/srv/irclogs.ubuntu.com/2009/03/17/#ubuntu-server.txt

sparky_hey guys, (the noob back :)),  i have a general question about where to mount my share dir for the mass my files on my raid.  I know it's probably just a personal preference but is there a typical location to mnt my raid to share it on my home network?00:02
olcafodefault mount location for ubuntu is /media/yourdrive00:04
jlcnfs and stuff like that, I'll do an /export/home or something like that00:05
jlc krutch.local:/home    2.4T  1.4T  911G  60% /export/home00:06
jlc8)00:06
sparky_when i set it up i can make it where my mac see //servername/dirname  ?  Because I have all my music mapped to a certain path and I don't feel like repoint over 6.5k worth of music (and no that isn't 6.5k memory size, that's number of music files)00:08
twbIMO you ought to use /srv/nfs or /srv/<something else>00:21
twbSince /export is not part of the FHS 2.3.00:22
hadsYeah, /srv/foo or /mnt/foo rather than /foo00:29
hadsI'm not up on the specs for what goes on in /media00:29
twbhads: /media is for removable media; /mnt is for temporary mounts00:31
twbe.g. "argh, let me just mount one of the RAID1 nodes directly with -o ro for some debugging"00:31
twb*temporary sysadmin mounts, that is00:31
hadsYeah, I though /media was mostly for removeable stuff00:32
jlcif it is for you on your box, you can make it /mydamnmount for the fhs matters :)00:32
hadsTrue. Though /srv would be the correct place.00:33
sparky_i'm alittle confused with the /srv? was that directed to me?00:37
sparky_oh, so it should be  /srv/dirname ?  then I can share it as //servername/dirname  ?00:41
twbjlc: you might find that things like updatedb.conf default to doing the Right Thing if you follow the FHS.00:51
twbFor example, updatedb skips all of /media and /mnt by default.00:51
twbBut if you mount a removable drive at /im-in-a-hurry-dammit, updatedb will read the entire drive.00:52
jlclol00:52
jlcyeah00:52
twbJust that bit me on the arse recently because another admin was "clever" and made backup mount points in /b/ and /bb/.00:52
jlcsounded like sparky was doing it at home, so it didn't matter00:54
jlci use export/home at home from my solaris days00:54
sparky_yea, it's for my home server00:54
jlcjust like calling partitions slices00:54
jlc:)00:54
=== rgreening_ is now known as rgreening
kansanis 1024MB of ram enough for a computer to run ubuntu hardy server?01:02
kansan thinking of buying:  DELL GX280 SFF P4 3.4GHz 80GB01:02
kansanis that enough to install nagios on?01:02
giovani3kansan: there's no generic advise on specs -- it all depends on the load on the server01:04
giovani3advice*01:04
giovani3nagios will run on 64 or 128 MB of ram probably ... not that I'd recommend it for production01:05
twbgiovani3: you wouldn't recommend nagios for production?01:05
giovani3twb: read what I said01:05
giovani3twb: I was clearly referring to the amount of ram01:05
twbgiovani3: you said "it"; it's not clear which "it" you're- OK.01:05
twbIt wasn't clear to me.01:05
giovani3heh01:05
giovani3nope, nagios is nice for production work, I've been meaning to finish up that book, "Pro Nagios 2.0"01:06
giovani3other things got in the way mid-read01:06
twbkansan: 1GiB of RAM is adequate for *some* roles.  It depends what the server will be doing.01:06
mister2hey i have a quick question, what is the command to see what php version i have installed?01:06
kansantwb, i want to install nagios on it and use it to monitor production websites01:08
twbkansan: and will the host be doing anything *other* than nagios?01:08
kansanand also, to runa  configuration management server called chef01:08
giovani3mister2: php -v I presume01:08
kansanthat has apache as a front end01:08
mister2thanks, will try it01:08
giovani3mister2: in general, -v is used to print the version of applications -- when in doubt, read the manpage ("man php" in this case)01:09
hadsdpkg -l | grep php01:09
kansanwhat would my ideal box specs be if i want to run:  nagios, chef-server, apache (only to connect to chef, a ruby based configuration management server)01:10
twbkansan: I haven't done that before, but I'm guessing 1GiB would be adequate.01:12
twbkansan: usually it's easy to stuff in up to 4GiB, so you have an easy upgrade for RAM if that turns out to be inadqeuate.01:13
giovani31GB should be plenty to start at least ... unless you're monitoring 100+ hosts in nagios01:13
kansanno i'm just monitoring like 1001:13
giovani3you'll be more than fine then01:13
giovani3however, apache can be a ram hog01:14
kansanok good to know01:14
giovani3I'd advise, honestly, against running apache just to provide yourself web management01:14
giovani3but, obviously that's up to you01:14
twbweb management is eeeeevil01:15
twbEven Windows have MMS instead.01:16
giovani3yeah, except windows isn't any better01:16
giovani3it renders all of the management consoles using html :)01:16
sparky_jle and twb: I didn't understand the deal with updatedb.conf,  and how that plays with FHS01:17
twbsparky_: don't worry about it01:34
twbsparky_: it's just big boys talk01:35
twbI should say "grown up" talk ;-)01:35
sparky_i'm trying to learn that too, lol01:35
trentsterHey all, How do I stop mail to root@localhost its messing up my postfix stats, it seems to be triggered every time a cron job is fired.....???01:36
sparky_so for setting up a home file server mnt my raid in /mnt or /srv would be better?01:37
twbtrentster: fix /etc/alias01:46
twbtrentster: i.e. add an alias root: trentster@example.com01:47
twbtrentster: note that cron only emails you if something is broken01:47
trentstertwb, its showing me that the import of awstats log file completed., its starnage beacuase on the cronjob entry at the end of the line i have ">> /dev/null 2>&1"01:48
twbThat should be >, not >>01:49
twbNot that redirecting all output from a crontab entry is a good thing...01:49
trentsterhmm ok let me change it and see01:49
twbIt'd be better to use --quiet or similar.01:49
trentstertwb, thanks, I dont have much experience with cron entries....to use "--quiet" do I just apend to end of the line....eg my cron entry is as follows.01:50
trentster"*/5 * * * *  awk 'NF>5{for(i=1;i<=NF;i++){if(i>8&&i+9<NF){printf "%s_",$i}else{printf "%s ",$i}}print ""}' /var/log/xferlog > /var/log/xferlog1 >> /dev/null 2>&1"01:50
twbOw.01:51
trentsterit would probably be better to place the awk statement into a script file I gather <grin>01:51
giovani3it seems to only be emailing STDERR01:51
giovani3which is fine01:51
giovani3no?01:52
trentstergiovani3, I dont want anything going through postfix logs as it screws up my awstats01:52
giovani3yeah, I can't even follow what's going on in that code :)01:53
giovani3too dense for 10pm01:53
trentsterlol01:54
trentstergiovani3,  ok the mail from that line says "/bin/sh: -c: line 0: unexpected EOF while looking for matching `''  any ideas how to silence this?02:04
x409What is the best groupware i can install on ubuntu ?02:04
giovani3trentster: well, that's an error -- so fixing it would silence it, or you could stop sending errors to yourself02:04
trentstergiovani3, <grin> I know, I just dont know how to fix it.......I did not write the awk statement.....so I dont know why its giving an error, It is working and doing want it needs to do tho02:05
giovani3trentster: who wrote it?02:06
trentstergiovani3, an irc helper02:07
twbHaha02:23
ballhello doginize04:46
doginizehi, ball04:46
yeasonI've got a postfix server going, it was working fine then I tried to add spam-assassin to the mix and now nothing works. I'm getting an error "line 96: bad transport type: -o" for the master.cf file. line 96 is a blank line. any suggestions?06:07
yeasonanybody have any ideas at all...?06:14
=== tuxlinux_ is now known as tuxlinux
krautmoin06:44
Scixi'm working on a server running cups, but I cant find /usr/share/cups/model. Where is the ppd files listed in ubuntu 8.10?08:06
ScixFound them. /usr/share/ppd/ :)08:28
maxbIf you want a list of all installed ones, "lpinfo -m".08:30
maxbFor some reason that takes ages to run, I'm not sure why08:31
