[00:15] its odd, a while after i run iptables -I INPUT -s ! 192.168.0.0/255.255.255.0 -j REJECT i stop being able to access the server using cifs from my windows box, and as soon as i delete the rule it works again [00:15] everything else works though [00:19] may need to allow broadcast traffic too? [00:21] how do i do that, its just odd how it works fine for a while then stops? [00:26] allow traffic to/from 255.255.255.255 as well? [00:27] so just run iptables -I INPUT -s ! 192.168.0.0/255.255.255.255 -j REJECT instead of other command [00:29] no, the second param is the netmask, assuming you want traffic from 192.168.0.* you need it as defined earlier [00:29] that said, broadcast traffic appears from the source anyway, so it's not that [00:40] Does anybody know how to get rid of complaints like Does anybody know how to get rid of apparmor complaints like requested_mask="::r" denied_mask="::r" name="/lib/tls/i686/cmov/libdl-2.7.so" pid=6792 profile="null-complain-profile" namespace="default" for a sshd profile for a sshd profile [00:49] /msg nickserv register m0v135 treymul@gmail.com [00:50] daddy242: I'd suggest a different password next time. [00:50] and possibly a different irc client / terminal configuration [00:51] not to mention more careful observation of 5 spaces [00:51] good call [00:52] is there any pfsense like package for ubuntu-server? [00:58] * genii struggles with apcutils [00:58] Does anybody know how to get rid of apparmor complaints like requested_mask="::r" denied_mask="::r" name="/lib/tls/i686/cmov/libdl-2.7.so" pid=6792 profile="null-complain-profile" namespace="default" for a sshd profile [02:01] you can edit the apparmor profiles [02:02] /etc/apparmor.d or somesuch [02:03] I have done a lot of editing, the files in question have already been given read rights to sshd, but i am getting these errors due to this other profile [02:04] did you edit the null-complain-profile ? [02:07] no, I'm not sure what that is [02:08] I don't even have anything like that under apparmor.d,, where would I find it [02:10] something is telling it to gripe by default about stuff [02:10] alternatively, just disable apparmor, its irritating and broken :P [02:10] have you googled for that error? [02:12] yes and I haven't been able to find anything helpful [02:14] meh [02:17] i guess you could make a profile to specificially consider that file in question [02:17] question is... is apparmor breaking something or just griping? [02:19] Sam-I-Am: What's broken about our apparmor and have you filed bugs? [02:19] its more like the default profiles for apps [02:20] i spent almost a day trying to figure out some weirdness with slapd only to find out it was a misconfigured apparmor profile [02:20] There are certainly sometimes problems with them. [02:20] turns out there was a bug filed for it already, but the subject for it was a bit misleading... nor did i realize it was apparmor at the time. [02:23] is there any package that would setup a ubuntu-server to something similar to m0n0wall or pfsense? [02:24] hmmm, i havent seen one [02:58] CppIsWeird: nope, but firewalls in ubuntu are pretty simple: https://help.ubuntu.com/8.04/serverguide/C/firewall.html === UdontKnow is now known as ObiWanQueNoob [04:06] Any way to send a network alert when ups kicks in? [04:07] (so all the other boxes can nicely shut down when there's like 2 minutes left of power for instance) [04:13] hello I need help on installing ubuntu on HP Prolient ml350 G5 [04:14] genii: I guess that would be up to nut. [04:14] the installation goes just fine from ubuntu-server-64.iso. but I can not boot after install. ml350 hangs after reboot saying "attempting Boot from hard drive c:". [04:14] goksu: that sounds like the MBR wasn't installed, since it refers to "drive c:" which GNU/Linux never does. [04:22] twb: how do I fix it? [04:22] By installing the bootloader, I imagine [04:23] ubuntu installs well from cd. all the way to remove installation cd prompt. [04:23] That's assuming I've diagnosed the error correctly, of course. [04:23] shouldnt the install cd load that too? [04:23] I am thinking along the same lines. [04:23] goksu: it should [04:23] goksu did you do custom partitioning? [04:23] I have 4 hdds. I made raid5. [04:24] goksu: hardware or md raid5? [04:24] goksu lvm raid5? [04:24] no I did not. guided with lvm. [04:24] I missed the problem. what is it? [04:24] PhotoJim: 14:17 the installation goes just fine from ubuntu-server-64.iso. but I can not boot after install. ml350 hangs after reboot saying "attempting Boot from hard drive c:". [04:24] twb: Thanks. [04:25] :) [04:25] I had a problem with RAID1 (software) not enabling quickly enough for a successful boot. adding a rootdelay solved it. but your problem is not what mine was, alas. [04:25] so after pluging the 4 hdds. I did a raid5 from the boot F8 or F120 I guess. [04:26] no. I have not installed a software raid. because I dont know how to do that. and the raid5 install I did I did before the ubuntu cd got inside the machine. [04:27] goksu: ok, so you are using hardware raid? [04:27] yes hardware raid. raid5. [04:28] goksu did ubuntu install see 4 drives or 1? [04:28] I have 4x 146GB drives. the total now with raid5 is about 410GB. so yes I t did. [04:29] goksu see 1 drive @410GB? [04:29] yes. [04:30] should I have done a raid5 on 3 drives and set the fourth as a hot spare? [04:31] no. [04:32] ok. so Ubuntu installs from cd ok. but I can not boot after the cd is removed when asked. [04:32] i used the ubuntu server guide to set up postfix with tls, but mail clients are complaining that the certificate is out of date. Can anyone point me in the direction in which I am going wrong? [04:32] goksu setting up hardware raid varies from card to card. it's fairly easy to screw up. I would check the raid card manual. [04:33] I hate hardware raid [04:33] Especially fakeraid [04:33] goksu sounds like problem with raid card and not ubuntu. guessing. [04:34] friartuck: I'll go through the manual again. but shouldnt ubuntu have said so when I last installed? It even asked to removed the old swap partition and all from the previous install attempt. [04:34] boot from raid5 is often problemmatic [04:35] geni: hmmm. that means not possible for ubuntu or needs workaround? [04:35] goksu well, when hardware raid is done right...the OS thinks there is only one drive. [04:35] friartuck: yes that what I know. [04:36] till what time can I count on you guys being around? [04:37] goksu: it doesn't work that way. [04:37] goksu: people here are from all over the world, and they come and go