andrelop's blog

It’s always not our business when we hear about bad things happening elsewhere. Yes, we feel sorry and give our condolences when needed, just like how the social etiquette says we should, but that’s not the point.

The heart of the matter is about bad things happening to ourselves and to those we care about. And before one would ask me if there’s any need to send me condolences, please don’t. There’s no need. No one really died nor is badly ill and about to die.

This post is about how wrong the whole world seems to be these days. Things are just upside down. All the good values are completely and loudly ignored and bad practice seems to have become the de-facto standard.

Bad professionals are being picked instead of the good ones because the bad ones are somewhat connected to the right people, which are the ones who makes the decisions. Good people are being left behind and insanely bad people are being elevated to the higher positions.

Good people are being left alone, without any good friends to share happiness and all the good feelings, because people these days seems to like the ones who are those most likely to get rich by using evil tactics, so they choose their friends appropriately, using the money as the key factor.

Good people are being left alone, without a love to share experiences and to create a good, happy and healthy family , because the damn money is fuckingly impregnated everywhere, taking good people away from good people.

The good people are being taken by the bad guys, those ones who have enough money to provide a gorgeous and rich life, a life completely empty of happiness, but which ultimately will at least provide a good foundation on which possible future generations could be forged and, maybe, just maybe, these future generations would be happy, as their previous generations certainly won’t be.

People today are sacrificing their happiness for money. It’s so sad everything needs to be centered on this thing, which we firstly created, but which now is taking our life, friends, loves and happiness away from us.

One can’t ask for sincere love anymore before having material belongings to prove he’s worth it. It isn’t enough anymore to be a good person, to demonstrate love, compassion, comprehension, good humour and good will. You should most importantly demonstrate you have money if you are serious about wanting some love back.

It’s disgusting that these days that’s the standard scenario for human relations and not the complete opposite. It’s disgusting we let it be that way and that we now have to survive in a world where the practive don’t match the desired and previously intended behaviour.

What’s this ? Why are we lying to ourselves, saying to everyone we are good and decent people when in practice we don’t accept friendship and love without firstly making sure our friends and potential lovers have some seriously decent amount of this drug called money ?

Would someone please be so kind to enlighten me and, most importantly, would someone please be so fuckingly consistent, proving actions matches words, being my friend and possible female lover and not asking me first how much money I have in my bank account ?

That’s not a rant for someone specific, but for the society as a whole, a collection of human beings I’m starting to want away from me more and more as long as this disgusting behaviour keeps being the practice.

I’m widely know (by my peers, not globaly know, as you may guess) for being a well controlated person when it comes to spending my sacred and beloved money. Actually, I’m so well controlated that I’m sometimes seen as someone who hates to spend money.

Sometimes I’m almost convinced that people thinking that way about me are right, but then I get back to my conscious mind and realize that they think like this because people tend not to agree with what they don’t practice and, generally speaking, society has been continuosly teaching them to become as consumists as possible.

Obviously, I’m not completely protected against consumism, as I’m human and have as much desires as anyone else, but I think I’m doing well on keeping myself from being taken to the path which lead us to bit the bullet and spend our money on something.

What contributes to this control also demonstrates how we’re used to learn better only from mistakes, as I already spent too much money on things which I initially thought I desperately needed, but which after I realized weren’t actually all that much needed after all.

I have been trying to avoid wasting money on an e-book reader for months. At the beggining it was a piece of cake, as there wasn’t a real option (mind you that I live in Brazil, not in the USA or some other so called first world country). However, in the last few months, the scenario has been changing and it seems that these days there are actually some options available.

I have been researching privately about options for months and have become well aware of all the advantages and disavantages of all the options available today. Sorry, I won’t be pointing the right option to you, as your best option probably will be different from mine and recommending things isn’t the point of this post.

Technically speaking, the options available today seems to provide me with what I need. There are no doubts that almost any of them would be good (but not all of them would be “the right”) choices and actually would represent a real improvement over the current situation.

So, one might ask, why not go ahead and just buy the damn thing ? For most of the people out there, it would seem to be the right thing to do, as I would be doing conscious and well researched purchase after all. Well, I would be doing something good for myself for sure, but the government actually would need to show me some respect and prove me they have some respect for me as well.

