- wlug - list.wlug.org.nz

Trying Out Bluesky
by Lawrence D'Oliveiro 04 Dec '24

04 Dec '24

Just signed up at Bluesky <https://bsky.app/> earlier this morning. Did some searches for stuff on Python, Blender, Linux, NZ etc. Already got into reasonably civil discussions with a bunch of people on related topics, and got some likes on my comments. Feels a lot like Twitter from, say, a decade ago. No doubt there are topics with much greater traffic than those I’ve mentioned. Possibly even some loonies and other questionable content, if you look hard enough. This seems to be a Fediverse-type system, connected via open-source protocols/software. I think there are people running their own servers, it’s not all on bluesky.social.

1 0

OpenStreetMap Migrates To Debian 12 For Enhanced Performance
by Peter Reutemann 04 Dec '24

04 Dec '24

'OpenStreetMap (OSM), the collaborative project to create a free and open map of the world, has migrated its servers to Debian 12 (Bookworm) after 18 years on Ubuntu. This transition brings with it a number of benefits, including improved speed and closer ties with the Debian community. Why the Switch? The decision to migrate was driven by a number of factors, with performance being a key consideration. OSM's infrastructure relies heavily on physical hardware, and the team encountered significant I/O performance issues with certain kernel versions on systems using NVMe storage. Debian 12 offered a solution by allowing the installation of backported kernels, effectively resolving these performance bottlenecks. Another motivating factor was the desire to align more closely with the maintainers of the software packages that OSM relies on. Debian boasts a strong reputation for package maintenance, and many Debian maintainers are deeply invested in the software they support, ensuring prompt attention to critical bugs. A Smooth Transition The migration process was facilitated by OSM's infrastructure management practices. Their server setup is largely code-driven, and rigorous testing is performed using tools like Test Kitchen and Inspec. By adding Debian as a test target platform, the team was able to identify and address any compatibility issues early on. The required code changes were relatively minor, primarily involving adjustments to package names and configuration filenames. The transition involved the following key steps: - Frontend Server Migration: OSM successfully migrated its frontend servers to Debian 12, resulting in a Ruby version upgrade from 3.0 to 3.1. This upgrade allowed for a corresponding upgrade to the Ruby on Rails framework used for the www.openstreetmap.org website. - Networking Management Shift: OSM transitioned from using netplan, the default network management tool in Ubuntu, to systemd-networkd, Debian's preferred tool. This change streamlined network management across both Ubuntu and Debian systems, ensuring consistency. - Custom Package Management: OSM adopted aptly to manage their own Debian package repository. This shift from Ubuntu's Personal Package Archives (PPA) was driven by the need to manage pre-release or custom patches of OSM software. A Shared Community The move to Debian also reflects the strong overlap between the OSM and Debian communities. Many OSM contributors are also active within the Debian ecosystem, fostering a shared understanding and collaborative spirit.' -- source: https://ostechnix.com/openstreetmap-migrates-to-debian-12-for-enhanced-perf… Cheers, Peter

2 1

Raspberry Pi Compute Module 5 Launches as a Modular Version of Raspberry Pi 5
by Peter Reutemann 02 Dec '24

02 Dec '24

'The Raspberry Pi Foundation announced today the general availability of Raspberry Pi Compute Module 5 as the fifth update to their Raspberry Pi CM (Compute Module) series. Designed as a modular version of the Raspberry Pi 5 single-board computer, the Raspberry Pi Compute Module 5 is powered by a 2.4GHz Quad-Core 64-bit ARM Cortex-A76 processor and it’s available with 2GB, 4GB, or 8GB of LPDDR4X-4267 SDRAM memory, as well as with 16GB, 32GB, or 64GB of MLC eMMC storage. Raspberry Pi CM 5 also comes with a powerful VideoCore VII graphics card supporting OpenGL ES 3.1 and Vulkan 1.3 standards, a 4Kp60 HEVC decoder, dual 4Kp60 HDMI display output, 2 × 4-lane MIPI camera/display transceivers, and 30 GPIOs supporting 1.8V or 3.3V operation. Connectivity-wise, the Raspberry Pi Compute Module 5 supports a PCIe 2.0 x1 interface for fast peripherals, two USB 3.0 interfaces for supporting simultaneous 5Gbps operation, Gigabit Ethernet with IEEE 1588 support, and optional dual-band 802.11ac Wi-Fi and Bluetooth 5.0. The Raspberry Pi CM5 IO board features a standard 40-pin GPIO connector, two full-size HDMI 2.0 connectors, two 4-lane MIPI DSI/CSI-2 FPC connectors, two USB 3.0 connectors, a Gigabit Ethernet jack with PoE+ support, an M.2 M-key PCIe socket, a microSD card socket, an RTC battery socket, and a 4-pin fan connector. Despite its small design, Raspberry Pi CM 5 also supports various peripherals, including UART, SPI, I2C, I2S, SDIO, and PWM. On top of that, Compute Module 5 is mechanically compatible with its predecessor, Raspberry Pi Compute Module 4, but provides additional stability with four M2.5 mounting holes at the corners of the board.' -- source: https://9to5linux.com/raspberry-pi-compute-module-5-launches-as-a-modular-v… Cheers, Peter

