How to get my old HP Laserjet 1010 working with CUPS

Hi,

I am real noob when it comes to Linux. Please go easy with me. :slightly_smiling_face:

I am trying to get my old HP Lasjet 1010 working with CUPS.
I have installed the the HP drivers: parkfire install hplip
But when I tried to do a print test, CUPS shows = stopped

How to troubleshoot what is not working?

Thank you.

Regards,
Marcus

I also saw the message when I first add the HP printer:


Does it means that in future, this printer will not be supported by CUPS?

Indeed, see deprecation notice in www.ipfire.org - IPFire 2.29 - Core Update 190 is available for testing

To be more precise: the printer will still be supported by CUPS, but not on IPFire platform.

1 Like

Oh bummer! :smiling_face_with_tear:

ATM, I am playing round core 189. What is your suggestion if I still want to use CUPS, build a separate PC and load Ubuntu?

Yes but the deprecation notice that was shown in the Cups admin page is from CUPS as they will stop using printer drivers and raw queues and hence why IPFire is stopping the use of CUPS, combined together with the CVE’s that were recently raised and still there has been no update released from CUPS to deal with those.

4 Likes

The best hardware solution is to get a little box called a print server that will turn the usb printer into a network printer. They start about $60-$80.

1 Like

Good luck finding a decent Print server.
Probably the only good use for a Raspberry PI.
This sort of thing is going away. so many wifi printers today.
Support for sort of thing is going away.
As seen by IPFire removing support. and the lack of up stream support from CUPS.
I do see Foomatic may be a option.
I have never tried Foomatic. so I will be of no help there.

Well, cups is only one of the three print systems. When you uninstall cups and install HPLIP you get a version of cups install that is only accessible in the terminal (and not the GUI) and web.

Before cups was in existance and even after, people used LPRng for the spooler and Samba for the printer share. Which the driver was installed on the client only.

As far as print servers, I would just get a monoprice print server and be done.

The purpose of installing Ipfire on spare hardware was to replace my old print server.

Now at the moment, it looks like either I need to buy a new print server or get an Openwrt compatiable router with USB port, and install print server package on it. Link: [OpenWrt Wiki] p910nd Print Server

Then I wouldn’t bother with these router software in the first place and use a mainstream distribution that has patched it plus wouldn’t be limited in software either. I would suggest Ubuntu Server and install Webmin for a web gui.

Maybe I’m misunderstanding the nature of these CVEs, but if one just keeps the printer behind their LAN firewall, are they still an exploitable vulnerability in practice?

Edit: based on my reading of this summary article, a strictly local CUPS service would not be easily exploitable, as the would be attacker would first need to gain access to the LAN, and then only if cups-browsed is enabled to allow UDP 631 requests, which apparently isn’t even the default in most distros. Please correct if I’m wrong though.

That is correct. Keep the printer server behind the firewall, don’t open any firewall ports for 631 and the only vulnerability would be attackers on your local lan and that would be prevented if cups-browsed is not enabled.

Also cups has been updated with fixes. Those fixes are just not referenced in the changelogs as dealing with the CVE’s. You have to look through the various commits in their git repo to see the CVE’s mentioned.
Just looking in the changelogs, you 2would not know that fixes for the CVE’s have been applied.

Bear in mind that cups is moving to a mode where ppd’s are no longer used and the printer is run directly via IPP Everywhere.

Currently they still support legacy printers via ppd’s but that is a deprecated method and will eventually be stopped.

The IPP Everywhere approach started to be used in printers from 2010 onwards and most should now support this approach.

The majnority of modern printers either have ethernet or wifi network connections and together with IPP everywhere means that the old traditional approach of a print server is not really necessary anymore.

1 Like

It is not an issue behind the firewall. But I wouldn’t want to use any service on the IPFire server that is not part of the core networking. Even VPNs, but over the years its been acceptable to use in the gateway server since there are processors powerful enough to do both tasks well.