Posts by 5schatten

My root password is already changed and ssh disabled as long as I don't need it. Gaming performance is mostly not affected by spectre patches and if you don't run run dolphin and PCSX2 emulators on decent hardware you're screwed anyway. Or why do you think I've got a i3-6100 installed at my HTPC.

Meltdown and Spectre: does patching your PC impact game performance? ⢠Eurogamer.net

Already setting up a VM on my own. Thx. See dude I've donated in the past and would keep donating for usefull custom distributions but as I see it's not needed since you're too busy. Maybe you shouldn't look down at any user asking question or participate in this thread.

The performance of a patched kernel 4.15 equals the performance of an unpatched kernel 4.11 that's what I read. And since most of the demanding processes are done by the igp oder dedicated decoders/encoders I don't see why i should sacrifice security for performance I haven't had before.

You don't care about security concerns. Got it. But I stick to this point of view:

Quote

The bug fixes for linux have been released to the public now for a lot longer than the Windows fix. This means that the source code detailing the current mitigations has been publicly available for quite some time. The longer its available the greater the opportunity to reverse engineer it, and then we will see exploits targeting vulnerable machines. Make no mistake about this, the bug affects Every single CPU Intel has produced since 2005 unless its an Itanium.

This is the kind of bug a criminal lives for, the one in your hardware. If you think that no one is looking to exploit this you are kidding yourself. Ultimately all you'll need to do is visit any booby trapped web site that triggers some javascript that exploits a branching code execution exploit and you may as well install a backdoor yourself with a sign saying "Come take my accounts for free" hanging over your computer. From the attackers perspective its not that simple yet, but then again its only early days, the exploits have only just been unveiled. How about this, do you work in IT do you take Virtual Machines home to work on, with your home computer? if one became infected from your unpatched machine you'll carry that liability.

If you run on an Intel chip you are vulnerable to three separate exploits from Spectre alone that can see details like passwords and other account details leaked from RAM, and that's the least serious part. The potential is there to inject arbitrary code into the Kernel by executing branching code that locates the Kernel in RAM. Once someone does that they own your computer and can do what they want with it. The longer this goes on the more sophisticated the attacks will become.

The major risk in particular as it relates to virtual machines is that it is possible for arbitrary code to jump virtual machines running on the same platform. Imagine renting a virtual server from Amazon or Microsoft, and being able to use it to illicitly collect data on all the other virtual machines running on the same host. That is one of the risks, it is also one that you wont face if you use Amazon and Microsoft because their systems are going to be patched.


If you fail to patch your machine I personally wouldn't trust you to open a Zip file. It's your risk to take but it is an avoidable one if you patch your system. And not to put too fine a point on it, All of us who own high end Intel systems are angry about this, your own situation is no different than mine or any other of a billion+ users out there who also don't want to sacrifice some performance for security. However these fixes wouldn't be getting pushed if the issue weren't serious, Intel wouldn't let something like this hit its share price if it wasn't damned serious, and people like me wouldn't take the time out to convey to you exactly how serious this problem is, if it was make believe.

Display More

"So, overall, we are right back where we started from. Which makes me feel good, the recent Meltdown changes turn out to not really be much of a problem overall,"

Anyway I have to set up a dedicated VM to compile something with urgent security patches that won't hit performance in a bad way.

I go and get some logs then.

Quote from escalade

Paranoid people could compile themselves.

...after setting up a dedicated system for compiling purposes.

Anyway you should consider this:

Linux Systems Running Newer Kernels Not Really Affected by Meltdown Patches

BTW: where ca I find the spotify logfile? I've got the black screen problem too and would provide some logs to get rid of it.

Quote from escalade

Anyone like an update?