1 0

Code found online exploits LogoFAIL to install Bootkitty Linux backdoor
by Peter Reutemann 02 Dec '24

02 Dec '24

'Researchers have discovered malicious code circulating in the wild that hijacks the earliest stage boot process of Linux devices by exploiting a year-old firmware vulnerability when it remains unpatched on affected models. The critical vulnerability is one of a constellation of exploitable flaws discovered last year and given the name LogoFAIL. These exploits are able to override an industry-standard defense known as Secure Boot and execute malicious firmware early in the boot process. Until now, there were no public indications that LogoFAIL exploits were circulating in the wild. The discovery of code downloaded from an Internet-connected web server changes all that. While there are no indications the public exploit is actively being used, it is reliable and polished enough to be production-ready and could pose a threat in the real world in the coming weeks or months. Both the LogoFAIL vulnerabilities and the exploit found on-line were discovered by Binarly, a firm that helps customers identify and secure vulnerable firmware.' -- source: https://arstechnica.com/security/2024/11/code-found-online-exploits-logofai… Cheers, Peter

1 0

GIMP 3.0 - a Milestone For Open-Source Image Editing
by Peter Reutemann 30 Nov '24

30 Nov '24

'The long-awaited release of the GNU Image Manipulation Program (GIMP) 3.0 is on the way, marking the first major update since version 2.10 was released in April 2018. It now features a GTK 3 user interface and GIMP 3.0 introduces significant changes to the core platform and plugins. This release also brings performance and usability improvements, as well as more compatibility with Wayland and complex input sources. GIMP 3.0 is the first release to use GTK 3, a more modern foundation than the GTK 2 base of prior releases. GTK 4 has been available for a few years now, and is on the project's radar, but the plan was always to finish the GTK 3 work first. Moving to GTK 3 brings initial Wayland compatibility and HiDPI scaling. In addition, this allows for GIMP users to take advantage of multi-touch input, bringing pinch-to-zoom gestures to the program, and offering a better experience when working with complex peripherals, such as advanced drawing tablets. These features were not previously possible due to the limitations of GTK 2. A secondary result of the transition to GTK 3 is a refreshed user interface (UI), now with support for CSS themes included. In this release, four themes are available by default, including light, dark, and gray themes, along with a high-contrast theme for users with visual impairments. Additionally, this release has transitioned to using GTK's header bar component, typically used to combine an application's toolbar and title bar into one unit. To maintain familiarity with previous releases, however, GIMP 3.0 still supports the traditional menu interface.' -- source: https://tech.slashdot.org/story/24/11/29/134239/ Cheers, Peter

1 0

Both KDE and GNOME To Offer Official Distros
by Peter Reutemann 30 Nov '24

30 Nov '24

'KDE and GNOME have decided that because they're not big and complicated enough already, they might work better if they have their own custom distributions underneath. What's the worst that could happen? A talk from this year's KDE conference, Akademy 2024, looks like it's going to become real. The talk, by KDE developer Harald Sitter, was entitled An Operating System of Our Own, and the idea sounds simple enough: Sitter proposed an official KDE Linux distribution. Now the proposal is gathering steam and a plan is coming together for an official KDE Linux -- codenamed "Project Banana."' -- source: https://tech.slashdot.org/story/24/11/29/2055220 Cheers, Peter

1 0

file browser
by Peter Reutemann 26 Nov '24

26 Nov '24

Hi there Today, I decided to finally switch my default file browser to krusader: https://krusader.org/ For a number of years, I've been using double-commander: https://doublecmd.sourceforge.io/ Mostly, I was quite happy with double-commander, as it had my preferred two-panel approach for managing files (I frequently copy files between various directories around for testing models etc). The two-panel approach was something I came to appreciate back in the DOS days when using the Norton Commander. With Double-commander I could also have an arbitrary number of tabs within a panel. The function buttons at the bottom (rename/copy/view/terminal/etc) were also quite handy when using the mouse. And, very importantly, Double-commander is available for Windows as well. However, remote access via sftp was quite slow (viewing and copying files) and that's when I had to fall back on caja, as it had a much higher throughput. Compared to caja, krusader is much faster when listing remote files. Waiting around for caja to refresh a few thousand files was taking way too long (sometimes up to 30 seconds). That's what gave me the final push to make the switch (on my development machine). Double-commander will still be my go-to tool for Windows machines. Anyway, what is your preferred file browser? Cheers, Peter