maxbActually it might be loading the printer name out of every PPD08:31
=== CrummyGummy is now known as knowitall
=== knowitall is now known as CrummyGummy
=== nijaba` is now known as nijaba
pablassoi upgraded from server dapper to hardy (everything went smooth :) but the prompt for regular users is screwed. My PS1 is "${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$" and the root prompt is ok, but any other user literally prints the PS1 variable instead of using selected dirs and colors09:27
pablassodamn, that was an ugly text. Anyways, any clue on why all the users prompts (except root) aren't obeying PS1?09:28
okkaremy ssh password and username should be the same as i use to login ot my host machine right?09:36
=== cemc1 is now known as cemc
thefishokkare: yes10:04
okkaredoesn't seem to work :(10:10
okkarethefish10:10
thefishso you can log in locally on the machine with your username and password, but not over ssh?10:10
okkarehow do i specify the username10:11
thefishssh username@host10:11
okkarethanks10:11
okkareworked :D do you know how to set up a folder to be shared via samba as well by any chance10:13
okkarevia ssh10:13
okkaresay i want to set / to be shared10:13
thefishokkare: thats probably not a brilliant idea10:14
okkarei realize that but it would be so much easier for me XD10:14
thefishcheck the default samba config, and modify the demo share to suit you10:14
okkareok10:15
thefishokkare: as your attorney, i recommend sharing /srv/smb instead10:15
okkareand last question, where is the htaccess/www folder?10:15
thefishwhy would you want / shared over samba?10:15
thefishthe default webroot for apache on ubuntu is /var/www but it can be wherever you lke10:16
okkareoh yeah, thought it was etc/www for some reason10:16
okkarei want to share /var/www then10:16
thefishfair enough10:17
thefishokkare: http://www.subvs.co.uk/linux_web_and_file_server_for_windows_users10:17
okkarethanks10:18
okkaresince you're so helpful :D here's another10:19
okkareif i have a 1.4ghz, 512md ram, 400kb/s uploadspeed server, how many hits could it handle per hour, with wordpress10:20
thefish1410:20
thefish15 on tuesdays10:20
okkare:P10:20
okkareany idea?10:21
thefishcheck out some stress testing tools10:21
thefishyou also need to add another variable there10:21
thefishacceptable page load time10:21
okkareright10:22
thefishinstall apache2-utils, and i think there is an app called ab in there (apache benchmark tool)10:22
okkarei'll try that10:22
okkarebut think it could handle 5000+10:23
okkareand load in less than 5 sec10:23
hadsYou just pcik that number arbitrarily?10:24
okkarethat's about what i got with one of my sites hosted elsewhere10:24
thefishokkare: was that on a dedicated server?10:25
okkareyeah, with a hosting company10:25
thefishfair enough10:25
thefishremember that network speed will also change things10:25
okkareyeah10:25
okkarecould i handle that with what i have?10:26
thefishso if you only have a 10M internet connection, it will probably be less than the isp who probably had 10010:26
okkaremine's like 400kbs10:26
thefishadsl?10:26
okkarecable10:26
thefishthat will probably bork out before your apache does10:26
okkareyeah, that's gonna be the bottleneck10:27
thefishin fact it would be safe to wager a small amount of money on that fact10:27
thefishor large, depending on how risk averse you are10:27
okkarehaha, i guess is hould buy some more10:27
okkareor hack my modem ;)10:28
thefishheh10:28
okkareoh wait, my isp now says it's 1mbs10:29
okkareMbps that is10:29
okkareor is it10:29
thefishthat will be your downstream10:30
okkarehmm well my dad works for the cable co, so maybe he can pull some strings10:30
thefishwhy not stay with an isp?10:30
okkarenope, the download is 15Mbps10:30
thefishk10:30
okkarethe cable co is the isp10:31
thefishi mean a dedicated server10:31
thefishwith a nice 100M network connection10:32
okkareoh, i see10:32
okkarei guess i just want the expirience10:33
thefishfair enough10:33
okkareplus i'll never have to move big files via ftp and all that10:33
thefishbut i dont think you will sustain 5k hits per hour on that line10:33
okkare:(10:36
Al_lAokkare - there is some seriously cheap hosting out there eh. we use dreamhost here12:04
Al_lAvirtual servers, you get a terminal interface, can run pretty much any app but they prefer you to stick to web services if you can12:05
okkarei don't have money though :/12:05
Al_lAnot even like $15 a month?12:05
Al_lAokay fair enough12:05
okkarecertainly not12:06
Al_lAi had loads of fun just with IIS on my home line, then apache later12:06
Al_lAi saw you were using wordpress which i assume is php12:06
okkareyeah, but i also use magento12:07
Al_lAremember that php and your probably mysql backend  cache frequent requests so your cpu load is even less than what you'd calculate12:07
okkareyeah, bandwidth will be my enemy i think12:08
okkarei think my video card is fried right now... woe is me12:08
okkareso I'm using my regular desktop as the server12:08
Al_lAnoes... i have a collection of half-fried cards that will work in a pinch but arent dead enough to throw away12:08
Al_lAi also have an exam in 9 hours so i'm out, 'night12:08
okkarehaha mail me one!12:09
okkaresee you12:09
okkarehmm i read that guide and didn't really get how to make var/www shared12:19
okkarei need to set up /var/www to be shared using samba, anyone know how12:48
okkarei just installed USE12:48
Pres-Gasokkare, is the machine joined to an active directory domain or using local users and groups?  Also, will the shares need to be accessed outside of your lan?12:51
okkareeverything is default, and lan12:51
Pres-GasOh, so LAN only?12:52
okkareyepp12:53
Pres-Gasokkare, this should get you started: https://help.ubuntu.com/community/SettingUpSamba#Samba%20Server%20Manual%20Configuration12:54
Pres-Gasokkare, what web developing software do your people use?12:55
okkarei use dreamweaver but i'll probably switch to something open source soon12:56
Pres-GasMost IDE's have sftp hooks to edit/upload pages in them, then all you need to do is enable sshd and utilize the filesystem permissions.12:56
okkareoh really?12:56
okkareneat12:57
Pres-GasYeah, doublechecking with dreamweaver....12:57
Pres-Gasokkare, doublecheck this with your documentation, but it looks like in the "New Site" dialog, you would select ftp, but there is a checkbox that says to "Use Secure FTP (SFTP)".13:01
okkareand that just needs ssh to work?13:02
Pres-GasYeah13:03
Pres-Gassshd, okkare, not just ssh13:03
Pres-Gasubottu, tell okkare about !sshd13:04
ubottuSorry, I don't know anything about !sshd13:04
* Pres-Gas shakes fist at ubuttu13:04
okkareis that operating by default on USE 8.10?13:04
Pres-Gasokkare, you would have to see if you have the openssh-server installed or see if "sudo /etc/init.d/ssh status" gives you anything.13:09
okkareyeah, that's installed13:09
okkarei'm using it atm13:10
Brazenjoin ubuntu-meeting13:26
Brazenoops13:27
okkarehehee13:27
sLaeYaHi, I am having problems with ALC for OpenLDAP, when I run the command13:27
sLaeYaldapmodify -x -D cn=admin,cn=config -W -f acl-del.ldif13:27
sLaeYai get the error: ldapmodify: wrong attributeType at line 3, entry "olcDatabase={1}hdb,cn=config"13:28
sLaeYaI have used sudo and also root.  I'm not sure what I am doing wrong13:28
Pres-Gasokkare, then what you may want to do is create a group like webdev, then add your web developers to that...then make your sites group owned by webdev.  You will not want to change the user ownership.13:28
sommersLaeYa: can you pastebin the contents of acl-del.ldif?13:29
okkareso i don't go and edit smb.conf?13:29
sLaeYadn: olcDatabase={1}hdb,cn=config13:30
sLaeYadelete: olcAccess13:30
sLaeYaolcAccess: to attrs=userPassword,shadowLastChange by dn="cn=admin,dc=example,dc$13:30
sLaeYaolcAccess: to dn.base="" by * read13:30
sLaeYaolcAccess: to * by dn="cn=admin,dc=example,dc=tld" write by * read13:30
sLaeYasorry ssh was in a small screen ill paste it again13:30
sLaeYadn: olcDatabase={1}hdb,cn=config13:30
sLaeYadelete: olcAccess13:30
