* Posts by ElReg!comments!Pierre

2711 publicly visible posts • joined 22 Jun 2009

systemd row ends with Debian getting forked

ElReg!comments!Pierre

Re: Init freedom @Andrew van der Stock

A lot of what you describe is done by the kernel, not systemd at all.

reduces the chances of admins stuffing it up.

It also reduces the chances of the admins fixing it when it fails (because it does fails, as does every system -rather more often, too, in my limited experience).

Systemd's modular security architecture provides separation of duties, so a compromise of one module doesn't imply a compromise of the entire system. It's early days yet, so I bet there's a few sandbox bugs to work out,

That "sandoboxing", as you call it, often causes more problems than it solves. Process-based permissions (as opposed to user- or group-based like in any san system) might have seemed like a good idea at the time. In the real world it's a nightmare as soon as you get out of the precise sequence of actions that you had planned for the system to be able to perform. In my -again, limited- experience a process creating a resource (i.e. mounting a drive, creating a file, whatever else) becomes the exclusive owner of said resource which is then unavailable to other processes. I understand why you would think this is a good idea for security, but now imagine the "creator" process crashes or otherwise stops at a point in the workflow that you hadn't envisionned. Then you're left with a screw-up that can't be fixed without extensive manual intervention as root -provided you can even identify what went, I was going to type "wrong" but not necessarily, just "unexpected".

So, what we have is a system that messes up big time in case something happens that the admin had not planned. Sure, what could possibly go wrong with that? Let's put it on every production system we can find!

Before you answer anything, be informed that the aforementionned scenario happened to me a good dozen times (that's only the ones I could identify with 100% certainty; some of the numerous glitches and fails I encountered may have been caused by such a scenario too). And that's in my limited experience.

Now I could be very mistaken, that's always a possibility. But I much prefer to be wrong with working systems than right but left with rackfulls of very expensive bricks.

ElReg!comments!Pierre

Re: Binary logs? Ugh.

Zbigniew Jedrzejewski-Szmek 2013-08-05 03:08:22 UTC

The only way to deal with journal corruptions, currently, is to ignore them: when a corruption is detected, journald will rename the file to <something>.journal~, and journalctl will try to do its best reading it. Actually fixing journal corruptions is a hard job, and it seems unlikely that it will be implemented in the near future.

Lennart Poettering 2014-06-25 09:51:01 UTC

Yupp, journal corruptions result in rotation, and when reading we try to make the best of it. they are nothing we really need to fix hence.

So in a way you're right to say "The way to read a corrupted log is to just run journalctl", because that's the way to read a log, corrupted or not. But in the case of a corrupted log there's data in there that journalctl won't read and that you can't recover. It's much, much easier to recover data from a corrupt text log.

ElReg!comments!Pierre
Mushroom

Re: What is systemd @rtfazeberdee

From what i've read of your posts on systemd, you are being ideological and do not have any real technical problems to point out

Your reading skills need improvement. I made it very clear in my posts -including the very one you're answering to- that the opinion I hold is the result of systemd borking the test system it got installed on; I spent hours tracing the various (and intermittent) startup problems to systemd, everything got back to normal after systemd purge, and only after did I research systemd; then indeed I had an ideological issue as well, as I happen to dislike opaque monolithic blobs. But my ideological opposition is only secondary.

Just because I suspect you can't be arsed actually reading my previous posts, I remind you of my technical problems -chich happened even before I knew what ideological abomination systemd is:

-trackpad not initialized at boot (roughly 1 boot out of 2)

-wifi interface not recognized (~ every boot with very rare exceptio; I had to initialize it from the CLI. No biggie on a test system but still)

-inconsistent mount-on-insert for removable media; sometimes not mounted, sometimes mounted as root, sometimes correct.

-inconsistent ability to unmount media as a normal user (may be related to the previous issue with a liberal serving of the "process-based" extra-stupid special sauce that systemd insists on).

-incorrect read/write/execute rights on removable media (probably linked to the previous two); this issue not fixable even as root i.e. when systemd had decided that the device was off limit, I could access it as root all I wanted but I could not modify its permissions as root. Fun, heh?

-fail on boot (rare, but never had happened with sysvinit and never has since I purged systemd).

That enough tech issues for you?

