_: didnt seem enough for me 2017-05-24 08:01:35 <_ikke_> How did you start the vm? 2017-05-24 08:02:18 qemu-system-x86_64-gtk -enable-kvm -m 1G -cdrom out/alpine-standard-edge-x86_64.iso 2017-05-24 08:29:43 <_ikke_> ncopa: I used spice as a graphical backend: -spice port=5930,disable-ticketing 2017-05-24 08:30:04 spice probably works 2017-05-24 08:30:08 with qxl 2017-05-24 08:30:49 i was trying to make it work with the qemu default vga 2017-05-24 08:30:56 <_ikke_> ok 2017-05-24 08:54:23 Hi, can I ask a question about apk? 2017-05-24 08:54:55 <_ikke_> just ask 2017-05-24 08:57:18 Thanks. I have a script installing a package: apk add libressl2.4-libcrypto@edge. I would like to change this line to match any version of libressl*-libcrypto, but I can't find how to do that. If it were another package, for instance, libressl, I could just write it without the version number, but here I need to match libressl*-libcrypto. I've tried Any idea of to do that? 2017-05-24 09:13:25 Actually, my problem is that I see that libressl*-libcrypto is dependent upon a given version of libressl, but I just want to install the latest, but it doesn't look doable to ask for libressl*-libcrypto without specifying a version for libressl 2017-05-24 09:32:09 Never mind, I found a better way of doing what I wanted 2017-05-24 09:36:26 Hey, I could not find anything on the forums about the future of alpine post-grsec, any info to be found here? 2017-05-24 09:37:17 <_ikke_> c2h2: For now, they try to keep the 4.9 patches alive for as long as possible 2017-05-24 09:40:51 Yeah but does that mean that it will not evolve anymore? I have no clue on how much grsec costs, nor on who buys what, but since alpine's security seems to rely on it, I was wondering what would become of this "hardened" feature :/ 2017-05-24 09:41:35 <_ikke_> c2h2: 'Buying' grsec is not an option for Alpine Linux 2017-05-24 09:41:47 OK, I guess this answers that ^^ 2017-05-24 09:42:44 I was looking into void vs alpine, I feel like now both will become closer to each other. The hardened part really interested me into alpine :) 2017-05-24 09:48:11 userspace is still hardened on apline 2017-05-24 09:48:23 eh, alpine 2017-05-24 09:50:25 With PIE? 2017-05-24 09:52:23 also ssp i believe 2017-05-24 10:14:19 Hi there 2017-05-24 10:14:26 What's the license of the OS itself? 2017-05-24 10:25:40 <_ikke_> I don't think the OS itself has a license associated with it 2017-05-24 10:26:16 Is there an official answer/wiki to this? 2017-05-24 10:26:35 I couldn't find _anything_ on the web, apart from notes on APKBUILD per package 2017-05-24 10:28:10 <_ikke_> https://pkgs.alpinelinux.org/package/edge/main/aarch64/alpine-base 2017-05-24 10:28:13 <_ikke_> says MIT 2017-05-24 10:29:09 Thanks, that should do it I think 2017-05-24 13:16:57 hi, it there a way to download the whole mirror to cache and install from there? and then update the whole cache upon internet access? 2017-05-24 14:05:02 <_ikke_> dave_9911: https://wiki.alpinelinux.org/wiki/How_to_setup_a_Alpine_Linux_mirror? 2017-05-24 14:44:38 yeah was looking at that, was hoping for a apk fetch all kinda thing, to fetch all of repo and the use apk with --no-network, ill guess i got set up a mirror locally then, and have it to come up every boot, and sync it manually when network is connected. thanks 2017-05-24 15:06:34 Then again it only make sense to have packages only for one architecture (and only last release).. 2017-05-24 15:11:07 Guess I look somewhere else for a offline system, if installing new packages always needs network connection. 2017-05-24 15:24:26 So I downloaded a repo to disk/dvd, then use it as offline repo, for updating those files, Ill try to run some rsync, otherwise just re-download all again to disk/dvd. Not too hard was it? (hope this scheme will work, I like to ditch "bloated dists" and cd/dvd-sets. Still looking here! :D Cheers 2017-05-24 21:43:33 3.6.0 is released now! congrats! 2017-05-24 21:44:28 \o/ 2017-05-24 22:08:20 3.6?! awesome! oh wait, now I have to update everything. :O 2017-05-25 01:12:58 hi, somebody know if alpine works on efi32 but system 64bit? 2017-05-25 01:13:13 like baytrail devices. 2017-05-25 02:11:39 Hi all! I'm trying to run lsyncd as a daemon, but I'm not sure how to start and stop it in Alpine. I know alpine doesn't have systemd and I saw it has OpenRC, but rc-service says command not found. Did apk add openrc, and when I run it, it freaks out about not being the boot system. Just wanna run my service. Help! 2017-05-25 02:13:36 also I'm on Alpine 3.5 2017-05-25 02:13:56 dmtd: inside a container? 2017-05-25 02:14:08 Xe: Correct. Inside a docker container 2017-05-25 02:14:38 well, generally you run it as the only process in the container 2017-05-25 02:15:50 Xe: ah. I have a python script which is doing a bunch of config stuff as PID 1...which I guess is because I made that my entrypoint in my docker file? What do I need to do to get some sort of daemon management working? 2017-05-25 02:16:32 dmtd: have your entrypoint be a shell script that templates out the config and then runs `exec lsyncd` 2017-05-25 02:16:36 you don't need daemon management 2017-05-25 02:17:53 Xe: ok I guess that makes sense. I really just want to be able to call service lsyncd start from the python script but I guess that works too. Thanks! 2017-05-25 02:19:29 dmtd: you can do that (you'd need to use runit, i have it already set up in `xena/alpine`), but you don't _need_ it, less complexity means fewer things break 2017-05-25 02:20:16 also, you'd need something to wait forever in the pid1 role anyways 2017-05-25 02:20:30 (otherwise docker will just reap your container instantly) 2017-05-25 02:20:56 Xe: right, the python script runs for the life of the container 2017-05-25 02:21:08 Xe: but that is helpful. I'll keep that in mind 2017-05-25 02:21:47 :+1: 2017-05-25 08:49:02 any ideas when 3.6 will show up and be the "latest" tag at https://hub.docker.com/_/alpine/ ? 2017-05-25 10:32:08 Has anyone upgraded to 3.6 yet? Any troubles? 2017-05-25 10:34:09 I'm waiting for docker hub "latest" to point to 3.6 first :D 2017-05-25 10:46:38 hi, am bulding an iso with aports mkimage.sh, but it seems the apks are not installed? 2017-05-25 10:47:39 (is also the case for mkimage.sh extended) 2017-05-25 11:52:39 magellanic, follow https://github.com/gliderlabs/docker-alpine/pull/285 2017-05-25 11:57:55 ah cool :) it is just waiting to be merged then, I guess? 2017-05-25 12:01:31 magellanic: yes 2017-05-25 12:03:14 cool, sounds good :D 2017-05-25 12:07:35 Hey 2017-05-25 12:07:41 anyone ol ? 2017-05-25 12:09:15 ask and wait? :) 2017-05-25 12:11:05 Is der a php7 redis client on Alpine Os ? 2017-05-25 12:11:24 I didn't find ny client 2017-05-25 12:12:13 HoloIRCUser2bnnn, http://pkgs.alpinelinux.org/packages?name=php7-redis 2017-05-25 12:14:51 I was searching for version 3.5 so I didn't get ny 2017-05-25 12:15:54 The latest image of alpine in docker hub is v 3.5 2017-05-25 12:16:23 Is der a way around ? 2017-05-25 12:16:45 I'm using alpine as base image for my container 2017-05-25 12:20:57 well, you can always build the base image yourself 2017-05-25 12:22:50 or sed -i -e 's/3.5/3.6/g' /etc/apk/repositories && apk upgrade -U -a 2017-05-25 12:23:06 or wait til tomorrow, when alpine:3.6 image should be out 2017-05-25 12:25:01 I will wait for tomorrow... 2017-05-25 12:25:49 or else go by the solution u provided 2017-05-25 12:27:16 is der ny document on building the base image ? 2017-05-25 12:28:40 HoloIRCUser2bnnn: you can follow https://github.com/gliderlabs/docker-alpine/pull/285 2017-05-25 12:31:17 the release should coincide with the docker image release, mostly because many people use alpine for container images. More use it in containers than desktop? 2017-05-25 12:34:07 Thanks 2017-05-25 12:46:12 how do I make alpine a torrent seedbox behind vpn? 2017-05-25 14:11:41 Hi, i'm trying to upgrade to 3.6.0 following https://wiki.alpinelinux.org/wiki/Upgrading_Alpine. A bunch of packages were upgraded, but on next apk update I still get my local repository show up as: 3.5.2 [/media/mmcblk0p1/apks]. I'm wondering if this is normal or if the upgrade wasn't complete. 2017-05-25 14:12:08 I did run apk cache sync as well 2017-05-25 14:24:26 hmm 2017-05-25 14:27:12 Wow, 3.6.0 release 2017-05-25 15:57:07 Oh, pi broke after update to 3.6 2017-05-25 15:57:19 Not booting up 2017-05-25 16:04:18 What should I do? 2017-05-25 16:18:41 pickfire: I upgraded my rpi3, didn't have an issue. It reboots fine. Aside from copying your data off and reinstalling I'm not sure what to recommend for you. 2017-05-25 16:19:21 budric[m]: I am using rpi3 as well. But I uses sys mode. 2017-05-25 16:19:28 Is that the cause? 2017-05-25 16:19:43 What do you mean by copying your data off? 2017-05-25 16:22:13 pickfire: oh, I didn't do the hard disk install on mine, it's running from RAM. 2017-05-25 16:22:45 I mean take the card out, plug it in a working system and copy whatever data you care about - like /etc/ configurations. Reinstall, and copy the data back. 2017-05-25 16:28:13 Ah, I think that is a nice choice as well. 2017-05-25 16:28:34 budric[m]: If you run the RAM mode, how do you do backup and stuffs? 2017-05-25 16:30:49 I run nextcloud, the data directory is nfs mounted and the nfs server backs that up. I occasionally dump database to the nfs mount as well. 2017-05-25 16:30:59 so it's not really an issue for me 2017-05-25 16:32:37 Nextcloud? 2017-05-25 16:32:41 Haven't heard ofit. 2017-05-25 16:33:28 budric[m]: Do you find any differences in RAM mode compared to traditional sys mode? 2017-05-25 16:33:39 Like pros and cons? 2017-05-25 17:09:25 I tried reinstalling but doesn't look like it boots as well. 2017-05-25 17:11:47 I did sudo fdisk /dev/mmcblk0, o, n, multiple times, t, c, a, w. Next, sudo mkfs.vfat /dev/mmcblk0p1. Lastly, mount /dev/mmcblk0p1 /mnt && cd /mnt && sudo tar xf /tmp/alpine-rpi--armhf.rpi.tar.gz 2017-05-25 17:12:35 But it doesn't look like it works as well, not booting, just saw green light turn on and off once during power on and red light stays on. 2017-05-25 17:12:55 Bye, need to sleep. 2017-05-25 17:15:22 Too bad I can't keep my laptop on while pi is down. budric[m] just message me, I will go check the logs. 2017-05-25 18:44:27 to alpine or not to alpine .. 2017-05-25 19:25:06 hi, I'm bulding an iso with aports mkimage.sh, but it seems the apks are not installed? ( also when using mkimage.sh extended ) 2017-05-25 20:03:24 mauli: The current mkimage does not install apks, just provides them in the media-repository. 2017-05-25 20:17:59 aah, bummer 2017-05-25 20:18:04 thx 2017-05-25 20:19:59 mauli: You can manually add packages to install at boot in the world file in the image's initramfs, but it's not automatic. 2017-05-25 20:35:28 kaniini: Would doing something simple like adding an interposer function between apk_tar_parse and apk_sign_ctx_verify_tar that prints the manifest line for each entry be a reasonable approach to implementing manifest-apk-file? 2017-05-25 20:35:54 Oops, wrong channel. 2017-05-26 07:57:03 thanks for the 3.6 docker image to latest :) 2017-05-26 08:10:36 good morning i have question i am installed first time alpine linux and now i cant ssh to it i am installed openssh properly 2017-05-26 08:25:12 did you start sshd? 2017-05-26 08:25:41 How do I prevent DHCP from updating resolv.conf in Alpine? 