Banym's Bloghttps://www.banym.de/2024-01-02T10:04:00+01:00Free Human Being, FreeBSD, Linux and Mac nerdRemote Access SSH, Mosh, ZSH, TMUX2024-01-02T10:04:00+01:002024-01-02T10:04:00+01:00Dominik Zajactag:www.banym.de,2024-01-02:/remote-access-ssh-mosh-zsh-tmux.html<p>Having secure remote access that's still convenient is key when you're travelling.
My setup is very old, but still works perfectly. The remote access I need is mostly terminal access,
as I have a lot of tools on terminal to access my important data remotely.</p>
<div class="section" id="ssh-and-mosh">
<h2>SSH and MOSH</h2>
<p>I use …</p></div><p>Having secure remote access that's still convenient is key when you're travelling.
My setup is very old, but still works perfectly. The remote access I need is mostly terminal access,
as I have a lot of tools on terminal to access my important data remotely.</p>
<div class="section" id="ssh-and-mosh">
<h2>SSH and MOSH</h2>
<p>I use ssh directly, which works fine if you have a stable connection.
Since I live in Germany, the mobile connections are not fully converage, even if you are travelling by train or motorway you will have connection problems from time to time. SSH then loses the connection and you have to reconnect. If you are running screen or tmux on the machine you are connecting to, this will only require a reconnect and you will be able to continue to work, but it is still annoying and can be improved. This is why you can use <a class="reference external" href="https://mosh.org/">mosh</a> for this scenario. Mosh is a udp-based way to connect to your server and have your session automatically reconnect as soon as it comes back. No need to manually reconnect, even if you put your laptop to sleep and reconnect hours later you will be reconnected directly to your running session.</p>
<p>You should know that most default ssh configurations are designed with compatibility in mind. This means that you should improve the configuration for security in order to run it in production. Check the
<a class="reference external" href="https://www.sshaudit.com">sshaudit.com website</a> for some help and information on how to improve the sshd configuration for security.</p>
<p>Following the configuration guidelines published on sshaudit.com will help to speed up the changes.
Here are the main improvements you should consider:</p>
<ol class="arabic simple">
<li>Use ssh-key for authentication and turn off password authentication</li>
</ol>
<div class="highlight"><pre><span></span>PasswordAuthentication no
PermitEmptyPasswords no
KbdInteractiveAuthentication no
</pre></div>
<ol class="arabic simple" start="2">
<li>Disable all weak encryption algorithm, only allow modern. This just is an example:</li>
</ol>
<div class="highlight"><pre><span></span>Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com
</pre></div>
<ol class="arabic simple" start="3">
<li>Disable weak host keys</li>
</ol>
<div class="highlight"><pre><span></span>HostKeyAlgorithms sk-ssh-ed25519-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,ssh-ed25519,rsa-sha2-512,rsa-sha2-256
RequiredRSASize 3072
</pre></div>
<ol class="arabic simple" start="4">
<li>Disable root login</li>
</ol>
<div class="highlight"><pre><span></span>PermitRootLogin no
</pre></div>
<ol class="arabic simple" start="5">
<li>Only allow defined users to connect</li>
</ol>
<div class="highlight"><pre><span></span>AllowUsers <username>
</pre></div>
<ol class="arabic" start="6">
<li><p class="first">Setup <a class="reference external" href="https://en.wikipedia.org/wiki/Fail2ban">fail2ban</a> to block bruteforce to the ssh port.</p>
<p>In my case I use fail2ban in combination with the iptables or firewalld backend. This blocks the access to the attacked port using a firewall rule after too many login attempts.</p>
</li>
</ol>
</div>
<div class="section" id="tmux">
<h2>tmux</h2>
<p>Another part of this environment is <a class="reference external" href="https://github.com/tmux/tmux">tmux</a>, a terminal multiplexer-like screen. I switched from screen to tmux a few years ago, and it is still my preferred terminal multiplexer. It allows you to use multiple terminals within a session. You can split them up and arrange them. You can suspend them and resume the session with your multiple tools still running. Think of it as a window manager for a graphical environment. If you're not familiar with it, you should check it out.</p>
</div>
<div class="section" id="zsh">
<h2>ZSH</h2>
<p><a class="reference external" href="https://www.zsh.org/">ZSH</a> is the shell I use for all of this. It is fun to use, and you can use some well-designed themes that display important information, such as git information of the current directory, and a nice prompt that looks the way you want it.
The auto-completion, even for command options, is a real productivity boost. It makes working in the terminal fun. For easy setup, you can use <a class="reference external" href="https://ohmyz.sh/">oh-my-zsh</a> to improve your zsh very quickly. Note that this script pulls plugins and themes into your environment. It is a nice way to test manage your zsh, but for security reasons you may not want to pull code into your systems using the autoupdate functionality.</p>
</div>
Interesting project for space nerds2023-12-31T09:04:00+01:002023-12-31T09:04:00+01:00Dominik Zajactag:www.banym.de,2023-12-31:/interesting-project-for-space-nerds.html<p>At this year's 37c3, a <a class="reference external" href="https://media.ccc.de/v/37c3-12327-how_to_hack_your_way_to_space">talk</a> by two members of the <a class="reference external" href="https://libre.space/">Libre Space Foundation (LSF)</a> caught my attention.
The story of how they prepared their own open-design satellites and launched them into space was fun to hear.
They developed a lot of tools to make the development possible. They used …</p><p>At this year's 37c3, a <a class="reference external" href="https://media.ccc.de/v/37c3-12327-how_to_hack_your_way_to_space">talk</a> by two members of the <a class="reference external" href="https://libre.space/">Libre Space Foundation (LSF)</a> caught my attention.
The story of how they prepared their own open-design satellites and launched them into space was fun to hear.
They developed a lot of tools to make the development possible. They used OSS software and hardware for the process
and published all their work.</p>
<p>As I am also into space stuff, I will definitely have a look at their work.</p>
<p>Perhaps you would like to operate your own observing antenna? The <a class="reference external" href="https://network.satnogs.org/">satnogs</a> project operates a network of many ground stations as a network. You can be part of the project with your ground station. The <a class="reference external" href="https://wiki.satnogs.org/Build">wiki</a> has all the documentation you need to build and operate your station.</p>
<p>Check out their website! If you like the project, spread the word and help out if you can.
Space development, space hacking is a fun thing to do and we need young people in this field.</p>
FreeBSD 14 - take the power back2023-12-23T23:07:00+01:002023-12-23T23:07:00+01:00Dominik Zajactag:www.banym.de,2023-12-23:/FreeBSD-14-take-the-power-back.html<p>FreeBSD 14 was released a few weeks ago.
One of my home servers has been running FreeBSD for many years. The system has been upgraded from version to version and works like a charm. Some jails are used to separate services provided by the box and ZFS as a file …</p><p>FreeBSD 14 was released a few weeks ago.
One of my home servers has been running FreeBSD for many years. The system has been upgraded from version to version and works like a charm. Some jails are used to separate services provided by the box and ZFS as a file system is a thing. After upgrading the host system and the jails, I didn't have to do much more than install the pkg. I switched from the ports system to the prebuild pkg a few years ago and they work like a charm.</p>
<p>A very good improvement is the work <a class="reference external" href="https://wiki.freebsd.org/BootTime">coordinated by Colin</a> on reducing boot time. The FreeBSD kernel had some locks from the good old days. Too much compatibility with very old hardware and some unnecessary stuff seemed to be holding FreeBSD back from booting faster. The changes are very welcome. My system will not boot unless it has received some security patches, and then it will boot. Not having to spend time waiting for a server or more importantly a VM to boot is nice.</p>
<p>Another thing to note is the overall performance boost that the FreeBSD 14.0 release has brought. Check out the performance measurements from <a class="reference external" href="https://www.phoronix.com/review/freebsd-14-epyc">phoronix</a> to compare how much faster the system has become.</p>
<p>This is very important. FreeBSD should work on performance and security features from release to release, improving networking and execution performance. This can be a real game changer, making it the system of choice for many projects and vendors. Of course, hardware will improve and become faster, but efficiency and getting the most out of current hardware can make your operating system very popular.</p>
<p>From time to time, the FreeBSD Foundation runs a survey on what the developers should focus on.
Being a FreeBSD fanboy, I always take part, and my focus is on performance and security. I use FreeBSD as the basis for firewalls and network appliances. Getting the most out of the hardware ensures that my customers get the most out of their investment.
We install 40GbE up to 100GbE servers at customer sites. We want to get the best performance out of the CPUs, NICs and SSDs. It is a real selling point for FreeBSD that you can count on performance improvements from release to release. The FreeBSD project should try to make the kernel work best with all the new CPU features, and support the fastest NICs to keep leading in network performance.</p>
<p>FreeBSD has some great features, such as full ZFS integration and the combination of userland and kernel. This is something the project should focus on, using it as an advantage to provide faster and better integrated tools.</p>
<p>Here in Europe, power consumption and efficiency is a real game changer in the next few years. We need to improve all our data centres to be as efficient as possible. Using the best software and optimised equipment will be one of the keys to building this world of highly efficient data centres.</p>
SMTP Smuggling2023-12-23T10:04:00+01:002023-12-23T10:04:00+01:00Dominik Zajactag:www.banym.de,2023-12-23:/smtp-smuggling.html<p>On 2023-12-18, the <a class="reference external" href="https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/">SEC Consult team published a security issue</a> affecting many <a class="reference external" href="https://de.wikipedia.org/wiki/Simple_Mail_Transfer_Protocol">SMTP</a> implementations.
The problem results in some attack vectors bypassing important antispam/antispoofing mechanisms. This can cause major problems as mails can be injected into the mail flow that appear to come from a valid trusted source.</p>
<p>It …</p><p>On 2023-12-18, the <a class="reference external" href="https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/">SEC Consult team published a security issue</a> affecting many <a class="reference external" href="https://de.wikipedia.org/wiki/Simple_Mail_Transfer_Protocol">SMTP</a> implementations.
The problem results in some attack vectors bypassing important antispam/antispoofing mechanisms. This can cause major problems as mails can be injected into the mail flow that appear to come from a valid trusted source.</p>
<p>It seems that the process of informing software vendors affected by this problem needs to be optimised by SEC Consult.
The <a class="reference external" href="https://www.postfix.org/smtp-smuggling.html">Postfix team have released some information</a> to inform their userbase and it seems that they are quite upset about the short time before the information about the problem was released.</p>
<p>Even more interesting is that it seems that SEC Consult had already informed other vendors like Microsoft or Cisco in the middle of the year when they first discovered the SMTP smuggling problem.</p>
<p>A lot of people analysed their posts and information, and it looks like they were aware that more implementations were affected by the problem. If they really had this knowledge, why did they not inform the developers or projects like Postfix?</p>
<p>With a talk scheduled at CCC Congress 37C3, I look forward to getting some answers as to why this communication seemed so fucked up.</p>
<p>The IT security world still has some big problems with making responsible disclosure work, if this was done intentionally or they made the problem public before informing the world's most popular mail transfer agent they may not have done their homework on being responsible. But let us see what they have to say and be excellent to each other!</p>
<p>The post from the Postfix team points directly to a problem we still have in OSS, the people behind such projects, even if they are fill time employees, are not always available. Software is still written by humans, and security problems in widely used and complex software are hard to understand and sometimes hard to fix. The team needs time to create, test and deploy a stable, working fix. Distributors, vendors and administrators need time to integrate fixed versions into their systems. This takes time, which is why most people agree to responsible disclosure.</p>
<p>You should check your MTA systems and apply the necessary workarounds or fixes to your system as soon as possible.</p>
<p><a class="reference external" href="https://github.com/hannob/smtpsmug">Here</a> is a short Python script by hannob that may help to identify affected MTA implementations.</p>
<p>The German Federal Office for Information Security (BSI) has also issued an advisory. You can find the pdf <a class="reference external" href="https://www.bsi.bund.de/SharedDocs/Cybersicherheitswarnungen/DE/2023/2023-292569-1032.pdf?__blob=publicationFile&v=3">here.</a></p>
<p>I will try to keep this post updated with a list of testing tools or upcoming information.</p>
<div class="section" id="update-2023-12-31">
<h2>Update - 2023-12-31</h2>
<p>Now the talk was presented at the 37c3 congress in Berlin and a recording is available <a class="reference external" href="https://media.ccc.de/v/37c3-11782-smtp_smuggling_spoofing_e-mails_worldwide">here.</a></p>
<p>Timo Longin presented his work, how he found the problem and tracked it down. More importantly, he explained how the confusion around the notification of OSS projects and vendors happened. To me it looks like he and the team had good intentions to bring all the information to a central point, in this case a CERT, to inform vendors/projects and discuss the problem.
Perhaps they should have tried to raise more awareness of the problem through direct communication channels? I don't know.
From my own experience, it is very stressful to convince people of problems you have found.</p>
<p>The fact that the group of projects was chosen without the Postfix people is something I can't understand. Postfix is still one of the most widely used MTAs and the CERT should have known that.</p>
<p>The part of the talk where Timo talked about the communication part gave me the impression that he is aware of fixing this for the future, and that is the most important part for me. So please be nice to each other and don't attack the messenger of a problem. Try to hear both sides, but be aware that it is not a good idea to personally attack someone online for their work.</p>
</div>
Bad luck with a buggy Linux kernel2023-12-23T09:04:00+01:002023-12-23T09:04:00+01:00Dominik Zajactag:www.banym.de,2023-12-23:/bad-luck-with-a-buggy-linux-kernel.html<p>When I installed Debian on a Thinkpad two weeks ago, I was out of luck.
As you may have heard, the stable Linux kernel maintenance team imported a change from the upstream which caused a major problem on systems with ext4 filesystems. Ext4 is the default for Debian installs, and …</p><p>When I installed Debian on a Thinkpad two weeks ago, I was out of luck.
As you may have heard, the stable Linux kernel maintenance team imported a change from the upstream which caused a major problem on systems with ext4 filesystems. Ext4 is the default for Debian installs, and many other distributions rely on this stable file system. When the problem was discovered, the Debian team blocked the package very quickly.
Unfortunately, my new setup on a Thinkpad already had the affected kernel version installed.</p>
<p>Normally this would not have affected me, as I have been using XFS on most of my machines for years.
Again, I just used the Debian installer defaults, because I am getting lazy and had bad luck with them.</p>
<p>But why did I reinstall the Thinkpad at all? To cut a long story short, the first installation was a test run of Debian on the Thinkpad and I did not encrypt the root partition. All my mobile systems have encrypted harddisks, and as I plan to use this machine as a
as a travelling and conferencing system, it needed an encrypted disk setup as well.</p>
<p>For me, only one machine was affected by this broken kernel version, and all the other servers do not install updates or reboot themselves to apply a new kernel version for this reason. It is very rare for a bug like this to occur, but it happens often enough that I want to have control over my update procedures. If I had installed this kernel on all my machines, I would have had a real problem, as most of the virtual machines I run use ext4. It would have meant checking all the machines for data corruption or restoring them from backup, to make sure the data was not corrupted. Not a scenario I want to be in.</p>
<p>By the way, I have to admit that the Debian installer is very mature these days. Even setting it up with an encrypted disc and changing the type of file system was straightforward. Now the Thinkpad has an encrypted hard drive, runs the latest Debian and uses XFS as the root filesystem.
Everything works fine and this notebook will be my travelling companion and conference tool.</p>
My last CentOS machines are retired2023-12-22T23:29:00+01:002023-12-22T23:29:00+01:00Dominik Zajactag:www.banym.de,2023-12-22:/my-last-centos-machines-are-retired.html<p>Over the past few years I have used a number of different Linux distributions in addition to FreeBSD and MacOS. My daily work is also often done on Microsoft Windows machines. I am not a fan of the best operating system battle. In my opinion, the best system is the …</p><p>Over the past few years I have used a number of different Linux distributions in addition to FreeBSD and MacOS. My daily work is also often done on Microsoft Windows machines. I am not a fan of the best operating system battle. In my opinion, the best system is the one that gets the job done and runs for years, with bugs fixed and security maintained.</p>
<p>The Linux world tends to argue about the right way to do things more than the BSD world. But because it is more widely used, I have tended to use Linux for many things for years.</p>
<p>First I started using SuSE, then I used Gentoo as my main distro for a long time, and then I chose CentOS as my main distro. I used CentOS 5.x for many deployments and it was a nice distro. Even when RedHat cut CentOS 8 from the latest patches, I migrated many machines to Rocky Linux for the time beeing. However, since I don't want to be forced to change distros again, I now choose Debian as my main distro for Linux-driven stuff. I have always used Debian from time to time for deployments and on a laptop, but now it is the main Linux distro and it works very well for me and my setups.</p>
<p>The migration of the home systems is now complete. The last system was my web server and this was done a few days ago and worked very well. The setup on my private web server is not too complicated as it only hosts this static blog with no dynamic language support. Fire up the web server of your choice and have fun pointing it to the right directory, responding to the right domains and setting up let's encrypt for the TLS setup. I'm not going to write a blog post about this in 2023, just use a search engine and have fun.</p>
<p>One good thing about the consolidation forced by systemd integration in many Linux distributions is the more straightforward way of doing things. I hope Debian keeps up the good work of responding quickly to security problems and delivering a good operating system. Even at work we have recently migrated a number of machines to Debian. We cannot replace it in all places. But anything that does not require a RHEL or SLES system, we choose Debian these days.</p>
<p>If you like your distribution or any other open source software, consider sending them some bucks to keep their infrastructure and the project going.</p>
Nala an useful frontend for apt2023-12-13T22:04:00+01:002023-12-13T22:04:00+01:00Dominik Zajactag:www.banym.de,2023-12-13:/nala-an-usefull-frontend-for-apt.html<div class="section" id="nala-a-useful-frontend-for-apt">
<h2>Nala a useful frontend for apt</h2>
<p>If you like the cli like I do, you might also like modern tools with some eye candy.
Nala is a nice frontend for dpkg and a replacement for apt. It has some useful
features for your daily work.</p>
<p>The history for nala can …</p></div><div class="section" id="nala-a-useful-frontend-for-apt">
<h2>Nala a useful frontend for apt</h2>
<p>If you like the cli like I do, you might also like modern tools with some eye candy.
Nala is a nice frontend for dpkg and a replacement for apt. It has some useful
features for your daily work.</p>
<p>The history for nala can help to undo the installation of packages and all their dependencies.
This makes it a good replacement for apt. Since it is based on dpkg like apt, you can use both in parallel.</p>
<p>To install nala on Debian bookworm you can use</p>
<pre class="literal-block">
sudo apt install nala
</pre>
<p>Now you should be ready to go</p>
<p>The nala command has very similar options to the apt command.
Let us focus on some outstanding features that make nala an improvement over apt.</p>
<p>Use nala fetch to test the fastest mirror for you. This is similar to netselect. Remember that using close mirrors helps you and the project.</p>
<p>The history with nala history makes it possible to review recent actions and even undo some jobs you have done with nala.</p>
<p>For all zsh users, there is a completion to make the console a nicer place ;)</p>
<p>All in all, this is how CLI tools can be improved by a successor. Use the good features, be interoperable, and make it easy to switch.</p>
</div>
Build your own GNNS monitoring system2022-07-04T22:04:00+02:002022-07-04T22:04:00+02:00Dominik Zajactag:www.banym.de,2022-07-04:/gnss-monitoring-using-minicomputer.html<div class="section" id="how-to-build-your-own-gnns-monitoring-system">
<h2>How to build your own GNNS monitoring system</h2>
<p>Some time ago, I stumbled over the <a class="reference external" href="https://galmon.eu/">Galmon project</a> by <a class="reference external" href="https://berthub.eu/">Bert Hubert</a>. Since I am into everything
with space technology, this caught my attention.
Bert initiated a project where you can host your own mini observing station and collect status
information from …</p></div><div class="section" id="how-to-build-your-own-gnns-monitoring-system">
<h2>How to build your own GNNS monitoring system</h2>
<p>Some time ago, I stumbled over the <a class="reference external" href="https://galmon.eu/">Galmon project</a> by <a class="reference external" href="https://berthub.eu/">Bert Hubert</a>. Since I am into everything
with space technology, this caught my attention.
Bert initiated a project where you can host your own mini observing station and collect status
information from the most navigation systems like Galileo (EU), GPS (US), Glonass (RU) and BeiDou (CN). The
support how good each of the systems can be observed depends on the public available information. There are
well-documented ones like GPS and Galileo and others have not so good support.</p>
<p>He wrote a very <a class="reference external" href="https://berthub.eu/articles/posts/galmon-project/">detailed blog post</a> how the Galileo positioning system works. It makes fun to read and you learn how this systems work. </p>
<p>The modern world depends on precise navigation signals. This signals are sent by satellite constellations flying over our heads. It needs big efforts to setup and run this constellations and deliver a good quality service.</p>
<p>My intention was to learn more about the GPS and Galileo system and not only use it in a smartphone but make it run with a basic antenna and get some signals into a computer.</p>
</div>
<div class="section" id="hardware-requirements">
<h2>Hardware requirements</h2>
<p>To build your own monitoring station you need a computer running one of the supported operation systems and a supported GNSS antenna.
Of course you can connect the antenna to your laptop and install Galmon there, but it is much more fun to build a setup you can install somewhere or take with you that is not the computer you work on. For my setup I chose a mini computer I had laying around. You can use a <a class="reference external" href="https://www.banana-pi.org/">BananaPi</a> or <a class="reference external" href="https://www.raspberrypi.org/">Raspberry PI</a> or any other supported mini computer you are familiar with.</p>
<div class="section" id="mini-computer">
<h3>Mini Computer</h3>
<p>Of course you can connect the antenna to your laptop and install Galmon there, but it is much more fun to build a setup you can install somewhere or take with you that is not the computer you work on. For my setup I chose a mini computer I had laying around (<a class="reference external" href="https://www.hardkernel.com/shop/odroid-c4/">ODROID-C4</a>). You can use a BananaPi, Raspberry PI, Odroid or any other supported mini computer you are familiar with.</p>
<div class="section" id="system-setup">
<h4>System setup</h4>
<p>You should be able to use any modern Linux distribution to run the project. Since there is a docker container available, you maybe should test your first installation using the ready to go solution. This makes life much easier and is working perfectly for me.</p>
<p>Install for example Debian or <a class="reference external" href="https://www.armbian.com/">Armbian</a> on your mini computer and <a class="reference external" href="https://docker.io">Docker</a> or even better <a class="reference external" href="https://podman.io/">Podman</a> to run the container.</p>
</div>
</div>
<div class="section" id="gnns-antenna">
<h3>GNNS Antenna</h3>
<p>To receive a signal you should invest in one of the more reliable supported antennas with good signal range and a long attached cord. This makes life much easier if you plan to install the setup somewhere to monitor the data over a bigger time period.</p>
<p>I did go with the <a class="reference external" href="https://www.navilock.com/produkt/62524/merkmale.html">Navilock NL-8012U</a> antenna. On my I had to update the firmware with a windows tool to make it work correctly.
You can have a look on the <a class="reference external" href="https://github.com/berthubert/galmon">Github repository</a> of the project, there is a list of good working antennas. Choose one that has good Linux support. Mine has perfect support and no additional driver is needed on Linux.</p>
</div>
</div>
<div class="section" id="software-setup">
<h2>Software setup</h2>
<p>If your hardware and antenna is working you can setup the Galmon stack. Since there is a docker container available it can be done with using this command</p>
<p>Install podman:</p>
<blockquote>
sudo apt install podman</blockquote>
<dl class="docutils">
<dt>You need to add the following line to the /etc/containers/registries.conf.d/docker.conf configuration file:</dt>
<dd>unqualified-search-registries=["docker.io"]</dd>
</dl>
<p>Install the container:</p>
<blockquote>
sudo podman run -it --rm --device=/dev/ttyACM0 -p 10000:10000 berthubert/galmon</blockquote>
<p>This opens an interactive shell within the container. Within the container you now need to run:</p>
<blockquote>
./ubxtool --wait --port /dev/ttyACM0 --station 1 --stdout --galileo | ./navparse --bind 0.0.0.0:10000 --html /galmon/share/package/galmon/html</blockquote>
<img alt="Terminal showing the podman command running the podman container and its output." src="images/galmon-01.png" />
<p>You find the well documented ways how to run the software stack on the GitHub project page.</p>
<p>Thats it. If you see some similar output the system is processing the data received by the seen satellites.</p>
<p>Now use a web browser to access the IP of your system on port 10000:</p>
<img alt="Screenshot of the galmon website output." src="images/galmon-02.png" />
<p>It will take some time to collect data and recieve some signals. Be patient :-)</p>
</div>
<div class="section" id="run-it">
<h2>Run it</h2>
<p>Place the antenna so it has a good view to the sky for fast and good working signals. From time to time I forgot to place the antenna in a good spot while testing and viewing the signals. You should find a good spot and setup the hardware for best results. Place the antenna in the open and with nothing blocking the view to the sky.</p>
</div>
Make ESI MAYA 22 USB work on Fedora 322020-08-28T21:35:00+02:002020-08-28T21:35:00+02:00Dominik Zajactag:www.banym.de,2020-08-28:/maya-22-usb-on-fedora-linux.html<p>The <a class="reference external" href="https://www.esi-audio.de/produkte/maya22usb/">MAYA 22 USB</a> is an audio interface you can easily connect over USB to your computer.</p>
<p>I like it for its small form factor and good build quality.</p>
<p>It works great with MAC, FreeBSD, Linux and Windows.</p>
<p>When I connected it to my Fedora 32 notebook the device was …</p><p>The <a class="reference external" href="https://www.esi-audio.de/produkte/maya22usb/">MAYA 22 USB</a> is an audio interface you can easily connect over USB to your computer.</p>
<p>I like it for its small form factor and good build quality.</p>
<p>It works great with MAC, FreeBSD, Linux and Windows.</p>
<p>When I connected it to my Fedora 32 notebook the device was not recognized and available by default. After I installed the additional alsa usb stuff it appeared but did not play any sound.</p>
<p>The problem is, that it can be controlled over USB and needs to be initialized with the default values or custom settings. To do so, there is a software project on <a class="reference external" href="https://github.com/rabits/esi-maya22-linux.git">GitHub</a> with a control tool you need to build. The tool then needs to be triggered when the device is connected and then configures the correct default values for the interface.</p>
<p>Here the short version of what you need to install, build and configure to make the MAYA 22 USB interface work for you on Linux:</p>
<blockquote>
<p>sudo dnf groupinstall "Development Tools"</p>
<p>sudo dnf install hidapi-devel alsa-plugins-usbstream</p>
<p>git clone <a class="reference external" href="https://github.com/rabits/esi-maya22-linux.git">https://github.com/rabits/esi-maya22-linux.git</a></p>
<p>cd esi-maya22-linux</p>
<p>./build.sh</p>
<p>sudo cp maya22-control /usr/local/bin</p>
<p>sudo vim /etc/udev/rules.d/50-esi-maya22.rules</p>
</blockquote>
<p>add the following line to that file and save it:</p>
<blockquote>
KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="2573", ATTRS{idProduct}=="0017", GROUP="plugdev", MODE="0660", RUN+="/usr/local/bin/maya22-control -d"</blockquote>
<p>This will call the maya22-control tool each time the USB interface is connected and recognized.</p>
<p>If you need a graphical UI to control the MAYA interface on Linux you should check out this project: <a class="reference external" href="https://www.esi-audio.de/produkte/maya22usb/">https://www.esi-audio.de/produkte/maya22usb/</a>
Since I didn't tested it, yet, you have to see if it works yourself.</p>
Fedora 32 on a Lenovo T14 AMD Ryzen model2020-08-28T19:35:00+02:002020-08-28T19:35:00+02:00Dominik Zajactag:www.banym.de,2020-08-28:/fedora-32-on-lenovo-t14.html<p>The T14 with AMD processor arrived and it is time for a short write up.</p>
<div class="section" id="specs">
<h2>Specs</h2>
<p>The machine I work with is powered by an AMD Ryzen 7 PRO 4750U with Radeon Graphics.
It comes with 8 Cores and 16 threads from 1.7 GHz - 4.1 GHz.
Aside to …</p></div><p>The T14 with AMD processor arrived and it is time for a short write up.</p>
<div class="section" id="specs">
<h2>Specs</h2>
<p>The machine I work with is powered by an AMD Ryzen 7 PRO 4750U with Radeon Graphics.
It comes with 8 Cores and 16 threads from 1.7 GHz - 4.1 GHz.
Aside to that processor there come 16GB of RAM and 512GB NVMe SSD storage.
This makes that little laptop a decent machine.</p>
</div>
<div class="section" id="what-do-i-expect-to-work">
<h2>What do I expect to work?</h2>
<p>As I am using my laptops and environments on a daily bases I have some requirements that are important to me:</p>
<ol class="arabic simple">
<li>Suspend and resume</li>
<li>Docking station support</li>
<li>Good performance</li>
<li>Long battery life</li>
</ol>
</div>
<div class="section" id="why-fedora-linux">
<h2>Why Fedora Linux?</h2>
<p>It comes with a recent kernel that has support for the Ryzen 4000 series and I have used it in the past as my main system on other T-Series laptops. Since I do have some work to do on podman based deployments and Openshift integrated environments, this will be the daily driver for that work. Beside Fedora, FreeBSD would have been my second choice. We do some FreeBSD based development, but that work-flow is now realized on a virtual server environment and does not need to have a FreeBSD based workstation.</p>
</div>
<div class="section" id="setup-fedora-32">
<h2>Setup Fedora 32</h2>
<p>After playing around with latest Fedora on a Live-USB, I installed Fedora Linux with KDE spin. KDE fits my requirements better that Gnome and it gives me more options to customize it to the work-flow I use on all machines.</p>
<div class="section" id="before-you-install-linux">
<h3>Before you install Linux!</h3>
<p>After installing I spend quite some time to fix a problem with suspend and resume. Long story short, if you plan to install Linux the Lenovo T14, go into the BIOS/UEFI settings and change the ACPI mode to Linux.
This will make suspend and resume work if you have chosen a recent kernel.</p>
</div>
<div class="section" id="basic-installation">
<h3>Basic Installation</h3>
<p>I choose to use a USB-Stick with the KDE spin and installed it using mostly the default. The only changes I made:</p>
<ol class="arabic simple">
<li>Use xfs as file systems</li>
<li>Enable encryption for all possible partitions</li>
</ol>
<p>Everything worked as designed. Kudos to the Fedora team, you guys do a great job with that installer.</p>
<p>After the base installation I updated all installed packages and installed the tools I need to work with</p>
<blockquote>
sudo dnf update -y && reboot</blockquote>
<p>Then I enabled the the non-free repositories to have better codec support for non-free audio and video codec, since Fedora does not ship them included in the distribution.</p>
<blockquote>
<p>sudo dnf install <a class="reference external" href="https://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm">https://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm</a> -E %fedora).noarch.rpm</p>
<p>sudo dnf install <a class="reference external" href="https://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-$(rpm">https://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-$(rpm</a> -E %fedora).noarch.rpm</p>
<p>sudo dnf install gstreamer1-plugins-{bad-*,good-*,base} gstreamer1-plugin-openh264 gstreamer1-libav --exclude=gstreamer1-plugins-bad-free-devel</p>
<dl class="docutils">
<dt>sudo dnf install </dt>
<dd><a class="reference external" href="https://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-$(rpm">https://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-$(rpm</a> -E %fedora).noarch.rpm</dd>
</dl>
<p>sudo dnf group upgrade --with-optional Multimedia</p>
</blockquote>
<p>Installed the Mirosoft rpm repository to pull Visual Studio Code later:</p>
<blockquote>
sudo rpm --import <a class="reference external" href="https://packages.microsoft.com/keys/microsoft.asc">https://packages.microsoft.com/keys/microsoft.asc</a>
sudo sh -c 'echo -e "[code]nname=Visual Studio Codenbaseurl=https://packages.microsoft.com/yumrepos/vscodenenabled=1ngpgcheck=1ngpgkey=https://packages.microsoft.com/keys/microsoft.asc" > /etc/yum.repos.d/vscode.repo'</blockquote>
<p>Here the list of basic tools I use on all desktop machines</p>
<ol class="arabic simple">
<li>tmux</li>
<li>vim</li>
<li>htop</li>
<li>git</li>
<li>keepassxc</li>
<li>zsh</li>
<li>mosh</li>
<li>vlc</li>
<li>kate</li>
<li>evolution with evoltion-ews for Exchange support</li>
<li>code (Visual Studio Code)</li>
</ol>
<blockquote>
<p>sudo dnf install tmux vim htop git keepassxc zsh mosh vlc kate evolution evolution-ews code</p>
<p>With that additional packages installed I configure my personal work-flow.</p>
</blockquote>
</div>
</div>
<div class="section" id="conclusion">
<h2>Conclusion</h2>
<p>All my requirements do work with the T14.
Suspend and resume works.
The docking works.(I use the USB-C Pro Dock, at home and at work)
Hardware performance is very good.</p>
<p>Fedora 32 makes a great job on that machine. As rumors become more concrete, Fedora and Lenovo even plan to ship some models with Fedora preinstalled. We will see if the T14 with AMD will be one of those models.</p>
</div>
How I did start using FreeBSD2018-12-27T22:59:00+01:002018-12-27T22:59:00+01:00Dominik Zajactag:www.banym.de,2018-12-27:/how-i-did-start-using-freebsd.html<div class="section" id="my-start-with-freebsd-on-a-dec-alpha">
<h2>My start with FreeBSD on a DEC Alpha</h2>
<p>When I was sorting out some old photos, I came over one showing my old Alpha 800. I found it at my father’s company when I was still in school.
They didn't use it anymore back in that days and I …</p></div><div class="section" id="my-start-with-freebsd-on-a-dec-alpha">
<h2>My start with FreeBSD on a DEC Alpha</h2>
<p>When I was sorting out some old photos, I came over one showing my old Alpha 800. I found it at my father’s company when I was still in school.