ElReg!comments!Pierre

Re: Binary logs? Ugh.

Binary logs are a necessity on systems where integrity of the logs (This is proof that they haven't been tampered with) is a must.

That's a lie, pure and simple. While there are plenty of ways to protect text logs from being tampered with, all you need to do to "tamper" with the binary logs is to crash journald. There is no way to recover a log corrupted by a crash, and there will not be in the foreseeable future, as the systemd devs do not think of it as a bug:

https://bugs.freedesktop.org/show_bug.cgi?id=64116

So much for the added security! That's an added security vuln, plain and simple (and an added pain in the ass when you want to know why the system crashed, for example to prevent it from happening again).

ElReg!comments!Pierre
Coat

Re: popcorn

The Big War of the Ugly Monolithic Blobs! I can't wait to see what systemd looks like after it has swallowed the whole of Windows "to increase boot speed"! Yo dawg, I heard you like blobs so we put a blob in your blob so it can catastrophically crash while it freezes! And all that sort of things.

ElReg!comments!Pierre

Re: "Devuan"

I think you misread the sentence. It's supposed to be written in Italian (Spanish would work, too), so it's pronounced like dev-one would be pronounced in English, devoine in French, dewoan in German etc.

Not that it matters much, as long as it's good.

ElReg!comments!Pierre

Re: What is systemd

I doubt that even 10% of the people here has used systemd for more than a 5 minute casual test.

That may be the case. However some have, including myself. I switched back not for theological reasons but because it made a lot of things work unreliably (and some reliably not work). Only when I looked into what systemd really was and how it worked (which was after banning it) did I understand where my problems stemmed from.

but it certainly improves fast and once you get to know it it is pretty decent.

For some definition of "pretty decent", perhaps. However, on a production system you can't replace "rock solid" with "pretty decent". Together with the "improves fast" part, it is an argument to NOT make it the default and wait until it becomes really good instead.

That's only from a pragmatic, "need-to-work" point of view.

From an ideological point of view I do think that systemd is the spawn of some particuliarly dumb and nasty devil. But that's just my opinion, and so obviously entirely discussable.

ElReg!comments!Pierre

Re: What is systemd

They wrote the code because they think their versions are faster.

And you would know that, how? Furthermore, even if that was true (yeah right), why borge the new improved version in the huge do-it-all Frankenstein monster? Why not just release them as standalone tools?

The answer is in Poettering's assertion that systemd is set to be an OS, not an init system.

If some future version of systemd does stop one of the standard services running then you report that as a bug.

A report that will duly be filed together with the few hundred terabugs sitting in systemd devs' garbage bin. Even Torvalds has trouble getting the systemd team to fix the most horrid of their shit.

And the problem is not that it would stop alternate utils from working; it's that by forcefully integrating them it may just cause them to disappear, as duplication of utils is not a good use of ressource.

So, how is the [database connection] problem solved in sysvinit?

That's a problem caused by systemd, sysvinit doesn't need to fix it because it doesn't create it to begin with. If you launch the services in order, no problem. You question is either a bad faith question or a proof of your ignorance of all things computer-y.

ElReg!comments!Pierre

About switching to BSD

It's made even easier by the existence of aBSD-based Debian port, which I have dully installed, for 2 reasons: it is (obviously) systemd-free, so running it (with popularity-contest) puts some weight behind the systemd-sceptics; and it helps me getting familiar with BSD, in case everything goes very bad and I need to make the switch.

ElReg!comments!Pierre

Re: Debian R.I.P. Best alternative?

what is the consensus on the best alternative?

For now it's Devuan. Why are you trying to jump to the "next best thing" when the first best thing is still in the incubation phase? If everyone skip it "because it may not get traction", Devuan will never get the traction it needs. On top of that, switching to Devuan will just be a dist-upgrade-like process, why would anyone actively research a more painful way to avoid systemd?

ElReg!comments!Pierre

Re: What is systemd

A funny gif is not a particularly convincing argument.

A funny gif listing the non-init stuff gobbled up by systemd, on the other hand, may just be.

ElReg!comments!Pierre

Re: What is systemd

Exactly. Where's the spec? What are the project goals? In fact, what are the project limits?

