August 2020 - nmglug - lists.coactcloud.com

[PSA] There was a CL outage this morning
by ABQLUG 30 Aug '20

30 Aug '20

Early this morning there was a CenturyLink nation wide outage. Service started restoring around ~8:00 am. Although not everyone has come back up yet. Hopefully this will save you some time if you were calling your ISP to see what was wrong. This sub-reddit has been really handy for having information on outages of this scale. They often will have information than CenturyLink can provide over the phone: https://www.reddit.com/r/networking/comments/ijb8tn/global_as3356_level3_ou… Here is another handy link to see if CenturyLink is having current network issues: https://status.ctl.io/ Looks like a routing mistake (probably an automated one since it was early in the morning) was to blame. ~ Jared [ABQLUG]

1 0

Meeting tonight,
by Ted Pomeroy 28 Aug '20

28 Aug '20

I recently made some effort to take advantage of the UEFI settings for two laptops: I took a fresh Xubuntu 20.04 usb media and tried to install with UEFI support. Didn't work, "Partition table not good" was the gist of the error. I tried a second usb of the same OS and learned from it that I need a "Bios boot dedicated partition of at least 5 GB." Aha, that helped, so I partitioned manually: bios=5Gb, root=80Gb, home=150Gb and Swap=6Gb. This is where I forgot to give a mount point for the home partition, which I corrected later. Still wouldn't boot. So instead of panic, I tried Bios setting, first defaults which didn't work, then adjusted Sata to ACHI, and finally under UEFI, turned that ON, and Presto!- Ubuntu appeared in the bios UEFI settings as my only UEFI sub-choice. Now it boots and the partitions match what the hardware expects. The result of my work put me back in touch with examining the BIOS settings and thinking through the options and deciding not to accept "Legacy mode" as the only or first choice. I wonder what the feelings of other Linux users are on this issue. What are the advantages of using the UEFI settings vs. the more easily booted "Legacy mode"? Ubuntu and Mint make the EFI system work quite well. Unless I am on an even older machine why use the Legacy? Just a few thoughts to remind us of our NMLUG meeting tonight, Aug. 27, 5:30-7:00. See the Virtual Meeting link for the Jitsi address at Nmglug.org Thank you, Ted P

3 4

PureOS GnomeBoxes virtual machine on MX 'writable LiveUSB'
by Tom Ashcraft 07 Aug '20

