<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Capi's Corner &#187; linux</title>
	<atom:link href="http://www.dont-panic.cc/capi/tag/linux/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.dont-panic.cc/capi</link>
	<description>Development, Network, Security, Ideas &#038; Opinions</description>
	<lastBuildDate>Sat, 10 Dec 2011 19:31:21 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Fix two Ubuntu 10.04 window manager annoyances</title>
		<link>http://www.dont-panic.cc/capi/2011/01/27/fix-two-ubuntu-10-04-window-manager-annoyances/</link>
		<comments>http://www.dont-panic.cc/capi/2011/01/27/fix-two-ubuntu-10-04-window-manager-annoyances/#comments</comments>
		<pubDate>Thu, 27 Jan 2011 07:00:25 +0000</pubDate>
		<dc:creator>Martin Carpella</dc:creator>
				<category><![CDATA[computer]]></category>
		<category><![CDATA[software]]></category>
		<category><![CDATA[compiz]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[ubuntu]]></category>
		<category><![CDATA[usability]]></category>

		<guid isPermaLink="false">http://www.dont-panic.cc/capi/?p=289</guid>
		<description><![CDATA[When upgrading to Ubuntu 10.04 I noticed two annoyances (which actually are just a matter of personal taste): The OSX-like positioning of the close, minimize and maximize buttons on the left instead of the right of the window. The fade-out (invisibility) of other windows when using Alt-Tab for tabbing through the available windows on the [...]]]></description>
			<content:encoded><![CDATA[<p>When upgrading to Ubuntu 10.04 I noticed two annoyances (which actually are just a matter of personal taste):</p>
<ul>
<li>The OSX-like positioning of the close, minimize and maximize buttons on the left instead of the right of the window.</li>
<li>The fade-out (invisibility) of other windows when using Alt-Tab for tabbing through the available windows on the current desktop.</li>
</ul>
<p>As I tend to forget and need to Google every time I encounter a newly setup 10.04 system, I now jot down the settings to change.</p>
<p>For changing the window buttons:</p>
<ol>
<li>Start <code>gconf-editor</code>.</li>
<li>Find <code>/apps/metacity/general/button_layout.</code></li>
<li>Change its value to <code>menu:minimize,maximize,close</code>.</li>
</ol>
<p>For changing the opacity of inactive windows during Alt+Tab window switching:</p>
<ol>
<li>Start <code>gconf-editor</code>.</li>
<li>Find <code>/apps/compiz/plugins/staticswitcher/screen0/options/opacity</code>.</li>
<li>Change it to any value you like, where 100 is fully visible and 0 is totally invisible.</li>
</ol>
]]></content:encoded>
			<wfw:commentRss>http://www.dont-panic.cc/capi/2011/01/27/fix-two-ubuntu-10-04-window-manager-annoyances/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>OCZ Vertex2, Linux, and ancient nForce 430 chipset</title>
		<link>http://www.dont-panic.cc/capi/2010/12/01/ocz-vertex2-linux-and-ancient-nforce-430-chipset/</link>
		<comments>http://www.dont-panic.cc/capi/2010/12/01/ocz-vertex2-linux-and-ancient-nforce-430-chipset/#comments</comments>
		<pubDate>Wed, 01 Dec 2010 21:58:16 +0000</pubDate>
		<dc:creator>Martin Carpella</dc:creator>
				<category><![CDATA[computer]]></category>
		<category><![CDATA[hardware]]></category>
		<category><![CDATA[sysadmin]]></category>
		<category><![CDATA[howto]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[ssd]]></category>
		<category><![CDATA[troubleshooting]]></category>

		<guid isPermaLink="false">http://www.dont-panic.cc/capi/?p=274</guid>
		<description><![CDATA[Today I finally received my brand-new Ocz Vertex2 OCZSSD2-2VTXE120G 120GB and eagerly wanted to install it in my 4-year-old HP workstation which currently is running Ubuntu 10.10 exclusively. After setting up the alignment according to some tutorials I found online, I started the setup process. Shortly after starting the copy step of the installation, the [...]]]></description>
			<content:encoded><![CDATA[<p>Today I finally received my brand-new Ocz Vertex2 OCZSSD2-2VTXE120G 120GB and eagerly wanted to install it in my 4-year-old HP workstation which currently is running <a href="http://www.ubuntu.com/">Ubuntu</a> 10.10 exclusively.</p>