Well if you believe one interview of it's conceptor, systemd is a set of bricks from which you can build an OS. Which pretty much means "no scope, no limits"; that's in line with the carnivorous behavour of the project right now, incorporating all kinds of non-init utilities and slowly becoming a monolithic and opaque standalone OS.

ElReg!comments!Pierre

Re: This is gold

What about people like me who run linux on home desktops and netbooks which are started and stopped all of the time?

Well, I tried it on a such a machine and it broke all manners of hardware support, so I guess the answer to your question is "they should avoid it as well".

ElReg!comments!Pierre

Re: What is systemd

1. systemd is an optional part of Debian, (it's the default for the linux kernel versions, but they work without it). Debian/kBSD and Debian/Hurd have no problem not using systemd.

For now, and only because sysvinit is still the default init in stable. As soon as systemd becomes the default init (next release), things will start getting interesting depending on the policy on init system, i. e. do maintainers have to support several inits, can a package NOT support the default init, etc...

No matter what the policy is, it means a huge increase in porting difficulty, which means that packages just won't be ported to hurd or KFeeBSD; that's pretty much the end of the projects.

2. The systemd developpers have "inserted their tentacles" into nothing.

I beg your pardon? They're steamrolling essential parts of the system (and even parts of userland) into their monster of a system. See http://www.muylinux.com/wp-content/uploads/2014/08/funny-systemd.gif for a humorous representation of how they "inserted their tentacles into nothing".

ElReg!comments!Pierre

Re: Init freedom

Hey, steady there. "Init freedom" means "freedom to use whatever init mechanism you want", not "freedom to use sysvinit" (otherwise they would have said "sysvinit freedom", surely).

The problem with systemd is that it introduce a system where GUI applications force the init system, and a huge bloated one that includes everything but the kitchen sink (yet; kitchensinkd release expected in early 2015).

For servers it is simply not an option.

Now add to that the stellar reliability (erm) and exemplary openness of systemd (binary logs... of course, why not!) and I'm entirely behind the greybeards on this one. I tried systemd on a laptop of mine; a desktop-type machine, typical systemd playground. Took me several hours of wading through the system to understand why the trackpad would sometimes work and sometimes not; why the WiFi circuitry would sometimes work and sometimes not; and why external drives would sometimes mount themselves upon insertion (sometimes as root, with the corresponding read/write restrictions), sometimes not, and would sometimes be unmoutable only by root (again, sometimes not) and then of course re-mountable only by root with the corresponding read/write restrictions.

Uninstalled as much of systemd as I could, back to sysvinit and everything works as expected again.

I think the "let's see how it works" phase is done and the answer is "not suitably".

One year on, Windows 8.1 hits milestone, nudges past XP

ElReg!comments!Pierre

Re: The answer is still no.

Given that every even version of windows has been terrible

Would you kindly consider removing Windows 2000 from that sweeping assertion? That was the last version I actually liked.

Apple patents NEVERSMASH iPHONE for fumbling fondlers

ElReg!comments!Pierre
Pint

Motor, eccentric weight...

... a bit like what's in Hitashi's finest then? Interesting.

On second thought, forget that shit. I want a proper delta wing for my phone, deployed if it detects a fall, able to locate the nearest source of ascending currents, and to use that to gain altitude and land back in my hand. I think I'd even give up on getting a flying car for a phone like that.

Sick of the 'criminal' lies about pie? Lobby the government HERE

ElReg!comments!Pierre

If pie is a half toe...

what does that make half a pie?

Apple’s $700 BEEELLION market cap makes it more valuable than Switzerland

ElReg!comments!Pierre
Unhappy

Re: Apples and Oranges

That's true for a lot of public (as in, stock market) companies. The working of it all annoys me quite a bit. Shares were supposed to represent "stock", i.e. assets. Now they're just whatever some greed-fuelled gamblers dream up; not only that, but you can make cash out of options on the stock, i.e. vapour of something that is in itself not much more than vapour. And out of options on options. Too meta, much? If an online casino tried that crap they would be shut down faster that you can say "Is that a copter I hear coming?". And when the big players slip, they're bailed out with our tax money.

OK, beer time. It's good for my blood pressure.

ElReg!comments!Pierre

Re: Eeeek!

Eh! You don't get a nice red badge? Have you been ripped off or, as a fine connoisseur of the real values in metal stocks, did you ask for copper on purpose? Or is it all to do with the apparently-missing "L"?

