/srv/irclogs.ubuntu.com/2009/08/19/#ubuntu-server.txt

Djannakhansub: blogged : http://blog.mansonthomas.com/2009/08/locale-configuration-issue-on-ubuntu.html ;)00:03
Djannakhansub: thanks for the help ;)00:04
Ngare the official ec2 8.04 images available for download somewhere?00:19
psi-jack_Sooo, anyone know of a Ubuntu-based distribution that is configured to be a Central User Management system?01:52
psi-jack_eBox is working on it, but is not quiiite there yet.01:52
qman__I actually downloaded ebox to try that01:59
qman__haven't gotten into it yet, but even just looking at the site, it doesn't look good enough yet02:00
psi-jack_They say it'll be a few weeks before they gear it up for that.02:00
qman__quite frankly, that's one of the few things microsoft is still holding over the linux community--an easy, all-in-one directory service02:00
psi-jack_I know, I was very specifically opening that can of worms.02:00
psi-jack_pah! Easy?02:01
psi-jack_Active Directory, EASY? Are you nuts? :)02:01
qman__I guess that's an exaggeration, but it's arguably easier than setting it up the manual linux way02:01
qman__but if something like ebox does come together02:01
qman__that'll be a huge advantage02:01
psi-jack_Eh.. yeah, you plop in the Windows 2008 R2 disc, and install02:01
psi-jack_True.02:02
psi-jack_So,02:02
psi-jack_I think for now..02:02
psi-jack_i'm just going to use eBox and NIS+ for now.02:02
qman__I've tried several times to get an openldap based setup working, but it's just such a big task02:03
qman__automating the process would help a lot of people02:03
clustypsi-jack, nis+ ?02:13
clustypsi-jack, what package provides that?02:13
clustypsi-jack, still having trouble starting the damn nis server :(02:13
twbAFAIK NIS+ doesn't exist on GNU/Linux02:21
twbAlso note that NIS+ is deprecated or obsolete even on Sun gear02:22
twbqman__: getting pam_ldap working on the client side is dead easy.  It's the server side that badly needs turn-key level automation.02:22
psi-jackqman__: Yeah, it's sad too, cause, I used to know openldap like the back of my hand.02:33
psi-jackqman__: But that was back in 2.0 days. 2.4's a whooooole new ballgame.02:33
qman__yeah02:59
SJrI have been looking for a guide for installing Ubuntu Server via USB, a guide I found is here: https://help.ubuntu.com/community/UbuntuServerFlashDriveInstaller, but I was wondering if there was actually a utility, I thought there was02:59
qman__not to mention if you need an extra secure deployment, fully encrypted02:59
qman__there's so many options, you have to first decide what to use02:59
qman__kerberos, ssl02:59
qman__and if you need to integrate with windows, you're really in trouble03:05
twbqman__: windows OR samba03:31
SJrHow long should it take to create a LVM partition on a 1 TB drive?03:34
qman__quite a while03:34
qman__I can't say exactly, but that's a lot of space, should take anywhere from 20 minutes to an hour03:35
qman__maybe longer03:35
SJrWhy should I use LVM?03:38
qman__LVM allows for greater flexibility in your partitioning scheme03:38
qman__lets you treat multiple physical spaces as one unit, and create any number of partitions in it03:39
SJrHmmmmmm03:39
SJrEncrypted home directories...03:40
qman__for the sake of simplicity, I generally don't use LVM unless I need the features it enables03:40
qman__but to each his own03:40
qman__keep in mind formatting 1TB of space will take quite a while as well03:40
SJrhmmmm it seemed to have finished03:43
SJrwhich is excellent03:43
SJrbecause as god as my witness, judgement shall come to pass03:43
twbOnly for sucky filesystems like ext303:43
balltwb: is ext4 equally sucky?03:43
twbIn this capacity, yes, because it's backward-compatible with ext203:44
qman__I use ext3 simply because it's never given me any trouble03:45
qman__where XFS and reiser have03:45
twbqman__: I'm talking strictly about time to create the filesystem being O(n) not O(1)03:46
qman__that's pretty subjective and they're certainly good filesystems, just my experience03:46
twbAn operation being O(n) is not subjective!03:47
qman__no, that's not what I was referring to03:47
qman__I'm in an awkward position so my typing is slow03:47
twbOK, carry on then03:47
qman__from the instances I've encountered, ext3 is incredibly good at handling corruption, reiser is ok but takes a lot more work, and XFS is a disaster03:49
qman__I've lost entire XFS filesystems due to system crashes03:51
oh_noes1Is there a package I can install to update Ubuntu Server 8.04 with validated Public Certificate authorities?03:51
oh_noes1Im trying to "curl https://www.verisign.com" and it's not working03:51
oh_noes1I assume because it doesnt ship with Verisign's (or any others) public CA03:52
qman__yeah, I'm pretty sure there's a package with those in it03:52
twbXFS assumes you do not have crashes03:54
oh_noes1pzl help me find it :s03:54
twbXFS is Wrong to use unless you have a UPS and write-thingies, which IIRC LVM doesn't support.03:54
qman__I'm trying to find out what package it is03:54
twbAlso XFS needs you to be running the latest upstream kernel version because otherwise your whole system will explode with bugs03:55
qman__I have them installed on a machine03:55
twbBut APART FROM THOSE MINOR THINGS, XFS is fantastic.  So the XFS weenies tell me03:55
qman__heh03:55
twbwrite barriers.  Those are the things03:55
qman__incidentally, I was running with a UPS03:55
qman__but the system hard locked for some reason or another03:56
twbmd RAID and/or LVM don't support write barriers.03:56
qman__and poof, there goes my filesystem03:56
twbqman__: yup, btdt03:56
qman__I simply cannot figure out which package this is03:56
oh_noes1qman__:  found it ...  "ca-certificates" lol03:57
oh_noes1so obivous03:57
qman__I have a bunch of verisign and such certs in /etc/ssl/certs03:57
qman__ah03:57
qman__of course03:57
twbqman__: apt-file search .crt03:57
twbOr if it's already installed, dpkg -S or dlocate03:57
qman__nice03:58
qman__it's interesting you should mention that bit about LVM04:00
qman__the tutorial on the ebox website instructs you to create an LVM and XFS filesystems04:00
aubreanyone have any luck running tsm on ubuntu server jaunty 64-bit?04:07
uvirtbotNew bug: #415732 in bind9 (main) "Please sync bind9 1:9.6.1.dfsg.P1-3 (main) from Debian unstable (main)." [Wishlist,Confirmed] https://launchpad.net/bugs/41573205:41
cefis it just me, or is security.ubuntu.com rather slow?? damn these kernel bugs.07:24
twbWhen oh when will we get our ubuntu/kSolaris ?07:26
twb>duck<07:26
henkjancef: you can try to change security.ubuntu.com in /etc/apt/sources.list in yourcountrycode.ubuntu.com07:27
cefhenkjan: yeah I could, and trust that the local mirror is either up to date (it lags), and that they have correct (valid, untampered) updates07:29
henkjancef: ah. I did change sources.list to use the country mirror07:30
henkjanand I trust the country mirror, because we run it ourselfs :)07:30
cefhrm, 5% of the kernel before the connection to security.ubuntu terminates.. 3 times so far so 15% total.. guess we'll see07:31
cefhenkjan: yeah I use the local mirror, but it has not 100% up to date for security07:31
cefamazing, this attempt, I'm almost getting 20KB/sec!07:35
cefspoke too soon.. down to 9k07:35
cefwould be interesting to see how high the load figures are on security.ubuntu ;)07:42
LiraNunawhat's up with http://security.ubuntu.com ?07:43
LiraNunaheh07:43
twbhenkjan: I think that should be NN.archive.ubuntu.com07:45
twbWhere NN is an ISO country code.07:45
LiraNunathose with 8.04 and non-zero can 'skip' the update?07:45
LiraNunammap > 007:46
LiraNunaI can't seem to find the linux-image-2.6.24-24-virtual package,07:51
LiraNunaah, it's 32bit only07:55
LiraNunafigures...07:55
uvirtbotNew bug: #254687 in vsftpd (main) "userlist options doesn't work in vsftpd" [Low,Confirmed] https://launchpad.net/bugs/25468707:56
artillerytxHey guys08:16
artillerytxWhy is it i have to keep restarting apache2 to get my sub-domain to work ?08:18
jtimbermanartillerytx: when you make changes to apache configuration, even for virtualhosts, you need to restart/reload apache.08:26
artillerytxjtimberman: i haven't made any changes since i last restarted it08:27
jtimbermanartillerytx: i don't know what you mean then.08:27
artillerytxOkay it seems like my subdomain will work for a while then maybe a few hours later it stops working and the only way to get it working again is to restart apache208:28
jtimbermanartillerytx: as in it becomes nonresponsive? Perhaps a traffic or performance issue?08:29
artillerytxit says server not found08:29
_rubenchecking the logs would be a start08:30
artillerytxi don't see any errors in there08:31
artillerytxwhat am i looking for08:33
\shmoins08:34
atomic__yeah, security.ubuntu.com seems hosed from here too08:38
artillerytxokay cool i tried to run apt-get update and it said couldn't connect to that domain08:39
maswanatomic__: yeah, we've been discussing it over in -mirrors too08:39
