Can F32 be installed to a removable drive,
e.g. an SD card in a USB SD card reader?
If so, any traps or tricks I should know about?
"Sorry but your password must contain an uppercase letter, a number,
a haiku, a gang sign, a heiroglyph, and the blood of a virgin."
Recently, had an issue with firefox script creating a zombie because of
an error. They fixed it, but then created another error since missed a
space after a [, that was then corrected.
In some emails, learned about shellcheck package..
Have done some testing to check scripts, but just started.
In looking at /usr/bin on my machine, there are just under 5,000 files, but
only 488 are shell scripts. So, created a little script that will run against
all script files, and create an file with results.
Current version is shellcheck-dir3
if [[ "$1" != "error" && "$1" != "warning" && "$1" != "info" ]] ; then s=style; else
echo -n "" >/tmp/"$s"-out
for a in ./*; do file "$a" | grep -E '(/ksh script|/dash script|/sh script|Bourne|POSIX)' |
cut -f 1 -d: ; done >/tmp/file-list
time while read -r line; do shellcheck -x -W 0 -S"$s" "$line"; done </tmp/file-list
#create uniq listing of errors found?
grep "\-\- SC" </tmp/"$s"-out | sed 's/.*^//' |sort | uniq > /tmp/"$s"-summary.out
runuser -u $USER gedit /tmp/"$s"-out /tmp/"$s"-summary.out
shellcheck has 4 security levels (error, warning, info, style)
error limits the reports, but gives about 688 lines with /usr/bin.
Each lower level reports more and more suggestions.
Some errors are simple. Number of script the exit -1, but reports that exit
values are suppose to be 0-255, so basically the -1 becomes 255. But
some look like they might cause real issues.
Just interesting to look out. Originally used a for loop, but ran into some
issues, so switch to the while that even handles files that contain spaces.
Thanks for any suggestions.
It's Time To Admit It: The X.Org Server Is Abandonware - Phoronix
"The last major release of the X.Org Server was in May 2018 but don't
expect the long-awaited X.Org Server 1.21
actually be released anytime soon.
This should hardly be surprising but a prominent Intel open-source
developer has conceded that the X.Org Server is pretty much "abandonware"
with Wayland being the future. This comes as X.Org Server development hits
a nearly two decade low
the X.Org Server is well off its six month release regiment in not seeing a
major release in over two years, and no one is stepping up to manage the
One of the motivations for Wayland was that the X.Org was becoming
unmaintainable and suffered from design choices that are no longer
relevant. It has been clear for some time that X Org was not getting much
attention, but Wayland has been around for a while and still many drivers
(Wacom professional drawing tablets) require X (and don't work with
X-Wayland). An additional problem is that developers with decades of X11
experience are aging out.
The Phoronix post has 100's comments, so far I haven't seen them degenerate
George N. White III
I'm packaging Open Policy Agent  (OPA) for Fedora. However, with version 0.20.0, OPA added a telemetry service, enabled by default, reporting to a OPA-managed service the OPA version, a UUID and the build architecture (cf changelog  and privacy information )
I didn't find any Fedora policy regarding this kind of opt-out telemetry, so I asked the Fedora Packaging Commitee for advice . I got advised to ask Fedora community on this mailing list.
So do you think it is ok to package OPA as is, or should I patch it to make telemetry opt-in by disabling it by default in the Fedora package?
More globally, what do you think should be done in Fedora packages when an upstream project includes a telemetry service?
Thank you & regards,
Installing fedora 33 virtual machine from workstation live image.
The little spinning circle on the left of the progress text never
spun :-). The text would change indicating progress, but no spinning.
Feel free to disregard as you see fit.
Trying to debug/resolve a sound issue. The base OS is an older Centos
7. It's running FF 78. - pulseaudio is running.
Sound works with the Chrome browser. However, can't seem to figure out
why sound is not working with FF! The FF app isn't appearing in the
"sound applicaition" gui when running vid/audio.
I've checked the preference box to disregard hardware in FF. I've
looked/researched the net as well.
Thought I'd turn here as last resort.
Any possible things to check?
HP printer. First time printing since unsuspending Sat night, but
printed fine Friday.
Output is just pending in the print queue.
I did a 'systemctl restart cups'
and no change.
I can print fine from another computer, so how do I troubleshoot this
and fix it? Other than a reboot?
I'm looking for advice on best practice for setting up a Fedora / CentOS
firewall in the following situation:
In addition to 198.51.100.1 and 18.104.22.168, the ISP is providing 28
extra public IPs (22.214.171.124-30), and I want to the firewall to be
able to DNAT those IPs to internal machines, which means it needs to
answer ARP for them.
The router is routing all of the public IPs directly to its internal
NIC. In an ideal world, we'd just reconfigure the router so that the
IPs are routed via the firewall rather than being directly connected.
However, I'm finding that for managed routers, ISPs are increasingly
unwilling to set up custom routing.
The available options seem to be:
1. Add aliases for all of the addresses onto the internet NIC of the
firewall. You used to be able to create an
/etc/sysconfig/network-scripts/ifcfg-eth0-range0 file with the address
range in it and have the network scripts automatically add the aliases.
Unfortunately NetworkManager no longer seems to support this. Also this
feels quite messy because you end up with a lot of addresses attached to
the NIC, and strictly speaking those addresses don't really belong to
the firewall since they are intended to be forwarded through to internal
2. Route 198.51.100.0/27 to a dummy NIC and enable proxy ARP on the
internet NIC. Proxy ARP is a fairly blunt tool and will cause the
firewall to answer ARP for any address, not just that subnet.
3. The only thing the firewall actually needs to do with these addresses
is answer ARP requests for them. It used to be possible to use the arp
command to set this up with something like:
arp -i eth0 -Ds 198.51.100.0 eth0 netmask 255.255.255.24 pub
This method is documented in TLDP, but the arp command is long
deprecated in favour of "ip neigh" which doesn't appear to support doing
Can anyone advise whether any "best practice" for this kind of setup exists?
Has anyone seen the following before and possibly has found out what is going on?
Fedora 32 shows a gpg-agent process for each repo but with a non-existant ".tmp" homedir.
root 2512 0.0 0.0 161028 900 ? Ss 11:20 0:00 gpg-agent --homedir /var/cache/PackageKit/32/metadata/fedora-32-x86_64.tmp/gpgdir --use-standard-socket --daemon
root 2527 0.0 0.0 161028 896 ? Ss 11:20 0:00 gpg-agent --homedir /var/cache/PackageKit/32/metadata/updates-32-x86_64.tmp/gpgdir --use-standard-socket --daemon