sLaeYaolcAccess: to attrs=userPassword,shadowLastChange by dn="cn=admin,dc=example,dc=tld" write by anonymous auth by self write by * none13:30
sLaeYaolcAccess: to dn.base="" by * read13:30
sLaeYaolcAccess: to * by dn="cn=admin,dc=example,dc=tld" write by * read13:30
sommer!pastbin13:31
ubottuSorry, I don't know anything about pastbin13:31
sommer!pastebin13:31
ubottupastebin is a service to post multiple-lined texts so you don't flood the channel. The Ubuntu pastebin is at http://paste.ubuntu.com (make sure you give us the URL for your paste - see also the channel topic)13:31
sLaeYaoh ok, sorry.13:31
okkareXD13:31
sommersLaeYa: are you just trying to remove all ACLs?  I assume so you can change the order?13:31
Pres-Gasokkare, I almost missed your reply ;)  No, you would not need to edit smb.conf13:32
sommersLaeYa: you might try: http://paste.ubuntu.com/132480/13:32
okkarehmm ok13:33
sLaeYato be honest sommer, I think I'm in over my head, I'm attempting to setup a postfix virtual hosting server with ldap backend.13:33
sommer!serverguide13:34
ubottuThe Ubuntu server guide may be found at http://help.ubuntu.com/8.04/serverguide/C/13:34
sommersLaeYa: there's a section on both LDAP and postfix in the serverguide13:34
sommersLaeYa: you may need more in depth information though13:34
okkarehmm well i got "private" to show up, pres-gas, by adding it to the smb.conf13:34
okkarebut there's an error13:35
okkarei'll work it out13:35
Pres-GasKeep hammering away, okkare!  :)13:35
sLaeYasommer, I actually found a comprehensive guide for installing it on ubuntu intrepid, which I have been following but have found no-one who could help me, however it would appear you have just fixed my problem.13:36
sommersLaeYa: party!13:37
okkareyay got it to work13:37
Pres-Gasokkare, ssh or smb?13:37
sLaeYathanks for your help13:38
sommersLaeYa: np13:38
fevelhi13:44
fevelhow can I send a file to my ubuntu-server13:45
sLaeYaWhere do you want to send it from fevel ?13:49
fevelfrom a macbook on the same network13:49
sLaeYais there a particular method you want to send it by, do you have ssh setup, or ftp, or samba ?13:50
okkare!computers13:58
ubottuSorry, I don't know anything about computers13:58
okkare!anything13:58
ubottuSo, you wanted to lure me into saying I don't know anything about anything? Yeah, that would be funny, of course. Now leave me alone.13:58
okkareXD13:58
fevelsorry for the delay  sLaeYa, ssh would be better14:08
Pres-Gasokkare, you said you got your setup working...with sshd or smb?14:13
okkaresmb, although i can't write14:14
Pres-GasThat is not helpful, eh?14:14
okkarenot really :/14:14
sLaeYafevel you could sue sftp ?14:26
sLaeYause*14:27
ballDoes sftp have any money?14:27
sLaeYaI don't know what you mean by that ball14:29
Pres-GasPlay on words, sLaeYa14:29
ballsLaeYa: I was joking because you typed "sue" instead of "use"14:30
Pres-GasYou said sue...to litigate for money14:30
* ball nods14:30
sLaeYaSorry, its just gone past midnight and I've been batteling to keep my eyes open, although I know I have to sort this silly server somehow14:30
sLaeYaso I have this LDAP server - or believe I have it setup and when I come to adding a user I am presented with Auth Failure http://paste.ubuntu.com/132508/ Am I doing something wrong? Do I need more coffee?14:33
sommersLaeYa: are dc=example,dc=tld14:36
sommersLaeYa: already created in the directory?14:36
sLaeYato see this wouldn't I have to use "ldap search" ?14:37
sommersLaeYa: yeppers: ldapsearch -xLLL  is usually what I use14:38
sLaeYaNo such object (32)14:39
sommertry ldapsearch -xLLL -b dc=example,dc=tld14:42
sLaeYai get the same response14:43
sommersLaeYa: you can edit /etc/ldap/ldap.conf to set the basedn and connection14:43
sommersLaeYa: it's not created then... try ldapsearch -xLLL -b dc=nodomain14:44
sLaeYasame again :s14:44
sLaeYaoops14:45
sLaeYahere is /etc/ldap/ldap.conf http://paste.ubuntu.com/132519/14:45
sommersLaeYa: is there anything in the directory yet?  cause if not you can do sudo dpkg-reconfigure slapd and set the base14:46
sLaeYaI dont have anything in slapd directory14:46
sommersLaeYa: I'd just run the dpkg-reconfigure then... you should then be able to add entries14:47
sLaeYado you mind if i give you a link to the readme I'm following ?14:47
sommersLaeYa: it must be dated... the serverguide OpenLDAP section is updated for Intrepid14:49
sLaeYayes I guess your right, I'm just reading some of the comments on the bottom of it now14:49
sommersLaeYa: I'd recommend following the serverguide for the openldap part, then the other guide when it comes to postfix configuration... or at least the postfix ldap configuration14:50
sommeryou might use the serverguide instructions for the base postfix config, then ldap after everything is working14:50
sLaeYa!serverguide14:52
ubottuThe Ubuntu server guide may be found at http://help.ubuntu.com/8.04/serverguide/C/14:53
ScottKmathiaz: I won't be able to make the meeting today.  Enjoy.14:53
sLaeYais there a way to delete my old database sommer ?14:58
sommersLaeYa: dpkg-reconfigure will take care of that14:58
sLaeYaI am getting an error when making the new one because the way I have setup my last one -  http://paste.ubuntu.com/132526/ - the reconfigure didn't and I've run it a couple of times with the different options14:59
sommersLaeYa: do you have an ou=people?15:00
sLaeYano15:00
sommersLaeYa: you'll need to create that first15:00
uvirtbotNew bug: #344281 in samba (main) "CIFS kernel bug crashes system" [Undecided,New] https://launchpad.net/bugs/34428115:01
nealmcbneed to update the meeting time on the fridge - still says 16:00 utc15:04
mathiazok - let's get the Ubuntu Server Team meeting started here15:04
ttx\o/15:04
nijabao/15:04
sLaeYathats not shown in the serverguide part I'm reading, is there a different part in the server guide on how to create those ?15:05
mathiazsince there is a conflict with the Asia Membership board15:05
* ball waves15:05
ballI didn't get time to read the agenda15:05
mathiazand we'll be in the same situation next week again15:05
mathiazso - let's get the server team meeting started15:05
mathiaz#startmeeting15:05
nealmcbAgenda: https://wiki.ubuntu.com/ServerTeam/Meeting15:05
mathiaznealmcb: thanks!15:06
ScottKOh.  I guess I won't miss the meeting then.15:06
nealmcb:)15:06
mathiazLast week minutes: https://wiki.ubuntu.com/MeetingLogs/Server/2009031015:06
kirklando/15:06
ScottKo-15:07
mathiazI don't seen any specific items from last week15:07
mathiazanyone has anything to add regarding topics discussed last week15:08
mathiaz?15:08
zoopsterDocumentation for Eucalyptus in Ubuntu15:08
kirklandmathiaz: we delayed the screen-profiles talk until zul got back15:08
mathiazkirkland: ok - I'll add to today's agenda15:08
ttxmathiaz: I would like to talk about likewise-open515:09
kirklandmathiaz: i'd also like to discuss testing kvm-84 in hardy15:09
zulhi15:09
=== scfh_ is now known as scfh
mathiazttx: ok15:09
mathiazkirkland: ok15:09
ttxso as an item from last week or an item for this week, your choice :)15:09
mathiaz[TOPIC] KVM backport in hardy15:10
mathiazkirkland: ^^ ?15:10
kirklandmathiaz: i'd like to ask for some assistance testing a kvm-84 package that i've prepared for hardy15:10
kirklandmathiaz: its available in a PPA at https://edge.launchpad.net/~ubuntu-virt/+archive/ppa15:10
kirklandmathiaz: here's the basic premise ...15:10
kirklandmathiaz: hardy shipped with kvm-6215:11
ScottKkirkland: When you have a tested backport and you need it approved, feel free to ping me.15:11
kirklandScottK: understood, thanks.15:11
kirklandScottK: kvm is such an important package, i'm asking for a bit more extensive testing that what i can do alone15:11
kirklandalso, we're talking about more than just applying a couple of bug fixes...15:12
kirklandwe're talking about taking hardy's kvm from kvm-62 to kvm-8415:12
kirklandthere's both a kernel piece, and a userspace element15:12
ScottKkirkland: +1 for lots of testing.15:12
mathiazkirkland: ie the goal is to prepare an SRU for kvm in hardy?15:12