07 Aug '20

PureOS GnomeBoxes virtual machine on MX 'writable LiveUSB' My notes with a bit of explication in case someone else might like to try this (looking at you, Brian) or maybe provide additional virtual machine/USB hints or comments. So far it all seems to work rather nicely--but it does make a ten-year-old plus AMD Turion II Toshiba Satellite L505 with 4MB RAM rather sluggish. I decided to try Qemu-KVM-VirtualMachineManager first rather than the recent edition proprietary VirtualBox available in MX for the sake of reinforcing general Debian transferable GNU FOSS skills. A couple of years ago I'd gotten fairly comfortable with setting up Ubuntu and Debian servers in Qemu-KVM-VirtualMachineManager virtual machines. Also, yesterday I had just done a passably successful installation of Windows 10 with spice guest additions that produced really nice choices of display resolutions, but was slow because I was unable to find any way to specify more than 16MB default for video, though it is supposed to be possible to do this through XML setting that never materialized in my instance of virt-manager). Probably some missing dependency that was unmentioned in the YouTube video I was using as a guide. At any rate, I couldn't make PureOS run under Qemu-KVM-VMM probably for similar reasons (i.e. I didn't know what I was doing.) Searching YouTube again I came accross Gnome Boxes which I had heard about from Jared at an abqlug meeting but forgotten. Like Qemu-KVM, gnome-boxes passes muster as Debian free software, shows and installs with apt. Really easy to use and works like a dream. However, there are several packages/dependencies in common with qemu-kvm, and also a few additional packages in common with both that are required to get both to work properly, at least in the case of using PureOS as a virtual machine. Also, there is one more that I think will be nice to have, and one more that is required to make it all go under MX. So here's all the stuff, probably pretty closely in order of best priority and sequence of installation. But first an aside about PureOS. The first update to the latest version replaces Pure Browser with Firefox ESR. Apparently most everything in PureOS is just Debian along with a special somewhat more highly curated/ranked software repository. I added several of my favorite packages via apt and noticed they were listed with a slash followed with the word amber. I assume this is as in green/amber/red categories of suspicion. Just a guess. I haven't yet looked into it. And just in case one happens to be preparing to create virtual machines on a computer not used for virtual machines before, remember to restart the computer, go into BIOS settings and make sure the virtualization setting is enabled... Now. Every command that follows a dollar sign below should be done (except in one case where noted otherwise): For reference https://wiki.debian.org/KVM applicable command/packages summation: $ sudo apt-get install qemu-kvm libvirt-clients libvirt-daemon-system virt-manager For reference (lifted from Chris Titus Tech who is coming from a place other than Debian but catches most of what seems to be missing in other references I've seen) https://www.youtube.com/watch?v=IdSxoSlxCNAhttps://www.youtube.com/watch?v=… Applicable commands: Installation: $ sudo apt install gnome-boxes qemu-kvm libvirt-bin *But* if you did the above from wiki.debian.org/KVM (as I think is likely best), all but gnome-boxes packages are consequently obsoleted and will cause defeat the entire command, so just do: $ sudo apt install gnome-boxes Add User to kvm: sudo usermod -a -G kvm $USER Allow users in kvm group to start VMs: sudo sed -i -e 's/\#group\ =\ "root"/group=kvm/g' /etc/libvirt/qemu.conf Wiki: https://wiki.gnome.org/Apps/Boxes For reference https://forum.mxlinux.org/viewtopic.php?t=54953 Fix MX problem with gnome-boxes and have more network options: $ sudo apt install bridge-utils qemu-utils And that did it. GnomeBoxes is pretty well entirely self-teaching and easy to figure out by clicking around a little. A very nice program. PureOS install thereafter initiates loading of live/demo instance, then imap & smtp, email password and keyring password setup is required in order to proceed to first full use of desktop. Closed welcome page and hit Activities > Install. Uses the Calamares installer Other things about the automated aspects of my virtual installation that I noted to note: Auto set/detected 'ATA QEMU HARDDISK - 20.0 GiB (/dev/sda)' Selected 'Erase disk', 'no swap', 'encrypt system'. Auto set/detected 'Boot loader location: Master Boot Record of ATA QEMU HARDDISK (/dev/sda)' Username, computer name, user password are set, then final commitment to overwrite the 20.0 GiB above is made and permanent installation proceeds. Takes at least a half-hour probably more on L505. Initial login and setup again first requires imap & smtp, email address info and setup in order to achieve first full access to desktop environment. Seems to me that from the security point of view, one's identity is probably now already compromised by association with an ip address and probably also some un-announced machine and browser identifications. However, if anonymity is not a necessary requirement for one's personal security, this set of arrangements likely represents a reasonable workable compromise on the part of the Librem developers between necessary social accountability/responsibility and the user's legitimate needs for privacy against the prevailing ubiquitous conditions of rampant unwarranted commercial/criminal/government intrusion. Therefore, in my case, because of the "pure" orientation of PureOS, I opted FOR DoH in Firefox. (The initial state was opt-in, not opt-out as Dr. Vixie has feared, and as I seem to remember it actually is in the non-ESR version of Firefox.) That is, it is perhaps reasonable that "they" should know who I am, but it is certainly none of their business what I do, unless it is illegal. I don't lie on my driver's license; I lock the door of my house; I draw my shades together in the evening. Firefox hamburger menu > Preferences > General. Scroll all the way to the bottom of the bottom, Network Settings > Settings. Scroll to bottom of opened Connection Settings window. Check box 'Enable DNS over HTTPS'. One does have to wonder exactly why this setting is so far out of sight. So. An easy-to-use encrypted Debian-based privacy-oriented OS in an easy-to-use GNU virtual machine in an encrypted easy-to-use Debian OS on a portable USB stick that still works as a storage device and likely works on, as far as I presently know, just about any Linux or Windows machine. A veritable Swiss army knife. Might work as a cat toy or bottle opener too (once). Tom

3 2

[ABQLUG] August meetup is live!
by ABQLUG 04 Aug '20

04 Aug '20

https://live.abqlug.com/AugustMeetup Let me know if you have any issues getting in. ~ Jared

2 3

Yet another example of Comcast/Xfinity spying and sleeze
by Tom Ashcraft 03 Aug '20

