astlinux-users Mailing List for AstLinux (Page 49)

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 422-6466

Hello all,

What do I need to do to enable AES, like put a modprobe in rc.local?  I'm
using an Atom C2358.  Thank you.

JT

Announcing Pre-Release Version: astlinux-1.3-4048-3bfd9f

Significant development on WireGuard VPN support, related to available iOS and Android WireGuard Apps
--
iOS WireGuard (iOS 12+)
https://itunes.apple.com/us/app/wireguard/id1441195209?ls=1&mt=8

Android WireGuard
https://play.google.com/store/apps/details?id=com.wireguard.android
--
Re-read first half of WireGuard VPN Configuration -- https://doc.astlinux-project.org/userdoc:tt_wireguard_vpn

The AstLinux Team is regularly upgrading packages containing security and bug fixes as well as adding new features of our own.

-- Asterisk, version bump to 13.24.1 and pjsip 2.8

-- Linux Kernel 3.16.61, security and bug fixes.

-- WireGuard VPN, version bump to 0.0.20181218

-- WireGuard VPN, add wireguard-mobile-client script to manage mobile clients.  Also used by the web interface.

-- Web Interface, WireGuard VPN sub-tab, add "Mobile Client Defaults" and "Mobile Client Credentials" sections.

-- Web Interface, Status tab, improve layout of "WireGuard VPN Status" section.

-- arnofw (AIF), add WIREGUARD_ALLOW_OPENVPN rc.conf variable, Allow WireGuard tunnel to OpenVPN tunnel(s), disabled by default.

-- wol-host, new command to send Wake-on-LAN packet to specified host, by IP or DNS name.
  Example: wol-host --ping 192.168.101.13
  More info: wol-host --help

-- fossil, new feature to optionally send commit notifications via email while using 'fossil-commit'.
  New rc.conf variable FOSSIL_NOTIFY must be defined (via user.conf) as To: email address to enable.
  Additional new, optional rc.conf variables: FOSSIL_NOTIFY_FROM, FOSSIL_HOSTNAME

-- Complete Pre-Release ChangeLog:
  https://s3.amazonaws.com/beta.astlinux-project/astlinux-changelog/ChangeLog.txt

New Documentation Topics:
EdgeRouter-X VPN Endpoint -- https://doc.astlinux-project.org/userdoc:tt_edgerouter-x

Updated Documentation Topics:
WireGuard VPN Configuration -- https://doc.astlinux-project.org/userdoc:tt_wireguard_vpn

The "AstLinux Pre-Release ChangeLog" and "Repository URL" entries can be found under the "Development" tab of the AstLinux Project web site ...

AstLinux Project -> Development
https://www.astlinux-project.org/dev.html

AstLinux Team

Hi David

A number of reasons why I chose it actually. Note that I wanted a standard router with Wifi and 4G backup for my Micro sites e.g. no Astlinux box. There are less reasons when the Netgear LB router is used purely for 4G backup for an Astlinux appliance but still some.

  1.  A far more comprehensive feature set considering it is based on OpenWRT. The main features I wanted was OpenVPN (hopefully Wireguard eventually) for access during 4G failover and SSH for management (including SSH tunnelling) but there are also many more.
  2.  Dual external antennas. Not proven but I suspect that they will be better than the internal Netgear antenna.
  3.  Better support and regular updates. I have read too much recently regarding residential grade products having known vulnerabilities left because they are EoL.

E.g. https://www.digitaltrends.com/computing/despite-serious-security-flaws-d-link-may-never-patch-some-of-its-routers/
4)   Appears to have a much better build quality with a metal case and power connector lock
5)   Its actually not that much more expensive e.g. $50 AU

I have not used it in production yet so I will let you know how I go. I still have some concerns about it as with all new products but I at least need to get it out there.

Regards
Michael Knill

From: David Kerr <da...@ke...>
Reply-To: AstLinux List <ast...@li...>
Date: Monday, 7 January 2019 at 8:47 am
To: AstLinux List <ast...@li...>
Subject: Re: [Astlinux-users] Teltonika RUT240 and OpenVPN to Astlinux

Michael, how does the RUT240 compare to the Netgear LB1120/LB1121.  Any reason why you choose the former?

Thanks
David

On Sun, Jan 6, 2019 at 2:09 AM Michael Knill <mic...@ip...<mailto:mic...@ip...>> wrote:
Doh! You are correct.
Its all working now. Quite a neat little unit actually.
Sorry to miss the obvious again.

Regards
Michael Knill

On 6/1/19, 9:39 am, "Lonnie Abelbeck" <li...@lo...<mailto:li...@lo...>> wrote:

    Hi Michael,

    AstLinux's OpenVPN requires at minimum, RSA Certificates.

    I know some OpenWrt's support RSA Certificates, personally I would not use OpenVPN without RSA Certificates.

    Could the "TLS" mode be with RSA Certificates ?

    > Wireguard is so much easier to understand!

    YES !  And configure, and performs better, and ...

    Lonnie

    > On Jan 5, 2019, at 3:38 PM, Michael Knill <mic...@ip...<mailto:mic...@ip...>> wrote:
    >
    > Hi Group
    >
    > I am considering using these devices for both a standalone router and 4G gateway. They are based on OpenWRT and seem pretty nice:
    > https://teltonika.lt/product/rut240/
    >
    > One thing I am having difficulties with is setting up OpenVPN to Astlinux (no Wireguard yet). The only authentication methods I have with the RUT240 are Static Key, Password, TLS & TLS/Password. As there is no Certificate option, can I still connect into Astlinux? Wireguard is so much easier to understand!
    >
    > Regards
    > Michael Knill
    > _______________________________________________
    > Astlinux-users mailing list
    > Ast...@li...<mailto:Ast...@li...>
    > https://lists.sourceforge.net/lists/listinfo/astlinux-users
    >
    > Donations to support AstLinux are graciously accepted via PayPal to pa...@kr...<mailto:pa...@kr...>.

