Manual Opensuse
Manual Opensuse
SUSE LLC
10 Canal Park Drive
Suite 200
Cambridge MA 02141
USA
https://www.suse.com/documentation
Copyright © 2006– 2017 SUSE LLC and contributors. All rights reserved.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free
Documentation License, Version 1.2 or (at your option) version 1.3; with the Invariant Section being this
copyright notice and license. A copy of the license version 1.2 is included in the section entitled “GNU
Free Documentation License”.
For SUSE trademarks, see http://www.suse.com/company/legal/ . All other third-party trademarks are the
property of their respective owners. Trademark symbols (®, ™ etc.) denote trademarks of SUSE and its
affiliates. Asterisks (*) denote third-party trademarks.
All information found in this book has been compiled with utmost attention to detail. However, this does
not guarantee complete accuracy. Neither SUSE LLC, its affiliates, the authors nor the translators shall be
held liable for possible errors or the consequences thereof.
Contents
I INSTALLATION 1
iii Start-Up
2.12 Installation Settings 43
Software 43 • Booting 44 • Firewall and SSH 45 • Default systemd
Target 46 • System 46
II ADMINISTRATION 48
iv Start-Up
5.3 Setting Up a Printer 74
Configuring Printers 74 • Configuring Printing via the Network with
YaST 78 • Sharing Printers Over the Network 79
6 Printer Operation 82
6.1 The CUPS Workflow 83
6.8 Troubleshooting 89
Printers without Standard Printer Language Support 90 • No
Suitable PPD File Available for a PostScript Printer 90 • Network
Printer Connections 91 • Defective Printouts without Error
Message 93 • Disabled Queues 93 • CUPS Browsing: Deleting Print
Jobs 94 • Defective Print Jobs and Data Transfer Errors 94 • Debugging
CUPS 95 • For More Information 95
v Start-Up
8 Accessing File Systems with FUSE 109
8.1 Configuring FUSE 109
vi Start-Up
11.3 Automatic Online Update 136
vii Start-Up
13.10 Redirection and Pipes 175
Examples for Redirection and Pipe 175
viii Start-Up
16 Common Problems and Their Solutions 209
16.1 Finding and Gathering Information 209
ix Start-Up
About This Guide
This manual will see you through your initial contact with openSUSE® Leap. Check out the
various parts of this manual to learn how to install, use and enjoy your system.
Installation
Guides you through the installation process and the basic configuration of your system.
The Quick Start section shows a quick walk through the installation using default values.
The second part of this chapter provides details for every installation step.
Administration
Introduces YaST, the central tool for installation and configuration of your system. Learn
how to initially set up your system and how to modify key components of your system.
1 Available Documentation
Start-Up
This manual will see you through your initial contact with openSUSE® Leap. Check out
the various parts of this manual to learn how to install, use and enjoy your system.
Book “Reference”
Covers system administration tasks like maintaining, monitoring and customizing an ini-
tially installed system.
Book “AutoYaST”
AutoYaST is a system for installing one or more openSUSE Leap systems automatically
and without user intervention, using an AutoYaST profile that contains installation and
configuration data. The manual guides you through the basic steps of auto-installation:
preparation, installation, and configuration.
Bug Reports
To report bugs for openSUSE Leap, go to https://bugzilla.opensuse.org/ , log in, and click
New.
Mail
For feedback on the documentation of this product, you can also send a mail to doc-
[email protected] . Make sure to include the document title, the product version and the
publication date of the documentation. To report errors or suggest enhancements, provide
a concise description of the problem and refer to the respective section number and page
(or URL).
3 Documentation Conventions
The following notices and typographical conventions are used in this documentation:
Alt , Alt – F1 : a key to press or a key combination; keys are shown in uppercase as on
a keyboard
Commands that must be run with root privileges. Often you can also prefix these com-
mands with the sudo command to run them as non-privileged user.
Notices
6 Acknowledgments
With a lot of voluntary commitment, the developers of Linux cooperate on a global scale to
promote the development of Linux. We thank them for their efforts—this distribution would not
exist without them. Special thanks, of course, goes to Linus Torvalds.
Use the following procedures to install a new version of openSUSE® Leap 42.3. This
document gives a quick overview on how to run through a default installation of
openSUSE Leap on the x86_64 architecture.
3 GB available disk space for a minimal install, 5 GB available for a graphical desktop
(more recommended)
Supports most modern sound and graphics cards, 800 x 600 display resolution (1024 x
768 or higher recommended)
1. Insert the openSUSE Leap DVD into the drive, then reboot the computer to start the in-
stallation program. On machines with a traditional BIOS you will see the graphical boot
screen shown below. On machines equipped with UEFI, a slightly different boot screen is
used. Secure boot on UEFI machines is supported.
Use F2 to change the language for the installer. A corresponding keyboard layout is cho-
sen automatically. See Section 2.2.1.1, “The Boot Screen on Machines Equipped with Traditional
BIOS” or Section 2.2.1.2, “The Boot Screen on Machines Equipped with UEFI” for more information
about changing boot options.
3. The Language and Keyboard Layout are initialized with the language settings you have
chosen on the boot screen. Change them here, if necessary.
Read the License Agreement. It is presented in the language you have chosen on the boot
screen. License Translations are available. Proceed with Next.
Expert Partitioner
Opens the Expert Partitioner described in Book “Reference”, Chapter 5 “Advanced Disk
Setup”, Section 5.1 “Using the YaST Partitioner”.
To accept the proposed setup without any changes, choose Next to proceed.
7. Select the desktop system you would like to use in the User Interface dialog. KDE and
GNOME are among the most widely used desktops on Linux.
More desktop systems, such as XFCE, LXDE, MATE, and Enlightenment are available after
having enabled the online repositories. Doing so is also recommended if you want to get
the latest security updates and fixes during the installation. A working Internet connection
is required. To install a Custom user interface, choose Configure Online Repositories. You
have the following choices:
The Main Repository (OSS) contains open source software (OSS). Compared to the
DVD installation media, it contains many additional software packages, among them
the above mentioned desktop systems. Choose this repository to install them.
The Main Update Repository contains security updates and fixes for packages from
the Main Repository (OSS) and the DVD installation media. Choosing this repository
is recommended for all installation scenarios.
The Main Repository (Non-OSS) contains packages with a proprietary software li-
cense. Choosing it is not required for installing a custom desktop system.
All other repositories are intended for experienced users and developers. Click on a
repository name to get more information.
Confirm your selection with Next. Depending on your choice, you need to confirm one
or more license agreements. Do so by choosing Next until you return to the User Interface
screen. Now choose Custom and Next, to proceed to the Software Selection and System Task,
where you can choose a custom desktop system from the left-hand pane.
10. Use the Installation Settings screen to review and—if necessary—change several proposed
installation settings. The current configuration is listed for each setting. To change it, click
the headline. Some settings, such as firewall or SSH can directly be changed by clicking
the respective links.
Booting
Software
The default scope of software includes the base system and X Window with the select-
ed desktop. Clicking Software opens the Software Selection and System Tasks screen,
where you can change the software selection by selecting or deselecting patterns.
Each pattern contains several software packages needed for specific functions (for
example, Web and LAMP server or a print server). For a more detailed selection
based on software packages to install, select Details to switch to the YaST Software
Manager. See Chapter 9, Installing or Removing Software for more information.
System
View detailed hardware information by clicking System. In the resulting screen you
can also change Kernel Settings—see Section 2.12.5, “System” for more information.
12. During the installation, the progress is shown in detail on the Details tab.
Install your openSUSE® Leap system with YaST, the central tool for installation and
configuration of your system. YaST guides you through the installation process of
your system. If you are a rst-time user of openSUSE Leap, you might want to fol-
low the default YaST proposals in most parts, but you can also adjust the settings
as described here to ne-tune your system according to your preferences. Help for
each installation step is provided by clicking Help.
During the installation process, YaST analyzes both your current system settings and
your hardware components. Based on this analysis your system will be set up with a
basic configuration including networking (provided the system could be configured
using DHCP). To ne-tune the system after the installation has finished, start YaST
from the installed system.
Installing from a Network Source without SLP. If your network setup does not support
OpenSLP for the retrieval of network installation sources, boot the system and press F4
in the boot screen to select the desired network protocol (NFS, HTTP, FTP, or SMB/CIFS)
and provide the server's address and the path to the installation media. On EFI systems
modify the boot parameter install= as described in Section 2.2.1.2, “The Boot Screen on
Machines Equipped with UEFI”.
Flash Disks (USB Mass Storage Device) In case your machine is not equipped with
an optical drive, you can boot the instal-
lation image from a ash disk. To create a
bootable ash disk, you need to copy either
dd if=PATH_TO_ISO_IMAGE
of=USB_STORAGE_DEVICE bs=4M
Important:
Compatibility
Note that booting from a USB Mass
Storage Device is not supported on UE-
FI machines and on the POWER archi-
tecture.
The boot screen displays several options for the installation procedure. Boot from Hard Disk boots
the installed system and is selected by default, because the CD is often left in the drive. Select one
of the other options with the arrow keys and press Enter to boot it. The relevant options are:
Installation
The normal installation mode. All modern hardware functions are enabled. In case the
installation fails, see F5 Kernel for boot options that disable potentially problematic func-
tions.
Upgrade
Perform a system upgrade. For more information refer to Chapter 12, Upgrading the System
and System Changes.
Rescue System
Starts a minimal Linux system without a graphical user interface. For more information,
see Section 16.6.2, “Using the Rescue System”.
Use the function keys indicated in the bar at the bottom of the screen to change the language,
screen resolution, installation source or to add an additional driver from your hardware vendor:
F1 Help
Get context-sensitive help for the active element of the boot screen. Use the arrow keys to
navigate, Enter to follow a link, and Esc to leave the help screen.
F2 Language
Select the display language and a corresponding keyboard layout for the installation. The
default language is English (US).
F3 Video Mode
Select various graphical display modes for the installation. By Default the video resolution is
automatically determined using KMS (“Kernel Mode Setting”). If this setting does not work
on your system, choose No KMS and, optionally, specify vga=ask on the boot command
line to get prompted for the video resolution. Choose Text Mode if the graphical installation
causes problems.
F5 Kernel
If you encounter problems with the regular installation, this menu offers to disable a few
potentially problematic functions. If your hardware does not support ACPI (advanced con-
figuration and power interface) select No ACPI to install without ACPI support. No local
APIC disables support for APIC (Advanced Programmable Interrupt Controllers) which may
cause problems with some hardware. Safe Settings boots the system with the DMA mode
(for CD/DVD-ROM drives) and power management functions disabled.
If you are not sure, try the following options rst: Installation—ACPI Disabled or Installa-
tion—Safe Settings. Experts can also use the command line (Boot Options) to enter or change
kernel parameters.
F6 Driver
Press this key to notify the system that you have an optional driver update for openSUSE
Leap. With File or URL, load drivers directly before the installation starts. If you select
Yes, you are prompted to insert the update disk at the appropriate point in the installation
process.
UEFI (Unified Extensible Firmware Interface) is a new industry standard which replaces and ex-
tends the traditional BIOS. The latest UEFI implementations contain the “Secure Boot” extension,
which prevents booting malicious code by only allowing signed boot loaders to be executed. See
Book “Reference”, Chapter 14 “UEFI (Unified Extensible Firmware Interface)” for more information.
The boot manager GRUB 2, used to boot machines with a traditional BIOS, does not support
UEFI, therefore GRUB 2 is replaced with GRUB 2 for EFI. If Secure Boot is enabled, YaST will au-
tomatically select GRUB 2 for EFI for installation. From an administrative and user perspective,
both boot manager implementations behave the same and are called GRUB 2 in the following.
The boot screen displays several options for the installation procedure. Change the selected
option with the arrow keys and press Enter to boot it. The relevant options are:
Installation
The normal installation mode.
Upgrade
Perform a system upgrade.
Rescue System
Starts a minimal Linux system without a graphical user interface. For more information,
see Section 16.6.2, “Using the Rescue System”.
GRUB 2 for EFI on openSUSE Leap does not support a boot prompt or function keys for adding
boot parameters. By default, the installation will be started with American English and the boot
media as the installation source. A DHCP lookup will be performed to configure the network. To
change these defaults or to add additional boot parameters you need to edit the respective boot
entry. Highlight it using the arrow keys and press E . See the on-screen help for editing hints
(note that only an English keyboard is available now). The Installation entry will look similar
to the following:
setparams 'Installation'
set gfxpayload=keep
echo 'Loading kernel ...'
linuxefi /boot/x86_64/loader/linux splash=silent
echo 'Loading initial ramdisk ...'
initrdefi /boot/x86_64/loader/initrd
SLP install=slp:/
FTP install=ftp://ftp.example.com/PATH_TO_ISO
HTTP install=http://www.example.com/PATH_TO_ISO
NFS install=nfs:/PATH_TO_ISO
hostip=192.168.2.100/24
Netmask netmask=255.255.255.0
Gateway gateway=192.168.5.1
nameserver=192.168.1.116,192.168.1.118
ipv6=1
ipv6only=1
l>proxy=http://USER:[email protected]:PORT
Specifying USER and PASSWORD is optional—if the server allows anonymous access, the follow-
ing data is sufficient: http://proxy.example.com:PORT .
security=selinux selinux=1
self_update=1
self_update=https://updates.example.com/
Although this feature was designed to run without user intervention, it is worth knowing how
it works. If you are not interested, you can jump directly to Section 2.5, “Language, Keyboard and
License Agreement” and skip the rest of this section.
Installer Self-Updates are distributed as regular RPM packages via a dedicated repository, so the
rst step is to nd out the repository URL.
self_update=https://updates.suse.com/SUSE/Updates/SLE-SERVER-INSTALLER/12-SP2/
x86_64/update/
Do not supply any other repository URL—for example the URL of the software update
repository.
1. The self_update boot parameter. (For more details, see Section 2.2.2.4, “Enabling the In-
staller Self-Update”.) If you specify a URL, it will take precedence over any other method.
3. If none of the previous attempts worked, the fallback URL (defined in the installation
media) will be used.
When the updates repository is determined, YaST will check whether an update is available. If
so, all the updates will be downloaded and applied to the installation system.
Finally, YaST will be restarted to load the new version and the welcome screen will be shown.
If no updates were available, the installation will continue without restarting YaST.
Packages are not installed in the usual way: They are uncompressed only and no scripts
are executed.
Files from the packages override the les from the original installation media. This means
that the update packages might not need to contain all les, only les that have changed.
Unchanged les are omitted to save memory and download bandwidth.
3. Now you have access to the lsmcli command. For more information, run lsmcli
--help .
Supported are Netapp Ontap, all SMI-S compatible SAN providers, and LSI MegaRAID.
Next
To accept the proposal without any changes, click Next to proceed with the installation
workflow.
Expert Partitioner
To create a custom partition setup choose Expert Partitioner. The Expert Partitioner opens,
displaying the current partition setup for all hard disks, including the proposal suggested
by the installer. You can Add, Edit, Resize, or Delete partitions.
You can also set up Logical Volumes (LVM), configure software RAID and device mapping
(DM), encrypt Partitions, mount NFS shares and manage tmpfs volumes with the Expert
Partitioner. To ne-tune settings such as the subvolume and snapshot handling for each
Btrfs partition, choose Btrfs. For more information about custom partitioning and config-
uring advanced features, refer to Book “Reference”, Chapter 5 “Advanced Disk Setup”, Section 5.1
“Using the YaST Partitioner”.
If an EFI system partition is already present on your system (for example from a
previous Windows installation) use it by mounting it to /boot/efi without for-
matting it.
Being able to create system snapshots that enable rollbacks requires most of the
system directories to be mounted on a single partition. Refer to Book “Reference”,
Chapter 3 “System Recovery and Snapshot Management with Snapper”, Section 3.1 “Default
Setup” for more information. This also includes /usr and /var . Only directories
that are excluded from snapshots (see Book “Reference”, Chapter 3 “System Recovery
make sure the partition is not fragmented (run a defragmentation program from
Windows prior to the openSUSE Leap installation)
double-check the suggested size for the Windows partition is big enough
To adjust the proposed size of the Windows partition, use the Expert Partitioner.
If a network is already configured, you can configure time synchronization with an NTP server.
Click Other Settings to either alter the NTP settings or to Manually set the time. See Book “Refer-
ence”, Chapter 18 “Time Synchronization with NTP” for more information on configuring the NTP
service. When finished, click Accept to continue the installation.
If running without NTP configured, consider setting SYSTOHC=no ( sysconfig variable) to avoid
saving unsynchronized time into the hardware clock.
The Main Repository (OSS) contains open source software (OSS). Compared to the DVD
installation media, it contains many additional software packages, among them the above
mentioned desktop systems. Choose this repository to install them.
The Main Update Repository contains security updates and fixes for packages from the Main
Repository (OSS) and the DVD installation media. Choosing this repository is recommended
for all installation scenarios.
The Main Repository (Non-OSS) contains packages with a proprietary software license.
Choosing it is not required for installing a custom desktop system.
Choosing Main Update Repository (Non-OSS) is recommended when also having chosen the
Main Repository (Non-OSS). It contains the respective updates and security fixes.
All other repositories are intended for experienced users and developers. Click on a repos-
itory name to get more information.
If you install openSUSE Leap on a machine with one or more existing Linux installations, YaST
allows you to import user data such as user names and passwords. Select Import User Data from
a Previous Installation and then Choose Users for import.
In case you do not want to configure any local users, for example when setting up a client on
a network with centralized user authentication, skip this step by choosing Next and confirming
the warning. Network user authentication can be configured at any time later in the installed
system; refer to Chapter 3, Managing Users with YaST for instructions.
Automatic Login
This option automatically logs the current user in to the system when it starts. This is
mainly useful if the computer is operated by only one user.
The root password can be changed any time later in the installed system. To do so run YaST
and start Security and Users User and Group Management.
2.12.1 Software
openSUSE Leap contains several software patterns for various application purposes. Click Soft-
ware to open the Software Selection and System Tasks screen where you can modify the pattern
selection according to your needs. Select a pattern from the list and see a description in the right-
hand part of the window. Each pattern contains several software packages needed for specific
functions (for example Multimedia or Office software). For a more detailed selection based on
software packages to install, select Details to switch to the YaST Software Manager.
You can also install additional software packages or remove software packages from your system
at any later time with the YaST Software Manager. For more information, refer to Chapter 9,
Installing or Removing Software.
2.12.2 Booting
The installer proposes a boot configuration for your system. Other operating systems found on
your computer, such as Microsoft Windows or other Linux installations, will automatically be
detected and added to the boot loader. However, openSUSE Leap will be booted by default.