<p>After setting up the alignment according to some <a href="http://www.ocztechnologyforum.com/forum/showthread.php?54379-Linux-Tips-tweaks-and-alignment">tutorials</a> I found online, I started the setup process. Shortly after starting the copy step of the installation, the whole process came to a grinding halt with filesystem errors. Looking into the kernel debug messages it seemed like <a href="http://en.wikipedia.org/wiki/Serial_ATA">SATA</a> commands were causing errors. After checking hardware, cables and switching SATA ports, I began researching the issue and soon found that the issue might be fixed in the next firmware version of the drive. So I wanted to upgrade from 1.23 to 1.24, which could only be done in Windows&#8230;</p>
<p>After installing a trial of Windows 7, I finally wanted to upgrade the firmware, but the drive was not detected, but was accessible. The release notes indicated that I would need to switch to <a href="http://en.wikipedia.org/wiki/Advanced_Host_Controller_Interface">AHCI</a> mode. After several attempts, includig a BIOS update, I realized that there was no way to do this with my old hardware, as my <a href="http://en.wikipedia.org/wiki/NForce">nForce</a> 430 chipset simply doesn&#8217;t support it.</p>
<p>So my only remaining option was to simply try the kernel arguments I read to be the fix for 1.24 with the 1.23 hardware.</p>
<p>So, if you add the following kernel option during installation and afterwards for every boot, the disk seems to work quite well (<a href="http://www.ocztechnologyforum.com/forum/showthread.php?72572-Vertex-LE-breakdown-in-Linux&amp;p=579861&amp;viewfull=1#post579861">source</a>):</p>
<blockquote><p><code>libata.force=norst</code></p></blockquote>
<p>Actually, this forces the ATA driver in Linux to <em>not</em> issue any reset commands on the bus. I really don&#8217;t understand why this improves/fixes the problem, but it seems the device has issues when being reset on my chipset. I can also notice this that in 2 out of 3 attempts if I reboot the PC the disk is not recognized any more before I reboot again.</p>
<p>Despite these issues, the SSD now runs with astonishing performance with the suggested 32 head / 32 sector alignment, and a 512kB partition alignment scheme. After an initial <a href="http://en.wikipedia.org/wiki/TRIM">TRIM</a> with <a href="http://sourceforge.net/projects/hdparm/">hdparm</a>&#8216;s <code>wiper.sh</code> I enabled <code>-o discard</code> for my ext4 partition and could also verify using hdparm that this results in the sectors being trimmed. Please note, that you need to manually compile and install the latest hdparm version on Ubuntu 10.10, as the included version fails with the very long free block list and doesn&#8217;t handle splitting the sectors in multiple requests. The latest version doesn&#8217;t have this issue any more.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.dont-panic.cc/capi/2010/12/01/ocz-vertex2-linux-and-ancient-nforce-430-chipset/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Nice to know &#8211; Volume 2</title>
		<link>http://www.dont-panic.cc/capi/2008/05/30/nice-to-know-volume-2/</link>
		<comments>http://www.dont-panic.cc/capi/2008/05/30/nice-to-know-volume-2/#comments</comments>
		<pubDate>Fri, 30 May 2008 13:58:45 +0000</pubDate>
		<dc:creator>Martin Carpella</dc:creator>
				<category><![CDATA[computer]]></category>
		<category><![CDATA[software]]></category>
		<category><![CDATA[sysadmin]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[ubuntu]]></category>
		<category><![CDATA[udev]]></category>
		<category><![CDATA[vmware]]></category>
		<category><![CDATA[vs2005]]></category>
		<category><![CDATA[win2k3]]></category>
		<category><![CDATA[windows]]></category>

		<guid isPermaLink="false">http://www.dont-panic.cc/capi/?p=115</guid>
		<description><![CDATA[udev renames you network interfaces Sometimes udev renames your devices. This happened to me when upgrading a server, eth0 suddenly became eth1 and vice-versa. Of course, this broke nearly all firewall scripts on the server&#8230; There is a nice explanation how to get udev to name your devices the way you want. Visual Studio 2005 [...]]]></description>
			<content:encoded><![CDATA[<p><strong>udev renames you network interfaces</strong></p>
