- WLUG - wlug.mailman3.com

PGP Key Signing Party
by Eric Martin April 29, 2007

April 29, 2007

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This upcoming meeting we are going to have a PGP Key Signing Party. For those of you who don't know what PGP is, allow me to briefly explain. This is all base off of the GPG Key Signing HOWTO (http://www.rubin.ch/pgp/kspa/gpg-party.en.html) which I suggest for further reading. Those who do know can feel free to skip down to the next paragraph. PGP stands for Pretty Good Privacy, and is a Public Key Infrastructure that allows us to communicate securely and deal with data in a secure fashion. There is a public key that one would typically upload to a server and a private key that you hold on to. With the private key you can decrypt / sign, and with the public key you can encrypt / verify emails and documents. Key signatures come into play when you validate that a specific key belongs to a specific person and extend the web of trust. Here's what needs to be done BEFORE the meeting on your computer, or on a secure terminal (e.g. not in a computer lab on your campus). I'll post directions both for GPG (Gnu Privacy Guard) and Kgpg (the KDE front - -end to gpg for all of those who like GUIs). 1. Generate a Key Pair / Verify your key won't expire soon gpg --gen-key (Default values of DSA/Elgamal is fine and the default of 2048 is good.) I recommend 3 - 5 years for a key lifespan (how long the key will be good for) 1a) for those of you wishing to use Kgpg, goto Keys -> Generate Key Pair and fill in the dialog box Once you create the New key pair, check the Save As box under _Revocation Certificate_ to save a Revocation Certificate (see 2) 1c) For those of you who already have a key, make sure yours isn't about to expire (like mine did). If it has expired, you can extend the life by $ gpg --edit-key <key-id> and typing expire at the command prompt next, generate a new key-pair and sign your new key with your old key so anyone who trusted your old one will trust the new one. 2) Generate a revocation certificate Revocation certificates are for situations where you forget your passphrase, the key becomes comprised, etc you can revoke your key. $ gpg --output revoke.asc --gen-revoke <key-id> Save this in multiple places, print a copy etc in case you need it. 2GUI) If you didn't create a revocation cert in Kgpg, just right click on your new key and select Revoke Key. when the box pops up only check Save As 3) Upload your key to the Designated server for this party (pgp.mit.edu) $ gpg --send-key --keyserver=pgp.mit.edu <key-id> 3GUI) Right Click on the Key, select Export Public Keys, select Default Key Server (make sure it's pgp.mit.edu under Settings) 4) Email me your key's fingerprint so I can add it to the list $ gpg --fingerprint <key-id> Copy and Paste that into an email to the coordinator (me, Eric Martin). 5) print out a copy of that same output and bring it to the meeting. I'll make up a check list and bring them to the meeting for everyone to use. Example output from Step 4: pub 1024D/A9413B9F 2007-04-09 [expires: 2010-04-08] Key fingerprint = D1C4 086E DBB5 C18E 6FDA B215 6A25 7174 A941 3B9F uid Eric J. Martin <eric.joshua.martin(a)gmail.com> uid Eric J. Martin <freak4uxxx(a)gmail.com> sub 2048g/01F81B8E 2007-04-09 [expires: 2010-04-08] my <key-id> is A9413B9F (which is always the same as my last 8 hex digits of my fingerprint). If like me you don't always remember your key-id you can use your email address and it will still work. My full key information is: Key ID: A9413B9F Key Type: DSA Hex Fingerprint: D1C4 086E DBB5 C18E 6FDA B215 6A25 7174 A941 3B9F Key Size: 1024 (The DSA key is always 1024 bits. The ElGamal Encryption key is 2048 bits in my case, but isn't needed for the keysigning party.) What you should bring to this party 1. Yourself, no exceptions 2. Two forms of positive photo ID - driver's license and passport are good 3. Key Id, Key Type, Hex Fingerprint and Key size info ***Please print out your own copy of your info to compare against mine when you arrive *** 4. Pen / Pencil What you Should Not Bring 1. Computer I want to thank Chuck Anderson for helping me out. If you have any questions please let me know. Eric -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGMBvKaiVxdKlBO58RAsCVAJ9cA488l+SybdxD+rgqNWGi/U9tUQCeMvH8 UAhMTFVRG5SbVVn5jqbVwqg= =BSzn -----END PGP SIGNATURE-----

