"Smart Paper"?

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
31 messages Options
12
Reply | Threaded
Open this post in threaded view
|

Re: separating app from platform-specific parts of image?

John Chandler-3
On Jul 12, 2008, at 1:52 PM, David T. Lewis wrote:
> On Sat, Jul 12, 2008 at 10:36:50AM +0200, John Chandler wrote:
>>
>> OK, but if my image is for Mac OS X PPC, and the target machine is
>> Debian x86, will the image I copy to it even start up?
>
> Yes, it will work fine. Amazing but true.

Thanks to all who responded.  I suppose my confusion had
something to do with the different conceptual bases underlying
Unices, on the one hand, and Squeak, on the other.  Files
vs. all-the-way-down objects.  And I'm very unused to being able
to get away with thinking in terms of the abstraction rather than
the implementation and having things "just work."

Again, thanks.

-jmc

_______________________________________________
Beginners mailing list
[hidden email]
http://lists.squeakfoundation.org/mailman/listinfo/beginners
Reply | Threaded
Open this post in threaded view
|

Re: separating app from platform-specific parts of image?

Bert Freudenberg

Am 12.07.2008 um 19:24 schrieb John Chandler:

> On Jul 12, 2008, at 1:52 PM, David T. Lewis wrote:
>> On Sat, Jul 12, 2008 at 10:36:50AM +0200, John Chandler wrote:
>>>
>>> OK, but if my image is for Mac OS X PPC, and the target machine is
>>> Debian x86, will the image I copy to it even start up?
>>
>> Yes, it will work fine. Amazing but true.
>
> Thanks to all who responded.  I suppose my confusion had
> something to do with the different conceptual bases underlying
> Unices, on the one hand, and Squeak, on the other.  Files
> vs. all-the-way-down objects.  And I'm very unused to being able
> to get away with thinking in terms of the abstraction rather than
> the implementation and having things "just work."
>
> Again, thanks.


We used to work hard to keep the illusion perfect :)

- Bert -


_______________________________________________
Beginners mailing list
[hidden email]
http://lists.squeakfoundation.org/mailman/listinfo/beginners
Reply | Threaded
Open this post in threaded view
|

Re: separating app from platform-specific parts of image?

K. K. Subramaniam
In reply to this post by John Chandler-3
On Saturday 12 Jul 2008 2:06:50 pm John Chandler wrote:
> OK, but if my image is for Mac OS X PPC, and the target machine is  
> Debian x86, will the image I copy to it even start up?
Image files can be opened on any platform.

Make sure that you get the *virtual machine* for the Debian x86. Install
squeakvm package to get the VM binaries.

Subbu
_______________________________________________
Beginners mailing list
[hidden email]
http://lists.squeakfoundation.org/mailman/listinfo/beginners
Reply | Threaded
Open this post in threaded view
|

Re: separating app from platform-specific parts of image?

John Chandler-3
I now need to see why the RFB package appears not to be working on  
Debian.

I loaded the package on my laptop, started the server, and verified  
that I could connect to it with Chicken of the VNC.  I did not stop  
the server, I saved the changes with a slightly altered name, and  
scp'd the image and changes files that had that altered name over to  
the Debian machine.

I started squeak with the command,

     nohup squeak -headless ~/squeaks/*image &

(in the directory, "squeaks," there are two files, the image and the  
changes)

This process appears to be running.  "ps -ef" shows:

     squeakvm -headless [~]/squeaks/Squeak3.9-final-7067_RFB.image  
squeak.image

When I use Chicken to try to start a session, changing only the  
hostname (which is a raw IP address), I get a "connection refused"  
message.

I have been told by this ISP that they are not blocking port 5900,  
and the nohup.out file is still zero length.  Is there something that  
netstat would reveal about whether the RFB app came up properly and  
is actually listening on 5900?  Any other clues?

