=== tideline is now known as tideline_at_home [01:41] Hey I just installed ubuntu server on a computer and didnt configure the networking on it [01:41] And I'm clueless how to do it [01:42] Where is the configuration file that I need to modify? [01:43] vi /etc/network/interfaces [01:43] man 5 interfaces iirc [01:43] there should be a little header at the top of the file which tells you the manpage [01:43] Thank you :) [01:43] but generally, [01:43] auto [01:43] iface inet static [01:43] address

[01:43] netmask [01:43] gateway [01:43] should suffice for a static configuration [01:44] Ok :) [02:01] afternoon all [03:25] Will the sparc version of ubuntu server run on something as old as an ultrasparc IIi? [03:25] if its 64 bit (which iirc it is) you migh be lucky [03:25] but i wouldnt count on it [03:26] yea it is 64bit [03:26] ok, im running debian sparc on it now [03:26] i guess ill stick with that [03:26] not sure how different ubuntu+debian sparc is [03:29] chowmeined: what is the server in question? a sunblade? (asking from intrest) [03:29] an ultra 10 [03:29] its more of a workstation.. but i use it as a server [03:30] nice. i dont have any 10's. got a 5 running [03:32] its kind of slow but im the only one who uses it and its very stable [03:32] wish i had a sparc running as my workstation, but the only likely candidate is in my rack waiting to be used as a buildd [03:33] oh, i dont use it as my workstation, i just meant the model was designed as a workstation, it has some special 3d card in it [03:35] yeah. same deal with me, but the fancy cards are in the ultra5's not the fast systems :( (all my sparces were made as workstations) [04:47] hi all. http://pastebin.ca/756106 these instructions tell me to edit master.cf for adding dspam into postfix. anyone know a way that doesnt involve master.cf ?main instead?) === Bambi_BO1H is now known as kgoetz === nxvl_ is now known as nxvl [07:51] moin === zul_ is now known as zul [08:26] ls === Drazha[away] is now known as Drazha === crummygummy_ is now known as CrummyGummy [10:21] what early warning systems work well with ubuntu? I need something to warn me when services go down === joerlend is now known as XiXaQ [10:30] what should I be googling for when looking for information on extending the installation of ubuntu on boxes? I have to a tedious roll out, and I was wondering if there was a way of extending the current ubuntu installation [10:32] 'extending'? [10:34] essentially I'd like to add a number of users by default, make a few config tweaks on a LAMP server setup and go [10:34] minimize prompting [10:35] is all the hardware the same? [10:35] i mean I could bash script the whole thitng [10:35] ya [10:35] all of the hardware is identical [10:35] look at mondo [10:35] coool will do [10:37] so I just image the configuration? [10:40] you make the system once, then image it multiple times. all systms are *exactly* the same [10:50] or FAI [10:51] or do your own install CD with custom preseeding [10:51] yeah. or preseed. [10:51] FAI or preseeding is pretty full on though [10:55] hi [10:56] whats steps do i need get a normal ubuntu-desktop (as in 7.10) when i currently have a 6-06 server whithout X [10:57] upgrade to 7.10 server and then install gnome? [10:57] hm. easier to backup and start again imo [10:58] hehe, okay :) [10:58] you would have to go 6.06 -> 6.10 -> 7.04 -> 7.10 -> install ubuntu-desktop -> remove extra server packages [10:59] ok, that sucks :) [11:00] pretty much, but its the only way for Canonical to sanely support upgrades [11:02] if they are the same hard drives you could just dd them === tideline_at_home is now known as tideline [12:35] i should be able to install ubuntu-7.10-dvd-i386.iso on a AMD XP machine, right? [12:45] spiekey, yes that should be fine thats what i use [12:46] how can i disable conntrack ? [12:54] how do you enable root login for gnome? [12:54] by a command line way if possible [12:58] sudo passwd root [12:58] spiekey, you wanna login to gnome with root? [13:00] AnRkey: yes [13:01] just remember anything you open will just run [13:01] normally logging in to a gnome with root is not a good idea [13:02] i would suggest using gksudo for the apps you want to run as root [13:05] i do understand, but the areca software has problems with that [13:11] <_ruben> X as root .. yuck [13:11] <_ruben> X on server .. yuck [13:11] <_ruben> X as root on server .. damn scary [13:12] this is only for backup recover reasons [13:12] mabe i will never need it, but i still need to document the way how a recover works [13:47] _ruben, why is x on server yuck? [13:53] XiXaQ: well, whats the point? [13:53] why would you ever need X for server services? [13:53] for a terminal server, for instance? [13:54] ok, that would make sense ;) [13:54] using either xrdp or nx. Is there any reason not to run x on a server in that case? [13:55] because I do that; first I install ubuntu server, with lamp, mailserver