[00:00] <oly562> lol
[00:00] <oly562> none is better than the other
[00:00] <owh> oly562: No, the problem is that you continued after an error happened.
[00:01] <owh> oly562: You noticed that there was more than one work-around?
[00:01] <oly562> not really owh
[00:02] <oly562> no. i havent
[00:02] <hads> dpkg works
[00:03] <oly562> i noticed there are errors also with cpan and perl
[00:03] <oly562> cant even launch cpan now
[00:04] <oly562> wierd, when trying to load alien it synap pointed to cdrom when usually it goes to universe or main
[00:04] <oly562> still getting used to sources with ubuntu and synap
[00:05] <oly562> by the way, xaos runs fine. its just that now i cant load new progs w/o errors, let along kernel upgrades
[00:05] <oly562> when its time to that is
[00:05] <oly562> owh:  what did you see as other workround?
[00:05] <oly562> thanks
[00:06] <hads> Mixing packages, rpms, cpan etc. is a good way to break things
[00:06] <oly562> you referring to Errno.pm?
[00:06] <oly562> yah agrees
[00:07] <oly562> i was going to take rpm with alien and convert adobereader.rpm to .deb, since thier site consistantly doesnt let us download the .deb
[00:07] <oly562> i knew i should have used a zigzag
[00:07] <oly562> shrugs
[00:08] <oly562> so people, if this was your box, with the pastebins i gave out, what you would do first? thanks "_
[00:08] <oly562> :)
[00:11] <oly562> if you dont know, thats ok, ill figure it out eventually, just thought i would give you guys a shot
[00:12] <owh> oly562: I'd fix the thing that broke first.
[00:14] <hads> Remove the stuff you installed that isn't from official repositories.
[00:37] <MatBoy> wow, I have a ubuntu iscsi target on a celeron D laptop with a 250GB sata drive attached using a conceptronic sata=> usb controller :P
[00:37] <MatBoy> how fun
[00:54] <usta> Jan 16 02:52:05 mail postfix/postdrop[6399]: warning: mail_queue_enter: create file maildrop/765735.6399: Permission denied
[00:54] <usta> can anyone help me how can i solve ?
[00:59] <MianoSM> usta: change the permissions
[01:00] <oly562> im back
[01:00] <oly562> hads: what do you mean, offical
[01:01] <oly562> how will i be able to tell the difference betw universe and 3rd party
[01:01] <oly562> whats the path , ill have a look
[01:02] <oly562>  /var/lib/dpkg/info?
[01:02] <xp_prg> anyone good at httpd.conf config on apache2 here?
[01:02] <oly562> yep xp_prg but i have my own issue at present
[01:02] <hads> I mean; Mixing offcial packages, randomly converting rpms, using cpan etc. is a good way to break things
[01:02] <hads> Stick to the official repositories if you don't want to break things.
[01:03] <oly562> i never mixed packages
[01:03] <oly562> i did nothing randomly
[01:03] <oly562> cpan was required by other programs
[01:03] <oly562> but i do agree, it will break things
[01:03] <oly562> also, offical packages didnt support my vid card
[01:03] <oly562> nor my wireless card
[01:03] <oly562> nor my sound devices
[01:04] <hads> I thought this was a server?
[01:04] <oly562> no linux has it all "offically"
[01:04] <oly562> dont be a dork hads. im not new to nix k. there is no difference between a server and desktop in linux
[01:04] <oly562> maybe to you, but not to me
[01:04] <hads> *shrug*
[01:04] <oly562> linux is linux period
[01:05] <oly562> its 3% of any distro
[01:05] <oly562> where everything is put and packages is all gnu to me
[01:05] <oly562> like i said, yum, rpm, dpkg, whatever, it all breaks at some point
[01:06] <oly562> i didnt break things, the package managers do
[01:06] <oly562> cpan doesnt break things, the programs that call on them do
[01:06] <oly562> good grief
[01:07] <oly562> server/desktop doesnt matter, you should know that
[01:07] <owh> oly562: We try very hard not to make apt break *ever*. If you can break it, only using apt, then you have found a bug.
[01:07] <oly562> thats that happened then, and typically that is always the case for me
[01:08] <oly562> like i said, im new to ubuntu and how it reports things, so forth
[01:08] <oly562> i been using apt-get the whole time, and still this happend. i know to use the "preferred" method per distro and flavor
[01:08] <oly562> still happend. so im here to try and figure it out
[01:08] <oly562> get some clues
[01:10] <oly562> i guess synap doesnt report enough information to figure out whats going on, right off the bat, rather, as usual, ill have to dig and dig, deep into the scripts and see whats going on, deal with the set -e stuff, see where ubuntu puts everything. i like it so far, but these problem is pissing me off.
[01:11] <oly562> yet again, i see no real reason to switch from distro to distro for just a few things, rather i should stick with what i know, and as for apt, its not that special. i actually prefer yum to it. maybe i was just used to it, but there really isnt much difference
[01:11] <oly562> yet another package manager lol
[01:12] <oly562> where are things stored on here
[01:12] <oly562> like info
[01:12] <oly562>  /var/lib...../info
[01:12] <oly562> thats a good directory to look in
[01:12] <oly562> postinst, and .prerm
[01:13] <oly562> so forth
[01:13] <oly562> these are what i mean by clues, this is what i mean, where you all look at first....
[01:13] <oly562> where does ldconfig fit in here
[01:15] <oly562> what the heck does this mean in var/log/message
[01:15] <oly562> Jan 15 15:51:14 pluto -- MARK --
[01:15] <oly562> Jan 15 16:11:14 pluto -- MARK --
[01:15] <oly562> Jan 15 16:31:14 pluto -- MARK --
[01:15] <oly562> Jan 15 16:51:14 pluto -- MARK --
[01:15] <oly562> Jan 15 17:11:14 pluto -- MARK --
[01:16] <oly562> i just found /var/log/crash, looks interesting
[01:16] <jmarsden|work> oly562: man syslog and see the -m option
[01:16] <jmarsden|work> s/syslog/syslogd/
[01:16] <oly562> k
[01:16] <oly562> no man syslog
[01:17] <jmarsden|work> s/syslog/syslogd/
[01:17] <oly562> sudo man?
