Disqus - Latest Comments for Schnouki

Re: WTF Python

Schnouki — Thu, 08 Jun 2017 10:16:45 -0000

Pour changer la valeur d'un entier littéral ça peut se faire en utilisant ctypes : http://hforsten.com/redefin...

Re: OpenVPN for a single application on Linux

Schnouki — Thu, 25 May 2017 16:29:31 -0000

Sorry for the delay.
When you say "local desktop", you mean another (desktop) computer on the same LAN, right? In that case, you may have some luck with socat as described here: https://unix.stackexchange.... (and in the other comments). You will still have to configure transmission-daemon to accept connections from 10.200.200.* though. Hope this helps.

Re: OpenVPN for a single application on Linux

Schnouki — Tue, 09 May 2017 03:36:19 -0000

Hi! I haven't tested this with transmission-daemon, but I quickly read some docs and I think you'll have to:
- configure transmssion-daemon to allow connections from the default namespace. If you're using the same config as me, this means adding "10.200.200.*" to the rpc-whitelist config as documented in https://github.com/transmis...
- restart transmission-daemon
- connect to http://10.200.200.2:9091 instead of http://localhost:9091.
Please tell me if this works!

Re: OpenVPN for a single application on Linux

Schnouki — Tue, 29 Mar 2016 09:05:57 -0000

1. is actually quite easy: remove the default route! Or rather don't add it (so no "ip route add default ..."). Instead, just add routes to reach your VPN server and optionnaly your DNS servers: "ip netns exec $VPN ip route add 1.2.3.4/32 via 10.200.200.1 dev vpn1". You won't be able to ping anything except for the whitelisted IPs until your VPN is connected.

2. not sure as it works for me. Do you have a firewall that filters incoming connection on your computer?

3. I don't use update-resolv-conf so I couldn't tell, sorry :/

Re: OpenVPN for a single application on Linux

Schnouki — Tue, 29 Mar 2016 08:50:42 -0000

You'll need to redirect incoming connections on the outside address to the inside address. IMHO the easiest way to do so is with socat, as explained here: http://unix.stackexchange.c... (from another comment here).

You will probably open 2 ports on the public IP, such as 1194 and 1195, with 1194 redirecting traffic to the first namespace, and 1195 to the second one. And you'll need to configure your client to connect to 1.1.1.1 (public IP) with port 1194 or 1195.

If you do that however you will not be able to see the "source" IP of incoming connections from the OpenVPN logs: everything will be coming from your server's IP inside each namespace (e.g. 10.10.10.1 and 10.10.20.1).

Re: OpenVPN for a single application on Linux

Schnouki — Tue, 29 Mar 2016 08:45:20 -0000

Sorry, no idea about that :( Perhaps a firewall that is a little too regarding on what goes out from your computer?

Re: Flashing a stock Android image without wiping user data

Schnouki — Tue, 29 Mar 2016 08:43:35 -0000

Depends on the kernel, but I've used it in the past with my Galaxy Nexus and custom kernels. You can flash the kernel with "fastboot flash boot.img" in bootloader mode, or a kernel .zip from recovery.

Re: A Mother’s Confession: A SONG WITH FOOTNOTES

Schnouki — Fri, 26 Feb 2016 05:00:54 -0000

One thing I've learned after my baby son fell from the changing table: when you tell about that, all parents will also tell you about their fuck-ups. Friends, family, even my boss... Yep, we all did this.
The kid is now perfectly OK (he was about 5 or 6 months when this happened, he'll turn 1 in a few days), he can almost walk, a few days ago he managed to stand up in his high chair, but god it's still scary when I remember him falling from that table...

Thanks for this song Amanda. You're doing fine with the baby, and he looks adorable :)

Re: OpenVPN for a single application on Linux

Schnouki — Sun, 31 Jan 2016 19:28:30 -0000

Hi pskiebe, very interesting question indeed! I replied on StackExchange (https://unix.stackexchange.... ) with a simple solution that uses socat. Please tell me if it works or doesn't work for you!

Re: OpenVPN for a single application on Linux

Schnouki — Wed, 28 Oct 2015 07:13:08 -0000

No way to prevent this, namespaces are runtime only and have to be recreated after rebooting :(

Re: Flashing a stock Android image without wiping user data

Schnouki — Mon, 20 Jul 2015 04:04:06 -0000

I had the same issue when upgrading from Kitkat to Lollipop on my OPO. If I remember correctly, you have to upgrade TWRP to the latest version available. It's required to install recent ROMs.

Re: OpenVPN for a single application on Linux

Schnouki — Mon, 19 Jan 2015 06:03:40 -0000

Hi scoobnyz. 10.200.200.1 is an arbitrary IP address; my LAN is in the 192.168.0.0/16 range. I even used this script when on a 10.0.0.0/8 LAN and it worked just fine (as the VPN vpn0 interface was restricted to a /24 inside this /8).

Re: lighttpd and SSL client certificates

Schnouki — Thu, 13 Nov 2014 08:01:21 -0000

It's the ca.crt created at step 2.

Re: TLSA records on OVH · /dev/schnouki

Schnouki — Mon, 13 Oct 2014 11:29:34 -0000

Yep, I just copied the line from tlsa. Using the standard OVH NS, with the old manager, in "expert" mode (i.e. editing the raw zone file without any helper). I'm not sure it can even be done with the new manager...