and ssh server, then install ubuntu-desktop and nx. Is there any reason not to do so? [13:57] i dont know a reason why i need X for LAMP [13:57] ssh is all i need. [13:59] yes, but I need to have both a terminal server and a lamp/mail server. The question is wether or not I need to separate them into different VMs or not. [14:00] well, i would seperate it since users work on a terminal server..i would be scared because of local exploits and local services misconfiguration [14:04] <_ruben> indeed [14:04] <_ruben> the X protocol isnt one of the most secure ones [14:08] <_ruben> but i'd indeed seperate the terminal server from the lamp/mail server .. and i even prefer seperate lamp and mail servers [14:09] doesnt nx encrypt the x connection using ssh if you use that, should make it a lot more secure ? [14:09] but this is just for a couple of users. It seems like a waste to separate them like that. [14:09] oly-, it does. [14:10] so the X protocol not being that secure is not so much an issue if you use nx for the connections [14:12] spiekey, do you mean that users could run the exploits accidentally? [14:12] an unprivileged user could gain access to lamp or mail features? [14:17] <_ruben> accidentally or on purpose, does that really make a difference? [14:21] well, if they have to do it on purpose, then it's not a problem. === tck_ is now known as tck [17:24] How do I add a network device to my server? [17:26] PyroSama: do you mean a network card? [17:27] Yes [17:28] PyroSama: it should be auto detected you can configure it in /etc/network/interfaces [17:28] It doesnt show up under ifconfig and I have it configured in interfaces [17:28] When I restart networking it tells me there is no eth0 [17:29] is it listed if you do a dmesg | grep -i net ? [17:29] Let me check [17:31] Yes it does. [17:32] PyroSama: do you have the nic's module loaded? [17:33] you might also see if you have any dhcp client processes running, if so try stopping them and restart networking. [17:34] How do I know if I have the nic's module loaded? [17:34] And how do I see if I have any dhcp client proccesses running? [17:36] to check dhcp do ps -ef | grep dhcp [17:36] k [17:36] what model of nic is it? you should be able to google to find out which driver module your card uses then do an lsmod and see if it's listed. [17:38] Above command returned root 'string of numbers' tty1 then something about grep dhcp [17:38] Not sure of the model [17:39] you should be good about dhcp then... the model should be on the card, or at least the manufacturer [17:40] Integrated into the board and no chips near the port bear any names that are known for producing ethernet chip sets. [17:41] ah... I thought you were adding a secondary nic or something. Do lspci | grep -i net to see the info about your nic. [17:46] Sis 900 [17:49] Na this system is an os I installed on one computer then moved the hdd to another. [17:50] The system its in now has no cdrom or ability to add one nor will it boot to usb so I installed on one system and moved it over [17:50] So now I have to get drivers working >< === tck_ is now known as tck [18:06] PyroSama: I think the module is named sis900 so you might try lsmod | grep -i sis and see what you get. [18:06] if it doesn't return anything try modprobe sis900 [18:06] Ok [18:09] lsmod brings up info about sis630 and sis900 [18:09] modprobe displays nothing and just drops me to the next line [18:10] that's expected [18:10] try sudo ifup eth0 [18:10] So it seems that the chipset is an sis900 [18:10] Ok 1 sec [18:11] error about device not existing [18:12] any errors if you do dmesg? [18:12] ifup eth0 | dmesg? [18:13] just a dmesg [18:13] no... just do "dmesg" by itself to check the last output. [18:13] floppy0 errors :P [18:14] mmmMMM... I'm running out of ideas, try rebooting maybe? [18:14] Should modprobe have installed the driver or something? [18:15] From what it looks like it doesnt have the device associated with eth0 [18:15] modprobe should load the driver into memory... after doing that I believe you should see something at the end of dmesg about the new hardware [18:16] you're sure the nic is enabled in BIOS? and the hardware is working fine? [18:18] Not 100% [18:18] This is a modified laptop motherboard that could have suffered damage through its life [18:20] ah... you might try adding another nic if you can. [18:22] No pci no pcmcia [18:22] USB though [18:23] you can get USB nics that will work with Linux for a resonable amount. [19:04] sommer: when I dmesg | grep eth0 it shows sis900 after a reboot [19:04] However there still seems to be an issue with eth0 [19:04] there's no good sis network card [19:05] It's what I'm suck with unfortuantely [19:05] Shouldnt eth0 show up under ifconfig? [19:06] do cat /etc/network/interfaces [19:06] PyroSama: ifconfig by default only shows configured interfaces. [19:06] soren: well... :) [19:07] er... Interfaces marked as UP, anyway. [19:07] Which - in the good old days - was almost the same. [19:07] but in better days... :D [19:08] cat interfaces showes the contents of interfaces [19:08] really?! [19:08] Has my static config for eth0 [19:08] Yeah [19:08] hm... how come... [19:08] Character for character dump of it [19:08] Dunno [19:08] I'm clueless in all of this >< [19:08] That's kind of what cat does. [19:08] what does 'man cat' do? [19:08] Let me check [19:09] Brings up the manual for cat [19:10] suggestion: when someone tells you to do some command [19:10] if you don't know what it does, check with manual [19:10] don't just copy paste... it could get you in trouble... [19:10] ivoks_ try dd if=/dev/zero of=/dev/hda [19:10] now... we are interested in output of 'cat /etc/network/interfaces' [19:11] PyroSama: you mean like this: [19:11] It output the contents of interfaces [19:12] auto eth0 [19:12] iface eth0 inet static [19:12] address 192.168.1.210 [19:12] netmask 255.255.255.0 [19:12] broadcast 192.168.1.255 [19:12] network 192.168.1.0 [19:13] looks ok [19:15] unmute [19:17] no gateway ? [19:21] Gate way is set aswell [19:22] But that doesnt really matter when there is no device configured at eth0 [19:28] Is there something I have to do to tell something that sis900 is eth0? === ivoks_ is now known as ivoks [19:42] How do I tell it to use address assigned by a dhcp server? [19:42] dhclient eth0 [22:02] hmm, seems to be a lot going on about puppet [22:03] it was evaluated at HUT and turned down because it was pretty similar to cfengine. They both have a syntax language of their own to do things [22:04] instead, we improved the in-house applications to also do pull operations [22:04] its a cfengine replacement, so i'm not supprised it works the same ;) [22:05] yeah :) [22:05] our solution uses a patched rsync (all but one in included in 3.0.0pre) over ssh [22:06] and it has pretty powerful inheritance support etc [22:06] cfengine is shit compared to puppet [22:06] ;] [22:06] I'd love to demonstrate it if someone is interested [22:06] one other tool is the metadata-database, currently called "lkprop" [22:07] fujin_, in what way [22:07] every single way you could think of [22:07] * Kamping_Kaiser has used cfengine (its a hardcore learning curve), and heard lots about puppet [22:07] actually, how about I throw you the curve ball [22:07] wait on [22:07] how about [22:07] native resource bastraction type identifiers. [22:08] That'll do it. [22:08] which is where every data comes from. It's the only place we put host or other data in, everything else is generated from that data [22:08] s/babstraction/abstraction/ [22:09] we have 557 hosts hooked up, seven different architectures [22:09] pc+unix? [22:09] well, unix+linux [22:09] you're doing it wrong! :D [22:10] some windows as well, but most of them are in their beloved AD [22:10] when a new workstation comes in, you only need o add the mac-address, hostname and group it belongs to [22:11] wow, that's lots [22:11] I have a defautl class which does my hackery [22:11] and all it requires is apt-get install puppet [22:11] tepsipakki, is this a configuratino tool, or a domain controller? [22:11] at a later point you can tell the puppetmaster which classes to include on that node, a specific firewall, a resource/server configuration [22:12] then in a few minutes that data has been spread out everywhere, and after netbooting the installer you just need to wait 30min and you have a machine up and running [22:13] Kamping_Kaiser: well, the configuration is elsewhere, but that's where the inheritance patterns really shine [22:13] like, there's a hierarchy that has hostdep, and hostgroup directories [22:13] sounds terribly tedious [22:14] hostdep has all the hosts, and the configurations that they only have [22:14] it isn't :) [22:15] http://rafb.net/p/UoSVHT48.html [22:15] hostgroup has stuff like all/all which goes to every host, and ubuntu/workstation which is synced to all ubuntu workstations, obviously [22:16] fujin_: yes, and is it fun to maintain such rules? [22:16] there's no maintaining done :) [22:16] or write [22:16] if by maintaining you mean adding new functionality [22:16] then yes [22:16] well then [22:17] yes, it's much more fun than writing ridiculous cfengine configs [22:17] sure [22:17] but why write those at first place :) [22:17] because they do what I want? [22:17] would you propose I wrote a bash script to manage all of my systems? [22:17] no [22:18] spent countless hours desigining a system which is hard to learn that no one else will ever be interested in? [22:18] I'm just trying to show the differences, poorly I guess :) [22:18] aye, indeed [22:18] heh [22:19] so, you use cfengine and rsync [22:19] ? [22:19] no cfengine [22:19] rsync yes [22:20] but the system is called rfist :) [22:20] (yes, the guy who wrote it has a strange sense of humor) [22:20] it's purely rsync? [22:21] well yes, but the inheritance patterns are what makes it cool [22:22] oh, and those files aren't synced on top of old ones, instead in /alt/root [22:23] then there is another tool on the host that actually commits the changes, and backs up the old ones [22:27] so, it's modified rsync? [22:27] that's just dirty, I can't believe you're promoting it as a good thing [22:28] if I inherited that solution, it'd be up there in my top 5 things of things to change [22:28] fujin_: as I said, all but one patch is already in rsync-3.0.0pre1-> and the last patch is still in consideration [22:28] under [22:29] and available in patches/ [22:29] support for '--omit-dir-changes' [22:30] I understand your concern about it, and that's why those are actively being pushed upstream [22:30] so what do you have to do to prepare a box [22:32] the most simple ones only have to have the hostname, architecture (like @ubuntu7, here it's actually 7.04), ip- and mac-address [22:33] those are for classroom workstations, for example (we have ~200 of those) [22:33] and updating those to a newer version only means changing the arch [22:33] of course the real job is done elsewhere [22:34] I mean when preparing a new release [22:38] fujin_: http://pastebin.com/d1d64fc80 [22:38] that's what my workstation data looks like [22:39] first is the actual data on the "database" (yes, it's a flat-text file) [22:39] and the rest shows all the data, inherited or not [22:40] so you install what on a client [22:40] I assume you're doing initial provisioning with ghost, or similar [22:40] no, debian-installer [22:41] I see [22:41] haven't played with that [22:41] we're using generic server cd's and just apt-get installing puppet after [22:41] the next step would be to either use d-i or make our own cd's [22:41] there is a script that builds a tarball of the most critical tools and a preliminary version of the data which would be rfisted in place [22:42] and that tarball is then extracted at a certain point. there is a udeb which has a script and some hooks to various parts of the installation [22:43] fujin_: are you attending UDS? [22:44] What's UDS? [22:44] heh, I take that as a no :) [22:44] Ubuntu Development Summit [22:44] no, I don't believe so. [22:44] I'm in new zealand [22:46] ok, in that case stay put and wait for a public release ;) [22:46] but if what you have now works for you.. [22:47] ok, shower time -> [22:47] NZ isn't that far from boston :) [22:49] resizing roots space on a drive while the partition is online is a Real Bad Idea, correct? [22:51] * Kamping_Kaiser wants to reclaim some of the 10gb on /home/ for users (read: me) [22:56] afk [22:56] hello, i would like to create a password-protected 7z file [22:56] lol [22:56] and what does this have to do with ubuntu servers? [22:56] sorry didn't finish [22:56] did man p7zip not answer your question? [22:56] if i try: 7zr a dummy.7z -p /data/system/ [22:57] i get an E_FAIL error [22:57] an strace shows, that 7zr tries to readlink/open a lot of files (INF, TXT, ex_....) but finally gives up [22:58] creating normal 7z files work [22:58] That's because you're doing it wrong [22:58] .. [22:59] 7z a -pPASSWORD archive.7z file [22:59] same error [22:59] no wait [22:59] I just did it, it works [22:59] same error [23:00] i have ubuntu-server gg [23:00] i had this working with ubuntu-server ff [23:00] heh [23:00] I doubt it's a problem with 7z [23:01] what ubuntu-server version do you have? [23:01] multiple [23:01] edgy and feisty mostly [23:01] I don't plan on running gutsy for some time [23:01] what version of 7zip is in gg? [23:01] 4.51 beta [23:02] might be that then [23:03] I just did it with a folder [23:03] 7z a -pTEST /var/www [23:03] 7z a -pTEST www.7z /var/www [23:03] rather [23:03] FYI: the strace is available on: http://christian.delta64.com/strace [23:04] what's 7zr? [23:05] the 7z executable (it's apparently the 7z only version), but I tried p7zip-full as well [23:05] no, it's 7z [23:05] although i can see 7zr aswell [23:05] I don't know what it is ;) [23:06] from man 7zr: 7zr is a stand-alone executable. 7zr handles less archive formats than 7z, but does not need any others. [23:06] i will ask in #ubuntu, if the "normal" version really has a broken 7z and file a bug if necessary [23:09] using a beta, complaining about bugs [23:09] soudns awesome [23:10] well, I just did aptitude install 7z with the standard repositories [23:10] i will file a bug for ubuntu-server as well [23:11] cool [23:12] feisty doesn't appear to be affected, nor edgy [23:12] mm, life on the bleeding edge. I'm glad I have a test cycle, *and* that I don't use 7z. [23:13] gutsy fixed some serious bugs (kernel panics...) [23:14] and I would appreciate any ideas on how to password protect an archive which needs to be readable on a windows machine. [23:15] for daus [23:17] good luck on that [23:17] use GPG? [23:18] are there gui-interface for windows? [23:18] seems easier === ivoks_ is now known as ivoks === chuck__ is now known as zul