They didn't use it anymore back in that days and I was running a quite uncommon amount of hardware for testing and educational purposes at home. I had a bunch of Cisco and Juniper routers for routing setups and some x86 machines from 386, 486, Pentium2 and an Athlon 1200, later some Athlon64 and Opteron Machines joined the setup. I was still in school and hacked on hardware and networks in my free time and at night. You could imagine how much the electricity bill dropped when I moved out.</p>
<p><img alt="FreeBSD Alpha 01" src="images/freebsd-on-alpha-01.png" /></p>
<p>First I grabbed the Alpha and cleaned it. I had the the plan to install Linux on it and play with other architectures than x86. My main Linux distribution was Gentoo Linux. The Alpha was used with an old version of SuSE Linux, but the disks were wiped before I could take it home. Since the Alpha architecture was not very popular anymore, not a lot of vendors offered a port of their distribution or OS to it. Since I didn't want to run old software on it and didn't had the money to buy a new version of SuSE or RedHat back in that days, I discovered that FreeBSD 4.x did support Alpha and installed it on that old machine. I think it was 4.6 or 4.7 I installed, not sure about that anymore. It was around 2002-2003.</p>
<p>The fact that I used Gentoo was helpful to understand how to install software on FreeBSD. The portage system was designed based on the ports idea from FreeBSD and worked quite similar back then.</p>
<p>As far as I remember the installation 15 or 16 years ago was quite challenging. Not the FreeBSD part but the fact that I wasn't used to the Alpha architecture and its system layout. I had to fix some problems with old SCSI drives, replace the SCSI adapter and some memory. That machine came with 256MB EDU ram if I remember correctly. Memory back in that days was a complete mess. Different types, special memory and they actually died from time to time.</p>
<p>Well the setup did not work for long. All I could archive on the Alpha was possible with my other machines and that with less power consumption. After I hadn't used it for a while I gave it away to some guys who collected that kind of machines. I was very interested in virtualization, since all the fancy developments like XEN, KVM and VMware were focused on x86 the other platforms became less and less interesting to me.</p>
<p>Never the less the ALPHA architecture was much ahead of its time. One more example that not always the better or more enhanced technology is adopted.</p>
</div>
<div class="section" id="freebsd-as-a-guest">
<h2>FreeBSD as a Guest</h2>
<p>For me it was the starting point of my work with FreeBSD. The OS worked well, and the port tree made software installation easy and manageable. The documentation was one of the main reasons I choose Gentoo Linux in the Linux world and the handbook of FreeBSD was even better. The only thing holding me back from using it widely on my systems back than was VM based virtualization. I was using Xen and VMware to switch between different types of OS to do some network setups or testing software. This was not possible with FreeBSD as a host back in that days (no stable Xen Dom0 support at that time). On bare metal I used Linux and XEN and later VMware ESX and ESXi.
I discovered Jails and used them since the beginning but the ease of setting up network setups with virtual switches like you can do with VMware Workstat/ESXi or VirtualBox was 100 times faster and just better than what the Jail, XEN and KVM world brought to you at the beginning. If you want to have a reproducible network setup on a local machine it was not a very stable situation in the Linux or OSS virtualization world back, then. A lot of the infrastructure within the network setups changed over the years. Maybe some of you remember the mess with many distributions around NetworkManager or libvirt back in that days. The way you did a setup was often changed because of the fast development and every Linux distribution did it its very own way. So I did run a lot of FreeBSD and Linux VMs on VMware ESX and ESXi at that time.</p>
<p>I used FreeBSD 7 up to 9 in that time to setup VMs for routing in test networks from time to time. One hardware machine was running FreeBSD as a firewall to act as second line of defense within my network. I wanted to have a different OS and kernel than the other Linux machines to add some security. I still try to mix the types of firewalls in my network setups to not rely on one software stack for security.</p>
</div>
<div class="section" id="more-and-more-freebsd">
<h2>More and more FreeBSD</h2>
<p>When ZFS became ported and stable in FreeBSD and I gave it a try, I now had a use case to run FreeBSD on bare metal. I had used a lot of LSI RAID controllers in my IBM Servers, and some of the low-price versions were very slow. After removing them and using the onboard SATA controller to attach the disks I installed FreeBSD to play with ZFS. This X3250 could hold 2 disks and up to 8GB of memory. It was enough to do what I planned with ZFS on that old servers. Since then I am using FreeBSD for some use cases and I am quite happy with it.</p>
<p>I run several big ZFS machines in different configurations. Most of them act as backup targets or SAMBA File-Servers. In total around 300-500 TB are hosted by that servers and up to now everything works stable and fast.</p>
<p>Some years ago I started to use PFsense Firewalls and switched to OPNsense some time ago. I don't know the total number because not all are maintained frequently by me, but the number of deployed devices should be around 70-100 Firewalls I deployed with FreeBSD based software over the years.</p>
</div>
<div class="section" id="what-still-sucks-with-freebsd">
<h2>What still sucks with FreeBSD</h2>
<p>No system or community is perfect. Some points I don't like with FreeBSD.</p>
<ul class="simple">
<li>Security needs more attention. The World is not full of security engineers, systems need to provide only secure defaults to make life easier. ASLR and other commonly used prevention systems are not implemented by default. The argument that some of them can be bypathed very easy nowadays is not good, if you don't join the race you already have lost it. No excuses. If you need ASRL and some more security features, check out HardenedBSD. It is still very close to FreeBSD plus some interessting security patches and some more tools. In my opinion it would be better to import such changes back to FreeBSD faster or come up with a working alternative rather than not have such a security layer.</li>
<li>Performance. Each release should perform better than the last one. The boot time of FreeBSD really needs improvement. On server hardware the time your OS boots may not be as important. But most systems today not boot on hardware and time matters. No excuses.</li>
<li>Slow development. For example, the FreeBSD has things like ZFS but the ZFS on Linux project is improving faster and adds features their own way. Allan Jude and the OpenZFS guys are addressing this at the moment to have one codebase with all features for all the supported platforms again. An other example is the PF firewall. FreeBSD imported an old version of PF from OpenBSD but never could keep up with the development and now maintains an older syntax than OpenBSD has today.</li>
<li>Hardware Support for latest servers and platforms was slow in the past. For Example the UEFI support took quite a while to become stable.</li>
</ul>
</div>
<div class="section" id="what-freebsd-makes-a-very-nice-os">
<h2>What FreeBSD makes a very nice OS</h2>
<ul class="simple">
<li>The community seems to work and is mostly healthy, friendly and growing.</li>
<li>Problems like slow development are addressed as the founding of the FreeBSD Foundation is becoming bigger. FreeBSD 12 got performance tuning and reducing the number of sys-calls done by default. It looks like some big vendors start funding the heavy lifting work to make FreeBSD more modern and keep it stable.</li>
<li>Documentation, documentation and documentation. It's there, it's good and it's updated frequently.</li>
<li>Kernel and user-land come together. It makes life easier to keep up with changes.</li>
<li>ZFS, best filesystem around.</li>
<li>Jails</li>
<li>You can upgrade ;-) I have systems that have been upgraded since 10 years from version to version and it worked.</li>
</ul>
</div>
Back to SubEthaEdit2018-12-27T20:57:00+01:002018-12-27T20:57:00+01:00Dominik Zajactag:www.banym.de,2018-12-27:/back-to-subethaedit.html<p>I was very happy because of the annoucement that SubEthaEdit will have a future! I was using it for a long time, since I bought my first Mac back in 2008 or so. It was a very good editor and did a good job for serveral years on my Mac …</p><p>I was very happy because of the annoucement that SubEthaEdit will have a future! I was using it for a long time, since I bought my first Mac back in 2008 or so. It was a very good editor and did a good job for serveral years on my Mac systems. The last years the program was not maintained very good, but worked until the last releases made it kinda slower on newer Mac OS releases.</p>
<div class="section" id="this-times-seem-to-be-over">
<h2>This times seem to be over</h2>
<p>But good news! The developers aggreed to make the source code open source and one of them will work on the future of the project. That are wonderful news. Not because the program maybe will be free to use now. But the open source code base may allow some extensions and plugins to make it a competitive solution to the other popular editors out there.</p>
<p>If you're looking for a good editor check it out: <a class="reference external" href="https://subethaedit.net">https://subethaedit.net</a></p>
</div>
Atom editor review2018-03-29T20:57:00+02:002018-03-29T20:57:00+02:00Dominik Zajactag:www.banym.de,2018-03-29:/atom-editor-review.html<p>The GitHub Inc. has released the Atom editor (<a class="reference external" href="https://atom.io">https://atom.io</a>) some time ago. It is a nice editor with some basic IDE functionality.
Based on the first experiences it is a stable peace of software with a fast interface. The most basic features you would like to
see in …</p><p>The GitHub Inc. has released the Atom editor (<a class="reference external" href="https://atom.io">https://atom.io</a>) some time ago. It is a nice editor with some basic IDE functionality.
Based on the first experiences it is a stable peace of software with a fast interface. The most basic features you would like to
see in an editor are present. And the editor has an open plugin API.</p>
<div class="section" id="the-project-view">
<h2>The project view</h2>
<p>One feature I was missing in my old preferred editor on MacOS was the project view. I want to browse the directory of the open file. These days
a lot of frameworks generate a directory structure when you initialise the project. It saves a lot of time if you have this structure
available on the screen to switch between different files. It speeds up navigation and keeps your focus on one application.</p>
</div>
<div class="section" id="the-plugin-system">
<h2>The plugin system</h2>
<p>To have additional plugins available for you editor is a key feature. It keeps the main application focused to the main functionality.
It makes no sense for me to have am editor with support for languages I don't use or functionalities I don't use. More code means more bugs.</p>
<p>There are a lot of useful plugins available on <a class="reference external" href="https://atom.io/packages">https://atom.io/packages</a>
Browse them and find the useful bits you need to speed up your workflow as you like it.</p>
</div>
<div class="section" id="cross-platform-support">
<h2>Cross platform support</h2>
<p>As much as I would like to have only one platform to work with, in reality I have to use Linux/BSD/Windows and Mac in my daytime job.
It makes things much easier if an editor is available for the most important platforms I am using. With Mac, Linux and Windows support, Atom
is available for the main platforms where I am using a GUI.</p>
</div>
Set a custom PATH for the fish shell2018-02-10T23:11:00+01:002018-02-10T23:11:00+01:00Dominik Zajactag:www.banym.de,2018-02-10:/set-a-custom-path-for-the-fish-shell.html<p>To use the mac ports system for custom software on MacOS you need to modify your local PATH variable for your used shell.
For bash this is done in the ~/.profile configuration.</p>
<p>To archive the same if you're using the fish shell, you should use set -U fish_user_paths $fish_user_paths /opt …</p><p>To use the mac ports system for custom software on MacOS you need to modify your local PATH variable for your used shell.
For bash this is done in the ~/.profile configuration.</p>
<p>To archive the same if you're using the fish shell, you should use set -U fish_user_paths $fish_user_paths /opt/local/bin/</p>
<p>I added two path extensions by:</p>
<pre class="literal-block">
set -U fish_user_paths $fish_user_paths /opt/local/bin/
set -U fish_user_paths $fish_user_paths /opt/local/sbin/
</pre>
<p>This makes the mac ports commands available if you open a fish shell.</p>
Ansible Tower codebase released opensource by RedHat2017-09-10T09:08:00+02:002017-09-10T09:08:00+02:00Dominik Zajactag:www.banym.de,2017-09-10:/ansible-tower-codebase-released-opensource.html<p>It took two years but now RedHat opensourced the code of <a class="reference external" href="https://www.ansible.com">Ansible</a> Tower. Thats awesome!
The Project is released on GitHub named Ansible <a class="reference external" href="https://github.com/ansible/awx">AWX</a>. Since Ansible itself was open source from beginning.
The graphical user interface Tower was released under a closed source license until now.</p>
<p><a class="reference external" href="https://www.ansible.com">Ansible</a> is a very …</p><p>It took two years but now RedHat opensourced the code of <a class="reference external" href="https://www.ansible.com">Ansible</a> Tower. Thats awesome!
The Project is released on GitHub named Ansible <a class="reference external" href="https://github.com/ansible/awx">AWX</a>. Since Ansible itself was open source from beginning.
The graphical user interface Tower was released under a closed source license until now.</p>
<p><a class="reference external" href="https://www.ansible.com">Ansible</a> is a very simple but powerful automation system. I love it for the fact that it doesn't require an agent to be executed
on the target machine. It only requires Python to be installed on the managed system. The communication is done using plain
SSH and you don't need to configure additional services or open ports for remote management. Works quite well for me for
some years now. It is wonderful to see the GUI now open sourced.</p>
<p>If you have a mixed team and want to manage your systems with central automation, a GUI helps a lot to visualize the system management.
More people with different skills are able to manage you server farm. You can prepare tasks and roles which than can be applied by everyone
in the team, not only the hard core console hackers. If other people see how powerful the automation with Ansible can be, more people dive into it.
Now that Ansible is open source from the console to the GUI, more people can contribute and make it a even better solution.
The way RedHat is doing their businees with open source is clever. They build production ready products out of open sourced code
bases of many projects they support. If you need support and stable maintanance for you Ansible management, consider to invest
ito Ansible from <a class="reference external" href="https://www.redhat.com/en/technologies/management/ansible">RedHat</a>.</p>
Migrating my Blog to Pelican2017-08-28T21:48:00+02:002017-08-28T21:48:00+02:00Dominik Zajactag:www.banym.de,2017-08-28:/migrating-my-blog-to-pelican.html<p>If you visited my Blog in the past, you may have noticed the design changes.
It is not only the design that changed. I replaced the system for generating the Webpage.</p>
<p>Since I am a lacy guy I used Wordpress up to now. It was a better solution than the …</p><p>If you visited my Blog in the past, you may have noticed the design changes.
It is not only the design that changed. I replaced the system for generating the Webpage.</p>
<p>Since I am a lacy guy I used Wordpress up to now. It was a better solution than the software I used before.
Wordpress usability is O.K but it is based on PHP and suffers from exploits from time to time.
The Wordpress team made good progress with autoupdates and they address known problems fast. Never the less
Wordpress is a worthy target. There are so many installations and the systems running Wordpress have usually
good infrastructure. This servers are loved by people who need some bandwidth or some computing power.</p>
<p>So I motivated myself to get this open todo done. The goal was to get rid of any dynamic
programming language on the web server. Of course I could have rewritten all the blog content
in plane HTML by hand, but as mentioned I am very lacy. The other problem, this would have sucked.
Over the years I reviewed multiple projects that could generate static webpages from <a class="reference external" href="http://docutils.sourceforge.net/rst.html">reStructuredText</a>, <a class="reference external" href="https://daringfireball.net/projects/markdown/">Markdown</a> or <a class="reference external" href="http://www.methods.co.nz/asciidoc/">AsciiDoc</a> files. There are a lot of
projects that work with the same pattern. You can write the content in Markdown and then generate
the HTML content on your local machine and upload it to a webspace. The webspace don't needs PHP
or any other language. You use your local machine to generate the HTML content. Since I run a lot of Python
projects already, I searched for a well documented and structured solution based on Python.
<a class="reference external" href="https://blog.getpelican.com">Pelican</a> was the one that looked mature and well documented for me. And this page is the result. The theme I imported is
called Flex and was quite easy to setup. There are a lot of additional plugins you can import and use. For example
to generate a sitemap automatically. One more reason to choose Pelican was the wordpress import functionality.
It is possible to import you content from the Wordpress backup file and generate .rst files from it. This made it much more
easy for me to migrate the old content. Just the links to images needed some manual interaction.</p>
<p>The migration took me about two evenings to fix some old links for images and change some things I could have changed in Wordpress already.</p>
<p>I am very sorry that because of the migration two features are not available, yet. The first is the comment functionality and number two is the search.
Both features where based on dynamic PHP code which is gone for now. I could have integrated an external service like disqus for comments,
but the information would be shared with them and I don't want to force or trick someone to enter information on my side which goes to a
company. Feel free to ping me on Twitter if you want to give feedback or if you have a question. You even can send me an e-mail if you
want to keep it private or you don't want to use Twitter.</p>
<p>Some todos are still open and the site may change in the next weeks. I plan to modify the theme a little bit more and maybe tune some other things.</p>
Django still one of my most loved tools to get things done2016-03-15T23:35:00+01:002016-03-15T23:35:00+01:00Dominik Zajactag:www.banym.de,2016-03-15:/django-still-one-of-my-most-loved-tools-to-get-things-done.html<p>Since I never would call me a developer this is just a short article why
I still love the <a class="reference external" href="https://www.djangoproject.com/">Django</a> framework
for some years now.</p>
<p>Most of my daily work is done on the command line and with automated
tasks since tools like Puppet and later
<a class="reference external" href="https://www.ansible.com/">Ansible</a> got popular. For …</p><p>Since I never would call me a developer this is just a short article why
I still love the <a class="reference external" href="https://www.djangoproject.com/">Django</a> framework
for some years now.</p>
<p>Most of my daily work is done on the command line and with automated
tasks since tools like Puppet and later
<a class="reference external" href="https://www.ansible.com/">Ansible</a> got popular. For my personal
tasks I try to automate as much as I can without hiding to much
knowledge. Some tasks are still not automated or split in different
single tasks in my day time job. I like to know what dependencies are
between tasks so you still know whats going on behind each single task.
In my opinion a complete automation turns administrators into zombies
who have to reverse engineer their own code when things go wrong.
Knowledge about the automation is hard to transfer and hard to have it
in mind if you need it.</p>
<p>The small tools I need for my private projects are mostly written in
Python so I tried Django some years ago and I am still using it from
time to time. I built a very basic project skeleton I reuse for my tasks
and for me it is still a nice tool. It does its job quite well, has an
active community and is easy to learn.</p>
<div class="section" id="reasons-i-love-django">
<h2>Reasons I love Django:</h2>
<div class="section" id="python">
<h3>Python:</h3>
<p>Well I never choose to learn Python actively. There where a lot of tools
written in Python which I found interesting. Since one of my first
languages I used was Perl I found myself in the middle of the Perl vs.
Python war in the early 2000 years and got interested. It was not the
language as more the infrastructure, documentation and the available
libraries that sucked me in the Python world.</p>
</div>
<div class="section" id="packages">
<h3>Packages:</h3>
<p>There is a package for everything. Check the package libraries for
Django or Github for projects implemented with Django and you will find
everything you need. The community is so big and there are a lot of
useful and high quality packages. A lot of these packages are under
active development for years and that is a very big point for me.</p>
</div>
<div class="section" id="get-things-done">
<h3>Get things done:</h3>
<p>Programming is not a passion and my code really sucks. The only reason I
am doing it is to get things done better, faster and easier. Therefor I
choose tools which have the same way of thinking. Frameworks and
libraries should focus on getting things done and help users to get
their things done. Django is one of those tools which helped me to get
my stuff done.</p>
</div>
<div class="section" id="documentation">
<h3>Documentation:</h3>
<p>A project without documentation is not a project you should use. The
Django project does quite a good job on updating their documentation
when a new release is rolled out. The changes and differences are
explained very well and most of the time there is a migration path. Well
it never is fun to update old code and projects but at least the guys
try to give you all information to do so.</p>
</div>
</div>
Review of my first FreeBSD Workshop in Landshut on 15 May 20152015-05-17T12:58:00+02:002015-05-17T12:58:00+02:00Dominik Zajactag:www.banym.de,2015-05-17:/review-first-freebsd-workshop-in-landshut-on-15-may-2015.html<p>Last Friday I held the first FreeBSD workshop in our new
<a class="reference external" href="http://link.work">link.work</a> location in Landshut. It was a lot of
fun for the 12 participant and me.</p>
<p>The first workshop introduced the FreeBSD basics and the installation
procedure. It was a hands on workshop which means that everyone had …</p><p>Last Friday I held the first FreeBSD workshop in our new
<a class="reference external" href="http://link.work">link.work</a> location in Landshut. It was a lot of
fun for the 12 participant and me.</p>
<p>The first workshop introduced the FreeBSD basics and the installation
procedure. It was a hands on workshop which means that everyone had a
device or virtual machine on which he followed the first steps to setup
the FreeBSD operation system. My part was to introduce the options and
and answer questions. Additional to that, I tried to help with decisions
when to use ZFS or when its better to stick with UFS, or do I need a
firewall or what is the difference between RELEASE, STABLE and CURRENT.
The workshop started at 6pm and we ended on 9:30pm, so more than 3 hours
of FreeBSD fun.</p>
<p>To answer some more questions in detail, I will setup more workshops
this year. Some of the people asked to make a single workshop about
Jails and ZFS. This are very interesting features of FreeBSD and nearly
everyone was interested to hear more about them.</p>
<p>This is the current line up, the dates will follow as they are fixed:</p>
<ol class="arabic simple">
<li>First steps with FreeBSD (done - 15. May 2015)</li>
<li>Jails a FreeBSD power feature</li>
<li>ZFS a short introduction</li>
<li>PXE setup environment for multiple FreeBSD machines</li>
<li>Ansible and FreeBSD</li>
<li>Firewalling on FreeBSD, short introduction to PF and IPFW.
Introduction to Opnsense and Pfsense.</li>
<li>Automated role out of a complete company network (dns, dhcp,
fileserver, webserver, firewall) based on FreeBSD within 30 minutes.
(kind a bring it all together)</li>
</ol>
<p>If you know FreeBSD yourself, think about setting up a local event at
your location, too! Landshut is just a smaller city 70km away from
Munich and only with meetup and some mailing lists post 12 people were
interested in my workshop. Start your own and share your knowledge with
others and learn more yourself this way. I am happy to share all my
presentations. I wrote them in English but held them in German to make
it easier to reuse them.</p>
<p>If you want to keep in touch with all the other events we are organized
at the link.work in Landshut, you should join the meetup group
<a class="reference external" href="http://www.meetup.com/LINKWORK/">here</a>. All events are free and
open!</p>
<p><a class="reference external image-reference" href="images/DSC01521.jpg"><img alt="Picture of FreeBSD workshop in Landshut Germany 15. May 2015" src="images/DSC01521.jpg" /></a></p>
FreeBSD event in Landshut - Germany2015-04-13T19:07:00+02:002015-04-13T19:07:00+02:00Dominik Zajactag:www.banym.de,2015-04-13:/installfreebsd-event-in-landshut-germany.html<p>Today I want to announce that I will organize a small <strong>FreeBSD</strong>
workshop on 15 May 2015 in our new link.work location in Landshut near
Munich, Germany. The link.work is a center of IT-companies and software
developers. My company called <a class="reference external" href="http://www.baycix.de">BayCIX</a> is one
of the five founders of …</p><p>Today I want to announce that I will organize a small <strong>FreeBSD</strong>
workshop on 15 May 2015 in our new link.work location in Landshut near
Munich, Germany. The link.work is a center of IT-companies and software
developers. My company called <a class="reference external" href="http://www.baycix.de">BayCIX</a> is one
of the five founders of the <a class="reference external" href="http://link.work">link.work</a>. Beside our
daily business we planed to have tech talks and events from the
beginning. Now that the building is finished and we have the
infrastructure working, we will start with two meetups.</p>
<p>Follow our meetup site to check out the first meetup on 30. April and my
<a class="reference external" href="http://www.freebsd.org">FreeBSD</a> workshop on 15. May:
<a class="reference external" href="http://www.meetup.com/LINKWORK/">http://www.meetup.com/LINKWORK/</a></p>
<p>As the name indicates, it takes place in a series of FreeBSD related
workshops to introduce people to the
<a class="reference external" href="http://www.freebsd.org">FreeBSD</a> system. I will bring some hardware
to show where FreeBSD can run on and explain the basics.</p>
<p>If you're located in Bavaria, feel free to join me and have some fun
with FreeBSD.</p>
Run KeePass with mono on FreeBSD 10.12015-01-16T23:22:00+01:002015-01-16T23:22:00+01:00Dominik Zajactag:www.banym.de,2015-01-16:/run-keepass-with-mono-on-freebsd-10-1.html<p>Using a password safe can make the life much easier. You can store your
passwords encrypted for each service and if you need a new password,
there is a password generator included as well.</p>
<p>To have the same password safe on all Linux/Mac/BSD machines you can use
KeePass …</p><p>Using a password safe can make the life much easier. You can store your
passwords encrypted for each service and if you need a new password,
there is a password generator included as well.</p>
<p>To have the same password safe on all Linux/Mac/BSD machines you can use
KeePass. It is a mono based software. O.k is not sexy but does its job
quite well.</p>
<div class="section" id="install-dependencies-for-keepass-on-freebsd-10-1">
<h2>Install dependencies for KeePass on FreeBSD 10.1</h2>
<pre class="literal-block">
pkg install mono libgdiplus
</pre>
</div>
<div class="section" id="download-keepass">
<h2>Download KeePass</h2>
<p>Download the KeePass <strong>portable</strong> version!</p>
<p><a class="reference external image-reference" href="images/FreeBSD-install-KeePass.png"><img alt="Download KeePass for FreeBSD" src="images/FreeBSD-install-KeePass.png" /></a></p>
<p>Homepage: <a class="reference external" href="http://www.keepass.info/download.html">http://www.keepass.info/download.html</a>#</p>
</div>
<div class="section" id="run-keepass">
<h2>Run KeePass</h2>
<p>After you extracted KeePass to the place you want, run it with mono:</p>
<pre class="literal-block">
mono KeePass.exe
</pre>
<p>or use your file browser to execute the KeePass.exe file with mono. This
works for me with dolphin in KDE.</p>
<p><a class="reference external image-reference" href="images/FreeBSD-install-KeePass-1.png"><img alt="KeePass with mono on FreeBSD 10.1" src="images/FreeBSD-install-KeePass-1.png" /></a></p>
<p>Hope this helps to make your life easier with managing passwords.</p>
<p>One bad thing is that KeeFox seems not to be working on FreeBSD, yet.
KeeFox is a nice integration into your Firefox browser to automatically
fill forms with the stored password for that site. I didn't investigate
maybe you have some time to find an alternative or make it work on
FreeBSD.</p>
</div>
FreeBSD getting into development and make your own release to test changes2015-01-05T23:56:00+01:002015-01-05T23:56:00+01:00Dominik Zajactag:www.banym.de,2015-01-05:/freebsd-getting-into-development-and-make-your-own-release-to-test-changes.html<p>When I installed FreeBSD, I stumbled over a bug with my T420. I now want
to help fix it or to implement a workaround for my T420 to use it with
gpt and ZFS-Root, Therefor I needed to setup a development environment
for FreeBSD on my Thinkpad. To make this …</p><p>When I installed FreeBSD, I stumbled over a bug with my T420. I now want
to help fix it or to implement a workaround for my T420 to use it with
gpt and ZFS-Root, Therefor I needed to setup a development environment
for FreeBSD on my Thinkpad. To make this process easier for others I
will write down all the points that helped me and collect all in this
post. Please see this post as work in progress as I may change or add
some points in future.</p>
<div class="section" id="getting-familiar-with-the-names-and-versioning-of-freebsd">
<h2>Getting familiar with the names and versioning of FreeBSD</h2>
<p>The latest release is 10.1 as I am writing this. The ongoing new
development is always done in the so called HEAD or CURRENT tree. This
is the latest stuff which will lead to the next major version 11.0 some
day. Since FreeBSD uses subversion, all the source code of the base
system is organized within this source code versioning system. I will
explain how to build your CURRENT image from the source code here, this
should enable you to build every other version or self patched version
by your own. Please consider that a CURRENT system is for development or
very experienced people who want to follow the latest changes. You will
not get much help in official places if it comes to problems which are
only connected to CURRENT as some times there are uncompleted features
or bugs introduced. It should not happen put some times it can.</p>
<p>If you want to have a more stable system with some fixes that are back
ported to the latest release version you can use the STABLE branch. I
personally run STABLE on the machines I am working on. STABLE as it name
indicates is quite stable. The patches and new features included are
tested and ported to stable after they where some time in CURRENT.</p>
<p>Release is what you want if you need a super stable system. This is
bullet proven stuff only touched by security fixes. If you have no need
to run something newer, this is what makes you happy for production. To
be even more paranoid you can skip the .0 releases as well of a new
major version. New major versions bring bigger changes and may have a
different behavior or feeling. Keep in mind that your staff need some
time to adapt to new changes, too. A lot of companies skip .0 releases
of any software they can avoid it for production. That is not a bad
idea. You will have the most fun in production if everything is just
working ;-)</p>
</div>
<div class="section" id="setup-a-development-environment">
<h2>Setup a development environment</h2>
<p>You need FreeBSD to develop FreeBSD. That's not quit surprising, but if
you want to build a CURRENT system you need to use a CURRENT system as
base. So today I use a 11 snapshot image to build my latest current
images from source code.</p>
<p>I will come over the points I found hard to find in the documentation.
