/srv/irclogs.ubuntu.com/2009/05/08/#ubuntu-server.txt

pwnguindoes anyone know WHY stunnel is off by default?00:47
keesmathiaz: there will be a meeting at UDS to pin down the final list of packages that go EOL in June.00:49
pwnguin* Added /etc/default/stunnel with a variable ENABLE.00:51
pwnguin    ENABLE=0 by default since stunnel segv on some computer when all lines00:51
pwnguin    are commented (Closes: #197663, #197615)00:51
pwnguinkees: any security reason why I stunnel might not run by default?00:51
pwnguins/I//00:51
keespwnguin: errrm, dunno, I haven't used it much.00:55
pwnguinwell, i guess i'll file a bug and see who calls me an idiot00:56
keesheh00:56
pwnguinits handy for encrypting stuff like synergy00:57
* kees nods00:57
pwnguinotherwise you're just broadcasting root passwords over the network; probably not a great idea00:57
keesI always just used SSH for synergy00:58
pwnguin?00:58
pwnguini guess it's not quite the same00:59
keesssh -L something:localhost:synergy-port synergy-host00:59
keesthen connected synergy to port something00:59
pwnguinwell, stunnel seemed easier for windows00:59
pwnguinanyways, bug filling time, then i leave work01:00
=== stickystyle1 is now known as stickystyle
NativeAngelscan u tell me if xen server works in ubuntu server 9.0401:32
foxbuntuNativeAngels, you will likely want to look here: https://help.ubuntu.com/community/Xen01:41
NativeAngelsok01:41
NativeAngelsbut will it work on 9.04 foxbuntu01:44
foxbuntuNativeAngels, afaik01:44
NativeAngels?01:45
foxbuntuNativeAngels, as far as I know01:45
NativeAngelsi get a perl error when i run xm create01:48
foxbuntuNativeAngels, poastebin the error01:48
foxbuntupastebin*01:48
NativeAngelshttp://paste.ubuntu.com/166418/01:50
foxbuntuNativeAngels, thought you said perl error?01:51
NativeAngelssorry01:51
NativeAngelspython01:52
NativeAngelshow do i fix it01:52
foxbuntuNativeAngels, sudo apt-update && sudo apt-cache policy python | pastebininit01:52
foxbuntuthen give me that url01:52
foxbuntusorry typo in that01:54
foxbuntuNativeAngels, sudo apt-update && sudo apt-cache policy python | pastebinit01:54
foxbuntuugh01:55
foxbuntuIm on a roll tonight01:56
foxbuntuNativeAngels, sudo apt-get update && sudo apt-cache policy python | pastebinit01:56
NativeAngelshttp://paste.ubuntu.com/166421/01:56
foxbuntuNativeAngels, yea, as I suspected01:56
NativeAngelswhats wrong01:57
foxbuntupython version01:57
foxbuntuyou have 2.6 (which is default is 9.04) but xm is referencing 2.501:57
NativeAngelshow do i fix01:57
foxbuntuyou likely have a bug to report on xen, but in the mean time you can probably do this:01:57
foxbuntusudo apt-get install python2.501:59
NativeAngelsdo i re run the xm create now ?02:01
foxbuntuyeah...go ahead and try it02:01
NativeAngelsthis is what i got foxbuntu02:04
NativeAngelshttp://paste.ubuntu.com/166426/02:05
foxbuntuNativeAngels, did you sudo xm?02:06
NativeAngelsno02:06
foxbuntutry it with sudo02:06
NativeAngelsi got exactly the same result02:07
foxbuntuok02:07
foxbuntusudo apt-get install python-xen-3.302:08
NativeAngelsit says already newest version02:09
foxbuntuok02:10
foxbuntusudo apt-get install --reinstall python-xen-3.302:10
NativeAngelsok done foxbuntu02:11
foxbunturetry it now02:11
NativeAngelssame error as b402:12
foxbuntuhrm02:12
foxbuntualright02:12
NativeAngelswhat do i do now02:14
foxbuntuNativeAngels, uname -r02:14
NativeAngels2.6.28-11-server02:15
foxbuntuah02:16
foxbuntuyour booted into the wrong kernel02:17
durthey guys, does the server use sysvinit or upstart?02:17
foxbuntuNativeAngels, go through all o these steps exactly to ensure you are using the proper things: https://help.ubuntu.com/community/Xen#Install%20from%20packages%20(recommended)02:18
hackeronhey, has anyone managed to get mod_xsendfile for apache working on jaunty? - anyone have a repository or package for it?02:18
NativeAngelssomeone said to user 8.04lts02:18
foxbuntuNativeAngels, what?02:18
NativeAngelsof ubuntu as it works on there02:19
NativeAngelsxen i mean02:19
foxbuntuNativeAngels, I would go through the documentation step by step again to make sure you set it up exactly as it is documented to work02:20
foxbuntuNativeAngels, xen has its own kernel, it doesnt run on top of the normal server kernel02:20
storrgieanyone know how to setup openssh to use arcfour?02:24
twbWhat is arcfour?02:27
storrgietwb: http://www.psc.edu/networking/projects/hpn-ssh/theory.php02:27
storrgieim not exactly sure02:27
twbOh, RC4.02:27
storrgie?02:28
storrgieyou know this?02:28
twb-o Cipher=foo, where foo is whatever OpenSSH calls RC4.02:28
twbThat assumes OpenSSH ships with RC4 support built in.02:28
twbYou can also set that in your ~/.ssh/config (per user) or /etc/ssh/ssh_config (per host).02:28
storrgietwb: not exactly sure what you mean by that02:28
storrgieahh can I?02:29
storrgiesshd config?02:29
storrgieits no server side?02:29
twbNo, it's a client-side option.02:29
storrgiethis is client config?02:29
storrgieahhhh02:29
twbThe ssh server makes a number of ciphers available, and the client picks the one it prefers.02:29
storrgiewhats the line in the client config02:29
twbSo in theory I suppose you could instruct the server to ONLY provide RC4.02:29
storrgieso im running ubuntu 8.10 with openssh, arcfour available?02:29
twbI don't know.02:29
storrgiehow would I try it?02:30
twbThis works: ssh -c arcfour fs pwd02:30
storrgiefs pwd?02:30
uvirtbotNew bug: #373513 in mysql-dfsg-5.0 (main) "mysql fails to install" [Undecided,New] https://launchpad.net/bugs/37351302:30
twbfs is my file server's hostname.  pwd is a command to run on it.02:30
twbAnother example would be "ssh -c arcfour mail.google.com -t mutt"02:31
storrgietwb: PM02:32
storrgiessh -c arcfour -p 11011 -X -L 3306:127.0.0.1:3306 user@host02:33
storrgie?02:33
storrgieit seems to work02:34
storrgiei can connect, however Im not sure how to check02:34
storrgieI would like to specify this in the ssh_config02:34
storrgieciphers02:35
storrgieis there a good program to do visual scp?02:37
giovanistorrgie: GUIs aren't supported here02:37
storrgiepwaaahaha02:37
storrgiei just didnt know if there was something that would have some ridiculous options on scp that I dont know of02:38
storrgieim copying massive data over ssh02:38
storrgielike02:38
giovaniman scp ... it's amazing02:38
storrgiei would like to do 25-50 GiB a day02:38
giovanidon't use scp02:38
storrgiewhat do you suggest?02:38
benc1I'm trying to create a boot script and getting:  warning: /etc/init.d/./ejabberd missing LSB information02:39
benc1this is the boot script: http://dpaste.com/41995/02:39
benc1any ideas?02:39
giovanistorrgie: depends on the situation, explain more about it02:39
storrgiegiovani: its a box in another country, 100m connection... A group of individuals generating lots of data, would like to pull down a subset of that data for daily examination02:40
storrgieive been just sshing in to look around02:40
storrgiebut I would like to mirror some myself02:40
giovanistorrgie: the data is entirely new every day?02:40
storrgietypically, otherwise I would use git02:40
storrgiei like git :D02:40
foxbuntustorrgie, sounds like a good se case for rsync02:41
storrgieis that encry?02:41
giovaniuh, version control is not appropriate for this02:41
giovanirsync is a file transfer mechanism02:41
storrgieif it was incrememntal changes... then yes02:41
giovaniencrypt it if you like02:41
giovanihow much of the data changes from day to day?02:42
storrgiewith ssh?02:42
giovani1%? 10%? 100%?02:42
giovanino, with ssl02:42
storrgieum02:42
storrgieprobably need about 10G a day to be really happy02:42
giovaniwhy would you use a shell for basic encryption?02:42
