- Roundtable - muug.ca

a weird DNS issue this morning
by Theodore Baschak 13 Jan '17

13 Jan '17

Inspired by some of Trevor's recent git bisecting to find issues I lay out the details of an issue I discovered recently. I had a super super weird DNS issue this morning I got notice that there was some new powerdns releases, both recursive and authoritative. These were also noted on debian security announced, so I installed all of them on my various servers without thinking too much. Almost immediately after upgrading the ones in Winnipeg I started getting bombarded with notifications, mostly about one particular zone check failing -- ciscodude.net. I started investigating my various local resolvers trying to nail down the problem, and I noticed a lot of records missing all over the place, and missing inconsistently too. An A record for something would be there but not its AAAA. NS records would be missing or incomplete. I used the handy `rec_control trace-regex <domain>` on the recursors. This started to show very weird things, like my closest nameserver returning different zone's NS records when queried for NS records. How could this even be possible I thought? I then started `dig`ing the same queries against the suspect nameserver, and YES indeed it was returning NS records from a whole different zone!!! So, of course when powerdns recursor checked with the 2nd, 3rd and 4th nameservers, they disagreed with what had been returned by the first one. This caused DNS for Ciscodude.net to fail, and some other scattered fallout for other domains that used ciscodude.net nameserver records (most of my domains) while the primary served random records. Investigating the issue on #powerdns IRC, it was quickly identified that the configuration of 2 backends on this one server (mysql + bind files) was likely causing the issue, and then I was quickly pointed to a commit, and then a second commit [1] for 4.x which likely introduced the bug. I was also pointed to the package archives where I was able to install the previous version for now on that one server to get things back up and running. Github was simultaneously having an HTTP issue of some sort and so I haven't been able to compile the sources minus that particular commit yet to confirm that the commit is indeed the problem. 1: https://github.com/PowerDNS/pdns/commit/b854d9fec6f7e5636ab4742d716c7d848e0… Theodore Baschak - AS395089 - Hextet Systems https://ciscodude.net/ - https://hextet.systems/ http://mbix.ca/

1 0

Fwd: Free video: Cory Doctorow on how you got here
by Gilbert E. Detillieux 12 Jan '17

12 Jan '17

I thought this might be of interest to many of you... -------- Forwarded Message -------- Subject: Free video: Cory Doctorow on how you got here Date: Wed, 11 Jan 2017 10:55:58 -0800 From: Rachel Roumeliotis, O'Reilly Media <oreilly(a)post.oreilly.com> O'Reilly Media ... You may be passionate about open source software or FLOSS (Free/Libre and Open Source Software) or you may simply be focused on getting your work done. Either way, according to Cory Doctorow, novelist, activist, journalist, and blogger, when you use open source software the work you do today is giving shape to the open source software of the future. That's quite a responsibility—and a privilege. Cory explains what he means, and more important, what this means for the world at large. We invite you to listen to his thought-provoking keynote from the O'Reilly Open Source Convention last year, /How you got here/. You'll learn about the practical side of using open source as well as enduring benefits that you may not have imagined. And Cory's a brilliant speaker. Cheers! Rachel Roumeliotis Strategic Content Director, Programming P.S. In addition to fueling today's software and business systems, open source software is rich with exciting potential. Learn useful skills, languages, and best practices at the O'Reilly Open Source Convention <http://post.oreilly.com/rd/9z1zv70m8nrkcpqlkbltd24lk4aunijtc3cddjr34q0>, aka OSCON, happening May 8–11, 2017 in Austin, TX. Cory Doctorow <http://post.oreilly.com/rd/9z1zg6arcdm2cqgdpq3jd9k74dl9keblmfuk9pitpro> ... Did someone forward this to you? *Sign up here* <http://post.oreilly.com/rd/9z1zjmuv8ggaso35vqgnfqduqhjcmt8m878cbb7p408>. To ensure delivery to your inbox (not bulk or junk folders), please add *oreilly(a)post.oreilly.com* to your address book. O'Reilly Media, Inc. 1005 Gravenstein Highway North, Sebastopol, CA 95472 (707) 827-7000 -- Manitoba UNIX User Group E-mail: <gedetil(a)muug.ca> c/o Gilbert E. Detillieux Web: http://muug.ca/ University of Manitoba Phone: (204)474-8161 Winnipeg MB CANADA R3T 2N2 Fax: (204)474-7609

2 1

Update: MUUG Meeting, Jan 10, 7:30pm -- Webmin, Room 1L11, Lockhart Hall
by Gilbert E. Detillieux 10 Jan '17