<blockquote><p>Sometimes udev renames your devices. This happened to me when upgrading a server, eth0 suddenly became eth1 and vice-versa. Of course, this broke nearly all firewall scripts on the server&#8230; There is a nice explanation <a href="http://www.debianadmin.com/rename-network-interface-using-udev-in-linux.html">how to get udev to name your devices the way you want</a>.</p></blockquote>
<p><strong>Visual Studio 2005 Service Pack 1 on Microsoft Windows Server 2003</strong></p>
<blockquote><p>When installing Visual Studio Service Pack 1 under Windows Server 2003, it might fail because it cannot verify the signature. You should take time and visit the <a href="http://go.microsoft.com/fwlink/?LinkId=73863">link</a> provided in the error message, because it will take you to a hotfix that will correct the problem.</p>
<p>(via <a href="http://www.carrollzone.com/Blog/post/2007/06/Problems-installing-Visual-Studio-2005-SP1-on-Windows-Server-2003.aspx">Mark Caroll&#8217;s Blog</a>)</p></blockquote>
<p><strong>VMWare Server on Ubuntu 8.04</strong></p>
<blockquote><p>A <a href="http://www.bauer-power.net/2008/04/installing-vmware-server-on-ubuntu-804.html">nice tutorial</a> for getting free <a href="http://www.vmware.com/products/server/">VMWare Server</a> 1.0.5 running on Ubuntu 8.04.</p></blockquote>
]]></content:encoded>
			<wfw:commentRss>http://www.dont-panic.cc/capi/2008/05/30/nice-to-know-volume-2/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Nice to know &#8211; Volume 1</title>
		<link>http://www.dont-panic.cc/capi/2008/05/07/nice-to-know-volume-1/</link>
		<comments>http://www.dont-panic.cc/capi/2008/05/07/nice-to-know-volume-1/#comments</comments>
		<pubDate>Wed, 07 May 2008 05:00:46 +0000</pubDate>
		<dc:creator>Martin Carpella</dc:creator>
				<category><![CDATA[computer]]></category>
		<category><![CDATA[software]]></category>
		<category><![CDATA[sysadmin]]></category>
		<category><![CDATA[administration]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[nice-to-know]]></category>
		<category><![CDATA[vmware]]></category>

		<guid isPermaLink="false">http://www.dont-panic.cc/capi/?p=114</guid>
		<description><![CDATA[As I definitely should post more on my blog, I now try to start a new series: &#8220;Nice to know&#8221;. It will be a collection of interesting things I consider memorable but which don&#8217;t deserve their own blog-post. Trickle Tricke allows you to limit bandwith for processes that do not support bandwith limitation out-of-the-box. It [...]]]></description>
			<content:encoded><![CDATA[<p>As I definitely should post more on my blog, I now try to start a new series: &#8220;Nice to know&#8221;. It will be a collection of interesting things I consider memorable but which don&#8217;t deserve their own blog-post.</p>
<p><strong>Trickle</strong></p>
<blockquote><p><a href="http://monkey.org/~marius/pages/?page=trickle">Tricke</a> allows you to limit bandwith for processes that do not support bandwith limitation out-of-the-box. It works by preloading and simulating the socket API. You use it as a wrapper when starting the process, like <em>trickle -d 80 someapp</em>.</p>
<p>You can use it to limit rsync speed for instance (thanks to <a href="http://www.yak.net/fqa/404.html">http://www.yak.net/fqa/404.html</a>): <em>rsync -auvPe &#8220;trickle -d 80 ssh&#8221; user@host:/src/ /dst/</em></p></blockquote>
<p><strong>VMWare Tools and Kernel 2.6.24</strong></p>
<blockquote><p>VMWare Tools out of the box do not install on kernel 2.6.24 (as used in Ubuntu 8.04 for instance). A <a href="http://x86virtualization.com/open-source/howto-install-open-vmware-tools-in-linux-kernel-2624.html">possible solution</a> is described <a href="http://x86virtualization.com/open-source/howto-install-open-vmware-tools-in-linux-kernel-2624.html">here</a>. It is based on using the open-source version of the VMWare tools (<a href="http://open-vm-tools.sourceforge.net/">open-vm-tools</a>).</p></blockquote>
]]></content:encoded>
			<wfw:commentRss>http://www.dont-panic.cc/capi/2008/05/07/nice-to-know-volume-1/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>TrueCrypt 5 is out!</title>
		<link>http://www.dont-panic.cc/capi/2008/02/07/truecrypt-5-is-out/</link>
		<comments>http://www.dont-panic.cc/capi/2008/02/07/truecrypt-5-is-out/#comments</comments>
		<pubDate>Thu, 07 Feb 2008 11:34:25 +0000</pubDate>
		<dc:creator>Martin Carpella</dc:creator>
