Christoffer Kjølbæk I have a blog, therefore I am…

21Apr/070

FeistyFawn, installation on T42

This blog-post should have been about installing FeistyFawn on an IBM T42, but EVERYTHING I needed worked out of the box, quite cool :D

The only think that doesn't work, is the fan control. Which by the way, doesn't work in Windows either. I uses the tp-fancontrol script from thinkwiki.org

Save tp-fancontrol as /usr/bin/tp-fancontrol and tp-fancontrol.init as /etc/init.d/tp-fancontrol and run

sudo chmod +x /usr/bin/tp-fancontrol
sudo chmod +x /etc/init.d/tp-fancontrol
sudo update-rc.d tp-fancontrol defaults

Warning! Remember that it can be dangerous to control the fan in this way!!!

Time synchronization
Left-click on the clock, and select Adjust date and time. Under Configuration select Keep synchronized with Internet servers, and accept to install NTP-support.

NFS
In order to use NFS, install "nfs-common"

sudo apt-get install nfs-common

Latex

sudo apt-get install lmodern texmaker tetex-base tetex-extra tetex-doc

Network diagnostic tools

sudo apt-get install iptraf wireshark

Gaim plugins

sudo apt-get install gaim-encryption gaim-thinklight

SUN Java

sudo apt-get install sun-java6-jre sun-java6-plugin

Moving evolution files
http://fedoranews.org/cms/node/875

C/C++ development, Build essential and glade

sudo apt-get install build-essential glade-gnome-2 libglib2.0-dev libgtk2.0-dev

Flash
Download version 9.x.x from http://www.adobe.com/go/getflashplayer, untar and run

sudo ./flashplayer-installer

Mediaplays

sudo apt-get install amarok helix-player mplayer mplayerplug-in

and codecs

sudo aptitude install gstreamer0.10-ffmpeg gstreamer0.10-gl gstreamer0.10-plugins-base gstreamer0.10-plugins-good gstreamer0.10-plugins-bad gstreamer0.10-plugins-bad-multiverse gstreamer0.10-plugins-ugly gstreamer0.10-plugins-ugly-multiverse libxine-extracodecs w32codecs

Servers

sudo apt-get install mysql-server-5.0 mysql-client-5.0 apache2 php5 php5-gd php5-mysql phpmyadmin phpsysinfo websvn php5-cgi libapache2-mod-php5 subversion

Bluetooth

sudo apt-get install bluez-gnome gnome-bluetooth

Sound editing

sudo apt-get install audacity

Firewall

sudo apt-get install firestarter

When using nm-applet and wireless, my eth0 isn't ready when firestarter tries to start. To make firestarter start, when the connection is ready, do this:

cd /etc/NetworkManager/dispatcher.d
sudo gedit my_script

Into this file, set

#!/bin/sh -e
# Script to dispatch NetworkManager events
#
# Runs commands when NetworkManager fiddles with interfaces.

# Run the right scripts
case "$2" in
    up)
        /etc/init.d/firestarter start
        ;;
    down)

        ;;
    pre-up)

        ;;
    post-down)
        /etc/init.d/firestarter stop
        ;;
    *)
        exit 1
        ;;
esac

and finally

sudo chmod +x my_script

Now firestarter should start, when you connection is ready

Backup

sudo apt-get install duplicity

Diverse

sudo apt-get install dia

Things from ubuntuguide.org
Insert "deb http://medibuntu.sos-sts.com/repo/ feisty free non-free" and "deb http://archive.canonical.com/ubuntu feisty-commercial main" in /etc/apt/source.list

wget -q http://packages.medibuntu.org/medibuntu-key.gpg -O- | sudo apt-key add -

sudo apt-get install mozilla-acroread

17Apr/070

OpenWrt – tips & tricks

Change SSH port from 22 to e.g. 2222
Change the last line of the file /etc/init.d/S50dropbear to:

/usr/sbin/dropbear -p 2222

13Apr/072

Encrypted home partition, using LUKS in Ubuntu Feisty Fawn

This guide will very briefly describe how to setup an encrypted LUKS partition and mount it on log in.

Preparation
Start by installing the software needed:

sudo apt-get install libpam-mount cryptsetup

Add these line to /etc/initramfs-tools/modules

dm_mod
dm_crypt
sha256
aes_i586

and update the initrd-image with

sudo update-initramfs -u all

Making the encrypted partition
Remember to take BACKUP, because all data at /dev/sda6 will be lost!!!

Now we have to make the encrypted partition, in this example the devices name is /dev/sda6. First we load the needed modules

sudo modprobe dm_crypt
sudo modprobe sha256
sudo modprobe aes_i586

and the make the LUKS-partiton (use your log-in password):

sudo cryptsetup luksFormat /dev/sda6

Now /dev/sda6 has the LUKS format, and can be attached to /dev/mapper:

sudo cryptsetup luksOpen /dev/sda6 encrypted_home

And then we can make a file system on it, here ext3

sudo mkfs.ext3 -j -O dir_index -m 0 -v /dev/mapper/encrypted_home

Finally we can mount the partition, to see if it works

sudo mount /dev/mapper/encrypted_home /mnt

Unmount and close the LUKS partition:

sudo umount /mnt
sudo cryptsetup luksClose encrypted_home

Setting up pam_mount
Insert

auth optional /lib/security/pam_mount.so use_first_pass

into /etc/pam.d/common-auth

and

session optional /lib/security/pam_mount.so

into /etc/pam.d/common-session

Now create a mount point for the LUKS partition

sudo mkdir /encrypted_home
sudo chmod 777 /encrypted_home

And add

volume foo crypt - /dev/sda6 /encrypted_home cipher=aes - -

into /etc/security/pam_mount.conf

This means that every time the user foo logs in, the LUKS partition will be mounted on /encrypted_home, using the password foo entered. Therefor the LUKS password has to be the same as the log in password.

Log out, log in and see if it works :)

This is inspirited by:
http://thomasdamgaard.dk/blog/article/krypteret-swap-og-root-filsystem-med-luks-og-ubuntu