Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #263943 > unrolled thread
| Started by | gene heskett <gheskett@shentel.net> |
|---|---|
| First post | 2023-11-29 19:00 +0100 |
| Last post | 2023-11-29 22:20 +0100 |
| Articles | 20 on this page of 100 — 17 participants |
Back to article view | Back to linux.debian.user
time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-11-29 19:00 +0100
Re: time question, as in ntp? Dan Ritter <dsr@randomstring.org> - 2023-11-29 19:20 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-11-29 19:40 +0100
Re: time question, as in ntp? Dan Purgert <dan@djph.net> - 2023-11-29 19:20 +0100
Re: time question, as in ntp? Greg Wooledge <greg@wooledge.org> - 2023-11-29 20:10 +0100
Re: time question, as in ntp? Dan Purgert <dan@djph.net> - 2023-11-29 20:20 +0100
Re: time question, as in ntp? Jeffrey Walton <noloader@gmail.com> - 2023-11-30 01:30 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-11-29 22:00 +0100
Re: time question, as in ntp? Dan Purgert <dan@djph.net> - 2023-11-30 00:00 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-11-30 01:40 +0100
Re: time question, as in ntp? Dan Purgert <dan@djph.net> - 2023-11-30 11:40 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-11-30 11:50 +0100
Re: time question, as in ntp? Max Nikulin <manikulin@gmail.com> - 2023-11-30 03:50 +0100
Re: time question, as in ntp? Dan Purgert <dan@djph.net> - 2023-11-30 11:50 +0100
Re: time question, as in ntp? John Hasler <john@sugarbit.com> - 2023-11-29 19:30 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-11-29 20:00 +0100
Re: time question, as in ntp? Greg Wooledge <greg@wooledge.org> - 2023-11-29 20:30 +0100
Re: time question, as in ntp? "Andrew M.A. Cater" <amacater@einval.com> - 2023-11-29 21:00 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-11-30 01:10 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-11-30 01:00 +0100
Re: time question, as in ntp? John Hasler <john@sugarbit.com> - 2023-11-30 02:30 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-11-30 03:00 +0100
Re: time question, as in ntp? Charles Curley <charlescurley@charlescurley.com> - 2023-11-30 03:50 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-11-30 05:20 +0100
Re: time question, as in ntp? Charles Curley <charlescurley@charlescurley.com> - 2023-11-30 05:40 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-11-30 10:20 +0100
Re: time question, as in ntp? Karen Lewellen <klewellen@shellworld.net> - 2023-11-30 05:50 +0100
Re: time question, as in ntp? Karen Lewellen <klewellen@shellworld.net> - 2023-11-30 05:50 +0100
Re: time question, as in ntp? Dan Purgert <dan@djph.net> - 2023-11-30 11:50 +0100
Re: time question, as in ntp? Dan Purgert <dan@djph.net> - 2023-11-30 11:50 +0100
Re: time question, as in ntp? Max Nikulin <manikulin@gmail.com> - 2023-11-30 03:40 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-11-30 05:10 +0100
Re: time question, as in ntp? Max Nikulin <manikulin@gmail.com> - 2023-11-30 06:00 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-11-30 10:20 +0100
Re: time question, as in ntp? Greg Wooledge <greg@wooledge.org> - 2023-11-30 13:20 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-11-30 11:20 +0100
Re: time question, as in ntp? Max Nikulin <manikulin@gmail.com> - 2023-11-30 13:40 +0100
Re: time question, as in ntp? Greg Wooledge <greg@wooledge.org> - 2023-11-30 14:20 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-11-30 20:00 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-11-30 19:50 +0100
Re: time question, as in ntp? Max Nikulin <manikulin@gmail.com> - 2023-12-01 03:40 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-12-01 04:30 +0100
Re: time question, as in ntp? John Hasler <john@sugarbit.com> - 2023-12-01 05:10 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-12-01 11:10 +0100
Re: time question, as in ntp? Curt <curty@free.fr> - 2023-12-01 18:00 +0100
Re: time question, as in ntp? <tomas@tuxteam.de> - 2023-12-01 19:50 +0100
Re: time question, as in ntp? John Hasler <john@sugarbit.com> - 2023-12-01 20:30 +0100
Re: time question, as in ntp? Max Nikulin <manikulin@gmail.com> - 2023-12-01 05:20 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-12-01 11:50 +0100
Re: time question, as in ntp? Dan Purgert <dan@djph.net> - 2023-12-01 12:40 +0100
Re: time question, as in ntp? Max Nikulin <manikulin@gmail.com> - 2023-12-01 16:30 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-12-01 20:30 +0100
Re: time question, as in ntp? Greg Wooledge <greg@wooledge.org> - 2023-12-01 20:50 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-12-01 23:00 +0100
Re: time question, as in ntp? Greg Wooledge <greg@wooledge.org> - 2023-12-01 23:40 +0100
Re: time question, as in ntp? Max Nikulin <manikulin@gmail.com> - 2023-12-02 12:20 +0100
Re: time question, as in ntp? Max Nikulin <manikulin@gmail.com> - 2023-12-02 08:50 +0100
Re: time question, as in ntp? Andy Smith <andy@strugglers.net> - 2023-12-01 08:40 +0100
Re: time question, as in ntp? "Andrew M.A. Cater" <amacater@einval.com> - 2023-12-01 19:30 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-12-01 22:30 +0100
Re: time question, as in ntp? John Hasler <john@sugarbit.com> - 2023-12-02 03:40 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-12-02 11:50 +0100
Re: time question, as in ntp? John Hasler <john@sugarbit.com> - 2023-11-30 15:20 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-11-30 20:10 +0100
Re: time question, as in ntp? Greg Wooledge <greg@wooledge.org> - 2023-11-30 20:20 +0100
Re: time question, as in ntp? Charles Curley <charlescurley@charlescurley.com> - 2023-11-30 21:00 +0100
Re: time question, as in ntp? John Hasler <john@sugarbit.com> - 2023-11-30 21:30 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-12-01 03:10 +0100
Re: time question, as in ntp? John Hasler <john@sugarbit.com> - 2023-12-01 04:10 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-12-01 04:40 +0100
Re: time question, as in ntp? John Hasler <john@sugarbit.com> - 2023-12-01 05:20 +0100
Re: time question, as in ntp? David Wright <deblis@lionunicorn.co.uk> - 2023-12-01 06:10 +0100
Re: time question, as in ntp? Dan Purgert <dan@djph.net> - 2023-12-01 11:50 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-12-01 12:00 +0100
Re: time question, as in ntp? Dan Purgert <dan@djph.net> - 2023-12-01 12:30 +0100
Re: time question, as in ntp? Greg Wooledge <greg@wooledge.org> - 2023-12-01 14:30 +0100
Re: time question, as in ntp? Dan Purgert <dan@djph.net> - 2023-12-01 15:40 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-12-01 19:50 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-12-01 14:30 +0100
