Linux Blimp

Many thanks to all the people who donate to us. Numbers were lower than normal last month but we’re still getting a tremendous amount of support. We’re at an average of $10,000 per month. Although that average decreased slightly over the last three years it is very high, it covers all our expenses, when we need something money is never an issue (whether it’s to scale slowly, invest in security, hosting, CI services or to tackle an emergency) and it allows us to send money upstream when needed and to donate funds internally within our moderation and development teams. We’re able to facilitate development and boost our productivity by making tools available and delegate aspects which would otherwise get in the way. It’s a real help for us, I know I say it every month but I don’t think we’ll ever be thankful enough. If you’re helping us, thank you.

Now, without further ado, let’s talk about development. With Mint 19 and LMDE 3 officially released our hands are now free to develop and improve our software on top of the new bases (respectively Ubuntu 18.04 and Debian Stretch).

Nemo

Nemo 4.0 is lightning fast.

Michael Webster reviewed the Cinnamon file manager and optimized it in many ways. Here are some of his notes when working on it. Throughout the commits below, he asks a new instance of nemo to list the content of /usr/bin after dropping all caches:

Nemo startup time: 3.488751 seconds
Folder load time: 2.644505 seconds
Idle…Folder load time: 2.874406 seconds

Generate tooltips for icon items on-demand, instead of when the view loads:
Nemo startup time: 2.510636 seconds
Folder load time: 1.596948 seconds
Idle…Folder load time: 1.654450 seconds

Optimize icon lookups by GIcon:
Nemo startup time: 2.011817 seconds
Folder load time: 1.158854 seconds
Idle…Folder load time: 1.226699 seconds

Decrease minimum update interval:
Nemo startup time: 1.797009 seconds
Folder load time: 0.937992 seconds
Idle…Folder load time: 0.973764 seconds

The result is very impressive. Nemo feels extremely light and browsing directories is a breeze. It’s never been that fast before and it’s immediately noticeable.

Michael also improved icon sizes and spacing to make Nemo look better.

Nemo is now able to show file creation times (note that this requires ext4, a kernel 4.15 or above and it doesn’t work within an encrypted home directory).

Nemo-python and all Nemo python extensions were ported to Python 3.

XappStackSideBar

Joseph Mccullar, who was involved in the UI revamp of the Welcome Screen in Linux Mint 19, and lead the UI revamp of the Software Sources for the upcoming Linux Mint 19.1, created a new widget in libxapp called XappStackSideBar.

This streamlines icon sidebars and makes it really easy to use them within applications. We’re able to design these sidebars from a click of the mouse in Glade, connect them to a GTK stack and design their pages really easily.

The existing XappPreferencesWindow now also makes use of it.

Here’s how it looks for instance in Nemo 4.0:

Cinnamon

The star of the month within the Cinnamon team is Jason Hicks. Last month we talked about VSYNC, input lag and performance improvements within the muffin window manager. This is now a reality and it’s all been merged in preparation for muffin 4.0.

Input lag was reduced on NVIDIA cards and the window manager feels more responsive when moving windows. You now also have the possibility to turn off VSYNC in the System Settings. This basically delegates VSYNC to your GPU driver (which needs to handle it otherwise you get screen tearing) and if that driver performs well, it can eliminate input lag and boost performance.

Jason also ported a huge amount of upstream changes from the GNOME project:

• Similar to Mutter, Muffin now uses its own embedded version of COGL and Clutter, which received most of the patches applied to the one in GNOME.
• Many Mutter performance improvements were applied to Muffin.
• CJS received many commits from GNOME’s GJS, including improvements to its garbage collection.

With so many fixes and improvements applied and performance which depends greatly on the GPU being used, results may vary and we might experience some regressions during the BETA phase. Our own experience is quite positive. Cinnamon 4.0 rarely ventures past 250MB RAM on NVIDIA, it feels more responsive than 3.8 and it looks like some of the long standing rendering issues might be a thing of the past.

Software Sources

When software crashes tools such as mintreport produce a stack trace our developers can look at to understand the cause of the crash. This is the first step towards fixing such a bug. For the stack trace to be meaningful, users need to have debug symbols installed.

In an effort to reduce bandwidth for their mirrors, Debian decided to move debug symbols outside of the main repositories. This decision affected not only Debian and LMDE but also Ubuntu and Linux Mint and made it much more difficult for users to install these symbols.

To simplify this process we added support for debug symbols into the Software Sources tool. You’ll be able to add debug symbol repositories with a click of the mouse.

A new button was also added within the “Maintenance” tab to remove duplicate entries in your repositories.

こんにちは！

There are a few areas where, although a solution is easy to implement, we, the developers, don’t know what needs to be done, what users need and how to provide it. We rely on feedback when it’s about something we don’t really understand or something we can’t really reproduce. We can buy exotic hardware specifically to fix niche issues (Optimus laptops, ATI cards, Wacom tablets etc..), but when the varying factor isn’t the hardware, but us personally, it can get a little difficult. Some of these areas include RTL support, accessibility and input methods.

