ChanServ changed the topic of #haiku to: Open-source operating system that specifically targets personal computing. | https://haiku-os.org | Nightlies: https://download.haiku-os.org | Bugtracker: https://dev.haiku-os.org | SCM: https://git.haiku-os.org/ | Logs: https://oftc.irclog.whitequark.org/haiku | Matrix: #haiku:matrix.org | XMPP: #haiku%irc.oftc.net@irc.jabberfr.org
<OscarL> I'll do some more tests, then update my PR... then we wait for someone to merge it.
<_-Caleb-__Haiku> oki thanks!!!
<OscarL> no hay de qué :-)
_leosma has quit [Quit: https://quassel-irc.org - Chat comfortably. Anywhere.]
_leosma has joined #haiku
<OscarL> ok, tried it on and old Linux install (but using version 4.6.1 of squashfs-tools) ... there `mksquashfs` also creates files with the first 4 bytes reading "hsqs"... so I guess we're good to go with my patch changing endianness then :-)
<OscarL> nice... uses all available cores automatically :-)
<OscarL> now we need squashfs support on Beezer.
ablyss has joined #haiku
<augiedoggie> PRs accepted
* OscarL wonders who might help with that :-)
<OscarL> ouch :-D
<_-Caleb-__Haiku> thanks guys
v_harkonnen has quit [Ping timeout: 480 seconds]
<_-Caleb-__Haiku> is strange compress and uncompress in squashfs if not are a operating system, etc.... :-) but i use for backups because are read-only files :-))
_-Caleb-__Haiku has quit [Quit: shutting down the laptop!]
<augiedoggie> you could open an enhancement ticket and maybe Teknomancer will get motivated to work on it
ablyss has quit [Remote host closed the connection]
<OscarL> good old Ramshankar... I remember he (back in the days) liking Cradle of Filth, and not knowing who The Beatles were :-)
HaikuUser has quit [Quit: Vision[]: i've been blurred!]
<OscarL> each succesive IOM window I open (and then close)... starts higher and higher than the previous one :-)
ablyss has joined #haiku
HaikuUser has joined #haiku
HaikuUser has quit []
<augiedoggie> mine usually goes off the screen at the bottom
<augiedoggie> oh, close too
<OscarL> heh :-)
<augiedoggie> i've noticed it's bad about window positioning in several ways
v_harkonnen has joined #haiku
<OscarL> this "escalation" for me happens opening different files, then closing, opening a new one, etc.
<OscarL> then we have some older apps that seemingly try to start at 0 height, but end up with part of the title bar off-screen (Pe, tends do do this, for example).
v_harkonnen has quit [Ping timeout: 480 seconds]
mmu_man has quit [Ping timeout: 480 seconds]
mmu_man has joined #haiku
_-Caleb-_ has left #haiku [#haiku]
_-Caleb-_ has joined #haiku
xet7 has quit [Remote host closed the connection]
<OscarL> gcc2 is getting on my nerves.
ablyss has quit [Remote host closed the connection]
<x512[m]> OscarL: gcc2 should be not needed at HaikuPorts except some native add-ons.
xet7 has joined #haiku
<OscarL> x512[m]: Indeed. Too bad Beezer is still GCC2 (albeit I guess only it's Tracker addon really needs to still be on GCC2?)
vdamewood has joined #haiku
rennj has joined #haiku
vdamewood has quit []
vdamewood has joined #haiku
mmu_man has quit [Ping timeout: 480 seconds]
<OscarL> heh, got Beezer to show the contents of squashfs files. NOICE :-)
<OscarL> on 64 bits, thou. No idea why on 32 it doesn't fails, but it doesn't shows the contents either :-D
<rennj> hmm squashfs
<rennj> been using it before it was in the linux kernel
<rennj> unionfs/aufs/overlayfs and squashfs made ram-os immutable possible
<rennj> knoppix and cloop compressed loopback mounts was inspiration...
<rennj> i would prefer rom-os, but immutable ram os..loaded from iso into ram..will do..readonly media..i know its static
vdamewood has quit [Quit: Textual IRC Client: www.textualapp.com]
<rennj> my 597MB.iso would be 3x to 4x size without squashfs
<rennj> mksquashfs win10 win10.sqsh -comp xz -b 512k -keep-as-directory
<rennj> tar cvfz vs mksquashfs
<rennj> i pretty much do backups of my vmware vm with squashfs now and not tar/gzip
HaikuUser has joined #haiku
<rennj> mount or unsquashfs
<rennj> easier than tar -ivf ...interactive mode
<rennj> i use to do that on sun boxes
HaikuUser has quit []
<rennj> old skool ufsdump/ufsretore and tar
<rennj> squashfs in my mind is like, 2006 tech...
<rennj> its way old
Saijin_Naib has joined #haiku
itaipu has quit [Ping timeout: 480 seconds]
xet7 has quit [Remote host closed the connection]
itaipu has joined #haiku
<rennj> Squashfs was initially maintained as an out-of-tree Linux patch. The initial version 1.0 was released on 23 October 2002.
<rennj> In 2009 Squashfs was merged into Linux mainline as part of Linux 2.6.29.
<rennj> https://imgur.com/9H8EV5S 350MB.iso squashfs in ram
<rennj> with vmware-vmx for vm
<rennj> xorg/sshd/vmware/vnc..
<rennj> broadcom killing vmware in 2024
<rennj> top 600 customers.
<rennj> xz being backdoored oof
<rennj> bash-5.2$ xz -V
<rennj> liblzma 5.4.4
<rennj> xz (XZ Utils) 5.4.4
<rennj> haha
<rennj> ram-os ftw...immutable.static..pick a date and live with it. just fix errors
Saijin_Naib has quit []
OscarL has quit [Quit: Page closed]
<rennj> i been fixing errors since nov 2023 on build..no upgrades..just fixing things. to be correct.
