Today I looked at my mail on the server…
It turns out that all the packages I had installed using pip have somehow disappeared. I’m guessing that’s due to the change of making Python 3 the default? I have no idea.
pip install Mastodon.py pip install html2text
And I had apparently installed two Perl libraries for my system Perl. Yikes! They had gotten converted to Debian packages, and those were still lying around, so I could simply reinstall them. No upgrades.
dpkg -i libmojo-useragent-role-queued-perl_1.15-1_all.deb dpkg -i libtext-spanningtable-perl_1.000000-1_all.deb
In one of the bash scripts I had to replace tempfile with mktemp.
– Alex 2021-08-31 05:30 UTC
Firewall rules need to be reinstalled after a reboot:
# Set up iptables rules. Match with banlist and drop traffic ipset create banlist hash:ip hashsize 4096 iptables -I INPUT -m set --match-set banlist src -j DROP iptables -I FORWARD -m set --match-set banlist src -j DROP # For IPv6 ipset create banlist6 hash:net hashsize 4096 family inet6 ip6tables -I INPUT -m set --match-set banlist6 src -j DROP ip6tables -I FORWARD -m set --match-set banlist6 src -j DROP
The reason being some bot programmer who ignores the “slow down” error messages they are getting.
ipset add banlist 22.214.171.124 ipset add banlist6 2001:41d0:302:2200::180
Both belong to OVH France.
Hopefully getting all their packets dropped makes them think for a moment.
– Alex 2021-08-31 14:37 UTC
More packages missing.
pip install cairosvg
– Alex 2021-09-05 09:02 UTC
Something about Exim is also broken. I get mails from root saying “Tainted ’/var/mail/alex’ (file or directory name for mail_spool transport) not permitted” and chapter 5 of the release notes tells me that something has changed regarding taint checking. Gah!
Old Debian Exim configuration files also will not work unmodified; the new configuration needs to be installed with local modifications merged in. – 5.1.17. Exim 4.94, in chapter 5. Issues to be aware of for bullseye
OK. I don’t think I did much configuring of Exim, to be honest. I just need local delivery so that I can read the error messages by all the jobs that I run.
Choose “local delivery only”, and then just use the defaults, I think.
– Alex 2021-09-05 09:22 UTC
Yikes. That didn’t solve it. I still don’t understand what I’m supposed to do after reading the Exim section in chapter 5, so now I’m doing it hardcore:
apt purge exim4-config apt install bsd-mailx exim4
Beware, this nukes your config!
Anyway, with this I was able to send myself some local mail without receiving any warnings. Also, this purged exim4-daemon-heavy and installed exim4-daemon-light, with no config questions asked. I like it.
– Alex 2021-09-07 06:17 UTC
Looks like radicale did not get restarted after the update (self hosted calendars and contacts). On our phones, I saw that the calendars were not syncing.
service radicale start
That did not immediately help. It took a while. The log said “Malformed token” a few times… but without me changing anything, these messages disappeared after a few minutes and the phones say the calendars are OK, now.
journalctl --unit radicale --follow
– Alex 2021-09-10 09:10 UTC