The people on the FreeBSD IRC channel helped me a lot to find the
locations where the documentation is. In many cases you need to know
what you're searching. It is easy to find the correct documentation if
you are more familiar with the wording, but still first use a search
engine to try to find the information yourself. It helps a lot if you
searched the docs by yourself. You will learn more by doing it and
people are more friendly if they recognize that you already have spend
some time to help yourself.</p>
<p>Some more details and examples are collected by TJ from BSDNow can be
found here: <a class="reference external" href="http://www.bsdnow.tv/tutorials/stable-current">http://www.bsdnow.tv/tutorials/stable-current</a></p>
<p>From now on I assume you have a working FreeBSD - CURRENT system
installed and running.</p>
<div class="section" id="install-necessary-packages-or-ports">
<h3>Install necessary packages or ports</h3>
<p>To check out the source code you will need to use subversion. Install it
using pkg or ports.</p>
<p>As mentioned by <strong>FAndrey</strong> you don't need to install subversion client
anymore. FreeBSD comes with svnlite in base system since FreeBSD 10. So
if you don't want svn you can use svnlite without installing an
additional package or port. Thanks for that hint.</p>
<div class="section" id="using-pkg">
<h4>Using pkg:</h4>
<pre class="literal-block">
pkg install subversion
</pre>
</div>
<div class="section" id="using-ports">
<h4>Using ports</h4>
<pre class="literal-block">
cd /usr/src/contrib/subversion
</pre>
<pre class="literal-block">
make install clean
</pre>
</div>
</div>
<div class="section" id="start-populating-usr-src">
<h3>Start populating /usr/src</h3>
<p>The source code is managed in a subversion repository. There are some
mirrors around so you can use one of them near to your location. As I am
from Europe I will use one of the mirror located here. Find a mirror
next to your location in the mirrors list:</p>
<p><a class="reference external" href="https://www.freebsd.org/doc/handbook/svn.html#svn-mirrors">https://www.freebsd.org/doc/handbook/svn.html#svn-mirrors</a></p>
<p>Very important is that you <strong>verify the fingerprint</strong> of your mirror and
only use the <strong>encrypted</strong> connection!</p>
<pre class="literal-block">
svn co https://svn0.eu.FreeBSD.org/base/head/ /usr/src/
</pre>
<p>Depending on the speed of your internet connection this will take a
while. Grab a cup of coffee or tee.</p>
<p>If everything worked fine, your /usr/src should look like this:</p>
<pre class="literal-block">
-rw-r--r-- 1 root wheel 6.0K Nov 15 18:04 COPYRIGHT
-rw-r--r-- 1 root wheel 734B Nov 15 18:04 LOCKS
-rw-r--r-- 1 root wheel 6.3K Nov 15 18:04 MAINTAINERS
-rw-r--r-- 1 root wheel 18K Nov 15 18:04 Makefile
-rw-r--r-- 1 root wheel 62K Nov 15 18:26 Makefile.inc1
-rw-r--r-- 1 root wheel 287K Nov 15 18:26 ObsoleteFiles.inc
-rw-r--r-- 1 root wheel 3.1K Nov 15 18:13 README
-rw-r--r-- 1 root wheel 42K Nov 15 18:04 UPDATING
drwxr-xr-x 42 root wheel 44B Nov 15 18:04 bin
drwxr-xr-x 9 root wheel 11B Nov 15 18:26 cddl
drwxr-xr-x 87 root wheel 87B Nov 15 18:23 contrib
drwxr-xr-x 5 root wheel 6B Nov 15 18:12 crypto
drwxr-xr-x 26 root wheel 95B Nov 15 18:04 etc
drwxr-xr-x 14 root wheel 16B Nov 15 18:13 games
drwxr-xr-x 5 root wheel 9B Nov 15 18:13 gnu
drwxr-xr-x 8 root wheel 105B Nov 15 18:13 include
drwxr-xr-x 9 root wheel 12B Nov 15 18:24 kerberos5
drwxr-xr-x 106 root wheel 108B Nov 15 18:26 lib
drwxr-xr-x 37 root wheel 42B Nov 15 18:04 libexec
drwxr-xr-x 13 root wheel 17B Nov 15 18:12 release
drwxr-xr-x 4 root wheel 6B Nov 15 18:13 rescue
drwxr-xr-x 91 root wheel 99B Nov 15 18:13 sbin
drwxr-xr-x 7 root wheel 9B Nov 15 18:13 secure
drwxr-xr-x 29 root wheel 31B Nov 15 18:25 share
drwxr-xr-x 53 root wheel 54B Nov 15 18:11 sys
drwxr-xr-x 3 root wheel 6B Nov 15 18:24 tests
drwxr-xr-x 15 root wheel 19B Nov 15 18:14 tools
drwxr-xr-x 258 root wheel 265B Nov 15 18:13 usr.bin
drwxr-xr-x 212 root wheel 220B Nov 15 18:25 usr.sbin
</pre>
<p>This is how you did the initial check out of the source code. You will
need to update the tree from time to time to get the latest version of
the source code. How the FreeBSD project is using subversion to control
all the changes is explained very well in this video from Stefan
Sperling, <a class="reference external" href="https://va.ludost.net/files/eurobsdcon/2014/Pirin/01.Thursday/03.Subversion%20for%20FreeBSD%20developers%20-%20Stefan%20Sperling.mp4">Subversion for FreeBSD
developers</a>
which was recorded on EuroBSDcon 2014 in Sofia.</p>
</div>
</div>
<div class="section" id="configure-your-make-conf">
<h2>Configure your make.conf</h2>
<p>The make.conf file contains the default make options. This files is
important to be adjusted to your system and needs.</p>
<p>In my case it looks like this for my workstation:</p>
<pre class="literal-block">
MAKE_JOBS_NUMBER?=8
OPTIONS_UNSET = NLS DOCS
#For my NVIDIA CARD
WITH_NVIDIA_GL=YES
WITH_NVIDIA=YES
WITHOUT_NOUVEAU=YES
</pre>
</div>
<div class="section" id="make-your-changes-or-add-a-patch">
<h2>Make your changes or add a patch</h2>
<p>You have the complete source code in your /usr/src directory. Browse it
or add a patch you made. All base components are in this tree. There are
some additional tools to build and manage the source code as well. Check
the MAINTAINERS file to see who is the contact for a patch you created
and publish it on the mailing list to get it reviewed and maybe added to
the upstream version of FreeBSD after discussion.</p>
</div>
<div class="section" id="build-world-and-build-your-custom-kernel">
<h2>Build world and build your custom kernel</h2>
<p>To have a system build with this options we will follow the
documentation to rebuild world and kernel. This page is very detailed
and should help you to do all necessary tasks:
<a class="reference external" href="https://www.freebsd.org/doc/handbook/makeworld.html">https://www.freebsd.org/doc/handbook/makeworld.html</a></p>
</div>
<div class="section" id="make-your-own-freebsd-current-install-media">
<h2>Make your own FreeBSD-CURRENT install media</h2>
<p>We are on a BSD system. The best source for information is the system
itself. Try to search the man pages. The most BSD developers care a lot
about documentation of their stuff and that the necessary information to
run there programs are delivered in the man pages.</p>
<pre class="literal-block">
man release
</pre>
<p>In that man page the release scripts a very well documented. You can
create your own install media images to test you changes or have your
customized installation media for you environment.</p>
<div class="section" id="did-i-missed-something-let-me-know">
<h3>Did I missed something? Let me know!</h3>
<p>This is work in progress and I will update it with pleasure if you're
missing something. Ping me and I will try to add some more sections or
if you miss some links or hints.</p>
</div>
</div>
Create a screen recording on FreeBSD with kdenlive and external USB mic2015-01-04T20:53:00+01:002015-01-04T20:53:00+01:00Dominik Zajactag:www.banym.de,2015-01-04:/create-a-screen-recording-on-freebsd-with-kdenlive-and-external-usb-mic.html<p>This tutorial shows you how you can use kdenlive on FreeBSD to create a
screen cast. I am using a Maya 22 USB to record speech from a Rode
microphone. This works fine, too.</p>
<div class="section" id="install-the-software">
<h2>1. Install the software</h2>
<div class="section" id="ffmpeg">
<h3>ffmpeg</h3>
<p>If you have ffmpeg already installed you need to check if …</p></div></div><p>This tutorial shows you how you can use kdenlive on FreeBSD to create a
screen cast. I am using a Maya 22 USB to record speech from a Rode
microphone. This works fine, too.</p>
<div class="section" id="install-the-software">
<h2>1. Install the software</h2>
<div class="section" id="ffmpeg">
<h3>ffmpeg</h3>
<p>If you have ffmpeg already installed you need to check if you had the
X11GRAB option enabled. You will need it to allow kdenlive to record
from your screen.</p>
<pre class="literal-block">
cd /usr/ports/multimedia/ffmpeg
make config
</pre>
<p>Enable X11GRAB option and SDL
(<a class="reference external" href="https://bugs.kdenlive.org/view.php?id=3423">https://bugs.kdenlive.org/view.php?id=3423</a>):</p>
<p><a class="reference external image-reference" href="images/ffmpeg-ports-config2.png"><img alt="ffmpeg-ports-config" src="images/ffmpeg-ports-config2.png" /></a></p>
<pre class="literal-block">
make
make deinstall
make reinstall
</pre>
</div>
<div class="section" id="install-kdenlive">
<h3>Install kdenlive</h3>
<div class="section" id="use-pkg">
<h4>Use pkg:</h4>
<pre class="literal-block">
pkg install kdenlive
</pre>
</div>
<div class="section" id="use-ports">
<h4>Use ports:</h4>
<pre class="literal-block">
cd /usr/ports/multimedia/kdenlive
make install clean
</pre>
</div>
</div>
</div>
<div class="section" id="modify-audio-options-if-you-want-to-record-your-speech-and-the-screen-at-the-same-time">
<h2>2. Modify audio options if you want to record your speech and the screen at the same time</h2>
<p>Run kdenlive and follow the wizard to configure it the first time. After
that a new empty project will be shown in the main window of kdenlive.</p>
<p><a class="reference external image-reference" href="images/FreeBSD-kdenlive.png"><img alt="FreeBSD-kdenlive" src="images/FreeBSD-kdenlive.png" /></a> Select Record Monitor and open the configure window
with the symbol right to the record button.</p>
<p><a class="reference external image-reference" href="images/FreeBSD-kdenlive-1.png"><img alt="FreeBSD-kdenlive-1" src="images/FreeBSD-kdenlive-1.png" /></a></p>
<p><a class="reference external image-reference" href="images/FreeBSD-kdenlive-2.png"><img alt="FreeBSD-kdenlive-2" src="images/FreeBSD-kdenlive-2.png" /></a></p>
<div class="line-block">
<div class="line">Select the profile with audio if you want to record your voice or other audio input while capturing the monitor. We need to modify this capturing options for FFmpeg here. I am not using pulse audio which is set by default in kdenlive. I use the oss input device which is in my case /dev/dsp9 for my Maya USB 22 interface. In your case this is a different dsp device.</div>
</div>
<p><a class="reference external image-reference" href="images/FreeBSD-kdenlive-3.png"><img alt="FreeBSD-kdenlive-3" src="images/FreeBSD-kdenlive-3.png" /></a></p>
<p><img alt="FreeBSD-kdenlive-4" src="images/FreeBSD-kdenlive-4.png" /></p>
<p>After you have modified this options you can now record your first video
with audio. If you don't want to have audio recorded just select the
other profile and you don't need to make any changes.</p>
<p>I hope this will lead to more true FreeBSD made screen casts.</p>
<div class="line-block">
<div class="line">Here my first screen record using FreeBSD and kdenlive:</div>
<div class="line"><br /></div>
</div>
</div>
FreeBSD 10.1 using UEFI2014-11-21T23:25:00+01:002014-11-21T23:25:00+01:00Dominik Zajactag:www.banym.de,2014-11-21:/freebsd-10-1-using-uefi.html<p>This tutorial is about installing the latest stable FreeBSD 10.1 with
UEFI and run a desktop with KDE with a NVIDIA video card.</p>
<div class="section" id="before-install">
<h2>Before Install</h2>
<p>With my motherboard is does not work to boot UEFI if the CMS compatibly
mode is turned off completely. Someone else second this problem …</p></div><p>This tutorial is about installing the latest stable FreeBSD 10.1 with
UEFI and run a desktop with KDE with a NVIDIA video card.</p>
<div class="section" id="before-install">
<h2>Before Install</h2>
<p>With my motherboard is does not work to boot UEFI if the CMS compatibly
mode is turned off completely. Someone else second this problem with the
same motherboard I am using. If you're facing a similar problem, please
report it to the mailing
list. <a class="reference external" href="https://lists.freebsd.org/pipermail/freebsd-stable/2014-November/081110.html">https://lists.freebsd.org/pipermail/freebsd-stable/2014-November/081110.html</a></p>
<p>So even if you install using the UEFI image you maybe have to turn your
UEFI/CMS mode to "both".</p>
<p>ZFS is not possible with UEFI. Keep in mind that this installation with
UEFI forces you to use UFS up to now! The UEFI loader is not able to
load the ZFS root partition up to now.</p>
</div>
<div class="section" id="install-base-system">
<h2>Install base system</h2>
<p>The installation is quite straight forward. Just boot, select what you
want and the target disk. Select UFS filesystem and go for it.</p>
<div class="section" id="setup-pkg">
<h3>Setup pkg</h3>
<p>If you want to go with the prebuild packages setup pkg by running the
command and run pkg update.</p>
</div>
</div>
<div class="section" id="install-xorg-kde-and-nvidia-drivers">
<h2>Install Xorg, KDE and nvidia-drivers</h2>
<p>I used the binary packages except for the nvidia-drivers. There is a
conflict between some KDE packages and nvidia-drivers
(<a class="reference external" href="https://forums.freebsd.org/threads/nvidia-driver-and-kde-4-on-10-1-release.48994/">https://forums.freebsd.org/threads/nvidia-driver-and-kde-4-on-10-1-release.48994/</a>).
You need to build the nvidia drivers without doc option and it will work
to install everything correctly.</p>
<div class="section" id="install-xorg-and-kde">
<h3>Install Xorg and KDE</h3>
<pre class="literal-block">
pkg install xorg kde
</pre>
</div>
<div class="section" id="build-kde4-workspace-without-option">
<h3>Build kde4-workspace without option</h3>
<pre class="literal-block">
cd /usr/ports/x11/kde4-workspace
</pre>
<pre class="literal-block">
make config
</pre>
<p><a class="reference external image-reference" href="images/snapshopt2.png"><img alt="snapshopt2" src="images/snapshopt2.png" /></a></p>
<p>Disable the "OpenGL ES 2.0 support" here to not get some file conflicts
between nvidia-drivers version of some files and the libEGL ones.</p>
<div class="section" id="configure-system">
<h4>Configure system</h4>
<div class="section" id="configure-x">
<h5>Configure X</h5>
<p>Here is my xorg.conf I created it useing "X -configure" and removed the
duplicated parts and set the driver to nvidia</p>
<pre class="literal-block">
Section "ServerLayout"
Identifier "X.org Configured"
Screen 0 "Screen0" 0 0
InputDevice "Mouse0" "CorePointer"
InputDevice "Keyboard0" "CoreKeyboard"
EndSection
Section "Files"
ModulePath "/usr/local/lib/xorg/modules"
FontPath "/usr/local/lib/X11/fonts/misc/"
FontPath "/usr/local/lib/X11/fonts/TTF/"
FontPath "/usr/local/lib/X11/fonts/OTF/"
FontPath "/usr/local/lib/X11/fonts/Type1/"
FontPath "/usr/local/lib/X11/fonts/100dpi/"
FontPath "/usr/local/lib/X11/fonts/75dpi/"
EndSection
Section "Module"
Load "dbe"
Load "dri"
Load "dri2"
Load "extmod"
Load "record"
Load "glx"
EndSection
Section "InputDevice"
Identifier "Keyboard0"
Driver "kbd"
EndSection
Section "InputDevice"
Identifier "Mouse0"
Driver "mouse"
Option "Protocol" "auto"
Option "Device" "/dev/sysmouse"
Option "ZAxisMapping" "4 5 6 7"
EndSection
Section "Monitor"
Identifier "Monitor0"
VendorName "Monitor Vendor"
ModelName "Monitor Model"
EndSection
Section "Device"
Identifier "Card0"
Driver "nvidia"
BusID "PCI:2:0:0"
EndSection
Section "Screen"
Identifier "Screen0"
Device "Card0"
Monitor "Monitor0"
SubSection "Display"
Viewport 0 0
Depth 1
EndSubSection
SubSection "Display"
Viewport 0 0
Depth 4
EndSubSection
SubSection "Display"
Viewport 0 0
Depth 8
EndSubSection
SubSection "Display"
Viewport 0 0
Depth 15
EndSubSection
SubSection "Display"
Viewport 0 0
Depth 16
EndSubSection
SubSection "Display"
Viewport 0 0
Depth 24
EndSubSection
EndSection
</pre>
</div>
<div class="section" id="setting-different-keyboard-layout-than-the-default-qwerty-for-kdm">
<h5>Setting different keyboard layout than the default "qwerty" for KDM</h5>
<p>I want to have a different keyboardlayout at login time with KDM and
later in KDE. Changing it for KDE itself is not a big deal. Just open
the system settings -> input devices and add the keyboard layout you
want.</p>
<p><a class="reference external image-reference" href="images/FreeBSD-change-keyboard-layout-KDE.png"><img alt="FreeBSD-change-keyboard-layout-KDE" src="images/FreeBSD-change-keyboard-layout-KDE.png" /></a></p>
<p>To Change it in KDM at login time this was more a pain to find the
correct configuration file. But here is how to do it. As root user open
the file: /usr/local/share/config/kdm/Xsetup and add the following line:</p>
<pre class="literal-block">
setxkbmap -model pc105 -layout de
</pre>
<p>Of course replace the <strong>de</strong> with the layout you prefer!</p>
<p>For the record. Adding the hal policy as mentioned in other places on
the web, did not work for KDM on my FreeBSD 10.1 STABLE system.</p>
</div>
<div class="section" id="configure-rc-conf-to-load-nvidia-start-dbus-and-hald-and-kdm">
<h5>Configure rc.conf to load nvidia start dbus and hald and kdm</h5>
<p>There is a problem loading the nvidia driver when you're using UEFI
<a class="reference external" href="https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193770d">https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193770d</a></p>
<p>Because of this bug I added the load of nvidia driver into the rc.conf.
I am not sure if this is the recommended way for the future but it works
for me quite well.</p>
<p>This leads to the following additional lines for the rc.conf</p>
<pre class="literal-block">
dbus_enable="YES"
hald_enable="YES"
kld_list="nvidia"
kdm4_enable="YES"
linux_enable="YES"
</pre>
</div>
<div class="section" id="configure-sysctl-conf-for-chrome-and-set-the-correct-audio-device-for-me">
<h5>Configure sysctl.conf for Chrome and set the correct Audio device for me</h5>
<pre class="literal-block">
kern.ipc.shm_allow_removed=1
hw.snd.default_unit=8
</pre>
<p>Thats it. If I missed something just let me know.</p>
</div>
</div>
</div>
</div>
Install FreeBSD 10.1 or FreeBSD 11 - CURRENT on Thinkpad T4202014-10-15T22:01:00+02:002014-10-15T22:01:00+02:00Dominik Zajactag:www.banym.de,2014-10-15:/install-freebsd-11-on-thinkpad-t420.html<p>This post is about installing FreeBSD 10.1 RC2 or FreeBSD 11 - CURRENT
on a Thinkpad T420 with Intel graphics. This is for <strong>testing only</strong> up
to now!</p>
<div class="section" id="work-around-the-bios-uefi-bug">
<h2>Work around the BIOS/UEFI bug:</h2>
<p>The T420 comes with an unpatched BIOS/UEFI bug which prevents to boot
from a default …</p></div><p>This post is about installing FreeBSD 10.1 RC2 or FreeBSD 11 - CURRENT
on a Thinkpad T420 with Intel graphics. This is for <strong>testing only</strong> up
to now!</p>
<div class="section" id="work-around-the-bios-uefi-bug">
<h2>Work around the BIOS/UEFI bug:</h2>
<p>The T420 comes with an unpatched BIOS/UEFI bug which prevents to boot
from a default GPT partitioned harddisk or USB flash drive. I am not
100% sure but it looks like a bug on all T420, T520 and W520 models so
not only the T420.</p>
<p>The bug seems to look at the first partition and if this partition is
not what it expects it does not recognize it and fails to boot.To boot
from USB you need to use the UEFI images. Since the first partition on a
UEFI boot media is an UEFI partition if I am correct this works around
the problem.</p>
<p>If you want to read more about the details, ask your search engine for:
"T420 gpt boot problem". The internet is full of it and there are
further information what you else can do to work around this bug. There
are tutorials for other systems or how to create a custom partition
layout that works, too.</p>
<p>I will show you a way to work with the installer here. This prevents you
from installing on a ZFS root with GPT, since the UEFI boot loader code
doesn't support ZFS root volumes, yet. This will change in future but
lets go with ZFS and a MBR for now.</p>
<div class="section" id="update">
<h3>Update!</h3>
<p>Allan Jude has committed a fix to be included with 10.2 for the gpt
command to apply a workaround for this problem. If you're using the
installer, it should detect if you have an effected model and should
apply the patch. Let me know if you have problems with it or if this
fixed the problem for you. Thanks to Allan to make this fix happen!</p>
</div>
</div>
<div class="section" id="hardware-support-for-my-model">
<h2>Hardware support for my model:</h2>
<ul class="simple">
<li>Intel Graphics <strong>o.k</strong></li>
<li>Intel Wifi <strong>o.k</strong></li>
<li>ACPI Brightness control o.k (with -CURRENT) / not o.k (with 10.1 RC2)</li>
<li>Power support <strong>o.k</strong></li>
</ul>
</div>
<div class="section" id="download-the-installation-media">
<h2>Download the installation media</h2>
<p>For FreeBSD 11 download image available here:</p>
<p><a class="reference external" href="ftp://ftp.freebsd.org/pub/FreeBSD/snapshots/ISO-IMAGES/11.0/FreeBSD-11.0-CURRENT-amd64-20140918-r271779-memstick.img.xz">ftp://ftp.freebsd.org/pub/FreeBSD/snapshots/ISO-IMAGES/11.0/FreeBSD-11.0-CURRENT-amd64-20140918-r271779-memstick.img.xz</a></p>
<p>For FreeBSD 10.1 RC2 download the <strong>UEFI image</strong> available here (The not
UEFI image will not boot on the T420!):</p>
<p><a class="reference external" href="ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/amd64/ISO-IMAGES/10.1/FreeBSD-10.1-RC2-amd64-uefi-memstick.img.xz">ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/amd64/ISO-IMAGES/10.1/FreeBSD-10.1-RC2-amd64-uefi-memstick.img.xz</a></p>
</div>
<div class="section" id="prepare-t420">
<h2>Prepare T420</h2>
<p>Configure your BIOS/UEFI to boot both, UEFI and legacy boot with UEFI in
first order.</p>
</div>
<div class="section" id="install-freebsd-minimal">
<h2>Install FreeBSD minimal</h2>
<div class="line-block">
<div class="line">Boot with default options:</div>
<div class="line-block">
<div class="line"><a class="reference external image-reference" href="images/FreeBSD-on-T420-1.png"><img alt="FreeBSD-on-T420-1" src="images/FreeBSD-on-T420-1.png" /></a></div>
</div>
</div>
<p>Choose Install:</p>
<p><a class="reference external image-reference" href="images/FreeBSD-on-T420-2.png"><img alt="FreeBSD-on-T420-2" src="images/FreeBSD-on-T420-2.png" /></a></p>
<p>Select your keyboard layout. Please have in mind, if you encrypt your
hard disk you have to know how you type your passphrase on the us
keyboardlayout at boot time. Ping me if there is a way to change the
keyboard layout at boot time.</p>
<p><a class="reference external image-reference" href="images/FreeBSD-on-T420-3.png"><img alt="FreeBSD-on-T420-3" src="images/FreeBSD-on-T420-3.png" /></a></p>
<p>Set the hostname for your machine.</p>
<p><a class="reference external image-reference" href="images/FreeBSD-on-T420-4.png"><img alt="FreeBSD-on-T420-4" src="images/FreeBSD-on-T420-4.png" /></a></p>
<p>Choose the components you want to have installed now.</p>
<p><a class="reference external image-reference" href="images/FreeBSD-on-T420-5.png"><img alt="FreeBSD-on-T420-5" src="images/FreeBSD-on-T420-5.png" /></a></p>
<p>Harddisk setup</p>
<p>Select ZFS while installation and change the gpt default option to mbr.
If you need it choose encryption for your system and for the swap
partition. You always should encrypt your hard disk on mobile devices.
If you loose your laptop or it gets stolen at least your data is
protected.</p>
<p><a class="reference external image-reference" href="images/FreeBSD-on-T420-6.png"><img alt="FreeBSD-on-T420-6" src="images/FreeBSD-on-T420-6.png" /></a></p>
<p><a class="reference external image-reference" href="images/FreeBSD-on-T420-7.png"><img alt="FreeBSD-on-T420-7" src="images/FreeBSD-on-T420-7.png" /></a></p>
<p><a class="reference external image-reference" href="images/FreeBSD-on-T420-8.png"><img alt="FreeBSD-on-T420-8" src="images/FreeBSD-on-T420-8.png" /></a></p>
<p>Because I have only one disk for FreeBSD in my T420 there is no
redundancy and I choose stripe here.</p>
<p><a class="reference external image-reference" href="images/FreeBSD-on-T420-9.png"><img alt="FreeBSD-on-T420-9" src="images/FreeBSD-on-T420-9.png" /></a></p>
<p>Select the harddisk you want install to. Here this is a VBOX HaRDDISK
because I did a replay to make the screenshots ;-)</p>
<p><a class="reference external image-reference" href="images/FreeBSD-on-T420-10.png"><img alt="FreeBSD-on-T420-10" src="images/FreeBSD-on-T420-10.png" /></a></p>
<p>This is the point of no return!</p>
<p><a class="reference external image-reference" href="images/FreeBSD-on-T420-11.png"><img alt="FreeBSD-on-T420-11" src="images/FreeBSD-on-T420-11.png" /></a></p>
<p>Choose a long and strong passphrase for your disk encryption!</p>
<p><a class="reference external image-reference" href="images/FreeBSD-on-T420-12.png"><img alt="FreeBSD-on-T420-12" src="images/FreeBSD-on-T420-12.png" /></a></p>
<p>Remember the long and strong passphrase the first time ;-)</p>
<p><a class="reference external image-reference" href="images/reeBSD-on-T420-13.png"><img alt="FreeBSD-on-T420-13" src="images/FreeBSD-on-T420-13.png" /></a></p>
<p>Now the sytem will generate and initialize the filesystem with your
encryption keys.</p>
<p><a class="reference external image-reference" href="himages/FreeBSD-on-T420-14.png"><img alt="FreeBSD-on-T420-14" src="images/FreeBSD-on-T420-14.png" /></a></p>
<p>Now the installation process installs the selected components as usual.</p>
<p><a class="reference external image-reference" href="images/FreeBSD-on-T420-15.png"><img alt="FreeBSD-on-T420-15" src="images/FreeBSD-on-T420-15.png" /></a></p>
<p>Set a strong root password and add you user to the system.</p>
<p><a class="reference external image-reference" href="images/FreeBSD-on-T420-16.png"><img alt="FreeBSD-on-T420-16" src="images/FreeBSD-on-T420-16.png" /></a></p>
<p>Here select the services you want to have started at boot time. I use
all of them here.</p>
<p><a class="reference external image-reference" href="images/FreeBSD-on-T420-17.png"><img alt="FreeBSD-on-T420-17" src="images/FreeBSD-on-T420-17.png" /></a></p>
<p>The rest is not really interesting. Exit the process and reboot the
machine when done.</p>
</div>
<div class="section" id="install-packages">
<h2>Install packages</h2>
<p>Login in to your new system and install the first packages and make some
modifications to the system.</p>
<pre class="literal-block">
pkg update
</pre>
<pre class="literal-block">
pkg install xorg sudo tmux vim
</pre>
</div>
<div class="section" id="modify-base-configuration">
<h2>Modify base configuration</h2>
<div class="section" id="add-the-following-lines-to-etc-rc-conf">
<h3>Add the following lines to /etc/rc.conf</h3>
<pre class="literal-block">
hald_enable="YES"
dbus_enable="YES"
performance_cx_lowest="Cmax"
economy_cx_lowest="Cmax"
moused_flags="-VH"
</pre>
<p>Hald and DBus are required to make X working correctly. The next two
options are some power saving options which should improve your battery
life. My T420 runs 4h+ with the standard battery and i3 as window
manager. The last option enables the mid mouse button scrolling with the
TrackPoint.</p>
</div>
<div class="section" id="add-the-following-lines-to-boot-loader-conf">
<h3>Add the following lines to /boot/loader.conf</h3>
<pre class="literal-block">
kern.vty=vt
hw.vga.textmode="1"
acpi_ibm_load="YES"
acpi_video_load="YES"
hint.p4tcc.0.disabled=1
hint.acpi_throttle.0.disabled=1
drm.i915.enable_rc6=7
</pre>
<p>The first options are related to the new vt. This will enable you to
switch between X and your console again. Without this after starting X I
was not able to switch back to console.</p>
<p>acpi_ibm and acpi_video enables some features like extra keys on the
IBM/Lenovo notebooks. With FreeBSD 11 - CURRENT acpi_video enabled the
brightness control. With the 10.1 RC2 it does not work up to now. I am
not sure if this will be merged into 10.1 but stay tuned at least 11
will bring this to you.</p>
<p>The last three options are power tuning options again. Read more here:
<a class="reference external" href="https://wiki.freebsd.org/TuningPowerConsumption">https://wiki.freebsd.org/TuningPowerConsumption</a></p>
</div>
</div>
<div class="section" id="configure-system-for-xorg-installation">
<h2>Configure System for Xorg installation</h2>
<pre class="literal-block">
X -configure
</pre>
<pre class="literal-block">
cp /root/xorg.conf.new /etc/X11/xorg.conf
</pre>
</div>
<div class="section" id="configure-i3-to-be-your-desktop-environment">
<h2> Configure i3 to be your desktop environment</h2>
<p>Install need packages or build it from ports:</p>
<pre class="literal-block">
pkg install i3 i3lock i3status dmenu
</pre>
<pre class="literal-block">
vi ~/.xinitrc
</pre>
<pre class="literal-block">
/usr/local/bin/i3
</pre>
</div>
<div class="section" id="install-some-useful-software">
<h2>Install some useful software</h2>
<p>Firefox is the quite well known browser, Thunderbird the email client
and Hexchat is a XChat fork that works quite well.</p>
<pre class="literal-block">
pkg install firefox thunderbird hexchat
</pre>
</div>
<div class="section" id="set-keyboard-layout">
<h2>Set keyboard layout</h2>
<p>Create the file: /usr/local/etc/hal/fdi/policy/x11-input.fdi</p>
<pre class="literal-block">
<?xml version="1.0" encoding="ISO-8859-1"?>
<deviceinfo version="0.2">
<device>
<match key="info.capabilities" contains="input.keyboard">
<merge key="input.x11_options.XkbModel" type="string">pc105</merge>
<merge key="input.x11_options.XkbLayout" type="string">de</merge>
</match>
</device>
</deviceinfo>
</pre>
<p><strong>This does not work for KDM!</strong></p>
<p>In KDM this didn't work for me. To set the keyboard layout correct in
KDM you need to add the following line to:
/usr/local/share/config/kdm/Xsetup</p>
<pre class="literal-block">
setxkbmap -model pc105 -layout de
</pre>
<p>Of course you need to replace the <strong>de</strong> with the layout you prefer. The
layout in KDE itself can be modified using the system settings
configuration of you input device as mentioned in this
<a class="reference external" href="https://www.banym.de/freebsd/freebsd-10-1-using-uefi">post</a>.</p>
</div>
<div class="section" id="update-1">
<h2>Update 1</h2>
<p>In a previous version of this Blog post I mentioned to use slim as login
manager. I ran into some bugs with it and tried to find the source code
and project page to get them fixed, but it looks like the project is
dead and not developed further. Please stop using it if you do and
choose one of the many other options around (XDM, GDM, KDM, Entrance,
LXDM, MDM, Qingy).</p>
</div>
<div class="section" id="update-2">
<h2>Update 2</h2>
<p>I added the mouse scrolling configuration option the the /etc/rc.conf
file to make the scrolling working with the TrackPoint or mid mouse
button.</p>
</div>
Fedora with selinux enabled running OpenVPN using NetworkManager2014-08-30T13:30:00+02:002014-08-30T13:30:00+02:00Dominik Zajactag:www.banym.de,2014-08-30:/fedora-with-selinux-enabled-running-openvpn-using-networkmanager.html<p>On a Fedora or CentOS system with enables selinux you need to store your
certificate and configuration in /etc/openvpn to avoid selinux is
blocking the access of NetworkManager to this files. There is a way of
setting some sebooleans to allow selinux to read them from user home
directories …</p><p>On a Fedora or CentOS system with enables selinux you need to store your
certificate and configuration in /etc/openvpn to avoid selinux is
blocking the access of NetworkManager to this files. There is a way of
setting some sebooleans to allow selinux to read them from user home
directories but for me it didn't work and I did not investigate. I moved
all files on that machine to /etc/openvpn and modified the
NetworkManager configuration. Everything works like a charm now. And it
is quite more comfortable to configure all the details like if you wish
to route all your traffic through that vpn connection or not.</p>
Why should I run my own services?2014-08-26T22:56:00+02:002014-08-26T22:56:00+02:00Dominik Zajactag:www.banym.de,2014-08-26:/why-should-i-run-my-own-services.html<p>Even if you're not a familiar with configuring complex computer systems,
there are easy ways to get started. Go to your local Linux User Group or
search the web for groups in your town that help others with technical
problems. Start to read blogs and tutorials about running an email …</p><p>Even if you're not a familiar with configuring complex computer systems,
there are easy ways to get started. Go to your local Linux User Group or
search the web for groups in your town that help others with technical
problems. Start to read blogs and tutorials about running an email
server or a jabber server.Ask people for their configurations and make a
plan what want to do. Check with others if everything you plan is
working and configured correctly for security reasons. Use encryption
whenever you want to share private information about a network. Host
your website on your own and grow your knowledge about how things work.
This is important to all of us. We need alot of people who know how
things work behind fancy a gui. The public internet was built by private
persons and small companies at the beginning. Running your own services
helps to make the internet decentralized as it should be.</p>
<p>What services can you provide?</p>
<ul class="simple">
<li>Run your own email server for your domain.</li>
<li>Run you own jabber server.</li>
<li>Think about sharing some bandwidth for the Tor network by setting a
bridge.</li>
<li>Get creative and run every service you need.</li>
</ul>
Boot using a iSCSI root from an usb-stick with bridged ethernet device on Fedora/CentOS2014-08-23T16:37:00+02:002014-08-23T16:37:00+02:00Dominik Zajactag:www.banym.de,2014-08-23:/boot-with-a-iscsi-root-from-a-usb-stick-with-bridged-ethernet-device-on-fedoracentos.html<p>Today I had a nice discussion with someone on the Fedora IRC channel
about a problem booting from an USB stick with an iSCSI root filesystem
and a bridged interface. He was facing the problem that the brctl tool
was not available at boot time. CentOS and Fedora are using …</p><p>Today I had a nice discussion with someone on the Fedora IRC channel
about a problem booting from an USB stick with an iSCSI root filesystem
and a bridged interface. He was facing the problem that the brctl tool
was not available at boot time. CentOS and Fedora are using dracut to
have everythink in place you need at boot time. For this use case brctl
missed and he was not able to boot his machine.</p>
<p>In his special case he needed to setup the bridge at boot time because
his root filesystem needs the connection not to be reconfigured and he
needed a bridge device for his later KVM virtualization stuff on that
machine. A dedicated second iSCSI interface wasn't an option.</p>
<p>After reading some dracut documentation I came over a blog post from a
Russian which showed how to add the missing brctl binary to the
initramdisk and make thinks work.</p>
<p>To include brctl into the initrd for your current kernel run:</p>
<pre class="code literal-block">
dracut -I /sbin/brctl --force
</pre>
<p>That should create a working initrd with brctl to use the bridge
configuration of dracut.</p>
<p>Here you can find the complete forum entry to see how the grub config
has to look like to boot it from iSCSI on CentOS7:</p>
<p><a class="reference external" href="http://www.linux.org.ru/forum/admin/10652702">http://www.linux.org.ru/forum/admin/10652702</a></p>
Turn splash screen off and remove it from initrd on Fedora 202014-08-23T02:25:00+02:002014-08-23T02:25:00+02:00Dominik Zajactag:www.banym.de,2014-08-23:/turn-splash-screen-off-and-remove-it-from-initrd-on-fedora-20.html<p>To remove the splash screen on Fedora and boot up with details run:</p>
<pre class="literal-block">
sudo plymouth-set-default-theme details
</pre>
<p>For me on Fedora 20 it did not work out of the box:</p>
<pre class="literal-block">
sudo plymouth-set-default-theme details --rebuild-initrd
</pre>
<p>The new created initrd go the name initrd-3.15.6-200.img and not
initramfs-3.15.6-200.fc20 …</p><p>To remove the splash screen on Fedora and boot up with details run:</p>
<pre class="literal-block">
sudo plymouth-set-default-theme details
</pre>
<p>For me on Fedora 20 it did not work out of the box:</p>
<pre class="literal-block">
sudo plymouth-set-default-theme details --rebuild-initrd
</pre>
<p>The new created initrd go the name initrd-3.15.6-200.img and not
initramfs-3.15.6-200.fc20.x86_64.img which would be the correct name.
Just replace the old initramfs file with our new created one and reboot.