individually. There's no roster. [04:38] goksu this guy did it with guided partitioning and no lvm: http://www.cylindric.net/blog/2007/09/11/ubuntu-on-a-compaq-ml350-server maybe reinstall and try no lvm... [04:39] twb: cause yesterday I couldnt find anyone. being the weekend and all. [04:39] Shrug [04:39] its good to know. :) [04:40] If you need support bad enough there are people you can pay [04:40] Otherwise you take what you get [04:40] kick it [04:40] twb: what I try to do here is to get a linux server into the company. they insist on getting everything with windows. and they cant do it properly even then. [04:41] goksu: commercial Linux support is available from quite a few places. there are tons of advantages to running a server on Linux versus Windows, but whether it makes sense at a given company depends on a lot of things. [04:42] ok some background. I am a civil engineer, lead planning engineer here in qatar (thats gmt+3 so 06:30 now). I have been trying to get most of my work onto the linux side. [04:43] I have already moved my two laptops to ubuntu. and what I have been trying with windows it is easier with linux. the learning curve is higher but I like to read manuals anyway. :) [04:43] goksu: I did not see your Q immediately, it did not flag to me due to mis-spelling of ny nick. A usual workaround is to have a small un-raided /boot which then goes to the main system in a raid5 layout [04:44] A hardware raid1 is also OK, depending. [04:44] goksu try the install without lvm. just use regular guided. leave the raid5. [04:45] genii: he's using hardware raid5, so a separate /boot shouldn't be necessary. [04:45] friartuck: I will try without lvm now. [04:45] twb: Even hardware raid 5 controllers often do not allow for boot. The adaptec series has a few like this for instance [04:46] genii: that's retarded [04:46] I think it's an MBR issue when the data is being striped [04:46] everything I hear about hardware raid makes me sad [04:47] twb that's a shame, it makes for very fast disk access and reliability. raid is good. [04:47] We bought a fancy IBM rackmount box with hotswap drives for a customer, and only later found out that you had to ask specially if you wanted the hardware raid firmware to support RAID5 [04:48] friartuck: I have no problem with md RAID, I use it a lot. [04:48] twb: That totally sucks [04:48] (the firmware issue) [04:48] friartuck: but hardware RAID is like SCSI, you have to have the right kind of jewelled knife and it has to be a full moon and shit [04:49] genii: I think that was also one of the stupid raids where you need a tainted driver to make it appear to the kernel as a single drive [04:49] Ah, not true hardware raid then [04:49] The other reason I like md raid is that I don't need to buy spare copies of the raid controller, because md raid is md raid, and any linux can read it with any kind of controller [04:50] genii: bloody wacky hardware raid, at least [04:50] genii: stupid IBM... [04:50] * genii throws a rock at Big Blue for twb [04:50] ok I got this from the boot setup menu F10: boot disk status: passed-disk present, boot disk ready: pass -disk ready, verify boot sector: pass-valid os boot sector present. [04:50] Hm, perhaps it supports MBR [04:50] so I a am now starting the without lvm regular guided install from scratch. [04:50] But sata is always hot pluggable, right, so it's TOOOOTALLY safe to just open a cheap-ass whitebox tower and add/remove drives while it's running [04:51] >duck< [04:51] twb: I'm moving to combination SAS/SATA so I can eventually move it all to SAS [04:52] SCSI's just too expensive to justify for me. [04:52] sata 3Gb/s are nice these days. [04:54] twb: I definitely agree on the price issue [04:54] Yeah, the price of what? [04:54] Hi, could someone please tell me how to configure what port apache listens on? My isp blocks port 80. [04:54] Alex_21: SCSI drives [04:55] matthew-21: /etc/apache2/ports.conf [04:55] Thank you. [04:56] np [04:56] Oh, Matt, use "Sudo vi /etc/apache2/ports.conf" [04:56] meanwhil I have another question. [04:56] I am running ubuntu desktop edition on my laptops. [04:57] Got to Ubuntu for Laptops and Desktops [04:57] Lol, we don't mind here, but you'll get better support over there [04:57] I have tried to install the server edition onto them from scratch because all I needed was the server apps. installation went ok but at first reboot I got kernel error. [04:58] goksu strange, I'm running server 8.10 on a dell 810 np. [04:59] my question is: does that happen often? the server edition is geared for servers I understand but still it sould boot from a centrino 1.6 and a amd 1.6 [04:59] server 8.10 on a dell poweredge 2450 here at home. other than that RAID1 boot issue, which was pretty easily fixed, no problems at all. [04:59] goksu I've installed server 7x and 8x on all kinds of old desktops with no issues. [05:00] friarduck: I have an hp compaq nx7010 centrino 1.6 and an MSI m673 amd 1.6 running on 1.5 ram. [05:01] both installe dok but no reboot. anyway. I'll ask again when I do a server install on them. :) [05:01] goksu did you use 32-bit on those? [05:03] friartuck: I used 32 bit for the centrino. and 64 bit for the amd turion 64 1.6. [05:03] goksu and neither booted? [05:04] goksu here's recent post on same hardware, install worked: http://ubuntuforums.org/archive/index.php/t-1047447.html [05:04] friarduck: neither booted. I was a little surprised as one is an old but good laptop, the other one is new but not very high end. [05:06] PhotoJim: I have a couple of those 2450, nice boxes [05:06] friarduck: on the web page you sent. it does not say server. I couldnt boot server editions. but the desktop editions booted without any problems. [05:07] genii: I have two, but one isn't running (has CPUs but no drives or RAM). got them cheap, $50 for the pair. Very pleased so far. [05:07] I dont suspend or hibernate. they are left open 24/7. [05:07] one is anyway. [05:07] Is there a way to share things on an external harddrive using apacheÉ [05:08] matthew-21: apache is a web server, it's not meant to be a file server. but you can do anything on an external drive that you can do on an internal one, using Linux. [05:08] goksu that's strange. server edition should work on anything that desktop works on. I think Murphy's Law having fun with you. [05:10] goksu: you could always try using the desktop alternate install CD. but in theory it shouldn't matter. [05:10] Yes, but my linux server really only has enough room for the os and a few packages and I am not sure how to share web files that are on my external