Well, we still can’t speak Arabic or Hebrew but two of us in the team now know the basics of Japanese. It didn’t take much to see what was missing but when you know what you need it’s much easier to make it happen.

So, the first improvement is that the Language Settings and the Input Methods are now two separate applications.

The user interface for the Input Methods tool was revamped. It uses an icon sidebar and now shows a dedicated page for each supported language.

With the gained space we’re able to show clearer instructions and to accompany the user through not only installing support packages but also selecting the right input method framework and the right input method within it.

Cinnamon 4.0 also received better Fcitx support. Its keyboard applet will hide when Fcitx is running, similar to what it currently does with DBus.

Text Editor

Small things matter. The text editor now indicates in the status bar whether it’s in spaces or tabs mode.

Sponsorships:

Linux Mint is proudly sponsored by:

Donations in August:

A total of $7,067 were raised thanks to the generous contributions of 384 donors:

$109 (3rd donation), Claudia K.
$109, J S.
$109, Konrad S.
$109, Peter I.
$100 (11th donation), Samson S. aka “Samtastic”
$100 (10th donation), Philip W.
$100 (6th donation), Trevor H.
$100 (2nd donation), Matthew C.
$100, Mountain Computers, Inc
$100, Walter D.
$100, Ali H.
$100, Henry G.
$100, מיקי גוטמן
$100, Michael M.
$60 (2nd donation), Быков А.
$54 (5th donation), Derek L.
$54 (3rd donation), Florian P.
$54 (2nd donation), Tobias S.
$54 (2nd donation), Christian G.
$54 (2nd donation), Stefan H.
$54, Hubertus S.
$54, Angelo S.
$54, Ted L.
$54, Johan P.
$50 (27th donation), Anthony C. aka “ciak”
$50 (8th donation), Jason H aka “jaszhix”
$50 (6th donation), Anonymous User
$50 (2nd donation), Peter U.
$50, John L.
$50, Steve L.
$50, Bogdan P.
$50, Timothy M.
$50, Peter J.
$50, Karl B.
$50, Terry C.
$50, Yuval G.
$40 (2nd donation), Saransh C.
$40 (2nd donation), Bruce I.
$40 (2nd donation), Joe K.
$40, Vincent T.
$35 (3rd donation), Paul C.
$33 (102th donation), Olli K.
$33 (2nd donation), Hendrik G.
$33, Nadia F.
$33, Ballivet D.
$33, Karine S.
$33, Kai-michael K.
$33, Seamus Y.
$33, Gwenole L. C.
$33, Alpo P.
$33, Maciej F.
$33, Thomas S.
$33, Rainer H.
$33, 許 博堯
$31.06 (5th donation), M. J. Stewart aka “Mason”
$30 (5th donation), Mark E.
$30 (2nd donation), Devon B.
$29.99 (2nd donation), John S.
$27 (5th donation), Jan B.
$27 (5th donation), Michael S.
$27 (2nd donation), John J.
$27 (2nd donation), Xtant Logic Ltd aka “Xtant Audio”
$27, Dirk J. L.
$27, Bernhard M.
$27, Anne L.
$27, Lukas
$25 (84th donation), Ronald W.
$25 (7th donation), Jack C.
$25 (5th donation), Joseph G.
$25 (2nd donation), Daniel S. C. O.
$25 (2nd donation), Robert V
$25 (2nd donation), Rojer T.
$25 (2nd donation), Charles B.
$25 (2nd donation), Neal C.
$25, Peter H.
$25, William M.
$25, George R. A.
$25, Charles C.
$25, Patti C.
$25, Alan M.
$25, James H.
$25, Michael M.
$25, Frank F.
$25, George M.
$25, Carl J. V.
$25, Harold W.
$25, Leon F.
$25, Jacques T.
$23, Sascha S.
$22 (4th donation), CySoTec
