/srv/irclogs.ubuntu.com/2008/03/10/#ubuntu-server.txt

=== ajmitch_ is now known as ajmitch
owhMy cron.daily doesn't appear to be running. An entry shows in the log, showing that the crontab entry runs, but the scripts in /etc/cron.daily don't appear to run. Initially I thought it related to one of my own cron.daily scripts, but removing that has made no difference. run-parts --test shows all the scripts you expect. Any ideas?01:24
=== joerlend_ is now known as XiXaQ
someonedoes ubuntu run hald by default /05:19
owhHiya, just had a bad experience upgrading from Feisty to Gutsy and before I send an email to u-d-d about it I was wondering if anyone might have a look at it before I hit send. The email is titled: Fixing Bug #1 and while it mentions some of the issues, it's not specifically about those: http://paste.ubuntu-nl.org/59112/07:40
owhFeel free to be brutally honest in your response. I'm looking for alternative perspectives.07:41
kgoetzowh: i know people bringing up bug1 every time they have a problem raises my blood presure, dont know about other people though07:42
kgoetznot many places do support upgrades (eg) - microsoft sort of do, redhat dont at all.07:43
pwnguinyea07:43
pwnguinfirst rule of getting stuff done is to not make em angr07:44
owhIt started with a raised blood pressure, but I felt that it wouldn't be constructive. I toyed with a rant of all the broken things, but thought that was also not constructive, so I tried to find ways of indicating how we might improve things. I'm not sure if my email does that the way I think/hope it does.07:44
kgoetzfwiw, your teh second person i've seen in 4 hours complaining about feisty -> hardy upgrades07:44
pwnguinand citing bug one is basically saying "YOU THINK THIS IS OKAY?!? WELL THEN VERYONE WILL JUST STICK WITH MS!"07:44
owhkgoetz: This is Feisty -> Gutsy07:44
kgoetzowh: er, yeah sorry. i meant that :$07:45
owhpwnguin: I did say that as my subject, because I think that's valid. What I was attempting to do with this email is get beyond that. I'm not sure I succeeded.07:46
kgoetzi expect you would be told to take it to the discussion list too (but not being on it or u-d i cant comment)07:46
pwnguinowh: you use the phrase We a lot07:46
kgoetzs/comment/comment for sure07:46
pwnguinhave you been testing upgrades from gutsy to hardy?07:46
owhThe reason I'm raising it here is because some of the people here know me and I figured they would smack me if I needed it.07:47
owhpwnguin: No, I've not been working on gutsy -> hardy upgrades.07:47
pwnguinthe surest way you have to make that work is to probably start reporting bugs now ;)07:48
pwnguinmake an image, install it, upgrade and see what all broke in your opinion07:49
pwnguinits essentially too late to fix feisty -> gutsy upgrades07:49
kgoetzpwnguin: which tbh i find a rather anoying pice of ubuntu policy07:50
pwnguinfunny thing to hear in a server channel07:50
pwnguinits not policy07:50
owhNot only that, it's not really sustainable. It means that upgrades won't ever get better.07:50
kgoetzwhats a funny thing to hear in a server channel?07:51
owhIt means that lessons learnt since release never get incorporated.07:51
pwnguinowh: you mean like uuid disks?07:51
owhSo, you're no better off being conservative than doing an upgrade on day 1.07:51
owhpwnguin: You mean the fstab fix?07:52
pwnguini mean the system by which the kernel establishes a uuid for each disk, independent of the device detection order, and is used, among other places, in fstab07:52
owhpwnguin: I'm not sure what you are getting at.07:53
owhAren't we all aiming for a better user experience than anywhere else? MS and RedHat included?07:53
pwnguinthat system was put in place because upgrading the kernel can cause detection order reversals07:54
owhSo, are you giving me an example of a fix that was made after release to make an upgrade work better?07:54
pwnguinthat'd be an example of a fix that was "a lesson learned" and the upgrade getting better07:55
pwnguinmore importatnly07:55
pwnguinof that list of bugs, theres about 3 legitimate upgrade complaints07:56
owhI'll bite. Why should I as a user upgrading from the previous stable release to the current stable release, six months later, still have to deal with the same problems as someone doing that upgrade on the first day of the release?07:56
owhpwnguin: You're referring to the list of bugs in the email?07:56
pwnguinin the pastebin, yes07:57
owhpwnguin: They were included in the draft to give some sense of the issues experienced from an end-user experience, they weren't intended as bug reports as such.07:57
pwnguininteresting07:58
owhWhat?07:58
pwnguinim trying to figure out why the icons changing is a negative end user experience07:58
owhpwnguin: Because their function didn't change and I didn't change theme. The icons changed for no benefit to me as an end-user.07:59
owhs/icons changed/icons changed appearance/08:00
pwnguinso you've expressed no preference for them08:01
owhThat's an interesting view.08:01
owhHmm.08:01
owhAs an end user I used the icons that came with the selected theme would be the best way to respond I think.08:02
owhBut I think I see what you're saying - I didn't choose any specifically, so why should it matter if they change?08:02
pwnguinindeed08:02
owhI suppose my threshold for change is lower than others.08:03
owhThat's interesting in its own right :)08:03
pwnguinmost server people hate change ;)08:03
owhThat's because people start yelling at you if things change :)08:04
kgoetzafk. heading home08:04
pwnguina few of these bugs seem like straight up bugs. they'd be the same if you reinstalled or installed for the first time.08:04
kgoetzback in a fe hours probably08:04
kgoetz*few08:04
owhThanks for your comments kgoetz.08:04
pwnguini agree that config file diffs suck08:05
owhI have a file full of them, and I don't even know where to begin. If I could choose "Replace all and keep a backup" then I would.08:05
owhIf that option came with a log, that would be even better.08:05
pwnguinhmm08:06
owhAt least I'll have whatever the package maintainer thinks is a good config and I can check and fiddle later.08:06
pwnguinis the GNOME frontend to apt default yet?08:06
owhMind you, sometimes the diff picks up spacing changes :(08:06
owhYou mean synaptic?08:06
owhI'm not sure what you're referring to.08:07
pwnguinno, i mean like the user query stuff08:07
pwnguinlike "run avahi service?"08:07
pwnguindpkg-configure i think08:07
owhI don't understand the question.08:07
pwnguinwhen you upgrade a package, it asks you questions08:07
pwnguinor even just install it08:08
owhDuring the upgrade I was given some dialogs that showed a diff, PHP.ini showed an integrated debconf window, some comments came on the terminal view, nothing was really consistent.08:08
pwnguinthat system has a normal terminal interface, but ive been using the GNOME frontend for ages08:08
owhThe dialogs were just simple "Keep" "Replace" boxes with a diff in the window.08:08
owhAre you talking about the different ways to interact with the user, that is, via text-only, text dialog, gnome, etc?08:09
pwnguinyes, i think so08:09
pwnguindebconf frontends08:09
owhYes, we're talking about the same thing.08:10
owhOne mo, answering the door.08:10
owhAs I said: "During the upgrade I was given some dialogs that showed a diff, PHP.ini showed an integrated debconf window, some comments came on the terminal view, nothing was really consistent."08:10
owhThe PHP.ini side-by-side view was a ripper in uselessness.08:11
owhExample output line: ; such as dynamic images ; such as dynamic images08:11
owhtidy.clean_output = Off tidy.clean_output = Off08:11
owhThat's two config lines "side-by-side"08:11
owhVery helpful.08:12
pwnguinwhen i get diffs, they show up in a GNOME window with scrollbar and standard +- notation08:13
owhWhat I was attempting to do with my email is get beyond specific "bugs" and talk about methodology, but I'm guessing that got lost in translation.08:13
owhWell, there were those as well, but it wasn't consistent.08:13
pwnguinno use talking about methodology if you don't practice it08:13
owhBut does that mean you're saying that I need to lodge a bug report for each instance. That seems hardly productive for anyone.08:14
pwnguinnot quite what im saying08:14
owhSorry, what were you trying to tell me.08:15
pwnguinim saying you're walking into u-d-d and demanding changes in what other people do08:15
owhI suppose I'm trying to poke someone in the eye, yes.08:15
owhAre you saying that I'm not practicing what I'm preaching?08:15