storrgieon heavy days02:42
giovaniyou're not answering the question02:42
giovani<giovani> how much of the data changes from day to day?02:42
storrgieim giving you a file size02:42
storrgieit changes daily02:42
storrgiei would need a subset02:42
storrgieprobably around 10 GiB02:43
giovaniok ... once again02:43
giovaninot file size02:43
storrgie100%02:43
giovaniok02:43
giovaniso use sftp or something02:43
storrgieconcerns about security... is that ok to use? everyone I hear says stay away from ftp02:43
giovanisftp uses ssh02:44
giovaniftp is just a protocol02:44
storrgieah, but then why not just use ssh transfer02:44
giovaniit can be encrypted just like any other02:44
giovaniit's better at some things02:44
giovaniscp is better at other things02:44
giovaniit depends on your needs02:44
giovanianyway, if you'd like to use scp -- go ahead02:45
foxbuntuim not sure how rsync is a bad idea, have a cron script run each day to sync up the new and remove the old from the local machine, same thing we do for mirrors at Mythbuntu02:45
storrgiethink sftp would be faster for the massive amount of data we are using02:45
giovanifoxbuntu: nobody said it was a bad idea -- but if there's a 100% change rate ... you're not gaining anything by using it02:46
twbBoth SFTP and (typically) rsync use SSH as the encryption layer.02:46
foxbuntugiovani, no, not really but he was asking for a simple way to sync data each day02:46
giovanifoxbuntu: sure ... why is rsync more simple than scp or sftp?02:46
storrgiefoxbuntu: it will be fine to manually select data02:46
twbIf the majority of data is unchanged, rsync will DEFINITELY be more wire-efficient than a pure SFTP/SCP copy.02:46
storrgieare there any advantages to sftp over scp02:47
giovanitwb: yes, we know, but we've already established that 100% of the data changes ... so, let's move past this02:47
twbrsync will ALWAYS require more CPU and I/O time on both ends than a raw SFTP/SCP, but usually this extra cost is negligible.02:47
giovanistorrgie: yes, a number02:47
twbgiovani: OK, sorry, I hadn't read back that far.02:47
storrgiebecause im currently scp'ing and with sftp i will need to install something new, have another service, have more ports open etc.02:47
giovanistorrgie: no ... no ports open, sftp uses ssh02:48
twbIf your data changes completely every day, I would advocate using scp -r with compression turned on.02:48
storrgieahh im listening02:48
twbBoth scp and sftp are enabled by default when you install openssh-server on Ubuntu, though the latter, at least, can be turned off.02:49
storrgieahh02:49
twbNote that SFTP doesn't really have anything to do with FTP or FTP/SSL.02:49
storrgieapparently sorry, one of the others is using sftp02:50
storrgiejust using the places>connect to server in ubuntu desktop02:50
storrgiesame transfer rate02:51
storrgieI think the major issue is my ATT DSL to the box02:51
storrgiesomething is really slowing it down02:51
twbTry enabling -o BatchMode=yes in your scp/sftp invocation.02:51
storrgieAnother guy is on comcast gets 1.2m from the box at all times, we ATT people are getting 120K02:51
twbstorrgie: change provider, then.02:52
storrgiewell can I run something to jump through the hops and tell me where the issue is?02:52
twbstorrgie: you want to isolate the network latency?02:52
twbstorrgie: try mtr-tiny.02:52
storrgiemtr-tiny <destination>?02:53
twbYes.02:53
foxbuntustorrgie, are you att people all on the same connectionnNNN?02:53
twbfoxbuntu: NNNN?02:53
foxbuntuugh there goes the keybord misfire again02:53
twbHeh.02:53
foxbuntucrazy arse keyboard I have...02:53
storrgieno we are on different locations around USA02:54
storrgiemtr-tiny not installed02:54
storrgieisnt mtr installed by default02:54
foxbuntustorrgie, what is your DSL down stream vs his cable down stream?02:54
storrgie600k vs whatever comcast is02:55
storrgiewith their speedboost and all that02:55
foxbuntuwell that explains it :02:55
foxbuntu:)02:55
foxbuntuyour DSL is slow, not the server02:56
twbIs 512kbps down normal for a US DSL line?02:56
foxbuntuI think the slowest down stream comcast offers now s 5M02:56
twbI'd have expected at least 1.5Mbps.02:56
foxbuntutwb, in some places, yes02:56
twbfoxbuntu: ah, fair enough.02:57
storrgiewhat about FISH?02:57
foxbuntuFISH?02:57
twbIn some places, .au is still using satellite and 56kbps modems :-)02:57
storrgiefish://<uname>@address:port02:57
foxbuntuoh for the xfer02:57
twbfoxbuntu: I think he's talking about gvfs protocols02:58
* foxbuntu got lost on the topic segway02:58
storrgieim not familiar with fish?02:59
storrgieshould i drop that idea also?02:59
foxbunturut oh03:02
foxbuntualmost out of battery power03:02
foxbuntubrb03:02
captainkirki recently changed my servers name from emerald2 to emerald, but when i login it still says root@emerald2:~#03:06
captainkirkwhere do i need to make this change?03:07
p_quarlescaptainkirk: sudo hostname emerald03:09
captainkirkok... seems to have worked.... thanks03:10
twbp_quarles: that only changes it until you reboot.03:15
twbcaptainkirk: in general, NEVER EVER EVER change a host's name after deployment.03:15
captainkirkhmmm is that the problem here....03:15
twbcaptainkirk: this is especially the case if you deal with LDAP.03:15
captainkirktwb: no ldap here (yet)03:15
twbcaptainkirk: for a base install with no services, you need to update /etc/hosts and /etc/hostname, and run "hostname <new name>".03:16
twbBut you will probaly find a large number of other places where the name is written in /etc or /var.03:16
twbA way to avoid this issue is to always give a machine a unique name (e.g. "fred"), and then assign it roles (e.g. "mail" and "www") via DNS CNAME entries.03:17
twbThen if you want to e.g. move the web server from fred to anne, you don't change fred's or anne's name, just the CNAME.03:17
captainkirktwb: server is still in testing, so i will go ahead and make the changes to the hosts files... i understand your additional comments re DNS etc... good advice03:18
twbI suggest you grep -r emerald2 /etc /var03:18
twbgrep -rl, maybe03:18
captainkirktwb: this identified the ssh key only03:22
durthey guys, does anyone know if ubuntu server use sysvinit or upstart?03:26
twbdurt: upstart03:27
durtsecond question then, anybody successfully replace upstart with sysvinit?03:27
twbThat is not supported.03:27
durtok, third question, anybody get bootlogging (userspace) to work with upstart?03:29
twbHar har.03:30
twbAssuming you're talking about bootchart-style "tell me what is making boot so damn slow" logging03:30
durtno, I need a mechanism to log messages on boot that do not get logged to dmesg03:31
twbYou mean lines like "Starting web server... apache" ?03:32
durtany message that happens before syslogd etc. starts up.03:32
twbBasically there is no mechanism for that.03:34
twbYou could probably build one, with a little effort.03:34
twbActually, console=/tmp/foo.log might work for some of it...03:35
durtwith a little effort I could implement the two work-arounds but I'm being lazy :)03:35
durtconsole logging is one of them03:36
durtwould that go in the boot: prompt?03:36
twbYes.03:36
durtWell that sounds easy, I'll try it thanks.03:37
twbI don't actually think it'll work, though :-)03:39
captainkirkhas anyone installed alfresoc onto ubuntu server?03:50
captainkirk*alfresco03:50
twbNever heard of it.03:57
uvirtbotNew bug: #373522 in samba (main) "samba failed in some way" [Undecided,Incomplete] https://launchpad.net/bugs/37352204:03
geniiI wonder if 372737 is also 37352204:13
captainkirkwhat is the command to enter to bring up the  original installation options in ubuntu server..04:14
