What is the NixOS-way to put a configuration file in /etc? E.g. I want to drop /etc/nanorc. I found discussions about programming it into /etc/nixos/configuration.nix...

i am an Arch Linux user from Russia so some websites are not working for me. I tried app VPN(Proton VPN), firefox VPNs and other but none of them work! Is there any solution for me?

I'd like to know if apk add is capable of automatically assuming yes to any prompts when installing a new package on Alpine Linux? I'm familiar with running something like apt-get install -y curl on Ubuntu and wondering if there's an equivalent command for my use case.

Something is adjusting the volume. This is a recurring problem for me on Linux. I've had Zoom do it. I've had Discord do it. A lot of programs try to auto adjust my volume. I'd like to know if there is a way to snoop on that event and see what program is doing it? Is there anyway to introspect volume changes and mic volume changes?

Operating System: KDE neon User Edition KDE Plasma Version: 6.4.3 KDE Frameworks Version: 6.16.0 Qt Version: 6.9.1 Kernel Version: 6.16.0-061600-generic (64-bit) Graphics Platform: Wayland Processors: 6 × Intel® Core™ i5-9500 CPU @ 3.00GHz Audio Hardware: Intel® UHD Graphics 630 HDMI output to a Denon receiver Problem Description: My system has a working 7.1 audio setup, but it is incorrectly downmixing multi-channel audio sources to stereo. When I play a multi-channel audio file, only the front-left and front-right speakers produce sound. The speaker test in my sound settings works perfectly for all 7.1 channels, confirming the hardware and drivers are functioning correctly. A PipeWire graph screenshot from helvum showed that VLC was correctly outputting a 7.1 signal, which confirms the issue is a downmixing problem, not a problem with the source. Troubleshooting Steps Taken (with Outcomes): I have exhausted all standard and non-standard methods for enabling upmixing and preventing downmixing. Each attempt to modify a configuration file has led to a critical failure of the audio stack. The system has been restored to a working state after each failure. Attempted wireplumber policy edits: Action: I tried to change the ["audio.no-dsp"] value from false to true in /usr/share/wireplumber/policy.lua.d/10-default-policy.lua. Result: This caused the entire audio stack to fail. I had no sound, and the system reported "no input or output devices found." The system was restored by copying a backup of the original file. Attempted other configuration file edits: Action: I attempted to add upmixing rules to both pipewire.conf and 10-default-policy.lua. Result: Both attempts caused the respective services to crash with "Connection lost" or "no input or output devices found" errors. Used pactl commands: Action: I used pactl load-module to create virtual sinks with module-remap-sink and module-remap-channels. Result: The module-remap-sink command successfully created a sink, but the audio still did not upmix. The module-remap-channels command failed with a "No such entity" error. Attempted to switch to PulseAudio: Action: I tried to install the ubuntustudio-pulseaudio-config package to switch my audio backend. Result: The installation removed pipewire-alsa due to a dependency conflict, leaving the system with a broken audio setup. The system was restored by reinstalling the PipeWire stack. Final Conclusion and Call for Help: All troubleshooting paths lead to a critical failure of the audio stack when standard configuration changes are made. The issue is not with the configuration file syntax, but with a deeper logic problem that prevents the system from correctly handling the multi-channel audio. I am looking for a solution that can either: Address why standard configuration changes are causing critical failures on my system. Provide a reliable way to get a multi-channel audio source to play correctly without downmixing. Suggest a different, more stable method to switch from PipeWire to a working PulseAudio stack on KDE neon. Thanks Ysalmon... Ysalmon has my Solution @ https://askubuntu.com/posts/1528102/revisions

Here is the result of running lsblk on my machine

NAME        MAJ:MIN RM   SIZE RO TYPE MOUNTPOINTS
zram0       252:0    0   7.5G  0 disk [SWAP]
nvme0n1     259:0    0 238.5G  0 disk 
├─nvme0n1p1 259:1    0   260M  0 part /boot/efi
├─nvme0n1p2 259:2    0 153.4G  0 part 
├─nvme0n1p5 259:3    0     1G  0 part /boot
└─nvme0n1p6 259:4    0  82.9G  0 part /home
                                      /

What confuses me is the fact that I have both a /boot and a /boot/efi. Are both partitions needed? Can I safely delete one of them?