<rennj> latest firefox broken mouse/icon foo...had to fall back to gtk3 settings.ini
<rennj> old ass os, but modern firefox 123.x.x now the mouse icon is brok
<rennj> only thing changed was i upgraded firefox
<rennj> old vmplayer on wayland segfaults
<rennj> cause its xorg based not wayland
<rennj> You will eat less than you desire and more than you deserve. --the menu
<rennj> talking about how Philip K. Dick, William Gibson, John Brunner, scifi forcast our future of megacorporations
<rennj> .25 cents in toaster for toasted bread, bmw SaaS, heated seats as service
AlaskanEmily has joined #haiku
<rennj> hp--> agilent-->keysight still spinning off tech
<rennj> broadcom came from hp tech
<rennj> 66billion purchase of vmware..just to milk top600 customers
<rennj> megacorporations from the hugo/nebula scifi books of 1980's and 1990's...
<rennj> aufs is still outside linux kernel and thats older than squashfs..haha
<rennj> unionfs/overlayfs...i wasted couple years on aufs
<rennj> aufs had memory leak...
<rennj> https://imgur.com/02D6W7G overlayfs/squashfs 100days...
<rennj> laptop non ECC ram
Saijin_Naib has joined #haiku
<rennj> aufs/squashfs..well memory leak would not give back ram to kernel..so syste, would crash/over time
<rennj> like doing find on / fs...would kick things off...messing with union fs..would eat ram..
<rennj> same thing on solaris sun boxes i had back in 1GB scsi days...
<rennj> bios/firmware on hd was bad...and find on solaris would kick it off
<rennj> zfs fixes this issue
<rennj> CRC bit flips on data
<rennj> beos/haiku needs openzfs
v_harkonnen has joined #haiku
<rennj> illumos/smartos/openindiana freebsd linux macosX all have openzfs
<rennj> pull over 100 drives and have to degauss them...yeah i remember that
<rennj> bad bios/firmware on hd
v_harkonnen has quit [Ping timeout: 480 seconds]
<augiedoggie> i'm tempted to post that to the blue leaf forum thread
misthalu has joined #haiku
<rennj> https://imgur.com/pIhNvwF aufs/ramos
<rennj> aufs and tmpfs was sexy back then before overlayfs
<rennj> i should be more greatful
<rennj> 357MB /
<rennj> ram os and then i mount local hd/truecrypt foo
<rennj> dont need local storage or DAS,NAS,SAN, network iscsi,luns.
<rennj> cpu/ram is all you need, i had laptop wouldnt boot without hd
<rennj> lame!
<rennj> forget the oem/odm...but that was lame
<rennj> lame bios
<rennj> 1GB/s in that screenshot was fast..for sure
<rennj> in ram dd
<rennj> https://imgur.com/ozWhicb 2007 ramos vmware
<rennj> haha tmpfs /
xet7 has joined #haiku
rennj has quit [Ping timeout: 480 seconds]
<win8linux[m]> <augiedoggie> "i'm tempted to post that to..." <- Post the bikeshed one!
<augiedoggie> i did post that image, it's a link to the commit in my github fork for that change
<augiedoggie> curious to see if people will notice that it's a link to a change :P
rennj has joined #haiku
Begasus has joined #haiku
<Begasus> g'morning peeps
rennj has quit [Ping timeout: 480 seconds]
BrunoSpr has joined #haiku
<BrunoSpr> hi all, does this work with Haiku at all? https://0x0.st/Xz-2.png
<Begasus> nope, crashes on launch
Saijin_Naib has quit [Ping timeout: 480 seconds]
Calisto has quit [Ping timeout: 480 seconds]
Saijin_Naib has joined #haiku
<BrunoSpr> oh, that's not good thanks Begasus
BrunoSpr has quit [Quit: Vision[]: Ich wurde eingeweicht!]
Saijin_Naib has quit []
mr_lou has joined #haiku
AlaskanEmily has quit [Remote host closed the connection]
misthalu has quit [Ping timeout: 480 seconds]
<nekobot> [haiku/haiku] autocommitter pushed 2 commits to master [hrev57673] - https://git.haiku-os.org/haiku/log/?qt=range&q=4a7de3f10a48+%5E1f5daef0bfbf
<nekobot> [haiku/haiku] e56ee47f061f - Update translations from Pootle
<nekobot> [haiku/haiku] 4a7de3f10a48 - Update translations from Pootle
mr_lou has quit [Quit: Leaving]
<botifico> [haikuports/haikuports] Begasus pushed 1 commit to master [+2/-2/±0] https://github.com/haikuports/haikuports/compare/e2f4699bc118...39c6d2277c06
<botifico> [haikuports/haikuports] PocketNerdIO 39c6d22 - mame: Version bump; disable x86 as buildmaster runs out of RAM (#10263)
rennj has joined #haiku
<botifico> [haikuports/haikuports] Begasus pushed 1 commit to master [+1/-2/±0] https://github.com/haikuports/haikuports/compare/39c6d2277c06...3d8eb0fda2a4
<botifico> [haikuports/haikuports] alex-w 3d8eb0f - Stellarium v24.1 (#10271)
rennj has quit [Ping timeout: 480 seconds]
_leosma has quit [Quit: https://quassel-irc.org - Chat comfortably. Anywhere.]
jmairboeck has joined #haiku
walkingdisaster has joined #haiku
<botifico> [haikuports/haikuports] jmairboeck pushed 1 commit to master [+0/-0/±1] https://github.com/haikuports/haikuports/compare/3d8eb0fda2a4...a3d86aa8c929
<botifico> [haikuports/haikuports] jmairboeck a3d86aa - texlive: revbump for rebuild
Forza has quit [Quit: http://quassel-irc.org - Chat comfortably. Anywhere.]
Forza has joined #haiku
Forza has quit []
misthalu has joined #haiku
Forza has joined #haiku
<Begasus> getting crashes when trying to build neovim :P https://0x0.st/XzPH.png
Forza has quit [Quit: http://quassel-irc.org - Chat comfortably. Anywhere.]
Forza has joined #haiku
mmu_man has joined #haiku
<botifico> [haikuports/haikuports] Begasus pushed 1 commit to master [+2/-3/±0] https://github.com/haikuports/haikuports/compare/a3d86aa8c929...67380e2b687f
<botifico> [haikuports/haikuports] OscarL 67380e2 - squashfs_tools: update to version 4.6.1. (#10274)
coolcoder613 has quit [Read error: Connection timed out]
<_-Caleb-_> [dpid]: dpid.c:367: register_all: Fatal error
<_-Caleb-_> Begasus i've seen you've updated dillo_plus to the last versions... but the package include the dpis (plugins) but it doesn't work! (Gemini, FTP, Gopher, etc) any idea?? the dpi daemon (dpid) show:
<_-Caleb-_> - Can't find the directory for dpis.