[01:17] <oly562> nope
[01:17] <jmarsden|work> man syslogd
[01:17] <oly562> aw... thats what i though
[01:17] <oly562> thanks
[01:17] <oly562> ic. thanks
[01:17] <jmarsden|work> np
[01:17] <oly562> i never seen something like that b4 in messages
[01:18] <oly562> i like these little .crash files. nifty
[01:18] <oly562> has all the progs i was referring to
[01:18] <oly562> that errored out
[01:19] <oly562> is Package: xaos 3.2-7ubuntu1 an "offical" package?
[01:19] <oly562> yesh.... Log started: 2009-01-05  10:54:50 long time ago
[01:20] <oly562> bunch of previous "deselected" libs
[01:21] <oly562> i had thoughts about loading this file when it asked for them... dammm   gstreamer0.10-plugins-bad
[01:21] <oly562> interesting...... check this line out
[01:21] <oly562>  Errno architecture (i486-linux-gnu-thread-multi-2.6.15.7) does not match executable architecture (i486-linux-gnu-thread-multi-2.6.24-14-server) at /usr/local/share/perl/5.8.8/Errno.pm line 11.
[01:21] <oly562>  Compilation failed in require at /usr/sbin/install-info line 304
[01:21] <oly562> i saw that each time
[01:21] <oly562> in synaptic
[01:23] <oly562> hmm... interesting, points to a lock file
[01:23] <oly562>  300 if (!$nowrite && !link($dirfile, "$dirfile.lock")) {
[01:23] <oly562>     301     printf( STDERR _g("%s: failed to lock dir for editing! %s")."\n",
[01:23] <oly562>     302             $name, $! );
[01:23] <oly562>     303     printf( STDERR _g("try deleting %s?")."\n", "$dirfile.lock")
[01:23] <oly562>     304         if $!{EEXIST};
[01:23] <oly562>     305     exit 1;
[01:23] <oly562> unless im reading that wrong
[01:24] <Deeps> someone posted bug 316013 earlier, did you see that?
[01:24] <uvirtbot`> Launchpad bug 316013 in util-linux "apt-get dist-upgrade failed - architecture (i486-linux-gnu-thread-multi-2.6.15.7) does not match executable architecture (i486-linux-gnu-thread-multi-2.6.24-14-server)" [Undecided,New] https://launchpad.net/bugs/316013
[01:24] <oly562> i been doing everything as sudo
[01:24] <oly562> i looked at that bug, i dont see it.. any clues?
[01:25] <jmarsden|work> oly562: rmadison -s hardy xaos # suggests that xaos 3.2-7ubuntu1 is indeed official.
[01:25] <oly562> k
[01:26] <Deeps> did you read the comments? there are several workarounds listed that may work
[01:26] <oly562> Deeps: i saw it
[01:26] <Deeps> well, where 'several' is 2
[01:26] <oly562> and why dont you say what i should do, as im not good at reading about bugs
[01:26] <oly562> i dont see the link there
[01:26] <oly562> im using Generic kernel
[01:27] <oly562> if you just popped in a search for Errno.pm yadda, it points to a lock file, and i commented earlier if i should do that. i dont see how that will have any effect
[01:27] <oly562> or error status 9
[01:27] <owh> oly562: What if you actually do what the work-around suggests?
[01:28] <oly562> which is.... modify the errno.pm
[01:28] <oly562> ?
[01:29] <jmarsden|work> No, it is to get the Errno.pm from under /usr/local/share out the way so Perl uses the real one.
[01:29] <oly562> ic
[01:29] <Deeps> with a link that explains to an article that explains why you should do the move, and what you did to cause the problem in the first place
[01:29] <oly562> i dont see what i did in the first place... sighs
[01:30] <oly562> you think i did a an upgrade attempt?
[01:30] <jmarsden|work> Read the bug report, and then read http://www.debian-administration.org/users/simonw/weblog/201 which it links to...
[01:30] <Deeps> http://www.debian-administration.org/users/simonw/weblog/201 is linked from the bug report, incase you missed it
[01:30] <hads> That article has some familiar advice.
[01:30] <oly562> Deeps: thanks
[01:30] <oly562> yah, i havent worked with bugs that much, prolly time i dove into those things
[01:31] <Deeps> oly562: i guess you haven't used forums much either then
[01:31] <Deeps> oly562: or mailing lists i guess
[01:31] <oly562> nope
[01:31] <oly562> not at all
[01:31] <hads> Or reading.
[01:31] <Deeps> oly562: have you used the internet before now?
[01:31] <oly562> i learned it all by myself
[01:31] <oly562> Deeps: go play with some one who is clueless, at least i admited something. cant say that for most people
[01:31] <owh> oly562: We generally cannot (or will not) fix problems you are having. We can guide you to fixing your own problems. If you come across a specific actual bug, then you can lodge the bug-report and if we can reproduce it, we can attempt to fix them. #ubuntu-server isn't your personal helpdesk - most here are volunteers.
[01:32] <Deeps> oly562: i'm doing precisely that, and realised i shouldn't. gl, nn.
[01:32] <oly562> owh: right
[01:32] <oly562> like i need to hear all that
[01:32] <oly562> i bet you think its your personal helpdesk
[01:33] <oly562> please, dont anyone be all double standard with me, i can easily prove this
[01:33] <oly562> save that shyt for the noobs
[01:35] <oly562> ill be reading the links. thanks, but no thanks for the rest of the crap you just said
[01:35] <owh> oly562: This is a PG channel and you are waaaay out of line IMHO.