2017-05-26 08:25:42 installation only won't start services 2017-05-26 08:25:57 netmoleCBA: # rc-update add sshd 2017-05-26 08:26:08 I read about updating dhclient conf at /etc/dhcp/dhclient.conf, but Alpine doesnt hve that file and doesnt have dhclient 2017-05-26 08:26:08 (it does have _dhclient, weirdly) 2017-05-26 08:26:32 yes i did 2017-05-26 08:31:01 ssh says access denied any idea why i cant ssh in 2017-05-26 08:32:22 stevenroose: https://forum.alpinelinux.org/forum/networking/how-avoid-overwriting-etcresolvconf-dhcp ? 2017-05-26 08:37:13 Bun that seems helpful! thansk al ot 2017-05-26 09:28:10 hello, seems that the alpine 3.6 image for rpi is not booting on my pi3 ... 2017-05-26 09:29:12 nothing on the screen so it's hard to say what's wrong 2017-05-26 09:30:20 boris: how many times does the rpi3 ACT-LED blink in succession? 2017-05-26 09:31:18 if it's 7 and you have labeled your FAT partiton, then reformat without the label and try again 2017-05-26 09:32:07 xentec: 1 time orange blink 2017-05-26 09:32:22 like with a working boot with v3.5.2 2017-05-26 09:51:41 same partitions with 3.5.2 and it works 2017-05-26 09:52:14 someone else earlier had a similar problem, so maybe it's broken 2017-05-26 09:54:47 ok :\ 2017-05-26 09:57:01 maybe you can e.g. try 3.6 without updating the kernel? 2017-05-26 10:00:43 yes I just need the latest version of docker so I can wait 2017-05-26 10:04:14 you can try package pinning if you're desperate 2017-05-26 15:35:32 Using a script based on these instructions: https://wiki.alpinelinux.org/wiki/Installing_Alpine_Linux_in_a_chroot 2017-05-26 15:35:49 I'm seeing ERROR: alpine-baselayout-3.0.4-r0: BAD signature 2017-05-26 15:36:07 but just on that package, none of the others 2017-05-26 15:36:51 is this a known issue? am I doing something wrong? 2017-05-26 15:41:40 to be clear, that's when running: ./sbin/apk.static -X ${mirror}/latest-stable/main -U --allow-untrusted --root ${chroot_dir} --initdb add alpine-base 2017-05-26 16:29:15 I'm not getting image previews in Thunar, I have tumbler installed 2017-05-26 17:19:34 hello 2017-05-26 17:20:26 I would like to build a kernel module under alpine linux, but even after installing linux-headers, there is no build in /lib/modules/, may I ask in which package can I find it? 2017-05-26 19:54:06 how are you all? 2017-05-26 19:54:19 <_ikke_> doing okay 2017-05-26 20:15:18 hi, does alpine come with "useradd" binary that allows specifying password hash on commandline for new user? I'm trying to write some bash scripts to provision a system but can't figure out how to set password for user. 2017-05-26 20:19:32 chpasswd? 2017-05-26 20:19:59 yeah, chpasswd is what you want 2017-05-26 20:20:19 echo "username:$crypthash" | chpasswd -e 2017-05-26 20:20:21 should work 2017-05-26 20:20:49 budric[m]: ^ 2017-05-26 20:21:43 so, just in case someone is now present who knows something about this...I'm building an alpine chroot (https://wiki.alpinelinux.org/wiki/Installing_Alpine_Linux_in_a_chroot) 2017-05-26 20:22:12 when I run /sbin/apk.static -X ${mirror}/latest-stable/main -U --allow-untrusted --root ${chroot_dir} --initdb add alpine-base ... 2017-05-26 20:22:32 it installs a bunch of base packages 2017-05-26 20:22:40 but I get ERROR: alpine-baselayout-3.0.4-r0: BAD signature 2017-05-26 20:22:45 only on that one package 2017-05-26 20:23:01 oh dear, i hope dl-cdn isn't having issues again 2017-05-26 20:23:13 vezult: what if you set your mirror to cz.alpinelinux.org/alpine ? 2017-05-26 20:23:24 hmm, let me try 2017-05-26 20:24:24 that seems to be fine 2017-05-26 20:24:45 thanks for reporting that, seems like dl-cdn has issues then :/ 2017-05-26 20:25:22 Shiz: thanks 2017-05-26 20:25:42 i've relayed it, hope someone with access will take a look at it asap 2017-05-26 20:25:43 :P 2017-05-26 21:23:42 Shiz: thanks for the suggestion, works great! 2017-05-26 22:00:34 is there anything I should know before creating a package for alpine? 2017-05-26 22:07:50 luxio: there's a page on how to setup your system for building alpine packages 2017-05-26 22:08:11 aside from that, the musl FAQ can be handy if you run into issues 2017-05-26 22:08:14 it addresses some common issues 2017-05-27 00:39:35 Hi everyone! 2017-05-27 00:39:51 I have the following error during a build in Alpine Linux : "error while loading shared libraries: libpng12.so.0:" 2017-05-27 00:40:05 Do you know what dependency I am missing ? I have tried to install libpng and gd but it didn't change 2017-05-27 00:40:25 that's the bit before the error, not the actual error 2017-05-27 00:41:50 ERROR in ./app/static/StarterTemplateExample.png 2017-05-27 00:41:50 Module build failed: Error: /mnt/mesos/sandbox/builds/docs/bootstrap-styled/node_modules/pngquant-bin/vendor/pngquant: error while loading shared libraries: libpng12.so.0: cannot open shared object file: No such file or directory 2017-05-27 00:44:08 well, the version of libpng shipped in alpine is 1.6 - i.e. libpng16 2017-05-27 00:44:18 if your code absolutely requires 1.2 you may need to build it yourself 2017-05-27 00:45:04 scv, I have tried to install libpng16 but it wasn't found 2017-05-27 00:45:09 instead I have installed libpng 2017-05-27 00:45:29 that is libpng16 2017-05-27 00:45:38 can I have both ? 2017-05-27 00:45:44 there is no libpng12 package 2017-05-27 00:45:58 if your code absolutely requires that version you'll need to build it yourself 2017-05-27 00:47:39 seems like the pngquant-bin npm hasn't updated its stuff in a couple of years: https://github.com/imagemin/pngquant-bin/tree/master/vendor/linux 2017-05-27 00:54:21 dka_: you should probably definitely not use precompiled packages 2017-05-27 00:54:33 there is a very high chance that it will not work on alpine 2017-05-27 00:54:41 third-party precompiled packages that is, like that pngquant 2017-05-27 00:55:03 well. it is one of the sub sub sub library of one of my npm dependency 2017-05-27 00:55:24 I think it is the npm package "image-webpack-loader" 2017-05-27 00:55:31 I have updated from v2 to v3 and I am trying again 2017-05-27 00:56:09 Shiz if there is an high chance that it does not work in alpine 2017-05-27 00:56:33 the problem I have is that I am working within a docker container. And for some reason, it must be a Dockerfile created using `FROM docker:latest` 2017-05-27 00:56:43 I have checked all the docker Dockerfile and they are all using alpine 2017-05-27 00:57:00 so I guess I am a bit stuck with alpine. So is it possible to do that build in any way ? 2017-05-27 00:57:15 what you could do, and mind you i have no idea if this works 2017-05-27 00:57:22 because i don't know how npm works 2017-05-27 00:57:43 is install alpine pngquant and remove the offending precompiled binary 2017-05-27 00:57:47 and symlink it to alpine pngquant 2017-05-27 00:58:10 # apk add pngquant and then ln -sf /usr/bin/pngquant /mnt/mesos/sandbox/builds/docs/bootstrap-styled/node_modules/pngquant-bin/vendor/pngquant 2017-05-27 00:58:29 I don't have enough knowledge of npm to tell you if this is possible between installing the package and it trying to invoke it, though 2017-05-27 00:59:26 Yes 2017-05-27 00:59:28 it will work 2017-05-27 00:59:32 I guess 2017-05-27 00:59:35 but that's ugly 2017-05-27 00:59:51 not as ugly as people shipping precompiled binaries :) 2017-05-27 01:00:03 horrible practice on Linux machines imo, especially dynamically linked as that one seems to be 2017-05-27 01:00:23 but personal opinions and all that 2017-05-27 01:00:45 a more cleaner solution, I presume, would involve making your own fake pngquant-bin package and have npm pick up on it 2017-05-27 01:00:55 that ships no binaries and its entry point just points at the system pngquant 2017-05-27 01:01:07 but again, not enough knowledge of npm here to tell you how to exactly do that 2017-05-27 01:01:20 it will work 2017-05-27 01:01:35 I guess, I don't see why. But this will fix this error for I guess another one 2017-05-27 01:02:16 I was having the dependency from this bundle: https://github.com/tcoopman/image-webpack-loader/blob/v2.0.0/package.json 2017-05-27 01:02:18 because precompiled binaries are not guaranteed to work across all Linux machines, as you just saw 2017-05-27 01:02:26 especially dynamically linked ones 2017-05-27 01:02:38 I am trying to replace it for that one https://github.com/tcoopman/image-webpack-loader/blob/v3.3.1/package.json though I am not even sure if it will change anything 2017-05-27 01:02:42 only the ones the author happens to have on hand, which is usually ubuntu and with some luck centos :P 2017-05-27 01:03:04 i don't think it will 2017-05-27 01:03:24 its possible to build semi-universal bins but nobody ever seems to bother 2017-05-27 01:03:35 mainly because anybody who understands how also understands why its a bad idea :p 2017-05-27 01:03:37 yeah, you can do it with statically-linked musl binaries :P 2017-05-27 01:05:06 that module pulls in a bunch of other packages that has similarly old (and even older) binaries, so probably not going to help you 2017-05-27 01:05:48 ah, the wonderful world of nodejs packages 2017-05-27 01:06:17 just stuff it into some opaque package, nobody's ever gonna need to touch it (/s) 2017-05-27 01:06:47 that's why you put it in a container, so you never have to update it :^) 2017-05-27 01:11:30 ok 2017-05-27 01:11:32 So I guess 2017-05-27 01:11:44 my best option is not to use alpine for the build 2017-05-27 01:12:04 may I ask how can I have a docker without alpine (debian) 2017-05-27 01:12:21 you change the FROM part to something else 2017-05-27 01:12:29 it needs to be docker 2017-05-27 01:12:32 otherwise it doesn't work 2017-05-27 01:12:55 that's a docker question rather than an alpine question 2017-05-27 01:13:12 the FROM thing selects the base "OS", so that's what you need to change 2017-05-27 01:13:29 If you look at all the example of docker in docker (dind), you will notice that they use "docker" as image. This is the only image that work with dind. What I did is to extend this image and installed nodejs, jdk, etc... myself 2017-05-27 01:14:28 if you have docker in docker, why not put your debian container in the docker in the docker 2017-05-27 01:14:39 infinitely docked 2017-05-27 01:15:52 because when I install docker inside debian, I have this error "Cannot connect to the Docker daemon. Is the docker daemon running on this host?" 2017-05-27 01:16:13 this error doesn't happen when I use docker image 2017-05-27 01:16:16 no no, you have docker running on alpine, and on that docker instance you install your debian container 2017-05-27 01:16:54 it's not how gitlab-ci work 2017-05-27 01:16:57 :D 2017-05-27 01:17:08 sounds terrible 2017-05-27 01:17:19 I know. But I must say thanks a lot for trying so hard 2017-05-27 01:18:28 boy that sounds rough 2017-05-27 01:18:55 Yes you are right image-webpack-loader@3.3.1 doesn't change anything, same error. 2017-05-27 01:19:11 So I need to reproduce docker:latest on a base image debian 2017-05-27 01:19:50 This is the Dockerfile: https://github.com/docker-library/docker/blob/5a196cae40e2a0ab5050cf6d79b697e032352b24/17.05/Dockerfile 2017-05-27 01:19:55 any idea how I could start ? 