    _______________________________________________
    Astlinux-users mailing list
    Ast...@li...<mailto:Ast...@li...>
    https://lists.sourceforge.net/lists/listinfo/astlinux-users

    Donations to support AstLinux are graciously accepted via PayPal to pa...@kr...<mailto:pa...@kr...>.

_______________________________________________
Astlinux-users mailing list
Ast...@li...<mailto:Ast...@li...>
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to pa...@kr...<mailto:pa...@kr...>.

Michael, how does the RUT240 compare to the Netgear LB1120/LB1121.  Any
reason why you choose the former?

Thanks
David

On Sun, Jan 6, 2019 at 2:09 AM Michael Knill <
mic...@ip...> wrote:

> Doh! You are correct.
> Its all working now. Quite a neat little unit actually.
> Sorry to miss the obvious again.
>
> Regards
> Michael Knill
>
> On 6/1/19, 9:39 am, "Lonnie Abelbeck" <li...@lo...> wrote:
>
>     Hi Michael,
>
>     AstLinux's OpenVPN requires at minimum, RSA Certificates.
>
>     I know some OpenWrt's support RSA Certificates, personally I would not
> use OpenVPN without RSA Certificates.
>
>     Could the "TLS" mode be with RSA Certificates ?
>
>
>
>     > Wireguard is so much easier to understand!
>
>     YES !  And configure, and performs better, and ...
>
>
>     Lonnie
>
>
>
>
>
>     > On Jan 5, 2019, at 3:38 PM, Michael Knill <
> mic...@ip...> wrote:
>     >
>     > Hi Group
>     >
>     > I am considering using these devices for both a standalone router
> and 4G gateway. They are based on OpenWRT and seem pretty nice:
>     > https://teltonika.lt/product/rut240/
>     >
>     > One thing I am having difficulties with is setting up OpenVPN to
> Astlinux (no Wireguard yet). The only authentication methods I have with
> the RUT240 are Static Key, Password, TLS & TLS/Password. As there is no
> Certificate option, can I still connect into Astlinux? Wireguard is so much
> easier to understand!
>     >
>     > Regards
>     > Michael Knill
>     > _______________________________________________
>     > Astlinux-users mailing list
>     > Ast...@li...
>     > https://lists.sourceforge.net/lists/listinfo/astlinux-users
>     >
>     > Donations to support AstLinux are graciously accepted via PayPal to
> pa...@kr....
>
>
>
>     _______________________________________________
>     Astlinux-users mailing list
>     Ast...@li...
>     https://lists.sourceforge.net/lists/listinfo/astlinux-users
>
>     Donations to support AstLinux are graciously accepted via PayPal to
> pa...@kr....
>
>
>
> _______________________________________________
> Astlinux-users mailing list
> Ast...@li...
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>
> Donations to support AstLinux are graciously accepted via PayPal to
> pa...@kr....

Doh! You are correct. 
Its all working now. Quite a neat little unit actually.
Sorry to miss the obvious again.

Regards
Michael Knill

On 6/1/19, 9:39 am, "Lonnie Abelbeck" <li...@lo...> wrote:

    Hi Michael,

    AstLinux's OpenVPN requires at minimum, RSA Certificates.

    I know some OpenWrt's support RSA Certificates, personally I would not use OpenVPN without RSA Certificates.

    Could the "TLS" mode be with RSA Certificates ?

    > Wireguard is so much easier to understand!

    YES !  And configure, and performs better, and ...

    Lonnie

    > On Jan 5, 2019, at 3:38 PM, Michael Knill <mic...@ip...> wrote:
    > 
    > Hi Group
    >  
    > I am considering using these devices for both a standalone router and 4G gateway. They are based on OpenWRT and seem pretty nice:
    > https://teltonika.lt/product/rut240/
    >  
    > One thing I am having difficulties with is setting up OpenVPN to Astlinux (no Wireguard yet). The only authentication methods I have with the RUT240 are Static Key, Password, TLS & TLS/Password. As there is no Certificate option, can I still connect into Astlinux? Wireguard is so much easier to understand!
    >  
    > Regards
    > Michael Knill
    > _______________________________________________
    > Astlinux-users mailing list
    > Ast...@li...
    > https://lists.sourceforge.net/lists/listinfo/astlinux-users
    > 
    > Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....

    _______________________________________________
    Astlinux-users mailing list
    Ast...@li...
    https://lists.sourceforge.net/lists/listinfo/astlinux-users

    Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....

Hi Michael,

AstLinux's OpenVPN requires at minimum, RSA Certificates.

I know some OpenWrt's support RSA Certificates, personally I would not use OpenVPN without RSA Certificates.

Could the "TLS" mode be with RSA Certificates ?

> Wireguard is so much easier to understand!

YES !  And configure, and performs better, and ...

Lonnie

> On Jan 5, 2019, at 3:38 PM, Michael Knill <mic...@ip...> wrote:
> 
> Hi Group
>  
> I am considering using these devices for both a standalone router and 4G gateway. They are based on OpenWRT and seem pretty nice:
> https://teltonika.lt/product/rut240/
>  
> One thing I am having difficulties with is setting up OpenVPN to Astlinux (no Wireguard yet). The only authentication methods I have with the RUT240 are Static Key, Password, TLS & TLS/Password. As there is no Certificate option, can I still connect into Astlinux? Wireguard is so much easier to understand!
>  
> Regards
> Michael Knill
> _______________________________________________
> Astlinux-users mailing list
> Ast...@li...
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....