pwnguinim saying nobody's going to want to practice your suggested changes if even you don't help with them08:16
owhI was trying to be constructive about it and attempting to start a discussion.08:16
owhFair point.08:16
owhHow do I best help then?08:16
pwnguincats, mice and bells08:16
owhROTFL08:16
pwnguinnumber one would be to identify which of those complaints are upgrade bugs versus regressions08:17
owhSo, my first step would be to write down a list of what broke or what needed attention?08:18
owhThen I suppose use LP to see what gives.08:18
pwnguinmore importantly, i recall a session at the UDS for hardy08:18
pwnguinabout automating upgrade testing08:18
owhI'm all ears.08:19
pwnguinlooking for it08:20
owhYeah, ditto, found https://blueprints.launchpad.net/sprints/uds-boston-2007/+roadmap08:21
owhhttps://blueprints.launchpad.net/ubuntu/+spec/automated-installation-testing08:22
owhWell the priority is high, it's been approved, but there does not appear to be any content - lovely.08:23
owhIs that what you were referring to?08:24
pwnguinim not sure08:25
pwnguini may be remembering incorrectly08:25
owhI think we're agreeing that my email won't help.08:25
pwnguini think if you aimed to be a bit more constructive08:26
pwnguinsuggest a UDS session08:26
owhSuggestions?08:26
pwnguinnarrow down the examples to those that are upgrade bug, and maybe avoid a condescending "we" if you're not a Ubuntu Developer08:27
owhI'm not a formal Ubuntu Developer, but I am a contributor, have provided bug fixes and attend meetings. Does that not qualify?08:29
pwnguinwhich meetings?08:29
owhubuntu-server meetings.08:29
pwnguinphysically?08:29
owhI'm in Australia, run a one-man company, no not physically.08:29
pwnguinwell, if "we" means you're asking to help fix it, go ahead and use "we"08:30
owhYou bet, I'm not dumping this from on high - or low - I intend to assist the process.08:30
owhBut you raise an interesting point which I'll consider.08:31
pwnguini mean, there are upgrade bugs08:31
pwnguini'd like them gone08:31
owhYou and me both :)08:32
owhOk, let me revert my workstation via format/restore from backup, document the bugs and see what gives. How is that as a way forward?08:32
pwnguinwell that would give you a bit stronger position in the email08:33
owhSo, are you saying, keep the email roughly as it stands and attach a proper bug list, or are you saying, start again with a different email?08:34
pwnguinroughly as it stands. maybe drop the "why should i even bother?" line08:35
owhYeah, it would have gone through another filter - the original draft had venom dripping from it - it helped me, but not Ubuntu :)08:36
pwnguinso what's the recommended upgrade procedure for fedora? ;)08:37
owhThat's not even funny - well, after I recovered from choking from laughing that hard.08:38
owhIt's interesting though.08:38
pwnguinlast i knew it was download the latest iso and reformat08:38
owhWhat is the Ubuntu recommended upgrade procedure for ubuntu-server and ubuntu-desktop. Is it the same?08:38
owhOn my deployment servers I build a new VM image and deploy that.08:39
owhs/deployment/production/08:39
pwnguinon desktop, they try to beat people into the update manager tool08:39
pwnguinnot sure how that works with server08:39
owhOn the desktop it didn't work for me today - I'm looking forward to the LTS -> LTS upgrade *not*08:39
owhFundamentally, config change management is IMHO borked.08:40
Kamping_Kaiserstill at it blokes? *grin*  ( i'm kgoetz )08:40
owhYup.08:40
owhI mean, on the desktop, if you select a number of NTP servers, that might change the config file, but during the upgrade that should resolve itself.08:41
pwnguinwell, almost every app fails to provide a config migration system08:41
owhSo is that the real problem?08:41
owhI mean, if we identify that as an actual problem, we can go about doing something about it.08:42
owhs/an/the/08:42
pwnguinwell, i mean, that's what the diffs are for08:42
owhYeah, but they still show white-space differences and show diffs for files I never touched.08:43
owhI suppose that's a bug :)08:43
pwnguindoes it?08:43
pwnguini thought there was a way it would handle untouched config files08:43
owhIt did for me. Lemmie see if I can dig up an example.08:44
pwnguingentoo actually has a system aside from debconf for etc files08:44
owhThe first four lines from a /etc/pam.d/gdm diff:08:44
owh-authrequisitepam_nologin.so08:44
owh-authrequiredpam_env.so08:44
owh+auth    requisite       pam_nologin.so08:44
owh+auth    required        pam_env.so readenv=108:44
owhLine 1 and 3 are the same.08:45
pwnguinthey are not08:45
pwnguinbut they are trivially the same08:45
pwnguinone uses tabs, the other uses spaces08:45
owhI'm sure it matters for the config parser :)08:46
pwnguinif it worked before08:46
pwnguinit works now08:46
pwnguinit matters to diff, but not your average config parser08:46
pwnguinthis is an argument for xml ;)08:46
owhNo, my point is, that if I have to make an assessment to see if this change matters, I have to wade through crap to find real changes.08:47
pwnguinright; xml wouldn't give you that sort of crap08:47
pwnguinoh, i guess there's also that readenv=108:47
owhYes, so that means that the change is really only "readenv=1", but I cannot glean that by a quick glance. An end user with no programming experience has no chance and I don't recall actually ever changing this file at all.08:48
owhMind you, there's a whole different conversation about patches that include config files changed between different maintainers - yuk.08:49
pwnguinideally, there'd be an md5 or some other hash to compare with so it knows when you've changed it08:49
Kamping_Kaiserit seems that using a diff system that can ignore whitespace would save a lot of issues08:49
owhBut that is only one example. Here's another one. In /etc/default/acpi-support, I added mysql, samba and vmware-server to the STOP_SERVICES so my machine would sleep, but then the maintainer has a config that does something with SPINDOWN_TIME=12, here's a pastebin: http://paste.ubuntu-nl.org/59114/08:51
owhSo, now I have a local change that matters and a maintainer change that may matter. What do I choose?08:52
pwnguin3 way merge ;)08:52
owhSure, but now my grandma is doing the installation - what does she choose :)08:53
krautmoin08:53
pwnguinif your grandma can edit conf files, she can read a diff :P08:53
Kamping_Kaiserowh, why did you grandma edit /etc/default/acpi-support ?08:53
henkjanhmm, ipv6 autoconfiguration is broken after enabling ipv6 in ufw08:53
owhBecause her grandson came to fix her laptop that didn't sleep.08:53
owhHere's another, I ticked the box in System Administration to disable Avahi. The config file reflects that, but the new config file has it enabled again.08:54
pwnguinwell the grandma solution is to make sleep work correctly without the file hack, and blind overwrite the config file08:54
owhAh, but the sleep fix comes as a bug fix to vmware-server :)08:55
owhAnd to mysql for that matter :)08:55
pwnguinowh: legitmate problem, and you can't propose a policy / procedure fix to that until you know why it happened08:55
pwnguinwell, grandma's getting quite technical08:56
pwnguinbut that's not the point08:56
owhShe's like that :)08:56
owhNo.08:56
pwnguinthe kernel suspend and hibernate stuff is braindead08:56
owhOh yeah.08:56
pwnguinit'll just get worse and worse as we get more cores08:57
owhSo, my proposed "global" fix for all this crap is this. Replace all config files with default installation settings after backing up the existing config file. Log the replacement in an installation log file. In most cases, that will do the right thing. In those cases where it doesn't there is a path back.08:58
owhI suppose generic machine (perhaps XML) config files is another way to go, but you'd need to track which of those where modified by whom, too hard.08:59
Kamping_Kaiseryou replace every config file on my server/s and i'll kill you ...08:59
owhWell, have you got a better idea?09:00
Kamping_Kaiseryes. dont fsck up thousands of servers so a few grandmas dont need to press Y09:00
owhNo, I think you're missing my point.09:00
owhThe challenge is to come up with a mechanism that deals with local change while incorporating new configurations.09:01
owhI mean, for example change the default pam authentication module across Ubuntu, something which most people wouldn't fiddle with for example.09:02
Kamping_Kaiserdebconf is meant to handle lots of those problems.09:02
owhAh, but then its use seems incomplete at best and faulty at worst.09:03
owhI agree that it should work, but it doesn't appear to.09:04