zuljust a quesiton how are you going to backport the virtio stuff in the hardy kernel for kvm15:13
kirklandthese can be upgraded independently, though I'm suggesting we backport both15:13
kirklandmathiaz: yes, SRU which actually provides a major version bump15:13
kirklandzul: kvm-source provides the kernel space bits15:13
ScottKAh.  If it's SRU, then not mine to approve.15:13
kirklandzul: that package is a dkms-built kernel module15:14
kirklandi'm getting sidetracked here ....15:14
zulkirkland: heh ill talk to you about it after15:14
kirklandso the key points are that we believe that kvm-62 has become unsupportable15:14
kirklandthere are a number of design flaws in that version of kvm that are fixed later versions15:14
=== hessml|away is now known as hessml|away|away
kirklandas such, these are major architectural changes that cannot be fixed with backported patches15:15
kirklandthis information comes directly from the upstream maintainers15:15
kirklandso i propose that we either need to compose a lengthy list of 'won't fix' and 'can't do' items for hardy's kvm15:16
kirkland(such as SMP guests)15:16
kirklandor consider a major version bump15:16
kirklandi know that at least myself and mathiaz are running kvm-84 under hardy15:17
kirklandboth kernel and userspace bits, right mathiaz ?15:17
kirkland(i'm running both)15:17
mathiazkirkland: yes15:17
zulthats fine with me but if you do consider a major version bump then you will want to get the kernel team involved and get their opinon as well15:17
kirklandso there is some basic, measurable amount of success15:17
kirklandzul: absolutely, agreed.15:17
kirklandzul: or, we need to recommend that people use kvm-source for their kvm kernel module15:17
kirklandmathiaz: that's basically all....15:18
zulthe virtio stuff that hardy has already concerns me a bit though15:18
kirklandmathiaz: i'll compose a blog post, asking for testing of those packages15:18
kirklandmathiaz: i'm quite hoping that some -server team members can do some early testing too15:18
mathiazkirkland: ok - so the first step is to get more testing done from the ubuntu-virt PPA15:18
sommerkirkland: I can help test... is there a wiki page listing what to test?15:19
mathiazkirkland: +1 on the blog post15:19
kirklandmathiaz: yes, i plan to start the SRU procedures when Jaunty hits beta15:19
mathiazkirkland: as sommer mentionned documentation is very important too15:19
kirklandmathiaz: right15:19
kirklandsommer: i'll put those together in the blog post15:19
mathiazkirkland: especially on how to setup the new kvm from the ubuntu-virt PPA15:19
kirklandmathiaz: okay15:20
mathiazkirkland: I don't think we can really outline what to test (ie test multiple configuration etc...)15:20
mathiazkirkland: but focus on how to install the new version of kvm15:20
kirklandmathiaz: well, right, that's part of the reason i can't do it all myself15:20
kirklandmathiaz: there are some crazy ways people use kvm and virtualization15:20
kirklandmathiaz: that i have not considered15:20
mathiazkirkland: agreed.15:21
kirklandmathiaz: EOF15:21
mathiaz[ACTION] kirkland to write a blog post asking for testing of kvm 84 backport to hardy with specific instructions on how-to setup kvm 84 from the ubuntu-virt PPA15:21
mathiazkirkland: thanks for the update.15:22
mathiazanything else to add for kvm 84 on hardy?15:22
mathiazI'm running it and it's faster15:22
sommerhow does the kvm update affect the other tools, like libvirt?15:22
kirklandsommer: unknown15:23
kirklandsommer: unknown by me, at least15:23
kirklandsommer: i'm using kvm from command line,  i think mathiaz  is using virsh (which uses libvirt)15:23
ScottKI would appreciate it if we'd be clear about is this a backport or an SRU.  They land in different repos and have different approval mechanisms.15:23
mathiazright - I'm using libvirt to manage all of my vms15:24
kirklandScottK: there are actually 3 approaches on the table15:24
ScottKUsing the terms interchangably is a recipe for confusion (mine if  no one elses).  OK15:24
sommerkirkland: gotcha, I can help test libvirt and such15:24
kirklandScottK: the security team also want to fix a stack of CVE's15:24
mathiazScottK: the goal is an SRU.15:24
kirklandScottK: which are all fixed in kvm-8415:24
kirklandScottK: i need to evaluate the best place to land this15:24
ScottKkirkland: With clamav major updates I've put them in -backports first for extensive testing and then later -security/-updates15:24
kirklandScottK: my original thinking was -backports, but the more we discussed this, -updates started to make more sense15:25
kirklandScottK: as of yesterday, the security team was asking me to fix some CVE's15:25
ScottKYou might start with -backports and then migrate.  It's worked well for the clamav migrations (which are pretty intrusive).15:25
kirklandScottK: before i spent any effort trying to isolate and cherry pick fixes, i mentioned that i'm already investigating the possibility of an sru and/or a backport15:25
mathiazkirkland: may be using the following approach would make sense: ubuntu-virt PPA -> hardy-backports -> hardy-updates?15:25
kirklandScottK: mathiaz: i agree with that approach15:26
kirklandScottK: mathiaz: what about -proposed?15:26
kirklandbackports -> proposed -> updates ?15:26
ScottKmathiaz: Actually if there's CVEs fixed you want to go -backports ->-security ->-updates.15:26
mathiazkirkland: it will go to -proposed before -updates15:26
kirklandScottK: there are cve's15:26
mathiazkirkland: -proposed is always part of the SRU process.15:26
ScottK-security to -updates is normal.15:27
kirklandbackports -> security -> proposed -> updates ?15:27
ScottKkirkland: If it goes to security it'll go straight to updates from there.15:27
mathiazkirkland: no - backports -> security -> updates15:27
kirklandok15:27
ScottKthat's normal for all security fixes.15:27
mathiazkirkland: or backports -> proposed -> updates15:27
ScottKmathiaz: But if you're fixing CVEs this way you can't leave -security out.15:27
kirklandScottK: well, my goal was to affect the fewest people first, more later15:28
ScottKHaving CVEs fixed in -updates that aren't fixed in -security would run counter to how things normally work.15:28
jdstrandftr, kirkland knows this already, but if it is destined for -security, please build without -update (or -backports)15:28
ScottKYou might go -proposed to -security and -updates at the same time, but IME enough people run backports that's a sufficient testing ground.15:29
kirklandjdstrand: done!  in the latest https://edge.launchpad.net/~ubuntu-virt/+archive/ppa15:29
mathiazok - let's move on15:29
kirklandScottK: mathiaz: thanks for the info15:29
mathiazkirkland: I think the next step is defined (blog post)15:29
mathiazkirkland: we'll discuss later whether it should go trough security or proposed15:30
kirklandmathiaz: okay15:30
mathiazkirkland: thanks for the update on this topic.15:30
mathiaz[TOPIC] likewise-open 5 in jaunty15:30
mathiazttx: ^^?15:30
ttxyes, an Ffe has been granted to get likewise-open5 in Jaunty (thanks, ScottK !). I just uploaded the package and it's in the NEW queue right now15:30
ScottKAh.  Good.15:31
ttxThis is a separate package because the upgrade requires you to leave and rejoin the domain, which we consider unacceptable for our current likewise 4.1 users (or at least not our choice to make).15:31
* ScottK was wondering. Did you set the bug to fix committed?15:31
ttxI was about to. uploading can be long with sucky bandwidth.15:31
ttxSo Likewise Open 5 will coexist with Likewise Open 4.1 in Jaunty.15:31
ttxFor the Karmic cycle we'll work with upstream to propose a seamless upgrade for all users to the latest version, and phase out 4.115:31
ttxWe'll also make sure they work with pristine krb5 1.7 libraries to avoid maintaining a separate GSSAPI implementation there.15:32
ttxso as soon as it lands, please test it, given the late upload we'll not have much time for this.15:33
ttxFrom my testing it works better than 4.1... but I clearly didn't test all scenarios15:33
ttxsince I don't have such a wide array of AD domains to test against.15:34
ttxeof15:34