tonyyarussoIs anyone aware of available vouchers I could use for LPI certification exams taken through Pearson VUE?04:15
twbcaptainkirk: what installation options?04:20
captainkirktwb: like, to install LAMP, or LDAP or postfix04:20
twbRegarding tasksel selections, I don't know.04:20
twbdpkg --get-selections will list all installed packages.04:20
twbdebconf-get-selections (from debconf-utils) will list all answers to questions asked via debconf.04:21
twbNote that these will include automatically installed packages / answered questions.04:21
captainkirktwb: tasksel is the one i was looking for04:21
Doble1Hey folks, how can I see the hit/miss ratios when using webalizer to look at squid's access.log ?04:21
captainkirktwb:  ... do you have a life outside of linux ...? :P04:24
twbNo.04:36
tonyyarussoPeople do?04:37
oh_noesIs there a script that allows me to change hostname permanently?  /foo/changehostname.sh newname ?  And it'll update nessacary files and activate it?04:50
oh_noesSaves me re-inventing the wheel04:50
jasonmchristoshow do I create a network installable install package of ubuntu desktop, using a currently installed desktop as an example, and serve it via ubuntu 8.04 for network install?05:04
LinuxMercedesOk, so I'm running Ubuntu server on a webserver, and I recently gave a friend an account.  I added both of us to a group called webmasters, and then changed the group of all the files in the /var/www directory to webmasters.  I also changed all the permissons to 755 (I know, don't need executable, per se).  He still can't write the files.  Any ideas?05:22
p_quarlesLinuxMercedes: what's the output of: ls -lh /var | grep www05:24
LinuxMercedesdrwxrwxr-x  9 nathan webmasters 4.0K 2009-05-07 22:28 www05:25
LinuxMercedesdrwxrwxr-x  9 nathan webmasters 4.0K 2009-05-07 22:28 www05:25
LinuxMercedesdrwxrwxr-x  9 nathan webmasters 4.0K 2009-05-07 22:28 www05:25
LinuxMercedesdrwxrwxr-x  9 nathan webmasters 4.0K 2009-05-07 22:28 www05:25
LinuxMercedesoops05:25
twbp_quarles: -d is your friend.05:26
LinuxMercedesonly one of those05:26
twbp_quarles: ls -hld /var/www/05:26
LinuxMercedesI get nothing for that05:26
p_quarlestwb: yes, I knew there was a better way it wasn't occuring to me05:26
twbLinuxMercedes: what does "id" print?05:27
LinuxMercedesuid=1000(nathan) gid=1000(nathan) groups=4(adm),20(dialout),24(cdrom),25(floppy),29(audio),30(dip),44(video),46(plugdev),104(scanner),109(lpadmin),110(admin),115(sambashare),1000(nathan),1002(webmasters)05:27
twbHm.05:28
twbLinuxMercedes: and you say that "ls -hld /var/www/" prints nothing?05:28
LinuxMercedesUhh..no.  Let me run that05:28
LinuxMercedesIt says05:29
LinuxMercedesdrwxrwxr-x 9 nathan webmasters 4.0K 2009-05-07 22:28 /var/www/05:29
p_quarlesI would try logging in as the other user and running touch /var/www/test -- then give us the error message if any05:29
* LinuxMercedes is not new to linux, but is new to multiple users05:29
LinuxMercedesp_quarles, ok05:30
LinuxMercedesno errors...05:31
LinuxMercedesok...it's working for me now.05:32
p_quarlesLinuxMercedes: the file is there, I take it? if so, nothing's wrong05:32
LinuxMercedesyep05:32
LinuxMercedesok, it works on my side05:33
LinuxMercedesApparently there's something screwy going on on his side05:33
p_quarlesso, what's different about the way the other person was attempting to write to this directory?05:33
LinuxMercedesor maybe there's pebkac05:33
LinuxMercedesI'm not sure05:33
p_quarlesthat's my first guess :)05:33
LinuxMercedesyeah05:34
LinuxMercedesWell, I'll give him the benefit of the doubt because he said he was really tired =]05:34
LinuxMercedesThanks for helping the newb out here =]05:34
=== RoAk is now known as RoAkSoAx
wizardslovakwhats up people06:11
foxbuntuwizardslovak, the sky?06:12
wizardslovakdark here lol06:12
foxbuntudoes that mean the sky is no longer up?06:13
wizardslovaklol forgot not everybody here is from place like me hihi06:13
wizardslovakyep , 1am06:13
wizardslovakso how are you06:15
foxbuntutired06:16
foxbuntuthings are not getting accomplished :(06:16
wizardslovaklol personal or linux oriented06:17
geniiI wonder if there's any distinction there for him, actually06:18
wizardslovakhehee06:18
geniifoxbuntu: Or her, if you are of the female persuasion06:18
wizardslovakdamn tomorrow i gotta format my laptop06:20
foxbuntugenii, not a chick sorry06:20
wizardslovaki decided to use kubuntu only06:20
wizardslovaklol horny genii06:20
foxbuntugenii, also, there is not a distinction...06:20
wizardslovaki just logged into server06:21
wizardslovakand i see restart required06:21
foxbuntuwizardslovak, sounds like you grabbed a kernel update06:21
geniiwizardslovak: I'm a eunuch06:21
foxbuntuheh06:22
wizardslovakhehe06:22
foxbuntugenii, Im a programmer by my own definition06:22
foxbuntugenii, http://wiki.foxmediasystems.com06:23
wizardslovakuuuuuuuuu06:23
* genii makes more coffee06:23
wizardslovakgenii: 2 sugars and little bit milk thx06:24
geniiwizardslovak: After I make it, it's "help yourself"06:24
twbEw, milk or sugar in coffee is Wrong06:24
foxbuntugenii, i prefer red bull thx06:24
geniitwb: I agree. I don't like polluting my coffee06:25
wizardslovakhmmm06:25
* genii digs up a Red Bull for foxbuntu06:25
wizardslovakthen double expresso shot ;p;p06:25
wizardslovakhow to check if everything works in server?06:26
foxbuntuwizardslovak, use it?06:26
* foxbuntu is a smart ass06:26
wizardslovakyea i updated from 8.10 to 9.0406:27
wizardslovakjust want to check if everything works06:27
foxbuntuusually the easiest way is to just check all your services06:27
foxbuntuas in...06:27
foxbuntutry it06:27
wizardslovakwell webserver works06:27
foxbuntuif you run a web server, try hitting the page06:27
foxbuntuect06:27
foxbuntuect06:27
foxbuntuect06:27
wizardslovakok ok ok06:28
foxbuntuheh06:28
wizardslovakwhat about see what programs are running06:28
foxbuntups ax06:28
wizardslovakfoxbuntu , u're sysadmin?06:28
foxbuntuwizardslovak, yup06:28
wizardslovakcan i ask you a question?06:28
foxbuntuis it on topic fo the channel?06:29
wizardslovakwell kinda06:29
wizardslovakhow do you become sysadmin?06:29
foxbuntuwizardslovak, thats not on topic...if you want to chat, join #foxmediasystems06:30
twbwizardslovak: you become a sysadmin by getting REALLY drunk, and waking up chained to a rack06:35
wizardslovaklol06:35
foxbuntutwb, don't give away all of our secrets06:35
wizardslovakweird is i never got drunk in server room06:35
twbAnd since it's your first position, the rack probably won't even contain rackmount gear06:36
foxbuntulol06:36
wizardslovakhmmm06:37
twbwhitebox towers with razor-sharp edges that DEMAND BLOOD06:37
wizardslovaklol06:37
wizardslovaktake glowes06:37
tonyyarussotwb: Good description....06:38
geniiwizardslovak: I doubt they'd let you bring a bottle into most of the data centers I've seen.06:38
* tonyyarusso just installed his first rackmount gear in his bedroom - is giddy06:38
geniitonyyarusso: Hehehe06:38
wizardslovaklol i used to do power lines for couple server rooms06:39
wizardslovakjust amazing to be in there06:39
foxbuntuwizardslovak, I have been in some impressive data centers before06:40
twbtonyyarusso: I once knew a girl who had most of a PDP in her basement06:40
wizardslovaklol  my bedroom is my server room06:41
geniitwb: PDP-9? 11?06:44
twbI don't know06:45
wizardslovakwhat are you people using for backup?06:55
twbwishful thinking06:56
twbOr in production, rsync with Solaris/ZFS (new) and rsnapshot (legacy).06:57
wizardslovakamanda06:58
tonyyarussowizardslovak: Attempting to use Bacula.  That thing's crazy complicated to configure though.07:00
