[–] 2 points 2 days ago

Can't help youhere unfortunately, as I would have thought that this is the most likely cause as well.
I'm just commenting to say: Please let us know if you found a solution to the problem. I'm very interested to know what might have caused this.

  • source
  • parent
  • context
  • [–] [S] 1 point 3 days ago*

    I actually needed to look that up, since I didn't know either. So, thank you, I've learned something new because of your question.

              d/s    The number (after merges) of discard requests
                     completed per second for the device.
    
              f/s    The number (after merges) of flush requests
                     completed per second for the device.  This counts
                     flush requests executed by disks. Flush requests are
                     not tracked for partitions.  Before being merged,
                     flush operations are counted as writes.
    

    https://man7.org/linux/man-pages/man1/iostat.1.html

    (Discards being TRIM operations on SSDs, I imagine.)

  • source
  • parent
  • context
  •  

    I have eight identical drives connected to an LSI 9207-8i ASRock X470 Taichi Ultimate mainboard.

    They're currently all running badblocks -b 8192 -c 2048 -p 0 -s -t 0 -v -w /dev/disk/by-id/ata-WDC_WUH722424ALE6L4_[XXXXXXXX] each.

    While sda and sdb achieve almost 300MB/s, sdg and sdh struggle to even get to 200MB/s. That's a 50% difference!

    All of my drives are recognized as SATA3, confirmed by smartctl -a /dev/sd[a-h] | grep SATA showing SATA Version is: SATA 3.5, 6.0 Gb/s (current: 6.0 Gb/s)

    There's no CPU bottleneck either AFAICT:

    Any idea what could be the issue of that? Is such a dramatic speed difference to be expected of Ultrastar drives?
    Are these drives just bad?

    Edit: Mainboard configuration:

    Edit2: Okay, apparently the ASM1061 which provides the two extra SATA3 ports is connected to the CPU via a single PCIe 2.0 x1 lane, which provides only 4gbps (=500MB/s) of raw throughput.
    I think I have found the culprit and the problem should disappear once I connect the drives to my LSI 9207-8i HBA card.

    [–] 3 points 4 days ago

    Doesn't change anything for me as I a) intentionally don't interact much with reddit anymore and b) am a VPN used and have to login because of that anyway.

    But yes, reddit has gone to shit a long time ago.

  • source
  •  

    cross-posted from: https://feddit.org/post/30198502

    System:

    Debian 13 KDE (actually MX Linux, but doesn't seem to matter)  
    Wayland (xwayland installed as well)  
    Docker 29.5.2
    

    Dockerfile:

    FROM debian:trixie
    
    ENV DEBIAN_FRONTEND=noninteractive
    ENV LANG=en_US.UTF-8
    ENV LANGUAGE=en_US:en
    ENV LC_ALL=en_US.UTF-8
    
    # Set locale
    RUN apt-get update && apt-get install -y --no-install-recommends \
            locales && \
        apt-get clean && \
        sed -i '/en_US.UTF-8/s/^# //g' /etc/locale.gen && \
        locale-gen
    
    # Install Wayland-specific packages
    RUN apt-get update && apt-get install -y --no-install-recommends \
            dbus \
            libwayland-client0 \
            libwayland-egl1 && \
        apt-get clean
    
    # Install X-specific packages
    RUN apt-get update && apt-get install -y --no-install-recommends \
            dbus-x11 && \
        apt-get clean
    
    # Add contrib, default is only main
    RUN sed -i 's/^Components:.*/Components: main contrib/g' /etc/apt/sources.list.d/debian.sources
    
    # Add 32-bit arch for Steam libraries
    RUN dpkg --add-architecture i386
    
    # Install Steam
    RUN apt-get update && apt-get install -y --no-install-recommends \
            steam-installer \
            pciutils && \
        apt-get clean
    
    # Additional
    # TODO: What is really needed?
    RUN apt-get update && apt-get install -y --no-install-recommends \
            vulkan-tools \
            mesa-utils \
            x11-xserver-utils \
            libvulkan1 \
            mesa-vulkan-drivers && \
        apt-get clean
    