ElReg!comments!Pierre
Pirate

Re: Switzerland is NOT the home of the cuckoo watch

Would said avian alerter pop out of the side of the front?

on the underside of the wristband. Down, not across.

Right to be forgotten should apply to Google.com too: EU

ElReg!comments!Pierre
Happy

Re: Unnecessary by their own admission

if you don't want to be on the map then you must destroy the town (which is even harder here due to the first amendment).

Someone got all tangled in their own analogies it would seem.

ElReg!comments!Pierre

Yes, that's bound to happen a lot especially with sites like yelp and other "crowdsourced" business evaluation platforms. Also, if you rely on a blog for revenue or advertisement -or just plain old vanity- you may not want to say anything negative on anyone lest your cherished A-rank goes down the drain*.

And of course in genuine slander cases, getting around the link removal is only a matter of changing FDQN at most. Perhaps even only the name of the webpage. Given the flurry of free blogging platforms around, get ready for a game of the whack-a-mole that never ended

There's something that I don't understand in this affair: to ask for a link to be removed you need to perform a search on Google and get the link as a result, right? So at this point, why not just send a nastygram to the target of the link to have the offending material removed at the source? Google should really be responsible only for their own cache (which is already lots).

Well of course the source may be located in place where they don't care about your nastygram. What we really need is a state-operated all-encompassing filter, only then we'll be safe from the big, nasty interwebs.

* I know, right. But apparently for some it's more important than their very life. Or this of their neighbours at least.

Sacre vache! Netflix ne parle pas le Frenchy ... zat is against ze LAW

ElReg!comments!Pierre

? Re: T'ouvres ton brouteur et tu cliques sur courriel, t'attrape un bon, gros maliciel

A brouteur is a con-man in African French parlance; I don't think it has any other meaning as a noun, endorsed by the Académie or not. Did I miss something, or did you mean butineur instead?

ElReg!comments!Pierre
Happy

not even those that live in france do it right.

Whereas not even those who live in your neck of the woods can type english right.

ElReg!comments!Pierre

Does this imply that anyone making their wares available over the Internet must produce Ts&Cs in Khmer, on the off chance that someone in Cambodia decides to make a purchase?

Netflix may have had half a (bad faith) defence right there. Unfortunately for them they do have region restrictions...

ElReg!comments!Pierre

Canal+ is perhaps watching

But the ISPs are probably watching much more closely. They offer pay-per-view services that conflict directly with Netflix while Canal+ has been created around porn and footie, and still have a solid core of subscribers who don't care much about other stuff, so they are not really head-to-head with Netflix.

The language thing is easy to fix so it's not likely to be a big problem; however the contract change point would probably require Netflix to change quite a few thing in it's operating procedures (and it may give "bad" ideas to other customers) so they'll probably argue that they operate from Lux and thus don't need to obey French law. Expect much drama!

LOHAN sponsor Lucidica explains the benefits of being French

ElReg!comments!Pierre

Re: French Foreign Legion

That's one of the qualifiers - you need to be foreign (to France)

That's what the name would suggest, innit? But it's not actually true. It's open to all, including French nationals; and I seem to remember that the officers actually _have_ to be French (not a big problem, as a wound in operations automatically lands you the French nationality).

Forget the climate: Fatties are a much bigger problem - study

ElReg!comments!Pierre
Coat

Re: Hail the Fatty Heroes !

fags will come with a subsidy because of their beneficial effect on unfunded pension costs?

SOOOOOO many ways to read this sentence...

ElReg!comments!Pierre

Re: Time to start taxing these lard buckets

If you are overweight, a scaled % gets added to your income tax until you stop shovelling food down your gullet, get off your fat ass and do some exercise.

I'm sure it sounds like a good idea to some, but real-world evidence (mostly based on correlation, not direct causation, but that's all I have) suggests that in rich countries the less money you have, the fatter you get. Because instead of stuffing your gob with aspararus, aragula, ananas, abalone and aardvark*, you use McDonalds and Pizza Hut as your stomach balast.

So a fat tax will not actually work. Mandatory exercise camps, on the other hand...

*OK, not really

ElReg!comments!Pierre

Re: They aren't a problem; they're a solution!

One word "tree" (or "vegetation" take your pick).

