/srv/irclogs.ubuntu.com/2007/10/31/#ubuntu-server.txt

=== tideline is now known as tideline_at_home
PyroSamaHey I just installed ubuntu server on a computer and didnt configure the networking on it01:41
PyroSamaAnd I'm clueless how to do it01:41
PyroSamaWhere is the configuration file that I need to modify?01:42
fujin_vi /etc/network/interfaces01:43
fujin_man 5 interfaces iirc01:43
fujin_there should be a little header at the top of the file which tells you the manpage01:43
PyroSamaThank you :)01:43
fujin_but generally,01:43
fujin_auto <interface>01:43
fujin_iface <interface> inet static01:43
fujin_address <address>01:43
fujin_netmask <netmask>01:43
fujin_gateway <gateway>01:43
fujin_should suffice for a static configuration01:43
PyroSamaOk :)01:44
MrProper_afternoon all02:01
chowmeinedWill the sparc version of ubuntu server run on something as old as an ultrasparc IIi?03:25
kgoetzif its 64 bit (which iirc it is) you migh be lucky03:25
kgoetzbut i wouldnt count on it03:25
chowmeinedyea it is 64bit03:26
chowmeinedok, im running debian sparc on it now03:26
chowmeinedi guess ill stick with that03:26
kgoetznot sure how different ubuntu+debian sparc is03:26
kgoetzchowmeined: what is the server in question? a sunblade? (asking from intrest)03:29
chowmeinedan ultra 1003:29
chowmeinedits more of a workstation.. but i use it as a server03:29
kgoetznice. i dont have any 10's. got a 5 running03:30
chowmeinedits kind of slow but im the only one who uses it and its very stable03:32
kgoetzwish i had a sparc running as my workstation, but the only likely candidate is in my rack waiting to be used as a buildd03:32
chowmeinedoh, i dont use it as my workstation, i just meant the model was designed as a workstation, it has some special 3d card in it03:33
kgoetzyeah. same deal with me, but the fancy cards are in the ultra5's not the fast systems :( (all my sparces were made as workstations)03:35
kgoetzhi all. http://pastebin.ca/756106 these instructions tell me to edit master.cf for adding dspam into postfix. anyone know a way that doesnt involve master.cf ?main instead?)04:47
=== Bambi_BO1H is now known as kgoetz
=== nxvl_ is now known as nxvl
krautmoin07:51
=== zul_ is now known as zul
zulls08:26
=== Drazha[away] is now known as Drazha
=== crummygummy_ is now known as CrummyGummy
AnRkeywhat early warning systems work well with ubuntu? I need something to warn me when services go down10:21
=== joerlend is now known as XiXaQ
heatxsinkwhat should I be googling for when looking for information on extending the installation of ubuntu on boxes?  I have to a tedious roll out, and I was wondering if there was a way of extending the current ubuntu installation10:30
Kamping_Kaiser'extending'?10:32
heatxsinkessentially I'd like to add a number of users by default, make a few config tweaks on a LAMP server setup and go10:34
heatxsinkminimize prompting10:34
Kamping_Kaiseris all the hardware the same?10:35
heatxsinki mean I could bash script the whole thitng10:35
heatxsinkya10:35
heatxsinkall of the hardware is identical10:35
Kamping_Kaiserlook at mondo10:35
heatxsinkcoool will do10:35
heatxsinkso I just image the configuration?10:37
Kamping_Kaiseryou make the system once, then image it multiple times. all systms are *exactly* the same10:40
ivoksor FAI10:50
ivoksor do your own install CD with custom preseeding10:51
Kamping_Kaiseryeah. or preseed.10:51
Kamping_KaiserFAI or preseeding is pretty full on though10:51
spiekeyhi10:55
spiekeywhats steps do i need get a normal ubuntu-desktop (as in 7.10) when i currently have a 6-06 server whithout X10:56
spiekeyupgrade to 7.10 server and then install gnome?10:57
Kamping_Kaiserhm. easier to backup and start again imo10:57
spiekeyhehe, okay :)10:58
Kamping_Kaiseryou would have to go 6.06 -> 6.10 -> 7.04 -> 7.10 -> install ubuntu-desktop  -> remove extra server packages10:58
spiekeyok, that sucks :)10:59
Kamping_Kaiserpretty much, but its the only way for Canonical to sanely support upgrades11:00
zulif they are the same hard drives you could just dd them11:02
=== tideline_at_home is now known as tideline
spiekeyi should be able to install ubuntu-7.10-dvd-i386.iso on a AMD XP machine, right?12:35
oly-spiekey, yes that should be fine thats what i use12:45
varekhow can i disable conntrack ?12:46