atomic__btw, is it possible that local archives are not updated at the same time? im trying to update a server in a different country and apt-get ugprade seems to get the lists from the squid cache08:39
atomic__thnx maswan08:39
atomic__i mean apt-get update08:39
maswanbut it requires the appropriate person at canonical to take actionn08:40
atomic__its fairly early in the morning for the europe staff, they'll get to it :)08:40
artillerytxjtimberman: does http://swot.wwmcd.org work for you ?08:41
jtimbermannot found by my DNS server.08:41
artillerytxso its a dns issue08:42
artillerytxso should i check my bind logs ?08:44
ceffwiw, I get like 5% of a file and then the connection to security dies. restart the download (using -d to apt-get) and it resumes for another 5%08:44
atomic__things seem to have started moving09:04
=== scfh_ is now known as scfh
_rubenstupid makefile variable expansion shit09:09
_rubenbah .. might have to have my makefile create a modified makefile and then call that one .. if only i could have immediate expansion of variables09:24
acalvoHi09:33
acalvoI'm quite confused09:33
acalvoI have a server that acts as a PDC09:33
acalvoand it has a LDAP tree09:33
acalvoon the other side, I'm setting up a mail server09:33
acalvoI want to store mails in the mail server, under a fixed path09:34
acalvoI'm using dovecot and postfix09:34
acalvobut it seems that I'm misunderstanding several things09:35
acalvoI do not want to have virtual users09:35
acalvobut I don't know if the term "virtual users" applies to having the users in another server09:35
acalvowhile the mail server is configured to lookup thru LDAP (to log in to the server using SSH, for instance)09:36
Boohbahyes that sounds very confusing09:42
_rubenyup .. confusing.. :)09:53
_rubenand virtual users is nearly always what you want .. unless all email accounts are local users, and all domains are to be treated identically09:54
acalvowell10:02
acalvouf10:02
acalvoso confusing10:02
_rubenand well .. if you dont use dovecot's deliver lda but postfix' builtin local lda, mail by default ends up in /var/mail/<user> .. then again, that assumes you want all domains treated equally (if there'd be more than one)10:06
_ruben(<user> doesnt contain the domain, so user@domaina.com is the same as user@domainb.com10:07
_ruben)10:07
acalvowell10:08
acalvoI do have more than one domain (domain1.maindomain.com, domain2.maindomain.com)10:08
acalvobut it does not matter10:09
acalvothe thing is that I'm not able to deliver mail10:09
_rubenshow proof of that :)10:09
_ruben!doesnt work10:09
ubottuDoesn't work is a strong statement. Does it sit on the couch all day? Does it want more money? Is it on IRC all the time? Please be specific! Examples of what doesn't work tend to help too.10:09
acalvoAug 19 11:10:40 jupiter postfix/smtpd[3222]: NOQUEUE: reject: RCPT from localhost[127.0.0.1]: 550 5.1.1 <andreas.calvo@admi.esci.es>: Recipient address rejected: User unknown in local recipient table; from=<andreas.calvo@admi.esci.es> to=<andreas.calvo@admi.esci.es> proto=SMTP helo=<andreas.calvo?admi.esci.es>10:11
_rubenso your recipient table isnt setup properly .. i have no experience with postfix talking to ldap though .. could you pastebin the output of postconf -n ?10:12
acalvo_ruben: http://pastebin.com/d782d9f0210:13
acalvobut I'm using a documented guide in the ubuntu's community site10:13
_ruben(another hint is to start the setup using hash files instead of ldap, when that works, migrate those hash files to ldap one by one)10:14
_rubeni only see lists of aliases defined, no lists of valid mailboxes10:15
acalvommm let me see10:16
acalvo_ruben: well, it seems that I'm doing some progress10:20
acalvonow I see I'm login to the LDAP tree10:20
acalvoand it delivers to dovecot10:21
acalvobut it does not get the mail yet10:21
_ruben"does not get the mail yet" .. what does that mean?10:23
acalvopostfix can find the user10:23
acalvoand it relays to dovecot10:23
acalvobut still generates the non-delivery message10:24
_rubenpastebin the log lines that say so10:25
acalvohttp://pastebin.com/pastebin.php10:28
acalvosorry10:29
acalvohttp://pastebin.com/d76682ac210:30
_rubendovecot isnt accepting your email .. probably lacks a valid userlist as well10:31
acalvommm10:32
acalvoI can log in thru imap10:32
acalvoso it should be working10:32
acalvowhat I don't understand is why is generating the non-delivery mail to acalvo@esci.es, which is uid@domain10:33
_rubenthat's odd then .. dovecot isnt logging anything when postfix is trying to deliver mail to it ?10:33
acalvo_ruben: in a separate file, yes10:33
acalvobut it does not show anything relevant10:33
acalvojust says it's loading some plugins10:34
_rubenacalvo@esci.es is probably the return-path: used in the mail .. you didnt paste that part of the log ;)10:34
_rubens/return-path/envelope sender/10:35
acalvoone question: what does postfix needs to know when looking up the users?10:35
acalvotheir mailbox directory?10:35
acalvoor what?10:35
_rubennothing, just whether or not its valid10:35
acalvommm ok10:35
_rubendovecot needs to know the details10:35
_rubenoh .. i see the problem now10:36
_rubenyou have the domains listed in mydestination -> no virtual users10:37
_rubennevermind10:37
_rubenlocal users are delivered via dovecot too10:37
acalvoaham10:38
acalvoso it should look them using dovecot?10:38
acalvothe thing is that I want to believe that postfix in this scenario is a dumb MTA, it just relays on dovecot10:38
acalvoso dovecot should do all the job10:38
acalvobut I think it's not10:38
acalvopostfix needs to know that the user is valid and then pass the mail to the relay agent10:38
_rubenrelay=dovecot .. that looks odd to me .. it isnt treating it as local afterall10:39
_rubeni'd go for virtual domains instead personally .. using locals this way looks kinda nasty to me10:39
_rubenand you'll get some additional freedoms as well for "free" .. like being able to handle (certain) domains differently (might want/need it in the future :))10:40
acalvook, seems fine10:40
acalvosince I do have some different domains10:40
acalvoany good howto to do that using LDAP?10:41
_rubenmailbox_command and mailbox_transport .. seems the latter overrides the first .. i assume you have a dovecot entry in your /etc/postfix/master.cf ?10:41
acalvocurrently I was looking at https://help.ubuntu.com/community/Postfix/DovecotLDAP10:41
acalvo_ruben: yes10:41
_rubenthe ldap part doesnt really matter .. any howto on it using mysql would be fine .. you'll just have to modify the lookup files to talk to ldap instead of mysql for instance10:42
_rubenbut afaik, the problem is with dovecot, as postfix tries to hand it off to dovecot, but dovecot isnt accepting it10:42
acalvoat least now I'm seeing errors in dovecot's log file10:44
_rubenthat's "good" :)10:54
acalvonow it's funny11:08
acalvoif I send a mail it is stored in mail_base/user (as in user@domain)11:08
acalvobut if I log in thru imap it looks in mail_base/uid11:09
acalvoso... it is saving mail but I've to tell dovecot to use the same pattern to look for mail11:09
acalvolook and save11:09
\shguys, what is the best way to teach initramfs to deal with vlans?11:12
soren\sh: Why would the initramfs have to do that?11:13
\shsoren: it drops to a shell because it can't find an iscsi device, which is only reachable using my vlan network setup...I can see all interfaces != vlan interfaces in this shell11:14
\shthe real network setup is done after initramfs drops to the real root11:14
\shwhich is wrong11:15
\shin this case11:15
sorenYou've got root on iscsi?11:15
\shsoren: nope11:15
sorenWhy does this need to be in the initramfs then?11:16
\shsoren: no root...additional device somewhere mounted on /opt and it's written in /etc/fstab11:16
soreninitramfs only mounts /.11:16
\shsoren: which is strange...it breaks before / and after fsck11:16
sorenfsck? initramfs doesn't run fsck.11:17
\shsoren: so what breaks it then?11:17
sorenIt's hard to tell from here.11:17
stefan___hello11:18
sorenThere is no fsck in initramfs, so if it's after an fsck, it's not initramfs. You're barking up the wrong tree.11:18
soren\sh: Your problem probably is that the network interface isn't being brought up early enough.11:19
\shsoren: ok then it's not initramfs but something doesn't like to bring up all network interfaces  and that breaks iscsi to not find the devices, and the fsck.xfs wants to do its work, but fails and drops me into a root shell with only / mounted11:19
sorenOk.11:19
sorenS40networking runs after iscsi. If your network does not get set up by udev, networking will not be available when iscsi starts.11:20
sorenYou can apply a hack to fix it, but the proper fix is quite difficult to get right..11:21
\shsoren: so changing the bootorder of iscsi to start after networking should fix that11:21
sorenYou can start open-iscsi from an "up" clause in etc/network/interfaces of the interface in question, and then make sure the iscsi block device gets mounted at that point.11:22
