Who is user jetty and why does he have an account on my machine?

As some people can tell, I have installed Fedora 17 on one of my systems at home.

The work laptop (a very nice IBM thinkpad T500) is about dead due to a TSA checkup from last FUDcon and has never been able to handle any of the GNOME-3 updates (I tried Fedora 15 and 16 for a short while but the system would auto-shutdown from heat overload after a bit.)

I had gotten an ASUS laptop for the Christmas of 2010 which had been used to deal with various "Windows" software that was needed for our neighborhood association and for me to play around with Cygwin. I finally decided I had done enough of that for a while, and it was time to play around with Fedora on it to see if how it would run. I had also tried Fedora 15 and Fedora 16 LIVE on the system, but had found it rather flakey in its graphics.. After reading Adam Jacksons and others updates to the X server I figured I should give 17 a go.

Install Trial #1. Since I have to keep the Windows side until my time on the association board is over.. I decided to resize the Windows partitions to fit Fedora on it. I had read that Fedora could do this but found out that this feature was no longer available, or that something with the laptops Windows 7 NTFS was not recognizable. Never fear,  ask.fedoraproject.org had the answer I needed: reboot into Windows and use its built in tools.

Install Trial #2. Install the Beta from the DVD. The install went very well though I wish some of the pages could have been replaced with the ones that will show up in Fedora 18. I went through and customized the packages I had installed so that I would get my evil vice: emacs. Laptop rebooted and firstboot got all my information ready for me. Login showed up and there was user jetty (well actually I missed it at first, but realized it when I could not log in with my password.)

Finally log in as smooge, and tada! Look I have a GNOME3 desktop. System seems pretty zippy and windows are much smoother on this system than when I had used the LIVE images (either on USB or Cdrom).

So who is Jetty? The jetty user comes from my choosing eclipse to install. jetty is a java server that the eclipse-platform package requires. I am guessing there is a packaging bug somewhere that is causing the "user" to show up as a possible login. The reason is

jetty:x:995:992::/usr/share/jetty:/bin/sh

A quick bugzilla 815177 and we have done our minimal testing duty. Now to start learning how to use the Fedora 17 desktop as a new Fedoran would.

Mailman Passwords: How Fedora IT is dealing with them

Fedora uses Mailman software to run its mailing lists which for all its strengths is showing its age. One of its biggest irritants is its password system. Back in the stone age of the 1980's mailing list software was usually dealt with either by archaic email commands to some sort of list server software, or would have to have user changes done by a list administrator (mainly because it might take 8 or so emails to be able to get some versions of the mail software to put you on vacation or change your email to digest, UUCP or whatever.. and it only took 1 email to the list administrator to get it done.)

When the web came around in 1995 or so, various mailing lists added software to allow users to "self-service" themselves without having to try and reach the list administrator. This had great benefits but "griefers" also found it great to unsubscribe people, change their options, etc etc. So the creators of mailman put in passwords to stop this, and because they knew that the first thing people would do is forget the password they put in a monthly reminder email system.

These days those of us with many email subscriptions usually call the first of the month "Happy Mailman Day" as we get multiple emails telling us that we are subscribed to devel@lists.fedoraproject.org and we chose the password "spew-guts-twiggles" as our password in case we want to change some options. Now this is all fine if we don't use spew-guts-twiggles to password protect our bank.. but some people will use the same password in multiple places.

In order to combat this, most mailing lists have the following text:

Your email address:  
Your name (optional):  
You may enter a privacy password below. This provides only mild security, but should prevent others from messing with your subscription. Do not use a valuable password as it will occasionally be emailed back to you in cleartext.
If you choose not to enter a password, one will be automatically generated for you, and it will be sent to you once you've confirmed your subscription. You can always request a mail-back of your password when you edit your personal options. Once a month, your password will be emailed to you as a reminder.  


However as one can guess, this isn't read by many people and password reuse becomes normal. After a bunch of work, Fedora Infrastructure has hopefully fixed it so that password reuse won't happen for mailing lists anymore.

1. We found all accounts whose mailman password matched their FAS password and we changed those passwords.
2. We removed the options on the mailman servers to allow for passwords to be set in the first place. It turns out that if we remove those two fields in the file.. mailman will just create a password for you and email that to you instead. [Mailman 3.0 has this as the default and when it is in beta state we will look at upgrading to it. It will also have a some other work that Fedora is helping with but that should be covered by the people doing that work.]

tl;dr. Mailman passwords allowed for a place where passwords could be reused and stored in the clear. Fedora IT has reset passwords we knew were reused and turned off the ability for people to enter in bad passwords again. Further changes will be done as needed.