Normally, you can leave these settings unchanged. If you need a custom setup, modify the
proposal according to your needs. For information, see Book “Reference”, Chapter 12 “The Boot
Loader GRUB 2”, Section 12.3 “Configuring the Boot Loader with YaST”.
To enable remote access via the secure shell (SSH), make sure the SSH service is enabled and
the SSH port is open.
In case you are performing a remote administration over VNC, you can also configure whether
the machine should be accessible via VNC even after the installation. Note that enabling VNC
also requires you to set the Default systemd Target to graphical.
2.12.5 System
This screen lists all the hardware information the installer could obtain about your computer.
When opened for the rst time, the hardware detection is started. Depending on your system,
this may take some time. Select any item in the list and click Details to see detailed information
about the selected item. Use Save to File to save a detailed list to either the local le system
or a removable device.
Advanced users can also change the PCI ID Setup and kernel settings by choosing Kernel Settings.
A screen with two tabs opens:
PCI ID Setup
Each kernel driver contains a list of device IDs of all devices it supports. If a new device
is not in any driver's database, the device is treated as unsupported, even if it can be used
with an existing driver. You can add PCI IDs to a device driver here. Only advanced users
should attempt to do so.
To add an ID, click Add and select whether to Manually enter the data, or whether to choose
from a list. Enter the required data. The SysFS Dir is the directory name from /sys/bus/
pci/drivers —if empty, the driver name is used as the directory name. Existing entries
can be managed with Edit and Delete.
Kernel Settings
Change the Global I/O Scheduler here. If Not Configured is chosen, the default setting for the
respective architecture will be used. This setting can also be changed at any time later from
the installed system. Refer to Book “System Analysis and Tuning Guide”, Chapter 12 “Tuning I/
O Performance” for details on I/O tuning.
6 Printer Operation 82
During installation, you could have created a local user for your system. With the YaST module
User and Group Management you can add more users or edit existing ones. It also lets you con-
figure your system to authenticate users with a network server.
Every user is assigned a system-wide user ID (UID). Apart from the users which can log in to
your machine, there are also several system users for internal use only. Each user is assigned to
one or more groups. Similar to system users, there are also system groups for internal use.
Managing Groups
From the Groups tab, you can add, modify or delete existing groups. Refer to Section 3.6,
“Managing Groups” for information on how to do this.
For user and group management, the dialog provides similar functionality. You can easily switch
between the user and group administration view by choosing the appropriate tab at the top of
the dialog.
Filter options allow you to define the set of users or groups you want to modify: On the Users or
Group tab, click Set Filter to view and edit users or groups according to certain categories, such
as Local Users or LDAP Users, for example (if you are part of a network which uses LDAP). With
Set Filter Customize Filter you can also set up and use a custom filter.
Depending on the filter you choose, not all of the following options and functions will be avail-
able from the dialog.
In the following, learn how to set up default user accounts. For some further options, such as
auto login, login without password, setting up encrypted home directories or managing quotas
for users and groups, refer to Section 3.3, “Additional Options for User Accounts”.
1. Open the YaST User and Group Administration dialog and click the Users tab.
2. With Set Filter define the set of users you want to manage. The dialog lists users in the
system and the groups the users belong to.
3. To modify options for an existing user, select an entry and click Edit.
To create a new user account, click Add.
4. Enter the appropriate user data on the rst tab, such as Username (which is used for login)
and Password. This data is sufficient to create a new user. If you click OK now, the system
will automatically assign a user ID and set all other values according to the default.
5. Activate Receive System Mail if you want any kind of system notifications to be delivered
to this user's mailbox. This creates a mail alias for root and the user can read the system
mail without having to rst log in as root .
The mails sent by system services are stored in the local mailbox /var/spool/
mail/ USERNAME , where USERNAME is the login name of the selected user. To read e-mails,
you can use the mail command.
6. If you want to adjust further details such as the user ID or the path to the user's home
directory, do so on the Details tab.
7. To force users to regularly change their password or set other password options, switch to
Password Settings and adjust the options. For more details, refer to Section 3.3.2, “Enforcing
Password Policies”.
9. Click OK to close the administration dialog and to save the changes. A newly added user
can now log in to the system using the login name and password you created.
Alternatively, if you want to save all changes without exiting the User and Group Admin-
istration dialog, click Expert Options Write Changes Now.
1. Open the YaST User and Group Administration dialog and click the Users tab.
2. To temporarily disable a user account without deleting it, select the user from the list and
click Edit. Activate Disable User Login. The user cannot log in to your machine until you
enable the account again.
3. To delete a user account, select the user from the list and click Delete. Choose if you also
want to delete the user's home directory or if you want to retain the data.
If you want to activate auto login or login without password, access these functions in the YaST
User and Group Administration with Expert Options Login Settings.
1. Open the YaST User and Group Administration dialog and select the Users tab.
2. Select the user for which to change the password options and click Edit.
3. Switch to the Password Settings tab. The user's last password change is displayed on the tab.
4. To make the user change his password at next login, activate Force Password Change.
5. To enforce password rotation, set a Maximum Number of Days for the Same Password and
a Minimum Number of Days for the Same Password.
6. To remind the user to change his password before it expires, set the number of Days before
Password Expiration to Issue Warning.
8. You can also specify a certain expiration date for the complete account. Enter the Expira-
tion Date in YYYY-MM-DD format. Note that this setting is not password-related but rather
applies to the account itself.
9. For more information about the options and about the default values, click Help.
Find background information about encrypted home directories and which actions to take for
stronger security in Book “Security Guide”, Chapter 11 “Encrypting Partitions and Files”, Section 11.2
“Using Encrypted Home Directories”.
1. Open the YaST User and Group Management dialog and click the Users tab.
2. To encrypt the home directory of an existing user, select the user and click Edit.
Otherwise, click Add to create a new user account and enter the appropriate user data
on the rst tab.
5. Enter the user's current login password to proceed if YaST prompts for it.
Of course, you can also disable the encryption of a home directory or change the size of
the image le at any time.
1. Open the YaST User and Group Administration dialog in the Users view.
3. If you want to disable the encryption, switch to the Details tab and disable Use Encrypted
Home Directory.
5. Enter the user's current login password to proceed if YaST prompts for it.
Soft Quota
Defines a warning level at which users are informed that they are nearing their limit.
Administrators will urge the users to clean up and reduce their data on the partition. The
soft quota limit is usually lower than the hard quota limit.
Hard Quota
Defines the limit at which write requests are denied. When the hard quota is reached, no
more data can be stored and applications may crash.
Grace Period
Defines the time between the overflow of the soft quota and a warning being issued. Usually
set to a rather low value of one or several hours.
To configure quotas for certain users and groups, you need to enable quota support for
the respective partition in the YaST Expert Partitioner rst.
2. In the Expert Partitioner, select the partition for which to enable quotas and click Edit.
3. Click Fstab Options and activate Enable Quota Support. If the quota package is not already
installed, it will be installed once you confirm the respective message with Yes.
5. Make sure the service quotaon is running by entering the following command:
It should be marked as being active . If this is not the case, start it with the command
systemctl start quotaon .
Now you can define soft or hard quotas for specific users or groups and set time periods
as grace intervals.
1. In the YaST User and Group Administration, select the user or the group you want to set
the quotas for and click Edit.
2. On the Plug-Ins tab, select the Manage User Quota entry and click Launch to open the Quota
Configuration dialog.
3. From File System, select the partition to which the quota should apply.
4. Below Size Limits, restrict the amount of disk space. Enter the number of 1 KB blocks the
user or group may have on this partition. Specify a Soft Limit and a Hard Limit value.
5. Additionally, you can restrict the number of inodes the user or group may have on the
partition. Below Inodes Limits, enter a Soft Limit and Hard Limit.
6. You can only define grace intervals if the user or group has already exceeded the soft
limit specified for size or inodes. Otherwise, the time-related text boxes are not activated.
Specify the time period for which the user or group is allowed to exceed the limits set
above.
1. Open the YaST User and Group Administration dialog and select the Defaults for New Users
tab.
2. To change the primary group the new users should automatically belong to, select another
group from Default Group.
3. To modify the secondary groups for new users, add or change groups in Secondary Groups.
The group names must be separated by commas.
4. If you do not want to use /home/USERNAME as default path for new users' home directories,
modify the Path Prefix for Home Directory.
5. To change the default permission modes for newly created home directories, adjust the
umask value in Umask for Home Directory. For more information about umask, refer to
Book “Security Guide”, Chapter 10 “Access Control Lists in Linux” and to the umask man page.
1. Open the YaST User and Group Administration dialog and click the Users tab. It lists users
and the groups the users belong to.
3. To change the primary group the user belongs to, click Default Group and select the group
from the list.
4. To assign the user additional secondary groups, activate the corresponding check boxes
in the Additional Groups list.
1. Open the YaST User and Group Management dialog and click the Groups tab.
2. With Set Filter define the set of groups you want to manage. The dialog lists groups in
the system.
5. In the following dialog, enter or change the data. The list on the right shows an overview
of all available users and system users which can be members of the group.
To delete a group, it must not contain any group members. To delete a group, select it from the
list and click Delete. Click OK to close the administration dialog and save the changes. Alterna-
tively, if you want to save all changes without exiting the User and Group Administration dialog,
click Expert Options Write Changes Now.
NIS
LDAP
Users are administered centrally on an LDAP server for all systems in the network. For
details about LDAP, see Book “Security Guide”, Chapter 5 “LDAP—A Directory Service”.
You can manage LDAP users with the YaST user module. All other LDAP settings, including
the default settings for LDAP users, need to be defined with the YaST LDAP client module
as described in Book “Security Guide”, Chapter 4 “Setting Up Authentication Servers and Clients
Using YaST”, Section 4.2 “Configuring an Authentication Client with YaST”.
Kerberos
With Kerberos, a user registers once and then is trusted in the entire network for the rest
of the session.
Samba
SMB authentication is often used in mixed Linux and Windows networks. For details, see
Book “Reference”, Chapter 21 “Samba” and Book “Security Guide”, Chapter 7 “Active Directory
Support”.
2. Click the Authentication Settings tab to show an overview of the available authentication
methods and the current settings.
3. To change the authentication method, click Configure and select the authentication method
you want to modify. This takes you directly to the client configuration modules in YaST.
For information about the configuration of the appropriate client, refer to the following
sections:
NIS: Book “Security Guide”, Chapter 3 “Using NIS”, Section 3.2 “Configuring NIS Clients”
LDAP: Book “Security Guide”, Chapter 4 “Setting Up Authentication Servers and Clients Using
YaST”, Section 4.2 “Configuring an Authentication Client with YaST”
Samba: Book “Reference”, Chapter 21 “Samba”, Section 21.5.1 “Configuring a Samba Client with
YaST”
4. After accepting the configuration, return to the User and Group Administration overview.
Primary Language
The primary language set in YaST applies to the entire system, including YaST and the
desktop environment. This language is used whenever available unless you manually spec-
ify another language.
Secondary Languages
Install secondary languages to make your system multilingual. Languages installed as sec-
ondary languages can be selected manually for a specific situation. For example, use a
secondary language to start an application in a certain language to do word processing
in this language.
Before installing additional languages, determine which of them should be the default system
language (primary language).
To access the YaST language module, start YaST and click System Language. Alternatively, start
the Languages dialog directly by running sudo yast2 language & from a command line.
When installing additional languages, YaST also allows you to set different locale settings
for the user root , see Step 4. The option Locale Settings for User root determines how the
locale variables ( LC_* ) in the le /etc/sysconfig/language are set for root . You can
either set them to the same locale as for normal users, keep it unaffected by any language
changes or only set the variable RC_LC_CTYPE to the same values as for the normal users.
This variable sets the localization for language-specific function calls.
1. To add additional languages in the YaST language module, select the Secondary Languages
you want to install.
3. Additionally, adapt the keyboard to the new primary language and adjust the time zone,
if appropriate.
a. Set Locale Settings for User root to the desired value. For more information, click Help.
5. If your locale was not included in the list of primary languages available, try specifying it
with Detailed Locale Setting. However, some localization may be incomplete.
6. Confirm your changes in the dialogs with OK. If you have selected secondary languages,
YaST installs the localized software packages for the additional languages.
The system is now multilingual. However, to start an application in a language other than the
primary one, you need to set the desired language explicitly as explained in Section 4.1.3, “Switch-
ing Languages for Standard X and GNOME Applications”.
1. To globally switch the default system language, start the YaST language module.
5. After YaST has applied the changes, restart any X sessions (for example, by logging out and
logging in again) to make YaST and the desktop applications reflect your new language
settings.
LANG=LANGUAGE application
For example, to start f-spot in German, run LANG=de_DE f-spot . For other languages, use the
appropriate language code. Get a list of all language codes available with the locale -av
command.
First, select a general region, such as Europe. Choose an appropriate country that matches the
one you are working in, for example, Germany.
67 Switching Languages for Standard X and GNOME Applications openSUSE Leap 42.3
Depending on which operating systems run on your workstation, adjust the hardware clock
settings accordingly:
If you run another operating system on your machine, such as Microsoft Windows*, it is
likely your system does not use UTC, but local time. In this case, deactivate Hardware Clock
Set To UTC.
If you only run Linux on your machine, set the hardware clock to UTC and have the switch
from standard time to daylight saving time performed automatically.
You can change the date and time manually or opt for synchronizing your machine against an
NTP server, either permanently or only for adjusting your hardware clock.
1. In the YaST timezone module, click Other Settings to set date and time.
6. With the Configure button, you can open the advanced NTP configuration. For details, see
Book “Reference”, Chapter 18 “Time Synchronization with NTP”, Section 18.1 “Configuring an NTP
Client with YaST”.
YaST allows you to configure hardware items such as audio hardware, your system
keyboard layout or printers.
1. Start the YaST System Keyboard Configuration dialog by clicking Hardware System Key-
board Layout in YaST. Alternatively, start the module from the command line with sudo
yast2 keyboard .
3. Optionally, you can also define the keyboard repeat rate or keyboard delay rate in the
Expert Settings.
5. If the result is as expected, confirm your changes and close the dialog. The settings are
written to /etc/sysconfig/keyboard .
If you have added a new sound card or YaST could not automatically configure an ex-
isting sound card, follow the steps below. For configuring a new sound card, you need
to know your sound card vendor and model. If in doubt, refer to your sound card doc-
umentation for the required information. For a reference list of sound cards supported
by ALSA with their corresponding sound modules, see http://www.alsa-project.org/main/
index.php/Matrix:Main .
Normal Setup
Allows you to adjust the output volume and play a test sound during the configu-
ration.
2. To configure a detected, but Not Configured sound card, select the respective entry from
the list and click Edit.
To configure a new sound card, click Add. Select your sound card vendor and model and
click Next.
4. If you have chosen Normal Setup, you can now Test your sound configuration and make
adjustments to the volume. You should start at about ten percent volume to avoid damage
to your hearing or the speakers.
6. To remove a sound card configuration that you no longer need, select the respective entry
and click Delete.
7. Click OK to save the changes and leave the YaST sound module.
1. To change the configuration of an individual sound card (for experts only!), select the
sound card entry in the Sound Configuration dialog and click Edit.
This takes you to the Sound Card Advanced Options where you can ne-tune several para-
meters. For more information, click Help.
2. To adjust the volume of an already configured sound card or to test the sound card, select
the sound card entry in the Sound Configuration dialog and click Other. Select the respective
menu item.
4. When a supported sound card is detected (like a Creative Soundblaster Live , Audigy
or AWE sound card), you can also install SoundFonts for playback of MIDI les:
b. Select Other Install SoundFonts to copy SF2 SoundFonts™ to your hard disk. The
SoundFonts are saved in the directory /usr/share/sfbank/creative/ .
5. If you have configured more than one sound card in your system you can adjust the order
of your sound cards. To set a sound card as primary device, select the sound card in the
Sound Configuration and click Other Set as the Primary Card. The sound device with index
0 is the default device and thus used by the system and the applications.
6. By default, openSUSE Leap uses the PulseAudio sound system. It is an abstraction layer that
helps to mix multiple audio streams, bypassing any restrictions the hardware may have.
To enable or disable the PulseAudio sound system, click Other PulseAudio Configuration.
If enabled, PulseAudio daemon is used to play sounds. Disable PulseAudio Support to use
something else system-wide.
The communication between printer and computer is not possible. Check the cable and the
plugs to make sure that the printer is properly connected. If this is the case, the problem
may not be printer-related, but rather a USB-related problem.
Configuring a printer is a three-step process: specify the connection type, choose a driver, and
name the print queue for this setup.
3. If your printer is already listed under Specify the Connection , proceed with the next
step. Otherwise, try to Detect More or start the Connection Wizard.
4. In the text box under Find and Assign a Driver enter the vendor name and the model
name and click Search for.
5. Choose a driver that matches your printer. It is recommended to choose the driver listed
rst. If no suitable driver is displayed:
7. In the Set Arbitrary Name eld, enter a unique name for the print queue.
Not all printer drivers available for openSUSE Leap are installed by default. If no suitable driver
is available in the Find and Assign a Driver dialog when adding a new printer install a driver
package containing drivers for your printers:
4. Choose one or more suitable driver packages from the list. Do not specify the path to a
printer description le.
6. To directly use these drivers, proceed as described in Procedure 5.3, “Adding a New Printer”.
PostScript printers do not need printer driver software. PostScript printers need only a PostScript
Printer Description (PPD) le which matches the particular model. PPD les are provided by
the printer manufacturer.
If no suitable PPD le is available in the Find and Assign a Driver dialog when adding a PostScript
printer install a PPD le for your printer:
Several sources for PPD les are available. It is recommended to rst try additional driver pack-
ages that are shipped with openSUSE Leap but not installed by default (see below for installa-
tion instructions). If these packages do not contain suitable drivers for your printer, get PPD
les directly from your printer vendor or from the driver CD of a PostScript printer. For de-
tails, see Section 6.8.2, “No Suitable PPD File Available for a PostScript Printer”. Alternatively, nd
PPD les at http://www.linuxfoundation.org/collaborate/workgroups/openprinting/database/data-
baseintro , the “OpenPrinting.org printer database”. When downloading PPD les from Open-
Printing, keep in mind that it always shows the latest Linux support status, which is not neces-
sarily met by openSUSE Leap.
4. Enter the full path to the PPD le into the text box under Make a Printer Description
File Available .
6. To directly use this PPD le, proceed as described in Procedure 5.3, “Adding a New Printer”.
By editing an existing configuration for a printer you can change basic settings such as connec-
tion type and driver. It is also possible to adjust the default settings for paper size, resolution,
media source, etc. You can change identifiers of the printer by altering the printer description
or location.
2. In the Printer Configurations screen, choose a local printer configuration from the list and
click Edit.