2017-05-27 01:20:36 lol 2017-05-27 01:20:46 Oh I think I got it 2017-05-27 01:20:51 s/apk add/apt install/ probably 2017-05-27 01:21:44 stuff like this makes me regret being interested in computers, i should just go run a taco truck and not subject myself to this madness :D 2017-05-27 01:22:07 sounds good, can I visit 2017-05-27 01:22:13 sure 2017-05-27 02:42:03 honk hole 2017-05-27 03:22:17 hi, somebody know how create custom iso? 2017-05-27 08:32:17 Hey 2017-05-27 08:32:21 Is anybody on? 2017-05-27 08:34:22 guess not 2017-05-27 08:36:44 Kek 2017-05-27 08:36:54 Are you an Alpine "expert" by any chance, Bun? 2017-05-27 08:37:25 alpine certified engineer, yes; how can I help you today? 2017-05-27 08:40:10 Alright, well, I'm new, so sorry if this question is super duper obvious. 2017-05-27 08:40:33 I have an HP Stream 13, and the NIC on that does not play nice with Linux. It's a BCM43142 2017-05-27 08:40:43 Now, I can get it running on Ubuntu by install a couple of packages with dpkg 2017-05-27 08:40:56 However, I'm not sure if that's appropriate -- or would even work -- using Alpine. 2017-05-27 08:41:29 Also I'm aware that you may have been joking about being an Alpine certified engineer but I don't care. 2017-05-27 08:41:34 Even if you were you might know what the deal is. 2017-05-27 08:41:44 well, that depends on what is in those debs or whathaveyou 2017-05-27 08:41:59 just the kernel module? and/or firmware? 2017-05-27 08:43:54 this seems relevant: https://pkgs.alpinelinux.org/package/v3.6/main/x86/b43-fwcutter 2017-05-27 08:43:57 Well, one of them was dkms, and the other one is bcmwl-kernel-source 2017-05-27 08:44:27 That seems extremely relevant actually 2017-05-27 08:46:23 https://wiki.alpinelinux.org/wiki/Connecting_to_a_wireless_access_point also some special instructions here in the bottom section 2017-05-27 08:46:54 Oh wow, this is great, man. 2017-05-27 08:51:00 Thanks a lot 2017-05-27 13:42:45 https://ollieparanoid.github.io/post/postmarketOS/ <= you guys seen this? 2017-05-27 13:42:55 (alpine based) 2017-05-27 13:43:24 posted on another Alpine channel 2017-05-27 15:52:14 Tsutsukakushi: neat 2017-05-27 18:57:26 Hi! Any of your are using Alpine as your main OS? I mean, in your laptop or desktop PC, and not inside a VirtualMachine. 2017-05-27 18:58:06 (I'm considering install Alpine as my main OS, but I want to know your experiences first, thanks) 2017-05-27 18:58:26 (I'm currently using ArchLinux, used Debian, Ubuntu in the past) 2017-05-27 19:21:03 Guest58142: I ran it on my desktop for a while before I ditched my desktop 2017-05-27 19:21:08 I am currently running it on all of my servers 2017-05-27 19:21:13 and I know at least two people who use it as laptop OS 2017-05-27 19:21:14 :P 2017-05-27 19:26:53 Shiz: tks! 2017-05-27 19:51:24 Hi there. Just trying to get Alpine Linux to boot on the new Udoo X86 board (https://www.udoo.org/docs-x86/Introduction/Introduction.html) setup-alpine works great but after rebooting it can't find the boot device. I tried to install it to the internal emmc (/dev/mmcblk0). It looks like that the initramfs can't access emmc devices. Any hints? 2017-05-27 19:54:36 hmm, sounds like you may need to add the relevant modules to mkinitfs.conf 2017-05-27 19:58:26 I just used the alpine standard iso from the website. So I need to build the initramfs myself? 2017-05-27 19:59:13 the initramfs is always built locally when you do an install 2017-05-27 19:59:15 :) 2017-05-27 19:59:24 mkinitfs.conf just tells it which kernel modules etc it should contain 2017-05-27 20:06:37 Sorry but I am new to this and can't find the mkinitfs.conf when I boot from the usb stick i created 2017-05-27 20:07:20 it should be present after you run setup-alpine, on your target disk 2017-05-27 20:08:02 But I can't boot into the target disk? Can I modify it after the installation from the usb boot? 2017-05-27 20:08:56 yeah 2017-05-27 20:12:32 I mounted mmcblk0p3 to /mnt/system/ and can now access /etc/mkinitfs/mkinitfs.conf now I do need to find the emmc driver and add it into the features string, right? 2017-05-27 20:14:21 right, if you chrooted into that rootfs, you should find the kernel module that applies to your mmc device and add it to /etc/mkinitfs/mmc.modules 2017-05-27 20:14:28 and make sure mmc is in the features string in mkinitfs.conf 2017-05-27 20:14:50 lspci -k can help you with figuring out the module name 2017-05-27 20:15:01 sorry, /etc/mkinitfs/features.d/mmc.modules 2017-05-27 20:17:32 Okay. added the string "mmc" to the feature list. Now I need to find which module I need for mmc support. lspci -k just lists some classes and names hard to guess which one is the right one. I have no idea how to chroot the rootfs 2017-05-27 20:19:04 oh, mmc wasn't already in there? 2017-05-27 20:19:57 lspci -k is kinda cryptic. Nothing named mmc 2017-05-27 20:20:19 in the feature list, I mean 2017-05-27 20:20:29 if it wasn't already in the feature list, that may be enough to make it work :p 2017-05-27 20:20:39 do you have a separate boot partition? 2017-05-27 20:21:05 Yeah boot is on mmcblk0p1 2017-05-27 20:22:11 and root on p2? 2017-05-27 20:22:51 p3 i guess, that is what I mounted to edit the mkinitfs.conf 2017-05-27 20:22:55 right 2017-05-27 20:22:59 then p2 is probably swap 2017-05-27 20:23:01 what you want to do is 2017-05-27 20:23:24 chroot into the installed system, as such: 2017-05-27 20:23:32 mount /dev/mmcblk0p1 /mnt/system/boot 2017-05-27 20:23:37 mount --rbind /dev /mnt/system/dev 2017-05-27 20:23:42 mount -t proc none /mnt/system/proc 2017-05-27 20:23:48 mount -t sysfs none /mnt/system/sys 2017-05-27 20:23:52 chroot /mnt/system 2017-05-27 20:24:04 you should now be 'inside' the installed system with everything properly mounted 2017-05-27 20:24:36 can you btw answer my above question if mmc was already in the feature list or not? :p 2017-05-27 20:24:50 No it was not. 2017-05-27 20:24:54 ah, okay 2017-05-27 20:25:01 that's weird, I thought it was by default 2017-05-27 20:25:28 what does your /etc/mkinitfs/mkinitfs.conf look like now? 2017-05-27 20:27:36 sorry give me a sec to chroot. 2017-05-27 20:29:44 np 2017-05-27 20:32:17 featrues="ata base ide scsi usb virtio ext4 mmc" (mmc was added by me) 2017-05-27 20:39:24 So I assume I just no run "mkinitfs -c /etc/mkinitfs/mkinitfs.conf -b /" to recreate the initfs? 2017-05-27 20:44:07 fweinb: just # mkinitfs should be enough 2017-05-27 20:44:14 also i hope you spelt features right in the actual file ;) 2017-05-27 20:44:33 Oh yes just a typo here. 2017-05-27 20:45:30 I will try rebooting. Thanks for your help. 2017-05-27 20:46:07 Awesome! Its running! 2017-05-27 20:48:25 But maybe mmc should be included by default. 2017-05-27 20:53:57 yes, I think it was before... 2017-05-27 20:54:03 Sorry you had to deal with that :P 2017-05-27 20:57:36 No problem. Amazing support! Thank you. 2017-05-27 20:58:01 \o 2017-05-27 21:22:11 hey guys, I'm trying to run alpine on kvm but it doesn't detect the network interface 2017-05-27 21:23:18 I use libvirt. 2017-05-27 21:23:29 what NIC type are you using? 2017-05-27 21:23:33 the cmd I used to create the vm: virt-install --connect qemu:///system --name alpine --memory 2048 --vcpus 1 --cpu host --cdrom /var/lib/libvirt/iso/alpine-virt-3.6.0-x86_64.iso --disk size=10 --network network=default --graphics spice --video qxl --channel spicevm 2017-05-27 21:27:50 so what sort of emulated NIC are you using? 2017-05-27 21:30:10 alternatively have you configured the network in libvirt? 2017-05-27 21:36:56 How can I see the type? I just use the default network 2017-05-27 21:36:59 network works on other virtual machines out of the box 2017-05-27 21:41:13 hmrodrigues - inside alpiine you need to run /sbin/setup-interfaces 2017-05-27 21:42:27 & probably - rc-update add networking 2017-05-27 21:44:03 @BiL0GIc ip a still only shows lo 2017-05-27 21:44:57 if I add eth0 to /etc/networking/interfaces it says that it can't find the device 2017-05-27 21:46:42 hmrodrigues: uuh 2017-05-27 21:47:33 hmrodrigues: dump the libvirt xml, it should be in a field within -> 2017-05-27 21:49:07 rtl8139' 2017-05-27 21:49:40 ah 2017-05-27 21:49:45 wtf 2017-05-27 21:49:53 ah, emulated 2017-05-27 21:49:59 i was in shock for a moment 2017-05-27 21:50:02 lol 2017-05-27 21:50:36 hmrodrigues: one sec 2017-05-27 21:51:14 @Shiz alright 2017-05-27 21:51:57 okay, what happens if you # modprobe 8139cp 2017-05-27 21:52:37 not found in modules.dep 2017-05-27 21:52:50 the virt kernel only has virtio iirc 2017-05-27 21:53:44 ah 2017-05-27 21:53:48 hmrodrigues: are you using the virt kernel? 2017-05-27 21:55:15 yes 2017-05-27 21:56:00 working now, I told libvirt to use virtio 2017-05-27 22:00:56 as I'm already here, when should I run alpine from the disk and when it should run from tmpfs in virtual machines? 2017-05-27 22:02:32 is tmpfs only for data storage or it can be used to deploy an app or host postgres? 2017-05-27 22:03:38 the name tmpfs gives it away doesn't it? if you want persistance, store things on disk 2017-05-27 22:04:25 and running postgres purely from memory/swap may or may not work depending on how much memory you have available 2017-05-27 22:05:21 when I say tmps I'm saying run alpine from tmpfs. like when running setup-disk the step where is asks how to use the drive 2017-05-27 22:05:45 postgres was an example haha 2017-05-27 22:05:58 if you are running postgresql, you most likely do not want to run from tmpfs 2017-05-27 22:06:13 tmpfs is mostly for setups where configuration is separate from data 2017-05-27 22:06:18 such as hypervisor control planes 2017-05-27 22:06:39 in such case, you would run from tmpfs and store your disk images on your disks (provisioning them however you wish, likely with lvm(8)) 2017-05-27 22:07:11 that way if there is a disk problem you can log in and diagnose the issue 2017-05-27 22:07:12 oh ok I understand 2017-05-28 14:20:34 <_spOOn_> hey guys, I'm new to alpine, and I'm going through https://wiki.alpinelinux.org/wiki/Creating_an_Alpine_package to create a package 2017-05-28 14:21:44 <_spOOn_> during abuild -r it appears to be failing, as its trying to perform the install, and the user I'm running it as doesn't have permissions to write to the destination dir (ie, /usr) 2017-05-28 14:23:31 <_ikke_> _spOOn_: you need to install to $pkgdir 2017-05-28 14:23:37 <_ikke_> not to / 2017-05-28 14:24:13 <_spOOn_> _ikke_: if I share my APKBUILD, are you able to point out where I've stuffed up? 2017-05-28 14:24:22 <_spOOn_> again, sorry for the dumb questions... 2017-05-28 14:24:31 <_ikke_> _spOOn_: Don't worry 2017-05-28 14:24:36 <_spOOn_> new to alpine 2017-05-28 14:24:36 <_ikke_> _spOOn_: I can take a look 2017-05-28 14:25:32 <_ikke_> https://wiki.alpinelinux.org/wiki/APKBUILD_Reference#pkgdir 2017-05-28 14:25:54 <_ikke_> https://wiki.alpinelinux.org/wiki/APKBUILD_examples:Simple\ 2017-05-28 14:29:52 <_spOOn_> _ikke_: https://paste.ee/p/i6TN2 2017-05-28 14:30:03 <_spOOn_> thats what I've put together so far... 2017-05-28 14:32:00 <_ikke_> _spOOn_: let me see 2017-05-28 14:32:32 <_ikke_> https://wiki.alpinelinux.org/wiki/APKBUILD_examples:Python 2017-05-28 14:32:48 <_spOOn_> yeah I looked through those... 2017-05-28 14:32:48 <_ikke_> you need to add --root="$pkgdir" to the install command 2017-05-28 14:33:02 <_spOOn_> okies, ill give that a shot 2017-05-28 14:35:15 <_spOOn_> hmm, getting closer... 