Steps to install Fedora Linux 17 on a Trim Slice Pro

So you have heard of this ARM thing, but can't wait to get a Raspberry pi to plug into your TV. There are various other models on the market.. and for my first one to try, I got a Trim Slice Pro. Here is a shortened, no frills setup instructions.

1. Buy a Trim Slice Pro
2. Wait two weeks for delivery.
3. Get onto freenode IRC and join #fedora-arm. If things don't work this is where you will need to get help from.
4. Acquire needed extra parts
   1. An external USB keyboard.
   2. An external USB mouse
   3. A serial crossover cable to another system.
   4. A network cable to plug into your local lan. **
   5. A SD card to do an initial install on. I bought a 32 GB. I recommend staying away from Kennsington
5. Plug in the system and play around with Ubuntu Natty. For extra fun, do an OS upgrade to 11.10 and brick the system.
6. Download blc (Brenden Conoboy)'s latest image for the OS.
   1. wget http://blc.fedorapeople.org/fedora-arm/f17/fedora-arm-17-latest-armhfp-trimslice-mmcblk0.img.xz
   2. unxz fedora-arm-17-latest-armhfp-trimslice-mmcblk0.img.xz
7. Set up SD card (I have a 32 GB card so we will go with the following).
   1. insert card into system.
   2. dd if=fedora-arm-17-latest-armhfp-trimslice-mmcblk0.img of=/dev/mmcblk0
   3. sync; sync;
   4. remove card from system
8. Power off the trimslice if you had it on before.
9. Insert card into system and reboot trimslice. The card will need to be inserted upside down versus the way you expect :).
10. Boot the box.. if you have plugged the disk into a monitor.. you can unplug it now. Currently the nvidia driver is propietary and Fedora does not support it. You will either ssh in or use a serial console.
11. Look at your router to find out what DHCP and mac address came up. If you can, you can put this into your router for a more static setup later.
12. either use the serial console or ssh into the box

        ssh root@192.168.18.223 # found via router
        Password: fedoraarm

13. The system will have started the steps to resize the downloaded arm image to disk space. You should do the following and check to see if it worked.

      fdisk -l
    

    The size of /dev/mmcblk should show that the /dev/mmcblk0p2 is now the size of the disk, but a df will show it not the right size.Time to reboot.
14. After the 2nd reboot a resizefs should be running in the background and you should have a working system to start installing packages to.

But wait.. what good is a box that has no monitor? Well not much for desktop people.. but for a server it is pretty darn useful. Future articles will show the following:

• Setup of serial console (I didn't get my crossover cable yet).
• Setup of nvidia drivers for those who want a desktop more than purity.
• How to start a kickstarter to pay for a developer to port a free video driver

* I would like to thank Dennis Gilmore, DJ Delorie (of the DOS GCC fame) and Brendan Conoboy for their advice and not throttling me as I was pretty clueless on this adventure.

** I am assuming you have a local network plugin and a DHCP (most router/modems have this built in). I found that the trimslice built in wireless did not work as well as I hoped without an external antenae, and I also found that having a wired connection allowed for you to ssh into the box directly.

Odd Rumour of the Day

So last night, someone came onto #fedora-admin and wanted to know why Fedora had changed all its rpms to remove MP3 during the SOPA debates. They were convinced they had downloaded the DVD's from before then and could play MP3's and afterwords could not.

Now either this was an epic level of trolling or some really large confusion. Either way, to try and set the matter straight there was no MP3 support in Fedora 14,15,16 before SOPA or after. No packages were updated to remove this feature since it wasn't there before.

http://fedoraproject.org/wiki/Multimedia/MP3
http://fedoraproject.org/wiki/Installing_the_Fluendo_MP3_plugin for more information on MP3 in Fedora. Now there is the men in black excuse that somehow this is all a redaction from six months ago, but a quick way to check would be to compare the sha sums and GPG signatures of the ISOs with dated archives from multiple non-Fedora sites. Now maybe that would still not prove anything but it should increase assurance that there isn't a massive plot going on.

Posting a blog before it is ready

I started a blog post about trying to improve Customer Support yesterday, thought I had hit Save and instead pressed Publish. As the post was mostly a set of notes for trying to explain a complex problem... it didn't make much sense. Sorry about that.

FUDCon Day -2->1

So I have been at FUDcon the last couple of days, but forgetting to blog as much as I should about things.

