Ask Your Question

bthomas's profile - activity

2015-08-09 10:21:00 -0500 received badge  Famous Question (source)
2015-07-11 12:01:52 -0500 received badge  Popular Question (source)
2015-07-11 12:01:52 -0500 received badge  Notable Question (source)
2015-06-23 15:10:41 -0500 commented answer Not able to connect to ethernet at college

Also note that it could be 802.1X authentication.

2015-06-22 19:18:30 -0500 commented answer HELP! Is it possible to undo a 'dfn remove' command?

Hint: If you're trying to learn about dnf, run man dnf. This scales with other programs too. You'll get quick accurate answers.

2015-06-22 19:11:45 -0500 commented question Fedora 22 Workstation desktop icon size

Most people don't use desktop icons TBH. I'm not even sure why you would need to "disable" them: their are non by default.

Still, if you're the few who still feel you need them, you can ask the nautilus project about it.

2015-06-22 19:06:34 -0500 commented question How to Get Boxes to Work?

After you install Fedora and use firefox, it should point you to the Fedora Project - Start Page. There is a big button that says Fedora Documentation. That is probably a very good place to start. If you somehow missed it, you could also google "Fedora Documentation".

Further documentation can be found in manpages (Example):

man man
man info
info info
info coreutils.info.gz
man systemd # SEE ALSO
man dnf
man bash # SHELL GRAMMER
man selinux
2015-06-22 18:52:47 -0500 commented answer Add new internal drive to existing encrypted disk setup

Indeed it's perplexing. You could start looking at the dracut project page / or looking through it's source rpm for more information.

2015-06-22 18:46:08 -0500 answered a question Need help in switching to GUI

Quickly looking through man dnf shows you the commands for group installs. Quickly searching the repository groups with dnf grouplist and using dnf groupinfo shows that you'll probably want to use sudo dnf groupinstall "Fedora Workstation". I'm not sure if this package will automatically set up systemd to start gdm on boot, so you might need to use (again, I quickly looked this up in man systemctl) sudo systemctl set-default graphical.target to tell systemd that you want to use gdm to login.

2015-06-22 18:39:36 -0500 commented answer Need help in switching to GUI

yum was replaced by dnf. The group "GNOME Desktop Environment" does not exist.

2015-06-22 18:36:21 -0500 commented answer Is it possible to do a secure boot to an encrypted volume without a password prompt?

I recommend entering the password each boot; it's the safest. If you're going to use a USB keyfile, at least put it on your keychain. It would kind of defeat the purpose if you kept your USB with your laptop (which many people do) and your laptop gets stolen.

2015-06-17 16:31:10 -0500 commented answer Login Help.

dnf has replaced yum. He meant to say use "Fedora Workstation" on Fedora 22. So, use sudo dnf groupinstall "Fedora Workstation".

The problem was that you installed "Fedora Server" instead of "Fedora Workstation" when you downloaded the image, which is headless.

2015-06-16 15:10:05 -0500 commented question 32bit Wine killed by optirun

Ok I think I've got an idea. Create a 32bit arch linux chroot, connect it to the host's X server and bumblebee deamon. Think that'd work?

2015-06-16 00:07:33 -0500 commented answer FirewallD vs iptables

Well, I think the reason why they don't is because SELinux already takes care of that well (not that I've played with it that much). If I remember correctly, it has networking rbac. Think of it like permissions for process/users to access resources, instead of system wide filters, which is probably more flexible. If you also wanted system wide filtering, you can just apply it through iptables (which is firewallds' backend). If you really wanted to submit a feature request, just go to the projects page (usually a safe bet).

2015-06-15 21:44:43 -0500 commented question Remap Forward/Back keys on Thinkpad T420? (Fedora 22)

I'd use xmodmap. What was the problem when you used it?

2015-06-15 20:18:48 -0500 edited answer Add new internal drive to existing encrypted disk setup

Good question. I don't know. And I explored my system. Still not sure. I might be able to provide a little information though (though it will be a bit technical). My plan was to try to reverse engineer how Fedora encrypts disks so I can do things like adding new disks, or encrypting my keyfile with a memory-hard kdf.