[01:35] <hads> Seconded
[01:36] <hads> http://www.ubuntu.com/community/conduct
[01:41] <oly562> both of your opinions are meaningless to me, as you are attacking me. put yourself in my shoes. you wouldnt just sit idle. again, double standard
[01:42] <oly562> matter of fact, dont comment to me again, you points have been noted
[01:42] <oly562> i dont need "your kinda of help"
[01:43] <owh> Is there an "elegant" way to put PHP libraries into a central location, or am I just going to have to chuck them all in /usr/share/php/*
[01:44] <oly562> does anyone ELSE know how to remove cpan that was installed by perl?
[01:44]  * owh points out that the libraries are *not* packaged - yuk - but you get that :)
[01:49] <oly562> welp, i fixed my issue. good grief. that was easy. all my packages that had issues works now. welp, im out, Njoy
[01:52] <hads> You're welcome
[01:55] <owh> hads: Huh? - Oh you're replying to someone I put on /ignore :)
[01:57] <hads> owh: heh good idea, he's gone now.
[01:57] <owh> More bile?
[01:58] <peepsalot> my server is really screwed up and I don't know why.  i get a segfault when i run sudo
[01:59] <peepsalot> i was editing cups config using the web admin pages, and then it stopped serving up the pages.  i tried to restart cups, and segfault, i tried to update repo and segfault... i don't know what is going on
[02:01] <peepsalot> i guess i shoulda used LTS
[02:05] <peepsalot> anyone alive in here?
[02:06] <peepsalot> would you guys recommend LTS server instead of 8.10?
[02:06] <hads> I would, you shouldn't get segfaults on either though.
[02:07] <peepsalot> i found this issue: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/278617
[02:07] <uvirtbot`> Launchpad bug 278617 in samba "login crashed with SIGSEGV in dump_core() (dup-of: 260687)" [Undecided,New]
[02:07] <uvirtbot`> Launchpad bug 260687 in samba "Purging samba breaks login (pam_smbpass.so segfaults)" [High,Fix released]
[02:07] <peepsalot> i think it's related
[02:08] <hads> Sounds like it.
[02:09] <hads> Do you have libpam-smbpass installed?
[02:09] <peepsalot> yes
[02:10] <hads> Are you at the console or remote? Sounds like you need to fix from single user mode.
[02:10] <peepsalot> well the server is in the same room as me, but it's currently headless, and I'm logging in remotely.  i guess I gotta attach a monitor again
[02:11] <hads> Follow the advice in that bug report (bug 260687) and you should be right
[02:11] <uvirtbot`> Launchpad bug 260687 in samba "Purging samba breaks login (pam_smbpass.so segfaults)" [High,Fix released] https://launchpad.net/bugs/260687
[02:12] <peepsalot> i hope this sort of thing is not going to be a common occurance, this server has not even been up a week, and this is the second day I've had a chance to touch it.
[02:12] <peepsalot> and it's totally unusable
[02:12] <hads> Shouldn't be.
[02:36] <peepsalot> goddamnit it was working, and I go to admin cups and it's broken again
[02:37] <peepsalot> this is the most ridiculous crap i've ever seen
[02:37] <peepsalot> as soon as I add a printer everything breaks
[02:38] <peepsalot> actually, as soon as I do anything that involves entering my password through the cups web interface.
[02:47] <peeps[ur]> t
[02:48] <peepsalot> hads, do you know if this bug affects only 810?
[02:48] <peepsalot> 8.10
[02:49] <peepsalot> or am I going to have the same nightmare after i spend another couple hours downgrading OS versions
[02:59] <peeps[ur]> agh i keep losing connection
[03:00] <peepsalot> i don't know what I should do, my server is unusable
[03:26] <uvirtbot`> New bug: #317740 in mysql-dfsg-5.1 (universe) "package mysql-server-5.1 5.1.30-2ubuntu3 failed to install/upgrade: subprocess post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/317740
[03:27] <owh> peepsalot: Did you read the comments and the work-around in the bug that hads showed you>
[03:27] <peepsalot> owh, yes I did the workaround at the end of that bug, and then as soon as I used cups webadmin again, the bug came back
[03:28] <peepsalot> i guess i don't need that package though, so I left it uninstalled this time, and I guess it's ok for now
[03:29] <peepsalot> i'm not entirely clear what that package is for
[03:29] <owh> peepsalot: Uhm, cups web-admin doesn't install new authentication stuff after it has been installed that I know of. Are you talking about having done this: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/278617/comments/2
[03:29] <uvirtbot`> Launchpad bug 278617 in samba "login crashed with SIGSEGV in dump_core() (dup-of: 260687)" [Undecided,New]
[03:29] <uvirtbot`> Launchpad bug 260687 in samba "Purging samba breaks login (pam_smbpass.so segfaults)" [High,Fix released]
[03:29] <owh> peepsalot: The action in comment # 2.
[03:30] <peepsalot> no i did this: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/260687/comments/21
[03:33] <owh> So, did that fix it?
[03:34]  * owh has to leave. Later all.
[04:07] <peepsalot> does ubuntu server automount usb drives?
[04:13] <_Cid> peepsalot:  didnt for me
[04:14] <_Cid> peepsalot:  well..define auto mount I guess ....I had to configure it once, now it looks for it
[04:14] <peepsalot> on ubuntu desktop it automatically puts a directory in /media and mounts to it.  does not appear to happen in ubuntu server
[04:19] <MianoSM1> .
[05:09] <kirkland> nijaba: do you think you could add another entry to screen-profiles-helper, that would add/remove a line to the user's ~/.screenrc, that would set the escape sequence?
[05:09] <kirkland> nijaba: let them enter one character, and do it for them?
[07:20] <uvirtbot`> New bug: #301954 in amavisd-new (universe) "/var/log/mail.log spammed with amavis error messages" [Undecided,New] https://launchpad.net/bugs/301954
[07:28] <zsolty_>  Hello, I have a problem with Remote Desktop. From Windows I can't connect to my Ubuntu box. In windows I am using realvnc. Can somebody guide me in the right direction? :)
[08:52] <kraut> moin
[09:18] <PC_Nerd> Hi,  Im about to purchase a server to run 8.10 on, and wanted an opinion if its better to have 1x2GB ram or 4x512 which is more expensive?