<_-Caleb-_> [dpid]:
<_-Caleb-_> Any idea about that? :-(
<_-Caleb-_> Good morning :-)
<_-Caleb-_> I supose is because the config files are in a read--only folder... maybe? i don't know i only ask for things :-D
<Begasus> no idea _-Caleb-_ (without looking into it)
<Begasus> maybe coolcoder613_32 has an idea there?
<_-Caleb-_> ahh true, yep maybe :-D
<_-Caleb-_> if (access(dpidrc, F_OK) == -1) {
<_-Caleb-_> the errors are here:
<_-Caleb-_> dpidrc = dStrconcat(dGethomedir(), "/", dotDILLO_DPIDRC, NULL);
<_-Caleb-_> dFree(dpidrc);
<_-Caleb-_> dpidrc = dStrdup(DPIDRC_SYS);
<_-Caleb-_> if (access(dpidrc, F_OK) == -1) {
<_-Caleb-_> dFree(dpidrc);
<_-Caleb-_> dpidrc = NULL;
<_-Caleb-_> }
<_-Caleb-_> }
coolcoder613 has joined #haiku
<Begasus> _-Caleb-_ maybe you can use a paste site instead of flooding the channel ;)
<_-Caleb-_> maybe only need ajust the package structure
<_-Caleb-_> OMG im so sorry!!! 🥺
<Begasus> ;)
<Begasus> from the PR: Basic webbrowser, this is mostly to show our FLTK port is up to building it. :)
<Begasus> think I only checked it with some local files
manj-gnome has joined #haiku
manj-gnome is now known as kajedev
<Begasus> bbl
_leosma has joined #haiku
v_harkonnen has joined #haiku
coolcoder613 has quit [Ping timeout: 480 seconds]
HaikuUser has joined #haiku
HaikuUser has quit []
FreeFull has joined #haiku
rennj has joined #haiku
BrunoSpr has joined #haiku
<kallisti5[m]> ⚠️ ⚠️ NOTICE: If you're running xz_utils-5.6.1-1, you may want to upgrade to the latest xz_utils-5.6.1-2. A backdoor was found in xz_utils-5.6.1. While it doesn't seemingly target Haiku, upgrading to the latest release should remove the obviously malicious code. thanks to jmairboeck for getting a rapid fix in.
kajedev has quit [Ping timeout: 480 seconds]
<kallisti5[m]> However, be leery of xz_utils in general until researchers audit the codebase more closely
<jmairboeck> thanks kallisti5[m]
<kallisti5[m]> i'm going to send an email out to the mailing lists. From what I gather, Haiku shouldn't be impacted, so not making a website post or anything
<jmairboeck> kallisti5[m]: I just noticed that the riscv64 repository definition also uses xz_utils-5.6.1-1. That should be updated too.
<kallisti5[m]> oof. yeah, I probably just built that
<jmairboeck> the other architectures which have it, use older versions, so they should be safe
<waddlesplash> we're safe, there's no reason to panic, the backdoor only targeted Linux
<waddlesplash> but the backdoor comes from a maintainer who has been modifying xz for years ... so who knows how deep the rabbit hole goes
<waddlesplash> nobody seems to have analyzed things yet
<PulkoMandy> People are reviewing the commits and reverting other changes already
<kallisti5[m]> ok. I sent an official looking email out about it
<dovsienko> I have nothing to add to what I said about it already
BrunoSpr has quit [Quit: Vision[]: Ich wurde verwaschen!]
BrunoSpr has joined #haiku
<waddlesplash> kallisti5[m]: you did? where?
<waddlesplash> hasn't shown up in my inbox yet at least
<kallisti5[m]> fighting freelists at the moment 🥴
<waddlesplash> ouch
<dovsienko> lemme guess, now spam filters reject all e-mails with the string "xz" in it, to ensure 100% uninterrupted total protection from evil hackers?
<kallisti5[m]> lol. nah. I subscribed to the haiku-security mailing list, which instantly made me NOPOST (while I had an ACL i could post)
<dovsienko> +2 months free if you pay a yearly subscription in advance
<mmu_man> hmm, I think we miss a dependency on mesa somewhere
<mmu_man> GLTeapot won't run on this box I updated recently from a very old install
<mmu_man> I have mesa_x86 but not mesa installed
<mmu_man> and glu
<kallisti5[m]> mmu_man: pkgman search mesa -D ?
<mmu_man> and now GLTeapot runs but wants a renderer of course
<mmu_man> swrast here we go
_leosma has quit [Quit: bye bye]
<kallisti5[m]> mesa_llvmpipe / mesa_softpipe needs installed
<mmu_man> well I installed them and now it works
<kallisti5[m]> nice! We're going to move to libglvnd at some point which will make everything even more fun
<mmu_man> GLteapot is gcc2 I think
<mmu_man> so the x86 package won't help
<kallisti5[m]> .. good point. gcc2 won't get libglvnd :-)
<BrunoSpr> hello all
<mmu_man> so, took one of the unused machine from the fablab, now I have a i7-3770 and 16GB or RAM to build stuff
<mmu_man> but I guess the bottleneck will be the disk… should probably disable indices
<mmu_man> and it's more power efficient than the older machine
<BrunoSpr> ;-)
<mmu_man> just no HDMI/DVI out, only DP or VGA but I don't have DP cables…
<mmu_man> but I have both a VGA and DVI KVM so it's ok
BrunoSpr has quit [Quit: Vision[]: Ich wurde verwaschen!]
rennj has quit [Ping timeout: 480 seconds]
ghishadow has joined #haiku
<nekobot> [haiku/haiku] waddlesplash pushed 1 commit to master [hrev57674] - https://git.haiku-os.org/haiku/log/?qt=range&q=92d226c2a9be+%5E4a7de3f10a48
<nekobot> [haiku/haiku] 92d226c2a9be - headers/os: Bump max gcc to 14.x
<nekobot> [haiku/haiku] waddlesplash pushed 1 commit to master [hrev57675] - https://git.haiku-os.org/haiku/log/?qt=range&q=1bebd5340bde+%5E92d226c2a9be
<nekobot> [haiku/haiku] 1bebd5340bde - ping: use AI_ADDRCONFIG to filter resolved addresses
<nekobot> [haiku/haiku] waddlesplash pushed 1 commit to master [hrev57676] - https://git.haiku-os.org/haiku/log/?qt=range&q=f42b1cb11831+%5E1bebd5340bde
<nekobot> [haiku/haiku] f42b1cb11831 - fs_shell: Fix error message of cat command.
kajedev has joined #haiku
GenericConfluent has joined #haiku
dcatt has joined #haiku
v_harkonnen has quit [Ping timeout: 480 seconds]
dcatt has quit [Quit: Vision[]: i've been blurred!]
ghishadow has quit [Remote host closed the connection]
GenericConfluent has quit [Ping timeout: 480 seconds]
walkingdisaster has quit [Quit: Vision[]: i've been blurred!]