3. Change the connection type or the driver as described in Procedure 5.3, “Adding a New Print-
er”. This should only be necessary in case you have problems with the current configura-
tion.
5. Adjust the default settings by clicking All Options for the Current Driver. To change a setting,
expand the list of options by clicking the relative + sign. Change the default by clicking
an option. Apply your changes with OK.
In a Linux environment CUPS is usually used to print via the network. The simplest setup is to
only print via a single CUPS server which can directly be accessed by all clients. Printing via
more than one CUPS server requires a running local CUPS daemon that communicates with the
remote CUPS servers.
In case browsing does not work after having started cups-browsed , the CUPS server(s)
probably announce the network print queues via Bonjour/DND-SD. In this case you need
to additionally install the package avahi and start the associated service with sudo
systemctl start avahi-daemon on all clients.
2. From the left pane, launch the Print via Network screen.
3. Check Do All Your Printing Directly via One Single CUPS Server and specify the name or IP
address of the server.
4. Click Test Server to make sure you have chosen the correct name or IP address.
78 Configuring Printing via the Network with YaST openSUSE Leap 42.3
5. Click OK to return to the Printer Configurations screen. All printers available via the CUPS
server are now listed.
2. From the left pane, launch the Print via Network screen.
4. Under General Settings specify which servers to use. You may accept connections from
all networks available or from specific hosts. If you choose the latter option, you need to
specify the host names or IP addresses.
5. Confirm by clicking OK and then Yes when asked to start a local CUPS server. After the
server has started YaST will return to the Printer Configurations screen. Click Refresh list
to see the printers detected by now. Click this button again, in case more printer are to
be available.
4. Click OK to restart the CUPS server and to return to the Printer Configurations screen.
1. Connect your USB or SCSI scanner to your computer and turn it on.
2. Start YaST and select Hardware Scanner. YaST builds the scanner database and tries to
detect your scanner model automatically.
If a USB or SCSI scanner is not properly detected, try Other Restart Detection.
3. To activate the scanner select it from the list of detected scanners and click Edit.
4. Choose your model form the list and click Next and Finish.
5. Use Other Test to make sure you have chosen the correct driver.
If your USB device is not properly detected, or your HP All-In-One device is connected to the
network, run the HP Device Manager:
1. Start YaST and select Hardware Scanner. YaST loads the scanner database.
openSUSE Leap allows the sharing of a scanner over the network. To do so, configure your
scanner as follows:
3. Enter the host names of the clients (separated by a comma) that should be allowed to use
the scanner under Server Settings Permitted Clients for saned and leave the configuration
dialog with OK.
2. Open the network scanner configuration menu by Other Scanning via Network.
3. Enter the host name of the machine the scanner is connected to under Client Set-
tings Servers Used for the net Metadriver
4. Leave with OK. The network scanner is now listed in the Scanner Configuration window
and is ready to use.
openSUSE® Leap supports printing with many types of printers, including remote network print-
ers. Printers can be configured manually or with YaST. For configuration instructions, refer
to Section 5.3, “Setting Up a Printer”. Both graphical and command line utilities are available for
starting and managing print jobs. If your printer does not work as expected, refer to Section 6.8,
“Troubleshooting”.
CUPS (Common Unix Printing System) is the standard print system in openSUSE Leap.
Printers can be distinguished by interface, such as USB or network, and printer language. When
buying a printer, make sure that the printer has an interface that is supported (USB, Ethernet, or
Wi-Fi) and a suitable printer language. Printers can be categorized on the basis of the following
three classes of printer languages:
PostScript Printers
PostScript is the printer language in which most print jobs in Linux and Unix are generat-
ed and processed by the internal print system. If PostScript documents can be processed
directly by the printer and do not need to be converted in additional stages in the print
system, the number of potential error sources is reduced.
Currently PostScript is being replaced by PDF as the standard print job format. PostScript
+PDF printers that can directly print PDF (in addition to PostScript) already exist. For
traditional PostScript printers PDF needs to be converted to PostScript in the printing
workflow.
Before you buy a new printer, refer to the following sources to check how well the printer you
intend to buy is supported:
http://www.linuxfoundation.org/OpenPrinting/
The OpenPrinting home page with the printer database. The database shows the latest Lin-
ux support status. However, a Linux distribution can only integrate the drivers available at
production time. Accordingly, a printer currently rated as “perfectly supported” may not
have had this status when the latest openSUSE Leap version was released. Thus, the data-
bases may not necessarily indicate the correct status, but only provide an approximation.
http://pages.cs.wisc.edu/~ghost/
The Ghostscript Web page.
/usr/share/doc/packages/ghostscript/catalog.devices
List of built-in Ghostscript drivers.
New PPD les can be stored in the directory /usr/share/cups/model/ or added to the print
system with YaST as described in Section 5.3.1.1, “Adding Drivers with YaST”. Subsequently, the PPD
le can be selected during the printer setup.
socket
Socket refers to a connection in which the plain print data is sent directly to a TCP sock-
et. Some socket port numbers that are commonly used are 9100 or 35 . The device URI
(uniform resource identifier) syntax is: socket:// IP.OF.THE.PRINTER : PORT , for example:
socket://192.168.2.202:9100/ .
The protocol supported by the printer must be determined before configuration. If the manufac-
turer does not provide the needed information, the command nmap (which comes with the nmap
package) can be used to ascertain the protocol. nmap checks a host for open ports. For example:
With lpadmin the CUPS server administrator can add, remove or manage print queues. To add
a print queue, use the following syntax:
Then the device ( -v ) is available as QUEUE ( -p ), using the specified PPD le ( -P ). This means
that you must know the PPD le and the device URI to configure the printer manually.
Do not use -E as the rst option. For all CUPS commands, -E as the rst argument sets use
of an encrypted connection. To enable the printer, -E must be used as shown in the following
example:
When a normal user runs lpoptions , the settings are written to ~/.cups/lpoptions . How-
ever, root settings are written to /etc/cups/lpoptions .
Normally, a CUPS client runs on a regular workstation located in a trusted network environment
behind a firewall. In this case it is recommended to configure the network interface to be in the
Internal Zone , so the workstation is reachable from within the network.
If the CUPS server is part of a trusted network environment protected by a firewall, the network
interface should be configured to be in the Internal Zone of the firewall. It is not recommended
to set up a CUPS server in an untrusted network environment unless you take care that it is
protected by special firewall rules and secure settings in the CUPS configuration.
In case browsing does not work after having started cups-browsed , the CUPS server(s) probably
announce the network print queues via Bonjour/DND-SD. In this case you need to additionally
install the package avahi and start the associated service with sudo systemctl start avahi-
daemon on all clients.
6.8 Troubleshooting
The following sections cover some of the most frequently encountered printer hardware and
software problems and ways to solve or circumvent these problems. Among the topics covered
are GDI printers, PPD les and port configuration. Common network printer problems, defective
printouts, and queue handling are also addressed.
These printers do not support any common printer language and can only be addressed with
special proprietary control sequences. Therefore they can only work with the operating system
versions for which the manufacturer delivers a driver. GDI is a programming interface developed
by Microsoft* for graphics devices. Usually the manufacturer delivers drivers only for Windows,
and since the Windows driver uses the GDI interface these printers are also called GDI printers.
The actual problem is not the programming interface, but because these printers can only be
addressed with the proprietary printer language of the respective printer model.
Some GDI printers can be switched to operate either in GDI mode or in one of the standard
printer languages. See the manual of the printer whether this is possible. Some models require
special Windows software to do the switch (note that the Windows printer driver may always
switch the printer back into GDI mode when printing from Windows). For other GDI printers
there are extension modules for a standard printer language available.
Some manufacturers provide proprietary drivers for their printers. The disadvantage of propri-
etary printer drivers is that there is no guarantee that these work with the installed print system
or that they are suitable for the various hardware platforms. In contrast, printers that support a
standard printer language do not depend on a special print system version or a special hardware
platform.
Instead of spending time trying to make a proprietary Linux driver work, it may be more cost-ef-
fective to purchase a printer which supports a standard printer language (preferably PostScript).
This would solve the driver problem once and for all, eliminating the need to install and con-
figure special driver software and obtain driver updates that may be required because of new
developments in the print system.
If the connection to lpd cannot be established, lpd may not be active or there may be
basic network problems.
As the user root , use the following command to query a (possibly very long) status report
for QUEUE on remote HOST , provided the respective lpd is active and the host accepts
queries:
If lpd does not respond, it may not be active or there may be basic network problems.
If lpd responds, the response should show why printing is not possible on the queue on
host . If you receive a response like that shown in Example 6.1, “Error Message from lpd”,
the problem is caused by the remote lpd .
If a broadcasting CUPS network server exists, the output appears as shown in Example 6.2,
“Broadcast from the CUPS Network Server”.
ipp://192.168.2.202:631/printers/queue
The following command can be used to test if a TCP connection can be established to
cupsd (port 631 ) on HOST :
If the connection to cupsd cannot be established, cupsd may not be active or there may
be basic network problems. lpstat -h HOST -l -t returns a (possibly very long) status
report for all queues on HOST , provided the respective cupsd is active and the host accepts
queries.
The next command can be used to test if the QUEUE on HOST accepts a print job consisting
of a single carriage-return character. Nothing should be printed. Possibly, a blank page
may be ejected.
This output indicates that the printer connected to the print server box can be addressed
via TCP socket on port 9100 . By default, nmap only checks several commonly known
ports listed in /usr/share/nmap/nmap-services . To check all possible ports, use the
command nmap -p FROM_PORT - TO_PORT IP_ADDRESS . This may take some time. For
further information, refer to the man page of nmap .
Enter a command like
to send character strings or les directly to the respective port to test if the printer can
be addressed on this port.
1. To stop printing, remove all paper from ink jet printers or open the paper trays of laser
printers. High-quality printers have a button for canceling the current printout.
2. The print job may still be in the queue, because jobs are only removed after they are sent
completely to the printer. Use lpstat -o or lpstat -h cups.example.com -o to check
which queue is currently printing. Delete the print job with cancel QUEUE - JOBNUMBER
or cancel -h cups.example.com QUEUE - JOBNUMBER .
4. Reset the printer completely by switching it o for some time. Then insert the paper and
turn on the printer.
2. Stop cupsd .
4. Start cupsd .
The X Window System (X11) is the de facto standard for graphical user interfaces in Unix. X
is network-based, enabling applications started on one host to be displayed on another host
connected over any kind of network (LAN or Internet). This chapter provides basic information
on the X configuration, and background information about the use of fonts in openSUSE® Leap.
Usually, the X Window System needs no configuration. The hardware is dynamically detected
during X start-up. The use of xorg.conf is therefore deprecated. If you still need to specify
custom options to change the way X behaves, you can still do so by modifying configuration
les under /etc/X11/xorg.conf.d/ .
rendering the font with an algorithm that achieves results comfortable for the receiver's
eyes.
The last point is only relevant to vector fonts. Although the above two points are highly subjec-
tive, some defaults need to be created.
Linux font rendering systems consist of several libraries with different relations. The basic font
rendering library is FreeType (http://www.freetype.org/) , which converts font glyphs of support-
ed formats into optimized bitmap glyphs. The rendering process is controlled by an algorithm
and its parameters (which may be subject to patent issues).
Every program or library which uses FreeType should consult the Fontconfig (http://www.font-
config.org/) library. This library gathers font configuration from users and from the system.
When a user amends his Fontconfig setting, this change will result in Fontconfig-aware appli-
cations.
More sophisticated OpenType shaping needed for scripts such as Arabic, Han or Phags-Pa and
other higher level text processing lies on the shoulders of Harfbuzz (http://www.harfbuzz.org/)
or Pango (http://www.pango.org/) , to mention some examples.
rpm
Invoke rpm to see which software packages containing fonts are installed on your system:
Every font package should satisfy this expression. However, the command may return some
false positives like fonts-config (which is neither a font nor does it contain fonts).
fc-list
If you want to know what an installed font family looks like, either use the command
ftview (package ft2demos ) or visit http://fontinfo.opensuse.org/ . For example, to display
the FreeMono font in 14 point, use ftview like this:
ftview 14 /usr/share/fonts/truetype/FreeMono.ttf
If the desired font does not exist on your system, Fontconfig's matching rules take place and try
to nd the most similar fonts available. This means, your request is substituted:
tux > for font in serif sans mono; do fc-match "$font" ; done
DejaVuSerif.ttf: "DejaVu Serif" "Book"
DejaVuSans.ttf: "DejaVu Sans" "Book"
DejaVuSansMono.ttf: "DejaVu Sans Mono" "Book"
The result may vary on your system, depending on which fonts are currently installed.
1. Manually install the font les such as *.ttf or *.otf to a known font directory. If it
needs to be system-wide, use the standard directory /usr/share/fonts . For installation
in your home directory, use ~/.config/fonts .
If you want to deviate from the standard directories, Fontconfig allows you to choose
another one. Let Fontconfig know by using the <dir> element, see Section 7.1.5.2, “Diving
into Fontconfig XML” for details.
2. Install fonts using zypper . Lots of fonts are already available as a package, be it on your
SUSE distribution or in the M17N:fonts (http://download.opensuse.org/repositories/M17N:/
fonts/) repository. Add the repository to your list using the following command. For
example, to add a repository for SLE 12:
sudo zypper ar
http://download.opensuse.org/repositories/M17N:/fonts/openSUSE_Leap_42.3/
Via Fontconfig, it is possible to select a rendering algorithms for every font individually or for
a set of fonts.
sudo /usr/sbin/fonts-config
Restart the application to make the effect visible. Keep in mind the following issues:
A few applications do need not to be restarted. For example, Firefox re-reads Fontconfig
configuration from time to time. Newly created or reloaded tabs get new font configura-
tions later.
The fonts-config script is called automatically after every package installation or re-
moval (if not, it is a bug of the font software package).
The following list provides some configuration examples, sorted from the “most readable” fonts
(more contrast) to “most beautiful” (more smoothed).
Bitmap Fonts
Prefer bitmap fonts via the PREFER_*_FAMILIES variables. Follow the example in the help
section for these variables. Be aware that these fonts are rendered black and white, not
smoothed and that bitmap fonts are available in several sizes only. Consider using
SEARCH_METRIC_COMPATIBLE="no"
FORCE_BW="yes"
FORCE_BW_MONOSPACE="yes"
Default Settings
All fonts are rendered with antialiasing. Well hinted fonts will be rendered with the byte
code interpreter (BCI) and the rest with autohinter ( hintstyle=hintslight ). Leave all
relevant sysconfig variables to the default setting.
CFF Fonts
SEARCH_METRIC_COMPATIBLE="no"
SEARCH_METRIC_COMPATIBLE="no"
Autohinter Exclusively
Even for a well hinted font, use FreeType2's autohinter. That can lead to thicker, sometimes
fuzzier letter shapes with lower contrast. Set the following variable to activate this:
FORCE_AUTOHINTER="yes"
<?xml version="1.0"?>
<!DOCTYPE fontconfig SYSTEM "fonts.dtd">
<fontconfig>
<!-- Insert your changes here -->
</fontconfig>
If the default directories are not enough, insert the dir element with the respective directory:
<dir>/usr/share/fonts2</dir>
<match target="font">
<test name="family">
<string>FAMILY_NAME</string>
</test>
<edit name="antialias" mode="assign">
<bool>true</bool>
</edit>
<edit name="hinting" mode="assign">
<bool>true</bool>
</edit>
<edit name="autohint" mode="assign">
<bool>false</bool>
</edit>
<edit name="hintstyle" mode="assign">
<const>hintfull</const>
</edit>
</match>
Various properties of fonts can be tested. For example, the <test> element can test for the
font family (as shown in the example), size interval, spacing, font format, and others. When
abandoning <test> completely, all <edit> elements will be applied to every font (global
change).
Rule 1
Rule 2
<alias>
<family>serif</family>
<prefer>
<family>Droid Serif</family>
</prefer>
</alias>
Rule 3
<alias>
<family>serif</family>
<accept>
<family>STIXGeneral</family>
</accept>
</alias>
The rules from Example 7.2, “Aliases and Family Name Substitutions” create a prioritized family list
(PFL). Depending on the element, different actions are performed:
Putting this together, when snippets occur in the order Rule 1 - Rule 2 - Rule 3 and the user requests
“Alegreya SC”, then the PFL is created as depicted in Table 7.1, “Generating PFL from Fontconfig
rules”.
Request Alegreya SC
In Fontconfig's metrics, the family name has the highest priority over other patterns, like style,
size, etc. Fontconfig checks which family is currently installed on the system. If “Alegreya SC”
is installed, then Fontconfig returns it. If not, it asks for “Droid Serif”, etc.
Be careful. When the order of Fontconfig snippets is changed, Fontconfig can return different
results, as depicted in Table 7.2, “Results from Generating PFL from Fontconfig Rules with Changed
Order”.
TABLE 7.2: RESULTS FROM GENERATING PFL FROM FONTCONFIG RULES WITH CHANGED ORDER
Note: Implication.
Think of the <default> alias as a classification or inclusion of this group (if not installed).
As the example shows, <default> should always precede the <prefer> and <accept>
aliases of that group.
The following Fontconfig snippet in Example 7.3, “Aliases and Family Name Substitutions” creates
a serif group. Every family in this group could substitute others when a former font is not
installed.
EXAMPLE 7.3: ALIASES AND FAMILY NAME SUBSTITUTIONS
<alias>
<family>Alegreya SC</family>
<default>
<family>serif</family>
</default>
</alias>
<alias>
<family>Droid Serif</family>
<default>
<family>serif</family>
</default>
</alias>
<alias>
<family>STIXGeneral</family>
<default>
<family>serif</family>
</default>
</alias>
<alias>
<family>serif</family>
<accept>
<family>Droid Serif</family>
<family>STIXGeneral</family>
<family>Alegreya SC</family>
</accept>
</alias>
Priority is given by the order in the <accept> alias. Similarly, stronger <prefer> aliases can
be used.
Example 7.2, “Aliases and Family Name Substitutions” is expanded by Example 7.4, “Aliases and Family
Names Substitutions”.
Rule 4
Rule 5
<alias>
<family>serif</family>
<prefer>
<family>DejaVu Serif</family>
</prefer>
</alias>
The expanded configuration from Example 7.4, “Aliases and Family Names Substitutions” would lead
to the following PFL evolution:
Request Alegreya SC
In case multiple <prefer declarations for the same generic name exist, the decla-
ration that is parsed last “wins”. If possible, do not use <prefer> before user in
the system-wide configuration.