\shsoren: that's the simple way...but looks like we should re-think the way of starting services which could need a full network config11:25
soren\sh: What we realy should do is fix the networking setup to be configured when udev discovers the physical devices in question.11:27
\shsoren: btw...is it possible to tell udev to setup bonds and vlan network interfaces somehow?11:27
soren\sh: Not exactly.11:30
sorenudev triggers on availability of physical devices.11:30
sorenvlan and bonding configuration needs to turned upside down, so to speak.11:31
\shsoren: ok...looks like that the problem lies somewhere else anyways../etc/init.d/open-iscsi is symlinked in /etc/network/if-up.d/ and afaik this will be called for all interfaces which will come up, right?11:32
sorenRight now, it looks for "auto" clauses and finds e.g. "auto bond0", which referes to an bonded interface made up of two physical interfaces..11:32
sorenWhat we should do instead (or in addition) is to have the "iface eth0" stanza say that it's part of a bonded interface called "bond0".11:33
sorenThat way, bond0 would be configured as the relevant physical interfaces come up.11:33
soren\sh: Yes, that's correct.11:33
\shsoren: ok...that's the bugger...open-iscsi is not started during bootup, but will be executed for any network device which comes up11:34
\shand it looks like that it breaks network setup when it tries to find the iscsi device on the if-uped interface, when open-iscsi can't reach the device11:37
\shs/device/isci-device/11:37
sorenIt shouldn't.11:39
sorenIt's meant to try to connect when each interface comes up and handle it all gracefully.11:40
sorenAnyhow, I need lunch.11:40
\shoh my...now it's getting really hard...rcS.d/S25open-iscsi11:40
_rubenacalvo: was out for lunch .. are you using prefetching in dovecot (one query for both user and passwd data)? if so, you're passwd query might give back the wrong locating, whereas the user query does not11:49
acalvo_ruben: well, I've enabled it a while back11:50
acalvowell, I've find a workaround11:53
acalvousing the %n variable didn't work11:53
acalvobecause in one scenario it referred to the user part in user@domain11:54
acalvoand in the other referred to the uid of the user11:54
_rubennice11:54
acalvonow I've try to use %i, which is the id of the user under unix11:54
acalvois really nasty11:54
acalvobut it's working11:54
maswan\sh: oh btw, do you have p410i controllers in your blades?11:55
\shmaswan: nope e200i11:56
\shmaswan: we don't need much io performance on the blades itself :)11:57
\shdrive io performance ;)11:57
maswan\sh: Ok, I guess I'm the only one with those then too. :)11:59
maswan\sh: That's what's onboard, just like the 10GE nics.11:59
\shmaswan: in our dl365er we are using p400i dunno what's the difference between p400i and p410i12:00
maswan\sh: yeah, we have some of those. these are the first one with these, and I was just wondering if you could reproduce a cciss issue for me. :)12:01
\shmaswan: sorry..I would like to..but can't...anyways what's happening?12:06
maswan\sh: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/41307012:12
uvirtbotLaunchpad bug 413070 in linux "karmic cciss: error messages on working device" [Undecided,New]12:12
\shmaswan: ok...what I can tell you, on the e200i it doesn't log any messages like that12:20
\shmaswan: and on my dl365 with a p400i also no sign of those12:21
maswan\sh: I have p400is too, noproblem there12:24
* \sh needs to find a good fix for this open-iscsi problem12:26
acalvo_ruben: noew everything works12:30
acalvojust one question12:30
acalvoI need to have several subdomains12:30
acalvobut I only can log in using the main address12:30
acalvoone user can have more than one mail address12:30
acalvoso user@domain.com works12:31
acalvobut user@sub.domain.com doesn't12:31
acalvoalthought it should look it up in the ldap tree12:31
_rubenacalvo: are those aliases, seperate mailboxes, something else?12:33
acalvono12:33
acalvoI want to use the same mailbox for the every user12:33
acalvoalthought a user could have more than one mail address12:33
acalvoit's like an alias12:33
acalvobut it's stored under the mail attribute of the ldap tree12:33
_rubena mailbox is associated to a username, and can have multiple email addresses bound to it .. to login to the mailbox, you use the username, not email address(es)12:34
_rubenthen again, it all depends on how you have stuff configured :)12:34
acalvothat last sentence didn't sound so good :/12:34
_rubenwell .. in my case, usernames are (primary) email adresses .. ppl would login using their primary email address, yet receive mail for any aliases as well (in that same mailbox)12:36
acalvothat's what I want12:36
_rubenhow are your mailboxes "defined" ? based on username or username@domain?12:37
RoyKacalvo: what mail system_12:37
RoyK?12:37
acalvo_ruben: username@domain12:37
acalvoRoyK: dovecot+postfix with ldap backend12:38
_rubenacalvo: im guessing that in your current setup, you dont really have "aliases", but each "alias" has become its own mailbox12:38
RoyKacalvo: there is a #dovecot channel if you have problems with that12:38
acalvoRoyK: I know, and I've been there12:38
_rubenyou'll need a way to differentiate between an alias and a mailbox12:38
_rubenwhich depends on your ldap schema12:39
acalvo_ruben: the thing is, the system is set up to deliver the mail not based on the address of the user, but the unix id12:39
acalvoso if a user has more than one address12:39
_rubenyou can then have postfix send mail for any aliases to the apropriate mailbox12:39
acalvoit will be redirected to the user id12:39
_rubenacalvo: why would you want users to be able to login using an alias?12:52
acalvowell12:52
acalvoI'm working for a university12:52
acalvoand some people need to have more than one addres12:52
acalvobecause they're in more than one department12:53
acalvofor example12:53
_rubenone mailbox ... multiple aliases ... only one login required12:53
_rubenthats the whole idea of aliases12:53
acalvoyes, I know12:53
acalvoand, in the old server (which I configured like 3 years ago), it worked12:54
acalvonot nice12:54
acalvobut it worked12:54
acalvolooking up every mail attribute for a user in ldap12:54
acalvonow, trying to use new ways to do that better12:54
acalvoit only works with the main domain address12:54
acalvowhile the user has more than one address12:54
acalvoso user@domain.com works12:55
acalvobut the same user, which has user@sub.domain.com, does not work12:55
acalvoand it's quite annoying12:55
_rubenwait .. define "works" .. are we talking sending mail (smtp/postfix), or receiving mail (pop3|imap/dovecot)?12:55
acalvosending mail12:55
_rubenahh12:56
acalvoI can see how postfix tries to find the user12:56
acalvobut it always fails12:56
_rubenshow logs? :)12:56
acalvopastebin thinks I'm posting spam12:57
_rubentry http://pastebin.ubuntu.com or so :)12:57
acalvohttp://pastebin.com/d303e802d12:58
acalvoreplaced the @ with -AT-12:58
_rubenmy guess would be flawed ldap lookup queries or something similar .. i find postfix' debug logs rather unreadable .. in my case (mysql based backend) i'd either sniff the mysql traffic or enable query logging for mysql .. not sure if ldap provides similar mechanisms13:01
_rubenbbiab13:01
acalvoI know13:02
acalvofunny thing is that I'm receiving twice the mails13:02
acalvoif I send them to the internal mailboxs13:02
acalvoany good webmail?13:41
acalvoNow we're using horde, but we must upgrade13:41
acalvoso we can change it for something newer13:42
_rubenim still "shopping" for a decent webmail interface .. roundcube looks nice, squirrelmail is the classic ofcourse, there's atmail too13:55
sgsaxacalvo: "good" is very subjective13:59
sgsaxI'd say most webmail apps are "good enough"13:59
sgsaxthey all kinda suck in one way or another, including gmail13:59
_rubennobody's perfect ;)13:59
sgsaxgmail fanbois would disagree with you :)14:00
_rubenhehe14:00
sgsaxthe uni I work at used a modified horde for a long time, had some serious scaling problems14:01
sgsaxnow we use hosted zimbra, which is interesting, to say the least14:01
_rubenhorde didnt appeal much to me last i checked14:02
sgsaxlike I said, it's about as good as any of the rest of them14:02
sgsaxmy hosting provider lets me choose between horde, roundcube, and squirrelmail14:03
_rubenlets just use OWA ;)14:03
sgsaxthere's good and bad about each of them14:03
_rubeni'll probably offer something similar (the choice of a few)14:03
sgsaxif you want simple, squirrelmail is the way to go14:04
sgsaxit's about as basic as you can get14:04
_rubenfuck .. got a 1G / (on a 2G flash disk) .. cant do-release-upgrade from intrepid to jaunty14:19
pmatulislanguage please14:30
* Boohbah gives pmatulis language14:35
sgsaxpara espanol, pulse 114:37
sgsaxpour le franncais, appuyez sur 214:37
sgsaxvoor Nederlands, druk op 314:38
_rubenhrm .. /boot refuses to get mounted during boot .. both when using uuid and label in fstab14:42
subpmatulis: apt-get install language-pack-en? :P14:43