Assuming a UEFI system, the first thing to start up after the bios is the singed shim at /EFI/BOOT/BOOTX64.EFI on the /boot/efi gpt vfat partiton. This checks signatures and transfers control to grub at /EFI/fedora/grubx64.efi. Grub follows the instructions of EFI/fedora/grub.cfg. Finally something we can look at:

linuxefi /vmlinuz-4.0.4-301.fc22.x86_64 root=/dev/mapper/luks-56887873-ef18-4a20-a68b-dd9ce4d57ee3 ro rd.luks.uuid=luks-56887873-ef18-4a20-a68b-dd9ce4d57ee3 rd.lvm.lv=garrison/01 rd.lvm.lv=garrison/00 rd.luks.uuid=luks-3549f600-2703-44bb-843d-e8071b03995b rhgb quiet LANG=en_CA.UTF-8
initrdefi /initramfs-4.0.4-301.fc22.x86_64.img

The root= parameter tells us that initramfs decrypts the root filesystem to /dev/mapper/luks-<UUID>. The other parameters look like it's specific to Fedora's initramfs, but they indicate the location of the encrypted devices (my root filesystem is in a lvm volume group called garrison and is partition 01, while my swap is 00. I have a third encrypted partition at 02 that is not listed here. This make some sense since root is required to boot up normally, and swap is required to resume from suspend to disk, while the third one can be mounted later. Note that all 3 share the same password and are decrypted at boot with the one password).

So next grub loads the kernel and initramfs (which is a temporary filesystem who's job is to mount the rootfs, including decrypting it and managing lvm/raid). This should be the important part telling us how encryption is set up in Fedora. The kernel usually runs /init in here to set up the system.

$ mkdir initramfs && cd initramfs
$ cat /boot/initramfs-4.0.4-303.fc22.x86_64.img | cpio -i -H newc -0
$ ls -R
.:
early_cpio  kernel

./kernel:
x86

./kernel/x86:
microcode

./kernel/x86/microcode:
GenuineIntel.bin
$ cat early_cpio
1

WAT. Ok, no /init, and not much that's productive in here. The microcode is just some firmware that is loaded directly into my CPU AFAIK. At this point I looked through the /boot directory for signs of things that decrypt volumes. Didn't find much. So it seems whatever's booting my computer is a hidden mystery. I thought that the kernel might be patched to do it, but apparently it's not according to this. Also, the config looks like it's not including an internal initramfs. This is very strange indeed.

After initramfs is ran, it's supposed to chroot into the main filesystem and run the init (which is sytemd). Systemd (udev) mounts filesystems based on /etc/fstab and /etc/crypttab. Both of those look fine, but not helpful on my system ... (more)

2015-06-15 20:12:20 -0500 commented question 32bit Wine killed by optirun

Hmm, I think i might have isolated it further. I don't believe that the (correct) opengl drivers are being loaded by wine when either primusrun or optirun execute cmd. Primusrun gives the illusion of working until the drivers are used (I think this is because it implements something like lazy evaluation in it's optimisations).

2015-06-15 20:07:33 -0500 answered a question FirewallD vs iptables

They're both packet filters that does right what it says on the tin. Filter packets. Neither seem to have flaws filtering packets. Thus neither seem to be more or less secure then the other. Therefor the security depends solely on how you make the policies, as well as the security of the rest of the system.

I heard a story once about someone setting up a brand new security system on all the doors and windows on their house. A few burglars got in by chainsawing through the wall beside the door. I'm not sure how true the story is, but it demonstrates that one piece of security is worthless if it can be subverted elsewhere (and this is especially true in computers). And attackers are usually pretty clever when it comes to finding the elsewhere.

I'm not sure where you got that FirewallD can't block incoming packets. Just read directly through the manpages or the docs and see for yourself; don't take someone else's word when you don't need too.

2015-06-15 19:54:05 -0500 answered a question Gnome Boxes run mac partition

It's unlikely you will be able to emulate your current partition in a Virtual Machine. Even emulating a fresh Mac Virtual Machine is difficult, and I believe it's unsupported even from Mac hardware (I think VMWare Player has support for Mac emulation on Mach though).

2015-06-15 11:48:35 -0500 commented answer How to install Bumblebee with NVIDIA drivers for hybrid GPU?

Whoops, you're right. Glad to see that it worked.

2015-06-15 10:53:42 -0500 asked a question 32bit Wine killed by optirun

I installed NVidia/Bumblebee via the standard method.

$ optirun glxgears | grep GL_VENDOR
GL_VENDOR     = NVIDIA Corporation

Awesome. Now time to try this on wine. My setup can be described as follows:

 $ sudo dnf install wine
 $ sudo dnf install VirtualGL.i686
 $ WINEPREFIX="/home/bthomas/.local/share/wineprefixes/win32_test" WINEARCH="win32" wine "wineboot"
 $ WINEPREFIX="/home/bthomas/.local/share/wineprefixes/civv" optirun wine 'cmd'

The problem is cmd silently exits. It works without optirun. Anyone else run into this kind of problem? Any ideas?

EDIT: This is a segfault (running shell with optirun gives a bit more info).

