[lfs-support] Announcing Basic BLFS (beta)

[Bruce Dubbs]

The LFS team would like to announce a new book, Basic Packages for Linux
From Scratch

This book is under development and is designed for new BLFS users and is
an excerpt of the full BLFS book. It provides guidance for getting
started with BLFS and suggests command line tools suitable for all types
of systems. This short book provides merged instructions for users of
both the System V and systemd versions of LFS.

The book is available on-line only at

http://www.linuxfromscratch.org/blfs/view/basic/

As always, feedback is appreciated.

Please direct any comments about this beta release to the LFS
development team at lfs-***@linuxfromscratch.org or
blfs-***@linuxfromscratch.org. Registration for the mailing lists is
required to avoid junk email.

-- Bruce Dubbs
linuxfromscratch.org
--
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://en.wikipedia.org

[Hazel Russman]

On Mon, 24 Sep 2018 13:57:36 -0500

Post by Bruce Dubbs
The LFS team would like to announce a new book, Basic Packages for
Linux From Scratch
As always, feedback is appreciated.
Please direct any comments about this beta release to the LFS
required to avoid junk email.
-- Bruce Dubbs
linuxfromscratch.org

I just tried to register for one of the dev lists and Firefox played up
because the link isn't secure. So I tried again with https:// and
couldn't get a connection. What do I need to do?
--
If any members of GCHQ are reading this, shame on you! I fought for
your right to belong to a trade union and now you are taking away my
right to privacy?

Hazel Russman
--
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://en.wikipedia.org/wiki/Posting_style

[Ken Moffat]

Post by Hazel Russman
I just tried to register for one of the dev lists and Firefox played up
because the link isn't secure. So I tried again with https:// and
couldn't get a connection. What do I need to do?

Hi Hazel,

I've only just got firefox installed on my latest build (and it
seems to have been my worst build in ages, for various reasons), so
I wan't able to look at this until now.

I'm using a firefox-63 beta version (usually, when things differ the
beta version decides that certificate chains are broken - but all
seems good at the moment).

Obviously I'm already subscribed to both -dev lists, but I went to
'lists.linuxfromscratch.org' (no protocol specified), found a list
which I ought to have subscribed to, and sent the request. Got the
response, pasted the URL into firefox. No problem with certs.

So, first question: which version of firefox ?

Second question: can you https:// to google ?

One of the early problems in my current build was that I'd overlooked
the need for p11-kit when I install ca-certs before the first boot.
I'd thought about my later reinstall of certs after nss, but
overlooked that I install them earlier - got as far as trying to
install Sphinx (I keep hoping to retry the kernel docs) and failing
when it went to talk to PyPi for something. Tried to google from
links, http worked but https failed.

The certs had apparently ended ok, but in fact did nothing because
/usr/bin/trust was not present. With Python2 moved ahead of the
certs, followed by six, libtasn1, p11-kit I think my future builds
will be ok for that.

I should mention that on my 8.3 build on this machine I lost access
to sourceforge and related sites for similar certificate errors
after one firefox update, although other machines were fine.
Updating firefox to 62.0.2 (and reinstalling the certs as part of my
update) solved that. But overall, like the builds of rust and
firefox, cert handling in firefox seems to go out to lunch from time to time.

Good luck!

ĸen
--
Tout est bien, tout va bien, tout va pour le mieux qu'il soit possible
-- Candide, de Voltaire
(Everything is for the best, in the best of all possible worlds)
--
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://en.wikipedia.org/w

[Hazel Russman]

On Tue, 25 Sep 2018 22:25:33 +0100

Post by Ken Moffat

Post by Hazel Russman
I just tried to register for one of the dev lists and Firefox played up
because the link isn't secure. So I tried again with https:// and
couldn't get a connection. What do I need to do?

Hi Hazel,
I've only just got firefox installed on my latest build (and it
seems to have been my worst build in ages, for various reasons), so
I wan't able to look at this until now.
I'm using a firefox-63 beta version (usually, when things differ the
beta version decides that certificate chains are broken - but all
seems good at the moment).
So, first question: which version of firefox ?

It's Firefox 62 Quantum working out of Crux. I don't build FF in LFS any more. Too many dependencies! I use Pale Moon instead.

Post by Ken Moffat
Second question: can you https:// to google ?

Yes. And to Linux Questions. It's only the LFS site that's causing problems. The message I get when I try to use https on that site is:
[quote]
An error occurred during a connection to www.linuxfromscratch.org. SSL received a record that exceeded the maximum permissible length. Error code: SSL_ERROR_RX_RECORD_TOO_LONG

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.
[/quote]

Post by Ken Moffat
One of the early problems in my current build was that I'd
overlookedAn error occurred during a connection to
www.linuxfromscratch.org. SSL received a record that exceeded the
SSL_ERROR_RX_RECORD_TOO_LONG

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.

Post by Ken Moffat
the need for p11-kit when I install ca-certs before the first boot.
....
The certs had apparently ended ok, but in fact did nothing because
/usr/bin/trust was not present.