My laptop (Kubuntu 18.04) has only a single sound card. I want to take input from the Mic of the headphone I connect but get the output to the built-in speaker of the laptop. I can toggle input (between internal and headphone mic) when headphone is connected, but if try to toggle output to speaker in the Pulseaudio Volume Control settings it shows "Unavailable" and if I switch to it, no sound comes out (i.e. the speaker works iff headphone is disconnected). I tried with Simultaneous Output but no luck.

I have a ALMA9 Linux server with a quad BCM57414 NetXtreme-E 10Gb/25Gb RDMA Ethernet Controller NIC. I have two interfaces teamed using LACP and connected to a Cisco 9336C-FX2 switch running (NX-OS) Software 7.0(3)I7(6). The two interfaces are connected at 25Gbps speed each. Can I aggregate them so that the total throughput is 50Gbps? Here is what my network guys sent me regarding the interfaces and port channel: SWITCH-ACCESS02-9336C# show int status | i ppg Eth1/14/1 ... Sto connected trunk full 25G QSFP100G-4SFP25G-CU3M Eth1/14/2 ... Sto connected trunk full 25G QSFP100G-4SFP25G-CU3M Po160 ... Sto connected trunk full 25G -- He says, "It turns out that the server is sending LACP packets to the switch telling it that it can only load balance using MAC address and Layer 4 destination port. Those two modes do NOT support bundling the throughput." How then do I bundle the throughput? Is that possible on the Linux side? My bond state looks like this: [root@linux-host ~]# teamdctl bond1 state setup: runner: lacp ports: bcom1 link watches: link summary: up instance[link_watch_0]: name: ethtool link: up down count: 1 runner: aggregator ID: 5, Selected selected: yes state: current bcom2 link watches: link summary: up instance[link_watch_0]: name: ethtool link: up down count: 1 runner: aggregator ID: 5, Selected selected: yes state: current runner: active: yes fast rate: yes Thanks.

Given this code:

#!/bin/bash
set -euo pipefail
function someFn() {
  local input_string="$1"
  echo "$input_string start"
  sleep 3
  echo "$input_string end"
}

function blocking() {
  someFn "FOO"
  someFn "BAR"
  someFn "BAZ"
  echo "DONE"
}

function wellBehavedParallel() {
  someFn "FOO" &
  someFn "BAR" &
  someFn "BAZ" &
  wait
  echo "DONE"
}

function subShellMadness() {
  (someFn "FOO" &) &
  (someFn "BAR" &) &
  (someFn "BAZ" &) &
  wait
  echo "DONE"
}

echo "BLOCKING_APPROACH"
blocking

echo "WEL_WORKING_PARALLEL"
wellBehavedParallel

echo "THIS DOES NOT WORK"
subShellMadness

It showcases two expected behaviors and one unexpected. 1. The Blocking one Simple, executes one line, then the next, slow and boring but solid:

BLOCKING_APPROACH
    FOO start
    FOO end
    BAR start
    BAR end
    BAZ start
    BAZ end
    DONE

2. The well-behaved parallel one. All commands & are executed in parallel, the wait waits for all of them to finish, and only then does the main script progress further:

WEL_WORKING_PARALLEL
    FOO start
    BAR start
    BAZ start
    FOO end
    BAR end
    BAZ end
    DONE

2. This is (at least to me) unexpected, but I assume this is "by design" that once I use subshells, I cannot use wait in the main script any more. The jobs are still progressed in parallel, but I have lost all control, the main script even ends, and afterwards output is still dumped on the terminal by the subshells:

THIS DOES NOT WORK
    FOO start
    BAR start
    DONE
    BAZ start
    philipp@DESKTOP-H0QQ2H8:~$ FOO end
    BAR end
    BAZ end

Is there a way from a main script to wait for subshells to finish? I want to avoid PID-collecting solutions (I know that wait accepts PID as a parameter), yet from what I gather getting the right PID in the first place may be prone to race conditions (since $! will represent the last executed command's PID, not necessarily my command), and I fear PID-reusage could also make such an approach prone to unexpected behavior (am I waiting on my original command, or did some other process take my pid? When calling wait, I seemingly have no way of knowing). Is there a best practice in dealing with waiting for subshells that reliably waits for them to finish? (Not using subshells is not an option for me right now.)