wizardslovakwell i am reading about backups07:01
tonyyarussoStep one:  "You need them."  ;)07:01
wizardslovaki would love to have something what will backup every other day ,and replacing old file with new one07:02
wizardslovaksomething "configure and forget"07:02
tonyyarussoTrust me, that's not actually the configuration you want.07:02
tonyyarussoInevitably someone will say "Hey, turns out I messed up $file three days ago.  Can you give me the backup please?"07:03
tonyyarussoTo which you'll have to respond that all you have is a backup of the broken version.07:03
wizardslovakwell what would be good config?07:03
tonyyarussoYou need at least two copies in rotation (ie Day 1 - make copy A.  Day 2 - make copy B.  Day 3 - make copy C, delete copy A).  How many exactly and the timing of them depends on your local needs.07:05
tonyyarussoIn our setup there are different rotation schemes for different directories, since some things change much more rapidly than others.07:05
tonyyarussoThe best way to do it is to sit down with all of your users and find out how they are using files, and what their recovery needs would be.07:06
twbI hate rotating tapes07:06
* tonyyarusso doesn't use tape anymore07:06
twbThat's why I have an offsite RAID 5 array, which stores each incremental backup by using ZFS/hard links07:06
tonyyarussoEverything just goes on a TB HDD.  Ideally we should have a more redundant solution, but that's the budget for this quarter.07:06
twbtonyyarusso: ouch07:07
twbtonyyarusso: you should at least get RAID107:07
tonyyarussotwb: It's a five-man business, so everything's pretty tiny so far.07:07
tonyyarussoUp until a few months ago there were no backups.  Baby steps.  :)07:07
wizardslovakcan i well can i use usb attached hda?07:07
tonyyarussowizardslovak: sure.07:07
tonyyarussoOurs is at least eSATA, for speed, but USB would work just as well.07:08
wizardslovakwell thats just for study purposses for now07:08
wizardslovakso even dvd will  be fine07:08
wizardslovakwhat software do you use?07:08
tonyyarussoscrollback is your friend.07:08
tonyyarussoI even highlighted you!07:09
wizardslovakbacula07:09
wizardslovaksorry07:09
geniitonyyarusso: Making everyone work tonight, eh? ;)07:09
tonyyarussoyou betcha07:09
wizardslovakwhat do  you use BAT or BWEN07:10
wizardslovakBWEB07:11
twbIsn't amanda/bacula kind of overkill for a five-man 1×1TB backup?07:11
ajmitchmay as well start off doing it right07:12
tonyyarussotwb: Very much so, but I was advised to learn the real way now so I don't have to later.07:12
tonyyarussoPossibly by ajmitch :P07:13
ajmitchunlikely07:13
ajmitchupload all your private data to an anonymous ftp server, I say ;)07:14
geniitonyyarusso: We had a cute script one of the old guys wrote, at each login of a user it cached the ~ and at logout did a compare between actual and cached, backing up any differences. Worked pretty good07:14
ajmitchgenii: sounds like it could be slow for large home directories07:14
ajmitchmuch like NT's roaming profiles mess07:14
geniiajmitch: At that time we limited them to 2Mb. Nowadays we took quotas off07:15
wizardslovakis it possible to set for bacula to send backed file to other computer?07:16
arvind_khadrihi, if i wanted to make the login based on domain, do i have to change workgroup to domain in ldap.conf ???07:19
tonyyarussoyes07:19
tonyyarussowizardslovak: Bacula is a multi-level client-server setup.07:19
wizardslovaki mean instead of ,burning on cd/hda , send file over LAN to other computer07:20
tonyyarussoYeah, so do I.07:28
tonyyarussoSoon we'll be setting it up to back up files from a client computer in Connecticut onto our server here in Minnesota.07:28
arvind_khadritonyyarusso: hi, if i wanted to make the login based on domain, do i have to change workgroup to domain in ldap.conf ???07:33
tonyyarussoDon't know LDAP yet.07:40
NativeAngelshas anyone here got xen working on ubuntu 9.04 server ed07:58
plaeshey.. I have trouble with iscsi client :P08:27
plaesbasically iscsi stuff gets started before networking is up :(08:28
plaeshow can I change the order of the services and set iscsi stuff depending on the networking?08:28
jpdsplaes: Not sure how to do it myself, but I think "man update-rc.d" is what you're looking for.08:30
sorenplaes: You need to get open-iscsi to start after rcS.d/S40networking.08:30
sorenplaes: Are you using iscsi to access /usr or / or similar core parts of your filesystem?08:31
kinnazwith what command i can see what proccess has opened smt at some partition08:31
jpdskinnaz: lsof | grep /path/to/partition08:32
kinnazjpds, tnx08:32
plaessoren: /08:32
jpdskinnaz: Might have to run it as root to see certain stuff tho.08:33
sorenplaes: Then you're screwed.08:35
plaesit works manually... :)08:35
sorenHow?08:35
plaessoren: sorry for delays, I'm relaying for the friend who cannot use IRC :(08:37
plaesugh.. it get's mounted under /iscsi08:37
soren"it"?08:38
plaesugh.. dunno, the guy has something messed up..08:40
plaessoren: it was basically bug 227848 :(09:11
uvirtbotLaunchpad bug 227848 in open-iscsi "boot order wrong for iscsi" [High,In progress] https://launchpad.net/bugs/22784809:11
sorenNot if he's trying to mount / using iscsi.09:12
sorenThen he's got an entirely different set of problems.09:12
plaeshe tried to well, this was miscommunication09:12
plaesit goes under /iscsi09:12
plaeshrm..09:12
plaesnot / but /iscsi09:12
kinnazhas anyone encountered error wxport not found while sudo-ing09:42
kinnazstrange thing is i dont have any xorg installed and it seems to be related to xorg09:42
sorenWhat's the exact error message?09:48
sorenand the exact command line you're executing?09:48
NativeAngelswhats the best free hosting panel10:06
thefishanyone here managed to use unionfs to create a mirror?ie two writeable branches that are *both* written to on each write.10:31
twbthefish: no.  That is not what unionfs does.11:07
twbthefish: if you want that, you need to write a different fuse driver.  But using RAID1 would be far easier.11:08
thefishtwb: it needs to be per directory, i dont have the option to use volumes11:42
thefishwhat fuse driver?11:43
twbunionfs is a fuse driver11:43
thefishand what "other" fuse driver would you recommend11:44
twbYou would have to write one.11:44
thefishhaha11:44
twbIt's not hard, provided you know C.11:44
thefishand you have time11:44
twbIt'd only be about 100 lines long.11:44
thefishof course11:44
twbSorry, 500 lines11:44
twbthefish: alternatively, you can pay someone to write it11:45
twbthefish: but AFAIK there is currently no way to do dir-level mirroring.11:45
thefishcool, cheers11:46
kinnazdoes ubuntu 8.10 have ext4 support ?12:21
kinnaz*9 even12:22
jpds9.04 has ext4 support.12:22
kinnazokey12:23
kinnazjust looking at some tests, seems to give nice benefit with write speeds12:23
Kamping_Kaiserkinnaz, make sure your box doesnt hard shut down for any reason though12:26
kinnazits "weak" like reiser ?12:26
Kamping_Kaiserit holds its buffers longer between writes (iirc 15 seconds), so you may wind up with 0 length files12:32
Kamping_Kaiserthere a bug on launchpad if your interested enough ;)12:32
Kamping_Kaiserubottu, ext412:32
ubottuSorry, I don't know anything about ext412:32
Kamping_Kaiserubottu, your a useless bot :(12:32
ubottuError: I am only a bot, please don't think I'm intelligent :)12:32
Kamping_Kaiserubottu, ext4 is a recently released filesystem, available in Ubuntu 9.04. Be careful to keep your power running though: https://bugs.launchpad.net/bugs/31778112:38
uvirtbotLaunchpad bug 317781 in linux "Ext4 data loss" [High,Fix released]12:38
jpdsKamping_Kaiser: Yeah, but, that's been fied?12:41
jpdsfixed*12:41