<Begasus> re
v_harkonnen has joined #haiku
nosycat has joined #haiku
stux|away has quit [Quit: Aloha!]
Anarchos has joined #haiku
<Anarchos> hello
<nosycat> Hi there!
<Anarchos> hello nosycat
<nosycat> What's new?
<Anarchos> nosycat i managed to port gtksourceview3 (though i jsut compileed the package but did no test yet)
<nosycat> Sounds great!
<Anarchos> nosycat and i did a unit test on the network layer, though i can't run unit tests because the jam target for unittests is broken
<nosycat> Heh.
HaikuUser has joined #haiku
HaikuUser has quit []
<Anarchos> nosycat i don't know if others run unit tests ... lol
<nosycat> Dunno. There are no guidelines?
<Anarchos> nosycat 'jam unittests' :)
<nosycat> I mean, for porting stuff to Haiku.
BrunoSpr has joined #haiku
<Anarchos> nosycat oh sure, but i am too lazy do read them...
<Anarchos> nosycat anyway i will port some tools using gtksourceview3 so i will solve porting bugs when they will show then
B2IA has quit [Quit: Vision[]: i've been blurred!]
<nosycat> Sounds great!
B2IA has joined #haiku
GenericConfluent has joined #haiku
<Begasus> Hi Anarchos, got it working?
BrunoSpr has quit [Quit: Vision[]: Ich wurde verwaschen!]
<nosycat> Hey, Begasus.
<Anarchos> Begasus i got a package :)
<Anarchos> Begasus now i try to compile the tools using gtksourceview3
<Begasus> cool Anarchos, wishing you luck +1
<nosycat> And I found a nice toy that "just works" on Haiku.
<Begasus> nice nosycat :)
<Begasus> checking out clion atm, need an example project :P
<nosycat> :D
<Begasus> eeps lua :D
<nosycat> What? :)
<Begasus> heh
<Begasus> it's even worse keeping up there compared to python ;)
<Begasus> it's blocking my attempts at neovim :P
<nosycat> Dunno, in Debian 10 I have like five different versions of Lua, but in Haiku there's just one.
<Anarchos> nosycat which one ?
<Begasus> we've got 4 versions
<Begasus> 5.1 up to 5.4
<nosycat> We do? The web UI to HaikuDepot strikes again.
<nosycat> Anyway, Nelua comes bundled with its own.
<Begasus> tss .. pkgman to the resque!
<Anarchos> how to find wich package provides the file gdkx.h ?
<Anarchos> nosycat lua is on my radar only since recently, but i will give it a look this year.
<Begasus> Anarchos, just use "Find"?
<nosycat> Lua is worth a look.
stux|away has joined #haiku
<Begasus> we could use some help on the subpackages there nosycat :)
ghishadow has joined #haiku
<nosycat> Oh, damn. Wish I could promise to help.
<Begasus> bugger :)
<Anarchos> Begasus didn't find it
<Begasus> should be in the gtk package? (devel)
* Anarchos c'ant remember the pkgman command to list the file content of a package
<Begasus> nope
<Begasus> probably something only available for X11? (or the likes)
<augiedoggie> it's not pkgman, it's `package list foo.hpkg`
<Anarchos> augiedoggie oh thanks
<Anarchos> augiedoggie i can't remember having ever used the 'package' command !!
<nosycat> Me either.
<augiedoggie> btw, to your question the other day about closing windows from Terminal, `hey Tracker Tciw`
<win8linux[m]> <kallisti5[m]> "i'm going to send an email out..." <- Sent this over on the mailing lists already, but also putting this here as well in case people miss it:
<win8linux[m]> Debian folks are mulling over reverting to 5.4.5, the last xz version not touched by Jia Tan (the rogue maintainer).
<win8linux[m]> This may require patches due to ABI breakage, though.
<nosycat> And we just patched xz.
flag has quit [Remote host closed the connection]
<win8linux[m]> Reverting xz to that version may also require a mass rebuild, yes?
<Anarchos> augiedoggie i still see 'w>XXX' threads in 'ps Tracker' after the hey command.
<win8linux[m]> Ik that the Ubuntu folks are also in the process of doing this.
<win8linux[m]> Ik that the Ubuntu folks are already in the process of doing this.
<B2IA> (AGMS) Phew, my Haiku VirtualBox hosting server is using Fedora 39, which is at xz 5.4.4 (according to their package manager, can't trust running xz to find the version!).
<augiedoggie> Anarchos: you will always have a couple of windows open, one is for the Desktop and one is a status window for file copies and stuff
<augiedoggie> they are hidden but still around
<win8linux[m]> Wait a sec, are there any packages in HaikuPorts that were built around the compromised xz version?
<augiedoggie> Anarchos: and it only closes the windows on that workspace, so you may have some open on another
flag has joined #haiku
stux|away has quit [Ping timeout: 480 seconds]
<augiedoggie> probably ffmpeg at least
<Anarchos> augiedoggie i am connected through ssh ...
<Anarchos> hmmm gtk3_devel contains gdkwayland.h but no gdkx.h...
<Anarchos> maybe the haiku gtk3 port uses only wayland backend ?