$22 (3rd donation), Roger H.
$22 (2nd donation), Ulf-andreas S.
$22 (2nd donation), Malcolm P. aka “madmick”
$22 (2nd donation), Gordon T.
$22, Wolfram F.
$22, Elias A. aka “Biker”
$22, Theodore S.
$22, Rafael S.
$22, Magnus J.
$22, Massimo F.
$22, Juan A. S. T.
$22, Alexander Z.
$22, Mike Shiyan
$22, Thorsten J.
$22, Rudolf W.
$20 (42th donation), Curt Vaughan aka “curtvaughan ”
$20 (17th donation), Mike C.
$20 (7th donation), Hubert Banas
$20 (6th donation), Donald M.
$20 (6th donation), Brent S. aka “AFineMan”
$20 (6th donation), Nicklas L.
$20 (5th donation), Efran G.
$20 (4th donation), Charles O. .
$20 (4th donation), John B.
$20 (3rd donation), Rod B
$20 (3rd donation), Paul W.
$20 (3rd donation), Headphonesrepair.com
$20 (3rd donation), Ralph C.
$20 (3rd donation), K6BUK
$20 (2nd donation), James W.
$20 (2nd donation), Patrick V. R.
$20 (2nd donation), Stacey B.
$20, Jenny S.
$20, Tim K.
$20, Bernard A.
$20, Roy J.
$20, Neil M.
$20, Patrick S.
$20, Thomas R.
$20, Gregory Z.
$20, Thomas C.
$20, William T.
$20, Christopher S.
$20, Peter L.
$20, Gregory S.
$20, Jeremy K.
$20, Wim W.
$20, Patrick R.
$20, OBD super
$20, Gene S.
$20, Sebastian C.
$20, Robin P.
$20, Daniel L.
$20, Andrew S.
$18 (14th donation), Ray
$16 (19th donation), Andreas S.
$16 (12th donation), Ib O. J.
$16 (9th donation), Lance M.
$16 (8th donation), Martin C.
$16 (5th donation), Catalin Toader aka “catatoa”
$16 (5th donation), Derek T.
$16 (4th donation), Alain P.
$16 (2nd donation), Kai K.
$16, Christian B.
$16, Papagianopoulos G.
$16, Lionel G.
$16, Nicht W.
$15 (5th donation), Greg W.
$15 (2nd donation), Franklin P.
$15 (2nd donation), Bogdan M. U.
$15 (2nd donation), Susan S.
$15 (2nd donation), Kiyokawa E.
$15, Bayview BOOM
$15, Jay D.
$15, Bryan F.
$15, Cesar D. S.
$13 (7th donation), Frederic S.
$13 (4th donation), D. B. .
$12 (89th donation), Tony C. aka “S. LaRocca”
$12 (34th donation), JobsHiringNearMe
$12 (19th donation), Johann J.
$12 (9th donation), Raymond M. (retired)
$12 (8th donation), Laura NL aka “lauranl”
$11 (9th donation), Eskild T.
$11 (6th donation), Mark C
$11 (5th donation), Frank B. aka “poypoyfrank”
$11 (3rd donation), Finn H.
$11 (3rd donation), Vittorio F.
$11 (3rd donation), Sebastian B.
$11 (3rd donation), K. T. .
$11 (3rd donation), Caspar F.
$11 (2nd donation), Emmanouil T.
$11 (2nd donation), Alexander P.
$11 (2nd donation), Alexandre Andreae
$11 (2nd donation), Bo H.
$11, Boris D.
$11, Giacomo A. C.
$11, Jari K.
$11, Evaldas K.
$11, Mr J. W.
$11, Marek M.
$11, Philippe A. aka “Phreezoo”
$11, Nick H.
$11, Antonio aka “pengu73”
$11, Sebastian N.
$11, Lukas W.
$11, Musaro G.
$11, Heinrich G. J.
$11, Robert B.
$11, Giorgio S.
$11, Chousein G.
$11, Hendrik T. B.
$11, Serge A.
$11, Claus Moller
$11, Gerhard H.
$11, Manuel S.
$11, Mauro G. aka “Maughe”
$11, Nicolaas C.
$11, Théo L. P.
$11, Long Nguyen
$11, Thorsten S.
$11, Dietmar A.
$11, Terry V. E.
$10 (33rd donation), Thomas C.
$10 (31st donation), Jt Spratley aka “Go Live Lively”
$10 (24th donation), Frank K.
$10 (22nd donation), Paul O.
$10 (20th donation), Todd A aka “thobin”
$10 (20th donation), Jim A.
$10 (16th donation), Dinu P.
$10 (13th donation), Dmitry P.