Every <prefer> declaration overwrites <accept> declarations for the same gener-
ic name. If the administrator wants to give the user free rein to use even <ac-
cept> and not only <prefer> ,the administrator should not use <prefer> in the
system-wide configuration. On the other hand, users mostly use <prefer> ,, so that
should not be detrimental and we see the use of <prefer> also in system wide
configurations.
FUSE is the acronym for le system in user space. This means you can configure and
mount a le system as an unprivileged user. Normally, you need to be root for this
task. FUSE alone is a kernel module. Combined with plug-ins, it allows you to ex-
tend FUSE to access almost all le systems like remote SSH connections, ISO im-
ages, and more.
3. Find out which Windows partition you need. Use YaST and start the partitioner module
to see which partition belongs to Windows, but do not modify anything. Alternatively,
become root and execute /sbin/fdisk -l . Look for partitions with a partition type
of HPFS/NTFS .
4. Mount the partition in read-write mode. Replace the placeholder DEVICE with your re-
spective Windows partition:
The command ntfs-3g uses the current user (UID) and group (GID) to mount the given
device. If you want to set the write permissions to a different user, use the command id
USER to get the output of the UID and GID values. Set it with:
id tux
uid=1000(tux) gid=100(users) groups=100(users),16(dialout),33(video)
ntfs-3g /dev/DEVICE MOUNT POINT -o uid=1000,gid=100
2. Create a directory that is to be used as a mount point. A good idea is to use ~/mounts/
HOST . Replace HOST with the name of your remote computer.
110 Mounting Remote File System with SSHFS openSUSE Leap 42.3
2. Create a directory that is to be used as a mount point, for example ~/mounts/iso .
You can only read content from the ISO image, but you can not write back. To unmount the
resource, use fusermount -u MOUNT POINT .
Use YaST's software management module to search for software components you
want to add or remove. YaST resolves all dependencies for you. To install pack-
ages not shipped with the installation media, add additional software repositories
to your setup and let YaST manage them. Keep your system up-to-date by managing
software updates with the update applet.
Change the software collection of your system with the YaST Software Manager. This YaST
module is available in two flavors: a graphical variant for X Window and a text-based variant
to be used on the command line. The graphical flavor is described here—for details on the text-
based YaST, see Book “Reference”, Chapter 1 “YaST in Text Mode”.
Product
Pattern
A pattern is an installable group of packages dedicated to a certain purpose. For example,
the Laptop pattern contains all packages that are needed in a mobile computing environ-
ment. Patterns define package dependencies (such as required or recommended packages)
and come with a preselection of packages marked for installation. This ensures that the
most important packages needed for a certain purpose are available on your system after
installation of the pattern. However, not necessarily all packages in a pattern are prese-
lected for installation and you can manually select or deselect packages within a pattern
according to your needs and wishes.
Package
A package is a compressed le in rpm format that contains the les for a particular pro-
gram.
Patch
A patch consists of one or more packages and may be applied by means of delta RPMs. It
may also introduce dependencies to packages that are not installed yet.
Resolvable
A generic term for product, pattern, package or patch. The most commonly used type of
resolvable is a package or a patch.
Delta RPM
A delta RPM consists only of the binary di between two defined versions of a package,
and therefore has the smallest download size. Before being installed, the full RPM package
is rebuilt on the local machine.
Package Dependencies
Certain packages are dependent on other packages, such as shared libraries. In other terms,
a package may require other packages—if the required packages are not available, the
package cannot be installed. In addition to dependencies (package requirements) that must
be fulfilled, some packages recommend other packages. These recommended packages are
only installed if they are actually available, otherwise they are ignored and the package
recommending them is installed nevertheless.
Patterns
Lists all patterns available for installation on your system.
Package Groups
Lists all packages sorted by groups such as Graphics, Programming, or Security.
RPM Groups
Lists all packages sorted by functionality with groups and subgroups. For example Net-
working Email Clients.
Repositories
A filter to list packages by repository. To select more than one repository, hold the Ctrl
key while clicking repository names. The “pseudo repository” @System lists all packages
currently installed.
Search
Lets you search for a package according to certain criteria. Enter a search term and press
Enter . Refine your search by specifying where to Search In and by changing the Search
Mode. For example, if you do not know the package name but only the name of the applica-
tion that you are searching for, try including the package Description in the search process.
Installation Summary
If you have already selected packages for installation, update or removal, this view shows
the changes that will be applied to your system when you click Accept. To filter for packages
with a certain status in this view, activate or deactivate the respective check boxes. Press
Shift – F1 for details on the status ags.
1. Search for packages as described in Section 9.2.1, “Views for Searching Packages or Patterns”.
2. The packages found are listed in the right pane. To install a package or remove it, right-
click it and choose Install or Delete. If the relevant option is not available, check the package
status indicated by the symbol in front of the package name—press Shift – F1 for help.
4. It is not possible to remove a pattern per se. Instead, select the packages of a pattern you
want to remove and mark them for removal.
6. Before applying your changes, you can review or modify them by clicking View Installa-
tion Summary. By default, all packages that will change status, are listed.
7. To revert the status for a package, right-click the package and select one of the following
entries: Keep if the package was scheduled to be deleted or updated, or Do Not Install if
it was scheduled for installation. To abandon all changes and quit the Software Manager,
click Cancel and Abandon.
9. In case YaST found dependencies on other packages, a list of packages that have addition-
ally been chosen for installation, update or removal is presented. Click Continue to accept
them.
After all selected packages are installed, updated or removed, the YaST Software Manager
automatically terminates.
package vendor.
Which of the aspects has the highest importance for choosing the update candidates depends
on the respective update option you choose.
1. To update all installed packages to the latest version, choose Package All Packages Up-
date if Newer Version Available from the main menu.
All repositories are checked for possible update candidates, using the following policy:
YaST rst tries to restrict the search to packages with the same architecture and vendor
like the installed one. If the search is positive, the “best” update candidate from those is
selected according to the process below. However, if no comparable package of the same
vendor can be found, the search is expanded to all packages with the same architecture.
If still no comparable package can be found, all packages are considered and the “best”
update candidate is selected according to the following criteria:
1. Repository priority: Prefer the package from the repository with the highest priority.
2. If more than one package results from this selection, choose the one with the “best”
architecture (best choice: matching the architecture of the installed one).
2. To make sure that the packages for a mass update derive from a certain repository:
a. Choose the repository from which to update as described in Section 9.2.1, “Views for
Searching Packages or Patterns” .
b. On the right hand side of the window, click Switch system packages to the versions
in this repository. This explicitly allows YaST to change the package vendor when
replacing the packages.
When you proceed with Accept, all installed packages will be replaced by packages
deriving from this repository, if available. This may lead to changes in vendor and
architecture and even to downgrading some packages.
c. To refrain from this, click Cancel switching system packages to the versions in this repos-
itory. Note that you can only cancel this until you press the Accept button.
3. Before applying your changes, you can review or modify them by clicking View Installa-
tion Summary. By default, all packages that will change status, are listed.
4. If all options are set according to your wishes, confirm your changes with Accept to start
the mass update.
In addition to the hard dependencies required to run a program (for example a certain library),
a package can also have weak dependencies, that add for example extra functionality or trans-
lations. These weak dependencies are called package recommendations.
The way package recommendations are handled has slightly changed starting with openSUSE
Leap 42.1. Nothing has changed when installing a new package—recommended packages are
still installed by default.
Prior to openSUSE Leap 42.1, missing recommendations for already installed packages were in-
stalled automatically. Now these packages will no longer be installed automatically. To switch to
the old default, set PKGMGR_REEVALUATE_RECOMMENDED="yes" in /etc/sysconfig/yast2 . To
install all missing recommendations for already installed packages, start YaST Software Man-
ager and choose Extras Install All Matching Recommended Packages.
To disable the installation of recommended packages when installing new packages, deactivate
Dependencies Install Recommended Packages in the YaST Software Manager. If using the com-
mand line tool Zypper to install packages, use the option --no-recommends.
1. Click Add.
To scan your network for installation servers announcing their services via SLP, select
Scan Using SLP and click Next.
To add a repository from a removable medium, choose the relevant option and insert
the medium or connect the USB device to the machine, respectively. Click Next to
start the installation.
For the majority of repositories, you will be asked to specify the path (or URL) to the
media after selecting the respective option and clicking Next. Specifying a Repository
Name is optional. If none is specified, YaST will use the product name or the URL
as repository name.
The option Download Repository Description Files is activated by default. If you deactivate
the option, YaST will automatically download the les later, if needed.
3. Depending on the repository you have added, you may be asked if you want to import the
GPG key with which it is signed or asked to agree to a license.
After confirming these messages, YaST will download and parse the metadata. It will add
the repository to the list of Configured Repositories.
4. If needed, adjust the repository Properties as described in Section 9.3.2, “Managing Repository
Properties”.
6. After having successfully added the repository, the software manager starts and you can
install packages from this repository. For details, refer to Chapter 9, Installing or Removing
Software.
Status
The repository status can either be Enabled or Disabled. You can only install packages from
repositories that are enabled. To turn a repository o temporarily, select it and deactivate
Enable. You can also double-click a repository name to toggle its status. If you want to
remove a repository completely, click Delete.
Refresh
When refreshing a repository, its content description (package names, versions, etc.) is
downloaded to a local cache that is used by YaST. It is sufficient to do this once for static
repositories such as CDs or DVDs, whereas repositories whose content changes often should
be refreshed frequently. The easiest way to keep a repository's cache up-to-date is to choose
Automatically Refresh. To do a manual refresh click Refresh and select one of the options.
Priority
The Priority of a repository is a value between 1 and 200 , with 1 being the highest priority
and 200 the lowest priority. Any new repositories that are added with YaST get a priority
of 99 by default. If you do not care about a priority value for a certain repository, you can
also set the value to 0 to apply the default priority to that repository ( 99 ). If a package is
available in more than one repository, then the repository with the highest priority takes
precedence. This is useful if you want to avoid downloading packages unnecessarily from
the Internet by giving a local repository (for example, a DVD) a higher priority.
1. To install the patches and updates, click Install updates in the notification message. This
opens the GNOME update viewer. Alternatively, open the update viewer from Applica-
tions System Tools Software Update or press Alt – F2 and enter gpk-update-viewer .
2. All Security Updates and Important Updates are preselected. It is strongly recommended to
install these patches. Other Updates can be manually selected by activating the respective
check boxes. Get detailed information on a patch or package update by clicking its title.
3. Click Install Updates to start the installation. You will be prompted for the root password.
SOFTWARE SOURCES
Repositories
Lists the repositories that will be checked for available patches and package updates. You
can enable or disable certain repositories.
Add-on products are system extensions. You can install a third party add-on product
or a special system extension of openSUSE® Leap (for example, a CD with support
for additional languages or a CD with binary drivers). To install a new add-on, start
YaST and select Software Add-On Products. You can select various types of product
media, like CD, FTP, USB mass storage devices (such as USB ash drives or disks)
or a local directory. You can also work directly with ISO les. To add an add-on as
ISO le media, select Local ISO Image then enter the Path to ISO Image. The Reposito-
ry Name is arbitrary.
10.1 Add-Ons
To install a new add-on, proceed as follows:
1. In YaST select Software Add-On Products to see an overview of already installed add-on
products.
3. From the list of available Media Types specify the type matching your repository.
4. To add a repository from a removable medium, choose the relevant option and insert the
medium or connect the USB device to the machine, respectively.
5. You can choose to Download Repository Description Files now. If the option is unchecked,
YaST will automatically download the les later, if needed. Click Next to proceed.
6. When adding a repository from the network, enter the data you are prompted for. Continue
with Next.
7. Depending on the repository you have added, you may be asked if you want to import the
GPG key with which it is signed or asked to agree to a license.
After confirming these messages, YaST will download and parse the metadata and add the
repository to the list of Configured Repositories..
8. If needed, adjust the repository Properties as described in Section 9.3.2, “Managing Repository
Properties” or confirm your changes with OK to close the configuration dialog.
SUSE offers a continuous stream of software security updates for your product. By default, the
update applet is used to keep your system up-to-date. Refer to Section 9.4, “Keeping the System Up-
to-date” for further information on the update applet. This chapter covers the alternative tool
for updating software packages: YaST Online Update.
The current patches for openSUSE® Leap are available from an update software repository,
which is automatically configured during the installation. If you have registered your product
during the installation, an update repository is already configured. If you have not registered
openSUSE Leap, you can do so by starting the Product Registration in YaST. Alternatively, you
can manually add an update repository from a source you trust. To add or remove repositories,
start the Repository Manager with Software Software Repositories in YaST. Learn more about
the Repository Manager in Section 9.3, “Managing Software Repositories and Services”.
SUSE provides updates with different relevance levels:
Security Updates
Fix severe security hazards and should always be installed.
Recommended Updates
Fix issues that could compromise your computer.
Optional Updates
Fix non-security relevant issues or provide enhancements.
The Summary section on the left lists the available patches for openSUSE Leap. The patches are
sorted by security relevance: security , recommended , and optional . You can change the
view of the Summary section by selecting one of the following options from Show Patch Category:
Unneeded Patches
Patches that either apply to packages not installed on your system, or patches that have
requirements which have already have been fulfilled (because the relevant packages have
already been updated from another source).
All Patches
All patches available for openSUSE Leap.
Each list entry in the Summary section consists of a symbol and the patch name. For an overview
of the possible symbols and their meaning, press Shift – F1 . Actions required by Security
and Recommended patches are automatically preset. These actions are Autoinstall, Autoupdate
and Autodelete.
2. To automatically apply all new patches (except optional ones) that are currently avail-
able for your system, proceed with Apply or Accept to start the installation of the prese-
lected patches.
a. Use the respective filters and views that the interface provides. For details, refer to
Section 11.1, “The Online Update Dialog”.
b. Select or deselect patches according to your needs and wishes by right-clicking the
patch and choosing the respective action from the context menu.
c. Most patches include updates for several packages. If you want to change actions for
single packages, right-click a package in the package view and choose an action.
d. To confirm your selection and apply the selected patches, proceed with Apply or
Accept.
4. After the installation is complete, click Finish to leave the YaST Online Update. Your system
is now up-to-date.
By default, updates are downloaded as delta RPMs. Since rebuilding RPM packages from delta
RPMs is a memory- and processor-consuming task, certain setups or hardware configurations
might require you to disable the use of delta RPMs for the sake of performance.
Some patches, such as kernel updates or packages requiring license agreements, require user
interaction, which would cause the automatic update procedure to stop. You can configure to
skip patches that require user interaction.
1. After installation, start YaST and select Software Online Update Configuration.
Alternatively, start the module with yast2 online_update_configuration from the
command line.
7. To disable the use of delta RPMs (for performance reasons), deactivate Use Delta RPMs.
8. To filter the patches by category (such as security or recommended), activate Filter by Cat-
egory and add the appropriate patch categories from the list. Only patches of the selected
categories will be installed. Others will be skipped.
The automatic online update does not automatically restart the system afterward. If there are
package updates that require a system reboot, you need to do this manually.
You can upgrade an existing system without completely reinstalling it. There are
two types of renewing the system or parts of it: updating individual software packages
and upgrading the entire system. Updating individual packages is covered in Chapter 9,
Installing or Removing Software and Chapter 11, YaST Online Update. Two ways to up-
grade the system are discussed in the following sections— see Section 12.1.3, “Upgrad-
ing with YaST” and Section 12.1.4, “Distribution Upgrade with Zypper”.
Software tends to “grow” from version to version. Therefore, take a look at the available parti-
tion space with df before updating. If you suspect you are running short of disk space, secure
your data before you update and repartition your system. There is no general rule regarding
how much space each partition should have. Space requirements depend on your particular
partitioning profile, the software selected, and the version numbers of the system.
12.1.1 Preparations
Before upgrading, copy the old configuration les to a separate medium (such as removable
hard disk or USB ash drive) to secure the data. This primarily applies to les stored in /etc
as well as some of the directories and les in /var . You may also want to write the user data
in /home (the HOME directories) to a backup medium. Back up this data as root . Only root
has read permission for all local les.
If you upgrade a default system from the previous version to this version, YaST works out the
necessary changes and performs them. Depending on your customization, some steps (or the
entire upgrade procedure) may fail and you must resort to copying back your backup data.
Check the following issues before starting the system update.
Before upgrading the system, make sure that /etc/passwd and /etc/group do not contain
any syntax errors. For this purpose, start the verification utilities pwck and grpck as root to
eliminate any reported errors.
If your machine serves as a VM Host Server for KVM or Xen, make sure to properly shut down
all running VM Guests prior to the update. Otherwise you may not be able to access the guests
after the update.
12.1.2.3 PostgreSQL
Before updating PostgreSQL ( postgres ), dump the databases. See the manual page of pg_dump .
This is only necessary if you actually used PostgreSQL prior to your update.
Following the preparation procedure outlined in Section 12.1.1, “Preparations”, you can now up-
grade your system:
1. Insert the openSUSE Leap DVD into the drive, then reboot the computer to start the in-
stallation program. On machines with a traditional BIOS you will see the graphical boot
screen shown below. On machines equipped with UEFI, a slightly different boot screen is
used. Secure boot on UEFI machines is supported.
Use F2 to change the language for the installer. A corresponding keyboard layout is cho-
sen automatically. See Section 2.2.1.1, “The Boot Screen on Machines Equipped with Traditional
BIOS” or Section 2.2.1.2, “The Boot Screen on Machines Equipped with UEFI” for more information
about changing boot options.
2. Select Upgrade on the boot screen, then press Enter . This boots the system and loads the
openSUSE Leap installer. Do not select Installation.
3. The Language and Keyboard Layout are initialized with the language settings you have
chosen on the boot screen. Change them here, if necessary.
Read the License Agreement. It is presented in the language you have chosen on the boot
screen. License Translations are available. Proceed with Next.
5. YaST shows a list of Previously Used Repositories. By default all repositories will get re-
moved. If you had not added any custom repositories, do not change the settings. The
packages for the upgrade will be installed from DVD and you can optionally enable the
default online repositories can be chosen in the next step.
If you have had added custom repositories, for example from the openSUSE Build Service,
you have two choices:
Leave the repository in state Removed . Software that was installed from this reposi-
tory will get removed during the upgrade. Use this method if no version of the repos-
itory that matches the new openSUSE Leap version, is available.
Update and enable the repository. Use this method if a version that matches the new
openSUSE Leap version is available for the repository. Change it's URL by clicking the
repository in the list and then Change. Enable the repository afterwards by clicking
Toggle Status until it is set to Enable.
Do not use repositories matching the previous version unless you are absolutely sure they
will also work with the new openSUSE version. If not, the system may be unstable or not
work at all.
7. Use the Installation Settings screen to review and—if necessary—change several proposed
installation settings. The current configuration is listed for each setting. To change it, click
the headline.