				<category><![CDATA[computer]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[software]]></category>
		<category><![CDATA[encryption]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[osx]]></category>
		<category><![CDATA[truecrypt]]></category>
		<category><![CDATA[windows]]></category>

		<guid isPermaLink="false">http://www.dont-panic.cc/capi/2008/02/07/truecrypt-5-is-out/</guid>
		<description><![CDATA[After quite some time, a new version of my favorite encryption tool is out: TrueCrypt developers have released version 5 of their product, introducing a new killer feature (among others): System Volume Encryption with pre-boot authentification (only Windows 2000/XP/Vista). This means, that TrueCrypt will encrypt everything on your system drive, including page- and hibernation file, [...]]]></description>
			<content:encoded><![CDATA[<p><img src="http://www.dont-panic.cc/capi/wp-content/uploads/2008/02/truecrypt-logo.jpg" alt="Image" align="left" height="48" width="225" />After quite some time, a new version of my favorite encryption tool is out: <strong><a href="http://www.truecrypt.org/">TrueCrypt</a></strong> developers have released version 5 of their product, introducing a new killer feature (among others): <em><strong>System Volume Encryption</strong></em> with pre-boot authentification (only Windows 2000/XP/Vista). This means, that TrueCrypt will encrypt everything on your system drive, including page- and hibernation file,<strike> finally making hibernation a safe and easy possibility</strike>.</p>
<p>I am going to look into this next week, as I need my notebook on Saturday (just in case anything goes wrong).</p>
<p><strong>Update 2007-02-08:</strong> As my first commenter below points out, it seems hibernation is disabled by TrueCrypt while having your system partition encrypted. I don&#8217;t really understand why at the moment, but I will investigate further. For me this is a primary show-stopper, as this was the long-awaited functionality I was waiting for.</p>
<p><strong>Nitpickers Corner</strong>¹: Of course I am aware why encryption and hibernation in general are no-goes together, but I don&#8217;t understand why this is an issue when full-system encryption is enabled.</p>
<p><strong>Update 2007-02-08 (again):</strong> Ok, in this <a href="http://forums.truecrypt.org/viewtopic.php?t=8653">TrueCrypt forum thread</a> they explain why they cannot support it at the moment: Windows treats the hibernation file differently, it seems to bypass the TrueCrypt driver and therefore would still write keys to disk without encryption. Ok, still get to wait for my dream feature then, but I still refuse to buy PGP <img src='http://www.dont-panic.cc/capi/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  Thanks to the developers for their great work anyhow!</p>
<p style="font-size: 7pt">¹  a tribute to <a href="http://blogs.msdn.com/oldnewthing/">Raymond Chen</a> <img src='http://www.dont-panic.cc/capi/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </p>
<p>[tags]security, encryption, truecrypt, windows, linux, osx[/tags]</p>
]]></content:encoded>
			<wfw:commentRss>http://www.dont-panic.cc/capi/2008/02/07/truecrypt-5-is-out/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Waiting for WLAN and UMTS for OpenMoko</title>
		<link>http://www.dont-panic.cc/capi/2007/07/18/waiting-for-wlan-and-umts-for-openmoko/</link>
		<comments>http://www.dont-panic.cc/capi/2007/07/18/waiting-for-wlan-and-umts-for-openmoko/#comments</comments>
		<pubDate>Wed, 18 Jul 2007 17:00:37 +0000</pubDate>
		<dc:creator>Martin Carpella</dc:creator>
				<category><![CDATA[development]]></category>
		<category><![CDATA[hardware]]></category>
		<category><![CDATA[software]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[mobile]]></category>
		<category><![CDATA[openmoko]]></category>

		<guid isPermaLink="false">http://www.dont-panic.cc/capi/2007/07/18/waiting-for-wlan-and-umts-for-openmoko/</guid>
		<description><![CDATA[I am currently thinking a lot about the OpenMoko project. Unfortunately OpenMoko at the moment provides hardware which is limited to GPRS, Bluetooth, and/or USB 1.0 for connectivity. In autumn there should be the next generation which should include a WLAN (and maybe even UMTS?) support. It will be called Neo 1973 &#8211; GTA02. Together [...]]]></description>