2 1

g: An Elegant Alternative for the ls Command in Linux
by Peter Reutemann 25 Nov '24

25 Nov '24

Hi everyone Just came across this post: '“g” is a free and open-source cross-platform alternative to the ls command, offering more advanced features than any other alternative, such as what “exa” can provide. The developer named this tool “g” because it’s written in Go, and “g” is simply easy to remember. It offers various ways to customize output, multiple ways to layout the output, integrated support for Git, advanced sorting mechanisms, fuzzy path matching, and hyperlink support.' -- source: https://linuxtldr.com/g-alternative-of-the-ls-command/ Looks like an interesting alternative. :-) Cheers, Peter

1 0

Red Hat is Becoming an Official Microsoft 'Windows Subsystem for Linux' Distro
by Peter Reutemann 24 Nov '24

24 Nov '24

'You can use any Linux distribution inside of the Windows Subsystem for Linux" Microsoft recently reminded Windows users, "even if it is not available in the Microsoft Store, by importing it with a tar file." But being an official distro "makes it easier for Windows Subsystem for Linux users to install and discover it with actions like wsl --list --online and wsl --install," Microsoft pointed out this week. And "We're excited to announce that Red Hat will soon be delivering a Red Hat Enterprise Linux WSL distro image in the coming months..." Thank you to the Red Hat team as their feedback has been invaluable as we built out this new architecture, and we're looking forwards to the release...! Ron Pacheco, senior director, Red Hat Enterprise Linux Ecosystem, Red Hat says: "Developers have their preferred platforms for developing applications for multiple operating systems, and WSL is an important platform for many of them. Red Hat is committed to driving greater choice and flexibility for developers, which is why we're working closely with the Microsoft team to bring Red Hat Enterprise Linux, the largest commercially available open source Linux distribution, to all WSL users." Read Pacheco's own blog post here. But in addition Microsoft is also releasing "a new way to make WSL distros," they announced this week, "with a new architecture that backs how WSL distros are packaged and installed." Up until now, you could make a WSL distro by either creating an appx package and distributing it via the Microsoft Store, or by importing a .tar file with wsl -import. We wanted to improve this by making it possible to create a WSL distro without needing to write Windows code, and for users to more easily install their distros from a file or network share which is common in enterprise scenarios... With the tar based architecture, you can start with the same .tar file (which can be an exported Linux container!) and just edit it to add details to make it a WSL distro... These options will describe key distro attributes, like the name of the distro, its icon in Windows, and its out of box experience (OOBE) which is what happens when you run WSL for the first time. You'll notice that the oobe_command option points to a file which is a Linux executable, meaning you can set up your full experience just in Linux if you wish. ' -- source: https://tech.slashdot.org/story/24/11/23/0251245 Cheers, Peter

1 0

Ubuntu Linux Impacted By Decade-Old 'needrestart' Flaw That Gives Root
by Peter Reutemann 21 Nov '24

21 Nov '24

'Five local privilege escalation (LPE) vulnerabilities in the Linux utility "needrestart" -- widely used on Ubuntu to manage service updates -- allow attackers with local access to escalate privileges to root. The flaws were discovered by Qualys in needrestart version 0.8, and fixed in version 3.8. BleepingComputer reports: Complete information about the flaws was made available in a separate text file, but a summary can be found below: - CVE-2024-48990: Needrestart executes the Python interpreter with a PYTHONPATH environment variable extracted from running processes. If a local attacker controls this variable, they can execute arbitrary code as root during Python initialization by planting a malicious shared library. - CVE-2024-48992: The Ruby interpreter used by needrestart is vulnerable when processing an attacker-controlled RUBYLIB environment variable. This allows local attackers to execute arbitrary Ruby code as root by injecting malicious libraries into the process. - CVE-2024-48991: A race condition in needrestart allows a local attacker to replace the Python interpreter binary being validated with a malicious executable. By timing the replacement carefully, they can trick needrestart into running their code as root. - CVE-2024-10224: Perl's ScanDeps module, used by needrestart, improperly handles filenames provided by the attacker. An attacker can craft filenames resembling shell commands (e.g., command|) to execute arbitrary commands as root when the file is opened. - CVE-2024-11003: Needrestart's reliance on Perl's ScanDeps module exposes it to vulnerabilities in ScanDeps itself, where insecure use of eval() functions can lead to arbitrary code execution when processing attacker-controlled input. The report notes that attackers would need to have local access to the operation system through malware or a compromised account in order to exploit these flaws. "Apart from upgrading to version 3.8 or later, which includes patches for all the identified vulnerabilities, it is recommended to modify the needrestart.conf file to disable the interpreter scanning feature, which prevents the vulnerabilities from being exploited," adds BleepingComputer.' -- source: https://it.slashdot.org/story/24/11/21/0057206 Cheers, Peter

1 0