[09:18] <ikonia> PC_Nerd: that sounds like home PC
[09:18] <ikonia> PC_Nerd: that's also a hardware question which I suggest you take to #hardware as it will depend on your motherboard
[09:19] <PC_Nerd> ah ok. thanks ( itll be from dell, and they dont have the greatest explanations on hardware for servers)  Ill ask in #hardware
[09:19] <ikonia> PC_Nerd: why not pickup the phone and talk to dell
[09:20] <ikonia> PC_Nerd: they support their own hardware quite well, especially on the server platform
[09:21] <PC_Nerd> Yup ill do that - wanted an "ubuntu" related opinion first, since the person I was talking to was "distribution? we do offer linux (foudn out it was RH enterprise)
[09:24] <temudjin_> ...hi guys
[09:38] <ikonia> PC_Nerd: ubuntu opinion doesn't matter as it's hardware specific
[09:41] <PC_Nerd> Ok, understood.  I'm not exactly a hardware person, so I thought that maybe in terms of ubuntu server being built for server use, that an optimised hardware might make a lot of difference.... but aparently not ;)
[09:42] <PC_Nerd> The other thing, is if I boot from a USB, cna I format that USB drive back for normal disc usage ( moving files etc?)
[13:40] <frippz> I'm going to create a VM with JeOS 8.10 that will only run a proftpd server. would 256MB RAM suffice?
[13:42] <sommer> frippz: I'd think so
[13:42] <frippz> sommer: great thanks
[13:42] <Deeps> depends on the type of operations happening on your ftp server
[13:42] <frippz> very few users
[13:43] <Scix> how can i get DHPC3-SERVER to randomly assing a hostname?
[13:43] <frippz> in the time we've had a dedicated machine, there's only been two concurrent users logged on :D
[13:43] <Deeps> can probably get away with even less then
[13:44] <frippz> hmm, now that I think about it. it will be running samba as well
[13:44] <Deeps> it's useful to have lots of ram if you have say 30 users all downloading the same batch of files simultaneously - keeps the files in memory instead of reading from the disk
[13:44] <frippz> ah
[13:45] <frippz> I might be running webmin off it as well to allow other users in the office add customer accounts
[13:45] <frippz> but it will still be very rarely used
[14:04] <uvirtbot`> New bug: #317734 in mysql-dfsg-5.0 "mysql initscript fails" [Undecided,New] https://launchpad.net/bugs/317734
[14:14] <heath|work> how can I list mounted devices by their UUID?
[14:14] <Scix> is there a way get DHCP3-SERVER to automaticly apply a hostname for a computer if nostname is not set
[14:14] <Scix> using preseeding over ethernet, and has to get the system to work totaly of-hands
[14:15] <Scix> thinking of a automaticaly randomly generatet hostname
[14:15] <Scix> this whay i dont have to make 200 hostgroups in dhcpd.conf
[14:47] <apachelogger> zul: pling... do you mind if I change mysql-5.1's rules to use cmake instead of autotools? if not:: does it have any known disadvantages?
[14:47] <zul> why do you want to change it?
[14:49] <apachelogger> zul: because cmake got better structure, is faster and is just fun to work with
[14:49] <apachelogger> + it got progress indication ;-)
[14:50] <zul> I do mind actually since either mathiaz or I would be doing the merge but if you want you can submit a patch to debian and see what they have to say about it
[14:51] <apachelogger> sensible
[15:40] <Scix> how can i generate a incremental string
[15:42] <Scix> I must have something who can genrate a unique string for option host-name in dhcpd.conf
[15:42] <Scix> and binary2ascii fails
[15:53] <frippz> damn it! a kvm xml-file got "accidentally" overwritten. is there anyway to generate a new one based on the machine runnning?
[15:54] <sommer> frippz: not sure, but you might look into virsh define
[15:54] <Nafallo> dumpxml even
[15:54] <sommer> frippz: on second thought, that's probably not going to work
[15:55] <Nafallo> frippz: virsh dumpxml <hostname>
[15:55] <sommer> frippz: if the vm is still running you could probably copy the xml file from another vm and update the mac address from the running one
[15:55] <sommer> frippz: and any paths to the image file, etc
[15:56] <sommer> or dumpxml :-)
[15:56] <frippz> Nafallo: you're a damn genius! :D
[15:56] <frippz> I was looking in that list, but never saw dumpxml
[15:56] <frippz> thanks a million
[15:57] <Nafallo> nw, but I really wasn't the one implementing dumpxml. credits not due in my direction :-)
[15:57] <frippz> well, you're a damn genius for pointing me in the right direction when my brain farted out :D
[15:57] <Nafallo> hehe. fair enough :-)
[15:59] <frippz> and now to find out why the damn xml-file got written over in the first place. I need an after work beer :)
[16:00] <frippz> yup, forgot to change hostname in the cfg... god, I need to leave the office
[16:10] <MatBoy> how is gfs supported on ubuntu ?
[17:59] <MadChopr> i have a mobo with two ethernet ports, one should connect to the outside world (like it's doing currently) and the other should never talk t the outside world at all nor should the outside world talk to it.  is this possible?
[18:00] <Deeps> yep
[18:00] <MadChopr> and how would i set thiis up; currently one ethernet port is set to dhcp, and i'd like the other one to be static (10.0.0.10 or something)
[18:00] <MadChopr> Deeps: can you give me a quick run down on how i'd do this?
[18:00] <Deeps> lets start with the interfaces file
[18:00] <MadChopr> /etc/if ?or somehing
[18:01] <Deeps> open /etc/network/interfaces in your favourite text editor (nano, pico, vim, gvim, emacs, whatever)
[18:01] <MadChopr> ah okay
[18:01] <MadChopr> open
[18:01] <Deeps> pastebin what you see
[18:01] <Deeps> paste.ubuntu.com
[18:01] <MadChopr> rad, 2secs
[18:02] <MadChopr> http://paste.ubuntu.com/105644/
[18:02] <MadChopr> the bridge is for my virtual machines
[18:02] <Deeps> ah ok
[18:02] <MadChopr> i want some virtual machines on the internal ethernet and some on the extgernal
[18:03] <MadChopr> but i'll deal with those later
[18:03] <Deeps> currently they're on internal or external?