Kamping_Kaiserjpds, if you've got an updated kernel, yeah. kernels probably been in the archive long enough to assume people have it i guess, but its still worth a warning imo12:42
Kamping_Kaiserjpds, in my mind ext4 still needs the 'new fs' warning flag anyway ;)12:42
simplexiowho runs server without ups  ?12:50
Kamping_Kaisersimplexio, people on a budget, or who havent thought about it hard.12:51
* Kamping_Kaiser only just got his servers onto ups12:51
simplexiowell if you dont have ups, then you shold use fs that dosent cache writes, or just disable them. assuming that you need system which dosnt loose data12:55
simplexiobut agree, for some budget home server ups is needed, is recommended12:56
simplexioand if you dont happen to have ups, its much better use ext2/ext3 than ext4 or xfs. no experince from other fs12:57
bencI have a boot script that workes on 8.10 but doesn't work on Jaunty http://dpaste.com/42109/14:31
bencany ideas?14:31
jpdsWhy does it not work?14:31
bencwhen I run sudo update-rc.d /etc/init.d/ejabberd defaults 3014:32
bencI get a warning. something about lsb14:32
bencand the server is not started on boot14:33
Kamping_Kaiserwhats the exact error, what exactly did you expect?14:33
bencKamping_Kaiser: I'll run it now and paste the error. a sec14:33
* Kamping_Kaiser wonders if you could be a bit more vague and hand-wavy about asking for help :\14:33
Kamping_Kaisercheers14:33
bencyou are right. sorry14:34
=== asac_ is now known as asac
bencthis is the warning http://dpaste.com/42112/14:35
jpdsMight not be the problem but you have four '#'s for begin instead of three :)14:38
bencjpds: where?14:39
bencjpds: ok. deleting one14:39
jpdsLine 5: #### BEGIN INIT INFO14:39
Kamping_Kaiserjpds, its a comment14:40
Kamping_Kaiserbenc, did you see the wiki page?14:41
jpdsKamping_Kaiser: $lsbinfo{'found'} = 1 if (m/^\#\#\# BEGIN INIT INFO$/);14:41
bencjpds: now I don't get the warning but it gives me help as if it didn't perform anything: http://dpaste.com/42114/14:41
Kamping_Kaiserjpds, where did you see that? :o14:41
Kamping_Kaiserah, theres the 2nd paste14:41
jpdsbenc: Try: defaults14:41
bencKamping_Kaiser: yes but can't understand14:41
jpdsKamping_Kaiser: /usr/sbin/update-rc.d14:42
bencjpds: :)14:42
bencjpds: thanks14:42
jpdsNo problem at all.14:42
Kamping_Kaiserjpds, {invoke,update}-rc.d ftw14:42
jpdsKamping_Kaiser: Absolutely.14:43
bencare you still talking about my script? do I have more errors?14:43
Kamping_Kaiserbenc, I'm supprised theres no ejabberd init script shipped14:43
bencKamping_Kaiser: there is with the package but I had to build from source14:43
bencKamping_Kaiser: and the directory structure when installing from source and from a package are different14:44
sorenbenc: There used to in Hardy, that's for sure. If it went missing, that's probably a bug.14:44
bencsoren: there is a boot script in the package. but I'm building from source14:44
bencsoren: I couldn't just copy the boot script from the package because the directory stucture is different14:45
sorenbenc: http://packages.ubuntu.com/karmic/amd64/ejabberd/filelist14:45
sorenbenc: ...very clearly shows it.14:45
sorenah14:45
=== MTeck is now known as MTecknology
rommeis it possible to hide users from each other?16:08
rommei want it be difficult to discover who else is using my system for regular users16:09
Kamping_Kaiseryes, but i cant tell you how16:11
Hecatei'd rather say, it's damn near impossible, unless you want to spend hours over hours.16:12
Hecatethere are a lot of different ways of figurting out, who's using the system, which are all accessible for non-root users.16:13
Hecatethe only "proper" solution i can think of, would be restricting access to proc- and sys-fs and various system calls.16:14
Hecatebut this would severely curtail a users freedom, or even make the system unusable.16:14
Hecate(just an educated guess, though)16:15
Hecateromme, i'm quite certain there is no perfect solution to this problem. how difficult do you want it to be, though?16:17
rommeHecate: at least i don't want him to be able to list contents of /home16:18
rommeat least one problematic user16:18
rommei have a bad "policical" situation in which one particular user shouldn't know another user is hosted here16:19
Hecatedoes that user have shell access?16:19
rommeyes16:19
Hecatethat makes it quite difficult.16:20
Hecateone cannot just change the DAC permissions on /home, since you need read access to the parent folders, to have access to the subfolders, as well.16:21
rommehmmph16:21
rommei think i fould a "solution"16:21
Hecateselinux/apparmor?16:21
rommei can try moving the problematic user ouf of /home into /16:22
Hecateworth a shot.16:22
Hecateyou'd still need to use ACLs to specifically deny that very user access to /home16:23
rommeit all woudn't happen if i didn't share a server with my girlfriend16:23
* romme reads mans on Access Control Lists16:23
Hecateso i assume, the access-restrictions should be as stealth as possible, too, in order not to offend her ...16:24
Hecatethen i just hope, she's not too skilled, since there are - as i already said - plenty of ways, to determine which users have accounts/home-folders/access/etc. on/to a system.16:25
Hecateall she'd have to do is read /etc/passwd, for instance16:25
Hecatemy recommendation, romme, just obfiscate the username of the user you'd like to hide.16:26
Hecatesimple, yet effective. kiss. ;)16:27
Hecatehttp://en.wikipedia.org/wiki/KISS_principle16:27
rommeno, she's not skilled. she can only use a file manager and the contents of /etc would scare her16:28
dmhardisonI have been setting up a PXE cluster and two of the machines I am installing use different nic drivers than the others, can I add a flag to the kernel boot flags to tell it to load the driver for that particular nic before continuing to boot the system, I really do not want to recompile the entire kernel for this.  I have an initrd image.16:31
jmedinadmhardison: why dont you add the drivers to initrd image?16:34
dmhardisonjmedina is there a simple way I can do that?16:35
jmedinadmhardison: what about reading man mkinitrd?16:35
dmhardisonalright.16:36
jmedinamkinitramfs16:36
dmhardisonI've added sky2 to this modules initramfs configuration file, and when I update the initrd image, it still does not add it, why!? it is in the modules directory of the system17:06
fevelhow do I restart bind?17:09
dmhardisonnm got it, just made a whole new image.17:15
jmedinagood17:16
Nafallokirkland: ping17:25
duvnelldon't yell at me, but is there a package that contains rpm-build?18:15
ivoksnope18:15
duvnellcarp and bass18:16
ivoksafaik, rpm-build is just alias for rpm --something18:16
ivoksbut i could be wrong...18:16
shirukenI'm trying to install Ubuntu server, but it keeps trying to go gui and my monitor won't display that resolution18:17
shirukenhow can I force into text mode?18:17
duvnellI believe you are correct sir18:17
duvnellrpm -ba works on RH.. but is unknown option on ubuntu18:18
duvnell's rpm18:18
duvnelloh well18:18
shirukenduvnell: I use dpkg -l | grep foo18:18
shirukenfor ubuntu18:18
shirukenobviously, replace "foo" with what you're looking for18:18
ivoksshiruken: ubuntu server doesn't have GUI18:19
duvnellbut that only lists what's installed18:19
shirukenso does rpm -ba18:19
shirukenivoks: then it must be a textmode vga= option18:19
shirukenhrm18:19
ivoksshiruken: when does it fail?18:19
shirukenessentially, I can get the kernel verboseness going on, but then at the end of post18:20
shirukenend of kernel post18:20
shirukenit throws it into a resolution my monitor can't handle18:20
ivoksshiruken: are you sure it's ubuntu server?18:20