$10 (13th donation), Terrance G.
$10 (10th donation), hotelsnearbyme.net
$10 (6th donation), Dohaeng L.
$10 (4th donation), Peter R.
$10 (4th donation), David H. aka “DRHan”
$10 (3rd donation), อนล ธรรมตระการ aka “ฮอง”
$10 (3rd donation), Anthony F.
$10 (3rd donation), John T.
$10 (3rd donation), John B.
$10 (2nd donation), Timothy L.
$10 (2nd donation), Christopher C.
$10 (2nd donation), Artem K.
$10 (2nd donation), Donald S.
$10 (2nd donation), John K.
$10 (2nd donation), Jason R.
$10 (2nd donation), Ishiyama T.
$10 (2nd donation), Michael D.
$10, James C.
$10, mini-split AC
$10, Chris G.
$10, Tony H.
$10, Lennart S.
$10, Laurence D.
$10, Igor I.
$10, David B.
$10, Sarat K. B.
$10, Marc C.
$10, Mark O.
$10, Brinda
$10, 近藤 正博
$10, Picprojects
$10, Cole B.
$10, John Cardell’s Premium Plugins aka “Amsoil Dealer”
$10, Saito S.
$10, Chee C. A.
$10, Quang L.
$10, Issac H.
$10, Eduardo D.
$10, John H.
$10, Anthony T.
$10, Somak D.
$10, Vanderlei G. D. S.
$10, Larry W.
$9 (2nd donation), Jimmy D. V.
$9, Francesco M.
$8 (2nd donation), Yuji O. aka “ogaty”
$8, Albert H.
$6.8 (2nd donation), Kamil Ł.
$6 (6th donation), gmq
$6 (5th donation), gmq
$6, Mints M.
$6, David C.
$5.67 (18th donation), Paul B. aka “Dude”
$5 (27th donation), Eugene T.
$5 (13th donation), Kevin O. aka “Kev”
$5 (11th donation), Arvis Lacis aka “arvislacis”
$5 (11th donation), Olaf B.
$5 (11th donation), Guillaume G. aka “Tidusrose”
$5 (6th donation), Benjamin T.
$5 (6th donation), Joseph G.
$5 (6th donation), Халилова А.
$5 (4th donation), Russell S.
$5 (4th donation), Jan Miszura
$5 (4th donation), Ian E.
$5 (4th donation), Pokies Portal
$5 (3rd donation), Mik aka “mikstico”
$5 (2nd donation), Jan I.
$5 (2nd donation), Andrew I.
$5 (2nd donation), Wanda J.
$5 (2nd donation), Alain P.
$5 (2nd donation), Darryl M.
$5 (2nd donation), Igor Simić
$5 (2nd donation), Артемьев С. aka “SerdjRua”
$5 (2nd donation), Julius K.
$5 (2nd donation), Georgios A.
$5 (2nd donation), Remus F. B.
$5, Glebs M.
$5, Niranjan Ravindra Upasani
$5, Online Mobile Parts
$5, George M.
$5, Alessandro R.
$5, Vittorio P.
$5, Patty G.
$5, Maurilio D. S. P.
$5, Arnaud B.
$5, Jehanzeb R.
$5, Leon L.
$5, William J. D.
$5, Maksim T.
$5, ipvanish coupon
$5, Катанцев С.
$5, Treigh P.
$5, Sharath C.
$5, Darren A.
$5, Jan I.
$5, Rajshri Mohan K S aka “rajshrimohanks”
$5, Raynard J.
$5, Rytis V.
$5, Konstantinos L.
$5, Artists Of Instagram
$5, Régis P.
$5, Matthew P.
$5, Demian K.
$5, Povilas C.
$5, Žygimantas T.
$5, Roy R.
$5, Alexandre R. D. S.
$4 (27th donation), Thomas F.
$4 (8th donation), nordvpn coupon
$4 (7th donation), nordvpn coupon
$4 (4th donation), Jason N. aka “IggyNelix”
$4, Shelley R.
$3 (6th donation), Takatosi A.
$3 (4th donation), Antonio C. L. S.
$3 (3rd donation), Thomas W.
$3 (2nd donation), I migliori Casino AAMS
$3, Anthony T.
$3, Ершов А.
$3, Marc T.
$2 (12th donation), Sportten
$2 (3rd donation), Pokies Portal
$2 (2nd donation), Rowdy A.
$2 (2nd donation), Melissa M.
$2, Aleksandar R.
$2, Моругин В.
$2, piorek aka “perkos”
$2, Shangqing Z.
$2, Kristopher S.
$2, Bayu P.
$2, Clark E.
$2, Jonas Ö.
$2, Mihir V.
$31 from 31 smaller donations

