Profile cover photo
Profile photo
David Woodhouse
David's posts

WTF, Google? Search for 'Canada eTA' and the top (sponsored) result is a scam site which wants to charge you €89 for proxying your request. The next two sponsored links are probably similar, and the first real hit is of course the Canadian government who only charge CAD $7.

Hm, I thought Android Pay was supposed to stop working on rooted phones? Used CF-Auto-Root on my SM-G930F and it still works fine.
+Chainfire is that expected?

It didn't wipe my encrypted storage either, contrary to the dire warnings.

But now it's asking me to let it update the su binary... Sod's Law suggests Android Pay will finally stop working if I let it do that. Should I?

Seriously? This is why some people come to hate computers...


[dwoodhou@i7 f24]$ koji build --scratch f24 samba-4.4.3-1.1.fc24.x86_64
Error: [('SSL routines', 'SSL_shutdown', 'shutdown while in init')]

Er, what? Is something broken on the server side? Did the client break when I updated to F24 beta?.... <a day later> ... Ah, no. My certificate just expired.

[dwoodhou@i7 f24]$ fedora-cert
Certificate has expired, getting a new one
FAS Password:
[dwoodhou@i7 f24]$ koji build --scratch f24 samba-4.4.3-1.1.fc24.src.rpm
Uploading srpm: samba-4.4.3-1.1.fc24.src.rpm

Post has attachment
I have q q 1qqq1q11111pp

Wanted: UI hacker to provide WebKit (or similar) based authentication GUI for OpenConnect to connect to Juniper VPN.

For full support,, we really are going to have to support arbitrary HTML forms, often with JavaScript. Sometimes with Java and Flash. All I want is the DSID cookie you get when you finish logging in.

Post has attachment
Managed to update the OpenConnect web pages to admit to the new Juniper VPN support:

More testing would definitely be welcome. And if anyone can let me have a test account on a server, especially one with IPv6, that would be much appreciated.

Thanks +Tiebing Zhang and +Russ Dill for the help with getting this running.

+Tiebing Zhang​ and I got a hacked-up test branch of OpenConnect to pass its first Juniper SSL VPN packets today.

Authentication isn't quite working yet; currently using for that bit but it's coming together quite quickly now. We think we know how the ESP negotiation works too.

Anyone able to let me have an account on one? Or want to join in the fun? Not for the faint of heart quite yet but it should be soon.

Post has attachment
Almost threw my laptop out the window last night.

Started attempting to write my monthly status report. Want to Cc it to the 'all department' mailing list, so start typing the address, wait for auto-completion (it changes frequently so I don't remember what it is this week). Gr, Evolution's address book and calendar seem to stop working every time I drop off the VPN and don't start working again when I rejoin. Probably related to in some way (a similar bug, if not a symptom of the same bug).

OK, restart evolution-addressbook-factory. Hm, it needs to download a new version of the addressbook. Oh, and for some reason the incremental update doesn't work (that one probably my fault) and it downloads a completely new copy. And then copies its 121MiB of data from the downloaded file into a sqlite database.

Now, Linux's performance under any kind of I/O load is really sucky, but this was even suckier than normal. During this period it took me three minutes just to focus on the xchat window and type a simple response to a question. Normally it's only a minute or two — and I'm not sure how much of that to blame on gnome-shell. Yes, I do have /proc/sys/vm/dirty_ratio set to 1, not the default 20.

I run 'iotop', and half the time it seems to be telling me there is no I/O. That's blatantly nonsense. Eventually I find that abrt is running — taking a core dump of Evolution, which has crashed. So it's writing the 4½GiB core dump to disk. Yes, four and a half fucking gigabytes. I have no idea what it's using it all for. I do periodically run it under Valgrind, and have experimented with some GObject trackers too, but there is no smoking gun; it just grows and grows and grows (as does Thunderbird, I'm told).

I ran gnome-abrt and started trying to file the report. But by the time it'd finished trying to process it, the fucking thing had been deleted! It seems that Yet Another Gnome Shell crash (qv) had caused the evolution dump to be removed while it was still being processed:

Nov 18 00:02:00 abrt-hook-ccpp[19897]: Saved core dump of pid 13172 (/usr/bin/gnome-shell) to /var/tmp/abrt/ccpp-2013-11-18-00:01:17-13172 (384856064 bytes)
Nov 18 00:02:00 abrt-hook-ccpp[19897]: /var/tmp/abrt is 1642394496 bytes (more than 1279MiB), deleting 'ccpp-2013-11-17-22:54:19-2299'

Thankfully, I had also loaded gdb on the coredump manually, and still had it open so I was able to keep a copy.

But even after all this crap had finished, the machine still hadn't recovered from the I/O load, so I gave up and went to bed. Twenty minutes later I came downstairs for Bonjela and Calpol and prodded it, and it still didn't come back. The backlight came on, but it just sat there at a black (but backlit) screen the whole time I finding and measuring out a syringe of medicine. Perhaps that was partly the normal shell crash on waking from idle, but probably not.

I no longer give Linux machines to my family to use. I still try to support the ones I have given out in the past, but it is increasingly painful — just as painful as it is trying to use Linux myself on the desktop.

This sure as hell isn't the year of the Linux desktop. It might just be the year of the MacOS desktop, for me.

I wish gnome-shell didn't keep crashing. Or failing that, I wish that filing bugs actually got things fixed. Am I getting grumpier in my old age, or is the Linux desktop getting progressively worse?

Thanks Google for the shiny new Chromecast. Now, if you could just stop it resetting itself to factory defaults every hour or two...
Wait while more posts are being loaded