ConTeXt Live not working
Trying to typeset the default ConTeXt Live \starttext Hello world! \stoptext I get the following message: TeXExec | processing document 'texweb.tex' TeXExec | no ctx file found TeXExec | tex processing method: context TeXExec | TeX run 1 TeXExec | writing option file texweb.top TeXExec | using randomseed 884 TeXExec | tex engine: pdftex TeXExec | tex format: cont-en This is pdfTeXk, Version 3.141592-1.40.3 (Web2C 7.5.6) %&-line parsing enabled. (/opt/context/current/texmf/web2c/natural.tcx) I can't find the format file `cont-en.fmt'! TeXExec | runtime: 0.776454 It seems that it doesn't work. It happens also with XeTeX and LuaTeX. Pablo
Hi:
pls try
texexec --make --all
luatools --generate
context --make
Yue Wang
On Sun, Nov 9, 2008 at 7:35 PM, Pablo Rodríguez
Trying to typeset the default ConTeXt Live
\starttext Hello world! \stoptext
I get the following message:
TeXExec | processing document 'texweb.tex' TeXExec | no ctx file found TeXExec | tex processing method: context TeXExec | TeX run 1 TeXExec | writing option file texweb.top TeXExec | using randomseed 884 TeXExec | tex engine: pdftex TeXExec | tex format: cont-en This is pdfTeXk, Version 3.141592-1.40.3 (Web2C 7.5.6) %&-line parsing enabled. (/opt/context/current/texmf/web2c/natural.tcx) I can't find the format file `cont-en.fmt'! TeXExec | runtime: 0.776454
It seems that it doesn't work. It happens also with XeTeX and LuaTeX.
Pablo ___________________________________________________________________________________ If your question is of interest to others as well, please add an entry to the Wiki!
maillist : ntg-context@ntg.nl / http://www.ntg.nl/mailman/listinfo/ntg-context webpage : http://www.pragma-ade.nl / http://tex.aanhet.net archive : https://foundry.supelec.fr/projects/contextrev/ wiki : http://contextgarden.net ___________________________________________________________________________________
Thanks, Yue, for your reply. Yue Wang wrote:
Hi:
pls try texexec --make --all luatools --generate context --make
Are you sure that users can access to http://live.contextgarden.net/? I think this would be a big security hole. Pablo
Yue Wang On Sun, Nov 9, 2008 at 7:35 PM, Pablo Rodríguez
wrote: Trying to typeset the default ConTeXt Live
\starttext Hello world! \stoptext
I get the following message:
TeXExec | processing document 'texweb.tex' TeXExec | no ctx file found TeXExec | tex processing method: context TeXExec | TeX run 1 TeXExec | writing option file texweb.top TeXExec | using randomseed 884 TeXExec | tex engine: pdftex TeXExec | tex format: cont-en This is pdfTeXk, Version 3.141592-1.40.3 (Web2C 7.5.6) %&-line parsing enabled. (/opt/context/current/texmf/web2c/natural.tcx) I can't find the format file `cont-en.fmt'! TeXExec | runtime: 0.776454
It seems that it doesn't work. It happens also with XeTeX and LuaTeX.
Pablo
Hi:
On Mon, Nov 10, 2008 at 1:15 AM, Pablo Rodríguez
Thanks, Yue, for your reply.
Yue Wang wrote:
Hi:
pls try texexec --make --all luatools --generate context --make
Are you sure that users can access to http://live.contextgarden.net/? I think this would be a big security hole.
sorry, I misunderstand:( (I thought Live==TeXLive) However, such hole could exsist: \starttext \directlua0{os.exec("uname -a")} Hello world! \stoptext part of the log: specials : pdftex loaded language : language en is active system : texweb.top loaded (texweb.topLinux paris 2.6.18 #1 SMP Sun Feb 10 17:55:04 UTC 2008 x86_64 GNU/Linux LuaTools | running command: luatex --fmt="/var/tmp/tex/luatex-cache/context/aa64c2bfae05c5f9adeafd9a312c87be/formats/cont-en" --lua="/var/tmp/tex/luatex-cache/context/aa64c2bfae05c5f9adeafd9a312c87be/formats/cont-en.luc" "texweb.tex" "" LuaTools | LuaTools | runtime: 5.192 seconds
Pablo
Yue Wang On Sun, Nov 9, 2008 at 7:35 PM, Pablo Rodríguez
wrote: Trying to typeset the default ConTeXt Live
\starttext Hello world! \stoptext
I get the following message:
TeXExec | processing document 'texweb.tex' TeXExec | no ctx file found TeXExec | tex processing method: context TeXExec | TeX run 1 TeXExec | writing option file texweb.top TeXExec | using randomseed 884 TeXExec | tex engine: pdftex TeXExec | tex format: cont-en This is pdfTeXk, Version 3.141592-1.40.3 (Web2C 7.5.6) %&-line parsing enabled. (/opt/context/current/texmf/web2c/natural.tcx) I can't find the format file `cont-en.fmt'! TeXExec | runtime: 0.776454
It seems that it doesn't work. It happens also with XeTeX and LuaTeX.
