Werner changed the topic of #armbian to: armbian - Linux for ARM development boards | www.armbian.com | Github: github.com/armbian | Announcements: #armbian-announcements | Developer talk: #armbian-devel | Off-Topic: #armbian-offtopic | Logs: -> irc.armbian.com
LanDi has quit [Remote host closed the connection]
flyback has joined #armbian
RecursiveG_ has quit [Quit: ZNC 1.8.2 - https://znc.in]
DC-IRC has quit [Remote host closed the connection]
DC-IRC has joined #armbian
Mangix has quit [Ping timeout: 246 seconds]
sally has quit [Remote host closed the connection]
sally has joined #armbian
Mangix has joined #armbian
lyri has quit [Remote host closed the connection]
buzzmarshall has quit [Quit: Konversation terminated!]
jantones_ has joined #armbian
jantones has quit [Remote host closed the connection]
archetech has joined #armbian
Peppi has joined #armbian
<Peppi> hello
<Peppi> I'm having an issue with https://www.armbian.com/odroid-xu4/ I'm currently using 24.5.1 I see there is a 24.5.3. The issue I'm having is with my HC2. When I reboot the device I don't have access to the hard drive. But if I cold boot it, I do. Any thoughts?
<Peppi> is there a change log I can look at from 24.5.1 and 24.5.3?
gabes22 has quit [Quit: The Lounge - https://thelounge.chat]
gabes22 has joined #armbian
<DC-IRC> [Discord] <Werner> I don't think anything except kernel bumping has been done for this family
<Peppi> Oh ok
<Peppi> Any ideas why the hard drive doesn't mount on a reboot but does on a cold startup?
CrashTestDummy has quit [Quit: Leaving]
<DC-IRC> [Discord] <marty1938> Is it possible to force build to not use docker? I have Ubuntu 22.04.4 still the build tool tries to download the docker
zeemate has joined #armbian
arch3r has quit [Ping timeout: 240 seconds]
arch3r has joined #armbian
Laskolnyk has quit [Quit: leaving]
arch3r has quit [Quit: bye]
arch3r has joined #armbian
<DC-IRC> [Discord] <marty1938> After some research i found this: PREFER_DOCKER=no
archetech has quit [Quit: Konversation terminated!]
archetech has joined #armbian
<DC-IRC> [Discord] <menu> @werner would probably be useful to include the vulnerable version numbers in that announcement
<DC-IRC> [Discord] <menu> (OpenSSH up to 4.4p1, plus versions from 8.5p1 to 9.7p1)
<DC-IRC> [Discord] <rpardini> yeah but tl,dr is: every Debian since bullseye, and Ubuntu since Jammy, is affected so just go patch
<DC-IRC> [Discord] <Werner> True. All userspaces we support (so excluding csc/eos hidden behind EXPERT) are affected and can be patched.
jantones_ has quit [Remote host closed the connection]
jantones has joined #armbian
LanDi has joined #armbian
jantones has quit [Remote host closed the connection]
jantones_ has joined #armbian
CapNemo has quit [Ping timeout: 240 seconds]
katerX has quit [Ping timeout: 252 seconds]
katerX has joined #armbian
p0g0 has quit [Read error: Connection reset by peer]
p0g0 has joined #armbian
LanDi has quit [Remote host closed the connection]
LanDi has joined #armbian
LanDi1 has joined #armbian
LanDi has quit [Ping timeout: 240 seconds]
LanDi1 is now known as LanDi
buzzmarshall has joined #armbian
<DC-IRC> [Discord] <mndphaser> https://project-copacetic.github.io/copacetic/website/ for people using containers on their armbian machines
zeemate has quit [Ping timeout: 264 seconds]
alekksander has joined #armbian
LanDi has quit [Remote host closed the connection]
yang has quit [Ping timeout: 256 seconds]
yang has joined #armbian
Dagger has quit [Ping timeout: 264 seconds]
danilogondolfo has quit [Ping timeout: 264 seconds]
danilogondolfo has joined #armbian
darkgeekyang has quit [Ping timeout: 240 seconds]
darkgeekyang has joined #armbian
Dagger has joined #armbian
darkgeekyang has quit [Ping timeout: 260 seconds]
darkgeekyang has joined #armbian
alekksander has quit [Ping timeout: 272 seconds]
Jin^eLD has joined #armbian
<Jin^eLD> hi, is there a more or less straightforward way to see which kernel patches exactly are being applied for a given board configuration, without actually building the whole image?
<Jin^eLD> I tried following the scripts, but got lost somehow
Smedles has quit [Quit: http://quassel-irc.org - Chat comfortably. Anywhere.]
Smedles has joined #armbian
zeemate has joined #armbian
jantones_ has quit [Ping timeout: 260 seconds]
jantones has joined #armbian
LanDi has joined #armbian
<DC-IRC> [Discord] <rpardini> more or less. if you're interested in kernel patches, `./compile.sh BOARD=xx BRANCH=yy rewrite-kernel-patches` will give you the patching summary and a kernel git tree with all patches.