Hi Group

I am considering using these devices for both a standalone router and 4G gateway. They are based on OpenWRT and seem pretty nice:
https://teltonika.lt/product/rut240/

One thing I am having difficulties with is setting up OpenVPN to Astlinux (no Wireguard yet). The only authentication methods I have with the RUT240 are Static Key, Password, TLS & TLS/Password. As there is no Certificate option, can I still connect into Astlinux? Wireguard is so much easier to understand!

Regards
Michael Knill

Thanks Lonnie and David

Yes it was the fact that I needed separate networks for the Primary and Backup peers so adding both of these to the same interface should solve this problem.
Sorry guys but could I please have a little help with doing this.

Regards
Michael Knill

From: David Kerr <da...@ke...>
Reply-To: AstLinux List <ast...@li...>
Date: Tuesday, 1 January 2019 at 6:21 pm
To: AstLinux List <ast...@li...>
Subject: Re: [Astlinux-users] Multiple wg interfaces

Michael,
  A single wg interface can have multiple IP addresses.  They can be different subnets too. You will have to manually edit the config files.

David.

On Tue, Jan 1, 2019 at 6:37 AM Michael Knill <mic...@ip...<mailto:mic...@ip...>> wrote:
Hi group

Here is my scenario. I have primary and backup Wireguard VPN Peers that multiple Astlinux boxes will be connecting to.
I assume that I will need different wgx interfaces for this as I cant have the same IP Address.
If so, just wondering how to set this up in Astlinux?

Regards
Michael Knill
_______________________________________________
Astlinux-users mailing list
Ast...@li...<mailto:Ast...@li...>
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to pa...@kr...<mailto:pa...@kr...>.
--
David Kerr Sent from Gmail Mobile

Hi Michael,

You can do a lot with a single wg0 interface, and makes the routing and firewall forwarding easier to keep track of.

> Here is my scenario. I have primary and backup Wireguard VPN Peers that multiple Astlinux boxes will be connecting to.

I'm not sure what you are describing, some sort of network diagram would help.

Possibly describing my personal edge AstLinux box might help ...

Primary WAN - Cable modem
Failover WAN - 4G/LTE (Netgear LB1121)

WireGuard VPN:

* Mobile Client - Multiple iOS clients

* Peer Config:
  - voip1: remote AstLinux box 10.4.1.11
  - linode: failover AstLinux in the cloud
--
## WireGuard VPN Peers
##
[Peer]
## voip1
PublicKey = BG...
Endpoint = voip1.exampble.tld:51820
AllowedIPs = 10.4.1.11/32
PersistentKeepalive = 25

[Peer]
## linode
PublicKey = Om...
Endpoint = 96.x.x.x:51820
AllowedIPs = 0.0.0.0/0, ::/0
PersistentKeepalive = 25
--

-- /mnt/kd/wan-failover.script --
#!/bin/sh

##
## wan-failover action script
##
## Automatically called after any WAN link change
##
state="$1"
primary_if="$2"
primary_gw="$3"
secondary_if="$4"
secondary_gw="$5"
secondary_gw_ipv6="$6"

linode_ip="96.x.x.x"

. /etc/rc.conf

wg_failover()
{
  local state="$1" endpoint_ip ip_file

  ip_file="/tmp/wan_wg_failover"

  case $state in

  SECONDARY)
    endpoint_ip="$(wg show wg0 endpoints | \
      awk '$1 == "BG..." { split($2, field, ":"); print field[1]; nextfile; }')"
    if [ -n "$endpoint_ip" ]; then
      echo "$endpoint_ip" > "$ip_file"
      ip route add "$endpoint_ip" dev $EXT2IF
      fping -q -t 1000 10.4.1.11
    else
      rm -f "$ip_file"
    fi
    ;;

  PRIMARY)
    if [ -f "$ip_file" ]; then
      endpoint_ip="$(cat "$ip_file")"
      rm "$ip_file"
      ip route del "$endpoint_ip" dev $EXT2IF
      fping -q -t 1000 10.4.1.11
    fi
    ;;

  esac
}

case $state in

SECONDARY)
  ## Switched to Failover using secondary WAN link
  ip route add "$linode_ip" dev $EXT2IF
  fping -q -t 1000 "$secondary_gw"

  asterisk -rx "sip reload" >/dev/null
  wg_failover $state
  ;;

PRIMARY)
  ## Switched back to normal using primary WAN link
  ip route del "$linode_ip" dev $EXT2IF
  fping -q -t 1000 "$secondary_gw"

  asterisk -rx "sip reload" >/dev/null
  wg_failover $state
  ;;

esac

exit 0
--

Studying the wan-failover.script, you can see how the peers are routed over EXT2IF during failover, I could do the same for any active "Mobile Clients" but have never needed that feature yet.

In summary, Wireguard over IPv4-only establishes a dual stack IPv4/IPv6 private network 10.4.1.0/24 and IPv6 ULA/48 only using a single wg0 interface.

Constantly connected is the remote AstLinux box and the failover Linode AstLinux in the cloud. The "Mobile Clients" are remotely initiated using dynamic endpoints.

Michael, while my personal setup is probably not exactly what you want at a customer's site, I expect there are some common features.

Lonnie

> On Jan 1, 2019, at 12:53 AM, David Kerr <Da...@Ke...> wrote:
> 
> Michael,
>   A single wg interface can have multiple IP addresses.  They can be different subnets too. You will have to manually edit the config files. 
> 
> David. 
> 
> On Tue, Jan 1, 2019 at 6:37 AM Michael Knill <mic...@ip...> wrote:
> Hi group
> 
>  
> 
> Here is my scenario. I have primary and backup Wireguard VPN Peers that multiple Astlinux boxes will be connecting to.
> 
> I assume that I will need different wgx interfaces for this as I cant have the same IP Address.
> 
> If so, just wondering how to set this up in Astlinux?
> 
>  
> 
> Regards
> 
> Michael Knill

Michael,
  A single wg interface can have multiple IP addresses.  They can be
different subnets too. You will have to manually edit the config files.