Kamping_Kaiseri havent read enough in how it works on a technical level09:04
pwnguinthe thing is, ubuntu sets the debconf to default09:04
pwnguinso you never get asked questions like "enable avahi?"09:04
pwnguinit just assumes the answer09:05
pwnguinit's a tricky balance09:05
pwnguinsurely you've upgraded debian once?09:05
owhSo, then the mechanism that changes that when I tick the box to say "Disable Avahi" isn't updating debconf?09:05
pwnguin_highly_annoying to sit there for two hours playing "wait for the dialog"09:06
owhI've upgraded Debian many, many times, why do you think I came to Ubuntu :)09:06
Kamping_Kaiser--priority=high09:06
Kamping_Kaiseror --priority=low09:06
owhYes, but asking a question 15 minutes into a 2 hour install is a recipe for sitting at the keyboard for another 1 hour 45 minutes afterwards.09:07
owhMaking the installation last 3 hours 45, rather than 2 hours.09:07
owhOr in my case, 10 hours instead of 2.5 hours.09:07
Kamping_Kaiseryou can complain about to much info, or to little, not both at once ;)09:08
owh(Only to find bugs that have been open since early December specifically relating to this upgrade :)09:08
owhYou have to realise that this is about manageability. I as a human am impatient and can only manage a few inane questions at a time.09:09
=== \sh_away is now known as \sh
owhI had a full days work ahead of me this morning, I've done none of it and the system restore will likely take another three to six hours, so if I'm lucky I'll only have lost 24 hours. Likely in reality it will be much more.09:10
pwnguinisn't this why professionals have a hot spare?09:11
owhFundamentally that was what my email was about. It should not be like that. Our user experience should be better.09:11
owhpwnguin: You mean on a laptop, sure, as soon as IBM supports a normal size drive in the PATA socket :(09:11
owhMeanwhile, pwnguin, your suggestions were helpful and I'll spend some time incorporating them after I've restored my machine. Thanks for your time.09:13
pwnguinhonestly, i tihnk the level of effort needed to make upgrades painless is something that will probably need money backing09:15
owhWell, that in itself is a useful observation.09:15
sorenWe invite people to help us test upgrades before the release. After release, if upgrade issues arise, it's perfectly likely that sysadmins will have devised workarounds for these issue. If we go ahead and release a new gutsy iso, those workarounds a likely to break. I am not very much in favour of doing anything at all that might break it for happy, current users of gutsy. Troublesome upgrades are bad, but breaking existing setups is inexcusable.09:15
pwnguinyour average college CS student isn't going to bother fixing the upgrade process when they can just as easily work around it and move on with life09:16
owhsoren: So how is one supposed to "prepare" for an upgrade?09:17
sorenTEst it.09:17
pwnguinheh09:17
pwnguinin -server no less, this should be expected behaviour ^_^09:17
owhsoren: That assumes a whole level of infrastructure that isn't often there at all. Even in server environments - albeit single server environments.09:18
sorenowh: There's no way we can take everything into account. That's why we rely on the likes of *you* to test stuff so that we can fix it in time *before* release.09:18
sorenIt's the curse of providing a flexible, useful system.09:19
* pwnguin wonders whether paying canonical the big bucks makes upgrades easier09:19
owhSo, the best way to do that is to build a virtual server, then upgrade that - of course that won't actually help in the case where the virtual server itself doesn't upgrade.09:19
owhBut it will help.09:20
sorenIf all we provided was an OS where all you could change was 5-6 checkboxes and perhaps a hostname, upgrades would be easy. Fortunately, that's not the case.09:20
Kamping_Kaiserpwnguin, probably paying a few CS students to do testing would be more effective09:20
sorenowh: Virtual servers are certainly handy for testing, yes.09:20
owhTransferring that to my workstation, I suppose I could have built a virtual copy of my workstation and attempted to upgrade that.09:20
owhAs I said earlier, in production I'd build a new image from scratch and play with that, then once happy, deploy it, but it's pretty hard to do that for a workstation.09:22
sorenIt's simple, really. We just need more *real* people, testing this on *real* setups, and telling us about the problems (or better yet: provide patches).09:22
* owh nods.09:22
sorenUpgrades should work.09:22
owhROTFL09:22
owhSorry.09:22
sorenAnd in the general case, they do.09:23
soren!09:23
owhYes, it's the edge cases where it breaks.09:23
sorenIndeed. And you you have one of those edge cases, please do yourself and everyone else with similar setups a favour and test things before the release, so that we can fix it.09:24
nijabaAnd as soren says, it is NOW that we need testers where the edges are when upgrading from dapper|gutsy -> hardy09:24
sorenAS you have observed yourself, once the release is out, we're unlikely to touch it.09:24
owhYes.09:24
soren..so you might as well upgrade *before* the release and help us fix issues. There's *very* little point in waiting for months and months.09:24
owhI have come to that realisation, though I confess that I had enough of "breaking" machines with Debian to want to move to something better - it seems that this might not be possible - just yet.09:25
sorenI'm not saying you should fire up the crack pipe and upgrade to hardy the day after gutsy releases like I do. Right around now would be a reasonable time, though.09:25
owhThat's very funny and I thank you for your humour.09:26
sorenWhich part?09:26
pwnguincrack pipe?09:26
sorenYou upgrading now instead of later?09:26
owhLiving on the edge by installing Hardy the day after Gutsy releases.09:27
owhI suppose I should start with making my Gutsy installation work first, then break it again in Hardy :)09:27
sorenThat's what I do. I'd like a "crack" alias for whatever's the current development release. That'd save me the trouble of fiddling with sources.list once every 6 months.09:28
pwnguinheh09:28
owhYou mean sid :)09:28
pwnguinmore like experimental09:28
sorenToo much confusion :)09:28
pwnguinbut upgrades arent even always stable entry windows till alpha109:28
sorenRight.09:28
pwnguinanyways, it'd be nice at least to see some more automated tests on packages09:29
sorenWe do a lot of that already.09:29
sorenIt's just not very good a exposing all the corner cases.09:30
sorenAt all.09:30
pwnguinwhere are the reports hiding at, exactly?09:30
sorenpwnguin: I'm not sure.09:30
owhsoren: To deal with corner cases perhaps we should find a way to "capture the essence" of a system, that is, the installed packages, their configurations and then automatically upgrade an image of such a machine.09:31
owhSomething like dpkg --get-selections.09:31
pwnguini say just keep a set of images around09:31
owhTogether with a copy of /etc09:31
sorenowh: I don't think that'll do much good.09:31
sorenowh: In fact, I think we do that already (install a random set of packages, test upgrade, rinse, repeat).09:32
owhBut my machine isn't random. I selected a whole set of packages to get something done. For some reason - or many - the upgrade is painful.09:32
owhCapturing that isn't likely to be trivial, but I think it may be doable.09:33
sorenowh: You claim to have never touched a configuration file?09:33
owhNo, I claim that in many cases I've not touched a configuration file, but the upgrade process is still offering it to me. In a few cases I specifically edited a config file. In those cases sometimes a three way merge is needed. The vast majority of cases I did not touch the config.09:35
owhI captured most if not all of the prompts during the upgrade.09:35
sorenIf you haven't touched a config file and you're prompted about changes to it, that's a bug.09:36
sorenNo doubt.09:36
owhThere were many.09:36
sorenPlease file bug reports.09:37
sorenOtherwise, we'll never fix it :)09:37
owhFair enough.09:37
sorenpwnguin: http://people.ubuntu.com/~mvo/automatic-upgrade-testing/09:37
owhThat's a project for the morning.09:37
pwnguini knew there was one09:37
pwnguini couldn't find a blueprint for it or a UDS meeting09:38
owhGotta run. Later all. Thanks for the input.09:38
sorenhttps://blueprints.edge.launchpad.net/ubuntu/+spec/auto-dist-upgrade-testing09:38
pwnguinah, i was looking at the wrong release09:39
NineTeen67CometHelp .. this morning at 6:03 the outside world can no longer see my web server. I've checked with my dns server (afraid.org), rechecked my router (Linksys WRT54GS), re-checked my server (apache2) and I'm out of ideas on where to track the loss of connection (I can get out from my server for aptitude updates, pings etc) ..09:45