As much as we'd love it to be true, in the real world land vegetation is pretty much carbon-neutral (appart from marshes). The most effective carbon trap is ocean-based, as the dead organisms fall to anoxic depths where they sit for a very long time (until we dig them up and burn them as coal and oil, that is).

ElReg!comments!Pierre

Re: They aren't a problem; they're a solution!

HA but most of their mass is water, so they're back to being a problem*.

* as everyone knows we'll run out of fresh water within 10 years, starting in the early nineties...

ElReg!comments!Pierre
Coat

WRONG! (Was: I'm three terrorists at least!)

You're reading El Reg and operating a computer (possibly with some encryption at some point) so you're also a terrorist. Which means you're actually 4 terrorists at least, not 3. Oh wait a minute...

ElReg!comments!Pierre

In terms of costs...

Remember that the graph is an estimation of the "buden to economy" which is really how much is spent... obviously heavily biased towards 1st-world perceived problems.

The millions of people who die directly or indirectly from starvation obviously don't weight much (no pun) in such calculations, as they mainly starve because noone spends money on them, so to speak. On the other hand billions are spent every year in campains against gobstuffing. In fact I'd even say that most of the "underweight" bar comes from western world campains against eating disorders, not from 3rd-world people who actually die by the million.

Basically this kind of "analysis" is the typical self-feeding crap: because we spend a lot of money on it it means "obesity" is a big problem, so we obviously need to spend more money on it.

People love that crap because you can't be wrong. It's bit like stock market analysis: if I'm a "big name" I can say that company x is a good bet and company y a bad one. The actual wealth and management quality of the companies don't matter a bit because investors will read my paper and invest in company x, causing the share to rise and making it a good bet, while they'll dump company y causing it to crash. Perfect fortunetelling.

LIFE, JIM? Comet probot lander found 'ORGANICS' on far-off iceball

ElReg!comments!Pierre

Re: Yes, but it's really, really unlikely. Statistically indistinguishable from zero.

I think that given we don't have a frigging clue about how life really appeared, it's probably a tad early to speculate on the probability of it happening all over the place all at once (on cosmologic timescales the entire existence of our planet, from its distant aggregation up to its distant disintegration, is but an instant).

ElReg!comments!Pierre

Why would it change anything about the origin?

I came to this section to post something similar:

suggest a suitably scientific answer to the question of the origin of life on Earth.

Seriously? If we're going to say that life originated with the self-assembly of organic compounds, why would we need them to come from deep space? (appart from the "we're all aliens" angle, that is)

Either way I'm fine with the idea; it's just the implied claim that there was no scientific grounding of the theory before we found organic compounds on a comet that peeves me.

Quebec's latest bid to break away from Canada HALTED by a single dot

ElReg!comments!Pierre

We're talking GOV domain here

The costs probably cover the reissue of all certificates, rewriting of all the doc... including offline, dead-tree doc, all the forms, reissue of all signage in all the local agencies (and all the national parks etc). It's not just a website, it's pretty much everything printed or painted by the government across the whole province, covering some rather serious matters including taxes and immigration. Even just paying someone to cover existing signs with a sticker is going to cost dearly. They could make the switch gradually by setting an alias and supporting both domains in parallel but I don't see this as cheap either. In any case the liberal gov. is not likely to do it as it would peeve its federal "masters"; that was always a PQ project.

Attack reveals 81 percent of Tor users but admins call for calm

ElReg!comments!Pierre

Re: tor is great

more users would probably make this attack harder.

Not a lot. What makes the attack harder is more entry and exit points.

ElReg!comments!Pierre

Re: Harshing their mellow!

Tor should have a FAQ about how many ways its anonymity can be countered

it has. With mitigation procedures, too.

ElReg!comments!Pierre

lag, buffing and aggregation only partially help

It's a well-known fact that with control over a sufficient portion of the pipes you can defeat any existing anonymizing system (TOR, Freenet etc). It's usually stated on the projects' webpages and/or READMEs etc. Last time I checked, TOR told you so at each startup.

Artificial lag, fake traffic -as you suggest- and aggregation make it harder, and they are used in most anonymizing schemes (all the ones I know, actually), including TOR. But they are not sufficient.