    # TODO: Does `-storebeta` even work?
    # https://developer.valvesoftware.com/wiki/Command_line_options_(Steam)
    CMD ["/usr/games/steam", "-storebeta"]
    
    

    To run the container:

    xhost +
    sudo docker run -it --name steam \
        -e XDG_RUNTIME_DIR=$XDG_RUNTIME_DIR \
        -e WAYLAND_DISPLAY=$WAYLAND_DISPLAY \
        -v $XDG_RUNTIME_DIR/$WAYLAND_DISPLAY:$XDG_RUNTIME_DIR/$WAYLAND_DISPLAY \
        -e DISPLAY=$DISPLAY \
        -v /tmp/.X11-unix:/tmp/.X11-unix \
        --privileged steam:trixie
    

    (The --privileged part is only temporary until I found out which capabilities are actually needed. Please don't run your containers with --privileged.)

    I get the GUI dialogs to download Steam just fine, so at least some display forwarding is working:

    The installation works fine, but when starting Steam it seems like it's not able to find Vulkan devices and then doesn't open any Steam window. (The container is not stopping and I'm seeing repeated ./steamwebhelper output after this.)

    [...]
    Running query: 1 - GpuTopology
    CVulkanTopology: failed create vulkan instance: -9
    CVulkanTopology: failed to create vulkan instanceFailed to query vulkan gpu topology
    
    Failed to query vulkan gpu topology
    Response: 
    Exit code: -2
    [...]
    Vulkan missing requested extension 'VK_KHR_surface'.
    Vulkan missing requested extension 'VK_KHR_xlib_surface'.
    BInit - Unable to initialize Vulkan!
    [...]
    

    However, Vulkan is clearly working fine in the container, as this commands displays the cube rendering just fine:

    $ sudo docker exec -it steam vkcube
    Selected WSI platform: xcb
    Selected GPU 0: AMD Radeon RX 550 / 550 Series (RADV POLARIS12), type: DiscreteGpu
    

    (I've also tried it on another (pure) Debian machine with a 2080Ti, but I've got the same issue.)

    I've created other GUI containers in the past (Firefox for example) and didn't have these problems.

    Does anybody have an idea and can point me in the right direction?

     

    cross-posted from: https://feddit.org/post/30198502

    System:

    Debian 13 KDE (actually MX Linux, but doesn't seem to matter)  
    Wayland (xwayland installed as well)  
    Docker 29.5.2
    

    Dockerfile:

    FROM debian:trixie
    
    ENV DEBIAN_FRONTEND=noninteractive
    ENV LANG=en_US.UTF-8
    ENV LANGUAGE=en_US:en
    ENV LC_ALL=en_US.UTF-8
    
    # Set locale
    RUN apt-get update && apt-get install -y --no-install-recommends \
            locales && \
        apt-get clean && \
        sed -i '/en_US.UTF-8/s/^# //g' /etc/locale.gen && \
        locale-gen
    
    # Install Wayland-specific packages
    RUN apt-get update && apt-get install -y --no-install-recommends \
            dbus \
            libwayland-client0 \
            libwayland-egl1 && \
        apt-get clean
    
    # Install X-specific packages
    RUN apt-get update && apt-get install -y --no-install-recommends \
            dbus-x11 && \
        apt-get clean
    
    # Add contrib, default is only main
    RUN sed -i 's/^Components:.*/Components: main contrib/g' /etc/apt/sources.list.d/debian.sources
    
    # Add 32-bit arch for Steam libraries
    RUN dpkg --add-architecture i386
    
    # Install Steam
    RUN apt-get update && apt-get install -y --no-install-recommends \
            steam-installer \
            pciutils && \
        apt-get clean
    
    # Additional
    # TODO: What is really needed?
    RUN apt-get update && apt-get install -y --no-install-recommends \
            vulkan-tools \
            mesa-utils \
            x11-xserver-utils \
            libvulkan1 \
            mesa-vulkan-drivers && \
        apt-get clean
    
    # TODO: Does `-storebeta` even work?
    # https://developer.valvesoftware.com/wiki/Command_line_options_(Steam)
    CMD ["/usr/games/steam", "-storebeta"]
    
    

    To run the container:

    xhost +
    sudo docker run -it --name steam \
        -e XDG_RUNTIME_DIR=$XDG_RUNTIME_DIR \
        -e WAYLAND_DISPLAY=$WAYLAND_DISPLAY \
        -v $XDG_RUNTIME_DIR/$WAYLAND_DISPLAY:$XDG_RUNTIME_DIR/$WAYLAND_DISPLAY \
        -e DISPLAY=$DISPLAY \
        -v /tmp/.X11-unix:/tmp/.X11-unix \
        --privileged steam:trixie
    

    (The --privileged part is only temporary until I found out which capabilities are actually needed. Please don't run your containers with --privileged.)