Now you should get the detail view while booting your machine.</p>
Custom Kernel on Fedora 202014-08-23T02:08:00+02:002014-08-23T02:08:00+02:00Dominik Zajactag:www.banym.de,2014-08-23:/custom-kernel-on-fedora-20.html<p>The last time I built a Linux kernel for my machine was quite a time
ago. In my Linux hacking times when I did my private researches on how
Linux works and how the software can be built for it, I used
<a class="reference external" href="http://www.gentoo.org">Gentoo</a> and there it was normal to build …</p><p>The last time I built a Linux kernel for my machine was quite a time
ago. In my Linux hacking times when I did my private researches on how
Linux works and how the software can be built for it, I used
<a class="reference external" href="http://www.gentoo.org">Gentoo</a> and there it was normal to build
every package from source code, including the kernel. The <a class="reference external" href="http://www.gentoo.org/doc/en/handbook/handbook-x86.xml?part=2&chap=1">portage
system</a>
was a copy of the well known
<a class="reference external" href="http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ports-using.html">ports</a>
package system from <a class="reference external" href="http://www.freebsd.org">FreeBSD</a>. It contains
all the metadata for the software packages to be built from scratch with
its dependencies. But back to my custom and vanilla kernel on Fedora 20.</p>
<div class="section" id="prepare-your-system">
<h2>Prepare your system</h2>
<p>You will need the basic C build environment which can be installed using
a package group as root or using sudo:</p>
<pre class="literal-block">
yum groupinstall 'C Development Tools and Libraries'
</pre>
</div>
<div class="section" id="download-the-kernel-sources-from-kernel-org">
<h2>Download the kernel sources from <a class="reference external" href="http://www.kernel.org">kernel.org</a></h2>
<p>I picked the last stable version which is current 3.16.1 and downloaded
the sources to /usr/src/kernels to extract it there.</p>
<p>To extract a .xz compressed tar archive use:</p>
<pre class="literal-block">
tar xvfJ <archive.tar.xz>
</pre>
</div>
<div class="section" id="configure-your-kernel">
<h2>Configure your kernel</h2>
<p>I prefer a minimalistic kernel. That why I am building my own kernel. I
don't like to have support for hardware in my system which I don't want
to use. I don't use bluetooth, isdn, scsi or legacy audio devices in my
workstation and so I decided to remove everything I don't need.</p>
<p>Change into the kernel source directory you just extracted and run the
kernel menu config tool:</p>
<pre class="literal-block">
cd /usr/src/kernels/linux-3.16.1
make menuconfig
</pre>
<p>I don't explain how you have to configure your kernel that it will work
for you. This is what you have to learn yourself. Read the options and
decide if you need the support for that option. There is a lot of
documentation out there how you can configure your kernel. And if you
are not sure what hardware you have, you maybe should stay with the
generic kernel and explore your system with tools like lsusb, lspci and
lsmod.</p>
<div class="section" id="build-your-kernel-and-install-your-modules">
<h3>Build your kernel and install your modules</h3>
<p>This is quite easy. To build your kernel just run:</p>
<pre class="literal-block">
make
</pre>
<p>And to install the created modules after your build was successful, run:</p>
<pre class="literal-block">
make modules_install
</pre>
</div>
</div>
<div class="section" id="install-your-kernel-to-boot-and-create-initrd">
<h2>Install your kernel to boot and create initrd</h2>
<p>Now you need to copy your kernel image to /boot:</p>
<pre class="literal-block">
cp /usr/src/kernels/linux-3.16.1/arch/x86_64/boot/bzImage /boot/vmlinuz-3.16.1
</pre>
<p>Create initrd:</p>
<pre class="literal-block">
mkinitrd /boot/initramfs-3.16.1.img 3.16.1
</pre>
</div>
<div class="section" id="regenerate-the-grub-config-to-add-the-new-kernel-option">
<h2>Regenerate the Grub config to add the new kernel option</h2>
<pre class="literal-block">
grub2-mkconfig -o /boot/efi/EFI/fedora/grub.cfg
</pre>
</div>
<div class="section" id="reboot-and-have-fun-with-your-new-kernel">
<h2>Reboot and have fun with your new kernel</h2>
</div>
Security reviews became sexy nowadays, we need to make them happen2014-08-22T22:18:00+02:002014-08-22T22:18:00+02:00Dominik Zajactag:www.banym.de,2014-08-22:/security-reviews-became-sexy-nowadays-we-need-to-make-them-happen.html<p>If you're interested in software security you will have noticed that
there where some bigger security problems with widely used software the
last year. The attention this problems get in common media raised the
last two years. We had some big security problems in the past as well,
just remember …</p><p>If you're interested in software security you will have noticed that
there where some bigger security problems with widely used software the
last year. The attention this problems get in common media raised the
last two years. We had some big security problems in the past as well,
just remember the problem with all the SSH keys on Debian systems which
where generated with bad entropy. This critical security problem of one
of the most used Linux distributions should have had as much attention
as heartbeat had.</p>
<div class="section" id="opensource-is-not-the-answer-for-everything-but-the-only-way">
<h2>OpenSource is not the answer for everything but the only way</h2>
<p>For me this hopefully kills a former adoption that open source is more
secure by default. This is complete bullshit in most cases. If you have
a look at these open source graveyards like SourceForge, GitHub or
Google Code you will mostly find a lot of dead projects with poor
quality. Why I am so sure about that? Because I am part of the problem.
Most of us have committed or published to some of these projects with
good intentions to share something and give it to those who maybe can
use it. And maybe the quality at its time was good and everything worked
fine but time changes.</p>
<p>If I think about this today we all should delete this old rubbish to
prevent it form being used somewhere else. It would be nice if source
code which no one is maintaining would delete itself some day, but as
long this does not happen we have to take care of it ourself or setup a
proper maintaining infrastructure for it. Just because some code is open
source does not guarantee that it is reviewed. Only because the code is
open and could be reviewed has brought us to where we are today. I never
have meet this somebody who reviews code for fun and for free all day
long. And even if we have someone like Andy Lutomirski who looks like he
has incredible fun doing such a job for parts of the Linux kernel there
are not enough Andys around for every Open Source project.</p>
</div>
<div class="section" id="opensource-needs-more-money">
<h2>OpenSource needs more money</h2>
<p>All the good intentions to share the source code to make it reviewed by
more people and to make it more secure does not work in all projects. We
need more money to pay people to read our critical software components.
Nobody will do this for free, not frequently and motivated over a long
time. And we need to do it again and again and again. It is not only
Truecrypt, the Linux kernel or the most used web servers that need our
attention.</p>
<p>To do this reviews we do not only need more people at the openssl
foundation or a fork like libressl. This maybe can fix the problem for
openssl but not for all the other libraries which can have a similar
impact when they are screwed up. There is already an infrastructure we
can use to spend the money which is needed to make our systems more
secure. Security always was expensive and a community of volunteers can
not handle it without our support over such a long time.</p>
<p>We should start to spend more money for open source. Security comes at
its price. Don't misunderstand this, I don't want to make every open
source project to take money for their source code, but we need to
establish ways to secure someone does the job nobody wants to do.</p>
<p>And we should make it sexy for the companies we work for to spend money,
too. Some of this companies build there complete business with this free
and open tools and still relay on them. If you're a grown established
company, give back a piece of the cake to those who helped you to get
where you are today.</p>
</div>
<div class="section" id="what-organization-should-we-give-our-money">
<h2>What organization should we give our money</h2>
<p>To those who support the developers doing such a great job for us. Some
good candidates are:</p>
<ul class="simple">
<li><a class="reference external" href="http://www.freebsdfoundation.org/">FreeBDS Foundation</a></li>
<li><a class="reference external" href="http://www.linuxfoundation.org/">Linux Foundation</a></li>
<li><a class="reference external" href="http://www.openbsdfoundation.org">OpenBSD Foundation</a></li>
<li><a class="reference external" href="http://www.apache.org">Apache Foundation</a></li>
<li><a class="reference external" href="http://www.eclipse.org">Eclipse Foundation</a></li>
<li><a class="reference external" href="http://www.mozilla.org">Mozilla Foundation</a></li>
</ul>
<p>They bring a lot of software to us we often or never recognized that we
are using it every single day.</p>
</div>
Some more details howto configure your nginx server with SSL2014-08-21T23:25:00+02:002014-08-21T23:25:00+02:00Dominik Zajactag:www.banym.de,2014-08-21:/some-more-details-howto-configure-your-nginx-server-with-ssl.html<p>The guys from <a class="reference external" href="http://bsdnow.tv">bsdnow.tv</a> did a great job by
putting together a tutorial with some more details on a proper Nginx
configuration and a very good choice for SSL parameters. There where
some parts I didn't know neither and the tutorial is create as always.</p>
<p>If you want to …</p><p>The guys from <a class="reference external" href="http://bsdnow.tv">bsdnow.tv</a> did a great job by
putting together a tutorial with some more details on a proper Nginx
configuration and a very good choice for SSL parameters. There where
some parts I didn't know neither and the tutorial is create as always.</p>
<p>If you want to configure a web server with SSL/TLS support and you're
not sure what parameters to set for SSL/TLS, watch their tutorial at the
end of the episode and you will learn a lot.</p>
<p>Here the link to the video:
<a class="reference external" href="http://www.bsdnow.tv/episodes/2014_08_20-engineering_nginx">http://www.bsdnow.tv/episodes/2014_08_20-engineering_nginx</a></p>
<p>And here the link to the tutorial for nginx and SSL/TLS:
<a class="reference external" href="http://www.bsdnow.tv/tutorials/nginx">http://www.bsdnow.tv/tutorials/nginx</a></p>
<p>If you don't know them yet, take you some time to browser trough their
videos!</p>
<p>Beside this you can check your SSL/TLS configuration using the ssllabs
test to improve your current settings or check frequently to not miss a
newly found vulnerability:<a class="reference external" href="https://www.ssllabs.com/ssltest/">https://www.ssllabs.com/ssltest/</a></p>
Quake style terminal for KDE2014-08-17T14:03:00+02:002014-08-17T14:03:00+02:00Dominik Zajactag:www.banym.de,2014-08-17:/quake-style-terminal-for-kde.html<p>A quite useful extension for my KDE application is
<a class="reference external" href="https://en.wikipedia.org/wiki/Yakuake">**yakuake**</a>. In my default
configuration this shows a terminal window by pressing F12 button and
hides the windows by pressing it again. This is widely known as the
Quake terminal style from the game which had this behaviour included for
its …</p><p>A quite useful extension for my KDE application is
<a class="reference external" href="https://en.wikipedia.org/wiki/Yakuake">**yakuake**</a>. In my default
configuration this shows a terminal window by pressing F12 button and
hides the windows by pressing it again. This is widely known as the
Quake terminal style from the game which had this behaviour included for
its command console.</p>
<p><a class="reference external image-reference" href="images/snapshot-desktop-kde-yakuake.png"><img alt="yakuake on a kde desktop on fedora 20" src="images/snapshot-desktop-kde-yakuake.png" /></a></p>
Migration in progress2014-07-29T21:12:00+02:002014-07-29T21:12:00+02:00Dominik Zajactag:www.banym.de,2014-07-29:/migration-in-progress.html<p>This post is mostly about the blog itself. As you may noticed I am
migrated the blog to full HTTPS the last week. This now should allow you
to access the site without any certification warnings over HTTPS. All
contents should be migrated. There should be a working redirection
mechanism …</p><p>This post is mostly about the blog itself. As you may noticed I am
migrated the blog to full HTTPS the last week. This now should allow you
to access the site without any certification warnings over HTTPS. All
contents should be migrated. There should be a working redirection
mechanism to redirect you to the HTTPS site as well. At this point I
recommend the HTTPS Everywhere plugin which does automatic redirection
on other sites: <a class="reference external" href="https://www.eff.org/https-everywhere">https://www.eff.org/https-everywhere</a></p>
<p>It is just a small step and don't feel to secure only because you are
accessing sites through HTTPS.</p>
<p>The next days I will update the server to support all state of the art
HTTPS versions. So if you have trouble to access the site in future
please check your device does not contain a broken implementation as I
will not support known broken or vulnerable implementations.</p>
<p>Have fun and use cryptography.</p>
Dual boot system with UEFI and Fedora 20 and Windows 8.12014-05-26T21:06:00+02:002014-05-26T21:06:00+02:00Dominik Zajactag:www.banym.de,2014-05-26:/dual-boot-system-with-uefi-and-fedora-21-and-windows-8-1.html<div class="section" id="in-short-sentences">
<h2>In short sentences:</h2>
<p>Yes it is possible! Even with secure boot enabled!</p>
</div>
<div class="section" id="the-long-version">
<h2>The long version:</h2>
<p>On my workstation I use a dual boot configuration for some games and my
Linux based development and testing. Since I am using a UEFI only
configuration it was quite easy to use a dualboot …</p></div><div class="section" id="in-short-sentences">
<h2>In short sentences:</h2>
<p>Yes it is possible! Even with secure boot enabled!</p>
</div>
<div class="section" id="the-long-version">
<h2>The long version:</h2>
<p>On my workstation I use a dual boot configuration for some games and my
Linux based development and testing. Since I am using a UEFI only
configuration it was quite easy to use a dualboot configuration with
Fedora 20 and Windows 8.1.</p>
<p>I turned off the legacy mode on my board and reactived the secure boot
option I disabled some time ago for testing. The most UEFI boards should
come with this options as their default values. Since I connected each
system HardDisk/SSD seperated for installation, Fedora couldn't
recognize the Windows disk and the boot menu entries automatically. This
was just to protect my data since I am using two equal SSDs with the
same size I didn't want to risk to select the wrong and loose all my
data.</p>
<p>The Fedora disk is my first boot disk and I only added these lines to
the grub.cfg located on the EFI partition
(/boot/efi/EFI/fedora/grub.cfg) to add the Windows entry:</p>
<pre class="literal-block">
menuentry 'Windows Boot Manager' {
set root='hd1,gpt2'
chainloader /EFI/Microsoft/Boot/bootmgfw.efi
boot
}
</pre>
<p>That's it. Reboot and test it. If everything is working as expected you
should add this lines the correct way using /etc/grub.d/40_custom</p>
<pre class="literal-block">
#!/bin/sh
exec tail -n +3 $0
# This file provides an easy way to add custom menu entries. Simply type the
# menu entries you want to add after this comment. Be careful not to change
# the 'exec tail' line above.
menuentry 'Windows Boot Manager' {
set root='hd1,gpt2'
chainloader /EFI/Microsoft/Boot/bootmgfw.efi
boot
}
</pre>
<p>and run:</p>
<pre class="literal-block">
grub2-mkconfig -o /boot/efi/EFI/fedora/grub.cfg
</pre>
</div>
Rip CD to FLAC file using K3b on Fedora2014-04-06T19:17:00+02:002014-04-06T19:17:00+02:00Dominik Zajactag:www.banym.de,2014-04-06:/rip-cd-to-flac-file-using-k3b-on-fedora.html<p>If you want to rip your cd without loosing quality you can use the flac
format to do so. K3b comes with a FLAC plugin but the flac encoder
itself was missing on my Fedora 20 machine. Just install it and you will
be able to rip your cd to …</p><p>If you want to rip your cd without loosing quality you can use the flac
format to do so. K3b comes with a FLAC plugin but the flac encoder
itself was missing on my Fedora 20 machine. Just install it and you will
be able to rip your cd to FLAC using K3B:</p>
<pre class="literal-block">
sudo yum -y install flac
</pre>
Make the Fedora/CentOS/RHEL update service the fastest2014-04-06T12:58:00+02:002014-04-06T12:58:00+02:00Dominik Zajactag:www.banym.de,2014-04-06:/make-the-fedoracentosrhel-update-service-the-fastest.html<p>Since I played with some publish and subscribe protocols in the last
months, I came to an idea to speed up the notification and delivery of
software updates over the existing mechanism while reducing, or better
optimizing, the needed resources.</p>
<p>Here a graphic to show what I try to implement …</p><p>Since I played with some publish and subscribe protocols in the last
months, I came to an idea to speed up the notification and delivery of
software updates over the existing mechanism while reducing, or better
optimizing, the needed resources.</p>
<p>Here a graphic to show what I try to implement:</p>
<p><a class="reference external image-reference" href="images/Schema-Package-Push1.png"><img alt="Drawing software update push service" src="images/Schema-Package-Push1.png" /></a></p>
<p>As an example in RHEL/CentOs or Fedora you can start yum and pull the
latest updates frequently to see if there are some new packages. This
can be done with manual cron jobs or the yum-updatesd. Every machine
pulls in a defined frequency the complete package index and looks if
something new was released. In my understanding it would be more
efficient if the system gets notified that some new package is available
or even better the system is listening only to updates and information
of packages that are installed on that specific machine and need be
monitored. This not only can speed up and optimize the client-server
communication this also could be a good way of optimizing the
distribution of packages between repository mirrors. Each mirror can be
notified if there is a new package and gets it pushed to make the
package available as fast as possible.</p>
<p>I am aware that distribution of packages does not need to be optimized
by milliseconds but in some environments such a notification mechanism
can save money and bandwidth if a lot of clients need to be updated.</p>
<p>My plan is to discuss this with a proposal for a concrete implementation
for yum based systems an the developers mailing list of Fedora to get a
feeling if this is a real world requirement or if there is no need in
optimizing this situation.</p>
<p>Up to now MQTT looks quite promising for me to do the notification
mechanism or even push packages to the subscribed machines. With some
control server in back this can make package deployment more efficient
and faster. The package verification mechanism can work as now only the
transport mechanism or the notification of a new package needs to be
added to the existing infrastructure. Since MQTT supports SSL/TLS based
connections and Websockets there should no bigger problem with security
or blocked ports then today.</p>
Build Paho MQTT c library on Mac OS X2014-04-06T10:17:00+02:002014-04-06T10:17:00+02:00Dominik Zajactag:www.banym.de,2014-04-06:/build-paho-mqtt-c-library-on-mac-os-x.html<p>This post describes how to build the Paho MQTT library on Mac OS X with
MacPorts openssl.</p>
<div class="section" id="prepare-your-system">
<h2>Prepare your system</h2>
<div class="section" id="install-the-compiler">
<h3>Install the compiler</h3>
<p>You need Xcode or the Xcode command line utils. If you're not sure if
they are already installed open a terminal and try to run the gcc …</p></div></div><p>This post describes how to build the Paho MQTT library on Mac OS X with
MacPorts openssl.</p>
<div class="section" id="prepare-your-system">
<h2>Prepare your system</h2>
<div class="section" id="install-the-compiler">
<h3>Install the compiler</h3>
<p>You need Xcode or the Xcode command line utils. If you're not sure if
they are already installed open a terminal and try to run the gcc
command. If you need to install the compiler a popup will appear to do
so.</p>
</div>
<div class="section" id="install-mac-ports">
<h3>Install Mac Ports</h3>
<p>If not done already download and install the MacPort system and install
the openssl library by executing the following command:</p>
<pre class="literal-block">
sudo port install openssl
</pre>
<p>You need at least openssl-1.0.1g_0 to not be affected by heartbleed
bug!</p>
</div>
</div>
<div class="section" id="clone-the-repository">
<h2>Clone the repository</h2>
<p>Get the latest version because there are some improvements done the last
weeks.</p>
<pre class="literal-block">
git clone git://git.eclipse.org/gitroot/paho/org.eclipse.paho.mqtt.c.git
</pre>
</div>
<div class="section" id="prepare-the-build-environment">
<h2>Prepare the build environment</h2>
<p>Change to the build directory within the repository:</p>
<p>cd org.eclipse.paho.mqtt.c/build/</p>
<p>Now we need to export some environment variables:</p>
<pre class="literal-block">
export SSL_DIR=/opt/local/
</pre>
<pre class="literal-block">
export MQTTCLIENT_DIR=../src
</pre>
<p>If you want to build the samples:</p>
<pre class="literal-block">
export BUILD_SAMPLES=YES
</pre>
<pre class="literal-block">
export SAMPLES_DIR=../src/samples
</pre>
</div>
<div class="section" id="now-give-it-a-try-and-run-make">
<h2>Now give it a try and run make</h2>
<pre class="literal-block">
make
</pre>
<p>There should now be some output shown and a darwin_ia64 folder should
be created. There you find your paho c library files.</p>
<p>Hope this helps to build your paho library.</p>
</div>
Setup Ruby development environment with rvm on Mac OS X2014-04-05T20:09:00+02:002014-04-05T20:09:00+02:00Dominik Zajactag:www.banym.de,2014-04-05:/setup-ruby-development-environment-with-rvm-on-mac-os-x.html<p>Since I experimented with some Ruby web application stuff the last
weeks, I want to share some of my conclusions how to setup a development
environment which is working for my two major platforms, Mac and Linux.
This post will cover the setup of an easy to use development environment …</p><p>Since I experimented with some Ruby web application stuff the last
weeks, I want to share some of my conclusions how to setup a development
environment which is working for my two major platforms, Mac and Linux.
This post will cover the setup of an easy to use development environment
on Mac OS X. I am running Mavericks but this should work on all of the
latest supported Mac OS X versions as well.</p>
<div class="section" id="first-install-xcode-or-just-the-command-line-tools">
<h2>First install XCode or just the command line tools.</h2>
<p>Try if the gcc command works for you in a terminal if gcc is not
installed a window appears which allows you to install the necessary
packages.</p>
</div>
<div class="section" id="next-step-is-to-install-mac-ports">
<h2>Next step is to install Mac Ports</h2>
<p>Download the latest install package for your Mac OS X version from:
<a class="reference external" href="http://www.macports.org/install.php">http://www.macports.org/install.php</a></p>
</div>
<div class="section" id="install-rvm">
<h2>Install rvm:</h2>
<p>Now it is time to install the rvm for your user. Open a new terminal and
run the following command:</p>
<pre class="literal-block">
\curl -sSL https://get.rvm.io | bash -s stable
</pre>
<p>This will install rvm and add all necessary stuff to your bash profile.
If you are using a different shell or something does not work for you
please have a look at the rvm documentation: <a class="reference external" href="http://rvm.io/rvm/install">http://rvm.io/rvm/install</a></p>
<p>The install output gives you the advice to run the source command for
your user, copy it and run it in your active shell to make rvm available
in this shell. The command looks something like: source
/Users/<YourUsername>/.rvm/scripts/rvm</p>
</div>
<div class="section" id="install-ruby">
<h2>Install ruby:</h2>
<p>For my applications I am using the ruby 2.1 version. You can install any
version you want or need and rvm allows you to switch your active ruby
version on the fly.</p>
<p>Lets start with Ruby-2.1 for now:</p>
<pre class="literal-block">
rvm install ruby-2.1
</pre>
<p>Activate that ruby version and make it default ruby version for now:</p>
<pre class="literal-block">
rvm use ruby-2.1 --default
</pre>
<p>Test it:</p>
<pre class="literal-block">
ruby -version
</pre>
<p>Thats it. You should now have the Ruby-2.1 version active and you can
start installing gems or start your development with Ruby. If you want
to switch your active Ruby version just use the rvm command and install
a different version and use it.</p>
<p>I hope this helps you to save some time and trouble setting your
development environment up.</p>
</div>
Import self signed certificate on Windows2014-03-15T16:46:00+01:002014-03-15T16:46:00+01:00Dominik Zajactag:www.banym.de,2014-03-15:/import-self-signed-certificate-on-windows.html<p>If you run your ssl services like Email or internal Websites with self
signed certificates you may want to get rid of the certification warning
because your certificate is not signed by an official authority.</p>
<p>First generate a certificate which can be imported by Windows from your
CA file:</p>
<p>openssl …</p><p>If you run your ssl services like Email or internal Websites with self
signed certificates you may want to get rid of the certification warning
because your certificate is not signed by an official authority.</p>
<p>First generate a certificate which can be imported by Windows from your
CA file:</p>
<p>openssl x509 -in <pathtoyourcafile> -outform DER -out ca.cer</p>
<p>This ca.cer file can now be imported as trusted root certificate
authority. It is your own CA you trust here, so keep your CA keyfile
save and secure. Now all certificates generated and signed by this CA
will be accepted by your browser and Email program without showing
further certification warnings. Some software uses there own certificate
management, for example Firefox or Thunderbird. For this tools you need
to import the CA certificate as well because they don't ask the Windows
certificate management.</p>
Problem with booting pfSense from USB Stick2014-02-21T03:19:00+01:002014-02-21T03:19:00+01:00Dominik Zajactag:www.banym.de,2014-02-21:/problem-with-booting-pfsense-from-usb-stick.html<p>On an appliance I reinstalled with pfSense I was facing a problem
booting the system from an usb stick.</p>
<p>The system was not able to mount the partition correctly because it
wasn't present at that time. For me this looks like a timing Problem.
The system booted without a problem …</p><p>On an appliance I reinstalled with pfSense I was facing a problem
booting the system from an usb stick.</p>
<p>The system was not able to mount the partition correctly because it
wasn't present at that time. For me this looks like a timing Problem.
The system booted without a problem if I didn't connect the USB stick
directly. I used an USB-hub while installation and booting from that USB
stick while it was connected through this hub worked like a charm.</p>
<p>My Problem was similar to this. <a class="reference external" href="https://redmine.pfsense.org/issues/495">https://redmine.pfsense.org/issues/495</a></p>
<p>The fix was quite easy. I booted the system using the USB-hub and
modified the loader.conf</p>
<p>I just had to add this at the end of the file:</p>
<pre class="literal-block">
kern.cam.boot_delay=10000
</pre>
<p>and everything worked fine even if I connected the USB stick directly to
the appliance.</p>
<p>Hope this helps you if you're facing a similar problem.</p>
Why Mozilla should make money with advertisment?2014-02-21T03:01:00+01:002014-02-21T03:01:00+01:00Dominik Zajactag:www.banym.de,2014-02-21:/why-mozilla-should-make-money-with-advertisment.html<p>Last week I read some posts about Mozillas thoughts to sell space for
advertisement in their Firefox Browser. Of course I don't like
advertisements in the web. And of course I don't like apps with a lot of
advertisement and much more I don't like to be tracked on every …</p><p>Last week I read some posts about Mozillas thoughts to sell space for
advertisement in their Firefox Browser. Of course I don't like
advertisements in the web. And of course I don't like apps with a lot of
advertisement and much more I don't like to be tracked on every webpage
I go to but Mozilla is offering a service and a product I never paid
something for.</p>
<p>And even if I am not the oldest Internet guru around I can remember
times where Browsers where not included in every computer for free! The
last thing I want to develop is a Browsers in this days. Sorry but you
would have to pay me for that, too. All this standards and made up
standards in the web-javascript-html-css-world would be like a torture
for me. Beside this Mozilla is one of these organizations which made it
form a non-profit-dont-do-anything organizations to a great player in
the Open Source business world. They spent money on developments and
they are working on real world products. Even if they never will fight
the iPhone back with there operation system for mobile devices they are
someone who I would trust in building a good alternative based on open
standards and software.</p>
<p>There are not many companies left who fight for open solutions and
systems. And more a shame is that those who are doing it, are often
blamed for making money. Please stop this give me everything for free
mentality only because you can look into the source code!</p>
<p>Mozilla makes a good job and the organization needs a lot of money.
Beside this it is not healthy to get the biggest amount of money from
Google. Oh and Google makes most of their money out of their
advertisement business.</p>
Latest kernel did not appear to be installed correctly in Fedora 202014-01-31T21:58:00+01:002014-01-31T21:58:00+01:00Dominik Zajactag:www.banym.de,2014-01-31:/latest-kernel-did-not-appear-to-be-installed-correctly.html<p>Due to a known bug in Fedora 20 with some selinux updates I recognized a
connected problem on my machine. While updating some packages I found
this message:</p>
<pre class="literal-block">
Security: kernel-3.12.8-300.fc20.x86_64 is an installed security update
Security: kernel-3.12.7-300.fc20.x86_64 is the currently running version …</pre><p>Due to a known bug in Fedora 20 with some selinux updates I recognized a
connected problem on my machine. While updating some packages I found
this message:</p>
<pre class="literal-block">
Security: kernel-3.12.8-300.fc20.x86_64 is an installed security update
Security: kernel-3.12.7-300.fc20.x86_64 is the currently running version
</pre>
<p>To fix this and get the latest kernel visible in grub and set as default
I needed to reinstall it by running:</p>
<pre class="literal-block">
yum remove kernel-3.12.8-300.fc20
</pre>
<p>and</p>
<pre class="literal-block">
yum update
</pre>
<p>again. After this procedure the new kernel was available.</p>
Qt Creator problem on Fedora 20: couldn't find IGL2014-01-16T21:35:00+01:002014-01-16T21:35:00+01:00Dominik Zajactag:www.banym.de,2014-01-16:/qt-creator-problem-on-fedora-20-couldnt-fing-igl.html<p>To fix the "couldn't find IGL" error you probably get after installing
Qt 5.2 package on Fedora 20 and you try to compile the first project,
you should install the missing mesa package by running the following
install command as root or using sudo:</p>
<pre class="literal-block">
sudo yum install mesa-libGL-devel -y …</pre><p>To fix the "couldn't find IGL" error you probably get after installing
Qt 5.2 package on Fedora 20 and you try to compile the first project,
you should install the missing mesa package by running the following
install command as root or using sudo:</p>
<pre class="literal-block">
sudo yum install mesa-libGL-devel -y
</pre>
<p>This should fix it.</p>
Problems with missing locale files on Fedora 20 made libvirtd service not starting2014-01-15T22:50:00+01:002014-01-15T22:50:00+01:00Dominik Zajactag:www.banym.de,2014-01-15:/problems-with-missing-locale-files-on-fedora-20-made-libvirtd-service-not-starting.html<p>Since I am using Fedora 20 now for a while on two machines I came over
some smaller bugs with my configuration.</p>
<p>I installed my systems using the KDE spin and installed with en_US
language but a german keyboard layout. It looks like something after
installation on my workstation did …</p><p>Since I am using Fedora 20 now for a while on two machines I came over
some smaller bugs with my configuration.</p>
<p>I installed my systems using the KDE spin and installed with en_US
language but a german keyboard layout. It looks like something after
installation on my workstation did go wrong with local generation.
Because I reinstalled the workstation for testing some different
configurations with UEFI, I am quite sure this error is reproducible for
me.</p>
<p>This is what I recognized first when I opened a shell and tried to use
sudo I got messages like this one:</p>
<pre class="literal-block">
-bash: warning: setlocale: LC_CTYPE: cannot change locale (en_US.UTF-8): No such file or directory
-bash: warning: setlocale: LC_COLLATE: cannot change locale (en_US.UTF-8): No such file or directory
-bash: warning: setlocale: LC_MESSAGES: cannot change locale (en_US.UTF-8): No such file or directory
-bash: warning: setlocale: LC_NUMERIC: cannot change locale (en_US.UTF-8): No such file or directory
-bash: warning: setlocale: LC_TIME: cannot change locale (en_US.UTF-8): No such file or director
</pre>
<p>First I didn't give it a lot of attention because the shell worked fine
and I thought I need just to export my correct LC_ALL variable. But
then I got problems running libvirtd service on that machine. It was a
fresh installed Fedora 20 and the libvirtd service didn't want to start
and quite while initialization. After some searching I found that this
two problems are related.</p>
<p>I am not sure what did go wrong while installation or post installation
process but because it is not a common known problem I think it is
related to my configuration regarding language and keyboard layout. But
I have to investigate some more to report a more qualified bug report
than the usual bullsh** I fire them on their bug tool in general.</p>
<p>To fix the problem you need to generate the missing local files. This is
done with different tools on most distributions. Arch, Gentoo and Ubuntu
mostly refer to the locale-gen script which is not present on a default
Fedora installation.</p>
<p>To regenerate your locale on Fedora run this command to fix the problem:</p>
<pre class="literal-block">
localedef -v -c -i en_US -f UTF-8 en_US.UTF-8
</pre>
<p>Of course you need to modify it to your local you want to have or which
is missing on your system.</p>
Upgrade/Reinstall from Fedora 19 to Fedora 202014-01-04T17:54:00+01:002014-01-04T17:54:00+01:00Dominik Zajactag:www.banym.de,2014-01-04:/upgradereinstall-from-fedora-19-to-fedora-20.html<p><a class="reference external image-reference" href="images/fedora.png"><img alt="Fedora Logo" src="images/fedora.png" /></a>Since the Fedora 20 release called Heisenbug is now some
weeks old and the first updates are available I decided to update my
Thinkpad. As described in older posts I prefer to reinstall the system
partition and only keep my /home partition which contains all my stuff.</p>
<p>This time I …</p><p><a class="reference external image-reference" href="images/fedora.png"><img alt="Fedora Logo" src="images/fedora.png" /></a>Since the Fedora 20 release called Heisenbug is now some
weeks old and the first updates are available I decided to update my
Thinkpad. As described in older posts I prefer to reinstall the system
partition and only keep my /home partition which contains all my stuff.</p>
<p>This time I decided to migrate away from the default GNOME based spin of
Fedora to the KDE based. Over the time they made a good job in screwing
all this small GNOME stuff up and since I started a QT based project
some weeks ago I need to install the QT dependencies anyway. But for my
all day work I will still stick with the small i3wm tiling window manger
just because I like the keyboard based window alignment.</p>
<p>The reinstallation works fine, I used the custom partitioning and
reformated only my /boot and / partition. The disk is encrypted and it
worked as expected with Luks through the complete reinstallation
process. Of course you have to enter your pass phrase before you're able
to edit the encrypted partitions and mark them for reformating if you
want to do so. For the data or home partition just set the mount point
and of course don't mark it for reformating if you want to keep your
data. I usually keep only my data partition but this hardly depends on
your setup. Keep in mind that for example the default directory for
virtual machines is located in /var and this is by default part of your
system partition if you don't have a custom partitioning layout. You
should review your existing configuration and files and have a complete
backup before you start with such an update.</p>
<p>My i3wm configuration needs some modifications now because I used some
gnome components in the past to manage sound and brigthness buttons on
my thinkpad. I will provide some documentation for those who might also
want to replace this gnome based stuff with smaller tools or tools which
are incluced in the KDE spin by default.</p>
<p>There is a known bug with the kwallet component which should provide the
safed password at login time for you wifi. It looks like the order for
the component start leads to a annoying second password input window at
login time in KDE but they are working on it to fix it. For some more
information have a look here, on the time I wrote this the fix is on its
way: <a class="reference external" href="https://bugzilla.redhat.com/show_bug.cgi?id=1043195">https://bugzilla.redhat.com/show_bug.cgi?id=1043195</a></p>
<p>The Fedora 20 release for me looks quite good up to now. I installed it
on two of my machines. The Thinkpad works without bigger problems and
only needs my custom configurations applied as usual while on my new
workstation there is a small problem with the initialization with some
of my USB ports at boot time. Devices connected to this ports need to be
reconnect after boot. I had no time to investigate deeper but opened a
(lousy described) bug
(<a class="reference external" href="https://bugzilla.redhat.com/show_bug.cgi?id=1046971">https://bugzilla.redhat.com/show_bug.cgi?id=1046971</a>) , maybe someone
else is facing this problem on an ASUS Z87 Pro Board, too. Up to this
both systems work very nice. Because my Thinkpad has an old dual
graphics solution with an integrated Intel and an dedicated AMD HD 4200
card there where some problems with each distribution in the past. I
decided to disable the AMD graphics in the Bios because I don't need it
and the system works more stable. Some problems which still appears with
Fedora 20 and the enabled switcheroo stuff are disabled displays or
brightness levels or high energy consumption if the AMD graphics is
enabled. For example my display got disabled after I logged in into KDE.
