Choose style:

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - mracz

Pages: [1] 2 3 ... 5
1
User Submitted Tutorials / Re: Setting up fsprotect
« on: October 03, 2018, 02:45:52 pm »
Hi mracz, why not just install peppermint into a 32gb USB memory and log into it in any computer you want and then just shut down and remove the memory when you're done?

Well in a place I spend most of my daytime on weekdays we do have two types of weak-clients to log on the central server with VPN and RDP. None of the clients machines have HDD, SDD or any fixed hard disk. One has got a 2GB SD Card with fsprotect. When switched on the whole content of the SD card is copied to memory and made RW - the minimal Linux install then opens a VPN channel and connects to the server with RDP automatically. The SD card is never written, only read (RO, by the nature of fsprotect). The other one has got an USB stick with a full system which is of course RW. We have never had to repair or replace an SD Card for 5 years. The USB sticks, which are RW, need to be replaced every now and then (ok, not so very often, but when one needs to be replaced it is really annoying). And you do not need to log out of a client with fsprotected SD card - plug just removed and off you go. Next time the same system will be loaded for sure.

2
Software & Applications / Re: configuring openvpn
« on: August 31, 2018, 05:12:39 pm »
Negative.

I googled out something like it was a problem with old SSL certificate.

https://forums.openvpn.net/viewtopic.php?t=23979

I have found following in syslog:

OpenSSL: error:140AB18E:SSL routines:SSL_CTX_use_certificate:ca md too weak
Cannot load certificate file /home/johndoe/.openvpn/client-johndoe-cert.pem
Exiting due to fatal error

Adding line 'tls-cipher=DEFAULT:@SECLEVEL=0' to connection file in /etc/NetworkManager/system-connections solved the problem. However, I am a bit confused as I think seclevel=0 means NO SECURITY.

 :-\

---
I tried to find some more information on this and now I think that the proposed setting (seclevel=0) does not make security weaker than it was with any previous version of OpenVPN 2.3.*. This whole mess is about an OpenSSL enhancement which this setting - for compatibility reasons with older OpenVPN servers - prevents to be used.  Security is therefore not affected - better to say, if it was weak with previous systems, then it will remain just as weak with newer OpenVPN clients.

However, this is MHO.

3
Software & Applications / Downgrade OpenVPN in Peppermint 9
« on: August 29, 2018, 02:38:54 am »
As I am a pretty old Peppermint user I decided to give a chance to Peppermint 9. After installation, as I used to do,  I sudoed

Code: [Select]
sudo apt install openvpn network-manager-openvpn network-manager-openvpn-gnome

and I got client version 2.4.4 which, much to my trouble, seems to be a version too much fresh to my old OpenVPN Server (running on ClearOS 5.2). I suppose i need OpenVPN 2.3.10 to set up a successful VPN connection. How to downgrade to OpenVPN 2.3.10 in Peppermint 9?

4
Software & Applications / Re: configuring openvpn
« on: August 28, 2018, 03:42:17 pm »
As I am a pretty old Peppermint user I decided to give a chance to Peppermint 9. After installation, as I used to do,  I sudoed

Code: [Select]
sudo apt install openvpn network-manager-openvpn network-manager-openvpn-gnome

and I got client version 2.4.4 which, much to my trouble, seems to be a version too much fresh to my old OpenVPN Server (running on ClearOS 5.2). I suppose i need OpenVPN 2.3.10 to set up a successful VPN connection. How to downgrade to OpenVPN 2.3.10 in Peppermint 9?

5
Installation / Re: Peppermint 8 (?) minimal install
« on: June 10, 2017, 01:51:42 pm »
We don't do a "minimal install" ISO I'm afraid.

You do, if notice for installation media (at least 3.9GB required) is true. I did not check it. 3.9GB is really not much as compared to all the stuff you get on P8.

BTW I did a Debian 8 netinstall with Openbox and managed to get to a basic system with GUI on 2.6GB. Thank you for your answers.

6
Installation / Re: Peppermint 8 (?) minimal install
« on: June 08, 2017, 06:46:48 am »
I got two USB sticks in. I selected the 4GB stick manually. Installation stops due to lack of space - my stick is nominally a 4GB stick but in fact I see only 3.6GB on it. Can not press more space out of it. Never trust the label on a stick.

7
Installation / Peppermint 8 (?) minimal install [SOLVED]
« on: June 07, 2017, 03:18:55 pm »
Is there a way to make a minimal install of P8? I need to set up a system on a 4GB drive. P8 install says it needs 3.9GB for / but I can not install it on a 4GB USB stick.

8
User Submitted Tutorials / Re: Setting up fsprotect
« on: June 03, 2017, 08:15:07 am »
I catch your point. However, if the fs is ro, it does not mean to me as a consequence, that the system is not "run" from the stick. I mean if I start the machine from a live stick and when booted I pull out the stick, the live system will not be able to properly work anymore.

My point is to set up my own P8 "live system", place my persistent things there (my "secrets" e.g. my mailbox imap logins, openvpn keys, rdp access data etc), have a computer "fired up" with my stick so that the complete os, including my home folder  and my private settings go to the memory, pull out the stick, place in a safe part of my pocket and use the computer as long as it is switched on. When I  switch off, all my things are gone. That would probably fit to most computers with 8 GB RAM or more - depends of course on what I need in my OS and how big my home folder is planned.

That is why I associated to fsprotect, but still unsure if this is the way to go.