			<content:encoded><![CDATA[<p>I am currently thinking a lot about the <a href="http://www.openmoko.org/">OpenMoko</a> project. Unfortunately OpenMoko at the moment provides hardware which is limited to <a href="http://en.wikipedia.org/wiki/GPRS">GPRS</a>, <a href="http://en.wikipedia.org/wiki/Bluetooth">Bluetooth</a>, and/or <a href="http://en.wikipedia.org/wiki/USB">USB</a> 1.0 for connectivity. In autumn there <a href="http://lists.openmoko.org/pipermail/announce/2007-June/000013.html">should be</a> the next generation which should include a WLAN (and maybe even UMTS?) support. It will be called Neo 1973 &#8211; GTA02.</p>
<p>Together with Austrian-based one &#8220;H.U.I. Starter&#8221; rate (250MB @ UMTS, reduction to 56kBit/s above, 10€/month) this would be a nice package. However, if I could have UMTS, well, that would be better. Personally, WLAN is even more important for me, I could use it in the office or in my home, where I have WLAN access available and fall back to GPRS while being &#8220;on the road&#8221;.</p>
<p>For me this means: standby for autumn, because I can&#8217;t afford to invest US-$300 now and another US-$450 in a couple of month. Still, I am really, really interested in OpenMoko (and normally I wouldn&#8217;t invest that amount of money into a hobby of mine). Which means, I am standing by and waiting for news from the OpenMoko community&#8230;</p>
<p>In the meantime, if you understand German, you could listen to this very interesting <a href="http://chaosradio.ccc.de/cre042.html">Chaosradio Express Podcast</a>.</p>
<p>On YouTube there are some very interesting <a href="http://youtube.com/results?search_query=neo1973&amp;search=">videos about the Neo 1973</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.dont-panic.cc/capi/2007/07/18/waiting-for-wlan-and-umts-for-openmoko/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>OpenMoko &#8211; the Open Mobile Phone</title>
		<link>http://www.dont-panic.cc/capi/2007/07/09/openmoko-the-open-mobile-phone/</link>
		<comments>http://www.dont-panic.cc/capi/2007/07/09/openmoko-the-open-mobile-phone/#comments</comments>
		<pubDate>Mon, 09 Jul 2007 18:30:39 +0000</pubDate>
		<dc:creator>Martin Carpella</dc:creator>
				<category><![CDATA[computer]]></category>
		<category><![CDATA[hardware]]></category>
		<category><![CDATA[software]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[openmoko]]></category>

		<guid isPermaLink="false">http://www.dont-panic.cc/capi/2007/07/09/openmonko-the-open-mobile-phone/</guid>
		<description><![CDATA[This is cool! If you want to have a mobile phone based on Linux and pure OpenSource software, OpenMoko might be the right thing for you! I&#8217;m not so much in mobile development, but I find this almost more appealing than the iPhone, which at the moment is a very closed platform. If I find [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.openmoko.com/">This</a> is cool! If you want to have a mobile phone based on Linux and pure OpenSource software, <a href="http://www.openmoko.org/">OpenMoko</a> might be the right thing for you! I&#8217;m not so much in mobile development, but I find this almost more appealing than the <a href="http://de.wikipedia.org/wiki/Apple_iPhone">iPhone</a>, which at the moment is a very closed platform. If I find some time for a hobby like this, this US-$ 300 would be a nice investment. I hope this becomes a success to reward the company and the idea to explictly invite hackers/developers (both software &amp; hardware) to improve a phone. A nice contrast to the usual anti-reverse-engineering and &#8220;hacking&#8221; philosophy most companies go along with.</p>
<p><strong>Edit 2007-07-18</strong>: I accidentially misspelled OpenMoko as OpenMonko in the inital release, both in the title and in the text. I corrected this and the URL of the article to reflect the real name of the project: <em>OpenMoko</em>.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.dont-panic.cc/capi/2007/07/09/openmoko-the-open-mobile-phone/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Ubuntu 7.04 cryptsetup problem</title>
		<link>http://www.dont-panic.cc/capi/2007/06/26/ubuntu-704-cryptsetup-problem/</link>
		<comments>http://www.dont-panic.cc/capi/2007/06/26/ubuntu-704-cryptsetup-problem/#comments</comments>