I have a Debian 12 system that I want to backup using clonezilla. This system is using LVM and a bunch of little partitions. Some using ext4, and some in xfs. The issue, is that, if I don't do anything special, and use exclusively the gui, clonezilla stop the lvm manager before doing a backup and switch to raw mode to save the disk. Resulting in a quite long backup process and quite long restore process. The image is small compared to the disk size (512GB save to a 17GB file). Why clonezilla don't want to save each lvm partition ? Do I have to ask clonezilla to backup each lvm partition, and use a custom restore script where I create the lvm volume myself before issuing a bunch of restore commands ? Is there a way to make this backup more efficient ? Best regards.

I'm currently running NUT on my RaspberryPi (using Raspbian ), I have managed to connect my Mecer USB UPS to NUT using the blazer_USB driver. Recently I got another UPS (same model) and would like to connect it to the same Pi via USB. The second UPS is connected and configured but the Pi only reads one UPS. When both UPS are connected it reads UPS2; if i remove the USB cable of UPS2 it then reads UPS1. /etc/nut/ups.conf [upswifi] driver = blazer_usb port = /dev/usb desc = "Dearx_UPS_WIFI_1" [upslan] driver = blazer_usb port = /dev/usb desc = "Dearx_UPS_LAN" LSUSB output Bus 001 Device 009: ID 0665:5161 Cypress Semiconductor USB to Serial Bus 001 Device 008: ID 0665:5161 Cypress Semiconductor USB to Serial Bus 001 Device 006: ID 0424:7800 Standard Microsystems Corp. Bus 001 Device 003: ID 0424:2514 Standard Microsystems Corp. USB 2.0 Hub Bus 001 Device 002: ID 0424:2514 Standard Microsystems Corp. USB 2.0 Hub Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub I think it only sees 1 USB connection at a time, Is there a way i can monitor both via usb on the same system?

I'm getting this error after a system upgrade to trixie.

SysV service '/etc/init.d/cgroupfs-mount' lacks a native systemd unit file, automatically generating a unit file for compatibility.

What is the migration path for this? Is this safe to remove? If not, how do I silence this warning?

It is well known that by configuring the file /etc/systemd/timesyncd.conf accordingly, you can query NTP servers from a specific country using the following entries, for example: NTP=0.de.pool.ntp.org 1.de.pool.ntp.org 2.de.pool.ntp.org 3.de.pool.ntp.org FallbackNTP=0.at.pool.ntp.org 1.at.pool.ntp.org 2.at.pool.ntp.org 3.at.pool.ntp.org It is also known that the query can be configured for specific regions such as: europe, north-america, oceania, and asia.pool.ntp.org However, how can the query be configured so that the NTP server closest to your own location is always queried? According to some sources, the following query returns a response from any NTP server and not the one closest to your location: server pool.ntp.org The following configuration may have something to do with a possible solution. However, I have not found any reliable sources on this: # Dynamic Configuration server pool.ntp.org dynamic iburst # Static Configuration server 0.de.pool.ntp.org iburst prefer server 1.de.pool.ntp.org iburst server 2.de.pool.ntp.org iburst Remark: It is well known that if you were to use an unencrypted NTP server from Cloudflare (pls. wait) instead of an unencrypted ntp.org NTP server, you would automatically always use the nearest of the 330+ Cloudflare NTP servers, regardless of your own location. It is also well known that it is unsafe to use unencrypted NTP servers and that there is a modern encrypted successor such as NTS, and that when using one such server, such as (please wait), regardless of your own location, you would automatically always use the nearest of the 330+ Cloudflare NTP servers. However, the question refers to the unencrypted service offered by ntp.org, as there are still router firmwares that only allow you to specify NTP servers and not NTS servers, and it can't hurt to know more than one provider and the corresponding configuration, so that you can always automatically use the nearest NTP server regardless of your location.

I was trying to aircrack-ng, but the problem everytime I airmon-ng start wlan0 prism0 shows up not mon0. What to do? root@kali:~# airmon-ng start wlan0 PHY Interface Driver Chipset phy0 wlan0 wl Broadcom Corporation BCM43142 802.11b/g/n (rev 01) (experimental wl monitor mode vif enabled for [phy0]wlan0 on [phy0]prism0)

I am running Amazon Linux centos however the version of the file which gets installed is 5.30. I require a later version. file: Compiled magic version does not match with shared library magic version steps to reproduce: wget -m ftp://ftp.astron.com/pub/file/file-5.34.tar.gz cd ftp.astron.com/pub/file/ tar -zxf file-5.34.tar.gz cd file-5.34 ./configure --prefix=/usr make make install on my ubuntu machine, I can follow which involved removing libmagic before doing the install. What's the equivalent on centos / amazon linux? Or is there an easier way to yum install file 5.34 other than by compiling it?