9
User Submitted Tutorials / Re: Setting up fsprotect
« on: June 03, 2017, 06:29:31 am »
As far as I understand on a "live" system the system itself keeps running on the USB stick or CD. My question is rather for a scenario if I used the stick or CD just for loading the whole system to the memory of the computer which might have some advantages compared to a live system. Hope I am not wrong?

10
User Submitted Tutorials / Setting up fsprotect
« on: June 03, 2017, 04:20:04 am »
I am just wondering how to put P8 on an USB stick that way, that upon booting the whole filesystem is loaded in memory so that contents on the stick might remain ro. Fsprotect seems to do this. But, frankly, I would need some kick to start: is there an itinerary for beginners for this? Or somebody help?    :-\   Thank you.

11
Development / Re: PM8 ideas?
« on: June 03, 2017, 04:11:32 am »
Some laptop users use their machine at home and in the office or at a favorite coffee shop that makes proxy settings relevant. At the moment I miss this feature in P7. Maybe I am wrong but you need to set environment, set apt and reboot (or logout at least) to have new proxy settings work. I do not know how other products solve this but I remember an old application in Windows XP that you could have different locations set and define proxy, default printer even default home page  in your default browser for each location.

I understand that this is not much a Peppermint issue, not even trivial. Just for the record, an application for automatic proxy setting application (e.g. depending on your IP address) might be useful for Peppermint users on the move.

This is just to say thank you for implementing network proxy settings in PM8. Will give a try for running proxy.pac on my laptop soon.

12
Development / Re: PM8 ideas?
« on: February 25, 2017, 04:24:05 am »
Some laptop users use their machine at home and in the office or at a favorite coffee shop that makes proxy settings relevant. At the moment I miss this feature in P7. Maybe I am wrong but you need to set environment, set apt and reboot (or logout at least) to have new proxy settings work. I do not know how other products solve this but I remember an old application in Windows XP that you could have different locations set and define proxy, default printer even default home page  in your default browser for each location.

I understand that this is not much a Peppermint issue, not even trivial. Just for the record, an application for automatic proxy setting application (e.g. depending on your IP address) might be useful for Peppermint users on the move.

13
What are you running Peppermint on? / Lenovo Thinkpad T440s
« on: February 19, 2017, 03:05:42 pm »
out-of-the-box  :)
Code: [Select]
System:    Host: ThinkPad-T440s Kernel: 4.4.0-62-generic x86_64 (64 bit) Desktop: N/A
           Distro: Peppermint Seven
Machine:   System: LENOVO (portable) product: 20A0CTP v: ThinkPad T440s
           Mobo: LENOVO model: 20A0CTP v: NO DPK Bios: LENOVO v: GJET67WW (2.17 ) date: 12/10/2013
CPU:       Dual core Intel Core i7-4600U (-HT-MCP-) cache: 4096 KB
           clock speeds: max: 3300 MHz 1: 2294 MHz 2: 2326 MHz 3: 2388 MHz 4: 2266 MHz
Graphics:  Card: Intel Haswell-ULT Integrated Graphics Controller
           Display Server: X.Org 1.18.4 drivers: intel (unloaded: fbdev,vesa) Resolution: 1920x1080@60.06hz
           GLX Renderer: Mesa DRI Intel Haswell Mobile GLX Version: 3.0 Mesa 12.0.6
Audio:     Card-1 Intel 8 Series HD Audio Controller driver: snd_hda_intel Sound: ALSA v: k4.4.0-62-generic
           Card-2 Intel Haswell-ULT HD Audio Controller driver: snd_hda_intel
Network:   Card-1: Intel Ethernet Connection I218-LM driver: e1000e
           IF: enp0s25 state: up speed: 1000 Mbps duplex: full mac: c8:5b:76:2f:17:f7
           Card-2: Intel Wireless 7260 driver: iwlwifi
           IF: wlp3s0 state: up mac: 7c:7a:91:b0:c3:1d
Drives:    HDD Total Size: 250.1GB (11.8% used) ID-1: /dev/sda model: Samsung_SSD_850 size: 250.1GB
           ID-2: /dev/mmcblk0 model: N/A size: 2.0GB
Partition: ID-1: / size: 15G used: 6.6G (45%) fs: xfs dev: /dev/sda1
           ID-2: /home size: 211G used: 14G (7%) fs: xfs dev: /dev/sda2
           ID-3: swap-1 size: 8.00GB used: 0.00GB (0%) fs: swap dev: /dev/sda3
RAID:      No RAID devices: /proc/mdstat, md_mod kernel module present
Sensors:   System Temperatures: cpu: 53.0C mobo: N/A
           Fan Speeds (in rpm): cpu: 2487
Info:      Processes: 236 Uptime: 5:00 Memory: 1824.3/7675.1MB Client: Shell (bash) inxi: 2.2.35
plus a proud WWAN card, which is not listed up here, but works like  a charm - I got internet connection e-v-e-r-y-w-h-e-r-e.

14
User Submitted Tutorials / Re: XFCE Clock - Custom formatting codes
« on: November 19, 2016, 03:39:23 am »
To give some colors to your precious time

Code: [Select]
<span foreground="white">%R</span>%n<span foreground="white">%m-%d</span>

Copy this to Clock options format in panel settings.

15
Networking / Re: Automatic proxy settngs
« on: November 07, 2016, 12:09:16 pm »



BTW, anyone know how I can properly test this proxy configurator ? .. it certainly sets the correct environment variables, but the interweb seems to work no matter what I put as the settings :-\

My test environment would be a wifi connection outside of the company firewall with direct internet access, an other wifi connection on the local network with proxy and a cup of coffe. That is exactly the situation near my desk in my office.

Pages: [1] 2 3 ... 5