spiekeyhow do you enable root login for gnome?12:54
spiekeyby a command line way if possible12:54
avatar_sudo passwd root12:58
AnRkeyspiekey, you wanna login to gnome with root?12:58
spiekeyAnRkey: yes13:00
AnRkeyjust remember anything you open will just run13:01
AnRkeynormally logging in to a gnome with root is not a good idea13:01
AnRkeyi would suggest using gksudo for the apps you want to run as root13:02
spiekeyi do understand, but the areca software has problems with that13:05
_rubenX as root .. yuck13:11
_rubenX on server .. yuck13:11
_rubenX as root on server .. damn scary13:11
spiekeythis is only for backup recover reasons13:12
spiekeymabe i will never need it, but i still need to document the way how a recover works13:12
XiXaQ_ruben, why is x on server yuck?13:47
spiekeyXiXaQ: well, whats the point?13:53
spiekeywhy would you ever need X for server services?13:53
XiXaQfor a terminal server, for instance?13:53
spiekeyok, that would make sense ;)13:54
XiXaQusing either xrdp or nx. Is there any reason not to run x on a server in that case?13:54
XiXaQbecause I do that; first I install ubuntu server, with lamp, mailserver and ssh server, then install ubuntu-desktop and nx. Is there any reason not to do so?13:55
spiekeyi dont know a reason why i need X for LAMP13:57
spiekeyssh is all i need.13:57
XiXaQyes, but I need to have both a terminal server and a lamp/mail server. The question is wether or not I need to separate them into different VMs or not.13:59
spiekeywell, i would seperate it since users work on a terminal server..i would be scared because of local exploits and local services misconfiguration14:00
_rubenindeed14:04
_rubenthe X protocol isnt one of the most secure ones14:04
_rubenbut i'd indeed seperate the terminal server from the lamp/mail server .. and i even prefer seperate lamp and mail servers14:08
oly-doesnt nx encrypt the x connection using ssh if you use that, should make it a lot more secure ?14:09
XiXaQbut this is just for a couple of users. It seems like a waste to separate them like that.14:09
XiXaQoly-, it does.14:09
oly-so the X protocol not being that secure is not so much an issue if you use nx for the connections14:10
XiXaQspiekey, do you mean that users could run the exploits accidentally?14:12
XiXaQan unprivileged user could gain access to lamp or mail features?14:12
_rubenaccidentally or on purpose, does that really make a difference?14:17
XiXaQwell, if they have to do it on purpose, then it's not a problem.14:21
=== tck_ is now known as tck
PyroSamaHow do I add a network device to my server?17:24
sommerPyroSama: do you mean a network card?17:26
PyroSamaYes17:27
sommerPyroSama: it should be auto detected you can configure it in /etc/network/interfaces17:28
PyroSamaIt doesnt show up under ifconfig and I have it configured in interfaces17:28
PyroSamaWhen I restart networking it tells me there is no eth017:28
sommeris it listed if you do a dmesg | grep -i net ?17:29
PyroSamaLet me check17:29
PyroSamaYes it does.17:31
sommerPyroSama: do you have the nic's module loaded?17:32
sommeryou might also see if you have any dhcp client processes running, if so try stopping them and restart networking.17:33
PyroSamaHow do I know if I have the nic's module loaded?17:34
PyroSamaAnd how do I see if I have any dhcp client proccesses running?17:34
sommerto check dhcp do ps -ef | grep dhcp17:36
PyroSamak17:36
sommerwhat model of nic is it?  you should be able to google to find out which driver module your card uses then do an lsmod and see if it's listed.17:36
PyroSamaAbove command returned root 'string of numbers' tty1 then something about grep dhcp17:38
PyroSamaNot sure of the model17:38
sommeryou should be good about dhcp then... the model should be on the card, or at least the manufacturer17:39
PyroSamaIntegrated into the board and no chips near the port bear any names that are known for producing ethernet chip sets.17:40
sommerah... I thought you were adding a secondary nic or something.  Do lspci | grep -i net to see the info about your nic.17:41
PyroSamaSis 90017:46
PyroSamaNa this system is an os I installed on one computer then moved the hdd to another.17:49
PyroSamaThe system its in now has no cdrom or ability to add one nor will it boot to usb so I installed on one system and moved it over17:50
PyroSamaSo now I have to get drivers working ><17:50