[18:03] <Deeps> external i guess based on what you've said earlier?
[18:03] <MadChopr> the second ethernet port isn't configured at all from what i can tell.. and the primary one is currently on the internet (which is fine)
[18:04] <Deeps> ok
[18:05] <Deeps> presumably your second interface is eth1, you can confirm this with ifconfig -a | grep Ethernet
[18:05] <MadChopr> 2secs
[18:06] <MadChopr> looks like it, i can paste what the output is if you like.
[18:07] <MadChopr> er,, i mean it looks like eth1 is the second interface
[18:08] <Deeps> http://paste.ubuntu.com/105645/
[18:09] <_ruben> ok .. this is weird .. my usenet downlaoads slowed to a crawl and when looking with tcpdump i see all packets are ~100 bytes and a tcp win of  50-150
[18:09] <MadChopr> no gateway needed, small network.. 8 computers..
[18:10] <MadChopr> Deeps: pasted that all into my /etc/network/interfaces file
[18:11] <MadChopr> how do i restart network?  like... xinetd ihup or osmething?
[18:11] <Deeps> you can simply ifup eth1
[18:11] <MadChopr> rockin'
[18:12] <MadChopr> how do i get it so that there is not possible for one to talk to the other.. i don't want any pesky hasks0rs on my computers
[18:12] <Deeps> iptables
[18:12] <Deeps> or ufw
[18:12] <Deeps> ufw may be better
[18:12] <Deeps> !ufw | MadChopr
[18:12] <MadChopr> yea, i been using this ufw thing
[18:13] <Deeps> block input from your lan ip range on eth0, block input from anything but your lan ip range on eth1
[18:13] <MadChopr> awesome that makes sense, i don't know why my brain couldn't conceive of that on it's own.
[18:14] <MadChopr> so if i got peoples socials and credit cards n the other side.... i should be alright as long as i keep the system updated, correct?
[18:15] <Deeps> well you shouldn't keep any of that in plain text
[18:15] <Deeps> as there's always the risk that your internet facing machine can get compromised
[18:15] <Deeps> then leading the way into your lan
[18:16] <MadChopr> gotcha
[18:16] <Deeps> never store sensitive data in plain text
[18:17] <Deeps> the iptables stuff simply reduces the risk of ip spoofing based attacks
[18:17] <Deeps> i.e. someone on the internet attempting to spoof their ip to appear in your lan ip range to bypass any potential firewalling
[18:18] <Deeps> ideally, you'd store this data on a machine that has no direct route to the internet
[18:18] <genii> ssh hopscotch in or so
[18:18] <Deeps> better would be offline entirely, but thats a bit impractical
[18:18] <Deeps> indeed
[18:19] <MadChopr> Deeps: i see i see... interesting
[18:19] <MadChopr> ssh hopscotch... like reverse forwarding or somesuch?
[18:19] <Deeps> as in, if you need to access the system from remote
[18:20] <Deeps> ssh into another machine that is internet facing
[18:20] <Deeps> and then from there access the target system with your socials and cc's
[18:20] <Deeps> via ssh or however
[18:20] <MadChopr> Deeps: the machines are all offline right now -- i don't want them to have access online, or have online to access them.... i was hoping the ufw would handle my worries.  i'm not sure the data is in plaintext, nor am i sure if it's encrypted at all... we run peachtree accounting
[18:20] <Deeps> the harder it is for you to access the machine, the harder it is for someone else to find their way in
[18:21] <MadChopr> okay, i think you what you said makes sense.
[18:21] <Deeps> by 'offline' i mean completely detached from any network
[18:21] <Deeps> by 'no direct route to the internet', i mean you cant access the internet at all from it, nor can anyone on the internet connect to the machine
[18:22] <MadChopr> yea, that's how they are now.... (well they are networked together, but not connected to the internet physically... i wuold like change that to make back-ups easier.
[18:22] <jdstrand> doing 'ufw enable' will deny incoming connections. it does not do egress filtering atm (but it's easily added to /etc/ufw/*.rules (see the NOTES section in the ufw man page)
[18:22] <Deeps> instead having an intermediary machine that is connected to both the sensitive machines and the internet, and doing the work from there
[18:23] <Deeps> ofc if that's all fully scripted and automated, then you're still at risk if the intermediary gets compromised
[18:23] <MadChopr> Deeps: .. understand... maybe something like that demilitarized zone i've read about?
[18:23] <Deeps> alternatively, have a proxy server running on the intermediary that the lan machines can connect through for internet access
[18:23] <Deeps> no, DMZ means all inbound ports allowed to that ip
[18:24] <MadChopr> ah okay
[18:24] <MadChopr> Deeps: i need to take a minute and go help someone out; bbiab
[18:24] <Deeps> a proxy server on your intermediary is probably the 'best' solution, balancing security with usability
[18:25] <Deeps> lan clients are fully shielded from the internet, and can only access what you allow in your proxy configuration
[18:25] <Deeps> (IMO)
[18:36] <MadChopr> Deeps: rad, thank you for the insight.
[18:37] <MadChopr> i do have a spare  box i can turn into an intermediatary
[18:58] <slicslak> anyone here with any fiber optics experience (or knowledge)?  I have a stupid question.  is there any speed difference between 10-gigabit copper ethernet and 10-gigabit fiber optic ethernet?
[19:01] <slicslak> related to that, for those of you using nfs storage arrays, generally speaking, have you found gigabit ethernet to be fast enough?  or have you found a situation where you wanted/needed to go 10-gigabit
[19:01] <slicslak> ?
[19:01] <Nafallo> fiber optics yes, cx4 no :-)
[19:06] <slicslak> heh, any reasons why?