i have a running vpnc connection from my arch-linux device. All traffic goes through the tunnel to the vpnc server. But i need to exclude the 443 port, because a running https server need to be reachable from the local internet connection. There is thread with just the same requirements. But this isn't working to me. https://unix.stackexchange.com/questions/581419/routing-port-traffic-over-specific-interface?newreg=ac3f46c081724e8c93c007f1e35e44ae All traffic still goes through the tun0 device. i've no experience with routing ... maybe anyone can give me a hint? May network interface is: enp1s0 The vpnc network device is: tun0 Device IP: 192.168.2.10 Router IP: 192.168.2.1 > #route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default 0.0.0.0 0.0.0.0 > U 0 0 0 tun0 i577B2E95.versa 192.168.2.1 > 255.255.255.255 UGH 0 0 0 enp1s0 > 192.168.2.0 0.0.0.0 255.255.255.0 U 100 0 0 enp1s0

I use nix and home manager, zsh and tmux. My problem is that in tmux splits the nix command does not exist. I tried setting default shell in tmux to /bin/zsh -l sourcing files etc, I notice the PATH is just missing /nix/var/nix/profiles/default/bin:/Applications/Ghostty.app/Contents/MacOS My .zshrc has

if [ -e '/nix/var/nix/profiles/default/etc/profile.d/nix-daemon.sh' ]; then
  . '/nix/var/nix/profiles/default/etc/profile.d/nix-daemon.sh'
fi

I tested this in different terminals too - same story.

I have a small Raspberry Pi server connected to an openvpn provider, used as a VPN gateway. Almost everything works fine with the following iptables rules: iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE iptables -A FORWARD -i tun0 -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT iptables -A FORWARD -i eth0 -o tun0 -j ACCEPT However, the VPN provider blocks NTP traffic (udp port 123). How do I make iptables route all NTP traffic via the default gateway (which is 192.168.1.1 on eth0)?