David.

On Tue, Jan 1, 2019 at 6:37 AM Michael Knill <
mic...@ip...> wrote:

> Hi group
>
>
>
> Here is my scenario. I have primary and backup Wireguard VPN Peers that
> multiple Astlinux boxes will be connecting to.
>
> I assume that I will need different wgx interfaces for this as I cant have
> the same IP Address.
>
> If so, just wondering how to set this up in Astlinux?
>
>
>
> Regards
>
> Michael Knill
> _______________________________________________
> Astlinux-users mailing list
> Ast...@li...
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>
> Donations to support AstLinux are graciously accepted via PayPal to
> pa...@kr....

-- 
David Kerr Sent from Gmail Mobile

Hi group

Here is my scenario. I have primary and backup Wireguard VPN Peers that multiple Astlinux boxes will be connecting to.
I assume that I will need different wgx interfaces for this as I cant have the same IP Address.
If so, just wondering how to set this up in Astlinux?

Regards
Michael Knill

Interesting, an independent, related comparison for EdgeRouter-X ...

WireGuard vs. IPSec vs. OpenVPN: VPN performance on Ubiquiti EdgeRouter Lite and X.
https://an.undulating.space/post/181227-er_alternate_firmware_vpn_benchmarks/

My personal measurements of WireGuard iperf throughput of 180 Mbps for ER-X/OpenWrt is in line with the author's measurements.

Same conclusion, OpenWrt on ER-X using WireGuard is a sweet-spot solution.

Lonnie

> On Dec 27, 2018, at 4:57 PM, Michael Knill <mic...@ip...> wrote:
> 
> Great stuff. Thanks Lonnie. 
> I use the ER-X and it's a great little box. It works well with EdgeOS and OpenVPN back to Astlinux if you don't require the performance.
> 
> Regards
> Michael Knill
> 
> On 28/12/18, 1:41 am, "Lonnie Abelbeck" <li...@lo...> wrote:
> 
>    New documentation added to our WiKi...
> 
>    When connecting a constellation of remote LAN's over a VPN centered around AstLinux, there are times where a full AstLinux installation can't be justified for the remote VPN endpoint.
> 
>    It could be said that the EdgeRouter-X with OpenWrt and the WireGuard VPN in the kernel is an ideal solution for a remote VPN endpoint. This documentation describes how to install the current release of OpenWrt 18.06.1 on a Ubiquiti Networks EdgeRouter-X (ER-X).
> 
>    EdgeRouter-X VPN Endpoint
>    https://doc.astlinux-project.org/userdoc:tt_edgerouter-x
> 
>    AstLinux Team
> 
> 
> 
>    _______________________________________________
>    Astlinux-users mailing list
>    Ast...@li...
>    https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
>    Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....
> 
> 
> 
> _______________________________________________
> Astlinux-users mailing list
> Ast...@li...
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....

Great stuff. Thanks Lonnie. 
I use the ER-X and it's a great little box. It works well with EdgeOS and OpenVPN back to Astlinux if you don't require the performance.

Regards
Michael Knill

On 28/12/18, 1:41 am, "Lonnie Abelbeck" <li...@lo...> wrote:

    New documentation added to our WiKi...

    When connecting a constellation of remote LAN's over a VPN centered around AstLinux, there are times where a full AstLinux installation can't be justified for the remote VPN endpoint.

    It could be said that the EdgeRouter-X with OpenWrt and the WireGuard VPN in the kernel is an ideal solution for a remote VPN endpoint. This documentation describes how to install the current release of OpenWrt 18.06.1 on a Ubiquiti Networks EdgeRouter-X (ER-X).

    EdgeRouter-X VPN Endpoint
    https://doc.astlinux-project.org/userdoc:tt_edgerouter-x

    AstLinux Team

    _______________________________________________
    Astlinux-users mailing list
    Ast...@li...
    https://lists.sourceforge.net/lists/listinfo/astlinux-users

    Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....

New documentation added to our WiKi...

When connecting a constellation of remote LAN's over a VPN centered around AstLinux, there are times where a full AstLinux installation can't be justified for the remote VPN endpoint.

It could be said that the EdgeRouter-X with OpenWrt and the WireGuard VPN in the kernel is an ideal solution for a remote VPN endpoint. This documentation describes how to install the current release of OpenWrt 18.06.1 on a Ubiquiti Networks EdgeRouter-X (ER-X).

EdgeRouter-X VPN Endpoint
https://doc.astlinux-project.org/userdoc:tt_edgerouter-x

AstLinux Team

Announcing Pre-Release Version: astlinux-1.3-4025-663f0b

Asterisk 13.x version bump.

Significant development on WireGuard VPN support, related to available iOS and Android WireGuard Apps
--
iOS WireGuard beta (iOS 12+)
https://testflight.apple.com/join/63I19SDT

Android WireGuard
https://play.google.com/store/apps/details?id=com.wireguard.android
--
Re-read first half of WireGuard VPN Configuration
https://doc.astlinux-project.org/userdoc:tt_wireguard_vpn

The AstLinux Team is regularly upgrading packages containing security and bug fixes as well as adding new features of our own.

-- Asterisk, version bump to 13.24.0 and pjsip 2.8

-- Linux Kernel 3.16.61, security and bug fixes.

-- WireGuard VPN, version bump to 0.0.20181119

-- WireGuard VPN, add wireguard-mobile-client script to manage mobile clients.  Also used by the web interface.

-- Web Interface, WireGuard VPN sub-tab, add "Mobile Client Defaults" and "Mobile Client Credentials" sections.

-- Web Interface, Status tab, improve layout of "WireGuard VPN Status" section.