shirukenI see syslogd18:20
shirukenyeah18:20
ivoksshiruken: ubuntu-server doesn't change resolution, it just starts ncurses based program18:20
shirukenubuntu 9.04 non-server installs fine (using the gui oddly enough)18:20
ivoksshiruken: then it's not the resolution that's the problem18:21
shirukenum, it is18:21
ivoksshiruken: which monitor/vga card is that?18:21
shirukenwe can go back and forth on this, I've been installing ubuntu-server for a while :)18:21
shirukendell 19" monitor on a ati radeon x30018:22
ivoksso, once kernel finishes, your monitor reports unsupported resolution?18:22
shirukenI have alternatively, thought about install ubuntu 9.04 without X1118:22
shirukenbut I couldn't figure out how to do that18:22
shirukenivoks: yes18:23
ivoksshiruken: have you tried cltr+alt+f2?18:23
shirukenyes18:23
shirukenctrl-alt-f1-718:23
ivokswhat does ctrl+alt+f1 shows?18:23
shirukenctrl-alt-backspace too18:23
shirukennope18:23
shirukennada18:23
ivoksf2?18:23
shirukenI was hoping to get at least a console18:23
shirukennothing18:23
shirukenjust the same resolution not supported18:24
ivokson f2 is a console in the same resolution18:24
ivoksf1 is also a console, though18:24
ivokswith ncruses program18:24
ivoksi'm puzzeld18:24
shirukenyeah, me too18:25
ivokshave you tried removing 'quite' optiong from boot arguments?18:25
shirukenyes18:25
ivoksquiet18:25
shirukenthat's how I got the kernel verbose messages18:25
shirukenand can see it going then a line with syslogd in it and nothing after that18:26
ivoksdoes ctrl+alt+del resets the machine?18:26
shirukenI do wonder if I should set a vga= option18:26
shirukenyeah, it does18:26
shirukenthough, I smash it a few times in frustration :)18:26
ivoksvery strange18:26
shirukenso I could see if once would be enough18:26
ivoksmaybe it needs bigger resolution than the one console has18:27
shirukentotally18:27
ivokstry vga=79118:27
shirukenI was thinking of doing that18:27
shirukenok, I'll be back18:27
ivoksor 79418:27
shirukenor "ask"18:28
ivoks791 is 1024x76818:28
ivoksthat should work18:28
shirukenI'll try all 3 unless one works before the 3rd18:28
ivoks794 is 1280x102418:28
shirukenyeah, 300 is 640x480@818:28
shirukenk, brb18:29
shirukenyeah, that worked18:34
shirukenI thought it might18:34
ivokswhich one?18:34
ivoksprobably both18:34
shiruken79118:34
shirukenprolly, all 3 would18:34
shirukenbut, I stop at the first one that works18:34
shirukenmight want to have that as an install option18:34
shirukenin the menu, the one with expert mode, and noapic18:35
ivoksi think it is...18:35
shirukenit's not18:35
ivoksFsomething18:35
shirukenI was kinda expecting it under f4 or f618:35
shirukenbut then, I have alot of residual learned behaviors18:35
ivoksheh18:36
shirukenthanks for the help, ah you're in Zagreb?18:37
ivoksyes18:37
shirukencool, my friend Miro lives there, he's a programmer type18:38
shirukenanyhow, thanks for your help again18:38
ivoksMiro lastname?18:38
ivoksnp18:38
shirukenMiroslav Silovic18:38
ivoksah, don't know him18:38
* shiruken nods18:39
shirukenwell, zagreb is a big place18:39
shirukenok, off to configure this server18:39
ivoksok, take care18:40
philsturgeonhey, I have recently set up a server with a lamp stack that was auto-installed when i installed virtualmin/webmin. i have lost root access on localhost...18:45
philsturgeonwhen i try to log in via mysql i get...18:46
philsturgeonERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)18:46
philsturgeoni can log in remotely, just not local :S18:47
jmedinaso where is the problem?18:48
jmedinasystem login or mysql login?18:48
jmedinathey are not the same root user18:48
philsturgeonmysql login18:49
philsturgeoni think the issue is i have several users with the same name18:49
philsturgeoni was trying to get remote logins working and i ended up writing something like GRANT AL database.* 'root'@'%'18:49
philsturgeonso i think that made a new user that can only access that db18:49
philsturgeonahh, nope i have cleared all permissions...18:52
pteagueany idea which might be better - install ubuntu-server 9.04 beta & then update or download ubuntu-server 9.04, install that, & then update?18:52
philsturgeoni tried to remove rthe duplicates and removed too many. how to insert new privlidges with no mysql access? >.<18:52
pteagueroot doesn't even have access?18:53
philsturgeonnope18:53
philsturgeonmega balls-up18:53
jmedinaphilsturgeon: can you stop mysql server?18:53
pteagueouch18:53
ivoksphilsturgeon: then access from outside18:54
ivoksphilsturgeon: and add root user with localhost as hostname :)18:54
philsturgeonivoks: i lost remote too18:55
ivoksthen you'll have to stop mysql18:55
ivoksdpkg-reconfigure mysql-server-5.018:55
jmedinaphilsturgeon: you can reset mysql perms, but you need to stop and start mysql18:55
philsturgeonif i reconfigure i may b reak virtualmin18:55
philsturgeonjmedina: i have stopped mysql18:56
ivoksyou won't breake it18:56
ivoksyou'll just reset password18:56
=== tuxlinux_ is now known as tuxlinux
ivoksoh, right18:57
ivoksbackup first, of course :)18:57
philsturgeonjmedina: ran the command, it asked me to enter password and confirm twice in a row18:58
philsturgeonerrord the 2nd time18:58
philsturgeonthen gave same error ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)18:58
ivoksthen the hard way18:59
ivokshttp://ubuntu.flowconsult.at/en/mysql-set-change-reset-root-password/19:00
philsturgeonbah screw it, quicker to rebuild the server19:01
philsturgeonthanks anyway guys :)19:01
ivokskhm..19:02
ivokshow is it quicker?19:02
philsturgeonits a mosso cloud server installed yesterday :)19:02
philsturgeonmay even have a "post virtualmin" backup19:02
philsturgeonyup, backup indeed. problem solved19:04
ymlhello I have an ubuntu server in a vbox configured in bridged mode. I can ping all the computer on my subnet except the gateway19:15
ymlthe subnet is 192.168.1.*19:15
ymlI can ping 192.168.1.11, 192.168.1.12, 192.168.1.13 but not 192.168.1.119:16
ymlwhere i can ping 192.168.1.1 from the host19:17
ymlso I don't understand what could prevent me to ping the gatway.19:17
philsturgeoni have set up a new cloud server that has only an ip address, now i am wondering how to attach domains19:21
LigHTRokHE:|19:22
LigHTRokHEattacha domains?19:22
philsturgeoni plan to have several servers on my domain serverofdoom.co.uk19:22
philsturgeonif i use dynamic dns then i can set this domain on no-ip.org i can point a sub-domain to this ip right?19:23
philsturgeonthen how to set up name servers on virtualmin?19:23
LigHTRokHEman resolv.conf19:25
LigHTRokHE=)19:25
pteaguei would suggest at least 1 external DNS unless you really don't care whether visitors get strewn to the bit bucket when you go offline19:26
philsturgeonim setting the domains up with namecheap, i can use their nameservers and enter them in the config here?19:27
pteaguemy last place of employment surprised me...  they had all this redundant stuff, all in the same data center, & both DNS were in the data center... power died & fried something to do with the dedicated incoming power line causing brownouts... discovered both DNS were in the data center so we couldn't even reroute people to a "yes we know we're offline" page19:29
pteagueyeah, should be able too19:29
jmedinaphilsturgeon: you can use namecheap nameservers or you can setup your own dns server with bind9, and probably you can ask your ISP to be a slave dns server for your domains19:30
jmedinapteague: read ubuntu server guide for information about setuing up a nameserver19:31
pteaguejmedina: 1 of the many reasons why i left19:32
jmedinapteague: sorry, the messages was for philsturgeon19:33