2 1

MySQL Server Hardware
by joel d April 27, 2007

April 27, 2007

I'll take a stab at this one. At work our MySQL database contains product info and indexing data. The reasoning for designing and taking this outside of the business application is the business app. doesn't do web communication well (limited functionality and at times spotty app reliability). The business app doesn't matter (and I bet no one has heard of it anyway). Our design spec was hearty at a HP DL 385 with dual AMD CPUs (dual core I think) 5GB of RAM and around 7 internal 15k drives in RAID 5. Every bit of hardware is HP/Compaq. Without starting a distro thread we picked Red Hat AS V4. This combo has served us well and I am sure *many* other distros would do this at least as well. For us our biggest corporate reason for R.H. was most of our application vendors suported R.H in one way or another (a vote for getting good at only one skillset/distro). During application & DB development we considered uptime and ordered a second identical box mainly for a total server failure of any sort. They run very well as MySQL master and slave. In the year it has been up we are very happy with this combination. Feel free to forward any specific questions (direct or via the group). Hope this helps, Joel ============================= Date: Tue, 24 Apr 2007 14:59:55 -0400 From: "John Westcott, IV" <John.Westcott(a)tufts.edu> Subject: [Wlug] MySQL Server Hardware To: wlug(a)mail.wlug.org Message-ID: <20070424145955.3hftuclhdwg0ck4s(a)webmail.tufts.edu> Content-Type: text/plain; charset=ISO-8859-1; format="flowed" Howdy All, I work in a place that has traditionally used Sun Sparc hardware running Solaris to host a production MySQL environment. We are going to be replacing our database servers this year and I am trying to determine if I want to maintain the norm or if I want to try to change. I am interested to see what other people use for hardware/OS for a production MySQL installation that requires a high amount of uptime. Thanks in advance for any replies. -John Westcott

1 0

2 things
by Mike Leo April 24, 2007

April 24, 2007

We talked about this at one point: http://arstechnica.com/news.ars/post/20070422-child-porn-case-shows-that-an… also.....wlug.org is down?

1 0

Hauppauge 500 woes
by Mike April 22, 2007

April 22, 2007

I've been working on setting up a MythTV box with a Hauppauge 500. The reception I am getting is a bit grainy. I read that it could be the firmware, too high of a signal, or too low of a signal. I took care of the firmware last night by following the directions on their wiki. The picture is still a bit grainy. Before I go out an buy a signal booster I was wondering if anyone had any ideas or experience with the 500. ~Mike -- They who would give up an essential liberty for temporary security, deserve neither liberty or security --Ben Franklin

3 4

New ULTRA1 - one step forward, two steps backward....
by ken jones April 20, 2007

April 20, 2007

Folks, When the box failed to boot, you might remember, it complained that the kernel was "too old". I remade the box using the newer kernel 2.6.20. I apparently configured the correct silo.conf (there are five of them in there when using the livecd). It looked like it was going to BOOT!! :-) See below..... Trouble is this is as far as it got. I printed and used as reference the Gentoo Linux 2006.1 SPARC Handbook, the Using UTF08 with Gentoo document and the Gentoo Upgrading Guide. Nevertheless I had a very difficult time with manual configuration of the kernel. I had not the faintest idea which modules I could ignore and which I needed to modularize Question: is there a log somewhere? I did emerge syslog-ng. Another question: Where is the detailed documentation on all the modules? Final question: How do I get a hint at what I did wrong? Ken ----------------snip of hyperterminal watching SUN ULTRA boot.------------ Sun Ultra 1 UPA/SBus (UltraSPARC 200MHz), No Keyboard OpenBoot 3.11, 192 MB memory installed, Serial #9633364. Ethernet address 8:0:20:92:fe:54, Host ID: 8092fe54. Initializing Memory \ Initializing Memory \ Initializing Memory \ Initializing Memory - Initializing Memory - Boot device: disk File and args: SILO Version 1.4.13 boot: Allocated 8 Megs of memory at 0x40000000 for kernel Loaded kernel version 2.6.20 Remapping the kernel... done. Booting Linux... -----------------------------------end snip-----------------------------

2 1

3D support
by dulsi＠identicalsoftware.com April 19, 2007

April 19, 2007

I started looking for a new laptop. I'd like one that can play Neverwinter Nights with open source drivers. Obviously that is a problem since 3D support without the binary drivers is not great. I figured since the game is rather old a good cpu (or two for the duo) and a well supported open source driver (I remember hearing Intel having released an open source driver) that it could run reasonably. I asked some linux laptop vendors and everyone told me that I would need the binary drivers. Are they right and we still can't run a 5 year old game? Am I stuck waiting for nouveau? Dennis Payne dulsi(a)identicalsoftware.com

1 0

JOBS - Several Linux roles Embedded and Kernel projects
by John Spencer April 16, 2007