It was enabled the complete boot process but after the powersafe daemon
in KDE started the screen was black and the brightness level on my
console was on minimal level. I didn't figured out how to reset this but
had no time to investigate anyway this problem is gone with disabling
the switchable graphic configuration in Bios.</p>
<p>With the Fedora 20 release some old tools are not installed by default
anymore. The systemd daemon is more widely used and this brings some
changes to the system you should be aware of since this changes will be
included in the complete Linux landscape over the time. Because I use
CentOS and RedHat Enterprise Linux for many production servers I will
write a more detailed blog post to show the different within the system.</p>
Experiences with the Raspberry Pi2013-08-25T23:29:00+02:002013-08-25T23:29:00+02:00Dominik Zajactag:www.banym.de,2013-08-25:/experiences-with-my-raspberry-pi.html<div class="section" id="raspberry-pi-logouseful-configurations-tools-and-more-for-the-raspberry-pi">
<h2><a class="reference external image-reference" href="/images/RaspberryPi_Logo.png"><img alt="Raspberry Pi Logo" src="/images/RaspberryPi_Logo.png" /></a>Useful configurations, tools and more for the Raspberry Pi</h2>
<p>Finally found some time to write down some of my first experiences with
my Raspberry Pi. I own some of this devices to play with them and use
them for home server and run them with Linux to make things easier …</p></div><div class="section" id="raspberry-pi-logouseful-configurations-tools-and-more-for-the-raspberry-pi">
<h2><a class="reference external image-reference" href="/images/RaspberryPi_Logo.png"><img alt="Raspberry Pi Logo" src="/images/RaspberryPi_Logo.png" /></a>Useful configurations, tools and more for the Raspberry Pi</h2>
<p>Finally found some time to write down some of my first experiences with
my Raspberry Pi. I own some of this devices to play with them and use
them for home server and run them with Linux to make things easier in my
daily work. One of this Rasberry Pis is used to display the Zabbix
monitoring and alarm page on a wall mounted TV. A second one is used to
sync backups over a VPN to an encrypted USB disc to have an emergency
backup on a second location. To get started with this devices you find a
lot of tutorials on the internet and the distributions and software for
this wonderful hardware is well documented. This may help you to do the
first steps and find some links. I will update and add some sections
from time to time to this post to share what worked for me.</p>
</div>
<div class="section" id="setup-sd-card">
<h2>Setup SD-Card</h2>
<p>After setting up the SDcard with Archlinux Image for Raspberry Pi I
started to setup my favoured environment. Follow
<a class="reference external" href="http://archlinuxarm.org/platforms/armv6/raspberry-pi">this</a>
instruction on the Archlinux website.</p>
</div>
<div class="section" id="update-system">
<h2>Update system:</h2>
<p>First update all installed software:</p>
<pre class="literal-block">
pacman -Syu
</pre>
<p>This should be done if you plan to run your Raspberry Pi as a home
server or available over the Internet. Reboot thte system to be sure the
last kernel is running.</p>
<pre class="literal-block">
reboot
</pre>
</div>
<div class="section" id="install-some-useful-system-tools">
<h2>Install some useful system tools:</h2>
<pre class="literal-block">
pacman -S htop vim wget
</pre>
</div>
<div class="section" id="ssh-key-authentication-and-x11-forwarding">
<h2>SSH key authentication and X11 forwarding:</h2>
<p>Per default the X11 forwarding is disabled and Password Authentication
is enabled /etc/ssh/sshd_config. Because I want to test the X11 tools I
installed on the PI for my Zabbix monitoring monitor, I had to enable
this feature. I don't use password authentication and disable it on my
systems.</p>
<p>Enable X11 forwarding:</p>
<pre class="literal-block">
X11Forwarding yes
</pre>
<p>Disabling password authentication:</p>
<pre class="literal-block">
PasswordAuthentication yes
</pre>
</div>
<div class="section" id="modify-hdmi-output-to-fit-to-monitor">
<h2>Modify HDMI output to fit to monitor</h2>
<p>My Raspberry Pi is used with a Phillips television to show the Zabbix
monitoring webpage for my servers. The pi is connected directly with
HDMI to the monitor. The default configuration does not use the HD ready
resolution which is 1080i if I am not wrong. To fix this I had to modify
the /boot/config.txt file to set the video resolution. A good overview
over all configuration variables is available
<a class="reference external" href="http://elinux.org/RPiconfig#Video_mode_options">here.</a> For me
hdmi_mode=5 1080i 60Hz works to use a better resolution but the screen
still did not fit completely. To fix this I had to play with the
overscan_top and overscan_bottom values. I had to choose quite high
values like 25 and 30 for the variables to make the screen fit correctly
and show the complete information but at the end it fixed the cut up
picture.</p>
</div>
Upgrade/Reinstall from Fedora17 to Fedora192013-08-18T14:38:00+02:002013-08-18T14:38:00+02:00Dominik Zajactag:www.banym.de,2013-08-18:/upgradereinstall-from-fedora17-to-fedora19.html<p><a class="reference external image-reference" href="http://fedoraproject.org/"><img alt="Fedora Logo" src="images/fedora.png" /></a></p>
<p>Some weeks ago I finally reinstalled my Lenovo T-500 with Fedora 19
since Fedora 17 is end of life now. For Fedora 17 I built my own version
of some packages like the i3wm tailing window manager. Fedora 18 and the
new Fedora 19 include an actual i3wm with cairo …</p><p><a class="reference external image-reference" href="http://fedoraproject.org/"><img alt="Fedora Logo" src="images/fedora.png" /></a></p>
<p>Some weeks ago I finally reinstalled my Lenovo T-500 with Fedora 19
since Fedora 17 is end of life now. For Fedora 17 I built my own version
of some packages like the i3wm tailing window manager. Fedora 18 and the
new Fedora 19 include an actual i3wm with cairo support enabled. Some
days ago a new version 4.6 of i3wm was released, I will backport this
version for Fedora 19 within the next two weeks and add it to my yum
repository.</p>
<p>For all users of my Fedora 17 yum repository I would advice you to
update to Fedora 19 or at least Fedora 18, too.</p>
<p>On my T-500 I was facing a problem with the switcheroo configuration. I
disabled the ATI graphic card by blacklisting the radeon kernel module.
For me it looked like the order in which the graphic card was enabled at
boot time was not persistent. This did lead to problems with the splash
screen and X. I planed to write down how I disabled the module
permanently to have it documented for other users, if you need the
information now, send me an email.</p>
<p>Btw. I did not upgrade my system, I did an reinstall and reused my home
partition. This is the most easy way for me to keep up to date with
Fedora while keeping my data. I try to store everything important in my
home directory and make a backup of all deeper system changes. Since
there was no need to upgrade to Fedora18 this was even the only way to
jump to Fedora 19 without hassle.</p>
<p>The new version works now a few weeks and got its first updates and
kernel updates. After fixing the problem with my graphic cards the
system works very stable. I am using the Gnome flavor but instead of
gnome I am using i3wm as my favorite window manager. Some of the older
gnome tools changed and because of this I am no longer able to use them
to control for example the function keys. I did not investigate to fix
this problem. It looks like the way Gnome controls ACPI, function keys
and some more power saving functions changed in a bigger way. Since I am
not really interested in reverse engineer this by my self I will wait
for some posts from other Fedora i3wm users how to do this stuff.</p>
<p>Here is a very good post for all Fedora i3wm users:
<a class="reference external" href="http://blog.seventhmoon.info/blog/2013/07/05/schrodingers-i3wm/">http://blog.seventhmoon.info/blog/2013/07/05/schrodingers-i3wm/</a></p>
Try the HiveMQ MQTT broker on CentOS 6.x2013-06-18T22:47:00+02:002013-06-18T22:47:00+02:00Dominik Zajactag:www.banym.de,2013-06-18:/try-the-hivemq-mqtt-broker-on-centos-6-x.html<div class="section" id="what-is-mqtt">
<h2>What is MQTT?</h2>
<div class="line-block">
<div class="line">MQTT is the short name for MQ Telemetry Transport. It is a TCP based protocol which implements the publish and subscribe pattern. While the pubish and subscribe method became popular these days for mobile devices MQTT is one of the protocols becoming more and more popular. Actually …</div></div></div><div class="section" id="what-is-mqtt">
<h2>What is MQTT?</h2>
<div class="line-block">
<div class="line">MQTT is the short name for MQ Telemetry Transport. It is a TCP based protocol which implements the publish and subscribe pattern. While the pubish and subscribe method became popular these days for mobile devices MQTT is one of the protocols becoming more and more popular. Actually MQTT is becoming an OASIS standard for the Internet of Things within the next few months.</div>
<div class="line-block">
<div class="line">Some more information are available here:</div>
</div>
</div>
<ul class="simple">
<li><a class="reference external" href="http://www.mqtt.org">http://www.mqtt.org</a></li>
<li><a class="reference external" href="http://en.wikipedia.org/wiki/MQ_Telemetry_Transport">http://en.wikipedia.org/wiki/MQ_Telemetry_Transport</a></li>
</ul>
</div>
<div class="section" id="what-is-hivemq">
<h2>What is HiveMQ</h2>
<p>HiveMQ is a MQTT broker which basically is the server part of MQTT. All
messages in a MQTT communication are handled by a broker, it is the key
component for this type of communication. HiveMQ is a Java based broker
software with some extended functionality like building clusters and the
possibility to easily extend the functionality with plugins. It is free
for personal non-commercial use up to 25 concurrent connected clients.
Check out the <a class="reference external" href="http://www.hivemq.com">HiveMQ Website</a> for all its
features and documentation.</p>
</div>
<div class="section" id="requirements">
<h2>Requirements</h2>
<pre class="literal-block">
CentOS 6.x
Java VM (OpenJDK 1.7)
SELinux should be off if you don't need it.
Allow incomming connections to TCP port 1883
</pre>
</div>
<div class="section" id="install-openjdk-1-7">
<h2>Install OpenJDK 1.7</h2>
<pre class="literal-block">
yum install java-1.7.0-openjdk.x86_64
</pre>
</div>
<div class="section" id="download-extract-and-run-hivemq">
<h2>Download, extract and run HiveMQ</h2>
<div><pre class="literal-block">
wget --content-disposition http://www.hivemq.com/downloads/releases/latest
unzip hivemq-1.3.0.zip
cd hivemq-1.3.0/
chmod 755 start.sh
./start.sh
</pre>
</div><p>The output should look something like this:</p>
<pre class="literal-block">
-------------------------------------------------------------------------
_ _ _ __ __ ____
| | | |(_) | \/ | / __ \
| |__| | _ __ __ ___ | \ / || | | |
| __ || |\ \ / // _ \| |\/| || | | |
| | | || | \ V /| __/| | | || |__| |
|_| |_||_| \_/ \___||_| |_| \___\_\
-------------------------------------------------------------------------
HiveMQ Start Script for Linux/Unix v1
-------------------------------------------------------------------------
Checking if Java is installed
Java was found. Starting HiveMQ....
-------------------------------------------------------------------------
No HIVEMQ_HOME is set, using default
Searching for HiveMQ in /hivemq-1.3.0....
DONE!
Starting HiveMQ...
-------------------------------------------------------------------------
2013-06-18 22:35:29,874 INFO - HiveMQ home directory: /hivemq-1.3.0
2013-06-18 22:35:29,879 INFO - Starting HiveMQ Server
2013-06-18 22:35:33,509 INFO - Activating statistics callbacks with an interval of 60 seconds
2013-06-18 22:35:33,510 INFO - Activating $SYS topics with an interval of 60 seconds
2013-06-18 22:35:33,812 WARN - No license file found. Using free personal licensing with restrictions to 25 connections.
2013-06-18 22:35:34,483 INFO - Starting on address 0.0.0.0 and port 1883
2013-06-18 22:35:34,514 INFO - Loaded Plugin Access Log Plugin - v1.0-SNAPSHOT
2013-06-18 22:35:34,516 INFO - Started HiveMQ in 4646ms
</pre>
<p>And that's it! Try to connect your client to your ip on port 1883 and
have fun. If you want to use a plugin, just extract it into your plugin
folder and restart HiveMQ.</p>
</div>
i3 tiling window manager version 4.5 released2013-03-13T23:14:00+01:002013-03-13T23:14:00+01:00Dominik Zajactag:www.banym.de,2013-03-13:/i3-tiling-window-manager-version-4-5-released.html<p><a class="reference external image-reference" href="http://i3wm.org/"><img alt="i3wm" src="images/i3wm.png" /></a></p>
<p>The new version 4.5 of i3 and i3status 2.7 is available for Fedora 17
over my repository. Short how to update i3wm on Fedora17 can be found
<a class="reference external" href="http://www.banym.de/linux/fedora/build-i3-improved-tailing-wm-version-4-4-package-for-fedora-17">here</a>.</p>
<p>The detailed release notes are available
here:<a class="reference external" href="http://%20http://i3wm.org/downloads/RELEASE-NOTES-4.5.txt">http://i3wm.org/downloads/RELEASE-NOTES-4.5.txt</a></p>
<p>If your using Fedora 18 there …</p><p><a class="reference external image-reference" href="http://i3wm.org/"><img alt="i3wm" src="images/i3wm.png" /></a></p>
<p>The new version 4.5 of i3 and i3status 2.7 is available for Fedora 17
over my repository. Short how to update i3wm on Fedora17 can be found
<a class="reference external" href="http://www.banym.de/linux/fedora/build-i3-improved-tailing-wm-version-4-4-package-for-fedora-17">here</a>.</p>
<p>The detailed release notes are available
here:<a class="reference external" href="http://%20http://i3wm.org/downloads/RELEASE-NOTES-4.5.txt">http://i3wm.org/downloads/RELEASE-NOTES-4.5.txt</a></p>
<p>If your using Fedora 18 there should be some updated packages available
in the main repositories.</p>
Remove the last installed packages2013-02-23T17:49:00+01:002013-02-23T17:49:00+01:00Dominik Zajactag:www.banym.de,2013-02-23:/remove-the-last-installed-packages.html<p>While I planed to install Skype on my 64bit Fedora machine I had to
install a lot of i686 packages which I want to delete after I came to
the conclusion Skype is not worth to be installed if they are not able
to build a 64bit package.</p>
<p>To remove …</p><p>While I planed to install Skype on my 64bit Fedora machine I had to
install a lot of i686 packages which I want to delete after I came to
the conclusion Skype is not worth to be installed if they are not able
to build a 64bit package.</p>
<p>To remove the last 49 packages I used this command:</p>
<div><pre class="literal-block">
yum remove `tail -n 49 /var/log/yum.log | cut -d \ -f 5`
</pre>
</div><p>Thanks to: <a class="reference external" href="http://raftaman.net/?p=987">http://raftaman.net/?p=987</a></p>
Configure Trackpoint scrolling permanent in Fedora 17, Fedora 18, Fedora 19, Fedora 202013-01-04T20:21:00+01:002013-01-04T20:21:00+01:00Dominik Zajactag:www.banym.de,2013-01-04:/configure-trackpoint-scrolling-permanent-in-fedora-17.html<p>I used gpointing-device-settings tool to configure my trackpoint
scrolling but the changes where not persistent and so I had to configure
it manually.</p>
<p>Create /etc/X11/xorg.conf.d/01-trackpoint.conf:</p>
<pre class="literal-block">
Section "InputClass"
Identifier "Wheel Emulation"
MatchIsPointer "on"
MatchProduct "TrackPoint"
Option "EmulateWheelButton" "2"
Option "EmulateWheel" "on"
EndSection
</pre>
<p>After restarting X …</p><p>I used gpointing-device-settings tool to configure my trackpoint
scrolling but the changes where not persistent and so I had to configure
it manually.</p>
<p>Create /etc/X11/xorg.conf.d/01-trackpoint.conf:</p>
<pre class="literal-block">
Section "InputClass"
Identifier "Wheel Emulation"
MatchIsPointer "on"
MatchProduct "TrackPoint"
Option "EmulateWheelButton" "2"
Option "EmulateWheel" "on"
EndSection
</pre>
<p>After restarting X or rebooting the configuration should work and
scrolling using the middle button of the trackpoint should work fine.</p>
<div class="line-block">
<div class="line">References:</div>
<div class="line"><a class="reference external" href="http://fedoraproject.org/wiki/Input_device_configuration">http://fedoraproject.org/wiki/Input_device_configuration</a> <<a class="reference external" href="http://http://fedoraproject.org/wiki/Input_device_configuration">http://http://fedoraproject.org/wiki/Input_device_configuration</a>></div>
</div>
<p>Update:</p>
<p>Since I updated/reinstalled my system from Fedora 17 (except the
horrible 18 release) up to Fedora 20 this configuration works on all
Fedora releases with my Thinkpad.</p>
Build i3 improved tailing wm version 4.4 package for Fedora 172013-01-01T19:43:00+01:002013-01-01T19:43:00+01:00Dominik Zajactag:www.banym.de,2013-01-01:/build-i3-improved-tailing-wm-version-4-4-package-for-fedora-17.html<p>While I tried to build the new <a class="reference external" href="http://i3wm.org">i3</a> version 4.4 for
Fedora I came over the problem that cairo seems to be build without xcb
support in Fedora 17. I built a version of cairo with xcb enabled and a
i3 4.4 rpm file for Fedora 17. You …</p><p>While I tried to build the new <a class="reference external" href="http://i3wm.org">i3</a> version 4.4 for
Fedora I came over the problem that cairo seems to be build without xcb
support in Fedora 17. I built a version of cairo with xcb enabled and a
i3 4.4 rpm file for Fedora 17. You can install it via my Fedora 17
repository. Up to now there is only a x86_64 available.</p>
<p>Create a repository file:</p>
<pre class="literal-block">
sudo vim /etc/yum.repos.d/banym.repo
</pre>
<p>copy & paste:</p>
<pre class="literal-block">
[banym]
name=Banym repository
baseurl=http://yum.banym.de/Fedora/17/x86_64
enabled=1
</pre>
<p>Now update i3, i3status and your cairo version.</p>
<pre class="literal-block">
sudo yum --nogpgcheck update i3 i3status cairo i3lock
</pre>
<p>Because my packages are not signed up to now you need to use the
--nogpgcheck option.</p>
<div class="line-block">
<div class="line">Update:</div>
<div class="line-block">
<div class="line">Thanks for the hint with i3lock. Now there is an i3lock version with cairo enabled, too.</div>
</div>
</div>
E17 window manager with Fedora 172013-01-01T13:00:00+01:002013-01-01T13:00:00+01:00Dominik Zajactag:www.banym.de,2013-01-01:/e17-window-manager-with-fedora-17.html<p>The <a class="reference external" href="http://www.enlightenment.org/">E17 project</a> released a stable
version of its window manager. If you plan to use it with Fedora you
have to use the repository provided via the OpenSuSE buildservice. While
the first versions of the packages didn't work on my Fedora 17 box they
now do. This instructions should …</p><p>The <a class="reference external" href="http://www.enlightenment.org/">E17 project</a> released a stable
version of its window manager. If you plan to use it with Fedora you
have to use the repository provided via the OpenSuSE buildservice. While
the first versions of the packages didn't work on my Fedora 17 box they
now do. This instructions should help you to install E17 on your Fedora
system.</p>
<p>Create a new repository file with vim:</p>
<pre class="literal-block">
sudo vim /etc/yum.repos.d/e17.repo
</pre>
<p>and paste the following content into it:</p>
<pre class="literal-block">
[X11_Enlightenment_Factory]
name=Enlightenment 17 and EFL devel project (Fedora_17)
type=rpm-md
baseurl=http://download.opensuse.org/repositories/X11:/Enlightenment:/Factory/Fedora_17/
gpgcheck=1
gpgkey=http://download.opensuse.org/repositories/X11:/Enlightenment:/Factory/Fedora_17/repodata/repomd.xml.key
enabled=1
</pre>
<p>Now you should be able to install the E17 package using yum:</p>
<pre class="literal-block">
sudo yum install e17
</pre>
<p>Logout and if you're using GDM for session management choose E17 as your
session window manager and log in again. Follow the wizard to setup E17
and enjoy it.</p>
<p>More detailed information about E17 worth reading it can be found here:
<a class="reference external" href="http://http://www.enlightenment.org/p.php?p=about/e17&l=en">http://www.enlightenment.org/p.php?p=about/e17&l=en</a></p>
Add mp3 support for Fedora 172012-11-14T09:40:00+01:002012-11-14T09:40:00+01:00Dominik Zajactag:www.banym.de,2012-11-14:/add-mp3-support-for-fedora-17.html<p>Because of licensing reasons there are is no codex for the mp3 format
included in Fedora by default. If you want to play mp3 files you need
the following additional packages:</p>
<p>gstreamer-plugins-ugly gstreamer-plugins-bad gstreamer-ffmpeg</p>
<p>This packages are available in the RPMForge repository. Install this two
RPMForge repositories:</p>
<div class="line-block">
<div class="line">rpm -Uvh <a class="reference external" href="http://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-stable.noarch.rpm">http …</a></div></div><p>Because of licensing reasons there are is no codex for the mp3 format
included in Fedora by default. If you want to play mp3 files you need
the following additional packages:</p>
<p>gstreamer-plugins-ugly gstreamer-plugins-bad gstreamer-ffmpeg</p>
<p>This packages are available in the RPMForge repository. Install this two
RPMForge repositories:</p>
<div class="line-block">
<div class="line">rpm -Uvh <a class="reference external" href="http://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-stable.noarch.rpm">http://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-stable.noarch.rpm</a></div>
<div class="line-block">
<div class="line">rpm -Uvh <a class="reference external" href="http://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-stable.noarch.rpm">http://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-stable.noarch.rpm</a></div>
</div>
</div>
<p>Now you should be able to install the needed packages using yum:</p>
<p>yum install gstreamer-plugins-ugly gstreamer-plugins-bad
gstreamer-ffmpeg</p>
<p>Now you should be able to play mp3.</p>
PDF and AI rendering problem with Centos 6 and Typo32012-11-11T13:17:00+01:002012-11-11T13:17:00+01:00Dominik Zahactag:www.banym.de,2012-11-11:/pdf-and-ai-rendering-problem-with-centos-6-and-typo3.html<p>It took me some time to fix a problem regarding the PDF and AI rendering
in my typo3 instance. The install tools showed me that every image
calculation was working except PDF and AI. Next to the test within the
install tool there is the command shown which worked fine …</p><p>It took me some time to fix a problem regarding the PDF and AI rendering
in my typo3 instance. The install tools showed me that every image
calculation was working except PDF and AI. Next to the test within the
install tool there is the command shown which worked fine on the command
line.The problem is well known but if you're using your own server I
didn't find a working solution.</p>
<p>First check if everything is installed.</p>
<ul class="simple">
<li>GraphicsMagick or ImageMagick</li>
<li>GhostScript</li>
</ul>
<p>The Problem located in the
/usr/lib64/GraphicsMagick-1.3.17/config/delegates.mgk. Replace the gs
command with the full path /usr/bin/gs:</p>
<pre class="literal-block">
<?xml version="1.0"?>
<!--
Delegate command file.
Commands which specify
decode="in_format" encode="out_format"
specify the rules for converting from in_format to out_format
These rules may be used to translate directly between formats.
Commands which specify only
decode="in_format"
specify the rules for converting from in_format to some format that
GraphicsMagick will automatically recognize. These rules are used to
decode formats.
Commands which specify only
encode="out_format"
specify the rules for an "encoder" which may accept any input format.
For delegates other than gs-color, gs-mono, and mpeg-encode
the substitution rules are as follows:
%i input image filename
%o output image filename
%u unique temporary filename
%z secondary unique temporary filename
%# input image signature
%b image file size
%c input image comment
%d original filename directory part
%e original filename extension part
%f original filename
%t original filename top (base) part
%g window group
%h image rows (height)
%k input image number colors
%l input image label
%m input image format ("magick")
%n input image number of scenes
%p page number
%q input image depth
%r input image storage class, colorspace, and matte
%s scene number
%w image columns (width)
%x input image x resolution
%y input image y resolution
%[ input image attribute (e.g. "%[EXIF:Orientation]")
%% pass through literal %
Under Unix, all text (non-numeric) substitutions should be
surrounded with double quotes for the purpose of security, and
because any double quotes occuring within the substituted text will
be escaped using a backslash.
Commands (excluding file names) containing one or more of the
special characters ";&|><" (requiring that multiple processes be
executed) are executed via the Unix shell with text substitutions
carefully excaped to avoid possible compromise. Otherwise, commands
are executed directly without use of the Unix shell.
Use 'gm convert -list delegates' to verify how the contents of this
file has been parsed.
-->
<delegatemap>
<delegate decode="autotrace" stealth="True" command='"autotrace" -output-format svg -output-file "%o" "%i"' />
<delegate decode="browse" stealth="True" command='"xdg-open" "http://www.GraphicsMagick.org/" &' />
<delegate decode="cgm" command='"ralcgm" -d ps < "%i" > "%o" 2>/dev/null' />
<delegate decode="dcraw" command='"dcraw" -c -w "%i" > "%o"' />
<delegate decode="dot" command='"dot" -Tps "%i" -o "%o"' />
<delegate decode="dvi" command='"dvips" -q -o "%o" "%i"' />
<delegate decode="edit" stealth="True" command='"xterm" -title "Edit Image Comment" -e vi "%o"' />
<delegate decode="emf" command='"wmf2eps" -o "%o" "%i"' />
<delegate decode="eps" encode="pdf" mode="bi" command='"/usr/bin/gs" -q -dBATCH -dMaxBitmap=50000000 -dNOPAUSE -sDEVICE=pdfwrite "-sOutputFile=%o" -- "%i" -c quit' />
<delegate decode="eps" encode="ps" mode="bi" command='"/usr/bin/gs" -q -dBATCH -dMaxBitmap=50000000 -dNOPAUSE -sDEVICE=pswrite "-sOutputFile=%o" -- "%i" -c quit' />
<delegate decode="fig" command='"fig2dev" -L ps "%i" "%o"' />
<delegate decode="gplt" command='"echo" "set size 1.25,0.62; set terminal postscript portrait color solid; set output \"%o\"; load \"%i\"" > "%u"; "gnuplot" "%u"' />
<!-- Read monochrome Postscript, EPS, and PDF -->
<delegate decode="gs-mono" stealth="True" command='"/usr/bin/gs" -q -dBATCH -dMaxBitmap=50000000 -dNOPAUSE -sDEVICE=pbmraw -dTextAlphaBits=%u -dGraphicsAlphaBits=%u -r%s %s "-sOutputFile=%s" -- "%s" -c quit' />
<!-- Read grayscale Postscript, EPS, and PDF -->
<delegate decode="gs-gray" stealth="True" command='"/usr/bin/gs" -q -dBATCH -dMaxBitmap=50000000 -dNOPAUSE -sDEVICE=pgmraw -dTextAlphaBits=%u -dGraphicsAlphaBits=%u -r%s %s "-sOutputFile=%s" -- "%s" -c quit' />
<!-- Read colormapped Postscript, EPS, and PDF -->
<delegate decode="gs-palette" stealth="True" command='"/usr/bin/gs" -q -dBATCH -dMaxBitmap=50000000 -dNOPAUSE -sDEVICE=pcx256 -dTextAlphaBits=%u -dGraphicsAlphaBits=%u -r%s %s "-sOutputFile=%s" -- "%s" -c quit' />
<!-- Read color Postscript, EPS, and PDF -->
<delegate decode="gs-color" stealth="True" command='"/usr/bin/gs" -q -dBATCH -dMaxBitmap=50000000 -dNOPAUSE -sDEVICE=ppmraw -dTextAlphaBits=%u -dGraphicsAlphaBits=%u -r%s %s "-sOutputFile=%s" -- "%s" -c quit' />
<!-- Read color+alpha Postscript, EPS, and PDF -->
<delegate decode="gs-color+alpha" stealth="True" command='"/usr/bin/gs" -q -dBATCH -dMaxBitmap=50000000 -dNOPAUSE -sDEVICE=pngalpha -dTextAlphaBits=%u -dGraphicsAlphaBits=%u -r%s %s "-sOutputFile=%s" -- "%s" -c quit' />
<!-- Read CMYK Postscript, EPS, and PDF -->
<delegate decode="gs-cmyk" stealth="True" command='"/usr/bin/gs" -q -dBATCH -dMaxBitmap=50000000 -dNOPAUSE -sDEVICE=pam -dTextAlphaBits=%u -dGraphicsAlphaBits=%u -r%s %s "-sOutputFile=%s" -- "%s" -c quit' />
<delegate decode="hpg" command='"hp2xx" -q -m eps -f `basename "%o"` "%i" && mv -f `basename "%o"` "%o"' />
<delegate decode="hpgl" command='"hp2xx" -q -m eps -f `basename "%o"` "%i" && mv -f `basename "%o"` "%o"' />
<!-- Read HTML file -->
<delegate decode="htm" command='"html2ps" -U -o "%o" "%i"' />
<!-- Read HTML file -->
<delegate decode="html" command='"html2ps" -U -o "%o" "%i"' />
<delegate decode="ilbm" command='"ilbmtoppm" "%i" > "%o"' />
<!-- Read UNIX manual page -->
<delegate decode="man" command='"groff" -man -Tps "%i" > "%o"' />
<!-- Read MPEG file using mpeg2decode -->
<delegate decode="mpeg" command='"mpeg2decode" -q -b "%i" -f -o3 "%u%%05d"; gm convert -temporary "%u*.ppm" "miff:%o" ; rm -f "%u"*.ppm ' />
<!-- Write MPEG file using mpeg2encode -->
<delegate encode="mpeg-encode" stealth="True" command='"mpeg2encode" "%i" "%o"' />
<!-- Convert PDF to Encapsulated Poscript using Ghostscript -->
<delegate decode="pdf" encode="eps" mode="bi" command='"/usr/bin/gs" -q -dBATCH -dMaxBitmap=50000000 -dNOPAUSE -sDEVICE=epswrite "-sOutputFile=%o" -- "%i" -c quit' />
<!-- Convert PDF to Postcript using Ghostscript -->
<delegate decode="pdf" encode="ps" mode="bi" command='"/usr/bin/gs" -q -dBATCH -dMaxBitmap=50000000 -dNOPAUSE -sDEVICE=pswrite "-sOutputFile=%o" -- "%i" -c quit' />
<!-- Convert PNM file to ILBM format using ppmtoilbm -->
<delegate decode="pnm" encode="ilbm" mode="encode" command='"ppmtoilbm" -24if "%i" > "%o"' />
<delegate decode="pnm" encode="launch" mode="encode" command='"gimp" "%i"' />
<delegate decode="pnm" encode="win" mode="encode" command='"gm" display -immutable "%i"' />
<!-- Read Persistance Of Vision file using povray -->
<delegate decode="pov" command='povray "+i"%i"" +o"%o" +fn%q +w%w +h%h +a -q9 -kfi"%s" -kff"%n"
"gm" convert -adjoin "%o*.png" "%o"' />
<delegate decode="ps" encode="eps" mode="bi" command='"/usr/bin/gs" -q -dBATCH -dMaxBitmap=50000000 -dNOPAUSE -sDEVICE=epswrite "-sOutputFile=%o" -- "%i" -c quit' />
<delegate decode="ps" encode="pdf" mode="bi" command='"/usr/bin/gs" -q -dBATCH -dMaxBitmap=50000000 -dNOPAUSE -sDEVICE=pdfwrite "-sOutputFile=%o" -- "%i" -c quit' />
<delegate decode="ps" encode="print" mode="encode" command='"no -c -s" "%i"' />
<!-- Read Radiance file using ra_ppm -->
<delegate decode="rad" command='"ra_ppm" -g 1.0 "%i" "%o"' />
<!-- Convert RGBA file to URT RLE using rawtorle -->
<delegate decode="rgba" encode="rle" mode="encode" command='"gm" mogrify -flip -size %wx%h "rgba:%i"
"rawtorle" -w %w -h %h -n 4 -o "%o" "%i"' />
<!-- Scan an image using Sane's scanimage -->
<delegate decode="scan" command='"scanimage" -d "%i" > "%o"' />
<!-- Read HTML file -->
<delegate decode="shtml" command='"html2ps" -U -o "%o" "%i"' />
<!-- Convert ASCII text to Postscript using 'enscript' command -->
<delegate decode="txt" encode="ps" mode="bi" command='"enscript" -o "%o" "%i"' />
<!-- Render WMF file using wmf2eps (fallback in case libwmf not available) -->
<delegate decode="wmf" command='"wmf2eps" -o "%o" "%i"' />
<delegate encode="show" stealth="True" command='"gm" display -immutable -delay 0 -window_group %g -title "%l of %f" "tmp:%o" &' />
</delegatemap>
</pre>
Add button to Finder for open iTerm or Terminal here2012-10-08T22:17:00+02:002012-10-08T22:17:00+02:00Dominik Zajactag:www.banym.de,2012-10-08:/add-button-to-finder-for-open-iterm-or-terminal-here.html<p>A very useful addon for Finder on Mac OS X is the cdto application. It's
a very basic gadget which helps you open a terminal in the current
opened folder. When I am navigating through my filesystem for example
browsing a folder of sourcecode or reviewing an extracted tarball you …</p><p>A very useful addon for Finder on Mac OS X is the cdto application. It's
a very basic gadget which helps you open a terminal in the current
opened folder. When I am navigating through my filesystem for example
browsing a folder of sourcecode or reviewing an extracted tarball you
want to have a terminal with an shell opened at the current destination.
