alteholz – Page 10 – blog.alteholz.eu

4 August 2018

My Debian Activities in July 2018

FTP master

This month was dominated by warm weather and I spent more time in a swimming pool than in the NEW queue. So I only accepted 149 packages and rejected 5 uploads. The overall number of packages that got accepted this month was 380.

Debian LTS

This was my forty ninth month that I did some work for the Debian LTS initiative, started by Raphael Hertzog at Freexian.

This month my all in all workload has been 30.00h. During that time I did LTS uploads of:

Further I started to work on libgit and fuse. Last but not least I did some days of frontdesk duties.

Debian ELTS

This month was the second ELTS month.

During my allocated time I uploaded:

ELA-23-1 for wireshark
ELA-24-1 for fuse

I also tried to work on qemu but had to confess that those CVEs are far beyond my capabilities. Luckily qemu is no longer on the list of supported packages for ELTS. As there seemed to be some scheduling difficulties I stepped in and did 1.5 weeks of frontdesk duties.

Other stuff

This month I uploaded new packages of

… pywws, a software to obtain data from some wheather stations
… osmo-msc, a software from Osmocom

Further I continued to sponsor some glewlwyd packages for Nicolas Mora.

I also uploaded a new upstream version of …

… osmo-iuh to experimental
… osmo-mgw to experimental
… osmo-bts to experimental
… duktape
… openoverlayrouter

I improved packaging of …

and fixed some bugs in …

… openzwave, especially an FTBFS with gcc8
… alljoyn-core-1504, especially an FTBFS with gcc8
… alljoyn-core-1509, especially an FTBFS with gcc8
… alljoyn-core-1604, especially an FTBFS with gcc8

The DOPOM (Debian Orphaned Package Of the Month) of this month has been sockstat. As there was a BUG about IPv6 support and upstream doesn’t seem to be active anymore, I revived it on github.

7 July 2018

Import git repository from alioth-archive.debian.org to salsa.debian.org

All repositories that had not been migrated before the shutdown of alioth are still available at the alioth archive. There you can find a compressed tarfile of the bare repository.

So to move such a repository to salsa …

… create the new repository on salsa
… download your file from alioth-archive
wget https://alioth-archive.debian.org/git/debian-iot/duktape.git.tar.xz
… unpack it
tar -Jxf duktape.git.tar.xz
… cd to your bare repository
cd duktape.git
… push your repository to salsa
git push --mirror git@salsa.debian.org:debian-iot-team/duktape.git

Voila, your new repository is ready to be used.

5 July 2018

My Debian Activities in June 2018

FTP master

This month I accepted 166 packages and rejected only 7 uploads. The overall number of packages that got accepted this month was 216.

Debian LTS

This was my forty eighth month that I did some work for the Debian LTS initiative, started by Raphael Hertzog at Freexian.

This month my all in all workload has been 23.75h. During that time I did LTS uploads of:

[DLA 1404-1] lava-server security update for one CVE
[DLA 1403-1] zendframework security update for one CVE
[DLA 1409-1] mosquitto security update for two CVE
[DLA 1408-1] simplesamlphp security update for two CVE

I also prepared a test package for slurm-llnl but got no feadback yet *hint* *hint*.

This month has been the end of Wheezy LTS and the beginning of Jessie LTS. After asking Ansgar, I did the reconfiguration of the upload queues on seger to remove the embargoed queue for Jessie and reduce the number of supported architectures.

Further I started to work on opencv.

Unfortunately the normal locking mechanism for work on packages by claiming the package in dla-needed.txt did not really work during the transition. As a result I worked on libidn and mercurial parallel to others. There seems to be room for improvement for the next transition.

Last but not least I did one week of frontdesk duties.

Debian ELTS

This month was the first ELTS month.

During my allocated time I made the first CVE triage in my week of frontdesk duties, extended the check-syntax part in the ELTS security tracker and uploaded:

ELA-3-1 for file
ELA-4-1 for openssl

Other stuff

During June I continued the libosmocore transition but could not finish it. I hope I can upload all missing packages in July.

Further I continued to sponsor some glewlwyd packages for Nicolas Mora.

The DOPOM package for this month was dvbstream.

I also upload a new upstream version of …

… libctl to experimental

7 June 2018

My Debian Activities in May 2018

FTP master

This month I accepted 304 packages and rejected 20 uploads. The overall number of packages that got accepted this month was 420.

Debian LTS

This was my forty seventh month that I did some work for the Debian LTS initiative, started by Raphael Hertzog at Freexian.

This month my all in all workload has been 24.25h. During that time I did LTS uploads of:

I continued to work on the bunch of wireshark CVEs and sorted all out that did not affect Jessie or Stretch. At the end I sent my dediff with patches for 20 Jessie CVEs and 38 CVES for Stretch to Moritz so that he could compare them with his own work. Unfortunately he didn’t use all of them.