Re: time question, as in ntp? Dan Purgert <dan@djph.net> - 2023-12-01 14:50 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-12-01 19:50 +0100
Re: time question, as in ntp? Greg Wooledge <greg@wooledge.org> - 2023-12-01 04:20 +0100
Re: time question, as in ntp? Charles Curley <charlescurley@charlescurley.com> - 2023-11-30 15:20 +0100
Re: time question, as in ntp? Andy Smith <andy@strugglers.net> - 2023-11-30 17:20 +0100
Re: time question, as in ntp? Greg Wooledge <greg@wooledge.org> - 2023-11-30 19:10 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-12-01 02:40 +0100
Re: time question, as in ntp? Max Nikulin <manikulin@gmail.com> - 2023-12-01 17:30 +0100
Re: time question, as in ntp? Andy Smith <andy@strugglers.net> - 2023-12-01 21:50 +0100
Re: time question, as in ntp? Charles Curley <charlescurley@charlescurley.com> - 2023-12-02 00:10 +0100
Re: time question, as in ntp? John Hasler <john@sugarbit.com> - 2023-12-02 17:40 +0100
Re: time question, as in ntp? Max Nikulin <manikulin@gmail.com> - 2023-12-04 04:10 +0100
Re: time question, as in ntp? John Hasler <john@sugarbit.com> - 2023-12-04 05:40 +0100
Re: time question, as in ntp? Max Nikulin <manikulin@gmail.com> - 2023-12-04 11:10 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-12-04 10:50 +0100
Re: time question, as in ntp? Stefan Monnier <monnier@iro.umontreal.ca> - 2023-12-04 15:40 +0100
Re: time question, as in ntp? <tomas@tuxteam.de> - 2023-12-04 15:40 +0100
Re: time question, as in ntp? John Hasler <john@sugarbit.com> - 2023-12-04 16:00 +0100
Re: time question, as in ntp? Tom Dial <tddial@comcast.net> - 2023-12-05 09:40 +0100
Re: time question, as in ntp? Lee <ler762@gmail.com> - 2023-11-29 20:20 +0100
Re: time question, as in ntp? gene heskett <gheskett@shentel.net> - 2023-11-29 22:20 +0100
Page 1 of 5 [1] 2 3 4 5 Next page →
| From | gene heskett <gheskett@shentel.net> |
|---|---|
| Date | 2023-11-29 19:00 +0100 |
| Subject | time question, as in ntp? |
| Message-ID | <HFx0R-9Izg-7@gated-at.bofh.it> |
Greetings all; I have a 3d printer, an arm64 controller running ambian buster it has an address of 169.254.xx.xx/16 it can ping this machine but something is killing full net access, so it can't set its time. It can talk to this machine by address. Running bookworm here. There was at onetime, the ability to make this machine serve as a lower level time server so it should be possible to have this printers time requests satisfied by this machine which s/b within a millisecond or 2 of the master clock in Boulder CO. Is there a ready made package for that? Or, can this be enabled in systemd stuff? Thanks Cheers, Gene Heskett. -- "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author, 1940) If we desire respect for the law, we must first make the law respectable. - Louis D. Brandeis
[toc] | [next] | [standalone]
| From | Dan Ritter <dsr@randomstring.org> |
|---|---|
| Date | 2023-11-29 19:20 +0100 |
| Message-ID | <HFxkd-9IYM-5@gated-at.bofh.it> |
| In reply to | #263943 |
gene heskett wrote: > Greetings all; > > I have a 3d printer, an arm64 controller running ambian buster > it has an address of 169.254.xx.xx/16 That IP suggests that it has not got a static IP or a DHCP address, and doesn't know what the local network is. Do you actually run your internal network on 169.254? > it can ping this machine but something is killing full net access, so it > can't set its time. > > It can talk to this machine by address. Running bookworm here. > > There was at onetime, the ability to make this machine serve as a lower > level time server so it should be possible to have this printers time > requests satisfied by this machine which s/b within a millisecond or 2 of > the master clock in Boulder CO. > > Is there a ready made package for that? Or, can this be enabled in systemd > stuff? apt install ntp or apt install ntpsec or apt install chrony The defaults for Debian time packages use the Debian NTP pool: https://www.pool.ntp.org/ -dsr-
[toc] | [prev] | [next] | [standalone]
| From | gene heskett <gheskett@shentel.net> |
|---|---|
| Date | 2023-11-29 19:40 +0100 |
| Message-ID | <HFxDC-9J8M-7@gated-at.bofh.it> |
| In reply to | #263944 |
On 11/29/23 12:58, Dan Ritter wrote: > gene heskett wrote: >> Greetings all; >> >> I have a 3d printer, an arm64 controller running ambian buster >> it has an address of 169.254.xx.xx/16 > > That IP suggests that it has not got a static IP or a DHCP > address, and doesn't know what the local network is. > > Do you actually run your internal network on 169.254? > Country boy dumb maybe, stoopid no. All my stuff is 192.168.xxx.xxx This printer is setup for dhcp, and there are zero dhcp servers on my network, its not even enabled in dd-wrt. All hosts file based here. I can edit /etc/hosts on the printer but so far the only thing I have tried is by nameserver 192.168.xxx.xxx in its resolv.conf, and while that enables the dns lookup so while I can ping -c1 yahoo.com, which gets its address, but the reply does not get back to the printer, 100% packet loss. So here I am, hat in hand. > >> it can ping this machine but something is killing full net access, so it >> can't set its time. >> >> It can talk to this machine by address. Running bookworm here. >> >> There was at onetime, the ability to make this machine serve as a lower >> level time server so it should be possible to have this printers time >> requests satisfied by this machine which s/b within a millisecond or 2 of >> the master clock in Boulder CO. >> >> Is there a ready made package for that? Or, can this be enabled in systemd >> stuff? > > apt install ntp > or > apt install ntpsec > or > apt install chrony I just looked at all 3, but what happens to systemd.timesync.d or whatever its called. Don't they start a fight? > The defaults for Debian time packages use the Debian NTP pool: > > https://www.pool.ntp.org/ > > -dsr- > . Cheers, Gene Heskett. -- "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author, 1940) If we desire respect for the law, we must first make the law respectable. - Louis D. Brandeis
[toc] | [prev] | [next] | [standalone]
| From | Dan Purgert <dan@djph.net> |
|---|---|
| Date | 2023-11-29 19:20 +0100 |
| Message-ID | <HFxkd-9IYM-7@gated-at.bofh.it> |
| In reply to | #263943 |
[Multipart message — attachments visible in raw view] — view raw