Pablo
If your question is of interest to others as well, please add an entry to the Wiki!
maillist : ntg-context@ntg.nl / http://www.ntg.nl/mailman/listinfo/ntg-context webpage : http://www.pragma-ade.nl / http://tex.aanhet.net archive : https://foundry.supelec.fr/projects/contextrev/ wiki : http://contextgarden.net ___________________________________________________________________________________
Yue Wang
Hi:
Let me try another trick:
\starttext
\directlua0{os.exec("luatools --generate")}
Hello world!
\stoptext
Here is the log, please pay attention to the Luatools scanning path lines:
LuaTools | running command: luatex
--fmt="/var/tmp/tex/luatex-cache/context/aa64c2bfae05c5f9adeafd9a312c87be/formats/cont-en"
--lua="/var/tmp/tex/luatex-cache/context/aa64c2bfae05c5f9adeafd9a312c87be/formats/cont-en.luc"
"texweb.tex" ""
LuaTools |
LuaTools | runtime: 8.910 seconds
TeXUtil | parsing file texweb.tui
TeXUtil | shortcuts : 0
TeXUtil | expansions: 0
TeXUtil | reductions: 0
TeXUtil | divisions : 0
TeXUtil | loaded files: 0
TeXUtil | temporary files: 0
TeXUtil | commands: 0
TeXUtil | programs: 0
TeXUtil | tuo file saved
TeXExec | TeX run 2
TeXExec | writing option file texweb.top
TeXExec | using randomseed 322
TeXExec | tex engine: luatex
TeXExec | tex format: cont-en
(texweb.tex
ConTeXt ver: 2008.56.06 19:11 MKIV fmt: 2008.11.7 int: english/english
system : cont-new loaded
(/opt/context/current/texmf/tex/context/base/cont-new.tex
systems : beware: some patches loaded from cont-new.tex
(/opt/context/current/texmf/tex/context/base/cont-new.mkiv)
(/opt/context/current/texmf/tex/context/base/cont-mtx.tex))
system : cont-fil loaded
(/opt/context/current/texmf/tex/context/base/cont-fil.tex
loading : Context File Synonyms
)
system : cont-sys.rme loaded
(/opt/context/current/texmf/tex/context/user/cont-sys.rme
(/opt/context/current/texmf/tex/context/base/type-tmf.tex)
(/opt/context/current/texmf/tex/context/base/type-siz.tex)
(/opt/context/current/texmf/tex/context/base/type-otf.tex))
bodyfont : 12pt rm is loaded
load otf | loading:
/opt/texlive2007/texmf-dist/fonts/opentype/public/lm/lmroman12-regular.otf
load otf | warning: In LMRoman12-Regular, in glyph acute.dup, 'CFF '
advance width (489) and
'hmtx' width (490) do not match. (Subsequent mismatches will not be reported)
load otf | enhance: patch
load otf | patching design size (12)
load otf | enhance: before
load otf | enhance: enrich
load otf | enhance: registering tlig feature
load otf | enhance: registering trep feature
load otf | enhance: flatten
load otf | flattening 'specifications' tables
load otf | flattening 'anchor' tables
load otf | flattening 'gpos' tables
load otf | flattening 'gsub' tables
load otf | enhance: analyze
load otf | enhance: after
load otf | replacing 'kerns' tables by 'mykerns' tables
load otf | enhance: strip
load otf | enhance: pack
load otf | pack quality: pass 1, 715 packed, 1-10:558, 11-20:128,
rest:29 (criterium: 1)
load otf | pack quality: pass 2, 157 packed, 1-10:155, 11-20:1, rest:1
(criterium: 1)
load otf | file size: 106284
load otf | saving: in cache
load otf | loading:
/opt/texlive2007/texmf-dist/fonts/opentype/public/lm/lm/lmroman7-regular.otf
load otf | enhance: patch
load otf | enhance: before
load otf | enhance: enrich
load otf | enhance: registering tlig feature
load otf | enhance: registering trep feature
load otf | enhance: flatten
load otf | flattening 'specifications' tables
load otf | flattening 'anchor' tables
load otf | flattening 'gpos' tables
load otf | flattening 'gsub' tables
load otf | enhance: analyze
load otf | enhance: after
load otf | replacing 'kerns' tables by 'mykerns' tables
load otf | enhance: strip
load otf | enhance: pack