=== tck_ is now known as tck
sommerPyroSama: I think the module is named sis900 so you might try lsmod | grep -i sis and see what you get.18:06
sommerif it doesn't return anything try modprobe sis90018:06
PyroSamaOk18:06
PyroSamalsmod brings up info about sis630 and sis90018:09
PyroSamamodprobe displays nothing and just drops me to the next line18:09
sommerthat's expected18:10
sommertry sudo ifup eth018:10
PyroSamaSo it seems that the chipset is an sis90018:10
PyroSamaOk 1 sec18:10
PyroSamaerror about device not existing18:11
sommerany errors if you do dmesg?18:12
PyroSamaifup eth0 | dmesg?18:12
mralphabetjust a dmesg18:13
sommerno... just do "dmesg" by itself to check the last output.18:13
PyroSamafloppy0 errors :P18:13
sommermmmMMM... I'm running out of ideas, try rebooting maybe?18:14
PyroSamaShould modprobe have installed the driver or something?18:14
PyroSamaFrom what it looks like it doesnt have the device associated with eth018:15
sommermodprobe should load the driver into memory... after doing that I believe you should see something at the end of dmesg about the new hardware18:15
sommeryou're sure the nic is enabled in BIOS?  and the hardware is working fine?18:16
PyroSamaNot 100%18:18
PyroSamaThis is a modified laptop motherboard that could have suffered damage through its life18:18
sommerah... you might try adding another nic if you can.18:20
PyroSamaNo pci no pcmcia18:22
PyroSamaUSB though18:22
sommeryou can get USB nics that will work with Linux for a resonable amount.18:23
PyroSamasommer: when I dmesg | grep eth0 it shows sis900 after a reboot19:04
PyroSamaHowever there still seems to be an issue with eth019:04
ivoks_there's no good sis network card19:04
PyroSamaIt's what I'm suck with unfortuantely19:05
PyroSamaShouldnt eth0 show up under ifconfig?19:05
mralphabetdo cat /etc/network/interfaces19:06
sorenPyroSama: ifconfig by default only shows configured interfaces.19:06
ivoks_soren: well... :)19:06
sorener... Interfaces marked as UP, anyway.19:07
sorenWhich - in the good old days - was almost the same.19:07
ivoks_but in better days... :D19:07
PyroSamacat interfaces showes the contents of interfaces19:08
ivoks_really?!19:08
PyroSamaHas my static config for eth019:08
PyroSamaYeah19:08
ivoks_hm... how come...19:08
PyroSamaCharacter for character dump of it19:08
PyroSamaDunno19:08
PyroSamaI'm clueless in all of this ><19:08
sorenThat's kind of what cat does.19:08
ivoks_what does 'man cat' do?19:08
PyroSamaLet me check19:08
PyroSamaBrings up the manual for cat19:09
ivoks_suggestion: when someone tells you to do some command19:10
ivoks_if you don't know what it does, check with manual19:10
ivoks_don't just copy paste... it could get you in trouble...19:10
PyroSamaivoks_ try dd if=/dev/zero of=/dev/hda19:10
ivoks_now... we are interested in output of 'cat /etc/network/interfaces'19:10
ivoks_PyroSama: you mean like this:19:11
PyroSamaIt output the contents of interfaces19:11
PyroSamaauto eth019:12
PyroSamaiface eth0 inet static19:12
PyroSamaaddress 192.168.1.21019:12
PyroSamanetmask 255.255.255.019:12
PyroSamabroadcast 192.168.1.25519:12
PyroSamanetwork 192.168.1.019:12
ivoks_looks ok19:13
ivoks_unmute19:15
oly-no gateway ?19:17
PyroSamaGate way is set aswell19:21
PyroSamaBut that doesnt really matter when there is no device configured at eth019:22
PyroSamaIs there something I have to do to tell something that sis900 is eth0?19:28
=== ivoks_ is now known as ivoks
PyroSamaHow do I tell it to use address assigned by a dhcp server?19:42
ivoksdhclient eth019:42
tepsipakkihmm, seems to be a lot going on about puppet22:02
tepsipakkiit was evaluated at HUT and turned down because it was pretty similar to cfengine. They both have a syntax language of their own to do things22:03
tepsipakkiinstead, we improved the in-house applications to also do pull operations22:04
Kamping_Kaiserits a cfengine replacement, so i'm not supprised it works the same ;)22:04
tepsipakkiyeah :)22:05
tepsipakkiour solution uses a patched rsync (all but one in included in 3.0.0pre) over ssh22:05
tepsipakkiand it has pretty powerful inheritance support etc22:06
fujin_cfengine is shit compared to puppet22:06
fujin_;]22:06
tepsipakkiI'd love to demonstrate it if someone is interested22:06
tepsipakkione other tool is the metadata-database, currently called "lkprop"22:06