* ScottK considers the Server Guide ought to answer the question "Which do I use?"15:34
ttxyes, I was planning to discuss that with sommer15:34
ScottKExcellent.15:35
ttxI also have a couple of likewise-open bugs that are fixed in likewise-open515:35
mathiazttx: what happens if you have a system with 4.1 installed and you install 5?15:35
ttxit removes likewise-open (resulting in domain leave) and installs 515:35
sommerttx: sure just ping me15:35
ttxmathiaz: it just won't happen automatically by upgrading to Jaunty. Losing domain membership in the upgrade is not really acceptable15:36
mathiazttx: ok - and joining the domain is not done during postinst?15:37
ttxmathiaz: you need the windows AD admin password to join.15:37
ttxwhich in most use cases the local admin won't have15:37
sLaeYais there a way to restore your server to the initial install without reinstalling it ?15:37
ttxso no, it's not done in postinst.15:38
mathiazttx: ok.15:38
mathiazttx: I'm wondering if we should print a message to explain that the machine has been removed from the domain and should be rejoined (in the use case of 4.1 -> 5 upgrade)15:39
mathiazttx: doing this *pseudo* upgrade would leave the system unusable and providing as many hints as possible would be good15:39
ttxThere is a message printed when the domain is left (when likewise-open is removed)... but that could appear more clearly.15:39
ScottKmathiaz: It should probably go in a Debian.NEWS for the package.15:39
ttxmathiaz, ScottK: noted.15:40
mathiazttx: and probably in the release notes15:41
ttxmathiaz: I'm not sure. Installing likewise-open5 is up to the user, it won't influence an existing setup just by upgrading15:42
[HU]gnanetHi, i have a problem with my production system running ubuntu hardy: I run 3 xen servers where i have one hardy guest for mysql and one hardy guest for apache-php-lighttpd-squid. The webserver farm gets its data from a ocfs2 partition. My webserver guests are dying with kernel page faults, i heard of a kernel problem with the hardy xen kernel, so i thought of changing kernels, but the Intrepid kernel has OCFS2 1.5.0 modules, the hardy 1.3.3, an15:43
ttxso I wouldn't say it's release notes material.15:43
ttxnot something you need to know before/after upgrading to Jaunty.15:43
mathiazttx: right15:43
ttxit's something you need to know if you plan to install that particular package.15:43
mathiazttx: the point here is that we need to get the word out15:43
ttxso Server Guide, Debian.NEWS...15:44
mathiazttx: but I agree that the release notes may not be the best place15:44
nealmcbit could go in the package description15:44
ScottKnealmcb: I think that's overkill.15:44
mathiazttx: what about a message in likewise-open 5 preinst?15:44
* ttx agrees with ScottK15:44
mathiazttx: you should be able to detect wether 4.1 is around and get a message to the user15:45
ScottKmathiaz: When will that get seen that NEWS wouldn't?15:45
ttxI'm not sure that would increase visibility that much. Someone installing a new package should be ready for some change anyway.15:46
mathiazhm - ok.15:46
ttxHe needs to know he has to (re)join  the domain after install... but too much warning in advance might not be necessary15:46
ttxit's the same things he needs to do after installing likewise-open in the first place15:47
mathiazok - let's move on. It seems that we've identified places where the warning message should be put.15:47
ttxyes.15:47
mathiazttx: anything else to add on the likewise-open front?15:47
ttxno.15:47
mathiazttx: allright then. Thanks for the update15:48
mathiazand we're looking for testers!15:48
mathiazlet's move on15:48
mathiaz[TOPIC] screen-profiles by default15:48
mathiazkirkland: zul ^^?15:49
zulthis is just for ec2 right?15:49
mathiazzul: yes15:49
kirklandmathiaz: i'm proposing this, yes15:49
mathiazscreen-profiles by default in *EC2*15:49
kirklandmathiaz: in EC2 yes15:49
zulim against it, the goal of the ec2 is to behave exactly what we have now in the server15:49
kirklandmathiaz: ubuntu-server in ec2 is inherently console-less.  you attach, run something, perhaps detach, reattach later15:50
zulsoren ehammond1 and I already discussed this and we were against it15:50
kirklandmathiaz: this lends itself very well to screen15:50
zulkirkland: i agree its nice to have its installed on the images but I dont think it should be enabled by default15:50
kirklandmathiaz: furthermore, i believe it's a great way to differentiate what are very similar servers in the ec2 space15:50
* Brazen agrees with zul15:50
mathiazkirkland: right - does running screen by default would have an impact on automated installation (via ssh)?15:51
sorenkirkland: Do you feel you've overcome the concerns people have raised with screen?15:51
sorenkirkland: Like, say, overlapping key bindings?15:51
kirklandsoren: the outstanding issues i know about are: https://bugs.edge.launchpad.net/ubuntu/+source/screen-profiles15:52
kirklandand15:52
kirklandhttps://bugs.edge.launchpad.net/ubuntu/+source/screen15:52
kirklandsoren: i don't feel that any of these are blockers for adoption15:53
ttxI tend to agree screen is especially useful in the EC2 case... but I also agree that we should mimic what's in the default server install.15:53
kirklandmathiaz: if soren, zul, and eric are opposed, i withdraw my suggestion15:53
sorenI can't spot the "hijacks application's keybindings" thing in there anywhere.15:53
sorenI've never filed it as a bug. Perhaps because it's behaving as advertised or because I just don't see a clean way around it. I don't know. I just haven't :)15:54
kirklandsoren: that was worked around by providing an option to disable and/or customize the keybindings applied by screen-profiles15:54
mathiazkirkland: I think it's an idea worth exploring - however I'm not sure that using screen by default on *EC2* only is good.15:54
sorenkirkland: Which means more work by default.15:55
mathiazkirkland: we should investigate if we should enable screen by default *everywhere*15:55
kirklandmathiaz: i agree with you;  i though ec2 would be a perfect place to start15:55
mathiazkirkland: true.15:55
kirklandmathiaz: these are machines that you are *never* physically sitting in front of15:55
kirklandmathiaz: in this case, they are very unique15:55
kirklandmathiaz: "they" being hosted servers of any kind, ec2 being the present example15:56
zulkirkland: i think its a good idea overall but its too soon15:56
nealmcbcould it be in the motd for ec2?15:56
sorenI must say that while screen-profiles surely solves a problem, I think it will annoy a rather large group of users. Me, for instance :) It's too in-my-face. I don't really want to know that screen is there until I want to do something with it.15:57
BrazenI think screen is just as useful, and maybe more so when physically at console (with no X, such as with servers), so I don't see the relevance of ec2 being remote-only15:57
kirklandmathiaz: i suppose we can revisit this in karmic15:57
mathiazkirkland: right.15:58
mathiazwe're running out of time15:58
mathiazeven though we have the whole channel for us for *ever*15:58
mathiazkirkland: thanks for bringing this up - we should definetly revisit this topic for karmic15:59
mathiazkirkland: you could also send an email on ec2-beta15:59
mathiazkirkland: to get some feedback there15:59
mathiaz[TOPIC] Open Discussion16:00
mathiazanything else to add?16:00
sommerI think zoopster  mentioned eucalyptus documentation?16:01
zoopsterI did.16:02
* erichammond wakes up, scans the meeting log, nods, and heads out to an off-site meeting.16:02
zoopsterbut given time...I can take it offline16:02
sommerzoopster: okay16:02
simplexiohmm what is screen-profiles ? keybindings for screen16:03
mathiazok - let's wrap up16:05
mathiaz[TOPIC] Agree on next meeting date and time16:05
mathiazso next week the TB is running at 15:00 UTC16:05
mathiazat the same time as our currently scheduled meeting16:05
mathiazso my proposal is to run the meeting at 15:00 UTC in #ubuntu-server16:06
mathiazsame as this week16:06
mathiaz(and last week)16:06