load otf | pack quality: pass 1, 743 packed, 1-10:573, 11-20:142,
rest:28 (criterium: 1)
load otf | pack quality: pass 2, 170 packed, 1-10:168, 11-20:1, rest:1
(criterium: 1)
load otf | file size: 106568
load otf | saving: in cache
load otf | loading:
/opt/texlive2007/texmf-dist/fonts/opentype/public/lm/lmroman9-regular.otf
load otf | warning: In LMRoman9-Regular, in glyph acute.dup, 'CFF '
advance width (513) and
'hmtx' width (514) do not match. (Subsequent mismatches will not be reported)
load otf | enhance: patch
load otf | patching design size (9)
load otf | enhance: before
load otf | enhance: enrich
load otf | enhance: registering tlig feature
load otf | enhance: registering trep feature
load otf | enhance: flatten
load otf | flattening 'specifications' tables
load otf | flattening 'anchor' tables
load otf | flattening 'gpos' tables
load otf | flattening 'gsub' tables
load otf | enhance: analyze
load otf | enhance: after
load otf | replacing 'kerns' tables by 'mykerns' tables
load otf | enhance: strip
load otf | enhance: pack
load otf | pack quality: pass 1, 720 packed, 1-10:559, 11-20:137,
rest:24 (criterium: 1)
load otf | pack quality: pass 2, 161 packed, 1-10:159, 11-20:1, rest:1
(criterium: 1)
load otf | file size: 108044
load otf | saving: in cache
load otf | loading:
/opt/texlive2007/texmf-dist/fonts/opentype/public/lm/lm/lmroman7-bold.otf
load otf | enhance: patch
load otf | enhance: before
load otf | enhance: enrich
load otf | enhance: registering tlig feature
load otf | enhance: registering trep feature
load otf | enhance: flatten
load otf | flattening 'specifications' tables
load otf | flattening 'anchor' tables
load otf | flattening 'gpos' tables
load otf | flattening 'gsub' tables
load otf | enhance: analyze
load otf | enhance: after
load otf | replacing 'kerns' tables by 'mykerns' tables
load otf | enhance: strip
load otf | enhance: pack
load otf | pack quality: pass 1, 746 packed, 1-10:579, 11-20:141,
rest:26 (criterium: 1)
load otf | pack quality: pass 2, 167 packed, 1-10:165, 11-20:1, rest:1
(criterium: 1)
load otf | file size: 107080
load otf | saving: in cache
load otf | loading:
/opt/texlive2007/texmf-dist/fonts/opentype/public/lm/lm/lmroman9-bold.otf
load otf | enhance: patch
load otf | enhance: before
load otf | enhance: enrich
load otf | enhance: registering tlig feature
load otf | enhance: registering trep feature
load otf | enhance: flatten
load otf | flattening 'specifications' tables
load otf | flattening 'anchor' tables
load otf | flattening 'gpos' tables
load otf | flattening 'gsub' tables
load otf | enhance: analyze
load otf | enhance: after
load otf | replacing 'kerns' tables by 'mykerns' tables
load otf | enhance: strip
load otf | enhance: pack
load otf | pack quality: pass 1, 743 packed, 1-10:577, 11-20:135,
rest:31 (criterium: 1)
load otf | pack quality: pass 2, 166 packed, 1-10:164, 11-20:1, rest:1
(criterium: 1)
load otf | file size: 108712
load otf | saving: in cache
load otf | loading:
/opt/texlive2007/texmf-dist/fonts/opentype/public/lm/lm/lmroman12-bold.otf
load otf | enhance: patch
load otf | enhance: before
load otf | enhance: enrich
load otf | enhance: registering tlig feature
load otf | enhance: registering trep feature
load otf | enhance: flatten
load otf | flattening 'specifications' tables
load otf | flattening 'anchor' tables
load otf | flattening 'gpos' tables
load otf | flattening 'gsub' tables
load otf | enhance: analyze
load otf | enhance: after
load otf | replacing 'kerns' tables by 'mykerns' tables
load otf | enhance: strip
load otf | enhance: pack
load otf | pack quality: pass 1, 742 packed, 1-10:575, 11-20:136,
rest:31 (criterium: 1)
load otf | pack quality: pass 2, 167 packed, 1-10:165, 11-20:1, rest:1