-- arnofw (AIF), add WIREGUARD_ALLOW_OPENVPN rc.conf variable, Allow WireGuard tunnel to OpenVPN tunnel(s), disabled by default.

-- alert, on boot create a /etc/motd MOTD (Message of the Day) file containing system information.
  The MOTD is displayed at post-login by ssh, console and web interface CLI tab login.
  New rc.conf variable ENABLE_MOTD, display MOTD at post-login, "yes" or "no", defaults to "yes"

-- wol-host, new command to send Wake-on-LAN packet to specified host, by IP or DNS name.
 Example: wol-host --ping 192.168.101.13
 More info: wol-host --help

-- fossil, new feature to optionally send commit notifications via email while using 'fossil-commit'.
 New rc.conf variable FOSSIL_NOTIFY must be defined (via user.conf) as To: email address to enable.
 Additional new, optional rc.conf variables: FOSSIL_NOTIFY_FROM, FOSSIL_HOSTNAME

-- Complete Pre-Release ChangeLog:
 https://s3.amazonaws.com/beta.astlinux-project/astlinux-changelog/ChangeLog.txt

New Documentation Topics:
(none)

Updated Documentation Topics:
WireGuard VPN Configuration -- https://doc.astlinux-project.org/userdoc:tt_wireguard_vpn

The "AstLinux Pre-Release ChangeLog" and "Repository URL" entries can be found under the "Development" tab of the AstLinux Project web site ...

AstLinux Project -> Development
https://www.astlinux-project.org/dev.html

AstLinux Team

Announcing Pre-Release Version: astlinux-1.3-4012-9a9605

Significant development on WireGuard VPN support, related to available iOS and Android WireGuard Apps
--
iOS WireGuard beta (iOS 12+)
https://testflight.apple.com/join/63I19SDT

Android WireGuard
https://play.google.com/store/apps/details?id=com.wireguard.android
--
Re-read first half of WireGuard VPN Configuration -- https://doc.astlinux-project.org/userdoc:tt_wireguard_vpn

The AstLinux Team is regularly upgrading packages containing security and bug fixes as well as adding new features of our own.

-- Linux Kernel 3.16.61, security and bug fixes.

-- WireGuard VPN, version bump to 0.0.20181119

-- WireGuard VPN, add wireguard-mobile-client script to manage mobile clients.  Also used by the web interface.

-- Web Interface, WireGuard VPN sub-tab, add "Mobile Client Defaults" and "Mobile Client Credentials" sections.

-- Web Interface, Status tab, improve layout of "WireGuard VPN Status" section.

-- arnofw (AIF), add WIREGUARD_ALLOW_OPENVPN rc.conf variable, Allow WireGuard tunnel to OpenVPN tunnel(s), disabled by default.

-- alert, on boot create a /etc/motd MOTD (Message of the Day) file containing system information.
   The MOTD is displayed at post-login by ssh, console and web interface CLI tab login.
   New rc.conf variable ENABLE_MOTD, display MOTD at post-login, "yes" or "no", defaults to "yes"

-- wol-host, new command to send Wake-on-LAN packet to specified host, by IP or DNS name.
  Example: wol-host --ping 192.168.101.13
  More info: wol-host --help

-- fossil, new feature to optionally send commit notifications via email while using 'fossil-commit'.
  New rc.conf variable FOSSIL_NOTIFY must be defined (via user.conf) as To: email address to enable.
  Additional new, optional rc.conf variables: FOSSIL_NOTIFY_FROM, FOSSIL_HOSTNAME

-- Complete Pre-Release ChangeLog:
  https://s3.amazonaws.com/beta.astlinux-project/astlinux-changelog/ChangeLog.txt

New Documentation Topics:
(none)

Updated Documentation Topics:
WireGuard VPN Configuration -- https://doc.astlinux-project.org/userdoc:tt_wireguard_vpn

The "AstLinux Pre-Release ChangeLog" and "Repository URL" entries can be found under the "Development" tab of the AstLinux Project web site ...

AstLinux Project -> Development
https://www.astlinux-project.org/dev.html

AstLinux Team

Announcing Pre-Release Version: astlinux-1.3-3996-1662d2

Significant development on WireGuard VPN support, related to available iOS and Android WireGuard Apps
--
iOS WireGuard beta (iOS 12+)
https://testflight.apple.com/join/63I19SDT

Android WireGuard
https://play.google.com/store/apps/details?id=com.wireguard.android
--
Re-read first half of WireGuard VPN Configuration -- https://doc.astlinux-project.org/userdoc:tt_wireguard_vpn

The AstLinux Team is regularly upgrading packages containing security and bug fixes as well as adding new features of our own.

-- Linux Kernel 3.16.61, security and bug fixes.

-- WireGuard VPN, version bump to 0.0.20181119

-- WireGuard VPN, add wireguard-mobile-client script to manage mobile clients.  Also used by the web interface.

-- Web Interface, WireGuard VPN sub-tab, add "Mobile Client Defaults" and "Mobile Client Credentials" sections.

-- Web Interface, Status tab, improve layout of "WireGuard VPN Status" section.

-- arnofw (AIF), add WIREGUARD_ALLOW_OPENVPN rc.conf variable, Allow WireGuard tunnel to OpenVPN tunnel(s), disabled by default.

-- wol-host, new command to send Wake-on-LAN packet to specified host, by IP or DNS name.
   Example: wol-host --ping 192.168.101.13
   More info: wol-host --help

-- fossil, new feature to optionally send commit notifications via email while using 'fossil-commit'.
   New rc.conf variable FOSSIL_NOTIFY must be defined (via user.conf) as To: email address to enable.
   Additional new, optional rc.conf variables: FOSSIL_NOTIFY_FROM, FOSSIL_HOSTNAME

-- Complete Pre-Release ChangeLog:
   https://s3.amazonaws.com/beta.astlinux-project/astlinux-changelog/ChangeLog.txt

New Documentation Topics:
(none)

Updated Documentation Topics:
WireGuard VPN Configuration -- https://doc.astlinux-project.org/userdoc:tt_wireguard_vpn

The "AstLinux Pre-Release ChangeLog" and "Repository URL" entries can be found under the "Development" tab of the AstLinux Project web site ...