-jmc


On Jul 14, 2008, at 3:20 AM, K. K. Subramaniam wrote:

> On Saturday 12 Jul 2008 2:06:50 pm John Chandler wrote:
>> OK, but if my image is for Mac OS X PPC, and the target machine is
>> Debian x86, will the image I copy to it even start up?
> Image files can be opened on any platform.
>
> Make sure that you get the *virtual machine* for the Debian x86.  
> Install
> squeakvm package to get the VM binaries.
>
> Subbu
> _______________________________________________
> Beginners mailing list
> [hidden email]
> http://lists.squeakfoundation.org/mailman/listinfo/beginners

NOTICE: Due to Presidential Executive Orders, the National Security  
Agency may have read this email without warning, warrant, or notice.  
They may do  this without any judicial or legislative oversight. You  
have little recourse nor protection except to call for the  
impeachment of the current President.

_______________________________________________
Beginners mailing list
[hidden email]
http://lists.squeakfoundation.org/mailman/listinfo/beginners
Reply | Threaded
Open this post in threaded view
|

Troubleshooting headless running of RFB

John Chandler-3
In reply to this post by K. K. Subramaniam
I installed the RFB (vnc viewer/server) package on my Debian server,
to which I don't have console access.  There appears to be a problem
with it, because the connection is refused.

I loaded the package on my laptop, started the server, and verified
that I could connect to it with Chicken of the VNC.  I did not stop
the server, I saved the changes with a slightly altered name, and
scp'd the image and changes files that had that altered name over to
the Debian machine.

I started squeak with the command,

     nohup squeak -headless ~/squeaks/*image &

(in the directory, "squeaks," there are two files, the image and the
changes)

This process appears to be running.  "ps -ef" shows:

     squeakvm -headless [~]/squeaks/Squeak3.9-final-7067_RFB.image  
squeak.image


When I use Chicken to try to start a session, changing only the
hostname (which is a raw IP address), I get a "connection refused"
message.

I have been told by this ISP that they are not blocking port 5900, and
I ran in.telnetd in debug mode on port 5900 and got a connection, so
it appears that this is true.  The nohup.out file is still zero
length.  Are there any other log files that might be informative?  Is
there something that netstat would reveal about whether the RFB app
came up properly and is actually listening on 5900?  Any other clues?

-jmc

_______________________________________________
Beginners mailing list
[hidden email]
http://lists.squeakfoundation.org/mailman/listinfo/beginners
Reply | Threaded
Open this post in threaded view
|

Re: Troubleshooting headless running of RFB

Brad Fuller-4
There was a problem a year or so ago with RFBs with new images - which
I don't know if it was fixed.
You should search the archives. See if this helps:

http://article.gmane.org/gmane.comp.lang.smalltalk.squeak.general/112180


On Tue, Jul 15, 2008 at 3:48 PM, John Chandler <[hidden email]> wrote:

> I installed the RFB (vnc viewer/server) package on my Debian server,
> to which I don't have console access.  There appears to be a problem
> with it, because the connection is refused.
>
> I loaded the package on my laptop, started the server, and verified
> that I could connect to it with Chicken of the VNC.  I did not stop
> the server, I saved the changes with a slightly altered name, and
> scp'd the image and changes files that had that altered name over to
> the Debian machine.
>
> I started squeak with the command,
>
>    nohup squeak -headless ~/squeaks/*image &
>
> (in the directory, "squeaks," there are two files, the image and the
> changes)
>
> This process appears to be running.  "ps -ef" shows:
>
>    squeakvm -headless [~]/squeaks/Squeak3.9-final-7067_RFB.image
> squeak.image
>
>
> When I use Chicken to try to start a session, changing only the
> hostname (which is a raw IP address), I get a "connection refused"
> message.
>
> I have been told by this ISP that they are not blocking port 5900, and
> I ran in.telnetd in debug mode on port 5900 and got a connection, so
> it appears that this is true.  The nohup.out file is still zero
> length.  Are there any other log files that might be informative?  Is
> there something that netstat would reveal about whether the RFB app
> came up properly and is actually listening on 5900?  Any other clues?
>
> -jmc
>
> _______________________________________________
> Beginners mailing list
> [hidden email]
> http://lists.squeakfoundation.org/mailman/listinfo/beginners
>



--
Brad Fuller
www.bradfuller.com
_______________________________________________
Beginners mailing list
[hidden email]
http://lists.squeakfoundation.org/mailman/listinfo/beginners
Reply | Threaded
Open this post in threaded view
|