2017-05-28 14:39:02 <_spOOn_> okies, think I have it all set to go now, needed the doc subpackage, and not a dev subpackage... 2017-05-28 14:39:31 <_spOOn_> _ikke_: thanks for the help 2017-05-28 14:40:47 <_ikke_> np 2017-05-28 14:44:19 <_spOOn_> _ikke_: one last question 2017-05-28 14:45:09 <_spOOn_> now that I have it working, am I just dumping the APKBUILD in aports/testing and then creating a pull request? 2017-05-28 14:45:39 <_ikke_> You need to create a subdir 2017-05-28 14:45:48 <_ikke_> but then, yes 2017-05-28 14:46:39 <_spOOn_> cool, thanks 2017-05-28 14:46:51 <_spOOn_> again, sorry for the dumb questions :) 2017-05-28 14:49:59 <_ikke_> no need to excuse 2017-05-28 15:19:44 <_spOOn_> hmm, seems my tests in travis ci have failed :( 2017-05-28 15:35:27 <_ikke_> link? 2017-05-28 21:34:55 Hey 2017-05-28 22:38:44 So I'm getting an odd error. 2017-05-28 22:39:12 It says permission denied when I try to SSH into my little box 2017-05-28 22:40:36 password ? 2017-05-28 22:41:05 Yeah 2017-05-28 22:41:31 go into /etc/ssh/sshd_config and change the PermitRootLogin setting 2017-05-28 22:41:42 since alpine 3.6, it defaults to requiring SSH keys instead of password 2017-05-28 22:42:13 Oh, well, okay 2017-05-28 22:42:40 (or just use an SSH key) 2017-05-28 22:42:56 Madness. 2017-05-28 22:43:52 Alright that worked. 2017-05-28 22:44:45 Thank you for the advice 2017-05-28 22:53:36 thestranjer: i don't think it's madness tbh 2017-05-28 22:53:58 anyone can have a password, crypto keypairs are less easy to steal 2017-05-28 23:31:52 hello 2017-05-28 23:35:25 hi, how is the best way to upgrade 3.3 version to 3.6? 2017-05-29 01:37:27 in general, backup your data and reinstall. it's in no way Alpine specific, and it's less risk free than taking your chances upgrading 2017-05-29 01:37:39 oh wait 2017-05-29 01:37:54 4:37 am, making silly mistakes 2017-05-29 01:38:07 it's more risk free than upgrading 2017-05-29 04:18:08 Alrihgt, I found a weird bug 2017-05-29 04:18:56 When your WiFi password has spaces in it, the setup-alpine script fails 2017-05-29 04:19:19 lol 2017-05-29 04:19:23 It only takes in the first word. 2017-05-29 04:19:30 sounds like unquoted variables 2017-05-29 04:19:35 Agreed 2017-05-29 04:19:58 So I'm going to futz around with it a bit and look at stuff like 'setup-alpine'. Is that a bash script? About to find out. 2017-05-29 04:21:30 It is! 2017-05-29 04:22:54 Alright let's see if I can find where it passes this off to whatever other script that gets passwords from you 2017-05-29 04:40:07 Also, you better not run setup-alpine more than once. 2017-05-29 04:55:42 Alright, so I got it to work by modifying /sbin/setup-interfaces to use quotation marks 2017-05-29 04:55:51 But it's now, after the reboot, not getting a DHCP lease. 2017-05-29 05:17:39 Yeah so. 2017-05-29 05:17:53 UDHCP is not working. 2017-05-29 05:18:21 It just sends a discover a few times, and then fails. 2017-05-29 05:30:23 Yeah, it looks like Alpine doesn't function correctly with a WiFi card 2017-05-29 05:30:25 Unfortunate. 2017-05-29 07:18:52 Wiki states that edge is unstable and not meant to be used. However many packages exist only in edge/testing. Is it safe to use edge/testing along with stable/main? 2017-05-29 07:20:28 it's not unsafe, but it may also simply not work 2017-05-29 07:21:01 Hi there. 2017-05-29 07:21:06 packages in testing are compiled against edge, so if library dependencies in edge are incompatible with those in stable, it will simply refuse to execute 2017-05-29 07:21:12 think for instance soname bumps 2017-05-29 07:21:15 hello 2017-05-29 07:21:26 Alright, so I'm new. 2017-05-29 07:21:36 To this distribution, anyway. 2017-05-29 07:22:24 welcome 2017-05-29 07:22:30 I'm hoping to install qbittorrent. I'm looking to make a seedbox. However, it's not in the repositories for apk add, and I'm not sure how I'd go about installing it. 2017-05-29 07:22:41 I'm mostly used to Debian-based distributions so, this is a bit alien to me. 2017-05-29 07:24:05 seems like we don't package qbittorrent right now 2017-05-29 07:24:16 @Shiz: Oh, I've forgotten it is not source based. Is there any way to help with testing packages (to push them into stable)? Do you have some testing infrastructure like fedora's bodhi? 2017-05-29 07:24:31 isn't qbittorrent a graphical client, though TheStranjer 2017-05-29 07:24:44 that seems like it wouldn't be that fit for a seedbox 2017-05-29 07:24:48 but maybe i'm mistaken 2017-05-29 07:25:23 I thought it was command line. 2017-05-29 07:25:32 freyr: packages tend to get moved into the community repos after we get confirmation from people that they work and someone is willing to maintain them, essentially 2017-05-29 07:25:43 so if a package from testing works from you, great! let us know 2017-05-29 07:25:44 Now that you mention it, the "q" in the beginning should be a tell-tale sign that it's a GUI-based one. 2017-05-29 07:26:15 TheStranjer: i may recommend rtorrent or transmission-cli; we package both :) 2017-05-29 07:26:21 That said, I see everything wants a Docker container on here when I look for it. 2017-05-29 07:26:30 Yeah. 2017-05-29 07:26:37 I was going by a recommendation from someone else. 2017-05-29 07:26:41 I'm a huge fan of Transmission, anyway 2017-05-29 07:26:53 And `apk add transmission-cli` worked with zero hassle, so 2017-05-29 07:26:55 Thanks for the advice. 2017-05-29 07:26:59 :) 2017-05-29 07:27:06 sorry about your wifi issue, btw 2017-05-29 07:27:21 could you tell me what kind of chipset you use? 2017-05-29 07:27:57 Honestly, I was just bitching into the wind on that one. I decided to do what I should have done anyway: use the Ethernet port. 2017-05-29 07:28:24 eh, if something doesnt work its annoying, no need to blame yourself there 2017-05-29 07:28:56 That said, I was futzing around with some of the bash scripts that came with it, and there WAS an issue where it wasn't quoting the WiFi password right. 2017-05-29 07:29:06 So my gut says that this was just a recurring issue and I couldn't find the other case of it. 2017-05-29 07:29:30 yeah, I recall an issue like that a bit back 2017-05-29 07:29:31 I think this is so because I could get it to connect and obtain an IP address through DHCP during installation, but not after the reboot. 2017-05-29 07:29:55 So it's likely not saving the right password, or not submitting the right password to wpa_supplicant at some point, or something like that. 2017-05-29 07:30:13 i'll bump that issue in our backlog if i can find it 2017-05-29 07:30:22 I mean that's my guess. Like I said, I don't really know. 2017-05-29 07:31:03 well, at least the spaces-in-password is a known issue, so that's definitely worth bumping in prio 2017-05-29 07:31:10 i thought it already had been fixed, but I guess not 2017-05-29 07:32:07 Well, I was also on 3.5.2 2017-05-29 07:32:11 And I just noticed that there's a 3.6 2017-05-29 07:32:47 I fixed WiFi psk in 3.6 2017-05-29 07:32:57 :) 2017-05-29 07:33:31 So there you have it. 2017-05-29 07:33:37 We should probably backport it 2017-05-29 07:33:58 But I'm on holiday 2017-05-29 07:34:07 Yeah, when I first found it, I was like "SCORE! Now I get to make a pull request and I'm just a nooblet to this distro still" 2017-05-29 07:34:19 But then I looked at the GitHub repository and it had already been fixed 2017-05-29 07:34:36 Blast! Another day to put my name on an obvious fix (that only becomes obvious when you use the app) 2017-05-29 07:35:53 :P 2017-05-29 07:35:59 don't worry, I'm sure there are many more opportunities 2017-05-29 07:38:27 So I'm not the first to turn an old beat up craptop into a seedbox out of Alpine, huh. 2017-05-29 07:38:30 I'm not surprised. 2017-05-29 07:39:06 not sure about seedboxes, but i know someone running alpine on their netbook 2017-05-29 07:39:19 i used to run it on my desktop until i ditched that thing and run it on all my servers :P 2017-05-29 07:41:58 I mean, I will admit I've caved to The Man and will use Ubuntu on desktops. 2017-05-29 07:42:12 And really, laptops that are meant for everyday use for, you know, regular stuff. 2017-05-29 07:43:19 I use the weirder distributions to run servers and specific use case boxes. 2017-05-29 07:43:19 I mean, I know a lot of people say systemd is basically malware, but I'll eat it in the interest of convenience. 2017-05-29 07:58:10 hi there 2017-05-29 08:03:28 hi 2017-05-29 08:05:26 i am new at alpine linux but with some history in linux i have problem to install postrgresql-dev but it conflicts with openssl-dev which i need to have installed any advice 2017-05-29 08:09:33 paste the error :d 2017-05-29 08:10:13 krmela, we build things by default against libressl 2017-05-29 08:10:39 trying to have libressl-dev and openssl-dev installed same time is not supported; could you build your things against libressl? 2017-05-29 08:10:51 if not, you may need to switch installed packages in between 2017-05-29 08:18:46 hi all... 2017-05-29 08:19:58 well i am trying use alpine as host for rails app 2017-05-29 08:20:03 I was upgrading certbot package to newer version (0.7.0-r0 -> 0.14.0-r0), but when I want run it I get: "pkg_resources.DistributionNotFound: The 'pyrfc3339' distribution was not found and is required by certbot" 2017-05-29 08:20:53 but package "py-rfc3339" is installed... 2017-05-29 08:21:31 :'( 2017-05-29 08:23:34 hi Guys just attempted install with setup-alpine 2017-05-29 08:23:51 Ive come to selecting drive. 2017-05-29 08:23:56 Sys lvm etc 2017-05-29 08:24:45 my partitions i wish to choose is Gpt dev/sda4 2017-05-29 08:25:05 I select sda 2017-05-29 08:25:44 I dont have an option to install sda4 that I have already partitioned 2017-05-29 08:25:59 as ext4 2017-05-29 08:29:23 have you check the wiki? 2017-05-29 08:29:41 looking right now 2017-05-29 08:30:39 Note: When the setup-alpine script asks for a disk, say "none". It will then prompt whether you'd like to preserve modifications on any writable medium 2017-05-29 08:30:55 I'll try that 2017-05-29 08:31:33 no thats not it. 2017-05-29 08:31:39 thats for diskless 2017-05-29 08:32:16 what about part Installing alpine on hdd dualbooting? 2017-05-29 08:33:41 looking at that 2017-05-29 08:33:44 mystified: you should mount the FS as you'd like it to a mountpoint (including /boot parts and the like) 2017-05-29 08:33:49 and then run setup-disk /that/mnt/point 2017-05-29 08:34:04 i'm not a techie 2017-05-29 08:34:17 mount -t ext3 /dev/sda4 /mnt 2017-05-29 08:34:24 with that 2017-05-29 08:34:44 Shiz at what point 2017-05-29 08:35:04 do I mount the drive & 2017-05-29 08:35:26 so I should not run the full installer 2017-05-29 09:49:20 You guys even package Ruby! Sweet. 2017-05-29 09:54:16 hi, I'm using coreboot with a GRUB2 payload and I'm not able to boot alpine-linux after I've installed it to a hard drive. where do I find the kernel and initrd to boot manually? 2017-05-29 10:07:17 alpinist-: 3.6.0? 2017-05-29 10:07:51 Marc1n: Yes. 2017-05-29 10:09:22 during installation you choosed "sys" ? 2017-05-29 10:10:00 Marc1n: let me do install it again and get back at you, I'm unsure. 2017-05-29 10:10:08 -do 2017-05-29 10:10:55 cool , check it 2017-05-29 10:17:35 Marc1n: yes, "sys". 2017-05-29 10:20:28 and still no luck huh? 2017-05-29 10:20:47 nope 2017-05-29 10:21:27 does that work, grub2 payload + syslinux? 