03 Aug '20

Seems the marketing department pounces (and cheats) at every opportunity. Yes, I've said it before. No, I'm not in a position to dump them and won't be for a while; also, I have other email accounts with different providers. It's just that I'm highly sensitized right now and think that knowledgeable computer users ought to occasionally be reminded of how prevalent this stuff is getting. And perhaps share my ire and sign up with some other outfit if the opportunity arises. Yesterday evening I did a nuke-n-pave switch from Kubuntu 18.04 LTS to Debian 10 KDE on the that laptop I'm writing from (interesting cautionary tale of woe behind that, and partially self-inflicted, but I'll save it for another occasion). Had to install a new instance of Thunderbird in a new system identity--the type of event that Comcast/Xfinity always seems to notice or want to get involved in in one way or another. Usually another. In this case: "Take your in-home WiFi to the next level" Email from Xfinity, 8:25 am. "...Introducing Xfi Complete. Get the complete peace of mind ... blah, blah, blah ...for only $25 more a month. ... If you do not wish to receive emails like this in the future, please click _here_" I did. See attached screenshot. Notice white NoScript icon (0 of 3 items blocked). All three links on the page dysfunctional. Dead. No way to actually communicate that I do not wish to receive such communications. Not that I should have to because, as I've previously written, I've already done it before. Tom Here's the code from the page in case someone who understands such things better than I is willing and able to provide some perspective or objective analysis: <!DOCTYPE html><html ng-app="comcastPC"><head><meta charset="utf-8" /><title></title><meta name="viewport" content="width=device-width, initial-scale=1" /><link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css"><link rel="stylesheet" href="styles/main.css" /></head><body><header><nav class="navbar navbar-inverse"><div class="container center-content"><div class="navbar-header"><a href="//www.xfinity.com" target="_self" class="navbar-brand"><span><img src="img/xfinity-logo.svg" style="margin-top:15px"/></span></a></div></div></nav></header><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-P53ZR3" height="0" width="0" style="display:none;visibility:hidden"></iframe> </noscript><script>(function (w, d, s, l, i) { w[l] = w[l] || []; w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js' }); var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src = 'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f); })(window, document, 'script', 'dataLayer', 'GTM-P53ZR3'); </script><ng-view></ng-view><br /><br /><br /><footer><div >© Comcast 2017 </div></footer><script src="https://cdnjs.cloudflare.com/ajax/libs/angular.js/1.6.5/angular.min.js"></script><script src="https://cdnjs.cloudflare.com/ajax/libs/angular.js/1.6.5/angular-route.min.js"></script><script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/angular.js/1.6.5/angular-cookies.min…"></script><script src="scripts/libs/ui-bootstrap-tpls-2.5.0.min.js"></script><script src="scripts/libs/angular-base64.min.js"></script><script src="scripts/app.js"></script><script src="scripts/services/addPreferenceService.js"></script><script src="scripts/services/filterHeaderService.js"></script><script src="scripts/controllers/mainController.js"></script><script src="scripts/controllers/managePreferenceController.js"></script></body></html><script id="f5_cspm">(function(){var f5_cspm={f5_p:'AOHAGAJCNBLDEPHFBKFBFJIDAENNBKNHEIEFNOJFILJIKLNIECMMANHJBENONDKENFABFDBGAAJHIAMBPANAJOFEAABPOPGEAIGHKCPJGNBAIPHFKKJKIPKKNEJLIDBH',setCharAt:function(str,index,chr){if(index>str.length-1)return str;return str.substr(0,index)+chr+str.substr(index+1);},get_byte:function(str,i){var s=(i/16)|0;i=(i&15);s=s*32;return((str.charCodeAt(i+16+s)-65)<<4)|(str.charCodeAt(i+s)-65);},set_byte:function(str,i,b){var s=(i/16)|0;i=(i&15);s=s*32;str=f5_cspm.setCharAt(str,(i+16+s),String.fromCharCode((b>>4)+65));str=f5_cspm.setCharAt(str,(i+s),String.fromCharCode((b&15)+65));return str;},set_latency:function(str,latency){latency=latency&0xffff;str=f5_cspm.set_byte(str,40,(latency>>8));str=f5_cspm.set_byte(str,41,(latency&0xff));str=f5_cspm.set_byte(str,35,2);return str;},wait_perf_data:function(){try{var wp=window.performance.timing;if(wp.loadEventEnd>0){var res=wp.loadEventEnd-wp.navigationStart;if(res<60001){var cookie_val=f5_cspm.set_latency(f5_cspm.f5_p,res);window.document.cookie='f5avr1103044515aaaaaaaaaaaaaaaa_cspm_='+encodeURIComponent(cookie_val)+';path=/';} return;}} catch(err){return;} setTimeout(f5_cspm.wait_perf_data,100);return;},go:function(){var chunk=window.document.cookie.split(/\s*;\s*/);for(var i=0;i<chunk.length;++i){var pair=chunk[i].split(/\s*=\s*/);if(pair[0]=='f5_cspm'&&pair[1]=='1234') {var d=new Date();d.setTime(d.getTime()-1000);window.document.cookie='f5_cspm=;expires='+d.toUTCString()+';path=/;';setTimeout(f5_cspm.wait_perf_data,100);}}}} f5_cspm.go();}());</script>