<kallisti5[m]> <win8linux[m]> "Sent this over on the mailing..." <- > <@win8linux:kde.org> Sent this over on the mailing lists already, but also putting this here as well in case people miss it:
<kallisti5[m]> Yeah.. It's a mess. We can downgrade if it helps match what others are doing
<kallisti5[m]> We're not really at risk since it seems to target Linux, but I don't trust xz at this point
<kallisti5[m]> The build bump was mostly trying to get a zero day solution out there
<Begasus> packages using devel:liblzma https://bpa.st/4NDQ
<kallisti5[m]> Lame. We can Rev bump those to rebuild... But let's definitely wait for a solid xz solution first
<Begasus> yeah
<x512[m]> > but I don't trust xz at this point
<x512[m]> It is not a problem specific to XZ. Any open-source project can be attacked in this way.
<nosycat> In theory. But certain factors make projects more vulnerable.
<x512[m]> Also it is a vulnerability of Autotools build system. Autotools should be avoided if possible.
<kallisti5[m]> I know lol. It's an attack path I've wondered about tbh
<kallisti5[m]> Way too much soft trust
<kallisti5[m]> Open source is enough work without bad actors
<x512[m]> Autotools projects include generated scripts in source distribution that are not present in source repo.
<kallisti5[m]> 4k line autoconfs need to die
<Anarchos> x512[m] i never understood why people commited generated config/make files .
<nosycat> I see a lot of projects lately going back to simple makefiles.
<waddlesplash> dovsienko: here's an interesting question. is bluetooth treated as a network interface on other OSes, or is it "sui generis"?
<x512[m]> Strict repo snapshots should be used instead of "official" source archives that includes potentially infected "configure" script.
<dovsienko> waddlesplash: in libpcap network interfaces are a subset of capture devices
<waddlesplash> obviously it has to be at least a little bit in the network stack if socket(AF_BLUETOOTH) will work
<waddlesplash> right, makes sense
<waddlesplash> but I am wondering if in Haiku we should merge it into the network system entirely
<waddlesplash> there are a number of potential downsides here
<dovsienko> so long as you do not mix PAN into scope, BT is an example of a non-network capture device
<x512[m]> Anarchos: It is recommended by official Autotools developers team.
<waddlesplash> but there's also the upside that we wouldn't have to come up with a separate capturing interface
<waddlesplash> and other management could be merged too
<x512[m]> Autotools is terrible in any possible way, including security.
<dovsienko> although I am not entirely sure about Bluetooth, to be honest. USB is a good example of non-network capture device
<x512[m]> I hope that this incident will stop dangerous practice of providing source archives that do not match repo revision.
<Anarchos> x512[m] machines are fast enough now to rebuild config/make files, so i don't feel the need to commit generated files. As at work , we try to never duplicate information...
<dovsienko> although it has a hub... okay, D-bus and NFLOG are most certainly non-network producers of packets/frames/messages
<waddlesplash> x512[m]: it does not matter. the actual object code in this case was checked into git in the tests directory. the only thing the release archive has different is the code to add it to the build.
<x512[m]> Autotools fans claim that providing generated configure script will simplify build process.
<waddlesplash> x512[m]: a few more levels of subtlety and the release archive / git repo difference wouldn't have existed
<Anarchos> x512[m] i hope this fan base reduce soon with age :)
<waddlesplash> dovsienko: in Haiku at present, L2CAP is mostly dealt with inside net_buffers, though they aren't sent/received through the network stack interface. with some rework they could be
* Anarchos wonder if a haiku dev has troubles too with 'jam unittests' ?
<x512[m]> waddlesplash: Test archives contents don't matter unless starter script is added to source archive.
<x512[m]> So Autotools is a root cause.
<waddlesplash> no? this could also be done through other build systems?
<waddlesplash> the tests are not in a separate archive
<waddlesplash> or at least these aren't
<x512[m]> Other build systems do not need to provide source archive that don't exactly match repo revision.
<waddlesplash> and neither does autotools
<waddlesplash> some repos check ./configure into SCM
<x512[m]> Regular GitHub automatic source archive generation for release tags if perfectly fine for every popular build system except Autotools.
<dovsienko> that was the way in tcpdump, until it was not (too much generated changes for simple commits, also Autoconf flavours are different)
<waddlesplash> regenerating ./configure isn't easy though because autoconf versions are generally not forwards OR backwards compatible
<waddlesplash> you pretty much have to use the exact version they did
<dovsienko> that said, release tarballs have ./configure so host without the required Autoconf version can build it
<dovsienko> tcpdump and libpcap do it the old way because they have been doing this well before git (or Subversion) (or maybe even CVS) existed
<x512[m]> waddlesplash: It is not an excuse at all. Every open source project should document build requirements. How developers are supposed to make contributions if they are unable to chsnge build definitions?
<Anarchos> waddlesplash didn't know that for the autoconf forwards OR backwards compatible. How rude...
<dovsienko> "this is the release tarball. this is the signature. you install into production from that. for development, git is over there"
<x512[m]> dovsienko: Who guarantee that release tarball is not compromised if it includes some random scripts not present in repo that is supposed to be run with root privileges on install?
<dovsienko> waddlesplash: I do not have a useful opinion about BT placement in Haiku kernel right now. if you consider projects for students, please see https://github.com/the-tcpdump-group/libpcap/blob/master/doc/README.haiku.md
<x512[m]> In GitHub it is guaranteed by automatic release archive generation.
<dovsienko> it is trivially convertible into a to-do list
extrowerk_ has quit [Quit: Bye!]
<nosycat> F-Droid started using reproducible builds a while ago, but I'm not sure how it helps except with middleman attacks.
GenericConfluent has quit [Ping timeout: 480 seconds]
<dovsienko> x512[m]: the release engineer, who cryptographically signs the tarball
<x512[m]> Release engineer of XZ was an attacker.
extrowerk has joined #haiku
<nosycat> Exactly.
<x512[m]> More people to be trusted -- more vulnerabilities.
<dovsienko> a backdoor can be embedded straight into git repository, in this specific case it was supposedly not
<nosycat> This was a human problem, not a tech problem.
<nosycat> Also an audit problem, because *everything* is too complicated today.
<x512[m]> Git repo have a history of commits that can be easily checked.
<dovsienko> what would prevent an attacker from adding a botched obvious backdoor to the tarball and adding a well hidden one to the "trusted" git repository, which everyone would suddenly rush to start using?
extrowerk has quit []
<nosycat> Plans within plans, and traps within traps?