AstLinux Project -> Development
https://www.astlinux-project.org/dev.html

AstLinux Team

USB settings in the BIOS...
Sometimes it helps to plug the keyboard to an USB 2.0 port.

Sent from a mobile device.

Michael Keuter

> Am 16.11.2018 um 23:22 schrieb lists <li...@lo...>:
> 
> Sorry, no, I’ve never encountered that issue before.
> 
> Lonnie
> 
>> On Nov 16, 2018, at 4:07 PM, John Reynolds <rey...@gm...> wrote:
>> 
>> I know it's only been minutes... 
>> 
>> I'm able to boot up fine now, keyboard works right up until it gets to the blue installer screen, then the usb keyboard goes dead... do you know 'tip' for that one? 
>> 
>> John R
>> 
>>> On Fri, Nov 16, 2018 at 1:51 PM John Reynolds <rey...@gm...> wrote:
>>> Lonnie, 
>>> 
>>> First, thank you for the quick response. Secondly, and again, thank you for the script and for the 'tip'.  I hate it when I read the instructions, and somehow miss the very item that would be of most help. I'm sorted out... for now. 
>>> 
>>> Thank you for your commitment to this project, I've been happily using it for years. 
>>> 
>>>> On Fri, Nov 16, 2018 at 1:39 PM Lonnie Abelbeck <li...@lo...> wrote:
>>>> 
>>>> 
>>>> > On Nov 16, 2018, at 2:46 PM, John Reynolds <rey...@gm...> wrote:
>>>> > 
>>>> > I used the 'os-x-cf-write' script from Lonnie to write the 1.3.4 iso to my usb, but when I try and boot from it (Qotom Q550) nothing happens. Viewing the USB on Mac, I see the folders 'os', 'runnix', and 'isolinux' with a text file that contains release notes. 
>>>> > 
>>>> > It doesn't seem like that made the USB bootable... clearly I'm missing something. Any help would be appreciated. 
>>>> > 
>>>> > John R.
>>>> 
>>>> Hi John,
>>>> 
>>>> My guess is the Qotom Q550 BIOS does not default to prefer USB booting, the internal SATA has priority.  I have a "Qotom Q530G6" and in the docs:
>>>> https://doc.astlinux-project.org/userdoc:board_qotom_q530g6
>>>> --
>>>> Tip → If you need to choose the boot drive, for example when booting the ISO Installer via a USB drive, on startup (quickly) press the F11 key.
>>>> --
>>>> I seem to recall that worked.
>>>> 
>>>> To further test, I download the 1.3.4 ISO (Generic x86-64bit (Serial Console): since I tested on an PC Engines APU2), used 'os-x-cf-write' to install it on a SanDisk USB drive, powered down and then booted with the USB drive installed ... it immediately booted off the ISO USB drive as I know the APU2 prefers USB by default.
>>>> 
>>>> Lonnie
>>>> 
>>>> 
>>>> 
>>>> _______________________________________________
>>>> Astlinux-users mailing list
>>>> Ast...@li...
>>>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>>>> 
>>>> Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....
>> _______________________________________________
>> Astlinux-users mailing list
>> Ast...@li...
>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>> 
>> Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....
> _______________________________________________
> Astlinux-users mailing list
> Ast...@li...
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....

Sorry, no, I’ve never encountered that issue before.

Lonnie

> On Nov 16, 2018, at 4:07 PM, John Reynolds <rey...@gm...> wrote:
> 
> I know it's only been minutes... 
> 
> I'm able to boot up fine now, keyboard works right up until it gets to the blue installer screen, then the usb keyboard goes dead... do you know 'tip' for that one? 
> 
> John R
> 
>> On Fri, Nov 16, 2018 at 1:51 PM John Reynolds <rey...@gm...> wrote:
>> Lonnie, 
>> 
>> First, thank you for the quick response. Secondly, and again, thank you for the script and for the 'tip'.  I hate it when I read the instructions, and somehow miss the very item that would be of most help. I'm sorted out... for now. 
>> 
>> Thank you for your commitment to this project, I've been happily using it for years. 
>> 
>>> On Fri, Nov 16, 2018 at 1:39 PM Lonnie Abelbeck <li...@lo...> wrote:
>>> 
>>> 
>>> > On Nov 16, 2018, at 2:46 PM, John Reynolds <rey...@gm...> wrote:
>>> > 
>>> > I used the 'os-x-cf-write' script from Lonnie to write the 1.3.4 iso to my usb, but when I try and boot from it (Qotom Q550) nothing happens. Viewing the USB on Mac, I see the folders 'os', 'runnix', and 'isolinux' with a text file that contains release notes. 
>>> > 
>>> > It doesn't seem like that made the USB bootable... clearly I'm missing something. Any help would be appreciated. 
>>> > 
>>> > John R.
>>> 
>>> Hi John,
>>> 
>>> My guess is the Qotom Q550 BIOS does not default to prefer USB booting, the internal SATA has priority.  I have a "Qotom Q530G6" and in the docs:
>>> https://doc.astlinux-project.org/userdoc:board_qotom_q530g6
>>> --
>>> Tip → If you need to choose the boot drive, for example when booting the ISO Installer via a USB drive, on startup (quickly) press the F11 key.
>>> --
>>> I seem to recall that worked.
>>> 
>>> To further test, I download the 1.3.4 ISO (Generic x86-64bit (Serial Console): since I tested on an PC Engines APU2), used 'os-x-cf-write' to install it on a SanDisk USB drive, powered down and then booted with the USB drive installed ... it immediately booted off the ISO USB drive as I know the APU2 prefers USB by default.
>>> 
>>> Lonnie
>>> 
>>> 
>>> 
>>> _______________________________________________
>>> Astlinux-users mailing list
>>> Ast...@li...
>>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>>> 
>>> Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....
> _______________________________________________
> Astlinux-users mailing list
> Ast...@li...
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....