EDIT2: It seems this problem likely has something to do with VirtualGL.i686, since primus.i686 is still able to run it.

2015-06-14 19:27:47 -0500 commented question Fedora 22 Workstation desktop icon size

You may need to edit the nautilus source code itself.

2015-06-14 19:25:33 -0500 commented question Can't start the lxqt GUI

Can you run startx at least?

2015-06-14 16:05:20 -0500 commented question F22: graphics driver not loaded?

I'm not sure if Fedora compiles radeon into the kernel or not (I don't have one), so I'm going to guess that it doesn't. Boot the old kernel and run lsmod. Do you see the radeon driver loaded? Do the same with the new kernel. Also, is there anything interesting in journalctl?

2015-06-14 12:24:57 -0500 commented question How to Get Boxes to Work?

Fedora is more of a power user OS to be honest; you'll probably want to be somewhat of a power user to use it (or have one administrate the system for you, like in most corprate setups). If you discover a bug, you can report it to the package maintainers at https://admin.fedoraproject.org/pkgdb/.

2015-06-13 21:51:11 -0500 commented question How to Get Boxes to Work?

The default SELinux settings for Fedora should work with most of the popular apps. If you discover a problem between SELinux and a package, it's a bug and you should submit it for everyone's help. Ideally a workstation is maintained by an administrator who understands SELinux (see man selinux) or the fedora docs. In a personal system, you can disable it if you really want too (it wouldn't be less secure then a non-rbac distro). If you wanted to play around with an alternative, you can recompile a kernel with grsecurity, which has a "learning mode" for RBAC I believe.

2015-06-13 21:37:41 -0500 received badge  Nice Answer (source)
2015-06-13 21:27:34 -0500 received badge  Nice Answer (source)
2015-06-13 11:15:47 -0500 edited answer How to install Bumblebee with NVIDIA drivers for hybrid GPU?

"Lets consider the actual problem with the NVIDIA drivers is out of the scope of this question." Nah. You have a great graphics card just weighing down your laptop. So try installing it with this instead:

$ dnf install libbsd-devel libbsd glibc-devel libX11-devel help2man autoconf git tar glib2 glib2-devel kernel-devel kernel-headers automake gcc gtk2-devel
$ dnf install VirtualGL
$ dnf install http://install.linux.ncsu.edu/pub/yum/itecs/public/bumblebee/fedora22/noarch/bumblebee-release-1.2-1.noarch.rpm
$ dnf install http://install.linux.ncsu.edu/pub/yum/itecs/public/bumblebee-nonfree/fedora22/noarch/bumblebee-nonfree-release-1.2-1.noarch.rpm
$ dnf install bbswitch bumblebee-nvidia

Restart, and now you can test it with:

$ glxgears -info | grep GL_VENDOR
# Should be claiming to be using Intel.
$ optirun glxgears -info | grep GL_VENDOR
# Should be claiming to be using NVidia. Success.

EDIT: The bug is fixed in Fedora 22 with the latest upgrade, so please do so and ignore the rest.

There seems to be a bug (that seems to be fixed upstream) that makes SELinux stop optirun from running, so in order to use optirun you'll need to temporarily put SELinux into permissive mode.

# If you can't use vi, use gedit.
$ sudo vi /etc/selinux/config

And change SELINUX=enforcing to SELINUX=permissive. Save, and restart your machine.

If you care about SELinux, change it to enforcing and restart when your done.

2015-06-13 11:10:49 -0500 answered a question Can't create Minecraft launcher

I installed java-1.8.0-openjdk and alacarte, downloaded Minecraft.jar to ~/bin, and created the following script (I'm omitting optirun assuming you're not using an optimus laptop).

$ gedit ~/bin/Minecraft.sh
#!/bin/sh
java -jar /home/bthomas/bin/Minecraft.jar
$ chmod 744 Minecraft.sh

Then I created the menu entry from alacarte using an icon I found from the internet.

2015-06-13 01:51:53 -0500 commented question Fedora 22 xfce: Volume resets to 100% while streaming video

Hmm, well hears to hoping that works. I'm not sure why xfce would effect how flash works with Pulseaudio/ALSA (the DE shouldn't be touching any of those too much). Have you tried it under an alternative DM if you have another? Moreover, flash is closed-source making this one a bigger pain to figure out (but it just exists as a *.so). A bit of a hack you can try is this to lower the max volume. You might have a reportable bug on your hands.

2015-06-12 21:14:30 -0500 commented question Fedora 22 xfce: Volume resets to 100% while streaming video

Ok, so the problem is flash. How did you install it? I installed it through fedy and haven't had problems with it. Also, you might want to run rm -rf ~/.macromedia to delete the flash cache.