Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #242559 > unrolled thread

stability level of testing

Back to article view | Back to linux.debian.user

Contents

  stability level of testing daggs <daggs@gmx.com> - 2021-12-01 08:30 +0100
    Re: stability level of testing Christian Britz <cbritz@t-online.de> - 2021-12-01 09:10 +0100
      Re: stability level of testing daggs <daggs@gmx.com> - 2021-12-01 22:00 +0100
        Re: stability level of testing Christian Britz <cbritz@t-online.de> - 2021-12-01 23:00 +0100
          Re: stability level of testing Charles Curley <charlescurley@charlescurley.com> - 2021-12-02 00:40 +0100
            Re: stability level of testing daggs <daggs@gmx.com> - 2021-12-02 09:30 +0100
              Re: stability level of testing Charles Curley <charlescurley@charlescurley.com> - 2021-12-02 15:50 +0100
                Re: stability level of testing daggs <daggs@gmx.com> - 2021-12-02 18:50 +0100
          Re: stability level of testing daggs <daggs@gmx.com> - 2021-12-02 09:30 +0100
            Re: stability level of testing "Andrew M.A. Cater" <amacater@einval.com> - 2021-12-02 21:10 +0100
              Re: stability level of testing daggs <daggs@gmx.com> - 2021-12-02 22:30 +0100
    Re: stability level of testing Charles Curley <charlescurley@charlescurley.com> - 2021-12-02 00:40 +0100
      Re: stability level of testing daggs <daggs@gmx.com> - 2021-12-02 09:30 +0100
    Re: stability level of testing David Christensen <dpchrist@holgerdanske.com> - 2021-12-02 03:30 +0100
      Re: stability level of testing daggs <daggs@gmx.com> - 2021-12-02 10:00 +0100
        Re: stability level of testing David Christensen <dpchrist@holgerdanske.com> - 2021-12-03 06:10 +0100
          Re: stability level of testing daggs <daggs@gmx.com> - 2021-12-03 14:20 +0100
            Re: stability level of testing Charles Curley <charlescurley@charlescurley.com> - 2021-12-04 00:50 +0100
            Re: stability level of testing "Andrew M.A. Cater" <amacater@einval.com> - 2021-12-05 23:20 +0100
              Re: stability level of testing daggs <daggs@gmx.com> - 2021-12-06 09:10 +0100

#242559 — stability level of testing

Greetings,

I'm thinking of migrating my main server to Debian, I need stability and recent version of small number of pkgs.
in addition I need to recompile with a out of tree patch.
I had Debian stable before but replaced it because upgrade broke the system and the versions used for the mentioned above set of pkgs were too old for what I need.
I know that Testing has more recent pkgs version but I don't know how stable is it.

any info will be appreciate.

Thanks,

Dagg.

[toc] | [next] | [standalone]

#242561

daggs wrote:
> I'm thinking of migrating my main server to Debian, I need stability and recent version of small number of pkgs.
> in addition I need to recompile with a out of tree patch.
> I had Debian stable before but replaced it because upgrade broke the system and the versions used for the mentioned above set of pkgs were too old for what I need.
> I know that Testing has more recent pkgs version but I don't know how stable is it.

Don't do it for a server facing the Internet. Testing does not have
timely security support by concept.

Also by concept, it is of course not stable in the sense of Debian
stable distribution, it is more like a rolling release distribution.

On my desktop, I currently use the testing distribution, but I install
Internet facing applications like browser and mail directly from the
vendor, not from Debian's repository. For example, Firefox and Chromium
often get security patches very late in Debian testing.