On Nov 29, 2023, gene heskett wrote: > Greetings all; > > I have a 3d printer, an arm64 controller running ambian buster > it has an address of 169.254.xx.xx/16 > it can ping this machine but something is killing full net access, so it > can't set its time. The address range 169.254.0.0/16 is APIPA reserved space, for use primarily when DHCP fails (this is a "Bad Thing"). If you have a machine with this IP address, it's probably best to figure out why DHCP is failing. > > It can talk to this machine by address. Running bookworm here. "what" can talk to "what machine" by "what address" ? > > There was at onetime, the ability to make this machine serve as a lower > level time server so it should be possible to have this printers time > requests satisfied by this machine which s/b within a millisecond or 2 of > the master clock in Boulder CO. > > Is there a ready made package for that? Or, can this be enabled in systemd > stuff? 'ntpd' I think (or is it systemd-timed or something like that nowadays?) -- |_|O|_| |_|_|O| Github: https://github.com/dpurgert |O|O|O| PGP: DDAB 23FB 19FA 7D85 1CC1 E067 6D65 70E5 4CE7 2860
[toc] | [prev] | [next] | [standalone]
| From | Greg Wooledge <greg@wooledge.org> |
|---|---|
| Date | 2023-11-29 20:10 +0100 |
| Message-ID | <HFy6C-9JDD-5@gated-at.bofh.it> |
| In reply to | #263945 |
On Wed, Nov 29, 2023 at 01:17:18PM -0500, Dan Purgert wrote: > 'ntpd' I think (or is it systemd-timed or something like that nowadays?) Gene's system is running some derivative of buster (Debian 10). If I remember correctly, buster did not enable systemd-timed by default. The "ntp" package should be available, as well as "chrony". This was of course before the ntp -> ntpsec transition which happened in Debian 12.
[toc] | [prev] | [next] | [standalone]
| From | Dan Purgert <dan@djph.net> |
|---|---|
| Date | 2023-11-29 20:20 +0100 |
| Message-ID | <HFygh-9JIP-7@gated-at.bofh.it> |
| In reply to | #263950 |
[Multipart message — attachments visible in raw view] — view raw
On Nov 29, 2023, Greg Wooledge wrote: > On Wed, Nov 29, 2023 at 01:17:18PM -0500, Dan Purgert wrote: > > 'ntpd' I think (or is it systemd-timed or something like that nowadays?) > > Gene's system is running some derivative of buster (Debian 10). > If I remember correctly, buster did not enable systemd-timed by > default. The "ntp" package should be available [...] Right, I recall it being ntp (vaguely, at least up through Debian9 / Stretch), but the actual defaults of 9/10/11 are a bit fuzzier. Downside of not actually following the release info as closely as I used to, I guess. :) -- |_|O|_| |_|_|O| Github: https://github.com/dpurgert |O|O|O| PGP: DDAB 23FB 19FA 7D85 1CC1 E067 6D65 70E5 4CE7 2860
[toc] | [prev] | [next] | [standalone]
| From | Jeffrey Walton <noloader@gmail.com> |
|---|---|
| Date | 2023-11-30 01:30 +0100 |
| Message-ID | <HFD6h-9NAL-1@gated-at.bofh.it> |
| In reply to | #263952 |
On Wed, Nov 29, 2023 at 7:06 PM Dan Purgert <dan@djph.net> wrote: > > On Nov 29, 2023, Greg Wooledge wrote: > > On Wed, Nov 29, 2023 at 01:17:18PM -0500, Dan Purgert wrote: > > > 'ntpd' I think (or is it systemd-timed or something like that nowadays?) > > > > Gene's system is running some derivative of buster (Debian 10). > > If I remember correctly, buster did not enable systemd-timed by > > default. The "ntp" package should be available [...] > > Right, I recall it being ntp (vaguely, at least up through Debian9 / > Stretch), but the actual defaults of 9/10/11 are a bit fuzzier. I recently performed an upgrade from a really old release (Jessie or Stretch) to something newer (Bullseye, iirc). It is an old LePotato dev board, so it has been neglected for some time. The board's time was a bit munged. It was a day behind, like no adjustments were being made. When I checked, both ntp and systemd-timesyncd were installed, but neither were configured correctly. I removed the ntp gear, reinstalled systemd-timesyncd, enabled the service, and things have been fine since then. I'm not sure how I got into the state where both ntp and systemd-timesyncd were installed, but neither were being used. It may have been something I did a long time ago. Jeff
[toc] | [prev] | [next] | [standalone]
| From | gene heskett <gheskett@shentel.net> |
|---|---|
| Date | 2023-11-29 22:00 +0100 |
| Message-ID | <HFzP3-9KOE-1@gated-at.bofh.it> |
| In reply to | #263950 |
On 11/29/23 14:03, Greg Wooledge wrote: > On Wed, Nov 29, 2023 at 01:17:18PM -0500, Dan Purgert wrote: >> 'ntpd' I think (or is it systemd-timed or something like that nowadays?) > > Gene's system is running some derivative of buster (Debian 10). No I am not, Greg, been running bookworm for almost a year on this machine. It is the 3d printer, a QIDI X-MAX 3, which is running armbian buster that I am trying to fix. At least enough to set its clock, which is about a year out of date ATM. Just now did a powerdown which restarts it at:Sun 01 Jan 2023 06:02:14 AM PST I have added some of my hosts file into its hosts file, and I can ping back and forth, and a valid ipv4 nameserver to resolv.conf and ping is working locally. But I can't find where its setting its default ipv4 address to the avahi bs, even with grep -r. > If I remember correctly, buster did not enable systemd-timed by > default. This one actually has an /etc/systemd/timesyncd,conf but its default, totally commented out except for the [time] line. The "ntp" package should be available, as well as "chrony". > This was of course before the ntp -> ntpsec transition which happened > in Debian 12. ATP if I can make chrony sub for systemd's timesyncd, as chrony claims to be a client and a server, then point the ntp queries to this machine, its should not be more than 1 or 2 milliseconds out of time, plenty good enough for the girls I might go with. Heck, I was doing it in 1998 with rh5.0 to keep my full blown amiga on time. But tons of changes have blockaided me in late 2023. It seems to me that if timesyncd is replacing the ntp stuff, it ought to be a full replacement but the word server is not mentioned in the docs I've read so far today. So I need hand holding guidance. And the client is running armbian buster, 64 bit. On a rockchip board. Thanks all. Cheers, Gene Heskett. -- "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author, 1940) If we desire respect for the law, we must first make the law respectable. - Louis D. Brandeis
[toc] | [prev] | [next] | [standalone]
| From | Dan Purgert <dan@djph.net> |
|---|---|
| Date | 2023-11-30 00:00 +0100 |
| Message-ID | <HFBHb-9Mmc-17@gated-at.bofh.it> |
| In reply to | #263955 |
[Multipart message — attachments visible in raw view] — view raw
On Nov 29, 2023, gene heskett wrote:
> On 11/29/23 14:03, Greg Wooledge wrote:
> > On Wed, Nov 29, 2023 at 01:17:18PM -0500, Dan Purgert wrote:
> > > 'ntpd' I think (or is it systemd-timed or something like that nowadays?)