<x512[m]> It is definitely a tech problem, terribly insecure practice of making Autotools-based projects source releases.
GenericConfluent has joined #haiku
<x512[m]> Source archives should be generated fully automatically without any intervention of release engineers etc.
<dovsienko> it is not fair to blame tools when the root cause is an ill-intended actor
<x512[m]> More human intervention -- more vulnerabilities.
<x512[m]> Tool that need more trust for many people is more vulnerable. Obvious thing.
<dovsienko> all successful IT attacks were accomplished by people who drink water and without water they would not be able to mount the attack, so let's declare water illegal
<x512[m]> Autotools also use very old and obscure languages such as M4 that a few people can audit for attacks.
<nosycat> That's a better point.
<dovsienko> I find M4 about as intelligible as CMake sometimes
<x512[m]> M4 was a final launcher of attack.
extrowerk has joined #haiku
<nosycat> M4 is also antiquated.
<FreeFull> The attack would have taken a lot longer to find if someone didn't realise sshd is 0.5s too slow
<dovsienko> it is and I very much disliked it on its technical grounds when I had to use it regularly, but once again you try to ignore the root cause
<dovsienko> FreeFull: you are just a couple steps from realising how many other backdoors have not been detected yet because they were better engineered (or marketed!)
<nosycat> I saw links to that older article about xz's inherent downsides.
<nosycat> Who'd have thought improbably good compression is dubious.
<Anarchos> x512[m] the extreme would be to distribute only source code and the boot sector from https://github.com/xorvoid/sectorc :)
<nosycat> And yeah! The OpenBSD people have a point, dammit. We absolutely need simpler code everywhere. Code we have a hope to audit.
<win8linux[m]> nosycat: I know what that article is and it is not relevant here at all.
<nosycat> No, it isn't.
<nosycat> But it adds to everything else.
<nosycat> The technical problem. The human problem.
<FreeFull> https://bellard.org/tcc/tccboot.html If you don't do any optimisations, C code can be compiled extremely quickly
<kallisti5[m]> barf.. sorry for top posting on the ML
<dovsienko> waddlesplash: working pcap_inject() would enable a couple other programs to work on Haiku. kernel-mode BPF would make performance better if that's a problem for anyone
<Anarchos> FreeFull nah i stick to sectorC side :)
<nosycat> Even with -O2, C code compiles a lot faster than C++.
<FreeFull> You could use sectorc to compile tcc, and then tcc to compile gcc or something
<nosycat> And even textbook optimization can go a long way.
<x512[m]> It depends on what C++ features are used.
<dovsienko> waddlesplash: also perhaps it could be useful to enable Haiku USB as a capture device, if anyone is into USB driver development or some such
<x512[m]> C with classes code compiles fast.
<waddlesplash> dovsienko: got any examples of what the pcap code would look like for that?
<nosycat> Yeah, but I use modern features quite a lot.
<waddlesplash> dovsienko: I have worked a lot on our USB stack, would have to see about where we need to insert code to log packets
<Anarchos> FreeFull right. And if you don't use partition table, i really wonder if you can boot an entire OS only with sectorC...
mattlacey has joined #haiku
<dovsienko> waddlesplash: see pcap-usb-linux.c and --enable-usb
<waddlesplash> one tricky thing is going to be adding hooks at the necessary level
<waddlesplash> right now USB "packetization" happens inside the HCI drivers
<waddlesplash> by the time you get to the stack things have been un-packet'ed
<dovsienko> Guy Harris understands best how the USB code works, if you ask on tcpdump-workers@, he may provide a lot of useful starting points
<dovsienko> I do not remember using USB capture
<dovsienko> not long ago I did a CAN-bus capture for the first time to confirm a bug report. a couple years ago I tested DVB-capturing code (another good example of non-network capture)
stux|away has joined #haiku
<dovsienko> Linux netlink and netfilter would make another good example of non-network
iar[m] has quit [Quit: Client limit exceeded: 20000]
<dovsienko> hopefully libpcap 1.10.5 will be released soon, then you will have the recent lot of easy improvements and bug fixes available and it should be easier to decide what to do next
jmairboeck has quit [Ping timeout: 480 seconds]
Anarchos has quit [Quit: Vision[]: i've been blurred!]
mmu_man has quit [Ping timeout: 480 seconds]
mattlacey has quit [Ping timeout: 480 seconds]
GenericConfluent has quit [Ping timeout: 480 seconds]
<dovsienko> waddlesplash: to answer your original question, if you configure BT as PAN in Linux, you can pair two dongles and use them as short-range wireless network, then you have an ordinary Ethernet-link network interface and can assign addresses to it
<dovsienko> in fact, I used such a network in a home lab setup many years ago. that said, PAN is just one mode of Bluetooth and the rest do not expose network interfaces
<dovsienko> you have to use libbluez or some such to work with headsets, mice etc.
<botifico> [haiku/website] kallisti5 pushed 1 commit to security [+2/-0/±2] https://github.com/haiku/website/commit/d86c00f1b41c
<botifico> [haiku/website] kallisti5 d86c00f - security: Improve our posture to announce critical CVEs
mmu_man has joined #haiku
<kallisti5[m]> lol
<nosycat> Yeah.
rennj has joined #haiku
<dovsienko> you have backups of your own git repositories, correct?
<dovsienko> as the fine print surely explains it, the git hoster may have a different idea of what is "your own"
<nosycat> I treat Codeberg as a public mirror.
<nosycat> Anyway, see you!
nosycat has quit [Quit: Leaving]
gouchi has joined #haiku
<Begasus> closing down here, cu peeps!
Begasus has quit [Quit: Vision[]: i've been blurred!]
<win8linux[m]> <kallisti5[m]> "https://github.com/tukaani-..."; <- Yeah, that's real helpful GitHub. Could've made the repo read-only but *noooooo*, take down the whole thing (including the website).
<win8linux[m]> Also underscores that maybe relying on GitHub long-term may not be such a good idea.
jacereda has joined #haiku
<win8linux[m]> Wait, autotools doesn't have a maintainer?
<win8linux[m]> Damn, we're lucky that autotools wasn't attacked like xz was.