20180202:

Code

linux: update to 4.14.16
mesa: update to 17c0e24 (18.0.0-rc3)
llvm: update to 5.0.1
xf86-video-nvidia-legacy: update to 340.106
xf86-video-nvidia: update to 390.25
curl: update to 7.58.0
libcurl-compat: update to 7.58.0
transmission: update to 2.93
ncurses: update to 6.1-20180129
LibreELEC-settings: update to f3bf1f2
binutils: update to 2.30
gcc: update to 7.3.0
libbluray: update to 1.0.2
btrfs-progs-system: update to 4.14.1
xorg-server: update to 1.19.6
xf86-video-intel: update to 26f5406
transmission: update to 81c9653
SABnzbd: update to 2.3.2
packages/escalade/python: package bumps and location updates
vulkan-loader: update to 1.0.65.1
ds4drv: update to c5b6661
zstd: update to f3a8bd5
openvpn: update to 2.4.4
heimdal: update to 7.5.0
glibc: update clear patches
samba: update to 4.8.0rc2
bluez: update to 5.48
emulation: package bumps for fs-uae, libretro-database, parallel-n64-libretro, redream-libretro, scummvm-libretro

Display More

I've chosen not to enable RETPOLINE and KPTI as it supposedly can slow down the computer and I'm not sure how paranoid one should be for a mediacenter.

Well since you've integrated a webbrowser we should be really paranoid. I use chrome for amazon prime & netflix and it would be a shame if some nasty javascript would steal my login & password.

Most mediacenters won't suffer because the media encoding is done by dedicated chips or the igp. So until the microcode is patched please enable it or at least offer a second build for paranoid people

THX

escalade

I guess you already moved on to LE9? Is it possible for you to update your old release to avoid spectre backdoors and stuff while browsing the net?

Also some new dolphin builds would be really awesome. I know the LE8 platform is bascially EOL but since Leia release won't be that soon an updated LE8 release of your special build could be very handy.

Quote

Kodi Leia is in a fluid state at the moment so the Alpha release milestone has moved back to April. There are no Kodi Krypton changes on the horizon (developers all switched to Leia months ago) but if we accumulate further nip/tuck fixes for reported issues or something exciting comes along we will consider another 8.2 maintenance release to fill the void.

LibreELEC (Krypton) 8.2.3 MR – LibreELEC

You better wait for kernel 4.15

Looking Ahead To AMD Ryzen Mobile On Linux - Phoronix

Quote from gwilly7

Hello Escalade,

I have been using Apollo lake boards for a while and working great. I am thinking about upgrading to AMD Raven Ridge when it is released. I know your builds have extra Intel support but I am wondering how well AMD is supported.

Quote from bigboo

Hi

I would like to execute this command-line automatically each time I boot my rpi (mount rom folder of my NAS):

Code

mount -t nfs 192.168.1.22:/NetBackup/Emulation/roms /storage/roms

How can I do that?

thank you

Mounting network shares - OpenELEC

My config looks like this, a file called "storage-roms-wii.mount" creates a dir in /storage/roms/wii

/storage/.config/system.d/storage-roms-wii.mount

[Unit]
Description=wii_roms@nas
Requires=network-online.service
After=network-online.service
Before=kodi.service

[Mount]
What=192.168.1.3:/i-data/22a34493/roms/nintendo/wii/roms
Where=/storage/roms/wii
Options=
Type=nfs

[Install]
WantedBy=multi-user.target

yours should look like this

/storage/.config/system.d/storage-roms.mount

"storage-roms.mount"

[Unit]
Description=roms@nas
Requires=network-online.service
After=network-online.service
Before=kodi.service

[Mount]
What=192.168.1.22:/NetBackup/Emulation/roms
Where=/storage/roms
Options=
Type=nfs

[Install]
WantedBy=multi-user.target

Quote from jjbull

I've just upgraded my htpc using an Asrock j4205 and wondered which build I should use with it

I'm using basically the same itx board in one of my htpc systems (J3455-ITX) and the generic build works quite fine. So stick to:

LibreELEC-Generic.x86_64-8.2-devel-20171218.img.gz

Quote from escalade

I've no plans to keep both LE8 and LE9 builds.

okay so better grab one of each as backup

escalade

Thx for the latest build it works awesome and my issues with the apollo based j3455-itx are completly gone -> audio works like a charm and even adoptable framerate does not break audio playback anymore.

Actually I'm using all of your builds (generic,avx,rpi2) and so i always have to check out whats new and whats not. I'm really a fan of your work and custom le build but could you do us a favor and reorganize your download folder structure?