[toc] | [prev] | [next] | [standalone]

#242579

Greetings Christian,

> Sent: Wednesday, December 01, 2021 at 10:00 AM
> From: "Christian Britz" <cbritz@t-online.de>
> To: debian-user@lists.debian.org
> Subject: Re: stability level of testing
>
> daggs wrote:
> > I'm thinking of migrating my main server to Debian, I need stability and recent version of small number of pkgs.
> > in addition I need to recompile with a out of tree patch.
> > I had Debian stable before but replaced it because upgrade broke the system and the versions used for the mentioned above set of pkgs were too old for what I need.
> > I know that Testing has more recent pkgs version but I don't know how stable is it.
>
> Don't do it for a server facing the Internet. Testing does not have
> timely security support by concept.
>
> Also by concept, it is of course not stable in the sense of Debian
> stable distribution, it is more like a rolling release distribution.
>
> On my desktop, I currently use the testing distribution, but I install
> Internet facing applications like browser and mail directly from the
> vendor, not from Debian's repository. For example, Firefox and Chromium
> often get security patches very late in Debian testing.
>
>

there will be 2 main facing the Internet connection, server's upgrade and the router vm.
the rest is internal

Dagg.

[toc] | [prev] | [next] | [standalone]

#242581

Hello daggs,

daggs wrote:
> there will be 2 main facing the Internet connection, server's upgrade and the router vm.
> the rest is internal

Routing other computers to the internet, firewalling and so on? I
personally would not do this with the testing distribution, remember, it
has no timely security support.

Current Debian stable 11 ("Bullseye") has not so old software and good
security support, consider using it for a server. You can search for
software versions using packages.debian.org

Good luck,
Christian

[toc] | [prev] | [next] | [standalone]

#242584

On Wed, 1 Dec 2021 22:51:08 +0100
Christian Britz <cbritz@t-online.de> wrote:

> Current Debian stable 11 ("Bullseye") has not so old software and good
> security support, consider using it for a server. You can search for
> software versions using packages.debian.org

Also, should you find you need more a recent version of something than
the Bullseye version, you might find it in backports.

And you can, Murphy help you, go from stable (Bullseye) to Testing. But
I suggest that only as a last, desperate, resort.

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

[toc] | [prev] | [next] | [standalone]

#242608

Greetings Charles,

> Sent: Thursday, December 02, 2021 at 12:13 AM
> From: "Charles Curley" <charlescurley@charlescurley.com>
> To: "Debian Users" <debian-user@lists.debian.org>
> Subject: Re: stability level of testing
>
> On Wed, 1 Dec 2021 22:51:08 +0100
> Christian Britz <cbritz@t-online.de> wrote:
>
> > Current Debian stable 11 ("Bullseye") has not so old software and good
> > security support, consider using it for a server. You can search for
> > software versions using packages.debian.org
>
> Also, should you find you need more a recent version of something than
> the Bullseye version, you might find it in backports.
>
> And you can, Murphy help you, go from stable (Bullseye) to Testing. But
> I suggest that only as a last, desperate, resort.
>
> --
> Does anybody read signatures any more?
>
> https://charlescurley.com
> https://charlescurley.com/blog/
>
>

I know there are bps for kernel, are there for qemu and libvirt?

Thanks,

Dagg

[toc] | [prev] | [next] | [standalone]

#242619

On Thu, 2 Dec 2021 09:27:44 +0100
daggs <daggs@gmx.com> wrote:

> I know there are bps for kernel, are there for qemu and libvirt?

I have no idea, but you can look in the same place I would, e.g.:

https://packages.debian.org/search?searchon=names&section=all&suite=all&arch=any&exact=0&keywords=qemu

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

[toc] | [prev] | [next] | [standalone]

#242625

Greetings Charles,

> Sent: Thursday, December 02, 2021 at 4:07 PM
> From: "Charles Curley" <charlescurley@charlescurley.com>
> To: "Debian Users" <debian-user@lists.debian.org>
> Subject: Re: stability level of testing
>
> On Thu, 2 Dec 2021 09:27:44 +0100
> daggs <daggs@gmx.com> wrote:
>
> > I know there are bps for kernel, are there for qemu and libvirt?
>
> I have no idea, but you can look in the same place I would, e.g.:
>
> https://packages.debian.org/search?searchon=names&section=all&suite=all&arch=any&exact=0&keywords=qemu

thanks for the link, looks like qemu has a bp of 6.1 however I don't see any bp for libvirt.
what are the chances deb files from newer version?