(criterium: 1)
load otf | file size: 107020
load otf | saving: in cache
load otf | loading:
/opt/texlive2007/texmf-dist/fonts/opentype/public/lm/lm/lmroman10-italic.otf
load otf | enhance: patch
load otf | enhance: before
load otf | enhance: enrich
load otf | enhance: registering tlig feature
load otf | enhance: registering trep feature
load otf | enhance: flatten
load otf | flattening 'specifications' tables
load otf | flattening 'anchor' tables
load otf | flattening 'gpos' tables
load otf | flattening 'gsub' tables
load otf | enhance: analyze
load otf | enhance: after
load otf | replacing 'kerns' tables by 'mykerns' tables
load otf | enhance: strip
load otf | enhance: pack
load otf | pack quality: pass 1, 802 packed, 1-10:678, 11-20:102,
rest:22 (criterium: 1)
load otf | pack quality: pass 2, 124 packed, 1-10:122, 11-20:1, rest:1
(criterium: 1)
load otf | file size: 115244
load otf | saving: in cache
load otf | loading:
/opt/texlive2007/texmf-dist/fonts/opentype/public/lm/lm/lmroman9-italic.otf
load otf | enhance: patch
load otf | enhance: before
load otf | enhance: enrich
load otf | enhance: registering tlig feature
load otf | enhance: registering trep feature
load otf | enhance: flatten
load otf | flattening 'specifications' tables
load otf | flattening 'anchor' tables
load otf | flattening 'gpos' tables
load otf | flattening 'gsub' tables
load otf | enhance: analyze
load otf | enhance: after
load otf | replacing 'kerns' tables by 'mykerns' tables
load otf | enhance: strip
load otf | enhance: pack
load otf | pack quality: pass 1, 806 packed, 1-10:686, 11-20:97,
rest:23 (criterium: 1)
load otf | pack quality: pass 2, 120 packed, 1-10:118, 11-20:1, rest:1
(criterium: 1)
load otf | file size: 114180
load otf | saving: in cache
load otf | loading:
/opt/texlive2007/texmf-dist/fonts/opentype/public/lm/lm/lmroman12-italic.otf
load otf | enhance: patch
load otf | enhance: before
load otf | enhance: enrich
load otf | enhance: registering tlig feature
load otf | enhance: registering trep feature
load otf | enhance: flatten
load otf | flattening 'specifications' tables
load otf | flattening 'anchor' tables
load otf | flattening 'gpos' tables
load otf | flattening 'gsub' tables
load otf | enhance: analyze
load otf | enhance: after
load otf | replacing 'kerns' tables by 'mykerns' tables
load otf | enhance: strip
load otf | enhance: pack
load otf | pack quality: pass 1, 800 packed, 1-10:678, 11-20:98,
rest:24 (criterium: 1)
load otf | pack quality: pass 2, 122 packed, 1-10:120, 11-20:1, rest:1
(criterium: 1)
load otf | file size: 113640
load otf | saving: in cache
load otf | loading:
/opt/texlive2007/texmf-dist/fonts/opentype/public/lm/lm/lmroman10-bolditalic.otf
load otf | enhance: patch
load otf | enhance: before
load otf | enhance: enrich
load otf | enhance: registering tlig feature
load otf | enhance: registering trep feature
load otf | enhance: flatten
load otf | flattening 'specifications' tables
load otf | flattening 'anchor' tables
load otf | flattening 'gpos' tables
load otf | flattening 'gsub' tables
load otf | enhance: analyze
load otf | enhance: after
load otf | replacing 'kerns' tables by 'mykerns' tables
load otf | enhance: strip
load otf | enhance: pack
load otf | pack quality: pass 1, 793 packed, 1-10:663, 11-20:105,
rest:25 (criterium: 1)
load otf | pack quality: pass 2, 130 packed, 1-10:128, 11-20:1, rest:1
(criterium: 1)
load otf | file size: 114140
load otf | saving: in cache
specials : pdftex loaded
language : language en is active
system : texweb.top loaded
(texweb.top) (texweb.tuo) (texweb.tuoLuaTools | variable SELFAUTOLOC
set to /opt/luatex/inst/beta-0.30.2
LuaTools | variable SELFAUTODIR set to /opt/luatex/inst/beta-0.30.