Kamping_Kaiserfujin_, in what way22:07
fujin_every single way you could think of22:07
* Kamping_Kaiser has used cfengine (its a hardcore learning curve), and heard lots about puppet22:07
fujin_actually, how about I throw you the curve ball22:07
fujin_wait on22:07
fujin_how about22:07
fujin_native resource bastraction type identifiers.22:07
fujin_That'll do it.22:08
tepsipakkiwhich is where every data comes from. It's the only place we put host or other data in, everything else is generated from that data22:08
fujin_s/babstraction/abstraction/22:08
tepsipakkiwe have 557 hosts hooked up, seven different architectures22:09
Kamping_Kaiserpc+unix?22:09
tepsipakkiwell, unix+linux22:09
fujin_you're doing it wrong! :D22:09
tepsipakkisome windows as well, but most of them are in their beloved AD22:10
tepsipakkiwhen a new workstation comes in, you only need o add the mac-address, hostname and group it belongs to22:10
fujin_wow, that's lots22:11
fujin_I have a defautl class which does my hackery22:11
fujin_and all it requires is apt-get install puppet22:11
Kamping_Kaisertepsipakki, is this a configuratino tool, or a domain controller?22:11
fujin_at a later point you can tell the puppetmaster which classes to include on that node, a specific firewall, a resource/server configuration22:11
tepsipakkithen in a few minutes that data has been spread out everywhere, and after netbooting the installer you just need to wait 30min and you have a machine up and running22:12
tepsipakkiKamping_Kaiser: well, the configuration is elsewhere, but that's where the inheritance patterns really shine22:13
tepsipakkilike, there's a hierarchy that has hostdep, and hostgroup directories22:13
fujin_sounds terribly tedious22:13
tepsipakkihostdep has all the hosts, and the configurations that they only have22:14
tepsipakkiit isn't :)22:14
fujin_http://rafb.net/p/UoSVHT48.html22:15
tepsipakkihostgroup has stuff like all/all which goes to every host, and ubuntu/workstation which is synced to all ubuntu workstations, obviously22:15
tepsipakkifujin_: yes, and is it fun to maintain such rules?22:16
fujin_there's no maintaining done :)22:16
tepsipakkior write22:16
fujin_if by maintaining you mean adding new functionality22:16
fujin_then yes22:16
fujin_well then22:16
fujin_yes, it's much more fun than writing ridiculous cfengine configs22:17
tepsipakkisure22:17
tepsipakkibut why write those at first place :)22:17
fujin_because they do what I want?22:17
fujin_would you propose I wrote a bash script to manage all of my systems?22:17
tepsipakkino22:17
fujin_spent countless hours desigining a system which is hard to learn that no one else will ever be interested in?22:18
tepsipakkiI'm just trying to show the differences, poorly I guess :)22:18
fujin_aye, indeed22:18
tepsipakkiheh22:18
fujin_so, you use cfengine and rsync22:19
fujin_?22:19
tepsipakkino cfengine22:19
tepsipakkirsync yes22:19
tepsipakkibut the system is called rfist :)22:20
tepsipakki(yes, the guy who wrote it has a strange sense of humor)22:20
fujin_it's purely rsync?22:20
tepsipakkiwell yes, but the inheritance patterns are what makes it cool22:21
tepsipakkioh, and those files aren't synced on top of old ones, instead in /alt/root22:22
tepsipakkithen there is another tool on the host that actually commits the changes, and backs up the old ones22:23
fujin_so, it's modified rsync?22:27
fujin_that's just dirty, I can't believe you're promoting it as a good thing22:27
fujin_if I inherited that solution, it'd be up there in my top 5 things of things to change22:28
tepsipakkifujin_: as I said, all but one patch is already in rsync-3.0.0pre1-> and the last patch is still in consideration22:28
tepsipakkiunder22:28
tepsipakkiand available in patches/22:29
tepsipakkisupport for '--omit-dir-changes'22:29
tepsipakkiI understand your concern about it, and that's why those are actively being pushed upstream22:30
fujin_so what do you have to do to prepare a box22:30
tepsipakkithe most simple ones only have to have the hostname, architecture (like @ubuntu7, here it's actually 7.04), ip- and mac-address22:32
tepsipakkithose are for classroom workstations, for example (we have ~200 of those)22:33
tepsipakkiand updating those to a newer version only means changing the arch22:33