sub_ruben: What does mount say when you try to mount it?14:43
_rubenmount: special device /dev/disk/by-label/sys-boot does not exist14:45
_rubenits uuid isnt present under by-uuid either14:45
subhave you checked dmesg for any pertinent information?14:48
_rubenhmm .. blkid shows a different uuid than vol_id14:51
_rubendmesg doesnt show anything obvious14:52
subhave you tried mounting it using the partition's device?14:54
smoser_ruben, so you see that disk/partition somewhere ?14:55
smoserie, is it in /proc/partitions ?14:55
Boohbahsgsax: i've seen roundcube exploited in the wild quite a bit recently14:55
slestakSEENNICK cjwatson14:56
_rubensmoser: yes, it lists sda1 which is /boot .. its not under /dev/disk/by-{label,uuid} , but it is under /dev/disk/by-id and by-path14:57
jetsaredimis there a package for temperature/sensor monitoring for cli?14:57
smoserjetsaredim, lm-sensors ?14:58
sgsaxBoohbah: I don't manage it, my hosting provider provides it14:59
sgsaxand I rarely use it14:59
smoser_ruben, can you mount it  by device ? (not as a permenant solution, just wondering)14:59
_rubenyup .. using /dev/sda1 i can mount it just fine15:00
sgsax_ruben: bah, then who needs HAL anyway?15:00
_rubenpata flashdrive .. onboard sata controllers .. addon raidcard .. dont trust sdXY for my partitions in such cases :)15:01
RoyKjetsaredim: type 'sensors'15:02
RoyKjetsaredim: you need to setup lmsensors first, though15:02
jetsaredimit seems right15:02
jetsaredimtemperature sensor reporting 30 deg15:03
RoyKsome of those sensor drivers aren't very good, so try to find the right one for your hardware15:04
RoyKbut if it works, don't fix it15:04
jetsaredimyea15:04
smoser_ruben, is it ext[23] filesystem ? does e2label /dev/sda1 report a label?15:04
Sam-I-Amanyone here good with building packages?15:05
Sam-I-Amtrying to figure something out...15:05
maxb#ubuntu-motu is packaging help central15:05
Sam-I-Ammkay thx15:05
_rubensmoser: ext2, and yes it does report a label15:06
smoserhm... then i'm of no more help i think.  i just verified that setting a label and then removing it populates /dev/disk/by-label and then removes the entry15:07
smoserie, here that "just works".15:07
smoserany messages in dmesg about sda ?15:07
_rubennothing spectacular: http://pastebin.ubuntu.com/255754/15:08
smosermaybe udev is hosed...15:09
smosersudo udevadm trigger --verbose --dry-run --subsystem-match=block15:10
smoserdoes that show sda1 ? and maybe try without 'dry-run' to see if that does anything for you15:10
_ruben/sys/devices/pci0000:00/0000:00:07.1/host4/target4:0:0/4:0:0:0/block/sda/sda115:10
_rubenno change under /dev/disk/15:11
smoseroutside of that, i think i'm out of ideas... if udev is up, it "should" be populating that stuff for you.15:11
smoseryou ran without '--dry-run' ?15:11
_rubenyes15:11
smoserhm...15:11
smoseryeah, i'm out of ideas. sorry15:11
_rubenthanks for trying anyway :)15:13
smoserone more thing i guess... now i'm just confused15:14
smosersudo blkid15:14
_rubenit lists it by uuid and label15:14
_rubenyet vol_id lists another uuid15:14
_rubenhmm .. vol_id isnt working now15:15
smoserwhat release?15:20
smoserit kind of smells like vol_id is borked, which udev would rely on (i think).15:20
smoserhttps://bugs.launchpad.net/ubuntu/+source/udev/+bug/33701515:20
uvirtbotLaunchpad bug 337015 in udev "vol_id uuid detection regression" [Low,Fix released]15:20
Psi-JackThis is odd..15:20
Psi-JackI created my ssh keys from my desktop computer, which is kubuntu-9.04, transferred the keys to my router, added a password there, and then transferred that copy over to the rest of my servers.15:21
Psi-JackWhen I ssh from my router to my desktop, it asks for the password for the private key, which is expected. When I ssh from desktop to router, it's passwordless, also expected. But when I ssh to any other system in my network, it goes keyboard interactive, not even using the keys.15:22
sgsaxPsi-Jack: check value of PubkeyAuthentication in /etc/ssh/sshd_config15:23
Psi-JackIt's yes15:24
sgsaxalso, different versions of sshd will have a different value for AuthorizedKeysFile15:24
sgsaxso if there's any question, uncomment that line in the same file and specify the path15:24
Psi-JackHmm15:25
Psi-JackThat's not even in there.15:25
_rubensmoser: its a intrepid upgraded to jaunty (pxe env doesnt do jaunty yet) .. prob existed in intrepid as well i think (hoped the uprade to jaunty would fix it as a "bonus")15:25
Psi-JackThis is from 8.04->9.04, and 9.04->9.04 it's not working for.15:26
sgsaxPsi-Jack: see man sshd_config to find the default15:26
Psi-JackYeah, still no fixing it, so far.15:27
sgsaxdefault path should be the same on both releases15:27
Psi-JackYep.15:27
sgsaxcheck in /var/log/auth, see if anything shows up there15:27
sgsaxor wherever your auth logs show up15:27
Psi-JackOh. Suddenly NOW it starts working.15:28
sgsaxheh15:28
Psi-JackOh one system anyway.15:29
=== PhotoJim is now known as PhotoJim_
Psi-JackTwo systems stil not working with. heh, which is stupidly odd.15:32
sgsaxI suppose this goes without saying, but if you modified sshd_config on any host, then you need to restart the sshd service15:33
Psi-JackWell, yes, of course.15:34
sgsaxlook in their logs, see if anything helpful turns up15:34
sgsaxjust trying to cover all bases15:34
Steve[mbp]Morning everyon!15:35
Psi-JackOh..15:35
Psi-JackI wonder..15:35
Psi-Jackit's the eCryptFS!15:35
sgsaxhiya Steve[mbp], you must get your coffee early, either that or just naturally cheerful in the morning :)15:36
Psi-JackHeh15:36
Psi-JackYeah, eCryptFS on the home directory.15:36
Psi-JackNow, the question is, How the frack do I get just the authorized_keys into it non-encrypted?15:36
sgsaxso the hosts that aren't doing key auth don't have cryptfs loaded?15:36
Psi-Jackyes15:36
Psi-JackThe reason one started working suddenly, is because I was ssh'ing in a second time.15:37
Psi-JackSo the cryptfs home was mounted.15:37
sgsaxah15:37
Psi-JackHeh15:37
Psi-JackSo, I found one bug in the cryptfs home method!15:38
sgsaxwell done!15:38
ballWhat's a Nagios?15:38
Psi-Jackgoogle it.15:38
Psi-JackYou'll learn more.15:38
sgsaxball: centralized host monitoring system15:38
ballAh okay.15:39
sgsaxhttp://nagios.org/15:39
sgsaxvery flexible, very stable15:39
sgsaxit's what most shops use15:39
acalvosgsax: we've been using horde in my university for a long time15:40
acalvo_ruben: I really like roundcube15:40
acalvobut I don't think there's a package for ubuntu15:40
acalvo(at least not the last time I've searched for it)15:40
acalvoand sgsax, Zimbra is a collaborative suite, right?15:40
sgsaxyep15:40
sgsaxcurrently owned by yahoo15:41
Psi-JackUgh.15:42
sgsaxnew IT management wanted something Exchangey but without Exchange15:43
acalvodoes horde offers the same?15:43
sgsaxdon't think so, but roundcube does, to some extent15:43
acalvommm nice then15:43
sgsaxhorde is just webmail frontend to imap15:44
jmedinahow roundcube compare to exchange?15:44
acalvoisn't roundcube the same?15:44
jmedinathere is horde groupware with more collaboration tools15:44
sgsaxhrm, guess I haven't looked at roundcube in a while, I thought it also had collab tools15:45
jmedinaand horde webmail..15:45
Psi-JackOpenExchange is pretty much one of the best.15:45
acalvoin the open-source world, I realized everyone thinks X is the best15:46
Psi-JackI said, one of!15:46
Psi-JackNot THE15:46
acalvowell, it was an opinion15:46
jmedinayou really need to try at least 3 solutions and prepare a demo with real mail users....15:46
Psi-JackPrecisely.15:47
sgsaxyeah, that happened by committee here15:47
Psi-JackBang for buck, More of my clients had been happier with OpenExchange, and were more than willing to pay for it once they saw it in action.15:47
jmedinanormal users use mail systems different than admins and they also have different requirements15:47
acalvoI'm trying to configure a MTA with IMAP and a webclient, and I'm really confused with such a bunch of options there are out there15:47
sgsaxthe rest of us just got stuck with whatever the committee decided on15:47
sgsaxmy big problem is that was aren't even hosting it on campus15:47
sgsaxwe're paying yahoo to host it for us15:48
acalvo(I've just found Citadel, which should cover all my expectations...)15:48
Psi-JackCitadel is ... Okay... Not great but okay..15:48
jmedinayea...15:48
acalvoI'll keep with postfix+dovecot15:48
acalvoand all the headaches I'm having15:48
jmedina:)15:48
sgsaxthe biggest problem here was that most users were using horde for their primary email client15:48
sgsaxand it just couldn't keep up with the load, got bogged down real bad15:49
sgsaxtry throwing 20K users at horde for 12 hrs a day on a single server15:49
sgsaxpeople were always complaining about lag and downtime, when it was just horde buckling under the weight15:50
acalvowell, for 1,5k users on my old server, it work quite well15:50
sgsaxI'm sure it does15:51
sgsaxthose of us who use a desktop mail client rarely had problems15:51