2017-05-29 10:23:21 the kernel and initrd are in /boot called vmlinuz and initramfs (if vanilla) or vmlinuz-suffix/initramfs-suffix for non-vanilla kernels 2017-05-29 10:23:58 LINUX vmlinuz-virthardened 2017-05-29 10:23:58 INITRD initramfs-virthardened 2017-05-29 10:24:05 in /boot 2017-05-29 10:25:19 but in my case i use version for virtualization 2017-05-29 10:27:08 maybe you will need to install bootloader manually after instalation 2017-05-29 10:27:28 everything is on wiki ( installing alipne on hdd dualbooting ) / Installing bootloader manually 2017-05-29 10:34:00 bun Marc1n: I've mounted the disk from the alpine-linux USB stick and had a look; it should be "/boot/vmlinuz-hardened". However, if I try to load it from the GRUB command line, I get "error: file '/boot/vmlinuz-hardened' not found". 2017-05-29 10:36:47 can grub find your usb stick? 2017-05-29 10:36:56 try ls and see the device nodes it returns 2017-05-29 10:36:59 Shiz: yes, that works. 2017-05-29 10:37:07 so e.g. 2017-05-29 10:37:11 ls (hd0)/ gives the contents? 2017-05-29 10:37:27 yes, the lvm device is there (I'm using "lvm" & "sys" during installation) 2017-05-29 10:37:36 oh, wait 2017-05-29 10:38:16 Shiz: well, it's lvm, so I guess "ls lvm/vg0-lv_root" won't work =) 2017-05-29 10:38:32 no :p 2017-05-29 10:38:40 kernel on lvm is not gonna work 2017-05-29 10:38:46 your boot part would need to be separate 2017-05-29 10:39:01 okay, so should I use "sys" without lvm and try again? 2017-05-29 10:39:17 by default it will create a separate boot part 2017-05-29 10:39:52 whats your part layout look like? 2017-05-29 10:40:59 Shiz: setup-alpine did that for me 2017-05-29 10:41:16 so I had one lv "root" and one lv "swap" IIRC 2017-05-29 10:41:23 hmm 2017-05-29 10:42:08 well, can you verify your part layout? :P 2017-05-29 10:42:44 Shiz: yes, I can. Right now I'm installing it again without lvm just to see if that works... 2017-05-29 10:43:09 aight 2017-05-29 10:45:35 <@Shiz> ls (hd0)/ gives the contents? -> No, it doesn't (I have "memdisk", "proc", "cbfdisk", "ahci0", "ahci0,msdos3", "ahci0,msdos2" and "ahci0,msdos1" available from grub>). 2017-05-29 10:46:01 what about ahci0,msdos1 2017-05-29 10:46:08 ls (ahci0,msdos1) 2017-05-29 10:46:17 optionally with slash behind 2017-05-29 10:46:44 all "ls ahci....) outputs return an empty line 2017-05-29 10:47:28 ah 2017-05-29 10:47:29 wait 2017-05-29 10:47:55 so I do have to use the brackets as well^^ 2017-05-29 10:49:20 Shiz: "grub> ls (ahci0,msdos1)" returns "filesystem ext*" and the UUID, "Partition start at 1024KiB - Total size 102400KiB" 2017-05-29 10:49:46 add a / at the end of that ls 2017-05-29 10:50:25 now vmlinuz-hardened shows up 2017-05-29 10:50:40 I'll try using that 2017-05-29 10:50:43 just a sec 2017-05-29 10:52:25 yeah i don't htink you need to add an explicit /boot 2017-05-29 10:52:28 since it's already the boot part 2017-05-29 10:52:51 I wonder what my "root" is, "root='(ahci,msdos1)'" won't work. 2017-05-29 10:53:10 that should work, weird 2017-05-29 10:54:25 typo, it works. :/ 2017-05-29 10:56:47 I'll need to do that again, "grub> boot" won't do anything, no output, no new line, just the fan of the laptop blowing... 2017-05-29 11:01:25 Shiz: here's what I do: "grub> set root='(ahci0,msdos1)'" > "grub> linux /vmlinuz-hardened root=(ahci0,msdos1)" > "grub> initrd /initramfs-hardened" > "grub> boot" 2017-05-29 11:01:39 ^^ the HDD LED blinks a couple of times and then nothing happens. 2017-05-29 11:01:53 I wonder where the error lies 2017-05-29 11:01:55 any ideas? 2017-05-29 11:03:07 probably missing command line args 2017-05-29 11:03:39 alpinist-: linux isn't going to like root=(ahci0,msdos1) much 2017-05-29 11:03:41 that's grub syntax 2017-05-29 11:03:47 (as kernel command line) 2017-05-29 11:03:54 hmmm 2017-05-29 11:04:03 I just tried without, no difference. 2017-05-29 11:04:07 check if you have an extlinux.conf 2017-05-29 11:04:12 I do have that 2017-05-29 11:04:13 take the command line params from that file 2017-05-29 11:04:15 :P 2017-05-29 11:04:20 (after the APPEND statement) 2017-05-29 11:04:23 that's a splendid idea :) 2017-05-29 11:04:53 quick question, can I get the rpi build to DHCP + SSH on boot, don't have an HDMI cable or USB keyboard here right now. 2017-05-29 11:04:56 ethernet tho 2017-05-29 11:05:25 damongant: yes, should be possible 2017-05-29 11:05:30 you may need an apkovl file 2017-05-29 11:05:40 to start sshd on boot and add your authorized keys 2017-05-29 11:05:47 brb, lunch 2017-05-29 11:11:21 Shiz: Using the parameters from extlinux.conf worked. My guess is that it's about "ext4". Thank you very much indeed for the help! =) 2017-05-29 11:12:56 hh 2017-05-29 11:38:58 alpinist-: np, glad it worked out :) 2017-05-29 14:10:43 is there documentation for APKBUILD directives like provides and such, or should I just read the source? 2017-05-29 14:56:26 (no; reading the source :) 2017-05-29 15:25:07 TBB, check our wiki 2017-05-29 16:42:52 clandmeter, I did but besides the "Abuild and helpers" page didn't find much else 2017-05-29 16:43:34 however, I did read the source and made notes as I went through it, a couple more things are now clearer for me 2017-05-29 16:47:12 documentation is not alpine's best part. 2017-05-29 16:47:17 sorry about that. 2017-05-29 17:00:47 TBB - there is some documentation under https://wiki.alpinelinux.org/wiki/APKBUILD_Reference that may be of help. 2017-05-29 17:14:54 hi, what defines package python to be python2 in 3.6? I cannot find the meta package for it, so I'm curious 2017-05-29 17:15:21 closest I can find is, https://git.alpinelinux.org/cgit/aports/tree/main/python/APKBUILD?h=3.3-stable 2017-05-29 17:16:09 and https://pkgs.alpinelinux.org/package/v3.3/main/x86_64/python 2017-05-29 17:16:28 if I change 3.3 to 3.6 in either link it fails 2017-05-29 17:21:35 magellanic: https://git.alpinelinux.org/cgit/aports/tree/main/python2?h=3.6-stable 2017-05-29 17:21:45 in the APKBUILD: 2017-05-29 17:21:47 provides="python=$pkgver-r$pkgrel" 2017-05-29 17:21:49 replaces="python" 2017-05-29 17:23:47 ah okay, hmm. So in 3.6 if you apk add python, it knows to fetch python2, I was just wondering how, because there are python2 and python3 packages as well 2017-05-29 17:25:25 well, there you go :P 2017-05-29 17:25:33 there is not necessarily a 1-to-1 mapping from APKBUILD to package 2017-05-29 17:25:37 makes sense thought, thanks. So if I want python3 specifically I should say apk add python3... 2017-05-29 17:25:44 most APKBUILDs provide multiple packages (think subpackages and the like) 2017-05-29 17:25:47 yeap 2017-05-29 17:26:10 cool, thanks 2017-05-29 17:51:24 hi all, the gnome shell de is not yet on alpine is it? better to use xfce? 2017-05-29 17:53:06 I'd recommend using XFCE for now at least 2017-05-29 17:53:35 it's the most stable of the DE's I've tried on Alpine so far 2017-05-29 17:54:11 thanks TBB, that's not a problem 2017-05-29 19:03:49 By the way. 2017-05-29 19:03:54 I got Alpine working for my purposes entirely 2017-05-29 19:03:56 Great stuff man 2017-05-29 19:04:14 <_ikke_> TheStranjer: \o/ 2017-05-29 19:14:21 alpine is a wonderful container distro, security focus and small, love it 2017-05-29 19:24:17 it's also a wonderful non-container distro ;p 2017-05-29 19:25:23 containers in 2017 2017-05-29 19:25:25 what a thought 2017-05-29 19:28:41 true, I'm just too used to a bloated desktop I guess ;p 2017-05-29 19:32:33 I'm not actually in a container 2017-05-29 19:32:36 I put this thing directly onto the drive 2017-05-29 19:34:46 Wait. 2017-05-29 19:34:55 It's in MusicBrainz but it's not getting it 2017-05-29 19:52:50 I was just wondering, does Alpine provide packages for video & audio codecs like gstreamer? Or is that not the kind of thing it's for? 2017-05-29 19:53:17 we provide them yes. 2017-05-29 19:54:16 discensa2: check http://pkgs.alpinelinux.org/packages?name=*gst*&branch=edge&repo=&arch=x86_64&maintainer= 2017-05-29 19:55:15 great, thanks. they're in the edge repo! that's why I couldn't find em. cheers 2017-05-29 19:57:13 my final question. it doesn't seem like thunderbird is there. not necessarily a problem, I can use claws, I was just curious as to why 2017-05-29 19:57:44 doesn't seem like anyone bothered to package it :P 2017-05-29 19:57:50 didn't mozilla drop thunderbird too? 2017-05-29 19:58:09 oh, it got decoupled 2017-05-29 19:58:34 yeah they dropped it half-way 2017-05-29 19:58:57 i'll take the opportunity to discover claws :) 2017-05-29 19:59:30 i'm really excited about alpine, keep up the good work guys! 2017-05-29 20:00:01 \o 2017-05-29 22:39:07 stable DEs? 2017-05-29 22:39:15 what about something more simple, like Ratpoison? 2017-05-30 00:15:45 I'm trying to get connman working but I keep getting a "/net/connman/technology/wifi: Not supported" error when I try to scan. Anyone have any suggestions? 2017-05-30 00:19:05 do you have wpa_supplicant installed? 2017-05-30 00:19:23 if so, try starting it 2017-05-30 00:23:09 Lemme try that out. I assumed connman would start it on its own. 2017-05-30 00:24:26 apparently it may fail too 2017-05-30 00:24:29 to* 2017-05-30 00:29:55 ah, hmm 2017-05-30 00:30:23 yeah i think it just wants it already running 2017-05-30 00:32:13 No luck. Still same error. 2017-05-30 00:32:50 i guess try starting connmand in debug mode 2017-05-30 00:32:50 Yeah, that's what I tried. 2017-05-30 00:32:57 service connman stop and 2017-05-30 00:33:03 connmand -dn 2017-05-30 00:33:09 and see what goes awry 2017-05-30 00:33:27 Ok 2017-05-30 00:40:02 The debug messages don't seem terribly enlightening. 2017-05-30 05:01:55 Hey, is anyone else having issues booting fresh alpine 3.6 on a raspberry pi 3? 2017-05-30 07:40:53 jpas: I am also having issues booting alpine linux 3.6 on raspberry pi 2/3. 2017-05-30 10:47:22 <_ikke_> What can prevent root login on a serial interface? It does not even ask for a password 2017-05-30 10:47:53 <_ikke_> hmm, looks like I need to update /etc/inittab 2017-05-30 10:48:52 mmm, root logins on serial. That was a while ago. logindevperms and marking the console as "secure" to getty springs to mind, from ~20 years ago. 2017-05-30 10:48:53 <_ikke_> hmm, might be something scaleway specific 2017-05-30 10:49:19 you need to add your serial tty to /etc/securetty too if it's not there already 2017-05-30 10:49:41 <_ikke_> It's not there 2017-05-30 10:50:05 <_ikke_> przemoc: that was it, thanks! 2017-05-30 12:24:02 <_spOOn_> anyone here using virtualbox on alpine? 2017-05-30 12:29:18 i used to for a bit 2017-05-30 12:29:21 way back when 2017-05-30 12:37:09 <_spOOn_> asie: did you have the readlink: unrecognized option: e issue back then :) 2017-05-30 12:41:58 Hi, need some help with the installer, I keep on getting sfdisk (missing): 2017-05-30 12:41:59 required by: world[sfdisk] 2017-05-30 12:41:59 syslinux (missing): 2017-05-30 12:41:59 required by: world[syslinux] and the installer-exits. I find no solution on google just other people with the same issue. 2017-05-30 12:45:14 _spOOn_: no, sorry 2017-05-30 12:50:46 Could anybody assist by any chance? 2017-05-30 12:55:43 seems some of the repos are are fubar, got a progress bar going now 2017-05-30 13:58:01 I should figure out how to hook this thing up to my PureVPN account. 