[19:10] <simplexio> depends how big raid array you have behind ethernet
[19:11] <Nafallo> slicslak: any reasons why what? :-)
[19:12] <slicslak> this is for a web cluster.  10GB of data is being stored on a sun ZFS storrage array for some 150 websites.
[19:13] <slicslak> I'm thinking about also storing the database files on the storage array as well.  so it would be both web and db servers access the array.  so i'm wondering if gigabit ethernet is enough, and if not, do i go copper or fiber with the 10GbE?
[19:14] <slicslak> Nafallo, reasons why you prefer the fiber over cx4?  is it because of copper vs fiber, or is it just the cx4 standard you don't like?
[19:15] <Nafallo> slicslak: cx4 is quite new and the lengths you can use it isn't that good.
[19:16]  * slicslak nods
[19:16] <slicslak> i'm not going to need anything over 10m
[19:16] <genii> copper transmission quality degrades substantially the further it has to go. Also it's prone to emf interference
[19:17] <Nafallo> are you sure you'll need 10Gbps for what you're doing?
[19:17] <chmac> What's the best way to set the noop scheduler as the default? /etc/sysfs.conf? Add elevator=noop to grub?
[19:21] <slicslak> Nafallo, no, I'm not sure at all.  In fact I suspect that gigabit will be enough.  But I have been asked about faster options, and so am researching.  Unfortunately there is not published on the topic, especially for real world situations.
[19:21] <slicslak> so if anyone has expereince with heavy traffic NFS solutions I'm interested!
[19:23] <Nafallo> slicslak: not that I know how your network is cobbled together, but might bonding be an option?
[19:24] <slicslak> Nafallo, this is a new expansion, so we can go in any direction
[19:24] <Nafallo> slicslak: right. so you're not having a set list of hardware at all then?
[19:25] <Nafallo> cause of course... that /would/ play a part in the whole.
[19:25] <Nafallo> :-)
[19:26] <slicslak> :)  ya.  http://www.sun.com/storage/disk_systems/unified_storage/7110/  is the only confirmed purchase so far
[19:26] <slicslak> it's their new zfs based storage array.
[19:27] <slicslak> good point about bonding.  we should do that anyway.  all the servers will at least have two gigabit NICs on them.
[19:27] <Nafallo> hmm. 2TB and you're going to use 10GB? :-)
[19:28] <slicslak> room for expansion.  and iterative backups.  :)
[19:28] <slicslak> incremental that is
[19:28] <Nafallo> could say that... :-P
[19:28] <Nafallo> 1.990TB for backups ;-)
[19:29] <Nafallo> hmm
[19:29] <Nafallo> how many servers?
[19:30] <Nafallo> cause if that one have 4x1Gbps... would it be worth trying cross connections from each server? :-)
[19:30] <slicslak> not sure yet.  the more we have the more requests will be split up among them so the less each has to serve.  until one of the sites get's slashdotted (or similar).
[19:31] <Nafallo> :-)
[19:32] <slicslak> i think we'll build this cluster with the default gigabit ethernet and then profile it and make further decisions from there.  can always add cards later.
[19:32] <slicslak> thanks for the help!
[19:33] <Nafallo> yea. that sounds like a good plan :-)
[19:33] <Nafallo> no worries. was just about to say that I've ran out of ideas based on the information anyway ;-)
[19:33] <Nafallo> websites are usually not very heavy though :-)
[19:33] <Nafallo> unless they are "spetial" ;-)
[19:36] <chmac> I'm trying `cryptsetup luksClose blah` and getting device busy. lsof /dev/mapper/blah reveals nothing. Any other things I can try?
[19:36] <simplexio> all 4 ether port bonded to on 48 port gigbit ether switch + few webserver to handle all 150 websites
[19:36] <chmac> I've deactivated all the lvm volumes within the luks partition
[19:37] <chmac> Darn, I was trying to unmount my running system's encrypted wrapper! Working now that I use the correct device. :)
[19:38] <simplexio> chmac: you using encrypted stuff, any experince from software raid5 plus dm_crypt ?
[19:38] <chmac> simplexio: Alas not. I use dm_crypt on my laptop. It's supported in the installer, so I know virtually nothing about it :)
[19:39] <simplexio> ok.. i have allready decited to buy 4x1.5T seagate hdd, im just pondering which is "optimal" configuration
[19:40] <simplexio> is it 3 hdd in raid5 or 4 in raid5
[19:40] <Nafallo> simplexio: how much storage do you need and for what purpose?
[19:41] <simplexio> Nafallo: backup and "Family videos"
[19:42] <simplexio> i was thinking at one point that i would use those disk as shared /home/ on all linux computers what i have in lan
[19:43] <Nafallo> simplexio: so maximum storage. that would be RAID5 indeed. now the next question would be, what would you do if one breaks? :-)
[19:43] <Nafallo> simplexio: having a cold spare sitting, or using one of them as a hot spare, which means loosing 1.5TB on the volume :-)
[19:43] <simplexio> Nafallo: i hope that i dont loose more disks
[19:44] <simplexio> that is my problem, i mean with 4 disk its allmous same to go raid10 if i left one spare
[19:45] <_ruben> having one box for both storage and backups .. sounds, well, odd .. yet "common" :)
[19:45] <simplexio> if i dont , there is change that i lost all data on raid is little bit bigger
[19:45] <_ruben> raid10 has far better write performance compared to raid5
[19:46] <genii> I may be nostalgic but still like raid5
[19:46]  * Nafallo would probably have made a 4 disk RAID5 to get extra space :-)
[19:46] <_ruben> i have 2 6 disk raid4's here at home :)
[19:46] <Nafallo> and then a cold spare :-)
[19:46] <_ruben> raid5's
[19:46] <_ruben> 6x200G pata .. 6x250G sata
[19:47] <_ruben> neoughta consolidate those into some 1 or 1.5TB disks based array :p
[19:47] <genii> _ruben: My desktop has two raid1 and a 4 disk raid5   (all crappy WD 1Tb)
[19:48] <simplexio> i have 6 hdd in my desktop, none in raid
[19:48] <slicslak> Nafallo, simplexio, cool, thansk.