> >
> > Gene's system is running some derivative of buster (Debian 10).
> No I am not, Greg, been running bookworm for almost a year on this machine.
> It is the 3d printer, a QIDI X-MAX 3, which is running armbian buster that
> I am trying to fix. At least enough to set its clock, which is about a year
> out of date ATM.
>
> Just now did a powerdown which restarts it at:Sun 01 Jan 2023 06:02:14 AM
> PST
>
> I have added some of my hosts file into its hosts file, and I can ping back
> and forth, and a valid ipv4 nameserver to resolv.conf and ping is working
> locally. But I can't find where its setting its default ipv4 address to the
> avahi bs, even with grep -r.
Avahi BS? APIPA ("A"utomatic "P"rivate "IP" "A"ddressing) is not
avahi/mDNS (aka Bonjour / Zeroconf).
Your DHCP client giving you an APIPA address is indicative of broken
DHCP, and the fix is either:
A. Fix your broken DHCP
B. Set the machine up with a static IP address
I'm kind of surprised that an Armbian box doesn't have a hwclock that
you can set the proper time on, to survive reboots (but anyway, I
imagine once you get the machine running with a valid IP address for
your network, it'll be able to use whatever time-sync service armbian
ships with (quick ddg search implies it ships with chrony installed /
setup as default).
HTH :)
--
|_|O|_|
|_|_|O| Github: https://github.com/dpurgert
|O|O|O| PGP: DDAB 23FB 19FA 7D85 1CC1 E067 6D65 70E5 4CE7 2860
[toc] | [prev] | [next] | [standalone]
| From | gene heskett <gheskett@shentel.net> |
|---|---|
| Date | 2023-11-30 01:40 +0100 |
| Message-ID | <HFDfX-9NFC-3@gated-at.bofh.it> |
| In reply to | #263957 |
On 11/29/23 17:52, Dan Purgert wrote:
> On Nov 29, 2023, gene heskett wrote:
>> On 11/29/23 14:03, Greg Wooledge wrote:
>>> On Wed, Nov 29, 2023 at 01:17:18PM -0500, Dan Purgert wrote:
>>>> 'ntpd' I think (or is it systemd-timed or something like that nowadays?)
>>>
>>> Gene's system is running some derivative of buster (Debian 10).
>> No I am not, Greg, been running bookworm for almost a year on this machine.
>> It is the 3d printer, a QIDI X-MAX 3, which is running armbian buster that
>> I am trying to fix. At least enough to set its clock, which is about a year
>> out of date ATM.
>>
>> Just now did a powerdown which restarts it at:Sun 01 Jan 2023 06:02:14 AM
>> PST
>>
>> I have added some of my hosts file into its hosts file, and I can ping back
>> and forth, and a valid ipv4 nameserver to resolv.conf and ping is working
>> locally. But I can't find where its setting its default ipv4 address to the
>> avahi bs, even with grep -r.
>
> Avahi BS? APIPA ("A"utomatic "P"rivate "IP" "A"ddressing) is not
> avahi/mDNS (aka Bonjour / Zeroconf).
>
> Your DHCP client giving you an APIPA address is indicative of broken
> DHCP, and the fix is either:
>
> A. Fix your broken DHCP
> B. Set the machine up with a static IP address
>
> I'm kind of surprised that an Armbian box doesn't have a hwclock that
> you can set the proper time on, to survive reboots (but anyway, I
> imagine once you get the machine running with a valid IP address for
> your network, it'll be able to use whatever time-sync service armbian
> ships with (quick ddg search implies it ships with chrony installed /
> setup as default).
I'll have to check that, but installing chrony here on this bookworm box
will remove the systemd thing, which is present on the armbian buster
installed on it. ISTR I had the rpi4 setup on buster raspios plus my rt
kernel, and that static entry IIRC was in /etc/network/interfaces, which
I haven't tried yet. Was that buster or did they have a better place.
Tickled my memory, /etc/dhcpcd.conf would appear to be the place. But
I'll have to compose 100% of the option "static".
> HTH :)
It may have, thank you Dan. Take care & stay well.
Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
- Louis D. Brandeis
[toc] | [prev] | [next] | [standalone]
| From | Dan Purgert <dan@djph.net> |
|---|---|
| Date | 2023-11-30 11:40 +0100 |
| Message-ID | <HFMCB-9XpL-5@gated-at.bofh.it> |
| In reply to | #263964 |
[Multipart message — attachments visible in raw view] — view raw
On Nov 29, 2023, gene heskett wrote:
> On 11/29/23 17:52, Dan Purgert wrote:
> > On Nov 29, 2023, gene heskett wrote:
> > > On 11/29/23 14:03, Greg Wooledge wrote:
> > > > On Wed, Nov 29, 2023 at 01:17:18PM -0500, Dan Purgert wrote:
> > > > > 'ntpd' I think (or is it systemd-timed or something like that nowadays?)