Something like this:

le8

|-archive-|-legacy.tar

|-generic-|-generic.tar

.................|-cherrytrail-|-cherry.tar

.................|-avx-|-avx.tar

|-raspi-|-raspi.tar

le9

|-archive-|-legacy.tar

|-generic-|-generic.tar

.................|-cherrytrail-|-cherry.tar

.................|-avx-|-avx.tar

|-raspi-|-raspi.tar

It's just a thought because IMHO it's way more clear where the good stuff is uploaded to

Quote from meldrak

5schatten you missed this post

well it does not work at my system.

EDIT:

it works after linking the other missing libs too:

mkdir -p /storage/.kodi/addons/service.tvheadend42/lib 
ln -s /usr/lib/libva.so /storage/.kodi/addons/service.tvheadend42/lib/libva.so.1
ln -s /usr/lib/libva-drm.so /storage/.kodi/addons/service.tvheadend42/lib/libva-drm.so.1
ln -s /usr/lib/libva-x11.so /storage/.kodi/addons/service.tvheadend42/lib/libva-x11.so.1

Quote from escalade

20171121:

Code

samba: update to 4.7.3
mesa: update to d1e6cf4 (17.3-rc5)
retroarch: update to c056726
emulationstation-theme-simple-dark: add n3ds art
emulation: package bumps for beetle-psx-libretro, beetle-saturn-libretro and ppsspp-libretro
linux: update to 4.14.1
Merge pull request #37 from kuehnelth/feature_shortcut_settings
estuary: add options to disable emulators/spotify/chrome shortcuts

tvheadend won't start -> libva.so.1 is missing

################################################################################
# ... output of cat /storage/.kodi/userdata/addon_data/service.tvheadend42/service.log
# LibreELEC release: Generic.x86_64-devel-20171121
# 
################################################################################
/storage/.kodi/addons/service.tvheadend42/bin/tvheadend: error while loading shared libraries: libva.so.1: cannot open shared object file: No such file or directory

Quote from andersos

escalade - About the problem with Tvheadend service, I tried what they explained about Tvheadend in the LE 8.2.0 relese announcement, but it didn't work for me. Tvheadend service is running according to Settings/System/Add-ons/Running, but the PVR client can't connect and I cam't connect to it in Chrome. I tried both update and re-install. Do you want some log?

Dude he always needs logs. How would you solve a problem if you can't find out whats wrong? The easiest way is to browse you workgroup, open your htpc samba shares, enter the "Logfiles" directory, open the latest zip file and check out the single log files according to your problem. If tvheadend fails to connect for example then check out "11_Addons.log" and overhand the specific information you can find.

So escalade can have a look, fix his build and we're all happy

Does anybody if kernel 4.14 improves Playback on Apollo Lake based systems? I'm still using an ancient build that works more or less but i would upgrade to the new kernel version.

Quote from escalade

5schatten

Indeed, fixed build coming soon.

thx escalade LibreELEC-Generic.x86_64-8.2-devel-20171102.img works fine

escalade

Build LibreELEC-Generic.x86_64-8.2-devel-20171027.img

23:30:54.189 T:139676094560000 ERROR: Unable to load libnfs.so.11, reason: libnfs.so.11: cannot open shared object file: No such file or directory

23:30:54.189 T:139676094560000 ERROR: NFS: Error loading libnfs (HandleDyLoad).

-> Kodi 17.5 needs to be recompiled to include nfs support again?

PS:

Build LibreELEC-Generic.x86_64-8.2-devel-20171024.img works fine

23:45:21.324 T:139903846156416 NOTICE: VideoPlayer: Opening: nfs://192.168.1.....

escalade

I've got a question, I need to copy some files into the "/usr/share/dolphin-emu/sys/Wii" folder but if I'm not completly wrong / is full according to putty & "df -h"

So how to upload files into this folder? I guess I have to upload them into "/storage/.config/dolphin-emu" or something?

Basically I'm trying to follow this guide Dolphin Emulator - Wii Network Guide

EDIT:

well I see its already there in "/storage/.local/share/dolphin-emu/Wii"