[19:49] <simplexio> i have notices that it much nicer to have dev databse in two hardisk, one home disk etc than one big raid0
[19:50] <_ruben> raid0 isnt raid
[19:50] <henkjan> the 0 in raid0 stays for the number of files you get back if one of your disks failes
[19:51] <simplexio> yeah.. it dosnt give any redundancy
[19:51] <_ruben> hehe, yeah
[19:51] <_ruben> and the r in raid is well .. redundant :p
[19:51] <simplexio> henkjan: thats what i use when i think which one was stripping and which one was mirrored
[19:51] <Nafallo> it is raid.
[19:52] <_ruben> Nafallo: how?
[19:52] <simplexio> which remind me to test 4disk raid0 when i get disks
[19:52] <Nafallo> not redundant, but raid :-)
[19:52] <_ruben> rttt
[19:52] <_ruben> err even
[19:52] <Nafallo> well. redundant amount of disks :-)
[19:53] <_ruben> still doesnt compute very well here :)
[19:53]  * Nafallo wonders how he actually got that one together and decides he didn't.
[19:53] <_ruben> hehe
[19:53]  * Nafallo shrugs
[19:54] <Nafallo> it's still called raid0 ;-)
[19:55] <simplexio> its was fun to have 2x120G raid0 in windows. it was fast but i lost 3 times files when another hd started to loose data
[19:56]  * _ruben loves his 4G scsi disk in his P-233MHz .. that thing was blazing fast
[19:56] <ivoks> zul: sorry about that bacula md5 mismatch
[19:56] <zul> ivoks: no big deal
[19:57] <ivoks> zul: i uploaded new version
[19:57] <zul> ivoks: getting it now
[20:02] <zul> ivoks: uploaded
[20:15] <uvirtbot`> New bug: #308903 in bacula (universe) "The bacula-dir.conf file is not present when installing Bacula (dup-of: 269251)" [Undecided,Fix released] https://launchpad.net/bugs/308903
[20:15] <uvirtbot`> New bug: #314746 in bacula (universe) "package bacula-console-qt does not install desktop entry" [Medium,Fix released] https://launchpad.net/bugs/314746
[20:17] <ivoks> zul: our diff against debian is getting really big for bacula
[20:17] <ivoks> i'll try pushing some changes to debian
[20:17] <zul> thanks
[20:26] <luckyone> is there a way to upgrade from feisty to intrepid from the cmd line?
[20:27] <ivoks> yes
[20:28] <ScottK> But not all at once (not a supported way anyway)
[20:28] <ivoks> upgrade to gutsy, then to hardy and then to intrepid
[20:28] <ivoks> :)
[20:28] <luckyone> say I went into /etc/apt/sources.list and :%s/feisty/intrepid and then ran an apt-get update && apt-get dist-upgrade
[20:28] <luckyone> kk
[20:28] <ivoks> but, use do-release-upgrade
[20:28] <ScottK> luckyone: If you were lucky you'd end up with a running system.  You might not.
[20:28] <ScottK> as ivoks says.
[20:29] <luckyone> kk
[20:29] <luckyone> cannot ssh to box yet...
[20:29] <ivoks> you did dist-upgrade to intrepid?
[20:30] <luckyone> still can't ssh to box... fuck
[20:30] <ivoks> you dist upgraded from feisty to intrepid?
[20:30] <luckyone> that was dumb
[20:30] <ivoks> yes :)
[20:31] <luckyone> sorry for swearing in this channel
[20:31] <luckyone> I thought I was in another one!
[20:31] <luckyone> and we have connected, wheew
[20:32] <hads> Your nick suits you today
[20:32] <luckyone> it does everyday - you should see my wife!!!!
[20:32] <hads> :)
[20:32] <simplexio> :D
[20:32] <ivoks> :D
[20:33] <luckyone> to gutsy we go!
[20:35] <luckyone> thank you fellow server admins!
[20:36] <luckyone> again, I apologize for swearing in the channel, I thought I was in another one - honestly
[20:36] <luckyone> I was like, ivoks what are you doing in #freehat?
[20:37] <luckyone> Southron: it is a realy channel that I am in
[20:37] <luckyone> real*
[21:55] <Nafallo> simplexio: http://seagate.custkb.com/seagate/crm/selfservice/search.jsp?DocId=207931 <-- you might want to check up on your 1.5TB drives mate...
[21:56] <alexb2283> i just asked in the main channel, but maybe someone here knows:
[21:56] <alexb2283>  is there any reason for me to keep consolekit & dbus on my console only jaunty server install? consolekit keeps segfaulting (there's tons of bugreports for this, but no fix yet)
[21:57] <alexb2283> i'm merely asking if i would break anything important by purging them
[22:00] <simplexio> Nafallo: yeah. googled it. friend friend has same 4x setup and no problems
[22:00] <Nafallo> simplexio: still worth checking up on it IMHO :-)
[22:03] <simplexio> hmm google 'ST31500341AS firmware' gives many .torrents files
[22:04] <simplexio> have to check current status again
[22:15] <stormblue> Good Afternoon all!
[22:28] <Jeeves_> Evening :)
[22:29] <stormblue> Yeah, it now is evening!
[22:29] <Jeeves_> Well, it was before :)
[22:33] <stormblue> We must be in a different time zones :)
[22:33] <Jeeves_> I guess so
[22:47] <luckyone> hello all
[22:47] <luckyone> I have just gone through several upgrades, one release at a time
[22:48] <luckyone> in the final one, from hardy to intrepid, I am having some problems getting ubuntu-standard processed
[22:49] <luckyone> it seems that atd isn't starting or staying up when I manually start it, so that is preventing the upgrade from totally completing
[22:49] <stormblue> luckyone: what seems to be the issue?
[22:51] <stormblue> What's atd?
[22:52] <alexb2283> i'd say that's an awkward moment
[22:53] <stormblue> Anyone know why I'd get ssh: connect to host 192.168.0.20 port 22: Connection refused sometimes when I try to connect.  It seems like when I restart the client meachine it goes away for a while.