I know it's only been minutes...

I'm able to boot up fine now, keyboard works right up until it gets to the
blue installer screen, then the usb keyboard goes dead... do you know 'tip'
for that one?

John R

On Fri, Nov 16, 2018 at 1:51 PM John Reynolds <rey...@gm...> wrote:

> Lonnie,
>
> First, thank you for the quick response. Secondly, and again, thank you
> for the script and for the 'tip'.  I hate it when I read the instructions,
> and somehow miss the very item that would be of most help. I'm sorted
> out... for now.
>
> Thank you for your commitment to this project, I've been happily using it
> for years.
>
> On Fri, Nov 16, 2018 at 1:39 PM Lonnie Abelbeck <li...@lo...>
> wrote:
>
>>
>>
>> > On Nov 16, 2018, at 2:46 PM, John Reynolds <rey...@gm...>
>> wrote:
>> >
>> > I used the 'os-x-cf-write' script from Lonnie to write the 1.3.4 iso to
>> my usb, but when I try and boot from it (Qotom Q550) nothing happens.
>> Viewing the USB on Mac, I see the folders 'os', 'runnix', and 'isolinux'
>> with a text file that contains release notes.
>> >
>> > It doesn't seem like that made the USB bootable... clearly I'm missing
>> something. Any help would be appreciated.
>> >
>> > John R.
>>
>> Hi John,
>>
>> My guess is the Qotom Q550 BIOS does not default to prefer USB booting,
>> the internal SATA has priority.  I have a "Qotom Q530G6" and in the docs:
>> https://doc.astlinux-project.org/userdoc:board_qotom_q530g6
>> --
>> Tip → If you need to choose the boot drive, for example when booting the
>> ISO Installer via a USB drive, on startup (quickly) press the F11 key.
>> --
>> I seem to recall that worked.
>>
>> To further test, I download the 1.3.4 ISO (Generic x86-64bit (Serial
>> Console): since I tested on an PC Engines APU2), used 'os-x-cf-write' to
>> install it on a SanDisk USB drive, powered down and then booted with the
>> USB drive installed ... it immediately booted off the ISO USB drive as I
>> know the APU2 prefers USB by default.
>>
>> Lonnie
>>
>>
>>
>> _______________________________________________
>> Astlinux-users mailing list
>> Ast...@li...
>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>>
>> Donations to support AstLinux are graciously accepted via PayPal to
>> pa...@kr....
>
>

Lonnie,

First, thank you for the quick response. Secondly, and again, thank you for
the script and for the 'tip'.  I hate it when I read the instructions, and
somehow miss the very item that would be of most help. I'm sorted out...
for now.

Thank you for your commitment to this project, I've been happily using it
for years.

On Fri, Nov 16, 2018 at 1:39 PM Lonnie Abelbeck <li...@lo...>
wrote:

>
>
> > On Nov 16, 2018, at 2:46 PM, John Reynolds <rey...@gm...> wrote:
> >
> > I used the 'os-x-cf-write' script from Lonnie to write the 1.3.4 iso to
> my usb, but when I try and boot from it (Qotom Q550) nothing happens.
> Viewing the USB on Mac, I see the folders 'os', 'runnix', and 'isolinux'
> with a text file that contains release notes.
> >
> > It doesn't seem like that made the USB bootable... clearly I'm missing
> something. Any help would be appreciated.
> >
> > John R.
>
> Hi John,
>
> My guess is the Qotom Q550 BIOS does not default to prefer USB booting,
> the internal SATA has priority.  I have a "Qotom Q530G6" and in the docs:
> https://doc.astlinux-project.org/userdoc:board_qotom_q530g6
> --
> Tip → If you need to choose the boot drive, for example when booting the
> ISO Installer via a USB drive, on startup (quickly) press the F11 key.
> --
> I seem to recall that worked.
>
> To further test, I download the 1.3.4 ISO (Generic x86-64bit (Serial
> Console): since I tested on an PC Engines APU2), used 'os-x-cf-write' to
> install it on a SanDisk USB drive, powered down and then booted with the
> USB drive installed ... it immediately booted off the ISO USB drive as I
> know the APU2 prefers USB by default.
>
> Lonnie
>
>
>
> _______________________________________________
> Astlinux-users mailing list
> Ast...@li...
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>
> Donations to support AstLinux are graciously accepted via PayPal to
> pa...@kr....

> On Nov 16, 2018, at 2:46 PM, John Reynolds <rey...@gm...> wrote:
> 
> I used the 'os-x-cf-write' script from Lonnie to write the 1.3.4 iso to my usb, but when I try and boot from it (Qotom Q550) nothing happens. Viewing the USB on Mac, I see the folders 'os', 'runnix', and 'isolinux' with a text file that contains release notes. 
> 
> It doesn't seem like that made the USB bootable... clearly I'm missing something. Any help would be appreciated. 
> 
> John R.

Hi John,

My guess is the Qotom Q550 BIOS does not default to prefer USB booting, the internal SATA has priority.  I have a "Qotom Q530G6" and in the docs:
https://doc.astlinux-project.org/userdoc:board_qotom_q530g6
--
Tip → If you need to choose the boot drive, for example when booting the ISO Installer via a USB drive, on startup (quickly) press the F11 key.
--
I seem to recall that worked.