<jacereda> Hi... Getting this: sh-5.2# pkgman add-repo https://eu.hpkg.haiku-os.org/haiku/master/x86_64/current Fetching repository info from https://eu.hpkg.haiku-os.org/haiku/master/x86_64/current ... *** failed! : Server not found
<win8linux[m]> As far as we know, anyways.
<jacereda> Am I using the wrong repo address? I want to track current...
<jacereda> Seems to work fine for haikuports
<jacereda> Looks like I hit https://dev.haiku-os.org/ticket/18504
rennj has quit [Ping timeout: 480 seconds]
<jacereda> Can I somehow rollback to a previous system version if I can't use pkgman add-repo?
<jacereda> or to the latest version, I don't care as long as I can recover from there...
_-Caleb-_ has left #haiku [#haiku]
_-Caleb-_ has joined #haiku
vezhlys has joined #haiku
GenericConfluent has joined #haiku
Anarchos has joined #haiku
<GenericConfluent> Does Haiku happen to have a virtiofs driver? From my poking around in the source I didn't see one.
<Anarchos> GenericConfluent i am pretty sure there is one ?
<GenericConfluent> That's great then
<Anarchos> "pkgman search libvirt" --> An API for virtualization
<Anarchos> could be that package ?
<GenericConfluent> I see
<GenericConfluent> I thought it was just installed by default. My mistake. I was trying to mount something in QEMU and couldn't figure out why my mount tag wasn't appearing.
<GenericConfluent> Thanks
GenericConfluent has quit [Remote host closed the connection]
misthalu has quit [Quit: Leaving]
OscarL has joined #haiku
<OscarL> libvirt is for mananing VMs, it doesn't provides virtio drivers of any kind, as far as I can see from its recipe.
<OscarL> we have some "virtio" drivers, but I don't think we have a "virtiofs" one.
<OscarL> bah... too late, he already left :-(
<OscarL> Anarchos: next time, you can also offer them a link like this: https://xref.landonf.org/source/search?project=haiku&q=virtio
<OscarL> _-Caleb-_: updated squashfs_tools should be installable now on both 32 and 64 bits.
<_-Caleb-_> Hi! Tried in 64 bits without problems... Tonight i Will try the 32 bits, thanks !!
<OscarL> Great, thanks for reporting!
stratofax has joined #haiku
<_-Caleb-_> Oh i can report 10 or 15 things/day ajjaja but that's not the thing ... Atm im working on compile and/or package some "small web" utils, like a gemini protocol browser or a gopher protocol browser
<Anarchos> OscarL i thought of the link but pkgman was shorter to type, my sorry
<OscarL> _-Caleb-_: every bit counts! (I tell myself that, otherwise my contributions won't ammount to much :-P)
<_-Caleb-_> And reporting things in Depot that doesn't work fine like dillo browser today (It cant open gemini or gopher pages)
* Anarchos is testing his port of gtksourceview3 in order to bring coq with IDE and compcert to Haiku.
<OscarL> Anarchos: no problem. good luck with your porting efforts!
<OscarL> _-Caleb-_: one might first start reporting things... then you notice a thing or two you might actually fix yourself... soon you're knee-deep in a sea of .recipes, work-in-progres git branches, and half-assed bug reports :-P
<_-Caleb-_> Hahahaha well, if with that i can help a little ... 😜
<Anarchos> OscarL my server is just slow to recompile the whole ocaml environment to get to coq....
<OscarL> maybe a Haiku VM over a *BSD host might be faster?
* OscarL hides before Anarchos gets mad at him for suggesting anything but bare-metal Haiku :-P
v_harkonnen has quit [Ping timeout: 480 seconds]
<Anarchos> OscarL why using a vm will make things better ? You suggest the haiku scheduler is not optimized ?
OscarL_ has joined #haiku
<OscarL_> Damn hexchat, and its disconnects :-/
<OscarL_> Anarchos: aren't you still running an ubuntu VM on QEMU from a Haiku host?
<OscarL_> that's why I semi-jokingly suggested running QEMU over one of the *BSDs instead (as you didn't liked my previous suggestion to do so from a Linux host)
v_harkonnen has joined #haiku
<OscarL_> if you're just compiling on native Haiku... disregard my comment.
<Anarchos> OscarL_ i wait for nvmm to land to run ubuntu again on qemu from my haiku server
<Anarchos> OscarL_ i compile on native haiku :)
ghishadow has quit []
<Anarchos> and on tuesday i will be given a decent laptop too : mine (which i only use to ssh to my haiku server nowadays) is a toshiba from 2011....
<OscarL_> albeit Haiku *IS* much slower than linux compiling stuff (I bet in part due to due to BFS vs ext4).
<Anarchos> OscarL_ yes i could never figured why bfs is so slow though so perfectly designed by Domininc Gianpaolo
<OscarL_> no design is free of tradeoffs.
OscarL has quit [Ping timeout: 480 seconds]
<stratofax> It looks like the nightly build server might be offline? "ping: s3.wasabisys.com: Name or service not known"
<Anarchos> OscarL_ you think it is due to bfs ? i thought more on the scheduler ?
<Anarchos> stratofax wasabi is not hot anymore (sorry for the joke)
<OscarL_> Anarchos: try compiling the same code from bfs, vs an ext4 partition vs one from ramfs (/var/log/shared_memory), and share the results? :-)
<Anarchos> OscarL_ i have no ext4 partition, and i don't know how to use ramfs
<Anarchos> OscarL_ did you do the test yourself ?
<OscarL_> Anarchos: a BFS partition without query support will surely be faster, but who can live without queries?
<OscarL_> Anarchos: ramfs is already there, just copy stuff under /dev/log/shared_memory/
<OscarL_> Anarchos: I haven't compared BFS vs ext4 BOTH from Haiku, only Haiku/BFS, Linux/ext4.
<Anarchos> OscarL_ did you test with ramfs ?
<stratofax> Anarchos I can't reach any of the repo servers either, like eu.hpkg.haiku-os.org
<Anarchos> stratofax pkgman update works here
<OscarL_> Yes, and it was faster, but my tests was not exactly apples to apples (because I was running haikuporter over BFS, vs plain make from RAMFS).
<Anarchos> OscarL_ ok. we should test with bfs without queries too
<Anarchos> OscarL_ personnaly, i don't user query very much, i have no use case for them :(
<OscarL_> for HaikuPorts work... I cannot live without queries.