April 16, 2007

We have 2 clients in MA and one in NH that are looking for Linux experts for various consulting projects. Our Client in MA (6+ mths.) is a leading provider of comprehensive compliance and content control solutions. They offer comprehensive network and desktop solutions that provide comprehensive visibility and control of inappropriate activity and information leakage across all channels of communications. Linux systems, real time processing, networking, C++/C Developer (Principal Level) to work on a Second generation of product from scratch. Will leverage existing pieces from their current product but begin with a new scalable and modular architecture. Heavy LINUX systems exp. with Windows OR Heavy WINDOWS with Linux systems. Strong C++/C, Real-time processing. Agile Development- " High Quality/ Fast Paced". Using Eclipse and Subversion. Low-level programming with File Systems, etc. NO Java needed. They are using RedHat Linux 2.6 kernel. MUST HAVE: Have been part of a team that has shipped a product and/or built a product that was shipped. Experience getting a product through its life-cycle and gotten it to market. STRONG Communication Skills, Highly Collaborative, Results driven, No hand-holding, Strong Development. ************************************************************************ ** Consultant needed as part of a small team (in MA 6 mths temp to perm possible) to produce high quality functional specifications, design specifications, product code, unit tests, and build scripts as needed. You must also be able to rapidly and effectively troubleshoot, diagnose, and resolve defects in an existing code base. You must be comfortable selecting and maintaining an appropriate focus in your daily work that will range from broad and abstract system architecture issues to detailed and concrete implementation issues. Responsibilities: - Provide software support and integration for new hardware features as they get added to the platform - Provide Linux support to upgrade Linux distribution as well as associated build environment - Work on low level features such as Software Upgrade - Instrument code and help analyze resource utilization - Maintain code repository - Address operational issues - Work with team on code releases Requirements - BS or MS in Computer Science, or equivalent experience - Either Real-Time OS or DSP experience - Experience in Linux, C, C++, Perl - Innovation and attention to detail - Ability to work independently but to know to get direction when you need it - Ability to work well with others on a small focused team - Excellent written and oral skills - Ability to obtain security clearance ************************************************************************ ********************************************** Principal Software Engineer (6+ mths in southern NH) Our client is looking for a Sr. C++ developer to replace current functionality on their embedded cards with edge nodes Linux based servers. They are currently running 1500 streams/card and want to run 2500 streams/edge node. Must have experience at the Linux kernel, driver and file systems level. This is mostly new development with some porting of the existing functionality from the embedded card. Must have either SMP or experience writing code in a multiprocessor environment. If you are interested and qualified, please send your confidential resume to jspencer(a)optimaleng.com Regards, John John Spencer (978) 256-1113 ext 7608 jspencer(a)optimaleng.com OPTIMAL ENGINEERING PARTNERS "Your Optimal partner for full-lifecycle engineering services in embedded and real-time, systems and application development" www.optimalengineering.com <http://www.optimalengineering.com/>

1 0

I am getting discouraged with Gentoo on ULTRA1
by ken jones April 16, 2007

April 16, 2007

For those of you who are kind enough to care....sigh. On my Ultra1 I succeeded in following the directions in <http://www.gentoo.org/doc/en/handbook/handbook-sparc.xml> to the letter, or so I thought. I "emerge'd" successfully. I compiled successfully. I chroot'd successfully. I removed the CD from its drive. I boot'd and I got the following. yadda yadda yadda.... VFs: Mounted root(ext3 filesystem) readonly Mounted devfs on /dev FATAL: kernel too old Unimplemented SPARC system call 188 Kernel panic: Attempted to kill init! Press Li-A to return to the boot prom I compiled kernel-2.4.34. I chose 2.4 over 2.6 because the handbook hinted I should.. Now I do not even know what questions to ask myself. I checked Google on the "kernel too old" message and the "Attempted to kill" message. I could not understand the few matches that it found. My bet is that I need bigger SCSI hard drives. I'll also be glad to shut up if this is getting boring. Ken

4 3

New ULTRA1 success - almost
by ken jones April 15, 2007

April 15, 2007

I have succeeded in compiling Gentoo Linux-2.4.34-sparc kernel on my new ULTRA1. This machine-toy has kept me off the streets and out of trouble for the last couple days. (The weather has been cooperative toward the same end.) I have a question. The Gentoo instructions <http://www.gentoo.org/doc/en/handbook/handbook-sparc.xml?part=1&chap=7#comp…> tell me that if my kernel is too big that it might not boot. "If the (uncompressed) size is bigger than 2.5 MB (for Sparc32) or 3.5 MB (for Sparc64), reconfigure your kernel until it doesn't exceed these limits. One way of accomplishing this is by having most kernel drivers compiled as modules. Ignoring this can lead to a non-booting kernel." My kernel after a strip command is still 3.7M. -----------snip from command line after a strip command----------- (chroot) livecd linux # strip -R .comment -R .note vmlinux (chroot) livecd linux # ls -lh vmlinux -rwxr-xr-x 1 root root 3.7M Apr 13 06:03 vmlinux --------------end snip---------------- Should I take this warning seriously? How do I figure out which drivers to deselect from menuconfig? lspci gives me no response. I am not sure what is in my machine. Ken Jones

5 7

Funny Coincidence
by Eric Martin April 14, 2007

April 14, 2007

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For those of you who like funny coincidences, I just want to point out that last year we had this exact same conversation about recycling comptuers (I sent an email on April 9th, 2006). http://mail.wlug.org/pipermail/wlug/2006-April/005287.html Must be the whole 'Spring Cleaning' thing. Just thought some of you would find it interesting. Eric -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD4DBQFGIDxVaiVxdKlBO58RAn7lAJ9lNH/LeLtQM26PkEGCImuvgDr3QgCYpBNo ypatPpWtwOEQK+D48pDWFA== =lxe8 -----END PGP SIGNATURE-----

1 0