Amazon, for example, is shipping the Kindle for other countries and Brazil is one of them. I would surely just go ahead and buy it the day the shipment was announced and that was almost what I did. What prevented me from doing so was the insane/absurd takes government is applying on anything one wants to import from another country.

Even after converting the price from dollars to the local currency (reais), the price is something like three to four times higher that the original price in the origin country. It’s insanely prohibitive for the vast majority of citizens and one could wonder why this is so when this is a device used basically for reading. Mind you that the government has big tax reductions for importing books, for example, which are seen as culture related items and so get to win some advantages over other non-culture related items.

To summarize it all, if you want to convince yourself how not to spend money on something, even when you really want to, just do the math regarding the amount of the taxes you would need to pay and I assure you there will be no regrets when latter you think why you did not bought it.

Recently I’ve been dealing with requests for LDAP directories configs which clearly demonstrates how little people understand about directories and what they are capable of doing. A significant amount of people I know seems to really get it wrong when it comes to what they want from a directory.

Actually, they somehow think that a LDAP directory will do whatever is needed for their application to store, retrieve, validate, authenticate and even take decisions based on no data provided at all. These people think that one should just deploy a directory using the minimum effort approach and suddenly everything will just work.

They don’t seem to realize that for their application to make use of a directory it should be prepared to do so. They can’t accept it when they are told that the directory won’t just work and by some unknow enchantment get their systems data stored, validated, authenticated and, shockingly for them, that it won’t make their credentials consolidated so lots of different services will out of the box just start working using the same username/password pair.

Also, some people don’t understand the difference between a LDAP directory and a single sign-on (SSO) system. They don’t realize that a directory won’t, by itself (i.e. without additional software and some respectable amount of tweaking), provide them the ability to authenticate against it only a single time and have their credentials shared among all their systems.

That’s it. Said. Don’t get me wrong. All that was metioned above is possible, but it isn’t done by LDAP alone. LDAP is just a bunch of protocols and a directory is only one nice place to store information. What will be done with this information, how it wll be treated and how it could be used to produce meaningful results are almost always up to the application and/or to some “middleware” or added plugin/overlay/connector/whatever.

Next time someone ask you to “install LDAP so I can get rid of all my different username/passwords and use only one instead”, be afraid. Be very afraid and present him/her some theorical knowledgment regarding the topic. Or, better said, insert some clue into his/her brain.

I wanted to let my readers know that I migrated from my previous hosting to a new one. There was nothing wrong with the previous one, but I wanted to go out shopping for something cheaper and still as reliable.

Lots of friends gave me good recommendations for Linode and the price was tempting so I thought : “Why not ?”.  The most noticeable advantage, apart from the price reduction, was the speed improvement, as I got myself a more powerful VPS and then now I have more room for new experiments.

Later I also noticed some little but very welcome improvements. These are just minor details, but together they account for a great experience. So, I’m here to let you guys now that if you want a good, reliable, speedy, and still cheap hosting provider for your VPS, just give Linode a try.

I’m sure you won’t be disappointed.

Since the begginings of times, people have been trying to come up with new ways to become smarter, leaner, cleaner and sexier. Surely, not having to do anything to actually get to this nirvana state would also be a more than desired plus.

Personally, I also tend to want to get some of these niceties myself, but at least I know that it’s not that easy to come to a master state, specially because I’m not at this Jedi state on none of these areas.

Back when I was starting to learn my way through all this tech stuff, I realised that if I really wanted to master something, I should do my homework and try to find out a way to learn by myself, not having to rely on someone else for everything.

Sure, there are those really smart people, which we often call our “gurus”, and to which we could try to resort to when things aren’t really working the way we had been trying to make them work.

The sad reality is, by being “gurus”, those really important and highly requested beings, these people are really illuminated and have no time to answer to each and every silly question we would like to ask them so we must find our way somehow and only resort to them as a really last resort, when everything else fails and there’s no hope anymore.

That was fine with me as I always liked the feeling of discovering new thigs by myself, understanding how things really worked and how they could be driven and manipulated in order to accomplish goals which would please me. Besides, this is fun.