jmedinapteague: that is a common case for DNS19:33
pteague:)19:33
jmedinathey even add RAID1 to their servers :D19:33
jmedinaa lot of redundancy.......19:35
jmedinauseless19:35
Hecatejmedina, raid1 can save your butt, one day ;)19:42
jmedinaHecate: yeap, they had a server in degraded mod for a year19:42
jmedinathey only ignored all the alarms from nagios jajaja19:42
Hecatewell, a common raid1 doesnt save your butt twice ;)19:43
Hecatebut iff ppl do no realize that, its their own fault ... natural selection.19:44
celephaisHi, i want to backup a web server + mysql daily. which solution do you suggest?19:46
celephaisPardon, i have to backup a web server + mysql on another server19:46
Hecatejust the files the web server serves + the databases?19:47
Hecateor the entire box, celephais?19:47
celephaisHecate, only files served + database19:48
jmedinamysqldump + tar19:48
Hecatemysqldump --all-databases19:49
Hecateand if i were you, i'd rather use dar instead of tar19:49
celephaisHecate, how do i send it to the backup server?19:49
Hecateincremential/differential backups can save you a lot of space.19:49
Hecatepiping it through ssh?19:50
jmedinarsync file user@backupserver:/backups/19:50
celephaisHecate. ok thank you. But, just to know, if i were to backup lots of server which way do you suggest?19:50
* jmedina sugests bacula19:51
celephaisok thank you19:51
Hecatei dont knwo bacula, but if it concentrates most of the configuration on a single machine (to keep the amount of work caused low), it's good.19:52
Hecateconfiguring every server you want to back up to have it make backups regularly and upload them to a different box, causes lots of work.19:52
jmedinaI use bacula to backup linux, unix and windows servers19:52
jmedinait can do incremental, differential and full backup19:53
jmedinafull backup catalog19:53
Hecateparticularly if you make only a tiny change to the config, which you'd have to apply to all the servers ...19:53
jmedinacompresion, backup integrity checks,19:53
jmedinasecure communitcation with remote servers19:53
jmedinayou can encrypt your backups19:53
celephaisok , thank you all very much19:54
jmedinayou only need to install a agent software in the server you want to backup19:54
Hecatethat sounds like the piece of software, i've been looking for, quite a while now.19:55
Hecatejmedina, can it backup extended attributes?19:55
jmedinaHecate: sure19:55
jmedinaacl,user_xattr19:55
Hecateselinux attrs?19:56
jmedinamm not sure about it19:57
jmedinaI dont use selinux19:57
jmedinabut you can always use post and pre backup scripts19:58
Hecatei suppose, it does support them as well.19:58
Hecateprobably got ext34 ea-supoort built-in19:59
jmedinabacula 3 has much better acl support20:00
Hecatejmedina, does it store the backed up data in a (mysql|postgresql|sqlite) database? just read, that it requires on of the three.20:05
jmedinaHecate: just job records20:05
Hecatealright, thanks.20:05
jmedinadata is backup in files, tapes, dvds20:05
Hecatedefinitely gonna drop that one down on my useful software disk-20:05
Hecate*list20:05
jmedinayou can have different pools20:05
jmedinaHecate: it has a console tool20:06
jmedinain command line, gtk, and new qt based bat, witch rules20:06
jmedinayou can instala bat in admin workstation and manache remote bacula20:07
jmedinagood notification system20:07
Hecatestop ... you already convinced me ;)20:07
jmedinajajaja20:07
jmedinaHecate: -*10.....20:09
Hecatei beg your pardon ...20:09
jmedinasorry, I was cleaning my kb20:09
Hecatekk20:10
philsturgeonusing webmin/virtualmin how can i park one domain onto another?20:10
alex12hi guys, ive recently installed ubuntu 9.04 server on a g3 dl360 server with a i5 raid card ... 2 x 72 u320 scsi disks ... and im noticing a very high iowait times doing simple tasks, the system seems very sluggish and impossible to multitask .... ive read around this may have something to do with the latest kernel running at the moment? any recommendations on understanding a very high iowait time?20:26
jmedinaalex12 you can check whois doing i/o20:33
jmedinaiotop20:33
jmedinaiostat20:33
jmedinapidstat20:34
CharlieSuHow can I enable multiverse for a single package?  I'm having trouble finding documentation for that..  Thanks in advance!20:57
sorenCharlieSu: You can't.21:01
CharlieSusoren: I'm running 8.04 and would like sun-java6-jdk but that is it..  No options for that?21:02
HecateCharlieSu, download the package from packages.ubuntu.com and install it manually.21:03
CharlieSuSorry about htat..  did you say something?21:03
sorenWhy not just enable multiverse?21:04
Hecatemultiverse is bad. it will fuck up your box beyond repair. it can be easily compared to the dark side of the force. no way back. ;)21:06
ymldoes anyone know how to disable ipv6 on 9.04 ?21:07
Hecateyml. not possible. its built-in.21:07
ymlbecause i tried the techinic describe there http://ubuntuforums.org/showthread.php?t=87798&page=1521:08
ymlwithout success21:08
ymlHecate: that would explaing why21:08
Hecateyml, setting a drop policy for all three netfilter chains with ip6tables will pretty much disable it.21:08
Hecatethat's what i did.21:08
ymlthe pb for me is this21:09
Hecateipv6 used to be a kernel module (in versions < 9.04, now with it being built-in, there's no way i know of to disable).21:09
ymlOn Linux hosts, functionality is limited when using wireless interfaces for bridged networking. Currently, VirtualBox supports only IPv4 over wireless. For other protocols such as IPv6 and IPX, you must choose a wired interface.21:09
Roritharrhi guys, i've got a question, is it possible to install the ubuntu server on a 2gb CF Card?21:10
yml this is an extract from the virtualbox documentation21:10
sorenCharlieSu: Why not just enable multiverse?21:10
ymlIn french it means that the guest computer cannot acces internet if the host has IPV6 an is connected to the network using the wifi21:11
sorenHecate: Err... Not true.21:12
sorenHecate: sysctl -w net.ipv6.conf.all.disable_ipv6=121:12
sorenBam.21:12
Hecateahhh.21:13
Hecategood to know, thanks.21:13
sorenIt can also be done on a per-interface basis, of course.21:13
CharlieSusoren: I did.. Thanks..  Do you know how to get around the sun license agreements when installing?  I'm trying to do it automated21:13
ymlsoren: I imagine then then I need to reboot ?21:14
sorenyml: No, no.21:15
sorenyml: In fact, if you do, it'll be reset.21:15
sorenyml: If you want it to stick, add it to /etc/sysctl.d/ somewhere.21:15
ymlsoren: it doesn't seems to work : http://dpaste.com/42233/21:16
sorenyml: And you claim you've set that value correctly?21:17
ymlsoren: i copy paste from this window21:17
sorenCharlieSu: Something like: echo debconf shared/accepted-sun-dlj-v1-1 true | sudo debconf-set-selections21:17
alex12jmedina: thanks, but the problem is really bad disk i/o ...21:18
sorenyml: Sorry, what?21:18
alex12only 30megs per sec21:18
alex12when a sata disk can do like 60mb/s21:18
ymlI did : sudo sysctl -w net.ipv6.conf.all.disable_ipv6=121:18
ymland then what is in the link I have posted21:18
soren*shrug* Does it still actually /do/ anything regarding ipv6?21:19
sorenalex12: What are you testing, specifically.21:19
soren?21:19
ymlhttp://dpaste.com/42235/21:19
alex12soren: using dd .... etc21:19
sorenalex12: "specifically"21:19
alex12soren: secondly im doing a big import of sql - around 10gb of data ... and its doing it dog slow,21:20
alex12and doing other tasks at the same time like installing iotop21:20
alex12is dead slow...21:20
alex12and sluggish21:20
alex12like just sshing into the box takes like 25-30secs for a response for a login prompt21:20