LuaTools | variable SELFAUTOPARENT set to /opt/context/current/bin/
LuaTools | variable TEXMFCNF set to /opt/texlive2007/texmf/web2c
LuaTools | loading /opt/texlive2007/texmf/web2c/texmf.cnf
LuaTools | preparing configuration for /opt/texlive2007/texmf/web2c
LuaTools | configuration saved in
/var/tmp/tex/luatex-cache/context/aa64c2bfae05c5f9adeafd9a312c87be/trees/5038830aa1d853d04f3470a9349b2a01.lua
LuaTools | configuration compiled to
/var/tmp/tex/luatex-cache/context/aa64c2bfae05c5f9adeafd9a312c87be/trees/5038830aa1d853d04f3470a9349b2a01.luc
LuaTools | locating list of /opt/context/current/texmf
LuaTools | locating list of /opt/local/texmf-fonts
LuaTools | locating list of /opt/texlive2007/texmf-dist
LuaTools | locating list of /opt/texlive2007/texmf
LuaTools | scanning path /opt/context/current/texmf
LuaTools | 1402 files found on 127 directories with 0 uppercase remappings
LuaTools | scanning path /opt/local/texmf-fonts
LuaTools | 889 files found on 25 directories with 13 uppercase remappings
LuaTools | scanning path /opt/texlive2007/texmf-dist
LuaTools | 17328 files found on 1153 directories with 488 uppercase remappings
LuaTools | scanning path /opt/texlive2007/texmf
LuaTools | 731 files found on 72 directories with 15 uppercase remappings
LuaTools | preparing files for /opt/local/texmf-fonts
LuaTools | files saved in
/var/tmp/tex/luatex-cache/context/aa64c2bfae05c5f9adeafd9a312c87be/trees/61bccee47bd91ddcf62249702d909079.lua
LuaTools | files compiled to
/var/tmp/tex/luatex-cache/context/aa64c2bfae05c5f9adeafd9a312c87be/trees/61bccee47bd91ddcf62249702d909079.luc
LuaTools | preparing files for /opt/texlive2007/texmf
LuaTools | files saved in
/var/tmp/tex/luatex-cache/context/aa64c2bfae05c5f9adeafd9a312c87be/trees/10ff4e27727ccf4e2dfe663bebdc78c9.lua
LuaTools | files compiled to
/var/tmp/tex/luatex-cache/context/aa64c2bfae05c5f9adeafd9a312c87be/trees/10ff4e27727ccf4e2dfe663bebdc78c9.luc
LuaTools | preparing files for /opt/texlive2007/texmf-dist
LuaTools | files saved in
/var/tmp/tex/luatex-cache/context/aa64c2bfae05c5f9adeafd9a312c87be/trees/447ae073eca47e738dff4d2725e8417a.lua
LuaTools | files compiled to
/var/tmp/tex/luatex-cache/context/aa64c2bfae05c5f9adeafd9a312c87be/trees/447ae073eca47e738dff4d2725e8417a.luc
LuaTools | preparing files for /opt/context/current/texmf
LuaTools | files saved in
/var/tmp/tex/luatex-cache/context/aa64c2bfae05c5f9adeafd9a312c87be/trees/cbda73d11cfcb4f89701ffa4858d9c73.lua
LuaTools | files compiled to
/var/tmp/tex/luatex-cache/context/aa64c2bfae05c5f9adeafd9a312c87be/trees/cbda73d11cfcb4f89701ffa4858d9c73.luc
LuaTools |
LuaTools | runtime: 1.839 seconds
LuaTools | running command: luatex
--fmt="/var/tmp/tex/luatex-cache/context/aa64c2bfae05c5f9adeafd9a312c87be/formats/cont-en"
--lua="/var/tmp/tex/luatex-cache/context/aa64c2bfae05c5f9adeafd9a312c87be/formats/cont-en.luc"
"texweb.tex" ""
LuaTools |
LuaTools | runtime: 5.720 seconds
TeXUtil | parsing file texweb.tui
TeXUtil | shortcuts : 0
TeXUtil | expansions: 0
TeXUtil | reductions: 0
TeXUtil | divisions : 0
TeXUtil | loaded files: 0
TeXUtil | temporary files: 0
TeXUtil | commands: 0
TeXUtil | programs: 0
TeXUtil | tuo file saved
TeXExec | runtime: 14.780055
So next time the Live is down, I can manually fix that :-)
Yue Wang
On Mon, Nov 10, 2008 at 1:08 PM, Yue Wang
Hi:
On Mon, Nov 10, 2008 at 1:15 AM, Pablo Rodríguez
wrote: Thanks, Yue, for your reply.
Yue Wang wrote:
Hi:
pls try texexec --make --all luatools --generate context --make
Are you sure that users can access to http://live.contextgarden.net/? I think this would be a big security hole.
sorry, I misunderstand:( (I thought Live==TeXLive)
However, such hole could exsist:
\starttext \directlua0{os.exec("uname -a")} Hello world! \stoptext
part of the log:
specials : pdftex loaded language : language en is active system : texweb.top loaded (texweb.topLinux paris 2.6.18 #1 SMP Sun Feb 10 17:55:04 UTC 2008 x86_64 GNU/Linux LuaTools | running command: luatex --fmt="/var/tmp/tex/luatex-cache/context/aa64c2bfae05c5f9adeafd9a312c87be/formats/cont-en" --lua="/var/tmp/tex/luatex-cache/context/aa64c2bfae05c5f9adeafd9a312c87be/formats/cont-en.luc" "texweb.tex" "" LuaTools | LuaTools | runtime: 5.192 seconds
Pablo
Yue Wang On Sun, Nov 9, 2008 at 7:35 PM, Pablo Rodríguez
wrote: Trying to typeset the default ConTeXt Live
\starttext Hello world! \stoptext
I get the following message:
TeXExec | processing document 'texweb.tex' TeXExec | no ctx file found TeXExec | tex processing method: context TeXExec | TeX run 1 TeXExec | writing option file texweb.top TeXExec | using randomseed 884 TeXExec | tex engine: pdftex TeXExec | tex format: cont-en This is pdfTeXk, Version 3.141592-1.40.3 (Web2C 7.5.6) %&-line parsing enabled. (/opt/context/current/texmf/web2c/natural.tcx) I can't find the format file `cont-en.fmt'! TeXExec | runtime: 0.776454
It seems that it doesn't work. It happens also with XeTeX and LuaTeX.