<Anarchos> OscarL_ what do you put in your queries ?
<OscarL_> mostly filenames / project names
<OscarL_> so I can easily jump from one .recipe to another.
<OscarL_> header files too.
<OscarL_> say... `qn endian.h` (qn is in my profile/bashrc as "query -a -name $@"), then I just click on the link from Terminal to open it.
HaikuUser has joined #haiku
<OscarL_> sorry, that's: "query -a -name=$@"
<Anarchos> OscarL_ in Terminal i use "query myfile" and it works well. why do you add '-a name=' ?
<OscarL_> Anarchos: name= you might drop... but -a makes it search in all "volumes".
<OscarL_> say... `query endian.h` only finds stuff under $HOME for me.... while `query -a endian.h` finds the headers under /system too.
HaikuUser has quit []
<Anarchos> OscarL_ ah yes -a i used it from many days now
<Anarchos> didn't know about it before...
<Anarchos> oh hello jessicah, i did'nt see you there from a long time
<OscarL_> _-Caleb-_: thing I'm toying with... Do you recognize the file I have open there? :-) https://ibb.co/PtZFtnh
<_-Caleb-_> Hahahaha yessss
<_-Caleb-_> Ure working on a beezer compstibility???
jacereda has quit [Quit: Vision[]: i've been blurred!]
<OscarL_> working already (at least just for listing the content :-D)
<OscarL_> Will surely need some polishing by either Teknomancer and/or augiedoggie, but... all in all... it was much easier than what I expected.
<OscarL_> adding at least extraction of individual files would be my goal. Others can add the rest of functionality. (specially considering my short attention spans :-P)
<Anarchos> OscarL_ is it an archiver ?
<OscarL_> Anarchos: yup, the mighty Beezer, by good old Teknomancer (and with help from augiedoggie): https://github.com/Teknomancer/beezer
<OscarL_> Beezer has been around a *looong* time already.
<OscarL_> I'm just toying around by trying to add SquashFS support for it.
n0toose has joined #haiku
n0toose has quit []
<Anarchos> OscarL_ ok
<Anarchos> OscarL_ one of my leftover work is an unfinisehd rehearsal of BeTeX. the point which annoys me the more is syntax coloring is really slow on big files
<Anarchos> don't know why and how i could improve it
<Anarchos> though i am not the original writer of BeTeX
<OscarL_> Anarchos: even big projects a Scintilla editor can have problems with syntax-coloring on big files (at least on some edge cases). And even the very best editors tend to disable syntax-coloring for "large-enough" files.
<Anarchos> OscarL_ my troubles begin at ~1000 lines which is short to me
<OscarL_> guess different algorithms/methods can have radically different complexities. Maybe betex uses a naive approach that has, say x2 / x^n complexity vs something more complex, but more efficient? (I only have a *very* shallow graps on these things... welp... in most things :-P)
HaikuUser has joined #haiku
gouchi has quit [Remote host closed the connection]
<zdykstra> Evening all
* OscarL_ tries Genio on a "real" project (Beezer)... Very cool! (even if a tad slow on the VM)
<zdykstra> How's life, OscarL_?
<OscarL_> hello zdykstra!
<OscarL_> Still too hot of a summer, but otherwise, can't complain much :-), you?
OscarL_ is now known as OscarL
<zdykstra> I start a new job on Monday, so I'm having a weekend of relaxation before I dive into the deep end
<Anarchos> hello zdykstra
<zdykstra> Hi Anarchos :)
<Anarchos> zdykstra are you dutch ?
<OscarL> cool! Congrats on the new job zdykstra! Hoping it goes very well for you!
<zdykstra> American, but both sides of my family are Dutch
<zdykstra> I know of distant relatives in Holland
<zdykstra> And just like the "real Dutch" I'm tall :P
<Anarchos> zdykstra your name remembered me of Dijkstra, the famous dutch computer scientist
<Anarchos> Begasus[m] coqide built with gtksourceview3 :)
<Anarchos> time to remotedesktop to test it :)
coolcoder613 has joined #haiku
dovsienko has quit [Quit: Leaving]
v_harkonnen has quit [Ping timeout: 480 seconds]
kajedev has quit [Quit: Leaving]
zard has joined #haiku
<Anarchos> i can't make a recipe put the resulting lib in /system/lib, (but it works for the devel package to put the lib_devel in /system/develop/lib). Can someone help me ?
<OscarL> post your recipe on bpa.st or 0x0.st, maybe I (or others) can spot something.
<OscarL> or link to your repo, if you pushed your changes somewhere.
<coolcoder613> Hi zard
<zard> Hello coolcoder613 :-)
<zard> But also, I'm going now, so goodbye
<coolcoder613> bye
zard has quit [Quit: leaving]
<Anarchos> OscarL https://bpa.st/XC6Q
<OscarL> Anarchos, most likely missing some parameters to "runConfigure", like "--libdir=$libDir"
<OscarL> welp, runConfigure should be setting those already. Mmm.
chaoticbob[m] has quit [Quit: Client limit exceeded: 20000]
<OscarL> Anarchos: if you get .hpks, can you list their content? (curious about the name of the library)
<Anarchos> sure
<Anarchos> wait a minute
_leosma has joined #haiku
<Anarchos> OscarL https://bpa.st/KBPQ
<OscarL> Anarchos: not the main issue, but on your "REQUIRES_devel" you have: "gtksourceview$secondaryArchSuffix == $portVersion base". I think you need to change that to: "gtksourceview3$secondaryArchSuffix == $portVersion base" (notice the added "3").
v_harkonnen has joined #haiku
<Anarchos> ok
<Anarchos> i can try to runConfigure", like "--libdir=$libDir" too ..
<OscarL> shouldn't be necessary, unless "make install" is placing the libgtksourceview.so in some weird place (if that's the case, it is most likely NOT paying attention to --libdir).
<OscarL> I guess you could make the recipe stop after "make install", so you can inspect where the files end up under /work-dir/packaging/
<Anarchos> OscarL how to make the recipe stop after make install ?
<OscarL> just push something that break the bash script :-D. I use "exit 1", or "error"
<OscarL> s/push/put/
<OscarL> as in... right after "make install" add a line containing "STOP!!!". that should also work :-P