If you want to help Linux Mint with a donation, please visit http://www.linuxmint.com/donors.php

Rankings:

• Distrowatch (popularity ranking): 2432 (2nd)
• Alexa (website ranking): 3884

Source

Source

Last updated October 11, 2018 By Ankush Das 11 Comments

We are well aware that Microsoft is interested to help the open-source community now more than ever. It has open sourced several of its projects such as .Net Core, VS Code, PowerShell, MS-DOS and a number of AI frameworks and libraries.

But, its latest decision is a big deal for the users, developers and the companies associated with Linux.

Microsoft’s Corporate VP – Erich Andersen – announced in a blog post that they would be bringing their portfolio of over 60,000 issued patents to Open Invention Network (OIN).

Open Invention Network (OIN) is a community backed by a lot of big companies like IBM, Google, Sony, etc. to protect Linux and associated open-source projects from patent lawsuits.

In the blog post, Erich mentioned how OIN is helping protect Linux:

“Since its founding in 2005, OIN has been at the forefront of helping companies manage patent risks. In the years before the founding of OIN, many open source licenses explicitly covered only copyright interests and were silent about patents. OIN was designed to address this concern by creating a voluntary system of patent cross-licenses between member companies covering Linux System technologies. OIN has also been active in acquiring patents at times to help defend the community and to provide education and advice about the intersection of open source and intellectual property. Today, through the stewardship of its CEO Keith Bergelt and its Board of Directors, the organization provides a license platform for roughly 2,650 companies globally. The licensees range from individual developers and startups to some of the biggest technology companies and patent holders on the planet.“

Now, with Microsoft taking such a big step, Erich also mentioned how it would impact the open-source community:

“Now, as we join OIN, we believe Microsoft will be able to do more than ever to help protect Linux and other important open source workloads from patent assertions. We bring a valuable and deep portfolio of over 60,000 issued patents to OIN. We also hope that our decision to join will attract many other companies to OIN, making the license network even stronger for the benefit of the open source community.”

Satya Nadella quoted this after buying GitHub for $7.5 billion

It would be interesting to see how it unfolds because when it comes to money, Microsoft is no one’s friend. Microsoft earns a huge chunk of revenue from patents. It has patents with Android as well that enables it to earn $5-$15 from every Android device sold. I don’t think those 60,000 patents were bringing any revenue to Microsoft. But that just my presumption.

Input from Abhishek: Microsoft has its own selfish interest in this case. This time around it is more about protecting Microsoft and its cloud business on Azure that depends heavily on Linux. Remember Oracle vs Google legal battle over the use of Java in the Android operating system? If Linux ever gets into patent battle and loses it, all the companies using Linux might have to pay billions. Microsoft surely doesn’t want to be in such a situation and hence it (along with many other big corporations) wants to protect Linux in order to save its own back.

What do you think about the entire episode? Let us know your thoughts in the comments below.

About Ankush Das

A passionate technophile who also happens to be a Computer Science graduate. He has had bylines at a variety of publications that include Ubergizmo & Tech Cocktail. You will usually see cats dancing to the beautiful tunes sung by him.

Source

X.Org Server (xorg-server) is an open source and freely distributed implementation of the X Window System (X.Org), provided by the X.Org Foundation, specially designed for the GNU/Linux operating system.

Features at a glance

Key features include input hotplug, KDrive, DTrace and EXA. It’s designed to run on many UNIX-like operating systems, including most Linux distributions and BSD variants it. It is also the default X server for the Solaris operating system.

Forked from XFree86

X.Org Server is part of the X.Org software, the popular and powerful X Window System used in many POSIX operating systems, including almost all GNU/Linux distributions, as well as some BSD and Solaris flavors. The software was originally forked from the XFree86 project.

An important component of every Linux distro

This is a very important and essential component of all Linux kernel-based operating systems that run a graphical desktop environment or a window manager. Without X.Org and X.Org Server, you will only be able to use a distro from the command-line.

It’s installed by default

Of course, this means that it is installed by default in all these GNU/Linux distributions, without exception. If you remove this package from your installation, you won’t be able to access the graphical environment anymore.

X.Org, X.Org Server and X.Org Foundation

Many people get confused about these two essential components of a Linux distribution that uses a graphical session, but one should know that X.Org (X Window System) is the display server and X.Org Server is the X Window System implementation that contains several other projects, such as XCB and Xlib.

Furthermore, X.Org Foundation is the organization that governs these two projects. The X.Org (X Window System) packages are freely available for download on Softpedia.

X11 server Window system X window system Xorg X.Org Server Xorg-server

Source

Nitrux 1.0.16 – See What’s New

Nitrux 1.0 .16 is the latest release of Nitrux OS based on based on the development branch of Ubuntu 18.10 Cosmic Cuttlefish and powered by Linux Kernel 4.18 series. This release also brings together the latest software updates, bug fixes, performance improvements, and ready-to-use hardware support.

Using the latest version of Nomad Desktop as default desktop environment, which is built on top of KDE Plasma 5.13.90 and Qt 5.11.1. The Software Center was updated to using new web scraper backend allowing for automated sorting and listing of AppImages.

Download Nitrux 1.0 .16

Source

By

Shashwat Chaudhary

April 04, 2017

• Disclaimer – TLDR; some stuff here can be used to carry out illegal activity, our intention is, however, to educate

In the previous tutorial, we set up our web application pentesting lab. However, it’s far from ready, and we need to make some changes to get it working as per our needs. Here’s the link to the previous post if you didn’t follow that-

Set up your web app pentesting lab

Contents

1. Fixing the problems
2. Changing credentials
3. Adding recaptcha key
4. Enabling disabled stuff
5. Installing missing stuff
6. Giving write privileges

Fixing problems

If you remember from previous post, we reached this point-

There’s some stuff in red color

All the stuff in red needs fixing. If you are lucky, we have the same set of issues which need fixing. Otherwise, you’ll have to do some googling to find out how to fix problems which you are facing and I am not.