Thanks,

Dagg

[toc] | [prev] | [next] | [standalone]

#242607

Greetings Christian,

> Sent: Wednesday, December 01, 2021 at 11:51 PM
> From: "Christian Britz" <cbritz@t-online.de>
> To: debian-user@lists.debian.org
> Subject: Re: stability level of testing
>
> Hello daggs,
>
> daggs wrote:
> > there will be 2 main facing the Internet connection, server's upgrade and the router vm.
> > the rest is internal
>
> Routing other computers to the internet, firewalling and so on? I
> personally would not do this with the testing distribution, remember, it
> has no timely security support.
>
> Current Debian stable 11 ("Bullseye") has not so old software and good
> security support, consider using it for a server. You can search for
> software versions using packages.debian.org
>
> Good luck,
> Christian
>
>

the main pkgs I need are qemu, kernel and libvirt. my router is inside a vm.
in stable, kernel is 5.10, although 5.15 is latest stable, I can live with 5.10
however, qemu is 5.2 and libvirt is 7.0.0, these are major downgrades for me, I cannot use them.

I was using debian stable before, I've ended up removing it because I had a bug and the fix was in newer incompatible versions.
also the one time I've upgraded the system, it broke my vms.

Thanks,

Dagg

[toc] | [prev] | [next] | [standalone]

#242629

On Thu, Dec 02, 2021 at 09:26:43AM +0100, daggs wrote:
> Greetings Christian,
> 
> > Sent: Wednesday, December 01, 2021 at 11:51 PM
> > From: "Christian Britz" <cbritz@t-online.de>
> > To: debian-user@lists.debian.org
> > Subject: Re: stability level of testing
> >
> > Hello daggs,
> >
> > daggs wrote:
> > > there will be 2 main facing the Internet connection, server's upgrade and the router vm.
> > > the rest is internal
> >
> > Routing other computers to the internet, firewalling and so on? I
> > personally would not do this with the testing distribution, remember, it
> > has no timely security support.
> >
> > Current Debian stable 11 ("Bullseye") has not so old software and good
> > security support, consider using it for a server. You can search for
> > software versions using packages.debian.org
> >
> > Good luck,
> > Christian
> >
> >
> 
> the main pkgs I need are qemu, kernel and libvirt. my router is inside a vm.
> in stable, kernel is 5.10, although 5.15 is latest stable, I can live with 5.10
> however, qemu is 5.2 and libvirt is 7.0.0, these are major downgrades for me, I cannot use them.

They're usable and stable: you can use them, but choose not to, maybe.

> 
> I was using debian stable before, I've ended up removing it because I had a bug and the fix was in newer incompatible versions.

Did you try asking on the lists about the bug / fixes - maybe ask the 
maintainers?

> also the one time I've upgraded the system, it broke my vms.
> 

Broke how? A Debian stable system update shouldn't "just break" VMs.
Or did you "upgrade" from stable -> testing or stable -> unstable?
That's not necessarily an "upgrade" in terms of expected stability/lack of
package churn.

> Thanks,
> 
> Dagg
> 

All the very best, as ever,

Andy Cater

[toc] | [prev] | [next] | [standalone]