Re: Troubleshooting headless running of RFB

Klaus D. Witzel
In reply to this post by John Chandler-3
Hi John,

on Wed, 16 Jul 2008 00:48:42 +0200, you wrote:

> I installed the RFB (vnc viewer/server) package on my Debian server,
> to which I don't have console access.  There appears to be a problem
> with it, because the connection is refused.
>
> I loaded the package on my laptop, started the server, and verified
> that I could connect to it with Chicken of the VNC.  I did not stop
> the server, I saved the changes with a slightly altered name, and
> scp'd the image and changes files that had that altered name over to
> the Debian machine.
>
> I started squeak with the command,
>
>      nohup squeak -headless ~/squeaks/*image &
>
> (in the directory, "squeaks," there are two files, the image and the
> changes)
>
> This process appears to be running.  "ps -ef" shows:
>
>      squeakvm -headless [~]/squeaks/Squeak3.9-final-7067_RFB.image  
> squeak.image
>
>
> When I use Chicken to try to start a session, changing only the
> hostname (which is a raw IP address), I get a "connection refused"
> message.
>
> I have been told by this ISP that they are not blocking port 5900, and
> I ran in.telnetd in debug mode on port 5900 and got a connection, so
> it appears that this is true.  The nohup.out file is still zero
> length.  Are there any other log files that might be informative?  Is
> there something that netstat would reveal about whether the RFB app
> came up properly and is actually listening on 5900?  Any other clues?

Did you configure RFBServer to allow remote connections?

Before you saved the snapshot, did you close all connections (also from  
RFBServer's connections submenue)?

HTH.

/Klaus

> -jmc


_______________________________________________
Beginners mailing list
[hidden email]
http://lists.squeakfoundation.org/mailman/listinfo/beginners
Reply | Threaded
Open this post in threaded view
|

Re: Re: Troubleshooting headless running of RFB

John Chandler-3
On Jul 16, 2008, at 1:06 AM, Klaus D. Witzel wrote:

> Hi John,
>
> on Wed, 16 Jul 2008 00:48:42 +0200, you wrote:
>
>> I installed the RFB (vnc viewer/server) package on my Debian server,
>> to which I don't have console access.  There appears to be a problem
>> with it, because the connection is refused.
>>
>> I loaded the package on my laptop, started the server, and verified
>> that I could connect to it with Chicken of the VNC.  I did not stop
>> the server, I saved the changes with a slightly altered name, and
>> scp'd the image and changes files that had that altered name over to
>> the Debian machine.
>>
>> I started squeak with the command,
>>
>>      nohup squeak -headless ~/squeaks/*image &
>>
>> (in the directory, "squeaks," there are two files, the image and the
>> changes)
>>
>> This process appears to be running.  "ps -ef" shows:
>>
>>      squeakvm -headless [~]/squeaks/Squeak3.9-final-7067_RFB.image  
>> squeak.image
>>
>>
>> When I use Chicken to try to start a session, changing only the
>> hostname (which is a raw IP address), I get a "connection refused"
>> message.
>>
>> I have been told by this ISP that they are not blocking port 5900,  
>> and
>> I ran in.telnetd in debug mode on port 5900 and got a connection, so
>> it appears that this is true.  The nohup.out file is still zero
>> length.  Are there any other log files that might be informative?  Is
>> there something that netstat would reveal about whether the RFB app
>> came up properly and is actually listening on 5900?  Any other clues?
>
> Did you configure RFBServer to allow remote connections?

I just checked, and all the "connections" buttons are active (filled  
in).  I am sure I
haven't messed with that since saving.  However, it can't hurt to  
save and copy
again.

>
> Before you saved the snapshot, did you close all connections (also  
> from RFBServer's connections submenue)?

No.  I guess you're saying that I should.  Right?