10 Jan '17

*** Please note the updated meeting location below *** The Manitoba UNIX User Group (MUUG) will be holding its next monthly meeting on Tuesday, January 10. The meeting topic for this month is as follows: Webmin "Webmin is a web-based interface for system administration for Unix. Using any modern web browser, you can setup user accounts, Apache, DNS, file sharing and much more. Webmin removes the need to manually edit Unix configuration files like /etc/passwd, and lets you manage a system from the console or remotely." Adam Thompson will demonstrate the installation and use of Webmin as an alternative to editing config files and using the command line. RTFM: fio This month's RTFM will be presented by Wyatt Zacharias, who will talk about the fio(1) command. The "flexible I/O tester," fio is "a tool that will spawn a number of threads or processes doing a particular type of I/O action," usually "to write a job file matching the I/O load one wants to simulate." The group holds its general meetings at 7:30pm on the second Tuesday of every month from September to June. (There are no meetings in July and August.) Meetings are open to the general public; you don't have to be a MUUG member to attend. ****************************************************************** Please note our *NEW* meeting location for this month: *Room 1L11* Lockhart Hall, University of Winnipeg, entrance on Ellice Ave. between Spence St. and Balmoral St. Parking is available on the surrounding streets and in the lots on nearby streets. Look for signage once you're at the building, or ask a security guard. ****************************************************************** For more information about MUUG, and its monthly meetings, check out their web server: https://muug.ca/ Help us promote this month's meeting, by putting this poster up on your workplace bulletin board or other suitable public message board: https://muug.ca/meetings/MUUGmeeting.pdf -- Manitoba UNIX User Group E-mail: <gedetil(a)muug.ca> c/o Gilbert E. Detillieux Web: https://muug.ca/ University of Manitoba Phone: (204)474-8161 Winnipeg MB CANADA R3T 2N2 Fax: (204)474-7609

1 1

Winkler & Area Llinux User Group
by john＠reinland.ca 10 Jan '17

10 Jan '17

Sorry about the conflict with tonight's meeting. There is an introductory Linux User Group Meeting this evening at the Winkler Library. Start time is 7:15pm. Anyone with interest is welcome, you do not need to be an expert. Please forward to anyone who you think would be interested.

1 0

latest kernel needs setcap even as root??
by Trevor Cordes 05 Jan '17

05 Jan '17

Just upgraded a few boxes to kernel 4.8.8-100.fc23. It seems this latest kernel (or maybe 1 or 2 versions going back 1-2 months) changed something. I have a script that generates pings (using SOCK_RAW to make its own packets) that I run as root. Worked fine until now. In the new kernel I get "Operation not permitted" on the socket() call. Digging around the net, I found that I need to do: setcap cap_net_raw+p /foo/myscript Then when I run it, it works fine. Ok, great, but *** I'm running the script as root ***!!! Huh? Since when did root need to specify capabilities to run stuff as root? What is this, Windows? Is there some major paradigm change in the latest kernels where this is a "feature" and not a bug? Just wanted to do a sanity check before I file a bz. Oh ya, selinux is disabled, so that's not the problem. Lots of chatter on the net about this problem but everyone talking about it is talking about the non-root use case. It would appear my issue is something brand new. Aside: As for the script, I'm doing really wacky stuff on purpose, and I really needed direct control over the packet, so I can't just abandon SOCK_RAW.

4 12

MUUG Meeting, Jan 10, 7:30pm -- Webmin
by Gilbert E. Detillieux 03 Jan '17

03 Jan '17

The Manitoba UNIX User Group (MUUG) will be holding its next monthly meeting on Tuesday, January 10. The meeting topic for this month is as follows: Webmin "Webmin is a web-based interface for system administration for Unix. Using any modern web browser, you can setup user accounts, Apache, DNS, file sharing and much more. Webmin removes the need to manually edit Unix configuration files like /etc/passwd, and lets you manage a system from the console or remotely." Adam Thompson will demonstrate the installation and use of Webmin as an alternative to editing config files and using the command line. RTFM: fio This month's RTFM will be presented by Wyatt Zacharias, who will talk about the fio(1) command. The "flexible I/O tester," fio is "a tool that will spawn a number of threads or processes doing a particular type of I/O action," usually "to write a job file matching the I/O load one wants to simulate." The group holds its general meetings at 7:30pm on the second Tuesday of every month from September to June. (There are no meetings in July and August.) Meetings are open to the general public; you don't have to be a MUUG member to attend. ****************************************************************** Please note our *NEW* meeting location for this month: *Room 1M28* Manitoba Hall, University of Winnipeg, entrance on Ellice Ave. between Spence St. and Balmoral St. (Note: room is still to be determined. Check our web site for updates.) Parking is available on the surrounding streets and in the lots on nearby streets. Look for signage once you're at the building, or ask a security guard. ****************************************************************** For more information about MUUG, and its monthly meetings, check out their web server: http://www.muug.mb.ca/ Help us promote this month's meeting, by putting this poster up on your workplace bulletin board or other suitable public message board: http://www.muug.mb.ca/meetings/MUUGmeeting.pdf -- Manitoba UNIX User Group E-mail: <gedetil(a)muug.ca> c/o Gilbert E. Detillieux Web: http://muug.ca/ University of Manitoba Phone: (204)474-8161 Winnipeg MB CANADA R3T 2N2 Fax: (204)474-7609