#242632

Greetings Andrew,

> Sent: Thursday, December 02, 2021 at 10:05 PM
> From: "Andrew M.A. Cater" <amacater@einval.com>
> To: debian-user@lists.debian.org
> Subject: Re: stability level of testing
>
> On Thu, Dec 02, 2021 at 09:26:43AM +0100, daggs wrote:
> > Greetings Christian,
> >
> > > Sent: Wednesday, December 01, 2021 at 11:51 PM
> > > From: "Christian Britz" <cbritz@t-online.de>
> > > To: debian-user@lists.debian.org
> > > Subject: Re: stability level of testing
> > >
> > > Hello daggs,
> > >
> > > daggs wrote:
> > > > there will be 2 main facing the Internet connection, server's upgrade and the router vm.
> > > > the rest is internal
> > >
> > > Routing other computers to the internet, firewalling and so on? I
> > > personally would not do this with the testing distribution, remember, it
> > > has no timely security support.
> > >
> > > Current Debian stable 11 ("Bullseye") has not so old software and good
> > > security support, consider using it for a server. You can search for
> > > software versions using packages.debian.org
> > >
> > > Good luck,
> > > Christian
> > >
> > >
> >
> > the main pkgs I need are qemu, kernel and libvirt. my router is inside a vm.
> > in stable, kernel is 5.10, although 5.15 is latest stable, I can live with 5.10
> > however, qemu is 5.2 and libvirt is 7.0.0, these are major downgrades for me, I cannot use them.
>
> They're usable and stable: you can use them, but choose not to, maybe.
>
qemu 5.2 didn't supported my setup properly.
libvirt 7.0.0 I didn't tried.
I've encountered behavior change between libvirt versions.

> >
> > I was using debian stable before, I've ended up removing it because I had a bug and the fix was in newer incompatible versions.
>
> Did you try asking on the lists about the bug / fixes - maybe ask the
> maintainers?
the lists aren't always cooperative for long.
infact, the reason I've left debian was because libvirt was upgraded from 6.5.0 to 6.8.0, that introduced an bug which caused my vm to stop booting.
when contacted the libvirt list, I was told it was fixed in 7.0.0.

>
> > also the one time I've upgraded the system, it broke my vms.
> >
>
> Broke how? A Debian stable system update shouldn't "just break" VMs.
> Or did you "upgrade" from stable -> testing or stable -> unstable?
> That's not necessarily an "upgrade" in terms of expected stability/lack of
> package churn.
no, I've upgraded from 9.0 to 10.0, that rendered all of my vms dead.
I wasn't able to find the reasons.
as my router is one of these vms, I needed to find alternative router until I've fixed it.
after trying, I've replaced debian with another ditro.
for me having the router vm broken means my system and network are broken because I cannot use any of them.

Thanks,

Dagg

[toc] | [prev] | [next] | [standalone]

#242583

On Wed, 1 Dec 2021 08:28:16 +0100
daggs <daggs@gmx.com> wrote:

> in addition I need to recompile with a out of tree patch.

You need to recompile what with an out-of-tree patch?

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

[toc] | [prev] | [next] | [standalone]

#242606

> Sent: Thursday, December 02, 2021 at 12:15 AM
> From: "Charles Curley" <charlescurley@charlescurley.com>
> To: "Debian Users" <debian-user@lists.debian.org>
> Subject: Re: stability level of testing
>
> On Wed, 1 Dec 2021 08:28:16 +0100
> daggs <daggs@gmx.com> wrote:
>
> > in addition I need to recompile with a out of tree patch.
>
> You need to recompile what with an out-of-tree patch?
>

Duh, my bad, kernel, I need to compile the kernel with an out of tree patch.

[toc] | [prev] | [next] | [standalone]

#242588

On 11/30/21 11:28 PM, daggs wrote:
> Greetings,
> 
> I'm thinking of migrating my main server to Debian, I need stability and recent version of small number of pkgs.
> in addition I need to recompile with a out of tree patch.
> I had Debian stable before but replaced it because upgrade broke the system and the versions used for the mentioned above set of pkgs were too old for what I need.
> I know that Testing has more recent pkgs version but I don't know how stable is it.
> 
> any info will be appreciate.
> 
> Thanks,
> 
> Dagg.


On 12/1/21 12:55 PM, daggs wrote:
 > there will be 2 main facing the Internet connection, server's upgrade 
and the router vm.
 > the rest is internal


What version of Debian are you running?  What Debian packages?  What 
hypervisor?  Is the service in a VM?  Are all of the other services in 
VM's?  What service?  What are you recompiling?  What is the patch? 
What router software?


