@Oksana Does it make it arbitrarily slow and buggy too? Does it break updates constantly for an "authentic' Windows experience?

@IThomeboy80 said in Suggestions for an IPTV player for Ubuntu:

Maybe VLC might be a good option since it plays almost al media type files.

It doesn't handle many channels

Alternative to manually install 3rd party repositories

There is an alternative to manually manage repositories and keys and that is to use extrepo

extrepo is a curated list of 3rd party repositories and keys and it's a debian package.
It's only been around a couple of years so I don't know how widely used it is yet.

Installation

To install it run

apt install extrepo Add repository

To add postgreSQL repository for example:

extrepo enable postgresql Disable repository

To disable a repository, for example:

extrepo disable postgresql Where do files go?

extrepo puts apt config files in /etc/apt/sources.list.d as you would manually but manages keys in it's own directory /var/lib/extrepo/keys

Repositories available

Currently these repositories are in there:

anydesk apertium-nightly apertium-release bareos belgium_eid_continuous brave_beta brave_nightly brave_release caddyserver consol debian_official dns-oarc docker-ce edge elbe eturnal eyrie fai feistermops gitlab_ce gitlab_ee gitlab_runner google_chrome google_cloud grafana grafana_beta grafana_enterprise grafana_enterprise_beta haproxy-2.8 i2pd janitor jellyfin jenkins jitsi-stable kea keybase kicksecure kicksecure_developers kicksecure_proposed kicksecure_testers lihas liquorix matrix mobian msteams neurodebian_software newrelic nginx node_12.x node_14.x node_16.x node_18.x notesalexp ooni openmodelica-contrib-nightly openmodelica-contrib-release openmodelica-contrib-stable openmodelica-nightly openmodelica-release openmodelica-stable openstack_antelope openstack_zed openvpn opera_stable opsi passbolt postgresql prosody proxmox-ceph-quincy proxmox-pve proxmox-pve8 r-project raspberrypi raspbian-addons realsense rspamd signal skype slack speedtest-cli spotify steam surface-linux sury syncevolution syncthing teamviewer_default teamviewer_preview torproject trinity vector vscode vscodium weechat whonix whonix_developers whonix_proposed whonix_testers winehq wire-desktop wire-internal-desktop wtf wtf-lts x2go x2go-extras x2go-lts x2go-nightly xpra xpra-beta yarnpkg zammad zulu-openjdk

@dafyre Yes, I did. I am using a different kernel now and for the moment, things seem to be happy! (Ish!)

@CCWTech said in Unable to connect Ubuntu with Google Online Accounts:

Jun 08 11:15:59 CCW-HAL systemd[3523]: vte-spawn-8b4a59a3-a060-4bdd-92e6-285656bdb9a2.scope: Consumed 3.448s CPU time.
Jun 08 11:16:01 CCW-HAL gnome-shell[3803]: g_closure_unref: assertion 'closure->ref_count > 0' failed
Jun 08 11:16:01 CCW-HAL gnome-shell[3803]: g_closure_unref: assertion 'closure->ref_count > 0' failed
Jun 08 11:16:01 CCW-HAL gnome-shell[3803]: g_closure_unref: assertion 'closure->ref_count > 0' failed
Jun 08 11:16:29 CCW-HAL systemd[3523]: Started app-gnome-org.gnome.Terminal-10924.scope - Application launched by gnome-shell.
Jun 08 11:16:29 CCW-HAL dbus-daemon[3552]: [session uid=1000 pid=3552] Activating via systemd: service name='org.gnome.Terminal' unit='gnome-terminal-server.service' requested by ':1.167' (uid=1000 pid=10927 comm="/usr/bin/gnome-terminal.real" label="unconfined")
Jun 08 11:16:29 CCW-HAL systemd[3523]: Starting gnome-terminal-server.service - GNOME Terminal Server...
Jun 08 11:16:29 CCW-HAL dbus-daemon[3552]: [session uid=1000 pid=3552] Successfully activated service 'org.gnome.Terminal'
Jun 08 11:16:29 CCW-HAL systemd[3523]: Started gnome-terminal-server.service - GNOME Terminal Server.
Jun 08 11:16:29 CCW-HAL systemd[3523]: Started vte-spawn-9cee1911-372a-4bb4-8b57-694984e43990.scope - VTE child process 10955 launched by gnome-terminal-server process 10931.
Jun 08 11:16:49 CCW-HAL gnome-control-c[8079]: Error showing account: Child process exited with code 1
Jun 08 11:16:53 CCW-HAL gnome-online-accounts-panel.desktop[9764]: GLib-GIO: Using cross-namespace EXTERNAL authentication (this will deadlock if server is GDBus < 2.73.3)GLib-GIO: _g_io_module_get_default: Found default implementation gvfs (GDaemonVfs) for ‘gio-vfs’GLib: unsetenv() is not thread-safe and should not be used after threads are createdGLib-GIO: _g_io_module_get_default: Found default implementation dconf (DConfSettingsBackend) for ‘gsettings-backend’GoaBackend: Loading all providers: GoaBackend: - googleGoaBackend: - owncloudGoaBackend: - windows_liveGoaBackend: - exchangeGoaBackend: - lastfmGoaBackend: - imap_smtpGoaBackend: - kerberosGoaBackend: activated kerberos providerGLib-GIO: _g_io_module_get_default: Found default implementation gnutls (GTlsBackendGnutls) for ‘gio-tls-backend’Failed to create account: Dialog was dismissed
Jun 08 11:16:53 CCW-HAL xdg-desktop-por[3907]: Realtime error: Could not map pid: Could not determine pid namespace: Could not find instance-id in process's /.flatpak-info
Jun 08 11:17:01 CCW-HAL CRON[11093]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 08 11:17:01 CCW-HAL CRON[11094]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
Jun 08 11:17:01 CCW-HAL CRON[11093]: pam_unix(cron:session): session closed for user root
Jun 08 11:17:06 CCW-HAL kernel: WebKitWebProces[11026]: segfault at 55bd22ad9adc ip 000055bd22ad9adc sp 00007ffd1f6adbe8 error 14 likely on CPU 2 (core 2, socket 0)
Jun 08 11:17:06 CCW-HAL kernel: Code: Unable to access opcode bytes at 0x55bd22ad9ab2.
Jun 08 11:17:36 CCW-HAL gnome-shell[3803]: Window manager warning: WM_TRANSIENT_FOR window 0x3a02767 for 0x3a02778 window override-redirect is an override-redirect window and this is not correct according to the standard, so we'll fallback to the first non-override-redirect window 0x3a006dc.
Jun 08 11:17:42 CCW-HAL systemd[1]: Starting systemd-tmpfiles-clean.service - Cleanup of Temporary Directories...
Jun 08 11:17:42 CCW-HAL systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.
Jun 08 11:17:42 CCW-HAL systemd[1]: Finished systemd-tmpfiles-clean.service - Cleanup of Temporary Directories.
Jun 08 11:17:42 CCW-HAL systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dclean.service.mount: Deactivated successfully.
Jun 08 11:18:10 CCW-HAL gnome-shell[3803]: Window manager warning: WM_TRANSIENT_FOR window 0x3a029e2 for 0x3a029f0 window override-redirect is an override-redirect window and this is not correct according to the standard, so we'll fallback to the first non-override-redirect window 0x3a006dc.

Looks like it may be a known bug: https://launchpad.net/bugs/2019739

Side question: When does 23.04 get moved into LTS mode?

@Obsolesce said in Allow Binaries on Linux to Run on Well Known Privileged Ports:

@Pete-S said in Allow Binaries on Linux to Run on Well Known Privileged Ports:

If you search for net_bind you would assume it would find both these post but it finds nothing.

It seems to only search "words", and that isn't a word or part of a word.

That does seem to be the case. It's not smart at all.

@scottalanmiller said in Bind Linux Process to Well Known Web Ports When Not Root:

If you have ever tried to run a user space program on Linux with a port below 1024 you know that this is a security problem and you are not allowed to do so. There is a simple fix for this, but it is not well known.

Once you know the binary that you will be using to open the low number (well known) port you can use this command to grant it permission to use these ports without otherwise compromising security.

setcap cap_net_bind_service+ep /my/binary/file

Now you can run your application. This is most commonly used for user space web applications that want to use port 80 or 443 without requiring that you run a reverse proxy in front of them.

Good to know!

I found this as an example of how to use it and also commands to remove the permission:
https://cwiki.apache.org/confluence/display/HTTPD/NonRootPortBinding

The setcap utility seems to be available in the libcap2-bin package on debian distros.

I haven't checked if it's installed by default.

@JaredBusch said in UFW or IPTABLES:

@Pete-S said in UFW or IPTABLES:

So I think the current recommendation is to either stick to ufw or firewall-cmd or just use nft directly.

I try to. This was the first time I've had a need to go outside the box of ufw or firewall-cmd to use direct iptables in years.

Yes, it's only when you need more control.

I've looked into this before and it wasn't not super obvious how all these tools interact. But nowadays ufw and firewalld are services to manage nftables. nftables itself manages the netfilter packet filtering mechanism in the kernel.

The ability to use iptables are just for legacy reasons and they're converted to nftables rules behind the scenes.

Since ufw (canonical project) and firewalld (redhat project) where initiated when iptables was used, I'm not sure their existence is warranted in the same way. At least not by sysadmins.

I'm looking at setting firewall rules automatically in a project and it seems like using nftables directly makes the most sense. That said I have to learn nftables first 🙂

@scottalanmiller said in Remote Screen Blank in Ubuntu 22.04 | Switch Wayland to Xorg:

Normally all we have to do is change it back.

That is not fixing the problem though. Simply working around it.

The problem is why do these tools not work under Wayland?

I should say, not even a personal customer. It's just a friend who needs support. 🙂