BOFH: An UNHOLY MATCH forged amid the sweet smell of bullsh*t

ElReg!comments!Pierre

Re: Still wrong

Seconded.

ElReg!comments!Pierre

Re: Parasites

Round here an estimated 2 BEEELLIONS euros per year in Research tax breaks go to big finance groups on these grounds. There are even consulting outfit that openly specialize in getting these for banks and insurance companies. Research labs, on the other hand, are not funded and have to work with unpaid labour ((half the staff -that's including office workers and all- are students on specifically tailored contracts that allow not to give them a cent who are then sent direct to unemployment) and most of the Unis are on the brink (with some already officially bankrupt).

Yay.

Space Commanders rebel as Elite:Dangerous kills offline mode

ElReg!comments!Pierre

Solo play not good enough

I understand that offline play would require an extra "static" universe and some transfer control to avoid an invasion of locally buffed-up Commanders (Diablo memories...).

However, the original game did that in very little space using "on the fly" generation, and I do most of my gaming on the go these days. I really can't understand why the devs do not include a -minimal, if need be- local universe for offline play. Except if they are late with the developpment of the game, that would explain it. In any case it kinda suXX0rz: I won't buy a game that I can't play...

ElReg!comments!Pierre

Re: Cue the mass demands for refunds.

* Kickstarter does not offer refunds. A Project Creator is not required to grant a Backer’s request for a refund unless the Project Creator is unable or unwilling to fulfill the reward.

* Project Creators are required to fulfill all rewards of their successful fundraising campaigns or refund any Backer whose reward they do not or cannot fulfill.

Interesting, as quite a lot of people stumped up for a reward that includes a copy of the game. Wonder if the lack of offline mode would qualify as inability and unwillingness to fulfill the reward...

what did you expect, it's an English project; as a rule of life I don't trust these. Perfide Albion and all that ;-)

Anyway, I didn't back the project: my machines have enough trouble running Oolite already and I suspect the reboot will be substancially heavier.

ElReg!comments!Pierre

Re: Pity!

Whilst the movie industry almost constantly releases rehashes of old movies, the games industry [...] often completely miss the essence of what the game great in the first place.

So, the game industry is EXACTLY like the movie industry then? ( *cough* Jar Jar Binks *cough* *cough* )

I would be so happy to get some reboots, with identical gameplay, just updated graphics and resolutions.

What? No! That would only turn snappy old 8-bits lovelies into sluggish monsters. OK, _some_ games could benefit from better graphics, but those with really great gameplay wouldn't, really. There's nothing wrong with modifying the gameplay somewhat, to make it better. The Monkey Island series was IMHO a very good example of slight improvement on graphics and massive improvement in gameplay. Not to mention Day of the Tentacle (in comparison with Maniac Mansion, that you can play on the computer in-game).

OTOH I have to admit that a graphically improved Dungeon Keeper would be nice. But not Leisure Suit Larry. Just thinking about it, I need mindbleach.

ElReg!comments!Pierre

Re: Standard mistake to make

Well and good, but I'm still waiting for the part where someone explains why the game universe needs to change if you're happy to play offline in single-player mode. What could possibly be the downside of allowing that?

Think about it: you can't really allow re-use of the "local" Commander in online mode, and that adds some complexity.

But in fact what probably happened is that they're late, and while the online version can launch unfinished without anyone noticing (provided they have fixed the missing bits by the time the first player reaches them), it would show in an offline version.

Microsoft exams? Tough, you say? Pffft. 5-YEAR-OLD KID passes MCP test

ElReg!comments!Pierre

Re: Braindump?

Pretty much... with a little friendly "assistance" from his dad. That kind of crap is fairly common in some parts of the world; the only news here is that it happened in Coventry.

There, have a nice rant about it:

http://attrition.org/security/rant/indian_whiz_kids.html

Poll trolls' GCHQ script sock puppets manipulate muppets

ElReg!comments!Pierre

Re: Iran.

I've not seen anything resembling that on stories about the UK, so either the GCHQ is extremely subtle, or they've got better things to do than propagandize on Reddit & Yahoo.

Nah, they just don't have anyone who can put a bash script together so they bought a commercial tool to do it. It's built by Microsoft on top of an Oracle db, so it can only post a vote or a comment every 49 minutes (and sometimes the vote is in the wrong direction).