David

[toc] | [prev] | [next] | [standalone]

#242610

Greetings David,

> Sent: Thursday, December 02, 2021 at 4:21 AM
> From: "David Christensen" <dpchrist@holgerdanske.com>
> To: debian-user@lists.debian.org
> Subject: Re: stability level of testing
>
> On 11/30/21 11:28 PM, daggs wrote:
> > Greetings,
> >
> > I'm thinking of migrating my main server to Debian, I need stability and recent version of small number of pkgs.
> > in addition I need to recompile with a out of tree patch.
> > I had Debian stable before but replaced it because upgrade broke the system and the versions used for the mentioned above set of pkgs were too old for what I need.
> > I know that Testing has more recent pkgs version but I don't know how stable is it.
> >
> > any info will be appreciate.
> >
> > Thanks,
> >
> > Dagg.
>
>
> On 12/1/21 12:55 PM, daggs wrote:
>  > there will be 2 main facing the Internet connection, server's upgrade
> and the router vm.
>  > the rest is internal
>
>
> What version of Debian are you running?  What Debian packages?  What
> hypervisor?  Is the service in a VM?  Are all of the other services in
> VM's?  What service?  What are you recompiling?  What is the patch?
> What router software?
>
>
> David
>
>

I was running debian, I'm not running now. I need kernel. qemu and libvirt mainly, the rest doesn't matters versionwise.
I have two vms, router and streamer.
the router has 5 pci devs pt, the streamer has 2 pci and 2 usb pt.

the patch is infamous ACS Override kernel patch, that is the only one I compromise on
the router's os is openwrt, streamer os is libreelec

Thanks,

Eial

[toc] | [prev] | [next] | [standalone]

#242641

On 12/2/21 12:53 AM, daggs wrote:
> Greetings David,
> 
>> Sent: Thursday, December 02, 2021 at 4:21 AM
>> From: "David Christensen" <dpchrist@holgerdanske.com>
>> To: debian-user@lists.debian.org
>> Subject: Re: stability level of testing
>>
>> On 11/30/21 11:28 PM, daggs wrote:
>>> Greetings,
>>>
>>> I'm thinking of migrating my main server to Debian, I need stability and recent version of small number of pkgs.
>>> in addition I need to recompile with a out of tree patch.
>>> I had Debian stable before but replaced it because upgrade broke the system and the versions used for the mentioned above set of pkgs were too old for what I need.
>>> I know that Testing has more recent pkgs version but I don't know how stable is it.
>>>
>>> any info will be appreciate.
>>>
>>> Thanks,
>>>
>>> Dagg.
>>
>>
>> On 12/1/21 12:55 PM, daggs wrote:
>>   > there will be 2 main facing the Internet connection, server's upgrade
>> and the router vm.
>>   > the rest is internal
>>
>>
>> What version of Debian are you running?  What Debian packages?  What
>> hypervisor?  Is the service in a VM?  Are all of the other services in
>> VM's?  What service?  What are you recompiling?  What is the patch?
>> What router software?
>>
>>
>> David
>>
>>
> 
> I was running debian, I'm not running now. I need kernel. qemu and libvirt mainly, the rest doesn't matters versionwise.
> I have two vms, router and streamer.
> the router has 5 pci devs pt, the streamer has 2 pci and 2 usb pt.
> 
> the patch is infamous ACS Override kernel patch, that is the only one I compromise on
> the router's os is openwrt, streamer os is libreelec
> 
> Thanks,
> 
> Eial


Rather than getting fancy with virtualization and kernel patches, 
perhaps you should use a hardware firewall/ router device, a dedicated 
computer for LibreELEC (in a DMZ), and a general-purpose computer with 
Debian Stable for your LAN services (?).