Changing mysql username and password

The default credentials are ‘root’ and ‘p@ssw0rd’ in the config.inc.php file. We change it to the correct mysql login credentials, ‘root’ and ”, in my case. You can change depending on your mysql credentials. This gets rid of our biggest worry – Unable to connect to database!

This is the biggest problem. Solving this means we can create our database, some modules may not work perfectly, but DVWA will run. Without fixing this, we won’t even be able to start. To fix this, open /opt/lamp/htdocs/DVWA-master/config/config.inc.php file in your favorite text editor.

This password isn’t the password of our mysql database. In my case, password is nothing, i.e. two single quotes (i.e. ”). Update the value here. In case your mysql password is something else, use that. Change the username too is need be.

Now we’ll fix the other remaining issues.

Fixing missing recaptcha key

Firstly, we need to solve the recaptcha key missing problem. Go to this

URL

–

Go to the URL, you’ll see a form like this

Fill form, values don’t matter much

You obtain site key and secret key. Site key = Private key, secret key = private key

Open the config.ini.php file in your favourite text editor

Edit the recaptcha public key and private key fields. Here is what I did.

Now we have a a recaptcha key. One red down, 3 to go.

Fixing disabled allow_url_include

We simply have to locate the configuration file and edit the value of the parameter from Off to On.

The php configuration file is located at /opt/lampp/etc/php.ini Edit it with your favourite text editor, you’ll need root privileges (sudo)

Locate the allow_url_include line by using search feature of your text editor

Change Off to On

Restart the lampp service

Reload page, you’ll see that the issue is fixed

Note: Any other function which is disabled can be enabled in a similar manner. All settings are in the php.ini file. You just need to search for the corresponding line and edit it.

Fixing missing modules

If a module is shown as missing , then we need to install it. In my case, everything is installed. Most likely, since you are also using XAMPP, everything would be installed. However, if that is not the case, then you have to figure out how to install the modules. If you aren’t using XAMPP and did everything manually, then apt-get would be the way to go. Otherwise look at XAMPP’s (or whichever bundle you are using) documentation.

Fixing File Ownership

We need to give www-data user write access to two directories. We’ll can use chgrp and chmod commands in unison to give only the privileges that are needed, or we could go the lazy way and use chmod 777 (full read, write and execute privileges to everyone). I’m feeling lazy and I’m just gonna go the chmod way. Run the command below-

chmod 777 <directory>

Replace directory with the correct directory.

This is the last thing that needs to be done

Everything is green finally! Also, notice the credentials, we’ll need it later. “admin // password”

Database created. Populated with tables.

Finally the damn vulnerable application is running.

The username = “admin” and password is “password” (“admin // password” that we saw three pics ago).

Everything is running perfectly. This is the page you should see after successful login.

I’ll leave you at the welcome page of DVWA. In the next tutorial, we’ll begin proper exploitation of the intentional vulnerabilities, moving from trivial stuff to the really hard stuff. The first two tutorials complete the installation and configuration parts.

Source

Share with friends and colleagues on social media

Despite cloud computing being a generally well-accepted and used technology that has slipped into the common vernacular very easily, there is still some confusion around the different types of cloud options out there. Specifically around the concepts of multi-cloud and hybrid cloud. While some of this is due to slightly hazy marketing, largely it is down to misunderstanding. We know, just from looking at many of the cars on the street today, that a hybrid is a combination of two things (in the case of the image on this page, a bobcat and a bird), but how does that differ from multi-cloud?

A blog written in 2017 by our own Terri Schlosser previously addressed this, but having had a number of conversations with confused customers and partners over the last year or so, I decided to record a very brief video to help clarify the situation.

Follow this link to watch the video, and if you have any thoughts, please leave a comment on this blog, contact me at matthew.johns@suse.com or via Twitter. I hope that you find it useful in understanding more about what can be at times a very confusing set of terms. If you’d like to read more about cloud in general, then please visit our Cloud Solutions page on suse.com, or get in contact with us to see how SUSE can support you in your journey to the cloud.

Share with friends and colleagues on social media

Source

HTTP download speed difference in windows 7 vs Linux

I have a strange situation regarding a Windows PC which is showing limited internet transfer speeds for no apparent reason. If I am performing the same test on Linux box then I am getting good speed.

Upon intense debugging, I am able to diagnose and find out the root cause of the problem.

It was/is Windows HTTP packet fragmentation that happens locally. Basically its
how windows compile HTTP headers locally so found a fix to it.

We came across some TCP settings which restrict download speed in the windows
box, hence in order to permit download of large files, have modified below
settings:

These were my initial TCP settings

C:Windowssystem32>netsh interface tcp show global

Querying active state…

TCP Global Parameters

———————————————-

Receive-Side Scaling State: disabled

Chimney Offload State : automatic

NetDMA State: enabled

Direct Cache Acess (DCA): disabled

Receive Window Auto-Tuning Level: disabled

Add-On Congestion Control Provider: none

ECN Capability: disabled

RFC 1323 Timestamps : disabled

** The above autotuninglevel setting is the result of Windows Scaling heuristics

overriding any local/policy configuration on at least one profile.