		<pubDate>Tue, 26 Jun 2007 19:57:09 +0000</pubDate>
		<dc:creator>Martin Carpella</dc:creator>
				<category><![CDATA[sysadmin]]></category>
		<category><![CDATA[bug]]></category>
		<category><![CDATA[cryptsetup]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[ubuntu]]></category>

		<guid isPermaLink="false">http://www.dont-panic.cc/capi/2007/06/26/ubuntu-704-cryptsetup-problem/</guid>
		<description><![CDATA[I am using cryptsetup LUKS for storing encrypted office data on my USB memory stick (just in case I lose it). I recently installed Ubuntu 7.04 on one of my machines and wanted to open the encrypted partition using cryptsetup luksOpen, which failed with a rather strange Unable to make device node for &#8216;temporary-cryptsetup-32733&#8242; While [...]]]></description>
			<content:encoded><![CDATA[<p>I am using <a href="http://luks.endorphin.org/dm-crypt">cryptsetup LUKS</a> for storing encrypted office data on my USB memory stick (just in case I lose it). I recently installed <a href="http://www.ubuntu.com/">Ubuntu</a> 7.04 on one of my machines and wanted to open the encrypted partition using cryptsetup luksOpen, which failed with a rather strange</p>
<blockquote style="text-align: left"><p>Unable to make device node for &#8216;temporary-cryptsetup-32733&#8242;</p></blockquote>
<p>While searching around the net I found a lot of people asking the same question but hardly any answer, until I finally read <a href="http://ubuntuforums.org/showthread.php?t=420182">this article</a><br />
on the Ubuntu forum.</p>
<p>The solution to the whole problem is rather simple:</p>
<blockquote align="left"><p>sudo mkdir /dev/.static/dev/mapper</p></blockquote>
<p>With a little bit more verbose error message of cryptsetup I <em>might</em> have figured this out myself&#8230;</p>
]]></content:encoded>
			<wfw:commentRss>http://www.dont-panic.cc/capi/2007/06/26/ubuntu-704-cryptsetup-problem/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Out of /dev/random?</title>
		<link>http://www.dont-panic.cc/capi/2006/01/18/out-of-devrandom/</link>
		<comments>http://www.dont-panic.cc/capi/2006/01/18/out-of-devrandom/#comments</comments>
		<pubDate>Wed, 18 Jan 2006 07:01:17 +0000</pubDate>
		<dc:creator>Martin Carpella</dc:creator>
				<category><![CDATA[sysadmin]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[random]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.dont-panic.cc/capi/archives/29</guid>
		<description><![CDATA[Ever happened to run out of random numbers? Well, if you are using Apache together with mod_ssl you can easily run into the situation that after starting up Apache, requests to it will block up to several minutes or time out. This happenes, if Apache is configured to use /dev/random as a source for random [...]]]></description>
			<content:encoded><![CDATA[<p>Ever happened to run out of random numbers?</p>
<p>Well, if you are using Apache together with mod_ssl you can easily run into the situation that after starting up Apache, requests to it will block up to several minutes or time out. This happenes, if Apache is configured to use /dev/random as a source for random numbers which are required in the initialisation of mod_ssl and similar, if you have to few entropy information left for the generation of more secure random numbers.<br />
As suggested in a <a href="http://forums.gentoo.org/viewtopic-t-384660-highlight-rngd.html">Gentoo Forums article</a>, you can emerge the tool <strong>sys-apps/rng-tools</strong>, which provides you with <strong>rngd</strong>, a daemon collecting entropy from hardware random number generators and feeds /dev/random with this data.</p>
<p>If you happen (like me) to not having a hardware random number generator on your server&#8217;s mainbord, rngd will use /dev/urandom as a source of entropy and mix it with entropy collected from your system. While this will indeed result in a certain drop of &#8220;randomness&#8221; of /dev/random, it still has major advantages by reducing the startup time of apache to several seconds, as /dev/random will not block any more.</p>
<p>Don&#8217;t forget to add rngd to your server&#8217;s default runlevel (rc-update add rngd default).</p>
]]></content:encoded>
			<wfw:commentRss>http://www.dont-panic.cc/capi/2006/01/18/out-of-devrandom/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