nijabaNineTeen67Comet: what's the URL of your web site?09:46
NineTeen67CometIf I use the IP address (outside) it will access my main sites (default VirtualHost) site, but all the links are broken since they are URL links.09:46
NineTeen67Comethttp://www.openlug.com (one of 11 on the server)09:46
NineTeen67CometOutside IP is 122.145.71.12309:46
nijabahmmm...  it resolves to 122.145.71.12209:47
NineTeen67CometThat's what I see too .. but when I use a "what's my ip" service it is 122.145.71.123 .. even afraid.org has this correct ip address...09:48
NineTeen67CometWho/what/where and how is that incorrect? .. sigh and I thought today was going to be a home work day .. lol09:49
NineTeen67CometCould it be GoDaddy (my registrar) being told to send my URL addresses to another dns server?09:50
nijabaNineTeen67Comet: check your DNS entry for www and ensure that you are pointing to the right address09:51
NineTeen67CometLooks like it .. I've got 6 sites with afraid.org and they are all grouped with this IP address (even www, ftp., irc. and the URL w/out www) .. my subdomains too ..09:52
Jeeves_Hi all!10:39
Jeeves_Is anyone here interested in a installtest for Hardy on a Sunfire T1000 and a Sunfire X4500?10:54
Jeeves_I'm going to produce these this week, I think10:54
Kamping_KaiserJeeves_, i'm intereste in trying a T1000 this week.10:55
* Kamping_Kaiser should have done it last week, so this week works for me10:55
Jeeves_Kamping_Kaiser: I'll let you know when I get one10:57
Kamping_KaiserJeeves_, cool. you likely to get one in the next week?10:57
Jeeves_Kamping_Kaiser: It should ship tomorrow10:57
Jeeves_I think it'll be thursday10:58
Kamping_Kaiser60day trial?10:58
Jeeves_Yes10:58
Jeeves_I'm going to run the Hardy release on two T1000's and a X450010:58
Kamping_Kaiserwe are closing in on day 20 of ours10:58
Jeeves_(We run nl.archive)10:58
Kamping_Kaiserso putting ubuntu on this week would be handy10:58
Jeeves_Kamping_Kaiser: I'll try to get it done10:59
Kamping_KaiserJeeves_, whats your timezone?10:59
Jeeves_https://weblog.bit.nl/files/2008/03/ubuntu-setup.png10:59
Jeeves_Kamping_Kaiser: .nl (ehm, GMT+0100?)10:59
Kamping_Kaiserhm.11:00
Kamping_Kaiserthats 8/9 hours different to me, which is perfectly aquard for going through it together11:00
Jeeves_:)11:00
Jeeves_Ehm11:00
Jeeves_So. It would be ok if I were really early, right?11:01
* Jeeves_ isn't very great with timezones :)11:02
Kamping_Kaiseri'm +10.30 am i think (usually +9.30)11:02
Kamping_Kaiseri need to work out the netinstall infrastructure too11:03
Jeeves_Kamping_Kaiser: I'm working very early thursday11:03
Kamping_Kaiserits been quite a while since i netinstalled a sun, and we dont have the infrastructure to do it at work :(11:03
Jeeves_So if I'm awake at 05:00 AM, that would be ok for you, right?11:03
Kamping_KaiserJeeves_, yes that would. i can stay at work until ~8.30pm my time, which is roughly 12:00 mid day your time (i think)11:04
jdstrandhenkjan: what version of ufw?11:05
Kamping_Kaiserhttp://www.timeanddate.com/worldclock/city.html?n=511:06
henkjanjdstrand: 0.1311:07
henkjanjdstrand: should be some default icmp handling11:07
Jeeves_Kamping_Kaiser: Coolio. We can play than :)11:07
Kamping_KaiserJeeves_, :)11:07
Kamping_KaiserJeeves_, do you have existing netinstal infrastructure setup? or do you have a "best" reference i should look at?11:08
jdstrandhenkjan: can you file a bug report with what used to work, what doesn't and what it will take to get it to work again?11:08
Jeeves_Kamping_Kaiser: We have a pxe-booting infra11:08
jdstrandhenkjan: I hope to upload a new version today, and if the changes are small, I can get them in11:08
Jeeves_No hardy support yet11:08
Jeeves_And no sparc-support either11:09
henkjanjdstrand: i'm looking at wich icmpv6-types are needed for proper ipv6 autoconfiguration11:09
jdstrandhenkjan: before filing though, try 0.1411:09
Jeeves_Kamping_Kaiser: And I hope we have it by thursday11:09
jdstrandhenkjan: (it's in the archive already)11:09
Kamping_KaiserJeeves_, ah ok. i had a PITA of a time to get my sunblades installed. i'll try to get working sparc infra at work pre thursday11:09
jdstrandhenkjan: and IIRC, you are on gutsy? 0.14 should work much better on gutsy11:10
jdstrandhenkjan: but if you still have a problem, please file a bug report and I'll get it fixed11:10
henkjanjdstrand: okay, ill first check with the 0.14 version11:13
jdstrandhenkjan: great! please let me know how 0.14 works out for you (good or bad)11:15
henkjanhmm, unpacking http://nl.archive.ubuntu.com/ubuntu/pool/main/u/ufw/ufw_0.14.tar.gz gives an ufw-0.13 directory11:20
zulmorning11:21
jdstrandhenkjan: check the changelog11:21
sorenhenkjan: Use "apt-get source ufw" instad11:21
sorenhenkjan: Or even better: Use bzr (but apt-get source will tell you this, IIRC)11:22
jdstrandhenkjan: yes, apt-get source works fine11:23
jdstrandsoren: that is odd though-- the tarball is 0.13.11:24
henkjani did an apt-get source on an hardy, and that gives me an ~/ufw-0.14/11:24
* jdstrand nods11:24
sorenjdstrand: apt-get source renames it for you :)11:24
sorenjdstrand: Well... dpkg-source does, actually.11:25
henkjanah, okay11:25
jdstrandsoren: I was just curious why it was that at all11:25
jdstrandsoren: I did a bzr export11:25
jdstrandmaybe I need to look at that command some more11:25
sorenjdstrand: Oh? You don't need to do that.11:25
jdstrandsoren: do tell11:26
jdstrandI am in 'trunk'11:26
sorenjdstrand: Just pass -I to dpkg-buildpackage, and it'll leave out .bzr11:26
soren(I assume that's why you do the export)11:26
jdstrandyes11:26
sorenOk. Well, just pass -I to dpkg-buildpackage instead and you should be all set.11:27
soren(if it's not a native package, you probably want -i instead, just FYI)11:28
fujinI'm looking for a better CLi email client than Mutt, Anyone suggest one?11:58
fujintoo many nubs in #ubuntu11:58
_rubenhehe12:03
zulpine?12:03
henkjanwhats wrong with mutt?12:20
faulkes-henkjan: try asking it to talk directly to exchange when sending mail and requiring authentication ;12:23
faulkes-otherwise, it's my favourite12:23
Jeeves_Kamping_Kaiser: I just heard that the T1000's are in12:27
Kamping_KaiserJeeves_, niiice :)12:28
Kamping_KaiserJeeves_, i'll be taking a SunBlade150 to work to act as a test unit for doing netinstalls12:28
Kamping_Kaiserhopefully that means i'll be able to do $stuff with the blade in a few days (unless we work ourselves out quick12:29
Kamping_Kaiser)12:29
Jeeves_Kamping_Kaiser: I'll try to boot it tomorrow afternoon12:32
Kamping_KaiserJeeves_, ok. thats tomorow night for me, so i'll probably be here :)12:32
Jeeves_:)12:36
=== \sh is now known as \sh_away
youngmusicVery strange thing happening here: I got a server that reboots about every 5 minutes. There's nothing in the logs, and it even happens in single user mode. It's not a clean reboot either, just a power-off and the machine restarting. I begin to suspect a hardware problem, but does anyone know of other possibilities?13:38
faulkes-depends if it's happening at regular 5min to the second intervals13:44
faulkes-however, just "about" every 5 min, could be a heat issue, perhaps a dead fan for the cpu's13:44
youngmusicno, not that strict. It can be 2 minutes or 10 minutes also13:44
youngmusicyes, good idea. Iĺl check that out13:45
Jeeves_youngmusic: What kind of machine is it?13:47
youngmusicit was a bit dusty in there, but all fans are working. The cpu has passive cooling. It's also an airconditioned server room, so temperature should be safe13:51
Jeeves_youngmusic: Does it have ilom or something?13:52
youngmusicJeeves_:  It's a dell poweredge, about 5 years old13:52
youngmusicilom?13:52
Jeeves_Yes, or some kind of logging13:53
Jeeves_check the BIOS for SEL of BCM stuff13:53
youngmusicthere's syslog13:53
youngmusicmessagebus13:53
youngmusic(oops, I just realize that particular server still runs on fedora, not ubuntu. I hope that's not a big problem?)13:54
youngmusic\13:54
youngmusic(being on the wrong forum, that is)13:54
Kamping_Kaiseryoungmusic, you'll need to ask #fedora13:55
Jeeves_youngmusic: I mean hardware logging13:55
Jeeves_Not linux-logging13:55
youngmusicah, no i don't think it has something like that13:56
Jeeves_ok13:56
faulkes-is it managed via drac or?13:57
faulkes-or any of dell's management tools?13:57
youngmusicseems there was a utility partition, but its erased. (the server was installed before my time)14:05