sgsaxpersonally, I only use a webmail client if I have to15:51
sgsaxbecause I think they all kinda suck15:51
acalvowell, I don't grant my users to have access to the mail thru IMAP/POP3 outside the lan15:52
acalvoso, they're stuck with a webmail15:52
sgsaxah, that would be a problem15:52
acalvooh, and they complain15:52
acalvobut they also complain when the printer does not print, and they do it before checking it it's switched on...15:53
acalvos/it/if15:53
Psi-JackHmmm.16:23
Psi-JackAre ubuntu's pre-packaged nagios extensions extensive or minimal?16:24
jmedinaPsi-Jack: you mean nagios plugins?16:26
Psi-Jackplugins, yes.16:26
jmedinain main there is nagios-plugins-base with base plugins16:28
jmedinacheck the file list http://packages.ubuntu.com/jaunty/amd64/nagios-plugins-basic/filelist16:28
Psi-JackHmm, basic, yeah..16:29
Psi-JackMost of the very basics. Nothing for postgresql or mysql checks though.16:30
jmedina:)16:30
jmedinayou can help packaging those plugins16:30
Psi-JackAight, guess I'll add those manually then.16:30
Psi-JackHeh yea.. When I re-learn dpkg all over again.16:30
jmedinaand help other future users16:30
Psi-JackI haven't used deb/ubunutu in years..16:31
jtimbermanmathiaz: updated packages yesterday/last night with some more goods.16:31
jmedinathere is nagios-plugins-extra which only has check_fping and check_game...16:31
Psi-JackHeh yeah.16:32
Psi-JackWTF is check_game? LOL16:32
Psi-JackThis plugin tests game server connections with the specified host.16:32
Psi-JackOh.. My... I suddenly feel stupider by looking into that.16:32
mathiazjtimberman: yop - reviewing them now16:33
jtimbermanthanks!16:34
Psi-JackWell, hmm, it has check_pgsql, but it's very basic looking so far.16:46
Sam-I-Ammathiaz: you around?18:34
mathiazSam-I-Am: yop18:34
Sam-I-Ammathiaz: can you tell me what inside the openldap deb src package... or any package for that matter... determines which files from the original source tree get dumped into debian/build ?18:35
Sam-I-Ami'm trying to get nssov moved under debian/build... but can't seem to figure out whats handling that18:36
Sam-I-Ami'm also troubleshooting that nssov load failure... dynamic lib loader claims file not found, but its there... thinking the lib is borked.18:36
Sam-I-Ami noticed in nssov.la that the libpath points to /usr/local/libexec/openldap instead of /usr/lib/ldap ... not sure how much it matters, but its something i'm going to change before rebuilding18:37
mathiazSam-I-Am: the builddir is set in debian/rules18:38
mathiazSam-I-Am: right - I'd first focus on getting the nssov building fixed18:38
=== Faust-C2 is now known as Faust-C
Sam-I-Amyeah, which is debian/build for openldap... but how does it know which files from the source tree to move in there?  in other words, i see it copying server, client, doc, etc... but not contrib... which probably explains why nssov is getting built outside of the tree18:38
mathiazSam-I-Am: moving the nssov build to debian/builddir can be looked at the following step18:38
Sam-I-Amsure18:39
Sam-I-Ami'm just curious how stuff gets in there...18:39
Sam-I-Ami'm planning to fix the loading issue first18:39
mathiazSam-I-Am: right - contrib are not integrated in the main build process18:39
Sam-I-Ami dont see a bug for it btw... wondernig if i should create one and assign myself to it18:39
mathiazSam-I-Am: sure18:39
mathiazSam-I-Am: look a the configure-stamp target in debian/rules18:40
Sam-I-Ammmkay18:40
mathiazSam-I-Am: It seems that the upstream build scripts/infrastructure already supports building out-of-the tree18:41
Sam-I-Amok, then we'd have to manually clean the temp build files because dh_clean won't hit it, right?18:42
mathiazSam-I-Am: yes18:42
mathiazSam-I-Am: that seems the best option for now18:42
Sam-I-Amok, i wrote a patch for that already18:42
Sam-I-Amfor debian/rules18:42
mathiazSam-I-Am: and the build infrastructure from openldap doesn't support the contrib/18:42
Sam-I-Amk18:43
mathiazSam-I-Am: this is probably an Ubuntu specific patch18:43
Sam-I-Amyes, since deb doesnt do nssov18:43
mathiazSam-I-Am: as Debian doesn't build the nssoverlay18:43
mathiazSam-I-Am: to submit it to Ubuntu I'd suggest to use the bzr package branch18:43
Sam-I-Amok, i havent done that before18:45
mathiazSam-I-Am: https://wiki.ubuntu.com/DistributedDevelopment/Documentation/18:46
mathiazSam-I-Am: ^^ this is the documentation18:46
mathiazSam-I-Am: it's still a work in progress but should cover the whole workflow18:46
mathiazSam-I-Am: if you run into problems, ask me or james_w (in #ubuntu-devel)18:46
Sam-I-Amsure, no prob18:46
mathiazSam-I-Am: that will help us flesh the documentation18:47
mathiazSam-I-Am: that will help us flesh out the documentation18:47
Sam-I-Ami've been troubleshooting a prod issue all day so it'll be a bit before i can get back to the nssov thing18:47
Sam-I-Amkinda sucks when your VMs are getting maybe 6 mbit/s disk io18:47
luckyonehello all - can anyone help me figure out why I have a really high io wait (wa%) listed in top?19:29
luckyoneI want to find the offending process, if possible19:30
giovaniluckyone: sure, I can help with that19:30
luckyonegiovani: thanks! is there a way to sort top by wa%?19:30
giovaniwait time isn't measured per-process19:30
giovanionly total19:30
luckyonesome of the threads I have read point to incorrect RAID setup, but none were specific on what needs to be set19:31
giovanican you run a "ps aux" and pastebin the output?19:31
luckyonesure19:31
giovanisudo ps aux that is19:31
giovani(or run in a root shell, either way)19:31
luckyonesure thing19:32
luckyoneopening a new, non-screen ssh connection...19:32
luckyone(this takes forever now...)19:32
luckyoneso long in fact, ssh times out19:32
giovaniyeah, to be expected19:32
giovanido you have an existing session?19:32
luckyoneI do, I can't virtually scroll up in my screen session19:33
luckyonecommand is running19:33
giovaniyou can19:33
luckyonewill pastebin in just a minute19:33
giovanictrl-a [19:33
giovaniwill enter scrollback mode19:33
luckyoneright, you can - I can't (forgot how)19:33
giovani^^19:34
uvirtbotgiovani: Error: "^" is not a valid command.19:34
giovaniwhy not just redirect the output to a file, and then less, or pipe directly to less19:34
giovanieither way will work19:34
luckyoneyeah, totally19:35
giovanithe bottom line with really high io wait time19:35
giovaniis that either the disk is nearly dead19:35
giovanior HEAVILY fragmented19:35
luckyonehttp://pastie.org/58883319:36
giovanior, you're simply doing really heavy i/o operations, and very low cpu operations -- so the ratio gets out of balance, and the cpu ends up waiting for the io operations19:36
giovani(or you have some fringe case where it's a bad driver, etc)19:36
luckyonewell, the disk the OS is using is a CF drive running an ext2 filesystem19:36
giovaniheh19:37
luckyonebut, this is a recent problem - post upgrade to jaunty19:37
giovanisounds like a failing cf19:37
luckyonecrap, I hope not19:37
giovanicfs have really short wite lifespans19:37
luckyonelike how short?19:37
giovanilike, each sector can be written max a few thousand times19:37
giovaniwhich is why you generally don't put actively changing filesystems on them19:38
giovanii.e. filesystems where logs are written19:38
luckyoneright - that was why I put ext2 on it19:38
giovaniright ... but if you're writing a log file once per second ...19:38
giovaniyou'll quickly burn up those sectors19:38
luckyoneyeah...19:38
luckyonedamn..19:38
giovaniI can't be sure that it's the cause19:39
giovanibut it's the most likely19:39
luckyoneok19:39
giovaniI can run some tests with you19:39
luckyonesure thing19:39
giovanifirst run "vmstat 5 5"19:39
luckyonedo they make SSD drives that are compact flash form factor?19:39
giovanithen run "iostat"19:39
VogYep that happened to me when I used a cf to store logs on a firewall box...19:39
giovaniluckyone: no ... that's too tiny19:39
luckyonedang it19:39
giovaniluckyone: they do have microdrives19:39
giovaniwhich are super-tiny hard drives in the CF formfactor19:40
luckyonelow power too?19:40
giovanirelatively, yes19:40
giovaniwhat is the box, if you don't mind me asking19:40
luckyoneMSI Wind19:40
giovaniI mean, what's its function?19:40
luckyoneit is a 1 TB RAID 1 nas19:40
giovaniand why are you using a CF?19:40
luckyoneso the drives can completely spin down when not active19:40
giovaniwhy is the CF formfactor so important?19:41
giovaniwhat would be bad about using some tiny, cheap IDE/SATA drive for the OS?19:41
luckyoneI am out of room for regular drives19:41
luckyoneI have a CF slot on mobo19:42
giovaniohh, wait19:42
giovanithe wind19:42
giovanithis is a netbook19:42
luckyonenettop19:42
giovanique?19:42
luckyonegiovani: http://www.newegg.com/Product/Product.aspx?Item=N82E1685616703719:44
giovaniah ok19:44
luckyonethe older version... I have the N270 atom chipset19:44
luckyonenot the 33019:44
giovaniok19:44
giovanidid you run the commands I asked?19:45
luckyonehttp://pastie.org/58886319:47
