Howto : Make your package updates faster in Ubuntu

Experiencing slow software updates from Ubuntu servers? Why don’t you try the nearest server to your location?

Although Ubuntu default installation already chooses the closest server to you, it is still a good idea to find a mirror located in your country to speed up software installation and updates.

The fastest way to do that is by using the Source-O-Matic tool fromUbuntu-NL website. The service is provided free-of-charge for the benefit of Ubuntu users around the world.

Beside the ‘official’ Ubuntu repository (main, universe, multiverse), Source-O-Matic also lists several popular ‘unofficial’ software repositories for you to put in your /etc/apt/sources.lst file.

Be aware that the ‘unofficial’ repositories isn’t regularly updated with the latest security patch and might break your operating system.

After you’ve done ticking the checkbox, you will be presented with a plaintext display of source.lst file content like this :

# Automatically generated sources.list
# http://www.ubuntu-nl.org/source-o-matic/
#
# If you get GPG errors with this sources.list, locate the GPG key in this file
# and run these commands (where KEY is replaced with that key)
#
# gpg --keyserver hkp://subkeys.pgp.net --recv-keys KEY
# gpg --export --armor KEY | sudo apt-key add -

# Ubuntu supported packages
# GPG key: 437D05B5
deb http://tw.archive.ubuntu.com/ubuntu edgy main restricted 
deb http://tw.archive.ubuntu.com/ubuntu edgy-updates main restricted
deb http://security.ubuntu.com/ubuntu edgy-security main restricted

# Ubuntu community supported packages
# GPG key: 437D05B5
deb http://tw.archive.ubuntu.com/ubuntu edgy universe multiverse 
deb http://tw.archive.ubuntu.com/ubuntu edgy-updates universe multiverse
deb http://security.ubuntu.com/ubuntu edgy-security universe multiverse

All you need to do is save the page and overwrite your current /etc/apt/sources.lst file with the one generated with this tool.

A word of warning
My initial checking reveals that not all servers listed in Ubuntu-NL is hosted in the same country as indicated in the list.

For example, a ‘dig’ to my.archive.ubuntu.com reveals this ip, 91.189.89.8 which is clearly is not a Malaysian ip address (a dig to us.archive.ubuntu.com also reveals the exact ip address).

So its better to double check the location of ip addresses produced by the mirror domain to confirms that the mirror is indeed located near your location before you start using it.

You can confirm this by visiting ShowIP fakap or HostIP services.

[tags]ubuntu, dapper,feisty fawn, breezy, apt-get,sources.lst[/tags]

Install Mozilla Firefox Ubuntu theme

Did you know Ubuntu provides Mozilla Firefox theme to make it look better integrated with default Ubuntu themes (Human, Tango, Industrial).

In order to take advantage of the integration, you need to install firefox-themes-ubuntu package.

sudo aptitude install firefox-themes-ubuntu

After you are done, you can start customising Firefox theme to make it look better integrated with the corresponding Ubuntu themes that you use, whether its Human, Tango or Industrial theme.

I know first hand that some people do not prefer the default brownish Human theme, and prefered Industrial theme instead.

So why not install these Firefox theme to get rid all those traces of brownish look on your desktop?

[tags]ubuntu,firefox,mozilla,themes,debian,linux[/tags]

Generate Ubuntu apt-get Source.lst automatically

Sources.lst is a file located in /etc/apt/ directory. It is used in Debian-based (which includes Ubuntu) Linux operating system as a configuration file for software management.

Sometimes it is necessary to alter your sources.lst to include the nearest apt-get mirrors from your location, this is to ensure faster downloads during software upgrades and installations.

Fortunately, the good people from Ubuntu-NL has made this task easier by creating an online tool (source-o-matic) which helps you generate sources.lst file based on the list of available mirrors

source-o-matic supports Ubuntu releases on all architectures from 4.10(Warty) to 7.04 (Feisty). It is an easy tool to use, you only need to choose which country you’re in, put on your Ubuntu release and architecture, tick few radio boxes and your sources.lst file will be generated automatically.


Source-o-matic
also includes a list of unofficial apt-get mirrors for installing softwares that isnt included in the normal Ubuntu distributions.

[tags]ubuntu, linux, sources.lst,apt-get[/tags]

5 Things I hate about Ubuntu

I believe some of you have already read my blog and will summarize that I’m an Ubuntu user and advocator.

However, having said that doesn’t mean that I dont have things that I hate about Ubuntu, and they are :

  1. Windows manager (GNOME) is damn too slow compared with other distro
  2. Eats a lot of memory in desktop mode
  3. It has defective or near unusable packages (ie ffmpeg, scribus)
  4. Depends too much on internet connection for package installations and management
  5. Default installation does not include applications and codecs that I use most. I had to rely to the *internet* to get those apps installed (read above) (a small issue but an issue nevertheless)

Those are the 5 things that crossed my mind when I switched on my computer and use Ubuntu everyday. What’s yours?

[tags]ubuntu,debian,linux,opensource,distro[/tags]

How to secure your SSH server

I came across this interesting post about how to secure your SSH without changing the SSH listening port.

Things that the post author suggested are :

  1. Enforce the use of secure and hard to guess password
  2. Disable login by password, use Public Key Authentication for greater security.
  3. Allow SSH connection from trusted network only.
  4. Implement Port Knockinghttp://www.linuxjournal.com/article/6811
  5. Use iptables RECENT match to filter SSH scanners

Personally I’ve enabled public-key authentication and SSH scanner filter to secure my server at the advice of my friend from a local security firm. Although, I haven’t tried the port knocking method yet, it seems interesting to know that ‘secret port knocking’ pattern also exists in computer security (remember ali baba?)

Hopefully this post will serve as a reminder to myself and those who read them, ah oh, most of this post content are lifted shamelessly from False sense of security

[tags]ssh,iptables,ubuntu,debian,security, port knocking,nmap, security scanners,exploit[/tags]

http://blog.drinsama.de/erich/en/linux/2007021502-false-sense-of-security