youngmusicJeeves_:  in the bios itself, there is no logging.14:06
youngmusici 'm gonna try and find a diagnostic disk14:09
coffeedudedendrobates: morning.14:09
dendrobatescoffeedude: morning14:10
kris_phhello.. how remove nagios and its configuration.. everything.. since I want to reinstall it14:26
Kamping_Kaiserkris_ph, apt-get --purge remove nagios14:26
Kamping_Kaiserplus any relevent packages14:26
kris_phI got this error: Package nagios is not installed, so not removed14:27
kris_phbut it is installed..14:27
kris_phI followed the steps/guide by ubuntu geek14:28
Kamping_Kaiserperhaps its called something else14:28
Jeeves_dpkg -l | grep nagios ?14:28
zulhi mathiaz14:30
kris_phdpkg -l | grep nagios <<< but no output.. it simply goes back to the terminal line..14:30
kris_phI followed this guide to install it.. http://www.ubuntugeek.com/nagios-network-monitoring-system-setup-in-ubuntu.html14:32
zulmathiaz: survivied the snowfall?14:33
nijabakris_ph: you compiled nagios and installed it yourself.  Normal that it is not seen as a package14:35
kris_phnijaba: yeah..14:35
nijabakris_ph: to remove, you now have to do it by hand...14:35
kris_phnijaba: okay.. what will I do then?14:36
kris_phnijaba: this must be a mess.. I read somewhere in the forum (ubuntu)..pointing me to ubuntugeek.14:36
nijabakris_ph: look at the install part of your make file and check where the bits and pieces have been installed, then write to the ubuntugeek writer, asking that a warning be placed on this howto14:37
kris_phnijaba: I just discovered this: https://help.ubuntu.com/community/Nagios2 which I want to follow14:37
nijabakris_ph: look at the first comment on the ubuntugeek how to...  the reply is "because I want to have the latest version".14:38
kris_phnijaba: is there a way to do it?14:38
nijabakris_ph: nothing simple, no.14:38
kris_phnijaba: uhuh... any recommendation to undo this? I have file manager installed in my box.. I could easily view files in graphical...14:38
nijabakris_ph: as I said, look at the install part of the make file you invoke to install it in the first place14:39
nijabakris_ph: that is the only way to tell where bits an pieces have gone14:39
kris_phnijaba: how to see it?14:40
kris_phnijaba: where could I find it?14:40
nijabakris_ph: in the directory where you uncompressed the tarball you downloaded14:40
kris_phnijaba: ows.. can i simply delete those subfolders under nagios?14:42
nijabakris_ph: I am posting the following comment on this blog: Could you please put a HUGE warning at the top of this how to to warn people that installing a package using this method is not the recommended way to do things and should be reserved to experts that will not have trouble uninstalling it by hand?  Thanks a lot."14:44
nijabakris_ph: unfortunately I will not be able to drive you on this...14:44
kris_phnijaba: are you one of the developers for ubuntu?14:45
kris_phnijaba: how about installing the guide located in https://help.ubuntu.com/community/Nagios2 ? would it overwrite it?14:46
nijabakris_ph: I am doing the product management, but others on this channel are the dev.14:47
kris_phnijaba: thank you.. I must believe you..14:47
nijabakris_ph: you can try, but that may lead to inconsistencies14:47
faulkes-heya nijaba14:48
nijabahello faulkes-14:48
kris_phnijaba: how to remove this one.. ln -s /etc/init.d/nagios /etc/rcS.d/S99nagios?14:48
kris_phhello faulkes. M glad you're back.. I'm sure you can help me with this..14:48
nijabakris_ph: "sudo rm /etc/rcS.d/S99nagios" should do the trick.  You can also use update-rc.d14:52
kris_phnijaba: thanks.. do I need to run update-rc.d too ?14:54
faulkes-hrmm, now to see about remotely installing -server via drac onto this 1955 blade14:58
faulkes-should be lots of fun I imagine14:58
nijabakris_ph: no you do not, but using it can help you remove all references to nagios in the init.d scripts14:58
kris_phnijaba: thank you.. so..all I need now is to execute to stop the service right? and install it acco to ubuntu guide14:59
=== cjwatson_ is now known as cjwatson
faulkes-zul: is there a ebox-mail component in the works?15:25
zulfaulkes-: not that I know of, the ebox guys were still working with it and it doesnt use dovecot or postfix15:26
* faulkes- nods15:26
faulkes-question was posted in the forum thread, I'll reply to it15:26
mathiazkirkland: wrt bug 39157, rather than giving a detailed explanation on how-to create a debdiff, I'd suggest to give links to documentation on wiki.ubuntu.com (eg: https://wiki.ubuntu.com/PackagingGuide/Recipes/Debdiff)15:29
kirklandmathiaz: good idea15:31
kirklandmathiaz: done.15:31
zulmathiaz: im doing the samba upload later today15:33
mathiazkirkland: most of the packaging questions should have an answer in the packaging guide - https://wiki.ubuntu.com/PackagingGuide/15:34
kirklandmathiaz: i see15:34
sommermathiaz: hello, I ran into an issue with slapd and apparmor this weekend15:35
mathiazkirkland: it used to be a docbook guide maintained by the doc team15:35
mathiazkirkland: but now it has been moved to the wiki so that anyone can edit it.15:35
sommermathiaz: slapadd/slapcat can't save or import when in enforce mode15:35
mathiazkirkland: dholbach has been responsible for the migration and would welcome any comments on that15:35
mathiazsommer: do you see any error messages ?15:36
faulkes-mathiaz: for x64 intel -server, which iso would I want to grab?15:36
mathiazsommer: I mean audit messages15:36
sommeryep, it has to do with the ldif file15:36
faulkes-gonna see about testing a5 on a dell 1955 blade15:36
sommerif you add the ldif file to usr.sbin.slapd it will work15:36
mathiazfaulkes-: you can try -amd6415:36
* faulkes- nods15:36
mathiazfaulkes-: -i386 should also work15:36
faulkes-kk15:36
faulkes-yeah, but 4 x64 cpu's and 4gb of ram, I'll go with x64 first try15:37
sommeris their a way for the profile to recoginze *.ldif?15:37
mathiazsommer: meh.. wired15:37
zuldamn 'puter15:37
mathiazsommer: slapadd and slapcat should run whith slapd stopped15:38
sommermathiaz: correct15:38
mathiazsommer: as they modifies the backend db directly15:38
=== \sh_away is now known as \sh
mathiazzul: have you seen the new upload from steve this weekend ?15:38
mathiazzul: they're also preparing an upload for 3.0.28a that has been released over the we15:39
zulmathiaz: yep Im using it as a pase15:39
zulbase even15:39
zulhmmm...maybe we should wait then15:39
mathiazzul: it may worth sending them all the relevant patches and make sure they can be part of 3.0.28a15:40
mathiazzul: also I'm not sure which one are relevant to Debian.15:40
zulmathiaz: I can do that15:40
zulI think the winbind files one and the documentation fixes15:40
mathiazzul: for the documentation fixes, I'm not sure that it will get accepted. steve grumbled when I mentionned the bug last week15:41
mathiazzul: but it's worth a try15:41
zulIll go through the svn see what they have15:42
mathiazzul: you may also check with steve for a FFexception15:42
zulsure15:42
sommermathiaz: stopped or started when using slapadd/slapcat the apparmor error still happens15:43
sommermathiaz: here's the error message from slapcat: http://paste.ubuntu-nl.org/59142/15:44
zulmathiaz: I have to bug slangslek about some ebox stuff anyways so Ill bring it up with anyways15:44
dantalizingmathiaz: regarding the openvz info you asked me to document, was there specific info you wanted?  i put an initial page up here: http://wiki.ubuntu.com/OpenVZ15:47
ubotuLaunchpad bug 39157 in samba "Samba initscript does not conform to the LSB Spec." [Low,Confirmed] https://launchpad.net/bugs/3915715:48
faulkes-oki's, went for a6 to test out, we'll see how that goes15:49
kirklandthe map where you select your timezone on installation, is that provided by tzdata?15:52
iclebytehaving trouble getting my head around ubuntu's method of using virtual hosts.. i've created 2 entries in /etc/apache2/sites-available one called iclebyte.ubuntu1 and one called dotproject.ubuntu1 both have been enabled and the symlinks are listed in sites-enabled however only the iclebyte.ubuntu1 vhost works. the dotproject.ubuntu1 vhosts points to the default pages...15:53
iclebyteany ideas?.. i'm not getting anything in the logs thats helpful15:53
\shiclebyte: you need to enable them in sites-enabled via a symlink from sites-available15:53
iclebytethats what i said i've done..15:54
iclebyte" the symlinks are listed in sites-enabled"15:54
iclebytebut only the first vhost is working..15:54
\shiclebyte: can you pastbin both vhost configs pls?15:54
iclebyteyup 1 sec15:55
mathiazsommer: you've got this error message even when slapd is not running ?15:56
