Workarounds#

Orange Link Parser#

When using Orange Webmail, links may not render as they should.

In order to have correct links, you can install Orange Link Parser.

Follow the Orange Link Parser documentation

Gnome : Ctrl-Shift-E not working in Terminator#

Use Ctrl-Shift-E in Terminator to split vertically your window. On recent Gnome installations, it does not work because it redirects to Emoji shortcuts.

Here is a quick&dirty fix :

start ibus-setup as a normal user in a terminal
chose Emoji tab (or Emoticônes)
click the button [...] at "Keyboard Shortcuts Emoji Choice"
push [delete] among the [add][apply][delete] buttons (or set another shortcut)

Gnome : Lock screen does not work#

Type <Super>-L or run the command gnome-screensaver-command -l : nothing happens.

If you are running with lightdm Display Manager, you can switch to gdm3 : sudo dpkg-reconfigure gdm3 then restart.

If you want to keep lightdm, here are other solutions :

set a keyboard shortcut to dm-tool lock. See this link for more info.

Add gnome-screensaver to your autostart commands :

sudo apt install gnome-screensaver \
  && mkdir -p ~/.config/autostart \
  && cp /usr/share/applications/gnome-screensaver.desktop ~/.config/autostart/

Pulse : routage#

DNS#

Créer le fichier /etc/NetworkManager/conf.d/vpn_fia.conf

# https://networkmanager.pages.freedesktop.org/NetworkManager/NetworkManager/NetworkManager.conf.html
[main]
dns=systemd-resolved
rc-manager=auto

Créer le fichier /etc/systemd/network/vpn_fia.network

# https://www.freedesktop.org/software/systemd/man/latest/systemd.network.html
[Match]
Name=tun0

[Network]
KeepConfiguration=yes
DNS=10.114.253.97
DNS=10.114.253.100
Domains=~intraorange ~orange ~ftgroup ~francetelecom.fr ~equant.com

Modifier /etc/systemd/resolved.conf
```
[Resolve]
Domains=~.
```
Supprimer /etc/resolv.conf
Créer le fichier /etc/resolv.conf
```
nameserver 127.0.0.53
```

Routes et override#

Créer le fichier /usr/local/sbin/lovepulse.sh

#!/bin/bash

echo "Pulse we love you"
sleep 1
if ip l show tun0 &>/dev/null; then
    # Remove default route capturing all trafic
    ip r del default dev tun0

    # Add FE
    ip r add 90.84.0.0/16 dev tun0
    # Exclude Jitsi PRD
    ip r add 90.84.188.4/32 via 192.168.8.1

    # Add Orange LAN
    ip r add 10.0.0.0/8 dev tun0
    # Exclude podman default network
    ip r add 10.88.0.0/16 via 192.168.8.1

    # Add Signon (to avoid 2FA requirement)
    ip r add 94.124.133.96/32 dev tun0
fi
# Pulse overrides resolv.conf, so do we...
echo "nameserver 127.0.0.53" > /etc/resolv.conf

# ...and we watch for changes, because it can sets its routes and dns again at random times
# We recursivly call this script when it happens to give pulse moar love !
echo "/etc/resolv.conf" | entr -n -p /bin/bash "$0"

Créer un service systemd

sudo systemctl edit --force --full lovepulse.service

avec en contenu

[Unit]
Description = Love you PulseSecure
After = pulsesecure.service

[Service]
Type = simple
ExecStart = /usr/local/sbin/lovepulse.sh

[Install]
WantedBy = multi-user.target

L'activer

sudo systemctl daemon-reload
sudo systemctl enable --now lovepulse.service

Redémarrer