David

[toc] | [prev] | [next] | [standalone]

#242649

Greetings David,

> Sent: Friday, December 03, 2021 at 7:00 AM
> From: "David Christensen" <dpchrist@holgerdanske.com>
> To: debian-user@lists.debian.org
> Subject: Re: stability level of testing
>
> On 12/2/21 12:53 AM, daggs wrote:
> > Greetings David,
> >
> >> Sent: Thursday, December 02, 2021 at 4:21 AM
> >> From: "David Christensen" <dpchrist@holgerdanske.com>
> >> To: debian-user@lists.debian.org
> >> Subject: Re: stability level of testing
> >>
> >> On 11/30/21 11:28 PM, daggs wrote:
> >>> Greetings,
> >>>
> >>> I'm thinking of migrating my main server to Debian, I need stability and recent version of small number of pkgs.
> >>> in addition I need to recompile with a out of tree patch.
> >>> I had Debian stable before but replaced it because upgrade broke the system and the versions used for the mentioned above set of pkgs were too old for what I need.
> >>> I know that Testing has more recent pkgs version but I don't know how stable is it.
> >>>
> >>> any info will be appreciate.
> >>>
> >>> Thanks,
> >>>
> >>> Dagg.
> >>
> >>
> >> On 12/1/21 12:55 PM, daggs wrote:
> >>   > there will be 2 main facing the Internet connection, server's upgrade
> >> and the router vm.
> >>   > the rest is internal
> >>
> >>
> >> What version of Debian are you running?  What Debian packages?  What
> >> hypervisor?  Is the service in a VM?  Are all of the other services in
> >> VM's?  What service?  What are you recompiling?  What is the patch?
> >> What router software?
> >>
> >>
> >> David
> >>
> >>
> >
> > I was running debian, I'm not running now. I need kernel. qemu and libvirt mainly, the rest doesn't matters versionwise.
> > I have two vms, router and streamer.
> > the router has 5 pci devs pt, the streamer has 2 pci and 2 usb pt.
> >
> > the patch is infamous ACS Override kernel patch, that is the only one I compromise on
> > the router's os is openwrt, streamer os is libreelec
> >
> > Thanks,
> >
> > Eial
>
>
> Rather than getting fancy with virtualization and kernel patches,
> perhaps you should use a hardware firewall/ router device, a dedicated
> computer for LibreELEC (in a DMZ), and a general-purpose computer with
> Debian Stable for your LAN services (?).

I cannot afford such setup nor do I have the place to put it in

Thanks,

Dagg

[toc] | [prev] | [next] | [standalone]

#242664

On Fri, 3 Dec 2021 14:10:44 +0100
daggs <daggs@gmx.com> wrote:

> I cannot afford such setup

How much is your time worth?

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

[toc] | [prev] | [next] | [standalone]