LanDi has quit [Ping timeout: 260 seconds]
<Jin^eLD> I wanted to avoid messing with docker and compile.sh wanted root access, which was a no-go for me, so I was hoping to somehow figure it out without having to run it as I do not really need to compile armbian in the end; but I figured that it seems to apply everything listed in series.conf regardless of the board, for instance for rockchip it applies all rockchip patches no matter which rk board
<Jin^eLD> one is compiling for? build/patch/kernel/archive/rockchip-6.6
<Jin^eLD> am I correct?
LanDi has joined #armbian
lyri has joined #armbian
LanDi has quit [Remote host closed the connection]
alekksander has joined #armbian
crabbedhaloablut has joined #armbian
<DC-IRC> [Discord] <rpardini> yes/no/depends
<DC-IRC> [Discord] <rpardini> just run the build and find out
<DC-IRC> [Discord] <alexl83> I got a segfault during update-initramfs while running latest trunk and building orangepizero3 6.6.36
<DC-IRC> [Discord] <alexl83> will chek logs
alekksander has quit [Remote host closed the connection]
<DC-IRC> [Discord] <narga_64> Jin: there is only one kernel per board family. So if your board is in the `rockchip64` family, the kernel has all patches applied from the `rockchip64` patch directory. Which is a lot 😄 But building different kernels for every board would be a lot
<DC-IRC> [Discord] <srepac> updating armbian (jammy or bookworm) only gets us openssh 8.9 (jammy) and 9.2 (bookworm) which are both still vulnerable
<DC-IRC> [Discord] <srepac> updating armbian (jammy or bookworm) only gets us openssh 8.9 (jammy) and 9.2 (bookworm) which are both still vulnerable https://discord.com/channels/854735915313659944/854735915313659948/1257638405496377406
<DC-IRC> [Discord] <srepac> a lot of good updating does us
<DC-IRC> [Discord] <srepac> ```[root@tritium-h5 ~]# grep openssh /tmp/pacmanquery
<DC-IRC> [Discord] <srepac> 1:9.2p1-2+deb12u3 openssh-client/stable-security,now
<DC-IRC> [Discord] <srepac> 1:9.2p1-2+deb12u3 openssh-server/stable-security,now
<DC-IRC> [Discord] <srepac> 1:9.2p1-2+deb12u3 openssh-sftp-server/stable-security,now
<DC-IRC> [Discord] <srepac> [root@tritium-h5 ~]# cat /etc/os-release
<DC-IRC> [Discord] <srepac> PRETTY_NAME="Armbian 24.5.1 bookworm"
<DC-IRC> [Discord] <srepac> NAME="Debian GNU/Linux"
<DC-IRC> [Discord] <srepac> VERSION_ID="12"
<DC-IRC> [Discord] <srepac> VERSION="12 (bookworm)"
<DC-IRC> [Discord] <srepac> VERSION_CODENAME=bookworm
<DC-IRC> [Discord] <srepac> ```
<DC-IRC> [Discord] <srepac> ```[root@orangepizero ~]# grep openssh /tmp/pacmanquery
<DC-IRC> [Discord] <srepac> 1:8.9p1-3ubuntu0.7 openssh-client/jammy-updates,now
<DC-IRC> [Discord] <srepac> 1:8.9p1-3ubuntu0.7 openssh-server/jammy-updates,now
<DC-IRC> [Discord] <srepac> 1:8.9p1-3ubuntu0.7 openssh-sftp-server/jammy-updates,now
<DC-IRC> [Discord] <srepac> [root@orangepizero ~]# cat /etc/os-release
<DC-IRC> [Discord] <srepac> PRETTY_NAME="Armbian 24.5.1 jammy"
<DC-IRC> [Discord] <srepac> NAME="Ubuntu"
<DC-IRC> [Discord] <srepac> VERSION_ID="22.04"
<DC-IRC> [Discord] <srepac> VERSION="22.04.4 LTS (Jammy Jellyfish)"
<DC-IRC> [Discord] <srepac> VERSION_CODENAME=jammy```
<DC-IRC> [Discord] <srepac> ```[root@orangepizero ~]# apt list | grep openssh
<DC-IRC> [Discord] <srepac> 1:8.9p1-3ubuntu0.7 openssh-client/jammy-updates,now
<DC-IRC> [Discord] <srepac> 1:8.9p1-3ubuntu0.7 openssh-server/jammy-updates,now
<DC-IRC> [Discord] <srepac> 1:8.9p1-3ubuntu0.7 openssh-sftp-server/jammy-updates,now
<DC-IRC> [Discord] <srepac> [root@orangepizero ~]# cat /etc/os-release