harddrive. [05:11] matthew-21: you can mount filesystems anywhere you like. apache's web content is stored at /var/www. so if you mount an external hard disk partition at /var/www, your web server is using your external drive. [05:12] matthew-21 make a soft link (ln -s) in /var/www? [05:12] That's option 2. [05:12] and option 3 is to get a decent-sized hard disk. terabyte drives are $100-ish US. much smaller drives that are still really quite large are much less. [05:13] 1TB drives are freakin cheap now. [05:13] PhotoJim: I did a desktop install then added the lamp packages. I really like linux flexibility. [05:13] Alex_21: He only has a 10 GB Disk because that is all his web host provides [05:13] goksu: Linux is really awesome. the learning curve is sometimes steep, but I admire it more and more all the time. [05:13] friartuck: I have an acer easystorage 1TB. upgraded to 4TB. [05:14] friartuck: they're cheap enough that I have a pair of them on RAID1 for a home server, when I don't need a quarter of that much space. but it makes no sense to not have the space these days. I can grow into it. [05:14] Alex_21: That was about Matthew-21 [05:15] goksu nice. [05:15] énick matthew211 [05:15] Ok, Matthew-21: where is his external drive mounted [05:15] woops [05:16] PhotoJim I'm sure you will fill that volume :). [05:16] I'll be right back [05:16] friartuck: I have a feeling you're right. :) [05:18] Where is a Hard Drive mounted by default [05:18] ? Please [05:19] If it's not a system drive usually somewhere under /media [05:19] Alex_21 look in /media [05:20] Alex_21: but you can arrange to have it mounted wherever you like. [05:21] Alex_21 you type "mount" with no arguments to see what's mounted. [05:21] Ok [05:21] Thanks [05:23] Is there someone named Matthew-21 or something here? [05:23] Someone who was looking for help with sharing files [05:23] PhotoJim: believe me you grow into it. [05:23] I am doing the same thing [05:24] I was hoping to help. Maybe PM if that was ok [05:25] goksu you in Qatar? [05:26] friarduck: yes I am. [05:26] goksu IT jobs there? [05:26] ubuntu install is asking Activate serial ATA Raid devices yes/no. I say yes. [05:27] friarduck: yes plenty. even the government is looking for IT guys. its growing fast here. not enough qualified ppl., [05:28] friarduck: but funny they have only one IP. the whole country goes out on one IP. [05:29] ok ubuntu instal says Select disk to partition. [05:29] goksu strange. I was working for financial services co. when market tanked. maybe I'll head that way :). Qata nice place? [05:29] goksu how many disks does it present? [05:30] SCSI.CCISS (-,0,0) (cciss/c0d0) - 440.3GB Compaq smart array. [05:30] goksu I'd say your good to go. [05:30] friarduck: It is a very safe place. you leave your back on the car in a garage and come back 2 hours later and it still is there. [05:31] goksu ha ha. nice. [05:31] ok it removes logical volumes root, swap_1 and volume group etc.. [05:32] Hm. Compaq [05:32] you can find anything you look for. but everything takes time. [05:32] goksu I look for job...that's taking long time. =-O [05:33] partitions formating.... [05:33] so the hdds work ok. [05:34] How do I find drie that are plugged in but not mounted? [05:34] Please [05:34] friarduck: you are welcome here. [05:34] THE FORMAT ÝS STUCK ON 33% sorry caps.. [05:35] No, that is fine. It'll pass it eventually [05:35] there are a lot of ppl who work here and come and go as needed. [05:35] How do you find out what drives that are external can be mounted if they aren't [05:35] ? Please [05:35] Lol [05:36] island_swimmer: I dont know. I plug, and it shows. try lusb [05:37] if it does not I unplug and replug. but thats obvious. [05:37] goksu you may need to run a consistency check on the logical volume in the raid setup. it may need to be initialized or something. [05:37] island_swimmer type "mount" to see what's mounted. look in /media for external usb drives. [05:37] friartuck: it is "installing the base system" now. so ok I guess. [05:38] This is a CLI Command-Line install of Ubuntu with no other packages [05:39] Except some ssh and gui tools [05:40] And no it isn't moiunted at all [05:41] Mounted, ... Sorry, nor is it in "/media" [05:44] What can I do [05:44] Lol, ... Please [05:45] island_swimmer do "lsusb" and "mount" and post in pastebin.com [05:45] island_swimmer: sudo fdisk -l should show all the partitions. Likely an external will be sdb1 sdb2 sdc1 sdc2 or so on. Also when: mount is issued it will not be shown as boing mounted anywhere. You could try after finding what partition is something like: sudo mkdir /media/sdc2 && mount /dev/sdc2 /media/sdc2 as an example [05:46] If it completes successfully (in this example for second partition of sdc) then: ls /media/sdc2 would show the disk contents [05:49] island_swimmer: Also if the filesystem on it is not native linux you will need to have filesystem driver for whatever it contains and also specify that in mount command like: mount -t ntfs-3g /dev/sdc2 /media/sdc2 or similar [05:54] How do you get a wd's file type? [05:54] It is a WD HD [05:54] Western Digital [05:54] Mybook [05:57] island_swimmer: The: sudo fdisk -l command should have shown you that [05:58] island_swimmer: eg in my case: dev/sda1 * 1 19210 154304293+ 83 Linux shows the drive is Linux (ext3) [05:59] ok Ubuntu server Install onto prolient ml350 G5 raid5 does not work. I can not reboot after installation. I still get attempting boot from hard drive (c:) [06:00] it was an install attempt with no lvm. just regular guided. [06:00] It looks like SDA1 is part of the OS on the Internal Hard Disk. Is that right? [06:00] goksu: As a fast guess I'd say they have some custom MBR which still says something like C: instead of the MBR being based on GRUB [06:00] island_swimmer: Correct [06:01] genii: so what do I do now? [06:01] goksu: Did you install grub to the mbr of the first hd ? [06:02] genii: all I did was install the cd. nothing else. so if the cd did not install then grub did not install. [06:02] Well, I tried the command and it only shows my internal HD [06:02] genii: I did not specifically install grub. [06:02] Is ther a package that has all the drivers for every file type on it? [06:03] island_swimmer: Then it doesnt see the drive. Does it connect by ethernet wire or by usb, or firewire, or what? [06:03] USB 1.1 [06:03] island_swimmer: There isn't a single metapackage I know of that is some "all in one" for filesystems supprt, sorry [06:03] goksu that's strange, I think it's something with the raid/bios setup and probably not to do