System
View detailed hardware information by clicking System. In the resulting screen you
can also change Kernel Settings—see Section 2.12.5, “System” for more information.
Update Options
By default, YaST will update perform full Update with Installation of New Software
and Features based on a selection of patterns. Each pattern contains several software
packages needed for specific functions (for example, Web and LAMP server or a print
server).
Here you can change the package selection or change the Update Mode to Only Update
Installed Packages.
Packages
You can further tweak the package selection on the Packages screen. Here you can not
only select patterns but also list their contents and search for individual packages.
See Chapter 9, Installing or Removing Software for more information.
If you intend to enhance your system, it is recommended to finish the upgrade rst
and then install additional software.
Backup
You also have the possibility to make backups of various system components. Select-
ing backups slows down the upgrade process. Use this option if you do not have a
recent system backup.
Language
This section allows you to change the Primary Languageprimary language and con-
figure additional Secontry Languages.. Optionally, you can adjust the keyboard layout
and timezone to the selected primary language.
Keyboard Layout
Here you can change the keyboard layout and adjust additional Expert Keyboard
Settings.
8. After you have finalized the system configuration on the Installation Settings screen, click
Update. Depending on your software selection you may need to agree to license agreements
before the installation confirmation screen pops up. Up to this point no changes have been
made to your system. After you click Update a second time, the upgrade process starts.
To avoid unexpected errors during the upgrade process using zypper , minimize risky constel-
lations.
Disable third party repositories before starting the upgrade, or lower the priority of these
repositories to make sure packages from the default system repositories will get preference.
Enable them again after the upgrade and edit their version string to match the version
number of the distribution of the upgraded now running system.
The program zypper supports long and short command names. For example, you can abbreviate
zypper install as zypper in . In the following text, the short variants are used.
1. Run the online update to make sure the software management stack is up-to-date. For
more information, see Chapter 11, YaST Online Update.
2. Configure the repositories you want to use as update sources. Getting this right is crucial.
Either use YaST (see Section 9.3, “Managing Software Repositories and Services”) or zypper (see
Book “Reference”, Chapter 2 “Managing Software with Command Line Tools”, Section 2.1 “Using
Zypper”). The name of the repositories used in the following steps may vary depending on
your customisation's.
To view your current repositories enter:
zypper lr -u
a. Increase the version number of the system repositories from 42.2 to 42.3 leap/ . Add
the new repositories with commands such as:
server=http://download.example.org
zypper ar $server/distribution/leap/42.3/repo/oss/ Leap-42.3-OSS
zypper ar $server/update/leap/42.3/oss/ Leap-42.3-Update
zypper rr Leap-42.2-OSS
zypper rr Leap-42.2-Update
If necessary, repeat these steps for other repositories to ensure a clean upgrade path
for all your packages.
b. Disable third party repositories or other openSUSE Build Server repositories, because
zypper dup is guaranteed to work with the default repositories only (replace RE-
PO-ALIAS with the name of the repository you want to disable):
zypper mr -d REPO-ALIAS
zypper dup ensures that all installed packages come from one of the available
repositories. It does not consider the version, architecture, or vendor of the installed
packages; thus it emulates a fresh installation. Packages that are no longer avail-
able in the repositories are considered orphaned. Such packages get uninstalled if
their dependencies cannot be satisfied. If they can be satisfied, such packages stay
installed.
zypper lr -d
4. Update Zypper and the package management itself with zypper patch --updates-
tack-only .
When working with Linux these days, you can communicate with the system almost without
ever requiring a command line interpreter (the shell). After booting your Linux system, you
are usually directed to a graphical user interface that guides you through the login process and
the following interactions with the operating system. The graphical user interface in Linux (the
X Window System or X11) is initially configured during installation. Both KDE and GNOME
desktop (and other window managers you can install) use it for interaction with the user.
Nevertheless, it is useful to have some basic knowledge of working with a shell because you
might encounter situations where the graphical user interface is not available. For example, if
some problem with the X Window System occurs. If you are not familiar with a shell, you might
feel a bit uncomfortable at rst when entering commands, but the more you get used to it, the
more you will realize that the command line is often the quickest and easiest way to perform
some daily tasks.
For UNIX or Linux several shells are available which differ slightly in behavior and in the com-
mands they accept. The default shell in openSUSE® Leap is Bash (GNU Bourne-Again Shell).
The following sections will guide you through your rst steps with the Bash shell and will show
you how to complete some basic tasks via the command line. If you are interested in learning
more or rather feel like a shell “power user” already, refer to Chapter 14, Bash and Bash Scripts.
you can start a terminal window within the graphical user interface.
While the rst option is always available, you can only make use of the second option when you
are already logged in to a desktop such as KDE or GNOME. Whichever way you choose, there
is always a way back and you can switch back and forth between the shell and the graphical
user interface.
1 2 3
tux@linux:~>
1 Your login.
2 The hostname of your computer.
3 Path to the current directory. Directly after login, the current directory usually is your
home directory, indicated by the ~ symbol (tilde) .
When you are logged in at a remote computer the information provided by the prompt always
shows you which system you are currently working on.
When the cursor is located behind this prompt, you can pass commands directly to your com-
puter system. For example, you can now enter ls -l to list the contents of the current directory
in a detailed format. If this is enough for your rst encounter with the shell and you want to go
back to the graphical user interface, you should log out from your shell session rst. To do so,
type exit and press Enter . Then press Alt – F7 to switch back to the graphical user interface.
You will nd your desktop and the applications running on it unchanged.
When you are already logged in to the GNOME or the KDE desktop and want to start a terminal
window within the desktop, press Alt – F2 and enter konsole (for KDE) or gnome-terminal
(for GNOME). This opens a terminal window on your desktop. As you are already logged in to
your desktop, the prompt shows information about your system as described above. You can now
enter commands and execute tasks just like in any shell which runs parallel to your desktop. To
switch to another application on the desktop just click on the corresponding application window
or select it from the taskbar of your panel. To close the terminal window press Alt – F4 .
tux > ls
bin Desktop Documents public_html tux.txt
tux >
Files in Linux may have a le extension or a suffix, such as .txt , but do not need to have
one. This makes it difficult to differentiate between les and folders in this output of the ls .
By default, the colors in the Bash shell give you a hint: directories are usually shown in blue,
les in black.
tux > ls -l
drwxr-xr-x 1 tux users 48 2015-06-23 16:08 bin
drwx---r-- 1 tux users 53279 2015-06-21 13:16 Desktop
1 Type of object and access permissions. For further information, refer to Section 13.5.1, “Per-
missions for User, Group and Others”.
4 Group assigned to the le or directory. For further information, refer to Section 13.5.1, “Per-
missions for User, Group and Others”.
To revert the order of sorting, add -r as an option to your ls command. For example, ls -
lr gives you the contents list sorted in reverse alphabetical order, ls -ltr shows the oldest
les rst. There are lots of other useful options for ls . In the following section you will learn
how to investigate them.
--help option
If you only want to look up the options of a certain command, try entering the command
followed by a space and --help . This --help option exists for many commands. For
example, ls --help displays all the options for the ls command.
Manual Pages
To learn more about the various commands, you can also use the manual pages. Manual
pages also give a short description of what the command does. They can be accessed with
man followed by the name of the command, for example, man ls .
The man pages are displayed directly in the shell. To navigate them, move up and down
with Page ↑ and Page ↓ . Move between the beginning and the end of a document with
Home and End . End this viewing mode by pressing Q . Learn more about the man com-
mand itself with man man .
Info Pages
Info pages usually provide even more information about commands. To view the info page
for a certain command, enter info followed by the name of the command (for example,
info ls ). You can browse an info page with a viewer directly in the shell and display the
different sections, called “nodes.” Use Space to move forward and <— to move backward.
Within a node, you can also browse with Page ↑ and Page ↓ but only Space and <—
will take you also to the previous or subsequent node. Like for the man pages, press Q
Note that man pages and info pages do not exist for all commands. Sometimes both are available
(usually for key commands), sometimes only a man page or an info page exists, and sometimes
neither of them are available.
Absolute Path
Enter the entire path from the root directory to the relevant le or directory.
Relative Path
Enter a path to the relevant le or directory by using the current directory as a starting
point. This implies to give the levels you have to move up or down in the le system tree
to reach the target directory of le, starting from the current directory.
Paths contain filenames, directories or both, separated by slashes. Absolute paths always start
with a slash. Relative paths do not have a slash at the beginning, but can have one or two dots.
When specifying paths, the following “shortcuts” can save you a lot of typing:
The tilde symbol ( ~ ) is a shortcut for home directories. For example, to list the contents
of your home directory, use ls ~ . To list the contents of another user's home directory,
enter ls ~USERNAME (or course, this will only work if you have permission to view the
contents, see Section 13.5, “File Access Permissions”). For example, entering ls ~tux would
list the contents of the home directory of a user named tux . You can use the tilde symbol
as shortcut for home directories also if you are working in a network environment where
your home directory may not be called /home but can be mapped to any directory in the
le system.
From anywhere in the le system, you can reach your home directory by entering cd ~
or by simply entering cd without any options.
When using relative paths, refer to the current directory with a dot ( . ). This is mainly
useful for commands such as cp or mv by which you can copy or move les and directories.
The next higher level in the tree is represented by two dots ( .. ). In order to switch to
the parent directory of your current directory, enter cd .. , to go up two levels from the
current directory enter cd ../.. etc.
To apply your knowledge, nd some examples below. They address basic tasks you may want
to execute with les or folders using Bash.
1. Enter
mkdir stands for “make directory”. This command creates a new directory named test
in the /tmp directory. In this case, you are using an absolute path to create the test
directory.
The new directory test should appear in the list of contents of the /tmp directory.
Now create a new le in a subdirectory of your home directory and copy it to /tmp/test .
Use a relative path for this task.
tux > ls -l ~
158 Examples for Working with Files and Directories openSUSE Leap 42.3
It should contain a subdirectory called Documents by default. If not, create this subdirec-
tory with the mkdir command you already know:
2. To create a new, empty le named myfile.txt in the Documents directory, enter
Usually, the touch command updates the modification and access date for an existing
le. If you use touch with a filename which does not exist in your target directory, it
creates a new le.
3. Enter
tux > ls -l
The le myfile.txt should appear in the list of contents for /tmp/test .
Now suppose you want to rename myfile.txt into tuxfile.txt . Finally you decide
to remove the renamed le and the test subdirectory.
159 Examples for Working with Files and Directories openSUSE Leap 42.3
tux > ls -l
3. Coming to the conclusion that you do not need the le any longer, you can delete it by
entering
2. Enter the password. If you mistyped the root password, the shell displays a message.
In this case, you have to re-enter su before retyping the password. If your password is
correct, a hash symbol # appears at the end of the prompt, signaling that you are acting
as root now.
3. Execute your task. For example, transfer ownership of a le to a new user which only
root is allowed to do:
4. After having completed your tasks as root , switch back to your normal user account.
To do so, enter
The hash symbol disappears and you are acting as “normal” user again.
Three permission sets are defined for each le object on a Linux system. These sets include the
read, write, and execute permissions for each of three types of users—the owner, the group,
and other users.
The following example shows the output of an ls -l command in a shell. This command lists
the contents of a directory and shows the details for each le and folder in that directory.
As shown in the third column, all objects belong to user tux . They are assigned to the group
users which is the primary group the user tux belongs to. To retrieve the access permissions
the rst column of the list must be examined more closely. Let's have a look at the le kde-
start.xml :
The rst column of the list consists of one leading character followed by nine characters grouped
in three blocks. The leading character indicates the le type of the object: in this case, the
hyphen ( – ) shows that kde-start.xml is a le. If you nd the character d instead, this shows
that the object is a directory, like local in Example 13.1, “Access Permissions For Files and Folders”.
The next three blocks show the access permissions for the owner, the group and other users (from
left to right). Each block follows the same pattern: the rst position shows read permissions
( r ), the next position shows write permissions ( w ), the last one shows execute permission ( x ).
A lack of either permission is indicated by - . In our example, the owner of kde-start.xml
has read and write access to the le but cannot execute it. The users group can read the le
but cannot write or execute it. The same holds true for the other users as shown in the third
block of characters.
Access permissions have a slightly different impact depending on the type of object they apply
to: le or directory. The following table shows the details:
Read (r) Users can open and read the Users can view the contents
le. of the directory. Without this
permission, users cannot list
the contents of this directo-
Write (w) Users can change the le: Users can create, rename or
They can add or drop data delete les in the directory.
and can even delete the con-
tents of the le. However,
this does not include the per-
mission to remove the le
completely from the direc-
tory as long as they do not
have write permissions for
the directory where the le is
located.
Execute (x) Users can execute the le. Users can change into the
This permission is only rele- directory and execute les
vant for les like programs there. If they do not have
or shell scripts, not for text read access to that directo-
les. If the operating system ry they cannot list the les
can execute the le directly, but can access them never-
users do not need read per- theless if they know of their
mission to execute the le. existence.
However, if the le must me
interpreted like a shell script
or a perl program, additional
read permission is needed.
Note that access to a certain le is always dependent on the correct combination of access
permissions for the le itself and the directory it is located in.
the type of access permission you want to remove, set or add and
the les or folders for which you want to change permissions separated by spaces.
The users for which you can change le access permissions fall into the following categories: the
owner of the le (user, u ), the group that own the le (group, g ) and the other users (others,
o ). You can add, remove or set one or more of the following permissions: read, write or execute.
As root , you can also change the ownership of a le: with the command chown
(change owner) you can transfer ownership to a new user.
In the example above, user tux owns the le kde-start.xml and has read and write access
to the le but cannot execute it. The users group can read the le but cannot write or execute
it. The same holds true for the other users as shown by the third block of characters.
Suppose you are tux and want to modify the access permissions to your les:
1. If you want to grant the users group also write access to kde-start.xml , enter
2. To grant the users group and other users write access to kde-start.xml , enter
chmod -w kde-start.xml
If you do not specify any kind of users, the changes apply to all users— the owner of
the le, the owning group and the others. Now even the owner tux does not have write
access to the le without rst reestablishing write permissions.
4. To prohibit the users group and others to change into the directory local , enter
5. To grant others write permissions for two les, for kde_quick.xml and
gnome_quick.xml , enter
Suppose you are tux and want to transfer the ownership of the le kde_quick.xml to
an other user, named wilber . In this case, proceed as follows:
2. Enter
ls -l kde_quick.xml
4. If the ownership is set according to your wishes, switch back to your normal user account.
History
By default, Bash “remembers” commands you have entered. This feature is called history.
You can browse through commands that have been entered before, select one you want to
repeat and then execute it again. To do so, press ↑ repeatedly until the desired command
appears at the prompt. To move forward through the list of previously entered commands,
press ↓ . For easier repetition of a certain command from Bash history, just type the rst
letter of the command you want to repeat and press Page ↑ .
You can now edit the selected command (for example, change the name of a le or a path),
before you execute the command by pressing Enter . To edit the command line, just move
the cursor to the desired position using the arrow keys and start typing.
You can also search for a certain command in the history. Press Ctrl – R to start an
incremental search function. showing the following prompt:
Just type one or several letters from the command you are searching for. Each character
you enter narrows down the search. The corresponding search result is shown on the right
side of the colon whereas your input appears on the left of the colon. To accept a search
result, press Esc . The prompt now changes to its normal appearance and shows the com-
mand you chose. You can now edit the command or directly execute it by pressing Enter .
Completion
Completing a filename or directory name to its full length after typing its rst letters is
another helpful feature of Bash. To do so, type the rst letters then press →| (Tabulator).
If the filename or path can be uniquely identified, it is completed at once and the cursor
Wild Cards
You can replace one or more characters in a filename with a wild card for pathname
expansion. Wild cards are characters that can stand for other characters. There are three
different types of these in Bash:
If you already did the example Section 13.3.1, “Examples for Working with Files and Directories”
your shell buer should be lled with commands which you can retrieve using the history
function.
2. Press Enter to execute the command and to switch to your home directory.
By default, your home directory contains two subdirectories starting with the same letter,
Documents and Desktop .
168 Examples For Using History, Completion and Wildcards openSUSE Leap 42.3
3. Enter cd D and press →| .
Nothing happens since Bash cannot identify to which one of the subdirectories you want
to change.
5. The prompt still shows your initial input. Type the next character of the subdirectory you
want to go to and press →| again.
Bash now completes the path.
Now suppose that your home directory contains several les with various le extensions.
It also holds several versions of one le which you saved under different filenames my-
file1.txt , myfile2.txt etc. You want to search for certain les according to their
properties.
a. Use the touch command to create several (empty) les with different le extensions,
for example .pdf , .xml and .jpg .
You can do this consecutively (do not forget to use the Bash history function) or with
only one touch command: simply add several filenames separated by a space.
b. Create at least two les that have the same le extension, for example .html .
tux > ls -l
-rw-r--r-- 1 tux users 0 2006-07-14 13:34 foo.xml
169 Examples For Using History, Completion and Wildcards openSUSE Leap 42.3
-rw-r--r-- 1 tux users 0 2006-07-14 13:47 home.html
-rw-r--r-- 1 tux users 0 2006-07-14 13:47 index.html
-rw-r--r-- 1 tux users 0 2006-07-14 13:47 toc.html
-rw-r--r-- 1 tux users 0 2006-07-14 13:34 manual.pdf
-rw-r--r-- 1 tux users 0 2006-07-14 13:49 myfile1.txt
-rw-r--r-- 1 tux users 0 2006-07-14 13:49 myfile2.txt
-rw-r--r-- 1 tux users 0 2006-07-14 13:49 myfile3.txt
-rw-r--r-- 1 tux users 0 2006-07-14 13:49 myfile4.txt
-rw-r--r-- 1 tux users 0 2006-07-14 13:49 myfile5.txt
-rw-r--r-- 1 tux users 0 2006-07-14 13:32 tux.png
2. With wild cards, select certain subsets of the les according to various criteria:
Note that you can only use the ? wild card here because the numbering of the les
is single-digit. As soon as you have a le named myfile10.txt you must to use the
* wild card to view all versions of myfile.txt (or add another question mark, so
your string looks like myfile??.txt ).
tux > ls -l
You can also combine several wild cards in one command. In the example above, rm my-
file[1-3,5].* would lead to the same result as rm myfile[1-3,5].txt because there are
only les with the extension .txt available.
170 Examples For Using History, Completion and Wildcards openSUSE Leap 42.3
Note: Using Wildcards in rm Commands
Wildcards in a rm command can be very useful but also dangerous: you might delete
more les from your directory than intended. To see which les would be affected by the
rm , run your wildcard string with ls instead of rm rst.
command mode
In this mode, vi accepts certain key combinations as commands. Simple tasks such as
searching words or deleting a line can be executed.
insert mode
In this mode, you can write normal text.
extended mode
In this mode, also known as colon mode (as you have to enter a colon to switch to this
mode), vi can execute also more complex tasks such as searching and replacing text.