ClasTrying to install Ubuntu 9.04 server 64bit version but installer stops and unable to install grub to hd0, centos installed grub ok but i dont like centos, anyone with some hints?19:48
Clasif i in the installer change to lilo, lilo installs ok19:49
cemchi. is it possible to boot from an ubuntu cd but to do a netinstall? I mean to get the packages from the network instead of the cd ?19:50
ClasIts a clean install with default partitions19:50
luckyonegiovani: http://pastie.org/58886319:50
giovaniluckyone: yeah ... your iowait isn't incredibly high, honestly19:51
giovaniI mean ... 10-20% shouldn't make the box unusable19:51
giovaniunless the disk is dying19:51
giovaniwhich it probably is19:51
luckyoneson of a19:51
luckyonethe cf drive is only like .75 years old19:52
giovanicemc: cemc yep -- http://archive.ubuntu.com/ubuntu/dists/jaunty/main/installer-i386/current/images/netboot/mini.iso19:52
giovaniluckyone: if you have system logs writing to it ... that's not old19:52
giovaniCF drives are very very cheap19:52
giovanithey're designed for write-once read-many storage19:53
giovaniClas: this is a grub error, unfortunately -- it's sometimes caused by a misunderstanding of which drive hd0 is19:54
giovaniClas: which install cd did you use?19:54
Clasgiovani ubuntu-9.04-server-amd64.iso19:56
Clasin patitioning the drive i just chose guded with lvm19:56
Clasand accepted the default19:57
giovaniClas: do you have multiple hard drives in the machine you're installing on?19:57
Clasgiovani its a promise sata raid with one 1.5 tb raid5 array made from 4 500gb disks19:59
luckyonegiovani: if you had a cf port available, what would you put in it as your disk for /20:01
RoyKsome 8GB CF card would do well20:02
giovaniRoyK: nope ... we've already discussed this20:02
RoyKdepending on how much stuff you need installed, obviously, and how much swap20:02
RoyKah20:02
giovaniluckyone: I'd use a microdrive if the CF slot was my only option20:02
RoyKgiovani: sorry :)20:02
giovaniRoyK: you clearly haven't worked with CFs much -- they're not useful for constantly written filesystems20:02
giovanilike a typical *nix /20:02
RoyKgiovani: microdrives aren't in production anymore20:03
Clasas it works with lilo is it ok to use it instead of grub or will i have troubble later on?20:03
RoyKalso, CFs are quite usable for a rootfs20:03
RoyKthere is built-in wear-leveling on all the recent (3+ years old) ones20:03
RoyKalso, if in panic, mirror two20:03
giovaniRoyK: he has one slot, period20:04
giovanino other disk options20:04
RoyKthen use one - the chance for an error in other stuff than logs is minimal20:04
RoyKonly the logs and perhaps tmp are written to20:04
giovaniand I'm not aware of any decent wear-leveling in use on standard consumer CF cards20:04
RoyKwhat is this? a file server?20:04
giovaniRoyK: he has what I assess to be a failing CF disk right now20:04
giovanithis is a file server, with the root partition stored on the CF20:05
cemcgiovani: thanks20:05
RoyKwith heavy logging, and with the logs on the root, lots of stuff will be written20:05
RoyKI'd do network syslog and no local for such a task20:06
giovaniexactly20:06
RoyKor at least nothing like debug/info/notice20:06
giovanior use ramdisk for it20:06
RoyKyeah20:06
RoyKerm20:06
luckyoneramdisk - link plz20:06
RoyKthat is - ramdisk + udp20:06
RoyKramdisk alone seems a little waste20:06
RoyKluckyone: mke2fs /dev/ram0 && mount /dev/ram0 /var/log20:08
RoyKfor instance20:08
giovanimight want to look at tiny core linux20:08
RoyKyou can set the max size, normally 64 megs, as a kernel option or an option upon loading the kernel module20:08
RoyKalthough ramdisk is hardlinked in ubuntu, so you need a boot option20:08
RoyKsee ramdisk= in man bootparam20:09
AdamDVHello, anyone active?20:10
AdamDVI am wondering how to backup user mail using maildirs with postfix and dovecot?20:10
luckyonethe machine has tons of ram for what it is being used for20:11
luckyonethis is not recommended - http://www.memorysuppliers.com/hi4gbmi4cofl.html20:13
henkjan    20:14
AdamDV 20:14
luckyone 20:14
RoyK 20:14
AdamDV 20:14
RoyKnice price - $45 for 4GB20:15
luckyonebetter option?20:15
RoyKa good sandisk card20:16
RoyKand reduced amount of writes to the root20:16
RoyKput /tmp and /var/log on ramfs20:16
RoyKfor a fileserver, those two are the only ones written to20:16
RoyKexcept /home and /root when someone logs in20:17
RoyKand they can be other places20:17
RoyKput /home on something large, keep /root as it is, on the root, but don't use it20:17
RoyKif found of putting source code under /usr/src, put that on spinning drives20:18
RoyKsetup network syslog (*.* @somehost in /etc/syslogd.conf) and allow just critical stuff to be written locally, perhaps also warnings, but then to a ram drive20:18
giovaniAdamDV: it's no different than backing up other files20:19
giovanimaildir uses directories and files ... back them up however you'd like20:19
RoyKluckyone: wouldn't this be quite sufficient?20:19
AdamDVgiovani: So, I can just copy off the releavant /home/user/mail folders20:19
AdamDVand then copy them back?20:19
luckyoneok, so - I should buy a new flash drive, then move my partitions so that only extremely static things are on /20:19
giovaniAdamDV: you mean in the event of an outage?20:19
giovaniwhy would you copy files back unless the originals were gone?20:19
AdamDVI'm re-installing, and need to backup mail.20:20
giovanioh, yes20:20
RoyKluckyone: that's my choice - get something from sandisk - that's good stuff20:20
giovanijust copy them20:20
AdamDVThat would work then?20:20
RoyKa little more expensive, but good, and fast20:20
giovaniAdamDV: as long as you copy everything, yes20:20
luckyoneRoyK: will you shoot me a link or an email of what /etc/fstab should look like?20:20
AdamDVI see.20:20
AdamDVOkay, thanks.20:20
RoyKluckyone: make sure to mkfs those ram drives you need at boot time (/etc/init.d/something). after that, just mount /dev/ram0 /some/place (or ram1 or ram2....)20:21
RoyKset ramdisk size to the size you want (man bootparam)20:22
RoyKthe ramdisk size isn't allocated statically like it was in the old days, it's just copy-on-write as always20:22
luckyoneI may just by another box to be my NAS....20:22
RoyKluckyone: try opensolaris :)20:22
RoyKthat stuff rocks20:23
giovaniuh20:23
RoyKat least for storage20:23
giovaniplease don't use zfs20:23
giovaniit's not stable20:23
RoyKit's rock fucking stable20:23
giovaniit's absolutely not20:23
RoyKI have a dozen servers running 24x7 on ZFS20:23
giovaniI have a friend running a 100TB+ farm20:23
RoyKit's _really_ stable20:23
RoyKwell, we only have some 70TB or so20:23
RoyKnot a hitch20:23
RoyKgiovani: what happened to him?20:24
RoyKwere using RAIDZ and one drive failed and then checksum on another while rebuilding? :)20:24
giovanihe used raidz as well20:24
RoyK/that's/ quite common, but not really ZFSs fault20:24
giovanihe had some corruption issues20:25
giovanihe runs a backup company20:25
giovanithat wasn't acceptable20:25
giovanihe moved back to Areca RAID cards20:25
giovaniwhich are rock-solid20:25
RoyKusually that's what happens - one drive goes down, replace the drive, rebuild, there's an error20:25
giovaniyep, and that might be fine for generated data20:25
RoyKAreca doesn't tell you about data loss with those sort of failures20:25
giovanibut not for critical backup data20:25
RoyKnormal RAID systems just corrupt the file20:26
giovaniRoyK: if you're checksuming your files you know20:26
RoyKraidz/zfs tells you20:26
giovanihe's found them to be rock-solid20:26
giovaniI trust his opinion -- since he has a very large setup20:26
RoyKthat's why you should use raidz220:26
giovani2 racks full20:26
RoyKsimilar to raid6 with checksums20:26
RoyKtwo racks for 100TB?20:26
RoyKI get 20TB into 4U with RAIDZ220:27
giovaniI said 100+20:27
RoyKincluding a root and some SSDs for caching20:27
luckyonedo you guys recommend a cheap NAS20:27
giovaniI'm not sure of his total size right now20:27
luckyonestandalone device?20:27
giovaniit's probably nearing 200TB20:27
RoyKluckyone: I recommend lots of drives, a fast SSD or two and opensolaris20:27
giovaniluckyone: what do you mean? a commercial product? or a platform for you to put linux on or what?20:27
RoyKgiovani: in my setup, 200TB fits into 40U, one rack :)20:27
RoyKerm20:28
RoyKyes20:28
giovaniRoyK: using what size drives? this wasn't built yesterday, it's grown over 5 years20:28
luckyonecommercial product, doesn't need to run linux20:28
giovaniluckyone: depends on your budget20:28
luckyone< $20020:28
luckyoneRAID 120:28
luckyoneI have the drives20:28
giovanino idea20:28
RoyKgiovani: opensolaris with raidz2 on supermicro boxes, 20TB in 4U, usable size20:29
giovaniRoyK: I asked what size disks ...20:29
RoyK1,5TB20:29
giovaniok, so there you go20:29
giovanithat's a MODERN drive20:29
giovanihis business has grown over 5 years20:29
giovanihe doesn't just drop all old storage20:29
giovaniso the older stuff is less dense, obviously20:29