tepsipakkiof course the real job is done elsewhere22:33
tepsipakkiI mean when preparing a new release22:34
tepsipakkifujin_: http://pastebin.com/d1d64fc8022:38
tepsipakkithat's what my workstation data looks like22:38
tepsipakkifirst is the actual data on the "database" (yes, it's a flat-text file)22:39
tepsipakkiand the rest shows all the data, inherited or not22:39
fujin_so you install what on a client22:40
fujin_I assume you're doing initial provisioning with ghost, or similar22:40
tepsipakkino, debian-installer22:40
fujin_I see22:41
fujin_haven't played with that22:41
fujin_we're using generic server cd's and just apt-get installing puppet after22:41
fujin_the next step would be to either use d-i or make our own cd's22:41
tepsipakkithere is a script that builds a tarball of the most critical tools and a preliminary version of the data which would be rfisted in place22:41
tepsipakkiand that tarball is then extracted at a certain point. there is a udeb which has a script and some hooks to various parts of the installation22:42
tepsipakkifujin_: are you attending UDS?22:43
fujin_What's UDS?22:44
tepsipakkiheh, I take that as a no :)22:44
tepsipakkiUbuntu Development Summit22:44
fujin_no, I don't believe so.22:44
fujin_I'm in new zealand22:44
tepsipakkiok, in that case stay put and wait for a public release ;)22:46
tepsipakkibut if what you have now works for you..22:46
tepsipakkiok, shower time ->22:47
ajmitchNZ isn't that far from boston :)22:47
Kamping_Kaiserresizing roots space on a drive while the partition is online is a  Real Bad Idea, correct?22:49
* Kamping_Kaiser wants to reclaim some of the 10gb on /home/ for users (read: me)22:51
Kamping_Kaiserafk22:56
close2__hello, i would like to create a password-protected 7z file22:56
fujin_lol22:56
fujin_and what does this have to do with ubuntu servers?22:56
close2__sorry didn't finish22:56
fujin_did man p7zip not answer your question?22:56
close2__if i try: 7zr a dummy.7z -p /data/system/22:56
close2__i get an E_FAIL error22:57
close2__an strace shows, that 7zr tries to readlink/open  a lot of files (INF, TXT, ex_....) but finally gives up22:57
close2__creating normal 7z files work22:58
fujin_That's because you're doing it wrong22:58
close2__..22:58
fujin_7z a -pPASSWORD archive.7z file22:59
close2__same error22:59
close2__no wait22:59
fujin_I just did it, it works22:59
close2__same error22:59
close2__i have ubuntu-server gg23:00
close2__i had this working with ubuntu-server ff23:00
fujin_heh23:00
fujin_I doubt it's a problem with 7z23:00
close2__what ubuntu-server version do you have?23:01
fujin_multiple23:01
fujin_edgy and feisty mostly23:01
fujin_I don't plan on running gutsy for some time23:01
fujin_what version of 7zip is in gg?23:01
close2__4.51 beta23:01
fujin_might be that then23:02
fujin_I just did it with a folder23:03
fujin_7z a -pTEST /var/www23:03
fujin_7z a -pTEST www.7z /var/www23:03
fujin_rather23:03
close2__FYI: the strace is available on: http://christian.delta64.com/strace23:03
fujin_what's 7zr?23:04
close2__the 7z executable (it's apparently the 7z only version), but I tried p7zip-full as well23:05
fujin_no, it's 7z23:05
fujin_although i can see 7zr aswell23:05
fujin_I don't know what it is ;)23:05
close2__from man 7zr:  7zr is a stand-alone executable. 7zr handles less archive formats  than 7z,  but does not need any others.23:06
close2__i will ask in #ubuntu, if the "normal" version really has a broken 7z and file a bug if necessary23:06
fujin_using a beta, complaining about bugs23:09
fujin_soudns awesome23:09
close2__well, I just did aptitude install 7z with the standard repositories23:10
close2__i will file a bug for ubuntu-server as well23:10
fujin_cool23:11
fujin_feisty doesn't appear to be affected, nor edgy23:12
fujin_mm, life on the bleeding edge. I'm glad I have a test cycle, *and* that I don't use 7z.23:12
close2__gutsy fixed some serious bugs (kernel panics...)23:13
close2__and I would appreciate any ideas on how to password protect an archive which needs to be readable on a windows machine.23:14
close2__for daus23:15
fujin_good luck on that23:17
fujin_use GPG?23:17
close2__are there gui-interface for windows?23:18
close2__seems easier23:18
=== ivoks_ is now known as ivoks
=== chuck__ is now known as zul

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!