#242704

On Fri, Dec 03, 2021 at 02:10:44PM +0100, daggs wrote:
> Greetings David,
> 
> > Sent: Friday, December 03, 2021 at 7:00 AM
> > From: "David Christensen" <dpchrist@holgerdanske.com>
> > To: debian-user@lists.debian.org
> > Subject: Re: stability level of testing
> >
> > On 12/2/21 12:53 AM, daggs wrote:
> > > Greetings David,
> > >
> > >> Sent: Thursday, December 02, 2021 at 4:21 AM
> > >> From: "David Christensen" <dpchrist@holgerdanske.com>
> > >> To: debian-user@lists.debian.org
> > >> Subject: Re: stability level of testing
> > >>
> > >> On 11/30/21 11:28 PM, daggs wrote:
> > >>> Greetings,
> > >>>
> > >>> I'm thinking of migrating my main server to Debian, I need stability and recent version of small number of pkgs.
> > >>> in addition I need to recompile with a out of tree patch.
> > >>> I had Debian stable before but replaced it because upgrade broke the system and the versions used for the mentioned above set of pkgs were too old for what I need.
> > >>> I know that Testing has more recent pkgs version but I don't know how stable is it.
> > >>>
> > >>> any info will be appreciate.
> > >>>
> > >>> Thanks,
> > >>>
> > >>> Dagg.
> > >>
> > >>
> > >> On 12/1/21 12:55 PM, daggs wrote:
> > >>   > there will be 2 main facing the Internet connection, server's upgrade
> > >> and the router vm.
> > >>   > the rest is internal
> > >>
> > >>
> > >> What version of Debian are you running?  What Debian packages?  What
> > >> hypervisor?  Is the service in a VM?  Are all of the other services in
> > >> VM's?  What service?  What are you recompiling?  What is the patch?
> > >> What router software?
> > >>
> > >>
> > >> David
> > >>
> > >>
> > >
> > > I was running debian, I'm not running now. I need kernel. qemu and libvirt mainly, the rest doesn't matters versionwise.
> > > I have two vms, router and streamer.
> > > the router has 5 pci devs pt, the streamer has 2 pci and 2 usb pt.
> > >
> > > the patch is infamous ACS Override kernel patch, that is the only one I compromise on
> > > the router's os is openwrt, streamer os is libreelec
> > >
> > > Thanks,
> > >
> > > Eial
> >
> >
> > Rather than getting fancy with virtualization and kernel patches,
> > perhaps you should use a hardware firewall/ router device, a dedicated
> > computer for LibreELEC (in a DMZ), and a general-purpose computer with
> > Debian Stable for your LAN services (?).
> 
> I cannot afford such setup nor do I have the place to put it in
> 
> Thanks,
> 
> Dagg
> 

Hi Dagg,

So (if I'm reading this correctly):

You're running one computer - with a base from some Linux distribution.

You want that to run libvirt and qemu but Debian's version was too old.

You want to instantiate two VNs. 

One runs OpenWRT and "behaves" like a hardware router.

One runs Librelec and "behaves" like a media streaming box

You want to patch the kernel that runs on the main machine with an 
out of kernel patch for ACS override that looks as if it exposes your VMs to a 
security problem - 
https://www.reddit.com/r/VFIO/comments/bvif8d/official_reason_why_acs_override_patch_is_not_in/

A possible way forward:

* Backup your VMs to some sort of media

* Build a basic Debian box with minimal services and no GUI - and no patch.

* Maybe look to Docker to do this:

https://forum.libreelec.tv/thread/23350-how-to-run-docker-containers/

https://github.com/openwrt/docker

To be honest - IMHO 3 x devices would not hurt, _especially_ a hardware 
modem/router.

Doing this all on one machine - what happens when something locks up / one
piece of hardware breaks - do you lose everything?

All the very best, as ever,

Andy C. 

[toc] | [prev] | [next] | [standalone]