1 0

Unix Stickers, Pins, etc
by Frank H 16 Dec '16

16 Dec '16

Would you like to order some linux stickers or other merch? I recently ordered some stickers from Stickers, T-shirts, Mugs on UNIX & Programming | unixstickers | | | | | | | | | | | Stickers, T-shirts, Mugs on UNIX & Programming | unixstickers The largest store for high quality and finely printed stickers, t-shirts, mugs, posters and pins on unix, linux,... | | | | Keyboard stickers that I am using both for Super keys and to label distros on usb keys. Some of my stickers are on back order so I've arranged free shipping on my next order. Would you like to add to that order? They don't have sku's I can see so send the URL and qty desired. If interested, please do so by JAN 1 2017. Happy Holidays,Frank

1 1

Free ebook: Ten Steps to Linux Survival
by Gilbert E. Detillieux 15 Dec '16

15 Dec '16

FYI, this may be of interest to some of you, if you're just starting out with Linux (or know a friend who is)... --------------------------------------- Ten Steps to Linux Survival <http://post.oreilly.com/rd/9z1zaoeoicrcp65dcg163geu3ckj1b1ec3gpqr20c18> There's really no such thing as a "pure Windows" shop. Linux systems can appear as virtual machines or in the cloud, including web servers, databases, mobile device managers, version control, and monitoring systems. When one of them falters, it may fall on you to jump in and fix things. But what if you have no Linux knowledge? /Ten Steps to Linux Survival/ <http://post.oreilly.com/rd/9z1zfdeeg476sunspiksst5a0tdfniutkb35f5ns26o> by James Lehmer provides tips to help you survive. This free, 74-page primer walks you through diagnostic and recovery tasks so you can quickly get your systems up and running. From "Don't Panic!" to navigating the filesystems and, if necessary, where to go for more help, this nifty guide will make you look and feel like a Linux wizard. Get your free copy now → <http://post.oreilly.com/rd/9z1z1qsc4v5avrb28risiq0jg1k1v3gnqdup03qj3mg> Cheers! Rachel Roumeliotis Strategic Content Director, Programming P.S. Linux is here to stay, along with many other open source technologies that fuel today's software and business systems. Learn useful skills, languages, and best practices at the O'Reilly Open Source Convention <http://post.oreilly.com/rd/9z1zhdl1s6bnugivdulsubk13ot08umsr2g942boo00>, aka OSCON, happening May 8–11, 2017 in Austin, TX. ... To ensure delivery to your inbox (not bulk or junk folders), please add *oreilly(a)post.oreilly.com* <mailto:oreilly@post.oreilly.com> to your address book. O'Reilly Media, Inc. 1005 Gravenstein Highway North, Sebastopol, CA 95472 (707) 827-7000 -- Manitoba UNIX User Group E-mail: c/o Gilbert E. Detillieux Web: http://www.muug.mb.ca/ University of Manitoba Phone: (204)474-8161 Winnipeg MB CANADA R3T 2N2 Fax: (204)474-7609

3 2

Pico ITX system
by Trevor Cordes 15 Dec '16

15 Dec '16

A lot of people asked me about buying the Pico ITX-sized VIA Artigo system I brought for the gadget show&tell at the meeting, so I thought I'd post the info here. You can still find a few online, or I can also still get them from my suppliers (I run a computer reseller business) brand new for $130+tax. I don't stock them so I need several weeks notice, but you may find it convenient to pick up at a meeting. It's a kit so you need to assemble some of the parts yourself, but it's super easy with paper instructions with lots of pics. For a few bucks more I can assemble it (I also stock compatible SSDs and can get RAM). It comes as a near-complete system, all you need to add is a DDR2 SO-DIMM RAM stick (any leftovers from an old laptop will work), and a notebook hard drive (SATA or IDE) or any modern 2.5" SSD. Why would someone want this box? It's a full x86-compatible system so it runs any normal i386 distro (not ARM, so you can run Windows if you need to). It also has SATA and IDE ports, which was why I wanted one originally (Pi-like things don't have this). It turns out it has a VIA C7 1GHz processor; 1GB RAM max capacity; onboard 100 ethernet, audio, usb, vga, dvi. All in about 6x4x1.5". I doubt these will be around much longer. If you want one, email me privately and make sure "muug" is in the subject. Thanks!

2 1

Fiery anyone?
by Trevor Cordes 14 Dec '16

14 Dec '16

I know it's obscure... but does anyone have access to a Ricoh Fiery box (network controller for Ricoh printer)? I have one that has a HD with bad sectors where the OS lives and would be willing to pay to get the data that goes on those sectors. If you have a working Fiery, let me know the model #, and/or if you're willing to sell it, and/or let me borrow it briefly (or use it at your place). Please email me privately and include MUUG in the subject, thanks! P.S. if you have a Fiery or any other printer with a built-in hard drive, I strongly advise you backup (image) its hard drive, because when the drive starts to fail, it's a real pain, especially when the printer is long ago discontinued. $10,000 printer becomes useless because of $50 part.

1 0