iclebytehttp://pastebin.com/d761bca7d15:56
sommermathiaz: correct15:56
\shiclebyte: where is your namevirtualhost directive?15:56
mathiazzul: great - although I don't think we'll need a FFe for 3.0.28a as this is a bug-fix only release. But mention it just to be sure.15:57
mathiazsommer: that is ... strange15:57
iclebyte\sh, I read on a forum somewhere that it should only be in the 'default' vhost file..15:57
\shiclebyte: hehe...15:57
\shiclebyte: if the default file is not enabled, you don't have one15:57
mathiazjdstrand: have you test slapdcat/slapadd when generating the slapd profile ? See the backlog for sommer problem15:58
\shiclebyte: you need to add somewhere NameVirtualHost *15:58
iclebytethe default host is enabled ....15:58
sommermathiaz: I thought so, if you add the ldif file to /etc/apparmor.d/usr.sbin.slapd with "w" or "r" depending it works fine (after reloading the profile)15:58
\shiclebyte: hmm...what says error log?15:59
mathiazdantalizing: great - that's a good starting point. Could you document a little bit more what is available in hardy ?15:59
\shiclebyte: and btw...your entry "serveralias"..you don't need it with the same name as ServerName...15:59
dantalizingmathiaz: will do16:00
iclebytedo i need the serveralias entry atall?16:01
iclebytei seem to have fixed it now ... some how.. thanks for your time anyway! =)16:01
mathiazdantalizing: could you also list the how-to pages on help.ubuntu.com ?16:01
mathiazdantalizing: a first task would be to update the how-to pages to make them relevant for hardy.16:02
\shiclebyte: nope....you need it only for e.g. "ServerName www.yourdomain.tld" and you want to point "yourdomain.tld" to the very same webspace..16:02
dantalizingmathiaz: k16:02
iclebyteoh right.. that doesnt really apply on my virtual machines then =P. cheers for your help though dude.16:02
mathiazdantalizing: if the kernel has openvz enabled, it should be much easier to get started with openvz in hardy16:03
\shiclebyte: you're welcome16:03
dantalizingmathiaz: yes16:03
dantalizingmathiaz: what i dont understand is what is "a separate flavour (of the kernel) via the debian/binary-custom.d/ infrastructure"16:05
dantalizingthis is where ben told the openvz devs the patches would be applied....if i'm using the right terminology16:05
dantalizingi've downloaded and built the kernel with the patches, so i know its in, i just dont know how that translates to a universe package, or where to see the end result16:06
mathiazdantalizing: which kernel did you download ?16:10
dantalizingfrom git, ubuntu/ubuntu-hardy16:10
mathiazdantalizing: looking at the ubuntu-hardy git tree, I don't see any openvz flavour in debian/binary-custom.d/16:10
dantalizingmathiaz: it was just loaded friday, could that be the reason?16:11
mathiazdantalizing: well - I'm looking at gitweb on kernel.ubuntu.com16:12
mathiazdantalizing: I haven't done a git checkout of the kernel tree16:12
mathiazdantalizing: did you see an openvz flavour in debian/binary-custom.d/ ?16:13
zulyeah I dont see it anywhere either16:13
dantalizingmathiaz: lemme check my laptop at home16:13
mathiazdantalizing: There is a xen directory in there - I'd expect an openvz there too.16:13
dantalizinglike i said, i didnt konw what to look for so i did close and just grepped for some of the patch code16:14
dantalizingmathiaz: its quite possible i misunderstood the exchange, shall i fwd you the email i'm looking at?16:16
mathiazdantalizing: hum. Reading through the changelogs, I don't see any references to openvz16:16
mathiazdantalizing: sure16:16
dantalizingmathiaz: done16:19
mathiazdantalizing: ok - read throught it.16:21
mathiazdantalizing: the patches haven't been loaded in the kernel yet.16:22
dantalizingic16:22
mathiazdantalizing: you may drop by #ubuntu-kernel to ask what's going on the openvz front.16:22
dantalizingok16:23
mok0ping soren16:23
nijabamathiaz: I thought that an OpenVZ kernel was going to be put in universe, not that we would have it in our kernel16:23
mathiaznijaba: that is the case16:23
mathiaznijaba: there will be an -openvz the same way as -xen flavour16:24
mathiaznijaba: but the source is included in our kernel tree16:24
dantalizingwhere do i find debian/binary-custom.d/ ? a subdirectory of the kernel source?16:24
nijabamathiaz: ok, I did not get that part, sorry...16:24
mathiazdantalizing: yes16:25
mathiazdantalizing: at the top of the tree, there is a debian/ directory16:25
dantalizingi knew that....er... not16:26
dantalizingmathiaz: ok, i'll not assume we have a -openvz flavor yet with the documentation16:26
mathiazdantalizing: well - it seems that ben said he would accept the openvz patches.16:27
mathiazdantalizing: so I'll try to figure out what's hapening on that front16:27
dantalizingmathiaz: you still want me to ask in #ubuntu-kernel, or wait?16:28
mathiazdantalizing: I'd ask in #ubuntu-kernel.16:28
mathiazdantalizing: if openvz will be available in the next upload, I'd wait a bit for updating the documentation16:28
mathiazdantalizing: once there is a -openvz flavour in hardy universe, it will be easier to get things tested and update the documentation.16:29
dantalizingmathiaz: ok16:30
jdstrandmathiaz, sommer: I am awaer of the slap* apparmor stuff and need to think about the fix more. I can say that redirecting slapcat's stdout works fine16:46
=== \sh is now known as \sh_away
sommerjdstrand: cool, thanks16:49
zulsommer: there should be a whole bunch of ebox fixes this week hopefully as well16:54
sommersweet, I wrote up the ebox section to the docs, but haven't committed it yest16:54
sommeryet even... probably will this evening after another proof read16:55
* faulkes- watches alpha6 install via dsl to the colo via drac17:13
faulkes-interesting little process17:14
faulkes-and given my new employer seems cool with me testing out ubuntu alpha's on our hardware so I can repot back to ServerTesting, kinda cool17:15
sommerI want a colo drac :-)17:26
sommersounds like a new energy drink... heh17:27
mruizhi all17:27
sommerhey17:27
faulkes-heh17:30
faulkes-if it's gonna be a drink, it's going to have alcohol in it17:30
brewmasteris there a netinstall for kubuntu similar to debian?18:02
brewmasteri'm trying to install on a friend's comp but I think his CD rom is bugging out18:03
brewmasterhangs at random %'s during the final step of the install18:03
Centaur5brewmaster: https://help.ubuntu.com/community/Installation/QuickNetboot18:10
brewmasterCentaur5, thanks, I'll give it a try18:18
brewmaster"There should be no other DHCP servers running in the subnet"18:19
brewmasterwhat about my router?18:19
Centaur5Then you'll have problems if the client gets an IP from your router instead of the server.18:23
sdrowkcabhello19:18
zulmathiaz: im going to upload samba since there is no eta for 2.0.28a19:18
sdrowkcabwhat hapens when you install a LAMP server?19:19
nxvlhi all!19:19
nxvlwhat's the efforts focused on in this part of the development circle?19:20
sdrowkcabWhen I install a LAMP server will it install the standard ubuntu server plus apache etc.?19:20
sommersdrowkcab: yeppers19:20
zulnxvl: bug fixing19:21
sdrowkcabSo it just saves the hasle of doing it manualy?19:21
nxvlzul: only bug fixing?19:21
zulnxvl: pretty much..19:21
mathiaznxvl: there is a lot of stuff that needs attention19:22
sommersdrowkcab: yep, but if you don't want mysql for instance you'd probably want to install the packages by themselves19:22
sdrowkcabI want to set up a game server plus web server so I think I should go for LAMP. right?19:23
nxvlmathiaz: a lot of stuff as in a lot of bugs?19:24
sommersdrowkcab: sure, there's a ton of info regarding the LAMP stack if you're just starting out19:24
mathiaznxvl: yes19:24
nxvlmathiaz: ok, i will take a look at some bugs :D19:25
sdrowkcabI allready have ubuntu and xubuntu I just wanted to know the difference between LAMP and non-LAMP installation19:25
sdrowkcabthanks19:25
sdrowkcabbtw Is ubuntu server better than freeBSD?19:25
sommeroh ya, bsd isn't even linux :-)19:26
mathiaznxvl:  I've come accross the tiny-erp package19:26
mathiaznxvl: https://bugs.launchpad.net/ubuntu/+source/tinyerp-server/19:26
sommerheh... I think it's more what you want to do with it that really matters19:26
mathiaznxvl: there seems to be a couple of bugs that are easy to fix19:26
nxvlbtw, is there any efforts already on writting a centralized adminstration console for common services?19:26
nxvlmathiaz: thnx :D19:26
sommernxvl: I'm not sure if this is exactly what you're looking for, but it's an interesting project: https://hosted.fedoraproject.org/func/19:27