By doing this, I learnt a lot and still am learning more each and every day. That’s “The Right Way”, as they say, and really is how things should be … except if you are a newcomer these days, it seems.

I’m by no means a “guru” and would surely not cassify me as one, but I think I have talked to many of these mythological beings over the years so I can tell you what you shouldn’t be doing when trying to approach them.

First of all, please, pretty please, try to do your homework before resorting to more knowledgeable people about a given subject. The more knowledgeable people would surely be pleased to help you if you show them you deserve the right to be helped.

When starting to work with a technology you do not master or even don’t know a thing about yet, the knowledgment about such a tecnology wouldn’t magically be transfered from your local guru’s brain to yours.

Even if your local “guru” is a nice person and get to waste some sentences with you about such a tecnology, do not pretend you can master all about something only by listening to some words from him/her for a couple of minutes.

Well, let’s say that if your guru can give you some initial hints without you firstly demonstrating him/her you did your homework, take it as just it : hints. Follow these hints as clues so you can start researching about the given subject and then later show him you was able to learn a lot by yourself.

Your guru will be pleased and surely will start considering you as a good padawan, a padawan worth the time spent explaining things to. The universe will start doing its magic and things will start working for you, who will also start feeling good for being admired by your peers.

Yes, that’s how “Show me the way I should follow” works. You know, “Show me the way I should follow” isn’t “Do all my work for me”. The later happens to be called “consultancy” and can be arranged for a negotiable amount of money between the involved parts.

Also, please, don’t take it as personal when someone doesn’t want to give you a “hint” about something. Remember that he/she could be really busy, not in the mood or simply exercising his/her right to ignore you if you don’t show him/her you are worth the time he/she will spent explaining things to you.

Personally, I refuse to reply to people who consistently try to use me as some sort of human search engine. Even if I do know the answer for some question, most of the time I try to Google for it before replying to someone who asked me about a given subject.

If I find out that the answer for a question someone asked can be found easily between the first and third hit returned by Google, I happen to ask the person who asked me the question if he/she really tried to research a bit about the subject before asking me about it.

The answer is a strange mix. Some people say the truth and tell me they asked me because they are in a hurry and couldn’t afford the time it would take them to search for an answer when I was readily available quickly. Sad, but at least they are saying the truth.

Some people try to lie and tell me that they tried to find an answer and had no luck despite researching for a long time. Strangely, they seem to stop the conversation right after when I show them that putting the term on Google’s search box and hitting the search button would bring the answer for their problem as the first hit.

The truth is that if you get all the answers for free from your local guru, you will never learn how to look for answers by yourself and will indefinitely depend on someone else to get your job done. Not a pleasant situation, even if you are silly enough expecting to live like a information sucker for your entire life.

When you get in a situation in which you have no workmates or available friends at hand to help you, you won’t be able to accomplish your tasks. Your boss then won’t be nice when that happens and he/she will surely start considering replacing you with someone else.

The opinion of your workmates, which by now could easily see you as a major source of loads of lost time, won’t help you keep your job either. You can be lucky and get the confidence of your workmates, but be sure that management will notice and you won’t last too much on your current position. Gurus have the tendency to be good at finding these kind of people and management also have the tendency of listening to gurus. Do the math.

Do the right think from the beggining. Do your homework, work out your own way, try as hard as possible to find out solutions for problems by yourself and only resort to your local guru when there’s no way for you to go forward about solving a given problem by yourself.

Also, even when these situations come up, try to show to your local gurus that you did your homework and explain clearly to them what you have managed to find out and where exactly you are having a hard time progressing.

This will surely help not only your local guru to help you best, but also surely will get him/her to take you as a really smart person, a person which is worth losing time with and worth  adopting as a future padawan.

It’s no secret for those who follow me on Twitter/identi.ca that I have been toying with virtualization technologies for some time now.

I have been using Xen in production for some time and, apart from not thinking it’s the way to go for future virtualization, it’s quite usable right now, specially if you are going to use Debian Lenny as the dom0, as it now has a more modern kernel than the dreaded 2.6.18 we Xen users were forced to keep using.