with ubuntu install. my guess. [06:04] It is some Windows compatable one I know, but I don't know which one [06:04] goksu: Can you make a single small raid1 and then the rest raid5 in bios/controller ? [06:04] Is that why it won't see the drive? [06:05] island_swimmer: If fdisk doesn't see it then it's something at a hardware level and not at some software level like filesystem type or such [06:05] Ok [06:05] I'll check [06:06] goksu: If so, suggest to install /boot and grub to the raid1and the system onto the raid5. [06:07] genii: ok. if nothing else will work. bu I really did not want to have to do a raid1. :S [06:08] goksu: The MBR of a raid1 will be like a normal disk but just twice, so it works with grub. The MBR of a raid 5 can vary wildly [06:08] goksu genii I would check the system bios, that's separate from the raid setup program. [06:09] friartuck: Yes, that may not be a bad idea. It could be also there is a "hidden partition" with system stuff thats causing it [06:09] goksu genii you should be able to do one raid5 volume, I've done it a bunch of times. [06:10] goksu genii but you have system bios program and raid card setup program to deal with. [06:11] the ml350 is brand new from the box. I dont think there is any residue in the hdds. [06:11] friartuck: He has no probs making a raid5 and ubuntu seeing and installing to it. He has some other probs which seem MBR related since it refers to "drive C:" etc etc [06:12] goksu: Is there some other hd in there not int he raid5 which it might be going to first and trying to boot from? [06:12] genii agreed, but maybe there's an onboard raid conflicting with an installed raid card...or maybe bios needs to know about raid card or something. [06:15] genii there is not. [06:16] goksu: There seems something on it here: http://ubuntuforums.org/archive/index.php/t-80342.html which suggests the initramfs needs to preload a driver called cpqarray [06:16] It's an old thread but perhaps still relevent [06:16] Although this would happen after grub [06:18] goksu have you managed to get into system bios program? [06:21] Hi [06:21] friartuck: yes I think so. everything is factory default. I am rereading the manuals from the hp.com site. they dont have any manuals on the cds attached to the box. :S [06:22] goksu: http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1238304153554+28353475&threadId=1237645 [06:22] would it be possible to build a Ubuntu Server that acts as the network firewall and also auto scans everything for malware? [06:23] goksu: Same problem you have answered by their tech support [06:24] genii goksu so you think he should boot off cd and do grub install? [06:25] friartuck: Thats what I'd try, yes [06:25] genii friartuck I'll do that after I reread the manual. [06:28] genii friartuck so I do a "grub-install /dev/cciss/c0d0p1" ?? from a boot from a live cd and from terminal? [06:29] goksu: I'd use the name of the drive you installed to, I think it was different than that one [06:30] genii goksu how would he get the physical? cxdxpx? [06:31] friartuck: fdisk should still list it. I'm gonna scroll up here, he mentioned disk name earlier [06:31] " SCSI.CCISS (-,0,0) (cciss/c0d0) - 440.3GB Compaq smart array." [06:32] genii friartuck so it is the same command then. [06:32] the "p1" on their command is partition1. I'd try just the disk name without partiton specified [06:34] goksu genii I agree. try grub-install /dev/cciss/c0d0 [06:37] genii goksu I've only installed grub with gentoo. just checked the docs and it leaves off the partition there too. [06:50] goksu: Any joy yet? [06:51] genii nope not yet. I am looking for the desktop cd. that one was live. [06:52] * genii makes more coffee [06:52] wow, lots o people [06:53] anyone wanna help me set up a server? [06:53] does it matter if the desktop cd is a 32 bit or not? [06:53] MusicGenious here's a good place to start: https://help.ubuntu.com/8.10/serverguide/C/index.html [06:54] quick question, which version should i use? [06:54] lts or newest release? [06:55] burning 64 bit desktop for grub-install [06:55] i wish there was a puppy linux server edition but ughh nope [06:55] goksu good idea. [06:55] 8.10 or 8.04? [06:55] im putting it on a compaq presario sr1115cl or something [06:56] 14:59 Oh, Matt, use "Sudo vi /etc/apache2/ports.conf" [06:56] I recommend sudoedit instead, since it reduces the amount of stuff that is escalated. [06:56] MusicGenious it's up to you. 8.10 has new packages. 8.04 has longer support. [06:57] will they both allow me to set it up with a dns hostname?... and is that free? [06:57] MusicGenious yes [06:57] i know ubuntu is free, but are host names? [06:57] MusicGenious: or your own network, certainly. [06:58] MusicGenious hmmm...hostname is just the name of you machine. [06:58] i want access anywhere [06:58] like if im at school or wherever [06:58] MusicGenious: then you probably just want to use a gratis dynamic dns service, so you will have something like musicgenious.ath.cx or musicgenious.dyndns.org [06:58] cuz im running on a home network and i got the whole 192.168.x.x thing going lol [06:59] will that be free? [06:59] That will be zero cost. [06:59] WORD!!! [06:59] i.e. free of charge. [06:59] and using this server will let me open and save things to it from wherever? [07:00] MusicGenious: that will give your router a permanent FQDN. You would then use port forwarding to make services visible from the internet. [07:01] ok, that will work, but will i be able to save files to it? [07:01] like if im at school and i do some homework and i wanna upload it, will i be able to do that? [07:02] Thanks for your help [07:02] Good night [07:03] MusicGenious: if you expose that service, and neither you ISP nor your school block your access, then sure. [07:03] MusicGenious the issue is security. making a server available on the internet opens a can of worms. [07:03] friartuck: good point. [07:03] aka people can do whatever they want to it? [07:04] MusicGenious: that depends on your security model. [07:04] MusicGenious if you don't know about security, then yes. [07:04] For example, if you enable remote ssh access via passwords instead of keys, then anyone on the internet can just keep trying passwords until they guess what yours is. Then they have full access to your system running as your user. [07:05] basically heres what im using it for besides my personal use. i have friends over and we record music, and i wanna upload all of our stuff so they can access it and show family and friends and stuff, it'll save on the cost of burning a crap load of cd's lol [07:05] MusicGenious: you realize that is almost certainly a violation of copyright law? [07:06] twb looks like he's talking about originals... [07:06] what is a violation of copyright law? letting people download the music ive recorded that i made myself? [07:06] im not sharing other peoples music, im sharing mine [07:06] MusicGenious: ah, if it's your music, that's OK. [07:06] hence musical genius lol [07:06] MusicGenious not for originals, just don't share Metallica. :) [07:06] yeah or linkin park lol [07:07] m shinoda isnt down with that lol [07:07] Technically copyright only applies to creative works. You could argue that Metallica's albums aren't ;-P [07:07] Aaaanway [07:07] ha ha! not since black [07:07] btw, if you guys are interested www.myspace.com/andyblankfield take a listen, feel free to critique lol [07:07] lol [07:08] friartuck: actually I think their best work was their covers album, garage inc. [07:08] twb Cliff Burton fan? [07:08] thats just me, but im trying to start a music club or whatever and make an album called collaboration generation [07:08] Cliff'em All? [07:08] friartuck: shrug [07:08] friartuck: I don't know much about art. [07:09] I think we've wandered off-topic. [07:09] nahh im waiting for the server edition to dl [07:09] btw how long should this take to set up? [07:09] ok ubuntu desktop 64 bit live cd book ok. :) pretty screen :) [07:09] MusicGenious: you can do an install just using a mini.iso [07:09] roughly [07:09] twb Cliff Burton was original bass player in Metallica. Yeah, it's way off topic. [07:10] its not hooked up to the internet, im using a usb adaptor at the moment [07:10] MusicGenious: ah, fair enough. [07:10] thats another thing, will i be able to use ndiswrapper so i can run it from wireless? [07:11] would it be possible to build a Ubuntu Server that acts as the network firewall and also auto scans everything for malware? [07:11] MusicGenious: ndiswrapper will work as well on Ubuntu Server as it does on Ubuntu. [07:11] never got it working on ubuntu lol [07:11] MusicGenious: precisely. [07:11] but it works on puppy linux... weird [07:12] MusicGenious: I recommend you pay more attention to Linux support when purchasing hardware in future [07:12] lwizardl take a look here: http://www.ipcop.org and here: http://www.smoothwall.org [07:12] lwizardl: that depends on how you define `everything' and `malware'. [07:12] lol, well its not a big deal, its just more convenient... but if i can figure this one out i should be able to build a puppy linux server edition myself lol [07:13] Really, the right way to get rid of malware is to take Windows away from your users. [07:13] lol [07:13] twb, well i have a few windows users on my desktop and i would like to make sure that they stay safe [07:14] lwizardl: that's not really possible. The best you can achieve is a holding action. [07:14] twb, i have enough trouble with her on windows she's almost 60 years old [07:14] lwizardl firewall from scratch is long story. ipcop and smoothwall is short story. [07:14] friartuck: why not ufw? [07:14] friartuck: ultimately they're all just wrappers on top of iptables [07:15] friartuck, i've looked at the ipcop stuff but i would like to also have Tor type setup on the same server machine [07:16] twb true, but ipcop and smoothwall rock. ipcop has plugins for snort and all kinds of stuff. you can do it by hand...but if one is asking in a chat-room then doing by scratch is long ways off. [07:17] lwizardl tor server on a firewall=bad practice. [07:17] genii friartuck I did a boot with livecd 64bit desktop. then did a "grub-install /dev/cciss/c0d0" (also with c0d0p1) I get message "could not find device for /boot: not found or not a block device. [07:17] Routers are for routing and not services. [07:18] friartuck, i don't want to run a tor server for others to access i just want to have all my connections tunneled through it [07:18] goksu: you need --root-directory=/mnt after mounting your root filesystem on /mnt and your boot filesystem on /mnt/boot. [07:18] Does Tor use tun/tap? [07:20] twb: could we go step by step? at the terminal I do what exactly? [07:21] I am not that good with the terminal just yet. :) [07:22] goksu: OK, so you should at present have partitions for the root and /boot filesystems. [07:23] twb he just booted off live cd. [07:23] friartuck: that's why he needs to mount the disks [07:26] goksu do: sudo fdisk -l and past at pastebin.com [07:26] twb friartuck I think I need to go step by step. 1. I booted from a livecd 64bit. it booted ok. 2. at the terminal I do what? the sintax escapes me. [07:27] friartuck: it would be better to get /proc/partitions [07:30] goksu just cut and paste the output in pastebin.com and hit the send button, then copy and paste the url link in here. [07:30] http://pastebin.com/d66a1856a [07:31] thats a cool site. :) [07:32] goksu now do: more /proc/partitions [07:35] http://pastebin.com/d707fd4ec [07:35] down below the previous post. [07:36] looks like I need to remake the raid5. I have tried 3 installations and it looks like residue from those. [07:38] goksu well, i dunno. try: mount /dev/cciss/c0d0p1 / [07:38] oops [07:38] friartuck: er, don't mount it there [07:39] not that [07:39] twb does he need to make a directory in /mnt ? [07:40] friartuck: I don't bother [07:40] twb this is not a production box. [07:40] friartuck: it's only a problem if it's a gentoo livecd [07:40] goksu try: mount /dev/cciss/c0d0p1 /mnt [07:41] friartuck twb it will be a production box when it is properly mounted though. [07:41] ha [07:42] friartuck twb I am at work this is the machine I will transfer my work load to. [07:43] goksu if it's mounted, you should see some directories with: ls /mnt [07:44] friarduck yes it looks like it did mount. I see bin cdrom etc... [07:47] goksu do you see boot? ls /mnt/boot [07:47] friartuck sorry for the typo. :) [07:48] friartuck ye sit is there. [07:48] I really need to work on my understanding of the linux file system :/ [07:50] twb I've only installed grub a few times with gentoo. do you think he needs: grub-install --root-directory=/mnt /dev/cciss/c0d0 ? [07:50] friartuck: yes, that's right. [07:50] friartuck: however check that there's something IN /mnt/boot first [07:50] If that doesn't work, try adding --recheck [07:50] ok [07:50] twb he sees boot in /mnt [07:51] friartuck: well obviously, because the root directory needs an empty dir there so as to mount a separate /boot, if it is a separate filesystem [07:52] twb he did regular guided partition. shouldn't be separate [07:52] Fair enough [07:52] ls /mnt/boot has files in it. also grub. [07:52] so I go with your command line instruction? [07:53] yeah [07:53] twb friartuck ? [07:53] ok then. :) [07:56] friartuck twb I am rebooting now. fingers crossed. [07:57] friartuck what does you nick mean? [07:58] goksu I'm old, single, talk about religion and politics a lot, pot-belly. [07:59] goksu friartuck is religious character in Robin Hood. [07:59] yes wel so? I am 34, working on my pot belly. :) just got married 10 months ago. [07:59] oh ok. [07:59] HOOLLYYYSHHHHH.t!! server login: ehehehe [07:59] goksu good luck with that. installing grub is easier than woman [08:00] goksu yay! thanks for the help twb! [08:01] My workstation used to be called rocinante. [08:01] I was gonna call it bucephalus, but then I thought "let's be fair, pebcak" [08:02] friartuck twb genii thank you all for your help. I could not have done it without you. :) [08:02] * genii wakes up when his name gets hightlighted [08:02] Ah, got it working then [08:03] goksu: Was the MBR after all then? [08:03] genii yes, that post you found did the trick. [08:03] Cool, glad to have been of some service [08:04] goksu that was hairy. you deserve some easy installs now! [08:05] twb: rocinante? [08:05] twb: Nice catch on the --root-directory=/mnt part btw (just checked backscroll) [08:05] goksu: look it up [08:05] friartuck: both need plenty of patience. [08:06] friartuck: now that I have the server up. I have plenty of more work to do. I'll attack the laptops next. :) [08:07] so that was the mbr? so the /boot is the name for the mbr and grub the software we installed in it to kickstart the boot sequence of the OS? [08:10] twb friartuck genii thank you all for the help. any time you come give a heads up well go drinking on me. [08:10] goksu ehh, not exactly. grub is installed in mbr and needs to know where /boot is. [08:10] goksu: stop invoking my name, I'm trying to concentrate. [08:12] t-w/b ok then. :) [08:39] is there any package that would setup a ubuntu-server to something similar to m0n0wall or pfsense? [08:42] CppIsWeird ipcop and smoothwall are linux equivalent to monowall and pfsense. [08:46] CppIsWeird or you can do netfilter by hand: https://help.ubuntu.com/8.10/serverguide/C/firewall.html [09:05] soren: i see your cobbler git branch hasn't seen activity in 9 months. is deploying ubuntu boxes with cobbler (hardware + virt) still on the horizon? [09:34] Anyone here familiar with DNS? I'm wondering - when I use the Dig command if there should always be an Answer section [09:34] well - if the server is working correctly, there should be an answer section... I assume [09:41] dei yeah, there should be an answer. try dig @4.2.2.2 www.google.com to see how it should look. === asac_ is now known as asac === ObiWanQueNoob is now known as UdontKnow [15:37] moin [16:52] anyone use jaunty's dovecot-postfix? it looks like postfix doesn't use Dovecot deliver properly out-of-the-box ... [17:00] beawesomeinstead: what do you mean exactly? [17:02] * giovani installs it in his jaunty vm [17:03] when you install dovecot-postfix it changes the mailbox_command in postfix/main.cf to use dovecot's deliver [17:04] cemc: Postfix doesn't use Dovecot's deliver out-of-the-box, regarding mailbox_command is specified in main.cf. Another thing is that, as was mentioned on Ubuntu Wiki, Dovecot LDA is default LDA, however postfix still tries to lookup users in it's database (which is not specified) -- IMO, missing in main.cf [17:06] default local_recipient_maps is from passwd file as far as I can tell [17:07] hmm, it installs mysql, but then maps users locally? [17:07] that's odd [17:08] huh? [17:08] giovani: it installs mysql-common since dovecot is compiled with auth-via-mysql support [17:08] beawesomeinstead: ah ... well they should use it [17:09] cemc: i checked, yeah, default auth db for dovecot in pas so yep, default local_recipient_maps makes sense [17:09] *pam [17:11] but still not sure what's wrong with mailbox_command. dovecot-postfix works smoothly after adding dovecot deliver as a service into master.cf, but... [17:13] * and after adding local_deliver = dovecot in main.cf of course [17:14] do you get any error messages? [17:16] kees: Could you possibly look into my merge proposal for apparmor at http://tinyurl.com/c5hjlk ? [17:17] cemc: I just tried installing dovecot-postfix on my jaunty vm, and sent a mail to the local user, and it got delivered [17:17] cemc: yep. Here is my postconf -n and error message: http://friendpaste.com/6RFbYIJKqjeQLTbAnmhD55 === chrisadams is now known as chris_d_adams [17:18] beawesomeinstead: does that flashadmin user exists as a unix user? [17:19] cemc: no, flashadmin is a virtual user, notice [17:19] local_recipient_maps = [17:21] oh, I see. well, it you user virtual users, then the mailbox_command won't work. there's virtual_transport = for that, I think [17:23] you would set virtual_transport = dovecot, then define that transport in master.cf [17:23] mailbox_command is for the local delivery agent of postfix (man 5 postconf and search for mailbox_command) [17:25] cemc: ah, a see. just for the record, in my stack i managed to get it working with instead of [17:26] thanks for your assistance! [17:51] where is the best place to add a script that should run just after a server boots? [17:53] yann2: you could add the script to /etc/rc.local [17:55] This script is executed at the end of each multiuser runlevel. [17:55] so it gets executed how many times? [17:55] just one? [17:55] yann2 here's a good doc: https://help.ubuntu.com/community/UbuntuBootupHowto [18:13] jpds: yup, did it earlier this morning (though I changed your patch around a bit) [18:15] kees: Oh, didn't see. Awesome, thanks. :) [18:15] jpds: np, thanks for the patch. :) [18:26] Does anyone know what the m in requested_mask="::mr" in apparmor is? [18:27] jpds: "man apparmor.d" it means, basically, map into memory for execution (a shared library) [18:28] kees: Didn't know that manpage, thanks. [18:30] np :) [18:30] it's mentioned at the bottom of "man apparmor" under "SEE ALSO", though it could probably stand out better. [18:35] Yeah, I didn't look hard enough. [18:37] all that said, there are still things missing from the apparmor.d manpage (just some new settings, like "deny" and "allow" prefixes) but there's a bug open for that already. === MusicGenious is now known as interwebs === interwebs is now known as xrter-1 === xrter-1 is now known as xrter === xrter is now known as Xrterl === Xrterl is now known as xRt3r === xRt3r is now known as MGMT [20:45] ubuntu server edition 8.10 with gui- gnome, is