mathiaznxvl: no. That wouldn't be appriopriate for the current release cycle.19:27
mathiaznxvl: but something that could be discuss at the next UDS19:27
mathiaznxvl: you should register a blueprint if you're interested in that.19:28
nxvlmathiaz: thats what i meant, i want to go to the UDS with something started19:28
mathiaznxvl: well - if you're interested in this topic, starting to do some background research and drafting a spec is a good step to take19:30
nxvlzul: btw, did you take a look at the smb.conf(5) patch i upload?19:31
zulnxvl: yes its in there19:31
nxvlmathiaz: yep, i will (want to) start some research, drafting and start some develop before UDS19:32
* faulkes- prepares ServerTesting template19:34
nxvl /j ubuntu-driver19:35
nxvlsorry about that :P19:35
soneilnxvl: good luck .. something I'd love to see, but always seems to meet opposition (the old "real admins use nipple clamps" argument )19:35
nxvlsoneil: yes, the problem with server developing is that the "users" are people who actually knows what thay are doing and want to have the total control os their systems19:36
nxvlsoneil: but i have some ideas that maybe can work19:37
sommermathiaz, jdstrand, lamont: not sure who should handle this, but I just noticed that the bind9 apparmor profile is named apparmor-profile...20:17
lamontsommer: sigh.  what should it be named>?20:18
jdstrandsommer: in the packaging20:18
sommerprobably usr.sbin.named20:18
jdstrandsommer: when installed its usr.sbin.named isn't it?20:18
sommernot from the package I just installed20:18
lamont-4 changed it20:18
* jdstrand goes checks on that20:18
lamont-6 will have the fix20:18
jdstrandlamont: oh-- you changed it? ok then20:18
=== ewook_ is now known as ewook
jdstrandlamont: yes, it the absolute path to the binary it protects, with '/' replaced with '/'20:19
lamontwith .20:19
jdstrandhaha20:19
jdstrand'/' with '.'20:19
sommerheh... thanks lamont20:19
jdstrandso yes, usr.sbin.named20:19
lamontsommer: is there a bug open for this?20:19
sommerlamont: don't think so I just discovered it going over the docs20:20
sommerI can file one if you'd like20:20
lamontthe sad? part is that I _just_ uploaded -520:20
lamontsommer: sure.20:20
sommerok, will do20:20
lamontthat'll give me something to request the sync against. :-)20:20
* lamont waits for a bug number so that he can commit and upload20:26
sommerlamont: Bug #200739 filed20:26
ubotuLaunchpad bug 200739 in bind "bind9 apparmor profile is named apparmor-profile" [Undecided,New] https://launchpad.net/bugs/20073920:26
* lamont migrates the bug to bind9 where it belongs20:27
sommerwoops20:28
lamont-rw-r--r-- root/root       587 2008-03-10 14:36 ./etc/apparmor.d/usr.sbin.named20:42
sommerlamont: should the bind user have write access to /etc/bind ?20:52
jdstrandsommer: it needs it for dynamic updates20:52
lamontsommer: not generally, no20:53
sommerjdstrand: ya, I noticed that20:53
lamont2755 root:bind20:53
jdstrandsommer: but the DAC (ie unix permissions) are still enforced20:53
jdstrandsommer: so even though the apparmor doesn't stop it, the DAC will20:53
jdstrands/apparmor/apparmor profile/20:54
sommerso if I have a master - slave scenerio /etc/bind should be 2755 bind:bind ?20:54
* lamont can hardly wait for hardy, so he can turn on selinux instead of apparmor20:54
jdstrand277520:54
lamontI'd use /var/lib or /var/cache for secondary stuff20:54
lamontand/or updates20:54
lamont /etc shouldn't be writable by the bind user20:54
lamontsadly, the jnl files go in the same place as the zone data, which hurts20:55
jdstrandlamont: ideally no, but journal files get written wherever the zone file are20:55
jdstrandoh-- yes20:55
jdstrandyou knew that ;)20:55
lamontjdstrand: and that's why the package delivers an empty /var/lib/bind20:55
lamont.jnl files don't belong in /etc, so let's move the zone data to fix  that... :(20:56
sommerlamont: gotcha, can you take a look at: http://doc.ubuntu.com/ubuntu/serverguide/C/dns-configuration.html20:56
sommerif you only add the config for a slave the zone files want to go into /etc/bind20:56
sommershould that be documented different?20:56
lamontslave zone goes in /var/cache/bind20:57
sommerlamont: do you have to configure that?20:57
lamontin fact, slave zones can go in the config without a leading path name, since named's working directory is /var/cache/bind20:57
lamontso just drop the /etc/bind/ from the paths for secondary20:58
sommergotcha20:58
lamontfor dynamic, you'll need to have /var/lib/bind/ in front of the zone data.20:58
jdstrandlamont: have you uploaded -6 yet?20:58
* lamont points at "Configuration Schema:" in /usr/share/doc/bind9/README.Debian.gz20:59
lamontto debian, yes.  it'll be in the dinstall run20:59
lamonttomorrow.20:59
lamontsomewhere in there I should subscribe ubuntu-archive and make it a sync request20:59
* lamont goes to do that20:59
jdstrandlamont: you are too fast20:59
sommerlamont: thanks I'll look through that :-)20:59
jdstrandlamont: this talk of /var/lib/bind made me check the apparmor profile21:00
lamontjdstrand: the commit was waiting for the bug number... :-)21:00
lamontjdstrand: so is it broken?21:00
jdstrandit should have '/var/lib/bind/* rw,'21:00
* lamont ponders the meaning of 'DAC'21:01
jdstranddiscretionary access controls21:01
jdstrandas opposed to MAC21:01
jdstrandsorry for the jargon21:01
lamontnp.  I expect that directory perms are MAC though, no?21:02
lamontanyway, not sure what, if anything, a proper install should need to write in /etc.21:02
jdstrandapparmor provides the MAC, and it is supplemental to the unix permissions21:02
lamontah, ok21:02
jdstrandso if the unix perms so 'no', apparmor will not override that21:03
jdstrand(think the most restrictive wins in this case)21:03
* jdstrand can't type21:03
jdstrandsay 'no'21:04
lamontright.21:04
jdstrandlamont: I only did the /etc/bind as someone will undoubtably just use /etc/bind for their zone and dynamic updates21:04
lamontso I'll ignore that for the moment, and let you file a bug on bind9 with a patch to the apparmor-profile (vs -6) and then we'll catch it after bind9 gets a chance to age for a couple of days?21:04
lamontthere are lots of places that use /etc/bind in ways it was not meant to be used... like say, for secondary zones21:04
jdstrandlamont: no problem-- I'd like to test it some more anyway21:05
lamont(putting secondary zones in /etc violates FHS)21:05
* jdstrand nods21:05
lamont"Every zone file contains 3 resource records (RRs): an SOA RR, an NS RR and a PTR RR."21:06
lamontBzzzzt!21:06
lamontevery zone contains an SOA RR, one or more NS RRs and probably other data.21:07
sommertalking about the docs?21:07
lamont(reverse zones tend to have PTR RRs to be useful, forward zones tend to have A and/or AAAA RRs as well as other stuff)21:07
lamontyes21:07
lamontoverview, final para21:07
sommeryeah, that line was in the original doc, which wasn't very good21:08
sommerthanks, I'll reword that21:08
* lamont has come to hate the title "caching nameserver", despite it's ubiquitous use.21:08
lamontall nameservers cache21:08
lamontsome nameservers are authoritative21:08
sommerheh, why sounds like it will give you money :-)21:08
lamontsome nameservers will accept recursive queries.21:08
lamontsome do all 321:09
sommershould that section be renamed?21:09
lamontdunno21:09
lamontthey're the terms everyone expects...21:09
sommerya, I referred to the DNS howto for a lot of that info21:09
lamont"caching only nameserver" is a common term, which means a nameserver that is only authoritative for 0.0.127.in-addr.arpa, localhost, and friends.21:10
sommerI'll mention that you can do all three types on one server21:10
lamontyeah.  my nameserver, for example, is primary for a bunch of zones, and secondary for a few others21:11
sommercool, thanks for the feedback lamont21:14
sommerI appreciate it21:14
lamont(and allows recursion from the home network, too)21:14
=== cjwatson_ is now known as cjwatson
sorenmok0: You pang me (much) earlier?22:40
mok0soren, still there?23:01
sorenmok0: I was *just* about to leave.23:01
mok0soren: I just wanted to discuss with you my bug 20064823:01
ubotuLaunchpad bug 200648 in kvm "guest machines falls behind time" [Undecided,New] https://launchpad.net/bugs/20064823:01
sorenmok0: Waaay too tired. Sorry :)23:03
mok0soren: np23:03
* soren heads to bed23:03
mok0see you later!23:03
owhAfter supplying the patch for the ntp bug with the kind assistance from kirkland, I'm looking at the qa-hardy-server list: https://bugs.launchpad.net/ubuntu/+bugs?field.tag=qa-hardy-server and all that is left is a long running bug about cups-pdf. Bug #147551, posted 1 Oct, 2007. I'm not sure it even has a good description, let alone a handle on what's causing it.23:15