    I get the GUI dialogs to download Steam just fine, so at least some display forwarding is working:

    The installation works fine, but when starting Steam it seems like it's not able to find Vulkan devices and then doesn't open any Steam window. (The container is not stopping and I'm seeing repeated ./steamwebhelper output after this.)

    [...]
    Running query: 1 - GpuTopology
    CVulkanTopology: failed create vulkan instance: -9
    CVulkanTopology: failed to create vulkan instanceFailed to query vulkan gpu topology
    
    Failed to query vulkan gpu topology
    Response: 
    Exit code: -2
    [...]
    Vulkan missing requested extension 'VK_KHR_surface'.
    Vulkan missing requested extension 'VK_KHR_xlib_surface'.
    BInit - Unable to initialize Vulkan!
    [...]
    

    However, Vulkan is clearly working fine in the container, as this commands displays the cube rendering just fine:

    $ sudo docker exec -it steam vkcube
    Selected WSI platform: xcb
    Selected GPU 0: AMD Radeon RX 550 / 550 Series (RADV POLARIS12), type: DiscreteGpu
    

    (I've also tried it on another (pure) Debian machine with a 2080Ti, but I've got the same issue.)

    I've created other GUI containers in the past (Firefox for example) and didn't have these problems.

    Does anybody have an idea and can point me in the right direction?

     

    System:

    Debian 13 KDE (actually MX Linux, but doesn't seem to matter)  
    Wayland (xwayland installed as well)  
    Docker 29.5.2
    

    Dockerfile:

    FROM debian:trixie
    
    ENV DEBIAN_FRONTEND=noninteractive
    ENV LANG=en_US.UTF-8
    ENV LANGUAGE=en_US:en
    ENV LC_ALL=en_US.UTF-8
    
    # Set locale
    RUN apt-get update && apt-get install -y --no-install-recommends \
            locales && \
        apt-get clean && \
        sed -i '/en_US.UTF-8/s/^# //g' /etc/locale.gen && \
        locale-gen
    
    # Install Wayland-specific packages
    RUN apt-get update && apt-get install -y --no-install-recommends \
            dbus \
            libwayland-client0 \
            libwayland-egl1 && \
        apt-get clean
    
    # Install X-specific packages
    RUN apt-get update && apt-get install -y --no-install-recommends \
            dbus-x11 && \
        apt-get clean
    
    # Add contrib, default is only main
    RUN sed -i 's/^Components:.*/Components: main contrib/g' /etc/apt/sources.list.d/debian.sources
    
    # Add 32-bit arch for Steam libraries
    RUN dpkg --add-architecture i386
    
    # Install Steam
    RUN apt-get update && apt-get install -y --no-install-recommends \
            steam-installer \
            pciutils && \
        apt-get clean
    
    # Additional
    # TODO: What is really needed?
    RUN apt-get update && apt-get install -y --no-install-recommends \
            vulkan-tools \
            mesa-utils \
            x11-xserver-utils \
            libvulkan1 \
            mesa-vulkan-drivers && \
        apt-get clean
    
    # TODO: Does `-storebeta` even work?
    # https://developer.valvesoftware.com/wiki/Command_line_options_(Steam)
    CMD ["/usr/games/steam", "-storebeta"]
    
    

    To run the container:

    xhost +
    sudo docker run -it --name steam \
        -e XDG_RUNTIME_DIR=$XDG_RUNTIME_DIR \
        -e WAYLAND_DISPLAY=$WAYLAND_DISPLAY \
        -v $XDG_RUNTIME_DIR/$WAYLAND_DISPLAY:$XDG_RUNTIME_DIR/$WAYLAND_DISPLAY \
        -e DISPLAY=$DISPLAY \
        -v /tmp/.X11-unix:/tmp/.X11-unix \
        --privileged steam:trixie
    

    (The --privileged part is only temporary until I found out which capabilities are actually needed. Please don't run your containers with --privileged.)