In the following (very simple) example, you will learn how to open and edit a le with vi, how
to save your changes and quit vi.
2. Press I to switch to insert mode. The bottom line changes and indicates that you now
can insert text.
3. Write some sentences. If you want to insert a new line, rst press Esc to switch back to
command mode. Press O to insert a new line and to switch to insert mode again.
4. In the insert mode, you can edit the text with the arrow keys and with Del .
5. To leave vi, press Esc to switch to command mode again. Then press : which takes
you to the extended mode. The bottom line now shows a colon.
6. To leave vi and save your changes, type wq ( w for write ; q for quit ) and press Enter .
If you want to save the le under a different name, type w FILENAME and press Enter .
To leave vi without saving, type q! instead and press Enter .
locate
This utility is only available if you have installed the findutils-locate package. With
this command you can nd out in which directory a specified le is located. If desired,
use wild cards to specify filenames. The program is very quick, because it uses a database
specifically created for the purpose (rather than searching through the entire le system).
find
With find , search for a le in a given directory. The rst argument specifies the directory
in which to start the search. The option -name must be followed by a search string, which
may also include wild cards. Unlike locate , which uses a database, find scans the actual
directory.
grep
The grep command nds a specific search string in the specified text les. If the search
string is found, the command displays the line in which searchstring was found, along
with the filename. If desired, use wild cards to specify filenames.
2. To search your home directory for all occurrences of filenames that contain the le ex-
tension .txt , use
3. To search a directory (in this case, your home directory) for all occurrences of les which
contain, for example, the word music , enter
Note that grep is case-sensitive— unless you use it with the -i option. With the command
above you will not nd any les containing Music .
If you want to use a search string which consists of more than one word, enclose the string
in double quotation marks, for example:
head
With head you can view the rst lines of a text le. If you do not specify the command
any further, head shows the rst 10 lines of a text le.
tail
The tail command is the counterpart of head . If you use tail without any further
options it displays the last 10 lines of a text le. This can be very useful to view log les
of your system, where the most recent messages or log entries are usually found at the
end of the le.
less
With less , display the whole contents of a text le. To move up and down half a page
use Page ↑ and Page ↓ . Use Space to scroll down one page. Home takes you to the
beginning, and End to the end of the document. To end the viewing mode, press Q .
more
Instead of less , you can also use the older program more . It has basically the same
function—however, it is less convenient because it does not allow you to scroll backward.
Use Space to move forward. When you reach the end of the document, the viewer closes
automatically.
Redirection
With > you can forward the output of a command to a le (output redirection), with <
you can use a le as input for a command (input redirection).
Pipe
By means of a pipe symbol | you can also redirect the output: with a pipe, you can combine
several commands, using the output of one command as input for the next command. In
contrast to the other redirection symbols > and <, the use of the pipe is not constrained
to les.
This creates a le named filelist.txt that contains the list of contents of your current
directory as generated by the ls command.
However, if a le named filelist.txt already exists, this command overwrites the
existing le. To prevent this, use >> instead of >. Entering
2. Redirections also works the other way round. Instead of using the standard input from the
keyboard for a command, you can use a le as input:
This will force the sort command to get its input from the contents of filelist.txt .
The result is shown on the screen. Of course, you can also write the result into another
le, using a combination of redirections:
3. If a command generates a lengthy output, like ls -l may do, it may be useful to pipe
the output to a viewer like less to be able to scroll through the pages. To do so, enter
If you have started several background processes (also named jobs) from the same shell, the
jobs
command gives you an overview of the jobs. It also shows the job number in brackets and their
status:
Whereas job only shows the background processes started from a specific shell, the ps com-
mand (run without options) shows a list of all your processes—those you started. Find an ex-
ample output below:
tux > ps
PID TTY TIME CMD
15500 pts/1 00:00:00 bash
28214 pts/1 00:00:00 okular
30187 pts/1 00:00:00 kwrite
30280 pts/1 00:00:00 ps
In case a program cannot be terminated in the normal way, use the kill command to stop the
process (or processes) belonging to that program. To do so, specify the process ID (PID) shown
by the output of ps . For example, to shut down the KWrite editor in the example above, enter
This sends a TERM signal that instructs the program to shut itself down.
If kill does not help—as is sometimes the case for “runaway” programs—try
This sends a KILL signal instead of a TERM signal, usually bringing the specified process to an
end.
This section is intended to introduce the most basic set of commands for handling jobs and
processes. Find an overview for system administrators in Book “System Analysis and Tuning Guide”,
Chapter 2 “System Monitoring Utilities”, Section 2.3 “Processes”.
and Page ↓ . Move between the beginning and the end of a document with Home and End . End
this viewing mode by pressing Q . Learn more about the man command itself with man man .
In the following overview, the individual command elements are written in different typefaces.
The actual command and its mandatory options are always printed as command option . Spec-
ifications or parameters that are not required are placed in [square brackets] .
Adjust the settings to your needs. It makes no sense to write ls file if no le named file
actually exists. You can usually combine several parameters, for example, by writing ls -la
instead of ls -l -a .
ls [options] [files]
If you run ls without any additional parameters, the program lists the contents of the
current directory in short form.
-l
Detailed list
-a
Displays hidden les
-i
Waits for confirmation, if necessary, before an existing target is overwritten
-r
Copies recursively (includes subdirectories)
-b
Creates a backup copy of the source before moving
-i
Waits for confirmation, if necessary, before an existing targetfile is overwritten
rm [options] files
Removes the specified les from the le system. Directories are not removed by rm unless
the option -r is used.
-r
Deletes any existing subdirectories
-i
-s
Creates a symbolic link
cd [options] [directory]
Changes the current directory. cd without any parameters changes to the user's home
directory.
-R
Changes les and directories in all subdirectories
u
User
g
Group
r
Read
w
Write
x
Execute—executing les or changing to the directory
s
Setuid bit—the application or program is started as if it were started by the owner
of the le
As an alternative, a numeric code can be used. The four digits of this code are composed of
the sum of the values 4, 2, and 1—the decimal result of a binary mask. The rst digit sets
the set user ID (SUID) (4), the set group ID (2), and the sticky (1) bits. The second digit
defines the permissions of the owner of the le. The third digit defines the permissions
of the group members and the last digit sets the permissions for all other users. The read
permission is set with 4, the write permission with 2, and the permission for executing a
le is set with 1. The owner of a le would usually receive a 6 or a 7 for executable les.
-d
Decompresses the packed gzip les so they return to their original size and can be
processed normally (like the command gunzip )
-f
-c
Creates a new tar archive
-r
Adds les to an existing archive
-t
Outputs the contents of an archive
-u
Adds les, but only if they are newer than the les already contained in the archive
-x
Unpacks les from an archive (extraction)
-z
Packs the resulting archive with gzip
-j
Compresses the resulting archive with bzip2
-v
Lists les processed
The archive les created by tar end with .tar . If the tar archive was also compressed
using gzip , the ending is .tgz or .tar.gz . If it was compressed using bzip2 , the ending
is .tar.bz2 .
locate patterns
This command is only available if you have installed the findutils-locate package.
The locate command can nd in which directory a specified le is located. If desired,
use wild cards
to specify filenames. The program is very fast, because it uses a database specifically cre-
ated for the purpose (rather than searching through the entire le system). This very fact,
however, also results in a major drawback: locate is unable to nd any les created after
the latest update of its database. The database can be generated by root with updatedb .
find [options]
With find , search for a le in a given directory. The rst argument specifies the directory
in which to start the search. The option -name must be followed by a search string, which
may also include wild cards. Unlike locate , which uses a database, find scans the actual
directory.
-z
Tries to look inside compressed les
-n
Numbers the output on the left margin
-i
-H
Only displays the names of the relevant les, but not the text lines
-n
Additionally displays the numbers of the lines in which it found a hit
-l
Only lists the les in which searchstring does not occur
-q
Only reports whether the two les differ
-u
Produces a “unified” di, which makes the output more readable
-r
Mount read-only
-t filesystem
Specify the le system, commonly ext2 for Linux hard disks, msdos for MS-DOS
media, vfat for the Windows le system, and iso9660 for CDs
For hard disks not defined in the le /etc/fstab , the device type must also be specified.
In this case, only root can mount it. If the le system needs to also be mounted by other
users, enter the option user in the appropriate line in the /etc/fstab le (separated
by commas) and save this change. Further information is available in the mount(1) man
page.
df [options] [directory]
The df (disk free) command, when used without any options, displays information about
the total disk space, the disk space currently in use, and the free space on all the mounted
drives. If a directory is specified, the information is limited to the drive on which that
directory is located.
-h
Shows the number of occupied blocks in gigabytes, megabytes, or kilobytes—in hu-
man-readable format
-T
Type of le system (ext2, nfs, etc.)
du [options] [path]
This command, when executed without any parameters, shows the total disk space occu-
pied by les and subdirectories in the current directory.
-a
Displays the size of each individual le
-h
Output in human-readable form
-s
Displays only the calculated total size
-b
Output in bytes
-k
Output in kilobytes
-m
Output in megabytes
date [options]
This simple program displays the current system time. If run as root , it can also be used to
change the system time. Details about the program are available in the date(1) man page.
13.12.2.2 Processes
top [options]
top provides a quick overview of the currently running processes. Press H to access a
page that briey explains the main options for customizing the program.
ps [options] [process_ID]
If run without any options, this command displays a table of all your own programs or
processes—those you started. The options for this command are not preceded by hyphen.
aux
Displays a detailed list of all processes, independent of the owner
-9
13.12.2.3 Network
-c NUMBER
Determines the total number of packages to send and ends after they have been
dispatched (by default, there is no limitation set)
-f
ood ping: sends as many data packages as possible; a popular means, reserved for
root , to test networks
-i VALUE
Specifies the interval between two data packages in seconds (default: one second)
13.12.2.4 Miscellaneous
su [options] [username]
The su command makes it possible to log in under a different username from a running
session. Specify a username and the corresponding password. The password is not required
from root , because root is authorized to assume the identity of any user. When using
the command without specifying a username, you are prompted for the root password
and change to the superuser ( root ). Use su - to start a login shell for a different user.
halt [options]
To avoid loss of data, you should always use this program to shut down your system.
reboot [options]
Does the same as halt except the system performs an immediate reboot.
clear
This command cleans up the visible area of the console. It has no options.
These days many people use computers with a graphical user interface (GUI) like
GNOME. Although they offer lots of features, their use is limited when it comes to
the execution of automated tasks. Shells are a good addition to GUIs and this chap-
ter gives you an overview of some aspects of shells, in this case Bash.
1. Interactive login shell. This is used when logging in to a machine, invoking Bash with the
--login option or when logging in to a remote machine with SSH.
2. “Ordinary” interactive shell. This is normally the case when starting xterm, konsole,
gnome-terminal or similar tools.
3. Non-interactive shell. This is used when invoking a shell script at the command line.
Depending on which type of shell you use, different configuration les are being read. The
following tables show the login and non-login shell configuration les.
File Description
Note that the login shell also sources the configuration les listed under Table 14.2, “Bash Config-
uration Files for Non-Login Shells”.
File Description
The following table provides a short overview of the most important higher-level directories that
you nd on a Linux system. Find more detailed information about the directories and important
subdirectories in the following list.
Directory Contents
/bin Essential binary les, such as commands that are needed by both
the system administrator and normal users. Usually also contains the
shells, such as Bash.
/home Holds the home directories of all users who have accounts on the
system. However, root 's home directory is not located in /home
but in /root .
/windows Only available if you have both Microsoft Windows* and Linux in-
stalled on your system. Contains the Windows data.
The following list provides more detailed information and gives some examples of which les
and subdirectories can be found in the directories:
/bin
Contains the basic shell commands that may be used both by root and by other users.
These commands include ls , mkdir , cp , mv , rm and rmdir . /bin also contains Bash,
the default shell in openSUSE Leap.
/boot
Contains data required for booting, such as the boot loader, the kernel, and other data that
is used before the kernel begins executing user-mode programs.
/dev
Holds device les that represent hardware components.
/etc
Contains local configuration les that control the operation of programs like the X Window
System. The /etc/init.d subdirectory contains LSB init scripts that can be executed
during the boot process.
/home/USERNAME
Holds the private data of every user who has an account on the system. The les located
here can only be modified by their owner or by the system administrator. By default, your
e-mail directory and personal desktop configuration are located here in the form of hidden
les and directories, such as .gconf/ and .config .
/media
Contains mount points for removable media, such as CD-ROMs, ash disks, and digital
cameras (if they use USB). /media generally holds any type of drive except the hard disk of
your system. When your removable medium has been inserted or connected to the system
and has been mounted, you can access it from here.
/mnt
This directory provides a mount point for a temporarily mounted le system. root may
mount le systems here.
/opt
Reserved for the installation of third-party software. Optional software and larger add-on
program packages can be found here.
/root
Home directory for the root user. The personal data of root is located here.
/run
A tmpfs directory used by systemd and various components. /var/run is a symbolic link
to /run .
/sbin
As the s indicates, this directory holds utilities for the superuser. /sbin contains the bi-
naries essential for booting, restoring and recovering the system in addition to the binaries
in /bin .
/srv
Holds data for services provided by the system, such as FTP and HTTP.
/tmp
This directory is used by programs that require temporary storage of les.
/usr/bin
Contains generally accessible programs.
/usr/sbin
Contains programs reserved for the system administrator, such as repair functions.
/usr/local
In this directory the system administrator can install local, distribution-independent ex-
tensions.
/usr/share/doc
Holds various documentation les and the release notes for your system. In the manual
subdirectory nd an online version of this manual. If more than one language is installed,
this directory may contain versions of the manuals for different languages.
Under packages nd the documentation included in the software packages installed on
your system. For every package, a subdirectory /usr/share/doc/packages/PACKAGE-
NAME is created that often holds README les for the package and sometimes examples,
configuration les or additional scripts.
If HOWTOs are installed on your system /usr/share/doc also holds the howto subdi-
rectory in which to nd additional documentation on many tasks related to the setup and
operation of Linux software.
/var
Whereas /usr holds static, read-only data, /var is for data which is written during system
operation and thus is variable data, such as log les or spooling data. For an overview of
the most important log les you can nd under /var/log/ , refer to Table 16.1, “Log Files”.
/windows
Only available if you have both Microsoft Windows and Linux installed on your system.
Contains the Windows data available on the Windows partition of your system. Whether
you can edit the data in this directory depends on the le system your Windows partition
#!/bin/sh 1
Before you can run this script you need some prerequisites:
1. Every script should contain a Shebang line (this is already the case with our example
above.) If a script does not have this line, you need to call the interpreter manually.
2. You can save the script wherever you want. However, it is a good idea to save it in a
directory where the shell can nd it. The search path in a shell is determined by the
environment variable PATH . Usually a normal user does not have write access to /usr/
bin . Therefore it is recommended to save your scripts in the users' directory ~/bin/ . The
above example gets the name hello.sh .
3. The script needs executable permissions. Set the permissions with the following command:
chmod +x ~/bin/hello.sh
1. As Absolute Path. The script can be executed with an absolute path. In our case, it is ~/
bin/hello.sh .
2. Everywhere. If the PATH environment variable contains the directory where the script is
located, you can execute the script with hello.sh .
Standard Output. This is the default output channel. Whenever a command prints some-
thing, it uses the standard output channel.
Standard Input. If a command needs input from users or other commands, it uses this
channel.
ls > listing.txt
ls >> listing.txt
Every channel has a le descriptor: 0 (zero) for standard input, 1 for standard output and 2 for
standard error. It is allowed to insert this le descriptor before a < or > character. For example,
the following line searches for a le starting with foo , but suppresses its errors by redirecting
it to /dev/null :
alias NAME=DEFINITION
For example, the following line defines an alias lt which outputs a long listing (option -l ),
sorts it by modification time ( -t ) and prints it in reverse order while sorting ( -r ):
To view all alias definitions, use alias . Remove your alias with unalias and the corresponding
alias name.
printenv PATH
echo $PATH
To set a local variable, use a variable name followed by the equal sign, followed by the value:
PROJECT="SLED"
Do not insert spaces around the equal sign, otherwise you get an error. To set an environment
variable, use export :
export NAME="tux"
unset NAME
The following table contains some common environment variables which can be used in you
shell scripts:
To access all the arguments which are passed to your script, you need positional parameters.
These are $1 for the rst argument, $2 for the second, and so on. You can have up to nine
parameters. To get the script name, use $0 .
The following script foo.sh prints all arguments from 1 to 4:
#!/bin/sh
echo \"$1\" \"$2\" \"$3\" \"$4\"
If you execute this script with the above arguments, you get:
${VAR#pattern}
removes the shortest possible match from the left:
file=/home/tux/book/book.tar.bz2
echo ${file#*/}
home/tux/book/book.tar.bz2
${VAR##pattern}
removes the longest possible match from the left:
file=/home/tux/book/book.tar.bz2
echo ${file##*/}
book.tar.bz2
${VAR%pattern}
removes the shortest possible match from the right:
file=/home/tux/book/book.tar.bz2
${VAR%%pattern}
removes the longest possible match from the right:
file=/home/tux/book/book.tar.bz2
echo ${file%%.*}
/home/tux/book/book
${VAR/pattern_1/pattern_2}
substitutes the content of VAR from the PATTERN_1 with PATTERN_2 :
file=/home/tux/book/book.tar.bz2
echo ${file/tux/wilber}
/home/wilber/book/book.tar.bz2
Command1 ; Command2
executes the commands in sequential order. The exit code is not checked. The following
line displays the content of the le with cat and then prints its le properties with ls
regardless of their exit codes:
Command1 || Command2
funcname(){ ... }
creates a shell function. You can use the positional parameters to access its arguments. The
following line defines the function hello to print a short message:
hello Tux
which prints:
Hello Tux
The test expression can be as complex or simple as possible. The following expression checks
if the le foo.txt exists:
if [ -e /tmp/foo.txt ] ; then
echo "Found foo.txt"
fi
for i in *.png; do
ls -l $i
done
202 Creating Loops with the for Command openSUSE Leap 42.3
V Help and Troubleshooting
openSUSE® Leap comes with various sources of information and documentation, many of which
are already integrated into your installed system.
Documentation in /usr/share/doc
This traditional help directory holds various documentation les and release notes for your
system. It contains also information of installed packages in the subdirectory packages .
Find more detailed information in Section 15.1, “Documentation Directory”.
AUTHORS
List of the main developers.