owhHmm, the bot didn't pick up the bug: https://bugs.launchpad.net/ubuntu/+source/cupsys/+bug/14755123:16
owhAny ideas?23:17
mok0owh: looks complex23:21
owhThey always do, but I've found that most of the time, the fix is a single line - the trick being to find that line :)23:22
owhMore than anything, there appears to be a lot of noise in the bug.23:22
mok0owh: there's a fix in a comment from 2007-12-0623:23
mok0owh: yeah, hard to see if it's just a configuration error23:23
mok0owh: can you reproduce it?23:24
owhNo, I'm not seeing anything like that. And I don't see aa-complain in my packages list either. Not sure where it's from yet.23:24
owhSoh, I read: sudo aa-complain cupsd as sudo apt-get install aa-complain - not sure what my brain is up to this morning :)23:26
owhs/Soh/Doh/23:26
owhAh, a bit of RTFM with aa-complain, it doesn't fix it, just hides the error in the syslog.23:27
mok0hm23:27
sommerowh: aa-complain is part of apparmor23:27
owhYeah, my brain wasn't reading what the screen said :)23:28
owhI'm reading https://bugs.launchpad.net/ubuntu/+source/cupsys/+bug/152537 which appears to be the same bug.23:28
mathiazowh: it's a long bug and boils down to non-standard configuration for users.23:28
mathiazowh: most of them have non-standard home directories, or symlinks to somewhere lese.23:29
owhSo, is this a real bug, or a support request?23:29
mathiazowh: hum... good question23:29
mok0mathiaz: there are loads of bugs in Ubuntu related to having your home directory on an automounted nfs share23:31
mathiazmok0: bugs related to AppArmor or bug in general ?23:31
owhmok0: Perhaps that's food for another tag?23:32
mok0mathiaz: various general bugs23:32
mok0owh: could be23:32
mathiazbug 147551 is really about cups-pdf, apparmor profile and non standard configuration23:32
owhThe second bug I showed seems to start in the same place, but travels to a different destination.23:32
owhI'm beginning to think that it's a support request.23:32
mok0owh: yeah23:32
owhNot that there's anything wrong with that, but we cannot come up with a patch for it :)23:33
mok0owh: it should be moved to questions23:33
mathiazowh: well - there is a solution in the bug23:33
kirklandowh: mathiaz and I were talking earlier today about getting more of the scripts in /etc/init.d LSB-compliant23:34
mathiazowh: which is to look at the apparmor messages and update the profile for cups-pdf23:34
kirklandowh: seems that many of those scripts are missing a "status"  action item23:34
mathiazowh: there are also some issues in gutsy if the directory is on an nfs share23:34
mathiazowh: kirkland: right23:34
mathiazthat could be another task to look at23:35
owhmathiaz: Specifically related to this bug, or in addition to this bug?23:35
mathiazI've added an item to the ServerTeam Roadmap23:35
kirklandowh: just an item in general, some relatively low hanging fruit, lots of little shell scripting patches23:35
mathiazowh: it's a general tip when debuging apparmor problems23:35
owhmathiaz: You mean, if you have an nfs share directory and you're having apparmour issues - which this cups-pdf bug report looks like, then you're saying, that's a debugging tip?23:36
owhkirkland: Yes, but what output should the "status" call make?23:36
kirklandowh: it should tell you whether or not the given service is running23:37
owhkirkland: Is there a specified format / exit code for that?23:37
kirklandso something like:23:37
kirklandroot@t61p:~/bin# /etc/init.d/ntp status23:37
kirkland * NTP server is running.23:37
kirklandroot@t61p:~/bin# /etc/init.d/apache2 status23:37
kirkland * Usage: /etc/init.d/apache2 {start|stop|restart|reload|force-reload|start-htcacheclean|stop-htcacheclean}23:37
mathiazowh: there is a specific format for the output of the status command IIRC23:37
kirklandNTP has a working "status" section, but Apache does not23:38
mathiazowh: the lsb standard documentation has it23:38
kirklandmathiaz: owh: yes, definitely in the LSB spec23:38
kirklandi can dig that up if you want me to...23:38
mathiazhowever, most of the init script in debian have their own status output :/23:38
owhCool, in my spare life, I'll have a look at that, but meanwhile what do we do about this outstanding qa-hardy-server bug - I know I can remove the tag, that will make it go away :)23:38
kirklandmathiaz: I'll prepare a report of all of the init scripts in a hardy-server install, listing which ones are missing a "status" section by Wednesday's meeting23:39
owhkirkland: I'll give you a hand when I have a mo.23:39
mathiazkirkland: great - it should be that hard to automate23:39
kirklandmathiaz: nope, just an xargs ;-)23:39
owhmathiaz: You mean should not right :)23:39
mathiazkirkland: I've listed in the Roadmap a link to the wiki page in w.debian.org where they track this effort23:39
kirklandmathiaz: ah, nice23:39
owhkirkland: Uh, that's only for the scripts you have installed, not for all of them.23:39
owhkirkland: Unless you're doing something else funky.23:40
kirklandowh: well, i say we target the ones in a Hardy Server install23:40
mathiazkirkland: implementing the status command is the easiest task.23:40
kirklandmathiaz: yes, I agree23:40
kirklandmathiaz: it's also the most useful23:40
mathiazkirkland: defining proper dependencies is harder23:40
owhkirkland: That's only true if you install *all* the tasks I suppose.23:40
mathiazkirkland: I'd start by making a list in main23:41
kirklandmathiaz: it's one of the things i've heard many RH admins complain about when making the switch to Ubuntu23:41
mathiazkirkland: a list from packages in main23:41
mathiazkirkland: agreed23:41
owhAnyone got any issues with me removing the qa tag from https://bugs.launchpad.net/ubuntu/+source/cupsys/+bug/147551, or is there a better way?23:41
mathiazowh: well - I'm convinced we should remove it.23:42
owhAnyone else?23:42
mathiazowh: heu... *not* convinced23:42
owhHuh?23:42
kirklandsubtle difference mathiaz ;-)23:42
owhI'll say :)23:43
mathiazowh: it's an annoying bug that keeps coming over and over23:43
mathiazowh: I'd like to discuss it with pitti23:43
mathiazowh: it's related to cups so it's up to him.23:43
mathiazowh: the reason it's tag with qa-hardy-server is that it's apparmor related and we're "looking" after apparmor23:43
owhFair enough. Is that a self-appointed action item for Wednesday :)23:43
mathiazowh: but we won't have a proper solution on the apparmor side to handle these situation23:44
ubotuLaunchpad bug 147551 in cupsys "cups-pdf fails to generate file when user does not print to default ~/PDF (apparmor vs.cups-pdf inconsistency)" [Wishlist,Confirmed] https://launchpad.net/bugs/14755123:44
* mathiaz waves at ubotu23:44
owhROTFL23:45
owhI wonder.23:45
kirklandmathiaz: what's the best way to get a comprehensive list of packages in main?23:45
owhI have found lots of printed pdf stuff from cups-pdf in /var/spool/cups-pdf. I wonder if the "non printed jobs" are all in there?23:46
owhkirkland: There was an email about that, lemmie have a looksee.23:47
owhAs in, a snippet that gave you the answer.23:47
kirklandowh: lemme have it!23:49
mathiazkirkland: you can grep in a Packages.bz2 file from the apt repository23:49
owhI'm looking, I'm looking.23:49
mathiazkirkland: http://archive.ubuntu.com/ubuntu/dists/hardy/main/binary-amd64/23:49
owhmathiaz: Pah, that's cheating :)23:49
kirklandmathiaz: perfect, thx23:50
mathiazkirkland: you could also have a look at madison and rmadison23:51
mathiazkirkland: you need a package name, but it'll give you the component for the package23:52
owhDoh, I just thought of a better way, one mo.23:53
kirklandmathiaz: so I'll create a VM, install all 5914 packages in main, then `ls /etc/init.d/ | xargs -i {} status > /tmp/out`23:54
kirkland:-P23:54
owhI'm having a little fight with the packages search engine, but I suspect it will submit to my will and give us a list :)23:56
mathiazkirkland: well - considering that you have a local mirror, you could also go through all the packages, list their content and check if they have a init script23:56
mathiazkirkland: dpkc -c .deb23:57
owhOh, loveley, the search engine is giving responses, but there is no standard name for the init.d script :)23:57
kirklandmathiaz: that's just what I was doing23:57
mathiazkirkland: dpkg -c .deb23:57
kirklandinstalling 5900 packages in a VM was a joke23:57
owhI think we got that :)23:57
mathiazkirkland: that way, you could even have a list of universe and another one for main23:57

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!