> > > >
> > > > Gene's system is running some derivative of buster (Debian 10).
> > > No I am not, Greg, been running bookworm for almost a year on this machine.
> > > It is the 3d printer, a QIDI X-MAX 3, which is running armbian buster that
> > > I am trying to fix. At least enough to set its clock, which is about a year
> > > out of date ATM.
> > >
> > > Just now did a powerdown which restarts it at:Sun 01 Jan 2023 06:02:14 AM
> > > PST
> > >
> > > I have added some of my hosts file into its hosts file, and I can ping back
> > > and forth, and a valid ipv4 nameserver to resolv.conf and ping is working
> > > locally. But I can't find where its setting its default ipv4 address to the
> > > avahi bs, even with grep -r.
> >
> > Avahi BS? APIPA ("A"utomatic "P"rivate "IP" "A"ddressing) is not
> > avahi/mDNS (aka Bonjour / Zeroconf).
> >
> > Your DHCP client giving you an APIPA address is indicative of broken
> > DHCP, and the fix is either:
> >
> > A. Fix your broken DHCP
> > B. Set the machine up with a static IP address
> >
> > I'm kind of surprised that an Armbian box doesn't have a hwclock that
> > you can set the proper time on, to survive reboots (but anyway, I
> > imagine once you get the machine running with a valid IP address for
> > your network, it'll be able to use whatever time-sync service armbian
> > ships with (quick ddg search implies it ships with chrony installed /
> > setup as default).
>
> I'll have to check that, but installing chrony here on this bookworm box
> will remove the systemd thing, which is present on the armbian buster
Leave the bookworm PC alone - the problem is specifically on your
armbian box or network in general.
> installed on it. ISTR I had the rpi4 setup on buster raspios plus my rt
> kernel, and that static entry IIRC was in /etc/network/interfaces, which I
> haven't tried yet. Was that buster or did they have a better place.
/etc/network/interfaces is the standard place for configuring network
interfaces in Debian and derivatives (although Network Mangler may be
offered as a frontend)
> Tickled my memory, /etc/dhcpcd.conf would appear to be the place. But I'll
> have to compose 100% of the option "static".
"Static" IP addressing is not handled in dhcp client configs.
--
|_|O|_|
|_|_|O| Github: https://github.com/dpurgert
|O|O|O| PGP: DDAB 23FB 19FA 7D85 1CC1 E067 6D65 70E5 4CE7 2860
[toc] | [prev] | [next] | [standalone]
| From | gene heskett <gheskett@shentel.net> |
|---|---|
| Date | 2023-11-30 11:50 +0100 |
| Message-ID | <HFMMh-9Xyn-1@gated-at.bofh.it> |
| In reply to | #263979 |
On 11/30/23 05:32, Dan Purgert wrote:
> On Nov 29, 2023, gene heskett wrote:
>> On 11/29/23 17:52, Dan Purgert wrote:
>>> On Nov 29, 2023, gene heskett wrote:
>>>> On 11/29/23 14:03, Greg Wooledge wrote:
>>>>> On Wed, Nov 29, 2023 at 01:17:18PM -0500, Dan Purgert wrote:
>>>>>> 'ntpd' I think (or is it systemd-timed or something like that nowadays?)
>>>>>
>>>>> Gene's system is running some derivative of buster (Debian 10).
>>>> No I am not, Greg, been running bookworm for almost a year on this machine.
>>>> It is the 3d printer, a QIDI X-MAX 3, which is running armbian buster that
>>>> I am trying to fix. At least enough to set its clock, which is about a year
>>>> out of date ATM.
>>>>
>>>> Just now did a powerdown which restarts it at:Sun 01 Jan 2023 06:02:14 AM
>>>> PST
>>>>
>>>> I have added some of my hosts file into its hosts file, and I can ping back
>>>> and forth, and a valid ipv4 nameserver to resolv.conf and ping is working
>>>> locally. But I can't find where its setting its default ipv4 address to the
>>>> avahi bs, even with grep -r.
>>>
>>> Avahi BS? APIPA ("A"utomatic "P"rivate "IP" "A"ddressing) is not
>>> avahi/mDNS (aka Bonjour / Zeroconf).
>>>
>>> Your DHCP client giving you an APIPA address is indicative of broken
>>> DHCP, and the fix is either:
>>>
>>> A. Fix your broken DHCP
>>> B. Set the machine up with a static IP address
>>>
>>> I'm kind of surprised that an Armbian box doesn't have a hwclock that
>>> you can set the proper time on, to survive reboots (but anyway, I
>>> imagine once you get the machine running with a valid IP address for
>>> your network, it'll be able to use whatever time-sync service armbian
>>> ships with (quick ddg search implies it ships with chrony installed /
>>> setup as default).
>>
>> I'll have to check that, but installing chrony here on this bookworm box
>> will remove the systemd thing, which is present on the armbian buster
>
> Leave the bookworm PC alone - the problem is specifically on your
> armbian box or network in general.
>
>> installed on it. ISTR I had the rpi4 setup on buster raspios plus my rt
>> kernel, and that static entry IIRC was in /etc/network/interfaces, which I
>> haven't tried yet. Was that buster or did they have a better place.
>
> /etc/network/interfaces is the standard place for configuring network
> interfaces in Debian and derivatives (although Network Mangler may be
> offered as a frontend)
>
>> Tickled my memory, /etc/dhcpcd.conf would appear to be the place. But I'll
>> have to compose 100% of the option "static".
>
> "Static" IP addressing is not handled in dhcp client configs.
>
According to the buster it is an option, and at one time, perhaps
wheezy, there was a whole stanza of commented code at the bottom of the
file, where last ditch descriptions could be uncommented and filled in
to suit a static setup after all efforts to find a dhcp server have
failed. This to me was the logical place to put that. Re-read the man
page. Its been simplified quite a bit but seems to exist yet if you
know how.
Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
- Louis D. Brandeis
[toc] | [prev] | [next] | [standalone]
| From | Max Nikulin <manikulin@gmail.com> |
|---|---|
| Date | 2023-11-30 03:50 +0100 |
| Message-ID | <HFFhL-9PlI-3@gated-at.bofh.it> |
| In reply to | #263957 |
On 30/11/2023 05:53, Dan Purgert wrote:
> Avahi BS? APIPA ("A"utomatic "P"rivate "IP" "A"ddressing) is not
> avahi/mDNS (aka Bonjour / Zeroconf).