#242711

Greetings Andrew,

> Sent: Monday, December 06, 2021 at 12:13 AM
> From: "Andrew M.A. Cater" <amacater@einval.com>
> To: debian-user@lists.debian.org
> Subject: Re: stability level of testing
>
> On Fri, Dec 03, 2021 at 02:10:44PM +0100, daggs wrote:
> > Greetings David,
> >
> > > Sent: Friday, December 03, 2021 at 7:00 AM
> > > From: "David Christensen" <dpchrist@holgerdanske.com>
> > > To: debian-user@lists.debian.org
> > > Subject: Re: stability level of testing
> > >
> > > On 12/2/21 12:53 AM, daggs wrote:
> > > > Greetings David,
> > > >
> > > >> Sent: Thursday, December 02, 2021 at 4:21 AM
> > > >> From: "David Christensen" <dpchrist@holgerdanske.com>
> > > >> To: debian-user@lists.debian.org
> > > >> Subject: Re: stability level of testing
> > > >>
> > > >> On 11/30/21 11:28 PM, daggs wrote:
> > > >>> Greetings,
> > > >>>
> > > >>> I'm thinking of migrating my main server to Debian, I need stability and recent version of small number of pkgs.
> > > >>> in addition I need to recompile with a out of tree patch.
> > > >>> I had Debian stable before but replaced it because upgrade broke the system and the versions used for the mentioned above set of pkgs were too old for what I need.
> > > >>> I know that Testing has more recent pkgs version but I don't know how stable is it.
> > > >>>
> > > >>> any info will be appreciate.
> > > >>>
> > > >>> Thanks,
> > > >>>
> > > >>> Dagg.
> > > >>
> > > >>
> > > >> On 12/1/21 12:55 PM, daggs wrote:
> > > >>   > there will be 2 main facing the Internet connection, server's upgrade
> > > >> and the router vm.
> > > >>   > the rest is internal
> > > >>
> > > >>
> > > >> What version of Debian are you running?  What Debian packages?  What
> > > >> hypervisor?  Is the service in a VM?  Are all of the other services in
> > > >> VM's?  What service?  What are you recompiling?  What is the patch?
> > > >> What router software?
> > > >>
> > > >>
> > > >> David
> > > >>
> > > >>
> > > >
> > > > I was running debian, I'm not running now. I need kernel. qemu and libvirt mainly, the rest doesn't matters versionwise.
> > > > I have two vms, router and streamer.
> > > > the router has 5 pci devs pt, the streamer has 2 pci and 2 usb pt.
> > > >
> > > > the patch is infamous ACS Override kernel patch, that is the only one I compromise on
> > > > the router's os is openwrt, streamer os is libreelec
> > > >
> > > > Thanks,
> > > >
> > > > Eial
> > >
> > >
> > > Rather than getting fancy with virtualization and kernel patches,
> > > perhaps you should use a hardware firewall/ router device, a dedicated
> > > computer for LibreELEC (in a DMZ), and a general-purpose computer with
> > > Debian Stable for your LAN services (?).
> >
> > I cannot afford such setup nor do I have the place to put it in
> >
> > Thanks,
> >
> > Dagg
> >
>
> Hi Dagg,
>
> So (if I'm reading this correctly):
>
> You're running one computer - with a base from some Linux distribution.
>
> You want that to run libvirt and qemu but Debian's version was too old.
>
> You want to instantiate two VNs.
>
> One runs OpenWRT and "behaves" like a hardware router.
>
> One runs Librelec and "behaves" like a media streaming box
>
> You want to patch the kernel that runs on the main machine with an
> out of kernel patch for ACS override that looks as if it exposes your VMs to a
> security problem -
> https://www.reddit.com/r/VFIO/comments/bvif8d/official_reason_why_acs_override_patch_is_not_in/
>
> A possible way forward:
>
> * Backup your VMs to some sort of media
>
> * Build a basic Debian box with minimal services and no GUI - and no patch.
>
> * Maybe look to Docker to do this:
>
> https://forum.libreelec.tv/thread/23350-how-to-run-docker-containers/
>
> https://github.com/openwrt/docker
>
> To be honest - IMHO 3 x devices would not hurt, _especially_ a hardware
> modem/router.
>
> Doing this all on one machine - what happens when something locks up / one
> piece of hardware breaks - do you lose everything?
>
> All the very best, as ever,
>
> Andy C.

you are correct. that is what I'm currently running.
as for your remarks:
1. I know the about the acso patch, that is my only exception, it is out of necessity.
2. I cannot get 3 devices, it will not pass budget-wise and wife-wise.
3. the system rarely breaks, I had one mb failure and a few os related issue, apart from that, it worked great. I have redundancies, however it requires using insecure/outdated applicants.
4. I'm not sure if it is possible to run ui programs in a docker. I'll look into it, thanks.
5. my openwrt and libreelec are self compiled, I need to how to run them properly inside the docker.
6. I work with dockers on a dally basis, it get stuck/freezes atleast once a day. I cannot have either of my containers getting stuck once a day

thanks for the info, I'll look into it, maybe dockers is the right way for me.

Dagg

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web