Pablo
If your question is of interest to others as well, please add an entry to the Wiki!
maillist : ntg-context@ntg.nl / http://www.ntg.nl/mailman/listinfo/ntg-context webpage : http://www.pragma-ade.nl / http://tex.aanhet.net archive : https://foundry.supelec.fr/projects/contextrev/ wiki : http://contextgarden.net ___________________________________________________________________________________
Yue Wang
On Mon, 10 Nov 2008, Yue Wang wrote:
Hi:
Let me try another trick: \starttext \directlua0{os.exec("luatools --generate")} Hello world! \stoptext
[snip]
So next time the Live is down, I can manually fix that :-)
I think that this is a serious security risk. Replacing luatools --generate with any unix command works. I can cat files in /etc directory, so os.exec effectively gives me read access to the entire server. Is there a luatex flag which can limit what os.exec can do? Aditya
Hi, Aditya:
So next time the Live is down, I can manually fix that :-)
I think that this is a serious security risk. Replacing luatools --generate with any unix command works. I can cat files in /etc directory, so os.exec effectively gives me read access to the entire server.
Is there a luatex flag which can limit what os.exec can do?
Without os.exec, it is not lua any more --- and moreover, many ConTeXt MKIV functions depend on that. As to the live, I think a patched Lua file (loslib.c) can solve this problem: remove the line {"execute", os_execute}, in the static const luaL_Reg syslib[]. Running a TeX server had been a very dangerous service since long ago (even before the appearance of luatex): You know in pdftex and xetex, there is also a register defined by the WEB2C (\write18) which enables the users to perform the similar tricks. Webadmins should turn off that feature to ensure safety. The libraries like XPDF which tex programs are linked to also have very serious security bugs. So all the binaries send to Live should have all these features turned off. Yue Wang
Hi,
As to the live, I think a patched Lua file (loslib.c) can solve this problem: remove the line {"execute", os_execute}, in the static const luaL_Reg syslib[].
Moreover, if we do that, ConTeXt will not adapt to the "stripped down" LuaTeX. For example, mtxrun.lua contains many functions which depend on os.execute, and it even created some synonames as well: if not os.exec then os.exec = os.execute end if not os.spawn then os.spawn = os.execute end So, a simple line removal is not sufficient. Yue Wang
On Mon, Nov 10 2008, Yue Wang wrote:
As to the live, I think a patched Lua file (loslib.c) can solve this problem: remove the line {"execute", os_execute}, in the static const luaL_Reg syslib[].
Moreover, if we do that, ConTeXt will not adapt to the "stripped down" LuaTeX. For example, mtxrun.lua contains many functions which depend on os.execute, and it even created some synonames as well: if not os.exec then os.exec = os.execute end if not os.spawn then os.spawn = os.execute end So, a simple line removal is not sufficient.
LuaTeX (and TeX/ConTeXt in general) is not compatible with security. The cache for example must be writable for everyone. In my opinion, the only options for live.contextgarden.net are: - just don't care, if there is a problem, restore from backup - chroot jail - virtual machine with virtual disk in non-persistent mode (at boot time the disk is always a fresh installation) - perhaps some other ideas... But adding security to LuaTeX seems to me too much work (a lot of exceptions, heavy security audit, problems with cache, problems with compatibility, and so on...). Cheers, Peter -- http://pmrb.free.fr/contact/
On Mon, Nov 10, 2008 at 4:26 PM, Peter Münster
On Mon, Nov 10 2008, Yue Wang wrote:
As to the live, I think a patched Lua file (loslib.c) can solve this problem: remove the line {"execute", os_execute}, in the static const luaL_Reg syslib[].
Moreover, if we do that, ConTeXt will not adapt to the "stripped down" LuaTeX. For example, mtxrun.lua contains many functions which depend on os.execute, and it even created some synonames as well: if not os.exec then os.exec = os.execute end if not os.spawn then os.spawn = os.execute end So, a simple line removal is not sufficient.