    I get the GUI dialogs to download Steam just fine, so at least some display forwarding is working:

    The installation works fine, but when starting Steam it seems like it's not able to find Vulkan devices and then doesn't open any Steam window. (The container is not stopping and I'm seeing repeated ./steamwebhelper output after this.)

    [...]
    Running query: 1 - GpuTopology
    CVulkanTopology: failed create vulkan instance: -9
    CVulkanTopology: failed to create vulkan instanceFailed to query vulkan gpu topology
    
    Failed to query vulkan gpu topology
    Response: 
    Exit code: -2
    [...]
    Vulkan missing requested extension 'VK_KHR_surface'.
    Vulkan missing requested extension 'VK_KHR_xlib_surface'.
    BInit - Unable to initialize Vulkan!
    [...]
    

    However, Vulkan is clearly working fine in the container, as this commands displays the cube rendering just fine:

    $ sudo docker exec -it steam vkcube
    Selected WSI platform: xcb
    Selected GPU 0: AMD Radeon RX 550 / 550 Series (RADV POLARIS12), type: DiscreteGpu
    

    (I've also tried it on another (pure) Debian machine with a 2080Ti, but I've got the same issue.)

    I've created other GUI containers in the past (Firefox for example) and didn't have these problems.

    Does anybody have an idea and can point me in the right direction?

     

    Debian 13:

    $ uname -r
    6.12.88+deb13-amd64
    
    $ snap debug sandbox-features|grep confinement
    confinement-options:  classic devmode
    
    $ snap debug confinement
    partial
    
    $ aa-enabled
    Yes
    

    Ubuntu (24.04):

    $ uname -r
    6.8.0-117-generic
    
    $ snap debug sandbox-features|grep confinement
    confinement-options:  classic devmode strict
    
    $ snap debug confinement
    strict
    
    $ aa-enabled
    Yes
    

    What does this mean, you ask? Well, basically every Snap package you thought was running isolated in it's own little sandbox were running unconfined the whole time. The prorpietary app you removed the :home connection from, so it wouldn't be able to access your home directory? Well, it could have exfiltrated all our private files in the meantime.

    How is this not a bigger deal and how are Snaps ever to become mainstream when even today, more than 10 years after the introduction of snaps, you can't run them sandboxed on a huge portion of Linux distros?

     

    Recently I've installed luci-app-banip on my OpenWrt router and blocked most countries from accessing my services on my network. Not seeing why I would want any of that traffic I also blocked the whole of the ARIN registry, responsible for IP addresses from Canada and the United States.
    Edit: Note this is only for inbound traffic. Outbound traffic is allowed no matter the target country.

    Fast forward a few weeks and my certbot renewals fail with the following error: Failed to renew certificate enter.domain.here with error: HTTPSConnectionPool(host='acme-v02.api.letsencrypt.org', port=443): Read timed out. (read timeout=45)

    Confused af I start looking for solutions and as so often only find useless or completely ridiulous solutions (lowering my MTU to 1300, what? WHY?). Finally I find some enlighted figure that says they recently enabled a blocklist for certain countries and that was the issue for them.
    Now I make the connection to my use of banIP, re-allow the USA and my cert renewals start working again. Hooray!

    However, there are two things bothering me:

    1. Why would such a block even interrupt my renewals? I'm using DNS challenges and the ACME servers should only check the DNS entries, not where those entries actually redirect to. The DNS server/root isn't in my home network, so isn't affected by any firewall shenanigans I do here.
    2. How can I make an exception for the Let's Encrypt ACME servers while blocking the rest of the ARIN IP space?

    I see there's the option for ASN selection and external allowlists:

    Does anybody have an idea on how to configure this so that Let's Encrypt continues to work without compromising on my network security?

    (Edit: And just for clarity, I do not live in the US or anywhere on the American continent.)

    view more: next ›