The CVEs for krb5 were marked as no-dsa by the security team, so there was no upload for Wheezy. Building the package for cups was a bit annoying as the test suite didn’t want to run in the beginning.

I also tested the apache2 package from Roberto twice and let the package do a second round before the final upload.

Last but not least I did a week of frontdesk duties and prepared my new working environment for Jessie LTS and Wheezy ELTS.

Other stuff

During May I did uploads of …

… libmatthew-java to fix a FTBFS with Java 9 due to a disappearing javah. In the end it resulted in a new upstream version.

I also prepared the next libosmocore transistion by uploading several osmocom packages to experimental. This has to continue in June.

Further I sponsored some glewlwyd packages for Nicolas Mora. He is right on his way to become a Debian Maintainer.

Last but not least I uploaded the new package libterm-readline-ttytter-per, which is needed to bring readline functionality to oysttyer, a command line twitter client.

7 June 20187 June 2018

My Debian Activities in May 2018

FTP master

This month I accepted 304 packages and rejected 20 uploads. The overall number of packages that got accepted this month was 420.

Debian LTS

This was my forty seventh month that I did some work for the Debian LTS initiative, started by Raphael Hertzog at Freexian.

This month my all in all workload has been 24.25h. During that time I did LTS uploads of:

I also tested the apache2 package from Roberto twice and let the package do a second round before the final upload.

Last but not least I did a week of frontdesk duties and prepared my new working environment for Jessie LTS and Wheezy ELTS.

Other stuff

During May I did uploads of …

… libmatthew-java to fix a FTBFS with Java 9 due to a disappearing javah. In the end it resulted in a new upstream version.

I also prepared the next libosmocore transistion by uploading several osmocom packages to experimental. This has to continue in June.

Further I sponsored some glewlwyd packages for Nicolas Mora. He is right on his way to become a Debian Maintainer.

Last but not least I uploaded the new package libterm-readline-ttytter-per, which is needed to bring readline functionality to oysttyer, a command line twitter client.

6 May 2018

My Debian Activities in April 2018

FTP master

This month I accepted 145 packages and rejected 5 uploads. The overall number of packages that got accepted this month was 260.

Debian LTS

This was my forty sixth month that I did some work for the Debian LTS initiative, started by Raphael Hertzog at Freexian.

This month my all in all workload has been 16.25h. During that time I did LTS uploads of:

I also started to work on the next bunch of wireshark CVEs and I intend to upload packages for Jessie and Stretch as well.
Other packages I started are krb5 and cups.

Last but not least I did a week of frontdesk duties, where I check lots of CVEs for their impact on Wheezy.

Other stuff

During April I did uploads of …

… pescetti to fix a FTBFS with Java 9 due to -source/-target only
… salliere to fix a FTBFS with Java 9 due to -source/-target only
… libb64 to fix a FTCBFS
… chktex to fix a FTBFS with TeX Live 2018

Thanks to all the people who sent patches!

I also finished the libosmocore transistion this month by uploading the following osmocom packages to unstable and alongside fixing some bugs that our tireless QA tools detected:

Further I uploaded osmo-fl2k already two days after release. It is a nice software that enables an USB-VGA converter to be used as transmitter for all kind of signals. Of course just use it in a shielded room!

As Nicolas Mora, the upstream author of the oauth2 server glewlwyd, wanted to be more involved in Debian packaging, I sponsored some of his first packages. They are all new versions of his software:

… orcania
… ulfius
… yder
… hoel

I also uploaded a new upstream version of dateutils.

Last but not least I worked on some apcupsd bugs and I am down to 16 bugs now.

1 May 2018

Fun with puppet — runinterval

Notice to my future self: The default interval between two runs of puppet is 30min or 1800s. In case this is too short you can add something like:
runinterval = 28800
to the [main] section of the puppet client configuration.

If you want to do this automagically, just run the command
puppet config set runinterval 28800
on each client.

Another command you might want to remember:
puppet agent --configprint runinterval

29 April 2018

Fun with broken harddisks

Today I needed to replace a faulty harddisk, which had a GPT, in a software RAID1. A GPT is a Guid Partition Table and is normally needed for partitions > 2TB. But wait, my external harddisk has 4TB and it uses an MBR (Master Boot Record)!?

In an MBR the partition size is stored in four bytes, which could have 0xFFFFFFFF as a maximum value. This would be 4294967295 in decimal. But the partition size is not given in bytes but in sectors. On Linux systems the sector size of an attached harddisk can be found in /sys/block/sd[X]/queue/hw_sector_size.
root@server:~ # cat /sys/block/sdd/queue/hw_sector_size 512
This is the normal sector size of a harddisk, so 4294967295 sectors of 512 bytes result in 2TB.

