How to disable DNS search received by DHCP
by Strahil Nikolov
Hi all,
I am looking for some help to adjust systemd-resolved to still use DHCP (ip, gateway and dns servers) but to avoid using the dns search provided over DHCP.
The reason behind is that OKD4's coredns (Fedora CoreOS) appends the search stanza (first entry) that is taken from the host and then sends it to the upstream server.Ex:/etc/resolv.conf contains:search my.domain my.other.domain
CoreDNS query becomes 'quay.io.my.domain' instead of 'quay.io'.
P.S.: I have an ugly workaround where I unlink and create /etc/resolve.conf but that can't be the only solution.
Best Regards,Strahil Nikolov
4 months, 3 weeks
Re: OT: what is an NSC?
by Richard
------------ Original Message ------------
> Date: Sunday, January 28, 2024 11:07:14 +0000
> From: Patrick O'Callaghan <pocallaghan(a)gmail.com>
>
> On Sun, 2024-01-28 at 03:04 -0800, ToddAndMargo via users wrote:
>> Hi All,
>>
>> Sorry for asking an off topic question here, but
>> I know you guys will know the answer off the
>> top of your heads.
>>
>> What is an "NSC" used in this context?
>>
>> 1.3.3 NSCs are installed between all wireless
>> networks and the CDE, regardless of whether
>> the wireless network is a CDE
>>
>> CDE is Card Holder Environment.
>
> It might be more understandable if you said where this quote comes
> from.
>
> poc
> --
That snippet is from:
<https://learn.microsoft.com/en-us/entra/standards/pci-requirement-1>
Scrolling up from the 1.3 section to 1.2 ... one will see that, in
this M$ context, NCS is "Network security controls (NSCs)"
[putting the quoted bit into a search engine turned this up as the
first result ... ]
4 months, 3 weeks
procmail question
by Thomas Cameron
I'm reading articles saying procmail is dangerous and unmaintained
(https://anarc.at/blog/2022-03-02-procmail-considered-harmful/).
I get why a setuid root:mail binary is potentially dangerous, but
procmail has been in use for decades and I don't think I've ever heard
of it being used for an exploit except for waaaaay back in 2017 and 2014
(https://www.cvedetails.com/vulnerability-list/vendor_id-225/Procmail.html).
Anyone got any recommendations? I've used procmail for decades. I'm
pretty familiar with it. I *can* migrate to sieve, but procmail Just
Works(TM), so I'm hesitant.
Is the risk overblown? We're using Postfix and procmail and it seems to
be really solid. I am not really looking forward to migrating to sieve,
so I'd rather just stick with what I know, you know?
What are your thoughts?
--
Thomas
4 months, 3 weeks
Problem with chown
by Robert McBroom
While installing a virtual machine I get a message that the files cannot
be read by uid104,gid104 these correspond to qemu:qemu. Tried to use
chown to explicitly assign the directories to qemu:qemu but chown
doesn't recognize qemu as valid or the uid:gid combination. tried
setfacl to add qemu permission to read the files, There were no messages
but the virtual machine setup still could not read the files.
Any clues to what is going on?
4 months, 3 weeks
How do I read result of a QR Code
by ToddAndMargo
Hi All,
Fedora 39
I do not have a stinkin' smart phone.
I scanned a QR code to drive and read it with zbarimg.
(it is a security code so I doctored the result up a lot).
zbarimg Screenshot_2024-01-04_16-08-43.png
QR-Code:otpauth://abcd/efgh:123445566?secret=ABCDEFGHIJKLMNONP&issuer=abc...
scanned 1 barcode symbols from 1 images in 0.02 seconds
On a stinking smart phone, it brings back a six digit code.
How do I duplicate this in Fedora?
Many thanks,
-T
Is there a way to run Android apps on Fedora?
4 months, 3 weeks
double sided printing
by ToddAndMargo
Hi All,
How do I set up my new Brother HL-L2300D for
two sided printing?
-T
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Computers are like air conditioners.
They malfunction when you open windows
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
5 months
Unlock encrypted thumb drive with TPM?
by Chris Adams
I set up a thumb drive with an encrypted partition with LUKS2. When I
insert it, I get prompted for the password and that works. I'd like to
have it automatically opened when I insert it in my main computer, so I
used clevis to add a key using TPM2. I can successfully open it without
a password by running "clevis luks unlock -d /dev/sda1", but it doesn't
work automatically on insert. I'm running MATE desktop, and I made sure
clevis-udisks2 was installed (and I see it running); I thought that
should handle it, but I see log messages like:
n 18 12:01:13 audit[2424]: USER_DEVICE pid=2424 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=recovered-key-for uuid=6f23603a-982d-4dd1-ac5e-50237b016666 device="/dev/sda1" exe="/usr/libexec/clevis-luks-udisks2" hostname=? addr=? terminal=? res=failed'
Am I misunderstanding how this should work, do I need to do something
more, ??
--
Chris Adams <linux(a)cmadams.net>
5 months
xfce: take a screenshot of a specific workspace from cli
by fedora@eyal.emu.id.au
I am trying to track a strange issue(*1) and I want to take a screenshot of one workspace, periodically,
regardless of the current active one, from cli.
I looked at 'shutter'(*2) and 'spectacle' but I do not see an option to pick a specific one workspace (out of 12).
The workspaces are named by the default "Workspace 1" etc.
I want to capture the full desktop.
There is probably a way (from cli) to switch to the desired ws, take a ss and switch back. but this will interfere with my work.
Alternatively, I can probably use the window name and see when it starts failing.
I am on f38.
TIA
(*1) for the last few days Firefox seems to do things that I am sure I did not initiate.
One ff window (out of 4) on the desktop disappears, and another one, with one tab (the settings) changes from "Privacy & Security" to "General".
It happened a few times and I want to see when this happens, when the screen is locked or when it is active.
I never seen it happening when I am on the affected workspace, it is when I switch to this workspace that I notice it missing.
I do not see any crash messages in the logs.
(*2) 'shutter' is real trouble, many console messages. If I am on a ws without ff then it just hangs.
--
Eyal at Home (fedora(a)eyal.emu.id.au)
5 months
gzip eps
by Patrick Dupre
Hello,
I am attaching an eps file
(NoDressedrecoil.eps)
You could do
cp -a NoDressedrecoil.eps No_Dressedrecoil.eps
cp -a NoDressedrecoil.eps No_Dressed_recoil.eps
and then
gzip -f No_Dressedrecoil.eps
gzip -f No_Dressed_recoil.eps
And you should obtain a different behavior
like
Traceback (most recent call last):
File "/usr/share/lyx/scripts/convertDefault.py", line 68, in <module>
if sys.argv[3] == 'ppm' and (im and version >= 0x060305 or gm):
^^^^^^^^^^^^^^^^^^^
TypeError: '>=' not supported between instances of 'str' and 'int'
This seems only due to the name No_Dressed_recoil.eps
Thank for your concerns
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
===========================================================================
5 months