Day -2
I had flown in the day before from New Mexico to South Carolina. Nearly didn't as we found that Denver was on a multi hour delay and I would miss my connecting flights somewhere along the way. However SouthWest flight attendants found me an alternative route with 2 plane changes which I made and got to South Carolina. The last 10 minutes were fun as I was watching the clouds outside and seeing a lot of weird colours. However there were no bumps and it looked like the pilot was an ace as he got us down between tornadoes or something. My Dad picked me up and I got to spend my night in the house I grew up in while it rained and howled outside.

Day -1
Woke up to blue skies and low winds, so worked on a couple of things from the house until my Dad said "Are you leaving or not.." Forgot about the 2 hour time difference that my computer wasn't showing me. So we loaded up the car with lots of old equipment that had run Linux back in the day (really one of the boxes was the alternative build box from Red Hat Linux 4.2) Dad and I then went up the back roads from SC and got onto the Interstates without having to drive through Charlotte or some other congested areas.. We got into Blacksburg around 4 o'clock and found the hotel. It is a very nice hotel so we had a steak dinner and sat around talking with various other Fedorans that evening. Got a large hug from Maria 'tatica' which I got a ribbing from my dad on. I can never tell when he is joking still.

Day 0
The weather changed overnight and it got very very cold and windy. Found the conference area, checked in and realized that the dinner from last night had worn out. Bought a bunch of egg mcmuffins from McDonalds and shared them out to people around the meetings. Then sat in on a long meeting with the rest of Fedora Infrastructure about how to make workflows work. It took a while for everyone to get their various says out but I think in the end we have a better idea of what we want to do next week. Went back to the hotel to get the car and some grub, but crashed in a chair and found out it was 3pm. Went back and talked with some more people then met up with Valdis Kletnieks and Russ Herrold after 10+ years of knowing each of them. Had a good dinner with them but Russ's foot was killing him from the weather changes and I needed to fix a bunch of scripts for Dennis. Dad and I brought in the ancient hardware and got lots of ooohs and awes from people  who had not been born when the scsi array had been built. Got started working on the maps when I found that my quiet spot ended up with a lot of Red Hat old-timers.. spent the evening talking and never getting to the items. Went to bed around midnight

Day 1
Slept in a lot later than I expected due to setting the alarm clock for 7pm and not 7am. Went over to the meetings and sat in the end of a couple of barcamps. Talked with Greg dk for a short while but lunch started getting served so I ended up letting him do that (I don't know I guess food is important to people.) Spent some time with Pam Chestek and found out my Dad and her went to competing High Schools. Spent the afternoon working on some scripts and being reminded by Dennis that I needed to fix the maps. The raspberry pi demonstration was full up so I decided to walk dad back to the hotel so we could find some headache medicine for him. He ended up sleeping and I realized I needed to blog about all this. People are headed to FUDpub and such so I will continue in another blog in a bit.

Wednesday/Thursday 2011-12-14

Woke up in the morning, on the wrong side of the bed. Tried to feel better but drank coffee instead.

Brainstormed with the rest of the IT crew on how to deploy community systems (as in fedoraproject.org/community and NOT fedoracommunity.org) and then started building a special box for it. However after a lot of fights with my own syntax skills I got a preliminary version proxy working. Now its up to the real programmers to do their part :).

Monday/Tuesday 2011-12-13

Ok the weekend was a blast playing Minecraft with my kid. My wife says we sound like a bunch of dwarves and should beware. I then play Gimli quotes on Youtube for fun.


Monday

• Email not as bad as last couple of weeks
• Worked on pass phrase tool.
• Worked with Seth on known_hosts item
• Worked with Kevin with collab change
• Spend the evening going over password entropy and to see if we can run a password checker against our old passwords. [Mainly to get an idea of how many weak ones there were so we can be better informed in the future.]

Tuesday

• Work inside of RH on DNS nameservices. Find out that our registrar doesn't do IPv6 yet. WHEEE
• Weekly phone call with RHIT.
• Remove old collab servers.
• serverbeach03 goes whacky when trying to decommission it.
• Wrote a HOWTO on travelling to the colo.
• Dealt with zones we knew nothing about.. it would seem there are quite a few hanging out there that showed up after top level registrar was updated.
• Rebuilt smtp-mm03
• Sync'd over data to archives for F14.