C:Windowssystem32>netsh interface tcp show heuristics

TCP Window Scaling heuristics Parameters

———————————————-

Window Scaling heuristics : enabled

Qualifying Destination Threshold: 3

Profile type unknown: normal

Profile type public : normal

Profile type private: restricted

Profile type domain : normal

Thus I did:

# disable heuristics

C:Windowssystem32>netsh interface tcp set heuristics wsh=disabled

Ok.

# enable receive-side scaling

C:Windowssystem32>netsh int tcp set global rss=enabled

Ok.

# manually set autotuning profile

C:Windowssystem32>netsh interface tcp set global autotuning=experimental

Ok.

# set congestion provider

C:Windowssystem32>netsh interface tcp set global congestionprovider=ctcp

Ok.

C:Windowssystem32>netsh interface tcp show global

Querying active state…

TCP Global Parameters

———————————————-

Receive-Side Scaling State: enabled

Chimney Offload State : automatic

NetDMA State: enabled

Direct Cache Acess (DCA): disabled

Receive Window Auto-Tuning Level: experimental

Add-On Congestion Control Provider: ctcp

ECN Capability: disabled

RFC 1323 Timestamps : disabled

After changing these settings downloading is fast again, hitting the internet connection’s limit.

Source

On Fedora, RHEL and its clones such as CentOS, Scientific Linux, Oracle Linux, you can find it using the following command:

rpm -qi basesystem

Sample output

[[email protected] ~]# rpm -qi basesystem
Name : basesystem
Version : 10.0
Release : 7.el7.centos
Architecture: noarch
Install Date: Thu 29 Mar 2018 05:05:32 PM IST
Group : System Environment/Base
Size : 0
License : Public Domain
Signature : RSA/SHA256, Fri 04 Jul 2014 06:16:57 AM IST, Key ID 24c6a8a7f4a80eb5
Source RPM : basesystem-10.0-7.el7.centos.src.rpm
Build Date : Fri 27 Jun 2014 04:07:10 PM IST
Build Host : worker1.bsys.centos.org
Relocations : (not relocatable)
Packager : CentOS BuildSystem http://bugs.centos.org
Vendor : CentOS
Summary : The skeleton package which defines a simple CentOS Linux system
Description :
Basesystem defines the components of a basic CentOS Linux
system (for example, the package installation order to use during
bootstrapping). Basesystem should be in every installation of a system,
and it should never be removed.

Source

Balancing size and features is a universal challenge when building software. So, it’s unsurprising that this holds true when building container images. If you don’t include enough packages in your base image, you end up with images which are difficult to troubleshoot, missing something you need, or just cause different development teams to add the exact same package to layered images (causing duplication). If you build it too big, people complain because it takes too long to download – especially for quick and dirty projects or demos. This is where Buildah comes in.

In the currently available ecosystem of build tools, there are two main kinds of build tools:

1. Ones which build container images from scratch.
2. Those that build layered images.

Buildah is unique in that it elegantly blurs the line between both – and, it has a rich set of capabilities for each. One of those rich capabilities is multi-stage builds.

At Red Hat Summit 2018 in San Francisco, Scott McCarty and I boiled the practice of building production ready containers down into five key tenets – standardize, minimize, delegate, process, and iterate (video & presentation).

Two tenets in particular are often at odds – standardize and minimize. It makes sense to standardize on a rich base image, while at the same time minimizing the content in layered builds. Balancing both is tricky, but when done right, reaps the benefits of OCI image layers at scale (lots of applications) and improves registry storage efficiency.

Multi-stage builds

A particularly powerful example of how to achieve this balance is the concept of multi-stage builds. Since build dependencies like compilers and package managers are rarely required at runtime, we can exclude them from the final build by breaking it into two parts. We can do the heavy lifting in the first part, then use the build artifacts (think Go binaries or jars) in the second. We will then use the container image from the second build in production.

Using this methodology leverages the power of rich base images, while at the same time, results in a significantly smaller container image. The resultant image isn’t carrying additional dependencies that aren’t used during runtime. The multi-stage build concept became popular last year with the release of Docker v17.05, and OpenShift has long had a similar capability with the concept of chaining builds.

OK, multi-stage builds are great, you get it, but to make this work right, the two builds need to be able to copy data between them. Before we tackle this, let’s start with some background.

Buildah background

Buildah was a complete rethink of how container image builds could and should work. It follows the Unix philosophy of small, flexible tools. Multi-stage builds were part of the original design and have been possible since its inception. With the release of Buildah 1.0, users can now take advantage of the simplicity of using multi-stage builds with the Dockerfile format. All of this, with a smaller tool, no daemon, and tons of flexibility during builds (ex. build time volumes).