To further test, I download the 1.3.4 ISO (Generic x86-64bit (Serial Console): since I tested on an PC Engines APU2), used 'os-x-cf-write' to install it on a SanDisk USB drive, powered down and then booted with the USB drive installed ... it immediately booted off the ISO USB drive as I know the APU2 prefers USB by default.

Lonnie

I used the 'os-x-cf-write' script from Lonnie to write the 1.3.4 iso to my
usb, but when I try and boot from it (Qotom Q550) nothing happens. Viewing
the USB on Mac, I see the folders 'os', 'runnix', and 'isolinux' with a
text file that contains release notes.

It doesn't seem like that made the USB bootable... clearly I'm
missing something. Any help would be appreciated.

John R.

Hi Michael,

> The Restart NTP Time did not change it (timezone).

Yes, the timezone info is set very early during system boot.

You must reboot to apply any Timezone changes.

Lonnie

> On Nov 2, 2018, at 4:38 PM, Michael Knill <mic...@ip...> wrote:
> 
> Hi Group
>  
> I recently changed the timezone setting on the Network tab for one of my systems and found that I needed to completely reset the system for it to take effect. The Restart NTP Time did not change it.
> Is this correct? Is there any way it can be done without restarting the system?
>  
> Regards
> Michael Knill

Hi Group

I recently changed the timezone setting on the Network tab for one of my systems and found that I needed to completely reset the system for it to take effect. The Restart NTP Time did not change it.
Is this correct? Is there any way it can be done without restarting the system?

Regards
Michael Knill

2006	Jan	Feb	Mar	Apr	May	Jun (1)	Jul (1)	Aug	Sep	Oct (2)	Nov (1)	Dec (20)
2007	Jan (91)	Feb (111)	Mar (226)	Apr (65)	May (197)	Jun (202)	Jul (92)	Aug (87)	Sep (120)	Oct (133)	Nov (89)	Dec (155)
2008	Jan (251)	Feb (136)	Mar (174)	Apr (149)	May (56)	Jun (32)	Jul (36)	Aug (171)	Sep (245)	Oct (244)	Nov (218)	Dec (272)
2009	Jan (113)	Feb (119)	Mar (192)	Apr (117)	May (93)	Jun (46)	Jul (80)	Aug (54)	Sep (109)	Oct (70)	Nov (145)	Dec (110)
2010	Jan (137)	Feb (87)	Mar (45)	Apr (157)	May (58)	Jun (99)	Jul (188)	Aug (136)	Sep (101)	Oct (100)	Nov (61)	Dec (60)
2011	Jan (84)	Feb (43)	Mar (70)	Apr (17)	May (69)	Jun (28)	Jul (43)	Aug (21)	Sep (151)	Oct (120)	Nov (84)	Dec (101)
2012	Jan (119)	Feb (82)	Mar (70)	Apr (115)	May (66)	Jun (131)	Jul (70)	Aug (65)	Sep (66)	Oct (86)	Nov (197)	Dec (81)
2013	Jan (65)	Feb (48)	Mar (32)	Apr (68)	May (98)	Jun (59)	Jul (41)	Aug (52)	Sep (42)	Oct (37)	Nov (10)	Dec (27)
2014	Jan (61)	Feb (34)	Mar (30)	Apr (52)	May (45)	Jun (40)	Jul (28)	Aug (9)	Sep (39)	Oct (69)	Nov (55)	Dec (19)
2015	Jan (13)	Feb (21)	Mar (5)	Apr (14)	May (30)	Jun (51)	Jul (31)	Aug (12)	Sep (29)	Oct (15)	Nov (24)	Dec (16)
2016	Jan (62)	Feb (76)	Mar (30)	Apr (43)	May (46)	Jun (62)	Jul (21)	Aug (49)	Sep (67)	Oct (27)	Nov (26)	Dec (38)
2017	Jan (7)	Feb (12)	Mar (69)	Apr (59)	May (54)	Jun (40)	Jul (76)	Aug (82)	Sep (92)	Oct (51)	Nov (32)	Dec (30)
2018	Jan (22)	Feb (25)	Mar (34)	Apr (35)	May (37)	Jun (21)	Jul (69)	Aug (55)	Sep (17)	Oct (67)	Nov (9)	Dec (5)
2019	Jan (19)	Feb (12)	Mar (15)	Apr (19)	May	Jun (27)	Jul (27)	Aug (25)	Sep (25)	Oct (27)	Nov (10)	Dec (14)
2020	Jan (22)	Feb (20)	Mar (36)	Apr (40)	May (52)	Jun (35)	Jul (21)	Aug (32)	Sep (71)	Oct (27)	Nov (11)	Dec (16)
2021	Jan (16)	Feb (21)	Mar (21)	Apr (27)	May (17)	Jun	Jul (2)	Aug (22)	Sep (23)	Oct (7)	Nov (11)	Dec (28)
2022	Jan (23)	Feb (18)	Mar (9)	Apr (15)	May (15)	Jun (7)	Jul (8)	Aug (15)	Sep (1)	Oct	Nov (11)	Dec (10)
2023	Jan (14)	Feb (10)	Mar (11)	Apr (13)	May (2)	Jun (30)	Jul (1)	Aug (15)	Sep (13)	Oct (3)	Nov (25)	Dec (5)
2024	Jan (3)	Feb (10)	Mar (9)	Apr	May (1)	Jun (15)	Jul (7)	Aug (10)	Sep (3)	Oct (8)	Nov (6)	Dec (15)
2025	Jan (3)	Feb (1)	Mar (7)	Apr (5)	May (13)	Jun (16)	Jul (1)	Aug (6)	Sep	Oct	Nov	Dec

astlinux-users Mailing List for AstLinux (Page 49)

astlinux-users — AstLinux Users Mailing List