LuaTeX (and TeX/ConTeXt in general) is not compatible with security. The cache for example must be writable for everyone. In my opinion, the only options for live.contextgarden.net are: - just don't care, if there is a problem, restore from backup - chroot jail - virtual machine with virtual disk in non-persistent mode (at boot time the disk is always a fresh installation) - perhaps some other ideas...
But adding security to LuaTeX seems to me too much work (a lot of exceptions, heavy security audit, problems with cache, problems with compatibility, and so on...).
maybe a bsd-like jail(8). http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/jails-intro.html It is said that linux-vserver had the same feature. I hadn't tried that yet. btw, there should be a way for users to upload their files (like images used in the document).
Cheers, Peter
-- http://pmrb.free.fr/contact/
___________________________________________________________________________________ If your question is of interest to others as well, please add an entry to the Wiki!
maillist : ntg-context@ntg.nl / http://www.ntg.nl/mailman/listinfo/ntg-context webpage : http://www.pragma-ade.nl / http://tex.aanhet.net archive : https://foundry.supelec.fr/projects/contextrev/ wiki : http://contextgarden.net ___________________________________________________________________________________
2008/11/10 Yue Wang
maybe a bsd-like jail(8). http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/jails-intro.html
It is said that linux-vserver had the same feature. I hadn't tried that yet.
I've done limited tests at home and it worked wery well. Setup is not so hard, but requires some FreeBSD knowledge. I think should be the right solution. Cheers -- Diego Depaoli
Peter Münster wrote:
On Mon, Nov 10 2008, Yue Wang wrote:
As to the live, I think a patched Lua file (loslib.c) can solve this problem: remove the line {"execute", os_execute}, in the static const luaL_Reg syslib[].
Moreover, if we do that, ConTeXt will not adapt to the "stripped down" LuaTeX. For example, mtxrun.lua contains many functions which depend on os.execute, and it even created some synonames as well: if not os.exec then os.exec = os.execute end if not os.spawn then os.spawn = os.execute end So, a simple line removal is not sufficient.
LuaTeX (and TeX/ConTeXt in general) is not compatible with security. The cache for example must be writable for everyone. In my opinion, the only options for live.contextgarden.net are: - just don't care, if there is a problem, restore from backup - chroot jail - virtual machine with virtual disk in non-persistent mode (at boot time the disk is always a fresh installation) - perhaps some other ideas...
But adding security to LuaTeX seems to me too much work (a lot of exceptions, heavy security audit, problems with cache, problems with compatibility, and so on...).
there are provisions in mkiv to turn off os.execute etc in a tex run; since we have mplib embedded, there is not much reason for os.execute anyway so i can consider a --secure switch for mtx-context ----------------------------------------------------------------- Hans Hagen | PRAGMA ADE Ridderstraat 27 | 8061 GH Hasselt | The Netherlands tel: 038 477 53 69 | fax: 038 477 53 74 | www.pragma-ade.com | www.pragma-pod.nl -----------------------------------------------------------------
Hi, Hans:
there are provisions in mkiv to turn off os.execute etc in a tex run; since we have mplib embedded, there is not much reason for os.execute anyway so i can consider a --secure switch for mtx-context
not that helpful. users can still use io.open("/etc/xxx", "r") to read files they want. even if io.open is removed (impossible), we can still use \input /etc/xxx. so a bsd jail(8)-like solution is indispensable. btw, virtual machine is also a nice solution. Since each time it down, reinstall a minimal operating system (like bsd base system) plus a full working ConTeXt minimals won't take more than 3 minutes (1.5 minute to reinstall the operating system, and 1.5 minute to rsync the source). Yue Wang
Yue Wang wrote:
Hi, Hans:
there are provisions in mkiv to turn off os.execute etc in a tex run; since we have mplib embedded, there is not much reason for os.execute anyway so i can consider a --secure switch for mtx-context
not that helpful. users can still use io.open("/etc/xxx", "r") to read files they want. even if io.open is removed (impossible), we can still use \input /etc/xxx. so a bsd jail(8)-like solution is indispensable.
that's the same for pdftex/xetex
btw, virtual machine is also a nice solution. Since each time it down, reinstall a minimal operating system (like bsd base system) plus a full working ConTeXt minimals won't take more than 3 minutes (1.5 minute to reinstall the operating system, and 1.5 minute to rsync the source).
sure Hans ----------------------------------------------------------------- Hans Hagen | PRAGMA ADE Ridderstraat 27 | 8061 GH Hasselt | The Netherlands tel: 038 477 53 69 | fax: 038 477 53 74 | www.pragma-ade.com | www.pragma-pod.nl -----------------------------------------------------------------
Hi,
btw, virtual machine is also a nice solution.