Friday 2011-12-10

Spent the evening with kid playing mindcraft. Was told by kid that I couldn't take a sick day for him and me and play today... "Dad I don't want to go to truancy court." Sigh.. ok well then off to work it is

Talked with some people on Google+ about running email oneself versus using a service. I used to have all my email go to my private SMTP server where I could filter spam, ham, lamb, etc however I wanted. At some point in 2000 I just got burned out by it. I think it was because it was my day job and that pretty much made any problem at home more work versus fun. Oh well.. I can take Parental Computing for a while longer.

Discovered the Piano Guys this week. They have some seriously cool music they make per day. I really love Cellos (though I find the Viola de Gamba for some reason nicer to my ear [And yes that is a joke on multi layers].)

Wondered if Santa Claus would get me a computer... looked at the one system76. Santa says I have not been good enough this year for that though.

Wednesday/Thursday 2011-12-07-> 2011-12-08

Spent most of Wednesday tracking down issues with ipv6 and Linux network bridges. Somehow, somewhere we finally stomped it out... but I will admit that by the end of it I was tired and using a hammer to put in screws... One of the following fixed it:

1. Different kernel
2. Removing an ipv6 address from the bridge or its parent ethernet port.
3. Some changes in guest network drivers
4. 2 pints of Marble Red Imperial Ale. [Ok I don't drink, but I really really wanted to after the mysterious "it works, but no new ips are allowed.. now it doesn't work.. now it does." ]
5. Magic pixie dust (it takes 8 pixies to make an ounce of dust.. and man are those things hard to catch.)

A lot of email was dealt with during the day. And then I made the fatal mistake at 10pm of putting stuff in the bin without thinking about what i had selected.

Thursday morning and afternoon was dealing with the fact that 2 weeks of email had been deleted and I needed to figure out which ones I really cared about. Wheee. Thankfully I hadn't emptied the bin but there was still a lot of emails that needed to be sorted out from all the stuff I had deleted earlier. 

And then I got a ring of the doorbell. And there was a box on the doorstep. And the box had another box in it, and that box had this

and all my cares went away. Now to see how much it would cost for us to make say 20 of these for Fedora for next release.

Worked to move a DNS server from one colocation to another. Found out that the IPs couldn't be routed as easily as first claimed. Moving to plan A. (Plan B was doing this after we were told they could reroute at the border.) Then spent the day looking at what would be needed for updating our server at internetx01 to rhel6.

Tuesday 2011-12-06

Looked at desktops this morning. It would seem that there is a constant rule about computers and me. The computer I would like to have is about $5000.00. I think it has been that way since 1994 and I first tried to come up with what my home linux box should be. In the end, the computer I end up is usually 1/10th of that.

I can see that the US Thanksgiving holiday is over and people are gearing up for various end of the year holidays.. the email volume of patches and such have gone up. Thankfully most of the arguments seem to have gone down for a while.

Monday 2011-12-05

It is snowing quite alot around where I am living. Sadly, I seem to live in a heat bubble of some sort, we ended up with a 1-2 cm while most of the state seems to have gotten from 12 to 25 cm.

Most of the weekend was spent playing minecraft with my son. I put a server on a box and then we played for more hours than we should have. This originally was meant to be a study of how simple graphics can make for a playable game.. i think the 14 hours I played shows that it can be for certain audiences.

Spent most of the day catching up with email. Worked on getting a new DNS nameserver at Peer1 ready for us this week. Saw that the Fedora elections ended with not a lot of people voting. I wish voting was mandatory at times.

Friday 2011-12-02

Had to get off the computers early last night due to a heavy windstorm which had 80 mph gusts. The internet went up and down for a bit but I did get to watch some "How Things Are Made" on Netflix.. don't ask me why but I find the show fascinating.

Fedora Elections are going on without a lot of fanfare this cycle. Larry Cafiero, Bob Jensen AND Christopher Wickert are running for the board. That should make for some excitement. Spent part of the day hacking on a version of the javascript password generator.. hope to ahve a test page on Monday.

2011-12-01 - Thursday

This week has been a mass of emails mostly about doing anything. If anything I have learned that some set of people and I are never going to agree (or it seems to move towards seeing each others point of view.) It is probably just better to put their emails in the "Read When I am NotDepressed" folder. I guess they do that to mine :).

It looks like there will be a snow fall of some sort this weekend in New Mexico... everything from storm of the decade to minor puffs of snow. I stocked up on Hobnob cookies and canned soup so will be able to make it through the day. That and a large generator should allow me to keep the laptops going while I play minecraft.

Putting a redundant power supply into a system caused it to crash out badly. Glad we had a redundant powersupply to fix that (thanks to AdamW for giving me that one). Then putting in cleaning tapes but forgetting to eject the tape in the drive already... just makes the day go round.