This little tool helps you to do this. It supports iTerm2 and the
default Terminal of course. Download it
<a class="reference external" href="http://code.google.com/p/cdto/">here</a>.</p>
<p><a class="reference external image-reference" href="images/cdto.png"><img alt="finder with cdto included" src="images/cdto.png" /></a></p>
Wireshark with XQuartz on Mac OS X Moutain Lion2012-09-18T16:50:00+02:002012-09-18T16:50:00+02:00Dominik Zajactag:www.banym.de,2012-09-18:/wireshark-with-xquartz-on-mac-os-x-moutain-lion.html<p>Since Apple removed the X11 support you may faced some problems with X11
based applications. Wireshark is one of those applications which made
trouble on my mac. To fix the problem you need to install XQuartz.</p>
<p>Download the lates <a class="reference external" href="http://www.wireshark.org/">Wireshark</a> version and
run it. It should come up with and …</p><p>Since Apple removed the X11 support you may faced some problems with X11
based applications. Wireshark is one of those applications which made
trouble on my mac. To fix the problem you need to install XQuartz.</p>
<p>Download the lates <a class="reference external" href="http://www.wireshark.org/">Wireshark</a> version and
run it. It should come up with and selection window for your X11
application. Click on browse and navigate to your application directory.
Open the directory utilities and select XQuartz. Now quit Wireshark
using cmd + q and start it again. It can take a second but now your
Wireshark should work with Moutain Lion.</p>
First very basic MQTT Mac App2012-07-22T00:17:00+02:002012-07-22T00:17:00+02:00Dominik Zajactag:www.banym.de,2012-07-22:/first-very-basic-mqtt-mac-app.html<p>Since I had to bring my self up to speed with all this fancy M2M stuff
our developers doing right now I started a small project by my own to
learn something about <a class="reference external" href="http://mqtt.org">MQTT</a> and M2M communication.</p>
<p>My application is a very basic Objective-C application for Mac based on
the …</p><p>Since I had to bring my self up to speed with all this fancy M2M stuff
our developers doing right now I started a small project by my own to
learn something about <a class="reference external" href="http://mqtt.org">MQTT</a> and M2M communication.</p>
<p>My application is a very basic Objective-C application for Mac based on
the <a class="reference external" href="http://www.eclipse.org/paho/">Eclipse PAHO library</a>. This
library is open source and implements the MQTT protocol. I am not a
very good and experienced programmer please feel free to implement this
in a better and smartert way. My few lines of code are free for use on
<a class="reference external" href="http://github.com/dc-square/SimpleMessage">github</a> and open source
under the Apache License.</p>
<p>To test this application I am hosting a public
<a class="reference external" href="http://mosquitto.org/">mosquitto</a> broker sponsored by
<a class="reference external" href="http://www.baycix.de/en">BayCIX</a> running a nice
<a class="reference external" href="http://www.mqtt-dashboard.com">mqtt-dashboard</a> to monitoring what is
going on on the broker developed by a colleague of mine at
<a class="reference external" href="http://www.dc-square.de/index-en.html">dc-square</a>.</p>
<p>Here what it looks like up to know after a few hours of coding:</p>
<p><a class="reference external image-reference" href="images/SimpleMessage-v0.1.1.png"><img alt="SimpleMessage MQTT Client v0.1.1" src="images//SimpleMessage-v0.1.1.png" /></a></p>
<p>Future releases will be more generic and with some more preferences to
test MQTT and the broker in a more experienced way:</p>
<ul class="simple">
<li>SSL encryption</li>
<li>User authentication</li>
<li>Connection options</li>
<li>Basic performance measuring</li>
</ul>
<div class="section" id="update-v0-1-5">
<h2>Update v0.1.5</h2>
<p>New version with some bug fixes and some small enhancements released.</p>
<p><a class="reference external image-reference" href="images/SimpleMessage-v0.1.5.png"><img alt="SimpleMessage MQTT Mac OS X Client" src="images/SimpleMessage-v0.1.5.png" /></a></p>
<p>Download SimpleMessage v0.1.5
<a class="reference external" href="http://www.banym.de/downloads/SimpleMessage-v0.1.5.zip">here</a>.</p>
</div>
Install Eclipse C/C++ Juno on Mac OS X2012-07-07T13:05:00+02:002012-07-07T13:05:00+02:00Dominik Zajactag:www.banym.de,2012-07-07:/install-eclipse-cc-juno-on-mac-os-x.html<div class="section" id="description">
<h2>Description</h2>
<p>This tutorial will explain how to install and use Eclipse C/C++ with Mac
OS X. I wrote a <a class="reference external" href="http://www.banym.de/eclipse/install-eclipse-cdt-on-windows-7">tutorial for Windows
7</a> some
time ago because you need to install some additional software to be able
to compile your programs. With Mac OS X this should be more …</p></div><div class="section" id="description">
<h2>Description</h2>
<p>This tutorial will explain how to install and use Eclipse C/C++ with Mac
OS X. I wrote a <a class="reference external" href="http://www.banym.de/eclipse/install-eclipse-cdt-on-windows-7">tutorial for Windows
7</a> some
time ago because you need to install some additional software to be able
to compile your programs. With Mac OS X this should be more easier if
you already have Xcode installed.</p>
</div>
<div class="section" id="prepare-your-system">
<h2>Prepare your system</h2>
<p>Apple offers you a free collection of development tools called Xcode. It
although contains a IDE for Objective C and iOS development. Beside this
it tools there are a lot of useful tools like different version control
systems and console tools and very important the compilers. Because this
is packed and very easy to install you should go to the AppStore and
install Xcode if you don't have it yet.</p>
<p>You will need to have Java installed on your Mac OS X as well but this
is just a click if you try to run a Java application the first time.</p>
<p><a class="reference external image-reference" href="images/Xcode-Appstore.png"><img alt="Xcode Appstore Screenshot" src="images/Xcode-Appstore.png" /></a></p>
</div>
<div class="section" id="download-eclipse-cdt-for-mac-os-x">
<h2>Download Eclipse CDT for Mac OS X</h2>
<p>Download the Eclipse CDT version of Eclipse from eclipse.org. I prefer
the 64bit version.</p>
<p><a class="reference external image-reference" href="images/Eclipse-CDT-64bit.png"><img alt="Eclipse CDT MacOSX 64bit version" src="images/Eclipse-CDT-64bit.png" /></a></p>
<p>Extract the downloaded archive and move the eclipse folder to your
Application directory. I renamed the folder to eclipse-cdt because I
have different version of Eclipse in my Application folder. But the
folder should contain the following files:</p>
<p><a class="reference external image-reference" href="images/Eclipse-CDT-Folder.png"><img alt="Eclipse CDT folder Mac OS X" src="images/Eclipse-CDT-Folder.png" /></a></p>
<p>Now you should be able to run the Eclipse IDE.</p>
<p><a class="reference external image-reference" href="images/Eclipse-CDT-1.png"><img alt="Eclipse Startscreen" src="images/Eclipse-CDT-1.png" /></a></p>
<p>First the Eclipse splashscreen will appear. Then you will be asked to
define your workspace like the following prompt:</p>
<p><img alt="Eclipse define workspace prompt" src="images/Eclipse-CDT-2.png" /></p>
<p>Choose a folder or use the default value and continue with OK:</p>
<p><a class="reference external image-reference" href="images/Eclipse-CDT-3.png"><img alt="Eclipse CDT Mac OS X empty UI" src="images/Eclipse-CDT-3.png" /></a></p>
<p>You should get something like a welcome page or continue an empty
overview over your new Eclipse C/C++ IDE.</p>
<p>Create a new C++ Project as shown below:</p>
<p><a class="reference external image-reference" href="images/Eclipse-CDT-4.png"><img alt="Eclipse Mac OS X create new C++ project" src="images/Eclipse-CDT-4.png" /></a></p>
<p><a class="reference external image-reference" href="images/Eclipse-CDT-5.png"><img alt="Eclipse CDT Mac OS X create new C++ project" src="images/Eclipse-CDT-5.png" /></a></p>
<p>Build the new project if it's not done automatically after creation and
run the binary:</p>
<p><a class="reference external image-reference" href="images/Eclipse-CDT-6.png"><img alt="Hello World programm C++ Max OSX Eclipse CDT" src="images/Eclipse-CDT-6.png" /></a></p>
<p>If everything went well you should see the Hello World message in your
output console:</p>
<p><a class="reference external image-reference" href="images/Eclipse-CDT-7.png"><img alt="Eclipse C++ IDE Hello World on Mac OS X" src="images/Eclipse-CDT-7.png" /></a></p>
</div>
<div class="section" id="how-to-find-the-eclipse-ini-configuration-file">
<h2>How to find the eclipse.ini configuration file</h2>
<p>Because the eclipse.ini file is hidden in the Mac package I wrote a blog
post some time ago how to change it. You can find the post
<a class="reference external" href="http://www.banym.de/eclipse/eclipse-configuration-files-on-mac-os-x">here</a>.
Should work for Eclipse Juno as well.</p>
<p>Maybe this helps you to get your IDE up and running to do awesome stuff
with it. Feel free to add a comment if I missed a step.</p>
</div>
Boxer a dos emulator for Mac OS X2012-07-07T12:11:00+02:002012-07-07T12:11:00+02:00Dominik Zajactag:www.banym.de,2012-07-07:/boxer-a-dos-emulator-for-mac-os-x.html<p>These days I stumbled over a nice DOS emulator for Mac OS X to play some
retro games called <a class="reference external" href="http://boxerapp.com">boxer</a>.</p>
<p>It's free and most of the games you know from the 90's are free
downloadable from the internet now.</p>
<p>For example I found the shareware battleship I knew from my …</p><p>These days I stumbled over a nice DOS emulator for Mac OS X to play some
retro games called <a class="reference external" href="http://boxerapp.com">boxer</a>.</p>
<p>It's free and most of the games you know from the 90's are free
downloadable from the internet now.</p>
<p>For example I found the shareware battleship I knew from my childhood.</p>
<p>Maybe you will have some fun, too! There are a lot of classic games
available for free now.</p>
Use LDAP for authentication with OpenERP2012-06-22T20:17:00+02:002012-06-22T20:17:00+02:00Dominik Zajactag:www.banym.de,2012-06-22:/use-ldap-for-authentication-for-openerp.html<div class="section" id="install-ldap-authentication-module">
<h2>Install LDAP authentication module:</h2>
<p>You need to install the module for authentication. It's quite as easy as
every installation in OpenERP. I am using OpenERP 6 an the module was
available.</p>
<p>Navigate to: Settings-> Modules -> Enable all the Buttons to search for
extra packages, too like shown in the screenshot …</p></div><div class="section" id="install-ldap-authentication-module">
<h2>Install LDAP authentication module:</h2>
<p>You need to install the module for authentication. It's quite as easy as
every installation in OpenERP. I am using OpenERP 6 an the module was
available.</p>
<p>Navigate to: Settings-> Modules -> Enable all the Buttons to search for
extra packages, too like shown in the screenshot and search for ldap.</p>
<p><a class="reference external image-reference" href="images/ldap-openerp.png"><img alt="OpenERP 6 module installation page" src="images/ldap-openerp.png" /></a></p>
<p>Install the module and navigate to the configuration wizards:</p>
</div>
<div class="section" id="configure-the-ldap-authentication-module">
<h2>Configure the LDAP authentication module:</h2>
<p><a class="reference external image-reference" href="images/ldap-openerp-2.png"><img alt="OpenERP 6 configuration wizard overview" src="images/ldap-openerp-2.png" /></a></p>
<p>Choose the "Setup you LDAP Server" Wizard from the list and run it:</p>
<p><a class="reference external image-reference" href="images/ldap-openerp-3.png"><img alt="image2" src="images/ldap-openerp-3.png" /></a></p>
<p>Fill in the values for you LDAP directory. If you using Active Directory
the filter rule maybe should look something like this: sAMAccountName=%s</p>
<p>I am using the 389 Directory Server which is using the UID as username.</p>
<p>Now you should be able to login with your ldap credentials.</p>
</div>
GNUbLIN another ARM Board2012-05-30T21:59:00+02:002012-05-30T21:59:00+02:00Dominik Zajactag:www.banym.de,2012-05-30:/gnublin-another-arm-board.html<p>I am quite interested in all the ARM stuff. It's everywhere around us in
all this nice and powerful smartphones, cameras, routers and other
devices. When I saw an advertisement in the German Linux Magazine I
ordered one of this small boards called
<a class="reference external" href="http://www.gnublin.org">GNUbLIN</a>. It's a project created by the …</p><p>I am quite interested in all the ARM stuff. It's everywhere around us in
all this nice and powerful smartphones, cameras, routers and other
devices. When I saw an advertisement in the German Linux Magazine I
ordered one of this small boards called
<a class="reference external" href="http://www.gnublin.org">GNUbLIN</a>. It's a project created by the
embeded project GmbH and the University of Augsburg in the South of
Germany.</p>
<p>The Board costs around 50€ and comes with all you need. There is a
preinstalled SmartCard with an embedded Linux on it and an USB cable to
connect it to your PC.</p>
<div class="section" id="connect-to-linux-pc">
<h2>Connect to Linux PC</h2>
<p>If you connect it to your Linux PC this should work out of the box. Just
install picocom as recommended by the tutorials on the GNUbLIN project
page and run:</p>
<pre class="literal-block">
sudo picocom -b 115200 /dev/ttyUSB0
</pre>
</div>
<div class="section" id="connect-to-mac-os-x-or-windows">
<h2>Connect to Mac OS X or Windows</h2>
<p>If your on Windows or Mac you have to install some drivers. I don't use
Windows but I have a Mac which I want to use for the developing and
testing of the board. Therefor got to <a class="reference external" href="http://www.silabs.com/products/mcu/Pages/USBtoUARTBridgeVCPDrivers.aspx">this
page</a>
and download the Mac OS X package. You have to reboot after
installation. Now when you connect the GNUbLIN Board to your Mac you
should see something like this in your /var/log/kernel.log</p>
<div class="line-block">
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver: init</div>
<div class="line-block">
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::attach</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::probe</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::detach</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::attach</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::start - Registered for Power Management</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::start!</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::start - Found device at interface 0</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::SelectInterfaces - BulkInput Pipe is 0xffffff800cb07900 on EP1</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::SelectInterfaces - BulkOutput Pipe is 0xffffff800bd8ce40 on EP1</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::setPowerState - Waking up</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::GetCP210xInfo - Part Number Found: 0x02</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::GetCP210xInfo - UsbConfigurationDescriptor -</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::GetCP210xInfo .bLength = 9</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::GetCP210xInfo .bDescriptorType = 0x02</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::GetCP210xInfo .wTotalLength = 32</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::GetCP210xInfo .bNumInterfaces = 1</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::GetCP210xInfo .bConfigurationValue = 1</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::GetCP210xInfo .iConfiguration = 0</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::GetCP210xInfo .bmAttributes = 0x80</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::GetCP210xInfo .MaxPower = 50</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64(0xffffff801055c000)::start - Sucessfully loaded the driver</div>
<div class="line">kernel[0]: com_silabs_driver_CP210xVCPDriver64::setPowerState(0xffffff801055c000, 0 -> 1) timed out after 10141 ms</div>
</div>
</div>
<p>This indicates that your driver was loaded successful. Now the GNUbLIN
console should be available under dev/cu.SLAB_USBtoUART. This is where
I found it on my Mac. Next step is to install picocom using MacPorts or
use screen which is installed by default to connect to your GNUbLIN
board:</p>
<pre class="literal-block">
screen /dev/tty.SLAB_USBtoUART 115200
</pre>
<p>If you don't have MacPorts installed yet pleas follow the instructions
<a class="reference external" href="http://www.macports.org/">here</a>. If you have it installed just
install picocom:</p>
<pre class="literal-block">
sudo port install picocom
</pre>
<p>Now run picocom on the USB device with following parameters in a
terminal.</p>
<pre class="literal-block">
sudo picocom -b 115200 /dev/cu.SLAB_USBtoUART
</pre>
<p>Maybe you need to hit return to refresh the output. An login mask like
this should appear:</p>
<p><a class="reference external image-reference" href="images//GNUbLIN-terminal.png"><img alt="image0" src="images//GNUbLIN-terminal.png" /></a></p>
<p>Login as root and have fun. There are some example scripts in /root. For
example run /root/blink.sh to make the onboard LED blink.</p>
</div>
Very nice blog2012-05-30T19:49:00+02:002012-05-30T19:49:00+02:00Dominik Zajactag:www.banym.de,2012-05-30:/very-nice-blog.html<p>Some time ago I wrote two articles about tunneling HTTP traffic through
a <a class="reference external" href="http://www.banym.de/security/use-ssh-for-more-secure-browsing-in-public-networks">SSH
session</a>
or
<a class="reference external" href="http://www.banym.de/security/secure-your-browsing-in-a-non-trusted-wifi-network">OpenVPN</a>.
This is useful if you need to secure your webtraffic in an untrusted
network.</p>
<p>Today I found this blog: <a class="reference external" href="http://mark.koli.ch">http://mark.koli.ch</a></p>
<p>You should review it, there are some nice articles. I …</p><p>Some time ago I wrote two articles about tunneling HTTP traffic through
a <a class="reference external" href="http://www.banym.de/security/use-ssh-for-more-secure-browsing-in-public-networks">SSH
session</a>
or
<a class="reference external" href="http://www.banym.de/security/secure-your-browsing-in-a-non-trusted-wifi-network">OpenVPN</a>.
This is useful if you need to secure your webtraffic in an untrusted
network.</p>
<p>Today I found this blog: <a class="reference external" href="http://mark.koli.ch">http://mark.koli.ch</a></p>
<p>You should review it, there are some nice articles. I found
<a class="reference external" href="http://mark.koli.ch/2011/12/configuring-apache-to-support-ssh-through-an-http-web-proxy-with-proxytunnel.html">this</a>
one which explains how to tunnel SSH through an HTTP connection to make
it possible to get an SSH session running when all traffic except HTTP
is blocked.</p>
<p>Nice and useful article.</p>
Gimp 2.8 for Mac2012-05-28T15:32:00+02:002012-05-28T15:32:00+02:00Dominik Zajactag:www.banym.de,2012-05-28:/gimp-2-8-for-mac.html<p><a class="reference external" href="http://gimp.lisanet.de/Website/Download.html">Gimp 2.8.0</a> is
available for Mac OS X now.</p>
<p>You need to have <a class="reference external" href="http://xquartz.macosforge.org/landing/">XQuartz</a>
installed on your Mac for the new Gimp version.</p>
<p>Why should you upgrade to Gimp 2.8 ? For me there is one major change I
am waiting for years now. The one window mode …</p><p><a class="reference external" href="http://gimp.lisanet.de/Website/Download.html">Gimp 2.8.0</a> is
available for Mac OS X now.</p>
<p>You need to have <a class="reference external" href="http://xquartz.macosforge.org/landing/">XQuartz</a>
installed on your Mac for the new Gimp version.</p>
<p>Why should you upgrade to Gimp 2.8 ? For me there is one major change I
am waiting for years now. The one window mode. Gimp uses X11 and on Mac
OS X the multi window tool boxes don't have a good useability.</p>
<p>If you want to have the one-window-mode your default mode. Open Gimp got
to Windows -> Single-Window Mode.</p>
<p><a class="reference external image-reference" href="images//gimp-2.8.png"><img alt="Gimp 2.8 on Mac OS X Lion" src="images//gimp-2.8.png" /></a></p>
How to publish an open source software?2012-05-25T21:34:00+02:002012-05-25T21:34:00+02:00Dominik Zajactag:www.banym.de,2012-05-25:/how-to-publish-an-open-source-software.html<p>There are millions of free and open source software available at the
internet. Most are done by private persons in their spare time. Some
bigger are supported by companies or organizations like the Apache
foundation.</p>
<p>This blog post is about how and where you can publish your software
source code …</p><p>There are millions of free and open source software available at the
internet. Most are done by private persons in their spare time. Some
bigger are supported by companies or organizations like the Apache
foundation.</p>
<p>This blog post is about how and where you can publish your software
source code. The last few years there where a lot of platforms created
who make it easy to share your code in a repository. This makes it even
easier for you to collaborate with other developers who maybe fix a bug
or made an improvement to your software.</p>
<div class="section" id="step-1-choose-a-license">
<h2>Step 1: Choose a license</h2>
<p>This is a nasty task you have to do. What is the best license for your
software? Nobody can help you here. You have to read them and decide
wise for future use of your software. GPL is very popular but in my
opinion not the best license. MIT, BSD or the Apache License a worth a
review, too. Just have a look at the open source license Wikipedia page
here or review them
<a class="reference external" href="http://www.opensource.org/licenses/category">here</a> by category.</p>
<p>Don't invent a new license. There are many well documented and accepted
licenses you can use, don't try to create a new one if you don't need
to. If you have a problem with someone who doesn't respect your license
you maybe will not have the ability to fight him. If you're using one of
the well known licenses and it's forced by someone you have the
possibility to talk to the <a class="reference external" href="http://www.fsf.org/">Free software
foundation</a> and ask for help in your case.</p>
</div>
<div class="section" id="step-2-publish-your-code">
<h2>Step 2: Publish your code</h2>
<p>If you are using a VCS or DVCS like Subversion, CVS, Mercurial or GIT
there are some real nice cloud services which make it easy and cheap for
you to publish your code and create the basic community functions for
your project.</p>
<p>For example <a class="reference external" href="http://www.github.com">GitHub</a> or
<a class="reference external" href="http://www.sourceforge.net">SourceForge</a> are very famous platforms
for open source projects today. You should find a platform which is well
known and used by many other developers to make it easy for them to
review and join your project. GitHub for example is very famous for all
Git fans and users. Since Git became one of the most used DVCS systems
it growth very fast and still provides a good service and tool set for
you as user and developer.</p>
<p>SourceForge is one of the oldest platforms in the market. They allow you
to choose different versioning systems and you are able to add a lot of
extra tools to your project. For example LimeSurvey or forums , etc.</p>
<p>If you're using Mercurial there is for example
<a class="reference external" href="https://bitbucket.org/">bitbucket</a> as a service provider.</p>
<p>You see there are alot of services available you just have to pick the
right for you.</p>
<p>Maybe review this discussion on Stackoverflow what others think:
<a class="reference external" href="http://stackoverflow.com/questions/6883638/how-to-publish-code-as-open-source">http://stackoverflow.com/questions/6883638/how-to-publish-code-as-open-source</a></p>
</div>
<div class="section" id="step-3-keep-being-active-and-create-a-community">
<h2>Step 3: Keep being active and create a community</h2>
<p>This step is the most difficult one. A good open source project lives
with its activity. You need to keep your used libraries up to date,
react on new needs or keep doing fixes for your users. It's very
important to not see an open source project as a grave yard for
unmaintained source code. This will not help you and not help others if
you commit not working or just bad code.</p>
<p>Nobody wants to improve your bad programmed application for you. As a
main maintainer or founder of a successful open source project you need
to keep active and open for new ideas and other people. If you do so
others will join and help you and improve your code.</p>
<p>Another important task is to keep talking about your project. Write some
blog posts, twitter and answer some forum posts. You need to write
documentation what you project does and who can have a benefit from it.
This makes your work more visible and more people with the same pain
will find you and help and use your software.</p>
<p>There is a lot of information around:</p>
<ul class="simple">
<li><a class="reference external" href="http://www.oss-watch.ac.uk/resources/howtobuildcommunity.xml">http://www.oss-watch.ac.uk/resources/howtobuildcommunity.xml</a></li>
<li><a class="reference external" href="http://tuxradar.com/content/how-create-open-source-community">http://tuxradar.com/content/how-create-open-source-community</a></li>
</ul>
</div>
<div class="section" id="step-4-software-is-free-people-are-not">
<h2>Step 4: "Software is free people are not"</h2>
<p>This statement was made by one of the founders of the free open source
ERP Adempiere where I worked some hours of my spare time in the past. If
people ask you to build in functionality in an urgent way and you need
to do you living from programming and projects, ask them for money. Even
an open source programmer needs some money. If they are not willing to
pay the code is free and open for them to do it faster by themselves.</p>
<p>This is not arrogant it's just life. Don't ask for money for every
feature, that's not what I want to tell you. But you will have some
requests which will not be communicated in an adequate way so answer
them in a nice but clear way.</p>
</div>
Torproject needs your help2012-05-18T19:32:00+02:002012-05-18T19:32:00+02:00Dominik Zajactag:www.banym.de,2012-05-18:/torproject-needs-your-help.html<p>In this
<a class="reference external" href="https://lists.torproject.org/pipermail/tor-talk/2012-May/024286.html">email</a>
to the public world the tor projects is asking for help in testing and
improving the QA process of the Tor-Bundle.</p>
<p>As you maybe know I am a supporter of the tor project and spend some
time in the past of writing some howtos to help improving …</p><p>In this
<a class="reference external" href="https://lists.torproject.org/pipermail/tor-talk/2012-May/024286.html">email</a>
to the public world the tor projects is asking for help in testing and
improving the QA process of the Tor-Bundle.</p>
<p>As you maybe know I am a supporter of the tor project and spend some
time in the past of writing some howtos to help improving the tor
network in a very small way. The idea behind anonymous communication is
well known and you can read tons of information about it. Today I just
want to blog about this announcement to share the information and maybe
inspire someone to help this project.</p>
<p>In this special case you do not need so deep into the code, it mostly is
testing pre versions of the Tor-Bundle.</p>
<p>For new people testing software often is a good starting point in
getting known to the structure of a project.</p>
<p>Another way helping the Tor network is sharing some bandwith by running
a bridge or exit-node. If you are not skilled to do this you still can
donate some bugs to the <a class="reference external" href="http://www.torservers.net">torservers</a>
project.</p>
Sigint122012-05-18T18:38:00+02:002012-05-18T18:38:00+02:00Dominik Zajactag:www.banym.de,2012-05-18:/sigint12.html<p>This year I made it to the Sigint in Cologne/Germany. It is the third
Sigint organized by the well known CCC (Chaos Computer Club). Since the
congress at the end of the year in Berlin (28C3) became really big I am
not so interested in it anymore. But Sigint …</p><p>This year I made it to the Sigint in Cologne/Germany. It is the third
Sigint organized by the well known CCC (Chaos Computer Club). Since the
congress at the end of the year in Berlin (28C3) became really big I am
not so interested in it anymore. But Sigint is much smaller and the
talks are really nice and some times an earlier version like at the end
of the year. It is nice to see the Geek-sphere is so active and well
organized in Germany. That's what for we Germans are known. Even when
the organizing Club has chaos in its name and it's mostly done in the
spare time of its members, the congress has a professional geeky image.</p>
<p>A lot of LED and light art is shown and there is a lot of space to sit
down and do some writing or hacking. The first Image I shot in the
early morning while making some walk around the area shows the rocket
which is related to the goal to create private hacker space projects
over the next years. There is also a lot of work with autonomous
quadcopter done by people who are sharing there knowledge and
experiences with others.</p>
<p><a class="reference external image-reference" href="images/sigint12-1.jpg"><img alt="image0" src="images//sigint12-1.jpg" /></a></p>
<p>This shows how many potential the hacker scene has. The sceptic behavior
against governmental organizations and the trust in the own open way of
doing things makes this community one of the most powerful think tank of
human race this centuries. The spirit of sharing knowledge and
developing technologic solutions based on open hard and software has
become a place of doing things in a different way.</p>
<p>It's amazing to the people spending hours and hours on projects with
often no other direct profit than fun with the technology. Since a few
years the German governmental institutions sending some questions to the
CCC to ask them for there opinion for example how data should be handled
by companies like Facebook or Google which make money out of analyzing
private data.</p>
<p>Since the last 1-2 years this community is starting to grow faster but
healthy. More people are interested in the tools affecting there lives
in such a big way. Searching for a restaurant, planing a trip or
connecting with friends has become normal in the internet. Even very
private data is shared by the youngest generation of users. For a lot of
interested people this is a motivation to have a look behind the
HTML/CSS sites or nice looking user interfaces to see how things are
working. And hopefully they start to do it a better or different way and
share there information about there improvements.</p>
<p>This generation are the new Fords, Benzes, Edisons or even Einsteins.
Don't believe that things don't work in a totally different way. Don't
believe in companies who tell you this is not productive or you never
will make money out of a solution. Just remind that Google makes it's
money by finding things. Yes they do it in a clever way and with a lot
of improvements over the last 10 years. But at the end of the day they
started there business with searching databases and crawling the web for
you.</p>
<p>Let's make the world a better place and start getting active. Start
working on a project, make your work public and maybe if it's what you
want to make for living start a business, found a company or just have
fun with hacking.</p>
<p>Within the next few days I will make some additional posts and share
some links to the following topics:</p>
<div class="line-block">
<div class="line">* <a class="reference external" href="http://www.banym.de/blogging/how-to-publish-an-open-source-software">How and where do I publish my project?</a></div>
<div class="line-block">
<div class="line">* Why should I make my code, plans or ideas open source?</div>
</div>
</div>
<p>This information maybe helps you to find your way in getting things done
the new way.</p>
FreeNAS usb stick ROOT MOUNT ERROR2012-03-10T21:05:00+01:002012-03-10T21:05:00+01:00Dominik Zajactag:www.banym.de,2012-03-10:/freenas-usb-stick-root-mount-error.html<p>Had some trouble booting a usb stick with
<a class="reference external" href="http://www.freenas.org">FreeNAS</a> 8.0.4.</p>
<p>The error message said: <strong>ROOT MOUNT ERROR</strong></p>
<p>The problem was that the usb stick was to small. You should use a stick
> 2GB. Some of the 2GB sticks are working some not. If you have this
problem your …</p><p>Had some trouble booting a usb stick with
<a class="reference external" href="http://www.freenas.org">FreeNAS</a> 8.0.4.</p>
<p>The error message said: <strong>ROOT MOUNT ERROR</strong></p>
<p>The problem was that the usb stick was to small. You should use a stick
> 2GB. Some of the 2GB sticks are working some not. If you have this
problem your stick doesn't.</p>
Secure your browsing in a non trusted (wifi) network2012-02-03T23:23:00+01:002012-02-03T23:23:00+01:00Dominik Zajactag:www.banym.de,2012-02-03:/secure-your-browsing-in-a-non-trusted-wifi-network.html<p>As I wrote in an <a class="reference external" href="http://www.banym.de/security/use-ssh-for-more-secure-browsing-in-public-networks">older
post</a>
there is a simple solution using ssh to tunnel your webbrowser traffic
through an ssh connection to a secure and trusted endpoint. This is a
very simple solution to secure your access to the web while you are in a
public wifi network …</p><p>As I wrote in an <a class="reference external" href="http://www.banym.de/security/use-ssh-for-more-secure-browsing-in-public-networks">older
post</a>
there is a simple solution using ssh to tunnel your webbrowser traffic
through an ssh connection to a secure and trusted endpoint. This is a
very simple solution to secure your access to the web while you are in a
public wifi network or old fashioned cable network.</p>
<p>Because I got quite a lot of response to the article I decided to write
this for the people who want to secure all of there traffic not only the
web traffic.</p>
<p>The easiest way to do this is to use a VPN connection which will allow
you to tunnel all your traffic no matter from which application to a
secure endpoint. As I like open source for all of the security stuff I
am using <a class="reference external" href="http://www.openvpn.net">OpenVPN</a> to do this job. It's one
of the most popular VPN solutions and based on SSL.</p>
<p>What do we need:</p>
<ul class="simple">
<li>VPN Server somewhere in the internet</li>
<li>OpenVPN Client on our machine (Tunnelblick for Mac or OpenVPN Gui for
Windows are both free and open source)</li>
<li>Some time to configure it</li>
</ul>
<p>In my case the VPN Server is a Linux box but it can be every operating
system which can run the OpenVPN server software.</p>
<p>In this tutorial I will not repeat every single step because the
documentation of OpenVPN is very good and clear. Just follow the setup
process descripted here to get openvpn installed and all necessary
certificates created. After you have openvpn starting with the example
configuration and your certificates you only need to modify some lines
in your server.conf file to route all the traffic trough the openvpn
server. If you are running an linux box with iptables (what you should)
you need to add some rules to allow the traffic be routed.</p>
<div class="section" id="installation">
<h2>Installation:</h2>
<p>On CentOS install it via yum:</p>
<blockquote>
<pre class="literal-block">
yum install -y openvpn
</pre>
</blockquote>
<p>the example configuration files and the easy-rsa directory are located
here: /usr/share/docs/openvpn-2.2.0/</p>
<p>Copy the easy-rsa directory to /etc/openvpn and make the shell scripts
executeable:</p>
<blockquote>
<pre class="literal-block">
cp -a /usr/share/docs/openvpn-2.2.0/easy-rsa /etc/openvpn
</pre>
<pre class="literal-block">
chmod +x /etc/openvpn/easy-rsa/2.0/build* /etc/openvpn/easy-rsa/2.0/pkitool \
/etc/openvpn/easy-rsa/2.0/vars /etc/openvpn/easy-rsa/2.0/clean-all \
/etc/openvpn/easy-rsa/2.0/revoke-full /etc/openvpn/easy-rsa/2.0/sign-req \
/etc/openvpn/easy-rsa/2.0/whichopensslcnf
</pre>
</blockquote>
<p>Now follow the instructions here:</p>
<p><a class="reference external" href="http://www.openvpn.net/index.php/open-source/documentation/howto.html#install">http://www.openvpn.net/index.php/open-source/documentation/howto.html#install</a></p>
<p>If you have OpenVPN up and running but you cant establish a connection
from your client please check if the configured port is open on your
server. If you have a custom iptables script you need to open the port
you are using for openvpn for example the default udp port 1194.</p>
</div>
Why the free and open internet needs to be protected.2012-01-27T18:09:00+01:002012-01-27T18:09:00+01:00Dominik Zajactag:www.banym.de,2012-01-27:/why-the-free-and-open-internet-needs-to-be-protected.html<p>This video explains in a very basic way the bad goal of ACTA. Help to
inform more people about ACTA and help to stop it.</p>
<div class="line-block">
<div class="line">We want to have our free and open internet as it is and don't want to introduce this kinds of laws in this undemocratic way …</div></div><p>This video explains in a very basic way the bad goal of ACTA. Help to
inform more people about ACTA and help to stop it.</p>
<div class="line-block">
<div class="line">We want to have our free and open internet as it is and don't want to introduce this kinds of laws in this undemocratic way.</div>
</div>
Install nginx on CentOS 62012-01-22T00:35:00+01:002012-01-22T00:35:00+01:00Dominik Zajactag:www.banym.de,2012-01-22:/install-nginx-on-centos-6.html<p>If you want to have the latest version of nginx on your CentOS system
the easiest way is to use the official yum repository from the nginx
program. The version contained in the EPEL repository is quite old.</p>
<p>Download the repo RPM from
<a class="reference external" href="http://nginx.org/packages/centos/6/noarch/RPMS/nginx-release-centos-6-0.el6.ngx.noarch.rpm">http://nginx.org/packages/centos/6/noarch …</a></p><p>If you want to have the latest version of nginx on your CentOS system
the easiest way is to use the official yum repository from the nginx
program. The version contained in the EPEL repository is quite old.</p>
<p>Download the repo RPM from
<a class="reference external" href="http://nginx.org/packages/centos/6/noarch/RPMS/nginx-release-centos-6-0.el6.ngx.noarch.rpm">http://nginx.org/packages/centos/6/noarch/RPMS/nginx-release-centos-6-0.el6.ngx.noarch.rpm</a>
and install it using rpm -i <packagename>. Then run the command 'yum
install nginx'.