Re: Détérioration continue

Schnouki — Tue, 16 Sep 2014 19:36:49 -0000

Héhé oui on commence doucement à l'annoncer à tout le monde... Et bizarrement il y a beaucoup de monde qui nous souhaite bon courage :D

J'ai regardé un peu Pajemploi et quelques autres sites, bon ça commence à être un peu plus clair :) Je sens que je vais aussi m'éclater à faire de jolies feuilles de calcul, histoire de bien comprendre comment ça marche.
Et vu la tête des sites qui proposent déjà ce genre de services, en effet une petite webapp open source ça pourrait faire du bien :)
Elle a quel âge ta gaminette ?

Re: Détérioration continue

Schnouki — Sun, 14 Sep 2014 17:14:17 -0000

Intéressant. Nous le gaminou n'arrive que dans 6 mois (on ne sait pas encore si ce sera un gaminet ou une gaminette), pour l'instant on est dans le déménagement et on s'occupera de la nounou après... Mais là tout d'un coup ça fait beaucoup plus peur :) Il y a toujours autant de paperasse à faire ? C'est pas la nounou/l'URSSAF/un gentil lutin qui fait tout les calculs habituellement ? Ou y'a pas un site pour faire les calculs tous seuls en complétant un seul formulaire très clair ?

Re: Un site web pour liseuse

Schnouki — Tue, 01 Jul 2014 11:30:18 -0000

Wouh pinaise. Je <3 ma liseuse, mais je suis bien content de ne pas avoir à gérer ce cas là au boulot :)

Re: Erreur git « Failed to lock »

Schnouki — Mon, 30 Jun 2014 03:55:56 -0000

Haha, j'ai déjà eu exactement le même problème :)

Pour une explication plus bas niveau, il suffit d'aller voir ce qu'il se passe dans le dossier .git/refs/remotes/origin : tu as un fichier par branche, avec comme nom le nom de la branche. Donc dev/tralala est représenté par un fichier "tralala" dans le dossier "dev". Or tu ne peux pas avoir dans le même dossier un fichier et un dossier avec le même nom, donc si tu as une branche nommée "dev", et donc un fichier nommé "dev", tu ne peux pas créer "dev/tralala", car il faudrait que "dev" soit un dossier. Ainsi, quand git essaye de faire son fopen() pour créer "dev/tralala", il se prend une erreur "ENOTDIR: A component used as a directory in pathname is not, in fact, a directory". Et le message d'erreur renvoyé par strerror(), en toute logique, est "Not a directory" :)

Sinon, pour changer complètement de sujet, ça fait plaisir de pouvoir te lire à nouveau :) Par contre il faudra que tu fasses quelque chose pour ton Disqus : il n'y a pas de commentaires quand on se connecte à ton blog en https, ce qui rend triste les utilisateurs de HTTPS Everywhere. C'est simple à résoudre : dans le code d'intégration de Disqus, il faut forcer la valeur de disqus_url à l'URL en http, comme ça Disqus "sait" que les versions HTTP et HTTPS sont en fait la même page :)

Re: ZSH completion for git-annex

Schnouki — Wed, 28 May 2014 04:21:30 -0000

Frank, thanks for this! :)

I'd love for this function to be included in zsh, but IMO it's too soon: there are still some details to review for arguments (I think too many args are proposed for some commands), the completion for add / drop / get / ... is still lacking, and there are other things to improve first.

And most important, I'm not sure the zsh devs would accept a completion function that depends on Python... but I haven't found any easy way to parse JSON directly from zsh :/

Re: Iceland on Tumblr

Schnouki — Mon, 06 Jan 2014 08:05:13 -0000

Hello, Iceland. I like you a lot (it's you behind me in my profile picture!), and even more now that I've learned this word. However, how do you pronounce it?
Love,

Thomas

Re: /dev/schnouki - iPhone tracking

Schnouki — Thu, 21 Apr 2011 17:38:31 -0000

That would be nice... but I honestly don't care enough to spend the time necessary to write something reliable and secure. Feel free to do it yourself if you're interested though -- my script is licensed under the WTFPL, so you can use it in an AGPL web service ;-)

Re: /dev/schnouki - iPhone tracking

Schnouki — Thu, 21 Apr 2011 17:34:56 -0000

You should just have to run that in your terminal (or you can explicitely run it with the Python 3 interpreter: python3 iphone-tracker.py consolidated.db > output.kml).
If you still have this issue, could you please post the full traceback (especially the line that triggers that error) so I can see where this happens?

Re: /dev/schnouki - HOWTO Backup your GnuPG secret key on paper

Schnouki — Wed, 20 Apr 2011 12:17:51 -0000

According to the libdmtx FAQ (http://libdmtx.wikidot.com/..., this could be due to an insufficient "quiet zone": The Data Matrix standard, and therefore libdmtx, requires a "quiet zone" to surround every barcode region. If your image is cropped so the Data Matrix symbol is touching or nearly touching the image boundary, this might be preventing a successful scan.

If this is not enough, you should try using the -v flag to have a more precise error message -- and maybe ask people who know better about libdmtx: see the "Get support" link on http://www.libdmtx.org/.

Re: Télécharger et installer Spotify sous Linux (client natif)

Schnouki — Mon, 12 Jul 2010 09:04:23 -0000

@Ulrar: carrément pas compatible OSS :) La version actuelle a besoin de libpulse.so.0 --> Pulse Audio. Sur le blog officiel, un des devs a dit que normalement ils avaient juste utilisé Alsa, donc c'est peut-être "juste" une erreur de packaging... mais bon, pour OSS ça va être dur :)

Re: Télécharger et installer Spotify sous Linux (client natif)

Schnouki — Mon, 12 Jul 2010 08:42:00 -0000

On peut l'installer sur d'autres distros en convertissant le .deb en une archive normale. C'est ce que fait par exemple le paquet Arch Linux avec deb2targz : http://aur.archlinux.org/pa...