mathiazso: same time, same place (#ubuntu-server), next week?16:07
fevelwhere does ubuntu server put the apache vhosts conf file please?16:09
mathiazok - I don't see any objections - so see you all next week, same time, same place (#ubuntu-server)16:10
Brazenfevel: /etc/apache2/sites-available/16:10
mathiazthanks for attending and happy beta testing!16:10
fevelthanks16:10
mathiaz#endmeeting16:10
[HU]gnanetSorry for filling up the meeting with my problem, but can anyone give me a clue?16:11
mathiaz[HU]gnanet: np - you'd better post your question again16:11
[HU]gnanetok16:11
[HU]gnanetSo again:16:12
[HU]gnanetHi, i have a problem with my production system running ubuntu hardy: I run 3 xen servers where i have one hardy guest for mysql and one hardy guest for apache-php-lighttpd-squid. The webserver farm gets its data from a ocfs2 partition. My webserver guests are dying with kernel page faults, i heard of a kernel problem with the hardy xen kernel, so i thought of changing kernels, but the Intrepid kernel has OCFS2 1.5.0 modules, the hardy 1.3.3, an16:12
[HU]gnanetkernel version on domU is /was 2.6.24-1916:12
BrazenAny reason you are using Xen instead of KVM?16:12
[HU]gnanetBrazen> the CPU doens not support KVM as we checked in the beginning16:13
BrazenI mean, I don't have a clue about your problem, but for future reference I would suggest KVM.16:13
Brazenoh16:13
Brazenin that case, I would use (and do use) qemu with kqemu.16:13
[HU]gnaneti will investigate it (qemu) for the future16:14
Brazenanyway, since no one else is piping up... page faults sounds like it is a memory problem, so it could be an issue with fighting over RAM, or a problem with swap space.16:16
jdbrowneHello, to which extent can our company benefit from a canonical support contract provided we run a modified kernel? at this time, we run a modified kernel to use specific dvb drivers at least.16:17
zoopsterjdbrowne: no one is responding - generally speaking a system running a modified kernel cannot be supported16:24
shameI have a small 2 node xen cluster, both nodes running gutsy because of https://bugs.launchpad.net/ubuntu/+source/xen-3.2/+bug/209893.. I'm considering how crazy it may be to rebuild one of the nodes using hardy+kvm and rebuild each of the guests up on that node as a kvm guest until everything's up on that kvm node, then rebuilding the other xen node16:25
uvirtbotLaunchpad bug 209893 in xen-3.2 "Xen kernel oops loading 3w-9xxx driver" [Undecided,Incomplete]16:25
shameI'm assuming the scsi driver wouldn't be an issue because it seemed to only have issues with the xen kernel(s) IIRC16:26
shameI guess I'm wondering if any of you have done a xen->kvm migration and have anything to say of your experience16:30
simplexiojust inrested. is kvm nowdays "the choice" for virtualization or does xen has it points still ?16:32
shame*shrug* kvm appears to be a more sane long term solution to me16:32
shamedo the xen folks still recommend using 2.6.18?16:32
jmedinaI still use Xen in production, there is active development, novell, suse, citrix are working in xen, redhat' s server virtualization is based on xen, not KVM, I think redhat recomends KVM for desktop virtualization16:35
jmedinais live migration supported in KVM?16:36
zoopsterhowever redhat has publicly stated that xen is maintenance only now...all future dev will be for kvm only16:36
balljmedina: any thoughts on Xen Vs. VirtualBox?16:36
shamejmedina, yep kvm does that.. the last time I checked it didn't do full paravirtualization so you couldn't use it on machines that lacked the special virtualization sauce in the cpu or something16:37
jmedinaball: I havent used virtualbox for server virtualization, only for desktop16:37
sorenshame: VirtualBox isn't very useful for server virtualisation.16:37
shameI'm not talking about VB16:38
soren...as you can't detach from the console while keeping the VM running.16:38
[HU]gnanetVirtualbox headless is an interesting effort ... but the resources...16:38
shameKVM16:38
sorenshame: Sorry.16:38
shame:)16:38
jmedinaI have not compared kvm vs xen performance, especially in I/O for disks an network16:38
sorenball: ^^ What I just said to shame about virtualbox was for you.16:38
jmedinafull virtualization performance in xen is really poor, then redhat released GPL Paravirtualized drivers for full vrt enviroments16:39
* ball nods16:39
shameI've been pondering it for sometime but it came back into mind this morning when one of my dom0's rebooted and the guests come up without network connectivity (still not sure wtf is up with that16:39
shamedom0 has connectivity, all the interfaces are up.. but it's like the bridge is broken or something16:40
jmedinathere is GPL windows paravirtualized drivers in xen, they help increase performance for windows16:40
ballCan Ubuntu Server be dom0?16:40
sorenball: Hardy can, yes.16:40
jmedinaball: yeap, I use ubuntu-xen-server package in hardy16:40
shameball, yes, I'm using gutsy16:40
shamejmedina, 64bit?16:40
jmedinajmedina: yeap16:41
cjwatsonjdbrowne: you should ask your support contacts about that, rather than this channel16:41
sorenright, sorry. "=< hardy" can do it.16:41
shame:)16:41
jmedinawith AMD X2 and xeon 54xx queadcore16:41
shamethere wasn't a 64bit package available for ubuntu-xen-server when we were setting these up16:41
shameit was right around the hardy release, maybe just prior to it16:42
jdbrownecjwatson, zoopster: thx16:44
simplexiohmm how i figure out if my cpu support amd-v, i have opteron 16516:46
sorensimplexio: grep svm /proc/cpuinfo16:47
ballCould I have 64-bit dom0 with 32-bit dom1?16:47
simplexiocpuinfo dosnt have anything about amd-v16:48
sorensimplexio: "svm" is what you're looking for.16:51
simplexiothanks soren. it look like 165 is too old model16:52
J_Pare there source list for feisty active?16:52
J_PI wnat install smartmontools, but apt-get update not find more feisty16:53
Jeeves_J_P: Better upgrade to something newer ;)16:53
J_PJeeves_: Yes I know, but for now I need still that version16:54
J_Pinstall smartcl16:54
J_PDon't are a old.ubuntu repos for me set in my sources.list ?16:55
feveldoes anyone know how I can make external_acl_type session work every time the browser is launched?17:05
fevelbetter yet "squid_session"17:05
keeskirkland: for a full version bump that included security fixes, it would go  -proposed -> -security -> updates.  but the -proposed step would go through the security-proposed queue so it didn't get built against -updates.17:11
jdstrandkees: ScottK was suggesting security-proposed -> -backports -> -proposed (optionally) -> -security17:18
jdstrandkees: he posited that more testing will be done in -backports17:18
jdstrandkees: fyi only17:19
keesjdstrand: really?  more testing in -backports?  if that's true, sure.  though you could probably put it in -backports and -proposed at the same time.18:08
* jdstrand nods18:09
jdstrandkees: they certainly are not mutually exclusive18:10
axisyscan I have multiple up route commands or do I have to add all of them to a script and do up /path/to/script for interfaces file ?19:28
infinityYou can have as many "up" commands in interfaces as you want.19:29
infinity       The following "command" options are available for every family and method.  Each of  these19:30
infinity       options  can  be  given  multiple times in a single stanza, in which case the commands are19:30
infinity       executed in the order in which they appear in the stanza.  (You can ensure a command never19:30
infinity       fails by suffixing "|| true".)19:30
infinityaxisys: man 5 interfaces19:30
axisysinfinity: thanks a lot19:30
=== hessml|away|away is now known as hessml|away
uvirtbotNew bug: #344490 in mysql-dfsg-5.0 (main) "apt fails to install mysql-server-5.0" [Undecided,New] https://launchpad.net/bugs/34449020:11
billykhi20:23
billykdoes anyone know of a way to ssh into a server that's on dhcp behind a router? (and without port forwarding in the router)20:25
Deepsssh to the router and ssh from there?20:26
Deepsssh to another machine behind the router that has ports forwarded to it?20:26