Below we’ll take a look at how to use Buildah to accomplish multi-stage builds with a Dockerfile and also explore a simpler, yet more sophisticated way to tackle them.

Using Dockerfiles:

$buildah bud -t [image:tag] .

….and that’s it! Assuming your Dockerfile is written for multi-stage builds and in the directory the command is executed, everything will just work. So if this is all you’re looking for, know that it’s now trivial to accomplish this with Buildah in Red Hat Enterprise Linux 7.5.

Now, let’s dig a little deeper and take a look at using Buildah’s native commands to achieve the same outcome and some reasons why this can be a powerful alternative for certain use cases.

For clarity, we’ll start by using Alex Ellis’s blog post that demonstrates the benefits of performing multi-stage builds. Use of this example is simply to compare and contrast the Dockerfile version with Buildah’s native capabilities. It’s not an endorsement any underlying technologies such as Alpine Linux or APK. These examples could all be done in Fedora, but that would make the comparison less clear.

Using Buildah Commands

Using his https://github.com/alexellis/href-counter we can convert the included Dockerfile.multi file to a simple script like this:

First Build

#!/bin/bash

# build container

buildcntr1=$(buildah from golang:1.7.3)

buildmnt1=$(buildah mount $buildcntr)

Using simple variables like this are not required, but they will make the later commands clearer to read so it’s recommended. Think of the buildcntr1 as a handle which represents the container build, while the variable buildmnt1 represents a directory which will mount the container.

buildah run $buildcntr1 go get -d -v golang.org/x/net/html

This is the first command verbatim in the original Dockerfile. All that’s needed is to change RUN to run and point Buildah to the container we want to execute the command in. Once, the command completes, we are left with a local copy of the go program. Now we can move it wherever we want. Buildah has a native directive to copy the contents out of a container build:

buildah copy $buildcntr1 app.go .

Alternatively, we can use the system command to do the same thing by referencing the mount point:

cp app.go $buildmnt1/go

For this example both of these lines will accomplish the same thing. We can use buildah’s copy command the same way the COPY command works in a Dockerfile, or we can simply use the host’s cp command to perform the task of copying the binary out of the container. In the rest of this tutorial, we’ll rely on the hosts command.

Now, let’s build the code:

buildah run $buildcntr1 /bin/sh -c “CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o app .”

Second Build

The same applies to this command. We’re changing RUN to run and executing the command in the same container:

# runtime container

buildcntr2=$(buildah from alpine:latest)

buildmnt2=$(buildah mount $buildcntr2)

Now let’s define a separate runtime image that we’ll use to run our application in production with.

buildah run $buildcntr2 apk –no-cache add ca-certificates

Same tweaks for the RUN command

#buildah copy $buildcntr2 $buildmnt1/go/app .

Or:

cp $buildmnt1/go/app $buildmnt2

Here we have the same option as above. To bring the compiled application into the second build, we can use the copy command from buildah or the host.

Now, add the default command to the production image.

buildah config –cmd ./app $buildcntr2

Finally, we unmount and commit the image, and optionally clean up the environment:

#unmount & commit the image

buildah unmount $buildcntr2

buildah commit $buildcntr2 multi-stage:latest


#clean up build

buildah rm $buildcntr1 $buildcntr2

Don’t forget that Buildah can also push the image to your desired registry using ​buildah push`

The beauty of Buildah is that we can continue to leverage the simplicity of the Dockerfile format, but we’re no longer bound by the limitations of it. People do some nasty, nasty things in a Dockerfile to hack everything onto a single line. This can make them hard to read, difficult to maintain, and it’s inelegant.

When you combine the power of being able to manipulate images with native Linux tooling from the build host, you are now free to go beyond the Dockerfile commands! This opens up a ton of new possibilities for the content of container images, the security model involved, and the process for building.

A great example of this was explored in one of Tom Sweeney’s blog posts on creating minimal containers. Tom’s example of leveraging the build host’s package manager is a great one, and means we no longer require something like “yum” to be available in the final image.

On the security side, we no longer require access to the Docker socket which is a win for performing builds from Kubernetes/OpenShift. In fairness Buildah currently requires escalated privileges on the host, but soon this will no longer be the case. Finally, on the process side, we can leverage Buildah to augment any existing build process, be it a CI/CD pipeline or building from a Kubernetes cluster to create simple and production-ready images.

Buildah provides all of the primitives needed to take advantage of the simplicity of Dockerfiles combined with the power of native Linux tooling, and is also paving the way to more secure container builds in OpenShift. If you are running Red Hat Enterprise Linux, or possibly an alternative Linux distribution, I highly recommend taking a look at Buildah and maximizing your container build process for production.

Source