RoyKsince there are 15 _data_ drives in a RAID set, this thing will be FAST even if the drives are just 7200rpm20:29
RoyKalso the SSD caching in ZFS is quite fancy20:30
giovaniRoyK: who's arguing speed? of course it's fast20:30
giovaniyou're arguing about what fits in a rack20:30
giovaniwhich is a product of the size of the drives more than anything else20:30
giovaniwhich has changed drastically over the years20:30
RoyKI just dismissed an old NetApp at work20:30
RoyK4+3+3+3U with a total of 2TB usable space20:30
giovanigood for you? heh20:30
RoyK:)20:31
giovaniNetApps are overpriced, but rock-solid20:31
error404notfoundwhen i upgrade a server, how do i know it needs a reboot?20:31
giovaniand if storage isn't your core-competency ...20:31
RoyKgiovani: ZFS is rock solid as well20:31
giovanierror404notfound: if you installed a new kernel20:31
RoyKit really is20:31
giovaniRoyK: that's not everyone's experience20:31
RoyKbut using raidz is not good20:31
giovanianyway, if storage isn't your core competency20:31
RoyKraidz2 can take a two-drive-failure20:31
giovaniit's best to outsource to a company that does it for a living20:31
error404notfoundgiovani, hmmm, and what if i dont reboot?20:31
RoyKusing raidz is NOT good20:31
giovanierror404notfound: then you don't run the new kernel you installed20:32
giovanifor example, my company20:32
error404notfoundgiovani, thats not a problem, uptime is what i need :P20:32
giovaniis not full of storage experts20:32
error404notfoundto brag :D20:32
RoyKgiovani: I bet you what happened was your friend used raidz (single parity), one drive failed, and during rebuild, things fucked up20:32
giovanierror404notfound: that's a shame -- you're probably missing out on security fixes20:32
error404notfoundgiovani, :D20:32
error404notfoundkidding20:32
giovaniRoyK: I don't know the details, I'm betting not, but there's no point in betting20:32
RoyKgiovani: no single-parity-solution can do that20:32
giovaniof course not20:33
giovanilet's stop -- you're trying to guess20:33
RoyKwell, Sun is using raidz in their NetApp-priced solutions20:33
RoyKSun is using opensolaris in that20:33
giovanigood for them, they're not NetApp20:33
RoyKor something similar20:33
RoyKgiovani: give me the details of how things broke and why it is Sun's fault and I might beleive you - just saying "it's not stable, but I don't know the details" is outright stupid20:34
giovaniit's not stupid -- it's offering the fact that alternate experiences exist, without having the details20:34
giovaniif you don't want to listen, by all means ... don't20:34
RoyKplease20:36
RoyKif I tell you ubuntu is worthless because a friend of mine had a server crash and I can't come up with any details, wouldn't that be a rather stupid thing for me to say?20:37
Faust-Ci wonder why no one can learn to accept others differences w/o resorting to name calling etc20:37
Faust-CRoyK, actually everyone is quite aware of opensolaris' instability, even Sun themselves20:37
RoyKFaust-C: strange thing they use it for their storage solutions, then20:38
Faust-Ctheir not banking on stability as much as they are banking on just trying to get people to switch because its new and innovative and does have some benefits compared to other solutions20:38
Faust-CRoyK, show me any solution that is fail proof20:38
Faust-Cthere is none20:38
RoyKFaust-C: can you document opensolaris' instability?20:38
Faust-Cwindows is highly unstable yet ppl use it everyday20:38
Faust-CRoyK, no but i can provide you with resources in regards to that20:38
Faust-Ctheir wiki, forum and irc room all are based around ISSUES20:39
RoyKFaust-C: for instance, Solaris 10 has nothing like dedup and in-kernel cifs. in-kernel cifs is in opensolaris, and dedup comes in february20:39
RoyKFaust-C: and ubuntu and ext-fucking-3 is so much better than zfs? gimmi a break20:39
RoyKI know linux pretty good, having worked with it daily for 10 years20:39
Faust-Cdoes it really matter which is better or matter what means more to you20:40
Faust-Cif it meets your needs then ok, if not oh well20:40
RoyKdon't misunderstand - we have more linux servers than solaris servers20:40
luckyoneI can get a microdrive for 20.0020:40
RoyKI'm just saying that for storage, opensolaris is way ahead of linux20:40
Faust-CRoyK, i have found areas that linux servers havent been able to fill20:40
Faust-CRoyK, and i agree tbh20:40
luckyonewould putting / on that be a simple and effective solution?20:40
Faust-Czfs is a amazing technology20:40
Faust-Cand thanksfully Sun made it opensource20:41
Faust-Cluckyone, yeah20:41
Faust-Cluckyone, can i suggest a alternative20:41
RoyKluckyone: erm, I'd use an SD drive and move the writing to something like a ram drive or the data drives20:41
Faust-Cluckyone, http://www.transcendusa.com/Products/CatList.asp?Func1No=1&FldNo=1820:41
RoyKluckyone: you can use the data drive set for /var and /tmp and stuff if you don't want ram drives20:41
Faust-Cluckyone, i used the ide flash module and i love it20:42
Faust-Cmakes OS faster while data is safe on a raid setup20:42
RoyKluckyone: the microdrive will also die, but when it does, it'll most likely DIE,20:42
luckyonegotcha20:42
RoyKFaust-C: he only has a CF slot available20:42
luckyonemicrodrive is not perm20:42
Psi-JackHmmm.20:42
Faust-Coh well they have CF cards as well20:42
luckyoneI need to look into ramdisk20:43
RoyKCF cards work well20:43
Faust-Cluckyone, keep it simple20:43
RoyKluckyone: and you have data drives - use them for /var and /tmp and so on20:43
Faust-Cdont go off on a tangent, keep it simple period20:43
giovaniluckyone: no drives are forever20:43
Psi-JackI've always wondered about this, but in some many cases, lm-sensors stuff, reports that.. For example, the min fan1 speed should be -1 RPM, div = 8.. Why the heck is it -1 and what's div for?20:43
giovaniluckyone: microdrives will fail before most normal hard drives20:43
RoyKor if you don't want to repartition, dd if=/dev/zero of=/storage/var bs=1M count=10k20:44
giovanibut long after a CF if you're writing to it20:44
RoyKand mkfs on that one20:44
RoyKmont it on /var20:44
RoyKdone20:44
RoyKgiovani: most CFs today can take 100k write ops20:44
RoyK_per_sector_20:44
RoyKwith wear leveling, that means _for_years_20:44
RoyKunless you use it for something doing very heavy logging20:45
Faust-Cwow20:45
RoyKbut don't use heavy logging20:45
Faust-Ci didnt know that, thanks for the info RoyK20:45
Faust-Cuse network logging server20:45
RoyKyeah, and perhaps log WARN and CRIT and so on to a file20:45
Psi-Jackrsyslog FTW!20:45
RoyK*.* @logserver in syslog.conf20:46
RoyKsyslogd -r20:46
Psi-Jack@@ would be better.20:46
RoyK20:46
Psi-JackUDP is so unreliable. :p20:46
RoyKwhy?20:46
RoyKnot really on LANs20:46
RoyKis @@ over tcp?20:46
Psi-JackYes, really, even on LANs.20:46
Psi-JackYep20:46
RoyKnot all syslogd versions support tcp, though20:47
luckyonegentlemen, thanks for the info - I have to go hop on a demo20:47
Psi-JackRoyK, So, use only those that do. D'uh. Or even better use RELP.20:47
luckyoneI will be back later to figure out how to not be so stupid20:47
luckyoneramdisk for logging/etc definitely makes sense20:47
RoyKPsi-Jack: udp works well on LANs20:47
luckyonebecause I have tons of ram20:47
RoyKPsi-Jack: and I don't syslog over the internet20:48
Psi-JackRoyK, Well, but not perfect, and without any type of guarantee.20:48
Psi-JackYes, I have seen, even over UDP over a LAN, messages being lost.20:48
RoyKPsi-Jack: how much data loss would you get over a full-duplex switched network?20:48
giovanidepends on the network obviously20:48
giovaniand the quality of the network gear20:48
Psi-JackRoyK, How heavilly loaded are the servers? How much logging occurs?20:49
Psi-JackYes, and what is the quality of the network gear, and recieving server?20:49
RoyKdata loss on ethernet is in 99,99999999999% a full/half duplex problem or bandwidth problem, and with most networks at gigabit speed today...20:49
RoyKduplex problems suck20:49
RoyKand have always done20:50
Psi-JackI even have a Gigabit network at home, but it's still possible to have issues. ;)20:50
maswanRoyK: go to 10GE, no half duplex there. :)20:53
RoyKmaswan: not on 1GE either20:54
RoyKonly 10 and 100 supports that stuff20:55
Psi-JackHeh20:55
RoyKit came from 10 with coax, and was obsoleted with TP on 100Mbps, but kept for compatibility (for what reason???)20:55
RoyKI've spent some hours debugging duplex problems with 100Mbps20:56
RoyKit sucks rather hard20:56
Psi-JackAnyway, Different topic20:58
Psi-Jacklm-sensors!20:58
Psi-JackWhat's up with weirdness in some computers' sensors?!20:58
sgsaxlack of standards and low-quality sensor chips20:59
Psi-JackI've always wondered about this, but in some many cases, lm-sensors stuff, reports that.. For example, the min fan1 speed should be -1 RPM, div = 8.. Why the heck is it -1 and what's div for?20:59
Psi-JackThat's from an HP desktop mini-tower.20:59
Psi-JackHehe, wierdness.21:02
Psi-JackApparently this same system, people had problems using the two SATA connectors on it, because BIOS itself didn't even support SATA at all.21:02