2017-05-30 13:58:14 So that way my ISP can't give me a hard time for being on a bunch of trackers 2017-05-30 14:27:33 Where can I see the actual difference between the different alpine iso's apart from guessing based on the bullet points on the download page? 2017-05-30 14:28:11 There's a repository, right? 2017-05-30 14:28:36 TheStranjer: Is that last comment addressed to me? 2017-05-30 14:28:43 Yeah. 2017-05-30 14:28:55 Don't they ship a commit number or something with it? 2017-05-30 14:31:29 TheStranjer: Not sure how this is answering my question, but that's probably my fault. Let me try to be more specific: the download page presents options. Standard, Vanilla, Virtual, etc .. along with bullet points that allude to the differences. What I am looking for is concrete differences in terms of preinstalled packages and differences in configuration or some other significant factors. 2017-05-30 14:31:58 Yeah I get that. I made a mistake myself. 2017-05-30 14:32:05 I saw a SHA256 and thought they meant the git commit. 2017-05-30 14:32:29 That's probably just the hash of the ISO 2017-05-30 14:32:44 Yeah I know. 2017-05-30 14:32:51 Hence why it was an error on my part. 2017-05-30 14:34:06 In particular, I'd like to know what these virtual system optimizations are.. 2017-05-30 14:46:30 hi, somebody know how create custom iso of alpine installation? 2017-05-30 14:50:31 Classsic: https://wiki.alpinelinux.org/wiki/How_to_make_a_custom_ISO_image ? 2017-05-30 14:50:31 Classsic, 2017-05-30 14:50:32 https://wiki.alpinelinux.org/wiki/How_to_make_a_custom_ISO_image_with_mkimage 2017-05-30 14:50:37 ;) 2017-05-30 14:50:55 great, let's try 2017-05-30 14:50:57 thanks 2017-05-30 14:51:34 iron_houzi: I'm not sure if there's a difference in preinstalled packages; the page does say what the difference is in terms of kernels though 2017-05-30 14:52:02 https://git.alpinelinux.org/cgit/alpine-iso/tree/ but the package lists can be found here (as well) 2017-05-30 14:52:03 but this methods keep users files? 2017-05-30 14:54:10 what exactly are you planning to do with the ISO? 2017-05-30 14:54:38 also check out https://wiki.alpinelinux.org/wiki/Alpine_local_backup 2017-05-30 14:57:34 What is the best way to automate alpine linux creation on a VM bundled with some apk packages? 2017-05-30 14:59:54 iron_houzi: apkovls, mayb 2017-05-30 14:59:54 I personally just use a small script in combination with apk.static (apk-tools-static) package, but I have to build very specific disk images so 2017-05-30 15:00:18 TheStranjer: https://github.com/alpinelinux/aports/tree/master/scripts 2017-05-30 15:00:25 oh, sorry 2017-05-30 15:00:27 iron_houzi: https://github.com/alpinelinux/aports/tree/master/scripts 2017-05-30 15:00:37 the various profile_*() functions in the mkimg.* files here 2017-05-30 15:00:40 have the concrete differences 2017-05-30 15:00:57 e.g. https://github.com/alpinelinux/aports/blob/master/scripts/mkimg.standard.sh 2017-05-30 15:03:06 Shiz: Thanks! 2017-05-30 15:04:05 Bun: What is the logic behind your script? Does it build an iso? 2017-05-30 15:11:57 What are the system requirements for standard/extended on sys mode? With 512MB RAM and 500MB HDD, I'm getting "No space left on device" right after the HDD is mounted on /mnt/sda1 .. 2017-05-30 15:13:39 500 MB? 2017-05-30 15:14:26 TBB: Yeah .. not enough? 2017-05-30 15:16:41 no, I install alpine-base (and many other packages) to a loopback-mounted file with an ext4 fs 2017-05-30 15:16:53 likely not 2017-05-30 15:17:09 an installed alpine system should be ~200mb (mostly because kernel modules), but it may need more than that during installation 2017-05-30 15:17:14 I suppose it's enough considering neither install media takes that much space; I've got a rather fresh system next to me with the build bits and gnu utils in it and it's 734 MB so a minimal install will definitely fit into 500 MB 2017-05-30 15:17:32 because of .apk caching/unpacking/etc 2017-05-30 19:27:11 what's a sane approach to bootstrapping custom alpine builds? 2017-05-30 19:27:32 apk and busybox in a chroot and continuing from there? or is there a specific way to do it 2017-05-30 19:27:52 ./scripts/bootstrap.sh 2017-05-30 19:27:54 :P 2017-05-30 19:27:56 in aports 2017-05-30 19:28:44 oh ok. i haven't yet looked into anything. just having some thoughts. 2017-05-30 19:30:02 <3 2017-05-30 21:08:09 i'm not certain if this is an alpine question. when I `drill hostname` I get the ANSWER section I expect, but when I `curl hostname` I get "Couldn't resolve host" -- i'm not sure what to make of that 2017-05-30 21:08:53 drill checks upstream dns directly, no? 2017-05-30 21:08:59 seems like your system resolver may be acting funny 2017-05-30 21:09:29 is there some way to list all packages you have installed which are not currently available in the repo you've pinned it to? at some point I've managed to unpin mpv from @community, so when I did a system upgrade it couldn't find it in @main and it was never upgraded 2017-05-30 21:10:10 when i try to `nslookup host` i see "nslookup: can't resolve '(null)': Name does not resolve" 2017-05-30 21:10:17 i don't think i touched the system resolver 2017-05-30 21:10:40 /etc/resolv.conf ? 2017-05-30 21:11:09 i see the (null) issue too 2017-05-30 21:11:12 but correct results after that 2017-05-30 21:13:30 cat /etc/resolv.conf shows `nameserver 10.254.16.10\n search ...` where ... is a bunch of k8s and GKE specific stuff...but not the domain i want to resolve 2017-05-30 21:14:10 if i `drill @10.254.16.10 host` it does return what i expect, but i guess because the domain is not in the list to search, it doesn't work? 2017-05-30 21:15:17 oh yeah, there was something with search/ndots stuff in musl 2017-05-30 21:16:08 do you haven ndots stanza in resolv.conf? 2017-05-30 21:19:33 options ndots:5 2017-05-30 21:20:37 the domain i'm trying to resolve is vault.service.consul.$corp.$tld 2017-05-30 21:21:19 this is a container running in k8s and i'm wondering if k8s is supposed to update my resolv conf or if i need to tell it to do that -- totally not an alpine problem now :) 2017-05-30 21:27:02 it seems like k8s manages that resolv.conf 2017-05-30 21:27:24 but i think it should work with ndots 5... 2017-05-30 21:34:31 for added context i'm trying to get this to work http://blog.kubernetes.io/2017/04/configuring-private-dns-zones-upstream-nameservers-kubernetes.html 2017-05-30 21:35:29 i think i have everything working except the system resolver doesn't know what do about my stubDomain 2017-05-30 21:36:34 I'm not quite sure from the top of my head, sadly, and I'm a bit too busy right now to be able to effectively help you, sorry :( 2017-05-30 21:36:42 I wonder if a simple local dnsmasq proxy would solve your usecase 2017-05-30 21:36:47 bypassing the system resolver 2017-05-30 21:46:55 yes, it would, i'm trying to leverage a feature in k8s that would let me configure that in one place rather than configure it for each container/pod 2017-05-30 21:54:57 Hey I've been looking for some documentation for mkimage, I'd like to build an image for pxe, so I'd like to do squashfs and extrat the kernel too 2017-05-30 21:55:07 extract* 2017-05-30 21:56:53 Also reading the code I can see plugin support but not what it does, I imagine I could probably extract the kernel that way but there's no examples :( 2017-05-30 21:57:55 fcolista: perhaps you could help? :) 2017-05-31 02:52:22 <_spOOn_> anyone managed to get thunderbird to work on apline? 2017-05-31 02:53:38 i'd imagine it'd take some effort to compile if it's any similar to firefox 2017-05-31 02:56:02 <_spOOn_> im new to alpine, so still trying to get my head around it 2017-05-31 02:56:57 it seems like it's not packaged at least 2017-05-31 02:57:03 <_spOOn_> I take it it would need re-compiling due to the use of musl vs gcc? 2017-05-31 02:57:16 <_spOOn_> Shiz: yeah, thanks 2017-05-31 02:57:16 musl versus glibc, yes 2017-05-31 02:57:21 gcc is a compiler :P 2017-05-31 02:57:26 <_spOOn_> sorry, wrong wording 2017-05-31 02:57:28 <_spOOn_> :) 2017-05-31 02:57:52 <_spOOn_> so, does anyone use alpine as a desktop/laptop os? or is most use for servers etc? 2017-05-31 03:00:06 i ran it on my desktop for a while, know two people who run it on their laptop 2017-05-31 03:00:17 (i stopped running it because i ditched the desktop :P) 2017-05-31 03:00:36 it needs a bit more setup as desktop since you need to install xorg and the likes but it's very usable imo 2017-05-31 03:00:43 of course, my opinion is tainted 2017-05-31 03:02:58 <_spOOn_> yeah, ive got it on my lappy at the moment, and its working really well 2017-05-31 03:03:45 <_spOOn_> but I really need thunderbird + virtualbox and openfortivpn, and I'm struggling a little with what I Need to do to get it working... 2017-05-31 03:06:01 you'd probably need to compile it 2017-05-31 03:06:07 <_spOOn_> packaging seems straight forward, and I've submitted one (zim), 2017-05-31 03:06:14 that's good :) 2017-05-31 03:06:30 it may be useful to look at the firefox apkbuild for inspiration as how to get the build system to do what you want 2017-05-31 03:06:39 if thunderbird is as similar to firefox as i remember it being 2017-05-31 03:07:27 <_spOOn_> from the page mozilla put out on their source, it says you need like 20GB of space! 2017-05-31 03:07:32 <_spOOn_> that seems overkill :) 2017-05-31 03:07:56 <_spOOn_> I've been in gentoo for a while, and it never needed that much space, but hey, what do I know :) 2017-05-31 03:11:46 <_spOOn_> also, it seems that virtualbox requires some 32bit libraries... Does alpine support a multilib type setup? 2017-05-31 03:13:06 none whatsoever 2017-05-31 03:13:20 supporting multilib is an explicit non-goal :P 2017-05-31 03:13:35 what kind of libraries does it need? 2017-05-31 03:14:14 <_spOOn_> ia32-libs (various libraries needed for compiling the 32-bit guest additions) 2017-05-31 03:14:17 <_spOOn_> libc6-dev-i386 (libc6 i386 development headers) 2017-05-31 03:14:20 <_spOOn_> lib32gcc1 (gcc support for i386) 2017-05-31 03:14:22 <_spOOn_> gcc-multilib (gcc support for i386) 2017-05-31 03:14:25 <_spOOn_> lib32stdc++6 (libstdc++ for i386) 2017-05-31 03:14:27 <_spOOn_> g++-multilib (g++ support for i386) 2017-05-31 03:14:29 that's all debian libraries, not gonna work anyway 2017-05-31 03:14:46 seems like you're trying a prebuilt binary -- in general, those will not work 2017-05-31 03:15:43 oh, you're looking at the build instructions 2017-05-31 03:15:54 <_spOOn_> yup yup 2017-05-31 03:16:47 yeah this the point at which i'd personally patch the package to not need 32-bit stuff 2017-05-31 03:17:55 <_spOOn_> also, I've taken a look at the installer last night, and it seems the readline binary they're expecting is different to that which is in alpine (ie, it looks for a -e option, which alines coreutils doesnt include) 2017-05-31 03:18:12 <_spOOn_> seems like -f would be an OK substitute though... 2017-05-31 03:19:06 <_spOOn_> which is why I thought I'd ask, because I was starting to think that perhaps I'm trying to bend alpine to my will, and it wasn't really meant to be used like this :) 2017-05-31 03:19:30 you mean readlink? 2017-05-31 03:19:38 <_spOOn_> sorry, fat finger 2017-05-31 03:19:39 yeah, generally in those cases s/-e/-f/ works fine 2017-05-31 03:19:41 <_spOOn_> yes 2017-05-31 03:19:58 we explicitly don't support multilib, so patching out required multilib nonsense from packages is all the more welcome :P 2017-05-31 03:20:51 <_spOOn_> hehe, I'm not sure youd appriciate any patches I submitted... 