[22:53] <alexb2283> luckyone: have you tried a) checking your logs and b) stracing atd ?
[22:56] <luckyone> stracing?
[22:57] <luckyone> where does atd log?
[22:57]  * hads assumes syslog
[22:57] <alexb2283> luckyone: syslog
[22:57] <alexb2283> luckyone: apt-get install strace && man strace
[22:58] <luckyone> alexb2283: I can't install anything until apt finishes processing my upgrade
[22:58] <luckyone> luckily it is installed
[22:59] <alexb2283> i forgot, sorry
[22:59] <luckyone> I have it, I have run it on atd
[22:59] <alexb2283> it might also help if you pastebinned the output you get when you try dist-upgrading
[23:00] <luckyone> alexb2283: I was hoping someone would offer to look at that :)
[23:00] <alexb2283> there's no promise i can help, but i can try
[23:00] <alexb2283> :P
[23:01] <stormblue> Have you tried ubuntuform.org or google.com for the text output of dist-upgrading?
[23:01] <luckyone> hehe, 2 sets of eyes are better than one
[23:01] <luckyone> http://pastebin.com/d2d1909ed
[23:01] <stormblue> Can someone take a peek at http://pastebin.com/m8754c1c it's my sshd output.  Wondering if anyone has any ideas?
[23:03] <alexb2283> luckyone: have you tried purging at just to get a fresh start ?
[23:03] <stormblue> http://www.mail-archive.com/ubuntu-bugs@lists.ubuntu.com/msg1056692.html is this related?
[23:04] <luckyone> alexb2283: what do you think I should purge?
[23:04] <alexb2283> try: dpkg --purge --force-depends at
[23:05] <luckyone> done, then apt-get install it?
[23:05] <alexb2283> stormblue: aside from some possibly low level network network issues, your log looks good
[23:06] <alexb2283> stormblue: how are the two involved machines connected ?
[23:06] <luckyone> alexb2283: wow, that worked, I reinstalled it and now life seems to be good
[23:07] <luckyone> Calculating upgrade... Done
[23:07] <luckyone> 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
[23:07] <stormblue> Client -[wifi] - Router -[ethernet] - switch - [ethernet] - server
[23:07] <alexb2283> luckyone: if you try to dist upgrade it should automatically reinstall and also finish your distupgrade
[23:07] <luckyone> I feel all current and what not!
[23:07] <alexb2283> luckyone: good :D
[23:07] <alexb2283> another happy customer i guess ;)
[23:07] <luckyone> yeah, thanks for the tips!
[23:07] <luckyone> I was happy when it was broken
[23:08] <luckyone> ubuntu and ubuntu-ers rock!
[23:08] <alexb2283> agreed
[23:08] <luckyone> probably my favorite people on the planet
[23:08]  * luckyone bought his hot wife the ubuntu thong off of cafe press =)
[23:08] <stormblue> luckyone: Prove it!
[23:09] <alexb2283> stormblue: maybe some sort of powersaving kicking in or wifi issues ? i'd make sure it's not a hardware fault in between the machines by using a crossover cable just for testing (if possible at all)
[23:09] <alexb2283> stormblue / luckyone : that was unexpected... but good. i'd like proof as well :P
[23:09] <alexb2283> powersaving on the wifi that is
[23:09] <alexb2283> but it's just a random guess
[23:10] <stormblue> Yeah, I don't think it's power saving.  I'm plugged it and It messes up over etherent too.  It's weird...It works sometimes, but other times not.
[23:10] <alexb2283> stormblue: also, if i can't help you, the #ubuntu channel might be of more help to you, this isn't necessarily -server related
[23:10] <luckyone> stormblue: I will foward you the reciept
[23:11] <Deeps> proof that it's for your wife
[23:11] <Deeps> and not for you
[23:11] <Deeps> is what he meant to say
[23:11] <alexb2283> over ethernet... is that with all the hardware in between as well ? (router/switch)
[23:11] <luckyone> haha
[23:11] <luckyone> it wouldn't fit me...
[23:11] <stormblue> What does this line: Read error from remote host 192.168.0.148: Connection reset by peer specificaly mean?  That means it's a client issue right?
[23:11] <Deeps> proof
[23:11] <stormblue> lucky, actually, I meant to focus on the hot part.
[23:12] <stormblue> Yeah, alexb2283, router and switch still between.
[23:12] <Deeps> unfortunately when it comes to wives, hot is very subjective
[23:12] <luckyone> ahhh, http://www.jenniandjordan.com/v/wedding/ceremony/DSC_0243.JPG.html
[23:12] <luckyone> that's us
[23:13] <Deeps> this is a PG channel
[23:13] <alexb2283> stormblue: that error could be anything on osi layer 3 and down. i would try to establish a connection as direct as possible
[23:13] <alexb2283> x-over
[23:13] <Deeps> unfortunately that prevents me from reacting
[23:13] <Deeps> lets just say 'bravo'
[23:13] <luckyone> (and the server dishing that out is *very* recently upgraded to intrepid!!!)
[23:13] <stormblue> alexb2283: 10-4.
[23:13] <luckyone> yeah, in the US we call that 'out punting your coverage'
[23:13] <alexb2283> stormblue: 1-3
[23:14] <alexb2283> luckyone: beautiful, in a G-sort of way :)
[23:14] <luckyone> yeah, wedding days are that way
[23:14] <alexb2283> luckyone: that kind of g: http://en.wikipedia.org/wiki/Motion_Picture_Association_of_America_film_rating_system#Ratings
[23:17] <stormblue> luckyone: are you  rocking the lamp stack?
[23:17] <stormblue> Wedding pictures are lies anyway.  You know she doesn't look like that when she wakes up first thing!
[23:17] <luckyone> stormblue: haha - yeah, LAMP
[23:17] <stormblue> Nice.  I used to run a LAMP server, but then I didn't have the time to maintain it.