I've a laptop running Debian GNU/Linux Unstable with Network Manager. Since an update of OpenSSL (1.1.1 I think), I can't connect to a Wi-Fi network using WPA2 Enterprise with PEAP (MSCHAPv2). In /var/log/syslog, it says that SSL3 is unsupported: Oct 30 10:52:18 wb9688-b50 wpa_supplicant: wlp4s0: SME: Trying to authenticate with [REDACTED] (SSID='Hotspot' freq=2412 MHz) Oct 30 10:52:18 wb9688-b50 kernel: [ 9.195724] wlp4s0: authenticate with [REDACTED] Oct 30 10:52:18 wb9688-b50 NetworkManager: [1540893138.8304] device (wlp4s0): supplicant interface state: scanning -> authenticating Oct 30 10:52:18 wb9688-b50 kernel: [ 9.216389] wlp4s0: send auth to [REDACTED] (try 1/3) Oct 30 10:52:18 wb9688-b50 kernel: [ 9.218779] wlp4s0: authenticated Oct 30 10:52:18 wb9688-b50 wpa_supplicant: wlp4s0: Trying to associate with [REDACTED] (SSID='Hotspot' freq=2412 MHz) Oct 30 10:52:18 wb9688-b50 kernel: [ 9.228045] wlp4s0: associate with [REDACTED] (try 1/3) Oct 30 10:52:18 wb9688-b50 kernel: [ 9.233930] wlp4s0: RX AssocResp from [REDACTED] (capab=0x431 status=0 aid=4) Oct 30 10:52:18 wb9688-b50 kernel: [ 9.234023] wlp4s0: associated Oct 30 10:52:18 wb9688-b50 wpa_supplicant: wlp4s0: Associated with [REDACTED] Oct 30 10:52:18 wb9688-b50 wpa_supplicant: wlp4s0: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0 Oct 30 10:52:18 wb9688-b50 wpa_supplicant: wlp4s0: CTRL-EVENT-EAP-STARTED EAP authentication started Oct 30 10:52:18 wb9688-b50 NetworkManager: [1540893138.8600] device (wlp4s0): supplicant interface state: authenticating -> associating Oct 30 10:52:18 wb9688-b50 NetworkManager: [1540893138.8605] device (wlp4s0): supplicant interface state: associating -> associated Oct 30 10:52:18 wb9688-b50 wpa_supplicant: wlp4s0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25 Oct 30 10:52:18 wb9688-b50 wpa_supplicant: wlp4s0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected Oct 30 10:52:18 wb9688-b50 wpa_supplicant: wlp4s0: CTRL-EVENT-REGDOM-CHANGE init=COUNTRY_IE type=COUNTRY alpha2=NL Oct 30 10:52:18 wb9688-b50 kernel: [ 9.259127] ath: EEPROM regdomain: 0x8210 Oct 30 10:52:18 wb9688-b50 kernel: [ 9.259130] ath: EEPROM indicates we should expect a country code Oct 30 10:52:18 wb9688-b50 kernel: [ 9.259131] ath: doing EEPROM country->regdmn map search Oct 30 10:52:18 wb9688-b50 kernel: [ 9.259132] ath: country maps to regdmn code: 0x37 Oct 30 10:52:18 wb9688-b50 kernel: [ 9.259133] ath: Country alpha2 being used: NL Oct 30 10:52:18 wb9688-b50 kernel: [ 9.259134] ath: Regpair used: 0x37 Oct 30 10:52:18 wb9688-b50 kernel: [ 9.259136] ath: regdomain 0x8210 dynamically updated by country element Oct 30 10:52:18 wb9688-b50 wpa_supplicant: SSL: SSL3 alert: write (local SSL3 detected an error):fatal:protocol version Oct 30 10:52:18 wb9688-b50 wpa_supplicant: OpenSSL: openssl_handshake - SSL_connect error:1425F102:SSL routines:ssl_choose_client_version:unsupported protocol Oct 30 10:52:18 wb9688-b50 wpa_supplicant: wlp4s0: CTRL-EVENT-EAP-FAILURE EAP authentication failed Oct 30 10:52:20 wb9688-b50 kernel: [ 11.335881] wlp4s0: deauthenticating from [REDACTED] by local choice (Reason: 3=DEAUTH_LEAVING) Oct 30 10:52:20 wb9688-b50 wpa_supplicant: wlp4s0: Authentication with [REDACTED] timed out. Oct 30 10:52:21 wb9688-b50 wpa_supplicant: wlp4s0: CTRL-EVENT-DISCONNECTED bssid=[REDACTED] reason=3 locally_generated=1 Oct 30 10:52:21 wb9688-b50 wpa_supplicant: wlp4s0: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="Hotspot" auth_failures=1 duration=10 reason=AUTH_FAILED Oct 30 10:52:21 wb9688-b50 NetworkManager: [1540893141.3677] sup-iface[0x5617eb7458b0,wlp4s0]: connection disconnected (reason -3) Oct 30 10:52:21 wb9688-b50 NetworkManager: [1540893141.3704] device (wlp4s0): supplicant interface state: associated -> disconnected Downgrading OpenSSL fixes it of course, but then I can't use things that are compiled to newer versions of OpenSSL. Is there any way to connect to the Wi-Fi network?

I just finished setting up PowerDNS to avoid having to remember all my IP addresses and it seems to work pretty fine, most host names resolve just fine but not the one running PowerDNS (named musicbox, IP 192.168.1.22). When I try to ping it from any other computer I only get an error message about unknown host. Using dig I get the correct IP address. Running ping musicbox.local also works fine but not ping musicbox. #dig musicbox.local ; > DiG 9.9.5-3-Ubuntu > musicbox.local ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45271 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;musicbox.local. IN A ;; ANSWER SECTION: musicbox.local. 3600 IN A 192.168.1.22 ;; Query time: 5 msec ;; SERVER: 192.168.1.22#53(192.168.1.22) ;; WHEN: Sun Dec 07 19:54:23 CET 2014 ;; MSG SIZE rcvd: 48 This is my bindbackend.conf: one "local" { type master; file "/etc/powerdns/bind/local.zone"; allow-update { none; }; }; This is my zone file, local.zone: $ORIGIN local ; base for unqualified names $TTL 1h ; default time-to-live @ IN SOA ns.local hostmaster.local ( 1; serial 1d; refresh 2h; retry 4w; expire 1h; minimum time-to-live ) IN NS ns IN A 192.168.1.22 musicbox IN CNAME ns haddock IN A 192.168.1.29 tintin IN A 192.168.1.68 snowy IN A 192.168.1.99 castafiore IN A 192.168.1.73 All host names but musicbox resolve just fine. How do I fix that annoying last piece of my puzzle?