>
> Your DHCP client giving you an APIPA address is indicative of broken
> DHCP, and the fix is either:
avahi-daemon (multicast name resolution and service discovery) and
avahi-autoipd (link-local IP addresses) debian packages are built from
the same "avahi" upstream project despite their purpose is different
(and related).
There are alternatives that may play the same roles (assigning
169.254.x.y IPv4LL addresses and sending/responding to mDNS queries):
udhcp, systemd-networkd. I am unsure however if all CUPS features are
available without avahi.
With proper network configuration (static IP addresses as first step)
avahi may be ignored in this case. Currently avahi-autoipd (or another
tool) successfully manged to make it possible to connect at least local
network. Since static IPs are used in the local network, manual
configuration is required to make global connections available.
[toc] | [prev] | [next] | [standalone]
| From | Dan Purgert <dan@djph.net> |
|---|---|
| Date | 2023-11-30 11:50 +0100 |
| Message-ID | <HFMMh-9Xyn-3@gated-at.bofh.it> |
| In reply to | #263968 |
[Multipart message — attachments visible in raw view] — view raw
On Nov 30, 2023, Max Nikulin wrote:
> On 30/11/2023 05:53, Dan Purgert wrote:
> > Avahi BS? APIPA ("A"utomatic "P"rivate "IP" "A"ddressing) is not
> > avahi/mDNS (aka Bonjour / Zeroconf).
> >
> > Your DHCP client giving you an APIPA address is indicative of broken
> > DHCP, and the fix is either:
>
> avahi-daemon (multicast name resolution and service discovery) and
> avahi-autoipd (link-local IP addresses) debian packages are built from the
> same "avahi" upstream project despite their purpose is different (and
> related).
>
> There are alternatives that may play the same roles (assigning 169.254.x.y
> IPv4LL addresses and sending/responding to mDNS queries): udhcp,
> systemd-networkd. I am unsure however if all CUPS features are available
> without avahi.
APIPA (or I guess more appropriately now -- IPv4LL) addresses are a
timeout failure mode of the DHCP client (IIRC the default Debian client
is / was isc-dhcp-client). At least that's what's running here (box
pulled forward from a netinst of Jessie or Sarge), and _without_
avahi-autoipd I can get those if DHCP falls over (least ISTR getting it,
maybe I never did :/ )
>
> With proper network configuration (static IP addresses as first step) avahi
> may be ignored in this case. Currently avahi-autoipd (or another tool)
> successfully manged to make it possible to connect at least local network.
> Since static IPs are used in the local network, manual configuration is
> required to make global connections available.
>
--
|_|O|_|
|_|_|O| Github: https://github.com/dpurgert
|O|O|O| PGP: DDAB 23FB 19FA 7D85 1CC1 E067 6D65 70E5 4CE7 2860
[toc] | [prev] | [next] | [standalone]
| From | John Hasler <john@sugarbit.com> |
|---|---|
| Date | 2023-11-29 19:30 +0100 |
| Message-ID | <HFxtT-9J3N-1@gated-at.bofh.it> |
| In reply to | #263943 |
Install chrony. But first fix that address. -- John Hasler john@sugarbit.com Elmwood, WI USA
[toc] | [prev] | [next] | [standalone]
| From | gene heskett <gheskett@shentel.net> |
|---|---|
| Date | 2023-11-29 20:00 +0100 |
| Message-ID | <HFxWV-9Jjg-5@gated-at.bofh.it> |
| In reply to | #263946 |
On 11/29/23 13:20, John Hasler wrote: > Install chrony. But first fix that address. How, John? QIDI is afraid of enabling full net access because it might overwrite some of their special stuff. Right now its running armbian buster, which is out of support. And surprise, kiauh.sh is installed, likely how they set the printer up in the first place. Its just a bash script but its magic! Cheers, Gene Heskett. -- "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author, 1940) If we desire respect for the law, we must first make the law respectable. - Louis D. Brandeis
[toc] | [prev] | [next] | [standalone]
| From | Greg Wooledge <greg@wooledge.org> |
|---|---|
| Date | 2023-11-29 20:30 +0100 |
| Message-ID | <HFypY-9JNI-5@gated-at.bofh.it> |
| In reply to | #263948 |
On Wed, Nov 29, 2023 at 01:52:46PM -0500, gene heskett wrote: > On 11/29/23 13:20, John Hasler wrote: > > Install chrony. But first fix that address. > > How, John? QIDI is afraid of enabling full net access because it might > overwrite some of their special stuff. Right now its running armbian buster, > which is out of support. And surprise, kiauh.sh is installed, likely how > they set the printer up in the first place. Its just a bash script but its > magic! There are so many things in this paragraph that I don't understand. What is "QIDI"? Why would enabling full net access "overwrite stuff"? What "stuff"? What is "kiauh.sh" and how is it relevant to this question? Either configure a static IP address for this host, or set up a DHCP server which will assign it the desired IP address. Those are your two choices. If you want it to be on an isolated network, then put it on an isolated network. If it needs an NTP server, make sure you put one of those on the isolated network as well. It sounds like you don't want a *physically* isolated network, but rather, some kind of numeric subnet whose packets won't be routed to the public Internet. That should be feasible. Here's an example setup: Machine R: Router. Configured to talk to the public Internet, and to the local 192.168.1.x subnet. IP forwarding is enabled (from 192.168.1). Does not know about the 192.168.2.x subnet, and will not forward packets from that subnet. Machine T: Time server. Has two IP addresses -- one on 192.168.1.x and one on 192.168.2.x. Default gateway set to R. Runs NTP, configured to permit client connections from both subnets, and to retrieve time from the public Internet. Machine P: Printer. Has an IP address on the 192.168.2.x subnet only. Runs NTP, configured to retrieve time from T. Other hosts: If they need to talk to the public Internet, then they have an address on 192.168.1.x, and default gateway set to R. If they need to talk to P, they have an address on 192.168.2.x. Some will have both. If they run NTP, configure it to retrieve time from T. Of course, there are other ways to achieve isolation. You could also use a single subnet, but set up a fancy firewall in the router, which blocks the forwarding of all packets from P. Or which doesn't forward by default, but is specifically configured to forward packets from T and other identified hosts. You have lots of choices here.