It is present in Crux and in my LFS build too.
--
Hazel Russman
--
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://en.wikipedia.org/wiki/

[Xi Ruoyao]

Post by Hazel Russman
On Tue, 25 Sep 2018 22:25:33 +0100

Post by Ken Moffat
Second question: can you https:// to google ?

Yes. And to Linux Questions. It's only the LFS site that's causing
problems.

Whoa! www.linuxfromscratch.org does not have HTTPS support now.
--
Xi Ruoyao <***@mengyan1223.wang>
School of Aerospace Science and Technology, Xidian University
--
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://e

[Bruce Dubbs]

Post by Hazel Russman

Post by Ken Moffat
Second question: can you https:// to google ?

[quote]
An error occurred during a connection to www.linuxfromscratch.org. SSL received a record that exceeded the maximum permissible length. Error code: SSL_ERROR_RX_RECORD_TOO_LONG
The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.
[/quote]

https is not enabled for the LFS site. The server provides support for
multiple sites so port 443 is enabled for those, so that is why you got
the error.

-- Bruce
--
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://en.wikipedia.org/wiki/Posti

[Richard Melville]

Post by Xi Ruoyao

Post by Hazel Russman
On Tue, 25 Sep 2018 22:25:33 +0100

Post by Ken Moffat
Second question: can you https:// to google ?

Yes. And to Linux Questions. It's only the LFS site that's causing
problems.

Whoa! www.linuxfromscratch.org does not have HTTPS support now.

It would appear so; I just checked.

Richard

[Hazel Russman]

On Wed, 26 Sep 2018 14:47:23 +0100

Post by Richard Melville

Post by Xi Ruoyao

Post by Hazel Russman
On Tue, 25 Sep 2018 22:25:33 +0100

Post by Ken Moffat
Second question: can you https:// to google ?

Yes. And to Linux Questions. It's only the LFS site that's causing
problems.

Whoa! www.linuxfromscratch.org does not have HTTPS support now.

It would appear so; I just checked.
Richard

If you have a web page that asks for registration passwords, then surely it ought to use encryption.
--
Hazel Russman
--
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://en.wikipedi

[Pierre Labastie]

Post by Hazel Russman
On Wed, 26 Sep 2018 14:47:23 +0100

Post by Richard Melville

Post by Xi Ruoyao

Post by Hazel Russman
On Tue, 25 Sep 2018 22:25:33 +0100

Post by Ken Moffat
Second question: can you https:// to google ?

Yes. And to Linux Questions. It's only the LFS site that's causing
problems.

Whoa! www.linuxfromscratch.org does not have HTTPS support now.

It would appear so; I just checked.
Richard

If you have a web page that asks for registration passwords, then surely it ought to use encryption.

Actually, the registration web page is explicit about this:
"You may enter a privacy password below. This provides only mild security, but
should prevent others from messing with your subscription. Do not use a
valuable password as it will occasionally be emailed back to you in cleartext."


Pierre
--
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://en.wikipedia.org/wiki/

[Douglas R. Reno]

Post by Hazel Russman

Post by Hazel Russman
On Wed, 26 Sep 2018 14:47:23 +0100

Post by Richard Melville

Post by Xi Ruoyao

Post by Hazel Russman
On Tue, 25 Sep 2018 22:25:33 +0100

Post by Ken Moffat
Second question: can you https:// to google ?

Yes. And to Linux Questions. It's only the LFS site that's causing
problems.

Whoa! www.linuxfromscratch.org does not have HTTPS support now.

It would appear so; I just checked.
Richard

If you have a web page that asks for registration passwords, then surely

it ought to use encryption.
"You may enter a privacy password below. This provides only mild security, but
should prevent others from messing with your subscription. Do not use a
valuable password as it will occasionally be emailed back to you in cleartext."
Pierre

Does Trac have a notice like this?

[Bruce Dubbs]

Post by Hazel Russman
On Wed, 26 Sep 2018 14:47:23 +0100

On 26 September 2018 at 13:59, Xi Ruoyao

Post by Hazel Russman
On Tue, 25 Sep 2018 22:25:33 +0100

Post by Ken Moffat
Second question: can you https:// to google ?

Yes. And to Linux Questions. It's only the LFS site that's causing
problems.

Whoa! www.linuxfromscratch.org

<http://www.linuxfromscratch.org> does not have HTTPS support now.

Post by Hazel Russman

It would appear so; I just checked.
Richard

If you have a web page that asks for registration passwords, then

surely it ought to use encryption.
"You may enter a privacy password below. This provides only mild security, but
should prevent others from messing with your subscription. Do not use a
valuable password as it will occasionally be emailed back to you in cleartext."
Pierre
Does Trac have a notice like this?

No. We do not mail Trac passwords. We do not have them at all -- only
the hash. The only reason we have passwords at all for Trac is to
prevent spam via the mailing lists. All posting in Trac is public.

-- Bruce
--
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://en.wikipedia.o