2 1

OK I'm crazy. Apologies to Comcast/Xfinity (grudging)
by Tom Ashcraft 03 Aug '20

03 Aug '20

OK yes it's just me. Problem with Xfinity page was a product of my paranoid stance. Jared just explained to me how to start with a clean Firefox profile and the links now work. Nice to get an objective outside opinion. For that I am always grateful to nmglug and abqlug. Interactions with real people always beat Google, hands down. Tom

1 0

[ABQLUG] August meetup tomorrow over Jisti-meet (virtually)
by ABQLUG 03 Aug '20

03 Aug '20

You can join the next Albuquerque Linux User Group's meetup on August 4th, 2020 at 6:00 pm here: https://live.abqlug.com/AugustMeetup If you're going to use a desktop/laptop, all you should need is a modern web browser. If you are going to use a smartphone, you will want to install the Jitsi-meet app, and set the Jitsi-meet server to live.abqlug.com. If you would like more information on how to attend the meetup, visit: https://www.abqlug.com/attendee/ If you're having issuesing using a microphone or camera, you might have to make sure that WebRTC is enabled in your browser if you have "locked down" your browser. The meetup will likely end around 8pm. See you there! ~ Jared

1 0

Tinfoil hat time again: more Comcast paranoia
by Tom Ashcraft 31 Jul '20

31 Jul '20

I think this is not coincidence and should probably make everyone on nmglug(a)lists.nmglug.org angry. Today through my Comcast email account I received a couple emails re Kingston DTL+ USB via the nmglug listserv. That's fine. I LIKE email from nmglug. What I definitely DON'T like is getting this associated email as a consequence: From: news(a)e.benidata.com (arrived 3:02 pm today) Subject: ⚡See Today's Deal of the Day -- Act Fast! $4.95 Kingston 16GB Micro SD Class 10 The operative common term being 'Kingston'. Out of the blue. Three in one day. Out a total of six emails for the day. I have never had any known relationship with benidata.com and I would certainly have deliberately and promptly declined to receive any sales or marketing information from them if I did. And of course I did promptly unsubscribe for further emails from them though I had never knowingly subscribed in the first place. I use only DuckDuckGo for searching. I have Firefox locked down with privacy Addons every which way from Sunday. DoH network setting, strict tracking protection settings, NoScript, Ublock Origin, HTTPS Everywhere, Privacy Badger, Decentraleyes, Facebook Container--I don't even use Facebook, it's there just in case I change my mind! I virtually never see or hear any adds that aren't embedded directly in streaming podcast or YouTube content (can't figure out how to get rid of that except not to stream.) Almost all of my few online purchases come through eBay and Amazon whom I haven't dealt with for more than a month. No storage media for more than a year. Almost all my emails are personal or related to specific non-commercially oriented subject matter from people or groups who are not commercial entities. A couple of years ago when I got rid of our Comcast wifi-cable-modem-router I went through all the contractual crap and opted out everything related to marketing that we still might be exposed to that I could find. Set up the new purchased wifi-cable-modem-router for Cloudflare DNS. Yet some months ago when I searched around for products related to solar panels, shortly thereafter Xfinity sends me email adds trying to sell me on their own branded rooftop PV electric scam. A couple weeks ago I was shopping for insurance. First time in years. Suddenly Xfinity emails me and wants to sell me their own branded BS home, pipes and appliance insurance because of the extra strain Covid is placing on them. Never had other adds for insurance other than the most rare and minimal for services from carriers we already had relationships with. Now I have this unsolicited add for Kingston storage devices. All too isolated as a class of events and too closely related in subject matter and time to be purely random and unconnected. I think Comcast/Xfinity or some data-broker entity closely associated with them is mining my email account pretty directly.

3 2