[toc] | [prev] | [next] | [standalone]
| From | "Andrew M.A. Cater" <amacater@einval.com> |
|---|---|
| Date | 2023-11-29 21:00 +0100 |
| Message-ID | <HFySZ-9K3i-3@gated-at.bofh.it> |
| In reply to | #263953 |
On Wed, Nov 29, 2023 at 02:19:51PM -0500, Greg Wooledge wrote: > On Wed, Nov 29, 2023 at 01:52:46PM -0500, gene heskett wrote: > > On 11/29/23 13:20, John Hasler wrote: > > > Install chrony. But first fix that address. > > > > How, John? QIDI is afraid of enabling full net access because it might > > overwrite some of their special stuff. Right now its running armbian buster, > > which is out of support. And surprise, kiauh.sh is installed, likely how > > they set the printer up in the first place. Its just a bash script but its > > magic! > > There are so many things in this paragraph that I don't understand. > What is "QIDI"? Why would enabling full net access "overwrite stuff"? > What "stuff"? What is "kiauh.sh" and how is it relevant to this > question? > QIDI == manufacturer of 3d printers kiauh.sh == helper script to install Klipper Klipper == firmware and environment to drive a 3d printer - large numbers of installed dependencies as I understand it > Either configure a static IP address for this host, or set up a DHCP > server which will assign it the desired IP address. Those are your > two choices. > Just configure your armbian to expect a static address - oh, and try really hard *not* to use something as old as buster, maybe? There are reasons that Debian bothers to put out newer releases :) > If you want it to be on an isolated network, then put it on an isolated > network. If it needs an NTP server, make sure you put one of those > on the isolated network as well. > > It sounds like you don't want a *physically* isolated network, but rather, > some kind of numeric subnet whose packets won't be routed to the public > Internet. That should be feasible. Here's an example setup: > > Machine R: Router. Configured to talk to the public Internet, and to > the local 192.168.1.x subnet. IP forwarding is enabled (from 192.168.1). > Does not know about the 192.168.2.x subnet, and will not forward packets > from that subnet. > > Machine T: Time server. Has two IP addresses -- one on 192.168.1.x and > one on 192.168.2.x. Default gateway set to R. Runs NTP, configured to > permit client connections from both subnets, and to retrieve time from > the public Internet. > > Machine P: Printer. Has an IP address on the 192.168.2.x subnet only. > Runs NTP, configured to retrieve time from T. > > Other hosts: If they need to talk to the public Internet, then they have > an address on 192.168.1.x, and default gateway set to R. If they need > to talk to P, they have an address on 192.168.2.x. Some will have both. > If they run NTP, configure it to retrieve time from T. > > Of course, there are other ways to achieve isolation. You could also > use a single subnet, but set up a fancy firewall in the router, which > blocks the forwarding of all packets from P. Or which doesn't forward > by default, but is specifically configured to forward packets from T > and other identified hosts. You have lots of choices here. > Gene - in all seriousness, I'd suggest sitting down with a memo pad and actually writing down what machines you have, what OS they have and wIhat you want them to *do* At that point, configure machines individually so that they're running the latest practicable software. If that means doing them one by one - do that. Make a list of what functions you need and configure them one by one. Build up something stable rather than constantly hacking and forgetting the precise details of what you've done. If needs be, then give each machine a memorable name and assign each machine a page to note down _precisely_ what changes you make. Take backups of each file you change before you change it and save them according to a naming scheme - I've seen someone name a copy of the original files as x.y.gold where .gold is a suffix that no normal files have. As you make individual modifications, save them as x.y.gold.1, gold.2 and so on. That way, you know how many steps you've taken, how many changes you've made and you can always go back. Once the file is correct, you can delete previous copies apart from the original .gold Just a quick suggestion which you can take or leave as you will .. Andy
[toc] | [prev] | [next] | [standalone]
| From | gene heskett <gheskett@shentel.net> |
|---|---|
| Date | 2023-11-30 01:10 +0100 |
| Message-ID | <HFCMV-9NqJ-1@gated-at.bofh.it> |
| In reply to | #263954 |
On 11/29/23 14:58, Andrew M.A. Cater wrote: > On Wed, Nov 29, 2023 at 02:19:51PM -0500, Greg Wooledge wrote: >> On Wed, Nov 29, 2023 at 01:52:46PM -0500, gene heskett wrote: >>> On 11/29/23 13:20, John Hasler wrote: >>>> Install chrony. But first fix that address. >>> >>> How, John? QIDI is afraid of enabling full net access because it >>> might overwrite some of their special stuff. Right now its >>> running armbian buster, which is out of support. And surprise, >>> kiauh.sh is installed, likely how they set the printer up in the >>> first place. Its just a bash script but its magic! >> >> There are so many things in this paragraph that I don't >> understand. What is "QIDI"? Why would enabling full net access >> "overwrite stuff"? What "stuff"? What is "kiauh.sh" and how is it >> relevant to this question? >> > > QIDI == manufacturer of 3d printers > > kiauh.sh == helper script to install Klipper > > Klipper == firmware and environment to drive a 3d printer - large > numbers of installed dependencies as I understand it > >> Either configure a static IP address for this host, or set up a >> DHCP server which will assign it the desired IP address. Those are >> your two choices. >> > > Just configure your armbian to expect a static address - oh, and try > really hard *not* to use something as old as buster, maybe? There are > reasons that Debian bothers to put out newer releases :) > >> If you want it to be on an isolated network, then put it on an >> isolated network. If it needs an NTP server, make sure you put one >> of those on the isolated network as well. >> >> It sounds like you don't want a *physically* isolated network, but >> rather, some kind of numeric subnet whose packets won't be routed >> to the public Internet. That should be feasible. Here's an >> example setup: >> >> Machine R: Router. Configured to talk to the public Internet, and >> to the local 192.168.1.x subnet. IP forwarding is enabled (from >> 192.168.1). Does not know about the 192.168.2.x subnet, and will >> not forward packets from that subnet. >> >> Machine T: Time server. Has two IP addresses -- one on 192.168.1.x >> and one on 192.168.2.x. Default gateway set to R. Runs NTP, >> configured to permit client connections from both subnets, and to >> retrieve time from the public Internet. >> >> Machine P: Printer. Has an IP address on the 192.168.2.x subnet >> only. Runs NTP, configured to retrieve time from T. >> >> Other hosts: If they need to talk to the public Internet, then they >> have an address on 192.168.1.x, and default gateway set to R. If >> they need to talk to P, they have an address on 192.168.2.x. Some >> will have both. If they run NTP, configure it to retrieve time from >> T. >> >> Of course, there are other ways to achieve isolation. You could >> also use a single