Luckily some external harddisks have a sector size of 4096 bytes.
root@server:~ # cat /sys/block/sda/queue/hw_sector_size 4096

This results in a partition size of 16TB.

Anyway, my disk had a GPT and after installing the new harddisk, it had to get a copy of the GPT of the first one. This can be done with sgdisk, that is part of package gdisk on Debian systems. So after doing apt-get install gdisk one can:
sgdisk --replicate=/dev/sdb /dev/sda
In this case /dev/sda is the source disk and /dev/sdb is the new one.

You can see the GPT with:
sgdisk -p /dev/sda sgdisk -p /dev/sdb

Due to the cloning, both disks have the same GUID and to avoid hassle, the new one needs a new GUID. This is done with:

sgdisk -G /dev/sdb

The structure of the software raid can be seen in /proc/mdstat. In my case I have three md devices: md0, md1 and md2
On my system md0 currently has only one active member /dev/sda2. So /dev/sdb2 has to be added:
mdadm /dev/md0 --manage --add /dev/sdb2 As this is just a small partition, it took only a few seconds and syslog showed: [ 5881.551829] md: bind [ 5881.581014] RAID1 conf printout: [ 5881.581020] --- wd:1 rd:2 [ 5881.581026] disk 0, wo:0, o:1, dev:sda2 [ 5881.581030] disk 1, wo:1, o:1, dev:sdb2 [ 5881.581174] md: recovery of RAID array md0 [ 5881.581180] md: minimum _guaranteed_ speed: 1000 KB/sec/disk. [ 5881.581186] md: using maximum available idle IO bandwidth (but not more than 200000 KB/sec) for recovery. [ 5881.581195] md: using 128k window, over a total of 499988k. [ 5889.511049] md: md0: recovery done. [ 5889.614014] RAID1 conf printout: [ 5889.614020] --- wd:2 rd:2 [ 5889.614026] disk 0, wo:0, o:1, dev:sda2 [ 5889.614031] disk 1, wo:0, o:1, dev:sdb2


The same needs to be done for the other partitions:

 mdadm /dev/md1 --manage --add /dev/sdb3

 mdadm /dev/md2 --manage --add /dev/sdb4


They are way bigger and recovery of the RAID lasts a bit longer. But finally everything is done and nagios switches back from red to green. Mission accomplished!




		
		Posted on 24 April  2018
bind: rndc addzone and also-notify
	


	
	
		
Notice to my future self: If you add zones to bind by rndc addzone please remember that those zones will be stored in /var/cache/bind/*.nzf. If you have to change your nameservers, you also need to adapt the also-notify list in all zones. If you forget one zone and there is one unused ip address in that list, all slaves will get the notification, start the transfer but the update won’t happen and the old data remain on the slave.
This sounds really crazy, but think about April 2018, when the challenge for your letsencrypt certificate was added to the master server but never reached the slaves. The log was full of 


ERROR: Challenge is invalid! (returned: invalid) (result: {

  "type": "dns-01",

  "status": "invalid",

  "error": {

    "type": "urn:acme:error:unauthorized",

    "detail": "Incorrect TXT record \"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\" found at _acme-challenge.xxxxxxxxx",

    "status": 403

  },


	


	



		
		Posted on 2 April  2018
My Debian Activities in March 2018
	


	
	
		
FTP master
This month I accepted 252 packages and rejected 23 uploads. The overall number of packages that got accepted this month was 308.
I also took care of #890944.
Debian LTS
This was my forty fifth month that I did some work for the Debian LTS initiative, started by Raphael Hertzog at Freexian. 
This month my all in all workload has been 23.25h. During that time I did LTS uploads of:

[DLA 1313-1] isc-dhcp security update for two CVEs

[DLA 1312-1] libvorbisidec security update for one CVE

[DLA 1333-1] dovecot security update for three CVEs

[DLA 1334-1] mosquitto security update two CVEs

[DSA 4152-1] mupdf security update for two Jessie CVEs and two Stretch CVEs

I also prepared a test package for wireshark, fixing 12 CVEs. I am still waiting for feedback :-).
The issues for mupdf did not affect Wheezy, so there has been no DLA. Instead the security team accepted my debdiff for Jessie and Stretch and published a DSA. Thanks to Luciano for doing this.

As it turned out, the patch I found for icu last month had been the correct one. But as it did not affect Wheezy, there has been no DLA as well.
Last but not least I did one week of frontdesk duties.
Other stuff
During march I did uploads of …

… libctl to fix a FTBFS during binary-indep-only build

I also moved all oauth2 related packages as well as cd5 to salsa.
Last but not least I took care of some old bugs in apcupsd that no longer seem to be relevant.
	


	


	
		Posts navigation
		Previous page
Page 1
…
Page 9
Page 10
Page 11
…
Page 22
Next page