<DC-IRC> [Discord] <srepac> PRETTY_NAME="Armbian 24.5.1 jammy"
<DC-IRC> [Discord] <srepac> NAME="Ubuntu"
<DC-IRC> [Discord] <srepac> VERSION_ID="22.04"
<DC-IRC> [Discord] <srepac> VERSION="22.04.4 LTS (Jammy Jellyfish)"
<DC-IRC> [Discord] <srepac> VERSION_CODENAME=jammy```
<DC-IRC> [Discord] <srepac> ```[root@tritium-h5 ~]# apt list 2> /dev/null | grep openssh
<DC-IRC> [Discord] <srepac> 1:9.2p1-2+deb12u3 openssh-client/stable-security,now
<DC-IRC> [Discord] <srepac> 1:9.2p1-2+deb12u3 openssh-server/stable-security,now
<DC-IRC> [Discord] <srepac> 1:9.2p1-2+deb12u3 openssh-sftp-server/stable-security,now
<DC-IRC> [Discord] <srepac> [root@tritium-h5 ~]# cat /etc/os-release
<DC-IRC> [Discord] <srepac> PRETTY_NAME="Armbian 24.5.1 bookworm"
<DC-IRC> [Discord] <srepac> NAME="Debian GNU/Linux"
<DC-IRC> [Discord] <srepac> VERSION_ID="12"
<DC-IRC> [Discord] <srepac> VERSION="12 (bookworm)"
<Jin^eLD> narga_64: OK, thanks for confirming, this is basically want I saw, just wanted to be sure
<DC-IRC> [Discord] <srepac> VERSION_CODENAME=bookworm
<DC-IRC> [Discord] <srepac> ```
<DC-IRC> [Discord] <srepac> ```[root@orangepizero ~]# apt list 2> /dev/null | grep openssh
<DC-IRC> [Discord] <srepac> 1:8.9p1-3ubuntu0.7 openssh-client/jammy-updates,now
<DC-IRC> [Discord] <srepac> 1:8.9p1-3ubuntu0.7 openssh-server/jammy-updates,now
<DC-IRC> [Discord] <srepac> 1:8.9p1-3ubuntu0.7 openssh-sftp-server/jammy-updates,now
<DC-IRC> [Discord] <srepac> [root@orangepizero ~]# cat /etc/os-release
<DC-IRC> [Discord] <srepac> PRETTY_NAME="Armbian 24.5.1 jammy"
<DC-IRC> [Discord] <srepac> NAME="Ubuntu"
<DC-IRC> [Discord] <srepac> VERSION_ID="22.04"
<DC-IRC> [Discord] <srepac> VERSION="22.04.4 LTS (Jammy Jellyfish)"
<DC-IRC> [Discord] <srepac> VERSION_CODENAME=jammy```
lyri has quit [Remote host closed the connection]
<Jin^eLD> what defines the order in which the kernel patches are being applied during the build?
laz0r has quit [Read error: Connection reset by peer]
laz0r_ has joined #armbian
laz0r_ is now known as laz0r
<DC-IRC> [Matrix] <schwar3kat:tchncs.de> For Jammy CVE-2024-6387 fixed in openssh - 1:8.9p1-3ubuntu0.10
<DC-IRC> [Matrix] <schwar3kat:tchncs.de> For Bookworm CVE-2024-6387 fixed in openssh - 1:9.2p1-2+deb12u3
<DC-IRC> [Matrix] <schwar3kat:tchncs.de> Updating worked for me on:
<DC-IRC> [Matrix] <schwar3kat:tchncs.de> Armbian 22.05.3 Jammy
<DC-IRC> [Matrix] <schwar3kat:tchncs.de> Armbian 24.5.1 Bookworm
<DC-IRC> [Matrix] <schwar3kat:tchncs.de> https://security-tracker.debian.org/tracker/CVE-2024-6387
danilogondolfo has quit [Remote host closed the connection]
schwar3kat has joined #armbian
schwar3kat has quit [Client Quit]
oida has quit [Quit: byez]
archetech has quit [Quit: Leaving]
RPi4B has joined #armbian
RPi4B is now known as Infinity_Q
Infinity_Q has quit [Remote host closed the connection]
RPi4B has joined #armbian
RPi4B has quit [Read error: Connection reset by peer]
RPi4B has joined #armbian
RPi4B has quit [Remote host closed the connection]
RPi4B has joined #armbian
RPi4B has quit [Remote host closed the connection]
RPi4B has joined #armbian
p0g0 has quit [Quit: p0g0]
RPi4B has quit [Read error: Connection reset by peer]
RPi4B has joined #armbian
RPi4B has quit [Remote host closed the connection]
RPi4B has joined #armbian
RPi4B has quit [Read error: Connection reset by peer]
Lucanis has quit [Ping timeout: 255 seconds]
Lucanis has joined #armbian
RPi4B has joined #armbian
RPi4B has quit [Read error: Connection reset by peer]
RPi4B has joined #armbian
RPi4B has quit [Ping timeout: 264 seconds]
zeemate has quit [Ping timeout: 255 seconds]