Or create the repository manual.</p>
<p>Create a new repository file:</p>
<blockquote>
vi /etc/yum.repos/nginx.repo</blockquote>
<p>copy the yum repository information into it and save it:</p>
<blockquote>
[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/OS/OSRELEASE/$basearch/
gpgcheck=0
enabled=1</blockquote>
<p>now install nginx:</p>
<blockquote>
yum install nginx</blockquote>
<p>If you're looking for sample configuration files you should have a look
at the nginx wiki page<a class="reference external" href="http://wiki.nginx.org">wiki.nginx.org</a> there
are quite a lot of good
<a class="reference external" href="http://wiki.nginx.org/Configuration">examples</a>.</p>
Problem getting connection with nx client2012-01-21T15:42:00+01:002012-01-21T15:42:00+01:00Dominik Zajactag:www.banym.de,2012-01-21:/problem-getting-connection-with-nx-client.html<p>The <a class="reference external" href="https://en.wikipedia.org/wiki/NX_technology">NX</a> protocol is a
remote X protocol and software quite similar to VNC but over ssh.</p>
<p>While using it for a machine there was this strange behavior that the
session was not working anymore and can't be reestablished. Reinstalling
and configuring the nx server software didn't fix the problem …</p><p>The <a class="reference external" href="https://en.wikipedia.org/wiki/NX_technology">NX</a> protocol is a
remote X protocol and software quite similar to VNC but over ssh.</p>
<p>While using it for a machine there was this strange behavior that the
session was not working anymore and can't be reestablished. Reinstalling
and configuring the nx server software didn't fix the problem.</p>
<p>In the end I fixed the problem by removing the .Xauthority files located
in the users home directory. There where 3 files named .Xauthority,
.Xauthority-c, .Xauthority-l. I removed all of them and the connection
worked again.</p>
<p>Maybe some one is running into the same problem and this helps him find
his way out. Beside the logging functionality of NX needs some more love
by it's developers.</p>
Another explanation of Flattr2012-01-09T23:51:00+01:002012-01-09T23:51:00+01:00Dominik Zajactag:www.banym.de,2012-01-09:/another-explanation-of-flattr.html<p>Here again I found a wonderful video explanation about Flattr:</p>
<p>Would be nice if you join this nice idea and leave some bugs on each
thing you enjoy on the internet. This micropayment system is a good
thing to give something back to the people who helped you out with …</p><p>Here again I found a wonderful video explanation about Flattr:</p>
<p>Would be nice if you join this nice idea and leave some bugs on each
thing you enjoy on the internet. This micropayment system is a good
thing to give something back to the people who helped you out with a
problem or created some nice content you liked to watch.</p>
Installing VMware ovftool on Mac OS X2012-01-08T21:14:00+01:002012-01-08T21:14:00+01:00Dominik Zahactag:www.banym.de,2012-01-08:/installing-vmware-ovftool-on-mac-os-x.html<p>VMware offers a free tool to convert virtual machine files in different
formats for example from .vmx to .ovf.</p>
<p>This tool can be used to convert:</p>
<blockquote>
<pre class="literal-block">
VMX -> OVF
</pre>
<pre class="literal-block">
VMX -> OVA
</pre>
<pre class="literal-block">
OVF -> VMX
</pre>
<pre class="literal-block">
VMX -> vSphere
</pre>
</blockquote>
<p>Or you can deploy a OVF directly to a ESX host. It's more powerful than
it …</p><p>VMware offers a free tool to convert virtual machine files in different
formats for example from .vmx to .ovf.</p>
<p>This tool can be used to convert:</p>
<blockquote>
<pre class="literal-block">
VMX -> OVF
</pre>
<pre class="literal-block">
VMX -> OVA
</pre>
<pre class="literal-block">
OVF -> VMX
</pre>
<pre class="literal-block">
VMX -> vSphere
</pre>
</blockquote>
<p>Or you can deploy a OVF directly to a ESX host. It's more powerful than
it looks like.</p>
<p>The documentation can be found on the VMware site and it's short and
clear.</p>
<div class="section" id="installation">
<h2><strong>Installation:</strong></h2>
<p>Download the documentation and the tool from the VMware site:
<a class="reference external" href="http://www.vmware.com/support/developer/ovf/">http://www.vmware.com/support/developer/ovf/</a></p>
<p>You need a VMware id to have access but the tool itself is free.</p>
<p>After you downloaded the tool you can install it using the installer.
The stand alone version 2.1 (which I used) will be located here:
/Applications/VMware OVF Tool/</p>
<p>Start a terminal and change to this directory:</p>
<blockquote>
<pre class="literal-block">
cd /Applications/VMware OVF Tool/
</pre>
</blockquote>
<p>Now convert your files like you want. For example:</p>
<blockquote>
ovftool vmxs/Fedora.vmx ovfs/Fedora.ova</blockquote>
<p>More examples how the tool can be used are shown by the command</p>
<pre class="literal-block">
ovftool --help examples
</pre>
<p>Examples:</p>
<div class="line-block">
<div class="line">ovftool --vService:vDep1=provider_1 /ovfs/my_vapp.ovf</div>
<div class="line-block">
<div class="line">vi://username:pass@localhost/my_datacenter/host/esx01.example.com</div>
<div class="line">(specify a vService dependency)</div>
</div>
</div>
<div class="line-block">
<div class="line">ovftool -tt=vmx /ovfs/my_vapp.ovf /vms/</div>
<div class="line-block">
<div class="line">(.ovf file to .vmx file. Result files are /vms/my_vapp/my_vapp.[vmx|vmdk])</div>
</div>
</div>
<div class="line-block">
<div class="line">ovftool /vms/my_vm.vmx /ovfs/my_vapp.ovf</div>
<div class="line-block">
<div class="line">(.vmx file to .ovf file. Result is put in /ovfs/my_vapp.[ovf|vmdk])</div>
</div>
</div>
<div class="line-block">
<div class="line">ovftool <a class="reference external" href="https://my_ovf_server/ovfs/my_vapp.ova">https://my_ovf_server/ovfs/my_vapp.ova</a> /vm/my_vm.vmx</div>
<div class="line-block">
<div class="line">(.ova file to .vmx file)</div>
</div>
</div>
<div class="line-block">
<div class="line">ovftool /ovfs/my_vapp.ovf vi://username:pass@my_esx_host</div>
<div class="line-block">
<div class="line">(.ovf file to ESX host using default mappings)</div>
</div>
</div>
<div class="line-block">
<div class="line">ovftool /ovfs/my_vm.vmx vi://username:pass@my_esx_host</div>
<div class="line-block">
<div class="line">(.vmx file to ESX host using default mappings)</div>
</div>
</div>
<div class="line-block">
<div class="line">ovftool <a class="reference external" href="http://my_ovf_server/ovfs/my_vapp.ovf">http://my_ovf_server/ovfs/my_vapp.ovf</a> \</div>
<div class="line-block">
<div class="line">vi://username:pass@my_esx_host</div>
<div class="line">(.ovf file from a web server to ESX host using defaults)</div>
</div>
</div>
<div class="line-block">
<div class="line">ovftool /ovfs/my_vapp.ovf \</div>
<div class="line-block">
<div class="line">vi://username:pass@my_vc_server/?ip=10.20.30.40</div>
<div class="line">(.ovf file to vCenter server using managed ESX host ip address)</div>
</div>
</div>
<div class="line-block">
<div class="line">ovftool vi://username:pass@my_vc_server/my_datacenter?ds=\</div>
<div class="line-block">
<div class="line">[Storage1] foo/foo.vmx c:\ovfs\</div>
<div class="line">(VM on ESX/vCenter server to OVF using datastore location query)</div>
</div>
</div>
<div class="line-block">
<div class="line">ovftool /ovfs/my_vapp.ovf \</div>
<div class="line-block">
<div class="line">vi://username:pass@my_vc_server/my_datacenter/host/my_host</div>
<div class="line">(.ovf file to vCenter server using vCenter inventory path)</div>
</div>
</div>
<div class="line-block">
<div class="line">ovftool vi://username:pass@my_host/my_datacenter/vm/my_vm_folder/my_vm_name\</div>
<div class="line-block">
<div class="line">/ovfs/my_vapp.ovf</div>
<div class="line">(VC/ESX vm to .ovf file)</div>
</div>
</div>
<div class="line-block">
<div class="line">ovftool /virtualmachines/MyVM.vmx \</div>
<div class="line-block">
<div class="line">~my_vApprun_workspace/</div>
<div class="line">(Imports a .vmx file into a vApprun workspace using default name)</div>
</div>
</div>
<div class="line-block">
<div class="line">ovftool <a class="reference external" href="https://my_ovflib/vm/my_vapp.ovf">https://my_ovflib/vm/my_vapp.ovf</a></div>
<div class="line-block">
<div class="line">(shows summary information about the OVF package [probe mode])</div>
</div>
</div>
</div>
CoRD a nice RDP client for Mac OS X2012-01-07T02:55:00+01:002012-01-07T02:55:00+01:00Dominik Zajactag:www.banym.de,2012-01-07:/cord-a-nice-rdp-client-for-mac-os-x.html<p>Searched for an alternative for Microsoft RDP client for Mac and found
CoRD. It's a nice free and open source tool for Mac and works fine unitl
now.</p>
<p>Nice features are:</p>
<ul class="simple">
<li>Bookmarks</li>
<li>All sessions in one window</li>
<li>Quick connection</li>
<li>Share folders</li>
</ul>
<p><a class="reference external image-reference" href="images//Screen-Shot-2012-01-07-at-01.55.311.png"><img alt="CoRD Application Screenshot Mac OS X" src="images//Screen-Shot-2012-01-07-at-01.55.311.png" /></a></p>
<p>I will include a more detailed review of this …</p><p>Searched for an alternative for Microsoft RDP client for Mac and found
CoRD. It's a nice free and open source tool for Mac and works fine unitl
now.</p>
<p>Nice features are:</p>
<ul class="simple">
<li>Bookmarks</li>
<li>All sessions in one window</li>
<li>Quick connection</li>
<li>Share folders</li>
</ul>
<p><a class="reference external image-reference" href="images//Screen-Shot-2012-01-07-at-01.55.311.png"><img alt="CoRD Application Screenshot Mac OS X" src="images//Screen-Shot-2012-01-07-at-01.55.311.png" /></a></p>
<p>I will include a more detailed review of this nice tool when I have used
it for a while.</p>
Converting certificates2011-12-18T19:43:00+01:002011-12-18T19:43:00+01:00Dominik Zajactag:www.banym.de,2011-12-18:/converting-certificates.html<p>If you are running a webserver with https you maybe get a certificate
for your site some times in a different format as you expect it.</p>
<p>The easiest way of converting the certificates is using the openssl
tool.</p>
<p>For example if you get a certificate in .pfx format you can …</p><p>If you are running a webserver with https you maybe get a certificate
for your site some times in a different format as you expect it.</p>
<p>The easiest way of converting the certificates is using the openssl
tool.</p>
<p>For example if you get a certificate in .pfx format you can convert it
easy to a format your apache or nginx can use it:</p>
<blockquote>
`` openssl pkcs12 -in inputfile.pfx -out outputfile.txt -nodes ``</blockquote>
<p>Source:</p>
<p><a class="reference external" href="http://www.digicert.com/ssl-support/apache-ssl-export.htm">http://www.digicert.com/ssl-support/apache-ssl-export.htm</a></p>
Slow iTerm or Terminal start2011-12-16T12:58:00+01:002011-12-16T12:58:00+01:00Dominik Zajactag:www.banym.de,2011-12-16:/slow-iterm-start.html<p>If your iTerm or Terminal needs some time to start and the bash needs
some time to appear if you create a new window.</p>
<p>Short solution is to delete the logs if they are to big:</p>
<blockquote>
sudo rm -rf /private/var/log/asl/*.asl</blockquote>
<p>Here the source from os x …</p><p>If your iTerm or Terminal needs some time to start and the bash needs
some time to appear if you create a new window.</p>
<p>Short solution is to delete the logs if they are to big:</p>
<blockquote>
sudo rm -rf /private/var/log/asl/*.asl</blockquote>
<p>Here the source from os x daily:</p>
<p><a class="reference external" href="http://osxdaily.com/2010/05/06/speed-up-a-slow-terminal-by-clearing-log-files/">http://osxdaily.com/2010/05/06/speed-up-a-slow-terminal-by-clearing-log-files/</a></p>
Introducing some tools to the ADempiere and iDempiere project for better quality management2011-10-14T15:04:00+02:002011-10-14T15:04:00+02:00Dominik Zajactag:www.banym.de,2011-10-14:/introducing-some-tools-to-the-adempiere-and-idempiere-project-for-better-quality-management.html<p>In every software development project there is the need for quality
assurance and quality management for the code. To make this work more
efficient there exist a big number of tools to do this task.</p>
<p>For the ADempiere and iDempiere project I was working together with
Redhuan (<a class="reference external" href="http://red1.org">red1.org</a>) on …</p><p>In every software development project there is the need for quality
assurance and quality management for the code. To make this work more
efficient there exist a big number of tools to do this task.</p>
<p>For the ADempiere and iDempiere project I was working together with
Redhuan (<a class="reference external" href="http://red1.org">red1.org</a>) on some Fitnesse test
integration to run them automatically. The goal was to have a test suite
applied on the current ADempiere code with all migration done to the
database.</p>
<p>At the start of the project I defined following steps:</p>
<ol class="arabic simple">
<li>Setup <a class="reference external" href="jenkins-ci.org">Jenkins</a> for doing the tests automatically</li>
<li>Code some scripts for creating an up to date database with all
migration scripts applied</li>
<li>Run all the test triggered by Jenkins</li>
</ol>
<p>While doing the work I was facing some problems with the process on an
headless build server. The tests for the ADempiere client needed some
graphical interface to work. To work around this issue I installed a
minimal X11 environment and started the Fitnesse test software within
this X11 environment. Now when the tests a run the popups can be shown
by the code and triggered by Fitnesse.</p>
<div class="section" id="setup-jenkins">
<h2>1. Setup Jenkins</h2>
<p>The default installation of Jenkins was done by me some time ago and the
Jenkins is already running some build processes for the iDempiere
project to build the OSGi based code using Buckminster.</p>
<p>For the testing of the Fitnesse tests we decided to use the 361 code
base maintained by Carlos Ruiz from Kenai repository.</p>
<p>To keep things clear I first created the build job to run the build of
ADempiere with the ant task.</p>
<p><a class="reference external image-reference" href="images/Jenkins-ADempiere-361.png"><img alt="image0" src="images/Jenkins-ADempiere-361.png" /></a></p>
<p>This is quite straight forward and no magic. Just let the Ant plugin
call the complete target and go for it.</p>
</div>
<div class="section" id="the-up-to-date-database-script">
<h2>2. The up to date database script</h2>
<p>To recreate a fully updated database I created a short collection of
commands within a shell script which looks like this:</p>
<blockquote>
<pre class="literal-block">
#!/bin/bash
#
#This script installes fresh ADempeire Postgres database
#Author Dominik Zajac
#Date: 10-13-2011
#Version: 0.0.1
WORKSPACE=/var/lib/jenkins/jobs/ADempiere361-Kenai/workspace/
SCRIPTHOME=/opt/adempiere_database_tool
#Remove existing database
/usr/bin/dropdb -U adempiere adempiere
echo "Old Database removed";
#Import new fresh database
/usr/bin/createdb -U adempiere adempiere
echo "Database created";
/usr/bin/psql -U adempiere adempiere < $SCRIPTHOME/adempiere.dump
echo "Database imported";
#Apply migration scripts
$WORKSPACE/migration/migrate_postgresql.sh \
$WORKSPACE/migration/360lts.010-release commit \
|psql -U adempiere -d adempiere
echo "Migration scripts applied"
</pre>
</blockquote>
<p>What the script does is quite clear. It loads a default database and
applies all necessary migrations scripts to it to have a fully prepared
database for testing.</p>
</div>
<div class="section" id="run-all-the-fitnesse-test-triggered-by-jenkins">
<h2> 3. Run all the Fitnesse test triggered by Jenkins</h2>
<p><a class="reference external image-reference" href="images/enkins-Fitnesse-Test.png"><img alt="Jenkins Fitnesse Screenshot" src="images/Jenkins-Fitnesse-Test.png" /></a></p>
<p>This two tasks within that build job are the main effort from Redhuan D.
Oon and me. Red1 consolidated all the Fitnesse tests to one project so
it was more easy to integrate it into the build server and run it. I
created the sql database script which is very very basic and just runs
commands step by step for database setup. The part for Fitnesse in
Jenkins is starting a new instance of Fitnesse each time the tests are
called and executes the tests within this instance. The results will be
written to the fitnesse-restults.xml.</p>
<p>Jenkins takes care of the job to look if there are new changes in the
repository every minute and reruns the job if there where some commits.</p>
<p>The next tasks would be:</p>
<ul class="simple">
<li>migrate this testing stuff to iDempiere OSGi platform</li>
<li>write some presentation layer for the xml result file</li>
<li>implement a second instance for manual testing by some interested
users</li>
</ul>
</div>
ssh -X doesn't work on CentOS2011-10-13T09:41:00+02:002011-10-13T09:41:00+02:00Dominik Zajactag:www.banym.de,2011-10-13:/ssh-x-doesnt-work-on-centos.html<p>If you installed the server without GUI it may is useful sometimes to
have a GUI output via ssh on an different computer.</p>
<p>You can connect with ssh to the server and present the output on you
local machine by using ssh with the option <strong>-X</strong>. You need to be …</p><p>If you installed the server without GUI it may is useful sometimes to
have a GUI output via ssh on an different computer.</p>
<p>You can connect with ssh to the server and present the output on you
local machine by using ssh with the option <strong>-X</strong>. You need to be sure
that the package <strong>xauth</strong> is installed on the target machine to do
this. Maybe for some types of software you need some additional
libraries aswell but they should be installed by yum automatically.</p>
<p>Install xauth like this:</p>
<blockquote>
<pre class="literal-block">
sudo yum install xauth
</pre>
</blockquote>
Pfsense 2.0 is released2011-10-12T21:02:00+02:002011-10-12T21:02:00+02:00Dominik Zajactag:www.banym.de,2011-10-12:/pfsense-2-0-is-released.html<p><a class="reference external image-reference" href="http://www.pfsense.org"><img alt="image0" src="images/logo-pfSense.png" /></a></p>
<p>pfSense 2.0 is finally released now. This is quite a nice peace of
software.</p>
<p>A lot of functionality like:</p>
<ul class="simple">
<li>VPN Gateways: OpenVPN, IPsec, PPTP</li>
<li>IP and Portfiltering</li>
<li>Webmanagement</li>
<li>FreeBSD based</li>
<li>Memory stick version available</li>
</ul>
Problem with deleting email in Exchange server2011-09-08T14:05:00+02:002011-09-08T14:05:00+02:00Dominik Zajactag:www.banym.de,2011-09-08:/problem-with-deleting-email-in-exchange-server.html<p>Had some problems on an Exchange server with deleting some special
messages. The email was shown like all others but it was not able to
delete the email. After some research and testing it finally worked by
enabling the Cache-Mode in one Outlook client connected to the mailbox
synchronizing it …</p><p>Had some problems on an Exchange server with deleting some special
messages. The email was shown like all others but it was not able to
delete the email. After some research and testing it finally worked by
enabling the Cache-Mode in one Outlook client connected to the mailbox
synchronizing it and deleting the message.</p>
<p>Maybe this short description help someone with the same problem. You can
contact me if you need more information but because it is a customers
server and environment I will not provide more information about
configuration or screenshots.</p>
Build the iDempiere Project using Eclipse with buckminster2011-09-07T16:44:00+02:002011-09-07T16:44:00+02:00Dominik Zajactag:www.banym.de,2011-09-07:/build-the-idempiere-project-using-eclipse-with-buckminster.html<p>This tutorial explains the setup of an development environment for
building the iDempiere project.</p>
<p>First download a the newest Helios(3.6) version of Eclipse. Be careful
Helios is not the newest version of Eclipse but you need the newest
version of Helios 3.6.2.x.</p>
<p>Now start Eclipse …</p><p>This tutorial explains the setup of an development environment for
building the iDempiere project.</p>
<p>First download a the newest Helios(3.6) version of Eclipse. Be careful
Helios is not the newest version of Eclipse but you need the newest
version of Helios 3.6.2.x.</p>
<p>Now start Eclipse and install the following plugins.</p>
<ul class="simple">
<li>buckminster core</li>
<li>buckminster maven</li>
<li>buckminster pde</li>
<li>mecurialeclipse (optional if you want to commit out of eclipse)</li>
</ul>
<div class="section" id="section-1">
<h2>------></h2>
</div>
<div class="section" id="update-2014-06-03">
<h2>Update (2014-06-03):</h2>
<div><p>I just tested this tutorial with <strong>Java 1.7.0</strong> and <strong>Eclipse Kepler SP2
(4.3)</strong> on my Mac Book and it worked like a charm.</p>
</div><div><p>For all who are using the new Eclipse release this is possible, too.</p>
</div><div></div><div><p>Here is the Buckminster update pages I used for installing the plugins:</p>
</div><div></div><div><p><a class="reference external" href="http://download.eclipse.org/tools/buckminster/updates-4.3">http://download.eclipse.org/tools/buckminster/updates-4.3</a></p>
</div><div></div></div>
<div class="section" id="section-2">
<h2><--------</h2>
<div></div><div><p>Next step is to download the sources via mecurial:</p>
</div><div><pre class="literal-block">
hg clone https://bitbucket.org/idempiere/idempiere idempiere
</pre>
<p>This new created directory needs to be your workspace in Eclipse. You
can select this at startup of Eclipse.</p>
<p>Create a new target platform in the Eclipse preferences.</p>
<p>Create a new empty directory within your workspace where all the other
stuff is located now called: targetPlatform</p>
<p>Preferences -> Plug-in Development -> Target Platform -> Add</p>
<p>Follow the steps on the screenshots:</p>
</div><div><p><a class="reference external image-reference" href="images/target-definition.png"><img alt="target definition" src="images/target-definition.png" /></a></p>
</div><div></div><div></div><div><p><a class="reference external image-reference" href="images/target-name.png"><img alt="image1" src="images/target-name.png" /></a></p>
</div><div></div><div></div><div><p> <a class="reference external image-reference" href="images/add-content.png"><img alt="image2" src="images/add-content.png" /></a></p>
</div><div></div><div></div><div><p><a class="reference external image-reference" href="images/add-content-1.png"><img alt="image3" src="images/add-content-1.png" /></a></p>
</div><div></div><div><p><a class="reference external image-reference" href="images/environment.png"><img alt="image4" src="images/environment.png" /></a></p>
</div><div></div><div><p>Close the preferences window if you are done and right click into the
project explorer and click import.</p>
</div><div><p>Choose buckminster:</p>
</div><div><p><a class="reference external image-reference" href="images/import-buckminster.png"><img alt="image5" src="images/import-buckminster.png" /></a></p>
</div><div><p><a class="reference external image-reference" href="images/cspec-buckminster.png"><img alt="image6" src="images/cspec-buckminster.png" /></a></p>
</div><div></div><div><p>And click Finish to start the process. This takes a while.</p>
</div><div><p>You Eclipse should look something like this now:</p>
</div><div><p><a class="reference external image-reference" href="images/eclipse-idempiere.png"><img alt="image7" src="images/eclipse-idempiere.png" /></a></p>
</div><div><p>If you want to start the java client out of eclipse now you can do this
by selecting the org.adempiere.ui.swing package and right click -> run
as -> Eclipse application.</p>
</div></div>
ADempiere World Conference 20112011-09-03T12:19:00+02:002011-09-03T12:19:00+02:00Dominik Zajactag:www.banym.de,2011-09-03:/adempiere-world-conference-2011.html<p><a class="reference external image-reference" href="images/adempiere-conference-2011.jpg"><img alt="image0" src="images/adempiere-conference-2011.jpg" /></a></p>
<div class="section" id="from-saturday-and-sunday-03-04-09-2011-the-adempiere-world-conference-takes-place-in-berlin-this-year">
<h2><strong>From Saturday and Sunday 03. -04.09.2011 the ADempiere World Conference takes place in Berlin this year.</strong></h2>
<p>ADempiere is one of the leading open source erp system. It's community
driven project fork of Compiere.For the time of the meeting at the von
Beuth University in Berlin I will …</p></div><p><a class="reference external image-reference" href="images/adempiere-conference-2011.jpg"><img alt="image0" src="images/adempiere-conference-2011.jpg" /></a></p>
<div class="section" id="from-saturday-and-sunday-03-04-09-2011-the-adempiere-world-conference-takes-place-in-berlin-this-year">
<h2><strong>From Saturday and Sunday 03. -04.09.2011 the ADempiere World Conference takes place in Berlin this year.</strong></h2>
<p>ADempiere is one of the leading open source erp system. It's community
driven project fork of Compiere.For the time of the meeting at the von
Beuth University in Berlin I will provide a streaming supported by the
<a class="reference external" href="http://www.piraten-streaming.de/">Piraten Streaming</a>.</p>
<p><strong>Update:</strong></p>
<p>The videos I recorded at the conference are now available for download
<a class="reference external" href="http://www.adempiere.com/ADempiere_World_Conference_2011#Videos">here</a>.</p>
</div>
Tor hosting project2011-08-28T11:02:00+02:002011-08-28T11:02:00+02:00Dominik Zajactag:www.banym.de,2011-08-28:/tor-hosting-project.html<p>Today I thought maybe some of you want to help the Tor project to work
more efficient by running a bridge or a relay but you maybe don't have
the resources or internet connection.</p>
<p>I would like to start a little survey if there is a need to do a …</p><p>Today I thought maybe some of you want to help the Tor project to work
more efficient by running a bridge or a relay but you maybe don't have
the resources or internet connection.</p>
<p>I would like to start a little survey if there is a need to do a hosting
of a tor bridge or tor server for you. If enough people come together I
would setup one in a computer center and run it as long as we find
people who join the project and pay a little amount of the costs for
hosting and bandwidth.</p>
<p>This project will be setup as a non-profit project. Only the costs for
hosting and traffic should be paid.</p>
<p>The money can be paid via Flattr or Paypal and I would setup a site
where you can see how the status of sponsoring is.</p>
<p>Leave me a comment if you would participate on such a project or if you
have some resources to support this idea.</p>
<p><strong>Update:</strong></p>
<p>There is a project doing exactly this:
<a class="reference external" href="http://torservers.net">torservers.net</a></p>
<p>If you want to support the tor project you can give some bugs to them
and they will run exit nodes and bridges from your money. This is very
important for the project and all people who are using tor around the
world. Free, uncensored and secure access to information should be a
right for everybody everywhere.</p>
<p>You even can sponsor a complete exit node and get named as sponsor by
them. Ask your friends, family, your politicians and your boss if free
information and free access to the internet is worth 50€/month for
hundreds of people you can help.</p>
iTerm2 a tool you must have2011-08-04T21:24:00+02:002011-08-04T21:24:00+02:00Dominik Zajactag:www.banym.de,2011-08-04:/iterm2-a-tool-you-must-have.html<p><a class="reference external image-reference" href="images/iterm2.png"><img alt="iTerm2 Logo" src="images/iterm2.png" /></a></p>
<p>I was using iTerm since I bought my Mac and was very happy with the
tool. It is stable and worked well for me. It has nice features like
full screen mode on Snow Leopard but after the update to Mac OS X 10.7
alias Lion the full screen …</p><p><a class="reference external image-reference" href="images/iterm2.png"><img alt="iTerm2 Logo" src="images/iterm2.png" /></a></p>
<p>I was using iTerm since I bought my Mac and was very happy with the
tool. It is stable and worked well for me. It has nice features like
full screen mode on Snow Leopard but after the update to Mac OS X 10.7
alias Lion the full screen mode didn't work anymore. I was looking at
the SourceForge page of the iTerm project and saw it is not active
anymore.</p>
<p>After some search through the Net i found that some more active guys
have forked iTerm and named there project iTerm2. It is hosted on Github
like the most projects I have reviewed the last time. They did a very
nice job with there Lion integration and I hope they hold there speed
and power in the future.</p>
<p>If you need a more comfortable Terminal application with features like:</p>
<ul class="simple">
<li>full screen mode</li>
<li>drag and drop functionality which kicks asses</li>
<li>pos1 and end key functionality to jump to first or last letter you
typed by <fn> + <left/right arrow></li>
</ul>
<p>you should review <a class="reference external" href="http://www.iterm2.com">iTerm2</a>.</p>
<p>Btw. I was thinking how cool it would be if I could copy and paste using
drag and drop out of my terminal and reviewed the code to get into it
and implementing it maybe by myself ... but wow It was already
implemented. It looks like it was implemented back in iTerm times but I
never used the functionality but you should check it out it is awesome!
Just holde <cmd> and for example drag a name of a file listed by ls to
your finder, that's it.</p>
<p>Here you can find iTerm2 on Github: <a class="reference external" href="https://github.com/gnachman/iTerm2">https://github.com/gnachman/iTerm2</a></p>
Easy way to use Tor on Mac OS X and Linux2011-08-02T23:39:00+02:002011-08-02T23:39:00+02:00Dominik Zajactag:www.banym.de,2011-08-02:/use-tor-on-mac-os-x.html<p>If you want to use <a class="reference external" href="http://www.torproject.org">Tor</a> on your Mac OS X
or Linux there is a new bundle you can easy use. The bundle includes all
necessary tools and a preconfigured Firefox with the necessary plugin.</p>
<p>Up to now the <strong>Tor Browser Bundle</strong>is still beta but for me it …</p><p>If you want to use <a class="reference external" href="http://www.torproject.org">Tor</a> on your Mac OS X
or Linux there is a new bundle you can easy use. The bundle includes all
necessary tools and a preconfigured Firefox with the necessary plugin.</p>
<p>Up to now the <strong>Tor Browser Bundle</strong>is still beta but for me it
works without problems. I could post a link here but please download it
directly from the Tor website: www.torproject.org and verify the
checksum to be sure you got a correct version of the software.</p>
<p>I tested the version on Mac and on Fedora 15. Just extract the
downloaded file and run the start script or click on the symbol and
everything starts without further user interaction needed. To be sure
your identity is safe please read the information
here: <a class="reference external" href="https://www.torproject.org/download/download.html.en#warning">https://www.torproject.org/download/download.html.en#warning</a></p>
<p>Maybe you are in the position to support the Tor project by running a
relay or a bridge to make the Tor network more powerful and secure for
people who need to use this nice tool for uncensored internet access.</p>
<p>Some basic information about running a
relay: <a class="reference external" href="https://www.torproject.org/docs/tor-doc-relay.html.en">https://www.torproject.org/docs/tor-doc-relay.html.en</a></p>
Secure erase USB - Stick or Hard Disk on Mac OS X2011-08-01T19:07:00+02:002011-08-01T19:07:00+02:00Dominik Zajactag:www.banym.de,2011-08-01:/secure-erase-usb-stick-or-hard-disk-on-mac-os-x.html<p>Mac OS X brings a build in solution for secure erasing hard disks or usb
devices. The option you should choose depends on what data where stored
on the device you want to delete.</p>
<p>For example if you want to sell your old private hard disc with all your
private …</p><p>Mac OS X brings a build in solution for secure erasing hard disks or usb
devices. The option you should choose depends on what data where stored
on the device you want to delete.</p>
<p>For example if you want to sell your old private hard disc with all your
private photos your tax information etc. on it, you should have some
time to delete it secure. If it's just a usb stick with some music on it
you maybe can safe some time and choose a faster option. If the device
is for business use and it has high secure information stored on the it
you should think about selling this device. In some cases it's better to
erase the data and destroy the device to make it not useable for
anybody.</p>
<p>I use the Disk Utility to do this job. There are some console methods as
well but they do the same thing. The erase mechanism which is built in
the Disk Utility is certified by government institutions (Department of
Defens) of the US and should do its job. If you need higher or different
security certification you maybe can check the German
<a class="reference external" href="https://www.bsi.bund.de/DE/Home/home_node.html">BSI</a> homepage for
information about alternative tools and methods.</p>
<p><img alt="Disk Utiltiy Screenshot" src="images/USB-Erase-1.png" /></p>
<p>Select the Secure Erase Options which fits best to your needs.</p>
<p><a class="reference external image-reference" href="images/SB-Erase-2.png"><img alt="Secure Erase Options Screenshot" src="images/USB-Erase-2.png" /></a></p>
<p><a class="reference external image-reference" href="images/USB-Erase-3.png"><img alt="Secure Erase USB Stick Disk Utility" src="images/USB-Erase-3.png" /></a></p>
Personal project: "Get rid of Adobe Flash"2011-07-22T15:47:00+02:002011-07-22T15:47:00+02:00Dominik Zajactag:www.banym.de,2011-07-22:/personal-project-get-rid-of-adobe-flash.html<p>Flash is a nice fancy web technology developed and used over years now.