2017-05-31 03:21:21 _spOOn_: worst case it needs to be fixed to meet the standards 2017-05-31 03:21:42 there's no reason to reject patches unless they are filed maliciously 2017-05-31 03:21:55 <_spOOn_> :) 2017-05-31 03:22:25 <_spOOn_> no malace, just not a developer 2017-05-31 03:22:43 <_spOOn_> I can fumble my way through, but yeah, needs someone wiser to review etc 2017-05-31 03:22:53 that's part of the patch submission process 2017-05-31 03:23:12 humans are prone to error, patch review is all about mitigating that as much as possible 2017-05-31 03:25:32 yeah, don't worry bout it 2017-05-31 03:25:42 we don't hate you for submitting patches that may be suboptimal 2017-05-31 03:25:52 if they turn out to be, it's a learning experience, right :) 2017-05-31 06:34:47 _spOOn_: https://github.com/alpinelinux/aports/blob/2c0574a6346498c2ca27459818d4b4556246a67d/unmaintained/thunderbird/APKBUILD 2017-05-31 06:35:21 little old though :) 2017-05-31 07:36:32 <_spOOn_> clandmeter: thanks, Ill take a look 2017-05-31 09:52:26 Does anyone use Network Manager under Alpine? 2017-05-31 10:10:27 <_spOOn_> I would second mrgreens question 2017-05-31 10:10:53 <_spOOn_> does anyone use network-manager in alpine? 2017-05-31 10:11:05 <_spOOn_> more specifically, nm-applet? 2017-05-31 10:21:09 "network damager" ... 2017-05-31 10:24:45 <_spOOn_> indeed, I preferred wicd 2017-05-31 10:25:11 <_spOOn_> but have to connect to wpa2 enterprise networks for work, and nm works better sadly 2017-05-31 10:44:48 wtf dudes 2017-05-31 10:44:57 wpa_supplicant comes with a wpa_gui 2017-05-31 10:45:06 it supports all your silly enterprises 2017-05-31 10:45:49 wpa_gui goddamn ugly 2017-05-31 10:45:51 i don't get why people bother with shit like wicd when there's something so obviously more complete 2017-05-31 10:45:59 consus: who the fuck cares about ugly, buy a mac. 2017-05-31 10:46:18 i rarely ever have to open up wpa_gui either 2017-05-31 10:46:30 hiro: Why do you hate yourself so much? 2017-05-31 10:47:18 <_spOOn_> hiro: I have to connect to a number of wireless networks, depending on sites, and I also have to use a number of VPNs. 2017-05-31 10:47:18 hello, i try to create a sbcl docker, but i got error `stop using LD_ASSUME_KERNEL`, 2017-05-31 10:47:28 <_spOOn_> whilst there are probably better tools for the job 2017-05-31 10:47:37 12:47 _spOO hiro: I have to connect to a number of wireless networks, depending on sites, and I also have to use a number of VPNs. 2017-05-31 10:47:37 <_spOOn_> wicd/nm seem to work ok for me 2017-05-31 10:47:38 same here 2017-05-31 10:47:47 wicd and nm never worked for anything i do 2017-05-31 10:48:00 but then i guess i do more complex things than you do 2017-05-31 10:48:00 so, it means i can not use alpine for a sbcl docker? 2017-05-31 10:48:31 <_spOOn_> hiro: lol, im sure you probably do 2017-05-31 10:49:49 i have a script that handles wpa_supplicant and starts udhcpc, or does static network configuration depending on ssid, also it receives udhcpc events and then acts on them accordingly in case vpnc has to be started 2017-05-31 10:50:16 it also connects to LTE, UMTS, etc via a couple stupid competing protocols (AT, qmi, etc.). 2017-05-31 10:50:41 in order to do anything i just use the software that does the actual work, directly from my scripts. 2017-05-31 10:50:41 <_spOOn_> hiro: sounds great 2017-05-31 10:50:52 <_spOOn_> are you willing to share with us then? 2017-05-31 10:51:07 nope, it's all special casing 2017-05-31 10:51:18 Linux in a nutshell xD 2017-05-31 10:51:39 all you need to know that is generic is the idea to either run wpa_supplicant in foreground or use wpa_cli -a 2017-05-31 10:52:06 also replace /usr/share/udhcpc/default.script with your own shit 2017-05-31 10:52:16 Err 2017-05-31 10:52:25 > replace /usr/share/udhcpc/default.script 2017-05-31 10:52:36 It's it a bad idead to touch package-managed stuff? 2017-05-31 10:52:45 i don't care about package management 2017-05-31 10:52:50 Lol 2017-05-31 10:52:58 i don't know how it works exactly on alpine 2017-05-31 10:53:04 Well 2017-05-31 10:53:09 Like any other package manager 2017-05-31 10:53:16 i try to avoid having to learn these choreographed dances 2017-05-31 10:53:17 It rewrites your shit on every update 2017-05-31 10:53:43 ok, well use udhcpc -s and point to your own script then 2017-05-31 10:53:44 Except for a couple of items marked DO NOT REWRITE THIS KIND OF SHIT 2017-05-31 10:53:55 Mostly in /etc 2017-05-31 10:53:57 i don't give tutorials, i give idea recipes. 2017-05-31 10:54:13 Eh, wicd worked fine for the ethernet auth 2017-05-31 10:54:15 i just tell you what i wish i had heard before i figured it out the long and painful way 2017-05-31 10:54:42 <_spOOn_> hiro: appriciate the thought, thanks 2017-05-31 10:54:44 <_spOOn_> :) 2017-05-31 10:54:56 Though writing a configuration file for wpa_supplicant is not that hard either 2017-05-31 10:55:16 It even has a manual page, rare thing these days 2017-05-31 10:55:29 depends -entirely- what you try to accomplish with wpa_supplicant 2017-05-31 10:55:37 true, once you have seen the output that gets generated by wpa_gui you can copy paste it for a network with same setup 2017-05-31 10:56:03 It handles basic 'auth me pleeeeze' very well 2017-05-31 10:56:09 but normally wpa_gui creates correct output, whereas stackexchange and other google results never take into account your specific setup 2017-05-31 10:56:17 and are often wrong 2017-05-31 10:56:23 and missing stuff like tls certs 2017-05-31 10:56:50 this is super useful for example 2017-05-31 10:56:52 network={ 2017-05-31 10:56:52 key_mgmt=NONE 2017-05-31 10:56:52 priority=-10 2017-05-31 10:56:52 disabled=1 2017-05-31 10:56:52 } 2017-05-31 10:57:17 actually i should enable this. what was i thinking. 2017-05-31 10:57:50 man wpa_supplicant.conf 2017-05-31 10:57:59 That's all you've need most of the time 2017-05-31 10:58:20 consus: no, i hate that man page. too much work. 2017-05-31 10:58:25 xD 2017-05-31 10:58:29 but better than using nm or wicd 2017-05-31 10:58:31 Okay 2017-05-31 10:58:46 It's pretty incomplete, yes 2017-05-31 10:58:51 That's what I love openbsd for 2017-05-31 10:58:56 Great manual pages 2017-05-31 10:59:06 the time i save by using wpa_gui i can use to automate all the other shit i want run by my script once it automatically connects to a given network 2017-05-31 11:13:52 <_spOOn_> hiro: just looking at wpa_gui, and doesnt appear to be workiung... get a could not get status from wpa_supplicant... 2017-05-31 11:14:07 <_spOOn_> service is obviously running 2017-05-31 11:14:14 <_spOOn_> have you had this in the past? 2017-05-31 11:15:30 sure, just make sure you use the correct ctrl_interface and ctrl_interface_group 2017-05-31 11:15:50 wpa_supplicant must be running with these config 2017-05-31 11:15:52 google has gotten that error also 2017-05-31 11:16:06 <_spOOn_> thanks 2017-05-31 11:16:12 <_spOOn_> will go through the doco 2017-05-31 11:16:27 that's also an option 2017-05-31 11:16:34 many linux distributions love to put an insane nonstandard interface and then connect their shitsoftware like networkmanager to it 2017-05-31 11:17:01 if you haven't removed network-manager yet then i can't-help-you 2017-05-31 11:18:09 <_spOOn_> hiro: removed :) 2017-05-31 11:18:13 that's another reason i don't use supplied helpers by stupid operating systems normally 2017-05-31 11:18:17 i run my OWN wpa_supplicant 2017-05-31 11:18:37 i don't need systemd to do this for me and then i don't even know the used flags or can't find the configuration file it comes with 2017-05-31 11:18:52 and then that configuration file would normally be completely different than any other distribution's 2017-05-31 11:19:15 remove all "services", kill all processes. start your own. then it works. 2017-05-31 11:20:25 <_spOOn_> hiro: working now 2017-05-31 11:20:28 <_spOOn_> thanks for the advice 2017-05-31 11:21:17 np 2017-05-31 12:40:12 gotta love my job, I get to spend time on IRC and get paid for doing it <3 2017-05-31 12:40:20 aaaaanyway 2017-05-31 12:40:52 I had a look at some of the magical 16 packages that initially installing alpine-base brings in 2017-05-31 12:41:43 alpine-base has 'replaces="alpine-baselayout"' and alpine-keys has 'replaces="alpine-base"' in their APKBUILDs 2017-05-31 12:41:58 that, to me, makes no sense whatsoever 2017-05-31 12:42:28 probably some old legacy reasons 2017-05-31 12:42:35 some of those could probably be removed 2017-05-31 12:44:09 what I'm trying to accomplish, basically, is to replace alpine-keys with my own. my initial attempt was to create a version of alpine-base that doesn't require that key and in the initial apk add install both the new alpine-base and the keys package 2017-05-31 12:44:20 well, didn't end well, that one 2017-05-31 12:45:18 the new base package is in another repository than its dependencies, and apk add -X doesn't accept multiple -X's, so I tried a proper repository file for the initial apk add... didn't work 2017-05-31 12:46:02 I could of course just make my own key package, but I'm not convinced I can install that in that initial add ... 2017-05-31 12:46:22 fabled: legacy sounds like a logical explanation for that 2017-05-31 12:47:40 since you'll have to build (or at least sign) all packages anyway, wouldn't it indeed make more sense to make your own repo with a custom alpine-keys? 2017-05-31 12:49:10 since I tried that approach with a custom alpine-base and it didn't quite work (two repositories in an initial apk add seems to not work)... 2017-05-31 12:49:40 why would you need two though? 2017-05-31 12:50:18 I guess I can try something like 'replaces="alpine-keys"' in my custom keys package, but would that actually deal with (=remove) the distro keys package 2017-05-31 12:51:04 Bun, I don't basically want to add custom-built packages to the upstream mirror, although, if I have no other choice, I pretty much have to 2017-05-31 12:52:59 doing that adds new steps to the mirroring process, and I don't like the idea 2017-05-31 12:53:01 well, instead of adding to the upstream, you could always proxy from your repo to the upstream and replace things as needed 2017-05-31 12:55:33 not sure how this is supposed to work anyway, you have an upstream but you don't want to use the alpine-keys they provide, yet you still want to use their packages (and so also need to support their keys anyway?) 