subnet, but set up a fancy firewall in the >> router, which blocks the forwarding of all packets from P. Or >> which doesn't forward by default, but is specifically configured to >> forward packets from T and other identified hosts. You have lots >> of choices here. >> > > Gene - in all seriousness, I'd suggest sitting down with a memo pad > and actually writing down what machines you have, what OS they have > and wIhat you want them to *do* > > At that point, configure machines individually so that they're > running the latest practicable software. If that means doing them one > by one - do that. > > Make a list of what functions you need and configure them one by > one. > > Build up something stable rather than constantly hacking and > forgetting the precise details of what you've done. > > If needs be, then give each machine a memorable name and assign each > machine a page to note down _precisely_ what changes you make. Take > backups of each file you change before you change it and save them > according to a naming scheme - I've seen someone name a copy of the > original files as x.y.gold where .gold is a suffix that no normal > files have. > > As you make individual modifications, save them as x.y.gold.1, gold.2 > and so on. > > That way, you know how many steps you've taken, how many changes > you've made and you can always go back. Once the file is correct, you > can delete previous copies apart from the original .gold > > Just a quick suggestion which you can take or leave as you will .. > > Andy > All good advice Andy, but I've been swimming in the bleeding edge stuff since I turned 16 and could quit school legally, which as you well know is often a disorganized mess since about 1948 when I quit school and went to work fixing them newfangled things called tv's. Me, get organized? At 89 yo, its not likely to happen now. Thanks Andy, take care and stay well. Cheers, Gene Heskett. -- "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author, 1940) If we desire respect for the law, we must first make the law respectable. - Louis D. Brandeis
[toc] | [prev] | [next] | [standalone]
| From | gene heskett <gheskett@shentel.net> |
|---|---|
| Date | 2023-11-30 01:00 +0100 |
| Message-ID | <HFCDg-9N6d-3@gated-at.bofh.it> |
| In reply to | #263953 |
On 11/29/23 14:20, Greg Wooledge wrote: > On Wed, Nov 29, 2023 at 01:52:46PM -0500, gene heskett wrote: >> On 11/29/23 13:20, John Hasler wrote: >>> Install chrony. But first fix that address. >> >> How, John? QIDI is afraid of enabling full net access because it might >> overwrite some of their special stuff. Right now its running armbian buster, >> which is out of support. And surprise, kiauh.sh is installed, likely how >> they set the printer up in the first place. Its just a bash script but its >> magic! QIDI is the name of the Chinese outfit that makes mid-range printers in the thousand dollar category. Come with all the stuff you normally spend another $800 making a $150 printer work a little better, so its not that bad a deal when you tally up all the stuff a $150 printer is missing. Plus its 3 or 4 times faster than the $150 printer. The X-MAX 3 is the top of their line of printers. > There are so many things in this paragraph that I don't understand. > What is "QIDI"? Why would enabling full net access "overwrite stuff"? > What "stuff"? What is "kiauh.sh" and how is it relevant to this > question? They claim they custmized it to drive their printer better, but I'll reserve judgement on that. kiauh.sh (Klipper Installer And Update Helper) is a shell script that keeps a klipper and friends install up to date AND also keeps the OS up to date too, run it 2 or 3 times a week, and you always got the latest stuff as klipper, somewhat like marlin but faster is under fairly rapid development. And its doing things months ahead of marlin. > Either configure a static IP address for this host Which is what I want to do but I've been told that /etc/network/interfaces is not the "today way" to do it. OTOH its buster and I think that works in buster. However, my only access to work on this is ssh -X root@address, so I have to be sure I don't brick it. or set up a DHCP > server which will assign it the desired IP address. Those are your > two choices. Then its something else I'll have to maintain as my network grows, its far easier to edit a hosts file. I had set a 30 character passwd from a random generator based on the number of centuries it would take a hacker to get thru it. Nobody has, including me... > If you want it to be on an isolated network, then put it on an isolated > network. If it needs an NTP server, make sure you put one of those > on the isolated network as well. isolation is not really on my todo list. Every other machine on my local net has a desktop and a browser, fully capable of downloading the newest yak milk recipe from a satellite fed, solar powered yurt 35 klicks north of Ulan Bator. Firefox is an IRQ pig, playing hell with the machines latency, so I don't cut steel and run firefox a the same time. > It sounds like you don't want a *physically* isolated network, but rather, > some kind of numeric subnet whose packets won't be routed to the public > Internet. That should be feasible. Here's an example setup: > > Machine R: Router. Configured to talk to the public Internet, and to > the local 192.168.1.x subnet. IP forwarding is enabled (from 192.168.1). > Does not know about the 192.168.2.x subnet, and will not forward packets > from that subnet. > > Machine T: Time server. Has two IP addresses -- one on 192.168.1.x and > one on 192.168.2.x. Default gateway set to R. Runs NTP, configured to > permit client connections from both subnets, and to retrieve time from > the public Internet. Sounds like something I could do with a bananapi-m5, And it would reduce my footprint at debians time servers by aabout 8 machines banging on them now. But that project is 4 or 5 lines from the top of the list. At present I'd like to blow away the systemd and install chrony, configuring that to take over one machine at a time. Can someone lead me to do that? The original protocol could push at intervals and ISTR I had it working on my amiga 2000 and on my color computer 3 running nitros9, circa 1999-2001. Fun times. > Machine P: Printer. Has an IP address on the 192.168.2.x subnet only. > Runs NTP, configured to retrieve time from T. > > Other hosts: If they need to talk to the public Internet, then they have > an address on 192.168.1.x, and default gateway set to R. If they need > to talk to P, they have an address on 192.168.2.x. Some will have both. > If they run NTP, configure it to retrieve time from T. > > Of course, there are other ways to achieve isolation. You could also > use a single subnet, but set up a fancy firewall in the router, which > blocks the forwarding of all packets from P. Or which doesn't forward > by default, but is specifically configured to forward packets from T > and other identified hosts. You have lots of choices here. > Thanks Greg, take care & sty well. Cheers, Gene Heskett. -- "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author, 1940) If we desire respect for the law, we must first make the law respectable. - Louis D. Brandeis
[toc] | [prev] | [next] | [standalone]
Page 1 of 5 [1] 2 3 4 5 Next page →
Back to top | Article view | linux.debian.user
csiph-web