Deepsremote desktop to another machine behind the router that has ports forwarded to it?20:26
Deeps(in both previous cases, ssh on from there)20:26
billykno, just ssh to a machine behind a router without port forwarding20:26
billykso it has to be initiated outbound?20:26
Deepsif you're outside of the network currently, you're out of luck20:26
Deepsif you're on the machine in question, you can use ssh's feature of remote port forwarding20:27
billykso could I keep a ssh connection outbound to a wan static IP?20:27
Deepsssh -R 3000:localhost:22 user@remotemachine20:27
Deepsand then remotemachine:3000 would forward to your natted machine, as long as the ssh session to remotemachine remained online20:27
Deepswell, thats not striclty true20:28
Deepsas remote port forwards bind to localhost on the remotemachine20:28
billykhmm, i gotta draw a picture of what I'm trying to do20:28
_rubenand -g to able to connect to it from other hosts20:28
_rubendunno if -g works for remote ones20:28
Deepsdoes -g work with remote port forwarding?20:28
Deepsi was under the impression that only worked with local port forwarding20:28
billykok, so if I initiate a connection outbound from the server, and do keepalive or heartbeat, I can always see where it's coming from20:28
_rubencould very well be, never tried tbh :)20:29
Deeps     -g      Allows remote hosts to connect to local forwarded ports.20:29
billykcan i use that connection to go inbound too? like to remotely manage the serer20:29
billykokay20:29
Deepsi was right ;)20:29
Deepsbillyk: read what i've said already, info's there20:29
billykah20:29
Deepsbillyk: (ssh -R)20:29
Deepsnatmachine: ssh -R 3000:localhost:22 user@remotemachine20:30
billykyeah, i want to be able to drop a box on a consumer lan (with a dynamic wan IP and lan IP) and remotely manage it20:30
billykgotcha20:30
Deepsremotemachine: ssh -g -L 3001:localhost:3000 localhost20:30
Deepsanywhereintheworld: ssh -p 3001 user@remotemachine20:31
Deepsand you get ssh'd into natmachine20:31
uvirtbotNew bug: #344499 in samba (main) "samba crash" [Undecided,New] https://launchpad.net/bugs/34449920:31
billykokay20:31
_rubenor do it the proper way and setup a vpn ;)20:31
Deepsor that :)20:31
billykwell then you'd need a vpn server on the edge of the remote network20:31
Deepsopenssh has built in vpn now20:32
Deepsalthough you need it enabled in the remote sshd20:32
billykok20:32
Deepslikewise do you need AllowTcpForwarding enabled in the remote sshd (it is by default)20:32
billykokay20:33
DeepsGatewayPorts may also be of interest (man sshd_config)20:33
DeepsPermitTunnel relates to the sshd's vpn server20:33
Deepsenjoy breaking out of your corp/school firewall ;)20:34
Deepsand enjoy getting your login suspended when networks find out ;)20:34
billyklol thats not what i'm doing20:35
Deepshaxing neighbours wifi?20:35
billyki'm trying to build an appliance that I can sell and drop on someone's network and then be able to remotely access it20:35
* Deeps trying to think of scenarios where you cant just port forward20:35
Deepsah20:36
_rubenthe ease of ssl tunnels (over port 443 for instance) are a bitch to block .. wonder if i could tweak our squid to block such stuff20:36
billykalso looked at corkscrew20:36
billykhaha20:36
Deeps_ruben: could just use timeouts20:36
Deepskill off any active ssl sessions that have been active > Xmins20:36
_rubenDeeps: and the vpn would just reconnect .. doesnt help much i guess20:36
billyklol20:36
Deepsif you kill off any sessions > 60 seconds, you'll piss whoever it is off enough that they'll give up after a while20:37
billykoh, also how can I start firefox without a display manager or desktop environment?20:37
DeepsX forwarding20:37
billykso just barebones xorg, firefox, and its dependencies20:37
Deepsgoogle for the rest20:37
Deepsssh -X remotehost, remotehost: /usr/local/bin/firefox &20:37
billykyeah, I did... but i'm kinda lost about creating displays and stuff20:37
billykno, locally20:38
Deepsindeed, if you have X forwarding enabled on the remote sshd, it'll forward the X data to your local X server over ssh20:38
Deepsbut run the app on the remote machine20:38
billykno, like run firefox on the server20:38
Deepsand view it where?20:39
billyksooo serer with screen attached via vga cable20:39
billyklocal display20:39
Deepsit'd need an X server running20:39
billykstartx?20:39
billykor something20:39
Deepsand ideally a window manager too probably20:39
Deepsthats outside the scope of this channel though20:39
_rubenserver doesnt have X installed by default .. nor any window manager20:39
Deeps#ubuntu for GUIs20:39
_rubenand installing X makes a server a desktop :)20:39
hadsIf you must, ratpoison has few dependancies.20:40
billykeh, I just need firefox fullscreen with no border at all times20:41
billykso would a window manager really be necessary?20:41
hadsAs was mentioned, it's not really on topic here.20:41
billykugh I know #ubuntu is just gonna send me back here since I'm working off a ubuntu-server base20:42
billykand this machine has a LAMP sooo it's more  of a server20:42
billykand it has no input devices but network20:43
billykmore server20:43
Deepsbillyk: X is outside the scope of this channel, google however is your friend20:43
billykDeeps: haha okay, I had to try :-)  Thanks!20:44
hadsX with no input devices? Odd.20:44
_rubensounds more like a kiosk than a server to me20:44
aloneaok, was told to ask my question over here.20:45
aloneaok, I have a cvs server, but wanted to have it mail out the commit changes to everyone. So I tried cvsspam, but it seems i wont be able to use sendmail, but it supports smtp, but problem again. Gmail has to have the authentication stuff, so I am lost on what to do here.20:45
Deepssounds like a monitoring server20:45
billykyeah, like a display20:45
billykslideshow box basically20:45
billyknot h4x0ring a school or anything20:45
_rubenalonea: we use syncmail for that .. didnt configure it myself though, dunno any details of it20:46
Deepsin short, install xorg and an ultralightweight window manager (wm, icewm, evilwm, etc.), google will be able to give you more help on that though, and be prepared to install stuff from sources20:46
alonea_ruben: well, I might try that, but I am limited on what I can do on this server. i will take a look at it. its really the authentication that seems to be the problem, unless you know of a way to get a free smtp server that doesn't require it?20:47
billykthanks Deeps20:47
* hads prefers ratpoison20:47
_rubenalonea: install postfix on that box and configure it to relay through gmail using authentication .. perhaps ssmtp does support it aswell20:48
billykhads: not stumpwm?20:49
Deepsbillyk: it's okay, i learnt how to do all this because i needed to break out of a school + corp network ;)20:50
billykyeah :-) yay ssh tunnels20:51
alonea_ruben: I will look at that. does it require having any type of root access to install? really all I can do is run scripts and use the stuff that is already installed system wide.20:51
_rubenalonea: postfix most likely does, ssmtp can probably be installed as a normal user without too much hassle20:52
_rubenenough for today, im out20:54
aloneathanks again20:55
aloneanope on both programs....ssmtp wants access to /usr/local21:10
AdministratorWhere can I find my usb stick from the terminal21:39
=== Administrator is now known as moz
mozi heard it was under /media/disk or something21:39
mozbut i only have cdrom and cdrom0 and they are both empty21:39
ostHi, I am trying to setup a mail server and everytime (I have tried it a few time) I get this error: Relay access denied21:40
ostdoes someone know what this could be?21:40
o891Relay access denied21:43
o891Hi, I am trying to setup a postfix mailserver and I keep getting this error: Relay access denied21:43
o891does someone know what this could be?21:43
o891anybody?21:46
geniio891: It means the machine to which you are sending mail to will not deliver them to locations outside of the domain it belongs to.21:46
o891genil: thanks, do you know how i can fix it?21:47