I doubt that it will run on the garden server (no kernel modules etc). But true, it would be a nice solution! Patrick -- ConTeXt wiki and more: http://contextgarden.net
Peter Münster wrote:
LuaTeX (and TeX/ConTeXt in general) is not compatible with security. The
Depends a bit on how you define security but it is true that context does not 'do well' in restricted environments. The luatex executable actually has a --safer switch (a la ghostscript) but if it would be turned on, context mkiv wouldn't work.
In my opinion, the only options for live.contextgarden.net are:
a) just don't care, if there is a problem, restore from backup
this is the current approach, and restore hasn't been needed yet (afaik).
b) chroot jail
possible new approach, but I suspect it won't be implemented until after a).
c) virtual machine with virtual disk in non-persistent mode (at boot time the disk is always a fresh installation)
i doubt this could be made to work as-is (contextgarden.net itself is a fairly limited virtual machine)
- perhaps some other ideas...
A variation of c) may well be possible. Actually, if we can find funding we could even move contextgarden.net + context/maps.aanhet.net to a dedicated server. I could easily arrange hardware and a hosting spot for that, but we would have to set up some kind of paypal construct to get the finances sorted out. Patrick, Mojca, Hans, if there is interest is such a solution, just let me know, and I will investigate further. Best wishes, Taco
Hi all,
In my opinion, the only options for live.contextgarden.net are:
a) just don't care, if there is a problem, restore from backup
this is the current approach, and restore hasn't been needed yet (afaik).
Right.
b) chroot jail
possible new approach, but I suspect it won't be implemented until after a).
Well, for the new server I will chroot TeX, I am playing with it. So until then a) is the approach (keep fingers crossed).
c) virtual machine with virtual disk in non-persistent mode (at boot time the disk is always a fresh installation)
i doubt this could be made to work as-is (contextgarden.net itself is a fairly limited virtual machine)
That is true.
- perhaps some other ideas...
Maybe I will run live on another machine, but first I will move all the stuff to the new server (time is so precious these days...). Patrick -- ConTeXt wiki and more: http://contextgarden.net
On Sun, Nov 09 2008, Pablo Rodríguez wrote:
I can't find the format file `cont-en.fmt'! TeXExec | runtime: 0.776454
It seems that it doesn't work. It happens also with XeTeX and LuaTeX.
Sure? No problem here with LuaTeX on live.contextgarden.net... Peter -- http://pmrb.free.fr/contact/
Thanks, Peter, for the reply. Peter Münster wrote:
On Sun, Nov 09 2008, Pablo Rodríguez wrote:
I can't find the format file `cont-en.fmt'! TeXExec | runtime: 0.776454
It seems that it doesn't work. It happens also with XeTeX and LuaTeX.
Sure? No problem here with LuaTeX on live.contextgarden.net... Peter
Right. Neither pdftex nor xetex (log file below) seem to work at http://live.contextgarden.net. LuaTeX works fine. Pablo TeXExec | processing document 'texweb.tex' TeXExec | no ctx file found TeXExec | tex processing method: context TeXExec | TeX run 1 TeXExec | writing option file texweb.top TeXExec | using randomseed 1117 TeXExec | tex engine: xetex TeXExec | tex format: cont-en This is XeTeXk, Version 3.141592-2.2-0.997 (Web2C 7.5.6) %&-line parsing enabled. I can't find the format file `cont-en.fmt'! TeXUtil | unable to locate texweb.tui TeXUtil | shortcuts : 0 TeXUtil | expansions: 0 TeXUtil | reductions: 0 TeXUtil | divisions : 0 TeXUtil | loaded files: 0 TeXUtil | temporary files: 0 TeXUtil | commands: 0 TeXUtil | programs: 0 TeXUtil | tuo file saved TeXExec | TeX run 2 TeXExec | writing option file texweb.top TeXExec | using randomseed 1117 TeXExec | tex engine: xetex TeXExec | tex format: cont-en This is XeTeXk, Version 3.141592-2.2-0.997 (Web2C 7.5.6) %&-line parsing enabled. I can't find the format file `cont-en.fmt'! TeXUtil | unable to locate texweb.tui TeXUtil | shortcuts : 0 TeXUtil | expansions: 0 TeXUtil | reductions: 0 TeXUtil | divisions : 0 TeXUtil | loaded files: 0 TeXUtil | temporary files: 0 TeXUtil | commands: 0 TeXUtil | programs: 0 TeXUtil | tuo file saved TeXExec | runtime: 1.754758
participants (8)
-
Aditya Mahajan
-
Diego Depaoli
-
Hans Hagen
-
Pablo Rodríguez
-
Patrick Gundlach
-
Peter Münster
-
Taco Hoekwater
-
Yue Wang