it possible to build and if so how would I do it? [20:48] dustin: GUIs aren't supported in this channel, yes, you can install the ubuntu-desktop package, which will install everything the desktop would have on top of your server install -- not much point though [20:57] giovani: is there anything special I need to do to install server 8.10 on a p3 w/256ram [20:57] dustin: nope, but I highly highly doubt you want to run gnome on that machine [20:57] 256 MB of ram is not enough for any serious desktop environment like kde/gnome [20:58] I'd stick to a straight server install -- no gui [20:58] it ran good as a desktop but when I installed apache with php over ubuntu 8.04 I ran into problems [20:59] what kinds of problems? [20:59] have you guys had any problems with the iso's on the ubuntu site, (I cant seem to get one to burn right) [21:00] you should be confirming that the md5 hash of the file you downloaded matches the md5s provided [21:00] php and apache didnt play well together being installed after OS [21:00] to make sure it wasn't corrupt during download [21:00] php and apache play fine together, it was probably a misconfiguration [21:01] thats Y I think that using server edition will help fix that (becouse I wont have to mesh them so I wont be the one to mess it up) [21:01] the desktop and server edition don't have any differences in the apache/php packages they offer [21:01] so that will not solve your problem [21:02] how do I test md5 b4 burning? [21:02] on linux, "md5sum filename.iso" [21:02] and then compare that number to the one provided on the download mirror [21:04] dustin: you never needed to manually pack them together, the LAMP package simply installs the same packages you would have otherwise [21:04] dustin lamp requires configuration [21:05] well I think its time to burn this php,apache,mysql all in one book becouse that means that all the info in it is wrong :S [21:07] there's no need for a book [21:07] plenty of great documentation on the ubuntu wiki [21:07] and on google [21:08] yeah well I am one of those ppl that has a library in my living room and I buy the book then ask why the info is wrong :S [21:09] well books are not bad ... you just need the RIGHT book [21:09] which book have you been following? [21:09] I need to start looking more online before I go to barns and noble [21:10] its SAMS complete guide to php apache, and mysql all in one [21:12] ISBN: 978-0-672-32976-0 I think I am going to leave a review with a few bookstores [21:12] l.a.m.p. you can get a full time job administering any of those initials. learning all of them takes more than a reading. [21:13] I am learning this in kindof a crash course fashion [21:13] :) [21:14] well ... most jobs involving Apache involve using it with PHP and MySQL :) [21:15] so, that's why there are books covering the topics together [21:15] even if they're basic [21:15] just out of curiosity does anyone know if there is a version of cuda for ati cards that I might be able to use to accelerate my software raid? [21:16] giovani true that, but if the environment is large enough there will be specialist for each. [21:17] friartuck: not in most companies [21:17] most companies don't hire real specialists -- they hire generalists [21:18] instalation question: when I install on this computer(I know these #'s are small) I have ane 20gb hdd and one 40gb hdd shold I raid 20gb of both and use the rest for non critical data? [21:19] of course raid1 for the raid [21:19] giovani the qualifier was "large". I worked at a firm that had a dedicated dns group, nothing but bind all day long. [21:19] or would this be a great waste of time [21:20] friartuck: yeah, missed that [21:24] so to raid or not to raid is it a waste of time or would I be able to use it I am going to host 5-15 websites and I dont think that I will be using dns binding [21:24] I tested the iso and it came out good so I am burning again hoping that it was just a bad disk last time [21:26] does anyone have an opinion on software raid on a system this small? [21:27] dustin lamp like raid is not a trivial topic. it's up to you. [21:28] I just was wondering if I would see any gain by using it and if anyone else here would opt for or against it on there own system if it were this small [21:29] in other words is there any point to it or am I waisting time trying to use it (my data isnt that critical) [21:31] server edition comes with openssh correct? [21:34] dustin: not until you install it [21:36] I am just making a list of things to install and things to update while I am here [21:36] dustin: it's a good idea to make a list of anything you find useful on your system. then if you reinstall or make a new system you will know what to install. [21:36] and I want to do this right this time because it is realy agrivating when it doesnt work right [21:37] dustin: I discovered yesterday that debian lenny doesn't automatically install telnet, which is useful for testing network connections even ify ou don't log into remote systems with it. :) [21:41] of course I would get I/O errors now that I have advice on how to install :S [21:41] anybody here like to work with hardware errors ;) [21:43] I installed this iso on a virtual machine that matched my specs without problems and now that I have the disk I cant get the thing to go grrrr [21:43] Hardware errors are a real b**ch. [21:44] especialy after you just removed a working build [21:44] *not a good working build but working just the same [21:45] I had some RAM issues with my server at home for awhile. it took me awhile to figure out the problem. [21:46] had some data corruption as a consequence. [21:46] well reset bios to defaults and try again :) [21:46] It felt amazingly good to figure it out though. [21:46] good luck. [21:46] actually, I learned one thing out of my RAM troubles. my server ran amazingly well with only 192 MB of RAM. [21:46] and better 192 MB of reliable RAM than 768 of dodgy :) [21:47] (only one stick was bad, thankfully. so I ran at 640 a bit until I got another 256M stick.) [21:49] this server was running with 256mb ram 933mhz proc and 2 hdd newly added-- dvdrom and cdr drives for reload [21:49] is this channel for people running the server version of ubuntu, or for people running any ubuntu version in a server environment? :) [21:49] and the drives are the only change since last load [21:50] mattt: I don't know for sure, but primarily 1. 