2017-05-31 12:56:59 of course the proper process for what I do would be to actually build every single package myself, but resources are limited so for the time being I must use upstream-provided packages 2017-05-31 13:00:58 however now that I think about it... perhaps the mirroring process isn't that bad a place to modify how I do things. For me Alpine's own keys mostly serve as a means of checking the packages are from where they claim to be from; and since I already do package re-signing, it's not that much of a hassle to check their signatures and, if the signatures are okay, re-sign them with my own. that together with a custom keys package should work... 2017-05-31 13:03:28 Bun, the whole case I'm working on is quite special and involves many, many reasons that block me from doing things the regular way... otherwise I would already be done :) 2017-05-31 15:00:17 okay, 'replaces' didn't quite do exactly what I wanted, but it's a starting point 2017-05-31 15:05:24 hi, i've been trying to update testing/mono to 5.0.1.1, but both on a local build and, as i thought it was related to my docker setup and sent a pr anyway, on my pr's travis build (https://github.com/alpinelinux/aports/pull/1598) i get "attr_set: Operation not permitted" from paxmark on the main mono binary 2017-05-31 15:05:48 is the travis environment also somehow not handling paxmark, or do i need to do something weird to allow this to happen as non-root user, or? 2017-05-31 15:06:26 there's a few other ports that do paxmark (due to JIT), and the original mono buildfile did as well, yet - somehow now it doesn't work anymore :\ 2017-05-31 15:21:42 blatty: PR LGTM, may be a CI malfunction 2017-05-31 15:21:53 I'll try building it locally and merge if it works 2017-05-31 15:48:15 Shiz: ah, so xattrs are screwy in a lot of cases? noted. 2017-05-31 15:49:10 what package is the `tun` module for the kernel in? 2017-05-31 15:49:59 in the kernel package itself? 2017-05-31 15:50:18 I mean, that's the only logical place for it 2017-05-31 15:51:26 but would you ask if it was there... 2017-05-31 15:54:06 blatty: i haven't seem them being screwy before, so it's a bit weird 2017-05-31 15:54:12 but there's no reason paxmark shouldn't work normally 2017-05-31 17:37:29 q: does the alpine linux iso work over serial console? i want to install it, but my server's ilom uses java console crap and it just doesn't work whatsoever 2017-05-31 17:38:01 but i think via ipmi i can ssh and drop into serial 2017-05-31 17:42:15 actually nevermind, i think i figured out the mystery 2017-05-31 17:47:38 also is there any documentation on how to do alpine zfs on root? 2017-05-31 17:52:55 snappy: i think you have to do the install by hand for that 2017-05-31 17:53:47 snappy: http://irclogger.com/.alpine-linux/2017-04-28#1493340916 2017-05-31 17:54:01 lol 2017-05-31 18:02:24 Xe: thanks, also cool site 2017-05-31 18:02:57 or just https://dev.alpinelinux.org/irclogs/ 2017-05-31 18:19:51 scadu: when you google "alpine linux zfs root install", ya forward people the most accurate link you can 2017-05-31 18:20:42 hush algitbot 2017-05-31 18:21:35 Xe: oh sorry, I just saw irclogger, which is not official source of irc logs. please accept my apologies ;f 2017-05-31 19:05:16 having trouble connecting to a mirror (dl-4.alpinelinux.org) that runs on Packet, but only from other Packet instances 2017-05-31 19:05:25 anyone else? 2017-05-31 19:05:50 <_ikke_> not using packet 2017-05-31 19:06:21 <_ikke_> dl-4 is apparently hosted at packet 2017-05-31 19:06:32 <_ikke_> so internal routing issue? 2017-05-31 19:06:47 <_ikke_> bison: where does dl-4.alpinelinux.org resolve to for you? 2017-05-31 19:06:59 147.75.32.21 2017-05-31 19:07:33 <_ikke_> same for me 2017-05-31 19:07:40 <_ikke_> can you try a traceroute? 2017-05-31 19:13:50 _ikke_: https://pastebin.com/raw/iugfWQWX 2017-05-31 19:15:55 <_ikke_> Looks like a routing issue 2017-05-31 19:16:16 yeah, I can open a ticket with Packet 2017-05-31 19:16:43 <_ikke_> Weird that it goes via telia and then back to packet 2017-05-31 19:16:45 I've tried from multiple Packet accounts and DCs 2017-05-31 19:28:13 <_ikke_> bison: looking at the latency, it looks like it gets routed around the world 2017-05-31 19:30:04 looks like it ends up in Amsterdam 2017-05-31 19:30:33 <_ikke_> How do you determine hat? 2017-05-31 19:32:39 from the host names in the tracroute, I can see it bounces to london and then to a router in Packet's AMS1 region, which is Amsterdam 2017-05-31 19:32:50 <_ikke_> ah ok 2017-05-31 19:32:57 and 147.75.32.21 is registered with RIPE 2017-05-31 19:35:03 kind of strange that I had servers in NJ getting routed to Amsterdam in the first place, but I don't know anything about how the balancing works on the Alpine side 2017-05-31 19:35:37 <_ikke_> This is just a single mirror 2017-05-31 19:35:39 <_ikke_> nothing is balanced 2017-05-31 19:35:47 <_ikke_> (for me, it returns the same IP) 2017-05-31 19:41:01 right, that's a good point... dl-cdn.alpinelinux.org is working. Maybe I just have something stale in the apk config. 2017-05-31 19:42:42 <_ikke_> dl-cdn is pointing to dl-4 2017-05-31 19:43:04 <_ikke_> weird that that one is working for you 2017-05-31 19:43:13 <_ikke_> it just does redirect to dl-4.a.o 2017-05-31 19:46:55 from here, dl-cdn is a CNAME for global.prod.fastly.net 2017-05-31 19:49:01 if dl-4 is an upstream there, would still probably work since the fastly hosts aren't on Packet's network 2017-05-31 19:53:54 <_ikke_> bison: it literally does an http redirect 2017-05-31 19:54:10 <_ikke_> so you are not getting the data via fastly 2017-05-31 19:56:26 not what I'm seeing when I'm just testing with curl... 2017-05-31 19:56:39 curl -v http://dl-cdn.alpinelinux.org/alpine/v3.2/main/x86_64/APKINDEX.tar.gz -o apk 2017-05-31 19:57:43 <_ikke_> ah, ok, might be that / is only redirected, but the files themself not 2017-05-31 20:01:33 I have a ticket open with Packet to see if there's anything on their side, though the tracroute looks the same from hosts that are working 2017-05-31 20:44:44 Hey I'd like to use the aports mkimage script to build an image for PXE booting, could anyone whip up a quick example for me to reference? Unfortunately the examples in aports don't really work 2017-05-31 20:44:51 (for my use case) 2017-05-31 20:45:28 fcolista: sorry if you replied yesterday, I don't have a bouncer up 2017-05-31 21:35:00 I've just noticed that syslog (bb) timestamps on my rpi stay always the same. bugs.a.o seems to have nothing on it. 2017-05-31 21:35:24 anyone with an idea what's going on with syslog? 2017-05-31 21:35:47 rpi doesn't have a real-time clock, so you have to have a working ntp client 2017-05-31 21:37:58 I do (chronyd) 2017-05-31 21:38:37 'date' also shows correct system time 2017-05-31 21:45:05 now thats even more stange: https://dpaste.de/QMiq 2017-05-31 21:45:26 restart messages are in current time, but normal ones in broken time 2017-05-31 21:46:53 interesting 2017-05-31 21:48:36 Shiz: since you patched syslog a while ago.. any ideas? 2017-05-31 21:56:06 xentec: all syslog messages? 2017-05-31 21:56:11 the timestamp is given to syslog by the sender, usually 2017-05-31 22:00:57 hah, first one ('...syslogd started...') has correct time. all subsequent messages get 'Jan 1 01:59:59' timestamp 2017-05-31 22:01:41 do those all come from the same service too? 2017-05-31 22:02:07 nope 2017-05-31 22:03:25 https://dpaste.de/4YDC 2017-05-31 22:19:37 Hello, Anyone around? 2017-05-31 22:20:17 plenty 2017-05-31 22:21:30 Just wanted to share that I managed to build OpenRCT2 for Alpine. :) 2017-05-31 22:21:43 nice :) 2017-05-31 22:22:29 It revealed a bug and an optimization that we can do in our codebase, so I just want to say Hi. 2017-05-31 22:23:56 if you're interested in supplying an APKBUILD i'll be glad to take a look at it too ;p 2017-05-31 22:24:43 Show me where and I'll try to make that happen 2017-05-31 22:24:54 And how 2017-05-31 22:25:11 https://github.com/alpinelinux/aports is the repo, https://wiki.alpinelinux.org/wiki/Creating_an_Alpine_package is the documentation 2017-05-31 22:25:50 Thank you, I'm going to hang out in case I have questions. Here's one immediatly though, in the AUR there is -git packages, is there somthing similar here? 2017-05-31 22:26:17 questions are always welcome :) 2017-05-31 22:26:34 we typically don't have -git packages no, at least I haven't seen any yet 2017-05-31 22:26:58 one reason is that 1) abuild doesnt support git pulling automatically properly and 2) APKBUILDs embed checksums of source files that break if the upstream is unstable 2017-05-31 22:27:33 Most of our users use the nightly builds, since they tend to be stable, and the Multiplayer Servers all use the nightlies as well. 2017-05-31 22:28:06 Ignoring that, the next stable won't be for a while, and the last stable won't build on Alpine 2017-05-31 22:28:27 hmm 2017-05-31 22:29:24 well something I don't think we can support properly right now is what I think Arch does where the PKGBUILD just supplies a git url and every build can be different 2017-05-31 22:29:44 but, I wouldn't mind having a newer-than-stable-git-build if it's tested and such 2017-05-31 22:30:09 it'd just have a version number of _git and would need a pkgrel bump every time you'd want to bump the git revision we package 2017-05-31 22:30:31 Yep, that is the case for the most part. Basically every build of the game is regularly tested by ~100 or more people, depending on how long it stays fresh - we actually do a build -> update clients for every push. 2017-05-31 22:32:33 Another Part of the problem is that I don't plan to keep Alpine around on my system, it was a "Hm, I wonder what issues musl will turn up" type deal. 2017-05-31 22:32:39 I need to think about this. 2017-05-31 22:32:47 sure :) 2017-05-31 22:33:04 nothing's obliging you to, it was more of a "hey if you're up for this we wouldn't mind" thng on my part 2017-05-31 22:33:13 no hard feelings whatsoever if you don't or can't :p 2017-05-31 22:33:29 still cool to know that stuff works regardless 2017-05-31 22:33:52 Agreed, I love throwing myself into a new environment with a goal and working my way to it :) 2017-05-31 22:34:12 I managed to compile a game, but still havn't managed to install a Browser ;P 2017-05-31 22:35:02 hey, we package firefox-esr ;) 2017-05-31 22:35:02 https://files.gitter.im/OpenRCT2/OpenRCT2/non-dev/7wzd/2017-05-31-170004_1920x1080_scrot.png 2017-05-31 22:35:28 Ah, lets see then... 2017-05-31 22:35:32 lookin good 2017-05-31 22:36:41 That's a Multiplayer park on a server that tends to be good for Benchmarking :) 2017-05-31 22:37:02 Also love the fact that LibreSSL works as a drop in replacement for OpenSSL, havn't tried that before. 2017-05-31 23:06:27 @Shiz I put this in our Wiki, https://github.com/OpenRCT2/OpenRCT2/wiki/Building-OpenRCT2-on-Linux#alpine-linux so it doesn't get lost, in case anyone wishes to take up the task. 2017-05-31 23:07:54 Krutonium: fwiw, you can replace 'git gcc g++' by 'build-base' and remove all the packages that also have a -dev variant already listed 2017-05-31 23:07:58 (x-dev automatically pulls in x) 2017-05-31 23:08:21 otherwise, nice 2017-05-31 23:08:34 Ah, did not know that. I'll edit accordingly! 2017-05-31 23:09:23 something else that may be useful, but i'm not sure if it should be noted there, is that you can add things as a virtual 2017-05-31 23:09:25 e.g. 2017-05-31 23:09:32 apk add --virtual .openrct2-deps 2017-05-31 23:09:34 then when you're done building 2017-05-31 23:09:37 you can just 2017-05-31 23:09:39 apk del .openrct2-deps 2017-05-31 23:09:46 and it will delete all those packages except the ones you had already installed before 2017-05-31 23:09:48 :) 2017-05-31 23:14:31 to the best of my knowledge, most of them are still needed afterwards 2017-05-31 23:22:13 right 2017-05-31 23:22:32 I'm too used to abuild where it automatically infers dependencies for packages and installs them when you install the .apk 2017-05-31 23:22:33 ;P 2017-05-31 23:22:44 abuild is kinda magic