The day got crappy enough that the music went from Classical to the Doors to Evanescence to Metallica.

Wednesday 2011-11-30

Started off the morning with page storm caused by a xen domU jumping ahead 30 minutes and then time stopping on it. This of course caused all kinds of problems with encryption and such. System could not be rebooted and had to be destroy/created.

Went Middle School shopping with the wife. I think we have found a good one, and will look more into it over the next couple of weeks. Had tea at Satellite Coffee.

Getting excited to be in Blacksburg Virginia for FudCon. One, I am bringing my dad. My passion for computers would not have been as wide and strong if my dad had not introduced me to a Heathkit 8008 system. I was told I couldn't get a bigger computer until I programmed it.. which I spent a whole summer getting it to do a little light show. My dad's friends would have these MicroVaxes running this thing called Unix (because VMS was for accountants as I was told at the age of 10 or so). He had a great time at SELF last year and Mom wants a weekend to herself so up we go.

Second, Blacksburg Virginia is home to Blacksburg Tactical Research Center which had some of my most favourite gaming supplements. Well it was 20 years ago. Now to see how their Open Gaming Supplement system works.

Tuesday 2011-11-29

Last week was mainly taken up with little tasks to make sure Fedora IT would survive American Thanksgiving break, which it seems it did. Yesterday was decommissioning some servers that were not properly configured originally. Tomorrow will be fixing their replacements I guess.

Spent today working out how to end of life mediawiki 114 and 115. I will be end of lifing mediawiki116 as soon as the reviews for 117 and 118 are submitted and fulfilled.

Not much else on the list of things.. my head feels like someone took a 2x4 to the left of it for some reason.

Thursday 2011-11-17

Well no one seemed to notice the Ubuntu Chuck say YEAH to the Beefy Miracle in my last post... I dodged something I guess.

Tasks

1. Email deluge
2. Learned NOT to read users@fedoraproject.org if you want to feel happy about what one does.
3. Found out that I broke mirroring for people getting spins from alt.fedoraproject.org due to my missing that the rsync target was called alt before and fedora-alt later.
4. Struggled with setting up APC power strips for remote logins. Got 2 to work. Had to get help from RHIT on the other two.
5. Tried to get to building those systems he started on Monday and got sucked into the morass of configs.

Wednesday 2011-11-16

Tasks for today

1. Phone call with various people around the world on PPC systems
2. Thanksgiving lunch with son.
3. Finish off rsync's off Fedora 13 and Fedora 14 to archives. Will redo 14 after EOL. Will also work with dgilmore on a clean hardlink of the entire archive tree.
4. Worked a bit on the Fedora Hosted FAD.
5. Finished off a budget.
6. Took a meme too far (with apologies to my friends in Ubuntu.. who are currently looking for eyebleach. Also apologies to anyone who uses the gimp professionally.. I butchered this badly.)
7. Read about SOPA. Having seen how badly the current DMCA and similar rules are abused regularly.. I figure this will it even worse.
8. Work out which systems I would abuse tomorrow.

Tuesday 2011-11-15

Today was another mass of email, but finally let up around lunch time... just in time for phone meetings. Didn't get a chance to try Bovril.. will put that on the list later.

Tasks

1. Fix certificates on alt and download servers.
2. Try to get alt and secondary to do weird stuff with URLs. [well not weird but getting puppet it to do it for me is the weird part.]
3. Wipe disks on serverbeach05
4. Sync Fedora 13 from production to archives
5. Sync Fedora 14 from production to archives
6. Try to figure out how to do spreadsheets

Music

WCPE because I need to relax or I will strangle myself on a spreadsheet.

Monday 2011-11-14

Spent most of the weekend not sleeping well to this lingering cough. My mood was quite foul and rude by the end of yesterday. Broke down and got some cough medicine which helped my sleep last night quite a bit.

After extensive semi-blind testing (making identical sandwiches and then randomly eating them later in the day), I have come to the conclusion that Dennis Gilmore is correct: Vegemite tastes much better than Marmite. I think it has to do with the Malt extract in Vegemite versus "Vegetable" extract used in Marmite.  Then lo and behold this evening a third contender appeared on my doorstep all the way from Shropshire England: Bovril.

Tasks today

1. Email catchup. Two days of email is quite a lot.
2. Try to figure out serverbeach routing with Kevin
3. More email.
4. Clean up old disks off of serverbeach05
5. More email.
6. Lots of tiny IRQ's all different.

[Edited 2011-11-15. I got Bovril not Marmite.]