BUGS
Known bugs or malfunctions. Might also contain a link to a Bugzilla Web page where you
can search all bugs.
COPYING ,
LICENSE
Licensing information.
FAQ
Question and answers collected from mailing lists or newsgroups.
INSTALL
How to install this package on your system. As the package is already installed by the time
you get to read this le, you can safely ignore the contents of this le.
README , README.*
General information on the software. For example, for what purpose and how to use it.
TODO
Things that are not implemented yet, but probably will be in the future.
MANIFEST
List of les with a brief summary.
NEWS
Description of what is new in this version.
and Page ↓ . Move between the beginning and the end of a document with Home and End . End
this viewing mode by pressing Q . Learn more about the man command itself with man man .
Man pages are sorted in categories as shown in Table 15.1, “Man Pages—Categories and Descriptions”
(taken from the man page for man itself).
Number Description
6 Games
Each man page consists of several parts labeled NAME , SYNOPSIS , DESCRIPTION , SEE ALSO ,
LICENSING , and AUTHOR . There may be additional sections available depending on the type
of command.
SUSE Forums
There are several forums where you can dive in on discussions about SUSE products. See
http://forums.opensuse.org/ for a list.
GNOME Documentation
Documentation for GNOME users, administrators and developers is available at http://
library.gnome.org/ .
You can also try general-purpose search engines. For example, use the search terms Linux CD-
RW help or OpenOffice file conversion problem if you have trouble with burning CDs
or LibreOffice le conversion.
Apart from log les, your machine also supplies you with information about the running system.
See Table 16.2: System Information With the /proc File System
File Description
Apart from the /proc le system, the Linux kernel exports information with the sysfs mod-
ule, an in-memory le system. This module represents kernel objects, their attributes and re-
lationships. For more information about sysfs , see the context of udev in Book “Reference”,
Chapter 16 “Dynamic Kernel Device Management with udev”. Table 16.3 contains an overview of the
most common directories under /sys .
File Description
Linux comes with several tools for system analysis and monitoring. See Book “System Analysis
and Tuning Guide”, Chapter 2 “System Monitoring Utilities” for a selection of the most important ones
used in system diagnostics.
If you encounter any problems using the openSUSE Leap installation media, check the integrity
of your installation media. Boot from the media and choose Check Installation Media from the
boot menu. In a running system, start YaST and choose Software Media Check. To check the
openSUSE Leap medium, insert it into the drive and click Start Check in the Media Check screen
of YaST. This may take several minutes. If errors are detected, do not use this medium for
installation. Media problems may occur when having burned the medium yourself. Burning the
media at a low speed (4x) helps to avoid problems.
Linux supports most existing DVD drives. If the system has no DVD drive, it is still possible
that an external DVD drive, connected through USB, FireWire, or SCSI, can be used to boot the
system. This depends mainly on the interaction of the BIOS and the hardware used. Sometimes
a BIOS update may help if you encounter problems.
When installing from a Live CD, you can also create a “Live ash disk” to boot from.
One reason a machine does not boot the installation media can be an incorrect boot sequence
setting in BIOS. The BIOS boot sequence must have DVD drive set as the rst entry for booting.
Otherwise the machine would try to boot from another medium, typically the hard disk. Guid-
ance for changing the BIOS boot sequence can be found the documentation provided with your
mainboard, or in the following paragraphs.
The BIOS is the software that enables the very basic functions of a computer. Motherboard
vendors provide a BIOS specifically made for their hardware. Normally, the BIOS setup can only
be accessed at a specific time—when the machine is booting. During this initialization phase, the
machine performs several diagnostic hardware tests. One of them is a memory check, indicated
by a memory counter. When the counter appears, look for a line, usually below the counter or
somewhere at the bottom, mentioning the key to press to access the BIOS setup. Usually the key
to press is one of Del , F1 , or Esc . Press this key until the BIOS setup screen appears.
1. Enter the BIOS using the proper key as announced by the boot routines and wait for the
BIOS screen to appear.
2. To change the boot sequence in an AWARD BIOS, look for the BIOS FEATURES SETUP
entry. Other manufacturers may have a different name for this, such as ADVANCED CMOS
SETUP. When you have found the entry, select it and confirm with Enter .
3. In the screen that opens, look for a subentry called BOOT SEQUENCE or BOOT ORDER.
Change the settings by pressing Page ↑ or Page ↓ until the DVD drive is listed rst.
4. Leave the BIOS setup screen by pressing Esc . To save the changes, select SAVE & EXIT
SETUP, or press F10 . To confirm that your settings should be saved, press Y .
2. Select Disk Utilities. The connected hardware components are now displayed.
Make note of the SCSI ID of your DVD drive.
4. Open Configure Adapter Settings. Under Additional Options, select Boot Device Options and
press Enter .
6. Press Esc twice to return to the start screen of the SCSI BIOS.
7. Exit this screen and confirm with Yes to boot the computer.
Regardless of what language and keyboard layout your final installation will be using, most
BIOS configurations use the US keyboard layout as depicted in the following figure:
1. With the DVD still in the drive, reboot the machine with Ctrl – Alt – Del or using the
hardware reset button.
2. When the boot screen appears, press F5 , use the arrow keys of your keyboard to navigate
to No ACPI and press Enter to launch the boot and installation process. This option
disables the support for ACPI power management techniques.
If this fails, proceed as above, but choose Safe Settings instead. This option disables ACPI and
DMA support. Most hardware will boot with this option.
If both of these options fail, use the boot options prompt to pass any additional parameters
needed to support this type of hardware to the installation kernel. For more information about
the parameters available as boot options, refer to the kernel documentation located in /usr/
src/linux/Documentation/kernel-parameters.txt .
There are various other ACPI-related kernel parameters that can be entered at the boot prompt
prior to booting for installation:
acpi=off
This parameter disables the complete ACPI subsystem on your computer. This may be
useful if your computer cannot handle ACPI or if you think ACPI in your computer causes
trouble.
acpi=force
Always enable ACPI even if your computer has an old BIOS dated before the year 2000.
This parameter also enables ACPI if it is set in addition to acpi=off .
acpi=noirq
Do not use ACPI for IRQ routing.
acpi=ht
Run only enough ACPI to enable hyper-threading.
pci=noacpi
Disable PCI IRQ routing of the new ACPI system.
pnpacpi=off
This option is for serial or parallel problems when your BIOS setup contains wrong inter-
rupts or ports.
notsc
Disable the time stamp counter. This option can be used to work around timing problems
on your systems. It is a recent feature, if you see regressions on your machine, especially
time related or even total hangs, this option is worth a try.
nohz=off
Disable the nohz feature. If your machine hangs, this option may help. Otherwise it is of
no use.
Once you have determined the right parameter combination, YaST automatically writes them
to the boot loader configuration to make sure that the system boots properly next time.
If unexplainable errors occur when the kernel is loaded or during the installation, select Memory
Test in the boot menu to check the memory. If Memory Test returns an error, it is usually a
hardware error.
2. Press F3 to open a menu from which to select a lower resolution for installation purposes.
3. Select Installation and proceed with the installation as described in Chapter 2, Installation
with YaST.
vnc=1 vncpassword=SOME_PASSWORD
4. If using a browser to access the installer, launch the browser and enter the address infor-
mation provided by the installation routines on the future openSUSE Leap machine and
press Enter :
http://IP_ADDRESS_OF_MACHINE:5801
A dialog opens in the browser window prompting you for the VNC password. Enter it and
proceed with the installation as described in Chapter 2, Installation with YaST.
Provide the IP address and password to your VNC viewer when prompted. A window
opens, displaying the installation dialogs. Proceed with the installation as usual.
Boot Options
Unlike the graphical interface, the different boot options cannot be selected using the
cursor keys of your keyboard. The boot menu of the text mode boot screen offers some
keywords to enter at the boot prompt. These keywords map to the options offered in the
graphical version. Enter your choice and press Enter to launch the boot process.
Screen Resolutions
Use the function keys ( F1 ... F12 ) to determine the screen resolution for installation. If
you need to boot in text mode, choose F3 .
When the system is booted, start YaST and switch to System Boot Loader. Make sure that the
Write generic Boot Code to MRB option is enabled, and press OK. This fixes the corrupted boot
loader by overwriting it, or installs the boot loader if it's missing.
Other reasons for the machine not booting may be BIOS-related:
BIOS Settings
Check your BIOS for references to your hard disk. GRUB 2 may simply not be started if
the hard disk itself cannot be found with the current BIOS settings.
220 The GRUB 2 Boot Loader Fails to Load openSUSE Leap 42.3
16.3.2 No Login or Prompt Appears
This behavior typically occurs after a failed kernel upgrade and it is known as a kernel panic
because of the type of error on the system console that sometimes can be seen at the final stage
of the process. If, in fact, the machine has just been rebooted following a software update, the
immediate goal is to reboot it using the old, proven version of the Linux kernel and associated
les. This can be done in the GRUB 2 boot loader screen during the boot process as follows:
1. Reboot the computer using the reset button, or switch it o and on again.
2. When the GRUB 2 boot screen becomes visible, select the Advanced Options entry and
choose the previous kernel from the menu. The machine will boot using the prior version
of the kernel and its associated les.
3. After the boot process has completed, remove the newly installed kernel and, if necessary,
set the default boot entry to the old kernel using the YaST Boot Loader module. For more
information refer to Book “Reference”, Chapter 12 “The Boot Loader GRUB 2”, Section 12.3 “Con-
figuring the Boot Loader with YaST”. However, doing this is probably not necessary because
automated update tools normally modify it for you during the rollback process.
4. Reboot.
If this does not x the problem, boot the computer using the installation media. After the ma-
chine has booted, continue with Step 3.
The network is not working. For further directions on this, turn to Section 16.5, “Network
Problems”.
DNS is not working at the moment (which prevents GNOME from working and the system
from making validated requests to secure servers). One indication that this is the case
is that the machine takes an extremely long time to respond to any action. Find more
information about this topic in Section 16.5, “Network Problems”.
If the system is configured to use Kerberos, the system's local time may have drifted past
the accepted variance with the Kerberos server time (this is typically 300 seconds). If NTP
(network time protocol) is not working properly or local NTP servers are not working,
Kerberos authentication ceases to function because it depends on common clock synchro-
nization across the network.
The home partition is encrypted. Find more information about this topic in Section 16.4.3,
“Login to Encrypted Home Partition Fails”.
In all cases that do not involve external network problems, the solution is to reboot the system
into single-user mode and repair the configuration before booting again into operating mode
and attempting to log in again. To boot into single-user mode:
2. Press Esc to exit the splash screen and get to the GRUB 2 text-based menu.
4. Add the following parameter to the line containing the kernel parameters:
systemd.unit=rescue.target
223 Valid User Name and Password Combinations Fail openSUSE Leap 42.3
5. Press F10 .
8. Boot into the full multiuser and network mode by entering systemctl isolate graph-
ical.target at the command line.
The user's home directory containing the desktop configuration les is corrupted or write
protected.
There may be problems with the X Window System authenticating this particular user,
especially if the user's home directory has been used with another Linux distribution prior
to installing the current one.
1. Check whether the user remembered his password correctly before you start debugging the
whole authentication mechanism. If the user may not remember his password correctly,
use the YaST User Management module to change the user's password. Pay attention to
the Caps Lock key and unlock it, if necessary.
2. Log in as root and check the system journal with journalctl -e for error messages
of the login process and of PAM.
3. Try to log in from a console (using Ctrl – Alt – F1 ). If this is successful, the blame cannot
be put on PAM, because it is possible to authenticate this user on this machine. Try to locate
any problems with the X Window System or the GNOME desktop. For more information,
refer to Section 16.4.4, “Login Successful but GNOME Desktop Fails”.
224 Valid User Name and Password Not Accepted openSUSE Leap 42.3
4. If the user's home directory has been used with another Linux distribution, remove the
Xauthority le in the user's home. Use a console login via Ctrl – Alt – F1 and run
rm .Xauthority as this user. This should eliminate X authentication problems for this
user. Try graphical login again.
5. If the desktop could not start because of corrupt configuration les, proceed with Sec-
tion 16.4.4, “Login Successful but GNOME Desktop Fails”.
In the following, common reasons a network authentication for a particular user may fail on a
specific machine are listed:
The user name exists in the machine's local authentication les and is also provided by a
network authentication system, causing conflicts.
The home directory exists but is corrupt or unavailable. Perhaps it is write protected or is
on a server that is inaccessible at the moment.
The user does not have permission to log in to that particular host in the authentication
system.
The machine has changed host names, for whatever reason, and the user does not have
permission to log in to that host.
The machine cannot reach the authentication server or directory server that contains that
user's information.
There may be problems with the X Window System authenticating this particular user, es-
pecially if the user's home has been used with another Linux distribution prior to installing
the current one.
To locate the cause of the login failures with network authentication, proceed as follows:
1. Check whether the user remembered their password correctly before you start debugging
the whole authentication mechanism.
2. Determine the directory server which the machine relies on for authentication and make
sure that it is up and running and properly communicating with the other machines.
3. Determine that the user's user name and password work on other machines to make sure
that his authentication data exists and is properly distributed.
225 Valid User Name and Password Not Accepted openSUSE Leap 42.3
4. See if another user can log in to the misbehaving machine. If another user can log in with-
out difficulty or if root can log in, log in and examine the system journal with jour-
nalctl -e > le. Locate the time stamps that correspond to the login attempts and de-
termine if PAM has produced any error messages.
5. Try to log in from a console (using Ctrl – Alt – F1 ). If this is successful, the problem is
not with PAM or the directory server on which the user's home is hosted, because it is
possible to authenticate this user on this machine. Try to locate any problems with the
X Window System or the GNOME desktop. For more information, refer to Section 16.4.4,
“Login Successful but GNOME Desktop Fails”.
6. If the user's home directory has been used with another Linux distribution, remove the
Xauthority le in the user's home. Use a console login via Ctrl – Alt – F1 and run
rm .Xauthority as this user. This should eliminate X authentication problems for this
user. Try graphical login again.
7. If the desktop could not start because of corrupt configuration les, proceed with Sec-
tion 16.4.4, “Login Successful but GNOME Desktop Fails”.
It is recommended to use an encrypted home partition for laptops. If you cannot log in to your
laptop, the reason is usually simple: your partition could not be unlocked.
During the boot time, you need to enter the passphrase to unlock your encrypted partition. If
you do not enter it, the boot process continues, leaving the partition locked.
To unlock your encrypted partition, proceed as follows:
2. Become root .
5. Exit the text console and switch back to the login screen with Alt – F7 .
mv .gconf .gconf-ORIG-RECOVER
mv .gnome2 .gnome2-ORIG-RECOVER
4. Log out.
6. Recover your individual application configuration data (including the Evolution e-mail
client data) by copying the ~/.gconf-ORIG-RECOVER/apps/ directory back into the new
~/.gconf directory as follows:
cp -a .gconf-ORIG-RECOVER/apps .gconf/
If this causes the login problems, attempt to recover only the critical application data and
reconfigure the remainder of the applications.
227 Login Successful but GNOME Desktop Fails openSUSE Leap 42.3
PROCEDURE 16.6: HOW TO IDENTIFY NETWORK PROBLEMS
1. If you use an Ethernet connection, check the hardware rst. Make sure that your network
cable is properly plugged into your computer and router (or hub, etc.). The control lights
next to your Ethernet connector are normally both be active.
If the connection fails, check whether your network cable works with another machine.
If it does, your network card causes the failure. If hubs or switches are included in your
network setup, they may be faulty, as well.
2. If using a wireless connection, check whether the wireless link can be established by other
machines. If not, contact the wireless network's administrator.
3. Once you have checked your basic network connectivity, try to nd out which service
is not responding. Gather the address information of all network servers needed in your
setup. Either look them up in the appropriate YaST module or ask your system adminis-
trator. The following list gives some typical network servers involved in a setup together
with the symptoms of an outage.
Kerberos (Authentication)
Authentication will not work and login to any machine fails.
4. Check whether the network servers are running and whether your network setup allows
you to establish a connection:
Important: Limitations
The debugging procedure described below only applies to a simple network serv-
er/client setup that does not involve any internal routing. It assumes both server
and client are members of the same subnet without the need for additional routing.
a. Use ping IP_ADDRESS/HOSTNAME (replace with the host name or IP address of the
server) to check whether each one of them is up and responding to the network. If
this command is successful, it tells you that the host you were looking for is up and
running and that the name service for your network is configured correctly.
If ping fails with destination host unreachable , either your system or the desired
server is not properly configured or down. Check whether your system is reachable
by running ping IP address or YOUR_HOSTNAME from another machine. If you
can reach your machine from another machine, it is the server that is not running
or not configured correctly.
If ping fails with unknown host , the name service is not configured correctly or
the host name used was incorrect. For further checks on this matter, refer to Step
4.b. If ping still fails, either your network card is not configured correctly or your
network hardware is faulty.
/etc/resolv.conf
This le is used to keep track of the name server and domain you are currently
using. It can be modified manually or automatically adjusted by YaST or DHCP.
Automatic adjustment is preferable. However, make sure that this le has the
following structure and all network addresses and domain names are correct:
search FULLY_QUALIFIED_DOMAIN_NAME
nameserver IPADDRESS_OF_NAMESERVER
This le can contain more than one name server address, but at least one of
them must be correct to provide name resolution to your host. If needed, adjust
this le using the YaST Network Settings module (Hostname/DNS tab).
If your network connection is handled via DHCP, enable DHCP to change host
name and name service information by selecting Set Hostname via DHCP (can
be set globally for any interface or per interface) and Update Name Servers and
Search List via DHCP in the YaST Network Settings module (Hostname/DNS
tab).
/etc/nsswitch.conf
This le tells Linux where to look for name service information. It should look
like this:
...
hosts: files dns
networks: files dns
...
The dns entry is vital. It tells Linux to use an external name server. Normally,
these entries are automatically managed by YaST, but it would be prudent to
check.
If all the relevant entries on the host are correct, let your system administrator
check the DNS server configuration for the correct zone information. For de-
tailed information about DNS, refer to Book “Reference”, Chapter 19 “The Domain
c. If your system cannot establish a connection to a network server and you have ex-
cluded name service problems from the list of possible culprits, check the configu-
ration of your network card.
Use the command ip addr show NETWORK_DEVICE to check whether this device was
properly configured. Make sure that the inet address with the netmask ( /MASK )
is configured correctly. An error in the IP address or a missing bit in your network
mask would render your network configuration unusable. If necessary, perform this
check on the server as well.
d. If the name service and network hardware are properly configured and running,
but some external network connections still get long time-outs or fail entirely, use
traceroute FULLY_QUALIFIED_DOMAIN_NAME (executed as root ) to track the net-
work route these requests are taking. This command lists any gateway (hop) that a
request from your machine passes on its way to its destination. It lists the response
time of each hop and whether this hop is reachable. Use a combination of traceroute
and ping to track down the culprit and let the administrators know.