However, I have been keeping my eyes on KVM as well, as I always liked how much simpler and well integrated into the Linux kernel it is. I’m even subscribed to the KVM development mailing list, even not understanding most of the things the developers are talking about there. It’s no problem for me, I just want to know what’s being worked on and what’s on the pipeline.

As a KVM fan, I’m also using it intensively as a tool for prototyping servers. It’s easy enough to set up a new Debian server to test things on and learn new technologies, as well as troubleshoot problems without intefering with production environments.

Althought KVM is not as good as Xen when it comes to performance, it’s quickly improving every single day. And, for those of you who still believes KVM is only about full virtualization, I’m happy to say that it has come a long way and paravirtualization has started to infiltrate KVM land as well.

Today, KVM already sports paravirtualized clock (pvclock), paravirtualized memory management unit (pv MMU) and VirtIO drivers. Actually, it seems that KVM these days is the biggest user of VirtIO, maybe only loosing the leadership to Rusty’s lguest.

By using VirtIO’s disk and network drivers (virtio_blk and virtio_net, respectively, and its associated modules), KVM can deliver a much improved I/O experience than when using QEMU’s emulated drivers. For this reason, it’s always preferable to use VirtIO drivers whenever possible when setting up your KVM guests.

During the Etch lifetime, one will need to do some tricks in order to use VirtIO when using Etch as a guest under KVM. However, when preparing Lenny’s d-i, the developers were smart enough to add to it virtual disk detection support. What it means is that now, starting with Lenny, d-i will recognize that it’s being given a VirtIO block device and automatically load the needed kernel modules to support it.

Also, the disk detection and partition modules (partman et all) were modified to show a detected virtual disk (i.e. /dev/vdX) and let the user partition it, as well as grub-installer was changed to allow GRUB to be installed onto a virtual disk’s MBR,  effectively making d-i a really powerful virtualization aware installer.

Here you can see Lenny’s d-i showing a detected virtual disk, named “vda” :

lenny-vdisk-partitioning-english

Brazilian Portuguese readers could see the version using brazilian portuguese texts on the screen here. Sure, d-i also received a lot of improvements and special support for installing Lenny as a Xen domU was added as well, but I haven’t played with it yet, so I won’t comment on that right now.

And, hey, one can even use virt-install and virt-manager to deploy KVM guests under Lenny And you know what gives me even more confidence that KVM will be a first class citizen inside Debian ? The fact that Steve Kemp is toying with the idea to change his xen-hosting.org project so it would become a new kvm-hosting.org project.

Maybe I’m praying for the preacher here, but Steve is very well well know for being the author of xen-tools and xen-shell, as well as being the creator of a number of other nice free softwares. And, judging by the comments on his post about the future kvm-hosting.org project, it seems that Steve maybe will need to update xen-tools and xen-shell to account for KVM or create a new set of tools dedicated exclusively to KVM based on his past experience creating the current tools for Xen.

Good times ahead for those of us who are surfing the Debian Virtualization wave, indeed

Here’s a really quick way to find out if your “ps” binary has been compromised :

# ls -d /proc/* | grep [0-9] | wc -l ; ps aux | wc -l

The commands above are going to show you two numbers : the first one is the number of running processes according to your kernel and the second one is the number of running processes according to you “ps” binary.

If the second one differs from the previous one, something is wrong and this could mean your “ps” binary was compromised. If this happens to you, maybe your system is not a trusted system anymore.

aba, if you happen to receive some feedback on this subject, please let me know. A comment in this post or even a blog post from you in Planet Debian would be great.

Bloggind as there’s no comment support available in your blog.

Sorry Planet Debian. The last post was intended to appear on Planeta Debian Brasil only, not on Planet Debian. I tend to separate my posts written in english and in portuguese using different categories for each and have both Planet Debian and Planet Debian Brasil being feed from the relevant URL for each category.

It was just a mistake from my part giving the last post (written in portuguese) the wrong category. It’s already fixed and I hope not to make the same mistake again in the future.

Yes, it’s true. Advogato is going offline. It’s sad to see such a good project going offline. I started using Advogato and reading some diaries there a lot of years ago and also wrote some entries myself there.

Anyway, thanks Advogato for all the fish and good luck.