sgsaxnice21:05
sgsaxI've always had a dislike for HP desktops & laptops21:05
sgsaxcompaq too, for that matter21:05
Psi-JackHeh, Yeah.21:05
Psi-JackI have a P3 730Mhz Compaq desktop model, I can't boot without having some kind of keyboard attached. No way to stop the error about lacking keyboard!21:06
Psi-JackTis okay though. It's just my authentication server. ;)21:06
RoyKPsi-Jack: usually lm-detect or whatever it's called finds several drivers that "match" and only (if lucky) one of them really work21:06
RoyKs/$/s/21:06
Psi-JackHeh21:07
Psi-JackGreat!21:07
RoyKsensors-detect21:07
Psi-JackSo sensors is about pretty welll useless in some cases, or are just plain unreliable in almost every case.21:07
RoyKtry different versions of those that look somehow the same21:07
RoyKPsi-Jack: just spend some minutes to see if you can get good results from a driver. Usually you can21:08
RoyKbut not always21:08
Psi-JackHeh21:08
Psi-JackI usually just ran sensors-detect, made it go through everything, hit enter, to accept, blindly, and when it's done, I run it and see what the results are.21:08
maswanRoyK: No, there is half duplex in GE21:09
maswanRoyK: but autoneg is mandatory21:09
maswanRoyK: very early there was actually gige hubs21:09
RoyKPsi-Jack: as far as I have seen, the output, including errors, has been reproducable, so you can probably trust something that works now21:09
RoyKwtf!21:09
RoyKgigabit HUBS?21:09
Psi-JackHeh21:10
RoyKyou have to be quite drunk _and_ stoned to make something like that21:10
RoyKfrom http://en.wikipedia.org/wiki/Gigabit_ethernet "Half-duplex gigabit links connected through hubs are allowed by the specification but in the marketplace full-duplex with switches are normal."21:10
maswanRoyK: well, gige as a standard is actually quite old, and this was from the time where a 100Mbit switch was significantly more expensive than a 100Mbit hub21:10
RoyKanyway - I've never seen half duplex in gigE21:11
RoyKI've hardly seen 100Mbps hubs as well21:11
maswanno, me neither, I just know that the hubs existed briefly, and it is yet another case of a thing that should have gone away21:11
RoyKthey were quite early21:11
RoyKaround the 100Mbps days, switches became quite normal21:11
RoyKlast time I was using hubs in production, was back in 1996 or so while replacing a thin coax ethernet setup with a 3com-crap-hubs-but-although-twisted-pair-setup21:12
maswanyeah, I'm not sad to see them gone21:14
sgsaxall lm-sensors can get of my desktop mobo is CPU core temp21:22
Faust-Chmm lm-senses21:37
Faust-Csgsax, depends on the mobo as well and if the fans support controlling etc21:37
sgsaxpersonally, I'm more interested in temps than controlling fans21:37
Psi-JackYeah, fan speeds, and temps21:38
cemcI have a qlogic adapter on an ibm blade center, and ubuntu won't boot, it just drops me initramfs shell. any ideas?21:42
cemcI've downloaded the firmware, copied it in /lib/firmware and did a rmmod/modprobe qla2xxx, but it still can't find it21:43
* jmedina needs to try ubuntu on ibm bladecenter :S22:02
artillerytxHey guys i can't figure out how to get a subdomain to work22:14
artillerytxsometimes it works sometimes it doesn't... any ideas?22:14
KillMeNowfor DNS?22:14
artillerytxbind22:14
KillMeNowyea, it's easy22:14
KillMeNowif you are SOA for a main domain, it's just a IN A record addition22:15
KillMeNowso it would look like this as part of your zone record22:15
artillerytxwell i created an A name record and then created a virtual server with that domain name22:15
KillMeNowsubdomain    IN    A       <IP ADDRESS>22:15
KillMeNowdid you do a rndc reload?22:15
KillMeNowor /etc/init.d/bind restart ?22:16
artillerytxyeah in my wwmcd.org .hosts file i added swot.wwmcd.org IN A <IP ADDRESS>22:16
artillerytxyeah i thought i did22:16
artillerytxi can try the rndc reload22:16
KillMeNowdon't need the wwmdd.org as part of your IN A record22:16
KillMeNowjust the swot22:17
KillMeNowyou will need to reload the bind server to populate the subdomain22:17
artillerytxwhats the command to do that22:17
KillMeNowrndc reload22:18
KillMeNowor /etc/init.d/bind9 reload22:18
artillerytxit tells me rndc: connect failed 127.0.0.1#953: connection refused22:19
artillerytxkillmenow the only place i have 127.0.0.1 in my ifconfig is for the lo22:21
=== Authority is now known as Guest3246
uvirtbotNew bug: #413211 in lsb (main) "lsb_release crashed with ImportError in <module>() (dup-of: 383697)" [Undecided,New] https://launchpad.net/bugs/41321122:23
=== Guest3246 is now known as Authority
uvirtbotNew bug: #413077 in ubuntu "lsb_release crashed with ImportError in <module>() (dup-of: 383697)" [Undecided,New] https://launchpad.net/bugs/41307722:27
uvirtbotNew bug: #415352 in lsb (main) "lsb_release crashed with ImportError in <module>() (dup-of: 383697)" [Undecided,New] https://launchpad.net/bugs/41535222:27
artillerytxhow do you see the owner of a file22:30
artillerytxls -l22:31
uvirtbotNew bug: #415515 in lsb (main) "após update do 9.04 para o 9.10, no boot apareceu "!" (dup-of: 383697)" [Undecided,New] https://launchpad.net/bugs/41551522:31
uvirtbotNew bug: #413855 in lsb (main) "lsb_release crashed with ImportError in <module>() (dup-of: 383697)" [Undecided,New] https://launchpad.net/bugs/41385522:32
artillerytxSo anyone know how i can fix this22:33
KillMeNowsorry, work called22:34
artillerytxIts coo22:34
KillMeNowls -la will do it too Art22:34
KillMeNowi aliased ll to ls -la22:35
KillMeNowin .bashrc22:35
artillerytxDid you see what i said about when i run rndc22:35
artillerytx- rndc: connect failed: 127.0.0.1#953: connection refused22:35
KillMeNowso you can edit your .bashrc and add alias ll='ls -la'22:35
KillMeNowyea, you need to set up your config for rndc key22:35
KillMeNowjust do the /etc/init.d/bind9 restart22:35
artillerytxk that worked22:36
KillMeNowif you google that specific error you will find TONs of how to fix that error articles22:36
artillerytxyeah i see a ton but im not too sure what im supposed to do i can't find that conf. file22:36
choppyHello all, could use some help with a raid issue22:36
KillMeNowupdatedb22:36
KillMeNowthen do a locate22:36
KillMeNowlocate <filename>22:36
choppyEverything with my raid works, except I don't have links in /dev/disk/by-uuid for my /dev/md0 and /dev/md0p1 devices.22:37
KillMeNowif it's a hardware raid I may help, don't dink much with software raids22:37
choppyI'm using 9.0422:37
choppyany ideas?22:37
artillerytxi can run rndc-confgen to generate rndc.conf and copy that to named.com?22:37
KillMeNowi did mine by hand22:40
KillMeNowso ummm, yea...  don't know if doing the rndc-confgen will do that22:40
KillMeNowsounds right tho22:40
KillMeNowdid you google and find a walk through?22:40
artillerytxhttp://ubuntuforums.org/showthread.php?t=28139322:40
artillerytxi ran rndc-confgen and its just sitting there22:41
giovanichoppy: you don't need UUIDs for md devices22:43
giovanichoppy: you won't be able to mount them via UUID anyhow22:43
mathiazkirkland: hey - what do you think about the dh-make init script template?22:44
mathiazkirkland: /usr/share/debhelper/dh_make/debian/init.d.lsb.ex22:44
choppyI use to mount them that way in 6.0622:45
mathiazkirkland: does it use the status code you've added to the lsb package?22:45
giovanichoppy: there's no reason to22:45
giovanichoppy: md devices don't work the way regular drives do where they can come up in different orders22:45
giovanimd0 will be md022:45
giovaniit's why they're being mounted that way22:45
choppy I was wanting to avoid a posible name overlap if a brought in another md0 from another system.22:46
choppyor that was my thinking, might be flawed.22:46
choppyI guess the kernel won't try to assemble it if it's not listed in /etc/mdadm/mdadm.conf though22:48
choppyThanks for the respone giovani22:49
Psi-Jack_Okay. So, if I took the deb-src packages of linux-igd from 9.04, how would I compile that into a deb for 8.04 since linux-igd was completely skipped in hardy.22:50
Psi-Jack_?22:50
KillMeNowART:  http://www.linuxforums.org/forum/servers/6406-rndc-connect-failed-connection-refused.html22:51
artillerytxI added whatever rndc-confgen gave me to /etc/bind/named.conf22:51
KillMeNowcheck that link out for the rndc connect failed22:51
artillerytxand rndc reload still doesn't work22:51
Psi-Jack_Anyone able to help me with that?22:53
kirklandmathiaz: i saw it for the first time today, actually, reviewing condor22:58
mathiazkirkland: and what's your opinion on it?23:05
mathiazkirkland: IIUC it doesn't include your code for checking the status of a process?23:05
kirklandmathiaz: yeah, it crossed my mind to suggest to the maintainers to add that23:06
uvirtbotNew bug: #416155 in bacula (universe) "package bacula-director-mysql 2.4.4-1ubuntu5 failed to install/upgrade: el subproceso post-installation script return output code  error 1" [Undecided,New] https://launchpad.net/bugs/41615523:11

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!