Once you have identified the cause of your network trouble, you can resolve it yourself (if the
problem is located on your machine) or let the system administrators of your network know
about your findings so they can reconfigure the services or repair the necessary systems.
3. Open a Web page, for example, http://www.opensuse.org as normal user to see, if you
can connect.
For more information about NetworkManager, refer to Book “Reference”, Chapter 28 “Using Net-
workManager”.
2. Select your source device. Typically this is something like /dev/sda (labeled as SOURCE ).
3. Decide where you want to store your image (labeled as BACKUP_PATH ). It must be different
from your source device. In other words: if you make a backup from /dev/sda , your
image le must not to be stored under /dev/sda .
If you only need to back up a partition, replace the SOURCE placeholder with your respective
partition. In this case, your image le can lie on the same hard disk, but on a different partition.
There are several reasons a system could fail to come up and run properly. A corrupted le
system following a system crash, corrupted configuration les, or a corrupted boot loader con-
figuration are the most common ones.
To help you to resolve these situations, openSUSE Leap contains a rescue system that you can
boot. The rescue system is a small Linux system that can be loaded into a RAM disk and mounted
as root le system, allowing you to access your Linux partitions from the outside. Using the
rescue system, you can recover or modify any important aspect of your system.
Check the le system for defects and start automatic repair processes.
Resize partitions using the parted command. Find more information about this tool at the
GNU Parted Web site http://www.gnu.org/software/parted/parted.html .
The rescue system can be loaded from various sources and locations. The simplest option is to
boot the rescue system from the original installation medium.
3. At the boot screen, press F4 and choose DVD-ROM. Then choose Rescue System from the
main menu.
If your hardware setup does not include a DVD drive, you can boot the rescue system
from a network source. The following example applies to a remote boot scenario—if using
another boot medium, such as a DVD, modify the info le accordingly and boot as you
would for a normal installation.
Once you have entered the rescue system, you can use the virtual consoles that can be reached
with Alt – F1 to Alt – F6 .
A shell and many other useful utilities, such as the mount program, are available in the /bin
directory. The /sbin directory contains important le and network utilities for reviewing and
repairing the le system. This directory also contains the most important binaries for system
maintenance, such as fdisk , mkfs , mkswap , mount , and shutdown , ip and ss for maintain-
ing the network. The directory /usr/bin contains the vi editor, nd, less, and SSH.
To see the system messages, either use the command dmesg or view the system log with jour-
nalctl .
1. Start the rescue system using one of the methods described above.
2. To mount a root le system located under /dev/sda6 to the rescue system, use the fol-
lowing command:
cd /mnt
umount /mnt
Generally, le systems cannot be repaired on a running system. If you encounter serious prob-
lems, you may not even be able to mount your root le system and the system boot may end
with a “kernel panic”. In this case, the only way is to repair the system from the outside. The
system contains the utilities to check and repair the btrfs , ext2 , ext3 , ext4 , reiserfs ,
xfs , dosfs , and vfat le systems. Look for the command fsck. FILESYSTEM , for example,
if you need a le system check for btrfs , use fsck.btrfs .
If you need to access the installed system from the rescue system, you need to do this in a
change root environment. For example, to modify the boot loader configuration, or to execute
a hardware configuration utility.
To set up a change root environment based on the installed system, proceed as follows:
1.
Tip: Import LVM Volume Groups
If you are using a LVM setup (refer to Book “Reference”, Chapter 5 “Advanced Disk
Setup”, Section 5.2 “LVM Configuration” for more general details), import all existing
volume groups in order to be able to nd and mount the device(s):
rootvgimport -a
Run lsblk to check which node corresponds to the root partition. It is /dev/sda2 in
our example:
lsblk
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
4. Now you can “change root” into the new environment, keeping the bash shell:
mount -a
6. Now you have access to the installed system. Before rebooting the system, unmount the
partitions with umount -a and leave the “change root” environment with exit .
Warning: Limitations
Although you have full access to the les and applications of the installed system, there
are some limitations. The kernel that is running is the one that was booted with the res-
cue system, not with the change root environment. It only supports essential hardware
and it is not possible to add kernel modules from the installed system unless the kernel
versions are identical. Always check the version of the currently running (rescue) kernel
with uname -r and then nd out if a matching subdirectory exists in the /lib/modules
directory in the change root environment. If yes, you can use the installed modules, oth-
erwise you need to supply their correct versions on other media, such as a ash disk. Most
often the rescue kernel version differs from the installed one — then you cannot simply
access a sound card, for example. It is also not possible to start a graphical user interface.
Also note that you leave the “change root” environment when you switch the console
with Alt – F1 to Alt – F6 .
Sometimes a system cannot boot because the boot loader configuration is corrupted. The start-
up routines cannot, for example, translate physical drives to the actual locations in the Linux
le system without a working boot loader.
To check the boot loader configuration and re-install the boot loader, proceed as follows:
1. Perform the necessary steps to access the installed system as described in Section 16.6.2.3,
“Accessing the Installed System”.
2. Check that the GRUB 2 boot loader is installed on the system. If not, install the package
grub2 and run
grub2-install /dev/sda
3. Check whether the following les are correctly configured according to the GRUB 2 con-
figuration principles outlined in Book “Reference”, Chapter 12 “The Boot Loader GRUB 2” and
apply fixes if necessary.
/etc/default/grub
/etc/sysconfig/bootloader
grub2-mkconfig -o /boot/grub2/grub.cfg
5. Unmount the partitions, log out from the “change root” environment, and reboot the sys-
tem:
umount -a
exit
reboot
A kernel update may introduce a new bug which can impact the operation of your system. For
example a driver for a piece of hardware in your system may be faulty, which prevents you from
accessing and using it. In this case, revert to the last working kernel (if available on the system)
or install the original kernel from the installation media.
multiversion.kernels = latest,latest-1,running
to the /etc/zypp/zypp.conf le. See Book “Reference”, Chapter 6 “Installing Multiple Kernel
Versions” for more information.
A similar case is when you need to re-install or update a broken driver for a device not supported
by openSUSE Leap. For example when a hardware vendor uses a specific device, such as a
hardware RAID controller, which needs a binary driver to be recognized by the operating system.
The vendor typically releases a Driver Update Disk (DUD) with the xed or updated version of
the required driver.
In both cases you need to access the installed system in the rescue mode and x the kernel
related problem, otherwise the system may fail to boot correctly:
2. If you are recovering after a faulty kernel update, skip this step. If you need to use a driver
update disk (DUD), press F6 to load the driver update after the boot menu appears, and
choose the path or URL to the driver update and confirm with Yes.
3. Choose Rescue System from the boot menu and press Enter . If you chose to use DUD, you
will be asked to specify where the driver update is stored.
5. Manually mount the target system and “change root” into the new environment. For more
information, see Section 16.6.2.3, “Accessing the Installed System”.
a. Identify your DVD device with hwinfo --cdrom and mount it with mount /dev/
sr0 /mnt .
b. Navigate to the directory where your kernel les are stored on the DVD, for example
cd /mnt/suse/x86_64/ .
7. Update configuration les and reinitialize the boot loader if needed. For more information,
see Section 16.6.2.4, “Modifying and Re-installing the Boot Loader”.
8. Remove any bootable media from the system drive and reboot.
This License applies to any manual or other work, in any medium, that contains a notice placed 3. COPYING IN QUANTITY
by the copyright holder saying it can be distributed under the terms of this License. Such a
notice grants a world-wide, royalty-free license, unlimited in duration, to use that work under If you publish printed copies (or copies in media that commonly have printed covers) of the
the conditions stated herein. The "Document", below, refers to any such manual or work. Any Document, numbering more than 100, and the Document's license notice requires Cover Texts,
member of the public is a licensee, and is addressed as "you". You accept the license if you you must enclose the copies in covers that carry, clearly and legibly, all these Cover Texts:
copy, modify or distribute the work in a way requiring permission under copyright law. Front-Cover Texts on the front cover, and Back-Cover Texts on the back cover. Both covers
A "Modified Version" of the Document means any work containing the Document or a portion must also clearly and legibly identify you as the publisher of these copies. The front cover
of it, either copied verbatim, or with modifications and/or translated into another language. must present the full title with all words of the title equally prominent and visible. You may
add other material on the covers in addition. Copying with changes limited to the covers, as
A "Secondary Section" is a named appendix or a front-matter section of the Document that
long as they preserve the title of the Document and satisfy these conditions, can be treated
deals exclusively with the relationship of the publishers or authors of the Document to the
as verbatim copying in other respects.
Document's overall subject (or to related matters) and contains nothing that could fall directly
within that overall subject. (Thus, if the Document is in part a textbook of mathematics, a If the required texts for either cover are too voluminous to t legibly, you should put the
Secondary Section may not explain any mathematics.) The relationship could be a matter rst ones listed (as many as t reasonably) on the actual cover, and continue the rest onto
of historical connection with the subject or with related matters, or of legal, commercial, adjacent pages.
philosophical, ethical or political position regarding them. If you publish or distribute Opaque copies of the Document numbering more than 100, you
The "Invariant Sections" are certain Secondary Sections whose titles are designated, as being must either include a machine-readable Transparent copy along with each Opaque copy, or
those of Invariant Sections, in the notice that says that the Document is released under this state in or with each Opaque copy a computer-network location from which the general net-
License. If a section does not t the above definition of Secondary then it is not allowed to be work-using public has access to download using public-standard network protocols a complete
designated as Invariant. The Document may contain zero Invariant Sections. If the Document Transparent copy of the Document, free of added material. If you use the latter option, you
does not identify any Invariant Sections then there are none. must take reasonably prudent steps, when you begin distribution of Opaque copies in quanti-
ty, to ensure that this Transparent copy will remain thus accessible at the stated location until
The "Cover Texts" are certain short passages of text that are listed, as Front-Cover Texts or
at least one year after the last time you distribute an Opaque copy (directly or through your
Back-Cover Texts, in the notice that says that the Document is released under this License. A
agents or retailers) of that edition to the public.
Front-Cover Text may be at most 5 words, and a Back-Cover Text may be at most 25 words.
It is requested, but not required, that you contact the authors of the Document well before
A "Transparent" copy of the Document means a machine-readable copy, represented in a for-
redistributing any large number of copies, to give them a chance to provide you with an
mat whose specification is available to the general public, that is suitable for revising the doc-
updated version of the Document.
ument straightforwardly with generic text editors or (for images composed of pixels) generic
paint programs or (for drawings) some widely available drawing editor, and that is suitable
for input to text formatters or for automatic translation to a variety of formats suitable for
input to text formatters. A copy made in an otherwise Transparent le format whose markup,
or absence of markup, has been arranged to thwart or discourage subsequent modification
by readers is not Transparent. An image format is not Transparent if used for any substantial
amount of text. A copy that is not "Transparent" is called "Opaque".
Examples of suitable formats for Transparent copies include plain ASCII without markup, Tex-
info input format, LaTeX input format, SGML or XML using a publicly available DTD, and stan-
dard-conforming simple HTML, PostScript or PDF designed for human modification. Examples
of transparent image formats include PNG, XCF and JPG. Opaque formats include proprietary
You may copy and distribute a Modified Version of the Document under the conditions of
sections 2 and 3 above, provided that you release the Modified Version under precisely this 5. COMBINING DOCUMENTS
License, with the Modified Version filling the role of the Document, thus licensing distribution
and modification of the Modified Version to whoever possesses a copy of it. In addition, you You may combine the Document with other documents released under this License, under
must do these things in the Modified Version: the terms defined in section 4 above for modified versions, provided that you include in the
combination all of the Invariant Sections of all of the original documents, unmodified, and
A. Use in the Title Page (and on the covers, if any) a title distinct from that of the
list them all as Invariant Sections of your combined work in its license notice, and that you
Document, and from those of previous versions (which should, if there were any,
preserve all their Warranty Disclaimers.
be listed in the History section of the Document). You may use the same title as a
previous version if the original publisher of that version gives permission. The combined work need only contain one copy of this License, and multiple identical Invari-
ant Sections may be replaced with a single copy. If there are multiple Invariant Sections with
B. List on the Title Page, as authors, one or more persons or entities responsible for the same name but different contents, make the title of each such section unique by adding
authorship of the modifications in the Modified Version, together with at least ve at the end of it, in parentheses, the name of the original author or publisher of that section if
of the principal authors of the Document (all of its principal authors, if it has fewer known, or else a unique number. Make the same adjustment to the section titles in the list of
than ve), unless they release you from this requirement. Invariant Sections in the license notice of the combined work.
C. State on the Title page the name of the publisher of the Modified Version, as the In the combination, you must combine any sections Entitled "History" in the various original
publisher. documents, forming one section Entitled "History"; likewise combine any sections Entitled
"Acknowledgements", and any sections Entitled "Dedications". You must delete all sections
D. Preserve all the copyright notices of the Document.
Entitled "Endorsements".
E. Add an appropriate copyright notice for your modifications adjacent to the other
copyright notices.
6. COLLECTIONS OF DOCUMENTS
F. Include, immediately after the copyright notices, a license notice giving the public
permission to use the Modified Version under the terms of this License, in the form You may make a collection consisting of the Document and other documents released under
shown in the Addendum below. this License, and replace the individual copies of this License in the various documents with a
single copy that is included in the collection, provided that you follow the rules of this License
G. Preserve in that license notice the full lists of Invariant Sections and required Cover
for verbatim copying of each of the documents in all other respects.
Texts given in the Document's license notice.
You may extract a single document from such a collection, and distribute it individually under
H. Include an unaltered copy of this License. this License, provided you insert a copy of this License into the extracted document, and follow
this License in all other respects regarding verbatim copying of that document.
I. Preserve the section Entitled "History", Preserve its Title, and add to it an item
stating at least the title, year, new authors, and publisher of the Modified Version
as given on the Title Page. If there is no section Entitled "History" in the Document, 7. AGGREGATION WITH INDEPENDENT WORKS
create one stating the title, year, authors, and publisher of the Document as given
on its Title Page, then add an item describing the Modified Version as stated in A compilation of the Document or its derivatives with other separate and independent docu-
the previous sentence. ments or works, in or on a volume of a storage or distribution medium, is called an "aggregate"
if the copyright resulting from the compilation is not used to limit the legal rights of the com-
J. Preserve the network location, if any, given in the Document for public access to
pilation's users beyond what the individual works permit. When the Document is included in
a Transparent copy of the Document, and likewise the network locations given in
an aggregate, this License does not apply to the other works in the aggregate which are not
the Document for previous versions it was based on. These may be placed in the
themselves derivative works of the Document.
"History" section. You may omit a network location for a work that was published
at least four years before the Document itself, or if the original publisher of the If the Cover Text requirement of section 3 is applicable to these copies of the Document, then
version it refers to gives permission. if the Document is less than one half of the entire aggregate, the Document's Cover Texts
may be placed on covers that bracket the Document within the aggregate, or the electronic
K. For any section Entitled "Acknowledgements" or "Dedications", Preserve the Title equivalent of covers if the Document is in electronic form. Otherwise they must appear on
of the section, and preserve in the section all the substance and tone of each of the printed covers that bracket the whole aggregate.
contributor acknowledgements and/or dedications given therein.
L. Preserve all the Invariant Sections of the Document, unaltered in their text and 8. TRANSLATION
in their titles. Section numbers or the equivalent are not considered part of the
section titles. Translation is considered a kind of modification, so you may distribute translations of the
M. Delete any section Entitled "Endorsements". Such a section may not be included Document under the terms of section 4. Replacing Invariant Sections with translations requires
in the Modified Version. special permission from their copyright holders, but you may include translations of some
or all Invariant Sections in addition to the original versions of these Invariant Sections. You
N. Do not retitle any existing section to be Entitled "Endorsements" or to conflict in may include a translation of this License, and all the license notices in the Document, and
title with any Invariant Section. any Warranty Disclaimers, provided that you also include the original English version of this
O. Preserve any Warranty Disclaimers. License and the original versions of those notices and disclaimers. In case of a disagreement
between the translation and the original version of this License or a notice or disclaimer, the
If the Modified Version includes new front-matter sections or appendices that qualify as Se- original version will prevail.
condary Sections and contain no material copied from the Document, you may at your option
If a section in the Document is Entitled "Acknowledgements", "Dedications", or "History", the
designate some or all of these sections as invariant. To do this, add their titles to the list of
requirement (section 4) to Preserve its Title (section 1) will typically require changing the
Invariant Sections in the Modified Version's license notice. These titles must be distinct from
actual title.
any other section titles.
You may add a section Entitled "Endorsements", provided it contains nothing but endorse-
ments of your Modified Version by various parties--for example, statements of peer review
9. TERMINATION
or that the text has been approved by an organization as the authoritative definition of a
You may not copy, modify, sublicense, or distribute the Document except as expressly pro-
standard.
vided for under this License. Any other attempt to copy, modify, sublicense or distribute the
You may add a passage of up to ve words as a Front-Cover Text, and a passage of up to 25
Document is void, and will automatically terminate your rights under this License. However,
words as a Back-Cover Text, to the end of the list of Cover Texts in the Modified Version. Only
parties who have received copies, or rights, from you under this License will not have their
one passage of Front-Cover Text and one of Back-Cover Text may be added by (or through
licenses terminated so long as such parties remain in full compliance.
arrangements made by) any one entity. If the Document already includes a cover text for the
same cover, previously added by you or by arrangement made by the same entity you are
acting on behalf of, you may not add another; but you may replace the old one, on explicit
permission from the previous publisher that added the old one.
The Free Software Foundation may publish new, revised versions of the GNU Free Documen-
tation License from time to time. Such new versions will be similar in spirit to the present
version, but may differ in detail to address new problems or concerns. See http://www.gnu.org/
copyleft/ .
Each version of the License is given a distinguishing version number. If the Document specifies
that a particular numbered version of this License "or any later version" applies to it, you have
the option of following the terms and conditions either of that specified version or of any
later version that has been published (not as a draft) by the Free Software Foundation. If the
Document does not specify a version number of this License, you may choose any version ever
published (not as a draft) by the Free Software Foundation.
If you have Invariant Sections, Front-Cover Texts and Back-Cover Texts, replace the
“with...Texts.” line with this:
If you have Invariant Sections without Cover Texts, or some other combination of the three,
merge those two alternatives to suit the situation.
If your document contains nontrivial examples of program code, we recommend releasing
these examples in parallel under your choice of free software license, such as the GNU General
Public License, to permit their use in free software.