sorenyml: Right. Does it still /do/ anything regarding ipv6?21:20
sorenalex12: That could be lots of other things, though.21:21
sorenalex12: DNS, for instance.21:21
alex12well right now im @ 40% io wait, some sur some sys, and rest idel ...21:21
alex12soren: sure i understand that, lets ignore the ssh slowness for now21:21
alex12just trying to figure out why other tasks while doing this sql import is sluggish, and swecondly21:22
alex12why the import is dead slow...21:22
alex12iostat only shows 3mb/s21:22
Roritharrhttp://www.youtube.com/watch?v=lZed9-OjR6k21:23
alex12like right now with iotop im seeing mysql being the only proces doing something21:23
alex12but top shows iowait of 50%21:23
alex12wtf?21:23
alex12and its only doing like 100-150k/s21:23
sorenThat does sound odd.21:24
sorenalex12: Have you tried bonnie++ by any chance? On an otherwise idle system, of course.21:24
alex12bonnie/21:24
alex12?21:24
=== dayo is now known as dayo_changed_his
=== dayo_changed_his is now known as dayo
sorenalex12: Yes.21:25
alex12i havent no, ill check it out21:25
alex12what is it?21:25
sorenbonnie++ - Hard drive bottleneck testing benchmark suite.21:25
alex12ill install it21:26
Adri2000no one is working on the vsftpd merge?21:42
sorenAdri2000: I thought you were :)21:42
Adri2000I am :) just wanted to make sure I'm not duplicating work21:44
Adri2000comment added on MoM21:44
alex12soren: im seeing crap io on the hdd using bonnie21:56
alex12its like it spurts and splorts in iotop aswell21:56
alex12but iowait remains solid21:56
alex12this is fustrating :(21:56
greenflyalex12: what's your free memory look like?21:59
greenflyhow far are you into swap?21:59
alex12nothing in swap21:59
alex12its a pure iowait issue, im finding it hard to nail22:00
greenflyyes, but swap issues become iowait issues :)22:00
alex12it22:00
alex12[21:49] * timburke (n=timburke@unaffiliated22:00
greenflyanyway I was just ruling that out22:00
alex12http://pastebin.com/m1eed696422:00
alex12surer22:00
alex12thats my free22:00
alex12bonnies writing really slowly ....22:01
alex12im on ubuntu 9.04 with 2.6.28-11-server22:01
alex12im thinking of rolling my kernel back22:01
alex12into the stone age to see if that makes a difference22:01
timburkeyes alex12?22:02
alex12?22:02
timburke<alex12> [21:49] * timburke (n=timburke@unaffiliated22:02
alex12sorry, mispaste22:02
greenflyalex12: this is a sata drive, right?22:03
alex12hp dl360 g3 - i5 controller - 2 x u320 scsi drives22:04
greenflyahh22:04
greenflyhw RAID1?22:04
alex12yeap22:05
greenflyI wonder how much that affects the throughput for just flat-out writing to disk when the cache can't help much22:05
alex12unsure22:06
greenflyya, would be difficult to test, as well22:06
alex12i shouldnt be getting 1-2secs of no writes, then maybe 100-150K/s writes for a few secs, then maybe 1 sec of 4MB/s wrtie, then back in circles22:06
alex12io wait all this time is like 40-60%22:06
greenflygetting any interesting scsi errors in dmesg?22:06
alex12nope22:07
alex12looks clean... nothing since 20secs from boot22:07
greenflymaybe boot from, say, a knoppix 5.x cd. should have support for HP controllers and you could test IO from that and rule out the kernel revision22:08
jmedinaI dont like hardwae raid, hard to debug when you dont have a linux tool22:08
alex12hrm ok ill give that a shot22:09
alex12how would i downgrade the kernel anyways?22:09
greenflythat's tougher... might have to downgrade the OS depending... but if you seem to get to that point it might be worth filing some sort of bug against the module22:10
greenflyespecially if you get an older ubuntu live cd (say 8.10) and also don't see the problem22:10
greenflythen it would classify as a regression and would be easier for people to test22:10
alex12ok well im downloading knoppix and ubuntu 8.10 now22:11
greenflyalso, both should have the ability to run apt-get from ramdisk so you could install bonnie if you needed to22:12
alex12ok22:13
alex12im noticing in iostat -k -x 122:17
alex12that await is sitting around 22022:18
alex12%util is @ 100% aswell22:18
jman888888How do i install plesk?22:31
jman888888....22:32
jman888888Ok how do i install plesk?22:33
alex12greenfly: changed some bios options, rebooted, and started the import again ...22:34
jmedinajman888888: plesk is not opensource, you better ask to plesk people as part of your support22:34
alex12iostat -x shows 6-10% util ... io wait is 1-2% ...... cached memory is slowly increasing....22:34
alex12i wonder when cached gets full ill loose all performance...22:34
greenflyalex12: I could see the import giving you half the performance you expected since it has to read in some chunks, process them, write them, then repeat22:35
alex12iotop and iostats shows writing/reading @ 4MB/s22:35
alex12i turned HT off, and set the system to "io performance"22:36
alex12rather than "memory performance"22:36
alex12whatever the f that does...22:36
alex12still reading and writing @ 3MB/s ... systems chugging away with strong user% ... low io wait @ 1-2%22:36
alex12%util in iostat is 5-10% ...22:37
alex12await is 222:37
alex12that was like 200 before22:37
alex12ok running out of cached now...22:44
alex12er free memory i mean22:44
alex12ok wow, im getting great stuff on bonnie now22:47
alex1230MB/s now./...22:47
alex12now great but lots better, during the mysql import ...22:48
jmedina:O22:48
alex12await is high22:48
jmedinaalex12: so what changed?22:48
alex12rebooted, and changed some bios settings:22:48
alex12[22:36] <alex12> i turned HT off, and set the system to "io performance"22:48
alex12[22:36] <alex12> rather than "memory performance"22:48
jmedina:O22:48
alex12during bonnie, await in iostat is 140->400 and util is 100%22:49
alex12which is expected ...22:49
alex12while bonnie is running, everything else is bogged down....22:49
alex12must be stressing the disks hard22:50
NativeAngelshello can anyone tell me what port ssh uses on a guest machine22:54
NativeAngelsfor xen22:54
jmedinaNativeAngels: the same when running in native, unless you change it22:55
NativeAngelshmm22:55
jmedinayou can verify with "netstat -pltn | grep sshd"22:55
NativeAngelsim getting timed out22:55
jmedinaof course in the server22:56
NativeAngelswhen i ping the guest machine i get destinatin host unreachable22:56
jmedinaNativeAngels: do you have access to Dom0?22:56
NativeAngelsim using putty22:56
NativeAngelswhat do you mean22:57
NativeAngelsthis is the setup jmedina http://paste.ubuntu.com/167188/22:59
NativeAngelsdid you get that jmedina23:01
=== yml_ is now known as yml
jmedinaNativeAngels: connect to xen1.example.com with something like:23:03
jmedina# xm console xen1.example.com23:03
jmedinalogin as root23:03
jmedinaand check ssh is running with23:04
jmedinanetstat -plutn23:04
jmedinaif not, install it23:04
jman888888Ok(JGB Was AFK) Whats a great oss Cpanel?23:05
NativeAngelsthis what i got after xm console jmedina http://paste.ubuntu.com/167232/23:12
phaidrossomething wrong with initrd or kernel modules ..23:12
phaidrosdoes your guest have the correct /lib/modules version (same as you set in you cfg) ?23:13
jmedinaNativeAngels: that is all?23:13
jmedinaNativeAngels: try to kill the machine and start it again23:14
jmedinaxm destroy xen1.example.com23:14
jmedinaand xm create xen1.example.com -c23:14
alex12jmedina, greenfly: bonnie did well: sql1,10000M,,,31599,15,17739,8,,,52860,16,577.7,1,16,+++++,+++,+++++,+++,+++++,+++,+++++,+++,+++++,+++,+++++,+++23:15
alex12thats during a sql import :)23:15
alex12hrm ill just leave it as is then23:15
alex12maybe it was that bios option ...23:15

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!