Never the less I try to get rid of it.</p>
<p>A lot of security problems are connected with the use of flash in web
browsers. The performance is not the best and it looks like that the …</p><p>Flash is a nice fancy web technology developed and used over years now.
Never the less I try to get rid of it.</p>
<p>A lot of security problems are connected with the use of flash in web
browsers. The performance is not the best and it looks like that the big
players like Google, Apple and Microsoft are more going the HTML 5 way
of doing innovative stuff with the web.</p>
<p>There was a guy already who blogged about using the web without flash
some time ago. Now I do my own experiment with it. I will see if the web
still is working after I deactivate the Adobe Flash plugin in my
browser.</p>
<p>The most web tools I am using like Piwik or Wordpress removed the most
Flash based stuff.</p>
<p>Youtube has a html5 project as well. The complete Google tool set never
was based on Flash and Facebook ... who cares about Facebook .. we have
Google+ now ;-)</p>
<p>Btw. if you want to disable Flash in your Firefox you only need to
deactivate this plugin under Tools -> Add-ons -> Plugins:</p>
<p><a class="reference external image-reference" href="images/flashplugin.png"><img alt="flashplugin" src="images/flashplugin.png" /></a></p>
Update Mac OS X 10.6 to Mac OS X 10.7 alias Lion2011-07-21T09:41:00+02:002011-07-21T09:41:00+02:00Dominik Zajactag:www.banym.de,2011-07-21:/update-mac-os-x-10-6-to-mac-os-x-10-7-alias-lion.html<p>Yesterday Mac OS X Lion was released and after I made a backup of my
machine I started the install process to upgrade to Lion.</p>
<p>Where can you download Lion? The only way up to now is to buy it in the
Apple Appstore. I wrote a tutorial based on …</p><p>Yesterday Mac OS X Lion was released and after I made a backup of my
machine I started the install process to upgrade to Lion.</p>
<p>Where can you download Lion? The only way up to now is to buy it in the
Apple Appstore. I wrote a tutorial based on a post I found in the
internet how to burn a install DVD from the downloaded file
<a class="reference external" href="http://www.banym.de/mac/create-mac-os-x-10-7-alias-lion-dvd">here</a>.</p>
<p>The install process takes around 30 minutes on my old Mac Book Pro.
Before I started the upgrade process I tried to update all of my
installed software to a Lion compatible version. For example Little
Snitch need to be updated to version 2.40. The most of my installed
software delivered updates the last weeks and months to be Lion
compatible.</p>
<p>If you are doing a lot of music stuff with your mac you should wait some
time with the update. Many of the well known products are not Lion ready
at the moment.</p>
<p>The most important applications I am using are Mail, Adium, Firefox,
iTerm, SubEthaEdit, 1Password and some Java based Applications like
Eclipse and Netbeans.</p>
<p>After the first restart and login spotlight is indexing the hard disk
which slows down the performance a little bit. To be sure everything
works fine I started Mail and this takes some time because it updates
the mailstore. In my case this takes around 3 minutes. Time to check how
I can install java. In Lion java is not included anymore. But this is
not a problem. I started terminal and tried what happens if i run java
-version and in the next moment Lion asked me to download and install
java.</p>
<p>Firefox, Adium, iTerm, 1Password and SubEthaEdit work perfectly. The
spotlight indexing process toke around 45 minutes.</p>
<p>For me the update process worked like a charm. Check if all your
applications are compatible and make a backup. Then you can enjoy the
new features of Apples newest operating system.</p>
<div class="section" id="sizeup">
<h2>SizeUp:</h2>
<p>A tool that doesn't work with Mac OS X 10.7 is SizeUp. I hope they will
provide an update the next days or weeks. <strong>Update:</strong> Version 1.3.1 is
Lion compatible and works for me after deleting all old SizeUp related
files using the app delete feature from ForkLift.</p>
</div>
<div class="section" id="truecrypt">
<h2>Truecrypt:</h2>
<p>The second tool which doesn't work is Truecrypt because of the
incompatibility of MacFUSE.
<a class="reference external" href="http://www.tuxera.com/mac/macfuse-core-10.5-2.1.9.dmg">Here</a> you can
download a compatible MacFUSE version. Use the latest TrueCrypt Version
7.0a. Thanks to <a class="reference external" href="http://www.litter.me/wp/?p=33">Stefan Litter</a>.</p>
</div>
<div class="section" id="utms-huawei">
<h2>UTMS Huawei:</h2>
<p>Another thing I was not sure if it would still be working after the
update was my UMTS/3G Huawei E176 stick. When I bought it Snow Leopard
just was released and it didn't came with a working installer for Snow
Leopard but I found a way to install just the driver and configure it
manually. But the stick still works for me. If you need to know how to
install just the driver for a huawei umts stick you can review my blog
post
<a class="reference external" href="http://www.banym.de/mac/huawei-umts-usb-stick-with-snow-leopard">here</a>.</p>
</div>
Change network device name from eth1 back to eth0.2011-07-20T10:15:00+02:002011-07-20T10:15:00+02:00Dominik Zajactag:www.banym.de,2011-07-20:/change-network-device-name-from-eth1-back-to-eth0.html<p>The interface name of a network device increases if the mac address of
the physical or virtual network card changes. A common case is if you
made a clone of a virtual machine for example via VMware or KVM or
replaced a physical network card in a non virtualized server …</p><p>The interface name of a network device increases if the mac address of
the physical or virtual network card changes. A common case is if you
made a clone of a virtual machine for example via VMware or KVM or
replaced a physical network card in a non virtualized server.</p>
<p>If it's a CentOS 6 machine you need to change 2 files to rename the
interface for example from eth1 back to eth0.</p>
<p>One file is the udev rule for network devices which is located here:</p>
<blockquote>
/etc/udev/rules.d/70-persistent-net.rules</blockquote>
<p>Copy the new mac address to the line of your eth0 rule and delete the
new rule for eth1.</p>
<blockquote>
<div class="line-block">
<div class="line"># PCI device 0x15ad:0x07b0 (vmxnet3)</div>
<div class="line-block">
<div class="line">SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:50:56:b2:23:e0", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0"</div>
</div>
</div>
</blockquote>
<p>Modify the network configuration located under:</p>
<blockquote>
/etc/sysconfig/network-scripts/ifcfg-eth0</blockquote>
<p>and replace the old ip with the new one and the old mac address with the
new mac address.</p>
<p>To be sure everything works fine reboot your machine.</p>
Install OpenERP on CentOS 6.0 with Nginx HTTP Proxy2011-07-15T16:14:00+02:002011-07-15T16:14:00+02:00Dominik Zajactag:www.banym.de,2011-07-15:/install-openerp-on-centos-6-0-with-nginx-http-proxy.html<p>This tutorial should help you with the installation process of OpenERP
on CentOS 6.x.</p>
<p>I installed OpenERP server and the OpenERP webgui with a nginx http
proxy on a CentOS 6.0.</p>
<p>First of all I installed minmal CentOS 6.0.</p>
<p>Login as root and process the following steps …</p><p>This tutorial should help you with the installation process of OpenERP
on CentOS 6.x.</p>
<p>I installed OpenERP server and the OpenERP webgui with a nginx http
proxy on a CentOS 6.0.</p>
<p>First of all I installed minmal CentOS 6.0.</p>
<p>Login as root and process the following steps.</p>
<div class="section" id="use-the-official-nginx-repository-for-the-latest-nginx-version">
<h2>Use the official nginx repository for the latest nginx version:</h2>
<p><a class="reference external" href="http://www.banym.de/linux/centos/install-nginx-on-centos-6">How to install nginx on CentOS
6</a></p>
</div>
<div class="section" id="add-the-epel-repository-for-the-two-packages-pyyaml-and-pydot-which-are-not-included-in-the-centos-main-repository">
<h2>Add the EPEL repository for the two packages PyYAML and pydot which are not included in the CentOS main repository.</h2>
<blockquote>
rpm -Uvh
<a class="reference external" href="http://download.fedora.redhat.com/pub/epel/6/i386/epel-release-6-5.noarch.rpm">http://download.fedora.redhat.com/pub/epel/6/i386/epel-release-6-5.noarch.rpm</a></blockquote>
</div>
<div class="section" id="update-the-system-and-install-all-required-dependencies">
<h2>Update the system and install all required dependencies:</h2>
<blockquote>
<p>yum update -y</p>
<p>yum install -y python-devel pychart python-dateutil python-reportlab
python-lxml python-psycopg2 python-mako python-setuptools pytz
PyYAML graphviz pydot python-imaging pywebdav python-vobject
postgresql-server nginx vim system-config-firewall-tui wget</p>
</blockquote>
</div>
<div class="section" id="database-setup">
<h2>Database setup:</h2>
<p>Initialize the database directory:</p>
<blockquote>
service postgresql initdb</blockquote>
<p>Start the PostreSQL server the first time:</p>
<blockquote>
service postgresql start</blockquote>
<p>Add PostgreSQL server daemon to your default runlevel:</p>
<blockquote>
chkconfig postgresql on</blockquote>
</div>
<div class="section" id="setup-system-user">
<h2>Setup system user :</h2>
<blockquote>
<p>useradd openerp</p>
<p>passwd openerp</p>
</blockquote>
</div>
<div class="section" id="create-a-database-role-and-database">
<h2>Create a database role and database:</h2>
<blockquote>
<p>su -c 'createuser --superuser --no-createrole --createdb --pwprompt
openerp' postgres</p>
<p>su -c 'createdb --owner=openerp openerp' postgres</p>
</blockquote>
<p>Download latest OpenERP 6.x version. Please download server and webapp
package with the same version number
<a class="reference external" href="http://www.openerp.com/download/stable/source/">here</a>!</p>
<p>For example:</p>
<blockquote>
<p>wget
<a class="reference external" href="http://www.openerp.com/download/stable/source/openerp-server-6.0.2.tar.gz">http://www.openerp.com/download/stable/source/openerp-server-6.0.2.tar.gz</a></p>
<p>wget
<a class="reference external" href="http://www.openerp.com/download/stable/source/openerp-web-6.0.2.tar.gz">http://www.openerp.com/download/stable/source/openerp-web-6.0.2.tar.gz</a></p>
</blockquote>
<p>Move or download the tarballs for example into the /usr/src/ directory
and extract them.</p>
<blockquote>
<p>tar xvfz openerp-server-6.0.2.tar.gz</p>
<p>tar xvfz openerp-web-6.0.2.tar.gz</p>
</blockquote>
</div>
<div class="section" id="continue-with-installing-the-openerp-server">
<h2>Continue with installing the OpenERP server.</h2>
<p>Change the directory to openerp-server-<yourversion> and run:</p>
<blockquote>
python setup.py install</blockquote>
</div>
<div class="section" id="install-the-database">
<h2>Install the database:</h2>
<blockquote>
su -c 'openerp-server --without-demo=all --stop-after-init --save'
openerp</blockquote>
</div>
<div class="section" id="now-install-the-openerp-webclient">
<h2>Now install the OpenERP webclient.</h2>
<p>Change to the openerp-web directory:</p>
<blockquote>
python setup.py install</blockquote>
<p>Create the log directory for the webclient:</p>
<blockquote>
mkdir -p /var/log/openerp-web</blockquote>
<p>and copy the config file to the /etc directory:</p>
<blockquote>
cp
/usr/lib/python2.6/site-packages/openerp_web-6.0.2-py2.6.egg/doc/openerp-web.cfg
/etc/openerp-web.cfg</blockquote>
<p>open and edit the file to be prepared for access the webgui through the
nginx proxy</p>
<blockquote>
vim /etc/openerp-web.cfg</blockquote>
<p>change and uncomment the following lines:</p>
<blockquote>
<p>tools.proxy.on = True</p>
<p>tools.proxy.base = '<a class="reference external" href="http:/">http:/</a>/<yourproxyurl>'</p>
</blockquote>
<p>Add the following lines to your /etc/local.start to start OpenERP on
startup.</p>
<blockquote>
<div class="line-block">
<div class="line">if [ "`runlevel | awk '{ print $2 }'`" -gt "1" ]; then</div>
<div class="line-block">
<div class="line">su -c 'openerp-server -c ~/.openerp_serverrc' openerp &</div>
<div class="line">su -c 'openerp-web -c /etc/openerp-web.cfg' openerp &</div>
<div class="line">fi</div>
</div>
</div>
</blockquote>
</div>
<div class="section" id="configuration-of-nginx-proxy">
<h2>Configuration of Nginx proxy:</h2>
<p>Create and edit a virtual host for your Openerp configuration.</p>
<p>vim /etc/nginx/conf.d/openerp.conf</p>
<p>past and modify the following lines:</p>
<blockquote>
<div class="line-block">
<div class="line">server {</div>
<div class="line-block">
<div class="line">listen 80;</div>
<div class="line">server_name <yourdomain> ;</div>
<div class="line">location / {</div>
<div class="line">proxy_set_header X-Forwarded-Host $host;</div>
<div class="line">proxy_set_header X-Forwarded-Server $host;</div>
<div class="line">proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;</div>
<div class="line">proxy_pass <a class="reference external" href="http://localhost:8080/">http://localhost:8080/</a>;</div>
<div class="line">}</div>
<div class="line">}</div>
</div>
</div>
</blockquote>
<p>Open the firewall port 80 tcp for webaccess.</p>
<blockquote>
system-config-firewall-tui</blockquote>
<p><a class="reference external image-reference" href="images/openerp-1.png"><img alt="image0" src="images/openerp-1.png" /></a></p>
<p><a class="reference external image-reference" href="images/openerp-2.png"><img alt="image1" src="images/openerp-2.png" /></a></p>
<p><a class="reference external image-reference" href="images/openerp-3.png"><img alt="image2" src="images/openerp-3.png" /></a></p>
<p><a class="reference external image-reference" href="images/openerp-4.png"><img alt="image3" src="images/openerp-4.png" /></a></p>
<p>and configure nginx to start at boot time.</p>
<blockquote>
chkconfig nginx on</blockquote>
<p>Start nginx server the first time:</p>
<blockquote>
service nginx start</blockquote>
<p>Now we need to start openerp with the command we wrote in the
local.start file or reboot the machine to be sure our configuration is
correct.</p>
<p>Try to connect to your configured url. For example:
<a class="reference external" href="http://openerp.example.com">http://openerp.example.com</a> and login with username: admin and password:
admin. Change the password for your admin user directly after your first
login!</p>
<p>References:</p>
<p><a class="reference external" href="http://labs.cre8tivetech.com/2011/01/openerp-simplified-installation-6-0-1/">http://labs.cre8tivetech.com/2011/01/openerp-simplified-installation-6-0-1/</a></p>
<p><a class="reference external" href="https://docs.google.com/document/d/1861eyMCcSE0pNZKGHuPY5OfIatorxkpNg-4wFeiP1wI/edit?hl=en&authkey=COW5nkE&pli=1">https://docs.google.com/document/d/1861eyMCcSE0pNZKGHuPY5OfIatorxkpNg-4wFeiP1wI/edit?hl=en&authkey=COW5nkE&pli=1</a></p>
<p><a class="reference external" href="http://www.openerp.com/forum/topic22108.html">http://www.openerp.com/forum/topic22108.html</a></p>
</div>
Create Mac OS X 10.7 alias Lion DVD2011-07-13T17:41:00+02:002011-07-13T17:41:00+02:00Dominik Zajactag:www.banym.de,2011-07-13:/create-mac-os-x-10-7-alias-lion-dvd.html<p>As you maybe have heard Mac OS X Lion will be available only via the App
Store. Many people asked how they can perform a complete new
installation if you only have access via the App Store to the latest
version of there os. First install Mac OS X 10 …</p><p>As you maybe have heard Mac OS X Lion will be available only via the App
Store. Many people asked how they can perform a complete new
installation if you only have access via the App Store to the latest
version of there os. First install Mac OS X 10.6 and then upgrade? This
would be a bad idea ... first you need to upgrade to the last version of
10.6 and then you would be able to access the Lion installer via the App
Store.</p>
<p>No you don't need to install 10.6 each time you want to reinstall you
os. It's still possible to burn a full featured Mac OS X install dvd.</p>
<p>Thanks to the guys from yourdailymac for this nice
<a class="reference external" href="http://www.yourdailymac.net/2011/06/how-to-create-a-bootable-mac-os-x-lion-installation-dvd/">tutorial</a></p>
<p>The short version:</p>
<p>Open the installation file with right click (cmd + click) -> Show
Package Contents and then burn the image named: InstallESD.dmg to a DVD.</p>
<p>That's everything you need to do to get a fully functional Mac OS Lion
installation DVD.</p>
CentOS 6 is out2011-07-11T14:20:00+02:002011-07-11T14:20:00+02:00Dominik Zajactag:www.banym.de,2011-07-11:/centos-6-is-out.html<p>8 month after RHEL 6 was released the free clone
<a class="reference external" href="http://www.centos.org">CentOS</a> 6 is released. It includes all new
features and is binary compatible to Red Hats Enterprise Linux 6.</p>
<p>Based on Linux kernel 2.6.32 it includes for example PostgreSQL 8.4 and
MySQL 5.1.</p>
<p>Like RedHat, the …</p><p>8 month after RHEL 6 was released the free clone
<a class="reference external" href="http://www.centos.org">CentOS</a> 6 is released. It includes all new
features and is binary compatible to Red Hats Enterprise Linux 6.</p>
<p>Based on Linux kernel 2.6.32 it includes for example PostgreSQL 8.4 and
MySQL 5.1.</p>
<p>Like RedHat, the CentOS team will release 7 Years patches and service
packs for this distribution release.</p>
<p>It's not recommended to update your CentOS 4 or 5 installation. You
should do a new installation if you plan to migrate your software.</p>
<p>Here you can find the complete <a class="reference external" href="http://wiki.centos.org/Manuals/ReleaseNotes/CentOS6.0">release
notes</a> for
Centos 6.0.</p>
Projects2011-07-09T16:59:00+02:002011-07-09T16:59:00+02:00Dominik Zajactag:www.banym.de,2011-07-09:/projects.html<div class="section" id="this-page-should-give-you-an-overview-of-projects-i-am-working-on">
<h2>This page should give you an overview of projects I am working on.</h2>
</div>
<div class="section" id="sinatra-activerecord-shotgun-and-tmux-project-skeleton">
<h2>Sinatra, ActiveRecord, shotgun and tmux project skeleton</h2>
<p>With my Sinatra project skeleton I try to maintain my quick and dirty
Ruby hacks for simple web apps I need for my daily work and private
projects. Maybe I …</p></div><div class="section" id="this-page-should-give-you-an-overview-of-projects-i-am-working-on">
<h2>This page should give you an overview of projects I am working on.</h2>
</div>
<div class="section" id="sinatra-activerecord-shotgun-and-tmux-project-skeleton">
<h2>Sinatra, ActiveRecord, shotgun and tmux project skeleton</h2>
<p>With my Sinatra project skeleton I try to maintain my quick and dirty
Ruby hacks for simple web apps I need for my daily work and private
projects. Maybe I find some time to write some basic documentation on
how to start a project with Sinatra. Here the link to the repository:
<a class="reference external" href="https://github.com/banym/sinatra-activerecord-template">https://github.com/banym/sinatra-activerecord-template</a></p>
</div>
<div class="section" id="simplemessage">
<h2>SimpleMessage</h2>
<p>SimpleMessage is a very basic MQTT publishing client for Mac OS X. It's
designed to simulate multiple devices and send MQTT messages to a
broker. This gadget is mainly for developers to test there MQTT
applications and broker. Code is hosted on github:
<a class="reference external" href="http://github.com/dc-square/SimpleMessage">http://github.com/dc-square/SimpleMessage</a></p>
</div>
<div class="section" id="idempiere">
<h2>iDempiere:</h2>
<p>OSGi + ADempiere ERP = <a class="reference external" href="http://www.idempiere.com">iDempiere</a></p>
<p>This combination and reimplementation of ADempiere ERP one of the
leading open source ERP systems is a big innovation. Mainly developed by
Heng Sin Low and Calros Ruiz this project is another milestone for open
source ERP systems.</p>
</div>
<div class="section" id="adempiere">
<h2>ADempiere:</h2>
<p>The well known open source ERP System based on Compiere. The project was
founded as friendly fork in 2006 by some frustrated implementors and
developers.</p>
<p>Project Wiki: <a class="reference external" href="www.adempiere.com">www.adempiere.com</a></p>
</div>
<div class="section" id="nemo-obsolete">
<h2>NeMo (obsolete):</h2>
<p>With NeMo I created a software appliance with an installed Nagios /
NagioSQL based on CentOS. This project is a total spare time project. If
you want to join this effort give me a hint. Maybe I will give it a more
professional focus for the future.</p>
</div>
Install Grub bootloader from live cd2011-07-09T16:09:00+02:002011-07-09T16:09:00+02:00Dominik Zajactag:www.banym.de,2011-07-09:/install-grub-bootloader-from-live-cd.html<p>Grub is the default bootloader for the most popular Linux distributions.
The installation procedure is not so easy if you're not familiar with
the concept behind it.</p>
<p>After a restore or copy of a system to a new harddisk the bootloader
needs to be reinstalled to this new disk. If …</p><p>Grub is the default bootloader for the most popular Linux distributions.
The installation procedure is not so easy if you're not familiar with
the concept behind it.</p>
<p>After a restore or copy of a system to a new harddisk the bootloader
needs to be reinstalled to this new disk. If you are using a live cd
environment here are some tips to get this task done fast.</p>
<p>Each time I had to restore an old linux machine with Grub as its
bootloader I searched the web for a tutorial and found many references
to the grub-install command. For me this tool didn't work in many cases.
Whatever changed in these special cases with the old grub command and
grub shell was was 10times faster.</p>
<p>Maybe one of you knows why grub-install fails for me .. could it be of a
different kernel versions from live cd and installed environment or I
did something wrong.</p>
<p>In this example we have one disk sda with 3 partitions:</p>
<blockquote>
<p>sda1 = /boot</p>
<p>sda2 is swap partition</p>
<p>sda3 = /</p>
</blockquote>
<p>Grub has a different namespace. The first disk is hd0 and partitions are
named for example hd0,0 for sda1.</p>
<p>To install grub to the first disk with sda1 as its boot partition run:</p>
<blockquote>
<p>grub</p>
<p>root (hd0,0)</p>
<p>setup (hd0)</p>
<p>quit</p>
</blockquote>
<p>This starts the grub shell, with root (hd0,0) you set the partition
where grub has access to the kernel. The command setup(hd0) writes grub
to the mbr of sda.</p>
<p>You need to be sure you /boot partition has all required files for
booting the linux system and all required files for grub. Review your
grub configuration (for example /boot/grub/menu.lst) and have fun with
your new grub installation.</p>
GitHub brings its own Mac client2011-07-04T21:40:00+02:002011-07-04T21:40:00+02:00Dominik Zajactag:www.banym.de,2011-07-04:/github-brings-its-own-mac-client.html<p><a class="reference external" href="http://www.github.com">GitHub</a> became one of the most popular places
for free and commercial software development the last few months. The
market around the great
<a class="reference external" href="http://en.wikipedia.org/wiki/Distributed_revision_control">DVCS</a>
<a class="reference external" href="http://git-scm.com/">Git</a> initiated by Linux Torvalds became more
and more popular. It is fast and fixes many problems for distributed
code development by design.</p>
<p>A colleague of …</p><p><a class="reference external" href="http://www.github.com">GitHub</a> became one of the most popular places
for free and commercial software development the last few months. The
market around the great
<a class="reference external" href="http://en.wikipedia.org/wiki/Distributed_revision_control">DVCS</a>
<a class="reference external" href="http://git-scm.com/">Git</a> initiated by Linux Torvalds became more
and more popular. It is fast and fixes many problems for distributed
code development by design.</p>
<p>A colleague of my gave me a hint that there is a mac client for GitHub
which kicks asses. So let's review this peace of software.</p>
<p>There is a nice tool called <a class="reference external" href="http://www.git-tower.com/">Tower</a> which
was my favorite to become my git client beside the console up to now. I
used git as user the most time and up to now I hadn't the need to buy
Tower as long as there is no project using Git I am involved in.</p>
<p>But let's have a closer look to the offline Mac client now. First
download the App and install it into you application directory and run
it.</p>
<p><a class="reference external image-reference" href="images//github-19.png"><img alt="Welcome Page GitHub for Mac" src="images/github-19.png" /></a>This is the first screen you will see
when you run the application the first time.</p>
<p><a class="reference external image-reference" href="images//github-18.png"><img alt="GitHub for Mac add your user data" src="images/github-18.png" /></a></p>
<p>Enter your git account login data or sign up for a free github account
with this screen and continue.</p>
<p><a class="reference external image-reference" href="images/github-17.png"><img alt="image2" src="images/github-17.png" /></a></p>
<p><a class="reference external image-reference" href="images/github-16.png"><img alt="image3" src="images/github-16.png" /></a></p>
<p>If you plan to share an existing local git repository GitHub for Mac
lists you all local git repositories it found in your home directory.</p>
<p><a class="reference external image-reference" href="images/github-15.png"><img alt="image4" src="images/github-15.png" /></a></p>
<p>I didn't share a local respository but created a new one for an existing
example project. <a class="reference external image-reference" href="images/github-14.png"><img alt="image5" src="images/github-14.png" /></a></p>
<p>If you have a paid account you are able to host private repositories as
well. I only have a free account for open source and public code
projects. I checked the 'Push to GitHub.com' checkbox to share this
project.</p>
<p><a class="reference external image-reference" href="images/github-13.png"><img alt="image6" src="images/github-13.png" /></a></p>
<p>Now the local repository was created in my home directory
~/github/Victoria/</p>
<p><a class="reference external image-reference" href="images/github-12.png"><img alt="image7" src="images/github-12.png" /></a></p>
<p>I copied the project files to the directory and the github client
recognized the changes.</p>
<p><a class="reference external image-reference" href="images/github-11.png"><img alt="image8" src="images/github-11.png" /></a></p>
<p>Add a commit comment which explains the changes in my case it was the
initial import.</p>
<p><a class="reference external image-reference" href="images/github-10.png"><img alt="image9" src="images/github-10.png" /></a></p>
<p>Click 'Publish Branch' in the right upper corner to sync the local
changes to GitHub.com</p>
<p><a class="reference external image-reference" href="images/github-9.png"><img alt="image10" src="images/github-9.png" /></a></p>
<p>Git is designed to work very well with branches and merging. Here I
created a branch for experimental changes to my code and published it.</p>
<p><a class="reference external image-reference" href="images/github-8.png"><img alt="image11" src="images/github-8.png" /></a><a class="reference external image-reference" href="images/github-7.png"><img alt="image12" src="images/github-7.png" /></a></p>
<p>As you can see in the right upper corner while the client is publishing
the changes is shows a process.</p>
<p><a class="reference external image-reference" href="images/github-6.png"><img alt="image13" src="images/github-6.png" /></a></p>
<p>You can review your changes in the changes tab. Now we switch to GitHub
where a friend of my did some review and made a change on my commited
source code. This is a nice feature which GitHub provides. He sent a so
called 'Pull Request' to me with his change. This means he want me to
create his change into my branch. A very useful functionality.</p>
<p><a class="reference external image-reference" href="images/github-5.png"><img alt="image14" src="images/github-5.png" /></a><a class="reference external image-reference" href="images/github-4.png"><img alt="image15" src="images/github-4.png" /></a></p>
<p>Lets merge his 'Pull Request' into my experimental branch.</p>
<p><a class="reference external image-reference" href="images/github-3.png"><img alt="image16" src="images/github-3.png" /></a></p>
<p>Back in the GitHub client for Mac i am now able to sync this change down
to my local repository clone.</p>
<p><a class="reference external image-reference" href="images/github-2.png"><img alt="image17" src="images/github-2.png" /></a><a class="reference external image-reference" href="images/github-1.png"><img alt="image18" src="images/github-1.png" /></a></p>
<p>I hope this gives you a first overview what functionality this new
GitHub client for Mac already has. I think in future releases this tool
will become more powerful and makes the interaction with GitHub more
easy.</p>
Added Flattr to my Blog2011-07-04T09:40:00+02:002011-07-04T09:40:00+02:00Dominik Zajactag:www.banym.de,2011-07-04:/added-flattr-to-my-blog.html<p>As you my have recognized I integrated a Flattr button to my posts since
a few days.</p>
<div class="line-block">
<div class="line">For all who don't know Flattr up to know here is a short description:</div>
</div>
<p>Would be nice if the concept of Flattr is interessting for you and maybe
you join it. And maybe …</p><p>As you my have recognized I integrated a Flattr button to my posts since
a few days.</p>
<div class="line-block">
<div class="line">For all who don't know Flattr up to know here is a short description:</div>
</div>
<p>Would be nice if the concept of Flattr is interessting for you and maybe
you join it. And maybe one of my tutorials or posts is it worth for you
to get flattred.</p>
Problem booting OpenSuSE 11.4 with error "Bug: SoftLookup"2011-06-27T16:47:00+02:002011-06-27T16:47:00+02:00Dominik Zajactag:www.banym.de,2011-06-27:/problem-booting-opensuse-11-4-with-error-bug-softlookup.html<p>On a desktop machine I updated from OpenSuSE 11.1 to 11.4 there appeared
some strange boot problems after installation.</p>
<p>The system freezes each time directly after grub and the only message I
got in textmode was "Bug: SoftLookup". First I thought maybe there are
hardware problems but the …</p><p>On a desktop machine I updated from OpenSuSE 11.1 to 11.4 there appeared
some strange boot problems after installation.</p>
<p>The system freezes each time directly after grub and the only message I
got in textmode was "Bug: SoftLookup". First I thought maybe there are
hardware problems but the machine worked before and using a live cd
everything was fine.</p>
<p>The Failsafe boot option still worked to bring me into the system and I
played with the boot parameters to see what option makes the boot
possible for the Failsafe option. In my case it was nosmp which disables
the multiprocessor configuration. Booting a multiprocessor machine with
only one processor wasn't the solution I was looking for. Then I came
over <a class="reference external" href="http://forums.opensuse.org/english/get-technical-help-here/install-boot-login/460640-solved-boot-freeze-bug-soft-lockup-problems-samsung-r528-laptop.html">this nice forum
entry</a>and
I tried his solution by adding the i915 kernel module to my initrd and
it worked! Of course I checked before if there is a device using this
kernel module.</p>
<p>Just follow the description in the forum post how you can add the i915
module to your initrd permanently.</p>
Create iso file from CD/DVD on Mac OS X2011-06-20T12:13:00+02:002011-06-20T12:13:00+02:00Dominik Zajactag:www.banym.de,2011-06-20:/create-iso-file-from-cddvd-on-mac-os-x.html<p>On Unix like systems it's easy to create an ISO image from an CD or DVD
with dd.</p>
<p>You only need to know the device name of your CD or DVD device and a
terminal.</p>
<p>If you don't know the device name open a terminal and type:</p>
<blockquote>
drutil status</blockquote>
<p>This …</p><p>On Unix like systems it's easy to create an ISO image from an CD or DVD
with dd.</p>
<p>You only need to know the device name of your CD or DVD device and a
terminal.</p>
<p>If you don't know the device name open a terminal and type:</p>
<blockquote>
drutil status</blockquote>
<p>This shows you all of your active devices.</p>
<p>Now use the well known dd command to read all data from the device and
write it 1:1 to a disk image.</p>
<blockquote>
dd if=<nameofyourdevice> of=<filename></blockquote>
<p>for example:</p>
<blockquote>
dd if=/dev/disk1 of=myiso.iso</blockquote>
SizeUp - window management tool for Mac OS X2011-06-19T21:52:00+02:002011-06-19T21:52:00+02:00Dominik Zajactag:www.banym.de,2011-06-19:/sizeup.html<p>With <a class="reference external" href="http://irradiatedsoftware.com/sizeup/">SizeUp</a> I found exactly
what I need for managing my application windows on Mac OS X.</p>
<p>One of my daily use cases where SizeUp helps me a lot is when I have
open many iTerm windows with ssh shells. On my desktop there are often a
lot of shells …</p><p>With <a class="reference external" href="http://irradiatedsoftware.com/sizeup/">SizeUp</a> I found exactly
what I need for managing my application windows on Mac OS X.</p>
<p>One of my daily use cases where SizeUp helps me a lot is when I have
open many iTerm windows with ssh shells. On my desktop there are often a
lot of shells to different machines open and I am working parallel with
them.</p>
<p>Irradiated Software also has an tool called
<a class="reference external" href="http://irradiatedsoftware.com/cinch/">Cinch</a>which is the mouse
driven version of a window management gadget for all who want to have
the functionality know from Windows 7. It's using active corners to
arrange the windows.</p>
<p>But because I am more the keyboard user SizeUp fits better to my
needs.<a class="reference external image-reference" href="images/SizeUp.png"><img alt="SizeUp menu" src="images/SizeUp.png" /></a></p>
<p>As you can see on the screenshot there are short cuts for all functions.
It is possible to split the screen into two or four sections, maximize
or center a window.</p>