2 is welcome I'm sure though. [21:50] yup we all are running or trying to get running servers [21:50] so far as I can tell anyway [21:55] photojim it was the disk ',( [21:55] dustin: as in the media? [21:55] as in the drive? [21:55] does anyone have a cdrom drive cleaning disk I can borrow (jk) and yes the media was the problem [21:56] I think my burner has a dirty lens or something [21:56] entirely possible. [21:56] laptop or desktop? laptop drives are easy to clean. [21:56] desktop drives are trickier. [21:57] I thought you'd tried multiple drives which is why I wasn't attributing your problem to your drive. [21:58] desktop and I have plenty of drives to try I will try different ones soon becouse I just tried to verify a known good disk and it failed the md5 test [21:59] known good as in I just built a working computer with it 2 days ago [21:59] well I'm glad you figured it out. [21:59] but at least it didnt give the I/O error [22:00] at least drives are cheap. if you need to replace it it isn't a huge problem. [22:00] actualy I have 5 computers I can canibalize for one [22:01] yes, I've done that. [22:01] final count 3 burners 1 dvdrom and 4 cdrom drives [22:03] my family was complaining about there computers always crashing so I built them a couple that I need to mail out but so long as they are here ;D [22:05] :) [22:06] I have a bunch of spare drives. [22:06] not worth selling. [22:06] nothiing wrong with a 16x DVD burner. [22:06] and the 8x in my server does fine, not worth tearing the machine apart to upgrade. [22:06] well how often do u realy use a cdrom in your server [22:07] not very often. [22:07] but once in awhile. [22:07] people send me DVDs of stuff occasionally. [22:08] I have my desktop for gaming and media and next to it is the server that just kinda sits there looking good [22:09] brb switching desktops [22:10] that feels better [22:11] I was in kde to help walk someone through something [22:51] Hi, on Ubuntu 8.10 server the libpam-chroot package appears to be roken [22:51] broken [22:52] best way to deal with that is to report the bug [22:54] How? [22:54] (Sorry, I haven't done many bug reports) [22:56] https://bugs.edge.launchpad.net/ubuntu/+source/libpam-chroot [22:58] Thank you [23:00] Supertanker: why's it broken? [23:00] there's a bug about that already [23:00] I'm loading to see if it's the same one [23:01] I read somewhere it was because it was linked with ld instead of gcc, or something really weird like that. [23:01] Yeah, same bug [23:01] https://bugs.edge.launchpad.net/ubuntu/+source/libpam-chroot/+bug/237308 [23:01] Launchpad bug 237308 in libpam-chroot "libpam-chroot broken" [Undecided,Confirmed] [23:02] i'll check it in jaunty tomorrow [23:02] 'night [23:03] Hah [23:03] Okay, I fixed that bug; now I get "Connection reset by Peer" instantly when I try to ssh to my server with the chroot'd user. [23:03] * Supertanker looks that up too [23:03] Thanks guys. [23:04] Supertanker: heh, i set this up the other week [23:04] Supertanker: a few notes ... make sure you mount /dev/pts and /proc [23:04] whats a good way to monitor my ubuntu gateway's traffic? I would like to check wich IP is consuming the most bandwidth [23:04] Supertanker: so, like ... mount --bind /dev/pts /chroot/dev/pts [23:05] Supertanker: and finally, make sure there is a passwd entry in the chroot for the user you're ssh'ing in w/ [23:05] mattt, oooh, I didn't think you needed a proc or the pts [23:06] Supertanker: this is probably the best resource i found: http://chains.ch/2008/01/26/chroot-environment-on-debian/ [23:06] Thanks [23:07] Eh [23:07] Somehow in my /chroot/dev I only have two files now: 0 and 1 [23:07] And I can't remove them [23:08] :o [23:08] You know what, mattt? [23:08] In my /dev/ there's no /pts, but there's a directory called pts [23:08] Is that what I need? [23:09] yeah [23:09] a directory called pts under dev :) [23:09] aka /path/to/dev/pts/ [23:10] Ah okay [23:13] Supertanker: but, i think not having /dev/pts mounted would give you a different error [23:14] mattt, ahh, I see [23:14] PTY allocation request failed on channel 0 [23:14] Now I'm getting somewhere :P [23:14] Supertanker: ah! [23:14] that's the one :) [23:15] (It turns out I needed to set UsePrivledgeSeperation no in sshd_config) [23:15] ah, crappy ... the box i'm using (debian lenny) didn't require that [23:16] Huh [23:16] I have /chroot/dev/pts created and it has two files inside [23:16] So why am I getting that error still? [23:17] hmm [23:17] let me have a look on my box [23:18] Okay [23:19] Supertanker: try mount --bind /proc /path/to/chroot/proc [23:20] Supertanker: btw, those files are probably there because of the --bind, you're remounting your /dev/pts on top of that directory [23:20] ...oh duh [23:20] * Supertanker tries [23:21] Nope :/ [23:21] Yeah, I fixed that already [23:21] your user is defined in the chroot's /etc/passwd, right? [23:21] and lastly, may want to install udev in the chroot [23:23] Yes to the first and I'll try that in a bit for the second [23:23] wait [23:23] ? [23:23] i just removed udev from my chroot and it still works ... sooo [23:24] the only last suggestion i have is ... to verify your /etc/security/chroot.conf file [23:24] Supertanker: what does your chroot line look like? [23:24] Just a sec [23:25] It appears to be valid [23:25] The last entry into the auth.log is "preparing to chroot()" [23:25] After saying it found the chroot_dir, etc, etc. [23:26] I could just try doing ./makedev generic and seeing if it's a device problem or not [23:27] sec [23:27] can you copy the line from chroot.conf? [23:27] cuz that caught me out too [23:27] What line? [23:27] where you define your user's chroot [23:27] It's just 'sentharn /chroot/home/sentharn' [23:28] that's the problem [23:28] change it to [23:28] sentharn /chroot [23:28] Ahhh [23:28] that wasn't clear to me either :) [23:28] Well we got a step closer [23:28] Now it doesn't kick me out [23:28] But it still says PTY failed [23:29] Oh duh [23:29] That's because I have no pts [23:29] * Supertanker recreates it [23:29] Boooh-yah! [23:29] * Supertanker hugs mattt [23:29] Thanks! [23:29] * mattt cheers [23:29] sweet [23:34] Hmmm [23:34] Is /proc really necessary? [23:34] It'd be kind of nice if I didn't have to put it in the chroot [23:35] don't think so [23:35] but then you can't ps, df, etc. [23:35] actually, try to unmount and see if you can still ssh in, not 100% sure [23:35] It closes the connection as soon as I log in if I try without it [23:36] I don't think it likes not having it much. [23:56] New bug: #351275 in mysql-dfsg-5.0 (main) "AppArmor rules cause tmp table problem" [Undecided,New] https://launchpad.net/bugs/351275 === owh is now known as owh_ === owh_ is now known as owh