geniio891: That has to be done on the machine to which you are sending mail21:47
o891genil: i have tried a few different ways and so I went back to the Basic Setup Guide and I still get this error21:48
genii(to allow your ip or so as a trusted source that it will relay mail for)21:48
o891genil: but I get it with anywhere I am sending mail, even if I send mail to myself I get the error21:48
o891genil: but my server is the smtp server21:49
geniio891: Likely then your ISP does not allow you to use your connection for an email server21:49
hadsHuh21:50
o891genil: could it be something else?21:50
Mal3kogenii21:52
o891genii: or is it my ISP not allowing it for sure?21:52
Mal3ko[11:48:12] <genii> Mal3ko: Research indicates kernel needs recompiling with options CONFIG_HIGHMEM64G=y, CONFIG_HIGHMEM4G=y even if PAE is enabled21:52
Mal3kohttp://tinypaste.com/e3cec21:52
geniio891: try telnet to port 25 of the machine which is supposed to be the one sending your mail and see if you get an smtp server response21:53
hads`sudo dpkg-reconfigure postfix` should get you most of the way to setting up a basic postfix config.21:53
geniiMal3ko: Did you get it resolved finally? (free not showing your full ram)21:54
o891genii: I get a response but after setting rcpt to:<fmast@o891.net> I get the error21:54
geniio891: Do you legally own the domain of 0891.net ?21:55
o891genii: yes21:55
o891genii: o891.net21:56
geniio891: Is the IP the machine sending mail is on in the dns server list for that domain?21:56
geniior does it have an MX entry, etc21:57
o891genii: yes it does: the mx entry is mail.o891.net and it points to the IP of the serve21:57
o891r21:57
geniio891: You might want to check your mailrc file or so then21:58
geniio891: hads' suggestion of postfix reconfigure may give you some of these options like mail relay etc21:59
o891genii: in the log I get the following error, maybe you have seen this before: Mar 17 22:59:27 ost postfix/smtpd[24190]: NOQUEUE: reject: RCPT from 84-75-23-205.dclient.hispeed.ch[84.75.23.205]: 554 5.7.1 <fmsaster@o891.net>: Relay access denied; from=<root@o891.net> to=<fmsaster@o891.net> proto=ESMTP helo=<o891.net>22:00
o891denii, hads: I will try that now, see if it gives me any options (sorry I didnt realise before that that message was for me, thanks hads)22:01
geniio891: looks like the next box from you upstream won't relay. Likely your machine fails some test like rarp or so22:02
o891genii, hads: I just did the reconfigure and it doesnt say anything about relay22:03
o891genii: the next box being my isp? that makes sense because I can send mail localy as in diretly from root to fmaster22:03
geniio891: Yes, your ISP22:03
hadsThere's nothing in that log about another SMTP server.22:04
o891Would that also block my imap and pop because I had those two working today.22:05
o891hads: So what does that mean?22:06
geniio891: The problem is this: your isp has the name 84-75-23-205.dclient.hispeed.ch assigned to the ip which you are also using for o891.net22:06
geniiSo when you try to send email from o891.net it appears to be coming from 84-75-23-205.dclient.hispeed.ch instead22:08
o891genii: ok thats the node name right?22:09
o891genii: And that means that the SMTP Server doesnt allow it because it thinks that it is coming from the wrong server, right? Could I allow 84-75-23-205.dclient.hispeed.ch as a smtp relay in postifx?22:10
geniio891: Not sure about node name or so. But when some other box on the internet gets email supposedly from your domain and looks up the ip it gets a different name and so rejects it22:11
mozim trying to use my usb stick, i've tried "mount /dev/sda1 /mnt" but i dont really know what that does and and what to do next?22:11
o891genii: ok I see, well do you know of anyway to overcome this problem?22:12
geniimoz: sda is usually the primary drive and not a one like second drive or usb or so on22:12
geniio891: Convince your isp to put in their dns your domain for that ip22:13
o891genii: so when I telnet the rcpt address the server IMMEDIATELY checks the IP of the recpt domain?22:13
geniio891: It should, yes22:13
o891genii: ok I see. Well I doubt they will do that as I don't even have a static IP address...22:14
o891genii: I suppose that that means that I can't run a smtp server on my box, right?22:14
geniio891: You could use some service like no-ip or other kind of ddns22:14
o891o891: I was looking into DynDNS the other day, so I might have to use that after-all...22:16
o891genii: well thanks for the help anyway, I will look into it!22:16
mozgenii: what should i be mounting then, im a little confused, quite new to linux22:16
hadsDNS is not the issue. I don't have time to work through a mail setup but it looks like you don't have your domain in mydestination.22:16
o891hads: in the postfix main.cf I have the following line: mydestination = o891.net22:17
o891hads: should that be mail.o891.net then?22:17
geniimoz: If you do: sudo fdisk -l   it should list there all your hd. Looks for the one which size is the usb one. if for instance it is sdc1   then use that in the mount command instead of sda122:17
o891hads: I just changes that line to mail.o891.net then restarted postfix and it still gives the error22:20
StargazerDoes ubuntu server run just as easily as the desktop version (in terms of wired/wireless connections) ?22:25
mozgenii: i need to unmount sda1 but its the hard drive, and its not letting me unmount it because its busy, what should i do ?22:26
okkareit's command-line only by default stargazer22:26
okkareso it may not be as "easy"22:27
StargazerI'm fair in CLI.22:27
okkarebut it connects via dhcp automatically22:27
StargazerBut normally ubuntu will just connect when i plug in.22:27
StargazerUbuntu Desktop*22:27
okkareit should do that, yeah, i set mine to a static ip just by editing /etc/network/interfaces22:28
geniimoz: sudo umount -f /mnt ; sudo mount -a22:29
geniimoz: This should remount sda1 in it's proper place22:29
mozwhat does the -a command do ?22:29
geniimoz: the -a mounts all stuff you have in /etc/fstab22:30
mozim still getting device or resource busy22:30
StargazerOhh, i remember installing Server edition and having trouble with seup. something about 'what type of server will this be?22:30
mozfor the first command22:30
Stargazer'*22:30
uvirtbotNew bug: #340437 in dhcp3 (main) "cannot get ip address from dhcp" [Undecided,Incomplete] https://launchpad.net/bugs/34043722:31
mozgenii: because its the harddrive i guess its busy22:31
geniimoz: Because root fs is always busy and likely sda1 was that partition, the -f (force) might not work. The fast thing instead of mucking about live is just reboot it and things will mount where they are supposed to again.22:32
mozahhh ok22:33
mozcool22:33
=== hessml|away is now known as hessml|away|away
mozi just installed this: linux-image-2.6.27-11-server 2.6.27-11.2722:44
mozbecause i needed it, it has inbuilt drivers to recognize my usb wireless stick22:45
mozbut now when i restarted, the system has paused at "loading hardware drivers"22:45
mozi just pressed crtl-alt-del to restart, and it presented me with the login screen, and im in, what happened there?22:46
mozits doing it each time,  when i press crtrl-alt-del something is being killed, its not working properly, why didnt installing the kernel update work? it worked when i did it on xubuntu desktop22:58
uvirtbotNew bug: #306541 in mysql-dfsg-5.0 (main) "mysql apparmor profile forbids raising max open files limit" [Undecided,New] https://launchpad.net/bugs/30654123:10
cmoss1question: i have a dell desktop computer that is running ubuntu server, but I have it hooked up to a monitor...after a little while, it will blank the screen, but will keep the led light on the back of the monitor on.  I have tried setterm, and it doesn't seem to do anything to stop sending a signal (even if it is just a blank screen)23:19
mozalso, i installed the kernel using sudo dpkg -i linux-image-2.6.27-11-server 2.6.27-11.2723:19
mozwas that correct23:19
=== asac_ is now known as asac

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!