Tollef Fog Heen

FOSDEM talk: systemd in Debian

Mon, 28 Jan 2013 16:20 +0100

Michael Biebl and I are giving a talk on systemd in Debian at FOSDEM on Sunday morning at 10. We'll be talking a bit about the current state in Wheezy, what our plans for Jessie are and what Debian packagers should be aware of. We would love to get input from people about what systemd in Jessie should look like, so if you have any ideas, opinions or insights, please come along. If you're just curious, you are also of course welcome to join.

Upgrading Alioth

Sat, 21 May 2011 11:14 +0100

A while ago, we got another machine for hosting Alioth and so we started thinking about how to use that machine. It's a used machine and not massively faster than the current hardware, so just moving everything over wouldn't actually get us that much of a performance upgrade.

However, Alioth is using FusionForge, which is supposed to be able to run on a cluster of machines. After all, this was originally built for SourceForge.net, which certainly does not run on a single host. So, a split of services is what we'll do.

This weekend, we're having a sprint in Collabora's office in Cambridge, actually implementing the split and doing a bit of general planning for the future.

Last afternoon (Friday), European time, we started the migration. The first step is to move all the data off the Xen guest on wagner, where Alioth is currently hosted. This finished a few minutes ago; it turns out syncing about 8.5 million files across almost 400G of data takes a little while.

The new host is called vasks and will host the database, run the main apache and be the canonical location for the various SCM repositories.

We are not decomissioning wagner, but it'll be reinstalled without Xen or other virtualisation which should help performance a bit. It'll host everything that has lower performance requirements such as cron jobs, mailing lists and so on.

I'll try to keep you all updated and feel free to drop by #alioth on irc.debian.org if you have any questions.

Package workflow

Thu, 05 Nov 2009 08:31 +0100

As 3.0 format packages are now allowed into the archive, I am thinking about what I would like the workflow to look like and hoping one of them fits me.

For new upstream releases, I am imaginging something like:

New upstream version is released.
git fetch + merge into upstream branch.
Import tarballs, preferably in their original format (bz2/gzip), using pristine-tar.
Merge upstream to debian branch. Do necessary fixups and adjustments. At this point, the upstream..debian branch delta is what I want to apply to the upstream release. The reason I need to apply this delta is so I get all generated files into the package that's built and uploaded.
The source package has two functions at this point: Be a starting point for further hacking; and be the source that buildds use to build the binary Debian packages.

For the former, I need the git repository itself. It is increasingly my preferred form of modification and so I consider it part of the source.

For the latter, it might be easiest just to ship the orig.tar.{gz,bz2} and the upstream..debian delta. This does require the upstream..debian delta not to change any generated files, which I think is a fair requirement.

I'm not actually sure which source format can give me this. I think maybe the 3.0 (git) format can, but I haven't played around with it enough to see. I also don't know if any tools actually support this workflow.

Killing hold periods

Thu, 22 Nov 2007 09:10 +0100

Daniel Burrows writes about the feature of some call centres whereas if all operators are busy, it gives the caller the option of being called back. He'd like the nice twist of being able to enter his phone number on a web page and then be called back so he doesn't actually have to call, then wait.

I'm not sure where Daniel lives, but I'm happy to report that this practice is quite common here in Norway, so it might well be on its way to whatever companies are local to Daniel.

Also, why does bloglines link to the completely wrong place on dburrow's posts? It links to http://planet.debian.org/tag:blogger.com,1999:blog-$blah rather than the real URL.

Infinite monkeys

Mon, 17 Sep 2007 21:00 +0100

Just like an infinite number of monkeys, given infinite time are likely to produce infinite copies of Hamlet, I knew that given an infinite number of blog postings by Clint, I had to find one which both made sense to me and which I agreed with.

Somebody please write a free syndicate (or syndicate wars) clone.

Making pancakes

Thu, 05 Jul 2007 16:43 +0100

Some people on Planet Debian seem to think that using oil for pancakes is a good idea. They really taste so much better if you use real butter (and preferably an iron pan, not a non-stick one).

Oh, and a nice receipe, which almost matches another one is:

1l milk
4 eggs
5dl flour (I use a mix of coarser and finer flour, but you can use anything you want)

Mix milk and flour, then add eggs last (blends better that way).

Strength of asymmetric and symmetric encryption algorithms

Thu, 15 Mar 2007 08:05 +0100

Yves-Alexis Perez writes a bit about Debian and crypto-containers, comparing cryptsetup and encfs. The comparison is decent enough, except that it's fairly trivial to get cryptsetup to integrate into the whole gnome-volume-manager stack and have a dialogue pop up when you insert an encrypted USB stick or similar. Sure, it's mounted by a root process, but I wouldn't claim it's any kind of insecure because of that.

What did really catch my eye was the line near the end:

[...] but this is a bruteforce attack against master password (1024 bits RSA key), not against 128bits aes key of the container.

Well, according to conventional research, a 1024 bit RSA key is about as strong as an 80 bit symmetric key. A semi-recent RSA paper confirms this too. And to the best of my knowledge, there has not been found weaknesses in AES which lower the effective key size.

Hackergotchi for Robot101

Sun, 04 Jun 2006 21:25 +0100

Since I'm impatient and Robot101 didn't respond within ten minutes of me pinging him on IRC, I'm just posting the result of his request for a hackergotchi.

Above is JPEG, but there's an XCF available too, with full transparency goodness, etc.

Next time, it'd be useful to have a starting image where the head is bit more than 180x230 pixels since doing cropping and resizes and such tend to end with the image not being great.

Also, my space bar is failing and I'll have to call IBM when I get home. I'm actually quite disappointed that I seem to have worn out the space bar in about a year and a half.

Incrementing Zone serials

Fri, 31 Mar 2006 17:27 +0100

-*- zone -*- in one of the first two lines of the file.

How to configure XKB to give you a compose button

Mon, 23 Jan 2006 22:06 +0100

Eric Dorland wonders how to enable the Compose key just using XKB. Personally, I use my caps lock key for that, and using

        Option          "XkbOptions"    "compose:caps"

in /etc/X11/xorg.conf, that's easy enough.

Other options are compose:ralt, compose:rwin, compose:menu and compose:rctrl.