>
> HTH.
>
> /Klaus
>
>> -jmc
>
>
> _______________________________________________
> Beginners mailing list
> [hidden email]
> http://lists.squeakfoundation.org/mailman/listinfo/beginners

_______________________________________________
Beginners mailing list
[hidden email]
http://lists.squeakfoundation.org/mailman/listinfo/beginners
Reply | Threaded
Open this post in threaded view
|

Re: Re: Troubleshooting headless running of RFB

John Chandler-3
In reply to this post by Klaus D. Witzel
On Jul 16, 2008, at 1:06 AM, Klaus D. Witzel wrote:

> Hi John,
>
> on Wed, 16 Jul 2008 00:48:42 +0200, you wrote:
>
>> I installed the RFB (vnc viewer/server) package on my Debian server,
>> to which I don't have console access.  There appears to be a problem
>> with it, because the connection is refused.
>>
>> [...]
>
> Did you configure RFBServer to allow remote connections?
>
> Before you saved the snapshot, did you close all connections (also  
> from RFBServer's connections submenue)?

Yes. The problem was more basic: root privileges are required.  D-OH!

I should have known this, but while I avoid running as root as a very
ingrained policy, this makes it impossible to open a socket to the  
outside
world.

I looked around for a discussion of security issues with Seaside, and  
didn't
come up with much.  Are there ways of limiting the damage a malicious
person could get a root-enabled Squeak to do?  I know it's a bit more
obscure than Apache, but still.

Thanks for answering.

-jmc

_______________________________________________
Beginners mailing list
[hidden email]
http://lists.squeakfoundation.org/mailman/listinfo/beginners
Reply | Threaded
Open this post in threaded view
|

Re: Re: Troubleshooting headless running of RFB

Bert Freudenberg

Am 16.07.2008 um 04:55 schrieb John Chandler:

> On Jul 16, 2008, at 1:06 AM, Klaus D. Witzel wrote:
>> Hi John,
>>
>> on Wed, 16 Jul 2008 00:48:42 +0200, you wrote:
>>
>>> I installed the RFB (vnc viewer/server) package on my Debian server,
>>> to which I don't have console access.  There appears to be a problem
>>> with it, because the connection is refused.
>>>
>>> [...]
>>
>> Did you configure RFBServer to allow remote connections?
>>
>> Before you saved the snapshot, did you close all connections (also  
>> from RFBServer's connections submenue)?
>
> Yes. The problem was more basic: root privileges are required.  D-OH!
>
> I should have known this, but while I avoid running as root as a very
> ingrained policy, this makes it impossible to open a socket to the  
> outside
> world.
>
> I looked around for a discussion of security issues with Seaside,  
> and didn't
> come up with much.

I am certain there are discussions of this. You should ask on the  
Seaside list, too.

I don't think anyone serious runs their Seaside installation as root.  
Most common is to proxy via Apache, but you can also use firewall  
settings to make your Seaside port appear as port 80 to the outside  
world, even though it actually is running on a non-privileged port.

> Are there ways of limiting the damage a malicious
> person could get a root-enabled Squeak to do?  I know it's a bit more
> obscure than Apache, but still.
>
> Thanks for answering.

Again, I'm not saying running as root is a good idea, but you can  
enable the VM-level file sand-boxing:

        SecurityManager default disableFileAccess

which will restrict all file access to

        SecurityManager default untrustedUserDirectory

Of course this only makes sense if you do not include the FFI plugin  
which can call any C function in any library directly. And besides, do  
not run as root.

- Bert -


_______________________________________________
Beginners mailing list
[hidden email]
http://lists.squeakfoundation.org/mailman/listinfo/beginners
Reply | Threaded
Open this post in threaded view
|

Re: Re: Troubleshooting headless running of RFB

Kenneth W Brown III
Bert Freudenberg wrote:

> I don't think anyone serious runs their Seaside installation as root.
> Most common is to proxy via Apache, but you can also use firewall
> settings to make your Seaside port appear as port 80 to the outside
> world, even though it actually is running on a non-privileged port.

This is solid advice, but I think John's issue is with his VNC
connection. He's been saying that's on port 5900, which is outside the
superuser range (1-1023 for those keeping score at home).

I'd recommend trying to telnet to the VNC server while the image is
running. If you get a bunch of text with the letters rfb in it, then you
know it's working.

- Ken
_______________________________________________
Beginners mailing list
[hidden email]
http://lists.squeakfoundation.org/mailman/listinfo/beginners
12